@bardioc/create-bardioc-app 0.5.3 → 0.5.5

package/README.md

@@ -8,10 +8,10 @@ Scaffold a Vite app wired for `@bardioc/app-sdk`.
 
 ## Install
 
-Configure the `@bardioc` scoped registry and install the CLI globally:
+Install the CLI globally from the public npm registry:
 
 ```bash
-npm config set @bardioc:registry http://nexus.almato.com/repository/npm-group/ --location=user && npm install -g @bardioc/create-bardioc-app
+npm install -g @bardioc/create-bardioc-app
 ```
 
 If your default npm registry is not `https://registry.npmjs.org/`, set it in your user-level npm config before installing app dependencies.
@@ -28,10 +28,10 @@ npm exec --yes @bardioc/create-bardioc-app my-app -- --port 3005
 create-bardioc-app my-app --port 3005
 cd my-app
 npm install
-bardioc login
-npm run dev
 ```
 
+Copy `.env.example` to `.env` and fill in `VITE_APP_NAME`, `DEV_SECRET`, and `API_BASE_URL`. Then run `npm run dev`.
+
 ## Generated app
 
 The generated app includes:
@@ -39,7 +39,7 @@ The generated app includes:
 - React + Vite project structure (or your chosen `--template`)
 - `@bardioc/app-sdk` dependency
 - `AppSdkProvider` wiring
-- optional host-backed standalone dev-session wiring via `.env`
+- optional standalone dev-auth wiring via `.env` (`DEV_SECRET` proxy)
 - a compact SDK demo with notification and transport examples
 - `public/app-manifest.json`
 
@@ -64,18 +64,15 @@ Heavier, environment-specific tooling is **off by default** — pass a flag to i
 - **`--with-link`** — the **`link:source` / `unlink:source`** dev flow (`scripts/link-source.mjs` +
   `pnpm-workspace.yaml` + `.npmrc`) for developing against an in-tree `@bardioc/*` source checkout.
 
-## Standalone dev session
+## Standalone dev auth
 
-Generated apps can opt into the same host-backed standalone dev-session flow used by the SDK examples.
+Generated apps can run standalone with the `DEV_SECRET` dev-auth proxy.
 
 1. Copy `.env.example` to `.env`
-2. Fill in `VITE_APP_NAME`, `VITE_APP_ID`, and `DEV_AUTH_HOST_URL`
-3. Run `bardioc login` once for that host
-4. Set `VITE_ENABLE_DEV_AUTH=true`
-
-Important: standalone login will not start unless `VITE_ENABLE_DEV_AUTH=true` is present in `.env`. Running `npm run dev` with only `VITE_APP_NAME` and `VITE_APP_ID` is not enough.
+2. Fill in `VITE_APP_NAME`, `DEV_SECRET`, and `API_BASE_URL`
+3. Run `npm run dev`
 
-When enabled, running `npm run dev` outside the host iframe will use your stored CLI login to mint a fresh host dev session before the dev server starts, then route SDK transport calls through the local proxy into the host transport. `DEV_SESSION_KEY` no longer needs to be copied manually. If a request needs a specific scope, pass `scopeId` on that request.
+When running outside the host iframe, the Vite plugin proxies `/rest/*` to `API_BASE_URL` with the `X-Dev-Secret` header and `installDevBridge()` handles SDK messages.
 
 For public testing, run `npm run dev:live` and use the emitted tunnel URL as the app's live URL in the host App Store configuration.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bardioc/create-bardioc-app",
-  "version": "0.5.3",
+  "version": "0.5.5",
   "description": "Scaffold a Bardioc app with framework templates (vite, react, vue, angular, svelte, solid, preact, nextjs)",
   "license": "MIT",
   "private": false,
@@ -30,10 +30,10 @@
     "react"
   ],
   "devDependencies": {
-    "@vitest/coverage-v8": "4.1.5",
-    "@types/node": "^25.6.0",
-    "typescript": "^6.0.3",
-    "vitest": "4.1.5"
+    "@vitest/coverage-v8": "^4.1.8",
+    "@types/node": "^25.9.1",
+    "typescript": "6.0.3",
+    "vitest": "^4.1.8"
   },
   "scripts": {
     "check-types": "tsc --noEmit",

package/templates/angular/.env.example

@@ -1,5 +1,7 @@
 VITE_APP_NAME={{APP_NAME}}
-VITE_APP_ID=your-app-client-id-here
-VITE_ENABLE_DEV_AUTH=false
-DEV_AUTH_HOST_URL=
-DEV_SESSION_KEY=
+
+# Dev auth proxy secret for local standalone development.
+DEV_SECRET=
+
+# Base URL of the Bardioc API the dev auth proxy should forward to.
+API_BASE_URL=

package/templates/angular/public/runtime-env.js

@@ -1 +1 @@
-window.__BARDIOC_RUNTIME_ENV__ = {};
+window.__BARDIOC_RUNTIME_ENV__ = {};

package/templates/angular/scripts/dev-auth-proxy.mjs

@@ -12,15 +12,14 @@ const appPort = readAppPort();
 const proxyPort = appPort + 100;
 const env = loadEnv(projectRoot);
 
-if (!env.VITE_APP_ID || !env.DEV_AUTH_HOST_URL || !env.DEV_SESSION_KEY) {
-  process.stderr.write('[bardioc-dev-auth-proxy] missing env, proxy disabled\n');
+if (!env.DEV_SECRET || !env.API_BASE_URL) {
+  process.stderr.write('[bardioc-dev-auth-proxy] missing DEV_SECRET or API_BASE_URL, proxy disabled\n');
   await new Promise(() => {});
 }
 
 const handler = createDevAuthProxyHandler({
-  appId: env.VITE_APP_ID,
-  hostUrl: env.DEV_AUTH_HOST_URL,
-  devSessionKey: env.DEV_SESSION_KEY,
+  apiBaseUrl: env.API_BASE_URL,
+  devSecret: env.DEV_SECRET,
   allowOrigin: '*',
 });
 
@@ -29,7 +28,7 @@ const server = createServer((req, res) => {
 });
 
 server.listen(proxyPort, '127.0.0.1', () => {
-  process.stdout.write(`[bardioc-dev-auth-proxy] listening on http://127.0.0.1:${proxyPort}/proxy\n`);
+  process.stdout.write(`[bardioc-dev-auth-proxy] listening on http://127.0.0.1:${proxyPort}/rest\n`);
 });
 
 for (const signal of ['SIGINT', 'SIGTERM']) {
@@ -89,4 +88,4 @@ function parseEnv(source) {
   }
 
   return result;
-}
+}

package/templates/angular/scripts/sync-runtime-env.mjs

@@ -7,41 +7,19 @@ import { fileURLToPath } from 'node:url';
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const projectRoot = resolve(__dirname, '..');
 const env = loadEnv(projectRoot);
-const appPort = readAppPort();
-const proxyPort = appPort + 100;
 
 const runtimeEnv = {
   VITE_APP_NAME: env.VITE_APP_NAME,
-  VITE_APP_ID: env.VITE_APP_ID,
-  VITE_ENABLE_DEV_AUTH: env.VITE_ENABLE_DEV_AUTH,
-  DEV_AUTH_HOST_URL: env.DEV_AUTH_HOST_URL,
-  DEV_SESSION_KEY: env.DEV_SESSION_KEY,
 };
 
-const injectedDevAuth =
-  env.DEV_AUTH_HOST_URL && env.DEV_SESSION_KEY
-    ? {
-        hostUrl: env.DEV_AUTH_HOST_URL,
-        sessionKey: env.DEV_SESSION_KEY,
-        proxyUrl: `http://127.0.0.1:${proxyPort}/proxy`,
-      }
-    : null;
-
 const outputPath = join(projectRoot, 'public', 'runtime-env.js');
 mkdirSync(dirname(outputPath), { recursive: true });
 writeFileSync(
   outputPath,
-  `window.__BARDIOC_RUNTIME_ENV__ = ${JSON.stringify(runtimeEnv, null, 2)};\nwindow.__BARDIOC_DEV_AUTH__ = ${JSON.stringify(injectedDevAuth, null, 2)};\n`,
+  `window.__BARDIOC_RUNTIME_ENV__ = ${JSON.stringify(runtimeEnv, null, 2)};\n`,
   'utf8'
 );
 
-function readAppPort() {
-  const flagIndex = process.argv.indexOf('--app-port');
-  const raw = flagIndex >= 0 ? process.argv[flagIndex + 1] : undefined;
-  const parsed = Number.parseInt(raw ?? '{{PORT}}', 10);
-  return Number.isFinite(parsed) ? parsed : {{PORT}};
-}
-
 function loadEnv(projectDir) {
   const result = {};
 
@@ -86,4 +64,4 @@ function parseEnv(source) {
   }
 
   return result;
-}
+}

package/templates/angular/src/app/app.component.ts

@@ -3,27 +3,6 @@ import { JsonPipe } from '@angular/common';
 import { Component, inject, signal } from '@angular/core';
 import { BARDIOC_BRIDGE } from './bardioc.token';
 import type { HostBridge } from '@bardioc/app-sdk';
-import { readRuntimeEnv } from '../runtime-env';
-
-type InjectedDevAuthConfig = {
-  hostUrl?: string;
-  sessionKey?: string;
-};
-
-function readInjectedDevAuthConfig(): InjectedDevAuthConfig | null {
-  const config = (globalThis as typeof globalThis & {
-    __BARDIOC_DEV_AUTH__?: InjectedDevAuthConfig;
-  }).__BARDIOC_DEV_AUTH__;
-
-  if (!config?.hostUrl || !config?.sessionKey) {
-    return null;
-  }
-
-  return {
-    hostUrl: config.hostUrl,
-    sessionKey: config.sessionKey,
-  };
-}
 
 type ResultState =
   | { status: 'idle' }
@@ -115,14 +94,8 @@ type ResultState =
 })
 export class AppComponent {
   private bridge = inject(BARDIOC_BRIDGE, { optional: true }) as HostBridge | null;
-  private injectedDevAuth = readInjectedDevAuthConfig();
-  
-  showSdkDemo =
-    isInsideIframe() ||
-    (readRuntimeEnv('VITE_ENABLE_DEV_AUTH') === 'true' &&
-      !!this.injectedDevAuth?.hostUrl &&
-      !!this.injectedDevAuth?.sessionKey &&
-      isDevStandalone());
+
+  showSdkDemo = isInsideIframe() || isDevStandalone();
   result = signal<ResultState>({ status: 'idle' });
   running = signal(false);
 
@@ -135,11 +108,11 @@ export class AppComponent {
 
     const startTime = Date.now();
     this.bridge.notify('Getting user profile', 'info');
-    
+
     try {
       const data = await this.bridge.transport.os.profile.get();
       const duration = Date.now() - startTime;
-      this.bridge.notify(`Profile loaded (${duration}ms)`, 'success');
+      this.bridge.notify(`Profile loaded (${duration}ms)`, 'success`);
       this.result.set({ status: 'success', request, data });
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);

package/templates/angular/src/app/bardioc-bridge.ts

@@ -1,5 +1,5 @@
 import { createHostBridge, type HostBridge } from '@bardioc/app-sdk';
 
-export function createBardiocBridge(appId: string): HostBridge {
-	return createHostBridge({ appId });
-}
+export function createBardiocBridge(): HostBridge {
+  return createHostBridge({});
+}

package/templates/angular/src/index.html

@@ -1,5 +1,5 @@
-<!DOCTYPE html>
-<html lang="en" class="dark" style="height: 100%; margin: 0">
+<!doctype html>
+<html lang="en" class="dark" style="height: 100%; margin: 0; color-scheme: dark">
   <head>
     <meta charset="utf-8" />
     <title>{{DISPLAY_NAME}}</title>

package/templates/angular/src/main.ts

@@ -1,65 +1,31 @@
 import {
-  ensureDevAuthSession,
   installDevBridge,
   isDevStandalone,
   isInsideIframe,
 } from '@bardioc/app-sdk/dev';
 import { bootstrapApplication } from '@angular/platform-browser';
 import { provideHttpClient } from '@angular/common/http';
-import { isDevMode, type EnvironmentProviders, type Provider } from '@angular/core';
+import { type EnvironmentProviders, type Provider } from '@angular/core';
 import { AppComponent } from './app/app.component';
 import { createBardiocBridge } from './app/bardioc-bridge';
 import { BARDIOC_BRIDGE } from './app/bardioc.token';
-import { readRuntimeEnv } from './runtime-env';
 import './styles.css';
 
-type InjectedDevAuthConfig = {
-  hostUrl?: string;
-  sessionKey?: string;
-  proxyUrl?: string;
-};
-
-function readInjectedDevAuthConfig(): InjectedDevAuthConfig | null {
-  const config = (globalThis as typeof globalThis & {
-    __BARDIOC_DEV_AUTH__?: InjectedDevAuthConfig;
-  }).__BARDIOC_DEV_AUTH__;
-
-  if (!config?.hostUrl || !config?.sessionKey) {
-    return null;
-  }
-
-  return {
-    hostUrl: config.hostUrl,
-    sessionKey: config.sessionKey,
-    proxyUrl: typeof config.proxyUrl === 'string' ? config.proxyUrl : undefined,
-  };
+function readAppPort(): number {
+  const parsed = Number.parseInt(window.location.port, 10);
+  return Number.isFinite(parsed) ? parsed : {{PORT}};
 }
 
-const APP_NAME = (readRuntimeEnv('VITE_APP_NAME') ?? document.title.trim()) || 'Bardioc App';
-const APP_ID = readRuntimeEnv('VITE_APP_ID');
-const injectedDevAuth = readInjectedDevAuthConfig();
-const standaloneDevAuthEnabled =
-  isDevMode() &&
-  readRuntimeEnv('VITE_ENABLE_DEV_AUTH') === 'true' &&
-  !!injectedDevAuth?.hostUrl &&
-  !!injectedDevAuth?.sessionKey;
-
+const appPort = readAppPort();
+const proxyPort = appPort + 100;
 const insideIframe = isInsideIframe();
-const devStandalone = standaloneDevAuthEnabled && isDevStandalone();
+const devStandalone = isDevStandalone();
 const useSdkProvider = insideIframe || devStandalone;
 
-if (useSdkProvider && !APP_ID) {
-  throw new Error('Missing VITE_APP_ID for SDK runtime');
-}
-
 async function bootstrap() {
   if (devStandalone) {
-    await ensureDevAuthSession({ appId: APP_ID!, appName: APP_NAME });
     installDevBridge({
-      appId: APP_ID!,
-      appName: APP_NAME,
-      debug: false,
-      proxyPath: injectedDevAuth?.proxyUrl,
+      apiBaseUrl: `http://127.0.0.1:${proxyPort}/rest`,
     });
   }
 
@@ -70,7 +36,7 @@ async function bootstrap() {
   if (useSdkProvider) {
     providers.push({
       provide: BARDIOC_BRIDGE,
-      useValue: createBardiocBridge(APP_ID!),
+      useValue: createBardiocBridge(),
     });
   }
 

package/templates/angular/src/runtime-env.ts

@@ -14,4 +14,4 @@ export function readRuntimeEnv(name: string): string | undefined {
 
   const trimmed = value.trim();
   return trimmed.length > 0 ? trimmed : undefined;
-}
+}