@ultimat3/cli 27.16.1 → 28.0.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ultimat3/cli",
-  "version": "27.16.1",
+  "version": "28.0.0",
   "description": "The `x` binary: new, dev, build, verify, generate, db, mcp, doctor, deploy",
   "license": "MIT",
   "type": "module",
@@ -30,7 +30,7 @@
     "LICENSE"
   ],
   "engines": {
-    "bun": ">=1.4.2"
+    "bun": ">=1.4.3"
   },
   "scripts": {
     "typecheck": "tsc --noEmit -p tsconfig.json",
@@ -39,33 +39,33 @@
   },
   "dependencies": {
     "@babel/core": "^8.0.1",
-    "@ultimat3/action": "27.16.1",
-    "@ultimat3/admin": "27.16.1",
-    "@ultimat3/ai": "27.16.1",
-    "@ultimat3/auth": "27.16.1",
-    "@ultimat3/cache": "27.16.1",
-    "@ultimat3/core": "27.16.1",
-    "@ultimat3/db": "27.16.1",
-    "@ultimat3/entity": "27.16.1",
-    "@ultimat3/flags": "27.16.1",
-    "@ultimat3/http": "27.16.1",
-    "@ultimat3/i18n": "27.16.1",
-    "@ultimat3/jobs": "27.16.1",
-    "@ultimat3/mail": "27.16.1",
-    "@ultimat3/manifest": "27.16.1",
-    "@ultimat3/mcp": "27.16.1",
-    "@ultimat3/money": "27.16.1",
-    "@ultimat3/notify": "27.16.1",
-    "@ultimat3/policy": "27.16.1",
-    "@ultimat3/pwa": "27.16.1",
-    "@ultimat3/query": "27.16.1",
-    "@ultimat3/realtime": "27.16.1",
-    "@ultimat3/render": "27.16.1",
-    "@ultimat3/schema": "27.16.1",
-    "@ultimat3/seo": "27.16.1",
-    "@ultimat3/storage": "27.16.1",
-    "@ultimat3/testing": "27.16.1",
-    "@ultimat3/time": "27.16.1",
+    "@ultimat3/action": "28.0.0",
+    "@ultimat3/admin": "28.0.0",
+    "@ultimat3/ai": "28.0.0",
+    "@ultimat3/auth": "28.0.0",
+    "@ultimat3/cache": "28.0.0",
+    "@ultimat3/core": "28.0.0",
+    "@ultimat3/db": "28.0.0",
+    "@ultimat3/entity": "28.0.0",
+    "@ultimat3/flags": "28.0.0",
+    "@ultimat3/http": "28.0.0",
+    "@ultimat3/i18n": "28.0.0",
+    "@ultimat3/jobs": "28.0.0",
+    "@ultimat3/mail": "28.0.0",
+    "@ultimat3/manifest": "28.0.0",
+    "@ultimat3/mcp": "28.0.0",
+    "@ultimat3/money": "28.0.0",
+    "@ultimat3/notify": "28.0.0",
+    "@ultimat3/policy": "28.0.0",
+    "@ultimat3/pwa": "28.0.0",
+    "@ultimat3/query": "28.0.0",
+    "@ultimat3/realtime": "28.0.0",
+    "@ultimat3/render": "28.0.0",
+    "@ultimat3/schema": "28.0.0",
+    "@ultimat3/seo": "28.0.0",
+    "@ultimat3/storage": "28.0.0",
+    "@ultimat3/testing": "28.0.0",
+    "@ultimat3/time": "28.0.0",
     "babel-preset-solid": "^1.9.15"
   }
 }

package/src/app-root.ts

@@ -36,7 +36,7 @@ export const MANIFEST_FILE = 'x.manifest.json';
  * declared supported would hang on graceful shutdown the moment its database went away. The full
  * measurement is in `.github/actions/setup/action.yml`; read it before lowering this.
  */
-export const REQUIRED_BUN = '1.4.2';
+export const REQUIRED_BUN = '1.4.3';
 
 export interface AppRoot {
   readonly dir: string;

package/src/compile-executable.ts

@@ -0,0 +1,44 @@
+// A single-file executable whose graph carries the framework's own source: the `x` image
+// (`docker/Dockerfile`, through `scripts/compile-x.ts`) and the boot e2e that proves it. One
+// `Bun.build`, because the CLI's `bun build --compile` takes no plugin and this graph needs one.
+
+import { serverTsxBuildPlugin } from '@ultimat3/render/server';
+import { COMPILE_EXTERNALS } from './compile-externals';
+import { ExecutableCompileFailedError } from './errors';
+
+export interface CompileExecutableOptions {
+  readonly entry: string;
+  readonly outfile: string;
+  /** `--define` pairs: each value is a JS expression, so a string arrives `JSON.stringify`-ed. */
+  readonly define?: Readonly<Record<string, string>>;
+  readonly minify?: boolean;
+  readonly sourcemap?: boolean;
+}
+
+/**
+ * The CLI registry reaches every admin screen and `@ultimat3/ui` component (`cmd-dev` → the dev
+ * dashboard, `cmd-i18n` → the admin catalog): 92 `.tsx`, measured on 1.4.3. Compiled by Bun's own
+ * transform each one imports `jsxDEV` from `solid-js/jsx-dev-runtime`, which exports no such name,
+ * and Bun 1.4.3 refuses the build (issue #883) — through 1.4.2 it shipped a `React.createElement`
+ * nobody defines. `serverTsxBuildPlugin` compiles them to the server factory, as the runtime
+ * loader does for the same files off disk.
+ */
+export async function compileExecutable(options: CompileExecutableOptions): Promise<void> {
+  const built = await Bun.build({
+    entrypoints: [options.entry],
+    compile: { outfile: options.outfile },
+    minify: options.minify ?? false,
+    sourcemap: options.sourcemap === true ? 'linked' : 'none',
+    define: { ...options.define },
+    external: [...COMPILE_EXTERNALS],
+    plugins: [serverTsxBuildPlugin],
+    throw: false,
+  });
+  if (!built.success) {
+    throw new ExecutableCompileFailedError({
+      entry: options.entry,
+      outfile: options.outfile,
+      logs: built.logs.map(String).join('\n'),
+    });
+  }
+}

package/src/compile-externals.ts

@@ -1,6 +1,7 @@
-// The specifiers every `bun build --compile` in this repo must refuse to resolve. One list, because
-// the flag is repeated at each compile site — `binaryArgs`, `docker/Dockerfile`, the boot e2e — and
-// three copies of a resolver allowlist is three chances for one of them to be the stale one.
+// The specifiers every `--compile` in this repo must refuse to resolve. One list, because there are
+// two compile sites — `binaryArgs` (the CLI's flag) and `compile-executable.ts` (`docker/Dockerfile`
+// and the boot e2e, through `Bun.build`) — and two copies of a resolver allowlist is two chances
+// for one of them to be the stale one.
 
 /**
  * `@babel/preset-typescript` is reached from `@babel/core`'s `.cts`-config loader and from nowhere

package/src/errors.ts

@@ -335,6 +335,20 @@ export class FrameworkScriptBuildFailedError extends UltimateError {
   }
 }
 
+/**
+ * A single-file executable would not compile (`compile-executable.ts`). The same code as every
+ * other bundle the framework builds; the cause carries the bundler's own log, which names the file.
+ */
+export class ExecutableCompileFailedError extends UltimateError {
+  constructor(input: { entry: string; outfile: string; logs: string }) {
+    super({
+      code: 'X_BUILD_FAILED',
+      cause: `${input.entry} would not compile to the executable ${input.outfile}: ${input.logs}`,
+      fix: 'bun run scripts/compile-x.ts --outfile <path>   # the same compile, its log in full',
+    });
+  }
+}
+
 /**
  * A static build over an app whose modules did not all import. The route registry is filled BY the
  * import, so a page whose module threw is not skipped but absent — and an export without it, with

package/src/templates/scaffold-container.ts

@@ -32,16 +32,16 @@ const dockerfile = (
 # from the file itself, and without it the frozen install cannot find what the lockfile names.
 # The tag names the series for the reader; the digest is what builds — a tag is a pointer its
 # publisher can move. Dependabot's docker ecosystem moves the digest together with the tag.
-# The digest is \`oven/bun:1.4.2-alpine\`'s, the patch the framework that wrote this file was
+# The digest is \`oven/bun:1.4.3-alpine\`'s, the patch the framework that wrote this file was
 # tested on — the same patch as \`engines.bun\` in package.json.
-FROM oven/bun:1.4-alpine@sha256:d888c0ae6c86d7866ff10c5aafdd9077b36aee6455b33dd270fb93c0dd5cef6f AS manifests
+FROM oven/bun:1.4-alpine@sha256:629e17411f1f129dbec3af78d5af9c9f2a937435c80349437206c6b0b7422373 AS manifests
 WORKDIR /app
 COPY . .
 RUN find . ! -type d ! -name package.json ! -name bunfig.toml ! -name '*.tgz' -delete \\
  && find . -type d -empty -delete
 
 # ---------- deps: runtime dependencies only, cached on the lockfile and the manifests ----------
-FROM oven/bun:1.4-alpine@sha256:d888c0ae6c86d7866ff10c5aafdd9077b36aee6455b33dd270fb93c0dd5cef6f AS deps
+FROM oven/bun:1.4-alpine@sha256:629e17411f1f129dbec3af78d5af9c9f2a937435c80349437206c6b0b7422373 AS deps
 WORKDIR /app
 COPY --from=manifests /app ./
 COPY bun.lock ./