@vertz/ui-server 0.2.16 → 0.2.18

package/dist/bun-dev-server.js

@@ -1268,6 +1268,9 @@ async function ssrRenderToString(module, url, options) {
   const ssrTimeout = options?.ssrTimeout ?? 300;
   ensureDomShim();
   const ctx = createRequestContext(normalizedUrl);
+  if (options?.ssrAuth) {
+    ctx.ssrAuth = options.ssrAuth;
+  }
   return ssrStorage.run(ctx, async () => {
     try {
       setGlobalSSRTimeout(ssrTimeout);
@@ -1286,6 +1289,15 @@ async function ssrRenderToString(module, url, options) {
         }
       }
       createApp();
+      if (ctx.ssrRedirect) {
+        return {
+          html: "",
+          css: "",
+          ssrData: [],
+          headTags: "",
+          redirect: ctx.ssrRedirect
+        };
+      }
       const store = ssrStorage.getStore();
       if (store) {
         if (store.pendingRouteComponents?.size) {
@@ -2229,10 +2241,16 @@ data: {}
             originalFetch: globalThis.fetch
           }) : null;
           let sessionScript = "";
+          let ssrAuth;
           if (sessionResolver) {
             try {
               const sessionResult = await sessionResolver(request);
               if (sessionResult) {
+                ssrAuth = {
+                  status: "authenticated",
+                  user: sessionResult.session.user,
+                  expiresAt: sessionResult.session.expiresAt
+                };
                 const scripts = [];
                 scripts.push(createSessionScript(sessionResult.session));
                 if (sessionResult.accessSet != null) {
@@ -2240,6 +2258,8 @@ data: {}
                 }
                 sessionScript = scripts.join(`
 `);
+              } else {
+                ssrAuth = { status: "unauthenticated" };
               }
             } catch (resolverErr) {
               console.warn("[Server] Session resolver failed:", resolverErr instanceof Error ? resolverErr.message : resolverErr);
@@ -2248,15 +2268,22 @@ data: {}
           const doRender = async () => {
             logger.log("ssr", "render-start", { url: pathname });
             const ssrStart = performance.now();
-            const result = await ssrRenderToString(ssrMod, pathname, {
+            const result = await ssrRenderToString(ssrMod, pathname + url.search, {
               ssrTimeout: 300,
-              fallbackMetrics: fontFallbackMetrics
+              fallbackMetrics: fontFallbackMetrics,
+              ssrAuth
             });
             logger.log("ssr", "render-done", {
               url: pathname,
               durationMs: Math.round(performance.now() - ssrStart),
               htmlBytes: result.html.length
             });
+            if (result.redirect) {
+              return new Response(null, {
+                status: 302,
+                headers: { Location: result.redirect.to }
+              });
+            }
             const scriptTag = buildScriptTag(bundledScriptUrl, hmrBootstrapScript, clientSrc);
             const combinedHeadTags = [headTags, result.headTags].filter(Boolean).join(`
 `);

package/dist/index.d.ts

@@ -375,6 +375,7 @@ declare function clearGlobalSSRTimeout(): void;
 declare function getGlobalSSRTimeout(): number | undefined;
 import { FontFallbackMetrics as FontFallbackMetrics4 } from "@vertz/ui";
 import { FontFallbackMetrics as FontFallbackMetrics3, Theme as Theme2 } from "@vertz/ui";
+import { SSRAuth as SSRAuth_jq1nwm } from "@vertz/ui/internals";
 interface SSRModule {
 	default?: () => unknown;
 	App?: () => unknown;
@@ -401,6 +402,10 @@ interface SSRRenderResult {
 	headTags: string;
 	/** Route patterns discovered by createRouter() during SSR (for build-time pre-rendering). */
 	discoveredRoutes?: string[];
+	/** Set when ProtectedRoute writes a redirect during SSR. Server should return 302. */
+	redirect?: {
+		to: string;
+	};
 }
 interface SSRDiscoverResult {
 	resolved: Array<{
@@ -420,6 +425,8 @@ declare function ssrRenderToString(module: SSRModule, url: string, options?: {
 	ssrTimeout?: number;
 	/** Pre-computed font fallback metrics (computed at server startup). */
 	fallbackMetrics?: Record<string, FontFallbackMetrics3>;
+	/** Auth state resolved from session cookie. Passed to SSRRenderContext for AuthProvider. */
+	ssrAuth?: SSRAuth_jq1nwm;
 }): Promise<SSRRenderResult>;
 /**
 * Discover queries for a given URL without rendering.

package/dist/index.js

@@ -19,7 +19,7 @@ import {
   ssrDiscoverQueries,
   ssrRenderToString,
   streamToString
-} from "./shared/chunk-969qgkdf.js";
+} from "./shared/chunk-c5ee9yf1.js";
 import {
   clearGlobalSSRTimeout,
   createSSRAdapter,

package/dist/shared/{chunk-969qgkdf.js → chunk-c5ee9yf1.js}

@@ -251,6 +251,9 @@ async function ssrRenderToString(module, url, options) {
   const ssrTimeout = options?.ssrTimeout ?? 300;
   ensureDomShim();
   const ctx = createRequestContext(normalizedUrl);
+  if (options?.ssrAuth) {
+    ctx.ssrAuth = options.ssrAuth;
+  }
   return ssrStorage.run(ctx, async () => {
     try {
       setGlobalSSRTimeout(ssrTimeout);
@@ -269,6 +272,15 @@ async function ssrRenderToString(module, url, options) {
         }
       }
       createApp();
+      if (ctx.ssrRedirect) {
+        return {
+          html: "",
+          css: "",
+          ssrData: [],
+          headTags: "",
+          redirect: ctx.ssrRedirect
+        };
+      }
       const store = ssrStorage.getStore();
       if (store) {
         if (store.pendingRouteComponents?.size) {
@@ -610,10 +622,16 @@ function createSSRHandler(options) {
       return handleNavRequest(module, pathname, ssrTimeout);
     }
     let sessionScript = "";
+    let ssrAuth;
     if (sessionResolver) {
       try {
         const sessionResult = await sessionResolver(request);
         if (sessionResult) {
+          ssrAuth = {
+            status: "authenticated",
+            user: sessionResult.session.user,
+            expiresAt: sessionResult.session.expiresAt
+          };
           const scripts = [];
           scripts.push(createSessionScript(sessionResult.session, nonce));
           if (sessionResult.accessSet != null) {
@@ -621,12 +639,14 @@ function createSSRHandler(options) {
           }
           sessionScript = scripts.join(`
 `);
+        } else {
+          ssrAuth = { status: "unauthenticated" };
         }
       } catch (resolverErr) {
         console.warn("[Server] Session resolver failed:", resolverErr instanceof Error ? resolverErr.message : resolverErr);
       }
     }
-    return handleHTMLRequest(module, template, pathname, ssrTimeout, nonce, fallbackMetrics, linkHeader, modulepreloadTags, cacheControl, sessionScript);
+    return handleHTMLRequest(module, template, pathname + url.search, ssrTimeout, nonce, fallbackMetrics, linkHeader, modulepreloadTags, cacheControl, sessionScript, ssrAuth);
   };
 }
 async function handleNavRequest(module, url, ssrTimeout) {
@@ -652,9 +672,15 @@ data: {}
     });
   }
 }
-async function handleHTMLRequest(module, template, url, ssrTimeout, nonce, fallbackMetrics, linkHeader, modulepreloadTags, cacheControl, sessionScript) {
+async function handleHTMLRequest(module, template, url, ssrTimeout, nonce, fallbackMetrics, linkHeader, modulepreloadTags, cacheControl, sessionScript, ssrAuth) {
   try {
-    const result = await ssrRenderToString(module, url, { ssrTimeout, fallbackMetrics });
+    const result = await ssrRenderToString(module, url, { ssrTimeout, fallbackMetrics, ssrAuth });
+    if (result.redirect) {
+      return new Response(null, {
+        status: 302,
+        headers: { Location: result.redirect.to }
+      });
+    }
     const allHeadTags = [result.headTags, modulepreloadTags].filter(Boolean).join(`
 `);
     const html = injectIntoTemplate({

package/dist/ssr/index.d.ts

@@ -1,5 +1,6 @@
 import { CompiledRoute } from "@vertz/ui";
 import { FontFallbackMetrics, Theme } from "@vertz/ui";
+import { SSRAuth as SSRAuth_jq1nwm } from "@vertz/ui/internals";
 interface SSRModule {
 	default?: () => unknown;
 	App?: () => unknown;
@@ -26,6 +27,10 @@ interface SSRRenderResult {
 	headTags: string;
 	/** Route patterns discovered by createRouter() during SSR (for build-time pre-rendering). */
 	discoveredRoutes?: string[];
+	/** Set when ProtectedRoute writes a redirect during SSR. Server should return 302. */
+	redirect?: {
+		to: string;
+	};
 }
 interface SSRDiscoverResult {
 	resolved: Array<{
@@ -45,6 +50,8 @@ declare function ssrRenderToString(module: SSRModule, url: string, options?: {
 	ssrTimeout?: number;
 	/** Pre-computed font fallback metrics (computed at server startup). */
 	fallbackMetrics?: Record<string, FontFallbackMetrics>;
+	/** Auth state resolved from session cookie. Passed to SSRRenderContext for AuthProvider. */
+	ssrAuth?: SSRAuth_jq1nwm;
 }): Promise<SSRRenderResult>;
 /**
 * Discover queries for a given URL without rendering.

package/dist/ssr/index.js

@@ -3,7 +3,7 @@ import {
   injectIntoTemplate,
   ssrDiscoverQueries,
   ssrRenderToString
-} from "../shared/chunk-969qgkdf.js";
+} from "../shared/chunk-c5ee9yf1.js";
 import"../shared/chunk-9jjdzz8c.js";
 
 // src/prerender.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vertz/ui-server",
-  "version": "0.2.16",
+  "version": "0.2.18",
   "type": "module",
   "license": "MIT",
   "description": "Vertz UI server-side rendering runtime",
@@ -58,15 +58,16 @@
     "@ampproject/remapping": "^2.3.0",
     "@capsizecss/unpack": "^4.0.0",
     "@jridgewell/trace-mapping": "^0.3.31",
-    "@vertz/core": "^0.2.15",
-    "@vertz/ui": "^0.2.15",
-    "@vertz/ui-compiler": "^0.2.15",
+    "@vertz/core": "^0.2.17",
+    "@vertz/ui": "^0.2.17",
+    "@vertz/ui-compiler": "^0.2.17",
     "magic-string": "^0.30.0",
     "sharp": "^0.34.5",
     "ts-morph": "^27.0.2"
   },
   "devDependencies": {
-    "@vertz/codegen": "^0.2.15",
+    "@vertz/codegen": "^0.2.17",
+    "@vertz/ui-auth": "^0.2.17",
     "bun-types": "^1.3.10",
     "bunup": "^0.16.31",
     "@happy-dom/global-registrator": "^20.8.3",