@webjsdev/server 0.8.29 → 0.8.30

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@webjsdev/server",
-  "version": "0.8.29",
+  "version": "0.8.30",
   "type": "module",
   "description": "webjs dev/prod server: SSR, router, API, server actions, live reload",
   "main": "index.js",

package/src/actions.js

@@ -150,7 +150,7 @@ async function rpcResponse(payload, init = {}) {
  * module (the hash index is all the analysis needs; a module is imported on
  * demand by `invokeAction` / `serveActionStub`), so it is safe for a read-only
  * introspection caller (the MCP `list_actions` tool, #262) with no top-level
- * side effects (Prisma init, DB connect).
+ * side effects (DB driver init, DB connect).
  *
  * @param {string} appDir
  * @param {boolean} dev
@@ -181,7 +181,7 @@ export async function buildActionIndex(appDir, dev) {
     // Pure-RPC actions are NOT executed at boot: invokeAction and
     // serveActionStub import the module on demand (first RPC call / first stub
     // fetch), so the hash index above is all the analysis needs. Eagerly
-    // running every server module (and its transitive Prisma init, DB
+    // running every server module (and its transitive DB driver init, DB
     // connects, etc.) would be wasted work.
   }
 

package/src/cache-fn.js

@@ -8,7 +8,7 @@
  * import { cache } from '@webjsdev/server';
  *
  * export const listPosts = cache(
- *   async () => prisma.post.findMany({ orderBy: { createdAt: 'desc' } }),
+ *   async () => db.query.posts.findMany({ orderBy: { createdAt: 'desc' } }),
  *   { key: 'posts', ttl: 60 }
  * );
  *
@@ -107,7 +107,7 @@ export function cache(fn, opts) {
    *
    * ```js
    * export async function createPost(input) {
-   *   await prisma.post.create({ data: input });
+   *   await db.insert(posts).values(input);
    *   await listPosts.invalidate();
    * }
    * ```

package/src/cache-tags.js

@@ -104,7 +104,7 @@ export async function addKeyToTags(tags, cacheKey, ttlMs) {
  * 'use server';
  * import { revalidateTag } from '@webjsdev/server';
  * export async function createComment(input) {
- *   await prisma.comment.create({ data: input });
+ *   await db.insert(comments).values(input);
  *   await revalidateTag('post:' + input.postId); // postById(postId) recomputes
  *   return { success: true };
  * }

package/src/dev.js

@@ -1353,16 +1353,18 @@ export async function createRequestHandler(opts) {
  * artefact dir (the #258 routes.d.ts and the vendor pin) that the dev server
  * itself writes on startup and on every rebuild, so without this skip the
  * write fires a watch event, triggers a rebuild, re-writes the file, and loops
- * forever. `prisma/dev*` / `prisma/migrations` churn during db:migrate. The
- * prisma branch is prefix-only (no trailing separator) so the SQLite sidecars
- * `prisma/dev.db` / `prisma/dev.db-journal` match too; the others stay
+ * forever. `db/dev.db*` (the SQLite file + sidecars) and `db/migrations`
+ * (drizzle-kit output) churn during db:migrate. The `db/dev.db` branch is
+ * prefix-only (no trailing separator) so the `-journal` / `-wal` sidecars match
+ * too, while staying anchored to `db/dev.db` so a SOURCE file like
+ * `db/schema.server.ts` still triggers a reload. The others stay
  * separator-anchored so an unrelated name like `node_modules.bak/foo` does not.
  *
  * @param {string} filename relative path from an fs.watch `event.filename`
  * @returns {boolean} true when the change should be ignored
  */
 export function shouldIgnoreWatchPath(filename) {
-  return /(?:^|[\\/])(?:node_modules|\.git|\.webjs)(?:[\\/]|$)|(?:^|[\\/])prisma[\\/](?:dev|migrations)/.test(filename || '');
+  return /(?:^|[\\/])(?:node_modules|\.git|\.webjs)(?:[\\/]|$)|(?:^|[\\/])db[\\/](?:dev\.db|migrations)/.test(filename || '');
 }
 
 /**
@@ -1414,7 +1416,7 @@ export async function startServer(opts) {
     //
     // fs.watch returns relative paths in event.filename. `shouldIgnoreWatchPath`
     // (module-level, exported for tests) skips node_modules, .git, .webjs/, and
-    // prisma's dev artefacts so a file the dev server itself writes never loops.
+    // the SQLite dev DB (db/dev.db) + db/migrations so a file the dev server itself writes never loops.
     const rebuild = debounce(() => app.rebuild(), 80);
     watcherAbort = new AbortController();
     (async () => {

package/src/env-schema.js

@@ -3,7 +3,7 @@
  *
  * webjs auto-loads `<appDir>/.env` into `process.env` at boot, but does no
  * validation, so a missing or misconfigured required var (DATABASE_URL,
- * AUTH_SECRET, ...) fails late and cryptically (a Prisma connect error
+ * AUTH_SECRET, ...) fails late and cryptically (a database connect error
  * mid-request, an undefined secret signing a token). This module adds an
  * optional boot-time validation hook that fails fast with one clear message
  * listing EVERY missing or invalid var at once, before the app serves a

package/src/json.js

@@ -9,7 +9,7 @@ import { readTextBounded, BodyLimitError, DEFAULT_MAX_BODY_BYTES } from './body-
  *   // GET /api/posts
  *   import { json } from '@webjsdev/server';
  *   export async function GET() {
- *     return json(await listPosts());   // plain Prisma rows with Date columns
+ *     return json(await listPosts());   // plain Drizzle rows with Date columns
  *   }
  *
  * The helper reads the in-flight Request from the AsyncLocalStorage

package/src/vendor.js

@@ -409,7 +409,7 @@ async function jspmCall(installs, provider) {
       // A 5xx/429 is a transient jspm problem worth retrying. A 401/4xx
       // means at least one install is genuinely unresolvable (jspm uses
       // 401 for that): a private / workspace / server-only package (e.g.
-      // @webjsdev/server, @prisma/client) the browser never fetches
+      // @webjsdev/server, better-sqlite3) the browser never fetches
       // anyway. Permanent failures must NOT block readiness.
       const transient = response.status >= 500 || response.status === 429;
       return { ok: false, imports: {}, transient };

package/webjs-config.schema.json

@@ -2,8 +2,8 @@
   "$schema": "http://json-schema.org/draft-07/schema#",
   "$id": "https://webjs.dev/schemas/webjs-config.schema.json",
   "title": "webjs config block",
-  "description": "Schema for the `webjs` object in a webjs app's package.json. Each key maps to a documented server reader. An unknown key is flagged (additionalProperties is false) so a typo no longer silently falls back to the default.",
-  "$comment": "Single source of truth lives in THREE co-located places that must stay in lockstep: this schema, the TS type at packages/core/src/webjs-config.d.ts, and the server reader functions (readElideEnabled in dev.js, readSeedEnabled in dev.js, compileHeaderRules in headers.js, compileRedirectRules / readTrailingSlashPolicy in redirects.js, readBasePath in base-path.js, readCspConfig in csp.js, readBodyLimits / computeServerTimeouts in body-limit.js). Adding a webjs.* key means updating all three. See packages/server/AGENTS.md for the one documented procedure.",
+  "description": "Schema for the `webjs` object in a webjs app's package.json. Each key maps to a documented reader (a server reader, or for `dev`/`start` the CLI's readAppTasks). An unknown key is flagged (additionalProperties is false) so a typo no longer silently falls back to the default.",
+  "$comment": "Single source of truth lives in THREE co-located places that must stay in lockstep: this schema, the TS type at packages/core/src/webjs-config.d.ts, and the reader functions (readElideEnabled in dev.js, readSeedEnabled in dev.js, compileHeaderRules in headers.js, compileRedirectRules / readTrailingSlashPolicy in redirects.js, readBasePath in base-path.js, readCspConfig in csp.js, readBodyLimits / computeServerTimeouts in body-limit.js, and the CLI's readAppTasks in packages/cli/lib/app-tasks.js for dev/start, #550). Adding a webjs.* key means updating all three. See packages/server/AGENTS.md for the one documented procedure.",
   "type": "object",
   "additionalProperties": false,
   "properties": {
@@ -147,6 +147,35 @@
       "type": "integer",
       "minimum": 0,
       "default": 5000
+    },
+    "dev": {
+      "description": "Dev task orchestration (#550). Read by the CLI (readAppTasks in packages/cli/lib/app-tasks.js), NOT the server. webjs dev runs `before` (one-shot, e.g. webjs db migrate) to completion, then `parallel` (long-lived watchers, e.g. tailwindcss --watch) alongside the server. Replaces the old predev hook + concurrently watchers.",
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "before": {
+          "description": "One-shot commands run sequentially to completion before the dev server boots. A non-zero exit aborts the boot.",
+          "type": "array",
+          "items": { "type": "string" }
+        },
+        "parallel": {
+          "description": "Long-lived commands run as child processes alongside the dev server, torn down on exit so a watcher cannot leak past it.",
+          "type": "array",
+          "items": { "type": "string" }
+        }
+      }
+    },
+    "start": {
+      "description": "Start task orchestration (#550). Read by the CLI (readAppTasks in packages/cli/lib/app-tasks.js), NOT the server. webjs start runs `before` (one-shot, e.g. webjs db migrate) to completion before serving. Replaces the old prestart hook.",
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "before": {
+          "description": "One-shot commands run sequentially to completion before the prod server boots. A non-zero exit aborts the boot.",
+          "type": "array",
+          "items": { "type": "string" }
+        }
+      }
     }
   }
 }