create-ailk 0.4.0 → 0.6.0

package/templates/apps/mcp/src/tools/delete_page.ts

@@ -1,74 +0,0 @@
-// oss: false
-/**
- * delete_page — Paid-tier MCP tool for removing a content page.
- *
- * D14a Stage 1 Unit C — wires McpServer delete_page to ContentAdapter.deletePage.
- * Mandatory optimistic locking: caller supplies `ifMatch`; stale or missing
- * tokens yield canonical conflict bodies.
- *
- * Success body is `{ ok: true }` per the Stage 0 catalog `deletePageOutputSchema`.
- */
-
-import { join } from "node:path";
-
-import {
-  SCHEMA_ORG_TYPES,
-  SLUG_PATTERN,
-  createMdxAdapter,
-  mapAdapterError,
-  type ContentAdapter,
-} from "@working-theory/content-adapters";
-import { z } from "zod";
-
-import { validationError, type ErrorBody } from "../lib/errors.js";
-import { requirePaidTier } from "../lib/require-paid-tier.js";
-
-const DeletePageInputSchema = z.object({
-  type: z.enum(SCHEMA_ORG_TYPES),
-  // Defence-in-depth slug allowlist matches create_page / update_page;
-  // the adapter also enforces the pattern, but a fail-fast validation_failed
-  // here keeps the tool's surface contract consistent (issue #398).
-  slug: z.string().regex(SLUG_PATTERN),
-  ifMatch: z.string().min(1),
-});
-
-interface DeletePageSuccess {
-  ok: true;
-}
-
-export type DeletePageResult = DeletePageSuccess | ErrorBody;
-
-export interface DeletePageInput {
-  type: string;
-  slug: string;
-  ifMatch: string;
-}
-
-export async function ailkDeletePage(
-  input: DeletePageInput,
-  adapter?: ContentAdapter,
-): Promise<DeletePageResult> {
-  const guard = await requirePaidTier();
-  if (guard) return guard;
-
-  const parsed = DeletePageInputSchema.safeParse(input);
-  if (!parsed.success) {
-    return validationError("Invalid input for delete_page.", {
-      issues: parsed.error.issues,
-    });
-  }
-
-  const { type, slug, ifMatch } = parsed.data;
-  const resolved =
-    adapter ??
-    createMdxAdapter({ contentRoot: join(process.cwd(), "content") });
-
-  try {
-    await resolved.deletePage(type, slug, { ifMatch });
-    return { ok: true };
-  } catch (err) {
-    const mapped = mapAdapterError(err, { type, slug });
-    if (mapped) return mapped;
-    throw err;
-  }
-}

package/templates/apps/mcp/src/tools/update_page.ts

@@ -1,92 +0,0 @@
-// oss: false
-/**
- * update_page — Paid-tier MCP tool for revising an existing content page.
- *
- * D14a Stage 1 Unit C — wires McpServer update_page to ContentAdapter.updatePage.
- * Mandatory optimistic locking: caller supplies `ifMatch` (version token from a
- * prior read or write); stale or missing tokens yield canonical conflict bodies.
- *
- * Validation strategy mirrors create_page — strict parse via
- * FrontmatterSchema.extend({ body, ifMatch }) inside the handler so bad
- * frontmatter surfaces as validation_failed (the Stage 0 catalog uses a
- * permissive outer shape because @working-theory/metadata cannot import
- * @working-theory/content-adapters).
- */
-
-import { join } from "node:path";
-
-import {
-  FrontmatterSchema,
-  createMdxAdapter,
-  mapAdapterError,
-  type ContentAdapter,
-} from "@working-theory/content-adapters";
-import { z } from "zod";
-
-import { validationError, type ErrorBody } from "../lib/errors.js";
-import { requirePaidTier } from "../lib/require-paid-tier.js";
-
-const UpdatePageInputSchema = FrontmatterSchema.extend({
-  body: z.string().min(1),
-  ifMatch: z.string().min(1),
-});
-
-interface UpdatePageSuccess {
-  page: Record<string, unknown>;
-  version: string;
-}
-
-export type UpdatePageResult = UpdatePageSuccess | ErrorBody;
-
-export interface UpdatePageInput {
-  type: string;
-  slug: string;
-  page: Record<string, unknown>;
-  body: string;
-  ifMatch: string;
-}
-
-export async function ailkUpdatePage(
-  input: UpdatePageInput,
-  adapter?: ContentAdapter,
-): Promise<UpdatePageResult> {
-  const guard = await requirePaidTier();
-  if (guard) return guard;
-
-  const parsed = UpdatePageInputSchema.safeParse({
-    ...input.page,
-    type: input.type,
-    slug: input.slug,
-    body: input.body,
-    ifMatch: input.ifMatch,
-  });
-
-  if (!parsed.success) {
-    return validationError(
-      "Invalid frontmatter, body, or ifMatch for update_page.",
-      { issues: parsed.error.issues },
-    );
-  }
-
-  const { ifMatch, ...pageWithBody } = parsed.data;
-  const resolved =
-    adapter ??
-    createMdxAdapter({ contentRoot: join(process.cwd(), "content") });
-
-  try {
-    const result = await resolved.updatePage(
-      pageWithBody.type,
-      pageWithBody.slug,
-      pageWithBody,
-      { ifMatch },
-    );
-    return { page: result.page, version: result.version };
-  } catch (err) {
-    const mapped = mapAdapterError(err, {
-      type: pageWithBody.type,
-      slug: pageWithBody.slug,
-    });
-    if (mapped) return mapped;
-    throw err;
-  }
-}

package/templates/apps/web/app/[locale]/sign-in/sign-in-card.tsx

@@ -1,123 +0,0 @@
-"use client"; // Better Auth's client calls (signIn.social / signIn.email) + error state
-
-/**
- * SignInCard — the /sign-in page's client island (#4984).
- *
- * Composes the shipped `AuthCard` block (`intent="sign-in"`, `footer="none"`)
- * and wires its provider buttons / password form to the Better Auth client,
- * using the SAME `createAuthClient()` idiom the `(authed)` group's
- * `SignInGate` uses. The page (RSC) decides providers + method from auth-env
- * and hands them in; this component never reads env itself.
- *
- * No sign-up affordance anywhere: `footer="none"` drops the "Not a member?
- * Create an account" cross-link (Better Auth `emailAndPassword.disableSignUp`
- * posture).
- *
- * Password path: `apps/web/auth.ts` does not enable `emailAndPassword` today,
- * so `signIn.email` is wired but inert (Better Auth answers with an error)
- * until an operator enables it server-side — the page only selects
- * `method="password"` when auth-env reports the "email" provider.
- *
- * Zero providers (method sso, providers []): the card renders in its inert
- * state — heading + `notConfiguredSubhead`, no buttons, no form. Never a
- * fabricated session.
- *
- * Error surface: AuthCard's `errors` prop is per-field. A failed provider
- * launch lands on `errors.email` — the social row sits inside the password
- * form beside the email field, so it renders there. The SSO body has no
- * fields at all, so for `method="sso"` the same message is rendered as an
- * `Alert` above the card instead.
- */
-
-import { AuthCard, type AuthCardLabels } from "@working-theory/ui/blocks";
-import { Alert, AlertDescription } from "@working-theory/ui/primitives";
-import { createAuthClient } from "better-auth/react";
-import type { ReactElement, ReactNode } from "react";
-import { useState } from "react";
-
-const authClient = createAuthClient();
-
-/** The OAuth providers this page can launch — a subset of AuthCard's. */
-export type SignInProvider = "google" | "github";
-
-export interface SignInCardProps {
-  /** Active OAuth providers, exactly as auth-env reports them. */
-  providers: SignInProvider[];
-  /** "password" when the email provider is active; otherwise "sso". */
-  method: "sso" | "password";
-  /** Sanitised post-sign-in path (see `next-path.ts`). */
-  next: string;
-  /** Brand mark rendered top-center inside the card. */
-  logo?: ReactNode;
-  /** Translated AuthCard labels (resolved server-side by the page). */
-  labels: AuthCardLabels;
-  /** Subhead shown when no provider is configured. */
-  notConfiguredSubhead: string;
-  /** Translated error copy. */
-  errorLabels: { signInFailed: string; providerFailed: string };
-}
-
-type FieldErrors = { email?: string; password?: string };
-
-export function SignInCard({
-  providers,
-  method,
-  next,
-  logo,
-  labels,
-  notConfiguredSubhead,
-  errorLabels,
-}: SignInCardProps): ReactElement {
-  const [errors, setErrors] = useState<FieldErrors>({});
-  const [providerError, setProviderError] = useState<string | null>(null);
-
-  const notConfigured = method === "sso" && providers.length === 0;
-
-  const launchProvider = async (provider: SignInProvider): Promise<void> => {
-    setProviderError(null);
-    // Better Auth reports a failed launch as `{ error }`; a network/runtime
-    // failure rejects. Both land on the same providerFailed message.
-    const failed = await authClient.signIn
-      .social({ provider, callbackURL: next })
-      .then((res) => Boolean(res?.error), () => true);
-    if (failed) {
-      setProviderError(errorLabels.providerFailed);
-      setErrors((prev) => ({ ...prev, email: errorLabels.providerFailed }));
-    }
-  };
-
-  const submitPassword = async (email: string, password: string): Promise<void> => {
-    setErrors({});
-    const res = await authClient.signIn.email({ email, password, callbackURL: next });
-    if (res?.error) setErrors({ password: errorLabels.signInFailed });
-  };
-
-  return (
-    <div
-      className="flex min-h-screen items-center justify-center py-section"
-      data-testid="sign-in-page"
-    >
-      <div className="flex w-full max-w-md flex-col gap-4">
-        {method === "sso" && providerError ? (
-          <Alert variant="error" data-testid="sign-in-provider-error">
-            <AlertDescription>{providerError}</AlertDescription>
-          </Alert>
-        ) : null}
-        <AuthCard
-          intent="sign-in"
-          method={method}
-          footer="none"
-          {...(logo !== undefined ? { logo } : {})}
-          {...(notConfigured ? { subhead: notConfiguredSubhead } : {})}
-          providers={providers.map((provider) => ({
-            provider,
-            onClick: () => void launchProvider(provider),
-          }))}
-          onSubmit={(data) => void submitPassword(data.email, data.password ?? "")}
-          errors={errors}
-          labels={labels}
-        />
-      </div>
-    </div>
-  );
-}