create-authhero 0.47.2 → 0.48.0

package/dist/aws-sst/src/index.ts

@@ -1,7 +1,7 @@
 import { handle } from "hono/aws-lambda";
 import { DynamoDBClient } from "@aws-sdk/client-dynamodb";
 import { DynamoDBDocumentClient } from "@aws-sdk/lib-dynamodb";
-import createAdapters from "@authhero/aws";
+import createAdapters from "@authhero/aws-adapter";
 import {
   DataAdapters,
   createEncryptedDataAdapter,

package/dist/aws-sst/sst.config.ts

@@ -61,7 +61,7 @@ export default $config({
         ENCRYPTION_KEY: process.env.ENCRYPTION_KEY ?? "",
       },
       nodejs: {
-        install: ["@authhero/aws"],
+        install: ["@authhero/aws-adapter"],
       },
     });
 

package/dist/create-authhero.js

@@ -30,7 +30,7 @@ var c = new e(), l = {
 					decrypt: "node --env-file=.env scripts/decrypt-field.mjs"
 				},
 				dependencies: {
-					"@authhero/kysely-adapter": a,
+					"@authhero/drizzle": a,
 					...i && { "@authhero/admin": a },
 					"@authhero/widget": a,
 					"@hono/swagger-ui": "^0.6.0",
@@ -38,8 +38,8 @@ var c = new e(), l = {
 					"@hono/node-server": "latest",
 					authhero: a,
 					"better-sqlite3": "latest",
+					"drizzle-orm": "^0.44.0",
 					hono: "^4.12.0",
-					kysely: "latest",
 					...t && { "@authhero/multi-tenancy": a },
 					...n && { bcryptjs: "latest" }
 				},
@@ -267,7 +267,7 @@ var c = new e(), l = {
 					decrypt: "node --env-file=.env scripts/decrypt-field.mjs"
 				},
 				dependencies: {
-					"@authhero/aws": a,
+					"@authhero/aws-adapter": a,
 					...i && { "@authhero/admin": a },
 					"@authhero/widget": a,
 					"@aws-sdk/client-dynamodb": "^3.0.0",
@@ -441,9 +441,10 @@ function d(e, t = !1, n = "authhero-local", r) {
     }
   }
 ` : "";
-	return `import { SqliteDialect, Kysely } from "kysely";
-import Database from "better-sqlite3";
-import createAdapters from "@authhero/kysely-adapter";
+	return `import Database from "better-sqlite3";
+import { drizzle } from "drizzle-orm/better-sqlite3";
+import createAdapters from "@authhero/drizzle";
+import * as schema from "@authhero/drizzle/schema/sqlite";
 import { seed, createEncryptedDataAdapter, loadEncryptionKey${t ? ", USERNAME_PASSWORD_PROVIDER" : ""} } from "authhero";
 
 interface ExtraClient {
@@ -493,11 +494,8 @@ async function main() {
     ? JSON.parse(userProfileJson)
     : {};
 
-  const dialect = new SqliteDialect({
-    database: new Database("db.sqlite"),
-  });
-
-  const db = new Kysely<any>({ dialect });
+  const sqlite = new Database("db.sqlite");
+  const db = drizzle(sqlite, { schema });
   let adapters = createAdapters(db);
 
   // Match the server: encrypt seeded secrets at rest when a key is configured.
@@ -544,7 +542,7 @@ async function main() {
     console.log(\`✅ Updated profile of user "\${seedResult.username}"\`);
   }
 ${f}
-  await db.destroy();
+  sqlite.close();
 }
 
 main().catch((err) => {
@@ -837,7 +835,7 @@ function h(e) {
 function g(e) {
 	return `import { DynamoDBClient } from "@aws-sdk/client-dynamodb";
 import { DynamoDBDocumentClient } from "@aws-sdk/lib-dynamodb";
-import createAdapters from "@authhero/aws";
+import createAdapters from "@authhero/aws-adapter";
 import { seed, createEncryptedDataAdapter, loadEncryptionKey } from "authhero";
 
 async function main() {

package/dist/local/src/index.ts

@@ -1,8 +1,8 @@
 import { serve } from "@hono/node-server";
-import { SqliteDialect } from "kysely";
-import { Kysely } from "kysely";
 import Database from "better-sqlite3";
-import createAdapters from "@authhero/kysely-adapter";
+import { drizzle, BetterSQLite3Database } from "drizzle-orm/better-sqlite3";
+import createAdapters from "@authhero/drizzle";
+import * as schema from "@authhero/drizzle/schema/sqlite";
 import { createEncryptedDataAdapter, loadEncryptionKey } from "authhero";
 import createApp from "./app";
 import fs from "fs";
@@ -85,12 +85,9 @@ function ensureCertificates() {
 }
 
 // Initialize SQLite database
-let db: Kysely<any>;
+let db: BetterSQLite3Database<typeof schema>;
 try {
-  const dialect = new SqliteDialect({
-    database: new Database("db.sqlite"),
-  });
-  db = new Kysely<any>({ dialect });
+  db = drizzle(new Database("db.sqlite"), { schema });
 } catch (error) {
   console.error("❌ Failed to initialize database:");
   console.error(

package/dist/local/src/migrate.ts

@@ -1,25 +1,26 @@
-import { SqliteDialect, Kysely } from "kysely";
 import Database from "better-sqlite3";
-import { migrateToLatest } from "@authhero/kysely-adapter";
+import { drizzle } from "drizzle-orm/better-sqlite3";
+import { migrate } from "drizzle-orm/better-sqlite3/migrator";
 
-async function migrate() {
-  const dialect = new SqliteDialect({
-    database: new Database("db.sqlite"),
-  });
+// Migrations are pre-generated and shipped with the @authhero/drizzle package.
+// The schema is managed by AuthHero — do not generate your own migrations.
+const migrationsFolder = "node_modules/@authhero/drizzle/drizzle";
 
-  const db = new Kysely<any>({ dialect });
+function migrateDb() {
+  const sqlite = new Database("db.sqlite");
+  const db = drizzle(sqlite);
 
   console.log("Running migrations...");
 
   try {
-    await migrateToLatest(db, true);
+    migrate(db, { migrationsFolder });
     console.log("✅ All migrations completed successfully");
   } catch (error) {
     console.error("Migration failed:", error);
     process.exit(1);
   } finally {
-    await db.destroy();
+    sqlite.close();
   }
 }
 
-migrate();
+migrateDb();

package/dist/proxy/README.md

@@ -29,34 +29,35 @@ export const proxyConfig: StaticProxyAdapterOptions = {
 
 The proxy reads its routes through a `ProxyDataAdapter`. Three implementations are common:
 
-| Adapter | Best for | Notes |
-| --- | --- | --- |
-| **Static** (default) | Local dev, small fixed deployments | Routes baked into the worker bundle; re-deploy to change them. |
-| **Database** | Same-process or co-located deployments | Reads directly from the proxy_routes table that authhero writes to. |
+| Adapter                   | Best for                                           | Notes                                                                      |
+| ------------------------- | -------------------------------------------------- | -------------------------------------------------------------------------- |
+| **Static** (default)      | Local dev, small fixed deployments                 | Routes baked into the worker bundle; re-deploy to change them.             |
+| **Database**              | Same-process or co-located deployments             | Reads directly from the proxy_routes table that authhero writes to.        |
 | **HTTP / management API** | Geographically distributed proxies, hosted Workers | Calls `/api/v2/proxy-routes` on your authhero server with a service token. |
 
 The authhero server exposes the management API (`/api/v2/proxy-routes`) and creates the underlying table automatically once the standard adapter migrations have run — see the `local` template's [src/index.ts](../local/src/index.ts).
 
-### Database-backed (Kysely)
+### Database-backed (Drizzle)
 
-Add the adapter and your Kysely driver, then swap the data line:
+Add the adapter and drizzle-orm, then swap the data line:
 
 ```bash
-npm install @authhero/kysely-adapter kysely
+npm install @authhero/drizzle drizzle-orm
 ```
 
 ```ts
-import { Kysely } from "kysely";
+import { drizzle } from "drizzle-orm/d1";
 import { createProxyApp } from "@authhero/proxy";
-import { createProxyDataAdapter } from "@authhero/kysely-adapter";
+import { createProxyDataAdapter } from "@authhero/drizzle";
+import * as schema from "@authhero/drizzle/schema/sqlite";
 
-const db = new Kysely({ dialect: /* your dialect */ });
+const db = drizzle(env.AUTH_DB, { schema });
 const app = createProxyApp({
   data: createProxyDataAdapter(db),
 });
 ```
 
-Cloudflare Workers can't open SQLite files, so on Workers this path means D1, Hyperdrive, or a remote MySQL/Postgres. For a local Node process, `better-sqlite3` pointing at the same `db.sqlite` your authhero server uses works out of the box.
+On Cloudflare Workers this reads from the same D1 database your authhero worker uses. For a local Node process, use `drizzle-orm/better-sqlite3` pointing at the same `db.sqlite` your authhero server uses. (If your routes live in MySQL/Postgres, `@authhero/kysely-adapter` exposes the same `createProxyDataAdapter` for Kysely dialects.)
 
 ### HTTP-backed (management API)
 
@@ -87,7 +88,7 @@ interface Env {
 
 function createHttpProxyAdapter(env: Env): ProxyDataAdapter {
   const headers = {
-    "authorization": `Bearer ${env.AUTHHERO_SERVICE_TOKEN}`,
+    authorization: `Bearer ${env.AUTHHERO_SERVICE_TOKEN}`,
     "tenant-id": env.AUTHHERO_TENANT_ID,
   };
 
@@ -101,16 +102,29 @@ function createHttpProxyAdapter(env: Env): ProxyDataAdapter {
     // The proxy data plane only needs resolveHost; the CRUD methods on
     // proxyRoutes stay unused (writes always go through authhero directly).
     proxyRoutes: {
-      list: () => { throw new Error("read-only proxy adapter"); },
-      get: () => { throw new Error("read-only proxy adapter"); },
-      create: () => { throw new Error("read-only proxy adapter"); },
-      update: () => { throw new Error("read-only proxy adapter"); },
-      remove: () => { throw new Error("read-only proxy adapter"); },
+      list: () => {
+        throw new Error("read-only proxy adapter");
+      },
+      get: () => {
+        throw new Error("read-only proxy adapter");
+      },
+      create: () => {
+        throw new Error("read-only proxy adapter");
+      },
+      update: () => {
+        throw new Error("read-only proxy adapter");
+      },
+      remove: () => {
+        throw new Error("read-only proxy adapter");
+      },
     },
     async resolveHost(host): Promise<ResolvedHost | null> {
-      const domains = await api<{ custom_domains: Array<{
-        custom_domain_id: string; domain: string;
-      }> }>("/api/v2/custom-domains");
+      const domains = await api<{
+        custom_domains: Array<{
+          custom_domain_id: string;
+          domain: string;
+        }>;
+      }>("/api/v2/custom-domains");
       const match = domains.custom_domains.find((d) => d.domain === host);
       if (!match) return null;
 

package/package.json

@@ -5,7 +5,7 @@
     "type": "git",
     "url": "https://github.com/markusahlstrand/authhero"
   },
-  "version": "0.47.2",
+  "version": "0.48.0",
   "type": "module",
   "main": "dist/create-authhero.js",
   "bin": {
@@ -22,7 +22,8 @@
     "@types/node": "^20.19.41",
     "tsx": "^4.22.3",
     "typescript": "^5.5.2",
-    "vite": "^8.0.14"
+    "vite": "^8.0.14",
+    "vitest": "^4.1.7"
   },
   "dependencies": {
     "commander": "^12.1.0",
@@ -31,6 +32,8 @@
   "scripts": {
     "build": "tsc && vite build",
     "dev": "pnpm build && rm -rf auth-server && node dist/create-authhero.js auth-server --workspace --skip-install --skip-start && pnpm -w install --force --filter auth-server... && pnpm --filter auth-server migrate && pnpm --filter auth-server dev",
-    "start": "pnpm build && node dist/create-authhero.js"
+    "start": "pnpm build && node dist/create-authhero.js",
+    "test": "vitest run",
+    "test:watch": "vitest"
   }
 }