create-ampless 1.0.0-alpha.39 → 1.0.0-alpha.42

package/dist/index.js

@@ -1747,6 +1747,11 @@ var AMPLESS_MANAGED_APP_PATHS = [
   "app/login",
   "app/site"
 ];
+var AMPLESS_RETIRED_PATHS = [
+  // Retired in alpha.20+ along with the in-deploy multi-site drop (PR #93).
+  "lib/admin-site.ts",
+  "lib/admin-site-client.ts"
+];
 var AMPLESS_PACKAGES = /* @__PURE__ */ new Set([
   "ampless",
   "@ampless/admin",
@@ -1898,7 +1903,7 @@ async function pruneEmptyDirs(root) {
     await rm2(root, { recursive: true, force: true });
   }
 }
-async function findObsoleteAppFiles(destDir, sharedDir) {
+async function findObsoleteFiles(destDir, sharedDir) {
   const obsolete = [];
   for (const managedPath of AMPLESS_MANAGED_APP_PATHS) {
     const userPath = join3(destDir, managedPath);
@@ -1912,9 +1917,15 @@ async function findObsoleteAppFiles(destDir, sharedDir) {
       }
     }
   }
+  for (const retiredPath of AMPLESS_RETIRED_PATHS) {
+    const userFile = join3(destDir, retiredPath);
+    if (existsSync5(userFile)) {
+      obsolete.push(retiredPath);
+    }
+  }
   return obsolete;
 }
-async function removeObsoleteAppFiles(destDir, paths) {
+async function removeObsoleteFiles(destDir, paths) {
   for (const rel of paths) {
     const abs = join3(destDir, rel);
     if (existsSync5(abs)) {
@@ -1978,7 +1989,7 @@ async function runUpgradeIn(destDir, sharedDir, opts = {}) {
   const shippedThemes = themeSyncEnabled ? await listShippedThemes(templatesRoot) : [];
   const existingThemes = themeSyncEnabled ? await discoverInstalledThemes(destDir) : [];
   const preservedThemes = existingThemes.filter((t) => !shippedThemes.includes(t));
-  const obsoleteFiles = await findObsoleteAppFiles(destDir, sharedDir);
+  const obsoleteFiles = await findObsoleteFiles(destDir, sharedDir);
   log3.info(
     `replace: ${pc3.green(`${replaceNew.length} added`)} / ${pc3.yellow(`${replaceUpdate.length} updated`)}`
   );
@@ -2020,7 +2031,7 @@ async function runUpgradeIn(destDir, sharedDir, opts = {}) {
     await copyWithSubstitution(src, dst, vars);
   }
   const themeResult = themeSyncEnabled ? await syncThemes(destDir, templatesRoot) : { synced: [], preserved: [] };
-  await removeObsoleteAppFiles(destDir, obsoleteFiles);
+  await removeObsoleteFiles(destDir, obsoleteFiles);
   const templatePkgRaw = await readFile3(join3(sharedDir, "package.json"), "utf-8");
   const templatePkg = JSON.parse(templatePkgRaw);
   const indent = detectIndent(projectPkgRaw);

package/dist/templates/_shared/README.ja.md

@@ -65,7 +65,8 @@ npm run sandbox
 投稿（Post）が唯一のコンテンツタイプです。各投稿には以下があります:
 
 - **Format** — `tiptap`（リッチテキスト）/ `markdown` / `html`（生 HTML、サニタイズなし）/ `static`（HTML/CSS/JS の zip アップロード）
-- **No layout** フラグ（`format: 'html'` のときのみ）— 本文をそのまま出力し、Next.js のレイアウトもテーマのクロームも適用しない。URL は `/<slug>` のままで、ルートが `/_/<slug>` にリダイレクトする
+- **No layout** フラグ（`format: 'html'` のときのみ）— 本文をそのまま出力し、Next.js のレイアウトもテーマのクロームも適用しない。URL は `/<slug>` のままで、middleware がリクエストを内部のベア HTML ハンドラーに書き換える
+- **キャッシュ戦略**（`metadata.cache`）— 投稿ごとに `Cache-Control` を上書き: `'auto'`（デフォルト、編集時刻ベースのクールダウン）、`'deep'`（常に長期キャッシュ）、`'hot'`（常に no-store）。詳細は `docs/CONTENT.ja.md`
 - **Slug** — 公開 URL
 - **Status** — `draft`（管理者のみ）または `published`
 

package/dist/templates/_shared/README.md

@@ -65,7 +65,8 @@ Promotion/demotion is done in the AWS Cognito console — see [RUNBOOK.md → Pr
 Posts are the single content type. Each post has:
 
 - **Format** — `tiptap` (rich text) / `markdown` / `html` (raw, no sanitization) / `static` (zip-upload of HTML/CSS/JS)
-- **No layout** flag (`format: 'html'` only) — render the body verbatim with no Next.js layout and no theme chrome. URL stays `/<slug>`; the route redirects to `/_/<slug>`.
+- **No layout** flag (`format: 'html'` only) — render the body verbatim with no Next.js layout and no theme chrome. URL stays `/<slug>`; middleware rewrites the request to the internal bare-HTML handler.
+- **Cache strategy** (`metadata.cache`) — override the per-post Cache-Control: `'auto'` (default; cooldown by edit time), `'deep'` (always long-cache), or `'hot'` (always no-store). See `docs/CONTENT.md` for details.
 - **Slug** — the public URL
 - **Status** — `draft` (admin only) or `published`
 

package/dist/templates/_shared/app/{site/[siteId]/r → r}/[slug]/[[...path]]/route.ts

@@ -1,17 +1,18 @@
 import { ampless } from '@/lib/ampless'
 import { createUnderscoreRouteHandler } from '@ampless/runtime/routes'
 
-// Unified handler for the public `/_/<slug>(/...)` URL family.
-// Covers two cases that both bypass the theme's post page:
+// Internal handler for no_layout HTML and static-bundle posts. Reached
+// via middleware rewrite from `/<slug>(/<path>)` — never directly.
+// Covers two cases that both bypass the themed post page:
 //
 //  - `format: 'html'` posts with `metadata.no_layout === true`
 //    → bare HTML response, no Next.js root layout, no theme chrome
 //  - `format: 'static'` posts
 //    → S3 presigned URL redirect for the entrypoint and every bundle file
 //
-// File location uses the literal folder name `r/` (not `_/`) because
-// Next.js's App Router excludes any path part starting with `_` from
-// route discovery. The middleware rewrites the public `/_/` prefix
-// to `/r/` internally; the browser URL stays `/_/<slug>(/...)`.
+// The literal folder is `r/` (not `_/` etc.) because Next.js's App
+// Router excludes any path part starting with `_` from route
+// discovery. The browser URL stays `/<slug>(/<path>)` throughout —
+// middleware does the public→internal translation.
 export const dynamic = 'force-dynamic'
 export const GET = createUnderscoreRouteHandler(ampless)

package/dist/templates/_shared/package.json

@@ -22,15 +22,15 @@
     "@tiptap/pm": "^3.23.4",
     "@tiptap/react": "^3.23.4",
     "@tiptap/starter-kit": "^3.23.4",
-    "@ampless/plugin-og-image": "^0.2.0-alpha.9",
-    "@ampless/plugin-rss": "^0.2.0-alpha.9",
-    "@ampless/plugin-seo": "^0.2.0-alpha.9",
-    "@ampless/plugin-webhook": "^0.2.0-alpha.9",
-    "@ampless/admin": "^1.0.0-alpha.26",
-    "@ampless/backend": "^1.0.0-alpha.19",
-    "@ampless/runtime": "^1.0.0-alpha.13",
+    "@ampless/plugin-og-image": "^0.2.0-alpha.10",
+    "@ampless/plugin-rss": "^0.2.0-alpha.10",
+    "@ampless/plugin-seo": "^0.2.0-alpha.10",
+    "@ampless/plugin-webhook": "^0.2.0-alpha.10",
+    "@ampless/admin": "^1.0.0-alpha.27",
+    "@ampless/backend": "^1.0.0-alpha.20",
+    "@ampless/runtime": "^1.0.0-alpha.14",
     "@digital-go-jp/tailwind-theme-plugin": "^0.3.4",
-    "ampless": "^1.0.0-alpha.9",
+    "ampless": "^1.0.0-alpha.10",
     "aws-amplify": "^6.10.0",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",

package/dist/templates/_shared/proxy.ts

@@ -1,18 +1,32 @@
 // Public-site proxy (Next.js 16 rename of "middleware"). Implementation
 // moved to `@ampless/runtime` (L1 extraction); this file wires the
-// project's `cms.config` into the factory and re-exports the default
-// matcher. The runtime export name is still `createAmplessMiddleware`
-// for API stability; only the user-side file convention (proxy.ts +
-// `export const proxy`) follows Next 16's rename.
+// project's `cms.config` + AppSync endpoint into the factory and
+// re-exports the default matcher. The runtime export name is still
+// `createAmplessMiddleware` for API stability; only the user-side
+// file convention (proxy.ts + `export const proxy`) follows Next 16's
+// rename.
 //
-// See `@ampless/runtime/middleware` for behaviour details:
-// `/path` → `/site/default/path` rewrite, `?previewTheme=` header
-// forwarding.
+// See `@ampless/runtime/middleware` for behaviour details: AppSync
+// flag fetch + Lambda-memory LRU + `/r/<slug>(/<path>)` rewrite for
+// no_layout HTML / static bundles + per-post Cache-Control.
 
 import cmsConfig from './cms.config'
+import outputs from './amplify_outputs.json'
 import { createAmplessMiddleware } from '@ampless/runtime/middleware'
 
-export const proxy = createAmplessMiddleware({ cmsConfig })
+// `amplify_outputs.json` is generated by `npx ampx sandbox` /
+// `npx ampx pipeline-deploy` — the public API key has a 365-day TTL
+// and is rotated monthly by the api-key-renewer Lambda. See
+// RUNBOOK.md §"API key rotation".
+export const proxy = createAmplessMiddleware({
+  cmsConfig,
+  appsyncUrl: outputs.data.url,
+  // The public API key is always present in production deploys (the
+  // backend declares `apiKeyAuthorizationMode`). The non-null assertion
+  // is honest about the assumption; `ampx sandbox` will surface a clear
+  // error long before middleware ever runs if it ever isn't.
+  apiKey: outputs.data.api_key!,
+})
 
 // Next.js 16's Turbopack requires `config` to be a statically
 // analysable object literal — referencing an imported variable

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-ampless",
-  "version": "1.0.0-alpha.39",
+  "version": "1.0.0-alpha.42",
   "description": "Create a new ampless project",
   "license": "MIT",
   "type": "module",