better-ts-stack 2.1.0 → 2.1.2

package/templates/frontend/tanstack/vite.config.ts

@@ -4,7 +4,7 @@ import viteReact from "@vitejs/plugin-react";
 import { nitro } from "nitro/vite";
 import { defineConfig } from "vite";
 
-export default defineConfig(({ command }) => ({
+export default defineConfig(({ command, isPreview }) => ({
   server: {
     port: 3000,
   },
@@ -15,8 +15,9 @@ export default defineConfig(({ command }) => ({
     tanstackStart({ srcDirectory: "src" }),
     tailwindcss(),
     viteReact(),
-    // Nitro builds the production server in .output/ (run with node). It is
-    // left out of `vite dev`, where TanStack Start's own dev server is steadier
-    command === "build" && nitro(),
+    // Nitro builds the production server in .output/ (run with node) and serves
+    // it for `vite preview`. It is left out of `vite dev`, where TanStack Start's
+    // own dev server is steadier
+    (command === "build" || isPreview) && nitro(),
   ],
 }));

package/templates/modules/agents/AGENTS.md.hbs

@@ -0,0 +1,237 @@
+# AGENTS.md
+
+Instructions for AI coding agents working in {{projectName}}. Read this before making changes.
+
+## Stack
+
+{{#if (eq framework 'express')}}
+- Express 5 REST API in TypeScript, compiled to CommonJS with `tsc`
+{{/if}}
+{{#if (eq framework 'nestjs')}}
+- NestJS 12 REST API in TypeScript, using ES modules
+{{/if}}
+{{#if (eq framework 'nextjs')}}
+- Next.js 16 with the App Router, React 19, Tailwind CSS 4, and shadcn/ui
+{{/if}}
+{{#if (eq framework 'tanstack')}}
+- TanStack Start with Vite, Nitro, React 19, Tailwind CSS 4, and shadcn/ui
+{{/if}}
+{{#if (eq database 'prisma')}}
+- PostgreSQL through Prisma 7
+{{/if}}
+{{#if (eq database 'drizzle')}}
+- PostgreSQL through Drizzle ORM
+{{/if}}
+{{#if (eq database 'mongoose')}}
+- MongoDB through Mongoose
+{{/if}}
+{{#if useAuth}}
+{{#if (eq framework 'express')}}
+- JWT auth: `POST /auth/register`, `POST /auth/login`, and `GET /auth/me`
+{{/if}}
+{{#if (eq framework 'nestjs')}}
+- JWT auth: `POST /auth/register`, `POST /auth/login`, and `GET /auth/me`
+{{/if}}
+{{#if (eq framework 'nextjs')}}
+- Better Auth with email and password
+{{/if}}
+{{#if (eq framework 'tanstack')}}
+- Better Auth with email and password
+{{/if}}
+{{/if}}
+{{#if useRateLimit}}
+- Rate limiting on every route except `/health`
+{{/if}}
+{{#if useDocker}}
+- Docker: `Dockerfile` and `docker-compose.yml`
+{{/if}}
+{{#if useCi}}
+- GitHub Actions CI in `.github/workflows/ci.yml`
+{{/if}}
+- Package manager: {{packageManager}}. Do not use another one or add its lockfile
+- Node.js 24 or later
+
+## Commands
+
+- Install: `{{packageManager}} install`
+- Dev server: `{{docker.run}} dev`
+- Build: `{{docker.run}} build`
+- Type-check: `{{docker.run}} type:check`
+- Lint: `{{docker.run}} lint`
+{{#if (eq database 'prisma')}}
+- After changing `prisma/schema.prisma`: `{{docker.run}} prisma:migrate` creates and applies a migration and regenerates the client
+{{/if}}
+{{#if (eq database 'drizzle')}}
+- After changing the schema: `{{docker.run}} db:generate` writes a migration, then `{{docker.run}} db:migrate` applies it
+{{/if}}
+
+## Before you finish
+
+Run type-check and lint, and fix every error they report. Run the build too when you changed config, dependencies, or anything the build reads. Do not report a task as done while any of them fails.
+
+## Layout
+
+{{#if (eq framework 'express')}}
+- `src/index.ts`: creates the app, adds middleware, and mounts the routers
+- `src/env.ts`: checks the environment variables with Zod at startup, so a missing one stops the server with a clear message
+- `src/routes/`: one router per resource, mounted in `src/index.ts`
+{{#if useAuth}}
+- `src/controllers/`, `src/services/`: request handlers and data access for auth
+- `src/middleware/requireAuth.ts`: add it to a route to require a valid JWT
+{{/if}}
+{{#if useRateLimit}}
+- `src/middleware/rateLimit.ts`: the rate limiters
+{{/if}}
+{{#if (eq database 'prisma')}}
+- `src/lib/prisma.ts`: the shared Prisma client. Do not create another one
+{{/if}}
+{{#if (eq database 'drizzle')}}
+- `src/lib/db.ts`, `src/lib/schema.ts`: the database client and the tables
+{{/if}}
+{{#if (eq database 'mongoose')}}
+- `src/lib/db.ts`, `src/models/`: the connection and the Mongoose models
+{{/if}}
+{{/if}}
+{{#if (eq framework 'nestjs')}}
+- `src/main.ts`: starts the app
+- `src/app.module.ts`: the root module. Register new modules and controllers here
+- `src/env.ts`: checks the environment variables with Zod at startup, so a missing one stops the server with a clear message
+- `src/health/`: `GET /health`
+{{#if useAuth}}
+- `src/auth/`: the auth module. Put `@UseGuards(AuthGuard)` on a route to require a valid JWT
+{{/if}}
+{{#if (eq database 'prisma')}}
+- `src/prisma/`: `PrismaService`, injected wherever the database is needed
+{{/if}}
+{{#if (eq database 'drizzle')}}
+- `src/database/`: the database module and the tables in `schema.ts`
+{{/if}}
+{{#if (eq database 'mongoose')}}
+- `src/users/user.schema.ts`: the Mongoose schema for users
+{{/if}}
+{{/if}}
+{{#if (eq framework 'nextjs')}}
+- `app/`: routes, layouts, and route handlers. Pages are Server Components unless they need state, effects, or event handlers
+- `components/ui/`: shadcn/ui components. Add new ones with the shadcn CLI instead of writing them by hand
+- `lib/utils.ts`: the `cn()` class name helper
+{{#if useAuth}}
+- `lib/auth.ts`: the Better Auth server. `lib/auth-client.ts`: the client for components
+- `app/api/auth/[...all]/route.ts`: the Better Auth endpoints. Do not rename it
+- `proxy.ts`: sends signed-out visitors from `/dashboard` to `/sign-in`. Add other protected paths to its `matcher`
+{{/if}}
+{{#if (eq database 'prisma')}}
+- `lib/prisma.ts`: the shared Prisma client. Do not create another one
+{{/if}}
+{{#if (eq database 'drizzle')}}
+- `lib/db.ts`, `lib/schema.ts`: the database client and the tables
+{{/if}}
+{{#if (eq database 'mongoose')}}
+- `lib/db.ts`, `models/`: the connection and the Mongoose models
+{{/if}}
+{{/if}}
+{{#if (eq framework 'tanstack')}}
+- `src/routes/`: file-based routes. A new file becomes a route
+- `src/routeTree.gen.ts`: generated by the dev server and the build. Never edit it
+- `src/router.tsx`, `src/routes/__root.tsx`: the router and the root layout
+- `src/components/ui/`: shadcn/ui components. Add new ones with the shadcn CLI instead of writing them by hand
+- `src/lib/utils.ts`: the `cn()` class name helper
+{{#if useAuth}}
+- `src/lib/auth.ts`: the Better Auth server. `src/lib/auth-client.ts`: the client for components
+- `src/routes/api/auth/$.ts`: the Better Auth endpoints. Do not rename it
+- `src/routes/dashboard.tsx`: an example of a protected route that redirects in `beforeLoad`
+{{/if}}
+{{#if (eq database 'prisma')}}
+- `src/lib/prisma.ts`: the shared Prisma client. Do not create another one
+{{/if}}
+{{#if (eq database 'drizzle')}}
+- `src/lib/db.ts`, `src/lib/schema.ts`: the database client and the tables
+{{/if}}
+{{#if (eq database 'mongoose')}}
+- `src/lib/db.ts`, `src/models/`: the connection and the Mongoose models
+{{/if}}
+{{/if}}
+
+## Rules
+
+- TypeScript is strict. Do not use `any` or `@ts-ignore` to silence an error; fix the type
+{{#if (eq framework 'nestjs')}}
+- Relative imports end in `.js`, as ES modules require: `import { AuthModule } from "./auth/auth.module.js"`
+{{/if}}
+- Keep `.env` out of git. When you add an environment variable, add it to `.env.example` too{{#if (eq framework 'express')}}, and to `src/env.ts`{{/if}}{{#if (eq framework 'nestjs')}}, and to `src/env.ts`{{/if}}
+{{#if (eq database 'prisma')}}
+- The Prisma client is generated into {{#if (eq framework 'express')}}`src/generated/`{{/if}}{{#if (eq framework 'nestjs')}}`src/generated/`{{/if}}{{#if (eq framework 'nextjs')}}`generated/`{{/if}}{{#if (eq framework 'tanstack')}}`generated/`{{/if}}. Never edit or commit it
+{{/if}}
+- Match the existing code style. ESLint settings are in `eslint.config.mjs`{{#if (eq framework 'express')}} and Prettier settings in `.prettierrc`{{/if}}{{#if (eq framework 'nestjs')}} and Prettier settings in `.prettierrc`{{/if}}
+- Add a dependency only when the task needs it, and install it with {{packageManager}}
+
+## Production rules
+
+- Validate every input from outside the app (request bodies, query strings, form data) with Zod before you use it{{#unless useAuth}}{{#if (eq framework 'nextjs')}} (add `zod` with {{packageManager}} first){{/if}}{{#if (eq framework 'tanstack')}} (add `zod` with {{packageManager}} first){{/if}}{{/unless}}
+- Never log or return secrets, tokens, or passwords. Error responses get a short message and the right status code, never a stack trace
+{{#unless (eq database 'none')}}
+- Query the database through {{#if (eq database 'prisma')}}Prisma{{/if}}{{#if (eq database 'drizzle')}}Drizzle{{/if}}{{#if (eq database 'mongoose')}}Mongoose{{/if}}, never with SQL or queries built from strings
+{{/unless}}
+{{#if (eq framework 'express')}}
+- Keep the security middleware in `src/index.ts` (`helmet`, `cors`{{#if useRateLimit}}, the rate limiter{{/if}}) in place. Set `CORS_ORIGIN` to your real origins in production
+{{/if}}
+{{#if (eq framework 'nestjs')}}
+- Keep the security setup in `src/main.ts` and `src/app.module.ts` in place. Set `CORS_ORIGIN` to your real origins in production
+{{/if}}
+{{#if (eq framework 'nextjs')}}
+- Code that reads secrets or the database stays on the server. Only variables prefixed with `NEXT_PUBLIC_` reach the browser, so never put a secret in one
+{{/if}}
+{{#if (eq framework 'tanstack')}}
+- Code that reads secrets or the database runs in server functions or server routes. Only variables prefixed with `VITE_` reach the browser, so never put a secret in one
+{{/if}}
+{{#if useAuth}}
+{{#if (eq framework 'nextjs')}}
+- Check the session on the server in every protected page, route handler, and server action. Hiding a button in the UI does not protect anything
+{{/if}}
+{{#if (eq framework 'tanstack')}}
+- Check the session on the server in every protected route and server function. Hiding a button in the UI does not protect anything
+{{/if}}
+{{/if}}
+{{#if (eq framework 'express')}}
+- Keep `GET /health` fast and free of auth{{#if useRateLimit}} and rate limiting{{/if}}, so hosts can check that the app is up
+{{/if}}
+{{#if (eq framework 'nestjs')}}
+- Keep `GET /health` fast and free of auth{{#if useRateLimit}} and rate limiting{{/if}}, so hosts can check that the app is up
+{{/if}}
+- Keep changes small and focused on the task. Do not add layers, abstractions, or files the task does not need
+
+## When you are unsure
+
+The libraries here may be newer than what you know. When you are not sure how an API works, read the official docs for the version in `package.json` instead of guessing:
+
+{{#if (eq framework 'express')}}
+- Express 5: https://expressjs.com/en/5x/api.html
+{{/if}}
+{{#if (eq framework 'nestjs')}}
+- NestJS: https://docs.nestjs.com
+{{/if}}
+{{#if (eq framework 'nextjs')}}
+- Next.js: https://nextjs.org/docs
+{{/if}}
+{{#if (eq framework 'tanstack')}}
+- TanStack Start: https://tanstack.com/start/latest/docs
+{{/if}}
+{{#if (eq database 'prisma')}}
+- Prisma: https://www.prisma.io/docs
+{{/if}}
+{{#if (eq database 'drizzle')}}
+- Drizzle: https://orm.drizzle.team/docs/overview
+{{/if}}
+{{#if (eq database 'mongoose')}}
+- Mongoose: https://mongoosejs.com/docs
+{{/if}}
+{{#if useAuth}}
+{{#if (eq framework 'nextjs')}}
+- Better Auth: https://www.better-auth.com/docs
+{{/if}}
+{{#if (eq framework 'tanstack')}}
+- Better Auth: https://www.better-auth.com/docs
+{{/if}}
+{{/if}}
+- Zod: https://zod.dev
+
+If the docs and this file disagree, follow the docs and say so.

package/templates/modules/agents/CLAUDE.md

@@ -0,0 +1 @@
+@AGENTS.md

package/templates/modules/agents/config.json

@@ -0,0 +1,10 @@
+{
+  "id": "agents",
+  "name": "AI agent instructions",
+  "description": "An AGENTS.md that tells AI coding agents how this project is built, run, and checked, and a CLAUDE.md that points Claude Code to it",
+  "type": "feature",
+  "dependencies": {},
+  "devDependencies": {},
+  "scripts": {},
+  "envVars": {}
+}

package/templates/modules/auth/express/config.json

@@ -6,7 +6,7 @@
   "dependencies": {
     "bcrypt": "^6.0.0",
     "jsonwebtoken": "^9.0.3",
-    "zod": "^4.6.5"
+    "zod": "^4.6.7"
   },
   "devDependencies": {
     "@types/bcrypt": "^6.0.0",

package/templates/modules/auth/express/src/lib/jwt.ts.hbs

@@ -1,27 +1,27 @@
-import jwt, { type SignOptions } from "jsonwebtoken";
-
-export interface AuthTokenPayload {
-  sub: string;
-  email: string;
-  name?: string | null;
-}
-
-const { JWT_SECRET, JWT_EXPIRES_IN } = process.env;
-
-function ensureSecret(): string {
-  if (!JWT_SECRET) {
-    throw new Error("JWT_SECRET is not set");
-  }
-  return JWT_SECRET;
-}
-
-export function signToken(payload: AuthTokenPayload): string {
-  const secret = ensureSecret();
-  const expiresIn = JWT_EXPIRES_IN || "1h";
-  return jwt.sign(payload, secret, { expiresIn } as SignOptions);
-}
-
-export function verifyToken(token: string): AuthTokenPayload {
-  const secret = ensureSecret();
-  return jwt.verify(token, secret) as AuthTokenPayload;
-}
+import jwt, { type SignOptions } from "jsonwebtoken";
+
+export interface AuthTokenPayload {
+  sub: string;
+  email: string;
+  name?: string | null;
+}
+
+const { JWT_SECRET, JWT_EXPIRES_IN } = process.env;
+
+function ensureSecret(): string {
+  if (!JWT_SECRET) {
+    throw new Error("JWT_SECRET is not set");
+  }
+  return JWT_SECRET;
+}
+
+export function signToken(payload: AuthTokenPayload): string {
+  const secret = ensureSecret();
+  const expiresIn = JWT_EXPIRES_IN || "1h";
+  return jwt.sign(payload, secret, { expiresIn } as SignOptions);
+}
+
+export function verifyToken(token: string): AuthTokenPayload {
+  const secret = ensureSecret();
+  return jwt.verify(token, secret) as AuthTokenPayload;
+}

package/templates/modules/auth/express/src/middleware/requireAuth.ts.hbs

@@ -19,8 +19,7 @@ export function requireAuth(req: AuthenticatedRequest, res: Response, next: Next
     const payload = verifyToken(token);
     req.user = payload;
     next();
-  } catch (error) {
-    console.error('JWT verification failed:', error);
+  } catch {
     res.status(401).json({ error: 'Invalid or expired token' });
   }
 }

package/templates/modules/auth/nestjs/config.json

@@ -6,7 +6,7 @@
   "dependencies": {
     "bcrypt": "^6.0.0",
     "jsonwebtoken": "^9.0.3",
-    "zod": "^4.6.5"
+    "zod": "^4.6.7"
   },
   "devDependencies": {
     "@types/bcrypt": "^6.0.0",

package/templates/modules/auth/nextjs/app/api/auth/[...all]/route.ts

@@ -1,4 +1,4 @@
-import { auth } from "@/lib/auth";
-import { toNextJsHandler } from "better-auth/next-js";
-
-export const { GET, POST } = toNextJsHandler(auth);
+import { auth } from "@/lib/auth";
+import { toNextJsHandler } from "better-auth/next-js";
+
+export const { GET, POST } = toNextJsHandler(auth);

package/templates/modules/auth/nextjs/config.json

@@ -1,18 +1,18 @@
-{
-  "id": "auth",
-  "name": "Better Auth",
-  "description": "Better Auth for Next.js with optional Prisma or Drizzle adapter",
-  "type": "feature",
-  "dependencies": {
-    "@hookform/resolvers": "^5.9.1",
-    "better-auth": "^1.7.3",
-    "react-hook-form": "^7.87.0",
-    "zod": "^4.6.5"
-  },
-  "devDependencies": {},
-  "scripts": {},
-  "envVars": {
-    "BETTER_AUTH_SECRET": "please-change-me-to-a-random-string",
-    "BETTER_AUTH_URL": "http://localhost:3000"
-  }
-}
+{
+  "id": "auth",
+  "name": "Better Auth",
+  "description": "Better Auth for Next.js with optional Prisma or Drizzle adapter",
+  "type": "feature",
+  "dependencies": {
+    "@hookform/resolvers": "^5.9.2",
+    "better-auth": "^1.7.14",
+    "react-hook-form": "^7.91.0",
+    "zod": "^4.6.7"
+  },
+  "devDependencies": {},
+  "scripts": {},
+  "envVars": {
+    "BETTER_AUTH_SECRET": "please-change-me-to-a-random-string",
+    "BETTER_AUTH_URL": "http://localhost:3000"
+  }
+}

package/templates/modules/auth/nextjs/lib/auth-client.ts

@@ -1,3 +1,3 @@
-import { createAuthClient } from "better-auth/react";
-
-export const authClient = createAuthClient();
+import { createAuthClient } from "better-auth/react";
+
+export const authClient = createAuthClient();

package/templates/{frontend/nextjs/proxy.ts.hbs → modules/auth/nextjs/proxy.ts}

@@ -1,8 +1,6 @@
+import { getSessionCookie } from "better-auth/cookies";
 import { NextResponse } from "next/server";
-
-{{#if useAuth}}
 import type { NextRequest } from "next/server";
-import { getSessionCookie } from "better-auth/cookies";
 
 export function proxy(request: NextRequest) {
   const sessionCookie = getSessionCookie(request);
@@ -17,8 +15,3 @@ export function proxy(request: NextRequest) {
 export const config = {
   matcher: ["/dashboard/:path*"],
 };
-{{else}}
-export function proxy() {
-  return NextResponse.next();
-}
-{{/if}}

package/templates/modules/auth/tanstack/config.json

@@ -1,19 +1,19 @@
-{
-  "id": "auth",
-  "name": "Better Auth",
-  "description": "Better Auth for TanStack Start with optional Prisma, Drizzle, or MongoDB adapter",
-  "type": "feature",
-  "dependencies": {
-    "@hookform/resolvers": "^5.9.1",
-    "better-auth": "^1.7.3",
-    "dotenv": "^17.4.2",
-    "react-hook-form": "^7.87.0",
-    "zod": "^4.6.5"
-  },
-  "devDependencies": {},
-  "scripts": {},
-  "envVars": {
-    "BETTER_AUTH_SECRET": "please-change-me-to-a-random-string",
-    "BETTER_AUTH_URL": "http://localhost:3000"
-  }
+{
+  "id": "auth",
+  "name": "Better Auth",
+  "description": "Better Auth for TanStack Start with optional Prisma, Drizzle, or MongoDB adapter",
+  "type": "feature",
+  "dependencies": {
+    "@hookform/resolvers": "^5.9.2",
+    "better-auth": "^1.7.14",
+    "dotenv": "^17.4.2",
+    "react-hook-form": "^7.91.0",
+    "zod": "^4.6.7"
+  },
+  "devDependencies": {},
+  "scripts": {},
+  "envVars": {
+    "BETTER_AUTH_SECRET": "please-change-me-to-a-random-string",
+    "BETTER_AUTH_URL": "http://localhost:3000"
+  }
 }

package/templates/modules/auth/tanstack/src/lib/auth-client.ts

@@ -1,3 +1,3 @@
-import { createAuthClient } from "better-auth/react";
-
+import { createAuthClient } from "better-auth/react";
+
 export const authClient = createAuthClient();

package/templates/modules/auth/tanstack/src/lib/auth-functions.ts

@@ -1,12 +1,12 @@
-import { createServerFn } from "@tanstack/react-start";
-import { getRequestHeaders } from "@tanstack/react-start/server";
-
-import { auth } from "./auth";
-
-export const getSession = createServerFn({ method: "GET" }).handler(async () => {
+import { createServerFn } from "@tanstack/react-start";
+import { getRequestHeaders } from "@tanstack/react-start/server";
+
+import { auth } from "./auth";
+
+export const getSession = createServerFn({ method: "GET" }).handler(async () => {
   const session = await auth.api.getSession({
     headers: getRequestHeaders(),
   });
-
-  return session;
+
+  return session;
 });

package/templates/modules/auth/tanstack/src/lib/auth.ts.hbs

@@ -1,38 +1,38 @@
-import "dotenv/config";
-import { betterAuth } from "better-auth";
-import { tanstackStartCookies } from "better-auth/tanstack-start";
-{{#if (eq database 'prisma')}}
-import { prismaAdapter } from "better-auth/adapters/prisma";
-import client from "./prisma";
-{{/if}}
-{{#if (eq database 'drizzle')}}
-import { drizzleAdapter } from "better-auth/adapters/drizzle";
-import { db } from "./db";
-{{/if}}
-{{#if (eq database 'mongoose')}}
-import { mongodbAdapter } from "better-auth/adapters/mongodb";
-import { MongoClient } from "mongodb";
-
-const client = new MongoClient(process.env.MONGODB_URI!);
-const db = client.db();
-{{/if}}
-
-export const auth = betterAuth({
-  {{#if (eq database 'prisma')}}
-  database: prismaAdapter(client, { provider: "postgresql" }),
-  {{/if}}
-  {{#if (eq database 'drizzle')}}
-  database: drizzleAdapter(db, { provider: "pg" }),
-  {{/if}}
-  {{#if (eq database 'mongoose')}}
-  // Transactions require a replica set. Create user/session/account/verification
-  // collections before the first sign-up; see the database setup documentation.
-  database: mongodbAdapter(db, { client }),
-  {{/if}}
-  emailAndPassword: {
-    enabled: true,
-  },
-  plugins: [tanstackStartCookies()],
-  secret: process.env.BETTER_AUTH_SECRET,
-  baseURL: process.env.BETTER_AUTH_URL,
+import "dotenv/config";
+import { betterAuth } from "better-auth";
+import { tanstackStartCookies } from "better-auth/tanstack-start";
+{{#if (eq database 'prisma')}}
+import { prismaAdapter } from "better-auth/adapters/prisma";
+import client from "./prisma";
+{{/if}}
+{{#if (eq database 'drizzle')}}
+import { drizzleAdapter } from "better-auth/adapters/drizzle";
+import { db } from "./db";
+{{/if}}
+{{#if (eq database 'mongoose')}}
+import { mongodbAdapter } from "better-auth/adapters/mongodb";
+import { MongoClient } from "mongodb";
+
+const client = new MongoClient(process.env.MONGODB_URI!);
+const db = client.db();
+{{/if}}
+
+export const auth = betterAuth({
+  {{#if (eq database 'prisma')}}
+  database: prismaAdapter(client, { provider: "postgresql" }),
+  {{/if}}
+  {{#if (eq database 'drizzle')}}
+  database: drizzleAdapter(db, { provider: "pg" }),
+  {{/if}}
+  {{#if (eq database 'mongoose')}}
+  // Transactions require a replica set. Create user/session/account/verification
+  // collections before the first sign-up; see the database setup documentation.
+  database: mongodbAdapter(db, { client }),
+  {{/if}}
+  emailAndPassword: {
+    enabled: true,
+  },
+  plugins: [tanstackStartCookies()],
+  secret: process.env.BETTER_AUTH_SECRET,
+  baseURL: process.env.BETTER_AUTH_URL,
 });

package/templates/modules/auth/tanstack/src/routes/api/auth/$.ts

@@ -1,16 +1,16 @@
-import { createFileRoute } from "@tanstack/react-router";
-
-import { auth } from "~/lib/auth";
-
-export const Route = createFileRoute("/api/auth/$")({
-  server: {
-    handlers: {
-      GET: async ({ request }: { request: Request }) => {
-        return await auth.handler(request);
-      },
-      POST: async ({ request }: { request: Request }) => {
-        return await auth.handler(request);
-      },
-    },
-  },
+import { createFileRoute } from "@tanstack/react-router";
+
+import { auth } from "~/lib/auth";
+
+export const Route = createFileRoute("/api/auth/$")({
+  server: {
+    handlers: {
+      GET: async ({ request }: { request: Request }) => {
+        return await auth.handler(request);
+      },
+      POST: async ({ request }: { request: Request }) => {
+        return await auth.handler(request);
+      },
+    },
+  },
 });