@vesk/vesk-cli 0.2.50-canary.5 → 0.2.50-canary.7

package/dist/cli.js

@@ -22862,18 +22862,20 @@ function webhook(options) {
     secret,
     handler,
     headerName = "x-webhook-signature",
-    signaturePrefix = "sha256="
+    signaturePrefix = "sha256=",
+    algorithm = "SHA-256",
+    signedPayload
   } = options;
   if (!secret) throw new Error("webhook() requires a secret");
   if (!handler) throw new Error("webhook() requires a handler function");
-  async function computeSignature(body) {
+  async function computeSignature(payload) {
     const key = typeof secret === "string" ? new TextEncoder().encode(secret) : secret;
-    const data2 = typeof body === "string" ? new TextEncoder().encode(body) : body;
+    const data2 = new TextEncoder().encode(payload);
     const crypto2 = globalThis.crypto;
     if (!crypto2?.subtle) {
       throw new Error("Web Crypto API not available (required for webhook signature verification)");
     }
-    return crypto2.subtle.importKey("raw", key, { name: "HMAC", hash: "SHA-256" }, false, ["sign"]).then((k) => crypto2.subtle.sign("HMAC", k, data2)).then((sig) => {
+    return crypto2.subtle.importKey("raw", key, { name: "HMAC", hash: algorithm }, false, ["sign"]).then((k) => crypto2.subtle.sign("HMAC", k, data2)).then((sig) => {
       const hex = Array.from(new Uint8Array(sig)).map((b) => b.toString(16).padStart(2, "0")).join("");
       return hex;
     });
@@ -22893,7 +22895,25 @@ function webhook(options) {
       });
     }
     const body = await request.text();
-    const expectedSig = await computeSignature(body);
+    let parsed;
+    try {
+      parsed = JSON.parse(body);
+    } catch {
+      parsed = body;
+    }
+    const event = parsed;
+    let payload = body;
+    if (signedPayload) {
+      try {
+        payload = signedPayload(event);
+      } catch {
+        return new Response(JSON.stringify({ error: "Invalid signature" }), {
+          status: 401,
+          headers: { "Content-Type": "application/json" }
+        });
+      }
+    }
+    const expectedSig = await computeSignature(payload);
     const prefixLen = signaturePrefix.length;
     const providedSig = signature.startsWith(signaturePrefix) ? signature.slice(prefixLen) : signature;
     if (providedSig.length !== expectedSig.length) {
@@ -22912,12 +22932,6 @@ function webhook(options) {
         headers: { "Content-Type": "application/json" }
       });
     }
-    let event;
-    try {
-      event = JSON.parse(body);
-    } catch {
-      event = body;
-    }
     return handler(event, request);
   }
   return webhookHandler;
@@ -34359,14 +34373,18 @@ function collectCombinedSource(appDir) {
   }
   return combined;
 }
+function hasMetadataDeclaration(src2) {
+  return /\bdefineMetadata\s*\(|export\s+const\s+metadata\b/.test(src2);
+}
 function runSeoAudit(appDir, _options) {
   const combined = collectCombinedSource(appDir);
   if (combined.length === 0) {
     console.error("vesk seo-audit: no page.vsk files found");
-    return { passed: 0, errors: 0, warnings: 0 };
+    return { passed: 0, errors: 0, warnings: 0, issues: [] };
   }
   let errors = 0;
   let warnings = 0;
+  const allIssues = [];
   for (const { path, src: src2 } of combined) {
     const relPath = path.replace(appDir, "").replace(/^[\\/]/, "");
     const routeDir = relPath === "page.vsk" ? "" : relPath.replace(/[\\/]page\.vsk$/, "");
@@ -34378,6 +34396,7 @@ function runSeoAudit(appDir, _options) {
     for (const check of Object.values(SEO_CHECKS)) {
       const issues = check(src2);
       for (const issue of issues) {
+        allIssues.push({ ...issue, page: relPath || "page.vsk" });
         if (issue.severity === SEVERITY.ERROR) {
           fileErrors++;
         } else {
@@ -34401,7 +34420,7 @@ function runSeoAudit(appDir, _options) {
   const total = combined.length;
   const status = errors > 0 ? "FAIL" : warnings > 0 ? "PASS_WARN" : "PASS";
   console.error(`vesk seo-audit: ${total} pages \u2014 ${errors} errors, ${warnings} warnings [${status}]`);
-  return { passed: total, errors, warnings };
+  return { passed: total, errors, warnings, issues: allIssues };
 }
 var SEVERITY, SEO_CHECKS;
 var init_seo_audit = __esm({
@@ -34444,6 +34463,12 @@ var init_seo_audit = __esm({
         return issues;
       },
       metaDescription: (src2) => {
+        if (hasMetadataDeclaration(src2)) {
+          if (!/\bdescription\s*:/.test(src2)) {
+            return [{ severity: SEVERITY.WARN, message: "No `description` in the metadata declaration" }];
+          }
+          return [];
+        }
         if (!/name=["']description["']/.test(src2)) {
           return [{ severity: SEVERITY.WARN, message: "Missing meta description" }];
         }
@@ -34451,6 +34476,9 @@ var init_seo_audit = __esm({
       },
       ogTags: (src2) => {
         const issues = [];
+        if (hasMetadataDeclaration(src2)) {
+          return issues;
+        }
         const required2 = ["og:title", "og:description", "og:image"];
         for (const tag of required2) {
           const pattern2 = new RegExp(`property=["']${tag}["']`);
@@ -34467,8 +34495,14 @@ var init_seo_audit = __esm({
         return [];
       },
       title: (src2) => {
+        if (hasMetadataDeclaration(src2)) {
+          if (!/\btitle\s*:/.test(src2)) {
+            return [{ severity: SEVERITY.WARN, message: "No `title` in the metadata declaration \u2014 it will render no <title>" }];
+          }
+          return [];
+        }
         if (!/<title>/i.test(src2) && !/<Head>/i.test(src2) && !/title>/i.test(src2)) {
-          return [{ severity: SEVERITY.ERROR, message: "Missing <title> or <Head> \u2014 page title is critical for SEO" }];
+          return [{ severity: SEVERITY.ERROR, message: "Missing <title>, <Head>, or `export const metadata` \u2014 page title is critical for SEO" }];
         }
         return [];
       },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vesk/vesk-cli",
-  "version": "0.2.50-canary.5",
+  "version": "0.2.50-canary.7",
   "type": "module",
   "description": "Vesk — compiler-first framework for the post-VDOM web. vesk dev, vesk build.",
   "bin": {
@@ -8,10 +8,10 @@
   },
   "main": "./dist/cli.js",
   "dependencies": {
-    "@vesk/adapter": "^0.2.50-canary.5",
-    "@vesk/compiler": "^0.2.50-canary.5",
-    "@vesk/plugin-tailwind": "^0.2.50-canary.5",
-    "@vesk/runtime": "^0.2.50-canary.5",
+    "@vesk/adapter": "^0.2.50-canary.7",
+    "@vesk/compiler": "^0.2.50-canary.7",
+    "@vesk/plugin-tailwind": "^0.2.50-canary.7",
+    "@vesk/runtime": "^0.2.50-canary.7",
     "esrap": "^2.3.0",
     "typescript": "^5.8.0",
     "ws": "^8.18.0",