belt 0.2.9 → 0.2.10

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 37cf283dc30b43f875f8600eb4b00e46b5782f374d3be306d0c5adaec7e9024a
-  data.tar.gz: 1153f552cef87426f91afcf28647065017b77a09bdd9347241366ed9cc455b76
+  metadata.gz: 4a550043d0d16c901e656de4a9d89a0f473d77778121e2b27fb8791f3edf74d4
+  data.tar.gz: f9404b6e69d725650ee612af06b96917886d2856fca14955bb99cb9555811dcd
 SHA512:
-  metadata.gz: 4cafc0f29e0148e74950e9fe0898e74632f2563980f60ffece7bfbb58ec7187ec30f928a0958dff9d9832fe79b21e8a87e512f26c4cddfa58c1f243776cea5eb
-  data.tar.gz: 7850fc8e4c5921646c25f77f67fdfcae663e148ec597b514b095b637733b0e55f34182e8c64ea52f2294ed687b3a24f7b6a56462b30df07811a01ffae23da952
+  metadata.gz: e719bed32a829bf952c22885d63a1415ea292c3b1770a7f7bdb398ef874a5182a1b8208654e2672d6d7fcccbb4b2e9f24a82186708ed3982d9ca7ec94d9bedbf
+  data.tar.gz: 32fa436e2a97b5d3597af8d2afcfb8657c5de91f12a01b551d8368be97a80fdfd544e5b6b711a930ff741c1e8228d393088893700f13c719b454b59e01c3d6a0

data/CHANGELOG.md

@@ -1,5 +1,92 @@
 # Changelog
 
+## 0.2.10
+
+### Quiet `belt new` (with optional verbose)
+
+`belt new` prints a short phase summary by default (skeleton, environments, frontend,
+bundle, state bucket) instead of every path plus AWS/npm noise.
+
+Use `-v` / `--verbose` for Rails-style per-file `create` lines when you want the
+inventory. Nested generators skip their own next-steps banners; the final success
+block still owns next steps. State-bucket setup stays non-interactive either way.
+
+### State bucket naming (global uniqueness)
+
+S3 bucket names are a **global** namespace across all AWS accounts. The previous default
+`belt-terraform-state` only works for the first account that creates it — everyone else
+hits "owned by a different AWS account".
+
+**Fix:** shared bucket is still one-per-account (all apps share it), but the name is now:
+
+```
+belt-terraform-state-<account_id>
+```
+
+- Still one bucket for all belt apps in an account (state key: `<app>/<env>/terraform.tfstate`)
+- `--bucket` still overrides when you want a custom name
+- `belt setup state` rewrites `backend.tf` with the resolved name
+- Existing installs that already own `belt-terraform-state` can keep using `--bucket belt-terraform-state`
+
+### Implicit responses (Rails-style assigns)
+
+Controllers can set instance variables and skip the explicit `success_response` call:
+
+```ruby
+def index
+  @posts = Post.all
+end
+
+def show
+  @post = Post.find(params[:id])
+end
+```
+
+Belt auto-builds `success_response({ posts: [...] })` / `{ post: {...} }` from assigns set
+during the action. Serialization:
+
+- Models → `to_h` (ActiveItem already defines this)
+- `ActiveItem::Relation` / Enumerable → map each record via `to_h`
+- Nested hashes/arrays recurse
+
+Explicit `success_response` / `error_response` / `html_response` / `render` / `head` still win
+when returned. Rescue handlers still use `error_response`.
+
+### Default format (`:json` / `:html`)
+
+```ruby
+# App-wide (lambda/config/environment.rb)
+Belt.configure do |c|
+  c.default_format = :json   # default — API first
+end
+
+# Per-controller override (inherits down the chain)
+class PagesController < ApplicationController
+  self.default_format = :html
+end
+```
+
+| `default_format` | Implicit response (no explicit helper) |
+|---|---|
+| `:json` (default) | `success_response` from assigns |
+| `:html` | `render` template `views/<controller>/<action>.html.erb` (missing → `TemplateNotFound`) |
+
+### Symbol status codes, `head`, `response_status`
+
+```ruby
+success_response({ post: post.to_h }, :created)   # 201
+error_response("Nope", :unprocessable_entity)     # 422
+head :no_content                                  # 204 empty body
+head :created                                     # 201 empty body
+
+def create
+  @post = Post.create!(...)
+  response_status :created   # 201 + implicit assigns body
+end
+```
+
+Bare integers still work. Symbols match the Rack/Rails names (`:created`, `:not_found`, …).
+
 ## 0.3.0
 
 ### Pre-Deploy Backups

data/README.md

@@ -71,24 +71,31 @@ require "belt"
 class PostsController < BeltController::Base
   before_action :authenticate!
 
+  # Implicit response: assigns become the JSON body
+  # → { "posts": [ { "id": "...", "title": "..." }, ... ] }
   def index
-    posts = Post.where(user_id: current_user_id, index: "UserIndex")
-    success_response(posts.map(&:attributes))
+    @posts = Post.where(user_id: current_user_id, index: "UserIndex")
   end
 
   def show
-    post = Post.find(params["id"])
-    success_response(post.attributes)
+    @post = Post.find(params["id"])
   end
 
+  # Implicit body + non-200 status
   def create
     attrs = params.require(:post).permit(:title, :body).to_h
-    post = Post.create!(attrs.merge(user_id: current_user_id))
-    success_response(post.attributes, 201)
+    @post = Post.create!(attrs.merge(user_id: current_user_id))
+    response_status :created
+  end
+
+  def destroy
+    Post.find(params["id"]).destroy
+    head :no_content
   end
 end
 ```
 
+
 ### 4. Lambda entry point
 
 Use `Belt::LambdaHandler` to get automatic observability, CORS preflight handling, and error wrapping:
@@ -199,9 +206,42 @@ end
 
 ```ruby
 success_response({ id: "123", name: "Example" })       # 200 JSON with CORS
-success_response({ id: "123" }, 201)                    # 201 Created
-error_response("Not found", 404)                        # 404 JSON error
+success_response({ id: "123" }, :created)               # 201 Created (symbol or int)
+error_response("Not found", :not_found)                 # 404 JSON error
+error_response("Nope", :unprocessable_entity)           # 422
 html_response("<h1>Hello</h1>")                         # 200 HTML with CORS
+head :no_content                                        # 204 empty body
+head :created                                           # 201 empty body
+```
+
+### Default format (API vs HTML)
+
+```ruby
+# App-wide — typically in lambda/config/environment.rb
+Belt.configure do |config|
+  config.default_format = :json   # default
+end
+
+# Per-controller override
+class PagesController < ApplicationController
+  self.default_format = :html
+end
+```
+
+- **`:json`** (default): action assigns → `success_response({ posts: [...] })`
+- **`:html`**: action assigns stay on the controller; Belt implicitly `render`s
+  `views/<controller>/<action>.html.erb`. Missing template raises `Belt::TemplateNotFound`
+  (no silent JSON fallback).
+- Explicit helpers always win: `success_response`, `error_response`, `html_response`,
+  `render`, `head`.
+
+### Non-200 with implicit assigns
+
+```ruby
+def create
+  @post = Post.create!(...)
+  response_status :created   # → 201 + { post: {...} }
+end
 ```
 
 ## Controller Discovery

data/lib/belt/action_router.rb

@@ -165,7 +165,7 @@ module Belt
     def error_response(message, status_code, event = nil)
       origin = Belt::Helpers::CorsOrigin.resolve_origin(Belt::Helpers::CorsOrigin.origin_from_event(event))
       headers = {
-        'Access-Control-Allow-Headers' => 'Content-Type,X-Amz-Date,Authorization,X-Api-Key,X-Amz-Security-Token',
+        'Access-Control-Allow-Headers' => 'Content-Type,Accept,X-Amz-Date,Authorization,X-Api-Key,X-Amz-Security-Token',
         'Access-Control-Allow-Methods' => 'GET,POST,PUT,DELETE,PATCH,OPTIONS',
         'Content-Type' => 'application/json'
       }

data/lib/belt/assets/welcome.css

@@ -1,82 +1,136 @@
 * { margin: 0; padding: 0; box-sizing: border-box; }
+html, body {
+  height: 100%;
+}
 body {
   font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
-  background: #f8f9fa;
+  background: #0b1220;
   color: #2d3748;
   min-height: 100vh;
+  overflow: hidden;
 }
 
-/* Hero section — full width background image */
+/* Hero fills the viewport — all content lives in the overlay (no scroll) */
 .hero {
   position: relative;
   width: 100%;
+  height: 100vh;
   overflow: hidden;
 }
 .hero-bg {
   width: 100%;
-  height: auto;
+  height: 100%;
+  object-fit: cover;
+  /* Pin the logo / sky — crop hills at the bottom if the viewport is short */
+  object-position: top center;
   display: block;
 }
 .overlay {
   position: absolute;
-  top: 35%;
+  top: 50%;
   left: 50%;
   transform: translate(-50%, -50%);
-  padding: 2rem 3rem;
-  background: rgba(255, 255, 255, 0.50);
-  backdrop-filter: blur(6px);
-  -webkit-backdrop-filter: blur(6px);
-  border-radius: 12px;
+  padding: 1.35rem 1.6rem 1.25rem;
+  background: rgba(255, 255, 255, 0.55);
+  backdrop-filter: blur(8px);
+  -webkit-backdrop-filter: blur(8px);
+  border-radius: 14px;
   text-align: center;
-  max-width: 600px;
-  width: 90%;
-  box-shadow: 0 4px 20px rgba(0, 0, 0, 0.1);
+  max-width: 560px;
+  width: min(92vw, 560px);
+  max-height: min(92vh, 620px);
+  overflow: auto;
+  box-shadow: 0 8px 32px rgba(0, 0, 0, 0.18);
 }
 .overlay h1 {
-  font-size: 2.2rem;
+  font-size: 1.85rem;
   font-weight: 700;
   color: #2d3748;
-  margin-bottom: 0.4rem;
+  margin-bottom: 0.3rem;
+  line-height: 1.2;
 }
 .overlay .subtitle {
-  font-size: 1.1rem;
+  font-size: 0.95rem;
   color: #4a5568;
+  line-height: 1.4;
 }
 
-/* Content below the hero */
-.container {
-  max-width: 700px;
-  margin: 0 auto;
-  padding: 2rem;
-}
+/* Stack + next steps sit inside the white card */
 .stack-check {
   display: flex;
   align-items: center;
   justify-content: center;
-  gap: 0.75rem;
-  margin-bottom: 2rem;
+  gap: 0.4rem;
+  margin: 1rem 0 0.85rem;
   flex-wrap: wrap;
 }
 .check-item {
   display: flex;
   align-items: center;
-  gap: 0.4rem;
-  padding: 0.5rem 1rem;
+  gap: 0.35rem;
+  padding: 0.35rem 0.7rem;
   border-radius: 8px;
   font-weight: 500;
+  font-size: 0.88rem;
 }
 .check-pass {
-  background: rgba(39, 174, 96, 0.1);
-  border: 1px solid rgba(39, 174, 96, 0.3);
+  background: rgba(39, 174, 96, 0.12);
+  border: 1px solid rgba(39, 174, 96, 0.35);
   color: #1e8449;
 }
+/* Optional / empty DynamoDB — not an error, just not in use yet */
+.check-neutral {
+  background: rgba(113, 128, 150, 0.1);
+  border: 1px solid rgba(113, 128, 150, 0.28);
+  color: #4a5568;
+}
 .check-warn {
   background: rgba(243, 156, 18, 0.1);
   border: 1px solid rgba(243, 156, 18, 0.3);
   color: #d68910;
 }
-.icon { font-size: 1.1rem; }
-.arrow { color: #718096; font-size: 1.2rem; }
+.icon { font-size: 1rem; }
+.arrow { color: #718096; font-size: 1.05rem; }
+
+.next-steps {
+  text-align: left;
+  border-top: 1px solid rgba(45, 55, 72, 0.12);
+  padding-top: 0.75rem;
+  margin-top: 0.15rem;
+}
+.next-steps h2 {
+  font-size: 0.92rem;
+  margin-bottom: 0.45rem;
+  color: #2d3748;
+  text-align: left;
+}
+.next-steps ol {
+  padding-left: 1.2rem;
+  margin: 0;
+}
+.next-steps li {
+  margin-bottom: 0.4rem;
+  color: #4a5568;
+  line-height: 1.4;
+  font-size: 0.88rem;
+}
+.next-steps li:last-child { margin-bottom: 0; }
+.next-steps code,
+.info code {
+  background: rgba(99, 45, 145, 0.1);
+  padding: 0.12rem 0.35rem;
+  border-radius: 4px;
+  color: #632d91;
+  font-size: 0.78rem;
+  word-break: break-word;
+}
+
+/* Legacy blocks (local server welcome, older layouts) */
+.container {
+  max-width: 700px;
+  margin: 0 auto;
+  padding: 2rem;
+}
 .info {
   background: #ffffff;
   border: 1px solid #e2e8f0;
@@ -87,26 +141,44 @@ body {
 .info p { margin-bottom: 0.5rem; color: #4a5568; }
 .info p:last-child { margin-bottom: 0; }
 .info strong { color: #2d3748; }
-.info code {
-  background: rgba(99, 45, 145, 0.08);
-  padding: 0.15rem 0.4rem;
+.dynamodb-hint {
+  text-align: center;
+  margin: 0.5rem 0;
+  color: #4a5568;
+  font-size: 0.9rem;
+  line-height: 1.45;
+}
+.dynamodb-hint code {
+  background: rgba(99, 45, 145, 0.1);
+  padding: 0.12rem 0.35rem;
   border-radius: 4px;
   color: #632d91;
-  font-size: 0.85rem;
+  font-size: 0.8rem;
+  word-break: break-word;
 }
-.next-steps {
-  background: #ffffff;
-  border: 1px solid #e2e8f0;
-  border-radius: 12px;
-  padding: 1.5rem;
+.footer-note {
+  margin-top: 0.75rem;
+  padding-top: 0.65rem;
+  border-top: 1px solid rgba(45, 55, 72, 0.1);
+  font-size: 0.78rem;
+  color: #718096;
+  text-align: center;
 }
-.next-steps h2 { font-size: 1.1rem; margin-bottom: 1rem; color: #2d3748; }
-.next-steps ol { padding-left: 1.5rem; }
-.next-steps li { margin-bottom: 0.6rem; color: #4a5568; line-height: 1.5; }
-.next-steps code {
-  background: rgba(99, 45, 145, 0.08);
-  padding: 0.15rem 0.4rem;
-  border-radius: 4px;
-  color: #632d91;
-  font-size: 0.85rem;
+.footer-note code {
+  background: rgba(45, 55, 72, 0.06);
+  padding: 0.08rem 0.3rem;
+  border-radius: 3px;
+  color: #4a5568;
+}
+
+/* Tiny viewports: shrink type a bit so everything still fits */
+@media (max-height: 640px) {
+  .overlay {
+    padding: 1rem 1.15rem;
+  }
+  .overlay h1 { font-size: 1.5rem; }
+  .overlay .subtitle { font-size: 0.88rem; }
+  .stack-check { margin: 0.7rem 0 0.55rem; }
+  .check-item { padding: 0.28rem 0.55rem; font-size: 0.8rem; }
+  .next-steps li { font-size: 0.82rem; }
 }

data/lib/belt/cli/bucket_security.rb

@@ -71,20 +71,26 @@ module Belt
       def harden_bucket(bucket, audit)
         unless audit[:versioning]
           enable_versioning(bucket)
-          puts '  enable  versioning'
+          say_security '  enable  versioning'
         end
         unless audit[:encryption]
           enable_encryption(bucket)
-          puts '  enable  AES-256 encryption'
+          say_security '  enable  AES-256 encryption'
         end
         unless audit[:public_access_block]
           block_public_access(bucket)
-          puts '  enable  public access block'
+          say_security '  enable  public access block'
         end
         return if audit[:tls_policy]
 
         apply_tls_policy(bucket)
-        puts '  enable  TLS-only bucket policy'
+        say_security '  enable  TLS-only bucket policy'
+      end
+
+      def say_security(message)
+        return if respond_to?(:say, true) && @quiet
+
+        puts message
       end
 
       private

data/lib/belt/cli/deploy_command.rb

@@ -9,6 +9,7 @@ require_relative 'terraform_command'
 require_relative 'backup_config'
 require_relative 'backup_runner'
 require_relative 'environment_config'
+require_relative 'path_gem_materializer'
 
 module Belt
   module CLI
@@ -150,6 +151,7 @@ module Belt
         puts "belt → deploying #{@env} (in #{env_dir}/)\n\n"
 
         ensure_lockfile_consistent!
+        warn_active_path_gems!
         generate_routes_if_needed
         run_backups unless @skip_backup
 
@@ -457,9 +459,55 @@ module Belt
         FileUtils.cp(gemfile, build_dir) if File.exist?(gemfile)
         FileUtils.cp(lockfile, build_dir) if File.exist?(lockfile)
 
+        copy_vendor_cache(build_dir)
+        materialize_path_gems!(build_dir)
+
         puts '    📁 Copied handlers, controllers, models, lib, config'
       end
 
+      # Stage prebuilt .gem files so Docker `bundle install` can install unreleased
+      # gems as normal package installs (with specifications/), not path/git layouts.
+      # Prefer project-root vendor/cache (next to Gemfile — Bundler's natural path);
+      # fall back to lambda/vendor/cache for older layouts.
+      def copy_vendor_cache(build_dir)
+        cache_dir = [
+          File.join(@project_root, 'vendor', 'cache'),
+          File.join(@project_root, 'lambda', 'vendor', 'cache')
+        ].find { |dir| Dir.exist?(dir) && !Dir.empty?(dir) }
+        return unless cache_dir
+
+        dest = File.join(build_dir, 'vendor', 'cache')
+        FileUtils.mkdir_p(dest)
+        FileUtils.cp_r(Dir.glob(File.join(cache_dir, '*')), dest)
+        gem_count = Dir.glob(File.join(dest, '*.gem')).size
+        puts "    📦 Copied vendor/cache (#{gem_count} local gem(s))"
+      end
+
+      # path: gems install under bundler/gems/ with no specifications/ — Lambda's
+      # bare `require 'belt'` can't see them. Build real .gem files into the
+      # package's vendor/cache and pin versions in the *build* Gemfile/lock only.
+      def materialize_path_gems!(build_dir)
+        gems = PathGemMaterializer.materialize!(build_dir, project_root: @project_root)
+        return if gems.empty?
+
+        puts "    🔧 Materialized path gem(s) → vendor/cache: #{gems.join(', ')}"
+      end
+
+      # path: gems need host-side materialize before Docker install. --rebuild
+      # always does it. Full terraform apply needs a conveyor-belt build that
+      # includes path-gem materialize (discord-vendor-cache-gemfile-parent+).
+      def warn_active_path_gems!
+        lockfile = File.join(@project_root, 'Gemfile.lock')
+        return unless File.exist?(lockfile)
+        return unless File.read(lockfile).match?(/^PATH\n/)
+
+        puts '  ⚠ Gemfile.lock has PATH gems (path: in Gemfile).'
+        puts "    Safe now: belt deploy #{@env} --rebuild (always materializes)."
+        puts '    Full terraform apply needs conveyor-belt with path-gem materialize.'
+        puts '    Or pin a version + drop a built .gem in vendor/cache/'
+        puts ''
+      end
+
       def build_gems(build_dir)
         puts '    🐳 Building gems in Docker (Lambda-compatible)...'