@helloleo/plugins 0.1.10 → 0.1.12

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@helloleo/plugins",
-  "version": "0.1.10",
+  "version": "0.1.12",
   "description": "OpenCode plugins for HelloLeo",
   "license": "UNLICENSED",
   "type": "module",

package/src/index.ts

@@ -1,6 +1,7 @@
 export { InspectHttpPlugin } from "./tools/inspect-http.ts";
 export { RemovePlugin } from "./tools/remove.ts";
 export { ScaffoldPlugin } from "./tools/scaffold.ts";
+export { SetupNetsuitePlugin } from "./tools/setup-netsuite.ts";
 // export { CreatePlanPlugin } from "./tools/create-plan.ts";
 // export { ListPlansPlugin } from "./tools/list-plans.ts";
 // export { ModifyPlanPlugin } from "./tools/modify-plan.ts";

package/src/tools/inspect-http.ts

@@ -3,10 +3,10 @@ import { tool } from "@opencode-ai/plugin";
 
 const z = tool.schema;
 
-const ALLOWED_EXACT_HOSTS = new Set(["api.app.helloleo.dev"]);
-const ALLOWED_HOST_SUFFIXES = [
-	".augustin-d60.workers.dev",
-	".live.helloleo.dev",
+const ALLOWED_BASE_HOSTS = [
+	"helloleo.dev",
+	"helloleo.app",
+	"augustin-d60.workers.dev",
 ] as const;
 
 const DEFAULT_TIMEOUT_MS = 15_000;
@@ -22,7 +22,7 @@ const argsShape = {
 		.string()
 		.describe(
 			"Fully-qualified URL to request. Must be on the HelloLeo whitelist " +
-				"(api.app.helloleo.dev, *.augustin-d60.workers.dev, *.live.helloleo.dev).",
+				"(**.helloleo.dev, **.helloleo.app, **.augustin-d60.workers.dev).",
 		),
 	method: z
 		.enum(METHODS)
@@ -58,10 +58,7 @@ export const inspectHttp = tool({
 		"Send an HTTP request to a HelloLeo endpoint and return the status code, " +
 		"response headers, and response body. Use this to inspect the live behaviour " +
 		"of HelloLeo workers, the production API, or preview deployments so you can " +
-		"self-debug instead of operating blind. " +
-		"Only URLs on the HelloLeo whitelist are allowed: " +
-		"api.app.helloleo.dev, *.augustin-d60.workers.dev, *.live.helloleo.dev. " +
-		"Supports GET, POST, PUT, PATCH and DELETE (with an optional JSON body).",
+		"self-debug instead of operating blind. ",
 	args: argsShape,
 	async execute(rawArgs, context) {
 		const args = argsSchema.parse(rawArgs);
@@ -180,17 +177,13 @@ function parseTargetUrl(raw: string): URL {
 }
 
 function allowedHostsHuman(): string {
-	return [
-		...ALLOWED_EXACT_HOSTS,
-		...ALLOWED_HOST_SUFFIXES.map((s) => `*${s}`),
-	].join(", ");
+	return ALLOWED_BASE_HOSTS.map((base) => `**.${base}`).join(", ");
 }
 
 function isAllowedHost(hostname: string): boolean {
 	const host = hostname.toLowerCase().replace(/\.$/, "");
-	if (ALLOWED_EXACT_HOSTS.has(host)) return true;
-	for (const suffix of ALLOWED_HOST_SUFFIXES) {
-		if (host.endsWith(suffix) && host.length > suffix.length) return true;
+	for (const base of ALLOWED_BASE_HOSTS) {
+		if (host === base || host.endsWith(`.${base}`)) return true;
 	}
 	return false;
 }

package/src/tools/scaffold.ts

@@ -2,13 +2,6 @@ import { mkdir } from "node:fs/promises";
 import path from "node:path";
 import type { Plugin } from "@opencode-ai/plugin";
 import { tool } from "@opencode-ai/plugin";
-import {
-	netsuiteAppTsx,
-	netsuiteAuthGateTsx,
-	netsuiteLoginPageTsx,
-	netsuiteTs,
-	signInButtonTsx,
-} from "./scaffold-netsuite";
 
 function packageJson(name: string) {
 	return JSON.stringify(
@@ -394,13 +387,60 @@ ReactDOM.createRoot(document.getElementById('root')!).render(
 )`;
 }
 
+export interface BaseScaffoldOptions {
+	name?: string;
+	primaryColor?: string;
+	fontFamily?: string;
+	borderRadius?: string;
+}
+
+/**
+ * Write the 9 base scaffold files (no integrations). Shared between
+ * `scaffold` (frontend-only) and `setup_netsuite` (base + OAuth files).
+ * Returns the list of relative file paths written.
+ */
+export async function writeBaseScaffold(
+	opts: BaseScaffoldOptions,
+	dir: string,
+): Promise<string[]> {
+	const name = opts.name ?? "leo-project";
+	const primary = normalizePrimaryColor(
+		opts.primaryColor ?? "221.2 83.2% 53.3%",
+	);
+	const font = opts.fontFamily ?? "Inter";
+	const radius = opts.borderRadius ?? "0.5rem";
+
+	await mkdir(path.join(dir, "src", "lib"), { recursive: true });
+
+	const files: [string, string][] = [
+		["package.json", packageJson(name)],
+		["index.html", indexHtml(font)],
+		["vite.config.js", viteConfig()],
+		["tailwind.config.js", tailwindConfig()],
+		["postcss.config.js", postcssConfig()],
+		[path.join("src", "index.css"), indexCss(primary, font, radius)],
+		[path.join("src", "lib", "utils.ts"), utilsTs()],
+		[path.join("src", "lib", "proxy.ts"), proxyTs()],
+		[path.join("src", "main.tsx"), mainTsx()],
+	];
+
+	const created: string[] = [];
+	for (const [filePath, content] of files) {
+		await Bun.write(path.join(dir, filePath), content);
+		created.push(filePath);
+	}
+	return created;
+}
+
 export const scaffold = tool({
 	description:
 		"Scaffold a new React + Vite + Tailwind CSS project with the HelloLeo design system. " +
 		"Creates all mandatory boilerplate: package.json, index.html (with Google Fonts), " +
 		"vite.config.js, tailwind.config.js, postcss.config.js, src/index.css (CSS variables " +
-		"light+dark), src/lib/utils.ts (cn helper), and src/main.tsx. " +
-		"Call this FIRST for any new project before writing App.tsx and components.",
+		"light+dark), src/lib/utils.ts (cn helper), src/lib/proxy.ts, and src/main.tsx. " +
+		"Call this FIRST for any new project before writing App.tsx and components. " +
+		"For NetSuite projects (NetSuite MCP in the live list), call `setup_netsuite` " +
+		"INSTEAD -- it bundles base scaffold + OAuth wiring in one call. Do not call both.",
 	args: {
 		name: tool.schema
 			.string()
@@ -426,75 +466,10 @@ export const scaffold = tool({
 			.describe(
 				'Base border radius, e.g. "0.5rem", "0.75rem" (default: 0.5rem)',
 			),
-		integrations: tool.schema
-			.array(tool.schema.string())
-			.optional()
-			.describe(
-				"Connected integration slugs for this project (live MCP list). " +
-					'Pass ["netsuite"] when the project uses NetSuite -- the scaffold ' +
-					"will add src/lib/netsuite.ts (OAuth client helper), " +
-					"src/components/auth/{SignInWithNetSuite,LoginPage,AuthGate}.tsx " +
-					"and a src/App.tsx wrapped in <AuthGate>. OAuth is wired from " +
-					"day one. Forbids hardcoded password gates -- the gate IS the " +
-					"real flow against the project's Worker.",
-			),
 	},
 	async execute(args, context) {
-		const dir = context.directory;
-		const name = args.name ?? "leo-project";
-		const primary = normalizePrimaryColor(
-			args.primaryColor ?? "221.2 83.2% 53.3%",
-		);
-		const font = args.fontFamily ?? "Inter";
-		const radius = args.borderRadius ?? "0.5rem";
-		const integrations = (args.integrations ?? []).map((s) => s.toLowerCase());
-		const hasNetsuite = integrations.includes("netsuite");
-
-		await mkdir(path.join(dir, "src", "lib"), { recursive: true });
-		if (hasNetsuite) {
-			await mkdir(path.join(dir, "src", "components", "auth"), {
-				recursive: true,
-			});
-		}
-
-		const files: [string, string][] = [
-			["package.json", packageJson(name)],
-			["index.html", indexHtml(font)],
-			["vite.config.js", viteConfig()],
-			["tailwind.config.js", tailwindConfig()],
-			["postcss.config.js", postcssConfig()],
-			[path.join("src", "index.css"), indexCss(primary, font, radius)],
-			[path.join("src", "lib", "utils.ts"), utilsTs()],
-			[path.join("src", "lib", "proxy.ts"), proxyTs()],
-			[path.join("src", "main.tsx"), mainTsx()],
-		];
-
-		if (hasNetsuite) {
-			files.push(
-				[path.join("src", "lib", "netsuite.ts"), netsuiteTs()],
-				[
-					path.join("src", "components", "auth", "SignInWithNetSuite.tsx"),
-					signInButtonTsx(),
-				],
-				[
-					path.join("src", "components", "auth", "LoginPage.tsx"),
-					netsuiteLoginPageTsx(),
-				],
-				[
-					path.join("src", "components", "auth", "AuthGate.tsx"),
-					netsuiteAuthGateTsx(),
-				],
-				[path.join("src", "App.tsx"), netsuiteAppTsx()],
-			);
-		}
-
-		const created: string[] = [];
-		for (const [filePath, content] of files) {
-			await Bun.write(path.join(dir, filePath), content);
-			created.push(filePath);
-		}
-
-		const out: string[] = [
+		const created = await writeBaseScaffold(args, context.directory);
+		return [
 			`Scaffolded ${created.length} files:`,
 			...created.map((f) => `  - ${f}`),
 			"",
@@ -505,34 +480,7 @@ export const scaffold = tool({
 			"  Header comment in that file documents slugs, response unwrapping,",
 			"  pagination, and frontend-only vs HelloLeo Cloud routing.",
 			"Update package.json with any extra packages you need after scaffolding.",
-		];
-
-		if (hasNetsuite) {
-			out.push(
-				"",
-				"NetSuite project -- auth is already wired:",
-				"  - App.tsx wraps everything in <AuthGate>. Build your dashboard",
-				"    INSIDE the gate. NEVER remove the gate or build a password",
-				"    placeholder -- real OAuth is the only allowed login.",
-				"  - LoginPage.tsx + SignInWithNetSuite.tsx are the unauthenticated",
-				"    view. Customise the copy / imagery, keep <SignInWithNetSuite/>",
-				"    as the call-to-action.",
-				"  - signInWithNetSuite() in src/lib/netsuite.ts hits the Worker at",
-				"    /auth/netsuite/start. Deploy the Worker via cloudflare-backend",
-				"    MCP with routes:",
-				"      GET  /auth/netsuite/start     -- redirect to NetSuite OAuth",
-				"      GET  /auth/netsuite/callback  -- code -> token exchange",
-				"      GET  /api/me                   -- current session",
-				"      POST /auth/netsuite/logout    -- clear session",
-				"    Worker reads env.NETSUITE_ACCOUNT_ID, env.NETSUITE_CLIENT_ID,",
-				"    env.NETSUITE_CLIENT_SECRET (set by the runtime-setup wizard).",
-				"  - VITE_WORKER_URL must be set in the project env so the frontend",
-				"    knows where to send users. The HelloLeo Cloud provisioner",
-				"    seeds this automatically.",
-			);
-		}
-
-		return out.join("\n");
+		].join("\n");
 	},
 });
 

package/src/tools/{scaffold-netsuite.ts → setup-netsuite.ts}

@@ -1,15 +1,22 @@
+import { mkdir } from "node:fs/promises";
+import path from "node:path";
+import type { Plugin } from "@opencode-ai/plugin";
+import { tool } from "@opencode-ai/plugin";
+import { writeBaseScaffold } from "./scaffold.ts";
+
 /**
- * NetSuite-specific scaffold templates.
+ * One-shot bootstrap for a NetSuite project. Writes the base HelloLeo
+ * scaffold (via writeBaseScaffold) plus the NetSuite OAuth wiring
+ * (AuthGate, LoginPage, sign-in button, netsuite client, auth-gated
+ * App.tsx). All NetSuite-specific templates live in this file -- one
+ * place to read or change anything NetSuite-related.
  *
- * Extracted from scaffold.ts so the OAuth bits (client helper, sign-in
- * button, login page, auth gate, gated App.tsx entry point) live in one
- * file. Imported and emitted by scaffold.ts when the caller passes
- * `integrations: ["netsuite"]`. The string contents are byte-for-byte
- * identical to the previous inline versions — splitting is purely
- * organisational and does NOT change scaffold output.
+ * Use INSTEAD of `scaffold` when the project needs NetSuite. The tool
+ * name carries the intent so the LLM can't accidentally ship a project
+ * without the auth files.
  */
 
-export function netsuiteTs(): string {
+function netsuiteTs(): string {
 	return `/*
  * NetSuite OAuth client helper (bearer-token-in-fragment).
  *
@@ -141,7 +148,7 @@ export async function workerFetch(pathOrUrl: string, init: RequestInit = {}): Pr
 `;
 }
 
-export function signInButtonTsx(): string {
+function signInButtonTsx(): string {
 	return `import { signInWithNetSuite } from '../../lib/netsuite';
 
 export function SignInWithNetSuite() {
@@ -157,7 +164,7 @@ export function SignInWithNetSuite() {
 `;
 }
 
-export function netsuiteLoginPageTsx(): string {
+function netsuiteLoginPageTsx(): string {
 	return `import { SignInWithNetSuite } from './SignInWithNetSuite';
 
 /**
@@ -202,7 +209,7 @@ export function LoginPage() {
 `;
 }
 
-export function netsuiteAuthGateTsx(): string {
+function netsuiteAuthGateTsx(): string {
 	return `import { useEffect, useState } from 'react';
 import { LoginPage } from './LoginPage';
 import { getNetSuiteSession, type NetSuiteSession } from '../../lib/netsuite';
@@ -244,7 +251,7 @@ export function AuthGate({ children }: { children: React.ReactNode }) {
 `;
 }
 
-export function netsuiteAppTsx(): string {
+function netsuiteAppTsx(): string {
 	return `import { AuthGate } from './components/auth/AuthGate';
 
 /**
@@ -266,3 +273,81 @@ export default function App() {
 }
 `;
 }
+
+export const setupNetsuite = tool({
+	description:
+		"Bootstrap a NetSuite-backed React + Vite + Tailwind project in one call. " +
+		"Writes the full HelloLeo base scaffold AND the NetSuite OAuth wiring " +
+		"(src/lib/netsuite.ts, src/components/auth/{SignInWithNetSuite,LoginPage,AuthGate}.tsx, " +
+		"src/App.tsx wrapped in <AuthGate>). " +
+		"Use this INSTEAD of `scaffold` for any project that needs NetSuite. " +
+		"Uses default theme (Inter font, blue primary, 0.5rem radius) -- edit " +
+		"src/index.css afterwards to customise. Real OAuth is wired from day " +
+		"one -- never replace the gate with a password placeholder.",
+	args: {},
+	async execute(_args, context) {
+		const dir = context.directory;
+		const base = await writeBaseScaffold({}, dir);
+
+		await mkdir(path.join(dir, "src", "components", "auth"), {
+			recursive: true,
+		});
+
+		const nsFiles: [string, string][] = [
+			[path.join("src", "lib", "netsuite.ts"), netsuiteTs()],
+			[
+				path.join("src", "components", "auth", "SignInWithNetSuite.tsx"),
+				signInButtonTsx(),
+			],
+			[
+				path.join("src", "components", "auth", "LoginPage.tsx"),
+				netsuiteLoginPageTsx(),
+			],
+			[
+				path.join("src", "components", "auth", "AuthGate.tsx"),
+				netsuiteAuthGateTsx(),
+			],
+			[path.join("src", "App.tsx"), netsuiteAppTsx()],
+		];
+
+		const nsCreated: string[] = [];
+		for (const [filePath, content] of nsFiles) {
+			await Bun.write(path.join(dir, filePath), content);
+			nsCreated.push(filePath);
+		}
+
+		const all = [...base, ...nsCreated];
+		return [
+			`Scaffolded ${all.length} files (base + NetSuite OAuth):`,
+			...all.map((f) => `  - ${f}`),
+			"",
+			"Next: build your dashboard INSIDE <AuthGate> in src/App.tsx.",
+			"Design system reference: read the header comment in src/index.css",
+			"  before adding tokens or styling primitives.",
+			"",
+			"NetSuite auth -- already wired:",
+			"  - App.tsx wraps everything in <AuthGate>. NEVER remove the gate",
+			"    or build a password placeholder -- real OAuth is the only login.",
+			"  - LoginPage.tsx + SignInWithNetSuite.tsx are the unauthenticated",
+			"    view. Customise the copy / imagery, keep <SignInWithNetSuite/>",
+			"    as the call-to-action.",
+			"  - signInWithNetSuite() in src/lib/netsuite.ts hits the Worker at",
+			"    /auth/netsuite/start. Deploy the Worker via cloudflare-backend",
+			"    MCP with routes:",
+			"      GET  /auth/netsuite/start     -- redirect to NetSuite OAuth",
+			"      GET  /auth/netsuite/callback  -- code -> token exchange",
+			"      GET  /api/me                   -- current session",
+			"      POST /auth/netsuite/logout    -- clear session",
+			"    Worker reads env.NETSUITE_ACCOUNT_ID, env.NETSUITE_CLIENT_ID,",
+			"    env.NETSUITE_CLIENT_SECRET (set by the runtime-setup wizard).",
+			"  - VITE_WORKER_URL must be set so the frontend knows where to",
+			"    send users. The HelloLeo Cloud provisioner seeds this.",
+		].join("\n");
+	},
+});
+
+export const SetupNetsuitePlugin: Plugin = async () => {
+	return {
+		tool: { setup_netsuite: setupNetsuite },
+	};
+};

package/src/utils/try-catch.ts

@@ -1,22 +0,0 @@
-type Success<T> = {
-	data: T;
-	error: null;
-};
-
-type Failure<E> = {
-	data: null;
-	error: E;
-};
-
-type Result<T, E = Error> = Success<T> | Failure<E>;
-
-export async function tryCatch<T, E = Error>(
-	promise: Promise<T>,
-): Promise<Result<T, E>> {
-	try {
-		const data = await promise;
-		return { data, error: null };
-	} catch (error) {
-		return { data: null, error: error as E };
-	}
-}