npm - @startup-api/cloudflare - Versions diffs - 0.0.1 - Mend

@startup-api/cloudflare 0.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (39) hide show

package/LICENSE +13 -0
package/README.md +114 -0
package/package.json +53 -0
package/public/index.html +405 -0
package/public/users/accounts.html +504 -0
package/public/users/admin/index.html +765 -0
package/public/users/power-strip.js +658 -0
package/public/users/profile.html +443 -0
package/public/users/style.css +493 -0
package/src/CookieManager.ts +56 -0
package/src/PowerStrip.ts +23 -0
package/src/StartupAPIEnv.ts +12 -0
package/src/auth/GoogleProvider.ts +67 -0
package/src/auth/OAuthProvider.ts +52 -0
package/src/auth/TwitchProvider.ts +64 -0
package/src/auth/index.ts +231 -0
package/src/billing/PaymentEngine.ts +20 -0
package/src/billing/Plan.ts +80 -0
package/src/billing/plansConfig.ts +48 -0
package/src/handlers/account.ts +246 -0
package/src/handlers/admin.ts +144 -0
package/src/handlers/auth.ts +54 -0
package/src/handlers/ssr.ts +274 -0
package/src/handlers/user.ts +168 -0
package/src/handlers/utils.ts +120 -0
package/src/index.ts +190 -0
package/src/schemas/account.ts +37 -0
package/src/schemas/admin.ts +10 -0
package/src/schemas/billing.ts +11 -0
package/src/schemas/credential.ts +38 -0
package/src/schemas/membership.ts +9 -0
package/src/schemas/session.ts +10 -0
package/src/schemas/user.ts +22 -0
package/src/storage/AccountDO.ts +370 -0
package/src/storage/CredentialDO.ts +82 -0
package/src/storage/SystemDO.ts +264 -0
package/src/storage/UserDO.ts +385 -0
package/worker-configuration.d.ts +11696 -0
package/wrangler.template.jsonc +55 -0

package/public/users/accounts.html ADDED Viewed

@@ -0,0 +1,504 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>Account Settings</title>
+    <link rel="stylesheet" href="/users/style.css" />
+  </head>
+  <body
+    data-ssr-account="{{ssr:account_json}}"
+    data-ssr-profile="{{ssr:profile_json}}"
+    data-ssr-members="{{ssr:account_members_json}}"
+    data-ssr-plans="{{ssr:plans_json}}"
+  >
+    <power-strip
+      providers="{{ssr:providers}}"
+      style="position: absolute; top: 0; right: 0; z-index: 9999; padding: 0.1rem; border-radius: 0 0 0 0.3rem"
+    >
+      <svg viewBox="0 0 24 24" style="width: 1rem; height: 1rem"><path d="M7 2v11h3v9l7-12h-4l4-8z" fill="#ffcc00" /></svg>
+    </power-strip>
+    <script src="/users/power-strip.js" async></script>
+    <div class="header-area">
+      <a href="/" class="back-link">← Back to Home</a>
+      <h1 class="page-subtitle">Account Settings</h1>
+      <div id="account-name-heading" class="page-title">{{ssr:account_name}}</div>
+      <div id="account-id-subtitle" class="subtitle">
+        <span class="id-text" id="account-id-text">ID: {{ssr:account_id}}</span>
+        <button id="copy-id-btn" class="copy-btn" title="Copy Account ID">
+          <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
+            <rect x="9" y="9" width="13" height="13" rx="2" ry="2"></rect>
+            <path d="M5 15H4a2 2 0 0 1-2-2V4a2 2 0 0 1 2-2h9a2 2 0 0 1 2 2v1"></path>
+          </svg>
+        </button>
+      </div>
+    </div>
+    <div class="main-layout">
+      <nav class="sidebar">
+        <ul class="nav-list">
+          <li class="nav-item">
+            <a href="/users/profile.html" class="nav-link">Profile</a>
+          </li>
+          <li class="nav-item" id="nav-account-item">
+            <a href="/users/accounts.html" class="nav-link active">Account Settings</a>
+          </li>
+        </ul>
+      </nav>
+      <div class="content-area">
+        <section id="account-info-section" style="{{ssr:account_info_section_display}}">
+          <div class="avatar-section">
+            <div style="position: relative">
+              <img
+                id="account-avatar"
+                class="account-avatar-large"
+                src="{{ssr:account_picture}}"
+                alt="Account Avatar"
+                style="{{ssr:account_picture_display}}"
+              />
+              <div
+                id="account-avatar-placeholder"
+                class="account-avatar-large"
+                style="background: #f1f3f4; {{ssr:account_placeholder_display}} align-items: center; justify-content: center; color: #5f6368"
+              >
+                <svg viewBox="0 0 24 24" style="width: 48px; height: 48px; fill: currentColor">
+                  <path
+                    d="M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm0 18c-4.41 0-8-3.59-8-8s3.59-8 8-8 8 3.59 8 8-3.59 8-8 8zm-5-9h10v2H7z"
+                  />
+                </svg>
+              </div>
+              <input type="file" id="avatar-input" accept="image/*" style="display: none" />
+              <button
+                type="button"
+                id="change-avatar-btn"
+                class="secondary-btn"
+                style="
+                  position: absolute;
+                  bottom: -0.5rem;
+                  left: 50%;
+                  transform: translateX(-50%);
+                  padding: 0.25rem 0.5rem;
+                  font-size: 0.75rem;
+                  white-space: nowrap;
+                "
+              >
+                Change
+              </button>
+              <button
+                type="button"
+                id="remove-avatar-btn"
+                title="Remove image"
+                class="remove-image-btn"
+                style="{{ssr:account_remove_btn_display}}"
+              >
+                ✕
+              </button>
+            </div>
+            <div>
+              <h2 id="display-account-name" style="margin: 0; color: #333">{{ssr:account_name}}</h2>
+              <p id="display-account-plan" style="margin: 0.25rem 0 0 0; color: #666">{{ssr:account_plan_name}}</p>
+            </div>
+          </div>
+          <h2>General Information</h2>
+          <form id="account-info-form">
+            <div class="form-group">
+              <label for="account-name">Account Name</label>
+              <input type="text" id="account-name" name="name" maxlength="50" value="{{ssr:account_name}}" required />
+            </div>
+            <div class="form-group">
+              <label>Plan</label>
+              <input type="text" id="account-plan-display" value="{{ssr:account_plan_name}}" disabled />
+            </div>
+            <button type="submit" id="save-account-btn" disabled>Save Changes</button>
+          </form>
+        </section>
+        <section id="members-section" style="{{ssr:account_members_section_display}}">
+          <h2>Team Members</h2>
+          <div id="members-list">{{ssr:account_members_list_html}}</div>
+        </section>
+      </div>
+    </div>
+    <div id="toast"></div>
+    <script>
+      const API_BASE = '/users/api';
+      let currentAccountId = null;
+      let currentUserRole = 0;
+      let currentUserId = null;
+      let initialAccountInfo = {};
+      let isInitialLoad = true;
+      async function init() {
+        try {
+          // Try to get data from SSR first
+          let data = null;
+          let members = null;
+          const ssrProfileJson = document.body.getAttribute('data-ssr-profile');
+          const ssrAccountJson = document.body.getAttribute('data-ssr-account');
+          const ssrMembersJson = document.body.getAttribute('data-ssr-members');
+          if (ssrProfileJson && !ssrProfileJson.startsWith('{{ssr:') && ssrAccountJson && !ssrAccountJson.startsWith('{{ssr:')) {
+            try {
+              const profile = JSON.parse(ssrProfileJson);
+              const account = JSON.parse(ssrAccountJson);
+              if (ssrMembersJson && !ssrMembersJson.startsWith('{{ssr:')) {
+                members = JSON.parse(ssrMembersJson);
+              }
+              if (profile.valid) {
+                data = {
+                  ...profile,
+                  account: account,
+                };
+              }
+            } catch (e) {
+              console.error('Failed to parse SSR data', e);
+            }
+          }
+          if (!data) {
+            const res = await fetch(`${API_BASE}/me`);
+            if (!res.ok) {
+              if (res.status === 401) {
+                window.location.href = '/';
+                return;
+              }
+              throw new Error('Failed to load user info');
+            }
+            data = await res.json();
+          }
+          if (data.valid && data.account) {
+            currentAccountId = data.account.id;
+            currentUserRole = data.account.role;
+            currentUserId = data.profile.id;
+            document.getElementById('account-name-heading').textContent = data.account.name || 'Account';
+            document.getElementById('account-name').value = data.account.name || '';
+            initialAccountInfo.name = data.account.name || '';
+            document.getElementById('account-id-text').textContent = `ID: ${currentAccountId}`;
+            document.getElementById('copy-id-btn').onclick = () => {
+              navigator.clipboard
+                .writeText(currentAccountId)
+                .then(() => {
+                  showToast('Account ID copied to clipboard');
+                })
+                .catch((err) => {
+                  console.error('Failed to copy: ', err);
+                });
+            };
+            // Check if user is admin of the account or system admin
+            if (currentUserRole !== 1 && !data.is_admin) {
+              document.getElementById('members-section').style.display = 'none';
+              document.getElementById('account-info-section').style.display = 'none';
+              const section = document.createElement('section');
+              const msg = document.createElement('p');
+              msg.textContent = "You do not have permission to manage this account's information.";
+              msg.style.color = '#666';
+              msg.style.margin = '0';
+              section.appendChild(msg);
+              document.querySelector('.content-area').appendChild(section);
+            } else {
+              loadMembers(members);
+            }
+            loadAccountDetails(data.account);
+            isInitialLoad = false;
+          }
+        } catch (e) {
+          showToast(e.message);
+        }
+      }
+      document.getElementById('account-name').addEventListener('input', (e) => {
+        const hasChanged = e.target.value !== initialAccountInfo.name;
+        document.getElementById('save-account-btn').disabled = !hasChanged;
+      });
+      document.getElementById('change-avatar-btn').onclick = () => {
+        document.getElementById('avatar-input').click();
+      };
+      document.getElementById('avatar-input').onchange = async (e) => {
+        const file = e.target.files[0];
+        if (!file) return;
+        try {
+          const res = await fetch(`${API_BASE}/me/accounts/${currentAccountId}/avatar`, {
+            method: 'PUT',
+            headers: {
+              'Content-Type': file.type,
+            },
+            body: await file.arrayBuffer(),
+          });
+          if (res.ok) {
+            showToast('Account avatar updated');
+            // Refresh image
+            const img = document.getElementById('account-avatar');
+            img.src = `${API_BASE}/me/accounts/${currentAccountId}/avatar?t=${Date.now()}`;
+            img.style.display = 'block';
+            document.getElementById('account-avatar-placeholder').style.display = 'none';
+            document.getElementById('remove-avatar-btn').style.display = 'flex';
+            // Refresh power-strip
+            const powerStrip = document.querySelector('power-strip');
+            if (powerStrip && typeof powerStrip.refresh === 'function') {
+              powerStrip.refresh();
+            }
+          } else {
+            const err = await res.text();
+            throw new Error(err || 'Failed to upload avatar');
+          }
+        } catch (e) {
+          showToast(e.message);
+        }
+      };
+      document.getElementById('account-info-form').onsubmit = async (e) => {
+        e.preventDefault();
+        const name = document.getElementById('account-name').value;
+        try {
+          const res = await fetch(`${API_BASE}/me/accounts/${currentAccountId}`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ name }),
+          });
+          if (res.ok) {
+            showToast('Account name updated');
+            initialAccountInfo.name = name;
+            document.getElementById('account-name-heading').textContent = name;
+            document.getElementById('save-account-btn').disabled = true;
+            // Refresh power-strip
+            const powerStrip = document.querySelector('power-strip');
+            if (powerStrip && typeof powerStrip.refresh === 'function') {
+              powerStrip.refresh();
+            }
+          } else {
+            throw new Error('Failed to update account name');
+          }
+        } catch (e) {
+          showToast(e.message);
+        }
+      };
+      document.getElementById('remove-avatar-btn').onclick = async () => {
+        if (!confirm('Are you sure you want to remove the account profile picture?')) return;
+        try {
+          const res = await fetch(`${API_BASE}/me/accounts/${currentAccountId}/avatar`, {
+            method: 'DELETE',
+          });
+          if (res.ok) {
+            showToast('Account avatar removed');
+            loadAccountDetails();
+            // Refresh power-strip
+            const powerStrip = document.querySelector('power-strip');
+            if (powerStrip && typeof powerStrip.refresh === 'function') {
+              powerStrip.refresh();
+            }
+          } else {
+            const err = await res.text();
+            throw new Error(err || 'Failed to remove account avatar');
+          }
+        } catch (e) {
+          showToast(e.message);
+        }
+      };
+      async function loadAccountDetails(ssrData) {
+        try {
+          let data = ssrData;
+          if (!data || !data.billing) {
+            const res = await fetch(`${API_BASE}/me/accounts/${currentAccountId}`);
+            if (res.ok) {
+              data = await res.json();
+            }
+          }
+          if (data) {
+            if (data.name) {
+              document.getElementById('account-name').value = data.name;
+              document.getElementById('display-account-name').textContent = data.name;
+              initialAccountInfo.name = data.name;
+            }
+            // Get plan name from available plans
+            let availablePlans = [];
+            const ssrPlans = document.body.getAttribute('data-ssr-plans');
+            if (ssrPlans && !ssrPlans.startsWith('{{ssr:')) {
+              try {
+                availablePlans = JSON.parse(ssrPlans);
+              } catch (e) {}
+            }
+            const planSlug = data.billing?.state?.plan_slug || data.plan;
+            const plan = availablePlans.find((p) => p.slug === planSlug);
+            const planName = plan ? plan.name : planSlug || 'Free';
+            document.getElementById('account-plan-display').value = planName;
+            document.getElementById('display-account-plan').textContent = planName;
+            // Hide plan if only one plan is available
+            if (availablePlans.length <= 1) {
+              document.getElementById('display-account-plan').style.display = 'none';
+              const planFormGroup = document.getElementById('account-plan-display').closest('.form-group');
+              if (planFormGroup) {
+                planFormGroup.style.display = 'none';
+              }
+            } else {
+              document.getElementById('display-account-plan').style.display = 'block';
+              const planFormGroup = document.getElementById('account-plan-display').closest('.form-group');
+              if (planFormGroup) {
+                planFormGroup.style.display = 'block';
+              }
+            }
+            // Load avatar
+            const avatarRes = await fetch(`${API_BASE}/me/accounts/${currentAccountId}/avatar`);
+            if (avatarRes.ok) {
+              const img = document.getElementById('account-avatar');
+              img.src = `${API_BASE}/me/accounts/${currentAccountId}/avatar`;
+              img.style.display = 'block';
+              document.getElementById('account-avatar-placeholder').style.display = 'none';
+              document.getElementById('remove-avatar-btn').style.display = 'flex';
+            } else {
+              document.getElementById('account-avatar').style.display = 'none';
+              document.getElementById('account-avatar-placeholder').style.display = 'flex';
+              document.getElementById('remove-avatar-btn').style.display = 'none';
+            }
+          }
+        } catch (e) {
+          console.error('Error loading account details:', e);
+        }
+      }
+      async function loadMembers(ssrData) {
+        const list = document.getElementById('members-list');
+        try {
+          let members = ssrData;
+          if (!members && isInitialLoad) {
+            const ssrMembersJson = document.body.getAttribute('data-ssr-members');
+            if (ssrMembersJson && !ssrMembersJson.startsWith('{{ssr:')) {
+              try {
+                members = JSON.parse(ssrMembersJson);
+              } catch (e) {
+                console.error('Failed to parse SSR members', e);
+              }
+            }
+          }
+          if (!members) {
+            const res = await fetch(`${API_BASE}/me/accounts/${currentAccountId}/members`);
+            if (!res.ok) throw new Error('Failed to load members');
+            members = await res.json();
+          }
+          if (members.length === 0) {
+            list.innerHTML = '<p>No members found.</p>';
+            return;
+          }
+          list.innerHTML = members
+            .map((m) => {
+              const isAdmin = m.role === 1;
+              const isSelf = m.user_id === currentUserId;
+              const avatarContent = m.picture
+                ? `<img src="${m.picture}" class="member-avatar" alt="${m.name}" />`
+                : `<div class="member-avatar">
+                    <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
+                        <path d="M20 21v-2a4 4 0 0 0-4-4H8a4 4 0 0 0-4 4v2"></path>
+                        <circle cx="12" cy="7" r="4"></circle>
+                    </svg>
+                   </div>`;
+              return `
+              <div class="member-item">
+                <div class="member-info">
+                  ${avatarContent}
+                  <div class="member-details">
+                    <div class="member-name" title="${m.name}${isSelf ? ' (You)' : ''}">${m.name} ${isSelf ? '(You)' : ''}</div>
+                    <div class="member-role">
+                      <select onchange="updateRole('${m.user_id}', this.value)" ${isSelf ? 'disabled title="You cannot change your own role"' : ''} class="role-select">
+                        <option value="0" ${m.role === 0 ? 'selected' : ''}>Member</option>
+                        <option value="1" ${m.role === 1 ? 'selected' : ''}>Admin</option>
+                      </select>
+                    </div>
+                  </div>
+                </div>
+                <button class="remove-btn" onclick="removeMember('${m.user_id}')" ${isSelf ? 'disabled title="You cannot remove yourself"' : ''}>
+                  Remove
+                </button>
+              </div>
+            `;
+            })
+            .join('');
+        } catch (e) {
+          list.innerHTML = `<p style="color: red;">${e.message}</p>`;
+        }
+      }
+      async function updateRole(userId, newRole) {
+        try {
+          const res = await fetch(`${API_BASE}/me/accounts/${currentAccountId}/members/${userId}`, {
+            method: 'PATCH',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ role: parseInt(newRole) }),
+          });
+          if (res.ok) {
+            showToast('Role updated');
+            loadMembers();
+          } else {
+            const err = await res.text();
+            throw new Error(err || 'Failed to update role');
+          }
+        } catch (e) {
+          showToast(e.message);
+          loadMembers(); // Refresh to reset select
+        }
+      }
+      async function removeMember(userId) {
+        if (!confirm(`Are you sure you want to remove user ${userId} from this account?`)) return;
+        try {
+          const res = await fetch(`${API_BASE}/me/accounts/${currentAccountId}/members/${userId}`, {
+            method: 'DELETE',
+          });
+          if (res.ok) {
+            showToast('Member removed');
+            loadMembers();
+          } else {
+            const err = await res.text();
+            throw new Error(err || 'Failed to remove member');
+          }
+        } catch (e) {
+          showToast(e.message);
+        }
+      }
+      function showToast(msg) {
+        const toast = document.getElementById('toast');
+        toast.innerText = msg;
+        toast.style.opacity = 1;
+        setTimeout(() => (toast.style.opacity = 0), 3000);
+      }
+      init();
+    </script>
+  </body>
+</html>