every-plugin 2.10.1 → 3.0.0-rc.10

package/dist/types.d.mts

@@ -1,7 +1,8 @@
+import { PluginWarningInfo } from "./runtime/errors.mjs";
 import { Plugin } from "./plugin.mjs";
+import { Context, Scope } from "effect";
+import { ContractedRouter, RouterClient } from "@orpc/server";
 import { AnyContractRouter, AnySchema, InferSchemaInput, InferSchemaOutput } from "@orpc/contract";
-import { Scope } from "effect";
-import { Router, RouterClient } from "@orpc/server";
 //#region src/types.d.ts
 /**
  * Registry bindings interface - populated via module augmentation
@@ -16,10 +17,22 @@ import { Router, RouterClient } from "@orpc/server";
  * ```
  */
 interface RegisteredPlugins {}
+type ModuleTransport = "inproc" | "rpc" | "mf";
+type ModuleSurface = "api" | "ui" | "jobs";
+interface ModuleEndpoint {
+  readonly transport: ModuleTransport;
+  readonly surface?: ModuleSurface;
+  readonly url: string;
+  readonly path?: `/${string}`;
+  readonly manifest?: string;
+}
+type PluginTransport = ModuleTransport;
+type PluginSurface = ModuleSurface;
+type PluginEndpoint = ModuleEndpoint;
 /**
  * Base type for any plugin instance.
  */
-type AnyPlugin = Plugin<AnyContractRouter, AnySchema, AnySchema, AnySchema | undefined, any>;
+type AnyPlugin = Plugin<AnyContractRouter, AnySchema, AnySchema, AnySchema | undefined>;
 /**
  * Loaded plugin constructor with binding information
  */
@@ -38,10 +51,12 @@ type AnyPluginConstructor = {
 type PluginRegistryEntry = {
   module: AnyPluginConstructor;
   remote?: string;
+  endpoint?: PluginEndpoint;
   version?: string;
   description?: string;
 } | {
   remote: string;
+  endpoint?: PluginEndpoint;
   version?: string;
   description?: string;
 };
@@ -93,11 +108,27 @@ type PluginContext<T> = T extends {
  * Extract router type from plugin binding
  * Uses 'any' for context to support nested router compositions
  */
-type PluginRouterType<T> = Router<PluginContract<T>, any>;
+type PluginRouterType<T> = ContractedRouter<PluginContract<T>, any>;
 /**
  * Extract client type from plugin binding
  */
 type PluginClientType<T> = RouterClient<PluginRouterType<T>>;
+/**
+ * Sibling plugin entry passed to `initialize` and `createRouter`.
+ * `client` creates a typed in-process client for the plugin's router;
+ * `router` is the raw implemented router for cross-plugin merging.
+ */
+type PluginServicesEntry<T = any> = {
+  client: (context?: PluginContextInput<T>) => PluginClientType<T>;
+  router: PluginRouterType<T>;
+  endpoint?: PluginEndpoint;
+};
+type ModuleClientEntry<C extends AnyContractRouter = AnyContractRouter> = {
+  client: (context?: Record<string, unknown>) => RouterClient<ContractedRouter<C, any>>;
+  router?: ContractedRouter<C, any>;
+  endpoint?: PluginEndpoint;
+};
+type PluginClientEntry<C extends AnyContractRouter = AnyContractRouter> = ModuleClientEntry<C>;
 /**
  * Extract plugin type from registered plugins by key
  * @param K - The plugin key
@@ -110,11 +141,7 @@ type RegisteredPlugin<K extends keyof R, R = RegisteredPlugins> = R[K] extends {
   variables: infer V extends AnySchema;
   secrets: infer S extends AnySchema;
   context: infer TRequestContext extends AnySchema | undefined;
-} ? Plugin<C, V, S, TRequestContext, any> : never : never;
-/**
- * Extract plugin constructor type from registry entry
- */
-type PluginConstructor<K extends keyof R, R = RegisteredPlugins> = RegisteredPlugin<K, R>;
+} ? Plugin<C, V, S, TRequestContext> : never : never;
 /**
  * Extract context input type from plugin binding (for client creation)
  */
@@ -126,10 +153,6 @@ type PluginConfigInput<T> = {
   variables: InferSchemaInput<PluginVariables<T>>;
   secrets: InferSchemaInput<PluginSecrets<T>>;
 };
-/**
- * Extract deps context type from plugin instance (used for initialization)
- */
-type ContextOf<T extends AnyPlugin> = T extends Plugin<AnyContractRouter, AnySchema, AnySchema, AnySchema | undefined, infer TDeps> ? TDeps : never;
 /**
  * Plugin metadata for remote loading
  */
@@ -142,10 +165,6 @@ type PluginMetadata = {
  * Runtime registry configuration supporting both module and remote entries
  */
 type PluginRegistry = Record<string, PluginRegistryEntry>;
-/**
- * Legacy metadata-only registry (for backwards compatibility)
- */
-type PluginMetadataRegistry = Record<string, PluginMetadata>;
 /**
  * Configuration for secrets injection.
  * Secrets are hydrated into plugin configs using template replacement.
@@ -174,11 +193,19 @@ interface InitializedPlugin<T extends AnyPlugin = AnyPlugin> {
   readonly plugin: T;
   readonly metadata: PluginMetadata;
   readonly config: {
+    pluginId: string;
     variables: InferSchemaOutput<T["configSchema"]["variables"]>;
     secrets: InferSchemaOutput<T["configSchema"]["secrets"]>;
   };
-  readonly context: ContextOf<T>;
-  readonly scope: Scope.CloseableScope;
+  /**
+   * Built Effect context from the plugin's initialize Layer. Provided to
+   * handlers as `effect/context` — `.effect()` handlers `yield* Tag`,
+   * plain handlers use `Context.get(context["effect/context"], Tag)`.
+   */
+  readonly effectContext: Context.Context<any>;
+  readonly scope: Scope.Closeable;
+  /** Non-fatal config warnings collected during initialization (empty when none). */
+  readonly warnings: PluginWarningInfo[];
 }
 /**
  * Helper type to detect type errors when looking up RegisteredPlugins
@@ -202,17 +229,6 @@ type UsePluginResult<K extends keyof R, R = RegisteredPlugins> = VerifyPluginBin
   readonly metadata: PluginMetadata;
   readonly initialized: InitializedPlugin<RegisteredPlugin<K, R>>;
 } : VerifyPluginBinding<K, R>;
-/**
- * Runtime options
- */
-interface RuntimeOptions {
-  isolation?: "strict" | "shared" | "none";
-  memoryLimit?: string;
-  concurrency?: number;
-  resourceTimeout?: string;
-  debug?: boolean;
-  metrics?: boolean;
-}
 /**
  * Extract registry type from runtime instance or use type directly
  * This allows EveryPlugin.Infer to work with both:
@@ -251,17 +267,7 @@ declare namespace EveryPlugin {
 interface PluginRuntimeConfig<R extends Record<string, PluginRegistryEntry> = Record<string, PluginRegistryEntry>> {
   registry: R;
   secrets?: SecretsConfig;
-  options?: RuntimeOptions;
-}
-/**
- * Legacy plugin runtime configuration (metadata-only registry)
- * @deprecated Use PluginRuntimeConfig with module/remote entries instead
- */
-interface LegacyPluginRuntimeConfig {
-  registry: PluginMetadataRegistry;
-  secrets?: SecretsConfig;
-  options?: RuntimeOptions;
 }
 //#endregion
-export { AnyPlugin, AnyPluginConstructor, ContextOf, EveryPlugin, ExtractPluginType, InferRegistryFromEntries, InitializedPlugin, LegacyPluginRuntimeConfig, LoadedPlugin, PluginClientType, PluginConfigInput, PluginConstructor, PluginContext, PluginContextInput, PluginContract, PluginInstance, PluginMetadata, PluginMetadataRegistry, PluginRegistry, PluginRegistryEntry, PluginRouterType, PluginRuntimeConfig, PluginSecrets, PluginVariables, RegisteredPlugin, RegisteredPlugins, RuntimeOptions, SecretsConfig, UsePluginResult };
+export { AnyPlugin, AnyPluginConstructor, EveryPlugin, ExtractPluginType, InferRegistryFromEntries, InitializedPlugin, LoadedPlugin, ModuleClientEntry, ModuleEndpoint, ModuleSurface, ModuleTransport, PluginClientEntry, PluginClientType, PluginConfigInput, PluginContext, PluginContextInput, PluginContract, PluginEndpoint, PluginInstance, PluginMetadata, PluginRegistry, PluginRegistryEntry, PluginRouterType, PluginRuntimeConfig, PluginSecrets, PluginServicesEntry, PluginSurface, PluginTransport, PluginVariables, RegisteredPlugin, RegisteredPlugins, SecretsConfig, UsePluginResult };
 //# sourceMappingURL=types.d.mts.map

package/dist/types.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.mts","names":[],"sources":["../src/types.ts"],"mappings":";;;;;;;;;;;;;;;;;UAuBiB;;;;KAKL,YAAY,OAAO,mBAAmB,WAAW,WAAW;;;;KAK5D;UACF;EACR;IACE,UAAU;IACV,WAAW;IACX,SAAS;IACT,SAAS;;;;;;KAOD;EACN,QAAQ;EAAsB;EAAiB;EAAkB;;EACjE;EAAgB;EAAkB;;;;;KAK5B,kBAAkB,KAAK;EAAY,cAAc;IAAM;;;;KAKvD,yBAAyB,UAAU,eAAe,2BAC3D,WAAW,IAAI,EAAE;EAAa,cAAc;IACzC,IACA,gBAAgB,oBACd,kBAAkB;;;;KAOd,eAAe,KAAK;EAC9B;IAAW,gBAAgB,UAAU;;IAEnC;;;;KAMQ,gBAAgB,KAAK;EAAY;IAAW,iBAAiB,UAAU;;IAC/E;;;;KAMQ,cAAc,KAAK;EAAY;IAAW,eAAe,UAAU;;IAC3E;;;;KAMQ,cAAc,KAAK;EAC7B;IAAW,eAAe,UAAU;;IAElC;;;;;KAOQ,iBAAiB,KAAK,OAAO,eAAe;;;;KAK5C,iBAAiB,KAAK,aAAa,iBAAiB;;;;;;KAOpD,iBAAiB,gBAAgB,GAAG,IAAI,qBAAqB,EAAE;EACzE,eAAe;IAEb;EACE,gBAAgB,UAAU;EAC1B,iBAAiB,UAAU;EAC3B,eAAe,UAAU;EACzB,eAAe,wBAAwB;IAEvC,OAAO,GAAG,GAAG,GAAG;;;;KAOV,kBAAkB,gBAAgB,GAAG,IAAI,qBAAqB,iBAAiB,GAAG;;;;KAKlF,mBAAmB,KAC7B,cAAc,WAAW,YAAY,iBAAiB,cAAc;;;;KAK1D,kBAAkB;EAC5B,WAAW,iBAAiB,gBAAgB;EAC5C,SAAS,iBAAiB,cAAc;;;;;KAM9B,UAAU,UAAU,aAC9B,UAAU,OAAO,mBAAmB,WAAW,WAAW,6BAA6B,SACnF;;;;KAMM;WACD;WACA;WACA;;;;;KAMC,iBAAiB,eAAe;;;;KAKhC,yBAAyB,eAAe;;;;;UAMnC;GACd;;;;;UAMc,aAAa,UAAU,YAAY;WACzC,gBAAgB;WAChB,UAAU;;;;;UAMJ,eAAe,UAAU,YAAY;WAC3C,QAAQ;WACR,UAAU;;;;;UAMJ,kBAAkB,UAAU,YAAY;WAC9C,QAAQ;WACR,UAAU;WACV;IACP,WAAW,kBAAkB;IAC7B,SAAS,kBAAkB;;WAEpB,SAAS,UAAU;WACnB,OAAO,MAAM;;;;;KAMnB,oBAAoB,gBAAgB,GAAG,IAAI,qBAAqB,EAAE;EACrE,eAAe;IAEb;EACE,UAAU;EACV,WAAW;EACX,SAAS;EACT,SAAS;wBAGI,4IACF;;;;;;KAOL,gBAAgB,gBAAgB,GAAG,IAAI,qBACjD,oBAAoB,GAAG;WAER,eAAe,UAAU,mBAAmB,EAAE,QAAQ,iBAAiB,EAAE;WACzE,QAAQ,iBAAiB,EAAE;WAC3B,UAAU;WACV,aAAa,kBAAkB,iBAAiB,GAAG;IAE9D,oBAAoB,GAAG;;;;UAKZ;EACf;EACA;EACA;EACA;EACA;EACA;;;;;;;;KASG,WAAW,KAAK;EAAY,uBAAuB;IAAM,IAAI;;;;kBAKjD;;;;;;;;;;;;;;;;;;OAkBH,MACV,kBACA,SAAS,qBACP,gBAAgB,WAAW,UAAU,gBAAgB,GAAG,WAAW;;;;;UAMxD,oBACf,UAAU,eAAe,uBAAuB,eAAe;EAE/D,UAAU;EACV,UAAU;EACV,UAAU;;;;;;UAOK;EACf,UAAU;EACV,UAAU;EACV,UAAU"}
+{"version":3,"file":"types.d.mts","names":[],"sources":["../src/types.ts"],"mappings":";;;;;;;;;;;;;;;;;;UAwBiB;KAEL;KAEA;UAEK;WACN,WAAW;WACX,UAAU;WACV;WACA;WACA;;KAGC,kBAAkB;KAElB,gBAAgB;KAEhB,iBAAiB;;;;KAKjB,YAAY,OAAO,mBAAmB,WAAW,WAAW;;;;KAK5D;UACF;EACR;IACE,UAAU;IACV,WAAW;IACX,SAAS;IACT,SAAS;;;;;;KAOD;EAEN,QAAQ;EACR;EACA,WAAW;EACX;EACA;;EAEA;EAAgB,WAAW;EAAgB;EAAkB;;;;;KAKvD,kBAAkB,KAAK;EAAY,cAAc;IAAM;;;;KAKvD,yBAAyB,UAAU,eAAe,2BAC3D,WAAW,IAAI,EAAE;EAAa,cAAc;IACzC,IACA,gBAAgB,oBACd,kBAAkB;;;;KAOd,eAAe,KAAK;EAC9B;IAAW,gBAAgB,UAAU;;IAEnC;;;;KAMQ,gBAAgB,KAAK;EAAY;IAAW,iBAAiB,UAAU;;IAC/E;;;;KAMQ,cAAc,KAAK;EAAY;IAAW,eAAe,UAAU;;IAC3E;;;;KAMQ,cAAc,KAAK;EAC7B;IAAW,eAAe,UAAU;;IAElC;;;;;KAOQ,iBAAiB,KAAK,iBAAiB,eAAe;;;;KAKtD,iBAAiB,KAAK,aAAa,iBAAiB;;;;;;KAOpD,oBAAoB;EAC9B,SAAS,UAAU,mBAAmB,OAAO,iBAAiB;EAC9D,QAAQ,iBAAiB;EACzB,WAAW;;KAGD,kBAAkB,UAAU,oBAAoB;EAC1D,SAAS,UAAU,4BAA4B,aAAa,iBAAiB;EAC7E,SAAS,iBAAiB;EAC1B,WAAW;;KAGD,kBAAkB,UAAU,oBAAoB,qBAC1D,kBAAkB;;;;;;KAOR,iBAAiB,gBAAgB,GAAG,IAAI,qBAAqB,EAAE;EACzE,eAAe;IAEb;EACE,gBAAgB,UAAU;EAC1B,iBAAiB,UAAU;EAC3B,eAAe,UAAU;EACzB,eAAe,wBAAwB;IAEvC,OAAO,GAAG,GAAG,GAAG;;;;KAOV,mBAAmB,KAC7B,cAAc,WAAW,YAAY,iBAAiB,cAAc;;;;KAK1D,kBAAkB;EAC5B,WAAW,iBAAiB,gBAAgB;EAC5C,SAAS,iBAAiB,cAAc;;;;;KAM9B;WACD;WACA;WACA;;;;;KAMC,iBAAiB,eAAe;;;;;UAM3B;GACd;;;;;UAMc,aAAa,UAAU,YAAY;WACzC,gBAAgB;WAChB,UAAU;;;;;UAMJ,eAAe,UAAU,YAAY;WAC3C,QAAQ;WACR,UAAU;;;;;UAMJ,kBAAkB,UAAU,YAAY;WAC9C,QAAQ;WACR,UAAU;WACV;IACP;IACA,WAAW,kBAAkB;IAC7B,SAAS,kBAAkB;;;;;;;WAOpB,eAAe,QAAQ;WACvB,OAAO,MAAM;;WAEb,UAAU;;;;;KAMhB,oBAAoB,gBAAgB,GAAG,IAAI,qBAAqB,EAAE;EACrE,eAAe;IAEb;EACE,UAAU;EACV,WAAW;EACX,SAAS;EACT,SAAS;wBAGI,4IACF;;;;;;KAOL,gBAAgB,gBAAgB,GAAG,IAAI,qBACjD,oBAAoB,GAAG;WAER,eAAe,UAAU,mBAAmB,EAAE,QAAQ,iBAAiB,EAAE;WACzE,QAAQ,iBAAiB,EAAE;WAC3B,UAAU;WACV,aAAa,kBAAkB,iBAAiB,GAAG;IAE9D,oBAAoB,GAAG;;;;;;;KAQxB,WAAW,KAAK;EAAY,uBAAuB;IAAM,IAAI;;;;kBAKjD;;;;;;;;;;;;;;;;;;OAkBH,MACV,kBACA,SAAS,qBACP,gBAAgB,WAAW,UAAU,gBAAgB,GAAG,WAAW;;;;;UAMxD,oBACf,UAAU,eAAe,uBAAuB,eAAe;EAE/D,UAAU;EACV,UAAU"}

package/dist/ui/manifest/construct.cjs

@@ -0,0 +1,319 @@
+const require_ui_manifest_contract = require('./contract.cjs');
+const require_mount_registry = require('./mount-registry.cjs');
+const require_descriptor = require('./descriptor.cjs');
+const require_nav = require('./nav.cjs');
+const require_route_config = require('./route-config.cjs');
+let _tanstack_react_router = require("@tanstack/react-router");
+
+//#region src/ui/manifest/construct.ts
+/**
+* Host-side route-graph construction (ADR 0008 §1): manifests + route
+* configs in → host-built tree out. The host constructs ITS OWN Route
+* objects from validated manifest data via public `createRoute` APIs; no
+* foreign route object is ever mutated. Gates are attached HOST-side from
+* the mount registry — plugins cannot ship a route that escapes its
+* mount's gate because plugins never construct route objects.
+*
+* Mounts are the ONLY cross-source parenting points: a root-level
+* pathless layout file (`_public.tsx`) declares the mount for the whole
+* composition (exactly one declaring source per mount); every other
+* source's routes live under the same `_mount/` directory prefix and
+* parent onto the shared mount route. This module executes inside the
+* core ui's module graph (production MF expose `./compose`, dev source
+* import) so constructed routes are minted by the same react/router
+* instance that renders them.
+*/
+/**
+* TanStack's Route generics are intentionally invariant — routes built from
+* manifest data can't satisfy them structurally. One named boundary for
+* handing a constructed route to the tree-building APIs.
+*/
+function toAnyRoute(route) {
+	return route;
+}
+/**
+* Gate redirects are absolute: gates attach to root-level mount routes, and
+* relatives would silently shift if a mount ever moved deeper in the tree.
+* The login surface is plugin-owned, never core-known.
+*/
+const LOGIN_TO = "/login";
+const HOME_TO = "/";
+/**
+* Gate implementations by mount gate kind. Only `session` and `admin` are
+* implemented (ADR 0008 §3); unimplemented mounts are rejected during mount
+* declaration before any gate lookup, and gates are optional by type — a
+* mount without an entry (or `none`) renders ungated.
+*/
+const GATES = {
+	session: ({ context, location }) => {
+		if (!userOf(context)) throw (0, _tanstack_react_router.redirect)({
+			to: LOGIN_TO,
+			search: { redirect: location.pathname + location.searchStr }
+		});
+	},
+	admin: ({ context }) => {
+		const user = userOf(context);
+		if (!user) throw (0, _tanstack_react_router.redirect)({ to: LOGIN_TO });
+		if (user.role !== "admin") throw (0, _tanstack_react_router.redirect)({ to: HOME_TO });
+	}
+};
+const userOf = (context) => context?.user ?? context?.session?.user;
+function joinPath(a, b) {
+	const left = a && a !== "/" ? a.replace(/\/+$/, "") : "";
+	const right = b && b !== "/" ? b.replace(/^\/+/, "") : "";
+	if (!left) return right ? `/${right}` : "/";
+	if (!right) return left;
+	return `${left}/${right}`;
+}
+const navOf = (options) => {
+	const nav = options.staticData?.nav;
+	if (nav && typeof nav === "object" && typeof nav.label === "string") return nav;
+};
+/** Layout routes (mount or pathless) pass their authored options through,
+* like every other route kind. On mount routes the registry gate composes
+* BEFORE the declaration's own beforeLoad so a source can never escape its
+* mount's gate (ADR 0008 §3), while the declaration's return value still
+* flows to children as route context. */
+function layoutBeforeLoad(gate, declared) {
+	if (!gate) return declared;
+	return (args) => {
+		gate(args);
+		return declared?.(args);
+	};
+}
+const AUTHORED_OPTION_KEYS = require_route_config.ROUTE_OPTION_KEYS.filter((key) => key !== "beforeLoad" && key !== "component");
+function authoredOptions(options) {
+	const authored = {};
+	for (const key of AUTHORED_OPTION_KEYS) if (options[key] !== void 0) authored[key] = options[key];
+	return authored;
+}
+function rootAuthoredOptions(options) {
+	const { params: _params, ...authored } = authoredOptions(options);
+	return authored;
+}
+async function constructTree(input) {
+	const refs = [...input.plugins].sort((a, b) => a.key.localeCompare(b.key));
+	const resolved = [];
+	for (const ref of refs) resolved.push(await input.resolve(ref));
+	const ordered = [...resolved.filter((plugin) => plugin.key === "ui"), ...resolved.filter((plugin) => plugin.key !== "ui")];
+	const optionsByPlugin = /* @__PURE__ */ new Map();
+	const skippedByPlugin = /* @__PURE__ */ new Map();
+	for (const plugin of resolved) {
+		if (!plugin.manifest?.routes) continue;
+		const optionsById = /* @__PURE__ */ new Map();
+		const skipped = /* @__PURE__ */ new Set();
+		await Promise.all(plugin.manifest.routes.map(async (record) => {
+			const loader = plugin.routeConfig.routeConfigLoaders[record.id];
+			if (!loader) {
+				console.log(`[Compose] skipping route "${record.id}" in "${plugin.key}" — no routeConfig loader`);
+				skipped.add(record.id);
+				return;
+			}
+			optionsById.set(record.id, await loader());
+		}));
+		let changed = true;
+		while (changed) {
+			changed = false;
+			for (const record of plugin.manifest.routes) {
+				if (skipped.has(record.id)) continue;
+				if (record.parentId && skipped.has(record.parentId)) {
+					skipped.add(record.id);
+					changed = true;
+				}
+			}
+		}
+		optionsByPlugin.set(plugin.key, optionsById);
+		skippedByPlugin.set(plugin.key, skipped);
+	}
+	const declarations = /* @__PURE__ */ new Map();
+	const mountByLayoutId = /* @__PURE__ */ new Map();
+	for (const plugin of ordered) {
+		if (!plugin.manifest?.routes) continue;
+		for (const record of plugin.manifest.routes) {
+			if (!record.mount) continue;
+			const mountId = record.mount;
+			if (!require_mount_registry.MOUNT_REGISTRY[mountId].implemented) throw new Error(`mount "${record.mount}" is declared vocabulary but unimplemented (ADR 0008 §3) — declared by "${plugin.key}"`);
+			const existing = declarations.get(mountId);
+			if (existing) {
+				if (existing.key === "ui" && plugin.key !== "ui") {
+					console.log(`[Compose] mount declaration "${existing.key}:${existing.record.id}" (${mountId}) shadows "${plugin.key}:${record.id}" — core ui wins; shadowed declaration skipped`);
+					mountByLayoutId.set(record.id, mountId);
+					continue;
+				}
+				throw new Error(`mount "${mountId}" declared by multiple sources: "${existing.key}" (${existing.record.file}) and "${plugin.key}" (${record.file})`);
+			}
+			if (skippedByPlugin.get(plugin.key).has(record.id)) continue;
+			declarations.set(mountId, {
+				key: plugin.key,
+				record,
+				options: optionsByPlugin.get(plugin.key).get(record.id)
+			});
+			mountByLayoutId.set(record.id, mountId);
+		}
+	}
+	const rootRoute = toAnyRoute((0, _tanstack_react_router.createRootRoute)({
+		...input.rootOptions ? rootAuthoredOptions(input.rootOptions) : {},
+		component: input.rootOptions?.component ?? _tanstack_react_router.Outlet,
+		...input.rootOptions?.beforeLoad ? { beforeLoad: input.rootOptions.beforeLoad } : {}
+	}));
+	const mountRoutes = /* @__PURE__ */ new Map();
+	for (const mountId of Object.keys(require_mount_registry.MOUNT_REGISTRY)) {
+		const declaration = declarations.get(mountId);
+		if (!declaration) continue;
+		const def = require_mount_registry.MOUNT_REGISTRY[mountId];
+		const gate = GATES[def.gate];
+		const options = declaration.options;
+		const route = (0, _tanstack_react_router.createRoute)({
+			id: `__mount_${mountId}`,
+			getParentRoute: () => rootRoute,
+			...gate || options.beforeLoad ? { beforeLoad: layoutBeforeLoad(gate, options.beforeLoad) } : {},
+			...authoredOptions(options),
+			component: options.component ?? _tanstack_react_router.Outlet
+		});
+		mountRoutes.set(mountId, toAnyRoute(route));
+	}
+	const nav = [];
+	const mountCounts = {};
+	const childrenByParent = /* @__PURE__ */ new Map();
+	/** cross-plugin path-collision guard: claimed paths per parent route */
+	const claimedPathsByParent = /* @__PURE__ */ new Map();
+	const attach = (parent, child) => {
+		const list = childrenByParent.get(parent) ?? [];
+		list.push(child);
+		childrenByParent.set(parent, list);
+	};
+	for (const plugin of ordered) {
+		if (!plugin.manifest?.routes) continue;
+		const optionsById = optionsByPlugin.get(plugin.key);
+		const fullPathById = /* @__PURE__ */ new Map();
+		const mountById = /* @__PURE__ */ new Map();
+		const byId = /* @__PURE__ */ new Map();
+		const parentFor = (record) => {
+			if (record.parentId) {
+				const local = byId.get(record.parentId);
+				if (local) return {
+					route: local.route,
+					fullPath: fullPathById.get(record.parentId),
+					mount: mountById.get(record.parentId)
+				};
+				const mount = mountByLayoutId.get(record.parentId);
+				if (mount) return {
+					route: mountRoutes.get(mount),
+					fullPath: "",
+					mount
+				};
+				throw new Error(`unresolvable parent "${record.parentId}" for "${record.id}" in "${plugin.key}" — mounts are the only cross-source parenting points`);
+			}
+			const firstSegment = record.id.split("/")[0] ?? "";
+			if (firstSegment.startsWith("_")) {
+				const mount = require_mount_registry.resolveMountSegment(firstSegment.slice(1));
+				if (mount && mountRoutes.has(mount)) return {
+					route: mountRoutes.get(mount),
+					fullPath: "",
+					mount
+				};
+				if (mount) throw new Error(`mount "${mount}" is not declared by any source (route "${record.id}" in "${plugin.key}")`);
+				throw new Error(`unknown mount "_${firstSegment.slice(1)}" (route "${record.id}" in "${plugin.key}")`);
+			}
+			throw new Error(`route "${record.id}" in "${plugin.key}" must live under a mount`);
+		};
+		const pending = plugin.manifest.routes.filter((record) => !record.mount && !skippedByPlugin.get(plugin.key).has(record.id));
+		const shadowedIds = /* @__PURE__ */ new Set();
+		let progressed = true;
+		while (pending.length > 0 && progressed) {
+			progressed = false;
+			for (let i = 0; i < pending.length; i += 1) {
+				const record = pending[i];
+				const parentId = record.parentId;
+				if (parentId) {
+					if (shadowedIds.has(parentId)) {
+						shadowedIds.add(record.id);
+						pending.splice(i, 1);
+						i -= 1;
+						progressed = true;
+						continue;
+					}
+					if (!byId.has(parentId) && !mountByLayoutId.has(parentId)) continue;
+				}
+				pending.splice(i, 1);
+				progressed = true;
+				const options = optionsById.get(record.id);
+				const parent = parentFor(record);
+				const routePath = record.path;
+				const isLayoutRoute = record.type === "layout" || routePath === void 0;
+				if (!isLayoutRoute) {
+					const siblings = claimedPathsByParent.get(parent.route) ?? /* @__PURE__ */ new Map();
+					const claimant = siblings.get(routePath);
+					if (claimant) {
+						if (plugin.key !== "ui" && claimant.startsWith(`${"ui"}:`)) {
+							console.log(`[Compose] route claim "${claimant}" (${routePath}) shadows "${plugin.key}:${record.id}" — core ui wins; shadowed route skipped`);
+							shadowedIds.add(record.id);
+							break;
+						}
+						throw new Error(`path collision: "${plugin.key}" route "${record.id}" declares "${routePath}" which is already claimed by "${claimant}" under the same parent`);
+					}
+					siblings.set(routePath, `${plugin.key}:${record.id}`);
+					claimedPathsByParent.set(parent.route, siblings);
+				}
+				const fullPath = joinPath(parent.fullPath, routePath);
+				let route;
+				if (isLayoutRoute) route = (0, _tanstack_react_router.createRoute)({
+					id: `${plugin.key}__${record.id}`,
+					getParentRoute: () => parent.route,
+					...authoredOptions(options),
+					...options.beforeLoad ? { beforeLoad: options.beforeLoad } : {},
+					component: options.component ?? _tanstack_react_router.Outlet
+				});
+				else route = (0, _tanstack_react_router.createRoute)({
+					path: routePath,
+					getParentRoute: () => parent.route,
+					...authoredOptions(options),
+					...options.beforeLoad ? { beforeLoad: options.beforeLoad } : {},
+					component: options.component ?? _tanstack_react_router.Outlet
+				});
+				byId.set(record.id, {
+					record,
+					route: toAnyRoute(route)
+				});
+				fullPathById.set(record.id, fullPath);
+				mountById.set(record.id, parent.mount);
+				attach(parent.route, toAnyRoute(route));
+				mountCounts[parent.mount] = (mountCounts[parent.mount] ?? 0) + 1;
+				const navDeclaration = navOf(options);
+				if (navDeclaration && navDeclaration.hidden !== true) nav.push({
+					id: `${plugin.key}:${record.id}`,
+					label: navDeclaration.label,
+					...typeof navDeclaration.icon === "string" ? { icon: navDeclaration.icon } : {},
+					...typeof navDeclaration.group === "string" ? { group: navDeclaration.group } : {},
+					...typeof navDeclaration.order === "number" ? { order: navDeclaration.order } : {},
+					to: navDeclaration.to ?? fullPath,
+					plugin: plugin.key,
+					mount: parent.mount
+				});
+				break;
+			}
+		}
+		if (pending.length > 0) throw new Error(`unresolvable parentage in "${plugin.key}": ${pending.map((record) => record.id).join(", ")}`);
+	}
+	for (const [parent, children] of childrenByParent) parent.addChildren(children);
+	rootRoute.addChildren([...mountRoutes.values()]);
+	nav.sort(require_nav.compareNavItems);
+	return {
+		rootRoute,
+		routeTree: rootRoute,
+		digest: await require_descriptor.digestOf({
+			plugins: refs.map((ref) => ({
+				key: ref.key,
+				mfName: ref.mfName
+			})),
+			manifests: resolved.map((plugin) => plugin.manifest)
+		}),
+		manifests: resolved.map((plugin) => plugin.manifest),
+		nav: { items: nav },
+		mountCounts
+	};
+}
+
+//#endregion
+exports.constructTree = constructTree;
+//# sourceMappingURL=construct.cjs.map

package/dist/ui/manifest/construct.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"construct.cjs","names":["redirect","ROUTE_OPTION_KEYS","MOUNT_REGISTRY","createRootRoute","Outlet","createRoute","resolveMountSegment","compareNavItems","digestOf"],"sources":["../../../src/ui/manifest/construct.ts"],"sourcesContent":["import type { AnyRoute } from \"@tanstack/react-router\";\nimport { createRootRoute, createRoute, Outlet, redirect } from \"@tanstack/react-router\";\nimport { CORE_UI_PLUGIN_KEY } from \"./contract\";\nimport { digestOf } from \"./descriptor\";\nimport type { PluginManifest, RouteRecord } from \"./manifest-schema\";\nimport { MOUNT_REGISTRY, type MountDef, type MountId, resolveMountSegment } from \"./mount-registry\";\nimport { compareNavItems, type NavDeclaration, type NavItem, type NavManifest } from \"./nav\";\nimport { ROUTE_OPTION_KEYS, type RouteConfigModule, type RouteOptionsBundle } from \"./route-config\";\n\n/**\n * Host-side route-graph construction (ADR 0008 §1): manifests + route\n * configs in → host-built tree out. The host constructs ITS OWN Route\n * objects from validated manifest data via public `createRoute` APIs; no\n * foreign route object is ever mutated. Gates are attached HOST-side from\n * the mount registry — plugins cannot ship a route that escapes its\n * mount's gate because plugins never construct route objects.\n *\n * Mounts are the ONLY cross-source parenting points: a root-level\n * pathless layout file (`_public.tsx`) declares the mount for the whole\n * composition (exactly one declaring source per mount); every other\n * source's routes live under the same `_mount/` directory prefix and\n * parent onto the shared mount route. This module executes inside the\n * core ui's module graph (production MF expose `./compose`, dev source\n * import) so constructed routes are minted by the same react/router\n * instance that renders them.\n */\n\n/**\n * TanStack's Route generics are intentionally invariant — routes built from\n * manifest data can't satisfy them structurally. One named boundary for\n * handing a constructed route to the tree-building APIs.\n */\nfunction toAnyRoute(route: unknown): AnyRoute {\n  return route as AnyRoute;\n}\n\nexport interface GateUser {\n  id: string;\n  name?: string;\n  /** Better Auth user role — \"admin\" gates the admin mount. */\n  role?: string;\n}\n\nexport interface HostContext {\n  user?: GateUser;\n  session?: { user?: GateUser };\n}\n\ntype GateFn = (args: {\n  context: HostContext;\n  location: { pathname: string; searchStr: string };\n}) => void;\n\n/**\n * Gate redirects are absolute: gates attach to root-level mount routes, and\n * relatives would silently shift if a mount ever moved deeper in the tree.\n * The login surface is plugin-owned, never core-known.\n */\nconst LOGIN_TO: string = \"/login\";\nconst HOME_TO: string = \"/\";\n\n/**\n * Gate implementations by mount gate kind. Only `session` and `admin` are\n * implemented (ADR 0008 §3); unimplemented mounts are rejected during mount\n * declaration before any gate lookup, and gates are optional by type — a\n * mount without an entry (or `none`) renders ungated.\n */\nconst GATES: Partial<Record<MountDef[\"gate\"], GateFn>> = {\n  session: ({ context, location }) => {\n    const user = userOf(context);\n    if (!user) {\n      throw redirect({\n        to: LOGIN_TO,\n        search: { redirect: location.pathname + location.searchStr } as never,\n      });\n    }\n  },\n  admin: ({ context }) => {\n    const user = userOf(context);\n    if (!user) throw redirect({ to: LOGIN_TO });\n    if (user.role !== \"admin\") throw redirect({ to: HOME_TO });\n  },\n};\n\nconst userOf = (context: HostContext | undefined): GateUser | undefined =>\n  context?.user ?? context?.session?.user;\n\nexport interface ConstructPluginRef {\n  /** composition identity — plugin key; participates in the digest */\n  key: string;\n  /** deployment identity — the MF container name loadRemote targets */\n  mfName: string;\n}\n\nexport interface ResolvedPlugin {\n  key: string;\n  manifest: PluginManifest;\n  routeConfig: RouteConfigModule;\n}\n\nexport interface ConstructInput {\n  name: string;\n  plugins: ReadonlyArray<ConstructPluginRef>;\n  resolve: (ref: ConstructPluginRef) => Promise<ResolvedPlugin>;\n  /** core ui `__root` options — component/error/notFound + head baseline */\n  rootOptions?: RouteOptionsBundle;\n}\n\nexport interface ConstructedTree {\n  rootRoute: AnyRoute;\n  routeTree: AnyRoute;\n  digest: string;\n  manifests: PluginManifest[];\n  nav: NavManifest;\n  /** constructed route count per mount id */\n  mountCounts: Record<string, number>;\n}\n\ninterface MountDeclaration {\n  key: string;\n  record: RouteRecord;\n  options: RouteOptionsBundle;\n}\n\nfunction joinPath(a: string | undefined, b: string | undefined): string {\n  const left = a && a !== \"/\" ? a.replace(/\\/+$/, \"\") : \"\";\n  const right = b && b !== \"/\" ? b.replace(/^\\/+/, \"\") : \"\";\n  if (!left) return right ? `/${right}` : \"/\";\n  if (!right) return left;\n  return `${left}/${right}`;\n}\n\nconst navOf = (options: RouteOptionsBundle): NavDeclaration | undefined => {\n  const nav = options.staticData?.nav;\n  if (nav && typeof nav === \"object\" && typeof (nav as NavDeclaration).label === \"string\") {\n    return nav as NavDeclaration;\n  }\n  return undefined;\n};\n\n/** Layout routes (mount or pathless) pass their authored options through,\n * like every other route kind. On mount routes the registry gate composes\n * BEFORE the declaration's own beforeLoad so a source can never escape its\n * mount's gate (ADR 0008 §3), while the declaration's return value still\n * flows to children as route context. */\nfunction layoutBeforeLoad(\n  gate: GateFn | undefined,\n  declared: RouteOptionsBundle[\"beforeLoad\"],\n): RouteOptionsBundle[\"beforeLoad\"] {\n  if (!gate) return declared;\n  return (args) => {\n    gate(args);\n    return declared?.(args);\n  };\n}\n\nconst AUTHORED_OPTION_KEYS = ROUTE_OPTION_KEYS.filter(\n  (key) => key !== \"beforeLoad\" && key !== \"component\",\n);\n\nfunction authoredOptions(options: RouteOptionsBundle): Partial<RouteOptionsBundle> {\n  const authored: Partial<Record<keyof RouteOptionsBundle, unknown>> = {};\n  for (const key of AUTHORED_OPTION_KEYS) {\n    if (options[key] !== undefined) authored[key] = options[key];\n  }\n  return authored as Partial<RouteOptionsBundle>;\n}\n\nfunction rootAuthoredOptions(options: RouteOptionsBundle): Partial<RouteOptionsBundle> {\n  const { params: _params, ...authored } = authoredOptions(options);\n  return authored;\n}\n\nexport async function constructTree(input: ConstructInput): Promise<ConstructedTree> {\n  const refs = [...input.plugins].sort((a, b) => a.key.localeCompare(b.key));\n  const resolved: ResolvedPlugin[] = [];\n  for (const ref of refs) {\n    resolved.push(await input.resolve(ref));\n  }\n\n  const ordered = [\n    ...resolved.filter((plugin) => plugin.key === CORE_UI_PLUGIN_KEY),\n    ...resolved.filter((plugin) => plugin.key !== CORE_UI_PLUGIN_KEY),\n  ];\n\n  const optionsByPlugin = new Map<string, Map<string, RouteOptionsBundle>>();\n  const skippedByPlugin = new Map<string, Set<string>>();\n  for (const plugin of resolved) {\n    // A plugin with no manifest at all contributes no routes — skip it rather\n    // than crashing SSR composition (same contract as the missing-loader skip\n    // below).\n    if (!plugin.manifest?.routes) continue;\n    const optionsById = new Map<string, RouteOptionsBundle>();\n    const skipped = new Set<string>();\n    await Promise.all(\n      plugin.manifest.routes.map(async (record) => {\n        const loader = plugin.routeConfig.routeConfigLoaders[record.id];\n        if (!loader) {\n          console.log(\n            `[Compose] skipping route \"${record.id}\" in \"${plugin.key}\" — no routeConfig loader`,\n          );\n          skipped.add(record.id);\n          return;\n        }\n        optionsById.set(record.id, await loader());\n      }),\n    );\n    // cascade: any route whose parent is skipped is also skipped\n    let changed = true;\n    while (changed) {\n      changed = false;\n      for (const record of plugin.manifest.routes) {\n        if (skipped.has(record.id)) continue;\n        if (record.parentId && skipped.has(record.parentId)) {\n          skipped.add(record.id);\n          changed = true;\n        }\n      }\n    }\n    optionsByPlugin.set(plugin.key, optionsById);\n    skippedByPlugin.set(plugin.key, skipped);\n  }\n\n  const declarations = new Map<MountId, MountDeclaration>();\n  const mountByLayoutId = new Map<string, MountId>();\n  for (const plugin of ordered) {\n    if (!plugin.manifest?.routes) continue;\n    for (const record of plugin.manifest.routes) {\n      if (!record.mount) continue;\n      const mountId = record.mount as MountId;\n      const def = MOUNT_REGISTRY[mountId];\n      if (!def.implemented) {\n        throw new Error(\n          `mount \"${record.mount}\" is declared vocabulary but unimplemented (ADR 0008 §3) — declared by \"${plugin.key}\"`,\n        );\n      }\n      const existing = declarations.get(mountId);\n      if (existing) {\n        if (existing.key === CORE_UI_PLUGIN_KEY && plugin.key !== CORE_UI_PLUGIN_KEY) {\n          console.log(\n            `[Compose] mount declaration \"${existing.key}:${existing.record.id}\" (${mountId}) shadows \"${plugin.key}:${record.id}\" — core ui wins; shadowed declaration skipped`,\n          );\n          mountByLayoutId.set(record.id, mountId);\n          continue;\n        }\n        throw new Error(\n          `mount \"${mountId}\" declared by multiple sources: \"${existing.key}\" (${existing.record.file}) and \"${plugin.key}\" (${record.file})`,\n        );\n      }\n      if (skippedByPlugin.get(plugin.key)!.has(record.id)) continue;\n      declarations.set(mountId, {\n        key: plugin.key,\n        record,\n        options: optionsByPlugin.get(plugin.key)!.get(record.id)!,\n      });\n      mountByLayoutId.set(record.id, mountId);\n    }\n  }\n\n  const rootRoute = toAnyRoute(\n    createRootRoute({\n      ...(input.rootOptions ? rootAuthoredOptions(input.rootOptions) : {}),\n      component: input.rootOptions?.component ?? Outlet,\n      ...(input.rootOptions?.beforeLoad ? { beforeLoad: input.rootOptions.beforeLoad } : {}),\n    }),\n  );\n\n  const mountRoutes = new Map<MountId, AnyRoute>();\n  for (const mountId of Object.keys(MOUNT_REGISTRY) as MountId[]) {\n    const declaration = declarations.get(mountId);\n    if (!declaration) continue;\n    const def = MOUNT_REGISTRY[mountId]!;\n    const gate = GATES[def.gate];\n    const options = declaration.options;\n    const route = createRoute({\n      id: `__mount_${mountId}`,\n      getParentRoute: () => rootRoute,\n      ...(gate || options.beforeLoad\n        ? { beforeLoad: layoutBeforeLoad(gate, options.beforeLoad) }\n        : {}),\n      ...authoredOptions(options),\n      component: options.component ?? Outlet,\n    });\n    mountRoutes.set(mountId, toAnyRoute(route));\n  }\n\n  const nav: NavItem[] = [];\n  const mountCounts: Record<string, number> = {};\n  const childrenByParent = new Map<AnyRoute, AnyRoute[]>();\n  /** cross-plugin path-collision guard: claimed paths per parent route */\n  const claimedPathsByParent = new Map<AnyRoute, Map<string, string>>();\n  const attach = (parent: AnyRoute, child: AnyRoute) => {\n    const list = childrenByParent.get(parent) ?? [];\n    list.push(child);\n    childrenByParent.set(parent, list);\n  };\n\n  for (const plugin of ordered) {\n    if (!plugin.manifest?.routes) continue;\n    const optionsById = optionsByPlugin.get(plugin.key)!;\n    const fullPathById = new Map<string, string>();\n    const mountById = new Map<string, MountId>();\n    const byId = new Map<string, { record: RouteRecord; route: AnyRoute }>();\n\n    const parentFor = (\n      record: RouteRecord,\n    ): { route: AnyRoute; fullPath: string; mount: MountId } => {\n      if (record.parentId) {\n        const local = byId.get(record.parentId);\n        if (local) {\n          return {\n            route: local.route,\n            fullPath: fullPathById.get(record.parentId)!,\n            mount: mountById.get(record.parentId)!,\n          };\n        }\n        const mount = mountByLayoutId.get(record.parentId);\n        if (mount) return { route: mountRoutes.get(mount)!, fullPath: \"\", mount };\n        throw new Error(\n          `unresolvable parent \"${record.parentId}\" for \"${record.id}\" in \"${plugin.key}\" — mounts are the only cross-source parenting points`,\n        );\n      }\n      const firstSegment = record.id.split(\"/\")[0] ?? \"\";\n      if (firstSegment.startsWith(\"_\")) {\n        const mount = resolveMountSegment(firstSegment.slice(1));\n        if (mount && mountRoutes.has(mount))\n          return { route: mountRoutes.get(mount)!, fullPath: \"\", mount };\n        if (mount) {\n          throw new Error(\n            `mount \"${mount}\" is not declared by any source (route \"${record.id}\" in \"${plugin.key}\")`,\n          );\n        }\n        throw new Error(\n          `unknown mount \"_${firstSegment.slice(1)}\" (route \"${record.id}\" in \"${plugin.key}\")`,\n        );\n      }\n      throw new Error(`route \"${record.id}\" in \"${plugin.key}\" must live under a mount`);\n    };\n\n    const pending = plugin.manifest.routes.filter(\n      (record) => !record.mount && !skippedByPlugin.get(plugin.key)!.has(record.id),\n    );\n    const shadowedIds = new Set<string>();\n    let progressed = true;\n    while (pending.length > 0 && progressed) {\n      progressed = false;\n      for (let i = 0; i < pending.length; i += 1) {\n        const record = pending[i]!;\n        const parentId = record.parentId;\n        if (parentId) {\n          if (shadowedIds.has(parentId)) {\n            shadowedIds.add(record.id);\n            pending.splice(i, 1);\n            i -= 1;\n            progressed = true;\n            continue;\n          }\n          if (!byId.has(parentId) && !mountByLayoutId.has(parentId)) continue;\n        }\n        pending.splice(i, 1);\n        progressed = true;\n\n        const options = optionsById.get(record.id)!;\n        const parent = parentFor(record);\n        const routePath = record.path;\n        const isLayoutRoute = record.type === \"layout\" || routePath === undefined;\n        if (!isLayoutRoute) {\n          const siblings = claimedPathsByParent.get(parent.route) ?? new Map<string, string>();\n          const claimant = siblings.get(routePath);\n          if (claimant) {\n            if (\n              plugin.key !== CORE_UI_PLUGIN_KEY &&\n              claimant.startsWith(`${CORE_UI_PLUGIN_KEY}:`)\n            ) {\n              console.log(\n                `[Compose] route claim \"${claimant}\" (${routePath}) shadows \"${plugin.key}:${record.id}\" — core ui wins; shadowed route skipped`,\n              );\n              shadowedIds.add(record.id);\n              break;\n            }\n            throw new Error(\n              `path collision: \"${plugin.key}\" route \"${record.id}\" declares \"${routePath}\" which is already claimed by \"${claimant}\" under the same parent`,\n            );\n          }\n          siblings.set(routePath, `${plugin.key}:${record.id}`);\n          claimedPathsByParent.set(parent.route, siblings);\n        }\n        const fullPath = joinPath(parent.fullPath, routePath);\n        let route: AnyRoute;\n        if (isLayoutRoute) {\n          route = createRoute({\n            id: `${plugin.key}__${record.id}`,\n            getParentRoute: () => parent.route,\n            ...authoredOptions(options),\n            ...(options.beforeLoad ? { beforeLoad: options.beforeLoad } : {}),\n            component: options.component ?? Outlet,\n          });\n        } else {\n          route = createRoute({\n            path: routePath,\n            getParentRoute: () => parent.route,\n            ...authoredOptions(options),\n            ...(options.beforeLoad ? { beforeLoad: options.beforeLoad } : {}),\n            component: options.component ?? Outlet,\n          });\n        }\n\n        byId.set(record.id, { record, route: toAnyRoute(route) });\n        fullPathById.set(record.id, fullPath);\n        mountById.set(record.id, parent.mount);\n        attach(parent.route, toAnyRoute(route));\n        mountCounts[parent.mount] = (mountCounts[parent.mount] ?? 0) + 1;\n\n        const navDeclaration = navOf(options);\n        if (navDeclaration && navDeclaration.hidden !== true) {\n          nav.push({\n            id: `${plugin.key}:${record.id}`,\n            label: navDeclaration.label,\n            ...(typeof navDeclaration.icon === \"string\" ? { icon: navDeclaration.icon } : {}),\n            ...(typeof navDeclaration.group === \"string\" ? { group: navDeclaration.group } : {}),\n            ...(typeof navDeclaration.order === \"number\" ? { order: navDeclaration.order } : {}),\n            to: navDeclaration.to ?? fullPath,\n            plugin: plugin.key,\n            mount: parent.mount,\n          });\n        }\n        break;\n      }\n    }\n    if (pending.length > 0) {\n      throw new Error(\n        `unresolvable parentage in \"${plugin.key}\": ${pending.map((record) => record.id).join(\", \")}`,\n      );\n    }\n  }\n\n  for (const [parent, children] of childrenByParent) {\n    (parent as { addChildren: (children: AnyRoute[]) => void }).addChildren(children);\n  }\n  rootRoute.addChildren([...mountRoutes.values()] as AnyRoute[]);\n  nav.sort(compareNavItems);\n\n  const digest = await digestOf({\n    plugins: refs.map((ref) => ({ key: ref.key, mfName: ref.mfName })),\n    manifests: resolved.map((plugin) => plugin.manifest),\n  });\n\n  return {\n    rootRoute,\n    routeTree: rootRoute,\n    digest,\n    manifests: resolved.map((plugin) => plugin.manifest),\n    nav: { items: nav },\n    mountCounts,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCA,SAAS,WAAW,OAA0B;CAC5C,OAAO;AACT;;;;;;AAwBA,MAAM,WAAmB;AACzB,MAAM,UAAkB;;;;;;;AAQxB,MAAM,QAAmD;CACvD,UAAU,EAAE,SAAS,eAAe;EAElC,IAAI,CADS,OAAO,OACZ,GACN,UAAMA,iCAAS;GACb,IAAI;GACJ,QAAQ,EAAE,UAAU,SAAS,WAAW,SAAS,UAAU;EAC7D,CAAC;CAEL;CACA,QAAQ,EAAE,cAAc;EACtB,MAAM,OAAO,OAAO,OAAO;EAC3B,IAAI,CAAC,MAAM,UAAMA,iCAAS,EAAE,IAAI,SAAS,CAAC;EAC1C,IAAI,KAAK,SAAS,SAAS,UAAMA,iCAAS,EAAE,IAAI,QAAQ,CAAC;CAC3D;AACF;AAEA,MAAM,UAAU,YACd,SAAS,QAAQ,SAAS,SAAS;AAuCrC,SAAS,SAAS,GAAuB,GAA+B;CACtE,MAAM,OAAO,KAAK,MAAM,MAAM,EAAE,QAAQ,QAAQ,EAAE,IAAI;CACtD,MAAM,QAAQ,KAAK,MAAM,MAAM,EAAE,QAAQ,QAAQ,EAAE,IAAI;CACvD,IAAI,CAAC,MAAM,OAAO,QAAQ,IAAI,UAAU;CACxC,IAAI,CAAC,OAAO,OAAO;CACnB,OAAO,GAAG,KAAK,GAAG;AACpB;AAEA,MAAM,SAAS,YAA4D;CACzE,MAAM,MAAM,QAAQ,YAAY;CAChC,IAAI,OAAO,OAAO,QAAQ,YAAY,OAAQ,IAAuB,UAAU,UAC7E,OAAO;AAGX;;;;;;AAOA,SAAS,iBACP,MACA,UACkC;CAClC,IAAI,CAAC,MAAM,OAAO;CAClB,QAAQ,SAAS;EACf,KAAK,IAAI;EACT,OAAO,WAAW,IAAI;CACxB;AACF;AAEA,MAAM,uBAAuBC,uCAAkB,QAC5C,QAAQ,QAAQ,gBAAgB,QAAQ,WAC3C;AAEA,SAAS,gBAAgB,SAA0D;CACjF,MAAM,WAA+D,CAAC;CACtE,KAAK,MAAM,OAAO,sBAChB,IAAI,QAAQ,SAAS,QAAW,SAAS,OAAO,QAAQ;CAE1D,OAAO;AACT;AAEA,SAAS,oBAAoB,SAA0D;CACrF,MAAM,EAAE,QAAQ,SAAS,GAAG,aAAa,gBAAgB,OAAO;CAChE,OAAO;AACT;AAEA,eAAsB,cAAc,OAAiD;CACnF,MAAM,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,IAAI,cAAc,EAAE,GAAG,CAAC;CACzE,MAAM,WAA6B,CAAC;CACpC,KAAK,MAAM,OAAO,MAChB,SAAS,KAAK,MAAM,MAAM,QAAQ,GAAG,CAAC;CAGxC,MAAM,UAAU,CACd,GAAG,SAAS,QAAQ,WAAW,OAAO,YAA0B,GAChE,GAAG,SAAS,QAAQ,WAAW,OAAO,YAA0B,CAClE;CAEA,MAAM,kCAAkB,IAAI,IAA6C;CACzE,MAAM,kCAAkB,IAAI,IAAyB;CACrD,KAAK,MAAM,UAAU,UAAU;EAI7B,IAAI,CAAC,OAAO,UAAU,QAAQ;EAC9B,MAAM,8BAAc,IAAI,IAAgC;EACxD,MAAM,0BAAU,IAAI,IAAY;EAChC,MAAM,QAAQ,IACZ,OAAO,SAAS,OAAO,IAAI,OAAO,WAAW;GAC3C,MAAM,SAAS,OAAO,YAAY,mBAAmB,OAAO;GAC5D,IAAI,CAAC,QAAQ;IACX,QAAQ,IACN,6BAA6B,OAAO,GAAG,QAAQ,OAAO,IAAI,0BAC5D;IACA,QAAQ,IAAI,OAAO,EAAE;IACrB;GACF;GACA,YAAY,IAAI,OAAO,IAAI,MAAM,OAAO,CAAC;EAC3C,CAAC,CACH;EAEA,IAAI,UAAU;EACd,OAAO,SAAS;GACd,UAAU;GACV,KAAK,MAAM,UAAU,OAAO,SAAS,QAAQ;IAC3C,IAAI,QAAQ,IAAI,OAAO,EAAE,GAAG;IAC5B,IAAI,OAAO,YAAY,QAAQ,IAAI,OAAO,QAAQ,GAAG;KACnD,QAAQ,IAAI,OAAO,EAAE;KACrB,UAAU;IACZ;GACF;EACF;EACA,gBAAgB,IAAI,OAAO,KAAK,WAAW;EAC3C,gBAAgB,IAAI,OAAO,KAAK,OAAO;CACzC;CAEA,MAAM,+BAAe,IAAI,IAA+B;CACxD,MAAM,kCAAkB,IAAI,IAAqB;CACjD,KAAK,MAAM,UAAU,SAAS;EAC5B,IAAI,CAAC,OAAO,UAAU,QAAQ;EAC9B,KAAK,MAAM,UAAU,OAAO,SAAS,QAAQ;GAC3C,IAAI,CAAC,OAAO,OAAO;GACnB,MAAM,UAAU,OAAO;GAEvB,IAAI,CADQC,sCAAe,QACnB,CAAC,aACP,MAAM,IAAI,MACR,UAAU,OAAO,MAAM,0EAA0E,OAAO,IAAI,EAC9G;GAEF,MAAM,WAAW,aAAa,IAAI,OAAO;GACzC,IAAI,UAAU;IACZ,IAAI,SAAS,gBAA8B,OAAO,cAA4B;KAC5E,QAAQ,IACN,gCAAgC,SAAS,IAAI,GAAG,SAAS,OAAO,GAAG,KAAK,QAAQ,aAAa,OAAO,IAAI,GAAG,OAAO,GAAG,+CACvH;KACA,gBAAgB,IAAI,OAAO,IAAI,OAAO;KACtC;IACF;IACA,MAAM,IAAI,MACR,UAAU,QAAQ,mCAAmC,SAAS,IAAI,KAAK,SAAS,OAAO,KAAK,SAAS,OAAO,IAAI,KAAK,OAAO,KAAK,EACnI;GACF;GACA,IAAI,gBAAgB,IAAI,OAAO,GAAG,CAAC,CAAE,IAAI,OAAO,EAAE,GAAG;GACrD,aAAa,IAAI,SAAS;IACxB,KAAK,OAAO;IACZ;IACA,SAAS,gBAAgB,IAAI,OAAO,GAAG,CAAC,CAAE,IAAI,OAAO,EAAE;GACzD,CAAC;GACD,gBAAgB,IAAI,OAAO,IAAI,OAAO;EACxC;CACF;CAEA,MAAM,YAAY,eAChBC,wCAAgB;EACd,GAAI,MAAM,cAAc,oBAAoB,MAAM,WAAW,IAAI,CAAC;EAClE,WAAW,MAAM,aAAa,aAAaC;EAC3C,GAAI,MAAM,aAAa,aAAa,EAAE,YAAY,MAAM,YAAY,WAAW,IAAI,CAAC;CACtF,CAAC,CACH;CAEA,MAAM,8BAAc,IAAI,IAAuB;CAC/C,KAAK,MAAM,WAAW,OAAO,KAAKF,qCAAc,GAAgB;EAC9D,MAAM,cAAc,aAAa,IAAI,OAAO;EAC5C,IAAI,CAAC,aAAa;EAClB,MAAM,MAAMA,sCAAe;EAC3B,MAAM,OAAO,MAAM,IAAI;EACvB,MAAM,UAAU,YAAY;EAC5B,MAAM,YAAQG,oCAAY;GACxB,IAAI,WAAW;GACf,sBAAsB;GACtB,GAAI,QAAQ,QAAQ,aAChB,EAAE,YAAY,iBAAiB,MAAM,QAAQ,UAAU,EAAE,IACzD,CAAC;GACL,GAAG,gBAAgB,OAAO;GAC1B,WAAW,QAAQ,aAAaD;EAClC,CAAC;EACD,YAAY,IAAI,SAAS,WAAW,KAAK,CAAC;CAC5C;CAEA,MAAM,MAAiB,CAAC;CACxB,MAAM,cAAsC,CAAC;CAC7C,MAAM,mCAAmB,IAAI,IAA0B;;CAEvD,MAAM,uCAAuB,IAAI,IAAmC;CACpE,MAAM,UAAU,QAAkB,UAAoB;EACpD,MAAM,OAAO,iBAAiB,IAAI,MAAM,KAAK,CAAC;EAC9C,KAAK,KAAK,KAAK;EACf,iBAAiB,IAAI,QAAQ,IAAI;CACnC;CAEA,KAAK,MAAM,UAAU,SAAS;EAC5B,IAAI,CAAC,OAAO,UAAU,QAAQ;EAC9B,MAAM,cAAc,gBAAgB,IAAI,OAAO,GAAG;EAClD,MAAM,+BAAe,IAAI,IAAoB;EAC7C,MAAM,4BAAY,IAAI,IAAqB;EAC3C,MAAM,uBAAO,IAAI,IAAsD;EAEvE,MAAM,aACJ,WAC0D;GAC1D,IAAI,OAAO,UAAU;IACnB,MAAM,QAAQ,KAAK,IAAI,OAAO,QAAQ;IACtC,IAAI,OACF,OAAO;KACL,OAAO,MAAM;KACb,UAAU,aAAa,IAAI,OAAO,QAAQ;KAC1C,OAAO,UAAU,IAAI,OAAO,QAAQ;IACtC;IAEF,MAAM,QAAQ,gBAAgB,IAAI,OAAO,QAAQ;IACjD,IAAI,OAAO,OAAO;KAAE,OAAO,YAAY,IAAI,KAAK;KAAI,UAAU;KAAI;IAAM;IACxE,MAAM,IAAI,MACR,wBAAwB,OAAO,SAAS,SAAS,OAAO,GAAG,QAAQ,OAAO,IAAI,sDAChF;GACF;GACA,MAAM,eAAe,OAAO,GAAG,MAAM,GAAG,CAAC,CAAC,MAAM;GAChD,IAAI,aAAa,WAAW,GAAG,GAAG;IAChC,MAAM,QAAQE,2CAAoB,aAAa,MAAM,CAAC,CAAC;IACvD,IAAI,SAAS,YAAY,IAAI,KAAK,GAChC,OAAO;KAAE,OAAO,YAAY,IAAI,KAAK;KAAI,UAAU;KAAI;IAAM;IAC/D,IAAI,OACF,MAAM,IAAI,MACR,UAAU,MAAM,0CAA0C,OAAO,GAAG,QAAQ,OAAO,IAAI,GACzF;IAEF,MAAM,IAAI,MACR,mBAAmB,aAAa,MAAM,CAAC,EAAE,YAAY,OAAO,GAAG,QAAQ,OAAO,IAAI,GACpF;GACF;GACA,MAAM,IAAI,MAAM,UAAU,OAAO,GAAG,QAAQ,OAAO,IAAI,0BAA0B;EACnF;EAEA,MAAM,UAAU,OAAO,SAAS,OAAO,QACpC,WAAW,CAAC,OAAO,SAAS,CAAC,gBAAgB,IAAI,OAAO,GAAG,CAAC,CAAE,IAAI,OAAO,EAAE,CAC9E;EACA,MAAM,8BAAc,IAAI,IAAY;EACpC,IAAI,aAAa;EACjB,OAAO,QAAQ,SAAS,KAAK,YAAY;GACvC,aAAa;GACb,KAAK,IAAI,IAAI,GAAG,IAAI,QAAQ,QAAQ,KAAK,GAAG;IAC1C,MAAM,SAAS,QAAQ;IACvB,MAAM,WAAW,OAAO;IACxB,IAAI,UAAU;KACZ,IAAI,YAAY,IAAI,QAAQ,GAAG;MAC7B,YAAY,IAAI,OAAO,EAAE;MACzB,QAAQ,OAAO,GAAG,CAAC;MACnB,KAAK;MACL,aAAa;MACb;KACF;KACA,IAAI,CAAC,KAAK,IAAI,QAAQ,KAAK,CAAC,gBAAgB,IAAI,QAAQ,GAAG;IAC7D;IACA,QAAQ,OAAO,GAAG,CAAC;IACnB,aAAa;IAEb,MAAM,UAAU,YAAY,IAAI,OAAO,EAAE;IACzC,MAAM,SAAS,UAAU,MAAM;IAC/B,MAAM,YAAY,OAAO;IACzB,MAAM,gBAAgB,OAAO,SAAS,YAAY,cAAc;IAChE,IAAI,CAAC,eAAe;KAClB,MAAM,WAAW,qBAAqB,IAAI,OAAO,KAAK,qBAAK,IAAI,IAAoB;KACnF,MAAM,WAAW,SAAS,IAAI,SAAS;KACvC,IAAI,UAAU;MACZ,IACE,OAAO,gBACP,SAAS,WAAW,QAAsB,EAAE,GAC5C;OACA,QAAQ,IACN,0BAA0B,SAAS,KAAK,UAAU,aAAa,OAAO,IAAI,GAAG,OAAO,GAAG,yCACzF;OACA,YAAY,IAAI,OAAO,EAAE;OACzB;MACF;MACA,MAAM,IAAI,MACR,oBAAoB,OAAO,IAAI,WAAW,OAAO,GAAG,cAAc,UAAU,iCAAiC,SAAS,wBACxH;KACF;KACA,SAAS,IAAI,WAAW,GAAG,OAAO,IAAI,GAAG,OAAO,IAAI;KACpD,qBAAqB,IAAI,OAAO,OAAO,QAAQ;IACjD;IACA,MAAM,WAAW,SAAS,OAAO,UAAU,SAAS;IACpD,IAAI;IACJ,IAAI,eACF,YAAQD,oCAAY;KAClB,IAAI,GAAG,OAAO,IAAI,IAAI,OAAO;KAC7B,sBAAsB,OAAO;KAC7B,GAAG,gBAAgB,OAAO;KAC1B,GAAI,QAAQ,aAAa,EAAE,YAAY,QAAQ,WAAW,IAAI,CAAC;KAC/D,WAAW,QAAQ,aAAaD;IAClC,CAAC;SAED,YAAQC,oCAAY;KAClB,MAAM;KACN,sBAAsB,OAAO;KAC7B,GAAG,gBAAgB,OAAO;KAC1B,GAAI,QAAQ,aAAa,EAAE,YAAY,QAAQ,WAAW,IAAI,CAAC;KAC/D,WAAW,QAAQ,aAAaD;IAClC,CAAC;IAGH,KAAK,IAAI,OAAO,IAAI;KAAE;KAAQ,OAAO,WAAW,KAAK;IAAE,CAAC;IACxD,aAAa,IAAI,OAAO,IAAI,QAAQ;IACpC,UAAU,IAAI,OAAO,IAAI,OAAO,KAAK;IACrC,OAAO,OAAO,OAAO,WAAW,KAAK,CAAC;IACtC,YAAY,OAAO,UAAU,YAAY,OAAO,UAAU,KAAK;IAE/D,MAAM,iBAAiB,MAAM,OAAO;IACpC,IAAI,kBAAkB,eAAe,WAAW,MAC9C,IAAI,KAAK;KACP,IAAI,GAAG,OAAO,IAAI,GAAG,OAAO;KAC5B,OAAO,eAAe;KACtB,GAAI,OAAO,eAAe,SAAS,WAAW,EAAE,MAAM,eAAe,KAAK,IAAI,CAAC;KAC/E,GAAI,OAAO,eAAe,UAAU,WAAW,EAAE,OAAO,eAAe,MAAM,IAAI,CAAC;KAClF,GAAI,OAAO,eAAe,UAAU,WAAW,EAAE,OAAO,eAAe,MAAM,IAAI,CAAC;KAClF,IAAI,eAAe,MAAM;KACzB,QAAQ,OAAO;KACf,OAAO,OAAO;IAChB,CAAC;IAEH;GACF;EACF;EACA,IAAI,QAAQ,SAAS,GACnB,MAAM,IAAI,MACR,8BAA8B,OAAO,IAAI,KAAK,QAAQ,KAAK,WAAW,OAAO,EAAE,CAAC,CAAC,KAAK,IAAI,GAC5F;CAEJ;CAEA,KAAK,MAAM,CAAC,QAAQ,aAAa,kBAC/B,AAAC,OAA2D,YAAY,QAAQ;CAElF,UAAU,YAAY,CAAC,GAAG,YAAY,OAAO,CAAC,CAAe;CAC7D,IAAI,KAAKG,2BAAe;CAOxB,OAAO;EACL;EACA,WAAW;EACX,cARmBC,4BAAS;GAC5B,SAAS,KAAK,KAAK,SAAS;IAAE,KAAK,IAAI;IAAK,QAAQ,IAAI;GAAO,EAAE;GACjE,WAAW,SAAS,KAAK,WAAW,OAAO,QAAQ;EACrD,CAAC;EAMC,WAAW,SAAS,KAAK,WAAW,OAAO,QAAQ;EACnD,KAAK,EAAE,OAAO,IAAI;EAClB;CACF;AACF"}

package/dist/ui/manifest/construct.d.cts

@@ -0,0 +1,48 @@
+import { PluginManifest } from "./manifest-schema.cjs";
+import { NavManifest } from "./nav.cjs";
+import { RouteConfigModule, RouteOptionsBundle } from "./route-config.cjs";
+import { AnyRoute } from "@tanstack/react-router";
+//#region src/ui/manifest/construct.d.ts
+interface GateUser {
+  id: string;
+  name?: string;
+  /** Better Auth user role — "admin" gates the admin mount. */
+  role?: string;
+}
+interface HostContext {
+  user?: GateUser;
+  session?: {
+    user?: GateUser;
+  };
+}
+interface ConstructPluginRef {
+  /** composition identity — plugin key; participates in the digest */
+  key: string;
+  /** deployment identity — the MF container name loadRemote targets */
+  mfName: string;
+}
+interface ResolvedPlugin {
+  key: string;
+  manifest: PluginManifest;
+  routeConfig: RouteConfigModule;
+}
+interface ConstructInput {
+  name: string;
+  plugins: ReadonlyArray<ConstructPluginRef>;
+  resolve: (ref: ConstructPluginRef) => Promise<ResolvedPlugin>;
+  /** core ui `__root` options — component/error/notFound + head baseline */
+  rootOptions?: RouteOptionsBundle;
+}
+interface ConstructedTree {
+  rootRoute: AnyRoute;
+  routeTree: AnyRoute;
+  digest: string;
+  manifests: PluginManifest[];
+  nav: NavManifest;
+  /** constructed route count per mount id */
+  mountCounts: Record<string, number>;
+}
+declare function constructTree(input: ConstructInput): Promise<ConstructedTree>;
+//#endregion
+export { ConstructInput, ConstructPluginRef, ConstructedTree, GateUser, HostContext, ResolvedPlugin, constructTree };
+//# sourceMappingURL=construct.d.cts.map

package/dist/ui/manifest/construct.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"construct.d.cts","names":[],"sources":["../../../src/ui/manifest/construct.ts"],"mappings":";;;;;UAoCiB;EACf;EACA;;EAEA;;UAGe;EACf,OAAO;EACP;IAAY,OAAO;;;UA0CJ;;EAEf;;EAEA;;UAGe;EACf;EACA,UAAU;EACV,aAAa;;UAGE;EACf;EACA,SAAS,cAAc;EACvB,UAAU,KAAK,uBAAuB,QAAQ;;EAE9C,cAAc;;UAGC;EACf,WAAW;EACX,WAAW;EACX;EACA,WAAW;EACX,KAAK;;EAEL,aAAa;;iBA0DO,cAAc,OAAO,iBAAiB,QAAQ"}

package/dist/ui/manifest/construct.d.mts

@@ -0,0 +1,48 @@
+import { PluginManifest } from "./manifest-schema.mjs";
+import { NavManifest } from "./nav.mjs";
+import { RouteConfigModule, RouteOptionsBundle } from "./route-config.mjs";
+import { AnyRoute } from "@tanstack/react-router";
+//#region src/ui/manifest/construct.d.ts
+interface GateUser {
+  id: string;
+  name?: string;
+  /** Better Auth user role — "admin" gates the admin mount. */
+  role?: string;
+}
+interface HostContext {
+  user?: GateUser;
+  session?: {
+    user?: GateUser;
+  };
+}
+interface ConstructPluginRef {
+  /** composition identity — plugin key; participates in the digest */
+  key: string;
+  /** deployment identity — the MF container name loadRemote targets */
+  mfName: string;
+}
+interface ResolvedPlugin {
+  key: string;
+  manifest: PluginManifest;
+  routeConfig: RouteConfigModule;
+}
+interface ConstructInput {
+  name: string;
+  plugins: ReadonlyArray<ConstructPluginRef>;
+  resolve: (ref: ConstructPluginRef) => Promise<ResolvedPlugin>;
+  /** core ui `__root` options — component/error/notFound + head baseline */
+  rootOptions?: RouteOptionsBundle;
+}
+interface ConstructedTree {
+  rootRoute: AnyRoute;
+  routeTree: AnyRoute;
+  digest: string;
+  manifests: PluginManifest[];
+  nav: NavManifest;
+  /** constructed route count per mount id */
+  mountCounts: Record<string, number>;
+}
+declare function constructTree(input: ConstructInput): Promise<ConstructedTree>;
+//#endregion
+export { ConstructInput, ConstructPluginRef, ConstructedTree, GateUser, HostContext, ResolvedPlugin, constructTree };
+//# sourceMappingURL=construct.d.mts.map

package/dist/ui/manifest/construct.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"construct.d.mts","names":[],"sources":["../../../src/ui/manifest/construct.ts"],"mappings":";;;;;UAoCiB;EACf;EACA;;EAEA;;UAGe;EACf,OAAO;EACP;IAAY,OAAO;;;UA0CJ;;EAEf;;EAEA;;UAGe;EACf;EACA,UAAU;EACV,aAAa;;UAGE;EACf;EACA,SAAS,cAAc;EACvB,UAAU,KAAK,uBAAuB,QAAQ;;EAE9C,cAAc;;UAGC;EACf,WAAW;EACX,WAAW;EACX;EACA,WAAW;EACX,KAAK;;EAEL,aAAa;;iBA0DO,cAAc,OAAO,iBAAiB,QAAQ"}