@ibgib/web-gib 0.0.61 → 0.0.63

package/src/ui/component/identity/remove-device/remove-device.mts

@@ -220,6 +220,7 @@ export class RemoveDeviceComponentInstance
                 parentKeystone: this.activePrimaryKeystone,
                 delegateTjpAddr,
                 masterSecret,
+                signingPoolId: 'manage',
                 metaspace,
                 space
             });

package/src/ui/ui-helpers.mts

@@ -49,6 +49,9 @@ export interface ShowFullscreenDialogOpts {
     isPassword?: boolean;
     isBusy?: boolean;
     animationEmoji?: string;
+    passkeys?: Record<string, any>;
+    passkeyButtonTitle?: string;
+    onPasskeyAuth?: (passkeyEntry?: any) => Promise<string | undefined>;
 }
 
 export async function showFullscreenDialog(opts: ShowFullscreenDialogOpts & { isBusy: true }): Promise<FullscreenDialogController>;
@@ -64,6 +67,9 @@ export async function showFullscreenDialog({
     isPassword,
     isBusy,
     animationEmoji,
+    passkeys,
+    passkeyButtonTitle,
+    onPasskeyAuth,
 }: ShowFullscreenDialogOpts): Promise<string | undefined | FullscreenDialogController> {
     const lc = `[${showFullscreenDialog.name}]`;
     try {
@@ -112,6 +118,75 @@ export async function showFullscreenDialog({
             messageElement.appendChild(animDiv);
         }
 
+        // Clean up any previous passkey container
+        let prevPasskeyContainer = document.getElementById('fullscreen-dialog-passkey-container');
+        if (prevPasskeyContainer) { prevPasskeyContainer.remove(); }
+
+        let passkeyContainer: HTMLDivElement | null = null;
+        let btnPasskey: HTMLButtonElement | null = null;
+        let selectPasskey: HTMLSelectElement | null = null;
+        const validPasskeys = Object.values(passkeys || {}).filter(p => p !== null && p !== undefined);
+
+        if (validPasskeys.length > 0 && onPasskeyAuth && !isBusy) {
+            passkeyContainer = document.createElement('div');
+            passkeyContainer.id = 'fullscreen-dialog-passkey-container';
+            passkeyContainer.style.margin = '1rem 0';
+            passkeyContainer.style.textAlign = 'center';
+
+            btnPasskey = document.createElement('button');
+            btnPasskey.id = 'fullscreen-dialog-btn-passkey';
+            btnPasskey.type = 'button';
+            btnPasskey.className = 'action-btn';
+            btnPasskey.style.width = '100%';
+            btnPasskey.style.padding = '0.75rem 1rem';
+            btnPasskey.style.background = 'linear-gradient(135deg, #1b5e20, #2e7d32)';
+            btnPasskey.style.color = '#ffffff';
+            btnPasskey.style.fontWeight = 'bold';
+            btnPasskey.style.borderRadius = '8px';
+            btnPasskey.style.border = '1px solid rgba(255,255,255,0.2)';
+            btnPasskey.style.cursor = 'pointer';
+            btnPasskey.style.fontSize = '0.95rem';
+            btnPasskey.style.marginBottom = '0.75rem';
+            btnPasskey.textContent = passkeyButtonTitle || '🛡️ Touch ID / Security Key';
+
+            if (validPasskeys.length > 1) {
+                selectPasskey = document.createElement('select');
+                selectPasskey.style.width = '100%';
+                selectPasskey.style.padding = '0.4rem';
+                selectPasskey.style.marginBottom = '0.5rem';
+                selectPasskey.style.borderRadius = '4px';
+                selectPasskey.style.background = 'rgba(0,0,0,0.3)';
+                selectPasskey.style.color = 'inherit';
+                selectPasskey.style.border = '1px solid rgba(255,255,255,0.2)';
+                validPasskeys.forEach((p: any, idx: number) => {
+                    const opt = document.createElement('option');
+                    opt.value = idx.toString();
+                    opt.textContent = `${p.name || 'Key'} (${p.credentialId?.substring(0, 8)}...)`;
+                    selectPasskey!.appendChild(opt);
+                });
+                passkeyContainer.appendChild(selectPasskey);
+            }
+
+            passkeyContainer.appendChild(btnPasskey);
+
+            const divider = document.createElement('div');
+            divider.style.display = 'flex';
+            divider.style.alignItems = 'center';
+            divider.style.justifyContent = 'center';
+            divider.style.gap = '0.5rem';
+            divider.style.fontSize = '0.8rem';
+            divider.style.color = 'var(--clr-text-secondary, #b3b3b3)';
+            divider.style.margin = '0.5rem 0';
+            divider.innerHTML = `
+                <span style="flex: 1; height: 1px; background: rgba(255,255,255,0.15);"></span>
+                <span>OR enter Password below</span>
+                <span style="flex: 1; height: 1px; background: rgba(255,255,255,0.15);"></span>
+            `;
+            passkeyContainer.appendChild(divider);
+
+            promptInput.parentElement?.insertBefore(passkeyContainer, promptInput);
+        }
+
         // reset the input classList and button displays
         promptInput.classList.remove('collapsed');
         cancelButton.classList.remove('collapsed');
@@ -241,6 +316,12 @@ export async function showFullscreenDialog({
                 if (prompt || showInput) {
                     promptInput.removeEventListener('keypress', onKeypress);
                 }
+                if (btnPasskey) {
+                    btnPasskey.removeEventListener('click', onPasskeyClick);
+                }
+                if (passkeyContainer) {
+                    passkeyContainer.remove();
+                }
                 okButton.removeEventListener('click', onOK);
                 cancelButton.removeEventListener('click', onCancel);
                 dialog.removeEventListener('close', onClose); // Remove dialog-level listener too
@@ -253,9 +334,45 @@ export async function showFullscreenDialog({
                     true.toString();
                 if (promptInput) { promptInput.value = ''; } // Clear input for next time
                 dialog.close(result);
-                resolve(result);
+                if (validPasskeys.length > 0) {
+                    resolve({ secret: result, poolId: 'manage' });
+                } else {
+                    resolve(result);
+                }
             };
 
+            /** user clicks Passkey button */
+            const onPasskeyClick = async () => {
+                try {
+                    if (!onPasskeyAuth) return;
+                    btnPasskey!.disabled = true;
+                    btnPasskey!.textContent = 'Waiting for biometrics / security key...';
+                    let selectedPasskey = validPasskeys[0];
+                    if (selectPasskey) {
+                        const selectedIdx = parseInt(selectPasskey.value, 10);
+                        selectedPasskey = validPasskeys[selectedIdx] || validPasskeys[0];
+                    }
+                    const passkeySecret = await onPasskeyAuth(selectedPasskey);
+                    if (passkeySecret) {
+                        removeEventListeners();
+                        if (promptInput) { promptInput.value = ''; }
+                        dialog.close(passkeySecret);
+                        resolve({ secret: passkeySecret, poolId: selectedPasskey.poolId || 'passkey-manage' });
+                    } else {
+                        btnPasskey!.disabled = false;
+                        btnPasskey!.textContent = passkeyButtonTitle || '🛡️ Touch ID / Security Key';
+                    }
+                } catch (err) {
+                    console.warn('Passkey assertion in dialog failed/cancelled:', err);
+                    btnPasskey!.disabled = false;
+                    btnPasskey!.textContent = passkeyButtonTitle || '🛡️ Touch ID / Security Key';
+                }
+            };
+
+            if (btnPasskey) {
+                btnPasskey.addEventListener('click', onPasskeyClick);
+            }
+
             /** user actively clicks Cancel */
             const onCancel = () => {
                 removeEventListeners();
@@ -264,11 +381,11 @@ export async function showFullscreenDialog({
                 resolve(undefined);
             };
             /**
-             * Handle dialog.close() without button click (e.g., Esc key)
-             *
-             * NOTE: this does not trigger when dialog.close() is executed. This
-             * is only firing when esc is pressed.
-             */
+              * Handle dialog.close() without button click (e.g., Esc key)
+              *
+              * NOTE: this does not trigger when dialog.close() is executed. This
+              * is only firing when esc is pressed.
+              */
             const onClose = () => {
                 removeEventListeners();
                 if (promptInput) { promptInput.value = ''; } // Clear input for next time

package/tools/auto-generated-agent-skills/skills/ibgib-create-app-server/SKILL.md

@@ -0,0 +1,50 @@
+---
+name: ibgib-create-app-server
+description: Scaffolds the backend Node.js server for an ibgib full-stack application using serve-gib from @ibgib/node-gib, including WebSocket sync upgrade, Traefik Docker Compose, and server TypeScript configuration.
+---
+
+# Skill: ibgib-create-app-server
+
+## What This Skill Does
+
+Generates the backend server infrastructure for a full-stack ibgib application. This includes:
+- **`src/server/server.mts`**: Node.js HTTP/WebSocket server utilizing `serve-gib`, `getStandardServeGibHandlers()`, and `SyncUpgradeHandler`.
+- **`tsconfig.server.json`**: TypeScript compiler configuration targeted for Node.js ESNext.
+- **`Dockerfile`**: Lightweight Alpine container packaging the bundled server and static client SPA.
+- **`docker-compose.yml`**: Local multi-container orchestration behind the Traefik reverse proxy with automatic local HTTPS.
+
+This skill is invoked during the scaffolding of **Full-Stack (Archetype A)** applications.
+
+---
+
+## Token Reference
+
+| Token | Example value | How it's computed |
+|---|---|---|
+| `{{APP_NAME}}` | `my-app` | kebab-case application name |
+| `{{APP_DIR_NAME}}` | `my-app` | Folder name |
+| `{{APP_HUMAN_NAME}}` | `My App` | Natural language name |
+| `{{PORT}}` | `3000` | Server port (default `3000`) |
+| `{{DATA_DIR_REL}}` | `../../.data/my-app-space` | Local storage directory relative to server |
+| `{{LOCAL_DOMAIN}}` | `my-app.localhost` | Local HTTPS subdomain |
+| `{{APP_UUID}}` | `4b810a9c...` | Unique 32-char hex string from `generate-id.js` |
+
+---
+
+## Generation Steps
+
+### 1. Confirm token values
+Derive tokens from the developer's inputs and generate fresh UUIDs using `node .agents/skills/ibgib-create-app-core/generate-id.js`.
+
+### 2. Generate files
+Apply token substitutions to templates in `templates/` and write to the target application directory:
+
+| Template file | Output file |
+|---|---|
+| `templates/server.mts.template` | `src/server/server.mts` |
+| `templates/tsconfig.server.json.template` | `tsconfig.server.json` |
+| `templates/Dockerfile.template` | `Dockerfile` |
+| `templates/docker-compose.yml.template` | `docker-compose.yml` (or app service block) |
+
+### 3. Update Build Script
+Ensure the application's `build-[app-name].mts` script configures `tsconfigConfigs` for both client (`tsconfig.json`) and server (`tsconfig.server.json`), and builds the server entry point via `buildServer()`.

package/src/identity/custodian-delegate-helper.mts.bak

@@ -1,7 +0,0 @@
-/**
- * @module identity/custodian-delegate-helper
- *
- * Re-exports from {@link ./device-delegate-helper.mjs} for backward compatibility.
- */
-
-export * from './device-delegate-helper.mjs';

package/src/identity/sso/sso-config-helper.mts.bak

@@ -1,52 +0,0 @@
-import { SsoServerConfig, SsoProviderServerConfig, SsoProviderId } from './sso-types.mjs';
-
-/**
- * Loads the SSO configuration from environment variables.
- * Parses active OAuth2 providers dynamically based on their environment keys.
- */
-export function loadSsoServerConfig(): SsoServerConfig {
-    const ssoServerKdfSecret = process.env.SSO_SERVER_KDF_SECRET;
-    const sessionSecret = process.env.SESSION_SECRET;
-
-    if (!ssoServerKdfSecret) {
-        throw new Error(
-            `SSO_SERVER_KDF_SECRET is missing from environment. (E: 840899ab4fdfd23e89cfae1889cfae12)`
-        );
-    }
-    if (!sessionSecret) {
-        throw new Error(
-            `SESSION_SECRET is missing from environment. (E: bfa899ab4fdfd23e89cfae23)`
-        );
-    }
-
-    const providers: Partial<Record<SsoProviderId, SsoProviderServerConfig>> = {};
-
-    // Load Google Provider if configured
-    if (process.env.GOOGLE_CLIENT_ID && process.env.GOOGLE_CLIENT_SECRET) {
-        providers.google = {
-            providerId: 'google',
-            clientId: process.env.GOOGLE_CLIENT_ID,
-            clientSecret: process.env.GOOGLE_CLIENT_SECRET,
-            tokenUrl: 'https://oauth2.googleapis.com/token',
-            userInfoUrl: 'https://openidconnect.googleapis.com/v1/userinfo',
-            jwksUrl: 'https://www.googleapis.com/oauth2/v3/certs'
-        };
-    }
-
-    // Load GitHub Provider if configured
-    if (process.env.GITHUB_CLIENT_ID && process.env.GITHUB_CLIENT_SECRET) {
-        providers.github = {
-            providerId: 'github',
-            clientId: process.env.GITHUB_CLIENT_ID,
-            clientSecret: process.env.GITHUB_CLIENT_SECRET,
-            tokenUrl: 'https://github.com/login/oauth/access_token',
-            userInfoUrl: 'https://api.github.com/user'
-        };
-    }
-
-    return {
-        ssoServerKdfSecret,
-        sessionSecret,
-        providers
-    };
-}