@pplethai/cli 0.2.1 → 0.3.0

package/templates/golden-path/web/pple.ts

@@ -5,14 +5,16 @@
 //      the Worker accepts you as a fake user.
 //   2. Inside PPLE Today — the SDK captures the access token from the launch
 //      URL; we attach it to every API call.
-//   3. A plain browser — not inside PPLE Today, so we show the NOT_IN_APP
-//      screen instead of trying to sign in.
-import { isInMiniAppUserAgent } from "@pplethai/components";
+//   3. A plain browser — the same SDK runs the PPLE ID OIDC sign-in (redirect
+//      / callback) and hands back an access token.
 import { PPLEMiniApp } from "@pplethai/pple-today-miniapp-sdk";
 
-// Provisioned per app, injected at build time. Only needed inside PPLE Today.
+// Provisioned per app, injected at build time. Needed for the SDK in both
+// PPLE Today and the browser (browser login uses the OIDC redirect flow).
 const OAUTH_URL = import.meta.env.VITE_OAUTH_URL ?? "";
 const OAUTH_CLIENT_ID = import.meta.env.VITE_OAUTH_CLIENT_ID ?? "";
+// Must match a redirect URI on the app's PPLE ID OAuth client. Provisioning
+// registers the mini-app URL; defaulting to this origin keeps them aligned.
 const OAUTH_REDIRECT_URI =
   import.meta.env.VITE_OAUTH_REDIRECT_URI ?? window.location.origin;
 
@@ -21,7 +23,6 @@ const DEV_TOKEN = "dev-token";
 
 export type Bootstrap =
   | { kind: "signed-in" }
-  | { kind: "not-in-app" }
   | { kind: "error"; message: string };
 
 let token: string | null = null;
@@ -34,10 +35,6 @@ export async function bootstrap(): Promise<Bootstrap> {
       return { kind: "signed-in" };
     }
 
-    if (!isInMiniAppUserAgent(navigator.userAgent)) {
-      return { kind: "not-in-app" };
-    }
-
     const sdk = new PPLEMiniApp({
       oauthUrl: OAUTH_URL,
       oauthClientId: OAUTH_CLIENT_ID,

package/templates/golden-path/web/vite-env.d.ts

@@ -1,8 +1,8 @@
 /// <reference types="vite/client" />
 
-// Build-time OIDC config for the mini-app SDK. These are public values (a
-// client id and public OAuth URLs), safe to ship in the bundle. The platform
-// injects them at deploy time; see .env.example.
+// Build-time OIDC config for the mini-app SDK (PPLE Today + browser login).
+// These are public values (a client id and public OAuth URLs), safe to ship
+// in the bundle. The platform injects them at deploy time; see .env.example.
 interface ImportMetaEnv {
   readonly VITE_OAUTH_URL?: string;
   readonly VITE_OAUTH_CLIENT_ID?: string;

package/templates/golden-path/wrangler.jsonc

@@ -9,6 +9,15 @@
   "main": "src/index.ts",
   "compatibility_date": "2026-06-01",
 
+  // Workers Logs: `console.log` and uncaught exceptions are retained, so a
+  // 500 in production can be read back instead of guessed at.
+  //
+  // This setting governs local development only. Your deployed app does not
+  // ship this file — the platform uploads the Worker through the Cloudflare
+  // API and sets observability itself (workers/src/provisioner/tenant-worker.ts),
+  // so logging is on in production whether or not this line survives.
+  "observability": { "enabled": true, "head_sampling_rate": 1 },
+
   // The React SPA (built to dist/client by Vite) is served for any request
   // that isn't worker-first. "/api/*" is the app's API; "/.pple/*" is reserved
   // for the platform deploy probe. "single-page-application" makes every

package/templates/golden-path/web/NotInApp.tsx

@@ -1,23 +0,0 @@
-import { Card, CardContent, Logo } from "@pplethai/components";
-
-// Shown when the app is opened outside PPLE Today (a plain browser). There is
-// no sign-in here on purpose: mini-apps authenticate through PPLE Today.
-export function NotInApp() {
-  return (
-    <main className="screen screen--center">
-      <Card className="card">
-        <CardContent>
-          <div className="notinapp">
-            <Logo className="notinapp__logo" title="People's Party" />
-            <h1 className="notinapp__title">เปิดในแอป PPLE Today</h1>
-            <p>
-              แอปนี้ทำงานภายในแอป PPLE Today เท่านั้น
-              กรุณาเปิดจากแอป PPLE Today เพื่อเข้าสู่ระบบ
-            </p>
-            <p className="muted">Please open this mini-app from inside PPLE Today to sign in.</p>
-          </div>
-        </CardContent>
-      </Card>
-    </main>
-  );
-}