@bractjs/bractjs 0.1.23 → 0.1.25

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bractjs/bractjs",
-  "version": "0.1.23",
+  "version": "0.1.25",
   "description": "Production-grade SSR framework for Bun + React 19. File-based routing, streaming SSR, server actions, typed routes.",
   "license": "MIT",
   "homepage": "https://github.com/bractjs/bractjs#readme",

package/src/__tests__/module-registry.test.ts

@@ -50,7 +50,7 @@ describe("generateRouteRegistry", () => {
     expect(src).toContain(`import * as mod_routes__index_tsx from "../routes/_index.tsx";`);
     expect(src).toContain(`"root.tsx": mod_root_tsx,`);
     expect(src).toContain(`"routes/blog/layout.tsx": mod_routes_blog_layout_tsx,`);
-    expect(src).toContain(`export const moduleRegistry: Record<string, RouteModule>`);
+    expect(src).toContain(`export const moduleRegistry: ModuleRegistry`);
     expect(src).toContain(`export const routeFiles: RouteFile[]`);
   });
 

package/src/build/env-plugin.ts

@@ -1,4 +1,18 @@
 import type { BunPlugin } from "bun";
+import { resolve } from "node:path";
+
+// Lazy: this module is re-exported from the package barrel, so it may be
+// statically pulled into client bundles. `import.meta.dir` is undefined in the
+// browser, and a top-level `resolve(import.meta.dir, "..")` would throw
+// "Path must be a string" at module load — before any plugin is even invoked.
+// Defer the resolve until a plugin actually runs (always server-side).
+let frameworkSrcRoot: string | undefined;
+function getFrameworkSrcRoot(): string {
+  if (frameworkSrcRoot === undefined) {
+    frameworkSrcRoot = resolve(import.meta.dir, "..");
+  }
+  return frameworkSrcRoot;
+}
 
 // ── Server-only import guard ───────────────────────────────────────────────
 
@@ -41,15 +55,24 @@ export function clientEnvPlugin(
     name: "bractjs-client-env",
     setup(build) {
       build.onLoad({ filter: /\.(ts|tsx|js|jsx)$/ }, async (args) => {
+        // Skip third-party packages and the framework's own source. The
+        // framework source contains literal strings like
+        // `"process.env.NODE_ENV"` (as keys of Bun.build's `define:` maps)
+        // that would otherwise be rewritten to `""undefined""`, breaking
+        // syntax. The framework also doesn't need allowlist enforcement —
+        // it accesses Bun.env directly on the server, not process.env on
+        // the client. Without this guard, linking the framework via `file:`
+        // produces a build that fails to parse its own source.
         if (args.path.includes("/node_modules/")) return undefined;
+        if (args.path.startsWith(getFrameworkSrcRoot())) return undefined;
         const src = await Bun.file(args.path).text();
         // SECURITY(medium): textual regex replace runs over the whole source,
         // including inside string literals and comments. A bare `process.env.X`
-        // anywhere — even in a documentation string — becomes the literal value
-        // (or "undefined"). This is acceptable for client builds because
-        // unwanted occurrences only yield the string "undefined", never a
-        // server secret. The allowedKeys gate is the authoritative leak check;
-        // never widen it without auditing callers.
+        // anywhere in user code — even in a documentation string — becomes
+        // the literal value (or "undefined"). This is acceptable for client
+        // builds because unwanted occurrences only yield the string
+        // "undefined", never a server secret. The allowedKeys gate is the
+        // authoritative leak check; never widen it without auditing callers.
         const contents = src.replace(
           /process\.env\.([A-Z_][A-Z0-9_]*)/g,
           (_match, key: string) =>

package/src/codegen/module-registry.ts

@@ -161,15 +161,19 @@ export function generateRouteRegistry(input: RouteRegistryInput): string {
 
   return [
     HEADER,
-    `import type { RouteFile } from "@bractjs/bractjs";`,
-    `import type { RouteModule } from "@bractjs/bractjs";`,
+    `import type { RouteFile, ModuleRegistry } from "@bractjs/bractjs";`,
     "",
     imports.join("\n"),
     "",
     "// Modules keyed by appDir-relative path. The framework looks up route,",
     "// layout, and root modules here at request time instead of doing a",
     "// dynamic `import(absPath)` call that would fail in a compiled binary.",
-    "export const moduleRegistry: Record<string, RouteModule> = {",
+    "//",
+    "// `ModuleRegistry` is intentionally `Record<string, RouteModule | Record<string, unknown>>`",
+    "// — strict `RouteModule` typing would reject route files whose exports",
+    "// (e.g. an ErrorBoundary typed for `{ error: Error }` instead of `{ error: unknown }`)",
+    "// diverge slightly from the framework signature. Runtime behaviour is unchanged.",
+    "export const moduleRegistry: ModuleRegistry = {",
     entries.join("\n"),
     "};",
     "",

package/types/config.d.ts

@@ -46,8 +46,10 @@ export interface BractJSConfig {
 export interface ServerManifest {
   /** Hashed path to the main client entry bundle. */
   clientEntry: string;
+  /** Hashed path to the root.tsx chunk (when emitted as a separate entry). */
+  rootChunk?: string;
   /** Map of URL pattern → route asset info. */
-  routes: Record<string, { file?: string; chunk?: string }>;
+  routes: Record<string, { file?: string; chunk?: string; imports?: string[] }>;
 }
 
 /** Subset of BractJSConfig used by the build pipeline. All fields optional. */