@rocapine/community 0.6.0 → 0.8.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rocapine/community",
-  "version": "0.6.0",
+  "version": "0.8.1",
   "description": "CLI to install, upgrade and adopt the Rocapine Community SDK's Supabase backend (migrations, Edge Functions) into a project.",
   "license": "MIT",
   "repository": {

package/templates/functions/_shared/copy.ts

@@ -17,8 +17,8 @@
 // Placeholders: `{name}` (actor display name) and `{count}` (the number of
 // OTHER people in a coalesced push). A `*.many` value is either a string or a
 // `{ one, few, many, other }` object picked by the CLDR plural category of
-// `{count}` for the recipient's locale (Polish needs all three; French treats
-// 0 like 1; everything else is one/other).
+// `{count}` for the recipient's locale (Polish needs all three; Ukrainian and
+// Romanian one/few/other; French treats 0 like 1; everything else is one/other).
 //
 // Legacy single-string secrets still apply, below the JSON and above the
 // built-ins: COMMUNITY_FALLBACK_NAME (every locale's fallbackName) and
@@ -165,13 +165,23 @@ const BUILTIN: Record<string, LocaleCopy> = {
 // Same rule set as the UI package's `pluralCategory` (packages/ui/src/i18n.ts).
 export function pluralCategory(locale: string, n: number): keyof Forms {
   const lang = locale.split("-")[0]?.toLowerCase();
+  const m10 = n % 10;
+  const m100 = n % 100;
   if (lang === "pl") {
     if (n === 1) return "one";
-    const m10 = n % 10;
-    const m100 = n % 100;
     if (m10 >= 2 && m10 <= 4 && !(m100 >= 12 && m100 <= 14)) return "few";
     return "many";
   }
+  if (lang === "uk") {
+    if (m10 === 1 && m100 !== 11) return "one";
+    if (m10 >= 2 && m10 <= 4 && !(m100 >= 12 && m100 <= 14)) return "few";
+    return "other";
+  }
+  if (lang === "ro") {
+    if (n === 1) return "one";
+    if (n === 0 || (m100 >= 2 && m100 <= 19)) return "few";
+    return "other";
+  }
   if (lang === "fr") return n === 0 || n === 1 ? "one" : "other";
   return n === 1 ? "one" : "other";
 }

package/templates/functions/_shared/push.ts

@@ -28,14 +28,25 @@ export async function sendExpoPushBatch(
   if (accessToken) headers["Authorization"] = `Bearer ${accessToken}`;
   const chunks: ExpoPushMessage[][] = [];
   for (let i = 0; i < messages.length; i += 100) chunks.push(messages.slice(i, i + 100));
-  await runPool(chunks, opts.concurrency ?? 4, (chunk) =>
-    fetchImpl("https://exp.host/--/api/v2/push/send", {
-      method: "POST",
-      headers,
-      body: JSON.stringify(chunk.length === 1 ? chunk[0] : chunk),
-      signal: AbortSignal.timeout(10_000),
-    }).catch(() => {}),
-  );
+  await runPool(chunks, opts.concurrency ?? 4, async (chunk) => {
+    try {
+      const res = await fetchImpl("https://exp.host/--/api/v2/push/send", {
+        method: "POST",
+        headers,
+        body: JSON.stringify(chunk.length === 1 ? chunk[0] : chunk),
+        signal: AbortSignal.timeout(10_000),
+      });
+      // Best effort, but never silent: a project with push security enabled
+      // answers 401 UNAUTHORIZED without EXPO_ACCESS_TOKEN, and bad tokens
+      // come back as per-message tickets — both used to vanish here.
+      const body = await res.text();
+      if (!res.ok || /"status"\s*:\s*"error"/.test(body)) {
+        console.error(`expo push: HTTP ${res.status} ${body.slice(0, 500)}`);
+      }
+    } catch (error) {
+      console.error("expo push: request failed", error);
+    }
+  });
 }
 
 export async function sendExpoPush(message: ExpoPushMessage): Promise<void> {

package/templates/functions/update-profile/index.ts

@@ -1,10 +1,10 @@
-// update-profile: the ONLY write path for profiles.handle / bio / avatar_url.
+// update-profile: the ONLY moderated write path for profiles.username / handle / bio / avatar_url.
 // JWT-authenticated: uid comes from the caller's anon session token, never the
 // body. Text fields run through OpenAI omni-moderation (same category logic
 // as moderate-one); avatarPath runs image moderation on the object's public
 // URL. Fail closed: if moderation is unreachable, nothing is written.
 //
-// Fields are applied sequentially (handle, then bio, then avatar); the first
+// Fields are applied sequentially (username, handle, bio, then avatar); the first
 // failure aborts and reports its field. The app's editors send one field at a
 // time, so partial application is not observable in practice.
 
@@ -24,17 +24,23 @@ Deno.serve(async (req) => {
   const uid = userData.user?.id;
   if (!uid) return json({ status: "error", error: "unauthorized" }, 401);
 
-  let body: { handle?: unknown; bio?: unknown; avatarPath?: unknown };
+  let body: { username?: unknown; handle?: unknown; bio?: unknown; avatarPath?: unknown };
   try {
     body = await req.json();
   } catch {
     return json({ status: "error", error: "bad request" }, 400);
   }
-  const { handle, bio, avatarPath } = body;
-  if (handle === undefined && bio === undefined && avatarPath === undefined) {
+  const { username, handle, bio, avatarPath } = body;
+  if (
+    username === undefined &&
+    handle === undefined &&
+    bio === undefined &&
+    avatarPath === undefined
+  ) {
     return json({ status: "error", error: "bad request" }, 400);
   }
   if (
+    (username !== undefined && typeof username !== "string") ||
     (handle !== undefined && typeof handle !== "string") ||
     (bio !== undefined && typeof bio !== "string") ||
     (avatarPath !== undefined && typeof avatarPath !== "string")
@@ -42,6 +48,21 @@ Deno.serve(async (req) => {
     return json({ status: "error", error: "bad request" }, 400);
   }
 
+  // ============ USERNAME (display name) ============
+  if (username !== undefined) {
+    const u = (username as string).trim();
+    if (u.length < 2 || u.length > 24) {
+      return json({ status: "error", error: "invalid_username" }, 400);
+    }
+    const verdict = await moderateInput(u);
+    if (!verdict) return json({ status: "error", error: "moderation unavailable" }, 503);
+    if (verdict.flagged) {
+      return json({ status: "rejected", field: "username", reason: verdict.reason });
+    }
+    const { error } = await admin.from("profiles").update({ username: u }).eq("id", uid);
+    if (error) return json({ status: "error", error: error.message }, 500);
+  }
+
   // ============ HANDLE ============
   if (handle !== undefined) {
     const h = (handle as string).trim().toLowerCase();
@@ -119,11 +140,12 @@ Deno.serve(async (req) => {
   // ============ SUCCESS ============
   const { data: profile } = await admin
     .from("profiles")
-    .select("handle, bio, avatar_url")
+    .select("username, handle, bio, avatar_url")
     .eq("id", uid)
     .single();
   return json({
     status: "ok",
+    username: profile?.username ?? null,
     handle: profile?.handle ?? null,
     bio: profile?.bio ?? null,
     avatarUrl: profile?.avatar_url ?? null,