@glinr/create-theauth-app 0.2.0 → 0.3.0

package/README.md

@@ -1,6 +1,8 @@
 # @glinr/create-theauth-app
 
-Scaffold a TheAuth app in one command.
+[npm](https://www.npmjs.com/package/@glinr/create-theauth-app) · [Source](https://github.com/glincker/theauth/tree/main/packages/create-theauth-app) · [Docs](https://docs.theauth.dev/quickstart) · [All packages](https://github.com/glincker/theauth#packages)
+
+Scaffold a theAuth app in one command.
 
 ```bash
 npm create theauth-app@latest
@@ -14,11 +16,13 @@ bunx @glinr/create-theauth-app
 
 You'll be asked for a project directory, a template, and a database driver. The CLI then writes the project, installs deps, and prints the next commands to run.
 
+Part of [theAuth](https://theauth.dev), open-source auth for AI agents and humans. Docs: [docs.theauth.dev](https://docs.theauth.dev).
+
 ## Templates
 
 | Template | Status | Stack |
 | --- | --- | --- |
-| `next-saas` | available | Next.js App Router · Drizzle · TheAuth auth |
+| `next-saas` | available | Next.js App Router · Drizzle · theAuth auth |
 | `hono-mcp` | available | Hono server · MCP OAuth 2.1 |
 | `expo-mobile` | coming soon | Expo Router · React Native |
 
@@ -31,7 +35,7 @@ You'll be asked for a project directory, a template, and a database driver. The
 
 A working Next.js app with:
 
-- `createKavach` already wired in `lib/auth.ts`
+- `createTheAuth` already wired in `lib/auth.ts`
 - Drizzle schema and migrations for the auth tables
 - Sign-in / sign-up routes using the prebuilt React components
 - `.env.example` with the secrets you need to fill in
@@ -48,8 +52,14 @@ pnpm dev
 
 ## Links
 
-- TheAuth repo: <https://github.com/glincker/theauth>
-- Docs: <https://docs.theauth.com>
+- theAuth repo: <https://github.com/glincker/theauth>
+- Docs: <https://docs.theauth.dev>
+
+## Community
+
+[![Discord](https://img.shields.io/discord/829168897080557579?style=flat-square&logo=discord&logoColor=white&label=discord&color=5865F2)](https://discord.gg/Ar5pcaZB99)
+
+Questions and help in the `#theauth` forum on the [GLINR Discord](https://discord.gg/Ar5pcaZB99).
 
 ## License
 

package/dist/bin.js

@@ -2,7 +2,7 @@
 #!/usr/bin/env node
 import {
   main
-} from "./chunk-Z6TQPZQK.js";
+} from "./chunk-XHCNQ3QD.js";
 
 // src/bin.ts
 main().catch((err) => {

package/dist/{chunk-Z6TQPZQK.js → chunk-XHCNQ3QD.js}

@@ -59,7 +59,7 @@ function detectPackageManager() {
   return "npm";
 }
 function defaultDbUrl(driver) {
-  if (driver === "better-sqlite3") return "file:./kavach.db";
+  if (driver === "better-sqlite3") return "file:./theauth.db";
   return "";
 }
 function printBanner() {

package/dist/index.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   main
-} from "./chunk-Z6TQPZQK.js";
+} from "./chunk-XHCNQ3QD.js";
 export {
   main
 };

package/package.json

@@ -1,15 +1,15 @@
 {
   "name": "@glinr/create-theauth-app",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Scaffold a TheAuth-powered app in seconds",
   "type": "module",
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "https://github.com/glincker/theauth.git",
+    "url": "git+https://github.com/glincker/theauth.git",
     "directory": "packages/create-theauth-app"
   },
-  "homepage": "https://theauth.com",
+  "homepage": "https://docs.theauth.dev/quickstart",
   "keywords": [
     "theauth",
     "auth",
@@ -38,6 +38,9 @@
     "typescript": "^6.0.3",
     "vitest": "^3.0.0"
   },
+  "bugs": {
+    "url": "https://github.com/glincker/theauth/issues"
+  },
   "scripts": {
     "build": "tsup src/index.ts src/bin.ts --format esm --dts --clean",
     "dev": "tsup src/index.ts src/bin.ts --format esm --watch",

package/templates/hono-mcp/.env.example

@@ -9,7 +9,7 @@ MCP_SIGNING_SECRET=change-me-to-a-real-secret-at-least-32-chars
 DB_PROVIDER=sqlite
 
 # Database URL. Defaults match DB_PROVIDER.
-# SQLite:   file:./kavach.db
+# SQLite:   file:./theauth.db
 # Postgres: postgres://user:pass@host:5432/dbname
 DATABASE_URL=__DB_URL__
 

package/templates/hono-mcp/README.md

@@ -1,11 +1,11 @@
 # __APP_NAME__
 
-A Hono server scaffolded with [TheAuth](https://theauth.com). Runs as an MCP OAuth 2.1 authorization server and a resource server in one process.
+A Hono server scaffolded with [theAuth](https://theauth.dev). Runs as an MCP OAuth 2.1 authorization server and a resource server in one process.
 
 ## What's included
 
 - **Hono 4** on Node.js
-- **TheAuth** for agent identity, session management, and the MCP OAuth 2.1 stack
+- **theAuth** for agent identity, session management, and the MCP OAuth 2.1 stack
 - **Drizzle ORM** with __DB_DRIVER__ backing the auth schema
 - `GET /tools/list` and `POST /tools/call/:name` protected with `withMcpAuth`
 - `.well-known` discovery documents for MCP clients, served at the root
@@ -20,7 +20,7 @@ pnpm install
 pnpm run dev
 ```
 
-TheAuth creates the auth tables on first boot, no separate migration step for SQLite or Postgres.
+theAuth creates the auth tables on first boot, no separate migration step for SQLite or Postgres.
 
 The server listens on `http://localhost:3001`. Visit the root URL to see the MCP discovery links and the list of tools.
 
@@ -49,7 +49,7 @@ curl http://localhost:3001/tools/list \
 | Variable          | Required | Notes                                                                      |
 |-------------------|----------|----------------------------------------------------------------------------|
 | `THEAUTH_SECRET` | Yes      | Long random string. Signs sessions and access tokens.                      |
-| `DATABASE_URL`    | Yes      | SQLite: `file:./kavach.db`. Postgres: `postgres://user:pass@host:5432/db`. |
+| `DATABASE_URL`    | Yes      | SQLite: `file:./theauth.db`. Postgres: `postgres://user:pass@host:5432/db`. |
 | `BASE_URL`        | No       | Public URL this server is reachable at. Defaults to `http://localhost:3001`. Set it before deploying so the `.well-known` documents and access-token audience match what clients use. |
 | `PORT`            | No       | Port to bind. Defaults to `3001`.                                           |
 
@@ -60,14 +60,14 @@ src/
   server.ts            Hono app, MCP mount, protected tool routes
   tools.ts             Example MCP tool list
   lib/
-    kavach.ts          Lazy createKavach singleton
+    theauth.ts          Lazy createTheAuth singleton
 ```
 
 ## Deploying
 
 Any Node runtime works. Set `BASE_URL` to your public URL before boot so MCP clients find the right endpoints, and set a real `THEAUTH_SECRET` out of band.
 
-If you switch to Postgres, set `DB_PROVIDER=postgres` and point `DATABASE_URL` at your connection string. TheAuth creates the tables on boot.
+If you switch to Postgres, set `DB_PROVIDER=postgres` and point `DATABASE_URL` at your connection string. theAuth creates the tables on boot.
 
 ## Next
 

package/templates/hono-mcp/src/lib/{kavach.ts → theauth.ts}

@@ -1,17 +1,17 @@
-import { createKavach } from "@glinr/theauth";
+import { createTheAuth } from "@glinr/theauth";
 
 // Lazy singleton so imports do not open a DB connection before config is
-// loaded. createKavach auto-creates the auth tables on first boot, no
+// loaded. createTheAuth auto-creates the auth tables on first boot, no
 // migration step required for development.
-let instance: Awaited<ReturnType<typeof createKavach>> | null = null;
+let instance: Awaited<ReturnType<typeof createTheAuth>> | null = null;
 
-export async function getKavach() {
+export async function getTheAuth() {
 	if (!instance) {
 		const provider = process.env["DB_PROVIDER"] === "postgres" ? "postgres" : "sqlite";
-		instance = await createKavach({
+		instance = await createTheAuth({
 			database: {
 				provider,
-				url: process.env["DATABASE_URL"] ?? "file:./kavach.db",
+				url: process.env["DATABASE_URL"] ?? "file:./theauth.db",
 			},
 			secret: process.env["THEAUTH_SECRET"] ?? "dev-secret-change-me-in-prod",
 			agents: {

package/templates/hono-mcp/src/server.ts

@@ -16,13 +16,13 @@
 //   curl http://localhost:3001/tools/list -H "Authorization: Bearer kv_..."
 
 import { serve } from "@hono/node-server";
-import { kavachHono } from "@glinr/theauth-hono";
+import { theAuthHono } from "@glinr/theauth-hono";
 import { Hono } from "hono";
 import { users } from "@glinr/theauth";
 import type { McpAccessToken, McpAuthModule, McpAuthorizationCode, McpClient } from "@glinr/theauth/mcp";
 import { createMcpModule } from "@glinr/theauth/mcp";
 
-import { getKavach } from "./lib/kavach.js";
+import { getTheAuth } from "./lib/theauth.js";
 import { MCP_TOOLS } from "./tools.js";
 
 const PORT = Number(process.env["PORT"] ?? 3001);
@@ -39,11 +39,11 @@ const tokens = new Map<string, McpAccessToken>();
 const refreshTokenIndex = new Map<string, string>();
 
 async function main(): Promise<void> {
-	const kavach = await getKavach();
+	const theauth = await getTheAuth();
 
 	// Seed a demo user so the /api/agents call in the smoke test has an owner.
 	try {
-		kavach.db
+		theauth.db
 			.insert(users)
 			.values({
 				id: "user-1",
@@ -102,7 +102,7 @@ async function main(): Promise<void> {
 
 	// Mount the full TheAuth API (agents, audit, delegation) plus the MCP
 	// OAuth endpoints (.well-known, /mcp/register, /mcp/authorize, /mcp/token).
-	app.route("/api", kavachHono(kavach, { mcp }));
+	app.route("/api", theAuthHono(theauth, { mcp }));
 
 	// Protected tool list. Accepts either a kv_ agent token or an MCP JWT.
 	app.get("/tools/list", async (c) => {
@@ -110,7 +110,7 @@ async function main(): Promise<void> {
 		if (!token) return c.json({ error: "Missing Authorization header" }, 401);
 
 		if (token.startsWith("kv_")) {
-			const result = await kavach.authorizeByToken(token, {
+			const result = await theauth.authorizeByToken(token, {
 				action: "read",
 				resource: "mcp:tools:list",
 			});
@@ -143,7 +143,7 @@ async function main(): Promise<void> {
 		if (!tool) return c.json({ error: `Unknown tool: ${toolName}` }, 404);
 
 		if (token.startsWith("kv_")) {
-			const result = await kavach.authorizeByToken(token, {
+			const result = await theauth.authorizeByToken(token, {
 				action: "execute",
 				resource: `mcp:tools:${toolName}`,
 				arguments: body.arguments,

package/templates/next-saas/README.md

@@ -1,13 +1,13 @@
 # __APP_NAME__
 
-A Next.js SaaS starter with [TheAuth](https://theauth.com) auth built in.
+A Next.js SaaS starter with [theAuth](https://theauth.dev) auth built in.
 
 ## What's included
 
 - **Next.js 15** with App Router and TypeScript
-- **TheAuth** for agent identity, session management, and auth
+- **theAuth** for agent identity, session management, and auth
 - **Drizzle ORM** with **__DB_DRIVER__**: schema-first, type-safe
-- Sign-in / sign-out flow wired to `/api/auth/[...kavach]`
+- Sign-in / sign-out flow wired to `/api/auth/[...theauth]`
 - An agents list page at `/agents`
 
 ## Getting started
@@ -28,19 +28,19 @@ Open [http://localhost:3000](http://localhost:3000).
 | Variable | Required | Notes |
 |---|---|---|
 | `THEAUTH_SECRET` | Yes | Long random string, used to sign sessions |
-| `DATABASE_URL` | Yes | SQLite: `file:./kavach.db` · Postgres: connection string |
+| `DATABASE_URL` | Yes | SQLite: `file:./theauth.db` · Postgres: connection string |
 
 ## Project structure
 
 ```
 src/
   app/
-    api/auth/[...kavach]/route.ts  : TheAuth HTTP handler
+    api/auth/[...theauth]/route.ts  : TheAuth HTTP handler
     agents/page.tsx                : agent list UI
-    layout.tsx                     : KavachProvider wrapper
+    layout.tsx                     : TheAuthProvider wrapper
     page.tsx                       : home / landing
   lib/
-    kavach.ts                      : singleton TheAuth instance
+    theauth.ts                      : singleton TheAuth instance
 ```
 
 ## Deploying

package/templates/next-saas/drizzle.config.ts

@@ -5,6 +5,6 @@ export default defineConfig({
 	schema: "./src/lib/schema.ts",
 	out: "./drizzle",
 	dbCredentials: {
-		url: process.env["DATABASE_URL"] ?? "file:./kavach.db",
+		url: process.env["DATABASE_URL"] ?? "file:./theauth.db",
 	},
 });

package/templates/next-saas/src/app/api/auth/[...theauth]/route.ts

@@ -0,0 +1,6 @@
+import { theAuthNextjs } from "@glinr/theauth-nextjs";
+import { getTheAuth } from "@/lib/theauth";
+
+const { GET, POST } = theAuthNextjs(getTheAuth);
+
+export { GET, POST };

package/templates/next-saas/src/app/layout.tsx

@@ -1,4 +1,4 @@
-import { KavachProvider } from "@glinr/theauth-react";
+import { TheAuthProvider } from "@glinr/theauth-react";
 import type { ReactNode } from "react";
 import "./globals.css";
 
@@ -11,7 +11,7 @@ export default function RootLayout({ children }: { children: ReactNode }) {
 	return (
 		<html lang="en">
 			<body>
-				<KavachProvider basePath="/api/auth">{children}</KavachProvider>
+				<TheAuthProvider basePath="/api/auth">{children}</TheAuthProvider>
 			</body>
 		</html>
 	);

package/templates/next-saas/src/lib/theauth.ts

@@ -0,0 +1,18 @@
+import { createTheAuth } from "@glinr/theauth";
+
+// Initialised lazily so Next.js doesn't try to open a DB connection at build
+// time. Import `getTheAuth()` from your server components or route handlers.
+let instance: Awaited<ReturnType<typeof createTheAuth>> | null = null;
+
+export async function getTheAuth() {
+	if (!instance) {
+		instance = await createTheAuth({
+			database: {
+				provider: "__DB_DRIVER__" === "pg" ? "postgres" : "sqlite",
+				url: process.env["DATABASE_URL"] ?? "file:./theauth.db",
+			},
+			secret: process.env["THEAUTH_SECRET"] ?? "dev-secret-change-me",
+		});
+	}
+	return instance;
+}

package/templates/next-saas/src/app/api/auth/[...kavach]/route.ts

@@ -1,6 +0,0 @@
-import { kavachNextjs } from "@glinr/theauth-nextjs";
-import { getKavach } from "@/lib/kavach";
-
-const { GET, POST } = kavachNextjs(getKavach);
-
-export { GET, POST };

package/templates/next-saas/src/lib/kavach.ts

@@ -1,18 +0,0 @@
-import { createKavach } from "@glinr/theauth";
-
-// Initialised lazily so Next.js doesn't try to open a DB connection at build
-// time. Import `getKavach()` from your server components or route handlers.
-let instance: Awaited<ReturnType<typeof createKavach>> | null = null;
-
-export async function getKavach() {
-	if (!instance) {
-		instance = await createKavach({
-			database: {
-				provider: "__DB_DRIVER__" === "pg" ? "postgres" : "sqlite",
-				url: process.env["DATABASE_URL"] ?? "file:./kavach.db",
-			},
-			secret: process.env["THEAUTH_SECRET"] ?? "dev-secret-change-me",
-		});
-	}
-	return instance;
-}