instant-cli 1.0.22 → 1.0.23-branch-cli-codex-update.25390647417.1

package/.turbo/turbo-build.log

@@ -1,4 +1,4 @@
 
-> instant-cli@1.0.22 build /home/runner/work/instant/instant/client/packages/cli
+> instant-cli@1.0.23-branch-cli-codex-update.25390647417.1 build /home/runner/work/instant/instant/client/packages/cli
 > rm -rf dist; tsc -p tsconfig.build.json
 

package/__tests__/authClientAddGoogle.test.ts

@@ -240,6 +240,98 @@ describe('web: success', () => {
   });
 });
 
+// -- web: dev credentials --
+
+const webDevFlags = new Map([
+  ['type', 'google'],
+  ['app-type', 'web'],
+  ['name', 'google-web'],
+]);
+
+describe('web: dev credentials', () => {
+  test('--dev-credentials → creates dev credentials client', async () => {
+    await run(withEntry(webDevFlags, 'dev-credentials', 'true'), { yes: true });
+    expect(addedClients).toHaveLength(1);
+    expect(addedClients[0]).toMatchObject({
+      clientName: 'google-web',
+      useSharedCredentials: true,
+      discoveryEndpoint:
+        'https://accounts.google.com/.well-known/openid-configuration',
+    });
+    expect(addedClients[0].clientId).toBeUndefined();
+    expect(addedClients[0].clientSecret).toBeUndefined();
+    expect(addedClients[0].redirectTo).toBeUndefined();
+    const output = logs.join('\n');
+    expect(output).toContain('Credentials: Instant dev credentials');
+    expect(output).toContain('No Google Console setup required');
+    expect(output).toContain('Ready for production? Run:');
+    expect(output).not.toContain('For production');
+    expect(output).toContain(
+      'instant-cli auth client update --name google-web',
+    );
+    expect(output).not.toContain('Add this redirect URI in Google Console');
+  });
+
+  test('--yes with no Google credentials → creates dev credentials client', async () => {
+    await run(webDevFlags, { yes: true });
+    expect(addedClients).toHaveLength(1);
+    expect(addedClients[0]).toMatchObject({
+      clientName: 'google-web',
+      useSharedCredentials: true,
+      discoveryEndpoint:
+        'https://accounts.google.com/.well-known/openid-configuration',
+    });
+    expect(addedClients[0].clientId).toBeUndefined();
+    expect(addedClients[0].clientSecret).toBeUndefined();
+    expect(addedClients[0].redirectTo).toBeUndefined();
+    const output = logs.join('\n');
+    expect(output).toContain('Credentials: Instant dev credentials');
+    expect(output).toContain('No Google Console setup required');
+    expect(output).toContain(
+      'instant-cli auth client update --name google-web',
+    );
+    expect(output).not.toContain('Add this redirect URI in Google Console');
+  });
+
+  test('--dev-credentials with custom credential flags → error', async () => {
+    await run(
+      new Map([...webDevFlags, ['dev-credentials', 'true'], ['client-id', '']]),
+      { yes: true },
+    );
+    expect(logs.join('\n')).toContain(
+      '--dev-credentials cannot be combined with --client-id',
+    );
+    expect(addedClients).toHaveLength(0);
+  });
+
+  test('--dev-credentials with native app type → error', async () => {
+    await run(
+      new Map([
+        ['type', 'google'],
+        ['app-type', 'ios'],
+        ['name', 'google-ios'],
+        ['dev-credentials', 'true'],
+      ]),
+      { yes: true },
+    );
+    expect(logs.join('\n')).toContain(
+      '--dev-credentials is only supported for --app-type web',
+    );
+    expect(addedClients).toHaveLength(0);
+  });
+
+  test('interactive with no Google credentials → prompts for credential mode', async () => {
+    mockPromptReturn = 'dev';
+    await run(webDevFlags, { yes: false });
+    expect(prompts).toHaveLength(1);
+    expect((prompts[0] as any).params.promptText).toBe(
+      'Select Google credential mode:',
+    );
+    expect(addedClients).toHaveLength(1);
+    expect(addedClients[0].useSharedCredentials).toBe(true);
+  });
+});
+
 // -- ios: forbidden flags and success --
 
 describe('ios', () => {

package/__tests__/authClientList.test.ts

@@ -0,0 +1,90 @@
+import { test, expect, describe, vi, beforeEach } from 'vitest';
+import { Effect, Layer, Logger } from 'effect';
+import { CurrentApp } from '../src/context/currentApp.ts';
+import { InstantHttpAuthed } from '../src/lib/http.ts';
+
+vi.mock('../src/index.ts', () => ({}));
+
+const authResponse = {
+  oauth_service_providers: [
+    { id: 'prov-google', provider_name: 'google' },
+    { id: 'prov-github', provider_name: 'github' },
+  ],
+  oauth_clients: [
+    {
+      id: 'google-shared',
+      provider_id: 'prov-google',
+      client_name: 'google-shared',
+      client_id: null,
+      redirect_to: null,
+      meta: { appType: 'web' },
+      use_shared_credentials: true,
+    },
+    {
+      id: 'github',
+      provider_id: 'prov-github',
+      client_name: 'github',
+      client_id: 'gh-id',
+      redirect_to: 'https://api.instantdb.com/runtime/oauth/callback',
+      meta: {},
+      use_shared_credentials: false,
+    },
+  ],
+};
+
+vi.mock('../src/lib/oauth.ts', () => ({
+  getAppsAuth: () => Effect.succeed(authResponse),
+}));
+
+const { authClientListCmd } = await import(
+  '../src/commands/auth/client/list.ts'
+);
+
+let logs: string[] = [];
+
+const run = (opts: { json?: boolean }) =>
+  Effect.runPromise(
+    authClientListCmd(opts as any).pipe(
+      Effect.provide(
+        Layer.mergeAll(
+          Layer.succeed(CurrentApp, { appId: 'test-app', source: 'env' }),
+          Layer.succeed(InstantHttpAuthed, {} as any),
+          Logger.replace(
+            Logger.defaultLogger,
+            Logger.make(({ message }) => {
+              logs.push(String(message));
+            }),
+          ),
+        ),
+      ),
+    ),
+  );
+
+beforeEach(() => {
+  logs = [];
+});
+
+describe('auth client list', () => {
+  test('shows shared dev credentials clearly', async () => {
+    await run({});
+    const output = logs.join('\n');
+    expect(output).toContain('google-shared');
+    expect(output).toContain('App type: web');
+    expect(output).toContain('Credentials: Instant dev credentials');
+    expect(output).toContain('Client id: managed by Instant');
+    expect(output).toContain(
+      'Redirect URL: localhost and Expo allowed automatically',
+    );
+    expect(output).toContain('Credentials: custom');
+    expect(output).toContain('Client id: gh-id');
+  });
+
+  test('--json prints raw clients', async () => {
+    await run({ json: true });
+    const parsed = JSON.parse(logs.join('\n'));
+    expect(parsed[0]).toMatchObject({
+      client_name: 'google-shared',
+      use_shared_credentials: true,
+    });
+  });
+});