litestar-vite-plugin 0.25.0 → 0.26.0

package/dist/js/astro.d.ts

@@ -170,6 +170,12 @@ export interface AstroTypesConfig {
      * @default false
      */
     globalRoute?: boolean;
+    /**
+     * Fail Vite when type generation fails.
+     *
+     * Defaults to true during build and false during dev.
+     */
+    failOnError?: boolean;
     /**
      * Debounce time in milliseconds for type regeneration.
      *

package/dist/js/astro.js

@@ -1,9 +1,8 @@
 import fs from "node:fs";
 import path from "node:path";
 import { readBridgeConfig } from "./shared/bridge-schema.js";
-import { DEBOUNCE_MS } from "./shared/constants.js";
 import { normalizeHost, resolveHotFilePath, resolveLitestarPort } from "./shared/network.js";
-import { createLitestarTypeGenPlugin } from "./shared/typegen-plugin.js";
+import { createLitestarTypeGenPlugin, resolveTypesConfig } from "./shared/typegen-plugin.js";
 import { hmrServerConfig } from "./shared/vite-compat.js";
 function resolveConfig(config = {}) {
   let hotFile;
@@ -38,74 +37,13 @@ function resolveConfig(config = {}) {
   if (resolvedLitestarPort !== null) {
     litestarPort = resolvedLitestarPort;
   }
-  let typesConfig = false;
-  const defaultTypesOutput = "src/generated";
-  const buildTypeDefaults = (output) => ({
-    openapiPath: path.join(output, "openapi.json"),
-    routesPath: path.join(output, "routes.json"),
-    pagePropsPath: path.join(output, "inertia-pages.json"),
-    schemasTsPath: path.join(output, "schemas.ts")
+  const typesConfig = resolveTypesConfig({
+    requested: config.types,
+    pythonConfig: pythonTypesConfig ?? void 0,
+    defaultOutput: "src/generated",
+    mergePythonWhenTrue: true,
+    mergePythonForObject: true
   });
-  if (config.types === true) {
-    const output = pythonTypesConfig?.output ?? defaultTypesOutput;
-    const defaults = buildTypeDefaults(output);
-    typesConfig = {
-      enabled: true,
-      output,
-      openapiPath: pythonTypesConfig?.openapiPath ?? defaults.openapiPath,
-      routesPath: pythonTypesConfig?.routesPath ?? defaults.routesPath,
-      pagePropsPath: pythonTypesConfig?.pagePropsPath ?? defaults.pagePropsPath,
-      schemasTsPath: pythonTypesConfig?.schemasTsPath ?? defaults.schemasTsPath,
-      generateZod: pythonTypesConfig?.generateZod ?? false,
-      generateSdk: pythonTypesConfig?.generateSdk ?? true,
-      generateRoutes: pythonTypesConfig?.generateRoutes ?? true,
-      generatePageProps: pythonTypesConfig?.generatePageProps ?? true,
-      generateSchemas: pythonTypesConfig?.generateSchemas ?? true,
-      globalRoute: pythonTypesConfig?.globalRoute ?? false,
-      debounce: DEBOUNCE_MS
-    };
-  } else if (typeof config.types === "object" && config.types !== null) {
-    const userProvidedOutput = Object.hasOwn(config.types, "output");
-    const output = config.types.output ?? pythonTypesConfig?.output ?? defaultTypesOutput;
-    const defaults = buildTypeDefaults(output);
-    const openapiFallback = userProvidedOutput ? defaults.openapiPath : pythonTypesConfig?.openapiPath ?? defaults.openapiPath;
-    const routesFallback = userProvidedOutput ? defaults.routesPath : pythonTypesConfig?.routesPath ?? defaults.routesPath;
-    const pagePropsFallback = userProvidedOutput ? defaults.pagePropsPath : pythonTypesConfig?.pagePropsPath ?? defaults.pagePropsPath;
-    const schemasFallback = userProvidedOutput ? defaults.schemasTsPath : pythonTypesConfig?.schemasTsPath ?? defaults.schemasTsPath;
-    typesConfig = {
-      enabled: config.types.enabled ?? true,
-      output,
-      openapiPath: config.types.openapiPath ?? openapiFallback,
-      routesPath: config.types.routesPath ?? routesFallback,
-      pagePropsPath: config.types.pagePropsPath ?? pagePropsFallback,
-      schemasTsPath: config.types.schemasTsPath ?? schemasFallback,
-      generateZod: config.types.generateZod ?? pythonTypesConfig?.generateZod ?? false,
-      generateSdk: config.types.generateSdk ?? pythonTypesConfig?.generateSdk ?? true,
-      generateRoutes: config.types.generateRoutes ?? pythonTypesConfig?.generateRoutes ?? true,
-      generatePageProps: config.types.generatePageProps ?? pythonTypesConfig?.generatePageProps ?? true,
-      generateSchemas: config.types.generateSchemas ?? pythonTypesConfig?.generateSchemas ?? true,
-      globalRoute: config.types.globalRoute ?? pythonTypesConfig?.globalRoute ?? false,
-      debounce: config.types.debounce ?? DEBOUNCE_MS
-    };
-  } else if (config.types !== false && pythonTypesConfig?.enabled) {
-    const output = pythonTypesConfig.output ?? defaultTypesOutput;
-    const defaults = buildTypeDefaults(output);
-    typesConfig = {
-      enabled: true,
-      output,
-      openapiPath: pythonTypesConfig.openapiPath ?? defaults.openapiPath,
-      routesPath: pythonTypesConfig.routesPath ?? defaults.routesPath,
-      pagePropsPath: pythonTypesConfig.pagePropsPath ?? defaults.pagePropsPath,
-      schemasTsPath: pythonTypesConfig.schemasTsPath ?? defaults.schemasTsPath,
-      generateZod: pythonTypesConfig.generateZod ?? false,
-      generateSdk: pythonTypesConfig.generateSdk ?? true,
-      generateRoutes: pythonTypesConfig.generateRoutes ?? true,
-      generatePageProps: pythonTypesConfig.generatePageProps ?? true,
-      generateSchemas: pythonTypesConfig.generateSchemas ?? true,
-      globalRoute: pythonTypesConfig.globalRoute ?? false,
-      debounce: DEBOUNCE_MS
-    };
-  }
   return {
     apiProxy: config.apiProxy ?? "http://localhost:8000",
     apiPrefix: config.apiPrefix ?? "/api",

package/dist/js/dev-server-index.html

@@ -7,7 +7,7 @@
     <link rel="preconnect" href="https://fonts.googleapis.com" />
     <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
     <link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&family=JetBrains+Mono:wght@400;500&display=swap" />
-    <style rel="stylesheet" crossorigin>/*! tailwindcss v4.3.1 | MIT License | https://tailwindcss.com */
+    <style rel="stylesheet" crossorigin>/*! tailwindcss v4.3.2 | MIT License | https://tailwindcss.com */
 @layer properties{@supports (((-webkit-hyphens:none)) and (not (margin-trim:inline))) or ((-moz-orient:inline) and (not (color:rgb(from red r g b)))){*,:before,:after,::backdrop{--tw-space-y-reverse:0;--tw-border-style:solid;--tw-leading:initial;--tw-font-weight:initial;--tw-tracking:initial;--tw-duration:initial;--tw-translate-x:0;--tw-translate-y:0;--tw-translate-z:0}}}@layer theme{:root,:host{--font-sans:"Inter", system-ui, -apple-system, "Segoe UI", Roboto, sans-serif;--font-mono:"JetBrains Mono", ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;--spacing:.25rem;--container-lg:32rem;--text-xs:.75rem;--text-xs--line-height:calc(1 / .75);--text-sm:.875rem;--text-sm--line-height:calc(1.25 / .875);--text-base:1rem;--text-base--line-height:calc(1.5 / 1);--text-xl:1.25rem;--text-xl--line-height:calc(1.75 / 1.25);--text-2xl:1.5rem;--text-2xl--line-height:calc(2 / 1.5);--text-4xl:2.25rem;--text-4xl--line-height:calc(2.5 / 2.25);--font-weight-light:300;--font-weight-medium:500;--font-weight-semibold:600;--tracking-widest:.1em;--leading-relaxed:1.625;--default-transition-duration:.15s;--default-transition-timing-function:cubic-bezier(.4, 0, .2, 1);--default-font-family:var(--font-sans);--default-mono-font-family:var(--font-mono);--color-navy:#202235;--color-navy-surface:#2a2d40;--color-navy-surface-variant:#1a1c2e;--color-gold:#edb641;--color-gold-light:#ffd480;--color-on-surface:#f8fafc;--color-on-surface-muted:#cbd5e1;--color-on-surface-subtle:#94a3b8;--color-outline:#334155;--color-success:#4ade80;--radius-brand:8px;--radius-brand-lg:12px;--shadow-text-glow-dark:0 0 24px #edb64138}}@layer base{*,:after,:before,::backdrop{box-sizing:border-box;border:0 solid;margin:0;padding:0}::file-selector-button{box-sizing:border-box;border:0 solid;margin:0;padding:0}html,:host{-webkit-text-size-adjust:100%;tab-size:4;line-height:1.5;font-family:var(--default-font-family,ui-sans-serif, system-ui, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji");font-feature-settings:var(--default-font-feature-settings,normal);font-variation-settings:var(--default-font-variation-settings,normal);-webkit-tap-highlight-color:transparent}hr{height:0;color:inherit;border-top-width:1px}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;-webkit-text-decoration:inherit;-webkit-text-decoration:inherit;-webkit-text-decoration:inherit;-webkit-text-decoration:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,samp,pre{font-family:var(--default-mono-font-family,ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace);font-feature-settings:var(--default-mono-font-feature-settings,normal);font-variation-settings:var(--default-mono-font-variation-settings,normal);font-size:1em}small{font-size:80%}sub,sup{vertical-align:baseline;font-size:75%;line-height:0;position:relative}sub{bottom:-.25em}sup{top:-.5em}table{text-indent:0;border-color:inherit;border-collapse:collapse}:-moz-focusring{outline:auto}progress{vertical-align:baseline}summary{display:list-item}ol,ul,menu{list-style:none}img,svg,video,canvas,audio,iframe,embed,object{vertical-align:middle;display:block}img,video{max-width:100%;height:auto}button,input,select,optgroup,textarea{font:inherit;font-feature-settings:inherit;font-variation-settings:inherit;letter-spacing:inherit;color:inherit;opacity:1;background-color:#0000;border-radius:0}::file-selector-button{font:inherit;font-feature-settings:inherit;font-variation-settings:inherit;letter-spacing:inherit;color:inherit;opacity:1;background-color:#0000;border-radius:0}:where(select:is([multiple],[size])) optgroup{font-weight:bolder}:where(select:is([multiple],[size])) optgroup option{padding-inline-start:20px}::file-selector-button{margin-inline-end:4px}::placeholder{opacity:1}@supports (not ((-webkit-appearance:-apple-pay-button))) or (contain-intrinsic-size:1px){::placeholder{color:currentColor}@supports (color:color-mix(in lab, red, red)){::placeholder{color:color-mix(in oklab, currentcolor 50%, transparent)}}}textarea{resize:vertical}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-date-and-time-value{min-height:1lh;text-align:inherit}::-webkit-datetime-edit{display:inline-flex}::-webkit-datetime-edit-fields-wrapper{padding:0}::-webkit-datetime-edit{padding-block:0}::-webkit-datetime-edit-year-field{padding-block:0}::-webkit-datetime-edit-month-field{padding-block:0}::-webkit-datetime-edit-day-field{padding-block:0}::-webkit-datetime-edit-hour-field{padding-block:0}::-webkit-datetime-edit-minute-field{padding-block:0}::-webkit-datetime-edit-second-field{padding-block:0}::-webkit-datetime-edit-millisecond-field{padding-block:0}::-webkit-datetime-edit-meridiem-field{padding-block:0}::-webkit-calendar-picker-indicator{line-height:1}:-moz-ui-invalid{box-shadow:none}button,input:where([type=button],[type=reset],[type=submit]){appearance:button}::file-selector-button{appearance:button}::-webkit-inner-spin-button{height:auto}::-webkit-outer-spin-button{height:auto}[hidden]:where(:not([hidden=until-found])){display:none!important}}@layer components;@layer utilities{.absolute{position:absolute}.relative{position:relative}.mt-8{margin-top:calc(var(--spacing) * 8)}.mb-3{margin-bottom:calc(var(--spacing) * 3)}.mb-4{margin-bottom:calc(var(--spacing) * 4)}.mb-10{margin-bottom:calc(var(--spacing) * 10)}.mb-12{margin-bottom:calc(var(--spacing) * 12)}.ml-auto{margin-left:auto}.block{display:block}.flex{display:flex}.inline{display:inline}.inline-flex{display:inline-flex}.h-2\.5{height:calc(var(--spacing) * 2.5)}.h-3\.5{height:calc(var(--spacing) * 3.5)}.h-12{height:calc(var(--spacing) * 12)}.h-14{height:calc(var(--spacing) * 14)}.h-full{height:100%}.min-h-screen{min-height:100vh}.w-2\.5{width:calc(var(--spacing) * 2.5)}.w-3\.5{width:calc(var(--spacing) * 3.5)}.w-auto{width:auto}.w-full{width:100%}.max-w-lg{max-width:var(--container-lg)}.min-w-0{min-width:0}.flex-1{flex:1}.flex-none{flex:none}.animate-pulse-dot{animation:2s ease-in-out infinite pulse-dot}.items-center{align-items:center}.justify-center{justify-content:center}.gap-2{gap:calc(var(--spacing) * 2)}.gap-3{gap:calc(var(--spacing) * 3)}.gap-6{gap:calc(var(--spacing) * 6)}:where(.space-y-8>:not(:last-child)){--tw-space-y-reverse:0;margin-block-start:calc(calc(var(--spacing) * 8) * var(--tw-space-y-reverse));margin-block-end:calc(calc(var(--spacing) * 8) * calc(1 - var(--tw-space-y-reverse)))}.rounded-brand{border-radius:var(--radius-brand)}.rounded-brand-lg{border-radius:var(--radius-brand-lg)}.rounded-full{border-radius:3.40282e38px}.border{border-style:var(--tw-border-style);border-width:1px}.border-b{border-bottom-style:var(--tw-border-style);border-bottom-width:1px}.border-l-\[3px\]{border-left-style:var(--tw-border-style);border-left-width:3px}.border-outline{border-color:var(--color-outline)}.border-l-gold{border-left-color:var(--color-gold)}.bg-navy-surface{background-color:var(--color-navy-surface)}.bg-navy-surface-variant{background-color:var(--color-navy-surface-variant)}.bg-success{background-color:var(--color-success)}.px-4{padding-inline:calc(var(--spacing) * 4)}.px-6{padding-inline:calc(var(--spacing) * 6)}.px-8{padding-inline:calc(var(--spacing) * 8)}.py-3{padding-block:calc(var(--spacing) * 3)}.py-5{padding-block:calc(var(--spacing) * 5)}.py-8{padding-block:calc(var(--spacing) * 8)}.py-16{padding-block:calc(var(--spacing) * 16)}.text-center{text-align:center}.font-mono{font-family:var(--font-mono)}.text-2xl{font-size:var(--text-2xl);line-height:var(--tw-leading,var(--text-2xl--line-height))}.text-base{font-size:var(--text-base);line-height:var(--tw-leading,var(--text-base--line-height))}.text-sm{font-size:var(--text-sm);line-height:var(--tw-leading,var(--text-sm--line-height))}.text-xl{font-size:var(--text-xl);line-height:var(--tw-leading,var(--text-xl--line-height))}.text-xs{font-size:var(--text-xs);line-height:var(--tw-leading,var(--text-xs--line-height))}.leading-none{--tw-leading:1;line-height:1}.leading-relaxed{--tw-leading:var(--leading-relaxed);line-height:var(--leading-relaxed)}.font-light{--tw-font-weight:var(--font-weight-light);font-weight:var(--font-weight-light)}.font-medium{--tw-font-weight:var(--font-weight-medium);font-weight:var(--font-weight-medium)}.font-semibold{--tw-font-weight:var(--font-weight-semibold);font-weight:var(--font-weight-semibold)}.tracking-widest{--tw-tracking:var(--tracking-widest);letter-spacing:var(--tracking-widest)}.break-all{word-break:break-all}.text-gold{color:var(--color-gold)}.text-on-surface{color:var(--color-on-surface)}.text-on-surface-muted{color:var(--color-on-surface-muted)}.text-on-surface-subtle{color:var(--color-on-surface-subtle)}.uppercase{text-transform:uppercase}.opacity-60{opacity:.6}.transition-colors{transition-property:color,background-color,border-color,outline-color,text-decoration-color,fill,stroke,--tw-gradient-from,--tw-gradient-via,--tw-gradient-to;transition-timing-function:var(--tw-ease,var(--default-transition-timing-function));transition-duration:var(--tw-duration,var(--default-transition-duration))}.transition-opacity{transition-property:opacity;transition-timing-function:var(--tw-ease,var(--default-transition-timing-function));transition-duration:var(--tw-duration,var(--default-transition-duration))}.transition-transform{transition-property:transform,translate,scale,rotate;transition-timing-function:var(--tw-ease,var(--default-transition-timing-function));transition-duration:var(--tw-duration,var(--default-transition-duration))}.duration-200{--tw-duration:.2s;transition-duration:.2s}.select-all{-webkit-user-select:all;user-select:all}.text-brand-glow{text-shadow:var(--shadow-text-glow-dark)}@media (hover:hover){.group-hover\:translate-x-0\.5:is(:where(.group):hover *){--tw-translate-x:calc(var(--spacing) * .5);translate:var(--tw-translate-x) var(--tw-translate-y)}.group-hover\:opacity-100:is(:where(.group):hover *){opacity:1}.hover\:bg-navy:hover{background-color:var(--color-navy)}.hover\:text-gold:hover{color:var(--color-gold)}.hover\:text-gold-light:hover{color:var(--color-gold-light)}.hover\:opacity-80:hover{opacity:.8}}@media (width>=40rem){.sm\:px-10{padding-inline:calc(var(--spacing) * 10)}.sm\:py-10{padding-block:calc(var(--spacing) * 10)}.sm\:text-4xl{font-size:var(--text-4xl);line-height:var(--tw-leading,var(--text-4xl--line-height))}}}html{font-family:var(--font-sans);-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}body{background-color:var(--color-navy);color:var(--color-on-surface-muted);background-image:radial-gradient(#f8fafc0a 1px,#0000 1px);background-size:24px 24px}@keyframes pulse-dot{0%,to{opacity:1;transform:scale(1)}50%{opacity:.55;transform:scale(.92)}}@property --tw-space-y-reverse{syntax:"*";inherits:false;initial-value:0}@property --tw-border-style{syntax:"*";inherits:false;initial-value:solid}@property --tw-leading{syntax:"*";inherits:false}@property --tw-font-weight{syntax:"*";inherits:false}@property --tw-tracking{syntax:"*";inherits:false}@property --tw-duration{syntax:"*";inherits:false}@property --tw-translate-x{syntax:"*";inherits:false;initial-value:0}@property --tw-translate-y{syntax:"*";inherits:false;initial-value:0}@property --tw-translate-z{syntax:"*";inherits:false;initial-value:0}
 /*$vite$:1*/</style>
   </head>

package/dist/js/helpers/csrf.d.ts

@@ -5,6 +5,7 @@
  * 1. window.__LITESTAR_CSRF__ (SPA mode)
  * 2. <meta name="csrf-token" content="..."> (template mode)
  * 3. Inertia shared props (Inertia mode)
+ * 4. csrftoken / XSRF-TOKEN cookie (SPA fallback)
  *
  * @module
  */
@@ -21,6 +22,7 @@ export declare const DEFAULT_CSRF_HEADER_NAME = "X-CSRFToken";
  * 1. window.__LITESTAR_CSRF__ (injected by SPA handler)
  * 2. <meta name="csrf-token"> element
  * 3. Inertia page props (if Inertia is present)
+ * 4. csrftoken / XSRF-TOKEN cookie
  *
  * @returns The CSRF token or empty string if not found
  *

package/dist/js/helpers/csrf.js

@@ -5,6 +5,7 @@
  * 1. window.__LITESTAR_CSRF__ (SPA mode)
  * 2. <meta name="csrf-token" content="..."> (template mode)
  * 3. Inertia shared props (Inertia mode)
+ * 4. csrftoken / XSRF-TOKEN cookie (SPA fallback)
  *
  * @module
  */
@@ -42,6 +43,28 @@ function getInertiaToken() {
     }
     return undefined;
 }
+function getCookie(name) {
+    if (typeof document === "undefined" || typeof document.cookie !== "string") {
+        return undefined;
+    }
+    const value = `; ${document.cookie}`;
+    const parts = value.split(`; ${name}=`);
+    if (parts.length === 2) {
+        const raw = parts.pop()?.split(";").shift();
+        if (raw !== undefined && raw.length > 0) {
+            try {
+                return decodeURIComponent(raw);
+            }
+            catch {
+                return raw;
+            }
+        }
+    }
+    return undefined;
+}
+function getCookieToken() {
+    return getCookie("csrftoken") ?? getCookie("XSRF-TOKEN");
+}
 /**
  * Get the CSRF token from the page.
  *
@@ -49,6 +72,7 @@ function getInertiaToken() {
  * 1. window.__LITESTAR_CSRF__ (injected by SPA handler)
  * 2. <meta name="csrf-token"> element
  * 3. Inertia page props (if Inertia is present)
+ * 4. csrftoken / XSRF-TOKEN cookie
  *
  * @returns The CSRF token or empty string if not found
  *
@@ -79,11 +103,13 @@ export function getCsrfToken() {
     }
     const metaToken = getMetaToken();
     const inertiaToken = getInertiaToken();
-    const token = metaToken ?? inertiaToken ?? "";
+    const cookieToken = getCookieToken();
+    const token = metaToken ?? inertiaToken ?? cookieToken ?? "";
     if (csrfTokenCache &&
         csrfTokenCache.windowToken === undefined &&
         csrfTokenCache.metaToken === metaToken &&
         csrfTokenCache.inertiaToken === inertiaToken &&
+        csrfTokenCache.cookieToken === cookieToken &&
         csrfTokenCache.token === token) {
         return csrfTokenCache.token;
     }
@@ -92,6 +118,7 @@ export function getCsrfToken() {
         windowToken: undefined,
         metaToken,
         inertiaToken,
+        cookieToken,
     };
     return token;
 }

package/dist/js/helpers/htmx.js

@@ -213,7 +213,12 @@ const directives = [
                     el.removeAttribute(name);
                 }
                 else {
-                    el.setAttribute(name, v === true ? "" : String(v));
+                    const value = v === true ? "" : String(v);
+                    if (isDangerousUrlAttribute(name, value)) {
+                        el.removeAttribute(name);
+                        return;
+                    }
+                    el.setAttribute(name, value);
                 }
             };
         },
@@ -480,7 +485,101 @@ function stripStrings(s) {
         .replace(/"(?:[^"\\]|\\.)*"/g, "") // double-quoted strings
         .replace(/'(?:[^'\\]|\\.)*'/g, ""); // single-quoted strings
 }
+function readQuotedLiteral(s, start) {
+    const quote = s[start];
+    if (quote !== "'" && quote !== '"' && quote !== "`")
+        return null;
+    let value = "";
+    for (let i = start + 1; i < s.length; i++) {
+        const ch = s[i];
+        if (ch === "\\") {
+            if (i + 1 >= s.length)
+                return null;
+            const escaped = readEscapedCharacter(s, i + 1);
+            if (!escaped)
+                return null;
+            value += escaped.value;
+            i = escaped.end - 1;
+            continue;
+        }
+        if (quote === "`" && ch === "$" && s[i + 1] === "{") {
+            return null;
+        }
+        if (ch === quote) {
+            return { end: i + 1, value };
+        }
+        value += ch;
+    }
+    return null;
+}
+function readEscapedCharacter(s, start) {
+    const ch = s[start];
+    if (ch === "u") {
+        if (s[start + 1] === "{") {
+            const close = s.indexOf("}", start + 2);
+            if (close === -1)
+                return null;
+            const codePoint = Number.parseInt(s.slice(start + 2, close), 16);
+            return Number.isFinite(codePoint) ? { end: close + 1, value: String.fromCodePoint(codePoint) } : null;
+        }
+        const codePoint = Number.parseInt(s.slice(start + 1, start + 5), 16);
+        return Number.isFinite(codePoint) ? { end: start + 5, value: String.fromCharCode(codePoint) } : null;
+    }
+    if (ch === "x") {
+        const codePoint = Number.parseInt(s.slice(start + 1, start + 3), 16);
+        return Number.isFinite(codePoint) ? { end: start + 3, value: String.fromCharCode(codePoint) } : null;
+    }
+    const escapes = { b: "\b", f: "\f", n: "\n", r: "\r", t: "\t", v: "\v" };
+    return { end: start + 1, value: escapes[ch] ?? ch };
+}
+function skipTrivia(s, start) {
+    let i = start;
+    while (i < s.length) {
+        while (/\s/.test(s[i] ?? ""))
+            i += 1;
+        if (s[i] === "/" && s[i + 1] === "/") {
+            i = s.indexOf("\n", i + 2);
+            if (i === -1)
+                return s.length;
+            continue;
+        }
+        if (s[i] === "/" && s[i + 1] === "*") {
+            const close = s.indexOf("*/", i + 2);
+            if (close === -1)
+                return s.length;
+            i = close + 2;
+            continue;
+        }
+        break;
+    }
+    return i;
+}
+function hasBlockedStringConcatenation(s) {
+    for (let i = 0; i < s.length; i++) {
+        const first = readQuotedLiteral(s, i);
+        if (!first)
+            continue;
+        const parts = [first.value];
+        let cursor = skipTrivia(s, first.end);
+        while (s[cursor] === "+") {
+            const nextStart = skipTrivia(s, cursor + 1);
+            const next = readQuotedLiteral(s, nextStart);
+            if (!next)
+                break;
+            parts.push(next.value);
+            cursor = skipTrivia(s, next.end);
+        }
+        if (parts.length > 1 && BLOCKED_GLOBALS.includes(parts.join(""))) {
+            return true;
+        }
+        i = first.end - 1;
+    }
+    return false;
+}
 function isExpressionSafe(s) {
+    if (hasBlockedStringConcatenation(s)) {
+        return false;
+    }
     const stripped = stripStrings(s);
     return !BLOCKED_RE.test(stripped);
 }
@@ -525,6 +624,10 @@ function compileTextExpr(t) {
 const DANGEROUS_TAGS = new Set(["script", "style", "iframe", "object", "embed", "form", "meta", "link", "base"]);
 const DANGEROUS_ATTR_RE = /^on/i;
 const DANGEROUS_PROTO_RE = /^\s*javascript\s*:/i;
+const URL_ATTRS = new Set(["href", "src", "action"]);
+function isDangerousUrlAttribute(name, value) {
+    return URL_ATTRS.has(name.toLowerCase()) && DANGEROUS_PROTO_RE.test(value);
+}
 function sanitizeHtml(html) {
     const tpl = document.createElement("template");
     tpl.innerHTML = html;
@@ -545,7 +648,7 @@ function sanitizeNode(node) {
                 if (DANGEROUS_ATTR_RE.test(attr.name)) {
                     el.removeAttribute(attr.name);
                 }
-                else if ((attr.name === "href" || attr.name === "src" || attr.name === "action") && DANGEROUS_PROTO_RE.test(attr.value)) {
+                else if (isDangerousUrlAttribute(attr.name, attr.value)) {
                     el.removeAttribute(attr.name);
                 }
             }

package/dist/js/index.d.ts

@@ -94,6 +94,12 @@ export interface TypesConfig {
      * @default false
      */
     globalRoute?: boolean;
+    /**
+     * Fail Vite when type generation fails.
+     *
+     * Defaults to true during `vite build` and false during `vite serve`.
+     */
+    failOnError?: boolean;
     /**
      * Debounce time in milliseconds for type regeneration.
      * Prevents regeneration from running too frequently when

package/dist/js/index.js

@@ -6,11 +6,10 @@ import { loadEnv } from "vite";
 import fullReload from "vite-plugin-full-reload";
 import { checkBackendAvailability, loadLitestarMeta } from "./litestar-meta.js";
 import { readBridgeConfig } from "./shared/bridge-schema.js";
-import { DEBOUNCE_MS } from "./shared/constants.js";
 import { createLogger } from "./shared/logger.js";
 import { resolveLitestarPort } from "./shared/network.js";
 import { resolveDefaultSdkClientPlugin } from "./shared/typegen-core.js";
-import { createLitestarTypeGenPlugin } from "./shared/typegen-plugin.js";
+import { createLitestarTypeGenPlugin, resolveTypesConfig } from "./shared/typegen-plugin.js";
 import { buildInputOptions, hmrServerConfig, resolveUserBuildInput } from "./shared/vite-compat.js";
 let exitHandlersBound = false;
 let warnedMissingRuntimeConfig = false;
@@ -94,32 +93,32 @@ function resolveLitestarPlugin(pluginConfig) {
       const proxyHmrClientPort = pythonDefaults?.proxyMode === "vite" ? resolveLitestarPort(pythonDefaults.litestarPort, effectiveAppUrl, process.env) : null;
       const withProxyErrorSilencer = (proxyConfig) => {
         if (!proxyConfig) return void 0;
-        return Object.fromEntries(
-          Object.entries(proxyConfig).map(([key, value]) => {
-            if (typeof value !== "object" || value === null) {
-              return [key, value];
-            }
-            const existingConfigure = value.configure;
-            const valueWithWebsocket = Object.hasOwn(value, "ws") ? value : { ...value, ws: true };
-            return [
-              key,
-              {
-                ...valueWithWebsocket,
-                configure(proxy, opts) {
-                  proxy.on("error", (err) => {
-                    const msg = String(err?.message ?? "");
-                    if (shuttingDown || msg.includes("ECONNREFUSED") || msg.includes("ECONNRESET") || msg.includes("socket hang up")) {
-                      return;
-                    }
-                  });
-                  if (typeof existingConfigure === "function") {
-                    existingConfigure(proxy, opts);
-                  }
-                }
+        const entries = Object.entries(proxyConfig).map(([key, value]) => {
+          if (typeof value !== "object" || value === null) {
+            return [key, value];
+          }
+          const existingConfigure = value.configure;
+          const valueWithWebsocket = Object.hasOwn(value, "ws") ? value : { ...value, ws: true };
+          const configure = (proxy, opts) => {
+            proxy.on("error", (err) => {
+              const msg = err.message;
+              if (shuttingDown || msg.includes("ECONNREFUSED") || msg.includes("ECONNRESET") || msg.includes("socket hang up")) {
+                return;
               }
-            ];
-          })
-        );
+            });
+            if (typeof existingConfigure === "function") {
+              existingConfigure(proxy, opts);
+            }
+          };
+          return [
+            key,
+            {
+              ...valueWithWebsocket,
+              configure
+            }
+          ];
+        });
+        return Object.fromEntries(entries);
       };
       const explicitServerOrigin = typeof userConfig.server?.origin === "string" && userConfig.server.origin.length > 0 ? userConfig.server.origin : void 0;
       const shouldForceDirectServerOrigin = explicitServerOrigin !== void 0 || pythonDefaults?.proxyMode === "direct";
@@ -587,80 +586,11 @@ function resolvePluginConfig(config) {
   if (resolvedConfig.refresh === true) {
     resolvedConfig.refresh = [{ paths: refreshPaths }];
   }
-  let typesConfig = false;
-  const defaultTypesOutput = "src/generated";
-  const defaultOpenapiPath = path.join(defaultTypesOutput, "openapi.json");
-  const defaultRoutesPath = path.join(defaultTypesOutput, "routes.json");
-  const defaultSchemasTsPath = path.join(defaultTypesOutput, "schemas.ts");
-  const defaultPagePropsPath = path.join(defaultTypesOutput, "inertia-pages.json");
-  if (resolvedConfig.types === false) {
-  } else if (resolvedConfig.types === true) {
-    typesConfig = {
-      enabled: true,
-      output: defaultTypesOutput,
-      openapiPath: defaultOpenapiPath,
-      routesPath: defaultRoutesPath,
-      pagePropsPath: defaultPagePropsPath,
-      schemasTsPath: defaultSchemasTsPath,
-      generateZod: false,
-      generateSdk: true,
-      generateRoutes: true,
-      generatePageProps: true,
-      generateSchemas: true,
-      globalRoute: false,
-      debounce: DEBOUNCE_MS
-    };
-  } else if (resolvedConfig.types === "auto" || typeof resolvedConfig.types === "undefined") {
-    if (pythonDefaults?.types) {
-      typesConfig = {
-        enabled: pythonDefaults.types.enabled,
-        output: pythonDefaults.types.output,
-        openapiPath: pythonDefaults.types.openapiPath,
-        routesPath: pythonDefaults.types.routesPath,
-        pagePropsPath: pythonDefaults.types.pagePropsPath,
-        schemasTsPath: pythonDefaults.types.schemasTsPath ?? path.join(pythonDefaults.types.output, "schemas.ts"),
-        generateZod: pythonDefaults.types.generateZod,
-        generateSdk: pythonDefaults.types.generateSdk,
-        generateRoutes: pythonDefaults.types.generateRoutes,
-        generatePageProps: pythonDefaults.types.generatePageProps,
-        generateSchemas: pythonDefaults.types.generateSchemas ?? true,
-        globalRoute: pythonDefaults.types.globalRoute,
-        debounce: DEBOUNCE_MS
-      };
-    }
-  } else if (typeof resolvedConfig.types === "object" && resolvedConfig.types !== null) {
-    const userProvidedOpenapi = Object.hasOwn(resolvedConfig.types, "openapiPath");
-    const userProvidedRoutes = Object.hasOwn(resolvedConfig.types, "routesPath");
-    const userProvidedPageProps = Object.hasOwn(resolvedConfig.types, "pagePropsPath");
-    const userProvidedSchemasTs = Object.hasOwn(resolvedConfig.types, "schemasTsPath");
-    typesConfig = {
-      enabled: resolvedConfig.types.enabled ?? true,
-      output: resolvedConfig.types.output ?? defaultTypesOutput,
-      openapiPath: resolvedConfig.types.openapiPath ?? (resolvedConfig.types.output ? path.join(resolvedConfig.types.output, "openapi.json") : defaultOpenapiPath),
-      routesPath: resolvedConfig.types.routesPath ?? (resolvedConfig.types.output ? path.join(resolvedConfig.types.output, "routes.json") : defaultRoutesPath),
-      pagePropsPath: resolvedConfig.types.pagePropsPath ?? (resolvedConfig.types.output ? path.join(resolvedConfig.types.output, "inertia-pages.json") : defaultPagePropsPath),
-      schemasTsPath: resolvedConfig.types.schemasTsPath ?? (resolvedConfig.types.output ? path.join(resolvedConfig.types.output, "schemas.ts") : defaultSchemasTsPath),
-      generateZod: resolvedConfig.types.generateZod ?? false,
-      generateSdk: resolvedConfig.types.generateSdk ?? true,
-      generateRoutes: resolvedConfig.types.generateRoutes ?? true,
-      generatePageProps: resolvedConfig.types.generatePageProps ?? true,
-      generateSchemas: resolvedConfig.types.generateSchemas ?? true,
-      globalRoute: resolvedConfig.types.globalRoute ?? false,
-      debounce: resolvedConfig.types.debounce ?? DEBOUNCE_MS
-    };
-    if (!userProvidedOpenapi && resolvedConfig.types.output) {
-      typesConfig.openapiPath = path.join(typesConfig.output, "openapi.json");
-    }
-    if (!userProvidedRoutes && resolvedConfig.types.output) {
-      typesConfig.routesPath = path.join(typesConfig.output, "routes.json");
-    }
-    if (!userProvidedPageProps && resolvedConfig.types.output) {
-      typesConfig.pagePropsPath = path.join(typesConfig.output, "inertia-pages.json");
-    }
-    if (!userProvidedSchemasTs && resolvedConfig.types.output) {
-      typesConfig.schemasTsPath = path.join(typesConfig.output, "schemas.ts");
-    }
-  }
+  const typesConfig = resolveTypesConfig({
+    requested: resolvedConfig.types,
+    pythonConfig: pythonDefaults?.types ?? void 0,
+    defaultOutput: "src/generated"
+  });
   const bridgeInertiaEnabled = pythonDefaults?.spa !== null && pythonDefaults?.spa !== void 0;
   const inertiaMode = resolvedConfig.inertiaMode ?? bridgeInertiaEnabled;
   const effectiveResourceDir = resolvedConfig.resourceDir ?? pythonDefaults?.resourceDir ?? "src";
@@ -819,14 +749,12 @@ function resolveDevServerUrl(address, config, userConfig) {
   return `${protocol}://${host}:${port}`;
 }
 function isIpv6(address) {
-  return address.family === "IPv6" || // In node >=18.0 <18.4 this was an integer value. This was changed in a minor version.
-  // See: https://github.com/laravel/vite-plugin/issues/103
-  // eslint-disable-next-line @typescript-eslint/ban-ts-comment
-  // @ts-ignore-next-line
-  address.family === 6;
+  const family = address.family;
+  return family === "IPv6" || family === 6;
 }
 function noExternalInertiaHelpers(config) {
-  const userNoExternal = config.ssr?.noExternal;
+  const ssrConfig = typeof config.ssr === "object" && config.ssr !== null ? config.ssr : void 0;
+  const userNoExternal = ssrConfig?.noExternal;
   const pluginNoExternal = ["litestar-vite-plugin"];
   if (userNoExternal === true) {
     return true;
@@ -852,8 +780,8 @@ function resolveEnvironmentServerConfig(env) {
   return {
     host,
     https: {
-      key: fs.readFileSync(env.VITE_DEV_SERVER_KEY),
-      cert: fs.readFileSync(env.VITE_DEV_SERVER_CERT)
+      key: fs.readFileSync(env.VITE_SERVER_KEY),
+      cert: fs.readFileSync(env.VITE_SERVER_CERT)
     }
   };
 }
@@ -919,25 +847,40 @@ function dirname() {
   }
   return path.resolve(process.cwd(), "../dist/js");
 }
+let cachedDevServerPlaceholderCandidates;
+let cachedDevServerPlaceholderPath;
 function getDevServerPlaceholderCandidates() {
+  if (cachedDevServerPlaceholderCandidates) {
+    return cachedDevServerPlaceholderCandidates;
+  }
   const distJsRoot = "dist/js";
   const placeholderName = "dev-server-index.html";
   const moduleDir = dirname();
   const candidates = [
-    path.join(dirname(), placeholderName),
+    path.join(moduleDir, placeholderName),
     path.join(process.cwd(), distJsRoot, placeholderName),
     path.join(process.cwd(), "src", "js", distJsRoot, placeholderName),
     path.resolve(process.cwd(), "..", distJsRoot, placeholderName),
     path.join(moduleDir, distJsRoot, placeholderName)
   ];
-  return [...new Set(candidates)];
+  cachedDevServerPlaceholderCandidates = [...new Set(candidates)];
+  return cachedDevServerPlaceholderCandidates;
 }
 async function loadDevServerPlaceholder() {
+  if (cachedDevServerPlaceholderPath) {
+    try {
+      return await fs.promises.readFile(cachedDevServerPlaceholderPath, "utf-8");
+    } catch {
+      cachedDevServerPlaceholderPath = void 0;
+    }
+  }
   const candidates = getDevServerPlaceholderCandidates();
   let lastError = new Error("Failed to load dev server placeholder index.html");
   for (const candidatePath of candidates) {
     try {
-      return await fs.promises.readFile(candidatePath, "utf-8");
+      const content = await fs.promises.readFile(candidatePath, "utf-8");
+      cachedDevServerPlaceholderPath = candidatePath;
+      return content;
     } catch (error) {
       lastError = error;
     }