vibefast-cli 0.6.2 → 0.7.1

package/2/packages/backend/convex/authPasswordResetActions.ts

@@ -1,150 +0,0 @@
-'use node';
-
-import { randomUUID } from 'node:crypto';
-
-import { v } from 'convex/values';
-
-import { internal } from './_generated/api';
-import { action } from './_generated/server';
-// Password reset link is now passed from client as a template to avoid backend owning client deep link config
-
-/**
- * Requests a password reset link for a user by their email.
- * Generates a reset token, stores it, and triggers an email.
- * This is a Node.js action because it needs crypto for secure token generation.
- */
-export const requestPasswordReset = action({
-  args: { email: v.string(), resetUrlTemplate: v.string() },
-  returns: v.object({
-    success: v.boolean(),
-    message: v.string(),
-  }),
-  handler: async (ctx, { email, resetUrlTemplate }) => {
-    const existingUser = await ctx.runQuery(
-      internal.authPasswordReset.findUserByEmail,
-      { email },
-    );
-
-    if (!existingUser) {
-      console.warn(`Password reset attempt for non-existent email: ${email}`);
-      return {
-        success: true,
-        message: 'If your email is registered, you will receive a reset link.',
-      };
-    }
-
-    const token = randomUUID();
-    await ctx.runMutation(internal.authPasswordReset.internalStoreToken, {
-      userId: existingUser._id,
-      token,
-      expiresAt: Date.now() + 3600 * 1000, // 1 hour
-    });
-
-    // Build reset link from client-provided template, replacing token placeholder
-    const resetLink = resetUrlTemplate.replace('__TOKEN__', token);
-
-    try {
-      await ctx.runAction(internal.shared.email.sendPasswordResetEmail, {
-        email,
-        resetLink,
-        userName: existingUser.name,
-      });
-    } catch (error) {
-      console.error('Failed to send password reset email:', error);
-    }
-
-    return {
-      success: true,
-      message: 'If your email is registered, you will receive a reset link.',
-    };
-  },
-});
-
-/**
- * Resets a user's password using a valid token and new password.
- * This is a Node.js action because it needs crypto for password hashing.
- */
-export const resetPassword = action({
-  args: {
-    token: v.string(),
-    newPassword: v.string(),
-  },
-  returns: v.object({
-    success: v.boolean(),
-    message: v.string(),
-  }),
-  handler: async (ctx, { token, newPassword }) => {
-    // Validate password length
-    if (newPassword.length < 8) {
-      throw new Error('Password must be at least 8 characters long');
-    }
-
-    // Verify token using the query
-    const verification = await ctx.runQuery(
-      internal.authPasswordReset.verifyPasswordResetTokenInternal,
-      {
-        token,
-      },
-    );
-
-    if (!verification.valid || !verification.userId) {
-      throw new Error('Invalid or expired password reset token.');
-    }
-
-    const userId = verification.userId;
-
-    // Get user to verify they exist
-    const user = await ctx.runQuery(internal.authPasswordReset.getUserById, {
-      userId,
-    });
-    if (!user) {
-      throw new Error('User not found.');
-    }
-
-    // Find the password account in the auth system
-    const passwordAccount = await ctx.runQuery(
-      internal.authPasswordReset.getPasswordAccountForUser,
-      { userId },
-    );
-
-    if (!passwordAccount) {
-      throw new Error(
-        'No password account found for user. Please sign up with password first.',
-      );
-    }
-
-    try {
-      // Ensure Web Crypto exists for Lucia Scrypt (uses crypto.getRandomValues)
-      const { webcrypto } = await import('crypto'); // IMPORTANT: 'crypto', not 'node:crypto'
-      if (
-        typeof globalThis.crypto === 'undefined' ||
-        typeof globalThis.crypto.getRandomValues !== 'function'
-      ) {
-        globalThis.crypto = webcrypto as any;
-      }
-
-      // Hash with Lucia Scrypt (same algo/format the Password provider expects)
-      const { Scrypt } = await import('lucia');
-      const scrypt = new Scrypt(); // N=16384, r=16, p=1, dkLen=64
-      const finalHash = await scrypt.hash(newPassword);
-
-      await ctx.runMutation(internal.authPasswordReset.updatePasswordHash, {
-        accountId: passwordAccount._id,
-        newHash: finalHash,
-      });
-
-      await ctx.runMutation(internal.authPasswordReset.markTokenAsUsedByToken, {
-        token,
-      });
-
-      return {
-        success: true,
-        message:
-          'Password updated successfully. You can now sign in with your new password.',
-      };
-    } catch (error) {
-      console.error('Error updating password:', error);
-      throw error; // temporarily bubble the exact error while testing
-    }
-  },
-});

package/2/packages/backend/convex/chatbot/index.ts

@@ -1,30 +0,0 @@
-/**
- * Chatbot Domain Aggregator
- *
- * This module serves as the single entry point for all chatbot-related
- * Convex functions. It re-exports functions from the underlying modules
- * to decouple the frontend from the internal file structure.
- *
- * Benefits:
- * - Frontend only imports from this aggregator via the gateway
- * - Backend refactors don't cascade to frontend
- * - Clear domain boundaries
- */
-
-// Agent functions (streaming, session management)
-export {
-  getAgentSession,
-  getAgentStreamBody,
-  startAgentStream,
-} from '../chatbotAgent';
-
-// History functions (messages, conversations)
-export {
-  clearConversationMessages,
-  createConversation,
-  deleteUserMessage,
-  getOrCreateDefaultConversation,
-  listMessages,
-  storeFinalBotMessage,
-  storeMessage,
-} from '../chatbotHistory';