@almadar/orb 2.47.0 → 3.0.0

package/shells/almadar-shell/tsup.config.ts

@@ -0,0 +1,13 @@
+import { defineConfig } from 'tsup';
+
+export default defineConfig({
+  entry: ['src/index.ts'],
+  format: ['esm'],
+  dts: true,
+  clean: true,
+  sourcemap: false,
+  minify: true,
+  treeshake: true,
+  splitting: false,
+  outDir: 'dist',
+});

package/shells/almadar-shell/vitest.config.ts

@@ -0,0 +1,8 @@
+import { defineConfig } from 'vitest/config';
+
+export default defineConfig({
+  test: {
+    include: ['__tests__/**/*.test.ts', 'test/**/*.test.ts'],
+    globals: true,
+  },
+});

package/shells/almadar-shell-hono/package.json

@@ -1,13 +1,13 @@
 {
   "name": "@almadar/shell-hono",
-  "version": "0.1.3",
+  "version": "0.1.12",
   "description": "Minimal full-stack shell template for Almadar applications (Hono server)",
   "workspaces": [
     "packages/*"
   ],
   "scripts": {
-    "dev": "concurrently -n client,server -c blue,green \"bun --filter @app/client dev\" \"bun --filter @app/server dev\"",
-    "build": "bun run --filter @app/shared build && bun run --filter @app/client build && bun run --filter @app/server build",
+    "dev": "concurrently -n client,server -c blue,green \"bun --filter @almadar/shell-hono-client dev\" \"bun --filter @almadar/shell-hono-server dev\"",
+    "build": "turbo run build",
     "serve": "bun run packages/server/src/serve.ts",
     "typecheck": "turbo run typecheck",
     "lint": "turbo run lint",
@@ -32,5 +32,6 @@
   },
   "publishConfig": {
     "access": "public"
-  }
+  },
+  "packageManager": "pnpm@10.30.3"
 }

package/shells/almadar-shell-hono/packages/client/package.json

@@ -13,11 +13,11 @@
     "test:watch": "vitest"
   },
   "dependencies": {
-    "@almadar/ui": ">=4.30.0",
-    "@almadar/syntax": ">=1.4.0",
-    "@almadar/evaluator": ">=2.9.2",
-    "@almadar/patterns": ">=2.18.1",
-    "@almadar/core": ">=5.8.0",
+    "@almadar/ui": "^5.122.9",
+    "@almadar/syntax": "^1.11.0",
+    "@almadar/evaluator": "^2.31.0",
+    "@almadar/patterns": "^2.101.0",
+    "@almadar/core": "^10.31.0",
     "firebase": "^11.4.0",
     "@tanstack/react-query": "^5.67.3",
     "react": "^19.0.0",
@@ -42,7 +42,7 @@
     "postprocessing": "^6.39.0"
   },
   "devDependencies": {
-    "@almadar/eslint-plugin": ">=2.8.0",
+    "@almadar/eslint-plugin": "^2.14.0",
     "@typescript-eslint/parser": "8.56.0",
     "eslint": "10.0.0",
     "@testing-library/react": "^16.1.0",

package/shells/almadar-shell-hono/packages/client/src/App.tsx

@@ -16,7 +16,6 @@ import { QueryClient, QueryClientProvider } from '@tanstack/react-query';
 import { ThemeProvider, UISlotProvider } from '@almadar/ui/context';
 import { UISlotComponent, NotifyListener } from '@almadar/ui/components';
 import {
-  EntityStoreProvider,
   EventBusProvider,
   VerificationProvider,
 } from '@almadar/ui/providers';
@@ -49,7 +48,6 @@ function App() {
     <I18nProvider value={i18nValue}>
     <QueryClientProvider client={queryClient}>
       <ThemeProvider>
-        <EntityStoreProvider>
         <EventBusProvider>
           <VerificationProvider>
             <UISlotProvider>
@@ -74,7 +72,6 @@ function App() {
             </UISlotProvider>
           </VerificationProvider>
         </EventBusProvider>
-        </EntityStoreProvider>
       </ThemeProvider>
     </QueryClientProvider>
     </I18nProvider>

package/shells/almadar-shell-hono/packages/client/src/config/firebase.ts

@@ -1,8 +1,8 @@
 import { initializeApp, getApps, getApp, FirebaseApp } from 'firebase/app';
 import { getAuth, Auth } from 'firebase/auth';
 
-let app: FirebaseApp;
-let auth: Auth;
+let app: FirebaseApp | undefined;
+let auth: Auth | undefined;
 
 export async function initializeFirebase(): Promise<void> {
   if (getApps().length > 0) {
@@ -30,8 +30,29 @@ export async function initializeFirebase(): Promise<void> {
     };
   }
 
+  // No credentials anywhere — auth stays disabled instead of crashing
+  // the app boot with auth/invalid-api-key.
+  if (!config.apiKey) {
+    console.warn('Firebase not configured — auth disabled (set VITE_APP_FIREBASE_* env vars)');
+    return;
+  }
+
   app = initializeApp(config);
   auth = getAuth(app);
 }
 
+export function requireAuth(): Auth {
+  if (!auth) {
+    throw new Error('Firebase auth is not configured — set VITE_APP_FIREBASE_* env vars');
+  }
+  return auth;
+}
+
+// True once Firebase initialized with real credentials. When false the
+// app runs in auth-disabled mode: route guards pass through and sign-in
+// actions report the missing config instead of crashing the boot.
+export function isAuthEnabled(): boolean {
+  return auth !== undefined;
+}
+
 export { auth, app };

package/shells/almadar-shell-hono/packages/client/src/features/auth/AuthContext.tsx

@@ -27,6 +27,11 @@ export const AuthProvider: React.FC<AuthProviderProps> = ({ children }) => {
     let unsubscribe: (() => void) | undefined;
 
     initializeFirebase().then(() => {
+      // Auth disabled (no Firebase config) — render without a listener.
+      if (!auth) {
+        setLoading(false);
+        return;
+      }
       unsubscribe = auth.onAuthStateChanged((firebaseUser) => {
         setUser(firebaseUser);
         setLoading(false);

package/shells/almadar-shell-hono/packages/client/src/features/auth/authService.ts

@@ -10,7 +10,7 @@ import {
   signInWithEmailLink as firebaseSignInWithEmailLink,
   ActionCodeSettings,
 } from 'firebase/auth';
-import { auth } from '../../config/firebase';
+import { auth, requireAuth } from '../../config/firebase';
 
 const googleProvider = new GoogleAuthProvider();
 
@@ -18,7 +18,7 @@ export const authService = {
   // Google Sign In
   signInWithGoogle: async () => {
     try {
-      const result = await signInWithPopup(auth, googleProvider);
+      const result = await signInWithPopup(requireAuth(), googleProvider);
       return result.user;
     } catch (error) {
       throw error;
@@ -28,7 +28,7 @@ export const authService = {
   // Email/Password Sign In
   signInWithEmail: async (email: string, password: string) => {
     try {
-      const result = await signInWithEmailAndPassword(auth, email, password);
+      const result = await signInWithEmailAndPassword(requireAuth(), email, password);
       return result.user;
     } catch (error) {
       throw error;
@@ -38,7 +38,7 @@ export const authService = {
   // Email/Password Sign Up
   signUpWithEmail: async (email: string, password: string, displayName?: string) => {
     try {
-      const result = await createUserWithEmailAndPassword(auth, email, password);
+      const result = await createUserWithEmailAndPassword(requireAuth(), email, password);
 
       if (displayName) {
         await updateProfile(result.user, { displayName });
@@ -53,7 +53,7 @@ export const authService = {
   // Sign Out
   signOut: async () => {
     try {
-      await firebaseSignOut(auth);
+      await firebaseSignOut(requireAuth());
     } catch (error) {
       throw error;
     }
@@ -62,19 +62,22 @@ export const authService = {
   // Email Link Authentication
   sendSignInLinkToEmail: async (email: string, actionCodeSettings: ActionCodeSettings) => {
     try {
-      await firebaseSendSignInLinkToEmail(auth, email, actionCodeSettings);
+      await firebaseSendSignInLinkToEmail(requireAuth(), email, actionCodeSettings);
     } catch (error) {
       throw error;
     }
   },
 
   isSignInWithEmailLink: (emailLink: string): boolean => {
+    // Predicate evaluated during Login render — degrade, don't throw,
+    // when auth is unconfigured: it simply isn't an email-link sign-in.
+    if (!auth) return false;
     return firebaseIsSignInWithEmailLink(auth, emailLink);
   },
 
   signInWithEmailLink: async (email: string, emailLink: string) => {
     try {
-      const result = await firebaseSignInWithEmailLink(auth, email, emailLink);
+      const result = await firebaseSignInWithEmailLink(requireAuth(), email, emailLink);
       return result.user;
     } catch (error) {
       throw error;

package/shells/almadar-shell-hono/packages/client/src/features/auth/components/ProtectedRoute.tsx

@@ -1,6 +1,7 @@
 import React from 'react';
 import { Navigate } from 'react-router-dom';
 import { useAuthContext } from '../AuthContext';
+import { isAuthEnabled } from '../../../config/firebase';
 
 interface ProtectedRouteProps {
   children: React.ReactNode;
@@ -17,6 +18,14 @@ const ProtectedRoute: React.FC<ProtectedRouteProps> = ({ children }) => {
     );
   }
 
+  // Auth-disabled mode (no Firebase config): nothing can sign in, so
+  // gating would strand every route on /login — pass straight through.
+  // Checked after `loading` so a configured-but-initializing Firebase
+  // still shows the spinner instead of flashing protected content.
+  if (!isAuthEnabled()) {
+    return <>{children}</>;
+  }
+
   if (!user) {
     return <Navigate to="/login" replace />;
   }

package/shells/almadar-shell-hono/packages/server/package.json

@@ -13,10 +13,10 @@
     "test:watch": "vitest"
   },
   "dependencies": {
-    "@almadar/server-hono": ">=0.2.0",
-    "@almadar/evaluator": ">=2.9.2",
-    "@almadar/core": ">=5.8.0",
-    "@almadar/integrations": ">=2.6.1",
+    "@almadar/server-hono": "^0.4.8",
+    "@almadar/evaluator": "^2.31.0",
+    "@almadar/core": "^10.31.0",
+    "@almadar/integrations": "^2.17.0",
     "hono": "^4.7.0",
     "@hono/node-server": "^1.14.0",
     "@hono/zod-validator": "^0.4.0",
@@ -25,7 +25,7 @@
     "zod": "^3.22.0"
   },
   "devDependencies": {
-    "@almadar/eslint-plugin": ">=2.8.0",
+    "@almadar/eslint-plugin": "^2.14.0",
     "@typescript-eslint/parser": "8.56.0",
     "@types/bun": "^1.1.0",
     "@types/node": "^20.17.19",

package/shells/almadar-shell-hono/packages/server/src/index.ts

@@ -4,8 +4,14 @@
 
 import { initializeFirebase, env, logger } from '@almadar/server-hono';
 
-// Initialize Firebase before anything else uses it
-initializeFirebase();
+// Initialize Firebase before anything else uses it. When no credentials
+// are configured (local dev without FIREBASE_*/FIRESTORE_EMULATOR_HOST),
+// boot anyway — a purely client-side app must still serve.
+try {
+  initializeFirebase();
+} catch (e) {
+  logger.warn(`Firebase not configured — auth/db routes disabled: ${e instanceof Error ? e.message : String(e)}`);
+}
 
 import { serve } from '@hono/node-server';
 import { app } from './app.js';