create-flowdular 0.5.1 → 0.6.1

package/template/default/infra/vercel/handler.mjs

@@ -0,0 +1,100 @@
+/* Vercel assigns a different origin to every preview. Read its own deployment
+   hostname before importing Octane, whose auth runtime captures the origin at boot. */
+process.env.NODE_ENV = 'production';
+process.env.FD_DEPLOYMENT_TARGET = 'vercel';
+process.env.FD_TRUST_PROXY = 'true';
+process.env.FD_AUTH_SECURE_COOKIE = 'true';
+if (!process.env.FD_AUTH_PUBLIC_ORIGIN && process.env.VERCEL_URL) {
+	const host = process.env.VERCEL_URL;
+	if (
+		!/^[-a-z0-9.]+$/i.test(host) ||
+		host.startsWith('.') ||
+		host.endsWith('.') ||
+		host.includes('..') ||
+		!host.includes('.')
+	) {
+		throw new Error('VERCEL_URL must be a hostname without a scheme or path.');
+	}
+	process.env.FD_AUTH_PUBLIC_ORIGIN = `https://${host}`;
+}
+
+/* Vercel Cron presents CRON_SECRET as its bearer token, so the tick secret is
+   that value unless the deployment names its own. */
+if (!process.env.FD_WORKER_TICK_SECRET && process.env.CRON_SECRET) {
+	process.env.FD_WORKER_TICK_SECRET = process.env.CRON_SECRET;
+}
+
+const { nodeHandler } = await import('./platform/dist/server/entry.js');
+
+const WORKER_TICK_PATH = '/api/internal/worker/tick';
+const KICK_INTERVAL_MS = 5_000;
+/* The worker function keeps running after this request hangs up: Vercel ends
+   an invocation on disconnect only for functions that opt into cancellation. */
+const KICK_HANDOFF_MS = 2_000;
+const REQUEST_CONTEXT = Symbol.for('@vercel/request-context');
+let lastKick = 0;
+
+function kickWorker(origin, secret) {
+	const now = Date.now();
+	if (now - lastKick < KICK_INTERVAL_MS) return Promise.resolve();
+	lastKick = now;
+	const headers = { authorization: `Bearer ${secret}` };
+	if (process.env.VERCEL_AUTOMATION_BYPASS_SECRET) {
+		headers['x-vercel-protection-bypass'] =
+			process.env.VERCEL_AUTOMATION_BYPASS_SECRET;
+	}
+	return fetch(new URL(WORKER_TICK_PATH, origin), {
+		method: 'POST',
+		headers,
+		signal: AbortSignal.timeout(KICK_HANDOFF_MS),
+	}).then(
+		(response) => response.body?.cancel(),
+		() => undefined,
+	);
+}
+
+/* The web function claims no queued work, so a request that changed state asks
+   the worker function for a short tick instead of leaving it to the next cron. */
+function withWorkerKick(handler) {
+	const origin = process.env.FD_AUTH_PUBLIC_ORIGIN;
+	const secret = process.env.FD_WORKER_TICK_SECRET;
+	if (process.env.FD_RUNTIME_ROLE !== 'web' || !origin || !secret) {
+		return handler;
+	}
+	return (request, response) => {
+		const waitUntil = globalThis[REQUEST_CONTEXT]?.get?.()?.waitUntil;
+		if (
+			waitUntil &&
+			!['GET', 'HEAD', 'OPTIONS'].includes(request.method) &&
+			request.url?.startsWith('/api/')
+		) {
+			waitUntil(
+				new Promise((resolve) => {
+					response.once('close', () => {
+						resolve(
+							response.statusCode < 400
+								? kickWorker(origin, secret)
+								: undefined,
+						);
+					});
+				}),
+			);
+		}
+		return handler(request, response);
+	};
+}
+
+/* Vercel terminates TLS before the function, and Octane's Node adapter builds
+   every request URL as http://<host>. An absolute https target keeps the
+   origin that same-origin checks compare against. */
+function withHttpsOrigin(handler) {
+	return (request, response) => {
+		const host = request.headers?.host;
+		if (host && request.url?.startsWith('/')) {
+			request.url = `https://${host}${request.url}`;
+		}
+		return handler(request, response);
+	};
+}
+
+export default withWorkerKick(withHttpsOrigin(nodeHandler));

package/template/default/modules/example/migrations/0001_example_core.up.sql

@@ -10,5 +10,5 @@ CREATE INDEX IF NOT EXISTS example_notes_tenant_created_idx ON example_notes (te
 ALTER TABLE example_notes ENABLE ROW LEVEL SECURITY;
 ALTER TABLE example_notes FORCE ROW LEVEL SECURITY;
 CREATE POLICY example_notes_tenant_policy ON example_notes
-  USING (tenant_id = current_setting('coreloom.tenant_id', true))
-  WITH CHECK (tenant_id = current_setting('coreloom.tenant_id', true));
+  USING (tenant_id = current_setting('flowdular.tenant_id', true))
+  WITH CHECK (tenant_id = current_setting('flowdular.tenant_id', true));

package/template/default/modules/example/module.json

@@ -4,7 +4,7 @@
 	"id": "example.core",
 	"package": "@app/module-example",
 	"version": "0.1.0",
-	"platformApi": "^0.1.0",
+	"platformApi": "^0.2.0",
 	"profile": "full",
 	"capabilities": ["api", "database", "client", "translations"],
 	"platform": {

package/template/default/modules/example/package.json

@@ -14,9 +14,9 @@
 		"test": "vitest run"
 	},
 	"dependencies": {
-		"octane": "0.1.51",
-		"segment-state": "0.2.1",
-		"@flowdular/sdk": "0.5.1"
+		"octane": "0.9.1",
+		"segment-state": "0.4.0",
+		"@flowdular/sdk": "0.6.1"
 	},
 	"devDependencies": {
 		"@tsrx/typescript-plugin": "0.3.120",

package/template/default/modules/example/spec/module.yaml

@@ -19,7 +19,7 @@ locales:
   - pl
 invariants:
   - Persistence runs on the shared asynchronous database contract. The module receives a leased handle from platform composition, never a driver or a connection string, and provides explicit SQL for every dialect it declares.
-  - The PostgreSQL notes table enables and forces row-level security with USING and WITH CHECK policies bound to transaction-local coreloom.tenant_id, and the runtime role holds neither SUPERUSER nor BYPASSRLS. Migrations use a separate lease.
+  - The PostgreSQL notes table enables and forces row-level security with USING and WITH CHECK policies bound to transaction-local flowdular.tenant_id, and the runtime role holds neither SUPERUSER nor BYPASSRLS. Migrations use a separate lease.
   - Every note is owned by exactly one tenant and every query uses the trusted tenant identifier.
 permissions:
   - id: example.notes.read

package/template/default/modules/example/src/services/migration.ts

@@ -16,8 +16,8 @@ CREATE INDEX IF NOT EXISTS example_notes_tenant_created_idx ON example_notes (te
 ALTER TABLE example_notes ENABLE ROW LEVEL SECURITY;
 ALTER TABLE example_notes FORCE ROW LEVEL SECURITY;
 CREATE POLICY example_notes_tenant_policy ON example_notes
-  USING (tenant_id = current_setting('coreloom.tenant_id', true))
-  WITH CHECK (tenant_id = current_setting('coreloom.tenant_id', true));
+  USING (tenant_id = current_setting('flowdular.tenant_id', true))
+  WITH CHECK (tenant_id = current_setting('flowdular.tenant_id', true));
 `;
 
 export const databaseMigrations: readonly DatabaseMigration[] = [

package/template/default/modules/example/tests/module.test.ts

@@ -61,7 +61,7 @@ describe('example.core migrations', () => {
 			const sql = migration.sql.postgresql ?? '';
 			expect(sql).toContain('ENABLE ROW LEVEL SECURITY');
 			expect(sql).toContain('FORCE ROW LEVEL SECURITY');
-			expect(sql).toContain("current_setting('coreloom.tenant_id', true)");
+			expect(sql).toContain("current_setting('flowdular.tenant_id', true)");
 			expect(sql).toContain('WITH CHECK');
 		}
 	});

package/template/default/package.json

@@ -15,7 +15,6 @@
 		"format": "prettier --write .",
 		"format:check": "prettier --check .",
 		"flowdular": "flowdular",
-		"cl": "flowdular",
 		"doctor": "flowdular doctor",
 		"verify": "pnpm rules:check && pnpm typecheck && pnpm test && flowdular spec validate --all && flowdular module validate && pnpm format:check",
 		"rules:generate": "rulesync generate",
@@ -23,10 +22,10 @@
 		"build": "flowdular module sync --apply && pnpm --filter @app/platform build"
 	},
 	"devDependencies": {
-		"@flowdular/sandbox": "0.5.1",
+		"@flowdular/sandbox": "0.6.1",
 		"@tsrx/prettier-plugin": "0.3.120",
 		"prettier": "3.6.2",
-		"flowdular": "0.5.1",
+		"flowdular": "0.6.1",
 		"rulesync": "16.21.0"
 	}
 }