@dreamtree-org/landing-kit 0.4.0 → 0.5.0

package/README.md

@@ -179,6 +179,24 @@ export const GET = () => demoAccountsResponse({ accounts: [...] });
 | `DEMO_ACCOUNTS=1` | turn the endpoint on (off by default; leave it off in production) |
 | `DEMO_ACCOUNTS_JSON` | `[{ label, identifier, password, company? }]`, replaces the built-in list (accounts a deployment created itself) |
 
+#### The `default` demo company (every pro app)
+
+Every pro app seeds a company with slug **`default`** — its branches and **one user per role** —
+so the whole product can be demoed end to end, and the chips list exactly those users:
+
+```js
+const { demoUsers, demoAccountsExpress, requireDemoPassword } = require('@dreamtree-org/landing-kit/demo-server');
+const manifest = [{ role: 'tenant-admin', label: 'Admin' }, { role: 'viewer', label: 'Viewer' }];
+
+// demo:seed (idempotent): create `default`, upsert each user, password = requireDemoPassword()
+// endpoint: one chip per role, emails demoEmail(product, role) → tenant-admin@taskpro.demo.test
+app.get('/api/auth/demo-accounts', demoAccountsExpress({ accounts: (env) => demoUsers(manifest, { product: 'taskpro', env }) }));
+```
+
+| Env | Meaning |
+|---|---|
+| `DEMO_PASSWORD` | the demo users' password (≥ 12 chars); `demo:seed` resets every demo user to it, the chips show it. Unset → no chips |
+
 Company-first logins pick the chip on the company step: call `stashDemoFill(account)` there and
 `takeDemoFill()` when the password step mounts (sessionStorage, read once). Outside AuthShell, render
 `<DemoAccounts load onSelect />` behind `useTapReveal()` yourself.

package/demo-server.d.ts

@@ -6,7 +6,7 @@ export interface DemoAccountsOptions {
   /** The product's own gate (e.g. not a production tenant). DEMO_ACCOUNTS=1 is required as well. */
   enabled?: boolean | undefined;
   /** Built-in list, or a function of env (read seed passwords from the same vars the seed script uses). */
-  accounts?: DemoAccount[] | ((env: Env) => DemoAccount[]) | undefined;
+  accounts?: DemoAccount[] | ((env: Env) => DemoAccount[] | Promise<DemoAccount[]>) | undefined;
   env?: Env | undefined;
 }
 
@@ -16,9 +16,26 @@ export type DemoAccountsResult =
 
 export declare const DEMO_ACCOUNTS_HEADERS: Record<string, string>;
 export declare function demoAccountsEnabled(opts?: Pick<DemoAccountsOptions, 'enabled' | 'env'>): boolean;
-/** 404 unless enabled and DEMO_ACCOUNTS=1; DEMO_ACCOUNTS_JSON replaces `accounts`. */
-export declare function resolveDemoAccounts(opts?: DemoAccountsOptions): DemoAccountsResult;
+/** 404 unless enabled and DEMO_ACCOUNTS=1; DEMO_ACCOUNTS_JSON replaces `accounts`. A Promise when `accounts` is async. */
+export declare function resolveDemoAccounts(opts?: DemoAccountsOptions): DemoAccountsResult | Promise<DemoAccountsResult>;
 /** Express handler for `GET /api/auth/demo-accounts`. */
 export declare function demoAccountsExpress(opts?: DemoAccountsOptions): (req: any, res: any) => void;
 /** Fetch-API Response for a Next.js route handler. */
-export declare function demoAccountsResponse(opts?: DemoAccountsOptions): Response;
+export declare function demoAccountsResponse(opts?: DemoAccountsOptions): Response | Promise<Response>;
+
+/** One row per role in a product's demo manifest. */
+export interface DemoRole {
+  role: string;
+  label: string;
+  /** Defaults to demoEmail(product, role). */
+  email?: string | undefined;
+}
+/** Slug of the shared demo company every pro app seeds: 'default'. */
+export declare const DEMO_COMPANY: 'default';
+export declare const DEMO_PASSWORD_MIN: number;
+/** `${role}@${product}.demo.test` (lower-case, dashes). */
+export declare function demoEmail(product: string, role: string): string;
+/** Manifest → chips in the `default` company with env.DEMO_PASSWORD; [] when DEMO_PASSWORD is unset. */
+export declare function demoUsers(manifest: DemoRole[], opts: { product: string; env?: Env | undefined; company?: string | undefined }): DemoAccount[];
+/** Throws unless DEMO_PASSWORD is set and at least DEMO_PASSWORD_MIN characters; returns it. */
+export declare function requireDemoPassword(env?: Env): string;

package/dist/demo-server.cjs

@@ -20,9 +20,14 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var demo_server_exports = {};
 __export(demo_server_exports, {
   DEMO_ACCOUNTS_HEADERS: () => DEMO_ACCOUNTS_HEADERS,
+  DEMO_COMPANY: () => DEMO_COMPANY,
+  DEMO_PASSWORD_MIN: () => DEMO_PASSWORD_MIN,
   demoAccountsEnabled: () => demoAccountsEnabled,
   demoAccountsExpress: () => demoAccountsExpress,
   demoAccountsResponse: () => demoAccountsResponse,
+  demoEmail: () => demoEmail,
+  demoUsers: () => demoUsers,
+  requireDemoPassword: () => requireDemoPassword,
   resolveDemoAccounts: () => resolveDemoAccounts
 });
 module.exports = __toCommonJS(demo_server_exports);
@@ -47,29 +52,70 @@ function clean(accounts) {
 function demoAccountsEnabled({ enabled = true, env = process.env } = {}) {
   return Boolean(enabled) && env.DEMO_ACCOUNTS === "1";
 }
-function resolveDemoAccounts({ enabled = true, accounts = [], env = process.env } = {}) {
-  if (!demoAccountsEnabled({ enabled, env })) return { status: 404, body: { error: "Not found" } };
-  const list = clean(fromEnvJson(env.DEMO_ACCOUNTS_JSON) ?? (typeof accounts === "function" ? accounts(env) : accounts));
+function result(accounts) {
+  if (!accounts) return { status: 404, body: { error: "Not found" } };
+  const list = clean(accounts);
   if (!list.length) return { status: 404, body: { error: "Not found" } };
   return { status: 200, body: { accounts: list } };
 }
+function resolveDemoAccounts({ enabled = true, accounts = [], env = process.env } = {}) {
+  const on = demoAccountsEnabled({ enabled, env });
+  if (!on) return result(null);
+  const override = fromEnvJson(env.DEMO_ACCOUNTS_JSON);
+  if (override) return result(override);
+  const list = typeof accounts === "function" ? accounts(env) : accounts;
+  return list && typeof list.then === "function" ? list.then((l) => result(l || []), () => result(null)) : result(list || []);
+}
 var DEMO_ACCOUNTS_HEADERS = { "Cache-Control": "no-store", "X-Robots-Tag": "noindex" };
 function demoAccountsExpress(opts = {}) {
-  return (req, res) => {
-    const { status, body } = resolveDemoAccounts(opts);
+  const send = (res, { status, body }) => {
     res.set(DEMO_ACCOUNTS_HEADERS);
     res.status(status).json(body);
   };
+  return (req, res) => {
+    const r = resolveDemoAccounts(opts);
+    if (typeof r.then === "function") return r.then((x) => send(res, x));
+    send(res, r);
+  };
 }
 function demoAccountsResponse(opts = {}) {
-  const { status, body } = resolveDemoAccounts(opts);
-  return new Response(JSON.stringify(body), { status, headers: { "Content-Type": "application/json", ...DEMO_ACCOUNTS_HEADERS } });
+  const toResponse = ({ status, body }) => new Response(JSON.stringify(body), { status, headers: { "Content-Type": "application/json", ...DEMO_ACCOUNTS_HEADERS } });
+  const r = resolveDemoAccounts(opts);
+  return typeof r.then === "function" ? r.then(toResponse) : toResponse(r);
+}
+var DEMO_COMPANY = "default";
+var DEMO_PASSWORD_MIN = 12;
+function demoEmail(product, role) {
+  const slug = (s) => String(s).toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
+  return `${slug(role)}@${slug(product)}.demo.test`;
+}
+function demoUsers(manifest, { product, env = process.env, company = DEMO_COMPANY } = {}) {
+  const password = env.DEMO_PASSWORD;
+  if (!password) return [];
+  return (manifest || []).map((m) => ({
+    label: m.label,
+    identifier: m.email || demoEmail(product, m.role),
+    password,
+    company,
+    role: m.role
+  }));
+}
+function requireDemoPassword(env = process.env) {
+  const p = env.DEMO_PASSWORD;
+  if (!p) throw new Error("DEMO_PASSWORD is not set: demo:seed gives every demo user this password (the login chips show it).");
+  if (p.length < DEMO_PASSWORD_MIN) throw new Error(`DEMO_PASSWORD must be at least ${DEMO_PASSWORD_MIN} characters.`);
+  return p;
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   DEMO_ACCOUNTS_HEADERS,
+  DEMO_COMPANY,
+  DEMO_PASSWORD_MIN,
   demoAccountsEnabled,
   demoAccountsExpress,
   demoAccountsResponse,
+  demoEmail,
+  demoUsers,
+  requireDemoPassword,
   resolveDemoAccounts
 });

package/dist/demo-server.js

@@ -20,28 +20,69 @@ function clean(accounts) {
 function demoAccountsEnabled({ enabled = true, env = process.env } = {}) {
   return Boolean(enabled) && env.DEMO_ACCOUNTS === "1";
 }
-function resolveDemoAccounts({ enabled = true, accounts = [], env = process.env } = {}) {
-  if (!demoAccountsEnabled({ enabled, env })) return { status: 404, body: { error: "Not found" } };
-  const list = clean(fromEnvJson(env.DEMO_ACCOUNTS_JSON) ?? (typeof accounts === "function" ? accounts(env) : accounts));
+function result(accounts) {
+  if (!accounts) return { status: 404, body: { error: "Not found" } };
+  const list = clean(accounts);
   if (!list.length) return { status: 404, body: { error: "Not found" } };
   return { status: 200, body: { accounts: list } };
 }
+function resolveDemoAccounts({ enabled = true, accounts = [], env = process.env } = {}) {
+  const on = demoAccountsEnabled({ enabled, env });
+  if (!on) return result(null);
+  const override = fromEnvJson(env.DEMO_ACCOUNTS_JSON);
+  if (override) return result(override);
+  const list = typeof accounts === "function" ? accounts(env) : accounts;
+  return list && typeof list.then === "function" ? list.then((l) => result(l || []), () => result(null)) : result(list || []);
+}
 var DEMO_ACCOUNTS_HEADERS = { "Cache-Control": "no-store", "X-Robots-Tag": "noindex" };
 function demoAccountsExpress(opts = {}) {
-  return (req, res) => {
-    const { status, body } = resolveDemoAccounts(opts);
+  const send = (res, { status, body }) => {
     res.set(DEMO_ACCOUNTS_HEADERS);
     res.status(status).json(body);
   };
+  return (req, res) => {
+    const r = resolveDemoAccounts(opts);
+    if (typeof r.then === "function") return r.then((x) => send(res, x));
+    send(res, r);
+  };
 }
 function demoAccountsResponse(opts = {}) {
-  const { status, body } = resolveDemoAccounts(opts);
-  return new Response(JSON.stringify(body), { status, headers: { "Content-Type": "application/json", ...DEMO_ACCOUNTS_HEADERS } });
+  const toResponse = ({ status, body }) => new Response(JSON.stringify(body), { status, headers: { "Content-Type": "application/json", ...DEMO_ACCOUNTS_HEADERS } });
+  const r = resolveDemoAccounts(opts);
+  return typeof r.then === "function" ? r.then(toResponse) : toResponse(r);
+}
+var DEMO_COMPANY = "default";
+var DEMO_PASSWORD_MIN = 12;
+function demoEmail(product, role) {
+  const slug = (s) => String(s).toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
+  return `${slug(role)}@${slug(product)}.demo.test`;
+}
+function demoUsers(manifest, { product, env = process.env, company = DEMO_COMPANY } = {}) {
+  const password = env.DEMO_PASSWORD;
+  if (!password) return [];
+  return (manifest || []).map((m) => ({
+    label: m.label,
+    identifier: m.email || demoEmail(product, m.role),
+    password,
+    company,
+    role: m.role
+  }));
+}
+function requireDemoPassword(env = process.env) {
+  const p = env.DEMO_PASSWORD;
+  if (!p) throw new Error("DEMO_PASSWORD is not set: demo:seed gives every demo user this password (the login chips show it).");
+  if (p.length < DEMO_PASSWORD_MIN) throw new Error(`DEMO_PASSWORD must be at least ${DEMO_PASSWORD_MIN} characters.`);
+  return p;
 }
 export {
   DEMO_ACCOUNTS_HEADERS,
+  DEMO_COMPANY,
+  DEMO_PASSWORD_MIN,
   demoAccountsEnabled,
   demoAccountsExpress,
   demoAccountsResponse,
+  demoEmail,
+  demoUsers,
+  requireDemoPassword,
   resolveDemoAccounts
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dreamtree-org/landing-kit",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "The shared marketing site and auth frame (AuthShell + brands) for every Dreamtree product: content-driven landing pages, login/signup shell, Express routes, prerender and SEO files.",
   "type": "module",
   "license": "MIT",