alepha 0.15.4 → 0.15.5

package/src/security/providers/JwtProvider.ts

@@ -47,7 +47,7 @@ export class JwtProvider {
     } else if (this.isSecretKey(secretKeyOrJwks)) {
       const secretKey = this.encoder.encode(secretKeyOrJwks);
       this.log.info(
-        `will verify JWTs from '${name}' with secret a key (${secretKey.length} bytes)`,
+        `will verify JWTs from issuer '${name}' with secret key (${secretKey.length} bytes)`,
       );
       this.keystore.push({
         name,
@@ -56,7 +56,7 @@ export class JwtProvider {
       });
     } else {
       this.log.info(
-        `will verify JWTs from '${name}' with JWKS ${secretKeyOrJwks}`,
+        `will verify JWTs from issuer '${name}' with JWKS ${secretKeyOrJwks}`,
       );
       this.keystore.push({
         name,

package/src/server/auth/index.ts

@@ -29,9 +29,9 @@ declare module "alepha" {
 // ---------------------------------------------------------------------------------------------------------------------
 
 /**
- * | type | quality | stability |
- * |------|---------|-----------|
- * | backend | rare | stable |
+ * | Stability | Since | Runtime |
+ * |-----------|-------|---------|
+ * | 3 - stable | 0.8.0 | node, bun, workerd|
  *
  * OAuth2/OIDC authentication with social login providers.
  *

package/src/server/cache/index.ts

@@ -9,9 +9,9 @@ export * from "./providers/ServerCacheProvider.ts";
 // ---------------------------------------------------------------------------------------------------------------------
 
 /**
- * | type | quality | stability |
- * |------|---------|-----------|
- * | backend | standard | stable |
+ * | Stability | Since | Runtime |
+ * |-----------|-------|---------|
+ * | 3 - stable | 0.10.0 | node, bun, workerd|
  *
  * ETag-based response caching.
  *

package/src/server/compress/index.ts

@@ -9,9 +9,9 @@ export * from "./providers/ServerCompressProvider.ts";
 // ---------------------------------------------------------------------------------------------------------------------
 
 /**
- * | type | quality | stability |
- * |------|---------|-----------|
- * | backend | standard | stable |
+ * | Stability | Since | Runtime |
+ * |-----------|-------|---------|
+ * | 3 - stable | 0.13.0 | node, bun|
  *
  * Response compression.
  *

package/src/server/cookies/index.ts

@@ -18,9 +18,9 @@ declare module "alepha/server" {
 }
 
 /**
- * | type | quality | stability |
- * |------|---------|-----------|
- * | backend | standard | stable |
+ * | Stability | Since | Runtime |
+ * |-----------|-------|---------|
+ * | 3 - stable | 0.3.0 | node, bun, workerd|
  *
  * Server and browser-safe cookie handling.
  *

package/src/server/core/index.ts

@@ -114,9 +114,9 @@ export * from "./services/UserAgentParser.ts";
 // ---------------------------------------------------------------------------------------------------------------------
 
 /**
- * | type | quality | stability |
- * |------|---------|-----------|
- * | backend | epic | stable |
+ * | Stability | Since | Runtime |
+ * |-----------|-------|---------|
+ * | 3 - stable | 0.1.0 | node, bun, workerd|
  *
  * Convention-driven HTTP server with automatic validation and type inference.
  *

package/src/server/core/primitives/$action.spec.ts

@@ -81,8 +81,9 @@ describe("$action", () => {
 
     expect(await app.a1.fetch({}).then((it) => it.data)).toBe("ok:a1");
     expect(await app.a2.fetch({}).then((it) => it.data)).toBe("Not Found");
-    // note: $action disabled is callable locally
-    expect(await app.a2.run({})).toBe("ok:a2");
+    await expect(app.a2.run({})).rejects.toThrowError(
+      "Action 'a2' is disabled.",
+    );
   });
 
   test("should return nothing", async ({ expect }) => {

package/src/server/core/primitives/$action.ts

@@ -1,6 +1,7 @@
 import {
   $env,
   $inject,
+  AlephaError,
   type Async,
   createPrimitive,
   isTypeFile,
@@ -188,8 +189,8 @@ export interface ActionPrimitiveOptions<TConfig extends RequestConfigSchema>
   description?: string;
 
   /**
-   * Disable the route. Useful with env variables do disable one specific route.
-   * Route won't be available in the API but can still be called locally!
+   * Disable the route. Useful with env variables to disable one specific route.
+   * Route won't be available in the API nor locally.
    */
   disabled?: boolean;
 
@@ -317,6 +318,9 @@ export class ActionPrimitive<
     config?: ClientRequestEntry<TConfig>,
     options: ClientRequestOptions = {}, // most of the options are ignored here
   ): Promise<ClientRequestResponse<TConfig>> {
+    if (this.options.disabled) {
+      throw new AlephaError(`Action '${this.name}' is disabled.`);
+    }
     const handler = this.options.handler;
     const {
       body,

package/src/server/core/providers/NodeHttpServerProvider.ts

@@ -76,22 +76,9 @@ export class NodeHttpServerProvider extends ServerProvider {
     res.end("Internal Server Error");
   };
 
-  // P3: Pre-allocated event object to avoid { req, res } allocation per request
-  // Safe because handleNodeRequest completes before the next request reuses this object
-  protected readonly nodeRequestEvent = {
-    req: null as unknown as IncomingMessage,
-    res: null as unknown as ServerResponse,
-  };
-
   public readonly server = this.createHttpServer((req, res) => {
-    // Reuse pre-allocated event object instead of creating { req, res } per request
-    const ev = this.nodeRequestEvent;
-    ev.req = req;
-    ev.res = res;
-    // Note: handleNodeRequest returns a promise that resolves after response is sent
-    this.handleNodeRequest(ev).catch((err) =>
-      this.handleRequestError(res, err),
-    );
+    const promise = this.handleNodeRequest({ req, res });
+    promise.catch((err) => this.handleRequestError(res, err));
   });
 
   public readonly start = $hook({

package/src/server/core/providers/ServerProvider.ts

@@ -220,13 +220,15 @@ export class ServerProvider {
 
     // empty body - just send status & headers
     if (!response.body) {
-      res.writeHead(response.status, response.headers).end();
+      res.writeHead(response.status, response.headers);
+      res.end();
       return;
     }
 
     // if response.body is string or buffer
     if (typeof response.body === "string" || Buffer.isBuffer(response.body)) {
-      res.writeHead(response.status, response.headers).end(response.body);
+      res.writeHead(response.status, response.headers);
+      res.end(response.body);
       return;
     }
 

package/src/server/core/providers/ServerRouterProvider.ts

@@ -45,23 +45,6 @@ export class ServerRouterProvider extends RouterProvider<ServerRouteMatcher> {
   >;
   protected compiledOnError?: CompiledEventExecutor<Hooks["server:onError"]>;
 
-  // Reusable context.run options object - mutated per request
-  // Includes slots for request data to avoid closure allocation in context.run
-  protected readonly contextRunOptions = {
-    context: "",
-    // Request data slots - populated before context.run, read by processRequestBound
-    _request: null as unknown as ServerRequest,
-    _route: null as unknown as ServerRoute,
-    _responseKind: "any" as ResponseKind,
-  };
-
-  // Pre-bound method reference - created once at instantiation, reused for all requests
-  // Reads arguments from contextRunOptions to avoid closure allocation per request
-  protected readonly processRequestBound = (): Promise<any> => {
-    const opts = this.contextRunOptions;
-    return this.processRequest(opts._request, opts._route, opts._responseKind);
-  };
-
   // Cache query schema keys to avoid property enumeration on every request
   // WeakMap allows GC of schemas that are no longer referenced
   protected readonly queryKeysCache = new WeakMap<object, string[]>();
@@ -137,16 +120,11 @@ export class ServerRouterProvider extends RouterProvider<ServerRouteMatcher> {
         const request =
           this.serverRequestParser.createServerRequest(rawRequest);
 
-        // Populate pre-allocated options with request data
-        // This avoids closure allocation - processRequestBound reads from these slots
-        const opts = this.contextRunOptions;
-        opts.context = this.getContextId(rawRequest.headers);
-        opts._request = request;
-        opts._route = route;
-        opts._responseKind = responseKind;
-
-        // Use pre-bound method reference instead of creating closure per request
-        return this.alepha.context.run(this.processRequestBound, opts);
+        // Create context options per request to avoid race conditions with concurrent requests
+        return this.alepha.context.run(
+          () => this.processRequest(request, route, responseKind),
+          { context: this.getContextId(rawRequest.headers) },
+        );
       },
     });
   }

package/src/server/cors/index.ts

@@ -25,9 +25,9 @@ declare module "alepha/server" {
 // ---------------------------------------------------------------------------------------------------------------------
 
 /**
- * | type | quality | stability |
- * |------|---------|-----------|
- * | backend | standard | stable |
+ * | Stability | Since | Runtime |
+ * |-----------|-------|---------|
+ * | 3 - stable | 0.3.0 | node, bun, workerd|
  *
  * Cross-Origin Resource Sharing configuration.
  *

package/src/server/health/index.ts

@@ -10,9 +10,9 @@ export * from "./schemas/healthSchema.ts";
 // ---------------------------------------------------------------------------------------------------------------------
 
 /**
- * | type | quality | stability |
- * |------|---------|-----------|
- * | devops | standard | stable |
+ * | Stability | Since | Runtime |
+ * |-----------|-------|---------|
+ * | 3 - stable | 0.7.0 | node, bun, workerd|
  *
  * Application health monitoring endpoints.
  *

package/src/server/helmet/index.ts

@@ -9,9 +9,9 @@ export * from "./providers/ServerHelmetProvider.ts";
 // ---------------------------------------------------------------------------------------------------------------------
 
 /**
- * | type | quality | stability |
- * |------|---------|-----------|
- * | backend | standard | stable |
+ * | Stability | Since | Runtime |
+ * |-----------|-------|---------|
+ * | 3 - stable | 0.15.0 | node, bun, workerd|
  *
  * HTTP security headers.
  *

package/src/server/links/index.ts

@@ -35,9 +35,9 @@ declare module "alepha" {
 // ---------------------------------------------------------------------------------------------------------------------
 
 /**
- * | type | quality | stability |
- * |------|---------|-----------|
- * | backend | standard | stable |
+ * | Stability | Since | Runtime |
+ * |-----------|-------|---------|
+ * | 3 - stable | 0.6.0 | node, bun, workerd, expo |
  *
  * Type-safe API client with request deduplication.
  *

package/src/server/metrics/index.ts

@@ -9,9 +9,9 @@ export * from "./providers/ServerMetricsProvider.ts";
 // ---------------------------------------------------------------------------------------------------------------------
 
 /**
- * | type | quality | stability |
- * |------|---------|-----------|
- * | devops | standard | stable |
+ * | Stability | Since | Runtime |
+ * |-----------|-------|---------|
+ * | 2 - beta | 0.14.0 | node, bun|
  *
  * Prometheus-style metrics collection.
  *

package/src/server/multipart/index.ts

@@ -9,9 +9,9 @@ export * from "./providers/ServerMultipartProvider.ts";
 // ---------------------------------------------------------------------------------------------------------------------
 
 /**
- * | type | quality | stability |
- * |------|---------|-----------|
- * | backend | standard | stable |
+ * | Stability | Since | Runtime |
+ * |-----------|-------|---------|
+ * | 3 - stable | 0.5.0 | node, bun|
  *
  * Multipart form data handling for file uploads.
  *

package/src/server/proxy/index.ts

@@ -11,9 +11,9 @@ export * from "./providers/ServerProxyProvider.ts";
 // ---------------------------------------------------------------------------------------------------------------------
 
 /**
- * | type | quality | stability |
- * |------|---------|-----------|
- * | backend | standard | stable |
+ * | Stability | Since | Runtime |
+ * |-----------|-------|---------|
+ * | 2 - beta | 0.12.0 | node, bun|
  *
  * Reverse proxy routing.
  *

package/src/server/rate-limit/index.ts

@@ -54,9 +54,9 @@ export interface RateLimitOptions {
 }
 
 /**
- * | type | quality | stability |
- * |------|---------|-----------|
- * | backend | standard | stable |
+ * | Stability | Since | Runtime |
+ * |-----------|-------|---------|
+ * | 3 - stable | 0.16.0 | node, bun, workerd|
  *
  * Request rate limiting on actions.
  *

package/src/server/static/index.ts

@@ -11,9 +11,9 @@ export * from "./providers/ServerStaticProvider.ts";
 // ---------------------------------------------------------------------------------------------------------------------
 
 /**
- * | type | quality | stability |
- * |------|---------|-----------|
- * | backend | standard | stable |
+ * | Stability | Since | Runtime |
+ * |-----------|-------|---------|
+ * | 3 - stable | 0.3.0 | node, bun|
  *
  * Static file serving.
  *

package/src/server/swagger/index.ts

@@ -30,9 +30,9 @@ declare module "alepha/server" {
 // ---------------------------------------------------------------------------------------------------------------------
 
 /**
- * | type | quality | stability |
- * |------|---------|-----------|
- * | backend | standard | stable |
+ * | Stability | Since | Runtime |
+ * |-----------|-------|---------|
+ * | 3 - stable | 0.9.0 | node, bun|
  *
  * Automatic API documentation generation.
  *

package/src/sms/index.ts

@@ -34,9 +34,9 @@ declare module "alepha" {
 // ---------------------------------------------------------------------------------------------------------------------
 
 /**
- * | type | quality | stability |
- * |------|---------|-----------|
- * | backend | rare | stable |
+ * | Stability | Since | Runtime |
+ * |-----------|-------|---------|
+ * | 3 - stable | 0.15.0 | node, bun|
  *
  * SMS delivery with multiple provider support.
  *

package/src/system/index.ts

@@ -21,9 +21,9 @@ export * from "./services/FileDetector.ts";
 // ---------------------------------------------------------------------------------------------------------------------
 
 /**
- * | type | quality | stability |
- * |------|---------|-----------|
- * | tooling | standard | stable |
+ * | Stability | Since | Runtime |
+ * |-----------|-------|---------|
+ * | 3 - stable | 0.14.0 | node, bun, browser|
  *
  * System-level abstractions for portable code across runtimes.
  *

package/src/thread/index.ts

@@ -22,9 +22,9 @@ Alepha.prototype.isWorkerThread = function (this: Alepha): boolean {
 // ---------------------------------------------------------------------------------------------------------------------
 
 /**
- * | type | quality | stability |
- * |------|---------|-----------|
- * | backend | standard | experimental |
+ * | Stability | Since | Runtime |
+ * |-----------|-------|---------|
+ * | 1 - experimental | 0.16.0 | node|
  *
  * Multi-threading support.
  *

package/src/topic/core/index.ts

@@ -15,9 +15,9 @@ export * from "./providers/TopicProvider.ts";
 // ---------------------------------------------------------------------------------------------------------------------
 
 /**
- * | type | quality | stability |
- * |------|---------|-----------|
- * | backend | rare | stable |
+ * | Stability | Since | Runtime |
+ * |-----------|-------|---------|
+ * | 3 - stable | 0.7.0 | node, bun|
  *
  * Publish/subscribe messaging for event-driven architectures.
  *

package/src/websocket/index.ts

@@ -58,9 +58,9 @@ export * from "./providers/NodeWebSocketServerProvider.ts";
 // ---------------------------------------------------------------------------------------------------------------------
 
 /**
- * | type | quality | stability |
- * |------|---------|-----------|
- * | backend | rare | experimental |
+ * | Stability | Since | Runtime |
+ * |-----------|-------|---------|
+ * | 1 - experimental | 0.19.0 | node, browser|
  *
  * Real-time bidirectional communication.
  *

package/src/cli/templates/webHelloComponentTsx.ts

@@ -1,30 +0,0 @@
-export const webHelloComponentTsx = (options: { auth?: boolean } = {}) => {
-  const imports: string[] = [];
-
-  if (options.auth) {
-    imports.push('import { UserButton } from "@alepha/ui/auth";');
-  }
-  imports.push('import { useState } from "react";');
-
-  const userButton = options.auth ? "\n      <UserButton />" : "";
-
-  return `${imports.join("\n")}
-
-interface Props {
-  message?: string;
-}
-
-const Hello = (props: Props) => {
-  const [message, setMessage] = useState(props.message ?? "");
-  return (
-    <div>
-      <h1>{message}</h1>
-      <input value={message} onChange={(e) => setMessage(e.target.value)} />
-      <p>Edit this component in src/web/components/Hello.tsx</p>${userButton}
-    </div>
-  );
-};
-
-export default Hello;
-`;
-};