@grafloria/element 0.3.18 → 0.3.19

package/src/libs/renderer/src/ext/extension-host.js

@@ -0,0 +1,272 @@
+"use strict";
+/**
+ * ============================================================================
+ * Card 0 — the ExtensionHost, and Card 7 — the capability-scoped sandbox
+ * ============================================================================
+ *
+ * Before Wave 6 the extension story was seven unrelated registries, reached by
+ * importing whatever module happened to own them:
+ *
+ *   registerShape / registerPathShape        (renderer, module-global map)
+ *   registerLinkTemplate / registerLabelTemplate / registerMarker
+ *                                            (renderer, module-global maps)
+ *   RoutingEngine.registerRouter             (engine, per-engine instance)
+ *   TemplateRegistry.register                (engine, per-engine instance)
+ *   CustomAnimationRegistry.register         (renderer, global singleton)
+ *   PropertyEditorRegistryService            (ANGULAR-only — see note below)
+ *   HandleRegistryService                    (ANGULAR-only)
+ *
+ * Not one of them returned a disposer, three had no removal path at all, and two
+ * were reachable only from Angular. There was no way to answer "what did this
+ * plugin add?" or "unload it".
+ *
+ * The ExtensionHost is the ONE public seam over those. It is a FACADE — it does
+ * not reimplement a single registry — and it adds exactly what they lacked:
+ *
+ *   • ONE entry point, `host.register(extension)`.
+ *   • LEAST PRIVILEGE. An extension declares `capabilities: ['shapes']` and
+ *     receives an object with ONLY `shapes` on it. There is no `engine` handle,
+ *     no `document`, no way to reach a registry it did not ask for. Asking for a
+ *     capability the host was not given (e.g. `routers` with no engine bound)
+ *     fails AT REGISTRATION, not at first use.
+ *   • DISPOSERS EVERYWHERE. Every registration is tracked; `dispose()` unwinds
+ *     the extension completely and RESTORES anything it overrode.
+ *   • ENGINE COMPAT. A manifest declares the engine range it supports and is
+ *     REJECTED — loudly — if it does not match.
+ *   • LAZY LOADING. `registerLazy()` takes a `() => Promise<Extension>` and does
+ *     not touch it until `activate(id)`.
+ *
+ * ---------------------------------------------------------------------------
+ * NOTE — the two Angular-only registries
+ * ---------------------------------------------------------------------------
+ * `PropertyEditorRegistryService` and `HandleRegistryService` are Angular
+ * `@Injectable`s living in `libs/renderer-angular`. `libs/renderer` may not
+ * import Angular (hard rule), so they CANNOT be wrapped from here without first
+ * being lowered into the framework-free core. That lowering is a real piece of
+ * work and is NOT in this wave — stated plainly rather than faked with an
+ * any-typed shim. The host is designed for it: adding `editors` / `handles` to
+ * `CapabilityName` is additive and breaks nothing.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExtensionHost = exports.EXTENSION_API_VERSION = void 0;
+exports.createExtensionHost = createExtensionHost;
+const tslib_1 = require("tslib");
+const disposable_1 = require("./disposable");
+const capability_factory_1 = require("./capability-factory");
+const manifest_1 = require("./manifest");
+/** The engine/host API version extensions declare compatibility against. */
+exports.EXTENSION_API_VERSION = '1.0.0';
+class ExtensionHost {
+    constructor(options) {
+        var _a;
+        this.entries = new Map();
+        this.disposed = false;
+        this.bindings = options;
+        this.apiVersion = (_a = options.apiVersion) !== null && _a !== void 0 ? _a : exports.EXTENSION_API_VERSION;
+    }
+    /** The engine this host is bound to (hosts, not extensions, may ask). */
+    get engine() {
+        return this.bindings.engine;
+    }
+    /**
+     * Register and ACTIVATE an extension.
+     *
+     * Throws — deliberately, and before any side effect — when the manifest is
+     * malformed, the id is taken, the engine range excludes this host, or the
+     * extension asks for a capability this host cannot grant. A plugin that half-
+     * loads is worse than one that refuses to.
+     */
+    register(extension) {
+        this.assertLive();
+        const manifest = extension.manifest;
+        (0, manifest_1.validateManifest)(manifest);
+        (0, manifest_1.assertEngineCompatible)(manifest, this.apiVersion);
+        this.assertIdFree(manifest.id);
+        this.assertGrantable(manifest);
+        const entry = {
+            manifest: manifest,
+            extension: extension,
+            store: new disposable_1.DisposableStore(),
+            active: false,
+        };
+        this.entries.set(manifest.id, entry);
+        try {
+            this.activateEntry(entry);
+        }
+        catch (error) {
+            // Roll back anything the failed activate() managed to register, so a
+            // broken plugin cannot leave shrapnel in the registries.
+            entry.store.dispose();
+            this.entries.delete(manifest.id);
+            throw error;
+        }
+        return () => this.dispose(manifest.id);
+    }
+    /**
+     * Register WITHOUT loading. The factory is not called until `activate(id)`,
+     * so a 500 KB plugin costs nothing until something needs it.
+     *
+     * The manifest is supplied up front precisely so the host can answer "what
+     * shapes/routers exist?" and validate compatibility WITHOUT paying the import.
+     */
+    registerLazy(manifest, load) {
+        this.assertLive();
+        (0, manifest_1.validateManifest)(manifest);
+        (0, manifest_1.assertEngineCompatible)(manifest, this.apiVersion);
+        this.assertIdFree(manifest.id);
+        this.assertGrantable(manifest);
+        this.entries.set(manifest.id, {
+            manifest: manifest,
+            lazy: load,
+            store: new disposable_1.DisposableStore(),
+            active: false,
+        });
+        return () => this.dispose(manifest.id);
+    }
+    /** Activate a lazily-registered extension (imports it on first call). */
+    activate(id) {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            var _a;
+            this.assertLive();
+            const entry = this.entries.get(id);
+            if (!entry)
+                throw new Error(`[ExtensionHost] unknown extension '${id}'`);
+            if (entry.active)
+                return;
+            if (!entry.extension && entry.lazy) {
+                const loaded = yield entry.lazy();
+                const resolved = (_a = loaded.default) !== null && _a !== void 0 ? _a : loaded;
+                entry.extension = resolved;
+                // The lazily-loaded module could ship a manifest that disagrees with the
+                // one we validated. Trust the DECLARED one (we gated on it) and refuse the
+                // mismatch rather than silently widening the extension's privileges.
+                const actual = entry.extension.manifest;
+                if (actual && actual.id !== entry.manifest.id) {
+                    throw new Error(`[ExtensionHost] lazy extension '${entry.manifest.id}' loaded a manifest for ` +
+                        `'${actual.id}' — refusing (a plugin may not change its identity on load)`);
+                }
+            }
+            if (!entry.extension) {
+                throw new Error(`[ExtensionHost] extension '${id}' has no implementation`);
+            }
+            try {
+                yield this.activateEntry(entry);
+            }
+            catch (error) {
+                entry.store.dispose();
+                throw error;
+            }
+        });
+    }
+    activateEntry(entry) {
+        const extension = entry.extension;
+        if (!extension)
+            return;
+        const capabilities = (0, capability_factory_1.buildCapabilities)(entry.manifest.capabilities, this.bindings, entry.store);
+        const context = {
+            id: entry.manifest.id,
+            capabilities: capabilities,
+            onDispose: (disposer) => {
+                entry.store.add(disposer);
+            },
+        };
+        const result = extension.activate(context);
+        const finish = (returned) => {
+            var _a, _b;
+            if (typeof returned === 'function')
+                entry.store.add(returned);
+            entry.active = true;
+            // A contributed shape/connector changes the picture, so ask for a repaint.
+            (_b = (_a = this.bindings).requestRender) === null || _b === void 0 ? void 0 : _b.call(_a);
+        };
+        if (result && typeof result.then === 'function') {
+            return result.then(finish);
+        }
+        finish(result);
+    }
+    /** Tear one extension down. Every registration it made is undone. */
+    dispose(id) {
+        var _a, _b, _c, _d;
+        const entry = this.entries.get(id);
+        if (!entry)
+            return;
+        this.entries.delete(id);
+        try {
+            if (entry.active)
+                (_b = (_a = entry.extension) === null || _a === void 0 ? void 0 : _a.deactivate) === null || _b === void 0 ? void 0 : _b.call(_a);
+        }
+        finally {
+            // Even if deactivate() throws, the registrations MUST come out.
+            entry.store.dispose();
+            entry.active = false;
+            (_d = (_c = this.bindings).requestRender) === null || _d === void 0 ? void 0 : _d.call(_c);
+        }
+    }
+    /** Tear everything down. The host is unusable afterwards. */
+    disposeAll() {
+        if (this.disposed)
+            return;
+        for (const id of [...this.entries.keys()])
+            this.dispose(id);
+        this.disposed = true;
+    }
+    has(id) {
+        return this.entries.has(id);
+    }
+    get(id) {
+        const entry = this.entries.get(id);
+        if (!entry)
+            return undefined;
+        return {
+            manifest: entry.manifest,
+            active: entry.active,
+            registrationCount: entry.store.size,
+        };
+    }
+    /** Everything registered, loaded or not. */
+    list() {
+        return [...this.entries.values()].map((entry) => ({
+            manifest: entry.manifest,
+            active: entry.active,
+            registrationCount: entry.store.size,
+        }));
+    }
+    // -- guards ---------------------------------------------------------------
+    assertLive() {
+        if (this.disposed)
+            throw new Error('[ExtensionHost] host has been disposed');
+    }
+    assertIdFree(id) {
+        if (this.entries.has(id)) {
+            throw new Error(`[ExtensionHost] extension '${id}' is already registered`);
+        }
+    }
+    /**
+     * Least privilege, enforced EARLY. An extension that declares `panels` in a
+     * headless host (no DOM bound) is rejected here — not at first `createPanel()`
+     * call three minutes into a session.
+     */
+    assertGrantable(manifest) {
+        for (const capability of manifest.capabilities) {
+            if (capability === 'panels' && !this.bindings.root) {
+                throw new Error(`[ExtensionHost] extension '${manifest.id}' declares the 'panels' capability, ` +
+                    `but this host has no DOM root bound (headless). Refusing to register.`);
+            }
+            if (capability === 'routers' && !this.bindings.engine) {
+                throw new Error(`[ExtensionHost] extension '${manifest.id}' declares 'routers', but this ` +
+                    `host has no engine bound. Refusing to register.`);
+            }
+            if (capability === 'templates' && !this.bindings.templateRegistry) {
+                throw new Error(`[ExtensionHost] extension '${manifest.id}' declares 'templates', but this host ` +
+                    `has no TemplateRegistry bound. Pass one as \`templateRegistry\` — the engine ` +
+                    `does not expose it, so the host cannot find it for you.`);
+            }
+        }
+    }
+}
+exports.ExtensionHost = ExtensionHost;
+/** Convenience: a host bound to a live `createDiagram()` instance. */
+function createExtensionHost(options) {
+    return new ExtensionHost(options);
+}
+//# sourceMappingURL=extension-host.js.map

package/src/libs/renderer/src/ext/extension-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension-host.js","sourceRoot":"","sources":["../../../../../../renderer/src/ext/extension-host.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;;;AAuTH,kDAEC;;AA/SD,6CAA+C;AAC/C,6DAAyD;AAEzD,yCAAsE;AAEtE,4EAA4E;AAC/D,QAAA,qBAAqB,GAAG,OAAO,CAAC;AAyD7C,MAAa,aAAa;IAMxB,YAAY,OAA6B;;QALxB,YAAO,GAAG,IAAI,GAAG,EAAiB,CAAC;QAG5C,aAAQ,GAAG,KAAK,CAAC;QAGvB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,UAAU,GAAG,MAAA,OAAO,CAAC,UAAU,mCAAI,6BAAqB,CAAC;IAChE,CAAC;IAED,yEAAyE;IACzE,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;IAC9B,CAAC;IAED;;;;;;;OAOG;IACH,QAAQ,CAA2B,SAAuB;QACxD,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;QACpC,IAAA,2BAAgB,EAAC,QAAQ,CAAC,CAAC;QAC3B,IAAA,iCAAsB,EAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAE/B,MAAM,KAAK,GAAU;YACnB,QAAQ,EAAE,QAA6B;YACvC,SAAS,EAAE,SAAiD;YAC5D,KAAK,EAAE,IAAI,4BAAe,EAAE;YAC5B,MAAM,EAAE,KAAK;SACd,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAErC,IAAI,CAAC;YACH,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,qEAAqE;YACrE,yDAAyD;YACzD,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACtB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACjC,MAAM,KAAK,CAAC;QACd,CAAC;QAED,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACzC,CAAC;IAED;;;;;;OAMG;IACH,YAAY,CACV,QAA8B,EAC9B,IAAsB;QAEtB,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAA,2BAAgB,EAAC,QAAQ,CAAC,CAAC;QAC3B,IAAA,iCAAsB,EAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAE/B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE;YAC5B,QAAQ,EAAE,QAA6B;YACvC,IAAI,EAAE,IAAgD;YACtD,KAAK,EAAE,IAAI,4BAAe,EAAE;YAC5B,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;QAEH,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,yEAAyE;IACnE,QAAQ,CAAC,EAAU;;;YACvB,IAAI,CAAC,UAAU,EAAE,CAAC;YAClB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACnC,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC;YACzE,IAAI,KAAK,CAAC,MAAM;gBAAE,OAAO;YAEzB,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBACnC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;gBAClC,MAAM,QAAQ,GAAG,MAAC,MAAkD,CAAC,OAAO,mCAAI,MAAM,CAAC;gBACvF,KAAK,CAAC,SAAS,GAAG,QAAqC,CAAC;gBAExD,yEAAyE;gBACzE,2EAA2E;gBAC3E,qEAAqE;gBACrE,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC;gBACxC,IAAI,MAAM,IAAI,MAAM,CAAC,EAAE,KAAK,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBAC9C,MAAM,IAAI,KAAK,CACb,mCAAmC,KAAK,CAAC,QAAQ,CAAC,EAAE,0BAA0B;wBAC5E,IAAI,MAAM,CAAC,EAAE,6DAA6D,CAC7E,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CAAC,8BAA8B,EAAE,yBAAyB,CAAC,CAAC;YAC7E,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YAClC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBACtB,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;KAAA;IAEO,aAAa,CAAC,KAAY;QAChC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,SAAS;YAAE,OAAO;QAEvB,MAAM,YAAY,GAAG,IAAA,sCAAiB,EACpC,KAAK,CAAC,QAAQ,CAAC,YAAY,EAC3B,IAAI,CAAC,QAAQ,EACb,KAAK,CAAC,KAAK,CACZ,CAAC;QAEF,MAAM,OAAO,GAAqC;YAChD,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;YACrB,YAAY,EAAE,YAA2D;YACzE,SAAS,EAAE,CAAC,QAAQ,EAAE,EAAE;gBACtB,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC5B,CAAC;SACF,CAAC;QAEF,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAE3C,MAAM,MAAM,GAAG,CAAC,QAAyB,EAAQ,EAAE;;YACjD,IAAI,OAAO,QAAQ,KAAK,UAAU;gBAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC9D,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;YACpB,2EAA2E;YAC3E,MAAA,MAAA,IAAI,CAAC,QAAQ,EAAC,aAAa,kDAAI,CAAC;QAClC,CAAC,CAAC;QAEF,IAAI,MAAM,IAAI,OAAQ,MAAwB,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACnE,OAAQ,MAAmC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,CAAC,MAAyB,CAAC,CAAC;IACpC,CAAC;IAED,qEAAqE;IACrE,OAAO,CAAC,EAAU;;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAExB,IAAI,CAAC;YACH,IAAI,KAAK,CAAC,MAAM;gBAAE,MAAA,MAAA,KAAK,CAAC,SAAS,0CAAE,UAAU,kDAAI,CAAC;QACpD,CAAC;gBAAS,CAAC;YACT,gEAAgE;YAChE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACtB,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;YACrB,MAAA,MAAA,IAAI,CAAC,QAAQ,EAAC,aAAa,kDAAI,CAAC;QAClC,CAAC;IACH,CAAC;IAED,6DAA6D;IAC7D,UAAU;QACR,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;IACvB,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC7B,OAAO;YACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,iBAAiB,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI;SACpC,CAAC;IACJ,CAAC;IAED,4CAA4C;IAC5C,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAChD,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,iBAAiB,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI;SACpC,CAAC,CAAC,CAAC;IACN,CAAC;IAED,4EAA4E;IAEpE,UAAU;QAChB,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC/E,CAAC;IAEO,YAAY,CAAC,EAAU;QAC7B,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,8BAA8B,EAAE,yBAAyB,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,eAAe,CAAC,QAA2C;QACjE,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;YAC/C,IAAI,UAAU,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnD,MAAM,IAAI,KAAK,CACb,8BAA8B,QAAQ,CAAC,EAAE,sCAAsC;oBAC7E,uEAAuE,CAC1E,CAAC;YACJ,CAAC;YACD,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACtD,MAAM,IAAI,KAAK,CACb,8BAA8B,QAAQ,CAAC,EAAE,iCAAiC;oBACxE,iDAAiD,CACpD,CAAC;YACJ,CAAC;YACD,IAAI,UAAU,KAAK,WAAW,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC;gBAClE,MAAM,IAAI,KAAK,CACb,8BAA8B,QAAQ,CAAC,EAAE,wCAAwC;oBAC/E,+EAA+E;oBAC/E,yDAAyD,CAC5D,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;CACF;AA3OD,sCA2OC;AAED,sEAAsE;AACtE,SAAgB,mBAAmB,CAAC,OAA6B;IAC/D,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;AACpC,CAAC"}

package/src/libs/renderer/src/ext/index.d.ts

@@ -0,0 +1,62 @@
+/**
+ * ============================================================================
+ * @grafloria/renderer — the EXTENSION API (Wave 6)
+ * ============================================================================
+ *
+ * The public, semver'd seam for everything a host can add to the engine. One
+ * entry point, typed capability grants, and a disposer on every registration.
+ *
+ * ```ts
+ * import { createDiagram, createExtensionHost, attachCanvasPlugins } from '@grafloria/renderer';
+ *
+ * const diagram = createDiagram(el, { nodes, edges });
+ *
+ * // The drop-in components (Card 6) — background grid, minimap, controls.
+ * const plugins = attachCanvasPlugins(diagram, {
+ *   background: { variant: 'dots', gap: 20 },
+ *   minimap: true,
+ *   controls: true,
+ * });
+ *
+ * // A capability-scoped extension (Cards 0 + 7).
+ * const host = createExtensionHost({
+ *   engine: diagram.getEngine(),
+ *   root: diagram.container,
+ *   requestRender: () => diagram.render(),
+ * });
+ *
+ * host.register({
+ *   manifest: {
+ *     id: 'acme.stars',
+ *     version: '1.0.0',
+ *     engines: { grafloria: '^1.0.0' },
+ *     capabilities: ['shapes', 'links'],   // ← the ENFORCED grant
+ *     contributes: { shapes: ['star'], connectors: ['zigzag'] },
+ *   },
+ *   activate({ capabilities }) {
+ *     capabilities.shapes.registerPath('star', starPath);
+ *     capabilities.links.registerConnector('zigzag', ({ points }) => zigzag(points));
+ *     // capabilities.routers is NOT here — the manifest did not ask for it.
+ *   },
+ * });
+ * ```
+ *
+ * Everything above is undone by `host.dispose('acme.stars')` — including shapes
+ * that OVERRODE a built-in, which are restored rather than deleted.
+ */
+export * from './extension-host';
+export * from './capabilities';
+export * from './disposable';
+export * from './registry-scope';
+export * from './diagram-registry';
+export * from './manifest';
+export * from './link-pipeline';
+export * from './tools';
+export * from './public-api';
+export * from './node-component';
+export * from './portal';
+export * from './components/background';
+export * from './components/minimap';
+export * from './components/controls';
+export * from './components/attach';
+export { loadCanvasPlugins } from './plugins-loader';

package/src/libs/renderer/src/ext/index.js

@@ -0,0 +1,91 @@
+"use strict";
+/**
+ * ============================================================================
+ * @grafloria/renderer — the EXTENSION API (Wave 6)
+ * ============================================================================
+ *
+ * The public, semver'd seam for everything a host can add to the engine. One
+ * entry point, typed capability grants, and a disposer on every registration.
+ *
+ * ```ts
+ * import { createDiagram, createExtensionHost, attachCanvasPlugins } from '@grafloria/renderer';
+ *
+ * const diagram = createDiagram(el, { nodes, edges });
+ *
+ * // The drop-in components (Card 6) — background grid, minimap, controls.
+ * const plugins = attachCanvasPlugins(diagram, {
+ *   background: { variant: 'dots', gap: 20 },
+ *   minimap: true,
+ *   controls: true,
+ * });
+ *
+ * // A capability-scoped extension (Cards 0 + 7).
+ * const host = createExtensionHost({
+ *   engine: diagram.getEngine(),
+ *   root: diagram.container,
+ *   requestRender: () => diagram.render(),
+ * });
+ *
+ * host.register({
+ *   manifest: {
+ *     id: 'acme.stars',
+ *     version: '1.0.0',
+ *     engines: { grafloria: '^1.0.0' },
+ *     capabilities: ['shapes', 'links'],   // ← the ENFORCED grant
+ *     contributes: { shapes: ['star'], connectors: ['zigzag'] },
+ *   },
+ *   activate({ capabilities }) {
+ *     capabilities.shapes.registerPath('star', starPath);
+ *     capabilities.links.registerConnector('zigzag', ({ points }) => zigzag(points));
+ *     // capabilities.routers is NOT here — the manifest did not ask for it.
+ *   },
+ * });
+ * ```
+ *
+ * Everything above is undone by `host.dispose('acme.stars')` — including shapes
+ * that OVERRODE a built-in, which are restored rather than deleted.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadCanvasPlugins = void 0;
+const tslib_1 = require("tslib");
+// Card 0 — the host + the typed capability contract.
+tslib_1.__exportStar(require("./extension-host"), exports);
+tslib_1.__exportStar(require("./capabilities"), exports);
+tslib_1.__exportStar(require("./disposable"), exports);
+// PER-DIAGRAM REGISTRIES. The contribution registries used to be module-scope
+// Maps — one process, one vocabulary — so two diagrams on one page could not
+// disagree about what a shape name meant, and one diagram's extension teardown
+// stripped the other's registration. `diagram.registry` is one diagram's own
+// table; the module-level `registerShape()` / `defineStyle()` / … are still the
+// process-wide one, and a diagram falls through to it for every name it did not
+// claim itself.
+tslib_1.__exportStar(require("./registry-scope"), exports);
+tslib_1.__exportStar(require("./diagram-registry"), exports);
+// Card 7 — the manifest, the compat gate, and the semver matcher behind it.
+tslib_1.__exportStar(require("./manifest"), exports);
+// Card 2 — the link-pipeline seams that were missing (anchors, connection
+// points, connectors). The router half already existed on the RoutingEngine.
+tslib_1.__exportStar(require("./link-pipeline"), exports);
+// Card 5 — the tool registry + the isValidConnection hook.
+tslib_1.__exportStar(require("./tools"), exports);
+// Card 4 — the documented public reactive + imperative surface over the
+// ViewportController / InteractionController / createDiagram machinery waves 3-4
+// already shipped. A named API, not a new engine.
+tslib_1.__exportStar(require("./public-api"), exports);
+// Card 3 — the framework-agnostic node-component authoring contract (typed
+// props, lifecycle, MEASURED SIZE) on top of wave 4's renderCustomNode hook.
+tslib_1.__exportStar(require("./node-component"), exports);
+// Card 6 — portals (screen space + world space) and the drop-in components.
+tslib_1.__exportStar(require("./portal"), exports);
+tslib_1.__exportStar(require("./components/background"), exports);
+tslib_1.__exportStar(require("./components/minimap"), exports);
+tslib_1.__exportStar(require("./components/controls"), exports);
+tslib_1.__exportStar(require("./components/attach"), exports);
+// NOTE: `capability-factory` is deliberately NOT exported. It is the host's
+// private wiring to the real registries; an extension reaching it directly would
+// bypass the capability grant, which is the whole point of Card 7.
+// Lazy entry for the plugin chain — what the framework wrappers use, so
+// consumers who never mount plugins ship none of this chain.
+var plugins_loader_1 = require("./plugins-loader");
+Object.defineProperty(exports, "loadCanvasPlugins", { enumerable: true, get: function () { return plugins_loader_1.loadCanvasPlugins; } });
+//# sourceMappingURL=index.js.map

package/src/libs/renderer/src/ext/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../renderer/src/ext/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;;;;AAEH,qDAAqD;AACrD,2DAAiC;AACjC,yDAA+B;AAC/B,uDAA6B;AAE7B,8EAA8E;AAC9E,6EAA6E;AAC7E,+EAA+E;AAC/E,6EAA6E;AAC7E,gFAAgF;AAChF,gFAAgF;AAChF,gBAAgB;AAChB,2DAAiC;AACjC,6DAAmC;AAEnC,4EAA4E;AAC5E,qDAA2B;AAE3B,0EAA0E;AAC1E,6EAA6E;AAC7E,0DAAgC;AAEhC,2DAA2D;AAC3D,kDAAwB;AAExB,wEAAwE;AACxE,iFAAiF;AACjF,kDAAkD;AAClD,uDAA6B;AAE7B,2EAA2E;AAC3E,6EAA6E;AAC7E,2DAAiC;AAEjC,4EAA4E;AAC5E,mDAAyB;AACzB,kEAAwC;AACxC,+DAAqC;AACrC,gEAAsC;AACtC,8DAAoC;AAEpC,4EAA4E;AAC5E,iFAAiF;AACjF,mEAAmE;AACnE,wEAAwE;AACxE,6DAA6D;AAC7D,mDAAqD;AAA5C,mHAAA,iBAAiB,OAAA"}

package/src/libs/renderer/src/ext/link-pipeline.d.ts

@@ -0,0 +1,195 @@
+/**
+ * ============================================================================
+ * Card 2 — the three link-pipeline seams that were genuinely MISSING
+ * ============================================================================
+ *
+ * Wave 5 shipped a per-link `router` × `connector` contract, and the ROUTER half
+ * is fully pluggable (`RoutingEngine.registerRouter` — a custom router is
+ * addressable per link by its registration name). The audit for Wave 6 found
+ * that the other three stages had no registry at all:
+ *
+ *   stage          before Wave 6                         after
+ *   ─────────────  ────────────────────────────────────  ──────────────────────
+ *   router         ✅ RoutingEngine.registerRouter        (unchanged — wrapped)
+ *   anchor         ❌ did not exist                       registerAnchor()
+ *   connectionPoint ❌ a single `smartConnectionPoints`    registerConnectionPoint()
+ *                     BOOLEAN on the renderer config
+ *   connector      ❌ a 4-arm switch; a custom name was    registerConnector()
+ *                     SILENTLY dropped back to pathType
+ *
+ * The connector gap was a live instance of this codebase's #1 bug shape.
+ * `LinkConnectorName` is `'straight' | 'rounded' | 'smooth' | 'bezier' | (string
+ * & {})` — the `(string & {})` arm ADVERTISES custom connectors, and the
+ * renderer's switch quietly fell through to `link.pathType` for any name it did
+ * not recognise. You could set `connector: 'my-connector'`, get no error, and
+ * see the default line. It is now a real registry, consulted by name.
+ *
+ * ---------------------------------------------------------------------------
+ * The vocabulary (matches JointJS, which is the clearest prior art)
+ * ---------------------------------------------------------------------------
+ *
+ *   ANCHOR            where on a node/port the link attaches.
+ *                     Per END. `(node, port, opposite) → point (+ side)`.
+ *
+ *   CONNECTION POINT  a whole-link strategy that gets to decide BOTH ends
+ *                     together — needed because the interesting strategies are
+ *                     inherently two-ended (draw.io-style "smart" attachment
+ *                     slides both ends to line up with each other).
+ *                     `(link, source, target) → { start, end }`.
+ *
+ *   ROUTER            point A → point B via a polyline (obstacle avoidance).
+ *                     Already pluggable on the RoutingEngine.
+ *
+ *   CONNECTOR         that polyline → an SVG path `d` string.
+ *                     `(points, style) → 'M … L … C …'`.
+ *
+ * All four are consumed end-to-end by the SVG renderer. None of them is a
+ * declared-but-unread flag: `link-pipeline.consumption.spec.ts` drives each one
+ * THROUGH `SVGRenderer.render()` and asserts on the emitted VNode tree.
+ */
+import type { LinkModel, LinkStyle, NodeModel, PortModel } from '@grafloria/engine';
+import type { Disposer } from './disposable';
+export interface ExtPoint {
+    x: number;
+    y: number;
+}
+/** A node's world-space box. */
+export interface ExtRect {
+    x: number;
+    y: number;
+    w: number;
+    h: number;
+}
+export type ExtSide = 'left' | 'right' | 'top' | 'bottom';
+/** One end of a link, as the strategies see it. */
+export interface LinkEnd {
+    node: NodeModel;
+    /** The assigned port, when the link has one. */
+    port: PortModel | null;
+    /** The node's world rect. */
+    rect: ExtRect;
+}
+export interface AnchorContext {
+    /** The end being anchored. */
+    end: LinkEnd;
+    /** The OTHER end's node — direction-aware anchors (perimeter) need it. */
+    other: LinkEnd;
+    /** The link, for reading style/metadata. */
+    link: LinkModel;
+    /**
+     * The point the DEFAULT (port-based) pipeline would have produced. An anchor
+     * that only wants to nudge the default does not have to recompute it.
+     */
+    defaultPoint: ExtPoint;
+    /** Free-form args from `link.metadata.sourceAnchorArgs` / `targetAnchorArgs`. */
+    args: Record<string, unknown>;
+}
+export interface AnchorResult {
+    point: ExtPoint;
+    /** The side the link should LEAVE from. Routers use it to pick the exit stub. */
+    side?: ExtSide;
+}
+export type AnchorFn = (ctx: AnchorContext) => AnchorResult;
+/**
+ * Register a named anchor. Address it per link via
+ * `link.metadata.sourceAnchor` / `link.metadata.targetAnchor`.
+ *
+ * @returns a disposer that RESTORES whatever was registered under this name
+ *          before (so overriding a built-in is reversible).
+ */
+export declare function registerAnchor(name: string, fn: AnchorFn): Disposer;
+export declare function getAnchor(name: string): AnchorFn | undefined;
+export declare function hasAnchor(name: string): boolean;
+export declare function listAnchors(): string[];
+export interface ConnectionPointContext {
+    link: LinkModel;
+    source: LinkEnd;
+    target: LinkEnd;
+    /** What the default port-based pipeline would have produced for both ends. */
+    defaults: ConnectionPointResult;
+    /**
+     * The shape registry's boundary solver, handed in so a strategy can attach to
+     * a node's REAL silhouette (a diamond's slanted face, a custom path shape)
+     * without importing the shape registry itself.
+     */
+    boundaryPoint(node: NodeModel, rect: ExtRect, side: ExtSide, cross: number): ExtPoint;
+    /**
+     * The nearest VISIBLE port on a side, or null. Strategies use it to honour the
+     * rule that visible ports win over free-floating attachment.
+     */
+    nearestVisiblePort(node: NodeModel, side: ExtSide, near: ExtPoint): ExtPoint | null;
+    /**
+     * The nearest port on a side REGARDLESS of visibility, or null. The
+     * 'port-facing' default uses it: a node's ports are its connection anatomy
+     * whether or not the glyphs are currently drawn, so attachment must not
+     * change when visibility does (an endpoint that jumps when you hover a node
+     * is worse than either behaviour it jumps between).
+     */
+    nearestPort(node: NodeModel, side: ExtSide, near: ExtPoint): ExtPoint | null;
+}
+export interface ConnectionPointResult {
+    start: ExtPoint;
+    end: ExtPoint;
+    sourceDirection?: ExtSide;
+    targetDirection?: ExtSide;
+}
+/** Return `null` to decline and fall through to the default pipeline. */
+export type ConnectionPointFn = (ctx: ConnectionPointContext) => ConnectionPointResult | null;
+/**
+ * Register a named connection-point strategy. Address it per link via
+ * `link.metadata.connectionPoint`, or set it as the diagram-wide default with
+ * the renderer's `connectionPoint` config.
+ *
+ * The built-in `'smart'` strategy is the draw.io-style floating attachment that
+ * used to be reachable ONLY through the boolean `smartConnectionPoints` config
+ * flag. That flag still works (it now selects this strategy by name), so nothing
+ * that relied on it changes behaviour.
+ */
+export declare function registerConnectionPoint(name: string, fn: ConnectionPointFn): Disposer;
+export declare function getConnectionPoint(name: string): ConnectionPointFn | undefined;
+export declare function hasConnectionPoint(name: string): boolean;
+export declare function listConnectionPoints(): string[];
+export interface ConnectorContext {
+    /** The routed polyline in world coordinates. Never empty; never length 1. */
+    points: ExtPoint[];
+    /**
+     * The link being drawn. Optional because a few internal call sites (the
+     * connection PREVIEW, which has no LinkModel yet) also build paths.
+     */
+    link?: LinkModel;
+    style?: Partial<LinkStyle>;
+    /** The corner radius the renderer resolved for this link. */
+    cornerRadius: number;
+}
+/** Must return a complete SVG path `d`. */
+export type ConnectorFn = (ctx: ConnectorContext) => string;
+/**
+ * Register a named connector. Address it per link via `link.connector`
+ * (the field Wave 5 already added and serializes).
+ *
+ * The four built-in names — `straight` / `rounded` / `smooth` / `bezier` — are
+ * NOT in this map: they are the renderer's own internal branches and stay
+ * exactly as they were. This registry is consulted only for names the renderer
+ * does not recognise, which is precisely the case that used to be dropped.
+ */
+export declare function registerConnector(name: string, fn: ConnectorFn): Disposer;
+export declare function getConnector(name: string): ConnectorFn | undefined;
+export declare function hasConnector(name: string): boolean;
+export declare function listConnectors(): string[];
+/**
+ * Internal: let a PER-DIAGRAM registry participate in the version/notify
+ * protocol. A scoped registration must invalidate cached VNodes for exactly the
+ * reason a global one must — the definition is baked into the cache. Notifying
+ * every renderer (not just the contributing one) is deliberate: over-invalidation
+ * costs a repaint, under-invalidation shows a stale picture.
+ */
+export declare function notifyLinkPipelineChanged(): void;
+export declare function getLinkPipelineVersion(): number;
+export declare function onLinkPipelineChange(listener: () => void): Disposer;
+/** Drop every registration (tests, host teardown). Built-ins are re-seeded. */
+export declare function clearLinkPipeline(): void;
+/**
+ * The side of `rect` you would leave from to head towards `towards` — the same
+ * dominant-axis rule the built-in smart strategy uses.
+ */
+export declare function sideTowards(rect: ExtRect, towards: ExtPoint): ExtSide;