@mauroandre/velojs 0.0.46 → 0.0.48

package/agent/skills/velojs-loaders/SKILL.md

@@ -106,6 +106,23 @@ refetch();                                // e.g. aggregate counters
 
 > **Never mirror loader data into a module-level `export let`.** On the server, a module binding is per-process, not per-request — a value stored there belongs to whichever request wrote it last. `Loader`'s server value is an AsyncLocalStorage getter, so it is per-request by construction. That's the whole reason the handle is safe to export.
 
+## Redirecting from a loader
+
+A loader may return a `Response` to short-circuit rendering — the common case is an auth gate that redirects instead of rendering the page:
+
+```typescript
+export const loader = async ({ c }: LoaderArgs) => {
+    const user = c.get("user");
+    if (!user) return c.redirect("/login");   // no page render, no __PAGE_DATA__
+    return { projects: await listProjects(user) };
+};
+```
+
+- **Direct load / refresh:** the browser receives the `302` and navigates normally.
+- **SPA navigation:** the `?_data=1` endpoint answers `{ __redirect: "/login" }` and the client does a full navigation (server state — session, cookies — may have changed, so it is not an SPA transition).
+
+Any `Response` short-circuits, not only redirects (a `404` JSON, for example). If several loaders return one, the first in route order (layout → leaf) wins.
+
 ## When to use which
 
 | Scenario | Use |

package/agent/skills/velojs-middlewares/SKILL.md

@@ -141,3 +141,20 @@ export const action_save = async ({ body, c }: ActionArgs<{ name: string }>) =>
 ```
 
 This is the recommended pattern for passing authentication data (current user, permissions, etc) from middleware to your page code.
+
+### Typing `c.get()` — ContextVariableMap
+
+`c.get("user")` does not compile out of the box: Hono's `Context` only accepts keys declared in `ContextVariableMap`. Augment it once in your app (e.g. in `app/types.d.ts`) and every `c.get`/`c.set` becomes typed — no casts, no helper functions:
+
+```typescript
+import type { Usuario } from "./modules/auth/auth.types.js";
+
+declare module "hono" {
+    interface ContextVariableMap {
+        user: Usuario;
+    }
+}
+```
+
+After this, `c.get("user")` returns `Usuario` in middlewares, loaders, and actions, and `c.get("anythingElse")` fails at compile time.
+

package/dist/loader-store.js

@@ -1,16 +1,16 @@
-import { signal as d } from "@preact/signals";
-const S = d(!1), c = /* @__PURE__ */ new Map(), _ = /* @__PURE__ */ new Map(), f = /* @__PURE__ */ new Map(), h = /* @__PURE__ */ new Set(), p = /* @__PURE__ */ new Map();
-let u = /* @__PURE__ */ new Set();
-const l = /* @__PURE__ */ new Map(), y = /* @__PURE__ */ new WeakSet();
+import { signal as u } from "@preact/signals";
+const S = u(!1), c = /* @__PURE__ */ new Map(), h = /* @__PURE__ */ new Map(), f = /* @__PURE__ */ new Map(), _ = /* @__PURE__ */ new Set(), p = /* @__PURE__ */ new Map();
+let d = /* @__PURE__ */ new Set();
+const l = /* @__PURE__ */ new Map(), g = /* @__PURE__ */ new WeakSet();
 let w = !1;
 function E(t) {
   v();
   let e = c.get(t);
-  return e || (e = d(null), c.set(t, e)), e;
+  return e || (e = u(null), c.set(t, e)), e;
 }
-function g(t) {
-  let e = _.get(t);
-  return e || (e = d(!1), _.set(t, e)), e;
+function y(t) {
+  let e = h.get(t);
+  return e || (e = u(!1), h.set(t, e)), e;
 }
 function v() {
   if (w || typeof window > "u") return;
@@ -20,22 +20,22 @@ function v() {
     for (const e of Object.keys(t)) {
       if (e.startsWith("__")) continue;
       let n = c.get(e);
-      n || (n = d(null), c.set(e, n)), n.value = t[e];
+      n || (n = u(null), c.set(e, n)), n.value = t[e];
     }
 }
 function x(t) {
-  if (y.has(t)) return;
-  y.add(t);
+  if (g.has(t)) return;
+  g.add(t);
   const e = (n) => {
     for (const o of n) {
       const i = o.module?.metadata;
-      i?.moduleId && i.fullPath !== void 0 && (f.set(i.moduleId, i.fullPath), (!o.children || o.children.length === 0) && h.add(i.moduleId)), o.children && e(o.children);
+      i?.moduleId && i.fullPath !== void 0 && (f.set(i.moduleId, i.fullPath), (!o.children || o.children.length === 0) && _.add(i.moduleId)), o.children && e(o.children);
     }
   };
   if (e(t), typeof window < "u") {
     v();
     for (const n of c.keys()) M(n, window.location.pathname);
-    u = L(window.location.pathname);
+    d = L(window.location.pathname);
   }
 }
 const P = (t) => t.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
@@ -51,7 +51,7 @@ function m(t, e, n = !1) {
 }
 function O(t, e) {
   const n = f.get(t);
-  return n === void 0 ? !1 : m(n, e, h.has(t)) !== null;
+  return n === void 0 ? !1 : m(n, e, _.has(t)) !== null;
 }
 function L(t) {
   const e = /* @__PURE__ */ new Set();
@@ -62,7 +62,7 @@ function L(t) {
 function k(t, e) {
   const n = f.get(t);
   if (n === void 0) return null;
-  const o = m(n, e, h.has(t));
+  const o = m(n, e, _.has(t));
   return o === null ? null : JSON.stringify(o);
 }
 function M(t, e) {
@@ -77,18 +77,22 @@ function H(t) {
 async function $(t, e, n) {
   if (typeof window > "u" || t.length === 0) return;
   const o = H(e);
-  for (const a of t) g(a).value = !0;
+  for (const a of t) y(a).value = !0;
   let i = n ? l.get(o) : void 0;
   i || (i = fetch(o, { cache: "no-cache" }).then((a) => a.json()), n && (l.set(o, i), i.catch(() => {
   }).then(() => l.delete(o))));
   try {
     const a = await i;
+    if (a.__redirect) {
+      window.location.href = String(a.__redirect);
+      return;
+    }
     typeof __VELO_BUILD_HASH__ < "u" && a.__buildHash && a.__buildHash !== __VELO_BUILD_HASH__ && (S.value = !0);
     for (const r of t)
       r in a && (E(r).value = a[r], M(r, e));
   } catch {
   } finally {
-    for (const a of t) g(a).value = !1;
+    for (const a of t) y(a).value = !1;
   }
 }
 function T(t) {
@@ -97,22 +101,22 @@ function T(t) {
   for (const o of c.keys()) {
     if (!n.has(o)) continue;
     const i = k(o, t);
-    p.get(o) === i && u.has(o) || e.push(o);
+    p.get(o) === i && d.has(o) || e.push(o);
   }
-  u = n, $(e, t, !0);
+  d = n, $(e, t, !0);
 }
 function U(t) {
   typeof window > "u" || $([t], window.location.pathname, !1);
 }
 function D() {
-  c.clear(), _.clear(), f.clear(), h.clear(), p.clear(), u = /* @__PURE__ */ new Set(), l.clear(), w = !1, S.value = !1;
+  c.clear(), h.clear(), f.clear(), _.clear(), p.clear(), d = /* @__PURE__ */ new Set(), l.clear(), w = !1, S.value = !1;
 }
 export {
   D as __resetLoaderStore,
   S as __veloUpdatePending,
   m as extractParams,
   E as loaderEntry,
-  g as loaderLoading,
+  y as loaderLoading,
   U as refetchModule,
   x as registerRoutePatterns,
   T as syncLocation

package/dist/server.d.ts

@@ -9,6 +9,16 @@ export interface StartServerOptions {
     port?: number;
 }
 export declare function addRoutes(fn: (app: Hono) => void | Promise<void>): void;
+/**
+ * Serializa dados para injeção num <script> inline. JSON não escapa `<`, então
+ * uma string com `</script>` nos dados fecharia a tag no meio — o resto do
+ * payload transborda pro documento como HTML e a hidratação quebra (observado
+ * em produção com conteúdo de modelo contendo pseudo-tags). `<` é escape
+ * JSON/JS válido e decodifica transparente no cliente. Também escapa `>`
+ * (defesa para `<!--`) e U+2028/U+2029 (válidos em JSON, quebras de linha em
+ * JS antigo).
+ */
+export declare const jsonForScript: (value: unknown) => string;
 export declare const createApp: (routes: AppRoutes) => Promise<Hono>;
 export declare const startServer: (options: StartServerOptions) => Promise<Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">>;
 export default createApp;

package/dist/server.js

@@ -1,79 +1,85 @@
-import { jsx as g } from "preact/jsx-runtime";
-import { Hono as R } from "hono";
-import { logger as T } from "hono/logger";
-import { trimTrailingSlash as j } from "hono/trailing-slash";
-import { render as A } from "preact-render-to-string";
-import { Router as C } from "wouter-preact";
-import { AsyncLocalStorage as k } from "node:async_hooks";
+import { jsx as _ } from "preact/jsx-runtime";
+import { Hono as j } from "hono";
+import { logger as E } from "hono/logger";
+import { trimTrailingSlash as T } from "hono/trailing-slash";
+import { render as C } from "preact-render-to-string";
+import { Router as k } from "wouter-preact";
+import { AsyncLocalStorage as A } from "node:async_hooks";
 import { getAppContext as w } from "./app-context.js";
-import { flushPendingStreamRoutes as $, registerStreamHandler as D } from "./events.js";
-import { registerSocketRoutes as I, injectWebSocketServer as y } from "./sockets.js";
-const S = new k();
-globalThis.__veloServerData = S;
+import { flushPendingStreamRoutes as D, registerStreamHandler as $ } from "./events.js";
+import { registerSocketRoutes as I, injectWebSocketServer as S } from "./sockets.js";
+const P = new A();
+globalThis.__veloServerData = P;
 let v = null;
-function Y(e) {
+function Z(e) {
   if (v) {
     e(v);
     return;
   }
   w().serverCallbacks.push(e);
 }
-function P(e) {
+function b(e) {
   v = e;
   const t = w();
   for (const s of t.serverCallbacks) s(e);
   t.serverCallbacks.length = 0;
 }
-function Z(e) {
+function ee(e) {
   w().pendingRoutes.push(e);
 }
-const N = (e, t, s, r) => {
+const N = (e) => JSON.stringify(e).replace(/</g, "\\u003c").replace(/>/g, "\\u003e").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029"), O = (e, t, s, r) => {
   if (r && r !== 200 && e.status(r), e.req.query("_data") === "1") {
-    const i = globalThis.__veloBuildHash || void 0, l = s ? { ...s, __buildHash: i } : { __buildHash: i };
-    return e.json(l);
+    const c = globalThis.__veloBuildHash || void 0, i = s ? { ...s, __buildHash: c } : { __buildHash: c };
+    return e.json(i);
   }
-  const o = e.req.path, n = S.run(
+  const o = e.req.path, n = P.run(
     s ?? {},
-    () => A(/* @__PURE__ */ g(C, { ssrPath: o, children: t }))
+    () => C(/* @__PURE__ */ _(k, { ssrPath: o, children: t }))
   );
   if (e.header("Cache-Control", "no-cache"), !s)
     return e.html(n);
-  const a = `<script>window.__PAGE_DATA__=${JSON.stringify(
-    s
-  )}<\/script>`;
+  const a = `<script>window.__PAGE_DATA__=${N(s)}<\/script>`;
   return e.html(n.replace("</head>", `${a}</head>`));
-}, O = async (e, t) => {
+}, G = async (e, t) => {
   const s = t.req.param(), r = t.req.query(), o = { params: s, query: r, c: t }, n = await Promise.all(
     e.map(async (i) => {
       if (!i.loader) return null;
-      const l = await i.loader(o), c = i.metadata?.moduleId;
-      return c ? { moduleId: c, loaderData: l } : null;
+      const l = await i.loader(o), d = i.metadata?.moduleId;
+      return d ? { moduleId: d, loaderData: l } : null;
     })
-  ), a = {
+  );
+  let a;
+  for (const i of n)
+    if (i && i.loaderData instanceof Response) {
+      a = i.loaderData;
+      break;
+    }
+  const c = {
     __params: s,
     __query: r,
     __pathname: t.req.path
   };
   for (const i of n)
-    i && (a[i.moduleId] = i.loaderData);
+    i && !(i.loaderData instanceof Response) && (c[i.moduleId] = i.loaderData);
   return {
     components: e.map((i) => i.Component),
-    data: a
+    data: c,
+    shortCircuit: a
   };
-}, G = (e) => {
+}, H = (e) => {
   if (e.length === 0) return null;
   const t = e.filter(Boolean);
   if (t.length === 0) return null;
   if (t.length === 1) {
     const o = t[0];
-    return /* @__PURE__ */ g(o, {});
+    return /* @__PURE__ */ _(o, {});
   }
   const s = t[t.length - 1];
-  return t.slice(0, -1).reduceRight((o, n) => /* @__PURE__ */ g(n, { children: o }), /* @__PURE__ */ g(s, {}));
-}, _ = (e, t, s = [], r = []) => {
+  return t.slice(0, -1).reduceRight((o, n) => /* @__PURE__ */ _(n, { children: o }), /* @__PURE__ */ _(s, {}));
+}, y = (e, t, s = [], r = []) => {
   for (const o of t) {
     if (o.handler && !o.module) {
-      o.children && _(
+      o.children && y(
         e,
         o.children,
         s,
@@ -86,29 +92,34 @@ const N = (e, t, s, r) => {
       ...o.middlewares || []
     ];
     if (o.children)
-      _(
+      y(
         e,
         o.children,
         n,
         a
       );
     else if (o.module) {
-      const i = o.path === "*", l = o.statusCode ?? (i ? 404 : void 0), c = o.module.metadata?.fullPath;
-      if (!c && !i) {
+      const c = o.path === "*", i = o.statusCode ?? (c ? 404 : void 0), l = o.module.metadata?.fullPath;
+      if (!l && !c) {
         console.warn(
           `Module ${o.module.metadata?.moduleId} has no fullPath`
         );
         continue;
       }
-      const u = async (h) => {
-        const { components: d, data: m } = await O(n, h), f = G(d);
-        return N(h, f, m, l);
+      const d = async (h) => {
+        const { components: u, data: m, shortCircuit: f } = await G(n, h);
+        if (f) {
+          const g = f.headers.get("Location");
+          return h.req.query("_data") === "1" && g && f.status >= 300 && f.status < 400 ? h.json({ __redirect: g }) : f;
+        }
+        const p = H(u);
+        return O(h, p, m, i);
       };
-      i ? e.notFound(u) : a.length > 0 ? e.on(["GET"], [c], ...a, u) : e.on(["GET"], [c], u);
+      c ? e.notFound(d) : a.length > 0 ? e.on(["GET"], [l], ...a, d) : e.on(["GET"], [l], d);
     } else
       continue;
   }
-}, b = (e, t, s = []) => {
+}, q = (e, t, s = []) => {
   for (const r of t) {
     const o = r.module?.metadata?.moduleId, n = [
       ...s,
@@ -116,71 +127,71 @@ const N = (e, t, s, r) => {
     ];
     if (r.module && o) {
       const a = Object.keys(r.module).filter(
-        (i) => i.startsWith("action_")
+        (c) => c.startsWith("action_")
       );
-      for (const i of a) {
-        const l = i.replace("action_", ""), c = r.module[i];
-        if (typeof c == "function") {
-          const u = `/_action/${o}/${l}`, h = async (d) => {
+      for (const c of a) {
+        const i = c.replace("action_", ""), l = r.module[c];
+        if (typeof l == "function") {
+          const d = `/_action/${o}/${i}`, h = async (u) => {
             let m = {};
             try {
-              m = await d.req.json();
+              m = await u.req.json();
             } catch {
             }
             const f = {
               body: m,
-              params: d.req.param(),
-              query: d.req.query(),
-              c: d
+              params: u.req.param(),
+              query: u.req.query(),
+              c: u
             };
             try {
-              const p = await c(f);
-              return d.json(p ?? { ok: !0 });
+              const p = await l(f);
+              return u.json(p ?? { ok: !0 });
             } catch (p) {
-              const E = p instanceof Error ? p.message : "Action failed";
-              return d.json({ error: E }, 500);
+              const g = p instanceof Error ? p.message : "Action failed";
+              return u.json({ error: g }, 500);
             }
           };
           n.length > 0 ? e.on(
             ["POST"],
-            [u],
+            [d],
             ...n,
             h
-          ) : e.on(["POST"], [u], h);
+          ) : e.on(["POST"], [d], h);
         }
       }
     }
-    r.children && b(e, r.children, n);
+    r.children && q(e, r.children, n);
   }
-}, H = async (e, t, s = []) => {
+}, x = async (e, t, s = []) => {
   const r = (o, n) => {
     for (const a of o) {
-      const i = a.module?.metadata?.moduleId, l = [
+      const c = a.module?.metadata?.moduleId, i = [
         ...n,
         ...a.middlewares || []
       ];
-      if (a.module && i) {
-        const c = Object.keys(a.module).filter(
-          (u) => u.startsWith("stream_")
+      if (a.module && c) {
+        const l = Object.keys(a.module).filter(
+          (d) => d.startsWith("stream_")
         );
-        for (const u of c) {
-          const h = u.replace("stream_", ""), d = a.module[u];
-          if (d?.__isVeloEventStream) {
-            const m = `/_event/${i}/${h}`;
-            d.__path = m, D(
+        for (const d of l) {
+          const h = d.replace("stream_", ""), u = a.module[d];
+          if (u?.__isVeloEventStream) {
+            const m = `/_event/${c}/${h}`;
+            u.__path = m, $(
               e,
               m,
-              d,
-              l
+              u,
+              i
             );
           }
         }
       }
-      a.children && r(a.children, l);
+      a.children && r(a.children, i);
     }
   };
   r(t, s);
-}, x = (e, t) => t ? t.startsWith("/") ? e + t : e ? e + "/" + t : "/" + t : e || "", V = (e) => {
+}, V = (e, t) => t ? t.startsWith("/") ? e + t : e ? e + "/" + t : "/" + t : e || "", W = (e) => {
   const t = /* @__PURE__ */ new Set(), s = (r) => {
     for (const o of r) {
       if (o.module && !o.children) {
@@ -191,68 +202,69 @@ const N = (e, t, s, r) => {
     }
   };
   return s(e), t;
-}, q = (e, t, s, r = "", o = []) => {
+}, R = (e, t, s, r = "", o = []) => {
   for (const n of t) {
-    const a = x(r, n.path), i = [
+    const a = V(r, n.path), c = [
       ...o,
       ...n.middlewares || []
-    ], l = !!n.handler, c = !!n.method;
-    if (l && !c ? console.warn(
+    ], i = !!n.handler, l = !!n.method;
+    if (i && !l ? console.warn(
       `[velojs] invalid route at "${a || "/"}" — "handler" set without "method"; endpoint skipped`
-    ) : c && !l ? console.warn(
+    ) : l && !i ? console.warn(
       `[velojs] invalid route at "${a || "/"}" — "method" set without "handler"; endpoint skipped`
-    ) : l && n.module ? console.warn(
+    ) : i && n.module ? console.warn(
       `[velojs] ambiguous route at "${a || "/"}" — both "module" and "handler" set; endpoint ignored, page kept`
-    ) : l && n.isRoot && console.warn(
+    ) : i && n.isRoot && console.warn(
       `[velojs] "isRoot" has no effect on endpoint at "${a || "/"}"; ignored`
-    ), l && c && !n.module) {
+    ), i && l && !n.module) {
       const h = n.method;
       h === "GET" && s.has(a) && console.warn(
         `[velojs] path "${a}" has both a page GET and an endpoint GET; the page wins and the endpoint is unreachable. Consider renaming one.`
       );
-      const d = n.handler, m = async (f) => await d({
+      const u = n.handler, m = async (f) => await u({
         c: f,
         params: f.req.param(),
         query: f.req.query()
       });
-      i.length > 0 ? e.on([h], [a], ...i, m) : e.on([h], [a], m);
+      c.length > 0 ? e.on([h], [a], ...c, m) : e.on([h], [a], m);
     }
-    n.children && q(
+    n.children && R(
       e,
       n.children,
       s,
       a,
-      i
+      c
     );
   }
-}, W = async (e) => {
-  const t = new R();
-  t.use(j()), process.env.NODE_ENV !== "production" && t.use("*", T());
+}, K = async (e) => {
+  const t = new j();
+  t.use(T()), process.env.NODE_ENV !== "production" && t.use("*", E());
   const r = w().pendingRoutes.splice(0);
   for (const n of r)
     await n(t);
-  _(t, e), b(t, e), await H(t, e);
-  const o = V(e);
-  if (q(t, e, o), await I(t, e), $(t), process.env.NODE_ENV !== "production" && !v) {
+  y(t, e), q(t, e), await x(t, e);
+  const o = W(e);
+  if (R(t, e, o), await I(t, e), D(t), process.env.NODE_ENV !== "production" && !v) {
     const n = globalThis.__veloDevServer;
-    n && (P(n), await y(t, n));
+    n && (b(n), await S(t, n));
   }
   return t;
-}, ee = async (e) => {
-  const { routes: t } = e, s = Number(process.env.PORT) || e.port || 3e3, r = await W(t);
+}, te = async (e) => {
+  const { routes: t } = e, s = Number(process.env.PORT) || e.port || 3e3, r = await K(t);
   if (process.env.NODE_ENV === "production" && !process.env.VELO_STATIC) {
-    const { serve: o } = await import("@hono/node-server"), { serveStatic: n } = await import("@hono/node-server/serve-static"), { join: a } = await import("node:path"), i = a(process.cwd(), "dist/client");
-    (process.env.STATIC_BASE_URL || "").startsWith("http") || r.use("/*", n({ root: i })), console.log(`Server running on http://localhost:${s}`);
-    const c = o({ fetch: r.fetch, port: s });
-    await y(r, c), P(c);
+    const { serve: o } = await import("@hono/node-server"), { serveStatic: n } = await import("@hono/node-server/serve-static"), { join: a } = await import("node:path"), c = a(process.cwd(), "dist/client");
+    (process.env.STATIC_BASE_URL || "").startsWith("http") || r.use("/*", n({ root: c })), console.log(`Server running on http://localhost:${s}`);
+    const l = o({ fetch: r.fetch, port: s });
+    await S(r, l), b(l);
   }
   return r;
 };
 export {
-  Z as addRoutes,
-  W as createApp,
-  W as default,
-  Y as onServer,
-  S as serverDataStorage,
-  ee as startServer
+  ee as addRoutes,
+  K as createApp,
+  K as default,
+  N as jsonForScript,
+  Z as onServer,
+  P as serverDataStorage,
+  te as startServer
 };

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@mauroandre/velojs",
-    "version": "0.0.46",
+    "version": "0.0.48",
     "type": "module",
     "description": "Fullstack web framework built on Hono + Preact with Vite-powered AST transforms",
     "keywords": [