@omega.js/desktop 0.52.0 → 0.53.0

package/dist/vendor/devkit/defaults-engine.js

@@ -1,10 +1,8 @@
 // applyDefaults(config) — the shared OMEGA defaults-scaffolding engine.
 //
 // Every framework ships a defaults tree (src/defaults/ → dist/defaults/) that
-// setup copies into the consumer project. The copy rules lived as two divergent
-// implementations (BXM's gulp FILE_MAP task — the real one — and EM's plain-fs
-// copyDefaults; UJM carries a third copy of the BXM shape). This is the single
-// plain-fs engine, a normalized superset of both.
+// setup copies into the consumer project. This is the single plain-fs engine
+// every framework's scaffold runs.
 //
 // File-map rules: minimatch patterns (dot:true) matched against the RAW path
 // relative to defaultsDir, last-match-wins option merging. Per-rule options:
@@ -28,7 +26,7 @@
 // Engine built-ins (not expressed in the file map):
 //   - `_.name` segments lose the leading `_` (dotfiles ship past npm's filter)
 //   - non-final segments starting `_` (but not `_.`) are ARCHIVE dirs — skipped
-//     (reference material that ships in the framework package, e.g. EM's `_mas/`)
+//     (reference material that ships in the framework package, e.g. desktop's `_mas/`)
 //   - `.gitkeep` creates the destination directory, the file itself never copies
 //   - `.DS_Store` never copies
 //   - text writes are skipped when the destination is byte-identical (idempotent
@@ -46,7 +44,7 @@ const { minimatch } = require('minimatch');
 const { mergeLineBasedFiles, hasSectionMarkers, getCustomSection } = require('./merge-line-files');
 
 // Files with these extensions copy byte-for-byte and never go through
-// template/merge/transform (matches BXM's binary detection list).
+// template/merge/transform.
 const BINARY_EXTENSIONS = /\.(jpg|jpeg|png|gif|webp|svg|ico|woff|woff2|ttf|otf|eot|pdf|zip|tar|gz|mp3|mp4|avi|mov)$/i;
 
 const RULE_DEFAULTS = {
@@ -70,7 +68,7 @@ const RULE_DEFAULTS = {
  * @param {Object<string, object>} [config.fileMap] - minimatch pattern → rule options (see header)
  * @param {string[]} [config.files] - Only process these absolute source paths (watch single-file mode)
  * @param {Function} [config.transform] - `(contents, item) => contents` global hook, run on every
- *   non-binary file after per-rule processing (BXM's site-token templating pass)
+ *   non-binary file after per-rule processing (e.g. extension's site-token templating pass)
  * @param {object} [config.logger] - `{ log, warn, error }` (defaults to console)
  * @returns {{ written: string[], merged: string[], skipped: string[], removed: string[] }} destination-relative paths per outcome
  */
@@ -202,7 +200,7 @@ function applyDefaults(config) {
     let didMerge = false;
 
     // Per-rule template render happens BEFORE merging, so merges compare
-    // rendered framework defaults against the consumer's file (EM semantic).
+    // rendered framework defaults against the consumer's file.
     if (options.template) {
       contents = renderTemplate(contents, options.template);
     }
@@ -309,7 +307,7 @@ function strippedSegments(segments) {
   return segments.map((s) => (s.startsWith('_.') ? s.slice(1) : s));
 }
 
-// Last-match-wins option resolution across the file map (BXM's getFileOptions).
+// Last-match-wins option resolution across the file map.
 function resolveOptions(relativePath, fileMap) {
   let options = { ...RULE_DEFAULTS };
 
@@ -323,7 +321,7 @@ function resolveOptions(relativePath, fileMap) {
   return options;
 }
 
-// Minimal `{{ key.path }}` substitution (EM's tolerant renderer — the standard).
+// Minimal `{{ key.path }}` substitution, tolerant of unknown keys.
 // Unknown keys render as the original `{{ ... }}` string, so non-template content
 // with literal braces (e.g. GitHub Actions `${{ secrets.X }}`) survives.
 function renderTemplate(content, context) {
@@ -334,7 +332,7 @@ function renderTemplate(content, context) {
   });
 }
 
-// JSON5 defaults merge (BXM's mergeConfigs): framework defaults provide shape and
+// JSON5 defaults merge: framework defaults provide shape and
 // order; the consumer's values win unless they're the literal string 'default';
 // consumer-only keys survive at every nesting level, EXCEPT one holding the
 // 'default' sentinel, which is the framework's own unset marker and drops (#926).

package/dist/vendor/devkit/local.js

@@ -1981,6 +1981,8 @@ module.exports = {
   findBrandRoot,
   discoverTargets,
   frameworkPackagesOf,
+  resolvePackageRealDir,
+  isLocalCheckout,
   linkLocalPackages,
   restoreRegistrySpecs,
   resolveLinkedMonorepo,

package/dist/vendor/devkit/merge-line-files.js

@@ -1,7 +1,6 @@
 // Merge line-based files (.env, .gitignore, AGENTS.md) during framework setup —
-// the OMEGA marker-section protocol. Canonical version is EM's (it added .env
-// double-quote normalization and order-safe key substitution over the older
-// BXM/UJM inline copies) plus @omega.js/backend's custom-key promotion (a key the framework
+// the OMEGA marker-section protocol: .env double-quote normalization,
+// order-safe key substitution, and custom-key promotion (a key the framework
 // newly adopts into its Default section is promoted UP from the user's Custom
 // section with their value, instead of appearing empty in Default and set in
 // Custom).

package/dist/vendor/devkit/test/runner-core.js

@@ -1,7 +1,7 @@
 // Shared test-runner core for the OMEGA frameworks — discovery, suite/group/standalone
-// execution, filtering, skip semantics, init hooks, and reporting. Extracted from UJM's
-// runner (the canonical 3-layer build/page/boot model); BXM/EM/UJM differ only in title,
-// package name, CLI target alias, and their special layers — all injected via config.
+// execution, filtering, skip semantics, init hooks, and reporting, on the 3-layer
+// build/page/boot model. The frameworks differ only in title, package name, CLI
+// target alias, and their special layers — all injected via config.
 //
 // Test-definition forms supported (see each framework's test/index.js for docs):
 //   - Standalone:  module.exports = { layer, description, run, cleanup, timeout, skip };
@@ -12,7 +12,7 @@
 // Suites stop on first failure (sequential, share state). Groups run all tests regardless.
 //
 // createRunner(config) config surface:
-//   title              — heading printed at the top of a run ('Browser Extension Manager Tests')
+//   title              — heading printed at the top of a run ('OMEGA Extension Tests')
 //   packageName        — framework npm name; cwd package === this ⇒ framework self-test mode
 //                        (framework boot/ suites only run in self-test mode — they assert on
 //                        the framework's own fixture consumer)
@@ -28,7 +28,7 @@
 //                           options, results, projectRoot }) => void }]
 //                        The callback owns runner loading, skip messaging, and results
 //                        mutation — framework glue stays framework-side.
-//   bootDefaultTimeout — per-test default for boot-layer inspect() (UJM/BXM 20000, EM 15000)
+//   bootDefaultTimeout — per-test default for boot-layer inspect() (each framework's runner sets its own)
 //   boot:              { run: async ({ tests, suites, options, results, projectRoot }) => void }
 //                        Called with the aggregated flat boot test list plus the boot-BOUND
 //                        suites (at least one of the two is non-empty).
@@ -37,7 +37,7 @@
 //                        partitions that FILE into the boot layer whatever its `layer` says,
 //                        and hands it to boot.run WHOLE (`suites: [{ file, mod }]`) instead
 //                        of flattening it into the inspect list: for suites that need the
-//                        boot lane's built app but run their own way (EM's `view:` renderer
+//                        boot lane's built app but run their own way (desktop's `view:` renderer
 //                        suites). Default: () => false. An array-form file is never bound.
 
 const path = require('path');

package/dist/vendor/monitoring/env.js

@@ -21,7 +21,7 @@
  * signal with its own opinion: a build-mode run of a development artifact
  * reported as production, and a packaged production app whose lane did not
  * carry the flag reported as development. @omega.js/backend still passes its
- * own answer in (`Manager.isProduction()`), and a boolean a host supplies
+ * own answer in (`omega.isProduction()`), and a boolean a host supplies
  * always wins.
  */
 
@@ -30,7 +30,7 @@ const { isProduction } = require('../config/environment.js');
 /**
  * Read the environment gates for core.resolveConfig().
  * @param {object} [host] - the host's own signals, and the context the one
- *   environment is read off (a Manager carrying the baked `config`)
+ *   environment is read off (an Omega instance carrying the baked `config`)
  * @param {boolean} [host.isProduction] - overrides the one environment's answer
  * @param {boolean} [host.allowInDev] - the host's own dev opt-in (e.g. @omega.js/backend's `reportErrorsInDev`)
  * @returns {{ killed: boolean, killedReason: string|null, isProduction: boolean, allowInDev: boolean }}

package/dist/vendor/monitoring/index.js

@@ -1,6 +1,6 @@
 /**
  * The @omega.js/monitoring entry — the Electron context-aware delegator (#380).
- * Lifted from @omega.js/desktop's lib/sentry/index.js: a desktop Manager
+ * Lifted from @omega.js/desktop's lib/sentry/index.js: a desktop Omega instance
  * singleton requires this file from whichever process it is in, and every call
  * forwards to the right per-context module.
  *

package/dist/vendor/monitoring/main.js

@@ -25,7 +25,7 @@ const main = {
   _Sentry:      null,
 
   /**
-   * @param {object} host - the desktop Manager: { config, getVersion() }
+   * @param {object} host - the desktop Omega instance: { config, getVersion() }
    */
   initialize(host) {
     main._initialized = true;

package/dist/vendor/monitoring/preload.js

@@ -18,7 +18,7 @@ const preload = {
   _enabled: false,
 
   /**
-   * @param {object} host - the desktop Manager: { config }
+   * @param {object} host - the desktop Omega instance: { config }
    */
   initialize(host) {
     const { shouldEnable, reason } = resolveConfig(host && host.config && host.config.monitoring, readGates(host));

package/dist/vendor/monitoring/renderer.js

@@ -21,7 +21,7 @@ const renderer = {
   _Sentry:      null,
 
   /**
-   * @param {object} host - the desktop Manager: { config, getVersion() }
+   * @param {object} host - the desktop Omega instance: { config, getVersion() }
    */
   initialize(host) {
     renderer._initialized = true;

package/docs/analytics.md

@@ -51,11 +51,11 @@ The `bundle` task's esbuild `define` bakes `process.env.GOOGLE_ANALYTICS_SECRET`
 ## API
 
 ```js
-manager.analytics.event('button_click', { button_id: 'cta' });
-manager.analytics.pageview('/settings');
-manager.analytics.screenview('SettingsScreen');
-manager.analytics.setUserProperties({ plan: 'premium', trial: false });
-manager.analytics.setUserId('firebase-uid-abc');   // usually wired automatically
+omega.analytics.event('button_click', { button_id: 'cta' });
+omega.analytics.pageview('/settings');
+omega.analytics.screenview('SettingsScreen');
+omega.analytics.setUserProperties({ plan: 'premium', trial: false });
+omega.analytics.setUserId('firebase-uid-abc');   // usually wired automatically
 ```
 
 Same surface in renderer:
@@ -71,10 +71,10 @@ The renderer surface is fire-and-forget IPC (`ipcRenderer.send`) for events; onl
 
 ## The renderer NEVER sends — it forwards ([#411](https://github.com/Omega-JS-Stack/omega/issues/411))
 
-A renderer's own `omega.analytics().event(...)` — the embedded @omega.js/client, the surface a vert click or a permission prompt fires through — routes to the bridge above and is delivered by the MAIN process's sender. There is exactly one sender per install:
+A renderer's own `omega.analytics.event(...)` (the embedded @omega.js/client, the surface a vert click or a permission prompt fires through) routes to the bridge above and is delivered by the MAIN process's sender. There is exactly one sender per install:
 
 ```
-renderer: omega.analytics().event('vert_click', { … })
+renderer: omega.analytics.event('vert_click', { … })
   → @omega.js/client reads config.analyticsBridge (src/renderer.js injects the
     preload's window.desktop.analytics when it boots the client)
   → ipcRenderer.send('desktop:analytics:event', { name, params })
@@ -136,5 +136,5 @@ free-typed string here.
 ## Tests
 
 - `src/test/suites/main/analytics.test.js` — disabled paths, uuidv5 stability, the catalog contract (canonical name in, GA4 descriptor out; unknown names never post), queueing, auth-bridge wiring, IPC handlers, secret-not-leaked guard.
-- `src/test/suites/renderer/analytics-bridge.test.js` — renderer-side surface shape, `getStatus` round-trip, and the #411 pin: a renderer-originated `omega.analytics().event(...)` reaches main's sender exactly once, and the payload GA would receive carries main's `client_id` and main's session id, while the bridged client holds no secret and no device id of its own (the harness hands it credentials on purpose). The harness taps main's transport (`harness/main-entry.js`) so a renderer suite can read back what the sender was handed — a test run never reaches a real GA property. Harness fidelity, stated plainly: it drives the real client and the real IPC channel into the real main-process sender, but the client runs in the preload world holding the bridge object directly, not the contextBridge proxy a page bundle gets — the proxy hop is the one link this pin does not exercise.
+- `src/test/suites/renderer/analytics-bridge.test.js`: renderer-side surface shape, `getStatus` round-trip, and the #411 pin: a renderer-originated `omega.analytics.event(...)` reaches main's sender exactly once, and the payload GA would receive carries main's `client_id` and main's session id, while the bridged client holds no secret and no device id of its own (the harness hands it credentials on purpose). The harness taps main's transport (`harness/main-entry.js`) so a renderer suite can read back what the sender was handed: a test run never reaches a real GA property. Harness fidelity, stated plainly: it drives the real client and the real IPC channel into the real main-process sender, but the client runs in the preload world holding the bridge object directly, not the contextBridge proxy a page bundle gets, the proxy hop is the one link this pin does not exercise.
 - `packages/client/test/analytics.test.js` — the client half: the bridge is the injected config value alone (a planted `window.desktop` bridges nothing), a bridged client drops credentials and mints no device id, an uncatalogued name never leaves the renderer, and a forward that throws never reaches the caller.

package/docs/app-state.md

@@ -2,24 +2,24 @@
 
 Storage-backed launch flags + crash sentinel. Tells you *whether* this is the first launch ever, *how many* times the app has launched, *whether* the previous run crashed, and *whether* the version changed.
 
-## Public API on `manager.appState`
+## Public API on `omega.appState`
 
 ```js
-manager.appState.isFirstLaunch()         // boolean — true ONLY on the very first boot
-manager.appState.getLaunchCount()        // number — total successful launches (including this one)
-manager.appState.getInstalledAt()        // Date  — first ever launch timestamp
-manager.appState.getLastLaunchAt()       // Date | null — previous launch (null on first)
-manager.appState.getLastQuitAt()         // Date | null — previous graceful quit; null if it crashed
-manager.appState.recoveredFromCrash()    // boolean — previous run did not exit cleanly
+omega.appState.isFirstLaunch()         // boolean: true ONLY on the very first boot
+omega.appState.getLaunchCount()        // number: total successful launches (including this one)
+omega.appState.getInstalledAt()        // Date: first ever launch timestamp
+omega.appState.getLastLaunchAt()       // Date | null: previous launch (null on first)
+omega.appState.getLastQuitAt()         // Date | null: previous graceful quit; null if it crashed
+omega.appState.recoveredFromCrash()    // boolean: previous run did not exit cleanly
 
-manager.appState.getVersion()            // string | null — package version of this launch
-manager.appState.getPreviousVersion()    // string | null — version before this launch
-manager.appState.wasUpgraded()           // boolean — true if THIS launch's version differs from the prior
+omega.appState.getVersion()            // string | null: package version of this launch
+omega.appState.getPreviousVersion()    // string | null: version before this launch
+omega.appState.wasUpgraded()           // boolean: true if THIS launch's version differs from the prior
 
-manager.appState.launchedAtLogin()       // boolean — OS booted us via openAtLogin
-manager.appState.launchedFromDeepLink()  // boolean — argv had a deep-link payload (set by lib/deep-link)
+omega.appState.launchedAtLogin()       // boolean: OS booted us via openAtLogin
+omega.appState.launchedFromDeepLink()  // boolean: argv had a deep-link payload (set by lib/deep-link)
 
-manager.appState.reset()                 // wipe persisted state (test helper / factory-reset command)
+omega.appState.reset()                 // wipe persisted state (test helper / factory-reset command)
 ```
 
 ## Storage shape (key `appState`)
@@ -66,24 +66,24 @@ appState.getPreviousVersion() // '1.0.0' (preserved — useful for "what's new"
 ### Show onboarding on first launch
 
 ```js
-if (manager.appState.isFirstLaunch()) {
-  manager.windows.show('onboarding');
+if (omega.appState.isFirstLaunch()) {
+  omega.windows.show('onboarding');
 }
 ```
 
 ### Crash report ping
 
 ```js
-if (manager.appState.recoveredFromCrash()) {
-  manager.sentry.captureMessage('recovered from crash', 'warning');
+if (omega.appState.recoveredFromCrash()) {
+  omega.sentry.captureMessage('recovered from crash', 'warning');
 }
 ```
 
 ### What's new modal after upgrade
 
 ```js
-if (manager.appState.wasUpgraded()) {
-  manager.windows.show('changelog');
+if (omega.appState.wasUpgraded()) {
+  omega.windows.show('changelog');
 }
 ```
 

package/docs/audit.md

@@ -24,10 +24,10 @@ Mirrored across all four OMEGA frameworks (UJM / @omega.js/backend / BXM / @omeg
 |----|-----|-------|-------|
 | U-01 | HIGH | B | Every feature has tests at EVERY layer it surfaces (build / main / renderer / boot) — never mocked, real harness only ([test-framework.md](test-framework.md)) |
 | U-02 | HIGH | B | Test hygiene — real-external-API tests gated behind `TEST_EXTENDED_MODE` in-source (not mocked); no tests that assert nothing ([test-framework.md](test-framework.md)) |
-| U-03 | CRIT | B | XSS — renderer DOM sinks escape untrusted values inline via `omega.utilities().escapeHTML(value)` (+ `sanitizeURL` for URL sinks); zero local escape helpers (rules mirror UJM/BXM `docs/xss-prevention.md`; see also DSK-01 for navigation sinks) |
-| U-04 | HIGH | B | @omega.js/client owns Firebase — never `require('firebase')`; renderers use `omega.auth()` / `.firestore()`, main uses `manager.omega` ([common-mistakes.md](common-mistakes.md), [client-bridge.md](client-bridge.md)) |
+| U-03 | CRIT | B | XSS: renderer DOM sinks escape untrusted values inline via `omega.utilities.escapeHTML(value)` (+ `sanitizeURL` for URL sinks); zero local escape helpers (rules mirror @omega.js/web and @omega.js/extension `docs/xss-prevention.md`; see also DSK-01 for navigation sinks) |
+| U-04 | HIGH | B | @omega.js/client owns Firebase: never `require('firebase')`; renderers use `omega.auth` / `omega.firestore`, main uses `omega.auth` ([common-mistakes.md](common-mistakes.md), [auth.md](auth.md)) |
 | U-05 | HIGH | C | No @omega.js/desktop transitive deps installed in the consumer `package.json` (`firebase`, `@omega.js/client`, `fs-jetpack`, …) — the bundle task's framework-deps hook resolves them ([common-mistakes.md](common-mistakes.md)) |
-| U-06 | HIGH | B | Env behavior gated on the INTENTIONAL check — `isProduction()` or `isDevelopment() \|\| isTesting()`, never `!isDevelopment()`; no ad-hoc `process.env.EM_*` reads where a helper exists ([environment-detection.md](environment-detection.md)) |
+| U-06 | HIGH | B | Env behavior gated on the INTENTIONAL check: `isProduction()` or `isDevelopment() \|\| isTesting()`, never `!isDevelopment()`; no ad-hoc `process.env` reads where a helper exists ([environment-detection.md](environment-detection.md)) |
 | U-07 | HIGH | B | Config canon — `config/omega.json5` validates against the schema (boot validator green); canonical cross-framework blocks (`brand`, `app`, `cloud.{provider,config}`, `monitoring`, `analytics`, `payment`) not reinvented ([config-schema.md](config-schema.md)) |
 | U-08 | CRIT | B | No private credentials committed — signing certs (`config/certs/` gitignored), `.env` secrets, tokens, API secret keys ([signing.md](signing.md)). (The Firebase WEB `apiKey` is public by design — do NOT flag it.) |
 | U-09 | HIGH | B | Source discipline — nothing edited in `dist/` or generated files (`dist/electron-builder.yml`, entitlements plist); no live code referencing `_legacy/` / `_backup/` ([build-system.md](build-system.md), [common-mistakes.md](common-mistakes.md)) |
@@ -44,7 +44,7 @@ Mirrored across all four OMEGA frameworks (UJM / @omega.js/backend / BXM / @omeg
 | DSK-01 | CRIT | B | Zero-trust URLs — every DYNAMIC URL is gated through `sanitize-url.js` before `shell.openExternal` / `BrowserWindow.loadURL` / `window.location.href =` (hardcoded internal-scheme URLs bypass) ([the framework guide](../../../docs/desktop/index.md) §File Conventions, [common-mistakes.md](common-mistakes.md)) |
 | DSK-02 | HIGH | B | Path resolution — `app.getAppPath()` / `utils/app-root.js`, never `process.cwd()`, in runtime code (it's `/` in packaged apps) ([common-mistakes.md](common-mistakes.md)) |
 | DSK-03 | HIGH | C | Windows — every `windows.create()` is `await`ed; the `main` window is ALWAYS created (even hidden launches, with `show: false`) so activate/second-instance can surface UI ([windows.md](windows.md), [common-mistakes.md](common-mistakes.md)) |
-| DSK-04 | HIGH | B | Zero-trust IPC — all channels go through `manager.ipc` (never raw `ipcMain`); handlers validate payload content before acting, especially in apps embedding remote web content ([ipc.md](ipc.md#zero-trust-payloads)) |
+| DSK-04 | HIGH | B | Zero-trust IPC: all channels go through `omega.ipc` (never raw `ipcMain`); handlers validate payload content before acting, especially in apps embedding remote web content ([ipc.md](ipc.md#zero-trust-payloads)) |
 | DSK-05 | MED | C | Icons — one native-size PNG per slot (no `@2x` siblings), macOS tray source named `tray.png` (@omega.js/desktop owns the `Template` rename), no `app.icons` config block ([icons.md](icons.md)) |
 | DSK-06 | HIGH | C | File-based integrations — tray/menu/context-menu logic lives in `src/integrations/<name>/index.js`, never expressed in config JSON ([tray.md](tray.md), [menu.md](menu.md), [context-menu.md](context-menu.md)) |
 | DSK-07 | HIGH | B | Presence-driven feature flags — credentials enable features (`monitoring.providers.sentry.dsn`, `analytics.providers.google.id`, `cloud.config`); no invented `enabled:` toggles ([config-schema.md](config-schema.md)) |