@agimon-ai/po-core 0.0.0-alpha.0

package/dist/src/web/services/apiPaths/index.d.mts

@@ -0,0 +1,81 @@
+//#region src/web/services/apiPaths/index.d.ts
+/**
+ * The byte shape of every URL the browser addresses a package API with.
+ *
+ * One implementation, because the alternative is what the cockpit had: twelve
+ * packages each concatenating `${sessionApiPath(id)}/plugins/${base}${path}` by
+ * hand, three of them spelling the prefix a fourth way, and one rewriting it
+ * with `String.replace`. A route that moves by one character is answered by the
+ * service worker out of the signed bundle cache instead of the network, so the
+ * failure is a 404 nowhere near its cause.
+ *
+ * The host builds the same strings from `doomApiMountPath` and, for OpenAPI
+ * templating, from `createApiDocuments`. Those live in the node half of this
+ * package and cannot be imported here: `src/web` is a separate tree that reads
+ * neither `src/schemas` nor `src/services`. The three are held together by the
+ * agreement test instead of by a call, which is the guarantee that matters.
+ */
+/**
+ * Who a request is addressed to. Ids are supplied decoded and encoded here, so
+ * a caller never double-encodes and a workspace with a slash in its name cannot
+ * forge a path segment.
+ */
+export type ApiScopeAddress = {
+  readonly scope: 'global';
+} | {
+  readonly scope: 'workspace';
+  readonly workspaceId: string;
+} | {
+  readonly scope: 'session';
+  readonly workspaceId: string;
+  readonly sessionId: string;
+};
+/** Path parameter values, substituted into a route's `:name` segments. */
+export type ApiParams = Readonly<Record<string, string>>;
+/** Query values a route may carry. `undefined` drops the parameter rather than sending 'undefined'. */
+export type ApiQuery = Readonly<Record<string, string | number | boolean | undefined>>;
+/** The base path the host reserves for its own settings API, mounted outside /plugins/. */
+export declare const SETTINGS_BASE_PATH = "settings";
+/** The scope's own resource root: what a host-owned route hangs off. */
+export declare function scopeApiRoot(address: ApiScopeAddress): string;
+/**
+ * The mount one package API answers on.
+ *
+ * `basePath` is omitted for a host-owned route, which the contract schema
+ * already spells that way, so the session file-bytes route and a plugin route
+ * are the same construction with one field different rather than two code
+ * paths. `settings` is the host's own API and sits beside `/plugins`, not
+ * under it.
+ */
+export declare function pluginApiBase(address: ApiScopeAddress, basePath: string | undefined): string;
+/**
+ * The query string, `encodeURIComponent` per pair rather than `URLSearchParams`.
+ *
+ * `URLSearchParams` writes a space as `+`, which only decodes back to a space
+ * under form-urlencoded rules; `%20` decodes to a space everywhere. The
+ * cockpit already relied on that difference in both directions, so picking the
+ * unambiguous one is what lets a single encoder serve every route.
+ */
+export declare function apiQueryString(query: ApiQuery | undefined): string;
+/**
+ * The absolute, root-relative URL for one route.
+ *
+ * Root-relative on purpose: the sealed transport refuses anything else, because
+ * a remote session relays its requests through a gateway that will not forward
+ * an arbitrary origin.
+ *
+ * A route whose path is exactly '/' addresses the mount itself, so the slash is
+ * dropped rather than doubled.
+ */
+export declare function pluginApiUrl(address: ApiScopeAddress, basePath: string | undefined, path: string, query?: ApiQuery, params?: ApiParams): string;
+/**
+ * Substitutes a route's `:name` segments, as Hono spells them.
+ *
+ * Encoded per segment, so a value containing a slash names one segment rather
+ * than inventing another. A declared parameter with no value is left as the
+ * literal `:name`, which fails visibly at the route instead of silently
+ * addressing the collection above it.
+ */
+export declare function applyPathParams(path: string, params: ApiParams | undefined): string;
+//#endregion
+//# sourceMappingURL=index.d.mts.map

package/dist/src/web/services/apiPaths/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../../src/web/services/apiPaths/index.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;YAsBY;WACG;;WACA;WAA6B;;WAC7B;WAA2B;WAA8B;;;YAG5D,YAAY,SAAS;;YAGrB,WAAW,SAAS;;qBAGnB;;wBAGG,aAAa,SAAS;;;;;;;;;;wBAgBtB,cAAc,SAAS,iBAAiB;;;;;;;;;wBAexC,eAAe,OAAO;;;;;;;;;;;wBAoBtB,aACd,SAAS,iBACT,8BACA,cACA,QAAQ,UACR,SAAS;;;;;;;;;wBAcK,gBAAgB,cAAc,QAAQ"}

package/dist/src/web/services/apiPaths/index.mjs

@@ -0,0 +1,78 @@
+//#region src/web/services/apiPaths/index.ts
+/** The base path the host reserves for its own settings API, mounted outside /plugins/. */
+const SETTINGS_BASE_PATH = "settings";
+/** The scope's own resource root: what a host-owned route hangs off. */
+function scopeApiRoot(address) {
+	if (address.scope === "global") return "/api";
+	const workspace = `/api/workspaces/${encodeURIComponent(address.workspaceId)}`;
+	if (address.scope === "workspace") return workspace;
+	return `${workspace}/sessions/${encodeURIComponent(address.sessionId)}`;
+}
+/**
+* The mount one package API answers on.
+*
+* `basePath` is omitted for a host-owned route, which the contract schema
+* already spells that way, so the session file-bytes route and a plugin route
+* are the same construction with one field different rather than two code
+* paths. `settings` is the host's own API and sits beside `/plugins`, not
+* under it.
+*/
+function pluginApiBase(address, basePath) {
+	const root = scopeApiRoot(address);
+	if (basePath === void 0) return root;
+	if (basePath === "settings") return `${root}/${SETTINGS_BASE_PATH}`;
+	return `${root}/plugins/${basePath}`;
+}
+/**
+* The query string, `encodeURIComponent` per pair rather than `URLSearchParams`.
+*
+* `URLSearchParams` writes a space as `+`, which only decodes back to a space
+* under form-urlencoded rules; `%20` decodes to a space everywhere. The
+* cockpit already relied on that difference in both directions, so picking the
+* unambiguous one is what lets a single encoder serve every route.
+*/
+function apiQueryString(query) {
+	if (query === void 0) return "";
+	const pairs = [];
+	for (const [key, value] of Object.entries(query)) {
+		if (value === void 0) continue;
+		pairs.push(`${encodeURIComponent(key)}=${encodeURIComponent(String(value))}`);
+	}
+	return pairs.length === 0 ? "" : `?${pairs.join("&")}`;
+}
+/**
+* The absolute, root-relative URL for one route.
+*
+* Root-relative on purpose: the sealed transport refuses anything else, because
+* a remote session relays its requests through a gateway that will not forward
+* an arbitrary origin.
+*
+* A route whose path is exactly '/' addresses the mount itself, so the slash is
+* dropped rather than doubled.
+*/
+function pluginApiUrl(address, basePath, path, query, params) {
+	const resolved = applyPathParams(path, params);
+	return `${pluginApiBase(address, basePath)}${resolved === "/" ? "" : resolved}${apiQueryString(query)}`;
+}
+/**
+* Substitutes a route's `:name` segments, as Hono spells them.
+*
+* Encoded per segment, so a value containing a slash names one segment rather
+* than inventing another. A declared parameter with no value is left as the
+* literal `:name`, which fails visibly at the route instead of silently
+* addressing the collection above it.
+*/
+function applyPathParams(path, params) {
+	if (params === void 0 || !path.includes(":")) return path;
+	return path.split("/").map((segment) => {
+		if (!segment.startsWith(":")) return segment;
+		const catchAll = segment.endsWith("}");
+		const value = params[catchAll ? segment.slice(1, segment.indexOf("{")) : segment.slice(1)];
+		if (value === void 0) return segment;
+		return catchAll ? value.split("/").map(encodeURIComponent).join("/") : encodeURIComponent(value);
+	}).join("/");
+}
+//#endregion
+export { SETTINGS_BASE_PATH, apiQueryString, applyPathParams, pluginApiBase, pluginApiUrl, scopeApiRoot };
+
+//# sourceMappingURL=index.mjs.map

package/dist/src/web/services/apiPaths/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../src/web/services/apiPaths/index.ts"],"sourcesContent":["/**\n * The byte shape of every URL the browser addresses a package API with.\n *\n * One implementation, because the alternative is what the cockpit had: twelve\n * packages each concatenating `${sessionApiPath(id)}/plugins/${base}${path}` by\n * hand, three of them spelling the prefix a fourth way, and one rewriting it\n * with `String.replace`. A route that moves by one character is answered by the\n * service worker out of the signed bundle cache instead of the network, so the\n * failure is a 404 nowhere near its cause.\n *\n * The host builds the same strings from `doomApiMountPath` and, for OpenAPI\n * templating, from `createApiDocuments`. Those live in the node half of this\n * package and cannot be imported here: `src/web` is a separate tree that reads\n * neither `src/schemas` nor `src/services`. The three are held together by the\n * agreement test instead of by a call, which is the guarantee that matters.\n */\n\n/**\n * Who a request is addressed to. Ids are supplied decoded and encoded here, so\n * a caller never double-encodes and a workspace with a slash in its name cannot\n * forge a path segment.\n */\nexport type ApiScopeAddress =\n  | { readonly scope: 'global' }\n  | { readonly scope: 'workspace'; readonly workspaceId: string }\n  | { readonly scope: 'session'; readonly workspaceId: string; readonly sessionId: string };\n\n/** Path parameter values, substituted into a route's `:name` segments. */\nexport type ApiParams = Readonly<Record<string, string>>;\n\n/** Query values a route may carry. `undefined` drops the parameter rather than sending 'undefined'. */\nexport type ApiQuery = Readonly<Record<string, string | number | boolean | undefined>>;\n\n/** The base path the host reserves for its own settings API, mounted outside /plugins/. */\nexport const SETTINGS_BASE_PATH = 'settings';\n\n/** The scope's own resource root: what a host-owned route hangs off. */\nexport function scopeApiRoot(address: ApiScopeAddress): string {\n  if (address.scope === 'global') return '/api';\n  const workspace = `/api/workspaces/${encodeURIComponent(address.workspaceId)}`;\n  if (address.scope === 'workspace') return workspace;\n  return `${workspace}/sessions/${encodeURIComponent(address.sessionId)}`;\n}\n\n/**\n * The mount one package API answers on.\n *\n * `basePath` is omitted for a host-owned route, which the contract schema\n * already spells that way, so the session file-bytes route and a plugin route\n * are the same construction with one field different rather than two code\n * paths. `settings` is the host's own API and sits beside `/plugins`, not\n * under it.\n */\nexport function pluginApiBase(address: ApiScopeAddress, basePath: string | undefined): string {\n  const root = scopeApiRoot(address);\n  if (basePath === undefined) return root;\n  if (basePath === SETTINGS_BASE_PATH) return `${root}/${SETTINGS_BASE_PATH}`;\n  return `${root}/plugins/${basePath}`;\n}\n\n/**\n * The query string, `encodeURIComponent` per pair rather than `URLSearchParams`.\n *\n * `URLSearchParams` writes a space as `+`, which only decodes back to a space\n * under form-urlencoded rules; `%20` decodes to a space everywhere. The\n * cockpit already relied on that difference in both directions, so picking the\n * unambiguous one is what lets a single encoder serve every route.\n */\nexport function apiQueryString(query: ApiQuery | undefined): string {\n  if (query === undefined) return '';\n  const pairs: string[] = [];\n  for (const [key, value] of Object.entries(query)) {\n    if (value === undefined) continue;\n    pairs.push(`${encodeURIComponent(key)}=${encodeURIComponent(String(value))}`);\n  }\n  return pairs.length === 0 ? '' : `?${pairs.join('&')}`;\n}\n\n/**\n * The absolute, root-relative URL for one route.\n *\n * Root-relative on purpose: the sealed transport refuses anything else, because\n * a remote session relays its requests through a gateway that will not forward\n * an arbitrary origin.\n *\n * A route whose path is exactly '/' addresses the mount itself, so the slash is\n * dropped rather than doubled.\n */\nexport function pluginApiUrl(\n  address: ApiScopeAddress,\n  basePath: string | undefined,\n  path: string,\n  query?: ApiQuery,\n  params?: ApiParams,\n): string {\n  const resolved = applyPathParams(path, params);\n  return `${pluginApiBase(address, basePath)}${resolved === '/' ? '' : resolved}${apiQueryString(query)}`;\n}\n\n/**\n * Substitutes a route's `:name` segments, as Hono spells them.\n *\n * Encoded per segment, so a value containing a slash names one segment rather\n * than inventing another. A declared parameter with no value is left as the\n * literal `:name`, which fails visibly at the route instead of silently\n * addressing the collection above it.\n */\nexport function applyPathParams(path: string, params: ApiParams | undefined): string {\n  if (params === undefined || !path.includes(':')) return path;\n  return path\n    .split('/')\n    .map((segment) => {\n      if (!segment.startsWith(':')) return segment;\n      // Hono writes a multi-segment parameter as `:name{.+}`. Its value is a\n      // relative path, so the slashes inside it are structure the route means\n      // to keep; encoding them would address one oddly-named file instead of a\n      // nested one. Each piece is still escaped on its own.\n      const catchAll = segment.endsWith('}');\n      const name = catchAll ? segment.slice(1, segment.indexOf('{')) : segment.slice(1);\n      const value = params[name];\n      if (value === undefined) return segment;\n      return catchAll ? value.split('/').map(encodeURIComponent).join('/') : encodeURIComponent(value);\n    })\n    .join('/');\n}\n"],"mappings":";;AAkCA,MAAa,qBAAqB;;AAGlC,SAAgB,aAAa,SAAkC;CAC7D,IAAI,QAAQ,UAAU,UAAU,OAAO;CACvC,MAAM,YAAY,mBAAmB,mBAAmB,QAAQ,WAAW;CAC3E,IAAI,QAAQ,UAAU,aAAa,OAAO;CAC1C,OAAO,GAAG,UAAU,YAAY,mBAAmB,QAAQ,SAAS;AACtE;;;;;;;;;;AAWA,SAAgB,cAAc,SAA0B,UAAsC;CAC5F,MAAM,OAAO,aAAa,OAAO;CACjC,IAAI,aAAa,KAAA,GAAW,OAAO;CACnC,IAAI,aAAA,YAAiC,OAAO,GAAG,KAAK,GAAG;CACvD,OAAO,GAAG,KAAK,WAAW;AAC5B;;;;;;;;;AAUA,SAAgB,eAAe,OAAqC;CAClE,IAAI,UAAU,KAAA,GAAW,OAAO;CAChC,MAAM,QAAkB,CAAC;CACzB,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,KAAK,GAAG;EAChD,IAAI,UAAU,KAAA,GAAW;EACzB,MAAM,KAAK,GAAG,mBAAmB,GAAG,EAAE,GAAG,mBAAmB,OAAO,KAAK,CAAC,GAAG;CAC9E;CACA,OAAO,MAAM,WAAW,IAAI,KAAK,IAAI,MAAM,KAAK,GAAG;AACrD;;;;;;;;;;;AAYA,SAAgB,aACd,SACA,UACA,MACA,OACA,QACQ;CACR,MAAM,WAAW,gBAAgB,MAAM,MAAM;CAC7C,OAAO,GAAG,cAAc,SAAS,QAAQ,IAAI,aAAa,MAAM,KAAK,WAAW,eAAe,KAAK;AACtG;;;;;;;;;AAUA,SAAgB,gBAAgB,MAAc,QAAuC;CACnF,IAAI,WAAW,KAAA,KAAa,CAAC,KAAK,SAAS,GAAG,GAAG,OAAO;CACxD,OAAO,KACJ,MAAM,GAAG,CAAC,CACV,KAAK,YAAY;EAChB,IAAI,CAAC,QAAQ,WAAW,GAAG,GAAG,OAAO;EAKrC,MAAM,WAAW,QAAQ,SAAS,GAAG;EAErC,MAAM,QAAQ,OADD,WAAW,QAAQ,MAAM,GAAG,QAAQ,QAAQ,GAAG,CAAC,IAAI,QAAQ,MAAM,CAAC;EAEhF,IAAI,UAAU,KAAA,GAAW,OAAO;EAChC,OAAO,WAAW,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,KAAK,GAAG,IAAI,mBAAmB,KAAK;CACjG,CAAC,CAAC,CACD,KAAK,GAAG;AACb"}

package/dist/src/web/services/apiRoutes/index.cjs

@@ -0,0 +1,47 @@
+const require_index = require("../apiPaths/index.cjs");
+//#region src/web/services/apiRoutes/index.ts
+let resolveWorkspace;
+/** The host owns session summaries; package clients use the same ownership lookup. */
+function bindSessionApiWorkspace(resolve) {
+	resolveWorkspace = resolve;
+}
+/** Canonical global resource. */
+function globalApiPath() {
+	return require_index.scopeApiRoot({ scope: "global" });
+}
+/** Canonical workspace resource. */
+function workspaceApiPath(workspaceId) {
+	return require_index.scopeApiRoot({
+		scope: "workspace",
+		workspaceId
+	});
+}
+/**
+* Who a session id names, resolved through the host's ownership lookup.
+*
+* A generated client takes a session id and nothing else, because a page knows
+* which session it is showing and must not be trusted to say which workspace
+* owns it. Unknown ownership throws rather than guessing, since guessing would
+* address a different scope.
+*/
+function sessionApiAddress(sessionId) {
+	const workspaceId = resolveWorkspace?.(sessionId);
+	if (!workspaceId) throw new Error(`Workspace is unavailable for session '${sessionId}'.`);
+	return {
+		scope: "session",
+		workspaceId,
+		sessionId
+	};
+}
+/** Canonical session resource. Unknown ownership must never select a different scope. */
+function sessionApiPath(sessionId) {
+	return require_index.scopeApiRoot(sessionApiAddress(sessionId));
+}
+//#endregion
+exports.bindSessionApiWorkspace = bindSessionApiWorkspace;
+exports.globalApiPath = globalApiPath;
+exports.sessionApiAddress = sessionApiAddress;
+exports.sessionApiPath = sessionApiPath;
+exports.workspaceApiPath = workspaceApiPath;
+
+//# sourceMappingURL=index.cjs.map

package/dist/src/web/services/apiRoutes/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":["scopeApiRoot"],"sources":["../../../../../src/web/services/apiRoutes/index.ts"],"sourcesContent":["import { type ApiScopeAddress, scopeApiRoot } from '../apiPaths';\n\nlet resolveWorkspace: ((sessionId: string) => string | undefined) | undefined;\n\n/** The host owns session summaries; package clients use the same ownership lookup. */\nexport function bindSessionApiWorkspace(resolve: (sessionId: string) => string | undefined): void {\n  resolveWorkspace = resolve;\n}\n\n/** Canonical global resource. */\nexport function globalApiPath(): string {\n  return scopeApiRoot({ scope: 'global' });\n}\n\n/** Canonical workspace resource. */\nexport function workspaceApiPath(workspaceId: string): string {\n  return scopeApiRoot({ scope: 'workspace', workspaceId });\n}\n\n/**\n * Who a session id names, resolved through the host's ownership lookup.\n *\n * A generated client takes a session id and nothing else, because a page knows\n * which session it is showing and must not be trusted to say which workspace\n * owns it. Unknown ownership throws rather than guessing, since guessing would\n * address a different scope.\n */\nexport function sessionApiAddress(sessionId: string): ApiScopeAddress {\n  const workspaceId = resolveWorkspace?.(sessionId);\n  if (!workspaceId) throw new Error(`Workspace is unavailable for session '${sessionId}'.`);\n  return { scope: 'session', workspaceId, sessionId };\n}\n\n/** Canonical session resource. Unknown ownership must never select a different scope. */\nexport function sessionApiPath(sessionId: string): string {\n  return scopeApiRoot(sessionApiAddress(sessionId));\n}\n"],"mappings":";;AAEA,IAAI;;AAGJ,SAAgB,wBAAwB,SAA0D;CAChG,mBAAmB;AACrB;;AAGA,SAAgB,gBAAwB;CACtC,OAAOA,cAAAA,aAAa,EAAE,OAAO,SAAS,CAAC;AACzC;;AAGA,SAAgB,iBAAiB,aAA6B;CAC5D,OAAOA,cAAAA,aAAa;EAAE,OAAO;EAAa;CAAY,CAAC;AACzD;;;;;;;;;AAUA,SAAgB,kBAAkB,WAAoC;CACpE,MAAM,cAAc,mBAAmB,SAAS;CAChD,IAAI,CAAC,aAAa,MAAM,IAAI,MAAM,yCAAyC,UAAU,GAAG;CACxF,OAAO;EAAE,OAAO;EAAW;EAAa;CAAU;AACpD;;AAGA,SAAgB,eAAe,WAA2B;CACxD,OAAOA,cAAAA,aAAa,kBAAkB,SAAS,CAAC;AAClD"}

package/dist/src/web/services/apiRoutes/index.d.mts

@@ -0,0 +1,21 @@
+import { ApiScopeAddress } from "../apiPaths/index.mjs";
+//#region src/web/services/apiRoutes/index.d.ts
+/** The host owns session summaries; package clients use the same ownership lookup. */
+export declare function bindSessionApiWorkspace(resolve: (sessionId: string) => string | undefined): void;
+/** Canonical global resource. */
+export declare function globalApiPath(): string;
+/** Canonical workspace resource. */
+export declare function workspaceApiPath(workspaceId: string): string;
+/**
+ * Who a session id names, resolved through the host's ownership lookup.
+ *
+ * A generated client takes a session id and nothing else, because a page knows
+ * which session it is showing and must not be trusted to say which workspace
+ * owns it. Unknown ownership throws rather than guessing, since guessing would
+ * address a different scope.
+ */
+export declare function sessionApiAddress(sessionId: string): ApiScopeAddress;
+/** Canonical session resource. Unknown ownership must never select a different scope. */
+export declare function sessionApiPath(sessionId: string): string;
+//#endregion
+//# sourceMappingURL=index.d.mts.map

package/dist/src/web/services/apiRoutes/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../../src/web/services/apiRoutes/index.ts"],"mappings":";;;wBAKgB,wBAAwB,UAAU;;wBAKlC;;wBAKA,iBAAiB;;;;;;;;;wBAYjB,kBAAkB,oBAAoB;;wBAOtC,eAAe"}

package/dist/src/web/services/apiRoutes/index.mjs

@@ -0,0 +1,43 @@
+import { scopeApiRoot } from "../apiPaths/index.mjs";
+//#region src/web/services/apiRoutes/index.ts
+let resolveWorkspace;
+/** The host owns session summaries; package clients use the same ownership lookup. */
+function bindSessionApiWorkspace(resolve) {
+	resolveWorkspace = resolve;
+}
+/** Canonical global resource. */
+function globalApiPath() {
+	return scopeApiRoot({ scope: "global" });
+}
+/** Canonical workspace resource. */
+function workspaceApiPath(workspaceId) {
+	return scopeApiRoot({
+		scope: "workspace",
+		workspaceId
+	});
+}
+/**
+* Who a session id names, resolved through the host's ownership lookup.
+*
+* A generated client takes a session id and nothing else, because a page knows
+* which session it is showing and must not be trusted to say which workspace
+* owns it. Unknown ownership throws rather than guessing, since guessing would
+* address a different scope.
+*/
+function sessionApiAddress(sessionId) {
+	const workspaceId = resolveWorkspace?.(sessionId);
+	if (!workspaceId) throw new Error(`Workspace is unavailable for session '${sessionId}'.`);
+	return {
+		scope: "session",
+		workspaceId,
+		sessionId
+	};
+}
+/** Canonical session resource. Unknown ownership must never select a different scope. */
+function sessionApiPath(sessionId) {
+	return scopeApiRoot(sessionApiAddress(sessionId));
+}
+//#endregion
+export { bindSessionApiWorkspace, globalApiPath, sessionApiAddress, sessionApiPath, workspaceApiPath };
+
+//# sourceMappingURL=index.mjs.map

package/dist/src/web/services/apiRoutes/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../src/web/services/apiRoutes/index.ts"],"sourcesContent":["import { type ApiScopeAddress, scopeApiRoot } from '../apiPaths';\n\nlet resolveWorkspace: ((sessionId: string) => string | undefined) | undefined;\n\n/** The host owns session summaries; package clients use the same ownership lookup. */\nexport function bindSessionApiWorkspace(resolve: (sessionId: string) => string | undefined): void {\n  resolveWorkspace = resolve;\n}\n\n/** Canonical global resource. */\nexport function globalApiPath(): string {\n  return scopeApiRoot({ scope: 'global' });\n}\n\n/** Canonical workspace resource. */\nexport function workspaceApiPath(workspaceId: string): string {\n  return scopeApiRoot({ scope: 'workspace', workspaceId });\n}\n\n/**\n * Who a session id names, resolved through the host's ownership lookup.\n *\n * A generated client takes a session id and nothing else, because a page knows\n * which session it is showing and must not be trusted to say which workspace\n * owns it. Unknown ownership throws rather than guessing, since guessing would\n * address a different scope.\n */\nexport function sessionApiAddress(sessionId: string): ApiScopeAddress {\n  const workspaceId = resolveWorkspace?.(sessionId);\n  if (!workspaceId) throw new Error(`Workspace is unavailable for session '${sessionId}'.`);\n  return { scope: 'session', workspaceId, sessionId };\n}\n\n/** Canonical session resource. Unknown ownership must never select a different scope. */\nexport function sessionApiPath(sessionId: string): string {\n  return scopeApiRoot(sessionApiAddress(sessionId));\n}\n"],"mappings":";;AAEA,IAAI;;AAGJ,SAAgB,wBAAwB,SAA0D;CAChG,mBAAmB;AACrB;;AAGA,SAAgB,gBAAwB;CACtC,OAAO,aAAa,EAAE,OAAO,SAAS,CAAC;AACzC;;AAGA,SAAgB,iBAAiB,aAA6B;CAC5D,OAAO,aAAa;EAAE,OAAO;EAAa;CAAY,CAAC;AACzD;;;;;;;;;AAUA,SAAgB,kBAAkB,WAAoC;CACpE,MAAM,cAAc,mBAAmB,SAAS;CAChD,IAAI,CAAC,aAAa,MAAM,IAAI,MAAM,yCAAyC,UAAU,GAAG;CACxF,OAAO;EAAE,OAAO;EAAW;EAAa;CAAU;AACpD;;AAGA,SAAgB,eAAe,WAA2B;CACxD,OAAO,aAAa,kBAAkB,SAAS,CAAC;AAClD"}

package/dist/src/web/services/mcpWidget.cjs

@@ -0,0 +1,9 @@
+//#region src/web/services/mcpWidget.ts
+/** Types one package-owned MCP widget without coupling the route to the composed host. */
+function defineMcpWidget(widget) {
+	return widget;
+}
+//#endregion
+exports.defineMcpWidget = defineMcpWidget;
+
+//# sourceMappingURL=mcpWidget.cjs.map

package/dist/src/web/services/mcpWidget.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpWidget.cjs","names":[],"sources":["../../../../src/web/services/mcpWidget.ts"],"sourcesContent":["import type { DoomMcpWidgetProps } from '../types/mcpWidget';\n\n/** Types one package-owned MCP widget without coupling the route to the composed host. */\nexport function defineMcpWidget<T extends (props: DoomMcpWidgetProps) => unknown>(widget: T): T {\n  return widget;\n}\n"],"mappings":";;AAGA,SAAgB,gBAAkE,QAAc;CAC9F,OAAO;AACT"}

package/dist/src/web/services/mcpWidget.d.mts

@@ -0,0 +1,6 @@
+import { DoomMcpWidgetProps } from "../types/mcpWidget.mjs";
+//#region src/web/services/mcpWidget.d.ts
+/** Types one package-owned MCP widget without coupling the route to the composed host. */
+export declare function defineMcpWidget<T extends (props: DoomMcpWidgetProps) => unknown>(widget: T): T;
+//#endregion
+//# sourceMappingURL=mcpWidget.d.mts.map

package/dist/src/web/services/mcpWidget.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpWidget.d.mts","names":[],"sources":["../../../../src/web/services/mcpWidget.ts"],"mappings":";;;wBAGgB,gBAAgB,WAAW,OAAO,gCAAgC,QAAQ,IAAI"}

package/dist/src/web/services/mcpWidget.mjs

@@ -0,0 +1,9 @@
+//#region src/web/services/mcpWidget.ts
+/** Types one package-owned MCP widget without coupling the route to the composed host. */
+function defineMcpWidget(widget) {
+	return widget;
+}
+//#endregion
+export { defineMcpWidget };
+
+//# sourceMappingURL=mcpWidget.mjs.map

package/dist/src/web/services/mcpWidget.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpWidget.mjs","names":[],"sources":["../../../../src/web/services/mcpWidget.ts"],"sourcesContent":["import type { DoomMcpWidgetProps } from '../types/mcpWidget';\n\n/** Types one package-owned MCP widget without coupling the route to the composed host. */\nexport function defineMcpWidget<T extends (props: DoomMcpWidgetProps) => unknown>(widget: T): T {\n  return widget;\n}\n"],"mappings":";;AAGA,SAAgB,gBAAkE,QAAc;CAC9F,OAAO;AACT"}

package/dist/src/web/services/sessionRegistry/index.cjs

@@ -0,0 +1,70 @@
+//#region src/web/services/sessionRegistry/index.ts
+/** Overrides the runtime directory the hub and its session servers share. */
+const REGISTRY_DIR_ENV = "PO_RUNTIME_DIR";
+/** The version a hub advertisement must carry to be read at all. */
+const HUB_ADVERTISEMENT_VERSION = 1;
+const RUN_DIRECTORY = "run";
+const HUB_ADVERTISEMENT_FILE = "hub.json";
+/**
+* The single definition of where the session registry lives.
+*
+* The hub, the session server, and any package that spawns a session must land
+* on the same directory or a spawned session never appears in the rail. This
+* used to be copied into each of them; it lives here so there is one answer.
+*/
+function resolveRegistryDir(input) {
+	if (input.flagValue) return input.flagValue;
+	if (input.envValue) return input.envValue;
+	return `${input.poHomeDir}/${RUN_DIRECTORY}`;
+}
+/** Where the hub publishes its local address, at the registry root. */
+function hubAdvertisementPath(registryDir) {
+	return `${registryDir}/${HUB_ADVERTISEMENT_FILE}`;
+}
+/**
+* Reads a hub advertisement's contents.
+*
+* Like the lineage sidecar, every failure collapses to "no hub advertised",
+* because a caller can do nothing different with a torn write than with a
+* missing file. The url is required to be a loopback http origin: this file is
+* a discovery hint for local processes, and honouring an arbitrary address out
+* of it would let anything that can write the registry directory redirect a
+* session-create call to a host of its choosing.
+*/
+function parseHubAdvertisement(raw) {
+	let parsed;
+	try {
+		parsed = JSON.parse(raw);
+	} catch {
+		return;
+	}
+	if (typeof parsed !== "object" || parsed === null) return void 0;
+	const record = parsed;
+	if (record.version !== 1) return void 0;
+	if (typeof record.url !== "string" || !isLoopbackHttpUrl(record.url)) return void 0;
+	if (typeof record.pid !== "number" || !Number.isInteger(record.pid) || record.pid <= 0) return void 0;
+	return {
+		version: 1,
+		url: record.url,
+		pid: record.pid
+	};
+}
+/** Whether a url is plain http to this machine, which is all this file may name. */
+function isLoopbackHttpUrl(value) {
+	let url;
+	try {
+		url = new URL(value);
+	} catch {
+		return false;
+	}
+	if (url.protocol !== "http:") return false;
+	return url.hostname === "127.0.0.1" || url.hostname === "localhost" || url.hostname === "[::1]" || url.hostname === "::1";
+}
+//#endregion
+exports.HUB_ADVERTISEMENT_VERSION = HUB_ADVERTISEMENT_VERSION;
+exports.REGISTRY_DIR_ENV = REGISTRY_DIR_ENV;
+exports.hubAdvertisementPath = hubAdvertisementPath;
+exports.parseHubAdvertisement = parseHubAdvertisement;
+exports.resolveRegistryDir = resolveRegistryDir;
+
+//# sourceMappingURL=index.cjs.map

package/dist/src/web/services/sessionRegistry/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":[],"sources":["../../../../../src/web/services/sessionRegistry/index.ts"],"sourcesContent":["import type { HubAdvertisement, RegistryDirInput } from '../../types/sessionRegistry';\n\n/** Overrides the runtime directory the hub and its session servers share. */\nexport const REGISTRY_DIR_ENV = 'PO_RUNTIME_DIR';\n\n/** The version a hub advertisement must carry to be read at all. */\nexport const HUB_ADVERTISEMENT_VERSION = 1;\n\nconst RUN_DIRECTORY = 'run';\nconst HUB_ADVERTISEMENT_FILE = 'hub.json';\n\n/**\n * The single definition of where the session registry lives.\n *\n * The hub, the session server, and any package that spawns a session must land\n * on the same directory or a spawned session never appears in the rail. This\n * used to be copied into each of them; it lives here so there is one answer.\n */\nexport function resolveRegistryDir(input: RegistryDirInput): string {\n  if (input.flagValue) return input.flagValue;\n  if (input.envValue) return input.envValue;\n  return `${input.poHomeDir}/${RUN_DIRECTORY}`;\n}\n\n/** Where the hub publishes its local address, at the registry root. */\nexport function hubAdvertisementPath(registryDir: string): string {\n  return `${registryDir}/${HUB_ADVERTISEMENT_FILE}`;\n}\n\n/**\n * Reads a hub advertisement's contents.\n *\n * Like the lineage sidecar, every failure collapses to \"no hub advertised\",\n * because a caller can do nothing different with a torn write than with a\n * missing file. The url is required to be a loopback http origin: this file is\n * a discovery hint for local processes, and honouring an arbitrary address out\n * of it would let anything that can write the registry directory redirect a\n * session-create call to a host of its choosing.\n */\nexport function parseHubAdvertisement(raw: string): HubAdvertisement | undefined {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(raw);\n  } catch {\n    return undefined;\n  }\n  if (typeof parsed !== 'object' || parsed === null) return undefined;\n  const record = parsed as Partial<HubAdvertisement>;\n  if (record.version !== HUB_ADVERTISEMENT_VERSION) return undefined;\n  if (typeof record.url !== 'string' || !isLoopbackHttpUrl(record.url)) return undefined;\n  if (typeof record.pid !== 'number' || !Number.isInteger(record.pid) || record.pid <= 0) return undefined;\n  return { version: HUB_ADVERTISEMENT_VERSION, url: record.url, pid: record.pid };\n}\n\n/** Whether a url is plain http to this machine, which is all this file may name. */\nfunction isLoopbackHttpUrl(value: string): boolean {\n  let url: URL;\n  try {\n    url = new URL(value);\n  } catch {\n    return false;\n  }\n  if (url.protocol !== 'http:') return false;\n  return (\n    url.hostname === '127.0.0.1' || url.hostname === 'localhost' || url.hostname === '[::1]' || url.hostname === '::1'\n  );\n}\n"],"mappings":";;AAGA,MAAa,mBAAmB;;AAGhC,MAAa,4BAA4B;AAEzC,MAAM,gBAAgB;AACtB,MAAM,yBAAyB;;;;;;;;AAS/B,SAAgB,mBAAmB,OAAiC;CAClE,IAAI,MAAM,WAAW,OAAO,MAAM;CAClC,IAAI,MAAM,UAAU,OAAO,MAAM;CACjC,OAAO,GAAG,MAAM,UAAU,GAAG;AAC/B;;AAGA,SAAgB,qBAAqB,aAA6B;CAChE,OAAO,GAAG,YAAY,GAAG;AAC3B;;;;;;;;;;;AAYA,SAAgB,sBAAsB,KAA2C;CAC/E,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,GAAG;CACzB,QAAQ;EACN;CACF;CACA,IAAI,OAAO,WAAW,YAAY,WAAW,MAAM,OAAO,KAAA;CAC1D,MAAM,SAAS;CACf,IAAI,OAAO,YAAA,GAAuC,OAAO,KAAA;CACzD,IAAI,OAAO,OAAO,QAAQ,YAAY,CAAC,kBAAkB,OAAO,GAAG,GAAG,OAAO,KAAA;CAC7E,IAAI,OAAO,OAAO,QAAQ,YAAY,CAAC,OAAO,UAAU,OAAO,GAAG,KAAK,OAAO,OAAO,GAAG,OAAO,KAAA;CAC/F,OAAO;EAAE,SAAA;EAAoC,KAAK,OAAO;EAAK,KAAK,OAAO;CAAI;AAChF;;AAGA,SAAS,kBAAkB,OAAwB;CACjD,IAAI;CACJ,IAAI;EACF,MAAM,IAAI,IAAI,KAAK;CACrB,QAAQ;EACN,OAAO;CACT;CACA,IAAI,IAAI,aAAa,SAAS,OAAO;CACrC,OACE,IAAI,aAAa,eAAe,IAAI,aAAa,eAAe,IAAI,aAAa,WAAW,IAAI,aAAa;AAEjH"}

package/dist/src/web/services/sessionRegistry/index.d.mts

@@ -0,0 +1,29 @@
+import { HubAdvertisement, RegistryDirInput } from "../../types/sessionRegistry.mjs";
+//#region src/web/services/sessionRegistry/index.d.ts
+/** Overrides the runtime directory the hub and its session servers share. */
+export declare const REGISTRY_DIR_ENV = "PO_RUNTIME_DIR";
+/** The version a hub advertisement must carry to be read at all. */
+export declare const HUB_ADVERTISEMENT_VERSION = 1;
+/**
+ * The single definition of where the session registry lives.
+ *
+ * The hub, the session server, and any package that spawns a session must land
+ * on the same directory or a spawned session never appears in the rail. This
+ * used to be copied into each of them; it lives here so there is one answer.
+ */
+export declare function resolveRegistryDir(input: RegistryDirInput): string;
+/** Where the hub publishes its local address, at the registry root. */
+export declare function hubAdvertisementPath(registryDir: string): string;
+/**
+ * Reads a hub advertisement's contents.
+ *
+ * Like the lineage sidecar, every failure collapses to "no hub advertised",
+ * because a caller can do nothing different with a torn write than with a
+ * missing file. The url is required to be a loopback http origin: this file is
+ * a discovery hint for local processes, and honouring an arbitrary address out
+ * of it would let anything that can write the registry directory redirect a
+ * session-create call to a host of its choosing.
+ */
+export declare function parseHubAdvertisement(raw: string): HubAdvertisement | undefined;
+//#endregion
+//# sourceMappingURL=index.d.mts.map

package/dist/src/web/services/sessionRegistry/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../../src/web/services/sessionRegistry/index.ts"],"mappings":";;;qBAGa;;qBAGA;;;;;;;;wBAYG,mBAAmB,OAAO;;wBAO1B,qBAAqB;;;;;;;;;;;wBAcrB,sBAAsB,cAAc"}

package/dist/src/web/services/sessionRegistry/index.mjs

@@ -0,0 +1,66 @@
+//#region src/web/services/sessionRegistry/index.ts
+/** Overrides the runtime directory the hub and its session servers share. */
+const REGISTRY_DIR_ENV = "PO_RUNTIME_DIR";
+/** The version a hub advertisement must carry to be read at all. */
+const HUB_ADVERTISEMENT_VERSION = 1;
+const RUN_DIRECTORY = "run";
+const HUB_ADVERTISEMENT_FILE = "hub.json";
+/**
+* The single definition of where the session registry lives.
+*
+* The hub, the session server, and any package that spawns a session must land
+* on the same directory or a spawned session never appears in the rail. This
+* used to be copied into each of them; it lives here so there is one answer.
+*/
+function resolveRegistryDir(input) {
+	if (input.flagValue) return input.flagValue;
+	if (input.envValue) return input.envValue;
+	return `${input.poHomeDir}/${RUN_DIRECTORY}`;
+}
+/** Where the hub publishes its local address, at the registry root. */
+function hubAdvertisementPath(registryDir) {
+	return `${registryDir}/${HUB_ADVERTISEMENT_FILE}`;
+}
+/**
+* Reads a hub advertisement's contents.
+*
+* Like the lineage sidecar, every failure collapses to "no hub advertised",
+* because a caller can do nothing different with a torn write than with a
+* missing file. The url is required to be a loopback http origin: this file is
+* a discovery hint for local processes, and honouring an arbitrary address out
+* of it would let anything that can write the registry directory redirect a
+* session-create call to a host of its choosing.
+*/
+function parseHubAdvertisement(raw) {
+	let parsed;
+	try {
+		parsed = JSON.parse(raw);
+	} catch {
+		return;
+	}
+	if (typeof parsed !== "object" || parsed === null) return void 0;
+	const record = parsed;
+	if (record.version !== 1) return void 0;
+	if (typeof record.url !== "string" || !isLoopbackHttpUrl(record.url)) return void 0;
+	if (typeof record.pid !== "number" || !Number.isInteger(record.pid) || record.pid <= 0) return void 0;
+	return {
+		version: 1,
+		url: record.url,
+		pid: record.pid
+	};
+}
+/** Whether a url is plain http to this machine, which is all this file may name. */
+function isLoopbackHttpUrl(value) {
+	let url;
+	try {
+		url = new URL(value);
+	} catch {
+		return false;
+	}
+	if (url.protocol !== "http:") return false;
+	return url.hostname === "127.0.0.1" || url.hostname === "localhost" || url.hostname === "[::1]" || url.hostname === "::1";
+}
+//#endregion
+export { HUB_ADVERTISEMENT_VERSION, REGISTRY_DIR_ENV, hubAdvertisementPath, parseHubAdvertisement, resolveRegistryDir };
+
+//# sourceMappingURL=index.mjs.map

package/dist/src/web/services/sessionRegistry/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../src/web/services/sessionRegistry/index.ts"],"sourcesContent":["import type { HubAdvertisement, RegistryDirInput } from '../../types/sessionRegistry';\n\n/** Overrides the runtime directory the hub and its session servers share. */\nexport const REGISTRY_DIR_ENV = 'PO_RUNTIME_DIR';\n\n/** The version a hub advertisement must carry to be read at all. */\nexport const HUB_ADVERTISEMENT_VERSION = 1;\n\nconst RUN_DIRECTORY = 'run';\nconst HUB_ADVERTISEMENT_FILE = 'hub.json';\n\n/**\n * The single definition of where the session registry lives.\n *\n * The hub, the session server, and any package that spawns a session must land\n * on the same directory or a spawned session never appears in the rail. This\n * used to be copied into each of them; it lives here so there is one answer.\n */\nexport function resolveRegistryDir(input: RegistryDirInput): string {\n  if (input.flagValue) return input.flagValue;\n  if (input.envValue) return input.envValue;\n  return `${input.poHomeDir}/${RUN_DIRECTORY}`;\n}\n\n/** Where the hub publishes its local address, at the registry root. */\nexport function hubAdvertisementPath(registryDir: string): string {\n  return `${registryDir}/${HUB_ADVERTISEMENT_FILE}`;\n}\n\n/**\n * Reads a hub advertisement's contents.\n *\n * Like the lineage sidecar, every failure collapses to \"no hub advertised\",\n * because a caller can do nothing different with a torn write than with a\n * missing file. The url is required to be a loopback http origin: this file is\n * a discovery hint for local processes, and honouring an arbitrary address out\n * of it would let anything that can write the registry directory redirect a\n * session-create call to a host of its choosing.\n */\nexport function parseHubAdvertisement(raw: string): HubAdvertisement | undefined {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(raw);\n  } catch {\n    return undefined;\n  }\n  if (typeof parsed !== 'object' || parsed === null) return undefined;\n  const record = parsed as Partial<HubAdvertisement>;\n  if (record.version !== HUB_ADVERTISEMENT_VERSION) return undefined;\n  if (typeof record.url !== 'string' || !isLoopbackHttpUrl(record.url)) return undefined;\n  if (typeof record.pid !== 'number' || !Number.isInteger(record.pid) || record.pid <= 0) return undefined;\n  return { version: HUB_ADVERTISEMENT_VERSION, url: record.url, pid: record.pid };\n}\n\n/** Whether a url is plain http to this machine, which is all this file may name. */\nfunction isLoopbackHttpUrl(value: string): boolean {\n  let url: URL;\n  try {\n    url = new URL(value);\n  } catch {\n    return false;\n  }\n  if (url.protocol !== 'http:') return false;\n  return (\n    url.hostname === '127.0.0.1' || url.hostname === 'localhost' || url.hostname === '[::1]' || url.hostname === '::1'\n  );\n}\n"],"mappings":";;AAGA,MAAa,mBAAmB;;AAGhC,MAAa,4BAA4B;AAEzC,MAAM,gBAAgB;AACtB,MAAM,yBAAyB;;;;;;;;AAS/B,SAAgB,mBAAmB,OAAiC;CAClE,IAAI,MAAM,WAAW,OAAO,MAAM;CAClC,IAAI,MAAM,UAAU,OAAO,MAAM;CACjC,OAAO,GAAG,MAAM,UAAU,GAAG;AAC/B;;AAGA,SAAgB,qBAAqB,aAA6B;CAChE,OAAO,GAAG,YAAY,GAAG;AAC3B;;;;;;;;;;;AAYA,SAAgB,sBAAsB,KAA2C;CAC/E,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,GAAG;CACzB,QAAQ;EACN;CACF;CACA,IAAI,OAAO,WAAW,YAAY,WAAW,MAAM,OAAO,KAAA;CAC1D,MAAM,SAAS;CACf,IAAI,OAAO,YAAA,GAAuC,OAAO,KAAA;CACzD,IAAI,OAAO,OAAO,QAAQ,YAAY,CAAC,kBAAkB,OAAO,GAAG,GAAG,OAAO,KAAA;CAC7E,IAAI,OAAO,OAAO,QAAQ,YAAY,CAAC,OAAO,UAAU,OAAO,GAAG,KAAK,OAAO,OAAO,GAAG,OAAO,KAAA;CAC/F,OAAO;EAAE,SAAA;EAAoC,KAAK,OAAO;EAAK,KAAK,OAAO;CAAI;AAChF;;AAGA,SAAS,kBAAkB,OAAwB;CACjD,IAAI;CACJ,IAAI;EACF,MAAM,IAAI,IAAI,KAAK;CACrB,QAAQ;EACN,OAAO;CACT;CACA,IAAI,IAAI,aAAa,SAAS,OAAO;CACrC,OACE,IAAI,aAAa,eAAe,IAAI,aAAa,eAAe,IAAI,aAAa,WAAW,IAAI,aAAa;AAEjH"}

package/dist/src/web/services/testing/channels.cjs

@@ -0,0 +1,11 @@
+//#region src/web/services/testing/channels.ts
+function driveChannel(channel, sessionId, payload) {
+	const parsed = channel.parse(payload);
+	if (parsed === null) return { accepted: false };
+	channel.apply(sessionId, parsed);
+	return { accepted: true };
+}
+//#endregion
+exports.driveChannel = driveChannel;
+
+//# sourceMappingURL=channels.cjs.map

package/dist/src/web/services/testing/channels.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"channels.cjs","names":[],"sources":["../../../../../src/web/services/testing/channels.ts"],"sourcesContent":["import type { SessionChannelContribution } from '../../types/webPlugin';\n\nexport interface ChannelDelivery {\n  accepted: boolean;\n}\n\nexport function driveChannel(\n  channel: SessionChannelContribution,\n  sessionId: string,\n  payload: unknown,\n): ChannelDelivery {\n  const parsed: unknown = channel.parse(payload);\n  if (parsed === null) return { accepted: false };\n  channel.apply(sessionId, parsed);\n  return { accepted: true };\n}\n"],"mappings":";AAMA,SAAgB,aACd,SACA,WACA,SACiB;CACjB,MAAM,SAAkB,QAAQ,MAAM,OAAO;CAC7C,IAAI,WAAW,MAAM,OAAO,EAAE,UAAU,MAAM;CAC9C,QAAQ,MAAM,WAAW,MAAM;CAC/B,OAAO,EAAE,UAAU,KAAK;AAC1B"}

package/dist/src/web/services/testing/channels.d.mts

@@ -0,0 +1,8 @@
+import { SessionChannelContribution } from "../../types/webPlugin.mjs";
+//#region src/web/services/testing/channels.d.ts
+export interface ChannelDelivery {
+  accepted: boolean;
+}
+export declare function driveChannel(channel: SessionChannelContribution, sessionId: string, payload: unknown): ChannelDelivery;
+//#endregion
+//# sourceMappingURL=channels.d.mts.map

package/dist/src/web/services/testing/channels.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"channels.d.mts","names":[],"sources":["../../../../../src/web/services/testing/channels.ts"],"mappings":";;iBAEiB;EACf;;wBAGc,aACd,SAAS,4BACT,mBACA,mBACC"}

package/dist/src/web/services/testing/channels.mjs

@@ -0,0 +1,11 @@
+//#region src/web/services/testing/channels.ts
+function driveChannel(channel, sessionId, payload) {
+	const parsed = channel.parse(payload);
+	if (parsed === null) return { accepted: false };
+	channel.apply(sessionId, parsed);
+	return { accepted: true };
+}
+//#endregion
+export { driveChannel };
+
+//# sourceMappingURL=channels.mjs.map

package/dist/src/web/services/testing/channels.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"channels.mjs","names":[],"sources":["../../../../../src/web/services/testing/channels.ts"],"sourcesContent":["import type { SessionChannelContribution } from '../../types/webPlugin';\n\nexport interface ChannelDelivery {\n  accepted: boolean;\n}\n\nexport function driveChannel(\n  channel: SessionChannelContribution,\n  sessionId: string,\n  payload: unknown,\n): ChannelDelivery {\n  const parsed: unknown = channel.parse(payload);\n  if (parsed === null) return { accepted: false };\n  channel.apply(sessionId, parsed);\n  return { accepted: true };\n}\n"],"mappings":";AAMA,SAAgB,aACd,SACA,WACA,SACiB;CACjB,MAAM,SAAkB,QAAQ,MAAM,OAAO;CAC7C,IAAI,WAAW,MAAM,OAAO,EAAE,UAAU,MAAM;CAC9C,QAAQ,MAAM,WAAW,MAAM;CAC/B,OAAO,EAAE,UAAU,KAAK;AAC1B"}

package/dist/src/web/services/testing/index.cjs

@@ -0,0 +1,27 @@
+let react = require("react");
+let react_dom_server = require("react-dom/server");
+//#region src/web/services/testing/index.ts
+/** Tag-stripped text, so an assertion reads the page rather than the markup. */
+function textOf(html) {
+	return html.replaceAll(/<[^>]*>/gu, " ").replaceAll(/\s+/gu, " ").trim();
+}
+function renderPlugin(component, props) {
+	try {
+		const html = (0, react_dom_server.renderToStaticMarkup)((0, react.createElement)(component, props));
+		return {
+			html,
+			error: void 0,
+			includes: (text) => textOf(html).includes(text)
+		};
+	} catch (error) {
+		return {
+			html: "",
+			error: error instanceof Error ? error : new Error(String(error)),
+			includes: () => false
+		};
+	}
+}
+//#endregion
+exports.renderPlugin = renderPlugin;
+
+//# sourceMappingURL=index.cjs.map

package/dist/src/web/services/testing/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":["renderToStaticMarkup","createElement"],"sources":["../../../../../src/web/services/testing/index.ts"],"sourcesContent":["import { createElement } from 'react';\nimport type { ComponentType } from 'react';\nimport { renderToStaticMarkup } from 'react-dom/server';\n\n/**\n * One plugin component, rendered.\n *\n * No plugin component in the repository is imported by any test: stores and\n * pure helpers are covered per package, and the components are exercised only\n * by the browser suite. So the ordinary failures go unseen until a page is\n * opened, and the most ordinary of all is a component that throws on a state\n * the plugin can reach, which the host then catches and replaces with a\n * fallback nobody notices.\n *\n * Static markup rather than a DOM, matching the shared components package. It\n * proves a component mounts, reads the props the host actually sends, and puts\n * the expected text on the page. Clicks, effects, and Radix portals need a real\n * browser and stay with the Playwright suite.\n *\n * Callers pass components as values, never as JSX, so a plugin package needs no\n * JSX configuration in the project that holds its tests.\n */\n\nexport interface RenderedPlugin {\n  /** The markup, or an empty string when the component threw. */\n  html: string;\n  /** What the component threw, which the host would have swallowed. */\n  error: Error | undefined;\n  /** Whether the rendered markup contains this text, ignoring the tags around it. */\n  includes(text: string): boolean;\n}\n\n/** Tag-stripped text, so an assertion reads the page rather than the markup. */\nfunction textOf(html: string): string {\n  return html\n    .replaceAll(/<[^>]*>/gu, ' ')\n    .replaceAll(/\\s+/gu, ' ')\n    .trim();\n}\n\nexport function renderPlugin<Props extends object>(component: ComponentType<Props>, props: Props): RenderedPlugin {\n  try {\n    const html = renderToStaticMarkup(createElement(component, props));\n    return { html, error: undefined, includes: (text) => textOf(html).includes(text) };\n  } catch (error) {\n    // Returned rather than rethrown: the host catches a throwing item and keeps\n    // the page up, so a test wanting to prove that needs the error as a value.\n    return {\n      html: '',\n      error: error instanceof Error ? error : new Error(String(error)),\n      includes: () => false,\n    };\n  }\n}\n"],"mappings":";;;;AAiCA,SAAS,OAAO,MAAsB;CACpC,OAAO,KACJ,WAAW,aAAa,GAAG,CAAC,CAC5B,WAAW,SAAS,GAAG,CAAC,CACxB,KAAK;AACV;AAEA,SAAgB,aAAmC,WAAiC,OAA8B;CAChH,IAAI;EACF,MAAM,QAAA,GAAOA,iBAAAA,qBAAAA,EAAAA,GAAqBC,MAAAA,cAAAA,CAAc,WAAW,KAAK,CAAC;EACjE,OAAO;GAAE;GAAM,OAAO,KAAA;GAAW,WAAW,SAAS,OAAO,IAAI,CAAC,CAAC,SAAS,IAAI;EAAE;CACnF,SAAS,OAAO;EAGd,OAAO;GACL,MAAM;GACN,OAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;GAC/D,gBAAgB;EAClB;CACF;AACF"}