@pylonsync/functions 0.5.0 → 0.5.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pylonsync/functions",
-  "version": "0.5.0",
+  "version": "0.5.3",
   "description": "TypeScript function runtime for pylon — defines server-side queries, mutations, and actions.",
   "type": "module",
   "main": "src/index.ts",

package/src/hydrationAppName.test.ts

@@ -0,0 +1,44 @@
+// Regression: the browser client namespaces its storage by the app's manifest
+// name, but the name only lives server-side. The SSR runtime surfaces it as
+// PYLON_APP_NAME and buildHydrationTail forwards it into __PYLON_DATA__ as `app`
+// so the client can `configureClient({ appName })` at hydrate — before any token
+// read. These pin that the field appears exactly when the env is set.
+
+import { expect, test } from "bun:test";
+
+import { buildHydrationTail } from "./ssr-runtime";
+
+const base = {
+  component: "app/page.tsx",
+  layouts: [] as string[],
+  props: {},
+  ssrData: {},
+  manifestRoute: null,
+  publicPrefix: "/_pylon/build/",
+  manifestErr: null,
+  dataOnly: true, // return just the __PYLON_DATA__ script
+};
+
+function withEnv(value: string | undefined, fn: () => void) {
+  const prev = process.env.PYLON_APP_NAME;
+  if (value === undefined) delete process.env.PYLON_APP_NAME;
+  else process.env.PYLON_APP_NAME = value;
+  try {
+    fn();
+  } finally {
+    if (prev === undefined) delete process.env.PYLON_APP_NAME;
+    else process.env.PYLON_APP_NAME = prev;
+  }
+}
+
+test("injects app from PYLON_APP_NAME", () => {
+  withEnv("revtrail", () => {
+    expect(buildHydrationTail(base)).toContain('"app":"revtrail"');
+  });
+});
+
+test("omits app when PYLON_APP_NAME is unset", () => {
+  withEnv(undefined, () => {
+    expect(buildHydrationTail(base)).not.toContain('"app"');
+  });
+});

package/src/ssr-client-bundler.ts

@@ -330,6 +330,7 @@ const CLIENT_RUNTIME_SOURCE = `// Generated by Pylon SSR (Phase 2 client runtime
 
 import { createElement } from "react";
 import { hydrateRoot } from "react-dom/client";
+import { configureClient } from "@pylonsync/react";
 import { createPylonBoundary, nearestBoundaryComponent } from "./client-boundary";
 import { LOADING_MODULES } from "./loading-registry";
 import { createNavPayloadCache } from "./nav-cache";
@@ -672,6 +673,13 @@ export function hydrate(component, Page, Layouts) {
   // of all prefetching. In flight from here, it resolves during hydration.
   void loadManifest();
   const data = readPylonData();
+  // Namespace client storage by the app's manifest name (injected into
+  // __PYLON_DATA__ as \`app\`) BEFORE any db hook / auth helper reads a token.
+  // Without this every app on a shared origin (all localhost:4321 in dev)
+  // shares the default \`pylon_token\` and clobbers each other's sessions.
+  // configureClient runs once here; it also migrates a legacy default-keyspace
+  // token so an existing session survives the switch.
+  if (data && data.app) configureClient({ appName: data.app });
   // First hydrate: the entry's component MATCHES the SSR'd page.
   // Establish the root + install the click + popstate handlers
   // exactly once.

package/src/ssr-runtime.ts

@@ -2030,6 +2030,14 @@ export function buildHydrationTail(args: {
     props: serializableProps,
     ssrData: args.ssrData,
   };
+  // App name (from the manifest, surfaced by the runtime as PYLON_APP_NAME) so
+  // the client namespaces its localStorage/IndexedDB per-app at hydrate. Without
+  // it every app on a shared origin (all localhost:4321 in dev) collides on the
+  // default `pylon_token`. App-global + identity-free, so it stays byte-identical
+  // across users — safe in the PPR-bucketed shared tail too.
+  const appName =
+    typeof process !== "undefined" ? process.env.PYLON_APP_NAME : undefined;
+  if (appName) hydrationPayload.app = appName;
   if (args.kind) hydrationPayload.kind = args.kind;
   const json = escapeScriptJson(JSON.stringify(hydrationPayload));
   let tail = `<script id="__PYLON_DATA__" type="application/json">${json}</script>`;