create-githat-app 1.0.16 → 1.0.17

package/dist/cli.js

@@ -11,7 +11,7 @@ import gradient from "gradient-string";
 import chalk from "chalk";
 
 // src/constants.ts
-var VERSION = "1.0.16";
+var VERSION = "1.0.17";
 var DEFAULT_API_URL = "https://api.githat.io";
 var DASHBOARD_URL = "https://githat.io/dashboard/apps";
 var BRAND_COLORS = ["#7c3aed", "#6366f1", "#8b5cf6"];
@@ -167,6 +167,16 @@ function sectionHeader(title) {
   console.log(dim(`  \u2500\u2500\u2500 ${title} ${"\u2500".repeat(lineLen)}`));
   console.log("");
 }
+function keyNextSteps() {
+  return [
+    chalk.bold("Next:") + " add your GitHat key",
+    `  1. Open ${violet(".env.local")}`,
+    `  2. Paste your key from ${violet("https://githat.io/dashboard/apps")}`,
+    `  3. Run ${violet("npm run dev")} again`,
+    dim("   (.env.local is gitignored \u2014 your key never gets committed.)"),
+    ""
+  ];
+}
 function displaySuccess(projectName, packageManager, framework, hasPublishableKey = true, isFullstack = false) {
   const devCmd = packageManager === "npm" ? "npm run dev" : `${packageManager} dev`;
   const port = framework === "react-vite" ? "5173" : "3000";
@@ -186,11 +196,7 @@ function displaySuccess(projectName, packageManager, framework, hasPublishableKe
       `${violet("apps/api")}       API backend`,
       `${violet("packages/")}      Shared code`,
       "",
-      ...hasPublishableKey ? [] : [
-        chalk.yellow("No key configured \u2014 auth works on localhost."),
-        `For production: ${violet("githat.io/dashboard/apps")}`,
-        ""
-      ],
+      ...hasPublishableKey ? [] : keyNextSteps(),
       dim("Docs \u2192 https://githat.io/docs/sdk")
     ]);
   } else {
@@ -207,11 +213,7 @@ function displaySuccess(projectName, packageManager, framework, hasPublishableKe
       `${violet("/sign-up")}       Create account`,
       `${violet("/dashboard")}     Protected dashboard`,
       "",
-      ...hasPublishableKey ? [] : [
-        chalk.yellow("No key configured \u2014 auth works on localhost."),
-        `For production: ${violet("githat.io/dashboard/apps")}`,
-        ""
-      ],
+      ...hasPublishableKey ? [] : keyNextSteps(),
       dim("Docs \u2192 https://githat.io/docs/sdk")
     ]);
   }
@@ -1640,23 +1642,25 @@ skillsCommand.action(() => {
 // src/cli.ts
 var program = new Command7();
 program.name("githat").description("GitHat CLI - Scaffold apps and manage skills").version(VERSION);
-program.command("create [project-name]", { isDefault: true }).description("Scaffold a new GitHat app").option("--key <key>", "GitHat publishable key (pk_live_...)").option("--ts", "Use TypeScript (default)").option("--js", "Use JavaScript").option("--plain", "Smallest scaffold: auth + a homepage. No dashboard.").option("--saas", "B2B starter: orgs, teams, RBAC, subscription billing.").option("--marketplace", "Multi-vendor commerce: anonymous-first browsing, Sebastn Connect.").option("--agent", "Web4 wallet-bound autonomous agent + MCP server registration.").option("--content", "Paywalled posts, newsletter, one-time purchases via Sebastn.").option("--dashboard", "Admin UI over your existing database, auth-gated.").option("--portfolio", "Personal portfolio: public projects, auth-gated editor.").option("--classroom", "Live student presentations with real-time audience feedback.").option("--fullstack", "Create fullstack project (Turborepo)").option("--backend <framework>", "Backend framework (hono, express, fastify)").option("-y, --yes", "Skip prompts and use defaults").action(async (projectName, opts) => {
+program.command("create [project-name]", { isDefault: true }).description("Scaffold a new GitHat app").option("--key <key>", "CI only: bake key into .env.local. Default flow is paste into .env.local after scaffold.").option("--ts", "Use TypeScript (default)").option("--js", "Use JavaScript").option("--plain", "Smallest scaffold: auth + a homepage. No dashboard.").option("--saas", "B2B starter: orgs, teams, RBAC, subscription billing.").option("--marketplace", "Multi-vendor commerce: anonymous-first browsing, Sebastn Connect.").option("--agent", "Web4 wallet-bound autonomous agent + MCP server registration.").option("--content", "Paywalled posts, newsletter, one-time purchases via Sebastn.").option("--dashboard", "Admin UI over your existing database, auth-gated.").option("--portfolio", "Personal portfolio: public projects, auth-gated editor.").option("--classroom", "Live student presentations with real-time audience feedback.").option("--fullstack", "Create fullstack project (Turborepo)").option("--backend <framework>", "Backend framework (hono, express, fastify)").option("-y, --yes", "Skip prompts and use defaults").action(async (projectName, opts) => {
   try {
     displayBanner();
     if (!opts.yes && !opts.key) {
       p12.note(
         [
-          chalk10.bold("Two ways to connect this app to GitHat:"),
+          chalk10.bold("How the GitHat key flow works:"),
+          "",
+          `  ${chalk10.cyan("1.")} We'll scaffold your project with a placeholder`,
+          `     in ${chalk10.bold(".env.local")} (gitignored \u2014 safe to keep secrets here)`,
           "",
-          `  ${chalk10.cyan("1.")} ${chalk10.bold("Already signed up?")}  Pass your key:`,
-          `       ${chalk10.dim("npx create-githat-app my-app --key pk_live_...")}`,
-          `       Get the key at ${chalk10.cyan("https://githat.io/dashboard/apps")}`,
+          `  ${chalk10.cyan("2.")} You open ${chalk10.cyan("https://githat.io/dashboard/apps")}`,
+          `     and copy your publishable key`,
           "",
-          `  ${chalk10.cyan("2.")} ${chalk10.bold("Don't have an account yet?")}  Press Enter`,
-          `       below \u2014 we'll open a browser, you sign up in 30s,`,
-          `       and the key is stitched in for you.`,
+          `  ${chalk10.cyan("3.")} You paste it into ${chalk10.bold(".env.local")} and run`,
+          `     ${chalk10.dim("npm run dev")}`,
           "",
-          chalk10.dim("Either path lands you in the same place.")
+          chalk10.dim("Why not pass the key on the command line? Shell"),
+          chalk10.dim("history is forever. .env.local is more secure.")
         ].join("\n"),
         "First time with GitHat?"
       );

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-githat-app",
-  "version": "1.0.16",
+  "version": "1.0.17",
   "description": "GitHat CLI — scaffold apps and manage the skills marketplace",
   "type": "module",
   "bin": {

package/templates/base/.env.local.hbs

@@ -1,10 +1,21 @@
 {{#ifNext framework}}
+# ─── GitHat publishable key ──────────────────────────────────────────────
+# Paste your key from https://githat.io/dashboard/apps below.
+# This file is gitignored — your key never gets committed by accident.
+# (Don't put real keys on the command line. Shell history is forever.)
 NEXT_PUBLIC_GITHAT_PUBLISHABLE_KEY={{publishableKey}}
 NEXT_PUBLIC_GITHAT_API_URL={{apiUrl}}
 {{else}}
+# ─── GitHat publishable key ──────────────────────────────────────────────
+# Paste your key from https://githat.io/dashboard/apps below.
+# This file is gitignored — your key never gets committed by accident.
+# (Don't put real keys on the command line. Shell history is forever.)
 VITE_GITHAT_PUBLISHABLE_KEY={{publishableKey}}
 VITE_GITHAT_API_URL={{apiUrl}}
 {{/ifNext}}
 {{#if useDatabase}}
+
+# ─── Database ────────────────────────────────────────────────────────────
+# Replace with your real connection string.
 DATABASE_URL="postgresql://user:password@localhost:5432/{{projectName}}"
 {{/if}}

package/templates/base/.gitignore.hbs

@@ -1,11 +1,26 @@
 node_modules
-{{#ifEquals framework "nextjs"}}
+{{#ifNext framework}}
 .next
 out
 {{else}}
 dist
-{{/ifEquals}}
+{{/ifNext}}
+
+# Environment files — NEVER commit these. Real keys live here.
+# `.env.local`, `.env.development.local`, `.env.production.local`,
+# and any per-package `.env*.local` are matched by the patterns below.
 .env
+.env.local
 .env*.local
+.env.*.local
+
+# OS / editor
 .DS_Store
 *.tgz
+.idea/
+.vscode/
+
+# Logs / coverage
+*.log
+.turbo/
+coverage/