@symbo.ls/utils 3.14.691 → 3.14.707

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @symbo.ls/utils
 
+## 3.14.707
+
+### Patch Changes
+
+- Auto-generated cross-repo patch release.
+
+## 3.14.702
+
+### Patch Changes
+
+- Auto-generated cross-repo patch release.
+
 ## 3.14.691
 
 ### Patch Changes

package/cdn.js

@@ -1,9 +1,5 @@
 'use strict'
 
-function onlyDotsAndNumbers (str) {
-  return /^[0-9.]+$/.test(str) && str !== ''
-}
-
 export const CDN_PROVIDERS = {
   skypack: {
     url: 'https://cdn.skypack.dev',
@@ -25,14 +21,25 @@ export const CDN_PROVIDERS = {
     formatUrl: (pkg, version) =>
       `${CDN_PROVIDERS.jsdelivr.url}/${pkg}${version !== 'latest' ? `@${version}` : ''}/+esm`
   },
+  // pkg.symbo.ls — our own proxy (server/workers/packages). It is a raw file
+  // PASSTHROUGH (GCS bucket → jsDelivr → unpkg), not a CJS→ESM transformer,
+  // so the artifact you get is entirely decided by the path you ask for:
+  //
+  //   /smbls@3.14.706          → jsDelivr's default file = dist/smbls.iife.js
+  //   /smbls@3.14.706/+esm     → jsDelivr's ESM build     ✅ importable
+  //
+  // This provider previously emitted the bare/`/<version>.js` forms, both of
+  // which resolve to the IIFE — `var Smbls=(()=>{…})()`, a script with zero
+  // exports. Any `import … from 'smbls'` against an importmap built that way
+  // fails at link time, and `smbls init --runtime browser` scaffolds shipped
+  // exactly that. `/+esm` is jsDelivr's on-the-fly ESM transform and works
+  // for CJS-only third-party packages too (js-beautify, prismjs, lottie-web
+  // all verified), which is what makes this a complete esm.sh replacement on
+  // a domain we control rather than a smbls-only special case.
   symbols: {
     url: 'https://pkg.symbo.ls',
-    formatUrl: (pkg, version) => {
-      if (pkg.split('/').length > 2 || !onlyDotsAndNumbers(version)) {
-        return `${CDN_PROVIDERS.symbols.url}/${pkg}`
-      }
-      return `${CDN_PROVIDERS.symbols.url}/${pkg}/${version}.js`
-    }
+    formatUrl: (pkg, version) =>
+      `${CDN_PROVIDERS.symbols.url}/${pkg}${version !== 'latest' ? `@${version}` : ''}/+esm`
   }
 }
 
@@ -77,15 +84,29 @@ export const getCDNUrl = (
  * bundle onto the page as raw HTML (tickets/smbls.md — the ~355KB "fake
  * importmap" bug). Splitting the tag here means neither the source nor any
  * minified/bundled copy of it ever carries that literal substring.
+ *
+ * `options.pin` — `{ [pkgName]: version }` — overrides the version declared in
+ * the project's dependencies. A host that INJECTS a runtime into the page must
+ * pin the matching importmap entry to the version it injected, or the page
+ * carries two different copies of the same package: one inlined, one resolved
+ * from whatever the registry's floating tag points at that hour. Deployed
+ * *.at.symbo.ls pages shipped `"smbls": "latest"` against an inlined IIFE from
+ * a months-old pin, and the client half moved 683 → 704 in a single evening
+ * under already-published sites (tickets/smbls.md).
  */
-export const getImportMapScript = (data, defaultProvider = 'skypack') => {
+export const getImportMapScript = (
+  data,
+  defaultProvider = 'skypack',
+  options = {}
+) => {
   const dependencies = data.dependencies || {}
   const keys = Object.keys(dependencies)
   if (!keys.length) return ''
 
+  const pin = options.pin || {}
   const imports = {}
   for (const pkgName of keys) {
-    const version = dependencies[pkgName] || 'latest'
+    const version = pin[pkgName] || dependencies[pkgName] || 'latest'
     imports[pkgName] = getCDNUrl(pkgName, version, defaultProvider)
   }
 

package/dist/cjs/cdn.js

@@ -1,3 +1,3 @@
-"use strict";var p=Object.defineProperty;var i=Object.getOwnPropertyDescriptor;var d=Object.getOwnPropertyNames;var g=Object.prototype.hasOwnProperty;var y=(s,t)=>{for(var r in t)p(s,r,{get:t[r],enumerable:!0})},f=(s,t,r,o)=>{if(t&&typeof t=="object"||typeof t=="function")for(let n of d(t))!g.call(s,n)&&n!==r&&p(s,n,{get:()=>t[n],enumerable:!(o=i(t,n))||o.enumerable});return s};var h=s=>f(p({},"__esModule",{value:!0}),s);var N={};y(N,{CDN_PROVIDERS:()=>e,PACKAGE_MANAGER_TO_CDN:()=>c,getCDNUrl:()=>m,getCdnProviderFromConfig:()=>C,getImportMapScript:()=>j});module.exports=h(N);function b(s){return/^[0-9.]+$/.test(s)&&s!==""}const e={skypack:{url:"https://cdn.skypack.dev",formatUrl:(s,t)=>`${e.skypack.url}/${s}${t!=="latest"?`@${t}`:""}`},esmsh:{url:"https://esm.sh",formatUrl:(s,t)=>`${e.esmsh.url}/${s}${t!=="latest"?`@${t}`:""}`},unpkg:{url:"https://unpkg.com",formatUrl:(s,t)=>`${e.unpkg.url}/${s}${t!=="latest"?`@${t}`:""}?module`},jsdelivr:{url:"https://cdn.jsdelivr.net/npm",formatUrl:(s,t)=>`${e.jsdelivr.url}/${s}${t!=="latest"?`@${t}`:""}/+esm`},symbols:{url:"https://pkg.symbo.ls",formatUrl:(s,t)=>s.split("/").length>2||!b(t)?`${e.symbols.url}/${s}`:`${e.symbols.url}/${s}/${t}.js`}},c={"esm.sh":"esmsh",unpkg:"unpkg",skypack:"skypack",jsdelivr:"jsdelivr","pkg.symbo.ls":"symbols"},C=(s={})=>{const{packageManager:t}=s;return c[t]||null},m=(s,t="latest",r="esmsh")=>(e[r]||e.esmsh).formatUrl(s,t),j=(s,t="skypack")=>{const r=s.dependencies||{},o=Object.keys(r);if(!o.length)return"";const n={};for(const l of o){const k=r[l]||"latest";n[l]=m(l,k,t)}const u='<script type="importmap">',a="<\/script>",$=`{
-    "imports": ${JSON.stringify(n,null,2)}
-  }`;return`${u}${$}${a}`};
+"use strict";var p=Object.defineProperty;var d=Object.getOwnPropertyDescriptor;var y=Object.getOwnPropertyNames;var f=Object.prototype.hasOwnProperty;var h=(t,s)=>{for(var e in s)p(t,e,{get:s[e],enumerable:!0})},C=(t,s,e,n)=>{if(s&&typeof s=="object"||typeof s=="function")for(let r of y(s))!f.call(t,r)&&r!==e&&p(t,r,{get:()=>s[r],enumerable:!(n=d(s,r))||n.enumerable});return t};var b=t=>C(p({},"__esModule",{value:!0}),t);var N={};h(N,{CDN_PROVIDERS:()=>o,PACKAGE_MANAGER_TO_CDN:()=>m,getCDNUrl:()=>a,getCdnProviderFromConfig:()=>U,getImportMapScript:()=>j});module.exports=b(N);const o={skypack:{url:"https://cdn.skypack.dev",formatUrl:(t,s)=>`${o.skypack.url}/${t}${s!=="latest"?`@${s}`:""}`},esmsh:{url:"https://esm.sh",formatUrl:(t,s)=>`${o.esmsh.url}/${t}${s!=="latest"?`@${s}`:""}`},unpkg:{url:"https://unpkg.com",formatUrl:(t,s)=>`${o.unpkg.url}/${t}${s!=="latest"?`@${s}`:""}?module`},jsdelivr:{url:"https://cdn.jsdelivr.net/npm",formatUrl:(t,s)=>`${o.jsdelivr.url}/${t}${s!=="latest"?`@${s}`:""}/+esm`},symbols:{url:"https://pkg.symbo.ls",formatUrl:(t,s)=>`${o.symbols.url}/${t}${s!=="latest"?`@${s}`:""}/+esm`}},m={"esm.sh":"esmsh",unpkg:"unpkg",skypack:"skypack",jsdelivr:"jsdelivr","pkg.symbo.ls":"symbols"},U=(t={})=>{const{packageManager:s}=t;return m[s]||null},a=(t,s="latest",e="esmsh")=>(o[e]||o.esmsh).formatUrl(t,s),j=(t,s="skypack",e={})=>{const n=t.dependencies||{},r=Object.keys(n);if(!r.length)return"";const $=e.pin||{},c={};for(const l of r){const i=$[l]||n[l]||"latest";c[l]=a(l,i,s)}const k='<script type="importmap">',u="<\/script>",g=`{
+    "imports": ${JSON.stringify(c,null,2)}
+  }`;return`${k}${g}${u}`};

package/dist/cjs/env.js

@@ -1,2 +1,2 @@
-"use strict";var n=Object.defineProperty;var x=Object.getOwnPropertyDescriptor;var g=Object.getOwnPropertyNames;var l=Object.prototype.hasOwnProperty;var N=(t,o)=>{for(var c in o)n(t,c,{get:o[c],enumerable:!0})},a=(t,o,c,i)=>{if(o&&typeof o=="object"||typeof o=="function")for(let e of g(o))!l.call(t,e)&&e!==c&&n(t,e,{get:()=>o[e],enumerable:!(i=x(o,e))||i.enumerable});return t};var d=t=>a(n({},"__esModule",{value:!0}),t);var P={};N(P,{ENV:()=>E,NODE_ENV:()=>s,getNev:()=>v,isDevelopment:()=>m,isLocal:()=>V,isNotProduction:()=>O,isProduction:()=>r,isStaging:()=>D,isTest:()=>p,isTesting:()=>u});module.exports=d(P);// @preserve-env
-const s="production",E=s,r=(t=s)=>t==="production",p=(t=s)=>t==="testing"||t==="test",u=p,D=(t=s)=>t==="staging",V=(t=s)=>t==="local",m=(t=s)=>t==="development"||t==="dev"||t==="local",v=(t,o=s)=>o[t],O=(t=s)=>!r(t);
+"use strict";var c=Object.defineProperty;var u=Object.getOwnPropertyDescriptor;var a=Object.getOwnPropertyNames;var l=Object.prototype.hasOwnProperty;var d=(t,o)=>{for(var n in o)c(t,n,{get:o[n],enumerable:!0})},x=(t,o,n,i)=>{if(o&&typeof o=="object"||typeof o=="function")for(let s of a(o))!l.call(t,s)&&s!==n&&c(t,s,{get:()=>o[s],enumerable:!(i=u(o,s))||i.enumerable});return t};var f=t=>x(c({},"__esModule",{value:!0}),t);var y={};d(y,{ENV:()=>N,NODE_ENV:()=>e,getNev:()=>D,isDevelopment:()=>E,isLocal:()=>m,isLoudDevRuntime:()=>v,isNotProduction:()=>V,isProduction:()=>p,isStaging:()=>h,isTest:()=>r,isTesting:()=>g});module.exports=f(y);// @preserve-env
+const e="production",N=e,p=(t=e)=>t==="production",r=(t=e)=>t==="testing"||t==="test",g=r,h=(t=e)=>t==="staging",m=(t=e)=>t==="local",E=(t=e)=>t==="development"||t==="dev"||t==="local",D=(t,o=e)=>o[t],V=(t=e)=>!p(t),v=t=>{const o=t&&"env"in t?t.env:typeof process<"u"&&process.env?"production":void 0;if(o&&o!=="production")return!0;const n=t&&"hostname"in t?t.hostname:typeof location<"u"?location.hostname:void 0;return typeof n=="string"&&n?n==="localhost"||n==="127.0.0.1"||n.endsWith(".localhost"):!1};

package/dist/esm/cdn.js

@@ -1,3 +1,3 @@
-function a(t){return/^[0-9.]+$/.test(t)&&t!==""}const r={skypack:{url:"https://cdn.skypack.dev",formatUrl:(t,s)=>`${r.skypack.url}/${t}${s!=="latest"?`@${s}`:""}`},esmsh:{url:"https://esm.sh",formatUrl:(t,s)=>`${r.esmsh.url}/${t}${s!=="latest"?`@${s}`:""}`},unpkg:{url:"https://unpkg.com",formatUrl:(t,s)=>`${r.unpkg.url}/${t}${s!=="latest"?`@${s}`:""}?module`},jsdelivr:{url:"https://cdn.jsdelivr.net/npm",formatUrl:(t,s)=>`${r.jsdelivr.url}/${t}${s!=="latest"?`@${s}`:""}/+esm`},symbols:{url:"https://pkg.symbo.ls",formatUrl:(t,s)=>t.split("/").length>2||!a(s)?`${r.symbols.url}/${t}`:`${r.symbols.url}/${t}/${s}.js`}},$={"esm.sh":"esmsh",unpkg:"unpkg",skypack:"skypack",jsdelivr:"jsdelivr","pkg.symbo.ls":"symbols"},i=(t={})=>{const{packageManager:s}=t;return $[s]||null},k=(t,s="latest",e="esmsh")=>(r[e]||r.esmsh).formatUrl(t,s),d=(t,s="skypack")=>{const e=t.dependencies||{},n=Object.keys(e);if(!n.length)return"";const l={};for(const o of n){const u=e[o]||"latest";l[o]=k(o,u,s)}const p='<script type="importmap">',c="<\/script>",m=`{
-    "imports": ${JSON.stringify(l,null,2)}
-  }`;return`${p}${m}${c}`};export{r as CDN_PROVIDERS,$ as PACKAGE_MANAGER_TO_CDN,k as getCDNUrl,i as getCdnProviderFromConfig,d as getImportMapScript};
+const e={skypack:{url:"https://cdn.skypack.dev",formatUrl:(t,s)=>`${e.skypack.url}/${t}${s!=="latest"?`@${s}`:""}`},esmsh:{url:"https://esm.sh",formatUrl:(t,s)=>`${e.esmsh.url}/${t}${s!=="latest"?`@${s}`:""}`},unpkg:{url:"https://unpkg.com",formatUrl:(t,s)=>`${e.unpkg.url}/${t}${s!=="latest"?`@${s}`:""}?module`},jsdelivr:{url:"https://cdn.jsdelivr.net/npm",formatUrl:(t,s)=>`${e.jsdelivr.url}/${t}${s!=="latest"?`@${s}`:""}/+esm`},symbols:{url:"https://pkg.symbo.ls",formatUrl:(t,s)=>`${e.symbols.url}/${t}${s!=="latest"?`@${s}`:""}/+esm`}},u={"esm.sh":"esmsh",unpkg:"unpkg",skypack:"skypack",jsdelivr:"jsdelivr","pkg.symbo.ls":"symbols"},i=(t={})=>{const{packageManager:s}=t;return u[s]||null},g=(t,s="latest",o="esmsh")=>(e[o]||e.esmsh).formatUrl(t,s),d=(t,s="skypack",o={})=>{const n=t.dependencies||{},l=Object.keys(n);if(!l.length)return"";const c=o.pin||{},p={};for(const r of l){const k=c[r]||n[r]||"latest";p[r]=g(r,k,s)}const m='<script type="importmap">',a="<\/script>",$=`{
+    "imports": ${JSON.stringify(p,null,2)}
+  }`;return`${m}${$}${a}`};export{e as CDN_PROVIDERS,u as PACKAGE_MANAGER_TO_CDN,g as getCDNUrl,i as getCdnProviderFromConfig,d as getImportMapScript};

package/dist/esm/env.js

@@ -1,2 +1,2 @@
 // @preserve-env
-const o="production",n=o,e=(t=o)=>t==="production",c=(t=o)=>t==="testing"||t==="test",i=c,r=(t=o)=>t==="staging",p=(t=o)=>t==="local",x=(t=o)=>t==="development"||t==="dev"||t==="local",g=(t,s=o)=>s[t],l=(t=o)=>!e(t);export{n as ENV,o as NODE_ENV,g as getNev,x as isDevelopment,p as isLocal,l as isNotProduction,e as isProduction,r as isStaging,c as isTest,i as isTesting};
+const o="production",i=o,s=(t=o)=>t==="production",c=(t=o)=>t==="testing"||t==="test",p=c,r=(t=o)=>t==="staging",u=(t=o)=>t==="local",a=(t=o)=>t==="development"||t==="dev"||t==="local",l=(t,e=o)=>e[t],d=(t=o)=>!s(t),x=t=>{const e=t&&"env"in t?t.env:typeof process<"u"&&process.env?"production":void 0;if(e&&e!=="production")return!0;const n=t&&"hostname"in t?t.hostname:typeof location<"u"?location.hostname:void 0;return typeof n=="string"&&n?n==="localhost"||n==="127.0.0.1"||n.endsWith(".localhost"):!1};export{i as ENV,o as NODE_ENV,l as getNev,a as isDevelopment,u as isLocal,x as isLoudDevRuntime,d as isNotProduction,s as isProduction,r as isStaging,c as isTest,p as isTesting};

package/env.js

@@ -13,3 +13,59 @@ export const isDevelopment = (env = NODE_ENV) =>
   env === 'development' || env === 'dev' || env === 'local'
 export const getNev = (key, env = NODE_ENV) => env[key]
 export const isNotProduction = (env = NODE_ENV) => !isProduction(env)
+
+/**
+ * FRAMEWORK-6: shared gate for dev-only loud-failure diagnostics, usable by
+ * any package (originally lived only in `@symbo.ls/element/src/devRuntime.js`
+ * — moved here so `@symbo.ls/scratch`, which `element` itself depends on,
+ * can gate its own loud-dev warnings without a reverse dependency).
+ *
+ * Why a hybrid gate instead of `process.env.NODE_ENV !== 'production'` alone:
+ * the dist build (`esbuild --minify`, default platform=browser) auto-defines
+ * `process.env.NODE_ENV` to `"production"` and dead-code-eliminates any
+ * branch gated on it — verified against `dist/esm/src/create.js`, where a
+ * NODE_ENV-only-gated warning was compiled out entirely. Consumers resolve
+ * `dist/esm`, not `src` (see the workspace bundle), so a NODE_ENV-only gate
+ * can never fire in a real dev browser session.
+ *
+ * Why not hostname alone: node/test consumers (vitest, SSR) resolve source,
+ * where NODE_ENV is live and `location` may not exist.
+ *
+ * So:
+ *  - build-time leg — `process.env.NODE_ENV` — live for source/test
+ *    consumers; folds to `false` at dist build time (esbuild substitutes the
+ *    literal, leaving the guarded `process` reference unreachable).
+ *  - runtime leg — `location.hostname` is `localhost`, `127.0.0.1`, or any
+ *    `*.localhost` — survives the dist build, so dev servers
+ *    (`workspace.localhost:1355` etc.) still get loud failures.
+ *
+ * A visitor on a production domain (`my.symbols.app`, `*.symbo.ls`, custom
+ * domains) matches neither leg and never sees console noise from this.
+ *
+ * @param {object} [overrides] test-only injection: `{ env, hostname }`
+ * @returns {boolean}
+ */
+export const isLoudDevRuntime = (overrides) => {
+  const env =
+    overrides && 'env' in overrides
+      ? overrides.env
+      : typeof process !== 'undefined' && process.env
+        ? process.env.NODE_ENV
+        : undefined
+  if (env && env !== 'production') return true
+
+  const hostname =
+    overrides && 'hostname' in overrides
+      ? overrides.hostname
+      : typeof location !== 'undefined'
+        ? location.hostname
+        : undefined
+  if (typeof hostname === 'string' && hostname) {
+    return (
+      hostname === 'localhost' ||
+      hostname === '127.0.0.1' ||
+      hostname.endsWith('.localhost')
+    )
+  }
+  return false
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symbo.ls/utils",
-  "version": "3.14.691",
+  "version": "3.14.707",
   "license": "CC-BY-NC-4.0",
   "type": "module",
   "module": "./dist/esm/index.js",