create-authhero 0.33.0 → 0.35.0

package/dist/cloudflare/copy-assets.js

@@ -86,6 +86,41 @@ try {
     );
   }
 
+  // Copy admin UI files from @authhero/react-admin package
+  const adminSourceDir = path.join(
+    __dirname,
+    "node_modules",
+    "@authhero",
+    "react-admin",
+    "dist",
+  );
+
+  if (fs.existsSync(adminSourceDir)) {
+    console.log("📦 Copying admin UI assets...");
+    const adminTargetDir = path.join(targetDir, "admin");
+    copyDirectory(adminSourceDir, adminTargetDir);
+
+    // Inject runtime config into index.html
+    // Uses window.location.origin so the admin UI automatically points to its own server
+    const adminIndexPath = path.join(adminSourceDir, "index.html");
+    const adminHtml = fs.readFileSync(adminIndexPath, "utf-8")
+      .replace(/src="\.\/assets\//g, 'src="/admin/assets/')
+      .replace(/href="\.\/assets\//g, 'href="/admin/assets/');
+    const configScript = `<script>window.__AUTHHERO_ADMIN_CONFIG__={domain:window.location.origin,basePath:"/admin"}</script>`;
+    const injectedHtml = adminHtml.replace("</head>", configScript + "\n</head>");
+
+    // Write injected HTML to CDN assets (for direct /admin/ access)
+    fs.writeFileSync(path.join(adminTargetDir, "index.html"), injectedHtml);
+
+    // Write as TS module for worker to import (for SPA fallback on deep links)
+    const srcDir = path.join(__dirname, "src");
+    fs.writeFileSync(
+      path.join(srcDir, "admin-index-html.ts"),
+      `export default ${JSON.stringify(injectedHtml)};\n`,
+    );
+    console.log("✅ Admin UI assets copied and configured");
+  }
+
   console.log(`✅ Assets copied to ${targetDir}`);
 } catch (error) {
   console.error("❌ Error copying assets:", error.message);

package/dist/create-authhero.js

@@ -1,18 +1,18 @@
 #!/usr/bin/env node
-import { Command as I } from "commander";
+import { Command as P } from "commander";
 import m from "inquirer";
-import a from "fs";
-import l from "path";
+import s from "fs";
+import i from "path";
 import { spawn as E } from "child_process";
-const T = new I(), p = {
+const D = new P(), p = {
   local: {
     name: "Local (SQLite)",
     description: "Local development setup with SQLite database - great for getting started",
     templateDir: "local",
-    packageJson: (o, e, r, n) => {
-      const t = n ? "workspace:*" : "latest";
+    packageJson: (n, e, r, a, o) => {
+      const t = a ? "workspace:*" : "latest";
       return {
-        name: o,
+        name: n,
         version: "1.0.0",
         type: "module",
         scripts: {
@@ -23,6 +23,7 @@ const T = new I(), p = {
         },
         dependencies: {
           "@authhero/kysely-adapter": t,
+          ...o && { "@authhero/react-admin": t },
           "@authhero/widget": t,
           "@hono/swagger-ui": "^0.5.0",
           "@hono/zod-openapi": "^0.19.0",
@@ -48,10 +49,10 @@ const T = new I(), p = {
     name: "Cloudflare Workers (D1)",
     description: "Cloudflare Workers setup with D1 database",
     templateDir: "cloudflare",
-    packageJson: (o, e, r, n) => {
-      const t = n ? "workspace:*" : "latest";
+    packageJson: (n, e, r, a, o) => {
+      const t = a ? "workspace:*" : "latest";
       return {
-        name: o,
+        name: n,
         version: "1.0.0",
         type: "module",
         scripts: {
@@ -71,6 +72,7 @@ const T = new I(), p = {
         dependencies: {
           "@authhero/drizzle": t,
           "@authhero/kysely-adapter": t,
+          ...o && { "@authhero/react-admin": t },
           "@authhero/widget": t,
           "@hono/swagger-ui": "^0.5.0",
           "@hono/zod-openapi": "^0.19.0",
@@ -96,10 +98,10 @@ const T = new I(), p = {
     name: "AWS SST (Lambda + DynamoDB)",
     description: "Serverless AWS deployment with Lambda, DynamoDB, and SST",
     templateDir: "aws-sst",
-    packageJson: (o, e, r, n) => {
-      const t = n ? "workspace:*" : "latest";
+    packageJson: (n, e, r, a, o) => {
+      const t = a ? "workspace:*" : "latest";
       return {
-        name: o,
+        name: n,
         version: "1.0.0",
         type: "module",
         scripts: {
@@ -111,6 +113,7 @@ const T = new I(), p = {
         },
         dependencies: {
           "@authhero/aws": t,
+          ...o && { "@authhero/react-admin": t },
           "@authhero/widget": t,
           "@aws-sdk/client-dynamodb": "^3.0.0",
           "@aws-sdk/lib-dynamodb": "^3.0.0",
@@ -133,27 +136,28 @@ const T = new I(), p = {
     seedFile: "seed.ts"
   }
 };
-function N(o, e) {
-  a.readdirSync(o).forEach((n) => {
-    const t = l.join(o, n), s = l.join(e, n);
-    a.lstatSync(t).isDirectory() ? (a.mkdirSync(s, { recursive: !0 }), N(t, s)) : a.copyFileSync(t, s);
+function N(n, e) {
+  s.readdirSync(n).forEach((a) => {
+    const o = i.join(n, a), t = i.join(e, a);
+    s.lstatSync(o).isDirectory() ? (s.mkdirSync(t, { recursive: !0 }), N(o, t)) : s.copyFileSync(o, t);
   });
 }
-function P(o, e = !1, r = "authhero-local") {
-  const n = o ? "control_plane" : "main", t = o ? "Control Plane" : "Main", s = [
+function R(n, e = !1, r = "authhero-local", a) {
+  const o = n ? "control_plane" : "main", t = n ? "Control Plane" : "Main", c = [
     "https://manage.authhero.net/auth-callback",
     "https://local.authhero.net/auth-callback",
     "http://localhost:5173/auth-callback",
-    "https://localhost:3000/auth-callback"
-  ], i = e ? [
+    "https://localhost:3000/auth-callback",
+    ...a ? ["https://localhost:3000/admin/auth-callback"] : []
+  ], d = e ? [
     `https://localhost.emobix.co.uk:8443/test/a/${r}/callback`,
     `https://localhost:8443/test/a/${r}/callback`
-  ] : [], g = [...s, ...i], f = [
+  ] : [], f = [...c, ...d], h = [
     "https://manage.authhero.net",
     "https://local.authhero.net",
     "http://localhost:5173",
     "https://localhost:3000"
-  ], v = e ? ["https://localhost:8443/", "https://localhost.emobix.co.uk:8443/"] : [], w = [...f, ...v], A = e ? `
+  ], C = e ? ["https://localhost:8443/", "https://localhost.emobix.co.uk:8443/"] : [], y = [...h, ...C], S = e ? `
   // Create OpenID Conformance Suite test clients and user
   console.log("Creating conformance test clients and user...");
   
@@ -171,7 +175,7 @@ function P(o, e = !1, r = "authhero-local") {
   ];
 
   try {
-    await adapters.clients.create("${n}", {
+    await adapters.clients.create("${o}", {
       client_id: "conformance-test",
       client_secret: "conformanceTestSecret123",
       name: "Conformance Test Client",
@@ -189,7 +193,7 @@ function P(o, e = !1, r = "authhero-local") {
   }
 
   try {
-    await adapters.clients.create("${n}", {
+    await adapters.clients.create("${o}", {
       client_id: "conformance-test2",
       client_secret: "conformanceTestSecret456",
       name: "Conformance Test Client 2",
@@ -209,7 +213,7 @@ function P(o, e = !1, r = "authhero-local") {
   // Create a conformance test user with ALL OIDC profile claims populated
   // This is required for OIDCC-5.4 (VerifyScopesReturnedInUserInfoClaims) test
   try {
-    await adapters.users.create("${n}", {
+    await adapters.users.create("${o}", {
       user_id: \`\${USERNAME_PASSWORD_PROVIDER}|conformance-user\`,
       email: "conformance@example.com",
       email_verified: true,
@@ -244,7 +248,7 @@ function P(o, e = !1, r = "authhero-local") {
   try {
     const bcrypt = await import("bcryptjs");
     const hashedPassword = await bcrypt.hash("ConformanceTest123!", 10);
-    await adapters.passwords.create("${n}", {
+    await adapters.passwords.create("${o}", {
       user_id: \`\${USERNAME_PASSWORD_PROVIDER}|conformance-user\`,
       password: hashedPassword,
     });
@@ -276,34 +280,82 @@ async function main() {
   await seed(adapters, {
     adminUsername,
     adminPassword,
-    tenantId: "${n}",
+    tenantId: "${o}",
     tenantName: "${t}",
-    isControlPlane: ${o},
-    callbacks: ${JSON.stringify(g)},
-    allowedLogoutUrls: ${JSON.stringify(w)},
+    isControlPlane: ${!!n},${n ? `
+    clientId: "default_client",` : ""}
+    callbacks: ${JSON.stringify(f)},
+    allowedLogoutUrls: ${JSON.stringify(y)},
   });
-${A}
+${S}
   await db.destroy();
 }
 
 main().catch(console.error);
 `;
 }
-function R(o) {
-  return o ? `import { Context } from "hono";
+function U(n, e) {
+  const r = e ? `import fs from "fs";
+` : "", a = e ? `
+const adminDistPath = path.resolve(
+  __dirname,
+  "../node_modules/@authhero/react-admin/dist",
+);
+const adminIndexPath = path.join(adminDistPath, "index.html");
+` : "", o = e ? `
+  // Add admin UI handler if the package is installed
+  if (fs.existsSync(adminIndexPath)) {
+    const issuer =
+      process.env.ISSUER || \`https://localhost:\${process.env.PORT || 3000}/\`;
+    const rawHtml = fs.readFileSync(adminIndexPath, "utf-8")
+      .replace(/src="\\.\\//g, 'src="/admin/')
+      .replace(/href="\\.\\//g, 'href="/admin/');
+    const configJson = JSON.stringify({
+      domain: issuer.replace(/\\/$/, ""),${n ? `
+      clientId: CONTROL_PLANE_CLIENT_ID,` : ""}
+      basePath: "/admin",
+    }).replace(/</g, "\\\\u003c");
+    configWithHandlers.adminIndexHtml = rawHtml.replace(
+      "</head>",
+      \`<script>window.__AUTHHERO_ADMIN_CONFIG__=\${configJson};<\/script>\\n</head>\`,
+    );
+    configWithHandlers.adminHandler = serveStatic({
+      root: adminDistPath,
+      rewriteRequestPath: (p: string) => p.replace("/admin", ""),
+    });
+  }
+` : "";
+  return n ? `import { Context } from "hono";
 import { swaggerUI } from "@hono/swagger-ui";
 import { AuthHeroConfig, DataAdapters } from "authhero";
 import { serveStatic } from "@hono/node-server/serve-static";
 import { initMultiTenant } from "@authhero/multi-tenancy";
+import path from "path";
+${r}import { fileURLToPath } from "url";
 
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+
+const widgetPath = path.resolve(
+  __dirname,
+  "../node_modules/@authhero/widget/dist/authhero-widget",
+);
+${a}
 // Control plane configuration
 const CONTROL_PLANE_TENANT_ID = "control_plane";
 const CONTROL_PLANE_CLIENT_ID = "default_client";
 
 export default function createApp(config: AuthHeroConfig & { dataAdapter: DataAdapters }) {
+  const configWithHandlers: AuthHeroConfig & { dataAdapter: DataAdapters } = {
+    ...config,
+    widgetHandler: serveStatic({
+      root: widgetPath,
+      rewriteRequestPath: (p) => p.replace("/u/widget", ""),
+    }),
+  };
+${o}
   // Initialize multi-tenant AuthHero - syncs resource servers, roles, and connections by default
   const { app } = initMultiTenant({
-    ...config,
+    ...configWithHandlers,
     controlPlane: {
       tenantId: CONTROL_PLANE_TENANT_ID,
       clientId: CONTROL_PLANE_CLIENT_ID,
@@ -328,23 +380,7 @@ export default function createApp(config: AuthHeroConfig & { dataAdapter: DataAd
         controlPlaneTenant: CONTROL_PLANE_TENANT_ID,
       });
     })
-    .get("/docs", swaggerUI({ url: "/api/v2/spec" }))
-    // Serve widget assets from @authhero/widget package
-    .get(
-      "/u/widget/*",
-      serveStatic({
-        root: "./node_modules/@authhero/widget/dist/authhero-widget",
-        rewriteRequestPath: (path) => path.replace("/u/widget", ""),
-      }),
-    )
-    // Serve static assets (CSS, JS) from authhero package
-    .get(
-      "/u/*",
-      serveStatic({
-        root: "./node_modules/authhero/dist/assets/u",
-        rewriteRequestPath: (path) => path.replace("/u", ""),
-      }),
-    );
+    .get("/docs", swaggerUI({ url: "/api/v2/spec" }));
 
   return app;
 }
@@ -352,9 +388,26 @@ export default function createApp(config: AuthHeroConfig & { dataAdapter: DataAd
 import { AuthHeroConfig, init } from "authhero";
 import { swaggerUI } from "@hono/swagger-ui";
 import { serveStatic } from "@hono/node-server/serve-static";
+import path from "path";
+${r}import { fileURLToPath } from "url";
 
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+
+const widgetPath = path.resolve(
+  __dirname,
+  "../node_modules/@authhero/widget/dist/authhero-widget",
+);
+${a}
 export default function createApp(config: AuthHeroConfig) {
-  const { app } = init(config);
+  const configWithHandlers: AuthHeroConfig = {
+    ...config,
+    widgetHandler: serveStatic({
+      root: widgetPath,
+      rewriteRequestPath: (p) => p.replace("/u/widget", ""),
+    }),
+  };
+${o}
+  const { app } = init(configWithHandlers);
 
   app
     .onError((err, ctx) => {
@@ -371,29 +424,13 @@ export default function createApp(config: AuthHeroConfig) {
         status: "running",
       });
     })
-    .get("/docs", swaggerUI({ url: "/api/v2/spec" }))
-    // Serve widget assets from @authhero/widget package
-    .get(
-      "/u/widget/*",
-      serveStatic({
-        root: "./node_modules/@authhero/widget/dist/authhero-widget",
-        rewriteRequestPath: (path) => path.replace("/u/widget", ""),
-      }),
-    )
-    // Serve static assets (CSS, JS) from authhero package
-    .get(
-      "/u/*",
-      serveStatic({
-        root: "./node_modules/authhero/dist/assets/u",
-        rewriteRequestPath: (path) => path.replace("/u", ""),
-      }),
-    );
+    .get("/docs", swaggerUI({ url: "/api/v2/spec" }));
 
   return app;
 }
 `;
 }
-function O(o) {
+function O(n) {
   return `import { D1Dialect } from "kysely-d1";
 import { Kysely } from "kysely";
 import createAdapters from "@authhero/kysely-adapter";
@@ -420,9 +457,9 @@ export default {
         adminUsername,
         adminPassword,
         issuer,
-        tenantId: "${o ? "control_plane" : "main"}",
-        tenantName: "${o ? "Control Plane" : "Main"}",
-        isControlPlane: ${o},
+        tenantId: "${n ? "control_plane" : "main"}",
+        tenantName: "${n ? "Control Plane" : "Main"}",
+        isControlPlane: ${!!n},
       });
 
       return new Response(
@@ -453,12 +490,15 @@ export default {
 };
 `;
 }
-function U(o) {
-  return o ? `import { Context } from "hono";
+function L(n, e) {
+  const r = e ? `import adminIndexHtml from "./admin-index-html";
+` : "", a = e ? `    adminIndexHtml,
+` : "";
+  return n ? `import { Context } from "hono";
 import { swaggerUI } from "@hono/swagger-ui";
 import { AuthHeroConfig, DataAdapters } from "authhero";
 import { initMultiTenant } from "@authhero/multi-tenancy";
-
+${r}
 // Control plane configuration
 const CONTROL_PLANE_TENANT_ID = "control_plane";
 const CONTROL_PLANE_CLIENT_ID = "default_client";
@@ -467,7 +507,7 @@ export default function createApp(config: AuthHeroConfig & { dataAdapter: DataAd
   // Initialize multi-tenant AuthHero - syncs resource servers, roles, and connections by default
   const { app } = initMultiTenant({
     ...config,
-    controlPlane: {
+${a}    controlPlane: {
       tenantId: CONTROL_PLANE_TENANT_ID,
       clientId: CONTROL_PLANE_CLIENT_ID,
     },
@@ -499,9 +539,11 @@ export default function createApp(config: AuthHeroConfig & { dataAdapter: DataAd
 import { cors } from "hono/cors";
 import { AuthHeroConfig, init } from "authhero";
 import { swaggerUI } from "@hono/swagger-ui";
-
+${r}
 export default function createApp(config: AuthHeroConfig) {
-  const { app } = init(config);
+  const { app } = init({
+    ...config,
+${a}  });
 
   // Enable CORS for all origins in development
   app.use("*", cors({
@@ -533,8 +575,8 @@ export default function createApp(config: AuthHeroConfig) {
 }
 `;
 }
-function j(o) {
-  return o ? `import { Context } from "hono";
+function j(n) {
+  return n ? `import { Context } from "hono";
 import { swaggerUI } from "@hono/swagger-ui";
 import { AuthHeroConfig, DataAdapters } from "authhero";
 import { initMultiTenant } from "@authhero/multi-tenancy";
@@ -639,7 +681,7 @@ export default function createApp(config: AppConfig) {
 }
 `;
 }
-function L(o) {
+function $(n) {
   return `import { DynamoDBClient } from "@aws-sdk/client-dynamodb";
 import { DynamoDBDocumentClient } from "@aws-sdk/lib-dynamodb";
 import createAdapters from "@authhero/aws";
@@ -668,9 +710,9 @@ async function main() {
   await seed(adapters, {
     adminUsername,
     adminPassword,
-    tenantId: "${o ? "control_plane" : "main"}",
-    tenantName: "${o ? "Control Plane" : "Main"}",
-    isControlPlane: ${o},
+    tenantId: "${n ? "control_plane" : "main"}",
+    tenantName: "${n ? "Control Plane" : "Main"}",
+    isControlPlane: ${!!n},
   });
 
   console.log("✅ Database seeded successfully!");
@@ -679,24 +721,24 @@ async function main() {
 main().catch(console.error);
 `;
 }
-function $(o, e) {
-  const r = l.join(o, "src");
-  a.writeFileSync(
-    l.join(r, "app.ts"),
+function H(n, e) {
+  const r = i.join(n, "src");
+  s.writeFileSync(
+    i.join(r, "app.ts"),
     j(e)
-  ), a.writeFileSync(
-    l.join(r, "seed.ts"),
-    L(e)
+  ), s.writeFileSync(
+    i.join(r, "seed.ts"),
+    $(e)
   );
 }
-function k() {
+function I() {
   console.log("\\n" + "─".repeat(50)), console.log("🔐 AuthHero deployed to AWS!"), console.log("📚 Check SST output for your API URL"), console.log(
     "🚀 Open your server URL /setup to complete initial setup"
   ), console.log("🌐 Portal available at https://local.authhero.net"), console.log("─".repeat(50) + "\\n");
 }
-function H(o) {
-  const e = l.join(o, ".github", "workflows");
-  a.mkdirSync(e, { recursive: !0 });
+function M(n) {
+  const e = i.join(n, ".github", "workflows");
+  s.mkdirSync(e, { recursive: !0 });
   const r = `name: Unit tests
 
 on: push
@@ -718,7 +760,7 @@ jobs:
 
       - run: npm run type-check
       - run: npm test
-`, n = `name: Deploy to Dev
+`, a = `name: Deploy to Dev
 
 on:
   push:
@@ -754,7 +796,7 @@ jobs:
         with:
           apiToken: \${{ secrets.CLOUDFLARE_API_TOKEN }}
           command: deploy
-`, t = `name: Deploy to Production
+`, o = `name: Deploy to Production
 
 on:
   release:
@@ -783,9 +825,9 @@ jobs:
           apiToken: \${{ secrets.PROD_CLOUDFLARE_API_TOKEN }}
           command: deploy --env production
 `;
-  a.writeFileSync(l.join(e, "unit-tests.yml"), r), a.writeFileSync(l.join(e, "deploy-dev.yml"), n), a.writeFileSync(l.join(e, "release.yml"), t), console.log("\\n📦 GitHub CI workflows created!");
+  s.writeFileSync(i.join(e, "unit-tests.yml"), r), s.writeFileSync(i.join(e, "deploy-dev.yml"), a), s.writeFileSync(i.join(e, "release.yml"), o), console.log("\\n📦 GitHub CI workflows created!");
 }
-function M(o) {
+function F(n) {
   const e = {
     branches: ["main"],
     plugins: [
@@ -794,39 +836,39 @@ function M(o) {
       "@semantic-release/github"
     ]
   };
-  a.writeFileSync(
-    l.join(o, ".releaserc.json"),
+  s.writeFileSync(
+    i.join(n, ".releaserc.json"),
     JSON.stringify(e, null, 2)
   );
-  const r = l.join(o, "package.json"), n = JSON.parse(a.readFileSync(r, "utf-8"));
-  n.devDependencies = {
-    ...n.devDependencies,
+  const r = i.join(n, "package.json"), a = JSON.parse(s.readFileSync(r, "utf-8"));
+  a.devDependencies = {
+    ...a.devDependencies,
     "semantic-release": "^24.0.0"
-  }, n.scripts = {
-    ...n.scripts,
+  }, a.scripts = {
+    ...a.scripts,
     test: 'echo "No tests yet"',
     "type-check": "tsc --noEmit"
-  }, a.writeFileSync(r, JSON.stringify(n, null, 2));
+  }, s.writeFileSync(r, JSON.stringify(a, null, 2));
 }
-function S(o, e) {
-  return new Promise((r, n) => {
-    const t = E(o, [], {
+function b(n, e) {
+  return new Promise((r, a) => {
+    const o = E(n, [], {
       cwd: e,
       shell: !0,
       stdio: "inherit"
     });
-    t.on("close", (s) => {
-      s === 0 ? r() : n(new Error(`Command failed with exit code ${s}`));
-    }), t.on("error", n);
+    o.on("close", (t) => {
+      t === 0 ? r() : a(new Error(`Command failed with exit code ${t}`));
+    }), o.on("error", a);
   });
 }
-function F(o, e) {
-  const r = l.join(o, "src");
-  a.writeFileSync(
-    l.join(r, "app.ts"),
-    U(e)
-  ), a.writeFileSync(
-    l.join(r, "seed.ts"),
+function W(n, e, r) {
+  const a = i.join(n, "src");
+  s.writeFileSync(
+    i.join(a, "app.ts"),
+    L(e, r)
+  ), s.writeFileSync(
+    i.join(a, "seed.ts"),
     O(e)
   );
 }
@@ -837,29 +879,29 @@ function x() {
   ), console.log("🌐 Portal available at https://local.authhero.net"), console.log("─".repeat(50) + `
 `);
 }
-function D() {
+function k() {
   console.log(`
 ` + "─".repeat(50)), console.log("✅ Self-signed certificates generated with openssl"), console.log("⚠️  You may need to trust the certificate in your browser"), console.log("🔐 AuthHero server running at https://localhost:3000"), console.log("📚 API documentation available at https://localhost:3000/docs"), console.log(
     "🚀 Open https://localhost:3000/setup to complete initial setup"
   ), console.log("🌐 Portal available at https://local.authhero.net"), console.log("─".repeat(50) + `
 `);
 }
-T.version("1.0.0").description("Create a new AuthHero project").argument("[project-name]", "name of the project").option("-t, --template <type>", "template type: local or cloudflare").option(
+D.version("1.0.0").description("Create a new AuthHero project").argument("[project-name]", "name of the project").option("-t, --template <type>", "template type: local or cloudflare").option(
   "--package-manager <pm>",
   "package manager to use: npm, yarn, pnpm, or bun"
-).option("--multi-tenant", "enable multi-tenant mode").option("--skip-install", "skip installing dependencies").option("--skip-migrate", "skip running database migrations").option("--skip-start", "skip starting the development server").option("--github-ci", "include GitHub CI workflows with semantic versioning").option("--conformance", "add OpenID conformance suite test clients").option(
+).option("--multi-tenant", "enable multi-tenant mode").option("--admin-ui", "include admin UI at /admin").option("--skip-install", "skip installing dependencies").option("--skip-migrate", "skip running database migrations").option("--skip-start", "skip starting the development server").option("--github-ci", "include GitHub CI workflows with semantic versioning").option("--conformance", "add OpenID conformance suite test clients").option(
   "--conformance-alias <alias>",
   "alias for conformance suite (default: authhero-local)"
 ).option(
   "--workspace",
   "use workspace:* dependencies for local monorepo development"
-).option("-y, --yes", "skip all prompts and use defaults/provided options").action(async (o, e) => {
+).option("-y, --yes", "skip all prompts and use defaults/provided options").action(async (n, e) => {
   const r = e.yes === !0;
   console.log(`
 🔐 Welcome to AuthHero!
 `);
-  let n = o;
-  n || (r ? (n = "auth-server", console.log(`Using default project name: ${n}`)) : n = (await m.prompt([
+  let a = n;
+  a || (r ? (a = "auth-server", console.log(`Using default project name: ${a}`)) : a = (await m.prompt([
     {
       type: "input",
       name: "projectName",
@@ -868,10 +910,10 @@ T.version("1.0.0").description("Create a new AuthHero project").argument("[proje
       validate: (u) => u !== "" || "Project name cannot be empty"
     }
   ])).projectName);
-  const t = l.join(process.cwd(), n);
-  a.existsSync(t) && (console.error(`❌ Project "${n}" already exists.`), process.exit(1));
-  let s;
-  e.template ? (["local", "cloudflare", "aws-sst"].includes(e.template) || (console.error(`❌ Invalid template: ${e.template}`), console.error("Valid options: local, cloudflare, aws-sst"), process.exit(1)), s = e.template, console.log(`Using template: ${p[s].name}`)) : s = (await m.prompt([
+  const o = i.join(process.cwd(), a);
+  s.existsSync(o) && (console.error(`❌ Project "${a}" already exists.`), process.exit(1));
+  let t;
+  e.template ? (["local", "cloudflare", "aws-sst"].includes(e.template) || (console.error(`❌ Invalid template: ${e.template}`), console.error("Valid options: local, cloudflare, aws-sst"), process.exit(1)), t = e.template, console.log(`Using template: ${p[t].name}`)) : t = (await m.prompt([
     {
       type: "list",
       name: "setupType",
@@ -898,64 +940,73 @@ T.version("1.0.0").description("Create a new AuthHero project").argument("[proje
       ]
     }
   ])).setupType;
-  let i;
-  e.multiTenant !== void 0 ? (i = e.multiTenant, console.log(`Multi-tenant mode: ${i ? "enabled" : "disabled"}`)) : r ? i = !1 : i = (await m.prompt([
+  let c;
+  e.multiTenant !== void 0 ? c = e.multiTenant : r ? c = !1 : c = (await m.prompt([
     {
       type: "confirm",
       name: "multiTenant",
-      message: `Would you like to enable multi-tenant mode?
-     (Allows managing multiple tenants from a control plane)`,
+      message: "Would you like to enable multi-tenant mode?",
       default: !1
     }
-  ])).multiTenant;
-  const g = e.conformance || !1, f = e.conformanceAlias || "authhero-local";
-  g && console.log(
-    `OpenID Conformance Suite: enabled (alias: ${f})`
+  ])).multiTenant, c && console.log("Multi-tenant mode: enabled");
+  let d = !1;
+  (t === "local" || t === "cloudflare") && (e.adminUi !== void 0 ? d = e.adminUi : r ? d = !0 : d = (await m.prompt([
+    {
+      type: "confirm",
+      name: "adminUi",
+      message: "Would you like to include the admin UI at /admin?",
+      default: !0
+    }
+  ])).adminUi, d && console.log("Admin UI: enabled (available at /admin)"));
+  const f = e.conformance || !1, h = e.conformanceAlias || "authhero-local";
+  f && console.log(
+    `OpenID Conformance Suite: enabled (alias: ${h})`
   );
-  const v = e.workspace || !1;
-  v && console.log("Workspace mode: enabled (using workspace:* dependencies)");
-  const w = p[s];
-  a.mkdirSync(t, { recursive: !0 }), a.writeFileSync(
-    l.join(t, "package.json"),
+  const C = e.workspace || !1;
+  C && console.log("Workspace mode: enabled (using workspace:* dependencies)");
+  const y = p[t];
+  s.mkdirSync(o, { recursive: !0 }), s.writeFileSync(
+    i.join(o, "package.json"),
     JSON.stringify(
-      w.packageJson(n, i, g, v),
+      y.packageJson(a, c, f, C, d),
       null,
       2
     )
   );
-  const A = w.templateDir, b = l.join(
+  const S = y.templateDir, _ = i.join(
     import.meta.url.replace("file://", "").replace("/create-authhero.js", ""),
-    A
+    S
   );
-  if (a.existsSync(b) ? N(b, t) : (console.error(`❌ Template directory not found: ${b}`), process.exit(1)), s === "cloudflare" && F(t, i), s === "cloudflare") {
-    const c = l.join(t, "wrangler.toml"), u = l.join(t, "wrangler.local.toml");
-    a.existsSync(c) && a.copyFileSync(c, u);
-    const d = l.join(t, ".dev.vars.example"), h = l.join(t, ".dev.vars");
-    a.existsSync(d) && a.copyFileSync(d, h), console.log(
+  if (s.existsSync(_) ? N(_, o) : (console.error(`❌ Template directory not found: ${_}`), process.exit(1)), t === "cloudflare" && W(o, c, d), t === "cloudflare") {
+    const l = i.join(o, "wrangler.toml"), u = i.join(o, "wrangler.local.toml");
+    s.existsSync(l) && s.copyFileSync(l, u);
+    const g = i.join(o, ".dev.vars.example"), w = i.join(o, ".dev.vars");
+    s.existsSync(g) && s.copyFileSync(g, w), console.log(
       "📁 Created wrangler.local.toml and .dev.vars for local development"
     );
   }
-  let C = !1;
-  if (s === "cloudflare" && (e.githubCi !== void 0 ? (C = e.githubCi, C && console.log("Including GitHub CI workflows with semantic versioning")) : r || (C = (await m.prompt([
+  let A = !1;
+  if (t === "cloudflare" && (e.githubCi !== void 0 ? (A = e.githubCi, A && console.log("Including GitHub CI workflows with semantic versioning")) : r || (A = (await m.prompt([
     {
       type: "confirm",
       name: "includeGithubCi",
       message: "Would you like to include GitHub CI with semantic versioning?",
       default: !1
     }
-  ])).includeGithubCi), C && (H(t), M(t))), s === "local") {
-    const c = P(
-      i,
-      g,
-      f
+  ])).includeGithubCi), A && (M(o), F(o))), t === "local") {
+    const l = R(
+      c,
+      f,
+      h,
+      d
     );
-    a.writeFileSync(l.join(t, "src/seed.ts"), c);
-    const u = R(i);
-    a.writeFileSync(l.join(t, "src/app.ts"), u);
+    s.writeFileSync(i.join(o, "src/seed.ts"), l);
+    const u = U(c, d);
+    s.writeFileSync(i.join(o, "src/app.ts"), u);
   }
-  if (s === "aws-sst" && $(t, i), g) {
-    const c = {
-      alias: f,
+  if (t === "aws-sst" && H(o, c), f) {
+    const l = {
+      alias: h,
       description: "AuthHero Conformance Test",
       server: {
         discoveryUrl: "http://host.docker.internal:3000/.well-known/openid-configuration"
@@ -972,32 +1023,32 @@ T.version("1.0.0").description("Create a new AuthHero project").argument("[proje
         resourceUrl: "http://host.docker.internal:3000/userinfo"
       }
     };
-    a.writeFileSync(
-      l.join(t, "conformance-config.json"),
-      JSON.stringify(c, null, 2)
+    s.writeFileSync(
+      i.join(o, "conformance-config.json"),
+      JSON.stringify(l, null, 2)
     ), console.log(
       "📝 Created conformance-config.json for OpenID Conformance Suite"
     );
   }
-  const _ = i ? "multi-tenant" : "single-tenant";
+  const T = c ? "multi-tenant" : "single-tenant";
   console.log(
     `
-✅ Project "${n}" has been created with ${w.name} (${_}) setup!
+✅ Project "${a}" has been created with ${y.name} (${T}) setup!
 `
   );
-  let y;
-  if (e.skipInstall ? y = !1 : r ? y = !0 : y = (await m.prompt([
+  let v;
+  if (e.skipInstall ? v = !1 : r ? v = !0 : v = (await m.prompt([
     {
       type: "confirm",
       name: "shouldInstall",
       message: "Would you like to install dependencies now?",
       default: !0
     }
-  ])).shouldInstall, y) {
-    let c;
+  ])).shouldInstall, v) {
+    let l;
     e.packageManager ? (["npm", "yarn", "pnpm", "bun"].includes(e.packageManager) || (console.error(
       `❌ Invalid package manager: ${e.packageManager}`
-    ), console.error("Valid options: npm, yarn, pnpm, bun"), process.exit(1)), c = e.packageManager) : r ? c = "pnpm" : c = (await m.prompt([
+    ), console.error("Valid options: npm, yarn, pnpm, bun"), process.exit(1)), l = e.packageManager) : r ? l = "pnpm" : l = (await m.prompt([
       {
         type: "list",
         name: "packageManager",
@@ -1011,65 +1062,65 @@ T.version("1.0.0").description("Create a new AuthHero project").argument("[proje
         default: "pnpm"
       }
     ])).packageManager, console.log(`
-📦 Installing dependencies with ${c}...
+📦 Installing dependencies with ${l}...
 `);
     try {
-      const u = c === "pnpm" ? "pnpm install --ignore-workspace" : `${c} install`;
-      if (await S(u, t), s === "local" && (console.log(`
+      const u = l === "pnpm" ? "pnpm install --ignore-workspace" : `${l} install`;
+      if (await b(u, o), t === "local" && (console.log(`
 🔧 Building native modules...
-`), await S("npm rebuild better-sqlite3", t)), console.log(`
+`), await b("npm rebuild better-sqlite3", o)), console.log(`
 ✅ Dependencies installed successfully!
-`), (s === "local" || s === "cloudflare") && !e.skipMigrate) {
-        let h;
-        r ? h = !0 : h = (await m.prompt([
+`), (t === "local" || t === "cloudflare") && !e.skipMigrate) {
+        let w;
+        r ? w = !0 : w = (await m.prompt([
           {
             type: "confirm",
             name: "shouldMigrate",
             message: "Would you like to run database migrations?",
             default: !0
           }
-        ])).shouldMigrate, h && (console.log(`
+        ])).shouldMigrate, w && (console.log(`
 🔄 Running migrations...
-`), await S(`${c} run migrate`, t));
+`), await b(`${l} run migrate`, o));
       }
-      let d;
-      e.skipStart || r ? d = !1 : d = (await m.prompt([
+      let g;
+      e.skipStart || r ? g = !1 : g = (await m.prompt([
         {
           type: "confirm",
           name: "shouldStart",
           message: "Would you like to start the development server?",
           default: !0
         }
-      ])).shouldStart, d && (s === "cloudflare" ? x() : s === "aws-sst" ? k() : D(), console.log(`🚀 Starting development server...
-`), await S(`${c} run dev`, t)), r && !d && (console.log(`
+      ])).shouldStart, g && (t === "cloudflare" ? x() : t === "aws-sst" ? I() : k(), console.log(`🚀 Starting development server...
+`), await b(`${l} run dev`, o)), r && !g && (console.log(`
 ✅ Setup complete!`), console.log(`
-To start the development server:`), console.log(`  cd ${n}`), console.log("  npm run dev"), s === "cloudflare" ? x() : s === "aws-sst" ? k() : D());
+To start the development server:`), console.log(`  cd ${a}`), console.log("  npm run dev"), t === "cloudflare" ? x() : t === "aws-sst" ? I() : k());
     } catch (u) {
       console.error(`
 ❌ An error occurred:`, u), process.exit(1);
     }
   }
-  y || (console.log("Next steps:"), console.log(`  cd ${n}`), s === "local" ? (console.log("  npm install"), console.log("  npm run migrate"), console.log("  npm run dev"), console.log(
+  v || (console.log("Next steps:"), console.log(`  cd ${a}`), t === "local" ? (console.log("  npm install"), console.log("  npm run migrate"), console.log("  npm run dev"), console.log(
     `
 Open https://localhost:3000/setup to complete initial setup`
-  )) : s === "cloudflare" ? (console.log("  npm install"), console.log(
+  )) : t === "cloudflare" ? (console.log("  npm install"), console.log(
     "  npm run migrate  # or npm run db:migrate:remote for production"
   ), console.log("  npm run dev  # or npm run dev:remote for production"), console.log(
     `
 Open https://localhost:3000/setup to complete initial setup`
-  )) : s === "aws-sst" && (console.log("  npm install"), console.log("  npm run dev  # Deploys to AWS in development mode"), console.log(
+  )) : t === "aws-sst" && (console.log("  npm install"), console.log("  npm run dev  # Deploys to AWS in development mode"), console.log(
     `
 Open your server URL /setup to complete initial setup`
   )), console.log(`
-Server will be available at: https://localhost:3000`), console.log("Portal available at: https://local.authhero.net"), g && (console.log(`
+Server will be available at: https://localhost:3000`), console.log("Portal available at: https://local.authhero.net"), f && (console.log(`
 🧪 OpenID Conformance Suite Testing:`), console.log(
     "  1. Clone and start the conformance suite (if not already running):"
   ), console.log(
     "     git clone https://gitlab.com/openid/conformance-suite.git"
   ), console.log("     cd conformance-suite && mvn clean package"), console.log("     docker-compose up -d"), console.log("  2. Open https://localhost.emobix.co.uk:8443"), console.log(
     "  3. Create a test plan and use conformance-config.json for settings"
-  ), console.log(`  4. Use alias: ${f}`)), console.log(`
+  ), console.log(`  4. Use alias: ${h}`)), console.log(`
 For more information, visit: https://authhero.net/docs
 `));
 });
-T.parse(process.argv);
+D.parse(process.argv);

package/dist/local/src/app.ts

@@ -3,6 +3,7 @@ import { AuthHeroConfig, init } from "authhero";
 import { swaggerUI } from "@hono/swagger-ui";
 import { serveStatic } from "@hono/node-server/serve-static";
 import path from "path";
+import fs from "fs";
 import { fileURLToPath } from "url";
 
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
@@ -13,9 +14,15 @@ const widgetPath = path.resolve(
   "../node_modules/@authhero/widget/dist/authhero-widget",
 );
 
+const adminDistPath = path.resolve(
+  __dirname,
+  "../node_modules/@authhero/react-admin/dist",
+);
+const adminIndexPath = path.join(adminDistPath, "index.html");
+
 export default function createApp(config: AuthHeroConfig) {
-  // Configure widget handler before init() to serve widget files at /u/widget/*
-  const configWithWidget: AuthHeroConfig = {
+  // Configure widget and admin handlers before init()
+  const configWithHandlers: AuthHeroConfig = {
     ...config,
     widgetHandler: serveStatic({
       root: widgetPath,
@@ -23,7 +30,28 @@ export default function createApp(config: AuthHeroConfig) {
     }),
   };
 
-  const { app } = init(configWithWidget);
+  // Add admin UI handler if the package is installed
+  if (fs.existsSync(adminIndexPath)) {
+    const issuer =
+      process.env.ISSUER || `https://localhost:${process.env.PORT || 3000}/`;
+    const rawHtml = fs.readFileSync(adminIndexPath, "utf-8")
+      .replace(/src="\.\/assets\//g, 'src="/admin/assets/')
+      .replace(/href="\.\/assets\//g, 'href="/admin/assets/');
+    const configJson = JSON.stringify({
+      domain: issuer.replace(/\/$/, ""),
+      basePath: "/admin",
+    }).replace(/</g, "\\u003c");
+    configWithHandlers.adminIndexHtml = rawHtml.replace(
+      "</head>",
+      `<script>window.__AUTHHERO_ADMIN_CONFIG__=${configJson};</script>\n</head>`,
+    );
+    configWithHandlers.adminHandler = serveStatic({
+      root: adminDistPath,
+      rewriteRequestPath: (p: string) => p.replace("/admin", ""),
+    });
+  }
+
+  const { app } = init(configWithHandlers);
 
   app
     .get("/", async (ctx: Context) => {

package/dist/local/src/index.ts

@@ -90,6 +90,7 @@ const app = createApp({
     "https://manage.authhero.net",
     "https://local.authhero.net",
     "http://localhost:5173",
+    "https://localhost:5173",
   ],
 });
 

package/package.json

@@ -5,7 +5,7 @@
     "type": "git",
     "url": "https://github.com/markusahlstrand/authhero"
   },
-  "version": "0.33.0",
+  "version": "0.35.0",
   "type": "module",
   "main": "dist/create-authhero.js",
   "bin": {
@@ -29,6 +29,7 @@
   },
   "scripts": {
     "build": "tsc && vite build",
+    "dev": "pnpm build && rm -rf auth-server && node dist/create-authhero.js auth-server --workspace --skip-install --skip-start && pnpm -w install --force --filter auth-server... && pnpm --filter auth-server migrate && pnpm --filter auth-server dev",
     "start": "pnpm build && node dist/create-authhero.js"
   }
 }