sea-dev 1.0.0

package/apps/main/src/routes/_public/route.tsx

@@ -0,0 +1,15 @@
+import { createFileRoute, Outlet } from "@tanstack/react-router";
+
+export const Route = createFileRoute("/_public")({
+  component: PublicLayout,
+});
+
+function PublicLayout() {
+  return (
+    <main className="flex h-screen w-full items-center justify-center bg-[url('/bg.svg')] bg-cover bg-center dark:bg-[url('/bg-dark.svg')]">
+      <div className="border-primary bg-background mx-auto flex w-[90vw] items-center justify-center rounded-xl border-3 px-4 py-8 sm:w-lg">
+        <Outlet />
+      </div>
+    </main>
+  );
+}

package/apps/main/src/routes/_public/sign-in.tsx

@@ -0,0 +1,111 @@
+import { auth } from "@/lib/auth";
+import { authClient } from "@/lib/auth-client";
+import { createFileRoute, redirect, useNavigate } from "@tanstack/react-router";
+import { createServerFn } from "@tanstack/react-start";
+import { getWebRequest } from "@tanstack/react-start/server";
+import type { FormEvent } from "react";
+import { useEffect } from "react";
+import * as z from "zod/v4";
+import { SignInUp } from "./-components/sign-in-up";
+
+const searchSchema = z.object({
+  error: z.string().optional(),
+  inviteId: z.string().optional(),
+  popupSuccess: z.boolean().optional(),
+});
+
+const getUserServerFn = createServerFn()
+  .validator((data: { popupSuccess?: boolean }) => data)
+  .handler(async ({ data }) => {
+    const request = getWebRequest();
+    if (!request) return;
+    const { headers } = request;
+    const session = await auth.api.getSession({ headers });
+    // Don't redirect if this is a popup success callback - let it close itself
+    if (session && !data.popupSuccess) {
+      throw redirect({ to: "/" });
+    }
+  });
+
+export const Route = createFileRoute("/_public/sign-in")({
+  validateSearch: searchSchema,
+  beforeLoad: async ({ search }) =>
+    getUserServerFn({ data: { popupSuccess: search.popupSuccess } }),
+  component: RouteComponent,
+});
+
+function RouteComponent() {
+  const navigate = useNavigate();
+  const { error, inviteId, popupSuccess } = Route.useSearch();
+  const callbackURL = inviteId ? `/invite/${inviteId}` : "/";
+
+  // If this is a popup and login succeeded, notify parent and close
+  useEffect(() => {
+    if (popupSuccess && window.opener) {
+      window.opener.postMessage({ status: "loggedIn" }, window.opener.origin);
+      setTimeout(() => window.close(), 1000);
+    }
+  }, [popupSuccess]);
+
+  const onClickSocial = async (provider: "google") => {
+    // Check if this is a popup window
+    const isPopup = window.opener && window.opener !== window;
+
+    await authClient.signIn.social({
+      provider,
+      callbackURL: isPopup ? "/sign-in?popupSuccess=true" : callbackURL,
+    });
+  };
+
+  const onSubmitDevOnly = async (event: FormEvent<HTMLFormElement>) => {
+    event.preventDefault();
+    const formData = new FormData(event.currentTarget);
+    const email = formData.get("email") as string;
+    const password = formData.get("password") as string;
+    await authClient.signIn.email(
+      { email, password, callbackURL },
+      {
+        onError: async (ctx) => {
+          await navigate({ to: "/sign-in", search: { error: ctx.error.code } });
+        },
+        onSuccess: async () => {
+          if (inviteId) {
+            await navigate({ to: "/invite/$inviteId", params: { inviteId } });
+          } else {
+            await navigate({ to: "/" });
+          }
+        },
+      },
+    );
+  };
+
+  const onSubmitOtp = async (event: FormEvent<HTMLFormElement>) => {
+    event.preventDefault();
+    const formData = new FormData(event.currentTarget);
+    const email = formData.get("email") as string;
+    await authClient.emailOtp.sendVerificationOtp(
+      { email, type: "sign-in" },
+      {
+        onError: async (ctx) => {
+          await navigate({ to: "/sign-up", search: { error: ctx.error.code } });
+        },
+        onSuccess: async () => {
+          document.cookie = `seadev_otp_email=${email}; path=/; max-age=3600`;
+          await navigate({ to: "/otp", search: { inviteId } });
+        },
+      },
+    );
+  };
+
+  return (
+    <SignInUp
+      variant="in"
+      onClickSocial={onClickSocial}
+      onSubmitDevOnly={onSubmitDevOnly}
+      onSubmitOtp={onSubmitOtp}
+      error={error}
+      showEmail={process.env.NODE_ENV !== "production"}
+      inviteId={inviteId}
+    />
+  );
+}

package/apps/main/src/routes/_public/sign-up.tsx

@@ -0,0 +1,114 @@
+import { auth } from "@/lib/auth";
+import { authClient } from "@/lib/auth-client";
+import { invariant } from "@sea/util/invariant";
+import { createFileRoute, redirect, useNavigate } from "@tanstack/react-router";
+import { createServerFn } from "@tanstack/react-start";
+import { getWebRequest } from "@tanstack/react-start/server";
+import type { FormEvent } from "react";
+import { useEffect } from "react";
+import * as z from "zod/v4";
+import { SignInUp } from "./-components/sign-in-up";
+
+const searchSchema = z.object({
+  error: z.string().optional(),
+  inviteId: z.string().optional(),
+  popupSuccess: z.boolean().optional(),
+});
+
+const getUserServerFn = createServerFn()
+  .validator((data: { popupSuccess?: boolean }) => data)
+  .handler(async ({ data }) => {
+    const request = getWebRequest();
+    if (!request) return;
+    const { headers } = request;
+    const session = await auth.api.getSession({ headers });
+    // Don't redirect if this is a popup success callback - let it close itself
+    if (session && !data.popupSuccess) {
+      throw redirect({ to: "/" });
+    }
+  });
+
+export const Route = createFileRoute("/_public/sign-up")({
+  validateSearch: searchSchema,
+  beforeLoad: async ({ search }) =>
+    getUserServerFn({ data: { popupSuccess: search.popupSuccess } }),
+  component: RouteComponent,
+});
+
+function RouteComponent() {
+  const navigate = useNavigate();
+  const { error, inviteId, popupSuccess } = Route.useSearch();
+  const callbackURL = inviteId ? `/invite/${inviteId}` : "/";
+
+  // If this is a popup and login succeeded, notify parent and close
+  useEffect(() => {
+    if (popupSuccess && window.opener) {
+      window.opener.postMessage({ status: "loggedIn" }, window.opener.origin);
+      setTimeout(() => window.close(), 1000);
+    }
+  }, [popupSuccess]);
+
+  const onClickSocial = async (provider: "google") => {
+    // Check if this is a popup window
+    const isPopup = window.opener && window.opener !== window;
+
+    await authClient.signIn.social({
+      provider,
+      callbackURL: isPopup ? "/sign-up?popupSuccess=true" : callbackURL,
+    });
+  };
+
+  const onSubmitDevOnly = async (event: FormEvent<HTMLFormElement>) => {
+    event.preventDefault();
+    const formData = new FormData(event.currentTarget);
+    const email = formData.get("email") as string;
+    const password = formData.get("password") as string;
+    const [name] = email.split("@");
+    invariant(name);
+    await authClient.signUp.email(
+      { email, password, name, callbackURL },
+      {
+        onError: async (ctx) => {
+          await navigate({ to: "/sign-up", search: { error: ctx.error.code } });
+        },
+        onSuccess: async () => {
+          if (inviteId) {
+            await navigate({ to: "/invite/$inviteId", params: { inviteId } });
+          } else {
+            await navigate({ to: "/" });
+          }
+        },
+      },
+    );
+  };
+
+  const onSubmitOtp = async (event: FormEvent<HTMLFormElement>) => {
+    event.preventDefault();
+    const formData = new FormData(event.currentTarget);
+    const email = formData.get("email") as string;
+    await authClient.emailOtp.sendVerificationOtp(
+      { email, type: "sign-in" },
+      {
+        onError: async (ctx) => {
+          await navigate({ to: "/sign-up", search: { error: ctx.error.code } });
+        },
+        onSuccess: async () => {
+          document.cookie = `seadev_otp_email=${email}; path=/; max-age=3600`;
+          await navigate({ to: "/otp", search: { inviteId } });
+        },
+      },
+    );
+  };
+
+  return (
+    <SignInUp
+      variant="up"
+      onClickSocial={onClickSocial}
+      onSubmitDevOnly={onSubmitDevOnly}
+      onSubmitOtp={onSubmitOtp}
+      error={error}
+      showEmail={process.env.NODE_ENV !== "production"}
+      inviteId={inviteId}
+    />
+  );
+}

package/apps/main/src/routes/api/auth/$.ts

@@ -0,0 +1,11 @@
+import { auth } from "@/lib/auth";
+import { createServerFileRoute } from "@tanstack/react-start/server";
+
+export const ServerRoute = createServerFileRoute("/api/auth/$").methods({
+  GET: ({ request }) => {
+    return auth.handler(request);
+  },
+  POST: ({ request }) => {
+    return auth.handler(request);
+  },
+});

package/apps/main/src/routes/api/billing/paid.ts

@@ -0,0 +1,42 @@
+import { polarClient } from "@/clients/polar";
+import { productMetadataSchema } from "@/lib/billing";
+import { membershipServerMiddleware } from "@/middleware";
+import { db, schema } from "@sea/db";
+import { redirect } from "@tanstack/react-router";
+import { createServerFileRoute } from "@tanstack/react-start/server";
+import { eq } from "drizzle-orm";
+
+export const ServerRoute = createServerFileRoute("/api/billing/paid")
+  .middleware([membershipServerMiddleware])
+  .methods({
+    GET: async ({ request, context: { member } }) => {
+      const url = new URL(request.url);
+      const checkoutId = url.searchParams.get("checkout_id");
+      if (!checkoutId) {
+        throw redirect({ to: "/settings/billing", search: { status: "error" } });
+      }
+
+      const checkout = await polarClient.checkouts.get({ id: checkoutId });
+      const { status, productId } = checkout;
+
+      if (status !== "succeeded") {
+        throw redirect({ to: "/settings/billing", search: { status: "error" } });
+      }
+
+      const product = await polarClient.products.get({ id: productId });
+      const metadata = productMetadataSchema.parse(product.metadata);
+      const { plan } = metadata;
+
+      await db
+        .update(schema.organization)
+        .set({
+          plan,
+          // TODO revisit if we can do anything about this
+          // the checkout.subscription is always null, so don't know paidUntil
+          paidUntil: undefined,
+        })
+        .where(eq(schema.organization.id, member.organizationId));
+
+      throw redirect({ to: "/settings/billing", search: { status: "success" } });
+    },
+  });

package/apps/main/src/routes/api/billing/webhooks.ts

@@ -0,0 +1,70 @@
+import { productMetadataSchema, subscriptionMetadataSchema } from "@/lib/billing";
+import { getAppConfig } from "@/lib/config";
+import { Webhooks } from "@polar-sh/tanstack-start";
+import { db, schema } from "@sea/db";
+import { invariant } from "@sea/util/invariant";
+import { createServerFileRoute } from "@tanstack/react-start/server";
+import { eq } from "drizzle-orm";
+
+const {
+  polar: { webhookSecret },
+} = getAppConfig();
+
+export const ServerRoute = createServerFileRoute("/api/billing/webhooks").methods({
+  POST: Webhooks({
+    webhookSecret,
+    onSubscriptionUpdated: async (payload) => {
+      const { data: subscription } = payload;
+      const { id: subscriptionId, product, customer } = subscription;
+      const { id: customerId, externalId } = customer;
+      console.log("polar webhook: onSubscriptionUpdated", { subscriptionId });
+      const { memberId } = subscriptionMetadataSchema.parse(subscription.metadata);
+
+      const paidUntil = subscription.currentPeriodEnd;
+      if (!paidUntil) {
+        console.log("polar webhook: no period end", { subscriptionId });
+        return;
+      }
+
+      const metadata = productMetadataSchema.parse(product.metadata);
+      const { plan } = metadata;
+
+      const member = await db.query.member.findFirst({
+        where: eq(schema.user.id, memberId),
+        with: { organization: true },
+      });
+      invariant(member, "no member found for subscription");
+      const { userId, organization } = member;
+
+      if (externalId !== userId) {
+        console.error("polar webhook: externalId mismatch", { externalId, userId });
+        throw new Error("polar webhook: externalId mismatch");
+      }
+      if (customerId !== organization.customerId) {
+        console.error("polar webhook: customerId mismatch", {
+          customerId,
+          ourCustomerId: organization.customerId,
+        });
+        throw new Error("polar webhook: customerId mismatch");
+      }
+
+      const [updatedOrg] = await db
+        .update(schema.organization)
+        .set({
+          paidUntil,
+          plan,
+          subscriptionId,
+        })
+        .where(eq(schema.organization.id, member.organizationId))
+        .returning();
+      invariant(updatedOrg, `polar webhook: failed to update org ${member.organizationId}`);
+
+      console.log("polar webhook: org updated", {
+        organizationId: member.organizationId,
+        subscriptionId,
+        paidUntil,
+        plan,
+      });
+    },
+  }),
+});

package/apps/main/src/routes/api/chat/agent.ts

@@ -0,0 +1,40 @@
+import { getAppConfig } from "@/lib/config";
+import { membershipServerMiddleware } from "@/middleware";
+import { chatStreamAgent, getChatModel } from "@sea/core";
+import { uiMessageSchema } from "@sea/db/schema";
+import { chatTypeSchema } from "@sea/schemas/core/chat";
+import { createServerFileRoute } from "@tanstack/react-start/server";
+import type { UIMessage } from "ai";
+import * as z from "zod/v4";
+
+const bodySchema = z.object({
+  message: uiMessageSchema,
+  conversationId: z.string(),
+  chatType: chatTypeSchema,
+  noRespond: z.boolean().default(false),
+});
+
+export const ServerRoute = createServerFileRoute("/api/chat/agent")
+  .middleware([membershipServerMiddleware])
+  .methods({
+    POST: async ({ request, context: { member } }) => {
+      const { message, conversationId, chatType, noRespond } = bodySchema.parse(
+        await request.json(),
+      );
+
+      const config = getAppConfig();
+      const model = getChatModel({
+        aiGatewayApiKey: config.vercel.aiGatewayApiKey,
+        modelId: "openai/gpt-5.2",
+      });
+
+      return await chatStreamAgent(
+        model,
+        member,
+        conversationId,
+        message as UIMessage,
+        chatType,
+        noRespond,
+      );
+    },
+  });

package/apps/main/src/routes/api/chat/key.ts

@@ -0,0 +1,42 @@
+import { getAppConfig } from "@/lib/config";
+import { chatStream, getChatModel } from "@sea/core";
+import { checkApiKeyWithSubmission } from "@sea/dal/api-key";
+import { uiMessageSchema } from "@sea/db/schema";
+import { chatTypeSchema } from "@sea/schemas/core/chat";
+import { notFound } from "@tanstack/react-router";
+import { createServerFileRoute } from "@tanstack/react-start/server";
+import type { UIMessage } from "ai";
+import * as z from "zod/v4";
+
+const bodySchema = z.object({
+  apiKey: z.string(),
+  message: uiMessageSchema,
+  conversationId: z.string(),
+  chatType: chatTypeSchema,
+  noRespond: z.boolean().default(false),
+});
+
+export const ServerRoute = createServerFileRoute("/api/chat/key").methods({
+  POST: async ({ request }) => {
+    const bodyRaw = await request.json();
+    const data = bodySchema.parse(bodyRaw);
+    const { conversationId, chatType, apiKey: key, noRespond } = data;
+    const message = data.message as UIMessage;
+
+    const { success, data: match } = await checkApiKeyWithSubmission({ key });
+    if (!success) {
+      throw notFound();
+    }
+    const { member } = match;
+
+    const config = getAppConfig();
+    const model = getChatModel({
+      aiGatewayApiKey: config.vercel.aiGatewayApiKey,
+      modelId: "openai/gpt-5.2",
+    });
+
+    const stream = await chatStream(model, member, conversationId, message, chatType, noRespond);
+
+    return stream;
+  },
+});

package/apps/main/src/routes/api/chat/member.ts

@@ -0,0 +1,35 @@
+import { getAppConfig } from "@/lib/config";
+import { membershipServerMiddleware } from "@/middleware";
+import { chatStream, getChatModel } from "@sea/core";
+import { uiMessageSchema } from "@sea/db/schema";
+import { chatTypeSchema } from "@sea/schemas/core/chat";
+import { createServerFileRoute } from "@tanstack/react-start/server";
+import type { UIMessage } from "ai";
+import * as z from "zod/v4";
+
+const bodySchema = z.object({
+  message: uiMessageSchema,
+  conversationId: z.string(),
+  chatType: chatTypeSchema,
+  noRespond: z.boolean().default(false),
+});
+
+export const ServerRoute = createServerFileRoute("/api/chat/member")
+  .middleware([membershipServerMiddleware])
+  .methods({
+    POST: async ({ request, context: { member } }) => {
+      const bodyRaw = await request.json();
+      const data = bodySchema.parse(bodyRaw);
+      const { conversationId, chatType, noRespond } = data;
+      const message = data.message as UIMessage;
+
+      const config = getAppConfig();
+      const model = getChatModel({
+        aiGatewayApiKey: config.vercel.aiGatewayApiKey,
+        modelId: "openai/gpt-5.2",
+      });
+
+      const stream = await chatStream(model, member, conversationId, message, chatType, noRespond);
+      return stream;
+    },
+  });

package/apps/main/src/routes/api/test/index.ts

@@ -0,0 +1,19 @@
+import { checkApiKey } from "@sea/dal/api-key";
+import { createServerFileRoute } from "@tanstack/react-start/server";
+
+export const ServerRoute = createServerFileRoute("/api/test/").methods({
+  GET: async ({ request }) => {
+    const apiKey = request.headers.get("x-api-key");
+    if (!apiKey) {
+      return new Response("Unauthorized", { status: 401 });
+    }
+
+    const { success, data } = await checkApiKey(apiKey);
+
+    if (!success) {
+      return new Response("Unauthorized", { status: 401 });
+    }
+
+    return new Response(`Authed as ${data.member.user.name}`, { status: 200 });
+  },
+});

package/apps/main/src/server.tsx

@@ -0,0 +1,6 @@
+import { createStartHandler, defaultStreamHandler } from "@tanstack/react-start/server";
+import { createRouter } from "./router";
+
+export default createStartHandler({
+  createRouter,
+})(defaultStreamHandler);

package/apps/main/src/styles/app.css

@@ -0,0 +1,23 @@
+/* Can also import css from ui like this, but right now importing directly into __root */
+@import "@sea/ui/styles/style.css";
+
+@source "../../libs/ui/*.{js,ts,jsx,tsx}";
+
+@layer utilities {
+  .bg-subtle-grid {
+    background-color: var(--background);
+    background-image:
+      linear-gradient(
+        to right,
+        color-mix(in oklch, var(--color-brand-600) 6%, transparent) 1px,
+        transparent 1px
+      ),
+      linear-gradient(
+        to bottom,
+        color-mix(in oklch, var(--color-brand-600) 6%, transparent) 1px,
+        transparent 1px
+      );
+    background-size: 32px 32px;
+    background-position: top left;
+  }
+}

package/apps/main/src/vite-env.d.ts

@@ -0,0 +1,7 @@
+/// <reference types="vite/client" />
+/// <reference types="vite/types/importMeta.d.ts" />
+
+declare module "*.css?url" {
+  const url: string;
+  export default url;
+}

package/apps/main/test.http

@@ -0,0 +1,6 @@
+### Chat endpoint
+POST http://localhost:3000/api/chat
+
+### Test API Key endpoint
+GET http://localhost:3000/api/test
+x-api-key: sk-sea-mtpujgzskgrqie3qatzyq3gf6

package/apps/main/tsconfig.json

@@ -0,0 +1,17 @@
+{
+  "compilerOptions": {
+    "jsx": "react-jsx",
+    "moduleResolution": "bundler",
+    "module": "ESNext",
+    "target": "ES2022",
+    "skipLibCheck": true,
+    "strict": true,
+    "noUncheckedIndexedAccess": true,
+    "baseUrl": ".",
+    "paths": {
+      "@/*": ["./src/*"]
+    }
+  },
+  "include": ["src/**/*"],
+  "exclude": [".tanstack", "dist"]
+}

package/apps/main/vite.config.ts

@@ -0,0 +1,24 @@
+import { tanstackStart } from "@tanstack/react-start/plugin/vite";
+import react from "@vitejs/plugin-react";
+import path from "path";
+import { defineConfig } from "vite";
+import tsConfigPaths from "vite-tsconfig-paths";
+
+const DEV = process.env.NODE_ENV === "development";
+const allowedHosts = DEV ? true : undefined;
+
+export default defineConfig({
+  server: {
+    port: 3000,
+    allowedHosts,
+  },
+  build: {
+    sourcemap: false,
+  },
+  resolve: {
+    alias: {
+      "@": path.resolve(__dirname, "./src"),
+    },
+  },
+  plugins: [tsConfigPaths(), tanstackStart({ customViteReactPlugin: true }), react()],
+});

package/apps/main/vitest.config.js

@@ -0,0 +1,17 @@
+import react from "@vitejs/plugin-react";
+import tsconfigPaths from "vite-tsconfig-paths";
+import { defineConfig } from "vitest/config";
+
+export default defineConfig({
+  plugins: [tsconfigPaths(), react()],
+  test: {
+    exclude: ["node_modules", "e2e"],
+    environment: "jsdom",
+    environmentMatchGlobs: [
+      // Use node environment for database tests
+      ["**/_tests/**", "node"],
+      ["**/dal/**", "node"],
+      ["**/lib/auth.test.ts", "node"],
+    ],
+  },
+});