@lepsto/app-dev 0.2.0 → 0.3.0

package/README.md

@@ -1,6 +1,6 @@
 # @lepsto/app-dev
 
-Vite plugin for local development of Lepsto Apps. It proxies `/lessly-api/*` to the
+Vite plugin for local development of Lepsto Apps. It proxies `/lepsto-api/*` (and, for apps scaffolded before the rename, `/lessly-api/*`) to the
 Lepsto REST API with an automatically-injected bearer token, exposes the dev
 `import.meta.env` values your App needs, and serves the Module-Federation manifest
 at the origin root.
@@ -10,10 +10,10 @@ at the origin root.
 ```ts
 // vite.config.ts
 import { defineConfig } from 'vite';
-import { lesslyAppDev } from '@lepsto/app-dev';
+import { lepstoAppDev } from '@lepsto/app-dev';
 
 export default defineConfig({
-  plugins: [lesslyAppDev()],
+  plugins: [lepstoAppDev()],
 });
 ```
 
@@ -41,7 +41,7 @@ localStorage.setItem('lessly:dev-remote', '<app-slug>=http://localhost:5174')
 The contract has two halves that are easy to confuse:
 
 - **key** — the App's Module Federation remote name, i.e. `id` in
-  `lessly.app.yaml` (= `APP_NAME` in `config/app-name.mjs`). Not the product
+  `lepsto.app.yaml` / `lessly.app.yaml` (= `APP_NAME` in `config/app-name.mjs`). Not the product
   slug.
 - **value** — the App's **own** dev origin, a bare origin with no base path. The
   shell fetches `<origin>/mf-manifest.json` at the origin root; the plugin's
@@ -56,14 +56,14 @@ shell from loading an `http://localhost` remote.
 
 ## Authentication
 
-The plugin injects `Authorization: Bearer <token>` on every `/lessly-api/*` request
+The plugin injects `Authorization: Bearer <token>` on every `/lepsto-api/*` (or legacy `/lessly-api/*`) request
 using, in order: a valid cached token → a stored token in `~/.lessly/credentials.json`
 → a refreshed token → `DEV_API_KEY` exchange → interactive device login. Token
 refresh is coordinated across processes with a file lock beside the credentials file.
 
 ## Scope: REST-only (v1)
 
-**This plugin proxies HTTP REST calls only. WebSocket upgrades on `/lessly-api/*`
+**This plugin proxies HTTP REST calls only. WebSocket upgrades on `/lepsto-api/*`
 are intentionally not proxied in v1** — Lepsto Apps use the REST API for local
 development, and adding WS proxying (and its auth/reconnect semantics) is deferred
 until a concrete need exists. If you require realtime transport locally, connect to

package/dist/index.d.ts

@@ -1,24 +1,30 @@
 import { Plugin } from 'vite';
 
-type LesslyEnvName = 'staging' | 'prod';
-interface LesslyAppDevOptions {
+type LepstoEnvName = 'staging' | 'prod';
+/** @deprecated Use {@link LepstoEnvName}. */
+type LesslyEnvName = LepstoEnvName;
+interface LepstoAppDevOptions {
     /** Override env; defaults to LEPSTO_ENV (deprecated fallback: LESSLY_ENV) or 'staging'. */
-    env?: LesslyEnvName;
+    env?: LepstoEnvName;
     /** Override REST API base; defaults to VITE_API_URL or the env default. */
     apiUrl?: string;
     /** Vite dev-server proxy path. Fixed contract C1. */
-    proxyPath?: '/lessly-api';
+    proxyPath?: '/lepsto-api' | '/lessly-api';
 }
+/** @deprecated Use {@link LepstoAppDevOptions}. */
+type LesslyAppDevOptions = LepstoAppDevOptions;
 interface ResolvedEnv {
-    name: LesslyEnvName;
+    name: LepstoEnvName;
     apiUrl: string;
     authServer: string;
-    profile: LesslyEnvName;
+    /** Deployed Workspace shell for this environment — where a developer loads their App. */
+    shellOrigin: string;
+    profile: LepstoEnvName;
 }
 
 declare function resolveShellDevOrigin(processEnv?: Record<string, string | undefined>): string;
 
-interface LesslyAppDevDeps {
+interface LepstoAppDevDeps {
     /** Override the home dir used to locate ~/.lessly (tests). */
     homedir?: () => string;
     /** Override token-provider construction (tests / advanced embedding). */
@@ -29,6 +35,10 @@ interface LesslyAppDevDeps {
         get(): Promise<string>;
     };
 }
-declare function lesslyAppDev(options?: LesslyAppDevOptions, deps?: LesslyAppDevDeps): Plugin;
+declare function lepstoAppDev(options?: LepstoAppDevOptions, deps?: LepstoAppDevDeps): Plugin;
+/** @deprecated Use {@link lepstoAppDev}. Kept as an alias for existing configs. */
+declare const lesslyAppDev: typeof lepstoAppDev;
+/** @deprecated Use {@link LepstoAppDevDeps}. */
+type LesslyAppDevDeps = LepstoAppDevDeps;
 
-export { type LesslyAppDevDeps, type LesslyAppDevOptions, type LesslyEnvName, type ResolvedEnv, lesslyAppDev, resolveShellDevOrigin };
+export { type LepstoAppDevDeps, type LepstoAppDevOptions, type LepstoEnvName, type LesslyAppDevDeps, type LesslyAppDevOptions, type LesslyEnvName, type ResolvedEnv, lepstoAppDev, lesslyAppDev, resolveShellDevOrigin };

package/dist/index.js

@@ -1,11 +1,32 @@
 // src/index.ts
 import { loadEnv } from "vite";
 
-// src/env.ts
-var HOSTS = {
-  staging: { apiUrl: "https://api.lessly.dev", authServer: "https://auth.lessly.dev" },
-  prod: { apiUrl: "https://api.lessly.com", authServer: "https://auth.lessly.com" }
+// src/platform-hosts.ts
+var PLATFORM_BASE_DOMAIN = {
+  staging: "lepsto.dev",
+  prod: "lessly.com"
+};
+var SUBDOMAIN = {
+  staging: { api: "api", auth: "auth", shell: "console" },
+  prod: { api: "api", auth: "auth", shell: "app" }
+};
+function platformOrigin(subdomain, env) {
+  return `https://${subdomain}.${PLATFORM_BASE_DOMAIN[env]}`;
+}
+var PLATFORM_HOSTS = {
+  staging: {
+    apiUrl: platformOrigin(SUBDOMAIN.staging.api, "staging"),
+    authServer: platformOrigin(SUBDOMAIN.staging.auth, "staging"),
+    shellOrigin: platformOrigin(SUBDOMAIN.staging.shell, "staging")
+  },
+  prod: {
+    apiUrl: platformOrigin(SUBDOMAIN.prod.api, "prod"),
+    authServer: platformOrigin(SUBDOMAIN.prod.auth, "prod"),
+    shellOrigin: platformOrigin(SUBDOMAIN.prod.shell, "prod")
+  }
 };
+
+// src/env.ts
 function resolveEnv(input = {}) {
   const pe = input.processEnv ?? process.env;
   let envVar = pe.LEPSTO_ENV;
@@ -16,38 +37,42 @@ function resolveEnv(input = {}) {
     }
   }
   const name = input.env ?? (envVar === "prod" ? "prod" : "staging");
-  const hosts = HOSTS[name];
+  const hosts = PLATFORM_HOSTS[name];
   return {
     name,
     profile: name,
     apiUrl: input.apiUrl ?? pe.VITE_API_URL ?? hosts.apiUrl,
-    authServer: hosts.authServer
+    authServer: hosts.authServer,
+    shellOrigin: hosts.shellOrigin
   };
 }
 
 // src/proxy.ts
 function buildProxyConfig(args) {
-  const prefix = args.proxyPath;
-  const key = `^${prefix}(?:[/?]|$)`;
+  const out = {};
+  for (const prefix of [args.proxyPath, ...args.legacyPaths ?? []]) {
+    out[`^${prefix}(?:[/?]|$)`] = proxyEntry(args.apiUrl, prefix);
+  }
+  return out;
+}
+function proxyEntry(apiUrl, prefix) {
   return {
-    [key]: {
-      target: args.apiUrl,
-      changeOrigin: true,
-      rewrite: (path) => path.replace(new RegExp(`^${prefix}`), ""),
-      // Bearer injection happens in the awaited auth middleware (see auth-middleware.ts);
-      // Vite forwards incoming request headers to the upstream. Here we only surface a
-      // one-time hint when the upstream rejects our token.
-      configure: (proxy) => {
-        let warned = false;
-        proxy.on("proxyRes", (proxyRes) => {
-          if (proxyRes.statusCode === 401 && !warned) {
-            warned = true;
-            console.warn(
-              "  [lessly-app-dev] upstream returned 401 Unauthorized. Your session may be revoked server-side. Delete ~/.lessly/credentials.json and re-run dev to re-login."
-            );
-          }
-        });
-      }
+    target: apiUrl,
+    changeOrigin: true,
+    rewrite: (path) => path.replace(new RegExp(`^${prefix}`), ""),
+    // Bearer injection happens in the awaited auth middleware (see auth-middleware.ts);
+    // Vite forwards incoming request headers to the upstream. Here we only surface a
+    // one-time hint when the upstream rejects our token.
+    configure: (proxy) => {
+      let warned = false;
+      proxy.on("proxyRes", (proxyRes) => {
+        if (proxyRes.statusCode === 401 && !warned) {
+          warned = true;
+          console.warn(
+            "  [lessly-app-dev] upstream returned 401 Unauthorized. Your session may be revoked server-side. Delete ~/.lessly/credentials.json and re-run dev to re-login."
+          );
+        }
+      });
     }
   };
 }
@@ -64,7 +89,12 @@ function productIdMissingWarning() {
 }
 function buildDefine(args) {
   const define = {
-    "import.meta.env.VITE_LESSLY_BASE_URL": JSON.stringify(args.proxyPath)
+    "import.meta.env.VITE_LEPSTO_BASE_URL": JSON.stringify(args.proxyPath),
+    // Unchanged for apps scaffolded before the rename: the legacy name still
+    // resolves to the legacy prefix, which stays proxied and authenticated.
+    "import.meta.env.VITE_LESSLY_BASE_URL": JSON.stringify(
+      args.legacyProxyPath ?? args.proxyPath
+    )
   };
   if (args.productId) define["import.meta.env.VITE_PRODUCT_ID"] = JSON.stringify(args.productId);
   return define;
@@ -373,7 +403,7 @@ async function resolveApiKeyToken(args) {
 function resolveShellDevOrigin(processEnv = process.env) {
   return processEnv.SHELL_DEV_ORIGIN ?? "http://localhost:5173";
 }
-var DEFAULT_SHELL_ORIGIN = "https://app.lessly.dev";
+var DEFAULT_SHELL_ORIGIN = PLATFORM_HOSTS.staging.shellOrigin;
 function shellOverrideMessage(input) {
   const { slug, appOrigin, base = "/", productSlug } = input;
   const shellOrigin = input.shellOrigin ?? DEFAULT_SHELL_ORIGIN;
@@ -401,13 +431,17 @@ function shellOverrideMessage(input) {
 // src/app-slug.ts
 import { readFileSync as readFileSync3 } from "fs";
 import { join as join3 } from "path";
+var MANIFEST_FILES = ["lepsto.app.yaml", "lessly.app.yaml"];
 function resolveAppSlug(root, readFile = (p) => readFileSync3(p, "utf8")) {
   let raw;
-  try {
-    raw = readFile(join3(root, "lessly.app.yaml"));
-  } catch {
-    return void 0;
+  for (const file of MANIFEST_FILES) {
+    try {
+      raw = readFile(join3(root, file));
+      break;
+    } catch {
+    }
   }
+  if (raw === void 0) return void 0;
   for (const line of raw.split("\n")) {
     const match = /^id:\s*(.*)$/.exec(line);
     if (!match) continue;
@@ -436,10 +470,12 @@ function mfManifestMiddleware(getBase) {
 
 // src/auth-middleware.ts
 function createAuthMiddleware(args) {
-  const boundary = new RegExp(`^${args.proxyPath}(?:[/?]|$)`);
+  const boundaries = [args.proxyPath, ...args.legacyPaths ?? []].map(
+    (prefix) => new RegExp(`^${prefix}(?:[/?]|$)`)
+  );
   return (req, res, next) => {
     const url = req.url ?? "";
-    if (!boundary.test(url)) return next();
+    if (!boundaries.some((b) => b.test(url))) return next();
     if (req.headers["sec-fetch-site"] === "cross-site") {
       res.statusCode = 403;
       res.end("cross-site requests to the Lessly dev proxy are not allowed");
@@ -457,8 +493,9 @@ function createAuthMiddleware(args) {
 
 // src/index.ts
 import { homedir as homedir2 } from "os";
-var PROXY_PATH = "/lessly-api";
-function lesslyAppDev(options = {}, deps = {}) {
+var PROXY_PATH = "/lepsto-api";
+var LEGACY_PROXY_PATHS = ["/lessly-api"];
+function lepstoAppDev(options = {}, deps = {}) {
   const homedirFn = deps.homedir ?? homedir2;
   const devDeps = defaultDeviceDeps();
   const post = devDeps.post;
@@ -491,12 +528,26 @@ function lesslyAppDev(options = {}, deps = {}) {
       productSlug = fileEnv.VITE_PRODUCT_SLUG;
       token = buildToken(resolvedEnv, fileEnv.DEV_API_KEY);
       return {
-        server: { proxy: buildProxyConfig({ apiUrl: resolvedEnv.apiUrl, proxyPath: PROXY_PATH }) },
-        define: buildDefine({ productId, proxyPath: PROXY_PATH })
+        server: {
+          proxy: buildProxyConfig({
+            apiUrl: resolvedEnv.apiUrl,
+            proxyPath: PROXY_PATH,
+            legacyPaths: LEGACY_PROXY_PATHS
+          })
+        },
+        define: buildDefine({
+          productId,
+          proxyPath: PROXY_PATH,
+          legacyProxyPath: LEGACY_PROXY_PATHS[0]
+        })
       };
     },
     configureServer(server) {
-      if (token) server.middlewares.use(createAuthMiddleware({ proxyPath: PROXY_PATH, token }));
+      if (token) {
+        server.middlewares.use(
+          createAuthMiddleware({ proxyPath: PROXY_PATH, legacyPaths: LEGACY_PROXY_PATHS, token })
+        );
+      }
       server.middlewares.use(mfManifestMiddleware(() => server.config.base));
       server.httpServer?.once("listening", () => {
         const env = resolvedEnv;
@@ -513,6 +564,7 @@ function lesslyAppDev(options = {}, deps = {}) {
             slug: appSlug,
             appOrigin,
             base: server.config.base ?? "/",
+            shellOrigin: env.shellOrigin,
             productSlug
           })
         );
@@ -520,7 +572,9 @@ function lesslyAppDev(options = {}, deps = {}) {
     }
   };
 }
+var lesslyAppDev = lepstoAppDev;
 export {
+  lepstoAppDev,
   lesslyAppDev,
   resolveShellDevOrigin
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lepsto/app-dev",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Vite plugin for local development of Lepsto Apps",
   "type": "module",
   "main": "./dist/index.js",