@sylphx/flow 2.28.4 → 2.28.6
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +16 -0
- package/assets/slash-commands/continue.md +86 -22
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,21 @@
|
|
|
1
1
|
# @sylphx/flow
|
|
2
2
|
|
|
3
|
+
## 2.28.6 (2026-01-04)
|
|
4
|
+
|
|
5
|
+
Switch styling from Tailwind to UnoCSS + Iconify
|
|
6
|
+
|
|
7
|
+
### 📚 Documentation
|
|
8
|
+
|
|
9
|
+
- **commands:** switch from Tailwind to UnoCSS + Iconify ([0ca95ea](https://github.com/SylphxAI/flow/commit/0ca95ea29bb82ad4534618592f8b9c6e3543d606))
|
|
10
|
+
|
|
11
|
+
## 2.28.5 (2026-01-04)
|
|
12
|
+
|
|
13
|
+
Enhance continue command with Radix UI everywhere, bootstrap super admin, and platform-led integrations
|
|
14
|
+
|
|
15
|
+
### 📚 Documentation
|
|
16
|
+
|
|
17
|
+
- **commands:** enhance continue with Radix UI, bootstrap, platform-led integrations ([bd09618](https://github.com/SylphxAI/flow/commit/bd09618e384f638e57535d51814696e0e2b9235e))
|
|
18
|
+
|
|
3
19
|
## 2.28.4 (2026-01-04)
|
|
4
20
|
|
|
5
21
|
Rewrite continue command with SSOT principles and comprehensive system correctness guidelines
|
|
@@ -52,36 +52,98 @@ The system must remain:
|
|
|
52
52
|
- Testable
|
|
53
53
|
- Observable
|
|
54
54
|
|
|
55
|
-
|
|
55
|
+
## UI: Radix UI Everywhere
|
|
56
|
+
|
|
57
|
+
Use Radix UI comprehensively. If Radix has a primitive for it, use it.
|
|
58
|
+
No custom implementations of solved problems.
|
|
59
|
+
No alternative component libraries for what Radix already provides.
|
|
60
|
+
|
|
61
|
+
Radix primitives are the SSOT for:
|
|
62
|
+
- Dialogs, modals, sheets
|
|
63
|
+
- Dropdowns, menus, context menus
|
|
64
|
+
- Popovers, tooltips, hover cards
|
|
65
|
+
- Tabs, accordions, collapsibles
|
|
66
|
+
- Select, combobox, radio, checkbox, switch
|
|
67
|
+
- Sliders, progress, scroll areas
|
|
68
|
+
- Navigation, breadcrumbs
|
|
69
|
+
- Toasts, alerts
|
|
70
|
+
- Avatar, aspect ratio, separator
|
|
71
|
+
|
|
72
|
+
When similar UI problems arise across the system,
|
|
73
|
+
solve them once with Radix, then reuse everywhere.
|
|
74
|
+
|
|
75
|
+
## Bootstrap: Super Admin
|
|
76
|
+
|
|
77
|
+
Simplest possible approach:
|
|
78
|
+
|
|
79
|
+
```
|
|
80
|
+
INITIAL_SUPERADMIN_EMAIL=your@email.com
|
|
81
|
+
```
|
|
82
|
+
|
|
83
|
+
Flow:
|
|
84
|
+
1. Set env variable
|
|
85
|
+
2. Register with that email
|
|
86
|
+
3. Automatically elevated to super_admin
|
|
87
|
+
4. Done
|
|
88
|
+
|
|
89
|
+
Why singular:
|
|
90
|
+
- Only one initial super_admin needed
|
|
91
|
+
- They promote others via admin UI
|
|
92
|
+
- Simple = fewer bugs
|
|
93
|
+
|
|
94
|
+
The bootstrap must:
|
|
95
|
+
- Execute exactly once
|
|
96
|
+
- Be non-reentrant
|
|
97
|
+
- Not be bypassable
|
|
98
|
+
- Not become permanent logic dependency
|
|
99
|
+
|
|
100
|
+
## Third-Party Integrations: Platform-Led
|
|
101
|
+
|
|
102
|
+
The platform is the source of truth. Third-party services sync FROM the platform, not TO it.
|
|
103
|
+
|
|
104
|
+
**Stripe:**
|
|
105
|
+
- Platform defines products, prices, features
|
|
106
|
+
- Stripe is synced to match platform state
|
|
107
|
+
- No manual Stripe dashboard configuration
|
|
108
|
+
- Platform state → Stripe sync (never reverse)
|
|
109
|
+
|
|
110
|
+
**All integrations:**
|
|
111
|
+
- Design in platform first
|
|
112
|
+
- Third-party services are implementation details
|
|
113
|
+
- No dependency on third-party UI/configuration
|
|
114
|
+
- Platform can switch providers without architectural change
|
|
115
|
+
|
|
116
|
+
## Technologies
|
|
117
|
+
|
|
118
|
+
All must be used correctly, consistently, and idiomatically:
|
|
56
119
|
tRPC, Next.js, Radix UI, next-intl, Drizzle,
|
|
57
120
|
Better Auth, Stripe, Upstash, Neon, Vercel,
|
|
58
121
|
Resend (email), Vercel Blob (storage),
|
|
59
122
|
AI SDK with OpenRouter provider,
|
|
60
|
-
|
|
123
|
+
UnoCSS (styling), Iconify (icons),
|
|
124
|
+
Bun, Biome, Bun test,
|
|
61
125
|
Responsive Web Design.
|
|
62
126
|
|
|
63
|
-
|
|
64
|
-
- Must be defined via environment configuration
|
|
65
|
-
- Must execute exactly once in the system's lifetime
|
|
66
|
-
- Must be non-reentrant
|
|
67
|
-
- Must not be bypassable
|
|
68
|
-
- Must not become a permanent logic dependency
|
|
127
|
+
## Re-authentication Flow
|
|
69
128
|
|
|
70
129
|
All sensitive operations require explicit re-authentication:
|
|
71
|
-
|
|
72
|
-
|
|
73
|
-
|
|
74
|
-
|
|
75
|
-
|
|
76
|
-
|
|
77
|
-
|
|
78
|
-
|
|
79
|
-
|
|
80
|
-
|
|
81
|
-
|
|
82
|
-
|
|
83
|
-
|
|
84
|
-
|
|
130
|
+
|
|
131
|
+
```
|
|
132
|
+
Sensitive action triggered
|
|
133
|
+
↓
|
|
134
|
+
Check verified session
|
|
135
|
+
↓
|
|
136
|
+
Does the user have a password?
|
|
137
|
+
├─ Yes → Verify password
|
|
138
|
+
└─ No → Send email OTP (6 digits, 10-minute expiry)
|
|
139
|
+
↓
|
|
140
|
+
Verification succeeds
|
|
141
|
+
↓
|
|
142
|
+
Mark session as verified
|
|
143
|
+
↓
|
|
144
|
+
Allow scoped, time-bound sensitive actions
|
|
145
|
+
(2FA setup, email change, account deletion, etc.)
|
|
146
|
+
```
|
|
85
147
|
|
|
86
148
|
The verified state must:
|
|
87
149
|
- Have explicit scope
|
|
@@ -89,6 +151,8 @@ The verified state must:
|
|
|
89
151
|
- Never be implicitly reused
|
|
90
152
|
- Never be shared across sessions or contexts
|
|
91
153
|
|
|
154
|
+
---
|
|
155
|
+
|
|
92
156
|
Any ambiguity, inconsistency, incompleteness, or undefined behavior
|
|
93
157
|
must be treated as a bug, not a feature.
|
|
94
158
|
|
package/package.json
CHANGED