@helloleo/plugins 0.2.0-beta.0 → 0.2.0-beta.1

package/dist/index.js

@@ -24918,6 +24918,7 @@ var scaffold = tool({
       "Notes:",
       "- This is a TanStack Start project. The server entry is src/server.ts. There is no index.html or client entrypoint.",
       "- Add routes as files in src/routes/. Do not default export route components.",
+      "- For JSON/CRUD APIs, add server routes under src/routes/api/. Read src/routes/api/health.ts first, add routes as needed.",
       "- shadcn/ui components are already in src/components/ui.",
       "- Design system: edit the tokens in src/styles.css (light and dark blocks).",
       "- The database schema lives in src/db/schema.ts. Migrations run automatically.",
@@ -25004,17 +25005,20 @@ export function signInWithNetSuite(returnTo: string = window.location.href) {
   // refuses to render -- looks like "nothing happens" to the user. Navigate
   // the top frame instead so the OAuth flow runs at the top level and the
   // callback redirect lands on the same top frame, which then reads the
-  // #nssid= fragment. Fallback to same-frame navigation if the top window
-  // is cross-origin and can't be reassigned.
+  // #nssid= fragment. Use \`location.href =\` (NOT \`location.assign()\`):
+  // reading the \`.assign\` method off a cross-origin \`window.top.location\`
+  // throws a SecurityError, which would drop us into the same-frame fallback
+  // and load NetSuite inside the iframe (X-Frame-Options: DENY -> "refused to
+  // connect"). Assigning \`.href\` is a navigation, allowed cross-origin.
   try {
     if (window.top && window.top !== window) {
-      window.top.location.assign(url.toString());
+      window.top.location.href = url.toString();
       return;
     }
   } catch {
     /* top window not accessible \u2014 fall through to same-frame navigation */
   }
-  window.location.assign(url.toString());
+  window.location.href = url.toString();
 }
 
 export interface NetSuiteSession {

package/dist/templates/tanstack-start-2026-06-18/src/routes/api/health.ts

@@ -0,0 +1,81 @@
+import { createFileRoute } from '@tanstack/react-router'
+import { db } from '#/db'
+import { entries } from '#/db/schema'
+
+/**
+ * Server route example: GET /api/health. Use this file as the base for
+ * building JSON APIs (CRUD endpoints, webhooks) with TanStack Start
+ * server routes:
+ * https://tanstack.com/start/latest/docs/framework/react/guide/server-routes
+ *
+ * How server routes work:
+ * - Files under src/routes/ can export server handlers. The URL matches
+ *   the file path: src/routes/api/health.ts serves /api/health.
+ * - Add one handler per HTTP method under server.handlers (GET, POST,
+ *   PUT, PATCH, DELETE). A handler receives ({ request, params }) and
+ *   returns a Response, usually Response.json().
+ * - Dynamic segments use $: src/routes/api/todos/$id.ts serves
+ *   /api/todos/:id and the handler reads params.id.
+ * - Read the request body with await request.json() and validate it
+ *   before use. Return proper status codes (201 created, 404 not found).
+ * - Query the database with `import { db } from '#/db'` INSIDE the
+ *   handler, never at module scope (the binding only exists per request).
+ */
+export const Route = createFileRoute('/api/health')({
+  server: {
+    handlers: {
+      GET: async () => {
+        const startedAt = Date.now()
+
+        const server = {
+          status: 'ok' as const,
+          uptimeSeconds: Math.round(
+            typeof process !== 'undefined' &&
+              typeof process.uptime === 'function'
+              ? process.uptime()
+              : 0,
+          ),
+          timestamp: new Date().toISOString(),
+          runtime: 'cloudflare-workers',
+        }
+
+        // Database health: lightweight query against a known table
+        let database: {
+          status: 'ok' | 'error'
+          latencyMs: number
+          error: string | null
+        }
+        const dbStart = Date.now()
+        try {
+          await db.select({ id: entries.id }).from(entries).limit(1)
+          database = {
+            status: 'ok',
+            latencyMs: Date.now() - dbStart,
+            error: null,
+          }
+        } catch (err) {
+          database = {
+            status: 'error',
+            latencyMs: Date.now() - dbStart,
+            error: err instanceof Error ? err.message : String(err),
+          }
+        }
+
+        const overall =
+          server.status === 'ok' && database.status === 'ok'
+            ? 'ok'
+            : 'degraded'
+
+        return Response.json(
+          {
+            status: overall,
+            server,
+            database,
+            checkedInMs: Date.now() - startedAt,
+          },
+          { status: overall === 'ok' ? 200 : 503 },
+        )
+      },
+    },
+  },
+})

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@helloleo/plugins",
-  "version": "0.2.0-beta.0",
+  "version": "0.2.0-beta.1",
   "description": "OpenCode plugins for HelloLeo",
   "license": "UNLICENSED",
   "type": "module",

package/src/templates/tanstack-start-2026-06-18/src/routes/api/health.ts

@@ -0,0 +1,81 @@
+import { createFileRoute } from '@tanstack/react-router'
+import { db } from '#/db'
+import { entries } from '#/db/schema'
+
+/**
+ * Server route example: GET /api/health. Use this file as the base for
+ * building JSON APIs (CRUD endpoints, webhooks) with TanStack Start
+ * server routes:
+ * https://tanstack.com/start/latest/docs/framework/react/guide/server-routes
+ *
+ * How server routes work:
+ * - Files under src/routes/ can export server handlers. The URL matches
+ *   the file path: src/routes/api/health.ts serves /api/health.
+ * - Add one handler per HTTP method under server.handlers (GET, POST,
+ *   PUT, PATCH, DELETE). A handler receives ({ request, params }) and
+ *   returns a Response, usually Response.json().
+ * - Dynamic segments use $: src/routes/api/todos/$id.ts serves
+ *   /api/todos/:id and the handler reads params.id.
+ * - Read the request body with await request.json() and validate it
+ *   before use. Return proper status codes (201 created, 404 not found).
+ * - Query the database with `import { db } from '#/db'` INSIDE the
+ *   handler, never at module scope (the binding only exists per request).
+ */
+export const Route = createFileRoute('/api/health')({
+  server: {
+    handlers: {
+      GET: async () => {
+        const startedAt = Date.now()
+
+        const server = {
+          status: 'ok' as const,
+          uptimeSeconds: Math.round(
+            typeof process !== 'undefined' &&
+              typeof process.uptime === 'function'
+              ? process.uptime()
+              : 0,
+          ),
+          timestamp: new Date().toISOString(),
+          runtime: 'cloudflare-workers',
+        }
+
+        // Database health: lightweight query against a known table
+        let database: {
+          status: 'ok' | 'error'
+          latencyMs: number
+          error: string | null
+        }
+        const dbStart = Date.now()
+        try {
+          await db.select({ id: entries.id }).from(entries).limit(1)
+          database = {
+            status: 'ok',
+            latencyMs: Date.now() - dbStart,
+            error: null,
+          }
+        } catch (err) {
+          database = {
+            status: 'error',
+            latencyMs: Date.now() - dbStart,
+            error: err instanceof Error ? err.message : String(err),
+          }
+        }
+
+        const overall =
+          server.status === 'ok' && database.status === 'ok'
+            ? 'ok'
+            : 'degraded'
+
+        return Response.json(
+          {
+            status: overall,
+            server,
+            database,
+            checkedInMs: Date.now() - startedAt,
+          },
+          { status: overall === 'ok' ? 200 : 503 },
+        )
+      },
+    },
+  },
+})

package/src/tools/scaffold.ts

@@ -88,6 +88,7 @@ export const scaffold = tool({
 			"Notes:",
 			"- This is a TanStack Start project. The server entry is src/server.ts. There is no index.html or client entrypoint.",
 			"- Add routes as files in src/routes/. Do not default export route components.",
+			"- For JSON/CRUD APIs, add server routes under src/routes/api/. Read src/routes/api/health.ts first, add routes as needed.",
 			"- shadcn/ui components are already in src/components/ui.",
 			"- Design system: edit the tokens in src/styles.css (light and dark blocks).",
 			"- The database schema lives in src/db/schema.ts. Migrations run automatically.",

package/src/tools/setup-netsuite.ts

@@ -82,17 +82,20 @@ export function signInWithNetSuite(returnTo: string = window.location.href) {
   // refuses to render -- looks like "nothing happens" to the user. Navigate
   // the top frame instead so the OAuth flow runs at the top level and the
   // callback redirect lands on the same top frame, which then reads the
-  // #nssid= fragment. Fallback to same-frame navigation if the top window
-  // is cross-origin and can't be reassigned.
+  // #nssid= fragment. Use \`location.href =\` (NOT \`location.assign()\`):
+  // reading the \`.assign\` method off a cross-origin \`window.top.location\`
+  // throws a SecurityError, which would drop us into the same-frame fallback
+  // and load NetSuite inside the iframe (X-Frame-Options: DENY -> "refused to
+  // connect"). Assigning \`.href\` is a navigation, allowed cross-origin.
   try {
     if (window.top && window.top !== window) {
-      window.top.location.assign(url.toString());
+      window.top.location.href = url.toString();
       return;
     }
   } catch {
     /* top window not accessible — fall through to same-frame navigation */
   }
-  window.location.assign(url.toString());
+  window.location.href = url.toString();
 }
 
 export interface NetSuiteSession {

package/dist/templates/tanstack-start-2026-06-18/src/api/health.ts

@@ -1,66 +0,0 @@
-import { createFileRoute } from "@tanstack/react-router";
-import { supabaseAdmin } from "@/integrations/supabase/client.server";
-
-export const Route = createFileRoute("/api/health")({
-  server: {
-    handlers: {
-      GET: async () => {
-        const startedAt = Date.now();
-
-        // Server health
-        const server = {
-          status: "ok" as const,
-          uptimeSeconds: Math.round(
-            typeof process !== "undefined" &&
-              typeof process.uptime === "function"
-              ? process.uptime()
-              : 0,
-          ),
-          timestamp: new Date().toISOString(),
-          runtime: "cloudflare-workers",
-        };
-
-        // Database health — lightweight query against a known table
-        let database: {
-          status: "ok" | "error";
-          latencyMs: number;
-          error: string | null;
-        };
-        const dbStart = Date.now();
-        try {
-          const { error } = await supabaseAdmin
-            .from("notes")
-            .select("id", { count: "exact", head: true })
-            .limit(1);
-          if (error) throw error;
-          database = {
-            status: "ok",
-            latencyMs: Date.now() - dbStart,
-            error: null,
-          };
-        } catch (err) {
-          database = {
-            status: "error",
-            latencyMs: Date.now() - dbStart,
-            error: err instanceof Error ? err.message : String(err),
-          };
-        }
-
-        const overall =
-          server.status === "ok" && database.status === "ok"
-            ? "ok"
-            : "degraded";
-
-        return Response.json(
-          {
-            status: overall,
-            server,
-            database,
-            checkedInMs: Date.now() - startedAt,
-          },
-          { status: overall === "ok" ? 200 : 503 },
-        );
-      },
-    },
-  },
-});

package/src/templates/tanstack-start-2026-06-18/src/api/health.ts

@@ -1,66 +0,0 @@
-import { createFileRoute } from "@tanstack/react-router";
-import { supabaseAdmin } from "@/integrations/supabase/client.server";
-
-export const Route = createFileRoute("/api/health")({
-  server: {
-    handlers: {
-      GET: async () => {
-        const startedAt = Date.now();
-
-        // Server health
-        const server = {
-          status: "ok" as const,
-          uptimeSeconds: Math.round(
-            typeof process !== "undefined" &&
-              typeof process.uptime === "function"
-              ? process.uptime()
-              : 0,
-          ),
-          timestamp: new Date().toISOString(),
-          runtime: "cloudflare-workers",
-        };
-
-        // Database health — lightweight query against a known table
-        let database: {
-          status: "ok" | "error";
-          latencyMs: number;
-          error: string | null;
-        };
-        const dbStart = Date.now();
-        try {
-          const { error } = await supabaseAdmin
-            .from("notes")
-            .select("id", { count: "exact", head: true })
-            .limit(1);
-          if (error) throw error;
-          database = {
-            status: "ok",
-            latencyMs: Date.now() - dbStart,
-            error: null,
-          };
-        } catch (err) {
-          database = {
-            status: "error",
-            latencyMs: Date.now() - dbStart,
-            error: err instanceof Error ? err.message : String(err),
-          };
-        }
-
-        const overall =
-          server.status === "ok" && database.status === "ok"
-            ? "ok"
-            : "degraded";
-
-        return Response.json(
-          {
-            status: overall,
-            server,
-            database,
-            checkedInMs: Date.now() - startedAt,
-          },
-          { status: overall === "ok" ? 200 : 503 },
-        );
-      },
-    },
-  },
-});