@abloatai/cli 0.59.1 → 0.60.0

package/dist/cli.cjs

@@ -3976,7 +3976,7 @@ var init_observeCliError = __esm({
     import_errorObservation = require("@abloatai/transaction/errorObservation");
     import_errors5 = require("@abloatai/transaction/errors");
     dsn = process.env.ABLO_CLI_SENTRY_DSN ?? "https://1ac154bff10b06836e1ea9de9e0d92f0@o4510928209772544.ingest.de.sentry.io/4511660691423312" ?? "";
-    release = process.env.ABLO_CLI_RELEASE ?? "@abloatai/cli@0.59.1";
+    release = process.env.ABLO_CLI_RELEASE ?? "@abloatai/cli@0.60.0";
     initialized = false;
     nativeProcessExit = process.exit.bind(process);
     exitBoundaryInstalled = false;
@@ -4311,7 +4311,7 @@ var init_src2 = __esm({
 
 // src/cliEnvironment.ts
 function cliVersion() {
-  return "0.59.1";
+  return "0.60.0";
 }
 function cliOs() {
   const value = (0, import_node_os.platform)();
@@ -289581,7 +289581,7 @@ async function upgrade(argv) {
       const stale = jsx.getAttributes().some(
         (a) => import_ts_morph.Node.isJsxAttribute(a) && ["schema", "teamIds", "authEndpoint", "scope", "apiKey"].includes(a.getNameNode().getText())
       );
-      if (stale) flag2(jsx, "<AbloProvider> props", "AbloProvider takes only `client` (+ userId/fallback/onError). Build `const ablo = Ablo({ schema, authEndpoint })` and pass `client={ablo}`.");
+      if (stale) flag2(jsx, "<AbloProvider> props", "AbloProvider takes only `client` (+ userId/fallback/onError). Build `const ablo = Ablo({ schema, session: { endpoint } })` and pass `client={ablo}`.");
     }
   }
   const cwd = process.cwd();
@@ -290409,7 +290409,7 @@ import Ablo from '@abloatai/ablo';
 import { AbloProvider } from '@abloatai/ablo/react';
 import { schema } from '@/ablo/schema';
 
-const ablo = Ablo({ schema, authEndpoint: '/api/ablo-session' });
+const ablo = Ablo({ schema, session: { endpoint: '/api/ablo-session' } });
 
 export function Providers({ children }: { children: React.ReactNode }) {
   return <AbloProvider client={ablo}>{children}</AbloProvider>;
@@ -290418,77 +290418,34 @@ export function Providers({ children }: { children: React.ReactNode }) {
 }
 function generateSessionRoute() {
   return `import { headers } from 'next/headers';
-import {
-  credentialEndpointErrorSchema,
-  credentialEndpointSuccessSchema,
-} from '@abloatai/ablo/auth';
-import { sync } from '@/ablo';
+import Sessions from '@abloatai/ablo/sessions';
+import { schema } from '@/ablo/schema';
 import { auth } from '@/lib/auth';
 
-const noStore = { 'Cache-Control': 'no-store' };
-
-export async function POST(request: Request): Promise<Response> {
-  if (!(await isSameOrigin(request))) {
-    return Response.json(
-      credentialEndpointErrorSchema.parse({
-        error: { code: 'origin_mismatch', message: 'Cross-origin mint rejected' },
-      }),
-      { status: 403, headers: noStore },
-    );
-  }
-
-  const user = await getCurrentUser();
-  if (!user) {
-    return Response.json(
-      credentialEndpointErrorSchema.parse({
-        error: { code: 'session_expired', message: 'Sign in again' },
-      }),
-      { status: 401, headers: noStore },
-    );
-  }
-
-  const authorizedScope = await authorizeActiveWorkspace(user.id);
-  if (!authorizedScope) {
-    return Response.json(
-      credentialEndpointErrorSchema.parse({
-        error: { code: 'policy_denied', message: 'Workspace membership is stale or revoked' },
-      }),
-      { status: 403, headers: noStore },
-    );
-  }
-
-  const { token, expiresAt } = await sync.sessions.create({
-    user: { id: user.id },
-    // These ids came from the server-side membership lookup below. Never take
-    // organization, workspace, team, or group ids from the request body.
-    syncGroups: authorizedScope.syncGroups,
-    can: { records: ['read', 'create', 'update'] },
-  });
-  return Response.json(
-    credentialEndpointSuccessSchema.parse({
-      token,
-      expiresAt,
-      credentialKind: 'ephemeral',
-    }),
-    { headers: noStore },
-  );
-}
+const sessions = Sessions({ schema, apiKey: process.env.ABLO_API_KEY });
 
-async function isSameOrigin(request: Request): Promise<boolean> {
-  const origin = request.headers.get('origin');
-  if (!origin) return request.headers.get('sec-fetch-site') !== 'cross-site';
-  const host = (await headers()).get('host');
-  return host !== null && new URL(origin).host === host;
-}
+export const POST = sessions.handler({
+  async authenticate() {
+    const session = await auth.api.getSession({ headers: await headers() });
+    return session?.user ?? null;
+  },
+  async grant({ principal: user }) {
+    const authorizedScope = await authorizeActiveWorkspace(user.id);
+    if (!authorizedScope) return null;
 
-async function getCurrentUser(): Promise<{ id: string } | null> {
-  const session = await auth.api.getSession({ headers: await headers() });
-  return session?.user ? { id: session.user.id } : null;
-}
+    return {
+      user: { id: user.id },
+      // These ids came from the server-side membership lookup below. Never take
+      // organization, workspace, team, or group ids from the request body.
+      groups: authorizedScope.groups,
+      can: { records: ['read', 'create', 'update'] },
+    };
+  },
+});
 
 type AuthorizedWorkspace = {
   workspaceId: string;
-  syncGroups: readonly [\`workspace:\${string}\`, ...\`\${string}:\${string}\`[]];
+  groups: readonly [\`workspace:\${string}\`, ...\`\${string}:\${string}\`[]];
 };
 
 async function authorizeActiveWorkspace(userId: string): Promise<AuthorizedWorkspace | null> {
@@ -290502,7 +290459,7 @@ async function authorizeActiveWorkspace(userId: string): Promise<AuthorizedWorks
   // Example after your membership query:
   // return {
   //   workspaceId: membership.workspaceId,
-  //   syncGroups: [\`workspace:\${membership.workspaceId}\`],
+  //   groups: [\`workspace:\${membership.workspaceId}\`],
   // };
   return null;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@abloatai/cli",
-  "version": "0.59.1",
+  "version": "0.60.0",
   "description": "The ablo command line: set up Ablo, connect your database, and push your schema from the terminal.",
   "license": "Apache-2.0",
   "homepage": "https://docs.abloatai.com/cli",
@@ -41,10 +41,10 @@
   },
   "dependencies": {
     "@sentry/node": "^10.18.0",
-    "@abloatai/transaction": "^0.59.1",
+    "@abloatai/transaction": "^0.60.0",
     "jiti": "^2.7.0",
     "zod": "^4.4.3",
-    "@abloatai/humans": "^0.59.1"
+    "@abloatai/humans": "^0.60.0"
   },
   "devDependencies": {
     "@ablo/product-analytics": "file:../product-analytics",