Merge branch 'main' into feature/vite-config-path

Author: brendt

CHANGELOG.md

@@ -2,7 +2,41 @@
 
 All notable changes to this project will be documented in this file.
 
-## [1.4.0](https://github.com/tempestphp/tempest-framework/compare/v1.3.1..1.4.0)  —  2025-07-17
+## [1.5.0](https://github.com/tempestphp/tempest-framework/compare/v1.4.0..1.5.0)  —  2025-07-28
+
+### 🚨 Breaking changes
+
+- **http**: [**breaking**] add cross-site request forgery protection (#1411) ([2bb4fcf](https://github.com/tempestphp/tempest-framework/commit/2bb4fcf8de8fa774f779d2d77eb031e7a76a94f7))
+- **view**: [**breaking**] properly handle scoped view-components (#1435) ([c6237db](https://github.com/tempestphp/tempest-framework/commit/c6237db3b01b9736b27bf22fde1a7ae60a044f05))
+- **view**: [**breaking**] support overriding vendor view components (#1439) ([3483fe4](https://github.com/tempestphp/tempest-framework/commit/3483fe4f051035ee025a073ecce1515df1ec31bb))
+
+### 🚀 Features
+
+- **database**: add pagination support (#1417) ([07f9f4d](https://github.com/tempestphp/tempest-framework/commit/07f9f4dddc4949124a57a9ac08d0e1c71b67b1ef))
+- **http**: add `csrf_token` function (#1415) ([4386578](https://github.com/tempestphp/tempest-framework/commit/43865783825e953e8eed006ef81ca92d442c2382))
+- **kv-store**: introduce key-value store component (#1252) ([daee10d](https://github.com/tempestphp/tempest-framework/commit/daee10dcd19f05248e13c9d08f048fa3989470f2))
+- **response**: add a new Response class for json responses (#1423) ([d25bc44](https://github.com/tempestphp/tempest-framework/commit/d25bc4470fd04027edf3b5c37e03464cb69e094f))
+- **router**: json serializable as response body (#1420) ([4af4429](https://github.com/tempestphp/tempest-framework/commit/4af44299b02b17689df7a58efd672db7f2423f29))
+- **view**: make default slot available as dynamic slot (#1419) ([0f6f261](https://github.com/tempestphp/tempest-framework/commit/0f6f261039e2fcc68a4040586b480587440e2942))
+- **view**: add meta command for view components (#1424) ([051078b](https://github.com/tempestphp/tempest-framework/commit/051078b321928cf13a046a296ad889e59f39bba3))
+- **view**: add `x-markdown` component (#1430) ([b81b9ed](https://github.com/tempestphp/tempest-framework/commit/b81b9edfbfde5c8c2b65baffb086edcc459674db))
+
+### 🐛 Bug fixes
+
+- **http**: don't cache csrf tokens in views (#1412) ([9db65f0](https://github.com/tempestphp/tempest-framework/commit/9db65f0f58e1724bd9db7bf9257eddd641881ae1))
+- **http**: prevent CSRF token variable name collision (#1413) ([361c2fb](https://github.com/tempestphp/tempest-framework/commit/361c2fbf6a39e9a0b17b99fff7e2991a62a85daa))
+- **http**: properly handle cookies lifecycle (#1416) ([1089f61](https://github.com/tempestphp/tempest-framework/commit/1089f61c4d72aa4c25b9823b1d84eabe8c77dd97))
+- **http**: respect file session locks during reads (#1418) ([55cb06f](https://github.com/tempestphp/tempest-framework/commit/55cb06f6e246c0730e51fdf06f360eef41d27643))
+- **mapper**: support casting `bool`, `int`, `float` and enums (#1414) ([c7292e2](https://github.com/tempestphp/tempest-framework/commit/c7292e2f0cd0ff93e1919f94e98ee60f6cdd927a))
+- **vite**: prevent syntax errors on prefetching script (#1421) ([15c303e](https://github.com/tempestphp/tempest-framework/commit/15c303e99caf33bbb40322430f3140521ca1785d))
+
+### 🚜 Refactor
+
+- **view**: attach tokens to relevant elements for raw slot content support (#1428) ([47a9ad3](https://github.com/tempestphp/tempest-framework/commit/47a9ad36719f95feabb2704efccfb7a1d68c1819))
+- **view**: improve slot importing to prevent view compiler failures (#1431) ([4284e8b](https://github.com/tempestphp/tempest-framework/commit/4284e8bdf65c2c0f9e2078f24aed1bbaf92470da))
+
+
+## [1.4.0](https://github.com/tempestphp/tempest-framework/compare/v1.3.1..v1.4.0)  —  2025-07-17
 
 ### 🚀 Features
 
@@ -591,7 +625,7 @@ All notable changes to this project will be documented in this file.
 - add release script ([e1a1107](https://github.com/tempestphp/tempest-framework/commit/e1a110750c7329c8dcfb05bfc9cc5bfa0152ca8e))
 
 
-## [1.0.0-alpha.2](https://github.com/tempestphp/tempest-framework/compare/0.0.1..v1.0.0-alpha.2)  —  2024-10-04
+## 1.0.0-alpha.2  —  2024-10-04
 
 ### 🚀 Features
 
@@ -656,7 +690,3 @@ All notable changes to this project will be documented in this file.
 - update console readme (#444) ([7c6f1b0](https://github.com/tempestphp/tempest-framework/commit/7c6f1b083fd429d58cbde2d30b4af2143e9c58f0))
 
 
-## 0.0.1  —  2024-02-09
-
-
-<!-- generated by git-cliff -->

composer.json

@@ -17,6 +17,7 @@
         "giggsey/libphonenumber-for-php-lite": "^9.0",
         "guzzlehttp/guzzle": "^7.8.2",
         "laminas/laminas-diactoros": "^3.3",
+        "league/commonmark": "^2.7",
         "league/flysystem": "^3.29.1",
         "monolog/monolog": "^3.7.0",
         "nette/php-generator": "^4.1.6",

packages/console/src/Components/Interactive/MultipleChoiceComponent.php

@@ -73,7 +73,7 @@ private function getControls(): array
             ...(
                 $this->bufferEnabled
                     ? [
-                        'esc' => 'select',
+                        'esc or /' => 'select',
                     ] : [
                         '/' => 'filter',
                         'space' => 'select',
@@ -110,6 +110,11 @@ public function input(string $key): void
             $this->bufferEnabled = true;
             $this->updateQuery();
 
+            return;
+        } elseif ($this->bufferEnabled && $key === '/') {
+            $this->bufferEnabled = false;
+            $this->updateQuery();
+
             return;
         }
 

packages/console/src/Components/Interactive/SingleChoiceComponent.php

@@ -74,7 +74,7 @@ private function getControls(): array
         $controls = [];
 
         if ($this->bufferEnabled) {
-            $controls['esc'] = 'select';
+            $controls['esc or /'] = 'select';
         } else {
             $controls['/'] = 'filter';
             $controls['space'] = 'select';
@@ -114,6 +114,10 @@ public function input(string $key): void
         if (! $this->bufferEnabled && $key === '/') {
             $this->bufferEnabled = true;
 
+            return;
+        } elseif ($this->bufferEnabled && $key === '/') {
+            $this->bufferEnabled = false;
+
             return;
         }
 

packages/console/src/HasConsole.php

@@ -144,6 +144,13 @@ public function keyValue(string $key, ?string $value = null): self
         return $this;
     }
 
+    public function header(string $header, ?string $subheader = null): self
+    {
+        $this->console->header($header, $subheader);
+
+        return $this;
+    }
+
     public function task(string $label, null|Process|Closure $handler): bool
     {
         return $this->console->task($label, $handler);

packages/core/src/FrameworkKernel.php

@@ -168,7 +168,15 @@ public function registerInternalStorage(): self
         $path = $this->root . '/.tempest';
 
         if (! is_dir($path)) {
-            mkdir($path, recursive: true);
+            if (file_exists($path)) {
+                throw new \RuntimeException('Unable to create internal storage directory, as a file with the same name (.tempest) already exists.');
+            }
+
+            if (! mkdir($path, recursive: true)) {
+                throw new \RuntimeException('Unable to create internal storage directory because of insufficient user permission on the root directory.');
+            }
+        } elseif (! is_writable($path)) {
+            throw new \RuntimeException('Insufficient user permission to write to internal storage directory.');
         }
 
         $this->internalStorage = realpath($path);

packages/core/src/Kernel.php

@@ -8,7 +8,7 @@
 
 interface Kernel
 {
-    public const string VERSION = '1.4.0';
+    public const string VERSION = '1.5.0';
 
     public string $root {
         get;

packages/discovery/src/DiscoveryLocation.php

@@ -23,7 +23,7 @@ public function __construct(
 
     public function isVendor(): bool
     {
-        return str_contains($this->path, '/vendor/') || str_contains($this->path, '\\vendor\\');
+        return str_contains($this->path, '/vendor/') || str_contains($this->path, '\\vendor\\') || str_starts_with($this->namespace, 'Tempest');
     }
 
     public function toClassName(string $path): string

packages/http/src/Session/CsrfTokenComponent.php

@@ -83,6 +83,17 @@ public function get(string $key, mixed $default = null): mixed
         return $value;
     }
 
+    /** @return \Tempest\Validation\Rule[] */
+    public function getErrorsFor(string $name): array
+    {
+        return $this->get(self::VALIDATION_ERRORS)[$name] ?? [];
+    }
+
+    public function getOriginalValueFor(string $name, mixed $default = ''): mixed
+    {
+        return $this->get(self::ORIGINAL_VALUES)[$name] ?? $default;
+    }
+
     public function getPreviousUrl(): string
     {
         return $this->get(self::PREVIOUS_URL, default: '');