@pylonsync/create-pylon 0.19.0 → 0.20.0

package/templates/backend/consumer/apps/api/schema.ts

@@ -1,143 +0,0 @@
-import {
-	entity,
-	field,
-	query,
-	action,
-	policy,
-	buildManifest,
-} from "@pylonsync/sdk";
-
-// ---------------------------------------------------------------------------
-// Consumer feed schema. The shape:
-//
-//   Profile  — public-facing card per User. Handle, display name, bio.
-//   Post     — one row per post. authorId references the Profile that
-//              created it; body holds the text.
-//   Like     — pivot row: which Profile liked which Post. Composite
-//              uniqueness enforced via the ordering of inserts (one
-//              row per (profileId, postId) pair).
-//
-// Reads are wide-open by design — feeds are public. Writes require
-// the caller to own the Profile in question (auth.userId == profileId
-// for Profile updates; auth.userId must own a Profile to post).
-// ---------------------------------------------------------------------------
-
-const Profile = entity("Profile", {
-	// Ownership fields lock with `.readonly()` so HTTP PATCH can't
-	// rewrite them. Server-side ctx.db.update inside actions still
-	// goes through — readonly is an HTTP-boundary check only.
-	userId: field.id("User").readonly(),
-	handle: field.string(),
-	displayName: field.string(),
-	bio: field.string().optional(),
-	createdAt: field.datetime().readonly(),
-});
-
-const Post = entity("Post", {
-	authorId: field.id("Profile").readonly(),
-	body: field.string(),
-	createdAt: field.datetime().readonly(),
-});
-
-const Like = entity("Like", {
-	profileId: field.id("Profile").readonly(),
-	postId: field.id("Post").readonly(),
-	createdAt: field.datetime().readonly(),
-});
-
-// ---------------------------------------------------------------------------
-// Function declarations
-// ---------------------------------------------------------------------------
-
-const myProfile = query("myProfile");
-const feed = query("feed");
-const profilePosts = query("profilePosts");
-
-const upsertProfile = action("upsertProfile", {
-	input: [
-		{ name: "handle", type: "string" },
-		{ name: "displayName", type: "string" },
-		{ name: "bio", type: "string" },
-	],
-});
-
-const createPost = action("createPost", {
-	input: [{ name: "body", type: "string" }],
-});
-
-const deletePost = action("deletePost", {
-	input: [{ name: "id", type: "id(Post)" }],
-});
-
-const toggleLike = action("toggleLike", {
-	input: [{ name: "postId", type: "id(Post)" }],
-});
-
-// ---------------------------------------------------------------------------
-// Policies — public reads, owner-only writes.
-// ---------------------------------------------------------------------------
-
-const profilePolicy = policy({
-	name: "profile_public",
-	entity: "Profile",
-	allowRead: "true",
-	allowInsert: "auth.userId == data.userId",
-	// Update + delete pin `existing.userId` (not the payload) so an
-	// attacker can't PATCH `{userId: <them>}` to claim another profile.
-	allowUpdate: "auth.userId == existing.userId",
-	allowDelete: "auth.userId == existing.userId",
-});
-
-const postPolicy = policy({
-	name: "post_public",
-	entity: "Post",
-	allowRead: "true",
-	// Insert: caller must own a Profile they're claiming as author.
-	allowInsert:
-		"exists(Profile where id = data.authorId and userId = auth.userId)",
-	// Update + delete pin `existing.authorId` (not the payload) so an
-	// attacker can't rewrite the author to grant themselves access.
-	allowUpdate:
-		"exists(Profile where id = existing.authorId and userId = auth.userId)",
-	allowDelete:
-		"exists(Profile where id = existing.authorId and userId = auth.userId)",
-});
-
-const likePolicy = policy({
-	name: "like_public",
-	entity: "Like",
-	allowRead: "true",
-	// Caller must own the Profile doing the liking. Like has no
-	// update path (allowUpdate: "false"), so the IDOR-via-PATCH
-	// shape doesn't apply — but delete pins `existing.profileId`
-	// for consistency with the other policies.
-	allowInsert:
-		"exists(Profile where id = data.profileId and userId = auth.userId)",
-	allowUpdate: "false",
-	allowDelete:
-		"exists(Profile where id = existing.profileId and userId = auth.userId)",
-});
-
-// ---------------------------------------------------------------------------
-// Manifest
-// ---------------------------------------------------------------------------
-
-const manifest = buildManifest({
-	name: "__APP_NAME_SNAKE__",
-	version: "0.0.1",
-	entities: [Profile, Post, Like],
-	queries: [myProfile, feed, profilePosts],
-	actions: [
-		upsertProfile,
-		createPost,
-		deletePost,
-		toggleLike,
-	],
-	policies: [profilePolicy, postPolicy, likePolicy],
-	routes: [],
-});
-
-// Not a debug leftover: the CLI runs `bun run` on this file and parses stdout
-// as your manifest (see crates/cli/src/bun.rs). Deleting this line breaks every
-// pylon command that reads your schema.
-console.log(JSON.stringify(manifest));

package/templates/chat/functions/_keep.ts

@@ -1,13 +0,0 @@
-// Server functions go here. Each file in this directory that exports a
-// query() or action() becomes a typed RPC endpoint, callable from your
-// pages and client with full type inference. Delete this placeholder when
-// you add your first one.
-//
-// Example (functions/notes.ts):
-//
-//   import { query } from "@pylonsync/functions";
-//
-//   export const listNotes = query(async (ctx) => {
-//     return ctx.db.list("Note");
-//   });
-export {};

package/templates/chat/tests/example.test.ts

@@ -1,12 +0,0 @@
-import { expect, test } from "bun:test";
-
-// Your first test. Run the suite with:  pylon test  (or: npm test)
-//
-// `pylon test` discovers every *.test.ts file under tests/ (or functions/) and
-// runs it with Bun's test runner against an in-memory Pylon. Replace this
-// placeholder with tests for your functions and helpers — see AGENTS.md →
-// Testing for the pure-logic and HTTP-against-`pylon dev` patterns.
-
-test("placeholder — replace me with a real test", () => {
-  expect(true).toBe(true);
-});

package/templates/ios/consumer/apps/ios/Sources/__APP_NAME_PASCAL__/ProfileSetupView.swift

@@ -1,68 +0,0 @@
-import SwiftUI
-import PylonClient
-import PylonSync
-
-struct ProfileSetupView: View {
-	@EnvironmentObject var session: AppSession
-	let engine: SyncEngine
-	let existingHandles: [String]
-
-	@State private var handle = ""
-	@State private var displayName = ""
-	@State private var bio = ""
-	@State private var saving = false
-	@State private var errorMessage: String?
-
-	var body: some View {
-		NavigationStack {
-			Form {
-				Section("Set up your profile") {
-					TextField("handle (lowercase, 2–20)", text: $handle)
-						.autocorrectionDisabled()
-						.textInputAutocapitalization(.never)
-					TextField("Display name", text: $displayName)
-					TextField("Bio (optional)", text: $bio)
-				}
-				if let errorMessage {
-					Section {
-						Text(errorMessage)
-							.foregroundStyle(.red)
-							.font(.caption)
-					}
-				}
-				Section {
-					Button(saving ? "Saving…" : "Save") {
-						Task { await save() }
-					}
-					.disabled(saving
-						|| handle.trimmingCharacters(in: .whitespaces).isEmpty
-						|| displayName.trimmingCharacters(in: .whitespaces).isEmpty)
-				}
-			}
-			.navigationTitle("__APP_NAME__")
-		}
-	}
-
-	private func save() async {
-		saving = true
-		defer { saving = false }
-		let lower = handle.trimmingCharacters(in: .whitespaces).lowercased()
-		if existingHandles.contains(lower) {
-			errorMessage = "@\(lower) is taken"
-			return
-		}
-		do {
-			let profile: Profile = try await session.client.callFn(
-				"upsertProfile",
-				args: UpsertProfileArgs(
-					handle: lower,
-					displayName: displayName.trimmingCharacters(in: .whitespaces),
-					bio: bio.trimmingCharacters(in: .whitespaces),
-				),
-			)
-			session.setMyProfileId(profile.id)
-		} catch {
-			errorMessage = "Save failed: \(error.localizedDescription)"
-		}
-	}
-}

package/templates/marketplace/client/LiveTicker.tsx

@@ -1,116 +0,0 @@
-"use client";
-
-import React from "react";
-import { Link, db } from "@pylonsync/react";
-import { Tag, BadgeCheck } from "lucide-react";
-import { Card } from "@/components/ui/card";
-import { MarketProvider } from "./MarketProvider";
-import { money, timeAgo, type Listing, type Offer } from "./market";
-
-// Realtime activity strip. Two live queries — new listings AND completed sales
-// (accepted offers) — merged into one feed. The moment anyone lists an item or
-// a sale closes (in another tab, by another visitor), it slides in here. No
-// polling, no refetch. This is the part SSR can't do; it's why the marketplace
-// feels alive.
-type Activity = {
-  key: string;
-  kind: "listed" | "sold";
-  title: string;
-  href: string;
-  amount?: number;
-  at: string;
-  seed?: Listing;
-};
-
-function Ticker() {
-  const { data: listingData } = db.useQuery<Listing>("Listing", {
-    orderBy: { createdAt: "desc" },
-    limit: 16,
-  });
-  const { data: saleData } = db.useQuery<Offer>("Offer", {
-    where: { status: "accepted" },
-    orderBy: { createdAt: "desc" },
-    limit: 8,
-  });
-
-  const listings = listingData ?? [];
-  const listingById = new Map(listings.map((listing) => [listing.id, listing]));
-  const events: Activity[] = [
-    ...listings.filter((l) => l.status === "active").map((l) => ({
-      key: `l-${l.id}`,
-      kind: "listed" as const,
-      title: l.title,
-      href: `/listing/${l.slug || l.id}`,
-      at: l.createdAt,
-      seed: l,
-    })),
-    ...(saleData ?? []).map((o) => ({
-      key: `s-${o.id}`,
-      kind: "sold" as const,
-      title: o.listingTitle,
-      href: `/listing/${o.listingId}`,
-      amount: o.amount,
-      at: o.createdAt,
-      seed: listingById.get(o.listingId),
-    })),
-  ]
-    .sort((a, b) => Date.parse(b.at) - Date.parse(a.at))
-    .slice(0, 10);
-
-  if (events.length === 0) return null;
-
-  return (
-    <Card className="flex min-h-11 items-center gap-3 overflow-hidden px-4 py-2 text-sm">
-      <span className="flex shrink-0 items-center gap-1.5 font-medium text-success-foreground">
-        <span className="relative flex size-2">
-          <span className="absolute inline-flex size-full animate-ping rounded-full bg-success opacity-75" />
-          <span className="relative inline-flex size-2 rounded-full bg-success" />
-        </span>
-        Live
-      </span>
-      {/* Auto-scrolling marquee — no scrollbar. Items are doubled so the loop
-          (translateX -50%) is seamless; hover pauses so you can click. The
-          edge mask fades items in/out for a clean "live feed" look. */}
-      <div className="relative flex-1 overflow-hidden [mask-image:linear-gradient(to_right,transparent,#000_1.5rem,#000_calc(100%-1.5rem),transparent)]">
-        <div className="market-marquee flex w-max items-center gap-6">
-          {[...events, ...events].map((e, i) => (
-            <Link
-              key={`${e.key}-${i}`}
-              href={e.href}
-              seed={e.seed}
-              className="flex shrink-0 items-center gap-1.5 whitespace-nowrap hover:underline"
-              aria-hidden={i >= events.length}
-              tabIndex={i >= events.length ? -1 : undefined}
-            >
-              {e.kind === "sold" ? (
-                <BadgeCheck
-                  className="size-3.5 text-success-foreground"
-                  aria-hidden="true"
-                />
-              ) : (
-                <Tag
-                  className="size-3.5 text-muted-foreground"
-                  aria-hidden="true"
-                />
-              )}
-              <span className="font-medium">{e.title}</span>
-              <span className="text-muted-foreground">
-                {e.kind === "sold" && e.amount != null
-                  ? `sold · ${money(e.amount)}`
-                  : timeAgo(e.at)}
-              </span>
-            </Link>
-          ))}
-        </div>
-      </div>
-    </Card>
-  );
-}
-
-export function LiveTicker() {
-  return (
-    <MarketProvider fallback={null}>
-      <Ticker />
-    </MarketProvider>
-  );
-}

package/templates/marketplace/client/ScrollToListingsLink.tsx

@@ -1,29 +0,0 @@
-"use client";
-
-import React from "react";
-import { Button } from "@/components/ui/button";
-
-export function ScrollToListingsLink({
-  children,
-  className,
-}: {
-  children: React.ReactNode;
-  className?: string;
-}) {
-  return (
-    <Button asChild className={className}>
-      <a
-        href="#listings"
-        onClick={(event) => {
-          const listings = document.getElementById("listings");
-          if (!listings) return;
-          event.preventDefault();
-          history.replaceState(null, "", "#listings");
-          listings.scrollIntoView({ behavior: "smooth", block: "start" });
-        }}
-      >
-        {children}
-      </a>
-    </Button>
-  );
-}