redweb 0.16.2 → 0.16.3

package/docs/snippets/components.tsx

@@ -1,24 +1,24 @@
-import { action, component, defineApp, page, state } from 'redweb';
-
-@component()
-class Counter {
-    @state() count = 0;
-
-    @action()
-    increment() { this.count += 1; }
-
-    render() {
-        return <button rw-click="increment">Count {this.count}</button>;
-    }
-}
-
-@page('/')
-class CountersPage {
-    first = new Counter();
-    second = new Counter();
-
-    render() { return <main>{this.first}{this.second}</main>; }
-}
-
-const app = defineApp({ pages: [CountersPage] });
-app.run();
+import { action, component, defineApp, page, state } from 'redweb';
+
+@component()
+class Counter {
+    @state() count = 0;
+
+    @action()
+    increment() { this.count += 1; }
+
+    render() {
+        return <button rw-click="increment">Count {this.count}</button>;
+    }
+}
+
+@page('/')
+class CountersPage {
+    first = new Counter();
+    second = new Counter();
+
+    render() { return <main>{this.first}{this.second}</main>; }
+}
+
+const app = defineApp({ pages: [CountersPage] });
+app.run();

package/docs/snippets/counter.tsx

@@ -1,16 +1,16 @@
-import { action, defineApp, page, state } from 'redweb';
-
-@page('/', { shared: true })
-class CounterPage {
-    @state() count = 0;
-
-    @action()
-    increment() { this.count += 1; }
-
-    render() {
-        return <button rw-click="increment">Count {this.count}</button>;
-    }
-}
-
-const app = defineApp({ pages: [CounterPage] });
-app.run();
+import { action, defineApp, page, state } from 'redweb';
+
+@page('/', { shared: true })
+class CounterPage {
+    @state() count = 0;
+
+    @action()
+    increment() { this.count += 1; }
+
+    render() {
+        return <button rw-click="increment">Count {this.count}</button>;
+    }
+}
+
+const app = defineApp({ pages: [CounterPage] });
+app.run();

package/docs/snippets/room-access.tsx

@@ -1,8 +1,8 @@
 import { randomBytes } from 'node:crypto';
-import { page, defineApp, BaseHandler, SocketRoute, RedWebSocket, RedWebRequest, LivePageRequestContext } from 'redweb';
+import { page, defineApp, BaseHandler, SocketRoute, RedWebSocket, RedWebRequest, LivePageRequestContext } from 'redweb';
 
 // A runnable local demonstration, not a production credential store.
-export async function createApp(port = 8181) {
+export async function createApp(port = 8181) {
     const token = randomBytes(32).toString('base64url');
     let enabled = true;
     const authenticate = (request: Pick<RedWebRequest, 'headers'>) =>
@@ -28,9 +28,9 @@ export async function createApp(port = 8181) {
         }
     }
 
-    const app = defineApp({ pages: [Home], sockets: [Team], authenticate, port, bind: '127.0.0.1', logger: null });
-    await app.run();
-    const team = app.sockets!.routes.find(route => route instanceof Team)!;
+    const app = defineApp({ pages: [Home], sockets: [Team], authenticate, port, bind: '127.0.0.1', logger: null });
+    await app.run();
+    const team = app.sockets!.routes.find(route => route instanceof Team)!;
     return {
         app, team, token,
         async revoke() {
@@ -42,9 +42,9 @@ export async function createApp(port = 8181) {
     };
 }
 
-if (require.main === module) {
-    createApp().then(demo => {
-        console.log('Local demo: http://127.0.0.1:8181/ and ws://127.0.0.1:8181/team');
-        console.log(`Authorization: Bearer ${demo.token}`); // One fresh local-demo credential per run.
-    });
-}
+if (require.main === module) {
+    createApp().then(demo => {
+        console.log('Local demo: http://127.0.0.1:8181/ and ws://127.0.0.1:8181/team');
+        console.log(`Authorization: Bearer ${demo.token}`); // One fresh local-demo credential per run.
+    });
+}

package/docs/snippets/site.css

@@ -1,2 +1,2 @@
-body { max-width: 50rem; margin: 3rem auto; padding: 0 1rem; font-family: system-ui, sans-serif; }
-nav { display: flex; gap: 1rem; margin-bottom: 2rem; }
+body { max-width: 50rem; margin: 3rem auto; padding: 0 1rem; font-family: system-ui, sans-serif; }
+nav { display: flex; gap: 1rem; margin-bottom: 2rem; }

package/docs/snippets/site.tsx

@@ -1,22 +1,22 @@
-import { defineApp, defineSite } from 'redweb';
-
-const site = defineSite({
-    css: 'site.css',
-    layout: content => <body>
-        <nav><a href="/">Home</a> · <a href="/about">About</a></nav>
-        <main>{content}</main>
-    </body>,
-});
-
-@site.page('/', { head: { title: 'Home' } })
-class HomePage {
-    render() { return <h1>Welcome to Redweb</h1>; }
-}
-
-@site.page('/about', { head: { title: 'About' } })
-class AboutPage {
-    render() { return <p>Two pages, one layout, no browser framework.</p>; }
-}
-
-const app = defineApp({ pages: [HomePage, AboutPage] });
-app.run();
+import { defineApp, defineSite } from 'redweb';
+
+const site = defineSite({
+    css: 'site.css',
+    layout: content => <body>
+        <nav><a href="/">Home</a> · <a href="/about">About</a></nav>
+        <main>{content}</main>
+    </body>,
+});
+
+@site.page('/', { head: { title: 'Home' } })
+class HomePage {
+    render() { return <h1>Welcome to Redweb</h1>; }
+}
+
+@site.page('/about', { head: { title: 'About' } })
+class AboutPage {
+    render() { return <p>Two pages, one layout, no browser framework.</p>; }
+}
+
+const app = defineApp({ pages: [HomePage, AboutPage] });
+app.run();

package/docs/topics.json

@@ -2,7 +2,7 @@
   { "id": "getting-started", "title": "Choose a starter and build a working app", "summary": "Requirements, fit, development, tests, and production boundaries.", "source": "docs/GETTING_STARTED.md" },
   { "id": "application", "title": "One application, one listener", "summary": "Define pages, socket routes and application services together; run and shut down one owned HTTP/WebSocket listener.", "source": "docs/APPLICATION.md" },
   { "id": "guides/realtime-dashboard", "title": "Build a private realtime dashboard", "summary": "Persistent SQLite cards, account-private updates and sign-out across tabs, with explicit single-process limits.", "source": "docs/guides/realtime-dashboard.md", "recipe": { "template": "dashboard", "file": "src/cards.tsx" } },
-  { "id": "guides/jsx-without-react", "title": "Render JSX without React", "summary": "TypeScript pages, a shared layout and external CSS, rendered on the server without browser framework code.", "source": "docs/guides/jsx-without-react.md", "codeSource": "docs/snippets/site.tsx", "recipe": { "template": "site", "file": "src/app.tsx" } },
+  { "id": "guides/jsx-without-react", "title": "Render JSX without React", "summary": "TypeScript pages, a shared layout and external CSS, rendered on the server without browser framework code.", "source": "docs/guides/jsx-without-react.md", "codeSource": "docs/snippets/site.tsx", "recipe": { "template": "site", "file": "src/app.tsx" } },
   { "id": "guides/chatroom", "title": "Build a chatroom with live presence", "summary": "Reusable server-side components, validated forms and disconnect-aware presence, without custom browser socket glue.", "source": "docs/guides/chatroom.md", "recipe": { "template": "chat", "file": "src/chatroom.tsx" } },
   { "id": "guides/typed-websockets", "title": "Share typed WebSocket contracts", "summary": "One match route, separate join/move/resume handlers and validated client/server payloads from the same schema.", "source": "docs/guides/typed-websockets.md", "recipe": { "template": "socket", "file": "src/handlers.ts" } },
   { "id": "guides/http-websocket", "title": "Serve HTTP and WebSockets on one port", "summary": "An Express endpoint and raw socket route share one listener with one explicit shutdown owner.", "source": "docs/guides/http-websocket.md", "recipe": { "template": "http-ws", "file": "src/app.tsx" } },
@@ -12,8 +12,8 @@
   { "id": "runtime-diagnostics", "title": "Understand runtime failures before retrying", "summary": "Safe authentication, authorization, validation and application errors, with actual retry and cancellation guarantees.", "source": "docs/RUNTIME_DIAGNOSTICS.md" },
   { "id": "agent-access", "title": "Optional read-only agent documentation access", "summary": "Configure local MCP search and exact recipe retrieval without adding dependencies to Redweb servers.", "source": "docs/AGENT_ACCESS.md" },
   { "id": "live-html", "title": "Pages, components, state, actions, and CSS", "summary": "Server-side TSX, automatic updates, keyed lists, lifecycle, and static export.", "source": "docs/LIVE_HTML.md" },
-  { "id": "socket-contracts", "title": "Typed socket routes and handlers", "summary": "Shared validation, client/server types, protocol errors, and join/move/resume.", "source": "docs/SOCKET_CONTRACTS.md" },
-  { "id": "socket-pages", "title": "Server-side TSX for custom socket routes", "summary": "Typed handler bindings, private page state and one generated client connection without handwritten browser glue.", "source": "docs/SOCKET_PAGES.md" },
+  { "id": "socket-contracts", "title": "Typed socket routes and handlers", "summary": "Shared validation, client/server types, protocol errors, and join/move/resume.", "source": "docs/SOCKET_CONTRACTS.md" },
+  { "id": "socket-pages", "title": "Server-side TSX for custom socket routes", "summary": "Typed handler bindings, private page state and one generated client connection without handwritten browser glue.", "source": "docs/SOCKET_PAGES.md" },
   { "id": "room-authorization", "title": "Private rooms and shared request identity", "summary": "Explicit entry policies, bounded authorization, trusted context, publication and revocation.", "source": "docs/ROOM_AUTHORIZATION.md" },
   { "id": "operations", "title": "Deploy and operate socket services", "summary": "Readiness, shutdown, capacity, reconnection, and distributed boundaries.", "source": "docs/MULTIPLAYER_OPERATIONS.md" },
   { "id": "production-contract", "title": "Production guarantees and limits", "summary": "Resource ownership, delivery semantics, compatibility, and release gates.", "source": "docs/PRODUCTION_READINESS.md" },

package/index.d.ts

@@ -35,9 +35,9 @@ declare module 'redweb' {
         isAssigned: boolean;
         sendJson(data: unknown): boolean;
         broadcast(data: unknown): number;
-        context?: RedWebConnectionContext;
-        /** Present on an attached page connection; checks the actual page class and connection lifetime. */
-        page?<Page extends object>(PageClass: new () => Page): Page;
+        context?: RedWebConnectionContext;
+        /** Present on an attached page connection; checks the actual page class and connection lifetime. */
+        page?<Page extends object>(PageClass: new () => Page): Page;
         joinRoom?(roomId: string): boolean;
         /** Bounded permission check followed by atomic membership insertion. */
         enterRoom?(roomId: string): Promise<boolean>;
@@ -51,57 +51,57 @@ declare module 'redweb' {
         sendBinaryEvent?(value: unknown): Promise<boolean>;
     };
 
-    export interface RedWebConnectionContext extends RequestContext {
+    export interface RedWebConnectionContext extends RequestContext {
         readonly connectionId: string;
         readonly principal: unknown;
         session: unknown | null;
         metadata: Record<string, unknown>;
         readonly protocol?: Readonly<{ version: string }>;
-    }
-
-    /** A deliberate, safe command rejection, unlike an unexpected application error. */
-    export class ClientError extends Error { constructor(message: string); }
-    export interface ClientEvent { type: string; payload: unknown; }
-    export interface ConnectedClientsOptions<Page extends object, Identity> {
-        /** Must still equal the admitted principal. Returning another identity never transfers a connection. */
-        identity(context: RedWebConnectionContext): Identity | undefined | false | Promise<Identity | undefined | false>;
-        page(): new () => Page;
-        project(client: ConnectedClient<Page, Identity>, room: string, online: readonly Identity[]): Partial<Page> | Promise<Partial<Page>>;
-        authorizationTimeoutMs?: number;
-        projectionTimeoutMs?: number;
-        /** Explicitly classify domain errors safe to display; all other failures remain private. */
-        reject?(error: unknown): string | undefined;
-        errorState?(message: string): Partial<Page>;
-        /** Optional non-HTML client support. Redweb performs the final checked send. */
-        raw?: {
-            update(state: Partial<Page>): ClientEvent | Promise<ClientEvent>;
-            reject?(message: string): ClientEvent | Promise<ClientEvent>;
-        };
-    }
-    export class ConnectedClient<Page extends object, Identity = unknown> {
-        private constructor();
-        readonly socket: RedWebSocket;
-        readonly identity: Identity;
-        readonly page: Page;
-        readonly rooms: readonly string[];
-        /** Requires exactly one current room; use rooms for multi-room applications. */
-        readonly room: string;
-        /** Reserve room capacity, run a synchronous domain commit, and roll back new membership if it rejects. */
-        join(room: string, commit?: () => unknown): Promise<void>;
-        leave(room: string): boolean;
-    }
-    export class ConnectedClients<Page extends object, Identity = unknown> {
-        constructor(options: ConnectedClientsOptions<Page, Identity>);
-        get(socket: RedWebSocket): ConnectedClient<Page, Identity>;
-        refresh(room: string): Promise<unknown>;
-        bind<Schemas extends import('redweb/contract').SocketSchemas>(contract: import('redweb/contract').SocketContract<Schemas>): {
-            readonly protocol: { readonly versions: readonly string[] };
-            handler<Type extends keyof Schemas & string>(type: Type, callback: (
-                client: ConnectedClient<Page, Identity>, payload: import('redweb/contract').ContractOutput<Schemas[Type]>,
-            ) => unknown): import('redweb/contract').SocketHandler<import('redweb/contract').ContractInput<Schemas[Type]>>;
-        };
-    }
-    export function connectedClients<Page extends object, Identity>(options: ConnectedClientsOptions<Page, Identity>): ConnectedClients<Page, Identity>;
+    }
+
+    /** A deliberate, safe command rejection, unlike an unexpected application error. */
+    export class ClientError extends Error { constructor(message: string); }
+    export interface ClientEvent { type: string; payload: unknown; }
+    export interface ConnectedClientsOptions<Page extends object, Identity> {
+        /** Must still equal the admitted principal. Returning another identity never transfers a connection. */
+        identity(context: RedWebConnectionContext): Identity | undefined | false | Promise<Identity | undefined | false>;
+        page(): new () => Page;
+        project(client: ConnectedClient<Page, Identity>, room: string, online: readonly Identity[]): Partial<Page> | Promise<Partial<Page>>;
+        authorizationTimeoutMs?: number;
+        projectionTimeoutMs?: number;
+        /** Explicitly classify domain errors safe to display; all other failures remain private. */
+        reject?(error: unknown): string | undefined;
+        errorState?(message: string): Partial<Page>;
+        /** Optional non-HTML client support. Redweb performs the final checked send. */
+        raw?: {
+            update(state: Partial<Page>): ClientEvent | Promise<ClientEvent>;
+            reject?(message: string): ClientEvent | Promise<ClientEvent>;
+        };
+    }
+    export class ConnectedClient<Page extends object, Identity = unknown> {
+        private constructor();
+        readonly socket: RedWebSocket;
+        readonly identity: Identity;
+        readonly page: Page;
+        readonly rooms: readonly string[];
+        /** Requires exactly one current room; use rooms for multi-room applications. */
+        readonly room: string;
+        /** Reserve room capacity, run a synchronous domain commit, and roll back new membership if it rejects. */
+        join(room: string, commit?: () => unknown): Promise<void>;
+        leave(room: string): boolean;
+    }
+    export class ConnectedClients<Page extends object, Identity = unknown> {
+        constructor(options: ConnectedClientsOptions<Page, Identity>);
+        get(socket: RedWebSocket): ConnectedClient<Page, Identity>;
+        refresh(room: string): Promise<unknown>;
+        bind<Schemas extends import('redweb/contract').SocketSchemas>(contract: import('redweb/contract').SocketContract<Schemas>): {
+            readonly protocol: { readonly versions: readonly string[] };
+            handler<Type extends keyof Schemas & string>(type: Type, callback: (
+                client: ConnectedClient<Page, Identity>, payload: import('redweb/contract').ContractOutput<Schemas[Type]>,
+            ) => unknown): import('redweb/contract').SocketHandler<import('redweb/contract').ContractInput<Schemas[Type]>>;
+        };
+    }
+    export function connectedClients<Page extends object, Identity>(options: ConnectedClientsOptions<Page, Identity>): ConnectedClients<Page, Identity>;
 
     export interface AdmissionContext {
         signal: AbortSignal;
@@ -328,9 +328,9 @@ declare module 'redweb' {
 
     /** ─────────────────── ROUTES & HANDLERS ─────────────────── */
 
-    export interface SocketRouteConfig {
-        /** Opt-in server-side clients, with RoomRegistry membership and private page projection. */
-        connections?: ConnectedClients<any, any>;
+    export interface SocketRouteConfig {
+        /** Opt-in server-side clients, with RoomRegistry membership and private page projection. */
+        connections?: ConnectedClients<any, any>;
         path: string;
         handlers: Array<new () => BaseHandler>;
         services?: Array<new () => SocketService>;
@@ -460,8 +460,8 @@ declare module 'redweb' {
         enter(roomId: string, socket: RedWebSocket): Promise<boolean>;
         leave(roomId: string, socket: RedWebSocket): boolean;
         leaveAll(socket: RedWebSocket): number;
-        members(roomId: string): RedWebSocket[];
-        roomsFor(socket: RedWebSocket): string[];
+        members(roomId: string): RedWebSocket[];
+        roomsFor(socket: RedWebSocket): string[];
         has(roomId: string, socket: RedWebSocket): boolean;
         broadcast(roomId: string, data: unknown, options?: { except?: RedWebSocket }): number;
         broadcastFrom(socket: RedWebSocket, roomId: string, data: unknown, options?: { except?: RedWebSocket }): number;
@@ -603,9 +603,9 @@ declare module 'redweb' {
         dispose(): Promise<boolean>;
     }
 
-    export type PageOptions = {
-        /** Use a registered custom route for this private live page's typed TSX commands and rendering. */
-        socket?: new () => SocketRoute;
+    export type PageOptions = {
+        /** Use a registered custom route for this private live page's typed TSX commands and rendering. */
+        socket?: new () => SocketRoute;
         template?: string;
         css?: string | readonly string[];
         live?: boolean;
@@ -648,6 +648,21 @@ declare module 'redweb' {
             (this: This, initialValue: Value) => Value;
     }
 
+    export interface LiveResourceDecorator extends LiveStateDecorator {}
+
+    export interface LiveInjectDecorator {
+        (target: object, propertyKey: string): void;
+        <This, Value>(value: undefined, context: ClassFieldDecoratorContext<This, Value>):
+            (this: This, initialValue: Value) => Value;
+    }
+
+    /** A server-owned keyed publisher for connection-scoped page state. */
+    export class LiveResource<Value = unknown, Key extends string | number | bigint | boolean = string> {
+        publish(key: Key, value: Value): number;
+    }
+
+    export function liveResource<Value = unknown, Key extends string | number | bigint | boolean = string>(): LiveResource<Value, Key>;
+
     export interface LiveActionDecorator {
         (target: object, propertyKey: string, descriptor: PropertyDescriptor): void | PropertyDescriptor;
         <This, Value extends (this: This, ...args: any[]) => any>(
@@ -680,6 +695,18 @@ declare module 'redweb' {
     export function component<Props = void>(render: (properties: Props) => HtmlFragment):
         (properties: Props) => HtmlFragment;
     export function state(options?: StateOptions): LiveStateDecorator;
+    /** Keeps this state field synchronized with values published for its server-derived key. */
+    export function resource<Value, Key extends string | number | bigint | boolean>(
+        source: LiveResource<Value, Key>, select: (page: any) => Key | null | undefined
+    ): LiveResourceDecorator;
+    /** Receives an explicit instance from defineApp({ providers }). */
+    export function inject(provider: string): LiveInjectDecorator;
+    export interface UploadedFile {
+        readonly stream: import('stream').Readable;
+        readonly type: string;
+        readonly name: string | null;
+    }
+    export function upload(options?: { maxBytes?: number; accept?: string | readonly string[] }): LiveActionDecorator;
     export function action(): LiveActionDecorator;
     export interface ActionAuthorization<Input> {
         authorize: (context: LivePageConnectionContext, input: Input) => boolean | Promise<boolean>;
@@ -717,14 +744,20 @@ declare module 'redweb' {
             client?: string;
             runtime?: string;
             css?: string;
+            /** Same-origin bounded streaming endpoint used by rw-upload and rw-paste. */
+            upload?: string;
         };
         sessionTtlMs?: number;
         maxSessions?: number;
         maxConcurrentRenders?: number;
         /** Phase-local render/route and final owned-HTTP cleanup bound; defaults to 1000ms, not a total application deadline. */
         shutdownTimeoutMs?: number;
+        /** Maximum time Redweb will receive a live page upload stream before cancelling it; defaults to 30000ms. */
+        uploadTimeoutMs?: number;
         heartbeat?: HeartbeatOptions;
         origins?: string[] | ((origin: string | undefined, request: import('http').IncomingMessage) => boolean | Promise<boolean>);
+        /** Explicit application-owned instances available through @inject fields on pages. */
+        providers?: Record<string, unknown>;
     }
 
     export type LiveHtmlAuthentication = {
@@ -773,6 +806,8 @@ declare module 'redweb' {
         pages?: readonly LivePageClass[];
         sockets?: ReadonlyArray<new () => SocketRoute>;
         services?: ReadonlyArray<new () => ApplicationService>;
+        /** Application-owned instances available to decorated page fields. Redweb never constructs them. */
+        providers?: Record<string, unknown>;
         httpServices?: RedWebOptions['services'];
         startupTimeoutMs?: number;
         /** Install process signal handlers only when run() is called; defaults to true. */

package/index.js

@@ -15,18 +15,18 @@ const {
 } = require('./src/ws');
 const { BaseHandler } = require('./src/ws/BaseHandler');
 const { defineSocketContract } = require('./contract');
-const { Application, defineApp } = require('./src/Application');
-const { connectedClients, ConnectedClients, ConnectedClient, ClientError } = require('./src/ws/ConnectedClients');
+const { Application, defineApp } = require('./src/Application');
+const { connectedClients, ConnectedClients, ConnectedClient, ClientError } = require('./src/ws/ConnectedClients');
 const HttpServer = require('./src/http/HttpServer');
 const HttpsServer = require('./src/http/HttpsServer');
-const { action, attribute, codeBlock, component, defineSite, each, exportStatic, html, HtmlRenderer, LiveHtmlServer, LivePage, page, start, state, url, view } = require('./src/htmx');
+const { action, attribute, codeBlock, component, defineSite, each, exportStatic, html, HtmlRenderer, inject, LiveHtmlServer, LivePage, LiveResource, liveResource, page, resource, start, state, upload, url, view } = require('./src/htmx');
 module.exports = {
     Application,
-    defineApp,
-    connectedClients,
-    ConnectedClients,
-    ConnectedClient,
-    ClientError,
+    defineApp,
+    connectedClients,
+    ConnectedClients,
+    ConnectedClient,
+    ClientError,
     HttpServer,
     HttpsServer,
     BaseHttpServer,
@@ -55,11 +55,16 @@ module.exports = {
     exportStatic,
     html,
     HtmlRenderer,
+    inject,
     LiveHtmlServer,
     LivePage,
+    LiveResource,
+    liveResource,
     page,
+    resource,
     start,
     state,
+    upload,
     url,
     view
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "redweb",
-  "version": "0.16.2",
+  "version": "0.16.3",
   "description": "A small Node.js foundation for HTTP, WebSockets, multiplayer services, and server-rendered HTML",
   "main": "index.js",
   "types": "index.d.ts",
@@ -44,7 +44,7 @@
   "scripts": {
     "pretest": "node scripts/build-live-html-examples.js --check && node scripts/generate-protocol-types.js --check && node scripts/generate-docs.js --check && tsc -p tests/types/tsconfig.json && tsc -p tests/types/tsconfig.jsxdev.json && tsc -p tests/types/tsconfig.standard.json",
     "prepack": "node scripts/build-live-html-examples.js --check && node scripts/generate-docs.js --check",
-    "prepublishOnly": "node scripts/generate-docs.js --release-check",
+    "prepublishOnly": "node scripts/generate-docs.js --release-check && node node_modules/jest/bin/jest.js tests/unit/documentation.unit.test.js --runInBand --coverage=false",
     "generate:docs": "node scripts/generate-docs.js",
     "verify:docs:mcp": "npm --prefix integrations/docs-mcp test",
     "verify:cli": "c8 --all --src=bin --include=bin/redweb.js --reporter=text --reporter=json --reports-dir=coverage/cli-entrypoint --check-coverage --lines=100 --branches=100 --functions=100 --statements=100 node node_modules/jest/bin/jest.js tests/integration/init-cli.integration.test.js tests/integration/add-cli.integration.test.js --testNamePattern=\"redweb init CLI integration|human and subprocess CLI\" --runInBand --coverage=false",
@@ -108,7 +108,7 @@
     "verify:package:examples:coverage": "node node_modules/jest/bin/jest.js tests/unit/packed-action.unit.test.js tests/unit/example-dependencies.unit.test.js tests/unit/example-probe.unit.test.js tests/integration/packed-action.integration.test.js tests/integration/example-dependencies.integration.test.js --runInBand --coverage --collectCoverageFrom=scripts/lib/performProbeAction.js --collectCoverageFrom=scripts/lib/verify-example-dependencies.js --collectCoverageFrom=scripts/lib/example-dependency-probe.cjs --coverageDirectory=coverage/example-dependency-tools",
     "verify:package:browser:coverage": "node node_modules/jest/bin/jest.js tests/unit/browser-pages.unit.test.js tests/unit/packed-browser-verifier.unit.test.js tests/unit/browser-coverage-cleanup.unit.test.js tests/integration/packed-browser-verifier.integration.test.js --runInBand --silent --coverage --collectCoverageFrom=scripts/lib/verify-packed-browser.js --collectCoverageFrom=scripts/lib/BrowserPages.js --coverageDirectory=coverage/packed-browser-verifier",
     "verify:client:link": "node --test tests/integration/npm-link.integration.test.cjs",
-    "test": "npx jest --testPathIgnorePatterns=soak-.*[.]test[.]js$ --testPathIgnorePatterns=benchmark-measurement[.]integration[.]test[.]js$"
+    "test": "npx jest --testPathIgnorePatterns=soak-tools[.]integration[.]test[.]js$ --testPathIgnorePatterns=benchmark-measurement[.]integration[.]test[.]js$"
   },
   "files": [
     "bin",
@@ -159,13 +159,13 @@
     "@types/ws": "^8.18.1",
     "cors": "^2.8.5",
     "express": "^4.22.2",
-    "redweb-client": "^0.3.0",
+    "redweb-client": "^0.3.1",
     "ws": "^8.21.3"
   },
-  "overrides": {
-    "express": { "qs": "6.16.0" }
-  },
-  "devDependencies": {
+  "overrides": {
+    "express": { "qs": "6.16.0" }
+  },
+  "devDependencies": {
     "@types/jest": "^29.5.12",
     "c8": "^10.1.3",
     "expect": "29.7.0",

package/recipes/foundation/README.md

@@ -1,7 +1,7 @@
-# Neutral application foundation
-
-The default initializer creates a working TypeScript/TSX application without choosing a product domain. Replace `HomePage` with your pages, then add socket routes and application services as needed.
-
-Use `--with auth,multiplayer` when the project needs those dependency sets. `auth` adds Express, Zod, their TypeScript declarations, and the Node version required by Redweb's native-SQLite authentication path. `multiplayer` adds Redweb Client and Zod. Capabilities adjust the manifest without copying dashboard, chat, counter, or match-example source. Use an explicit `--template` only when you want a complete example walkthrough.
-
-Run `npm test` for the real HTTP and lifecycle checks. Pass `--bare` only when you intentionally do not want the test directory, test scripts, or test-only coverage dependency; the runnable source, assets, build scripts, and development setup stay the same.
+# Neutral application foundation
+
+The default initializer creates a working TypeScript/TSX application without choosing a product domain. Replace `HomePage` with your pages, then add socket routes and application services as needed.
+
+Use `--with auth,multiplayer` when the project needs those dependency sets. `auth` adds Express, Zod, their TypeScript declarations, and the Node version required by Redweb's native-SQLite authentication path. `multiplayer` adds Redweb Client and Zod. Capabilities adjust the manifest without copying dashboard, chat, counter, or match-example source. Use an explicit `--template` only when you want a complete example walkthrough.
+
+Run `npm test` for the real HTTP and lifecycle checks. Pass `--bare` only when you intentionally do not want the test directory, test scripts, or test-only coverage dependency; the runnable source, assets, build scripts, and development setup stay the same.

package/recipes/foundation/app.test.cjs

@@ -1,15 +1,15 @@
-const test = require('node:test');
-const assert = require('node:assert/strict');
-const { listen } = require('./network.cjs');
-
-test('neutral application foundation serves real HTML and CSS', { timeout: 10000 }, async t => {
-    const origin = await listen(t);
-    const response = await fetch(origin);
-    assert.equal(response.status, 200);
-    const document = await response.text();
-    assert.match(document, /<h1>Redweb is ready\.<\/h1>/);
-    const css = document.match(/<link rel="stylesheet" href="([^"]+)"/)[1];
-    const stylesheet = await fetch(`${origin}${css}`);
-    assert.equal(stylesheet.status, 200);
-    assert.match(await stylesheet.text(), /\.home/);
-});
+const test = require('node:test');
+const assert = require('node:assert/strict');
+const { listen } = require('./network.cjs');
+
+test('neutral application foundation serves real HTML and CSS', { timeout: 10000 }, async t => {
+    const origin = await listen(t);
+    const response = await fetch(origin);
+    assert.equal(response.status, 200);
+    const document = await response.text();
+    assert.match(document, /<h1>Redweb is ready\.<\/h1>/);
+    const css = document.match(/<link rel="stylesheet" href="([^"]+)"/)[1];
+    const stylesheet = await fetch(`${origin}${css}`);
+    assert.equal(stylesheet.status, 200);
+    assert.match(await stylesheet.text(), /\.home/);
+});

package/recipes/foundation/app.tsx

@@ -1,12 +1,12 @@
-import { defineApp, page } from 'redweb';
-
-@page('/', { live: false, css: 'app.css' })
-export class HomePage {
-    render() {
-        return <main class="home"><h1>Redweb is ready.</h1><p>Replace this page with your application.</p></main>;
-    }
-}
-
-export const app = defineApp({ pages: [HomePage], port: Number(process.env.PORT ?? 8181), templateRoot: __dirname });
-
-if (require.main === module) app.run();
+import { defineApp, page } from 'redweb';
+
+@page('/', { live: false, css: 'app.css' })
+export class HomePage {
+    render() {
+        return <main class="home"><h1>Redweb is ready.</h1><p>Replace this page with your application.</p></main>;
+    }
+}
+
+export const app = defineApp({ pages: [HomePage], port: Number(process.env.PORT ?? 8181), templateRoot: __dirname });
+
+if (require.main === module) app.run();

package/recipes/shared/README.md

@@ -40,10 +40,10 @@ and application-specific rate limits. These starters are demonstrations, not a h
 Never commit secrets; `.env` is ignored but is not loaded automatically.
 
 `npx --no-install redweb doctor --json` reports configuration problems without changing your files.
-## Dependency security
-
-This starter includes an application-root npm override for Express 4's `qs`
-dependency, selecting patched `qs@6.16.0`. Keep the override when merging this
-starter into an existing application, refresh its lockfile and run `npm audit`.
-Overrides in Redweb's own package do not apply to installed consumers. Recheck
-upstream Express/body-parser releases before removing this temporary mitigation.
+## Dependency security
+
+This starter includes an application-root npm override for Express 4's `qs`
+dependency, selecting patched `qs@6.16.0`. Keep the override when merging this
+starter into an existing application, refresh its lockfile and run `npm audit`.
+Overrides in Redweb's own package do not apply to installed consumers. Recheck
+upstream Express/body-parser releases before removing this temporary mitigation.