@omg-dev/server 0.4.40 → 0.4.42

package/dist/index.mjs

@@ -21,6 +21,9 @@ const ctx = {
 	},
 	get appId() {
 		return ctxStore.getStore()?.appId;
+	},
+	get request() {
+		return ctxStore.getStore()?.request;
 	}
 };
 //#endregion
@@ -2998,6 +3001,14 @@ const billing = {
 		return agentGet(`/_billing/subscription?${new URLSearchParams({ externalRef }).toString()}`, "subscription");
 	},
 	/**
+	* Verify a StoreKit 2 signed transaction and apply its entitlement.
+	* The verified Apple appAccountToken is the only user binding. Do not send a
+	* user id here. Apple requires appAccountToken to be a UUID.
+	*/
+	async syncAppStoreTransaction(signedTransaction) {
+		return agentPost("/_billing/app-store/transactions", { signedTransaction }, "syncAppStoreTransaction");
+	},
+	/**
 	* Mint a hosted checkout for one of this app's end-users to buy `plan`, in
 	* the APP OWNER's connected Polar org. Returns the checkout URL to redirect
 	* to. The amount + product are resolved server-side from the active
@@ -3213,6 +3224,9 @@ async function createVibesServer(opts) {
 		const url = new URL(req.url);
 		let filePath = path.join(staticDir, url.pathname);
 		if (fs.existsSync(filePath) && fs.statSync(filePath).isFile()) return new Response(Bun.file(filePath));
+		const dirIndexPath = path.join(filePath, "index.html");
+		if (fs.existsSync(dirIndexPath) && fs.statSync(dirIndexPath).isFile()) return new Response(Bun.file(dirIndexPath));
+		if (opts.staticFallthrough) return null;
 		const indexPath = path.join(staticDir, "index.html");
 		if (fs.existsSync(indexPath)) return new Response(Bun.file(indexPath));
 		return null;
@@ -3229,7 +3243,8 @@ async function createVibesServer(opts) {
 				userId: authResult?.userId ?? null,
 				userEmail: authResult?.userEmail,
 				userName: authResult?.userName,
-				appId: authResult?.appId
+				appId: authResult?.appId,
+				request: req
 			}, () => handleRequest(req, routes));
 		},
 		async fetch(req) {
@@ -3252,6 +3267,7 @@ async function createVibesServer(opts) {
 			if (url.pathname.startsWith("/api/")) return instance.apiHandler(req);
 			const staticResponse = await serveStatic(req);
 			if (staticResponse) return staticResponse;
+			if (opts.notFound) return opts.notFound(req);
 			return Response.json({ error: "Not found" }, { status: 404 });
 		},
 		migrate(newSchema) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@omg-dev/server",
-  "version": "0.4.40",
+  "version": "0.4.42",
   "type": "module",
   "exports": {
     ".": {
@@ -14,9 +14,9 @@
   },
   "dependencies": {
     "@restatedev/restate-sdk": "1.14.5",
-    "@omg-dev/auth": "0.4.40",
-    "@omg-dev/schema": "0.4.40",
-    "@omg-dev/stream": "0.4.40",
+    "@omg-dev/auth": "0.4.42",
+    "@omg-dev/schema": "0.4.42",
+    "@omg-dev/stream": "0.4.42",
     "web-push": "^3.6.7"
   },
   "scripts": {

package/src/billing.ts

@@ -128,6 +128,12 @@ export interface CheckoutOptions {
   amountMicros?: number
 }
 
+export interface AppStoreTransactionResult {
+  plan: string | null
+  providerSubscriptionId: string
+  duplicate?: boolean
+}
+
 export interface GrantOptions {
   idempotencyKey: string
   grantKey?: string
@@ -265,6 +271,19 @@ export const billing = {
     )
   },
 
+  /**
+   * Verify a StoreKit 2 signed transaction and apply its entitlement.
+   * The verified Apple appAccountToken is the only user binding. Do not send a
+   * user id here. Apple requires appAccountToken to be a UUID.
+   */
+  async syncAppStoreTransaction(signedTransaction: string): Promise<AppStoreTransactionResult> {
+    return agentPost<AppStoreTransactionResult>(
+      "/_billing/app-store/transactions",
+      { signedTransaction },
+      "syncAppStoreTransaction",
+    )
+  },
+
   /**
    * Mint a hosted checkout for one of this app's end-users to buy `plan`, in
    * the APP OWNER's connected Polar org. Returns the checkout URL to redirect

package/src/ctx.ts

@@ -6,6 +6,8 @@ export interface VibesCtx {
   userEmail?: string
   userName?: string
   appId?: string
+  /** The inbound request for request-scoped server decisions such as GeoIP. */
+  request?: Request
   /**
    * True when the current ctx was created by the trigger dispatcher (cron
    * tick or event delivery), not from an inbound HTTP request. Lets handlers
@@ -30,4 +32,7 @@ export const ctx = {
   get appId() {
     return ctxStore.getStore()?.appId
   },
+  get request() {
+    return ctxStore.getStore()?.request
+  },
 }

package/src/index.ts

@@ -203,6 +203,21 @@ export interface VibesServerOptions {
    */
   workflows?: WorkflowEntry[]
   staticDir?: string
+  /**
+   * When true, a static miss returns null instead of the index.html SPA shell,
+   * letting the caller fall through to its own handler. Set by SSR builds
+   * (TanStack Start), where the framework renders every HTML document and an
+   * SPA fallback would shadow real routes with a stale shell.
+   */
+  staticFallthrough?: boolean
+  /**
+   * Terminal handler for requests nothing else claimed. Without it `fetch`
+   * answers a JSON 404. SSR builds point this at the framework's own fetch
+   * handler so page requests get server-rendered — it is the seam that makes
+   * "vibes owns /api and assets, the framework owns documents" explicit
+   * rather than inferred from a 404 status.
+   */
+  notFound?: (req: Request) => Response | Promise<Response>
   schema?: Schema
   /**
    * When false, skip DDL migrations at startup — but still register user-scoped
@@ -569,6 +584,18 @@ export async function createVibesServer(opts: VibesServerOptions): Promise<Vibes
     if (fs.existsSync(filePath) && fs.statSync(filePath).isFile()) {
       return new Response(Bun.file(filePath))
     }
+    // Directory index — "/pricing" → "dist/pricing/index.html". This is where
+    // the build-time prerender writes per-route static HTML (see prerender.ts),
+    // so it MUST be tried before the SPA fallback below: otherwise every route
+    // serves the homepage's prerendered markup and the route's own bake is dead
+    // weight. Kept ahead of the SSR fallthrough too: a framework that does emit
+    // per-route static HTML should have it served rather than re-rendered.
+    const dirIndexPath = path.join(filePath, "index.html")
+    if (fs.existsSync(dirIndexPath) && fs.statSync(dirIndexPath).isFile()) {
+      return new Response(Bun.file(dirIndexPath))
+    }
+    // SSR owns unmatched paths — see staticFallthrough.
+    if (opts.staticFallthrough) return null
     // SPA fallback
     const indexPath = path.join(staticDir, "index.html")
     if (fs.existsSync(indexPath)) {
@@ -593,6 +620,7 @@ export async function createVibesServer(opts: VibesServerOptions): Promise<Vibes
           userEmail: authResult?.userEmail,
           userName: authResult?.userName,
           appId: authResult?.appId,
+          request: req,
         },
         () => handleRequest(req, routes),
       )
@@ -647,6 +675,7 @@ export async function createVibesServer(opts: VibesServerOptions): Promise<Vibes
       const staticResponse = await serveStatic(req)
       if (staticResponse) return staticResponse
 
+      if (opts.notFound) return opts.notFound(req)
       return Response.json({ error: "Not found" }, { status: 404 })
     },