@pplethai/cli 0.1.0 → 0.2.0

package/dist/deps.js

@@ -3,7 +3,7 @@ import path from "node:path";
 import { fileURLToPath } from "node:url";
 export const DEFAULT_CONFIG = {
     apiBase: "https://api.ppleth.ai",
-    ssoBase: "https://sso.peoplesparty.or.th",
+    ssoBase: "https://id.peoplesparty.or.th",
     clientId: "382216793067947795",
     repoBase: "https://github.com",
     registryBase: "https://registry.npmjs.org",

package/dist/device-flow.js

@@ -18,17 +18,24 @@ function form(fields) {
         body: new URLSearchParams(fields).toString(),
     };
 }
-const UNREACHABLE = new CliError("Couldn't reach PPLE ID to sign you in.", "Check your internet connection and try `pple auth login` again.");
+/**
+ * Name the host we failed to reach. "Check your internet connection" sends a
+ * Builder to their wifi when the real fault is a bad `ssoBase` — the host it
+ * couldn't reach is the one fact that tells the two apart.
+ */
+function unreachable(ssoBase) {
+    return new CliError(`Couldn't reach PPLE ID (${ssoBase}) to sign you in.`, "Check your internet connection and try `pple auth login` again.");
+}
 export async function requestDeviceCode(deps) {
     const { ssoBase, clientId } = deps.config;
     const res = await deps
         .fetch(`${ssoBase}${DEVICE_AUTHORIZATION_PATH}`, form({ client_id: clientId, scope: SCOPES }))
         .catch(() => null);
     if (!res || !res.ok)
-        throw UNREACHABLE;
+        throw unreachable(ssoBase);
     const body = (await res.json().catch(() => ({})));
     if (!body.device_code || !body.user_code || !body.verification_uri) {
-        throw UNREACHABLE;
+        throw unreachable(ssoBase);
     }
     return {
         deviceCode: body.device_code,
@@ -59,7 +66,7 @@ export async function awaitToken(deps, device) {
         }))
             .catch(() => null);
         if (!res)
-            throw UNREACHABLE;
+            throw unreachable(ssoBase);
         const body = (await res.json().catch(() => ({})));
         if (res.ok && body.access_token)
             return toTokenSet(deps, body);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pplethai/cli",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "type": "module",
   "repository": {
     "type": "git",
@@ -32,4 +32,4 @@
   "engines": {
     "node": ">=22"
   }
-}
+}

package/templates/golden-path/.env.example

@@ -2,7 +2,7 @@
 # These are the app's PPLE ID OIDC client details, used by the mini-app SDK
 # when running inside PPLE Today. They are public values, safe to ship.
 # The platform injects them at deploy time; copy to `.env` to set locally.
-VITE_OAUTH_URL="https://sso.peoplesparty.or.th"
+VITE_OAUTH_URL="https://id.peoplesparty.or.th"
 VITE_OAUTH_CLIENT_ID=""
 # Defaults to the app's own origin if unset.
 # VITE_OAUTH_REDIRECT_URI=""

package/templates/golden-path/wrangler.jsonc

@@ -39,7 +39,7 @@
 
   "vars": {
     // PPLE ID (identity). The Worker validates bearer tokens against this.
-    "SSO_BASE_URL": "https://sso.peoplesparty.or.th",
+    "SSO_BASE_URL": "https://id.peoplesparty.or.th",
     // Audience-bound notification endpoint (see src/notify.ts): the base that
     // `${NOTIFY_API_BASE}/notifications` is posted to. The platform sets the
     // real value; empty locally so notify is a no-op unless you wire it up in