create-authhero 0.15.0 → 0.17.0

package/README.md

@@ -18,9 +18,10 @@ The CLI will guide you through:
 
 1. **Project name** - Name of your project directory
 2. **Setup type** - Choose between Local, Cloudflare Simple, or Cloudflare Multi-Tenant
-3. **Admin credentials** - Email and password for the initial admin user
-4. **Install dependencies** - Optionally install packages with your preferred package manager
-5. **Start server** - Optionally run migrations, seed the database, and start the dev server
+3. **GitHub CI** - (Cloudflare only) Optionally include GitHub Actions workflows with semantic versioning
+4. **Admin credentials** - Email and password for the initial admin user
+5. **Install dependencies** - Optionally install packages with your preferred package manager
+6. **Start server** - Optionally run migrations, seed the database, and start the dev server
 
 ## Setup Types
 
@@ -68,27 +69,38 @@ npm run dev
 ```
 my-auth-project/
 ├── src/
-│   ├── index.ts     # Worker entry point
-│   ├── app.ts       # AuthHero configuration
-│   └── types.ts     # TypeScript types
-├── wrangler.toml    # Cloudflare configuration
-├── seed.sql         # Database seeding (generated)
+│   ├── index.ts          # Worker entry point
+│   ├── app.ts            # AuthHero configuration
+│   └── types.ts          # TypeScript types
+├── wrangler.toml         # Base Cloudflare config (safe for git)
+├── wrangler.local.toml   # Your private IDs (gitignored)
+├── .dev.vars             # Local secrets (gitignored)
+├── .dev.vars.example     # Template for .dev.vars
+├── seed.sql              # Database seeding (generated)
 ├── package.json
 └── tsconfig.json
 ```
 
-**Quick Start:**
+**Quick Start (Local Development):**
 
 ```sh
 cd my-auth-project
 npm install
-wrangler d1 create authhero-db
-# Update wrangler.toml with database_id
-npm run db:migrate
-npm run seed
+npm run migrate
+ADMIN_EMAIL=admin@example.com ADMIN_PASSWORD=yourpassword npm run seed
 npm run dev
 ```
 
+**Remote Development (Your Cloudflare Account):**
+
+```sh
+# Create a D1 database
+npx wrangler d1 create authhero-db
+# Copy the database_id to wrangler.local.toml
+npm run db:migrate:remote
+npm run dev:remote
+```
+
 ### 3. Cloudflare Multi-Tenant (Production)
 
 **Best for:** SaaS platforms, agencies, enterprise deployments
@@ -103,13 +115,15 @@ npm run dev
 ```
 my-auth-project/
 ├── src/
-│   ├── index.ts           # Worker entry point
-│   ├── app.ts             # AuthHero configuration
-│   ├── types.ts           # TypeScript types
+│   ├── index.ts            # Worker entry point
+│   ├── app.ts              # AuthHero configuration
+│   ├── types.ts            # TypeScript types
 │   └── database-factory.ts # Multi-tenant DB factory
-├── wrangler.toml          # Cloudflare configuration
-├── .dev.vars.example      # Environment variables template
-├── seed.sql               # Database seeding (generated)
+├── wrangler.toml           # Base Cloudflare config (safe for git)
+├── wrangler.local.toml     # Your private IDs (gitignored)
+├── .dev.vars               # Local secrets (gitignored)
+├── .dev.vars.example       # Environment variables template
+├── seed.sql                # Database seeding (generated)
 ├── package.json
 └── tsconfig.json
 ```
@@ -138,20 +152,51 @@ my-auth-project/
    └─────────────┘         └─────────────┘         └─────────────┘
 ```
 
-**Quick Start:**
+**Quick Start (Local Development):**
 
 ```sh
 cd my-auth-project
 npm install
-wrangler d1 create authhero-main-db
-# Update wrangler.toml with database_id
-cp .dev.vars.example .dev.vars
-# Add your Cloudflare credentials to .dev.vars
-npm run db:migrate
-npm run seed
+npm run migrate
+ADMIN_EMAIL=admin@example.com ADMIN_PASSWORD=yourpassword npm run seed
 npm run dev
 ```
 
+**Remote Development (Your Cloudflare Account):**
+
+```sh
+# Create a D1 database
+npx wrangler d1 create authhero-db
+# Copy the database_id to wrangler.local.toml
+# Optionally add CLOUDFLARE_ACCOUNT_ID to .dev.vars
+npm run db:migrate:remote
+npm run dev:remote
+```
+
+## Security & Privacy
+
+Cloudflare projects are designed to be **open-source friendly**:
+
+| File                  | Purpose                            | In Git? |
+| --------------------- | ---------------------------------- | ------- |
+| `wrangler.toml`       | Base config (safe for public repo) | ✅ Yes  |
+| `wrangler.local.toml` | Your private IDs (database_id)     | ❌ No   |
+| `.dev.vars`           | Local secrets (API tokens, etc.)   | ❌ No   |
+| `.dev.vars.example`   | Template for .dev.vars             | ✅ Yes  |
+
+The CLI automatically creates `wrangler.local.toml` and `.dev.vars` from the templates when you create a project. Simply update them with your Cloudflare IDs.
+
+### GitHub Actions / CI Deployment
+
+For automated deployments, set these GitHub Secrets:
+
+| Secret                  | Description                                              |
+| ----------------------- | -------------------------------------------------------- |
+| `CLOUDFLARE_API_TOKEN`  | API token with Workers permissions                       |
+| `CLOUDFLARE_ACCOUNT_ID` | Your Cloudflare account ID (optional, for some features) |
+
+The wrangler GitHub Action will automatically use these secrets. No need to store IDs in your repo!
+
 ## Example
 
 ```sh
@@ -175,6 +220,40 @@ You'll be prompted to:
 | Complexity   | Low          | Medium            | High                    |
 | Best For     | Development  | Simple Production | Enterprise/SaaS         |
 
+## GitHub CI with Semantic Versioning
+
+For Cloudflare setups, you can optionally include GitHub Actions workflows that provide:
+
+- **Unit Tests**: Runs on all pushes to any branch
+- **Deploy to Dev**: Automatically deploys to dev environment on push to `main`, with semantic-release for version management
+- **Deploy to Production**: Deploys to production when a GitHub release is published
+
+### CI/CD Flow
+
+```
+All PRs/Pushes → Unit Tests (type-check + tests)
+Push to main  → Semantic Release + Deploy to Dev
+GitHub Release → Deploy to Production
+```
+
+### Required GitHub Secrets
+
+| Secret                      | Description                              |
+| --------------------------- | ---------------------------------------- |
+| `CLOUDFLARE_API_TOKEN`      | API token for dev deployments            |
+| `CLOUDFLARE_ACCOUNT_ID`     | Account ID (optional, for some features) |
+| `PROD_CLOUDFLARE_API_TOKEN` | API token for production deployments     |
+
+> **Note:** You do NOT need to store `database_id` or `zone_id` in your repo or secrets. Wrangler resolves these automatically when deploying with the correct API token.
+
+### Commit Message Conventions
+
+Use conventional commits for automatic versioning:
+
+- `fix:` → Patch release (1.0.0 → 1.0.1)
+- `feat:` → Minor release (1.0.0 → 1.1.0)
+- `BREAKING CHANGE:` → Major release (1.0.0 → 2.0.0)
+
 ## Documentation
 
 For more information, visit [https://authhero.net/docs](https://authhero.net/docs)

package/dist/cloudflare-multitenant/README.md

@@ -28,15 +28,34 @@ A production-grade multi-tenant AuthHero authentication server using Cloudflare
                           └─────────────┘
 ```
 
+## Security & Privacy
+
+This project is designed to be **open-source friendly**. Sensitive Cloudflare IDs are kept out of version control:
+
+| File                  | Purpose                            | In Git? |
+| --------------------- | ---------------------------------- | ------- |
+| `wrangler.toml`       | Base config (safe for public repo) | ✅ Yes  |
+| `wrangler.local.toml` | Your private IDs (database_id)     | ❌ No   |
+| `.dev.vars`           | Local secrets (API tokens, etc.)   | ❌ No   |
+| `.dev.vars.example`   | Template for .dev.vars             | ✅ Yes  |
+
+**For GitHub Actions / CI:**
+
+- Set `CLOUDFLARE_API_TOKEN` as a GitHub Secret
+- Set `CLOUDFLARE_ACCOUNT_ID` as a GitHub Secret (if needed)
+- The wrangler action will use these automatically
+
 ## Getting Started
 
+### Local Development (Quick Start)
+
 1. Install dependencies:
 
    ```bash
    npm install
    ```
 
-2. Run local database migrations:
+2. Run database migrations (uses local SQLite-backed D1):
 
    ```bash
    npm run migrate
@@ -55,29 +74,46 @@ A production-grade multi-tenant AuthHero authentication server using Cloudflare
 
 The server will be available at `https://localhost:3000`.
 
-## Production Deployment
+### Remote Development (Your Cloudflare Account)
 
 1. Create a D1 database:
 
    ```bash
-   wrangler d1 create authhero-db
+   npx wrangler d1 create authhero-db
    ```
 
-2. Update `wrangler.toml` with your database ID.
+2. Copy the `database_id` from the output and update `wrangler.local.toml`:
+
+   ```toml
+   [[d1_databases]]
+   binding = "AUTH_DB"
+   database_name = "authhero-db"
+   database_id = "paste-your-database-id-here"
+   migrations_dir = "node_modules/@authhero/drizzle/drizzle"
+   ```
 
-3. Run migrations on production:
+3. Run remote migrations:
 
    ```bash
    npm run db:migrate:remote
    ```
 
-4. Seed the production database:
+4. Seed the remote database:
 
    ```bash
    ADMIN_EMAIL=admin@example.com ADMIN_PASSWORD=yourpassword npm run seed:remote
    ```
 
-5. Deploy:
+5. Start with remote D1:
+   ```bash
+   npm run dev:remote
+   ```
+
+## Production Deployment
+
+1. Ensure `wrangler.local.toml` has your production `database_id`.
+
+2. Deploy:
    ```bash
    npm run deploy
    ```
@@ -154,6 +190,83 @@ curl https://your-worker.workers.dev/management/tenants \
 
 For more information, visit [https://authhero.net/docs](https://authhero.net/docs).
 
+## CI/CD with GitHub Actions
+
+If you selected GitHub CI during setup, your project includes automated workflows for continuous integration and deployment.
+
+### Workflow Overview
+
+```
+┌─────────────────────────────────────────────────────────────────────────┐
+│                           GitHub Actions                                 │
+├─────────────────────────────────────────────────────────────────────────┤
+│                                                                          │
+│  ┌──────────────┐     ┌──────────────────┐     ┌──────────────────┐    │
+│  │  Any Push    │     │   Push to main   │     │ GitHub Release   │    │
+│  │              │     │                  │     │   (released)     │    │
+│  └──────┬───────┘     └────────┬─────────┘     └────────┬─────────┘    │
+│         │                      │                        │               │
+│         ▼                      ▼                        ▼               │
+│  ┌──────────────┐     ┌──────────────────┐     ┌──────────────────┐    │
+│  │  Unit Tests  │     │ Semantic Release │     │    Deploy to     │    │
+│  │  Type Check  │     │  + Deploy Dev    │     │   Production     │    │
+│  └──────────────┘     └──────────────────┘     └──────────────────┘    │
+│                                                                          │
+└─────────────────────────────────────────────────────────────────────────┘
+```
+
+### Workflows
+
+1. **Unit Tests** (`.github/workflows/unit-tests.yml`)
+   - **Trigger**: All pushes to any branch
+   - **Actions**: Runs type checking and tests
+
+2. **Deploy to Dev** (`.github/workflows/deploy-dev.yml`)
+   - **Trigger**: Push to `main` branch
+   - **Actions**:
+     - Runs semantic-release to create version tags
+     - Deploys to Cloudflare Workers (dev environment)
+
+3. **Deploy to Production** (`.github/workflows/release.yml`)
+   - **Trigger**: GitHub Release (when "released")
+   - **Actions**: Deploys to Cloudflare Workers (production environment)
+
+### Required Secrets
+
+Configure these secrets in your GitHub repository settings:
+
+| Secret                      | Description                                     |
+| --------------------------- | ----------------------------------------------- |
+| `CLOUDFLARE_API_TOKEN`      | Cloudflare API token for dev deployments        |
+| `PROD_CLOUDFLARE_API_TOKEN` | Cloudflare API token for production deployments |
+
+### Semantic Versioning
+
+Commits to `main` are analyzed to determine version bumps:
+
+- `fix:` - Patch release (1.0.0 → 1.0.1)
+- `feat:` - Minor release (1.0.0 → 1.1.0)
+- `BREAKING CHANGE:` - Major release (1.0.0 → 2.0.0)
+
+### Production Deployment
+
+To deploy to production:
+
+1. Go to GitHub → Releases → "Draft a new release"
+2. Create a new tag (e.g., `v1.0.0`)
+3. Click "Publish release"
+4. The `release.yml` workflow will deploy to production
+
+### Wrangler Configuration
+
+For production deployments, add an environment to `wrangler.toml`:
+
+```toml
+[env.production]
+name = "your-worker-production"
+# Add production-specific settings here
+```
+
 ## Optional Features
 
 ### Analytics Engine (Centralized Logging)

package/dist/cloudflare-multitenant/src/app.ts

@@ -7,19 +7,21 @@ import {
   DataAdapters,
 } from "@authhero/multi-tenancy";
 
-// Main tenant ID - the tenant that manages all other tenants
-const MAIN_TENANT_ID = "main";
+// Control plane tenant ID - the tenant that manages all other tenants
+const CONTROL_PLANE_TENANT_ID = "control_plane";
 
 export default function createApp(
-  config: Omit<MultiTenantAuthHeroConfig, "mainTenantId"> & {
+  config: Omit<MultiTenantAuthHeroConfig, "controlPlaneTenantId"> & {
     dataAdapter: DataAdapters;
   },
 ) {
   const { app } = init({
     ...config,
-    mainTenantId: MAIN_TENANT_ID,
-    // Sync resource servers from main tenant to all child tenants
+    controlPlaneTenantId: CONTROL_PLANE_TENANT_ID,
+    // Sync resource servers from control plane tenant to all child tenants
     syncResourceServers: true,
+    // Sync roles from control plane tenant to all child tenants
+    syncRoles: true,
   });
 
   app
@@ -36,7 +38,7 @@ export default function createApp(
         version: "1.0.0",
         status: "running",
         docs: "/docs",
-        mainTenant: MAIN_TENANT_ID,
+        controlPlaneTenant: CONTROL_PLANE_TENANT_ID,
       });
     })
     .get("/docs", swaggerUI({ url: "/api/v2/spec" }));

package/dist/cloudflare-multitenant/wrangler.toml

@@ -1,23 +1,46 @@
+# ════════════════════════════════════════════════════════════════════════════
+# AuthHero Multi-Tenant Cloudflare Worker Configuration
+# ════════════════════════════════════════════════════════════════════════════
+# This file is safe for version control. Sensitive IDs should go in:
+# - wrangler.local.toml (local development - gitignored)
+# - GitHub Secrets / Cloudflare Dashboard (production)
+#
+# For local development with your own Cloudflare resources:
+#   cp wrangler.toml wrangler.local.toml
+#   # Add your database_id to wrangler.local.toml
+#   npm run dev  # Uses wrangler.local.toml automatically
+# ════════════════════════════════════════════════════════════════════════════
+
 name = "authhero-multitenant"
 main = "src/index.ts"
 compatibility_date = "2024-11-20"
 
+# ════════════════════════════════════════════════════════════════════════════
 # D1 Database binding
-# Run: wrangler d1 create authhero-db
-# Then uncomment and update the database_id below:
-# [[d1_databases]]
-# binding = "AUTH_DB"
-# database_name = "authhero-db"
-# database_id = "<YOUR_DATABASE_ID>"
-# migrations_dir = "node_modules/@authhero/drizzle/drizzle"
-
-# For local development, you can use a local D1 database:
+# ════════════════════════════════════════════════════════════════════════════
+# This configuration uses a local D1 database by default.
+# For remote development/production, copy to wrangler.local.toml and update.
+#
+# Setup:
+# 1. Create database: npx wrangler d1 create authhero-db
+# 2. Copy to local config: cp wrangler.toml wrangler.local.toml
+# 3. Update database_id in wrangler.local.toml with the ID from step 1
+#
 [[d1_databases]]
 binding = "AUTH_DB"
 database_name = "authhero-db"
-database_id = "local"
+database_id = "local"  # Use "local" for local dev, or your actual ID in wrangler.local.toml
 migrations_dir = "node_modules/@authhero/drizzle/drizzle"
 
+# ════════════════════════════════════════════════════════════════════════════
+# OPTIONAL: Custom Domain
+# ════════════════════════════════════════════════════════════════════════════
+# To route your worker to a custom domain, use zone_name (not zone_id):
+#
+# [[routes]]
+# pattern = "auth.yourdomain.com/*"
+# zone_name = "yourdomain.com"
+
 # ════════════════════════════════════════════════════════════════════════════
 # OPTIONAL: Analytics Engine for centralized logging
 # ════════════════════════════════════════════════════════════════════════════

package/dist/cloudflare-simple/README.md

@@ -7,90 +7,117 @@ A single-tenant AuthHero authentication server using Cloudflare Workers and D1.
 - [Cloudflare Account](https://dash.cloudflare.com/sign-up)
 - [Wrangler CLI](https://developers.cloudflare.com/workers/wrangler/install-and-update/)
 
+## Security & Privacy
+
+This project is designed to be **open-source friendly**. Sensitive Cloudflare IDs are kept out of version control:
+
+| File                  | Purpose                            | In Git? |
+| --------------------- | ---------------------------------- | ------- |
+| `wrangler.toml`       | Base config (safe for public repo) | ✅ Yes  |
+| `wrangler.local.toml` | Your private IDs (database_id)     | ❌ No   |
+| `.dev.vars`           | Local secrets (API tokens, etc.)   | ❌ No   |
+| `.dev.vars.example`   | Template for .dev.vars             | ✅ Yes  |
+
+**For GitHub Actions / CI:**
+
+- Set `CLOUDFLARE_API_TOKEN` as a GitHub Secret
+- Set `CLOUDFLARE_ACCOUNT_ID` as a GitHub Secret (if needed)
+- The wrangler action will use these automatically
+
 ## Getting Started
 
+### Local Development (Quick Start)
+
 1. Install dependencies:
 
    ```bash
    npm install
    ```
 
-2. Create a D1 database (if not using local mode):
+2. Run database migrations (uses local SQLite-backed D1):
 
    ```bash
-   wrangler d1 create authhero-db
+   npm run migrate
    ```
 
-   Update `wrangler.toml` with your database ID from the output above.
-
-3. Run database migrations:
-
-   **For local development:**
+3. Seed the database with an admin user:
 
    ```bash
-   npm run migrate
+   ADMIN_EMAIL=admin@example.com ADMIN_PASSWORD=yourpassword npm run seed
    ```
 
-   **For production:**
+4. Start the development server:
 
    ```bash
-   npm run db:migrate:remote
+   npm run dev
    ```
 
-4. Seed the database with an admin user:
+The server will be available at `https://localhost:3000`.
+
+### Remote Development (Your Cloudflare Account)
 
-   **For local development:**
+1. Create a D1 database:
 
    ```bash
-   ADMIN_EMAIL=admin@example.com ADMIN_PASSWORD=yourpassword npm run seed:local
+   npx wrangler d1 create authhero-db
    ```
 
-   **For production:**
+2. Copy the `database_id` from the output and update `wrangler.local.toml`:
 
-   ```bash
-   ADMIN_EMAIL=admin@example.com ADMIN_PASSWORD=yourpassword npm run seed:remote
+   ```toml
+   [[d1_databases]]
+   binding = "AUTH_DB"
+   database_name = "authhero-db"
+   database_id = "paste-your-database-id-here"
+   migrations_dir = "node_modules/@authhero/drizzle/drizzle"
    ```
 
-5. Start the development server:
-
-   **For local mode (local D1 database):**
+3. Run remote migrations:
 
    ```bash
-   npm run dev:local
+   npm run db:migrate:remote
    ```
 
-   **For remote mode (production D1 database):**
+4. Seed the remote database:
 
+   ```bash
+   ADMIN_EMAIL=admin@example.com ADMIN_PASSWORD=yourpassword npm run seed:remote
+   ```
+
+5. Start with remote D1:
    ```bash
    npm run dev:remote
    ```
 
 ## Available Scripts
 
-- `npm run dev:local` - Start development server with local D1 database
-- `npm run dev:remote` - Start development server with remote D1 database
+- `npm run dev` - Start development server with local D1 database
+- `npm run dev:remote` - Start with remote D1 database
 - `npm run deploy` - Deploy to Cloudflare Workers
 - `npm run migrate` - Run migrations on local database
 - `npm run db:migrate:local` - Run migrations on local database (alias)
 - `npm run db:migrate:remote` - Run migrations on remote database
-- `npm run seed:local` - Seed local database with admin user
+- `npm run seed` - Seed local database with admin user
 - `npm run seed:remote` - Seed remote database with admin user
+- `npm run setup` - Create wrangler.local.toml and .dev.vars from templates
 
 ## Deployment
 
-1. Deploy to Cloudflare:
+1. Ensure `wrangler.local.toml` has your production `database_id`.
+
+2. Deploy to Cloudflare:
 
    ```bash
    npm run deploy
    ```
 
-2. Run production migrations:
+3. Run production migrations:
 
    ```bash
    npm run db:migrate:remote
    ```
 
-3. Seed the production database:
+4. Seed the production database:
    ```bash
    ADMIN_EMAIL=admin@example.com ADMIN_PASSWORD=yourpassword npm run seed:remote
    ```
@@ -136,6 +163,83 @@ routes = [
 
 For more information, visit [https://authhero.net/docs](https://authhero.net/docs).
 
+## CI/CD with GitHub Actions
+
+If you selected GitHub CI during setup, your project includes automated workflows for continuous integration and deployment.
+
+### Workflow Overview
+
+```
+┌─────────────────────────────────────────────────────────────────────────┐
+│                           GitHub Actions                                 │
+├─────────────────────────────────────────────────────────────────────────┤
+│                                                                          │
+│  ┌──────────────┐     ┌──────────────────┐     ┌──────────────────┐    │
+│  │  Any Push    │     │   Push to main   │     │ GitHub Release   │    │
+│  │              │     │                  │     │   (released)     │    │
+│  └──────┬───────┘     └────────┬─────────┘     └────────┬─────────┘    │
+│         │                      │                        │               │
+│         ▼                      ▼                        ▼               │
+│  ┌──────────────┐     ┌──────────────────┐     ┌──────────────────┐    │
+│  │  Unit Tests  │     │ Semantic Release │     │    Deploy to     │    │
+│  │  Type Check  │     │  + Deploy Dev    │     │   Production     │    │
+│  └──────────────┘     └──────────────────┘     └──────────────────┘    │
+│                                                                          │
+└─────────────────────────────────────────────────────────────────────────┘
+```
+
+### Workflows
+
+1. **Unit Tests** (`.github/workflows/unit-tests.yml`)
+   - **Trigger**: All pushes to any branch
+   - **Actions**: Runs type checking and tests
+
+2. **Deploy to Dev** (`.github/workflows/deploy-dev.yml`)
+   - **Trigger**: Push to `main` branch
+   - **Actions**:
+     - Runs semantic-release to create version tags
+     - Deploys to Cloudflare Workers (dev environment)
+
+3. **Deploy to Production** (`.github/workflows/release.yml`)
+   - **Trigger**: GitHub Release (when "released")
+   - **Actions**: Deploys to Cloudflare Workers (production environment)
+
+### Required Secrets
+
+Configure these secrets in your GitHub repository settings:
+
+| Secret                      | Description                                     |
+| --------------------------- | ----------------------------------------------- |
+| `CLOUDFLARE_API_TOKEN`      | Cloudflare API token for dev deployments        |
+| `PROD_CLOUDFLARE_API_TOKEN` | Cloudflare API token for production deployments |
+
+### Semantic Versioning
+
+Commits to `main` are analyzed to determine version bumps:
+
+- `fix:` - Patch release (1.0.0 → 1.0.1)
+- `feat:` - Minor release (1.0.0 → 1.1.0)
+- `BREAKING CHANGE:` - Major release (1.0.0 → 2.0.0)
+
+### Production Deployment
+
+To deploy to production:
+
+1. Go to GitHub → Releases → "Draft a new release"
+2. Create a new tag (e.g., `v1.0.0`)
+3. Click "Publish release"
+4. The `release.yml` workflow will deploy to production
+
+### Wrangler Configuration
+
+For production deployments, add an environment to `wrangler.toml`:
+
+```toml
+[env.production]
+name = "your-worker-production"
+# Add production-specific settings here
+```
+
 ## Optional Features
 
 ### Analytics Engine (Centralized Logging)

package/dist/cloudflare-simple/wrangler.toml

@@ -1,23 +1,46 @@
+# ════════════════════════════════════════════════════════════════════════════
+# AuthHero Cloudflare Worker Configuration
+# ════════════════════════════════════════════════════════════════════════════
+# This file is safe for version control. Sensitive IDs should go in:
+# - wrangler.local.toml (local development - gitignored)
+# - GitHub Secrets / Cloudflare Dashboard (production)
+#
+# For local development with your own Cloudflare resources:
+#   cp wrangler.toml wrangler.local.toml
+#   # Add your database_id to wrangler.local.toml
+#   npm run dev  # Uses wrangler.local.toml automatically
+# ════════════════════════════════════════════════════════════════════════════
+
 name = "authhero-server"
 main = "src/index.ts"
 compatibility_date = "2024-11-20"
 
+# ════════════════════════════════════════════════════════════════════════════
 # D1 Database binding
-# Run: wrangler d1 create authhero-db
-# Then uncomment and update the database_id below:
-# [[d1_databases]]
-# binding = "AUTH_DB"
-# database_name = "authhero-db"
-# database_id = "<YOUR_DATABASE_ID>"
-# migrations_dir = "node_modules/@authhero/drizzle/drizzle"
-
-# For local development, you can use a local D1 database:
+# ════════════════════════════════════════════════════════════════════════════
+# This configuration uses a local D1 database by default.
+# For remote development/production, copy to wrangler.local.toml and update.
+#
+# Setup:
+# 1. Create database: npx wrangler d1 create authhero-db
+# 2. Copy to local config: cp wrangler.toml wrangler.local.toml
+# 3. Update database_id in wrangler.local.toml with the ID from step 1
+#
 [[d1_databases]]
 binding = "AUTH_DB"
 database_name = "authhero-db"
-database_id = "local"
+database_id = "local"  # Use "local" for local dev, or your actual ID in wrangler.local.toml
 migrations_dir = "node_modules/@authhero/drizzle/drizzle"
 
+# ════════════════════════════════════════════════════════════════════════════
+# OPTIONAL: Custom Domain
+# ════════════════════════════════════════════════════════════════════════════
+# To route your worker to a custom domain, use zone_name (not zone_id):
+#
+# [[routes]]
+# pattern = "auth.yourdomain.com/*"
+# zone_name = "yourdomain.com"
+
 # ════════════════════════════════════════════════════════════════════════════
 # OPTIONAL: Analytics Engine for centralized logging
 # ════════════════════════════════════════════════════════════════════════════

package/dist/create-authhero.js

@@ -1,16 +1,16 @@
 #!/usr/bin/env node
-import { Command as x } from "commander";
-import c from "inquirer";
-import i from "fs";
-import f from "path";
-import { spawn as D } from "child_process";
-const b = new x(), n = {
+import { Command as j } from "commander";
+import m from "inquirer";
+import o from "fs";
+import i from "path";
+import { spawn as b } from "child_process";
+const D = new j(), c = {
   local: {
     name: "Local (SQLite)",
     description: "Local development setup with SQLite database - great for getting started",
     templateDir: "local",
-    packageJson: (r) => ({
-      name: r,
+    packageJson: (s) => ({
+      name: s,
       version: "1.0.0",
       type: "module",
       scripts: {
@@ -42,21 +42,21 @@ const b = new x(), n = {
     name: "Cloudflare Simple (Single Tenant)",
     description: "Single-tenant Cloudflare Workers setup with D1 database",
     templateDir: "cloudflare-simple",
-    packageJson: (r) => ({
-      name: r,
+    packageJson: (s) => ({
+      name: s,
       version: "1.0.0",
       type: "module",
       scripts: {
-        "dev:local": "wrangler dev --port 3000 --local-protocol https",
-        "dev:remote": "wrangler dev --port 3000 --local-protocol https --remote",
         dev: "wrangler dev --port 3000 --local-protocol https",
-        deploy: "wrangler deploy",
+        "dev:remote": "wrangler dev --port 3000 --local-protocol https --remote --config wrangler.local.toml",
+        deploy: "wrangler deploy --config wrangler.local.toml",
         "db:migrate:local": "wrangler d1 migrations apply AUTH_DB --local",
-        "db:migrate:remote": "wrangler d1 migrations apply AUTH_DB --remote",
+        "db:migrate:remote": "wrangler d1 migrations apply AUTH_DB --remote --config wrangler.local.toml",
         migrate: "wrangler d1 migrations apply AUTH_DB --local",
         "seed:local": "node seed-helper.js",
         "seed:remote": "node seed-helper.js '' '' remote",
-        seed: "node seed-helper.js"
+        seed: "node seed-helper.js",
+        setup: "cp wrangler.toml wrangler.local.toml && cp .dev.vars.example .dev.vars && echo '✅ Created wrangler.local.toml and .dev.vars - update with your IDs'"
       },
       dependencies: {
         "@authhero/drizzle": "latest",
@@ -82,21 +82,21 @@ const b = new x(), n = {
     name: "Cloudflare Multi-Tenant (Production)",
     description: "Production-grade multi-tenant setup with D1 database and tenant management",
     templateDir: "cloudflare-multitenant",
-    packageJson: (r) => ({
-      name: r,
+    packageJson: (s) => ({
+      name: s,
       version: "1.0.0",
       type: "module",
       scripts: {
-        "dev:local": "wrangler dev --port 3000 --local-protocol https",
-        "dev:remote": "wrangler dev --port 3000 --local-protocol https --remote",
         dev: "wrangler dev --port 3000 --local-protocol https",
-        deploy: "wrangler deploy",
+        "dev:remote": "wrangler dev --port 3000 --local-protocol https --remote --config wrangler.local.toml",
+        deploy: "wrangler deploy --config wrangler.local.toml",
         "db:migrate:local": "wrangler d1 migrations apply AUTH_DB --local",
-        "db:migrate:remote": "wrangler d1 migrations apply AUTH_DB --remote",
+        "db:migrate:remote": "wrangler d1 migrations apply AUTH_DB --remote --config wrangler.local.toml",
         migrate: "wrangler d1 migrations apply AUTH_DB --local",
         "seed:local": "node seed-helper.js",
         "seed:remote": "node seed-helper.js '' '' remote",
-        seed: "node seed-helper.js"
+        seed: "node seed-helper.js",
+        setup: "cp wrangler.toml wrangler.local.toml && cp .dev.vars.example .dev.vars && echo '✅ Created wrangler.local.toml and .dev.vars - update with your IDs'"
       },
       dependencies: {
         "@authhero/drizzle": "latest",
@@ -119,13 +119,13 @@ const b = new x(), n = {
     seedFile: "seed.ts"
   }
 };
-function A(r, a) {
-  i.readdirSync(r).forEach((o) => {
-    const t = f.join(r, o), e = f.join(a, o);
-    i.lstatSync(t).isDirectory() ? (i.mkdirSync(e, { recursive: !0 }), A(t, e)) : i.copyFileSync(t, e);
+function A(s, e) {
+  o.readdirSync(s).forEach((n) => {
+    const a = i.join(s, n), t = i.join(e, n);
+    o.lstatSync(a).isDirectory() ? (o.mkdirSync(t, { recursive: !0 }), A(a, t)) : o.copyFileSync(a, t);
   });
 }
-function $() {
+function I() {
   return `import { SqliteDialect, Kysely } from "kysely";
 import Database from "better-sqlite3";
 import createAdapters from "@authhero/kysely-adapter";
@@ -159,106 +159,236 @@ async function main() {
 main().catch(console.error);
 `;
 }
-function v(r, a) {
-  return new Promise((s, o) => {
-    const t = D(r, [], {
-      cwd: a,
+function x(s) {
+  const e = i.join(s, ".github", "workflows");
+  o.mkdirSync(e, { recursive: !0 });
+  const r = `name: Unit tests
+
+on: push
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: "22"
+          cache: "npm"
+
+      - name: Install dependencies
+        run: npm ci
+
+      - run: npm run type-check
+      - run: npm test
+`, n = `name: Deploy to Dev
+
+on:
+  push:
+    branches:
+      - main
+
+jobs:
+  release:
+    name: Release and Deploy
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: "22"
+          cache: "npm"
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Release
+        env:
+          GITHUB_TOKEN: \${{ secrets.GITHUB_TOKEN }}
+        run: npx semantic-release
+
+      - name: Deploy to Cloudflare (Dev)
+        uses: cloudflare/wrangler-action@v3
+        with:
+          apiToken: \${{ secrets.CLOUDFLARE_API_TOKEN }}
+          command: deploy
+`, a = `name: Deploy to Production
+
+on:
+  release:
+    types: ["released"]
+
+jobs:
+  deploy:
+    name: Deploy to Production
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: "22"
+          cache: "npm"
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Deploy to Cloudflare (Production)
+        uses: cloudflare/wrangler-action@v3
+        with:
+          apiToken: \${{ secrets.PROD_CLOUDFLARE_API_TOKEN }}
+          command: deploy --env production
+`;
+  o.writeFileSync(i.join(e, "unit-tests.yml"), r), o.writeFileSync(i.join(e, "deploy-dev.yml"), n), o.writeFileSync(i.join(e, "release.yml"), a), console.log("\\n📦 GitHub CI workflows created!");
+}
+function C(s) {
+  const e = {
+    branches: ["main"],
+    plugins: [
+      "@semantic-release/commit-analyzer",
+      "@semantic-release/release-notes-generator",
+      "@semantic-release/github"
+    ]
+  };
+  o.writeFileSync(
+    i.join(s, ".releaserc.json"),
+    JSON.stringify(e, null, 2)
+  );
+  const r = i.join(s, "package.json"), n = JSON.parse(o.readFileSync(r, "utf-8"));
+  n.devDependencies = {
+    ...n.devDependencies,
+    "semantic-release": "^24.0.0"
+  }, n.scripts = {
+    ...n.scripts,
+    test: 'echo "No tests yet"',
+    "type-check": "tsc --noEmit"
+  }, o.writeFileSync(r, JSON.stringify(n, null, 2));
+}
+function v(s, e) {
+  return new Promise((r, n) => {
+    const a = b(s, [], {
+      cwd: e,
       shell: !0,
       stdio: "inherit"
     });
-    t.on("close", (e) => {
-      e === 0 ? s() : o(new Error(`Command failed with exit code ${e}`));
-    }), t.on("error", o);
+    a.on("close", (t) => {
+      t === 0 ? r() : n(new Error(`Command failed with exit code ${t}`));
+    }), a.on("error", n);
   });
 }
-function S(r, a, s) {
-  return new Promise((o, t) => {
-    const e = D(r, [], {
-      cwd: a,
+function S(s, e, r) {
+  return new Promise((n, a) => {
+    const t = b(s, [], {
+      cwd: e,
       shell: !0,
       stdio: "inherit",
-      env: { ...process.env, ...s }
+      env: { ...process.env, ...r }
     });
-    e.on("close", (g) => {
-      g === 0 ? o() : t(new Error(`Command failed with exit code ${g}`));
-    }), e.on("error", t);
+    t.on("close", (f) => {
+      f === 0 ? n() : a(new Error(`Command failed with exit code ${f}`));
+    }), t.on("error", a);
   });
 }
-b.version("1.0.0").description("Create a new AuthHero project").argument("[project-name]", "name of the project").option(
+D.version("1.0.0").description("Create a new AuthHero project").argument("[project-name]", "name of the project").option(
   "-t, --template <type>",
   "template type: local, cloudflare-simple, or cloudflare-multitenant"
 ).option("-e, --email <email>", "admin email address").option("-p, --password <password>", "admin password (min 8 characters)").option(
   "--package-manager <pm>",
   "package manager to use: npm, yarn, pnpm, or bun"
-).option("--skip-install", "skip installing dependencies").option("--skip-migrate", "skip running database migrations").option("--skip-seed", "skip seeding the database").option("--skip-start", "skip starting the development server").option("--remote", "use remote mode for cloudflare-simple (production D1)").option("-y, --yes", "skip all prompts and use defaults/provided options").action(async (r, a) => {
-  const s = a.yes === !0;
+).option("--skip-install", "skip installing dependencies").option("--skip-migrate", "skip running database migrations").option("--skip-seed", "skip seeding the database").option("--skip-start", "skip starting the development server").option("--github-ci", "include GitHub CI workflows with semantic versioning").option("-y, --yes", "skip all prompts and use defaults/provided options").action(async (s, e) => {
+  const r = e.yes === !0;
   console.log(`
 🔐 Welcome to AuthHero!
 `);
-  let o = r;
-  o || (s ? (o = "auth-server", console.log(`Using default project name: ${o}`)) : o = (await c.prompt([
+  let n = s;
+  n || (r ? (n = "auth-server", console.log(`Using default project name: ${n}`)) : n = (await m.prompt([
     {
       type: "input",
       name: "projectName",
       message: "Project name:",
       default: "auth-server",
-      validate: (p) => p !== "" || "Project name cannot be empty"
+      validate: (d) => d !== "" || "Project name cannot be empty"
     }
   ])).projectName);
-  const t = f.join(process.cwd(), o);
-  i.existsSync(t) && (console.error(`❌ Project "${o}" already exists.`), process.exit(1));
-  let e;
-  a.template ? (["local", "cloudflare-simple", "cloudflare-multitenant"].includes(
-    a.template
-  ) || (console.error(`❌ Invalid template: ${a.template}`), console.error(
+  const a = i.join(process.cwd(), n);
+  o.existsSync(a) && (console.error(`❌ Project "${n}" already exists.`), process.exit(1));
+  let t;
+  e.template ? (["local", "cloudflare-simple", "cloudflare-multitenant"].includes(
+    e.template
+  ) || (console.error(`❌ Invalid template: ${e.template}`), console.error(
     "Valid options: local, cloudflare-simple, cloudflare-multitenant"
-  ), process.exit(1)), e = a.template, console.log(`Using template: ${n[e].name}`)) : e = (await c.prompt([
+  ), process.exit(1)), t = e.template, console.log(`Using template: ${c[t].name}`)) : t = (await m.prompt([
     {
       type: "list",
       name: "setupType",
       message: "Select your setup type:",
       choices: [
         {
-          name: `${n.local.name}
-     ${n.local.description}`,
+          name: `${c.local.name}
+     ${c.local.description}`,
           value: "local",
-          short: n.local.name
+          short: c.local.name
         },
         {
-          name: `${n["cloudflare-simple"].name}
-     ${n["cloudflare-simple"].description}`,
+          name: `${c["cloudflare-simple"].name}
+     ${c["cloudflare-simple"].description}`,
           value: "cloudflare-simple",
-          short: n["cloudflare-simple"].name
+          short: c["cloudflare-simple"].name
         },
         {
-          name: `${n["cloudflare-multitenant"].name}
-     ${n["cloudflare-multitenant"].description}`,
+          name: `${c["cloudflare-multitenant"].name}
+     ${c["cloudflare-multitenant"].description}`,
           value: "cloudflare-multitenant",
-          short: n["cloudflare-multitenant"].name
+          short: c["cloudflare-multitenant"].name
         }
       ]
     }
   ])).setupType;
-  const g = n[e];
-  i.mkdirSync(t, { recursive: !0 }), i.writeFileSync(
-    f.join(t, "package.json"),
-    JSON.stringify(g.packageJson(o), null, 2)
+  const f = c[t];
+  o.mkdirSync(a, { recursive: !0 }), o.writeFileSync(
+    i.join(a, "package.json"),
+    JSON.stringify(f.packageJson(n), null, 2)
   );
-  const k = f.join(
+  const k = i.join(
     import.meta.url.replace("file://", "").replace("/create-authhero.js", ""),
-    g.templateDir
+    f.templateDir
   );
-  if (i.existsSync(k) ? A(k, t) : (console.error(`❌ Template directory not found: ${k}`), process.exit(1)), e === "local") {
-    const l = $();
-    i.writeFileSync(f.join(t, "src/seed.ts"), l);
+  if (o.existsSync(k) ? A(k, a) : (console.error(`❌ Template directory not found: ${k}`), process.exit(1)), t === "cloudflare-simple" || t === "cloudflare-multitenant") {
+    const l = i.join(a, "wrangler.toml"), d = i.join(a, "wrangler.local.toml");
+    o.existsSync(l) && o.copyFileSync(l, d);
+    const p = i.join(a, ".dev.vars.example"), u = i.join(a, ".dev.vars");
+    o.existsSync(p) && o.copyFileSync(p, u), console.log(
+      "📁 Created wrangler.local.toml and .dev.vars for local development"
+    );
+  }
+  let w = !1;
+  if ((t === "cloudflare-simple" || t === "cloudflare-multitenant") && (e.githubCi !== void 0 ? (w = e.githubCi, w && console.log("Including GitHub CI workflows with semantic versioning")) : r || (w = (await m.prompt([
+    {
+      type: "confirm",
+      name: "includeGithubCi",
+      message: "Would you like to include GitHub CI with semantic versioning?",
+      default: !1
+    }
+  ])).includeGithubCi), w && (x(a), C(a))), t === "local") {
+    const l = I();
+    o.writeFileSync(i.join(a, "src/seed.ts"), l);
   }
   console.log(
     `
-✅ Project "${o}" has been created with ${g.name} setup!
+✅ Project "${n}" has been created with ${f.name} setup!
 `
   );
   let h;
-  if (a.skipInstall ? h = !1 : s ? h = !0 : h = (await c.prompt([
+  if (e.skipInstall ? h = !1 : r ? h = !0 : h = (await m.prompt([
     {
       type: "confirm",
       name: "shouldInstall",
@@ -267,9 +397,9 @@ b.version("1.0.0").description("Create a new AuthHero project").argument("[proje
     }
   ])).shouldInstall, h) {
     let l;
-    a.packageManager ? (["npm", "yarn", "pnpm", "bun"].includes(a.packageManager) || (console.error(
-      `❌ Invalid package manager: ${a.packageManager}`
-    ), console.error("Valid options: npm, yarn, pnpm, bun"), process.exit(1)), l = a.packageManager) : s ? l = "pnpm" : l = (await c.prompt([
+    e.packageManager ? (["npm", "yarn", "pnpm", "bun"].includes(e.packageManager) || (console.error(
+      `❌ Invalid package manager: ${e.packageManager}`
+    ), console.error("Valid options: npm, yarn, pnpm, bun"), process.exit(1)), l = e.packageManager) : r ? l = "pnpm" : l = (await m.prompt([
       {
         type: "list",
         name: "packageManager",
@@ -286,36 +416,14 @@ b.version("1.0.0").description("Create a new AuthHero project").argument("[proje
 📦 Installing dependencies with ${l}...
 `);
     try {
-      const p = l === "pnpm" ? "pnpm install --ignore-workspace" : `${l} install`;
-      await v(p, t), e === "local" && (console.log(`
+      const d = l === "pnpm" ? "pnpm install --ignore-workspace" : `${l} install`;
+      if (await v(d, a), t === "local" && (console.log(`
 🔧 Building native modules...
-`), await v("npm rebuild better-sqlite3", t)), console.log(`
+`), await v("npm rebuild better-sqlite3", a)), console.log(`
 ✅ Dependencies installed successfully!
-`);
-      let y = a.remote ? "remote" : "local";
-      if (e === "local" || e === "cloudflare-simple" || e === "cloudflare-multitenant") {
-        (e === "cloudflare-simple" || e === "cloudflare-multitenant") && !s && !a.remote && (y = (await c.prompt([
-          {
-            type: "list",
-            name: "mode",
-            message: "Would you like to run in local mode or remote mode?",
-            choices: [
-              {
-                name: "Local (using local D1 database)",
-                value: "local",
-                short: "Local"
-              },
-              {
-                name: "Remote (using production D1 database)",
-                value: "remote",
-                short: "Remote"
-              }
-            ],
-            default: "local"
-          }
-        ])).mode);
+`), t === "local" || t === "cloudflare-simple" || t === "cloudflare-multitenant") {
         let u;
-        if (a.skipMigrate && a.skipSeed ? u = !1 : s ? u = !a.skipMigrate || !a.skipSeed : u = (await c.prompt([
+        if (e.skipMigrate && e.skipSeed ? u = !1 : r ? u = !e.skipMigrate || !e.skipSeed : u = (await m.prompt([
           {
             type: "confirm",
             name: "shouldSetup",
@@ -323,84 +431,72 @@ b.version("1.0.0").description("Create a new AuthHero project").argument("[proje
             default: !0
           }
         ])).shouldSetup, u) {
-          let d;
-          if (a.email && a.password ? (/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(a.email) || (console.error("❌ Invalid email address provided"), process.exit(1)), a.password.length < 8 && (console.error("❌ Password must be at least 8 characters"), process.exit(1)), d = {
-            username: a.email,
-            password: a.password
-          }, console.log(`Using admin email: ${a.email}`)) : d = await c.prompt([
+          let g;
+          e.email && e.password ? (/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(e.email) || (console.error("❌ Invalid email address provided"), process.exit(1)), e.password.length < 8 && (console.error("❌ Password must be at least 8 characters"), process.exit(1)), g = {
+            username: e.email,
+            password: e.password
+          }, console.log(`Using admin email: ${e.email}`)) : g = await m.prompt([
             {
               type: "input",
               name: "username",
               message: "Admin email:",
               default: "admin@example.com",
-              validate: (m) => /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(m) || "Please enter a valid email address"
+              validate: (y) => /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(y) || "Please enter a valid email address"
             },
             {
               type: "password",
               name: "password",
               message: "Admin password:",
               mask: "*",
-              validate: (m) => m.length < 8 ? "Password must be at least 8 characters" : !0
+              validate: (y) => y.length < 8 ? "Password must be at least 8 characters" : !0
             }
-          ]), !a.skipMigrate) {
-            console.log(`
+          ]), e.skipMigrate || (console.log(`
 🔄 Running migrations...
-`);
-            const m = (e === "cloudflare-simple" || e === "cloudflare-multitenant") && y === "remote" ? `${l} run db:migrate:remote` : `${l} run migrate`;
-            await v(m, t);
-          }
-          if (!a.skipSeed)
-            if (console.log(`
+`), await v(`${l} run migrate`, a)), e.skipSeed || (console.log(`
 🌱 Seeding database...
-`), e === "local")
-              await S(
-                `${l} run seed`,
-                t,
-                {
-                  ADMIN_EMAIL: d.username,
-                  ADMIN_PASSWORD: d.password
-                }
-              );
-            else {
-              const m = y === "remote" ? `${l} run seed:remote` : `${l} run seed:local`;
-              await S(m, t, {
-                ADMIN_EMAIL: d.username,
-                ADMIN_PASSWORD: d.password
-              });
+`), t === "local" ? await S(
+            `${l} run seed`,
+            a,
+            {
+              ADMIN_EMAIL: g.username,
+              ADMIN_PASSWORD: g.password
             }
+          ) : await S(
+            `${l} run seed:local`,
+            a,
+            {
+              ADMIN_EMAIL: g.username,
+              ADMIN_PASSWORD: g.password
+            }
+          ));
         }
       }
-      let w;
-      if (a.skipStart || s ? w = !1 : w = (await c.prompt([
+      let p;
+      e.skipStart || r ? p = !1 : p = (await m.prompt([
         {
           type: "confirm",
           name: "shouldStart",
           message: "Would you like to start the development server?",
           default: !0
         }
-      ])).shouldStart, w) {
-        console.log(
-          `
+      ])).shouldStart, p && (console.log(
+        `
 🚀 Starting development server on https://localhost:3000 ...
 `
-        );
-        const u = (e === "cloudflare-simple" || e === "cloudflare-multitenant") && y === "remote" ? `${l} run dev:remote` : `${l} run dev`;
-        await v(u, t);
-      }
-      s && !w && (console.log(`
+      ), await v(`${l} run dev`, a)), r && !p && (console.log(`
 ✅ Setup complete!`), console.log(`
-To start the development server:`), console.log(`  cd ${o}`), console.log((e === "cloudflare-simple" || e === "cloudflare-multitenant") && y === "remote" ? "  npm run dev:remote" : "  npm run dev"), (e === "cloudflare-simple" || e === "cloudflare-multitenant") && console.log(
+To start the development server:`), console.log(`  cd ${n}`), console.log("  npm run dev"), (t === "cloudflare-simple" || t === "cloudflare-multitenant") && console.log(
         `
 Server will be available at: https://localhost:3000`
       ));
-    } catch (p) {
+    } catch (d) {
       console.error(`
-❌ An error occurred:`, p), process.exit(1);
+❌ An error occurred:`, d), process.exit(1);
     }
   }
-  h || (console.log("Next steps:"), console.log(`  cd ${o}`), e === "local" ? (console.log("  npm install"), console.log("  npm run migrate"), console.log(
+  h || (console.log("Next steps:"), console.log(`  cd ${n}`), t === "local" ? (console.log("  npm install"), console.log("  npm run migrate"), console.log(
     "  ADMIN_EMAIL=admin@example.com ADMIN_PASSWORD=yourpassword npm run seed"
-  ), console.log("  npm run dev")) : (e === "cloudflare-simple" || e === "cloudflare-multitenant") && (console.log("  npm install"), console.log(
+  ), console.log("  npm run dev")) : (t === "cloudflare-simple" || t === "cloudflare-multitenant") && (console.log("  npm install"), console.log(
     "  npm run migrate  # or npm run db:migrate:remote for production"
   ), console.log(
     "  ADMIN_EMAIL=admin@example.com ADMIN_PASSWORD=yourpassword npm run seed"
@@ -409,4 +505,4 @@ Server will be available at: https://localhost:3000`)), console.log(`
 For more information, visit: https://authhero.net/docs
 `));
 });
-b.parse(process.argv);
+D.parse(process.argv);

package/package.json

@@ -5,7 +5,7 @@
     "type": "git",
     "url": "https://github.com/markusahlstrand/authhero"
   },
-  "version": "0.15.0",
+  "version": "0.17.0",
   "type": "module",
   "main": "dist/create-authhero.js",
   "bin": {