@lukoweb/apitogo 0.1.53 → 0.1.55

package/dist/declarations/lib/authentication/providers/dev-portal-auth-pages.d.ts

@@ -0,0 +1,15 @@
+export declare function DevPortalLoginPage({ apiBaseUrl }: {
+    apiBaseUrl?: string;
+}): import("react/jsx-runtime").JSX.Element;
+export declare function DevPortalRegisterPage({ apiBaseUrl }: {
+    apiBaseUrl?: string;
+}): import("react/jsx-runtime").JSX.Element;
+export declare function DevPortalVerifyEmailPage({ apiBaseUrl, }: {
+    apiBaseUrl?: string;
+}): import("react/jsx-runtime").JSX.Element;
+export declare function DevPortalForgotPasswordPage({ apiBaseUrl, }: {
+    apiBaseUrl?: string;
+}): import("react/jsx-runtime").JSX.Element;
+export declare function DevPortalResetPasswordPage({ apiBaseUrl, }: {
+    apiBaseUrl?: string;
+}): import("react/jsx-runtime").JSX.Element;

package/dist/declarations/lib/authentication/providers/dev-portal-constants.d.ts

@@ -14,5 +14,23 @@ export type EndUserMeResponse = {
 };
 export type DevPortalAuthStatusResponse = {
     available: boolean;
-    oidcConfigured: boolean;
+    nativeEnabled?: boolean;
+    oidcConfigured?: boolean;
+    providerCount?: number;
+};
+export type DevPortalAuthConfigResponse = {
+    native: {
+        enabled: boolean;
+    };
+    email?: {
+        provider: string;
+        from: string;
+    } | null;
+    providers: Array<{
+        id: string;
+        displayName: string;
+        authority: string;
+        clientId: string;
+        scopes: string[];
+    }>;
 };

package/dist/declarations/lib/authentication/providers/dev-portal-utils.d.ts

@@ -3,7 +3,11 @@ import { type EndUserMeResponse } from "./dev-portal-constants.js";
 export declare function resolveDevPortalApiBaseUrl(config: Pick<DevPortalAuthenticationConfig, "apiBaseUrl">): string | undefined;
 export declare function isPlaceholderDevPortalApiUrl(apiBaseUrl: string | undefined): boolean;
 export declare function toAbsoluteReturnUrl(pathOrUrl: string): string;
-export declare function buildDevPortalLoginUrl(apiBaseUrl: string, returnUrl: string): string;
+export declare function buildDevPortalOidcChallengeUrl(apiBaseUrl: string, providerId: string, returnUrl: string): string;
 export declare function buildDevPortalLogoutUrl(apiBaseUrl: string, returnUrl: string): string;
+export declare function normalizeDevPortalAuthConfig(raw: unknown): import("./dev-portal-constants.js").DevPortalAuthConfigResponse;
+export declare function isNativeAuthEnabled(config: import("./dev-portal-constants.js").DevPortalAuthConfigResponse | null | undefined): boolean;
+export declare function fetchDevPortalAuthConfig(apiBaseUrl: string, fetchImpl?: typeof fetch): Promise<import("./dev-portal-constants.js").DevPortalAuthConfigResponse>;
+export declare function postDevPortalAuth<T>(apiBaseUrl: string, path: string, body: unknown, fetchImpl?: typeof fetch): Promise<T>;
 export declare function probeDevPortalBackend(apiBaseUrl: string, fetchImpl?: typeof fetch): Promise<boolean>;
 export declare function mapEndUserMeToProfile(me: EndUserMeResponse): import("../state.js").UserProfile;

package/dist/declarations/lib/authentication/providers/dev-portal.d.ts

@@ -21,7 +21,12 @@ export declare class DevPortalAuthenticationProvider extends CoreAuthenticationP
     private backendAvailable;
     private refreshGeneration;
     private refreshInFlight;
+    private authConfigNativeEnabled;
     constructor({ apiBaseUrl, redirectToAfterSignIn, redirectToAfterSignUp, redirectToAfterSignOut, }: DevPortalAuthenticationConfig);
+    getRoutes(): {
+        path: string;
+        element: import("react/jsx-runtime").JSX.Element;
+    }[];
     initialize(_context: ZudokuContext): Promise<void>;
     onPageLoad: () => Promise<void>;
     private syncBackendAvailability;

package/dist/declarations/lib/components/HeaderAuthActions.d.ts

@@ -0,0 +1,3 @@
+export declare const HeaderAuthActions: ({ className }: {
+    className?: string;
+}) => import("react/jsx-runtime").JSX.Element | null;

package/dist/declarations/lib/components/SiteTitle.d.ts

@@ -0,0 +1,6 @@
+type SiteTitleProps = {
+    title: string;
+    className?: string;
+};
+export declare const SiteTitle: ({ title, className }: SiteTitleProps) => import("react/jsx-runtime").JSX.Element;
+export {};

package/dist/declarations/lib/components/ThemeSwitch.d.ts

@@ -1 +1,3 @@
-export declare const ThemeSwitch: () => import("react/jsx-runtime").JSX.Element;
+export declare const ThemeSwitch: ({ variant, }: {
+    variant?: "default" | "compact";
+}) => import("react/jsx-runtime").JSX.Element;

package/dist/declarations/lib/components/TopNavigation.d.ts

@@ -1,6 +1,6 @@
 import { type NavLinkProps } from "react-router";
 import type { NavigationItem } from "../../config/validators/NavigationSchema.js";
-export declare const TopNavigation: () => import("react/jsx-runtime").JSX.Element;
+export declare const TopNavigation: () => import("react/jsx-runtime").JSX.Element | null;
 export declare const TopNavLink: ({ isActive, children, ...props }: {
     isActive?: boolean;
     children: React.ReactNode;

package/dist/declarations/lib/core/ZudokuContext.d.ts

@@ -50,6 +50,7 @@ type Site = Partial<{
     dir?: "ltr" | "rtl";
     showPoweredBy?: boolean;
     title?: string;
+    showTitleInHeader?: boolean;
     logo?: {
         src: {
             light: string;

package/dist/flat-config.d.ts

@@ -137,6 +137,7 @@ export interface FlatZudokuConfig {
   }
   site?: {
     title?: string
+    showTitleInHeader?: boolean
     logoUrl?: string
     dir?: ("ltr" | "rtl")
     logo?: _Schema0
@@ -319,8 +320,24 @@ export interface FlatZudokuConfig {
     redirectToAfterSignIn?: string
     redirectToAfterSignOut?: string
   } | {
-    type: "dev-portal"
+    type?: "dev-portal"
     apiBaseUrl?: string
+    native?: {
+      enabled?: boolean
+    }
+    email?: {
+      provider?: string
+      from?: string
+      connectionString?: string
+    }
+    providers?: {
+      id: string
+      displayName?: string
+      authority?: string
+      clientId?: string
+      clientSecret?: string
+      scopes?: string
+    }[]
     redirectToAfterSignUp?: string
     redirectToAfterSignIn?: string
     redirectToAfterSignOut?: string
@@ -517,13 +534,56 @@ export interface _Schema21 {
     title?: string
     subtitle?: string
     description?: string
+    badge?: string
+    highlights?: string[]
+    codeExample?: {
+      filename?: string
+      language?: string
+      code: string
+    }
   }
   features?: {
     title: string
     description: string
+    icon?: string
   }[]
   primaryAction?: _Schema22
   secondaryAction?: _Schema22
+  ticker?: {
+    enabled?: boolean
+    items?: {
+      label: string
+      value: string
+      change?: string
+    }[]
+  }
+  trust?: {
+    enabled?: boolean
+    title?: string
+    logos?: string[]
+  }
+  apiShowcase?: {
+    enabled?: boolean
+    title?: string
+    subtitle?: string
+    browseAllHref?: string
+    browseAllLabel?: string
+    autoFromOpenApi?: boolean
+    items?: {
+      name: string
+      path: string
+      icon?: string
+      latency?: string
+      summary?: string
+    }[]
+  }
+  pricingCta?: {
+    enabled?: boolean
+    title?: string
+    description?: string
+    primaryAction?: _Schema22
+    secondaryAction?: _Schema22
+  }
   showPoweredBy?: boolean
 }
 export interface _Schema22 {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lukoweb/apitogo",
-  "version": "0.1.53",
+  "version": "0.1.55",
   "type": "module",
   "sideEffects": [
     "**/*.css",

package/src/app/main.css

@@ -102,8 +102,8 @@
 
 @layer base {
   :root {
-    --top-header-height: 65px;
-    --top-nav-height: 50px;
+    --top-header-height: 64px;
+    --top-nav-height: 0px;
     --banner-height: 35px;
     --header-height: calc(
       var(--top-header-height) + var(--top-nav-height) + var(--banner-height)

package/src/config/apitogo-config-core.ts

@@ -12,6 +12,7 @@ const DERIVED_MANIFEST_KEYS = [
   "backend",
   "gateway",
   "projectId",
+  "landing",
 ] as const;
 
 const SITE_CONFIG_KEYS = [
@@ -34,12 +35,20 @@ const SITE_CONFIG_KEYS = [
 
 export type ApitogoJsonConfig = Record<string, unknown>;
 
+export type AuthProviderPublicConfig = {
+  id: string;
+  displayName?: string;
+  authority?: string;
+  clientId?: string;
+  scopes?: string;
+};
+
 export type AuthenticationSecrets = {
-  oidc?: {
-    authority?: string;
-    clientId?: string;
-    clientSecret?: string;
+  email?: {
+    connectionString?: string;
   };
+  /** Provider secrets keyed by provider `id` (from env: `authentication__providers__{id}__clientSecret`). */
+  providers?: Record<string, { clientSecret?: string }>;
   stripe?: {
     secretKey?: string;
     webhookSecret?: string;
@@ -351,6 +360,7 @@ export function normalizeApitogoConfig(
 
   migratePlanCatalog(normalized);
   syncBillingEnabled(normalized);
+  syncAuthentication(normalized);
 
   return normalized;
 }
@@ -364,6 +374,119 @@ export function isBillingEnabled(config: ApitogoJsonConfig): boolean {
   return plans?.enabled === true;
 }
 
+function isUserPanelEnabled(normalized: ApitogoJsonConfig): boolean {
+  const modules = asRecord(normalized.modules);
+  const userPanel = asRecord(modules?.userPanel);
+  if (userPanel?.enabled === true) {
+    return true;
+  }
+
+  const dashboard = asRecord(userPanel?.dashboard);
+  const userManagement = asRecord(userPanel?.userManagement);
+  const apiKeys = asRecord(userPanel?.apiKeys);
+  const plans = asRecord(userPanel?.plans);
+
+  return (
+    dashboard?.enabled === true ||
+    userManagement?.enabled === true ||
+    apiKeys?.enabled === true ||
+    plans?.enabled === true
+  );
+}
+
+/** Read public OIDC provider entries from `authentication.providers` array. */
+export function readAuthProviders(
+  config: ApitogoJsonConfig,
+): AuthProviderPublicConfig[] {
+  const normalized = normalizeApitogoConfig(config);
+  const authentication = asRecord(normalized.authentication);
+  const providers = authentication?.providers;
+  if (!Array.isArray(providers)) {
+    return [];
+  }
+
+  return providers
+    .map((entry) => asRecord(entry))
+    .filter((entry): entry is Record<string, unknown> => entry !== undefined)
+    .filter((entry) => typeof entry.id === "string" && entry.id.trim())
+    .map((entry) => ({
+      id: String(entry.id).trim(),
+      displayName:
+        typeof entry.displayName === "string" ? entry.displayName : undefined,
+      authority:
+        typeof entry.authority === "string" ? entry.authority : undefined,
+      clientId: typeof entry.clientId === "string" ? entry.clientId : undefined,
+      scopes: typeof entry.scopes === "string" ? entry.scopes : undefined,
+    }));
+}
+
+export function isNativeAuthEnabled(config: ApitogoJsonConfig): boolean {
+  const normalized = normalizeApitogoConfig(config);
+  if (!isUserPanelEnabled(normalized)) {
+    return false;
+  }
+
+  const native = asRecord(asRecord(normalized.authentication)?.native);
+  return native?.enabled !== false;
+}
+
+function syncAuthentication(normalized: ApitogoJsonConfig): void {
+  const userPanelEnabled = isUserPanelEnabled(normalized);
+  const authentication = asRecord(normalized.authentication);
+
+  if (!userPanelEnabled && !authentication) {
+    return;
+  }
+
+  const auth = authentication ?? {};
+  auth.enabled = userPanelEnabled;
+  auth.type = "dev-portal";
+
+  if (userPanelEnabled) {
+    const native = asRecord(auth.native) ?? {};
+    if (native.enabled === undefined) {
+      native.enabled = true;
+    }
+    auth.native = native;
+
+    if (!Array.isArray(auth.providers)) {
+      auth.providers = [];
+    }
+  }
+
+  normalized.authentication = auth;
+}
+
+function stripAuthenticationSecrets(
+  authentication: Record<string, unknown>,
+): Record<string, unknown> {
+  const {
+    gateway: _gateway,
+    oidc: _oidc,
+    stripe: _stripe,
+    type: _type,
+    email,
+    providers,
+    ...authPublic
+  } = authentication;
+
+  const emailRecord = asRecord(email);
+  if (emailRecord) {
+    const { connectionString: _connectionString, ...emailPublic } = emailRecord;
+    authPublic.email = emailPublic;
+  }
+
+  if (Array.isArray(providers)) {
+    authPublic.providers = providers.map((entry) => {
+      const provider = asRecord(entry) ?? {};
+      const { clientSecret: _clientSecret, ...providerPublic } = provider;
+      return providerPublic;
+    });
+  }
+
+  return authPublic;
+}
+
 function syncBillingEnabled(normalized: ApitogoJsonConfig): void {
   const legacyPricing = asRecord(normalized.pricing);
   const modules = ensureModules(normalized);
@@ -400,13 +523,7 @@ export function deriveManifestFields(
     if (key === "authentication") {
       const authentication = asRecord(normalized.authentication);
       if (authentication) {
-        const {
-          gateway: _gateway,
-          oidc: _oidc,
-          stripe: _stripe,
-          ...authPublic
-        } = authentication;
-        manifest.authentication = authPublic;
+        manifest.authentication = stripAuthenticationSecrets(authentication);
       }
       continue;
     }
@@ -426,6 +543,18 @@ export function deriveManifestFields(
       }
       continue;
     }
+    if (key === "landing") {
+      const modules = asRecord(normalized.modules);
+      const landing = asRecord(modules?.landing);
+      if (landing?.content || landing?.enabled !== undefined) {
+        manifest.landing = {
+          enabled:
+            typeof landing.enabled === "boolean" ? landing.enabled : undefined,
+          content: landing.content,
+        };
+      }
+      continue;
+    }
     if (normalized[key] !== undefined) {
       manifest[key] = normalized[key];
     }

package/src/config/apitogo-config-loader.browser.ts

@@ -0,0 +1,17 @@
+import type {
+  ApitogoJsonConfig,
+  AuthenticationSecrets,
+} from "./apitogo-config-core.js";
+
+/** Browser stub — JSON config is embedded by the Vite config plugin on the client. */
+export function loadApitogoConfig(_rootDir?: string): ApitogoJsonConfig {
+  return {};
+}
+
+export function readAuthenticationSecrets(): AuthenticationSecrets {
+  return {};
+}
+
+export function apitogoConfigPath(rootDir: string): string {
+  return rootDir;
+}

package/src/config/apitogo-config-loader.node.ts

@@ -36,19 +36,39 @@ export function readAuthenticationSecrets(
 ): AuthenticationSecrets {
   const overrides = applyEnvOverrides({}, env);
   const authentication = asRecord(overrides.authentication);
-  const oidc = asRecord(authentication?.oidc);
+  const email = asRecord(authentication?.email);
+  const providers = asRecord(authentication?.providers);
   const stripe = asRecord(authentication?.stripe);
 
   const secrets: AuthenticationSecrets = {};
-  if (oidc) {
-    secrets.oidc = {
-      authority:
-        typeof oidc.authority === "string" ? oidc.authority : undefined,
-      clientId: typeof oidc.clientId === "string" ? oidc.clientId : undefined,
-      clientSecret:
-        typeof oidc.clientSecret === "string" ? oidc.clientSecret : undefined,
+
+  if (email?.connectionString) {
+    secrets.email = {
+      connectionString:
+        typeof email.connectionString === "string"
+          ? email.connectionString
+          : undefined,
     };
   }
+
+  if (providers) {
+    const providerSecrets: Record<string, { clientSecret?: string }> = {};
+    for (const [id, value] of Object.entries(providers)) {
+      const provider = asRecord(value);
+      if (provider?.clientSecret) {
+        providerSecrets[id] = {
+          clientSecret:
+            typeof provider.clientSecret === "string"
+              ? provider.clientSecret
+              : undefined,
+        };
+      }
+    }
+    if (Object.keys(providerSecrets).length > 0) {
+      secrets.providers = providerSecrets;
+    }
+  }
+
   if (stripe) {
     secrets.stripe = {
       secretKey:

package/src/config/build-apitogo-config.ts

@@ -11,6 +11,13 @@ type BuildApitogoConfigOptions = Partial<ApitogoConfig> &
     plugins?: ApitogoPlugin[];
   };
 
+function mergeOptionalRecord<T extends Record<string, unknown>>(
+  ...records: Array<T | undefined>
+): T | undefined {
+  const merged = Object.assign({}, ...records.filter(Boolean)) as T;
+  return Object.keys(merged).length > 0 ? merged : undefined;
+}
+
 export function buildApitogoConfig({
   plugins,
   plans: _legacyPlans,
@@ -24,14 +31,16 @@ export function buildApitogoConfig({
   const { plans: _rootPlans, ...restOverrides } =
     jsonOverrides as ApitogoJsonConfig;
 
+  const authentication = mergeOptionalRecord(
+    siteConfig.authentication as ApitogoConfig["authentication"],
+    jsonOverrides.authentication as ApitogoConfig["authentication"],
+  );
+
   return {
     ...siteConfig,
     ...restOverrides,
     plugins,
-    authentication: {
-      ...(siteConfig.authentication as ApitogoConfig["authentication"]),
-      ...jsonOverrides.authentication,
-    },
+    ...(authentication ? { authentication } : {}),
     site: {
       ...(siteConfig.site as ApitogoConfig["site"]),
       ...jsonOverrides.site,

package/src/config/landing-manifest.ts

@@ -0,0 +1,11 @@
+import { z } from "zod";
+import { LandingContentSchema } from "./validators/ModulesSchema.js";
+
+export const LandingManifestContentSchema = LandingContentSchema;
+
+export type LandingManifestContent = z.infer<typeof LandingContentSchema>;
+
+export type LandingManifestInput = {
+  enabled?: boolean;
+  content?: LandingManifestContent;
+};

package/src/config/landing-openapi-showcase.ts

@@ -0,0 +1,115 @@
+import { readFileSync } from "node:fs";
+import path from "node:path";
+import type { LandingApiShowcaseItemConfig } from "./validators/ModulesSchema.js";
+import type { ZudokuConfig } from "./validators/ZudokuConfig.js";
+
+const HTTP_METHODS = [
+  "get",
+  "post",
+  "put",
+  "patch",
+  "delete",
+  "head",
+  "options",
+] as const;
+
+type OpenApiDocument = {
+  paths?: Record<
+    string,
+    Partial<Record<(typeof HTTP_METHODS)[number], { summary?: string }>>
+  >;
+};
+
+function readOpenApiDocument(
+  rootDir: string,
+  openApiPath: string,
+): OpenApiDocument | null {
+  try {
+    const absolutePath = path.isAbsolute(openApiPath)
+      ? openApiPath
+      : path.resolve(rootDir, openApiPath);
+    const raw = readFileSync(absolutePath, "utf8");
+    return JSON.parse(raw) as OpenApiDocument;
+  } catch {
+    return null;
+  }
+}
+
+function resolveOpenApiPath(config: ZudokuConfig): string | undefined {
+  const backend = (config as { backend?: { openApiPath?: string } }).backend;
+  if (backend?.openApiPath) {
+    return backend.openApiPath;
+  }
+
+  const apis = config.apis;
+  if (!apis) {
+    return undefined;
+  }
+
+  const entries = Array.isArray(apis) ? apis : [apis];
+  for (const entry of entries) {
+    if (typeof entry === "object" && entry !== null && "type" in entry) {
+      const api = entry as { type?: string; input?: string };
+      if (api.type === "file" && typeof api.input === "string") {
+        return api.input;
+      }
+    }
+  }
+
+  return undefined;
+}
+
+export function extractApiShowcaseItemsFromOpenApi(
+  config: ZudokuConfig,
+  rootDir: string,
+  limit = 8,
+): LandingApiShowcaseItemConfig[] {
+  const openApiPath = resolveOpenApiPath(config);
+  if (!openApiPath) {
+    return [];
+  }
+
+  const document = readOpenApiDocument(rootDir, openApiPath);
+  if (!document?.paths) {
+    return [];
+  }
+
+  const items: LandingApiShowcaseItemConfig[] = [];
+
+  for (const [routePath, methods] of Object.entries(document.paths)) {
+    for (const method of HTTP_METHODS) {
+      const operation = methods?.[method];
+      if (!operation) {
+        continue;
+      }
+
+      items.push({
+        name: operation.summary ?? `${method.toUpperCase()} ${routePath}`,
+        path: routePath,
+        summary: operation.summary,
+      });
+
+      if (items.length >= limit) {
+        return items;
+      }
+    }
+  }
+
+  return items;
+}
+
+export function enrichResolvedLandingApiShowcase(
+  config: ZudokuConfig,
+  resolved: { landing: { content: { apiShowcase?: { autoFromOpenApi?: boolean; items?: LandingApiShowcaseItemConfig[] } } } },
+  rootDir: string,
+): void {
+  const showcase = resolved.landing.content.apiShowcase;
+  if (
+    !showcase?.autoFromOpenApi ||
+    (showcase.items && showcase.items.length > 0)
+  ) {
+    return;
+  }
+
+  showcase.items = extractApiShowcaseItemsFromOpenApi(config, rootDir);
+}

package/src/config/loader.ts

@@ -18,6 +18,7 @@ import {
   loadApitogoConfig,
   readPlanCatalogItems,
 } from "./apitogo-config-loader.js";
+import { buildApitogoConfig } from "./build-apitogo-config.js";
 import { fileExists } from "./file-exists.js";
 import {
   isAuthenticationEnabled,
@@ -117,7 +118,18 @@ async function loadZudokuConfigWithMeta(
     },
   });
 
-  const config = module.default;
+  const importedConfig = module.default;
+
+  let config: ZudokuConfig;
+  try {
+    const fileConfig = loadApitogoConfig(rootDir);
+    config = buildApitogoConfig({
+      ...fileConfig,
+      plugins: importedConfig.plugins,
+    });
+  } catch {
+    config = importedConfig;
+  }
 
   validateConfig(config, configPath);
 
@@ -130,7 +142,7 @@ async function loadZudokuConfigWithMeta(
       dependencies,
       configPath,
     },
-    __resolvedModules: resolveModulesConfig(config),
+    __resolvedModules: resolveModulesConfig(config, { rootDir }),
   };
 
   return configWithMetadata;
@@ -288,7 +300,9 @@ export async function loadZudokuConfig(
         ...transformedConfig.__meta,
         ...configWithManifestMeta.__meta,
       },
-      __resolvedModules: resolveModulesConfig(transformedConfig),
+      __resolvedModules: resolveModulesConfig(transformedConfig, {
+        rootDir: transformedConfig.__meta.rootDir,
+      }),
     };
 
     if (!process.env.APITOGO_JSON_ONLY) {