npm - aiplang - Versions diffs - 2.6.2 → 2.7.1 - Mend

aiplang 2.6.2 → 2.7.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (4689) hide show

package/README.md CHANGED Viewed

@@ -1,6 +1,8 @@
 # aiplang
-> AI-first web language. One file = complete app. Written by AI, not humans.
+AI-first web language. One `.aip` file = complete app (frontend + backend + database + auth).
+Designed to be generated by LLMs (Claude, GPT), not written by humans.
 ```bash
 npx aiplang init my-app
@@ -8,143 +10,67 @@ cd my-app
 npx aiplang serve
 ```
-Ask Claude to generate a page → paste into `pages/home.aip` → see it live.
----
 ## What it is
-**aiplang** is a web language designed to be generated by AI (Claude), not written by humans.
-A single `.aip` file describes a complete app: frontend, backend, database, auth, email, jobs.
+A language where a single `.aip` file describes a complete application:
 ```aip
 ~db sqlite ./app.db
 ~auth jwt $JWT_SECRET expire=7d
-~admin /admin
 model User {
-  id    : uuid : pk auto
-  email : text : required unique
-  plan  : enum : starter,pro : default=starter
-  ~soft-delete
+  id       : uuid : pk auto
+  email    : text : required unique
+  password : text : required hashed
 }
-api POST /api/auth/register {
-  ~validate email required email | password min=8
-  ~unique User email $body.email | 409
-  ~hash password
-  insert User($body)
-  return jwt($inserted) 201
+api POST /api/auth/login {
+  $user = User.findBy(email=$body.email)
+  ~check password $body.password $user.password | 401
+  return jwt($user) 200
 }
-%dashboard dark /dashboard
-@users = []
-~mount GET /api/users => @users
-nav{MySaaS>/logout:Sign out}
-stats{@users.length:Users}
-table @users { Email:email | Plan:plan | edit PUT /api/users/{id} | delete /api/users/{id} }
-foot{© 2025 MySaaS}
+%home dark /
+nav{MyApp>/login:Sign in}
+hero{Welcome|Built with aiplang.} animate:blur-in
+foot{© 2025}
 ```
----
-## Why it's faster for AI
-| | aiplang | React/Next.js | Laravel | Go+GORM |
-|---|---|---|---|---|
-| Tokens per app | **620** | 15,200 | 11,800 | 8,400 |
-| Files generated | **1** | 18+ | 22+ | 14+ |
-| Claude generation time | **0.6s** | 15s | 12s | 8s |
-| AI error rate | **~2%** | ~28% | ~22% | ~15% |
-| First paint | **45ms** | 320ms | 80ms | 55ms |
-| Lighthouse | **98** | 62 | 74 | 95 |
----
-## Install
-```bash
-# Global
-npm install -g aiplang
-# Or without installing
-npx aiplang init my-app
-```
----
 ## Commands
 ```bash
-npx aiplang init my-app                   # create project
-npx aiplang init --template saas          # SaaS starter template
-npx aiplang init --template landing       # landing page template
-npx aiplang init --template crud          # CRUD app template
-npx aiplang serve                         # dev server + hot reload → localhost:3000
-npx aiplang build pages/ --out dist/      # compile → static HTML
-npx aiplang start app.aip                # full-stack server (Node.js)
-npx aiplang new dashboard                 # create new page template
+npx aiplang serve                    # dev server + hot reload
+npx aiplang build pages/             # compile → static HTML
+npx aiplang start app.aip            # full-stack Node.js server
+npx aiplang init my-app              # create project
+npx aiplang init my-app --template saas|landing|crud|dashboard
+npx aiplang template list            # list all templates
+npx aiplang template save my-tpl     # save current project as template
 ```
----
-## Setup Claude to generate aiplang
-**Option 1 — Claude Project (recommended):**
-1. Go to claude.ai → Projects → New Project
-2. Name: `aiplang Generator`
-3. Upload `aiplang-knowledge.md` as project knowledge
-4. Every conversation inside will generate aiplang automatically
-**Option 2 — Paste in any chat:**
-```
-I'm using aiplang. Generate only aiplang code, no React, no HTML.
-Syntax: %id theme /route | @var=[] | ~mount GET /api => @var
-~theme accent=#hex radius=1rem font=Name | nav{} hero{} row3{} table{} form{} stats{} pricing{} faq{}
-All blocks accept: animate:fade-up class:my-class | raw{<html>} | foot{text>/path:Link}
-```
----
-## Repository structure
-```
-aiplang/
-├── packages/aiplang-pkg/           ← npm package (aiplang CLI + runtime)
-│   ├── bin/aiplang.js            ← CLI: init, serve, build, new, start
-│   ├── runtime/aiplang-hydrate.js← 10KB reactive runtime
-│   ├── server/server.js          ← full-stack Node.js server
-│   └── aiplang-knowledge.md      ← Claude Project knowledge file
-├── aiplang-go/                   ← Go compiler + server (v2)
-│   ├── compiler/compiler.go      ← .aip → AST parser
-│   ├── server/server.go          ← Go HTTP server
-│   └── cmd/aiplangd/main.go      ← binary entrypoint
-├── docs/                         ← GitHub Pages (aiplang.io)
-│   └── index.html                ← landing page
-└── .github/workflows/pages.yml   ← auto deploy to GitHub Pages
-```
----
-## npm
-[![npm](https://img.shields.io/npm/v/aiplang?color=2563eb&label=aiplang)](https://npmjs.com/package/aiplang)
-```bash
-npm install -g aiplang
-```
-→ [npmjs.com/package/aiplang](https://npmjs.com/package/aiplang)
----
+## Full-stack features
-## GitHub Pages
+- **ORM** — model, insert, update, delete, soft-delete, paginate, count, sum
+- **Auth** — JWT with bcrypt, guards (auth, admin, subscribed)
+- **Validation** — required, email, min, max, unique, numeric
+- **Email** — SMTP via nodemailer (~mail directive)
+- **S3** — Amazon S3, Cloudflare R2, MinIO (~s3 directive)
+- **Stripe** — checkout, portal, webhooks (~stripe directive)
+- **Admin panel** — auto-generated (~admin directive)
+- **Plugins** — extend with JS modules (~plugin directive)
-→ [isacamartin.github.io/aiplang](https://isacamartin.github.io/aiplang)
+## Security
----
+- bcrypt cost 12 for password hashing
+- JWT with configurable expiry
+- Body size limit 1MB (configurable via MAX_BODY_BYTES)
+- Auto rate-limit on `/api/auth/*` — 20 req/min per IP
+- SQL injection protection on all queries
+- Environment variable validation at startup
+- HttpOnly cookies for admin panel
-## License
+## Source
-MIT © 2025 Isac Martin
+- GitHub: [isacamartin/aiplang](https://github.com/isacamartin/aiplang)
+- Author: [Isac Martin](https://github.com/isacamartin)
+- License: MIT

package/aiplang-knowledge.md CHANGED Viewed

@@ -1,98 +1,139 @@
-# aiplang — syntax reference
-File extension: `.aip` (e.g. `app.aip`, `home.aip`)
-Generate ONLY aiplang code. No React, HTML, or other frameworks. No explanations unless asked.
+# aiplang — LLM reference
+Generate ONLY `.aip` syntax. Zero explanation. Zero React. Zero HTML frameworks.
-## File structure
+## Config directives (before model/api/pages)
 ```
-~env VAR required          # env validation
-~db sqlite ./app.db        # or: postgres $DATABASE_URL
+~env VAR required              # fail if missing
+~db sqlite ./app.db            # or: postgres $DATABASE_URL
 ~auth jwt $JWT_SECRET expire=7d
-~mail smtp host=x user=$U pass=$P
-~s3 $KEY secret=$S bucket=$B region=us-east-1 prefix=uploads/ maxSize=10mb
+~mail smtp host=x user=$U pass=$P from=no-reply@x.com
+~s3 $KEY secret=$S bucket=$B region=us-east-1 prefix=up/ maxSize=10mb allow=image/jpeg,image/png
 ~stripe $KEY webhook=$WH success=/ok cancel=/pricing
 ~plan free=price_x pro=price_y
 ~admin /admin
 ~use cors origins=https://x.com
 ~use rate-limit max=100 window=60s
 ~use helmet | ~use logger | ~use compression
-~plugin ./my-plugin.js
+~plugin ./plugins/custom.js
+```
+## Model
+```
 model Name {
-  id    : uuid  : pk auto
-  field : type  : modifier
-  ~soft-delete
-  ~belongs OtherModel
+  id        : uuid      : pk auto
+  field     : text      : required
+  email     : text      : required unique
+  password  : text      : required hashed
+  count     : int       : default=0
+  price     : float
+  active    : bool      : default=true
+  at        : timestamp
+  data      : json
+  kind      : enum      : a,b,c : default=a
+  ~soft-delete           # adds deleted_at, filters from queries
+  ~belongs OtherModel   # adds other_model_id FK
 }
-# types: uuid text int float bool timestamp json enum
-# modifiers: pk auto required unique hashed default=val index
+```
+Types: `uuid text int float bool timestamp json enum`
+Modifiers: `pk auto required unique hashed default=val index`
-api METHOD /path/:id {
-  ~guard auth | admin | subscribed | owner
-  ~validate field required | field email | field min=8 | field numeric
-  ~query page=1 limit=20
+## API — ALWAYS one blank line between ops, return is last
+```
+api POST /path {
+  ~guard auth                          # auth | admin | subscribed | owner
+  ~validate field required | field email | field min=8 | field max=100 | field numeric | field in:a,b,c
   ~unique Model field $body.field | 409
-  ~hash field
-  ~check password $body.pw $user.pw | 401
+  ~hash field                          # bcrypt the field before insert
+  ~check password $body.pw $user.pw | 401  # bcrypt compare
+  ~query page=1 limit=20              # query params with defaults
   ~mail $user.email "Subject" "Body"
   ~dispatch jobName $body
   ~emit event.name $body
-  $var = Model.findBy(field=$body.field)
-  insert Model($body)
-  update Model($id, $body)
-  delete Model($id)
-  restore Model($id)
-  return $inserted | $updated | $auth.user | Model.all(order=created_at desc)
-  return Model.paginate($page, $limit)
-  return Model.count() | Model.sum(field) | Model.avg(field)
+  $var = Model.findBy(field=$body.field)   # assign to $var
+  $var = Model.find($params.id)
+  insert Model($body)                  # sets $inserted
+  update Model($params.id, $body)      # sets $updated
+  delete Model($params.id)             # soft or hard delete
+  restore Model($params.id)
+  return $inserted 201                 # status optional, default 200
+  return $updated
+  return $var
+  return $auth.user
+  return jwt($inserted) 201           # return JWT token
   return jwt($user) 200
+  return Model.all(order=created_at desc)
+  return Model.paginate($page, $limit)
+  return Model.count()
+  return Model.sum(field)
+  return Model.findBy(field=$body.field)
 }
+```
-%id theme /route           # dark | light | acid | #bg,#text,#accent
-~theme accent=#hex bg=#hex text=#hex font=Name radius=1rem surface=#hex navbg=#hex
-@var = []                  # state: [] or {} or "string" or 0
-~mount GET /api => @var
-~interval 10000 GET /api => @var
-blocks...
----                        # page separator
+## Pages
+```
+%id theme /route     # id=any, theme=dark|light|acid|#bg,#text,#accent, route=/path
+~theme accent=#hex bg=#hex text=#hex font=Name radius=1rem surface=#hex navbg=#hex spacing=5rem
+@list = []           # reactive state — [] for arrays, {} for objects, "str", 0
+@obj = {}
+~mount GET /api/path => @list         # fetch on page load → assign to @list
+~mount GET /api/path => @obj
+~interval 15000 GET /api/path => @obj # repeat every N ms (always pair with ~mount)
 ```
 ## All blocks
 ```
 nav{Brand>/path:Link>/path:Link}
-hero{Title|Sub>/path:CTA} | hero{Title|Sub>/path:CTA|img:https://url}
-stats{@val:Label|99%:Uptime|$0:Free}
+hero{Title|Subtitle>/path:CTA}
+hero{Title|Sub>/path:CTA|img:https://url}   # split layout with image
+stats{@obj.field:Label|99%:Uptime|$0:Free}
 row2{icon>Title>Body} | row3{...} | row4{...}
 sect{Title|Optional body}
-table @list { Col:field | edit PUT /api/{id} | delete /api/{id} | empty: msg }
-form POST /api => @list.push($result) { Label:type:placeholder | Label:select:a,b,c }
-form POST /api => redirect /path { Label:type | Label:password }
-pricing{Name>Price>Desc>/path:CTA|Name>Price>Desc>/path:CTA}
-faq{Question?>Answer.|Q2?>A2.}
-testimonial{Name, Role @ Co|"Quote."|img:https://url}
-gallery{https://img1|https://img2|https://img3}
-btn{Label > METHOD /api/path} | btn{Label > DELETE /api > confirm:Sure?}
+table @list { Col:field | Col:field | edit PUT /api/path/{id} | delete /api/path/{id} | empty: msg }
+form POST /api/path => @list.push($result) { Label:type:placeholder | Label:select:a,b,c }
+form POST /api/path => redirect /dashboard { Label:type | Label:password }
+pricing{Name>$0/mo>Desc>/path:CTA | Name>$19/mo>Desc>/path:CTA}
+faq{Question?>Answer. | Q2?>A2.}
+testimonial{Name, Role|"Quote."|img:https://url}
+gallery{https://img1 | https://img2 | https://img3}
+btn{Label > METHOD /api/path}
+btn{Label > DELETE /api/path > confirm:Are you sure?}
 select @filterVar { All | Active | Inactive }
 if @var { blocks }
-raw{<div>any HTML</div>}
+raw{<div>any HTML or embed</div>}
 foot{© 2025 Name>/path:Link}
 ```
-## Block modifiers (any block)
-`animate:fade-up | fade-in | blur-in | slide-left | slide-right | zoom-in | stagger`
-`class:my-class`
+## Animate any block
+`block{...} animate:fade-up` · `animate:fade-in` · `animate:blur-in` · `animate:stagger` · `animate:slide-left` · `animate:zoom-in`
-## S3 auto-routes
-`POST /api/upload` · `DELETE /api/upload/:key` · `GET /api/upload/presign?key=x`
+## Multiple pages — separate with ---
+```
+%home dark /
+nav{...}
+hero{...}
+---
+%dashboard dark /dashboard
+@data = []
+~mount GET /api/data => @data
+table @data { ... }
+---
+%login dark /login
+form POST /api/auth/login => redirect /dashboard { Email:email | Password:password }
+```
-## Stripe auto-routes
-`POST /api/stripe/checkout` · `POST /api/stripe/portal` · `GET /api/stripe/subscription`
+## Icons (use in row blocks)
+`rocket bolt shield chart star check globe gear fire money bell mail user lock eye tag search home`
-## Rules
-1. Dark theme default
-2. `@var = []` + `~mount` for all dynamic data
-3. Tables always have `edit` + `delete` unless readonly
-4. Forms: `=> @list.push($result)` or `=> redirect /path`
-5. `~theme` before `%` declarations
-6. Separate pages with `---`
-7. Full-stack: `~db` + `~auth` + `model` + `api` before pages
+## S3 auto-routes (generated when ~s3 configured)
+`POST /api/upload` · `DELETE /api/upload/:key` · `GET /api/upload/presign?key=x&expires=3600`
+## Stripe auto-routes (generated when ~stripe configured)
+`POST /api/stripe/checkout {plan,email}` · `POST /api/stripe/portal` · `GET /api/stripe/subscription` · `POST /api/stripe/webhook`
+Webhooks auto-handled: checkout.completed → sets user.plan, subscription.deleted → resets to free
+## Run
+```bash
+npx aiplang start app.aip    # full-stack
+npx aiplang serve            # frontend dev
+npx aiplang build pages/     # static build
+```

package/bin/aiplang.js CHANGED Viewed

@@ -5,7 +5,7 @@ const fs   = require('fs')
 const path = require('path')
 const http = require('http')
-const VERSION     = '2.6.2'
+const VERSION     = '2.7.1'
 const RUNTIME_DIR = path.join(__dirname, '..', 'runtime')
 const cmd         = process.argv[2]
 const args        = process.argv.slice(3)
@@ -121,6 +121,23 @@ api GET /api/me {
   return $auth.user
 }
+api GET /api/users {
+  ~guard admin
+  ~query page=1
+  return User.paginate($page, 20)
+}
+api PUT /api/users/:id {
+  ~guard admin
+  update User($id, $body)
+  return $updated
+}
+api DELETE /api/users/:id {
+  ~guard admin
+  delete User($id)
+}
 api GET /api/stats {
   return User.count()
 }

package/package.json CHANGED Viewed

@@ -1,17 +1,17 @@
 {
   "name": "aiplang",
-  "version": "2.6.2",
-  "description": "AI-first full-stack language. Frontend + Backend + DB + Auth in one file. Competes with Laravel.",
+  "version": "2.7.1",
+  "description": "AI-first web language. One .aip file = complete app. Frontend + backend + database + auth.",
   "keywords": [
     "aiplang",
     "ai",
+    "llm",
     "web",
     "language",
-    "compiler",
-    "ssg",
-    "reactive",
+    "full-stack",
     "claude",
-    "full-stack"
+    "generator",
+    "no-code"
   ],
   "author": "isacamartin",
   "license": "MIT",

package/server/server.js CHANGED Viewed

@@ -1435,7 +1435,7 @@ async function startServer(aipFile, port = 3000) {
   // Health
   srv.addRoute('GET', '/health', (req, res) => res.json(200, {
-    status:'ok', version:'2.6.2',
+    status:'ok', version:'2.7.1',
     models: app.models.map(m=>m.name),
     routes: app.apis.length, pages: app.pages.length,
     admin: app.admin?.prefix || null,