@protobase/server 0.63.2 → 0.63.4

package/dist/better-auth/first-admin-url.js

@@ -0,0 +1,15 @@
+import { checkedUrl } from "../checked-url.js";
+//#region src/better-auth/first-admin-url.ts
+const firstAdminUrlVariable = "PROTOBASE_FIRST_ADMIN_URL";
+/**
+* Where the app's first user is added when the platform hosting it does that, such as its console's page for the app,
+* from `PROTOBASE_FIRST_ADMIN_URL`. The no-users page then links there in place of the `protobase users create`
+* command, which only someone on the host can run. A value that is no http(s) URL stops the server at startup.
+*/
+const firstAdminUrl = (env) => {
+	const url = env[firstAdminUrlVariable]?.trim();
+	if (!url) return void 0;
+	return checkedUrl(url, firstAdminUrlVariable);
+};
+//#endregion
+export { firstAdminUrl, firstAdminUrlVariable };

package/dist/better-auth/status-route.js

@@ -6,7 +6,8 @@ import { hasUsers } from "./users.js";
 import { Hono } from "hono";
 //#region src/better-auth/status-route.ts
 /**
-* `GET {authBase}/status`: `needsAdmin` while the admin store has no user, so a login page can say how to create one;
+* `GET {authBase}/status`: `needsAdmin` while the admin store has no user, so a login page can say how to create one,
+* with `firstAdminUrl` then, the platform's page where it is added, when the platform names one (see `firstAdminUrl`);
 * `signInMethods`, the ways to sign in the sign-in policy leaves on (`password`, `emailCode`, `passkey`), so it offers
 * only those; `passwordReset` when reset mail can be sent and passwords are on, so it offers "Forgot password?" only
 * then; `signInFirst: 'emailCode'` when the app has the sign-in page lead with an emailed code and the policy leaves both it and passwords on; `changeEmail` when mail can be sent, so the account page offers to change the address with an emailed code; `accountDeletion` when people may delete their own account, so the account page offers it; `signUp` when the app has open sign-up, so it offers "Create an account"; the ids of the `socialProviders` people can sign in with, so it offers "Continue with GitHub" when `github` is
@@ -18,7 +19,7 @@ import { Hono } from "hono";
 * `plugins`, those the app loads before sign-in (see `PluginOption`); and `locale`, the language `options.locale` puts
 * the screens in, so the sign-in screens and public forms, which come before `/meta`, are in it too.
 */
-const statusRoute = (auth, { anonymous = false, plugins = [], locale } = {}) => {
+const statusRoute = (auth, { anonymous = false, plugins = [], locale, firstAdminUrl } = {}) => {
 	const app = new Hono();
 	app.get("/status", async (c) => {
 		const context = await auth.$context;
@@ -33,8 +34,10 @@ const statusRoute = (auth, { anonymous = false, plugins = [], locale } = {}) =>
 		const platformSignIn = platform && policy.platformSignIn === "allowed" && context.socialProviders.some((provider) => provider.id === platform.provider) ? platform : void 0;
 		const socialProviders = [...auth.socialProviders, ...platformSignIn ? [platformSignIn.provider] : []];
 		const passkeyDomains = signInMethods.includes("passkey") ? await signInPasskeyDomains(context.adapter, auth.passkeyDomain, auth.origins) : [];
+		const needsAdmin = !await hasUsers(auth);
 		return c.json({
-			needsAdmin: !await hasUsers(auth),
+			needsAdmin,
+			...needsAdmin && firstAdminUrl && { firstAdminUrl },
 			signInMethods,
 			passwordReset: auth.passwordReset && policy.password === "allowed",
 			...auth.signInFirst === "emailCode" && signInMethods.includes("emailCode") && signInMethods.includes("password") && { signInFirst: "emailCode" },

package/dist/create-admin.js

@@ -111,6 +111,7 @@ import { faviconPath } from "./web-app/web-manifest.js";
 import { webManifestRoute } from "./web-app/web-manifest-route.js";
 import { mcpIcons } from "./web-app/mcp-icons.js";
 import { recordRoutes } from "./routes/record.js";
+import { firstAdminUrl } from "./better-auth/first-admin-url.js";
 import { createScanGuard } from "./scan-guard.js";
 import { failedJobs, failedJobsView } from "./jobs/failed-jobs.js";
 import { Hono } from "hono";
@@ -181,6 +182,7 @@ const createAdmin = ({ resources: appResources, views: appViews = [], pages = []
 	const systemPath = basePath.slice(0, basePath.lastIndexOf("/"));
 	const assistant = assistantSettings(options.assistant, globalThis.process?.env ?? {});
 	const runtime = runtimeUrl(options.runtime, globalThis.process?.env ?? {});
+	const firstAdmin = firstAdminUrl(globalThis.process?.env ?? {});
 	const errorReporting = errorReportingSettings(options.errorReporting, globalThis.process?.env ?? {});
 	const maps = mapSettings(options.maps, globalThis.process?.env ?? {});
 	const senders = notifications ? notificationSenders(notifications) : [];
@@ -329,7 +331,8 @@ const createAdmin = ({ resources: appResources, views: appViews = [], pages = []
 		app.route(authBasePath, statusRoute(auth, {
 			anonymous: visitorsBrowse(options.roles),
 			plugins: pluginsBeforeSignIn(plugins),
-			...locale && { locale }
+			...locale && { locale },
+			...firstAdmin && { firstAdminUrl: firstAdmin }
 		}));
 		if (auth.organizations) app.route(authBasePath, organizationRoutes({
 			auth,

package/dist/package.js

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.63.2";
+var version = "0.63.4";
 //#endregion
 export { version };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@protobase/server",
-  "version": "0.63.2",
+  "version": "0.63.4",
   "description": "The Protobase REST API as a Hono app, with Better Auth sign-in.",
   "license": "Apache-2.0",
   "repository": {
@@ -42,9 +42,9 @@
     "@better-auth/sso": "^1.7.12",
     "@livekit/protocol": "1.53.1",
     "@modelcontextprotocol/server": "^2.3.1",
-    "@protobase/layout": "0.63.2",
-    "@protobase/query": "0.63.2",
-    "@protobase/schema": "0.63.2",
+    "@protobase/layout": "0.63.4",
+    "@protobase/query": "0.63.4",
+    "@protobase/schema": "0.63.4",
     "@react-email/render": "^2.1.0",
     "@scalar/hono-api-reference": "^0.12.10",
     "@sentry/core": "^11.7.0",