minutework 0.1.31 → 0.1.33

package/assets/templates/next-tenant-app/src/app/api/auth/password-change/route.test.ts

@@ -1,79 +0,0 @@
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-const changePassword = vi.fn();
-const readPlatformAuthState = vi.fn();
-const syncPlatformAuthStateToResponse = vi.fn();
-
-vi.mock("@/lib/platform/client.server", () => ({
-  changePassword,
-}));
-
-vi.mock("@/lib/platform/session.server", () => ({
-  readPlatformAuthState,
-  syncPlatformAuthStateToResponse,
-}));
-
-describe("password change route", () => {
-  beforeEach(() => {
-    vi.clearAllMocks();
-  });
-
-  it("rejects invalid password payloads before proxying upstream", async () => {
-    readPlatformAuthState.mockResolvedValue({
-      sessionId: "session-1",
-      csrfToken: "csrf-1",
-    });
-
-    const route = await import("./route");
-    const response = await route.POST(
-      new Request("http://localhost/api/auth/password-change", {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({
-          current_password: "old",
-          new_password: "new-password",
-          confirm_password: "different-password",
-        }),
-      }),
-    );
-
-    expect(changePassword).not.toHaveBeenCalled();
-    expect(response.status).toBe(400);
-  });
-
-  it("proxies valid password changes through the BFF", async () => {
-    const authState = { sessionId: "session-1", csrfToken: "csrf-1" };
-
-    readPlatformAuthState.mockResolvedValue(authState);
-    changePassword.mockResolvedValue({
-      data: { has_password: true },
-      authState,
-    });
-
-    const route = await import("./route");
-    const response = await route.POST(
-      new Request("http://localhost/api/auth/password-change", {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({
-          current_password: "old-password",
-          new_password: "new-password",
-          confirm_password: "new-password",
-        }),
-      }),
-    );
-
-    expect(changePassword).toHaveBeenCalledWith(authState, {
-      current_password: "old-password",
-      new_password: "new-password",
-      confirm_password: "new-password",
-    });
-    expect(syncPlatformAuthStateToResponse).toHaveBeenCalledWith(
-      response,
-      authState,
-      authState,
-    );
-    expect(response.status).toBe(200);
-    await expect(response.json()).resolves.toEqual({ has_password: true });
-  });
-});

package/assets/templates/next-tenant-app/src/app/api/auth/password-change/route.ts

@@ -1,40 +0,0 @@
-import { NextResponse } from "next/server";
-
-import { changePassword } from "@/lib/platform/client.server";
-import { passwordChangeRequestSchema } from "@/lib/platform/contracts";
-import { toPlatformErrorResponse } from "@/lib/platform/route-response";
-import {
-  readPlatformAuthState,
-  syncPlatformAuthStateToResponse,
-} from "@/lib/platform/session.server";
-
-export async function POST(request: Request) {
-  const authState = await readPlatformAuthState();
-
-  if (!authState.sessionId) {
-    return NextResponse.json({ detail: "Authentication required." }, { status: 401 });
-  }
-
-  const body = await request.json().catch(() => null);
-  const parsed = passwordChangeRequestSchema.safeParse(body);
-
-  if (!parsed.success) {
-    return NextResponse.json(
-      { detail: "Invalid password change payload." },
-      { status: 400 },
-    );
-  }
-
-  try {
-    const result = await changePassword(authState, parsed.data);
-    const response = NextResponse.json(result.data, { status: 200 });
-    syncPlatformAuthStateToResponse(response, authState, result.authState);
-    return response;
-  } catch (error) {
-    return toPlatformErrorResponse(
-      error,
-      "Unable to change password.",
-      authState,
-    );
-  }
-}

package/assets/templates/next-tenant-app/src/app/api/auth/password-status/route.test.ts

@@ -1,42 +0,0 @@
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-const fetchPasswordStatus = vi.fn();
-const readPlatformAuthState = vi.fn();
-const syncPlatformAuthStateToResponse = vi.fn();
-
-vi.mock("@/lib/platform/client.server", () => ({
-  fetchPasswordStatus,
-}));
-
-vi.mock("@/lib/platform/session.server", () => ({
-  readPlatformAuthState,
-  syncPlatformAuthStateToResponse,
-}));
-
-describe("password status route", () => {
-  beforeEach(() => {
-    vi.clearAllMocks();
-  });
-
-  it("returns the proxied password status for authenticated sessions", async () => {
-    const authState = { sessionId: "session-1", csrfToken: "csrf-1" };
-
-    readPlatformAuthState.mockResolvedValue(authState);
-    fetchPasswordStatus.mockResolvedValue({
-      data: { has_password: true },
-      authState,
-    });
-
-    const route = await import("./route");
-    const response = await route.GET();
-
-    expect(fetchPasswordStatus).toHaveBeenCalledWith(authState);
-    expect(syncPlatformAuthStateToResponse).toHaveBeenCalledWith(
-      response,
-      authState,
-      authState,
-    );
-    expect(response.status).toBe(200);
-    await expect(response.json()).resolves.toEqual({ has_password: true });
-  });
-});

package/assets/templates/next-tenant-app/src/app/api/auth/password-status/route.ts

@@ -1,29 +0,0 @@
-import { NextResponse } from "next/server";
-
-import { fetchPasswordStatus } from "@/lib/platform/client.server";
-import { toPlatformErrorResponse } from "@/lib/platform/route-response";
-import {
-  readPlatformAuthState,
-  syncPlatformAuthStateToResponse,
-} from "@/lib/platform/session.server";
-
-export async function GET() {
-  const authState = await readPlatformAuthState();
-
-  if (!authState.sessionId) {
-    return NextResponse.json({ detail: "Authentication required." }, { status: 401 });
-  }
-
-  try {
-    const result = await fetchPasswordStatus(authState);
-    const response = NextResponse.json(result.data, { status: 200 });
-    syncPlatformAuthStateToResponse(response, authState, result.authState);
-    return response;
-  } catch (error) {
-    return toPlatformErrorResponse(
-      error,
-      "Unable to load password status.",
-      authState,
-    );
-  }
-}

package/assets/templates/next-tenant-app/src/app/api/auth/session/route.ts

@@ -1,26 +0,0 @@
-import { NextResponse } from "next/server";
-
-import {
-  loadCurrentSession,
-} from "@/lib/platform/client.server";
-import { toPlatformErrorResponse } from "@/lib/platform/route-response";
-import {
-  readPlatformAuthState,
-  syncPlatformAuthStateToResponse,
-} from "@/lib/platform/session.server";
-
-export async function GET() {
-  const authState = await readPlatformAuthState();
-  try {
-    const result = await loadCurrentSession(authState);
-    const response = NextResponse.json(result.data, { status: 200 });
-    syncPlatformAuthStateToResponse(response, authState, result.authState);
-    return response;
-  } catch (error) {
-    return toPlatformErrorResponse(
-      error,
-      "Unable to load the current platform session.",
-      authState,
-    );
-  }
-}

package/assets/templates/next-tenant-app/src/app/api/gateway/commands/[runId]/route.test.ts

@@ -1,40 +0,0 @@
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-const fetchTenantCommandRun = vi.fn();
-const readPlatformAuthState = vi.fn();
-const syncPlatformAuthStateToResponse = vi.fn();
-
-vi.mock("@/lib/platform/client.server", () => ({
-  fetchTenantCommandRun,
-}));
-
-vi.mock("@/lib/platform/env.server", () => ({
-  env: {
-    MW_ENABLE_RUNTIME_COMMAND_EXAMPLE: false,
-  },
-}));
-
-vi.mock("@/lib/platform/session.server", () => ({
-  readPlatformAuthState,
-  syncPlatformAuthStateToResponse,
-}));
-
-describe("runtime command run route", () => {
-  beforeEach(() => {
-    vi.clearAllMocks();
-    vi.resetModules();
-  });
-
-  it("returns 404 when the example feature is disabled", async () => {
-    const route = await import("./route");
-    const response = await route.GET(
-      new Request("http://localhost/api/gateway/commands/run-1?tenant_id=tenant-1"),
-      { params: Promise.resolve({ runId: "run-1" }) },
-    );
-
-    expect(response.status).toBe(404);
-    expect(readPlatformAuthState).not.toHaveBeenCalled();
-    expect(fetchTenantCommandRun).not.toHaveBeenCalled();
-    expect(syncPlatformAuthStateToResponse).not.toHaveBeenCalled();
-  });
-});

package/assets/templates/next-tenant-app/src/app/api/gateway/commands/[runId]/route.ts

@@ -1,47 +0,0 @@
-import { NextResponse } from "next/server";
-
-import { fetchTenantCommandRun } from "@/lib/platform/client.server";
-import { env } from "@/lib/platform/env.server";
-import { toPlatformErrorResponse } from "@/lib/platform/route-response";
-import {
-  readPlatformAuthState,
-  syncPlatformAuthStateToResponse,
-} from "@/lib/platform/session.server";
-
-export async function GET(
-  request: Request,
-  { params }: { params: Promise<{ runId: string }> },
-) {
-  if (!env.MW_ENABLE_RUNTIME_COMMAND_EXAMPLE) {
-    return new NextResponse(null, { status: 404 });
-  }
-
-  const authState = await readPlatformAuthState();
-  if (!authState.sessionId) {
-    return NextResponse.json({ detail: "Authentication required." }, { status: 401 });
-  }
-
-  const { runId } = await params;
-  const url = new URL(request.url);
-  const tenantId = url.searchParams.get("tenant_id") || "";
-
-  if (!tenantId) {
-    return NextResponse.json(
-      { detail: "Missing tenant_id query parameter." },
-      { status: 400 },
-    );
-  }
-
-  try {
-    const result = await fetchTenantCommandRun(authState, runId, tenantId);
-    const response = NextResponse.json(result.data, { status: 200 });
-    syncPlatformAuthStateToResponse(response, authState, result.authState);
-    return response;
-  } catch (error) {
-    return toPlatformErrorResponse(
-      error,
-      "Unable to load command status.",
-      authState,
-    );
-  }
-}

package/assets/templates/next-tenant-app/src/app/api/gateway/commands/route.test.ts

@@ -1,43 +0,0 @@
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-const dispatchTenantCommand = vi.fn();
-const readPlatformAuthState = vi.fn();
-const syncPlatformAuthStateToResponse = vi.fn();
-
-vi.mock("@/lib/platform/client.server", () => ({
-  dispatchTenantCommand,
-}));
-
-vi.mock("@/lib/platform/env.server", () => ({
-  env: {
-    MW_ENABLE_RUNTIME_COMMAND_EXAMPLE: false,
-  },
-}));
-
-vi.mock("@/lib/platform/session.server", () => ({
-  readPlatformAuthState,
-  syncPlatformAuthStateToResponse,
-}));
-
-describe("runtime command route", () => {
-  beforeEach(() => {
-    vi.clearAllMocks();
-    vi.resetModules();
-  });
-
-  it("returns 404 when the example feature is disabled", async () => {
-    const route = await import("./route");
-    const response = await route.POST(
-      new Request("http://localhost/api/gateway/commands", {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ command: "deploy" }),
-      }),
-    );
-
-    expect(response.status).toBe(404);
-    expect(readPlatformAuthState).not.toHaveBeenCalled();
-    expect(dispatchTenantCommand).not.toHaveBeenCalled();
-    expect(syncPlatformAuthStateToResponse).not.toHaveBeenCalled();
-  });
-});

package/assets/templates/next-tenant-app/src/app/api/gateway/commands/route.ts

@@ -1,45 +0,0 @@
-import { NextResponse } from "next/server";
-
-import { dispatchTenantCommand } from "@/lib/platform/client.server";
-import { commandDispatchRequestSchema } from "@/lib/platform/contracts";
-import { env } from "@/lib/platform/env.server";
-import { toPlatformErrorResponse } from "@/lib/platform/route-response";
-import {
-  readPlatformAuthState,
-  syncPlatformAuthStateToResponse,
-} from "@/lib/platform/session.server";
-
-export async function POST(request: Request) {
-  if (!env.MW_ENABLE_RUNTIME_COMMAND_EXAMPLE) {
-    return new NextResponse(null, { status: 404 });
-  }
-
-  const authState = await readPlatformAuthState();
-
-  if (!authState.sessionId) {
-    return NextResponse.json({ detail: "Authentication required." }, { status: 401 });
-  }
-
-  const body = await request.json().catch(() => null);
-  const parsed = commandDispatchRequestSchema.safeParse(body);
-
-  if (!parsed.success) {
-    return NextResponse.json(
-      { detail: "Invalid command payload." },
-      { status: 400 },
-    );
-  }
-
-  try {
-    const result = await dispatchTenantCommand(authState, parsed.data);
-    const response = NextResponse.json(result.data, { status: 200 });
-    syncPlatformAuthStateToResponse(response, authState, result.authState);
-    return response;
-  } catch (error) {
-    return toPlatformErrorResponse(
-      error,
-      "Unable to dispatch command.",
-      authState,
-    );
-  }
-}

package/assets/templates/next-tenant-app/src/app/app/examples/runtime-commands/page.test.ts

@@ -1,83 +0,0 @@
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-const notFound = vi.fn(() => {
-  throw new Error("notFound");
-});
-const resolveAuthenticatedSession = vi.fn();
-
-vi.mock("next/navigation", () => ({
-  notFound,
-}));
-
-vi.mock("@/features/shell/components/private-app-shell", () => ({
-  PrivateAppShell: () => null,
-}));
-
-vi.mock("@/lib/platform/auth.server", () => ({
-  resolveAuthenticatedSession,
-}));
-
-vi.mock("@/lib/platform/endpoints.server", () => ({
-  platformAuthEndpoints: {
-    operatorConsole: "http://127.0.0.1:8000/ops/login/",
-  },
-}));
-
-vi.mock("@/lib/platform/env.server", () => ({
-  env: {
-    MW_TEMPLATE_APP_NAME: "PandaWork Combined Starter",
-    MW_ENABLE_RUNTIME_COMMAND_EXAMPLE: false,
-  },
-}));
-
-describe("runtime commands example page", () => {
-  beforeEach(() => {
-    vi.clearAllMocks();
-    vi.resetModules();
-  });
-
-  it("returns notFound before loading auth when the example is disabled", async () => {
-    const page = await import("./page");
-
-    await expect(page.default()).rejects.toThrow("notFound");
-    expect(notFound).toHaveBeenCalledTimes(1);
-    expect(resolveAuthenticatedSession).not.toHaveBeenCalled();
-  });
-
-  it("loads the private shell when the example is enabled", async () => {
-    vi.doMock("@/lib/platform/env.server", () => ({
-      env: {
-        MW_TEMPLATE_APP_NAME: "PandaWork Combined Starter",
-        MW_ENABLE_RUNTIME_COMMAND_EXAMPLE: true,
-      },
-    }));
-    resolveAuthenticatedSession.mockResolvedValue({
-      authenticated: true,
-      user: {
-        id: "user-1",
-        username: "demo-user",
-        email: "demo@example.com",
-      },
-      active_tenant_id: "tenant-1",
-      active_tenant: {
-        tenant_id: "tenant-1",
-        tenant_slug: "alpha",
-        tenant_name: "Alpha",
-        role: "admin",
-      },
-      memberships: [
-        {
-          tenant_id: "tenant-1",
-          tenant_slug: "alpha",
-          tenant_name: "Alpha",
-          role: "admin",
-        },
-      ],
-    });
-
-    const page = await import("./page");
-
-    await expect(page.default()).resolves.toBeDefined();
-    expect(resolveAuthenticatedSession).toHaveBeenCalledTimes(1);
-  });
-});

package/assets/templates/next-tenant-app/src/app/app/examples/runtime-commands/page.tsx

@@ -1,30 +0,0 @@
-import { notFound } from "next/navigation";
-
-import { PrivateAppShell } from "@/features/shell/components/private-app-shell";
-import { resolveAuthenticatedSession } from "@/lib/platform/auth.server";
-import { platformAuthEndpoints } from "@/lib/platform/endpoints.server";
-import { env } from "@/lib/platform/env.server";
-
-export const metadata = {
-  title: "Runtime Commands Example",
-  description:
-    "Optional runtime command example inside the authenticated /app surface.",
-};
-
-export default async function RuntimeCommandsExamplePage() {
-  if (!env.MW_ENABLE_RUNTIME_COMMAND_EXAMPLE) {
-    notFound();
-  }
-
-  const session = await resolveAuthenticatedSession();
-
-  return (
-    <PrivateAppShell
-      initialSession={session}
-      appName={env.MW_TEMPLATE_APP_NAME}
-      operatorConsoleHref={platformAuthEndpoints.operatorConsole}
-      runtimeCommandExampleEnabled={env.MW_ENABLE_RUNTIME_COMMAND_EXAMPLE}
-      view="runtime-command-demo"
-    />
-  );
-}

package/assets/templates/next-tenant-app/src/app/app/page.test.ts

@@ -1,62 +0,0 @@
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-const resolveAuthenticatedSession = vi.fn();
-
-vi.mock("@/features/shell/components/private-app-shell", () => ({
-  PrivateAppShell: () => null,
-}));
-
-vi.mock("@/lib/platform/auth.server", () => ({
-  resolveAuthenticatedSession,
-}));
-
-vi.mock("@/lib/platform/endpoints.server", () => ({
-  platformAuthEndpoints: {
-    operatorConsole: "http://127.0.0.1:8000/ops/login/",
-  },
-}));
-
-vi.mock("@/lib/platform/env.server", () => ({
-  env: {
-    MW_TEMPLATE_APP_NAME: "PandaWork Combined Starter",
-    MW_ENABLE_RUNTIME_COMMAND_EXAMPLE: false,
-  },
-}));
-
-describe("authenticated app home page", () => {
-  beforeEach(() => {
-    vi.clearAllMocks();
-    vi.resetModules();
-  });
-
-  it("renders the private shell after the auth guard resolves", async () => {
-    resolveAuthenticatedSession.mockResolvedValue({
-      authenticated: true,
-      user: {
-        id: "user-1",
-        username: "demo-user",
-        email: "demo@example.com",
-      },
-      active_tenant_id: "tenant-1",
-      active_tenant: {
-        tenant_id: "tenant-1",
-        tenant_slug: "alpha",
-        tenant_name: "Alpha",
-        role: "admin",
-      },
-      memberships: [
-        {
-          tenant_id: "tenant-1",
-          tenant_slug: "alpha",
-          tenant_name: "Alpha",
-          role: "admin",
-        },
-      ],
-    });
-
-    const page = await import("./page");
-
-    await expect(page.default()).resolves.toBeDefined();
-    expect(resolveAuthenticatedSession).toHaveBeenCalledTimes(1);
-  });
-});

package/assets/templates/next-tenant-app/src/app/app/private-content-source.test.ts

@@ -1,88 +0,0 @@
-import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-
-const originalEnv = { ...process.env };
-const resolveAuthenticatedSession = vi.fn();
-
-function restoreProcessEnv() {
-  for (const key of Object.keys(process.env)) {
-    if (!(key in originalEnv)) {
-      delete process.env[key];
-    }
-  }
-
-  Object.assign(process.env, originalEnv);
-}
-
-function applyPrivateOnlyServerEnv() {
-  restoreProcessEnv();
-  process.env.MW_PLATFORM_BASE_URL = "http://127.0.0.1:8000";
-  process.env.MW_PUBLIC_CONTENT_SOURCE = "none";
-  process.env.MW_TEMPLATE_APP_NAME = "Private Only Workspace";
-  process.env.MW_ENABLE_RUNTIME_COMMAND_EXAMPLE = "false";
-  delete process.env.MW_CONTENT_API_TOKEN;
-  delete process.env.MW_PUBLIC_BASE_URL;
-  delete process.env.MW_PUBLIC_SITE_PROPERTY_KEY;
-}
-
-vi.mock("@/features/shell/components/private-app-shell", () => ({
-  PrivateAppShell: () => null,
-}));
-
-vi.mock("@/lib/platform/auth.server", () => ({
-  resolveAuthenticatedSession,
-}));
-
-vi.mock("@/lib/platform/endpoints.server", () => ({
-  platformAuthEndpoints: {
-    operatorConsole: "http://127.0.0.1:8000/ops/login/",
-  },
-}));
-
-describe("private app routes with disabled public content", () => {
-  beforeEach(() => {
-    vi.clearAllMocks();
-    vi.resetModules();
-    applyPrivateOnlyServerEnv();
-    resolveAuthenticatedSession.mockResolvedValue({
-      authenticated: true,
-      user: {
-        id: "user-1",
-        username: "demo-user",
-        email: "demo@example.com",
-      },
-      active_tenant_id: "tenant-1",
-      active_tenant: {
-        tenant_id: "tenant-1",
-        tenant_slug: "alpha",
-        tenant_name: "Alpha",
-        role: "admin",
-      },
-      memberships: [
-        {
-          tenant_id: "tenant-1",
-          tenant_slug: "alpha",
-          tenant_name: "Alpha",
-          role: "admin",
-        },
-      ],
-    });
-  });
-
-  afterEach(() => {
-    restoreProcessEnv();
-    vi.resetModules();
-  });
-
-  it("imports /app entrypoints without CMS or public base environment", async () => {
-    const [layout, page] = await Promise.all([
-      import("./layout"),
-      import("./page"),
-    ]);
-
-    await expect(layout.default({ children: "workspace" })).resolves.toBe(
-      "workspace",
-    );
-    await expect(page.default()).resolves.toBeDefined();
-    expect(resolveAuthenticatedSession).toHaveBeenCalledTimes(2);
-  });
-});