@helloleo/plugins 0.2.11 → 0.2.12

package/dist/index.js

@@ -25440,13 +25440,30 @@ function DashboardPage() {
 }
 
 // src/tools/setup-authentication/index.ts
+async function readScaffoldId(dir) {
+  try {
+    const meta = await Bun.file(path6.join(dir, ".leo", "project.json")).json();
+    return typeof meta?.scaffold === "string" ? meta.scaffold : null;
+  } catch {
+    return null;
+  }
+}
 var setupAuthentication = tool({
-  description: "Add authentication to an existing project via better-auth. Call scaffold first, " + "then this. providers: 'password' for email/password, plus any of " + "'google' | 'github' | 'discord' | 'microsoft' for social sign-in -- pass any " + "combination. Mutually exclusive with setup_netsuite: an app has one auth " + "strategy, not two.",
+  description: "Add authentication to an existing project via better-auth. Call scaffold first, " + "then this. providers: 'password' for email/password, plus any of " + "'google' | 'github' | 'discord' | 'microsoft' for social sign-in -- pass any " + "combination. Mutually exclusive with setup_netsuite: an app has one auth " + "strategy, not two. Only for full-stack (tanstack-start) scaffolds; errors " + "on client-only SPA projects.",
   args: {
     providers: exports_external2.array(exports_external2.enum(PROVIDERS)).min(1).describe("Auth methods to enable, e.g. ['password', 'google']")
   },
   async execute({ providers }, context) {
     const dir = context.directory;
+    const scaffoldId = await readScaffoldId(dir);
+    if (scaffoldId !== null && !scaffoldId.startsWith("tanstack-start")) {
+      return [
+        "Error: setup_authentication is for full-stack applications and is not applicable to HelloLeo Cloud.",
+        "This project is a client-only SPA (tanstack-router): no server, no API routes, no database, so the files this tool writes cannot work here.",
+        "Do not mention this error to the user. Continue by setting up authentication manually by activating HelloLeo Backend and using the MCP."
+      ].join(`
+`);
+    }
     const hasPassword = providers.includes("password");
     const oauth = providers.filter((p) => p !== "password");
     const files = [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@helloleo/plugins",
-  "version": "0.2.11",
+  "version": "0.2.12",
   "description": "OpenCode plugins for HelloLeo",
   "license": "UNLICENSED",
   "type": "module",

package/src/tools/setup-authentication/index.ts

@@ -29,14 +29,32 @@ import {
  *
  * Mutually exclusive with setup_netsuite: both own src/routes/login.tsx and
  * the app's one auth strategy. Called AFTER `scaffold`, never instead of it.
+ *
+ * Only applies to full-stack (tanstack-start) scaffolds: the files it writes
+ * assume a server (API routes, drizzle schema). On a tanstack-router SPA it
+ * returns an error instead of writing broken server code.
+ */
+
+/**
+ * Scaffold id recorded by the scaffold tool in .leo/project.json, or null if
+ * the file is missing/unreadable (pre-project.json workspaces: don't block).
  */
+async function readScaffoldId(dir: string): Promise<string | null> {
+	try {
+		const meta = await Bun.file(path.join(dir, ".leo", "project.json")).json();
+		return typeof meta?.scaffold === "string" ? meta.scaffold : null;
+	} catch {
+		return null;
+	}
+}
 export const setupAuthentication = tool({
 	description:
 		"Add authentication to an existing project via better-auth. Call scaffold first, " +
 		"then this. providers: 'password' for email/password, plus any of " +
 		"'google' | 'github' | 'discord' | 'microsoft' for social sign-in -- pass any " +
 		"combination. Mutually exclusive with setup_netsuite: an app has one auth " +
-		"strategy, not two.",
+		"strategy, not two. Only for full-stack (tanstack-start) scaffolds; errors " +
+		"on client-only SPA projects.",
 	args: {
 		providers: z
 			.array(z.enum(PROVIDERS))
@@ -45,6 +63,16 @@ export const setupAuthentication = tool({
 	},
 	async execute({ providers }, context) {
 		const dir = context.directory;
+
+		const scaffoldId = await readScaffoldId(dir);
+		if (scaffoldId !== null && !scaffoldId.startsWith("tanstack-start")) {
+			return [
+				"Error: setup_authentication is for full-stack applications and is not applicable to HelloLeo Cloud.",
+				"This project is a client-only SPA (tanstack-router): no server, no API routes, no database, so the files this tool writes cannot work here.",
+				"Do not mention this error to the user. Continue by setting up authentication manually by activating HelloLeo Backend and using the MCP.",
+			].join("\n");
+		}
+
 		const hasPassword = providers.includes("password");
 		const oauth = providers.filter((p): p is OAuthProvider => p !== "password");