@volter/world-core 3.0.154 → 3.0.155

package/dist/generated/pack-facts.json

@@ -270,6 +270,9 @@
         {
           "host": "api.clerk.com"
         },
+        {
+          "host": "dashboard.clerk.com"
+        },
         {
           "suffix": ".clerk.accounts.dev"
         },
@@ -1309,8 +1312,7 @@
           "host": "api.linear.app"
         },
         {
-          "host": "linear.app",
-          "pathPattern": "^/oauth/"
+          "host": "linear.app"
         }
       ],
       "archetype": "crud",
@@ -1330,7 +1332,7 @@
         "comment",
         "issue_label"
       ],
-      "endpointEnvNone": "Linear uses api.linear.app/graphql and linear.app/oauth/authorize; the World claims the documented hosts",
+      "endpointEnvNone": "Linear uses api.linear.app/graphql and linear.app for its workspace and OAuth authorize page; the World claims those hosts",
       "credentialDoor": {
         "path": "/_twin/local-credentials",
         "body": {},
@@ -2023,6 +2025,10 @@
         },
         {
           "host": "inbound-cdn.resend.com"
+        },
+        {
+          "host": "resend.com",
+          "pathPattern": "^/emails(?:/|$)"
         }
       ],
       "archetype": "crud",
@@ -2179,6 +2185,9 @@
         ]
       },
       "hosts": [
+        {
+          "host": "app.slack.com"
+        },
         {
           "host": "slack.com"
         },

package/dist/src/client-bundle.js

@@ -1,7 +1,8 @@
 // A page's browser client from its `client/<name>.tsx` entry (the console's, the platform's), runtime-neutral (the
-// serve seam's helpers, docs/contributing/architecture.md#the-serve-seam): under Bun a `Bun.build` at serve time; under Node the PREBUILT `<name>.bundle.js` beside the entry, written at pack time
-// by scripts/publish/build.mjs into dist/client/. Built once per process and kept; a failed build
-// is retried on the next call. Nothing here runs at module scope.
+// serve seam's helpers, docs/contributing/architecture.md#the-serve-seam): serve an adjacent `<name>.bundle.js`
+// under either runtime, written at pack time by scripts/publish/build.mjs into dist/client/. Without one, Bun
+// builds the source at serve time and Node refuses it. Kept once per process; a failed attempt is retried on
+// the next call. Nothing here runs at module scope.
 import { existsSync, readFileSync } from 'node:fs';
 /** A file URL's path on this machine, without `node:url` (the modules that call it ride into browser
  *  bundles): percent-escapes decoded, and without the slash `URL.pathname` puts before a Windows drive
@@ -18,19 +19,18 @@ const PROCESS_SHIM = 'globalThis.process=globalThis.process||{env:{NODE_ENV:"pro
 export function bundleClient(entry) {
     let pending = bundles.get(entry);
     if (!pending) {
-        const bun = globalThis.Bun;
-        pending = (bun && typeof bun.build === 'function'
-            ? bun.build({ entrypoints: [entry], target: 'browser', minify: true }).then(async (result) => {
-                if (!result.success)
-                    throw new Error(result.logs.map((l) => l.message).join('\n') || `client build failed: ${entry}`);
-                return PROCESS_SHIM + await result.outputs[0].text();
-            })
-            : Promise.resolve().then(() => {
-                const prebuilt = entry.replace(/\.tsx?$/, '.bundle.js');
-                if (!existsSync(prebuilt))
-                    throw new Error(`client bundle missing at ${prebuilt} — the package's \`build\` writes it (scripts/publish/build.mjs); Node serves the prebuilt client`);
+        pending = Promise.resolve().then(async () => {
+            const prebuilt = entry.replace(/\.tsx?$/, '.bundle.js');
+            if (existsSync(prebuilt))
                 return PROCESS_SHIM + readFileSync(prebuilt, 'utf8');
-            }))
+            const bun = globalThis.Bun;
+            if (!bun || typeof bun.build !== 'function')
+                throw new Error(`client bundle missing at ${prebuilt} — the package's \`build\` writes it (scripts/publish/build.mjs); Node serves the prebuilt client`);
+            const result = await bun.build({ entrypoints: [entry], target: 'browser', minify: true });
+            if (!result.success)
+                throw new Error(result.logs.map((l) => l.message).join('\n') || `client build failed: ${entry}`);
+            return PROCESS_SHIM + await result.outputs[0].text();
+        })
             .catch((error) => { bundles.delete(entry); throw error; });
         bundles.set(entry, pending);
     }

package/dist/src/graphql-wire.d.ts

@@ -20,12 +20,16 @@ export declare class GraphqlError extends Error {
     readonly type?: string | undefined;
     constructor(message: string, type?: string | undefined);
 }
+type GraphqlLib = typeof import('graphql');
+export type GraphqlLibraryLoader = () => Promise<GraphqlLib>;
 /** A GraphQL endpoint over a schema and a pack's part: answers a request's `{query, variables, operationName}`. The
  *  context each resolver receives is made per request (the handler context). `unmodeled` answers a query selecting a
  *  field nothing models; `mutationRefused`, when given, a mutation the World may not make (a read-only twin). */
 export declare function graphqlEndpoint<C>(options: {
     sdl: string;
     part: GraphqlPart<C>;
+    /** The generated pack fetch's lazy import, resolving the library from the pack that declares it. */
+    loadLibrary?: GraphqlLibraryLoader;
     context: (request: Request) => Promise<C>;
     unmodeled: (field: {
         type: string;
@@ -33,3 +37,4 @@ export declare function graphqlEndpoint<C>(options: {
     }) => Response;
     mutationRefused?: (request: Request) => Response | undefined;
 }): (request: Request) => Promise<Response>;
+export {};

package/dist/src/graphql-wire.js

@@ -7,9 +7,9 @@
 // modeled; any other is answered by the manifest's `graphql.unmodeled`, naming the first field nothing models. An error
 // a resolver throws (`GraphqlError`) carries its `type`, as GitHub's GraphQL errors do.
 //
-// The `graphql` protocol library is loaded the first time a GraphQL request comes (installed by the pack's package.json,
-// as node-postgres is for the managed database): the kernel's own dependencies stay B1's, and importing the kernel
-// loads nothing.
+// The generated pack fetch supplies a lazy pack-local loader for the `graphql` protocol library installed by the pack's
+// package.json. Each endpoint caches its library on the first request; callers without a loader keep the kernel-relative
+// lazy import fallback. The kernel's own dependencies stay B1's, and importing the kernel loads nothing.
 /** An error a resolver answers, with the vendor's `type` for it (GitHub's NOT_FOUND, UNPROCESSABLE). */
 export class GraphqlError extends Error {
     type;
@@ -19,8 +19,6 @@ export class GraphqlError extends Error {
         this.name = 'GraphqlError';
     }
 }
-let lib;
-const graphqlLib = () => (lib ??= import('graphql'));
 const snake = (s) => s.replace(/[A-Z]/g, (c) => `_${c.toLowerCase()}`);
 /** A list as a Relay connection, paged by `first`/`last` and `after`. */
 function connection(items, args) {
@@ -43,6 +41,8 @@ function connection(items, args) {
  *  context each resolver receives is made per request (the handler context). `unmodeled` answers a query selecting a
  *  field nothing models; `mutationRefused`, when given, a mutation the World may not make (a read-only twin). */
 export function graphqlEndpoint(options) {
+    let lib;
+    const loadLibrary = options.loadLibrary ?? (() => import('graphql'));
     let schema;
     const { resolvers, aliases, stored } = options.part;
     // introspection (`__typename`, `__type`, `__schema` and the `__Type`/`__Field`/… meta types) is the vendor's schema
@@ -50,7 +50,7 @@ export function graphqlEndpoint(options) {
     // before it merges)
     const modeled = (type, field) => field.startsWith('__') || type.startsWith('__') || `${type}.${field}` in resolvers || !!aliases?.[type]?.[field] || !!stored?.[type]?.includes(field) || !!stored?.[type]?.includes(snake(field));
     return async (request) => {
-        const g = await graphqlLib();
+        const g = await (lib ??= loadLibrary());
         schema ??= g.buildSchema(options.sdl, { assumeValidSDL: true });
         const payload = (await request.clone().json().catch(() => ({})));
         let document;

package/dist/src/pack-fetch.d.ts

@@ -5,7 +5,7 @@ import type { ApplicationStandIn } from './events.js';
 import { type SocketEngine } from './sockets.js';
 import type { LiveEngine } from './live/types.js';
 import type { WebSocketUpgrade } from './serve-http.js';
-import { type GraphqlPart } from './graphql-wire.js';
+import { type GraphqlPart, type GraphqlLibraryLoader } from './graphql-wire.js';
 /** What a pack declares and writes, and nothing it assembles itself. */
 export type PackParts = {
     manifest: DerivedManifest;
@@ -39,6 +39,7 @@ export type PackParts = {
      *  state, served at the manifest's `graphql.paths` (graphql-wire.ts). */
     graphql?: GraphqlPart<HandlerContext> & {
         sdl: string;
+        loadLibrary?: GraphqlLibraryLoader;
     };
     /** `semantics/sockets.ts`: each socket's engine, by the id the manifest's `sockets` gives it (sockets.ts). */
     sockets?: Record<string, SocketEngine<HandlerContext>>;

package/dist/src/pack-fetch.js

@@ -160,7 +160,7 @@ export function createPackFetch(parts, options = {}) {
     // the GraphQL wire over the same state, at the paths the manifest names (graphql-wire.ts)
     const gql = m.graphql && parts.graphql ? m.graphql : undefined;
     const graphql = gql && parts.graphql ? graphqlEndpoint({
-        sdl: parts.graphql.sdl, part: parts.graphql,
+        sdl: parts.graphql.sdl, part: parts.graphql, loadLibrary: parts.graphql.loadLibrary,
         context: async (request) => contextFor(m, { request: request.clone(), operation: { id: 'graphql', method: 'POST', path: gql.paths[0], class: 'action' }, params: {} }, scope),
         unmodeled: ({ type, field }) => Response.json({ errors: [{ ...(gql.unmodeled.type ? { type: gql.unmodeled.type } : {}), message: gql.unmodeled.message.replace('{field}', field).replace('{type}', type) }] }, { status: gql.unmodeled.status ?? 200 }),
         mutationRefused: (request) => ((options.readOnly ?? false) || isReadOnlyRequest(request) ? vendorError(m, m.readOnly) : undefined),

package/generated/pack-facts.json

@@ -270,6 +270,9 @@
         {
           "host": "api.clerk.com"
         },
+        {
+          "host": "dashboard.clerk.com"
+        },
         {
           "suffix": ".clerk.accounts.dev"
         },
@@ -1309,8 +1312,7 @@
           "host": "api.linear.app"
         },
         {
-          "host": "linear.app",
-          "pathPattern": "^/oauth/"
+          "host": "linear.app"
         }
       ],
       "archetype": "crud",
@@ -1330,7 +1332,7 @@
         "comment",
         "issue_label"
       ],
-      "endpointEnvNone": "Linear uses api.linear.app/graphql and linear.app/oauth/authorize; the World claims the documented hosts",
+      "endpointEnvNone": "Linear uses api.linear.app/graphql and linear.app for its workspace and OAuth authorize page; the World claims those hosts",
       "credentialDoor": {
         "path": "/_twin/local-credentials",
         "body": {},
@@ -2023,6 +2025,10 @@
         },
         {
           "host": "inbound-cdn.resend.com"
+        },
+        {
+          "host": "resend.com",
+          "pathPattern": "^/emails(?:/|$)"
         }
       ],
       "archetype": "crud",
@@ -2179,6 +2185,9 @@
         ]
       },
       "hosts": [
+        {
+          "host": "app.slack.com"
+        },
         {
           "host": "slack.com"
         },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/world-core",
-  "version": "3.0.154",
+  "version": "3.0.155",
   "description": "The kernel of Volter World: one log per twin, branches as pointers, checkpoints, the fold that keeps a twin current, the head that performs a write against the vendor, references, and the git plane. A twin package builds on it; the runtime serves it.",
   "keywords": [
     "twin",

package/src/client-bundle.ts

@@ -1,7 +1,8 @@
 // A page's browser client from its `client/<name>.tsx` entry (the console's, the platform's), runtime-neutral (the
-// serve seam's helpers, docs/contributing/architecture.md#the-serve-seam): under Bun a `Bun.build` at serve time; under Node the PREBUILT `<name>.bundle.js` beside the entry, written at pack time
-// by scripts/publish/build.mjs into dist/client/. Built once per process and kept; a failed build
-// is retried on the next call. Nothing here runs at module scope.
+// serve seam's helpers, docs/contributing/architecture.md#the-serve-seam): serve an adjacent `<name>.bundle.js`
+// under either runtime, written at pack time by scripts/publish/build.mjs into dist/client/. Without one, Bun
+// builds the source at serve time and Node refuses it. Kept once per process; a failed attempt is retried on
+// the next call. Nothing here runs at module scope.
 import { existsSync, readFileSync } from 'node:fs';
 
 /** A file URL's path on this machine, without `node:url` (the modules that call it ride into browser
@@ -23,17 +24,15 @@ const PROCESS_SHIM = 'globalThis.process=globalThis.process||{env:{NODE_ENV:"pro
 export function bundleClient(entry: string): Promise<string> {
   let pending = bundles.get(entry);
   if (!pending) {
-    const bun = (globalThis as { Bun?: Partial<BunBuild> }).Bun;
-    pending = (bun && typeof bun.build === 'function'
-      ? (bun as BunBuild).build({ entrypoints: [entry], target: 'browser', minify: true }).then(async (result) => {
-          if (!result.success) throw new Error(result.logs.map((l) => l.message).join('\n') || `client build failed: ${entry}`);
-          return PROCESS_SHIM + await result.outputs[0]!.text();
-        })
-      : Promise.resolve().then(() => {
-          const prebuilt = entry.replace(/\.tsx?$/, '.bundle.js');
-          if (!existsSync(prebuilt)) throw new Error(`client bundle missing at ${prebuilt} — the package's \`build\` writes it (scripts/publish/build.mjs); Node serves the prebuilt client`);
-          return PROCESS_SHIM + readFileSync(prebuilt, 'utf8');
-        }))
+    pending = Promise.resolve().then(async () => {
+      const prebuilt = entry.replace(/\.tsx?$/, '.bundle.js');
+      if (existsSync(prebuilt)) return PROCESS_SHIM + readFileSync(prebuilt, 'utf8');
+      const bun = (globalThis as { Bun?: Partial<BunBuild> }).Bun;
+      if (!bun || typeof bun.build !== 'function') throw new Error(`client bundle missing at ${prebuilt} — the package's \`build\` writes it (scripts/publish/build.mjs); Node serves the prebuilt client`);
+      const result = await (bun as BunBuild).build({ entrypoints: [entry], target: 'browser', minify: true });
+      if (!result.success) throw new Error(result.logs.map((l) => l.message).join('\n') || `client build failed: ${entry}`);
+      return PROCESS_SHIM + await result.outputs[0]!.text();
+    })
       .catch((error) => { bundles.delete(entry); throw error; });
     bundles.set(entry, pending);
   }

package/src/graphql-wire.ts

@@ -7,9 +7,9 @@
 // modeled; any other is answered by the manifest's `graphql.unmodeled`, naming the first field nothing models. An error
 // a resolver throws (`GraphqlError`) carries its `type`, as GitHub's GraphQL errors do.
 //
-// The `graphql` protocol library is loaded the first time a GraphQL request comes (installed by the pack's package.json,
-// as node-postgres is for the managed database): the kernel's own dependencies stay B1's, and importing the kernel
-// loads nothing.
+// The generated pack fetch supplies a lazy pack-local loader for the `graphql` protocol library installed by the pack's
+// package.json. Each endpoint caches its library on the first request; callers without a loader keep the kernel-relative
+// lazy import fallback. The kernel's own dependencies stay B1's, and importing the kernel loads nothing.
 
 /** A resolver of one field, `Type.field`: its parent object, its arguments, and the request's handler context. */
 export type GraphqlResolver<C = unknown> = (source: Record<string, unknown>, args: Record<string, unknown>, ctx: C) => unknown;
@@ -32,8 +32,7 @@ export class GraphqlError extends Error {
 }
 
 type GraphqlLib = typeof import('graphql');
-let lib: Promise<GraphqlLib> | undefined;
-const graphqlLib = (): Promise<GraphqlLib> => (lib ??= import('graphql') as Promise<GraphqlLib>);
+export type GraphqlLibraryLoader = () => Promise<GraphqlLib>;
 
 const snake = (s: string): string => s.replace(/[A-Z]/g, (c) => `_${c.toLowerCase()}`);
 
@@ -59,10 +58,14 @@ function connection(items: unknown[], args: Record<string, unknown>): Record<str
 export function graphqlEndpoint<C>(options: {
   sdl: string;
   part: GraphqlPart<C>;
+  /** The generated pack fetch's lazy import, resolving the library from the pack that declares it. */
+  loadLibrary?: GraphqlLibraryLoader;
   context: (request: Request) => Promise<C>;
   unmodeled: (field: { type: string; field: string }) => Response;
   mutationRefused?: (request: Request) => Response | undefined;
 }): (request: Request) => Promise<Response> {
+  let lib: Promise<GraphqlLib> | undefined;
+  const loadLibrary = options.loadLibrary ?? (() => import('graphql'));
   let schema: import('graphql').GraphQLSchema | undefined;
   const { resolvers, aliases, stored } = options.part;
   // introspection (`__typename`, `__type`, `__schema` and the `__Type`/`__Field`/… meta types) is the vendor's schema
@@ -71,7 +74,7 @@ export function graphqlEndpoint<C>(options: {
   const modeled = (type: string, field: string): boolean =>
     field.startsWith('__') || type.startsWith('__') || `${type}.${field}` in resolvers || !!aliases?.[type]?.[field] || !!stored?.[type]?.includes(field) || !!stored?.[type]?.includes(snake(field));
   return async (request) => {
-    const g = await graphqlLib();
+    const g = await (lib ??= loadLibrary());
     schema ??= g.buildSchema(options.sdl, { assumeValidSDL: true });
     const payload = (await request.clone().json().catch(() => ({}))) as { query?: string; variables?: Record<string, unknown>; operationName?: string };
     let document: import('graphql').DocumentNode;

package/src/pack-fetch.ts

@@ -35,7 +35,7 @@ import { worldNow } from './world-clock.ts';
 import type { WebSocketUpgrade, WebSocketPeer } from './serve-http.ts';
 import { MACHINE_POOL, POOL_KINDS, resetFakePool } from './machines.ts';
 import { applyTwinWrite } from './serve.ts';
-import { graphqlEndpoint, type GraphqlPart } from './graphql-wire.ts';
+import { graphqlEndpoint, type GraphqlPart, type GraphqlLibraryLoader } from './graphql-wire.ts';
 import { gzipSync } from 'node:zlib';
 import { decompress } from './bytes.ts';
 import { decodedBodyLimit, oversizedBody, RequestBodyTooLargeError } from './request-body.ts';
@@ -71,7 +71,7 @@ export type PackParts = {
   lanes?: Record<string, LanePart>;
   /** `semantics/graphql.ts` with the vendor's schema (`generated/graphql-sdl.gen.json`): the GraphQL wire over the same
    *  state, served at the manifest's `graphql.paths` (graphql-wire.ts). */
-  graphql?: GraphqlPart<HandlerContext> & { sdl: string };
+  graphql?: GraphqlPart<HandlerContext> & { sdl: string; loadLibrary?: GraphqlLibraryLoader };
   /** `semantics/sockets.ts`: each socket's engine, by the id the manifest's `sockets` gives it (sockets.ts). */
   sockets?: Record<string, SocketEngine<HandlerContext>>;
   /** `semantics/board.ts`: the vendor's frames on the World's board, read from its state (`GET /twin/board`). */
@@ -229,7 +229,7 @@ export function createPackFetch(parts: PackParts, options: PackFetchOptions = {}
   // the GraphQL wire over the same state, at the paths the manifest names (graphql-wire.ts)
   const gql = m.graphql && parts.graphql ? m.graphql : undefined;
   const graphql = gql && parts.graphql ? graphqlEndpoint<HandlerContext>({
-    sdl: parts.graphql.sdl, part: parts.graphql,
+    sdl: parts.graphql.sdl, part: parts.graphql, loadLibrary: parts.graphql.loadLibrary,
     context: async (request) => contextFor(m, { request: request.clone(), operation: { id: 'graphql', method: 'POST', path: gql.paths[0]!, class: 'action' } as DerivedOperation, params: {} }, scope) as Promise<HandlerContext>,
     unmodeled: ({ type, field }) => Response.json({ errors: [{ ...(gql.unmodeled.type ? { type: gql.unmodeled.type } : {}), message: gql.unmodeled.message.replace('{field}', field).replace('{type}', type) }] }, { status: gql.unmodeled.status ?? 200 }),
     mutationRefused: (request) => ((options.readOnly ?? false) || isReadOnlyRequest(request) ? vendorError(m, m.readOnly) : undefined),