seamless-cli 0.2.0 → 0.5.0

package/dist/core/images.js

@@ -0,0 +1,11 @@
+export const POSTGRES_IMAGE = "postgres:17";
+export const SEAMLESS_AUTH_API_VERSION = "v0.2.1";
+export const SEAMLESS_AUTH_API_IMAGE = `ghcr.io/fells-code/seamless-auth-api:${SEAMLESS_AUTH_API_VERSION}`;
+export const SEAMLESS_AUTH_ADMIN_DASHBOARD_VERSION = "v0.1.0";
+export const SEAMLESS_AUTH_ADMIN_DASHBOARD_IMAGE = `ghcr.io/fells-code/seamless-auth-admin-dashboard:${SEAMLESS_AUTH_ADMIN_DASHBOARD_VERSION}`;
+// The starter templates monorepo the CLI scaffolds from. Pinned to a tag so a given
+// CLI version always produces the same project. Override the ref with
+// SEAMLESS_TEMPLATES_REF, or point at a local checkout with SEAMLESS_TEMPLATES_DIR.
+export const SEAMLESS_TEMPLATES_REPO = "fells-code/seamless-templates";
+export const SEAMLESS_TEMPLATES_REF = "v0.2.1";
+//# sourceMappingURL=images.js.map

package/dist/core/images.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"images.js","sourceRoot":"","sources":["../../src/core/images.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,cAAc,GAAG,aAAa,CAAC;AAE5C,MAAM,CAAC,MAAM,yBAAyB,GAAG,QAAQ,CAAC;AAElD,MAAM,CAAC,MAAM,uBAAuB,GAAG,wCAAwC,yBAAyB,EAAE,CAAC;AAE3G,MAAM,CAAC,MAAM,qCAAqC,GAAG,QAAQ,CAAC;AAE9D,MAAM,CAAC,MAAM,mCAAmC,GAAG,oDAAoD,qCAAqC,EAAE,CAAC;AAE/I,oFAAoF;AACpF,sEAAsE;AACtE,oFAAoF;AACpF,MAAM,CAAC,MAAM,uBAAuB,GAAG,+BAA+B,CAAC;AAEvE,MAAM,CAAC,MAAM,sBAAsB,GAAG,QAAQ,CAAC"}

package/dist/core/oauthProviders.js

@@ -0,0 +1,89 @@
+import { generateSecret } from "./secrets.js";
+// The web app's OAuth callback route. The scaffolded web container serves the app
+// at :5173, and the react-oauth template redirects to /oauth/callback there.
+const REDIRECT_URI = "http://localhost:5173/oauth/callback";
+export const OAUTH_PROVIDER_CATALOG = [
+    {
+        id: "google",
+        label: "Google",
+        authorizationUrl: "https://accounts.google.com/o/oauth2/v2/auth",
+        tokenUrl: "https://oauth2.googleapis.com/token",
+        userInfoUrl: "https://openidconnect.googleapis.com/v1/userinfo",
+        scopes: ["openid", "email", "profile"],
+        pkce: true,
+    },
+    {
+        id: "github",
+        label: "GitHub",
+        authorizationUrl: "https://github.com/login/oauth/authorize",
+        tokenUrl: "https://github.com/login/oauth/access_token",
+        userInfoUrl: "https://api.github.com/user",
+        scopes: ["read:user", "user:email"],
+        extra: { subjectJsonPath: "id", nameJsonPath: "name" },
+    },
+    {
+        id: "microsoft",
+        label: "Microsoft",
+        authorizationUrl: "https://login.microsoftonline.com/common/oauth2/v2.0/authorize",
+        tokenUrl: "https://login.microsoftonline.com/common/oauth2/v2.0/token",
+        userInfoUrl: "https://graph.microsoft.com/oidc/userinfo",
+        scopes: ["openid", "email", "profile"],
+        pkce: true,
+    },
+    {
+        id: "gitlab",
+        label: "GitLab",
+        authorizationUrl: "https://gitlab.com/oauth/authorize",
+        tokenUrl: "https://gitlab.com/oauth/token",
+        userInfoUrl: "https://gitlab.com/oauth/userinfo",
+        scopes: ["openid", "email", "profile"],
+        pkce: true,
+    },
+];
+function secretEnvName(id) {
+    return `${id.toUpperCase().replace(/-/g, "_")}_CLIENT_SECRET`;
+}
+// Turns the chosen providers into the auth-server env: the OAUTH_PROVIDERS JSON, a
+// per-provider client-secret env var, and OAUTH_STATE_SECRET. A provider missing
+// either credential is scaffolded disabled (so the stack still boots) and reported
+// in `pending` so the CLI can tell the user what to fill in.
+export function buildOAuthAuthEnv(providers) {
+    const env = {};
+    const pending = [];
+    const configs = providers.map(({ catalog, clientId, clientSecret }) => {
+        const envName = secretEnvName(catalog.id);
+        const ready = clientId.length > 0 && clientSecret.length > 0;
+        if (!ready)
+            pending.push(catalog.label);
+        env[envName] = clientSecret;
+        return {
+            id: catalog.id,
+            name: catalog.label,
+            enabled: ready,
+            clientId: clientId || `REPLACE_WITH_${catalog.id.toUpperCase()}_CLIENT_ID`,
+            clientSecretEnv: envName,
+            authorizationUrl: catalog.authorizationUrl,
+            tokenUrl: catalog.tokenUrl,
+            userInfoUrl: catalog.userInfoUrl,
+            scopes: catalog.scopes,
+            redirectUri: REDIRECT_URI,
+            redirectUris: [REDIRECT_URI],
+            ...(catalog.pkce ? { pkce: true } : {}),
+            ...(catalog.extra ?? {}),
+        };
+    });
+    env.OAUTH_PROVIDERS = JSON.stringify(configs);
+    env.OAUTH_STATE_SECRET = generateSecret(32);
+    return { env, pending };
+}
+// Ensures a login method is present in a comma-separated LOGIN_METHODS value.
+export function withLoginMethod(current, method) {
+    const methods = (current ?? "passkey,magic_link")
+        .split(",")
+        .map((m) => m.trim())
+        .filter(Boolean);
+    if (!methods.includes(method))
+        methods.push(method);
+    return methods.join(",");
+}
+//# sourceMappingURL=oauthProviders.js.map

package/dist/core/oauthProviders.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthProviders.js","sourceRoot":"","sources":["../../src/core/oauthProviders.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,kFAAkF;AAClF,6EAA6E;AAC7E,MAAM,YAAY,GAAG,sCAAsC,CAAC;AAmB5D,MAAM,CAAC,MAAM,sBAAsB,GAAgC;IACjE;QACE,EAAE,EAAE,QAAQ;QACZ,KAAK,EAAE,QAAQ;QACf,gBAAgB,EAAE,8CAA8C;QAChE,QAAQ,EAAE,qCAAqC;QAC/C,WAAW,EAAE,kDAAkD;QAC/D,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;QACtC,IAAI,EAAE,IAAI;KACX;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,KAAK,EAAE,QAAQ;QACf,gBAAgB,EAAE,0CAA0C;QAC5D,QAAQ,EAAE,6CAA6C;QACvD,WAAW,EAAE,6BAA6B;QAC1C,MAAM,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC;QACnC,KAAK,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE;KACvD;IACD;QACE,EAAE,EAAE,WAAW;QACf,KAAK,EAAE,WAAW;QAClB,gBAAgB,EACd,gEAAgE;QAClE,QAAQ,EAAE,4DAA4D;QACtE,WAAW,EAAE,2CAA2C;QACxD,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;QACtC,IAAI,EAAE,IAAI;KACX;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,KAAK,EAAE,QAAQ;QACf,gBAAgB,EAAE,oCAAoC;QACtD,QAAQ,EAAE,gCAAgC;QAC1C,WAAW,EAAE,mCAAmC;QAChD,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;QACtC,IAAI,EAAE,IAAI;KACX;CACF,CAAC;AASF,SAAS,aAAa,CAAC,EAAU;IAC/B,OAAO,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,gBAAgB,CAAC;AAChE,CAAC;AAED,mFAAmF;AACnF,iFAAiF;AACjF,mFAAmF;AACnF,6DAA6D;AAC7D,MAAM,UAAU,iBAAiB,CAAC,SAAmC;IAInE,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE;QACpE,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;QAC7D,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAExC,GAAG,CAAC,OAAO,CAAC,GAAG,YAAY,CAAC;QAE5B,OAAO;YACL,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,IAAI,EAAE,OAAO,CAAC,KAAK;YACnB,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,QAAQ,IAAI,gBAAgB,OAAO,CAAC,EAAE,CAAC,WAAW,EAAE,YAAY;YAC1E,eAAe,EAAE,OAAO;YACxB,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;YAC1C,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,WAAW,EAAE,YAAY;YACzB,YAAY,EAAE,CAAC,YAAY,CAAC;YAC5B,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;SACzB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC9C,GAAG,CAAC,kBAAkB,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;IAE5C,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;AAC1B,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,eAAe,CAAC,OAA2B,EAAE,MAAc;IACzE,MAAM,OAAO,GAAG,CAAC,OAAO,IAAI,oBAAoB,CAAC;SAC9C,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACpD,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC3B,CAAC"}

package/dist/core/templates.js

@@ -0,0 +1,185 @@
+import fs from "fs";
+import path from "path";
+import AdmZip from "adm-zip";
+import { VERSION } from "../index.js";
+import { parseEnvString, writeEnv } from "./env.js";
+import { generateSecret } from "./secrets.js";
+import { SEAMLESS_TEMPLATES_REF, SEAMLESS_TEMPLATES_REPO } from "./images.js";
+// Build artifacts and local-only files that must never be copied into a scaffold,
+// even if a local template checkout has them lying around.
+const IGNORED_NAMES = new Set([
+    "node_modules",
+    ".git",
+    "dist",
+    "build",
+    ".next",
+    "out",
+    "coverage",
+    ".DS_Store",
+    ".env",
+    ".env.local",
+]);
+export async function openTemplateSource() {
+    const localDir = process.env.SEAMLESS_TEMPLATES_DIR;
+    if (localDir) {
+        return openLocalSource(path.resolve(localDir));
+    }
+    return openRemoteSource(SEAMLESS_TEMPLATES_REPO, process.env.SEAMLESS_TEMPLATES_REF ?? SEAMLESS_TEMPLATES_REF);
+}
+function readRegistry(raw) {
+    const registry = JSON.parse(raw);
+    if (!registry || !Array.isArray(registry.templates)) {
+        throw new Error("Template registry is malformed (missing templates array).");
+    }
+    return registry;
+}
+function openLocalSource(dir) {
+    const registryPath = path.join(dir, "registry.json");
+    if (!fs.existsSync(registryPath)) {
+        throw new Error(`SEAMLESS_TEMPLATES_DIR is set to ${dir}, but no registry.json was found there.`);
+    }
+    const registry = readRegistry(fs.readFileSync(registryPath, "utf-8"));
+    return {
+        registry,
+        async readManifest(entry) {
+            const manifestPath = path.join(dir, entry.path, "template.json");
+            return JSON.parse(fs.readFileSync(manifestPath, "utf-8"));
+        },
+        async copyInto(entry, destDir) {
+            copyDir(path.join(dir, entry.path), destDir);
+        },
+    };
+}
+async function openRemoteSource(repo, ref) {
+    const registryUrl = `https://raw.githubusercontent.com/${repo}/${ref}/registry.json`;
+    const res = await fetch(registryUrl);
+    if (!res.ok) {
+        throw new Error(`Failed to fetch the template registry (${res.status}) from ${registryUrl}.`);
+    }
+    const registry = readRegistry(await res.text());
+    // The whole monorepo is downloaded once, lazily, and shared across every template
+    // a single scaffold pulls in.
+    let archive = null;
+    const ensureArchive = async () => {
+        if (archive)
+            return archive;
+        const url = `https://github.com/${repo}/archive/${ref}.zip`;
+        const zipRes = await fetch(url);
+        if (!zipRes.ok) {
+            throw new Error(`Failed to download templates (${zipRes.status}) from ${url}.`);
+        }
+        const zip = new AdmZip(Buffer.from(await zipRes.arrayBuffer()));
+        const first = zip.getEntries()[0];
+        if (!first) {
+            throw new Error("Downloaded templates archive was empty.");
+        }
+        // GitHub archives nest everything under a single top-level directory.
+        const root = first.entryName.split("/")[0];
+        archive = { zip, root };
+        return archive;
+    };
+    return {
+        registry,
+        async readManifest(entry) {
+            const { zip, root } = await ensureArchive();
+            const name = `${root}/${entry.path}/template.json`;
+            const found = zip.getEntry(name);
+            if (!found) {
+                throw new Error(`Template "${entry.id}" is missing template.json in the registry.`);
+            }
+            return JSON.parse(found.getData().toString("utf-8"));
+        },
+        async copyInto(entry, destDir) {
+            const { zip, root } = await ensureArchive();
+            const prefix = `${root}/${entry.path}/`;
+            for (const e of zip.getEntries()) {
+                if (e.isDirectory || !e.entryName.startsWith(prefix))
+                    continue;
+                const rel = e.entryName.slice(prefix.length);
+                if (rel.split("/").some((seg) => IGNORED_NAMES.has(seg)))
+                    continue;
+                const out = path.join(destDir, rel);
+                fs.mkdirSync(path.dirname(out), { recursive: true });
+                fs.writeFileSync(out, e.getData());
+            }
+        },
+    };
+}
+function copyDir(src, dest) {
+    fs.mkdirSync(dest, { recursive: true });
+    for (const name of fs.readdirSync(src)) {
+        if (IGNORED_NAMES.has(name))
+            continue;
+        const from = path.join(src, name);
+        const to = path.join(dest, name);
+        const stat = fs.statSync(from);
+        if (stat.isDirectory()) {
+            copyDir(from, to);
+        }
+        else if (stat.isFile()) {
+            fs.copyFileSync(from, to);
+        }
+    }
+}
+export function assertCliSupports(manifest, label) {
+    const min = manifest.requires?.cliMin;
+    if (min && compareSemver(VERSION, min) < 0) {
+        throw new Error(`Template "${label}" requires seamless-cli >= ${min}, but this is ${VERSION}. Please upgrade.`);
+    }
+}
+// Copies the template's example env to .env (if declared), then applies the
+// manifest's env.set, resolving {{placeholders}} against the scaffold context.
+// This replaces the per-framework configure step.
+export function applyTemplateEnv(destDir, manifest, ctx) {
+    const env = manifest.env ?? {};
+    const envPath = path.join(destDir, ".env");
+    let values = {};
+    if (env.fromExample) {
+        const examplePath = path.join(destDir, env.fromExample);
+        if (fs.existsSync(examplePath)) {
+            values = parseEnvString(fs.readFileSync(examplePath, "utf-8"));
+        }
+    }
+    else if (fs.existsSync(envPath)) {
+        values = parseEnvString(fs.readFileSync(envPath, "utf-8"));
+    }
+    for (const [key, raw] of Object.entries(env.set ?? {})) {
+        values[key] = resolvePlaceholders(raw, ctx);
+    }
+    writeEnv(envPath, values);
+}
+function resolvePlaceholders(value, ctx) {
+    return value.replace(/\{\{\s*([\w:]+)\s*\}\}/g, (_match, token) => resolveToken(token, ctx));
+}
+function resolveToken(token, ctx) {
+    const secret = /^secret:(\d+)$/.exec(token);
+    if (secret) {
+        return generateSecret(Number(secret[1]));
+    }
+    const known = {
+        authServerUrl: ctx.authServerUrl,
+        apiUrl: ctx.apiUrl,
+        apiToken: ctx.apiToken,
+        jwksKid: ctx.jwksKid,
+    };
+    if (token in known) {
+        const resolved = known[token];
+        if (resolved == null) {
+            throw new Error(`Template placeholder {{${token}}} has no value in this configuration.`);
+        }
+        return resolved;
+    }
+    throw new Error(`Unknown template placeholder {{${token}}}.`);
+}
+function compareSemver(a, b) {
+    const norm = (v) => v.replace(/^v/, "").split("-")[0].split(".").map((n) => parseInt(n, 10) || 0);
+    const pa = norm(a);
+    const pb = norm(b);
+    for (let i = 0; i < 3; i++) {
+        const diff = (pa[i] ?? 0) - (pb[i] ?? 0);
+        if (diff !== 0)
+            return diff < 0 ? -1 : 1;
+    }
+    return 0;
+}
+//# sourceMappingURL=templates.js.map

package/dist/core/templates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.js","sourceRoot":"","sources":["../../src/core/templates.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,MAAM,MAAM,SAAS,CAAC;AAE7B,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAmD9E,kFAAkF;AAClF,2DAA2D;AAC3D,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,cAAc;IACd,MAAM;IACN,MAAM;IACN,OAAO;IACP,OAAO;IACP,KAAK;IACL,UAAU;IACV,WAAW;IACX,MAAM;IACN,YAAY;CACb,CAAC,CAAC;AAUH,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IACpD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,gBAAgB,CACrB,uBAAuB,EACvB,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,sBAAsB,CAC7D,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAa,CAAC;IAC7C,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACrD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,oCAAoC,GAAG,yCAAyC,CACjF,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,YAAY,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;IAEtE,OAAO;QACL,QAAQ;QACR,KAAK,CAAC,YAAY,CAAC,KAAK;YACtB,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;YACjE,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAqB,CAAC;QAChF,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO;YAC3B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QAC/C,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,GAAW;IACvD,MAAM,WAAW,GAAG,qCAAqC,IAAI,IAAI,GAAG,gBAAgB,CAAC;IACrF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC;IACrC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,0CAA0C,GAAG,CAAC,MAAM,UAAU,WAAW,GAAG,CAC7E,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAEhD,kFAAkF;IAClF,8BAA8B;IAC9B,IAAI,OAAO,GAAyC,IAAI,CAAC;IACzD,MAAM,aAAa,GAAG,KAAK,IAAI,EAAE;QAC/B,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAC5B,MAAM,GAAG,GAAG,sBAAsB,IAAI,YAAY,GAAG,MAAM,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,iCAAiC,MAAM,CAAC,MAAM,UAAU,GAAG,GAAG,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QACD,sEAAsE;QACtE,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,OAAO,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;QACxB,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IAEF,OAAO;QACL,QAAQ;QACR,KAAK,CAAC,YAAY,CAAC,KAAK;YACtB,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,MAAM,aAAa,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,KAAK,CAAC,IAAI,gBAAgB,CAAC;YACnD,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC,EAAE,6CAA6C,CAAC,CAAC;YACtF,CAAC;YACD,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAqB,CAAC;QAC3E,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO;YAC3B,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,MAAM,aAAa,EAAE,CAAC;YAC5C,MAAM,MAAM,GAAG,GAAG,IAAI,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC;YACxC,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC;gBACjC,IAAI,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC;oBAAE,SAAS;gBAC/D,MAAM,GAAG,GAAG,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC7C,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBAAE,SAAS;gBACnE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBACpC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrD,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,GAAW,EAAE,IAAY;IACxC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClC,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACvB,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACpB,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACzB,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAA0B,EAAE,KAAa;IACzE,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IACtC,IAAI,GAAG,IAAI,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CACb,aAAa,KAAK,8BAA8B,GAAG,iBAAiB,OAAO,mBAAmB,CAC/F,CAAC;IACJ,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,+EAA+E;AAC/E,kDAAkD;AAClD,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,QAA0B,EAC1B,GAAoB;IAEpB,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,IAAI,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAE3C,IAAI,MAAM,GAA2B,EAAE,CAAC;IACxC,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;QACpB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;QACxD,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/B,MAAM,GAAG,cAAc,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;SAAM,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,MAAM,GAAG,cAAc,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC;QACvD,MAAM,CAAC,GAAG,CAAC,GAAG,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC9C,CAAC;IAED,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa,EAAE,GAAoB;IAC9D,OAAO,KAAK,CAAC,OAAO,CAAC,yBAAyB,EAAE,CAAC,MAAM,EAAE,KAAa,EAAE,EAAE,CACxE,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CACzB,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,GAAoB;IACvD,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,KAAK,GAAuC;QAChD,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,OAAO,EAAE,GAAG,CAAC,OAAO;KACrB,CAAC;IAEF,IAAI,KAAK,IAAI,KAAK,EAAE,CAAC;QACnB,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACb,0BAA0B,KAAK,wCAAwC,CACxE,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,aAAa,CAAC,CAAS,EAAE,CAAS;IACzC,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CACzB,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAChF,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACnB,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,IAAI,IAAI,KAAK,CAAC;YAAE,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/generators/auth/auth.js

@@ -1,47 +1,68 @@
 import fs from "fs";
 import path from "path";
+import { parseEnvString } from "../../core/env.js";
 import { runCommand } from "../../core/exec.js";
-import { writeEnv } from "../../utils/writeEnv.js";
+import { fetchEnvExample } from "../../core/fetch.js";
+import { POSTGRES_IMAGE, SEAMLESS_AUTH_API_IMAGE } from "../../core/images.js";
+import { buildAuthEnv, configureAuthLocalEnv, envToDockerBlock, } from "../docker/docker.js";
 const AUTH_REPO = "https://github.com/fells-code/seamless-auth-api";
-const AUTH_PORT = 5312;
-export async function generateAuthServer(context, mode) {
+export async function generateAuthServer(context, mode, oauth = []) {
     const { root } = context;
     if (mode === "local") {
-        await setupLocalAuth(root);
-    }
-    else {
-        await setupDockerAuth(root);
+        return await setupLocalAuth(root, oauth);
     }
+    return await setupDockerAuth(root);
 }
-async function setupLocalAuth(root) {
+async function setupLocalAuth(root, oauth = []) {
     const authDir = path.join(root, "auth");
     console.log("Cloning SeamlessAuth server...");
     await runCommand("git", ["clone", AUTH_REPO, "auth"], root);
     console.log("Writing auth environment...");
-    writeEnv(authDir, {
-        PORT: AUTH_PORT,
-        NODE_ENV: "development",
-        AUTH_MODE: "server",
-        ISSUER: `http://localhost:${AUTH_PORT}`,
-    });
+    const shared = await configureAuthLocalEnv(root, oauth);
     console.log("Auth server ready in /auth");
+    return shared;
 }
 async function setupDockerAuth(root) {
     console.log("Creating docker-compose for SeamlessAuth...");
+    const raw = await fetchEnvExample();
+    const parsed = parseEnvString(raw);
+    const { env, shared } = buildAuthEnv(parsed, "docker");
+    const envBlock = envToDockerBlock(env);
     const dockerCompose = `
 services:
+  db:
+    image: ${POSTGRES_IMAGE}
+    container_name: seamless-db
+    ports:
+      - "5432:5432"
+    environment:
+      POSTGRES_USER: myuser
+      POSTGRES_PASSWORD: mypassword
+      POSTGRES_DB: postgres
+    volumes:
+      - pgdata:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U myuser -d postgres"]
+      interval: 5s
+      timeout: 5s
+      retries: 5
+
   auth:
-    image: ghcr.io/fells-code/seamless-auth-api:v0.1.2
+    image: ${SEAMLESS_AUTH_API_IMAGE}
     container_name: seamless-auth
     ports:
       - "5312:5312"
     environment:
-      PORT: 5312
-      NODE_ENV: development
-      AUTH_MODE: server
-      ISSUER: http://localhost:5312
+${envBlock}
+    depends_on:
+      db:
+        condition: service_healthy
+
+volumes:
+  pgdata:
 `;
     fs.writeFileSync(path.join(root, "docker-compose.yml"), dockerCompose.trim() + "\n");
     console.log("Docker setup ready.");
+    return shared;
 }
 //# sourceMappingURL=auth.js.map

package/dist/generators/auth/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/generators/auth/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAEnD,MAAM,SAAS,GAAG,iDAAiD,CAAC;AACpE,MAAM,SAAS,GAAG,IAAI,CAAC;AAEvB,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAY,EACZ,IAAiC;IAEjC,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IAEzB,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;SAAM,CAAC;QACN,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAY;IACxC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAExC,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;IAE9C,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;IAE5D,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAE3C,QAAQ,CAAC,OAAO,EAAE;QAChB,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,aAAa;QACvB,SAAS,EAAE,QAAQ;QACnB,MAAM,EAAE,oBAAoB,SAAS,EAAE;KACxC,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;AAC5C,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAY;IACzC,OAAO,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;IAE3D,MAAM,aAAa,GAAG;;;;;;;;;;;;CAYvB,CAAC;IAEA,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,oBAAoB,CAAC,EACrC,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAC5B,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;AACrC,CAAC"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/generators/auth/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC/E,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAG7B,MAAM,SAAS,GAAG,iDAAiD,CAAC;AAEpE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAY,EACZ,IAAiC,EACjC,QAAkC,EAAE;IAEpC,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IAEzB,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,OAAO,MAAM,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;AACrC,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,QAAkC,EAAE;IAC9E,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAExC,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;IAE9C,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;IAE5D,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAE3C,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAExD,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAY;IACzC,OAAO,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;IAE3D,MAAM,GAAG,GAAG,MAAM,eAAe,EAAE,CAAC;IACpC,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAEvC,MAAM,aAAa,GAAG;;;aAGX,cAAc;;;;;;;;;;;;;;;;;aAiBd,uBAAuB;;;;;EAKlC,QAAQ;;;;;;;CAOT,CAAC;IAEA,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,oBAAoB,CAAC,EACrC,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAC5B,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/generators/config/config.js

@@ -1,6 +1,7 @@
 import fs from "fs";
 import path from "path";
 import { VERSION } from "../../index.js";
+import { SEAMLESS_AUTH_ADMIN_DASHBOARD_IMAGE, SEAMLESS_AUTH_API_IMAGE, } from "../../core/images.js";
 export function generateSeamlessConfig(root, options) {
     const config = {
         version: VERSION,
@@ -17,15 +18,13 @@ export function generateSeamlessConfig(root, options) {
             },
             auth: {
                 mode: options.authMode,
-                image: options.authMode === "docker"
-                    ? "ghcr.io/fells-code/seamless-auth-api:latest"
-                    : null,
+                image: options.authMode === "docker" ? SEAMLESS_AUTH_API_IMAGE : null,
                 path: options.authMode === "local" ? "./auth" : null,
             },
             admin: {
                 mode: options.adminMode,
                 image: options.adminMode === "image"
-                    ? "ghcr.io/fells-code/seamless-auth-admin-dashboard:latest"
+                    ? SEAMLESS_AUTH_ADMIN_DASHBOARD_IMAGE
                     : null,
                 path: options.adminMode === "source" ? "./admin" : null,
             },

package/dist/generators/config/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/generators/config/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAEzC,MAAM,UAAU,sBAAsB,CACpC,IAAY,EACZ,OAMC;IAED,MAAM,MAAM,GAAG;QACb,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACvD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAEnC,QAAQ,EAAE;YACR,GAAG,EAAE;gBACH,SAAS,EAAE,OAAO,CAAC,YAAY;gBAC/B,IAAI,EAAE,OAAO;aACd;YACD,GAAG,EAAE;gBACH,SAAS,EAAE,OAAO,CAAC,YAAY;gBAC/B,IAAI,EAAE,OAAO;aACd;YACD,IAAI,EAAE;gBACJ,IAAI,EAAE,OAAO,CAAC,QAAQ;gBACtB,KAAK,EACH,OAAO,CAAC,QAAQ,KAAK,QAAQ;oBAC3B,CAAC,CAAC,6CAA6C;oBAC/C,CAAC,CAAC,IAAI;gBACV,IAAI,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;aACrD;YACD,KAAK,EAAE;gBACL,IAAI,EAAE,OAAO,CAAC,SAAS;gBACvB,KAAK,EACH,OAAO,CAAC,SAAS,KAAK,OAAO;oBAC3B,CAAC,CAAC,yDAAyD;oBAC3D,CAAC,CAAC,IAAI;gBACV,IAAI,EAAE,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;aACxD;YACD,QAAQ,EAAE;gBACR,IAAI,EAAE,UAAU;aACjB;SACF;QAED,MAAM,EAAE;YACN,WAAW,EAAE,oBAAoB;SAClC;KACF,CAAC;IAEF,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,sBAAsB,CAAC,EACvC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAChC,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;AAC1C,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/generators/config/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACzC,OAAO,EACL,mCAAmC,EACnC,uBAAuB,GACxB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,UAAU,sBAAsB,CACpC,IAAY,EACZ,OAMC;IAED,MAAM,MAAM,GAAG;QACb,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACvD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAEnC,QAAQ,EAAE;YACR,GAAG,EAAE;gBACH,SAAS,EAAE,OAAO,CAAC,YAAY;gBAC/B,IAAI,EAAE,OAAO;aACd;YACD,GAAG,EAAE;gBACH,SAAS,EAAE,OAAO,CAAC,YAAY;gBAC/B,IAAI,EAAE,OAAO;aACd;YACD,IAAI,EAAE;gBACJ,IAAI,EAAE,OAAO,CAAC,QAAQ;gBACtB,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI;gBACrE,IAAI,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;aACrD;YACD,KAAK,EAAE;gBACL,IAAI,EAAE,OAAO,CAAC,SAAS;gBACvB,KAAK,EACH,OAAO,CAAC,SAAS,KAAK,OAAO;oBAC3B,CAAC,CAAC,mCAAmC;oBACrC,CAAC,CAAC,IAAI;gBACV,IAAI,EAAE,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;aACxD;YACD,QAAQ,EAAE;gBACR,IAAI,EAAE,UAAU;aACjB;SACF;QAED,MAAM,EAAE;YACN,WAAW,EAAE,oBAAoB;SAClC;KACF,CAAC;IAEF,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,sBAAsB,CAAC,EACvC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAChC,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;AAC1C,CAAC"}

package/dist/generators/docker/docker.js

@@ -4,6 +4,8 @@ import { fetchEnvExample } from "../../core/fetch.js";
 import { parseEnv, parseEnvString } from "../../core/env.js";
 import { generateSecret } from "../../core/secrets.js";
 import { generateJWKS } from "../../core/jwks.js";
+import { buildOAuthAuthEnv, withLoginMethod, } from "../../core/oauthProviders.js";
+import { POSTGRES_IMAGE, SEAMLESS_AUTH_ADMIN_DASHBOARD_IMAGE, SEAMLESS_AUTH_API_IMAGE, } from "../../core/images.js";
 export async function generateDockerCompose(root, options) {
     const { compose, shared } = await buildCompose(options, root);
     fs.writeFileSync(path.join(root, "docker-compose.yml"), compose.trim() + "\n");
@@ -11,13 +13,13 @@ export async function generateDockerCompose(root, options) {
     return shared;
 }
 async function buildCompose(options, root) {
-    const { authMode, adminMode, includeAdmin } = options;
-    const { service: authBlock, shared } = await authService(authMode, root);
+    const { authMode, adminMode, includeAdmin, oauth } = options;
+    const { service: authBlock, shared } = await authService(authMode, root, oauth);
     return {
         compose: `
 services:
   db:
-    image: postgres:16
+    image: ${POSTGRES_IMAGE}
     container_name: seamless-db
     ports:
       - "5432:5432"
@@ -27,6 +29,11 @@ services:
       POSTGRES_DB: postgres
     volumes:
       - pgdata:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U myuser -d postgres"]
+      interval: 5s
+      timeout: 5s
+      retries: 5
 
 ${authBlock}
 
@@ -42,9 +49,9 @@ volumes:
         shared,
     };
 }
-async function authService(mode, root) {
+async function authService(mode, root, oauth = []) {
     if (mode === "local") {
-        const shared = await configureAuthLocalEnv(root);
+        const shared = await configureAuthLocalEnv(root, oauth);
         return {
             service: `
   auth:
@@ -63,12 +70,13 @@ async function authService(mode, root) {
       - ./auth:/app
       - /app/node_modules
     depends_on:
-      - db
+      db:
+        condition: service_healthy
 `,
             shared,
         };
     }
-    return await authServiceDocker();
+    return await authServiceDocker(oauth);
 }
 function apiService(shared) {
     return `
@@ -89,8 +97,10 @@ function apiService(shared) {
       - ./api:/app
       - /app/node_modules
     depends_on:
-      - db
-      - auth
+      db:
+        condition: service_healthy
+      auth:
+        condition: service_started
 `;
 }
 function webService() {
@@ -107,24 +117,30 @@ function webService() {
       - /app/node_modules
     depends_on:
       - api
+    healthcheck:
+      test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost/health"]
+      interval: 5s
+      timeout: 5s
+      retries: 10
 `;
 }
-async function authServiceDocker() {
+async function authServiceDocker(oauth = []) {
     const raw = await fetchEnvExample();
     const parsed = parseEnvString(raw);
-    const { env, shared } = buildAuthEnv(parsed, "docker");
+    const { env, shared } = buildAuthEnv(parsed, "docker", oauth);
     const envBlock = envToDockerBlock(env);
     return {
         service: `
   auth:
-    image: ghcr.io/fells-code/seamless-auth-api:latest
+    image: ${SEAMLESS_AUTH_API_IMAGE}
     container_name: seamless-auth
     ports:
       - "5312:5312"
     environment:
 ${envBlock}
     depends_on:
-      - db
+      db:
+        condition: service_healthy
 `,
         shared,
     };
@@ -149,7 +165,7 @@ function adminService(mode) {
     }
     return `
   admin:
-    image: ghcr.io/fells-code/seamless-auth-admin-dashboard:latest
+    image: ${SEAMLESS_AUTH_ADMIN_DASHBOARD_IMAGE}
     container_name: admin
     ports:
       - "5174:80"
@@ -159,30 +175,34 @@ function adminService(mode) {
       - api
 `;
 }
-function buildAuthEnv(env, mode) {
+export function buildAuthEnv(env, mode, oauth = []) {
     const apiToken = generateSecret(32);
     const bootstrapSecret = generateSecret(32);
+    const kid = "dev-main";
     env.SEAMLESS_BOOTSTRAP_ENABLED = "true";
     env.SEAMLESS_BOOTSTRAP_SECRET = bootstrapSecret;
     env.PORT = "5312";
     env.NODE_ENV = "development";
     env.AUTH_MODE = "server";
-    env.ISSUER = "http://auth:5312";
+    env.ISSUER =
+        mode === "docker" ? "http://auth:5312" : "http://localhost:5312";
     env.DB_HOST = mode === "docker" ? "db" : "localhost";
     env.DB_PORT = "5432";
     env.API_SERVICE_TOKEN = apiToken;
-    let kid = "main";
-    env.JWKS_ACTIVE_KID = kid;
-    if (mode === "docker") {
-        const jwks = buildJWKSConfig();
-        kid = jwks.kid;
-        env.SEAMLESS_JWKS_ACTIVE_KID = jwks.kid;
-        env.JWKS_ACTIVE_KID = jwks.kid;
-        env[`SEAMLESS_JWKS_KEY_${jwks.kid}_PRIVATE`] = jwks.privateKey;
-        env.JWKS_PUBLIC_KEYS = jwks.publicJwksJson;
-    }
+    // Dedicated secrets the auth server otherwise leaves empty (falling back to the
+    // service token). Generate real ones so a scaffolded stack is production-shaped.
+    env.REFRESH_TOKEN_LOOKUP_SECRET = generateSecret(32);
+    env.TOTP_SECRET_ENCRYPTION_KEY = generateSecret(32);
     env.APP_ORIGINS = "http://localhost:3000";
-    env.ORIGINS = "http://localhost:5173";
+    env.ORIGINS = "http://localhost:5173,http://localhost:5174";
+    // When the OAuth template collected providers, wire them into the auth server
+    // (OAUTH_PROVIDERS, per-provider secret env vars, OAUTH_STATE_SECRET) and enable
+    // the oauth login method.
+    if (oauth.length > 0) {
+        const { env: oauthEnv } = buildOAuthAuthEnv(oauth);
+        Object.assign(env, oauthEnv);
+        env.LOGIN_METHODS = withLoginMethod(env.LOGIN_METHODS, "oauth");
+    }
     return {
         env,
         shared: {
@@ -198,7 +218,7 @@ export function envToDockerBlock(env) {
         if (v.includes("\n")) {
             return `      ${k}: |\n${indentMultiline(v, 8)}`;
         }
-        return `      ${k}: ${v}`;
+        return `      ${k}: ${JSON.stringify(v)}`;
     })
         .join("\n");
 }
@@ -226,7 +246,7 @@ export function buildJWKSConfig() {
         }, null, 2),
     };
 }
-export async function configureAuthLocalEnv(root) {
+export async function configureAuthLocalEnv(root, oauth = []) {
     const authDir = path.join(root, "auth");
     const envExamplePath = path.join(authDir, ".env.example");
     const envPath = path.join(authDir, ".env");
@@ -235,7 +255,7 @@ export async function configureAuthLocalEnv(root) {
     }
     const raw = fs.readFileSync(envExamplePath, "utf-8");
     const parsed = parseEnvString(raw);
-    const { env, shared } = buildAuthEnv(parsed, "local");
+    const { env, shared } = buildAuthEnv(parsed, "local", oauth);
     writeEnvFile(envPath, env);
     return shared;
 }
@@ -257,7 +277,7 @@ export function extractSharedFromExistingEnv(root) {
     const env = parseEnv(path.join(root, "auth", ".env"));
     return {
         apiToken: env.API_SERVICE_TOKEN,
-        kid: env.JWKS_ACTIVE_KID || "main",
+        kid: env.SEAMLESS_JWKS_ACTIVE_KID || env.JWKS_ACTIVE_KID || "dev-main",
     };
 }
 //# sourceMappingURL=docker.js.map