Apps become the isolation boundary for scripts, routes, domains, and
later data. Doing this now — while the surface is small — avoids
several migrations on populated tables once v1.1 data-plane services
ship.
Schema (migration 0005_apps.sql):
- New tables: apps, app_domains (with shape_key UNIQUE for collision
detection), app_slug_history (for permanent slug-rename redirects).
- app_id added to scripts, routes, execution_logs (non-null, cascading
rules per row).
- Script-name uniqueness becomes per-app; the route unique index is
swapped for an app-scoped version.
- The "default" app is seeded unconditionally with a localhost claim;
existing scripts/routes backfill into it. Fresh installs additionally
get the Hello World seed via seed_hello_world_if_fresh after
migrations run (idempotent — only fires when the default app has no
scripts).
Orchestrator dispatch is two-phase: AppDomainTable resolves Host →
app_id (most-specific match wins, exact beats wildcard), then the
existing route matcher runs against that app's partitioned slice via
RouteTable. Unknown hosts return 404 at the app layer with a clear
message; /api/v1/execute/{id} still works as the implicit
__internal__ claim, decoupled from any public domain.
Manager API: full CRUD for /api/v1/admin/apps/* and
/api/v1/admin/apps/{id_or_slug}/domains/*, with slug:check + force
takeover semantics implementing the rename-history flow (two-step
check → confirm, never a single endpoint). Script create requires
app_id; list accepts ?app= filter. Route create validates host
against the parent app's claims; conflict detection stays strictly
intra-app.
Dashboard: /admin/apps and /admin/apps/{slug} (overview + scripts +
domains + settings tabs, with slug-history-aware redirects). Root
path redirects to the apps list. Script detail page gains an app
breadcrumb and threads app_id into the route preview.
Deferred per design: per-app admin roles. The require_admin middleware
remains the seam where role checks will slot in later.
Blueprint §11.5 and roadmap updated to reflect what shipped; docs/
versioning.md notes the schema 3 → 5 bump.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
65 lines
2.3 KiB
Rust
65 lines
2.3 KiB
Rust
//! Route binding: which `(host, method, path)` tuples invoke a given
|
|
//! script. The storage shape (this file) is intentionally flat — the
|
|
//! orchestrator parses these into typed `HostPattern` / `PathPattern`
|
|
//! values for matching, and reconstructs strings for display.
|
|
|
|
use chrono::{DateTime, Utc};
|
|
use serde::{Deserialize, Serialize};
|
|
use uuid::Uuid;
|
|
|
|
use crate::{AppId, ScriptId};
|
|
|
|
#[derive(Debug, Clone, Copy, Serialize, Deserialize, PartialEq, Eq)]
|
|
#[serde(rename_all = "lowercase")]
|
|
pub enum HostKind {
|
|
/// Matches any host header.
|
|
Any,
|
|
/// Exact hostname match: `sub.example.com`.
|
|
Strict,
|
|
/// Wildcard suffix match: `*.example.com` matches any subdomain of
|
|
/// `example.com`. Capture name is reserved for the future
|
|
/// `{name}.example.com` syntax (currently always None on writes).
|
|
Wildcard,
|
|
}
|
|
|
|
#[derive(Debug, Clone, Copy, Serialize, Deserialize, PartialEq, Eq)]
|
|
#[serde(rename_all = "lowercase")]
|
|
pub enum PathKind {
|
|
/// Literal string equality: `/greet` matches only `/greet`.
|
|
Exact,
|
|
/// Strict-subtree match. Stored as the prefix including the trailing
|
|
/// slash; `/greet/*` is stored as path "/greet/" and matches
|
|
/// `/greet/x` but not `/greet` itself (which would need its own
|
|
/// exact route).
|
|
Prefix,
|
|
/// Named-parameter pattern: `/greet/:name` where each `:foo` consumes
|
|
/// exactly one segment and captures it into `ctx.request.params.foo`.
|
|
Param,
|
|
}
|
|
|
|
#[derive(Debug, Clone, Serialize, Deserialize)]
|
|
pub struct Route {
|
|
pub id: Uuid,
|
|
/// Owning app. Always equals `scripts.app_id` for the bound script.
|
|
/// Carried on the route row so the orchestrator can partition the
|
|
/// route table without joining back to scripts on every refresh.
|
|
pub app_id: AppId,
|
|
pub script_id: ScriptId,
|
|
|
|
pub host_kind: HostKind,
|
|
/// For `Any`: empty string. For `Strict`: full hostname. For
|
|
/// `Wildcard`: the suffix after the leading `*.` (e.g. `example.com`).
|
|
pub host: String,
|
|
pub host_param_name: Option<String>,
|
|
|
|
pub path_kind: PathKind,
|
|
/// Raw path as the user typed it. For `Prefix`, normalized to end
|
|
/// with `/` (the trailing `*` is dropped on write).
|
|
pub path: String,
|
|
|
|
/// `None` = any method.
|
|
pub method: Option<String>,
|
|
|
|
pub created_at: DateTime<Utc>,
|
|
}
|