houdini 2.0.0-next.9 → 2.0.1

package/build/package.json

@@ -0,0 +1,212 @@
+{
+    "name": "houdini",
+    "version": "2.0.1",
+    "description": "The disappearing GraphQL clients",
+    "keywords": [
+        "typescript",
+        "graphql",
+        "graphql-client"
+    ],
+    "homepage": "https://github.com/HoudiniGraphql/houdini",
+    "funding": "https://github.com/sponsors/HoudiniGraphql",
+    "repository": {
+        "type": "git",
+        "url": "https://github.com/HoudiniGraphql/houdini.git"
+    },
+    "license": "MIT",
+    "type": "module",
+    "scripts": {
+        "build": "scripts build-node",
+        "compile": "scripts build-node",
+        "sync-schema": "node scripts/sync-schema.mjs",
+        "typedefs": "scripts typedefs"
+    },
+    "devDependencies": {
+        "@babel/types": "^7.29.7",
+        "@types/node": "^25.9.1",
+        "@types/sql.js": "^1.4.11",
+        "@types/ungap__structured-clone": "^1.2.0",
+        "@types/ws": "^8.18.1",
+        "prettier": "^3.8.3",
+        "rollup": "^4.61.1",
+        "scripts": "workspace:^",
+        "vite": "^8.0.16",
+        "vitest": "^4.1.8"
+    },
+    "dependencies": {
+        "@babel/parser": "^7.29.7",
+        "@clack/prompts": "^1.5.1",
+        "@graphql-tools/merge": "^9.1.9",
+        "@graphql-tools/schema": "^10.0.33",
+        "@types/estree": "^1.0.9",
+        "@types/fs-extra": "^11.0.4",
+        "@ungap/structured-clone": "^1.3.1",
+        "@whatwg-node/server": "^0.11.0",
+        "ast-types": "^0.16.1",
+        "commander": "^15.0.0",
+        "deepmerge": "^4.3.1",
+        "esbuild": "0.28.0",
+        "estree-walker": "^3.0.3",
+        "fs-extra": "^11.3.5",
+        "glob": "^13.0.0",
+        "graphql-yoga": "^5.21.1",
+        "houdini-core": "workspace:^",
+        "kleur": "^4.1.5",
+        "memfs": "^4.17.2",
+        "minimatch": "^10.2.5",
+        "npx-import": "^1.1.4",
+        "oauth4webapi": "^3.8.6",
+        "recast": "^0.23.11",
+        "sql.js": "^1.14.1",
+        "ws": "^8.21.0"
+    },
+    "peerDependencies": {
+        "graphql": ">=16",
+        "vite": "^8.0.0"
+    },
+    "files": [
+        "adapter",
+        "cmd",
+        "lib",
+        "node",
+        "oauth",
+        "router",
+        "runtime",
+        "test",
+        "vite",
+        "package.json"
+    ],
+    "exports": {
+        "./package.json": "./package.json",
+        ".": {
+            "types": "./lib/index.d.ts",
+            "import": "./lib/index.js"
+        },
+        "./*": {
+            "types": "./lib/*",
+            "import": "./lib/index.js"
+        },
+        "./adapter": {
+            "types": "./adapter/index.d.ts",
+            "import": "./adapter/index.js"
+        },
+        "./adapter/*": {
+            "types": "./adapter/*.d.ts",
+            "import": "./adapter/*.js"
+        },
+        "./cmd": {
+            "types": "./cmd/index.d.ts",
+            "import": "./cmd/index.js"
+        },
+        "./lib": {
+            "types": "./lib/index.d.ts",
+            "import": "./lib/index.js"
+        },
+        "./lib/config": {
+            "types": "./lib/config.d.ts",
+            "import": "./lib/config.js"
+        },
+        "./lib/constants": {
+            "types": "./lib/constants.d.ts",
+            "import": "./lib/constants.js"
+        },
+        "./lib/types": {
+            "types": "./lib/types.d.ts",
+            "import": "./lib/types.js"
+        },
+        "./node": {
+            "types": "./node/index.d.ts",
+            "import": "./node/index.js"
+        },
+        "./node/*": {
+            "types": "./node/*.d.ts",
+            "import": "./node/*.js"
+        },
+        "./oauth": {
+            "types": "./oauth/index.d.ts",
+            "import": "./oauth/index.js"
+        },
+        "./oauth/*": {
+            "types": "./oauth/*.d.ts",
+            "import": "./oauth/*.js"
+        },
+        "./router": {
+            "types": "./router/index.d.ts",
+            "import": "./router/index.js"
+        },
+        "./router/*": {
+            "types": "./router/*.d.ts",
+            "import": "./router/*.js"
+        },
+        "./runtime": {
+            "types": "./runtime/index.d.ts",
+            "import": "./runtime/index.js"
+        },
+        "./runtime/*": {
+            "types": "./runtime/*.d.ts",
+            "import": "./runtime/*.js"
+        },
+        "./runtime/cache": {
+            "types": "./runtime/cache/index.d.ts",
+            "import": "./runtime/cache/index.js"
+        },
+        "./runtime/config": {
+            "types": "./runtime/config.d.ts",
+            "import": "./runtime/config.js"
+        },
+        "./runtime/constants": {
+            "types": "./runtime/constants.d.ts",
+            "import": "./runtime/constants.js"
+        },
+        "./runtime/types": {
+            "types": "./runtime/types.d.ts",
+            "import": "./runtime/types.js"
+        },
+        "./test": {
+            "types": "./test/index.d.ts",
+            "import": "./test/index.js"
+        },
+        "./test/*": {
+            "types": "./test/*.d.ts",
+            "import": "./test/*.js"
+        },
+        "./vite": {
+            "types": "./vite/index.d.ts",
+            "import": "./vite/index.js"
+        },
+        "./vite/*": {
+            "types": "./vite/*.d.ts",
+            "import": "./vite/*.js"
+        }
+    },
+    "typesVersions": {
+        "*": {
+            "adapter": [
+                "./adapter/index.d.ts"
+            ],
+            ".": [
+                "./lib/index.d.ts"
+            ],
+            "node": [
+                "./node/index.d.ts"
+            ],
+            "oauth": [
+                "./oauth/index.d.ts"
+            ],
+            "router": [
+                "./router/index.d.ts"
+            ],
+            "runtime": [
+                "./runtime/index.d.ts"
+            ],
+            "test": [
+                "./test/index.d.ts"
+            ],
+            "vite": [
+                "./vite/index.d.ts"
+            ]
+        }
+    },
+    "bin": "./build/cmd/index.js",
+    "types": "./lib/index.d.ts"
+}

package/build/router/auth-token.d.ts

@@ -0,0 +1,29 @@
+export declare const CSRF_FIELD = "__houdini_csrf";
+export declare const REDIRECT_TXN_TTL_SECONDS: number;
+export declare function timingSafeEqual(a: string, b: string): boolean;
+export declare function signFormToken(session: App.Session, sessionKeys: string[]): Promise<string>;
+export declare function verifyFormToken(token: unknown, session: App.Session, sessionKeys: string[]): Promise<boolean>;
+export type RedirectTxn = {
+    nonce: string;
+    redirectTo: string;
+    provider?: string;
+    codeVerifier?: string;
+    oidcNonce?: string;
+};
+export declare function signRedirectTxn(txn: RedirectTxn, sessionKeys: string[]): Promise<string>;
+export declare function verifyRedirectTxn(cookie: unknown, sessionKeys: string[]): Promise<RedirectTxn | null>;
+export declare function randomToken(bytes?: number): string;
+type SessionAction = {
+    session: App.Session;
+    merge: boolean;
+} | {
+    clear: true;
+};
+export type SessionTokenResult = SessionAction & {
+    sid: string;
+    jti: string;
+};
+export declare function sessionTokenFingerprint(session: App.Session, sessionKeys: string[]): Promise<string>;
+export declare function signSessionToken(payload: App.Session | null, sessionKeys: string[], merge?: boolean, priorSession?: App.Session): Promise<string>;
+export declare function verifySessionToken(token: unknown, sessionKeys: string[]): Promise<SessionTokenResult | null>;
+export {};

package/build/router/auth-token.js

@@ -0,0 +1,168 @@
+import { encode as encodeJWT, verify as verifyJWT, decode as decodeJWT } from "./jwt.js";
+const CSRF_FIELD = "__houdini_csrf";
+const CSRF_TTL_SECONDS = 60 * 60 * 2;
+const SESSION_TTL_SECONDS = 60;
+function formTokenKey(sessionKeys) {
+  return sessionKeys[0] + "|houdini-form-csrf";
+}
+function sessionTokenKey(sessionKeys) {
+  return sessionKeys[0] + "|houdini-session-mint";
+}
+function redirectTxnKey(sessionKeys) {
+  return sessionKeys[0] + "|houdini-redirect-txn";
+}
+const REDIRECT_TXN_TTL_SECONDS = 60 * 10;
+function timingSafeEqual(a, b) {
+  if (a.length !== b.length) {
+    return false;
+  }
+  let mismatch = 0;
+  for (let i = 0; i < a.length; i++) {
+    mismatch |= a.charCodeAt(i) ^ b.charCodeAt(i);
+  }
+  return mismatch === 0;
+}
+function stableStringify(value) {
+  if (value && typeof value === "object" && !Array.isArray(value)) {
+    return "{" + Object.keys(value).sort().map((k) => JSON.stringify(k) + ":" + stableStringify(value[k])).join(",") + "}";
+  }
+  return JSON.stringify(value ?? null);
+}
+async function sessionFingerprint(session, key) {
+  const enc = new TextEncoder();
+  const cryptoKey = await crypto.subtle.importKey(
+    "raw",
+    enc.encode(key),
+    { name: "HMAC", hash: "SHA-256" },
+    false,
+    ["sign"]
+  );
+  const sig = await crypto.subtle.sign("HMAC", cryptoKey, enc.encode(stableStringify(session)));
+  return [...new Uint8Array(sig)].map((b) => b.toString(16).padStart(2, "0")).join("");
+}
+async function signFormToken(session, sessionKeys) {
+  const key = formTokenKey(sessionKeys);
+  const sid = await sessionFingerprint(session, key);
+  return encodeJWT(
+    { houdiniForm: true, sid, exp: Math.floor(Date.now() / 1e3) + CSRF_TTL_SECONDS },
+    key
+  );
+}
+async function verifyFormToken(token, session, sessionKeys) {
+  if (typeof token !== "string") {
+    return false;
+  }
+  const key = formTokenKey(sessionKeys);
+  try {
+    if (!await verifyJWT(token, key)) {
+      return false;
+    }
+    const payload = decodeJWT(token).payload;
+    if (!payload || payload.houdiniForm !== true || typeof payload.sid !== "string") {
+      return false;
+    }
+    return timingSafeEqual(payload.sid, await sessionFingerprint(session, key));
+  } catch {
+    return false;
+  }
+}
+async function signRedirectTxn(txn, sessionKeys) {
+  return encodeJWT(
+    {
+      houdiniRedirect: true,
+      ...txn,
+      exp: Math.floor(Date.now() / 1e3) + REDIRECT_TXN_TTL_SECONDS
+    },
+    redirectTxnKey(sessionKeys)
+  );
+}
+async function verifyRedirectTxn(cookie, sessionKeys) {
+  if (typeof cookie !== "string") {
+    return null;
+  }
+  try {
+    if (!await verifyJWT(cookie, redirectTxnKey(sessionKeys))) {
+      return null;
+    }
+    const payload = decodeJWT(cookie).payload;
+    if (!payload || payload.houdiniRedirect !== true) {
+      return null;
+    }
+    if (typeof payload.nonce !== "string" || typeof payload.redirectTo !== "string") {
+      return null;
+    }
+    const txn = { nonce: payload.nonce, redirectTo: payload.redirectTo };
+    if (typeof payload.provider === "string") txn.provider = payload.provider;
+    if (typeof payload.codeVerifier === "string") txn.codeVerifier = payload.codeVerifier;
+    if (typeof payload.oidcNonce === "string") txn.oidcNonce = payload.oidcNonce;
+    return txn;
+  } catch {
+    return null;
+  }
+}
+function base64url(bytes) {
+  let binary = "";
+  for (const byte of bytes) {
+    binary += String.fromCharCode(byte);
+  }
+  return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+function randomToken(bytes = 32) {
+  return base64url(crypto.getRandomValues(new Uint8Array(bytes)));
+}
+function sessionTokenFingerprint(session, sessionKeys) {
+  return sessionFingerprint(session, sessionTokenKey(sessionKeys));
+}
+async function signSessionToken(payload, sessionKeys, merge = false, priorSession = {}) {
+  const claims = payload == null ? { houdiniSession: true, clear: true } : { houdiniSession: true, payload, merge };
+  return encodeJWT(
+    {
+      ...claims,
+      sid: await sessionTokenFingerprint(priorSession, sessionKeys),
+      jti: crypto.randomUUID(),
+      exp: Math.floor(Date.now() / 1e3) + SESSION_TTL_SECONDS
+    },
+    sessionTokenKey(sessionKeys)
+  );
+}
+async function verifySessionToken(token, sessionKeys) {
+  if (typeof token !== "string") {
+    return null;
+  }
+  try {
+    if (!await verifyJWT(token, sessionTokenKey(sessionKeys))) {
+      return null;
+    }
+    const payload = decodeJWT(token).payload;
+    if (!payload || payload.houdiniSession !== true) {
+      return null;
+    }
+    if (typeof payload.sid !== "string" || typeof payload.jti !== "string") {
+      return null;
+    }
+    const binding = { sid: payload.sid, jti: payload.jti };
+    if (payload.clear === true) {
+      return { clear: true, ...binding };
+    }
+    return {
+      session: payload.payload ?? {},
+      merge: payload.merge === true,
+      ...binding
+    };
+  } catch {
+    return null;
+  }
+}
+export {
+  CSRF_FIELD,
+  REDIRECT_TXN_TTL_SECONDS,
+  randomToken,
+  sessionTokenFingerprint,
+  signFormToken,
+  signRedirectTxn,
+  signSessionToken,
+  timingSafeEqual,
+  verifyFormToken,
+  verifyRedirectTxn,
+  verifySessionToken
+};

package/build/{lib/router → router}/conventions.d.ts

@@ -1,10 +1,15 @@
-import type { Config } from '../config';
+import type { Config } from '../lib/config.js';
 /** The location of the project's router */
 export declare function router_path(config: Config): string;
 /** The location of the page component */
 export declare function page_entry_path(config: Config, id: string, base?: string): string;
 export declare function server_adapter_path(config: Config, base?: string): string;
+export declare function src_dir(config: Config, base?: string): string;
+export declare function local_server_dir(config: Config, base?: string): string;
 export declare function adapter_config_path(config: Config, base?: string): string;
+export declare function router_build_directory(config: Config): string;
+/** Intermediate directory where the primary client build is assembled before deployment packaging */
+export declare function client_build_directory(config: Config): string;
 export declare function vite_render_path(config: Config, base?: string): string;
 export declare function app_component_path(config: Config, base?: string): string;
 export declare function page_unit_path(config: Config, id: string, base?: string): string;
@@ -19,11 +24,15 @@ export declare function read_pageView(base: string): Promise<string[] | null[]>;
 export declare function read_layoutQuery(base: string): Promise<(string | null)[]>;
 /** Load the layout view for the given route from disk */
 export declare function read_layoutView(base: string): Promise<string[] | null[]>;
+export declare function houdini_root(config: Config): string;
 export declare function temp_dir(config: Config, key: string): string;
+export declare function routes_dir(config: Config): string;
 export declare function router_index_path(config: Config): string;
 export declare function is_layout(path: string): boolean;
 /** Transforms paths to ids */
 export declare function page_id(path: string): string;
 export declare function page_entries_dir(config: Config, base?: string): string;
+export declare function db_path(config: Config): string;
 export declare function units_dir(config: Config, base?: string): string;
+export declare function plugin_dir(config: Config, name: string): string;
 export declare function serialized_manifest_path(config: Config, base?: string): string;

package/build/router/conventions.js

@@ -0,0 +1,165 @@
+import * as fs from "../lib/fs.js";
+import * as path from "../lib/path.js";
+function router_path(config) {
+  return path.join(base_dir(config), "Router.jsx");
+}
+function page_entry_path(config, id, base) {
+  return path.join(page_entries_dir(config, base), `${id}.jsx`);
+}
+function server_adapter_path(config, base) {
+  return path.join(units_dir(config, base), "render", "server.js");
+}
+function src_dir(config, base = config?.root_dir) {
+  return path.join(base, "src");
+}
+function local_server_dir(config, base) {
+  return path.join(src_dir(config, base), "server");
+}
+function adapter_config_path(config, base) {
+  return path.join(units_dir(config, base), "render", "config.js");
+}
+function router_build_directory(config) {
+  return path.join(config.root_dir, "build");
+}
+function client_build_directory(config) {
+  return path.join(base_dir(config), "dist");
+}
+function vite_render_path(config, base) {
+  return path.join(units_dir(config, base), "render", "vite.js");
+}
+function app_component_path(config, base) {
+  return path.join(units_dir(config, base), "render", "App.jsx");
+}
+function page_unit_path(config, id, base) {
+  return path.join(page_units_dir(config, base), `${id}.jsx`);
+}
+function layout_unit_path(config, id, base) {
+  return path.join(layout_units_dir(config, base), `${id}.jsx`);
+}
+function componentField_unit_path(config, id, base) {
+  return path.join(units_dir(config, base), "componentFields", `wrapper_${id}.jsx`);
+}
+function fallback_unit_path(config, which, id, base) {
+  return path.join(fallbacks_units_dir(config, which, base), `${id}.jsx`);
+}
+async function read_pageQuery(base) {
+  const target = path.join(base, "+page.gql");
+  return [target, await fs.readFile(target)];
+}
+async function read_pageView(base) {
+  for (const name of ["+page.tsx", "+page.jsx"]) {
+    const target = path.join(base, name);
+    const result = await fs.readFile(target);
+    if (result) {
+      return [target, result];
+    }
+  }
+  return [null, null];
+}
+async function read_layoutQuery(base) {
+  const target = path.join(base, "+layout.gql");
+  return [target, await fs.readFile(target)];
+}
+async function read_layoutView(base) {
+  for (const name of ["+layout.tsx", "+layout.jsx"]) {
+    const target = path.join(base, name);
+    const result = await fs.readFile(target);
+    if (result) {
+      return [target, result];
+    }
+  }
+  return [null, null];
+}
+function houdini_root(config) {
+  return path.join(config.root_dir, config.config_file.runtimeDir ?? ".houdini");
+}
+function temp_dir(config, key) {
+  return path.join(houdini_root(config), "temp", key);
+}
+function routes_dir(config) {
+  return path.join(src_dir(config), "routes");
+}
+function router_index_path(config) {
+  return path.join(src_dir(config), "+index.jsx");
+}
+function is_layout(path2) {
+  return path2.endsWith("+layout.tsx") || path2.endsWith("+layout.jsx");
+}
+function page_id(path2) {
+  if (path2.endsWith("/") && path2.length > 1) {
+    path2 = path2.substring(0, path2.length - 1);
+  }
+  const special_chars = ["/", "]", "[", "(", ")", "-"];
+  const mask = "_";
+  let copy = "";
+  for (const char of path2) {
+    const match = special_chars.indexOf(char);
+    if (match !== -1) {
+      copy += mask;
+    } else {
+      copy += char;
+    }
+  }
+  return copy;
+}
+function page_entries_dir(config, base) {
+  return path.join(units_dir(config, base), "entries");
+}
+function page_units_dir(config, base) {
+  return path.join(units_dir(config, base), "pages");
+}
+function layout_units_dir(config, base) {
+  return path.join(units_dir(config, base), "layouts");
+}
+function fallbacks_units_dir(config, which, base) {
+  return path.join(units_dir(config, base), "fallbacks", which);
+}
+function db_path(config) {
+  return path.join(houdini_root(config), "db.sqlite");
+}
+function units_dir(config, base = base_dir(config)) {
+  return path.join(base, "units");
+}
+function base_dir(config) {
+  return plugin_dir(config, "houdini-react");
+}
+function root_plugin_dir(config) {
+  return path.join(houdini_root(config), "plugins");
+}
+function plugin_dir(config, name) {
+  return path.join(root_plugin_dir(config), name);
+}
+function serialized_manifest_path(config, base = base_dir(config)) {
+  return path.join(base, "manifest.json");
+}
+export {
+  adapter_config_path,
+  app_component_path,
+  client_build_directory,
+  componentField_unit_path,
+  db_path,
+  fallback_unit_path,
+  houdini_root,
+  is_layout,
+  layout_unit_path,
+  local_server_dir,
+  page_entries_dir,
+  page_entry_path,
+  page_id,
+  page_unit_path,
+  plugin_dir,
+  read_layoutQuery,
+  read_layoutView,
+  read_pageQuery,
+  read_pageView,
+  router_build_directory,
+  router_index_path,
+  router_path,
+  routes_dir,
+  serialized_manifest_path,
+  server_adapter_path,
+  src_dir,
+  temp_dir,
+  units_dir,
+  vite_render_path
+};