Changelog

• Production Stripe webhooks now register themselves: make stripe.webhook.setup creates (or repairs) the endpoint and writes the signing secret, closing a gap where it had to be done by hand in the Stripe dashboard.
• Clear "billing isn't set up for this plan yet" messaging instead of a raw validation error when a price ID is missing.
• Fixed a stale-cache issue that could show a returning visitor a black screen after a deploy - /login is no longer edge-cached.
• make changelog.draft for generating changelog entries like this one from recent commits.

Template-side changes only - this covers what a clone of Warpkit actually gets, not warpkit.dev's own marketing site.

• Guided setup scripts: make github.oauth.setup for GitHub OAuth App creation, make stripe.setup targeting any env file.
• Auth hardening: Cloudflare Turnstile captcha, disposable-email + MX checks, CSRF and privilege-escalation fixes, and a Stripe webhook signature bug that was silently rejecting every event.
• Analytics: Microsoft Clarity added alongside Umami, both gated behind cookie consent.
• Credits top-up flow, and admin-managed feature flags (Apps/Audit Log/Files).
• Contact form component, and IndexNow submission support.
• Dark mode as the default, with the token/color-scheme work needed to kill flash-of-unstyled-content on cold loads.
• Static prerendering and consistent security headers applied across SSR responses.

First public release of Warpkit. Includes per-user SQLite with automatic migrations, Better Auth integration, Stripe billing with subscription and one-time payment support, background jobs via @bitclaw/jobs, Nitro plugin wiring, and the full skel scaffolding system for fast feature generation.

Beta release. Core auth, billing, and per-user DB patterns established. Background job queue wired to Nitro plugin with MSW-tested email:welcome handler. Skel templates added for rapid feature generation. Result-returning server functions standardised across all features.