create-substrat 0.9.6 → 0.9.8

package/index.js

@@ -36,11 +36,11 @@ const TEMPLATE = join(HERE, 'template');
 // The runtime packages release together off one version line (the changesets `fixed`
 // group), so one constant is right for all of them. Engines do NOT share a line —
 // each versions on its own, so one pin per engine, deliberately.
-const SUBSTRAT = '^0.111.0';
-const ENGINE_WORKORDER = '^0.11.10';
-const ENGINE_INVOICING = '^0.10.1';
+const SUBSTRAT = '^0.114.0';
+const ENGINE_WORKORDER = '^0.11.13';
+const ENGINE_INVOICING = '^0.10.4';
 const BOUNDARY_LINT = '^0.4.2';
-const DEV_ISSUER = '^0.1.26';
+const DEV_ISSUER = '^0.1.29';
 
 const DOCS = 'https://substrat.net';
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-substrat",
-  "version": "0.9.6",
+  "version": "0.9.8",
   "description": "Scaffold a Substrat vertical — `npm create substrat <dir>`.",
   "license": "Apache-2.0",
   "repository": {

package/template/.substrat/hooks/session-start.mjs

@@ -20,7 +20,7 @@
  * not in `.claude/`. `.claude/settings.json` is a three-line adapter that runs it,
  * and any other client that grows a session hook binds the same way. It also
  * means the plugin distribution (#753) ships this script unchanged rather than
- * forking it: `plugin/substrat/scripts/session-start.mjs` is emitted from this
+ * forking it: `plugin/substrat/scripts/session-start.generated.mjs` is emitted from this
  * file byte-for-byte, and `pnpm lint:plugin --check` fails if the two diverge.
  *
  * The plugin copy is what reaches a project scaffolded before this hook existed.

package/template/AGENTS.md

@@ -46,11 +46,13 @@ src/migrations.ts      the SqlMigration[]                         ← module cod
 src/module.ts          the handlers, bound to the declaration      ← module code
 src/provision.ts       MODULES, ROLES, grant shapes — node-free    ← module code
 src/seed.ts            host, tenants, demo cast, seed world        ← harness
+src/personas.ts        the dev cast, read by the issuer and the seed ← harness
 src/routes.ts          the routes, DERIVED from the operations     ← harness
 src/server.ts          the dev entrypoint (node + persona picker)   ← harness
 src/worker.ts          the deployable Cloudflare worker             ← harness
 src/config-do.ts       per-instance config store (Cloudflare only)  ← harness
 test/scenario.test.ts  the scenario — including the denials
+test/entities.test.ts  the registry, held to the tables it migrates
 ```
 
 **A new route is an `http` declaration on its operation, never a handler in an
@@ -156,6 +158,12 @@ same object feeds `operationInputs: operationInputsOf(bikeShopOperations)`, so t
 schemas the host parses with are the ones the declaration states — they cannot drift,
 because there is only one of them.
 
+The permission list works the same way. `SHOP_PERMISSIONS`, the array handed to
+`defineOperations`, is also the `keys` that `src/provision.ts` hands
+`definePermissions({ modules, roles, entityGrants, keys })` — and `definePermissions`
+throws at module load if those keys and `MODULES` disagree in either direction. Hand
+both readers the same array; a second copy is a list that drifts.
+
 **A list read must declare `paged`.** `defineOperations` refuses a bare-array `output`
 that does not, and it refuses it at module load — so it fires in every build, every
 test and every dev server rather than in a lint tool that has to find you. A list

package/template/src/worker.ts

@@ -47,7 +47,13 @@ import {
   SCOPE_SWEEPER_NAME,
   type ScopeSweeperDo,
 } from '@substrat-run/adapter-cloudflare';
-import { readRoutedNode, RouterAssertionError, type ScopeStub, invocationLog } from '@substrat-run/kernel';
+import {
+  PLATFORM_REQUEST_HEADER,
+  readRoutedNode,
+  RouterAssertionError,
+  type ScopeStub,
+  invocationLog,
+} from '@substrat-run/kernel';
 import { mountPlatformSurface } from '@substrat-run/vertical-host';
 import { MODULES, OWNER_ROLE_KEY, ROLES } from './provision.js';
 import { SHOP_ENV } from './manifest.js';
@@ -213,7 +219,14 @@ async function stub(c: Context<{ Bindings: Env }>): Promise<ScopeStub> {
   const node = nodeFor(c.req.raw, c.env);
   const principal = await authenticatedPrincipal(c.req.raw, c.env);
   if (!principal) throw new HTTPException(401, { message: await unauthorizedReason(c.env, node) });
-  return hostFor(c.env).getScope(principal, node.tenantId, node.scopeId);
+  return hostFor(c.env).getScope(principal, node.tenantId, node.scopeId, {
+    // An operation that called `ctx.requestPlatform` flags its response, and the router
+    // drains this scope within seconds instead of at the next sweep. Leave it wired even
+    // if nothing requests anything yet: the host calls this only when a committed invoke
+    // enqueued at least one intent, so it costs nothing until then, and without it every
+    // platform intent waits up to a quarter of an hour.
+    onPlatformRequests: () => c.header(PLATFORM_REQUEST_HEADER, '1'),
+  });
 }
 
 /**