@swoff/cli 0.3.13 → 0.3.15

package/dist/runtime/auth-adapter.js

@@ -0,0 +1,179 @@
+import { T, R } from "./utils.js";
+function generateCookieAdapter(ts, ext) {
+    return `/**
+ * Auth Adapter — maps Swoff auth infrastructure to your auth provider.
+ *
+ * Cookie (session) auth: the server manages sessions via an httpOnly cookie.
+ * The browser auto-sends the cookie on every same-origin request, so
+ * no header injection is needed.
+ *
+ * Edit the URLs below if your backend uses different endpoints.
+ *
+ * Usage:
+ *   import { adapter } from "./auth/adapter.${ext}";
+ *   const headers = adapter.getHeaders(auth);
+ */${ts ? `
+// ─── AuthData — single source of truth for auth shapes ───────────────
+// Edit the user type to match your backend's user object.
+export interface AuthData {
+  token?: string;
+  user?: unknown;
+  expiresAt?: number;
+}
+` : ""}
+import { isAuthFailureResponse } from "./check.${ext}";
+
+export const adapter${T(ts, "{ type: 'cookie'; getAuth: () => Promise<AuthData | null>; getHeaders: (auth: AuthData | null) => Record<string, string>; refresh: (auth: AuthData) => Promise<AuthData | null>; fetchUser: () => Promise<AuthData | null> }")}= {
+  type: "cookie",
+
+  /** Get current auth state from your provider. Return null if not authenticated. */
+  async getAuth()${R(ts, "Promise<AuthData | null>")}{
+    return null;
+  },
+
+  /** Generate auth headers for fetch requests. Cookie auth returns empty — browser sends cookie. */
+  getHeaders(_auth${T(ts, "AuthData | null")})${R(ts, "Record<string, string>")}{
+    return {};
+  },
+
+  /** Refresh the session. Cookie auth: server manages session, return null to skip. */
+  async refresh(_auth${T(ts, "AuthData")})${R(ts, "Promise<AuthData | null>")}{
+    return null;
+  },
+
+  /** Fetch current user from the server. Uses credentials: include for cookie auth. */
+  async fetchUser()${R(ts, "Promise<AuthData | null>")}{
+    const res = await fetch("/api/me", { credentials: "include" });
+    if (await isAuthFailureResponse(res)) return null;
+    return { user: await res.json() };
+  },
+};
+`;
+}
+function generateBearerAdapter(ts, ext) {
+    return `/**
+ * Auth Adapter — maps Swoff auth infrastructure to your auth provider.
+ *
+ * Bearer token auth: the server returns a token on login. The client stores it
+ * in memory and sends it as \`Authorization: Bearer <token>\` on every request.
+ *
+ * Edit the URLs below if your backend uses different endpoints.
+ *
+ * Usage:
+ *   import { adapter } from "./auth/adapter.${ext}";
+ *   const headers = adapter.getHeaders(auth);
+ *   const refreshed = await adapter.refresh(auth);
+ */${ts ? `
+// ─── AuthData — single source of truth for auth shapes ───────────────
+// Edit the user type to match your backend's user object.
+export interface AuthData {
+  token?: string;
+  user?: unknown;
+  expiresAt?: number;
+}
+` : ""}
+import { getAuth } from "./store.${ext}";
+import { isAuthFailureResponse } from "./check.${ext}";
+
+export const adapter${T(ts, "{ type: 'bearer'; getAuth: () => Promise<AuthData | null>; getHeaders: (auth: AuthData | null) => Record<string, string>; refresh: (auth: AuthData) => Promise<AuthData | null>; fetchUser: () => Promise<AuthData | null> }")}= {
+  type: "bearer",
+
+  /** Get current auth state from your provider. Return null if not authenticated. */
+  async getAuth()${R(ts, "Promise<AuthData | null>")}{
+    return null;
+  },
+
+  /** Generate auth headers. Injects Bearer token if available. */
+  getHeaders(auth${T(ts, "AuthData | null")})${R(ts, "Record<string, string>")}{
+    return auth?.token ? { Authorization: \`Bearer \${auth.token}\` } : {};
+  },
+
+  /** Refresh the session. Sends the existing token to /api/refresh. */
+  async refresh(auth${T(ts, "AuthData")})${R(ts, "Promise<AuthData | null>")}{
+    try {
+      const headers${T(ts, "Record<string, string>")} = { "Content-Type": "application/json" };
+      if (auth.token) headers["Authorization"] = \`Bearer \${auth.token}\`;
+      const res = await fetch("/api/refresh", { method: "POST", headers });
+      if (await isAuthFailureResponse(res)) return null;
+      const data = await res.json();
+      return { ...auth, token: data.token, expiresAt: data.expiresAt };
+    } catch { return null; }
+  },
+
+  /** Fetch current user from the server. Injects Bearer token if available. */
+  async fetchUser()${R(ts, "Promise<AuthData | null>")}{
+    const auth = await getAuth();
+    const headers${T(ts, "Record<string, string>")} = {};
+    if (auth?.token) headers["Authorization"] = \`Bearer \${auth.token}\`;
+    const res = await fetch("/api/me", { headers });
+    if (await isAuthFailureResponse(res)) return null;
+    return { user: await res.json() };
+  },
+};
+`;
+}
+function generateCustomAdapter(ts, ext) {
+    return `/**
+ * Auth Adapter — maps Swoff auth infrastructure to your auth provider.
+ *
+ * EDIT THIS FILE to match your backend's auth flow.
+ *
+ * Usage:
+ *   import { adapter } from "./auth/adapter.${ext}";
+ *   const headers = adapter.getHeaders(auth);
+ */${ts ? `
+// ─── AuthData — single source of truth for auth shapes ───────────────
+// Edit all fields to match your backend's auth shapes.
+export interface AuthData {
+  token?: string;
+  user?: unknown;
+  expiresAt?: number;
+}
+` : ""}
+import { isAuthFailureResponse } from "./check.${ext}";
+
+export const adapter = {
+  /** Set to "cookie" if your backend uses httpOnly cookies, "bearer" if it uses tokens. */
+  type: "bearer",
+
+  /** Get current auth state. Implement if your provider has a getSession() equivalent. */
+  async getAuth() { return null; },
+
+  /** Generate auth headers for fetch requests. */
+  getHeaders(auth) {
+    // --- EDIT THIS ---
+    if (auth?.token) return { Authorization: \`Bearer \${auth.token}\` };
+    return {};
+  },
+
+  /** Refresh the session. Return null if refresh fails. Use isAuthFailureResponse to validate. */
+  async refresh(auth) {
+    // --- EDIT THIS ---
+    try {
+      const headers = { "Content-Type": "application/json" };
+      if (auth?.token) headers["Authorization"] = \`Bearer \${auth.token}\`;
+      const res = await fetch("/api/refresh", { method: "POST", headers });
+      if (await isAuthFailureResponse(res)) return null;
+      const data = await res.json();
+      return { ...auth, token: data.token, expiresAt: data.expiresAt };
+    } catch { return null; }
+  },
+
+  /** Fetch current user. Return AuthData | null (e.g. { user: data }). Use isAuthFailureResponse to validate. */
+  async fetchUser() {
+    // --- EDIT THIS ---
+    return null;
+  },
+};
+`;
+}
+const ADAPTER_GENERATORS = {
+    "cookie": generateCookieAdapter,
+    "bearer": generateBearerAdapter,
+    "custom": generateCustomAdapter,
+};
+export function generateAuthAdapterCode(ctx, authType) {
+    const generator = ADAPTER_GENERATORS[authType] || ADAPTER_GENERATORS["custom"];
+    return generator(ctx.ts, ctx.ext);
+}
+//# sourceMappingURL=auth-adapter.js.map

package/dist/runtime/auth-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-adapter.js","sourceRoot":"","sources":["../../src/runtime/auth-adapter.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,YAAY,CAAC;AAElC,SAAS,qBAAqB,CAAC,EAAW,EAAE,GAAW;IACrD,OAAO;;;;;;;;;;+CAUsC,GAAG;;KAE7C,EAAE,CAAC,CAAC,CAAC;;;;;;;;CAQT,CAAC,CAAC,CAAC,EAAE;iDAC2C,GAAG;;sBAE9B,CAAC,CAAC,EAAE,EAAE,8NAA8N,CAAC;;;;mBAIxO,CAAC,CAAC,EAAE,EAAE,0BAA0B,CAAC;;;;;oBAKhC,CAAC,CAAC,EAAE,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,wBAAwB,CAAC;;;;;uBAKxD,CAAC,CAAC,EAAE,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,0BAA0B,CAAC;;;;;qBAKxD,CAAC,CAAC,EAAE,EAAE,0BAA0B,CAAC;;;;;;CAMrD,CAAC;AACF,CAAC;AAED,SAAS,qBAAqB,CAAC,EAAW,EAAE,GAAW;IACrD,OAAO;;;;;;;;;+CASsC,GAAG;;;KAG7C,EAAE,CAAC,CAAC,CAAC;;;;;;;;CAQT,CAAC,CAAC,CAAC,EAAE;mCAC6B,GAAG;iDACW,GAAG;;sBAE9B,CAAC,CAAC,EAAE,EAAE,8NAA8N,CAAC;;;;mBAIxO,CAAC,CAAC,EAAE,EAAE,0BAA0B,CAAC;;;;;mBAKjC,CAAC,CAAC,EAAE,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,wBAAwB,CAAC;;;;;sBAKxD,CAAC,CAAC,EAAE,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,0BAA0B,CAAC;;qBAEvD,CAAC,CAAC,EAAE,EAAE,wBAAwB,CAAC;;;;;;;;;;qBAU/B,CAAC,CAAC,EAAE,EAAE,0BAA0B,CAAC;;mBAEnC,CAAC,CAAC,EAAE,EAAE,wBAAwB,CAAC;;;;;;;CAOjD,CAAC;AACF,CAAC;AAED,SAAS,qBAAqB,CAAC,EAAW,EAAE,GAAW;IACrD,OAAO;;;;;;+CAMsC,GAAG;;KAE7C,EAAE,CAAC,CAAC,CAAC;;;;;;;;CAQT,CAAC,CAAC,CAAC,EAAE;iDAC2C,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmCnD,CAAC;AACF,CAAC;AAED,MAAM,kBAAkB,GAAyD;IAC/E,QAAQ,EAAE,qBAAqB;IAC/B,QAAQ,EAAE,qBAAqB;IAC/B,QAAQ,EAAE,qBAAqB;CAChC,CAAC;AAEF,MAAM,UAAU,uBAAuB,CACrC,GAAmB,EACnB,QAAgB;IAEhB,MAAM,SAAS,GAAG,kBAAkB,CAAC,QAAQ,CAAC,IAAI,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC/E,OAAO,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;AACpC,CAAC"}

package/dist/runtime/auth-state.js

@@ -10,24 +10,34 @@ export function generateAuthStateCode(ctx) {
  *   3. Offline + Authenticated  → Offline access (cached data)
  *   4. Offline + Unauthenticated → Strict offline (public content only)
  *
+ * getAuth() tries the adapter first, then falls back to IndexedDB user cache,
+ * so this works offline when the provider is unreachable.
+ *
+ * Public API:
+ *   getAuthState   — detect the 4-state matrix (online/offline × auth/unauthed)
+ *
+ * Internal imports (from ./store):
+ *   getAuth, isAuthValid — used internally, not re-exported
+ *
  * Usage:
  *   import { getAuthState } from "./auth/state.${ext}";
- *   const { authenticated, user, online } = await getAuthState();
+ *   const { authenticated, auth, online } = await getAuthState();
+ *   const userName = auth?.user?.name; // typed via AuthData
  */
 
+import { getCurrentOnlineStatus } from "../connectivity.${ext}";
 import { getAuth, isAuthValid } from "./store.${ext}";
-import { getCachedUser } from "./user.${ext}";
+import type { AuthData } from "./adapter.${ext}";
 
 /** Detect current auth state across the 4-state matrix (online/offline × authenticated/not). */
-export async function getAuthState()${R(ts, "Promise<{ authenticated: boolean; user: Record<string, unknown> | null; online: boolean }>")}{
+export async function getAuthState()${R(ts, "Promise<{ authenticated: boolean; auth: AuthData | null; online: boolean }>")}{
   const auth = await getAuth();
   const valid = isAuthValid(auth);
-  const user = valid ? await getCachedUser() : null;
 
   return {
     authenticated: valid,
-    user,
-    online: navigator.onLine,
+    auth,
+    online: getCurrentOnlineStatus(),
   };
 }
 `;

package/dist/runtime/auth-state.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-state.js","sourceRoot":"","sources":["../../src/runtime/auth-state.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,YAAY,CAAC;AAE/B,MAAM,UAAU,qBAAqB,CAAC,GAAmB;IACvD,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC;IACxB,OAAO;;;;;;;;;;kDAUyC,GAAG;;;;gDAIL,GAAG;wCACX,GAAG;;;sCAGL,CAAC,CAAC,EAAE,EAAE,4FAA4F,CAAC;;;;;;;;;;;CAWxI,CAAC;AACF,CAAC"}
+{"version":3,"file":"auth-state.js","sourceRoot":"","sources":["../../src/runtime/auth-state.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,YAAY,CAAC;AAE/B,MAAM,UAAU,qBAAqB,CAAC,GAAmB;IACvD,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC;IACxB,OAAO;;;;;;;;;;;;;;;;;;;kDAmByC,GAAG;;;;;0DAKK,GAAG;gDACb,GAAG;2CACR,GAAG;;;sCAGR,CAAC,CAAC,EAAE,EAAE,6EAA6E,CAAC;;;;;;;;;;CAUzH,CAAC;AACF,CAAC"}