@thoughtpivot/flight 2.0.2 → 3.0.1

package/dist/flight.js

@@ -22,44 +22,8 @@ const path_1 = __importDefault(require("path"));
 const koa_ratelimit_1 = __importDefault(require("koa-ratelimit"));
 const koa_static_1 = __importDefault(require("koa-static"));
 const koa_session_1 = __importDefault(require("koa-session"));
+const backend_discovery_js_1 = require("./backend-discovery.js");
 const spa_pipeline_js_1 = require("./spa-pipeline.js");
-function normalizeExcludePaths(value) {
-    if (value == null || value === '')
-        return [];
-    const parts = Array.isArray(value) ? value : [value];
-    const out = [];
-    for (const p of parts) {
-        const s = String(p).trim();
-        if (!s)
-            continue;
-        out.push(...s
-            .split(',')
-            .map((x) => x.trim())
-            .filter(Boolean));
-    }
-    return out;
-}
-function dedupeStrings(items) {
-    return [...new Set(items)];
-}
-/** Build fast-glob ignore globs for trees rooted under `appRootAbs`. */
-function backendDiscoveryIgnorePatterns(appRootAbs, excludeRelativeDirs) {
-    const patterns = [];
-    for (const raw of excludeRelativeDirs) {
-        const trimmed = raw.trim();
-        if (!trimmed)
-            continue;
-        const resolved = path_1.default.resolve(appRootAbs, trimmed);
-        const rel = path_1.default.relative(appRootAbs, resolved);
-        const relPosix = rel.replace(/\\/g, '/');
-        if (!relPosix || relPosix.startsWith('..') || path_1.default.isAbsolute(rel)) {
-            console.warn(`Flight: exclude_paths entry skipped (outside app_home): ${trimmed}`);
-            continue;
-        }
-        patterns.push(`${relPosix}/**`);
-    }
-    return patterns;
-}
 const _yargs = require('yargs/yargs');
 const yargsEntry = typeof _yargs === 'function' ? _yargs : _yargs.default;
 const argv = yargsEntry(process.argv.slice(2))
@@ -72,7 +36,7 @@ const argv = yargsEntry(process.argv.slice(2))
 })
     .option('mode', {
     type: 'string',
-    describe: 'development (Vite HMR) or production'
+    describe: 'development (Vite HMR for Vue/React per vite.config) or production'
 })
     .option('port', {
     type: 'number',
@@ -145,11 +109,8 @@ if (argv.disable_vite === undefined) {
 // Ensure the value is a boolean
 argv.disable_vite = Boolean(argv.disable_vite);
 const appHomePath = path_1.default.resolve(argv.app_home);
-const excludePathsConfigured = dedupeStrings([
-    ...normalizeExcludePaths(argv.exclude_paths),
-    ...normalizeExcludePaths(process.env.FLIGHT_EXCLUDE_PATHS)
-]);
-const backendDiscoveryIgnores = backendDiscoveryIgnorePatterns(appHomePath, excludePathsConfigured);
+const excludePathsConfigured = (0, backend_discovery_js_1.mergeExcludePaths)(argv.exclude_paths, process.env.FLIGHT_EXCLUDE_PATHS);
+const backendDiscoveryIgnores = (0, backend_discovery_js_1.backendDiscoveryIgnorePatterns)(appHomePath, excludePathsConfigured);
 process.chdir(appHomePath);
 console.log(appHomePath);
 if (backendDiscoveryIgnores.length > 0) {
@@ -230,7 +191,7 @@ else {
         const distRoot = (0, spa_pipeline_js_1.resolveDistRoot)(process.cwd());
         const useSpaPipeline = (0, spa_pipeline_js_1.productionSpaPipelineActive)(mode, Boolean(argv.disable_vite));
         const staticPrefixes = (0, spa_pipeline_js_1.parseCommaPrefixes)(process.env.FLIGHT_STATIC_PREFIXES, '/assets,/fonts');
-        const rateLimitSkipPrefixes = dedupeStrings([
+        const rateLimitSkipPrefixes = (0, backend_discovery_js_1.dedupeStrings)([
             ...staticPrefixes,
             ...(0, spa_pipeline_js_1.parseCommaPrefixes)(process.env.FLIGHT_RATE_LIMIT_EXCLUDE_PREFIXES, '')
         ]);
@@ -286,17 +247,17 @@ else {
             shell: true
         });
         viteProcess.on('error', (error) => {
-            console.error('Failed to start vite server:', error);
+            console.error('Failed to start Vite dev server:', error);
         });
         viteProcess.on('exit', (code) => {
             if (code !== 0) {
-                console.error(`Vite server exited with code ${code}`);
+                console.error(`Vite dev server exited with code ${code}`);
             }
         });
         process.on('SIGINT', () => {
             viteProcess.kill('SIGINT');
             process.exit(0);
         });
-        console.log(`Vite development server with hot module reload ${process.pid} started on 3001`);
+        console.log(`Vite dev server (HMR for Vue/React per your vite.config) for worker ${process.pid} on port 3001`);
     }
 }

package/dist/spa-pipeline.js

@@ -30,6 +30,7 @@ function applyTrustProxy(app, env = process.env) {
     const t = env.FLIGHT_TRUST_PROXY;
     app.proxy = t === '1' || t === 'true' || t === 'yes';
 }
+/** Use `fallback` only when `value` is missing. Add a leading `/` to entries that lack one. */
 function parseCommaPrefixes(value, fallback) {
     const raw = (value ?? fallback).trim();
     if (!raw)
@@ -41,11 +42,18 @@ function parseCommaPrefixes(value, fallback) {
         .map((p) => (p.startsWith('/') ? p : `/${p}`));
 }
 function resolveDistRoot(cwd, env = process.env) {
-    return path_1.default.resolve(cwd, env.FLIGHT_DIST_PATH || '../dist');
+    const configured = env.FLIGHT_DIST_PATH?.trim();
+    return path_1.default.resolve(cwd, configured || '../dist');
 }
+/** SPA shell path inside the dist root. `..` segments and blank values fall back to `index.html`. */
 function spaIndexRelative(env = process.env) {
-    const v = (env.FLIGHT_SPA_INDEX || 'index.html').trim();
-    return v.replace(/^\/+/, '');
+    const configured = env.FLIGHT_SPA_INDEX?.trim().replace(/^\/+/, '');
+    if (!configured)
+        return 'index.html';
+    const normalized = configured.replace(/\\/g, '/');
+    if (normalized.split('/').includes('..'))
+        return 'index.html';
+    return normalized;
 }
 const DEFAULT_DENY_PREFIXES = ['/api', '/health'];
 /** Match connect-history-api-fallback default: do not rewrite paths whose last segment looks like a file name. */
@@ -56,8 +64,16 @@ function lastPathSegmentLooksLikeFile(urlPath) {
 /**
  * After koa-static: serve index.html for document navigations that are not API, health, or static-like paths.
  */
+function indexInsideDist(distRoot, indexRel) {
+    const indexAbs = path_1.default.resolve(distRoot, indexRel);
+    const rel = path_1.default.relative(distRoot, indexAbs);
+    const relPosix = rel.replace(/\\/g, '/');
+    if (!relPosix || relPosix === '..' || relPosix.startsWith('../') || path_1.default.isAbsolute(rel))
+        return undefined;
+    return indexAbs;
+}
 function spaIndexHtmlFallback(distRoot, indexRel, extraDenyPrefixes = []) {
-    const indexAbs = path_1.default.join(distRoot, indexRel);
+    const indexAbs = indexInsideDist(distRoot, indexRel);
     const deny = dedupePathList([...DEFAULT_DENY_PREFIXES, ...extraDenyPrefixes]);
     return async (ctx, next) => {
         if (ctx.method !== 'GET' && ctx.method !== 'HEAD')
@@ -75,6 +91,8 @@ function spaIndexHtmlFallback(distRoot, indexRel, extraDenyPrefixes = []) {
                 return next();
             }
         }
+        if (!indexAbs)
+            return next();
         try {
             await fs_1.default.promises.access(indexAbs, fs_1.default.constants.R_OK);
         }

package/package.json

@@ -1,18 +1,25 @@
 {
     "name": "@thoughtpivot/flight",
-    "version": "2.0.2",
+    "version": "3.0.1",
     "description": "A web server designed for running full stack, component based applications at enterprise scale.",
     "main": "src/flight.ts",
     "publishConfig": {
         "access": "public"
     },
+    "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+    },
     "bin": {
-        "flight": "dist/flight.js"
+        "flight": "dist/flight.js",
+        "flight-bun": "src/bun/server.ts"
     },
     "scripts": {
         "lint": "eslint . --fix && prettier -w .",
+        "lint:check": "eslint . && prettier -c .",
         "build": "rm -rf dist; node_modules/.bin/tsc --project .",
-        "test": "npm run build && node --test dist/spa-pipeline.test.js",
+        "test": "npm run build && node --test dist/*.test.js",
+        "test:bun": "bun test src/bun/app.test.ts",
+        "start:bun": "bun src/bun/server.ts",
         "prepublishOnly": "npm run build"
     },
     "repository": {
@@ -20,7 +27,7 @@
         "url": "git+https://github.com/thoughtpivot/flight.git"
     },
     "author": "",
-    "license": "MIT",
+    "license": "Apache-2.0",
     "bugs": {
         "url": "https://github.com/thoughtpivot/flight/issues"
     },
@@ -28,35 +35,40 @@
     "files": [
         "dist/flight.js",
         "dist/spa-pipeline.js",
+        "dist/backend-discovery.js",
+        "src/bun",
         "README.md",
         "CHANGELOG.md",
+        "LICENSE",
+        "NOTICE",
         "readme-assets"
     ],
     "dependencies": {
         "@koa/cors": "^5.0.0",
         "@koa/router": "^13.1.0",
-        "@vitejs/plugin-vue": "^5.2.1",
+        "@vitejs/plugin-react": "^6.1.1",
+        "@vitejs/plugin-vue": "^6.0.9",
         "@vue/language-plugin-pug": "^2.2.0",
         "core-js": "^3.40.0",
         "dotenv": "^17.4.2",
         "esbuild": "^0.28.0",
         "fast-glob": "^3.3.3",
-        "ioredis": "^5.4.2",
+        "ioredis": "^6.0.0",
         "koa": "^2.15.3",
         "koa-bodyparser": "^4.4.1",
         "koa-cash": "^5.0.0",
         "koa-compress": "^5.1.1",
         "koa-connect-history-api-fallback": "^0.3.1",
-        "koa-helmet": "^8.0.1",
-        "koa-logger": "^3.2.1",
-        "koa-ratelimit": "^5.1.0",
+        "koa-helmet": "^9.0.0",
+        "koa-logger": "^4.0.0",
+        "koa-ratelimit": "^6.0.0",
         "koa-redis": "^4.0.1",
         "koa-send": "^5.0.1",
         "koa-session": "^6.4.0",
         "koa-static": "^5.0.0",
         "unplugin-fonts": "^2.0.0",
-        "vite": "^6.1.7",
-        "vite-plugin-vuetify": "^2.0.4",
+        "vite": "^8.3.2",
+        "vite-plugin-vuetify": "^2.1.3",
         "yargs": "^18.0.0"
     },
     "devDependencies": {