@prosopo/config 3.4.2 → 3.4.3

package/src/vite/vite.frontend.config.ts

@@ -1,340 +0,0 @@
-// Copyright 2021-2026 Prosopo (UK) Ltd.
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
-
-import { builtinModules } from "node:module";
-import path from "node:path";
-import nodeResolve from "@rollup/plugin-node-resolve";
-import typescript from "@rollup/plugin-typescript";
-import { wasm } from "@rollup/plugin-wasm";
-import { default as viteReact } from "@vitejs/plugin-react";
-import type { Drop } from "esbuild";
-import type { ExternalOption } from "rollup";
-import css from "rollup-plugin-import-css";
-import { visualizer } from "rollup-plugin-visualizer";
-import type { UserConfig } from "vite";
-import { nodePolyfills } from "vite-plugin-node-polyfills";
-import { filterDependencies, getDependencies } from "../dependencies.js";
-import { VitePluginCloseAndCopy } from "./index.js";
-import type { ClosePluginOptions } from "./vite-plugin-close-and-copy.js";
-import VitePluginExternalizeObfuscatorDeadCode from "./vite-plugin-externalize-obfuscator-deadcode.js";
-
-export default async function (
-	packageName: string,
-	bundleName: string,
-	dir: string,
-	entry: string,
-	command?: string,
-	mode?: string,
-	copyOptions?: ClosePluginOptions,
-	tsConfigPaths?: string[],
-	workspaceRoot?: string,
-): Promise<UserConfig> {
-	// Only development and production modes are allowed
-	if (mode !== "production") {
-		mode = "development";
-	}
-	// We don't have a default environment of, for example, `test` so we use the `mode` as the default
-	const allowedEnvironments = ["development", "staging", "production"];
-	const defaultEnvironment =
-		process.env.NODE_ENV && allowedEnvironments.includes(process.env.NODE_ENV)
-			? process.env.NODE_ENV
-			: mode;
-
-	console.info(`Running at ${dir} in ${mode} mode`);
-	const isProduction = mode === "production";
-	// Rollup bundle stats (rollup-plugin-visualizer treemap). Off by default —
-	// set PROSOPO_BUNDLE_STATS=true to generate the stats page and open it in
-	// the browser once the bundle has been built.
-	const openBundleStats =
-		process.env.PROSOPO_BUNDLE_STATS?.trim().toLowerCase() === "true";
-	// NODE_ENV must be wrapped in quotes.
-	// If NODE_ENV ends up out of sync (one set to development and the other set to production), it causes
-	// issues like this: https://github.com/hashicorp/next-mdx-remote/pull/323
-	process.env.NODE_ENV = `${process.env.NODE_ENV || mode}`;
-	console.info(`NODE_ENV: ${process.env.NODE_ENV}`);
-
-	// Set the env vars that we want to be available in the browser
-	const define = {
-		// used to stop websockets package from breaking
-		"process.env.WS_NO_BUFFER_UTIL": JSON.stringify("true"),
-		"process.env.WS_NO_UTF_8_VALIDATE": JSON.stringify("true"),
-		"process.env.NODE_ENV": JSON.stringify(process.env.NODE_ENV),
-		"process.env.PROSOPO_DEFAULT_ENVIRONMENT":
-			JSON.stringify(defaultEnvironment),
-		"process.env.PROSOPO_SERVER_URL": JSON.stringify(
-			process.env.PROSOPO_SERVER_URL,
-		),
-		// Lets a development widget reach a provider that is not on the machine
-		// serving the page — a phone or simulator testing over the LAN would
-		// otherwise resolve the default `localhost` to itself.
-		"process.env.PROSOPO_PROVIDER_URL_DEVELOPMENT": JSON.stringify(
-			process.env.PROSOPO_PROVIDER_URL_DEVELOPMENT,
-		),
-		// Points a self-hosted build at its own providers regardless of
-		// environment, so a production bundle no longer has to masquerade as a
-		// development build to be redirected.
-		"process.env.PROSOPO_PROVIDER_LIST": JSON.stringify(
-			process.env.PROSOPO_PROVIDER_LIST,
-		),
-		"process.env._DEV_ONLY_WATCH_EVENTS": JSON.stringify(
-			process.env._DEV_ONLY_WATCH_EVENTS,
-		),
-		"process.env.PROSOPO_MONGO_EVENTS_URI": JSON.stringify(
-			process.env.PROSOPO_MONGO_EVENTS_URI,
-		),
-		"process.env.PROSOPO_PACKAGE_VERSION": JSON.stringify(
-			process.env.PROSOPO_PACKAGE_VERSION,
-		),
-		"process.env.PROSOPO_DOCS_URL": JSON.stringify(
-			process.env.PROSOPO_DOCS_URL,
-		),
-		"process.env.PROSOPO_LOG_LEVEL": JSON.stringify(
-			process.env.PROSOPO_LOG_LEVEL,
-		),
-		// only needed if bundling with a site key
-		"process.env.PROSOPO_SITE_KEY": JSON.stringify(
-			process.env.PROSOPO_SITE_KEY,
-		),
-	};
-
-	console.info(`Env vars: ${JSON.stringify(define, null, 4)}`);
-
-	// Get all dependencies of the current package
-	const { dependencies: deps, optionalPeerDependencies } =
-		await getDependencies(packageName, isProduction);
-
-	// Get rid of any dependencies we don't want to bundle.
-	// The two i18next entries are server-only: the fs backend reads locale JSON
-	// off disk and the middleware is Express request handling. Neither can run
-	// in a browser — `i18nBackend.ts` also imports `node:path`, which is already
-	// external — so they are pure weight in a frontend bundle. The other
-	// i18next-* packages (http-backend, browser-languagedetector,
-	// chained-backend, resources-to-backend) ARE used in the browser and must
-	// stay bundled; these filters are substring matches, so they catch only
-	// themselves.
-	const { external, internal } = filterDependencies(deps, [
-		"pm2",
-		"nodejs-polars",
-		"aws",
-		"webpack",
-		"vite",
-		"i18next-fs-backend",
-		"i18next-http-middleware",
-	]);
-
-	// `external` only ever matches a specifier exactly, so listing a package by
-	// name does nothing for a subpath import of it. `i18next-fs-backend` has
-	// been on the exclusion list above for a long time, but `i18nBackend.ts`
-	// imports `i18next-fs-backend/cjs` (see i18next/i18next-fs-backend#57) —
-	// a different string — so it was bundled anyway, dragging its YAML, JSON5
-	// and JSONC parsers into the browser artifact.
-	//
-	// Listed literally rather than by matching `pkg/*` against the whole
-	// exclusion list: that broader rule also catches
-	// `vite-plugin-node-polyfills/shims/process` (the `vite` filter is a
-	// substring match, so it selects the plugin package too). That specifier is
-	// injected into the served and IIFE bundles as a bare import, and
-	// externalising it leaves the browser unable to resolve it — the widget dies
-	// on load with "Failed to resolve module specifier".
-	const serverOnlySubpaths = ["i18next-fs-backend/cjs"];
-
-	// Add the node builtins (path, fs, os, etc.) to the external list
-	const allExternal = [
-		...builtinModules,
-		...builtinModules.map((m) => `node:${m}`),
-		...external,
-		...optionalPeerDependencies,
-		...serverOnlySubpaths,
-	];
-	console.debug(
-		`Bundling. ${JSON.stringify(internal.slice(0, 10), null, 2)}... ${internal.length} deps`,
-	);
-
-	// Required to print RegExp in console (e.g. alias keys)
-	// biome-ignore lint/suspicious/noExplicitAny: has to be any to represent object prototype
-	const proto = RegExp.prototype as any;
-	proto.toJSON = RegExp.prototype.toString;
-
-	// drop console logs if in production mode
-	let drop: undefined | Drop[];
-	let pure: string[] = [];
-	if (isProduction) {
-		drop = ["debugger"];
-		pure = ["console.log", "console.warn", "console.info", "console.debug"];
-	}
-
-	const rollupExternal: ExternalOption = allExternal;
-
-	console.info({ bundleName }, "Bundle name");
-	return {
-		server: {
-			host: "127.0.0.1",
-		},
-		mode: mode || "development",
-		optimizeDeps: {
-			include: ["node_modules"],
-			force: true,
-		},
-		worker: {
-			format: "es",
-		},
-		esbuild: {
-			platform: "browser",
-			target: [
-				"es2020",
-				"chrome60",
-				"edge18",
-				"firefox60",
-				"node24",
-				"safari11",
-			],
-			drop,
-			pure,
-			legalComments: "none",
-			jsx: "automatic",
-			jsxImportSource: "@emotion/react",
-			jsxDev: process.env.NODE_ENV === "development",
-		},
-		define,
-
-		build: {
-			outDir: path.resolve(dir, "dist/bundle"),
-			minify: isProduction,
-			ssr: false,
-			lib: {
-				entry: path.resolve(dir, entry),
-				name: bundleName,
-				fileName: `${bundleName}.bundle.js`,
-				formats: ["es"],
-			},
-			modulePreload: { polyfill: true },
-			commonjsOptions: {
-				exclude: ["mongodb/*"],
-				transformMixedEsModules: true,
-				strictRequires: "debug",
-			},
-
-			rollupOptions: {
-				treeshake: {
-					// Respect /*#__PURE__*/ annotations. Ignoring them retained
-					// dead library calls that every consumer then shipped;
-					// honouring them cuts ~17KB gzip off the widget bundle with
-					// a byte-identical detector.
-					annotations: true,
-					propertyReadSideEffects: false,
-					// Measured alternatives, both rejected:
-					//   moduleSideEffects: false        -> widget 8KB gzip LARGER
-					//   propertyWriteSideEffects: false -> detector dies on load
-					//                                     ("Maximum call stack
-					//                                     size exceeded")
-					moduleSideEffects: "no-external",
-					unknownGlobalSideEffects: false,
-				},
-				external: rollupExternal,
-				watch: false,
-
-				output: {
-					dir: path.resolve(dir, "dist/bundle"),
-					entryFileNames: `${bundleName}.bundle.js`,
-					// For a lib + es build, Vite downgrades `build.minify: true` to
-					// `{ compress, mangle, codegen: false }`, which leaves the output
-					// pretty-printed. Set it here to get whitespace removal too;
-					// output options win over the build-level default.
-					...(isProduction
-						? {
-								minify: {
-									compress: true,
-									mangle: true,
-									codegen: true,
-								},
-							}
-						: {}),
-				},
-
-				plugins: [
-					// biome-ignore lint/suspicious/noExplicitAny: has to be any to represent object prototype
-					css() as any,
-					// biome-ignore lint/suspicious/noExplicitAny: has to be any to represent object prototype
-					wasm() as any,
-					// @ts-ignore
-					nodeResolve({
-						browser: true,
-						preferBuiltins: false,
-						rootDir: path.resolve(dir, "../../"),
-						dedupe: ["react", "react-dom"],
-						modulesOnly: true,
-						// biome-ignore lint/suspicious/noExplicitAny: has to be any to represent object prototype
-					}) as any,
-					// String replacement plugin for fingerprinting code
-					{
-						name: "string-replace-fingerprint",
-						generateBundle(_, bundle) {
-							for (const fileName in bundle) {
-								const chunk = bundle[fileName];
-								if (
-									chunk &&
-									chunk.type === "chunk" &&
-									"code" in chunk &&
-									chunk.code
-								) {
-									chunk.code = chunk.code.replace(
-										/var request = new XMLHttpRequest\(\);\s*request\.open\("get", "https:\/\/m1\.openfpcdn\.io\/fingerprintjs\/v"\.concat\(version, "\/npm-monitoring"\), true\);\s*request\.send\(\);/g,
-										"",
-									);
-								}
-							}
-						},
-					},
-					// Bundle stats page — only wired in (and opened in the
-					// browser) when PROSOPO_BUNDLE_STATS=true. Defaults off so
-					// normal builds neither emit the report nor pop a window.
-					...(openBundleStats
-						? [
-								visualizer({
-									open: true,
-									template: "treemap",
-									gzipSize: true,
-									brotliSize: true,
-								}),
-							]
-						: []),
-					// I think we can use this plugin to build all packages instead of relying on the tsc step that's
-					// currently a precursor in package.json. However, it fails for the following reason:
-					// https://github.com/rollup/plugins/issues/243
-					// @ts-ignore
-					typescript({
-						tsconfig: path.resolve("./tsconfig.json"),
-						compilerOptions: { rootDir: path.resolve("./src") },
-						outDir: path.resolve(dir, "dist/bundle"),
-					}),
-				],
-			},
-		},
-		plugins: [
-			VitePluginExternalizeObfuscatorDeadCode(),
-			// node polyfills must be a top-level Vite plugin (not inside
-			// build.rollupOptions.plugins) so its inject sub-plugin initialises
-			// before transform runs under Rolldown/Vite 8.
-			nodePolyfills({
-				include: ["crypto"],
-			}),
-			// Not sure if we need this plugin or not, it works without it
-			// @ts-ignore
-			viteReact(),
-			// Closes the bundler and copies the bundle to the client-bundle-example project unless we're in serve
-			// mode, in which case we don't want to close the bundler because it will close the server
-			command !== "serve" ? VitePluginCloseAndCopy(copyOptions) : undefined,
-		],
-	};
-}

package/src/vite/vite.test.config.ts

@@ -1,115 +0,0 @@
-// Copyright 2021-2026 Prosopo (UK) Ltd.
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
-
-import fs from "node:fs";
-import path from "node:path";
-import tsconfigPaths from "vite-tsconfig-paths";
-import { defineConfig } from "vitest/config";
-import { testFileGlobs } from "./testFileGlobs.js";
-import VitePluginCloseAndCopy from "./vite-plugin-close-and-copy.js";
-import VitePluginSourcemapExclude from "./vite-plugin-sourcemap-exclude.js";
-
-export default function (tsConfigPath?: string) {
-	const testFiles = testFileGlobs(process.env.TEST_TYPE);
-	console.log(
-		`TEST_TYPE=${process.env.TEST_TYPE ?? ""} include=${testFiles.include.join(",")} exclude=${testFiles.exclude.join(",")}`,
-	);
-
-	// Determine coverage include paths based on current working directory.
-	//
-	// Detected by looking for a package alongside the cwd rather than by
-	// matching "/packages/" in the path: workspaces also live in dev/, demos/
-	// and integration/, and those were falling through to the repo-root globs
-	// below, which match `packages/*/src/**` only — so they reported 0/0
-	// coverage no matter what their tests exercised. Neither repo root has a
-	// `src` directory, so this cannot misfire in the other direction.
-	const cwd = process.cwd();
-	const isRunningFromPackage =
-		fs.existsSync(path.join(cwd, "package.json")) &&
-		fs.existsSync(path.join(cwd, "src"));
-
-	// If running from a package directory, include local src files
-	// If running from repo root, include all package src files
-	const coverageInclude = isRunningFromPackage
-		? ["src/**/*.ts", "src/**/*.js", "src/**/*.tsx", "src/**/*.jsx"]
-		: ["packages/*/src/**", "captcha/packages/*/src/**"];
-
-	const coverageExclude = isRunningFromPackage
-		? [
-				"src/tests/**/*",
-				"src/**/*.d.ts",
-				"src/**/*.test.ts",
-				"src/**/*.spec.ts",
-				"src/**/*.test.tsx",
-				"src/**/*.spec.tsx",
-				// Type-test files are compiled by the typecheck pass, never
-				// executed, so they can only ever report 0% and drag the real
-				// figure down. `*.d.ts` above does not match `*.test-d.ts`.
-				"src/**/*.test-d.ts",
-				"src/**/*.test-d.tsx",
-			]
-		: [
-				"**/tests/**/*",
-				"**/*.d.ts",
-				"**/*.test.*",
-				"**/*.spec.*",
-				"**/node_modules/**",
-				"**/dist/**",
-			];
-	const plugins = [
-		VitePluginSourcemapExclude({ excludeNodeModules: true }),
-		VitePluginCloseAndCopy(),
-	];
-
-	if (tsConfigPath) {
-		plugins.push(tsconfigPaths({ projects: [path.resolve(tsConfigPath)] }));
-	}
-
-	return defineConfig({
-		build: {
-			minify: false,
-			sourcemap: false,
-			rollupOptions: {
-				output: {
-					sourcemap: false,
-				},
-			},
-		},
-		test: {
-			//root: getRootDir(),
-			// vitest 4 removed the "basic" reporter; the default reporter with
-			// summary disabled reproduces its terse output.
-			reporters: [["default", { summary: false }]],
-			include: testFiles.include,
-			watch: false,
-			exclude: ["**/node_modules/**", "**/dist/**", ...testFiles.exclude],
-			logHeapUsage: true,
-			coverage: {
-				enabled: true,
-				include: coverageInclude,
-				exclude: coverageExclude,
-			},
-			typecheck: {
-				enabled: true,
-			},
-			pool: "forks", // forks is slower than 'threads' but more compatible with low-level libs (e.g. bcrypt)
-			isolate: true,
-			sequence: {
-				shuffle: true,
-			},
-			testTimeout: 10000,
-		},
-		plugins: plugins,
-	});
-}

package/src/vite/vite.threads.test.config.ts

@@ -1,100 +0,0 @@
-// Copyright 2021-2026 Prosopo (UK) Ltd.
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
-
-import path from "node:path";
-import tsconfigPaths from "vite-tsconfig-paths";
-import { defineConfig } from "vitest/config";
-import { testFileGlobs } from "./testFileGlobs.js";
-import VitePluginCloseAndCopy from "./vite-plugin-close-and-copy.js";
-import VitePluginSourcemapExclude from "./vite-plugin-sourcemap-exclude.js";
-
-export default function (tsConfigPath?: string) {
-	const testFiles = testFileGlobs(process.env.TEST_TYPE);
-	console.log(
-		`TEST_TYPE=${process.env.TEST_TYPE ?? ""} include=${testFiles.include.join(",")} exclude=${testFiles.exclude.join(",")}`,
-	);
-
-	// Determine coverage include paths based on current working directory
-	const cwd = process.cwd();
-	const isRunningFromPackage =
-		cwd.includes("/packages/") && cwd.includes("/src") === false;
-
-	// If running from a package directory, include local src files
-	// If running from repo root, include all package src files
-	const coverageInclude = isRunningFromPackage
-		? ["src/**/*.ts", "src/**/*.js", "src/**/*.tsx", "src/**/*.jsx"]
-		: ["packages/*/src/**", "captcha/packages/*/src/**"];
-
-	const coverageExclude = isRunningFromPackage
-		? [
-				"src/tests/**/*",
-				"src/**/*.d.ts",
-				"src/**/*.test.ts",
-				"src/**/*.spec.ts",
-				"src/**/*.test.tsx",
-				"src/**/*.spec.tsx",
-			]
-		: [
-				"**/tests/**/*",
-				"**/*.d.ts",
-				"**/*.test.*",
-				"**/*.spec.*",
-				"**/node_modules/**",
-				"**/dist/**",
-			];
-	const plugins = [
-		VitePluginSourcemapExclude({ excludeNodeModules: true }),
-		VitePluginCloseAndCopy(),
-	];
-
-	if (tsConfigPath) {
-		plugins.push(tsconfigPaths({ projects: [path.resolve(tsConfigPath)] }));
-	}
-
-	return defineConfig({
-		build: {
-			minify: false,
-			sourcemap: false,
-			rollupOptions: {
-				output: {
-					sourcemap: false,
-				},
-			},
-		},
-		test: {
-			//root: getRootDir(),
-			// vitest 4 removed the "basic" reporter; the default reporter with
-			// summary disabled reproduces its terse output.
-			reporters: [["default", { summary: false }]],
-			include: testFiles.include,
-			watch: false,
-			exclude: ["**/node_modules/**", "**/dist/**", ...testFiles.exclude],
-			logHeapUsage: true,
-			coverage: {
-				enabled: true,
-				include: coverageInclude,
-				exclude: coverageExclude,
-			},
-			typecheck: {
-				enabled: true,
-			},
-			pool: "threads", // use threads for tests that should be run sequentially
-			// vitest 4 removed poolOptions; sequential execution is now expressed via
-			// fileParallelism instead of min/maxThreads.
-			fileParallelism: false,
-			testTimeout: 10000,
-		},
-		plugins: plugins,
-	});
-}

package/src/webpack/index.ts

@@ -1,14 +0,0 @@
-// Copyright 2021-2026 Prosopo (UK) Ltd.
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
-export * from "./webpack.config.js";