@arcote.tech/platform 0.6.1 → 0.7.0

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@arcote.tech/platform",
   "type": "module",
-  "version": "0.6.1",
+  "version": "0.7.0",
   "private": false,
   "author": "Przemysław Krasiński [arcote.tech]",
   "description": "Arc Platform — module system, router, layout, theme, i18n, platform app shell",
@@ -10,19 +10,25 @@
   "exports": {
     ".": {
       "types": "./src/index.ts",
-      "import": "./src/index.ts",
+      "bun": "./src/index.server.ts",
+      "node": "./src/index.server.ts",
+      "browser": "./src/index.ts",
       "default": "./src/index.ts"
+    },
+    "./server": {
+      "types": "./src/index.server.ts",
+      "default": "./src/index.server.ts"
     }
   },
   "scripts": {
     "type-check": "tsc --noEmit"
   },
   "dependencies": {
-    "@arcote.tech/arc-ds": "^0.6.1",
-    "@arcote.tech/arc-react": "^0.6.1"
+    "@arcote.tech/arc-ds": "^0.7.0",
+    "@arcote.tech/arc-react": "^0.7.0"
   },
   "peerDependencies": {
-    "@arcote.tech/arc": "^0.6.1",
+    "@arcote.tech/arc": "^0.7.0",
     "@lingui/core": "^5.0.0",
     "@lingui/react": "^5.0.0",
     "framer-motion": "^12.0.0",

package/src/index.server.ts

@@ -0,0 +1,84 @@
+// Arc Platform — server entry (bun/node runtime)
+//
+// Subset of the public API that is safe to import in a server context:
+// pure data + functions, no React, no DOM, no JSX runtime imports at top
+// level. Used by:
+//   - access-extractor subprocess (PRE-bundle discovery of protectedBy rules)
+//   - server bundles per context package (resolve @arcote.tech/platform
+//     through Bun's `bun` export condition)
+//
+// Shares the same `registry` module instance with the browser entry — both
+// reference the SAME ./registry file, so `module().build()` in user code
+// and `getAllModuleAccess()` in extractor observe a single source of truth.
+
+// Module system
+export {
+  module,
+  page,
+  wrapper,
+  slot,
+  contextElement,
+  contextFragments,
+} from "./arc";
+/** @deprecated Use module() instead */
+export { arc } from "./arc";
+
+// Registry
+export {
+  clearModules,
+  clearRegistry,
+  forceRegisterModule,
+  getAllFragments,
+  getAllModuleAccess,
+  getAllModules,
+  getAllRegisteredModules,
+  getContext,
+  getModuleAccess,
+  getContextElementFragments,
+  getDefaultLayout,
+  getModule,
+  getPageByPath,
+  getPlatformConfig,
+  getPageFragments,
+  getSlotFragments,
+  getVariantOverrides,
+  getWrapperFragments,
+  registerModule,
+  setContext,
+  setDefaultLayout,
+  setPlatformConfig,
+  setVariantOverrides,
+  subscribe,
+  subscribeContext,
+  unregisterModule,
+} from "./registry";
+
+export type { PlatformConfig, PlatformStorageConfig } from "./registry";
+
+// Types
+export type {
+  ArcComponent,
+  ArcFactory,
+  ArcFactoryMethods,
+  ArcFragment,
+  ArcLayoutComponent,
+  ArcModule,
+  BuildManifest,
+  BuiltModule,
+  ContextElementFragment,
+  ModuleAccess,
+  ModuleAccessRule,
+  ModuleDescriptor,
+  ExtractPages,
+  FragmentOrdering,
+  PageFragment,
+  PageOptions,
+  PageShellProps,
+  PublicArcFragment,
+  PublicPaths,
+  SlotFragment,
+  SlotId,
+  SlotOptions,
+  WrapperFragment,
+  WrapperOptions,
+} from "./types";

package/src/module-loader.ts

@@ -11,9 +11,15 @@ export type ModuleLoaderState = "loading" | "ready" | "error";
  * URL for a module's JS file with cache-bust based on its content hash.
  * When a module's bytes change, hash changes → URL changes → ES module cache invalidated.
  * For explicit full reloads, pass `bust` (e.g. timestamp) to override.
+ *
+ * Server-filtered descriptors carry a signed `mod.url` (chunk-aware HMAC) for
+ * non-public chunks. Otherwise the path is `/modules/<chunk>/<file>` — public
+ * chunks are served without a signature.
  */
 function moduleUrl(baseUrl: string, mod: ModuleDescriptor, bust?: string): string {
-  const base = mod.url ?? `${baseUrl}/modules/${mod.file}`;
+  const base = mod.url
+    ? `${baseUrl}${mod.url}`
+    : `${baseUrl}/modules/${mod.chunk}/${mod.file}`;
   const busterKey = bust ? "t" : "v";
   const busterVal = bust ?? mod.hash;
   if (!busterVal) return base;

package/src/types.ts

@@ -100,16 +100,26 @@ export interface ModuleAccess {
 }
 
 export interface ModuleDescriptor {
+  /** Filename within the chunk directory, e.g. `myapp.js`. */
   readonly file: string;
   readonly name: string;
+  /**
+   * Chunk group this module belongs to. `"public"` for anonymous-accessible
+   * modules; any other value matches a `token.name` from `protectedBy(...)`.
+   * Physical layout: `.arc/platform/modules/<chunk>/<file>`.
+   */
+  readonly chunk: string;
   /** sha256 hex of the bundled .js content — used by deploy diff and client cache-bust. */
   readonly hash: string;
+  /** Signed URL — server fills this for non-public modules when filtering manifest per request. */
   readonly url?: string;
 }
 
 /** Build manifest written to .arc/platform/modules/manifest.json. */
 export interface BuildManifest {
   readonly modules: readonly ModuleDescriptor[];
+  /** All chunk group names present in this build (sorted). Always includes `"public"`. */
+  readonly chunks: readonly string[];
   /** sha256 hex over all shell bundle outputs concatenated. */
   readonly shellHash: string;
   /** sha256 hex over styles.css (+ theme.css if present). */