@colixsystems/widget-sdk 0.51.0 → 0.53.0

package/README.md

@@ -51,7 +51,15 @@ See the design reference for the full architecture: [`docs/architecture/widget-m
 
 ## Status
 
-`v0.51.0` — pre-publish. The package surface (types, function names, export paths) is the v1 contract; runtime behaviour for some hooks is stubbed (each hook documents what's wired and what isn't). It is **not yet published to npm**.
+`v0.53.0` — pre-publish. The package surface (types, function names, export paths) is the v1 contract; runtime behaviour for some hooks is stubbed (each hook documents what's wired and what isn't). It is **not yet published to npm**.
+
+### What's new in 0.53.0
+
+**Server-action scripts gain a `connectors` global (REQ-ACTION-CONNECTORS, sc-2162).** A `scriptSource` action can now call `connectors.call(slug, { method, path, query, body, headers })` to invoke a tenant-configured REST connector by slug; it returns the upstream's `{ status, headers, body }`. Auth and SSRF protection are handled by the platform host — the script names only a slug (never a tenant or base URL), and the tenant is bound host-side. An unknown slug / SSRF rejection / timeout throws a catchable Error. New entry in `CONTRACT.actionScriptGlobals`; `CONTRACT.version` → `1.37.0`. Additive — no widget hook, primitive, manifest field, or token changed shape.
+
+### What's new in 0.52.0
+
+**Lucide icon names accept any case (sc-2088).** A new `normalizeLucideIconName(name)` export maps a human-typed icon name to the PascalCase form Lucide exports its components under — `arrow-right`, `arrow_right`, `arrow right`, `arrowRight`, and `ArrowRight` all resolve to `ArrowRight`; `building-2` → `Building2`. The lucide.dev gallery and its copy button hand you kebab-case, so authors no longer have to hand-convert. The `<Icon name="…">` primitive normalizes its `name` before lookup, and the `icon` propertySchema type accepts any case. Additive — one new pure export; no existing export changed signature. `CONTRACT` is unchanged.
 
 ### What's new in 0.51.0
 
@@ -280,7 +288,7 @@ Two additive features land in this version.
 
 **A widget may declare server-side actions in its manifest.**
 
-- **`WidgetManifest.actions` is now part of the public contract.** An optional array; each entry is `{ key, name, description?, triggerType, scheduleCron?, timeoutMs?, scriptSource }`. `triggerType` is one of `schedule`, `record_created`, `record_updated`, `record_deleted`; `scheduleCron` is required when `triggerType === "schedule"`. The `scriptSource` (≤ 200 KiB) runs in the **shared isolated-vm action runner** — against `datastore` / `fetch` / `console` / `record` / `tenantId` (the runner surface, **not** the React/SDK widget surface, so SDK imports and hooks are unavailable there and the component linter does not scan it). Actions never run in the rendered app, so they have **no effect on Player ↔ export parity**.
+- **`WidgetManifest.actions` is now part of the public contract.** An optional array; each entry is `{ key, name, description?, triggerType, scheduleCron?, timeoutMs?, scriptSource }`. `triggerType` is one of `schedule`, `record_created`, `record_updated`, `record_deleted`; `scheduleCron` is required when `triggerType === "schedule"`. The `scriptSource` (≤ 200 KiB) runs in the **shared isolated-vm action runner** — against `datastore` / `fetch` / `connectors` / `console` / `record` / `tenantId` (the runner surface, **not** the React/SDK widget surface, so SDK imports and hooks are unavailable there and the component linter does not scan it). `connectors.call(slug, { method, path, query, body, headers })` resolves a tenant-configured REST connector by slug and returns `{ status, headers, body }` (auth + SSRF handled by the platform; an unknown slug / SSRF / timeout throws a catchable Error). Actions never run in the rendered app, so they have **no effect on Player ↔ export parity**.
 - **Operators enable actions per tenant** from the Properties Panel. An enabled action materialises a tenant `Action` row **DISABLED** until the operator binds an integration API key (and, for `record_*` triggers, a target table) in the Actions admin page — those bindings are tenant-local, so `triggerTableId` / `apiKeyId` must **not** appear in the manifest (the validator and linter reject them).
 - **New contract fields** `CONTRACT.actionTriggerTypes`, `CONTRACT.actionScriptGlobals`, `CONTRACT.actionScriptMaxBytes` expose the grammar so the Developer page, the AI agent prompt, and `validateManifest` derive it from one source. `validateManifest` now structurally validates `actions`; the marketplace linter rejects malformed / oversized declarations.
 - **New manifest category `ADMINISTRATION`** for app-administration widgets such as User Management. Added to `CONTRACT.manifestCategories`, `validateManifest`, the `WidgetCategory` type, the marketplace category list, and the master-DB `WidgetCategory` enum.
@@ -353,7 +361,7 @@ The "split-implementation + vetted package list" pivot.
 
 ### What's new in 0.9.0
 
-- **`usePayments()` — incoming app-user payments.** Returns `{ requestPayment, getPayment }`. `requestPayment({ amountCents, currency?, description, metadata?, returnPath? })` triggers a one-time charge from the signed-in app user and resolves to `{ id, status, checkoutUrl? }`: when `checkoutUrl` is present the widget opens it (web: navigate; native: `expo-web-browser`) — the user pays in **hosted Stripe Checkout**; when absent (the platform's built-in **mock** provider, the default until Stripe is configured) the charge auto-confirms (`status: "PAID"`). `getPayment(id)` polls the terminal status. Backed by a new `WidgetContext.payments` slice and gated by the new `payments.charge:appUser` scope. **No card data ever touches the widget** — never collect card fields yourself. The charge settles to the workspace owner; the amount is bounded by a platform per-charge cap. Rejections are a structured `PaymentError` (also a new named export) with a stable `.code`.
+- **`usePayments()` — incoming app-user payments.** Returns `{ requestPayment, getPayment }`. `requestPayment({ amountCents, currency?, description, metadata?, returnPath? })` triggers a one-time charge from the signed-in app user and resolves to `{ id, status, checkoutUrl? }`: when `checkoutUrl` is present the widget opens it (web: navigate; native: `expo-web-browser`) — the user pays in the provider's **hosted checkout**; when absent (the platform's built-in **mock** provider, the default until a real provider is configured) the charge auto-confirms (`status: "PAID"`). `getPayment(id)` polls the terminal status. Backed by a new `WidgetContext.payments` slice and gated by the new `payments.charge:appUser` scope. **No card data ever touches the widget** — never collect card fields yourself. The charge settles to the workspace owner; the amount is bounded by a platform per-charge cap. Rejections are a structured `PaymentError` (also a new named export) with a stable `.code`.
 - **`CONTRACT.version` → `1.2.0`** (additive: one new hook, one new context slice, one new scope, one new error class). No existing export changed signature.
 
 ### What was in 0.8.0

package/dist/contract.cjs

@@ -818,6 +818,7 @@ const ACTION_TRIGGER_TYPES = [
 const ACTION_SCRIPT_GLOBALS = [
   "datastore",
   "fetch",
+  "connectors",
   "console",
   "record",
   "tenantId",
@@ -1815,7 +1816,15 @@ const CONTRACT = deepFreeze({
   //    `notifications.send:appUser` scope it gates on. No existing hook,
   //    primitive, manifest field, or token changed shape — minor bump on the
   //    pre-1.0 channel.
-  version: "1.36.0",
+  //
+  // 1.37.0: additive (REQ-ACTION-CONNECTORS, sc-2162) — server-action scripts
+  //    gain a `connectors` global. `connectors.call(slug, { method, path,
+  //    query, body, headers })` resolves a tenant-configured REST connector by
+  //    slug and returns `{ status, headers, body }`; auth + SSRF are handled by
+  //    the platform host, and an unknown slug / SSRF / timeout throws a
+  //    catchable Error. New entry in ACTION_SCRIPT_GLOBALS only — no widget
+  //    hook, primitive, manifest field, or token changed shape; minor bump.
+  version: "1.37.0",
   sharedTranslationKeys: SHARED_TRANSLATION_KEYS,
   hooks: HOOKS,
   primitives: PRIMITIVES,

package/dist/contract.js

@@ -818,6 +818,7 @@ const ACTION_TRIGGER_TYPES = [
 const ACTION_SCRIPT_GLOBALS = [
   "datastore",
   "fetch",
+  "connectors",
   "console",
   "record",
   "tenantId",
@@ -1815,7 +1816,15 @@ const CONTRACT = deepFreeze({
   //    `notifications.send:appUser` scope it gates on. No existing hook,
   //    primitive, manifest field, or token changed shape — minor bump on the
   //    pre-1.0 channel.
-  version: "1.36.0",
+  //
+  // 1.37.0: additive (REQ-ACTION-CONNECTORS, sc-2162) — server-action scripts
+  //    gain a `connectors` global. `connectors.call(slug, { method, path,
+  //    query, body, headers })` resolves a tenant-configured REST connector by
+  //    slug and returns `{ status, headers, body }`; auth + SSRF are handled by
+  //    the platform host, and an unknown slug / SSRF / timeout throws a
+  //    catchable Error. New entry in ACTION_SCRIPT_GLOBALS only — no widget
+  //    hook, primitive, manifest field, or token changed shape; minor bump.
+  version: "1.37.0",
   sharedTranslationKeys: SHARED_TRANSLATION_KEYS,
   hooks: HOOKS,
   primitives: PRIMITIVES,

package/dist/hooks.js

@@ -2638,8 +2638,8 @@ function toPaymentError(err) {
  *   requestPayment({ amountCents, currency?, description, metadata? })
  *     → Promise<{ id, status, checkoutUrl?, ... }>. The host either
  *       auto-confirms (mock provider, `status: "PAID"`, no redirect) or
- *       returns a hosted-Checkout `checkoutUrl` the widget should open
- *       (Stripe provider, `status: "PENDING"`). Rejects with a
+ *       returns a hosted-checkout `checkoutUrl` the widget should open
+ *       (Mollie provider, `status: "PENDING"`). Rejects with a
  *       `PaymentError`.
  *   getPayment(paymentId) → Promise<payment> — poll the terminal status.
  *

package/dist/icon.js

@@ -16,10 +16,11 @@
 
 import React from "react";
 import * as LucideIcons from "lucide-react-native";
+import { normalizeLucideIconName } from "./lucideIconName.js";
 
 export function Icon({ name, size, color }) {
-  const candidate =
-    typeof name === "string" && name.length > 0 ? LucideIcons[name] : null;
+  const resolved = normalizeLucideIconName(name);
+  const candidate = resolved ? LucideIcons[resolved] : null;
   const Component = candidate || LucideIcons.Square;
   const pixelSize = Number.isFinite(size) && size > 0 ? size : 24;
   return React.createElement(Component, {

package/dist/index.d.ts

@@ -624,8 +624,8 @@ export interface PaymentResult {
   currency?: string;
   description?: string;
   /**
-   * Present (Stripe provider) when the app user must complete a hosted
-   * Checkout: the widget should open this URL. Absent under the mock
+   * Present (Mollie provider) when the app user must complete a hosted
+   * checkout: the widget should open this URL. Absent under the mock
    * provider, where the charge auto-confirms (`status: "PAID"`).
    */
   checkoutUrl?: string | null;

package/dist/index.js

@@ -70,3 +70,4 @@ export {
 } from "./primitives.js";
 export { lintSource, bannedIdentifiers } from "./linter.js";
 export { CONTRACT, isHookAllowed, requiredContextKeys } from "./contract.js";
+export { normalizeLucideIconName } from "./lucideIconName.js";

package/dist/index.native.js

@@ -66,3 +66,4 @@ export {
 } from "./primitives.native.js";
 export { lintSource, bannedIdentifiers } from "./linter.js";
 export { CONTRACT, isHookAllowed, requiredContextKeys } from "./contract.js";
+export { normalizeLucideIconName } from "./lucideIconName.js";

package/dist/lucideIconName.cjs

@@ -0,0 +1,17 @@
+// CommonJS twin of lucideIconName.js for the backend (the page service +
+// any other Node consumer require this). Keep the two in sync — same
+// algorithm, same behaviour. See lucideIconName.js for the rationale.
+"use strict";
+
+function normalizeLucideIconName(name) {
+  if (typeof name !== "string") return "";
+  const trimmed = name.trim();
+  if (trimmed === "") return "";
+  return trimmed
+    .split(/[-_\s]+/)
+    .filter(Boolean)
+    .map((segment) => segment.charAt(0).toUpperCase() + segment.slice(1))
+    .join("");
+}
+
+module.exports = { normalizeLucideIconName };

package/dist/lucideIconName.js

@@ -0,0 +1,19 @@
+// Normalize a human-typed Lucide icon name to the PascalCase form Lucide
+// exports its components under. The lucide.dev gallery shows kebab-case
+// (`arrow-right`) and its copy button hands you kebab-case, but
+// `lucide-react` / `lucide-react-native` key their components in PascalCase
+// (`ArrowRight`). This bridges the two so any of kebab / snake / spaced /
+// camel / PascalCase resolves: `arrow-right`, `arrow_right`, `arrow right`,
+// `arrowRight`, and `ArrowRight` all become `ArrowRight`; `building-2` becomes
+// `Building2`. Non-strings and blanks return "" so callers fall back to a
+// placeholder. Already-PascalCase names pass through unchanged.
+export function normalizeLucideIconName(name) {
+  if (typeof name !== "string") return "";
+  const trimmed = name.trim();
+  if (trimmed === "") return "";
+  return trimmed
+    .split(/[-_\s]+/)
+    .filter(Boolean)
+    .map((segment) => segment.charAt(0).toUpperCase() + segment.slice(1))
+    .join("");
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@colixsystems/widget-sdk",
-  "version": "0.51.0",
+  "version": "0.53.0",
   "description": "Common widget interface for AppStudio. Implements WidgetManifest, WidgetContext, property schema, and helper hooks.",
   "type": "module",
   "main": "./dist/index.js",
@@ -42,7 +42,7 @@
   ],
   "scripts": {
     "build": "node scripts/build.js",
-    "test": "node --test src/__tests__/contract.test.js src/__tests__/hooks-users.test.js src/__tests__/hooks-groups.test.js src/__tests__/hooks-schema.test.js src/__tests__/hooks-assets-by-tag.test.js src/__tests__/hooks-filestore-upload.test.js src/__tests__/hooks-mutation.test.js src/__tests__/hooks-record-permissions.test.js src/__tests__/hooks-geolocation.test.js src/__tests__/hooks-subscription.test.js src/__tests__/linter-users-scope.test.js src/__tests__/linter-comments.test.js src/__tests__/lucide-icon-names.test.js src/__tests__/manifest-actions.test.js src/__tests__/widget-translations.test.js src/__tests__/devserver.test.js src/__tests__/host-externals.test.js src/__tests__/datetimepicker.test.js"
+    "test": "node --test src/__tests__/contract.test.js src/__tests__/hooks-users.test.js src/__tests__/hooks-groups.test.js src/__tests__/hooks-schema.test.js src/__tests__/hooks-assets-by-tag.test.js src/__tests__/hooks-filestore-upload.test.js src/__tests__/hooks-mutation.test.js src/__tests__/hooks-record-permissions.test.js src/__tests__/hooks-geolocation.test.js src/__tests__/hooks-subscription.test.js src/__tests__/linter-users-scope.test.js src/__tests__/linter-comments.test.js src/__tests__/lucide-icon-names.test.js src/__tests__/lucideIconName.test.js src/__tests__/manifest-actions.test.js src/__tests__/widget-translations.test.js src/__tests__/devserver.test.js src/__tests__/host-externals.test.js src/__tests__/datetimepicker.test.js"
   },
   "engines": {
     "node": ">=18"