@flaredev/cli 0.1.0 → 0.1.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flaredev/cli",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "The flare command-line tool: create, generate, migrate, and deploy Flare apps",
   "license": "MIT",
   "author": "Muke Johnbaptist",
@@ -40,7 +40,7 @@
     "jiti": "^2.7.0",
     "jsonc-parser": "^3.3.1",
     "picocolors": "^1.1.1",
-    "@flaredev/core": "0.1.0"
+    "@flaredev/core": "0.1.1"
   },
   "engines": {
     "node": ">=22"

package/templates/app/README.md

@@ -1,9 +1,12 @@
 # __APP_NAME__
 
-A [Flare](https://github.com/) app running on Cloudflare Workers via vinext.
+A [Flare](https://flare-docs.codetotech.com) app running on Cloudflare Workers via vinext.
 
 ```bash
-__PM__ run dev      # start the dev server
-__PM__ run build    # production build
-__PM__ run deploy   # build and deploy to Cloudflare Workers
+__PM__ run dev             # start the dev server
+npx flare dev --tunnel     # ...and share it on a public https://*.trycloudflare.com URL
+__PM__ run build           # production build
+__PM__ run deploy          # build and deploy to Cloudflare Workers
 ```
+
+Docs: https://flare-docs.codetotech.com

package/templates/app/lib/auth.ts

@@ -1,44 +1,45 @@
-import { env, waitUntil } from "cloudflare:workers";
-import { betterAuth } from "better-auth";
-import { drizzleAdapter } from "@better-auth/drizzle-adapter";
-import { nextCookies } from "better-auth/next-js";
-import { admin } from "better-auth/plugins/admin";
-import { hashPassword, verifyPassword } from "@flaredev/core";
-import { getDb, schema } from "@/db";
-
-/** Optional: set when serving from a custom domain (e.g. https://example.com). */
-const configuredURL = (env as { BETTER_AUTH_URL?: string }).BETTER_AUTH_URL;
-
-export const auth = betterAuth({
-  appName: "__APP_NAME__",
-  secret: env.BETTER_AUTH_SECRET,
-  // Without BETTER_AUTH_URL, accept local dev on any port and this app's workers.dev
-  // host. Cloudflare only routes hosts this Worker serves, so the allowlist can't be spoofed.
-  baseURL: configuredURL || {
-    allowedHosts: ["localhost:*", "127.0.0.1:*", "__APP_NAME__.*.workers.dev"],
-  },
-  database: drizzleAdapter(getDb(), { provider: "sqlite", schema }),
-  socialProviders: __SOCIAL_PROVIDERS__,
-  emailAndPassword: {
-    enabled: true,
-    // PBKDF2 via WebCrypto: the default scrypt exceeds Workers CPU limits.
-    password: { hash: hashPassword, verify: verifyPassword },
-  },
-  advanced: {
-    // Let emails and other deferred work finish after the response is sent.
-    backgroundTasks: { handler: waitUntil },
-  },
-  plugins: [
-    // Adds user.role (default "user") and admin APIs. The /admin area allows ADMIN_ROLES (lib/admin.ts).
-    admin({ defaultRole: "user", adminRoles: ["admin"] }),
-    // Must stay last: lets server actions set auth cookies.
-    nextCookies(),
-  ],
-});
-
-export type Session = typeof auth.$Infer.Session;
-
-/** OAuth providers with credentials configured, e.g. ["github"]. */
-export function enabledSocialProviders(): string[] {
-  return Object.keys(auth.options.socialProviders ?? {});
-}
+import { env, waitUntil } from "cloudflare:workers";
+import { betterAuth } from "better-auth";
+import { drizzleAdapter } from "@better-auth/drizzle-adapter";
+import { nextCookies } from "better-auth/next-js";
+import { admin } from "better-auth/plugins/admin";
+import { hashPassword, verifyPassword } from "@flaredev/core";
+import { getDb, schema } from "@/db";
+
+/** Optional: set when serving from a custom domain (e.g. https://example.com). */
+const configuredURL = (env as { BETTER_AUTH_URL?: string }).BETTER_AUTH_URL;
+
+export const auth = betterAuth({
+  appName: "__APP_NAME__",
+  secret: env.BETTER_AUTH_SECRET,
+  // Without BETTER_AUTH_URL, accept local dev on any port, a `flare dev --tunnel` URL and
+  // this app's workers.dev host. Cloudflare only routes hosts this Worker serves, so a
+  // deployed app never sees a trycloudflare.com host and the allowlist can't be spoofed.
+  baseURL: configuredURL || {
+    allowedHosts: ["localhost:*", "127.0.0.1:*", "*.trycloudflare.com", "__APP_NAME__.*.workers.dev"],
+  },
+  database: drizzleAdapter(getDb(), { provider: "sqlite", schema }),
+  socialProviders: __SOCIAL_PROVIDERS__,
+  emailAndPassword: {
+    enabled: true,
+    // PBKDF2 via WebCrypto: the default scrypt exceeds Workers CPU limits.
+    password: { hash: hashPassword, verify: verifyPassword },
+  },
+  advanced: {
+    // Let emails and other deferred work finish after the response is sent.
+    backgroundTasks: { handler: waitUntil },
+  },
+  plugins: [
+    // Adds user.role (default "user") and admin APIs. The /admin area allows ADMIN_ROLES (lib/admin.ts).
+    admin({ defaultRole: "user", adminRoles: ["admin"] }),
+    // Must stay last: lets server actions set auth cookies.
+    nextCookies(),
+  ],
+});
+
+export type Session = typeof auth.$Infer.Session;
+
+/** OAuth providers with credentials configured, e.g. ["github"]. */
+export function enabledSocialProviders(): string[] {
+  return Object.keys(auth.options.socialProviders ?? {});
+}

package/templates/app/vite.config.ts

@@ -1,27 +1,29 @@
-import { defineConfig } from "vite";
-import vinext from "vinext";
-import { cloudflare } from "@cloudflare/vite-plugin";
-import { kvDataAdapter } from "@vinext/cloudflare/cache/kv-data-adapter";
-
-export default defineConfig({
-  plugins: [
-    vinext({
-      cache: {
-        // Data cache (`cached()`, fetch, "use cache") in Workers KV, shared by every colo.
-        // Entries live a day unless a tag revalidates them first; a colo may reuse its own
-        // copy for a minute after a write elsewhere.
-        data: kvDataAdapter({ ttlSeconds: 86_400, entryCacheTtlSeconds: 60 }),
-        // No `cdn` adapter yet. vinext's Workers Cache adapter (cdnAdapter) is experimental
-        // in the 1.0 beta: behind it, any page that redirects fails with "Too many
-        // redirects", and nothing is cached without an experimental two-stage deploy.
-        // See "Caching" in the Flare docs before turning it on.
-      },
-    }),
-    cloudflare({
-      viteEnvironment: {
-        name: "rsc",
-        childEnvironments: ["ssr"],
-      },
-    }),
-  ],
-});
+import { defineConfig } from "vite";
+import vinext from "vinext";
+import { cloudflare } from "@cloudflare/vite-plugin";
+import { kvDataAdapter } from "@vinext/cloudflare/cache/kv-data-adapter";
+
+export default defineConfig({
+  // `flare dev --tunnel` serves the dev server on a https://*.trycloudflare.com URL.
+  server: { allowedHosts: [".trycloudflare.com"] },
+  plugins: [
+    vinext({
+      cache: {
+        // Data cache (`cached()`, fetch, "use cache") in Workers KV, shared by every colo.
+        // Entries live a day unless a tag revalidates them first; a colo may reuse its own
+        // copy for a minute after a write elsewhere.
+        data: kvDataAdapter({ ttlSeconds: 86_400, entryCacheTtlSeconds: 60 }),
+        // No `cdn` adapter yet. vinext's Workers Cache adapter (cdnAdapter) is experimental
+        // in the 1.0 beta: behind it, any page that redirects fails with "Too many
+        // redirects", and nothing is cached without an experimental two-stage deploy.
+        // See "Caching" in the Flare docs before turning it on.
+      },
+    }),
+    cloudflare({
+      viteEnvironment: {
+        name: "rsc",
+        childEnvironments: ["ssr"],
+      },
+    }),
+  ],
+});