create-fluxstack 1.17.0 → 1.18.0

package/app/server/live/LiveRoomChat.ts

@@ -38,20 +38,28 @@ export class LiveRoomChat extends LiveComponent<typeof LiveRoomChat.defaultState
     // Load existing custom rooms from directory state
     this.setState({ customRooms: dir.state.rooms || [] })
 
-    // Listen for new rooms being added
-    const unsubAdd = dir.on('room:added', (entry: DirectoryEntry) => {
-      const current = this.state.customRooms.filter(r => r.id !== entry.id)
-      this.setState({ customRooms: [...current, entry] })
-    })
-
-    // Listen for rooms being removed
-    const unsubRemove = dir.on('room:removed', (data: { id: string }) => {
-      this.setState({
-        customRooms: this.state.customRooms.filter(r => r.id !== data.id)
-      })
-    })
-
-    this.directoryUnsubs = [unsubAdd, unsubRemove]
+    // Listen for directory events with safe cleanup on error
+    const unsubs: (() => void)[] = []
+    try {
+      // Listen for new rooms being added
+      unsubs.push(dir.on('room:added', (entry: DirectoryEntry) => {
+        const current = this.state.customRooms.filter(r => r.id !== entry.id)
+        this.setState({ customRooms: [...current, entry] })
+      }))
+
+      // Listen for rooms being removed
+      unsubs.push(dir.on('room:removed', (data: { id: string }) => {
+        this.setState({
+          customRooms: this.state.customRooms.filter(r => r.id !== data.id)
+        })
+      }))
+
+      this.directoryUnsubs = unsubs
+    } catch (error) {
+      // Cleanup any listeners that were successfully registered
+      unsubs.forEach(fn => fn())
+      throw error
+    }
   }
 
   async createRoom(payload: { roomId: string; roomName: string; password?: string }) {
@@ -83,14 +91,21 @@ export class LiveRoomChat extends LiveComponent<typeof LiveRoomChat.defaultState
       createdBy: this.state.username || 'Anonymous'
     })
 
-    // Listen for messages
-    const unsub = room.on('chat:message', (msg: ChatMessage) => {
-      const msgs = this.state.messages[roomId] || []
-      this.setState({
-        messages: { ...this.state.messages, [roomId]: [...msgs, msg].slice(-100) }
+    // Listen for messages with safe cleanup
+    let unsub: (() => void) | undefined
+    try {
+      unsub = room.on('chat:message', (msg: ChatMessage) => {
+        const msgs = this.state.messages[roomId] || []
+        this.setState({
+          messages: { ...this.state.messages, [roomId]: [...msgs, msg].slice(-100) }
+        })
       })
-    })
-    this.roomListeners.set(roomId, [unsub])
+      this.roomListeners.set(roomId, [unsub])
+    } catch (error) {
+      unsub?.()
+      room.leave()
+      throw error
+    }
 
     this.setState({
       activeRoom: roomId,
@@ -118,14 +133,21 @@ export class LiveRoomChat extends LiveComponent<typeof LiveRoomChat.defaultState
       return { success: false, error: 'Senha incorreta' }
     }
 
-    // Listen for chat messages from other members
-    const unsub = room.on('chat:message', (msg: ChatMessage) => {
-      const msgs = this.state.messages[roomId] || []
-      this.setState({
-        messages: { ...this.state.messages, [roomId]: [...msgs, msg].slice(-100) }
+    // Listen for chat messages from other members with safe cleanup
+    let unsub: (() => void) | undefined
+    try {
+      unsub = room.on('chat:message', (msg: ChatMessage) => {
+        const msgs = this.state.messages[roomId] || []
+        this.setState({
+          messages: { ...this.state.messages, [roomId]: [...msgs, msg].slice(-100) }
+        })
       })
-    })
-    this.roomListeners.set(roomId, [unsub])
+      this.roomListeners.set(roomId, [unsub])
+    } catch (error) {
+      unsub?.()
+      room.leave()
+      throw error
+    }
 
     // Update component state — load existing messages from room state
     this.setState({

package/app/server/live/LiveUpload.ts

@@ -21,9 +21,23 @@ export class LiveUpload extends LiveComponent<typeof LiveUpload.defaultState> {
   }
 
   async startUpload(payload: { fileName: string; fileSize: number; fileType: string }) {
-    const normalized = payload.fileName.toLowerCase()
-    if (normalized.includes('..') || normalized.includes('/') || normalized.includes('\\')) {
-      throw new Error('Invalid file name')
+    const fileName = payload.fileName
+
+    // Validate filename length
+    if (!fileName || fileName.length > 255) {
+      throw new Error('Invalid file name: must be 1-255 characters')
+    }
+
+    // Block path traversal, null bytes, and control characters
+    if (/[\x00-\x1f]/.test(fileName) || fileName.includes('..') || fileName.includes('/') || fileName.includes('\\')) {
+      throw new Error('Invalid file name: contains forbidden characters')
+    }
+
+    // Block Windows reserved names
+    const baseName = fileName.split('.')[0].toUpperCase()
+    const reserved = ['CON', 'PRN', 'AUX', 'NUL', 'COM1', 'COM2', 'COM3', 'COM4', 'LPT1', 'LPT2', 'LPT3']
+    if (reserved.includes(baseName)) {
+      throw new Error('Invalid file name: reserved name')
     }
 
     // All file types allowed - no extension blocking

package/app/server/live/auto-generated-components.ts

@@ -0,0 +1,26 @@
+// Auto-generated Live Components Registration
+// Generated by @fluxstack/live — DO NOT EDIT MANUALLY
+// Generated at: 2026-04-09T02:31:46.153Z
+
+import { LiveAdminPanel } from "./LiveAdminPanel"
+import { LiveCounter } from "./LiveCounter"
+import { LiveForm } from "./LiveForm"
+import { LiveLocalCounter } from "./LiveLocalCounter"
+import { LivePingPong } from "./LivePingPong"
+import { LiveProtectedChat } from "./LiveProtectedChat"
+import { LiveRoomChat } from "./LiveRoomChat"
+import { LiveSharedCounter } from "./LiveSharedCounter"
+import { LiveUpload } from "./LiveUpload"
+
+// Component classes array for LiveServer({ components }) option
+export const liveComponentClasses = [
+  LiveAdminPanel,
+  LiveCounter,
+  LiveForm,
+  LiveLocalCounter,
+  LivePingPong,
+  LiveProtectedChat,
+  LiveRoomChat,
+  LiveSharedCounter,
+  LiveUpload,
+]

package/app/server/live/rooms/ChatRoom.ts

@@ -2,6 +2,7 @@
 
 import { LiveRoom } from '@fluxstack/live'
 import type { RoomJoinContext, RoomLeaveContext } from '@fluxstack/live'
+import { createHash, timingSafeEqual } from 'crypto'
 
 export interface ChatMessage {
   id: string
@@ -32,16 +33,30 @@ export class ChatRoom extends LiveRoom<ChatState, ChatMeta, ChatEvents> {
   static defaultMeta: ChatMeta = { password: null, createdBy: null }
   static $options = { maxMembers: 100 }
 
+  /** Hash a password using SHA-256. */
+  private static hashPassword(password: string): string {
+    return createHash('sha256').update(password).digest('hex')
+  }
+
+  /** Constant-time comparison of two hex strings. */
+  private static safeCompare(a: string, b: string): boolean {
+    const bufA = Buffer.from(a, 'hex')
+    const bufB = Buffer.from(b, 'hex')
+    if (bufA.length !== bufB.length) return false
+    return timingSafeEqual(bufA, bufB)
+  }
+
   /** Set a password for this room. Pass null to remove. */
   setPassword(password: string | null) {
-    this.meta.password = password
+    this.meta.password = password ? ChatRoom.hashPassword(password) : null
     this.setState({ isPrivate: password !== null })
   }
 
   onJoin(ctx: RoomJoinContext) {
     // Validate password if room is protected
     if (this.meta.password) {
-      if (ctx.payload?.password !== this.meta.password) {
+      const provided = ctx.payload?.password
+      if (!provided || !ChatRoom.safeCompare(ChatRoom.hashPassword(provided), this.meta.password)) {
         return false // Rejected — wrong or missing password
       }
     }

package/app/server/routes/auth.routes.ts

@@ -16,6 +16,8 @@ import {
   guest,
   buildRequestContext,
 } from '@server/auth'
+import type { Guard, Authenticatable } from '@server/auth'
+import { classifyAuthError } from '@server/auth/errors'
 import { authConfig } from '@config/system/auth.config'
 
 // ===== Schemas TypeBox (para validação + Swagger) =====
@@ -87,9 +89,8 @@ export const authRoutes = new Elysia({
       // Solução: usar o InMemoryProvider diretamente ou o guard.
       // Por segurança, vamos usar attempt após criar o user.
 
-      // Buscar provider do auth manager config
-      const providers = (authManager as any).providerInstances as Map<string, any>
-      const provider = providers.get(providerName)
+      // Buscar provider via public API
+      const provider = authManager.getProvider(providerName)
 
       if (!provider) {
         set.status = 500
@@ -116,14 +117,15 @@ export const authRoutes = new Elysia({
       set.status = 201
       return {
         success: true as const,
-        user: user.toJSON() as any,
+        user: user.toJSON(),
       }
-    } catch (error: any) {
-      set.status = 422
+    } catch (error: unknown) {
+      const classified = classifyAuthError(error)
+      set.status = classified.status as 422 | 500
       return {
         success: false as const,
-        error: 'RegistrationFailed',
-        message: error.message ?? 'Failed to register user',
+        error: classified.error,
+        message: classified.message,
       }
     }
   }, {
@@ -187,26 +189,32 @@ export const authRoutes = new Elysia({
       await rateLimiter.clear(throttleKey)
 
       // Montar response
-      const response: any = {
+      const response: {
+        success: true
+        user: ReturnType<typeof user.toJSON>
+        token?: string
+      } = {
         success: true as const,
         user: user.toJSON(),
       }
 
       // Se for token guard, incluir token na response
       if ('getLastGeneratedToken' in guard) {
-        const token = (guard as any).getLastGeneratedToken()
+        const tokenGuard = guard as Guard & { getLastGeneratedToken(): string | null }
+        const token = tokenGuard.getLastGeneratedToken()
         if (token) {
           response.token = token
         }
       }
 
       return response
-    } catch (error: any) {
-      set.status = 500
+    } catch (error: unknown) {
+      const classified = classifyAuthError(error)
+      set.status = classified.status as 500
       return {
         success: false as const,
-        error: 'LoginFailed',
-        message: error.message ?? 'An unexpected error occurred.',
+        error: classified.error,
+        message: classified.message,
       }
     }
   }, {
@@ -226,7 +234,7 @@ export const authRoutes = new Elysia({
   // ───── Logout ─────
   .use(auth())
   .post('/logout', async (ctx) => {
-    const { auth: guard } = ctx as any
+    const guard = (ctx as unknown as { auth: Guard | null }).auth
 
     try {
       if (guard) {
@@ -237,12 +245,13 @@ export const authRoutes = new Elysia({
         success: true as const,
         message: 'Logged out successfully.',
       }
-    } catch (error: any) {
-      (ctx as any).set.status = 500
+    } catch (error: unknown) {
+      const classified = classifyAuthError(error)
+      ctx.set.status = classified.status as 500
       return {
         success: false as const,
-        error: 'LogoutFailed',
-        message: error.message ?? 'Failed to logout.',
+        error: classified.error,
+        message: classified.message,
       }
     }
   }, {
@@ -261,7 +270,7 @@ export const authRoutes = new Elysia({
 
   // ───── Me (current user) ─────
   .get('/me', async (ctx) => {
-    const { user } = ctx as any
+    const user = (ctx as unknown as { user: Authenticatable }).user
 
     return {
       success: true as const,

package/app/server/routes/index.ts

@@ -2,6 +2,7 @@ import { Elysia, t } from "elysia"
 import { usersRoutes } from "./users.routes"
 import { roomRoutes } from "./room.routes"
 import { authRoutes } from "./auth.routes"
+import { pluginClientHooks } from "@core/server/plugin-client-hooks"
 
 export const apiRoutes = new Elysia({ prefix: "/api" })
   .get("/", () => ({ message: "🔥 Hot Reload funcionando! FluxStack API v1.4.0 ⚡" }), {
@@ -34,6 +35,14 @@ export const apiRoutes = new Elysia({ prefix: "/api" })
       description: 'Returns the current health status of the API server'
     }
   })
+  // Plugin client hooks endpoint
+  .get("/__plugins/client-hooks", () => pluginClientHooks.getSignedResponse(), {
+    detail: {
+      tags: ['Plugins'],
+      summary: 'Get plugin client hooks',
+      description: 'Returns JavaScript code registered by server-side plugins to be executed on the client'
+    }
+  })
   // Register routes
   .use(authRoutes)
   .use(usersRoutes)

package/app/server/routes/room.routes.ts

@@ -4,7 +4,7 @@
 // enviem mensagens para salas de chat via API REST
 
 import { Elysia, t } from 'elysia'
-import { liveRoomManager, roomEvents } from '@core/server/live'
+import { liveServer } from '@core/server/live'
 
 export const roomRoutes = new Elysia({ prefix: '/rooms' })
 
@@ -22,9 +22,9 @@ export const roomRoutes = new Elysia({ prefix: '/rooms' })
 
     // Emitir evento para a sala
     // Isso vai:
-    // 1. Notificar handlers server-side via roomEvents
+    // 1. Notificar handlers server-side via liveServer!.roomEvents
     // 2. Broadcast via WebSocket para frontends
-    const notified = liveRoomManager.emitToRoom(roomId, 'message:new', message)
+    const notified = liveServer!.roomManager.emitToRoom(roomId, 'message:new', message)
 
     return {
       success: true,
@@ -63,7 +63,7 @@ export const roomRoutes = new Elysia({ prefix: '/rooms' })
     const { roomId } = params
     const { event, data } = body
 
-    const notified = liveRoomManager.emitToRoom(roomId, event, data)
+    const notified = liveServer!.roomManager.emitToRoom(roomId, event, data)
 
     return {
       success: true,
@@ -94,8 +94,8 @@ export const roomRoutes = new Elysia({ prefix: '/rooms' })
 
   // Obter estatísticas das salas
   .get('/stats', () => {
-    const roomStats = liveRoomManager.getStats()
-    const eventStats = roomEvents.getStats()
+    const roomStats = liveServer!.roomManager.getStats()
+    const eventStats = liveServer!.roomEvents.getStats()
 
     return {
       success: true,

package/config/index.ts

@@ -47,7 +47,7 @@ export { sessionConfig } from './system/session.config'
 export { fluxStackConfig, config as fluxConfig, type FluxStackConfig } from './fluxstack.config'
 
 // Plugin configs (re-exported for convenience)
-export { cryptoAuthConfig } from '../plugins/crypto-auth/config'
+export { cryptoAuthConfig } from '@fluxstack/plugin-crypto-auth/config'
 
 // ============================================================================
 // 📝 TYPE EXPORTS
@@ -86,7 +86,7 @@ export type { AuthConfig } from './system/auth.config'
 export type { SessionConfig } from './system/session.config'
 
 // Plugin types
-export type { CryptoAuthConfig } from '../plugins/crypto-auth/config'
+export type { CryptoAuthConfig } from '@fluxstack/plugin-crypto-auth/config'
 
 // ============================================================================
 // 🎯 UNIFIED CONFIG OBJECT
@@ -105,7 +105,7 @@ import { databaseConfig } from './system/database.config'
 import { servicesConfig } from './system/services.config'
 import { authConfig } from './system/auth.config'
 import { sessionConfig } from './system/session.config'
-import { cryptoAuthConfig } from '../plugins/crypto-auth/config'
+import { cryptoAuthConfig } from '@fluxstack/plugin-crypto-auth/config'
 
 /**
  * All configs in one object

package/config/system/app.config.ts

@@ -3,7 +3,7 @@
  * Core application settings and metadata
  */
 
-import { defineConfig, config } from '@core/utils/config-schema'
+import { defineConfig, config } from '@fluxstack/config'
 
 /**
  * App configuration schema

package/config/system/auth.config.ts

@@ -8,7 +8,7 @@
  * Providers: ONDE buscar usuários (memory, database...)
  */
 
-import { defineConfig, defineNestedConfig, config } from '@core/utils/config-schema'
+import { defineConfig, defineNestedConfig, config } from '@fluxstack/config'
 
 // ===== Defaults =====
 

package/config/system/build.config.ts

@@ -3,16 +3,18 @@
  * Server build and optimization settings
  */
 
-import { defineConfig, defineNestedConfig, config } from '@core/utils/config-schema'
-import { helpers } from '@core/utils/env'
+import { defineConfig, defineNestedConfig, config } from '@fluxstack/config'
+
+const isProduction = process.env.NODE_ENV === 'production'
+const isDevelopment = process.env.NODE_ENV !== 'production'
 
 /**
  * Build optimization schema
  */
 const optimizationSchema = {
-  minify: config.boolean('BUILD_MINIFY', helpers.isProduction()),
+  minify: config.boolean('BUILD_MINIFY', isProduction),
   treeshake: config.boolean('BUILD_TREESHAKE', true),
-  compress: config.boolean('BUILD_COMPRESS', helpers.isProduction()),
+  compress: config.boolean('BUILD_COMPRESS', isProduction),
   splitChunks: config.boolean('BUILD_SPLIT_CHUNKS', true),
   bundleAnalyzer: config.boolean('BUILD_BUNDLE_ANALYZER', false),
   removeUnusedCSS: config.boolean('BUILD_REMOVE_UNUSED_CSS', false),
@@ -25,9 +27,9 @@ const optimizationSchema = {
 const buildSchema = {
   target: config.enum('BUILD_TARGET', ['bun', 'node', 'docker'] as const, 'bun', true),
   outDir: config.string('BUILD_OUT_DIR', 'dist', true),
-  sourceMaps: config.boolean('BUILD_SOURCE_MAPS', helpers.isDevelopment()),
+  sourceMaps: config.boolean('BUILD_SOURCE_MAPS', isDevelopment),
   clean: config.boolean('BUILD_CLEAN', true),
-  mode: config.enum('BUILD_MODE', ['development', 'production'] as const, helpers.isProduction() ? 'production' : 'development'),
+  mode: config.enum('BUILD_MODE', ['development', 'production'] as const, isProduction ? 'production' : 'development'),
   external: config.array('BUILD_EXTERNAL', []),
   optimize: config.boolean('BUILD_OPTIMIZE', true)
 } as const

package/config/system/client.config.ts

@@ -3,8 +3,10 @@
  * Declarative client, proxy and Vite dev server configuration
  */
 
-import { defineConfig, defineNestedConfig, config } from '../../core/utils/config-schema'
-import { env, helpers } from '../../core/utils/env'
+import { defineConfig, defineNestedConfig, config } from '@fluxstack/config'
+
+const isProduction = process.env.NODE_ENV === 'production'
+const isDevelopment = process.env.NODE_ENV !== 'production'
 
 /**
  * Vite Dev Server Configuration
@@ -31,9 +33,9 @@ const viteSchema = {
 const buildSchema = {
   outDir: config.string('CLIENT_OUTDIR', 'dist/client'),
 
-  sourceMaps: config.boolean('CLIENT_SOURCEMAPS', helpers.isDevelopment()),
+  sourceMaps: config.boolean('CLIENT_SOURCEMAPS', isDevelopment),
 
-  minify: config.boolean('CLIENT_MINIFY', helpers.isProduction()),
+  minify: config.boolean('CLIENT_MINIFY', isProduction),
 
   target: config.string('CLIENT_TARGET', 'esnext'),
 

package/config/system/database.config.ts

@@ -3,7 +3,7 @@
  * Optional database settings for backward compatibility
  */
 
-import { defineConfig, config } from '@core/utils/config-schema'
+import { defineConfig, config } from '@fluxstack/config'
 
 export const databaseConfig = defineConfig({
   url: config.string('DATABASE_URL', ''),

package/config/system/logger.config.ts

@@ -3,7 +3,7 @@
  * Declarative logger config using FluxStack config system
  */
 
-import { defineConfig, config } from '@core/utils/config-schema'
+import { defineConfig, config } from '@fluxstack/config'
 
 export const loggerConfig = defineConfig({
   // Log level

package/config/system/monitoring.config.ts

@@ -3,8 +3,10 @@
  * Declarative monitoring, metrics and profiling configuration
  */
 
-import { defineConfig, defineNestedConfig, config } from '@core/utils/config-schema'
-import { helpers } from '@core/utils/env'
+import { defineConfig, defineNestedConfig, config } from '@fluxstack/config'
+
+const isProduction = process.env.NODE_ENV === 'production'
+const isDevelopment = process.env.NODE_ENV !== 'production'
 
 /**
  * Metrics Configuration Schema
@@ -31,7 +33,7 @@ const metricsSchema = {
   customMetrics: config.boolean('CUSTOM_METRICS', false),
 
   // Metric exporters
-  exportToConsole: config.boolean('METRICS_EXPORT_CONSOLE', helpers.isDevelopment()),
+  exportToConsole: config.boolean('METRICS_EXPORT_CONSOLE', isDevelopment),
 
   exportToFile: config.boolean('METRICS_EXPORT_FILE', false),
 
@@ -54,7 +56,7 @@ const profilingSchema = {
   sampleRate: {
     type: 'number' as const,
     env: 'PROFILING_SAMPLE_RATE',
-    default: helpers.isProduction() ? 0.01 : 0.1,
+    default: isProduction ? 0.01 : 0.1,
     validate: (value: number) => {
       if (value < 0 || value > 1) {
         return 'Sample rate must be between 0 and 1'

package/config/system/plugins.config.ts

@@ -3,7 +3,7 @@
  * Declarative plugin management configuration
  */
 
-import { defineConfig, config } from '@core/utils/config-schema'
+import { defineConfig, config } from '@fluxstack/config'
 import { FLUXSTACK_VERSION } from '@core/utils/version'
 
 const defaultPluginConfigs = {

package/config/system/runtime.config.ts

@@ -3,7 +3,7 @@
  * Configs that can be reloaded without server restart
  */
 
-import { defineReactiveConfig, config } from '@core/utils/config-schema'
+import { defineReactiveConfig, config } from '@fluxstack/config'
 
 /**
  * Runtime app configuration

package/config/system/server.config.ts

@@ -3,7 +3,7 @@
  * Server-specific settings (port, host, CORS, middleware)
  */
 
-import { defineConfig, defineNestedConfig, config } from '@core/utils/config-schema'
+import { defineConfig, defineNestedConfig, config } from '@fluxstack/config'
 
 /**
  * CORS configuration schema

package/config/system/services.config.ts

@@ -3,7 +3,7 @@
  * Optional service settings (email, JWT, storage, redis) for compatibility
  */
 
-import { defineNestedConfig, config } from '@core/utils/config-schema'
+import { defineNestedConfig, config } from '@fluxstack/config'
 
 const emailSchema = {
   host: config.string('MAIL_HOST', 'smtp.example.com'),

package/config/system/session.config.ts

@@ -5,7 +5,7 @@
  * Inspirado no config/session.php do Laravel.
  */
 
-import { defineConfig, config } from '@core/utils/config-schema'
+import { defineConfig, config } from '@fluxstack/config'
 
 const sessionConfigSchema = {
   /** Driver de sessão (memory = processo, extensível para redis, database) */
@@ -16,8 +16,8 @@ const sessionConfigSchema = {
   cookieName: config.string('SESSION_COOKIE', 'fluxstack_session'),
   /** Cookie httpOnly (default: true) */
   httpOnly: config.boolean('SESSION_HTTP_ONLY', true),
-  /** Cookie secure - true em produção (default: false) */
-  secure: config.boolean('SESSION_SECURE', false),
+  /** Cookie secure - auto-detects production (default: true in production, false in dev) */
+  secure: config.boolean('SESSION_SECURE', process.env.NODE_ENV === 'production'),
   /** Cookie sameSite */
   sameSite: config.enum('SESSION_SAME_SITE', ['strict', 'lax', 'none'] as const, 'lax'),
   /** Cookie path */

package/config/system/system.config.ts

@@ -3,7 +3,7 @@
  * System information and environment variables
  */
 
-import { defineConfig, config } from '@core/utils/config-schema'
+import { defineConfig, config } from '@fluxstack/config'
 
 /**
  * System environment variables config

package/core/build/vite-plugins.ts

@@ -11,7 +11,8 @@ import { resolve } from 'path'
 import tsconfigPaths from 'vite-tsconfig-paths'
 import checker from 'vite-plugin-checker'
 import { liveStripPlugin } from '@fluxstack/live/build'
-import { helpers } from '../utils/env'
+import { env } from '@fluxstack/config'
+const isDevelopment = env.get('NODE_ENV', 'development') === 'development'
 
 export function fluxstackVitePlugins(): Plugin[] {
   return [
@@ -20,7 +21,7 @@ export function fluxstackVitePlugins(): Plugin[] {
       projects: [resolve(import.meta.dirname, '..', '..', 'tsconfig.json')]
     }),
     // Only run type checker in development (saves ~5+ minutes in Docker builds)
-    helpers.isDevelopment() && checker({
+    isDevelopment && checker({
       typescript: true,
       overlay: true
     }),

package/core/cli/generators/plugin.ts

@@ -111,7 +111,7 @@ export class PluginGenerator implements Generator {
  * Declarative config using FluxStack config system
  */
 
-import { defineConfig, config } from '@core/utils/config-schema'
+import { defineConfig, config } from '@fluxstack/config'
 
 const {{camelName}}ConfigSchema = {
   // Enable/disable plugin