feat(rigup): clack-based prompt flow with curated catalog and npm search

- Replace minimal inline prompts with a full @clack/prompts flow:
  project name, description, package manager, TypeScript version,
  server-needed gate, one big multiselect over the curated catalog
  (server-only items filtered out when no backend), and notes.
- Add a curated library catalog (~55 entries across 19 categories,
  inspired by TanStack/cli's add-on taxonomy) with category prefixes
  shown in the multiselect for quick scanning.
- Add a continuous npm-search loop (clack text → select) so users can
  pull in libraries beyond the curated set; exits on empty input.
- Spawn Claude Code with `--dangerously-skip-permissions --chrome` so
  the long-running, autonomous integration doesn't stall on prompts.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: cnwangjie

packages/rigup/src/claude.ts

@@ -23,9 +23,17 @@ export interface SpawnOptions {
  * Hand off to Claude Code in interactive mode with the integration prompt as
  * the first message. Stdio is inherited so the user sees and interacts with
  * Claude directly.
+ *
+ * Flags:
+ * - `--dangerously-skip-permissions`: integration is long, auto-running, and
+ *   would otherwise stall on every file-write / shell-exec permission prompt.
+ * - `--chrome`: enable Chrome browser automation for any docs / smoke-checks
+ *   the integration may want to do.
  */
+export const CLAUDE_FLAGS = ["--dangerously-skip-permissions", "--chrome"] as const;
+
 export async function spawnClaude({ cwd, prompt }: SpawnOptions): Promise<number> {
-  const child = execa(CLAUDE_BIN, [prompt], {
+  const child = execa(CLAUDE_BIN, [...CLAUDE_FLAGS, prompt], {
     cwd,
     stdio: "inherit",
     reject: false,

packages/rigup/src/init.ts

@@ -1,8 +1,12 @@
 import { mkdir, readdir, writeFile } from "node:fs/promises";
 import { resolve } from "node:path";
-import * as p from "@clack/prompts";
 import pc from "picocolors";
-import { isClaudeInstalled, spawnClaude, installHint } from "./claude.js";
+import {
+  CLAUDE_FLAGS,
+  isClaudeInstalled,
+  installHint,
+  spawnClaude,
+} from "./claude.js";
 import { runPrompts } from "./prompts.js";
 import { renderSpecMarkdown, SPEC_FILENAME, type StackSpec } from "./spec.js";
 
@@ -14,10 +18,8 @@ export interface InitOptions {
 }
 
 export async function init(options: InitOptions = {}): Promise<void> {
-  p.intro(pc.bgCyan(pc.black(" rigup ")));
-
   if (!(await isClaudeInstalled())) {
-    p.cancel(`Claude Code CLI is required.${installHint}`);
+    process.stderr.write(`${pc.red("✗")} Claude Code CLI is required.${installHint}`);
     process.exit(1);
   }
 
@@ -30,11 +32,10 @@ export async function init(options: InitOptions = {}): Promise<void> {
   await ensureEmptyDir(targetDir, options.here ?? false);
   await writeSeed(targetDir, spec);
 
-  p.note(
-    `Wrote spec → ${pc.cyan(`${targetDir}/${SPEC_FILENAME}`)}\nHanding off to Claude Code…`,
-    "Ready",
+  process.stdout.write(
+    `\n${pc.green("✓")} Wrote spec → ${pc.cyan(`${targetDir}/${SPEC_FILENAME}`)}\n` +
+      `${pc.dim(`Handing off to Claude Code (${CLAUDE_FLAGS.join(" ")})…`)}\n\n`,
   );
-  p.outro("Claude is taking over from here.");
 
   const code = await spawnClaude({
     cwd: targetDir,
@@ -49,10 +50,12 @@ async function ensureEmptyDir(dir: string, here: boolean): Promise<void> {
   const entries = await readdir(dir);
   const significant = entries.filter((e) => !e.startsWith("."));
   if (significant.length > 0) {
-    p.cancel(
-      here
-        ? `Current directory is not empty: ${dir}`
-        : `Target directory already contains files: ${dir}`,
+    process.stderr.write(
+      `${pc.red("✗")} ${
+        here
+          ? `Current directory is not empty: ${dir}`
+          : `Target directory already contains files: ${dir}`
+      }\n`,
     );
     process.exit(1);
   }

packages/rigup/src/libraries.ts

@@ -0,0 +1,137 @@
+/**
+ * Curated list of popular libraries in the TypeScript web ecosystem,
+ * surfaced as a multi-select checkbox in the prompt flow.
+ *
+ * Bias: things people actually reach for in 2026, one or two per slot.
+ * Not exhaustive — users can always add more via the npm search step.
+ */
+
+export type Category =
+  | "Framework"
+  | "UI components"
+  | "Styling"
+  | "Server framework"
+  | "API layer"
+  | "Database / ORM"
+  | "Auth"
+  | "State / data"
+  | "Forms"
+  | "Validation"
+  | "Animation"
+  | "Testing"
+  | "Lint & format"
+  | "Email"
+  | "Payments"
+  | "AI"
+  | "i18n"
+  | "Observability"
+  | "Tooling";
+
+export interface CuratedLibrary {
+  /** npm package name — written verbatim into the spec */
+  name: string;
+  /** short hint shown next to the name */
+  description: string;
+  category: Category;
+}
+
+export const CURATED: CuratedLibrary[] = [
+  // Framework
+  { name: "next", description: "React framework, App Router", category: "Framework" },
+  { name: "@tanstack/start", description: "TanStack full-stack framework", category: "Framework" },
+  { name: "react-router", description: "React Router (Remix successor)", category: "Framework" },
+  { name: "astro", description: "Content / island framework", category: "Framework" },
+  { name: "nuxt", description: "Vue framework", category: "Framework" },
+  { name: "@sveltejs/kit", description: "SvelteKit", category: "Framework" },
+  { name: "solid-start", description: "SolidJS framework", category: "Framework" },
+  { name: "vite", description: "Plain Vite SPA starter (no meta-framework)", category: "Framework" },
+
+  // UI components
+  { name: "shadcn-ui", description: "Copy-paste React components on Radix + Tailwind", category: "UI components" },
+  { name: "@radix-ui/react", description: "Unstyled accessible primitives", category: "UI components" },
+  { name: "@headlessui/react", description: "Unstyled accessible components", category: "UI components" },
+  { name: "@mantine/core", description: "Batteries-included React components", category: "UI components" },
+
+  // Styling
+  { name: "tailwindcss", description: "Utility-first CSS", category: "Styling" },
+  { name: "unocss", description: "On-demand atomic CSS", category: "Styling" },
+  { name: "@vanilla-extract/css", description: "Type-safe CSS-in-TS, zero runtime", category: "Styling" },
+  { name: "@pandacss/dev", description: "Style props at build time", category: "Styling" },
+
+  // Server framework
+  { name: "hono", description: "Small, fast, edge-friendly server framework", category: "Server framework" },
+  { name: "elysia", description: "Bun-native server framework", category: "Server framework" },
+  { name: "fastify", description: "Schema-driven Node server framework", category: "Server framework" },
+  { name: "express", description: "Classic Node server framework", category: "Server framework" },
+  { name: "@nestjs/core", description: "NestJS — opinionated, decorator-based", category: "Server framework" },
+
+  // API layer
+  { name: "@trpc/server", description: "tRPC — typesafe RPC", category: "API layer" },
+  { name: "@orpc/server", description: "oRPC — OpenAPI-compatible typesafe RPC", category: "API layer" },
+
+  // Database / ORM
+  { name: "drizzle-orm", description: "TypeScript-first ORM / query builder", category: "Database / ORM" },
+  { name: "prisma", description: "Schema-first ORM", category: "Database / ORM" },
+  { name: "kysely", description: "Type-safe SQL query builder", category: "Database / ORM" },
+  { name: "convex", description: "Realtime backend / DB (BaaS)", category: "Database / ORM" },
+
+  // Auth
+  { name: "better-auth", description: "Modern, framework-agnostic auth", category: "Auth" },
+  { name: "next-auth", description: "Auth.js (was NextAuth)", category: "Auth" },
+  { name: "@clerk/nextjs", description: "Hosted auth", category: "Auth" },
+  { name: "@workos-inc/authkit-nextjs", description: "WorkOS AuthKit", category: "Auth" },
+
+  // State / data
+  { name: "zustand", description: "Tiny global state", category: "State / data" },
+  { name: "jotai", description: "Atomic state", category: "State / data" },
+  { name: "@tanstack/react-query", description: "Async / server state", category: "State / data" },
+  { name: "swr", description: "Data fetching with cache", category: "State / data" },
+  { name: "@reduxjs/toolkit", description: "Redux with less boilerplate", category: "State / data" },
+
+  // Forms
+  { name: "react-hook-form", description: "Performant React forms", category: "Forms" },
+  { name: "@tanstack/react-form", description: "Headless form library", category: "Forms" },
+
+  // Validation
+  { name: "zod", description: "Schema validation", category: "Validation" },
+  { name: "valibot", description: "Modular schema validation", category: "Validation" },
+  { name: "arktype", description: "TS-syntax schema validation", category: "Validation" },
+
+  // Animation
+  { name: "motion", description: "Framer Motion (renamed `motion`)", category: "Animation" },
+  { name: "gsap", description: "Animation library", category: "Animation" },
+
+  // Testing
+  { name: "vitest", description: "Vite-native test runner", category: "Testing" },
+  { name: "playwright", description: "Browser end-to-end testing", category: "Testing" },
+
+  // Lint & format
+  { name: "@biomejs/biome", description: "Fast linter + formatter (Rust)", category: "Lint & format" },
+  { name: "eslint", description: "Linter", category: "Lint & format" },
+  { name: "prettier", description: "Code formatter", category: "Lint & format" },
+
+  // Email
+  { name: "react-email", description: "Email components in React", category: "Email" },
+  { name: "resend", description: "Transactional email API", category: "Email" },
+
+  // Payments
+  { name: "stripe", description: "Payments", category: "Payments" },
+  { name: "@polar-sh/sdk", description: "Polar payments", category: "Payments" },
+
+  // AI
+  { name: "ai", description: "Vercel AI SDK", category: "AI" },
+  { name: "@anthropic-ai/sdk", description: "Anthropic SDK", category: "AI" },
+  { name: "openai", description: "OpenAI SDK", category: "AI" },
+
+  // i18n
+  { name: "next-intl", description: "i18n for Next.js", category: "i18n" },
+  { name: "@inlang/paraglide-js", description: "Type-safe i18n (Paraglide)", category: "i18n" },
+
+  // Observability
+  { name: "@sentry/node", description: "Sentry error + perf monitoring", category: "Observability" },
+  { name: "posthog-js", description: "Product analytics", category: "Observability" },
+
+  // Tooling
+  { name: "storybook", description: "Component workbench", category: "Tooling" },
+  { name: "@t3-oss/env-nextjs", description: "Type-safe env vars (T3 Env)", category: "Tooling" },
+];

packages/rigup/src/npm.ts

@@ -0,0 +1,41 @@
+export interface NpmHit {
+  name: string;
+  version: string;
+  description: string;
+}
+
+interface NpmSearchResponse {
+  objects: Array<{
+    package: {
+      name: string;
+      version: string;
+      description?: string;
+    };
+  }>;
+}
+
+const SEARCH_ENDPOINT = "https://registry.npmjs.org/-/v1/search";
+
+export async function searchNpm(
+  query: string,
+  size = 10,
+  signal?: AbortSignal,
+): Promise<NpmHit[]> {
+  const trimmed = query.trim();
+  if (trimmed.length < 2) return [];
+
+  const effectiveSignal = signal ?? AbortSignal.timeout(5_000);
+  const url = `${SEARCH_ENDPOINT}?text=${encodeURIComponent(trimmed)}&size=${size}`;
+  const res = await fetch(url, {
+    headers: { Accept: "application/json" },
+    signal: effectiveSignal,
+  });
+  if (!res.ok) return [];
+
+  const data = (await res.json()) as NpmSearchResponse;
+  return data.objects.map(({ package: pkg }) => ({
+    name: pkg.name,
+    version: pkg.version,
+    description: pkg.description ?? "",
+  }));
+}