@simple-auth-kit/cli 1.3.0 → 1.3.2

package/README.md

@@ -17,15 +17,16 @@ Package: https://www.npmjs.com/package/@simple-auth-kit/cli
 ## Commands
 
 ```bash
-npx @simple-auth-kit/cli init                       # fresh setup: guided "what do you need" picker
-npx @simple-auth-kit/cli add <combo> [--workspaces]  # install a specific combo
-npx @simple-auth-kit/cli add                         # guided picker, same flow as init (no config write)
-npx @simple-auth-kit/cli update [--check]             # re-installs whatever add last recorded — no args needed
+npx @simple-auth-kit/cli                              # don't know which combo yet? asks: kind, then framework, then variant
+npx @simple-auth-kit/cli add <combo> [--workspaces]   # already know? install it directly
+npx @simple-auth-kit/cli update [--check]             # re-installs whatever you installed last — no args needed
 npx @simple-auth-kit/cli diff                         # shows the actual content diff for every file that differs from the registry (api combos only)
-npx @simple-auth-kit/cli                              # bare, in a real terminal: same guided picker as `add`
 npx @simple-auth-kit/cli --help                       # full command/flag reference + available combos
 ```
 
+`init` and bare `add` do the same guided walkthrough as running the CLI with no arguments at all;
+`init` additionally writes `.simple-auth-kit.json` (install path, alias) first.
+
 `--into <path>` targets any directory (defaults to the current one). In a real terminal,
 without `--force` or `--check`, a file that's changed locally since install prompts you —
 per file — before it's overwritten; outside a TTY (CI/scripts) it's left alone by default and

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@simple-auth-kit/cli",
-  "version": "1.3.0",
+  "version": "1.3.2",
   "license": "MIT",
   "description": "simple-auth-kit add <combo> — copies registry source (backend combos, admin consoles, mobile apps) into a consumer repo, shadcn-CLI-style. Nothing is ever installed as a runtime dependency of the consumer.",
   "bin": {

package/registry/admin-apps/README.md

@@ -65,7 +65,7 @@ variants; not evidence of drift to reconcile.
 
 ## `@simple-auth-kit/auth-client`
 
-Both products' `package.json` declare `"@simple-auth-kit/auth-client": "^1.0.0"`, resolved from
+Both products' `package.json` declare `"@simple-auth-kit/auth-client": "^1.0.2"`, resolved from
 the published package on npm: https://www.npmjs.com/package/@simple-auth-kit/auth-client. A
 `scaffold`-mode generated app stands alone with a plain `npm install` — no monorepo/pnpm
 workspace required.

package/registry/admin-apps/nextjs/variants/base/package.json

@@ -13,7 +13,7 @@
   "dependencies": {
     "@casl/ability": "^7.0.1",
     "@casl/react": "^7.0.1",
-    "@simple-auth-kit/auth-client": "^1.0.0",
+    "@simple-auth-kit/auth-client": "^1.0.2",
     "@hookform/resolvers": "^5.2.2",
     "@tanstack/react-query": "^5.90.12",
     "@tanstack/react-table": "^8.21.3",

package/registry/admin-apps/nextjs/variants/workspaces/package.json

@@ -13,7 +13,7 @@
   "dependencies": {
     "@casl/ability": "^7.0.1",
     "@casl/react": "^7.0.1",
-    "@simple-auth-kit/auth-client": "^1.0.0",
+    "@simple-auth-kit/auth-client": "^1.0.2",
     "@tanstack/react-query": "^5.90.12",
     "@tanstack/react-table": "^8.21.3",
     "class-variance-authority": "^0.7.1",

package/registry/admin-apps/react/variants/base/package.json

@@ -13,7 +13,7 @@
   "dependencies": {
     "@casl/ability": "^6.7.3",
     "@casl/react": "^4.0.0",
-    "@simple-auth-kit/auth-client": "^1.0.0",
+    "@simple-auth-kit/auth-client": "^1.0.2",
     "@fontsource-variable/bricolage-grotesque": "^5.3.0",
     "@radix-ui/react-label": "^2.1.15",
     "@radix-ui/react-slot": "^1.3.3",

package/registry/admin-apps/react/variants/workspaces/package.json

@@ -13,7 +13,7 @@
   "dependencies": {
     "@casl/ability": "^6.7.3",
     "@casl/react": "^4.0.0",
-    "@simple-auth-kit/auth-client": "^1.0.0",
+    "@simple-auth-kit/auth-client": "^1.0.2",
     "@fontsource-variable/bricolage-grotesque": "^5.3.0",
     "@radix-ui/react-label": "^2.1.15",
     "@radix-ui/react-slot": "^1.3.3",

package/registry/mobile-apps/bare-rn/variants/base/package.json

@@ -12,7 +12,7 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@simple-auth-kit/auth-client": "^1.0.0",
+    "@simple-auth-kit/auth-client": "^1.0.2",
     "@react-native-async-storage/async-storage": "^3.1.1",
     "@react-native/new-app-screen": "0.86.2",
     "@react-navigation/native": "^7.3.16",

package/registry/mobile-apps/bare-rn/variants/workspaces/package.json

@@ -12,7 +12,7 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@simple-auth-kit/auth-client": "^1.0.0",
+    "@simple-auth-kit/auth-client": "^1.0.2",
     "@react-native-async-storage/async-storage": "^3.1.1",
     "@react-native/new-app-screen": "0.86.2",
     "@react-navigation/native": "^7.3.16",

package/registry/mobile-apps/expo/variants/base/package.json

@@ -12,7 +12,7 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@simple-auth-kit/auth-client": "^1.0.0",
+    "@simple-auth-kit/auth-client": "^1.0.2",
     "@react-native-async-storage/async-storage": "2.2.0",
     "@react-navigation/native": "^7.3.16",
     "@react-navigation/native-stack": "^7.18.8",

package/registry/mobile-apps/expo/variants/workspaces/package.json

@@ -12,7 +12,7 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@simple-auth-kit/auth-client": "^1.0.0",
+    "@simple-auth-kit/auth-client": "^1.0.2",
     "@react-native-async-storage/async-storage": "2.2.0",
     "@react-navigation/native": "^7.3.16",
     "@react-navigation/native-stack": "^7.18.8",

package/simple-auth-kit.ts

@@ -238,7 +238,19 @@ async function installDependencies(targetRoot: string, deps: string[], flags: Re
   const args = deps.length ? [pm === "npm" ? "install" : "add", ...deps] : ["install"];
 
   console.log(`\nInstalling dependencies (${pm})...`);
-  const result = spawnSync(pm, args, { cwd: targetRoot, stdio: "inherit" });
+  let result = spawnSync(pm, args, { cwd: targetRoot, stdio: "inherit" });
+  if (result.status !== 0 && pm === "pnpm") {
+    // pnpm's default security posture blocks postinstall/preinstall scripts from any dependency
+    // it hasn't seen approved before — argon2 (native addon build) and prisma (downloads its
+    // query-engine binary) both need theirs to run, so this is the single most common reason a
+    // combo install fails under pnpm specifically (ERR_PNPM_IGNORED_BUILDS). It can also recur on
+    // a later `update` (a version bump re-flags a build), so approve unconditionally and retry
+    // once rather than just telling the consumer to do it by hand each time — `approve-builds
+    // --all` is a no-op when nothing is pending.
+    console.log(`\n${pm} blocked some install scripts — running "pnpm approve-builds --all" and retrying...`);
+    spawnSync(pm, ["approve-builds", "--all"], { cwd: targetRoot, stdio: "inherit" });
+    result = spawnSync(pm, args, { cwd: targetRoot, stdio: "inherit" });
+  }
   if (result.status !== 0) {
     console.error(`\n${pm} install exited with an error — run it yourself: cd ${targetRoot} && ${pm} ${args.join(" ")}`);
   }