@bleedingdev/modern-js-create 3.4.0-ultramodern.12 → 3.4.0-ultramodern.14

package/templates/workspace-scripts/generate-public-surface-assets.mjs

@@ -4,18 +4,253 @@ import path from 'node:path';
 import { fileURLToPath, pathToFileURL } from 'node:url';
 
 const workspaceRoot = path.resolve(
-  path.dirname(fileURLToPath(import.meta.url)),
-  '..',
+  process.env.ULTRAMODERN_WORKSPACE_ROOT ??
+    path.join(path.dirname(fileURLToPath(import.meta.url)), '..'),
 );
 const contractPath = path.join(
   workspaceRoot,
   '.modernjs/ultramodern-generated-contract.json',
 );
+const compactConfigPath = path.join(workspaceRoot, '.modernjs/ultramodern.json');
 
 function readJson(filePath) {
   return JSON.parse(fs.readFileSync(filePath, 'utf-8'));
 }
 
+function toKebabCase(value) {
+  return String(value)
+    .trim()
+    .replace(/([a-z0-9])([A-Z])/gu, '$1-$2')
+    .replace(/[^a-zA-Z0-9._-]+/gu, '-')
+    .replace(/[._]+/gu, '-')
+    .toLowerCase()
+    .replace(/-+/gu, '-')
+    .replace(/^-+|-+$/gu, '');
+}
+
+function toEnvSegment(value) {
+  return toKebabCase(value).replace(/-/gu, '_').toUpperCase();
+}
+
+function normalizeRelativePath(value) {
+  return String(value ?? '').replace(/\\/gu, '/').replace(/^\.\/+/u, '');
+}
+
+function appNamespace(app) {
+  return app.kind === 'shell' ? 'shell' : (app.domain ?? app.id);
+}
+
+function defaultPortEnv(app) {
+  return app.kind === 'shell'
+    ? 'SHELL_SUPER_APP_PORT'
+    : `VERTICAL_${toEnvSegment(app.domain ?? app.id)}_PORT`;
+}
+
+function defaultPort(app) {
+  return app.kind === 'shell' ? 3020 : 3030;
+}
+
+function normalizeCompactApp(rawApp) {
+  const id = String(rawApp.id);
+  const kind = rawApp.kind === 'vertical' ? 'vertical' : 'shell';
+  const appPath =
+    typeof rawApp.path === 'string'
+      ? normalizeRelativePath(rawApp.path)
+      : kind === 'shell'
+        ? 'apps/shell-super-app'
+        : `verticals/${toKebabCase(id)}`;
+  const packageSuffix =
+    typeof rawApp.packageSuffix === 'string'
+      ? rawApp.packageSuffix
+      : appPath.split('/').at(-1) ?? id;
+  const domain =
+    typeof rawApp.domain === 'string'
+      ? rawApp.domain
+      : kind === 'vertical'
+        ? packageSuffix
+        : undefined;
+  const moduleFederation =
+    rawApp.moduleFederation && typeof rawApp.moduleFederation === 'object'
+      ? rawApp.moduleFederation
+      : {};
+
+  return {
+    id,
+    kind,
+    path: appPath,
+    packageSuffix,
+    domain,
+    port:
+      typeof rawApp.port === 'number'
+        ? rawApp.port
+        : defaultPort({ id, kind, domain }),
+    portEnv:
+      typeof rawApp.portEnv === 'string'
+        ? rawApp.portEnv
+        : defaultPortEnv({ id, kind, domain }),
+    mfName:
+      typeof moduleFederation.name === 'string'
+        ? moduleFederation.name
+        : kind === 'shell'
+          ? 'shellSuperApp'
+          : `vertical${toKebabCase(domain ?? id)
+              .split('-')
+              .filter(Boolean)
+              .map(part => part.charAt(0).toUpperCase() + part.slice(1))
+              .join('')}`,
+    exposes: Array.isArray(moduleFederation.exposes)
+      ? moduleFederation.exposes.filter(expose => typeof expose === 'string')
+      : [],
+    verticalRefs: Array.isArray(moduleFederation.verticalRefs)
+      ? moduleFederation.verticalRefs.filter(ref => typeof ref === 'string')
+      : [],
+    marker: {
+      appId: id,
+    },
+    effectApi:
+      rawApp.effectApi && typeof rawApp.effectApi === 'object'
+        ? {
+            stem:
+              typeof rawApp.effectApi.stem === 'string'
+                ? rawApp.effectApi.stem
+                : domain ?? id,
+            prefix:
+              typeof rawApp.effectApi.prefix === 'string'
+                ? rawApp.effectApi.prefix
+                : `/${domain ?? id}-api`,
+          }
+        : undefined,
+  };
+}
+
+function createRouteOwnedEntries(app) {
+  const namespace = appNamespace(app);
+  const base = {
+    descriptionKey: `${namespace}.seo.description`,
+    mfBoundaryId: app.mfName,
+    namespace,
+    ownerAppId: app.id,
+    public: false,
+    indexable: false,
+    publicSurface: 'private-app-screen',
+  };
+
+  return [
+    {
+      ...base,
+      canonicalPath: '/',
+      id: app.kind === 'shell' ? 'shell-home' : `${app.id}-home`,
+      localisedPaths: {
+        cs: '/',
+        en: '/',
+      },
+      titleKey: app.kind === 'shell' ? 'shell.title' : `${namespace}.title`,
+    },
+  ];
+}
+
+function createPublicRoutes(app) {
+  return createRouteOwnedEntries(app)
+    .filter(route => route.public && route.indexable)
+    .map(route => ({
+      canonicalPath: route.canonicalPath,
+      id: route.id,
+      localisedPaths: route.localisedPaths,
+      namespace: route.namespace,
+      ownerAppId: route.ownerAppId,
+      descriptionKey: route.descriptionKey,
+      titleKey: route.titleKey,
+    }));
+}
+
+function createPublicSurface(app) {
+  const publicRoutes = createPublicRoutes(app);
+  return {
+    authoring: 'colocated-route-meta',
+    artifactLifecycle: 'build-and-deploy-output',
+    generatedManifest: './src/routes/ultramodern-route-metadata',
+    source: 'route-owned-public-routes',
+    metadataExport: './src/routes/ultramodern-route-metadata',
+    generator: 'scripts/generate-public-surface-assets.mjs',
+    outputRoot: 'dist/public',
+    cloudflareOutputRoot: '.output/public',
+    privateRoutePolicy: 'omit-from-generated-public-surface',
+    files:
+      publicRoutes.length > 0
+        ? ['robots.txt', 'sitemap.xml', 'site.webmanifest']
+        : ['robots.txt'],
+    omittedByDefault: ['api-catalog.json', 'llms.txt', 'security.txt'],
+    languages: ['en', 'cs'],
+    contentExpansion: {
+      authoring: 'route-owned-esm-provider',
+      defaultProviderFile: 'route.sitemap.mjs',
+      entryExport: 'default-or-entries',
+      paramsSource: 'params-or-localeParams',
+      draftPolicy: 'omit-draft-by-default',
+      indexablePolicy: 'omit-indexable-false',
+      lifecycle: 'executed-during-public-surface-generation',
+    },
+    contentSources: [],
+    publicRoutes,
+    routeEntries: [],
+    concreteUrlPaths: [],
+  };
+}
+
+function createCloudflareDeploy(config, app) {
+  const packageScope =
+    typeof config.workspace?.packageScope === 'string'
+      ? config.workspace.packageScope
+      : path.basename(workspaceRoot);
+  const compatibilityDate =
+    typeof config.deploy?.worker?.compatibilityDate === 'string'
+      ? config.deploy.worker.compatibilityDate
+      : '2026-06-02';
+  return {
+    workerName: `${toKebabCase(packageScope)}-${app.packageSuffix}`.slice(0, 63),
+    publicUrlEnv: `ULTRAMODERN_PUBLIC_URL_${toEnvSegment(app.id)}`,
+    compatibilityDate,
+    compatibilityFlags: ['nodejs_compat', 'global_fetch_strictly_public'],
+  };
+}
+
+function synthesizeContractFromCompactConfig(config) {
+  const apps = Array.isArray(config.topology?.apps)
+    ? config.topology.apps.map(normalizeCompactApp)
+    : [];
+
+  return {
+    sourcePath: compactConfigPath,
+    apps: apps.map(app => ({
+      ...app,
+      deploy: {
+        cloudflare: createCloudflareDeploy(config, app),
+      },
+      routes: {
+        publicSurface: createPublicSurface(app),
+      },
+    })),
+  };
+}
+
+function readGeneratedContractView() {
+  if (fs.existsSync(compactConfigPath)) {
+    return synthesizeContractFromCompactConfig(readJson(compactConfigPath));
+  }
+  if (fs.existsSync(contractPath)) {
+    return {
+      sourcePath: contractPath,
+      ...readJson(contractPath),
+    };
+  }
+  throw new Error(
+    `Missing UltraModern config. Expected ${path.relative(
+      workspaceRoot,
+      compactConfigPath,
+    )} or ${path.relative(workspaceRoot, contractPath)}.`,
+  );
+}
+
 function parseArgs(argv) {
   const parsed = {
     appId: undefined,
@@ -517,10 +752,10 @@ try {
     printHelp();
     process.exit(0);
   }
-  const contract = readJson(contractPath);
+  const contract = readGeneratedContractView();
   const app = contract.apps?.find(candidate => candidate.id === args.appId);
   if (!app) {
-    throw new Error(`Unknown app in generated contract: ${args.appId}`);
+    throw new Error(`Unknown app in UltraModern config: ${args.appId}`);
   }
   await generatePublicSurfaceAssets(app, args.target, args.requirePublicOrigin);
 } catch (error) {

package/templates/workspace-scripts/proof-cloudflare-version.mjs

@@ -1,17 +1,19 @@
 #!/usr/bin/env node
+import crypto from 'node:crypto';
 import fs from 'node:fs';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { validateApp } from './ultramodern-cloudflare-proof.mjs';
 
 const workspaceRoot = path.resolve(
-  path.dirname(fileURLToPath(import.meta.url)),
-  '..',
+  process.env.ULTRAMODERN_WORKSPACE_ROOT ??
+    path.join(path.dirname(fileURLToPath(import.meta.url)), '..'),
 );
 const contractPath = path.join(
   workspaceRoot,
   '.modernjs/ultramodern-generated-contract.json',
 );
+const compactConfigPath = path.join(workspaceRoot, '.modernjs/ultramodern.json');
 const defaultOut = path.join(
   workspaceRoot,
   '.codex/reports/cloudflare-version-proof/public-url-proof.json',
@@ -21,6 +23,282 @@ function readJson(filePath) {
   return JSON.parse(fs.readFileSync(filePath, 'utf8'));
 }
 
+function toKebabCase(value) {
+  return String(value)
+    .trim()
+    .replace(/([a-z0-9])([A-Z])/gu, '$1-$2')
+    .replace(/[^a-zA-Z0-9._-]+/gu, '-')
+    .replace(/[._]+/gu, '-')
+    .toLowerCase()
+    .replace(/-+/gu, '-')
+    .replace(/^-+|-+$/gu, '');
+}
+
+function toPascalCase(value) {
+  return toKebabCase(value)
+    .split('-')
+    .filter(Boolean)
+    .map(part => part.charAt(0).toUpperCase() + part.slice(1))
+    .join('');
+}
+
+function toEnvSegment(value) {
+  return toKebabCase(value).replace(/-/gu, '_').toUpperCase();
+}
+
+function normalizeRelativePath(value) {
+  return String(value ?? '').replace(/\\/gu, '/').replace(/^\.\/+/u, '');
+}
+
+function appNamespace(app) {
+  return app.kind === 'shell' ? 'shell' : (app.domain ?? app.id);
+}
+
+function normalizeCompactApp(rawApp) {
+  const id = String(rawApp.id);
+  const kind = rawApp.kind === 'vertical' ? 'vertical' : 'shell';
+  const appPath =
+    typeof rawApp.path === 'string'
+      ? normalizeRelativePath(rawApp.path)
+      : kind === 'shell'
+        ? 'apps/shell-super-app'
+        : `verticals/${toKebabCase(id)}`;
+  const packageSuffix =
+    typeof rawApp.packageSuffix === 'string'
+      ? rawApp.packageSuffix
+      : appPath.split('/').at(-1) ?? id;
+  const domain =
+    typeof rawApp.domain === 'string'
+      ? rawApp.domain
+      : kind === 'vertical'
+        ? packageSuffix
+        : undefined;
+  const moduleFederation =
+    rawApp.moduleFederation && typeof rawApp.moduleFederation === 'object'
+      ? rawApp.moduleFederation
+      : {};
+  const effectApi =
+    rawApp.effectApi && typeof rawApp.effectApi === 'object'
+      ? {
+          stem:
+            typeof rawApp.effectApi.stem === 'string'
+              ? rawApp.effectApi.stem
+              : domain ?? id,
+          prefix:
+            typeof rawApp.effectApi.prefix === 'string'
+              ? rawApp.effectApi.prefix
+              : `/${domain ?? id}-api`,
+        }
+      : undefined;
+
+  return {
+    id,
+    kind,
+    path: appPath,
+    packageSuffix,
+    domain,
+    mfName:
+      typeof moduleFederation.name === 'string'
+        ? moduleFederation.name
+        : kind === 'shell'
+          ? 'shellSuperApp'
+          : `vertical${toPascalCase(domain ?? id)}`,
+    effectApi,
+  };
+}
+
+function createBuildMarker(scope, app) {
+  return crypto
+    .createHash('sha256')
+    .update(`${scope}:${app.packageSuffix}:${app.id}:0.1.0`)
+    .digest('hex')
+    .slice(0, 16);
+}
+
+function createCloudflareSecurity() {
+  return {
+    enabled: true,
+    headers: {
+      referrerPolicy: 'strict-origin-when-cross-origin',
+      contentTypeOptions: 'nosniff',
+      permissionsPolicy:
+        'camera=(), geolocation=(), microphone=(), payment=(), usb=()',
+    },
+    contentSecurityPolicy: {
+      mode: 'report-only',
+      directives: {
+        'base-uri': [`'self'`],
+        'connect-src': [`'self'`, 'https:', 'http:', 'wss:', 'ws:'],
+        'default-src': [`'self'`],
+        'font-src': [`'self'`, 'data:', 'https:', 'http:'],
+        'form-action': [`'self'`],
+        'frame-ancestors': [`'self'`],
+        'img-src': [`'self'`, 'data:', 'blob:', 'https:', 'http:'],
+        'manifest-src': [`'self'`, 'https:', 'http:'],
+        'object-src': [`'none'`],
+        'script-src': [
+          `'self'`,
+          `'unsafe-inline'`,
+          `'unsafe-eval'`,
+          'https:',
+          'http:',
+          'blob:',
+        ],
+        'style-src': [`'self'`, `'unsafe-inline'`, 'https:', 'http:'],
+        'worker-src': [`'self'`, 'blob:'],
+      },
+      reason:
+        'Report-only by default so Cloudflare Module Federation SSR can prove remote script, style, and connect compatibility before enforcement.',
+    },
+    noindex: {
+      workersDev: true,
+      localhost: true,
+      previewHostnames: [],
+    },
+  };
+}
+
+function createQualityGates() {
+  return {
+    publicRoutes: {
+      requireSitemapWhenPresent: true,
+      requireRobotsSitemapConsistency: true,
+      requireWebManifestWhenPresent: true,
+    },
+    statusCodes: {
+      notFoundRoute: '/__ultramodern-smoke-missing',
+      unknownRouteStatus: 404,
+    },
+    indexing: {
+      previewNoindex: true,
+      productionPublicRoutesIndexable: true,
+    },
+    assets: {
+      cssPreloadRequired: true,
+      cssResponseRequired: true,
+      cacheControlRequiredForCss: true,
+      sourcemapsPubliclyReferenced: false,
+    },
+    budgets: {
+      ssrHtmlMaxBytes: 250_000,
+      mfManifestMaxBytes: 500_000,
+      localeJsonMaxBytes: 100_000,
+      sitemapXmlMaxBytes: 500_000,
+      cssAssetMaxBytes: 750_000,
+    },
+    csp: {
+      finalMode: 'report-only-dogfood',
+      decision:
+        'Report-only remains the generated final mode until public smoke proof records MF SSR script/style/connect compatibility for the deployed surface.',
+    },
+  };
+}
+
+function createPublicHead() {
+  return {
+    alternates: {
+      hreflang: ['en', 'cs'],
+      xDefault: 'en',
+    },
+  };
+}
+
+function createPublicSurface() {
+  return {
+    publicRoutes: [],
+    routeEntries: [],
+    contentSources: [],
+    concreteUrlPaths: [],
+  };
+}
+
+function createCloudflareRoutes(app) {
+  return {
+    ssr: '/en',
+    mfManifest: '/mf-manifest.json',
+    locale: `/locales/en/${appNamespace(app)}.json`,
+    ...(app.effectApi
+      ? {
+          effectReadiness: `${app.effectApi.prefix}/effect/${app.effectApi.stem}/readiness`,
+        }
+      : {}),
+  };
+}
+
+function createContractApp(config, app) {
+  const packageScope =
+    typeof config.workspace?.packageScope === 'string'
+      ? config.workspace.packageScope
+      : path.basename(workspaceRoot);
+  const compatibilityDate =
+    typeof config.deploy?.worker?.compatibilityDate === 'string'
+      ? config.deploy.worker.compatibilityDate
+      : '2026-06-02';
+
+  return {
+    id: app.id,
+    deploy: {
+      cloudflare: {
+        workerName: `${toKebabCase(packageScope)}-${app.packageSuffix}`.slice(
+          0,
+          63,
+        ),
+        publicUrlEnv: `ULTRAMODERN_PUBLIC_URL_${toEnvSegment(app.id)}`,
+        compatibilityDate,
+        compatibilityFlags: ['nodejs_compat', 'global_fetch_strictly_public'],
+        routes: createCloudflareRoutes(app),
+        security: createCloudflareSecurity(),
+        qualityGates: createQualityGates(),
+      },
+    },
+    i18n: {
+      namespace: appNamespace(app),
+    },
+    marker: {
+      appId: app.id,
+      build: createBuildMarker(packageScope, app),
+    },
+    routes: {
+      publicHead: createPublicHead(),
+      publicSurface: createPublicSurface(),
+    },
+    styling: {
+      federation: {
+        rootSelector: `[data-app-id="${app.id}"]`,
+      },
+    },
+  };
+}
+
+function synthesizeContractFromCompactConfig(config) {
+  const apps = Array.isArray(config.topology?.apps)
+    ? config.topology.apps.map(normalizeCompactApp)
+    : [];
+
+  return {
+    sourcePath: compactConfigPath,
+    apps: apps.map(app => createContractApp(config, app)),
+  };
+}
+
+function readGeneratedContractView() {
+  if (fs.existsSync(compactConfigPath)) {
+    return synthesizeContractFromCompactConfig(readJson(compactConfigPath));
+  }
+  if (fs.existsSync(contractPath)) {
+    return {
+      sourcePath: contractPath,
+      ...readJson(contractPath),
+    };
+  }
+  throw new Error(
+    `Missing UltraModern config. Expected ${path.relative(
+      workspaceRoot,
+      compactConfigPath,
+    )} or ${path.relative(workspaceRoot, contractPath)}.`,
+  );
+}
+
 function parseArgs(argv) {
   const parsed = {
     appId: undefined,
@@ -70,7 +348,7 @@ async function main(argv = process.argv.slice(2)) {
     return 0;
   }
 
-  const contract = readJson(contractPath);
+  const contract = readGeneratedContractView();
   const apps = args.appId
     ? contract.apps.filter(app => app.id === args.appId)
     : contract.apps;
@@ -101,7 +379,7 @@ async function main(argv = process.argv.slice(2)) {
     schemaVersion: 1,
     generatedAt: new Date().toISOString(),
     status: results.length > 0 ? 'pass' : 'skipped',
-    contractPath,
+    contractPath: contract.sourcePath ?? contractPath,
     results,
     skipped,
   };