@bractjs/bractjs 0.1.11 → 0.1.13

package/bin/cli.ts

@@ -64,6 +64,9 @@ switch (command) {
     break;
 
   case "dev":
+    // Ensure dev-only handlers gated by isExplicitDev() (e.g. /_hmr/module,
+    // /_bractjs/devtools.js) are reachable when the user hasn't set NODE_ENV.
+    if (!process.env.NODE_ENV) process.env.NODE_ENV = "development";
     await import("../src/dev/server.ts");
     break;
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bractjs/bractjs",
-  "version": "0.1.11",
+  "version": "0.1.13",
   "description": "Production-grade SSR framework for Bun + React 19. File-based routing, streaming SSR, server actions, typed routes.",
   "license": "MIT",
   "homepage": "https://github.com/bractjs/bractjs#readme",

package/src/client/ClientRouter.tsx

@@ -155,7 +155,10 @@ export function ClientRouter({ children, initialData, initialModule = null }: Cl
       // Update DevTools state (dev-only — no-op in prod since the import fails).
       const w = window as unknown as { __BRACT_DEV__?: boolean };
       if (w.__BRACT_DEV__ === true) {
-        void import("../../dev/devtools.ts").then(({ updateDevtoolsState }) => {
+        // Use the dev-only HTTP endpoint (registered in serve.ts) rather than
+        // a relative source-path import — Bun preserves dynamic-import paths
+        // as runtime URLs, and a relative .ts path 404s in the browser.
+        void import(/* @vite-ignore */ "/_bractjs/devtools.js").then(({ updateDevtoolsState }) => {
           updateDevtoolsState({
             route: toPathname,
             loaderData: data,

package/src/server/serve.ts

@@ -95,6 +95,25 @@ export function buildFetchHandler(config: Partial<BractJSConfig>) {
       return handleHmrModuleRequest(url, appDir);
     }
 
+    // Dev-only: serve the DevTools panel module imported by hmr-client.
+    // SECURITY(high): gated by isExplicitDev() so production never compiles
+    // and ships package internals as JS.
+    if (isExplicitDev() && pathname === "/_bractjs/devtools.js") {
+      const devtoolsEntry = resolve(import.meta.dir, "../dev/devtools.ts");
+      const built = await Bun.build({
+        entrypoints: [devtoolsEntry],
+        target: "browser",
+        minify: false,
+        sourcemap: "inline",
+      });
+      if (!built.success || built.outputs.length === 0) {
+        return new Response("DevTools build failed", { status: 500 });
+      }
+      return new Response(await built.outputs[0].text(), {
+        headers: { "Content-Type": "text/javascript", "Cache-Control": "no-store" },
+      });
+    }
+
     // Typed API routes (registered via bract.route())
     if (pathname.startsWith("/api")) {
       const { handleApiRequest } = await import("./api-route.ts");