create-flowdular 0.1.0

package/template/default/platform/octane.config.ts

@@ -0,0 +1,117 @@
+import {
+	assertRouteConflicts,
+	createModuleWebRoutes,
+} from '@flowdular/sdk/server';
+import { resolve } from 'node:path';
+import { defineConfig, RenderRoute } from '@octanejs/vite-plugin';
+import {
+	authRuntimeOptionsFromEnvironment,
+	createAuthRoutes,
+	principalFromContext,
+	createAuthRuntime,
+	createPlatformAgentRegistry,
+	createPlatformCapabilityRegistry,
+	createPlatformToolRegistry,
+} from '@flowdular/sdk/modules/auth/server';
+import {
+	composeModuleServer,
+	moduleWebMounts,
+} from './src/generated/modules.server.ts';
+import {
+	createPlatformDatabaseProvider,
+	databaseProviderConfigFromEnvironment,
+} from './src/server/database.ts';
+
+function checkedRoutes<T extends Parameters<typeof assertRouteConflicts>[0]>(
+	routes: T,
+): T {
+	assertRouteConflicts(routes);
+	return routes;
+}
+
+const SHELL = ['App', '/src/App.tsrx'] as const;
+const workspaceRoot = resolve(import.meta.dirname, '..');
+
+const databases = createPlatformDatabaseProvider(
+	databaseProviderConfigFromEnvironment(process.env, workspaceRoot),
+);
+const authRuntime = createAuthRuntime({
+	...authRuntimeOptionsFromEnvironment(process.env, workspaceRoot),
+	databases,
+});
+
+/* Module APIs come from the generated composition. Enable or disable modules
+   with "pnpm flowdular module enable <id> --apply"; never wire them here by hand. */
+const settings = authRuntime.moduleSettings;
+const agentDefinitions = createPlatformAgentRegistry();
+const moduleCompositions = composeModuleServer({
+	environment: process.env,
+	workspaceRoot,
+	auth: authRuntime,
+	settings,
+	agentTools: createPlatformToolRegistry(),
+	agentDefinitions,
+	capabilities: createPlatformCapabilityRegistry(),
+	databases,
+});
+for (const composition of moduleCompositions) {
+	if (composition.settings) settings.declare(composition.settings);
+}
+agentDefinitions.seal();
+
+/* check() proves the runtime role holds neither SUPERUSER nor BYPASSRLS before
+   any module reads a row. */
+await databases.check();
+for (const composition of moduleCompositions) await composition.prepare?.();
+for (const composition of moduleCompositions) composition.start?.();
+
+let stopping = false;
+const shutdown = async () => {
+	if (stopping) return;
+	stopping = true;
+	for (const composition of moduleCompositions) {
+		await composition.stop?.();
+		await composition.dispose?.();
+	}
+	await authRuntime.dispose();
+	await databases.dispose();
+};
+process.once('SIGINT', () => void shutdown());
+process.once('SIGTERM', () => void shutdown());
+
+export default defineConfig({
+	middlewares: [authRuntime.middleware],
+	router: {
+		routes: checkedRoutes([
+			new RenderRoute({ path: '/', entry: SHELL }),
+			new RenderRoute({ path: '/auth', entry: SHELL }),
+			new RenderRoute({ path: '/auth/login', entry: SHELL }),
+			new RenderRoute({ path: '/auth/register', entry: SHELL }),
+			new RenderRoute({ path: '/auth/forgot-password', entry: SHELL }),
+			new RenderRoute({ path: '/auth/reset-password', entry: SHELL }),
+			new RenderRoute({ path: '/auth/accept-invitation', entry: SHELL }),
+			new RenderRoute({ path: '/auth/mfa', entry: SHELL }),
+			new RenderRoute({ path: '/app', entry: SHELL }),
+			new RenderRoute({ path: '/app/:workspace', entry: SHELL }),
+			new RenderRoute({ path: '/app/:workspace/:view', entry: SHELL }),
+			...createAuthRoutes(authRuntime),
+			...moduleCompositions.flatMap((composition) => composition.routes),
+			...createModuleWebRoutes({
+				modules: moduleCompositions,
+				mounts: moduleWebMounts,
+				resolveIdentity: (context) => {
+					const principal = principalFromContext(context);
+					return principal
+						? {
+								subjectId: principal.accountId,
+								tenantId: principal.tenantId,
+								permissions: new Set(principal.scopes),
+							}
+						: null;
+				},
+			}),
+			new RenderRoute({ path: '/:workspace', entry: SHELL }),
+			new RenderRoute({ path: '/:workspace/:view', entry: SHELL }),
+		]),
+	},
+});

package/template/default/platform/package.json

@@ -0,0 +1,27 @@
+{
+	"name": "@app/platform",
+	"version": "0.1.0",
+	"private": true,
+	"type": "module",
+	"scripts": {
+		"dev": "node scripts/dev.mjs",
+		"preview": "octane-preview --host 127.0.0.1 --port 4310 --strictPort",
+		"typecheck": "tsrx-tsc --noEmit -p tsconfig.json"
+	},
+	"dependencies": {
+		"@app/module-example": "workspace:*",
+		"@octanejs/seo": "0.0.38",
+		"@octanejs/vite-plugin": "0.1.51",
+		"octane": "0.1.51",
+		"pg": "8.23.0",
+		"@flowdular/sdk": "0.1.0"
+	},
+	"devDependencies": {
+		"@octanejs/app-core": "0.0.47",
+		"@tsrx/typescript-plugin": "0.3.120",
+		"@types/node": "24.13.3",
+		"@types/pg": "8.23.1",
+		"typescript": "5.9.3",
+		"vite": "8.2.2"
+	}
+}

package/template/default/platform/public/favicon.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><rect width="24" height="24" rx="5.4" fill="#2557D6"/><g transform="translate(12 12) scale(0.64) translate(-12 -12)"><circle cx="7.9" cy="3.4" r="1.7" fill="#fff"/><rect x="6.2" y="3.4" width="3.4" height="1.6" fill="#fff"/><rect x="6.2" y="10.8" width="3.4" height="9.8" fill="#fff"/><circle cx="7.9" cy="20.6" r="1.7" fill="#fff"/><circle cx="16.1" cy="3.4" r="1.7" fill="#fff"/><rect x="14.4" y="3.4" width="3.4" height="9.8" fill="#fff"/><rect x="14.4" y="19" width="3.4" height="1.6" fill="#fff"/><circle cx="16.1" cy="20.6" r="1.7" fill="#fff"/><circle cx="3.4" cy="7.9" r="1.7" fill="#fff"/><rect x="3.4" y="6.2" width="9.8" height="3.4" fill="#fff"/><rect x="19" y="6.2" width="1.6" height="3.4" fill="#fff"/><circle cx="20.6" cy="7.9" r="1.7" fill="#fff"/><circle cx="3.4" cy="16.1" r="1.7" fill="#fff"/><rect x="3.4" y="14.4" width="1.6" height="3.4" fill="#fff"/><rect x="10.8" y="14.4" width="9.8" height="3.4" fill="#fff"/><circle cx="20.6" cy="16.1" r="1.7" fill="#fff"/></g></svg>

package/template/default/platform/scripts/dev.mjs

@@ -0,0 +1,18 @@
+import { resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { createServer } from 'vite';
+
+const appRoot = resolve(fileURLToPath(new URL('..', import.meta.url)));
+
+const server = await createServer({
+	root: appRoot,
+	configFile: resolve(appRoot, 'vite.config.ts'),
+});
+await server.listen();
+server.printUrls();
+
+/* Closing without exiting lets octane.config.ts release the database on the
+   same signal; the process ends once both have drained. */
+const stop = () => void server.close();
+process.once('SIGINT', stop);
+process.once('SIGTERM', stop);

package/template/default/platform/src/App.tsrx

@@ -0,0 +1,80 @@
+import { configureApplicationRouting } from '@flowdular/sdk/client/routing';
+import {
+	ApplicationShell,
+	activeLocale,
+	shellLocationFromUrl,
+	t,
+} from '@flowdular/sdk/client';
+import {
+	AuthenticationCore,
+	authScreenFromUrl,
+} from '@flowdular/sdk/modules/auth/client';
+import type { AuthPrincipal } from '@flowdular/sdk/modules/auth';
+import { Head } from '@octanejs/seo';
+import type { RenderRouteProps } from '@octanejs/vite-plugin';
+import { createModuleClientContributions, applicationBasePath } from './generated/modules.client.ts';
+import './styles.css';
+
+configureApplicationRouting(applicationBasePath);
+
+interface AuthenticatedAppProps {
+	initialUrl: string;
+	principal: AuthPrincipal;
+	csrfToken: string;
+	signOut: () => Promise<void>;
+	switchTenant: (tenantId: string) => Promise<void>;
+}
+
+function AuthenticatedApp(props: AuthenticatedAppProps) @{
+	const canAccessWorkspace = props.principal.scopes.includes(
+		'system.workspace.access',
+	);
+	<div>
+		@if (canAccessWorkspace) {
+			<ApplicationShell
+				initialView={shellLocationFromUrl(
+					props.initialUrl,
+					props.principal.tenants.map((tenant) => tenant.slug),
+				).view}
+				contributions={createModuleClientContributions({
+					csrfToken: props.csrfToken,
+					scopes: props.principal.scopes,
+					locale: activeLocale(),
+					t,
+				})}
+				identity={props.principal}
+				onSignOut={props.signOut}
+				onSwitchTenant={props.switchTenant}
+			/>
+		} @else {
+			<main class="access-denied">
+				<span>403</span>
+				<h1>{t('shell.accessDenied.title')}</h1>
+				<p>{t('shell.accessDenied.description')}</p>
+				<button
+					class="ui-btn ui-btn--primary"
+					type="button"
+					onClick={() => void props.signOut()}
+				>{t('shell.account.signOut')}</button>
+			</main>
+		}
+	</div>
+}
+
+export function App(props?: RenderRouteProps) @{
+	const initialUrl =
+		props?.url ?? (typeof window === 'undefined' ? '/' : window.location.href);
+	<Head>
+		<AuthenticationCore
+			initialScreen={authScreenFromUrl(initialUrl)}
+			renderAuthenticated={(principal, controls) =>
+				<AuthenticatedApp
+					initialUrl={initialUrl}
+					principal={principal}
+					csrfToken={controls.csrfToken}
+					signOut={controls.signOut}
+					switchTenant={controls.switchTenant}
+				/>}
+		/>
+	</Head>
+}

package/template/default/platform/src/generated/modules.client.ts

@@ -0,0 +1,15 @@
+/* GENERATED by "flowdular module sync". Do not edit by hand; run
+   "pnpm flowdular module sync --apply" after enabling or disabling modules. */
+import type {
+	ModuleClientContext,
+	ModuleClientContribution,
+} from '@flowdular/sdk/client';
+import { createClientContribution as system_core } from '@flowdular/sdk/modules/system/client';
+import { createClientContribution as auth_core } from '@flowdular/sdk/modules/auth/client';
+import { createClientContribution as example_core } from '@app/module-example/client';
+
+export function createModuleClientContributions(
+	context: ModuleClientContext,
+): readonly ModuleClientContribution[] {
+	return [system_core(context), auth_core(context), example_core(context)];
+}

package/template/default/platform/src/generated/modules.server.ts

@@ -0,0 +1,31 @@
+/* GENERATED by "flowdular module sync". Do not edit by hand; run
+   "pnpm flowdular module sync --apply" after enabling or disabling modules. */
+import type {
+	PlatformServerComposition,
+	PlatformServerContext,
+} from '@flowdular/sdk/modules/auth/server';
+import { createServerComposition as system_core } from '@flowdular/sdk/modules/system/platform';
+import { createServerComposition as example_core } from '@app/module-example/platform';
+
+export function composeModuleServer(
+	context: PlatformServerContext,
+): readonly PlatformServerComposition[] {
+	return [
+		{
+			...system_core({
+				...context,
+				agentDefinitions: context.agentDefinitions.forModule('system.core'),
+			}),
+			moduleId: 'system.core',
+		},
+		{
+			...example_core({
+				...context,
+				agentDefinitions: context.agentDefinitions.forModule('example.core'),
+			}),
+			moduleId: 'example.core',
+		},
+	];
+}
+
+export const moduleWebMounts = [] as const;

package/template/default/platform/src/server/database.ts

@@ -0,0 +1,25 @@
+import {
+	createDatabaseProvider,
+	databaseProviderConfigFromEnvironment,
+	type ConfiguredDatabaseProvider,
+	type DatabaseProviderConfig,
+	type DatabaseProviderFactories,
+} from '@flowdular/sdk/database';
+import { createPgliteCluster } from '@flowdular/sdk/database-pglite';
+import { Pool } from 'pg';
+
+export { databaseProviderConfigFromEnvironment };
+
+/* The deployable owns both PostgreSQL drivers: node-postgres for a deployment
+   and the embedded build for a local run. @flowdular/sdk/database stays driver free,
+   so every caller supplies them the same way. */
+export function createPlatformDatabaseProvider(
+	config: DatabaseProviderConfig,
+	factories: DatabaseProviderFactories = {},
+): ConfiguredDatabaseProvider {
+	return createDatabaseProvider(config, {
+		postgresPool: (options) => new Pool(options),
+		pgliteCluster: (options) => createPgliteCluster(options),
+		...factories,
+	});
+}

package/template/default/platform/src/styles.css

@@ -0,0 +1,39 @@
+/* Platform-specific styles. Tokens, base styles, and primitives come from
+   @flowdular/sdk/ui; the shell layout comes from @flowdular/sdk/client. */
+
+.access-denied {
+	display: grid;
+	min-height: 100vh;
+	place-items: center;
+	align-content: center;
+	gap: 12px;
+	padding: 32px;
+	text-align: center;
+	background: var(--bg);
+}
+
+.access-denied > span {
+	font-family: var(--font-mono);
+	font-size: var(--text-sm);
+	font-weight: 500;
+	color: var(--copper-600);
+	letter-spacing: 0.08em;
+}
+
+.access-denied h1 {
+	margin: 0;
+	font-size: var(--text-2xl);
+	font-weight: 600;
+	letter-spacing: -0.01em;
+}
+
+.access-denied p {
+	max-width: 52ch;
+	margin: 0;
+	font-size: var(--text-md);
+	color: var(--ink-3);
+}
+
+.access-denied button {
+	margin-top: 10px;
+}

package/template/default/platform/tsconfig.json

@@ -0,0 +1,15 @@
+{
+	"extends": "../tsconfig.base.json",
+	"compilerOptions": {
+		"target": "ESNext",
+		"module": "ESNext",
+		"moduleResolution": "Bundler",
+		"allowImportingTsExtensions": true,
+		"isolatedModules": true,
+		"jsx": "react-jsx",
+		"jsxImportSource": "octane",
+		"types": ["node"],
+		"plugins": [{ "name": "@tsrx/typescript-plugin" }]
+	},
+	"include": ["src/**/*", "vite.config.ts", "octane.config.ts"]
+}

package/template/default/platform/vite.config.ts

@@ -0,0 +1,16 @@
+import { octane } from '@octanejs/vite-plugin';
+import { defineConfig } from 'vite';
+
+export default defineConfig({
+	plugins: [octane()],
+	resolve: {
+		extensions: ['.tsrx', '.ts', '.tsx', '.mjs', '.js', '.jsx', '.json'],
+	},
+	build: { target: 'esnext' },
+	server: {
+		port: 4310,
+		strictPort: true,
+		hmr: true,
+		watch: { ignored: ['**/.flowdular/data/**'] },
+	},
+});

package/template/default/pnpm-workspace.yaml

@@ -0,0 +1,6 @@
+packages:
+  - platform
+  - modules/*
+
+allowBuilds:
+  esbuild: true

package/template/default/tsconfig.base.json

@@ -0,0 +1,18 @@
+{
+	"compilerOptions": {
+		"target": "ES2022",
+		"module": "NodeNext",
+		"moduleResolution": "NodeNext",
+		"lib": ["ES2023", "DOM", "DOM.Iterable"],
+		"strict": true,
+		"noEmit": true,
+		"skipLibCheck": true,
+		"verbatimModuleSyntax": true,
+		"resolveJsonModule": true,
+		"allowSyntheticDefaultImports": true,
+		"esModuleInterop": true,
+		"forceConsistentCasingInFileNames": true,
+		"noUncheckedIndexedAccess": true,
+		"exactOptionalPropertyTypes": true
+	}
+}