@pplethai/cli 0.2.2 → 0.3.1

package/templates/golden-path/web/pple.ts

@@ -5,14 +5,19 @@
 //      the Worker accepts you as a fake user.
 //   2. Inside PPLE Today — the SDK captures the access token from the launch
 //      URL; we attach it to every API call.
-//   3. A plain browser — not inside PPLE Today, so we show the NOT_IN_APP
-//      screen instead of trying to sign in.
-import { isInMiniAppUserAgent } from "@pplethai/components";
+//   3. A plain browser — the same SDK runs the PPLE ID OIDC sign-in (redirect
+//      / callback) and hands back an access token.
 import { PPLEMiniApp } from "@pplethai/pple-today-miniapp-sdk";
 
-// Provisioned per app, injected at build time. Only needed inside PPLE Today.
+// Provisioned per app and baked into this bundle at build time by the
+// platform deploy workflow's env (VITE_OAUTH_URL / VITE_OAUTH_CLIENT_ID).
+// Needed for the SDK in both PPLE Today and the browser (browser login uses
+// the OIDC redirect flow). Empty here means the build var was missing —
+// bootstrap() below turns that into a legible error.
 const OAUTH_URL = import.meta.env.VITE_OAUTH_URL ?? "";
 const OAUTH_CLIENT_ID = import.meta.env.VITE_OAUTH_CLIENT_ID ?? "";
+// Must match a redirect URI on the app's PPLE ID OAuth client. Provisioning
+// registers the mini-app URL; defaulting to this origin keeps them aligned.
 const OAUTH_REDIRECT_URI =
   import.meta.env.VITE_OAUTH_REDIRECT_URI ?? window.location.origin;
 
@@ -21,7 +26,6 @@ const DEV_TOKEN = "dev-token";
 
 export type Bootstrap =
   | { kind: "signed-in" }
-  | { kind: "not-in-app" }
   | { kind: "error"; message: string };
 
 let token: string | null = null;
@@ -34,8 +38,17 @@ export async function bootstrap(): Promise<Bootstrap> {
       return { kind: "signed-in" };
     }
 
-    if (!isInMiniAppUserAgent(navigator.userAgent)) {
-      return { kind: "not-in-app" };
+    // The OAuth config is baked in at build time by the platform deploy
+    // workflow (VITE_OAUTH_URL / VITE_OAUTH_CLIENT_ID). If it's missing the
+    // SDK throws a bare "No authority or metadataUrl configured on settings"
+    // from oidc-client-ts — turn that into something a Builder can act on
+    // instead of a stack trace they can't read (issue #115).
+    if (!OAUTH_URL || !OAUTH_CLIENT_ID) {
+      return {
+        kind: "error",
+        message:
+          "This app is misconfigured: its PPLE ID sign-in settings were not set when it was built. Redeploy the app from the platform to fix it.",
+      };
     }
 
     const sdk = new PPLEMiniApp({

package/templates/golden-path/web/vite-env.d.ts

@@ -1,8 +1,8 @@
 /// <reference types="vite/client" />
 
-// Build-time OIDC config for the mini-app SDK. These are public values (a
-// client id and public OAuth URLs), safe to ship in the bundle. The platform
-// injects them at deploy time; see .env.example.
+// Build-time OIDC config for the mini-app SDK (PPLE Today + browser login).
+// These are public values (a client id and public OAuth URLs), safe to ship
+// in the bundle. The platform injects them at deploy time; see .env.example.
 interface ImportMetaEnv {
   readonly VITE_OAUTH_URL?: string;
   readonly VITE_OAUTH_CLIENT_ID?: string;

package/templates/golden-path/web/NotInApp.tsx

@@ -1,23 +0,0 @@
-import { Card, CardContent, Logo } from "@pplethai/components";
-
-// Shown when the app is opened outside PPLE Today (a plain browser). There is
-// no sign-in here on purpose: mini-apps authenticate through PPLE Today.
-export function NotInApp() {
-  return (
-    <main className="screen screen--center">
-      <Card className="card">
-        <CardContent>
-          <div className="notinapp">
-            <Logo className="notinapp__logo" title="People's Party" />
-            <h1 className="notinapp__title">เปิดในแอป PPLE Today</h1>
-            <p>
-              แอปนี้ทำงานภายในแอป PPLE Today เท่านั้น
-              กรุณาเปิดจากแอป PPLE Today เพื่อเข้าสู่ระบบ
-            </p>
-            <p className="muted">Please open this mini-app from inside PPLE Today to sign in.</p>
-          </div>
-        </CardContent>
-      </Card>
-    </main>
-  );
-}