@ethisyscore/vite-plugin 1.9.0 → 1.10.0

package/dist/index.d.cts

@@ -352,6 +352,74 @@ interface ParsePlatformReactPagesOptions {
  */
 declare function parsePlatformReactPages(manifestPath: string, options?: ParsePlatformReactPagesOptions): ResolvedPlatformReactPage[];
 
+/** One emitted artifact from a per-page Vite sub-build. */
+type IframeBuildOutputItem = {
+    type: "chunk";
+    fileName: string;
+    code: string;
+} | {
+    type: "asset";
+    fileName: string;
+    source: string | Uint8Array;
+};
+interface IframeBuildResult {
+    output: IframeBuildOutputItem[];
+}
+/** A single page handed to the (injectable) builder. */
+interface IframeBuildContext {
+    id: string;
+    title: string;
+    entryPath: string;
+    root: string;
+    /** Per-page output directory (`<outputDir>/<id>`). */
+    outDir: string;
+}
+/** Injectable per-page builder. Defaults to a real Vite library build. */
+type IframeViteBuild = (page: IframeBuildContext) => Promise<IframeBuildResult>;
+interface IframeSandboxPluginOptions {
+    /** Root the manifest + entry paths resolve against. Defaults to Vite's resolved root / cwd. */
+    root?: string;
+    /** Manifest path (relative to `root`). Default `feature.manifest.json`. */
+    manifestPath?: string;
+    /** Output directory for per-page bundles + the digest map. Default `dist/iframe-sandbox`. */
+    outputDir?: string;
+    /** Inline manifest object (test injection). When omitted, the manifest is read from disk. */
+    manifest?: unknown;
+    /** Injectable per-page builder (test injection). When omitted, a real Vite build runs. */
+    build?: IframeViteBuild;
+    /** Injectable file writer (test injection). When omitted, writes via `fs` (creating dirs). */
+    writeFile?: (path: string, contents: string) => void;
+}
+interface IframeSandboxBuildSummary {
+    digests: Array<{
+        path: string;
+        sha256: string;
+    }>;
+    digestMapPath: string | null;
+}
+/**
+ * Build each `ui.iframeSandboxPages[]` declaration as its own Vite app bundle and
+ * emit a per-asset SHA-256 digest map in the SAME shape `ethisysPlatformReactPlugin`
+ * produces (`{ digests: [{ path, sha256 }] }`). Tier U surfaces are independent
+ * cross-origin apps, so each page is a separate sub-build under `<outputDir>/<id>/`;
+ * every emitted artifact is hashed (and validated against the protocol `AssetDigest`
+ * schema) so the edge integrity endpoint (sub-plan 5, Task 6) can verify served bytes.
+ *
+ * No-op when no pages are declared. Page shape is validated by the protocol
+ * `IframeSandboxPageDeclaration` schema (a malformed entry rejects the build).
+ */
+declare function buildIframeSandboxPages(options?: IframeSandboxPluginOptions): Promise<IframeSandboxBuildSummary>;
+/**
+ * Tier U (iframe-sandbox) Vite build pass (WI 4858 sub-plan 5). Mirrors
+ * `ethisysPlatformReactPlugin`: keyed off `ui.iframeSandboxPages[]` and a no-op
+ * when absent, so a single Vite config can compose every render-mode pass.
+ *
+ * Unlike Tier T (ESM modules in the parent build), each Tier U page is an
+ * independent cross-origin app — so the pass runs a separate Vite sub-build per
+ * page in `closeBundle` and emits the integrity digest map the host verifies.
+ */
+declare function ethisysIframeSandboxPlugin(options?: IframeSandboxPluginOptions): Plugin;
+
 interface EthisysPluginOptions {
     /**
      * Path to the manifest file, relative to Vite's root directory.
@@ -375,4 +443,4 @@ interface EthisysPluginOptions {
  */
 declare function ethisysManifestPlugin(options?: EthisysPluginOptions): Plugin;
 
-export { CONTRACT_B_IMPORT_MAP_ALLOWLIST, CONTRACT_B_RUNTIME_IMPORTS, CONTRACT_B_SEMANTIC_PRIMITIVES, type ContractAManifest, type ContractAPluginOptions, type ContractBManifest, type ContractBPluginOptions, type EthisysPluginOptions, type ManifestReactiveRuleRef, type ManifestResourceRef, type ParsePlatformReactPagesOptions, type PlatformReactManifest, type PlatformReactPageDeclaration, type PlatformReactPluginOptions, type ResolvedPlatformReactPage, type ValidationFailure, type ValidationResult, ethisysContractAPlugin, ethisysContractBPlugin, ethisysManifestPlugin, ethisysPlatformReactPlugin, parsePlatformReactPages, validateDeclarativeResource, validateReactiveRule };
+export { CONTRACT_B_IMPORT_MAP_ALLOWLIST, CONTRACT_B_RUNTIME_IMPORTS, CONTRACT_B_SEMANTIC_PRIMITIVES, type ContractAManifest, type ContractAPluginOptions, type ContractBManifest, type ContractBPluginOptions, type EthisysPluginOptions, type IframeBuildContext, type IframeBuildOutputItem, type IframeBuildResult, type IframeSandboxBuildSummary, type IframeSandboxPluginOptions, type IframeViteBuild, type ManifestReactiveRuleRef, type ManifestResourceRef, type ParsePlatformReactPagesOptions, type PlatformReactManifest, type PlatformReactPageDeclaration, type PlatformReactPluginOptions, type ResolvedPlatformReactPage, type ValidationFailure, type ValidationResult, buildIframeSandboxPages, ethisysContractAPlugin, ethisysContractBPlugin, ethisysIframeSandboxPlugin, ethisysManifestPlugin, ethisysPlatformReactPlugin, parsePlatformReactPages, validateDeclarativeResource, validateReactiveRule };

package/dist/index.d.ts

@@ -352,6 +352,74 @@ interface ParsePlatformReactPagesOptions {
  */
 declare function parsePlatformReactPages(manifestPath: string, options?: ParsePlatformReactPagesOptions): ResolvedPlatformReactPage[];
 
+/** One emitted artifact from a per-page Vite sub-build. */
+type IframeBuildOutputItem = {
+    type: "chunk";
+    fileName: string;
+    code: string;
+} | {
+    type: "asset";
+    fileName: string;
+    source: string | Uint8Array;
+};
+interface IframeBuildResult {
+    output: IframeBuildOutputItem[];
+}
+/** A single page handed to the (injectable) builder. */
+interface IframeBuildContext {
+    id: string;
+    title: string;
+    entryPath: string;
+    root: string;
+    /** Per-page output directory (`<outputDir>/<id>`). */
+    outDir: string;
+}
+/** Injectable per-page builder. Defaults to a real Vite library build. */
+type IframeViteBuild = (page: IframeBuildContext) => Promise<IframeBuildResult>;
+interface IframeSandboxPluginOptions {
+    /** Root the manifest + entry paths resolve against. Defaults to Vite's resolved root / cwd. */
+    root?: string;
+    /** Manifest path (relative to `root`). Default `feature.manifest.json`. */
+    manifestPath?: string;
+    /** Output directory for per-page bundles + the digest map. Default `dist/iframe-sandbox`. */
+    outputDir?: string;
+    /** Inline manifest object (test injection). When omitted, the manifest is read from disk. */
+    manifest?: unknown;
+    /** Injectable per-page builder (test injection). When omitted, a real Vite build runs. */
+    build?: IframeViteBuild;
+    /** Injectable file writer (test injection). When omitted, writes via `fs` (creating dirs). */
+    writeFile?: (path: string, contents: string) => void;
+}
+interface IframeSandboxBuildSummary {
+    digests: Array<{
+        path: string;
+        sha256: string;
+    }>;
+    digestMapPath: string | null;
+}
+/**
+ * Build each `ui.iframeSandboxPages[]` declaration as its own Vite app bundle and
+ * emit a per-asset SHA-256 digest map in the SAME shape `ethisysPlatformReactPlugin`
+ * produces (`{ digests: [{ path, sha256 }] }`). Tier U surfaces are independent
+ * cross-origin apps, so each page is a separate sub-build under `<outputDir>/<id>/`;
+ * every emitted artifact is hashed (and validated against the protocol `AssetDigest`
+ * schema) so the edge integrity endpoint (sub-plan 5, Task 6) can verify served bytes.
+ *
+ * No-op when no pages are declared. Page shape is validated by the protocol
+ * `IframeSandboxPageDeclaration` schema (a malformed entry rejects the build).
+ */
+declare function buildIframeSandboxPages(options?: IframeSandboxPluginOptions): Promise<IframeSandboxBuildSummary>;
+/**
+ * Tier U (iframe-sandbox) Vite build pass (WI 4858 sub-plan 5). Mirrors
+ * `ethisysPlatformReactPlugin`: keyed off `ui.iframeSandboxPages[]` and a no-op
+ * when absent, so a single Vite config can compose every render-mode pass.
+ *
+ * Unlike Tier T (ESM modules in the parent build), each Tier U page is an
+ * independent cross-origin app — so the pass runs a separate Vite sub-build per
+ * page in `closeBundle` and emits the integrity digest map the host verifies.
+ */
+declare function ethisysIframeSandboxPlugin(options?: IframeSandboxPluginOptions): Plugin;
+
 interface EthisysPluginOptions {
     /**
      * Path to the manifest file, relative to Vite's root directory.
@@ -375,4 +443,4 @@ interface EthisysPluginOptions {
  */
 declare function ethisysManifestPlugin(options?: EthisysPluginOptions): Plugin;
 
-export { CONTRACT_B_IMPORT_MAP_ALLOWLIST, CONTRACT_B_RUNTIME_IMPORTS, CONTRACT_B_SEMANTIC_PRIMITIVES, type ContractAManifest, type ContractAPluginOptions, type ContractBManifest, type ContractBPluginOptions, type EthisysPluginOptions, type ManifestReactiveRuleRef, type ManifestResourceRef, type ParsePlatformReactPagesOptions, type PlatformReactManifest, type PlatformReactPageDeclaration, type PlatformReactPluginOptions, type ResolvedPlatformReactPage, type ValidationFailure, type ValidationResult, ethisysContractAPlugin, ethisysContractBPlugin, ethisysManifestPlugin, ethisysPlatformReactPlugin, parsePlatformReactPages, validateDeclarativeResource, validateReactiveRule };
+export { CONTRACT_B_IMPORT_MAP_ALLOWLIST, CONTRACT_B_RUNTIME_IMPORTS, CONTRACT_B_SEMANTIC_PRIMITIVES, type ContractAManifest, type ContractAPluginOptions, type ContractBManifest, type ContractBPluginOptions, type EthisysPluginOptions, type IframeBuildContext, type IframeBuildOutputItem, type IframeBuildResult, type IframeSandboxBuildSummary, type IframeSandboxPluginOptions, type IframeViteBuild, type ManifestReactiveRuleRef, type ManifestResourceRef, type ParsePlatformReactPagesOptions, type PlatformReactManifest, type PlatformReactPageDeclaration, type PlatformReactPluginOptions, type ResolvedPlatformReactPage, type ValidationFailure, type ValidationResult, buildIframeSandboxPages, ethisysContractAPlugin, ethisysContractBPlugin, ethisysIframeSandboxPlugin, ethisysManifestPlugin, ethisysPlatformReactPlugin, parsePlatformReactPages, validateDeclarativeResource, validateReactiveRule };

package/dist/index.js

@@ -1,6 +1,7 @@
-import { existsSync, readFileSync } from 'fs';
-import { isAbsolute, resolve, sep, normalize } from 'path';
-import { KNOWN_PRIMITIVES, KNOWN_OPERATORS, KNOWN_RULE_KINDS, SduiNode, ReactiveRule } from '@ethisyscore/protocol';
+import { existsSync, readFileSync, mkdirSync, writeFileSync } from 'fs';
+import { isAbsolute, resolve, sep, normalize, dirname } from 'path';
+import { KNOWN_PRIMITIVES, KNOWN_OPERATORS, KNOWN_RULE_KINDS, SduiNode, ReactiveRule, IframeSandboxPageDeclaration, AssetDigest } from '@ethisyscore/protocol';
+import { createHash } from 'crypto';
 
 // src/index.ts
 var KNOWN_PRIMITIVE_SET = new Set(KNOWN_PRIMITIVES);
@@ -121,7 +122,7 @@ function ethisysContractAPlugin(options = {}) {
     manifestAbsPath = isAbsolute(manifestRel) ? manifestRel : resolve(resolvedRoot, manifestRel);
     return resolvedRoot;
   }
-  function readManifest() {
+  function readManifest2() {
     resolveRoot();
     if (!existsSync(manifestAbsPath)) {
       return null;
@@ -138,7 +139,7 @@ function ethisysContractAPlugin(options = {}) {
   function validate() {
     validatedResources = [];
     resourcePayloads.clear();
-    const manifest = readManifest();
+    const manifest = readManifest2();
     if (manifest === null) {
       return;
     }
@@ -384,7 +385,7 @@ function ethisysContractBPlugin(options = {}) {
     manifestAbsPath = isAbsolute(manifestRel) ? manifestRel : resolve(resolvedRoot, manifestRel);
     return resolvedRoot;
   }
-  function readManifest() {
+  function readManifest2() {
     resolveRoot();
     if (!existsSync(manifestAbsPath)) {
       return null;
@@ -401,7 +402,7 @@ function ethisysContractBPlugin(options = {}) {
   function validate() {
     workerEntryAbs = null;
     workerEntryRel = null;
-    const manifest = readManifest();
+    const manifest = readManifest2();
     if (manifest === null) {
       return;
     }
@@ -632,7 +633,7 @@ function ethisysPlatformReactPlugin(options = {}) {
     manifestAbsPath = isAbsolute(manifestRel) ? manifestRel : resolve(resolvedRoot, manifestRel);
     return resolvedRoot;
   }
-  function readManifest() {
+  function readManifest2() {
     resolveRoot();
     if (!existsSync(manifestAbsPath)) {
       return null;
@@ -648,7 +649,7 @@ function ethisysPlatformReactPlugin(options = {}) {
   }
   function validate() {
     pages = [];
-    const manifest = readManifest();
+    const manifest = readManifest2();
     if (manifest === null) {
       return;
     }
@@ -727,7 +728,11 @@ function ethisysPlatformReactPlugin(options = {}) {
               entryFileNames: `${outputPrefix}[name].js`,
               chunkFileNames: `${outputPrefix}[name]-[hash].js`,
               assetFileNames: `${outputPrefix}[name][extname]`
-            }
+            },
+            // Auto-externalise the host-ui-externals specifier so the host's
+            // module-registry rewriter resolves it to the live `@coreconnect/gogo-ui`
+            // instance at runtime — Tier T remotes never ship their own Gogo copy.
+            external: ["@ethisyscore/host-ui-externals"]
           }
         }
       };
@@ -785,10 +790,20 @@ function ethisysPlatformReactPlugin(options = {}) {
      * this file to discover which page modules ship in the bundle without
      * having to re-parse the manifest.
      */
-    generateBundle() {
+    generateBundle(_options, bundle) {
       if (pages.length === 0) {
         return;
       }
+      const digests = [];
+      for (const chunk of Object.values(bundle ?? {})) {
+        if (chunk.type !== "chunk") {
+          continue;
+        }
+        const code = chunk.code;
+        const fileName = chunk.fileName;
+        const hash = createHash("sha256").update(code, "utf8").digest("hex");
+        digests.push({ path: fileName, sha256: hash });
+      }
       const summary = {
         pages: pages.map((p) => ({
           id: p.id,
@@ -803,6 +818,11 @@ function ethisysPlatformReactPlugin(options = {}) {
         fileName: `${outputPrefix}platform-react-pages.json`,
         source: JSON.stringify(summary, null, 2)
       });
+      this.emitFile({
+        type: "asset",
+        fileName: `${outputPrefix}platform-react-digest-map.json`,
+        source: JSON.stringify({ digests }, null, 2)
+      });
     }
   };
 }
@@ -894,9 +914,116 @@ function parsePlatformReactPages(manifestPath, options = {}) {
   }
   return result;
 }
+var DEFAULT_MANIFEST = "feature.manifest.json";
+var DEFAULT_OUTPUT_DIR = "dist/iframe-sandbox";
+var DIGEST_MAP_FILENAME = "iframe-sandbox-digest-map.json";
+function slash3(p) {
+  return sep === "\\" ? p.replace(/\\/g, "/") : p;
+}
+function defaultWriteFile(path, contents) {
+  mkdirSync(dirname(path), { recursive: true });
+  writeFileSync(path, contents);
+}
+var defaultBuild = async (page) => {
+  const { build } = await import('vite');
+  const result = await build({
+    root: page.root,
+    logLevel: "warn",
+    build: {
+      outDir: page.outDir,
+      emptyOutDir: true,
+      rollupOptions: {
+        input: resolve(page.root, page.entryPath)
+      }
+    }
+  });
+  const out = Array.isArray(result) ? result[0] : result;
+  return { output: out.output };
+};
+function digestOf(item) {
+  const bytes = item.type === "chunk" ? item.code : item.source;
+  return createHash("sha256").update(bytes).digest("hex");
+}
+function readManifest(options, root) {
+  if (options.manifest !== void 0) {
+    return options.manifest;
+  }
+  const rel = options.manifestPath ?? DEFAULT_MANIFEST;
+  const abs = isAbsolute(rel) ? rel : resolve(root, rel);
+  if (!existsSync(abs)) {
+    return null;
+  }
+  const raw = readFileSync(abs, "utf8");
+  try {
+    return JSON.parse(raw);
+  } catch (e) {
+    throw new Error(`[ethisys-iframe-sandbox] Failed to parse manifest at "${abs}": ${e.message}`);
+  }
+}
+async function buildIframeSandboxPages(options = {}) {
+  const root = options.root ?? process.cwd();
+  const manifest = readManifest(options, root);
+  const declared = manifest?.ui?.iframeSandboxPages;
+  if (!Array.isArray(declared) || declared.length === 0) {
+    return { digests: [], digestMapPath: null };
+  }
+  const pages = declared.map((raw, i) => {
+    try {
+      return IframeSandboxPageDeclaration.parse(raw);
+    } catch (e) {
+      throw new Error(
+        `[ethisys-iframe-sandbox] ui.iframeSandboxPages[${i}] is invalid: ${e.message}`
+      );
+    }
+  });
+  const seen = /* @__PURE__ */ new Set();
+  for (const p of pages) {
+    if (seen.has(p.id)) {
+      throw new Error(`[ethisys-iframe-sandbox] Duplicate iframe-sandbox page id "${p.id}".`);
+    }
+    seen.add(p.id);
+  }
+  const build = options.build ?? defaultBuild;
+  const write = options.writeFile ?? defaultWriteFile;
+  const outputDir = options.outputDir ?? DEFAULT_OUTPUT_DIR;
+  const outDirAbs = isAbsolute(outputDir) ? outputDir : resolve(root, outputDir);
+  const digests = [];
+  for (const page of pages) {
+    const result = await build({
+      id: page.id,
+      title: page.title,
+      entryPath: page.entryPath,
+      root,
+      outDir: resolve(outDirAbs, page.id)
+    });
+    for (const item of result.output) {
+      const entry = { path: `${page.id}/${item.fileName}`, sha256: digestOf(item) };
+      AssetDigest.parse(entry);
+      digests.push(entry);
+    }
+  }
+  const digestMapPath = resolve(outDirAbs, DIGEST_MAP_FILENAME);
+  write(slash3(digestMapPath), JSON.stringify({ digests }, null, 2));
+  return { digests, digestMapPath };
+}
+function ethisysIframeSandboxPlugin(options = {}) {
+  let resolvedRoot = options.root;
+  return {
+    name: "ethisys-iframe-sandbox",
+    enforce: "pre",
+    configResolved(config) {
+      if (!options.root) {
+        resolvedRoot = config.root;
+      }
+    },
+    async closeBundle() {
+      await buildIframeSandboxPages({ ...options, root: options.root ?? resolvedRoot });
+    }
+  };
+}
 
 // src/index.ts
-function slash3(p) {
+function slash4(p) {
   return sep === "\\" ? p.replace(/\\/g, "/") : p;
 }
 function escapeHtml(str) {
@@ -955,7 +1082,7 @@ function ethisysManifestPlugin(options = {}) {
   </body>
 </html>`;
   }
-  function readManifest() {
+  function readManifest2() {
     if (!existsSync(manifestAbsPath)) {
       return [];
     }
@@ -1007,7 +1134,7 @@ function ethisysManifestPlugin(options = {}) {
     config(config, { command }) {
       rootDir = config.root ?? process.cwd();
       manifestAbsPath = resolve(rootDir, manifestRelPath);
-      entries = readManifest();
+      entries = readManifest2();
       if (entries.length === 0) {
         return;
       }
@@ -1021,7 +1148,7 @@ function ethisysManifestPlugin(options = {}) {
           }
           seen.add(entry.entrypoint);
           const name = entry.entrypoint.replace(/\.html$/, "");
-          input[name] = slash3(resolve(rootDir, entry.entrypoint));
+          input[name] = slash4(resolve(rootDir, entry.entrypoint));
         }
         return {
           build: {
@@ -1086,9 +1213,9 @@ function ethisysManifestPlugin(options = {}) {
     // Entire handler is wrapped in try/catch so JSON syntax errors in the
     // manifest don't crash the dev server (common during active editing).
     handleHotUpdate({ file, server }) {
-      if (slash3(file) === slash3(manifestAbsPath)) {
+      if (slash4(file) === slash4(manifestAbsPath)) {
         try {
-          entries = readManifest();
+          entries = readManifest2();
           validateEntries();
           htmlCache.clear();
         } catch (e) {
@@ -1104,9 +1231,9 @@ function ethisysManifestPlugin(options = {}) {
     },
     // Build: resolve virtual HTML module IDs (no physical files exist on disk)
     resolveId(id) {
-      const normalizedId = slash3(id);
+      const normalizedId = slash4(id);
       const match = entries.find(
-        (e) => slash3(resolve(rootDir, e.entrypoint)) === normalizedId
+        (e) => slash4(resolve(rootDir, e.entrypoint)) === normalizedId
       );
       if (match) {
         return id;
@@ -1114,9 +1241,9 @@ function ethisysManifestPlugin(options = {}) {
     },
     // Build: provide virtual HTML content for Rollup
     load(id) {
-      const normalizedId = slash3(id);
+      const normalizedId = slash4(id);
       const match = entries.find(
-        (e) => slash3(resolve(rootDir, e.entrypoint)) === normalizedId
+        (e) => slash4(resolve(rootDir, e.entrypoint)) === normalizedId
       );
       if (match) {
         return generateHtml(match);
@@ -1125,6 +1252,6 @@ function ethisysManifestPlugin(options = {}) {
   };
 }
 
-export { CONTRACT_B_IMPORT_MAP_ALLOWLIST, CONTRACT_B_RUNTIME_IMPORTS, CONTRACT_B_SEMANTIC_PRIMITIVES, ethisysContractAPlugin, ethisysContractBPlugin, ethisysManifestPlugin, ethisysPlatformReactPlugin, parsePlatformReactPages, validateDeclarativeResource, validateReactiveRule };
+export { CONTRACT_B_IMPORT_MAP_ALLOWLIST, CONTRACT_B_RUNTIME_IMPORTS, CONTRACT_B_SEMANTIC_PRIMITIVES, buildIframeSandboxPages, ethisysContractAPlugin, ethisysContractBPlugin, ethisysIframeSandboxPlugin, ethisysManifestPlugin, ethisysPlatformReactPlugin, parsePlatformReactPages, validateDeclarativeResource, validateReactiveRule };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map