create-astram-app 0.12.4 → 0.12.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-astram-app",
-  "version": "0.12.4",
+  "version": "0.12.6",
   "license": "MIT",
   "description": "Scaffolder for a new Astram app — emits a running, framework-enforced NestJS server (deny-by-default, built-in auth/identity to switch on) and, with --with-frontend, a React admin/auth UI, over the immutable @astram/* framework packages.",
   "type": "module",

package/template/server/_env.example

@@ -33,6 +33,16 @@ NODE_ENV=development
 # POOL_MAX_SCHEMA_SVC=5
 # Engine pool (identity/RecordEngine). Unset ⇒ APP_DB_MAX_CONNECTIONS, else 10; set it explicitly.
 # POOL_MAX_ENGINE=10
+# The budget also counts 1 connection per worker for the audit sealer's own pool (auth on).
+# The POOL_MAX_* values are caps: a pool grows to its cap under load and, once idle, shrinks
+# back to POOL_MIN_IDLE after POOL_IDLE_TIMEOUT_S. These apply to every framework pool.
+# POOL_MIN_IDLE=1
+# POOL_IDLE_TIMEOUT_S=600
+# Optional: abort any statement running longer than this (ms, 1000–3600000; off when unset).
+# The framework's own lock waits and the audit sealer are exempt.
+# APP_DB_QUERY_TIMEOUT_MS=30000
+# Optional: log a connection checked out longer than this (ms, 1000–600000; off when unset).
+# POOL_LEAK_DETECTION_MS=60000
 
 # --- OPTIONAL: real authentication (only if you set ShieldModule.forRoot({ auth: true })) ---
 # Auth needs a live MariaDB + Redis and a refresh-token HMAC key. These are

package/template/server/package.json

@@ -22,11 +22,11 @@
   },
   "dependencies": {
     "@astram/core": "1.12.0",
-    "@astram/engine": "0.14.0",
-    "@astram/guard": "0.21.0",
+    "@astram/engine": "0.15.0",
+    "@astram/guard": "0.22.0",
     "@astram/guide": "^0.2.8",
-    "@astram/identity": "0.18.0",
-    "@astram/messaging": "0.1.6",
+    "@astram/identity": "0.18.2",
+    "@astram/messaging": "0.1.7",
     "@astram/migrate": "0.7.2",
     "@astram/sdk": "^0.2.0",
     "@nestjs/common": "^11.2.7",

package/template/server/src/main.ts

@@ -23,6 +23,11 @@ export async function bootstrap(): Promise<void> {
   const { AppModule } = await import('./app.module');
   const config = loadAppConfig();
   const app = await NestFactory.create<NestExpressApplication>(AppModule, { bufferLogs: false });
+  // On SIGTERM/SIGINT (PM2 restart, deploy) run the framework's shutdown hooks: background jobs
+  // stop, the HTTP server finishes its in-flight requests, then every DB pool and Redis client
+  // closes. Without this line Node exits with no hook run. Give your process manager a stop
+  // timeout above the shutdown time (PM2 `kill_timeout`, e.g. 5000 ms; its default is 1600 ms).
+  app.enableShutdownHooks();
   // TRUST_PROXY = the number of reverse-proxy hops in front of this app: 0 = no proxy
   // (exposed directly), 1 = behind the Astram Traefik. It must be your REAL hop count:
   // too high and a client can spoof its IP via X-Forwarded-For; too low and every client