create-ampless 1.0.0-alpha.39 → 1.0.0-alpha.41

package/dist/templates/_shared/README.ja.md

@@ -65,7 +65,8 @@ npm run sandbox
 投稿（Post）が唯一のコンテンツタイプです。各投稿には以下があります:
 
 - **Format** — `tiptap`（リッチテキスト）/ `markdown` / `html`（生 HTML、サニタイズなし）/ `static`（HTML/CSS/JS の zip アップロード）
-- **No layout** フラグ（`format: 'html'` のときのみ）— 本文をそのまま出力し、Next.js のレイアウトもテーマのクロームも適用しない。URL は `/<slug>` のままで、ルートが `/_/<slug>` にリダイレクトする
+- **No layout** フラグ（`format: 'html'` のときのみ）— 本文をそのまま出力し、Next.js のレイアウトもテーマのクロームも適用しない。URL は `/<slug>` のままで、middleware がリクエストを内部のベア HTML ハンドラーに書き換える
+- **キャッシュ戦略**（`metadata.cache`）— 投稿ごとに `Cache-Control` を上書き: `'auto'`（デフォルト、編集時刻ベースのクールダウン）、`'deep'`（常に長期キャッシュ）、`'hot'`（常に no-store）。詳細は `docs/CONTENT.ja.md`
 - **Slug** — 公開 URL
 - **Status** — `draft`（管理者のみ）または `published`
 

package/dist/templates/_shared/README.md

@@ -65,7 +65,8 @@ Promotion/demotion is done in the AWS Cognito console — see [RUNBOOK.md → Pr
 Posts are the single content type. Each post has:
 
 - **Format** — `tiptap` (rich text) / `markdown` / `html` (raw, no sanitization) / `static` (zip-upload of HTML/CSS/JS)
-- **No layout** flag (`format: 'html'` only) — render the body verbatim with no Next.js layout and no theme chrome. URL stays `/<slug>`; the route redirects to `/_/<slug>`.
+- **No layout** flag (`format: 'html'` only) — render the body verbatim with no Next.js layout and no theme chrome. URL stays `/<slug>`; middleware rewrites the request to the internal bare-HTML handler.
+- **Cache strategy** (`metadata.cache`) — override the per-post Cache-Control: `'auto'` (default; cooldown by edit time), `'deep'` (always long-cache), or `'hot'` (always no-store). See `docs/CONTENT.md` for details.
 - **Slug** — the public URL
 - **Status** — `draft` (admin only) or `published`
 

package/dist/templates/_shared/app/{site/[siteId]/r → r}/[slug]/[[...path]]/route.ts

@@ -1,17 +1,18 @@
 import { ampless } from '@/lib/ampless'
 import { createUnderscoreRouteHandler } from '@ampless/runtime/routes'
 
-// Unified handler for the public `/_/<slug>(/...)` URL family.
-// Covers two cases that both bypass the theme's post page:
+// Internal handler for no_layout HTML and static-bundle posts. Reached
+// via middleware rewrite from `/<slug>(/<path>)` — never directly.
+// Covers two cases that both bypass the themed post page:
 //
 //  - `format: 'html'` posts with `metadata.no_layout === true`
 //    → bare HTML response, no Next.js root layout, no theme chrome
 //  - `format: 'static'` posts
 //    → S3 presigned URL redirect for the entrypoint and every bundle file
 //
-// File location uses the literal folder name `r/` (not `_/`) because
-// Next.js's App Router excludes any path part starting with `_` from
-// route discovery. The middleware rewrites the public `/_/` prefix
-// to `/r/` internally; the browser URL stays `/_/<slug>(/...)`.
+// The literal folder is `r/` (not `_/` etc.) because Next.js's App
+// Router excludes any path part starting with `_` from route
+// discovery. The browser URL stays `/<slug>(/<path>)` throughout —
+// middleware does the public→internal translation.
 export const dynamic = 'force-dynamic'
 export const GET = createUnderscoreRouteHandler(ampless)

package/dist/templates/_shared/package.json

@@ -22,15 +22,15 @@
     "@tiptap/pm": "^3.23.4",
     "@tiptap/react": "^3.23.4",
     "@tiptap/starter-kit": "^3.23.4",
-    "@ampless/plugin-og-image": "^0.2.0-alpha.9",
-    "@ampless/plugin-rss": "^0.2.0-alpha.9",
-    "@ampless/plugin-seo": "^0.2.0-alpha.9",
-    "@ampless/plugin-webhook": "^0.2.0-alpha.9",
-    "@ampless/admin": "^1.0.0-alpha.26",
-    "@ampless/backend": "^1.0.0-alpha.19",
-    "@ampless/runtime": "^1.0.0-alpha.13",
+    "@ampless/plugin-og-image": "^0.2.0-alpha.10",
+    "@ampless/plugin-rss": "^0.2.0-alpha.10",
+    "@ampless/plugin-seo": "^0.2.0-alpha.10",
+    "@ampless/plugin-webhook": "^0.2.0-alpha.10",
+    "@ampless/admin": "^1.0.0-alpha.27",
+    "@ampless/backend": "^1.0.0-alpha.20",
+    "@ampless/runtime": "^1.0.0-alpha.14",
     "@digital-go-jp/tailwind-theme-plugin": "^0.3.4",
-    "ampless": "^1.0.0-alpha.9",
+    "ampless": "^1.0.0-alpha.10",
     "aws-amplify": "^6.10.0",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",

package/dist/templates/_shared/proxy.ts

@@ -1,18 +1,32 @@
 // Public-site proxy (Next.js 16 rename of "middleware"). Implementation
 // moved to `@ampless/runtime` (L1 extraction); this file wires the
-// project's `cms.config` into the factory and re-exports the default
-// matcher. The runtime export name is still `createAmplessMiddleware`
-// for API stability; only the user-side file convention (proxy.ts +
-// `export const proxy`) follows Next 16's rename.
+// project's `cms.config` + AppSync endpoint into the factory and
+// re-exports the default matcher. The runtime export name is still
+// `createAmplessMiddleware` for API stability; only the user-side
+// file convention (proxy.ts + `export const proxy`) follows Next 16's
+// rename.
 //
-// See `@ampless/runtime/middleware` for behaviour details:
-// `/path` → `/site/default/path` rewrite, `?previewTheme=` header
-// forwarding.
+// See `@ampless/runtime/middleware` for behaviour details: AppSync
+// flag fetch + Lambda-memory LRU + `/r/<slug>(/<path>)` rewrite for
+// no_layout HTML / static bundles + per-post Cache-Control.
 
 import cmsConfig from './cms.config'
+import outputs from './amplify_outputs.json'
 import { createAmplessMiddleware } from '@ampless/runtime/middleware'
 
-export const proxy = createAmplessMiddleware({ cmsConfig })
+// `amplify_outputs.json` is generated by `npx ampx sandbox` /
+// `npx ampx pipeline-deploy` — the public API key has a 365-day TTL
+// and is rotated monthly by the api-key-renewer Lambda. See
+// RUNBOOK.md §"API key rotation".
+export const proxy = createAmplessMiddleware({
+  cmsConfig,
+  appsyncUrl: outputs.data.url,
+  // The public API key is always present in production deploys (the
+  // backend declares `apiKeyAuthorizationMode`). The non-null assertion
+  // is honest about the assumption; `ampx sandbox` will surface a clear
+  // error long before middleware ever runs if it ever isn't.
+  apiKey: outputs.data.api_key!,
+})
 
 // Next.js 16's Turbopack requires `config` to be a statically
 // analysable object literal — referencing an imported variable

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-ampless",
-  "version": "1.0.0-alpha.39",
+  "version": "1.0.0-alpha.41",
   "description": "Create a new ampless project",
   "license": "MIT",
   "type": "module",