@powerhousedao/shared 6.2.3-dev.6 → 6.2.3-dev.61

package/dist/connect/index.js

@@ -1,6 +1,22 @@
-import { i as buildRuntimeConfig, n as deepMerge, r as DEFAULT_CONNECT_CONFIG, t as ConfigLoader } from "../config-loader-B845Hidf.js";
+import { a as DEFAULT_CONNECT_CONFIG, i as workflowsSettingConflict, n as deepMerge, o as buildRuntimeConfig, r as resolveSourceConnect, t as ConfigLoader } from "../config-loader-DBJolZd0.js";
 import { JsonConfigAdapter } from "./json-adapter.js";
 import { z } from "zod";
+import { satisfies, validRange } from "semver";
+//#region connect/dynamic-base.ts
+/**
+* The base a dynamic-base Connect build is compiled against. The build emits
+* this literal wherever a base-relative URL would go, and the serving layer
+* (the dynamic-base vite plugin at build time, the connect proxy at serve
+* time) rewrites it to the base the app is actually deployed under.
+*
+* It lives here, in the browser-safe shared package, rather than in
+* `@powerhousedao/builder-tools`, because both the node-only build toolchain
+* and Connect's own browser code need it. Importing builder-tools from app
+* code pulls the whole build toolchain (and its node-only `read-pkg`
+* dependency) into the browser graph.
+*/
+const DYNAMIC_BASE_PLACEHOLDER = "/__PH_DYNAMIC_BASE__/";
+//#endregion
 //#region connect/env-config.ts
 /**
 * Coerces string values to boolean.
@@ -14,10 +30,26 @@ const booleanString = z.union([z.boolean(), z.enum(["true", "false"])]).transfor
 * Build-time configuration schema
 */
 const buildEnvSchema = z.object({
+	/**
+	* Comma-separated list of package names to load
+	* @example "package1,package2"
+	*/
 	PH_PACKAGES: z.string().optional(),
+	/**
+	* Path to local package to load during development
+	*/
 	PH_LOCAL_PACKAGE: z.string().optional(),
+	/**
+	* Sentry authentication token for uploading source maps
+	*/
 	PH_SENTRY_AUTH_TOKEN: z.string().optional(),
+	/**
+	* Sentry organization slug
+	*/
 	PH_SENTRY_ORG: z.string().optional(),
+	/**
+	* Sentry project slug
+	*/
 	PH_SENTRY_PROJECT: z.string().optional()
 });
 /**
@@ -30,7 +62,14 @@ const buildEnvSchema = z.object({
 * credentials, analytics processor toggles, etc.
 */
 const appConfigSchema = z.object({
+	/**
+	* Application version number (build metadata stamp)
+	* @default "unknown"
+	*/
 	PH_CONNECT_VERSION: z.string().default("unknown"),
+	/**
+	* CLI version number (build metadata stamp)
+	*/
 	PH_CONNECT_CLI_VERSION: z.string().optional()
 });
 /**
@@ -39,17 +78,43 @@ const appConfigSchema = z.object({
 * schema and stay env-driven.
 */
 const processorsConfigSchema = z.object({
+	/**
+	* Enable diff analytics tracking
+	* @default false
+	*/
 	PH_CONNECT_DIFF_ANALYTICS_ENABLED: booleanString.default(false),
+	/**
+	* Enable drive analytics tracking
+	* @default true
+	*/
 	PH_CONNECT_DRIVE_ANALYTICS_ENABLED: booleanString.default(true),
+	/**
+	* Enable external analytics processors
+	* @default true
+	*/
 	PH_CONNECT_EXTERNAL_ANALYTICS_PROCESSORS_ENABLED: booleanString.default(true)
 });
 /**
 * OpenPanel analytics configuration schema
 */
 const openPanelConfigSchema = z.object({
+	/**
+	* OpenPanel client ID. When unset, the OpenPanel subsystem is a no-op.
+	*/
 	PH_CONNECT_OPENPANEL_CLIENT_ID: z.string().optional(),
+	/**
+	* OpenPanel API URL override. Defaults to the OpenPanel cloud when unset.
+	*/
 	PH_CONNECT_OPENPANEL_API_URL: z.string().optional(),
+	/**
+	* Track UI events via the useOpenPanel() hook
+	* @default true
+	*/
 	PH_CONNECT_OPENPANEL_TRACK_UI_EVENTS: booleanString.default(true),
+	/**
+	* Track document operations via the OpenPanel processor
+	* @default true
+	*/
 	PH_CONNECT_OPENPANEL_TRACK_OPERATIONS: booleanString.default(true)
 });
 /**
@@ -108,7 +173,7 @@ function mergeEnvSources(options, keys, schema) {
 * @returns Validated and typed environment configuration
 */
 function loadConnectEnv(options = {}) {
-	const merged = mergeEnvSources(options, new Set([...Object.keys(buildEnvSchema.shape), ...Object.keys(runtimeEnvSchema.shape)]), connectEnvSchema);
+	const merged = mergeEnvSources(options, /* @__PURE__ */ new Set([...Object.keys(buildEnvSchema.shape), ...Object.keys(runtimeEnvSchema.shape)]), connectEnvSchema);
 	return connectEnvSchema.parse(merged);
 }
 /**
@@ -207,7 +272,8 @@ const ROOT_STORAGE_NAMESPACE = "reactor";
 function getStorageNamespace(basePath) {
 	const normalized = normalizeBasePath(basePath);
 	if (normalized === "/") return ROOT_STORAGE_NAMESPACE;
-	return `${ROOT_STORAGE_NAMESPACE}--${normalized.slice(1, -1).toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || "default"}`;
+	const slug = normalized.slice(1, -1).toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
+	return `${ROOT_STORAGE_NAMESPACE}--${slug || "default"}`;
 }
 //#endregion
 //#region connect/pwa-config.ts
@@ -222,7 +288,7 @@ const MANIFEST_SCALAR_KEYS = [
 	"scope",
 	"launch_handler"
 ];
-const ADDITIVE_MANIFEST_KEYS = new Set([
+const ADDITIVE_MANIFEST_KEYS = /* @__PURE__ */ new Set([
 	"icons",
 	"file_handlers",
 	"categories"
@@ -560,6 +626,10 @@ const phConnectRuntimeConfigSchema = {
 					type: "boolean",
 					description: "Studio mode. Enables builder-only capabilities: Connect loads the vetra package and exposes DocumentModel (and vetra spec types) as creatable documents. Forced on by `ph vetra` / `ph connect studio`; false by default.",
 					default: false
+				},
+				workflowsEnabled: {
+					type: "boolean",
+					description: "Powerhouse workflows in Connect. When true the tab loads the @powerhousedao/workflow package (workflow + connection documents, their editors and Workflow Studio) and the reactor worker registers its document models. Falls back to the top-level `workflows.enabled`; set it to override that for Connect. Independent of studioMode. False when neither is set."
 				}
 			}
 		},
@@ -745,6 +815,32 @@ const phConnectRuntimeConfigSchema = {
 				}
 			}
 		},
+		openPanel: {
+			type: "object",
+			additionalProperties: false,
+			description: "OpenPanel product analytics. Set `clientId` to enable; an empty `clientId` disables it. Events are only sent after the user accepts analytics cookies. Takes precedence over the build-time PH_CONNECT_OPENPANEL_* env vars.",
+			properties: {
+				clientId: {
+					type: "string",
+					description: "OpenPanel client id. Empty string disables OpenPanel entirely.",
+					default: ""
+				},
+				apiUrl: {
+					type: "string",
+					description: "OpenPanel API URL for self-hosted instances (e.g. 'https://openpanel.example/api'). Omit to use OpenPanel's hosted API."
+				},
+				trackUiEvents: {
+					type: "boolean",
+					description: "Track UI events.",
+					default: true
+				},
+				trackOperations: {
+					type: "boolean",
+					description: "Track document operations.",
+					default: true
+				}
+			}
+		},
 		instance: {
 			type: "object",
 			additionalProperties: false,
@@ -758,7 +854,12 @@ const phConnectRuntimeConfigSchema = {
 				},
 				reactorWorker: {
 					type: "boolean",
-					description: "Host the reactor in a shared worker instead of on the main thread. Off by default; the main-thread reactor stays the proven path until cutover is verified.",
+					description: "Host the reactor in a shared worker instead of on the main thread. Off by default; the main-thread reactor stays the proven path until cutover is verified. Packaged deployments load the worker from the prebuilt bundle `ph connect build` emits under __reactor_worker__/ (the dev server builds it lazily at the same path); when that bundle is absent the feature reports itself unavailable instead of starting a worker that cannot load.",
+					default: false
+				},
+				multiReactor: {
+					type: "boolean",
+					description: "Opt-in multi-reactor routing. When on, Connect routes through the in-browser reactor plus remote backends instead of the single in-browser reactor. Off by default; the single-reactor path is unchanged.",
 					default: false
 				}
 			}
@@ -767,33 +868,47 @@ const phConnectRuntimeConfigSchema = {
 			type: "object",
 			additionalProperties: false,
 			description: "Settings for the reactor Connect runs in the browser, on the main thread or in the shared worker alike.",
-			properties: { featureFlags: {
-				type: "object",
-				additionalProperties: false,
-				description: "Enforcement flags. Each implies its predecessors, and the reactor refuses to boot on a set that names a later flag without an earlier one. These are consensus settings: a Connect syncing with a fleet must carry the same flags the fleet does, or the two reach different replay outcomes for the same history and diverge.",
-				properties: {
-					documentDecisions: {
-						type: "boolean",
-						description: "Decide writes from the document stream rather than the document meta cache, so a backdated deletion denies the operations that sort after it.",
-						default: false
-					},
-					authEnforcement: {
-						type: "boolean",
-						description: "Enforce the auth scope's policy at admission, replay, and read. Requires documentDecisions.",
-						default: false
-					},
-					authGroups: {
-						type: "boolean",
-						description: "Let `{ group }` principals match against the rosters of the group documents a policy names. Requires authEnforcement.",
-						default: false
-					},
-					authConditions: {
-						type: "boolean",
-						description: "Evaluate `where` and `match` conditions on grants. Requires authGroups. Do not enable on a fleet `preflight:auth` reports as crossing a reducer version.",
-						default: false
+			properties: {
+				featureFlags: {
+					type: "object",
+					additionalProperties: false,
+					description: "Enforcement flags. Each implies its predecessors, and the reactor refuses to boot on a set that names a later flag without an earlier one. These are consensus settings: a Connect syncing with a fleet must carry the same flags the fleet does, or the two reach different replay outcomes for the same history and diverge.",
+					properties: {
+						documentDecisions: {
+							type: "boolean",
+							description: "Decide writes from the document stream rather than the document meta cache, so a backdated deletion denies the operations that sort after it.",
+							default: false
+						},
+						authEnforcement: {
+							type: "boolean",
+							description: "Enforce the auth scope's policy at admission, replay, and read. Requires documentDecisions.",
+							default: false
+						},
+						authGroups: {
+							type: "boolean",
+							description: "Let `{ group }` principals match against the rosters of the group documents a policy names. Requires authEnforcement.",
+							default: false
+						},
+						authConditions: {
+							type: "boolean",
+							description: "Evaluate `where` and `match` conditions on grants. Requires authGroups. Do not enable on a fleet `preflight:auth` reports as crossing a reducer version.",
+							default: false
+						}
 					}
+				},
+				createSignaturePolicy: {
+					type: "string",
+					enum: ["legacy", "v2-required"],
+					description: "What new documents are created as. `v2-required` documents accept only v2 action signatures and take content-addressed ids; set `legacy` while any peer Connect syncs with predates them. Existing documents keep their policy.",
+					default: "v2-required"
+				},
+				unsupportedStoredDocuments: {
+					type: "string",
+					enum: ["refuse", "read-only"],
+					description: "What the reactor does when this browser's store holds documents at protocol versions this build does not run. `refuse` fails the boot and names the versions; `read-only` boots and keeps those documents read-only.",
+					default: "refuse"
 				}
-			} }
+			}
 		},
 		pwa: {
 			type: "object",
@@ -964,6 +1079,178 @@ const phConnectRuntimeConfigSchema = {
 	}
 };
 //#endregion
-export { ConfigLoader, DEFAULT_CONNECT_CONFIG, JsonConfigAdapter, PWA_FILE_HANDLER_ACTION, PWA_IDB_KEY, PWA_IDB_NAME, PWA_IDB_STORE, PWA_IDB_VERSION, ROOT_STORAGE_NAMESPACE, buildRuntimeConfig, connectEnvSchema, dedupeFileHandlers, dedupeIcons, deepMerge, getStorageNamespace, loadConnectEnv, loadRuntimeEnv, mergeManifest, mergePwaConfig, normalizeBasePath, phConnectRuntimeConfigSchema, powerhousePackageSchema, runtimeEnvSchema, setConnectEnv, toRegExpOrString, unionStrings, withInferredCategory };
+//#region connect/shared-deps.ts
+/**
+* The dependency set Connect and loaded packages share via the import map.
+* `@powerhousedao/connect` is deliberately absent: it is the Connect app
+* itself (no importable exports), so there is nothing to share.
+*/
+const SHARED_DEPS = [
+	{
+		specifier: "document-model",
+		package: "document-model"
+	},
+	{
+		specifier: "@powerhousedao/document-engineering",
+		package: "@powerhousedao/document-engineering"
+	},
+	{
+		specifier: "@powerhousedao/shared",
+		package: "@powerhousedao/shared"
+	},
+	{
+		specifier: "@powerhousedao/shared/registry/urls",
+		package: "@powerhousedao/shared"
+	},
+	{
+		specifier: "@powerhousedao/design-system/connect",
+		package: "@powerhousedao/design-system"
+	},
+	{
+		specifier: "@powerhousedao/reactor-browser",
+		package: "@powerhousedao/reactor-browser"
+	},
+	{
+		specifier: "zod",
+		package: "zod"
+	}
+];
+const SHARED_DEP_SPECIFIERS = SHARED_DEPS.map((d) => d.specifier);
+/**
+* The `@powerhousedao/shared` subpaths the production vendor bundles. The
+* bare root is deliberately absent: its type barrel references node-only
+* modules (`clis/`), which the current vite/rolldown cannot bundle for the
+* browser — vendoring the root fails the build (a pre-existing latent
+* issue). A package that imports the bare root is simply not shared; it
+* bundles its own copy.
+*/
+const SHARED_SUBPATHS = [
+	"connect",
+	"document-model",
+	"processors",
+	"document-drive",
+	"registry",
+	"registry/urls",
+	"registry/manifest-slim"
+];
+/**
+* The specifiers a package build may safely externalize onto the host's
+* import map — i.e. the ones the vendor actually publishes an entry for.
+*
+* `@powerhousedao/shared` is narrowed to SHARED_SUBPATHS rather than taken as
+* a prefix: the bare root is never vendored (see SHARED_SUBPATHS), and
+* neither are its other subpaths (`analytics`, `constants`, `clis`, ...).
+* Externalizing those would leave a bare specifier in the package's output
+* that nothing in the import map resolves, so the package would fail to load
+* at runtime instead of simply bundling its own copy.
+*/
+const EXTERNALIZABLE_SHARED_SPECIFIERS = [.../* @__PURE__ */ new Set([...SHARED_DEP_SPECIFIERS.filter((s) => s !== "@powerhousedao/shared"), ...SHARED_SUBPATHS.map((s) => `@powerhousedao/shared/${s}`)])];
+/** Split a specifier into its package name and subpath ("" for a root). */
+function parseDepSpec(spec) {
+	if (spec.startsWith("@")) {
+		const parts = spec.split("/");
+		return {
+			pkg: parts.slice(0, 2).join("/"),
+			sub: parts.slice(2).join("/")
+		};
+	}
+	const i = spec.indexOf("/");
+	return i === -1 ? {
+		pkg: spec,
+		sub: ""
+	} : {
+		pkg: spec.slice(0, i),
+		sub: spec.slice(i + 1)
+	};
+}
+function isSharedSpecifier(spec, specs) {
+	return specs.some((s) => spec === s || spec.startsWith(s + "/"));
+}
+/**
+* Return the import/export specifiers in `source` that are a shared
+* specifier (or a subpath of one), sorted. Heuristic: only statement
+* positions are scanned (`from "x"`, `import "x"`, `import("x")`;
+* `export … from "x"` is covered by the `from` pattern), so import-like
+* text inside comments or strings can be reported too. That errs toward
+* over-reporting, which is the safe direction for the advisory build
+* warning.
+*/
+function findSharedImports(source, specs = SHARED_DEP_SPECIFIERS) {
+	const found = /* @__PURE__ */ new Set();
+	for (const re of [
+		/\bfrom\s+["']([^"'\\]+)["']/g,
+		/\bimport\s+["']([^"'\\]+)["']/g,
+		/\bimport\s*\(\s*["']([^"'\\]+)["']\s*\)/g
+	]) for (const m of source.matchAll(re)) {
+		const spec = m[1];
+		if (isSharedSpecifier(spec, specs)) found.add(spec);
+	}
+	return [...found].sort();
+}
+/**
+* Rewrite a package source for blob import in a worker context (import maps
+* don't apply there): shared specifiers become their mapped URLs, and
+* relative (`./`, `../`) specifiers become absolute against `sourceUrl`
+* (a blob URL has no directory to resolve against). `#` subpath imports are
+* deliberately left alone: they resolve via the package's own
+* `package.json` "imports" field, which the rewrite cannot reproduce.
+* Returns the input unchanged when nothing matched.
+*/
+function rewritePackageSource(source, sourceUrl, imports) {
+	if (!Object.keys(imports).length) return source;
+	const base = new URL(sourceUrl);
+	const map = (spec) => {
+		const mapped = imports[spec];
+		if (mapped) return mapped;
+		if (spec.startsWith("./") || spec.startsWith("../")) return new URL(spec, base).href;
+		return null;
+	};
+	let out = source;
+	for (const re of [
+		/\bfrom\s+(["'])([^"'\\]+)\1/g,
+		/\bimport\s+(["'])([^"'\\]+)\1/g,
+		/\bimport\s*\(\s*(["'])([^"'\\]+)\1\s*\)/g
+	]) out = out.replace(re, (match, quote, spec) => {
+		const mapped = map(spec);
+		return mapped ? match.replace(`${quote}${spec}${quote}`, `${quote}${mapped}${quote}`) : match;
+	});
+	return out;
+}
+/**
+* Compare a package's declared ranges against the host's version table.
+* `hostVersions` defines the checked set (only deps present in it are
+* checked). `*`, non-semver protocols (workspace:, file:, git:, npm:, URLs)
+* and unparseable ranges never mismatch.
+*/
+function checkSharedDeps(pkgJson, hostVersions) {
+	const out = [];
+	const entries = [...Object.entries(pkgJson.dependencies ?? {}), ...Object.entries(pkgJson.peerDependencies ?? {})];
+	for (const [dep, range] of entries) {
+		const provided = hostVersions[dep];
+		if (provided === void 0 || typeof range !== "string") continue;
+		if (range === "*" || /^[a-z]+:/i.test(range)) continue;
+		if (!validRange(range)) continue;
+		if (!satisfies(provided, range, { includePrerelease: true })) out.push({
+			package: dep,
+			required: range,
+			provided
+		});
+	}
+	return out;
+}
+function formatSharedDepWarnings(mismatches) {
+	return mismatches.map((m) => `${m.package}: requires ${m.required}, Connect provides ${m.provided}`);
+}
+/**
+* Stable filename for a local package's worker model bundle under
+* `__reactor_worker__/packages/`. Shared by the tab (URL computation via the
+* manifest) and the production prebuild (emitted entry names), so the two can
+* never drift. Scoped names flatten (`@scope/name` -> `scope__name`).
+*/
+function workerPackageFileName(packageName) {
+	return `${packageName.replace(/^@/, "").replace(/[^\w.-]+/g, "__")}.js`;
+}
+//#endregion
+export { ConfigLoader, DEFAULT_CONNECT_CONFIG, DYNAMIC_BASE_PLACEHOLDER, EXTERNALIZABLE_SHARED_SPECIFIERS, JsonConfigAdapter, PWA_FILE_HANDLER_ACTION, PWA_IDB_KEY, PWA_IDB_NAME, PWA_IDB_STORE, PWA_IDB_VERSION, ROOT_STORAGE_NAMESPACE, SHARED_DEPS, SHARED_DEP_SPECIFIERS, SHARED_SUBPATHS, buildRuntimeConfig, checkSharedDeps, connectEnvSchema, dedupeFileHandlers, dedupeIcons, deepMerge, findSharedImports, formatSharedDepWarnings, getStorageNamespace, loadConnectEnv, loadRuntimeEnv, mergeManifest, mergePwaConfig, normalizeBasePath, parseDepSpec, phConnectRuntimeConfigSchema, powerhousePackageSchema, resolveSourceConnect, rewritePackageSource, runtimeEnvSchema, setConnectEnv, toRegExpOrString, unionStrings, withInferredCategory, workerPackageFileName, workflowsSettingConflict };
 
 //# sourceMappingURL=index.js.map