@decohere/scaffold 0.0.1-dev.18 → 0.0.1-dev.20261105.54

package/commonjs/src/webapi/auth0-commands.js

@@ -0,0 +1,250 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+function _export(target, all) {
+    for(var name in all)Object.defineProperty(target, name, {
+        enumerable: true,
+        get: Object.getOwnPropertyDescriptor(all, name).get
+    });
+}
+_export(exports, {
+    get AUTH0_CLI_INSTALL_MESSAGE () {
+        return AUTH0_CLI_INSTALL_MESSAGE;
+    },
+    get ensureLoggedIn () {
+        return ensureLoggedIn;
+    },
+    get requireInstalled () {
+        return requireInstalled;
+    },
+    get runAuth0Configure () {
+        return runAuth0Configure;
+    },
+    get runAuth0Login () {
+        return runAuth0Login;
+    }
+});
+const _nodefs = require("node:fs");
+const _nodepath = require("node:path");
+const _apiname = require("./api-name.js");
+const _authorizescopes = require("./authorize-scopes.js");
+const _auth0cli = /*#__PURE__*/ _interop_require_wildcard(require("./features/auth0-cli.js"));
+function _getRequireWildcardCache(nodeInterop) {
+    if (typeof WeakMap !== "function") return null;
+    var cacheBabelInterop = new WeakMap();
+    var cacheNodeInterop = new WeakMap();
+    return (_getRequireWildcardCache = function(nodeInterop) {
+        return nodeInterop ? cacheNodeInterop : cacheBabelInterop;
+    })(nodeInterop);
+}
+function _interop_require_wildcard(obj, nodeInterop) {
+    if (!nodeInterop && obj && obj.__esModule) {
+        return obj;
+    }
+    if (obj === null || typeof obj !== "object" && typeof obj !== "function") {
+        return {
+            default: obj
+        };
+    }
+    var cache = _getRequireWildcardCache(nodeInterop);
+    if (cache && cache.has(obj)) {
+        return cache.get(obj);
+    }
+    var newObj = {
+        __proto__: null
+    };
+    var hasPropertyDescriptor = Object.defineProperty && Object.getOwnPropertyDescriptor;
+    for(var key in obj){
+        if (key !== "default" && Object.prototype.hasOwnProperty.call(obj, key)) {
+            var desc = hasPropertyDescriptor ? Object.getOwnPropertyDescriptor(obj, key) : null;
+            if (desc && (desc.get || desc.set)) {
+                Object.defineProperty(newObj, key, desc);
+            } else {
+                newObj[key] = obj[key];
+            }
+        }
+    }
+    newObj.default = obj;
+    if (cache) {
+        cache.set(obj, newObj);
+    }
+    return newObj;
+}
+/** Same Postman OAuth callbacks as `PostmanFeature`. */ const POSTMAN_CALLBACKS = [
+    "https://oauth.pstmn.io/v1/callback",
+    "https://oauth.pstmn.io/v1/browser-callback"
+];
+const SPA_SUFFIX = " Postman";
+const AUTH0_CLI_INSTALL_MESSAGE = "The Auth0 CLI is required.\n" + "  It is bundled in the Decohere create image (`npx @decohere/create auth0 login`).\n" + "  Host install: brew install auth0/auth0-cli/auth0\n" + "  Or visit: https://github.com/auth0/auth0-cli";
+function fail(message) {
+    throw new _apiname.CreateCliError(message);
+}
+function requireInstalled() {
+    if (_auth0cli.isInstalled()) return;
+    fail(AUTH0_CLI_INSTALL_MESSAGE);
+}
+function ensureLoggedIn() {
+    requireInstalled();
+    process.stdout.write("\n  Checking Auth0 credentials...");
+    let tenants = _auth0cli.listTenants();
+    if (tenants.length === 0) {
+        process.stdout.write(" not logged in.\n");
+        console.log("  Logging in to Auth0 (open the URL in your browser)...");
+        if (!_auth0cli.login()) fail("Auth0 login failed.");
+        tenants = _auth0cli.listTenants();
+    }
+    try {
+        _auth0cli.listApis();
+        process.stdout.write(" ok.\n");
+    } catch (err) {
+        if (err instanceof _auth0cli.Auth0AuthError) {
+            process.stdout.write(" token expired.\n");
+            console.log("  Re-authenticating (open the URL in your browser)...");
+            if (!_auth0cli.login()) fail("Auth0 login failed.");
+            tenants = _auth0cli.listTenants();
+        }
+    }
+    const active = tenants.find((t)=>t.active) ?? tenants[0];
+    if (active == null) fail("No Auth0 tenant after login.");
+    return active;
+}
+function runAuth0Login() {
+    requireInstalled();
+    console.log("  Logging in to Auth0 (open the URL in your browser)...");
+    if (!_auth0cli.login()) fail("Auth0 login failed.");
+    const tenants = _auth0cli.listTenants();
+    const active = tenants.find((t)=>t.active) ?? tenants[0];
+    if (active == null) fail("No Auth0 tenant after login.");
+    console.log(`\n  ✓ Auth0 tenant: https://${active.name}`);
+    console.log("    Tokens are stored in ~/.config/auth0 (mounted into the create image).");
+    console.log("    Next: npx @decohere/create auth0 configure");
+}
+function runAuth0Configure(directory = ".") {
+    const targetDir = (0, _nodepath.resolve)(directory);
+    if (!(0, _apiname.isDecohereWorkspace)(targetDir)) {
+        throw new _apiname.CreateCliError(`Not a Decohere workspace: ${targetDir}. Scaffold one first with \`npx @decohere/create webapi\`.`);
+    }
+    const active = ensureLoggedIn();
+    const issuerBaseUrl = `https://${active.name}`;
+    const projectName = process.env.DECOHERE_PROJECT_NAME?.trim() || (0, _nodepath.basename)(targetDir);
+    const envPath = (0, _nodepath.join)(targetDir, ".env");
+    const existing = readEnvFile(envPath);
+    const existingAudience = existing.AUTH0_AUDIENCE?.trim();
+    const discovered = (0, _authorizescopes.discoverAuthorizeScopes)(targetDir);
+    let existingScopes = [];
+    if (existingAudience) {
+        try {
+            existingScopes = _auth0cli.listApiScopes(existingAudience);
+        } catch (err) {
+            if (err instanceof _auth0cli.Auth0AuthError) throw err;
+        }
+    }
+    const apiScopes = resolveApiScopes(discovered, existingScopes);
+    console.log(discovered.length > 0 ? `  ✓ Scanned @Authorize — ${discovered.length} scope(s) from controllers` : "  ✓ No @Authorize in projects/*/src — keeping existing / Hello scopes");
+    let audience = existingAudience;
+    if (audience) {
+        try {
+            _auth0cli.updateApiScopes(audience, apiScopes);
+            console.log(`  ✓ API scopes ensured (${apiScopes.join(", ")})`);
+        } catch (err) {
+            console.error(`  ✗ Failed to update API scopes: ${err instanceof Error ? err.message : err}`);
+        }
+    } else {
+        const identifier = `https://api.${projectName}`;
+        console.log(`\n  Creating Auth0 API ${identifier}...`);
+        audience = _auth0cli.createApi(`${projectName} API`, identifier, apiScopes).identifier;
+        console.log(`  ✓ API created: ${audience}`);
+    }
+    const appName = `${projectName}${SPA_SUFFIX}`;
+    const app = _auth0cli.ensureSpaApp(appName, [
+        ...POSTMAN_CALLBACKS
+    ]);
+    console.log(app.reused ? `  ✓ Reusing Auth0 SPA app (${app.client_id})` : `  ✓ Auth0 SPA app created (${app.client_id})`);
+    try {
+        _auth0cli.enableConnectionForClient(_auth0cli.DB_CONNECTION_NAME, app.client_id);
+        console.log(`  ✓ Enabled ${_auth0cli.DB_CONNECTION_NAME} on SPA`);
+    } catch (err) {
+        console.error(`  ✗ Failed to enable DB connection on SPA: ${err instanceof Error ? err.message : err}`);
+    }
+    upsertEnv(envPath, {
+        AUTH0_ISSUER_BASE_URL: issuerBaseUrl,
+        AUTH0_AUDIENCE: audience
+    });
+    console.log(`  ✓ Wrote AUTH0_ISSUER_BASE_URL and AUTH0_AUDIENCE to .env`);
+    const adminSub = existing.AUTH0_ADMIN_USER_SUB?.trim();
+    if (adminSub) {
+        try {
+            _auth0cli.assignUserPermissions(adminSub, audience, apiScopes);
+            console.log(`  ✓ Assigned ${apiScopes.length} API permission(s) to admin user`);
+        } catch (err) {
+            console.error(`  ✗ Failed to assign admin permissions: ${err instanceof Error ? err.message : err}`);
+        }
+    }
+    const domain = issuerBaseUrl.replace(/^https?:\/\//, "");
+    patchPostmanAuth(targetDir, projectName, {
+        domain,
+        audience,
+        clientId: app.client_id,
+        scopes: (0, _authorizescopes.postmanRequestedScopes)(apiScopes)
+    });
+}
+function readEnvFile(path) {
+    if (!(0, _nodefs.existsSync)(path)) return {};
+    const out = {};
+    for (const line of (0, _nodefs.readFileSync)(path, "utf8").split("\n")){
+        const trimmed = line.trim();
+        if (trimmed === "" || trimmed.startsWith("#")) continue;
+        const eq = line.indexOf("=");
+        if (eq <= 0) continue;
+        out[line.slice(0, eq).trim()] = line.slice(eq + 1);
+    }
+    return out;
+}
+function resolveApiScopes(discovered, existing) {
+    const merged = (0, _authorizescopes.mergeApiScopes)(discovered, existing);
+    return merged.length > 0 ? merged : [
+        ..._auth0cli.HELLO_API_SCOPES
+    ].sort();
+}
+function upsertEnv(path, entries) {
+    let text = (0, _nodefs.existsSync)(path) ? (0, _nodefs.readFileSync)(path, "utf8") : "";
+    for (const [key, value] of Object.entries(entries)){
+        const re = new RegExp(`^${key}=.*$`, "m");
+        if (re.test(text)) {
+            text = text.replace(re, `${key}=${value}`);
+        } else {
+            text = `${text}${text === "" || text.endsWith("\n") ? "" : "\n"}${key}=${value}\n`;
+        }
+    }
+    if (text !== "" && !text.endsWith("\n")) text = `${text}\n`;
+    (0, _nodefs.writeFileSync)(path, text);
+}
+function patchPostmanAuth(targetDir, projectName, auth) {
+    const envYaml = (0, _nodepath.join)(targetDir, "postman/environments", `${projectName}-Local.environment.yaml`);
+    if ((0, _nodefs.existsSync)(envYaml)) {
+        let yaml = (0, _nodefs.readFileSync)(envYaml, "utf8");
+        yaml = replaceYamlKeyedValue(yaml, "auth0Domain", auth.domain);
+        yaml = replaceYamlKeyedValue(yaml, "auth0Audience", auth.audience);
+        yaml = replaceYamlKeyedValue(yaml, "auth0ClientId", auth.clientId);
+        yaml = replaceYamlKeyedValue(yaml, "authUrl", `https://${auth.domain}/authorize?audience=${auth.audience}`);
+        yaml = replaceYamlKeyedValue(yaml, "accessTokenUrl", `https://${auth.domain}/oauth/token`);
+        yaml = replaceYamlKeyedValue(yaml, "scope", auth.scopes);
+        (0, _nodefs.writeFileSync)(envYaml, yaml);
+        console.log(`  ✓ Updated Postman environment auth0ClientId (${auth.clientId})`);
+        console.log(`  ✓ Updated Postman token scopes`);
+    }
+    const collectionDef = (0, _nodepath.join)(targetDir, "postman/collections", `${projectName} WebAPI`, ".resources/definition.yaml");
+    if ((0, _nodefs.existsSync)(collectionDef)) {
+        let yaml = (0, _nodefs.readFileSync)(collectionDef, "utf8");
+        yaml = yaml.replace(/^(\s*clientId:\s*).+$/m, `$1${JSON.stringify(auth.clientId)}`);
+        yaml = yaml.replace(/^(\s*scope:\s*).+$/m, `$1${JSON.stringify(auth.scopes)}`);
+        (0, _nodefs.writeFileSync)(collectionDef, yaml);
+    }
+}
+/** Replace `key: <name>` / `value: …` pairs in Postman Local View environment YAML. */ function replaceYamlKeyedValue(yaml, key, value) {
+    const quoted = JSON.stringify(value);
+    const re = new RegExp(`(key:\\s*${key}\\s*\\n\\s*value:\\s*)[^\\n]+`, "m");
+    if (!re.test(yaml)) return yaml;
+    return yaml.replace(re, `$1${quoted}`);
+}

package/commonjs/src/webapi/authorize-scopes.js

@@ -0,0 +1,79 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+function _export(target, all) {
+    for(var name in all)Object.defineProperty(target, name, {
+        enumerable: true,
+        get: Object.getOwnPropertyDescriptor(all, name).get
+    });
+}
+_export(exports, {
+    get OIDC_SCOPES () {
+        return OIDC_SCOPES;
+    },
+    get discoverAuthorizeScopes () {
+        return discoverAuthorizeScopes;
+    },
+    get mergeApiScopes () {
+        return mergeApiScopes;
+    },
+    get postmanRequestedScopes () {
+        return postmanRequestedScopes;
+    }
+});
+const _nodefs = require("node:fs");
+const _nodepath = require("node:path");
+const _apiname = require("./api-name.js");
+const OIDC_SCOPES = [
+    "openid",
+    "profile",
+    "email"
+];
+const AUTHORIZE_RE = /@Authorize\(\s*(["'])([^"']+)\1(?:\s*,\s*(["'])([^"']+)\3)?\s*\)/g;
+function isAppSource(fileName) {
+    return fileName.endsWith(".ts") && !fileName.endsWith(".spec.ts") && !fileName.endsWith(".test.ts") && !fileName.endsWith(".d.ts");
+}
+function discoverAuthorizeScopes(rootDir) {
+    const scopes = new Set();
+    for (const apiName of (0, _apiname.listExistingApiNames)(rootDir)){
+        collectFromDir((0, _nodepath.join)(rootDir, "projects", apiName, "src"), scopes);
+    }
+    return [
+        ...scopes
+    ].sort();
+}
+function collectFromDir(dir, scopes) {
+    if (!(0, _nodefs.existsSync)(dir)) return;
+    for (const entry of (0, _nodefs.readdirSync)(dir, {
+        withFileTypes: true
+    })){
+        const path = (0, _nodepath.join)(dir, entry.name);
+        if (entry.isDirectory()) {
+            collectFromDir(path, scopes);
+            continue;
+        }
+        if (!entry.isFile() || !isAppSource(entry.name)) continue;
+        const text = (0, _nodefs.readFileSync)(path, "utf8");
+        for (const match of text.matchAll(AUTHORIZE_RE)){
+            const action = match[2];
+            if (action == null || action === "") continue;
+            const subject = match[4] ?? "all";
+            scopes.add(`${action}:${subject}`);
+        }
+    }
+}
+function mergeApiScopes(discovered, existing) {
+    return [
+        ...new Set([
+            ...existing,
+            ...discovered
+        ])
+    ].sort();
+}
+function postmanRequestedScopes(apiScopes) {
+    return [
+        ...OIDC_SCOPES,
+        ...apiScopes
+    ].join(" ");
+}

package/commonjs/src/webapi/cli-options.js

@@ -0,0 +1,99 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+function _export(target, all) {
+    for(var name in all)Object.defineProperty(target, name, {
+        enumerable: true,
+        get: Object.getOwnPropertyDescriptor(all, name).get
+    });
+}
+_export(exports, {
+    get addWebapiFeatureOptions () {
+        return addWebapiFeatureOptions;
+    },
+    get collectName () {
+        return collectName;
+    },
+    get runScaffoldApi () {
+        return runScaffoldApi;
+    },
+    get toApiOptions () {
+        return toApiOptions;
+    }
+});
+const _resolvetargetdir = require("../resolve-target-dir.js");
+const _apiname = require("./api-name.js");
+const _createapi = require("./create-api.js");
+function _getRequireWildcardCache(nodeInterop) {
+    if (typeof WeakMap !== "function") return null;
+    var cacheBabelInterop = new WeakMap();
+    var cacheNodeInterop = new WeakMap();
+    return (_getRequireWildcardCache = function(nodeInterop) {
+        return nodeInterop ? cacheNodeInterop : cacheBabelInterop;
+    })(nodeInterop);
+}
+function _interop_require_wildcard(obj, nodeInterop) {
+    if (!nodeInterop && obj && obj.__esModule) {
+        return obj;
+    }
+    if (obj === null || typeof obj !== "object" && typeof obj !== "function") {
+        return {
+            default: obj
+        };
+    }
+    var cache = _getRequireWildcardCache(nodeInterop);
+    if (cache && cache.has(obj)) {
+        return cache.get(obj);
+    }
+    var newObj = {
+        __proto__: null
+    };
+    var hasPropertyDescriptor = Object.defineProperty && Object.getOwnPropertyDescriptor;
+    for(var key in obj){
+        if (key !== "default" && Object.prototype.hasOwnProperty.call(obj, key)) {
+            var desc = hasPropertyDescriptor ? Object.getOwnPropertyDescriptor(obj, key) : null;
+            if (desc && (desc.get || desc.set)) {
+                Object.defineProperty(newObj, key, desc);
+            } else {
+                newObj[key] = obj[key];
+            }
+        }
+    }
+    newObj.default = obj;
+    if (cache) {
+        cache.set(obj, newObj);
+    }
+    return newObj;
+}
+function collectName(value, previous) {
+    previous.push(value);
+    return previous;
+}
+function addWebapiFeatureOptions(cmd) {
+    return cmd.option("--database <provider>", "Database provider: none | postgres/typeorm").option("--auth <provider>", "Auth provider: none | auth0").option("--postman <provider>", "Postman provider: none | local | api").option("-y, --yes", "Install dependencies without prompting").option("--install <mode>", "Dependency install mode: ask | yes | no", "ask");
+}
+function toApiOptions(directory, opts, extra = {}) {
+    const installMode = String(opts.install ?? "ask").toLowerCase();
+    const names = Array.isArray(opts.name) ? opts.name : typeof opts.name === "string" ? [
+        opts.name
+    ] : extra.names;
+    return {
+        d: (0, _resolvetargetdir.resolveTargetDir)(directory, typeof opts.d === "string" ? opts.d : undefined),
+        databaseProvider: opts.database,
+        authProvider: opts.auth,
+        postmanProvider: opts.postman,
+        installDependencies: opts.yes === true ? "yes" : installMode === "yes" || installMode === "no" ? installMode : undefined,
+        names,
+        ...extra
+    };
+}
+async function runScaffoldApi(normalized) {
+    (0, _apiname.parseApiNames)(normalized.names);
+    const { closePrompt } = await Promise.resolve().then(()=>/*#__PURE__*/ _interop_require_wildcard(require("../domain/prompt.js")));
+    try {
+        await (0, _createapi.scaffoldApi)(normalized);
+    } finally{
+        closePrompt();
+    }
+}

package/commonjs/src/webapi/const.js

@@ -0,0 +1,54 @@
+/** Default API project slug when `--name` is omitted. */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+function _export(target, all) {
+    for(var name in all)Object.defineProperty(target, name, {
+        enumerable: true,
+        get: Object.getOwnPropertyDescriptor(all, name).get
+    });
+}
+_export(exports, {
+    get DEFAULT_WEBAPI_NAME () {
+        return DEFAULT_WEBAPI_NAME;
+    },
+    get WEBAPI_PROJECT_DIR () {
+        return WEBAPI_PROJECT_DIR;
+    },
+    get WEBAPI_RELEASE_ENTRY () {
+        return WEBAPI_RELEASE_ENTRY;
+    },
+    get webapiPackageName () {
+        return webapiPackageName;
+    },
+    get webapiPackagedEntry () {
+        return webapiPackagedEntry;
+    },
+    get webapiPort () {
+        return webapiPort;
+    },
+    get webapiProjectDir () {
+        return webapiProjectDir;
+    },
+    get webapiReleaseEntry () {
+        return webapiReleaseEntry;
+    }
+});
+const DEFAULT_WEBAPI_NAME = "api";
+function webapiProjectDir(name) {
+    return `projects/${name}`;
+}
+function webapiReleaseEntry(name) {
+    return `dist/release/${webapiProjectDir(name)}/${webapiPackagedEntry()}`;
+}
+function webapiPackagedEntry() {
+    return "es6/src/main.js";
+}
+function webapiPackageName(workspaceName, apiName) {
+    return `@${workspaceName}/${apiName}`;
+}
+function webapiPort(index) {
+    return 3000 + index;
+}
+const WEBAPI_PROJECT_DIR = webapiProjectDir(DEFAULT_WEBAPI_NAME);
+const WEBAPI_RELEASE_ENTRY = webapiReleaseEntry(DEFAULT_WEBAPI_NAME);