@donkeylabs/cli 1.1.14 → 1.1.16

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@donkeylabs/cli",
-  "version": "1.1.14",
+  "version": "1.1.16",
   "type": "module",
   "description": "CLI for @donkeylabs/server - project scaffolding and code generation",
   "main": "./src/index.ts",

package/templates/sveltekit-app/.env.example

@@ -33,8 +33,10 @@ NODE_ENV=development
 # EXTERNAL SERVICES (examples)
 # =============================================================================
 
-# Email service (e.g., Resend, SendGrid)
+# Email service (Resend)
 # RESEND_API_KEY=re_xxxxxxxxxxxx
+# EMAIL_FROM=noreply@yourdomain.com
+# PUBLIC_BASE_URL=https://yourdomain.com
 
 # Payment processing (e.g., Stripe)
 # STRIPE_SECRET_KEY=sk_test_xxxxxxxxxxxx

package/templates/sveltekit-app/src/server/index.ts

@@ -6,6 +6,7 @@ import { Database } from "bun:sqlite";
 import { demoPlugin } from "./plugins/demo";
 import { workflowDemoPlugin } from "./plugins/workflow-demo";
 import { authPlugin } from "./plugins/auth";
+import { emailPlugin } from "./plugins/email";
 import demoRoutes from "./routes/demo";
 import { exampleRouter } from "./routes/example";
 import { authRouter } from "./routes/auth";
@@ -24,8 +25,48 @@ export const server = new AppServer({
   },
 });
 
-// Register plugins
-server.registerPlugin(authPlugin);  // Auth first - other plugins may depend on it
+// =============================================================================
+// AUTH PLUGIN CONFIGURATION
+// =============================================================================
+// Choose your auth strategy:
+//
+// 1. SESSION (default) - Stateful, stores sessions in database
+//    Best for: Web apps, server-rendered pages
+//    server.registerPlugin(authPlugin());
+//
+// 2. JWT - Stateless tokens, no database lookup needed
+//    Best for: Mobile apps, microservices, APIs
+//    server.registerPlugin(authPlugin({
+//      strategy: "jwt",
+//      jwt: { secret: process.env.JWT_SECRET! },
+//    }));
+//
+// 3. REFRESH-TOKEN - Short-lived access + long-lived refresh token
+//    Best for: SPAs, mobile apps needing token refresh
+//    server.registerPlugin(authPlugin({
+//      strategy: "refresh-token",
+//      jwt: {
+//        secret: process.env.JWT_SECRET!,
+//        accessExpiry: "15m",
+//        refreshExpiry: "30d",
+//      },
+//      cookie: { httpOnly: true, secure: true },
+//    }));
+//
+// =============================================================================
+
+// Using default session strategy for this template
+server.registerPlugin(authPlugin());
+
+// Email plugin - supports Resend or console (for development)
+// Configure with process.env.RESEND_API_KEY for production
+server.registerPlugin(emailPlugin({
+  provider: process.env.RESEND_API_KEY ? "resend" : "console",
+  resend: process.env.RESEND_API_KEY ? { apiKey: process.env.RESEND_API_KEY } : undefined,
+  from: process.env.EMAIL_FROM || "noreply@example.com",
+  baseUrl: process.env.PUBLIC_BASE_URL || "http://localhost:5173",
+}));
+
 server.registerPlugin(demoPlugin);
 server.registerPlugin(workflowDemoPlugin);