@suluk/platform 0.1.2 → 0.1.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@suluk/platform",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "The platform generator (C051): write one `definePlatform` manifest → it plans the shadcn-registry adds, generates the wired Hono entry, and merges each module's provision fragment into a single provision.config. The manifest compiles to a shadcn-add list + a C047 provision.config; the generator runs the adds + `@suluk/provision`. Turns the Suluk backend registry into a one-command platform. CANDIDATE tooling.",
   "publishConfig": {
   "access": "public"

package/src/catalog.ts

@@ -27,6 +27,10 @@ export const CATALOG: Record<string, CatalogEntry> = {
   cost: { mount: { kind: "route", path: "/cost", symbol: "costRoutes", from: "./routes/cost" }, provision: { symbol: "costProvision", from: "./src/provision/cost" } },
   erasure: { mount: { kind: "route", path: "/erasure", symbol: "erasureRoutes", from: "./routes/erasure" }, provision: { symbol: "erasureProvision", from: "./src/provision/erasure" } },
   email: { mount: { kind: "route", path: "/email", symbol: "emailRoutes", from: "./routes/email" } }, // stateless binding — no provision fragment (C052)
+  webhooks: { mount: { kind: "route", path: "/webhooks", symbol: "webhooksRoutes", from: "./routes/webhooks" }, provision: { symbol: "webhooksProvision", from: "./src/provision/webhooks" } },
+  // cross-cutting MIDDLEWARE (apply globally via app.use, emitted before any route) — not routed resources.
+  "rate-limit": { mount: { kind: "middleware", symbol: "mountRateLimit", from: "./services/rate-limit" } },
+  i18n: { mount: { kind: "middleware", symbol: "mountI18n", from: "./services/i18n" } },
   logs: { mount: { kind: "route", path: "/logs", symbol: "logsRoutes", from: "./routes/logs" }, provision: { symbol: "logsProvision", from: "./src/provision/logs" } },
   // dev/CI tooling — pulled in as files, no runtime mount, no provision fragment.
   journeys: { mount: { kind: "dev" } },

package/src/plan.ts

@@ -30,17 +30,21 @@ export function planPlatform(manifest: PlatformManifest): PlatformPlan {
 
 function buildEntry(services: string[]): string {
   const imports = ['import { createApp } from "./app";'];
-  const body: string[] = ["const app = createApp();"];
+  const middleware: string[] = [];
+  const routes: string[] = [];
+  // TWO passes: ALL middleware mounts (app.use / handler) emit BEFORE any route mount, so a cross-cutting concern
+  // (auth, rate-limit, i18n) applies to every route regardless of where it sits in the manifest.
   for (const s of services) {
     const m = CATALOG[s].mount;
     if (m.kind === "middleware") {
       imports.push(`import { ${m.symbol} } from "${m.from}";`);
-      body.push(`${m.symbol}(app);`);
+      middleware.push(`${m.symbol}(app);`);
     } else if (m.kind === "route") {
       imports.push(`import { ${m.symbol} } from "${m.from}";`);
-      body.push(`app.route("${m.path}", ${m.symbol}());`);
+      routes.push(`app.route("${m.path}", ${m.symbol}());`);
     }
   }
+  const body = ["const app = createApp();", ...middleware, ...routes];
   return `// AUTO-GENERATED by @suluk/platform from platform.config.ts — the wired Hono entry. Edit freely.\n${imports.join("\n")}\n\n${body.join("\n")}\n\nexport default app;\n`;
 }
 

package/test/plan.test.ts

@@ -64,6 +64,25 @@ describe("cost (route + provision) + dev modules (journeys/audit — files only)
     expect(p.provisionConfig).toContain("mergeProvision([authProvision, creditsProvision])");
   });
 
+  test("webhooks mounts a /webhooks route and contributes a provision fragment", () => {
+    const p = planPlatform(definePlatform({ name: "w", registry: "acme/reg", services: ["auth", "webhooks"] }));
+    expect(p.entry).toContain('import { webhooksRoutes } from "./routes/webhooks";');
+    expect(p.entry).toContain('app.route("/webhooks", webhooksRoutes());');
+    expect(p.provisionConfig).toContain("mergeProvision([authProvision, webhooksProvision])");
+  });
+
+  test("rate-limit + i18n are MIDDLEWARE mounts (app.use, no route, no provision) emitted BEFORE routes", () => {
+    const p = planPlatform(definePlatform({ name: "mw", registry: "acme/reg", services: ["auth", "credits", "rate-limit", "i18n"] }));
+    expect(p.entry).toContain("mountRateLimit(app);");
+    expect(p.entry).toContain("mountI18n(app);");
+    // no route, no provision for either.
+    expect(p.entry).not.toContain('app.route("/rate-limit"');
+    expect(p.provisionConfig).toContain("mergeProvision([authProvision, creditsProvision])");
+    // two-pass ordering: every middleware mount precedes every route mount, so global middleware applies to all routes.
+    const lastMw = Math.max(p.entry.indexOf("mountRateLimit(app);"), p.entry.indexOf("mountI18n(app);"), p.entry.indexOf("mountAuthRoutes(app);"));
+    expect(lastMw).toBeLessThan(p.entry.indexOf('app.route("/credits"'));
+  });
+
   test("dev modules add shadcn refs but NO entry mount and NO provision fragment", () => {
     expect(plan.adds).toContain("acme/reg/journeys");
     expect(plan.adds).toContain("acme/reg/audit");