@capxul/sandbox 2.0.0 → 2.0.1

package/README.md

@@ -15,16 +15,16 @@ npx @capxul/sandbox faucet send
 vp run --filter @capxul/sandbox dev -- --help
 ```
 
-`key create` uses the Little Sandpiper public staging quickstart endpoint and
+`key create` uses the Railway public staging Site endpoint and
 needs no operator secret. `APP_ENV` does not retarget this public command; use
 the returned key only with the staging tuple.
 `faucet send` invokes the canonical Convex deployment and requires operator
 access in the process environment: inside the infrastructure repository, run
 it through the one env entry point
-(`vp exec bash scripts/capxul-env.sh npx @capxul/sandbox faucet send`); outside
-it, supply the deploy key directly
-(`CONVEX_DEPLOY_KEY=… npx @capxul/sandbox faucet send`). Never print or commit
-those values.
+(`APP_ENV=staging vp exec bash scripts/capxul-env.sh npx @capxul/sandbox faucet
+send`); outside it, supply the self-hosted admin key directly
+(`CONVEX_SELF_HOSTED_ADMIN_KEY=… npx @capxul/sandbox faucet send`). Never print
+or commit that value.
 
 ## Verify in the repository
 

package/dist/main.mjs

@@ -13,6 +13,7 @@ var deployment_topology_default = {
 		"development": {
 			"appEnv": "development",
 			"productRole": "development",
+			"substrate": "convex-cloud",
 			"convexProject": "capxul-platform-dev",
 			"deployment": "dev:incredible-possum-990",
 			"deploymentReference": "dev/aaron-griffith",
@@ -31,16 +32,17 @@ var deployment_topology_default = {
 		"staging": {
 			"appEnv": "staging",
 			"productRole": "staging",
-			"convexProject": "capxul-platform-effect",
-			"deployment": "prod:little-sandpiper-974",
+			"substrate": "self-hosted-railway",
+			"convexProject": "adorable-illumination",
+			"deployment": "self-hosted:railway",
 			"deploymentReference": "production",
-			"name": "little-sandpiper-974",
-			"convexType": "prod",
-			"convexUrl": "https://little-sandpiper-974.convex.cloud",
-			"convexSiteUrl": "https://little-sandpiper-974.convex.site",
+			"name": "convex-backend-production-f220",
+			"convexType": "self-hosted",
+			"convexUrl": "https://convex-backend-production-f220.up.railway.app",
+			"convexSiteUrl": "https://convex-site-production-29eb.up.railway.app",
 			"chainId": 84532,
 			"expectedFingerprints": {
-				"applicationId": "4e2989ea295fc269",
+				"applicationId": "3d006cc2d0190eab",
 				"openfortPublishableKey": "aab42edbcdc683e7",
 				"shieldPublishableKey": "a323489c9a8d8da2"
 			},
@@ -65,22 +67,24 @@ function resolveDeploymentTier(appEnv) {
 }
 function assertDeploymentTuple(appEnv, values) {
 	const tier = resolveDeploymentTier(appEnv);
+	const selfHosted = tier.substrate === "self-hosted-railway";
 	const expected = {
-		CONVEX_DEPLOYMENT: tier.deployment,
 		CONVEX_URL: tier.convexUrl,
-		CONVEX_SITE_URL: tier.convexSiteUrl
+		CONVEX_SITE_URL: tier.convexSiteUrl,
+		...selfHosted ? { CONVEX_SELF_HOSTED_URL: tier.convexUrl } : { CONVEX_DEPLOYMENT: tier.deployment }
 	};
 	const mismatches = Object.entries(expected).flatMap(([name, expectedValue]) => {
 		const actual = values[name]?.trim();
 		return actual === expectedValue ? [] : [`${name}: expected '${expectedValue}', received '${actual ?? "<missing>"}'`];
 	});
 	const deployKey = values.CONVEX_DEPLOY_KEY?.trim();
-	if (deployKey !== void 0 && deployKey.length > 0) {
+	if (!selfHosted && deployKey !== void 0 && deployKey.length > 0) {
 		const separatorIndex = deployKey.indexOf("|");
 		const candidateDeployment = separatorIndex > 0 && deployKey.slice(separatorIndex + 1).trim().length > 0 ? deployKey.slice(0, separatorIndex) : "";
 		const keyDeployment = /^(?:dev|prod):[a-z0-9-]+$/u.test(candidateDeployment) ? candidateDeployment : void 0;
 		if (keyDeployment !== tier.deployment) mismatches.push(`CONVEX_DEPLOY_KEY: expected a key bound to '${tier.deployment}', received a key for '${keyDeployment ?? "<invalid>"}'`);
 	}
+	if (selfHosted && (values.CONVEX_SELF_HOSTED_ADMIN_KEY?.trim().length ?? 0) === 0) mismatches.push("CONVEX_SELF_HOSTED_ADMIN_KEY: required for self-hosted staging");
 	for (const optionalUrlName of ["CAPXUL_E2E_BOOTSTRAP_URL", "CAPXUL_E2E_BOOTSTRAP_BASE_URL"]) {
 		const raw = values[optionalUrlName]?.trim();
 		if (raw === void 0 || raw.length === 0) continue;
@@ -125,6 +129,7 @@ if (process.argv[1] !== void 0 && path.basename(process.argv[1]) === "deployment
 resolve(resolve(fileURLToPath(new URL("..", import.meta.url))), "..", "..");
 const standingStaging = resolveDeploymentTier("staging");
 const CANONICAL_QUICKSTART_DEPLOYMENT = {
+	substrate: standingStaging.substrate,
 	deployment: standingStaging.deployment,
 	convexUrl: standingStaging.convexUrl,
 	convexSiteUrl: standingStaging.convexSiteUrl
@@ -164,40 +169,47 @@ const PLATFORM_ENV_NAMES = [
 	"WINDIR",
 	"windir"
 ];
-function convexArgsForDeployment(args, deployment, hasDeployKey) {
+function convexArgsForTarget(args, target, hasDeployKey) {
+	if (target.substrate === "self-hosted-railway") return [...args];
 	if (hasDeployKey) return [...args];
 	if (args[0] === "run") return [
 		"run",
 		"--deployment",
-		deployment,
+		target.deployment,
 		...args.slice(1)
 	];
 	return [
 		...args,
 		"--deployment",
-		deployment
+		target.deployment
 	];
 }
-function convexChildEnv(deployment, sourceEnv) {
+function convexChildEnv(target, sourceEnv) {
 	const env = {
 		CI: "true",
-		CONVEX_DEPLOYMENT: deployment,
 		HOME: homedir(),
 		PATH: process.env.PATH ?? "",
 		TMPDIR: process.env.TMPDIR ?? tmpdir()
 	};
-	const deployKey = sourceEnv.CONVEX_DEPLOY_KEY?.trim();
-	if (deployKey !== void 0 && deployKey.length > 0) env.CONVEX_DEPLOY_KEY = deployKey;
+	if (target.substrate === "self-hosted-railway") {
+		env.CONVEX_SELF_HOSTED_URL = target.convexUrl;
+		const adminKey = sourceEnv.CONVEX_SELF_HOSTED_ADMIN_KEY?.trim();
+		if (adminKey !== void 0 && adminKey.length > 0) env.CONVEX_SELF_HOSTED_ADMIN_KEY = adminKey;
+	} else {
+		env.CONVEX_DEPLOYMENT = target.deployment;
+		const deployKey = sourceEnv.CONVEX_DEPLOY_KEY?.trim();
+		if (deployKey !== void 0 && deployKey.length > 0) env.CONVEX_DEPLOY_KEY = deployKey;
+	}
 	for (const name of PLATFORM_ENV_NAMES) {
 		const value = process.env[name];
 		if (value !== void 0 && value.length > 0) env[name] = value;
 	}
 	return env;
 }
-function createConvexPathRunner({ deployment, env: sourceEnv = process.env, spawn = spawnSync }) {
+function createConvexPathRunner({ target, env: sourceEnv = process.env, spawn = spawnSync }) {
 	return (_deploymentEnvFile, args) => {
-		const childEnv = convexChildEnv(deployment, sourceEnv);
-		const result = spawn("convex", convexArgsForDeployment(args, deployment, childEnv.CONVEX_DEPLOY_KEY !== void 0), {
+		const childEnv = convexChildEnv(target, sourceEnv);
+		const result = spawn("convex", convexArgsForTarget(args, target, childEnv.CONVEX_DEPLOY_KEY !== void 0), {
 			cwd: packageRoot,
 			env: childEnv,
 			encoding: "utf8",
@@ -257,7 +269,7 @@ function errorMessage(error) {
 }
 function canonicalConvexRunner(env = process.env) {
 	return createConvexPathRunner({
-		deployment: CANONICAL_QUICKSTART_DEPLOYMENT.deployment,
+		target: CANONICAL_QUICKSTART_DEPLOYMENT,
 		env
 	});
 }
@@ -372,7 +384,7 @@ async function runFaucetSend() {
 		return 0;
 	} catch (error) {
 		s.stop("Faucet send failed");
-		const hint = process.env.CONVEX_DEPLOY_KEY === void 0 ? "\nHint: CONVEX_DEPLOY_KEY is not set — the faucet needs operator access to the canonical deployment. Supply it (CONVEX_DEPLOY_KEY=… npx @capxul/sandbox faucet send) or, inside the infrastructure repo, run through scripts/capxul-env.sh." : "";
+		const hint = process.env.CONVEX_SELF_HOSTED_ADMIN_KEY === void 0 ? "\nHint: CONVEX_SELF_HOSTED_ADMIN_KEY is not set — the faucet needs operator access to Railway staging. Supply it directly or, inside the infrastructure repo, run `APP_ENV=staging vp exec bash scripts/capxul-env.sh npx @capxul/sandbox faucet send`." : "";
 		cancel(errorMessage(error) + hint);
 		return 1;
 	}
@@ -506,7 +518,7 @@ async function runKeyCreate() {
 		return 0;
 	}
 	const origin = normalizeHttpOrigin(originPrompt);
-	const baseUrl = process.env.CAPXUL_QUICKSTART_URL ?? "https://little-sandpiper-974.convex.site";
+	const baseUrl = process.env.CAPXUL_QUICKSTART_URL ?? "https://convex-site-production-29eb.up.railway.app";
 	const envPath = resolve(process.cwd(), ".env.local");
 	const s = spinner();
 	s.start("Requesting a sandbox publishable key");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capxul/sandbox",
-  "version": "2.0.0",
+  "version": "2.0.1",
   "private": false,
   "description": "Capxul sandbox CLI for canonical quickstart keys and testnet faucet funds.",
   "keywords": [