@omega.js/desktop 0.50.0 → 0.52.0

package/dist/vendor/config/index.js

@@ -4,9 +4,10 @@
  * One file, config/omega.json5 (functions/config/omega.json5 for standalone
  * backends), identical shape everywhere: shared sections (brand,
  * cloud, analytics, payment, monitoring, connections, theme) + a `targets`
- * object whose KEY PRESENCE says which targets a brand enables and whose
- * values hold target-scoped settings — any shared key inside a target entry
- * overrides the shared value for that surface (one agnostic deep merge).
+ * object whose KEY PRESENCE says which targets a brand enables: every key is a
+ * target NAME (the folder under targets/), every entry declares its framework
+ * `type`, and any shared key inside a target entry overrides the shared value
+ * for that surface (one agnostic deep merge).
  *
  * Replaces the per-framework config zoo (UJM's _config.yml + JSON split,
  * EM's config/electron-manager.json, @omega.js/backend's backend-manager-config.json,
@@ -19,30 +20,35 @@
  * at prepare time, never published on its own.
  */
 
-const { TARGETS, CUSTOM_TARGET_TYPE, isCustomTargetEntry, BACKEND_PROJECT_TYPES, backendProjectType, SHARED_SECTIONS, SHARED_SCHEMA, TARGET_SCHEMAS, BRAND_ID_PATTERN } = require('./schema.js');
+const { TARGETS, CUSTOM_TARGET_TYPE, isCustomTargetEntry, BACKEND_PROJECT_TYPES, backendProjectType, SHARED_SECTIONS, CLIENT_SECTIONS, SHARED_SCHEMA, TARGET_SCHEMAS, BRAND_ID_PATTERN, AMO_CATEGORIES } = require('./schema.js');
+const { clientConfig, CLIENT_FACT_KEYS } = require('./client-config.js');
 const { deepMerge } = require('./merge.js');
 const { findSecretKeys, SECRET_KEY_PATTERN } = require('./secrets.js');
 const { findRetiredKeys, RETIRED_KEYS, RETIRED_PATHS } = require('./retired-keys.js');
 const { chosenProvider } = require('./providers.js');
 const { validateConfig, runSchema, formatErrors, resolvedBrandHost } = require('./validate.js');
 const { loadConfig, composeTargetConfig, hasOmegaConfig, resolveConfigPath, getEnabledTargets, findBrandRoot, findBrandConfigPath, resolveBrandRoot, FILE_NAME, CONFIG_LOCATIONS } = require('./load.js');
-const { loadEnv, reloadEnv, ENV_ENVIRONMENTS, envEnvironment, resolveEnvChain, envLayerFiles, loadEnvChain, loadEnvRoots, applyDeliverAs, composeTargetEnv, envLine, serializeEnv } = require('./env.js');
+const { ENV_ENVIRONMENTS, ENVIRONMENT_VAR, getEnvironment, isDevelopment, isProduction, isTesting, setEnvironment, buildLaneEnvironment, attachTo: attachEnvironment } = require('./environment.js');
+const { loadEnv, reloadEnv, envEnvironment, resolveEnvChain, envLayerFiles, loadEnvChain, loadEnvRoots, applyDeliverAs, composeTargetEnv, envLine, serializeEnv } = require('./env.js');
 const { ENV_SCHEMA, ENV_GROUPS, DELIVERY_MODES, envFileGroups, envSchemaEntry, envKeysForTarget, generatedEnvKeys, requiredEnvKeys, envKeysByGroup } = require('./env-schema.js');
-const { WORKFLOW_OWNED_KEYS, workflowSecretKeys, bakeKeys, publishSecretKeys, renderSecretsBlock } = require('./env-delivery.js');
+const { WORKFLOW_OWNED_KEYS, deliveredKeys, workflowSecretKeys, envFileKeys, artifactEnvValues, bakeKeys, bakeSourceKeys, publishSecretKeys, renderSecretsBlock, renderEnvFileKeys } = require('./env-delivery.js');
 const { checkEnvRules } = require('./env-rules.js');
-const { readCompanyRoot, COMPANY_MARKER } = require('./company.js');
+const { RETIRED_ENV_KEYS, findRetiredEnvKeys, assertNoRetiredEnvKeys } = require('./env-retired.js');
+const { resolveCompany, recordBrand, readRegistry, registryFile, COMPANY_DIR, COMPANY_RESOLVED_FILE, COMPANY_SELF } = require('./company.js');
 const { applyConfigEdits, writeConfigValues, applyConfigRemovals, removeConfigValues } = require('./edit.js');
 const { schemaDefaults, missingDefaults, defaultComments } = require('./defaults.js');
 const { applyCanonicalOrder, CANONICAL_TOP_LEVEL_ORDER } = require('./order.js');
 const { resolveSeedMode } = require('./seed.js');
 const { resolveHook, loadHook } = require('./hooks.js');
 const { toSiteGlobal } = require('./site-global.js');
-const { DESKTOP_ARTIFACTS, desktopProductName, sanitizeProductName, desktopArtifactName, desktopArtifactNames } = require('./desktop-artifacts.js');
+const { PLATFORMS, FORMATS, enabledFormats, formatKeys, desktopProductName, sanitizeProductName, desktopArtifactName, desktopArtifactNames } = require('./platforms.js');
 const { resolveWinbackOffer, WINBACK_OFFER_DEFAULTS, WINBACK_DURATIONS } = require('./winback.js');
-const { parseRepoSlug, brandRepoName, brandRepoOwner, brandRepo, releasesRepo } = require('./repo.js');
+const { REPO_PROVIDERS, HOSTING_PROVIDERS, repoBlock, sourceRepo, repoDrift, releasesRepo, websiteRepo, hostingProvider, pagesHost, brandVisibility } = require('./repo.js');
 const { isDemoProject } = require('./demo.js');
+const { deriveBundleIdPrefix, composeBundleId } = require('./bundle-id.js');
+const { DEV_FACT_CHANNEL, devFactMissing } = require('./dev-facts.js');
 const { CLASSIC_PORTS, CLASSIC_DEV_ORIGIN, isPortFree, resolvePorts, writePortsFile, readPortsFile, clearPortsFile, readSiblingPorts, readSiblingOrigin, envName, portsToEnv, envPort, envPorts } = require('./ports.js');
-const { DIR_TARGETS, TARGET_DIRS, MAIN_INSTANCE, INSTANCE_ID_PATTERN, normalizeTargetInstances, instanceIdFromDirName, instanceTargetDir, targetInstance, resolveInstanceEntry, instancePortOffset, resolveInstanceUrl } = require('./instances.js');
+const { TARGET_NAME_PATTERN, TARGET_TYPES, targetEntries, targetsOfType, hasTargetOfType, targetPath, targetNameFromDir, targetUrl, targetPortOffset, brandHost } = require('./targets.js');
 
 module.exports = {
   // Loading
@@ -68,9 +74,25 @@ module.exports = {
   loadEnvChain,
   loadEnvRoots,
 
-  // The ONE environment vocabulary ('development' | 'testing' | 'production') —
+  // The ONE environment vocabulary ('development' | 'testing' | 'production'):
   // the overlay's file suffix and every framework's own environment answer
   ENV_ENVIRONMENTS,
+  // The ONE environment module every target answers from (#817): one input
+  // (OMEGA_ENVIRONMENT on Node, the baked config.environment in a browser),
+  // no per-surface default, a missing input is a loud error. `attachEnvironment`
+  // is its attachTo(), named for what it mixes in.
+  ENVIRONMENT_VAR,
+  getEnvironment,
+  isDevelopment,
+  isProduction,
+  isTesting,
+  setEnvironment,
+  // The word a node BUILD LANE is for, from its build-mode flag and whatever a
+  // parent lane named: the desktop and extension build Managers set this
+  buildLaneEnvironment,
+  attachEnvironment,
+  // The AMBIENT answer a lane resolves when nothing named one for it, and the
+  // producer of the input above
   envEnvironment,
 
   // The schema's `deliverAs` rename (#678) — the ONE place a brand-level name
@@ -103,19 +125,42 @@ module.exports = {
   // bake list, and the set a push-secrets publisher sends. No framework keeps
   // a hand-written list, and a secret can never bake into an artifact
   WORKFLOW_OWNED_KEYS,
+  deliveredKeys,
   workflowSecretKeys,
+  envFileKeys,
+  artifactEnvValues,
   bakeKeys,
+  bakeSourceKeys,
   publishSecretKeys,
   renderSecretsBlock,
+  renderEnvFileKeys,
 
   // The env presence checker (#626) — the ONE evaluator of `required` and
   // `requiredWhen`; every consumer calls it, none keeps its own if
   checkEnvRules,
 
-  // Company layer discovery (the .omega/company.json stamp) — shared by the
-  // config chain, the .env chain, and owner hooks
-  readCompanyRoot,
-  COMPANY_MARKER,
+  // The .env half of the retired-key register (#893): a key that moved into
+  // config fails the layer that still declares it, naming the move. Every
+  // `.env` read goes through parseEnvFile, so nothing can miss the check
+  RETIRED_ENV_KEYS,
+  findRetiredEnvKeys,
+  assertNoRetiredEnvKeys,
+
+  // The ONE company resolver (#677): `company: { id }` in, the company's public
+  // facts plus its tree on this machine out. The config chain, the .env chain,
+  // owner hooks and the desktop signing tree all inherit through its `file()`,
+  // so a new kind of inherited file needs no code anywhere
+  resolveCompany,
+  // The machine registry `~/.omega/brands.json` every loadConfig refreshes its
+  // own line in, which is what makes a sibling's `company: { id }` resolvable
+  recordBrand,
+  readRegistry,
+  registryFile,
+  COMPANY_DIR,
+  COMPANY_SELF,
+  // The generated layer a deploy hands a runner, which has no registry and no
+  // company tree to resolve from
+  COMPANY_RESOLVED_FILE,
 
   // Writeback (comment-preserving edits + canonical top-level key order)
   applyConfigEdits,
@@ -141,9 +186,18 @@ module.exports = {
   // Template surface
   toSiteGlobal,
 
-  // The desktop release assets' versionless names (#620) — @omega.js/desktop
-  // packages under them, the site links straight at them
-  DESKTOP_ARTIFACTS,
+  // The ONE browser-safe subset (#894): what web's page chrome, desktop's
+  // renderer bundle and every extension bundle bake as OMEGA_BUILD_JSON.config
+  clientConfig,
+  CLIENT_FACT_KEYS,
+
+  // The ONE shipping vocabulary and format table (#867): what each target can
+  // ship, what each format needs, and the versionless asset names (#620)
+  // @omega.js/desktop packages under and the site links straight at
+  PLATFORMS,
+  FORMATS,
+  enabledFormats,
+  formatKeys,
   desktopProductName,
   sanitizeProductName,
   desktopArtifactName,
@@ -155,29 +209,48 @@ module.exports = {
   WINBACK_OFFER_DEFAULTS,
   WINBACK_DURATIONS,
 
-  // Brand repo derivation from the shared repo.providers.github block, overlaid
-  // by a target's own github entry (backend: targets.backend.github.repo slug —
-  // "owner/name" or bare name; name → `<brand.id>-omega`, owner → repo.providers.github.org)
-  parseRepoSlug,
   // demo-* project ids are emulator-only (Firebase's convention) — cloud
   // surfaces short-circuit on this instead of 403ing at Google
   isDemoProject,
-  brandRepoName,
-  brandRepoOwner,
-  // The finished form a framework hands to consumer code (#290) — owner, name,
-  // and the "owner/name" slug — so brands never re-derive the rule
-  brandRepo,
-  // The brand's ONE public releases repo (#799): `<brand.id>-releases` under the
-  // brand repo's owner unless `targets.desktop.releases` names its own, the one
-  // home every release reader takes its address from
+
+  // The repo derivations (#883): ONE `repo: { provider, org }` block, and every
+  // repo a brand owns derives its name from `<brand.id>-<role>` (#809), so no
+  // name, owner or visibility is ever configured
+  REPO_PROVIDERS,
+  HOSTING_PROVIDERS,
+  repoBlock,
+  // The SOURCE monorepo `<brand.id>-omega`: the dispatch, the repo secrets, the
+  // scaffolded workflows and the CMS commits all address this one
+  sourceRepo,
+  // Whether the repo `origin` names IS that source repo (#934): the one
+  // comparison and the one drift line, stated at boot and refused on by the
+  // verbs that act on the derived repo
+  repoDrift,
+  // The brand's ONE public releases repo `<brand.id>-releases`, always public:
+  // the one home every release reader takes its address from
   releasesRepo,
+  // A web target's own repo `<brand.id>-<name>`, holding the BUILT site so the
+  // source monorepo can stay private, plus where that target is served from
+  websiteRepo,
+  hostingProvider,
+  // The Pages custom domain of a web target: the manage walk sets it on the
+  // repo, the deploy writes it into the CNAME, from this ONE derivation
+  pagesHost,
+  // Visibility has ONE statement, the brand root's package.json `private`
+  brandVisibility,
+
+  // The bundle-identifier policy ([#909](https://github.com/Omega-JS-Stack/omega/issues/909)):
+  // ONE derivation for the id the certificates service registers and the id the
+  // desktop build signs under
+  deriveBundleIdPrefix,
+  composeBundleId,
 
   // Validation
   validateConfig,
   runSchema,
   formatErrors,
 
-  // The brand's own HOST, resolved from an instance `url` or `brand.url` — the
+  // The brand's own HOST, resolved from a target `url` or `brand.url`, the
   // ONE derivation of it ([#708](https://github.com/Omega-JS-Stack/omega/issues/708)):
   // authDomain validation, and every lane that composes a test persona's email
   resolvedBrandHost,
@@ -196,6 +269,12 @@ module.exports = {
   deepMerge,
 
   // Port auto-allocation (N7 — dev/emulator only)
+  // The ONE missing-dev-fact error (#834): no surface carries a browser-side
+  // copy of the classic numbers any more, so a read that finds no baked map
+  // throws this instead of assuming one
+  DEV_FACT_CHANNEL,
+  devFactMissing,
+
   CLASSIC_PORTS,
   CLASSIC_DEV_ORIGIN,
   isPortFree,
@@ -210,19 +289,19 @@ module.exports = {
   envPort,
   envPorts,
 
-  // Multi-instance targets (_attic/plans/multi-instance-targets.md): normalization
-  // is the ONE iteration mechanism — object form = [{ id: 'main', ...entry }]
-  DIR_TARGETS,
-  TARGET_DIRS,
-  MAIN_INSTANCE,
-  INSTANCE_ID_PATTERN,
-  normalizeTargetInstances,
-  instanceIdFromDirName,
-  instanceTargetDir,
-  targetInstance,
-  resolveInstanceEntry,
-  instancePortOffset,
-  resolveInstanceUrl,
+  // The targets map (#886): every key is a NAME, every entry declares its
+  // `type`, and the name IS the folder, so this is the ONE derivation of a
+  // target's path, its dir walk, its public url, and its dev-port offset
+  TARGET_NAME_PATTERN,
+  TARGET_TYPES,
+  targetEntries,
+  targetsOfType,
+  hasTargetOfType,
+  targetPath,
+  targetNameFromDir,
+  targetUrl,
+  targetPortOffset,
+  brandHost,
 
   // Schema (pure data)
   TARGETS,
@@ -231,7 +310,9 @@ module.exports = {
   BACKEND_PROJECT_TYPES,
   backendProjectType,
   SHARED_SECTIONS,
+  CLIENT_SECTIONS,
   SHARED_SCHEMA,
   TARGET_SCHEMAS,
   BRAND_ID_PATTERN,
+  AMO_CATEGORIES,
 };