@ibgib/web-gib 0.0.62 → 0.0.63

package/src/ui/ui-helpers.mts

@@ -334,7 +334,11 @@ export async function showFullscreenDialog({
                     true.toString();
                 if (promptInput) { promptInput.value = ''; } // Clear input for next time
                 dialog.close(result);
-                resolve(result);
+                if (validPasskeys.length > 0) {
+                    resolve({ secret: result, poolId: 'manage' });
+                } else {
+                    resolve(result);
+                }
             };
 
             /** user clicks Passkey button */
@@ -353,7 +357,7 @@ export async function showFullscreenDialog({
                         removeEventListeners();
                         if (promptInput) { promptInput.value = ''; }
                         dialog.close(passkeySecret);
-                        resolve(passkeySecret);
+                        resolve({ secret: passkeySecret, poolId: selectedPasskey.poolId || 'passkey-manage' });
                     } else {
                         btnPasskey!.disabled = false;
                         btnPasskey!.textContent = passkeyButtonTitle || '🛡️ Touch ID / Security Key';

package/tools/auto-generated-agent-skills/skills/ibgib-create-app-server/SKILL.md

@@ -0,0 +1,50 @@
+---
+name: ibgib-create-app-server
+description: Scaffolds the backend Node.js server for an ibgib full-stack application using serve-gib from @ibgib/node-gib, including WebSocket sync upgrade, Traefik Docker Compose, and server TypeScript configuration.
+---
+
+# Skill: ibgib-create-app-server
+
+## What This Skill Does
+
+Generates the backend server infrastructure for a full-stack ibgib application. This includes:
+- **`src/server/server.mts`**: Node.js HTTP/WebSocket server utilizing `serve-gib`, `getStandardServeGibHandlers()`, and `SyncUpgradeHandler`.
+- **`tsconfig.server.json`**: TypeScript compiler configuration targeted for Node.js ESNext.
+- **`Dockerfile`**: Lightweight Alpine container packaging the bundled server and static client SPA.
+- **`docker-compose.yml`**: Local multi-container orchestration behind the Traefik reverse proxy with automatic local HTTPS.
+
+This skill is invoked during the scaffolding of **Full-Stack (Archetype A)** applications.
+
+---
+
+## Token Reference
+
+| Token | Example value | How it's computed |
+|---|---|---|
+| `{{APP_NAME}}` | `my-app` | kebab-case application name |
+| `{{APP_DIR_NAME}}` | `my-app` | Folder name |
+| `{{APP_HUMAN_NAME}}` | `My App` | Natural language name |
+| `{{PORT}}` | `3000` | Server port (default `3000`) |
+| `{{DATA_DIR_REL}}` | `../../.data/my-app-space` | Local storage directory relative to server |
+| `{{LOCAL_DOMAIN}}` | `my-app.localhost` | Local HTTPS subdomain |
+| `{{APP_UUID}}` | `4b810a9c...` | Unique 32-char hex string from `generate-id.js` |
+
+---
+
+## Generation Steps
+
+### 1. Confirm token values
+Derive tokens from the developer's inputs and generate fresh UUIDs using `node .agents/skills/ibgib-create-app-core/generate-id.js`.
+
+### 2. Generate files
+Apply token substitutions to templates in `templates/` and write to the target application directory:
+
+| Template file | Output file |
+|---|---|
+| `templates/server.mts.template` | `src/server/server.mts` |
+| `templates/tsconfig.server.json.template` | `tsconfig.server.json` |
+| `templates/Dockerfile.template` | `Dockerfile` |
+| `templates/docker-compose.yml.template` | `docker-compose.yml` (or app service block) |
+
+### 3. Update Build Script
+Ensure the application's `build-[app-name].mts` script configures `tsconfigConfigs` for both client (`tsconfig.json`) and server (`tsconfig.server.json`), and builds the server entry point via `buildServer()`.

package/src/identity/custodian-delegate-helper.mts.bak

@@ -1,7 +0,0 @@
-/**
- * @module identity/custodian-delegate-helper
- *
- * Re-exports from {@link ./device-delegate-helper.mjs} for backward compatibility.
- */
-
-export * from './device-delegate-helper.mjs';

package/src/identity/sso/sso-config-helper.mts.bak

@@ -1,52 +0,0 @@
-import { SsoServerConfig, SsoProviderServerConfig, SsoProviderId } from './sso-types.mjs';
-
-/**
- * Loads the SSO configuration from environment variables.
- * Parses active OAuth2 providers dynamically based on their environment keys.
- */
-export function loadSsoServerConfig(): SsoServerConfig {
-    const ssoServerKdfSecret = process.env.SSO_SERVER_KDF_SECRET;
-    const sessionSecret = process.env.SESSION_SECRET;
-
-    if (!ssoServerKdfSecret) {
-        throw new Error(
-            `SSO_SERVER_KDF_SECRET is missing from environment. (E: 840899ab4fdfd23e89cfae1889cfae12)`
-        );
-    }
-    if (!sessionSecret) {
-        throw new Error(
-            `SESSION_SECRET is missing from environment. (E: bfa899ab4fdfd23e89cfae23)`
-        );
-    }
-
-    const providers: Partial<Record<SsoProviderId, SsoProviderServerConfig>> = {};
-
-    // Load Google Provider if configured
-    if (process.env.GOOGLE_CLIENT_ID && process.env.GOOGLE_CLIENT_SECRET) {
-        providers.google = {
-            providerId: 'google',
-            clientId: process.env.GOOGLE_CLIENT_ID,
-            clientSecret: process.env.GOOGLE_CLIENT_SECRET,
-            tokenUrl: 'https://oauth2.googleapis.com/token',
-            userInfoUrl: 'https://openidconnect.googleapis.com/v1/userinfo',
-            jwksUrl: 'https://www.googleapis.com/oauth2/v3/certs'
-        };
-    }
-
-    // Load GitHub Provider if configured
-    if (process.env.GITHUB_CLIENT_ID && process.env.GITHUB_CLIENT_SECRET) {
-        providers.github = {
-            providerId: 'github',
-            clientId: process.env.GITHUB_CLIENT_ID,
-            clientSecret: process.env.GITHUB_CLIENT_SECRET,
-            tokenUrl: 'https://github.com/login/oauth/access_token',
-            userInfoUrl: 'https://api.github.com/user'
-        };
-    }
-
-    return {
-        ssoServerKdfSecret,
-        sessionSecret,
-        providers
-    };
-}