create-svc 0.1.66 → 0.1.68

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-svc",
-  "version": "0.1.66",
+  "version": "0.1.68",
   "description": "Local microservice bootstrap CLI for Cloud Run and Workers services with Neon-backed data.",
   "module": "index.ts",
   "type": "module",

package/src/scaffold.test.ts

@@ -146,6 +146,9 @@ test("scaffolds all runtime/framework variants with shared cloudrun config", asy
     expect(previewWorkflow).toContain("steps.pr.outputs.number");
     expect(previewWorkflow).toContain("NEON_API_KEY");
     expect(previewWorkflow).toContain("CLOUDFLARE_API_TOKEN");
+    if (variant.runtime === "go") {
+      expect(previewWorkflow).toContain("ariga/setup-atlas");
+    }
 
     const previewCleanupWorkflow = await Bun.file(join(generatedRoot, ".github", "workflows", "preview-cleanup.yml")).text();
     expect(previewCleanupWorkflow).toContain("pull_request:");
@@ -155,6 +158,9 @@ test("scaffolds all runtime/framework variants with shared cloudrun config", asy
     const deployWorkflow = await Bun.file(join(generatedRoot, ".github", "workflows", "deploy.yml")).text();
     expect(deployWorkflow).toContain("branches:");
     expect(deployWorkflow).toContain("- main");
+    if (variant.runtime === "go") {
+      expect(deployWorkflow).toContain("ariga/setup-atlas");
+    }
     expect(deployWorkflow).toContain("gcloud components install beta --quiet");
     expect(deployWorkflow).toContain("bun install -g create-svc@latest");
     expect(deployWorkflow).toContain("service deploy --ci");
@@ -166,6 +172,9 @@ test("scaffolds all runtime/framework variants with shared cloudrun config", asy
     expect(personalWorkflow).toContain("workflow_dispatch:");
     expect(personalWorkflow).toContain("service deploy --ci --environment personal --name");
     expect(personalWorkflow).toContain("service deploy --ci --destroy --environment personal --name");
+    if (variant.runtime === "go") {
+      expect(personalWorkflow).toContain("ariga/setup-atlas");
+    }
 
     if (variant.runtime === "go") {
       const goMod = await Bun.file(join(generatedRoot, "go.mod")).text();
@@ -327,6 +336,9 @@ test("scaffolds a backend package cleanly into a nested monorepo-style directory
   expect(readme).toContain("GCP_DEPLOYER_SERVICE_ACCOUNT");
   expect(readme).toContain("NEON_API_KEY");
   expect(readme).toContain("CLOUDFLARE_API_TOKEN");
+  expect(readme).toContain("ConnectRPC service builds import the generated bindings checked into this repo");
+  expect(readme).toContain("does not rewrite this");
+  expect(readme).toContain("service's Go imports away from local generated packages");
 
   const packageJson = await Bun.file(join(generatedRoot, "package.json")).text();
   expect(packageJson).toContain('"hono"');

package/src/service-runtime/cloudrun/cli.ts

@@ -351,7 +351,7 @@ async function runSdk(args: string[]) {
     requireCommand("buf");
     run("buf", ["push"]);
     await writeSdkMode("remote");
-    return "Schema pushed to Buf Schema Registry";
+    return "Schema pushed to Buf Schema Registry and recorded for consumers";
   }
 
   if (subcommand === "build") {
@@ -361,18 +361,18 @@ async function runSdk(args: string[]) {
       run("make", ["gen"]);
     }
     await writeSdkMode("local");
-    return "Local SDK artifacts generated and selected";
+    return "Local SDK artifacts generated and recorded";
   }
 
   if (subcommand === "use-local") {
     await assertLocalSdkArtifacts();
     await writeSdkMode("local");
-    return "Local SDK artifacts selected";
+    return "Local SDK artifacts recorded";
   }
 
   if (subcommand === "use-remote") {
     await writeSdkMode("remote");
-    return `Remote Buf SDK selected: ${bufModule()}`;
+    return `Remote Buf SDK recorded for consumers: ${bufModule()}`;
   }
 
   throw new Error("Usage: service sdk <build|publish|use-local|use-remote>");

package/src/service-runtime/cloudrun/sdk.test.ts

@@ -0,0 +1,107 @@
+import { expect, test } from "bun:test";
+import { chmod, mkdir, mkdtemp, readFile, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { scaffoldProject, type ScaffoldConfig } from "../../scaffold";
+
+function baseConfig(directory: string): ScaffoldConfig {
+  return {
+    directory,
+    serviceName: "sdk-proof",
+    modulePath: "github.com/anmho/sdk-proof",
+    target: "cloudrun",
+    runtime: "go",
+    framework: "connectrpc",
+    region: "us-west1",
+    gcpProjectMode: "use_existing",
+    gcpProject: "anmho-services",
+    gcpProjectName: "services",
+    billingAccount: "",
+    quotaProjectId: "anmho-infra-prod",
+    profile: "microservice",
+    git: {
+      enabled: false,
+      owner: "anmho",
+      repository: "sdk-proof",
+    },
+    neonDatabaseName: "sdk_proof",
+    apiHostname: "api.sdk-proof.anmho.com",
+    generatorRoot: join(import.meta.dir, "..", "..", ".."),
+    autoDeploy: false,
+  };
+}
+
+test("service sdk publish pushes the named Buf module and selects remote SDK mode", async () => {
+  const root = await mkdtemp(join(tmpdir(), "create-svc-sdk-"));
+  const generatedRoot = join(root, "sdk-proof");
+  const fakeBin = join(root, "bin");
+  const bufLog = join(root, "buf.log");
+
+  await scaffoldProject(baseConfig(generatedRoot));
+  await mkdir(join(generatedRoot, "node_modules"));
+  await mkdir(fakeBin);
+  await writeFile(
+    join(fakeBin, "buf"),
+    ["#!/bin/sh", `echo "$@" > "${bufLog}"`, "exit 0", ""].join("\n")
+  );
+  await chmod(join(fakeBin, "buf"), 0o755);
+
+  const result = Bun.spawnSync(["bun", join(import.meta.dir, "..", "..", "..", "index.ts"), "sdk", "publish"], {
+    cwd: generatedRoot,
+    env: { ...process.env, PATH: `${fakeBin}:${process.env.PATH ?? ""}` },
+    stdout: "pipe",
+    stderr: "pipe",
+  });
+
+  expect(result.success, [result.stdout.toString(), result.stderr.toString()].join("\n")).toBeTrue();
+  expect(result.stdout.toString()).toContain("recorded for consumers");
+  expect((await readFile(bufLog, "utf8")).trim()).toBe("push");
+  const sdkState = JSON.parse(await Bun.file(join(generatedRoot, ".service", "sdk.json")).text());
+  expect(sdkState).toMatchObject({
+    mode: "remote",
+    module: "buf.build/anmho/sdk-proof",
+    localPath: "./gen/waitlist/v1",
+  });
+  const bufConfig = await Bun.file(join(generatedRoot, "buf.yaml")).text();
+  expect(bufConfig).toContain("name: buf.build/anmho/sdk-proof");
+});
+
+test("service sdk publish leaves local SDK mode when Buf push fails", async () => {
+  const root = await mkdtemp(join(tmpdir(), "create-svc-sdk-"));
+  const generatedRoot = join(root, "sdk-proof");
+  const fakeBin = join(root, "bin");
+
+  await scaffoldProject(baseConfig(generatedRoot));
+  await mkdir(join(generatedRoot, "node_modules"));
+  await mkdir(fakeBin);
+  await mkdir(join(generatedRoot, ".service"));
+  await Bun.write(
+    join(generatedRoot, ".service", "sdk.json"),
+    `${JSON.stringify(
+      {
+        mode: "local",
+        module: "buf.build/anmho/sdk-proof",
+        localPath: "./gen/waitlist/v1",
+        updatedAt: "2026-05-25T00:00:00.000Z",
+      },
+      null,
+      2
+    )}\n`
+  );
+  await writeFile(join(fakeBin, "buf"), ["#!/bin/sh", "echo denied >&2", "exit 1", ""].join("\n"));
+  await chmod(join(fakeBin, "buf"), 0o755);
+
+  const before = JSON.parse(await Bun.file(join(generatedRoot, ".service", "sdk.json")).text());
+  expect(before.mode).toBe("local");
+
+  const result = Bun.spawnSync(["bun", join(import.meta.dir, "..", "..", "..", "index.ts"), "sdk", "publish"], {
+    cwd: generatedRoot,
+    env: { ...process.env, PATH: `${fakeBin}:${process.env.PATH ?? ""}` },
+    stdout: "pipe",
+    stderr: "pipe",
+  });
+
+  expect(result.success).toBeFalse();
+  const after = JSON.parse(await Bun.file(join(generatedRoot, ".service", "sdk.json")).text());
+  expect(after.mode).toBe("local");
+});

package/templates/shared/.github/workflows/deploy.yml

@@ -19,6 +19,8 @@ jobs:
         uses: actions/setup-go@v5
         with:
           go-version: "1.25"
+      - if: ${{ '{{RUNTIME}}' == 'go' }}
+        uses: ariga/setup-atlas@v0
       - uses: google-github-actions/auth@v2
         with:
           workload_identity_provider: ${{ vars.GCP_WIF_PROVIDER }}

package/templates/shared/.github/workflows/personal.yml

@@ -25,6 +25,8 @@ jobs:
         uses: actions/setup-go@v5
         with:
           go-version: "1.25"
+      - if: ${{ '{{RUNTIME}}' == 'go' }}
+        uses: ariga/setup-atlas@v0
       - uses: google-github-actions/auth@v2
         with:
           workload_identity_provider: ${{ vars.GCP_WIF_PROVIDER }}

package/templates/shared/.github/workflows/preview.yml

@@ -30,6 +30,8 @@ jobs:
         uses: actions/setup-go@v5
         with:
           go-version: "1.25"
+      - if: ${{ '{{RUNTIME}}' == 'go' }}
+        uses: ariga/setup-atlas@v0
       - uses: google-github-actions/auth@v2
         with:
           workload_identity_provider: ${{ vars.GCP_WIF_PROVIDER }}

package/templates/shared/README.md

@@ -258,6 +258,18 @@ secrets only when you add a provider adapter. A generic adapter can honor:
 
 - `WEBHOOK_<PROVIDER>_SECRET`
 
+## ConnectRPC SDK publishing
+
+ConnectRPC service builds import the generated bindings checked into this repo
+under `gen/`. That keeps the API and worker images self-contained and does not
+change when SDK metadata changes.
+
+Use `service sdk build` after editing protobufs to regenerate local
+bindings for this service. Use `service sdk publish` to push the
+schema to the Buf Schema Registry for external consumers. A successful publish
+records the remote module in `.service/sdk.json`; it does not rewrite this
+service's Go imports away from local generated packages.
+
 ## GitHub Actions deployment
 
 The scaffold emits a minimal deployment workflow slice for Cloud Run: