@helloleo/plugins 0.2.19 → 0.2.20

package/dist/index.js

@@ -25561,6 +25561,17 @@ async function readScaffoldId2(dir) {
     return null;
   }
 }
+async function isStartScaffold(dir) {
+  const scaffoldId = await readScaffoldId2(dir);
+  if (scaffoldId)
+    return scaffoldId.startsWith("tanstack-start");
+  try {
+    const pkg = await Bun.file(path7.join(dir, "package.json")).json();
+    return Boolean(pkg?.dependencies?.["@tanstack/react-start"] ?? pkg?.devDependencies?.["@tanstack/react-start"]);
+  } catch {
+    return false;
+  }
+}
 function schemaAppend() {
   return `
 // --- NetSuite OAuth (added by setup_netsuite) ---
@@ -26773,13 +26784,11 @@ async function executeSpa(dir) {
 `);
 }
 var setupNetsuite = tool({
-  description: "Add NetSuite runtime OAuth (end-user LOGIN) to an existing project. " + "Call scaffold first, then this. Works on both scaffold types: it " + "writes the client + auth components, and the OAuth backend is the " + "project's HelloLeo Cloud Worker (VITE_WORKER_URL) -- the platform " + "wizard registers the Worker's fixed /auth/netsuite/callback on the " + "Integration Record, so the app never hosts the OAuth routes itself. " + "This login uses NetSuite Integration Record #2 " + "(scope: rest_webservices) -- a SEPARATE record from the MCP one " + "(scope: mcp) that was used only to BUILD the app; do not confuse " + "them. Real OAuth from day one -- never replace <AuthLayout> with a " + "password placeholder. Setup guide (link the user to it): " + "https://docs.helloleo.dev/integrations/netsuite",
+  description: "Add NetSuite runtime OAuth (end-user LOGIN) to an existing project. " + "Call scaffold first, then this. Works on both scaffold types and " + "picks the variant automatically: on tanstack-start the app hosts " + "its own OAuth routes (/auth/netsuite/* + /api/me, same-origin " + "client); on tanstack-router (SPA) it writes the client + auth " + "components and the OAuth backend is the project's HelloLeo Cloud " + "Worker (VITE_WORKER_URL). This login uses NetSuite Integration " + "Record #2 (scope: rest_webservices) -- a SEPARATE record from the " + "MCP one (scope: mcp) that was used only to BUILD the app; do not " + "confuse them. Real OAuth from day one -- never replace <AuthLayout> " + "with a password placeholder. Setup guide (link the user to it): " + "https://docs.helloleo.dev/integrations/netsuite",
   args: {},
   async execute(_args, context) {
     const dir = context.directory;
-    const scaffoldId = await readScaffoldId2(dir);
-    const inAppOptIn = process.env.PLUGINS_NETSUITE_IN_APP === "1";
-    if (inAppOptIn && scaffoldId?.startsWith("tanstack-start")) {
+    if (await isStartScaffold(dir)) {
       return executeStart(dir);
     }
     return executeSpa(dir);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@helloleo/plugins",
-  "version": "0.2.19",
+  "version": "0.2.20",
   "description": "OpenCode plugins for HelloLeo",
   "license": "UNLICENSED",
   "type": "module",

package/src/tools/setup-netsuite.ts

@@ -4,19 +4,20 @@ import type { Plugin } from "@opencode-ai/plugin";
 import { tool } from "@opencode-ai/plugin";
 
 /**
- * NetSuite runtime OAuth (end-user LOGIN). Two variants:
+ * NetSuite runtime OAuth (end-user LOGIN). Two variants, picked automatically
+ * from the project's scaffold -- never from env:
  *
- * - DEFAULT (every scaffold type): client-only files; the OAuth backend is
- *   the per-project HelloLeo Cloud Worker (VITE_WORKER_URL), sign-in runs in
+ * - tanstack-start (SSR): the app IS the backend. Emits server routes
+ *   (/auth/netsuite/* + /api/me), netsuite_flows + netsuite_sessions drizzle
+ *   tables, and a same-origin client. The redirect URI registered on
+ *   Integration Record #2 must be the APP's own /auth/netsuite/callback
+ *   (read it from GET /auth/netsuite/config).
+ * - tanstack-router (SPA): client-only files; the OAuth backend is the
+ *   per-project HelloLeo Cloud Worker (VITE_WORKER_URL), sign-in runs in
  *   a popup + postMessage so it works inside the HelloLeo preview iframe.
- *   This matches prod: the platform wizard registers the Worker's fixed
- *   /auth/netsuite/callback as the ONE redirect URI on Integration Record #2
- *   (provision-first, see webapp netsuiteRuntimeSetup).
- * - IN-APP (opt-in: PLUGINS_NETSUITE_IN_APP=1 + tanstack-start scaffold):
- *   the app IS the backend. Emits server routes (/auth/netsuite/* + /api/me),
- *   netsuite_flows + netsuite_sessions drizzle tables, and a same-origin
- *   client. Only valid when the deployment registers the APP's own callback
- *   on the Integration Record instead of the Worker's.
+ *   The wizard registers the Worker's fixed /auth/netsuite/callback as the
+ *   ONE redirect URI on Integration Record #2 (provision-first, see webapp
+ *   netsuiteRuntimeSetup).
  *
  * Both variants share the same component names (AuthLayout / LoginPage /
  * SignInWithNetSuite) and the same wiring step: wrap the root route's
@@ -42,6 +43,26 @@ async function readScaffoldId(dir: string): Promise<string | null> {
 	}
 }
 
+/**
+ * Is this project a tanstack-start (SSR) app? Primary signal: the scaffold id
+ * in .leo/project.json. Fallback for pre-project.json workspaces: only the
+ * start scaffold depends on @tanstack/react-start -- the router SPA ships
+ * @tanstack/react-router alone.
+ */
+async function isStartScaffold(dir: string): Promise<boolean> {
+	const scaffoldId = await readScaffoldId(dir);
+	if (scaffoldId) return scaffoldId.startsWith("tanstack-start");
+	try {
+		const pkg = await Bun.file(path.join(dir, "package.json")).json();
+		return Boolean(
+			pkg?.dependencies?.["@tanstack/react-start"] ??
+				pkg?.devDependencies?.["@tanstack/react-start"],
+		);
+	} catch {
+		return false;
+	}
+}
+
 // --- emitted: src/db/schema.ts (appended) --------------------------------
 function schemaAppend(): string {
 	return `
@@ -1302,31 +1323,27 @@ async function executeSpa(dir: string): Promise<string> {
 export const setupNetsuite = tool({
 	description:
 		"Add NetSuite runtime OAuth (end-user LOGIN) to an existing project. " +
-		"Call scaffold first, then this. Works on both scaffold types: it " +
-		"writes the client + auth components, and the OAuth backend is the " +
-		"project's HelloLeo Cloud Worker (VITE_WORKER_URL) -- the platform " +
-		"wizard registers the Worker's fixed /auth/netsuite/callback on the " +
-		"Integration Record, so the app never hosts the OAuth routes itself. " +
-		"This login uses NetSuite Integration Record #2 " +
-		"(scope: rest_webservices) -- a SEPARATE record from the MCP one " +
-		"(scope: mcp) that was used only to BUILD the app; do not confuse " +
-		"them. Real OAuth from day one -- never replace <AuthLayout> with a " +
-		"password placeholder. Setup guide (link the user to it): " +
+		"Call scaffold first, then this. Works on both scaffold types and " +
+		"picks the variant automatically: on tanstack-start the app hosts " +
+		"its own OAuth routes (/auth/netsuite/* + /api/me, same-origin " +
+		"client); on tanstack-router (SPA) it writes the client + auth " +
+		"components and the OAuth backend is the project's HelloLeo Cloud " +
+		"Worker (VITE_WORKER_URL). This login uses NetSuite Integration " +
+		"Record #2 (scope: rest_webservices) -- a SEPARATE record from the " +
+		"MCP one (scope: mcp) that was used only to BUILD the app; do not " +
+		"confuse them. Real OAuth from day one -- never replace <AuthLayout> " +
+		"with a password placeholder. Setup guide (link the user to it): " +
 		"https://docs.helloleo.dev/integrations/netsuite",
 	args: {},
 	async execute(_args, context) {
 		const dir = context.directory;
-		// Prod model: Integration Record #2 carries ONE fixed redirect URI --
-		// the per-project HelloLeo Cloud Worker's /auth/netsuite/callback
-		// (provision-first wizard, see webapp netsuiteRuntimeSetup). So the
-		// Worker variant is the default for EVERY scaffold type. The in-app
-		// server-route variant (app-origin redirect URI) only makes sense when
-		// a deployment's wizard registers the app's own callback instead --
-		// opt in per deployment with PLUGINS_NETSUITE_IN_APP=1 on a
-		// tanstack-start scaffold.
-		const scaffoldId = await readScaffoldId(dir);
-		const inAppOptIn = process.env.PLUGINS_NETSUITE_IN_APP === "1";
-		if (inAppOptIn && scaffoldId?.startsWith("tanstack-start")) {
+		// The variant follows the scaffold, never an env flag: a start app has
+		// a server (TanStack Start routes + D1) so it hosts the OAuth itself;
+		// the router SPA has no server, so the per-project HelloLeo Cloud
+		// Worker is the backend. The redirect URI registered on Integration
+		// Record #2 must match: the app's own /auth/netsuite/callback for
+		// start, the Worker's fixed callback for the SPA.
+		if (await isStartScaffold(dir)) {
 			return executeStart(dir);
 		}
 		return executeSpa(dir);