every-plugin 2.10.1 → 3.0.0-rc.3

package/dist/ui/manifest/construct.mjs

@@ -0,0 +1,268 @@
+import { MOUNT_REGISTRY, resolveMountSegment } from "./mount-registry.mjs";
+import { digestOf } from "./descriptor.mjs";
+import { compareNavItems } from "./nav.mjs";
+import { ROUTE_OPTION_KEYS } from "./route-config.mjs";
+import { Outlet, createRootRoute, createRoute, redirect } from "@tanstack/react-router";
+
+//#region src/ui/manifest/construct.ts
+/**
+* Host-side route-graph construction (ADR 0008 §1): manifests + route
+* configs in → host-built tree out. The host constructs ITS OWN Route
+* objects from validated manifest data via public `createRoute` APIs; no
+* foreign route object is ever mutated. Gates are attached HOST-side from
+* the mount registry — plugins cannot ship a route that escapes its
+* mount's gate because plugins never construct route objects.
+*
+* Mounts are the ONLY cross-source parenting points: a root-level
+* pathless layout file (`_public.tsx`) declares the mount for the whole
+* composition (exactly one declaring source per mount); every other
+* source's routes live under the same `_mount/` directory prefix and
+* parent onto the shared mount route. This module executes inside the
+* core ui's module graph (production MF expose `./compose`, dev source
+* import) so constructed routes are minted by the same react/router
+* instance that renders them.
+*/
+/**
+* TanStack's Route generics are intentionally invariant — routes built from
+* manifest data can't satisfy them structurally. One named boundary for
+* handing a constructed route to the tree-building APIs.
+*/
+function toAnyRoute(route) {
+	return route;
+}
+/**
+* Gate redirects are absolute: gates attach to root-level mount routes, and
+* relatives would silently shift if a mount ever moved deeper in the tree.
+* The login surface is plugin-owned, never core-known.
+*/
+const LOGIN_TO = "/login";
+const HOME_TO = "/";
+/**
+* Gate implementations by mount gate kind. Only `session` and `admin` are
+* implemented (ADR 0008 §3); unimplemented mounts are rejected during mount
+* declaration before any gate lookup, and gates are optional by type — a
+* mount without an entry (or `none`) renders ungated.
+*/
+const GATES = {
+	session: ({ context, location }) => {
+		if (!userOf(context)) throw redirect({
+			to: LOGIN_TO,
+			search: { redirect: location.pathname + location.searchStr }
+		});
+	},
+	admin: ({ context }) => {
+		const user = userOf(context);
+		if (!user) throw redirect({ to: LOGIN_TO });
+		if (user.role !== "admin") throw redirect({ to: HOME_TO });
+	}
+};
+const userOf = (context) => context?.user ?? context?.session?.user;
+function joinPath(a, b) {
+	const left = a && a !== "/" ? a.replace(/\/+$/, "") : "";
+	const right = b && b !== "/" ? b.replace(/^\/+/, "") : "";
+	if (!left) return right ? `/${right}` : "/";
+	if (!right) return left;
+	return `${left}/${right}`;
+}
+const navOf = (options) => {
+	const nav = options.staticData?.nav;
+	if (nav && typeof nav === "object" && typeof nav.label === "string") return nav;
+};
+/** Layout routes (mount or pathless) pass their authored options through,
+* like every other route kind. On mount routes the registry gate composes
+* BEFORE the declaration's own beforeLoad so a source can never escape its
+* mount's gate (ADR 0008 §3), while the declaration's return value still
+* flows to children as route context. */
+function layoutBeforeLoad(gate, declared) {
+	if (!gate) return declared;
+	return (args) => {
+		gate(args);
+		return declared?.(args);
+	};
+}
+const AUTHORED_OPTION_KEYS = ROUTE_OPTION_KEYS.filter((key) => key !== "beforeLoad" && key !== "component");
+function authoredOptions(options) {
+	const authored = {};
+	for (const key of AUTHORED_OPTION_KEYS) if (options[key] !== void 0) authored[key] = options[key];
+	return authored;
+}
+function rootAuthoredOptions(options) {
+	const { params: _params, ...authored } = authoredOptions(options);
+	return authored;
+}
+async function constructTree(input) {
+	const refs = [...input.plugins].sort((a, b) => a.key.localeCompare(b.key));
+	const resolved = [];
+	for (const ref of refs) resolved.push(await input.resolve(ref));
+	const optionsByPlugin = /* @__PURE__ */ new Map();
+	for (const plugin of resolved) {
+		const optionsById = /* @__PURE__ */ new Map();
+		await Promise.all(plugin.manifest.routes.map(async (record) => {
+			const loader = plugin.routeConfig.routeConfigLoaders[record.id];
+			if (!loader) throw new Error(`routeConfig for "${plugin.key}" has no loader for route "${record.id}"`);
+			optionsById.set(record.id, await loader());
+		}));
+		optionsByPlugin.set(plugin.key, optionsById);
+	}
+	const declarations = /* @__PURE__ */ new Map();
+	for (const plugin of resolved) for (const record of plugin.manifest.routes) {
+		if (!record.mount) continue;
+		const mountId = record.mount;
+		if (!MOUNT_REGISTRY[mountId].implemented) throw new Error(`mount "${record.mount}" is declared vocabulary but unimplemented (ADR 0008 §3) — declared by "${plugin.key}"`);
+		const existing = declarations.get(mountId);
+		if (existing) throw new Error(`mount "${mountId}" declared by multiple sources: "${existing.key}" (${existing.record.file}) and "${plugin.key}" (${record.file})`);
+		declarations.set(mountId, {
+			key: plugin.key,
+			record,
+			options: optionsByPlugin.get(plugin.key).get(record.id)
+		});
+	}
+	const rootRoute = toAnyRoute(createRootRoute({
+		...input.rootOptions ? rootAuthoredOptions(input.rootOptions) : {},
+		component: input.rootOptions?.component ?? Outlet,
+		...input.rootOptions?.beforeLoad ? { beforeLoad: input.rootOptions.beforeLoad } : {}
+	}));
+	const mountRoutes = /* @__PURE__ */ new Map();
+	for (const mountId of Object.keys(MOUNT_REGISTRY)) {
+		const declaration = declarations.get(mountId);
+		if (!declaration) continue;
+		const def = MOUNT_REGISTRY[mountId];
+		const gate = GATES[def.gate];
+		const options = declaration.options;
+		const route = createRoute({
+			id: `__mount_${mountId}`,
+			getParentRoute: () => rootRoute,
+			...gate || options.beforeLoad ? { beforeLoad: layoutBeforeLoad(gate, options.beforeLoad) } : {},
+			...authoredOptions(options),
+			component: options.component ?? Outlet
+		});
+		mountRoutes.set(mountId, toAnyRoute(route));
+	}
+	const mountByLayoutId = /* @__PURE__ */ new Map();
+	for (const [mountId, declaration] of declarations) mountByLayoutId.set(declaration.record.id, mountId);
+	const nav = [];
+	const mountCounts = {};
+	const childrenByParent = /* @__PURE__ */ new Map();
+	/** cross-plugin path-collision guard: claimed paths per parent route */
+	const claimedPathsByParent = /* @__PURE__ */ new Map();
+	const attach = (parent, child) => {
+		const list = childrenByParent.get(parent) ?? [];
+		list.push(child);
+		childrenByParent.set(parent, list);
+	};
+	for (const plugin of resolved) {
+		const optionsById = optionsByPlugin.get(plugin.key);
+		const fullPathById = /* @__PURE__ */ new Map();
+		const mountById = /* @__PURE__ */ new Map();
+		const byId = /* @__PURE__ */ new Map();
+		const parentFor = (record) => {
+			if (record.parentId) {
+				const local = byId.get(record.parentId);
+				if (local) return {
+					route: local.route,
+					fullPath: fullPathById.get(record.parentId),
+					mount: mountById.get(record.parentId)
+				};
+				const mount = mountByLayoutId.get(record.parentId);
+				if (mount) return {
+					route: mountRoutes.get(mount),
+					fullPath: "",
+					mount
+				};
+				throw new Error(`unresolvable parent "${record.parentId}" for "${record.id}" in "${plugin.key}" — mounts are the only cross-source parenting points`);
+			}
+			const firstSegment = record.id.split("/")[0] ?? "";
+			if (firstSegment.startsWith("_")) {
+				const mount = resolveMountSegment(firstSegment.slice(1));
+				if (mount && mountRoutes.has(mount)) return {
+					route: mountRoutes.get(mount),
+					fullPath: "",
+					mount
+				};
+				if (mount) throw new Error(`mount "${mount}" is not declared by any source (route "${record.id}" in "${plugin.key}")`);
+				throw new Error(`unknown mount "_${firstSegment.slice(1)}" (route "${record.id}" in "${plugin.key}")`);
+			}
+			throw new Error(`route "${record.id}" in "${plugin.key}" must live under a mount`);
+		};
+		const pending = plugin.manifest.routes.filter((record) => !record.mount);
+		let progressed = true;
+		while (pending.length > 0 && progressed) {
+			progressed = false;
+			for (let i = 0; i < pending.length; i += 1) {
+				const record = pending[i];
+				if (record.parentId && !byId.has(record.parentId) && !mountByLayoutId.has(record.parentId)) continue;
+				pending.splice(i, 1);
+				progressed = true;
+				const options = optionsById.get(record.id);
+				const parent = parentFor(record);
+				const routePath = record.path;
+				const isLayoutRoute = record.type === "layout" || routePath === void 0;
+				if (!isLayoutRoute) {
+					const siblings = claimedPathsByParent.get(parent.route) ?? /* @__PURE__ */ new Map();
+					const claimant = siblings.get(routePath);
+					if (claimant) throw new Error(`path collision: "${plugin.key}" route "${record.id}" declares "${routePath}" which is already claimed by "${claimant}" under the same parent`);
+					siblings.set(routePath, `${plugin.key}:${record.id}`);
+					claimedPathsByParent.set(parent.route, siblings);
+				}
+				const fullPath = joinPath(parent.fullPath, routePath);
+				let route;
+				if (isLayoutRoute) route = createRoute({
+					id: `${plugin.key}__${record.id}`,
+					getParentRoute: () => parent.route,
+					...authoredOptions(options),
+					...options.beforeLoad ? { beforeLoad: options.beforeLoad } : {},
+					component: options.component ?? Outlet
+				});
+				else route = createRoute({
+					path: routePath,
+					getParentRoute: () => parent.route,
+					...authoredOptions(options),
+					...options.beforeLoad ? { beforeLoad: options.beforeLoad } : {},
+					component: options.component ?? Outlet
+				});
+				byId.set(record.id, {
+					record,
+					route: toAnyRoute(route)
+				});
+				fullPathById.set(record.id, fullPath);
+				mountById.set(record.id, parent.mount);
+				attach(parent.route, toAnyRoute(route));
+				mountCounts[parent.mount] = (mountCounts[parent.mount] ?? 0) + 1;
+				const navDeclaration = navOf(options);
+				if (navDeclaration && navDeclaration.hidden !== true) nav.push({
+					id: `${plugin.key}:${record.id}`,
+					label: navDeclaration.label,
+					...typeof navDeclaration.icon === "string" ? { icon: navDeclaration.icon } : {},
+					...typeof navDeclaration.group === "string" ? { group: navDeclaration.group } : {},
+					...typeof navDeclaration.order === "number" ? { order: navDeclaration.order } : {},
+					to: navDeclaration.to ?? fullPath,
+					plugin: plugin.key,
+					mount: parent.mount
+				});
+				break;
+			}
+		}
+		if (pending.length > 0) throw new Error(`unresolvable parentage in "${plugin.key}": ${pending.map((record) => record.id).join(", ")}`);
+	}
+	for (const [parent, children] of childrenByParent) parent.addChildren(children);
+	rootRoute.addChildren([...mountRoutes.values()]);
+	nav.sort(compareNavItems);
+	return {
+		rootRoute,
+		routeTree: rootRoute,
+		digest: await digestOf({
+			plugins: refs.map((ref) => ({
+				key: ref.key,
+				mfName: ref.mfName
+			})),
+			manifests: resolved.map((plugin) => plugin.manifest)
+		}),
+		manifests: resolved.map((plugin) => plugin.manifest),
+		nav: { items: nav },
+		mountCounts
+	};
+}
+
+//#endregion
+export { constructTree };
+//# sourceMappingURL=construct.mjs.map

package/dist/ui/manifest/construct.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"construct.mjs","names":[],"sources":["../../../src/ui/manifest/construct.ts"],"sourcesContent":["import type { AnyRoute } from \"@tanstack/react-router\";\nimport { createRootRoute, createRoute, Outlet, redirect } from \"@tanstack/react-router\";\nimport { digestOf } from \"./descriptor\";\nimport type { PluginManifest, RouteRecord } from \"./manifest-schema\";\nimport { MOUNT_REGISTRY, type MountDef, type MountId, resolveMountSegment } from \"./mount-registry\";\nimport { compareNavItems, type NavDeclaration, type NavItem, type NavManifest } from \"./nav\";\nimport { ROUTE_OPTION_KEYS, type RouteConfigModule, type RouteOptionsBundle } from \"./route-config\";\n\n/**\n * Host-side route-graph construction (ADR 0008 §1): manifests + route\n * configs in → host-built tree out. The host constructs ITS OWN Route\n * objects from validated manifest data via public `createRoute` APIs; no\n * foreign route object is ever mutated. Gates are attached HOST-side from\n * the mount registry — plugins cannot ship a route that escapes its\n * mount's gate because plugins never construct route objects.\n *\n * Mounts are the ONLY cross-source parenting points: a root-level\n * pathless layout file (`_public.tsx`) declares the mount for the whole\n * composition (exactly one declaring source per mount); every other\n * source's routes live under the same `_mount/` directory prefix and\n * parent onto the shared mount route. This module executes inside the\n * core ui's module graph (production MF expose `./compose`, dev source\n * import) so constructed routes are minted by the same react/router\n * instance that renders them.\n */\n\n/**\n * TanStack's Route generics are intentionally invariant — routes built from\n * manifest data can't satisfy them structurally. One named boundary for\n * handing a constructed route to the tree-building APIs.\n */\nfunction toAnyRoute(route: unknown): AnyRoute {\n  return route as AnyRoute;\n}\n\nexport interface GateUser {\n  id: string;\n  name?: string;\n  /** Better Auth user role — \"admin\" gates the admin mount. */\n  role?: string;\n}\n\nexport interface HostContext {\n  user?: GateUser;\n  session?: { user?: GateUser };\n}\n\ntype GateFn = (args: {\n  context: HostContext;\n  location: { pathname: string; searchStr: string };\n}) => void;\n\n/**\n * Gate redirects are absolute: gates attach to root-level mount routes, and\n * relatives would silently shift if a mount ever moved deeper in the tree.\n * The login surface is plugin-owned, never core-known.\n */\nconst LOGIN_TO: string = \"/login\";\nconst HOME_TO: string = \"/\";\n\n/**\n * Gate implementations by mount gate kind. Only `session` and `admin` are\n * implemented (ADR 0008 §3); unimplemented mounts are rejected during mount\n * declaration before any gate lookup, and gates are optional by type — a\n * mount without an entry (or `none`) renders ungated.\n */\nconst GATES: Partial<Record<MountDef[\"gate\"], GateFn>> = {\n  session: ({ context, location }) => {\n    const user = userOf(context);\n    if (!user) {\n      throw redirect({\n        to: LOGIN_TO,\n        search: { redirect: location.pathname + location.searchStr } as never,\n      });\n    }\n  },\n  admin: ({ context }) => {\n    const user = userOf(context);\n    if (!user) throw redirect({ to: LOGIN_TO });\n    if (user.role !== \"admin\") throw redirect({ to: HOME_TO });\n  },\n};\n\nconst userOf = (context: HostContext | undefined): GateUser | undefined =>\n  context?.user ?? context?.session?.user;\n\nexport interface ConstructPluginRef {\n  /** composition identity — plugin key; participates in the digest */\n  key: string;\n  /** deployment identity — the MF container name loadRemote targets */\n  mfName: string;\n}\n\nexport interface ResolvedPlugin {\n  key: string;\n  manifest: PluginManifest;\n  routeConfig: RouteConfigModule;\n}\n\nexport interface ConstructInput {\n  name: string;\n  plugins: ReadonlyArray<ConstructPluginRef>;\n  resolve: (ref: ConstructPluginRef) => Promise<ResolvedPlugin>;\n  /** core ui `__root` options — component/error/notFound + head baseline */\n  rootOptions?: RouteOptionsBundle;\n}\n\nexport interface ConstructedTree {\n  rootRoute: AnyRoute;\n  routeTree: AnyRoute;\n  digest: string;\n  manifests: PluginManifest[];\n  nav: NavManifest;\n  /** constructed route count per mount id */\n  mountCounts: Record<string, number>;\n}\n\ninterface MountDeclaration {\n  key: string;\n  record: RouteRecord;\n  options: RouteOptionsBundle;\n}\n\nfunction joinPath(a: string | undefined, b: string | undefined): string {\n  const left = a && a !== \"/\" ? a.replace(/\\/+$/, \"\") : \"\";\n  const right = b && b !== \"/\" ? b.replace(/^\\/+/, \"\") : \"\";\n  if (!left) return right ? `/${right}` : \"/\";\n  if (!right) return left;\n  return `${left}/${right}`;\n}\n\nconst navOf = (options: RouteOptionsBundle): NavDeclaration | undefined => {\n  const nav = options.staticData?.nav;\n  if (nav && typeof nav === \"object\" && typeof (nav as NavDeclaration).label === \"string\") {\n    return nav as NavDeclaration;\n  }\n  return undefined;\n};\n\n/** Layout routes (mount or pathless) pass their authored options through,\n * like every other route kind. On mount routes the registry gate composes\n * BEFORE the declaration's own beforeLoad so a source can never escape its\n * mount's gate (ADR 0008 §3), while the declaration's return value still\n * flows to children as route context. */\nfunction layoutBeforeLoad(\n  gate: GateFn | undefined,\n  declared: RouteOptionsBundle[\"beforeLoad\"],\n): RouteOptionsBundle[\"beforeLoad\"] {\n  if (!gate) return declared;\n  return (args) => {\n    gate(args);\n    return declared?.(args);\n  };\n}\n\nconst AUTHORED_OPTION_KEYS = ROUTE_OPTION_KEYS.filter(\n  (key) => key !== \"beforeLoad\" && key !== \"component\",\n);\n\nfunction authoredOptions(options: RouteOptionsBundle): Partial<RouteOptionsBundle> {\n  const authored: Partial<Record<keyof RouteOptionsBundle, unknown>> = {};\n  for (const key of AUTHORED_OPTION_KEYS) {\n    if (options[key] !== undefined) authored[key] = options[key];\n  }\n  return authored as Partial<RouteOptionsBundle>;\n}\n\nfunction rootAuthoredOptions(options: RouteOptionsBundle): Partial<RouteOptionsBundle> {\n  const { params: _params, ...authored } = authoredOptions(options);\n  return authored;\n}\n\nexport async function constructTree(input: ConstructInput): Promise<ConstructedTree> {\n  const refs = [...input.plugins].sort((a, b) => a.key.localeCompare(b.key));\n  const resolved: ResolvedPlugin[] = [];\n  for (const ref of refs) {\n    resolved.push(await input.resolve(ref));\n  }\n\n  const optionsByPlugin = new Map<string, Map<string, RouteOptionsBundle>>();\n  for (const plugin of resolved) {\n    const optionsById = new Map<string, RouteOptionsBundle>();\n    await Promise.all(\n      plugin.manifest.routes.map(async (record) => {\n        const loader = plugin.routeConfig.routeConfigLoaders[record.id];\n        if (!loader) {\n          throw new Error(`routeConfig for \"${plugin.key}\" has no loader for route \"${record.id}\"`);\n        }\n        optionsById.set(record.id, await loader());\n      }),\n    );\n    optionsByPlugin.set(plugin.key, optionsById);\n  }\n\n  const declarations = new Map<MountId, MountDeclaration>();\n  for (const plugin of resolved) {\n    for (const record of plugin.manifest.routes) {\n      if (!record.mount) continue;\n      const mountId = record.mount as MountId;\n      const def = MOUNT_REGISTRY[mountId];\n      if (!def.implemented) {\n        throw new Error(\n          `mount \"${record.mount}\" is declared vocabulary but unimplemented (ADR 0008 §3) — declared by \"${plugin.key}\"`,\n        );\n      }\n      const existing = declarations.get(mountId);\n      if (existing) {\n        throw new Error(\n          `mount \"${mountId}\" declared by multiple sources: \"${existing.key}\" (${existing.record.file}) and \"${plugin.key}\" (${record.file})`,\n        );\n      }\n      declarations.set(mountId, {\n        key: plugin.key,\n        record,\n        options: optionsByPlugin.get(plugin.key)!.get(record.id)!,\n      });\n    }\n  }\n\n  const rootRoute = toAnyRoute(\n    createRootRoute({\n      ...(input.rootOptions ? rootAuthoredOptions(input.rootOptions) : {}),\n      component: input.rootOptions?.component ?? Outlet,\n      ...(input.rootOptions?.beforeLoad ? { beforeLoad: input.rootOptions.beforeLoad } : {}),\n    }),\n  );\n\n  const mountRoutes = new Map<MountId, AnyRoute>();\n  for (const mountId of Object.keys(MOUNT_REGISTRY) as MountId[]) {\n    const declaration = declarations.get(mountId);\n    if (!declaration) continue;\n    const def = MOUNT_REGISTRY[mountId]!;\n    const gate = GATES[def.gate];\n    const options = declaration.options;\n    const route = createRoute({\n      id: `__mount_${mountId}`,\n      getParentRoute: () => rootRoute,\n      ...(gate || options.beforeLoad\n        ? { beforeLoad: layoutBeforeLoad(gate, options.beforeLoad) }\n        : {}),\n      ...authoredOptions(options),\n      component: options.component ?? Outlet,\n    });\n    mountRoutes.set(mountId, toAnyRoute(route));\n  }\n\n  const mountByLayoutId = new Map<string, MountId>();\n  for (const [mountId, declaration] of declarations) {\n    mountByLayoutId.set(declaration.record.id, mountId);\n  }\n\n  const nav: NavItem[] = [];\n  const mountCounts: Record<string, number> = {};\n  const childrenByParent = new Map<AnyRoute, AnyRoute[]>();\n  /** cross-plugin path-collision guard: claimed paths per parent route */\n  const claimedPathsByParent = new Map<AnyRoute, Map<string, string>>();\n  const attach = (parent: AnyRoute, child: AnyRoute) => {\n    const list = childrenByParent.get(parent) ?? [];\n    list.push(child);\n    childrenByParent.set(parent, list);\n  };\n\n  for (const plugin of resolved) {\n    const optionsById = optionsByPlugin.get(plugin.key)!;\n    const fullPathById = new Map<string, string>();\n    const mountById = new Map<string, MountId>();\n    const byId = new Map<string, { record: RouteRecord; route: AnyRoute }>();\n\n    const parentFor = (\n      record: RouteRecord,\n    ): { route: AnyRoute; fullPath: string; mount: MountId } => {\n      if (record.parentId) {\n        const local = byId.get(record.parentId);\n        if (local) {\n          return {\n            route: local.route,\n            fullPath: fullPathById.get(record.parentId)!,\n            mount: mountById.get(record.parentId)!,\n          };\n        }\n        const mount = mountByLayoutId.get(record.parentId);\n        if (mount) return { route: mountRoutes.get(mount)!, fullPath: \"\", mount };\n        throw new Error(\n          `unresolvable parent \"${record.parentId}\" for \"${record.id}\" in \"${plugin.key}\" — mounts are the only cross-source parenting points`,\n        );\n      }\n      const firstSegment = record.id.split(\"/\")[0] ?? \"\";\n      if (firstSegment.startsWith(\"_\")) {\n        const mount = resolveMountSegment(firstSegment.slice(1));\n        if (mount && mountRoutes.has(mount))\n          return { route: mountRoutes.get(mount)!, fullPath: \"\", mount };\n        if (mount) {\n          throw new Error(\n            `mount \"${mount}\" is not declared by any source (route \"${record.id}\" in \"${plugin.key}\")`,\n          );\n        }\n        throw new Error(\n          `unknown mount \"_${firstSegment.slice(1)}\" (route \"${record.id}\" in \"${plugin.key}\")`,\n        );\n      }\n      throw new Error(`route \"${record.id}\" in \"${plugin.key}\" must live under a mount`);\n    };\n\n    const pending = plugin.manifest.routes.filter((record) => !record.mount);\n    let progressed = true;\n    while (pending.length > 0 && progressed) {\n      progressed = false;\n      for (let i = 0; i < pending.length; i += 1) {\n        const record = pending[i]!;\n        if (\n          record.parentId &&\n          !byId.has(record.parentId) &&\n          !mountByLayoutId.has(record.parentId)\n        ) {\n          continue;\n        }\n        pending.splice(i, 1);\n        progressed = true;\n\n        const options = optionsById.get(record.id)!;\n        const parent = parentFor(record);\n        const routePath = record.path;\n        const isLayoutRoute = record.type === \"layout\" || routePath === undefined;\n        if (!isLayoutRoute) {\n          const siblings = claimedPathsByParent.get(parent.route) ?? new Map<string, string>();\n          const claimant = siblings.get(routePath);\n          if (claimant) {\n            throw new Error(\n              `path collision: \"${plugin.key}\" route \"${record.id}\" declares \"${routePath}\" which is already claimed by \"${claimant}\" under the same parent`,\n            );\n          }\n          siblings.set(routePath, `${plugin.key}:${record.id}`);\n          claimedPathsByParent.set(parent.route, siblings);\n        }\n        const fullPath = joinPath(parent.fullPath, routePath);\n        let route: AnyRoute;\n        if (isLayoutRoute) {\n          route = createRoute({\n            id: `${plugin.key}__${record.id}`,\n            getParentRoute: () => parent.route,\n            ...authoredOptions(options),\n            ...(options.beforeLoad ? { beforeLoad: options.beforeLoad } : {}),\n            component: options.component ?? Outlet,\n          });\n        } else {\n          route = createRoute({\n            path: routePath,\n            getParentRoute: () => parent.route,\n            ...authoredOptions(options),\n            ...(options.beforeLoad ? { beforeLoad: options.beforeLoad } : {}),\n            component: options.component ?? Outlet,\n          });\n        }\n\n        byId.set(record.id, { record, route: toAnyRoute(route) });\n        fullPathById.set(record.id, fullPath);\n        mountById.set(record.id, parent.mount);\n        attach(parent.route, toAnyRoute(route));\n        mountCounts[parent.mount] = (mountCounts[parent.mount] ?? 0) + 1;\n\n        const navDeclaration = navOf(options);\n        if (navDeclaration && navDeclaration.hidden !== true) {\n          nav.push({\n            id: `${plugin.key}:${record.id}`,\n            label: navDeclaration.label,\n            ...(typeof navDeclaration.icon === \"string\" ? { icon: navDeclaration.icon } : {}),\n            ...(typeof navDeclaration.group === \"string\" ? { group: navDeclaration.group } : {}),\n            ...(typeof navDeclaration.order === \"number\" ? { order: navDeclaration.order } : {}),\n            to: navDeclaration.to ?? fullPath,\n            plugin: plugin.key,\n            mount: parent.mount,\n          });\n        }\n        break;\n      }\n    }\n    if (pending.length > 0) {\n      throw new Error(\n        `unresolvable parentage in \"${plugin.key}\": ${pending.map((record) => record.id).join(\", \")}`,\n      );\n    }\n  }\n\n  for (const [parent, children] of childrenByParent) {\n    (parent as { addChildren: (children: AnyRoute[]) => void }).addChildren(children);\n  }\n  rootRoute.addChildren([...mountRoutes.values()] as AnyRoute[]);\n  nav.sort(compareNavItems);\n\n  const digest = await digestOf({\n    plugins: refs.map((ref) => ({ key: ref.key, mfName: ref.mfName })),\n    manifests: resolved.map((plugin) => plugin.manifest),\n  });\n\n  return {\n    rootRoute,\n    routeTree: rootRoute,\n    digest,\n    manifests: resolved.map((plugin) => plugin.manifest),\n    nav: { items: nav },\n    mountCounts,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BA,SAAS,WAAW,OAA0B;CAC5C,OAAO;AACT;;;;;;AAwBA,MAAM,WAAmB;AACzB,MAAM,UAAkB;;;;;;;AAQxB,MAAM,QAAmD;CACvD,UAAU,EAAE,SAAS,eAAe;EAElC,IAAI,CADS,OAAO,OACZ,GACN,MAAM,SAAS;GACb,IAAI;GACJ,QAAQ,EAAE,UAAU,SAAS,WAAW,SAAS,UAAU;EAC7D,CAAC;CAEL;CACA,QAAQ,EAAE,cAAc;EACtB,MAAM,OAAO,OAAO,OAAO;EAC3B,IAAI,CAAC,MAAM,MAAM,SAAS,EAAE,IAAI,SAAS,CAAC;EAC1C,IAAI,KAAK,SAAS,SAAS,MAAM,SAAS,EAAE,IAAI,QAAQ,CAAC;CAC3D;AACF;AAEA,MAAM,UAAU,YACd,SAAS,QAAQ,SAAS,SAAS;AAuCrC,SAAS,SAAS,GAAuB,GAA+B;CACtE,MAAM,OAAO,KAAK,MAAM,MAAM,EAAE,QAAQ,QAAQ,EAAE,IAAI;CACtD,MAAM,QAAQ,KAAK,MAAM,MAAM,EAAE,QAAQ,QAAQ,EAAE,IAAI;CACvD,IAAI,CAAC,MAAM,OAAO,QAAQ,IAAI,UAAU;CACxC,IAAI,CAAC,OAAO,OAAO;CACnB,OAAO,GAAG,KAAK,GAAG;AACpB;AAEA,MAAM,SAAS,YAA4D;CACzE,MAAM,MAAM,QAAQ,YAAY;CAChC,IAAI,OAAO,OAAO,QAAQ,YAAY,OAAQ,IAAuB,UAAU,UAC7E,OAAO;AAGX;;;;;;AAOA,SAAS,iBACP,MACA,UACkC;CAClC,IAAI,CAAC,MAAM,OAAO;CAClB,QAAQ,SAAS;EACf,KAAK,IAAI;EACT,OAAO,WAAW,IAAI;CACxB;AACF;AAEA,MAAM,uBAAuB,kBAAkB,QAC5C,QAAQ,QAAQ,gBAAgB,QAAQ,WAC3C;AAEA,SAAS,gBAAgB,SAA0D;CACjF,MAAM,WAA+D,CAAC;CACtE,KAAK,MAAM,OAAO,sBAChB,IAAI,QAAQ,SAAS,QAAW,SAAS,OAAO,QAAQ;CAE1D,OAAO;AACT;AAEA,SAAS,oBAAoB,SAA0D;CACrF,MAAM,EAAE,QAAQ,SAAS,GAAG,aAAa,gBAAgB,OAAO;CAChE,OAAO;AACT;AAEA,eAAsB,cAAc,OAAiD;CACnF,MAAM,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,IAAI,cAAc,EAAE,GAAG,CAAC;CACzE,MAAM,WAA6B,CAAC;CACpC,KAAK,MAAM,OAAO,MAChB,SAAS,KAAK,MAAM,MAAM,QAAQ,GAAG,CAAC;CAGxC,MAAM,kCAAkB,IAAI,IAA6C;CACzE,KAAK,MAAM,UAAU,UAAU;EAC7B,MAAM,8BAAc,IAAI,IAAgC;EACxD,MAAM,QAAQ,IACZ,OAAO,SAAS,OAAO,IAAI,OAAO,WAAW;GAC3C,MAAM,SAAS,OAAO,YAAY,mBAAmB,OAAO;GAC5D,IAAI,CAAC,QACH,MAAM,IAAI,MAAM,oBAAoB,OAAO,IAAI,6BAA6B,OAAO,GAAG,EAAE;GAE1F,YAAY,IAAI,OAAO,IAAI,MAAM,OAAO,CAAC;EAC3C,CAAC,CACH;EACA,gBAAgB,IAAI,OAAO,KAAK,WAAW;CAC7C;CAEA,MAAM,+BAAe,IAAI,IAA+B;CACxD,KAAK,MAAM,UAAU,UACnB,KAAK,MAAM,UAAU,OAAO,SAAS,QAAQ;EAC3C,IAAI,CAAC,OAAO,OAAO;EACnB,MAAM,UAAU,OAAO;EAEvB,IAAI,CADQ,eAAe,QACnB,CAAC,aACP,MAAM,IAAI,MACR,UAAU,OAAO,MAAM,0EAA0E,OAAO,IAAI,EAC9G;EAEF,MAAM,WAAW,aAAa,IAAI,OAAO;EACzC,IAAI,UACF,MAAM,IAAI,MACR,UAAU,QAAQ,mCAAmC,SAAS,IAAI,KAAK,SAAS,OAAO,KAAK,SAAS,OAAO,IAAI,KAAK,OAAO,KAAK,EACnI;EAEF,aAAa,IAAI,SAAS;GACxB,KAAK,OAAO;GACZ;GACA,SAAS,gBAAgB,IAAI,OAAO,GAAG,CAAC,CAAE,IAAI,OAAO,EAAE;EACzD,CAAC;CACH;CAGF,MAAM,YAAY,WAChB,gBAAgB;EACd,GAAI,MAAM,cAAc,oBAAoB,MAAM,WAAW,IAAI,CAAC;EAClE,WAAW,MAAM,aAAa,aAAa;EAC3C,GAAI,MAAM,aAAa,aAAa,EAAE,YAAY,MAAM,YAAY,WAAW,IAAI,CAAC;CACtF,CAAC,CACH;CAEA,MAAM,8BAAc,IAAI,IAAuB;CAC/C,KAAK,MAAM,WAAW,OAAO,KAAK,cAAc,GAAgB;EAC9D,MAAM,cAAc,aAAa,IAAI,OAAO;EAC5C,IAAI,CAAC,aAAa;EAClB,MAAM,MAAM,eAAe;EAC3B,MAAM,OAAO,MAAM,IAAI;EACvB,MAAM,UAAU,YAAY;EAC5B,MAAM,QAAQ,YAAY;GACxB,IAAI,WAAW;GACf,sBAAsB;GACtB,GAAI,QAAQ,QAAQ,aAChB,EAAE,YAAY,iBAAiB,MAAM,QAAQ,UAAU,EAAE,IACzD,CAAC;GACL,GAAG,gBAAgB,OAAO;GAC1B,WAAW,QAAQ,aAAa;EAClC,CAAC;EACD,YAAY,IAAI,SAAS,WAAW,KAAK,CAAC;CAC5C;CAEA,MAAM,kCAAkB,IAAI,IAAqB;CACjD,KAAK,MAAM,CAAC,SAAS,gBAAgB,cACnC,gBAAgB,IAAI,YAAY,OAAO,IAAI,OAAO;CAGpD,MAAM,MAAiB,CAAC;CACxB,MAAM,cAAsC,CAAC;CAC7C,MAAM,mCAAmB,IAAI,IAA0B;;CAEvD,MAAM,uCAAuB,IAAI,IAAmC;CACpE,MAAM,UAAU,QAAkB,UAAoB;EACpD,MAAM,OAAO,iBAAiB,IAAI,MAAM,KAAK,CAAC;EAC9C,KAAK,KAAK,KAAK;EACf,iBAAiB,IAAI,QAAQ,IAAI;CACnC;CAEA,KAAK,MAAM,UAAU,UAAU;EAC7B,MAAM,cAAc,gBAAgB,IAAI,OAAO,GAAG;EAClD,MAAM,+BAAe,IAAI,IAAoB;EAC7C,MAAM,4BAAY,IAAI,IAAqB;EAC3C,MAAM,uBAAO,IAAI,IAAsD;EAEvE,MAAM,aACJ,WAC0D;GAC1D,IAAI,OAAO,UAAU;IACnB,MAAM,QAAQ,KAAK,IAAI,OAAO,QAAQ;IACtC,IAAI,OACF,OAAO;KACL,OAAO,MAAM;KACb,UAAU,aAAa,IAAI,OAAO,QAAQ;KAC1C,OAAO,UAAU,IAAI,OAAO,QAAQ;IACtC;IAEF,MAAM,QAAQ,gBAAgB,IAAI,OAAO,QAAQ;IACjD,IAAI,OAAO,OAAO;KAAE,OAAO,YAAY,IAAI,KAAK;KAAI,UAAU;KAAI;IAAM;IACxE,MAAM,IAAI,MACR,wBAAwB,OAAO,SAAS,SAAS,OAAO,GAAG,QAAQ,OAAO,IAAI,sDAChF;GACF;GACA,MAAM,eAAe,OAAO,GAAG,MAAM,GAAG,CAAC,CAAC,MAAM;GAChD,IAAI,aAAa,WAAW,GAAG,GAAG;IAChC,MAAM,QAAQ,oBAAoB,aAAa,MAAM,CAAC,CAAC;IACvD,IAAI,SAAS,YAAY,IAAI,KAAK,GAChC,OAAO;KAAE,OAAO,YAAY,IAAI,KAAK;KAAI,UAAU;KAAI;IAAM;IAC/D,IAAI,OACF,MAAM,IAAI,MACR,UAAU,MAAM,0CAA0C,OAAO,GAAG,QAAQ,OAAO,IAAI,GACzF;IAEF,MAAM,IAAI,MACR,mBAAmB,aAAa,MAAM,CAAC,EAAE,YAAY,OAAO,GAAG,QAAQ,OAAO,IAAI,GACpF;GACF;GACA,MAAM,IAAI,MAAM,UAAU,OAAO,GAAG,QAAQ,OAAO,IAAI,0BAA0B;EACnF;EAEA,MAAM,UAAU,OAAO,SAAS,OAAO,QAAQ,WAAW,CAAC,OAAO,KAAK;EACvE,IAAI,aAAa;EACjB,OAAO,QAAQ,SAAS,KAAK,YAAY;GACvC,aAAa;GACb,KAAK,IAAI,IAAI,GAAG,IAAI,QAAQ,QAAQ,KAAK,GAAG;IAC1C,MAAM,SAAS,QAAQ;IACvB,IACE,OAAO,YACP,CAAC,KAAK,IAAI,OAAO,QAAQ,KACzB,CAAC,gBAAgB,IAAI,OAAO,QAAQ,GAEpC;IAEF,QAAQ,OAAO,GAAG,CAAC;IACnB,aAAa;IAEb,MAAM,UAAU,YAAY,IAAI,OAAO,EAAE;IACzC,MAAM,SAAS,UAAU,MAAM;IAC/B,MAAM,YAAY,OAAO;IACzB,MAAM,gBAAgB,OAAO,SAAS,YAAY,cAAc;IAChE,IAAI,CAAC,eAAe;KAClB,MAAM,WAAW,qBAAqB,IAAI,OAAO,KAAK,qBAAK,IAAI,IAAoB;KACnF,MAAM,WAAW,SAAS,IAAI,SAAS;KACvC,IAAI,UACF,MAAM,IAAI,MACR,oBAAoB,OAAO,IAAI,WAAW,OAAO,GAAG,cAAc,UAAU,iCAAiC,SAAS,wBACxH;KAEF,SAAS,IAAI,WAAW,GAAG,OAAO,IAAI,GAAG,OAAO,IAAI;KACpD,qBAAqB,IAAI,OAAO,OAAO,QAAQ;IACjD;IACA,MAAM,WAAW,SAAS,OAAO,UAAU,SAAS;IACpD,IAAI;IACJ,IAAI,eACF,QAAQ,YAAY;KAClB,IAAI,GAAG,OAAO,IAAI,IAAI,OAAO;KAC7B,sBAAsB,OAAO;KAC7B,GAAG,gBAAgB,OAAO;KAC1B,GAAI,QAAQ,aAAa,EAAE,YAAY,QAAQ,WAAW,IAAI,CAAC;KAC/D,WAAW,QAAQ,aAAa;IAClC,CAAC;SAED,QAAQ,YAAY;KAClB,MAAM;KACN,sBAAsB,OAAO;KAC7B,GAAG,gBAAgB,OAAO;KAC1B,GAAI,QAAQ,aAAa,EAAE,YAAY,QAAQ,WAAW,IAAI,CAAC;KAC/D,WAAW,QAAQ,aAAa;IAClC,CAAC;IAGH,KAAK,IAAI,OAAO,IAAI;KAAE;KAAQ,OAAO,WAAW,KAAK;IAAE,CAAC;IACxD,aAAa,IAAI,OAAO,IAAI,QAAQ;IACpC,UAAU,IAAI,OAAO,IAAI,OAAO,KAAK;IACrC,OAAO,OAAO,OAAO,WAAW,KAAK,CAAC;IACtC,YAAY,OAAO,UAAU,YAAY,OAAO,UAAU,KAAK;IAE/D,MAAM,iBAAiB,MAAM,OAAO;IACpC,IAAI,kBAAkB,eAAe,WAAW,MAC9C,IAAI,KAAK;KACP,IAAI,GAAG,OAAO,IAAI,GAAG,OAAO;KAC5B,OAAO,eAAe;KACtB,GAAI,OAAO,eAAe,SAAS,WAAW,EAAE,MAAM,eAAe,KAAK,IAAI,CAAC;KAC/E,GAAI,OAAO,eAAe,UAAU,WAAW,EAAE,OAAO,eAAe,MAAM,IAAI,CAAC;KAClF,GAAI,OAAO,eAAe,UAAU,WAAW,EAAE,OAAO,eAAe,MAAM,IAAI,CAAC;KAClF,IAAI,eAAe,MAAM;KACzB,QAAQ,OAAO;KACf,OAAO,OAAO;IAChB,CAAC;IAEH;GACF;EACF;EACA,IAAI,QAAQ,SAAS,GACnB,MAAM,IAAI,MACR,8BAA8B,OAAO,IAAI,KAAK,QAAQ,KAAK,WAAW,OAAO,EAAE,CAAC,CAAC,KAAK,IAAI,GAC5F;CAEJ;CAEA,KAAK,MAAM,CAAC,QAAQ,aAAa,kBAC/B,AAAC,OAA2D,YAAY,QAAQ;CAElF,UAAU,YAAY,CAAC,GAAG,YAAY,OAAO,CAAC,CAAe;CAC7D,IAAI,KAAK,eAAe;CAOxB,OAAO;EACL;EACA,WAAW;EACX,cARmB,SAAS;GAC5B,SAAS,KAAK,KAAK,SAAS;IAAE,KAAK,IAAI;IAAK,QAAQ,IAAI;GAAO,EAAE;GACjE,WAAW,SAAS,KAAK,WAAW,OAAO,QAAQ;EACrD,CAAC;EAMC,WAAW,SAAS,KAAK,WAAW,OAAO,QAAQ;EACnD,KAAK,EAAE,OAAO,IAAI;EAClB;CACF;AACF"}

package/dist/ui/manifest/contract.cjs

@@ -0,0 +1,34 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_identity = require('../../identity.cjs');
+
+//#region src/ui/manifest/contract.ts
+/**
+* Cross-workspace composition contract: file names, MF expose names, and the
+* core's identity — the literals every consumer of the composed tree must
+* agree on. Browser-safe, node-safe, zero imports.
+*/
+/** The core ui's composition key — `bos.config.json`'s `app.ui` identity. */
+const CORE_UI_PLUGIN_KEY = "ui";
+const UI_REMOTE_ENTRY_FILENAME = "remoteEntry.js";
+const UI_REMOTE_SERVER_ENTRY_FILENAME = "remoteEntry.server.js";
+const MANIFEST_FILENAME = "manifest.gen.json";
+const ROUTE_CONFIG_FILENAME = "routeConfig.gen.ts";
+/** Canonical MF exposes every manifest-composed ui source ships. */
+const UI_EXPOSES = {
+	routeConfig: "./routeConfig",
+	compose: "./compose",
+	router: "./Router"
+};
+/** Exposes a PLUGIN ui source ships (the core additionally exposes compose/Router). */
+const PLUGIN_UI_SHARED_EXPOSES = { routeConfig: UI_EXPOSES.routeConfig };
+
+//#endregion
+exports.CORE_UI_PLUGIN_KEY = CORE_UI_PLUGIN_KEY;
+exports.MANIFEST_FILENAME = MANIFEST_FILENAME;
+exports.PLUGIN_UI_SHARED_EXPOSES = PLUGIN_UI_SHARED_EXPOSES;
+exports.ROUTE_CONFIG_FILENAME = ROUTE_CONFIG_FILENAME;
+exports.UI_EXPOSES = UI_EXPOSES;
+exports.UI_REMOTE_ENTRY_FILENAME = UI_REMOTE_ENTRY_FILENAME;
+exports.UI_REMOTE_SERVER_ENTRY_FILENAME = UI_REMOTE_SERVER_ENTRY_FILENAME;
+exports.sanitizeContainerName = require_identity.containerName;
+//# sourceMappingURL=contract.cjs.map

package/dist/ui/manifest/contract.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.cjs","names":[],"sources":["../../../src/ui/manifest/contract.ts"],"sourcesContent":["/**\n * Cross-workspace composition contract: file names, MF expose names, and the\n * core's identity — the literals every consumer of the composed tree must\n * agree on. Browser-safe, node-safe, zero imports.\n */\n\n/** The core ui's composition key — `bos.config.json`'s `app.ui` identity. */\nexport const CORE_UI_PLUGIN_KEY = \"ui\";\n\nexport const UI_REMOTE_ENTRY_FILENAME = \"remoteEntry.js\";\nexport const UI_REMOTE_SERVER_ENTRY_FILENAME = \"remoteEntry.server.js\";\nexport const MANIFEST_FILENAME = \"manifest.gen.json\";\nexport const ROUTE_CONFIG_FILENAME = \"routeConfig.gen.ts\";\n\n/** Canonical MF exposes every manifest-composed ui source ships. */\nexport const UI_EXPOSES = {\n  routeConfig: \"./routeConfig\",\n  compose: \"./compose\",\n  router: \"./Router\",\n} as const;\n\n/** Exposes a PLUGIN ui source ships (the core additionally exposes compose/Router). */\nexport const PLUGIN_UI_SHARED_EXPOSES = {\n  routeConfig: UI_EXPOSES.routeConfig,\n} as const;\n\n/**\n * MF container naming rule shared by the build (rsbuild config) and runtime\n * config resolution — the host must register remotes under exactly the name\n * the built container declares. Delegates to the canonical identity module\n * (`every-plugin/identity`), which owns the derivation.\n */\nexport { containerName as sanitizeContainerName } from \"../../identity\";\n"],"mappings":";;;;;;;;;;AAOA,MAAa,qBAAqB;AAElC,MAAa,2BAA2B;AACxC,MAAa,kCAAkC;AAC/C,MAAa,oBAAoB;AACjC,MAAa,wBAAwB;;AAGrC,MAAa,aAAa;CACxB,aAAa;CACb,SAAS;CACT,QAAQ;AACV;;AAGA,MAAa,2BAA2B,EACtC,aAAa,WAAW,YAC1B"}

package/dist/ui/manifest/contract.d.cts

@@ -0,0 +1,26 @@
+import { containerName } from "../../identity.cjs";
+//#region src/ui/manifest/contract.d.ts
+/**
+ * Cross-workspace composition contract: file names, MF expose names, and the
+ * core's identity — the literals every consumer of the composed tree must
+ * agree on. Browser-safe, node-safe, zero imports.
+ */
+/** The core ui's composition key — `bos.config.json`'s `app.ui` identity. */
+declare const CORE_UI_PLUGIN_KEY = "ui";
+declare const UI_REMOTE_ENTRY_FILENAME = "remoteEntry.js";
+declare const UI_REMOTE_SERVER_ENTRY_FILENAME = "remoteEntry.server.js";
+declare const MANIFEST_FILENAME = "manifest.gen.json";
+declare const ROUTE_CONFIG_FILENAME = "routeConfig.gen.ts";
+/** Canonical MF exposes every manifest-composed ui source ships. */
+declare const UI_EXPOSES: {
+  readonly routeConfig: "./routeConfig";
+  readonly compose: "./compose";
+  readonly router: "./Router";
+};
+/** Exposes a PLUGIN ui source ships (the core additionally exposes compose/Router). */
+declare const PLUGIN_UI_SHARED_EXPOSES: {
+  readonly routeConfig: "./routeConfig";
+};
+//#endregion
+export { CORE_UI_PLUGIN_KEY, MANIFEST_FILENAME, PLUGIN_UI_SHARED_EXPOSES, ROUTE_CONFIG_FILENAME, UI_EXPOSES, UI_REMOTE_ENTRY_FILENAME, UI_REMOTE_SERVER_ENTRY_FILENAME, containerName as sanitizeContainerName };
+//# sourceMappingURL=contract.d.cts.map

package/dist/ui/manifest/contract.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.d.cts","names":[],"sources":["../../../src/ui/manifest/contract.ts"],"mappings":";;;;;;;;cAOa;cAEA;cACA;cACA;cACA;;cAGA;WACX;WACA;WACA;;;cAIW;WACX"}

package/dist/ui/manifest/contract.d.mts

@@ -0,0 +1,26 @@
+import { containerName } from "../../identity.mjs";
+//#region src/ui/manifest/contract.d.ts
+/**
+ * Cross-workspace composition contract: file names, MF expose names, and the
+ * core's identity — the literals every consumer of the composed tree must
+ * agree on. Browser-safe, node-safe, zero imports.
+ */
+/** The core ui's composition key — `bos.config.json`'s `app.ui` identity. */
+declare const CORE_UI_PLUGIN_KEY = "ui";
+declare const UI_REMOTE_ENTRY_FILENAME = "remoteEntry.js";
+declare const UI_REMOTE_SERVER_ENTRY_FILENAME = "remoteEntry.server.js";
+declare const MANIFEST_FILENAME = "manifest.gen.json";
+declare const ROUTE_CONFIG_FILENAME = "routeConfig.gen.ts";
+/** Canonical MF exposes every manifest-composed ui source ships. */
+declare const UI_EXPOSES: {
+  readonly routeConfig: "./routeConfig";
+  readonly compose: "./compose";
+  readonly router: "./Router";
+};
+/** Exposes a PLUGIN ui source ships (the core additionally exposes compose/Router). */
+declare const PLUGIN_UI_SHARED_EXPOSES: {
+  readonly routeConfig: "./routeConfig";
+};
+//#endregion
+export { CORE_UI_PLUGIN_KEY, MANIFEST_FILENAME, PLUGIN_UI_SHARED_EXPOSES, ROUTE_CONFIG_FILENAME, UI_EXPOSES, UI_REMOTE_ENTRY_FILENAME, UI_REMOTE_SERVER_ENTRY_FILENAME, containerName as sanitizeContainerName };
+//# sourceMappingURL=contract.d.mts.map

package/dist/ui/manifest/contract.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.d.mts","names":[],"sources":["../../../src/ui/manifest/contract.ts"],"mappings":";;;;;;;;cAOa;cAEA;cACA;cACA;cACA;;cAGA;WACX;WACA;WACA;;;cAIW;WACX"}

package/dist/ui/manifest/contract.mjs

@@ -0,0 +1,26 @@
+import { containerName } from "../../identity.mjs";
+
+//#region src/ui/manifest/contract.ts
+/**
+* Cross-workspace composition contract: file names, MF expose names, and the
+* core's identity — the literals every consumer of the composed tree must
+* agree on. Browser-safe, node-safe, zero imports.
+*/
+/** The core ui's composition key — `bos.config.json`'s `app.ui` identity. */
+const CORE_UI_PLUGIN_KEY = "ui";
+const UI_REMOTE_ENTRY_FILENAME = "remoteEntry.js";
+const UI_REMOTE_SERVER_ENTRY_FILENAME = "remoteEntry.server.js";
+const MANIFEST_FILENAME = "manifest.gen.json";
+const ROUTE_CONFIG_FILENAME = "routeConfig.gen.ts";
+/** Canonical MF exposes every manifest-composed ui source ships. */
+const UI_EXPOSES = {
+	routeConfig: "./routeConfig",
+	compose: "./compose",
+	router: "./Router"
+};
+/** Exposes a PLUGIN ui source ships (the core additionally exposes compose/Router). */
+const PLUGIN_UI_SHARED_EXPOSES = { routeConfig: UI_EXPOSES.routeConfig };
+
+//#endregion
+export { CORE_UI_PLUGIN_KEY, MANIFEST_FILENAME, PLUGIN_UI_SHARED_EXPOSES, ROUTE_CONFIG_FILENAME, UI_EXPOSES, UI_REMOTE_ENTRY_FILENAME, UI_REMOTE_SERVER_ENTRY_FILENAME, containerName as sanitizeContainerName };
+//# sourceMappingURL=contract.mjs.map

package/dist/ui/manifest/contract.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.mjs","names":[],"sources":["../../../src/ui/manifest/contract.ts"],"sourcesContent":["/**\n * Cross-workspace composition contract: file names, MF expose names, and the\n * core's identity — the literals every consumer of the composed tree must\n * agree on. Browser-safe, node-safe, zero imports.\n */\n\n/** The core ui's composition key — `bos.config.json`'s `app.ui` identity. */\nexport const CORE_UI_PLUGIN_KEY = \"ui\";\n\nexport const UI_REMOTE_ENTRY_FILENAME = \"remoteEntry.js\";\nexport const UI_REMOTE_SERVER_ENTRY_FILENAME = \"remoteEntry.server.js\";\nexport const MANIFEST_FILENAME = \"manifest.gen.json\";\nexport const ROUTE_CONFIG_FILENAME = \"routeConfig.gen.ts\";\n\n/** Canonical MF exposes every manifest-composed ui source ships. */\nexport const UI_EXPOSES = {\n  routeConfig: \"./routeConfig\",\n  compose: \"./compose\",\n  router: \"./Router\",\n} as const;\n\n/** Exposes a PLUGIN ui source ships (the core additionally exposes compose/Router). */\nexport const PLUGIN_UI_SHARED_EXPOSES = {\n  routeConfig: UI_EXPOSES.routeConfig,\n} as const;\n\n/**\n * MF container naming rule shared by the build (rsbuild config) and runtime\n * config resolution — the host must register remotes under exactly the name\n * the built container declares. Delegates to the canonical identity module\n * (`every-plugin/identity`), which owns the derivation.\n */\nexport { containerName as sanitizeContainerName } from \"../../identity\";\n"],"mappings":";;;;;;;;;AAOA,MAAa,qBAAqB;AAElC,MAAa,2BAA2B;AACxC,MAAa,kCAAkC;AAC/C,MAAa,oBAAoB;AACjC,MAAa,wBAAwB;;AAGrC,MAAa,aAAa;CACxB,aAAa;CACb,SAAS;CACT,QAAQ;AACV;;AAGA,MAAa,2BAA2B,EACtC,aAAa,WAAW,YAC1B"}

package/dist/ui/manifest/descriptor.cjs

@@ -0,0 +1,64 @@
+const require_mount_registry = require('./mount-registry.cjs');
+
+//#region src/ui/manifest/descriptor.ts
+function App(input) {
+	return input;
+}
+function Plugin(name) {
+	return {
+		local: (path) => ({
+			name,
+			source: {
+				kind: "local",
+				path
+			}
+		}),
+		remote: (mfName, url) => ({
+			name,
+			source: {
+				kind: "remote",
+				mfName,
+				url
+			}
+		})
+	};
+}
+/** Flatten an app against the registry of apps: `extends` inherits the base's plugins, child wins. */
+function resolveApp(input, apps) {
+	const base = input.extends ? apps[input.extends] : void 0;
+	if (input.extends && !base) throw new Error(`extends target "${input.extends}" not found`);
+	const plugins = {};
+	for (const [key, ref] of Object.entries(base?.plugins ?? {})) plugins[key] = {
+		key,
+		...ref
+	};
+	for (const [key, ref] of Object.entries(input.plugins)) plugins[key] = {
+		key,
+		...ref
+	};
+	return {
+		name: input.name,
+		plugins
+	};
+}
+/**
+* Composition digest — sha256 (WebCrypto) over everything that determines
+* the tree: app name, plugin keys, MF names, manifests, and the imported
+* `MOUNT_REGISTRY_VERSION`. Deployment URLs are deliberately excluded so
+* disk and prod paths digest identically (hydration parity).
+*/
+async function digestOf(input) {
+	const bytes = new TextEncoder().encode(JSON.stringify({
+		...input,
+		mountRegistryVersion: 5
+	}));
+	const hash = await crypto.subtle.digest("SHA-256", bytes);
+	return Array.from(new Uint8Array(hash)).map((b) => b.toString(16).padStart(2, "0")).join("").slice(0, 16);
+}
+
+//#endregion
+exports.App = App;
+exports.Plugin = Plugin;
+exports.digestOf = digestOf;
+exports.resolveApp = resolveApp;
+//# sourceMappingURL=descriptor.cjs.map

package/dist/ui/manifest/descriptor.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"descriptor.cjs","names":[],"sources":["../../../src/ui/manifest/descriptor.ts"],"sourcesContent":["import { MOUNT_REGISTRY_VERSION } from \"./mount-registry\";\n\n/**\n * Shape-of-028 descriptor slice (ADR 0005 / plan 028) — composition-resolver\n * surface only. Pure data: `App({...})` returns a typed object. `extends`\n * resolves child-wins over the base app's plugins (publish-time flattening\n * model of wayfinder ticket 08). Plan 028 will declaration-merge\n * `KnownPlugins` from generated types; until then the interface is empty and\n * `Plugin(\"bogus\")` does not compile.\n */\n\nexport interface RemoteSource {\n  kind: \"local\" | \"remote\";\n  path?: string;\n  mfName?: string;\n  url?: string;\n}\n\nexport interface PluginRef {\n  key: string;\n  source: RemoteSource;\n}\n\nexport interface ResolvedApp {\n  name: string;\n  plugins: Record<string, PluginRef>;\n}\n\nexport interface PluginRefInput {\n  name: string;\n  source: RemoteSource;\n}\n\nexport interface AppInput {\n  name: string;\n  extends?: string;\n  plugins: Record<string, PluginRefInput>;\n}\n\n/** Declaration-merged from generated types by plan 028 — must stay an interface (types cannot merge). */\n// biome-ignore lint/suspicious/noEmptyInterface: declaration-merge surface\nexport interface KnownPlugins {}\n\nexport function App(input: AppInput): AppInput {\n  return input;\n}\n\nexport function Plugin<K extends Extract<keyof KnownPlugins, string>>(\n  name: K,\n): {\n  local: (path: string) => PluginRefInput;\n  remote: (mfName: string, url: string) => PluginRefInput;\n} {\n  return {\n    local: (path) => ({ name, source: { kind: \"local\", path } }),\n    remote: (mfName, url) => ({ name, source: { kind: \"remote\", mfName, url } }),\n  };\n}\n\n/** Flatten an app against the registry of apps: `extends` inherits the base's plugins, child wins. */\nexport function resolveApp(input: AppInput, apps: Record<string, AppInput>): ResolvedApp {\n  const base = input.extends ? apps[input.extends] : undefined;\n  if (input.extends && !base) throw new Error(`extends target \"${input.extends}\" not found`);\n  const plugins: Record<string, PluginRef> = {};\n  for (const [key, ref] of Object.entries(base?.plugins ?? {})) {\n    plugins[key] = { key, ...ref };\n  }\n  for (const [key, ref] of Object.entries(input.plugins)) {\n    plugins[key] = { key, ...ref };\n  }\n  return { name: input.name, plugins };\n}\n\nexport interface CompositionDigestInput {\n  /** optional app label — deliberately NOT a tree-identity input; omit for server/client parity */\n  appName?: string;\n  plugins: Array<{ key: string; mfName: string }>;\n  manifests: Array<unknown>;\n}\n\n/**\n * Composition digest — sha256 (WebCrypto) over everything that determines\n * the tree: app name, plugin keys, MF names, manifests, and the imported\n * `MOUNT_REGISTRY_VERSION`. Deployment URLs are deliberately excluded so\n * disk and prod paths digest identically (hydration parity).\n */\nexport async function digestOf(input: CompositionDigestInput): Promise<string> {\n  const bytes = new TextEncoder().encode(\n    JSON.stringify({ ...input, mountRegistryVersion: MOUNT_REGISTRY_VERSION }),\n  );\n  const hash = await crypto.subtle.digest(\"SHA-256\", bytes);\n  return Array.from(new Uint8Array(hash))\n    .map((b) => b.toString(16).padStart(2, \"0\"))\n    .join(\"\")\n    .slice(0, 16);\n}\n"],"mappings":";;;AA2CA,SAAgB,IAAI,OAA2B;CAC7C,OAAO;AACT;AAEA,SAAgB,OACd,MAIA;CACA,OAAO;EACL,QAAQ,UAAU;GAAE;GAAM,QAAQ;IAAE,MAAM;IAAS;GAAK;EAAE;EAC1D,SAAS,QAAQ,SAAS;GAAE;GAAM,QAAQ;IAAE,MAAM;IAAU;IAAQ;GAAI;EAAE;CAC5E;AACF;;AAGA,SAAgB,WAAW,OAAiB,MAA6C;CACvF,MAAM,OAAO,MAAM,UAAU,KAAK,MAAM,WAAW;CACnD,IAAI,MAAM,WAAW,CAAC,MAAM,MAAM,IAAI,MAAM,mBAAmB,MAAM,QAAQ,YAAY;CACzF,MAAM,UAAqC,CAAC;CAC5C,KAAK,MAAM,CAAC,KAAK,QAAQ,OAAO,QAAQ,MAAM,WAAW,CAAC,CAAC,GACzD,QAAQ,OAAO;EAAE;EAAK,GAAG;CAAI;CAE/B,KAAK,MAAM,CAAC,KAAK,QAAQ,OAAO,QAAQ,MAAM,OAAO,GACnD,QAAQ,OAAO;EAAE;EAAK,GAAG;CAAI;CAE/B,OAAO;EAAE,MAAM,MAAM;EAAM;CAAQ;AACrC;;;;;;;AAeA,eAAsB,SAAS,OAAgD;CAC7E,MAAM,QAAQ,IAAI,YAAY,CAAC,CAAC,OAC9B,KAAK,UAAU;EAAE,GAAG;EAAO;CAA6C,CAAC,CAC3E;CACA,MAAM,OAAO,MAAM,OAAO,OAAO,OAAO,WAAW,KAAK;CACxD,OAAO,MAAM,KAAK,IAAI,WAAW,IAAI,CAAC,CAAC,CACpC,KAAK,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAC3C,KAAK,EAAE,CAAC,CACR,MAAM,GAAG,EAAE;AAChB"}

package/dist/ui/manifest/descriptor.d.cts

@@ -0,0 +1,60 @@
+//#region src/ui/manifest/descriptor.d.ts
+/**
+ * Shape-of-028 descriptor slice (ADR 0005 / plan 028) — composition-resolver
+ * surface only. Pure data: `App({...})` returns a typed object. `extends`
+ * resolves child-wins over the base app's plugins (publish-time flattening
+ * model of wayfinder ticket 08). Plan 028 will declaration-merge
+ * `KnownPlugins` from generated types; until then the interface is empty and
+ * `Plugin("bogus")` does not compile.
+ */
+interface RemoteSource {
+  kind: "local" | "remote";
+  path?: string;
+  mfName?: string;
+  url?: string;
+}
+interface PluginRef {
+  key: string;
+  source: RemoteSource;
+}
+interface ResolvedApp {
+  name: string;
+  plugins: Record<string, PluginRef>;
+}
+interface PluginRefInput {
+  name: string;
+  source: RemoteSource;
+}
+interface AppInput {
+  name: string;
+  extends?: string;
+  plugins: Record<string, PluginRefInput>;
+}
+/** Declaration-merged from generated types by plan 028 — must stay an interface (types cannot merge). */
+interface KnownPlugins {}
+declare function App(input: AppInput): AppInput;
+declare function Plugin<K extends Extract<keyof KnownPlugins, string>>(name: K): {
+  local: (path: string) => PluginRefInput;
+  remote: (mfName: string, url: string) => PluginRefInput;
+};
+/** Flatten an app against the registry of apps: `extends` inherits the base's plugins, child wins. */
+declare function resolveApp(input: AppInput, apps: Record<string, AppInput>): ResolvedApp;
+interface CompositionDigestInput {
+  /** optional app label — deliberately NOT a tree-identity input; omit for server/client parity */
+  appName?: string;
+  plugins: Array<{
+    key: string;
+    mfName: string;
+  }>;
+  manifests: Array<unknown>;
+}
+/**
+ * Composition digest — sha256 (WebCrypto) over everything that determines
+ * the tree: app name, plugin keys, MF names, manifests, and the imported
+ * `MOUNT_REGISTRY_VERSION`. Deployment URLs are deliberately excluded so
+ * disk and prod paths digest identically (hydration parity).
+ */
+declare function digestOf(input: CompositionDigestInput): Promise<string>;
+//#endregion
+export { App, AppInput, CompositionDigestInput, KnownPlugins, Plugin, PluginRef, PluginRefInput, RemoteSource, ResolvedApp, digestOf, resolveApp };
+//# sourceMappingURL=descriptor.d.cts.map

package/dist/ui/manifest/descriptor.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"descriptor.d.cts","names":[],"sources":["../../../src/ui/manifest/descriptor.ts"],"mappings":";;;;;;;;;UAWiB;EACf;EACA;EACA;EACA;;UAGe;EACf;EACA,QAAQ;;UAGO;EACf;EACA,SAAS,eAAe;;UAGT;EACf;EACA,QAAQ;;UAGO;EACf;EACA;EACA,SAAS,eAAe;;;UAKT;iBAED,IAAI,OAAO,WAAW;iBAItB,OAAO,UAAU,cAAc,uBAC7C,MAAM;EAEN,QAAQ,iBAAiB;EACzB,SAAS,gBAAgB,gBAAgB;;;iBAS3B,WAAW,OAAO,UAAU,MAAM,eAAe,YAAY;UAa5D;;EAEf;EACA,SAAS;IAAQ;IAAa;;EAC9B,WAAW;;;;;;;;iBASS,SAAS,OAAO,yBAAyB"}

package/dist/ui/manifest/descriptor.d.mts

@@ -0,0 +1,60 @@
+//#region src/ui/manifest/descriptor.d.ts
+/**
+ * Shape-of-028 descriptor slice (ADR 0005 / plan 028) — composition-resolver
+ * surface only. Pure data: `App({...})` returns a typed object. `extends`
+ * resolves child-wins over the base app's plugins (publish-time flattening
+ * model of wayfinder ticket 08). Plan 028 will declaration-merge
+ * `KnownPlugins` from generated types; until then the interface is empty and
+ * `Plugin("bogus")` does not compile.
+ */
+interface RemoteSource {
+  kind: "local" | "remote";
+  path?: string;
+  mfName?: string;
+  url?: string;
+}
+interface PluginRef {
+  key: string;
+  source: RemoteSource;
+}
+interface ResolvedApp {
+  name: string;
+  plugins: Record<string, PluginRef>;
+}
+interface PluginRefInput {
+  name: string;
+  source: RemoteSource;
+}
+interface AppInput {
+  name: string;
+  extends?: string;
+  plugins: Record<string, PluginRefInput>;
+}
+/** Declaration-merged from generated types by plan 028 — must stay an interface (types cannot merge). */
+interface KnownPlugins {}
+declare function App(input: AppInput): AppInput;
+declare function Plugin<K extends Extract<keyof KnownPlugins, string>>(name: K): {
+  local: (path: string) => PluginRefInput;
+  remote: (mfName: string, url: string) => PluginRefInput;
+};
+/** Flatten an app against the registry of apps: `extends` inherits the base's plugins, child wins. */
+declare function resolveApp(input: AppInput, apps: Record<string, AppInput>): ResolvedApp;
+interface CompositionDigestInput {
+  /** optional app label — deliberately NOT a tree-identity input; omit for server/client parity */
+  appName?: string;
+  plugins: Array<{
+    key: string;
+    mfName: string;
+  }>;
+  manifests: Array<unknown>;
+}
+/**
+ * Composition digest — sha256 (WebCrypto) over everything that determines
+ * the tree: app name, plugin keys, MF names, manifests, and the imported
+ * `MOUNT_REGISTRY_VERSION`. Deployment URLs are deliberately excluded so
+ * disk and prod paths digest identically (hydration parity).
+ */
+declare function digestOf(input: CompositionDigestInput): Promise<string>;
+//#endregion
+export { App, AppInput, CompositionDigestInput, KnownPlugins, Plugin, PluginRef, PluginRefInput, RemoteSource, ResolvedApp, digestOf, resolveApp };
+//# sourceMappingURL=descriptor.d.mts.map