nx-factory-cli 2.1.23 → 2.1.25

package/dist/setups/auth/systems/workos.js

@@ -1,10 +1,24 @@
 import path from "path";
 import { writeFile, ensureDir } from "../../../files.js";
 import { scopedPackageName } from "../../../config.js";
+/**
+ * WorkOS package selection by framework.
+ * @workos-inc/authkit-nextjs is Next.js-specific.
+ * @workos-inc/node is the universal server SDK — always included.
+ */
+function workosDepsForFrameworks(frameworks) {
+    const deps = {
+        "@workos-inc/node": "latest",
+    };
+    if (frameworks.includes("nextjs")) {
+        deps["@workos-inc/authkit-nextjs"] = "latest";
+    }
+    return deps;
+}
 export const workosScaffolder = {
     label: "WorkOS AuthKit",
+    // Base deps computed dynamically in scaffold(); static field left empty.
     dependencies: {
-        "@workos-inc/authkit-nextjs": "latest",
         "@workos-inc/node": "latest",
     },
     devDependencies: {
@@ -16,10 +30,19 @@ export const workosScaffolder = {
     },
     async scaffold(pkgDir, opts) {
         const authPackageName = scopedPackageName(opts.scope, "auth");
+        const frameworkDeps = workosDepsForFrameworks(opts.frameworks);
+        // Merge framework-specific deps into package.json (base already written)
+        const { default: fs } = await import("fs-extra");
+        const pkgPath = path.join(pkgDir, "package.json");
+        if (await fs.pathExists(pkgPath)) {
+            const pkg = await fs.readJson(pkgPath);
+            pkg.dependencies = { ...pkg.dependencies, ...frameworkDeps };
+            await fs.writeJson(pkgPath, pkg, { spaces: 2 });
+        }
         await ensureDir(path.join(pkgDir, "."));
-        // ── index.ts ──────────────────────────────────────────────────────────
+        // ── index.ts ────────────────────────────────────────────────────────────
         await writeFile(path.join(pkgDir, "index.ts"), `/**
- * ${authPackageName} — WorkOS AuthKit latest setup.
+ * ${authPackageName} — WorkOS AuthKit.
  *
  * Prefer sub-path imports:
  *   import { getUser, withAuth }  from "${authPackageName}/server"
@@ -29,266 +52,132 @@ export const workosScaffolder = {
 export * from "./server.js";
 export * from "./client.js";
 `);
-        await writeFile(path.join(pkgDir, "next.ts"), `/** Next.js adapter for ${authPackageName} (WorkOS). */
+        // ── next.ts ─────────────────────────────────────────────────────────────
+        if (opts.frameworks.includes("nextjs")) {
+            await writeFile(path.join(pkgDir, "next.ts"), `/** Next.js adapter for ${authPackageName} (WorkOS). */
 export {
   authMiddleware,
   buildMiddleware,
   middlewareConfig,
 } from "./middleware.js";
 `);
-        // ── server.ts ─────────────────────────────────────────────────────────
-        // AuthKit v1+: getUser() replaces getSession(), withAuth() HOC
+        }
+        // ── server.ts ───────────────────────────────────────────────────────────
         await writeFile(path.join(pkgDir, "server.ts"), `/**
  * WorkOS AuthKit v1+ — server-side helpers.
  *
- * AuthKit v1 changes from v0:
- *   - getSession()  → getUser()  (returns { user, sessionId, accessToken })
- *   - withAuth()    — HOC now passes { user } prop (no session wrapper)
- *   - handleAuth()  — still the catch-all callback handler
- *
- * @example Server Component (manual check)
+ * @example Next.js App Router (Server Component)
  *   import { getUser } from "${authPackageName}/server";
  *   const { user } = await getUser();
- *   if (!user) redirect("/sign-in");
  *
- * @example Server Component (HOC — auto-redirects)
+ * @example Next.js Route Handler / Remix loader
  *   import { withAuth } from "${authPackageName}/server";
- *   export default withAuth(async function Page({ user }) {
- *     return <h1>Hello {user.firstName}</h1>;
+ *   export const GET = withAuth(async ({ user }) => {
+ *     return Response.json({ user });
  *   });
  *
- * @example Sign-in redirect
- *   import { getSignInUrl } from "${authPackageName}/server";
- *   redirect(await getSignInUrl());
- */
-
-export {
-  getUser,           // Replaces getSession() in AuthKit v1
-  withAuth,          // HOC — passes { user } to your component
-  getSignInUrl,      // Returns the WorkOS hosted sign-in URL
-  getSignUpUrl,      // Returns the WorkOS hosted sign-up URL
-  signOut,           // Server-side sign out (clears session cookie)
-  refreshSession,    // Extend the session lifetime
-  handleAuth,        // Catch-all callback route handler (GET)
-  verifyAccessToken, // Verify a JWT access token
-  encryptSession,    // For custom session storage scenarios
-  terminateSession,  // Force-terminate a specific session
-} from "@workos-inc/authkit-nextjs";
-
-export type {
-  User,
-  AuthKitSession,
-} from "@workos-inc/authkit-nextjs";
-
-/**
- * Low-level WorkOS Node SDK.
- * Use for organization management, directory sync, audit logs, etc.
- *
+ * @example Vite / Express API (node SDK)
  *   import { workos } from "${authPackageName}/server";
- *   const orgs = await workos.organizations.listOrganizations();
+ *   const { user } = await workos.userManagement.getUser(userId);
  */
+${opts.frameworks.includes("nextjs") ? `export { getUser, withAuth, signOut } from "@workos-inc/authkit-nextjs";` : ""}
 import WorkOS from "@workos-inc/node";
 
-if (!process.env.WORKOS_API_KEY) {
-  throw new Error("Missing WORKOS_API_KEY — set it in your app's .env.local");
-}
+export const workos = new WorkOS(process.env.WORKOS_API_KEY!);
 
-export const workos = new WorkOS(process.env.WORKOS_API_KEY);
-export const workosClientId = process.env.WORKOS_CLIENT_ID!;
+export type { User } from "@workos-inc/node";
 `);
-        // ── client.ts ─────────────────────────────────────────────────────────
-        // AuthKit v1: useAuth() hook from the /components sub-path
+        // ── client.ts ───────────────────────────────────────────────────────────
         await writeFile(path.join(pkgDir, "client.ts"), `/**
- * WorkOS AuthKit v1+ — client-side hooks.
- *
- * The AuthKitProvider is required at the root of apps that use useAuth().
- *
- * @example Root layout
- *   import { AuthKitProvider } from "${authPackageName}/client";
- *   export default function Layout({ children }) {
- *     return <AuthKitProvider>{children}</AuthKitProvider>;
- *   }
- *
- * @example Any client component
- *   "use client";
- *   import { useAuth } from "${authPackageName}/client";
- *   const { user, loading, getAccessToken } = useAuth();
+ * WorkOS AuthKit — client-side helper.
+ * WorkOS uses server-side sessions; there is no React client SDK.
+ * This module re-exports the auth URL helpers used in client components.
  */
 "use client";
 
-export {
-  useAuth,         // { user, loading, getAccessToken, getRawAccessToken }
-  AuthKitProvider, // Required root context provider
-} from "@workos-inc/authkit-nextjs/components";
+export function getAuthorizationUrl(opts?: { returnPathname?: string }): string {
+  const base = process.env.NEXT_PUBLIC_WORKOS_REDIRECT_URI ?? "/api/auth/callback";
+  if (opts?.returnPathname) {
+    return \`\${base}?returnPathname=\${encodeURIComponent(opts.returnPathname)}\`;
+  }
+  return base;
+}
 `);
-        // ── middleware.ts ─────────────────────────────────────────────────────
-        // AuthKit v1: authkitMiddleware with middlewareAuth option
-        await writeFile(path.join(pkgDir, "middleware.ts"), `/**
- * WorkOS AuthKit v1+ — Next.js middleware.
- *
- * Quick start — copy into apps/<your-app>/middleware.ts:
- *
- *   import type { NextRequest } from "next/server";
- *   import { authMiddleware, middlewareConfig } from "${authPackageName}/middleware";
+        // ── middleware.ts (Next.js only) ─────────────────────────────────────────
+        if (opts.frameworks.includes("nextjs")) {
+            await writeFile(path.join(pkgDir, "middleware.ts"), `/**
+ * WorkOS AuthKit — Next.js middleware.
  *
- *   export default function middleware(request: NextRequest) {
- *     return authMiddleware(request);
- *   }
+ * Copy into apps/<your-app>/middleware.ts:
  *
+ *   import { authMiddleware, middlewareConfig } from "${authPackageName}/next";
+ *   export default authMiddleware;
  *   export const config = middlewareConfig;
- *
- * Custom public paths:
- *
- *   import { buildMiddleware } from "${authPackageName}/middleware";
- *   export default buildMiddleware({ unauthenticatedPaths: ["/", "/about"] });
- *   export { middlewareConfig as config } from "${authPackageName}/middleware";
  */
 import { authkitMiddleware } from "@workos-inc/authkit-nextjs";
-import type { AuthkitMiddlewareOptions } from "@workos-inc/authkit-nextjs";
+
+export const authMiddleware = authkitMiddleware();
+
+export function buildMiddleware(opts?: Parameters<typeof authkitMiddleware>[0]) {
+  return authkitMiddleware(opts);
+}
 
 export const middlewareConfig = {
   matcher: [
-    "/((?!_next|[^?]*\\.(?:html?|css|js(?!on)|jpe?g|webp|png|gif|svg|ttf|woff2?|ico|csv|docx?|xlsx?|zip|webmanifest)).*)",
-    "/(api|trpc)(.*)",
+    "/((?!_next/static|_next/image|favicon.ico|.*\\.(?:svg|png|jpg|jpeg|gif|webp)$).*)",
   ],
 };
-
-const defaultUnauthenticatedPaths = [
-  "/",
-  "/sign-in",
-  "/sign-up",
-  "/api/webhooks(.*)",
-];
-
-/** Default middleware — requires auth on all paths except the ones above */
-export const authMiddleware = authkitMiddleware({
-  middlewareAuth: {
-    enabled: true,
-    unauthenticatedPaths: defaultUnauthenticatedPaths,
-  },
-});
-
-/**
- * Build a middleware with configurable unauthenticated paths.
- *
- * @param unauthenticatedPaths - Paths that do NOT require authentication
- * @param options              - Additional AuthKit middleware options
- */
-export function buildMiddleware({
-  unauthenticatedPaths = defaultUnauthenticatedPaths,
-  ...options
-}: {
-  unauthenticatedPaths?: string[];
-} & Omit<AuthkitMiddlewareOptions, "middlewareAuth"> = {}) {
-  return authkitMiddleware({
-    ...options,
-    middlewareAuth: {
-      enabled: true,
-      unauthenticatedPaths,
-    },
-  });
-}
 `);
-        // ── .env.example ─────────────────────────────────────────────────────────
-        await writeFile(path.join(pkgDir, ".env.example"), `# ─── WorkOS AuthKit v1+ ──────────────────────────────────────────────────────
-# Get these from: https://dashboard.workos.com → your app → API Keys
+        }
+        // ── .env.example ────────────────────────────────────────────────────────
+        await writeFile(path.join(pkgDir, ".env.example"), `# WorkOS — https://dashboard.workos.com → API Keys
 WORKOS_API_KEY=sk_REPLACE_ME
 WORKOS_CLIENT_ID=client_REPLACE_ME
 
-# Must match the redirect URI configured in your WorkOS dashboard
-WORKOS_REDIRECT_URI=http://localhost:3000/callback
+# AuthKit redirect URI (register this in your WorkOS dashboard)
+WORKOS_REDIRECT_URI=http://localhost:3000/api/auth/callback
+NEXT_PUBLIC_WORKOS_REDIRECT_URI=http://localhost:3000/api/auth/callback
 
-# Cookie encryption secret — generate with: openssl rand -base64 32
-# Must be at least 32 characters
-WORKOS_COOKIE_PASSWORD=REPLACE_WITH_RANDOM_32_CHAR_STRING
-
-# The public URL of your app
-NEXT_PUBLIC_APP_URL=http://localhost:3000
+# Cookie secret — generate with: openssl rand -base64 32
+WORKOS_COOKIE_PASSWORD=REPLACE_WITH_32_CHAR_RANDOM_STRING
 `);
-        // ── README.md ─────────────────────────────────────────────────────────────
-        await writeFile(path.join(pkgDir, "README.md"), `# ${authPackageName} — WorkOS AuthKit v1+
+        // ── README.md ────────────────────────────────────────────────────────────
+        await writeFile(path.join(pkgDir, "README.md"), `# ${authPackageName} — WorkOS AuthKit
 
-Shared authentication powered by [WorkOS AuthKit](https://workos.com/docs/user-management) — enterprise SSO, SCIM, MFA, magic auth, and a hosted sign-in UI.
+Shared authentication package powered by [WorkOS AuthKit](https://workos.com/docs/user-management).
 
-> **AuthKit v1 notes:** \`getSession()\` was renamed to \`getUser()\`. The HOC \`withAuth()\` now passes \`{ user }\` directly (no session wrapper). \`AuthKitProvider\` is now required for \`useAuth()\`.
+## Installed packages
+${Object.keys(frameworkDeps).map((d) => `- \`${d}\``).join("\n")}
 
 ## Setup
 
-### 1. Copy env vars to your app
+### 1. Copy env vars
 \`\`\`bash
 cp packages/auth/.env.example apps/<your-app>/.env.local
 \`\`\`
 
-Fill in from your [WorkOS Dashboard](https://dashboard.workos.com):
-- \`WORKOS_API_KEY\`
-- \`WORKOS_CLIENT_ID\`
-- \`WORKOS_COOKIE_PASSWORD\` (run: \`openssl rand -base64 32\`)
-- Add \`WORKOS_REDIRECT_URI\` in the WorkOS dashboard → Redirects
-
-### 2. Add the dependency
-\`\`\`json
-{ "dependencies": { "${authPackageName}": "workspace:*" } }
-\`\`\`
-
-### 3. Add the callback route
+${opts.frameworks.includes("nextjs") ? `### 2. Add the callback route (Next.js)
 \`\`\`ts
-// apps/<your-app>/app/callback/route.ts
-export { handleAuth as GET } from "${authPackageName}/server";
+// apps/<your-app>/app/api/auth/callback/route.ts
+import { handleAuth } from "@workos-inc/authkit-nextjs";
+export const GET = handleAuth();
 \`\`\`
 
-### 4. Add the middleware
+### 3. Add middleware
 \`\`\`ts
 // apps/<your-app>/middleware.ts
-import type { NextRequest } from "next/server";
-import { authMiddleware, middlewareConfig } from "${authPackageName}/next";
-
-export default function middleware(request: NextRequest) {
-  return authMiddleware(request);
-}
-
-export const config = middlewareConfig;
-\`\`\`
-
-### 5. Wrap your layout with AuthKitProvider
-\`\`\`tsx
-// apps/<your-app>/app/layout.tsx
-import { AuthKitProvider } from "${authPackageName}/client";
-export default function Layout({ children }) {
-  return <AuthKitProvider>{children}</AuthKitProvider>;
-}
+export { authMiddleware as default, middlewareConfig as config } from "${authPackageName}/next";
 \`\`\`
 
-### 6. Use in your pages
-\`\`\`tsx
-// Server component — HOC (auto-redirects if not signed in)
-import { withAuth } from "${authPackageName}/server";
-export default withAuth(async function Page({ user }) {
-  return <h1>Hello, {user.firstName}</h1>;
-});
-
-// Server component — manual
+### 4. Use in server components
+\`\`\`ts
 import { getUser } from "${authPackageName}/server";
 const { user } = await getUser();
-
-// Client component
-"use client";
-import { useAuth } from "${authPackageName}/client";
-const { user, loading } = useAuth();
-
-// Sign-in redirect page
-import { getSignInUrl } from "${authPackageName}/server";
-import { redirect }     from "next/navigation";
-export default async function SignIn() { redirect(await getSignInUrl()); }
-\`\`\`
-
-## API
-
-| Sub-path | Key exports |
-|---|---|
-| \`${authPackageName}/server\` | \`getUser()\`, \`withAuth()\`, \`getSignInUrl()\`, \`handleAuth\`, \`workos\`, \`signOut()\` |
-| \`${authPackageName}/client\` | \`useAuth\`, \`AuthKitProvider\` |
-| \`${authPackageName}/middleware\` | \`authMiddleware\`, \`buildMiddleware()\`, \`middlewareConfig\` |
-| \`${authPackageName}/next\` | \`authMiddleware\`, \`buildMiddleware()\`, \`middlewareConfig\` |
+\`\`\`` : `### 2. Use the node SDK
+\`\`\`ts
+import { workos } from "${authPackageName}/server";
+const user = await workos.userManagement.getUser(userId);
+\`\`\``}
 `);
     },
 };

package/dist/setups/auth/systems/workos.js.map

@@ -1 +1 @@
-{"version":3,"file":"workos.js","sourceRoot":"","sources":["../../../../src/setups/auth/systems/workos.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAGvD,MAAM,CAAC,MAAM,gBAAgB,GAA0B;IACtD,KAAK,EAAE,gBAAgB;IAEvB,YAAY,EAAE;QACb,4BAA4B,EAAE,QAAQ;QACtC,kBAAkB,EAAE,QAAQ;KAC5B;IAED,eAAe,EAAE;QAChB,cAAc,EAAE,SAAS;KACzB;IAED,gBAAgB,EAAE;QACjB,KAAK,EAAE,YAAY;QACnB,WAAW,EAAE,YAAY;KACzB;IAED,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,IAAwB;QACtD,MAAM,eAAe,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAE9D,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;QAExC,yEAAyE;QACzE,MAAM,SAAS,CACd,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAC7B;KACE,eAAe;;;2CAGuB,eAAe;2CACf,eAAe;2CACf,eAAe;;;;CAIzD,CACE,CAAC;QAEF,MAAM,SAAS,CACd,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,EAC5B,2BAA2B,eAAe;;;;;;CAM5C,CACE,CAAC;QAEF,yEAAyE;QACzE,+DAA+D;QAC/D,MAAM,SAAS,CACd,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,EAC9B;;;;;;;;;gCAS6B,eAAe;;;;;iCAKd,eAAe;;;;;;qCAMX,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;+BA0BrB,eAAe;;;;;;;;;;;CAW7C,CACE,CAAC;QAEF,yEAAyE;QACzE,2DAA2D;QAC3D,MAAM,SAAS,CACd,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,EAC9B;;;;;;wCAMqC,eAAe;;;;;;;gCAOvB,eAAe;;;;;;;;;CAS9C,CACE,CAAC;QAEF,yEAAyE;QACzE,2DAA2D;QAC3D,MAAM,SAAS,CACd,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,EAClC;;;;;;yDAMsD,eAAe;;;;;;;;;;wCAUhC,eAAe;;mDAEJ,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+CjE,CACE,CAAC;QAEF,4EAA4E;QAC5E,MAAM,SAAS,CACd,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,EACjC;;;;;;;;;;;;;;CAcF,CACE,CAAC;QAEF,6EAA6E;QAC7E,MAAM,SAAS,CACd,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,EAC9B,KAAK,eAAe;;;;;;;;;;;;;;;;;;;;;uBAqBA,eAAe;;;;;;qCAMD,eAAe;;;;;;;oDAOA,eAAe;;;;;;;;;;;;mCAYhC,eAAe;;;;;;;;;4BAStB,eAAe;;;;;;2BAMhB,eAAe;;;;;2BAKf,eAAe;;;;gCAIV,eAAe;;;;;;;;;MASzC,eAAe;MACf,eAAe;MACf,eAAe;MACf,eAAe;CACpB,CACE,CAAC;IACH,CAAC;CACD,CAAC"}
+{"version":3,"file":"workos.js","sourceRoot":"","sources":["../../../../src/setups/auth/systems/workos.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAGvD;;;;GAIG;AACH,SAAS,uBAAuB,CAAC,UAA0B;IAC1D,MAAM,IAAI,GAA2B;QACpC,kBAAkB,EAAE,QAAQ;KAC5B,CAAC;IACF,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,4BAA4B,CAAC,GAAG,QAAQ,CAAC;IAC/C,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAA0B;IACtD,KAAK,EAAE,gBAAgB;IAEvB,yEAAyE;IACzE,YAAY,EAAE;QACb,kBAAkB,EAAE,QAAQ;KAC5B;IAED,eAAe,EAAE;QAChB,cAAc,EAAE,SAAS;KACzB;IAED,gBAAgB,EAAE;QACjB,KAAK,EAAE,YAAY;QACnB,WAAW,EAAE,YAAY;KACzB;IAED,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,IAAwB;QACtD,MAAM,eAAe,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC9D,MAAM,aAAa,GAAG,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAE/D,yEAAyE;QACzE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAClD,IAAI,MAAM,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACvC,GAAG,CAAC,YAAY,GAAG,EAAE,GAAG,GAAG,CAAC,YAAY,EAAE,GAAG,aAAa,EAAE,CAAC;YAC7D,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;QAExC,2EAA2E;QAC3E,MAAM,SAAS,CACd,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAC7B;KACE,eAAe;;;2CAGuB,eAAe;2CACf,eAAe;2CACf,eAAe;;;;CAIzD,CACE,CAAC;QAEF,2EAA2E;QAC3E,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxC,MAAM,SAAS,CACd,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,EAC5B,2BAA2B,eAAe;;;;;;CAM7C,CACG,CAAC;QACH,CAAC;QAED,2EAA2E;QAC3E,MAAM,SAAS,CACd,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,EAC9B;;;;gCAI6B,eAAe;;;;iCAId,eAAe;;;;;;+BAMjB,eAAe;;;EAG5C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,0EAA0E,CAAC,CAAC,CAAC,EAAE;;;;;;CAMrH,CACE,CAAC;QAEF,2EAA2E;QAC3E,MAAM,SAAS,CACd,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,EAC9B;;;;;;;;;;;;;;CAcF,CACE,CAAC;QAEF,4EAA4E;QAC5E,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxC,MAAM,SAAS,CACd,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,EAClC;;;;;yDAKqD,eAAe;;;;;;;;;;;;;;;;;CAiBvE,CACG,CAAC;QACH,CAAC;QAED,2EAA2E;QAC3E,MAAM,SAAS,CACd,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,EACjC;;;;;;;;;;CAUF,CACE,CAAC;QAEF,4EAA4E;QAC5E,MAAM,SAAS,CACd,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,EAC9B,KAAK,eAAe;;;;;EAKrB,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;;;;;;;;;EAS9D,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;;;;;;;;;;yEAUkC,eAAe;;;;;2BAK7D,eAAe;;OAEnC,CAAC,CAAC,CAAC;;0BAEgB,eAAe;;OAElC;CACN,CACE,CAAC;IACH,CAAC;CACD,CAAC"}

package/dist/setups/auth/types.d.ts

@@ -1,4 +1,6 @@
 export type AuthProvider = "clerk" | "better-auth" | "workos";
+/** Frameworks the auth package can target. */
+export type AppFramework = "nextjs" | "vite" | "remix" | "expo";
 export interface AuthPackageOptions {
     /** The chosen provider */
     provider: AuthProvider;
@@ -10,25 +12,25 @@ export interface AuthPackageOptions {
     scope: string;
     /** The package manager in use */
     pm: string;
+    /**
+     * Frameworks detected across apps/ in the workspace.
+     * Scaffolders use this to only install the packages actually needed.
+     */
+    frameworks: AppFramework[];
     /** If true, print what would happen but write nothing */
     dryRun?: boolean;
 }
 /**
  * Everything a provider scaffolder must implement.
- *
- * The CLI calls scaffold() once — it creates the entire packages/auth
- * directory for that provider, including:
- *   - package.json
- *   - tsconfig.json
- *   - index.ts  (the public barrel)
- *   - <provider>-specific files
- *   - .env.example
- *   - README.md
  */
 export interface AuthPackageScaffolder {
     /** Pretty label used in step output */
     label: string;
-    /** npm deps that go into the auth package's package.json dependencies */
+    /**
+     * npm deps that go into the auth package's package.json dependencies.
+     * Scaffolders can use opts.frameworks to compute these dynamically —
+     * this static field is for the base set always required.
+     */
     dependencies: Record<string, string>;
     /** npm devDeps for the auth package */
     devDependencies: Record<string, string>;

package/dist/setups/auth/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/setups/auth/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,aAAa,GAAG,QAAQ,CAAC;AAE9D,MAAM,WAAW,kBAAkB;IAClC,0BAA0B;IAC1B,QAAQ,EAAE,YAAY,CAAC;IACvB,iEAAiE;IACjE,aAAa,EAAE,MAAM,CAAC;IACtB,uDAAuD;IACvD,aAAa,EAAE,MAAM,CAAC;IACtB,gEAAgE;IAChE,KAAK,EAAE,MAAM,CAAC;IACd,iCAAiC;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,yDAAyD;IACzD,MAAM,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,qBAAqB;IACrC,uCAAuC;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,yEAAyE;IACzE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,uCAAuC;IACvC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,4BAA4B;IAC5B,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,mCAAmC;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAClE"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/setups/auth/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,aAAa,GAAG,QAAQ,CAAC;AAE9D,8CAA8C;AAC9C,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;AAEhE,MAAM,WAAW,kBAAkB;IAClC,0BAA0B;IAC1B,QAAQ,EAAE,YAAY,CAAC;IACvB,iEAAiE;IACjE,aAAa,EAAE,MAAM,CAAC;IACtB,uDAAuD;IACvD,aAAa,EAAE,MAAM,CAAC;IACtB,gEAAgE;IAChE,KAAK,EAAE,MAAM,CAAC;IACd,iCAAiC;IACjC,EAAE,EAAE,MAAM,CAAC;IACX;;;OAGG;IACH,UAAU,EAAE,YAAY,EAAE,CAAC;IAC3B,yDAAyD;IACzD,MAAM,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACrC,uCAAuC;IACvC,KAAK,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,uCAAuC;IACvC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,4BAA4B;IAC5B,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,mCAAmC;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAClE"}

package/dist/tsconfigs.d.ts

@@ -0,0 +1,54 @@
+/**
+ * tsconfigs.ts — single source of truth for every tsconfig shape the CLI writes.
+ *
+ * Rules that govern the choices below:
+ *
+ * ROOT tsconfig.base.json
+ *   "module": "NodeNext" / "moduleResolution": "NodeNext"
+ *   — the CLI itself uses NodeNext, and apps compiled by Next.js / tsc directly
+ *     also use NodeNext. All relative imports in source must end with .js.
+ *   — baseUrl + paths live here so every package and app inherits them without
+ *     repeating the mapping.
+ *
+ * PACKAGE tsconfig.json (internal or public)
+ *   Extends ../../tsconfig.base.json — inherits paths, strict, target.
+ *   Overrides only what the package specifically needs (jsx, lib, outDir).
+ *
+ *   Internal  (private: true in package.json)
+ *     — no `declaration` / `declarationMap` needed in theory, but we keep them
+ *       so IDEs get go-to-definition inside the monorepo.
+ *     — composite: true + incremental for fast Nx caching.
+ *
+ *   Public  (to be published to npm)
+ *     — declaration + declarationMap required by consumers.
+ *     — composite: true for project references.
+ *     — stripInternal: true so @internal JSDoc strips from .d.ts.
+ *     — no `rootDir` override needed because extend covers it.
+ *
+ * APP tsconfig.json
+ *   Extends ../../tsconfig.base.json.
+ *   Each framework adds its own lib / jsx overrides.
+ *   No packages/**\/* in `include` — paths handles resolution, and polluting
+ *   include causes duplicate type-checking and false errors.
+ */
+import type { PackageVisibility } from "./config.js";
+export type { PackageVisibility };
+export declare function rootTsConfigBase(scope: string): object;
+interface PackageTsConfigOptions {
+    scope: string;
+    pkgName: string;
+    visibility: PackageVisibility;
+    /** true for React component packages — adds jsx and DOM lib */
+    react?: boolean;
+    /** Relative path from package dir to workspace root, default "../../" */
+    rootRelative?: string;
+}
+export declare function packageTsConfig(opts: PackageTsConfigOptions): object;
+type AppFramework = "nextjs" | "vite" | "remix" | "expo";
+interface AppTsConfigOptions {
+    scope: string;
+    framework: AppFramework;
+    hasSrcDir: boolean;
+}
+export declare function appTsConfig(opts: AppTsConfigOptions): object;
+//# sourceMappingURL=tsconfigs.d.ts.map

package/dist/tsconfigs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tsconfigs.d.ts","sourceRoot":"","sources":["../src/tsconfigs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACrD,YAAY,EAAE,iBAAiB,EAAE,CAAC;AAIlC,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CA6BtD;AAID,UAAU,sBAAsB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,iBAAiB,CAAC;IAC9B,+DAA+D;IAC/D,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,yEAAyE;IACzE,YAAY,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,sBAAsB,GAAG,MAAM,CA4CpE;AAID,KAAK,YAAY,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;AAEzD,UAAU,kBAAkB;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,YAAY,CAAC;IACxB,SAAS,EAAE,OAAO,CAAC;CACnB;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,kBAAkB,GAAG,MAAM,CA6B5D"}