@fluid-app/portal-sdk 0.1.440 → 0.1.441

package/dist/{build-widget-registry-DCUqmbJi.mjs → build-widget-registry-DPQbuyej.mjs}

@@ -31,7 +31,6 @@ import { useQuery } from "@tanstack/react-query";
 import { jsx } from "react/jsx-runtime";
 import Color from "colorjs.io";
 import { SearchSort } from "@fluid-app/ui-components/components/SearchSort";
-import { isRemoteDomSerializableValue, mountRemoteDomWidget } from "@fluid-app/widget-runtime/remote-dom";
 import { createRoot } from "react-dom/client";
 //#region ../../../node_modules/.pnpm/@tanstack+query-core@5.101.0/node_modules/@tanstack/query-core/build/modern/timeoutManager.js
 var defaultTimeoutProvider = {
@@ -1449,6 +1448,149 @@ const DEFAULT_SDK_WIDGET_REGISTRY = createWidgetRegistry({
 	ToDoWidget,
 	VideoWidget
 });
+const REMOTE_DOM_WIDGET_RUNTIME = "remote-dom";
+const PACKAGE_FIELDS = new Set([
+	"manifestVersion",
+	"runtime",
+	"packageId",
+	"source",
+	"version",
+	"workerEntryUrl",
+	"cssUrls",
+	"assetUrls",
+	"widgets"
+]);
+const WIDGET_FIELDS = new Set([
+	"type",
+	"displayName",
+	"description",
+	"icon",
+	"category",
+	"propertySchema",
+	"defaultProps",
+	"container",
+	"resizable",
+	"minSdkVersion",
+	"capabilities"
+]);
+const CAPABILITY_FIELDS = new Set(["name", "version"]);
+const UNSAFE_JSON_KEYS = new Set([
+	"__proto__",
+	"constructor",
+	"prototype"
+]);
+function isRemoteDomWidgetPackageDescriptor(value) {
+	return getRemoteDomWidgetPackageInvalidReason(value) === void 0;
+}
+function getRemoteDomWidgetPackageInvalidReason(value) {
+	if (!isRecord$1(value)) return "descriptor must be an object";
+	const unexpectedFieldReason = getUnexpectedFieldReason(value, PACKAGE_FIELDS, "descriptor");
+	if (unexpectedFieldReason) return unexpectedFieldReason;
+	if (value.manifestVersion !== 1) return `manifestVersion must be 1`;
+	if (value.runtime !== "remote-dom") return `runtime must be ${REMOTE_DOM_WIDGET_RUNTIME}`;
+	const packageIdReason = getNonEmptyStringReason(value.packageId, "packageId");
+	if (packageIdReason) return packageIdReason;
+	if (value.source !== "company" && value.source !== "droplet") return "source must be company or droplet";
+	const versionReason = getNonEmptyStringReason(value.version, "version");
+	if (versionReason) return versionReason;
+	const workerEntryUrlReason = getHttpUrlReason(value.workerEntryUrl, "workerEntryUrl");
+	if (workerEntryUrlReason) return workerEntryUrlReason;
+	const cssUrlsReason = getUrlArrayReason(value.cssUrls, "cssUrls");
+	if (cssUrlsReason) return cssUrlsReason;
+	const assetUrlsReason = getUrlArrayReason(value.assetUrls, "assetUrls");
+	if (assetUrlsReason) return assetUrlsReason;
+	if (!Array.isArray(value.widgets) || value.widgets.length === 0) return "widgets must be a non-empty array";
+	const widgetTypes = /* @__PURE__ */ new Set();
+	for (let index = 0; index < value.widgets.length; index += 1) {
+		const widget = value.widgets[index];
+		const widgetReason = getWidgetReason(widget, `widgets[${index}]`);
+		if (widgetReason) return widgetReason;
+		const widgetType = widget.type;
+		if (widgetTypes.has(widgetType)) return `widgets contains duplicate type ${widgetType}`;
+		widgetTypes.add(widgetType);
+	}
+}
+function getWidgetReason(value, path) {
+	if (!isRecord$1(value)) return `${path} must be an object`;
+	const unexpectedFieldReason = getUnexpectedFieldReason(value, WIDGET_FIELDS, path);
+	if (unexpectedFieldReason) return unexpectedFieldReason;
+	for (const field of [
+		"type",
+		"displayName",
+		"description",
+		"icon",
+		"category",
+		"minSdkVersion"
+	]) {
+		const reason = getNonEmptyStringReason(value[field], `${path}.${field}`);
+		if (reason) return reason;
+	}
+	if (!isRecord$1(value.propertySchema) || !isJsonValue(value.propertySchema)) return `${path}.propertySchema must be a JSON object`;
+	if (!isRecord$1(value.defaultProps) || !isJsonValue(value.defaultProps)) return `${path}.defaultProps must be a JSON object`;
+	if (value.container !== "inline" && value.container !== "block" && value.container !== "card" && value.container !== "fullscreen") return `${path}.container is unsupported`;
+	if (typeof value.resizable !== "boolean" && value.resizable !== "horizontal" && value.resizable !== "vertical" && value.resizable !== "both") return `${path}.resizable is unsupported`;
+	if (!Array.isArray(value.capabilities)) return `${path}.capabilities must be an array`;
+	const capabilityNames = /* @__PURE__ */ new Set();
+	for (let index = 0; index < value.capabilities.length; index += 1) {
+		const capability = value.capabilities[index];
+		const capabilityPath = `${path}.capabilities[${index}]`;
+		if (!isRecord$1(capability)) return `${capabilityPath} must be an object`;
+		const unexpectedFieldReason = getUnexpectedFieldReason(capability, CAPABILITY_FIELDS, capabilityPath);
+		if (unexpectedFieldReason) return unexpectedFieldReason;
+		const capabilityName = capability.name;
+		const nameReason = getNonEmptyStringReason(capabilityName, `${capabilityPath}.name`);
+		if (nameReason) return nameReason;
+		if (typeof capabilityName !== "string") return `${capabilityPath}.name must be a non-empty string`;
+		const versionReason = getNonEmptyStringReason(capability.version, `${capabilityPath}.version`);
+		if (versionReason) return versionReason;
+		if (capabilityNames.has(capabilityName)) return `${path}.capabilities contains duplicate name ${capabilityName}`;
+		capabilityNames.add(capabilityName);
+	}
+}
+function getUrlArrayReason(value, path) {
+	if (!Array.isArray(value)) return `${path} must be an array`;
+	for (let index = 0; index < value.length; index += 1) {
+		const reason = getHttpUrlReason(value[index], `${path}[${index}]`);
+		if (reason) return reason;
+	}
+}
+function getHttpUrlReason(value, path) {
+	const stringReason = getNonEmptyStringReason(value, path);
+	if (stringReason) return stringReason;
+	if (typeof value !== "string") return `${path} must be a non-empty string`;
+	try {
+		const url = new URL(value);
+		if (url.protocol !== "http:" && url.protocol !== "https:") return `${path} must use http or https`;
+		if (url.username || url.password) return `${path} must not contain credentials`;
+	} catch {
+		return `${path} must be an absolute URL`;
+	}
+}
+function getNonEmptyStringReason(value, path) {
+	if (typeof value !== "string" || value.trim().length === 0) return `${path} must be a non-empty string`;
+	if (value !== value.trim()) return `${path} must not have surrounding whitespace`;
+	if (/\p{Cc}/u.test(value)) return `${path} must not contain control characters`;
+}
+function isJsonValue(value) {
+	return isJsonValueAtDepth(value, /* @__PURE__ */ new WeakSet(), 0);
+}
+function isJsonValueAtDepth(value, ancestors, depth) {
+	if (value === null || typeof value === "string" || typeof value === "boolean") return true;
+	if (typeof value === "number") return Number.isFinite(value);
+	if (typeof value !== "object" || depth > 50 || ancestors.has(value)) return false;
+	ancestors.add(value);
+	const prototype = Object.getPrototypeOf(value);
+	const isJson = Array.isArray(value) ? value.every((item) => isJsonValueAtDepth(item, ancestors, depth + 1)) : (prototype === Object.prototype || prototype === null) && isRecord$1(value) && Object.entries(value).every(([key, item]) => !UNSAFE_JSON_KEYS.has(key) && isJsonValueAtDepth(item, ancestors, depth + 1));
+	ancestors.delete(value);
+	return isJson;
+}
+function isRecord$1(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function getUnexpectedFieldReason(value, allowedFields, path) {
+	const unexpectedField = Object.keys(value).find((field) => !allowedFields.has(field));
+	return unexpectedField ? `${path} contains unsupported field ${unexpectedField}` : void 0;
+}
 //#endregion
 //#region src/hooks/query-keys.ts
 /**
@@ -2228,43 +2370,46 @@ function useScreenAreaFullscreenSnapshot() {
 const FLUID_SPACER_WIDGET_TAG_NAME = "fluid-spacer-widget";
 /** Registers the one portal-widgets element available to remote workers. */
 function registerFluidSpacerWidgetElement() {
-	if (typeof customElements === "undefined" || customElements.get("fluid-spacer-widget")) return;
-	customElements.define(FLUID_SPACER_WIDGET_TAG_NAME, FluidSpacerWidgetElement);
-}
-var FluidSpacerWidgetElement = class extends HTMLElement {
-	#root;
-	#customHeight;
-	#previewMode = false;
-	set customHeight(value) {
-		this.#customHeight = typeof value === "string" ? value : void 0;
-		this.#render();
-	}
-	get customHeight() {
-		return this.#customHeight;
-	}
-	set previewMode(value) {
-		this.#previewMode = value === true;
-		this.#render();
-	}
-	get previewMode() {
-		return this.#previewMode;
-	}
-	connectedCallback() {
-		this.#render();
-	}
-	disconnectedCallback() {
-		this.#root?.unmount();
-		this.#root = void 0;
-	}
-	#render() {
-		if (!this.isConnected) return;
-		this.#root ??= createRoot(this);
-		this.#root.render(/* @__PURE__ */ jsx(SpacerWidget, {
-			...this.#customHeight === void 0 ? {} : { customHeight: this.#customHeight },
-			previewMode: this.#previewMode
-		}));
-	}
-};
+	if (typeof customElements === "undefined" || typeof HTMLElement === "undefined" || customElements.get("fluid-spacer-widget")) return;
+	customElements.define(FLUID_SPACER_WIDGET_TAG_NAME, createFluidSpacerWidgetElement());
+}
+/** Keeps browser globals lazy so importing the registry remains safe during SSR. */
+function createFluidSpacerWidgetElement() {
+	return class FluidSpacerWidgetElement extends HTMLElement {
+		#root;
+		#customHeight;
+		#previewMode = false;
+		set customHeight(value) {
+			this.#customHeight = typeof value === "string" ? value : void 0;
+			this.#render();
+		}
+		get customHeight() {
+			return this.#customHeight;
+		}
+		set previewMode(value) {
+			this.#previewMode = value === true;
+			this.#render();
+		}
+		get previewMode() {
+			return this.#previewMode;
+		}
+		connectedCallback() {
+			this.#render();
+		}
+		disconnectedCallback() {
+			this.#root?.unmount();
+			this.#root = void 0;
+		}
+		#render() {
+			if (!this.isConnected) return;
+			this.#root ??= createRoot(this);
+			this.#root.render(/* @__PURE__ */ jsx(SpacerWidget, {
+				...this.#customHeight === void 0 ? {} : { customHeight: this.#customHeight },
+				previewMode: this.#previewMode
+			}));
+		}
+	};
+}
 //#endregion
 //#region src/widgets/remote-dom-elements.tsx
 const FLUID_SEARCH_SORT_TAG_NAME = "fluid-ui-search-sort";
@@ -2417,7 +2562,8 @@ function createRemoteWidgetComponent(remotePackage, widget, options, functionImp
 			if (!host || !serialization.ok) return;
 			let handle;
 			let active = true;
-			try {
+			import("@fluid-app/widget-runtime/remote-dom").then(({ mountRemoteDomWidget }) => {
+				if (!active) return;
 				setError(null);
 				handle = mountRemoteDomWidget({
 					host,
@@ -2431,7 +2577,7 @@ function createRemoteWidgetComponent(remotePackage, widget, options, functionImp
 						capabilities: widget.capabilities
 					},
 					props: serializablePropsRef.current,
-					...typeof window === "undefined" ? {} : { hostOrigin: window.location.origin },
+					hostOrigin: window.location.origin,
 					onNavigate: (intent) => {
 						if (options.onNavigate) {
 							options.onNavigate(intent);
@@ -2446,7 +2592,7 @@ function createRemoteWidgetComponent(remotePackage, widget, options, functionImp
 						const onFullscreen = options.onFullscreen;
 						const observe = onFullscreen ? async (observedRequest) => {
 							try {
-								if (!isRemoteDomSerializableValue(await onFullscreen(observedRequest))) throwPortalFunctionHostError("INVALID_RESPONSE", "Host implementation returned an invalid response for portal function \"fullscreen\".");
+								if (!isJsonValue(await onFullscreen(observedRequest))) throwPortalFunctionHostError("INVALID_RESPONSE", "Host implementation returned an invalid response for portal function \"fullscreen\".");
 							} catch (error) {
 								if (isPortalFunctionHostError(error)) throw error;
 								throwPortalFunctionHostError("HOST_FAILURE", "Host implementation failed for portal function \"fullscreen\".");
@@ -2480,26 +2626,25 @@ function createRemoteWidgetComponent(remotePackage, widget, options, functionImp
 						} catch {
 							throwPortalFunctionHostError("HOST_FAILURE", `Host implementation failed for portal function "${capability}.${method}".`);
 						}
-						if (!isRemoteDomSerializableValue(result)) throwPortalFunctionHostError("INVALID_RESPONSE", `Host implementation returned an invalid response for portal function "${capability}.${method}".`);
+						if (!isJsonValue(result)) throwPortalFunctionHostError("INVALID_RESPONSE", `Host implementation returned an invalid response for portal function "${capability}.${method}".`);
 						return result;
 					},
 					onError: (runtimeError) => {
 						if (active) setError(runtimeError);
 					}
 				});
-			} catch (mountError) {
-				setError(toError(mountError));
-				return;
-			}
-			handleRef.current = handle;
-			handle.ready.catch((readyError) => {
-				if (active) setError(toError(readyError));
+				handleRef.current = handle;
+				handle.ready.catch((readyError) => {
+					if (active) setError(toError(readyError));
+				});
+			}).catch((mountError) => {
+				if (active) setError(toError(mountError));
 			});
 			return () => {
 				active = false;
 				fullscreenCoordinatorRef.current?.disposeOwner(fullscreenOwner);
 				handleRef.current = null;
-				handle.dispose();
+				handle?.dispose();
 			};
 		}, [fullscreenOwner, serialization.ok]);
 		useEffect(() => {
@@ -2546,7 +2691,7 @@ function isPortalFunctionHostError(error) {
 	return error instanceof Error && error.message.includes("PORTAL_FUNCTION_ERROR:");
 }
 function serializeProps(value) {
-	return isRemoteDomSerializableValue(value) ? {
+	return isJsonValue(value) ? {
 		ok: true,
 		value
 	} : {
@@ -2566,6 +2711,6 @@ function isBuiltInWidgetType(widgetType) {
 	return Object.prototype.hasOwnProperty.call(DEFAULT_SDK_WIDGET_REGISTRY, widgetType);
 }
 //#endregion
-export { DEFAULT_FONT_FAMILIES as A, mergeDarkOverrides as B, removeTheme as C, deserialiseTheme as D, transformThemes as E, DEFAULT_THEME_NAME as F, RADIUS_KEYS as G, resolveTheme as H, getDefaultThemeDefinition as I, useAppDefinitionApi as J, SEMANTIC_COLOR_NAMES as K, generateThemeCSS as L, DEFAULT_RADII as M, DEFAULT_SPACING as N, serialiseTheme as O, DEFAULT_THEME_ID as P, deriveDarkVariant as R, removeAllThemes as S, getActiveThemeId as T, FONT_FAMILY_KEYS as U, parseColor as V, FONT_SIZE_KEYS as W, deleteDatabase as X, createPersister as Y, widgetPropertySchemas as _, useScreenAreaFullscreenSnapshot as a, createWidgetRegistry as b, useFluidApp as c, toNavigationItem as d, normalizeComponentTree as f, DEFAULT_SDK_WIDGET_REGISTRY as g, useCompanyScopedQueryKey as h, useOptionalScreenAreaFullscreenCoordinator as i, DEFAULT_FONT_SIZES as j, DEFAULT_COLORS as k, toRawManifest as l, createCompanyQueryKey as m, projectRemoteWidgetPackages as n, APP_DATA_QUERY_KEY as o, toScreenDefinition as p, AppDefinitionApiProvider as q, ScreenAreaFullscreenProvider as r, fetchRawManifest as s, buildRemoteWidgetRegistry as t, transformManifestToRepAppData as u, createScreen as v, buildThemeDefinition as w, applyTheme as x, createWidgetFromShareable as y, getForegroundColor as z };
+export { DEFAULT_COLORS as A, getForegroundColor as B, removeAllThemes as C, transformThemes as D, getActiveThemeId as E, DEFAULT_THEME_ID as F, FONT_SIZE_KEYS as G, parseColor as H, DEFAULT_THEME_NAME as I, AppDefinitionApiProvider as J, RADIUS_KEYS as K, getDefaultThemeDefinition as L, DEFAULT_FONT_SIZES as M, DEFAULT_RADII as N, deserialiseTheme as O, DEFAULT_SPACING as P, generateThemeCSS as R, applyTheme as S, buildThemeDefinition as T, resolveTheme as U, mergeDarkOverrides as V, FONT_FAMILY_KEYS as W, createPersister as X, useAppDefinitionApi as Y, deleteDatabase as Z, DEFAULT_SDK_WIDGET_REGISTRY as _, useScreenAreaFullscreenSnapshot as a, createWidgetFromShareable as b, useFluidApp as c, toNavigationItem as d, normalizeComponentTree as f, isRemoteDomWidgetPackageDescriptor as g, useCompanyScopedQueryKey as h, useOptionalScreenAreaFullscreenCoordinator as i, DEFAULT_FONT_FAMILIES as j, serialiseTheme as k, toRawManifest as l, createCompanyQueryKey as m, projectRemoteWidgetPackages as n, APP_DATA_QUERY_KEY as o, toScreenDefinition as p, SEMANTIC_COLOR_NAMES as q, ScreenAreaFullscreenProvider as r, fetchRawManifest as s, buildRemoteWidgetRegistry as t, transformManifestToRepAppData as u, widgetPropertySchemas as v, removeTheme as w, createWidgetRegistry as x, createScreen as y, deriveDarkVariant as z };
 
-//# sourceMappingURL=build-widget-registry-DCUqmbJi.mjs.map
+//# sourceMappingURL=build-widget-registry-DPQbuyej.mjs.map