@venizia/ardor 0.4.8-1 → 0.4.8-10

package/README.md

@@ -13,6 +13,8 @@ control comes from `@venizia/ignis-inversion`, and the data layer speaks the que
 bun add @venizia/ardor @venizia/ignis-inversion @venizia/ignis-filter @venizia/ignis-kernel @venizia/ignis-helpers reflect-metadata
 ```
 
+The React-side peers (`react`, `react-dom`, `react-redux`, `@reduxjs/toolkit`, `@tanstack/react-query`, `ra-core`, `ra-i18n-polyglot`, `react-router-dom`) are installed too; the full `bun add` line is in the [setup guide](https://ardor.venizia.ai/guides/get-started/setup).
+
 ## The `Ardor` namespace
 
 `Ardor` gathers every React hook of the react and admin packages under one name: `Ardor.useRepository(...)`, `Ardor.useTranslate()`. It is the same function as the bare `useRepository`, the Rules of Hooks check the call, and a bundler keeps only the hooks you use, so it adds no bytes to an app.
@@ -20,8 +22,10 @@ bun add @venizia/ardor @venizia/ignis-inversion @venizia/ignis-filter @venizia/i
 ```tsx
 import { Ardor } from '@venizia/ardor';
 
+import { OrdersRepository } from './orders.repository';
+
 export const Orders = () => {
-  const repository = Ardor.useRepository({ key: 'repositories.Orders' });
+  const repository = Ardor.useRepository({ target: OrdersRepository });
 
   return <div>{String(repository)}</div>;
 };
@@ -29,7 +33,13 @@ export const Orders = () => {
 
 ## Moving to the new names
 
-`bun run ardor codemod namespace src` lists the removed bare names that have a replacement (`getRuntimeConfig` to `RuntimeConfig.get`, `isDefined` to `ValueUtility.isDefined`, `NullableType` to `undefined | null | void`, `Logger.getInstance({ scope })` to `LoggerFactory.getLogger([scope])`, ...) and the removed names with none, and writes nothing; `--write` applies it, `--check` fails while any is left, and `--hooks` also moves hooks imported from `@venizia/ardor` to `Ardor.useX`. It needs the `typescript` package.
+`bun run ardor codemod namespace src` lists the removed bare names that have a replacement (`getRuntimeConfig` to `RuntimeConfig.get`, `isDefined` to `ValueUtility.isDefined`, `NullableType` to `undefined | null | void`, `Logger.getInstance({ scope })` to `LoggerFactory.getLogger([scope])`, ...) and the removed names with none, and writes nothing; `--write` applies it (it refuses a file with local changes unless you add `--allow-dirty`), `--check` fails while any is left, and `--hooks` also moves hooks imported from `@venizia/ardor` to `Ardor.useX`. It needs the `typescript` package.
+
+## Subpaths
+
+- `@venizia/ardor/repository` - `HttpRepository` and the datasource settings; needs the optional peer `@venizia/ignis-connectors`.
+- `@venizia/ardor/testing` - `assertArdorApplicationBoots` and fakes of `ResizeObserver`, `IntersectionObserver`, `matchMedia`, storage and the clipboard, for your test suite.
+- `@venizia/ardor/vite` - `buildInfoFile`, a Vite plugin that writes the build info file; needs the optional peers `@venizia/ignis-boot` and `vite`.
 
 ## Quick start
 
@@ -108,7 +118,8 @@ export class Application extends BaseArdorApplication {
 ```
 
 The full guide, including the root component and the typed hooks, is in the
-[repository README](https://github.com/VENIZIA-AI/ardor#readme).
+[Quickstart](https://ardor.venizia.ai/guides/get-started/5-minute-quickstart) and the
+[references](https://ardor.venizia.ai/references/hooks).
 
 ## Migrating from `@minimaltech/ra-core-infra`
 

package/dist/codemod/bin.js

@@ -3,7 +3,7 @@ import { NamespaceCommand } from './cli.js';
 const USAGE = `Usage: ardor <command>
 
 Commands:
-  codemod namespace   move the deprecated bare names to the class members that replace them
+  codemod namespace   move the removed bare names to the class members that replace them
 
 Run "ardor codemod namespace --help" for the options.`;
 /** The `ardor` bin of `@venizia/ardor`: `ardor codemod namespace [paths...] [--write | --check]`. */

package/dist/codemod/cli.d.ts

@@ -1,6 +1,6 @@
 /** `ardor codemod namespace`: a dry run unless `--write`; `--check` is the dry run that fails on work left. */
 export declare class NamespaceCommand {
-    static readonly USAGE = "Usage: ardor codemod namespace [paths...] [--hooks] [--write [--allow-dirty] | --check]\n\nMoves the names removed from @venizia/ardor to what replaces them:\n\n  isDefined, isString, isNumber, isObject, isValidDate   ValueUtility.<name>\n  isBrowser                                             BrowserUtility.isBrowser\n  toDataUrl                                             FileUtility.toDataUrl\n  getRuntimeConfig                                      RuntimeConfig.get\n  createAppDispatch, createAppSelectors                 DispatchHooks.create, SelectorHooks.create\n  resolveApplicationProviders                           ApplicationProviders.resolve\n  hasPendingFeatureMessages, loadFeatureMessages        Features.hasPendingMessages, Features.loadMessages\n  NumberIdType, StringIdType, NullableType              number, string, undefined | null | void\n  BaseHelper, LogLevels, ILogger, TLogLevel             the same names from @venizia/ignis-helpers/core\n  Logger.getInstance({ scope }), new Logger({ scope })  LoggerFactory.getLogger([scope]) (enableDebug is dropped, with a note)\n  Logger (a type)                                       ILogger\n\nRemoved with nothing to write in their place, so only listed with their line: isEditableTarget,\nTDataCount, ISyncFC, App.DEFAULT_LOCALE, HeaderConstants.REQUEST_DEVICE_INFO, HeaderConstants.RESPONSE_FORMAT,\nthe enableDebug prop of ArdorApplication (pass logger instead), and a Logger use with no one-line form.\n\nIt rewrites a name imported from @venizia/ardor, @venizia/ardor-kernel, @venizia/ardor-react or\n@venizia/ardor-admin, its uses, and the import. It reads syntax only: a name the file also declares\nitself, a re-export by name and a class name already taken are listed with their line and left for you.\n\n  --hooks    also move a hook imported from @venizia/ardor to the Ardor namespace (useRepository()\n             becomes Ardor.useRepository()). A hook imported from @venizia/ardor-react or\n             @venizia/ardor-admin is never touched: those packages cannot import Ardor.\n  --write    write the changed files (without it, nothing is written)\n  --allow-dirty  with --write, also write a file that has local changes, such as one another codemod\n             just changed (devz codemod namespace-functions --write leaves the tree dirty)\n  --check    dry run that exits 1 when anything would change or is left (for CI)\n  --help     print this text and exit\n\nWith no flag it lists what would change and writes nothing. Inside a git repository it reads the\nfiles git knows (tracked, or untracked and not ignored), and --write refuses a file with local\nchanges (changed, staged or untracked), so git can undo the codemod: the file is listed as \"refused\"\nwith its path, the summary counts it and the run exits 1. Commit or stash it and run again, or run\nagain with --allow-dirty to write it anyway (it keeps the other codemod's edits). To run two codemods\none after the other in a dirty tree, give this one --write --allow-dirty.\nRun your formatter afterwards: the new names are appended to the import they join.";
+    static readonly USAGE = "Usage: ardor codemod namespace [paths...] [--hooks] [--write [--allow-dirty] | --check]\n\nMoves the names removed from @venizia/ardor to what replaces them:\n\n  isDefined, isString, isNumber, isObject, isValidDate   ValueUtility.<name>\n  isBrowser                                             BrowserUtility.isBrowser\n  toDataUrl                                             FileUtility.toDataUrl\n  getRuntimeConfig                                      RuntimeConfig.get\n  createAppDispatch, createAppSelectors                 DispatchHooks.create, SelectorHooks.create\n  resolveApplicationProviders                           ApplicationProviders.resolve\n  hasPendingFeatureMessages, loadFeatureMessages        Features.hasPendingMessages, Features.loadMessages\n  NumberIdType, StringIdType, NullableType              number, string, undefined | null | void\n  BaseHelper, LogLevels, ILogger, TLogLevel             the same names from @venizia/ignis-helpers/core\n  Logger.getInstance({ scope }), new Logger({ scope })  LoggerFactory.getLogger([scope]) (enableDebug is dropped, with a note)\n  Logger (a type)                                       ILogger\n  ISendResponse                                         INetworkResponse\n\nRemoved with nothing to write in their place, so only listed with their line: isEditableTarget,\nTDataCount, ISyncFC, IListFilter.offset (use skip; listed wherever a file that imports IListFilter or ListFilterBuilder reads or sets .offset), useSizer (use useElementSize), useInjectableContainer (renamed useApplicationContainer), App.DEFAULT_LOCALE, HeaderConstants.REQUEST_DEVICE_INFO, HeaderConstants.RESPONSE_FORMAT,\nthe enableDebug prop of ArdorApplication (pass logger instead), and a Logger use with no one-line form.\n\nIt rewrites a name imported from @venizia/ardor, @venizia/ardor-kernel, @venizia/ardor-react or\n@venizia/ardor-admin, its uses, and the import. It reads syntax only: a name the file also declares\nitself, a re-export by name and a class name already taken are listed with their line and left for you.\n\n  --hooks    also move a hook imported from @venizia/ardor to the Ardor namespace (useRepository()\n             becomes Ardor.useRepository()). A hook imported from @venizia/ardor-react or\n             @venizia/ardor-admin is never touched: those packages cannot import Ardor.\n  --write    write the changed files (without it, nothing is written)\n  --allow-dirty  with --write, also write a file that has local changes, such as one another codemod\n             just changed (devz codemod namespace-functions --write leaves the tree dirty)\n  --check    dry run that exits 1 when anything would change or is left (for CI)\n  --help     print this text and exit\n\n--write is all or nothing: it reads and rewrites every file in memory first, and writes only if every\nfile went through. A file that cannot be parsed or rewritten is listed as \"failed\" with its path, the\nrun exits 1 and nothing is written. A file that is not valid UTF-8 and would change is a failure too:\nit is left alone rather than damaged. Outside a git repository nothing can undo a write, so --write\nrefuses unless you give --allow-dirty.\n\nWith no flag it lists what would change and writes nothing. Inside a git repository it reads the\nfiles git knows (tracked, or untracked and not ignored), and --write refuses a file with local\nchanges (changed, staged or untracked), so git can undo the codemod: the file is listed as \"refused\"\nwith its path, the summary counts it and the run exits 1. Commit or stash it and run again, or run\nagain with --allow-dirty to write it anyway (it keeps the other codemod's edits). To run two codemods\none after the other in a dirty tree, give this one --write --allow-dirty.\nRun your formatter afterwards: the new names are appended to the import they join.";
     /** Runs the command and returns the exit code; prints to the console. */
     static run(opts: {
         root: string;
@@ -8,6 +8,15 @@ export declare class NamespaceCommand {
     }): Promise<number>;
     private static loadTypeScript;
     private static sweep;
+    /**
+     * Writes every file next to itself first, and renames them into place only when all were written,
+     * so a failure leaves no file changed. A file that is not the file that was read (a link swapped in,
+     * an edit made meanwhile) is refused: the rename replaces a link instead of following it, and a
+     * hard link is not written through.
+     */
+    private static writeAll;
+    /** Text for the terminal: control, format and line-separator characters, such as an escape sequence in a file name, become `?`. */
+    private static clean;
     private static report;
 }
 //# sourceMappingURL=cli.d.ts.map

package/dist/codemod/cli.js

@@ -1,4 +1,4 @@
-import { readFileSync, writeFileSync } from 'node:fs';
+import { chmodSync, existsSync, lstatSync, readFileSync, renameSync, rmSync, writeFileSync, } from 'node:fs';
 import { relative, resolve } from 'node:path';
 import { CodemodFiles } from './files.js';
 import { Migration } from './migrate.js';
@@ -17,9 +17,10 @@ Moves the names removed from @venizia/ardor to what replaces them:
   BaseHelper, LogLevels, ILogger, TLogLevel             the same names from @venizia/ignis-helpers/core
   Logger.getInstance({ scope }), new Logger({ scope })  LoggerFactory.getLogger([scope]) (enableDebug is dropped, with a note)
   Logger (a type)                                       ILogger
+  ISendResponse                                         INetworkResponse
 
 Removed with nothing to write in their place, so only listed with their line: isEditableTarget,
-TDataCount, ISyncFC, App.DEFAULT_LOCALE, HeaderConstants.REQUEST_DEVICE_INFO, HeaderConstants.RESPONSE_FORMAT,
+TDataCount, ISyncFC, IListFilter.offset (use skip; listed wherever a file that imports IListFilter or ListFilterBuilder reads or sets .offset), useSizer (use useElementSize), useInjectableContainer (renamed useApplicationContainer), App.DEFAULT_LOCALE, HeaderConstants.REQUEST_DEVICE_INFO, HeaderConstants.RESPONSE_FORMAT,
 the enableDebug prop of ArdorApplication (pass logger instead), and a Logger use with no one-line form.
 
 It rewrites a name imported from @venizia/ardor, @venizia/ardor-kernel, @venizia/ardor-react or
@@ -35,6 +36,12 @@ itself, a re-export by name and a class name already taken are listed with their
   --check    dry run that exits 1 when anything would change or is left (for CI)
   --help     print this text and exit
 
+--write is all or nothing: it reads and rewrites every file in memory first, and writes only if every
+file went through. A file that cannot be parsed or rewritten is listed as "failed" with its path, the
+run exits 1 and nothing is written. A file that is not valid UTF-8 and would change is a failure too:
+it is left alone rather than damaged. Outside a git repository nothing can undo a write, so --write
+refuses unless you give --allow-dirty.
+
 With no flag it lists what would change and writes nothing. Inside a git repository it reads the
 files git knows (tracked, or untracked and not ignored), and --write refuses a file with local
 changes (changed, staged or untracked), so git can undo the codemod: the file is listed as "refused"
@@ -97,6 +104,11 @@ export class NamespaceCommand {
         const paths = args.filter((argument) => !argument.startsWith('-'));
         const targets = (paths.length > 0 ? paths : ['.']).map((path) => resolve(root, path));
         const hooks = args.includes(CodemodFlags.HOOKS);
+        const missing = targets.filter((target) => !existsSync(target));
+        if (missing.length > 0) {
+            console.error(`ardor codemod: no such file or folder: ${missing.map(NamespaceCommand.clean).join(', ')}`);
+            return USAGE_ERROR_CODE;
+        }
         return NamespaceCommand.sweep({ root, ts, targets, hooks, isWrite, isCheck, isAllowDirty });
     }
     static async loadTypeScript() {
@@ -113,43 +125,118 @@ export class NamespaceCommand {
     static sweep(opts) {
         const { root, ts, targets, hooks, isWrite, isCheck, isAllowDirty } = opts;
         const files = [...new Set(targets.flatMap((target) => CodemodFiles.collect({ target })))];
-        const dirty = isWrite && !isAllowDirty
-            ? new Set(targets.flatMap((target) => [...(CodemodFiles.dirty({ target }) ?? [])]))
-            : new Set();
+        const dirtyOf = targets.map((target) => CodemodFiles.dirty({ target }));
+        if (isWrite && !isAllowDirty && dirtyOf.some((dirty) => dirty === undefined)) {
+            console.error(`ardor codemod: this is not a git repository, so nothing can undo ${CodemodFlags.WRITE}; run again with ${CodemodFlags.ALLOW_DIRTY} to write anyway`);
+            return 1;
+        }
+        const dirty = new Set(isAllowDirty ? [] : dirtyOf.flatMap((paths) => [...(paths ?? [])]));
         const changes = [];
+        const pending = [];
         const refused = [];
+        const failed = [];
         const left = [];
         const notes = [];
         for (const path of files) {
-            const text = readFileSync(path, 'utf8');
-            const result = Migration.run({ ts, fileName: path, text, hooks });
-            for (const finding of result.findings) {
-                (finding.kind === 'note' ? notes : left).push({ path, finding });
+            try {
+                const stat = lstatSync(path);
+                const bytes = readFileSync(path);
+                const text = bytes.toString('utf8');
+                const result = Migration.run({ ts, fileName: path, text, hooks });
+                for (const finding of result.findings) {
+                    (finding.kind === 'note' ? notes : left).push({ path, finding });
+                }
+                if (result.text === text) {
+                    continue;
+                }
+                if (!Buffer.from(text, 'utf8').equals(bytes)) {
+                    failed.push({ path, reason: 'it is not valid UTF-8, so a rewrite would damage it' });
+                    continue;
+                }
+                if (isWrite && dirty.has(path)) {
+                    refused.push(path);
+                    continue;
+                }
+                changes.push({ path, renamed: result.renamed });
+                pending.push({ path, text: result.text, stat });
             }
-            if (result.text === text) {
-                continue;
+            catch (error) {
+                failed.push({ path, reason: error instanceof Error ? error.message : String(error) });
             }
-            if (isWrite && dirty.has(path)) {
-                refused.push(path);
-                continue;
+        }
+        if (isWrite && failed.length === 0) {
+            failed.push(...NamespaceCommand.writeAll({ pending }));
+        }
+        return NamespaceCommand.report({
+            root,
+            isWrite,
+            isCheck,
+            changes,
+            refused,
+            failed,
+            left,
+            notes,
+        });
+    }
+    /**
+     * Writes every file next to itself first, and renames them into place only when all were written,
+     * so a failure leaves no file changed. A file that is not the file that was read (a link swapped in,
+     * an edit made meanwhile) is refused: the rename replaces a link instead of following it, and a
+     * hard link is not written through.
+     */
+    static writeAll(opts) {
+        const staged = [];
+        const failures = [];
+        for (const { path, text, stat } of opts.pending) {
+            const temp = `${path}.${process.pid}.codemod`;
+            try {
+                const now = lstatSync(path);
+                if (!now.isFile() || now.mtimeMs !== stat.mtimeMs || now.size !== stat.size) {
+                    failures.push({
+                        path,
+                        reason: 'it changed while the codemod ran, so it was not written',
+                    });
+                    continue;
+                }
+                writeFileSync(temp, text);
+                chmodSync(temp, now.mode & 0o7777);
+                staged.push({ path, temp });
+            }
+            catch (error) {
+                rmSync(temp, { force: true });
+                failures.push({ path, reason: error instanceof Error ? error.message : String(error) });
             }
-            changes.push({ path, renamed: result.renamed });
-            if (isWrite) {
-                writeFileSync(path, result.text);
+        }
+        if (failures.length > 0) {
+            for (const { temp } of staged) {
+                rmSync(temp, { force: true });
             }
+            return failures;
         }
-        return NamespaceCommand.report({ root, isWrite, isCheck, changes, refused, left, notes });
+        for (const { path, temp } of staged) {
+            renameSync(temp, path);
+        }
+        return [];
+    }
+    /** Text for the terminal: control, format and line-separator characters, such as an escape sequence in a file name, become `?`. */
+    static clean(text) {
+        return text.replace(/[\p{Cc}\p{Cf}\p{Zl}\p{Zp}]/gu, '?');
     }
     static report(opts) {
-        const { root, isWrite, isCheck, changes, refused, left, notes } = opts;
-        const verb = isWrite ? 'changed' : 'would change';
-        const show = (path) => relative(root, path) || path;
+        const { root, isWrite, isCheck, changes, refused, failed, left, notes } = opts;
+        // Nothing is written when a file failed, so the files are not "changed".
+        const verb = isWrite && failed.length === 0 ? 'changed' : 'would change';
+        // A path comes from the file system: a control character in it is shown as `?`, never sent to the terminal.
+        const show = (path) => NamespaceCommand.clean(relative(root, path) || path);
         for (const change of changes) {
             console.log(`${verb} ${show(change.path)} (${change.renamed} use${change.renamed === 1 ? '' : 's'})`);
         }
         for (const path of refused) {
             console.error(`refused ${show(path)}: it has local changes, so git cannot undo the codemod there; commit or stash it and run again, or run again with ${CodemodFlags.ALLOW_DIRTY}`);
         }
+        for (const { path, reason } of failed) {
+            console.error(NamespaceCommand.clean(`failed ${show(path)}: ${reason}`));
+        }
         // A note is a change made on purpose that is worth knowing; it is not work left, so --check ignores it.
         for (const { path, finding } of notes) {
             console.log(`note ${show(path)}:${finding.line} ${finding.name}: ${finding.reason}`);
@@ -157,9 +244,14 @@ export class NamespaceCommand {
         for (const { path, finding } of left) {
             console.error(`left ${show(path)}:${finding.line} ${finding.name}: ${finding.reason}`);
         }
-        const refusedNote = refused.length > 0 ? `, ${refused.length} refused (listed above)` : '';
+        const refusedNote = [
+            refused.length > 0 ? `, ${refused.length} refused (listed above)` : '',
+            failed.length > 0
+                ? `, ${failed.length} failed (listed above)${isWrite ? ', nothing was written' : ''}`
+                : '',
+        ].join('');
         console.log(`${changes.length} file${changes.length === 1 ? '' : 's'} ${verb}${refusedNote}, ${left.length} left for you${isWrite || changes.length === 0 ? '' : '. Run again with --write to apply.'}`);
-        if (refused.length > 0) {
+        if (refused.length > 0 || failed.length > 0) {
             return 1;
         }
         return isCheck && (changes.length > 0 || left.length > 0) ? 1 : 0;

package/dist/codemod/files.d.ts

@@ -7,7 +7,7 @@ export declare class CodemodFiles {
     static isSource(opts: {
         name: string;
     }): boolean;
-    /** Every source file under `target`; a file target is returned as it is. */
+    /** Every source file under `target`; a file target is returned as it is. A symlink or a file that is not a source file is never returned. */
     static collect(opts: {
         target: string;
     }): string[];

package/dist/codemod/files.js

@@ -1,5 +1,5 @@
 import { execFileSync } from 'node:child_process';
-import { existsSync, readdirSync, statSync } from 'node:fs';
+import { lstatSync, readdirSync, statSync } from 'node:fs';
 import { dirname, join } from 'node:path';
 const SKIPPED_DIRECTORIES = new Set(['node_modules', 'dist', 'build', '.git']);
 const SOURCE_PATTERN = /\.(?:ts|tsx|mts|cts)$/;
@@ -13,11 +13,15 @@ export class CodemodFiles {
     static isSource(opts) {
         return SOURCE_PATTERN.test(opts.name) && !DECLARATION_PATTERN.test(opts.name);
     }
-    /** Every source file under `target`; a file target is returned as it is. */
+    /** Every source file under `target`; a file target is returned as it is. A symlink or a file that is not a source file is never returned. */
     static collect(opts) {
         const { target } = opts;
-        if (statSync(target).isFile()) {
-            return [target];
+        // Read without following a link: a symlink is never a file to write, whatever it points to.
+        if (lstatSync(target).isFile()) {
+            return CodemodFiles.isSource({ name: target }) ? [target] : [];
+        }
+        if (!statSync(target).isDirectory()) {
+            return [];
         }
         return CodemodFiles.fromGit({ target }) ?? CodemodFiles.fromWalk({ target });
     }
@@ -42,7 +46,7 @@ export class CodemodFiles {
             .filter((path) => path !== '' && CodemodFiles.isSource({ name: path }))
             .filter((path) => !path.split('/').some((segment) => SKIPPED_DIRECTORIES.has(segment)))
             .map((path) => join(target, path))
-            .filter((path) => existsSync(path) && statSync(path).isFile());
+            .filter((path) => lstatSync(path, { throwIfNoEntry: false })?.isFile() === true);
     }
     static fromWalk(opts) {
         const files = [];

package/dist/codemod/logger.js

@@ -179,7 +179,7 @@ export class LoggerTransform {
                 findings.push({
                     line: lineOf(call),
                     name: 'enableDebug',
-                    reason: 'note: dropped. debug lines are off by default now (a browser, or `DEBUG` unset); turn them on with `LoggerFactory.use({ level: LogLevels.DEBUG })` at startup',
+                    reason: 'dropped. debug lines are off by default now (a browser, or `DEBUG` unset); turn them on with `LoggerFactory.use({ level: LogLevels.DEBUG })` at startup',
                     kind: 'note',
                 });
             }

package/dist/codemod/renames.d.ts

@@ -34,11 +34,23 @@ export declare class TypeRenames {
         name: string;
     }): string | undefined;
 }
+/** Types removed in favour of another export of the same packages: the import and each use are renamed. */
+export declare class TypeExportRenames {
+    static readonly TARGETS: Readonly<Record<string, string>>;
+    static find(opts: {
+        name: string;
+    }): string | undefined;
+}
 /** Exports and members removed with no code the codemod can write in their place. */
 export declare class RemovedNames {
     static readonly EXPORTS: Readonly<Record<string, string>>;
     /** Class name to removed static member to the reason. */
     static readonly MEMBERS: Readonly<Record<string, Readonly<Record<string, string>>>>;
+    /** A property removed from the list filter: listed in a file that imports one of `owners`, as the file may use it. */
+    static readonly PROPERTIES: Readonly<Record<string, {
+        owners: ReadonlySet<string>;
+        reason: string;
+    }>>;
     static findExport(opts: {
         name: string;
     }): string | undefined;

package/dist/codemod/renames.js

@@ -85,12 +85,23 @@ export class TypeRenames {
         return Object.hasOwn(this.TARGETS, opts.name) ? this.TARGETS[opts.name] : undefined;
     }
 }
+/** Types removed in favour of another export of the same packages: the import and each use are renamed. */
+export class TypeExportRenames {
+    static { this.TARGETS = {
+        ISendResponse: 'INetworkResponse',
+    }; }
+    static find(opts) {
+        return Object.hasOwn(this.TARGETS, opts.name) ? this.TARGETS[opts.name] : undefined;
+    }
+}
 /** Exports and members removed with no code the codemod can write in their place. */
 export class RemovedNames {
     static { this.EXPORTS = {
         isEditableTarget: 'nothing in ARDOR called it; check the event target in your own code',
         TDataCount: 'nothing in ARDOR used it; declare the shape you need',
         ISyncFC: 'write the function type, (props: TProps) => ReactNode',
+        useInjectableContainer: 'renamed: call useApplicationContainer',
+        useSizer: 'use useElementSize({ ref, box: "border-box", round: true }) with a ref in place of the id',
     }; }
     /** Class name to removed static member to the reason. */
     static { this.MEMBERS = {
@@ -100,6 +111,13 @@ export class RemovedNames {
             RESPONSE_FORMAT: 'nothing in ARDOR sent or read this header',
         },
     }; }
+    /** A property removed from the list filter: listed in a file that imports one of `owners`, as the file may use it. */
+    static { this.PROPERTIES = {
+        offset: {
+            owners: new Set(['IListFilter', 'ListFilterBuilder']),
+            reason: 'the list filter has no offset, use skip',
+        },
+    }; }
     static findExport(opts) {
         return Object.hasOwn(this.EXPORTS, opts.name) ? this.EXPORTS[opts.name] : undefined;
     }

package/dist/codemod/transform.d.ts

@@ -15,7 +15,7 @@ export interface INamespaceResult {
     findings: IFinding[];
 }
 /**
- * Rewrites the deprecated bare names of `@venizia/ardor` to their class members, in source text:
+ * Rewrites the removed bare names of `@venizia/ardor` to their class members, in source text:
  * `isDefined(x)` becomes `ValueUtility.isDefined(x)` and the import follows. With `hooks`, a hook
  * imported from `@venizia/ardor` itself becomes `Ardor.useX` (never one imported from the react or
  * admin package, which cannot import `Ardor`).

package/dist/codemod/transform.js

@@ -1,6 +1,6 @@
-import { FunctionRenames, HookRenames, NamespaceModules, RemovedNames, TypeRenames, } from './renames.js';
+import { FunctionRenames, HookRenames, NamespaceModules, RemovedNames, TypeExportRenames, TypeRenames, } from './renames.js';
 /**
- * Rewrites the deprecated bare names of `@venizia/ardor` to their class members, in source text:
+ * Rewrites the removed bare names of `@venizia/ardor` to their class members, in source text:
  * `isDefined(x)` becomes `ValueUtility.isDefined(x)` and the import follows. With `hooks`, a hook
  * imported from `@venizia/ardor` itself becomes `Ardor.useX` (never one imported from the react or
  * admin package, which cannot import `Ardor`).
@@ -66,13 +66,15 @@ export class NamespaceTransform {
                     });
                     continue;
                 }
-                const typeText = TypeRenames.find({ name: imported });
+                const exportName = TypeExportRenames.find({ name: imported });
+                const typeText = exportName ?? TypeRenames.find({ name: imported });
                 if (typeText) {
                     renames.push({
                         specifier,
                         declaration: statement,
                         local: specifier.name.text,
                         typeText,
+                        importName: exportName,
                         references: [],
                     });
                     continue;
@@ -139,7 +141,9 @@ export class NamespaceTransform {
             else if ((ts.isFunctionDeclaration(node) ||
                 ts.isClassDeclaration(node) ||
                 ts.isFunctionExpression(node) ||
-                ts.isClassExpression(node)) &&
+                ts.isClassExpression(node) ||
+                ts.isTypeAliasDeclaration(node) ||
+                ts.isInterfaceDeclaration(node)) &&
                 node.name) {
                 declared.add(node.name.text);
             }
@@ -162,6 +166,18 @@ export class NamespaceTransform {
                 });
                 return false;
             }
+            const { importName } = rename;
+            const takenBy = importName ? bindings.imported.get(importName) : undefined;
+            if (importName &&
+                (bindings.declared.has(importName) ||
+                    (takenBy && !NamespaceModules.isValid(takenBy.module)))) {
+                findings.push({
+                    line,
+                    name: rename.local,
+                    reason: `"${importName}" is already taken in this file; import it under another name and use it in place of ${rename.local}`,
+                });
+                return false;
+            }
             if (!owner || !rename.target) {
                 return true;
             }
@@ -240,7 +256,8 @@ export class NamespaceTransform {
         }
         if (rename.typeText !== undefined) {
             // A type is a name in a type position only: `NullableType[]` needs parentheses once replaced.
-            if (ts.isTypeReferenceNode(parent) && parent.typeName === node) {
+            if ((ts.isTypeReferenceNode(parent) && parent.typeName === node) ||
+                (ts.isExpressionWithTypeArguments(parent) && parent.expression === node)) {
                 const grand = parent.parent;
                 const wrap = rename.typeText.includes('|') &&
                     (ts.isArrayTypeNode(grand) ||
@@ -278,7 +295,32 @@ export class NamespaceTransform {
         if (owners.size === 0) {
             return;
         }
+        const imported = new Set(owners.values());
         const visit = (node) => {
+            let name;
+            if (ts.isPropertyAccessExpression(node) ||
+                ts.isPropertyAssignment(node) ||
+                ts.isShorthandPropertyAssignment(node)) {
+                name = node.name;
+            }
+            else if (ts.isBindingElement(node) && ts.isObjectBindingPattern(node.parent)) {
+                name = node.propertyName ?? node.name;
+            }
+            else if (ts.isElementAccessExpression(node) &&
+                ts.isStringLiteral(node.argumentExpression)) {
+                name = node.argumentExpression;
+            }
+            const key = name && (ts.isIdentifier(name) || ts.isStringLiteral(name)) ? name : undefined;
+            const property = key && Object.hasOwn(RemovedNames.PROPERTIES, key.text)
+                ? RemovedNames.PROPERTIES[key.text]
+                : undefined;
+            if (key && property && [...property.owners].some((owner) => imported.has(owner))) {
+                findings.push({
+                    line: sourceFile.getLineAndCharacterOfPosition(key.getStart(sourceFile)).line + 1,
+                    name: `.${key.text}`,
+                    reason: `removed: ${property.reason}`,
+                });
+            }
             if (ts.isPropertyAccessExpression(node) && ts.isIdentifier(node.expression)) {
                 const owner = owners.get(node.expression.text);
                 const reason = owner
@@ -323,7 +365,17 @@ export class NamespaceTransform {
             for (const owner of owners) {
                 added.add(owner);
             }
-            const names = [...kept, ...owners];
+            const types = [];
+            for (const { declaration: from, importName, specifier } of used) {
+                if (from === declaration &&
+                    importName &&
+                    !bindings.imported.has(importName) &&
+                    !added.has(importName)) {
+                    added.add(importName);
+                    types.push(`${specifier.isTypeOnly ? 'type ' : ''}${importName}`);
+                }
+            }
+            const names = [...kept, ...owners, ...types];
             if (names.length === 0) {
                 edits.push(NamespaceTransform.removeImport({ sourceFile, declaration, clause, named, ts }));
                 continue;

package/dist/index.d.ts

@@ -1,3 +1,24 @@
+/**
+ * Every ARDOR hook under one name: `Ardor.useRepository(...)` is the same function as
+ * `useRepository`. Call a member by its name; do not index with a computed key (`Ardor[name]`), which
+ * keeps every hook in a bundle.
+ *
+ * @example
+ * ```tsx
+ * import { Ardor, repository } from '@venizia/ardor';
+ *
+ * @repository()
+ * class OrdersRepository {
+ *   count() { return 3; }
+ * }
+ *
+ * export const Orders = () => {
+ *   const orders = Ardor.useRepository({ target: OrdersRepository });
+ *   const container = Ardor.useApplicationContainer();
+ *   return <span>{orders.count()} {container.isBound({ key: 'repositories.OrdersRepository' }) ? 'bound' : 'missing'}</span>;
+ * };
+ * ```
+ */
 export * as Ardor from './ardor.js';
 export * from '@venizia/ardor-kernel';
 export * from '@venizia/ardor-react';

package/dist/index.js

@@ -1,6 +1,27 @@
 // ARDOR - one entry point over the framework packages.
 // An application imports from `@venizia/ardor`; a consumer that needs only one layer installs that
 // package directly.
+/**
+ * Every ARDOR hook under one name: `Ardor.useRepository(...)` is the same function as
+ * `useRepository`. Call a member by its name; do not index with a computed key (`Ardor[name]`), which
+ * keeps every hook in a bundle.
+ *
+ * @example
+ * ```tsx
+ * import { Ardor, repository } from '@venizia/ardor';
+ *
+ * @repository()
+ * class OrdersRepository {
+ *   count() { return 3; }
+ * }
+ *
+ * export const Orders = () => {
+ *   const orders = Ardor.useRepository({ target: OrdersRepository });
+ *   const container = Ardor.useApplicationContainer();
+ *   return <span>{orders.count()} {container.isBound({ key: 'repositories.OrdersRepository' }) ? 'bound' : 'missing'}</span>;
+ * };
+ * ```
+ */
 export * as Ardor from './ardor.js';
 export * from '@venizia/ardor-kernel';
 export * from '@venizia/ardor-react';

package/dist/presets/app/files/.configs/builders/Dockerfile

@@ -17,6 +17,11 @@
 FROM docker.io/oven/bun:1.4.3-alpine AS deps
 
 # A private registry, when the build runs where the public one is not reachable. Empty by default.
+# The URL stays in the metadata of this stage and the next two (not in the final image): never put a user or a
+# password in it. For a registry that needs credentials, mount a bunfig.toml for the install only, with BuildKit:
+#   RUN --mount=type=secret,id=bunfig,target=/home/bun/.bunfig.toml,uid=1000 bun install ...
+#   docker build --secret id=bunfig,src=./bunfig.toml ...
+# A project that wants fixed base images pins them by digest (FROM image@sha256:...).
 ARG BUN_CONFIG_REGISTRY=
 ENV BUN_CONFIG_REGISTRY=${BUN_CONFIG_REGISTRY}
 

package/dist/presets/app/files/.configs/builders/docker-entrypoint.d/40-runtime-config.sh

@@ -10,8 +10,9 @@
 # What is published: the variables named VITE_ followed by capitals, digits and underscores, and nothing
 # else. That is Vite's own rule for what reaches the browser, so the same names work in dev and here.
 # Every published value is readable by every visitor: never put a secret in a VITE_ variable. A name
-# with SECRET, PASSWORD or TOKEN in it stops the container, to catch that mistake early (a name with KEY
-# is fine: public keys are normal). Values are escaped as JavaScript string content, so no value can
+# naming a secret (SECRET, PASSWORD, PASSWD, PASSPHRASE, PASSCODE, PASS as a word, PRIVATE, CREDENTIAL or TOKEN),
+# or a value that is a URL carrying a user and a password, stops the container, to catch that mistake early
+# (a name with KEY is fine, public keys are normal; this is a best-effort tripwire, not a secret scanner). Values are escaped as JavaScript string content, so no value can
 # end its string or the file.
 #
 # Required variables: APP_REQUIRED_ENV lists, comma separated, the variables the app cannot run without,
@@ -89,7 +90,8 @@ BEGIN {
     if (name !~ /^VITE_[A-Z0-9_]+$/) {
       continue
     }
-    if (name ~ /SECRET|PASSWORD|TOKEN/) {
+    # Names that say secret, and a URL that carries a user and a password; a value is never printed.
+    if (name ~ /SECRET|PASSWORD|PASSWD|PASSPHRASE|PASSCODE|(^|_)PASS(_|$)|PRIVATE|CREDENTIAL|TOKEN/ || ENVIRON[name] ~ /(^|:)\/\/[^\/@?# ]*:[^\/@?# ]+@/) {
       print "[runtime-config] " name " looks like a secret, and every VITE_ variable is published to every visitor: rename it or keep it out of VITE_" > "/dev/stderr"
       failed = 1
       continue

package/dist/presets/app/files/.configs/builders/docker-entrypoint.d/45-api-proxy.sh

@@ -10,6 +10,8 @@
 # The upstream is written into the nginx configuration, so it must be an address and nothing else: a value with a
 # character outside letters, digits, brackets (an IPv6 address) and `._:/@%+-` stops the container, naming the variable and never the value.
 #
+# NGINX_LOCAL_RESOLVERS is checked the same way: addresses and spaces.
+#
 # API_PROXY_SOURCE and API_PROXY_TARGET name other files, for the tests; they are not VITE_ names, so never published.
 set -eu
 
@@ -31,6 +33,23 @@ case "$API_UPSTREAM" in
     ;;
 esac
 
+# The resolvers are written into the nginx configuration too: addresses (IPv4, IPv6 in brackets) and
+# spaces between them, nothing else.
+case "${NGINX_LOCAL_RESOLVERS:-}" in
+  *[!\ ]*) ;;
+  *)
+    echo "[api-proxy] FATAL: NGINX_LOCAL_RESOLVERS is empty, and nginx needs at least one resolver for /api" >&2
+    exit 1
+    ;;
+esac
+
+case "${NGINX_LOCAL_RESOLVERS:-}" in
+  *[!][0-9A-Fa-f.:\ ]*)
+    echo "[api-proxy] FATAL: NGINX_LOCAL_RESOLVERS has a character that is not part of an address" >&2
+    exit 1
+    ;;
+esac
+
 # Only these two: nginx's own variables ($api_upstream, $host) stay as they are.
 envsubst '${API_UPSTREAM} ${NGINX_LOCAL_RESOLVERS}' < "$SOURCE" > "$TARGET"
 echo "[api-proxy] /api goes to the upstream of API_UPSTREAM"

package/dist/presets/app/files/.configs/builders/nginx-snippets/api-proxy.conf

@@ -9,6 +9,10 @@ location /api/ {
   proxy_pass $api_upstream;
   proxy_http_version 1.1;
   proxy_set_header Host $host;
+  # Behind a trusted front proxy (an ingress, a load balancer) this keeps the client address it appends. A
+  # browser can put its own value first in X-Forwarded-For, and $scheme is http here whatever the front proxy
+  # served: a backend must trust only the entries its own proxy added, and learn the scheme from that proxy. With
+  # no front proxy, replace the value with $remote_addr.
   proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
   proxy_set_header X-Forwarded-Proto $scheme;
 }

package/dist/presets/app/files/.configs/builders/nginx-snippets/security-headers.conf

@@ -4,8 +4,10 @@ add_header X-Content-Type-Options "nosniff" always;
 add_header Referrer-Policy "strict-origin-when-cross-origin" always;
 add_header X-Frame-Options "SAMEORIGIN" always;
 
-# A Content-Security-Policy depends on what the app loads, so none is sent. An example to adapt: start with
-# Content-Security-Policy-Report-Only, watch the browser console, then switch to the enforcing header. Admin
-# libraries often need 'unsafe-inline' for styles. `frame-ancestors` replaces X-Frame-Options where both exist.
-#
-# add_header Content-Security-Policy "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'" always;
+# A Content-Security-Policy, in report-only mode: the browser reports what it would block in its console and
+# blocks nothing. It fits the app as generated (the config.js script and the module script are of the same
+# origin, the favicon is a data: URL, the styles are linked, /api is of the same origin). Adapt it to what the app
+# loads (an API of another origin goes into connect-src, a CDN into script-src and style-src), watch the console,
+# then change the header name to Content-Security-Policy to enforce it. Admin libraries often need 'unsafe-inline'
+# for styles. `frame-ancestors` replaces X-Frame-Options where both exist.
+add_header Content-Security-Policy-Report-Only "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'" always;

package/dist/presets/app/files/.configs/builders/nginx.conf.template

@@ -8,6 +8,9 @@ server {
   listen 8080;
   server_name _;
 
+  # The Server header and the error pages name no nginx version.
+  server_tokens off;
+
   root /usr/share/nginx/html;
   index index.html;
 

package/dist/presets/app/files/.configs/builders/vite.config.mts

@@ -28,16 +28,15 @@ export default defineConfig(({ mode }) => {
       rolldownOptions: {
         output: {
           // Runs each module after the modules it imports: a split chunk can otherwise run a DI package
-          // before reflect-metadata (vitejs/vite#21866). It costs about 3% of the gzip size; keep it on.
+          // before reflect-metadata (vitejs/vite#21866). It costs about 3% of the gzip size of a small app
+          // and 3 to 20% of the first screen of an app with more than a thousand chunks: keep it on, or
+          // measure (the Vite setup guide).
           strictExecutionOrder: true,
-          // React, react-admin and the router weigh about 500 KB before any application code. Two
-          // vendor chunks keep the application's own chunk small, cacheable across a deploy, and
-          // under Vite's 500 KB warning.
+          // React gets a chunk of its own. There is no catch-all `vendor` group: it put the libraries of
+          // lazy routes into a chunk the first screen loads (+56 to +117% gzip on the two largest of six
+          // measured apps, a 6.5 MB chunk); the react group alone costs about 4%. The guide has the opt-in.
           codeSplitting: {
-            groups: [
-              { name: 'react', test: /node_modules[\\/](react|react-dom|scheduler)[\\/]/ },
-              { name: 'vendor', test: /node_modules/ },
-            ],
+            groups: [{ name: 'react', test: /node_modules[\\/](react|react-dom|scheduler)[\\/]/ }],
           },
         },
       },

package/dist/presets/app/preset.json

@@ -13,12 +13,12 @@
   "dependencies": {
     "@reduxjs/toolkit": "^2.13.0",
     "@tanstack/react-query": "^5.104.5",
-    "@venizia/ardor": "0.4.8-1",
-    "@venizia/ignis-connectors": "0.4.8-0",
-    "@venizia/ignis-filter": "0.4.7-0",
-    "@venizia/ignis-helpers": "0.4.8-0",
-    "@venizia/ignis-inversion": "0.4.7-0",
-    "@venizia/ignis-kernel": "0.4.8-0",
+    "@venizia/ardor": "0.4.8-10",
+    "@venizia/ignis-connectors": "0.4.8-9",
+    "@venizia/ignis-filter": "0.4.7-4",
+    "@venizia/ignis-helpers": "0.4.8-8",
+    "@venizia/ignis-inversion": "0.4.7-3",
+    "@venizia/ignis-kernel": "0.4.8-9",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "ra-core": "^5.15.5",
@@ -35,8 +35,8 @@
     "@types/bun": "^1.4.3",
     "@types/react": "^19",
     "@types/react-dom": "^19",
-    "@venizia/dev-configs": "0.4.8-0",
-    "@venizia/ignis-boot": "0.4.8-0",
+    "@venizia/dev-configs": "0.4.8-5",
+    "@venizia/ignis-boot": "0.4.8-8",
     "@vitejs/plugin-react": "^6.1.2",
     "eslint": "^10.13.0",
     "oxlint": "1.89.0",
@@ -47,11 +47,11 @@
   },
   "peers": {
     "@venizia/dev-configs": "^0.4.0 || ^0.4.8-0",
-    "@venizia/ignis-connectors": "^0.4.8-0",
-    "@venizia/ignis-filter": "^0.4.7-0",
-    "@venizia/ignis-helpers": "^0.4.8-0",
-    "@venizia/ignis-inversion": "^0.4.7-0",
-    "@venizia/ignis-kernel": "^0.4.8-0"
+    "@venizia/ignis-connectors": "^0.4.8-9",
+    "@venizia/ignis-filter": "^0.4.7-4",
+    "@venizia/ignis-helpers": "^0.4.8-8",
+    "@venizia/ignis-inversion": "^0.4.7-3",
+    "@venizia/ignis-kernel": "^0.4.8-9"
   },
   "scripts": {
     "server:dev": "vite --config .configs/builders/vite.config.mts",

package/dist/presets/lib/preset.json

@@ -5,14 +5,14 @@
   "devDependencies": {
     "@types/bun": "^1.4.3",
     "@types/react": "^19",
-    "@venizia/ardor": "^0.4.8-1",
-    "@venizia/dev-configs": "0.4.8-0",
-    "@venizia/ignis-boot": "0.4.8-0",
-    "@venizia/ignis-connectors": "0.4.8-0",
-    "@venizia/ignis-filter": "0.4.7-0",
-    "@venizia/ignis-helpers": "0.4.8-0",
-    "@venizia/ignis-inversion": "0.4.7-0",
-    "@venizia/ignis-kernel": "0.4.8-0",
+    "@venizia/ardor": "^0.4.8-10",
+    "@venizia/dev-configs": "0.4.8-5",
+    "@venizia/ignis-boot": "0.4.8-8",
+    "@venizia/ignis-connectors": "0.4.8-9",
+    "@venizia/ignis-filter": "0.4.7-4",
+    "@venizia/ignis-helpers": "0.4.8-8",
+    "@venizia/ignis-inversion": "0.4.7-3",
+    "@venizia/ignis-kernel": "0.4.8-9",
     "eslint": "^10.13.0",
     "oxlint": "1.89.0",
     "oxlint-tsgolint": "7.0.2004",
@@ -23,7 +23,7 @@
     "typescript": "^6.0.3"
   },
   "peerDependencies": {
-    "@venizia/ardor": "^0.4.8-1",
+    "@venizia/ardor": "^0.4.8-10",
     "react": "^19.3.1",
     "react-dom": "^19.3.1",
     "react-router-dom": "^7.18.4",

package/dist/testing.d.ts

@@ -1,7 +1,9 @@
 import * as inversion from '@venizia/ignis-inversion';
 import { type BaseArdorApplication } from '@venizia/ardor-kernel';
+export * from '@venizia/ardor-kernel/testing';
 /** A class (matched exactly), a class name, or a binding key; the shape the shared core takes. */
 export type TBootSkip = inversion.TBindingSkip;
+/** What `assertArdorApplicationBoots` leaves out, which locale it loads, and when an empty application passes. */
 export interface IAssertArdorApplicationBootsOptions {
     /**
      * Bindings the check leaves unresolved, for the few that open a socket or read the page when
@@ -16,8 +18,9 @@ export interface IAssertArdorApplicationBootsOptions {
     /** The locale whose messages must load. Default: the i18n provider's initial one. */
     locale?: string;
     /**
-     * Default `false`: an application with no service, repository, datasource, component or
-     * configuration and no feature proves nothing (usually the artifact index was empty).
+     * An application with no service, repository, datasource, component or configuration and no
+     * feature proves nothing (usually the artifact index was empty), so it fails unless this is `true`.
+     * @default false
      */
     allowEmpty?: boolean;
 }
@@ -34,27 +37,4 @@ export interface IAssertArdorApplicationBootsOptions {
  * build a new one (pass a factory) for each call.
  */
 export declare const assertArdorApplicationBoots: <Application extends BaseArdorApplication>(application: Application | (() => Application | Promise<Application>), options?: IAssertArdorApplicationBootsOptions) => Promise<Application>;
-/**
- * A `ResizeObserver` for a test host whose own `observe()` does nothing, such as happy-dom. Call
- * `FakeResizeObserver.install()` before the code under test creates its observer, and `flush` to
- * deliver a size. A callback runs at once; code that waits for an animation frame still needs the
- * test's own frame control.
- */
-export declare class FakeResizeObserver implements ResizeObserver {
-    private readonly callback;
-    private static readonly all;
-    private readonly targets;
-    constructor(callback: ResizeObserverCallback);
-    /** Replaces `globalThis.ResizeObserver` with the fake. The returned function puts the previous one back. */
-    static install(): () => void;
-    /** Calls every observer of `element` with one entry of that size, for the content and the border box alike. */
-    static flush(opts: {
-        element: Element;
-        width: number;
-        height: number;
-    }): void;
-    observe(target: Element): void;
-    unobserve(target: Element): void;
-    disconnect(): void;
-}
 //# sourceMappingURL=testing.d.ts.map

package/dist/testing.js

@@ -1,6 +1,8 @@
 import * as inversion from '@venizia/ignis-inversion';
 import { ApplicationProviders, Features } from '@venizia/ardor-admin';
 import { CoreBindings } from '@venizia/ardor-kernel';
+// The browser fakes live in the kernel, so the React and admin tests can use them without a cycle.
+export * from '@venizia/ardor-kernel/testing';
 /** The namespaces ARDOR binds its stereotyped classes under; the check resolves each binding of them. */
 const VERIFIED_NAMESPACES = [
     'services',
@@ -73,54 +75,4 @@ export const assertArdorApplicationBoots = async (application, options = {}) =>
     }
     return target;
 };
-/**
- * A `ResizeObserver` for a test host whose own `observe()` does nothing, such as happy-dom. Call
- * `FakeResizeObserver.install()` before the code under test creates its observer, and `flush` to
- * deliver a size. A callback runs at once; code that waits for an animation frame still needs the
- * test's own frame control.
- */
-export class FakeResizeObserver {
-    static { this.all = new Set(); }
-    constructor(callback) {
-        this.callback = callback;
-        this.targets = new Set();
-        FakeResizeObserver.all.add(this);
-    }
-    /** Replaces `globalThis.ResizeObserver` with the fake. The returned function puts the previous one back. */
-    static install() {
-        const previous = globalThis.ResizeObserver;
-        FakeResizeObserver.all.clear();
-        globalThis.ResizeObserver = FakeResizeObserver;
-        return () => {
-            globalThis.ResizeObserver = previous;
-        };
-    }
-    /** Calls every observer of `element` with one entry of that size, for the content and the border box alike. */
-    static flush(opts) {
-        const { element, width, height } = opts;
-        const box = { x: 0, y: 0, width, height, top: 0, left: 0, right: width, bottom: height };
-        const size = [{ inlineSize: width, blockSize: height }];
-        const entry = {
-            target: element,
-            contentRect: { ...box, toJSON: () => box },
-            contentBoxSize: size,
-            borderBoxSize: size,
-            devicePixelContentBoxSize: [],
-        };
-        for (const observer of FakeResizeObserver.all) {
-            if (observer.targets.has(element)) {
-                observer.callback([entry], observer);
-            }
-        }
-    }
-    observe(target) {
-        this.targets.add(target);
-    }
-    unobserve(target) {
-        this.targets.delete(target);
-    }
-    disconnect() {
-        this.targets.clear();
-    }
-}
 //# sourceMappingURL=testing.js.map

package/dist/vite/common/constants.d.ts

@@ -1,10 +1,16 @@
+/** The build info file's path when `fileName` is not set. */
 export declare const DEFAULT_BUILD_INFO_FILE_NAME = "build-info.json";
+/** The package-name prefix listed under `frameworks` when `frameworkScope` is not set. */
 export declare const DEFAULT_FRAMEWORK_SCOPE = "@venizia/";
 /** What to do when the commit is neither in the pipeline environment nor in git. */
 export declare class UnresolvedPolicies {
+    /** The build fails. */
     static readonly ERROR = "error";
+    /** The build goes on with the commit recorded as `unspecified`. */
     static readonly UNSPECIFIED = "unspecified";
+    /** Every accepted policy value. */
     static readonly SCHEME_SET: Set<string>;
+    /** Whether `value` is one of the policies. */
     static isValid(value: string): boolean;
 }
 //# sourceMappingURL=constants.d.ts.map

package/dist/vite/common/constants.js

@@ -1,10 +1,16 @@
+/** The build info file's path when `fileName` is not set. */
 export const DEFAULT_BUILD_INFO_FILE_NAME = 'build-info.json';
+/** The package-name prefix listed under `frameworks` when `frameworkScope` is not set. */
 export const DEFAULT_FRAMEWORK_SCOPE = '@venizia/';
 /** What to do when the commit is neither in the pipeline environment nor in git. */
 export class UnresolvedPolicies {
+    /** The build fails. */
     static { this.ERROR = 'error'; }
+    /** The build goes on with the commit recorded as `unspecified`. */
     static { this.UNSPECIFIED = 'unspecified'; }
+    /** Every accepted policy value. */
     static { this.SCHEME_SET = new Set([this.ERROR, this.UNSPECIFIED]); }
+    /** Whether `value` is one of the policies. */
     static isValid(value) {
         return this.SCHEME_SET.has(value);
     }

package/dist/vite/common/types.d.ts

@@ -1,15 +1,31 @@
 import type { IBuildInfoFile, TConstValue } from '@venizia/ardor-kernel';
 import type { TBuildInfoRecord } from '@venizia/ignis-helpers/core';
 import type { UnresolvedPolicies } from './constants.js';
+/** `'error'` or `'unspecified'`; see `UnresolvedPolicies`. */
 export type TUnresolvedPolicy = TConstValue<typeof UnresolvedPolicies>;
+/** The options of the `buildInfoFile` plugin. */
 export interface IBuildInfoFileOptions {
-    /** The app folder, where its package.json is. Default: the folder Vite runs in. */
+    /**
+     * The app folder, where its package.json is.
+     * @default process.cwd()
+     */
     root?: string;
-    /** The file's path under the output folder and under the dev server's base. Default: `build-info.json`. */
+    /**
+     * The file's path under the output folder and under the dev server's base.
+     * A relative path of letters, digits, `.`, `_` and `-`, with `/` between folders, ending `.json`, and
+     * no `..` segment; anything else throws.
+     * @default 'build-info.json'
+     */
     fileName?: string;
-    /** Dependencies whose name starts with this are listed under `frameworks`. Default: `@venizia/`. */
+    /**
+     * Dependencies whose name starts with this are listed under `frameworks`.
+     * @default '@venizia/'
+     */
     frameworkScope?: string;
-    /** What a build does when no commit can be found: `error` (default) or `unspecified`. The dev server always serves what it has and warns. */
+    /**
+     * What a build does when no commit can be found: `error` or `unspecified`. The dev server always serves what it has and warns.
+     * @default UnresolvedPolicies.ERROR
+     */
     onUnresolved?: TUnresolvedPolicy;
 }
 export type TGitReadResult = {

package/dist/vite/plugin.d.ts

@@ -15,6 +15,16 @@ export declare const createBuildInfoFilePlugin: (opts: {
  * Emits `build-info.json` into the build and serves it on the dev server: the commit, the branch and
  * the build time from the pipeline or git, the app's name and version, and the installed versions of
  * the framework packages it depends on. The shape is `IBuildInfoFile` of `@venizia/ardor`.
+ *
+ * @example
+ * ```ts
+ * import { buildInfoFile } from '@venizia/ardor/vite';
+ * import { defineConfig } from 'vite';
+ *
+ * export default defineConfig({
+ *   plugins: [buildInfoFile({ fileName: 'build-info.json', onUnresolved: 'unspecified' })],
+ * });
+ * ```
  */
 export declare const buildInfoFile: (opts?: IBuildInfoFileOptions) => Plugin;
 export {};

package/dist/vite/plugin.js

@@ -104,6 +104,16 @@ export const createBuildInfoFilePlugin = (opts) => {
  * Emits `build-info.json` into the build and serves it on the dev server: the commit, the branch and
  * the build time from the pipeline or git, the app's name and version, and the installed versions of
  * the framework packages it depends on. The shape is `IBuildInfoFile` of `@venizia/ardor`.
+ *
+ * @example
+ * ```ts
+ * import { buildInfoFile } from '@venizia/ardor/vite';
+ * import { defineConfig } from 'vite';
+ *
+ * export default defineConfig({
+ *   plugins: [buildInfoFile({ fileName: 'build-info.json', onUnresolved: 'unspecified' })],
+ * });
+ * ```
  */
 export const buildInfoFile = (opts = {}) => createBuildInfoFilePlugin({ options: opts, sources: defaultSources });
 //# sourceMappingURL=plugin.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@venizia/ardor",
-  "version": "0.4.8-1",
+  "version": "0.4.8-10",
   "description": "ARDOR - frontend application framework for the VENIZIA family. One entry point over ardor-kernel, ardor-react and ardor-admin: IGNIS inversion of control, a REST data layer, auth and i18n providers, and the React bindings for a react-admin application.",
   "keywords": [
     "ardor",
@@ -75,25 +75,24 @@
     "access": "public"
   },
   "scripts": {
-    "force-update": "sh ../../scripts/build/force-update.sh",
     "prepublishOnly": "make rebuild"
   },
   "dependencies": {
-    "@venizia/ardor-admin": "0.4.8-1",
-    "@venizia/ardor-kernel": "0.4.8-1",
-    "@venizia/ardor-react": "0.4.8-1"
+    "@venizia/ardor-admin": "0.4.8-10",
+    "@venizia/ardor-kernel": "0.4.8-10",
+    "@venizia/ardor-react": "0.4.8-10"
   },
   "devDependencies": {
     "@size-limit/preset-small-lib": "^14.2.0",
     "@types/bun": "^1.4.3",
     "@types/node": "^25.0.10",
-    "@venizia/dev-configs": "^0.4.8-0",
-    "@venizia/ignis-boot": "^0.4.8-0",
-    "@venizia/ignis-connectors": "^0.4.8-0",
-    "@venizia/ignis-filter": "^0.4.7-0",
-    "@venizia/ignis-helpers": "^0.4.8-0",
-    "@venizia/ignis-inversion": "^0.4.7-0",
-    "@venizia/ignis-kernel": "^0.4.8-0",
+    "@venizia/dev-configs": "^0.4.8-5",
+    "@venizia/ignis-boot": "^0.4.8-8",
+    "@venizia/ignis-connectors": "^0.4.8-9",
+    "@venizia/ignis-filter": "^0.4.7-4",
+    "@venizia/ignis-helpers": "^0.4.8-8",
+    "@venizia/ignis-inversion": "^0.4.7-3",
+    "@venizia/ignis-kernel": "^0.4.8-9",
     "eslint": "^10.13.0",
     "oxlint": "1.89.0",
     "oxlint-tsgolint": "7.0.2004",
@@ -105,12 +104,12 @@
   "peerDependencies": {
     "@reduxjs/toolkit": ">=2.13.0",
     "@tanstack/react-query": ">=5.104.5",
-    "@venizia/ignis-boot": "^0.4.8-0",
-    "@venizia/ignis-connectors": "^0.4.8-0",
-    "@venizia/ignis-filter": "^0.4.7-0",
-    "@venizia/ignis-helpers": "^0.4.8-0",
-    "@venizia/ignis-inversion": "^0.4.7-0",
-    "@venizia/ignis-kernel": "^0.4.8-0",
+    "@venizia/ignis-boot": "^0.4.8-8",
+    "@venizia/ignis-connectors": "^0.4.8-9",
+    "@venizia/ignis-filter": "^0.4.7-4",
+    "@venizia/ignis-helpers": "^0.4.8-8",
+    "@venizia/ignis-inversion": "^0.4.7-3",
+    "@venizia/ignis-kernel": "^0.4.8-9",
     "ra-core": ">=5.15.5",
     "ra-i18n-polyglot": ">=5.15.5",
     "react": ">=19.3.1",
@@ -174,7 +173,7 @@
         "react-router-dom",
         "reflect-metadata"
       ],
-      "limit": "1120 B"
+      "limit": "1050 B"
     }
   ],
   "engines": {