@trylight/app 0.1.0

package/dist/server/index.js

@@ -0,0 +1,58 @@
+// The app's server half, bound once in `src/server/light.ts`: its database,
+// its door (sign-in through Plaza), and the routes the SDK serves (entities,
+// contracts, chat). Server-only.
+import { drizzle } from "drizzle-orm/postgres-js";
+import postgres from "postgres";
+import { createMiiAuthCore } from "@shubh90/app-runtime/auth/core";
+import { createMiiChatHandler } from "@shubh90/app-runtime/chat/server";
+import { createMiiInvoke } from "@shubh90/app-runtime/invoke/server";
+import { createEntitiesHandler } from "./entities.js";
+import { env } from "./env.js";
+import { readSession, signIn } from "./session.js";
+export { cookieAttributes, safeNext, SESSION_COOKIE } from "@shubh90/app-runtime/auth/core";
+export { defineContracts, InvocationError } from "@shubh90/app-runtime/invoke/server";
+export { createHealthHandler, createSentryTunnelHandler } from "@shubh90/app-runtime/server";
+/** Connections one server process holds open to the app's database. */
+const POOL_MAX = 5;
+export function createLightServer(options) {
+    const auth = createMiiAuthCore();
+    let database = null;
+    const db = () => {
+        if (database === null) {
+            const { databaseUrl } = env();
+            if (databaseUrl === undefined)
+                throw new Error("DATABASE_URL is not set: point it at a Postgres database (.env.local).");
+            database = drizzle(postgres(databaseUrl, { max: POOL_MAX }), { schema: options.schema });
+        }
+        return database;
+    };
+    const session = (request) => readSession(auth, request);
+    const invoke = createMiiInvoke(auth, options.contracts);
+    const chat = createMiiChatHandler(auth);
+    return {
+        auth,
+        session,
+        /** Whether sign-in is configured (a bare local dev server has none). */
+        configured: () => env().configured,
+        /** Email and password, checked by Plaza; the session to set as a cookie, or why not. */
+        signIn: (email, password) => signIn(auth, email, password),
+        /** The app's database, typed by its schema: `light.db.select().from(companies)`. */
+        get db() {
+            return db();
+        },
+        /** `/api/light/entities/*`: what `app.table(...)` calls. */
+        entities: createEntitiesHandler({ schema: options.schema, db, session }),
+        /** Server-side starts and reads of the app's contracts. */
+        invoke,
+        /** `/api/mii/invoke/*`: the contract buttons, forwarded to Plaza as the person. */
+        invokeRoute: needsSignIn(invoke.handler),
+        /** `/api/mii/chat/*`: the chat bubble's calls to the org's agents. */
+        chatRoute: needsSignIn(chat)
+    };
+}
+/** A route that forwards to Plaza as the person: nothing to forward without sign-in. */
+function needsSignIn(handler) {
+    return (request) => env().configured
+        ? handler(request)
+        : Promise.resolve(Response.json({ error: "Sign-in isn't configured for this app.", code: "auth_not_configured" }, { status: 503 }));
+}

package/dist/server/session.d.ts

@@ -0,0 +1,18 @@
+import { type MiiAuthCore, type MiiUser } from "@shubh90/app-runtime/auth/core";
+export type SessionUser = Pick<MiiUser, "id" | "name" | "email" | "avatarUrl" | "role">;
+export type SessionState = {
+    user: SessionUser | null;
+    mode: "public" | "members";
+};
+/** The session a request's cookie names, and whether the app is members-only. */
+export declare function readSession(auth: MiiAuthCore, request: Request): Promise<SessionState>;
+export type SignIn = {
+    ok: true;
+    token: string;
+    expiresAt: Date;
+} | {
+    ok: false;
+    message: string;
+};
+/** The login form's whole job: Plaza checks the password, the app starts a session. */
+export declare function signIn(auth: MiiAuthCore, email: string, password: string): Promise<SignIn>;

package/dist/server/session.js

@@ -0,0 +1,36 @@
+// Who is asking, as the app's door sees it, and signing in through Plaza.
+import { signInWithPlaza } from "@shubh90/app-runtime/auth/core";
+import { readCookie } from "@shubh90/app-runtime/chat/server";
+import { env } from "./env.js";
+/** The session a request's cookie names, and whether the app is members-only. */
+export async function readSession(auth, request) {
+    // No Plaza to sign in with: a bare local dev server has no door; any other
+    // server without its sign-in config keeps the door shut.
+    const { configured, local } = env();
+    if (!configured)
+        return { user: null, mode: local ? "public" : "members" };
+    const token = readCookie(request.headers.get("cookie"), auth.SESSION_COOKIE);
+    let found = null;
+    if (token !== null)
+        found = await auth.resolveSession(token);
+    // Plaza unreachable on a cold start throws: an error page, not a door that guesses.
+    const mode = await auth.getAuthMode();
+    if (found === null)
+        return { user: null, mode };
+    const { id, name, email, avatarUrl, role } = found;
+    return { user: { id, name, email, avatarUrl, role }, mode };
+}
+/** The login form's whole job: Plaza checks the password, the app starts a session. */
+export async function signIn(auth, email, password) {
+    if (!env().configured)
+        return { ok: false, message: "Sign-in is not configured." };
+    const result = await signInWithPlaza(email, password);
+    if (!result.ok)
+        return { ok: false, message: result.failure.message };
+    const member = await auth.upsertMemberFromIdentity(result.identity);
+    if (member.status !== "active") {
+        return { ok: false, message: "Your account is not active in this workspace." };
+    }
+    const session = await auth.issueSession(member.id, result.session);
+    return { ok: true, ...session };
+}

package/dist/vite.d.ts

@@ -0,0 +1,2 @@
+import type { Plugin } from "vite";
+export declare function lightDb(): Plugin;

package/dist/vite.js

@@ -0,0 +1,62 @@
+// The dev server half of "writing the schema file is the migration": each
+// time a file under db/schema changes (and when the server starts), it runs
+// `light-db sync`, which applies the change within a second or two. A sync
+// that fails (a migration the rows refuse) shows in the dev server's log and
+// the browser's error overlay; the agent hears it by running `pnpm db:sync`
+// itself after editing db/schema, as AGENTS.md says.
+import { spawn } from "node:child_process";
+import { join, relative, sep } from "node:path";
+/** Edits land as bursts of saves; one sync after the last. */
+const SETTLE_MS = 300;
+export function lightDb() {
+    return {
+        name: "light-db",
+        // The dev server only: never a build, never vitest's server.
+        apply: (_config, env) => env.command === "serve" && env.mode !== "test",
+        configureServer(server) {
+            const schemaDir = join(server.config.root, "db", "schema");
+            let timer;
+            server.watcher.add(schemaDir);
+            server.watcher.on("all", (_event, file) => {
+                const path = relative(schemaDir, file);
+                if (path === ".." || path.startsWith(`..${sep}`))
+                    return;
+                clearTimeout(timer);
+                // Overlapping syncs queue on the database's lock; this only skips the burst.
+                timer = setTimeout(() => void runSync(server), SETTLE_MS);
+            });
+            void runSync(server);
+        }
+    };
+}
+function runSync(server) {
+    const root = server.config.root;
+    const logger = server.config.logger;
+    return new Promise((resolve) => {
+        const child = spawn(join(root, "node_modules", ".bin", "light-db"), ["sync"], {
+            cwd: root,
+            env: process.env
+        });
+        let output = "";
+        child.stdout.on("data", (chunk) => (output += chunk));
+        child.stderr.on("data", (chunk) => (output += chunk));
+        child.on("error", (error) => {
+            output += error.message;
+        });
+        child.on("close", (code) => {
+            const text = output.trim();
+            if (code === 0) {
+                if (text !== "")
+                    logger.info(`[light-db] ${text}`, { timestamp: true });
+            }
+            else {
+                logger.error(`[light-db] ${text}`, { timestamp: true });
+                server.ws.send({
+                    type: "error",
+                    err: { message: text, stack: "", plugin: "light-db", id: "db/schema" }
+                });
+            }
+            resolve();
+        });
+    });
+}

package/package.json

@@ -0,0 +1,81 @@
+{
+  "name": "@trylight/app",
+  "version": "0.1.0",
+  "description": "The Light SDK every v2 org app depends on: entities (Drizzle tables with a typed client), sign-in, contracts and in-app chat.",
+  "license": "UNLICENSED",
+  "type": "module",
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/shubh9/mii.git",
+    "directory": "packages/light-app"
+  },
+  "files": [
+    "dist",
+    "bin"
+  ],
+  "bin": {
+    "light-db": "./bin/light-db.mjs"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/client.d.ts",
+      "default": "./dist/client.js"
+    },
+    "./schema": {
+      "types": "./dist/schema.d.ts",
+      "default": "./dist/schema.js"
+    },
+    "./server": {
+      "types": "./dist/server/index.d.ts",
+      "default": "./dist/server/index.js"
+    },
+    "./platform": {
+      "types": "./dist/platform.d.ts",
+      "default": "./dist/platform.js"
+    },
+    "./vite": {
+      "types": "./dist/vite.d.ts",
+      "default": "./dist/vite.js"
+    }
+  },
+  "peerDependencies": {
+    "@tanstack/react-query": ">=5.69",
+    "drizzle-orm": ">=0.45",
+    "postgres": ">=3",
+    "react": ">=19",
+    "react-dom": ">=19",
+    "vite": ">=7",
+    "zod": ">=4"
+  },
+  "dependencies": {
+    "@shubh90/app-runtime": "^0.10.3",
+    "drizzle-kit": "0.31.11",
+    "drizzle-zod": "^0.8.3",
+    "tsx": "^4.23.15"
+  },
+  "devDependencies": {
+    "@eslint-community/eslint-plugin-eslint-comments": "^4.8.1",
+    "@tanstack/react-query": "^5.104.0",
+    "@types/node": "^22.20.4",
+    "@types/react": "^19.3.0",
+    "drizzle-orm": "^0.45.3",
+    "eslint": "^10.11.0",
+    "postgres": "^3.4.9",
+    "react": "^19.3.0",
+    "react-dom": "^19.3.0",
+    "typescript": "~5.9.3",
+    "typescript-eslint": "^8.70.1",
+    "vite": "^8.2.0",
+    "zod": "^4.6.5"
+  },
+  "scripts": {
+    "build": "rm -rf dist && tsc -p tsconfig.build.json",
+    "typecheck": "tsc --noEmit",
+    "lint": "eslint src test --max-warnings 0",
+    "test": "node --test --import tsx \"test/**/*.test.ts\"",
+    "check": "pnpm run typecheck && pnpm run lint && pnpm run test && pnpm run build"
+  }
+}