better-ts-stack 2.1.1 → 2.1.2

package/templates/modules/agents/config.json

@@ -0,0 +1,10 @@
+{
+  "id": "agents",
+  "name": "AI agent instructions",
+  "description": "An AGENTS.md that tells AI coding agents how this project is built, run, and checked, and a CLAUDE.md that points Claude Code to it",
+  "type": "feature",
+  "dependencies": {},
+  "devDependencies": {},
+  "scripts": {},
+  "envVars": {}
+}

package/templates/modules/auth/express/src/lib/jwt.ts.hbs

@@ -1,27 +1,27 @@
-import jwt, { type SignOptions } from "jsonwebtoken";
-
-export interface AuthTokenPayload {
-  sub: string;
-  email: string;
-  name?: string | null;
-}
-
-const { JWT_SECRET, JWT_EXPIRES_IN } = process.env;
-
-function ensureSecret(): string {
-  if (!JWT_SECRET) {
-    throw new Error("JWT_SECRET is not set");
-  }
-  return JWT_SECRET;
-}
-
-export function signToken(payload: AuthTokenPayload): string {
-  const secret = ensureSecret();
-  const expiresIn = JWT_EXPIRES_IN || "1h";
-  return jwt.sign(payload, secret, { expiresIn } as SignOptions);
-}
-
-export function verifyToken(token: string): AuthTokenPayload {
-  const secret = ensureSecret();
-  return jwt.verify(token, secret) as AuthTokenPayload;
-}
+import jwt, { type SignOptions } from "jsonwebtoken";
+
+export interface AuthTokenPayload {
+  sub: string;
+  email: string;
+  name?: string | null;
+}
+
+const { JWT_SECRET, JWT_EXPIRES_IN } = process.env;
+
+function ensureSecret(): string {
+  if (!JWT_SECRET) {
+    throw new Error("JWT_SECRET is not set");
+  }
+  return JWT_SECRET;
+}
+
+export function signToken(payload: AuthTokenPayload): string {
+  const secret = ensureSecret();
+  const expiresIn = JWT_EXPIRES_IN || "1h";
+  return jwt.sign(payload, secret, { expiresIn } as SignOptions);
+}
+
+export function verifyToken(token: string): AuthTokenPayload {
+  const secret = ensureSecret();
+  return jwt.verify(token, secret) as AuthTokenPayload;
+}

package/templates/modules/auth/nextjs/app/api/auth/[...all]/route.ts

@@ -1,4 +1,4 @@
-import { auth } from "@/lib/auth";
-import { toNextJsHandler } from "better-auth/next-js";
-
-export const { GET, POST } = toNextJsHandler(auth);
+import { auth } from "@/lib/auth";
+import { toNextJsHandler } from "better-auth/next-js";
+
+export const { GET, POST } = toNextJsHandler(auth);

package/templates/modules/auth/nextjs/config.json

@@ -1,18 +1,18 @@
-{
-  "id": "auth",
-  "name": "Better Auth",
-  "description": "Better Auth for Next.js with optional Prisma or Drizzle adapter",
-  "type": "feature",
-  "dependencies": {
-    "@hookform/resolvers": "^5.9.2",
-    "better-auth": "^1.7.14",
-    "react-hook-form": "^7.91.0",
-    "zod": "^4.6.7"
-  },
-  "devDependencies": {},
-  "scripts": {},
-  "envVars": {
-    "BETTER_AUTH_SECRET": "please-change-me-to-a-random-string",
-    "BETTER_AUTH_URL": "http://localhost:3000"
-  }
-}
+{
+  "id": "auth",
+  "name": "Better Auth",
+  "description": "Better Auth for Next.js with optional Prisma or Drizzle adapter",
+  "type": "feature",
+  "dependencies": {
+    "@hookform/resolvers": "^5.9.2",
+    "better-auth": "^1.7.14",
+    "react-hook-form": "^7.91.0",
+    "zod": "^4.6.7"
+  },
+  "devDependencies": {},
+  "scripts": {},
+  "envVars": {
+    "BETTER_AUTH_SECRET": "please-change-me-to-a-random-string",
+    "BETTER_AUTH_URL": "http://localhost:3000"
+  }
+}

package/templates/modules/auth/nextjs/lib/auth-client.ts

@@ -1,3 +1,3 @@
-import { createAuthClient } from "better-auth/react";
-
-export const authClient = createAuthClient();
+import { createAuthClient } from "better-auth/react";
+
+export const authClient = createAuthClient();

package/templates/modules/auth/tanstack/config.json

@@ -1,19 +1,19 @@
-{
-  "id": "auth",
-  "name": "Better Auth",
-  "description": "Better Auth for TanStack Start with optional Prisma, Drizzle, or MongoDB adapter",
-  "type": "feature",
-  "dependencies": {
-    "@hookform/resolvers": "^5.9.2",
-    "better-auth": "^1.7.14",
-    "dotenv": "^17.4.2",
-    "react-hook-form": "^7.91.0",
-    "zod": "^4.6.7"
-  },
-  "devDependencies": {},
-  "scripts": {},
-  "envVars": {
-    "BETTER_AUTH_SECRET": "please-change-me-to-a-random-string",
-    "BETTER_AUTH_URL": "http://localhost:3000"
-  }
+{
+  "id": "auth",
+  "name": "Better Auth",
+  "description": "Better Auth for TanStack Start with optional Prisma, Drizzle, or MongoDB adapter",
+  "type": "feature",
+  "dependencies": {
+    "@hookform/resolvers": "^5.9.2",
+    "better-auth": "^1.7.14",
+    "dotenv": "^17.4.2",
+    "react-hook-form": "^7.91.0",
+    "zod": "^4.6.7"
+  },
+  "devDependencies": {},
+  "scripts": {},
+  "envVars": {
+    "BETTER_AUTH_SECRET": "please-change-me-to-a-random-string",
+    "BETTER_AUTH_URL": "http://localhost:3000"
+  }
 }

package/templates/modules/auth/tanstack/src/lib/auth-client.ts

@@ -1,3 +1,3 @@
-import { createAuthClient } from "better-auth/react";
-
+import { createAuthClient } from "better-auth/react";
+
 export const authClient = createAuthClient();

package/templates/modules/auth/tanstack/src/lib/auth-functions.ts

@@ -1,12 +1,12 @@
-import { createServerFn } from "@tanstack/react-start";
-import { getRequestHeaders } from "@tanstack/react-start/server";
-
-import { auth } from "./auth";
-
-export const getSession = createServerFn({ method: "GET" }).handler(async () => {
+import { createServerFn } from "@tanstack/react-start";
+import { getRequestHeaders } from "@tanstack/react-start/server";
+
+import { auth } from "./auth";
+
+export const getSession = createServerFn({ method: "GET" }).handler(async () => {
   const session = await auth.api.getSession({
     headers: getRequestHeaders(),
   });
-
-  return session;
+
+  return session;
 });

package/templates/modules/auth/tanstack/src/lib/auth.ts.hbs

@@ -1,38 +1,38 @@
-import "dotenv/config";
-import { betterAuth } from "better-auth";
-import { tanstackStartCookies } from "better-auth/tanstack-start";
-{{#if (eq database 'prisma')}}
-import { prismaAdapter } from "better-auth/adapters/prisma";
-import client from "./prisma";
-{{/if}}
-{{#if (eq database 'drizzle')}}
-import { drizzleAdapter } from "better-auth/adapters/drizzle";
-import { db } from "./db";
-{{/if}}
-{{#if (eq database 'mongoose')}}
-import { mongodbAdapter } from "better-auth/adapters/mongodb";
-import { MongoClient } from "mongodb";
-
-const client = new MongoClient(process.env.MONGODB_URI!);
-const db = client.db();
-{{/if}}
-
-export const auth = betterAuth({
-  {{#if (eq database 'prisma')}}
-  database: prismaAdapter(client, { provider: "postgresql" }),
-  {{/if}}
-  {{#if (eq database 'drizzle')}}
-  database: drizzleAdapter(db, { provider: "pg" }),
-  {{/if}}
-  {{#if (eq database 'mongoose')}}
-  // Transactions require a replica set. Create user/session/account/verification
-  // collections before the first sign-up; see the database setup documentation.
-  database: mongodbAdapter(db, { client }),
-  {{/if}}
-  emailAndPassword: {
-    enabled: true,
-  },
-  plugins: [tanstackStartCookies()],
-  secret: process.env.BETTER_AUTH_SECRET,
-  baseURL: process.env.BETTER_AUTH_URL,
+import "dotenv/config";
+import { betterAuth } from "better-auth";
+import { tanstackStartCookies } from "better-auth/tanstack-start";
+{{#if (eq database 'prisma')}}
+import { prismaAdapter } from "better-auth/adapters/prisma";
+import client from "./prisma";
+{{/if}}
+{{#if (eq database 'drizzle')}}
+import { drizzleAdapter } from "better-auth/adapters/drizzle";
+import { db } from "./db";
+{{/if}}
+{{#if (eq database 'mongoose')}}
+import { mongodbAdapter } from "better-auth/adapters/mongodb";
+import { MongoClient } from "mongodb";
+
+const client = new MongoClient(process.env.MONGODB_URI!);
+const db = client.db();
+{{/if}}
+
+export const auth = betterAuth({
+  {{#if (eq database 'prisma')}}
+  database: prismaAdapter(client, { provider: "postgresql" }),
+  {{/if}}
+  {{#if (eq database 'drizzle')}}
+  database: drizzleAdapter(db, { provider: "pg" }),
+  {{/if}}
+  {{#if (eq database 'mongoose')}}
+  // Transactions require a replica set. Create user/session/account/verification
+  // collections before the first sign-up; see the database setup documentation.
+  database: mongodbAdapter(db, { client }),
+  {{/if}}
+  emailAndPassword: {
+    enabled: true,
+  },
+  plugins: [tanstackStartCookies()],
+  secret: process.env.BETTER_AUTH_SECRET,
+  baseURL: process.env.BETTER_AUTH_URL,
 });

package/templates/modules/auth/tanstack/src/routes/api/auth/$.ts

@@ -1,16 +1,16 @@
-import { createFileRoute } from "@tanstack/react-router";
-
-import { auth } from "~/lib/auth";
-
-export const Route = createFileRoute("/api/auth/$")({
-  server: {
-    handlers: {
-      GET: async ({ request }: { request: Request }) => {
-        return await auth.handler(request);
-      },
-      POST: async ({ request }: { request: Request }) => {
-        return await auth.handler(request);
-      },
-    },
-  },
+import { createFileRoute } from "@tanstack/react-router";
+
+import { auth } from "~/lib/auth";
+
+export const Route = createFileRoute("/api/auth/$")({
+  server: {
+    handlers: {
+      GET: async ({ request }: { request: Request }) => {
+        return await auth.handler(request);
+      },
+      POST: async ({ request }: { request: Request }) => {
+        return await auth.handler(request);
+      },
+    },
+  },
 });

package/templates/modules/auth/tanstack/src/routes/dashboard.tsx

@@ -1,111 +1,111 @@
-import { createFileRoute, redirect } from "@tanstack/react-router";
-import { Link } from "@tanstack/react-router";
-import { ArrowRight, ShieldCheck } from "lucide-react";
-
-import { SignOutButton } from "~/components/auth/sign-out-button";
-import { buttonVariants } from "~/components/ui/button";
-import {
-  Card,
-  CardContent,
-  CardDescription,
-  CardHeader,
-  CardTitle,
-} from "~/components/ui/card";
-import { getSession } from "~/lib/auth-functions";
-import { cn } from "~/lib/utils";
-
-export const Route = createFileRoute("/dashboard")({
-  beforeLoad: async () => {
-    const session = await getSession();
-
-    if (!session) {
-      throw redirect({ to: "/sign-in" });
-    }
-
-    return { user: session.user };
-  },
-  component: Dashboard,
-});
-
-function Dashboard() {
-  const user = Route.useRouteContext({ select: (ctx) => ctx.user });
-
-  return (
-    <main className="min-h-screen bg-[linear-gradient(180deg,_#f8fafc_0%,_#eef2ff_100%)] px-6 py-16 sm:px-10">
-      <div className="mx-auto max-w-5xl space-y-8">
-        <header className="flex flex-col gap-6 rounded-[2rem] border border-white/70 bg-white/85 p-8 shadow-xl shadow-slate-200/60 backdrop-blur md:flex-row md:items-end md:justify-between">
-          <div className="space-y-3">
-            <span className="inline-flex items-center gap-2 rounded-full bg-emerald-50 px-3 py-1 text-xs font-medium uppercase tracking-[0.24em] text-emerald-700">
-              <ShieldCheck className="size-4" />
-              Authenticated session
-            </span>
-            <div className="space-y-1">
-              <h1 className="text-3xl font-semibold tracking-tight text-slate-950">
-                Welcome {user.name}
-              </h1>
-              <p className="text-sm text-slate-600">{user.email}</p>
-            </div>
-          </div>
-          <SignOutButton />
-        </header>
-
-        <section className="grid gap-5 md:grid-cols-2">
-          <Card>
-            <CardHeader>
-              <CardTitle>Protected route example</CardTitle>
-              <CardDescription>
-                This page verifies the session on the server before rendering any
-                content.
-              </CardDescription>
-            </CardHeader>
-            <CardContent className="space-y-4 text-sm text-slate-600">
-              <p>
-                The route guard calls{" "}
-                <code className="font-mono text-slate-900">getSession()</code> in
-                <code className="font-mono text-slate-900"> beforeLoad</code>,
-                which reads the cookie headers server-side via{" "}
-                <code className="font-mono text-slate-900">
-                  auth.api.getSession
-                </code>{" "}
-                on every render and navigation.
-              </p>
-              <p>
-                That keeps route protection aligned with Better Auth&apos;s
-                TanStack Start guidance while staying easy to extend.
-              </p>
-            </CardContent>
-          </Card>
-
-          <Card>
-            <CardHeader>
-              <CardTitle>Suggested next steps</CardTitle>
-              <CardDescription>
-                Keep the generated auth flow, then customize the app around your
-                product.
-              </CardDescription>
-            </CardHeader>
-            <CardContent className="space-y-3 text-sm text-slate-600">
-              <p>
-                Replace the demo dashboard with your first authenticated page.
-              </p>
-              <p>Extend the schema with profile or onboarding fields.</p>
-              <p>
-                Add provider-based auth or email verification later if needed.
-              </p>
-              <Link
-                to="/"
-                className={cn(
-                  buttonVariants({ variant: "outline" }),
-                  "w-fit gap-2"
-                )}
-              >
-                Back to home
-                <ArrowRight className="size-4" />
-              </Link>
-            </CardContent>
-          </Card>
-        </section>
-      </div>
-    </main>
-  );
+import { createFileRoute, redirect } from "@tanstack/react-router";
+import { Link } from "@tanstack/react-router";
+import { ArrowRight, ShieldCheck } from "lucide-react";
+
+import { SignOutButton } from "~/components/auth/sign-out-button";
+import { buttonVariants } from "~/components/ui/button";
+import {
+  Card,
+  CardContent,
+  CardDescription,
+  CardHeader,
+  CardTitle,
+} from "~/components/ui/card";
+import { getSession } from "~/lib/auth-functions";
+import { cn } from "~/lib/utils";
+
+export const Route = createFileRoute("/dashboard")({
+  beforeLoad: async () => {
+    const session = await getSession();
+
+    if (!session) {
+      throw redirect({ to: "/sign-in" });
+    }
+
+    return { user: session.user };
+  },
+  component: Dashboard,
+});
+
+function Dashboard() {
+  const user = Route.useRouteContext({ select: (ctx) => ctx.user });
+
+  return (
+    <main className="min-h-screen bg-[linear-gradient(180deg,_#f8fafc_0%,_#eef2ff_100%)] px-6 py-16 sm:px-10">
+      <div className="mx-auto max-w-5xl space-y-8">
+        <header className="flex flex-col gap-6 rounded-[2rem] border border-white/70 bg-white/85 p-8 shadow-xl shadow-slate-200/60 backdrop-blur md:flex-row md:items-end md:justify-between">
+          <div className="space-y-3">
+            <span className="inline-flex items-center gap-2 rounded-full bg-emerald-50 px-3 py-1 text-xs font-medium uppercase tracking-[0.24em] text-emerald-700">
+              <ShieldCheck className="size-4" />
+              Authenticated session
+            </span>
+            <div className="space-y-1">
+              <h1 className="text-3xl font-semibold tracking-tight text-slate-950">
+                Welcome {user.name}
+              </h1>
+              <p className="text-sm text-slate-600">{user.email}</p>
+            </div>
+          </div>
+          <SignOutButton />
+        </header>
+
+        <section className="grid gap-5 md:grid-cols-2">
+          <Card>
+            <CardHeader>
+              <CardTitle>Protected route example</CardTitle>
+              <CardDescription>
+                This page verifies the session on the server before rendering any
+                content.
+              </CardDescription>
+            </CardHeader>
+            <CardContent className="space-y-4 text-sm text-slate-600">
+              <p>
+                The route guard calls{" "}
+                <code className="font-mono text-slate-900">getSession()</code> in
+                <code className="font-mono text-slate-900"> beforeLoad</code>,
+                which reads the cookie headers server-side via{" "}
+                <code className="font-mono text-slate-900">
+                  auth.api.getSession
+                </code>{" "}
+                on every render and navigation.
+              </p>
+              <p>
+                That keeps route protection aligned with Better Auth&apos;s
+                TanStack Start guidance while staying easy to extend.
+              </p>
+            </CardContent>
+          </Card>
+
+          <Card>
+            <CardHeader>
+              <CardTitle>Suggested next steps</CardTitle>
+              <CardDescription>
+                Keep the generated auth flow, then customize the app around your
+                product.
+              </CardDescription>
+            </CardHeader>
+            <CardContent className="space-y-3 text-sm text-slate-600">
+              <p>
+                Replace the demo dashboard with your first authenticated page.
+              </p>
+              <p>Extend the schema with profile or onboarding fields.</p>
+              <p>
+                Add provider-based auth or email verification later if needed.
+              </p>
+              <Link
+                to="/"
+                className={cn(
+                  buttonVariants({ variant: "outline" }),
+                  "w-fit gap-2"
+                )}
+              >
+                Back to home
+                <ArrowRight className="size-4" />
+              </Link>
+            </CardContent>
+          </Card>
+        </section>
+      </div>
+    </main>
+  );
 }

package/templates/modules/auth/tanstack/src/routes/sign-in.tsx

@@ -1,37 +1,37 @@
-import { createFileRoute, redirect } from "@tanstack/react-router";
-
-import { SignInForm } from "~/components/auth/sign-in-form";
-import { getSession } from "~/lib/auth-functions";
-
-export const Route = createFileRoute("/sign-in")({
-  beforeLoad: async () => {
-    const session = await getSession();
-
-    if (session) {
-      throw redirect({ to: "/dashboard" });
-    }
-  },
-  component: SignInPage,
-});
-
-function SignInPage() {
-  return (
-    <main className="min-h-screen bg-[radial-gradient(circle_at_top,_rgba(14,165,233,0.16),_transparent_30%),linear-gradient(180deg,_#f8fafc_0%,_#eef2ff_100%)] px-6 py-16 sm:px-10">
-      <div className="mx-auto flex min-h-[calc(100vh-8rem)] max-w-5xl items-center gap-12 lg:grid lg:grid-cols-[0.9fr_1.1fr]">
-        <section className="hidden space-y-5 lg:block">
-          <span className="inline-flex rounded-full border border-sky-200 bg-white/80 px-3 py-1 text-xs font-medium uppercase tracking-[0.24em] text-sky-700">
-            Better Auth
-          </span>
-          <h1 className="text-4xl font-semibold tracking-tight text-slate-950">
-            Welcome back.
-          </h1>
-          <p className="max-w-md text-base leading-7 text-slate-600">
-            This generated starter includes protected routes, session-aware page
-            guards, and reusable auth form primitives you can extend from here.
-          </p>
-        </section>
-        <SignInForm />
-      </div>
-    </main>
-  );
+import { createFileRoute, redirect } from "@tanstack/react-router";
+
+import { SignInForm } from "~/components/auth/sign-in-form";
+import { getSession } from "~/lib/auth-functions";
+
+export const Route = createFileRoute("/sign-in")({
+  beforeLoad: async () => {
+    const session = await getSession();
+
+    if (session) {
+      throw redirect({ to: "/dashboard" });
+    }
+  },
+  component: SignInPage,
+});
+
+function SignInPage() {
+  return (
+    <main className="min-h-screen bg-[radial-gradient(circle_at_top,_rgba(14,165,233,0.16),_transparent_30%),linear-gradient(180deg,_#f8fafc_0%,_#eef2ff_100%)] px-6 py-16 sm:px-10">
+      <div className="mx-auto flex min-h-[calc(100vh-8rem)] max-w-5xl items-center gap-12 lg:grid lg:grid-cols-[0.9fr_1.1fr]">
+        <section className="hidden space-y-5 lg:block">
+          <span className="inline-flex rounded-full border border-sky-200 bg-white/80 px-3 py-1 text-xs font-medium uppercase tracking-[0.24em] text-sky-700">
+            Better Auth
+          </span>
+          <h1 className="text-4xl font-semibold tracking-tight text-slate-950">
+            Welcome back.
+          </h1>
+          <p className="max-w-md text-base leading-7 text-slate-600">
+            This generated starter includes protected routes, session-aware page
+            guards, and reusable auth form primitives you can extend from here.
+          </p>
+        </section>
+        <SignInForm />
+      </div>
+    </main>
+  );
 }