bosia 0.6.0 → 0.6.2

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "bosia",
-	"version": "0.6.0",
+	"version": "0.6.2",
 	"type": "module",
 	"description": "A fast, batteries-included fullstack framework — SSR · Svelte 5 Runes · Bun · ElysiaJS. File-based routing inspired by SvelteKit. No Node.js, no Vite, no adapters.",
 	"keywords": [
@@ -33,6 +33,7 @@
 	"exports": {
 		".": "./src/lib/index.ts",
 		"./client": "./src/lib/client.ts",
+		"./server": "./src/lib/server.ts",
 		"./plugins/server-timing": "./src/core/plugins/server-timing.ts",
 		"./plugins/inspector": "./src/core/plugins/inspector/index.ts"
 	},

package/src/core/cache.ts

@@ -28,16 +28,26 @@ function parseMaxEntries(raw: string | undefined): number {
 	return n;
 }
 
-export const CACHE_KEYS: readonly string[] = parseCacheKeys(process.env.CACHE_KEYS);
-export const CACHE_MAX_ENTRIES = parseMaxEntries(process.env.CACHE_MAX_ENTRIES);
+// `invalidate` / `invalidateAll` are re-exported from the public `bosia`
+// barrel, so this module also evaluates in the browser bundle. Guard every
+// `process.env` read — otherwise hydration throws `ReferenceError: Can't
+// find variable: process` (Safari) the moment the barrel is imported.
+const env: Record<string, string | undefined> =
+	typeof process !== "undefined" && process.env ? process.env : {};
+const isServer = typeof process !== "undefined";
+
+export const CACHE_KEYS: readonly string[] = parseCacheKeys(env.CACHE_KEYS);
+export const CACHE_MAX_ENTRIES = parseMaxEntries(env.CACHE_MAX_ENTRIES);
 export const CACHE_ENABLED = CACHE_MAX_ENTRIES > 0;
 
-if (CACHE_ENABLED) {
-	console.log(
-		`💾 Response cache: max ${CACHE_MAX_ENTRIES} entries, identity keys [${CACHE_KEYS.join(", ")}]`,
-	);
-} else {
-	console.log("💾 Response cache: disabled (CACHE_MAX_ENTRIES=0)");
+if (isServer) {
+	if (CACHE_ENABLED) {
+		console.log(
+			`💾 Response cache: max ${CACHE_MAX_ENTRIES} entries, identity keys [${CACHE_KEYS.join(", ")}]`,
+		);
+	} else {
+		console.log("💾 Response cache: disabled (CACHE_MAX_ENTRIES=0)");
+	}
 }
 
 // ─── Entry shape ─────────────────────────────────────────

package/src/core/dev.ts

@@ -247,6 +247,12 @@ const devServer = Bun.serve({
 		const forwardedHeaders = new Headers(req.headers);
 		forwardedHeaders.set("x-forwarded-host", reqUrl.host);
 		forwardedHeaders.set("x-forwarded-proto", reqUrl.protocol.replace(":", ""));
+		// Force inner app to respond uncompressed. Bun's `fetch()` auto-decodes
+		// gzip/br bodies but leaves the original `Content-Encoding` header on
+		// the Response, so passing it through made Safari throw -1015 ("cannot
+		// decode raw data") on every HTML navigation. Identity on the dev wire
+		// is fine — it's localhost.
+		forwardedHeaders.set("accept-encoding", "identity");
 
 		// HMR-driven reloads can land on the proxy before the freshly-respawned
 		// inner has bound APP_PORT. Retry for a few seconds on idempotent HTML

package/src/core/plugins/inspector/index.ts

@@ -20,7 +20,7 @@ export interface InspectorOptions {
 interface ServerError {
 	id: string;
 	ts: number;
-	source: "elysia" | "uncaught" | "rejection";
+	source: "server" | "uncaught" | "rejection";
 	message: string;
 	stack?: string;
 	file?: string;
@@ -147,7 +147,7 @@ function installProcessListeners() {
 function installGlobalReporter() {
 	globalThis.__BOSIA_REPORT_ERROR__ = (e) => {
 		pushServerError({
-			source: e.source ?? "elysia",
+			source: e.source ?? "server",
 			message: e.message,
 			stack: e.stack,
 		});
@@ -282,7 +282,7 @@ export function inspector(options: InspectorOptions = {}): BosiaPlugin | false {
 					chained = chained.onError(({ error }) => {
 						const e = error as Error;
 						pushServerError({
-							source: "elysia",
+							source: "server",
 							message: e?.message ?? String(error),
 							stack: e?.stack,
 						});

package/src/core/server.ts

@@ -432,16 +432,31 @@ async function resolve(event: RequestEvent): Promise<Response> {
 				cookies,
 			});
 
+			const responseContentType = response.headers.get("content-type") ?? "";
+			// SSE responses are long-lived pub/sub streams — caching the buffered
+			// bytes would serve a stale finite snapshot to future subscribers and
+			// bypass the handler's subscribe() call entirely. Skip them.
+			const isEventStream = responseContentType.toLowerCase().includes("text/event-stream");
+
+			// Respect handler opt-out via Cache-Control. Standard HTTP semantics:
+			// no-store / private / no-cache all signal "don't reuse this response".
+			const cacheControl = (response.headers.get("cache-control") ?? "").toLowerCase();
+			const noStore =
+				cacheControl.includes("no-store") ||
+				cacheControl.includes("private") ||
+				cacheControl.includes("no-cache");
+
 			if (
 				apiCacheable &&
 				apiCacheKey &&
 				response.status === 200 &&
+				!isEventStream &&
+				!noStore &&
 				(cookies as CookieJar).outgoing.length === 0
 			) {
 				const cloned = response.clone();
 				const extraHeaders = captureCacheableHeaders(response.headers);
-				const contentType =
-					response.headers.get("content-type") ?? "application/octet-stream";
+				const contentType = responseContentType || "application/octet-stream";
 				const keyForWrite = apiCacheKey;
 				queueMicrotask(async () => {
 					try {

package/src/lib/index.ts

@@ -6,7 +6,9 @@
 export { cn, getServerTime } from "./utils.ts";
 export { sequence } from "../core/hooks.ts";
 export { error, redirect, fail } from "../core/errors.ts";
-export { invalidate, invalidateAll } from "../core/cache.ts";
+// `invalidate` / `invalidateAll` (server response-cache eviction) live in
+// "bosia/server" — they touch server-process state and pulling them into
+// the shared barrel leaks `process.env` reads into client bundles.
 export type { HttpError, Redirect, RedirectOptions, ActionFailure } from "../core/errors.ts";
 export type {
 	RequestEvent,

package/src/lib/server.ts

@@ -0,0 +1,12 @@
+// ─── Bosia Server API ─────────────────────────────────────
+// Server-only helpers — import from "bosia/server".
+// Kept separate from "bosia" because these modules touch server-process
+// state (the response-cache Map, `process.env`) and have no meaning in
+// the browser. Importing them through the shared `bosia` barrel would
+// drag `process.env` reads into client bundles via the lib re-export
+// graph (see ROADMAP v0.6.0 entry on the Safari hydration ReferenceError).
+//
+// Usage in user apps (form actions, +server.ts, hooks):
+//   import { invalidate, invalidateAll } from "bosia/server";
+
+export { invalidate, invalidateAll } from "../core/cache.ts";