@pwfabric/runtime 0.0.0-stage → 1.0.0-rc.0

package/dist/render/dynamic-artifact-context.d.ts

@@ -0,0 +1,78 @@
+/**
+ * Dynamic Artifact Context Provider
+ *
+ * Provides dynamic block and starter descriptor maps
+ * to the component tree. Populated from the host's render grants.
+ *
+ * @module @pwfabric/runtime/render/dynamic-artifact-context
+ */
+import { type ReactNode } from 'react';
+import type { DynamicBlockDescriptor, DynamicStarterDescriptor } from '@pwfabric/contracts';
+export interface DynamicArtifactContextValue {
+    readonly dynamicBlocks: ReadonlyMap<string, DynamicBlockDescriptor>;
+    readonly dynamicStarters: ReadonlyMap<string, DynamicStarterDescriptor>;
+    readonly isLoaded: boolean;
+}
+export interface DynamicArtifactProviderProps {
+    readonly dynamicBlocks?: readonly DynamicBlockDescriptor[];
+    readonly dynamicStarters?: readonly DynamicStarterDescriptor[];
+    /**
+     * Whether the dynamic descriptors have finished loading. Server-rendered
+     * consumers (a published page) pass fully-resolved descriptors
+     * synchronously and omit this — it defaults to `true`. Client-side editors
+     * load descriptors from the host's aggregate after mount, so they pass the
+     * live loading state; consumers can then tell "still loading" apart from
+     * "genuinely no descriptor" instead of flashing every block as unknown on
+     * first paint.
+     */
+    readonly isLoaded?: boolean;
+    /**
+     * WARM THE WHOLE CATALOG ON MOUNT. Off by default, and that default is the
+     * point.
+     *
+     * This provider typically sits in the host app's root layout, so it is
+     * mounted on every route. Preloading from there downloads, hash-verifies and
+     * blob-imports every descriptor the host owns on pages that render none of
+     * them — dozens of bundles and tens of seconds of summed download on a page
+     * with no renderer at all.
+     *
+     * Rendering a block does not need this: `DynamicBlockWrapper` asks the
+     * loader for the descriptor it is about to draw, and the loader caches and
+     * de-dupes by block type. Turn it on only where a canvas is genuinely about
+     * to render arbitrary blocks and the round trip should already be in flight
+     * — a studio or an editor, never a layout.
+     */
+    readonly preload?: boolean;
+    readonly children: ReactNode;
+}
+/**
+ * Warm the loader's cache for a whole catalog, fire-and-forget.
+ *
+ * The imperative half of the same opt-in: a canvas that knows it is about to
+ * render arbitrary blocks can start the downloads itself, without the provider
+ * having to guess from the fact that it was mounted. Caching and de-duplication
+ * stay entirely the loader's business — calling this twice costs one download.
+ */
+export declare function preloadDynamicBlocks(descriptors: readonly DynamicBlockDescriptor[] | undefined | null): void;
+/**
+ * Provides dynamic block and starter descriptors to the component tree.
+ *
+ * Downloads nothing by itself: blocks load lazily as they are rendered. Pass
+ * `preload` to warm the whole catalog on mount.
+ */
+export declare function DynamicArtifactProvider({ dynamicBlocks, dynamicStarters, isLoaded, preload, children, }: DynamicArtifactProviderProps): ReactNode;
+/**
+ * Access dynamic block descriptors.
+ */
+export declare function useDynamicBlocks(): {
+    readonly blocks: ReadonlyMap<string, DynamicBlockDescriptor>;
+    readonly isLoaded: boolean;
+};
+/**
+ * Access dynamic starter descriptors.
+ */
+export declare function useDynamicStarters(): {
+    readonly starters: ReadonlyMap<string, DynamicStarterDescriptor>;
+    readonly isLoaded: boolean;
+};
+//# sourceMappingURL=dynamic-artifact-context.d.ts.map

package/dist/render/dynamic-artifact-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dynamic-artifact-context.d.ts","sourceRoot":"","sources":["../../src/render/dynamic-artifact-context.tsx"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAiD,KAAK,SAAS,EAAE,MAAM,OAAO,CAAA;AACrF,OAAO,KAAK,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAA;AAO3F,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAA;IACnE,QAAQ,CAAC,eAAe,EAAE,WAAW,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAA;IACvE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;CAC3B;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,sBAAsB,EAAE,CAAA;IAC1D,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,wBAAwB,EAAE,CAAA;IAC9D;;;;;;;;OAQG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;IAC3B;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAA;CAC7B;AAgBD;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,WAAW,EAAE,SAAS,sBAAsB,EAAE,GAAG,SAAS,GAAG,IAAI,GAChE,IAAI,CAGN;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,EACtC,aAAa,EACb,eAAe,EACf,QAAe,EACf,OAAe,EACf,QAAQ,GACT,EAAE,4BAA4B,GAAG,SAAS,CAiC1C;AAMD;;GAEG;AACH,wBAAgB,gBAAgB,IAAI;IAClC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAA;IAC5D,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;CAC3B,CAGA;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI;IACpC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAA;IAChE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;CAC3B,CAGA"}

package/dist/render/dynamic-artifact-context.js

@@ -0,0 +1,89 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+/**
+ * Dynamic Artifact Context Provider
+ *
+ * Provides dynamic block and starter descriptor maps
+ * to the component tree. Populated from the host's render grants.
+ *
+ * @module @pwfabric/runtime/render/dynamic-artifact-context
+ */
+import { createContext, useContext, useEffect, useMemo } from 'react';
+import { BlockModuleLoader } from './dynamic-block-loader.js';
+// ============================================================
+// CONTEXT
+// ============================================================
+const DynamicArtifactContext = createContext({
+    dynamicBlocks: new Map(),
+    dynamicStarters: new Map(),
+    isLoaded: false,
+});
+// ============================================================
+// PROVIDER
+// ============================================================
+/**
+ * Warm the loader's cache for a whole catalog, fire-and-forget.
+ *
+ * The imperative half of the same opt-in: a canvas that knows it is about to
+ * render arbitrary blocks can start the downloads itself, without the provider
+ * having to guess from the fact that it was mounted. Caching and de-duplication
+ * stay entirely the loader's business — calling this twice costs one download.
+ */
+export function preloadDynamicBlocks(descriptors) {
+    if (!descriptors || descriptors.length === 0)
+        return;
+    BlockModuleLoader.preload(descriptors);
+}
+/**
+ * Provides dynamic block and starter descriptors to the component tree.
+ *
+ * Downloads nothing by itself: blocks load lazily as they are rendered. Pass
+ * `preload` to warm the whole catalog on mount.
+ */
+export function DynamicArtifactProvider({ dynamicBlocks, dynamicStarters, isLoaded = true, preload = false, children, }) {
+    const value = useMemo(() => {
+        const blockMap = new Map();
+        const starterMap = new Map();
+        if (dynamicBlocks) {
+            for (const block of dynamicBlocks) {
+                blockMap.set(block.blockType, block);
+            }
+        }
+        if (dynamicStarters) {
+            for (const starter of dynamicStarters) {
+                starterMap.set(starter.starterId, starter);
+            }
+        }
+        return {
+            dynamicBlocks: blockMap,
+            dynamicStarters: starterMap,
+            isLoaded,
+        };
+    }, [dynamicBlocks, dynamicStarters, isLoaded]);
+    // In an effect, not in the memo above: a preload is a side effect and a
+    // render is not the place for one — inside `useMemo` it also ran during
+    // server rendering, where nothing can consume the result.
+    useEffect(() => {
+        if (!preload)
+            return;
+        preloadDynamicBlocks(dynamicBlocks);
+    }, [preload, dynamicBlocks]);
+    return _jsx(DynamicArtifactContext.Provider, { value: value, children: children });
+}
+// ============================================================
+// HOOKS
+// ============================================================
+/**
+ * Access dynamic block descriptors.
+ */
+export function useDynamicBlocks() {
+    const ctx = useContext(DynamicArtifactContext);
+    return { blocks: ctx.dynamicBlocks, isLoaded: ctx.isLoaded };
+}
+/**
+ * Access dynamic starter descriptors.
+ */
+export function useDynamicStarters() {
+    const ctx = useContext(DynamicArtifactContext);
+    return { starters: ctx.dynamicStarters, isLoaded: ctx.isLoaded };
+}
+//# sourceMappingURL=dynamic-artifact-context.js.map

package/dist/render/dynamic-artifact-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dynamic-artifact-context.js","sourceRoot":"","sources":["../../src/render/dynamic-artifact-context.tsx"],"names":[],"mappings":";AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAkB,MAAM,OAAO,CAAA;AAErF,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AA6C7D,+DAA+D;AAC/D,UAAU;AACV,+DAA+D;AAE/D,MAAM,sBAAsB,GAAG,aAAa,CAA8B;IACxE,aAAa,EAAE,IAAI,GAAG,EAAE;IACxB,eAAe,EAAE,IAAI,GAAG,EAAE;IAC1B,QAAQ,EAAE,KAAK;CAChB,CAAC,CAAA;AAEF,+DAA+D;AAC/D,WAAW;AACX,+DAA+D;AAE/D;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAClC,WAAiE;IAEjE,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAM;IACpD,iBAAiB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;AACxC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,EACtC,aAAa,EACb,eAAe,EACf,QAAQ,GAAG,IAAI,EACf,OAAO,GAAG,KAAK,EACf,QAAQ,GACqB;IAC7B,MAAM,KAAK,GAAG,OAAO,CAA8B,GAAG,EAAE;QACtD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkC,CAAA;QAC1D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAoC,CAAA;QAE9D,IAAI,aAAa,EAAE,CAAC;YAClB,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;gBAClC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;YACtC,CAAC;QACH,CAAC;QAED,IAAI,eAAe,EAAE,CAAC;YACpB,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;gBACtC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;YAC5C,CAAC;QACH,CAAC;QAED,OAAO;YACL,aAAa,EAAE,QAAQ;YACvB,eAAe,EAAE,UAAU;YAC3B,QAAQ;SACT,CAAA;IACH,CAAC,EAAE,CAAC,aAAa,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC,CAAA;IAE9C,wEAAwE;IACxE,wEAAwE;IACxE,0DAA0D;IAC1D,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,OAAO;YAAE,OAAM;QACpB,oBAAoB,CAAC,aAAa,CAAC,CAAA;IACrC,CAAC,EAAE,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAA;IAE5B,OAAO,KAAC,sBAAsB,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,YAAG,QAAQ,GAAmC,CAAA;AACpG,CAAC;AAED,+DAA+D;AAC/D,QAAQ;AACR,+DAA+D;AAE/D;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAI9B,MAAM,GAAG,GAAG,UAAU,CAAC,sBAAsB,CAAC,CAAA;IAC9C,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,aAAa,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAA;AAC9D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAIhC,MAAM,GAAG,GAAG,UAAU,CAAC,sBAAsB,CAAC,CAAA;IAC9C,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,eAAe,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAA;AAClE,CAAC"}

package/dist/render/dynamic-block-loader.d.ts

@@ -0,0 +1,81 @@
+/**
+ * Dynamic Block Module Loader
+ *
+ * Loads third-party block ESM modules at runtime via dynamic import().
+ * extends to first-party packs — the loader now SHA-256 hash
+ * checks the bundle bytes against `descriptor.integrity` before evaluation
+ * and discovers both the component and the BlockDefinition under stable
+ * export names (`Component` + `definition`) emitted by the bundle wrapper.
+ *
+ * @module @pwfabric/runtime/render/dynamic-block-loader
+ */
+import type { BlockDefinition } from '@pwfabric/core';
+import type { DynamicBlockDescriptor } from '@pwfabric/contracts';
+import type { BlockComponent } from './types.js';
+export interface LoadedAtom {
+    readonly Component: BlockComponent;
+    readonly definition: BlockDefinition | null;
+}
+/**
+ * Singleton loader for dynamic block ESM modules.
+ *
+ * - Caches loaded modules by blockType
+ * - Deduplicates concurrent requests for the same module
+ * - Provides preload for fire-and-forget pre-fetching
+ */
+declare class BlockModuleLoaderImpl {
+    private readonly cache;
+    private readonly pending;
+    /**
+     * Load a dynamic block module and return its component.
+     */
+    load(descriptor: DynamicBlockDescriptor): Promise<BlockComponent>;
+    /**
+     * load both the component and the BlockDefinition. Hash-checks
+     * the bundle bytes against `descriptor.integrity` before evaluation.
+     */
+    loadAtom(descriptor: DynamicBlockDescriptor): Promise<LoadedAtom>;
+    /**
+     * Preload multiple block modules (fire-and-forget).
+     */
+    preload(descriptors: readonly DynamicBlockDescriptor[]): void;
+    /**
+     * Check if a block module is already loaded.
+     */
+    isLoaded(blockType: string): boolean;
+    /**
+     * Synchronously get a cached block component, or null if not yet loaded.
+     */
+    getSync(blockType: string): BlockComponent | null;
+    /**
+     * Synchronously get the cached block definition, or null if not yet loaded
+     * (or the bundle did not export one).
+     */
+    getDefinitionSync(blockType: string): BlockDefinition | null;
+    /**
+     * Invalidate cache for a specific block type or all blocks.
+     */
+    invalidate(blockType?: string): void;
+    private doLoad;
+}
+/**
+ * SHA-256 verify the fetched bundle bytes against `descriptor.integrity`.
+ *
+ * Accepted formats:
+ * - bare 64-char hex (the format `bundleHash` is stored in DB / listing
+ *   metadata)
+ * - SRI-style `sha256-<base64>` (allowed for forward-compat with W3C
+ *   subresource-integrity strings)
+ *
+ * Empty / missing integrity is treated as a hard failure — this is a
+ * security boundary, not a hint.
+ *
+ * Exported for unit tests; runtime callers should use `BlockModuleLoader.load`.
+ */
+export declare function verifyIntegrity(bytes: ArrayBuffer, integrity: string, blockType: string): Promise<void>;
+/**
+ * Singleton instance
+ */
+export declare const BlockModuleLoader: BlockModuleLoaderImpl;
+export {};
+//# sourceMappingURL=dynamic-block-loader.d.ts.map

package/dist/render/dynamic-block-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dynamic-block-loader.d.ts","sourceRoot":"","sources":["../../src/render/dynamic-block-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AACrD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AACjE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAMhD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAA;IAClC,QAAQ,CAAC,UAAU,EAAE,eAAe,GAAG,IAAI,CAAA;CAC5C;AAqBD;;;;;;GAMG;AACH,cAAM,qBAAqB;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyC;IAEjE;;OAEG;IACG,IAAI,CAAC,UAAU,EAAE,sBAAsB,GAAG,OAAO,CAAC,cAAc,CAAC;IAKvE;;;OAGG;IACG,QAAQ,CAAC,UAAU,EAAE,sBAAsB,GAAG,OAAO,CAAC,UAAU,CAAC;IAyBvE;;OAEG;IACH,OAAO,CAAC,WAAW,EAAE,SAAS,sBAAsB,EAAE,GAAG,IAAI;IAU7D;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAIpC;;OAEG;IACH,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAIjD;;;OAGG;IACH,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI;IAI5D;;OAEG;IACH,UAAU,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI;YAQtB,MAAM;CA8CrB;AAMD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,eAAe,CACnC,KAAK,EAAE,WAAW,EAClB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CA0Bf;AAkBD;;GAEG;AACH,eAAO,MAAM,iBAAiB,uBAA8B,CAAA"}

package/dist/render/dynamic-block-loader.js

@@ -0,0 +1,197 @@
+/**
+ * Dynamic Block Module Loader
+ *
+ * Loads third-party block ESM modules at runtime via dynamic import().
+ * extends to first-party packs — the loader now SHA-256 hash
+ * checks the bundle bytes against `descriptor.integrity` before evaluation
+ * and discovers both the component and the BlockDefinition under stable
+ * export names (`Component` + `definition`) emitted by the bundle wrapper.
+ *
+ * @module @pwfabric/runtime/render/dynamic-block-loader
+ */
+// ============================================================
+// MODULE LOADER
+// ============================================================
+/**
+ * Singleton loader for dynamic block ESM modules.
+ *
+ * - Caches loaded modules by blockType
+ * - Deduplicates concurrent requests for the same module
+ * - Provides preload for fire-and-forget pre-fetching
+ */
+class BlockModuleLoaderImpl {
+    cache = new Map();
+    pending = new Map();
+    /**
+     * Load a dynamic block module and return its component.
+     */
+    async load(descriptor) {
+        const atom = await this.loadAtom(descriptor);
+        return atom.Component;
+    }
+    /**
+     * load both the component and the BlockDefinition. Hash-checks
+     * the bundle bytes against `descriptor.integrity` before evaluation.
+     */
+    async loadAtom(descriptor) {
+        // Check cache
+        const cached = this.cache.get(descriptor.blockType);
+        if (cached)
+            return { Component: cached.component, definition: cached.definition };
+        // Check pending (dedup concurrent requests)
+        const inflight = this.pending.get(descriptor.blockType);
+        if (inflight)
+            return inflight;
+        const promise = this.doLoad(descriptor);
+        this.pending.set(descriptor.blockType, promise);
+        try {
+            const atom = await promise;
+            this.cache.set(descriptor.blockType, {
+                component: atom.Component,
+                definition: atom.definition,
+                loadedAt: Date.now(),
+            });
+            return atom;
+        }
+        finally {
+            this.pending.delete(descriptor.blockType);
+        }
+    }
+    /**
+     * Preload multiple block modules (fire-and-forget).
+     */
+    preload(descriptors) {
+        for (const descriptor of descriptors) {
+            if (!this.cache.has(descriptor.blockType) && !this.pending.has(descriptor.blockType)) {
+                this.loadAtom(descriptor).catch(() => {
+                    // Preload failure is non-fatal
+                });
+            }
+        }
+    }
+    /**
+     * Check if a block module is already loaded.
+     */
+    isLoaded(blockType) {
+        return this.cache.has(blockType);
+    }
+    /**
+     * Synchronously get a cached block component, or null if not yet loaded.
+     */
+    getSync(blockType) {
+        return this.cache.get(blockType)?.component ?? null;
+    }
+    /**
+     * Synchronously get the cached block definition, or null if not yet loaded
+     * (or the bundle did not export one).
+     */
+    getDefinitionSync(blockType) {
+        return this.cache.get(blockType)?.definition ?? null;
+    }
+    /**
+     * Invalidate cache for a specific block type or all blocks.
+     */
+    invalidate(blockType) {
+        if (blockType) {
+            this.cache.delete(blockType);
+        }
+        else {
+            this.cache.clear();
+        }
+    }
+    async doLoad(descriptor) {
+        const LOAD_TIMEOUT_MS = 10_000;
+        const fetchAndImport = async () => {
+            // integrity is required before evaluation. We fetch the
+            // bundle, hash-verify the bytes against `descriptor.integrity`, and
+            // only then create a Blob URL and feed it to `import()`. Skipping
+            // this would let a CDN-side compromise execute attacker code under
+            // our origin.
+            const res = await fetch(descriptor.moduleUrl, { credentials: 'omit' });
+            if (!res.ok) {
+                throw new Error(`Bundle fetch failed for ${descriptor.blockType}: ${res.status}`);
+            }
+            const bytes = await res.arrayBuffer();
+            await verifyIntegrity(bytes, descriptor.integrity, descriptor.blockType);
+            const blob = new Blob([bytes], { type: 'text/javascript' });
+            const blobUrl = URL.createObjectURL(blob);
+            try {
+                return (await import(/* webpackIgnore: true */ blobUrl));
+            }
+            finally {
+                URL.revokeObjectURL(blobUrl);
+            }
+        };
+        const loadPromise = fetchAndImport();
+        const timeoutPromise = new Promise((_, reject) => setTimeout(() => reject(new Error(`Module load timed out after ${LOAD_TIMEOUT_MS / 1000}s`)), LOAD_TIMEOUT_MS));
+        const mod = await Promise.race([loadPromise, timeoutPromise]);
+        // wrapper convention emits `Component` + `definition`.
+        // Fall back to legacy export names so older bundles keep working.
+        const component = mod.Component ?? mod.default ?? mod.component ?? mod.render;
+        if (!component || typeof component !== 'function') {
+            throw new Error(`Module at ${descriptor.moduleUrl} does not export a valid block component`);
+        }
+        const definition = mod.definition && typeof mod.definition === 'object' ? mod.definition : null;
+        return { Component: component, definition };
+    }
+}
+// ============================================================
+// HASH VERIFICATION
+// ============================================================
+/**
+ * SHA-256 verify the fetched bundle bytes against `descriptor.integrity`.
+ *
+ * Accepted formats:
+ * - bare 64-char hex (the format `bundleHash` is stored in DB / listing
+ *   metadata)
+ * - SRI-style `sha256-<base64>` (allowed for forward-compat with W3C
+ *   subresource-integrity strings)
+ *
+ * Empty / missing integrity is treated as a hard failure — this is a
+ * security boundary, not a hint.
+ *
+ * Exported for unit tests; runtime callers should use `BlockModuleLoader.load`.
+ */
+export async function verifyIntegrity(bytes, integrity, blockType) {
+    if (!integrity) {
+        throw new Error(`Missing integrity for ${blockType}; refusing to evaluate bundle`);
+    }
+    const computed = new Uint8Array(await crypto.subtle.digest('SHA-256', bytes));
+    const computedHex = bytesToHex(computed);
+    const expected = integrity.trim();
+    if (/^[0-9a-f]{64}$/i.test(expected)) {
+        if (computedHex.toLowerCase() !== expected.toLowerCase()) {
+            throw new Error(`Integrity check failed for ${blockType}`);
+        }
+        return;
+    }
+    const sriMatch = /^sha256-(.+)$/i.exec(expected);
+    if (sriMatch) {
+        const expectedB64 = sriMatch[1] ?? '';
+        const computedB64 = bytesToBase64(computed);
+        if (expectedB64.replace(/=+$/, '') !== computedB64.replace(/=+$/, '')) {
+            throw new Error(`Integrity check failed for ${blockType}`);
+        }
+        return;
+    }
+    throw new Error(`Unrecognized integrity format for ${blockType}`);
+}
+function bytesToHex(bytes) {
+    let out = '';
+    for (const v of bytes) {
+        out += v.toString(16).padStart(2, '0');
+    }
+    return out;
+}
+function bytesToBase64(bytes) {
+    let bin = '';
+    for (const v of bytes) {
+        bin += String.fromCharCode(v);
+    }
+    return btoa(bin);
+}
+/**
+ * Singleton instance
+ */
+export const BlockModuleLoader = new BlockModuleLoaderImpl();
+//# sourceMappingURL=dynamic-block-loader.js.map

package/dist/render/dynamic-block-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dynamic-block-loader.js","sourceRoot":"","sources":["../../src/render/dynamic-block-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AA8BH,+DAA+D;AAC/D,gBAAgB;AAChB,+DAA+D;AAE/D;;;;;;GAMG;AACH,MAAM,qBAAqB;IACR,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAA;IACvC,OAAO,GAAG,IAAI,GAAG,EAA+B,CAAA;IAEjE;;OAEG;IACH,KAAK,CAAC,IAAI,CAAC,UAAkC;QAC3C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAA;QAC5C,OAAO,IAAI,CAAC,SAAS,CAAA;IACvB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,QAAQ,CAAC,UAAkC;QAC/C,cAAc;QACd,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QACnD,IAAI,MAAM;YAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAA;QAEjF,4CAA4C;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QACvD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAA;QAE7B,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;QACvC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;QAE/C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAA;YAC1B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,EAAE;gBACnC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;aACrB,CAAC,CAAA;YACF,OAAO,IAAI,CAAA;QACb,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QAC3C,CAAC;IACH,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,WAA8C;QACpD,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACrC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBACrF,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;oBACnC,+BAA+B;gBACjC,CAAC,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,SAAiB;QACxB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IAClC,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,SAAiB;QACvB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,SAAS,IAAI,IAAI,CAAA;IACrD,CAAC;IAED;;;OAGG;IACH,iBAAiB,CAAC,SAAiB;QACjC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,UAAU,IAAI,IAAI,CAAA;IACtD,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,SAAkB;QAC3B,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QAC9B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAA;QACpB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,UAAkC;QACrD,MAAM,eAAe,GAAG,MAAM,CAAA;QAE9B,MAAM,cAAc,GAAG,KAAK,IAA0B,EAAE;YACtD,wDAAwD;YACxD,oEAAoE;YACpE,kEAAkE;YAClE,mEAAmE;YACnE,cAAc;YACd,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAA;YACtE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,UAAU,CAAC,SAAS,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;YACnF,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,WAAW,EAAE,CAAA;YACrC,MAAM,eAAe,CAAC,KAAK,EAAE,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,CAAA;YAExE,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAA;YAC3D,MAAM,OAAO,GAAG,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAA;YACzC,IAAI,CAAC;gBACH,OAAO,CAAC,MAAM,MAAM,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAgB,CAAA;YACzE,CAAC;oBAAS,CAAC;gBACT,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC,CAAA;YAC9B,CAAC;QACH,CAAC,CAAA;QAED,MAAM,WAAW,GAAG,cAAc,EAAE,CAAA;QACpC,MAAM,cAAc,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CACtD,UAAU,CACR,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,+BAA+B,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,EACjF,eAAe,CAChB,CACF,CAAA;QAED,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAA;QAE7D,uDAAuD;QACvD,kEAAkE;QAClE,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,MAAM,CAAA;QAC7E,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,UAAU,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,aAAa,UAAU,CAAC,SAAS,0CAA0C,CAAC,CAAA;QAC9F,CAAC;QACD,MAAM,UAAU,GACd,GAAG,CAAC,UAAU,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAA;QAE9E,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,CAAA;IAC7C,CAAC;CACF;AAED,+DAA+D;AAC/D,oBAAoB;AACpB,+DAA+D;AAE/D;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAkB,EAClB,SAAiB,EACjB,SAAiB;IAEjB,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,yBAAyB,SAAS,+BAA+B,CAAC,CAAA;IACpF,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAA;IAC7E,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;IACxC,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,EAAE,CAAA;IAEjC,IAAI,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrC,IAAI,WAAW,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CAAC,8BAA8B,SAAS,EAAE,CAAC,CAAA;QAC5D,CAAC;QACD,OAAM;IACR,CAAC;IAED,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAChD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QACrC,MAAM,WAAW,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAA;QAC3C,IAAI,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,KAAK,CAAC,8BAA8B,SAAS,EAAE,CAAC,CAAA;QAC5D,CAAC;QACD,OAAM;IACR,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,qCAAqC,SAAS,EAAE,CAAC,CAAA;AACnE,CAAC;AAED,SAAS,UAAU,CAAC,KAAiB;IACnC,IAAI,GAAG,GAAG,EAAE,CAAA;IACZ,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACxC,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,aAAa,CAAC,KAAiB;IACtC,IAAI,GAAG,GAAG,EAAE,CAAA;IACZ,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IAC/B,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAA;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,qBAAqB,EAAE,CAAA"}

package/dist/render/endpoint.d.ts

@@ -0,0 +1,19 @@
+/** The form a single state value takes inside a mixed endpoint. */
+export declare function encodeEndpointValue(value: unknown): string;
+export declare function resolveEndpoint(endpoint: string, state: Readonly<Record<string, unknown>>): string;
+/**
+ * Would this endpoint be requested with a required value MISSING?
+ *
+ * A detail source is authored as `/carts/{{state.numara}}`. Until the visitor
+ * types a number, `numara` is empty and the request would go to `/carts/` —
+ * the whole collection (DummyJSON redirects there), which then fails `returns`
+ * and opens the page on an error. A placeholder in the PATH is
+ * required: when it resolves to nothing (`''`, `null`, `undefined`) or cannot
+ * be evaluated, the source is not fetched at all and stays idle.
+ *
+ * A placeholder in the QUERY STRING (`?q={{state.q}}`) is not required — an
+ * empty search box legitimately means "no constraint". An endpoint that is
+ * ONE expression (`{{state.url}}`) is required as a whole.
+ */
+export declare function endpointMissingPathValue(endpoint: string, state: Readonly<Record<string, unknown>>): boolean;
+//# sourceMappingURL=endpoint.d.ts.map

package/dist/render/endpoint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint.d.ts","sourceRoot":"","sources":["../../src/render/endpoint.ts"],"names":[],"mappings":"AAmCA,mEAAmE;AACnE,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAI1D;AAED,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,MAAM,CAqBlG;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACvC,OAAO,CA4BT"}

package/dist/render/endpoint.js

@@ -0,0 +1,109 @@
+/**
+ * resolveEndpoint — place surface state into a REST source's `endpoint`.
+ *
+ * EVERY VALUE IS URL-ENCODED WHEN THE ENDPOINT MIXES TEXT AND EXPRESSIONS.
+ *
+ * A raw interpolation would be harmless if state could only come from the
+ * page's own controls, but a published app can seed state from its address
+ * (`/product?id=12`): `?id=12/../../admin` or `?id=1%26role=owner` would
+ * rewrite the path or the query of a request the visitor's credential rides on. A space or a `ü`
+ * was always encoded by `fetch`; what this adds is `& # + % ? /`.
+ *
+ * Three rules:
+ *
+ *   - mixed endpoint (`/products/{{state.id}}`, `?q={{state.q}}`): each value
+ *     goes through `encodeURIComponent` — ALL values, not only the ones that
+ *     came from the address, because the renderer cannot tell them apart;
+ *   - a value that is exactly `.` or `..` becomes `''` — `encodeURIComponent`
+ *     leaves both alone, and a lone `..` segment still climbs a directory;
+ *   - an endpoint that is ONE expression (`"{{state.url}}"`) is left as it
+ *     resolves, unencoded — today's behaviour. The published-app runner never
+ *     seeds a key read there (nor one read in the scheme/host part), so the
+ *     address cannot reach it.
+ *
+ * A failed expression leaves the endpoint as authored, as it always did.
+ *
+ * @module @pwfabric/runtime/render/endpoint
+ */
+import { createExpressionContext, evaluate, interpolate } from '../surface/expression.js';
+/** `"{{ expr }}"` and nothing else (surrounding whitespace allowed). */
+const WHOLE = /^\s*\{\{\s*([^{}]+?)\s*\}\}\s*$/;
+/** One `{{ … }}` placeholder — the same shape `interpolate` walks. */
+const PLACEHOLDER = /\{\{(.+?)\}\}/g;
+/** The form a single state value takes inside a mixed endpoint. */
+export function encodeEndpointValue(value) {
+    const s = String(value ?? '');
+    if (s === '.' || s === '..')
+        return '';
+    return encodeURIComponent(s);
+}
+export function resolveEndpoint(endpoint, state) {
+    if (!endpoint.includes('{{'))
+        return endpoint;
+    const ctx = createExpressionContext({ state: state });
+    // One expression: resolved as before, no encoding (see module note).
+    if (WHOLE.test(endpoint)) {
+        const r = interpolate(endpoint, ctx);
+        return r.success ? r.value : endpoint;
+    }
+    let failed = false;
+    const out = endpoint.replace(PLACEHOLDER, (_match, expression) => {
+        if (failed)
+            return '';
+        const r = evaluate(expression.trim(), ctx);
+        if (!r.success) {
+            failed = true;
+            return '';
+        }
+        return encodeEndpointValue(r.value);
+    });
+    return failed ? endpoint : out;
+}
+/**
+ * Would this endpoint be requested with a required value MISSING?
+ *
+ * A detail source is authored as `/carts/{{state.numara}}`. Until the visitor
+ * types a number, `numara` is empty and the request would go to `/carts/` —
+ * the whole collection (DummyJSON redirects there), which then fails `returns`
+ * and opens the page on an error. A placeholder in the PATH is
+ * required: when it resolves to nothing (`''`, `null`, `undefined`) or cannot
+ * be evaluated, the source is not fetched at all and stays idle.
+ *
+ * A placeholder in the QUERY STRING (`?q={{state.q}}`) is not required — an
+ * empty search box legitimately means "no constraint". An endpoint that is
+ * ONE expression (`{{state.url}}`) is required as a whole.
+ */
+export function endpointMissingPathValue(endpoint, state) {
+    if (!endpoint.includes('{{'))
+        return false;
+    const ctx = createExpressionContext({ state: state });
+    const empty = (expression) => {
+        const r = evaluate(expression.trim(), ctx);
+        return !r.success || r.value === undefined || r.value === null || String(r.value).trim() === '';
+    };
+    const whole = WHOLE.exec(endpoint);
+    if (whole)
+        return empty(whole[1] ?? '');
+    // The path part ends at the first `?` or `#` that is not inside a placeholder.
+    let pathEnd = endpoint.length;
+    for (let i = 0, depth = 0; i < endpoint.length; i++) {
+        if (endpoint.startsWith('{{', i)) {
+            depth++;
+            i++;
+        }
+        else if (endpoint.startsWith('}}', i) && depth > 0) {
+            depth--;
+            i++;
+        }
+        else if (depth === 0 && (endpoint[i] === '?' || endpoint[i] === '#')) {
+            pathEnd = i;
+            break;
+        }
+    }
+    for (const m of endpoint.slice(0, pathEnd).matchAll(PLACEHOLDER)) {
+        if (empty(m[1] ?? ''))
+            return true;
+    }
+    return false;
+}
+//# sourceMappingURL=endpoint.js.map

package/dist/render/endpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint.js","sourceRoot":"","sources":["../../src/render/endpoint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EAAE,uBAAuB,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAA;AAEzF,wEAAwE;AACxE,MAAM,KAAK,GAAG,iCAAiC,CAAA;AAE/C,sEAAsE;AACtE,MAAM,WAAW,GAAG,gBAAgB,CAAA;AAEpC,mEAAmE;AACnE,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAA;IAC7B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,EAAE,CAAA;IACtC,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAA;AAC9B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,KAAwC;IACxF,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAA;IAC7C,MAAM,GAAG,GAAG,uBAAuB,CAAC,EAAE,KAAK,EAAE,KAAgC,EAAE,CAAC,CAAA;IAEhF,qEAAqE;IACrE,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,WAAW,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;QACpC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAA;IACvC,CAAC;IAED,IAAI,MAAM,GAAG,KAAK,CAAA;IAClB,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,UAAkB,EAAE,EAAE;QACvE,IAAI,MAAM;YAAE,OAAO,EAAE,CAAA;QACrB,MAAM,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAA;QAC1C,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YACf,MAAM,GAAG,IAAI,CAAA;YACb,OAAO,EAAE,CAAA;QACX,CAAC;QACD,OAAO,mBAAmB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IACF,OAAO,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAA;AAChC,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAAgB,EAChB,KAAwC;IAExC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAA;IAC1C,MAAM,GAAG,GAAG,uBAAuB,CAAC,EAAE,KAAK,EAAE,KAAgC,EAAE,CAAC,CAAA;IAChF,MAAM,KAAK,GAAG,CAAC,UAAkB,EAAW,EAAE;QAC5C,MAAM,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAA;QAC1C,OAAO,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAA;IACjG,CAAC,CAAA;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAClC,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IAEvC,+EAA+E;IAC/E,IAAI,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAA;IAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpD,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;YACjC,KAAK,EAAE,CAAA;YACP,CAAC,EAAE,CAAA;QACL,CAAC;aAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACrD,KAAK,EAAE,CAAA;YACP,CAAC,EAAE,CAAA;QACL,CAAC;aAAM,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;YACvE,OAAO,GAAG,CAAC,CAAA;YACX,MAAK;QACP,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACjE,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAAE,OAAO,IAAI,CAAA;IACpC,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/render/entity-facade-context.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Entity Facade React Context
+ *
+ * Provides EntityFacade to the surface render tree via React
+ * context. Pattern mirrors SurfaceRoutingContext / useSurfaceRouting().
+ *
+ * Injection point: EntityFacadeContext.Provider wraps BehaviorSurfaceProvider
+ * inside SurfaceRenderer when entityFacade prop is supplied.
+ *
+ * @module @pwfabric/runtime/render/entity-facade-context
+ */
+import type { EntityFacade } from '../entity/facade.js';
+/**
+ * React context that carries an EntityFacade instance through the render tree.
+ * Defaults to null — blocks that require entity access check for null and
+ * gracefully handle the absent-facade case.
+ */
+export declare const EntityFacadeContext: import("react").Context<EntityFacade | null>;
+/**
+ * Returns the EntityFacade from the nearest EntityFacadeContext.Provider.
+ * Returns null when no provider is present (entity support not configured).
+ *
+ * @example
+ * ```tsx
+ * import { useEntityFacade } from '@pwfabric/runtime/render'
+ *
+ * function MyBlock() {
+ *   const facade = useEntityFacade()
+ *   if (!facade) return null  // No entity support configured
+ *   const result = await facade.store.query('Employee', {})
+ * }
+ * ```
+ */
+export declare function useEntityFacade(): EntityFacade | null;
+//# sourceMappingURL=entity-facade-context.d.ts.map

package/dist/render/entity-facade-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity-facade-context.d.ts","sourceRoot":"","sources":["../../src/render/entity-facade-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAEvD;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,8CAA2C,CAAA;AAE3E;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,eAAe,IAAI,YAAY,GAAG,IAAI,CAErD"}