create-githat-app 1.2.3 → 1.4.0

package/templates/base/.github/workflows/ci.yml.hbs

@@ -0,0 +1,77 @@
+name: CI
+
+on:
+  push:
+    branches: ["main", "master"]
+  pull_request:
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    permissions:
+      contents: read
+      issues: write
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+          cache: "npm"
+
+      - name: Install dependencies
+        run: npm install
+
+      - name: Run tests
+        run: npm test --if-present
+
+      - name: Build
+        run: npm run build --if-present
+
+      - name: Notify on failure
+        if: failure()
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const workflowName = context.workflow;
+            const sha = context.sha.slice(0, 7);
+            const runUrl = `${context.serverUrl}/${context.repo.owner}/${context.repo.repo}/actions/runs/${context.runId}`;
+            const marker = `<!-- workflow:${workflowName} -->`;
+            const title = `CI failure: ${workflowName} on ${sha}`;
+            const body = [
+              marker,
+              `**Workflow:** ${workflowName}`,
+              `**Commit:** ${context.sha}`,
+              `**Branch:** ${context.ref}`,
+              `**Run:** ${runUrl}`,
+            ].join('\n');
+
+            // Search for an existing open ci-failure issue for this workflow
+            const { data: issues } = await github.rest.issues.listForRepo({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              labels: 'ci-failure',
+              state: 'open',
+            });
+
+            const existing = issues.find(i => i.body && i.body.includes(marker));
+
+            if (existing) {
+              await github.rest.issues.createComment({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                issue_number: existing.number,
+                body: `New failure on run [${context.runId}](${runUrl}) at \`${sha}\``,
+              });
+            } else {
+              await github.rest.issues.create({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                title,
+                body,
+                labels: ['ci-failure'],
+              });
+            }

package/templates/base/.github/workflows/githat-policy.yml

@@ -0,0 +1,51 @@
+name: GitHat Platform Policy
+
+on:
+  pull_request:
+    types: [opened, edited, reopened]
+
+jobs:
+  enforce-auth-policy:
+    runs-on: ubuntu-latest
+
+    permissions:
+      pull-requests: write
+
+    steps:
+      - name: Close alt-auth PRs
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const title = context.payload.pull_request.title;
+            const altAuthPattern = /(?i)(cognito|hand-rolled oauth|auth0|clerk|firebase auth)/;
+
+            // JavaScript RegExp — use the 'i' flag directly
+            const pattern = /(cognito|hand-rolled oauth|auth0|clerk|firebase auth)/i;
+
+            if (!pattern.test(title)) {
+              return; // Nothing to do
+            }
+
+            const prNumber = context.payload.pull_request.number;
+
+            // Post the policy explanation comment
+            await github.rest.issues.createComment({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              issue_number: prNumber,
+              body: [
+                'GitHat is the auth platform for every app in this portfolio.',
+                'Hand-rolled OAuth, Cognito, Auth0, Clerk, and Firebase Auth proposals are not the direction.',
+                'Auth flows through `@githat/nextjs` and `api.githat.io` for human users,',
+                'autonomous agents, and MCP servers.',
+                'Closing per platform policy.',
+              ].join(' '),
+            });
+
+            // Close the PR
+            await github.rest.pulls.update({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              pull_number: prNumber,
+              state: 'closed',
+            });

package/templates/base/.gitignore.hbs

@@ -1,11 +1,26 @@
 node_modules
-{{#ifEquals framework "nextjs"}}
+{{#ifNext framework}}
 .next
 out
 {{else}}
 dist
-{{/ifEquals}}
+{{/ifNext}}
+
+# Environment files — NEVER commit these. Real keys live here.
+# `.env.local`, `.env.development.local`, `.env.production.local`,
+# and any per-package `.env*.local` are matched by the patterns below.
 .env
+.env.local
 .env*.local
+.env.*.local
+
+# OS / editor
 .DS_Store
 *.tgz
+.idea/
+.vscode/
+
+# Logs / coverage
+*.log
+.turbo/
+coverage/

package/templates/base/README.md.hbs

@@ -1,23 +1,21 @@
 # {{projectName}}
 
-Built with [GitHat](https://githat.io) — your backend is already set up. Auth, teams, orgs, API keys, MCP verification, and AI agent identity are handled by GitHat's hosted platform.
+Built with [GitHat](https://githat.io) — auth, teams, orgs, API keys, MCP verification, and AI agent identity are handled by GitHat's hosted platform.
 
 ## Getting Started
 
-1. Install dependencies:
+1. Copy the env file and fill in your GitHat key:
 
 ```bash
-{{#ifEquals packageManager "yarn"}}yarn{{else}}{{packageManager}} install{{/ifEquals}}
+cp .env.local.example .env.local
 ```
 
-2. Add your GitHat publishable key to `{{#ifEquals framework "nextjs"}}.env.local{{else}}.env{{/ifEquals}}`:
+2. Install dependencies:
 
-```env
-{{#ifEquals framework "nextjs"}}NEXT_PUBLIC_GITHAT_PUBLISHABLE_KEY{{else}}VITE_GITHAT_PUBLISHABLE_KEY{{/ifEquals}}=pk_live_your_key_here
+```bash
+{{#ifEquals packageManager "yarn"}}yarn{{else}}{{packageManager}} install{{/ifEquals}}
 ```
 
-Get your key at [githat.io/dashboard/apps](https://githat.io/dashboard/apps).
-
 3. Start the dev server:
 
 ```bash
@@ -26,36 +24,11 @@ Get your key at [githat.io/dashboard/apps](https://githat.io/dashboard/apps).
 
 4. Open [http://localhost:{{#ifEquals framework "nextjs"}}3000{{else}}5173{{/ifEquals}}](http://localhost:{{#ifEquals framework "nextjs"}}3000{{else}}5173{{/ifEquals}})
 
-## Your Backend
-
-All API calls go to `api.githat.io`. Your data is stored in GitHat's database. **No backend to deploy.**
-
-GitHat handles:
-
-- User auth (sign-up, sign-in, email verification, password reset)
-- Organizations (create, switch, branding)
-- Team management (invite members, assign roles)
-- API key management (publishable + secret keys)
-{{#if includeMcpModule}}- MCP server registration and domain verification
-{{/if}}{{#if includeAgentModule}}- AI agent registration and wallet verification
-{{/if}}- Email delivery (verification, invitations, password resets)
-
-The `githat/` folder in your project is a typed API client that talks to `api.githat.io`. You write frontend code, GitHat handles the rest.
-
-Manage everything at [githat.io/dashboard](https://githat.io/dashboard).
-
-## Pages
-
-- `/sign-in` — Sign in
-- `/sign-up` — Create account
-{{#if includeForgotPassword}}- `/forgot-password` — Password recovery
-{{/if}}{{#if includeDashboard}}- `/dashboard` — Protected dashboard
-{{/if}}{{#if includeOrgManagement}}- `/dashboard/members` — Invite members, manage roles
-{{/if}}
+Your `NEXT_PUBLIC_GITHAT_PUBLISHABLE_KEY` is required — get it at [githat.io/dashboard/apps](https://githat.io/dashboard/apps) or re-run `create-githat-app` after running `githat login` to have it auto-registered.
 
 ## GitHat SDK
 
-This project uses [`@githat/nextjs`](https://www.npmjs.com/package/@githat/nextjs) for connecting to the GitHat platform:
+This project uses [`@githat/nextjs`](https://www.npmjs.com/package/@githat/nextjs):
 
 ```{{#if typescript}}tsx{{else}}jsx{{/if}}
 import { useAuth, UserButton, OrgSwitcher } from '@githat/nextjs';
@@ -63,32 +36,38 @@ import { useAuth, UserButton, OrgSwitcher } from '@githat/nextjs';
 const { user, org, signIn, signUp, signOut } = useAuth();
 ```
 
-## Deploy
+## Deploy to EC2 via GitHub Actions
 
-{{#ifEquals framework "nextjs"}}### Vercel (recommended)
+The scaffolded `.github/workflows/deploy.yml` deploys the Next.js standalone bundle to an EC2 instance on every push to `main`.
 
-```bash
-npx vercel
-```
+**Required GitHub repo secrets:**
 
-Add `NEXT_PUBLIC_GITHAT_PUBLISHABLE_KEY` to your Vercel project environment variables.
-{{else}}### Vercel
+| Secret | Description |
+|--------|-------------|
+| `SSH_PRIVATE_KEY` | Private key whose public key is in the EC2 instance's `~/.ssh/authorized_keys` |
+| `EC2_HOST` | `ubuntu@<ec2-ip-or-hostname>` |
+| `PROD_ENV` | Full contents of your production `.env` file (set via `gh secret set PROD_ENV < .env.local`) |
+| `GITHAT_PUBLISHABLE_KEY` | Your GitHat publishable key (baked into the client bundle at build time) |
 
-```bash
-npx vercel
-```
+**One-time EC2 setup:**
 
-### Netlify
+1. Create a systemd service at `/etc/systemd/system/{{projectName}}.service` that runs `node /opt/{{projectName}}/server.js` with `PORT=3000`.
+2. Create `/opt/{{projectName}}/` owned by your deploy user.
+3. Enable the service: `sudo systemctl enable {{projectName}}`.
 
-```bash
-npx netlify deploy
-```
+After that, every `git push origin main` triggers a build + rsync + restart. The workflow smoke-tests `/api/health` before reporting success.
 
-Add `VITE_GITHAT_PUBLISHABLE_KEY` to your hosting provider's environment variables.
-{{/ifEquals}}
+## Pages
+
+- `/sign-in` — Sign in
+- `/sign-up` — Create account
+{{#if includeForgotPassword}}- `/forgot-password` — Password recovery
+{{/if}}{{#if includeDashboard}}- `/dashboard` — Protected dashboard
+{{/if}}{{#if includeOrgManagement}}- `/dashboard/members` — Invite members, manage roles
+{{/if}}
 
 ## Learn More
 
 - [GitHat Documentation](https://githat.io/docs)
 - [SDK Reference](https://www.npmjs.com/package/@githat/nextjs)
-- [API Reference (42+ endpoints)](https://githat.io/docs/api)
+- [API Reference](https://githat.io/docs/api)

package/templates/classroom/app/(auth)/sign-in/page.tsx.hbs

@@ -0,0 +1,9 @@
+import { SignInForm } from '@githat/nextjs';
+
+export default function SignInPage() {
+  return (
+    <main {{#if useTailwind}}className="flex items-center justify-center min-h-screen bg-[#09090b]"{{else}}style=\{{ display: 'flex', alignItems: 'center', justifyContent: 'center', minHeight: '100vh', background: '#09090b' }}{{/if}}>
+      <SignInForm signUpUrl="/sign-up" {{#if includeForgotPassword}}forgotPasswordUrl="/forgot-password"{{/if}} />
+    </main>
+  );
+}

package/templates/classroom/app/(auth)/sign-up/page.tsx.hbs

@@ -0,0 +1,9 @@
+import { SignUpForm } from '@githat/nextjs';
+
+export default function SignUpPage() {
+  return (
+    <main {{#if useTailwind}}className="flex items-center justify-center min-h-screen bg-[#09090b]"{{else}}style=\{{ display: 'flex', alignItems: 'center', justifyContent: 'center', minHeight: '100vh', background: '#09090b' }}{{/if}}>
+      <SignUpForm signInUrl="/sign-in" />
+    </main>
+  );
+}

package/templates/classroom/app/globals.css.hbs

@@ -0,0 +1,87 @@
+/*
+ * Tailwind v4 — required because @githat/nextjs/styles is processed
+ * through @tailwindcss/postcss. Plain doesn't ship utility classes,
+ * but the import is needed for the auth pages to render styled.
+ */
+@import "tailwindcss";
+
+/*
+ * Plain template — self-contained globals.
+ *
+ * Defines the minimum CSS variables a GitHat app uses for layout and
+ * the auth-page styling that ships with @githat/nextjs/styles.
+ * Override these in your own files when you want a real theme.
+ *
+ * Light theme by default; flip --bg/--fg for dark.
+ */
+
+:root {
+  /* Surface */
+  --bg:           #ffffff;
+  --surface:      #fafafa;
+  --surface-sub:  #f4f4f5;
+
+  /* Borders */
+  --border:       #e5e7eb;
+
+  /* Foreground */
+  --fg:           #0a0a0a;
+  --fg-muted:     #525252;
+  --fg-subtle:    #737373;
+
+  /* Brand — change these two to re-skin the whole auth flow */
+  --primary:      #6366f1;
+  --accent:       #f59e0b;
+
+  /* Semantic */
+  --success:      #16a34a;
+  --warn:         #d97706;
+  --danger:       #dc2626;
+
+  /* Spacing — used by @githat/nextjs/styles */
+  --space-1: 0.25rem;
+  --space-2: 0.5rem;
+  --space-3: 0.75rem;
+  --space-4: 1rem;
+  --space-6: 1.5rem;
+  --space-8: 2rem;
+
+  /* Radius */
+  --radius:    0.5rem;
+  --radius-md: 0.5rem;
+  --radius-lg: 0.75rem;
+
+  /* Fonts */
+  --font-sans:     'Inter', system-ui, -apple-system, BlinkMacSystemFont, sans-serif;
+  --font-wordmark: 'Instrument Serif', Georgia, serif;
+}
+
+@media (prefers-color-scheme: dark) {
+  :root {
+    --bg:           #0a0a0a;
+    --surface:      #18181b;
+    --surface-sub:  #27272a;
+    --border:       #3f3f46;
+    --fg:           #fafafa;
+    --fg-muted:     #a1a1aa;
+    --fg-subtle:    #71717a;
+  }
+}
+
+* {
+  box-sizing: border-box;
+  margin: 0;
+  padding: 0;
+}
+
+body {
+  font-family: var(--font-sans);
+  background: var(--bg);
+  color: var(--fg);
+  line-height: 1.5;
+}
+
+a {
+  color: inherit;
+  text-decoration: none;
+}

package/templates/classroom/app/layout.tsx.hbs

@@ -0,0 +1,41 @@
+import { GitHatProvider } from '@githat/nextjs';
+import '@githat/nextjs/styles';
+import './globals.css';
+
+export const metadata = {
+  title: '{{businessName}}',
+  description: '{{description}}',
+};
+
+export default function RootLayout({ children }{{#if typescript}}: { children: React.ReactNode }{{/if}}) {
+  return (
+    <html lang="en">
+      <body>
+        {/*
+          Plain template: no @githat/ui dep, no Wordmark. The
+          full-kit (`nextjs`) template uses @githat/ui for the
+          shared design system; the plain scaffold is the smallest
+          working app, so we avoid extra deps.
+        */}
+        <GitHatProvider config=\{{
+          publishableKey: process.env.NEXT_PUBLIC_GITHAT_PUBLISHABLE_KEY || '',
+          signInUrl: '/sign-in',
+          signUpUrl: '/sign-up',
+          afterSignInUrl: '/',
+          afterSignOutUrl: '/',
+        }}>
+          <header style=\{{
+            padding: '1rem 1.5rem',
+            borderBottom: '1px solid var(--border, #e5e7eb)',
+            fontFamily: 'system-ui, -apple-system, sans-serif',
+          }}>
+            <a href="/" style=\{{ textDecoration: 'none', color: 'inherit', fontWeight: 600 }}>
+              {{businessName}}
+            </a>
+          </header>
+          <main>{children}</main>
+        </GitHatProvider>
+      </body>
+    </html>
+  );
+}

package/templates/classroom/app/page.tsx.hbs

@@ -0,0 +1,103 @@
+'use client';
+
+import Link from 'next/link';
+import { useAuth, SignInButton } from '@githat/nextjs';
+
+/**
+ * Classroom — projects with real-world feedback.
+ *
+ * Built for students (and anyone presenting work-in-progress) to
+ * replace the dead-end PDF. You upload a project, share a link,
+ * and audience feedback streams in as you present. The work
+ * iterates — every cohort that hits the same project sees the
+ * latest version and adds to it.
+ *
+ * The flagship feature is /projects/[id]/present + /projects/[id]/feedback —
+ * presenter sees responses live, audience submits without an account.
+ *
+ * Why this matters: a portfolio of dead PDFs is worth less than
+ * a single project with a year of audience feedback layered on top.
+ */
+const SAMPLE_PROJECTS = [
+  { id: 'sustainable-bodega', title: 'Sustainable bodega supply chain', author: 'Maria L.', cohort: 'Spring 2026', responses: 47 },
+  { id: 'after-school-tutor',  title: 'After-school tutor matching app', author: 'Devon R.',  cohort: 'Spring 2026', responses: 12 },
+  { id: 'community-fridge',    title: 'Community fridge tracker',         author: 'Aisha M.',  cohort: 'Fall 2025',   responses: 89 },
+];
+
+export default function Home() {
+  const { isSignedIn } = useAuth();
+
+  return (
+    <div style=\{{ background: 'var(--bg)', color: 'var(--fg)' }}>
+      <section style=\{{
+        padding: 'var(--space-12) var(--space-4)',
+        textAlign: 'center',
+        maxWidth: '40rem',
+        margin: '0 auto',
+      }}>
+        <h1 style=\{{
+          fontFamily: 'var(--font-wordmark, Georgia, serif)',
+          fontSize: 'clamp(2rem, 5vw, 3rem)',
+          lineHeight: 1.1,
+          marginBottom: 'var(--space-3)',
+        }}>
+          {{businessName}}
+        </h1>
+        <p style=\{{ color: 'var(--fg-muted)', fontSize: '1.125rem', lineHeight: 1.6, marginBottom: 'var(--space-6)' }}>
+          Show your work. Get real feedback as you present. Watch
+          your project iterate over time — each cohort that visits
+          adds to it.
+          <br />
+          <em style=\{{ fontSize: '0.875rem' }}>The PDF is dead. Long live the living project.</em>
+        </p>
+        {!isSignedIn ? (
+          <SignInButton />
+        ) : (
+          <Link href="/admin" style=\{{
+            display: 'inline-block',
+            padding: 'var(--space-3) var(--space-6)',
+            borderRadius: 'var(--radius-md, 0.5rem)',
+            background: 'var(--primary)',
+            color: 'var(--bg)',
+            fontWeight: 600,
+            textDecoration: 'none',
+          }}>
+            New project →
+          </Link>
+        )}
+      </section>
+
+      <section style=\{{ padding: 'var(--space-8) var(--space-4)', maxWidth: '48rem', margin: '0 auto' }}>
+        <h2 style=\{{ fontSize: '1.5rem', marginBottom: 'var(--space-4)' }}>Live projects</h2>
+        <p style=\{{ color: 'var(--fg-muted)', fontSize: '0.875rem', marginBottom: 'var(--space-4)' }}>
+          Anyone can submit feedback — no account required. Authors
+          see responses streaming in as they present.
+        </p>
+        <ul style=\{{ listStyle: 'none', padding: 0, margin: 0, display: 'flex', flexDirection: 'column', gap: 'var(--space-3)' }}>
+          {SAMPLE_PROJECTS.map((p) => (
+            <li key={p.id}>
+              <Link href={`/projects/${p.id}`} style=\{{
+                display: 'block',
+                padding: 'var(--space-5)',
+                borderRadius: 'var(--radius-md, 0.5rem)',
+                border: '1px solid var(--border)',
+                background: 'var(--surface)',
+                color: 'var(--fg)',
+                textDecoration: 'none',
+              }}>
+                <h3 style=\{{ fontSize: '1.125rem', fontWeight: 600, marginBottom: 'var(--space-1)' }}>{p.title}</h3>
+                <div style=\{{ fontSize: '0.875rem', color: 'var(--fg-muted)', display: 'flex', gap: 'var(--space-3)', flexWrap: 'wrap' }}>
+                  <span>{p.author}</span>
+                  <span>·</span>
+                  <span>{p.cohort}</span>
+                  <span>·</span>
+                  <span><strong>{p.responses}</strong> responses</span>
+                </div>
+              </Link>
+            </li>
+          ))}
+        </ul>
+      </section>
+    </div>
+  );
+}