alepha 0.18.2 → 0.18.3

package/src/cli/core/tasks/BuildVercelTask.ts

@@ -12,97 +12,94 @@ import { BuildTask, type BuildTaskContext } from "./BuildTask.ts";
  * - .vercel/project.json if projectId and orgId are set
  */
 export class BuildVercelTask extends BuildTask {
-	protected readonly fs = $inject(FileSystemProvider);
-
-	protected readonly warningComment =
-		"// This file was automatically generated. DO NOT MODIFY.\n" +
-		"// Changes to this file will be lost when the code is regenerated.\n";
-
-	async run(ctx: BuildTaskContext): Promise<void> {
-		if (ctx.options.target !== "vercel") {
-			return;
-		}
-
-		const distDir = ctx.options.output?.dist ?? "dist";
-
-		await ctx.run({
-			name: "generate deploy config (vercel)",
-			handler: async () => {
-				await this.generateVercel(ctx, distDir);
-			},
-		});
-	}
-
-	protected async generateVercel(
-		ctx: BuildTaskContext,
-		distDir: string,
-	): Promise<void> {
-		const root = ctx.root;
-		const dist = this.fs.join(root, distDir);
-
-		const outputDir = this.fs.join(dist, ".vercel", "output");
-		const funcDir = this.fs.join(outputDir, "functions", "index.func");
-		const staticDir = this.fs.join(outputDir, "static");
-
-		await this.fs.mkdir(funcDir);
-		await this.fs.mkdir(staticDir);
-
-		await this.writeOutputConfig(outputDir, ctx.options.vercel?.config);
-		await this.writeVcConfig(funcDir);
-		await this.writeHandler(funcDir);
-		await this.copyServerBundle(dist, funcDir);
-		await this.copyStaticAssets(dist, staticDir);
-		await this.writeProjectConfig(ctx, dist);
-	}
-
-	/**
-	 * Write .vercel/output/config.json with Build Output API v3 format.
-	 */
-	protected async writeOutputConfig(
-		outputDir: string,
-		config?: { crons?: { path: string; schedule: string }[] },
-	): Promise<void> {
-		const outputConfig: Record<string, any> = {
-			version: 3,
-			routes: [
-				{ handle: "filesystem" },
-				{ src: "/(.*)", dest: "/index" },
-			],
-		};
-
-		if (config?.crons && config.crons.length > 0) {
-			outputConfig.crons = config.crons;
-		}
-
-		await this.fs.writeFile(
-			this.fs.join(outputDir, "config.json"),
-			JSON.stringify(outputConfig, null, 2),
-		);
-	}
-
-	/**
-	 * Write .vc-config.json for the serverless function.
-	 */
-	protected async writeVcConfig(funcDir: string): Promise<void> {
-		await this.fs.writeFile(
-			this.fs.join(funcDir, ".vc-config.json"),
-			JSON.stringify(
-				{
-					runtime: "nodejs22.x",
-					handler: "handler.js",
-					launcherType: "Nodejs",
-				},
-				null,
-				2,
-			),
-		);
-	}
-
-	/**
-	 * Write the handler.js entry point that uses node:request event.
-	 */
-	protected async writeHandler(funcDir: string): Promise<void> {
-		const handlerCode = `
+  protected readonly fs = $inject(FileSystemProvider);
+
+  protected readonly warningComment =
+    "// This file was automatically generated. DO NOT MODIFY.\n" +
+    "// Changes to this file will be lost when the code is regenerated.\n";
+
+  async run(ctx: BuildTaskContext): Promise<void> {
+    if (ctx.options.target !== "vercel") {
+      return;
+    }
+
+    const distDir = ctx.options.output?.dist ?? "dist";
+
+    await ctx.run({
+      name: "generate deploy config (vercel)",
+      handler: async () => {
+        await this.generateVercel(ctx, distDir);
+      },
+    });
+  }
+
+  protected async generateVercel(
+    ctx: BuildTaskContext,
+    distDir: string,
+  ): Promise<void> {
+    const root = ctx.root;
+    const dist = this.fs.join(root, distDir);
+
+    const outputDir = this.fs.join(dist, ".vercel", "output");
+    const funcDir = this.fs.join(outputDir, "functions", "index.func");
+    const staticDir = this.fs.join(outputDir, "static");
+
+    await this.fs.mkdir(funcDir);
+    await this.fs.mkdir(staticDir);
+
+    await this.writeOutputConfig(outputDir, ctx.options.vercel?.config);
+    await this.writeVcConfig(funcDir);
+    await this.writeHandler(funcDir);
+    await this.copyServerBundle(dist, funcDir);
+    await this.copyStaticAssets(dist, staticDir);
+    await this.writeProjectConfig(ctx, dist);
+  }
+
+  /**
+   * Write .vercel/output/config.json with Build Output API v3 format.
+   */
+  protected async writeOutputConfig(
+    outputDir: string,
+    config?: { crons?: { path: string; schedule: string }[] },
+  ): Promise<void> {
+    const outputConfig: Record<string, any> = {
+      version: 3,
+      routes: [{ handle: "filesystem" }, { src: "/(.*)", dest: "/index" }],
+    };
+
+    if (config?.crons && config.crons.length > 0) {
+      outputConfig.crons = config.crons;
+    }
+
+    await this.fs.writeFile(
+      this.fs.join(outputDir, "config.json"),
+      JSON.stringify(outputConfig, null, 2),
+    );
+  }
+
+  /**
+   * Write .vc-config.json for the serverless function.
+   */
+  protected async writeVcConfig(funcDir: string): Promise<void> {
+    await this.fs.writeFile(
+      this.fs.join(funcDir, ".vc-config.json"),
+      JSON.stringify(
+        {
+          runtime: "nodejs22.x",
+          handler: "handler.js",
+          launcherType: "Nodejs",
+        },
+        null,
+        2,
+      ),
+    );
+  }
+
+  /**
+   * Write the handler.js entry point that uses node:request event.
+   */
+  protected async writeHandler(funcDir: string): Promise<void> {
+    const handlerCode = `
 import "./index.js";
 
 export default async (req, res) => {
@@ -119,81 +116,81 @@ export default async (req, res) => {
 };
 `.trim();
 
-		await this.fs.writeFile(
-			this.fs.join(funcDir, "handler.js"),
-			`${this.warningComment}\n${handlerCode}`,
-		);
-	}
-
-	/**
-	 * Copy the server bundle (index.js, server/, package.json) into the function directory.
-	 */
-	protected async copyServerBundle(
-		dist: string,
-		funcDir: string,
-	): Promise<void> {
-		await this.fs.cp(
-			this.fs.join(dist, "index.js"),
-			this.fs.join(funcDir, "index.js"),
-		);
-
-		await this.fs.cp(
-			this.fs.join(dist, "package.json"),
-			this.fs.join(funcDir, "package.json"),
-		);
-
-		const serverDir = this.fs.join(dist, "server");
-		if (await this.fs.exists(serverDir)) {
-			await this.fs.cp(serverDir, this.fs.join(funcDir, "server"));
-		}
-	}
-
-	/**
-	 * Move static assets from dist/public/ to .vercel/output/static/.
-	 */
-	protected async copyStaticAssets(
-		dist: string,
-		staticDir: string,
-	): Promise<void> {
-		const publicDir = this.fs.join(dist, "public");
-		if (await this.fs.exists(publicDir)) {
-			await this.fs.cp(publicDir, staticDir);
-		} else {
-			await this.fs.writeFile(this.fs.join(staticDir, ".keep"), "");
-		}
-	}
-
-	/**
-	 * Write .vercel/project.json if projectId and orgId are available.
-	 */
-	protected async writeProjectConfig(
-		ctx: BuildTaskContext,
-		dist: string,
-	): Promise<void> {
-		const projectId =
-			process.env.VERCEL_PROJECT_ID ?? ctx.options.vercel?.projectId;
-		const projectName =
-			process.env.VERCEL_PROJECT_NAME ?? ctx.options.vercel?.projectName;
-		const orgId = process.env.VERCEL_ORG_ID ?? ctx.options.vercel?.orgId;
-
-		if (!projectId || !orgId) {
-			return;
-		}
-
-		const vercelDir = this.fs.join(dist, ".vercel");
-		await this.fs.mkdir(vercelDir);
-
-		await this.fs.writeFile(
-			this.fs.join(vercelDir, "project.json"),
-			JSON.stringify(
-				{
-					projectId,
-					projectName,
-					orgId,
-				},
-				null,
-				2,
-			),
-		);
-	}
+    await this.fs.writeFile(
+      this.fs.join(funcDir, "handler.js"),
+      `${this.warningComment}\n${handlerCode}`,
+    );
+  }
+
+  /**
+   * Copy the server bundle (index.js, server/, package.json) into the function directory.
+   */
+  protected async copyServerBundle(
+    dist: string,
+    funcDir: string,
+  ): Promise<void> {
+    await this.fs.cp(
+      this.fs.join(dist, "index.js"),
+      this.fs.join(funcDir, "index.js"),
+    );
+
+    await this.fs.cp(
+      this.fs.join(dist, "package.json"),
+      this.fs.join(funcDir, "package.json"),
+    );
+
+    const serverDir = this.fs.join(dist, "server");
+    if (await this.fs.exists(serverDir)) {
+      await this.fs.cp(serverDir, this.fs.join(funcDir, "server"));
+    }
+  }
+
+  /**
+   * Move static assets from dist/public/ to .vercel/output/static/.
+   */
+  protected async copyStaticAssets(
+    dist: string,
+    staticDir: string,
+  ): Promise<void> {
+    const publicDir = this.fs.join(dist, "public");
+    if (await this.fs.exists(publicDir)) {
+      await this.fs.cp(publicDir, staticDir);
+    } else {
+      await this.fs.writeFile(this.fs.join(staticDir, ".keep"), "");
+    }
+  }
+
+  /**
+   * Write .vercel/project.json if projectId and orgId are available.
+   */
+  protected async writeProjectConfig(
+    ctx: BuildTaskContext,
+    dist: string,
+  ): Promise<void> {
+    const projectId =
+      process.env.VERCEL_PROJECT_ID ?? ctx.options.vercel?.projectId;
+    const projectName =
+      process.env.VERCEL_PROJECT_NAME ?? ctx.options.vercel?.projectName;
+    const orgId = process.env.VERCEL_ORG_ID ?? ctx.options.vercel?.orgId;
+
+    if (!projectId || !orgId) {
+      return;
+    }
+
+    const vercelDir = this.fs.join(dist, ".vercel");
+    await this.fs.mkdir(vercelDir);
+
+    await this.fs.writeFile(
+      this.fs.join(vercelDir, "project.json"),
+      JSON.stringify(
+        {
+          projectId,
+          projectName,
+          orgId,
+        },
+        null,
+        2,
+      ),
+    );
+  }
 }

package/src/cli/core/templates/alephaConfigTs.ts

@@ -2,7 +2,7 @@
  * Template for alepha.config.ts with documented options.
  */
 export const alephaConfigTs = () => {
-  return `import { defineConfig } from "alepha/cli";
+  return `import { defineConfig } from "alepha/cli/config";
 
 export default defineConfig({
   //

package/src/cli/core/templates/apiAppSecurityTs.ts

@@ -13,12 +13,9 @@ export class AppSecurity {
 
       // Registration & login options
       registrationAllowed: true,
-      emailEnabled: true,
-      emailRequired: true,
-      usernameEnabled: false,
-      usernameRequired: false,
-      phoneEnabled: false,
-      phoneRequired: false,
+      email: "required",
+      username: "none",
+      phoneNumber: "none",
 
       // Verification (requires notifications feature)
       verifyEmailRequired: false,
@@ -30,8 +27,8 @@ export class AppSecurity {
       notifications: false,
       audits: false,
       apiKeys: false,
-      jobs: false,
-      files: false,
+      sessionPurge: false,
+      avatars: false,
       parameters: false,
     },
     identities: {

package/src/cli/core/templates/tsconfigJson.ts

@@ -1,6 +1,11 @@
 export const tsconfigJson = () =>
   `
 {
-  "extends": "alepha/tsconfig.base"
+  "extends": "alepha/tsconfig.base",
+  "compilerOptions": {
+    "paths": {
+      "@/*": ["./src/*"]
+    }
+  }
 }
 `.trim();

package/src/cli/platform/adapters/CloudflareAdapter.spec.ts

@@ -630,7 +630,7 @@ describe("CloudflareAdapter", () => {
       await adapter.teardown(ctx, run);
 
       expect(api.d1Databases).toHaveLength(0);
-      expect(api.r2Buckets).toHaveLength(0);
+      // expect(api.r2Buckets).toHaveLength(0); DISABLED FOR NOW
       expect(api.kvNamespaces).toHaveLength(0);
     });
   });

package/src/cli/platform/adapters/CloudflareAdapter.ts

@@ -708,35 +708,36 @@ export class CloudflareAdapter extends PlatformAdapter {
     }
 
     // 5. Delete R2 bucket
-    const needsBucket = ctx.apps.some((a) => a.resources.hasBucket);
-    if (needsBucket) {
-      const name = ctx.naming.r2();
-      await run({
-        name: `delete r2 ${name}`,
-        handler: async () => {
-          try {
-            await this.api.deleteR2(name);
-          } catch (error: any) {
-            const msg = String(error.message || "");
-            if (
-              msg.includes("does not exist") ||
-              msg.includes("NoSuchBucket")
-            ) {
-              // Already gone, nothing to do
-            } else if (
-              msg.includes("not empty") ||
-              msg.includes("BucketNotEmpty")
-            ) {
-              this.log.warn(
-                `Bucket ${name} is not empty -- skipped. Empty it manually.`,
-              );
-            } else {
-              this.log.warn(`Failed to delete r2 ${name}: ${msg}`);
-            }
-          }
-        },
-      });
-    }
+    // TODO: empty bucket via S3-compatible API before deletion (needs native S3 client)
+    // const needsBucket = ctx.apps.some((a) => a.resources.hasBucket);
+    // if (needsBucket) {
+    //   const name = ctx.naming.r2();
+    //   await run({
+    //     name: `delete r2 ${name}`,
+    //     handler: async () => {
+    //       try {
+    //         await this.api.deleteR2(name);
+    //       } catch (error: any) {
+    //         const msg = String(error.message || "");
+    //         if (
+    //           msg.includes("does not exist") ||
+    //           msg.includes("NoSuchBucket")
+    //         ) {
+    //           // Already gone, nothing to do
+    //         } else if (
+    //           msg.includes("not empty") ||
+    //           msg.includes("BucketNotEmpty")
+    //         ) {
+    //           this.log.warn(
+    //             `Bucket ${name} is not empty -- skipped. Empty it manually.`,
+    //           );
+    //         } else {
+    //           this.log.warn(`Failed to delete r2 ${name}: ${msg}`);
+    //         }
+    //       }
+    //     },
+    //   });
+    // }
 
     // 6. Delete D1 or Hyperdrive
     const needsDB = ctx.apps.some((a) => a.resources.hasDatabase);

package/src/cli/platform/atoms/platformOptions.ts

@@ -28,6 +28,27 @@ export const platformOptions = $atom({
        */
       default: t.optional(t.text()),
 
+      /**
+       * Secret store configuration for syncing .env secrets
+       * to external providers (e.g. GitHub Actions environments).
+       */
+      secrets: t.optional(
+        t.object({
+          /**
+           * Secret store backend.
+           */
+          store: t.enum(["github"]),
+
+          /**
+           * Pattern for resolving environment names in the store.
+           * Placeholders: {project}, {env}.
+           *
+           * @default "{project}-{env}"
+           */
+          environmentPattern: t.optional(t.text()),
+        }),
+      ),
+
       /**
        * Named environments with their adapter and configuration.
        */