@locale-labs/miniapp-builder 0.1.9 → 0.2.0-dev.54.7fe6f45

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@locale-labs/miniapp-builder",
-  "version": "0.1.9",
+  "version": "0.2.0-dev.54.7fe6f45",
   "description": "Build tool for Localé Mini-Apps",
   "repository": {
     "type": "git",
@@ -11,28 +11,34 @@
     "locale-miniapp-builder": "./dist/index.js"
   },
   "files": [
-    "dist"
+    "dist",
+    "configs",
+    "templates"
   ],
   "scripts": {
-    "build": "esbuild src/index.ts --bundle --platform=node --target=node18 --outfile=dist/index.js --format=cjs --banner:js=\"#!/usr/bin/env node\" --external:esbuild",
+    "build": "esbuild src/index.ts --bundle --platform=node --target=node18 --outfile=dist/index.js --format=cjs --banner:js=\"#!/usr/bin/env node\" --external:esbuild --external:tailwindcss",
     "prepublishOnly": "bun run build",
     "security-check": "bunx @socketsecurity/cli ci"
   },
   "dependencies": {
+    "@eslint/js": "^9.0.0",
     "@locale-labs/miniapp-sdk": "0.2.0-dev.2.095bf24",
-    "@types/html-minifier-terser": "7.0.2",
     "autoprefixer": "10.4.23",
+    "esbuild": "0.27.2",
+    "eslint-config-prettier": "^9.1.0",
+    "globals": "^15.0.0",
     "html-minifier-terser": "7.2.0",
     "postcss": "8.5.6",
     "posthtml": "0.16.7",
     "posthtml-include": "2.0.1",
-    "tailwindcss": "4.1.18"
+    "tailwindcss": "^3.4.3",
+    "typescript-eslint": "^8.0.0"
   },
   "devDependencies": {
     "@semantic-release/changelog": "6.0.3",
+    "@types/html-minifier-terser": "7.0.2",
     "@semantic-release/git": "10.0.1",
     "@types/node": "25.0.10",
-    "esbuild": "0.27.2",
     "semantic-release": "25.0.2",
     "typescript": "^5.0.0"
   },

package/templates/functions/_shared/client.ts

@@ -0,0 +1,42 @@
+// Follow this setup guide to integrate the Deno language server with your editor:
+// https://deno.land/manual/getting_started/setup_your_environment
+
+// Setup type definitions for built-in Supabase Runtime APIs
+// deno-lint-ignore no-unversioned-import no-import-prefix
+import "jsr:@supabase/functions-js/edge-runtime.d.ts";
+import { createClient, SupabaseClient } from "@supabase/supabase-js";
+
+import { response500_internal_server_error } from "./responses.ts";
+
+export const createSupabaseAdminClient = ():
+  | {
+      error: null;
+      client: SupabaseClient;
+    }
+  | {
+      error: Response;
+      client: null;
+    } => {
+  try {
+    const supabaseUrl = Deno.env.get("SUPABASE_URL") ?? "";
+    const serviceRoleKey = Deno.env.get("SUPABASE_SERVICE_ROLE_KEY") ?? "";
+
+    if (!supabaseUrl || !serviceRoleKey) {
+      return {
+        error: response500_internal_server_error(
+          new Error("Missing Supabase environment variables")
+        ),
+        client: null,
+      };
+    }
+
+    return {
+      error: null,
+      client: createClient(supabaseUrl, serviceRoleKey, {
+        auth: { persistSession: false, autoRefreshToken: false },
+      }),
+    };
+  } catch (error) {
+    return { error: response500_internal_server_error(error), client: null };
+  }
+};

package/templates/functions/_shared/cors.ts

@@ -0,0 +1,5 @@
+export const corsHeaders = {
+  "Access-Control-Allow-Origin": "*",
+  "Access-Control-Allow-Headers":
+    "authorization, x-client-info, apikey, content-type",
+};

package/templates/functions/_shared/responses.ts

@@ -0,0 +1,45 @@
+// Nota: aca solo se usaba el TYPE `PostgrestError` (union `PostgrestError | unknown`),
+// union que colapsa a `unknown` (sin efecto). La dependencia @supabase/supabase-js
+// SI es real y sigue en uso: client.ts la importa (createClient) y se resuelve via
+// el import map de deno.json (jsr:@supabase/supabase-js@2).
+import { corsHeaders } from "./cors.ts";
+
+const headers = { ...corsHeaders, "Content-Type": "application/json" };
+
+const errorMessageOrUnknownError = (error: unknown) =>
+  error instanceof Error ? error.message : "Unknown error";
+
+export const response200 = (data: unknown) =>
+  new Response(JSON.stringify(data), {
+    headers,
+    status: 200,
+  });
+
+export const response400_bad_request = (error: unknown) =>
+  new Response(JSON.stringify({ error: errorMessageOrUnknownError(error) }), {
+    headers,
+    status: 400,
+  });
+
+export const response401_unauthorized = () =>
+  new Response(JSON.stringify({ error: "Unauthorized" }), {
+    headers,
+    status: 401,
+  });
+
+export const response405_method_not_allowed = () =>
+  new Response(JSON.stringify({ error: "Method not allowed" }), {
+    headers,
+    status: 405,
+  });
+
+export const response500_internal_server_error = (error: unknown) =>
+  new Response(JSON.stringify({ error: errorMessageOrUnknownError(error) }), {
+    headers,
+    status: 500,
+  });
+
+// ─────────────────────────────────────────────────────────────────────
+
+export const response_cors_preflight = () =>
+  new Response("ok", { headers: corsHeaders });

package/templates/functions/deploy_miniapp/deno.json

@@ -0,0 +1,5 @@
+{
+  "imports": {
+    "@supabase/supabase-js": "jsr:@supabase/supabase-js@2"
+  }
+}

package/templates/functions/deploy_miniapp/deploy_miniapp.ts

@@ -0,0 +1,169 @@
+// TODO: next step -> extract all of this code to outside miniapps (easy to maintain and error prone code)
+
+import {
+  response400_bad_request,
+  response500_internal_server_error,
+  response401_unauthorized,
+} from "../_shared/responses.ts";
+import { createSupabaseAdminClient } from "../_shared/client.ts";
+
+interface DeployMiniappParams {
+  version: string;
+  git_sha?: string | null;
+  html_content: string;
+  env?: "dev" | "prod";
+}
+
+export const deployMiniapp = async ({
+  req,
+}: {
+  req: Request;
+}): Promise<
+  | {
+    error: null;
+    data: { success: boolean; message: string; url: string };
+  }
+  | {
+    error: Response;
+    data: null;
+  }
+> => {
+  // ── Get request body ─────────────────────────────────────────────────────
+  let body: DeployMiniappParams;
+  try {
+    body = await req.json();
+  } catch (_e) {
+    return {
+      data: null,
+      error: response400_bad_request(new Error("Invalid JSON body")),
+    };
+  }
+
+  const { version, git_sha, html_content, env = "prod" } = body;
+  const registeredVersion = git_sha ? `${version}+${git_sha}` : version;
+
+  if (!version || !html_content) {
+    return {
+      data: null,
+      error: response400_bad_request(
+        new Error("Missing version or html_content")
+      ),
+    };
+  }
+
+  // ── Validate API Key (Deploy Token) ──────────────────────────────────────
+  const apiKey = req.headers.get("x-miniapp-api-key");
+  const validApiKey = Deno.env.get("MINIAPP_API_KEY");
+
+  if (!apiKey || !validApiKey || apiKey !== validApiKey) {
+    return {
+      data: null,
+      error: response401_unauthorized(),
+    };
+  }
+
+  // ── Get Supabase admin client (MiniApp) ──────────────────────────────────
+  const { error: adminError, client: supabaseAdmin } =
+    createSupabaseAdminClient();
+  if (adminError) {
+    return { data: null, error: adminError };
+  }
+
+  // ── Upload to Storage ────────────────────────────────────────────────────
+  const storagePath = `builds/${registeredVersion}/index.html`;
+  const { error: uploadError } = await supabaseAdmin.storage
+    .from("miniapp-builds")
+    .upload(storagePath, html_content, {
+      contentType: "text/html",
+      upsert: true,
+    });
+
+  if (uploadError) {
+    return {
+      data: null,
+      error: response500_internal_server_error(uploadError),
+    };
+  }
+
+  const {
+    data: { publicUrl },
+  } = supabaseAdmin.storage.from("miniapp-builds").getPublicUrl(storagePath);
+
+  // ── Register with both Cores ────────────────────────────────────────────
+  const coreDevUrl = Deno.env.get("CORE_DEV_SUPABASE_URL");
+  const coreDevAnonKey = Deno.env.get("CORE_DEV_SUPABASE_ANON_PUBLIC");
+  const coreProdUrl = Deno.env.get("CORE_PROD_SUPABASE_URL");
+  const coreProdAnonKey = Deno.env.get("CORE_PROD_SUPABASE_ANON_PUBLIC");
+  const coreDeploySecret = Deno.env.get("MINIAPP_DEPLOY_SECRET");
+  const slug = Deno.env.get("MINIAPP_SLUG");
+  const name = Deno.env.get("MINIAPP_NAME") ?? slug ?? "Mini-app";
+
+  const cores = [
+    { name: "core-dev", url: coreDevUrl, anonKey: coreDevAnonKey },
+    { name: "core-prod", url: coreProdUrl, anonKey: coreProdAnonKey },
+  ];
+
+  const registerFailures: string[] = [];
+
+  for (const core of cores) {
+    if (!core.url || !core.anonKey) {
+      registerFailures.push(`${core.name}: missing URL or anon key`);
+      continue;
+    }
+
+    try {
+      const response = await fetch(
+        `${core.url}/functions/v1/register_miniapp_version`,
+        {
+          method: "POST",
+          headers: {
+            "Content-Type": "application/json",
+            Authorization: `Bearer ${core.anonKey}`,
+            "x-deploy-secret": coreDeploySecret || "",
+          },
+          body: JSON.stringify({
+            slug,
+            version: registeredVersion,
+            url: publicUrl,
+            name,
+            env,
+          }),
+        }
+      );
+
+      if (!response.ok) {
+        const text = await response.text();
+        registerFailures.push(`${core.name}: HTTP ${response.status} ${text}`);
+      }
+    } catch (err) {
+      registerFailures.push(
+        `${core.name}: ${err instanceof Error ? err.message : String(err)}`
+      );
+    }
+  }
+
+  // Fail the deploy if registration with any core failed. The HTML is already
+  // in storage, but a green deploy that didn't update the core DB is a silent
+  // failure — surface it so the CI job fails.
+  if (registerFailures.length > 0) {
+    return {
+      data: null,
+      error: response500_internal_server_error(
+        new Error(
+          `Uploaded to storage but failed to register version with core(s): ${registerFailures.join(
+            "; "
+          )}`
+        )
+      ),
+    };
+  }
+
+  return {
+    data: {
+      success: true,
+      message: "Miniapp deployed successfully",
+      url: publicUrl,
+    },
+    error: null,
+  };
+};

package/templates/functions/deploy_miniapp/index.ts

@@ -0,0 +1,31 @@
+import {
+  response_cors_preflight,
+  response200,
+  response405_method_not_allowed,
+  response500_internal_server_error,
+} from "../_shared/responses.ts";
+
+import { deployMiniapp } from "./deploy_miniapp.ts";
+
+// Setup type definitions for built-in Supabase Runtime APIs
+// deno-lint-ignore no-unversioned-import no-import-prefix
+import "jsr:@supabase/functions-js/edge-runtime.d.ts";
+
+Deno.serve(async (req) => {
+  if (req.method === "OPTIONS") {
+    return response_cors_preflight();
+  }
+
+  if (req.method !== "POST") {
+    return response405_method_not_allowed();
+  }
+
+  try {
+    const { data, error } = await deployMiniapp({ req });
+    if (error) return error;
+
+    return response200(data);
+  } catch (error) {
+    return response500_internal_server_error(error);
+  }
+});