@blotout/qinto-cli 0.1.30 → 0.1.31

package/dist/worker-artifact/app-runtime/index.js

@@ -19607,6 +19607,7 @@ var endpointSchema = external_exports.object({
 var eventsSchema = external_exports.object({
   publishes: external_exports.array(external_exports.string().min(1).max(MAX_EVENT_TOPIC_LENGTH).regex(EVENT_TOPIC)).max(MAX_PUBLISHED_TOPICS).default([])
 }).strict();
+var dependenciesSchema = external_exports.array(external_exports.object({ app: external_exports.string().regex(APP_SLUG_PATTERN), description: renderableText(1, 200).optional() }).strict()).max(10);
 var rpcSchema = external_exports.object({
   exposes: external_exports.array(external_exports.object({ name: external_exports.string().regex(FUNCTION_NAME).max(64), visibility: external_exports.enum(["public", "private"]) }).strict()).max(32).optional(),
   calls: external_exports.array(external_exports.object({ app: external_exports.string().regex(APP_SLUG_PATTERN), fn: external_exports.string().regex(FUNCTION_NAME).max(64) }).strict()).max(64).optional()
@@ -19650,6 +19651,9 @@ var baseSchema = external_exports.object({
     description: "The app's browser surface: an optional entry for the bundle that ships inside the site's q.js, and the query params and cookies it declares for capture."
   }),
   resources: external_exports.array(resourceSchema).max(32).default([]).meta({ description: "The Cloudflare bindings the app worker is given." }),
+  dependencies: dependenciesSchema.optional().meta({
+    description: "The apps this app needs on the same site. Every app it calls over RPC must be listed."
+  }),
   rpc: rpcSchema.optional().meta({ description: "The functions this app exposes to other apps, and the ones it calls on them." }),
   events: eventsSchema.optional().meta({
     description: "The push topics this app broadcasts to every app on the site. Requires the `sharedContext` data capability; a topic left out reaches only this app\u2019s own browser code."
@@ -19966,9 +19970,30 @@ var validateRpc = (manifest, ctx) => {
     ["rpc", "exposes"],
     "function"
   );
+  const dependencies = new Set((manifest.dependencies ?? []).map((dependency) => dependency.app));
   for (const [index, call] of (manifest.rpc?.calls ?? []).entries()) {
     if (call.app === manifest.slug) {
       ctx.addIssue({ code: "custom", path: ["rpc", "calls", index, "app"], message: "An app cannot declare an RPC call to itself" });
+    } else if (!dependencies.has(call.app)) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["rpc", "calls", index, "app"],
+        message: `${call.app} is called over RPC, so it must be in dependencies. Add { "app": "${call.app}" } to dependencies; if your Qinto CLI rejects that field, upgrade it.`
+      });
+    }
+  }
+};
+var validateDependencies = (manifest, ctx) => {
+  const dependencies = manifest.dependencies ?? [];
+  uniqueOrIssue(
+    ctx,
+    dependencies.map((dependency) => dependency.app),
+    ["dependencies"],
+    "dependency"
+  );
+  for (const [index, dependency] of dependencies.entries()) {
+    if (dependency.app === manifest.slug) {
+      ctx.addIssue({ code: "custom", path: ["dependencies", index, "app"], message: "An app cannot depend on itself" });
     }
   }
 };
@@ -20019,6 +20044,7 @@ var appManifestSchema = baseSchema.superRefine((manifest, ctx) => {
   validateEndpoints(manifest, ctx);
   validateCapture(manifest, ctx);
   validateBrowserHooks(manifest, ctx);
+  validateDependencies(manifest, ctx);
   validateRpc(manifest, ctx);
   validateEvents(manifest, ctx);
   validateOauth(manifest, ctx);
@@ -20039,6 +20065,44 @@ var appRpcContractSchema = external_exports.record(external_exports.string().reg
   return new TextEncoder().encode(JSON.stringify(contract)).length <= MAX_RPC_CONTRACT_BYTES;
 }, "The RPC contract exceeds the size cap");
 
+// ../../../libs/app-envelope/src/geo.ts
+var cfString = external_exports.string().optional().catch(void 0);
+var requestGeoSchema = external_exports.object({
+  country: cfString,
+  city: cfString,
+  region: cfString,
+  regionCode: cfString,
+  timezone: cfString,
+  postalCode: cfString,
+  continent: cfString,
+  latitude: cfString,
+  longitude: cfString,
+  isEUCountry: cfString,
+  botManagement: external_exports.object({
+    ja4: cfString,
+    ja3Hash: cfString,
+    score: external_exports.number().optional().catch(void 0),
+    verifiedBot: external_exports.boolean().optional().catch(void 0)
+  }).optional().catch(void 0)
+});
+var userGeoSchema = external_exports.object({
+  ip: external_exports.string().optional(),
+  userAgent: external_exports.string().optional(),
+  timezone: external_exports.string().optional(),
+  city: external_exports.string().optional(),
+  postalCode: external_exports.string().optional(),
+  region: external_exports.string().optional(),
+  regionCode: external_exports.string().optional(),
+  country: external_exports.string().optional(),
+  continent: external_exports.string().optional(),
+  isEUCountry: external_exports.string().optional(),
+  latitude: external_exports.string().optional(),
+  longitude: external_exports.string().optional(),
+  ja4: external_exports.string().optional(),
+  ja3: external_exports.string().optional(),
+  botScore: external_exports.string().optional()
+});
+
 // ../../../libs/app-envelope/src/envelope.ts
 var ENVELOPE_VERSION = 3;
 var ENVELOPE_ERROR_CODES = ["invalid_arguments"];
@@ -20114,11 +20178,21 @@ var envelopeRequestSchema = external_exports.object({
     anonId: external_exports.string().min(1).max(64),
     globalId: external_exports.string().min(1).max(64).nullable(),
     createdAt: external_exports.number().int().optional(),
-    properties: external_exports.record(external_exports.string(), external_exports.unknown()),
-    geo: external_exports.record(external_exports.string(), external_exports.string()).optional()
+    properties: external_exports.record(external_exports.string(), external_exports.string()),
+    geo: userGeoSchema.optional()
+  }).strict().optional(),
+  consent: external_exports.object({
+    enabled: external_exports.boolean(),
+    categories: external_exports.object({
+      necessary: external_exports.literal(true),
+      functional: external_exports.boolean(),
+      analytics: external_exports.boolean(),
+      marketing: external_exports.boolean(),
+      salesOfData: external_exports.boolean()
+    }),
+    apps: external_exports.record(external_exports.string(), external_exports.boolean())
   }).strict().optional(),
-  consent: external_exports.object({ enabled: external_exports.boolean(), categories: external_exports.record(external_exports.string(), external_exports.boolean()), apps: external_exports.record(external_exports.string(), external_exports.boolean()) }).strict().optional(),
-  geo: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
+  geo: requestGeoSchema.optional(),
   // Connect envelopes only: the page the visitor's socket opened from, and the visit session it joined.
   page: pageSchema.optional(),
   session: sessionSchema.optional(),
@@ -20379,7 +20453,7 @@ var endpointContextSchema = external_exports.object({
   method: external_exports.enum(["GET", "POST", "PUT", "PATCH", "DELETE"]),
   mode: external_exports.enum(["webhook", "api"]),
   version: external_exports.string().min(1).max(32),
-  geo: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
+  geo: requestGeoSchema.optional(),
   installs: external_exports.array(installSchema3).min(1).max(15),
   user: external_exports.object({ anonId: external_exports.string().min(1).max(64) }).strict().optional()
 }).strict().refine((context) => {
@@ -22403,7 +22477,7 @@ var buildContext3 = ({
     geo,
     params,
     install: { id: install.id, label: install.label },
-    ...user === void 0 ? {} : { user: { anonId: user.anonId, globalId: null, properties: {} } },
+    ...user === void 0 ? {} : { user: { anonId: user.anonId } },
     startWorkflow: buildStartWorkflow({
       ord: install.ord,
       installId: install.id,