@nodegx/mcp 0.2.6 → 0.2.8

package/dist/backend/folder/start.js

@@ -32,6 +32,11 @@
  *      (`security.json.before-<time>`) and the backend installs the project's. A restart, or a deploy
  *      with the same rules, leaves `data/security.json` as it is (Richard, 2026-10-23: a reship
  *      brings the project's rules; an edit made on the server lasts until the project's change).
+ *   4b. Installs the project's workflows and triggers (`backend/nodegx.automations.json`, P127
+ *      BKO-001) by the same rule: on a first start, and after a deploy that changed them, the
+ *      backend's `data/triggers.json` and `data/workflow-defs/` are moved aside (`.before-<time>`) and
+ *      the backend loads the project's. Webhook secrets stay in `data/secrets.json`, so a sender's
+ *      secret survives a reship. A restart, or a deploy with the same ones, leaves them as they are.
  *   5. Refuses rules that are switched off (`"devOpen": true`), which is how a development backend's
  *      data arrives — and the backend's own interlock only refuses that on a public bind, while this
  *      app is usually behind a proxy on 127.0.0.1. Refused before anything in the data is changed.
@@ -58,6 +63,13 @@ const BACKEND_RULES = 'security.json';
 /** Which rules the last deploy installed (their checksum), in the data folder. */
 const RULES_MARKER = 'deployed-rules.json';
 const WORKFLOW_SUFFIX = '.workflow.json';
+/** The project's workflows and triggers (P127 BKO-001). */
+const AUTOMATIONS_FILE = 'nodegx.automations.json';
+/** The backend's own copies of them, in the data folder. */
+const BACKEND_TRIGGERS = 'triggers.json';
+const BACKEND_WORKFLOWS = 'workflow-defs';
+/** Which automations the last deploy installed (their checksum), in the data folder. */
+const AUTOMATIONS_MARKER = 'deployed-automations.json';
 
 /** The Node this app needs, and the one property that decides it. */
 const NODE_NEEDED = '22.13';
@@ -240,6 +252,74 @@ function planRules(dataDir) {
   return { action, current, shipped, config, sha256 };
 }
 
+/**
+ * What to do with the project's workflows and triggers: the same four answers as `planRules`. The
+ * backend has some when it has a `triggers.json` or any workflow definition.
+ */
+function planAutomations(dataDir) {
+  const shipped = path.join(BACKEND, AUTOMATIONS_FILE);
+  const triggers = path.join(dataDir, BACKEND_TRIGGERS);
+  const workflows = path.join(dataDir, BACKEND_WORKFLOWS);
+  if (!fs.existsSync(shipped)) return { action: 'none', triggers, workflows };
+  const bytes = fs.readFileSync(shipped);
+  try {
+    JSON.parse(bytes.toString('utf8'));
+  } catch (error) {
+    fail(
+      `This deploy's workflows and triggers (backend/${AUTOMATIONS_FILE}) are not valid JSON: ${error.message}. Deploy the project again.`
+    );
+  }
+  const sha256 = crypto.createHash('sha256').update(bytes).digest('hex');
+  let installed = null;
+  try {
+    installed = JSON.parse(fs.readFileSync(path.join(dataDir, AUTOMATIONS_MARKER), 'utf8')).sha256;
+  } catch {
+    installed = null;
+  }
+  const hasSome = fs.existsSync(triggers) || (fs.existsSync(workflows) && fs.readdirSync(workflows).length > 0);
+  let action = 'replace';
+  if (!hasSome) action = 'install';
+  else if (installed === sha256) action = 'unchanged';
+  return { action, triggers, workflows, sha256 };
+}
+
+/** Carry out the plan. Returns where the previous ones were moved, when they were. */
+function applyAutomations(plan, dataDir) {
+  if (plan.action !== 'install' && plan.action !== 'replace') return [];
+  const moved = [];
+  if (plan.action === 'replace') {
+    const stamp = new Date().toISOString().replace(/[:.]/g, '-');
+    for (const from of [plan.triggers, plan.workflows]) {
+      if (!fs.existsSync(from)) continue;
+      const to = `${from}.before-${stamp}`;
+      fs.renameSync(from, to);
+      moved.push(to);
+    }
+  }
+  fs.writeFileSync(
+    path.join(dataDir, AUTOMATIONS_MARKER),
+    JSON.stringify({ sha256: plan.sha256, installedAt: new Date().toISOString() }, null, 2) + '\n'
+  );
+  return moved;
+}
+
+function describeAutomations(plan, moved) {
+  switch (plan.action) {
+    case 'none':
+      return "[start] workflows and triggers: this deploy carries none; the backend's own run\n";
+    case 'unchanged':
+      return '[start] workflows and triggers: unchanged (this deploy\'s are the ones already installed)\n';
+    case 'install':
+      return `[start] workflows and triggers: installing this deploy's backend/${AUTOMATIONS_FILE}\n`;
+    default:
+      return (
+        `[start] workflows and triggers: replaced with this deploy's backend/${AUTOMATIONS_FILE}` +
+        (moved.length ? `; the previous ones are kept as ${moved.join(' and ')}` : '') +
+        '\n'
+      );
+  }
+}
+
 /** Carry out the plan. Returns where the previous rules were moved, when they were. */
 function applyRules(plan, dataDir) {
   if (plan.action !== 'install' && plan.action !== 'replace') return null;
@@ -339,6 +419,10 @@ async function main() {
       const plan = planRules(dataDir);
       refuseDevOpen(plan);
       process.stdout.write(describeRules(plan, `${plan.current}.before-<time>`).replace('[start]', '[check]'));
+      const automationsPlan = planAutomations(dataDir);
+      process.stdout.write(
+        describeAutomations(automationsPlan, [`${BACKEND_TRIGGERS}.before-<time>`, `${BACKEND_WORKFLOWS}.before-<time>`]).replace('[start]', '[check]')
+      );
       process.exit(0);
     }
     port = await choosePort(argv, process.env);
@@ -349,8 +433,10 @@ async function main() {
   fs.mkdirSync(dataDir, { recursive: true });
   const rules = planRules(dataDir);
   refuseDevOpen(rules);
+  const automations = planAutomations(dataDir);
   const movedTo = applyRules(rules, dataDir);
   process.stdout.write(describeRules(rules, movedTo));
+  process.stdout.write(describeAutomations(automations, applyAutomations(automations, dataDir)));
   const functions = installFunctions(dataDir);
   process.stdout.write(
     functions.length
@@ -361,7 +447,9 @@ async function main() {
   const args = ['serve', '--data-dir', dataDir, '--port', String(port), '--serve-app', APP, '--enforce-rules'];
   // The backend installs the project's rules only when it has none, and says so loudly when it
   // does not — so it is told about them only on a start that installs them.
-  if (rules.action === 'install' || rules.action === 'replace') args.push('--project-dir', BACKEND);
+  // The same for the workflows and triggers, which it loads only into a backend that has none.
+  const installs = (plan) => plan.action === 'install' || plan.action === 'replace';
+  if (installs(rules) || installs(automations)) args.push('--project-dir', BACKEND);
   const name = appName();
   if (name) args.push('--backend-name', name);
   args.push(...withoutOwnArgs(argv));

package/dist/backend/vm/provision-app.sh

@@ -21,6 +21,8 @@
 #   /etc/<app>/secrets.env                    (written by ship-to-vm.sh over stdin, never here, never in the folder)
 #   /etc/systemd/system/<app>-backend.service
 #   /etc/caddy/conf.d/<app>.caddy             (unless CADDY=off; deleted again if caddy validate fails)
+#   /opt/nodegx-native/sharp-<version>/       the image module that makes a photo's small versions, fetched from npm
+#                                             the first time any app ships here and shared by every app after
 #
 # and, once Caddy no longer points at it, removes /srv/<app>/ — the site the earlier layout (a site plus a loose
 # cli.js) served from.
@@ -108,6 +110,44 @@ chown -R root:root "$FOLDER"; chmod -R u+rwX,go+rX,go-w "$FOLDER"
 chown root:"$APP_USER" "$SECRETS"; chmod 640 "$SECRETS"
 chown -R "$APP_USER":"$APP_USER" "/var/lib/$APP"; chmod 750 "/var/lib/$APP"
 
+# 🔴 P112-OWN024-DEPLOYNOSHARP (Richard, 2026-10-25: the server fetches it once). A photo's small versions (?thumb=)
+# are made by sharp, a native module the folder does not carry, so without it every thumbnail answers 501 and the
+# marketplace draws its photos broken. It is fetched from npm ONCE per server into a place outside /opt/<app> (which
+# every ship replaces), shared by every app here, and found through the unit's NODE_PATH. A server that cannot fetch
+# it still ships: the app runs, and ?thumb= answers 501 until a later ship can. Pinned to the version the editor's
+# backend ships (the lockfile's; tests/p112-own024-deploy-sharp.test.ts holds the two together).
+SHARP_VERSION=0.33.5
+NATIVE=/opt/nodegx-native
+SHARP_DIR="$NATIVE/sharp-$SHARP_VERSION"
+sharp_loads() { "$NODE" -e 'require(process.argv[1])' "$1/node_modules/sharp" >/dev/null 2>&1; }
+if sharp_loads "$SHARP_DIR"; then
+  echo "    photos: small versions (?thumb=) are made by sharp $SHARP_VERSION, already on this server"
+else
+  mkdir -p "$NATIVE"
+  FETCH="$(mktemp -d "$NATIVE/.sharp-$SHARP_VERSION-XXXXXX")"
+  NPM="$(command -v npm || true)"
+  if [ -z "$NPM" ]; then
+    WHY="this server has no npm"
+  elif ! WHY="$(cd "$FETCH" && npm_config_cache="$FETCH/.cache" timeout 300 "$NPM" install --prefix "$FETCH" --omit=dev \
+      --no-audit --no-fund --loglevel=error --fetch-retries=1 "sharp@$SHARP_VERSION" 2>&1)"; then
+    # npm's last line points at a log in the cache this deletes; the line before it is the reason.
+    WHY="npm could not fetch it ($(echo "$WHY" | grep -v -e '^\s*$' -e 'complete log' | tail -1 | sed 's/^npm error //' || true))"
+  elif ! sharp_loads "$FETCH"; then
+    WHY="it was fetched but does not load on this server: $("$NODE" -e 'require(process.argv[1])' "$FETCH/node_modules/sharp" 2>&1 | grep -m1 -E '^[A-Za-z]*Error' || true)"
+  else
+    WHY=""
+  fi
+  rm -rf "$FETCH/.cache"
+  if [ -z "$WHY" ]; then
+    rm -rf "$SHARP_DIR"; mv "$FETCH" "$SHARP_DIR"; chmod -R go+rX,go-w "$SHARP_DIR"
+    echo "    photos: fetched sharp $SHARP_VERSION from npm for this server's small photo versions (?thumb=), once"
+  else
+    rm -rf "$FETCH"
+    echo "    photos: NOT AVAILABLE: small photo versions (?thumb=) answer 501 until sharp $SHARP_VERSION is on this server," \
+      "and the next ship fetches it again. $WHY. The app runs; uploads and full-size photos work."
+  fi
+fi
+
 cat > "$UNIT" <<UNIT
 [Unit]
 Description=${APP} (NodeGX full-stack folder, P26 DEP-002)
@@ -120,6 +160,7 @@ User=${APP_USER}
 Group=${APP_USER}
 WorkingDirectory=/var/lib/${APP}
 EnvironmentFile=${SECRETS}
+Environment=NODE_PATH=${SHARP_DIR}/node_modules
 ExecStart=${NODE} ${FOLDER}/start.js --port ${PORT} --host 127.0.0.1 --data-dir ${DATA_DIR} --backend-id ${APP} --no-admin
 Restart=always
 RestartSec=3