@powerhousedao/connect 6.2.3-dev.9 → 6.2.3

package/dist/{reactor-yC8BveHb.js → reactor-CItc8KaF.js}

@@ -1,13 +1,13 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="f8f2f6b8-9d33-50e7-af3e-fcd10c6d78da")}catch(e){}}();
-import { n as getRuntimeConfig } from "./runtime-config-DL3QjcfM.js";
-import { a as resolvePgMajorForRuntime, r as loadPGliteModule } from "./pglite-major-B39aOEiE.js";
-import { i as getVersion, n as getGitSha } from "./build-info-D9_h0032.js";
-import { n as buildPHGlobalConfig, o as phGlobalConfig } from "./connect.config-DaHDEUrw.js";
-import { t as refreshPwaManifestLink } from "./pwa-manifest-link-DIgOSo2Q.js";
-import { a as detectReactorPgMajor, h as RELATIONAL_PGLITE_NAME, m as REACTOR_PGLITE_NAME, n as setWorkerConnectionStatus, o as detectRelationalPgMajor, p as REACTOR_INSTANCE_NAMESPACE } from "./connection-state-3w4liC1X.js";
-import { r as toast } from "./toast-BXIGd4Eb.js";
-import { PWA_IDB_KEY, PWA_IDB_NAME, PWA_IDB_STORE, PWA_IDB_VERSION, mergePwaConfig, withInferredCategory } from "@powerhousedao/shared/connect";
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="e9dffb1a-3523-5af8-8cad-60683e091ce0")}catch(e){}}();
+import { n as getRuntimeConfig } from "./runtime-config-DtJIUgYw.js";
+import { t as createConnectSignerConfig } from "./renown-trust-DRgHpxlZ.js";
+import { a as resolvePgMajorForRuntime, f as toStoredDocumentsRefused, r as loadPGliteModule } from "./pglite-major-p4_YefAE.js";
+import { n as buildPHGlobalConfig, o as phGlobalConfig, r as connectConfig } from "./connect.config-CaXMoB42.js";
+import { r as toast } from "./toast-C6WW-_O-.js";
+import { r as getSharedDeps, t as BrowserPackageManager } from "./package-manager-BbzIV9aN.js";
+import { i as getVersion, n as getGitSha } from "./build-info-BV8UtyA4.js";
+import { a as detectReactorPgMajor, h as RELATIONAL_PGLITE_NAME, m as REACTOR_PGLITE_NAME, n as setWorkerConnectionStatus, o as detectRelationalPgMajor, p as REACTOR_INSTANCE_NAMESPACE } from "./connection-state-Eqc2izmt.js";
 import { createRelationalDb } from "@powerhousedao/shared/processors";
 import { DocumentModelRegistry, DocumentModelResolver, ReactorEventTypes, createReactorHostModuleBase } from "@powerhousedao/reactor";
 import { MessageRouter, RPC_PROTOCOL_VERSION, SyncManagerProxy, connectReactorClient, createInspectorProxy, createPortTransport, createReactorEventBusProxy, createRelationalPgliteProxy, createWorkerAdminClient, postReactorIdentity } from "@powerhousedao/reactor-browser/rpc";
@@ -15,90 +15,9 @@ import { Kysely } from "kysely";
 import { PGliteDialect } from "kysely-pglite-dialect";
 import { BrowserLocalStorage, ChannelScheme as ChannelScheme$1, DRIVE_DOCUMENT_TYPES, DocumentCache, DocumentChangeType, ReactorBuilder as ReactorBuilder$1, ReactorClientBuilder as ReactorClientBuilder$1, RegistryClient, addDrive, addPHEventHandlers, addRemoteDrive, createAnalyticsStore, extractDriveSlugFromPath, extractNodeSlugFromPath, getDrives, isDriveAuthError, login, refreshReactorDataClient, setAttachmentService, setDefaultPHGlobalConfig, setDocumentCache, setDriveMetadata, setDrives, setFeatures, setPGliteDB, setPHToast, setPackageDiscoveryService, setReactorClient, setReactorClientModule, setRenown, setSelectedDrive, setSelectedNode, setVetraPackageManager, waitForDocumentReady } from "@powerhousedao/reactor-browser";
 import { ConsoleLogger, logger, setLogLevel as setLogLevel$1 } from "document-model";
-import { BrowserKeyStorage, RenownBuilder, RenownCryptoBuilder, createSignatureVerifier } from "@renown/sdk";
-import { PwaConfigSchema } from "@powerhousedao/shared/document-model";
 import { createAttachmentClient, createRemoteAttachmentService, createXhrUploadTransport } from "@powerhousedao/reactor-attachments/client";
+import { BrowserKeyStorage, RenownBuilder, RenownCryptoBuilder } from "@renown/sdk";
 import { OpenFeature } from "@openfeature/web-sdk";
-import * as common from "@powerhousedao/powerhouse-vetra-packages";
-import commonPkg from "@powerhousedao/powerhouse-vetra-packages/package.json" with { type: "json" };
-import { toCdnUrl } from "@powerhousedao/shared/registry/urls";
-import vetraPkg from "@powerhousedao/vetra/package.json" with { type: "json" };
-//#region src/utils/pwa-idb.ts
-function openPwaIdb() {
-	return new Promise((resolve, reject) => {
-		const req = indexedDB.open(PWA_IDB_NAME, PWA_IDB_VERSION);
-		req.onupgradeneeded = () => {
-			if (!req.result.objectStoreNames.contains(PWA_IDB_STORE)) req.result.createObjectStore(PWA_IDB_STORE);
-		};
-		req.onerror = () => reject(req.error ?? /* @__PURE__ */ new Error("ph-pwa open failed"));
-		req.onblocked = () => reject(/* @__PURE__ */ new Error("ph-pwa open blocked"));
-		req.onsuccess = () => resolve(req.result);
-	});
-}
-/** Write (replace) the single merged fragment record. Best-effort: a failure to
-* mirror the manifest must never break package installation, so callers ignore
-* rejections. No-op when IndexedDB is unavailable (SSR/tests). */
-async function writeMergedPwaFragment(fragment) {
-	if (typeof indexedDB === "undefined") return;
-	const db = await openPwaIdb();
-	try {
-		await new Promise((resolve, reject) => {
-			const tx = db.transaction(PWA_IDB_STORE, "readwrite");
-			tx.oncomplete = () => resolve();
-			tx.onerror = () => reject(tx.error ?? /* @__PURE__ */ new Error("PWA fragment write failed"));
-			tx.objectStore(PWA_IDB_STORE).put({
-				version: 1,
-				fragment,
-				updatedAt: Date.now()
-			}, PWA_IDB_KEY);
-		});
-	} finally {
-		db.close();
-	}
-}
-/** Resolve `src` against the package `baseUrl`, absolute srcs passing through.
-* `baseUrl` may itself be relative (e.g. a same-origin-proxied registry, or the
-* dev `/node_modules/…` path), so it is first made absolute against the app
-* origin — `new URL(src, relativeBase)` would otherwise throw and silently
-* leave the src unresolved. A malformed src is left untouched. */
-function toAbsoluteAssetUrl(src, baseUrl) {
-	try {
-		const origin = typeof location !== "undefined" ? location.href : "http://localhost/";
-		return new URL(src, new URL(baseUrl, origin)).toString();
-	} catch {
-		return src;
-	}
-}
-function resolveIconSrc(icon, baseUrl) {
-	return {
-		...icon,
-		src: toAbsoluteAssetUrl(icon.src, baseUrl)
-	};
-}
-/**
-* Rewrite a package fragment's relative asset srcs (manifest icons and
-* file-handler icons) to absolute URLs against the package's base — a runtime
-* package's assets live on the registry CDN, not the app origin, so the served
-* manifest must point there. `baseUrl` null (a local/bundled package whose
-* assets are app-origin-relative) leaves srcs untouched.
-*/
-function resolveFragmentAssetUrls(config, baseUrl) {
-	if (!baseUrl || !config.manifest) return config;
-	const m = config.manifest;
-	const resolveIcons = (icons) => icons?.map((icon) => resolveIconSrc(icon, baseUrl));
-	return {
-		...config,
-		manifest: {
-			...m,
-			icons: resolveIcons(m.icons),
-			file_handlers: m.file_handlers?.map((handler) => ({
-				...handler,
-				icons: resolveIcons(handler.icons)
-			}))
-		}
-	};
-}
-//#endregion
 //#region src/pglite.db.ts
 async function createMainThreadPGlite(major, dbName) {
 	const { PGlite } = await loadPGliteModule(major);
@@ -153,20 +72,25 @@ async function getDb() {
 * Creates a Reactor that plugs into legacy storage but syncs through the new
 * Reactor GQL API.
 */
-async function createBrowserReactor(documentModelModules, upgradeManifests, renown, featureFlags, documentModelLoader) {
-	const signerConfig = {
-		signer: renown.signer,
-		verifier: createSignatureVerifier()
-	};
+async function createBrowserReactor(documentModelModules, upgradeManifests, renown, featureFlags, documentModelLoader, createSignaturePolicy, renownEndpoints = {}, unsupportedStoredDocuments) {
+	const signerConfig = await createConnectSignerConfig(renown.signer, featureFlags, renownEndpoints);
 	const jwtHandler = async (_url) => {
 		if (!renown.user) return;
 		return renown.getBearerToken({ expiresIn: 10 });
 	};
 	const pg = await getReactorPGlite();
 	const logger = new ConsoleLogger(["reactor-client"]);
-	const builder = new ReactorClientBuilder$1().withLogger(logger).withSigner(signerConfig).withReactorBuilder(new ReactorBuilder$1().withDocumentModelSources(documentModelModules).withUpgradeManifests(upgradeManifests).withChannelScheme(ChannelScheme$1.CONNECT).withExecutorConfig({ featureFlags }).withJwtHandler(jwtHandler).withKysely(new Kysely({ dialect: new PGliteDialect(pg) })));
+	const reactorBuilder = new ReactorBuilder$1().withDocumentModelSources(documentModelModules).withUpgradeManifests(upgradeManifests).withChannelScheme(ChannelScheme$1.CONNECT).withExecutorConfig({ featureFlags }).withJwtHandler(jwtHandler).withKysely(new Kysely({ dialect: new PGliteDialect(pg) }));
+	const builder = new ReactorClientBuilder$1().withLogger(logger).withSigner(signerConfig).withReactorBuilder(reactorBuilder);
 	if (documentModelLoader) builder.withDocumentModelLoader(documentModelLoader);
-	const module = await builder.buildModule();
+	if (createSignaturePolicy) builder.withCreateSignaturePolicy(createSignaturePolicy);
+	if (unsupportedStoredDocuments) reactorBuilder.withUnsupportedStoredDocuments(unsupportedStoredDocuments);
+	let module;
+	try {
+		module = await builder.buildModule();
+	} catch (error) {
+		throw toStoredDocumentsRefused(error);
+	}
 	return {
 		...module,
 		kind: "browser",
@@ -683,325 +607,6 @@ var PackageDiscoveryService = class {
 	}
 };
 //#endregion
-//#region src/package-manager.ts
-/**
-* Strip any `@tag` / `@version` suffix from a package spec, returning the bare
-* package name. Mirrors `parsePackageSpec` on the UI side.
-*/
-function parseBareName(spec) {
-	const trimmed = spec.trim();
-	const at = trimmed.startsWith("@") ? trimmed.lastIndexOf("@") : trimmed.indexOf("@");
-	return at > 0 ? trimmed.slice(0, at) : trimmed;
-}
-async function fetchPackageJsonVersion(baseUrl) {
-	try {
-		const res = await fetch(baseUrl);
-		if (!res.ok) return void 0;
-		const pkg = await res.json();
-		return typeof pkg.version === "string" ? pkg.version : void 0;
-	} catch {
-		return;
-	}
-}
-const LOCAL_PACKAGE_NAME = "Local";
-var BrowserPackageManager = class {
-	registryUrl;
-	#storage;
-	#packages = /* @__PURE__ */ new Map();
-	#subscribers = /* @__PURE__ */ new Set();
-	#packagesMemo = [];
-	#stylesheets = /* @__PURE__ */ new Map();
-	#localPackage;
-	#cdnUrl;
-	#localPackageVersion;
-	#localPackageNames = new Set([LOCAL_PACKAGE_NAME]);
-	#pwaSyncTimer;
-	/** Serialized last-mirrored PWA fragment; lets a sync skip the IndexedDB
-	* write + manifest re-attach when nothing PWA-relevant changed. */
-	#lastSyncedFragmentJson;
-	constructor(namespace, registryUrl) {
-		this.#storage = new BrowserLocalStorage(namespace + ":PH_PACKAGES");
-		this.registryUrl = registryUrl;
-		this.#cdnUrl = registryUrl !== null ? toCdnUrl(registryUrl) : null;
-	}
-	async init(localPackage, localPackageVersion, studioMode) {
-		this.addLocalPackage(common.manifest.name, common, commonPkg.version);
-		if (studioMode) {
-			const vetra = await import("@powerhousedao/vetra");
-			this.addLocalPackage(vetra.manifest.name, vetra, vetraPkg.version);
-		}
-		if (localPackage) this.updateLocalPackage(localPackage, localPackageVersion);
-		for (const packageName of this.#storage.keys()) {
-			const specForReload = this.#storage.get(packageName)?.spec ?? packageName;
-			console.debug(`[Connect][PackageManager] Rehydrating "${packageName}" via spec "${specForReload}"`);
-			if ((await this.addPackage(specForReload)).type === "error") this.#storage.delete(packageName);
-		}
-	}
-	addLocalPackage(name, loadedPackage, version) {
-		this.#localPackageNames.add(name);
-		this.#registerPackage({
-			name,
-			importUrl: null,
-			stylesheetUrl: null,
-			loadedPackage,
-			version
-		});
-	}
-	updateLocalPackage(pkg, version) {
-		console.debug("Updating local package:", pkg);
-		this.#localPackage = pkg;
-		this.#registerPackage({
-			name: LOCAL_PACKAGE_NAME,
-			stylesheetUrl: null,
-			importUrl: null,
-			loadedPackage: pkg
-		});
-		if (version) {
-			this.#localPackageVersion = version;
-			this.#notifyPackagesChanged();
-			return;
-		}
-		fetchPackageJsonVersion("/package.json").then((fetchedVersion) => {
-			this.#localPackageVersion = fetchedVersion;
-			if (fetchedVersion) this.#notifyPackagesChanged();
-		}).catch(() => {});
-	}
-	get packages() {
-		return this.#packagesMemo;
-	}
-	get cdnUrl() {
-		return this.#cdnUrl;
-	}
-	getPackageSource(packageName) {
-		if (this.#localPackageNames.has(packageName)) return "common";
-		if (packageName === this.#localPackage?.manifest.name) return "project";
-		const packageMeta = this.#storage.get(packageName);
-		if (!packageMeta) return null;
-		if (packageMeta.importUrl === `/node_modules/${packageName}`) return "local-install";
-		return "registry-install";
-	}
-	/**
-	* Return the registry-installed packages keyed by their storage name (which
-	* is the registry spec, e.g. "@powerhousedao/clint-common"), with the
-	* installed version when known. Excludes bundled (common) packages, the
-	* local project package, and packages resolved out of `/node_modules/`.
-	*/
-	getRegistryPackages() {
-		const out = [];
-		for (const [name, meta] of this.#storage) {
-			if (this.#localPackageNames.has(name)) continue;
-			if (name === LOCAL_PACKAGE_NAME) continue;
-			if (meta.importUrl === `/node_modules/${name}`) continue;
-			out.push({
-				name,
-				version: meta.version
-			});
-		}
-		return out;
-	}
-	getPackageVersion(packageName) {
-		if (packageName === this.#localPackage?.manifest.name) return this.#localPackageVersion;
-		return this.#storage.get(packageName)?.version;
-	}
-	/**
-	* The spec the user requested when this package was installed (e.g.
-	* `name@dev` or `name@6.2.1`). Undefined for bare-name installs, legacy
-	* entries, and local packages — the Package Manager treats that as the
-	* `latest` stream when picking update targets.
-	*/
-	getPackageSpec(packageName) {
-		return this.#storage.get(packageName)?.spec;
-	}
-	async addPackage(packageSpec) {
-		const bareName = parseBareName(packageSpec);
-		const hasTagOrVersion = bareName !== packageSpec;
-		console.debug(`[Connect][PackageManager] addPackage spec="${packageSpec}" bareName="${bareName}"`);
-		const existingPackage = this.#packages.get(bareName);
-		if (existingPackage) {
-			const requestedVersion = hasTagOrVersion ? packageSpec.slice(bareName.length + 1) : void 0;
-			const currentVersion = this.#storage.get(bareName)?.version;
-			if (this.#localPackageNames.has(bareName) || !requestedVersion || !currentVersion || requestedVersion === currentVersion) {
-				console.debug(`[Connect][PackageManager] "${bareName}" already loaded; skipping re-fetch`);
-				return {
-					type: "success",
-					package: existingPackage
-				};
-			}
-			console.debug(`[Connect][PackageManager] "${bareName}" version bump ${currentVersion} → ${requestedVersion}; refetching`);
-		}
-		try {
-			const packageWithMeta = await this.#loadPackage(packageSpec);
-			packageWithMeta.name = bareName;
-			if (hasTagOrVersion) packageWithMeta.spec = packageSpec;
-			if (existingPackage) this.#unmountStylesheet(bareName);
-			this.#registerPackage(packageWithMeta);
-			return {
-				type: "success",
-				package: packageWithMeta.loadedPackage
-			};
-		} catch (error) {
-			const normalized = error instanceof Error ? error : new Error(String(error));
-			console.error(`[Connect][PackageManager] Failed to install package "${packageSpec}": ${normalized.message}`, normalized);
-			return {
-				type: "error",
-				error: normalized
-			};
-		}
-	}
-	async addPackages(packageNames) {
-		const results = [];
-		for (const packageName of packageNames) {
-			const result = await this.addPackage(packageName);
-			results.push(result);
-		}
-		return results;
-	}
-	removePackage(name) {
-		this.#packages.delete(name);
-		this.#storage.delete(name);
-		this.#unmountStylesheet(name);
-		this.#notifyPackagesChanged();
-	}
-	subscribe(handler) {
-		this.#subscribers.add(handler);
-		return () => {
-			this.#subscribers.delete(handler);
-		};
-	}
-	load(documentType) {
-		const documentModelModule = Array.from(this.#packages.values().flatMap((p) => p.documentModels)).find((m) => m.documentModel.global.id === documentType);
-		if (documentModelModule) return Promise.resolve(documentModelModule);
-		return Promise.reject(/* @__PURE__ */ new Error("Model not available"));
-	}
-	async #loadPackageFromNodeModules(name) {
-		const importUrl = `/node_modules/${name}/browser/index.js`;
-		const stylesheetUrl = `/node_modules/${name}/style.css`;
-		const packageWithMeta = await this.#importPackage({
-			name,
-			importUrl,
-			stylesheetUrl
-		});
-		packageWithMeta.version = await fetchPackageJsonVersion(`/node_modules/${name}/package.json`);
-		return packageWithMeta;
-	}
-	async #loadPackageFromRegistry(name) {
-		const importUrl = `${this.#cdnUrl}/${name}/browser/index.js`;
-		const stylesheetUrl = `${this.#cdnUrl}/${name}/style.css`;
-		const packageWithMeta = await this.#importPackage({
-			name,
-			importUrl,
-			stylesheetUrl
-		});
-		packageWithMeta.version = await fetchPackageJsonVersion(`${this.#cdnUrl}/${name}/package.json`);
-		return packageWithMeta;
-	}
-	async #importPackage(packageMeta) {
-		const { name, importUrl, stylesheetUrl } = packageMeta;
-		if (!importUrl) throw new Error(`Import url not defined for package "${name}".`);
-		return {
-			name,
-			loadedPackage: await import(
-				/* @vite-ignore */
-				importUrl
-),
-			importUrl,
-			stylesheetUrl
-		};
-	}
-	async #loadPackage(packageName) {
-		if (this.#localPackageNames.has(packageName)) throw new Error(`Package "${packageName}" is a local package and cannot be loaded dynamically.`);
-		if (!import.meta.env.PROD) try {
-			return await this.#loadPackageFromNodeModules(packageName);
-		} catch (error) {
-			console.warn(`Failed to load package "${packageName}" from node_modules:`, error);
-		}
-		if (!this.registryUrl) throw new Error("Registry url not defined.");
-		return await this.#loadPackageFromRegistry(packageName);
-	}
-	#registerPackage(packageWithMeta) {
-		const { name, loadedPackage, importUrl, stylesheetUrl, version, spec } = packageWithMeta;
-		if (stylesheetUrl !== null) this.#mountStylesheet(name, stylesheetUrl);
-		this.#packages.set(name, loadedPackage);
-		this.#storage.set(name, {
-			name,
-			importUrl,
-			stylesheetUrl,
-			version,
-			...spec ? { spec } : {}
-		});
-		console.debug(`[Connect][PackageManager] Registered "${name}" (version=${version ?? "?"}, spec=${spec ?? "—"})`);
-		this.#notifyPackagesChanged();
-	}
-	#mountStylesheet(name, href) {
-		const existing = this.#stylesheets.get(name);
-		if (existing) return existing;
-		const style = document.createElement("style");
-		style.textContent = `@import url("${href}") layer(external-packages);`;
-		document.head.appendChild(style);
-		this.#stylesheets.set(name, style);
-	}
-	#unmountStylesheet(name) {
-		const style = this.#stylesheets.get(name);
-		if (!style) return;
-		style.remove();
-		this.#stylesheets.delete(name);
-	}
-	#notifyPackagesChanged() {
-		this.#packagesMemo = Array.from(this.#packages.values());
-		const packages = this.packages;
-		this.#subscribers.forEach((handler) => {
-			handler({ packages });
-		});
-		this.#schedulePwaSync();
-	}
-	/**
-	* Debounced mirror of every loaded package's PWA fragment into IndexedDB, so
-	* the service worker can serve a web-app manifest that reflects packages
-	* installed AT RUNTIME (a SW can't read localStorage, where the package list
-	* lives). Debounced because `init()` rehydrates many packages in a burst;
-	* coalescing collapses that into a single write.
-	*/
-	#schedulePwaSync() {
-		if (typeof indexedDB === "undefined") return;
-		clearTimeout(this.#pwaSyncTimer);
-		this.#pwaSyncTimer = setTimeout(() => {
-			this.#syncPwaFragments();
-		}, 50);
-	}
-	async #syncPwaFragments() {
-		const contributions = [];
-		for (const [name, loadedPackage] of this.#packages) {
-			const manifest = loadedPackage.manifest;
-			let config = {};
-			if (manifest.pwa) {
-				const parsed = PwaConfigSchema.safeParse(manifest.pwa);
-				if (parsed.success) {
-					const importUrl = this.#storage.get(name)?.importUrl ?? null;
-					const baseUrl = importUrl ? importUrl.replace(/browser\/index\.js$/, "") : null;
-					config = resolveFragmentAssetUrls(parsed.data, baseUrl);
-				} else console.warn(`[Connect][PWA] "${name}" ships an invalid pwa fragment; skipped.`, parsed.error);
-			}
-			config = withInferredCategory(config, manifest.category);
-			if (Object.keys(config).length === 0) continue;
-			contributions.push({
-				source: name,
-				config
-			});
-		}
-		const merged = mergePwaConfig(contributions);
-		const mergedJson = JSON.stringify(merged);
-		if (mergedJson === this.#lastSyncedFragmentJson) return;
-		try {
-			await writeMergedPwaFragment(merged);
-		} catch (error) {
-			console.debug("[Connect][PWA] fragment mirror to IndexedDB failed:", error);
-			return;
-		}
-		this.#lastSyncedFragmentJson = mergedJson;
-		refreshPwaManifestLink();
-	}
-};
-//#endregion
 //#region src/reactor-worker-name.ts
 const GEN_KEY_PREFIX = "ph-reactor-gen:";
 function reactorWorkerName(namespace) {
@@ -1072,9 +677,14 @@ function createWorkerReactorClientModule(args) {
 			relationalNamespace: args.relationalNamespace,
 			cdnUrl: args.cdnUrl,
 			packageSpecs: args.packageSpecs,
+			sharedImports: args.sharedImports,
 			studioMode: args.studioMode,
+			workflowsEnabled: args.workflowsEnabled,
 			renownChainId: args.renownChainId,
-			featureFlags: args.featureFlags
+			featureFlags: args.featureFlags,
+			createSignaturePolicy: args.createSignaturePolicy,
+			unsupportedStoredDocuments: args.unsupportedStoredDocuments,
+			renownEndpoints: args.renownEndpoints
 		},
 		packages: args.packageSpecs
 	}, args.onReload, documentModelRegistry);
@@ -1305,9 +915,12 @@ async function createReactor(localPackage) {
 	const runtimeConfig = getRuntimeConfig();
 	const packageManager = new BrowserPackageManager(phGlobalConfig.routerBasename ?? "", runtimeConfig.packageRegistryUrl ?? null);
 	setVetraPackageManager(packageManager);
-	await packageManager.init(localPackage, runtimeConfig.localPackage?.version, phGlobalConfig.studioMode);
+	await packageManager.init(localPackage, runtimeConfig.localPackage?.version, phGlobalConfig.studioMode, connectConfig.workflowsEnabled);
 	try {
-		const { default: registerBundledPackages } = await import("ph-bundled-packages-virtual");
+		const { default: registerBundledPackages } = await import(
+			/* @vite-ignore */
+			"ph-bundled-packages-virtual"
+);
 		registerBundledPackages(packageManager);
 	} catch {}
 	const remotePackages = runtimeConfig.packages.filter((p) => p.provider !== "local").map((p) => p.version ? `${p.packageName}@${p.version}` : p.packageName);
@@ -1325,30 +938,43 @@ async function createReactor(localPackage) {
 	const reactorFeatureFlags = runtimeConfig.connect?.reactor?.featureFlags ?? {};
 	const enabledReactorFlags = Object.entries(reactorFeatureFlags).filter(([, enabled]) => enabled).map(([name]) => name);
 	if (enabledReactorFlags.length > 0) logger.info(`Reactor feature flags: ${enabledReactorFlags.join(", ")}`);
+	const createSignaturePolicy = runtimeConfig.connect?.reactor?.createSignaturePolicy;
+	const unsupportedStoredDocuments = runtimeConfig.connect?.reactor?.unsupportedStoredDocuments;
+	const renownEndpoints = {
+		renownUrl: phGlobalConfig.renownUrl,
+		switchboardUrl: phGlobalConfig.switchboardUrl
+	};
 	let reactorClientModule;
 	if (isReactorWorkerEnabled()) {
 		const packageSpecs = packageManager.getRegistryPackages().map((p) => p.version ? `${p.name}@${p.version}` : p.name);
 		const registryClient = new RegistryClient(packageManager.cdnUrl ?? "");
+		const documentModelLoader = { async load(documentType) {
+			const names = packageManager.cdnUrl ? await registryClient.getPackagesByDocumentType(documentType) : [];
+			for (const name of names) {
+				const result = await packageManager.addPackage(name);
+				if (result.type === "error") throw new Error(`Failed to install package "${name}" for document model: ${documentType}`, { cause: result.error });
+			}
+			const module = packageManager.packages.flatMap((p) => p.documentModels).find((m) => m.documentModel.global.id === documentType);
+			if (!module) throw new Error(names.length > 0 ? `Installed [${names.join(", ")}] but document model not available: ${documentType}` : `No package found for document model: ${documentType} (cdnUrl: ${packageManager.cdnUrl ?? "none"})`);
+			return module;
+		} };
+		const sharedImports = (await getSharedDeps())?.imports;
 		const workerClient = createWorkerReactorClientModule({
 			namespace: REACTOR_INSTANCE_NAMESPACE,
 			relationalNamespace: RELATIONAL_PGLITE_NAME,
 			cdnUrl: packageManager.cdnUrl ?? "",
 			packageSpecs,
+			sharedImports,
 			studioMode: phGlobalConfig.studioMode,
+			workflowsEnabled: connectConfig.workflowsEnabled,
 			renownChainId,
 			featureFlags: reactorFeatureFlags,
+			createSignaturePolicy,
+			unsupportedStoredDocuments,
+			renownEndpoints,
 			documentModelModules,
 			upgradeManifests,
-			documentModelLoader: { async load(documentType) {
-				const names = packageManager.cdnUrl ? await registryClient.getPackagesByDocumentType(documentType) : [];
-				for (const name of names) {
-					const result = await packageManager.addPackage(name);
-					if (result.type === "error") throw new Error(`Failed to install package "${name}" for document model: ${documentType}`, { cause: result.error });
-				}
-				const module = packageManager.packages.flatMap((p) => p.documentModels).find((m) => m.documentModel.global.id === documentType);
-				if (!module) throw new Error(names.length > 0 ? `Installed [${names.join(", ")}] but document model not available: ${documentType}` : `No package found for document model: ${documentType} (cdnUrl: ${packageManager.cdnUrl ?? "none"})`);
-				return module;
-			} },
+			documentModelLoader,
 			renown,
 			onReload: (reason, workerGen) => {
 				logger.warn("Reactor worker requested reload: @reason", reason);
@@ -1364,11 +990,15 @@ async function createReactor(localPackage) {
 			logger.error("Reactor worker failed to start: @error", error);
 			throw error;
 		}
-	} else reactorClientModule = await createBrowserReactor(documentModelModules, upgradeManifests, renown, reactorFeatureFlags, discoveryService);
+	} else reactorClientModule = await createBrowserReactor(documentModelModules, upgradeManifests, renown, reactorFeatureFlags, discoveryService, createSignaturePolicy, renownEndpoints, unsupportedStoredDocuments);
 	const drives = await getDrives(reactorClientModule.client);
-	await login(getDidFromUrl(), renown);
+	const didFromUrl = getDidFromUrl();
+	await login(didFromUrl, renown);
 	const documentCache = new DocumentCache(reactorClientModule.client);
-	setDefaultPHGlobalConfig(buildPHGlobalConfig(phGlobalConfig.basePath ?? "/", phGlobalConfig.routerBasename ?? "/", runtimeConfig.connect ?? {}));
+	const basePath = phGlobalConfig.basePath ?? "/";
+	const routerBasename = phGlobalConfig.routerBasename ?? "/";
+	const mergedGlobalConfig = buildPHGlobalConfig(basePath, routerBasename, runtimeConfig.connect ?? {});
+	setDefaultPHGlobalConfig(mergedGlobalConfig);
 	const path = window.location.pathname;
 	const driveSlug = extractDriveSlugFromPath(path);
 	const nodeSlug = extractNodeSlugFromPath(path);
@@ -1385,11 +1015,12 @@ async function createReactor(localPackage) {
 				if (!renown.user) return void 0;
 				return renown.getBearerToken({ expiresIn: 10 });
 			};
-			setAttachmentService(createRemoteAttachmentService({
+			const attachmentService = createRemoteAttachmentService({
 				remoteUrl: switchboardOrigin,
 				jwtHandler: attachmentJwtHandler,
 				uploadTransport: createXhrUploadTransport()
-			}));
+			});
+			setAttachmentService(attachmentService);
 		}
 	}
 	setDocumentCache(documentCache);
@@ -1460,5 +1091,5 @@ function getDriveUrl() {
 //#endregion
 export { createReactor as n, clearReactorStorage as t };
 
-//# sourceMappingURL=reactor-yC8BveHb.js.map
-//# debugId=f8f2f6b8-9d33-50e7-af3e-fcd10c6d78da
+//# sourceMappingURL=reactor-CItc8KaF.js.map
+//# debugId=e9dffb1a-3523-5af8-8cad-60683e091ce0