@ultimat3/cli 22.0.0 → 22.1.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ultimat3/cli",
-  "version": "22.0.0",
+  "version": "22.1.0",
   "description": "The `x` binary: new, dev, build, verify, generate, db, mcp, doctor, deploy",
   "license": "MIT",
   "type": "module",
@@ -38,33 +38,33 @@
   },
   "dependencies": {
     "@babel/core": "^8.0.1",
-    "@ultimat3/action": "22.0.0",
-    "@ultimat3/admin": "22.0.0",
-    "@ultimat3/ai": "22.0.0",
-    "@ultimat3/auth": "22.0.0",
-    "@ultimat3/cache": "22.0.0",
-    "@ultimat3/core": "22.0.0",
-    "@ultimat3/db": "22.0.0",
-    "@ultimat3/entity": "22.0.0",
-    "@ultimat3/flags": "22.0.0",
-    "@ultimat3/http": "22.0.0",
-    "@ultimat3/i18n": "22.0.0",
-    "@ultimat3/jobs": "22.0.0",
-    "@ultimat3/mail": "22.0.0",
-    "@ultimat3/manifest": "22.0.0",
-    "@ultimat3/mcp": "22.0.0",
-    "@ultimat3/money": "22.0.0",
-    "@ultimat3/notify": "22.0.0",
-    "@ultimat3/policy": "22.0.0",
-    "@ultimat3/pwa": "22.0.0",
-    "@ultimat3/query": "22.0.0",
-    "@ultimat3/realtime": "22.0.0",
-    "@ultimat3/render": "22.0.0",
-    "@ultimat3/schema": "22.0.0",
-    "@ultimat3/seo": "22.0.0",
-    "@ultimat3/storage": "22.0.0",
-    "@ultimat3/testing": "22.0.0",
-    "@ultimat3/time": "22.0.0",
+    "@ultimat3/action": "22.1.0",
+    "@ultimat3/admin": "22.1.0",
+    "@ultimat3/ai": "22.1.0",
+    "@ultimat3/auth": "22.1.0",
+    "@ultimat3/cache": "22.1.0",
+    "@ultimat3/core": "22.1.0",
+    "@ultimat3/db": "22.1.0",
+    "@ultimat3/entity": "22.1.0",
+    "@ultimat3/flags": "22.1.0",
+    "@ultimat3/http": "22.1.0",
+    "@ultimat3/i18n": "22.1.0",
+    "@ultimat3/jobs": "22.1.0",
+    "@ultimat3/mail": "22.1.0",
+    "@ultimat3/manifest": "22.1.0",
+    "@ultimat3/mcp": "22.1.0",
+    "@ultimat3/money": "22.1.0",
+    "@ultimat3/notify": "22.1.0",
+    "@ultimat3/policy": "22.1.0",
+    "@ultimat3/pwa": "22.1.0",
+    "@ultimat3/query": "22.1.0",
+    "@ultimat3/realtime": "22.1.0",
+    "@ultimat3/render": "22.1.0",
+    "@ultimat3/schema": "22.1.0",
+    "@ultimat3/seo": "22.1.0",
+    "@ultimat3/storage": "22.1.0",
+    "@ultimat3/testing": "22.1.0",
+    "@ultimat3/time": "22.1.0",
     "babel-preset-solid": "^1.9.15"
   }
 }

package/src/mcp-ui.ts

@@ -95,6 +95,8 @@ export interface UiHostInput {
   readonly driver?: ((viewport: UiShotInput['viewport']) => Promise<ShotDriver>) | undefined;
   /** Injected by a test: the route table, in place of the registry. */
   readonly routes?: (() => readonly DeclaredRoute[]) | undefined;
+  /** Injected by a test: the settle wait, in place of `DEFAULT_SETTLE_MS` (a real sleep per call). */
+  readonly settleMs?: number | undefined;
 }
 
 export interface UiCapabilities {
@@ -163,7 +165,7 @@ export function uiCapabilities(input: UiHostInput): UiCapabilities {
         outDir,
         driver,
         boot,
-        settleMs: DEFAULT_SETTLE_MS,
+        settleMs: input.settleMs ?? DEFAULT_SETTLE_MS,
         timeoutMs: DEFAULT_PAGE_TIMEOUT_MS,
         fullPage: shot.fullPage,
         colorScheme: shot.colorScheme,
@@ -197,7 +199,7 @@ export function uiCapabilities(input: UiHostInput): UiCapabilities {
         root,
         island: island.island,
         ...(island.state === undefined ? {} : { state: island.state }),
-        settleMs: DEFAULT_SETTLE_MS,
+        settleMs: input.settleMs ?? DEFAULT_SETTLE_MS,
         timeoutMs: DEFAULT_PAGE_TIMEOUT_MS,
         ...(executablePath === undefined ? {} : { executablePath }),
         ...(cdpUrl === undefined ? {} : { cdpUrl }),

package/src/role-sync.ts

@@ -20,6 +20,7 @@ import { neighbouringPort, PORT_RANGE, portPairAfter } from './flag-number';
 import { portFree } from './port-probe';
 import type { StartRolesOptions } from './role-start';
 import { syncAuthenticator } from './sync-authenticator';
+import { syncOriginsFrom } from './sync-url';
 import { DEV_BINDING } from './web-binding';
 
 /**
@@ -201,6 +202,9 @@ export async function prepareSync(options: StartRolesOptions): Promise<PreparedS
     buildId: options.buildId,
     sockets,
     ...(authenticate === undefined ? {} : { authenticate }),
+    // The page's origin when it is served on another host than this node; the node's own host is
+    // admitted without it. Anything else is refused before `authenticate` (X_SOCKET_ORIGIN_REFUSED).
+    allowedOrigins: syncOriginsFrom(options.env),
     // Tier 1 is presence, and without a registry the node answers a topic subscribe with no member
     // list at all — the KV bucket the transport just created would hold nothing and every `sync`
     // container would run a presence-less protocol. It reads and writes `transport.shared`, so it

package/src/sync-url.ts

@@ -1,5 +1,6 @@
 // Where a page's one socket dials — the framework's answer, so no app owns a `sync-url.ts`. Read
-// once at boot from the deployment's env and handed to every document as `ultimate-sync`.
+// once at boot from the deployment's env and handed to every document as `ultimate-sync` — and
+// the page origin the node admits, which is the same question asked from the other end.
 
 import { ConfigInvalidError } from '@ultimat3/core';
 
@@ -29,3 +30,22 @@ export function syncUrlFrom(env: Readonly<Record<string, string | undefined>>):
   }
   return declared;
 }
+
+/**
+ * The page origins a sync node admits besides its own host name: `APP_URL`'s, when set. Only a
+ * deployment that serves the page on another host than the node needs it; an unparsable value is
+ * refused rather than read as "no page origin", which would refuse every socket in silence.
+ */
+export function syncOriginsFrom(env: Readonly<Record<string, string | undefined>>): string[] {
+  const declared = env['APP_URL']?.trim() ?? '';
+  if (declared === '') return [];
+  const parsed = URL.parse(declared);
+  if (parsed === null || (parsed.protocol !== 'http:' && parsed.protocol !== 'https:')) {
+    throw new ConfigInvalidError({
+      cause: 'APP_URL is set but is not an http:// or https:// URL, so no page origin can match it',
+      fix: 'export APP_URL="https://www.example.com"   # the origin your pages are served on',
+      meta: { key: 'APP_URL' },
+    });
+  }
+  return [parsed.origin];
+}

package/src/templates/scaffold-container-compose.ts

@@ -138,7 +138,7 @@ services:
     # (X_REALTIME_TOPOLOGY). To turn live queries and channels on: declare realtime: { enabled:
     # true, transport: 'nats', urlEnv: 'NATS_URL' } in app.config.ts, add a NATS service and set the
     # SAME NATS_URL for web, sync and a replicator service (ROLE=replicator, exactly one), start
-    # Postgres with wal_level=logical and a publication for the entity tables, then set replicas: 1.
+    # Postgres with wal_level=logical and a REPLICATION role on a cluster dedicated to this app (the replicator creates its publication at boot), then set replicas: 1.
     # A NATS_URL under transport 'memory' refuses the boot (X_CONFIG_INVALID), and so does 'nats'
     # without one.
     deploy: { replicas: 0 } # when on: scales on concurrent websockets — pinned to 1 by the port

package/src/templates/scaffold-env.ts

@@ -29,6 +29,12 @@ export const SCAFFOLD_ENV_SCHEMA = {
     role: 'sync',
     description: 'Realtime fan-out cluster. Only the sync role is asked for it.',
   },
+  APP_URL: {
+    type: 'url',
+    required: false,
+    role: ['web', 'sync'],
+    description: 'Public origin of the pages. Sync admits sockets from it.',
+  },
   SYNC_URL: {
     type: 'string',
     required: false,

package/src/templates/scaffold-helm.ts

@@ -95,7 +95,7 @@ roles:
     # urlEnv: 'NATS_URL' } in app.config.ts (a NATS_URL under transport 'memory' is refused, and
     # 'nats' without it is too); run NATS and set the SAME NATS_URL for web, sync and the
     # replicator; enable exactly one replicator (below) against a Postgres started with
-    # wal_level=logical and a publication for the entity tables; then set this to true.
+    # wal_level=logical (the replicator creates its publication at boot) and a role with REPLICATION on a cluster dedicated to this app; then set this to true.
     enabled: false
     replicas: 2
     port: 3001