feat: release Drops Studio production platform

.env.example

@@ -56,6 +56,9 @@ AGENT_BROWSER_SNAPSHOT_ID=
 
 # Vercel Cron authenticates scheduled idle cleanup with this 32+ character server secret.
 CRON_SECRET=
+# Optional independently rotatable operator secret for an immediate provider
+# health receipt after a release. It never enters browser bundles or generated apps.
+DROPS_PLATFORM_HEALTH_OPERATOR_SECRET=
 # Optional integer from 5 through 240; defaults to 20 minutes.
 DROPS_STUDIO_SANDBOX_IDLE_MINUTES=
 # Set to "1" only to opt into the live Sandbox contract test.
@@ -110,6 +113,9 @@ DROPS_TEAM_INVITE_SECRET=
 # DROPS_MANAGED_DATA_PROVIDER accepts only "d1" or "postgres" in adapter wiring.
 DROPS_MANAGED_DATA_PROVIDER=
 DATABASE_URL=
+# Vercel Marketplace Neon uses these prefixed server-only values.
+DROPS_MANAGED_DATABASE_URL=
+DROPS_MANAGED_POSTGRES_URL=
 DROPS_COLLABORATION_TRANSPORT_URL=
 
 # Generic enterprise OIDC. Values stay server-only and external login remains

app/api/access/route.ts

@@ -65,6 +65,8 @@ export async function GET(request: NextRequest) {
   const access = accessMetadata({
     tier: context.configured && readiness.available ? "guest" : "fallback",
     used: context.used,
+    projectSyncAvailable: context.configured
+      && memberProjectSyncReadiness(readinessEnvironment),
   });
   const response = NextResponse.json(
     {

app/api/platform/capabilities/route.ts

@@ -1,12 +1,12 @@
 import { NextResponse } from "next/server.js";
 
-import { platformCapabilitySnapshot } from "@/lib/platform-capabilities";
+import { platformCapabilitySnapshotWithHealth } from "@/lib/platform-capabilities";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
 
 export async function GET() {
-  return NextResponse.json(platformCapabilitySnapshot(), {
+  return NextResponse.json(await platformCapabilitySnapshotWithHealth(), {
     status: 200,
     headers: {
       "cache-control": "private, no-store, max-age=0",

app/api/platform/health/route.ts

@@ -0,0 +1,41 @@
+import { NextRequest, NextResponse } from "next/server.js";
+import { createHash, timingSafeEqual } from "node:crypto";
+
+import { runPlatformProviderHealthChecks } from "@/lib/platform-provider-health";
+
+export const runtime = "nodejs";
+export const dynamic = "force-dynamic";
+export const maxDuration = 300;
+
+function digest(value: string): Buffer {
+  return createHash("sha256").update(value).digest();
+}
+
+function authorized(request: NextRequest): boolean {
+  const authorization = request.headers.get("authorization")?.trim();
+  if (!authorization) return false;
+  const secrets = [
+    process.env.CRON_SECRET?.trim(),
+    process.env.DROPS_PLATFORM_HEALTH_OPERATOR_SECRET?.trim(),
+  ].filter((value): value is string => Boolean(value));
+  const presented = digest(authorization);
+  return secrets.some((secret) => timingSafeEqual(
+    presented,
+    digest(`Bearer ${secret}`),
+  ));
+}
+
+export async function GET(request: NextRequest) {
+  if (!authorized(request)) {
+    return NextResponse.json(
+      { error: "Platform health authorization is required." },
+      { status: 401, headers: { "cache-control": "private, no-store" } },
+    );
+  }
+  const receipt = await runPlatformProviderHealthChecks();
+  return NextResponse.json(receipt, {
+    headers: { "cache-control": "private, no-store" },
+  });
+}
+
+export const POST = GET;

app/api/project-data/route.ts

@@ -6,7 +6,9 @@ import {
   ProjectDataError,
   ProjectDataStore,
   authorizeProjectDataCapability,
+  createDurableProjectDataBackend,
   verifyProjectDataCapability,
+  type ProjectDataBackend,
   type ProjectDataCapabilityPayload,
   type ProjectDataPermission,
 } from "../../../lib/project-data/index.ts";
@@ -25,22 +27,30 @@ function json(payload: Record<string, unknown>, status = 200): NextResponse {
   return NextResponse.json(payload, { status, headers: NO_STORE_HEADERS });
 }
 
-function backend() {
+let backendPromise: Promise<ProjectDataBackend> | null = null;
+
+async function backend() {
   if (globalThis.__DROPS_STUDIO_PROJECT_DATA_BACKEND_V2__) {
     return globalThis.__DROPS_STUDIO_PROJECT_DATA_BACKEND_V2__;
   }
-  if (process.env.DROPS_STUDIO_LOCAL_PROJECT_DATA !== "1") {
+  backendPromise ??= (async () => {
+    const durable = await createDurableProjectDataBackend();
+    if (durable) return durable;
+    if (process.env.DROPS_STUDIO_LOCAL_PROJECT_DATA === "1") {
+      return new MemoryProjectDataBackend();
+    }
     throw new ProjectDataError(
       "storage_unavailable",
       "Project data storage is not configured. The generated app can continue with its labelled browser-local fallback.",
     );
-  }
-  globalThis.__DROPS_STUDIO_PROJECT_DATA_BACKEND_V2__ = new MemoryProjectDataBackend();
-  return globalThis.__DROPS_STUDIO_PROJECT_DATA_BACKEND_V2__;
+  })();
+  const resolved = await backendPromise;
+  globalThis.__DROPS_STUDIO_PROJECT_DATA_BACKEND_V2__ = resolved;
+  return resolved;
 }
 
-function store(): ProjectDataStore {
-  return new ProjectDataStore(backend());
+async function store(): Promise<ProjectDataStore> {
+  return new ProjectDataStore(await backend());
 }
 
 function bearer(request: NextRequest): string {
@@ -97,7 +107,20 @@ function requireSameOrigin(request: NextRequest): void {
   const origin = request.headers.get("origin");
   if (!origin) throw new ProjectDataError("forbidden", "A same-origin project data mutation is required.");
   try {
-    if (new URL(origin).origin !== request.nextUrl.origin) throw new Error("origin mismatch");
+    const host = request.headers.get("host")?.split(",")[0]?.trim();
+    const protocol =
+      request.headers.get("x-forwarded-proto")?.split(",")[0]?.trim().replace(/:$/, "")
+      || request.nextUrl.protocol.replace(/:$/, "");
+    const visibleOrigin = host
+      ? new URL(`${protocol}://${host}`).origin
+      : request.nextUrl.origin;
+    const parsedOrigin = new URL(origin).origin;
+    if (
+      parsedOrigin !== request.nextUrl.origin
+      && parsedOrigin !== visibleOrigin
+    ) {
+      throw new Error("origin mismatch");
+    }
   } catch {
     throw new ProjectDataError("forbidden", "Cross-origin project data mutation rejected.");
   }
@@ -170,12 +193,12 @@ export async function GET(request: NextRequest): Promise<NextResponse> {
     exactFields(query, ["projectId", "namespace", "id"]);
     const { projectId, namespace } = scope(authorization, query, "read");
     if (query.id) {
-      const document = await store().get(projectId, namespace, query.id);
+      const document = await (await store()).get(projectId, namespace, query.id);
       if (!document) throw new ProjectDataError("not_found", "Project data document was not found.");
-      return json({ document, persistence: backend().kind });
+      return json({ document, persistence: (await backend()).kind });
     }
-    const documents = await store().list(projectId, namespace);
-    return json({ documents, persistence: backend().kind });
+    const documents = await (await store()).list(projectId, namespace);
+    return json({ documents, persistence: (await backend()).kind });
   } catch (error) {
     return responseError(error);
   }
@@ -189,8 +212,8 @@ export async function POST(request: NextRequest): Promise<NextResponse> {
     const input = await requestBody(request);
     exactFields(input, ["projectId", "namespace", "id", "data"]);
     const { projectId, namespace } = scope(authorization, input, "write");
-    const document = await store().create({ projectId, namespace, id: input.id, data: input.data });
-    return json({ document, persistence: backend().kind }, 201);
+    const document = await (await store()).create({ projectId, namespace, id: input.id, data: input.data });
+    return json({ document, persistence: (await backend()).kind }, 201);
   } catch (error) {
     return responseError(error);
   }
@@ -204,14 +227,14 @@ export async function PUT(request: NextRequest): Promise<NextResponse> {
     const input = await requestBody(request);
     exactFields(input, ["projectId", "namespace", "id", "expectedRevision", "data"]);
     const { projectId, namespace } = scope(authorization, input, "write");
-    const document = await store().update({
+    const document = await (await store()).update({
       projectId,
       namespace,
       id: input.id,
       expectedRevision: input.expectedRevision,
       data: input.data,
     });
-    return json({ document, persistence: backend().kind });
+    return json({ document, persistence: (await backend()).kind });
   } catch (error) {
     return responseError(error);
   }
@@ -225,8 +248,8 @@ export async function DELETE(request: NextRequest): Promise<NextResponse> {
     const input = await requestBody(request);
     exactFields(input, ["projectId", "namespace", "id", "expectedRevision"]);
     const { projectId, namespace } = scope(authorization, input, "delete");
-    await store().delete(projectId, namespace, input.id, input.expectedRevision);
-    return json({ deleted: true, persistence: backend().kind });
+    await (await store()).delete(projectId, namespace, input.id, input.expectedRevision);
+    return json({ deleted: true, persistence: (await backend()).kind });
   } catch (error) {
     return responseError(error);
   }

app/api/projects/v2/route.ts

@@ -87,7 +87,21 @@ function requireSameOrigin(request: NextRequest): void {
   const origin = request.headers.get("origin");
   if (!origin && process.env.NODE_ENV !== "production") return;
   try {
-    if (!origin || new URL(origin).origin !== request.nextUrl.origin) throw new Error();
+    const host = request.headers.get("host")?.split(",")[0]?.trim();
+    const protocol =
+      request.headers.get("x-forwarded-proto")?.split(",")[0]?.trim().replace(/:$/, "")
+      || request.nextUrl.protocol.replace(/:$/, "");
+    const visibleOrigin = host ? `${protocol}://${host}` : request.nextUrl.origin;
+    const parsedOrigin = origin ? new URL(origin).origin : "";
+    if (
+      !parsedOrigin
+      || (
+        parsedOrigin !== request.nextUrl.origin
+        && parsedOrigin !== visibleOrigin
+      )
+    ) {
+      throw new Error();
+    }
   } catch {
     throw new RouteError(403, { error: "A same-origin Project V2 mutation is required." });
   }

app/platform/page.tsx

@@ -3,11 +3,11 @@ import { Boxes, ShieldCheck } from "lucide-react";
 import { PlatformOverview } from "@/components/platform/platform-overview";
 import { PlatformShell } from "@/components/platform/platform-shell";
 import { PageIntro, StatusBadge } from "@/components/platform/platform-ui";
-import { platformCapabilitySnapshot } from "@/lib/platform-capabilities";
+import { platformCapabilitySnapshotWithHealth } from "@/lib/platform-capabilities";
 
 export const dynamic = "force-dynamic";
 
-export default function PlatformPage() {
-  const snapshot = platformCapabilitySnapshot();
+export default async function PlatformPage() {
+  const snapshot = await platformCapabilitySnapshotWithHealth();
   return <PlatformShell active="Platform"><PageIntro eyebrow="Drops platform" title="A crypto builder that shows its evidence." description="See what works locally, what needs provider configuration, and what remains feature-gated across Project V2, Sandbox, Drops intelligence, delivery, and the managed platform rollout." receipt={<><div className="flex items-center gap-3"><span className="grid size-11 place-items-center rounded-xl bg-[#eef4ff] text-[#245fe5]"><Boxes className="size-5" aria-hidden="true" /></span><div><strong className="text-sm">Capability-aware UI</strong><p className="mt-1 text-xs text-[#52617a]">Working, local, and setup states stay distinct</p></div></div><div className="mt-5 flex items-center justify-between gap-3"><StatusBadge status="working">Truthful states</StatusBadge><ShieldCheck className="size-5 text-[#139a62]" aria-hidden="true" /></div></>} /><PlatformOverview snapshot={snapshot} /></PlatformShell>;
 }