alepha 0.14.4 → 0.15.1

package/src/vite/tasks/generateCloudflare.ts

@@ -45,6 +45,13 @@ export async function generateCloudflare(
     main: "./main.cloudflare.js",
     compatibility_flags: ["nodejs_compat"],
     compatibility_date: "2025-11-17",
+    no_bundle: true,
+    rules: [
+      {
+        type: "ESModule",
+        globs: ["index.js", "server/*.js"],
+      },
+    ],
     ...opts.config,
   };
 

package/src/vite/tasks/generateSitemap.ts

@@ -1,11 +1,11 @@
+import { writeFile } from "node:fs/promises";
 import type { Alepha } from "alepha";
-import { importAlepha } from "../helpers/importAlepha.ts";
 
 export interface GenerateSitemapOptions {
   /**
-   * Entry point for the built Alepha application.
+   * Alepha instance to use for generating the sitemap.
    */
-  entry: string;
+  alepha: Alepha;
 
   /**
    * Base URL for the sitemap (e.g., "https://example.com").
@@ -13,52 +13,93 @@ export interface GenerateSitemapOptions {
   baseUrl: string;
 
   /**
-   * Optional HTML template (for React SSR).
+   * Output file path for the sitemap. If provided, writes the sitemap to disk.
    */
-  template?: string;
+  output?: string;
+
+  /**
+   * Add Runner for logging (@see Alepha CLI)
+   */
+  run?: (opts: {
+    name: string;
+    handler: () => Promise<void>;
+  }) => Promise<string>;
 }
 
 /**
  * Generate sitemap.xml from Alepha page primitives.
  *
- * This task loads the built Alepha application,
- * queries all page primitives, and generates a sitemap.xml
+ * Queries all page primitives and generates a sitemap.xml
  * containing URLs for all accessible pages.
  */
 export async function generateSitemap(
   opts: GenerateSitemapOptions,
 ): Promise<string> {
-  const alepha = await importAlepha(opts.entry);
+  const pages = getSitemapPages(opts.alepha);
 
-  if (opts.template) {
-    alepha.set("alepha.react.server.template", opts.template);
+  // Nothing to generate
+  if (pages.length === 0) {
+    return "";
   }
 
-  if (!alepha.isConfigured()) {
-    await alepha.events.emit("configure", alepha);
-    (alepha as any).configured = true;
+  let result = "";
+
+  const fn = async () => {
+    result = generateSitemapFromPages(pages, opts.baseUrl);
+    if (opts.output) {
+      await writeFile(opts.output, result);
+    }
+  };
+
+  if (opts.run) {
+    await opts.run({
+      name: "generate sitemap",
+      handler: fn,
+    });
+  } else {
+    await fn();
   }
 
-  return generateSitemapFromAlepha(alepha, opts.baseUrl);
+  return result;
 }
 
-function generateSitemapFromAlepha(alepha: Alepha, baseUrl: string): string {
+/**
+ * Get all pages that should be included in the sitemap.
+ */
+function getSitemapPages(alepha: Alepha): any[] {
   const pages = alepha.primitives("page") as any[];
-  const urls: string[] = [];
-
-  for (const page of pages) {
+  return pages.filter((page) => {
     const options = page.options;
-
     // Skip pages with children (parent pages that can't be rendered directly)
     if (options.children) {
-      continue;
+      return false;
+    }
+    // Include pages without parameters or static pages with entries
+    if (!options.schema?.params) {
+      return true;
+    }
+    if (
+      options.static &&
+      typeof options.static === "object" &&
+      options.static.entries
+    ) {
+      return true;
     }
+    return false;
+  });
+}
+
+function generateSitemapFromPages(pages: any[], baseUrl: string): string {
+  const urls: string[] = [];
+  const normalizedBaseUrl = baseUrl.replace(/\/$/, "");
+
+  for (const page of pages) {
+    const options = page.options;
 
-    // Only include static pages or pages without parameters
     if (!options.schema?.params) {
       // Simple page without parameters
       const path = options.path || "";
-      const url = `${baseUrl.replace(/\/$/, "")}${path === "" ? "/" : path}`;
+      const url = `${normalizedBaseUrl}${path === "" ? "/" : path}`;
       urls.push(url);
     } else if (
       options.static &&
@@ -71,7 +112,7 @@ function generateSitemapFromAlepha(alepha: Alepha, baseUrl: string): string {
           options.path || "",
           entry.params || {},
         );
-        const url = `${baseUrl.replace(/\/$/, "")}${path}`;
+        const url = `${normalizedBaseUrl}${path}`;
         urls.push(url);
       }
     }

package/src/vite/tasks/index.ts

@@ -13,11 +13,9 @@
 export * from "./buildClient.ts";
 export * from "./buildServer.ts";
 export * from "./copyAssets.ts";
-export * from "./devServer.ts";
 export * from "./generateCloudflare.ts";
 export * from "./generateDocker.ts";
 export * from "./generateExternals.ts";
 export * from "./generateSitemap.ts";
 export * from "./generateVercel.ts";
 export * from "./prerenderPages.ts";
-export * from "./runAlepha.ts";

package/src/vite/tasks/prerenderPages.ts

@@ -1,6 +1,5 @@
 import { mkdir, writeFile } from "node:fs/promises";
 import type { Alepha } from "alepha";
-import { importAlepha } from "../helpers/importAlepha.ts";
 import {
   compressFile,
   type ViteCompressOptions,
@@ -8,9 +7,9 @@ import {
 
 export interface PrerenderPagesOptions {
   /**
-   * Entry point for the built Alepha application.
+   * Alepha instance to use for pre-rendering.
    */
-  entry: string;
+  alepha: Alepha;
 
   /**
    * Client dist directory for output files.
@@ -21,6 +20,14 @@ export interface PrerenderPagesOptions {
    * Optional compression options.
    */
   compress?: ViteCompressOptions | boolean;
+
+  /**
+   * Add Runner for logging (@see Alepha CLI)
+   */
+  run?: (opts: {
+    name: string;
+    handler: () => Promise<void>;
+  }) => Promise<string>;
 }
 
 export interface PrerenderPagesResult {
@@ -33,45 +40,63 @@ export interface PrerenderPagesResult {
 /**
  * Pre-render static pages defined in the Alepha application.
  *
- * This task loads the built Alepha application, queries all page
- * primitives with `static: true`, and generates static HTML files
- * for each page. Supports pages with parameterized routes via
- * `static.entries` configuration.
+ * Queries all page primitives with `static: true` and generates
+ * static HTML files for each page. Supports pages with parameterized
+ * routes via `static.entries` configuration.
  */
 export async function prerenderPages(
   opts: PrerenderPagesOptions,
 ): Promise<PrerenderPagesResult> {
-  const alepha = await importAlepha(opts.entry);
+  const alepha = opts.alepha;
+  const pages = getStaticPages(alepha);
 
-  const now = Date.now();
+  // Nothing to pre-render
+  if (pages.length === 0) {
+    return { count: 0 };
+  }
+
+  let result: PrerenderPagesResult = { count: 0 };
 
-  if (!alepha.isConfigured()) {
-    await alepha.events.emit("configure", alepha);
-    (alepha as any).configured = true;
+  const fn = async () => {
+    // TODO: running configure here is a temporary workaround
+    if (!alepha.isConfigured()) {
+      await alepha.events.emit("configure", alepha);
+    }
+    result = await prerenderFromAlepha(pages, opts.dist, opts.compress);
+  };
+
+  if (opts.run) {
+    await opts.run({
+      name: "pre-render pages",
+      handler: fn,
+    });
+  } else {
+    await fn();
   }
 
-  return await prerenderFromAlepha(alepha, opts.dist, opts.compress);
+  return result;
+}
+
+/**
+ * Get all static pages from the Alepha instance.
+ */
+function getStaticPages(alepha: Alepha): any[] {
+  const pages = alepha.primitives("page") as any[];
+  return pages.filter((page) => {
+    const options = page.options;
+    return options.static && !options.children;
+  });
 }
 
 async function prerenderFromAlepha(
-  alepha: Alepha,
+  pages: any[],
   dist: string,
   compress?: ViteCompressOptions | boolean,
 ): Promise<PrerenderPagesResult> {
   let count = 0;
-  const pages = alepha.primitives("page") as any[];
 
   for (const page of pages) {
     const options = page.options;
-
-    if (options.children) {
-      continue;
-    }
-
-    if (!options.static) {
-      continue;
-    }
-
     const config = typeof options.static === "object" ? options.static : {};
 
     if (!options.schema?.params) {

package/dist/server/security/index.browser.js

@@ -1,13 +0,0 @@
-import { $module } from "alepha";
-import { AlephaSecurity } from "alepha/security";
-import { AlephaServer } from "alepha/server";
-
-//#region ../../src/server/security/index.browser.ts
-const AlephaServerSecurity = $module({
-	name: "alepha.server.security",
-	services: [AlephaServer, AlephaSecurity]
-});
-
-//#endregion
-export { AlephaServerSecurity };
-//# sourceMappingURL=index.browser.js.map

package/dist/server/security/index.browser.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.browser.js","names":[],"sources":["../../../src/server/security/index.browser.ts"],"sourcesContent":["import { $module } from \"alepha\";\nimport { AlephaSecurity } from \"alepha/security\";\nimport { AlephaServer } from \"alepha/server\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport const AlephaServerSecurity = $module({\n  name: \"alepha.server.security\",\n  services: [AlephaServer, AlephaSecurity],\n});\n"],"mappings":";;;;;AAMA,MAAa,uBAAuB,QAAQ;CAC1C,MAAM;CACN,UAAU,CAAC,cAAc,eAAe;CACzC,CAAC"}

package/dist/server/security/index.d.ts

@@ -1,173 +0,0 @@
-import * as alepha5 from "alepha";
-import { Alepha, KIND, Primitive } from "alepha";
-import { JwtProvider, Permission, SecurityProvider, UserAccount, UserAccountToken } from "alepha/security";
-import { FetchOptions, ServerRequest, ServerRouterProvider } from "alepha/server";
-import * as alepha_logger0 from "alepha/logger";
-
-//#region ../../src/server/security/providers/ServerBasicAuthProvider.d.ts
-interface BasicAuthOptions {
-  username: string;
-  password: string;
-}
-interface BasicAuthPrimitiveConfig extends BasicAuthOptions {
-  /** Name identifier for this basic auth (default: property key) */
-  name?: string;
-  /** Path patterns to match (supports wildcards like /devtools/*) */
-  paths?: string[];
-}
-declare class ServerBasicAuthProvider {
-  protected readonly alepha: Alepha;
-  protected readonly log: alepha_logger0.Logger;
-  protected readonly routerProvider: ServerRouterProvider;
-  protected readonly realm = "Secure Area";
-  /**
-   * Registered basic auth primitives with their configurations
-   */
-  readonly registeredAuths: BasicAuthPrimitiveConfig[];
-  /**
-   * Register a basic auth configuration (called by primitives)
-   */
-  registerAuth(config: BasicAuthPrimitiveConfig): void;
-  readonly onStart: alepha5.HookPrimitive<"start">;
-  /**
-   * Hook into server:onRequest to check basic auth
-   */
-  readonly onRequest: alepha5.HookPrimitive<"server:onRequest">;
-  /**
-   * Hook into action:onRequest to check basic auth for actions
-   */
-  readonly onActionRequest: alepha5.HookPrimitive<"action:onRequest">;
-  /**
-   * Check basic authentication
-   */
-  checkAuth(request: ServerRequest, options: BasicAuthOptions): void;
-  /**
-   * Performs a timing-safe comparison of credentials to prevent timing attacks.
-   * Always compares both username and password to avoid leaking which one is wrong.
-   */
-  protected timingSafeCredentialCheck(inputUsername: string, inputPassword: string, expectedUsername: string, expectedPassword: string): boolean;
-  /**
-   * Compares two buffers in constant time, handling different lengths safely.
-   * Returns 1 if equal, 0 if not equal.
-   */
-  protected safeCompare(input: Buffer, expected: Buffer): number;
-  /**
-   * Send WWW-Authenticate header
-   */
-  protected sendAuthRequired(request: ServerRequest): void;
-}
-declare const isBasicAuth: (value: unknown) => value is {
-  basic: BasicAuthOptions;
-};
-//#endregion
-//#region ../../src/server/security/providers/ServerSecurityProvider.d.ts
-declare class ServerSecurityProvider {
-  protected readonly log: alepha_logger0.Logger;
-  protected readonly securityProvider: SecurityProvider;
-  protected readonly jwtProvider: JwtProvider;
-  protected readonly alepha: Alepha;
-  protected readonly onConfigure: alepha5.HookPrimitive<"configure">;
-  protected readonly onActionRequest: alepha5.HookPrimitive<"action:onRequest">;
-  protected readonly onRequest: alepha5.HookPrimitive<"server:onRequest">;
-  protected check(user: UserAccountToken, secure: ServerRouteSecure): void;
-  /**
-   * Get the user account token for a local action call.
-   * There are three possible sources for the user:
-   * - `options.user`: the user passed in the options
-   * - `"system"`: the system user from the state (you MUST set state `server.security.system.user`)
-   * - `"context"`: the user from the request context (you MUST be in an HTTP request context)
-   *
-   * Priority order: `options.user` > `"system"` > `"context"`.
-   *
-   * In testing environment, if no user is provided, a test user is created based on the SecurityProvider's roles.
-   */
-  protected createUserFromLocalFunctionContext(options: {
-    user?: UserAccountToken | "system" | "context";
-  }, permission?: Permission): UserAccountToken;
-  protected createTestUser(): UserAccountToken;
-  protected readonly onClientRequest: alepha5.HookPrimitive<"client:onRequest">;
-}
-type ServerRouteSecure = {
-  realm?: string;
-  basic?: BasicAuthOptions;
-};
-//#endregion
-//#region ../../src/server/security/primitives/$basicAuth.d.ts
-/**
- * Declares HTTP Basic Authentication for server routes.
- * This primitive provides methods to protect routes with username/password authentication.
- */
-declare const $basicAuth: {
-  (options: BasicAuthPrimitiveConfig): AbstractBasicAuthPrimitive;
-  [KIND]: typeof BasicAuthPrimitive;
-};
-interface AbstractBasicAuthPrimitive {
-  readonly name: string;
-  readonly options: BasicAuthPrimitiveConfig;
-  check(request: ServerRequest, options?: BasicAuthOptions): void;
-}
-declare class BasicAuthPrimitive extends Primitive<BasicAuthPrimitiveConfig> implements AbstractBasicAuthPrimitive {
-  protected readonly serverBasicAuthProvider: ServerBasicAuthProvider;
-  get name(): string;
-  protected onInit(): void;
-  /**
-   * Checks basic auth for the given request using this primitive's configuration.
-   */
-  check(request: ServerRequest, options?: BasicAuthOptions): void;
-}
-//#endregion
-//#region ../../src/server/security/index.d.ts
-declare module "alepha" {
-  interface State {
-    /**
-     * Real (or fake) user account, used for internal actions.
-     *
-     * If you define this, you assume that all actions are executed by this user by default.
-     * > To force a different user, you need to pass it explicitly in the options.
-     */
-    "alepha.server.security.system.user"?: UserAccountToken;
-    /**
-     * The authenticated user account attached to the server request state.
-     *
-     * @internal
-     */
-    "alepha.server.request.user"?: UserAccount;
-  }
-}
-declare module "alepha/server" {
-  interface ServerRequest<TConfig> {
-    user?: UserAccountToken;
-  }
-  interface ServerActionRequest<TConfig> {
-    user: UserAccountToken;
-  }
-  interface ServerRoute {
-    /**
-     * If true, the route will be protected by the security provider.
-     * All actions are secure by default, but you can disable it for specific actions.
-     */
-    secure?: boolean | ServerRouteSecure;
-  }
-  interface ClientRequestOptions extends FetchOptions {
-    /**
-     * Forward user from the previous request.
-     * If "system", use system user. @see {ServerSecurityProvider.localSystemUser}
-     * If "context", use the user from the current context (e.g. request).
-     *
-     * @default "system" if provided, else "context" if available.
-     */
-    user?: UserAccountToken | "system" | "context";
-  }
-}
-/**
- * Plugin for Alepha Server that provides security features. Based on the Alepha Security module.
- *
- * By default, all $action will be guarded by a permission check.
- *
- * @see {@link ServerSecurityProvider}
- * @module alepha.server.security
- */
-declare const AlephaServerSecurity: alepha5.Service<alepha5.Module>;
-//#endregion
-export { $basicAuth, AbstractBasicAuthPrimitive, AlephaServerSecurity, BasicAuthOptions, BasicAuthPrimitive, BasicAuthPrimitiveConfig, ServerBasicAuthProvider, ServerRouteSecure, ServerSecurityProvider, isBasicAuth };
-//# sourceMappingURL=index.d.ts.map

package/dist/server/security/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../../../src/server/security/providers/ServerBasicAuthProvider.ts","../../../src/server/security/providers/ServerSecurityProvider.ts","../../../src/server/security/primitives/$basicAuth.ts","../../../src/server/security/index.ts"],"sourcesContent":[],"mappings":";;;;;;;UAWiB,gBAAA;;;;UAKA,wBAAA,SAAiC;EALjC;EAKA,IAAA,CAAA,EAAA,MAAA;EASJ;EACc,KAAA,CAAA,EAAA,MAAA,EAAA;;AAEQ,cAHtB,uBAAA,CAGsB;EAMA,mBAAA,MAAA,EARR,MAQQ;EAKL,mBAAA,GAAA,EAbH,cAAA,CACH,MAYM;EAAwB,mBAI7B,cAAA,EAfU,oBAeV;EAAA,mBA8BE,KAAA,GAAA,aAAA;EAAA;;;EAuGI,SAAA,eAAA,EA9II,wBA8IJ,EAAA;EAAkB;;;EAoBpC,YAAA,CAAA,MAMZ,EAnK6B,wBA+JO,CAAA,EAAA,IAAA;oBA/JiB,OAAA,CAI7B;;;ACtBzB;EAAmC,SAAA,SACX,EDqBC,OAAA,CA8BE,aCnDH,CAAA,kBAAA,CAAA;EACa;;;EAEV,SAEK,eAAA,ED8CL,OAAA,CAiBM,aC/DD,CAAA,kBAAA,CAAA;EAAA;;;EA4IkB,SAAA,CAAA,OAAA,EDhEtB,aCgEsB,EAAA,OAAA,EDhEE,gBCgEF,CAAA,EAAA,IAAA;EAsB5B;;;;EA+DwB,UAQV,yBAAA,CAAA,aAAA,EAAA,MAAA,EAAA,aAAA,EAAA,MAAA,EAAA,gBAAA,EAAA,MAAA,EAAA,gBAAA,EAAA,MAAA,CAAA,EAAA,OAAA;EAAA;AAmCpC;;;+BDvH+B,kBAAkB;EEpKpC;;;sCFmLyB;;cAKzB;EEhLI,KAAA,EFkLI,gBElLJ;CAEG;;;cDDP,sBAAA;0BAAsB,cAAA,CACX;uCACa;kCACL;EDbf,mBAAgB,MAAA,ECcN,MDdM;EAKhB,mBAAA,WAAyB,ECSf,OAAA,CAEK,aDXkC,CAAA,WAAA,CAAA;EASrD,mBAAA,eAAuB,ECEJ,OAAA,CA8BI,aDhCA,CAAA,kBAAA,CAAA;EACT,mBAAA,SAAA,EC+BS,OAAA,CA8CN,aD7EH,CAAA,kBAAA,CAAA;EAAA,UAAA,KACH,CAAA,IAAA,EC4IA,gBD5IA,EAAA,MAAA,EC4I0B,iBD5I1B,CAAA,EAAA,IAAA;EACW;;;;;;;;;;;EAmKgB,UAAA,kCAAA,CAAA,OAAA,EAAA;IAKtC,IAAA,CAAA,ECPS,gBDSD,GAAA,QAAA,GAAA,SAAgB;kBCRpB,aACZ;8BA6DyB;sCAAgB,OAAA,CAQV;AA/OpC;AAAmC,KAkRvB,iBAAA,GAjRY;EACa,KAAA,CAAA,EAAA,MAAA;EACL,KAAA,CAAA,EAiRtB,gBAjRsB;CACL;;;;;;ADd3B;AAKiB,cEJJ,UFI6B,EAAA;EAS7B,CAAA,OAAA,EEZF,wBFYyB,CAAA,EEXjC,0BFWiC;EACT,MAAA,EAAA,yBAAA;CAAA;AAEQ,UERlB,0BAAA,CFQkB;EAMA,SAAA,IAAA,EAAA,MAAA;EAKL,SAAA,OAAA,EEjBV,wBFiBU;EAAwB,KAI7B,CAAA,OAAA,EEpBR,aFoBQ,EAAA,OAAA,CAAA,EEpBiB,gBFoBjB,CAAA,EAAA,IAAA;;AA8BE,cE/Cd,kBAAA,SACH,SF+DuB,CE/Db,wBF+Da,CAAA,YE9DpB,0BF8DoB,CAAA;EAaL,mBAAA,uBAAA,EEzEgB,uBFyEhB;EAAwB,IAAA,IAAA,CAAA,CAAA,EAAA,MAAA;EAyErB,UAAA,MAAA,CAAA,CAAA,EAAA,IAAA;EAAkB;;;EAoBpC,KAAA,CAAA,OAAA,EExJW,aF0JH,EAAA,OAAgB,CAAhB,EE1J4B,gBF0JZ,CAAA,EAAA,IAAA;;;;;EA3LpB,UAAA,KAAA,CAAA;IAKA;AASjB;;;;;IAc8B,oCAAA,CAAA,EGLa,gBHKb;IAAwB;;;;;IAyIvB,4BAAA,CAAA,EGvII,WHuIJ;EAAkB;;eAeE,eAAA,CAAA;EAKtC,UAAA,aAMZ,CAAA,OAJoB,CAAA,CAAA;WGvJV;;;IF1BE,IAAA,EE8BH,gBF9ByB;EAAA;EAEE,UAAA,WAAA,CAAA;IACL;;;;IAiCI,MA8CN,CAAA,EAAA,OAAA,GE5CP,iBF4CO;EAgEN;EAA0B,UAAA,oBAAA,SEzGT,YFyGS,CAAA;IAsB5B;;;;;;AA0GtB;WEjOW;;;AD1DX;;;;;;AAQA;;AAGiB,cC6DJ,oBD7DI,EC6DgB,OAAA,CAAA,OD7DhB,CCsEf,OAAA,CAT+B,MAAA,CD7DhB"}