@assembly-js/app-foundation 0.0.41 → 0.0.43

package/dist/server.d.ts

@@ -12,6 +12,7 @@ export * from './labels.js';
 export * from './notifications.js';
 export * from './cron.js';
 export * from './replace-rows.js';
+export * from './proxy.js';
 export * from './api-errors.js';
 export * from './params.js';
 export * from './client.js';

package/dist/server.js

@@ -16,6 +16,7 @@ export * from './labels.js';
 export * from './notifications.js';
 export * from './cron.js';
 export * from './replace-rows.js';
+export * from './proxy.js';
 // Returns NextResponse, so route handlers only — but nothing here reads a
 // secret, which is why a client file may still `import type` from them.
 export * from './api-errors.js';

package/fixes.json

@@ -0,0 +1,64 @@
+[
+  {
+    "id": "next-config-wrapper",
+    "version": "0.0.20",
+    "title": "Your app's live preview no longer hangs on networks that block its dev connection.",
+    "check": "Your app's Next config must be split so next.config.ts is the platform-owned wrapper and your own settings live in app.config.ts. The end state: next.config.ts contains exactly:\n\nimport { withAssemblyDev } from \"@assembly-js/app-foundation/next\";\nimport appConfig from \"./app.config\";\n\nexport default withAssemblyDev(appConfig);\n\nTo get there: create app.config.ts and move whatever next.config.ts currently exports (serverExternalPackages, experimental flags, redirects, headers, etc.) into it verbatim, keeping the export shape the app already used (e.g. `export default { ... }` or `export default appConfig satisfies NextConfig`). Then replace next.config.ts's contents with the wrapper above. If a sibling next.config.js or next.config.mjs exists, delete it — Next loads whichever config file it finds first, and a leftover unwrapped copy would silently run instead of the wrapper. Do not add new Next options while you're at it, and do not touch anything outside these two files — this fix is a relocation, not a config change.",
+    "detector": {
+      "absent": ["next.config.js", "next.config.mjs"],
+      "present": [
+        { "path": "next.config.ts", "contains": ["withAssemblyDev("] },
+        { "path": "app.config.ts" }
+      ]
+    }
+  },
+  {
+    "id": "paint-beacon",
+    "version": "0.0.22",
+    "title": "Your app's preview now accurately reports when a page has finished rendering, not just loaded.",
+    "check": "Your app is missing the post-paint beacon the builder preview uses to tell \"the page executed\" from \"the page actually rendered.\" Add the component exactly as the foundation ships it, at app/components/paint-beacon.tsx:\n\n'use client';\n\nimport { useEffect } from 'react';\nimport { installPaintBeacon } from '@assembly-js/app-foundation/client';\n\nexport default function PaintBeacon(): null {\n  useEffect(() => {\n    installPaintBeacon();\n  }, []);\n  return null;\n}\n\nRender it once, self-closing and prop-less, in the root layout's <body> (app/layout.tsx): import it as `import PaintBeacon from '@/app/components/paint-beacon';` and add `<PaintBeacon />` alongside the other foundation-owned providers already rendered there.\n\nThe beacon's POST must be routed before any CSRF or session-exchange handling, because sendBeacon is a headerless POST that 403s on the normal path. The platform sign-in proxy already does this, so proxy.ts's proxy export should be the package's:\n\nimport { createAssemblyProxy } from '@assembly-js/app-foundation/server';\n\nexport const proxy = createAssemblyProxy();\n\nIf proxy.ts has been rewritten away from that, restore that export (keep the file's `config` matcher as it is) rather than adding a beacon route by hand. Make sure @assembly-js/app-foundation is a declared dependency (it should already be installed). Do not post app.painted or hit /__assembly/painted yourself — the component already does both.",
+    "detector": {
+      "present": [
+        { "path": "app/components/paint-beacon.tsx" },
+        { "path": "app/layout.tsx", "contains": ["<PaintBeacon"] }
+      ],
+      "dependencies": ["@assembly-js/app-foundation"],
+      "checks": [{ "of": "@assembly-js/app-foundation", "script": "check-paint-beacon.mjs" }]
+    }
+  },
+  {
+    "id": "inlined-child-rows-batch",
+    "version": "0.0.37",
+    "title": "Saving a record with nested rows no longer fails and drops the rows.",
+    "check": "Your app has its own copy of the child-row replace helper, and that copy calls drizzle's batch detached from db (`const batch = db.batch …; await batch([...])`). drizzle's batch reads this.session, so in a deployed app every save that writes nested rows (a proposal's packages, a retainer's allowances) fails with a 500 and leaves the parent without its children.\n\nDelete the app's copy and import the package's helper instead: `import { replaceChildRows } from '@assembly-js/app-foundation/server';`. Its signature is the one the copy was made from, so call sites keep their arguments. If the copy has drifted from the original and can't be swapped cleanly, keep it and change only the call to `await batch.call(db, [first, ...rest]);`. Do not change what the helper writes or the order it writes in.",
+    "detector": {
+      "forbidden": [{ "id": "detached-db-batch", "pattern": "(^|[^.\\w])batch\\(\\[" }]
+    }
+  },
+  {
+    "id": "identity-outage-states",
+    "version": "0.0.40",
+    "title": "If Assembly can't confirm who is signed in, your app now shows a retry screen instead of an error.",
+    "check": "Since 0.0.40, getSessionIdentity() asks the platform who the viewer is and throws an AuthUnavailableError when the platform can't be reached. Your root layout calls it without a catch, so during an outage every page fails instead of showing a retry screen, and every failed action renews the session without a bound. Bring three app-owned files to the foundation's current shape:\n\n1. Create app/components/auth-unavailable.tsx:\n\n'use client';\n\nexport default function AuthUnavailable() {\n  return (\n    <main className=\"flex min-h-screen flex-col items-center justify-center gap-3 px-4 text-center\">\n      <p className=\"text-sm text-muted-foreground\">\n        We couldn&apos;t load this right now. Please try again.\n      </p>\n      <button\n        type=\"button\"\n        className=\"rounded-md border px-3 py-1.5 text-sm\"\n        onClick={() => window.location.reload()}\n      >\n        Try again\n      </button>\n    </main>\n  );\n}\n\n2. In app/layout.tsx, import it (`import AuthUnavailable from '@/app/components/auth-unavailable';`) and replace `const identity = await getSessionIdentity();` with:\n\nlet identity: Awaited<ReturnType<typeof getSessionIdentity>> = null;\nlet authUnavailable = false;\ntry {\n  identity = await getSessionIdentity();\n} catch (err) {\n  if (!(err instanceof Error && err.name === 'AuthUnavailableError')) throw err;\n  authUnavailable = true;\n}\nif (authUnavailable) {\n  return (\n    <html lang=\"en\" style={{ colorScheme: 'light' }}>\n      <body className=\"font-sans antialiased\">\n        <AuthUnavailable />\n      </body>\n    </html>\n  );\n}\n\nKeep everything else in the layout as it is.\n\n3. Create app/components/renewal-gate.ts:\n\nexport function createRenewalGate(\n  renew: () => Promise<boolean>,\n  windowMs: number,\n  now: () => number = Date.now,\n): () => Promise<boolean> {\n  let inFlight: Promise<boolean> | null = null;\n  let lastStartedAt = Number.NEGATIVE_INFINITY;\n  return () => {\n    if (inFlight) return inFlight;\n    if (now() - lastStartedAt < windowMs) return Promise.resolve(false);\n    lastStartedAt = now();\n    inFlight = renew().finally(() => {\n      inFlight = null;\n    });\n    return inFlight;\n  };\n}\n\nThen in app/components/assembly-context.tsx add `import { createRenewalGate } from './renewal-gate';`, define `const renewOnce = createRenewalGate(reexchangeBearer, 30_000);` at module scope, and change the retry path's `await reexchangeBearer()` to `await renewOnce()`. Change nothing else in that file.",
+    "detector": {
+      "present": [
+        { "path": "app/components/auth-unavailable.tsx" },
+        { "path": "app/layout.tsx", "contains": ["AuthUnavailableError"] },
+        { "path": "app/components/renewal-gate.ts" },
+        { "path": "app/components/assembly-context.tsx", "contains": ["createRenewalGate("] }
+      ]
+    }
+  },
+  {
+    "id": "package-proxy",
+    "version": "0.0.42",
+    "title": "Your app's sign-in and cross-site request protection now come from Assembly and are tested by it.",
+    "check": "Your app's sign-in proxy is still code the app owns. Since 0.0.42 the package provides all of it — the token exchange, the bearer cookie, the CSRF gate and the re-exchange pass-through — and proxy.ts only calls it:\n\nimport { createAssemblyProxy } from '@assembly-js/app-foundation/server';\n\nexport const proxy = createAssemblyProxy();\n\nReplace the proxy function in proxy.ts with that export and delete a root middleware.ts if one exists. Keep the file's `config` matcher, including any exclusions the app added for its own paths; `api/assembly-reexchange` must stay excluded. Carry over only what the app added on top of the foundation's proxy: request headers it set for its own pages go in `createAssemblyProxy({ onForward({ request, headers, session }) { headers.set(…) } })`. Do not keep, port or rewrite any token, cookie or CSRF handling. Verify with `node node_modules/@assembly-js/app-foundation/bin/check-proxy-csrf.mjs --strict`; if it fails, the fix is the file above, not a change to request handling.",
+    "detector": {
+      "absent": ["middleware.ts"],
+      "present": [{ "path": "proxy.ts", "contains": ["@assembly-js/app-foundation/server", "createAssemblyProxy("] }],
+      "dependencies": ["@assembly-js/app-foundation"],
+      "checks": [{ "of": "@assembly-js/app-foundation", "script": "check-proxy-csrf.mjs" }]
+    }
+  }
+]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@assembly-js/app-foundation",
-  "version": "0.0.41",
+  "version": "0.0.43",
   "description": "Versioned foundation helpers and build context for Assembly generated apps",
   "type": "module",
   "files": [
@@ -8,7 +8,9 @@
     "bin",
     "skills",
     "CLAUDE.md",
-    "render-context.mjs"
+    "render-context.mjs",
+    "fixes.json",
+    "CHANGELOG.md"
   ],
   "exports": {
     "./server": {
@@ -30,7 +32,7 @@
   },
   "scripts": {
     "build": "tsc && tsc-alias",
-    "test": "bun test && tsc -p tsconfig.replace-rows.json",
+    "test": "npm run build && bun test --path-ignore-patterns='**/proxy.test.ts' && bun test ./src/proxy.test.ts && tsc -p tsconfig.replace-rows.json",
     "prepublishOnly": "npm run build && npm run verify:dist && npm run verify:bin",
     "verify:dist": "node scripts/verify-dist-resolves.mjs",
     "verify:bin": "node scripts/verify-bin.mjs"