@helloleo/plugins 0.1.20 → 0.2.0-beta.1

package/src/tools/setup-netsuite.ts

@@ -2,21 +2,17 @@ import { mkdir } from "node:fs/promises";
 import path from "node:path";
 import type { Plugin } from "@opencode-ai/plugin";
 import { tool } from "@opencode-ai/plugin";
-import { writeBaseScaffold } from "./scaffold.ts";
 
 /**
- * One-shot bootstrap for a NetSuite project. Writes the base HelloLeo
- * scaffold (via writeBaseScaffold) plus ADDITIVE NetSuite OAuth wiring:
- * the netsuite OAuth client, a NetSuite auth context (auth.tsx), and the
- * AuthLayout / LoginPage / SignInWithNetSuite components. It never
- * overwrites a scaffold file -- the one manual step is wrapping the root
- * route's <Outlet /> with <AuthLayout> (the tool's output shows the
- * snippet). All NetSuite-specific templates live in this file -- one place
- * to read or change anything NetSuite-related.
+ * Adds NetSuite OAuth wiring on top of an existing scaffold: the netsuite
+ * OAuth client, a NetSuite auth context (auth.tsx), and the AuthLayout /
+ * LoginPage / SignInWithNetSuite components. It never overwrites a
+ * scaffold file -- the one manual step is wrapping the root route's
+ * <Outlet /> with <AuthLayout> (the tool's output shows the snippet).
+ * All NetSuite-specific templates live in this file -- one place to read
+ * or change anything NetSuite-related.
  *
- * Use INSTEAD of `scaffold` when the project needs NetSuite. The tool
- * name carries the intent so the LLM can't accidentally ship a project
- * without the auth files.
+ * Called AFTER `scaffold`, never instead of it.
  */
 
 function netsuiteTs(): string {
@@ -345,21 +341,13 @@ function Gate({ children }: { children: ReactNode }) {
 
 export const setupNetsuite = tool({
 	description:
-		"Bootstrap a NetSuite-backed React + Vite + Tailwind v4 + TanStack Router " +
-		"project in one call. Writes the full HelloLeo base scaffold PLUS the " +
-		"NetSuite OAuth wiring, all ADDITIVE -- it never overwrites a scaffold " +
-		"file. Adds src/lib/netsuite.ts (OAuth client), src/lib/auth.tsx " +
-		"(NetSuiteAuthProvider + useNetSuiteAuth), and " +
-		"src/components/auth/{AuthLayout,LoginPage,SignInWithNetSuite}.tsx. " +
-		"Use this INSTEAD of `scaffold` for any project that needs NetSuite. " +
-		"After it runs there is exactly ONE manual step: wrap the root route's " +
-		"<Outlet /> with <AuthLayout> in src/routes/__root.tsx (the tool's output " +
-		"shows the snippet). Real OAuth is wired from day one -- never replace " +
-		"<AuthLayout> with a password placeholder.",
+		"Add NetSuite OAuth wiring to an existing project. Call scaffold first, " +
+		"then this. Writes the OAuth client, auth provider and login components. " +
+		"All files are additive, nothing is overwritten. Real OAuth is wired " +
+		"from day one, never replace <AuthLayout> with a password placeholder.",
 	args: {},
 	async execute(_args, context) {
 		const dir = context.directory;
-		const base = await writeBaseScaffold({}, dir);
 
 		await mkdir(path.join(dir, "src", "components", "auth"), {
 			recursive: true,
@@ -387,45 +375,27 @@ export const setupNetsuite = tool({
 			await Bun.write(path.join(dir, filePath), content);
 		}
 
-		const all = [...base, ...nsFiles.map(([f]) => f)];
 		return [
-			`Generated ${all.length} files (base scaffold + NetSuite OAuth, all additive -- nothing overwritten).`,
+			`Wrote ${nsFiles.length} NetSuite OAuth files (all additive, nothing overwritten):`,
+			"  - src/lib/netsuite.ts (OAuth client: signIn, session, workerFetch)",
+			"  - src/lib/auth.tsx (NetSuiteAuthProvider and useNetSuiteAuth)",
+			"  - src/components/auth/AuthLayout.tsx (provider and auth gate)",
+			"  - src/components/auth/LoginPage.tsx (unauthenticated view)",
+			"  - src/components/auth/SignInWithNetSuite.tsx (sign-in button)",
 			"",
-			"All you need to do is wrap the root layout with the auth layout.",
-			"In src/routes/__root.tsx, import AuthLayout and wrap <Outlet />:",
+			"Notes:",
+			"- AuthLayout shows LoginPage to signed-out users and renders the app's routes once they sign in with NetSuite.",
+			"- Read the session anywhere with useNetSuiteAuth() from src/lib/auth.tsx.",
+			"- Never replace AuthLayout with a password gate. Real OAuth is the only supported login.",
+			"- The auth worker (deployed via the cloudflare-backend MCP) serves /auth/netsuite/start, /auth/netsuite/callback, /api/me and /auth/netsuite/logout. It reads env.NETSUITE_ACCOUNT_ID, _CLIENT_ID and _CLIENT_SECRET. VITE_WORKER_URL must be set (HelloLeo Cloud seeds it).",
 			"",
-			"    import { AuthLayout } from '../components/auth/AuthLayout'",
-			"",
-			"    function RootComponent() {",
-			"      return (",
-			"        <>",
-			"          <AuthLayout>",
-			"            <Outlet />",
-			"          </AuthLayout>",
-			"          {/* keep the existing <TanStackDevtools ... /> here */}",
-			"        </>",
-			"      )",
-			"    }",
+			"Next: in src/routes/__root.tsx, import AuthLayout and wrap <Outlet /> with it. Keep any existing providers.",
 			"",
-			"That single wrap gates every route: <LoginPage /> until the user signs",
-			"in with NetSuite, your routes after. Read the session anywhere below it",
-			"with useNetSuiteAuth() from src/lib/auth.tsx. NEVER swap <AuthLayout>",
-			"for a password gate -- real OAuth is the only supported login.",
-			"",
-			"NetSuite OAuth files written:",
-			"  - src/lib/netsuite.ts          OAuth client (signIn / session / workerFetch)",
-			"  - src/lib/auth.tsx             NetSuiteAuthProvider + useNetSuiteAuth",
-			"  - src/components/auth/AuthLayout.tsx        provider + gate (wrap root with this)",
-			"  - src/components/auth/LoginPage.tsx         unauthenticated view",
-			"  - src/components/auth/SignInWithNetSuite.tsx sign-in button",
+			"    import { AuthLayout } from '../components/auth/AuthLayout'",
 			"",
-			"Worker (deploy via cloudflare-backend MCP) must serve:",
-			"      GET  /auth/netsuite/start     -- redirect to NetSuite OAuth",
-			"      GET  /auth/netsuite/callback  -- code -> token exchange",
-			"      GET  /api/me                  -- current session",
-			"      POST /auth/netsuite/logout    -- clear session",
-			"    Reads env.NETSUITE_ACCOUNT_ID / _CLIENT_ID / _CLIENT_SECRET.",
-			"    VITE_WORKER_URL must be set (HelloLeo Cloud provisioner seeds it).",
+			"    <AuthLayout>",
+			"      <Outlet />",
+			"    </AuthLayout>",
 		].join("\n");
 	},
 });