@suluk/platform 0.1.2 → 0.1.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@suluk/platform",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "description": "The platform generator (C051): write one `definePlatform` manifest → it plans the shadcn-registry adds, generates the wired Hono entry, and merges each module's provision fragment into a single provision.config. The manifest compiles to a shadcn-add list + a C047 provision.config; the generator runs the adds + `@suluk/provision`. Turns the Suluk backend registry into a one-command platform. CANDIDATE tooling.",
   "publishConfig": {
   "access": "public"

package/src/catalog.ts

@@ -21,13 +21,19 @@ export interface CatalogEntry {
 export const CATALOG: Record<string, CatalogEntry> = {
   app: { mount: { kind: "base" } },
   auth: { mount: { kind: "middleware", symbol: "mountAuthRoutes", from: "./auth" }, provision: { symbol: "authProvision", from: "./src/provision/auth" } },
-  credits: { mount: { kind: "route", path: "/credits", symbol: "creditsRoutes", from: "./routes/credits" }, provision: { symbol: "creditsProvision", from: "./src/provision/credits" } },
-  keys: { mount: { kind: "route", path: "/keys", symbol: "keysRoutes", from: "./routes/keys" }, provision: { symbol: "keysProvision", from: "./src/provision/keys" } },
-  billing: { mount: { kind: "route", path: "/billing", symbol: "billingRoutes", from: "./routes/billing" }, provision: { symbol: "billingProvision", from: "./src/provision/billing" } },
-  cost: { mount: { kind: "route", path: "/cost", symbol: "costRoutes", from: "./routes/cost" }, provision: { symbol: "costProvision", from: "./src/provision/cost" } },
-  erasure: { mount: { kind: "route", path: "/erasure", symbol: "erasureRoutes", from: "./routes/erasure" }, provision: { symbol: "erasureProvision", from: "./src/provision/erasure" } },
-  email: { mount: { kind: "route", path: "/email", symbol: "emailRoutes", from: "./routes/email" } }, // stateless binding — no provision fragment (C052)
-  logs: { mount: { kind: "route", path: "/logs", symbol: "logsRoutes", from: "./routes/logs" }, provision: { symbol: "logsProvision", from: "./src/provision/logs" } },
+  // feature routes mount under /api/* — where the caller-resolution + cors + rate-limit middleware live (toolfactory parity).
+  contract: { mount: { kind: "route", path: "/api", symbol: "contractRoutes", from: "./routes/contract" } }, // serves GET /api/openapi.json (derived); stateless
+  credits: { mount: { kind: "route", path: "/api/credits", symbol: "creditsRoutes", from: "./routes/credits" }, provision: { symbol: "creditsProvision", from: "./src/provision/credits" } },
+  keys: { mount: { kind: "route", path: "/api/keys", symbol: "keysRoutes", from: "./routes/keys" }, provision: { symbol: "keysProvision", from: "./src/provision/keys" } },
+  billing: { mount: { kind: "route", path: "/api/billing", symbol: "billingRoutes", from: "./routes/billing" }, provision: { symbol: "billingProvision", from: "./src/provision/billing" } },
+  cost: { mount: { kind: "route", path: "/api/cost", symbol: "costRoutes", from: "./routes/cost" }, provision: { symbol: "costProvision", from: "./src/provision/cost" } },
+  erasure: { mount: { kind: "route", path: "/api/erasure", symbol: "erasureRoutes", from: "./routes/erasure" }, provision: { symbol: "erasureProvision", from: "./src/provision/erasure" } },
+  email: { mount: { kind: "route", path: "/api/email", symbol: "emailRoutes", from: "./routes/email" } }, // stateless binding — no provision fragment (C052)
+  webhooks: { mount: { kind: "route", path: "/api/webhooks", symbol: "webhooksRoutes", from: "./routes/webhooks" }, provision: { symbol: "webhooksProvision", from: "./src/provision/webhooks" } },
+  // cross-cutting MIDDLEWARE (apply globally via app.use, emitted before any route) — not routed resources.
+  "rate-limit": { mount: { kind: "middleware", symbol: "mountRateLimit", from: "./services/rate-limit" } },
+  i18n: { mount: { kind: "middleware", symbol: "mountI18n", from: "./services/i18n" } },
+  logs: { mount: { kind: "route", path: "/api/logs", symbol: "logsRoutes", from: "./routes/logs" }, provision: { symbol: "logsProvision", from: "./src/provision/logs" } },
   // dev/CI tooling — pulled in as files, no runtime mount, no provision fragment.
   journeys: { mount: { kind: "dev" } },
   audit: { mount: { kind: "dev" } },

package/src/plan.ts

@@ -30,17 +30,21 @@ export function planPlatform(manifest: PlatformManifest): PlatformPlan {
 
 function buildEntry(services: string[]): string {
   const imports = ['import { createApp } from "./app";'];
-  const body: string[] = ["const app = createApp();"];
+  const middleware: string[] = [];
+  const routes: string[] = [];
+  // TWO passes: ALL middleware mounts (app.use / handler) emit BEFORE any route mount, so a cross-cutting concern
+  // (auth, rate-limit, i18n) applies to every route regardless of where it sits in the manifest.
   for (const s of services) {
     const m = CATALOG[s].mount;
     if (m.kind === "middleware") {
       imports.push(`import { ${m.symbol} } from "${m.from}";`);
-      body.push(`${m.symbol}(app);`);
+      middleware.push(`${m.symbol}(app);`);
     } else if (m.kind === "route") {
       imports.push(`import { ${m.symbol} } from "${m.from}";`);
-      body.push(`app.route("${m.path}", ${m.symbol}());`);
+      routes.push(`app.route("${m.path}", ${m.symbol}());`);
     }
   }
+  const body = ["const app = createApp();", ...middleware, ...routes];
   return `// AUTO-GENERATED by @suluk/platform from platform.config.ts — the wired Hono entry. Edit freely.\n${imports.join("\n")}\n\n${body.join("\n")}\n\nexport default app;\n`;
 }
 

package/test/plan.test.ts

@@ -20,8 +20,8 @@ describe("planPlatform — manifest → shadcn adds + entry + provision.config",
     expect(plan.entry).toContain('import { mountAuthRoutes } from "./auth";');
     expect(plan.entry).toContain("mountAuthRoutes(app);");
     expect(plan.entry).toContain('import { creditsRoutes } from "./routes/credits";');
-    expect(plan.entry).toContain('app.route("/credits", creditsRoutes());');
-    expect(plan.entry).toContain('app.route("/billing", billingRoutes());');
+    expect(plan.entry).toContain('app.route("/api/credits", creditsRoutes());');
+    expect(plan.entry).toContain('app.route("/api/billing", billingRoutes());');
     expect(plan.entry).toContain("export default app;");
   });
 
@@ -42,7 +42,7 @@ describe("cost (route + provision) + dev modules (journeys/audit — files only)
 
   test("cost mounts a /cost route and contributes a provision fragment", () => {
     expect(plan.entry).toContain('import { costRoutes } from "./routes/cost";');
-    expect(plan.entry).toContain('app.route("/cost", costRoutes());');
+    expect(plan.entry).toContain('app.route("/api/cost", costRoutes());');
     expect(plan.provisionConfig).toContain('import { costProvision } from "./src/provision/cost";');
     expect(plan.provisionConfig).toContain("mergeProvision([authProvision, creditsProvision, costProvision, logsProvision])");
   });
@@ -50,7 +50,7 @@ describe("cost (route + provision) + dev modules (journeys/audit — files only)
   test("erasure mounts an /erasure route and contributes a provision fragment", () => {
     const p = planPlatform(definePlatform({ name: "e", registry: "acme/reg", services: ["auth", "erasure"] }));
     expect(p.entry).toContain('import { erasureRoutes } from "./routes/erasure";');
-    expect(p.entry).toContain('app.route("/erasure", erasureRoutes());');
+    expect(p.entry).toContain('app.route("/api/erasure", erasureRoutes());');
     expect(p.provisionConfig).toContain('import { erasureProvision } from "./src/provision/erasure";');
     expect(p.provisionConfig).toContain("mergeProvision([authProvision, erasureProvision])");
   });
@@ -58,12 +58,39 @@ describe("cost (route + provision) + dev modules (journeys/audit — files only)
   test("email mounts an /email route but contributes NO provision fragment (stateless binding)", () => {
     const p = planPlatform(definePlatform({ name: "m", registry: "acme/reg", services: ["auth", "email", "credits"] }));
     expect(p.entry).toContain('import { emailRoutes } from "./routes/email";');
-    expect(p.entry).toContain('app.route("/email", emailRoutes());');
+    expect(p.entry).toContain('app.route("/api/email", emailRoutes());');
     // email has no provision fragment, so the merge is just auth + credits.
     expect(p.provisionConfig).not.toContain("emailProvision");
     expect(p.provisionConfig).toContain("mergeProvision([authProvision, creditsProvision])");
   });
 
+  test("webhooks mounts a /webhooks route and contributes a provision fragment", () => {
+    const p = planPlatform(definePlatform({ name: "w", registry: "acme/reg", services: ["auth", "webhooks"] }));
+    expect(p.entry).toContain('import { webhooksRoutes } from "./routes/webhooks";');
+    expect(p.entry).toContain('app.route("/api/webhooks", webhooksRoutes());');
+    expect(p.provisionConfig).toContain("mergeProvision([authProvision, webhooksProvision])");
+  });
+
+  test("rate-limit + i18n are MIDDLEWARE mounts (app.use, no route, no provision) emitted BEFORE routes", () => {
+    const p = planPlatform(definePlatform({ name: "mw", registry: "acme/reg", services: ["auth", "credits", "rate-limit", "i18n"] }));
+    expect(p.entry).toContain("mountRateLimit(app);");
+    expect(p.entry).toContain("mountI18n(app);");
+    // no route, no provision for either.
+    expect(p.entry).not.toContain('app.route("/rate-limit"');
+    expect(p.provisionConfig).toContain("mergeProvision([authProvision, creditsProvision])");
+    // two-pass ordering: every middleware mount precedes every route mount, so global middleware applies to all routes.
+    const lastMw = Math.max(p.entry.indexOf("mountRateLimit(app);"), p.entry.indexOf("mountI18n(app);"), p.entry.indexOf("mountAuthRoutes(app);"));
+    expect(lastMw).toBeLessThan(p.entry.indexOf('app.route("/api/credits"'));
+  });
+
+  test("contract mounts at /api (serving /api/openapi.json) with NO provision; feature routes are under /api/*", () => {
+    const p = planPlatform(definePlatform({ name: "c", registry: "acme/reg", services: ["auth", "contract", "credits"] }));
+    expect(p.entry).toContain('import { contractRoutes } from "./routes/contract";');
+    expect(p.entry).toContain('app.route("/api", contractRoutes());');
+    expect(p.entry).toContain('app.route("/api/credits", creditsRoutes());'); // toolfactory-parity /api/* prefix
+    expect(p.provisionConfig).not.toContain("contractProvision");
+  });
+
   test("dev modules add shadcn refs but NO entry mount and NO provision fragment", () => {
     expect(plan.adds).toContain("acme/reg/journeys");
     expect(plan.adds).toContain("acme/reg/audit");