create-githat-app 1.0.5 → 1.0.7

package/README.md

@@ -1,5 +1,19 @@
+<div align="center">
+
 # create-githat-app
 
+**The CLI for [GitHat](https://githat.io) — Auth + Hosting that replaces Clerk + Vercel**
+
+[![npm version](https://img.shields.io/npm/v/create-githat-app?style=flat-square&logo=npm&logoColor=white&color=cb3837)](https://www.npmjs.com/package/create-githat-app)
+[![npm downloads](https://img.shields.io/npm/dm/create-githat-app?style=flat-square&logo=npm&logoColor=white&color=cb3837)](https://www.npmjs.com/package/create-githat-app)
+[![SDK](https://img.shields.io/npm/v/@githat/nextjs?style=flat-square&logo=npm&logoColor=white&label=%40githat%2Fnextjs&color=cb3837)](https://www.npmjs.com/package/@githat/nextjs)
+[![Website](https://img.shields.io/website?style=flat-square&url=https%3A%2F%2Fgithat.io&up_message=live&up_color=1f6feb&label=githat.io)](https://githat.io)
+[![License](https://img.shields.io/badge/license-MIT-blue?style=flat-square)](LICENSE)
+
+</div>
+
+---
+
 Scaffold a production-ready app with a fully-managed backend — auth, teams, orgs, API keys, MCP verification, and AI agent identity. **No backend to deploy.**
 
 [GitHat](https://githat.io) is your backend. When you run `create-githat-app`, your generated project connects to GitHat's hosted platform at `api.githat.io`. User accounts, organizations, teams, API keys, MCP servers, and AI agents are all stored and managed by GitHat. You write frontend code only.
@@ -263,6 +277,19 @@ VITE_GITHAT_PUBLISHABLE_KEY=pk_live_...
 VITE_GITHAT_API_URL=https://api.githat.io
 ```
 
+## Documentation
+
+- [GitHat Quick Start](https://githat.io/docs/quickstart) — Get running in 5 minutes
+- [SDK Reference](https://githat.io/docs/sdk) — `@githat/nextjs` hooks, components, and server utils
+- [API Reference](https://githat.io/docs/api) — All 86 REST endpoints
+- [CLI Reference](https://githat.io/docs/cli) — Flags, prompts, and templates
+- [Next.js Guide](https://githat.io/docs/nextjs) — Auth in Next.js 14-16+
+- [React Guide](https://githat.io/docs/react) — Auth in any React app
+- [Bring Your Own Database](https://githat.io/docs/byod) — Keep your PostgreSQL, MySQL, or MongoDB
+- [MCP Servers](https://githat.io/docs/mcp) — Domain verification for AI tool servers
+- [AI Agents](https://githat.io/docs/agents) — Wallet-based identity for autonomous agents
+- [Skills Marketplace](https://githat.io/docs/skills) — Install templates, integrations, and workflows
+
 ## Contributing
 
 ```bash
@@ -273,6 +300,14 @@ npm run build
 node bin/index.js test-app
 ```
 
+## Related
+
+- [@githat/nextjs](https://www.npmjs.com/package/@githat/nextjs) — React/Next.js SDK
+- [GitHat Platform](https://githat.io) — Auth + Hosting replacing Clerk + Vercel
+- [GitHat Pricing](https://githat.io/pricing) — Free, Pro, and Enterprise tiers
+- [GitHat vs Clerk](https://githat.io/compare/githat-vs-clerk) — Feature comparison
+- [GitHat vs Auth0](https://githat.io/compare/githat-vs-auth0) — Why developers switch
+
 ## License
 
 MIT

package/dist/cli.js

@@ -11,7 +11,7 @@ import gradient from "gradient-string";
 import chalk from "chalk";
 
 // src/constants.ts
-var VERSION = "1.0.5";
+var VERSION = "1.0.6";
 var DEFAULT_API_URL = "https://api.githat.io";
 var DASHBOARD_URL = "https://githat.io/dashboard/apps";
 var BRAND_COLORS = ["#7c3aed", "#6366f1", "#8b5cf6"];
@@ -281,12 +281,12 @@ async function promptProjectType() {
           {
             value: "frontend",
             label: "Frontend only",
-            hint: "Next.js with API routes"
+            hint: "Next.js or React+Vite"
           },
           {
             value: "fullstack",
             label: "Fullstack",
-            hint: "Next.js + separate API (Turborepo)"
+            hint: "Next.js + API (Turborepo)"
           }
         ]
       })
@@ -325,16 +325,17 @@ function getInstallCommand(pm) {
 }
 
 // src/prompts/framework.ts
-async function promptFramework(typescriptOverride) {
+async function promptFramework(typescriptOverride, isFullstack) {
   const packageManager = detectPackageManager();
+  const frameworkOptions = isFullstack ? [{ value: "nextjs", label: "Next.js 16", hint: "App Router \xB7 SSR \xB7 middleware auth" }] : [
+    { value: "nextjs", label: "Next.js 16", hint: "App Router \xB7 SSR \xB7 middleware auth" },
+    { value: "react-vite", label: "React 19 + Vite 7", hint: "SPA \xB7 client-side routing" }
+  ];
   const answers = await p3.group(
     {
       framework: () => p3.select({
         message: "Framework",
-        options: [
-          { value: "nextjs", label: "Next.js 16", hint: "App Router \xB7 SSR \xB7 middleware auth" },
-          { value: "react-vite", label: "React 19 + Vite 7", hint: "SPA \xB7 client-side routing" }
-        ]
+        options: frameworkOptions
       }),
       typescript: () => typescriptOverride !== void 0 ? Promise.resolve(typescriptOverride) : p3.select({
         message: "Language",
@@ -397,7 +398,77 @@ async function promptBackend() {
 }
 
 // src/prompts/githat.ts
+import { execSync } from "child_process";
 import * as p5 from "@clack/prompts";
+function openBrowser(url) {
+  try {
+    const cmd = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open";
+    execSync(`${cmd} "${url}"`, { stdio: "ignore" });
+  } catch {
+  }
+}
+function sleep(ms) {
+  return new Promise((resolve4) => setTimeout(resolve4, ms));
+}
+async function deviceAuthFlow() {
+  const spinner2 = p5.spinner();
+  try {
+    spinner2.start("Requesting device code...");
+    const codeRes = await fetch(`${DEFAULT_API_URL}/auth/device/code`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ client_name: "create-githat-app" })
+    });
+    if (!codeRes.ok) {
+      spinner2.stop("Failed to get device code");
+      return null;
+    }
+    const codeData = await codeRes.json();
+    spinner2.stop("Device code generated");
+    p5.note(
+      `Code: ${codeData.user_code}
+
+Opening browser to complete sign-in...
+If it doesn't open, visit: ${codeData.verification_uri_complete}`,
+      "Authorize Device"
+    );
+    openBrowser(codeData.verification_uri_complete);
+    spinner2.start("Waiting for browser authorization...");
+    const expiresAt = Date.now() + codeData.expires_in * 1e3;
+    const pollInterval = (codeData.interval || 5) * 1e3;
+    while (Date.now() < expiresAt) {
+      await sleep(pollInterval);
+      const tokenRes = await fetch(`${DEFAULT_API_URL}/auth/device/token`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ device_code: codeData.device_code })
+      });
+      const tokenData = await tokenRes.json();
+      if (tokenData.error === "authorization_pending") {
+        continue;
+      }
+      if (tokenData.error === "expired_token") {
+        spinner2.stop("Device code expired");
+        p5.log.error("Authorization timed out. Please try again.");
+        return null;
+      }
+      if (tokenData.publishable_key) {
+        spinner2.stop("Authorized!");
+        p5.log.success(`Connected to ${tokenData.app_name || "your app"} (${tokenData.org_name || "your org"})`);
+        return tokenData.publishable_key;
+      }
+      spinner2.stop("Authorization failed");
+      return null;
+    }
+    spinner2.stop("Timed out");
+    p5.log.error("Authorization timed out. Please try again.");
+    return null;
+  } catch (err) {
+    spinner2.stop("Connection error");
+    p5.log.error("Failed to connect to GitHat API. Check your internet connection.");
+    return null;
+  }
+}
 async function promptGitHat(existingKey) {
   let publishableKey = existingKey || "";
   if (!publishableKey) {
@@ -405,6 +476,7 @@ async function promptGitHat(existingKey) {
       message: "Connect to GitHat",
       options: [
         { value: "skip", label: "Skip for now", hint: "auth works on localhost \u2014 add key later" },
+        { value: "browser", label: "Sign in with browser", hint: "opens githat.io to authorize" },
         { value: "paste", label: "I have a key", hint: "paste your pk_live_... key" }
       ]
     });
@@ -412,7 +484,14 @@ async function promptGitHat(existingKey) {
       p5.cancel("Setup cancelled.");
       process.exit(0);
     }
-    if (connectChoice === "paste") {
+    if (connectChoice === "browser") {
+      const key = await deviceAuthFlow();
+      if (key) {
+        publishableKey = key;
+      } else {
+        p5.log.warn("Authorization failed. Continuing without key...");
+      }
+    } else if (connectChoice === "paste") {
       const pastedKey = await p5.text({
         message: "Publishable key",
         placeholder: `pk_live_... (get one at ${DASHBOARD_URL})`,
@@ -535,9 +614,10 @@ async function runPrompts(args) {
   const project = await promptProject(args.initialName);
   const projectType = await promptProjectType();
   sectionHeader("Stack");
-  const framework = await promptFramework(args.typescript);
+  const isFullstack = projectType.projectType === "fullstack";
+  const framework = await promptFramework(args.typescript, isFullstack);
   let backend = {};
-  if (projectType.projectType === "fullstack") {
+  if (isFullstack) {
     backend = await promptBackend();
   }
   sectionHeader("Connect");
@@ -579,7 +659,7 @@ function answersToContext(answers) {
 // src/scaffold/index.ts
 import fs3 from "fs-extra";
 import path3 from "path";
-import { execSync as execSync2 } from "child_process";
+import { execSync as execSync3 } from "child_process";
 import * as p9 from "@clack/prompts";
 import chalk2 from "chalk";
 
@@ -701,25 +781,25 @@ function createSpinner(text4) {
   return ora({ text: text4, color: "magenta" });
 }
 async function withSpinner(text4, fn, successText) {
-  const spinner = createSpinner(text4);
-  spinner.start();
+  const spinner2 = createSpinner(text4);
+  spinner2.start();
   try {
     const result = await fn();
-    spinner.succeed(successText || text4);
+    spinner2.succeed(successText || text4);
     return result;
   } catch (err) {
-    spinner.fail(text4);
+    spinner2.fail(text4);
     throw err;
   }
 }
 
 // src/utils/git.ts
-import { execSync } from "child_process";
+import { execSync as execSync2 } from "child_process";
 function initGit(cwd) {
   try {
-    execSync("git init", { cwd, stdio: "ignore" });
-    execSync("git add -A", { cwd, stdio: "ignore" });
-    execSync('git commit -m "Initial commit from create-githat-app"', {
+    execSync2("git init", { cwd, stdio: "ignore" });
+    execSync2("git add -A", { cwd, stdio: "ignore" });
+    execSync2('git commit -m "Initial commit from create-githat-app"', {
       cwd,
       stdio: "ignore"
     });
@@ -776,7 +856,7 @@ async function scaffold(context, options) {
       `Installing dependencies with ${context.packageManager}...`,
       async () => {
         try {
-          execSync2(installCmd, { cwd: root, stdio: "ignore", timeout: 12e4 });
+          execSync3(installCmd, { cwd: root, stdio: "ignore", timeout: 12e4 });
         } catch (err) {
           const msg = err.message || "";
           if (msg.includes("TIMEOUT")) {
@@ -799,7 +879,7 @@ async function scaffold(context, options) {
     if (!p9.isCancel(starPrompt) && starPrompt) {
       try {
         const cmd = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open";
-        execSync2(`${cmd} "https://github.com/GitHat-IO/githat"`, { stdio: "ignore" });
+        execSync3(`${cmd} "https://github.com/GitHat-IO/githat"`, { stdio: "ignore" });
       } catch {
         p9.log.info("Visit https://github.com/GitHat-IO/githat to star us!");
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-githat-app",
-  "version": "1.0.5",
+  "version": "1.0.7",
   "description": "GitHat CLI — scaffold apps and manage the skills marketplace",
   "type": "module",
   "bin": {