create-solvapay 0.7.0 → 0.7.1

package/README.md

@@ -24,6 +24,13 @@ From scratch (single placeholder tool):
 npm create solvapay@latest my-mcp-app -- --type mcp --no-openapi
 ```
 
+Next.js + Auth0 starter:
+
+```bash
+npm create solvapay@latest my-app -- --type next-auth0
+# equivalent: npm create solvapay@latest my-app -- --auth auth0
+```
+
 ### Skills for coding agents
 
 > **Already in an agent session?** Run `npx skills add solvapay/skills` and ask to create a paid MCP app — the agent routes to `create-mcp-app` and runs the scaffold for you.
@@ -61,7 +68,8 @@ npm run deploy       # Cloudflare Workers deploy
 
 | Flag | Description |
 | --- | --- |
-| `--type <kind>` | Project type (`mcp` today). Required in non-interactive mode. |
+| `--type <kind>` | Project type (`mcp` or `next-auth0`). Required in non-interactive mode. |
+| `--auth <provider>` | Shortcut for auth-focused starters. `--auth auth0` selects `--type next-auth0`. |
 | `-y`, `--yes` | Non-interactive: accept all defaults |
 | `--product <ref>` | Pre-fill `SOLVAPAY_PRODUCT_REF` (skip the picker) |
 | `--non-interactive` | Alias for `--yes`; fail fast on missing prompt input |
@@ -78,7 +86,7 @@ npm run deploy       # Cloudflare Workers deploy
 | `--no-openapi` | From-scratch mode with a placeholder paid tool |
 | `--tool-name <camel>` | Placeholder tool name in from-scratch mode (default: `helloTool`) |
 
-Run `npm create solvapay my-app -- --type mcp --help` for MCP-specific help.
+Run `npm create solvapay@latest my-app -- --type mcp --help` for MCP-specific help.
 
 ## Integration paths
 
@@ -88,6 +96,7 @@ Run `npm create solvapay my-app -- --type mcp --help` for MCP-specific help.
 | Next.js checkout | `npx solvapay init` | `@solvapay/next` + `@solvapay/react` | [checkout-demo](https://github.com/solvapay/solvapay-sdk/tree/main/examples/checkout-demo) | [Next.js](https://docs.solvapay.com/sdks/typescript/guides/nextjs), [React](https://docs.solvapay.com/sdks/typescript/guides/react) |
 | Hosted checkout | `npx solvapay init` | `@solvapay/next` | [hosted-checkout-demo](https://github.com/solvapay/solvapay-sdk/tree/main/examples/hosted-checkout-demo) | [Purchase management](https://docs.solvapay.com/sdks/typescript/guides/purchase-management) |
 | Supabase Edge | `npx solvapay init` | `@solvapay/server/fetch` + `@solvapay/react` | [supabase-edge](https://github.com/solvapay/solvapay-sdk/tree/main/examples/supabase-edge) | [Supabase Edge](https://docs.solvapay.com/sdks/typescript/guides/supabase-edge) |
+| Next.js + Auth0 | **`npm create solvapay@latest <name> -- --type next-auth0`** | `@solvapay/next` + `@auth0/nextjs-auth0` | scaffold template | [Customer linkage](https://docs.solvapay.com/sdks/typescript/guides/customer-linkage) |
 | **MCP app (server + UI)** | **`npm create solvapay@latest <name> -- --type mcp`** | `@solvapay/mcp` + `@solvapay/react/mcp` + `@solvapay/server` | scaffold template | [MCP](https://docs.solvapay.com/sdks/typescript/guides/mcp), [MCP app](https://docs.solvapay.com/sdks/typescript/guides/mcp-app) |
 | MCP App UI (advanced) | manual on existing server | `@solvapay/mcp` + `@solvapay/react/mcp` | [mcp-checkout-app](https://github.com/solvapay/solvapay-sdk/tree/main/examples/mcp-checkout-app) | [MCP app](https://docs.solvapay.com/sdks/typescript/guides/mcp-app) |
 | Existing MCP server | `npx solvapay init` | `@solvapay/server` + `@solvapay/mcp-core` | [mcp-oauth-bridge](https://github.com/solvapay/solvapay-sdk/tree/main/examples/mcp-oauth-bridge) | [MCP](https://docs.solvapay.com/sdks/typescript/guides/mcp) |

package/dist/{chunk-BH3INHDI.js → chunk-W4KM7GUB.js}

@@ -240,7 +240,7 @@ function printConnectionSnippets(options) {
   out(`   Cursor \u2014 add to \`~/.cursor/mcp.json\` (or the workspace's \`.cursor/mcp.json\`):`);
   out("     {");
   out('       "mcpServers": {');
-  out(`         "${projectName}": { "url": "${workerUrl}/" }`);
+  out(`         "${projectName}": { "url": "${workerUrl}/mcp" }`);
   out("       }");
   out("     }");
   out("");
@@ -249,26 +249,27 @@ function printConnectionSnippets(options) {
   out('       "mcpServers": {');
   out(`         "${projectName}": {`);
   out('           "command": "npx",');
-  out(`           "args": ["mcp-remote", "${workerUrl}/"]`);
+  out(`           "args": ["mcp-remote", "${workerUrl}/mcp"]`);
   out("         }");
   out("       }");
   out("     }");
   out("");
   out("   ChatGPT (Custom Connectors) \u2014 add a Custom MCP Connector with:");
-  out(`     URL: ${workerUrl}/`);
+  out(`     URL: ${workerUrl}/mcp`);
   out("     Note: ChatGPT needs a reachable (deployed or tunneled) URL \u2014");
   out("     localhost only works for native-scheme hosts. Use `npm run deploy`");
   out("     and point ChatGPT at the *.workers.dev URL once available.");
   out("");
   out("   MCP Inspector \u2014 explore tools locally:");
   out("     npx @modelcontextprotocol/inspector");
-  out(`     (set the server URL to ${workerUrl}/)`);
+  out(`     (set the server URL to ${workerUrl}/mcp)`);
   out("");
 }
 var SOLVAPAY_RUNTIME_DEPS = Object.freeze([
-  { name: "@solvapay/mcp", fallback: "0.3.0" },
-  { name: "@solvapay/server", fallback: "1.1.0" },
-  { name: "@solvapay/react", fallback: "1.2.0" }
+  { name: "@solvapay/mcp", fallback: "0.4.3" },
+  { name: "@solvapay/mcp-core", fallback: "0.4.4" },
+  { name: "@solvapay/server", fallback: "2.8.0" },
+  { name: "@solvapay/react", fallback: "2.3.1" }
 ]);
 async function resolveLatestSolvapayVersions(deps = SOLVAPAY_RUNTIME_DEPS, options = {}) {
   const timeoutMs = options.timeoutMs ?? 3e3;

package/dist/cli.js

@@ -15,8 +15,8 @@ import { stdin, stdout } from "process";
 
 // src/types/registry.ts
 var PROJECT_TYPES = {
-  mcp: () => import("./mcp-YJ55XDBZ.js").then((m) => m.mcpProjectType),
-  "next-auth0": () => import("./next-auth0-YAG227HM.js").then((m) => m.nextAuth0ProjectType)
+  mcp: () => import("./mcp-EZUBUZLF.js").then((m) => m.mcpProjectType),
+  "next-auth0": () => import("./next-auth0-WNIMA6EQ.js").then((m) => m.nextAuth0ProjectType)
   // cli: () => import('./cli/index.js').then(m => m.cliProjectType), // future
 };
 var PROJECT_TYPE_IDS = Object.keys(PROJECT_TYPES);

package/dist/{mcp-YJ55XDBZ.js → mcp-EZUBUZLF.js}

@@ -15,7 +15,7 @@ import {
   printConnectionSnippets,
   resolveLatestSolvapayVersions,
   writeBootstrapEnv
-} from "./chunk-BH3INHDI.js";
+} from "./chunk-W4KM7GUB.js";
 import {
   MCP_HELP_TEXT,
   inferMcpMode,

package/dist/{next-auth0-YAG227HM.js → next-auth0-WNIMA6EQ.js}

@@ -4,7 +4,7 @@ import {
   copyDir,
   gitInit,
   installProjectDependencies
-} from "./chunk-BH3INHDI.js";
+} from "./chunk-W4KM7GUB.js";
 import {
   toInitOptions
 } from "./chunk-4LPTJYUF.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-solvapay",
-  "version": "0.7.0",
+  "version": "0.7.1",
   "description": "Scaffold SolvaPay-monetized projects — MCP servers on Cloudflare Workers and more.",
   "type": "module",
   "bin": {

package/templates/mcp/_base/README.md

@@ -71,11 +71,11 @@ Useful URLs printed at startup:
 
 | What | URL |
 | --- | --- |
-| Worker MCP endpoint | `http://localhost:8787/` |
+| Worker MCP endpoint | `http://localhost:8787/mcp` |
 | OAuth discovery | `http://localhost:8787/.well-known/oauth-protected-resource` |
 | OAuth metadata | `http://localhost:8787/.well-known/oauth-authorization-server` |
 
-Inspect tools with: `npx @modelcontextprotocol/inspector` and point it at `http://localhost:8787/`.
+Inspect tools with: `npx @modelcontextprotocol/inspector` and point it at `http://localhost:8787/mcp`.
 
 Other scripts:
 
@@ -110,7 +110,7 @@ actual header names from the OpenAPI security schemes, for example:
 UPSTREAM_API_HEADERS={"x-api-client-id":"client-id","x-api-client-secret":"client-secret"}
 ```
 
-Point an MCP client (MCP Inspector, MCPJam, Claude Desktop, ChatGPT Custom Connectors) at `http://localhost:8787/`.
+Point an MCP client (MCP Inspector, MCPJam, Claude Desktop, ChatGPT Custom Connectors) at `http://localhost:8787/mcp`.
 
 ## Deploy
 
@@ -174,6 +174,24 @@ export function registerMyTool(ctx: AdditionalToolsContext, env: Env) {
 
 Then add an import + `registerMyTool(ctx, env)` line to `src/tools/index.ts`. Re-deploy.
 
+For a per-customer free allowance instead of a per-call charge, use `registerFree` with a `limit` (same handler shape):
+
+```ts
+export function registerPreview(ctx: AdditionalToolsContext) {
+  ctx.registerFree('preview', {
+    title: 'Preview',
+    description: 'Free preview — 5 calls / 30 days, then a plan is required.',
+    schema: { input: z.string() },
+    annotations: { readOnlyHint: true, idempotentHint: true, openWorldHint: true },
+    limit: { meter: 'free-previews', cap: 5, scope: 'rolling_window', windowDays: 30 },
+    handler: async ({ input }, c) => {
+      const data = await doSomething(input)
+      return c.respond(data, { text: `Preview for ${input}: …` })
+    },
+  })
+}
+```
+
 ## Reference
 
 - [`@solvapay/mcp/fetch`](https://www.npmjs.com/package/@solvapay/mcp) — `createSolvaPayMcpFetch` is the entire integration surface.

package/templates/mcp/_base/package.json

@@ -17,9 +17,10 @@
     "@modelcontextprotocol/ext-apps": "^1.7.1",
     "@modelcontextprotocol/core": "^2.0.0",
     "@modelcontextprotocol/server": "^2.0.0",
-    "@solvapay/mcp": "^0.3.0",
-    "@solvapay/react": "^1.2.0",
-    "@solvapay/server": "^1.1.0",
+    "@solvapay/mcp": "^0.4.3",
+    "@solvapay/mcp-core": "^0.4.4",
+    "@solvapay/react": "^2.3.1",
+    "@solvapay/server": "^2.8.0",
     "react": "^19.2.5",
     "react-dom": "^19.2.5",
     "zod": "^4.3.6"

package/templates/mcp/_base/scripts/deploy.mjs

@@ -633,16 +633,16 @@ function printDeployedConnectionSnippets(publicUrl, workerName) {
   out('Connect an MCP client to the deployed worker:')
   out('')
   out('  Cursor (~/.cursor/mcp.json):')
-  out(`    { "mcpServers": { "${name}": { "url": "${url}/" } } }`)
+  out(`    { "mcpServers": { "${name}": { "url": "${url}/mcp" } } }`)
   out('')
   out('  Claude Desktop (claude_desktop_config.json):')
   out(
-    `    { "mcpServers": { "${name}": { "command": "npx", "args": ["mcp-remote", "${url}/"] } } }`,
+    `    { "mcpServers": { "${name}": { "command": "npx", "args": ["mcp-remote", "${url}/mcp"] } } }`,
   )
   out('')
-  out(`  ChatGPT Custom MCP Connector URL:  ${url}/`)
+  out(`  ChatGPT Custom MCP Connector URL:  ${url}/mcp`)
   out('')
-  out(`  MCP Inspector:  npx @modelcontextprotocol/inspector  (set URL to ${url}/)`)
+  out(`  MCP Inspector:  npx @modelcontextprotocol/inspector  (set URL to ${url}/mcp)`)
   out('')
 }
 

package/templates/mcp/_base/scripts/dev.mjs

@@ -34,12 +34,12 @@ function printBanner() {
   const lines = [
     '',
     '┌─ SolvaPay MCP — local dev ─────────────────────────────────',
-    `│  Worker MCP endpoint  ${WORKER_URL}/`,
+    `│  Worker MCP endpoint  ${WORKER_URL}/mcp`,
     `│  OAuth discovery       ${WORKER_URL}/.well-known/oauth-protected-resource`,
     `│  OAuth metadata        ${WORKER_URL}/.well-known/oauth-authorization-server`,
     '│',
     '│  Inspect tools         npx @modelcontextprotocol/inspector',
-    `│                        (set the server URL to ${WORKER_URL}/)`,
+    `│                        (set the server URL to ${WORKER_URL}/mcp)`,
     '│',
     '│  Verify contract       node scripts/verify.mjs ' + WORKER_URL,
     '└────────────────────────────────────────────────────────────',

package/templates/mcp/_base/scripts/verify.mjs

@@ -113,7 +113,7 @@ async function main() {
       : await runIntentToolsTextCheck(base, rpcOptions)
 
   // `merchantBootstrap` exercises the SolvaPay bootstrap path by
-  // calling `manage_account` (an intent tool, always registered) and
+  // calling `account` (an intent tool, always registered) and
   // asserting the response is not an error envelope. Without a bearer
   // token, the call would gate at the HTTP layer — so it skips. With
   // a bearer token, a 500 or text containing `"bootstrap"` is a real

package/templates/mcp/_base/src/worker.ts

@@ -122,12 +122,12 @@ function getHandler(env: Env): (req: Request) => Promise<Response> {
     responseMode: 'json',
     // Hide UI-only transport tools from the LLM-facing `tools/list`
     // (text hosts: Claude Desktop, MCPJam, Cursor) — keeps the model's
-    // tool catalogue narrow to the four intent tools (`upgrade`,
-    // `manage_account`, `activate_plan`, `topup`) plus this worker's
-    // generated tools. ChatGPT-originated tools/list requests are
-    // auto-detected and receive the full catalog so the iframe's
-    // `create_payment_intent` calls (plan + topup via `purpose`)
-    // pass ChatGPT's gateway catalogue check.
+    // tool catalogue narrow to the intent tools (`account`,
+    // `activate_plan`) plus this worker's generated tools. ChatGPT-
+    // originated tools/list requests are auto-detected and receive the
+    // full catalog so the iframe's `create_payment_intent` calls
+    // (plan + topup via `purpose`) pass ChatGPT's gateway catalogue
+    // check.
     hideToolsByAudience: ['ui'],
     additionalTools: ctx => registerTools(ctx, env),
   })

package/templates/mcp/from-scratch/README.append.md

@@ -10,4 +10,5 @@ To add more paid tools later, create a new file under `src/tools/` that
 exports a `register<ToolName>` function and call it from
 `src/tools/index.ts`. Each `ctx.registerPayable(...)` call earns the
 configured paywall amount per invocation against
-`SOLVAPAY_PRODUCT_REF`.
+`SOLVAPAY_PRODUCT_REF`. Use `ctx.registerFree(...)` with a `limit` for
+a per-customer free allowance instead of a per-call charge.

package/templates/mcp/from-scratch/src/tools/_placeholder.ts

@@ -26,7 +26,7 @@ export function register__TOOL_NAME_PASCAL__(ctx: AdditionalToolsContext): void
   ctx.registerPayable('__TOOL_NAME__', {
     title: '__TOOL_NAME__',
     description:
-      'Placeholder paid tool — echoes the input message back so you can verify the paywall is wired before writing real logic. 1 credit per call; returns a text-only purchase-required narration naming the `upgrade` or `topup` recovery tool when the customer is out of balance. Replace this description (and the handler) with your tool semantics before going live.',
+      'Placeholder paid tool — echoes the input message back so you can verify the paywall is wired before writing real logic. 1 credit per call; returns a text-only purchase-required narration naming the `account` recovery tool when the customer is out of balance. Replace this description (and the handler) with your tool semantics before going live.',
     schema: {
       message: z.string().describe('What the caller wants').optional(),
     },
@@ -42,6 +42,20 @@ export function register__TOOL_NAME_PASCAL__(ctx: AdditionalToolsContext): void
     },
   })
 
+  // Free-allowance sibling — swap `registerPayable` for this when the
+  // tool should be free up to a per-customer cap:
+  //
+  // ctx.registerFree('__TOOL_NAME__', {
+  //   title: '__TOOL_NAME__',
+  //   description: 'Free up to 5 calls / 30 days, then a plan is required.',
+  //   schema: { message: z.string().optional() },
+  //   annotations: { readOnlyHint: true, openWorldHint: true },
+  //   limit: { meter: 'free-previews', cap: 5, scope: 'rolling_window', windowDays: 30 },
+  //   handler: async (input, c) => {
+  //     return c.respond({ ok: true, echoed: input.message ?? 'hello' })
+  //   },
+  // })
+
   ctx.server.registerPrompt(
     '__TOOL_NAME__',
     {