@assembly-js/app-foundation 0.0.10-rc.1 → 0.0.10

package/bin/check-token-usage.mjs

@@ -1,7 +1,8 @@
 #!/usr/bin/env node
-// Fails the build if any page reads the session token from `searchParams`.
-// Dependency-free on purpose: it runs inside the generated app's sandbox before
-// any deps beyond Node exist.
+// Fails the build if any page reads the session token from `searchParams` —
+// except in a legacy (pre-bearer) app, where it's the only identity path and
+// this is a warning instead. Dependency-free on purpose: it runs inside the
+// generated app's sandbox before any deps beyond Node exist.
 //
 // Auth is cookie-borne in the bearer model: the foundation middleware exchanges
 // the first-load `?token=` for an HttpOnly bearer cookie exactly once, and
@@ -10,12 +11,25 @@
 // renders its auth-rejection state to everyone after any client-side navigation
 // (`router.push`, `<Link>`), which drops query params. Fetch per-user data via
 // server actions (useServerAction) or authFetch route handlers instead.
+//
+// A legacy app (cloned before the bearer model existed) has no bearer cookie to
+// exchange into — URL-token auth is its only identity path, so the same pattern
+// is expected there, not a bug. Severity is decided by probing two marker files
+// from the checkout root, mirroring ProbeFoundationAuthVersionFromGithub in
+// logic_build.go (mintBearerProbePath / packageWorldProbePath): mint-bearer.ts
+// present -> bearer-capable, fatal; absent + assembly.ts present -> legacy, warn
+// and exit 0; neither present -> package-world app (bearer-capable via
+// @assembly-js/app-foundation in node_modules), fatal as today.
 import { readFileSync, readdirSync, existsSync } from 'node:fs';
 import { join, relative, sep } from 'node:path';
 
 const ROOT = process.cwd();
 const APP_DIR = join(ROOT, 'app');
 
+// Mirrors mintBearerProbePath / packageWorldProbePath in logic_build.go.
+const MINT_BEARER_PROBE_PATH = 'lib/mint-bearer.ts';
+const PACKAGE_WORLD_PROBE_PATH = 'lib/assembly.ts';
+
 function pageFiles(dir) {
   const out = [];
   for (const entry of readdirSync(dir, { withFileTypes: true })) {
@@ -114,11 +128,23 @@ for (const file of pageFiles(APP_DIR)) {
 }
 
 if (violations.length > 0) {
+  const isLegacy =
+    !existsSync(join(ROOT, MINT_BEARER_PROBE_PATH)) && existsSync(join(ROOT, PACKAGE_WORLD_PROBE_PATH));
+
   console.error('');
   console.error('A page reads the session token from searchParams:');
   console.error('');
   for (const v of violations) console.error('  - ' + v);
   console.error('');
+
+  if (isLegacy) {
+    console.error('This is a pre-bearer app, so this is a warning, not a build failure:');
+    console.error('URL-token auth is its only identity path. Because client-side navigation');
+    console.error('(router.push, <Link>) drops query params, any page reading');
+    console.error('searchParams.token must thread the token through its outgoing hrefs.');
+    process.exit(0);
+  }
+
   console.error('Auth is in the bearer cookie, not the URL — no page, not even a surface');
   console.error('entry page, should read searchParams.token. getAssembly() and');
   console.error('getSessionIdentity() read the bearer cookie; fetch per-user data via');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@assembly-js/app-foundation",
-  "version": "0.0.10-rc.1",
+  "version": "0.0.10",
   "description": "Versioned foundation helpers and build context for Assembly generated apps",
   "type": "module",
   "files": [