@prosopo/config 3.4.1 → 3.4.3

package/src/vite/vite.frontend.config.ts

@@ -1,340 +0,0 @@
-// Copyright 2021-2026 Prosopo (UK) Ltd.
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
-
-import { builtinModules } from "node:module";
-import path from "node:path";
-import nodeResolve from "@rollup/plugin-node-resolve";
-import typescript from "@rollup/plugin-typescript";
-import { wasm } from "@rollup/plugin-wasm";
-import { default as viteReact } from "@vitejs/plugin-react";
-import type { Drop } from "esbuild";
-import type { ExternalOption } from "rollup";
-import css from "rollup-plugin-import-css";
-import { visualizer } from "rollup-plugin-visualizer";
-import type { UserConfig } from "vite";
-import { nodePolyfills } from "vite-plugin-node-polyfills";
-import { filterDependencies, getDependencies } from "../dependencies.js";
-import { VitePluginCloseAndCopy } from "./index.js";
-import type { ClosePluginOptions } from "./vite-plugin-close-and-copy.js";
-import VitePluginExternalizeObfuscatorDeadCode from "./vite-plugin-externalize-obfuscator-deadcode.js";
-
-export default async function (
-	packageName: string,
-	bundleName: string,
-	dir: string,
-	entry: string,
-	command?: string,
-	mode?: string,
-	copyOptions?: ClosePluginOptions,
-	tsConfigPaths?: string[],
-	workspaceRoot?: string,
-): Promise<UserConfig> {
-	// Only development and production modes are allowed
-	if (mode !== "production") {
-		mode = "development";
-	}
-	// We don't have a default environment of, for example, `test` so we use the `mode` as the default
-	const allowedEnvironments = ["development", "staging", "production"];
-	const defaultEnvironment =
-		process.env.NODE_ENV && allowedEnvironments.includes(process.env.NODE_ENV)
-			? process.env.NODE_ENV
-			: mode;
-
-	console.info(`Running at ${dir} in ${mode} mode`);
-	const isProduction = mode === "production";
-	// Rollup bundle stats (rollup-plugin-visualizer treemap). Off by default —
-	// set PROSOPO_BUNDLE_STATS=true to generate the stats page and open it in
-	// the browser once the bundle has been built.
-	const openBundleStats =
-		process.env.PROSOPO_BUNDLE_STATS?.trim().toLowerCase() === "true";
-	// NODE_ENV must be wrapped in quotes.
-	// If NODE_ENV ends up out of sync (one set to development and the other set to production), it causes
-	// issues like this: https://github.com/hashicorp/next-mdx-remote/pull/323
-	process.env.NODE_ENV = `${process.env.NODE_ENV || mode}`;
-	console.info(`NODE_ENV: ${process.env.NODE_ENV}`);
-
-	// Set the env vars that we want to be available in the browser
-	const define = {
-		// used to stop websockets package from breaking
-		"process.env.WS_NO_BUFFER_UTIL": JSON.stringify("true"),
-		"process.env.WS_NO_UTF_8_VALIDATE": JSON.stringify("true"),
-		"process.env.NODE_ENV": JSON.stringify(process.env.NODE_ENV),
-		"process.env.PROSOPO_DEFAULT_ENVIRONMENT":
-			JSON.stringify(defaultEnvironment),
-		"process.env.PROSOPO_SERVER_URL": JSON.stringify(
-			process.env.PROSOPO_SERVER_URL,
-		),
-		// Lets a development widget reach a provider that is not on the machine
-		// serving the page — a phone or simulator testing over the LAN would
-		// otherwise resolve the default `localhost` to itself.
-		"process.env.PROSOPO_PROVIDER_URL_DEVELOPMENT": JSON.stringify(
-			process.env.PROSOPO_PROVIDER_URL_DEVELOPMENT,
-		),
-		// Points a self-hosted build at its own providers regardless of
-		// environment, so a production bundle no longer has to masquerade as a
-		// development build to be redirected.
-		"process.env.PROSOPO_PROVIDER_LIST": JSON.stringify(
-			process.env.PROSOPO_PROVIDER_LIST,
-		),
-		"process.env._DEV_ONLY_WATCH_EVENTS": JSON.stringify(
-			process.env._DEV_ONLY_WATCH_EVENTS,
-		),
-		"process.env.PROSOPO_MONGO_EVENTS_URI": JSON.stringify(
-			process.env.PROSOPO_MONGO_EVENTS_URI,
-		),
-		"process.env.PROSOPO_PACKAGE_VERSION": JSON.stringify(
-			process.env.PROSOPO_PACKAGE_VERSION,
-		),
-		"process.env.PROSOPO_DOCS_URL": JSON.stringify(
-			process.env.PROSOPO_DOCS_URL,
-		),
-		"process.env.PROSOPO_LOG_LEVEL": JSON.stringify(
-			process.env.PROSOPO_LOG_LEVEL,
-		),
-		// only needed if bundling with a site key
-		"process.env.PROSOPO_SITE_KEY": JSON.stringify(
-			process.env.PROSOPO_SITE_KEY,
-		),
-	};
-
-	console.info(`Env vars: ${JSON.stringify(define, null, 4)}`);
-
-	// Get all dependencies of the current package
-	const { dependencies: deps, optionalPeerDependencies } =
-		await getDependencies(packageName, isProduction);
-
-	// Get rid of any dependencies we don't want to bundle.
-	// The two i18next entries are server-only: the fs backend reads locale JSON
-	// off disk and the middleware is Express request handling. Neither can run
-	// in a browser — `i18nBackend.ts` also imports `node:path`, which is already
-	// external — so they are pure weight in a frontend bundle. The other
-	// i18next-* packages (http-backend, browser-languagedetector,
-	// chained-backend, resources-to-backend) ARE used in the browser and must
-	// stay bundled; these filters are substring matches, so they catch only
-	// themselves.
-	const { external, internal } = filterDependencies(deps, [
-		"pm2",
-		"nodejs-polars",
-		"aws",
-		"webpack",
-		"vite",
-		"i18next-fs-backend",
-		"i18next-http-middleware",
-	]);
-
-	// `external` only ever matches a specifier exactly, so listing a package by
-	// name does nothing for a subpath import of it. `i18next-fs-backend` has
-	// been on the exclusion list above for a long time, but `i18nBackend.ts`
-	// imports `i18next-fs-backend/cjs` (see i18next/i18next-fs-backend#57) —
-	// a different string — so it was bundled anyway, dragging its YAML, JSON5
-	// and JSONC parsers into the browser artifact.
-	//
-	// Listed literally rather than by matching `pkg/*` against the whole
-	// exclusion list: that broader rule also catches
-	// `vite-plugin-node-polyfills/shims/process` (the `vite` filter is a
-	// substring match, so it selects the plugin package too). That specifier is
-	// injected into the served and IIFE bundles as a bare import, and
-	// externalising it leaves the browser unable to resolve it — the widget dies
-	// on load with "Failed to resolve module specifier".
-	const serverOnlySubpaths = ["i18next-fs-backend/cjs"];
-
-	// Add the node builtins (path, fs, os, etc.) to the external list
-	const allExternal = [
-		...builtinModules,
-		...builtinModules.map((m) => `node:${m}`),
-		...external,
-		...optionalPeerDependencies,
-		...serverOnlySubpaths,
-	];
-	console.debug(
-		`Bundling. ${JSON.stringify(internal.slice(0, 10), null, 2)}... ${internal.length} deps`,
-	);
-
-	// Required to print RegExp in console (e.g. alias keys)
-	// biome-ignore lint/suspicious/noExplicitAny: has to be any to represent object prototype
-	const proto = RegExp.prototype as any;
-	proto.toJSON = RegExp.prototype.toString;
-
-	// drop console logs if in production mode
-	let drop: undefined | Drop[];
-	let pure: string[] = [];
-	if (isProduction) {
-		drop = ["debugger"];
-		pure = ["console.log", "console.warn", "console.info", "console.debug"];
-	}
-
-	const rollupExternal: ExternalOption = allExternal;
-
-	console.info({ bundleName }, "Bundle name");
-	return {
-		server: {
-			host: "127.0.0.1",
-		},
-		mode: mode || "development",
-		optimizeDeps: {
-			include: ["node_modules"],
-			force: true,
-		},
-		worker: {
-			format: "es",
-		},
-		esbuild: {
-			platform: "browser",
-			target: [
-				"es2020",
-				"chrome60",
-				"edge18",
-				"firefox60",
-				"node24",
-				"safari11",
-			],
-			drop,
-			pure,
-			legalComments: "none",
-			jsx: "automatic",
-			jsxImportSource: "@emotion/react",
-			jsxDev: process.env.NODE_ENV === "development",
-		},
-		define,
-
-		build: {
-			outDir: path.resolve(dir, "dist/bundle"),
-			minify: isProduction,
-			ssr: false,
-			lib: {
-				entry: path.resolve(dir, entry),
-				name: bundleName,
-				fileName: `${bundleName}.bundle.js`,
-				formats: ["es"],
-			},
-			modulePreload: { polyfill: true },
-			commonjsOptions: {
-				exclude: ["mongodb/*"],
-				transformMixedEsModules: true,
-				strictRequires: "debug",
-			},
-
-			rollupOptions: {
-				treeshake: {
-					// Respect /*#__PURE__*/ annotations. Ignoring them retained
-					// dead library calls that every consumer then shipped;
-					// honouring them cuts ~17KB gzip off the widget bundle with
-					// a byte-identical detector.
-					annotations: true,
-					propertyReadSideEffects: false,
-					// Measured alternatives, both rejected:
-					//   moduleSideEffects: false        -> widget 8KB gzip LARGER
-					//   propertyWriteSideEffects: false -> detector dies on load
-					//                                     ("Maximum call stack
-					//                                     size exceeded")
-					moduleSideEffects: "no-external",
-					unknownGlobalSideEffects: false,
-				},
-				external: rollupExternal,
-				watch: false,
-
-				output: {
-					dir: path.resolve(dir, "dist/bundle"),
-					entryFileNames: `${bundleName}.bundle.js`,
-					// For a lib + es build, Vite downgrades `build.minify: true` to
-					// `{ compress, mangle, codegen: false }`, which leaves the output
-					// pretty-printed. Set it here to get whitespace removal too;
-					// output options win over the build-level default.
-					...(isProduction
-						? {
-								minify: {
-									compress: true,
-									mangle: true,
-									codegen: true,
-								},
-							}
-						: {}),
-				},
-
-				plugins: [
-					// biome-ignore lint/suspicious/noExplicitAny: has to be any to represent object prototype
-					css() as any,
-					// biome-ignore lint/suspicious/noExplicitAny: has to be any to represent object prototype
-					wasm() as any,
-					// @ts-ignore
-					nodeResolve({
-						browser: true,
-						preferBuiltins: false,
-						rootDir: path.resolve(dir, "../../"),
-						dedupe: ["react", "react-dom"],
-						modulesOnly: true,
-						// biome-ignore lint/suspicious/noExplicitAny: has to be any to represent object prototype
-					}) as any,
-					// String replacement plugin for fingerprinting code
-					{
-						name: "string-replace-fingerprint",
-						generateBundle(_, bundle) {
-							for (const fileName in bundle) {
-								const chunk = bundle[fileName];
-								if (
-									chunk &&
-									chunk.type === "chunk" &&
-									"code" in chunk &&
-									chunk.code
-								) {
-									chunk.code = chunk.code.replace(
-										/var request = new XMLHttpRequest\(\);\s*request\.open\("get", "https:\/\/m1\.openfpcdn\.io\/fingerprintjs\/v"\.concat\(version, "\/npm-monitoring"\), true\);\s*request\.send\(\);/g,
-										"",
-									);
-								}
-							}
-						},
-					},
-					// Bundle stats page — only wired in (and opened in the
-					// browser) when PROSOPO_BUNDLE_STATS=true. Defaults off so
-					// normal builds neither emit the report nor pop a window.
-					...(openBundleStats
-						? [
-								visualizer({
-									open: true,
-									template: "treemap",
-									gzipSize: true,
-									brotliSize: true,
-								}),
-							]
-						: []),
-					// I think we can use this plugin to build all packages instead of relying on the tsc step that's
-					// currently a precursor in package.json. However, it fails for the following reason:
-					// https://github.com/rollup/plugins/issues/243
-					// @ts-ignore
-					typescript({
-						tsconfig: path.resolve("./tsconfig.json"),
-						compilerOptions: { rootDir: path.resolve("./src") },
-						outDir: path.resolve(dir, "dist/bundle"),
-					}),
-				],
-			},
-		},
-		plugins: [
-			VitePluginExternalizeObfuscatorDeadCode(),
-			// node polyfills must be a top-level Vite plugin (not inside
-			// build.rollupOptions.plugins) so its inject sub-plugin initialises
-			// before transform runs under Rolldown/Vite 8.
-			nodePolyfills({
-				include: ["crypto"],
-			}),
-			// Not sure if we need this plugin or not, it works without it
-			// @ts-ignore
-			viteReact(),
-			// Closes the bundler and copies the bundle to the client-bundle-example project unless we're in serve
-			// mode, in which case we don't want to close the bundler because it will close the server
-			command !== "serve" ? VitePluginCloseAndCopy(copyOptions) : undefined,
-		],
-	};
-}

package/src/vite/vite.test.config.ts

@@ -1,121 +0,0 @@
-// Copyright 2021-2026 Prosopo (UK) Ltd.
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
-
-import fs from "node:fs";
-import path from "node:path";
-import tsconfigPaths from "vite-tsconfig-paths";
-import { defineConfig } from "vitest/config";
-import VitePluginCloseAndCopy from "./vite-plugin-close-and-copy.js";
-import VitePluginSourcemapExclude from "./vite-plugin-sourcemap-exclude.js";
-
-export default function (tsConfigPath?: string) {
-	const testTypeEnv = process.env.TEST_TYPE || undefined;
-	console.log(`TEST_TYPE environment variable: ${testTypeEnv}`);
-	const testTypes = testTypeEnv ? testTypeEnv.trim().split(",") : [];
-	// @(|) globs any tests which don't have their type specified, e.g. myTest.test.ts. These are included even when filtering by test type because we don't know what type of test they are. Really, they should have their type specified.
-	// If we drop ^, there's a chance the tests with no type specified get ignored by accident, which we want to avoid. Ergo, include them by default.
-	const testTypeGlob =
-		testTypes.length > 0
-			? `@(${testTypes.map((t) => `.${t}`).join("|")})`
-			: "@(|)";
-	console.log(`Filtering tests by type: ${testTypeGlob}`);
-
-	// Determine coverage include paths based on current working directory.
-	//
-	// Detected by looking for a package alongside the cwd rather than by
-	// matching "/packages/" in the path: workspaces also live in dev/, demos/
-	// and integration/, and those were falling through to the repo-root globs
-	// below, which match `packages/*/src/**` only — so they reported 0/0
-	// coverage no matter what their tests exercised. Neither repo root has a
-	// `src` directory, so this cannot misfire in the other direction.
-	const cwd = process.cwd();
-	const isRunningFromPackage =
-		fs.existsSync(path.join(cwd, "package.json")) &&
-		fs.existsSync(path.join(cwd, "src"));
-
-	// If running from a package directory, include local src files
-	// If running from repo root, include all package src files
-	const coverageInclude = isRunningFromPackage
-		? ["src/**/*.ts", "src/**/*.js", "src/**/*.tsx", "src/**/*.jsx"]
-		: ["packages/*/src/**", "captcha/packages/*/src/**"];
-
-	const coverageExclude = isRunningFromPackage
-		? [
-				"src/tests/**/*",
-				"src/**/*.d.ts",
-				"src/**/*.test.ts",
-				"src/**/*.spec.ts",
-				"src/**/*.test.tsx",
-				"src/**/*.spec.tsx",
-				// Type-test files are compiled by the typecheck pass, never
-				// executed, so they can only ever report 0% and drag the real
-				// figure down. `*.d.ts` above does not match `*.test-d.ts`.
-				"src/**/*.test-d.ts",
-				"src/**/*.test-d.tsx",
-			]
-		: [
-				"**/tests/**/*",
-				"**/*.d.ts",
-				"**/*.test.*",
-				"**/*.spec.*",
-				"**/node_modules/**",
-				"**/dist/**",
-			];
-	const include = `src/**/*${testTypeGlob}.@(test|spec).@(mts|cts|mjs|cjs|js|ts|tsx|jsx)`;
-	const plugins = [
-		VitePluginSourcemapExclude({ excludeNodeModules: true }),
-		VitePluginCloseAndCopy(),
-	];
-
-	if (tsConfigPath) {
-		plugins.push(tsconfigPaths({ projects: [path.resolve(tsConfigPath)] }));
-	}
-
-	return defineConfig({
-		build: {
-			minify: false,
-			sourcemap: false,
-			rollupOptions: {
-				output: {
-					sourcemap: false,
-				},
-			},
-		},
-		test: {
-			//root: getRootDir(),
-			// vitest 4 removed the "basic" reporter; the default reporter with
-			// summary disabled reproduces its terse output.
-			reporters: [["default", { summary: false }]],
-			include: [include],
-			watch: false,
-			exclude: ["**/node_modules/**", "**/dist/**"],
-			logHeapUsage: true,
-			coverage: {
-				enabled: true,
-				include: coverageInclude,
-				exclude: coverageExclude,
-			},
-			typecheck: {
-				enabled: true,
-			},
-			pool: "forks", // forks is slower than 'threads' but more compatible with low-level libs (e.g. bcrypt)
-			isolate: true,
-			sequence: {
-				shuffle: true,
-			},
-			testTimeout: 10000,
-		},
-		plugins: plugins,
-	});
-}

package/src/vite/vite.threads.test.config.ts

@@ -1,106 +0,0 @@
-// Copyright 2021-2026 Prosopo (UK) Ltd.
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
-
-import path from "node:path";
-import tsconfigPaths from "vite-tsconfig-paths";
-import { defineConfig } from "vitest/config";
-import VitePluginCloseAndCopy from "./vite-plugin-close-and-copy.js";
-import VitePluginSourcemapExclude from "./vite-plugin-sourcemap-exclude.js";
-
-export default function (tsConfigPath?: string) {
-	const testTypeEnv = process.env.TEST_TYPE || undefined;
-	console.log(`TEST_TYPE environment variable: ${testTypeEnv}`);
-	const testTypes = testTypeEnv ? testTypeEnv.trim().split(",") : [];
-	// @(|) globs any tests which don't have their type specified, e.g. myTest.test.ts. These are included even when filtering by test type because we don't know what type of test they are. Really, they should have their type specified.
-	// If we drop ^, there's a chance the tests with no type specified get ignored by accident, which we want to avoid. Ergo, include them by default.
-	const testTypeGlob =
-		testTypes.length > 0
-			? `@(${testTypes.map((t) => `.${t}`).join("|")})`
-			: "@(|)";
-	console.log(`Filtering tests by type: ${testTypeGlob}`);
-
-	// Determine coverage include paths based on current working directory
-	const cwd = process.cwd();
-	const isRunningFromPackage =
-		cwd.includes("/packages/") && cwd.includes("/src") === false;
-
-	// If running from a package directory, include local src files
-	// If running from repo root, include all package src files
-	const coverageInclude = isRunningFromPackage
-		? ["src/**/*.ts", "src/**/*.js", "src/**/*.tsx", "src/**/*.jsx"]
-		: ["packages/*/src/**", "captcha/packages/*/src/**"];
-
-	const coverageExclude = isRunningFromPackage
-		? [
-				"src/tests/**/*",
-				"src/**/*.d.ts",
-				"src/**/*.test.ts",
-				"src/**/*.spec.ts",
-				"src/**/*.test.tsx",
-				"src/**/*.spec.tsx",
-			]
-		: [
-				"**/tests/**/*",
-				"**/*.d.ts",
-				"**/*.test.*",
-				"**/*.spec.*",
-				"**/node_modules/**",
-				"**/dist/**",
-			];
-	const include = `src/**/*${testTypeGlob}.@(test|spec).@(mts|cts|mjs|cjs|js|ts|tsx|jsx)`;
-	const plugins = [
-		VitePluginSourcemapExclude({ excludeNodeModules: true }),
-		VitePluginCloseAndCopy(),
-	];
-
-	if (tsConfigPath) {
-		plugins.push(tsconfigPaths({ projects: [path.resolve(tsConfigPath)] }));
-	}
-
-	return defineConfig({
-		build: {
-			minify: false,
-			sourcemap: false,
-			rollupOptions: {
-				output: {
-					sourcemap: false,
-				},
-			},
-		},
-		test: {
-			//root: getRootDir(),
-			// vitest 4 removed the "basic" reporter; the default reporter with
-			// summary disabled reproduces its terse output.
-			reporters: [["default", { summary: false }]],
-			include: [include],
-			watch: false,
-			exclude: ["**/node_modules/**", "**/dist/**"],
-			logHeapUsage: true,
-			coverage: {
-				enabled: true,
-				include: coverageInclude,
-				exclude: coverageExclude,
-			},
-			typecheck: {
-				enabled: true,
-			},
-			pool: "threads", // use threads for tests that should be run sequentially
-			// vitest 4 removed poolOptions; sequential execution is now expressed via
-			// fileParallelism instead of min/maxThreads.
-			fileParallelism: false,
-			testTimeout: 10000,
-		},
-		plugins: plugins,
-	});
-}

package/src/webpack/index.ts

@@ -1,14 +0,0 @@
-// Copyright 2021-2026 Prosopo (UK) Ltd.
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
-export * from "./webpack.config.js";