@lensmcp/valtio-instrumentation 1.21.5 → 1.22.1

package/lib/proxy.js

@@ -1 +1 @@
-"use strict";var m=Object.defineProperty;var a=(t,r)=>m(t,"name",{value:r,configurable:!0});var h=Object.defineProperty,i=a((t,r)=>h(t,"name",{value:r,configurable:!0}),"s");import{proxy as P,subscribe as $,unstable_enableOp as w}from"valtio/vanilla";import{publish as p,depsHash as f}from"@lensmcp/react-instrumentation";import{registerStore as x,subscribersForPathAndParents as S,tagProxy as O}from"./store-registry.js";let d=!1;function l(){if(!d)try{w(!0),d=!0}catch{}}a(l,"x"),i(l,"ensureOpsEnabled");let I=0;export function proxy(t,r={}){l();const e=r.storeId??`valtio:store:${++I}`;x(e,r.source);const o=P(t);return O(o,e),p({source:"valtio",category:"state",severity:"info",title:`store-created ${e}`,fingerprint:`valtio-store:${e}`,raw:{kind:"store-created",store:{storeId:e,source:r.source,initialPreview:r.emitInitialPreview===!1?void 0:n(t)}}}),$(o,v=>{for(const b of v){const[,c,u,y]=b,s=(c??[]).map(String).join(".");if(!s)continue;const g=(c??[]).map(String);p({source:"valtio",category:"state",severity:"info",title:`state-update ${e}.${s}`,fingerprint:`valtio-update:${e}:${s}`,raw:{kind:"state-update",update:{storeId:e,path:s,changedKeys:g,beforeHash:f([y]),afterHash:f([u]),preview:n(u),subscribers:S(e,s)}}})}},!0),o}a(proxy,"proxy"),i(proxy,"proxy");function n(t){try{return JSON.parse(JSON.stringify(t))}catch{return}}a(n,"f"),i(n,"safePreview");
+"use strict";var y=Object.defineProperty;var o=(e,t)=>y(e,"name",{value:t,configurable:!0});var h=Object.defineProperty,n=o((e,t)=>h(e,"name",{value:t,configurable:!0}),"n");import{proxy as g,subscribe as P,unstable_enableOp as w}from"valtio/vanilla";import{publish as $,publishLazy as I,depsHash as f}from"@lensmcp/react-instrumentation";import{boundedClone as x}from"@lensmcp/protocol-types";import{registerStore as E,subscribersForPathAndParents as S,tagProxy as L}from"./store-registry.js";import{truncatePath as _}from"./snapshot.js";let l=!1;function d(){if(!l)try{w(!0),l=!0}catch{}}o(d,"I"),n(d,"ensureOpsEnabled");let O=0;export function proxy(e,t={}){d();const r=t.storeId??`valtio:store:${++O}`;E(r,t.source);const a=g(e);return L(a,r),$({source:"valtio",category:"state",severity:"info",title:`store-created ${r}`,fingerprint:`valtio-store:${r}`,raw:{kind:"store-created",store:{storeId:r,source:t.source,initialPreview:t.emitInitialPreview===!1?void 0:c(e)}}}),P(a,v=>{for(const b of v){const[,s,u,m]=b;if(!(s??[]).length)continue;const p=`valtio-update:${r}:${_(s??[])}`;I(p,()=>{const i=(s??[]).map(String).join(".");return{source:"valtio",category:"state",severity:"info",title:`state-update ${r}.${i}`,fingerprint:p,raw:{kind:"state-update",update:{storeId:r,path:i,changedKeys:(s??[]).map(String),beforeHash:f([m]),afterHash:f([u]),preview:c(u),subscribers:S(r,i)}}}})}},!0),a}o(proxy,"proxy"),n(proxy,"proxy");const H=(()=>{const e=typeof process<"u"?process.env?.LENSMCP_VALTIO_PREVIEW_BYTES:void 0,t=Number(e);return Number.isFinite(t)&&t>=0?Math.floor(t):32*1024})();function c(e){try{return x(e,{rawByteLimit:H}).value}catch{return}}o(c,"f"),n(c,"safePreview");

package/lib/snapshot.d.ts

@@ -14,7 +14,29 @@ export declare function useTrackedSnapshot<T extends object>(target: T, opts: Us
  * `proxy()`; falls back to a single root subscription when nothing is read.
  */
 export declare function useSnapshot<T extends object>(target: T): T;
-/** Join a visited-property path, truncated to {@link SUB_PATH_DEPTH} segments (0 ⇒ no truncation).
- * Built in ONE pass with no intermediate arrays — this runs per visited property per snapshot,
- * hot enough to chart in commit-storm profiles when written as map().slice().join(). */
-export declare function truncatePath(parts: readonly (string | symbol)[]): string;
+/** Join a visited-property path, truncated to {@link SUB_PATH_DEPTH} segments (0 ⇒ no depth limit)
+ * and {@link MAX_PATH_CHARS} characters. Built in ONE pass with no intermediate arrays — this runs
+ * per visited property per snapshot, hot enough to chart in commit-storm profiles when written as
+ * map().slice().join(). */
+export declare function truncatePath(parts: PathParts): string;
+export type PathParts = readonly (string | number | symbol)[];
+/** The bounded read set for one commit, plus what it cost to get there. */
+export interface ReadPathSet {
+    /** Distinct reported paths, in first-read order. */
+    paths: Set<string>;
+    /** Raw entries `affectedToPathList` returned — the number of properties actually visited. */
+    scanned: number;
+    /** Distinct paths dropped because a bound was hit. `> 0` ⇒ the set is a prefix, not the whole truth. */
+    dropped: number;
+}
+/**
+ * Turn `proxy-compare`'s visited-property list into the bounded set of paths this commit subscribes to.
+ *
+ * ONE pass, no intermediate arrays: this runs per visited property per commit, and the list it walks is
+ * the unbounded one (thousands of entries for a component reading a large nested collection).
+ */
+export declare function collectReadPaths(list: readonly PathParts[]): ReadPathSet;
+/** Add/remove subscriptions so the registry matches `read.paths` exactly. */
+export declare function reconcileSubscriptions(prev: Set<string>, read: ReadPathSet, storeId: string, componentInstanceId: string, componentLogicalId?: string): void;
+/** Release everything a hook instance holds — the unmount half of the reconcile. */
+export declare function dropAllSubscriptions(subscribed: Set<string>, storeId: string, componentInstanceId: string, componentLogicalId?: string): void;

package/lib/snapshot.js

@@ -1 +1 @@
-"use strict";var $=Object.defineProperty;var c=(t,o)=>$(t,"name",{value:o,configurable:!0});var M=Object.defineProperty,p=c((t,o)=>M(t,"name",{value:o,configurable:!0}),"i");import{useCallback as w,useEffect as I,useLayoutEffect as x,useMemo as b,useRef as S,useSyncExternalStore as T}from"react";import{snapshot as g,subscribe as C}from"valtio/vanilla";import{useSnapshot as E}from"valtio/react";import{affectedToPathList as W,createProxy as N,isChanged as _}from"proxy-compare";import{useComponentIdentity as v,useLensmcpContext as y,publish as A}from"@lensmcp/react-instrumentation";import{addSubscription as H,removeSubscription as O,storeIdOf as R}from"./store-registry.js";const j=new WeakMap;export function useTrackedSnapshot(t,o){const r=y(),n=o.path??"",s=v(),e=r.componentInstanceId??s.componentInstanceId;return I(()=>(u("added",o.storeId,n,e,s.componentLogicalId),()=>{u("removed",o.storeId,n,e,s.componentLogicalId)}),[o.storeId,n,e]),E(t)}c(useTrackedSnapshot,"useTrackedSnapshot"),p(useTrackedSnapshot,"useTrackedSnapshot");export function useSnapshot(t){const o=R(t)??"valtio:store:anonymous",r=y(),n=v(),s=r.componentInstanceId??n.componentInstanceId,e=b(()=>t&&new WeakMap,[t]),d=S(void 0);let h=!0;const m=T(w(a=>{const i=C(t,a,!1);return a(),i},[t]),()=>{const a=g(t);try{if(!h&&d.current&&e&&!_(d.current,a,e,new WeakMap))return d.current}catch{}return a},()=>g(t));h=!1,x(()=>{d.current=m});const k=b(()=>new WeakMap,[]),f=S(void 0);return f.current||(f.current=new Set),I(()=>{const a=e?W(m,e,!0).map(P=>truncatePath(P)):[],i=new Set(a.length?a:[""]);L(f.current,i,o,s,n.componentLogicalId)}),I(()=>{const a=f.current;return()=>{for(const i of[...a])u("removed",o,i,s,n.componentLogicalId);a.clear()}},[o,s]),e?N(m,e,k,j):m}c(useSnapshot,"useSnapshot"),p(useSnapshot,"useSnapshot");const l=(()=>{const t=typeof process<"u"?process.env?.LENSMCP_VALTIO_PATH_DEPTH:void 0,o=Number(t);return Number.isFinite(o)&&o>=0&&o<=20?Math.floor(o):3})();export function truncatePath(t){const o=l>0&&l<t.length?l:t.length;let r="";for(let n=0;n<o;n++)r+=n===0?String(t[n]):`.${String(t[n])}`;return r}c(truncatePath,"truncatePath"),p(truncatePath,"truncatePath");function L(t,o,r,n,s){for(const e of o)t.has(e)||u("added",r,e,n,s);for(const e of[...t])o.has(e)||u("removed",r,e,n,s);t.clear();for(const e of o)t.add(e)}c(L,"R"),p(L,"reconcileSubscriptions");function u(t,o,r,n,s){t==="added"?H({storeId:o,path:r,componentInstanceId:n}):O({storeId:o,path:r,componentInstanceId:n});const e=t==="added"?"sub":"unsub";A({source:"valtio",category:"state",severity:"debug",title:`subscription-${t} ${o}.${r}`,fingerprint:`valtio-${e}:${o}:${r}`,raw:{kind:`subscription-${t}`,subscription:{storeId:o,path:r,componentInstanceId:n,...s?{componentLogicalId:s}:{}}}})}c(u,"a"),p(u,"emitSubscription");
+"use strict";var $=Object.defineProperty;var a=(e,t)=>$(e,"name",{value:t,configurable:!0});var T=Object.defineProperty,d=a((e,t)=>T(e,"name",{value:t,configurable:!0}),"a");import{useCallback as x,useEffect as l,useLayoutEffect as N,useMemo as b,useRef as S,useSyncExternalStore as _}from"react";import{snapshot as g,subscribe as A}from"valtio/vanilla";import{useSnapshot as E}from"valtio/react";import{affectedToPathList as k,createProxy as w,isChanged as C}from"proxy-compare";import{estimateJsonBytes as O}from"@lensmcp/protocol-types";import{useComponentIdentity as v,useLensmcpContext as L,publish as W}from"@lensmcp/react-instrumentation";import{addSubscription as B,removeSubscription as H,storeIdOf as R}from"./store-registry.js";const F=new WeakMap;export function useTrackedSnapshot(e,t){const n=L(),o=t.path??"",r=v(),s=n.componentInstanceId??r.componentInstanceId;return l(()=>(I("added",t.storeId,o,s,r.componentLogicalId),()=>{I("removed",t.storeId,o,s,r.componentLogicalId)}),[t.storeId,o,s]),E(e)}a(useTrackedSnapshot,"useTrackedSnapshot"),d(useTrackedSnapshot,"useTrackedSnapshot");export function useSnapshot(e){const t=R(e)??"valtio:store:anonymous",n=L(),o=v(),r=n.componentInstanceId??o.componentInstanceId,s=b(()=>e&&new WeakMap,[e]),i=S(void 0);let p=!0;const c=_(x(u=>{const M=A(e,u,!1);return u(),M},[e]),()=>{const u=g(e);try{if(!p&&i.current&&s&&!C(i.current,u,s,new WeakMap))return i.current}catch{}return u},()=>g(e));p=!1,N(()=>{i.current=c});const y=b(()=>new WeakMap,[]),m=S(void 0);return m.current||(m.current=new Set),l(()=>{const u=collectReadPaths(s?k(c,s,!0):[]);reconcileSubscriptions(m.current,u,t,r,o.componentLogicalId)}),l(()=>{const u=m.current;return()=>{dropAllSubscriptions(u,t,r,o.componentLogicalId)}},[t,r]),s?w(c,s,y,F):c}a(useSnapshot,"useSnapshot"),d(useSnapshot,"useSnapshot");const h=(()=>{const e=typeof process<"u"?process.env?.LENSMCP_VALTIO_PATH_DEPTH:void 0,t=Number(e);return Number.isFinite(t)&&t>=0&&t<=20?Math.floor(t):3})(),P=120;export function truncatePath(e){const t=h>0&&h<e.length?h:e.length;let n="";for(let o=0;o<t;o++)if(n+=o===0?String(e[o]):`.${String(e[o])}`,n.length>=P)return`${n.slice(0,P)}\u2026`;return n}a(truncatePath,"truncatePath"),d(truncatePath,"truncatePath");const V=(()=>{const e=typeof process<"u"?process.env?.LENSMCP_VALTIO_MAX_PATHS:void 0,t=Number(e);return Number.isFinite(t)&&t>=1?Math.floor(t):32})(),z=(()=>{const e=typeof process<"u"?process.env?.LENSMCP_VALTIO_SUB_BYTES:void 0,t=Number(e);return Number.isFinite(t)&&t>0?Math.floor(t):4*1024})();export function collectReadPaths(e){const t=new Set;let n=0,o=0;for(const r of e){const s=truncatePath(r);if(!t.has(s)){if(t.size>=V||o>=z){n++;continue}o+=O(s),t.add(s)}}return t.size===0&&t.add(""),{paths:t,scanned:e.length,dropped:n}}a(collectReadPaths,"collectReadPaths"),d(collectReadPaths,"collectReadPaths");export function reconcileSubscriptions(e,t,n,o,r){const s=t.paths,i=[],p=[];for(const c of s)e.has(c)||i.push(c);for(const c of e)s.has(c)||p.push(c);f("added",i,n,o,r,t.dropped),f("removed",p,n,o,r),e.clear();for(const c of s)e.add(c)}a(reconcileSubscriptions,"reconcileSubscriptions"),d(reconcileSubscriptions,"reconcileSubscriptions");export function dropAllSubscriptions(e,t,n,o){f("removed",[...e],t,n,o),e.clear()}a(dropAllSubscriptions,"dropAllSubscriptions"),d(dropAllSubscriptions,"dropAllSubscriptions");function f(e,t,n,o,r,s=0){if(t.length===0)return;for(const p of t)e==="added"?B({storeId:n,path:p,componentInstanceId:o}):H({storeId:n,path:p,componentInstanceId:o});const i=e==="added"?"sub":"unsub";W({source:"valtio",category:"state",severity:"debug",title:`subscription-${e} ${n} (${t.length} path${t.length===1?"":"s"}${s?`, ${s} dropped`:""})`,fingerprint:`valtio-${i}:${n}`,raw:{kind:`subscription-${e}`,subscription:{storeId:n,path:t[0],paths:[...t],componentInstanceId:o,...r?{componentLogicalId:r}:{},...s?{truncated:!0,droppedPaths:s}:{}}}})}a(f,"p"),d(f,"emitSubscriptions");function I(e,t,n,o,r){f(e,[n],t,o,r)}a(I,"A"),d(I,"emitSubscription");

package/lib/types.d.ts

@@ -17,10 +17,26 @@ export interface ValtioStoreRecord {
     source?: string;
     initialPreview?: unknown;
 }
+/**
+ * One commit's worth of subscription changes for one hook instance — NOT one path.
+ *
+ * issues/codex-security/58: this used to be one event per path, so a component reading N entries of a
+ * large collection published O(N) events per commit and another O(N) on unmount. `paths` carries the
+ * whole delta in a single event; `path` is `paths[0]`, kept so a consumer written against the old
+ * one-path-per-event shape still keys on a real path.
+ */
 export interface ValtioSubscriptionRecord {
     storeId: string;
+    /** First entry of {@link paths}. */
     path: string;
+    /** Every path added (or removed) by this commit, bounded in depth, length and cardinality. */
+    paths?: string[];
     componentInstanceId?: string;
+    componentLogicalId?: string;
+    /** `true` when {@link paths} is a PREFIX of the real read set — a bound clipped it. */
+    truncated?: boolean;
+    /** How many distinct paths were dropped to stay inside the bounds. */
+    droppedPaths?: number;
 }
 export type ValtioPublishPayload = {
     kind: 'state-update';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lensmcp/valtio-instrumentation",
-  "version": "1.21.5",
+  "version": "1.22.1",
   "type": "module",
   "main": "./index.js",
   "module": "./index.js",
@@ -14,7 +14,8 @@
     }
   },
   "dependencies": {
-    "@lensmcp/react-instrumentation": "1.21.5",
+    "@lensmcp/protocol-types": "1.22.1",
+    "@lensmcp/react-instrumentation": "1.22.1",
     "proxy-compare": "^3.0.0",
     "tslib": "^2.3.0"
   },