apps 0.0.1-beta.2 → 0.0.1-beta.3

package/js/{chunk-OHRT55C4.js → chunk-G7ZIRKMK.js}

@@ -1784,10 +1784,7 @@ var AppUiApi = HttpApi_exports.make("app-ui").add(
 );
 
 export {
-  HttpApiEndpoint_exports,
-  HttpApi_exports,
   HttpApiClient_exports,
-  HttpApiGroup_exports,
   UiContext,
   UiOperation,
   UiUnauthorized,

package/js/chunk-NQ3OMCA5.js

@@ -0,0 +1,39 @@
+import {
+  appSignInCallbackPath
+} from "./chunk-T2LAZCAD.js";
+import {
+  HttpServerResponse_exports
+} from "./chunk-QKHR7BMF.js";
+
+// src/implementation/ui-auth.ts
+var appPrivateHeaders = {
+  "cache-control": "no-store",
+  "referrer-policy": "no-referrer",
+  "x-content-type-options": "nosniff",
+  "content-security-policy": "frame-ancestors 'none'"
+};
+var appRedirect = (url) => HttpServerResponse_exports.redirect(url, { status: 302, headers: appPrivateHeaders });
+var appSignInCallback = (origin, request, code) => {
+  const callback = new URL(appSignInCallbackPath, origin);
+  callback.searchParams.set("request", request);
+  callback.searchParams.set("code", code);
+  return callback.href;
+};
+var appSignInFailed = () => HttpServerResponse_exports.text(
+  `<!doctype html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Could not open app</title></head><body><p>Could not sign in to this app. Try opening it again.</p><a href="/">Try again</a></body></html>`,
+  {
+    status: 401,
+    contentType: "text/html",
+    headers: {
+      ...appPrivateHeaders,
+      "content-security-policy": "default-src 'none'; frame-ancestors 'none'; base-uri 'none'"
+    }
+  }
+);
+
+export {
+  appPrivateHeaders,
+  appRedirect,
+  appSignInCallback,
+  appSignInFailed
+};

package/js/{chunk-4LPG6RCH.js → chunk-T2LAZCAD.js}

@@ -1,11 +1,3 @@
-import {
-  HttpApiEndpoint_exports,
-  HttpApiGroup_exports,
-  HttpApi_exports,
-  UiFailed,
-  UiForbidden,
-  UiUnauthorized
-} from "./chunk-OHRT55C4.js";
 import {
   Schema_exports
 } from "./chunk-FW5HBOIK.js";
@@ -31,26 +23,14 @@ var AppReturnPath = Schema_exports.String.check(
   })
 ).pipe(Schema_exports.brand("AppReturnPath"));
 var AppSignInCallback = Schema_exports.Struct({ request: AppSignInId, code: AppSignInCode });
-var AppSignInApi = HttpApi_exports.make("app-sign-in").add(
-  HttpApiGroup_exports.make("appSignIn").add(
-    HttpApiEndpoint_exports.post("start", "/_executor/auth/start", {
-      payload: Schema_exports.Struct({ returnTo: AppReturnPath }),
-      success: Schema_exports.Struct({ url: Schema_exports.String }),
-      error: [UiForbidden, UiFailed]
-    })
-  ).add(
-    HttpApiEndpoint_exports.post("complete", "/_executor/auth/complete", {
-      payload: AppSignInCallback,
-      success: Schema_exports.Struct({ returnTo: AppReturnPath }),
-      error: [UiUnauthorized, UiForbidden, UiFailed]
-    })
-  )
-);
+var appSignInCallbackPath = "/_executor/auth/callback";
+var AppSignInFailure = Schema_exports.Literals(["ended", "forbidden", "unavailable"]);
 
 export {
   AppSignInId,
   AppSignInCode,
   AppReturnPath,
   AppSignInCallback,
-  AppSignInApi
+  appSignInCallbackPath,
+  AppSignInFailure
 };

package/js/client.js

@@ -4,7 +4,7 @@ import {
   UiContext,
   UiDeploymentChanged,
   UiFailed
-} from "./chunk-OHRT55C4.js";
+} from "./chunk-G7ZIRKMK.js";
 import {
   AsyncResult_exports,
   AtomRegistry_exports,

package/js/ui/auth/contracts.js

@@ -1,19 +1,18 @@
 import {
   AppReturnPath,
-  AppSignInApi,
   AppSignInCallback,
   AppSignInCode,
-  AppSignInId
-} from "../../chunk-4LPG6RCH.js";
-import "../../chunk-OHRT55C4.js";
-import "../../chunk-QKHR7BMF.js";
-import "../../chunk-SATWJKN6.js";
+  AppSignInFailure,
+  AppSignInId,
+  appSignInCallbackPath
+} from "../../chunk-T2LAZCAD.js";
 import "../../chunk-FW5HBOIK.js";
 import "../../chunk-CZ7CSFO4.js";
 export {
   AppReturnPath,
-  AppSignInApi,
   AppSignInCallback,
   AppSignInCode,
-  AppSignInId
+  AppSignInFailure,
+  AppSignInId,
+  appSignInCallbackPath
 };

package/js/ui/auth.js

@@ -1,28 +1,30 @@
 import {
   appPrivateHeaders,
-  appSignInPage,
-  appSignInScript
-} from "../chunk-TE4KO4HI.js";
+  appRedirect,
+  appSignInCallback,
+  appSignInFailed
+} from "../chunk-NQ3OMCA5.js";
 import {
   AppReturnPath,
-  AppSignInApi,
   AppSignInCallback,
   AppSignInCode,
-  AppSignInId
-} from "../chunk-4LPG6RCH.js";
-import "../chunk-OHRT55C4.js";
+  AppSignInFailure,
+  AppSignInId,
+  appSignInCallbackPath
+} from "../chunk-T2LAZCAD.js";
 import "../chunk-HDJH3RPR.js";
 import "../chunk-QKHR7BMF.js";
-import "../chunk-SATWJKN6.js";
 import "../chunk-FW5HBOIK.js";
 import "../chunk-CZ7CSFO4.js";
 export {
   AppReturnPath,
-  AppSignInApi,
   AppSignInCallback,
   AppSignInCode,
+  AppSignInFailure,
   AppSignInId,
   appPrivateHeaders,
-  appSignInPage,
-  appSignInScript
+  appRedirect,
+  appSignInCallback,
+  appSignInCallbackPath,
+  appSignInFailed
 };

package/js/ui/contracts.js

@@ -7,7 +7,7 @@ import {
   UiOperation,
   UiSnapshot,
   UiUnauthorized
-} from "../chunk-OHRT55C4.js";
+} from "../chunk-G7ZIRKMK.js";
 import "../chunk-QKHR7BMF.js";
 import "../chunk-SATWJKN6.js";
 import "../chunk-FW5HBOIK.js";

package/js/ui/serving.js

@@ -1,9 +1,10 @@
 import {
   appPrivateHeaders
-} from "../chunk-TE4KO4HI.js";
+} from "../chunk-NQ3OMCA5.js";
+import "../chunk-T2LAZCAD.js";
 import {
   UiForbidden
-} from "../chunk-OHRT55C4.js";
+} from "../chunk-G7ZIRKMK.js";
 import {
   CurrentTelemetryConfig
 } from "../chunk-ZCAMUXSG.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "apps",
-  "version": "0.0.1-beta.2",
+  "version": "0.0.1-beta.3",
   "description": "TypeScript apps with typed tools, accounts, storage, and UI.",
   "type": "module",
   "sideEffects": false,