@ethisyscore/vite-plugin 1.6.3 → 1.7.1

package/dist/index.js

@@ -318,7 +318,20 @@ var CONTRACT_B_SEMANTIC_PRIMITIVES = [
   "Drawer",
   "Modal",
   "CanvasSurface",
-  "WebGLSurface"
+  "WebGLSurface",
+  // Phase 1 additions (per Contract B + PlatformReact plan §Q6, frequency
+  // survey of coreconnect-web Timesheets feature). Card / Tabs / Select /
+  // Alert close the four most-common gaps in the v1 primitive set:
+  // - Card: universal layout container, ~20 imports across surveyed pages.
+  // - Tabs: settings / configuration surfaces (6 tabs in TimesheetSettings).
+  // - Select: filter + form input, ~10 imports; Form's text input doesn't
+  //   cover dropdowns.
+  // - Alert: lock/unlock warnings, validation banners, non-modal system
+  //   messages; Card doesn't carry severity semantics.
+  "Card",
+  "Tabs",
+  "Select",
+  "Alert"
 ];
 var CONTRACT_B_RUNTIME_IMPORTS = [
   "react",
@@ -577,9 +590,313 @@ function ethisysContractBPlugin(options = {}) {
     }
   };
 }
+var ID_REGEX = /^[a-z0-9]+(?:[-_][a-z0-9]+)*$/i;
+function assertHostOriginRelativePath2(value, label) {
+  if (/^[a-z][a-z0-9+.-]*:\/\//i.test(value)) {
+    throw new Error(
+      `[ethisys-platform-react] ${label} "${value}" must be a host-origin relative path, not a remote URL.`
+    );
+  }
+  if (/^(data|blob|javascript):/i.test(value)) {
+    throw new Error(
+      `[ethisys-platform-react] ${label} "${value}" must be a host-origin relative path, not a ${value.split(":")[0]}: URL.`
+    );
+  }
+  const normalized = normalize(value);
+  if (isAbsolute(value) || isAbsolute(normalized)) {
+    throw new Error(
+      `[ethisys-platform-react] ${label} "${value}" must be relative, not absolute.`
+    );
+  }
+  if (normalized.split(/[\\/]/).includes("..")) {
+    throw new Error(
+      `[ethisys-platform-react] ${label} "${value}" must not contain path traversal.`
+    );
+  }
+}
+function slash2(p) {
+  return sep === "\\" ? p.replace(/\\/g, "/") : p;
+}
+function ethisysPlatformReactPlugin(options = {}) {
+  const explicitRoot = options.root;
+  const manifestRel = options.manifestPath ?? "feature.manifest.json";
+  const outputPrefix = (options.outputPrefix ?? "platform-react/").replace(/\/+$/, "/").replace(/^\/+/, "");
+  let resolvedRoot;
+  let manifestAbsPath;
+  let pages = [];
+  function resolveRoot() {
+    if (resolvedRoot) {
+      return resolvedRoot;
+    }
+    resolvedRoot = explicitRoot ?? process.cwd();
+    manifestAbsPath = isAbsolute(manifestRel) ? manifestRel : resolve(resolvedRoot, manifestRel);
+    return resolvedRoot;
+  }
+  function readManifest() {
+    resolveRoot();
+    if (!existsSync(manifestAbsPath)) {
+      return null;
+    }
+    const raw = readFileSync(manifestAbsPath, "utf-8");
+    try {
+      return JSON.parse(raw);
+    } catch (e) {
+      throw new Error(
+        `[ethisys-platform-react] Failed to parse manifest at "${manifestAbsPath}": ${e.message}`
+      );
+    }
+  }
+  function validate() {
+    pages = [];
+    const manifest = readManifest();
+    if (manifest === null) {
+      return;
+    }
+    const declared = manifest.ui?.platformReactPages;
+    if (!Array.isArray(declared) || declared.length === 0) {
+      return;
+    }
+    const seenIds = /* @__PURE__ */ new Set();
+    for (let i = 0; i < declared.length; i++) {
+      const decl = declared[i];
+      const where = `ui.platformReactPages[${i}]`;
+      if (typeof decl?.id !== "string" || decl.id.length === 0) {
+        throw new Error(
+          `[ethisys-platform-react] ${where}.id is required (non-empty string).`
+        );
+      }
+      if (!ID_REGEX.test(decl.id)) {
+        throw new Error(
+          `[ethisys-platform-react] ${where}.id "${decl.id}" must match [a-z0-9_-]+ (URL-safe; case-insensitive).`
+        );
+      }
+      if (seenIds.has(decl.id)) {
+        throw new Error(
+          `[ethisys-platform-react] Duplicate page id "${decl.id}".`
+        );
+      }
+      seenIds.add(decl.id);
+      if (typeof decl.moduleSpecifier !== "string" || decl.moduleSpecifier.length === 0) {
+        throw new Error(
+          `[ethisys-platform-react] ${where}.moduleSpecifier is required (non-empty relative path).`
+        );
+      }
+      assertHostOriginRelativePath2(decl.moduleSpecifier, `${where}.moduleSpecifier`);
+      const absPath = resolve(resolvedRoot, decl.moduleSpecifier);
+      if (!existsSync(absPath)) {
+        throw new Error(
+          `[ethisys-platform-react] ${where}.moduleSpecifier "${decl.moduleSpecifier}" does not exist on disk (resolved: ${absPath}).`
+        );
+      }
+      const exportName = typeof decl.exportName === "string" && decl.exportName.length > 0 ? decl.exportName : "default";
+      pages.push({
+        id: decl.id,
+        exportName,
+        title: typeof decl.title === "string" && decl.title.length > 0 ? decl.title : null,
+        moduleSpecifierRel: decl.moduleSpecifier,
+        moduleSpecifierAbs: absPath
+      });
+    }
+  }
+  let isBuild = false;
+  return {
+    name: "ethisys-platform-react",
+    // `pre` ordering: validation should fire before user-supplied plugins.
+    enforce: "pre",
+    /**
+     * Force ESM single-module output per page. Output options don't depend on
+     * the resolved root, so they're safe to declare here — `config()` runs
+     * before `configResolved()`. The Rollup input table is added later in
+     * `configResolved()` once Vite has populated `resolvedRoot` correctly.
+     */
+    config(_config, { command }) {
+      if (command !== "build") {
+        return;
+      }
+      return {
+        build: {
+          rollupOptions: {
+            // CRITICAL: single-file ESM output per page. The host loads each
+            // page via `import(url)` at mount time and reads the declared
+            // `exportName` from the resulting module namespace. Chunk-split
+            // output would break that contract because the host has no
+            // import-map surface to resolve sibling chunks.
+            output: {
+              format: "es",
+              inlineDynamicImports: true,
+              entryFileNames: `${outputPrefix}[name].js`,
+              chunkFileNames: `${outputPrefix}[name]-[hash].js`,
+              assetFileNames: `${outputPrefix}[name][extname]`
+            }
+          }
+        }
+      };
+    },
+    /**
+     * Resolve the actual root Vite is using (which may differ from
+     * `process.cwd()`), validate the manifest against it, and mutate the
+     * resolved config's Rollup input table so each declared page becomes a
+     * build entry. Mutation in `configResolved` is the standard Vite-plugin
+     * pattern for input contributions that depend on the resolved root —
+     * `config()` runs too early to know the real value.
+     */
+    configResolved(config) {
+      isBuild = config.command === "build";
+      if (!explicitRoot) {
+        resolvedRoot = config.root;
+        manifestAbsPath = isAbsolute(manifestRel) ? manifestRel : resolve(resolvedRoot, manifestRel);
+      }
+      if (!isBuild) {
+        return;
+      }
+      validate();
+      if (pages.length === 0) {
+        return;
+      }
+      const input = {};
+      for (const page of pages) {
+        input[page.id] = slash2(page.moduleSpecifierAbs);
+      }
+      const writable = config;
+      writable.build ??= {};
+      writable.build.rollupOptions ??= {};
+      const rollupOptions = writable.build.rollupOptions;
+      const existing = rollupOptions.input;
+      if (existing && typeof existing === "object" && !Array.isArray(existing)) {
+        rollupOptions.input = { ...existing, ...input };
+      } else if (typeof existing === "string") {
+        rollupOptions.input = { _entry: existing, ...input };
+      } else if (Array.isArray(existing)) {
+        const indexed = {};
+        existing.forEach((entry, idx) => {
+          indexed[`_entry${idx}`] = entry;
+        });
+        rollupOptions.input = { ...indexed, ...input };
+      } else {
+        rollupOptions.input = input;
+      }
+    },
+    buildStart() {
+      validate();
+    },
+    /**
+     * Emit the companion `platform-react-pages.json` listing every declared
+     * page. The `.ccpkg` packaging step (and the host's runtime loader) read
+     * this file to discover which page modules ship in the bundle without
+     * having to re-parse the manifest.
+     */
+    generateBundle() {
+      if (pages.length === 0) {
+        return;
+      }
+      const summary = {
+        pages: pages.map((p) => ({
+          id: p.id,
+          exportName: p.exportName,
+          title: p.title,
+          bundlePath: `${outputPrefix}${p.id}.js`,
+          source: p.moduleSpecifierRel
+        }))
+      };
+      this.emitFile({
+        type: "asset",
+        fileName: `${outputPrefix}platform-react-pages.json`,
+        source: JSON.stringify(summary, null, 2)
+      });
+    }
+  };
+}
+var ID_REGEX2 = /^[a-z0-9]+(?:[-_][a-z0-9]+)*$/i;
+function assertHostOriginRelativePath3(value, label) {
+  if (/^[a-z][a-z0-9+.-]*:\/\//i.test(value)) {
+    throw new Error(
+      `[ethisys-platform-react] ${label} "${value}" must be a host-origin relative path, not a remote URL.`
+    );
+  }
+  if (/^(data|blob|javascript):/i.test(value)) {
+    throw new Error(
+      `[ethisys-platform-react] ${label} "${value}" must be a host-origin relative path, not a ${value.split(":")[0]}: URL.`
+    );
+  }
+  const normalized = normalize(value);
+  if (isAbsolute(value) || isAbsolute(normalized)) {
+    throw new Error(
+      `[ethisys-platform-react] ${label} "${value}" must be relative, not absolute.`
+    );
+  }
+  if (normalized.split(/[\\/]/).includes("..")) {
+    throw new Error(
+      `[ethisys-platform-react] ${label} "${value}" must not contain path traversal.`
+    );
+  }
+}
+function parsePlatformReactPages(manifestPath, options = {}) {
+  const root = options.root ?? process.cwd();
+  const verifyOnDisk = options.verifyOnDisk ?? false;
+  const manifestAbsPath = isAbsolute(manifestPath) ? manifestPath : resolve(root, manifestPath);
+  if (!existsSync(manifestAbsPath)) {
+    return [];
+  }
+  let manifest;
+  try {
+    const raw = readFileSync(manifestAbsPath, "utf-8");
+    manifest = JSON.parse(raw);
+  } catch (e) {
+    throw new Error(
+      `[ethisys-platform-react] Failed to parse manifest at "${manifestAbsPath}": ${e.message}`
+    );
+  }
+  const declared = manifest.ui?.platformReactPages;
+  if (!Array.isArray(declared) || declared.length === 0) {
+    return [];
+  }
+  const result = [];
+  const seenIds = /* @__PURE__ */ new Set();
+  for (let i = 0; i < declared.length; i++) {
+    const decl = declared[i];
+    const where = `ui.platformReactPages[${i}]`;
+    if (typeof decl?.id !== "string" || decl.id.length === 0) {
+      throw new Error(
+        `[ethisys-platform-react] ${where}.id is required (non-empty string).`
+      );
+    }
+    if (!ID_REGEX2.test(decl.id)) {
+      throw new Error(
+        `[ethisys-platform-react] ${where}.id "${decl.id}" must match [a-z0-9_-]+ (URL-safe; case-insensitive).`
+      );
+    }
+    if (seenIds.has(decl.id)) {
+      throw new Error(
+        `[ethisys-platform-react] Duplicate page id "${decl.id}".`
+      );
+    }
+    seenIds.add(decl.id);
+    if (typeof decl.moduleSpecifier !== "string" || decl.moduleSpecifier.length === 0) {
+      throw new Error(
+        `[ethisys-platform-react] ${where}.moduleSpecifier is required (non-empty relative path).`
+      );
+    }
+    assertHostOriginRelativePath3(decl.moduleSpecifier, `${where}.moduleSpecifier`);
+    if (verifyOnDisk) {
+      const absPath = resolve(root, decl.moduleSpecifier);
+      if (!existsSync(absPath)) {
+        throw new Error(
+          `[ethisys-platform-react] ${where}.moduleSpecifier "${decl.moduleSpecifier}" does not exist on disk (resolved: ${absPath}).`
+        );
+      }
+    }
+    result.push({
+      id: decl.id,
+      moduleSpecifier: decl.moduleSpecifier,
+      exportName: typeof decl.exportName === "string" && decl.exportName.length > 0 ? decl.exportName : "default",
+      title: typeof decl.title === "string" && decl.title.length > 0 ? decl.title : null
+    });
+  }
+  return result;
+}
 
 // src/index.ts
-function slash2(p) {
+function slash3(p) {
   return sep === "\\" ? p.replace(/\\/g, "/") : p;
 }
 function escapeHtml(str) {
@@ -704,7 +1021,7 @@ function ethisysManifestPlugin(options = {}) {
           }
           seen.add(entry.entrypoint);
           const name = entry.entrypoint.replace(/\.html$/, "");
-          input[name] = slash2(resolve(rootDir, entry.entrypoint));
+          input[name] = slash3(resolve(rootDir, entry.entrypoint));
         }
         return {
           build: {
@@ -769,7 +1086,7 @@ function ethisysManifestPlugin(options = {}) {
     // Entire handler is wrapped in try/catch so JSON syntax errors in the
     // manifest don't crash the dev server (common during active editing).
     handleHotUpdate({ file, server }) {
-      if (slash2(file) === slash2(manifestAbsPath)) {
+      if (slash3(file) === slash3(manifestAbsPath)) {
         try {
           entries = readManifest();
           validateEntries();
@@ -787,9 +1104,9 @@ function ethisysManifestPlugin(options = {}) {
     },
     // Build: resolve virtual HTML module IDs (no physical files exist on disk)
     resolveId(id) {
-      const normalizedId = slash2(id);
+      const normalizedId = slash3(id);
       const match = entries.find(
-        (e) => slash2(resolve(rootDir, e.entrypoint)) === normalizedId
+        (e) => slash3(resolve(rootDir, e.entrypoint)) === normalizedId
       );
       if (match) {
         return id;
@@ -797,9 +1114,9 @@ function ethisysManifestPlugin(options = {}) {
     },
     // Build: provide virtual HTML content for Rollup
     load(id) {
-      const normalizedId = slash2(id);
+      const normalizedId = slash3(id);
       const match = entries.find(
-        (e) => slash2(resolve(rootDir, e.entrypoint)) === normalizedId
+        (e) => slash3(resolve(rootDir, e.entrypoint)) === normalizedId
       );
       if (match) {
         return generateHtml(match);
@@ -808,6 +1125,6 @@ function ethisysManifestPlugin(options = {}) {
   };
 }
 
-export { CONTRACT_B_IMPORT_MAP_ALLOWLIST, CONTRACT_B_RUNTIME_IMPORTS, CONTRACT_B_SEMANTIC_PRIMITIVES, ethisysContractAPlugin, ethisysContractBPlugin, ethisysManifestPlugin, validateDeclarativeResource, validateReactiveRule };
+export { CONTRACT_B_IMPORT_MAP_ALLOWLIST, CONTRACT_B_RUNTIME_IMPORTS, CONTRACT_B_SEMANTIC_PRIMITIVES, ethisysContractAPlugin, ethisysContractBPlugin, ethisysManifestPlugin, ethisysPlatformReactPlugin, parsePlatformReactPages, validateDeclarativeResource, validateReactiveRule };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map