@exposify/next 0.0.3 → 0.0.4

package/dist/config.d.cts

@@ -1,8 +1,8 @@
 import { LoginField, ProposedField } from '@exposify/core';
-import { A as ActionField } from './fields-olvyFnxj.cjs';
+import { A as ActionField, M as ManifestSupabase } from './manifest-DZQCvzQy.cjs';
 
-/** What the generator writes to the manifest. */
-type FoundLogin = {
+/** One request of a login: a Server Action, or a POST route handler. */
+type FoundStep = {
     kind: "action";
     key: string;
     export: string;
@@ -16,6 +16,13 @@ type FoundLogin = {
     fields: LoginField[];
     body: "json" | "form";
 };
+/** What the generator writes to the manifest: the login, and its second step when it has one. */
+type FoundLogin = FoundStep & {
+    /** The first step takes no password: an email or phone number, then the code. */
+    passwordless?: boolean;
+    /** The second step: the code. */
+    verify?: FoundStep;
+};
 
 interface FoundPage {
     file: string;
@@ -103,6 +110,40 @@ interface InlineAction {
     line: number;
 }
 
+/** How someone signs in: what Connect offers in its place. */
+type SupabaseMethod = "password" | "email-code" | "social" | "totp" | "other";
+/** Where a sign-in call runs; "unknown" counts as server (wrongly calling server code browser code would skip the app's checks silently). */
+type SignInSide = "browser" | "server" | "unknown";
+interface SupabaseSignIn {
+    method: SupabaseMethod;
+    /** The call as written: `signInWithPassword`, `mfa.verify`, `<Auth />`. */
+    call: string;
+    /** `signInWithOAuth({ provider: "github" })`'s provider, when it's a literal. */
+    provider?: string;
+    file: string;
+    line: number;
+    side: SignInSide;
+    /** Why that side, for `inspect` and the dashboard: `"use client"`, `a Server Action`. */
+    why: string;
+    /** The Server Action it's in (`file#export`), on the server. */
+    action?: string;
+    /** The route handler it's in, on the server. */
+    route?: string;
+}
+interface FoundSupabase {
+    /** `@supabase/auth-helpers-nextjs` without `@supabase/ssr`: an older cookie format, warned about, not supported. */
+    authHelpers?: boolean;
+    signIns: SupabaseSignIn[];
+    /**
+     * Routes that finish a sign-in started elsewhere (`exchangeCodeForSession`,
+     * `verifyOtp({ token_hash })`): reported, since their checks don't run for
+     * Connect's sign-ins, but never the login.
+     */
+    callbacks: string[];
+    /** `cookieOptions: { name }` or `auth: { storageKey }`, when the app names its session cookie. */
+    cookieName?: string;
+}
+
 interface GenerateOptions {
     /** Output file, relative to the project root. Default: exposify.generated.ts (.js without a tsconfig.json). */
     out?: string;
@@ -167,6 +208,11 @@ interface Discovery {
     /** The app's own login, for Connect with no code (login.ts); the other candidates, for `inspect`. */
     login?: FoundLogin;
     loginOthers?: FoundLogin[];
+    /** Supabase Auth with `@supabase/ssr` (supabase.ts): where users sign in, and which sign-ins Connect makes on Supabase directly. */
+    supabase?: {
+        found: FoundSupabase;
+        choice: ManifestSupabase;
+    };
 }
 interface GenerateResult {
     /** Absolute path written. */

package/dist/config.d.ts

@@ -1,8 +1,8 @@
 import { LoginField, ProposedField } from '@exposify/core';
-import { A as ActionField } from './fields-olvyFnxj.js';
+import { A as ActionField, M as ManifestSupabase } from './manifest-DZQCvzQy.js';
 
-/** What the generator writes to the manifest. */
-type FoundLogin = {
+/** One request of a login: a Server Action, or a POST route handler. */
+type FoundStep = {
     kind: "action";
     key: string;
     export: string;
@@ -16,6 +16,13 @@ type FoundLogin = {
     fields: LoginField[];
     body: "json" | "form";
 };
+/** What the generator writes to the manifest: the login, and its second step when it has one. */
+type FoundLogin = FoundStep & {
+    /** The first step takes no password: an email or phone number, then the code. */
+    passwordless?: boolean;
+    /** The second step: the code. */
+    verify?: FoundStep;
+};
 
 interface FoundPage {
     file: string;
@@ -103,6 +110,40 @@ interface InlineAction {
     line: number;
 }
 
+/** How someone signs in: what Connect offers in its place. */
+type SupabaseMethod = "password" | "email-code" | "social" | "totp" | "other";
+/** Where a sign-in call runs; "unknown" counts as server (wrongly calling server code browser code would skip the app's checks silently). */
+type SignInSide = "browser" | "server" | "unknown";
+interface SupabaseSignIn {
+    method: SupabaseMethod;
+    /** The call as written: `signInWithPassword`, `mfa.verify`, `<Auth />`. */
+    call: string;
+    /** `signInWithOAuth({ provider: "github" })`'s provider, when it's a literal. */
+    provider?: string;
+    file: string;
+    line: number;
+    side: SignInSide;
+    /** Why that side, for `inspect` and the dashboard: `"use client"`, `a Server Action`. */
+    why: string;
+    /** The Server Action it's in (`file#export`), on the server. */
+    action?: string;
+    /** The route handler it's in, on the server. */
+    route?: string;
+}
+interface FoundSupabase {
+    /** `@supabase/auth-helpers-nextjs` without `@supabase/ssr`: an older cookie format, warned about, not supported. */
+    authHelpers?: boolean;
+    signIns: SupabaseSignIn[];
+    /**
+     * Routes that finish a sign-in started elsewhere (`exchangeCodeForSession`,
+     * `verifyOtp({ token_hash })`): reported, since their checks don't run for
+     * Connect's sign-ins, but never the login.
+     */
+    callbacks: string[];
+    /** `cookieOptions: { name }` or `auth: { storageKey }`, when the app names its session cookie. */
+    cookieName?: string;
+}
+
 interface GenerateOptions {
     /** Output file, relative to the project root. Default: exposify.generated.ts (.js without a tsconfig.json). */
     out?: string;
@@ -167,6 +208,11 @@ interface Discovery {
     /** The app's own login, for Connect with no code (login.ts); the other candidates, for `inspect`. */
     login?: FoundLogin;
     loginOthers?: FoundLogin[];
+    /** Supabase Auth with `@supabase/ssr` (supabase.ts): where users sign in, and which sign-ins Connect makes on Supabase directly. */
+    supabase?: {
+        found: FoundSupabase;
+        choice: ManifestSupabase;
+    };
 }
 interface GenerateResult {
     /** Absolute path written. */