@ultimat3/cli 27.2.0 → 27.2.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ultimat3/cli",
-  "version": "27.2.0",
+  "version": "27.2.2",
   "description": "The `x` binary: new, dev, build, verify, generate, db, mcp, doctor, deploy",
   "license": "MIT",
   "type": "module",
@@ -39,33 +39,33 @@
   },
   "dependencies": {
     "@babel/core": "^8.0.1",
-    "@ultimat3/action": "27.2.0",
-    "@ultimat3/admin": "27.2.0",
-    "@ultimat3/ai": "27.2.0",
-    "@ultimat3/auth": "27.2.0",
-    "@ultimat3/cache": "27.2.0",
-    "@ultimat3/core": "27.2.0",
-    "@ultimat3/db": "27.2.0",
-    "@ultimat3/entity": "27.2.0",
-    "@ultimat3/flags": "27.2.0",
-    "@ultimat3/http": "27.2.0",
-    "@ultimat3/i18n": "27.2.0",
-    "@ultimat3/jobs": "27.2.0",
-    "@ultimat3/mail": "27.2.0",
-    "@ultimat3/manifest": "27.2.0",
-    "@ultimat3/mcp": "27.2.0",
-    "@ultimat3/money": "27.2.0",
-    "@ultimat3/notify": "27.2.0",
-    "@ultimat3/policy": "27.2.0",
-    "@ultimat3/pwa": "27.2.0",
-    "@ultimat3/query": "27.2.0",
-    "@ultimat3/realtime": "27.2.0",
-    "@ultimat3/render": "27.2.0",
-    "@ultimat3/schema": "27.2.0",
-    "@ultimat3/seo": "27.2.0",
-    "@ultimat3/storage": "27.2.0",
-    "@ultimat3/testing": "27.2.0",
-    "@ultimat3/time": "27.2.0",
+    "@ultimat3/action": "27.2.2",
+    "@ultimat3/admin": "27.2.2",
+    "@ultimat3/ai": "27.2.2",
+    "@ultimat3/auth": "27.2.2",
+    "@ultimat3/cache": "27.2.2",
+    "@ultimat3/core": "27.2.2",
+    "@ultimat3/db": "27.2.2",
+    "@ultimat3/entity": "27.2.2",
+    "@ultimat3/flags": "27.2.2",
+    "@ultimat3/http": "27.2.2",
+    "@ultimat3/i18n": "27.2.2",
+    "@ultimat3/jobs": "27.2.2",
+    "@ultimat3/mail": "27.2.2",
+    "@ultimat3/manifest": "27.2.2",
+    "@ultimat3/mcp": "27.2.2",
+    "@ultimat3/money": "27.2.2",
+    "@ultimat3/notify": "27.2.2",
+    "@ultimat3/policy": "27.2.2",
+    "@ultimat3/pwa": "27.2.2",
+    "@ultimat3/query": "27.2.2",
+    "@ultimat3/realtime": "27.2.2",
+    "@ultimat3/render": "27.2.2",
+    "@ultimat3/schema": "27.2.2",
+    "@ultimat3/seo": "27.2.2",
+    "@ultimat3/storage": "27.2.2",
+    "@ultimat3/testing": "27.2.2",
+    "@ultimat3/time": "27.2.2",
     "babel-preset-solid": "^1.9.15"
   }
 }

package/src/app-runtime.ts

@@ -30,6 +30,13 @@ export async function loadAppRuntime(root: string): Promise<RuntimeOverrides | u
   if (!existsSync(join(root, 'apps'))) return undefined;
   const files: string[] = [];
   for await (const file of new Bun.Glob(APP_RUNTIME_GLOB).scan({ cwd: root })) files.push(file);
+  // The `.tsx` loader BEFORE the first app import, which this is on `runRole`'s path: a Bun plugin
+  // only transforms modules loaded after it, and nothing on `@ultimat3/cli/serve`'s static graph
+  // installs it. Without this, every component `runtime.ts` reaches compiled to
+  // `React.createElement` and stayed cached that way for the pages (27.2.x images: `React is not
+  // defined`). Dynamic, so a root with no `runtime.ts` loads nothing, and the serve entry's static
+  // graph (`serve-graph.test.ts`) is unchanged.
+  if (files.length > 0) await import('@ultimat3/render/server');
   for (const file of files.sort()) {
     const module = (await import(join(root, file))) as Record<string, unknown>;
     const exported = module[APP_RUNTIME_EXPORT];

package/src/runtime-hooks.ts

@@ -15,7 +15,7 @@ import { routeFor } from '@ultimat3/render';
  * purpose. `can()` checks the name against the registry; this only checks the shape, so a
  * malformed guard denies with "no policy registered" instead of throwing inside the pipeline.
  */
-const isPermission = (value: string): value is KnownPermission => /^[^:]+:[^:]+$/.test(value);
+const isPermission = (value: string): value is KnownPermission => /^[^:]+(?::[^:]+)+$/.test(value);
 
 /** A page carries only the permission label, because that is all `RouteGuard` keeps. */
 function policyFor(path: string): Policy<unknown, unknown> | undefined {