everything-dev 1.53.2 → 2.0.0-rc.1

package/skills/registry/SKILL.md

@@ -0,0 +1,82 @@
+---
+name: registry
+description: Read and write the FastKV config registry efficiently — key layout, namespace=signer semantics, integrity, and composing published runtimes into the local authored config. Use when publishing configs, composing another runtime's UI/host/api/plugins, or debugging why a published config doesn't resolve.
+metadata:
+  sources: "packages/everything-dev/src/fastkv.ts,packages/everything-dev/src/publish.ts,packages/everything-dev/src/near-signer.ts,packages/everything-dev/src/registry-use.ts,packages/everything-dev/src/plugin.ts"
+---
+
+# FastKV Registry — Efficient Read & Write
+
+## The one law: namespace = transaction signer
+
+FastKV (`__fastdata_kv` on `dev.everything.near` mainnet / `dev.allthethings.testnet` testnet) has **no ACL** — anyone can write any key. Access control lives entirely in the **read indexing**: entries resolve at `/v0/latest/<contract>/<predecessor_id>/<key>`, where `predecessor_id` is the account that **signed** the write.
+
+Consequences:
+
+- A config published at `bos://<account>/<gateway>` is visible **only if signed by `<account>` itself** (FCAK or wallet/NEP-366 delegate).
+- A relayer signing its own transaction writes to the *relayer's* namespace — invisible at the publisher's bos:// URL. There is no "sign on behalf of" without the publisher's key (direct FCAK or NEP-366 delegate).
+- Reads cannot be poisoned by third parties; a leaked FCAK can only pollute its own account's namespace.
+- Every read response carries `predecessor_id`, `block_height`, `block_timestamp`, and the entry `key` — on-chain provenance for free.
+
+## Key layout
+
+```
+apps/<account>/<gateway>/bos.config.json          # a published runtime config
+nostr/<account>                                    # (contextual.near) NEAR↔nostr identity binding
+```
+
+Read URL (plain HTTP, no auth):
+
+```
+https://kv.main.fastnear.com/v0/latest/dev.everything.near/<account>/apps%2F<account>%2F<gateway>%2Fbos.config.json
+https://kv.test.fastnear.com/...                                            # testnet
+```
+
+Or in code: `fetchBosConfigFromFastKv("bos://<account>/<gateway>")` from `everything-dev/fastkv`.
+
+## Writing (bos publish)
+
+`bos publish [--deploy]` signs the registry transaction **in-process** via near-kit — no near-cli-rs, no external binary:
+
+1. Key resolution: explicit key → `NEAR_PRIVATE_KEY` / `BOS_NEAR_PRIVATE_KEY` env → `~/.near-credentials/<network>/<account>.json` (near-cli-rs compatible, via `FileKeyStore`) → near-cli-rs OS keychain (`sign-with-keychain`, interactive terminals only).
+2. The transaction is a function call on the namespace contract (`__fastdata_kv`) with `{ "apps/<account>/<gateway>/bos.config.json": "<config json>" }`, gas `300 Tgas`, deposit `0`.
+3. Publishes are **skipped** when FastKV already holds an identical config (`isConfigAlreadyPublished`) — free no-op detection before spending gas.
+4. `waitForPublishedConfig` re-reads the registry until the published value matches (confirmation, ~120s timeout).
+
+Mint the scoped signing key with `bos key generate` (function-call key restricted to `__fastdata_kv` with an allowance — the allowance bounds leak damage).
+
+## Reading / composing another runtime (bos registry use)
+
+```bash
+bos registry use v1.citynode.near/citynode.app --sections app.ui,app.host --dry-run
+bos registry use v1.citynode.near/citynode.app --sections app.ui,plugins.apps
+```
+
+- Composable sections: `app.ui`, `app.host`, `app.api`, `app.auth`, `plugins.<key>` — taken verbatim (production URL + integrity) from the published config.
+- Everything else in the local authored config (account, domain, extends, other sections) is preserved.
+- `--dry-run` previews; after writing, run `bos types gen` to refresh generated types.
+
+`extends` (inherit a whole runtime lineage) vs `registry use` (attach specific sections): extends merges the parent's config at resolution time; registry use copies concrete sections into your own config — pick extends for inheritance, registry use for à-la-carte composition.
+
+## Common mistakes
+
+- **Config "missing" after publishing with the wrong key** — the write landed under the signing account's namespace, not the config's `account`. Sign with the account named in the authored config.
+- **Editing the committed authored config URLs and expecting runtime changes** — the runtime source of truth is FastKV; the repo copy is the publish *input*.
+- **Expecting near-cli-rs for publish** — signing is in-process; near-cli-rs is only needed for `bos key generate` (interactive keychain) and account management.
+
+## The tasks you will actually be given
+
+**"Attach a section from another runtime."** `bos registry use <account>/<gateway> --sections app.ui,plugins.apps --dry-run` first, then the real run, then `bos types gen` to refresh generated types.
+
+**"Debug: my publish isn't visible."** Fetch the exact read URL (`https://kv.main.fastnear.com/v0/latest/dev.everything.near/<account>/apps%2F<account>%2F<gateway>%2Fbos.config.json`) and compare the response's `predecessor_id` to the account you signed with.
+
+**"Publish without double-spending gas."** Just run `bos publish` — `isConfigAlreadyPublished` skips identical configs before signing, and `waitForPublishedConfig` confirms the read-back (~120s timeout).
+
+## What comes back when it refuses
+
+| word | do |
+|---|---|
+| read 404 / config "missing" right after publish | the write landed under the signer's namespace, not the config's `account` — sign with the account named in the authored config (`bos key generate` FCAK, or the wallet/delegate) |
+| publish errors before signing | preflight failed — key resolution or registry URL; check `NEAR_PRIVATE_KEY` / `BOS_NEAR_PRIVATE_KEY` / `~/.near-credentials/<network>/<account>.json` |
+| `waitForPublishedConfig` timeout | the read-back didn't match within ~120s — fetch the URL by hand; if `predecessor_id` is wrong, the wrong key signed |
+| relayer-signed publish invisible | a relayer signing its own tx writes to the *relayer's* namespace — there is no sign-on-behalf; use the publisher's FCAK or a NEP-366 delegate |

package/skills/super-app/SKILL.md

@@ -2,7 +2,7 @@
 name: super-app
 description: Build shared-host, shared-API super apps with tenant-specific UI composition. Use when setting up a base runtime plus custom tenant apps, configuring fixed-core multi-tenancy, reasoning about extends-based runtime lineage, or deciding what tenants can override today.
 metadata:
-  sources: "host/src/services/tenant-runtime.ts,host/src/program.ts,host/src/services/federation.server.ts,packages/everything-dev/src/config.ts"
+  sources: "host/src/services/tenant-runtime.ts,host/src/services/binding-resolver.ts,host/src/program.ts,host/src/services/federation.server.ts,packages/everything-dev/src/config.ts"
 ---
 
 # Super Apps
@@ -64,7 +64,7 @@ bos publish --deploy
 
 ### 3. Create a descendant runtime that extends the base runtime
 
-Child runtime `bos.config.json`:
+Child runtime authored config:
 
 ```json
 {
@@ -87,20 +87,13 @@ This runtime is still a lineage child because it extends the parent, but it is a
 
 You can also override existing plugin UIs and sidebar entries for tenant-specific navigation.
 
-## Host Env For Tenant Mode
+## Host Resolution For Tenant Mode
 
-The shared host uses these env vars to resolve tenants:
+The shared host resolves tenant permissions from the API, not env vars. It fetches the tenant bindings map from the API's `GET /tenants/bindings` endpoint (cached for 30s) and applies DB-backed per-tenant permissions:
 
-```bash
-ALLOW_OVERRIDE=ui,plugins.*
-TENANT_WHITELIST=pizza.pingpayio.near,chicago.pizza.pingpayio.near
-ALLOW_UNTRUSTED_SSR=false
-```
-
-Meaning:
-- `ALLOW_OVERRIDE` controls which tenant config sections can affect request-scoped composition. Format: comma-separated list (e.g., `ui,plugins.*`) where `plugins.*` is a glob matching all plugin overrides
-- `TENANT_WHITELIST` controls which tenants may use SSR
-- `ALLOW_UNTRUSTED_SSR=true` allows SSR for any valid tenant with SSR config
+- `allow_ui_overrides` controls whether the tenant `ui` override can affect request-scoped composition
+- `allow_backend_overrides` controls whether tenant plugin UI overrides (`plugins.<id>.ui`, `plugins.<id>.sidebar`) are applied
+- `allow_ssr` controls whether the tenant may use SSR
 
 ## Resolution Rules
 
@@ -141,7 +134,7 @@ If tenant overrides are not applying as expected:
 1. **Verify the tenant config exists in FastKV**: The config must be published to `{tenantAccount}/bos/gateways/{gateway}/bos.config.json`
 2. **Check extends chain**: The tenant config must extend the base runtime via its `extends` field
 3. **Check host logs**: Run `cat .bos/logs/host.log` and look for tenant resolution messages — the host logs which runtime config it resolved for each request
-4. **Check env vars**: `ALLOW_OVERRIDE` must include the sections you're overriding (e.g., `ui` or `plugins.*`)
+4. **Check tenant permissions**: the tenant record must have the relevant allow flag set in the database (e.g., `allow_ui_overrides` for a `ui` override, `allow_backend_overrides` for plugin UI overrides)
 5. **Verify integrity**: If tenant remote URLs have integrity hashes, the host validates them — mismatches cause rejection
 6. **Missing tenant config**: If the tenant config is not found in FastKV, the host silently serves the base runtime config without tenant overrides — no error is surfaced to the browser
 
@@ -175,3 +168,20 @@ After publishing config changes that affect the base host runtime, restart the h
 - Use `everything-dev#extends-config` for deep-merge and resolved-config semantics.
 - Use `everything-dev#publish-sync` for publish and deploy steps.
 - Use this `super-app` skill when the question is specifically about the shared-host, shared-API multi-tenant architecture.
+
+## The tasks you will actually be given
+
+**"Set up a shared-host tenant."** Base: `bos init --overrides ui,api,host` then `bos publish --deploy`. Child: authored config with `extends` + its own `account`/`domain`, override `app.ui` only, publish it; register the tenant row with the right allow flags in the DB.
+
+**"Tenant overrides are not applying."** Walk the checklist in order: config exists in FastKV → extends the base runtime → tenant record allow flags set → host logs (`cat .bos/logs/host.log`) → integrity hashes on the tenant remotes valid.
+
+**"This tenant needs SSR."** Set `allow_ssr` on the tenant record — the host's BindingResolver reads permissions from `GET /tenants/bindings` (cached 30s); without the flag the tenant falls back to client rendering.
+
+## What comes back when it refuses
+
+| word | do |
+|---|---|
+| tenant config missing in FastKV | the host silently serves the base runtime — no error surfaces to the browser; verify the published path and the signer namespace |
+| `Tenant resolution is unavailable: the API plugin failed to load` | the BindingResolver can't reach `/api/tenants/bindings` — check `GET /api/_health` and the startup plugin-load errors, republish the API |
+| integrity rejection of a tenant remote | HTML/SSR requests block immediately, assets fall back — redeploy the tenant bundle and republish so the SRI matches |
+| overrides still stale after publishing | the host boots one base snapshot and caches tenant configs — restart the host (or wait out the cache TTL) |

package/skills/talk-to-the-app/SKILL.md

@@ -0,0 +1,138 @@
+---
+name: talk-to-the-app
+description: Work a running everything.dev app over its API without cloning it — MCP tools, REST/OpenAPI, oRPC RPC, plugin RPC, API-key authentication, and discovery endpoints. Use when an agent needs to read or write app data (registry, proposals, votes, auth session, AI chat) over HTTP, choose between MCP/REST/RPC surfaces, or debug authentication and refused calls.
+metadata:
+  sources: "host/src/routes/api.ts,host/src/services/mcp.ts,ui/public/skill.md,plugins/registry/src/contract.ts,plugins/proposals/src/contract.ts,plugins/votes/src/contract.ts,plugins/ai/src/contract.ts,api/src/contract.ts"
+---
+
+# Talk to the app
+
+You act against a **running everything.dev instance** — no clone, no build.
+Every operation in the app's API is reachable four ways; they differ only in
+transport. The data is identical.
+
+## Read this page, then choose a surface
+
+| The task in front of you | Use |
+|---|---|
+| An MCP client (Claude, Cursor, …) drives the whole API | [MCP](#mcp) |
+| A script or curl one-off — GET/POST against documented paths | [REST](#rest-openapi) |
+| A typed JSON-RPC call by procedure name | [oRPC RPC](#orpc-rpc) |
+| Anything else: rate limits, auth failures, which surface failed | this file |
+
+**Load the skill for the task in front of you; do not load them all.**
+
+## Facts every call relies on
+
+| | local dev | production |
+|---|---|---|
+| API base | `http://localhost:3001` | the app's origin (`/api/*` is same-origin) |
+| REST path | `<api-base>/api/<path>` | `<origin>/api/<path>` |
+| oRPC RPC | `<api-base>/api/rpc/...` | `<origin>/api/rpc/...` |
+| MCP | `POST <api-base>/api/mcp` | `POST <origin>/api/mcp` |
+| Auth header | `x-api-key: api_...` | same |
+
+There is no network parameter anywhere — the origin is the choice.
+
+## Authentication
+
+All API operations require authentication. Use an **API key**:
+
+1. Sign in with your NEAR wallet (SIWN) at the app.
+2. Navigate to **Settings → API Keys** at `/settings/api-keys`.
+3. Create a new key — the full secret (`api_...`) is shown once, copy it immediately.
+4. Pass it on every request:
+
+```
+x-api-key: api_your_key_here
+```
+
+The header works for `/api/*` (REST), `/api/rpc/*` (oRPC RPC), and `/api/mcp`
+(MCP). Keys carry optional permissions; a call outside them refuses with 403.
+
+## MCP
+
+Streamable HTTP, stateless — no session ID required:
+
+```
+POST /api/mcp
+```
+
+Connect your MCP client to `<origin>/api/mcp`. Tools are auto-generated from
+the API's OpenAPI spec, so every API operation — including auth, relay, and
+API-key management — appears as a typed tool. Discovery:
+
+```
+GET /.well-known/mcp.json
+```
+
+Returns the server name, endpoint URL, and auth scheme.
+
+## REST / OpenAPI
+
+- **API docs UI**: `GET /api` (Scalar reference)
+- **OpenAPI spec**: `GET /api/spec.json`
+- REST paths are the contract paths under `/api`:
+
+| operation | path |
+|---|---|
+| health | `GET /api/ping` |
+| published registry apps | `GET /api/v1/registry/apps` |
+| one registry app | `GET /api/v1/registry/apps/{accountId}/{gatewayId}` |
+| registry status | `GET /api/v1/registry/status` |
+| proposals lifecycle | `POST /api/v1/proposals`, `.../approve`, `.../reject`, `.../reopen` |
+| upvotes | `POST /api/v1/upvotes`, `GET /api/v1/upvotes/{entityId}/count` |
+| AI chat | `POST /api/v1/chat` (streaming) |
+
+## oRPC RPC
+
+Typed JSON-RPC by procedure name, one mount per plugin:
+
+```
+POST /api/rpc/{plugin}/{procedure}
+Content-Type: application/json
+
+["input-or-array"]
+```
+
+- `POST /api/rpc/ping` — the API shell (mounted at the root)
+- `POST /api/rpc/registry/listRegistryApps` — registry plugin
+- `POST /api/rpc/auth/getSession` — auth plugin (special-cased mount)
+- AI chat streaming lives at `POST /api/rpc/ai/chat`
+
+## The tasks you will actually be given
+
+**"What can this app do?"** Read `GET /api/spec.json` — it is the full typed
+surface, and the MCP tools are generated from exactly it.
+
+**"List the published apps."** `GET /api/v1/registry/apps` (or the
+`listRegistryApps` MCP tool). Paginate with `limit`.
+
+**"Check my identity / session."** `POST /api/rpc/auth/getSession` with the key.
+An empty session means the key's owner has no active browser session — keys
+identify the user, they do not create sessions.
+
+**"Vote on / read the voting feed."** Counts and reads via
+`/api/v1/upvotes/*`; casting needs the session of a signed-in user or a key
+with write permission.
+
+## Rules to work by
+
+- **Read before writing.** `GET /api/spec.json` first; every write route names
+  its auth requirement in the spec.
+- **A key is not a session.** `x-api-key` identifies an owner; sign-in flows
+  (`better-near-auth#client`) create sessions. Use the key for agent work.
+- **One failed call is information.** See below before retrying.
+
+## What comes back when it refuses
+
+| status | do |
+|---|---|
+| `401` | no or bad key — re-read `/settings/api-keys`; check the `x-api-key` header reached the request |
+| `403` | the key lacks permission — the owner edits the key's permissions; do not retry unchanged |
+| `404` | wrong surface or path — re-check `/api/spec.json`; plugin RPC mounts are `/api/rpc/<pluginKey>` |
+| `429` | rate limited — wait as the response says, then once more |
+| `5xx` | repeat later; on a write it may have been made — read first to confirm |
+
+A refused write changes nothing: verify by reading, then repeat only if
+nothing is there.

package/skills/ui-integration/SKILL.md

@@ -2,7 +2,7 @@
 name: ui-integration
 description: Route creation, API client usage, auth client, SSR hydration, sidebar system, and the @/app module surface. Use when adding new UI routes, fetching data from the API, implementing auth flows, or customizing sidebar navigation.
 metadata:
-  sources: "ui/src/app.ts,ui/src/lib/api.ts,ui/src/lib/auth.ts,ui/src/router.tsx,ui/src/router.server.tsx,ui/src/hydrate.tsx,ui/src/routes/__root.tsx,ui/src/routes/_layout.tsx,ui/src/routes/_layout/_authenticated.tsx"
+  sources: "ui/src/app.ts,ui/src/lib/api.ts,ui/src/lib/auth.ts,ui/src/router.tsx,ui/src/routes/__root.tsx,ui/src/routes/_authenticated.tsx"
 ---
 
 # UI Integration
@@ -32,8 +32,8 @@ ui/src/routes/
 
 - Files starting with `_` are **layout** routes (parent components with `<Outlet />`)
 - Files starting with `_` followed by a path segment are **nested layouts**
-- Regular files become path segments (e.g., `settings.tsx` → `/settings`)
-- Directories create nested paths (e.g., `_authenticated/settings.tsx` → `/settings` inside the auth guard)
+- Regular files become path segments (e.g., `ui/src/routes/_public/about.tsx` → `/about`)
+- Directories create nested paths (e.g., a `_dashboard/` directory nests its files beneath `/dashboard` inside the auth guard)
 
 ### Basic Route
 
@@ -116,7 +116,7 @@ These are SSR-safe — they accept an optional `RuntimeConfigInput` to work with
 
 ### Creation
 
-The client is created once in `hydrate.tsx` and stored in the Router context:
+The client is created once in the client bootstrap and stored in the Router context:
 
 ```ts
 const apiClient = createApiClient({
@@ -185,7 +185,7 @@ try {
 
 ### Creation
 
-The auth client is also created once in `hydrate.tsx`:
+The auth client is also created once in the client bootstrap:
 
 ```ts
 const authClient = createAuthClient(runtimeConfig);
@@ -271,7 +271,7 @@ Nest routes under `_layout/_authenticated/` to inherit this guard. Unauthenticat
 
 ## Sidebar System
 
-Sidebar items are defined inline in `ui/src/routes/_layout.tsx` as a `sidebarItems` array:
+Sidebar items are defined inline in `ui/src/components/layout/nav-items.ts` as a `NAV_ITEMS` array:
 
 ```ts
 import { Globe, Home } from "lucide-react";
@@ -308,16 +308,80 @@ Add items manually to the `sidebarItems` array. Available icons: any `lucide-rea
 
 ## SSR Architecture
 
-### Client Bootstrap (`hydrate.tsx`)
+The ui surface splits by ownership (ADR 0023): the app owns `router.tsx` (the
+router factory — notFound/pending/error components and query timings) and
+`app.ts`; the mechanical bootstrap files are generated `.gen` stubs
+(`entry.gen.ts`, `hydrate.gen.tsx`, `router.server.gen.tsx`, `compose.gen.ts`,
+`globals.gen.ts`), gitignored and regenerated by `bos dev`/`build`/`typecheck`
+from the installed framework version. Never edit the generated files.
+
+### Router Customization (`router.tsx` — yours)
+
+The hydrated client router AND each SSR request's router mint through the
+app's authored factory, so router policy is set in one place:
+
+```tsx
+// ui/src/router.tsx
+export function createRouter(opts: CreateRouterOptions) {
+  return createCoreRouter<ApiClient, SessionData, typeof routeTree>({
+    ...opts,
+    defaultRouteTree: routeTree,
+    // notFoundComponent, errorComponent, scrollRestoration, …
+  });
+}
+
+export function createQueryClient(): QueryClient {
+  return new QueryClient({
+    defaultOptions: { queries: { staleTime: 5 * 60 * 1000, gcTime: 30 * 60 * 1000 } },
+  });
+}
+```
+
+Default components: set `defaultErrorComponent` / `defaultPendingComponent` /
+`defaultNotFoundComponent` inside `createRouter` after the `...opts` spread —
+your values win, and both client and SSR pick them up (SSR parity).
+
+### App Overrides (`app.ts` — yours)
+
+The generated stubs read two override exports from `app.ts` — customize the
+values there, never in the stubs:
+
+```ts
+// ui/src/app.ts
+import type { ApiConnectionErrorCopy } from "everything-dev/ui/api";
+import type { LocaleOptions } from "everything-dev/ui/i18n";
+import {
+  type AppLocale,
+  APP_LOCALES,
+  APP_LOCALE_COOKIE,
+  DEFAULT_APP_LOCALE,
+} from "./i18n/catalogs";
+
+export const appLocale: LocaleOptions<AppLocale> = {
+  locales: APP_LOCALES,
+  defaultLocale: DEFAULT_APP_LOCALE,
+  cookieName: APP_LOCALE_COOKIE,
+};
+
+export const apiConnectionError: ApiConnectionErrorCopy = () => ({
+  title: "…",
+  description: "…",
+});
+```
+
+`appLocale` feeds SSR locale negotiation (cookie + Accept-Language);
+`apiConnectionError` is the localized API connection-failure toast copy.
+
+### Client Bootstrap (`hydrate.gen.tsx` — generated)
 
 1. Reads `window.__RUNTIME_CONFIG__`
-2. Creates `QueryClient`, `ApiClient`, `AuthClient`
-3. Creates TanStack Router with browser history
+2. Composes the route tree from the compose payload (core + plugin manifests)
+3. Mints the router and query client through the app's `router.tsx` factories
 4. Hydrates React DOM into the HTML shell
 
-### Server-Side (`router.server.tsx`)
+### Server-Side (`router.server.gen.tsx` — generated)
 
-1. Creates request-scoped router with memory history
+1. Creates request-scoped routers through the same app factory (SSR parity)
 2. Creates per-request `apiClient` and `authClient`
 3. Renders to stream via TanStack Router SSR's `createRequestHandler`
 4. Host calls `loadRouterModule()` to dynamically load the SSR bundle
@@ -380,3 +444,21 @@ function Component() {
 - Shared UI components: `ui/src/components/ui/` — semantic, reusable primitives
 - Feature components: colocated with the route that uses them
 - Exports from `ui/src/components/index.ts` for shared components
+
+## The tasks you will actually be given
+
+**"Add a page that lists data."** File under `ui/src/routes/` (nest under `_layout/_authenticated/` to inherit the guard) → `loader` calls `apiClient.<plugin>.<proc>(...)` from context → component reads `Route.useLoaderData()` → add the sidebar entry in `ui/src/components/layout/nav-items.ts`.
+
+**"Add an auth-only page."** Nest under `_layout/_authenticated/` — the guard's `beforeLoad` already redirects to `/login?redirect=<path>`; return `{ auth: … }` from `beforeLoad` to type the context downstream.
+
+**"Call the API in a component."** `const apiClient = useApiClient()` for one-shot calls; `const orpc = useOrpc()` when you want `useQuery`/`useMutation` caching.
+
+## What comes back when it fails
+
+| word | do |
+|---|---|
+| `ORPCError` with `code: "UNAUTHORIZED"` in the browser | the session middleware resolved nulls — check `authClient.getSession()`; if the guard should have caught it, verify the route actually nests under `_layout/_authenticated/` |
+| `Route.` or `apiClient.<plugin>` has no types | generated types are stale — `pnpm run typecheck` (regenerates `api-types.gen.ts`) or restart `bos dev` |
+| `TimeoutError` on `page.waitForURL` after a `<Link>` click (browser tests) | client-side nav never fires `load` — pass `{ waitUntil: "commit" }` |
+| client-only value crashes SSR | wrap it: `useClientValue(() => getAppName(), "app")` from `@/hooks` |
+| edits to `*.gen.*` files keep vanishing | they are generated stubs — change the source (`router.tsx`, `app.ts`, the contracts) instead |

package/dist/cli/db-studio.cjs

@@ -1,131 +0,0 @@
-const require_runtime = require('../_virtual/_rolldown/runtime.cjs');
-const require_db = require('../db.cjs');
-let node_fs = require("node:fs");
-let node_path = require("node:path");
-let _clack_prompts = require("@clack/prompts");
-_clack_prompts = require_runtime.__toESM(_clack_prompts, 1);
-let node_child_process = require("node:child_process");
-
-//#region src/cli/db-studio.ts
-function resolvePluginDbInfo(pluginKey, runtimeConfig, projectDir) {
-	let source;
-	let section;
-	let secrets;
-	let localPath;
-	let key;
-	if (pluginKey === "api" && runtimeConfig.api) {
-		source = runtimeConfig.api.source;
-		section = "app.api";
-		secrets = runtimeConfig.api.secrets;
-		localPath = runtimeConfig.api.localPath;
-		key = "api";
-	} else if (pluginKey === "auth" && runtimeConfig.auth) {
-		source = runtimeConfig.auth.source;
-		section = "app.auth";
-		secrets = runtimeConfig.auth.secrets;
-		localPath = runtimeConfig.auth.localPath;
-		key = "auth";
-	} else if (runtimeConfig.plugins?.[pluginKey]) {
-		const plugin = runtimeConfig.plugins[pluginKey];
-		source = plugin.source;
-		section = "plugins";
-		secrets = plugin.secrets;
-		localPath = plugin.localPath;
-		key = pluginKey;
-	} else throw new Error(`Plugin "${pluginKey}" not found in app.api, app.auth, or plugins. Available: ${[
-		"api",
-		...runtimeConfig.auth ? ["auth"] : [],
-		...Object.keys(runtimeConfig.plugins ?? {})
-	].join(", ")}`);
-	const dbSecret = secrets?.find((s) => s.endsWith("_DATABASE_URL"));
-	if (!dbSecret) throw new Error(`Plugin "${pluginKey}" has no database secret (no secret ending in _DATABASE_URL). Secrets: ${(secrets ?? []).join(", ") || "none"}`);
-	const dbUrl = process.env[dbSecret];
-	if (!dbUrl) throw new Error(`.env missing ${dbSecret} for plugin "${pluginKey}". Add it to your .env file (see .env.example).`);
-	return {
-		key,
-		source: source ?? "remote",
-		section,
-		databaseSecret: dbSecret,
-		databaseUrl: dbUrl,
-		workspaceDir: localPath,
-		projectDir
-	};
-}
-async function runStudioLocal(info) {
-	const workspaceRoot = info.workspaceDir ? (0, node_path.resolve)(info.projectDir, info.workspaceDir) : (0, node_path.resolve)(info.projectDir, info.key);
-	const configPath = (0, node_path.join)(workspaceRoot, "drizzle.config.ts");
-	if (!(0, node_fs.existsSync)(configPath)) throw new Error(`No drizzle.config.ts found in ${workspaceRoot}. Run 'drizzle-kit init' first in the plugin workspace.`);
-	_clack_prompts.log.info(`Starting Drizzle Studio for ${info.key} (local)...`);
-	await spawnAsync("npx", [
-		"drizzle-kit",
-		"studio",
-		"--config",
-		configPath
-	], { cwd: workspaceRoot });
-}
-async function runStudioRemote(info) {
-	const dbDir = (0, node_path.resolve)(info.projectDir, ".bos", "db", info.key);
-	(0, node_fs.mkdirSync)(dbDir, { recursive: true });
-	const storage = require_db.getMigrationStorage(require_db.pluginMigrationSlug(info.key));
-	const journalSchema = storage.schema;
-	const journalTable = storage.table;
-	const configPath = (0, node_path.join)(dbDir, "drizzle.config.ts");
-	(0, node_fs.writeFileSync)(configPath, `import { defineConfig } from "drizzle-kit";
-
-export default defineConfig({
-  schema: "./drizzle/schema.ts",
-  out: "./drizzle",
-  dialect: "postgresql",
-  dbCredentials: {
-    url: "${info.databaseUrl}",
-  },
-  migrations: {
-    schema: "${journalSchema}",
-    table: "${journalTable}",
-  },
-  verbose: true,
-  strict: true,
-});
-`);
-	_clack_prompts.log.info(`Introspecting database schema for ${info.key}...`);
-	try {
-		await spawnAsync("npx", [
-			"drizzle-kit",
-			"pull",
-			"--config",
-			configPath
-		], { cwd: dbDir });
-	} catch {
-		throw new Error(`Failed to introspect database for "${info.key}". Check that ${info.databaseSecret} is correct and the database is reachable.`);
-	}
-	_clack_prompts.log.info(`Starting Drizzle Studio for ${info.key}...`);
-	await spawnAsync("npx", [
-		"drizzle-kit",
-		"studio",
-		"--config",
-		configPath
-	], { cwd: dbDir });
-}
-function spawnAsync(cmd, args, options) {
-	return new Promise((resolvePromise, reject) => {
-		const child = (0, node_child_process.spawn)(cmd, args, {
-			cwd: options.cwd,
-			stdio: "inherit",
-			shell: true
-		});
-		child.on("error", (err) => {
-			if (err.code === "ENOENT") reject(/* @__PURE__ */ new Error(`"${cmd}" not found. Ensure it is installed (e.g. 'npm install -g drizzle-kit').`));
-			else reject(/* @__PURE__ */ new Error(`Failed to start ${cmd}: ${err.message}`));
-		});
-		child.on("exit", (code) => {
-			if (code === 0 || code === null) resolvePromise();
-			else reject(/* @__PURE__ */ new Error(`"${cmd}" exited with code ${code}`));
-		});
-	});
-}
-
-//#endregion
-exports.resolvePluginDbInfo = resolvePluginDbInfo;
-exports.runStudioLocal = runStudioLocal;
-exports.runStudioRemote = runStudioRemote;
-//# sourceMappingURL=db-studio.cjs.map

package/dist/cli/db-studio.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"db-studio.cjs","names":["getMigrationStorage","pluginMigrationSlug"],"sources":["../../src/cli/db-studio.ts"],"sourcesContent":["import { spawn } from \"node:child_process\";\nimport { existsSync, mkdirSync, writeFileSync } from \"node:fs\";\nimport { join, resolve } from \"node:path\";\nimport * as p from \"@clack/prompts\";\nimport { getMigrationStorage, pluginMigrationSlug } from \"../db\";\nimport type { RuntimeConfig } from \"../types\";\n\nexport interface PluginDbInfo {\n  key: string;\n  source: \"local\" | \"remote\";\n  section: \"app.api\" | \"app.auth\" | \"plugins\";\n  databaseSecret: string;\n  databaseUrl: string;\n  workspaceDir?: string;\n  projectDir: string;\n}\n\nexport function resolvePluginDbInfo(\n  pluginKey: string,\n  runtimeConfig: RuntimeConfig,\n  projectDir: string,\n): PluginDbInfo {\n  let source: \"local\" | \"remote\" | undefined;\n  let section: PluginDbInfo[\"section\"];\n  let secrets: string[] | undefined;\n  let localPath: string | undefined;\n  let key: string;\n\n  if (pluginKey === \"api\" && runtimeConfig.api) {\n    source = runtimeConfig.api.source;\n    section = \"app.api\";\n    secrets = runtimeConfig.api.secrets;\n    localPath = runtimeConfig.api.localPath;\n    key = \"api\";\n  } else if (pluginKey === \"auth\" && runtimeConfig.auth) {\n    source = runtimeConfig.auth.source;\n    section = \"app.auth\";\n    secrets = runtimeConfig.auth.secrets;\n    localPath = runtimeConfig.auth.localPath;\n    key = \"auth\";\n  } else if (runtimeConfig.plugins?.[pluginKey]) {\n    const plugin = runtimeConfig.plugins[pluginKey];\n    source = plugin.source;\n    section = \"plugins\";\n    secrets = plugin.secrets;\n    localPath = plugin.localPath;\n    key = pluginKey;\n  } else {\n    throw new Error(\n      `Plugin \"${pluginKey}\" not found in app.api, app.auth, or plugins. ` +\n        `Available: ${[\n          \"api\",\n          ...(runtimeConfig.auth ? [\"auth\"] : []),\n          ...Object.keys(runtimeConfig.plugins ?? {}),\n        ].join(\", \")}`,\n    );\n  }\n\n  const dbSecret = secrets?.find((s) => s.endsWith(\"_DATABASE_URL\"));\n  if (!dbSecret) {\n    throw new Error(\n      `Plugin \"${pluginKey}\" has no database secret (no secret ending in _DATABASE_URL). ` +\n        `Secrets: ${(secrets ?? []).join(\", \") || \"none\"}`,\n    );\n  }\n\n  const dbUrl = process.env[dbSecret];\n  if (!dbUrl) {\n    throw new Error(\n      `.env missing ${dbSecret} for plugin \"${pluginKey}\". ` +\n        `Add it to your .env file (see .env.example).`,\n    );\n  }\n\n  return {\n    key,\n    source: source ?? \"remote\",\n    section,\n    databaseSecret: dbSecret,\n    databaseUrl: dbUrl,\n    workspaceDir: localPath,\n    projectDir,\n  };\n}\n\nexport async function runStudioLocal(info: PluginDbInfo): Promise<void> {\n  const workspaceRoot = info.workspaceDir\n    ? resolve(info.projectDir, info.workspaceDir)\n    : resolve(info.projectDir, info.key);\n  const configPath = join(workspaceRoot, \"drizzle.config.ts\");\n\n  if (!existsSync(configPath)) {\n    throw new Error(\n      `No drizzle.config.ts found in ${workspaceRoot}. ` +\n        `Run 'drizzle-kit init' first in the plugin workspace.`,\n    );\n  }\n\n  p.log.info(`Starting Drizzle Studio for ${info.key} (local)...`);\n\n  await spawnAsync(\"npx\", [\"drizzle-kit\", \"studio\", \"--config\", configPath], {\n    cwd: workspaceRoot,\n  });\n}\n\nexport async function runStudioRemote(info: PluginDbInfo): Promise<void> {\n  const dbDir = resolve(info.projectDir, \".bos\", \"db\", info.key);\n\n  mkdirSync(dbDir, { recursive: true });\n\n  const storage = getMigrationStorage(pluginMigrationSlug(info.key));\n  const journalSchema = storage.schema;\n  const journalTable = storage.table;\n\n  const configPath = join(dbDir, \"drizzle.config.ts\");\n  const configContent = `import { defineConfig } from \"drizzle-kit\";\n\nexport default defineConfig({\n  schema: \"./drizzle/schema.ts\",\n  out: \"./drizzle\",\n  dialect: \"postgresql\",\n  dbCredentials: {\n    url: \"${info.databaseUrl}\",\n  },\n  migrations: {\n    schema: \"${journalSchema}\",\n    table: \"${journalTable}\",\n  },\n  verbose: true,\n  strict: true,\n});\n`;\n\n  writeFileSync(configPath, configContent);\n\n  p.log.info(`Introspecting database schema for ${info.key}...`);\n  try {\n    await spawnAsync(\"npx\", [\"drizzle-kit\", \"pull\", \"--config\", configPath], {\n      cwd: dbDir,\n    });\n  } catch {\n    throw new Error(\n      `Failed to introspect database for \"${info.key}\". ` +\n        `Check that ${info.databaseSecret} is correct and the database is reachable.`,\n    );\n  }\n\n  p.log.info(`Starting Drizzle Studio for ${info.key}...`);\n  await spawnAsync(\"npx\", [\"drizzle-kit\", \"studio\", \"--config\", configPath], {\n    cwd: dbDir,\n  });\n}\n\nfunction spawnAsync(cmd: string, args: string[], options: { cwd: string }): Promise<void> {\n  return new Promise((resolvePromise, reject) => {\n    const child = spawn(cmd, args, {\n      cwd: options.cwd,\n      stdio: \"inherit\",\n      shell: true,\n    });\n\n    child.on(\"error\", (err) => {\n      if ((err as NodeJS.ErrnoException).code === \"ENOENT\") {\n        reject(\n          new Error(\n            `\"${cmd}\" not found. Ensure it is installed (e.g. 'npm install -g drizzle-kit').`,\n          ),\n        );\n      } else {\n        reject(new Error(`Failed to start ${cmd}: ${err.message}`));\n      }\n    });\n\n    child.on(\"exit\", (code) => {\n      if (code === 0 || code === null) {\n        resolvePromise();\n      } else {\n        reject(new Error(`\"${cmd}\" exited with code ${code}`));\n      }\n    });\n  });\n}\n"],"mappings":";;;;;;;;;AAiBA,SAAgB,oBACd,WACA,eACA,YACc;CACd,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;CAEJ,IAAI,cAAc,SAAS,cAAc,KAAK;EAC5C,SAAS,cAAc,IAAI;EAC3B,UAAU;EACV,UAAU,cAAc,IAAI;EAC5B,YAAY,cAAc,IAAI;EAC9B,MAAM;CACR,OAAO,IAAI,cAAc,UAAU,cAAc,MAAM;EACrD,SAAS,cAAc,KAAK;EAC5B,UAAU;EACV,UAAU,cAAc,KAAK;EAC7B,YAAY,cAAc,KAAK;EAC/B,MAAM;CACR,OAAO,IAAI,cAAc,UAAU,YAAY;EAC7C,MAAM,SAAS,cAAc,QAAQ;EACrC,SAAS,OAAO;EAChB,UAAU;EACV,UAAU,OAAO;EACjB,YAAY,OAAO;EACnB,MAAM;CACR,OACE,MAAM,IAAI,MACR,WAAW,UAAU,2DACL;EACZ;EACA,GAAI,cAAc,OAAO,CAAC,MAAM,IAAI,CAAC;EACrC,GAAG,OAAO,KAAK,cAAc,WAAW,CAAC,CAAC;CAC5C,CAAC,CAAC,KAAK,IAAI,GACf;CAGF,MAAM,WAAW,SAAS,MAAM,MAAM,EAAE,SAAS,eAAe,CAAC;CACjE,IAAI,CAAC,UACH,MAAM,IAAI,MACR,WAAW,UAAU,0EACN,WAAW,CAAC,EAAC,CAAE,KAAK,IAAI,KAAK,QAC9C;CAGF,MAAM,QAAQ,QAAQ,IAAI;CAC1B,IAAI,CAAC,OACH,MAAM,IAAI,MACR,gBAAgB,SAAS,eAAe,UAAU,gDAEpD;CAGF,OAAO;EACL;EACA,QAAQ,UAAU;EAClB;EACA,gBAAgB;EAChB,aAAa;EACb,cAAc;EACd;CACF;AACF;AAEA,eAAsB,eAAe,MAAmC;CACtE,MAAM,gBAAgB,KAAK,sCACf,KAAK,YAAY,KAAK,YAAY,2BAClC,KAAK,YAAY,KAAK,GAAG;CACrC,MAAM,iCAAkB,eAAe,mBAAmB;CAE1D,IAAI,yBAAY,UAAU,GACxB,MAAM,IAAI,MACR,iCAAiC,cAAc,wDAEjD;CAGF,eAAE,IAAI,KAAK,+BAA+B,KAAK,IAAI,YAAY;CAE/D,MAAM,WAAW,OAAO;EAAC;EAAe;EAAU;EAAY;CAAU,GAAG,EACzE,KAAK,cACP,CAAC;AACH;AAEA,eAAsB,gBAAgB,MAAmC;CACvE,MAAM,+BAAgB,KAAK,YAAY,QAAQ,MAAM,KAAK,GAAG;CAE7D,uBAAU,OAAO,EAAE,WAAW,KAAK,CAAC;CAEpC,MAAM,UAAUA,+BAAoBC,+BAAoB,KAAK,GAAG,CAAC;CACjE,MAAM,gBAAgB,QAAQ;CAC9B,MAAM,eAAe,QAAQ;CAE7B,MAAM,iCAAkB,OAAO,mBAAmB;CAmBlD,2BAAc,YAAY;;;;;;;YAXhB,KAAK,YAAY;;;eAGd,cAAc;cACf,aAAa;;;;;CAOc;CAEvC,eAAE,IAAI,KAAK,qCAAqC,KAAK,IAAI,IAAI;CAC7D,IAAI;EACF,MAAM,WAAW,OAAO;GAAC;GAAe;GAAQ;GAAY;EAAU,GAAG,EACvE,KAAK,MACP,CAAC;CACH,QAAQ;EACN,MAAM,IAAI,MACR,sCAAsC,KAAK,IAAI,gBAC/B,KAAK,eAAe,2CACtC;CACF;CAEA,eAAE,IAAI,KAAK,+BAA+B,KAAK,IAAI,IAAI;CACvD,MAAM,WAAW,OAAO;EAAC;EAAe;EAAU;EAAY;CAAU,GAAG,EACzE,KAAK,MACP,CAAC;AACH;AAEA,SAAS,WAAW,KAAa,MAAgB,SAAyC;CACxF,OAAO,IAAI,SAAS,gBAAgB,WAAW;EAC7C,MAAM,sCAAc,KAAK,MAAM;GAC7B,KAAK,QAAQ;GACb,OAAO;GACP,OAAO;EACT,CAAC;EAED,MAAM,GAAG,UAAU,QAAQ;GACzB,IAAK,IAA8B,SAAS,UAC1C,uBACE,IAAI,MACF,IAAI,IAAI,yEACV,CACF;QAEA,uBAAO,IAAI,MAAM,mBAAmB,IAAI,IAAI,IAAI,SAAS,CAAC;EAE9D,CAAC;EAED,MAAM,GAAG,SAAS,SAAS;GACzB,IAAI,SAAS,KAAK,SAAS,MACzB,eAAe;QAEf,uBAAO,IAAI,MAAM,IAAI,IAAI,qBAAqB,MAAM,CAAC;EAEzD,CAAC;CACH,CAAC;AACH"}