Changelog

Unreleased

Added SaaS recipes, readiness statuses, and stricter validation for complete product workflows.
Added recipe commands and install paths, including api-saas-starter, enterprise-saas, ai-saas-starter, cloudflare-saas, support-ops, security-center, integration-marketplace, and customer-intelligence.
Added an installable cloudflare-next-starter module for consuming apps while keeping StackFoundry itself on the standard Next.js/Vercel path.
Added Vercel AI building blocks: ai-sdk, ai-elements, and ai-chatbot-sdk.
Added cloudflare-kumo-ui as an optional Cloudflare UI building-block module.
Added agent-ready-installs with prompt packs and context files for coding assistants.
Added docs for recipes, install order, readiness, conventions, and a mirrored docs changelog.
Added OpenSSF Scorecard scanning and private vulnerability reporting links.

Added official upstream documentation links across provider-backed modules and cleaned duplicated Mintlify module docs.
Promoted installable preset manifests from planned to ready now that their source modules validate.
Sharpened public positioning around the API SaaS wedge: API keys, usage tracking, rate limits, credits, Stripe billing, docs, and webhooks as editable source.
Pointed module maintenance skills to installed shared provider, framework, database, SDK, and platform skills.
Standardized provider adapter registry language and replaced legacy provider wording/paths.
Renamed public command examples to stackfoundry.
Updated AGENTS.md to match the current recipes, readiness, generated-output, and maintenance-skill model.
Improved README badges, contribution controls, provider request templates, repo topics, and docs navigation for public discovery.
Updated GitHub Actions dependencies for checkout, Node setup, pnpm setup, and dependency review.

Hardened public repository security posture with private vulnerability reporting, safer checkout settings, OpenSSF Scorecard, dependency review, CodeQL, Dependabot vulnerability alerts, and clearer public-safety rules.

Fixed GitHub integration private-key newline handling in the installable source template.
Resolved the next-saas module/preset ambiguity by renaming the source shell module to next-saas-shell.

Released StackFoundry as a public source registry for production SaaS modules.
Standardized provider adapters as explicit module choices, separate from source-owned defaults.
Added reusable registry card surfaces for modules, presets, provider adapters, and compact discovery rows.
Expanded registry validation, generated public registry output, and module maintenance skill coverage.
Added GitHub-ready CI, security checks, repository hygiene, and ownership gates for the hosted web app.