create-feltkit 0.3.13 → 0.3.15

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-feltkit",
-  "version": "0.3.13",
+  "version": "0.3.15",
   "description": "Create a FeltKit application: npm create feltkit@latest my-app (add -- --template managed for Managed FeltDB)",
   "license": "MIT",
   "type": "module",

package/template/_gitignore

@@ -2,4 +2,11 @@ node_modules/
 dist/
 .feltkit/
 .feltkit-platform/
+# Credentials and local deployment state: environment files (FELTKIT_*, FELTDB_* keys), and what
+# `feltdb init-managed` / `feltdb managed keys` write if this app later moves to Managed FeltDB.
+# Never commit.
+.env
+.env.*
+!.env.example
+.feltdb/
 *.app/

package/template/package.json

@@ -13,7 +13,7 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@feltdb/feltkit": "0.3.13",
+    "@feltdb/feltkit": "0.3.15",
     "react": "19.2.0",
     "react-dom": "19.2.0"
   },

package/template/src/App.tsx

@@ -161,16 +161,55 @@ function SignedOut(props: {
         ) : props.accounts ? (
           <AccountForm signUpOpen={props.accounts.signUp} email={Boolean(props.accounts.email)} providers={props.accounts.providers ?? []} onSignIn={props.onSignIn} onSignUp={props.onSignUp} />
         ) : (
-          <>
-            <h1>Sign in</h1>
-            <p className="muted">Sign-in isn't available for this app yet.</p>
-          </>
+          <SessionForm />
         )}
       </div>
     </div>
   );
 }
 
+/**
+ * No dev users and no accounts: access is given by whoever operates the deployment (on AppBoundry,
+ * `appboundry admin sessions issue --user <id>`). The session they hand over is pasted here; the
+ * server decides whether it is valid, and what it may do.
+ */
+function SessionForm() {
+  const client = useFeltKit();
+  const [token, setToken] = useState("");
+  const [error, setError] = useState<string | null>(null);
+  const [busy, setBusy] = useState(false);
+  const submit = async (e: FormEvent) => {
+    e.preventDefault();
+    setError(null);
+    setBusy(true);
+    try {
+      client.setToken(token.trim());
+      const session = await client.session();
+      if (!session.principal) {
+        client.setToken(null);
+        setError("That session isn't valid, or it has expired or been revoked. Ask your operator for a new one.");
+      }
+    } catch (err) {
+      client.setToken(null);
+      setError(describe(err));
+    } finally {
+      setBusy(false);
+    }
+  };
+  return (
+    <form className="stack" onSubmit={submit}>
+      <h1>Sign in</h1>
+      <p className="muted">Access to this app is given by its operator. Paste the session they issued you.</p>
+      <label className="field">
+        <span>Session</span>
+        <input type="password" autoComplete="off" spellCheck={false} value={token} onChange={(e) => setToken(e.target.value)} placeholder="abs_…" required autoFocus />
+      </label>
+      {error && <p className="error-text" role="alert">{error}</p>}
+      <button className="wide" type="submit" disabled={busy || !token.trim()}>{busy ? "Signing in…" : "Sign in"}</button>
+    </form>
+  );
+}
+
 /** Sign in to an existing account, or create one (auth.accounts in feltkit/app.ts). */
 function AccountForm(props: {
   signUpOpen: boolean;

package/template-managed/_gitignore

@@ -5,5 +5,6 @@ dist/
 # Written by `feltdb init-managed` / `feltdb managed keys`: keys and local deployment state. Never commit.
 .env
 .env.*
+!.env.example
 .feltdb/
 *.app/

package/template-managed/package.json

@@ -20,7 +20,7 @@
     "deploy:fly": "node scripts/deploy-fly.mjs"
   },
   "dependencies": {
-    "@feltdb/feltkit": "0.3.13"
+    "@feltdb/feltkit": "0.3.15"
   },
   "devDependencies": {
     "@feltdb/core": ">=0.21.0 <1.0.0",