gencow 0.1.230 → 0.1.232

package/core/index.js

@@ -3016,6 +3016,7 @@ var RESERVED_TENANT_RUNTIME_ENV_KEYS = [
   "GENCOW_PLATFORM_DB",
   "GENCOW_MANAGED_PUBLIC_ORIGINS",
   "PLATFORM_OPENAI_KEY",
+  "PLATFORM_OPENROUTER_KEY",
   "PLATFORM_GOOGLE_KEY",
   "PLATFORM_GOOGLE_CLIENT_ID",
   "PLATFORM_GOOGLE_CLIENT_SECRET",

package/lib/db-push-command.mjs

@@ -445,7 +445,9 @@ function createDbMigrationCommand(deps, command) {
         emitFailure(
           error?.code === "MIGRATION_BUNDLE_LOCAL_INTEGRITY_FAILED"
             ? buildLocalBundleIntegrityFailureDiagnostic(clientCorrelationId())
-            : buildClientBundleFailureDiagnostic(clientCorrelationId(), retryCommand),
+            : error?.code === "MIGRATION_BUNDLE_SCHEMA_CHANGE_WITHOUT_FORWARD_MIGRATION"
+              ? buildClientUserFixableDiagnostic(error.code, clientCorrelationId())
+              : buildClientBundleFailureDiagnostic(clientCorrelationId(), retryCommand),
         );
         return;
       }

package/lib/deploy-package-runtime.mjs

@@ -42,6 +42,7 @@ import {
 } from "./deploy-lockfile-selection.mjs";
 import { detectProjectConfigFile, warnProjectConfigSelectionOnce } from "./project-config-selection.mjs";
 import { writeCanonicalDeployBundle } from "./deploy-bundle-staging.mjs";
+import { buildClientUserFixableDiagnostic } from "./migration-client-diagnostic.mjs";
 
 async function loadProjectConfigDefault(options) {
   const { loadConfig } = await import("./cli-project-runtime.mjs");
@@ -484,7 +485,15 @@ export function createDeployPackageRuntime({
         writeFileSyncImpl,
       }));
     } catch (caught) {
-      errorImpl(`Packaging failed: ${caught.message}`);
+      if (caught?.code === "MIGRATION_BUNDLE_SCHEMA_CHANGE_WITHOUT_FORWARD_MIGRATION") {
+        for (const line of renderMigrationDiagnosticLines(
+          buildClientUserFixableDiagnostic(caught.code, `client-${Date.now()}`),
+        )) {
+          errorImpl(line);
+        }
+      } else {
+        errorImpl(`Packaging failed: ${caught.message}`);
+      }
       exitImpl(1);
       cleanupPreparedDeploySource();
       return null;

package/lib/dev-cloud-command.mjs

@@ -25,7 +25,12 @@ import {
 import { emitMigrationAdvisories, emitMigrationResponsibilityNotice } from "./migration-advisory.mjs";
 import { resolveCreatedAppResponse } from "./app-create-response.mjs";
 import { readProjectDisplayName } from "./cli-project-runtime.mjs";
-import { getCliInvocationSelection, resolveProjectMetadataPath, resolveProjectSelection } from "./project-context.mjs";
+import {
+  getCliInvocationSelection,
+  resolveProjectMetadataPath,
+  resolveProjectSelection,
+} from "./project-context.mjs";
+import { buildClientUserFixableDiagnostic } from "./migration-client-diagnostic.mjs";
 
 export function resolveDevCloudAppName({
   cloudArgs,
@@ -264,20 +269,35 @@ export function createDevCloudCommand(deps) {
         ({ createDevCloudDeployBundle: createDevCloudDeployBundleImpl } =
           await import("./dev-cloud-bundle.mjs"));
       }
-      const { bundle, auditMessage } = await createDevCloudDeployBundleImpl({
-        cwd: projectDir,
-        rootDir: functionsDir,
-        envFile: config.envFile,
-        cliVersion: deps.cliVersion ?? "0.0.0",
-        generatorVersion: migrationGeneratorVersion,
-        config,
-        existsSyncImpl: deps.existsSyncImpl,
-        mkdirSyncImpl: deps.mkdirSyncImpl,
-        readFileSyncImpl: deps.readFileSyncImpl,
-        resolvePathImpl: deps.resolvePathImpl,
-        warnImpl: deps.warnImpl,
-        writeFileSyncImpl: deps.writeFileSyncImpl,
-      });
+      let bundle;
+      let auditMessage;
+      try {
+        ({ bundle, auditMessage } = await createDevCloudDeployBundleImpl({
+          cwd: projectDir,
+          rootDir: functionsDir,
+          envFile: config.envFile,
+          cliVersion: deps.cliVersion ?? "0.0.0",
+          generatorVersion: migrationGeneratorVersion,
+          config,
+          existsSyncImpl: deps.existsSyncImpl,
+          mkdirSyncImpl: deps.mkdirSyncImpl,
+          readFileSyncImpl: deps.readFileSyncImpl,
+          resolvePathImpl: deps.resolvePathImpl,
+          warnImpl: deps.warnImpl,
+          writeFileSyncImpl: deps.writeFileSyncImpl,
+        }));
+      } catch (error) {
+        if (error?.code === "MIGRATION_BUNDLE_SCHEMA_CHANGE_WITHOUT_FORWARD_MIGRATION") {
+          for (const line of renderMigrationDiagnosticLines(
+            buildClientUserFixableDiagnostic(error.code, `client-${Date.now()}`),
+          )) {
+            deps.errorImpl(line);
+          }
+        } else {
+          throw error;
+        }
+        return;
+      }
       if (auditMessage) deps.logImpl(auditMessage);
       const protocolHeaders = await buildDevCloudDeployProtocolHeaders({
         bundle,
@@ -483,7 +503,8 @@ ${deps.BOLD}${deps.CYAN}🚀 Gencow Cloud Dev${deps.RESET}
     const GENERATED_FILES = new Set(["api.ts", "README.md"]);
     watchImpl(absoluteFunctions, { recursive: true }, (_eventType, filename) => {
       if (!filename || filename.includes("node_modules")) return;
-      if (isServerCodegenWatchPath(filename, projectDir, config, { resolvePathImpl: deps.resolvePathImpl })) return;
+      if (isServerCodegenWatchPath(filename, projectDir, config, { resolvePathImpl: deps.resolvePathImpl }))
+        return;
       const base = (filename.includes("/") ? filename.split("/").pop() : filename) ?? filename;
       if (GENERATED_FILES.has(base)) return;
       pendingFile = filename;

package/lib/migration-bundle-manifest.mjs

@@ -7,6 +7,7 @@ import {
   MIGRATION_BUNDLE_PROTOCOL_VERSION,
   parseMigrationFolderMillis,
 } from "@gencow/migration-contract";
+import { deriveTenantCapabilities, isAuthSchemaSourcePath } from "./tenant-capability-compat.mjs";
 
 export { MIGRATION_BUNDLE_CAPABILITY_V1, MIGRATION_BUNDLE_MANIFEST_PATH, MIGRATION_BUNDLE_PROTOCOL_VERSION };
 
@@ -133,6 +134,37 @@ function bundleFileRows(backendRoot, directory = backendRoot) {
   return rows;
 }
 
+function tenantCapabilitySources(backendRoot, directory = backendRoot) {
+  const sources = [];
+  for (const entry of readdirSync(directory).sort()) {
+    const path = resolve(directory, entry);
+    const stats = lstatSync(path);
+    if (stats.isDirectory()) {
+      sources.push(...tenantCapabilitySources(backendRoot, path));
+      continue;
+    }
+    const manifestPath = canonicalMigrationManifestPath(relative(backendRoot, path));
+    if (stats.isFile() && isAuthSchemaSourcePath(manifestPath)) {
+      sources.push({ path: manifestPath, source: readFileSync(path, "utf8") });
+    }
+  }
+  return sources;
+}
+
+function hasRateLimitCreationMigration(migrations) {
+  return migrations.some(({ path }) =>
+    /\bCREATE\s+TABLE\s+(?:IF\s+NOT\s+EXISTS\s+)?(?:["']?public["']?\.)?["']?rate_limit["']?\b/iu.test(
+      readFileSync(path, "utf8"),
+    ),
+  );
+}
+
+function schemaChangeWithoutForwardMigrationError() {
+  const error = new Error("MIGRATION_BUNDLE_SCHEMA_CHANGE_WITHOUT_FORWARD_MIGRATION");
+  error.code = "MIGRATION_BUNDLE_SCHEMA_CHANGE_WITHOUT_FORWARD_MIGRATION";
+  return error;
+}
+
 function schemaSourceRows(backendRoot, schemaSourcePaths) {
   if (schemaSourcePaths === undefined) return null;
   const rows = [];
@@ -183,6 +215,13 @@ export function unsignedMigrationBundleManifest({
     sqlSha256: sha256(readFileSync(migration.path)),
     requiredCapabilities: [MIGRATION_BUNDLE_CAPABILITY_V1],
   }));
+  const requiredTenantCapabilities = deriveTenantCapabilities(tenantCapabilitySources(backendRoot));
+  if (
+    requiredTenantCapabilities.length > 0 &&
+    !hasRateLimitCreationMigration(migrationSourceFiles(backendRoot))
+  ) {
+    throw schemaChangeWithoutForwardMigrationError();
+  }
   return {
     protocolVersion: MIGRATION_BUNDLE_PROTOCOL_VERSION,
     generator: "drizzle-kit",
@@ -191,6 +230,7 @@ export function unsignedMigrationBundleManifest({
     cliVersion,
     ...(sources === null ? {} : { schemaSources: sources }),
     schemaSnapshotHash: sources === null ? sha256(readFileSync(schemaPath)) : sha256(JSON.stringify(sources)),
+    ...(requiredTenantCapabilities.length > 0 ? { requiredTenantCapabilities } : {}),
     migrations,
   };
 }

package/lib/migration-client-diagnostic.mjs

@@ -48,6 +48,12 @@ const USER_FIXABLE_FAILURES = {
     detail:
       "Fix schema imports, types, or Drizzle configuration before uploading any existing migration bundle.",
   },
+  MIGRATION_BUNDLE_SCHEMA_CHANGE_WITHOUT_FORWARD_MIGRATION: {
+    phase: "PREFLIGHT",
+    target: "PENDING_MIGRATION",
+    summary: "The durable Auth schema changed without a forward migration.",
+    detail: "Run gencow db:generate, review the rate_limit migration, then create a fresh migration bundle.",
+  },
   MIGRATION_CHECK_CLOUD_ONLY: {
     phase: "PREFLIGHT",
     target: "PROJECT_CONFIG",

package/lib/tenant-capability-compat.mjs

@@ -0,0 +1,49 @@
+import * as migrationContract from "@gencow/migration-contract";
+
+const AUTH_SCHEMA_FILE_PATTERN = /(?:^|\/)(?:schema-auth|auth-schema)(?:\.gen)?\.(?:c|m)?(?:j|t)s$/u;
+const AUTH_RATE_LIMIT_CAPABILITY = "tenant.auth.rate_limit.v1";
+
+function removeComments(source) {
+  return source.replace(/\/\*[\s\S]*?\*\//gu, " ").replace(/(^|[^:])\/\/.*$/gmu, "$1 ");
+}
+
+function fallbackIsAuthSchemaSourcePath(path) {
+  return AUTH_SCHEMA_FILE_PATTERN.test(String(path).replaceAll("\\", "/"));
+}
+
+function fallbackSourceDeclaresDurableAuthRateLimit(source) {
+  const normalized = removeComments(source);
+  return (
+    /\b(?:export\s+)?const\s+rateLimit\s*=\s*pgTable\s*\(\s*["']rate_limit["']/u.test(normalized) ||
+    /\b(?:export\s+)?const\s+rateLimits\s*=\s*pgTable\s*\(\s*["']rate_limit["']/u.test(normalized)
+  );
+}
+
+// A CLI can be linked against an older published migration-contract while the
+// Platform has already learned a newer source shape (for example generated
+// schema-auth.gen.ts). Capability detection must therefore be monotonic: an
+// older contract may not make a bundle under-declare a capability that the
+// Platform will enforce.
+export function createTenantCapabilityCompatibility(contract = migrationContract) {
+  return {
+    isAuthSchemaSourcePath: (path) =>
+      Boolean(contract.isAuthSchemaSourcePath?.(path)) || fallbackIsAuthSchemaSourcePath(path),
+    deriveTenantCapabilities: (sources) => {
+      const contractCapabilities =
+        typeof contract.deriveTenantCapabilities === "function"
+          ? contract.deriveTenantCapabilities(sources)
+          : [];
+      const fallbackCapabilities = sources.some(
+        (source) =>
+          fallbackIsAuthSchemaSourcePath(source.path) &&
+          fallbackSourceDeclaresDurableAuthRateLimit(source.source),
+      )
+        ? [AUTH_RATE_LIMIT_CAPABILITY]
+        : [];
+      return [...new Set([...contractCapabilities, ...fallbackCapabilities])];
+    },
+  };
+}
+
+const compatibility = createTenantCapabilityCompatibility();
+export const { isAuthSchemaSourcePath, deriveTenantCapabilities } = compatibility;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gencow",
-  "version": "0.1.230",
+  "version": "0.1.232",
   "description": "Gencow — AI Backend Engine",
   "type": "module",
   "bin": {
@@ -20,7 +20,7 @@
     "dashboard/"
   ],
   "dependencies": {
-    "@gencow/migration-contract": "0.1.13",
+    "@gencow/migration-contract": "0.1.16",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "drizzle-kit": "1.0.0-rc.4",
     "drizzle-orm": "1.0.0-rc.4",
@@ -37,9 +37,9 @@
     "ai": "^6.0.233",
     "@types/node": "^25.9.5",
     "better-auth": "^1.6.23",
-    "@gencow/core": "0.1.44",
     "@gencow/client": "0.2.7",
-    "@gencow/react": "0.2.7"
+    "@gencow/react": "0.2.7",
+    "@gencow/core": "0.1.44"
   },
   "scripts": {
     "prebuild": "pnpm --filter @gencow/migration-contract run build && pnpm --filter @gencow/server run build",