bosia 0.9.10 → 1.1.0

package/README.md

@@ -52,7 +52,7 @@ bun run start
 
 | Layer       | Technology                                 |
 | ----------- | ------------------------------------------ |
-| Runtime     | [Bun](https://bun.sh)                      |
+| Runtime     | [Bun](https://bun.sh) ≥ 1.4                |
 | HTTP Server | Built-in (`Bun.serve`)                     |
 | UI          | [Svelte 5](https://svelte.dev) (Runes)     |
 | CSS         | [Tailwind CSS v4](https://tailwindcss.com) |

package/package.json

@@ -1,7 +1,10 @@
 {
 	"name": "bosia",
-	"version": "0.9.10",
+	"version": "1.1.0",
 	"type": "module",
+	"engines": {
+		"bun": ">=1.4"
+	},
 	"description": "A fast, batteries-included fullstack framework — SSR · Svelte 5 Runes · Bun. File-based routing. No Node.js, no Vite. Runs on Bun or Cloudflare Workers.",
 	"keywords": [
 		"bun",

package/src/core/build.ts

@@ -1,5 +1,14 @@
-import { writeFileSync, readFileSync, rmSync, mkdirSync, existsSync } from "fs";
-import { basename, join, relative } from "path";
+import {
+	writeFileSync,
+	readFileSync,
+	rmSync,
+	mkdirSync,
+	existsSync,
+	readdirSync,
+	unlinkSync,
+	rmdirSync,
+} from "fs";
+import { basename, join, relative, resolve } from "path";
 import type { RouteManifest } from "./types.ts";
 
 import { scanRoutes, RouteConflictError } from "./scanner.ts";
@@ -92,9 +101,39 @@ if (process.env.BOSIA_SKIP_ROUTE_SCAN === "1") {
 // would clobber a concurrently-running `bosia dev` whose compiled server lives
 // at .bosia/dev/ — the codegen files (routes*.ts, env.*.ts, types/) are the
 // only things this build needs to clear to avoid stale entries on route renames.
-try {
-	rmSync(OUT_DIR, { recursive: true, force: true });
-} catch {}
+// Windows won't delete a file another process holds open (a running `bosia
+// start`, an editor, antivirus scanning fresh files); warn instead of silently
+// building over stale output. rmSync is only a first try: on Windows, Bun 1.4.2
+// threw ENOENT for an existing "./dist" (and with `force` hid it, deleting
+// nothing). So resolve the path, check what's left, and finish entry by entry —
+// a real failure then names the exact file.
+function clearOutput(path: string): void {
+	const abs = resolve(path);
+	if (!existsSync(abs)) return;
+	try {
+		rmSync(abs, { recursive: true, maxRetries: 5, retryDelay: 100 });
+	} catch {}
+	if (!existsSync(abs)) return;
+	try {
+		removeTree(abs);
+	} catch (err) {
+		const e = err as NodeJS.ErrnoException;
+		console.warn(
+			`⚠️  Could not delete ${e.path ?? path} (${e.code ?? String(err)}) — stop whatever is using it and rebuild.`,
+		);
+	}
+}
+function removeTree(path: string): void {
+	for (const entry of readdirSync(path, { withFileTypes: true })) {
+		const child = join(path, entry.name);
+		if (entry.isDirectory()) removeTree(child);
+		else unlinkSync(child);
+	}
+	rmdirSync(path);
+}
+clearOutput(OUT_DIR);
+// A Bun build must not ship a leftover Workers bundle from an earlier target.
+if (target !== "workers" && existsSync(`${OUT_DIR}/worker`)) clearOutput(`${OUT_DIR}/worker`);
 for (const p of [
 	".bosia/routes.ts",
 	".bosia/routes.client.ts",
@@ -104,9 +143,7 @@ for (const p of [
 	".bosia/runtime.workers.ts",
 	".bosia/types",
 ]) {
-	try {
-		rmSync(p, { recursive: true, force: true });
-	} catch {}
+	clearOutput(p);
 }
 
 // 1. Scan routes (or reuse the cached manifest — see 0b-pre)
@@ -287,7 +324,7 @@ for (const output of clientResult.outputs) {
 	const rel = toPosix(relative(`${OUT_DIR}/client`, output.path)); // URL path, not fs path
 	if (output.path.endsWith(".js")) jsFiles.push(rel);
 	if (output.path.endsWith(".css")) cssFiles.push(rel);
-	if ((output as { kind?: string }).kind === "entry-point" && output.path.endsWith(".js")) {
+	if (output.kind === "entry-point" && output.path.endsWith(".js")) {
 		clientEntry = rel;
 	}
 }

package/src/core/client/App.svelte

@@ -147,7 +147,10 @@
 		}
 		lastTick = currentTick;
 
-		appState.form = null;
+		// Only a real navigation drops the action result. An invalidation re-run
+		// (same URL, new tick) is how `use:enhance` refreshes the page after a
+		// successful action — clearing here wiped the `form` it had just set.
+		if (navKey !== lastNavKey) appState.form = null;
 		if (navDoneTimer) {
 			clearTimeout(navDoneTimer);
 			navDoneTimer = null;
@@ -457,7 +460,7 @@
 	{#if depth > 0 && layoutComponents.length > 0}
 		{@render renderLayout(0, depth)}
 	{:else}
-		<ErrorComponent {...errorProps ?? {}} />
+		<ErrorComponent {...errorProps ?? {}} {params} />
 	{/if}
 {:else if layoutComponents.length > 0}
 	{@render renderLayout(0, layoutComponents.length)}
@@ -490,7 +493,7 @@
 	{:else}
 		<Layout {data} {params}>
 			{#if ErrorComponent}
-				<ErrorComponent {...errorProps ?? {}} />
+				<ErrorComponent {...errorProps ?? {}} {params} />
 			{:else if PageComponent}
 				<PageComponent bind:this={pageInstance} data={pageData} {params} form={formData} />
 			{:else}

package/src/core/client/page.svelte.ts

@@ -6,16 +6,11 @@
 //
 // Bosia passes `params` as a prop to `+page.svelte` / `+layout.svelte` (see
 // App.svelte), mirroring the modern SvelteKit `$app/state` direction. Route
-// components should destructure `params` from `$props()`. `page.params` still
-// exists as a deprecated, working fallback (reactive, backed by
-// `appState.routeParams`) so legacy code keeps running — it will be removed in
-// 1.0.0.
+// components should destructure `params` from `$props()`. `page.params` was
+// removed in 1.1.0.
 
-import { appState } from "./appState.svelte.ts";
 import { router } from "./router.svelte.ts";
 
-let paramsWarned = false;
-
 class Page {
 	// Real on the server too: the renderer seeds `router.currentRoute`/`.origin`
 	// from the request immediately before each render (see `renderWithPageContext`
@@ -29,21 +24,6 @@ class Page {
 	get pathname() {
 		return this.#url.pathname;
 	}
-
-	/**
-	 * @deprecated Read route params from `$props()` instead:
-	 * `let { params } = $props()` in `+page.svelte` / `+layout.svelte`.
-	 * `page.params` is a temporary fallback and will be removed in 1.0.0.
-	 */
-	get params() {
-		if (process.env.NODE_ENV !== "production" && !paramsWarned) {
-			paramsWarned = true;
-			console.warn(
-				"[bosia] page.params is deprecated — destructure `params` from $props() in your route component. It will be removed in 1.0.0.",
-			);
-		}
-		return appState.routeParams;
-	}
 }
 
 export const page = new Page();

package/src/core/dev.ts

@@ -423,8 +423,8 @@ const devServer = Bun.serve({
 		// the eBPF cgroup filter only permits packets to/from 127.0.0.0/8 + ::1.
 		// "localhost" resolves to both ::1 and 127.0.0.1; bun's fetch() picks IPv6
 		// first, but the inner Bun.serve() listens IPv4-only, so the v6 connect
-		// fails fast and (under bun 1.3) doesn't fall back to v4. Pinning to v4
-		// avoids the failure path entirely.
+		// fails fast and (seen under bun 1.3) doesn't fall back to v4. Pinning to
+		// v4 avoids the failure path entirely, whatever bun's resolver does.
 		target.hostname = "127.0.0.1";
 		target.port = String(APP_PORT);
 

package/src/core/html.ts

@@ -38,6 +38,12 @@ const TW_CSS = `${B}/bosia-tw.css`;
 const FAVICON = `${B}/favicon.svg`;
 const SSE = `${B}/__bosia/sse`;
 
+// The client entry, emitted verbatim — never with a `?v=` buster. Split chunks
+// import it by bare relative URL (Bun 1.4 keeps shared code in the entry), so a
+// query here makes the browser load it twice: two Svelte runtimes, and hydration
+// dies with "reading 'call'". The content-hashed name is already the buster.
+const ENTRY = `${DIST}/${distManifest.entry}`;
+
 /**
  * Handed to the client bundle so its router strips the same prefix the server
  * added. Emitted before the module script, and omitted entirely at the origin
@@ -195,7 +201,7 @@ export function buildHtml(
 		: "";
 
 	const scripts = csr
-		? `${baseScript(nonce)}${envScript}${dataIslands}${sysScript}\n  <script${n} type="module" src="${DIST}/${distManifest.entry}${cacheBust}"></script>`
+		? `${baseScript(nonce)}${envScript}${dataIslands}${sysScript}\n  <script${n} type="module" src="${ENTRY}"></script>`
 		: isDev
 			? `\n  <script${n}>!function r(){var e=new EventSource("${SSE}");e.addEventListener("reload",()=>location.reload());e.onopen=()=>r._ok||(r._ok=1);e.onerror=()=>{e.close();setTimeout(r,2000)}}()</script>`
 			: "";
@@ -264,7 +270,7 @@ export function buildHtmlShellOpen(
 			`\n  ${faviconLine}${twCssLink()}\n` +
 			componentCssLinks() +
 			`  <script${n}>${THEME_INIT_JS}</script>\n` +
-			`  <link rel="modulepreload" href="${DIST}/${distManifest.entry}${cacheBust}">`
+			`  <link rel="modulepreload" href="${ENTRY}">`
 		);
 	}
 
@@ -276,7 +282,7 @@ export function buildHtmlShellOpen(
 		`  ${twCssLink()}\n` +
 		componentCssLinks() +
 		`  <script${n}>${THEME_INIT_JS}</script>\n` +
-		`  <link rel="modulepreload" href="${DIST}/${distManifest.entry}${cacheBust}">`
+		`  <link rel="modulepreload" href="${ENTRY}">`
 	);
 }
 
@@ -401,7 +407,7 @@ export function buildHtmlTail(
 		if (ssrFlag || depsInject) {
 			out += `\n<script${n}>${ssrFlag}${depsInject}</script>`;
 		}
-		out += `\n<script${n} type="module" src="${DIST}/${distManifest.entry}${cacheBust}"></script>`;
+		out += `\n<script${n} type="module" src="${ENTRY}"></script>`;
 	} else if (isDev) {
 		out += `\n<script${n}>!function r(){var e=new EventSource("${SSE}");e.addEventListener("reload",()=>location.reload());e.onopen=()=>r._ok||(r._ok=1);e.onerror=()=>{e.close();setTimeout(r,2000)}}()</script>`;
 	}

package/src/core/plugins/inspector/index.ts

@@ -2,7 +2,7 @@ import { spawn } from "node:child_process";
 import { randomUUID } from "node:crypto";
 import { createInspectorBunPlugin } from "./bun-plugin.ts";
 import { getOverlayScript } from "./overlay.ts";
-import { resolveFrame, resolveStack } from "./sourcemap.ts";
+import { parseTopFrame, resolveFrame, resolveStack } from "./sourcemap.ts";
 import type { BosiaPlugin } from "../../types/plugin.ts";
 
 export interface InspectorOptions {
@@ -34,18 +34,6 @@ function buildEditorArgs(editor: string, file: string, line: number, col: number
 	return ["-g", `${file}:${line}:${col}`];
 }
 
-// Parse the top frame out of a stack trace string. Best-effort.
-function parseTopFrame(
-	stack: string | undefined,
-): { file: string; line: number; col: number } | null {
-	if (!stack) return null;
-	const m =
-		/\((https?:\/\/[^)]+|\/[^)]+):(\d+):(\d+)\)/.exec(stack) ||
-		/at\s+(\S+):(\d+):(\d+)/.exec(stack) ||
-		/@(\S+):(\d+):(\d+)/.exec(stack);
-	return m ? { file: m[1], line: Number(m[2]), col: Number(m[3]) } : null;
-}
-
 // Module-scoped state for the error feature. Initialised lazily inside the
 // plugin so importing this module doesn't attach process-wide listeners.
 let processListenersInstalled = false;
@@ -293,6 +281,9 @@ export function inspector(options: InspectorOptions = {}): BosiaPlugin | false {
 									return;
 								}
 								flushReplay(ctrl);
+								// Under the app server's 10s default idle timeout, or Bun drops the
+								// stream (ECONNRESET) and EventSource reconnects. Still breaks if
+								// IDLE_TIMEOUT < 5; use server.timeout(req, 0) if that ever matters.
 								const ping = setInterval(() => {
 									try {
 										ctrl.enqueue(encode(":ping\n\n"));
@@ -300,7 +291,7 @@ export function inspector(options: InspectorOptions = {}): BosiaPlugin | false {
 										clearInterval(ping);
 										sseClients.delete(ctrl);
 									}
-								}, 25_000);
+								}, 5_000);
 
 								request.signal.addEventListener("abort", () => {
 									clearInterval(ping);

package/src/core/plugins/inspector/overlay.ts

@@ -1,4 +1,5 @@
 import { safeJsonStringify } from "../../html.ts";
+import { FRAME_RE } from "./sourcemap.ts";
 
 export interface OverlayConfig {
 	aiEndpoint?: string;
@@ -209,12 +210,10 @@ if(ERR_ENABLED){
   function uid(){return "c-"+Math.random().toString(36).slice(2)+Date.now().toString(36)}
   function escapeHtml(s){return String(s==null?"":s).replace(/[&<>"']/g,function(c){return{"&":"&amp;","<":"&lt;",">":"&gt;","\\"":"&quot;","'":"&#39;"}[c]})}
 
+  var FRAME_RE=new RegExp(${JSON.stringify(FRAME_RE.source)});
   function parseTopFrame(stack){
-    if(!stack)return null;
-    var m=/\\((https?:\\/\\/[^)]+|\\/[^)]+):(\\d+):(\\d+)\\)/.exec(stack)
-        ||/at\\s+(\\S+):(\\d+):(\\d+)/.exec(stack)
-        ||/@(\\S+):(\\d+):(\\d+)/.exec(stack);
-    return m?{file:m[1],line:+m[2],col:+m[3]}:null;
+    var m=stack?FRAME_RE.exec(stack):null;
+    return m?{file:m[2],line:+m[3],col:+m[4]}:null;
   }
 
   function trackInteraction(e){
@@ -255,7 +254,7 @@ if(ERR_ENABLED){
       var locStr=er.file?(er.file+(er.line?":"+er.line:"")):er.source;
       rows+='<div data-row="'+er.id+'" style="padding:10px 12px;border-bottom:1px solid #f4f4f5">'
         +'<div style="font:11px ui-monospace,monospace;color:#71717a;margin-bottom:4px">['+escapeHtml(er.source)+'] '+escapeHtml(locStr)+'</div>'
-        +'<div style="margin-bottom:6px;font-weight:500;word-break:break-word">'+escapeHtml(er.message)+'</div>'
+        +'<div style="margin-bottom:6px;font-weight:500;word-break:break-word">'+escapeHtml(er.message)+(er.count>1?' <span style="color:#71717a;font-weight:400">&times;'+er.count+'</span>':"")+'</div>'
         +(er.stack?'<details><summary style="cursor:pointer;color:#71717a;font-size:11px">Stack</summary><pre style="margin:6px 0 0;padding:8px;background:#f4f4f5;border-radius:4px;font:11px/1.4 ui-monospace,monospace;white-space:pre-wrap;overflow:auto;max-height:200px">'+escapeHtml(er.stack)+'</pre></details>':"")
         +'<div style="margin-top:8px;display:flex;gap:6px;justify-content:flex-end">'
         +(AI?'<button data-send="'+er.id+'" style="padding:4px 10px;border:0;background:#111;color:#fff;border-radius:4px;cursor:pointer;font-size:12px">Send to AI</button>':"")
@@ -304,7 +303,17 @@ if(ERR_ENABLED){
     var id=e.id||uid();
     if(seenIds[id])return;
     seenIds[id]=true;
+    // Same key as the server's dedup (source, message, top frame). Repeats
+    // bump a counter on the existing row instead of adding a new one.
+    var key=(e.source||"unknown")+"|"+(e.message||"")+"|"+(e.file||"")+":"+(e.line||"");
+    for(var i=0;i<errors.length;i++)if(errors[i].key===key){
+      errors[i].count++;
+      errors[i].ts=e.ts||Date.now();
+      renderBadge();
+      return;
+    }
     var entry={
+      key:key,count:1,
       id:id,
       ts:e.ts||Date.now(),
       source:e.source||"unknown",

package/src/core/plugins/inspector/sourcemap.ts

@@ -123,15 +123,24 @@ function relToCwd(abs: string): string {
 	return rel && !rel.startsWith("..") && !isAbsolute(rel) ? toPosix(rel) : abs;
 }
 
-// Rewrite frames in stack strings: "(url:L:C)", "at url:L:C", "@url:L:C".
-// Lazy match on the file body so URLs with ports (`http://host:9000/...`) keep
-// the port as part of the file rather than being chopped at the first `:`.
+// One stack frame: "(file:L:C)", "at file:L:C", "@file:L:C". The file body is
+// lazy up to the first ":L:C", so ")" in route groups like `(public)` and the
+// port in `http://host:9000/...` stay inside the file. Groups: lead, file, L, C, tail.
+// The browser overlay reuses this source too (see overlay.ts).
+export const FRAME_RE = /(\(|\bat\s+|@)((?:https?:\/\/|\/|[A-Za-z]:[\\/])[^\n]*?):(\d+):(\d+)(\)?)/;
+
+// Top frame of a stack trace string. Best-effort.
+export function parseTopFrame(
+	stack: string | undefined,
+): { file: string; line: number; col: number } | null {
+	const m = stack ? FRAME_RE.exec(stack) : null;
+	return m ? { file: m[2], line: Number(m[3]), col: Number(m[4]) } : null;
+}
+
+// Rewrite every frame in a stack string to its original source position.
 export function resolveStack(stack: string): string {
-	return stack.replace(
-		/(\(|at\s+|@)((?:https?:\/\/|\/)[^\s)]+?):(\d+):(\d+)(\)?)/g,
-		(_m, lead, file, l, c, tail) => {
-			const r = resolveFrame(file, Number(l), Number(c));
-			return r ? `${lead}${r.file}:${r.line}:${r.col}${tail}` : _m;
-		},
-	);
+	return stack.replace(new RegExp(FRAME_RE.source, "g"), (_m, lead, file, l, c, tail) => {
+		const r = resolveFrame(file, Number(l), Number(c));
+		return r ? `${lead}${r.file}:${r.line}:${r.col}${tail}` : _m;
+	});
 }

package/src/core/renderer.ts

@@ -23,7 +23,6 @@ import { HttpError, Redirect, isHttpError, isRedirect } from "./errors.ts";
 import { pickErrorPage, type ErrorOrigin } from "./errorMatch.ts";
 import App from "./client/App.svelte";
 import { router } from "./client/router.svelte.ts";
-import { appState } from "./client/appState.svelte.ts";
 import { withBase } from "./basePath.ts";
 import { currentBase } from "./appBase.ts";
 import {
@@ -92,15 +91,9 @@ const enc = new TextEncoder();
 // `render`'s own signature is conditional on the component's prop type, so it
 // collapses to `never` behind a generic wrapper — hence `any` on both, matching
 // how the call sites already type `pageMod.default` / `layoutMods`.
-function renderWithPageContext(
-	component: any,
-	options: { props?: Record<string, any> },
-	url: URL,
-	params: Record<string, string> = {},
-) {
+function renderWithPageContext(component: any, options: { props?: Record<string, any> }, url: URL) {
 	router.origin = url.origin;
 	router.currentRoute = withBase(currentBase(), url.pathname) + url.search + url.hash;
-	appState.routeParams = params;
 	return render(component, options as any);
 }
 
@@ -805,7 +798,6 @@ export async function renderSSRStream(
 					},
 				},
 				url,
-				params,
 			));
 		} catch (err) {
 			if (isDev) console.error("SSR render error:", err);
@@ -1056,7 +1048,6 @@ export async function renderPageWithFormData(
 			},
 		},
 		url,
-		params,
 	);
 
 	const html = buildHtml(
@@ -1117,10 +1108,9 @@ export async function renderErrorPage(
 	};
 	const bodyEndExtras = await pluginRenderFragments("bodyEnd", renderCtx);
 
-	// The failing route's own params, so a nested +error.svelte under
-	// /blog/[slug] still sees its `slug`. A 404 matches nothing and yields {},
-	// which is also what has to be seeded rather than left holding the previous
-	// request's values.
+	// The failing route's own params, so +error.svelte (and the layouts wrapping
+	// a nested one) under /blog/[slug] get `params.slug`. A 404 matches nothing
+	// and yields {}.
 	const errorParams = findMatch(serverRoutes, url.pathname)?.params ?? {};
 
 	// 1. Nested boundary
@@ -1150,10 +1140,10 @@ export async function renderErrorPage(
 							ssrErrorComponent: errorMod.default,
 							ssrErrorProps: { error: { status, message } },
 							ssrErrorDepth: K,
+							ssrPageData: { params: errorParams },
 						},
 					},
 					url,
-					errorParams,
 				);
 				// csr=false: no client hydration on the error page itself.
 				const html = buildHtml(
@@ -1191,9 +1181,8 @@ export async function renderErrorPage(
 			// expects `error` as a direct prop: `let { error } = $props()`.
 			const { body, head } = renderWithPageContext(
 				mod.default,
-				{ props: { error: { status, message } } },
+				{ props: { error: { status, message }, params: errorParams } },
 				url,
-				errorParams,
 			);
 			const html = buildHtml(
 				body,

package/src/core/routeTypes.ts

@@ -123,7 +123,9 @@ export function generateRouteTypes(manifest: RouteManifest): void {
 		if (info.hasErrorPage) {
 			lines.push(``);
 			lines.push(`export type PageError = { status: number; message: string };`);
-			lines.push(`export type ErrorProps = { error: PageError };`);
+			lines.push(
+				`export type ErrorProps = { error: PageError; params: Params & Record<string, string | undefined> };`,
+			);
 		}
 
 		// ActionData — union of all action return types, unwrapping ActionFailure

package/templates/default/package.json

@@ -2,6 +2,9 @@
 	"name": "{{PROJECT_NAME}}",
 	"private": true,
 	"type": "module",
+	"engines": {
+		"bun": ">=1.4"
+	},
 	"scripts": {
 		"dev": "bosia dev",
 		"build": "bosia build",

package/templates/demo/package.json

@@ -2,6 +2,9 @@
 	"name": "{{PROJECT_NAME}}",
 	"private": true,
 	"type": "module",
+	"engines": {
+		"bun": ">=1.4"
+	},
 	"scripts": {
 		"dev": "bosia dev",
 		"build": "bosia build",

package/templates/shop/package.json

@@ -2,6 +2,9 @@
 	"name": "{{PROJECT_NAME}}",
 	"private": true,
 	"type": "module",
+	"engines": {
+		"bun": ">=1.4"
+	},
 	"scripts": {
 		"dev": "bosia dev",
 		"build": "bosia build",

package/templates/store/package.json

@@ -2,6 +2,9 @@
 	"name": "{{PROJECT_NAME}}",
 	"private": true,
 	"type": "module",
+	"engines": {
+		"bun": ">=1.4"
+	},
 	"scripts": {
 		"dev": "bosia dev",
 		"build": "bosia build",