feat(cli): pre-create .env files in scaffold + run-locally docs (0.1.2)

Copies each app's .env.example -> .env (gitignored) with a generated dev
BETTER_AUTH_SECRET, so scaffolded projects run locally with no env hand-editing.
Generated README gains a Run-locally section (Docker + Encore CLI prereqs).
Renamed env.d.ts -> tiged.d.ts to free env.ts. Bump 0.1.1 -> 0.1.2.

Author: LeoRedin

tools/create-rhitta/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-rhitta",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Scaffold a new Rhitta monorepo project.",
   "license": "MIT",
   "type": "module",

tools/create-rhitta/src/env.ts

@@ -0,0 +1,8 @@
+/**
+ * Produce a ready-to-use `.env` body from a committed `.env.example`, filling in
+ * the dev-time `BETTER_AUTH_SECRET` with a generated value. Examples without that
+ * line (e.g. the web app's) pass through unchanged.
+ */
+export function fillEnvFromExample(example: string, betterAuthSecret: string): string {
+  return example.replace(/^BETTER_AUTH_SECRET=.*$/m, `BETTER_AUTH_SECRET=${betterAuthSecret}`)
+}

tools/create-rhitta/src/post.ts

@@ -1,10 +1,15 @@
 import { execFileSync } from 'node:child_process'
+import { randomBytes } from 'node:crypto'
 import { cpSync, existsSync, readFileSync, rmSync, symlinkSync, writeFileSync } from 'node:fs'
 import { resolve } from 'node:path'
+import { fillEnvFromExample } from './env.js'
 import { renderReadme } from './readme.js'
 import { deriveToolVersions } from './toolversions.js'
 import type { ScaffoldParams } from './types.js'
 
+/** Apps whose committed `.env.example` is copied to a runnable `.env`. */
+const ENV_APPS = ['api', 'web', 'mobile']
+
 /** Move the transformed temp tree into the target dir, write README, git init, install, build. */
 export function finalize(
   tempTree: string,
@@ -39,6 +44,17 @@ export function finalize(
   const ruby = existsSync(rubyVersionPath) ? readFileSync(rubyVersionPath, 'utf8') : undefined
   writeFileSync(resolve(target, '.tool-versions'), deriveToolVersions(nvmrc, packageManager, ruby))
 
+  // Copy each app's .env.example -> .env (gitignored) with a generated dev auth secret,
+  // so the project runs locally without hand-editing env files.
+  const betterAuthSecret = randomBytes(32).toString('base64')
+  for (const app of ENV_APPS) {
+    const example = resolve(target, 'apps', app, '.env.example')
+    const dotenv = resolve(target, 'apps', app, '.env')
+    if (existsSync(example) && !existsSync(dotenv)) {
+      writeFileSync(dotenv, fillEnvFromExample(readFileSync(example, 'utf8'), betterAuthSecret))
+    }
+  }
+
   if (opts.git) {
     execFileSync('git', ['init', '-q'], { cwd: target })
   }

tools/create-rhitta/src/readme.ts

@@ -21,7 +21,26 @@ pnpm build      # build shared packages (they export from dist/)
 pnpm validate   # lint + typecheck + structure validation
 \`\`\`
 
-Run each app: \`pnpm dev:api\`, \`pnpm dev:web\`, \`pnpm dev:mobile\`.
+## Run locally
+
+Prerequisites:
+
+- **Docker** running — the API's database is provisioned automatically by Encore.
+- **Encore CLI** — \`curl -fsSL https://encore.dev/install.sh | bash\`.
+
+\`.env\` files are pre-created for you from each app's \`.env.example\` (with a generated
+dev auth secret). Optional integrations (Anthropic, Resend, S3) fall back to in-memory
+adapters when their keys are blank, so everything runs with no extra setup — drop in real
+keys in \`apps/api/.env\` when you want them.
+
+\`\`\`bash
+pnpm dev:api      # Encore — auto-provisions a local Postgres (Docker) + runs migrations
+pnpm dev:web      # TanStack Start (Vite), points at the local API
+pnpm dev:mobile   # Expo — run \`pnpm --filter @rhitta/mobile prebuild:clean\` first for native iOS/Android
+\`\`\`
+
+No manual database setup or connection strings: Encore owns the local Postgres and applies
+the Drizzle migrations on \`dev:api\` startup.
 
 ## Workspaces
 

tools/create-rhitta/test/env.test.ts

@@ -0,0 +1,20 @@
+import { describe, expect, it } from 'vitest'
+import { fillEnvFromExample } from '../src/env.js'
+
+describe('fillEnvFromExample', () => {
+  it('replaces the BETTER_AUTH_SECRET placeholder with the generated secret', () => {
+    const example =
+      'DATABASE_URL=postgres://x\nBETTER_AUTH_SECRET=replace-me\nBETTER_AUTH_URL=http://localhost:4000\n'
+    const out = fillEnvFromExample(example, 'GENERATED==')
+    expect(out).toContain('BETTER_AUTH_SECRET=GENERATED==')
+    expect(out).not.toContain('replace-me')
+    // untouched lines survive
+    expect(out).toContain('DATABASE_URL=postgres://x')
+    expect(out).toContain('BETTER_AUTH_URL=http://localhost:4000')
+  })
+
+  it('passes through an example with no BETTER_AUTH_SECRET line unchanged', () => {
+    const example = 'VITE_API_URL=http://localhost:4000\n'
+    expect(fillEnvFromExample(example, 'GENERATED==')).toBe(example)
+  })
+})