@stardeck-customer-apps/compose 0.9.0 → 0.11.0

package/SKILL.md

@@ -18,6 +18,12 @@ Compose turns that declaration into the code Next.js actually builds:
   per composed Module that ships `server/registrations.ts`
 - one `page.tsx` / `route.ts` stub under `apps/web/src/app/**` per declared
   mount and endpoint
+- `apps/web/tsconfig.build.gen.json` (apps with a Module tree only) — extends
+  `tsconfig.json` and excludes every Module `--enabled` left out, plus each
+  kept Module's `enhancements/<excluded>/`. Their source stays on disk but their
+  stubs are gone, so `next build` must type-check through this file
+  (`typescript.tsconfigPath` in `next.config.ts`), never through `tsconfig.json`.
+  Gitignore it; do not hand-maintain an exclude list.
 
 ## Running it
 
@@ -69,7 +75,9 @@ a silent fallback. It holds deployment facts: gitignore it (`apps/web/.gitignore
   installed Module. Library and contract Modules are always composed. A name
   that is not installed fails with exit 1. Falls back to
   `NEXT_PUBLIC_STARDECK_ENABLED_MODULES` (how the platform passes the selection
-  at deploy time); the flag wins.
+  at deploy time); the flag wins. A Module whose `module.json` sets
+  `"defaultEnabled": false` is still composed when `--enabled` is unset: the key
+  only tells the platform to leave it off when it creates a Blueprint fork.
 - `--prune` — after composing, delete the source of every excluded Module, plus
   any enhancement slice an enabled Module keeps for an excluded peer (the slice
   imports its peer, so leaving it breaks `next build`). Requires `--enabled`,

package/dist/cli.js

@@ -2354,7 +2354,13 @@ var moduleManifestSchema = import_zod.z.object({
    * `module-boundaries/ui-layer` lint rule enforces it — so a fork may
    * soft-eject them. See docs/module-ui-soft-eject-plan.md.
    */
-  ui: import_zod.z.object({ separable: import_zod.z.boolean() }).strict().optional()
+  ui: import_zod.z.object({ separable: import_zod.z.boolean() }).strict().optional(),
+  /**
+   * `false` keeps a feature Module off in a new Blueprint fork unless the
+   * creator ticks it: the fork picker leaves it unchecked and "every Module"
+   * is written out without it. Omitted means on. Library Modules are always on.
+   */
+  defaultEnabled: import_zod.z.boolean().optional()
 }).strict().superRefine((manifest, ctx) => {
   if (manifest.uses.includes(manifest.name)) {
     ctx.addIssue({
@@ -3889,6 +3895,7 @@ function analyzeClientSafeEntryImports(sourceText, fileName) {
 
 // ../../packages/lib/src/shared/platform-owned-paths.ts
 var APP_WEB_PREFIX = "apps/web/";
+var BLUEPRINT_LINT_MARKER = `${APP_WEB_PREFIX}eslint-rules/module-boundaries.mjs`;
 var MODULE_STUB_MARKER = "@stardeck-module-rail-generated";
 var ENABLED_MODULES_ENV = "NEXT_PUBLIC_STARDECK_ENABLED_MODULES";
 var HEADLESS_MOUNTS_ENV = "NEXT_PUBLIC_STARDECK_HEADLESS_MOUNTS";
@@ -3901,7 +3908,7 @@ var MODULES_GEN_PATH = `${APP_WEB_PREFIX}src/modules.gen.ts`;
 var APP_EXTENSIONS_PATH = `${APP_WEB_PREFIX}src/lib/modules/app-extensions.ts`;
 
 // src/cli.ts
-var import_typescript6 = __toESM(require("typescript"));
+var import_typescript7 = __toESM(require("typescript"));
 var import_node_path4 = __toESM(require("path"));
 
 // src/index.ts
@@ -3966,147 +3973,29 @@ function shellQuote(value) {
   return `'${value.replace(/'/g, `'\\''`)}'`;
 }
 
-// ../../packages/lib/src/shared/module-composition.ts
-var import_zod6 = require("zod");
-var moduleRefSchema = import_zod6.z.object({
-  homeProjectId: import_zod6.z.string().uuid(),
-  moduleName: moduleNameSchema
-});
-var creationSourceBlankSchema = import_zod6.z.object({
-  type: import_zod6.z.literal("blank")
-});
-var creationSourceBlueprintSchema = import_zod6.z.object({
-  type: import_zod6.z.literal("blueprint"),
-  /** Internal template/fork project id — keep template naming in identifiers. */
-  blueprintProjectId: import_zod6.z.string().uuid(),
-  /**
-   * `null`/absent means every feature Module. `[]` is refused: the platform
-   * serialises it to an empty `NEXT_PUBLIC_STARDECK_ENABLED_MODULES`, which the
-   * enablement parser reads back as "all" (`module-enablement.ts`) — the
-   * opposite of what an empty selection means.
-   */
-  enabledModules: import_zod6.z.array(moduleNameSchema).min(1, "Enable at least one Module").max(100).nullable().optional()
-});
-var creationSourceModulesSchema = import_zod6.z.object({
-  type: import_zod6.z.literal("modules"),
-  requested: import_zod6.z.array(moduleRefSchema).min(1)
-});
-var creationSourceSchema = import_zod6.z.discriminatedUnion("type", [
-  creationSourceBlankSchema,
-  creationSourceBlueprintSchema,
-  creationSourceModulesSchema
-]);
-var moduleCompositionStatusSchema = import_zod6.z.enum([
-  "pending",
-  "installing",
-  "ready",
-  "partial",
-  "failed"
-]);
-var resolvedModuleSnapshotSchema = moduleRefSchema.extend({
-  version: import_zod6.z.string().min(1),
-  homeCommitSha: import_zod6.z.string().min(1)
-});
-var moduleInstallHandoffSchema = import_zod6.z.object({
-  moduleName: import_zod6.z.string().min(1),
-  homeProjectId: import_zod6.z.string().uuid(),
-  installedVersion: import_zod6.z.string().min(1),
-  baselineSha: import_zod6.z.string().min(1),
-  mounts: import_zod6.z.array(
-    import_zod6.z.object({
-      group: import_zod6.z.string(),
-      segment: import_zod6.z.string()
-    })
-  ),
-  integration: import_zod6.z.array(import_zod6.z.string()),
-  workflows: import_zod6.z.array(import_zod6.z.string()),
-  prunedEnhancements: import_zod6.z.array(import_zod6.z.string()),
-  restoredEnhancements: import_zod6.z.array(import_zod6.z.string()).optional(),
-  permissions: import_zod6.z.array(
-    import_zod6.z.object({
-      key: import_zod6.z.string().min(1),
-      description: import_zod6.z.string().min(1)
-    })
-  ).optional()
-});
-var moduleCompositionRunAttemptSchema = import_zod6.z.object({
-  module: moduleRefSchema,
-  runId: import_zod6.z.string().min(1),
-  status: import_zod6.z.string().min(1),
-  schemaApplied: import_zod6.z.boolean(),
-  error: import_zod6.z.string().optional(),
-  /** Prefer full ModuleInstallHandoff; identity fields optional for older rows. */
-  handoff: moduleInstallHandoffSchema.partial({ moduleName: true, homeProjectId: true }).optional()
-});
-var initialModuleCompositionSchema = import_zod6.z.object({
-  version: import_zod6.z.literal(1),
-  status: moduleCompositionStatusSchema,
-  requested: import_zod6.z.array(moduleRefSchema).min(1),
-  resolved: import_zod6.z.array(resolvedModuleSnapshotSchema),
-  installOrder: import_zod6.z.array(moduleRefSchema),
-  runs: import_zod6.z.array(moduleCompositionRunAttemptSchema).default([]),
-  /**
-   * True when any failed/partial attempt applied schema before failing.
-   * Never claim transactional rollback across git/schema.
-   */
-  schemaApplied: import_zod6.z.boolean().default(false),
-  /**
-   * Present when retry would silently change pinned home SHAs — caller must
-   * reconfirm the new plan rather than continue.
-   */
-  reconfirmationRequired: import_zod6.z.object({
-    reason: import_zod6.z.string(),
-    previous: import_zod6.z.array(resolvedModuleSnapshotSchema),
-    next: import_zod6.z.array(resolvedModuleSnapshotSchema)
-  }).optional(),
-  error: import_zod6.z.string().optional(),
-  /**
-   * First-turn system handoff lifecycle. Absent/`pending` means inject when
-   * status is ready; `consumed` means a successful agent turn already used it.
-   */
-  systemHandoffStatus: import_zod6.z.enum(["pending", "consumed"]).optional(),
-  /**
-   * CAS ownership token for concurrent retry attempts. Only the attempt that
-   * currently owns this value may reset or compensate durable composition state.
-   */
-  retryAttemptId: import_zod6.z.string().min(1).optional(),
-  /**
-   * When the current `installing` attempt was claimed. A setup run that dies
-   * with its host (a killed Vercel instance) leaves the composition `installing`
-   * forever, and the creating page's poll only stops on ready/partial/failed —
-   * so staleness, not a queue's stall detector, is what settles it. Absent on
-   * rows claimed before this field existed; treated as stale.
-   */
-  attemptStartedAt: import_zod6.z.string().datetime().optional(),
-  /** Outside-module files the agent changed during connection work. */
-  integrationFiles: import_zod6.z.array(import_zod6.z.string()).optional(),
-  verificationSummary: import_zod6.z.string().optional()
-});
-var MODULE_SETUP_ATTEMPT_STALE_MS = 10 * 60 * 1e3;
-
 // ../../packages/lib/src/shared/compose-inputs.ts
-var import_zod7 = require("zod");
+var import_zod6 = require("zod");
 var COMPOSE_INPUTS_PATH = "apps/web/stardeck.compose.json";
-var composeInputsSchema = import_zod7.z.strictObject({
-  connectedStores: import_zod7.z.array(
-    import_zod7.z.strictObject({
-      storeId: import_zod7.z.string().min(1),
-      slug: import_zod7.z.string().min(1),
+var composeInputsSchema = import_zod6.z.strictObject({
+  connectedStores: import_zod6.z.array(
+    import_zod6.z.strictObject({
+      storeId: import_zod6.z.string().min(1),
+      slug: import_zod6.z.string().min(1),
       // A row with an empty binding key must not fail a deploy: the rail
       // treats falsy as "no binding key", so normalise rather than reject.
-      bindingKey: import_zod7.z.string().nullish().transform((value) => value || null),
-      accessLevel: import_zod7.z.enum(["read", "write", "admin"]),
+      bindingKey: import_zod6.z.string().nullish().transform((value) => value || null),
+      accessLevel: import_zod6.z.enum(["read", "write", "admin"]),
       // Defaulted so a file written before the platform emitted store types
       // (database rows only) still parses. The platform starts writing
       // storage rows, with `type` set, once forks run a compose that reads it.
-      type: import_zod7.z.enum(["database", "storage"]).default("database")
+      type: import_zod6.z.enum(["database", "storage"]).default("database")
     })
   ).default([]),
-  installs: import_zod7.z.record(
-    import_zod7.z.string(),
-    import_zod7.z.strictObject({
-      installedVersion: import_zod7.z.string().min(1),
-      datastoreBindings: import_zod7.z.record(import_zod7.z.string(), import_zod7.z.string()).nullish()
+  installs: import_zod6.z.record(
+    import_zod6.z.string(),
+    import_zod6.z.strictObject({
+      installedVersion: import_zod6.z.string().min(1),
+      datastoreBindings: import_zod6.z.record(import_zod6.z.string(), import_zod6.z.string()).nullish()
     })
   ).default({})
 });
@@ -6043,6 +5932,52 @@ function rejectPseudoModuleEntries(entries, parentDir, label) {
   return dirs;
 }
 
+// ../../packages/lib/src/shared/module-composition.ts
+var import_zod7 = require("zod");
+var creationSourceBlankSchema = import_zod7.z.object({
+  type: import_zod7.z.literal("blank")
+});
+var creationSourceBlueprintSchema = import_zod7.z.object({
+  type: import_zod7.z.literal("blueprint"),
+  /** Internal template/fork project id — keep template naming in identifiers. */
+  blueprintProjectId: import_zod7.z.string().uuid(),
+  /**
+   * `null`/absent means every feature Module: the platform stores that as the
+   * explicit list of feature Modules in the published Blueprint version the fork
+   * is cut from, so a Module a later Blueprint update adds arrives off. `[]` is
+   * refused: the platform serialises it to an empty
+   * `NEXT_PUBLIC_STARDECK_ENABLED_MODULES`, which the enablement parser reads
+   * back as "all" (`module-enablement.ts`) — the opposite of an empty selection.
+   */
+  enabledModules: import_zod7.z.array(moduleNameSchema).min(1, "Enable at least one Module").max(100).nullable().optional()
+});
+var creationSourceSchema = import_zod7.z.discriminatedUnion("type", [
+  creationSourceBlankSchema,
+  creationSourceBlueprintSchema
+]);
+var moduleInstallHandoffSchema = import_zod7.z.object({
+  moduleName: import_zod7.z.string().min(1),
+  homeProjectId: import_zod7.z.string().uuid(),
+  installedVersion: import_zod7.z.string().min(1),
+  baselineSha: import_zod7.z.string().min(1),
+  mounts: import_zod7.z.array(
+    import_zod7.z.object({
+      group: import_zod7.z.string(),
+      segment: import_zod7.z.string()
+    })
+  ),
+  integration: import_zod7.z.array(import_zod7.z.string()),
+  workflows: import_zod7.z.array(import_zod7.z.string()),
+  prunedEnhancements: import_zod7.z.array(import_zod7.z.string()),
+  restoredEnhancements: import_zod7.z.array(import_zod7.z.string()).optional(),
+  permissions: import_zod7.z.array(
+    import_zod7.z.object({
+      key: import_zod7.z.string().min(1),
+      description: import_zod7.z.string().min(1)
+    })
+  ).optional()
+});
+
 // ../../packages/lib/src/shared/schema-ops.ts
 var import_zod8 = require("zod");
 var columnSpecSchema = import_zod8.z.object({
@@ -7506,6 +7441,9 @@ async function reconcileCompositionArtifacts(context, options = {}) {
 var HOME_I18N_SUBSTRATE_DIR = `${APP_PACKAGE_DIR}/src/lib/i18n/substrate`;
 var HOME_I18N_MESSAGES_DIR = `${APP_PACKAGE_DIR}/src/lib/i18n/messages`;
 
+// src/index.ts
+var import_typescript6 = __toESM(require("typescript"));
+
 // src/module-boundaries.ts
 var import_node_fs2 = __toESM(require("fs"));
 var import_node_path2 = __toESM(require("path"));
@@ -7775,6 +7713,41 @@ function assertNoAppLayerImporters(cwd, excluded) {
     );
   }
 }
+var TSCONFIG_PATH = "apps/web/tsconfig.json";
+var BUILD_TSCONFIG_PATH = "apps/web/tsconfig.build.gen.json";
+var BUILD_TSCONFIG_HEADER = "// Generated by stardeck-compose \u2014 the tsconfig `next build` type-checks. Do not edit or commit.";
+function writeBuildTsconfig(cwd, excluded) {
+  const baseFile = import_node_path3.default.join(cwd, TSCONFIG_PATH);
+  if (!import_node_fs3.default.existsSync(import_node_path3.default.join(cwd, MODULES_DIR2)) || !import_node_fs3.default.existsSync(baseFile)) return;
+  const base = import_typescript6.default.readConfigFile(baseFile, import_typescript6.default.sys.readFile);
+  if (base.error) {
+    throw new Error(
+      `[compose] cannot read ${TSCONFIG_PATH}: ${import_typescript6.default.flattenDiagnosticMessageText(base.error.messageText, "\n")}`
+    );
+  }
+  const baseExclude = base.config?.exclude ?? ["node_modules"];
+  const modulesDir = import_node_path3.default.posix.relative("apps/web", MODULES_DIR2);
+  const config = {
+    extends: "./tsconfig.json",
+    exclude: [
+      ...baseExclude,
+      ...excluded.flatMap((name) => [
+        `${modulesDir}/${name}`,
+        `${modulesDir}/*/enhancements/${name}`
+      ])
+    ]
+  };
+  const content = `${BUILD_TSCONFIG_HEADER}
+${JSON.stringify(config, null, 2)}
+`;
+  const file = import_node_path3.default.join(cwd, BUILD_TSCONFIG_PATH);
+  if (!import_node_fs3.default.existsSync(file) || import_node_fs3.default.readFileSync(file, "utf8") !== content) {
+    import_node_fs3.default.writeFileSync(file, content);
+  }
+  console.log(
+    `[compose] ${BUILD_TSCONFIG_PATH} excludes ${excluded.length} Module(s): ${excluded.join(",") || "none"}`
+  );
+}
 function removeDir(absolute) {
   if (!import_node_fs3.default.existsSync(absolute)) return false;
   import_node_fs3.default.rmSync(absolute, { recursive: true, force: true });
@@ -7822,6 +7795,7 @@ async function compose(options) {
     skipComposeInputs: true
   });
   const gitignoreEntries = options.enabled ? null : writeStubGitignore(options.cwd, result.artifactPaths);
+  writeBuildTsconfig(options.cwd, result.excludedModules);
   let pruned = 0;
   if (options.prune) {
     for (const name of result.excludedModules) {
@@ -7845,7 +7819,7 @@ async function compose(options) {
 
 // src/cli.ts
 async function main() {
-  assertSupportedTypescript(import_typescript6.default.versionMajorMinor);
+  assertSupportedTypescript(import_typescript7.default.versionMajorMinor);
   const { values } = (0, import_node_util.parseArgs)({
     options: {
       enabled: { type: "string" },

package/dist/index.d.mts

@@ -129,10 +129,11 @@ declare function assertSupportedTypescript(versionMajorMinor: string): void;
  * rules those out today; a total helper keeps it that way).
  */
 declare function escapeGitignore(pattern: string): string;
+declare const BUILD_TSCONFIG_PATH = "apps/web/tsconfig.build.gen.json";
 /**
  * Regenerate the Module-rail artifacts (the six `src/*.gen.ts` files and every
  * route/endpoint stub under `src/app`) for the app rooted at `options.cwd`.
  */
 declare function compose(options: ComposeOptions): Promise<ComposeResult>;
 
-export { type BoundaryViolation, COMPOSE_INPUTS_PATH, type ComposeInputs, type ComposeOptions, type ComposeResult, assertSupportedTypescript, compose, escapeGitignore, findModuleBoundaryViolations, findOptionalPeerViolations, formatBoundaryViolations, readComposeInputs };
+export { BUILD_TSCONFIG_PATH, type BoundaryViolation, COMPOSE_INPUTS_PATH, type ComposeInputs, type ComposeOptions, type ComposeResult, assertSupportedTypescript, compose, escapeGitignore, findModuleBoundaryViolations, findOptionalPeerViolations, formatBoundaryViolations, readComposeInputs };

package/dist/index.d.ts

@@ -129,10 +129,11 @@ declare function assertSupportedTypescript(versionMajorMinor: string): void;
  * rules those out today; a total helper keeps it that way).
  */
 declare function escapeGitignore(pattern: string): string;
+declare const BUILD_TSCONFIG_PATH = "apps/web/tsconfig.build.gen.json";
 /**
  * Regenerate the Module-rail artifacts (the six `src/*.gen.ts` files and every
  * route/endpoint stub under `src/app`) for the app rooted at `options.cwd`.
  */
 declare function compose(options: ComposeOptions): Promise<ComposeResult>;
 
-export { type BoundaryViolation, COMPOSE_INPUTS_PATH, type ComposeInputs, type ComposeOptions, type ComposeResult, assertSupportedTypescript, compose, escapeGitignore, findModuleBoundaryViolations, findOptionalPeerViolations, formatBoundaryViolations, readComposeInputs };
+export { BUILD_TSCONFIG_PATH, type BoundaryViolation, COMPOSE_INPUTS_PATH, type ComposeInputs, type ComposeOptions, type ComposeResult, assertSupportedTypescript, compose, escapeGitignore, findModuleBoundaryViolations, findOptionalPeerViolations, formatBoundaryViolations, readComposeInputs };