create-flowdular 0.6.0 → 0.6.2

package/template/default/platform/src/server/setup/page.ts

@@ -304,6 +304,42 @@ ${steps(view.step, view.databasePreconfigured)}${alerts(view)}
 const WORKSPACE_SLUG_INPUT_PATTERN =
 	'(?!.*--)[a-z0-9][a-z0-9\\-]{1,46}[a-z0-9]';
 
+/* What the address field keeps of typed or pasted text. Accented letters fold
+   to their base letter: NFD splits the accent off and the drop below removes
+   it, and the map covers letters that do not decompose. A short value and a
+   trailing hyphen pass, because typing goes through both; the pattern and the
+   server refuse them on submit. Every step reads left to right, one character
+   at a time, so filtering the text up to the end of an edit tells what that
+   edit may insert. The page ships this source and tests evaluate it. */
+export const WORKSPACE_SLUG_TYPING_FILTER = String.raw`(function(){var fold={'ł':'l','Ł':'l','ø':'o','Ø':'o','đ':'d','Đ':'d','ð':'d','Ð':'d','þ':'th','Þ':'th','æ':'ae','Æ':'ae','œ':'oe','Œ':'oe','ß':'ss','ẞ':'ss','ı':'i'};
+return function(value){return value.normalize('NFD').replace(/[^\x00-\x7f]/g,function(c){return fold[c]||c;}).toLowerCase().replace(/\s/g,'-').replace(/[^a-z0-9-]/g,'').replace(/-{2,}/g,'-').replace(/^-/,'').slice(0,48);};})()`;
+
+/* An insertion at the selection that the page may cancel is filtered before
+   the browser applies it and replayed as an editing command, so undo, redo,
+   the caret and maxlength only ever see filtered text; assigning the value
+   instead corrupts Chrome's undo history. A failed replay lets the raw edit
+   through for the pattern to refuse. Deletions pass untouched: they add no
+   character, and rewriting them would erase separators mid-edit. Composed
+   text is filtered once committed, in every engine. */
+const WORKSPACE_SLUG_TYPING = `
+(function(filter){var input=document.getElementById('setup-workspaceSlug');if(!input)return;
+function kept(start,end,text){var value=input.value,head=value.slice(0,start);
+var next=filter(head+text).slice(filter(head).length);
+return next.slice(-1)==='-'&&value.charAt(end)==='-'?next.slice(0,-1):next;}
+function insert(text){return document.execCommand(text?'insertText':'delete',false,text);}
+input.addEventListener('beforeinput',function(event){
+if(!event.cancelable||event.isComposing||!/^insert(Text|FromPaste|FromDrop)$/.test(event.inputType))return;
+var text=event.data!=null?event.data:event.dataTransfer?event.dataTransfer.getData('text/plain'):'';
+var next=kept(input.selectionStart,input.selectionEnd,text);
+if(next!==text&&(!next||insert(next)))event.preventDefault();});
+input.addEventListener('compositionend',function(event){
+var text=event.data||'',end=input.selectionStart,start=end-text.length;
+if(!text||start<0||input.value.slice(start,end)!==text)return;
+var next=kept(start,end,text);
+if(next!==text){input.setSelectionRange(start,end);insert(next);}});
+})(${WORKSPACE_SLUG_TYPING_FILTER});
+`;
+
 function workspaceField(
 	view: SetupPageView,
 	name: string,
@@ -394,7 +430,7 @@ ${
 </ul></div>
 <div><p class="setup-label setup-sublabel">Enabled modules that own tables</p><ul class="setup-list">${modules || '<li><span class="setup-help">No enabled module owns database tables.</span></li>'}</ul>${
 		view.modulesApproximated
-			? '<p class="setup-note setup-note--gap">This build ships without the module manifests, so every enabled module is checked against the strictest requirements any of them can ask for.</p>'
+			? '<p class="setup-note setup-note--gap">This build ships without some module manifests, so each enabled module without one is checked against the strictest requirements any module can ask for.</p>'
 			: ''
 	}</div>
 <form class="setup-form" method="post" action="/setup">${csrf(view)}
@@ -430,6 +466,17 @@ function environmentSection(result: EnvironmentWriteResult): string {
 	}.</p>`;
 }
 
+function ungrantedNotice(modules: readonly string[]): string {
+	if (modules.length === 0) return '';
+	const commands = modules
+		.map(
+			(id) =>
+				`<br><code>pnpm flowdular auth sync-scopes --module ${escapeHtml(id)} --apply</code>`,
+		)
+		.join('');
+	return `<p class="setup-alert setup-alert--warning" role="alert">The owner was not granted the permissions of ${escapeHtml(modules.join(', '))}. Run ${modules.length === 1 ? 'this command' : 'these commands'} with this deployment's database settings (stop the app first if it uses the embedded database), then sign in:${commands}</p>`;
+}
+
 function doneStep(view: SetupPageView): string {
 	const seed = view.seed;
 	const owner = seed?.accounts[0];
@@ -445,7 +492,7 @@ function doneStep(view: SetupPageView): string {
 				: 'Restart this deployment to leave setup and open the sign-in screen.';
 	return `<header><span class="setup-kicker">Sign in</span><h2>Flowdular is ready</h2>
 <p class="setup-card__sub">The workspace ${escapeHtml(seed?.workspace.name ?? '')} is ready. ${nextStep}</p></header>
-${steps(view.step, view.databasePreconfigured)}${alerts(view)}
+${steps(view.step, view.databasePreconfigured)}${alerts(view)}${ungrantedNotice(seed?.ungrantedModules ?? [])}
 <div><p class="setup-label setup-sublabel">Sign in as the workspace owner</p><div class="setup-credentials"><div><b>Owner account</b><code>${escapeHtml(owner?.email ?? view.values.ownerEmail ?? '')}</code></div></div>
 <p class="setup-note setup-note--gap">After signing in, you can connect an AI model in Providers. This is optional and can be done later.</p></div>
 ${view.environment ? environmentSection(view.environment) : ''}
@@ -459,6 +506,10 @@ export function renderSetupPage(view: SetupPageView, nonce: string): string {
 		view.step === 'Sign in' && view.autoRestart && view.csrfToken
 			? `<script nonce="${nonce}">fetch('/setup',{method:'POST',credentials:'same-origin',headers:{'content-type':'application/x-www-form-urlencoded'},body:new URLSearchParams({step:'restart',setupCsrf:'${view.csrfToken}'}),keepalive:true}).catch(()=>{});</script>`
 			: '';
+	const slugScript =
+		view.step === 'Workspace'
+			? `<script nonce="${nonce}">${WORKSPACE_SLUG_TYPING}</script>`
+			: '';
 	const body =
 		view.step === 'Unlock'
 			? unlockStep(view)
@@ -492,6 +543,6 @@ function sync(){for(var i=0;i<f.length;i++){var s=document.querySelector('fields
 if(s)s.hidden=!f[i].checked;}}
 for(var i=0;i<f.length;i++)f[i].addEventListener('change',sync);sync();})();
 </script>
-${restartScript}
+${slugScript}${restartScript}
 </body></html>`;
 }

package/template/default/platform/src/server/setup/routes.ts

@@ -191,6 +191,7 @@ function page(
 				`style-src 'nonce-${nonce}'`,
 				`script-src 'nonce-${nonce}'`,
 				"img-src 'self' data:",
+				"connect-src 'self'",
 				"form-action 'self'",
 				"base-uri 'none'",
 				"frame-ancestors 'none'",

package/template/default/platform/src/server/setup/seed.ts

@@ -3,6 +3,7 @@ import {
 	authRuntimeOptionsFromEnvironment,
 	createAuthRuntime,
 } from '@flowdular/sdk/modules/auth/server';
+import { readModuleCatalog } from '@flowdular/sdk/modules/system/server';
 /* First-run provisioning uses the same audited auth service as the operator
    CLI. The operator chooses the first owner; no demo credentials are shipped. */
 
@@ -26,6 +27,8 @@ export interface FirstRunOwner {
 export interface FirstRunSeed {
 	readonly workspace: { readonly name: string; readonly slug: string };
 	readonly accounts: readonly SeededAccount[];
+	/** Enabled modules whose permissions setup could not grant to the owner. */
+	readonly ungrantedModules: readonly string[];
 }
 
 export class SetupSeedError extends Error {
@@ -38,10 +41,19 @@ export class SetupSeedError extends Error {
 	}
 }
 
+/* A driver message can carry a host or a connection string, so only a code
+   from a fixed alphabet is logged, such as a SQLSTATE or an errno name. */
+function stableCode(error: unknown): string {
+	const code = (error as { code?: unknown } | null)?.code;
+	if (typeof code === 'string' && /^[A-Z0-9_]{1,64}$/.test(code)) return code;
+	return error instanceof Error ? error.name : 'unknown';
+}
+
 /**
- * Migrates auth.core, then creates the chosen workspace and its owner. The
- * database must still have no workspace, so a stale session cannot re-provision
- * an existing installation.
+ * Migrates auth.core, then creates the chosen workspace and its owner, and
+ * grants that owner the permissions the enabled modules declare. The database
+ * must still have no workspace, so a stale session cannot re-provision an
+ * existing installation.
  */
 export async function seedFirstRun(
 	databases: DatabaseProvider,
@@ -49,6 +61,9 @@ export async function seedFirstRun(
 	workspaceRoot: string,
 	owner: FirstRunOwner,
 ): Promise<FirstRunSeed> {
+	const enabled = readModuleCatalog(workspaceRoot).filter(
+		(entry) => entry.enabled,
+	);
 	const runtime = createAuthRuntime({
 		...authRuntimeOptionsFromEnvironment(environment, workspaceRoot),
 		databases,
@@ -72,6 +87,37 @@ export async function seedFirstRun(
 			password: owner.ownerPassword,
 			operator: FIRST_RUN_OPERATOR,
 		});
+		/* An application's own modules declare permissions the owner defaults
+		   cannot carry, and the grant module enable runs found no workspace
+		   before this one. The workspace is committed and first run is over, so
+		   a failed grant is reported with its repair command rather than failing
+		   a setup that cannot run again. */
+		const held = new Set(provisioned.owner.scopes);
+		const pending = enabled.filter((entry) =>
+			entry.permissions.some((permission) => !held.has(permission.id)),
+		);
+		let scopes = provisioned.owner.scopes;
+		let ungrantedModules: readonly string[] = [];
+		if (pending.length > 0) {
+			try {
+				const grants = await service.grantModuleScopes(
+					pending.flatMap((entry) =>
+						entry.permissions.map((permission) => permission.id),
+					),
+				);
+				scopes = [
+					...scopes,
+					...(grants.find(
+						(grant) => grant.accountId === provisioned.owner.accountId,
+					)?.granted ?? []),
+				];
+			} catch (error) {
+				ungrantedModules = pending.map((entry) => entry.id);
+				console.warn(
+					`First-run setup could not grant the owner the permissions of ${ungrantedModules.join(', ')} (${stableCode(error)}).`,
+				);
+			}
+		}
 		return {
 			workspace: {
 				name: provisioned.workspace.name,
@@ -82,9 +128,10 @@ export async function seedFirstRun(
 					email: provisioned.owner.email,
 					displayName: provisioned.owner.displayName,
 					role: provisioned.owner.role,
-					scopes: provisioned.owner.scopes,
+					scopes,
 				},
 			],
+			ungrantedModules,
 		};
 	} finally {
 		await runtime.dispose();

package/agent-template/.ai/references/catalog.provenance.json

@@ -1,65 +0,0 @@
-{
-	"id": "catalog.core",
-	"version": "0.8.2",
-	"repository": "Flowdular/official-modules",
-	"sourceCommit": "f38a67718c5a29aba5b5d37c0504430a3c7f565b",
-	"artifactSha256": "149808831d620ac0ebc50abb6b0fb2caef6bec66b5d7821c752ec811e5d9219f",
-	"files": {
-		"LICENSE": "155d722071bad9d0d832482e06fd5a47f7034389cb63aabcb39f4282aa3499fc",
-		"migrations/0001_catalog_core.down.sql": "0962a1edf0bde959cd4facccf77bd5b634d6cc25f125a0c79a61770c8871093f",
-		"migrations/0001_catalog_core.up.sql": "602ed9c1852b729cf278cf8536f79e3f7432f23a5a60c50d8826f5c1b9442d18",
-		"migrations/0002_catalog_history.down.sql": "7f163e11ca9033101e3bb1de61481b1a8043c204e65aa2bb508a13b065e98c78",
-		"migrations/0002_catalog_history.up.sql": "3aa30993b1676cf357c2ef87f19a7d4b64b77041c0e4bc743fced04521471c28",
-		"migrations/0003_catalog_history_service_actors.down.sql": "f20ecc8d7d753af3d2b6fdbff9d637fd938884cfbd88b08a30958e6aa000132b",
-		"migrations/0003_catalog_history_service_actors.up.sql": "7caae787ca2fc1e331ccbfda4df5982beec76136e8dc486aab5532ccd338a722",
-		"migrations/0004_catalog_idempotency_ledger.down.sql": "8ba72d8edc4d25ecf6d041888cf321690c25afdaf3723812ddd7d391d75370aa",
-		"migrations/0004_catalog_idempotency_ledger.up.sql": "41e86ba2051159c6cc9672bfae17c1d02051da975f1c43c566a2b66592673cb0",
-		"migrations/0005_catalog_list_indexes.down.sql": "3dd547d738e75513abef502afc4bf9b51851ec9405b6b719c6134b897c5b1776",
-		"migrations/0005_catalog_list_indexes.up.sql": "dc3ece30b93fba0c91be58f772d1ae421cfbba49439e8c72a06aead6720f5db5",
-		"migrations/README.md": "2a15fd001713c2552a3c82b186246aa5fec136f43143cc2d9aa15bd491a09d41",
-		"module.json": "d2a98b70d60a433e1b3b6547352781048d562b996e3ee961f519d61ee1b623b9",
-		"package.json": "c23a99016f974d183189a05e4cfc4929788a46ae1ad65c623d66513e0880cdbd",
-		"spec/module.yaml": "992953d002574e83374c21e1ee7bef1d451c04b0180892856838d7c67404ce66",
-		"src/acl/permissions.ts": "3375521a5a229736ffac5a948140ec347dc7a7e4fba80e778c0baaf9e0622590",
-		"src/agent/tools.ts": "3403db7954906dc2c79227ba0420b5cb4bfb57063b7cfc285e6e556f16be9266",
-		"src/api/endpoints.ts": "205ef36d058f246f99b77336e7246a23aaca611c696a1f6f09758f66e8a93a29",
-		"src/api/list-cursor.ts": "dcb763edc0128a3aac95e9ca3c5158611a7f2c6a4c71484438c89b7f4d79bb0d",
-		"src/client/CatalogHistoryDrawer.tsrx": "6cdba5249be81e70da703cb34c1a2210943ce5e5fb596ee77cf7952e2acf3ee3",
-		"src/client/CatalogItemForm.tsrx": "d621ac2a513635a5e38ee44726c07926bf035ec5e0dddca487c462cc7913d040",
-		"src/client/CatalogView.tsrx": "2c3e49bb1e54b58d636de0ddbb6ece429acf6aeadb6a0515ab52fca3baabec21",
-		"src/client/api.ts": "eaa55af81d26aa0190d19b3102c363c1ee25b2bdc05436446ac95dcde62aea75",
-		"src/client/contribution.tsrx": "6cbf79e6188bdf24b9cec4a06ae621e03efd5d0c76ad72b28828eee9155ab893",
-		"src/client/index.ts": "03eb0664cdafccb66cb25f2e1b07e6959c2dfa9bdbfffc3e7edf9b535ba4949a",
-		"src/client/navigation-copy.ts": "9a8757e64f4001a93e2bc2861c686a19f791f9d67a396d9e658023b1ec4cea8f",
-		"src/client/state.ts": "61601f6037c4bb8a709b69b10c1a37e59b45b0c941240c436f7861c2b034dcc1",
-		"src/domain/lists.ts": "83749967f99fa0c4f44abc0c614108b844321e50ce6408553215e6233ad6e350",
-		"src/domain/types.ts": "374efeb24c4f7d41e3c660336e721fa362418579837d44a46724076d03287a0b",
-		"src/domain/variables.ts": "131130e57838235b1f3fcb799da44baeae16522bb346d522827e022305c110b5",
-		"src/index.ts": "5b27943018db9a18651d62add7d6f8397d7c492a204381fae74547b99b91990d",
-		"src/platform.ts": "f048082a33c1c688e4952750c762c8b65a4626ff52cc9c4eaca2156014bac631",
-		"src/server/index.ts": "90eae107d863418124e5d10c4d1fe8a119bd14da605b36de708c18d8500c4b5e",
-		"src/server/runtime.ts": "5f4389a6adf8265f6737c489baf686f63cc3550662103d28b2da9800dd9f5b63",
-		"src/services/catalog-service.ts": "66e61dfbd9797d31e6814c18efcd21cfcb7b220f7df22677868f486f3fa0e9d1",
-		"src/services/data-classes.ts": "ea09b1a7def59fee43d57ca7dab6fdb4d646b51df2cacb60af96676c43602b33",
-		"src/services/database-repository.ts": "1b72ce91a2f85f6572825766781a806d94fe0d2abb91872ee9acae3b1e70db2e",
-		"src/services/index.ts": "a08aefe5101814538666f861536287fc382e6c655d62ba9b9ef4bbfbc6ede4af",
-		"src/services/item-export.ts": "b2a4613b43a98d0d41699481bb5e85a770f9a60cb2241579b065effb6936c80b",
-		"src/services/migration.ts": "57c9a857d4074973e14b5e3a1c4548a92ad0faca371419e7daf2334f3ef701ab",
-		"src/services/repository.ts": "9f560033875d05654148b4a11897465ee4eefa0d7fa701439e8f562da9fba1db",
-		"src/services/target-idempotency.ts": "7111b56a30b691eaaaa64f5691895ac94b6e0735b0079794835bbbeba5102cb0",
-		"tests/agent-tools.test.ts": "7762c14bc353ee3085df46a91cf370eb5c25b2edb7096f0a4b0e033f220ea726",
-		"tests/client-state.test.ts": "ea146c793b14d0f9bc5e36d92e92894ced6531b8fcbd11c8be1486b62313b8c3",
-		"tests/data-classes.test.ts": "bea08e4d1d7380ccdebc211374b74a6034714b192fd98bfb90a2218067b35658",
-		"tests/endpoints.test.ts": "a2d700f4c3eb6fbbef5c57ed5591017a27c98e17fe84fba8426fcd3a2820b210",
-		"tests/export.test.ts": "de83066272cee5f7f5736d636d7b9b97dab09778ba661816e401bf926b826402",
-		"tests/idempotency.test.ts": "faea4a2cfa04e81b7155399cba807af4c1ba4448cdfeab733d1afe801d27734f",
-		"tests/list.test.ts": "97605b50020841cbdac62f9d44b65f0f7dce9c4c4972af6409afeb6b9b66e59a",
-		"tests/migrations.test.ts": "fb796aecedb997f6395c2c15e45bf4abfae4677953fa8cb420c94e9cfba8222f",
-		"tests/module.test.ts": "af961a5bcddc41d304d14841f8810976f43f46b46ab7814142fdb921a773e92a",
-		"tests/support/database.ts": "4ff6d093ca2e80baab3dea476018661473d6474db63d67655f1edc667b8472ac",
-		"translations/en.json": "a86d70e02ccf46a2a132d5bee0de7c528c0eb56a85c269a78e0c2e7e0de24e37",
-		"translations/pl.json": "8157d83467e9dd8d9700e2fb188f1a730073f805d2a8b3f0ba98f02f2ca9a264",
-		"tsconfig.json": "140bb4775df421146563d13d2f78ff74cb3c2decab6737db32938339248a92ba",
-		"vitest.config.ts": "d13725b13c3712ec91c1646e9226fb172eec2599f72f4e6608bece9912e2bd81"
-	}
-}