superslate 0.9.0 → 0.11.0

package/dist/cli.js

@@ -1,102 +1,11 @@
 #!/usr/bin/env node
 // @bun
-var __create = Object.create;
-var __getProtoOf = Object.getPrototypeOf;
-var __defProp = Object.defineProperty;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-function __accessProp(key) {
-  return this[key];
-}
-var __toESMCache_node;
-var __toESMCache_esm;
-var __toESM = (mod, isNodeMode, target) => {
-  var canCache = mod != null && typeof mod === "object";
-  if (canCache) {
-    var cache = isNodeMode ? __toESMCache_node ??= new WeakMap : __toESMCache_esm ??= new WeakMap;
-    var cached = cache.get(mod);
-    if (cached)
-      return cached;
-  }
-  target = mod != null ? __create(__getProtoOf(mod)) : {};
-  const to = isNodeMode || !mod || !mod.__esModule || !__hasOwnProp.call(mod, "default") ? __defProp(target, "default", { value: mod, enumerable: true }) : target;
-  if (mod && typeof mod === "object" || typeof mod === "function") {
-    for (let key of __getOwnPropNames(mod))
-      if (!__hasOwnProp.call(to, key))
-        __defProp(to, key, {
-          get: __accessProp.bind(mod, key),
-          enumerable: true
-        });
-  }
-  if (canCache)
-    cache.set(mod, to);
-  return to;
-};
-var __commonJS = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
-
-// node_modules/sisteransi/src/index.js
-var require_src = __commonJS(function(exports, module) {
-  var ESC = "\x1B";
-  var CSI = `${ESC}[`;
-  var beep = "\x07";
-  var cursor = {
-    to(x, y) {
-      if (!y)
-        return `${CSI}${x + 1}G`;
-      return `${CSI}${y + 1};${x + 1}H`;
-    },
-    move(x, y) {
-      let ret = "";
-      if (x < 0)
-        ret += `${CSI}${-x}D`;
-      else if (x > 0)
-        ret += `${CSI}${x}C`;
-      if (y < 0)
-        ret += `${CSI}${-y}A`;
-      else if (y > 0)
-        ret += `${CSI}${y}B`;
-      return ret;
-    },
-    up: (count = 1) => `${CSI}${count}A`,
-    down: (count = 1) => `${CSI}${count}B`,
-    forward: (count = 1) => `${CSI}${count}C`,
-    backward: (count = 1) => `${CSI}${count}D`,
-    nextLine: (count = 1) => `${CSI}E`.repeat(count),
-    prevLine: (count = 1) => `${CSI}F`.repeat(count),
-    left: `${CSI}G`,
-    hide: `${CSI}?25l`,
-    show: `${CSI}?25h`,
-    save: `${ESC}7`,
-    restore: `${ESC}8`
-  };
-  var scroll = {
-    up: (count = 1) => `${CSI}S`.repeat(count),
-    down: (count = 1) => `${CSI}T`.repeat(count)
-  };
-  var erase = {
-    screen: `${CSI}2J`,
-    up: (count = 1) => `${CSI}1J`.repeat(count),
-    down: (count = 1) => `${CSI}J`.repeat(count),
-    line: `${CSI}2K`,
-    lineEnd: `${CSI}K`,
-    lineStart: `${CSI}1K`,
-    lines(count) {
-      let clear = "";
-      for (let i = 0;i < count; i++)
-        clear += this.line + (i < count - 1 ? cursor.up() : "");
-      if (count)
-        clear += cursor.left;
-      return clear;
-    }
-  };
-  module.exports = { cursor, scroll, erase, beep };
-});
 
 // node_modules/@clack/core/dist/index.mjs
 import { styleText } from "node:util";
 import { stdout, stdin } from "node:process";
-import * as l from "node:readline";
-import l__default from "node:readline";
+import * as f$1 from "node:readline";
+import f__default from "node:readline";
 
 // node_modules/fast-string-truncated-width/dist/utils.js
 var getCodePointsLength = (() => {
@@ -439,14 +348,66 @@ function wrapAnsi(string, columns, options) {
 `);
 }
 
+// node_modules/sisteransi/dist/index.js
+var ESC2 = "\x1B";
+var CSI2 = `${ESC2}[`;
+var cursor = {
+  to(x, y) {
+    if (!y)
+      return `${CSI2}${x + 1}G`;
+    return `${CSI2}${y + 1};${x + 1}H`;
+  },
+  move(x, y) {
+    let ret = "";
+    if (x < 0)
+      ret += `${CSI2}${-x}D`;
+    else if (x > 0)
+      ret += `${CSI2}${x}C`;
+    if (y < 0)
+      ret += `${CSI2}${-y}A`;
+    else if (y > 0)
+      ret += `${CSI2}${y}B`;
+    return ret;
+  },
+  up: (count = 1) => `${CSI2}${count}A`,
+  down: (count = 1) => `${CSI2}${count}B`,
+  forward: (count = 1) => `${CSI2}${count}C`,
+  backward: (count = 1) => `${CSI2}${count}D`,
+  nextLine: (count = 1) => `${CSI2}E`.repeat(count),
+  prevLine: (count = 1) => `${CSI2}F`.repeat(count),
+  left: `${CSI2}G`,
+  hide: `${CSI2}?25l`,
+  show: `${CSI2}?25h`,
+  save: `${ESC2}7`,
+  restore: `${ESC2}8`
+};
+var erase = {
+  screen: `${CSI2}2J`,
+  up: (count = 1) => `${CSI2}1J`.repeat(count),
+  down: (count = 1) => `${CSI2}J`.repeat(count),
+  line: `${CSI2}2K`,
+  lineEnd: `${CSI2}K`,
+  lineStart: `${CSI2}1K`,
+  lines(count) {
+    let clear = "";
+    for (let i = 0;i < count; i++)
+      clear += this.line + (i < count - 1 ? cursor.up() : "");
+    if (count)
+      clear += cursor.left;
+    return clear;
+  }
+};
+var clear = {
+  screen: `${ESC2}c`
+};
+
 // node_modules/@clack/core/dist/index.mjs
-var import_sisteransi = __toESM(require_src(), 1);
 import { ReadStream } from "node:tty";
-function findCursor(s, o, l) {
+function findCursor(o, s, l) {
   if (!l.some((r) => !r.disabled))
-    return s;
-  const t = s + o, n = Math.max(l.length - 1, 0), e = t < 0 ? n : t > n ? 0 : t;
-  return l[e]?.disabled ? findCursor(e, o < 0 ? -1 : 1, l) : e;
+    return o;
+  const t = o + s, n = Math.max(l.length - 1, 0), e = t < 0 ? n : t > n ? 0 : t;
+  return l[e]?.disabled ? findCursor(e, s < 0 ? -1 : 1, l) : e;
 }
 var a$1 = ["up", "down", "left", "right", "space", "enter", "cancel"];
 var t = [
@@ -536,43 +497,43 @@ function block({
   overwrite: o = true,
   hideCursor: n = true
 } = {}) {
-  const s = l.createInterface({
+  const s = f$1.createInterface({
     input: e,
     output: r,
     prompt: "",
     tabSize: 1
   });
-  l.emitKeypressEvents(e, s), e instanceof ReadStream && e.isTTY && e.setRawMode(true);
-  const t = (f, { name: a, sequence: w }) => {
-    const c = String(f);
-    if (isActionKey([c, a, w], "cancel")) {
-      n && r.write(import_sisteransi.cursor.show), process.exit(0);
+  f$1.emitKeypressEvents(e, s), e instanceof ReadStream && e.isTTY && e.setRawMode(true);
+  const t = (l, { name: i, sequence: p }) => {
+    const w = String(l);
+    if (isActionKey([w, i, p], "cancel")) {
+      n && r.write(cursor.show), process.exit(0);
       return;
     }
     if (!o)
       return;
-    const i = a === "return" ? 0 : -1, m = a === "return" ? -1 : 0;
-    l.moveCursor(r, i, m, () => {
-      l.clearLine(r, 1, () => {
+    const c = i === "return" ? 0 : -1, a = i === "return" ? -1 : 0;
+    f$1.moveCursor(r, c, a, () => {
+      f$1.clearLine(r, 1, () => {
         e.once("keypress", t);
       });
     });
   };
-  return n && r.write(import_sisteransi.cursor.hide), e.once("keypress", t), () => {
-    e.off("keypress", t), n && r.write(import_sisteransi.cursor.show), e instanceof ReadStream && e.isTTY && !R && e.setRawMode(false), s.terminal = false, s.close();
+  return n && r.write(cursor.hide), e.once("keypress", t), () => {
+    e.off("keypress", t), n && r.write(cursor.show), e instanceof ReadStream && e.isTTY && !R && e.setRawMode(false), s.terminal = false, s.close();
   };
 }
 var getColumns = (e) => ("columns" in e) && typeof e.columns == "number" ? e.columns : 80;
 var getRows = (e) => ("rows" in e) && typeof e.rows == "number" ? e.rows : 20;
 function wrapTextWithPrefix(e, r, o, n = o, s = o, t) {
-  const f = getColumns(e ?? stdout);
-  return wrapAnsi(r, f - o.length, {
+  const l = getColumns(e ?? stdout), i = dist_default2(o);
+  return wrapAnsi(r, l - i, {
     hard: true,
     trim: false
   }).split(`
-`).map((c, i, m) => {
-    const d = t ? t(c, i) : c;
-    return i === 0 ? `${n}${d}` : i === m.length - 1 ? `${s}${d}` : `${o}${d}`;
+`).map((c, a, g) => {
+    const m = t ? t(c, a) : c;
+    return a === 0 ? `${n}${m}` : a === g.length - 1 ? `${s}${m}` : `${o}${m}`;
   }).join(`
 `);
 }
@@ -583,8 +544,7 @@ function runValidation(e, a) {
   }
   return e(a);
 }
-
-class y {
+var C$1 = class C {
   input;
   output;
   _abortSignal;
@@ -635,16 +595,16 @@ class y {
           this.state = "cancel", this.close();
         }, { once: true });
       }
-      this.rl = l__default.createInterface({
+      this.rl = f__default.createInterface({
         input: this.input,
         tabSize: 2,
         prompt: "",
         escapeCodeTimeout: 50,
         terminal: true
       }), this.rl.prompt(), this.opts.initialUserInput !== undefined && this._setUserInput(this.opts.initialUserInput, true), this.input.on("keypress", this.onKeypress), setRawMode(this.input, true), this.output.on("resize", this.render), this.render(), this.once("submit", () => {
-        this.output.write(import_sisteransi.cursor.show), this.output.off("resize", this.render), setRawMode(this.input, false), t(this.value);
+        this.output.write(cursor.show), this.output.off("resize", this.render), setRawMode(this.input, false), t(this.value);
       }), this.once("cancel", () => {
-        this.output.write(import_sisteransi.cursor.show), this.output.off("resize", this.render), setRawMode(this.input, false), t(CANCEL_SYMBOL);
+        this.output.write(cursor.show), this.output.off("resize", this.render), setRawMode(this.input, false), t(CANCEL_SYMBOL);
       });
     });
   }
@@ -681,18 +641,18 @@ class y {
 `), setRawMode(this.input, false), this.rl?.close(), this.rl = undefined, this.emit(`${this.state}`, this.value), this.unsubscribe();
   }
   restoreCursor() {
-    const t = wrapAnsi(this._prevFrame, process.stdout.columns, { hard: true, trim: false }).split(`
+    const t = wrapAnsi(this._prevFrame, getColumns(this.output), { hard: true, trim: false }).split(`
 `).length - 1;
-    this.output.write(import_sisteransi.cursor.move(-999, t * -1));
+    this.output.write(cursor.move(-999, t * -1));
   }
   render() {
-    const t = wrapAnsi(this._render(this) ?? "", process.stdout.columns, {
+    const t = wrapAnsi(this._render(this) ?? "", getColumns(this.output), {
       hard: true,
       trim: false
     });
     if (t !== this._prevFrame) {
       if (this.state === "initial")
-        this.output.write(import_sisteransi.cursor.hide);
+        this.output.write(cursor.hide);
       else {
         const e = diffLines(this._prevFrame, t), i = getRows(this.output);
         if (this.restoreCursor(), e) {
@@ -703,33 +663,33 @@ class y {
             return;
           }
           if (e.lines.length === 1) {
-            this.output.write(import_sisteransi.cursor.move(0, n - r)), this.output.write(import_sisteransi.erase.lines(1));
+            this.output.write(cursor.move(0, n - r)), this.output.write(erase.lines(1));
             const o = t.split(`
 `);
-            this.output.write(o[n]), this._prevFrame = t, this.output.write(import_sisteransi.cursor.move(0, o.length - n - 1));
+            this.output.write(o[n]), this._prevFrame = t, this.output.write(cursor.move(0, o.length - n - 1));
             return;
           } else if (e.lines.length > 1) {
             if (s < r)
               n = s;
             else {
               const h = n - r;
-              h > 0 && this.output.write(import_sisteransi.cursor.move(0, h));
+              h > 0 && this.output.write(cursor.move(0, h));
             }
-            this.output.write(import_sisteransi.erase.down());
-            const f = t.split(`
+            this.output.write(erase.down());
+            const m = t.split(`
 `).slice(n);
-            this.output.write(f.join(`
+            this.output.write(m.join(`
 `)), this._prevFrame = t;
             return;
           }
         }
-        this.output.write(import_sisteransi.erase.down());
+        this.output.write(erase.down());
       }
       this.output.write(t), this.state === "initial" && (this.state = "active"), this._prevFrame = t;
     }
   }
-}
-class r extends y {
+};
+class r extends C$1 {
   get cursor() {
     return this.value ? 0 : 1;
   }
@@ -740,13 +700,13 @@ class r extends y {
     super(t, false), this.value = !!t.initialValue, this.on("userInput", () => {
       this.value = this._value;
     }), this.on("confirm", (i) => {
-      this.output.write(import_sisteransi.cursor.move(0, -1)), this.value = i, this.state = "submit", this.close();
+      this.output.write(cursor.move(0, -1)), this.value = i, this.state = "submit", this.close();
     }), this.on("cursor", () => {
       this.value = !this.value;
     });
   }
 }
-class a extends y {
+class a extends C$1 {
   options;
   cursor = 0;
   get _value() {
@@ -774,8 +734,8 @@ class a extends y {
   constructor(e) {
     super(e, false), this.options = e.options, this.value = [...e.initialValues ?? []];
     const i = Math.max(this.options.findIndex(({ value: t }) => t === e.cursorAt), 0);
-    this.cursor = this.options[i]?.disabled ? findCursor(i, 1, this.options) : i, this.on("key", (t, l) => {
-      l.name === "a" && this.toggleAll(), l.name === "i" && this.toggleInvert();
+    this.cursor = this.options[i]?.disabled ? findCursor(i, 1, this.options) : i, this.on("key", (t, s) => {
+      s.name === "a" && this.toggleAll(), s.name === "i" && this.toggleInvert(), s.name === undefined && t === "　" && this.toggleValue();
     }), this.on("cursor", (t) => {
       switch (t) {
         case "left":
@@ -793,7 +753,8 @@ class a extends y {
     });
   }
 }
-var u$1 = class u extends y {
+
+class u extends C$1 {
   _mask = "•";
   get cursor() {
     return this._cursor;
@@ -820,8 +781,8 @@ var u$1 = class u extends y {
       this.value === undefined && (this.value = "");
     });
   }
-};
-var n$1 = class n extends y {
+}
+var n$1 = class n extends C$1 {
   options;
   cursor = 0;
   get _selectedValue() {
@@ -849,7 +810,7 @@ var n$1 = class n extends y {
     });
   }
 };
-class n extends y {
+class n extends C$1 {
   get userInputWithCursor() {
     if (this.state === "submit")
       return this.userInput;
@@ -877,7 +838,6 @@ class n extends y {
 // node_modules/@clack/prompts/dist/index.mjs
 import { styleText as styleText2, stripVTControlCharacters } from "node:util";
 import process$1 from "node:process";
-var import_sisteransi2 = __toESM(require_src(), 1);
 function isUnicodeSupported() {
   if (process$1.platform !== "win32") {
     return process$1.env.TERM !== "linux";
@@ -886,8 +846,8 @@ function isUnicodeSupported() {
 }
 var unicode = isUnicodeSupported();
 var isCI = () => process.env.CI === "true";
-var isTTY = (o) => o.isTTY === true;
-var unicodeOr = (o, e) => unicode ? o : e;
+var isTTY = (e) => e.isTTY === true;
+var unicodeOr = (e, o) => unicode ? e : o;
 var S_STEP_ACTIVE = unicodeOr("◆", "*");
 var S_STEP_CANCEL = unicodeOr("■", "x");
 var S_STEP_ERROR = unicodeOr("▲", "x");
@@ -913,8 +873,8 @@ var S_INFO = unicodeOr("●", "•");
 var S_SUCCESS = unicodeOr("◆", "*");
 var S_WARN = unicodeOr("▲", "!");
 var S_ERROR = unicodeOr("■", "x");
-var symbol = (o) => {
-  switch (o) {
+var symbol = (e) => {
+  switch (e) {
     case "initial":
     case "active":
       return styleText2("cyan", S_STEP_ACTIVE);
@@ -1028,7 +988,7 @@ ${styleText2("gray", S_BAR_END)}  ` : "";
 
 `);
 };
-var password = (e) => new u$1({
+var password = (e) => new u({
   validate: e.validate,
   mask: e.mask ?? S_PASSWORD_MASK,
   signal: e.signal,
@@ -1064,85 +1024,103 @@ ${n}
     }
   }
 }).prompt();
-var W = (l) => styleText2("magenta", l);
+var Y = 30000;
+var Z = (c) => styleText2("magenta", c);
 var spinner = ({
-  indicator: l = "dots",
-  onCancel: h,
+  indicator: c = "dots",
+  onCancel: b,
   output: n = process.stdout,
-  cancelMessage: G,
-  errorMessage: O,
-  frames: E = unicode ? ["◒", "◐", "◓", "◑"] : ["•", "o", "O", "0"],
-  delay: F = unicode ? 80 : 120,
-  signal: m,
-  ...I
+  cancelMessage: _,
+  errorMessage: C,
+  frames: M = unicode ? ["◒", "◐", "◓", "◑"] : ["•", "o", "O", "0"],
+  delay: O = unicode ? 80 : 120,
+  signal: g,
+  ...E
 } = {}) => {
-  const u = isCI();
-  let M, T, d = false, S = false, s = "", p, w = performance.now();
-  const x = getColumns(n), k = I?.styleFrame ?? W, g = (e) => {
-    const r = e > 1 ? O ?? settings.messages.error : G ?? settings.messages.cancel;
-    S = e === 1, d && (a(r, e), S && typeof h == "function" && h());
-  }, f = () => g(2), i = () => g(1), A = () => {
-    process.on("uncaughtExceptionMonitor", f), process.on("unhandledRejection", f), process.on("SIGINT", i), process.on("SIGTERM", i), process.on("exit", g), m && m.addEventListener("abort", i);
-  }, H = () => {
-    process.removeListener("uncaughtExceptionMonitor", f), process.removeListener("unhandledRejection", f), process.removeListener("SIGINT", i), process.removeListener("SIGTERM", i), process.removeListener("exit", g), m && m.removeEventListener("abort", i);
-  }, y = () => {
-    if (p === undefined)
+  const u = isCI(), h = isAccessible(E.accessible);
+  let x, I, p = false, l = false, r = "", v, w = performance.now();
+  const y = getColumns(n), F = E?.styleFrame ?? Z, S = (e) => {
+    const s = e > 1 ? C ?? settings.messages.error : _ ?? settings.messages.cancel;
+    l = e === 1, p && (m(s, e), l && typeof b == "function" && b());
+  }, $ = () => S(2), a = () => S(1), H = () => {
+    process.on("uncaughtExceptionMonitor", $), process.on("unhandledRejection", $), process.on("SIGINT", a), process.on("SIGTERM", a), process.on("exit", S), g && g.addEventListener("abort", a);
+  }, B = () => {
+    process.removeListener("uncaughtExceptionMonitor", $), process.removeListener("unhandledRejection", $), process.removeListener("SIGINT", a), process.removeListener("SIGTERM", a), process.removeListener("exit", S), g && g.removeEventListener("abort", a);
+  }, R = () => {
+    if (v === undefined)
       return;
     u && n.write(`
 `);
-    const r = wrapAnsi(p, x, {
+    const s = wrapAnsi(v, y, {
       hard: true,
       trim: false
     }).split(`
 `);
-    r.length > 1 && n.write(import_sisteransi2.cursor.up(r.length - 1)), n.write(import_sisteransi2.cursor.to(0)), n.write(import_sisteransi2.erase.down());
-  }, C = (e) => e.replace(/\.+$/, ""), _ = (e) => {
-    const r = (performance.now() - e) / 1000, t = Math.floor(r / 60), o = Math.floor(r % 60);
-    return t > 0 ? `[${t}m ${o}s]` : `[${o}s]`;
-  }, N = I.withGuide ?? settings.withGuide, P = (e = "") => {
-    d = true, M = block({ output: n }), s = C(e), w = performance.now(), N && n.write(`${styleText2("gray", S_BAR)}
+    s.length > 1 && n.write(cursor.up(s.length - 1)), n.write(cursor.to(0)), n.write(erase.down());
+  }, L = (e) => e.replace(/\.+$/, ""), T = (e) => {
+    const s = (performance.now() - e) / 1000, i = Math.floor(s / 60), t = Math.floor(s % 60);
+    return i > 0 ? `[${i}m ${t}s]` : `[${t}s]`;
+  }, N = E.withGuide ?? settings.withGuide, P = (e = "") => {
+    if (p = true, l = false, r = L(e), w = performance.now(), H(), h) {
+      r !== "" && n.write(`${r}
+`), I = setInterval(() => {
+        n.write(r === "" ? `still working
+` : `still working: ${r}
+`);
+      }, Y);
+      return;
+    }
+    x = block({ output: n }), N && n.write(`${styleText2("gray", S_BAR)}
 `);
-    let r = 0, t = 0;
-    A(), T = setInterval(() => {
-      if (u && s === p)
+    let s = 0, i = 0;
+    I = setInterval(() => {
+      if (u && r === v)
         return;
-      y(), p = s;
-      const o = k(E[r]);
-      let v;
+      R(), v = r;
+      const t = F(M[s]);
+      let o;
       if (u)
-        v = `${o}  ${s}...`;
-      else if (l === "timer")
-        v = `${o}  ${s} ${_(w)}`;
+        o = `${t}  ${r}...`;
+      else if (c === "timer")
+        o = `${t}  ${r} ${T(w)}`;
       else {
-        const B = ".".repeat(Math.floor(t)).slice(0, 3);
-        v = `${o}  ${s}${B}`;
+        const j = ".".repeat(Math.floor(i)).slice(0, 3);
+        o = `${t}  ${r}${j}`;
       }
-      const j = wrapAnsi(v, x, {
+      const D = wrapAnsi(o, y, {
         hard: true,
         trim: false
       });
-      n.write(j), r = r + 1 < E.length ? r + 1 : 0, t = t < 4 ? t + 0.125 : 0;
-    }, F);
-  }, a = (e = "", r = 0, t = false) => {
-    if (!d)
-      return;
-    d = false, clearInterval(T), y();
-    const o = r === 0 ? styleText2("green", S_STEP_SUBMIT) : r === 1 ? styleText2("red", S_STEP_CANCEL) : styleText2("red", S_STEP_ERROR);
-    s = e ?? s, t || (l === "timer" ? n.write(`${o}  ${s} ${_(w)}
-`) : n.write(`${o}  ${s}
-`)), H(), M();
+      n.write(D), s = s + 1 < M.length ? s + 1 : 0, i = i < 4 ? i + 0.125 : 0;
+    }, O);
+  }, m = (e = "", s = 0, i = false) => {
+    if (p) {
+      if (p = false, l = s === 1, clearInterval(I), h || R(), r = e ?? r, !i)
+        if (h) {
+          const t = s === 1 ? _ ?? settings.messages.cancel : s === 2 ? C ?? settings.messages.error : "Done", o = r || t;
+          c === "timer" ? n.write(`${o} ${T(w)}
+`) : n.write(`${o}
+`);
+        } else {
+          const t = s === 0 ? styleText2("green", S_STEP_SUBMIT) : s === 1 ? styleText2("red", S_STEP_CANCEL) : styleText2("red", S_STEP_ERROR);
+          c === "timer" ? n.write(`${t}  ${r} ${T(w)}
+`) : n.write(`${t}  ${r}
+`);
+        }
+      B(), x?.();
+    }
   };
   return {
     start: P,
-    stop: (e = "") => a(e, 0),
+    stop: (e = "") => m(e, 0),
     message: (e = "") => {
-      s = C(e ?? s);
+      r = L(e ?? r);
     },
-    cancel: (e = "") => a(e, 1),
-    error: (e = "") => a(e, 2),
-    clear: () => a("", 0, true),
+    cancel: (e = "") => m(e, 1),
+    error: (e = "") => m(e, 2),
+    clear: () => m("", 0, true),
     get isCancelled() {
-      return S;
+      return l;
     }
   };
 };
@@ -1187,7 +1165,9 @@ function progress({
     error: r.error,
     clear: r.clear,
     advance: g,
-    isCancelled: r.isCancelled,
+    get isCancelled() {
+      return r.isCancelled;
+    },
     message: (t) => g(0, t)
   };
 }
@@ -1266,20 +1246,31 @@ var LICENSE_KEY_VARIABLE2 = "SUPERSLATE_LICENSE_KEY";
 var LICENSE_KEY_PREFIX = "SUPERSLATE-";
 
 // src/core.ts
+var KEBAB_CASE_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+var WHITESPACE_CHAR_RE = /\s/;
+var NPM_SCOPE_RE = /^@[a-z0-9][a-z0-9._-]*$/;
+var NEWLINE_CHAR_RE = /\r|\n/;
+var BRAND_NAME_RE = /^[\p{L}\p{N}](?:[\p{L}\p{N} ._-]*[\p{L}\p{N}])?$/u;
+var REGEX_SPECIAL_CHARS_RE = /[.*+?^${}()|[\]\\]/g;
+var ESCAPED_SOURCE_BRAND = SOURCE_BRAND_NAME.replace(REGEX_SPECIAL_CHARS_RE, "\\$&");
+var SOURCE_BRAND_RE = new RegExp(`\\b${ESCAPED_SOURCE_BRAND}\\b`, "gi");
+var ESCAPED_CLI_NAME = CLI_NAME2.replace(REGEX_SPECIAL_CHARS_RE, "\\$&");
+var SOURCE_DELIVERY_GUIDANCE_RE = new RegExp(`pnpm dlx ${ESCAPED_CLI_NAME}|bunx ${ESCAPED_CLI_NAME}|${ESCAPED_CLI_NAME} repository`, "i");
+var VENDOR_BOOTSTRAPPER_GUIDANCE_RE = new RegExp(`${ESCAPED_CLI_NAME}@\\d|public \`${ESCAPED_CLI_NAME}\` npm package`, "i");
 function validateAppName(value) {
   if (!value)
     return "App name is required.";
-  if (!/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(value)) {
+  if (!KEBAB_CASE_RE.test(value)) {
     return "App name must be kebab-case (lowercase letters, numbers, and single hyphens).";
   }
   return;
 }
 function normalizeScope(value) {
   const scope = value.startsWith("@") ? value : `@${value}`;
-  if (/\s/.test(scope)) {
+  if (WHITESPACE_CHAR_RE.test(scope)) {
     throw new Error("Use hyphens instead of spaces, for example test-package.");
   }
-  if (!/^@[a-z0-9][a-z0-9._-]*$/.test(scope)) {
+  if (!NPM_SCOPE_RE.test(scope)) {
     throw new Error("Use lowercase letters and numbers, with optional periods, underscores, or hyphens.");
   }
   return scope;
@@ -1287,13 +1278,13 @@ function normalizeScope(value) {
 function validateBrandName(value) {
   if (!value.trim())
     return "Brand name cannot be empty.";
-  if (/\r|\n/.test(value))
+  if (NEWLINE_CHAR_RE.test(value))
     return "Brand name must fit on one line.";
   if (value !== value.trim())
     return "Brand name cannot start or end with whitespace.";
   if (value.length > 48)
     return "Brand name must be 48 characters or less.";
-  if (!/^[\p{L}\p{N}](?:[\p{L}\p{N} ._-]*[\p{L}\p{N}])?$/u.test(value)) {
+  if (!BRAND_NAME_RE.test(value)) {
     return "Brand name may contain letters, numbers, spaces, periods, underscores, and hyphens.";
   }
   return;
@@ -1303,12 +1294,43 @@ var SCOPE_EXTENSIONS = new Set([".json", ".jsonc", ".md", ".ts", ".tsx", ".yaml"
 // src/core.ts
 import { randomBytes } from "node:crypto";
 import { extname } from "node:path";
+var KEBAB_CASE_RE2 = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+var WHITESPACE_CHAR_RE2 = /\s/;
+var NPM_SCOPE_RE2 = /^@[a-z0-9][a-z0-9._-]*$/;
+var NEWLINE_CHAR_RE2 = /\r|\n/;
+var BRAND_NAME_RE2 = /^[\p{L}\p{N}](?:[\p{L}\p{N} ._-]*[\p{L}\p{N}])?$/u;
+var REGEX_SPECIAL_CHARS_RE2 = /[.*+?^${}()|[\]\\]/g;
+var NON_ALPHANUMERIC_CHAR_RE = /[^a-z0-9]/g;
+var LEADING_DIGIT_RE = /^[0-9]/;
+var HTTP_PROTOCOL_RE = /^https?:\/\//;
+var APP_DOMAIN_RE = /^(?=.{1,253}$)[a-z0-9](?:[a-z0-9-]*[a-z0-9])?(?:\.[a-z0-9](?:[a-z0-9-]*[a-z0-9])?)+$/;
+var BUNDLE_IDENTIFIER_RE = /^[a-z][a-z0-9_]*(?:\.[a-z][a-z0-9_]*){2,}$/;
+var MOBILE_APP_SCHEME_LINE_RE = /^MOBILE_APP_SCHEME=.*$/m;
+var MOBILE_DOCS_SOURCE_LINE_RE = /^\s*'mobile\.md',\n/m;
+var MOBILE_EDITION_SECTION_RE = /^## Mobile edition\n[\s\S]*?(?=^## |(?![\s\S]))/m;
+var MOBILE_TABLE_ROW_RE = /^\| `apps\/mobile` .*\n/gm;
+var MOBILE_PARAGRAPH_RE = /^`apps\/mobile`[\s\S]*?(?:\n\n|\n?(?![\s\S]))/gm;
+var MOBILE_DOCS_LINK_RE = /\[([^\]]+)\]\(\.\/mobile\.md(?:#[^)]*)?\)/g;
+var NAMED_IMPORT_LINE_RE = /^(\s*)(import(?:\s+type)?\s+)\{([^}]+)\}(\s+from\s+.+)$/;
+var WHITESPACE_RE = /\s+/;
+var INTERNAL_AGENT_REFERENCE_RE = /internal\/|landing\/|seller-surface|studio-owned/i;
+var INTERNAL_CLAUDE_REFERENCE_RE = /internal\/|landing\/|studio-owned/i;
+var BETTER_AUTH_SECRET_LINE_RE = /^BETTER_AUTH_SECRET=.*$/m;
+var HEX_64_RE = /^[a-f0-9]{64}$/;
+var DATABASE_URL_LINE_RE = /^DATABASE_URL=.*$/m;
+var GHA_CREDS_FILE_RE = /^gha-creds-.*\.json$/;
+var ESCAPED_SOURCE_BRAND2 = SOURCE_BRAND_NAME.replace(REGEX_SPECIAL_CHARS_RE2, "\\$&");
+var SOURCE_BRAND_RE2 = new RegExp(`\\b${ESCAPED_SOURCE_BRAND2}\\b`, "gi");
+var ESCAPED_CLI_NAME2 = CLI_NAME2.replace(REGEX_SPECIAL_CHARS_RE2, "\\$&");
+var SOURCE_DELIVERY_GUIDANCE_RE2 = new RegExp(`pnpm dlx ${ESCAPED_CLI_NAME2}|bunx ${ESCAPED_CLI_NAME2}|${ESCAPED_CLI_NAME2} repository`, "i");
+var VENDOR_BOOTSTRAPPER_GUIDANCE_RE2 = new RegExp(`${ESCAPED_CLI_NAME2}@\\d|public \`${ESCAPED_CLI_NAME2}\` npm package`, "i");
 var BRAND_MANIFEST = [
   { path: "apps/web/src/configs/config.ts", occurrences: 2 },
   { path: "apps/web/index.html", occurrences: 4 },
   { path: "apps/web/public/favicon/site.webmanifest", occurrences: 2 },
   { path: "apps/web/public/offline.html", occurrences: 6 },
   { path: "apps/docs/lib/shared.ts", occurrences: 1 },
+  { path: "apps/site/src/site.ts", occurrences: 1 },
   { path: "apps/docs/README.md", occurrences: 1 },
   { path: "README.md", occurrences: 1 },
   { path: "docs/meta.json", occurrences: 1 },
@@ -1351,17 +1373,17 @@ var UNIVERSAL_LINK_PATH_PREFIXES = ["/auth", "/invitations"];
 function validateAppName2(value) {
   if (!value)
     return "App name is required.";
-  if (!/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(value)) {
+  if (!KEBAB_CASE_RE2.test(value)) {
     return "App name must be kebab-case (lowercase letters, numbers, and single hyphens).";
   }
   return;
 }
 function normalizeScope2(value) {
   const scope = value.startsWith("@") ? value : `@${value}`;
-  if (/\s/.test(scope)) {
+  if (WHITESPACE_CHAR_RE2.test(scope)) {
     throw new Error("Use hyphens instead of spaces, for example test-package.");
   }
-  if (!/^@[a-z0-9][a-z0-9._-]*$/.test(scope)) {
+  if (!NPM_SCOPE_RE2.test(scope)) {
     throw new Error("Use lowercase letters and numbers, with optional periods, underscores, or hyphens.");
   }
   return scope;
@@ -1369,13 +1391,13 @@ function normalizeScope2(value) {
 function validateBrandName2(value) {
   if (!value.trim())
     return "Brand name cannot be empty.";
-  if (/\r|\n/.test(value))
+  if (NEWLINE_CHAR_RE2.test(value))
     return "Brand name must fit on one line.";
   if (value !== value.trim())
     return "Brand name cannot start or end with whitespace.";
   if (value.length > 48)
     return "Brand name must be 48 characters or less.";
-  if (!/^[\p{L}\p{N}](?:[\p{L}\p{N} ._-]*[\p{L}\p{N}])?$/u.test(value)) {
+  if (!BRAND_NAME_RE2.test(value)) {
     return "Brand name may contain letters, numbers, spaces, periods, underscores, and hyphens.";
   }
   return;
@@ -1393,13 +1415,11 @@ function rewriteBrandContent(content, brandName) {
   const error = validateBrandName2(brandName);
   if (error)
     throw new Error(error);
-  const escapedSourceBrand = SOURCE_BRAND_NAME.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-  const sourceBrandPattern = new RegExp(`\\b${escapedSourceBrand}\\b`, "gi");
-  const matches = content.match(sourceBrandPattern);
+  const matches = content.match(SOURCE_BRAND_RE2);
   if (brandName === SOURCE_BRAND_NAME || !matches)
     return { content, replacements: 0 };
   return {
-    content: content.replace(sourceBrandPattern, () => brandName),
+    content: content.replace(SOURCE_BRAND_RE2, () => brandName),
     replacements: matches.length
   };
 }
@@ -1410,17 +1430,17 @@ function mobileSchemeFor(appName) {
   return appName;
 }
 function androidPackageSegment(appName) {
-  const segment = appName.replace(/[^a-z0-9]/g, "");
-  return /^[0-9]/.test(segment) || !segment ? `app${segment}` : segment;
+  const segment = appName.replace(NON_ALPHANUMERIC_CHAR_RE, "");
+  return LEADING_DIGIT_RE.test(segment) || !segment ? `app${segment}` : segment;
 }
 function validateAppDomain(value) {
   if (!value.trim())
     return "Application domain cannot be empty.";
-  if (/^https?:\/\//.test(value))
+  if (HTTP_PROTOCOL_RE.test(value))
     return "Use a bare host such as app.example.com, not a URL.";
   if (value.includes("/"))
     return "Use a bare host such as app.example.com, with no path.";
-  if (!/^(?=.{1,253}$)[a-z0-9](?:[a-z0-9-]*[a-z0-9])?(?:\.[a-z0-9](?:[a-z0-9-]*[a-z0-9])?)+$/.test(value)) {
+  if (!APP_DOMAIN_RE.test(value)) {
     return "Use a lowercase hostname with at least two labels, for example app.example.com.";
   }
   return;
@@ -1428,7 +1448,7 @@ function validateAppDomain(value) {
 function validateBundleIdentifier(value) {
   if (!value.trim())
     return "Bundle identifier cannot be empty.";
-  if (!/^[a-z][a-z0-9_]*(?:\.[a-z][a-z0-9_]*){2,}$/.test(value)) {
+  if (!BUNDLE_IDENTIFIER_RE.test(value)) {
     return "Use at least three lowercase reverse-DNS segments, for example com.example.app.";
   }
   return;
@@ -1505,11 +1525,11 @@ function rewriteMobileAppConfig(content, identity) {
 `;
 }
 function rewriteMobileAppScheme(content, scheme) {
-  if (!/^MOBILE_APP_SCHEME=.*$/m.test(content)) {
+  if (!MOBILE_APP_SCHEME_LINE_RE.test(content)) {
     throw new Error("Server .env.example must contain a MOBILE_APP_SCHEME entry.");
   }
   return {
-    content: content.replace(/^MOBILE_APP_SCHEME=.*$/m, `MOBILE_APP_SCHEME=${scheme}`),
+    content: content.replace(MOBILE_APP_SCHEME_LINE_RE, `MOBILE_APP_SCHEME=${scheme}`),
     replacements: 1
   };
 }
@@ -1574,10 +1594,10 @@ function stripMobileDocsPage(content) {
 `;
 }
 function stripMobileDocsSource(content) {
-  return content.replace(/^\s*'mobile\.md',\n/m, "");
+  return content.replace(MOBILE_DOCS_SOURCE_LINE_RE, "");
 }
 function stripMobileDocsReferences(content) {
-  return content.replace(/^## Mobile edition\n[\s\S]*?(?=^## |(?![\s\S]))/m, "").replace(/^\| `apps\/mobile` .*\n/gm, "").replace(/^`apps\/mobile`[\s\S]*?(?:\n\n|\n?(?![\s\S]))/gm, "").replace(/\[([^\]]+)\]\(\.\/mobile\.md(?:#[^)]*)?\)/g, "$1");
+  return content.replace(MOBILE_EDITION_SECTION_RE, "").replace(MOBILE_TABLE_ROW_RE, "").replace(MOBILE_PARAGRAPH_RE, "").replace(MOBILE_DOCS_LINK_RE, "$1");
 }
 function formatRewrittenPackageJson(content) {
   const parsed = JSON.parse(content);
@@ -1600,7 +1620,7 @@ function wrapLongNamedImports(content, width = 100) {
 `).map((line) => {
     if (line.length <= width)
       return line;
-    const match = line.match(/^(\s*)(import(?:\s+type)?\s+)\{([^}]+)\}(\s+from\s+.+)$/);
+    const match = line.match(NAMED_IMPORT_LINE_RE);
     if (!match)
       return line;
     const [, indentation = "", prefix = "", names = "", suffix = ""] = match;
@@ -1644,7 +1664,7 @@ function wrapBrandedJsxText(content, brandName, width = 100) {
       continue;
     }
     let current = indentation;
-    for (const word of joined.split(/\s+/)) {
+    for (const word of joined.split(WHITESPACE_RE)) {
       const candidate = current === indentation ? `${indentation}${word}` : `${current} ${word}`;
       if (candidate.length > width && current !== indentation) {
         output.push(current);
@@ -1682,6 +1702,16 @@ function rewriteWorkerName(content, appName) {
     return { content, replacements: 0 };
   return { content: content.replace(WORKER_NAME_DECLARATION, replacement), replacements: 1 };
 }
+var JSONC_WORKER_NAME_FIELD = /("name":\s*")[^"]*(")/;
+function rewriteSiteWorkerName(content, appName) {
+  const error = validateAppName2(appName);
+  if (error)
+    throw new Error(error);
+  if (!JSONC_WORKER_NAME_FIELD.test(content)) {
+    throw new Error("The site Worker configuration is missing a name field.");
+  }
+  return content.replace(JSONC_WORKER_NAME_FIELD, `$1${appName}-site$2`);
+}
 function replaceMarkdownSection(content, heading, replacement) {
   const marker = `## ${heading}
 `;
@@ -1711,7 +1741,7 @@ function removeParagraphContaining(content, fragment) {
 `);
 }
 function rewriteBuyerAgentInstructions(content) {
-  if (content.includes("Audit and remediate the complete buyer-owned SaaS application") && !/internal\/|landing\/|seller-surface|studio-owned/i.test(content)) {
+  if (content.includes("Audit and remediate the complete buyer-owned SaaS application") && !INTERNAL_AGENT_REFERENCE_RE.test(content)) {
     return content;
   }
   let rewritten = removeParagraphContaining(content, "`internal/` holds every seller-only surface");
@@ -1729,7 +1759,7 @@ into this repository.
   rewritten = rewritten.split(`
 `).filter((line) => !line.includes("| `internal`")).join(`
 `).replace("real env files, `internal/`, or\n  `bun.lock`", "real env files, or `bun.lock`");
-  if (/internal\/|landing\/|seller-surface|studio-owned/i.test(rewritten)) {
+  if (INTERNAL_AGENT_REFERENCE_RE.test(rewritten)) {
     throw new Error("Buyer agent instructions still contain seller-only guidance.");
   }
   return rewritten;
@@ -1793,10 +1823,10 @@ function stripSellerOnlyRootScripts(content) {
 `;
 }
 function rewriteBuyerClaudeInstructions(content) {
-  if (!/internal\/|landing\/|studio-owned/i.test(content))
+  if (!INTERNAL_CLAUDE_REFERENCE_RE.test(content))
     return content;
   const rewritten = removeParagraphContaining(content, "`internal/landing/AGENTS.md`");
-  if (/internal\/|landing\/|studio-owned/i.test(rewritten)) {
+  if (INTERNAL_CLAUDE_REFERENCE_RE.test(rewritten)) {
     throw new Error("Buyer Claude instructions still contain seller-only guidance.");
   }
   return rewritten;
@@ -1805,8 +1835,7 @@ function rewriteBuyerSetupInstructions(content) {
   if (!content.includes("## Create a product repository"))
     return content;
   const rewritten = replaceMarkdownSection(content, "Create a product repository", "");
-  const escapedCliName = CLI_NAME2.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-  if (new RegExp(`pnpm dlx ${escapedCliName}|bunx ${escapedCliName}|${escapedCliName} repository`, "i").test(rewritten)) {
+  if (SOURCE_DELIVERY_GUIDANCE_RE2.test(rewritten)) {
     throw new Error("Buyer setup instructions still contain source-delivery guidance.");
   }
   return rewritten;
@@ -1815,30 +1844,29 @@ function rewriteBuyerReleaseInstructions(content) {
   if (!content.includes("## npm bootstrapper"))
     return content;
   const rewritten = replaceMarkdownSection(content, "npm bootstrapper", "");
-  const escapedCliName = CLI_NAME2.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-  if (new RegExp(`${escapedCliName}@\\d|public \`${escapedCliName}\` npm package`, "i").test(rewritten)) {
+  if (VENDOR_BOOTSTRAPPER_GUIDANCE_RE2.test(rewritten)) {
     throw new Error("Buyer release instructions still contain vendor bootstrapper guidance.");
   }
   return rewritten;
 }
 function generateStartDevVars(example, secret = randomBytes(32).toString("base64")) {
-  if (!/^BETTER_AUTH_SECRET=.*$/m.test(example)) {
+  if (!BETTER_AUTH_SECRET_LINE_RE.test(example)) {
     throw new Error("apps/start/.dev.vars.example must contain a BETTER_AUTH_SECRET entry.");
   }
-  return example.replace(/^BETTER_AUTH_SECRET=.*$/m, `BETTER_AUTH_SECRET=${secret}`);
+  return example.replace(BETTER_AUTH_SECRET_LINE_RE, `BETTER_AUTH_SECRET=${secret}`);
 }
 function generateServerEnv(example, secret = randomBytes(32).toString("hex"), databasePort = 5432) {
-  if (!/^[a-f0-9]{64}$/.test(secret)) {
+  if (!HEX_64_RE.test(secret)) {
     throw new Error("Better Auth secret must be 32 bytes encoded as hex.");
   }
-  if (!/^DATABASE_URL=.*$/m.test(example) || !/^BETTER_AUTH_SECRET=.*$/m.test(example)) {
+  if (!DATABASE_URL_LINE_RE.test(example) || !BETTER_AUTH_SECRET_LINE_RE.test(example)) {
     throw new Error("Server .env.example must contain DATABASE_URL and BETTER_AUTH_SECRET entries.");
   }
   if (!Number.isInteger(databasePort) || databasePort < 1 || databasePort > 65535) {
     throw new Error("Database port must be an integer between 1 and 65535.");
   }
   const databaseUrl = `postgresql://app:app@localhost:${databasePort}/app?sslmode=disable`;
-  return example.replace(/^DATABASE_URL=.*$/m, `DATABASE_URL=${databaseUrl}`).replace(/^BETTER_AUTH_SECRET=.*$/m, `BETTER_AUTH_SECRET=${secret}`);
+  return example.replace(DATABASE_URL_LINE_RE, `DATABASE_URL=${databaseUrl}`).replace(BETTER_AUTH_SECRET_LINE_RE, `BETTER_AUTH_SECRET=${secret}`);
 }
 var SCOPE_EXTENSIONS2 = new Set([".json", ".jsonc", ".md", ".ts", ".tsx", ".yaml", ".yml"]);
 function isScopeRewriteFile(path) {
@@ -1871,7 +1899,7 @@ function isTemplatePathExcluded(relativePath) {
     if ([".expo", "android", "ios", "credentials", "dist-verify"].includes(mobileEntry))
       return true;
   }
-  if (parts.includes(".wrangler"))
+  if (parts.includes(".wrangler") || parts.includes(".astro"))
     return true;
   if (parts.includes("dist") || parts.includes("out"))
     return true;
@@ -1883,7 +1911,7 @@ function isTemplatePathExcluded(relativePath) {
     return true;
   if (basename.endsWith(".tfvars") || basename === "backend.hcl")
     return true;
-  if (basename.includes(".tfstate") || /^gha-creds-.*\.json$/.test(basename))
+  if (basename.includes(".tfstate") || GHA_CREDS_FILE_RE.test(basename))
     return true;
   if (normalized === "PLAN.md" || normalized === "comments.md")
     return true;
@@ -1907,6 +1935,13 @@ function isTemplatePathExcluded(relativePath) {
 }
 
 // src/editions.ts
+var NON_INDENTED_LINE_RE = /^\S/;
+var IMPORTER_KEY_LINE_RE = /^ {2}(\S[^:]*):\s*$/;
+var EXTRA_BLANK_LINES_RE = /\n{3,}/g;
+var START_TABLE_ROW_RE = /^\| `apps\/start` .*\n/gm;
+var START_PARAGRAPH_RE = /^`apps\/start`[\s\S]*?(?:\n\n|\n?(?![\s\S]))/gm;
+var WORKER_NAME_FIELD_RE = /("name":\s*")[^"]+(")/;
+var DATABASE_NAME_FIELD_RE = /("database_name":\s*")[^"]+(")/;
 var EDITION_NAMES = ["web", "mobile", "start"];
 var START_EDITION_PATHS = ["apps/start", ".github/workflows/deploy-start.yml"];
 var START_EDITION_OVERLAY = "apps/start/edition";
@@ -1916,6 +1951,7 @@ var START_ROOT_CONTRACTS = {
 };
 var START_ONLY_KEPT_PATHS = [
   "apps/start",
+  "apps/site",
   "packages/billing",
   "packages/tsconfig",
   ".github/workflows/deploy-start.yml",
@@ -1953,14 +1989,14 @@ function pruneLockfileImporters(content, removedImporters) {
   let inImporters = false;
   let skipping = false;
   for (const line of lines) {
-    if (/^\S/.test(line)) {
+    if (NON_INDENTED_LINE_RE.test(line)) {
       inImporters = line === "importers:";
       skipping = false;
       output.push(line);
       continue;
     }
     if (inImporters) {
-      const importer = line.match(/^ {2}(\S[^:]*):\s*$/)?.[1];
+      const importer = line.match(IMPORTER_KEY_LINE_RE)?.[1];
       if (importer !== undefined)
         skipping = removed.has(importer);
       if (skipping)
@@ -1969,7 +2005,7 @@ function pruneLockfileImporters(content, removedImporters) {
     output.push(line);
   }
   return output.join(`
-`).replace(/\n{3,}/g, `
+`).replace(EXTRA_BLANK_LINES_RE, `
 
 `);
 }
@@ -1984,10 +2020,10 @@ function stripKnipWorkspaces(content, removedWorkspaces) {
 `;
 }
 function stripStartReferences(content) {
-  return content.replace(/^\| `apps\/start` .*\n/gm, "").replace(/^`apps\/start`[\s\S]*?(?:\n\n|\n?(?![\s\S]))/gm, "");
+  return content.replace(START_TABLE_ROW_RE, "").replace(START_PARAGRAPH_RE, "");
 }
 function rewriteStartWorkerIdentifiers(content, appName) {
-  return content.replace(/("name":\s*")[^"]+(")/, `$1${appName}$2`).replace(/("database_name":\s*")[^"]+(")/, `$1${appName}$2`);
+  return content.replace(WORKER_NAME_FIELD_RE, `$1${appName}$2`).replace(DATABASE_NAME_FIELD_RE, `$1${appName}$2`);
 }
 function startOnlyRootPackage(rootPackage, overlayPackage) {
   const root = JSON.parse(rootPackage);
@@ -1997,12 +2033,13 @@ function startOnlyRootPackage(rootPackage, overlayPackage) {
 }
 
 // src/delivery.ts
+var WHITESPACE_CHAR_RE3 = /\s/;
 var RELEASE_TAG_PATTERN = /^v\d+\.\d+\.\d+(?:-rc\.\d+)?$/;
 function validateLicenseKey(value) {
   const key = value.trim();
   if (!key)
     return "Enter the licence key from your purchase receipt.";
-  if (/\s/.test(key))
+  if (WHITESPACE_CHAR_RE3.test(key))
     return "A licence key does not contain spaces.";
   if (!key.startsWith(LICENSE_KEY_PREFIX) || key.length === LICENSE_KEY_PREFIX.length) {
     return `A ${CLI_NAME2} licence key starts with ${LICENSE_KEY_PREFIX}. Copy it from your purchase receipt or the customer portal.`;
@@ -2024,7 +2061,6 @@ function normalizeSourceVersion(value) {
 // node_modules/@clack/prompts/dist/index.mjs
 import { styleText as styleText3, stripVTControlCharacters as stripVTControlCharacters2 } from "node:util";
 import process$12 from "node:process";
-var import_sisteransi3 = __toESM(require_src(), 1);
 function isUnicodeSupported2() {
   if (process$12.platform !== "win32") {
     return process$12.env.TERM !== "linux";
@@ -2033,7 +2069,7 @@ function isUnicodeSupported2() {
 }
 var unicode2 = isUnicodeSupported2();
 var isCI2 = () => process.env.CI === "true";
-var unicodeOr2 = (o, e) => unicode2 ? o : e;
+var unicodeOr2 = (e, o) => unicode2 ? e : o;
 var S_STEP_ACTIVE2 = unicodeOr2("◆", "*");
 var S_STEP_CANCEL2 = unicodeOr2("■", "x");
 var S_STEP_ERROR2 = unicodeOr2("▲", "x");
@@ -2059,8 +2095,8 @@ var S_INFO2 = unicodeOr2("●", "•");
 var S_SUCCESS2 = unicodeOr2("◆", "*");
 var S_WARN2 = unicodeOr2("▲", "!");
 var S_ERROR2 = unicodeOr2("■", "x");
-var symbol2 = (o) => {
-  switch (o) {
+var symbol2 = (e) => {
+  switch (e) {
     case "initial":
     case "active":
       return styleText3("cyan", S_STEP_ACTIVE2);
@@ -2074,8 +2110,8 @@ var symbol2 = (o) => {
       return styleText3("dim", S_STEP_ACTIVE2);
   }
 };
-var symbolBar = (o) => {
-  switch (o) {
+var symbolBar = (e) => {
+  switch (e) {
     case "initial":
     case "active":
       return styleText3("cyan", S_BAR2);
@@ -2087,11 +2123,12 @@ var symbolBar = (o) => {
       return styleText3("green", S_BAR2);
   }
 };
-function formatInstructionFooter(o, e) {
-  const r = [`${e ? `${styleText3("cyan", S_BAR2)}  ` : ""}${o.join(" • ")}`];
-  return e && r.push(styleText3("cyan", S_BAR_END2)), r;
+function formatInstructionFooter(e, o, r) {
+  const s = r ? `${styleText3("cyan", S_BAR2)}  ` : "", n = wrapTextWithPrefix(e, o.join(" • "), s).split(`
+`);
+  return r && n.push(styleText3("cyan", S_BAR_END2)), n;
 }
-var I = (l, e, w, p, b, C = false) => {
+var E$1 = (l, e, w, p, b, C = false) => {
   let r = e, O = 0;
   if (C)
     for (let i = p - 1;i >= w; i--) {
@@ -2120,12 +2157,12 @@ var limitOptions = ({
   let f = 0;
   l >= a - 3 && (f = Math.max(Math.min(l - a + 3, e.length - a), 0));
   let d = a < e.length && f > 0, c = a < e.length && f + a < e.length;
-  const W = Math.min(f + a, e.length), s = [];
+  const I = Math.min(f + a, e.length), s = [];
   let g = 0;
   d && g++, c && g++;
-  const T = f + (d ? 1 : 0), y = W - (c ? 1 : 0);
-  for (let t = T;t < y; t++) {
-    const n = e[t], o = n ? w(n, t === l) : "", h = wrapAnsi(o, i, {
+  const T = f + (d ? 1 : 0), W = I - (c ? 1 : 0);
+  for (let t = T;t < W; t++) {
+    const n = e[t], o = n !== undefined ? w(n, t === l) : "", h = wrapAnsi(o, i, {
       hard: true,
       trim: false
     }).split(`
@@ -2136,8 +2173,8 @@ var limitOptions = ({
     let t = 0, n = 0, o = g;
     const h = l - T;
     let u = v;
-    const L = () => I(s, o, 0, h, u), E = () => I(s, o, h + 1, s.length, u, true);
-    d ? ({ lineCount: o, removals: t } = L(), o > u && (c || (u -= 1), { lineCount: o, removals: n } = E())) : (c || (u -= 1), { lineCount: o, removals: n } = E(), o > u && (u -= 1, { lineCount: o, removals: t } = L())), t > 0 && (d = true, s.splice(0, t)), n > 0 && (c = true, s.splice(s.length - n, n));
+    const L = () => E$1(s, o, 0, h, u), y = () => E$1(s, o, h + 1, s.length, u, true);
+    d ? ({ lineCount: o, removals: t } = L(), o > u && (c || (u -= 1), { lineCount: o, removals: n } = y())) : (c || (u -= 1), { lineCount: o, removals: n } = y(), o > u && (u -= 1, { lineCount: o, removals: t } = L())), t > 0 && (d = true, s.splice(0, t)), n > 0 && (c = true, s.splice(s.length - n, n));
   }
   const x = [];
   d && x.push(M);
@@ -2186,82 +2223,82 @@ var MULTISELECT_INSTRUCTIONS2 = [
   `${styleText3("dim", "Space:")} select`,
   `${styleText3("dim", "Enter:")} confirm`
 ];
-var m = (i, u) => i.split(`
+var m = (n, u) => n.split(`
 `).map((d) => u(d)).join(`
 `);
-var multiselect = (i) => {
+var multiselect = (n) => {
   const u = (t, a) => {
     const r = t.label ?? String(t.value);
     return a === "disabled" ? `${styleText3("gray", S_CHECKBOX_INACTIVE2)} ${m(r, (o) => styleText3(["strikethrough", "gray"], o))}${t.hint ? ` ${styleText3("dim", `(${t.hint ?? "disabled"})`)}` : ""}` : a === "active" ? `${styleText3("cyan", S_CHECKBOX_ACTIVE2)} ${r}${t.hint ? ` ${styleText3("dim", `(${t.hint})`)}` : ""}` : a === "selected" ? `${styleText3("green", S_CHECKBOX_SELECTED2)} ${m(r, (o) => styleText3("dim", o))}${t.hint ? ` ${styleText3("dim", `(${t.hint})`)}` : ""}` : a === "cancelled" ? `${m(r, (o) => styleText3(["strikethrough", "dim"], o))}` : a === "active-selected" ? `${styleText3("green", S_CHECKBOX_SELECTED2)} ${r}${t.hint ? ` ${styleText3("dim", `(${t.hint})`)}` : ""}` : a === "submitted" ? `${m(r, (o) => styleText3("dim", o))}` : `${styleText3("dim", S_CHECKBOX_INACTIVE2)} ${m(r, (o) => styleText3("dim", o))}`;
-  }, d = i.required ?? true, x = i.showInstructions ?? true;
+  }, d = n.required ?? true, x = n.showInstructions ?? true;
   return new a({
-    options: i.options,
-    signal: i.signal,
-    input: i.input,
-    output: i.output,
-    initialValues: i.initialValues,
+    options: n.options,
+    signal: n.signal,
+    input: n.input,
+    output: n.output,
+    initialValues: n.initialValues,
     required: d,
-    cursorAt: i.cursorAt,
+    cursorAt: n.cursorAt,
     validate(t) {
       if (d && (t === undefined || t.length === 0))
         return `Please select at least one option.
 ${styleText3("reset", styleText3("dim", `Press ${styleText3(["gray", "bgWhite", "inverse"], " space ")} to select, ${styleText3("gray", styleText3("bgWhite", styleText3("inverse", " enter ")))} to submit`))}`;
     },
     render() {
-      const t = i.withGuide ?? settings.withGuide, a = wrapTextWithPrefix(i.output, i.message, t ? `${symbolBar(this.state)}  ` : "", `${symbol2(this.state)}  `), r = `${t ? `${styleText3("gray", S_BAR2)}
+      const t = n.withGuide ?? settings.withGuide, a = wrapTextWithPrefix(n.output, n.message, t ? `${symbolBar(this.state)}  ` : "", `${symbol2(this.state)}  `), r = `${t ? `${styleText3("gray", S_BAR2)}
 ` : ""}${a}
-`, o = this.value ?? [], g = (n, l) => {
-        if (n.disabled)
-          return u(n, "disabled");
-        const s = o.includes(n.value);
-        return l && s ? u(n, "active-selected") : s ? u(n, "selected") : u(n, l ? "active" : "inactive");
+`, o = this.value ?? [], g = (i, l) => {
+        if (i.disabled)
+          return u(i, "disabled");
+        const s = o.includes(i.value);
+        return l && s ? u(i, "active-selected") : s ? u(i, "selected") : u(i, l ? "active" : "inactive");
       };
       switch (this.state) {
         case "submit": {
-          const n = this.options.filter(({ value: s }) => o.includes(s)).map((s) => u(s, "submitted")).join(styleText3("dim", ", ")) || styleText3("dim", "none"), l = wrapTextWithPrefix(i.output, n, t ? `${styleText3("gray", S_BAR2)}  ` : "");
+          const i = this.options.filter(({ value: s }) => o.includes(s)).map((s) => u(s, "submitted")).join(styleText3("dim", ", ")) || styleText3("dim", "none"), l = wrapTextWithPrefix(n.output, i, t ? `${styleText3("gray", S_BAR2)}  ` : "");
           return `${r}${l}`;
         }
         case "cancel": {
-          const n = this.options.filter(({ value: s }) => o.includes(s)).map((s) => u(s, "cancelled")).join(styleText3("dim", ", "));
-          if (n.trim() === "")
+          const i = this.options.filter(({ value: s }) => o.includes(s)).map((s) => u(s, "cancelled")).join(styleText3("dim", ", "));
+          if (i.trim() === "")
             return `${r}${styleText3("gray", S_BAR2)}`;
-          const l = wrapTextWithPrefix(i.output, n, t ? `${styleText3("gray", S_BAR2)}  ` : "");
+          const l = wrapTextWithPrefix(n.output, i, t ? `${styleText3("gray", S_BAR2)}  ` : "");
           return `${r}${l}${t ? `
 ${styleText3("gray", S_BAR2)}` : ""}`;
         }
         case "error": {
-          const n = t ? `${styleText3("yellow", S_BAR2)}  ` : "", l = this.error.split(`
+          const i = t ? `${styleText3("yellow", S_BAR2)}  ` : "", l = this.error.split(`
 `).map(($, v) => v === 0 ? `${t ? `${styleText3("yellow", S_BAR_END2)}  ` : ""}${styleText3("yellow", $)}` : `   ${$}`).join(`
 `), s = r.split(`
 `).length, h = l.split(`
 `).length + 1;
-          return `${r}${n}${limitOptions({
-            output: i.output,
+          return `${r}${i}${limitOptions({
+            output: n.output,
             options: this.options,
             cursor: this.cursor,
-            maxItems: i.maxItems,
-            columnPadding: n.length,
+            maxItems: n.maxItems,
+            columnPadding: i.length,
             rowPadding: s + h,
             style: g
           }).join(`
-${n}`)}
+${i}`)}
 ${l}
 `;
         }
         default: {
-          const n = t ? `${styleText3("cyan", S_BAR2)}  ` : "", l = r.split(`
-`).length, s = x ? formatInstructionFooter(MULTISELECT_INSTRUCTIONS2, t) : t ? [styleText3("cyan", S_BAR_END2)] : [], h = s.join(`
+          const i = t ? `${styleText3("cyan", S_BAR2)}  ` : "", l = r.split(`
+`).length, s = x ? formatInstructionFooter(n.output, MULTISELECT_INSTRUCTIONS2, t) : t ? [styleText3("cyan", S_BAR_END2)] : [], h = s.join(`
 `), $ = s.length + 1;
-          return `${r}${n}${limitOptions({
-            output: i.output,
+          return `${r}${i}${limitOptions({
+            output: n.output,
             options: this.options,
             cursor: this.cursor,
-            maxItems: i.maxItems,
-            columnPadding: n.length,
+            maxItems: n.maxItems,
+            columnPadding: i.length,
             rowPadding: l + $,
             style: g
           }).join(`
-${n}`)}
+${i}`)}
 ${h}
 `;
         }
@@ -2329,85 +2366,103 @@ ${styleText3("gray", S_BAR_END2)}  ` : "";
 
 `);
 };
-var W2 = (l) => styleText3("magenta", l);
+var Y2 = 30000;
+var Z2 = (c) => styleText3("magenta", c);
 var spinner2 = ({
-  indicator: l = "dots",
-  onCancel: h,
+  indicator: c = "dots",
+  onCancel: b,
   output: n = process.stdout,
-  cancelMessage: G,
-  errorMessage: O,
-  frames: E = unicode2 ? ["◒", "◐", "◓", "◑"] : ["•", "o", "O", "0"],
-  delay: F = unicode2 ? 80 : 120,
-  signal: m,
-  ...I
+  cancelMessage: _,
+  errorMessage: C,
+  frames: M = unicode2 ? ["◒", "◐", "◓", "◑"] : ["•", "o", "O", "0"],
+  delay: O = unicode2 ? 80 : 120,
+  signal: g,
+  ...E
 } = {}) => {
-  const u = isCI2();
-  let M, T, d = false, S = false, s = "", p, w = performance.now();
-  const x = getColumns(n), k = I?.styleFrame ?? W2, g = (e) => {
-    const r = e > 1 ? O ?? settings.messages.error : G ?? settings.messages.cancel;
-    S = e === 1, d && (a(r, e), S && typeof h == "function" && h());
-  }, f = () => g(2), i = () => g(1), A = () => {
-    process.on("uncaughtExceptionMonitor", f), process.on("unhandledRejection", f), process.on("SIGINT", i), process.on("SIGTERM", i), process.on("exit", g), m && m.addEventListener("abort", i);
-  }, H = () => {
-    process.removeListener("uncaughtExceptionMonitor", f), process.removeListener("unhandledRejection", f), process.removeListener("SIGINT", i), process.removeListener("SIGTERM", i), process.removeListener("exit", g), m && m.removeEventListener("abort", i);
-  }, y = () => {
-    if (p === undefined)
+  const u = isCI2(), h = isAccessible(E.accessible);
+  let x, I, p = false, l = false, r = "", v, w = performance.now();
+  const y = getColumns(n), F = E?.styleFrame ?? Z2, S = (e) => {
+    const s = e > 1 ? C ?? settings.messages.error : _ ?? settings.messages.cancel;
+    l = e === 1, p && (m(s, e), l && typeof b == "function" && b());
+  }, $ = () => S(2), a = () => S(1), H = () => {
+    process.on("uncaughtExceptionMonitor", $), process.on("unhandledRejection", $), process.on("SIGINT", a), process.on("SIGTERM", a), process.on("exit", S), g && g.addEventListener("abort", a);
+  }, B = () => {
+    process.removeListener("uncaughtExceptionMonitor", $), process.removeListener("unhandledRejection", $), process.removeListener("SIGINT", a), process.removeListener("SIGTERM", a), process.removeListener("exit", S), g && g.removeEventListener("abort", a);
+  }, R = () => {
+    if (v === undefined)
       return;
     u && n.write(`
 `);
-    const r = wrapAnsi(p, x, {
+    const s = wrapAnsi(v, y, {
       hard: true,
       trim: false
     }).split(`
 `);
-    r.length > 1 && n.write(import_sisteransi3.cursor.up(r.length - 1)), n.write(import_sisteransi3.cursor.to(0)), n.write(import_sisteransi3.erase.down());
-  }, C = (e) => e.replace(/\.+$/, ""), _ = (e) => {
-    const r = (performance.now() - e) / 1000, t = Math.floor(r / 60), o = Math.floor(r % 60);
-    return t > 0 ? `[${t}m ${o}s]` : `[${o}s]`;
-  }, N = I.withGuide ?? settings.withGuide, P = (e = "") => {
-    d = true, M = block({ output: n }), s = C(e), w = performance.now(), N && n.write(`${styleText3("gray", S_BAR2)}
+    s.length > 1 && n.write(cursor.up(s.length - 1)), n.write(cursor.to(0)), n.write(erase.down());
+  }, L = (e) => e.replace(/\.+$/, ""), T = (e) => {
+    const s = (performance.now() - e) / 1000, i = Math.floor(s / 60), t = Math.floor(s % 60);
+    return i > 0 ? `[${i}m ${t}s]` : `[${t}s]`;
+  }, N = E.withGuide ?? settings.withGuide, P = (e = "") => {
+    if (p = true, l = false, r = L(e), w = performance.now(), H(), h) {
+      r !== "" && n.write(`${r}
+`), I = setInterval(() => {
+        n.write(r === "" ? `still working
+` : `still working: ${r}
 `);
-    let r = 0, t = 0;
-    A(), T = setInterval(() => {
-      if (u && s === p)
+      }, Y2);
+      return;
+    }
+    x = block({ output: n }), N && n.write(`${styleText3("gray", S_BAR2)}
+`);
+    let s = 0, i = 0;
+    I = setInterval(() => {
+      if (u && r === v)
         return;
-      y(), p = s;
-      const o = k(E[r]);
-      let v;
+      R(), v = r;
+      const t = F(M[s]);
+      let o;
       if (u)
-        v = `${o}  ${s}...`;
-      else if (l === "timer")
-        v = `${o}  ${s} ${_(w)}`;
+        o = `${t}  ${r}...`;
+      else if (c === "timer")
+        o = `${t}  ${r} ${T(w)}`;
       else {
-        const B = ".".repeat(Math.floor(t)).slice(0, 3);
-        v = `${o}  ${s}${B}`;
+        const j = ".".repeat(Math.floor(i)).slice(0, 3);
+        o = `${t}  ${r}${j}`;
       }
-      const j = wrapAnsi(v, x, {
+      const D = wrapAnsi(o, y, {
         hard: true,
         trim: false
       });
-      n.write(j), r = r + 1 < E.length ? r + 1 : 0, t = t < 4 ? t + 0.125 : 0;
-    }, F);
-  }, a = (e = "", r = 0, t = false) => {
-    if (!d)
-      return;
-    d = false, clearInterval(T), y();
-    const o = r === 0 ? styleText3("green", S_STEP_SUBMIT2) : r === 1 ? styleText3("red", S_STEP_CANCEL2) : styleText3("red", S_STEP_ERROR2);
-    s = e ?? s, t || (l === "timer" ? n.write(`${o}  ${s} ${_(w)}
-`) : n.write(`${o}  ${s}
-`)), H(), M();
+      n.write(D), s = s + 1 < M.length ? s + 1 : 0, i = i < 4 ? i + 0.125 : 0;
+    }, O);
+  }, m = (e = "", s = 0, i = false) => {
+    if (p) {
+      if (p = false, l = s === 1, clearInterval(I), h || R(), r = e ?? r, !i)
+        if (h) {
+          const t = s === 1 ? _ ?? settings.messages.cancel : s === 2 ? C ?? settings.messages.error : "Done", o = r || t;
+          c === "timer" ? n.write(`${o} ${T(w)}
+`) : n.write(`${o}
+`);
+        } else {
+          const t = s === 0 ? styleText3("green", S_STEP_SUBMIT2) : s === 1 ? styleText3("red", S_STEP_CANCEL2) : styleText3("red", S_STEP_ERROR2);
+          c === "timer" ? n.write(`${t}  ${r} ${T(w)}
+`) : n.write(`${t}  ${r}
+`);
+        }
+      B(), x?.();
+    }
   };
   return {
     start: P,
-    stop: (e = "") => a(e, 0),
+    stop: (e = "") => m(e, 0),
     message: (e = "") => {
-      s = C(e ?? s);
+      r = L(e ?? r);
     },
-    cancel: (e = "") => a(e, 1),
-    error: (e = "") => a(e, 2),
-    clear: () => a("", 0, true),
+    cancel: (e = "") => m(e, 1),
+    error: (e = "") => m(e, 2),
+    clear: () => m("", 0, true),
     get isCancelled() {
-      return S;
+      return l;
     }
   };
 };
@@ -2420,7 +2475,7 @@ var SELECT_INSTRUCTIONS2 = [
   `${styleText3("dim", "↑/↓")} to navigate`,
   `${styleText3("dim", "Enter:")} confirm`
 ];
-var c = (t, o) => t.includes(`
+var c2 = (t, o) => t.includes(`
 `) ? t.split(`
 `).map((d) => o(d)).join(`
 `) : o(t);
@@ -2431,15 +2486,15 @@ var select = (t) => {
     const s = n.label ?? String(n.value);
     switch (m) {
       case "disabled":
-        return `${styleText3("gray", S_RADIO_INACTIVE2)} ${c(s, (i) => styleText3("gray", i))}${n.hint ? ` ${styleText3("dim", `(${n.hint ?? "disabled"})`)}` : ""}`;
+        return `${styleText3("gray", S_RADIO_INACTIVE2)} ${c2(s, (i) => styleText3("gray", i))}${n.hint ? ` ${styleText3("dim", `(${n.hint ?? "disabled"})`)}` : ""}`;
       case "selected":
-        return `${c(s, (i) => styleText3("dim", i))}`;
+        return `${c2(s, (i) => styleText3("dim", i))}`;
       case "active":
         return `${styleText3("green", S_RADIO_ACTIVE2)} ${s}${n.hint ? ` ${styleText3("dim", `(${n.hint})`)}` : ""}`;
       case "cancelled":
-        return `${c(s, (i) => styleText3(["strikethrough", "dim"], i))}`;
+        return `${c2(s, (i) => styleText3(["strikethrough", "dim"], i))}`;
       default:
-        return `${styleText3("dim", S_RADIO_INACTIVE2)} ${c(s, (i) => styleText3("dim", i))}`;
+        return `${styleText3("dim", S_RADIO_INACTIVE2)} ${c2(s, (i) => styleText3("dim", i))}`;
     }
   }, d = t.showInstructions ?? true;
   return new n$1({
@@ -2464,7 +2519,7 @@ ${styleText3("gray", S_BAR2)}` : ""}`;
         }
         default: {
           const r = n ? `${styleText3("cyan", S_BAR2)}  ` : "", a = u.split(`
-`).length, p = d ? formatInstructionFooter(SELECT_INSTRUCTIONS2, n) : n ? [styleText3("cyan", S_BAR_END2)] : [], f = p.join(`
+`).length, p = d ? formatInstructionFooter(t.output, SELECT_INSTRUCTIONS2, n) : n ? [styleText3("cyan", S_BAR_END2)] : [], f = p.join(`
 `), b = p.length + 1;
           return `${u}${r}${limitOptions({
             output: t.output,
@@ -2588,6 +2643,8 @@ function isExecutable(path) {
 }
 
 // src/agent-setup.ts
+var CODEX_AGENT_DOCS_TABLE_RE = /^\[mcp_servers\.(?:agent-docs|agent_docs|"agent-docs")\]$/m;
+var LINE_BREAK_RE = /\r?\n/;
 var CLIENTS = ["codex", "claude", "cursor"];
 var SERVER_NAME = "agent-docs";
 var CODEX_START = "# agent-context:start";
@@ -2681,7 +2738,7 @@ function mergeCodexConfig(existing, root) {
 
 ${managed}${existing.slice(after)}`.trimStart();
   }
-  if (/^\[mcp_servers\.(?:agent-docs|agent_docs|"agent-docs")\]$/m.test(existing)) {
+  if (CODEX_AGENT_DOCS_TABLE_RE.test(existing)) {
     throw new Error("Codex already has an unmanaged agent-docs server; remove or rename it first.");
   }
   return `${existing.trimEnd()}${existing.trim() ? `
@@ -2732,14 +2789,14 @@ async function addGitInfoExcludes(root, paths) {
     return false;
   const excludePath = resolve(root, rawPath);
   const existing = await readFile(excludePath, "utf8").catch(() => "");
-  const missing = paths.filter((path) => !existing.split(/\r?\n/).includes(path));
+  const missing = paths.filter((path) => !existing.split(LINE_BREAK_RE).includes(path));
   if (missing.length === 0)
     return true;
   const prefix = existing && !existing.endsWith(`
 `) ? `
 ` : "";
   const marker = "# Local agent configuration";
-  const heading = existing.split(/\r?\n/).includes(marker) ? "" : `${marker}
+  const heading = existing.split(LINE_BREAK_RE).includes(marker) ? "" : `${marker}
 `;
   await atomicWrite(excludePath, `${existing}${prefix}${heading}${missing.join(`
 `)}
@@ -2889,24 +2946,40 @@ import { resolve as resolve2 } from "node:path";
 // src/deployment.ts
 import { mkdir as mkdir2, readFile as readFile2, rm, stat as stat2, writeFile as writeFile2 } from "node:fs/promises";
 import { join as join3 } from "node:path";
-var deploymentClouds = ["aws", "gcp", "azure"];
-var frontendTargets = ["native", "vercel", "cloudflare"];
+var DEPLOYMENT_ENVIRONMENT_RE = /^[a-z][a-z0-9-]{1,30}$/;
+var REGION_RE = /^[a-z0-9][a-z0-9-]{1,31}$/;
+var DOMAIN_RE = /^(?=.{1,253}$)(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/;
+var deploymentClouds = ["aws", "gcp", "railway"];
+var openTofuClouds = ["aws", "gcp"];
+var frontendTargets = ["native", "cloudflare"];
 var storageProviders = ["r2", "s3", "gcs"];
 var defaultRegions = {
   aws: "us-east-1",
-  gcp: "us-central1",
-  azure: "eastus2"
+  gcp: "us-central1"
 };
 var defaultStorageProviders = {
   aws: "s3",
   gcp: "gcs",
-  azure: "r2"
+  railway: "r2"
 };
 var storageProvidersByCloud = {
   aws: ["s3", "r2"],
   gcp: ["gcs", "r2"],
-  azure: ["r2"]
+  railway: ["r2"]
+};
+var frontendTargetsByCloud = {
+  aws: ["native", "cloudflare"],
+  gcp: ["native", "cloudflare"],
+  railway: ["cloudflare"]
+};
+var cloudLabels = {
+  aws: "AWS",
+  gcp: "GCP",
+  railway: "Railway"
 };
+function isOpenTofuCloud(cloud) {
+  return openTofuClouds.some((candidate) => candidate === cloud);
+}
 function isDeploymentCloud(value) {
   return deploymentClouds.some((cloud) => cloud === value);
 }
@@ -2918,12 +2991,12 @@ function isStorageProvider(value) {
 }
 function parseDeploymentCloud(value) {
   if (!isDeploymentCloud(value))
-    throw new Error("Cloud must be aws, gcp, or azure.");
+    throw new Error("Cloud must be aws, gcp, or railway.");
   return value;
 }
 function parseFrontendTarget(value) {
   if (!isFrontendTarget(value)) {
-    throw new Error("Frontend target must be native, vercel, or cloudflare.");
+    throw new Error("Frontend target must be native or cloudflare.");
   }
   return value;
 }
@@ -2933,19 +3006,19 @@ function parseStorageProvider(value) {
   return value;
 }
 function validateDeploymentEnvironment(value) {
-  if (!/^[a-z][a-z0-9-]{1,30}$/.test(value)) {
+  if (!DEPLOYMENT_ENVIRONMENT_RE.test(value)) {
     return "Environment must use 2-31 lowercase letters, numbers, or hyphens.";
   }
   return;
 }
 function validateRegion(value) {
-  if (!/^[a-z0-9][a-z0-9-]{1,31}$/.test(value)) {
+  if (!REGION_RE.test(value)) {
     return "Region must use 2-32 lowercase letters, numbers, or hyphens.";
   }
   return;
 }
 function validateDomain(value) {
-  if (value.length > 80 || !/^(?=.{1,253}$)(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/.test(value)) {
+  if (value.length > 80 || !DOMAIN_RE.test(value)) {
     return "Enter a lowercase hostname such as api.example.com, without a protocol or path.";
   }
   return;
@@ -2954,12 +3027,24 @@ function validateDeploymentSelection(selection) {
   if (!storageProvidersByCloud[selection.cloud].includes(selection.storageProvider)) {
     throw new Error(`${selection.storageProvider} storage is not supported for ${selection.cloud} deployments.`);
   }
+  if (!frontendTargetsByCloud[selection.cloud].includes(selection.frontendTarget)) {
+    throw new Error(`The ${selection.frontendTarget} frontend is not supported for ${selection.cloud} deployments.`);
+  }
+  if (isOpenTofuCloud(selection.cloud)) {
+    const regionError = validateRegion(selection.region ?? "");
+    if (regionError)
+      throw new Error(regionError);
+  } else {
+    if (selection.region !== null) {
+      throw new Error("Railway selects its region per service; omit the region.");
+    }
+    if (selection.haEnabled) {
+      throw new Error("The higher-availability profile applies to AWS and GCP only.");
+    }
+  }
   const environmentError = validateDeploymentEnvironment(selection.environment);
   if (environmentError)
     throw new Error(environmentError);
-  const regionError = validateRegion(selection.region);
-  if (regionError)
-    throw new Error(regionError);
   const apiError = validateDomain(selection.apiDomain);
   if (apiError)
     throw new Error(`API domain: ${apiError}`);
@@ -2991,20 +3076,86 @@ function createDeploymentConfig(projectName, selection) {
     ha_enabled: selection.haEnabled
   };
 }
-function deploymentReadme(config) {
-  const identity = config.cloud === "aws" ? "`AWS_ROLE_ARN` secret" : config.cloud === "gcp" ? "`GCP_WORKLOAD_IDENTITY_PROVIDER` and `GCP_SERVICE_ACCOUNT` secrets" : "`AZURE_CLIENT_ID`, `AZURE_TENANT_ID`, and `AZURE_SUBSCRIPTION_ID` secrets";
-  const providerInputs = config.cloud === "aws" ? "Route 53 zone or certificate identifiers and runtime Secrets Manager ARNs" : config.cloud === "gcp" ? "GCP project, Cloud DNS zone, and runtime Secret Manager names" : "Azure DNS zone ID and runtime Key Vault secret identifiers";
+function lockSummary(config) {
+  return `The deployment target is locked:
+
+- backend: **${cloudLabels[config.cloud]}**;
+- storage: **${config.storage_provider}**;
+- frontend: **${config.frontend_target}**;
+- environment: **${config.environment}**.`;
+}
+function railwayReadme(config) {
+  return `# Deployment setup
+
+${lockSummary(config)}
+
+The production hosts are:
+
+- API: \`${config.api_domain}\`;
+- frontend: \`${config.frontend_domain}\`.
+
+## Railway API and PostgreSQL
+
+1. Create a Railway project with a PostgreSQL service and an API service connected to this
+   repository. Build from the repository root, because the image copies the whole workspace.
+2. Set the API service's config-as-code path to \`apps/server/railway.toml\`. It builds
+   \`apps/server/Dockerfile\`, runs \`./server migrate\` before each deploy, starts \`./server serve\`,
+   and admits traffic only after \`/ready\` succeeds.
+3. Set these API service variables in the \`${config.environment}\` Railway environment:
+
+   \`\`\`text
+   DATABASE_URL=\${{Postgres.DATABASE_URL}}
+   ENVIRONMENT=production
+   TRUSTED_PROXY_PROFILE=railway
+   DEPLOYMENT_CLOUD=railway
+   FRONTEND_URL=https://${config.frontend_domain}
+   SERVER_URL=https://${config.api_domain}
+   \`\`\`
+
+   Add \`BETTER_AUTH_SECRET\`, \`RESEND_API_KEY\`, \`EMAIL_FROM\`, \`APP_DB_POOL_MAX\`, and
+   \`AUTH_DB_POOL_MAX\`, then the Cloudflare R2 storage variables and every enabled billing,
+   monitoring, and OAuth value. Railway injects \`PORT\`; leave it unset.
+
+4. Add the API host as the service's custom domain and publish the DNS records Railway reports. A
+   Cloudflare-managed zone keeps them \`DNS only\`.
+
+## Cloudflare frontend
+
+1. Create a Cloudflare Workers project rooted at \`apps/web\`. It uses \`apps/web/wrangler.toml\`, which
+   serves \`dist\` as static assets with single-page-application fallback.
+2. Build with \`pnpm run build:prod\` and these variables:
+
+   \`\`\`text
+   VITE_APP_ENV=production
+   VITE_API_URL=https://${config.api_domain}
+   \`\`\`
+
+   Add \`VITE_TERMS_URL\` and \`VITE_PRIVACY_URL\`, plus \`VITE_MARKETING_URL\` when the product has a
+   public marketing site.
+
+3. Attach the frontend host as the Worker's custom domain.
+
+## Verify
+
+\`\`\`sh
+API_ORIGIN=https://${config.api_domain} \\
+WEB_ORIGIN=https://${config.frontend_domain} \\
+bash scripts/verify-public-deployment.sh
+\`\`\`
+
+The provider lock is deliberate. Restore the deployment directories from a fresh licensed release
+before changing providers.
+`;
+}
+function openTofuReadme(config) {
+  const identity = config.cloud === "aws" ? "`AWS_ROLE_ARN` secret" : "`GCP_WORKLOAD_IDENTITY_PROVIDER` and `GCP_SERVICE_ACCOUNT` secrets";
+  const providerInputs = config.cloud === "aws" ? "Route 53 zone or certificate identifiers and runtime Secrets Manager ARNs" : "GCP project, Cloud DNS zone, and runtime Secret Manager names";
   const storageSetup = config.storage_provider === "r2" ? `Create private staging and public Cloudflare R2 buckets, then store the required storage
    variables in the runtime secret container.` : `${config.storage_provider.toUpperCase()} application buckets, lifecycle policy, CORS, public access, and workload permissions are
    managed by the selected OpenTofu root.`;
   return `# Deployment setup
 
-The deployment target is locked:
-
-- backend: **${config.cloud.toUpperCase()}**;
-- storage: **${config.storage_provider}**;
-- frontend: **${config.frontend_target}**;
-- environment: **${config.environment}**.
+${lockSummary(config)}
 
 ## Protected GitHub environment
 
@@ -3014,8 +3165,8 @@ Create a GitHub environment named \`${config.environment}\` and configure:
 - a \`BACKEND_HCL\` secret containing the selected remote-state backend configuration;
 - a \`TFVARS_JSON\` secret containing only:
   - ${providerInputs};
-- \`VITE_TERMS_URL\` and \`VITE_PRIVACY_URL\`, plus \`VITE_MARKETING_URL\` when the product has a
-  public marketing site.
+- \`VITE_TERMS_URL\` and \`VITE_PRIVACY_URL\`, plus \`VITE_MARKETING_URL\` when the product has a public
+  marketing site.
 
 ## Cloud preparation
 
@@ -3036,9 +3187,33 @@ The workflow creates the registry first, pushes an immutable image, provisions t
 traffic disabled, runs migrations, and admits traffic only after migration succeeds.
 
 The provider lock is deliberate. Restore the deployment directories from a fresh licensed release
-before changing cloud providers.
+before changing providers.
 `;
 }
+function deploymentReadme(config) {
+  return config.cloud === "railway" ? railwayReadme(config) : openTofuReadme(config);
+}
+function openTofuPaths(cloud) {
+  return [
+    `infra/bootstrap/${cloud}`,
+    `infra/modules/${cloud}`,
+    `infra/roots/${cloud}`,
+    `scripts/deploy/release-${cloud}.sh`,
+    `scripts/deploy/frontend-${cloud}.sh`
+  ];
+}
+function unusedDeploymentPaths(selection) {
+  const paths = selection.cloud === "railway" ? ["infra", "scripts/deploy", ".github/workflows/deploy-cloud.yml"] : [
+    ...openTofuClouds.filter((cloud) => cloud !== selection.cloud).flatMap(openTofuPaths),
+    "apps/server/railway.toml"
+  ];
+  if (selection.frontendTarget === "native")
+    paths.push("apps/web/wrangler.toml");
+  else if (selection.cloud !== "railway") {
+    paths.push(`scripts/deploy/frontend-${selection.cloud}.sh`);
+  }
+  return paths;
+}
 async function removeIfPresent(target) {
   if (!await stat2(target).catch(() => {
     return;
@@ -3047,6 +3222,20 @@ async function removeIfPresent(target) {
   await rm(target, { recursive: true, force: true });
   return true;
 }
+async function removeInfrastructureScript(repositoryRoot) {
+  const packagePath = join3(repositoryRoot, "package.json");
+  const content = await readFile2(packagePath, "utf8").catch(() => {
+    return;
+  });
+  if (!content)
+    return;
+  const rootPackage = JSON.parse(content);
+  if (!rootPackage.scripts?.["verify:infra"])
+    return;
+  delete rootPackage.scripts["verify:infra"];
+  await writeFile2(packagePath, `${JSON.stringify(rootPackage, null, 2)}
+`);
+}
 async function applyDeploymentSelection(repositoryRoot, projectName, selection) {
   const config = createDeploymentConfig(projectName, selection);
   const configPath = join3(repositoryRoot, "deployment/config.json");
@@ -3060,40 +3249,12 @@ async function applyDeploymentSelection(repositoryRoot, projectName, selection)
 `);
   await writeFile2(join3(repositoryRoot, "deployment/README.md"), deploymentReadme(config));
   const removed = [];
-  for (const cloud of deploymentClouds) {
-    if (cloud === selection.cloud)
-      continue;
-    for (const relativePath of [
-      `infra/bootstrap/${cloud}`,
-      `infra/modules/${cloud}`,
-      `infra/roots/${cloud}`,
-      `scripts/deploy/release-${cloud}.sh`,
-      `scripts/deploy/frontend-${cloud}.sh`
-    ]) {
-      if (await removeIfPresent(join3(repositoryRoot, relativePath)))
-        removed.push(relativePath);
-    }
-  }
-  const adapters = [
-    { target: "vercel", path: "apps/web/vercel.json" },
-    { target: "cloudflare", path: "apps/web/wrangler.toml" },
-    {
-      target: "azure-native",
-      path: "apps/web/public/staticwebapp.config.json"
-    }
-  ];
-  const selectedAdapter = selection.frontendTarget === "native" ? selection.cloud === "azure" ? "azure-native" : undefined : selection.frontendTarget;
-  for (const adapter of adapters) {
-    if (adapter.target === selectedAdapter)
-      continue;
-    if (await removeIfPresent(join3(repositoryRoot, adapter.path)))
-      removed.push(adapter.path);
-  }
-  if (selection.frontendTarget !== "native") {
-    const nativeScript = `scripts/deploy/frontend-${selection.cloud}.sh`;
-    if (await removeIfPresent(join3(repositoryRoot, nativeScript)))
-      removed.push(nativeScript);
+  for (const relativePath of unusedDeploymentPaths(selection)) {
+    if (await removeIfPresent(join3(repositoryRoot, relativePath)))
+      removed.push(relativePath);
   }
+  if (removed.includes("infra"))
+    await removeInfrastructureScript(repositoryRoot);
   return removed;
 }
 
@@ -3112,37 +3273,31 @@ async function collectDeploymentSelection(defaults = {}, nonInteractive = false)
     if (!defaults.cloud || !defaults.apiDomain || !defaults.frontendDomain) {
       throw new Error("Non-interactive deployment setup requires --cloud, --api-domain, and --frontend-domain.");
     }
+    const cloud = defaults.cloud;
     return {
-      cloud: defaults.cloud,
-      storageProvider: defaults.storageProvider ?? defaultStorageProviders[defaults.cloud],
-      frontendTarget: defaults.frontendTarget ?? "native",
+      cloud,
+      storageProvider: defaults.storageProvider ?? defaultStorageProviders[cloud],
+      frontendTarget: defaults.frontendTarget ?? frontendTargetsByCloud[cloud][0] ?? "cloudflare",
       environment: defaults.environment ?? "production",
-      region: defaults.region ?? defaultRegions[defaults.cloud],
+      region: isOpenTofuCloud(cloud) ? defaults.region ?? defaultRegions[cloud] : defaults.region ?? null,
       apiDomain: defaults.apiDomain,
       frontendDomain: defaults.frontendDomain,
       haEnabled: defaults.haEnabled ?? false
     };
   }
   const cloud = defaults.cloud ?? parseDeploymentCloud(await unwrap(await select({
-    message: "Backend cloud",
+    message: "Backend host",
     options: [
-      { value: "aws", label: "AWS", hint: "ECS Fargate + RDS PostgreSQL" },
-      { value: "gcp", label: "Google Cloud", hint: "Cloud Run + Cloud SQL" },
-      { value: "azure", label: "Azure", hint: "Container Apps + Flexible Server" }
+      { value: "aws", label: "AWS", hint: "ECS Fargate + RDS PostgreSQL, OpenTofu" },
+      { value: "gcp", label: "Google Cloud", hint: "Cloud Run + Cloud SQL, OpenTofu" },
+      { value: "railway", label: "Railway", hint: "Managed container + PostgreSQL" }
     ]
   })));
-  const frontendTarget = defaults.frontendTarget ?? parseFrontendTarget(await unwrap(await select({
+  const frontendOptions = frontendTargetsByCloud[cloud];
+  const frontendTarget = defaults.frontendTarget ?? (frontendOptions.length === 1 ? frontendOptions[0] ?? "cloudflare" : parseFrontendTarget(await unwrap(await select({
     message: "Frontend host",
-    options: [
-      { value: "native", label: "Cloud native", hint: "Managed with the backend" },
-      { value: "vercel", label: "Vercel SPA", hint: "Static frontend only" },
-      {
-        value: "cloudflare",
-        label: "Cloudflare static assets",
-        hint: "No API Worker"
-      }
-    ]
-  })));
+    options: frontendOptions.map((target) => target === "native" ? { value: target, label: "Cloud native", hint: "Managed with the backend" } : { value: target, label: "Cloudflare static assets", hint: "No API Worker" })
+  }))));
   const storageProvider = defaults.storageProvider ?? (storageProvidersByCloud[cloud].length === 1 ? storageProvidersByCloud[cloud][0] ?? defaultStorageProviders[cloud] : parseStorageProvider(await unwrap(await select({
     message: "Object storage",
     options: storageProvidersByCloud[cloud].map((provider) => ({
@@ -3157,8 +3312,8 @@ async function collectDeploymentSelection(defaults = {}, nonInteractive = false)
     defaultValue: "production",
     validate: (value) => validateDeploymentEnvironment(value || "production")
   }));
-  const region = defaults.region ?? await unwrap(await text2({
-    message: `${cloud.toUpperCase()} region`,
+  const region = !isOpenTofuCloud(cloud) ? defaults.region ?? null : defaults.region ?? await unwrap(await text2({
+    message: `${cloudLabels[cloud]} region`,
     placeholder: defaultRegions[cloud],
     defaultValue: defaultRegions[cloud],
     validate: (value) => validateRegion(value || defaultRegions[cloud])
@@ -3173,7 +3328,7 @@ async function collectDeploymentSelection(defaults = {}, nonInteractive = false)
     placeholder: "app.example.com",
     validate: (value) => validateDomain(value ?? "")
   }));
-  const haEnabled = defaults.haEnabled ?? await unwrap(await confirm2({
+  const haEnabled = !isOpenTofuCloud(cloud) ? defaults.haEnabled ?? false : defaults.haEnabled ?? await unwrap(await confirm2({
     message: "Enable the higher-availability profile?",
     initialValue: false
   }));
@@ -3235,10 +3390,11 @@ async function runDeploymentConfigure(argv, productName, repositoryRoot = proces
   try {
     const selection = await collectDeploymentSelection(parsed, parsed.yes);
     const removed = await applyDeploymentSelection(root, rootPackage.name, selection);
-    log2.success(`${selection.cloud.toUpperCase()} + ${selection.storageProvider} + ${selection.frontendTarget} is locked for ${selection.environment}.`);
+    log2.success(`${cloudLabels[selection.cloud]} + ${selection.storageProvider} + ${selection.frontendTarget} is locked for ${selection.environment}.`);
     log2.info(`${removed.length} unused deployment paths removed.`);
     log2.step("Next");
-    log2.message(`Review deployment/config.json
+    log2.message(selection.cloud === "railway" ? `Review deployment/config.json
+Follow deployment/README.md for the Railway services and Cloudflare frontend` : `Review deployment/config.json
 Configure the protected GitHub environment
 Dispatch .github/workflows/deploy-cloud.yml`);
     outro2("Deployment configuration is ready to commit.");
@@ -3329,37 +3485,31 @@ async function collectDeploymentSelection2(defaults = {}, nonInteractive = false
     if (!defaults.cloud || !defaults.apiDomain || !defaults.frontendDomain) {
       throw new Error("Non-interactive deployment setup requires --cloud, --api-domain, and --frontend-domain.");
     }
+    const cloud = defaults.cloud;
     return {
-      cloud: defaults.cloud,
-      storageProvider: defaults.storageProvider ?? defaultStorageProviders[defaults.cloud],
-      frontendTarget: defaults.frontendTarget ?? "native",
+      cloud,
+      storageProvider: defaults.storageProvider ?? defaultStorageProviders[cloud],
+      frontendTarget: defaults.frontendTarget ?? frontendTargetsByCloud[cloud][0] ?? "cloudflare",
       environment: defaults.environment ?? "production",
-      region: defaults.region ?? defaultRegions[defaults.cloud],
+      region: isOpenTofuCloud(cloud) ? defaults.region ?? defaultRegions[cloud] : defaults.region ?? null,
       apiDomain: defaults.apiDomain,
       frontendDomain: defaults.frontendDomain,
       haEnabled: defaults.haEnabled ?? false
     };
   }
   const cloud = defaults.cloud ?? parseDeploymentCloud(await unwrap2(await select({
-    message: "Backend cloud",
+    message: "Backend host",
     options: [
-      { value: "aws", label: "AWS", hint: "ECS Fargate + RDS PostgreSQL" },
-      { value: "gcp", label: "Google Cloud", hint: "Cloud Run + Cloud SQL" },
-      { value: "azure", label: "Azure", hint: "Container Apps + Flexible Server" }
+      { value: "aws", label: "AWS", hint: "ECS Fargate + RDS PostgreSQL, OpenTofu" },
+      { value: "gcp", label: "Google Cloud", hint: "Cloud Run + Cloud SQL, OpenTofu" },
+      { value: "railway", label: "Railway", hint: "Managed container + PostgreSQL" }
     ]
   })));
-  const frontendTarget = defaults.frontendTarget ?? parseFrontendTarget(await unwrap2(await select({
+  const frontendOptions = frontendTargetsByCloud[cloud];
+  const frontendTarget = defaults.frontendTarget ?? (frontendOptions.length === 1 ? frontendOptions[0] ?? "cloudflare" : parseFrontendTarget(await unwrap2(await select({
     message: "Frontend host",
-    options: [
-      { value: "native", label: "Cloud native", hint: "Managed with the backend" },
-      { value: "vercel", label: "Vercel SPA", hint: "Static frontend only" },
-      {
-        value: "cloudflare",
-        label: "Cloudflare static assets",
-        hint: "No API Worker"
-      }
-    ]
-  })));
+    options: frontendOptions.map((target) => target === "native" ? { value: target, label: "Cloud native", hint: "Managed with the backend" } : { value: target, label: "Cloudflare static assets", hint: "No API Worker" })
+  }))));
   const storageProvider = defaults.storageProvider ?? (storageProvidersByCloud[cloud].length === 1 ? storageProvidersByCloud[cloud][0] ?? defaultStorageProviders[cloud] : parseStorageProvider(await unwrap2(await select({
     message: "Object storage",
     options: storageProvidersByCloud[cloud].map((provider) => ({
@@ -3374,8 +3524,8 @@ async function collectDeploymentSelection2(defaults = {}, nonInteractive = false
     defaultValue: "production",
     validate: (value) => validateDeploymentEnvironment(value || "production")
   }));
-  const region = defaults.region ?? await unwrap2(await text2({
-    message: `${cloud.toUpperCase()} region`,
+  const region = !isOpenTofuCloud(cloud) ? defaults.region ?? null : defaults.region ?? await unwrap2(await text2({
+    message: `${cloudLabels[cloud]} region`,
     placeholder: defaultRegions[cloud],
     defaultValue: defaultRegions[cloud],
     validate: (value) => validateRegion(value || defaultRegions[cloud])
@@ -3390,7 +3540,7 @@ async function collectDeploymentSelection2(defaults = {}, nonInteractive = false
     placeholder: "app.example.com",
     validate: (value) => validateDomain(value ?? "")
   }));
-  const haEnabled = defaults.haEnabled ?? await unwrap2(await confirm2({
+  const haEnabled = !isOpenTofuCloud(cloud) ? defaults.haEnabled ?? false : defaults.haEnabled ?? await unwrap2(await confirm2({
     message: "Enable the higher-availability profile?",
     initialValue: false
   }));
@@ -3409,14 +3559,31 @@ async function collectDeploymentSelection2(defaults = {}, nonInteractive = false
 // src/deployment.ts
 import { mkdir as mkdir3, readFile as readFile4, rm as rm2, stat as stat3, writeFile as writeFile3 } from "node:fs/promises";
 import { join as join5 } from "node:path";
-var deploymentClouds2 = ["aws", "gcp", "azure"];
-var frontendTargets2 = ["native", "vercel", "cloudflare"];
+var DEPLOYMENT_ENVIRONMENT_RE2 = /^[a-z][a-z0-9-]{1,30}$/;
+var REGION_RE2 = /^[a-z0-9][a-z0-9-]{1,31}$/;
+var DOMAIN_RE2 = /^(?=.{1,253}$)(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/;
+var deploymentClouds2 = ["aws", "gcp", "railway"];
+var openTofuClouds2 = ["aws", "gcp"];
+var frontendTargets2 = ["native", "cloudflare"];
 var storageProviders2 = ["r2", "s3", "gcs"];
 var storageProvidersByCloud2 = {
   aws: ["s3", "r2"],
   gcp: ["gcs", "r2"],
-  azure: ["r2"]
+  railway: ["r2"]
+};
+var frontendTargetsByCloud2 = {
+  aws: ["native", "cloudflare"],
+  gcp: ["native", "cloudflare"],
+  railway: ["cloudflare"]
 };
+var cloudLabels2 = {
+  aws: "AWS",
+  gcp: "GCP",
+  railway: "Railway"
+};
+function isOpenTofuCloud2(cloud) {
+  return openTofuClouds2.some((candidate) => candidate === cloud);
+}
 function isDeploymentCloud2(value) {
   return deploymentClouds2.some((cloud) => cloud === value);
 }
@@ -3428,12 +3595,12 @@ function isStorageProvider2(value) {
 }
 function parseDeploymentCloud2(value) {
   if (!isDeploymentCloud2(value))
-    throw new Error("Cloud must be aws, gcp, or azure.");
+    throw new Error("Cloud must be aws, gcp, or railway.");
   return value;
 }
 function parseFrontendTarget2(value) {
   if (!isFrontendTarget2(value)) {
-    throw new Error("Frontend target must be native, vercel, or cloudflare.");
+    throw new Error("Frontend target must be native or cloudflare.");
   }
   return value;
 }
@@ -3443,19 +3610,19 @@ function parseStorageProvider2(value) {
   return value;
 }
 function validateDeploymentEnvironment2(value) {
-  if (!/^[a-z][a-z0-9-]{1,30}$/.test(value)) {
+  if (!DEPLOYMENT_ENVIRONMENT_RE2.test(value)) {
     return "Environment must use 2-31 lowercase letters, numbers, or hyphens.";
   }
   return;
 }
 function validateRegion2(value) {
-  if (!/^[a-z0-9][a-z0-9-]{1,31}$/.test(value)) {
+  if (!REGION_RE2.test(value)) {
     return "Region must use 2-32 lowercase letters, numbers, or hyphens.";
   }
   return;
 }
 function validateDomain2(value) {
-  if (value.length > 80 || !/^(?=.{1,253}$)(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/.test(value)) {
+  if (value.length > 80 || !DOMAIN_RE2.test(value)) {
     return "Enter a lowercase hostname such as api.example.com, without a protocol or path.";
   }
   return;
@@ -3464,12 +3631,24 @@ function validateDeploymentSelection2(selection) {
   if (!storageProvidersByCloud2[selection.cloud].includes(selection.storageProvider)) {
     throw new Error(`${selection.storageProvider} storage is not supported for ${selection.cloud} deployments.`);
   }
+  if (!frontendTargetsByCloud2[selection.cloud].includes(selection.frontendTarget)) {
+    throw new Error(`The ${selection.frontendTarget} frontend is not supported for ${selection.cloud} deployments.`);
+  }
+  if (isOpenTofuCloud2(selection.cloud)) {
+    const regionError = validateRegion2(selection.region ?? "");
+    if (regionError)
+      throw new Error(regionError);
+  } else {
+    if (selection.region !== null) {
+      throw new Error("Railway selects its region per service; omit the region.");
+    }
+    if (selection.haEnabled) {
+      throw new Error("The higher-availability profile applies to AWS and GCP only.");
+    }
+  }
   const environmentError = validateDeploymentEnvironment2(selection.environment);
   if (environmentError)
     throw new Error(environmentError);
-  const regionError = validateRegion2(selection.region);
-  if (regionError)
-    throw new Error(regionError);
   const apiError = validateDomain2(selection.apiDomain);
   if (apiError)
     throw new Error(`API domain: ${apiError}`);
@@ -3501,20 +3680,86 @@ function createDeploymentConfig2(projectName, selection) {
     ha_enabled: selection.haEnabled
   };
 }
-function deploymentReadme2(config) {
-  const identity = config.cloud === "aws" ? "`AWS_ROLE_ARN` secret" : config.cloud === "gcp" ? "`GCP_WORKLOAD_IDENTITY_PROVIDER` and `GCP_SERVICE_ACCOUNT` secrets" : "`AZURE_CLIENT_ID`, `AZURE_TENANT_ID`, and `AZURE_SUBSCRIPTION_ID` secrets";
-  const providerInputs = config.cloud === "aws" ? "Route 53 zone or certificate identifiers and runtime Secrets Manager ARNs" : config.cloud === "gcp" ? "GCP project, Cloud DNS zone, and runtime Secret Manager names" : "Azure DNS zone ID and runtime Key Vault secret identifiers";
+function lockSummary2(config) {
+  return `The deployment target is locked:
+
+- backend: **${cloudLabels2[config.cloud]}**;
+- storage: **${config.storage_provider}**;
+- frontend: **${config.frontend_target}**;
+- environment: **${config.environment}**.`;
+}
+function railwayReadme2(config) {
+  return `# Deployment setup
+
+${lockSummary2(config)}
+
+The production hosts are:
+
+- API: \`${config.api_domain}\`;
+- frontend: \`${config.frontend_domain}\`.
+
+## Railway API and PostgreSQL
+
+1. Create a Railway project with a PostgreSQL service and an API service connected to this
+   repository. Build from the repository root, because the image copies the whole workspace.
+2. Set the API service's config-as-code path to \`apps/server/railway.toml\`. It builds
+   \`apps/server/Dockerfile\`, runs \`./server migrate\` before each deploy, starts \`./server serve\`,
+   and admits traffic only after \`/ready\` succeeds.
+3. Set these API service variables in the \`${config.environment}\` Railway environment:
+
+   \`\`\`text
+   DATABASE_URL=\${{Postgres.DATABASE_URL}}
+   ENVIRONMENT=production
+   TRUSTED_PROXY_PROFILE=railway
+   DEPLOYMENT_CLOUD=railway
+   FRONTEND_URL=https://${config.frontend_domain}
+   SERVER_URL=https://${config.api_domain}
+   \`\`\`
+
+   Add \`BETTER_AUTH_SECRET\`, \`RESEND_API_KEY\`, \`EMAIL_FROM\`, \`APP_DB_POOL_MAX\`, and
+   \`AUTH_DB_POOL_MAX\`, then the Cloudflare R2 storage variables and every enabled billing,
+   monitoring, and OAuth value. Railway injects \`PORT\`; leave it unset.
+
+4. Add the API host as the service's custom domain and publish the DNS records Railway reports. A
+   Cloudflare-managed zone keeps them \`DNS only\`.
+
+## Cloudflare frontend
+
+1. Create a Cloudflare Workers project rooted at \`apps/web\`. It uses \`apps/web/wrangler.toml\`, which
+   serves \`dist\` as static assets with single-page-application fallback.
+2. Build with \`pnpm run build:prod\` and these variables:
+
+   \`\`\`text
+   VITE_APP_ENV=production
+   VITE_API_URL=https://${config.api_domain}
+   \`\`\`
+
+   Add \`VITE_TERMS_URL\` and \`VITE_PRIVACY_URL\`, plus \`VITE_MARKETING_URL\` when the product has a
+   public marketing site.
+
+3. Attach the frontend host as the Worker's custom domain.
+
+## Verify
+
+\`\`\`sh
+API_ORIGIN=https://${config.api_domain} \\
+WEB_ORIGIN=https://${config.frontend_domain} \\
+bash scripts/verify-public-deployment.sh
+\`\`\`
+
+The provider lock is deliberate. Restore the deployment directories from a fresh licensed release
+before changing providers.
+`;
+}
+function openTofuReadme2(config) {
+  const identity = config.cloud === "aws" ? "`AWS_ROLE_ARN` secret" : "`GCP_WORKLOAD_IDENTITY_PROVIDER` and `GCP_SERVICE_ACCOUNT` secrets";
+  const providerInputs = config.cloud === "aws" ? "Route 53 zone or certificate identifiers and runtime Secrets Manager ARNs" : "GCP project, Cloud DNS zone, and runtime Secret Manager names";
   const storageSetup = config.storage_provider === "r2" ? `Create private staging and public Cloudflare R2 buckets, then store the required storage
    variables in the runtime secret container.` : `${config.storage_provider.toUpperCase()} application buckets, lifecycle policy, CORS, public access, and workload permissions are
    managed by the selected OpenTofu root.`;
   return `# Deployment setup
 
-The deployment target is locked:
-
-- backend: **${config.cloud.toUpperCase()}**;
-- storage: **${config.storage_provider}**;
-- frontend: **${config.frontend_target}**;
-- environment: **${config.environment}**.
+${lockSummary2(config)}
 
 ## Protected GitHub environment
 
@@ -3524,8 +3769,8 @@ Create a GitHub environment named \`${config.environment}\` and configure:
 - a \`BACKEND_HCL\` secret containing the selected remote-state backend configuration;
 - a \`TFVARS_JSON\` secret containing only:
   - ${providerInputs};
-- \`VITE_TERMS_URL\` and \`VITE_PRIVACY_URL\`, plus \`VITE_MARKETING_URL\` when the product has a
-  public marketing site.
+- \`VITE_TERMS_URL\` and \`VITE_PRIVACY_URL\`, plus \`VITE_MARKETING_URL\` when the product has a public
+  marketing site.
 
 ## Cloud preparation
 
@@ -3546,9 +3791,33 @@ The workflow creates the registry first, pushes an immutable image, provisions t
 traffic disabled, runs migrations, and admits traffic only after migration succeeds.
 
 The provider lock is deliberate. Restore the deployment directories from a fresh licensed release
-before changing cloud providers.
+before changing providers.
 `;
 }
+function deploymentReadme2(config) {
+  return config.cloud === "railway" ? railwayReadme2(config) : openTofuReadme2(config);
+}
+function openTofuPaths2(cloud) {
+  return [
+    `infra/bootstrap/${cloud}`,
+    `infra/modules/${cloud}`,
+    `infra/roots/${cloud}`,
+    `scripts/deploy/release-${cloud}.sh`,
+    `scripts/deploy/frontend-${cloud}.sh`
+  ];
+}
+function unusedDeploymentPaths2(selection) {
+  const paths = selection.cloud === "railway" ? ["infra", "scripts/deploy", ".github/workflows/deploy-cloud.yml"] : [
+    ...openTofuClouds2.filter((cloud) => cloud !== selection.cloud).flatMap(openTofuPaths2),
+    "apps/server/railway.toml"
+  ];
+  if (selection.frontendTarget === "native")
+    paths.push("apps/web/wrangler.toml");
+  else if (selection.cloud !== "railway") {
+    paths.push(`scripts/deploy/frontend-${selection.cloud}.sh`);
+  }
+  return paths;
+}
 async function removeIfPresent2(target) {
   if (!await stat3(target).catch(() => {
     return;
@@ -3557,6 +3826,20 @@ async function removeIfPresent2(target) {
   await rm2(target, { recursive: true, force: true });
   return true;
 }
+async function removeInfrastructureScript2(repositoryRoot) {
+  const packagePath = join5(repositoryRoot, "package.json");
+  const content = await readFile4(packagePath, "utf8").catch(() => {
+    return;
+  });
+  if (!content)
+    return;
+  const rootPackage = JSON.parse(content);
+  if (!rootPackage.scripts?.["verify:infra"])
+    return;
+  delete rootPackage.scripts["verify:infra"];
+  await writeFile3(packagePath, `${JSON.stringify(rootPackage, null, 2)}
+`);
+}
 async function applyDeploymentSelection2(repositoryRoot, projectName, selection) {
   const config = createDeploymentConfig2(projectName, selection);
   const configPath = join5(repositoryRoot, "deployment/config.json");
@@ -3570,40 +3853,12 @@ async function applyDeploymentSelection2(repositoryRoot, projectName, selection)
 `);
   await writeFile3(join5(repositoryRoot, "deployment/README.md"), deploymentReadme2(config));
   const removed = [];
-  for (const cloud of deploymentClouds2) {
-    if (cloud === selection.cloud)
-      continue;
-    for (const relativePath of [
-      `infra/bootstrap/${cloud}`,
-      `infra/modules/${cloud}`,
-      `infra/roots/${cloud}`,
-      `scripts/deploy/release-${cloud}.sh`,
-      `scripts/deploy/frontend-${cloud}.sh`
-    ]) {
-      if (await removeIfPresent2(join5(repositoryRoot, relativePath)))
-        removed.push(relativePath);
-    }
-  }
-  const adapters = [
-    { target: "vercel", path: "apps/web/vercel.json" },
-    { target: "cloudflare", path: "apps/web/wrangler.toml" },
-    {
-      target: "azure-native",
-      path: "apps/web/public/staticwebapp.config.json"
-    }
-  ];
-  const selectedAdapter = selection.frontendTarget === "native" ? selection.cloud === "azure" ? "azure-native" : undefined : selection.frontendTarget;
-  for (const adapter of adapters) {
-    if (adapter.target === selectedAdapter)
-      continue;
-    if (await removeIfPresent2(join5(repositoryRoot, adapter.path)))
-      removed.push(adapter.path);
-  }
-  if (selection.frontendTarget !== "native") {
-    const nativeScript = `scripts/deploy/frontend-${selection.cloud}.sh`;
-    if (await removeIfPresent2(join5(repositoryRoot, nativeScript)))
-      removed.push(nativeScript);
+  for (const relativePath of unusedDeploymentPaths2(selection)) {
+    if (await removeIfPresent2(join5(repositoryRoot, relativePath)))
+      removed.push(relativePath);
   }
+  if (removed.includes("infra"))
+    await removeInfrastructureScript2(repositoryRoot);
   return removed;
 }
 
@@ -3632,12 +3887,13 @@ import { rm as rm3 } from "node:fs/promises";
 import { join as join6 } from "node:path";
 import { Readable, Transform } from "node:stream";
 import { pipeline } from "node:stream/promises";
+var TRAILING_SLASHES_RE = /\/+$/;
 var RELEASE_TAG_PATTERN2 = /^v\d+\.\d+\.\d+(?:-rc\.\d+)?$/;
 var INDEX_TIMEOUT_MS = 15000;
 var DOWNLOAD_TIMEOUT_MS = 300000;
 function deliveryBaseUrl(environment = process.env) {
   const configured = environment[DELIVERY_URL_VARIABLE]?.trim();
-  return (configured || DELIVERY_BASE_URL).replace(/\/+$/, "");
+  return (configured || DELIVERY_BASE_URL).replace(TRAILING_SLASHES_RE, "");
 }
 function entitledEditions(index) {
   if (!Array.isArray(index.editions))
@@ -3756,6 +4012,7 @@ async function downloadAsset(licenseKey, releaseTag, assetName, directory, baseU
 }
 
 // src/scaffold.ts
+var SHA256_CHECKSUM_LINE_RE = /^([a-f0-9]{64})\s+\*?([^\s]+)$/i;
 var execFileAsync = promisify(execFile);
 async function assertEmptyTarget(targetDirectory) {
   try {
@@ -3825,7 +4082,7 @@ async function assertNoSymbolicLinks(directory, root = directory, isIncluded) {
   }
 }
 function verifyReleaseMetadata(checksum, manifest, artifactName, digest, templateRef) {
-  const checksumMatch = checksum.trim().match(/^([a-f0-9]{64})\s+\*?([^\s]+)$/i);
+  const checksumMatch = checksum.trim().match(SHA256_CHECKSUM_LINE_RE);
   if (!checksumMatch || checksumMatch[2] !== artifactName) {
     throw new Error(`${CLI_NAME2} release checksum metadata is malformed.`);
   }
@@ -4041,6 +4298,9 @@ async function assembleEditions(target, selection, { keepStartOverlay = false }
 async function applyStartIdentity(target, appName) {
   await rewriteIfPresent(join7(target, "apps/start/wrangler.jsonc"), (content) => rewriteStartWorkerIdentifiers(content, appName));
 }
+async function renameSiteWorker(target, appName) {
+  await rewriteIfPresent(join7(target, "apps/site/wrangler.jsonc"), (content) => rewriteSiteWorkerName(content, appName));
+}
 async function renameFrontendWorker(target, appName) {
   const workerPath = join7(target, "apps/web/wrangler.toml");
   if (!await stat4(workerPath).catch(() => {
@@ -4152,6 +4412,7 @@ async function scaffold(options) {
     const packagePath = join7(target, "package.json");
     const packageReplacements = await rewriteFile(packagePath, (content) => rewriteRootPackageName(content, options.appName));
     await renameFrontendWorker(target, options.appName);
+    await renameSiteWorker(target, options.appName);
     const scope = await applyScopeRewrite(target, options.scope);
     if (selection.web) {
       await neutralizeAgentInstructions(target);
@@ -4185,6 +4446,10 @@ async function scaffold(options) {
 }
 
 // src/cli.ts
+var COMBINING_MARK_RE = /\p{Mark}/gu;
+var NON_ALPHANUMERIC_RE = /[^a-z0-9]+/g;
+var OUTER_DASHES_RE = /^-+|-+$/g;
+
 class CliCancelled extends Error {
 }
 function usage() {
@@ -4215,15 +4480,15 @@ Options:
   --no-install        Skip dependency installation
   --start             Start Postgres and development servers after creation
   --no-start          Create the application without starting it
-  --cloud <provider>  Configure AWS, GCP, or Azure deployment during setup
+  --cloud <provider>  Configure AWS, GCP, or Railway deployment during setup
   --storage <provider> Select r2, s3, or gcs object storage
-  --no-deploy         Keep every cloud option for later deployment setup
-  --frontend <target> Select native, vercel, or cloudflare frontend hosting
+  --no-deploy         Keep every deployment option for later setup
+  --frontend <target> Select native or cloudflare frontend hosting (Railway: cloudflare)
   --deploy-environment <name> Deployment environment (default: production)
-  --region <name>      Cloud region
+  --region <name>      AWS or GCP region
   --api-domain <host>  Stable production API hostname
   --frontend-domain <host> Stable production frontend hostname
-  --ha / --no-ha      Enable or disable the higher-availability profile
+  --ha / --no-ha      Enable or disable the AWS or GCP higher-availability profile
   -v, --version       Print the CLI version
   -h, --help          Show this help
 
@@ -4231,7 +4496,8 @@ Agent tooling:
   ${agentSetupUsage(CLI_NAME)}
 
 Deployment:
-  Run pnpm deploy:configure inside a generated app to make a deferred cloud selection.`;
+  Run pnpm deploy:configure inside a generated app to make a deferred deployment selection.
+  The TanStack Start edition always deploys to Cloudflare Workers and D1.`;
 }
 function takeValue3(args, index, flag) {
   const value = args[index + 1];
@@ -4334,7 +4600,7 @@ function suggestBrandName(appName) {
   return appName.split("-").map((segment) => productAcronyms[segment] ?? `${segment.charAt(0).toUpperCase()}${segment.slice(1)}`).join(" ");
 }
 function suggestScope(brandName, fallbackAppName) {
-  const namespace = brandName.normalize("NFKD").replace(/\p{Mark}/gu, "").toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
+  const namespace = brandName.normalize("NFKD").replace(COMBINING_MARK_RE, "").toLowerCase().replace(NON_ALPHANUMERIC_RE, "-").replace(OUTER_DASHES_RE, "");
   return namespace || fallbackAppName;
 }
 async function unwrapPrompt(value) {
@@ -4700,7 +4966,7 @@ ${completion.database}`);
       log.info("Mobile    pnpm dev:mobile \u2014 run `npx eas init` inside apps/mobile to claim your own\n          Expo project before the first build. See docs/mobile.md.");
     }
     if (options.deployment) {
-      log.info(`Deployment ${options.deployment.cloud.toUpperCase()} + ${options.deployment.storageProvider} + ${options.deployment.frontendTarget} locked. Review deployment/README.md.`);
+      log.info(`Deployment ${cloudLabels2[options.deployment.cloud]} + ${options.deployment.storageProvider} + ${options.deployment.frontendTarget} locked. Review deployment/README.md.`);
     } else {
       log.info("Deployment deferred. Run `pnpm deploy:configure` when you are ready.");
     }