@ultimat3/cli 27.2.1 → 27.2.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ultimat3/cli",
-  "version": "27.2.1",
+  "version": "27.2.3",
   "description": "The `x` binary: new, dev, build, verify, generate, db, mcp, doctor, deploy",
   "license": "MIT",
   "type": "module",
@@ -39,33 +39,33 @@
   },
   "dependencies": {
     "@babel/core": "^8.0.1",
-    "@ultimat3/action": "27.2.1",
-    "@ultimat3/admin": "27.2.1",
-    "@ultimat3/ai": "27.2.1",
-    "@ultimat3/auth": "27.2.1",
-    "@ultimat3/cache": "27.2.1",
-    "@ultimat3/core": "27.2.1",
-    "@ultimat3/db": "27.2.1",
-    "@ultimat3/entity": "27.2.1",
-    "@ultimat3/flags": "27.2.1",
-    "@ultimat3/http": "27.2.1",
-    "@ultimat3/i18n": "27.2.1",
-    "@ultimat3/jobs": "27.2.1",
-    "@ultimat3/mail": "27.2.1",
-    "@ultimat3/manifest": "27.2.1",
-    "@ultimat3/mcp": "27.2.1",
-    "@ultimat3/money": "27.2.1",
-    "@ultimat3/notify": "27.2.1",
-    "@ultimat3/policy": "27.2.1",
-    "@ultimat3/pwa": "27.2.1",
-    "@ultimat3/query": "27.2.1",
-    "@ultimat3/realtime": "27.2.1",
-    "@ultimat3/render": "27.2.1",
-    "@ultimat3/schema": "27.2.1",
-    "@ultimat3/seo": "27.2.1",
-    "@ultimat3/storage": "27.2.1",
-    "@ultimat3/testing": "27.2.1",
-    "@ultimat3/time": "27.2.1",
+    "@ultimat3/action": "27.2.3",
+    "@ultimat3/admin": "27.2.3",
+    "@ultimat3/ai": "27.2.3",
+    "@ultimat3/auth": "27.2.3",
+    "@ultimat3/cache": "27.2.3",
+    "@ultimat3/core": "27.2.3",
+    "@ultimat3/db": "27.2.3",
+    "@ultimat3/entity": "27.2.3",
+    "@ultimat3/flags": "27.2.3",
+    "@ultimat3/http": "27.2.3",
+    "@ultimat3/i18n": "27.2.3",
+    "@ultimat3/jobs": "27.2.3",
+    "@ultimat3/mail": "27.2.3",
+    "@ultimat3/manifest": "27.2.3",
+    "@ultimat3/mcp": "27.2.3",
+    "@ultimat3/money": "27.2.3",
+    "@ultimat3/notify": "27.2.3",
+    "@ultimat3/policy": "27.2.3",
+    "@ultimat3/pwa": "27.2.3",
+    "@ultimat3/query": "27.2.3",
+    "@ultimat3/realtime": "27.2.3",
+    "@ultimat3/render": "27.2.3",
+    "@ultimat3/schema": "27.2.3",
+    "@ultimat3/seo": "27.2.3",
+    "@ultimat3/storage": "27.2.3",
+    "@ultimat3/testing": "27.2.3",
+    "@ultimat3/time": "27.2.3",
     "babel-preset-solid": "^1.9.15"
   }
 }

package/src/app-runtime.ts

@@ -30,6 +30,13 @@ export async function loadAppRuntime(root: string): Promise<RuntimeOverrides | u
   if (!existsSync(join(root, 'apps'))) return undefined;
   const files: string[] = [];
   for await (const file of new Bun.Glob(APP_RUNTIME_GLOB).scan({ cwd: root })) files.push(file);
+  // The `.tsx` loader BEFORE the first app import, which this is on `runRole`'s path: a Bun plugin
+  // only transforms modules loaded after it, and nothing on `@ultimat3/cli/serve`'s static graph
+  // installs it. Without this, every component `runtime.ts` reaches compiled to
+  // `React.createElement` and stayed cached that way for the pages (27.2.x images: `React is not
+  // defined`). Dynamic, so a root with no `runtime.ts` loads nothing, and the serve entry's static
+  // graph (`serve-graph.test.ts`) is unchanged.
+  if (files.length > 0) await import('@ultimat3/render/server');
   for (const file of files.sort()) {
     const module = (await import(join(root, file))) as Record<string, unknown>;
     const exported = module[APP_RUNTIME_EXPORT];

package/src/metrics-endpoint.ts

@@ -4,6 +4,7 @@
 // series (`process_*`): a role that can be scraped reports what it costs.
 
 import {
+  BUILD_ID_HEADER,
   finiteCount,
   type HealthPayload,
   healthzPayload,
@@ -124,6 +125,13 @@ export function bindScrapePort<T>(
 export interface MetricsEndpoint {
   /** `http://host:port` — the base the scrape target appends `METRICS_PATH` to. */
   readonly url: string;
+  /**
+   * The build this process serves, sent as `x-ultimate-build` on `/healthz` and `/readyz` from here
+   * on — as every page sends it (#734). Told rather than passed at open: a container opens this
+   * port BEFORE its boot computes the build id (`serve.ts`), and `startRoles` is the one caller
+   * that has it, whichever opened the port. Until then the health answers carry no header.
+   */
+  announceBuild(buildId: string): void;
   stop(): void;
 }
 
@@ -132,10 +140,17 @@ export interface MetricsEndpoint {
  * `replicator` — so the replicator's readiness check (`role-replicator.ts`) is read by a probe.
  * The verdict only, never the report: this port is unauthenticated, and check names are topology.
  */
-function healthResponse(payload: HealthPayload, role: string): Response {
+function healthResponse(payload: HealthPayload, role: string, buildId: string | null): Response {
   return Response.json(
     { state: payload.body.state, ready: payload.body.ready, role },
-    { status: payload.status, headers: { 'cache-control': 'no-store' } },
+    {
+      status: payload.status,
+      // The build in the header (public on every page), never in the body (#53, #734).
+      headers: {
+        'cache-control': 'no-store',
+        ...(buildId === null ? {} : { [BUILD_ID_HEADER]: buildId }),
+      },
+    },
   );
 }
 
@@ -151,6 +166,7 @@ export function startMetricsEndpoint(options: MetricsEndpointOptions = {}): Metr
   // that way. Floor 0, because 0 asks the kernel for a free port and `role-start.ts` passes it for
   // an ephemeral boot; the ceiling stays Bun's, which names the range it refuses.
   const port = finiteCount('startMetricsEndpoint', 'port', options.port ?? DEFAULT_METRICS_PORT);
+  let buildId: string | null = null;
   // `startRoles` opens this FIRST, before any role, so `Bun.serve`'s own bare `Error` was what a
   // second `x dev` on one machine reported: no code, no fix, at the boot path this package owns.
   const server = bindScrapePort(port, options.whenTaken ?? 'refuse', (candidate) =>
@@ -160,11 +176,12 @@ export function startMetricsEndpoint(options: MetricsEndpointOptions = {}): Metr
       fetch(request: Request): Response {
         const url = new URL(request.url);
         const role = options.role ?? 'unknown';
-        if (url.pathname === '/healthz') return healthResponse(healthzPayload(), role);
+        if (url.pathname === '/healthz') return healthResponse(healthzPayload(), role, buildId);
         if (url.pathname === '/readyz') {
           return healthResponse(
             readyzPayload({ deep: url.searchParams.get('deep') === '1' }),
             role,
+            buildId,
           );
         }
         if (url.pathname !== METRICS_PATH) {
@@ -186,6 +203,9 @@ export function startMetricsEndpoint(options: MetricsEndpointOptions = {}): Metr
   logger.info('ultimate metrics listening', { url: `${server.url.origin}${METRICS_PATH}` });
   return {
     url: server.url.origin,
+    announceBuild(id: string): void {
+      buildId = id;
+    },
     stop(): void {
       server.stop(true);
       stopListening();

package/src/role-start.ts

@@ -289,6 +289,8 @@ export async function startRoles(options: StartRolesOptions): Promise<RunningRol
         whenTaken: whenMetricsPortTaken(binding.dev, options.env),
       });
     started.push(async () => metrics.stop());
+    // Opened here or adopted from `serve-boot.ts`, this is where the build id is known (#734).
+    metrics.announceBuild(options.buildId);
 
     // BUILT here, BOUND below, the web role between them: `web` serves the node's socket on its
     // own port and a listening server cannot be handed one, while the neighbouring-port refusals