@hypersonic-js/cli 0.2.0 → 0.2.1

package/README.md

@@ -0,0 +1,13 @@
+# @hypersonic-js/cli
+
+Hypersonic.js CLI — developer tooling for the Hypersonic framework
+
+📖 **[Full documentation → hypersonic-js.com](https://hypersonic-js.com)**
+
+## Install
+
+npm install @hypersonic-js/cli
+
+## License
+
+MIT

package/dist/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@hypersonic-js/cli",
-    "version": "0.2.0",
+    "version": "0.2.1",
     "description": "Hypersonic.js CLI — developer tooling for the Hypersonic framework",
     "type": "module",
     "bin": {
@@ -20,10 +20,10 @@
         "access": "public"
     },
     "engines": {
-        "node": "^24.0.0"
+        "node": ">=24.0.0"
     },
     "scripts": {
-        "build": "tsc",
+        "build": "tsc && node --input-type=module --eval \"import{cpSync}from'node:fs';cpSync('templates','dist/templates',{recursive:true})\"",
         "test": "vitest run",
         "test:coverage": "vitest run --coverage",
         "type-check": "tsc --noEmit",
@@ -41,9 +41,9 @@
         "@prisma/adapter-pg": "7.8.0",
         "@prisma/client": "7.8.0",
         "@types/node": "25.9.3",
-        "@vitest/coverage-v8": "4.1.8",
-        "better-auth": "1.6.17",
+        "@vitest/coverage-v8": "4.1.9",
+        "better-auth": "1.6.19",
         "typescript": "6.0.3",
-        "vitest": "4.1.8"
+        "vitest": "4.1.9"
     }
 }

package/dist/src/commands/new/generate-files.d.ts

@@ -0,0 +1,98 @@
+export interface GenerateFilesOptions {
+    projectDir: string;
+    projectName: string;
+    secret: string;
+}
+export interface WrittenFile {
+    /** Destination path relative to the project root (e.g. 'prisma/schema.prisma'). */
+    dest: string;
+}
+/**
+ * Injectable I/O deps so unit tests never touch the real filesystem.
+ * templatesDir lets tests point at a fake templates directory.
+ */
+export interface GenerateFilesDeps {
+    readFile: (filePath: string) => string;
+    mkdir: (dirPath: string) => void;
+    writeFile: (filePath: string, content: string) => void;
+    templatesDir: string;
+}
+/**
+ * Static list of every file the `new` command writes.
+ *
+ * `src`  — filename inside templates/new/ (relative, may differ from dest)
+ * `dest` — filename written into the project (relative to projectDir)
+ *
+ * The only src↔dest rename is `_env` → `.env`: the root .gitignore has a bare
+ * `.env` pattern that matches files at any depth, so the template is stored
+ * under a neutral name and renamed on write.
+ */
+export declare const TEMPLATE_FILES: readonly [{
+    readonly src: "package.json";
+    readonly dest: "package.json";
+}, {
+    readonly src: "hypersonic.config.ts";
+    readonly dest: "hypersonic.config.ts";
+}, {
+    readonly src: "_env";
+    readonly dest: ".env";
+}, {
+    readonly src: ".env.example";
+    readonly dest: ".env.example";
+}, {
+    readonly src: ".gitignore";
+    readonly dest: ".gitignore";
+}, {
+    readonly src: "tsconfig.json";
+    readonly dest: "tsconfig.json";
+}, {
+    readonly src: "eslint.config.js";
+    readonly dest: "eslint.config.js";
+}, {
+    readonly src: "vite.config.ts";
+    readonly dest: "vite.config.ts";
+}, {
+    readonly src: "prisma/schema.prisma";
+    readonly dest: "prisma/schema.prisma";
+}, {
+    readonly src: "prisma.config.ts";
+    readonly dest: "prisma.config.ts";
+}, {
+    readonly src: "server.ts";
+    readonly dest: "server.ts";
+}, {
+    readonly src: "src/types.ts";
+    readonly dest: "src/types.ts";
+}, {
+    readonly src: "src/middleware.ts";
+    readonly dest: "src/middleware.ts";
+}, {
+    readonly src: "resources/css/app.css";
+    readonly dest: "resources/css/app.css";
+}, {
+    readonly src: "resources/js/app.tsx";
+    readonly dest: "resources/js/app.tsx";
+}, {
+    readonly src: "resources/js/lib/auth-client.ts";
+    readonly dest: "resources/js/lib/auth-client.ts";
+}, {
+    readonly src: "resources/js/Pages/Welcome.tsx";
+    readonly dest: "resources/js/Pages/Welcome.tsx";
+}, {
+    readonly src: "resources/js/Pages/Auth/Login.tsx";
+    readonly dest: "resources/js/Pages/Auth/Login.tsx";
+}, {
+    readonly src: "resources/js/Pages/Auth/Register.tsx";
+    readonly dest: "resources/js/Pages/Auth/Register.tsx";
+}];
+/**
+ * Replaces every `{{KEY}}` placeholder in `content` with the corresponding
+ * value from `vars`. Unknown placeholders are left untouched.
+ */
+export declare function applySubstitutions(content: string, vars: Record<string, string>): string;
+/**
+ * Reads every template file, applies placeholder substitution, and writes it
+ * into the target project directory.
+ */
+export declare function generateFiles(opts: GenerateFilesOptions, deps?: GenerateFilesDeps): Promise<WrittenFile[]>;
+//# sourceMappingURL=generate-files.d.ts.map

package/dist/src/commands/new/generate-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate-files.d.ts","sourceRoot":"","sources":["../../../../src/commands/new/generate-files.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,mFAAmF;IACnF,IAAI,EAAE,MAAM,CAAA;CACb;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAA;IACtC,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;IAChC,SAAS,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;IACtD,YAAY,EAAE,MAAM,CAAA;CACrB;AAID;;;;;;;;;GASG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoBjB,CAAA;AAIV;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC3B,MAAM,CAIR;AAkBD;;;GAGG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,oBAAoB,EAC1B,IAAI,GAAE,iBAAqC,GAC1C,OAAO,CAAC,WAAW,EAAE,CAAC,CAyBxB"}

package/dist/src/commands/new/generate-files.js

@@ -0,0 +1,79 @@
+import { readFileSync, mkdirSync, writeFileSync } from 'node:fs';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+// ── Template file manifest ─────────────────────────────────────────────────
+/**
+ * Static list of every file the `new` command writes.
+ *
+ * `src`  — filename inside templates/new/ (relative, may differ from dest)
+ * `dest` — filename written into the project (relative to projectDir)
+ *
+ * The only src↔dest rename is `_env` → `.env`: the root .gitignore has a bare
+ * `.env` pattern that matches files at any depth, so the template is stored
+ * under a neutral name and renamed on write.
+ */
+export const TEMPLATE_FILES = [
+    { src: 'package.json', dest: 'package.json' },
+    { src: 'hypersonic.config.ts', dest: 'hypersonic.config.ts' },
+    { src: '_env', dest: '.env' },
+    { src: '.env.example', dest: '.env.example' },
+    { src: '.gitignore', dest: '.gitignore' },
+    { src: 'tsconfig.json', dest: 'tsconfig.json' },
+    { src: 'eslint.config.js', dest: 'eslint.config.js' },
+    { src: 'vite.config.ts', dest: 'vite.config.ts' },
+    { src: 'prisma/schema.prisma', dest: 'prisma/schema.prisma' },
+    { src: 'prisma.config.ts', dest: 'prisma.config.ts' },
+    { src: 'server.ts', dest: 'server.ts' },
+    { src: 'src/types.ts', dest: 'src/types.ts' },
+    { src: 'src/middleware.ts', dest: 'src/middleware.ts' },
+    { src: 'resources/css/app.css', dest: 'resources/css/app.css' },
+    { src: 'resources/js/app.tsx', dest: 'resources/js/app.tsx' },
+    { src: 'resources/js/lib/auth-client.ts', dest: 'resources/js/lib/auth-client.ts' },
+    { src: 'resources/js/Pages/Welcome.tsx', dest: 'resources/js/Pages/Welcome.tsx' },
+    { src: 'resources/js/Pages/Auth/Login.tsx', dest: 'resources/js/Pages/Auth/Login.tsx' },
+    { src: 'resources/js/Pages/Auth/Register.tsx', dest: 'resources/js/Pages/Auth/Register.tsx' },
+];
+// ── Substitution ───────────────────────────────────────────────────────────
+/**
+ * Replaces every `{{KEY}}` placeholder in `content` with the corresponding
+ * value from `vars`. Unknown placeholders are left untouched.
+ */
+export function applySubstitutions(content, vars) {
+    return content.replace(/\{\{(\w+)\}\}/g, (match, key) => key in vars ? (vars[key] ?? match) : match);
+}
+// ── Default deps ───────────────────────────────────────────────────────────
+function makeDefaultDeps() {
+    const __filename = fileURLToPath(import.meta.url);
+    const __dirname = dirname(__filename);
+    return {
+        readFile: (filePath) => readFileSync(filePath, 'utf-8'),
+        mkdir: (dirPath) => mkdirSync(dirPath, { recursive: true }),
+        writeFile: (filePath, content) => writeFileSync(filePath, content, 'utf-8'),
+        templatesDir: join(__dirname, '../../../templates/new'),
+    };
+}
+// ── generateFiles ──────────────────────────────────────────────────────────
+/**
+ * Reads every template file, applies placeholder substitution, and writes it
+ * into the target project directory.
+ */
+export async function generateFiles(opts, deps = makeDefaultDeps()) {
+    const { projectDir, projectName, secret } = opts;
+    const { readFile, mkdir, writeFile, templatesDir } = deps;
+    const vars = {
+        PROJECT_NAME: projectName,
+        SECRET: secret,
+    };
+    const written = [];
+    for (const { src, dest } of TEMPLATE_FILES) {
+        const srcPath = join(templatesDir, src);
+        const destPath = join(projectDir, dest);
+        const raw = readFile(srcPath);
+        const content = applySubstitutions(raw, vars);
+        mkdir(dirname(destPath));
+        writeFile(destPath, content);
+        written.push({ dest });
+    }
+    return written;
+}
+//# sourceMappingURL=generate-files.js.map

package/dist/src/commands/new/generate-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate-files.js","sourceRoot":"","sources":["../../../../src/commands/new/generate-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAChE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AA0BxC,8EAA8E;AAE9E;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,EAAE,GAAG,EAAE,cAAc,EAA+B,IAAI,EAAE,cAAc,EAAE;IAC1E,EAAE,GAAG,EAAE,sBAAsB,EAAuB,IAAI,EAAE,sBAAsB,EAAE;IAClF,EAAE,GAAG,EAAE,MAAM,EAAuC,IAAI,EAAE,MAAM,EAAE;IAClE,EAAE,GAAG,EAAE,cAAc,EAA+B,IAAI,EAAE,cAAc,EAAE;IAC1E,EAAE,GAAG,EAAE,YAAY,EAAiC,IAAI,EAAE,YAAY,EAAE;IACxE,EAAE,GAAG,EAAE,eAAe,EAA8B,IAAI,EAAE,eAAe,EAAE;IAC3E,EAAE,GAAG,EAAE,kBAAkB,EAA2B,IAAI,EAAE,kBAAkB,EAAE;IAC9E,EAAE,GAAG,EAAE,gBAAgB,EAA6B,IAAI,EAAE,gBAAgB,EAAE;IAC5E,EAAE,GAAG,EAAE,sBAAsB,EAAuB,IAAI,EAAE,sBAAsB,EAAE;IAClF,EAAE,GAAG,EAAE,kBAAkB,EAA2B,IAAI,EAAE,kBAAkB,EAAE;IAC9E,EAAE,GAAG,EAAE,WAAW,EAAkC,IAAI,EAAE,WAAW,EAAE;IACvE,EAAE,GAAG,EAAE,cAAc,EAA+B,IAAI,EAAE,cAAc,EAAE;IAC1E,EAAE,GAAG,EAAE,mBAAmB,EAA0B,IAAI,EAAE,mBAAmB,EAAE;IAC/E,EAAE,GAAG,EAAE,uBAAuB,EAAsB,IAAI,EAAE,uBAAuB,EAAE;IACnF,EAAE,GAAG,EAAE,sBAAsB,EAAuB,IAAI,EAAE,sBAAsB,EAAE;IAClF,EAAE,GAAG,EAAE,iCAAiC,EAAY,IAAI,EAAE,iCAAiC,EAAE;IAC7F,EAAE,GAAG,EAAE,gCAAgC,EAAa,IAAI,EAAE,gCAAgC,EAAE;IAC5F,EAAE,GAAG,EAAE,mCAAmC,EAAU,IAAI,EAAE,mCAAmC,EAAE;IAC/F,EAAE,GAAG,EAAE,sCAAsC,EAAO,IAAI,EAAE,sCAAsC,EAAE;CAC1F,CAAA;AAEV,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAe,EACf,IAA4B;IAE5B,OAAO,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,KAAK,EAAE,GAAW,EAAE,EAAE,CAC9D,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAC3C,CAAA;AACH,CAAC;AAED,8EAA8E;AAE9E,SAAS,eAAe;IACtB,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACjD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;IAErC,OAAO;QACL,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC;QACvD,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC3D,SAAS,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC;QAC3E,YAAY,EAAE,IAAI,CAAC,SAAS,EAAE,wBAAwB,CAAC;KACxD,CAAA;AACH,CAAC;AAED,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAA0B,EAC1B,OAA0B,eAAe,EAAE;IAE3C,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;IAChD,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,IAAI,CAAA;IAEzD,MAAM,IAAI,GAA2B;QACnC,YAAY,EAAE,WAAW;QACzB,MAAM,EAAE,MAAM;KACf,CAAA;IAED,MAAM,OAAO,GAAkB,EAAE,CAAA;IAEjC,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,cAAc,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,CAAA;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;QAEvC,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAA;QAC7B,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QAE7C,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAA;QACxB,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QAE5B,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;IACxB,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC"}

package/dist/src/commands/new/index.d.ts

@@ -0,0 +1,31 @@
+import type { Command } from 'commander';
+import { type PromptFn } from '../../utils/prompt.js';
+import { generateFiles } from './generate-files.js';
+import { runSetup } from './run-setup.js';
+export interface NewCommandDeps {
+    prompt: PromptFn;
+    readdirSync: (path: string) => string[];
+    mkdirSync: (path: string, opts: {
+        recursive: boolean;
+    }) => void;
+    generateFiles: typeof generateFiles;
+    runSetup: typeof runSetup;
+    randomBytes: (size: number) => Buffer;
+    cwd: () => string;
+}
+/**
+ * Registers the `hypersonic new` top-level command.
+ *
+ * Fully interactive — no arguments accepted. Prompts:
+ *   1. Directory choice  (new subdirectory | current directory)
+ *   2. Warning + confirm if current directory is not empty   (current dir only)
+ *   3. Project name      (always required)
+ *   4. Warning + confirm if new subdirectory already exists  (new dir only)
+ *
+ * Then generates all project files, runs npm install, runs Prisma migrations,
+ * scaffolds the admin dashboard, generates admin metadata, and finally runs
+ * `hypersonic admin create-admin` interactively so the user creates their
+ * first admin account before the command exits.
+ */
+export declare function registerNewCommand(program: Command, deps?: NewCommandDeps): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/src/commands/new/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/commands/new/index.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACxC,OAAO,EAA2B,KAAK,QAAQ,EAAE,MAAM,uBAAuB,CAAA;AAE9E,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAIzC,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,QAAQ,CAAA;IAChB,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,EAAE,CAAA;IACvC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,SAAS,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,CAAA;IAC/D,aAAa,EAAE,OAAO,aAAa,CAAA;IACnC,QAAQ,EAAE,OAAO,QAAQ,CAAA;IACzB,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAA;IACrC,GAAG,EAAE,MAAM,MAAM,CAAA;CAClB;AAkBD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,OAAO,EAChB,IAAI,GAAE,cAA2B,GAChC,IAAI,CAoFN"}

package/dist/src/commands/new/index.js

@@ -0,0 +1,102 @@
+import { readdirSync, mkdirSync } from 'node:fs';
+import { join } from 'node:path';
+import { randomBytes } from 'node:crypto';
+import { prompt as defaultPrompt } from '../../utils/prompt.js';
+import { logger } from '../../utils/logger.js';
+import { generateFiles } from './generate-files.js';
+import { runSetup } from './run-setup.js';
+// ── Dependency loader ──────────────────────────────────────────────────────
+function loadDeps() {
+    return {
+        prompt: defaultPrompt,
+        readdirSync,
+        mkdirSync: (p, opts) => mkdirSync(p, opts),
+        generateFiles,
+        runSetup,
+        randomBytes,
+        cwd: () => process.cwd(),
+    };
+}
+// ── Registration ───────────────────────────────────────────────────────────
+/**
+ * Registers the `hypersonic new` top-level command.
+ *
+ * Fully interactive — no arguments accepted. Prompts:
+ *   1. Directory choice  (new subdirectory | current directory)
+ *   2. Warning + confirm if current directory is not empty   (current dir only)
+ *   3. Project name      (always required)
+ *   4. Warning + confirm if new subdirectory already exists  (new dir only)
+ *
+ * Then generates all project files, runs npm install, runs Prisma migrations,
+ * scaffolds the admin dashboard, generates admin metadata, and finally runs
+ * `hypersonic admin create-admin` interactively so the user creates their
+ * first admin account before the command exits.
+ */
+export function registerNewCommand(program, deps = loadDeps()) {
+    program
+        .command('new')
+        .description('Scaffold a new Hypersonic.js project interactively')
+        .action(async () => {
+        const { prompt, readdirSync: readdir, mkdirSync: mkdir, generateFiles: doGenerateFiles, runSetup: doRunSetup, randomBytes: rb, cwd, } = deps;
+        // ── 1. Directory choice ──────────────────────────────────────────────
+        logger.info('Where would you like to create your project?');
+        logger.info('  1. Create a new directory');
+        logger.info('  2. Use current directory');
+        const dirChoice = await prompt('Choice [1]: ');
+        const useCurrentDir = dirChoice.trim() === '2';
+        // ── 2. Warn if current directory is not empty ────────────────────────
+        if (useCurrentDir) {
+            const existing = readdir(cwd());
+            if (existing.length > 0) {
+                logger.warn(`Current directory is not empty (${existing.length} file(s) found).`);
+                const confirm = await prompt('Continue anyway? [y/N]: ');
+                if (confirm.trim().toLowerCase() !== 'y') {
+                    logger.info('Aborted.');
+                    return;
+                }
+            }
+        }
+        // ── 3. Project name (mandatory) ──────────────────────────────────────
+        const rawName = await prompt('Project name: ');
+        const projectName = rawName.trim();
+        if (!projectName) {
+            logger.error('Project name is required.');
+            process.exit(1);
+        }
+        // ── 4. Resolve project directory ─────────────────────────────────────
+        const projectDir = useCurrentDir ? cwd() : join(cwd(), projectName);
+        if (!useCurrentDir) {
+            // Guard: warn if the target subdirectory already exists and is non-empty.
+            // A thrown error means the directory does not exist yet — that is fine.
+            try {
+                const existing = readdir(projectDir);
+                if (existing.length > 0) {
+                    logger.warn(`Directory "${projectName}" already exists and is not empty (${existing.length} file(s) found).`);
+                    const confirm = await prompt('Continue anyway? [y/N]: ');
+                    if (confirm.trim().toLowerCase() !== 'y') {
+                        logger.info('Aborted.');
+                        return;
+                    }
+                }
+            }
+            catch {
+                // Directory does not exist yet — mkdirSync will create it below.
+            }
+            mkdir(projectDir, { recursive: true });
+        }
+        // ── 5. Generate project files ─────────────────────────────────────────
+        const secret = rb(32).toString('hex');
+        logger.info(`\nCreating project in ${projectDir}…`);
+        await doGenerateFiles({ projectDir, projectName, secret });
+        logger.success('Project files written.');
+        // ── 6. Run setup steps ────────────────────────────────────────────────
+        await doRunSetup({ projectDir });
+        // ── 7. Done ───────────────────────────────────────────────────────────
+        logger.success('\nYour project is ready!');
+        if (!useCurrentDir) {
+            logger.info(`\n  cd ${projectName}`);
+        }
+        logger.info('  npm run dev\n');
+    });
+}
+//# sourceMappingURL=index.js.map

package/dist/src/commands/new/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/commands/new/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAEzC,OAAO,EAAE,MAAM,IAAI,aAAa,EAAiB,MAAM,uBAAuB,CAAA;AAC9E,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAA;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAczC,8EAA8E;AAE9E,SAAS,QAAQ;IACf,OAAO;QACL,MAAM,EAAE,aAAa;QACrB,WAAW;QACX,SAAS,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC;QAC1C,aAAa;QACb,QAAQ;QACR,WAAW;QACX,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;KACzB,CAAA;AACH,CAAC;AAED,8EAA8E;AAE9E;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAgB,EAChB,OAAuB,QAAQ,EAAE;IAEjC,OAAO;SACJ,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,oDAAoD,CAAC;SACjE,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,EACJ,MAAM,EACN,WAAW,EAAE,OAAO,EACpB,SAAS,EAAE,KAAK,EAChB,aAAa,EAAE,eAAe,EAC9B,QAAQ,EAAE,UAAU,EACpB,WAAW,EAAE,EAAE,EACf,GAAG,GACJ,GAAG,IAAI,CAAA;QAER,wEAAwE;QACxE,MAAM,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAA;QAC3D,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAA;QAC1C,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAA;QACzC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAA;QAC9C,MAAM,aAAa,GAAG,SAAS,CAAC,IAAI,EAAE,KAAK,GAAG,CAAA;QAE9C,wEAAwE;QACxE,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;YAC/B,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CACT,mCAAmC,QAAQ,CAAC,MAAM,kBAAkB,CACrE,CAAA;gBACD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAA;gBACxD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,GAAG,EAAE,CAAC;oBACzC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;oBACvB,OAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QAED,wEAAwE;QACxE,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAA;QAC9C,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,EAAE,CAAA;QAClC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAA;YACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;QAED,wEAAwE;QACxE,MAAM,UAAU,GAAG,aAAa,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,WAAW,CAAC,CAAA;QACnE,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,0EAA0E;YAC1E,wEAAwE;YACxE,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;gBACpC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACxB,MAAM,CAAC,IAAI,CACT,cAAc,WAAW,sCAAsC,QAAQ,CAAC,MAAM,kBAAkB,CACjG,CAAA;oBACD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAA;oBACxD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,GAAG,EAAE,CAAC;wBACzC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;wBACvB,OAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,iEAAiE;YACnE,CAAC;YACD,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACxC,CAAC;QAED,yEAAyE;QACzE,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QACrC,MAAM,CAAC,IAAI,CAAC,yBAAyB,UAAU,GAAG,CAAC,CAAA;QACnD,MAAM,eAAe,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAA;QAC1D,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAA;QAExC,yEAAyE;QACzE,MAAM,UAAU,CAAC,EAAE,UAAU,EAAE,CAAC,CAAA;QAEhC,yEAAyE;QACzE,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAA;QAC1C,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,CAAC,IAAI,CAAC,UAAU,WAAW,EAAE,CAAC,CAAA;QACtC,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;AACN,CAAC"}

package/dist/src/commands/new/run-setup.d.ts

@@ -0,0 +1,34 @@
+export interface RunSetupOptions {
+    projectDir: string;
+}
+/** Runs a shell command with the given working directory. */
+export type ExecFn = (command: string, cwd: string) => void;
+export interface RunSetupDeps {
+    exec: ExecFn;
+    scaffoldAdmin: (opts: {
+        targetDir: string;
+        force: boolean;
+    }) => Promise<{
+        written: string[];
+        skipped: string[];
+    }>;
+    generateAdminMeta: (schemaPath: string, outputPath: string) => Promise<void>;
+}
+/**
+ * Runs all post-generation setup steps in order:
+ *
+ * 1. npm install         — installs project dependencies
+ * 2. prisma migrate dev  — creates the SQLite database and runs migrations
+ * 3. prisma generate     — generates the Prisma client from the schema
+ * 4. admin scaffold      — copies admin React page components into the project
+ * 5. admin generate-meta — generates prisma/admin-meta.json from the schema
+ * 6. admin create-admin  — interactive: the user creates their admin account
+ *
+ * Steps 1–3 run as child processes (stdio: inherit so the user sees output).
+ * Steps 4–5 call the existing CLI functions directly to avoid a second spawn.
+ * Step 6 spawns `hypersonic admin create-admin` in the project directory so
+ * it resolves its own node_modules (better-auth, @prisma/client, etc.) from
+ * the newly-installed project rather than from the CLI's install location.
+ */
+export declare function runSetup(opts: RunSetupOptions, deps?: RunSetupDeps): Promise<void>;
+//# sourceMappingURL=run-setup.d.ts.map

package/dist/src/commands/new/run-setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-setup.d.ts","sourceRoot":"","sources":["../../../../src/commands/new/run-setup.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,6DAA6D;AAC7D,MAAM,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;AAE3D,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,aAAa,EAAE,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC;QACtE,OAAO,EAAE,MAAM,EAAE,CAAA;QACjB,OAAO,EAAE,MAAM,EAAE,CAAA;KAClB,CAAC,CAAA;IACF,iBAAiB,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7E;AA2BD;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,QAAQ,CAC5B,IAAI,EAAE,eAAe,EACrB,IAAI,CAAC,EAAE,YAAY,GAClB,OAAO,CAAC,IAAI,CAAC,CAqCf"}

package/dist/src/commands/new/run-setup.js

@@ -0,0 +1,70 @@
+import { execSync } from 'node:child_process';
+import { join } from 'node:path';
+import { readFileSync, writeFileSync } from 'node:fs';
+import { scaffoldAdmin } from '@hypersonic-js/admin';
+import { runGenerateMeta } from '../admin/generate-meta.js';
+import { logger } from '../../utils/logger.js';
+// ── Dependency loader ──────────────────────────────────────────────────────
+async function loadDeps() {
+    const { getDMMF } = await import('@prisma/get-dmmf');
+    return {
+        exec: (command, cwd) => execSync(command, { cwd, stdio: 'inherit' }),
+        scaffoldAdmin,
+        generateAdminMeta: async (schemaPath, outputPath) => {
+            await runGenerateMeta({ schema: schemaPath, output: outputPath }, {
+                getDMMF,
+                readFile: (p) => readFileSync(p, 'utf-8'),
+                writeFile: (p, c) => writeFileSync(p, c),
+            });
+        },
+    };
+}
+// ── Main ───────────────────────────────────────────────────────────────────
+/**
+ * Runs all post-generation setup steps in order:
+ *
+ * 1. npm install         — installs project dependencies
+ * 2. prisma migrate dev  — creates the SQLite database and runs migrations
+ * 3. prisma generate     — generates the Prisma client from the schema
+ * 4. admin scaffold      — copies admin React page components into the project
+ * 5. admin generate-meta — generates prisma/admin-meta.json from the schema
+ * 6. admin create-admin  — interactive: the user creates their admin account
+ *
+ * Steps 1–3 run as child processes (stdio: inherit so the user sees output).
+ * Steps 4–5 call the existing CLI functions directly to avoid a second spawn.
+ * Step 6 spawns `hypersonic admin create-admin` in the project directory so
+ * it resolves its own node_modules (better-auth, @prisma/client, etc.) from
+ * the newly-installed project rather than from the CLI's install location.
+ */
+export async function runSetup(opts, deps) {
+    // `await` cannot be used in a default parameter expression of an async
+    // function — it is a syntax error. Resolve lazily inside the body instead.
+    const { exec, scaffoldAdmin: doScaffold, generateAdminMeta } = deps ?? (await loadDeps());
+    const { projectDir } = opts;
+    const pagesDir = join(projectDir, 'resources/js/Pages');
+    const schemaPath = join(projectDir, 'prisma/schema.prisma');
+    const metaPath = join(projectDir, 'prisma/admin-meta.json');
+    // ── 1. Install dependencies ──────────────────────────────────────────────
+    logger.info('Installing dependencies…');
+    exec('npm install', projectDir);
+    // ── 2. Run database migrations ───────────────────────────────────────────
+    logger.info('Running database migrations…');
+    exec('npx prisma migrate dev --name init', projectDir);
+    // ── 3. Generate Prisma client ────────────────────────────────────────────
+    logger.info('Generating Prisma client…');
+    exec('npx prisma generate', projectDir);
+    // ── 4. Scaffold admin pages ──────────────────────────────────────────────
+    logger.info('Scaffolding admin pages…');
+    const scaffoldResult = await doScaffold({ targetDir: pagesDir, force: false });
+    for (const file of scaffoldResult.written) {
+        logger.success(`Written  resources/js/Pages/Admin/${file}`);
+    }
+    // ── 5. Generate admin metadata ───────────────────────────────────────────
+    logger.info('Generating admin metadata…');
+    await generateAdminMeta(schemaPath, metaPath);
+    logger.success('Admin meta written to prisma/admin-meta.json');
+    // ── 6. Create admin user (interactive subprocess) ────────────────────────
+    logger.info('Creating your admin account…');
+    exec('npx hypersonic admin create-admin', projectDir);
+}
+//# sourceMappingURL=run-setup.js.map

package/dist/src/commands/new/run-setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-setup.js","sourceRoot":"","sources":["../../../../src/commands/new/run-setup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAC7C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAC3D,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAA;AAoB9C,8EAA8E;AAE9E,KAAK,UAAU,QAAQ;IACrB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAA;IAEpD,OAAO;QACL,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QAEpE,aAAa;QAEb,iBAAiB,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE;YAClD,MAAM,eAAe,CACnB,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,EAC1C;gBACE,OAAO;gBACP,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC;gBACzC,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC;aACzC,CACF,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED,8EAA8E;AAE9E;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,IAAqB,EACrB,IAAmB;IAEnB,uEAAuE;IACvE,2EAA2E;IAC3E,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,iBAAiB,EAAE,GAAG,IAAI,IAAI,CAAC,MAAM,QAAQ,EAAE,CAAC,CAAA;IACzF,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAA;IAE3B,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAA;IACvD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAA;IAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,wBAAwB,CAAC,CAAA;IAE3D,4EAA4E;IAC5E,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAA;IACvC,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,CAAA;IAE/B,4EAA4E;IAC5E,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAA;IAC3C,IAAI,CAAC,oCAAoC,EAAE,UAAU,CAAC,CAAA;IAEtD,4EAA4E;IAC5E,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAA;IACxC,IAAI,CAAC,qBAAqB,EAAE,UAAU,CAAC,CAAA;IAEvC,4EAA4E;IAC5E,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAA;IACvC,MAAM,cAAc,GAAG,MAAM,UAAU,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;IAC9E,KAAK,MAAM,IAAI,IAAI,cAAc,CAAC,OAAO,EAAE,CAAC;QAC1C,MAAM,CAAC,OAAO,CAAC,qCAAqC,IAAI,EAAE,CAAC,CAAA;IAC7D,CAAC;IAED,4EAA4E;IAC5E,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAA;IACzC,MAAM,iBAAiB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;IAC7C,MAAM,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAA;IAE9D,4EAA4E;IAC5E,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAA;IAC3C,IAAI,CAAC,mCAAmC,EAAE,UAAU,CAAC,CAAA;AACvD,CAAC"}

package/dist/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAInC,eAAO,MAAM,WAAW,EAAE,MAAoB,CAAA;AAE9C;;;;GAIG;AACH,wBAAgB,aAAa,IAAI,OAAO,CASvC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAKnC,eAAO,MAAM,WAAW,EAAE,MAAoB,CAAA;AAE9C;;;;GAIG;AACH,wBAAgB,aAAa,IAAI,OAAO,CAUvC"}

package/dist/src/index.js

@@ -1,5 +1,6 @@
 import { Command } from 'commander';
 import { registerAdminCommands } from './commands/admin/index.js';
+import { registerNewCommand } from './commands/new/index.js';
 import pkg from '../package.json' with { type: 'json' };
 export const CLI_VERSION = pkg.version;
 /**
@@ -13,6 +14,7 @@ export function createProgram() {
         .description('Hypersonic.js framework CLI')
         .version(CLI_VERSION, '-v, --version', 'Print the CLI version');
     registerAdminCommands(program);
+    registerNewCommand(program);
     return program;
 }
 //# sourceMappingURL=index.js.map

package/dist/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAA;AACjE,OAAO,GAAG,MAAM,iBAAiB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAA;AAEvD,MAAM,CAAC,MAAM,WAAW,GAAW,GAAG,CAAC,OAAO,CAAA;AAE9C;;;;GAIG;AACH,MAAM,UAAU,aAAa;IAC3B,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE;SAC1B,IAAI,CAAC,YAAY,CAAC;SAClB,WAAW,CAAC,6BAA6B,CAAC;SAC1C,OAAO,CAAC,WAAW,EAAE,eAAe,EAAE,uBAAuB,CAAC,CAAA;IAEjE,qBAAqB,CAAC,OAAO,CAAC,CAAA;IAE9B,OAAO,OAAO,CAAA;AAChB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAA;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAC5D,OAAO,GAAG,MAAM,iBAAiB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAA;AAEvD,MAAM,CAAC,MAAM,WAAW,GAAW,GAAG,CAAC,OAAO,CAAA;AAE9C;;;;GAIG;AACH,MAAM,UAAU,aAAa;IAC3B,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE;SAC1B,IAAI,CAAC,YAAY,CAAC;SAClB,WAAW,CAAC,6BAA6B,CAAC;SAC1C,OAAO,CAAC,WAAW,EAAE,eAAe,EAAE,uBAAuB,CAAC,CAAA;IAEjE,qBAAqB,CAAC,OAAO,CAAC,CAAA;IAC9B,kBAAkB,CAAC,OAAO,CAAC,CAAA;IAE3B,OAAO,OAAO,CAAA;AAChB,CAAC"}

package/dist/templates/new/.env.example

@@ -0,0 +1,2 @@
+DATABASE_URL="file:./dev.db"
+BETTER_AUTH_SECRET="replace-with-a-random-32-character-secret"

package/dist/templates/new/_env

@@ -0,0 +1,2 @@
+DATABASE_URL="file:./dev.db"
+BETTER_AUTH_SECRET="{{SECRET}}"

package/dist/templates/new/eslint.config.js

@@ -0,0 +1,17 @@
+import js from '@eslint/js'
+import tseslint from 'typescript-eslint'
+import reactHooks from 'eslint-plugin-react-hooks'
+
+export default tseslint.config(
+  { ignores: ['public/', 'node_modules/'] },
+  {
+    extends: [js.configs.recommended, ...tseslint.configs.recommended],
+    files: ['**/*.{ts,tsx}'],
+    plugins: {
+      'react-hooks': reactHooks,
+    },
+    rules: {
+      ...reactHooks.configs.recommended.rules,
+    },
+  },
+)

package/dist/templates/new/hypersonic.config.ts

@@ -0,0 +1,17 @@
+import { defineConfig } from '@hypersonic-js/complete'
+
+export default defineConfig({
+  server: {
+    port: 3000,
+    host: 'localhost',
+  },
+  database: {
+    provider: 'sqlite',
+  },
+  auth: {
+    trustedOrigins: ['http://localhost:3000'],
+  },
+  inertia: {
+    ssr: false,
+  },
+})

package/dist/templates/new/package.json

@@ -0,0 +1,39 @@
+{
+  "name": "{{PROJECT_NAME}}",
+  "version": "0.0.1",
+  "type": "module",
+  "scripts": {
+    "dev": "node --experimental-strip-types server.ts",
+    "build": "vite build",
+    "lint": "eslint .",
+    "db:migrate": "prisma migrate dev",
+    "db:generate": "prisma generate"
+  },
+  "dependencies": {
+    "@hypersonic-js/complete": "0.2.0",
+    "@prisma/adapter-better-sqlite3": "7.8.0",
+    "better-sqlite3": "12.11.1",
+    "dotenv": "17.4.2",
+    "@prisma/client": "7.8.0",
+    "better-auth": "1.6.19"
+  },
+  "devDependencies": {
+    "@eslint/js": "10.0.1",
+    "@hypersonic-js/cli": "0.2.0",
+    "@inertiajs/react": "3.4.0",
+    "@tailwindcss/vite": "4.3.1",
+    "@types/better-sqlite3": "7.6.13",
+    "@types/node": "25.9.3",
+    "@types/react": "19.2.17",
+    "@types/react-dom": "19.2.3",
+    "eslint": "10.5.0",
+    "eslint-plugin-react-hooks": "7.1.1",
+    "prisma": "7.8.0",
+    "react": "19.2.7",
+    "react-dom": "19.2.7",
+    "tailwindcss": "4.3.1",
+    "typescript": "6.0.3",
+    "typescript-eslint": "8.61.1",
+    "vite": "8.0.16"
+  }
+}

package/dist/templates/new/prisma/schema.prisma

@@ -0,0 +1,71 @@
+generator client {
+  provider = "prisma-client-js"
+}
+
+datasource db {
+  provider = "sqlite"
+}
+
+// ── Required by Better Auth ────────────────────────────────────────────────
+
+model User {
+  id            String    @id
+  name          String
+  email         String    @unique
+  emailVerified Boolean
+  image         String?
+  createdAt     DateTime
+  updatedAt     DateTime
+  // Better Auth admin plugin fields
+  role          Role      @default(user)
+  banned        Boolean   @default(false)
+  banReason     String?
+  banExpires    DateTime?
+  sessions      Session[]
+  accounts      Account[]
+}
+
+enum Role {
+  user
+  admin
+}
+
+model Session {
+  id        String   @id
+  expiresAt DateTime
+  token     String   @unique
+  createdAt DateTime
+  updatedAt DateTime
+  ipAddress String?
+  userAgent String?
+  userId    String
+  user      User     @relation(fields: [userId], references: [id], onDelete: Cascade)
+}
+
+model Account {
+  id                    String    @id
+  accountId             String
+  providerId            String
+  userId                String
+  accessToken           String?
+  refreshToken          String?
+  idToken               String?
+  accessTokenExpiresAt  DateTime?
+  refreshTokenExpiresAt DateTime?
+  scope                 String?
+  password              String?
+  createdAt             DateTime
+  updatedAt             DateTime
+  user                  User      @relation(fields: [userId], references: [id], onDelete: Cascade)
+}
+
+model Verification {
+  id         String    @id
+  identifier String
+  value      String
+  expiresAt  DateTime
+  createdAt  DateTime?
+  updatedAt  DateTime?
+}
+
+// ── Your models go here ────────────────────────────────────────────────────

package/dist/templates/new/prisma.config.ts

@@ -0,0 +1,18 @@
+import 'dotenv/config'
+import { defineConfig } from 'prisma/config'
+
+if (!process.env.DATABASE_URL) {
+  throw new Error(
+    'DATABASE_URL is not defined. Please add it to your .env file before running Prisma commands.',
+  )
+}
+
+export default defineConfig({
+  schema: 'prisma/schema.prisma',
+  migrations: {
+    path: 'prisma/migrations',
+  },
+  datasource: {
+    url: process.env.DATABASE_URL,
+  },
+})

package/dist/templates/new/resources/css/app.css

@@ -0,0 +1 @@
+@import "tailwindcss";

package/dist/templates/new/resources/js/Pages/Auth/Login.tsx

@@ -0,0 +1,96 @@
+import { useState } from 'react'
+import { router } from '@inertiajs/react'
+import { authClient } from '../../lib/auth-client'
+
+interface Props {
+  error?: string
+}
+
+export default function Login({ error }: Props) {
+  const [email, setEmail] = useState('')
+  const [password, setPassword] = useState('')
+  const [submitting, setSubmitting] = useState(false)
+  const [formError, setFormError] = useState(error ?? '')
+
+  async function handleSubmit(e: React.FormEvent) {
+    e.preventDefault()
+    setSubmitting(true)
+    setFormError('')
+
+    try {
+      const result = await authClient.signIn.email({
+        email,
+        password,
+        callbackURL: '/',
+      })
+
+      if (result.error) {
+        setFormError(result.error.message ?? 'Invalid email or password')
+        return
+      }
+
+      router.visit('/')
+    } catch {
+      setFormError('An unexpected error occurred. Please try again.')
+    } finally {
+      setSubmitting(false)
+    }
+  }
+
+  return (
+    <div className="min-h-screen flex items-center justify-center bg-gray-50">
+      <div className="w-full max-w-sm bg-white rounded-2xl shadow p-8">
+        <h1 className="text-2xl font-semibold text-gray-900 mb-6">Sign in</h1>
+
+        {formError && (
+          <p className="mb-4 rounded-lg bg-red-50 px-4 py-3 text-sm text-red-700">
+            {formError}
+          </p>
+        )}
+
+        <form onSubmit={handleSubmit} className="space-y-4">
+          <div>
+            <label className="block text-sm font-medium text-gray-700 mb-1">
+              Email
+            </label>
+            <input
+              type="email"
+              value={email}
+              onChange={(e) => setEmail(e.target.value)}
+              required
+              className="w-full rounded-lg border border-gray-300 px-3 py-2 text-sm focus:outline-none focus:ring-2 focus:ring-indigo-500"
+            />
+          </div>
+
+          <div>
+            <label className="block text-sm font-medium text-gray-700 mb-1">
+              Password
+            </label>
+            <input
+              type="password"
+              value={password}
+              onChange={(e) => setPassword(e.target.value)}
+              required
+              className="w-full rounded-lg border border-gray-300 px-3 py-2 text-sm focus:outline-none focus:ring-2 focus:ring-indigo-500"
+            />
+          </div>
+
+          <button
+            type="submit"
+            disabled={submitting}
+            className="w-full rounded-lg bg-indigo-600 px-4 py-2 text-sm font-medium text-white hover:bg-indigo-700 disabled:opacity-50"
+          >
+            {submitting ? 'Signing in…' : 'Sign in'}
+          </button>
+        </form>
+
+        <p className="mt-6 text-center text-sm text-gray-500">
+          No account?{' '}
+          <a href="/register" className="text-indigo-600 hover:underline">
+            Create one
+          </a>
+        </p>
+      </div>
+    </div>
+  )
+}

package/dist/templates/new/resources/js/Pages/Auth/Register.tsx

@@ -0,0 +1,107 @@
+import { useState } from 'react'
+import { router } from '@inertiajs/react'
+import { authClient } from '../../lib/auth-client'
+
+export default function Register() {
+  const [name, setName] = useState('')
+  const [email, setEmail] = useState('')
+  const [password, setPassword] = useState('')
+  const [submitting, setSubmitting] = useState(false)
+  const [formError, setFormError] = useState('')
+
+  async function handleSubmit(e: React.FormEvent) {
+    e.preventDefault()
+    setSubmitting(true)
+    setFormError('')
+
+    try {
+      const result = await authClient.signUp.email({
+        name,
+        email,
+        password,
+        callbackURL: '/',
+      })
+
+      if (result.error) {
+        setFormError(result.error.message ?? 'Could not create account')
+        return
+      }
+
+      router.visit('/')
+    } catch {
+      setFormError('An unexpected error occurred. Please try again.')
+    } finally {
+      setSubmitting(false)
+    }
+  }
+
+  return (
+    <div className="min-h-screen flex items-center justify-center bg-gray-50">
+      <div className="w-full max-w-sm bg-white rounded-2xl shadow p-8">
+        <h1 className="text-2xl font-semibold text-gray-900 mb-6">Create account</h1>
+
+        {formError && (
+          <p className="mb-4 rounded-lg bg-red-50 px-4 py-3 text-sm text-red-700">
+            {formError}
+          </p>
+        )}
+
+        <form onSubmit={handleSubmit} className="space-y-4">
+          <div>
+            <label className="block text-sm font-medium text-gray-700 mb-1">
+              Name
+            </label>
+            <input
+              type="text"
+              value={name}
+              onChange={(e) => setName(e.target.value)}
+              required
+              className="w-full rounded-lg border border-gray-300 px-3 py-2 text-sm focus:outline-none focus:ring-2 focus:ring-indigo-500"
+            />
+          </div>
+
+          <div>
+            <label className="block text-sm font-medium text-gray-700 mb-1">
+              Email
+            </label>
+            <input
+              type="email"
+              value={email}
+              onChange={(e) => setEmail(e.target.value)}
+              required
+              className="w-full rounded-lg border border-gray-300 px-3 py-2 text-sm focus:outline-none focus:ring-2 focus:ring-indigo-500"
+            />
+          </div>
+
+          <div>
+            <label className="block text-sm font-medium text-gray-700 mb-1">
+              Password
+            </label>
+            <input
+              type="password"
+              value={password}
+              onChange={(e) => setPassword(e.target.value)}
+              required
+              className="w-full rounded-lg border border-gray-300 px-3 py-2 text-sm focus:outline-none focus:ring-2 focus:ring-indigo-500"
+            />
+          </div>
+
+          <button
+            type="submit"
+            disabled={submitting}
+            className="w-full rounded-lg bg-indigo-600 px-4 py-2 text-sm font-medium text-white hover:bg-indigo-700 disabled:opacity-50"
+          >
+            {submitting ? 'Creating account…' : 'Create account'}
+          </button>
+        </form>
+
+        <p className="mt-6 text-center text-sm text-gray-500">
+          Already have an account?{' '}
+          <a href="/login" className="text-indigo-600 hover:underline">
+            Sign in
+          </a>
+        </p>
+      </div>
+    </div>
+  )
+}

package/dist/templates/new/resources/js/Pages/Welcome.tsx

@@ -0,0 +1,54 @@
+interface Route {
+  path: string
+  description: string
+}
+
+interface Props {
+  routes: Route[]
+}
+
+export default function Welcome({ routes }: Props) {
+  return (
+    <div className="min-h-screen bg-gray-50 flex flex-col items-center justify-center p-8">
+      <div className="max-w-lg w-full">
+        <h1 className="text-4xl font-bold text-gray-900 mb-2">
+          Welcome to Hypersonic.js
+        </h1>
+        <p className="text-gray-500 mb-8">
+          Your app is running. Here&apos;s where to go next.
+        </p>
+
+        <div className="bg-white rounded-2xl shadow-sm border border-gray-100 divide-y divide-gray-100 mb-8">
+          {routes.map((route) => (
+            <a
+              key={route.path}
+              href={route.path}
+              className="flex items-center justify-between px-6 py-4 hover:bg-gray-50 transition-colors"
+            >
+              <div>
+                <p className="font-mono text-sm font-medium text-gray-900">
+                  {route.path}
+                </p>
+                <p className="text-sm text-gray-500">{route.description}</p>
+              </div>
+              <span className="text-gray-300">&rarr;</span>
+            </a>
+          ))}
+        </div>
+
+        <p className="text-center text-sm text-gray-400">
+          Read the{' '}
+          <a
+            href="https://hypersonic-js.com/guide/"
+            className="text-indigo-600 hover:underline"
+            target="_blank"
+            rel="noreferrer"
+          >
+            documentation
+          </a>{' '}
+          to learn more.
+        </p>
+      </div>
+    </div>
+  )
+}

package/dist/templates/new/resources/js/app.tsx

@@ -0,0 +1,15 @@
+import { createInertiaApp } from '@inertiajs/react'
+import { createRoot } from 'react-dom/client'
+import '../css/app.css'
+
+createInertiaApp({
+  resolve: (name) => {
+    const pages = import.meta.glob('./Pages/**/*.tsx', { eager: true })
+    const page = pages[`./Pages/${name}.tsx`]
+    if (!page) throw new Error(`Inertia page not found: ${name}`)
+    return page as never
+  },
+  setup({ el, App, props }) {
+    createRoot(el).render(<App {...props} />)
+  },
+})

package/dist/templates/new/resources/js/lib/auth-client.ts

@@ -0,0 +1,5 @@
+import { createAuthClient } from 'better-auth/react'
+
+export const authClient = createAuthClient({
+  baseURL: 'http://localhost:3000',
+})

package/dist/templates/new/server.ts

@@ -0,0 +1,71 @@
+import 'dotenv/config'
+import { createRequire } from 'node:module'
+import type { PrismaClient as PrismaClientType } from '@prisma/client'
+import {
+  createApp,
+  loadConfig,
+  createDatabaseAdapter,
+  createInertiaErrorHandler,
+  mountAdmin,
+} from '@hypersonic-js/complete'
+import type { AdminModelMeta } from '@hypersonic-js/complete'
+import { createAuthGuard } from './src/middleware.ts'
+
+// PrismaClient is CommonJS — use createRequire to load it in an ESM context.
+const require = createRequire(import.meta.url)
+const adminMeta = require('./prisma/admin-meta.json') as AdminModelMeta[]
+const { PrismaClient } = require('@prisma/client') as {
+  PrismaClient: typeof PrismaClientType
+}
+
+const { config, env } = await loadConfig()
+
+// Prisma v7 requires a driver adapter — never instantiate PrismaClient bare.
+const adapter = await createDatabaseAdapter(config.database.provider, env.DATABASE_URL)
+const prisma = new PrismaClient({ adapter })
+
+const app = await createApp({ config, env, prisma })
+
+// ── Auth guard (use on any route you want to protect) ──────────────────────
+
+const requireAuth = createAuthGuard(app.auth)
+
+// ── Public routes ──────────────────────────────────────────────────────────
+
+app.express.get('/', (_req, res) => {
+  res.inertia!('Welcome', {
+    routes: [
+      { path: '/login', description: 'Sign in to your account' },
+      { path: '/register', description: 'Create a new account' },
+      { path: '/admin', description: 'Admin dashboard (admin role required and required to /login first)' },
+    ],
+  })
+})
+
+app.express.get('/login', (_req, res) => {
+  res.inertia!('Auth/Login', {})
+})
+
+app.express.get('/register', (_req, res) => {
+  res.inertia!('Auth/Register', {})
+})
+
+// ── Protected routes — example ─────────────────────────────────────────────
+// app.express.get('/dashboard', requireAuth, (req, res) => {
+//   res.inertia!('Dashboard', { user: req.sessionUser })
+// })
+
+// ── Admin ───────────────────────────────────────────────────────────────────
+
+mountAdmin(app.express, prisma, {
+  meta: adminMeta,
+  auth: app.auth,
+  logger: app.logger,
+})
+
+app.express.use(createInertiaErrorHandler())
+
+await app.start()
+console.log(`Listening on http://${config.server.host}:${config.server.port}`)
+
+export { requireAuth }

package/dist/templates/new/src/middleware.ts

@@ -0,0 +1,27 @@
+import type { Response, NextFunction, RequestHandler } from 'express'
+import type { AuthLike, AuthRequest } from './types.js'
+
+/**
+ * Returns a middleware that checks for a valid Better Auth session.
+ * Redirects to /login when the session is absent.
+ * Attaches session.user to req.sessionUser on success.
+ */
+export function createAuthGuard(auth: AuthLike): RequestHandler {
+  return async function requireAuth(
+    req: AuthRequest,
+    res: Response,
+    next: NextFunction,
+  ): Promise<void> {
+    const session = await auth.api.getSession({
+      headers: req.headers as unknown as Headers,
+    })
+
+    if (!session) {
+      res.redirect('/login')
+      return
+    }
+
+    req.sessionUser = session.user
+    next()
+  }
+}

package/dist/templates/new/src/types.ts

@@ -0,0 +1,17 @@
+import type { Request } from 'express'
+
+export interface SessionUser {
+  id: string
+  name: string
+  email: string
+}
+
+export interface AuthRequest extends Request {
+  sessionUser?: SessionUser
+}
+
+export interface AuthLike {
+  api: {
+    getSession(opts: { headers: unknown }): Promise<{ user: SessionUser } | null>
+  }
+}

package/dist/templates/new/tsconfig.json

@@ -0,0 +1,14 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "ESNext",
+    "moduleResolution": "bundler",
+    "jsx": "react-jsx",
+    "strict": true,
+    "skipLibCheck": true,
+    "types": ["vite/client"],
+    "lib": ["ES2022", "DOM", "DOM.Iterable"]
+  },
+  "include": ["**/*.ts", "**/*.tsx"],
+  "exclude": ["node_modules", "public"]
+}

package/dist/templates/new/types.ts

@@ -0,0 +1,17 @@
+import type { Request } from 'express'
+
+export interface SessionUser {
+  id: string
+  name: string
+  email: string
+}
+
+export interface AuthRequest extends Request {
+  sessionUser?: SessionUser
+}
+
+export interface AuthLike {
+  api: {
+    getSession(opts: { headers: unknown }): Promise<{ user: SessionUser } | null>
+  }
+}

package/dist/templates/new/vite.config.ts

@@ -0,0 +1,13 @@
+import { defineConfig } from 'vite'
+import tailwindcss from '@tailwindcss/vite'
+
+export default defineConfig({
+  plugins: [tailwindcss()],
+  build: {
+    outDir: 'public',
+    manifest: true,
+    rollupOptions: {
+      input: 'resources/js/app.tsx',
+    },
+  },
+})

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hypersonic-js/cli",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "Hypersonic.js CLI — developer tooling for the Hypersonic framework",
   "type": "module",
   "bin": {
@@ -20,27 +20,27 @@
     "access": "public"
   },
   "engines": {
-    "node": "^24.0.0"
+    "node": ">=24.0.0"
   },
   "dependencies": {
     "commander": "15.0.0",
     "dotenv": "17.4.2",
     "picocolors": "1.1.1",
     "@prisma/get-dmmf": "7.8.0",
-    "@hypersonic-js/admin": "0.2.0"
+    "@hypersonic-js/admin": "0.2.1"
   },
   "devDependencies": {
     "@prisma/adapter-pg": "7.8.0",
     "@prisma/client": "7.8.0",
     "@types/node": "25.9.3",
-    "@vitest/coverage-v8": "4.1.8",
-    "better-auth": "1.6.17",
+    "@vitest/coverage-v8": "4.1.9",
+    "better-auth": "1.6.19",
     "typescript": "6.0.3",
-    "vitest": "4.1.8",
-    "@hypersonic-js/core": "0.2.0"
+    "vitest": "4.1.9",
+    "@hypersonic-js/core": "0.2.1"
   },
   "scripts": {
-    "build": "tsc",
+    "build": "tsc && node --input-type=module --eval \"import{cpSync}from'node:fs';cpSync('templates','dist/templates',{recursive:true})\"",
     "test": "vitest run",
     "test:coverage": "vitest run --coverage",
     "type-check": "tsc --noEmit",