@objectstack/cloud-connection 9.4.0 → 9.5.1

package/dist/index.d.cts

@@ -432,26 +432,50 @@ declare function createCloudConnectionPlugin(config?: CloudConnectionPluginConfi
  *     cloudUrl: string,            // base URL of the upstream cloud ('' = same origin)
  *     singleEnvironment: boolean,
  *     defaultOrgId?, defaultEnvironmentId?,   // multi-tenant, per-hostname
- *     features: { installLocal, marketplace, aiStudio, autoPublishAiBuilds },
+ *     features: { installLocal, marketplace, aiStudio, autoPublishAiBuilds, ... },
  *     branding: { productName, productShortName }
  *   }
  *
- * ## Policy seam (ADR-0008 / open-mechanism-closed-intelligence)
+ * ## Feature seam (open-core boundary — cloud ADR-0012)
  *
- * Which features a *plan* unlocks is distribution policy, not mechanism — it
- * intentionally does NOT live in this open package. Hosts inject it via
- * {@link RuntimeConfigPluginConfig.resolvePlanFeatures}: the cloud
- * distribution passes its plan-entitlement rules there; a self-hosted or
- * vanilla deployment omits it and gets static config-driven flags.
+ * This open package owns the **mechanism**: serve a per-request `features`
+ * map to the SPA. It does NOT own the **catalog or policy** — which feature
+ * keys exist and which billing plan unlocks them is a distribution concern
+ * and must never be enumerated here (that would bleed commercial/pricing
+ * policy into the open framework).
+ *
+ * Hosts inject policy via {@link RuntimeConfigPluginConfig.resolveFeatures}: it
+ * receives an opaque environment token (the cloud distribution passes the plan
+ * string) and returns an **open-ended** map of feature flags that is merged
+ * verbatim into `features`. The framework neither names nor knows those keys —
+ * e.g. the cloud distribution returns `customDomain` / `sso` from its plan
+ * entitlements without any framework change. A self-hosted / vanilla
+ * deployment omits the hook and gets static, config-driven flags.
+ *
+ * `aiStudio` / `autoPublishAiBuilds` are the framework's own non-commercial
+ * mechanism defaults (ADR-0005: AI authoring is an all-plan capability gated
+ * by cost, not a paid tier), so they keep first-class config knobs here.
  */
 
-/** Capability flags a host's plan policy can derive per request. */
-interface RuntimeConfigPlanFeatures {
+/**
+ * Feature-flag overrides a host's distribution policy can derive per request.
+ *
+ * Open-ended on purpose: the framework's own flags (`aiStudio`,
+ * `autoPublishAiBuilds`) are named, but a distribution may return **any**
+ * additional boolean keys (commercial tiering, white-label toggles, …) and
+ * they pass through to the SPA untouched. The framework does not enumerate
+ * the distribution's feature catalog.
+ */
+interface RuntimeFeatureOverrides {
     /** Whether the SPA should surface AI-driven metadata authoring. */
     aiStudio?: boolean;
     /** Whether AI-built apps auto-publish in the author's own environment. */
     autoPublishAiBuilds?: boolean;
+    /** Distribution-specific flags pass through opaquely (e.g. customDomain, sso). */
+    [feature: string]: boolean | undefined;
 }
+/** @deprecated billing-vocab name; use {@link RuntimeFeatureOverrides}. */
+type RuntimeConfigPlanFeatures = RuntimeFeatureOverrides;
 interface RuntimeConfigPluginConfig {
     /**
      * Upstream cloud base URL. Falls back to `resolveCloudUrl()` (reads
@@ -485,13 +509,21 @@ interface RuntimeConfigPluginConfig {
     /** Short product name (PWA shortName, compact spots). Defaults to productName. */
     productShortName?: string;
     /**
-     * Plan → feature policy hook. Called with `undefined` for the static
-     * default (no environment resolved / no plan known) and with the
-     * environment's plan string once hostname resolution provides one.
-     * Returned flags override the static config defaults; omitted keys keep
-     * them. When the hook itself is omitted, flags are purely config-driven.
+     * Distribution feature-policy hook (open-core seam — cloud ADR-0012).
+     * Called with `undefined` for the static default (no environment resolved
+     * / no token known) and with an opaque environment token (the cloud
+     * distribution passes the plan string) once hostname resolution provides
+     * one. Returned flags are merged verbatim into `features` — arbitrary keys
+     * pass through. Omitted keys keep the static config defaults; when the hook
+     * itself is omitted, flags are purely config-driven. The framework does NOT
+     * know the distribution's feature catalog or pricing.
+     */
+    resolveFeatures?: (token: string | undefined) => RuntimeFeatureOverrides;
+    /**
+     * @deprecated billing-vocab name; use {@link resolveFeatures}. Still
+     * honoured when `resolveFeatures` is absent so existing hosts keep working.
      */
-    resolvePlanFeatures?: (plan: string | undefined) => RuntimeConfigPlanFeatures;
+    resolvePlanFeatures?: (plan: string | undefined) => RuntimeFeatureOverrides;
 }
 declare class RuntimeConfigPlugin implements Plugin$1 {
     readonly name = "com.objectstack.runtime.runtime-config";
@@ -502,11 +534,10 @@ declare class RuntimeConfigPlugin implements Plugin$1 {
     private readonly singleEnvironment;
     private readonly productName;
     private readonly productShortName;
-    private readonly resolvePlanFeatures?;
+    private readonly resolveFeatures?;
     constructor(config?: RuntimeConfigPluginConfig);
     init: (_ctx: PluginContext$1) => Promise<void>;
     start: (ctx: PluginContext$1) => Promise<void>;
-    destroy: () => Promise<void>;
 }
 
 /** Persisted binding credential + context. */
@@ -565,7 +596,7 @@ declare const CLOUD_CONNECTION_UI_BUNDLE: {
     pages: {
         name: string;
         label: string;
-        type: "app" | "record" | "dashboard" | "grid" | "form" | "utility" | "kanban" | "gallery" | "calendar" | "timeline" | "list" | "home" | "record_detail" | "record_review" | "overview" | "blank";
+        type: "app" | "record" | "dashboard" | "form" | "utility" | "list" | "home" | "record_detail" | "record_review" | "overview" | "blank";
         template: string;
         regions: {
             name: string;
@@ -685,7 +716,7 @@ declare const CLOUD_CONNECTION_UI_BUNDLE: {
             }[] | undefined;
             appearance?: {
                 showDescription: boolean;
-                allowedVisualizations?: ("grid" | "kanban" | "gallery" | "calendar" | "timeline" | "map" | "gantt" | "chart")[] | undefined;
+                allowedVisualizations?: ("map" | "grid" | "kanban" | "gallery" | "calendar" | "timeline" | "gantt" | "chart")[] | undefined;
             } | undefined;
             userFilters?: {
                 element: "tabs" | "toggle" | "dropdown";
@@ -1691,4 +1722,4 @@ declare const MARKETPLACE_INSTALLED_UI_BUNDLE: {
     }[];
 };
 
-export { CLOUD_CONNECTION_UI_BUNDLE, CloudConnectionPlugin, type CloudConnectionPluginConfig, CloudConnectionSettingsPage, ConnectionCredentialStore, DEFAULT_CLOUD_URL, DEFAULT_CONNECTION_CREDENTIAL_PATH, DEFAULT_INSTALLED_PACKAGES_DIR, type InstalledManifestEntry, LocalManifestSource, MARKETPLACE_BROWSE_UI_BUNDLE, MARKETPLACE_INSTALLED_UI_BUNDLE, MarketplaceInstallLocalPlugin, type MarketplaceInstallLocalPluginConfig, MarketplaceProxyPlugin, type MarketplaceProxyPluginConfig, type RuntimeConfigPlanFeatures, RuntimeConfigPlugin, type RuntimeConfigPluginConfig, type StoredConnectionCredential, createCloudConnectionPlugin, publicMarketplaceKeyForApiPath, resolveCloudUrl, resolveMarketplacePublicBaseUrl };
+export { CLOUD_CONNECTION_UI_BUNDLE, CloudConnectionPlugin, type CloudConnectionPluginConfig, CloudConnectionSettingsPage, ConnectionCredentialStore, DEFAULT_CLOUD_URL, DEFAULT_CONNECTION_CREDENTIAL_PATH, DEFAULT_INSTALLED_PACKAGES_DIR, type InstalledManifestEntry, LocalManifestSource, MARKETPLACE_BROWSE_UI_BUNDLE, MARKETPLACE_INSTALLED_UI_BUNDLE, MarketplaceInstallLocalPlugin, type MarketplaceInstallLocalPluginConfig, MarketplaceProxyPlugin, type MarketplaceProxyPluginConfig, type RuntimeConfigPlanFeatures, RuntimeConfigPlugin, type RuntimeConfigPluginConfig, type RuntimeFeatureOverrides, type StoredConnectionCredential, createCloudConnectionPlugin, publicMarketplaceKeyForApiPath, resolveCloudUrl, resolveMarketplacePublicBaseUrl };

package/dist/index.d.ts

@@ -432,26 +432,50 @@ declare function createCloudConnectionPlugin(config?: CloudConnectionPluginConfi
  *     cloudUrl: string,            // base URL of the upstream cloud ('' = same origin)
  *     singleEnvironment: boolean,
  *     defaultOrgId?, defaultEnvironmentId?,   // multi-tenant, per-hostname
- *     features: { installLocal, marketplace, aiStudio, autoPublishAiBuilds },
+ *     features: { installLocal, marketplace, aiStudio, autoPublishAiBuilds, ... },
  *     branding: { productName, productShortName }
  *   }
  *
- * ## Policy seam (ADR-0008 / open-mechanism-closed-intelligence)
+ * ## Feature seam (open-core boundary — cloud ADR-0012)
  *
- * Which features a *plan* unlocks is distribution policy, not mechanism — it
- * intentionally does NOT live in this open package. Hosts inject it via
- * {@link RuntimeConfigPluginConfig.resolvePlanFeatures}: the cloud
- * distribution passes its plan-entitlement rules there; a self-hosted or
- * vanilla deployment omits it and gets static config-driven flags.
+ * This open package owns the **mechanism**: serve a per-request `features`
+ * map to the SPA. It does NOT own the **catalog or policy** — which feature
+ * keys exist and which billing plan unlocks them is a distribution concern
+ * and must never be enumerated here (that would bleed commercial/pricing
+ * policy into the open framework).
+ *
+ * Hosts inject policy via {@link RuntimeConfigPluginConfig.resolveFeatures}: it
+ * receives an opaque environment token (the cloud distribution passes the plan
+ * string) and returns an **open-ended** map of feature flags that is merged
+ * verbatim into `features`. The framework neither names nor knows those keys —
+ * e.g. the cloud distribution returns `customDomain` / `sso` from its plan
+ * entitlements without any framework change. A self-hosted / vanilla
+ * deployment omits the hook and gets static, config-driven flags.
+ *
+ * `aiStudio` / `autoPublishAiBuilds` are the framework's own non-commercial
+ * mechanism defaults (ADR-0005: AI authoring is an all-plan capability gated
+ * by cost, not a paid tier), so they keep first-class config knobs here.
  */
 
-/** Capability flags a host's plan policy can derive per request. */
-interface RuntimeConfigPlanFeatures {
+/**
+ * Feature-flag overrides a host's distribution policy can derive per request.
+ *
+ * Open-ended on purpose: the framework's own flags (`aiStudio`,
+ * `autoPublishAiBuilds`) are named, but a distribution may return **any**
+ * additional boolean keys (commercial tiering, white-label toggles, …) and
+ * they pass through to the SPA untouched. The framework does not enumerate
+ * the distribution's feature catalog.
+ */
+interface RuntimeFeatureOverrides {
     /** Whether the SPA should surface AI-driven metadata authoring. */
     aiStudio?: boolean;
     /** Whether AI-built apps auto-publish in the author's own environment. */
     autoPublishAiBuilds?: boolean;
+    /** Distribution-specific flags pass through opaquely (e.g. customDomain, sso). */
+    [feature: string]: boolean | undefined;
 }
+/** @deprecated billing-vocab name; use {@link RuntimeFeatureOverrides}. */
+type RuntimeConfigPlanFeatures = RuntimeFeatureOverrides;
 interface RuntimeConfigPluginConfig {
     /**
      * Upstream cloud base URL. Falls back to `resolveCloudUrl()` (reads
@@ -485,13 +509,21 @@ interface RuntimeConfigPluginConfig {
     /** Short product name (PWA shortName, compact spots). Defaults to productName. */
     productShortName?: string;
     /**
-     * Plan → feature policy hook. Called with `undefined` for the static
-     * default (no environment resolved / no plan known) and with the
-     * environment's plan string once hostname resolution provides one.
-     * Returned flags override the static config defaults; omitted keys keep
-     * them. When the hook itself is omitted, flags are purely config-driven.
+     * Distribution feature-policy hook (open-core seam — cloud ADR-0012).
+     * Called with `undefined` for the static default (no environment resolved
+     * / no token known) and with an opaque environment token (the cloud
+     * distribution passes the plan string) once hostname resolution provides
+     * one. Returned flags are merged verbatim into `features` — arbitrary keys
+     * pass through. Omitted keys keep the static config defaults; when the hook
+     * itself is omitted, flags are purely config-driven. The framework does NOT
+     * know the distribution's feature catalog or pricing.
+     */
+    resolveFeatures?: (token: string | undefined) => RuntimeFeatureOverrides;
+    /**
+     * @deprecated billing-vocab name; use {@link resolveFeatures}. Still
+     * honoured when `resolveFeatures` is absent so existing hosts keep working.
      */
-    resolvePlanFeatures?: (plan: string | undefined) => RuntimeConfigPlanFeatures;
+    resolvePlanFeatures?: (plan: string | undefined) => RuntimeFeatureOverrides;
 }
 declare class RuntimeConfigPlugin implements Plugin$1 {
     readonly name = "com.objectstack.runtime.runtime-config";
@@ -502,11 +534,10 @@ declare class RuntimeConfigPlugin implements Plugin$1 {
     private readonly singleEnvironment;
     private readonly productName;
     private readonly productShortName;
-    private readonly resolvePlanFeatures?;
+    private readonly resolveFeatures?;
     constructor(config?: RuntimeConfigPluginConfig);
     init: (_ctx: PluginContext$1) => Promise<void>;
     start: (ctx: PluginContext$1) => Promise<void>;
-    destroy: () => Promise<void>;
 }
 
 /** Persisted binding credential + context. */
@@ -565,7 +596,7 @@ declare const CLOUD_CONNECTION_UI_BUNDLE: {
     pages: {
         name: string;
         label: string;
-        type: "app" | "record" | "dashboard" | "grid" | "form" | "utility" | "kanban" | "gallery" | "calendar" | "timeline" | "list" | "home" | "record_detail" | "record_review" | "overview" | "blank";
+        type: "app" | "record" | "dashboard" | "form" | "utility" | "list" | "home" | "record_detail" | "record_review" | "overview" | "blank";
         template: string;
         regions: {
             name: string;
@@ -685,7 +716,7 @@ declare const CLOUD_CONNECTION_UI_BUNDLE: {
             }[] | undefined;
             appearance?: {
                 showDescription: boolean;
-                allowedVisualizations?: ("grid" | "kanban" | "gallery" | "calendar" | "timeline" | "map" | "gantt" | "chart")[] | undefined;
+                allowedVisualizations?: ("map" | "grid" | "kanban" | "gallery" | "calendar" | "timeline" | "gantt" | "chart")[] | undefined;
             } | undefined;
             userFilters?: {
                 element: "tabs" | "toggle" | "dropdown";
@@ -1691,4 +1722,4 @@ declare const MARKETPLACE_INSTALLED_UI_BUNDLE: {
     }[];
 };
 
-export { CLOUD_CONNECTION_UI_BUNDLE, CloudConnectionPlugin, type CloudConnectionPluginConfig, CloudConnectionSettingsPage, ConnectionCredentialStore, DEFAULT_CLOUD_URL, DEFAULT_CONNECTION_CREDENTIAL_PATH, DEFAULT_INSTALLED_PACKAGES_DIR, type InstalledManifestEntry, LocalManifestSource, MARKETPLACE_BROWSE_UI_BUNDLE, MARKETPLACE_INSTALLED_UI_BUNDLE, MarketplaceInstallLocalPlugin, type MarketplaceInstallLocalPluginConfig, MarketplaceProxyPlugin, type MarketplaceProxyPluginConfig, type RuntimeConfigPlanFeatures, RuntimeConfigPlugin, type RuntimeConfigPluginConfig, type StoredConnectionCredential, createCloudConnectionPlugin, publicMarketplaceKeyForApiPath, resolveCloudUrl, resolveMarketplacePublicBaseUrl };
+export { CLOUD_CONNECTION_UI_BUNDLE, CloudConnectionPlugin, type CloudConnectionPluginConfig, CloudConnectionSettingsPage, ConnectionCredentialStore, DEFAULT_CLOUD_URL, DEFAULT_CONNECTION_CREDENTIAL_PATH, DEFAULT_INSTALLED_PACKAGES_DIR, type InstalledManifestEntry, LocalManifestSource, MARKETPLACE_BROWSE_UI_BUNDLE, MARKETPLACE_INSTALLED_UI_BUNDLE, MarketplaceInstallLocalPlugin, type MarketplaceInstallLocalPluginConfig, MarketplaceProxyPlugin, type MarketplaceProxyPluginConfig, type RuntimeConfigPlanFeatures, RuntimeConfigPlugin, type RuntimeConfigPluginConfig, type RuntimeFeatureOverrides, type StoredConnectionCredential, createCloudConnectionPlugin, publicMarketplaceKeyForApiPath, resolveCloudUrl, resolveMarketplacePublicBaseUrl };

package/dist/index.js

@@ -1689,12 +1689,14 @@ var RuntimeConfigPlugin = class {
           envRegistry = ctx.getService("env-registry");
         } catch {
         }
-        const featuresFor = (plan, base) => {
-          const derived = this.resolvePlanFeatures?.(plan);
-          return {
-            aiStudio: derived?.aiStudio ?? base.aiStudio,
-            autoPublishAiBuilds: derived?.autoPublishAiBuilds ?? base.autoPublishAiBuilds
-          };
+        const featuresFor = (token, base) => {
+          const derived = this.resolveFeatures?.(token);
+          if (!derived) return { ...base };
+          const out = { ...base };
+          for (const [k, v] of Object.entries(derived)) {
+            if (typeof v === "boolean") out[k] = v;
+          }
+          return out;
         };
         const handler = async (c) => {
           const rawHost = c.req.header("host") ?? "";
@@ -1727,8 +1729,8 @@ var RuntimeConfigPlugin = class {
             features: {
               installLocal: this.installLocal,
               marketplace: true,
-              aiStudio: features.aiStudio,
-              autoPublishAiBuilds: features.autoPublishAiBuilds
+              // aiStudio + autoPublishAiBuilds + any distribution keys.
+              ...features
             },
             branding: {
               productName: this.productName,
@@ -1738,20 +1740,13 @@ var RuntimeConfigPlugin = class {
         };
         rawApp.get("/api/v1/runtime/config", handler);
         rawApp.get("/api/v1/studio/runtime-config", handler);
-        ctx.logger?.info?.("[RuntimeConfigPlugin] mounted /api/v1/runtime/config", {
-          cloudUrl: this.cloudUrl || "(empty)",
-          installLocal: this.installLocal,
-          perHostEnvResolution: !!envRegistry
-        });
       });
     };
-    this.destroy = async () => {
-    };
     this.cloudUrl = config.controlPlaneUrl === "" ? "" : resolveCloudUrl(config.controlPlaneUrl) ?? "";
     this.installLocal = !!config.installLocal;
     this.aiStudio = config.aiStudio !== false;
     this.singleEnvironment = !!config.singleEnvironment;
-    this.resolvePlanFeatures = config.resolvePlanFeatures;
+    this.resolveFeatures = config.resolveFeatures ?? config.resolvePlanFeatures;
     const envName = (typeof process !== "undefined" ? process.env?.OS_PRODUCT_NAME : void 0)?.trim();
     const envShort = (typeof process !== "undefined" ? process.env?.OS_PRODUCT_SHORT_NAME : void 0)?.trim();
     this.productName = (config.productName ?? envName ?? "ObjectOS").trim() || "ObjectOS";