cronus-ui 0.6.4 → 0.6.5

package/README.md

@@ -49,7 +49,7 @@ Notes that match the commander surface:
   `packages/cli/scripts/build-registry.ts` — each item carries its source, its npm
   `dependencies`, and its `registryDependencies` (other components it imports),
   derived by parsing imports.
-- The default registry is pinned to the CLI package version (`v0.6.4` here), not
+- The default registry is pinned to the CLI package version (`v0.6.5` here), not
   mutable `main`, so a published CLI reads the registry snapshot it was released
   with. Use `-r, --registry ./registry` when testing local registry changes before
   a release tag exists.
@@ -80,7 +80,7 @@ Notes that match the commander surface:
     "lib": "lib",
     "blocks": "components/blocks"
   },
-  "registry": "https://raw.githubusercontent.com/pedrogbraz/cronus-ui/v0.6.4/registry"
+  "registry": "https://raw.githubusercontent.com/pedrogbraz/cronus-ui/v0.6.5/registry"
 }
 ```
 

package/dist/compose/gold-path.d.ts

@@ -42,10 +42,16 @@ export declare function patchHomePageSource(source: string, itemsImport: string)
  * Idempotent. Returns undefined when there is no TeamBlock and no MembersPanel.
  */
 export declare function patchTeamPageSource(source: string, membersImport: string): string | undefined;
+/**
+ * Validate the session in the shell layout so a stale cookie cannot sit in the
+ * app chrome. Idempotent. Returns undefined when AppShellNav is missing.
+ */
+export declare function patchShellLayoutSource(source: string, authImport: string): string | undefined;
 /**
  * Write sqlite + Drizzle + Better-Auth files into a composed saas/admin app.
  * Overwrites lib/auth-adapter.ts, lib/items.ts, and lib/members.ts always.
- * Patches the shell home and /team pages only when compose wrote them this run.
+ * Patches the shell home, /team, and shell layout only when compose wrote them
+ * this run.
  */
 export declare function applyGoldPath(options: ApplyGoldPathOptions): Promise<ApplyGoldPathResult>;
 //# sourceMappingURL=gold-path.d.ts.map

package/dist/compose/gold-path.js

@@ -89,6 +89,13 @@ function teamPageRel(appDir, generatedFiles) {
     const any = generatedFiles.find((f) => /(^|\/)\(shell\)\/team\/page\.tsx$/.test(posix(f)));
     return any !== undefined ? posix(any) : undefined;
 }
+function shellLayoutRel(appDir, generatedFiles) {
+    const match = generatedFiles.find((f) => posix(f) === `${appDir}/(shell)/layout.tsx`);
+    if (match !== undefined)
+        return posix(match);
+    const any = generatedFiles.find((f) => /(^|\/)\(shell\)\/layout\.tsx$/.test(posix(f)));
+    return any !== undefined ? posix(any) : undefined;
+}
 function drizzleConfigSource(dbDir) {
     return `import { mkdirSync } from "node:fs";
 import { dirname } from "node:path";
@@ -238,6 +245,19 @@ function newId(): string {
   return crypto.randomUUID().replaceAll("-", "");
 }
 
+function authBaseURL() {
+  const env = process.env.BETTER_AUTH_URL;
+  const hosts = ["localhost:*", "127.0.0.1:*"];
+  if (env) {
+    try {
+      hosts.push(new URL(env).host);
+    } catch {
+      // ignore invalid BETTER_AUTH_URL
+    }
+  }
+  return { allowedHosts: hosts, fallback: env || "http://localhost:3000" };
+}
+
 export const auth = betterAuth({
   database: drizzleAdapter(db, { provider: "sqlite", schema }),
   emailAndPassword: {
@@ -294,12 +314,11 @@ export const auth = betterAuth({
     },
   },
   secret: process.env.BETTER_AUTH_SECRET,
-  baseURL: process.env.BETTER_AUTH_URL,
+  baseURL: authBaseURL(),
   plugins: [
     organization({
       sendInvitationEmail: async (data) => {
-        const base = process.env.BETTER_AUTH_URL ?? "http://localhost:3000";
-        console.info(\`Invite \${data.email}: \${base}/accept-invitation?id=\${data.id}\`);
+        console.info(\`Invite \${data.email}: /accept-invitation?id=\${data.id}\`);
       },
     }),
     nextCookies(),
@@ -422,13 +441,10 @@ export function middleware(request: NextRequest) {
     if (invitation) url.searchParams.set("invitation", invitation);
     return NextResponse.redirect(url);
   }
-  if (sessionCookie && isAuthPage) {
-    if (invitation) {
-      return NextResponse.redirect(
-        new URL(\`/accept-invitation?id=\${encodeURIComponent(invitation)}\`, request.url),
-      );
-    }
-    return NextResponse.redirect(new URL("/", request.url));
+  if (sessionCookie && isAuthPage && invitation) {
+    return NextResponse.redirect(
+      new URL(\`/accept-invitation?id=\${encodeURIComponent(invitation)}\`, request.url),
+    );
   }
   return NextResponse.next();
 }
@@ -1022,6 +1038,29 @@ export function patchTeamPageSource(source, membersImport) {
     out = out.replace(/<TeamBlock\s*\/>/, "<MembersPanel />");
     return out;
 }
+/**
+ * Validate the session in the shell layout so a stale cookie cannot sit in the
+ * app chrome. Idempotent. Returns undefined when AppShellNav is missing.
+ */
+export function patchShellLayoutSource(source, authImport) {
+    if (source.includes("auth.api.getSession") && source.includes('redirect("/login")')) {
+        return source;
+    }
+    if (!source.includes("AppShellNav") || !source.includes("{children}"))
+        return undefined;
+    let out = source;
+    out = insertImport(out, `import { headers } from "next/headers";`);
+    out = insertImport(out, `import { redirect } from "next/navigation";`);
+    out = insertImport(out, `import { auth } from ${JSON.stringify(authImport)};`);
+    out = out.replace(/export default(?! async) function/, "export default async function");
+    if (!out.includes("auth.api.getSession")) {
+        out = out.replace(/(\{ children \}: \{ children: ReactNode \}\) \{)\n/, `$1
+  const session = await auth.api.getSession({ headers: await headers() });
+  if (!session) redirect("/login");
+`);
+    }
+    return out;
+}
 function mergePackageJson(raw) {
     const pkg = JSON.parse(raw);
     const dependencies = { ...(pkg.dependencies ?? {}) };
@@ -1092,7 +1131,8 @@ async function writeRel(targetDir, rel, content, overwrite, always, written, ski
 /**
  * Write sqlite + Drizzle + Better-Auth files into a composed saas/admin app.
  * Overwrites lib/auth-adapter.ts, lib/items.ts, and lib/members.ts always.
- * Patches the shell home and /team pages only when compose wrote them this run.
+ * Patches the shell home, /team, and shell layout only when compose wrote them
+ * this run.
  */
 export async function applyGoldPath(options) {
     const { targetDir, config, generatedFiles, overwrite } = options;
@@ -1198,6 +1238,22 @@ export async function applyGoldPath(options) {
             }
         }
     }
+    const layoutRel = shellLayoutRel(appDir, generatedFiles);
+    if (layoutRel !== undefined) {
+        const dest = resolveSafeDest(targetDir, ".", layoutRel);
+        if (existsSync(dest)) {
+            const current = await readFile(dest, "utf8");
+            const patched = patchShellLayoutSource(current, authImport);
+            if (patched !== undefined && patched !== current) {
+                await writeFileEnsured(dest, patched);
+                const templateName = options.templateName;
+                if (templateName !== undefined) {
+                    const snapDest = resolveSafeDest(targetDir, baseSnapshotDir(templateName), layoutRel);
+                    await writeFileEnsured(snapDest, patched);
+                }
+            }
+        }
+    }
     const teamRel = teamPageRel(appDir, generatedFiles);
     if (teamRel !== undefined) {
         const dest = resolveSafeDest(targetDir, ".", teamRel);

package/dist/config.d.ts

@@ -1,6 +1,6 @@
 export declare const CONFIG_FILE = "cronus-ui.json";
-export declare const CLI_VERSION = "0.6.4";
-export declare const DEFAULT_REGISTRY = "https://raw.githubusercontent.com/pedrogbraz/cronus-ui/v0.6.4/registry";
+export declare const CLI_VERSION = "0.6.5";
+export declare const DEFAULT_REGISTRY = "https://raw.githubusercontent.com/pedrogbraz/cronus-ui/v0.6.5/registry";
 /** Manifest entry `add`/`upgrade` record per installed registry item. */
 export interface InstalledRecord {
     /** Registry release the files came from (git tag without the leading "v"). */

package/dist/config.js

@@ -2,7 +2,7 @@ import { existsSync } from "node:fs";
 import { readFile, writeFile } from "node:fs/promises";
 import { join } from "node:path";
 export const CONFIG_FILE = "cronus-ui.json";
-export const CLI_VERSION = "0.6.4";
+export const CLI_VERSION = "0.6.5";
 export const DEFAULT_REGISTRY = `https://raw.githubusercontent.com/pedrogbraz/cronus-ui/v${CLI_VERSION}/registry`;
 export const DEFAULT_CONFIG = {
     aliases: { ui: "@/components/ui", lib: "@/lib", blocks: "@/components/blocks" },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cronus-ui",
-  "version": "0.6.4",
+  "version": "0.6.5",
   "description": "cronus-ui — add Cronus UI components to your project, shadcn-style (copy-paste registry).",
   "type": "module",
   "license": "MIT",
@@ -54,7 +54,7 @@
     "registry:check": "bun run scripts/check-registry.ts"
   },
   "dependencies": {
-    "@cronus-ui/ai-kit": "0.6.4",
+    "@cronus-ui/ai-kit": "0.6.5",
     "commander": "^15.0.0",
     "picocolors": "^1.1.1"
   },