@binary1702/auth 0.1.0 → 0.1.1

package/PROMPT.md

@@ -0,0 +1,80 @@
+# Agent prompt: install @binary1702/auth
+
+Copy everything below the line into an AI coding agent running inside the Next.js project.
+
+---
+
+Install `@binary1702/auth` in this project. It adds username + password auth to a Next.js App Router app. Follow these steps exactly and report the result of each.
+
+## Before you start
+
+Check these and stop if any fails:
+
+- `app/` or `src/app/` exists (App Router). Pages Router is not supported.
+- A Postgres connection string is available. Look for `DATABASE_URL` or `NEON_DATABASE_URL` in `.env.local` or the environment. If none exists, ask me for one.
+- If the project already has auth (a `proxy.ts` or `middleware.ts` that checks sessions, or packages like next-auth, better-auth, clerk, `@neondatabase/auth`), tell me before continuing. This package will put its own sign-in in front of everything.
+
+## Install
+
+Run, in the project root:
+
+```bash
+npx @binary1702/auth
+```
+
+It is interactive. It asks for the Postgres connection string, then a username and a password for the first user. If you cannot answer prompts, run it and hand control to me.
+
+It does the following, skipping anything already done:
+
+```
+✓ @binary1702/auth installed             → package.json
+✓ DATABASE_URL → .env.local
+✓ AUTH_SECRET generated → .env.local
+✓ app/auth/[...path]/route.ts            → export { GET, POST } from "@binary1702/auth/next"
+✓ proxy.ts                               → guard in front of every route
+✓ auth_users table ready                 → in the database
+✓ user "<name>" created
+```
+
+If `proxy.ts` or `middleware.ts` already existed, the CLI does not touch it and prints a snippet instead. Merge the snippet into the existing file: call the package's `proxy` for the paths you want protected and keep the matcher inline. On Next 15 the file is `middleware.ts`, same content.
+
+## Verify
+
+Start the dev server and check with real HTTP requests:
+
+| Request | Expect |
+|---|---|
+| `GET /` with no cookie | redirect to `/auth/sign-in` |
+| `GET /auth/sign-in` | 200, HTML form |
+| `GET /api/<any>` with no cookie | 401 JSON |
+| `POST /auth/sign-in` JSON `{ "username", "password" }` | 200 `{ user }` and `Set-Cookie: auth_session=…; HttpOnly` |
+| `GET /auth/session` with that cookie | `{ user: { id, username } }` |
+| `GET /auth/sign-out` | cookie cleared, redirect to sign-in |
+
+Then open `/auth/sign-in` in the browser, sign in, confirm you land on `/`.
+
+## Wire it into the code
+
+Wherever the app needs the current user on the server:
+
+```ts
+import { requireUser } from "@binary1702/auth/next"
+
+const user = await requireUser()   // { id, username } or throws AuthError (401)
+```
+
+`getUser()` returns `null` instead of throwing. Both work in route handlers, server components and server actions.
+
+For sign-out, link to `/auth/sign-out`. For client code, `fetch("/auth/session")`.
+
+Do not build a sign-up page. Users are created with `npx @binary1702/auth add-user`.
+
+## Deploy
+
+Copy `DATABASE_URL` and `AUTH_SECRET` from `.env.local` into the host's environment. Nothing else.
+
+## Report
+
+Tell me, in order: each install step and whether it was done or skipped, each verify row with the actual status code, anything that failed with the error text verbatim, and anything that took more steps than it should. Do not modify the package itself, only this project.
+
+Docs: https://www.npmjs.com/package/@binary1702/auth

package/README.md

@@ -8,6 +8,8 @@ npx @binary1702/auth
 
 One command. It installs itself, writes two env vars, writes two files, creates the table, creates your first user. Then you move on.
 
+Letting an AI agent do the install? Paste [PROMPT.md](./PROMPT.md) into it. Same steps, written for an agent, with the checks to run and what to report back. [INSTALL.md](./INSTALL.md) is the short human version.
+
 ---
 
 ## Quick start (new project)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@binary1702/auth",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Username + password auth for Next.js. One command: npx @binary1702/auth",
   "type": "module",
   "repository": {
@@ -30,7 +30,8 @@
   },
   "files": [
     "dist",
-    "INSTALL.md"
+    "INSTALL.md",
+    "PROMPT.md"
   ],
   "scripts": {
     "build": "tsc",