@plitzi/sdk-shared 0.38.13 → 0.38.15

package/dist/store/renderSettings.d.ts

@@ -28,6 +28,7 @@ export declare const useRenderOverride: (overrides: RenderSettings) => {
         overQuota: boolean;
         testAttributes: boolean;
         ownsHead: boolean;
+        enclosed: boolean;
     };
 };
 export default useRenderSettings;

package/dist/store/renderSettings.mjs

@@ -10,9 +10,10 @@ var n = {
 	hydrated: !1,
 	overQuota: !1,
 	testAttributes: !0,
-	ownsHead: !0
+	ownsHead: !0,
+	enclosed: !1
 }, r = () => {
-	let [[r, i, a, o, s, c, l, u, d]] = e([
+	let [[r, i, a, o, s, c, l, u, d, f]] = e([
 		"render.previewMode",
 		"render.debugMode",
 		"render.renderMode",
@@ -21,7 +22,8 @@ var n = {
 		"render.hydrated",
 		"render.overQuota",
 		"render.testAttributes",
-		"render.ownsHead"
+		"render.ownsHead",
+		"render.enclosed"
 	]);
 	return t(() => ({
 		previewMode: r ?? n.previewMode,
@@ -32,7 +34,8 @@ var n = {
 		hydrated: c ?? n.hydrated,
 		overQuota: l ?? n.overQuota,
 		testAttributes: u ?? n.testAttributes,
-		ownsHead: d ?? n.ownsHead
+		ownsHead: d ?? n.ownsHead,
+		enclosed: f ?? n.enclosed
 	}), [
 		r,
 		i,
@@ -42,7 +45,8 @@ var n = {
 		c,
 		l,
 		u,
-		d
+		d,
+		f
 	]);
 }, i = (e) => {
 	let n = r();

package/dist/types/ActionTypes.d.ts

@@ -17,6 +17,43 @@ export type ActionField = {
     /** Shown in the builder, and read by the MCP agent when it wires a call. */
     label?: string;
 };
+/** What a caller sends for a field of a type: text for `text`, `date` and `file`, anything parseable for `json`. */
+type ActionFieldValue<T extends ActionFieldType> = T extends 'number' ? number : T extends 'boolean' ? boolean : T extends 'json' ? unknown : string;
+/** The input a caller hands an action, from the fields it declares: those `required: true` must be there. */
+export type ActionInputOf<Fields extends Readonly<Record<string, ActionField>>> = {
+    -readonly [K in keyof Fields as Fields[K]['required'] extends true ? K : never]: ActionFieldValue<Fields[K]['type']>;
+} & {
+    -readonly [K in keyof Fields as Fields[K]['required'] extends true ? never : K]?: ActionFieldValue<Fields[K]['type']>;
+};
+/**
+ * The key a typed action's input and output ride under, in its type only — nothing holds it at run time. Exported so a
+ * package that emits declarations can name the type of an action it exports (`export const actions = [defineAction(…)]`):
+ * a symbol it cannot import is one its `.d.ts` cannot write (TS4023).
+ */
+export declare const CALL_TYPES: unique symbol;
+/**
+ * An action whose `call` way in is known to the types — what it takes and what it answers: what `defineAction` and
+ * `taskAction` answer, so a page that runs it (`useServerAction<typeof saveHabit>('save-habit')`) is held to the input
+ * it declares and handed the output typed. Nothing of it exists at run time — the action is the same document.
+ */
+export type TypedActionEntry<Input, Output = unknown> = ActionEntry & {
+    readonly [CALL_TYPES]?: {
+        input: Input;
+        output: Output;
+    };
+};
+/** The input an action's `call` way in takes, from its type — any object, for an action whose type does not say. */
+export type CallInputOf<Action> = Action extends {
+    readonly [CALL_TYPES]?: {
+        input: infer Input;
+    };
+} ? unknown extends Input ? Record<string, unknown> : Input : Record<string, unknown>;
+/** What an action answers, from its type — `unknown` for one whose type does not say. */
+export type CallOutputOf<Action> = Action extends {
+    readonly [CALL_TYPES]?: {
+        output: infer Output;
+    };
+} ? Output : unknown;
 /**
  * Who may start a run through ONE way in. Resolved against the auth kernel — never re-implemented here.
  *
@@ -709,3 +746,4 @@ export type ActionJobQueue = {
         olderThan?: string;
     }) => Promise<number>;
 };
+export {};

package/dist/types/RealtimeTypes.d.ts

@@ -22,6 +22,13 @@ export type ChannelDeclaration = {
      * a locked board.
      */
     grant?: boolean;
+    /**
+     * Whether the server keeps the latest message of each type on a topic, and hands them to every page that joins: state
+     * all the screens share — a dashboard's lists, a board's settings — said once by the server (`ctx.publish`, a flow's
+     * `realtime.publish`) and there for a page that opens later, as `<channel>.retained.<type>`. Kept until the next of
+     * its type; `null` forgets it. Only on a channel the server alone publishes on (`publish: 'server'`).
+     */
+    retain?: boolean;
     /** The largest `data` a page may send, as JSON bytes. 4 KB when absent. */
     maxMessageBytes?: number;
     /** How many messages one connection may send a second. 30 when absent. */
@@ -55,6 +62,11 @@ export type RealtimeMessage = RealtimeSender & {
      * knows it for its own by `from` — its channel's `me`. Without it, a page never hears what it sent.
      */
     echo?: true;
+    /**
+     * Kept by the server: on a `retain: true` channel, the latest message of its type — sent as it is said, and again to
+     * every page that joins. The newest of a type is the one that holds; `null` data forgets it.
+     */
+    retained?: true;
 };
 /** What a page asks of a publish beyond the message itself. */
 export type RealtimePublishOptions = {

package/dist/types/ServerTypes.d.ts

@@ -359,8 +359,15 @@ export type SSRAdapters = {
      *  dedicated MCP server renders nothing, reads schema and style through its own adapters, and had to hand this
      *  one over anyway for the type to be satisfied — an adapter it never called. */
     getOfflineData?: (spaceId: number, environment: string, revision?: number) => Promise<OfflineDataRaw | undefined>;
-    /** Which space, environment and revision a request resolves to. Optional here for the same reason as
-     *  `getOfflineData`: MCP resolves its space from the request token (`getGrant`), never from the host. */
+    /**
+     * Which space, environment and revision a request resolves to. Optional here for the same reason as
+     * `getOfflineData`: MCP resolves its space from the request token (`getGrant`), never from the host.
+     *
+     * Asked on EVERY request, not only a page's: what the page fetches after it — `/_plitzi/space/<hash>.json`, `/_action`,
+     * `/fn/…`, `/_realtime` — is resolved again, and carries nothing of the page's address but its host (and the
+     * visitor's credentials). So a space is chosen by the host — a domain, a sub-domain (`wildcardSubdomain`) — or by a
+     * credential (`authoringPreview`): one chosen by the page's path or query is lost on the requests that follow it.
+     */
     getSpaceDeployment?: (req: SSRRequest) => Promise<SSRSpaceDeployment>;
     /** Resolve the grant the MCP request operates under, from the verified `Authorization` bearer. The consumer
      *  owns the JWT secret and the authorization model, so it decides here; the MCP service stays stateless.
@@ -1033,6 +1040,19 @@ export type SSRServerConfig = {
     };
     /** Realtime channels the spaces declare — see {@link SSRRealtimeConfig}. On, in memory, when absent. */
     realtime?: SSRRealtimeConfig;
+    /**
+     * The writes a page on another site may cause here. None, by default: a browser's POST, PUT, PATCH or DELETE that it
+     * says another site caused (`Sec-Fetch-Site: cross-site`, or a foreign `Origin`) is refused 403 `reason: 'foreign'` —
+     * a session cookie or none, because a server holding credentials of its own, or a tool nobody signs in to, acts for
+     * whoever reaches it. A request with `Authorization`, and one that is not a browser's (a webhook, a script), are never
+     * asked. With `auth`, the deployment's `identity.platformOrigins` count as its own too.
+     */
+    crossSiteWrites?: {
+        /** Origins whose pages may write here, exactly as a browser sends them — `https://app.example.com`. */
+        origins?: string[];
+        /** Paths any site may post to: a form other sites embed by design. */
+        paths?: (path: string) => boolean;
+    };
     /** Connector manifest and credential lookups — see {@link ConnectorLookupsConfig}. They serve the RSC read path
      *  and the `/_action` write endpoint alike; without them neither can reach a connector. */
     connectors?: ConnectorLookupsConfig;

package/dist/types/StoreTypes.d.ts

@@ -152,12 +152,18 @@ export type RenderSettings = {
     /**
      * Whether the page may write the document's head — its SEO title and description. On, as a page's own document is.
      *
-     * Off where the page is drawn in a frame of a host whose document is not the page's: the builder's canvas. A head
-     * manager writes the head of the document its code runs in, which there is the editor's — and the builder is itself
+     * Off where the page is drawn in a host whose document is not the page's: the builder's canvas, a space drawn inside
+     * another one. A head manager writes the head of the document its code runs in, which there is the editor's — and the builder is itself
      * mounted in a page that manages that head, so a second manager under it rewrote the host's tags and took the
      * builder's own stylesheet away the moment a preview showed a page with SEO.
      */
     ownsHead?: boolean;
+    /**
+     * Whether this space is drawn inside another one — the `plitziSdk` element, a plugin rendering a space. The
+     * document is then the outer space's: this one wears its theme on its own root, keeps its stylesheet to that root,
+     * and starts in the outer space's theme when its own is left to the machine.
+     */
+    enclosed?: boolean;
 };
 /** Absent `endpoint` is the whole feature switch: a render with no server tier leaves every `serverAction` step
  *  inert instead of letting each click discover a 404. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@plitzi/sdk-shared",
-  "version": "0.38.13",
+  "version": "0.38.15",
   "license": "AGPL-3.0",
   "files": [
     "dist",
@@ -322,10 +322,18 @@
       "types": "./dist/helpers/canonicalJson.d.ts",
       "import": "./dist/helpers/canonicalJson.mjs"
     },
+    "./helpers/clipboard": {
+      "types": "./dist/helpers/clipboard.d.ts",
+      "import": "./dist/helpers/clipboard.mjs"
+    },
     "./helpers/cookies": {
       "types": "./dist/helpers/cookies.d.ts",
       "import": "./dist/helpers/cookies.mjs"
     },
+    "./helpers/enclosingSpace": {
+      "types": "./dist/helpers/enclosingSpace.d.ts",
+      "import": "./dist/helpers/enclosingSpace.mjs"
+    },
     "./helpers/eventTarget": {
       "types": "./dist/helpers/eventTarget.d.ts",
       "import": "./dist/helpers/eventTarget.mjs"
@@ -386,6 +394,10 @@
       "types": "./dist/helpers/sharedContext.d.ts",
       "import": "./dist/helpers/sharedContext.mjs"
     },
+    "./helpers/spaceRoot": {
+      "types": "./dist/helpers/spaceRoot.d.ts",
+      "import": "./dist/helpers/spaceRoot.mjs"
+    },
     "./helpers/stripTypename": {
       "types": "./dist/helpers/stripTypename.d.ts",
       "import": "./dist/helpers/stripTypename.mjs"
@@ -1115,6 +1127,10 @@
       "types": "./dist/project/layout.d.ts",
       "import": "./dist/project/layout.mjs"
     },
+    "./project/network": {
+      "types": "./dist/project/network.d.ts",
+      "import": "./dist/project/network.mjs"
+    },
     "./project/paths": {
       "types": "./dist/project/paths.d.ts",
       "import": "./dist/project/paths.mjs"
@@ -1618,7 +1634,6 @@
     "react": "^19.3.0",
     "react-dom": "^19.3.0",
     "tailwindcss": "^4.3.3",
-    "terser": "^5.51.2",
     "typescript": "^6.0.3",
     "typescript-eslint": "^8.71.0",
     "vite": "^8.3.2",

package/setupTests.ts

@@ -9,13 +9,14 @@ import createFetchMock from 'vitest-fetch-mock';
 const fetchMocker = createFetchMock(vi);
 fetchMocker.enableMocks();
 
+// A class, as the browser's is: what calls it calls it with `new`, which an arrow function refuses.
 vi.stubGlobal(
   'ResizeObserver',
-  vi.fn(() => ({
-    observe: vi.fn(),
-    unobserve: vi.fn(),
-    disconnect: vi.fn()
-  }))
+  class {
+    observe = vi.fn();
+    unobserve = vi.fn();
+    disconnect = vi.fn();
+  }
 );
 
 // Only where there is a window: a file that opts into `@vitest-environment node` (one running a bundler) has none.