webloom-framework 0.1.0

package/dist/testing.d.ts

@@ -0,0 +1,23 @@
+import { an as RemoteServiceCallContext, o as CreatePluginHostOptions, a0 as PluginHost, au as RemoteServiceTransport } from './createPluginHost-CcW9sPNs.js';
+export { j as CapabilityRegistry, k as ContextExtensionInput, l as ContributionAdapter, m as ContributionAdapterInput, n as ContributionHandle, T as PermissionPolicyInput, V as PermissionPolicyResult, Y as PluginConfigStore, aH as RuntimeUnitSnapshot, aJ as ScopeResolution, aK as ScopeResolver, aL as ScopeResolverInput, aO as StartupCapabilityError, aQ as StartupPluginError, a_ as createCapabilityRegistry, a$ as createInMemoryPluginConfigStore, b0 as createPluginHost, b2 as createResourceStore } from './createPluginHost-CcW9sPNs.js';
+export { C as CreateMessagePortServiceTransportOptions, a as CreatePluginIntentControllerOptions, b as CreateResourceScopeOptions, c as CreateServiceBridgeOptions, R as RemoteServicePortCallMessage, d as RemoteServicePortCancelMessage, e as RemoteServicePortErrorMessage, f as RemoteServicePortResponseMessage, g as RemoteServicePortResultMessage, h as ResourceScopeOptions, i as RuntimeUnitImplementation, j as createLifecycleScope, k as createMessageBus, l as createMessagePortServiceTransport, m as createPluginIntentController, n as createRemoteServiceBridge, o as createResourceRegistry, p as createResourceScope, q as createRuntimeUnitImplementationRegistry, r as createServiceBridge } from './resourceRegistry-BAnqKcp7.js';
+
+interface FakeTransportCall {
+    /** 调用请求体。 */
+    request: unknown;
+    /** Host 已绑定的调用上下文。 */
+    context: RemoteServiceCallContext;
+}
+interface CreateFakeTransportOptions {
+    /** 假服务返回值；缺省返回 undefined。 */
+    handle?: (request: unknown, context: RemoteServiceCallContext) => unknown | Promise<unknown>;
+}
+/** 创建可观察的假服务传输；每次 call 都记录 request 和 context。 */
+declare function createFakeRemoteServiceTransport(options?: CreateFakeTransportOptions): RemoteServiceTransport & {
+    readonly calls: readonly FakeTransportCall[];
+    reset(): void;
+};
+/** 创建测试 Host；默认关闭任何领域装配，只保留通用核心。 */
+declare function createFakePluginHost(options?: CreatePluginHostOptions): PluginHost;
+
+export { type CreateFakeTransportOptions, CreatePluginHostOptions, type FakeTransportCall, PluginHost, createFakePluginHost, createFakeRemoteServiceTransport };

package/dist/testing.js

@@ -0,0 +1,27 @@
+import { createPluginHost } from './chunk-KGNF36DZ.js';
+export { StartupCapabilityError, StartupPluginError, createCapabilityRegistry, createInMemoryPluginConfigStore, createLifecycleScope, createMessageBus, createMessagePortServiceTransport, createPluginHost, createPluginIntentController, createRemoteServiceBridge, createResourceRegistry, createResourceScope, createResourceStore, createRuntimeUnitImplementationRegistry, createServiceBridge } from './chunk-KGNF36DZ.js';
+
+// src/testing/fakes.ts
+function createFakeRemoteServiceTransport(options = {}) {
+  const calls = [];
+  return {
+    calls,
+    reset() {
+      calls.length = 0;
+    },
+    async call(request, context) {
+      calls.push({ request, context });
+      return await options.handle?.(request, context);
+    }
+  };
+}
+function createFakePluginHost(options = {}) {
+  return createPluginHost({
+    ...options,
+    initialPluginConfig: options.initialPluginConfig ?? {}
+  });
+}
+
+export { createFakePluginHost, createFakeRemoteServiceTransport };
+//# sourceMappingURL=testing.js.map
+//# sourceMappingURL=testing.js.map

package/dist/testing.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/testing/fakes.ts"],"names":[],"mappings":";;;;AAyBO,SAAS,gCAAA,CACd,OAAA,GAAsC,EAAC,EACmD;AAC1F,EAAA,MAAM,QAA6B,EAAC;AACpC,EAAA,OAAO;AAAA,IACL,KAAA;AAAA,IACA,KAAA,GAAQ;AAAE,MAAA,KAAA,CAAM,MAAA,GAAS,CAAA;AAAA,IAAG,CAAA;AAAA,IAC5B,MAAM,IAAA,CAAwB,OAAA,EAAmB,OAAA,EAAqD;AACpG,MAAA,KAAA,CAAM,IAAA,CAAK,EAAE,OAAA,EAAS,OAAA,EAAS,CAAA;AAC/B,MAAA,OAAO,MAAM,OAAA,CAAQ,MAAA,GAAS,OAAA,EAAS,OAAO,CAAA;AAAA,IAChD;AAAA,GACF;AACF;AAGO,SAAS,oBAAA,CAAqB,OAAA,GAAmC,EAAC,EAAe;AACtF,EAAA,OAAO,gBAAA,CAAiB;AAAA,IACtB,GAAG,OAAA;AAAA,IACH,mBAAA,EAAqB,OAAA,CAAQ,mBAAA,IAAuB;AAAC,GACtD,CAAA;AACH","file":"testing.js","sourcesContent":["// WebLoom 测试辅助：只提供通用假实现，不携带产品语义。\n\nimport type {\n  RemoteServiceCallContext,\n  RemoteServiceTransport,\n} from \"../contracts/lifecycle.js\";\nimport {\n  createPluginHost,\n  type CreatePluginHostOptions,\n  type PluginHost,\n} from \"../host/createPluginHost.js\";\n\nexport interface FakeTransportCall {\n  /** 调用请求体。 */\n  request: unknown;\n  /** Host 已绑定的调用上下文。 */\n  context: RemoteServiceCallContext;\n}\n\nexport interface CreateFakeTransportOptions {\n  /** 假服务返回值；缺省返回 undefined。 */\n  handle?: (request: unknown, context: RemoteServiceCallContext) => unknown | Promise<unknown>;\n}\n\n/** 创建可观察的假服务传输；每次 call 都记录 request 和 context。 */\nexport function createFakeRemoteServiceTransport(\n  options: CreateFakeTransportOptions = {},\n): RemoteServiceTransport & { readonly calls: readonly FakeTransportCall[]; reset(): void } {\n  const calls: FakeTransportCall[] = [];\n  return {\n    calls,\n    reset() { calls.length = 0; },\n    async call<TRequest, TResult>(request: TRequest, context: RemoteServiceCallContext): Promise<TResult> {\n      calls.push({ request, context });\n      return await options.handle?.(request, context) as TResult;\n    },\n  };\n}\n\n/** 创建测试 Host；默认关闭任何领域装配，只保留通用核心。 */\nexport function createFakePluginHost(options: CreatePluginHostOptions = {}): PluginHost {\n  return createPluginHost({\n    ...options,\n    initialPluginConfig: options.initialPluginConfig ?? {},\n  });\n}\n"]}

package/docs/api.md

@@ -0,0 +1,29 @@
+# WebLoom API 说明
+
+## 依赖和运行单元
+
+`PluginManifest` 描述一个产品，`RuntimeUnitDescriptor` 描述该产品在某个 `execution` 环境中的运行单元。`pluginId` 是产品级稳定身份，`unitId` 是单元级稳定身份，`instanceId` 是每次启动新生成的实例身份。运行单元依赖必须同时声明 `capability`、`contractVersion`、`sourceExecution` 和 `scope`，Host 不根据 capability 名猜测远端服务。可执行 setup 必须由宿主的 `runtimeUnitImplementationRegistry` 按 `pluginId + unitId` 提供，静态清单不携带函数。
+
+`meta.defaultEnabled` 是初始启用意图，`PluginState.kind` 是实际运行状态。两者必须分开读取：依赖缺失时可以得到 `blocked`，同时保留 `desiredEnabled: true`。
+
+## Context 和 Scope
+
+`PluginContext` 的基础字段只包含插件身份、实例身份、Scope、取消信号、权限租约、MessageBus、配置和 capability 访问。产品服务通过 `contextExtension` 注入，扩展属性按只读对象处理。
+
+`LifecycleScope.revoke()` 是同步安全边界：它先阻止新资源、撤销权限租约并触发 `AbortSignal`；`dispose()` 再等待清理。清理失败和超时通过 `LifecycleDisposeResult` 暴露，不能被包装成成功。异步创建在撤权后才返回时，资源会立即释放且不会进入旧实例。
+
+## 权限
+
+权限租约把插件申请、可信批准和会话约束求交集。`permissions` 只是 Context 视图，最终远端调用或持久化写入仍需使用 `verifyPermissionLease()` 和 `assertBinding()` 做 fail-closed 检查。`attributes` 参与租约身份比较，但不作为任意数据仓库。
+
+## 服务桥和 wire codec
+
+`createServiceBridge()` 只接受同一连接、权威身份、连续快照和精确契约版本。旧 revision、revision gap、Provider 实例重建和断线都会使旧代理永久失效。传输层每次调用生成独立 `callId`；业务 `operationId` 可以重用，两者不混淆。
+
+`createRemoteServiceMessageCodec()` 默认生成 `webloom.remote-service.*` 消息名。产品迁移旧协议时可以传入旧前缀，编码、解码和版本仍由 codec 集中负责。
+
+## 宿主扩展点
+
+`CreatePluginHostOptions` 提供 `capabilities`、`contextExtension`、`manifestValidator`、`scopeResolver`、`permissionPolicy`、`configStore`、`pluginIntentCoordinator`、`runtimeSnapshots`、`contributionAdapters` 和 `serviceBridgeForPlugin`。WebLoom 不创建产品 Registry、日志、存储或身份状态机。
+
+贡献适配器返回的 `ContributionHandle` 支持 `revoke()` 和 `dispose()`：前者用于同步撤下入口，后者用于等待异步收尾。任何贡献都必须绑定当前 `instanceId` 和 Scope。

package/docs/migration-baseline.md

@@ -0,0 +1,32 @@
+# WebLoom 拆分基线
+
+本次独立拆分的源码基线记录如下：
+
+| 项目 | 值 |
+| --- | --- |
+| 来源仓库基线 | `f937804fe47c53b3e452ba6cbad4d1687c7671c4` |
+| WebLoom 起始提交 | `f1c801655c3132c57b66045ff6d5e642fba4a8ea` |
+| Node | `v22.13.1` |
+| pnpm | `11.5.1` |
+| 首发包版本 | `0.1.0` |
+
+迁入范围是通用 Manifest、依赖图、Host 调度、MessageBus、生命周期 Scope、权限租约、服务桥、MessagePort 传输、升级门禁、意图控制、任务调度、资源 Store 和 React 绑定。产品 Registry、业务配置、产品日志、身份状态机和视觉组件不属于 WebLoom。
+
+本文件只记录代码迁移基线。npm 包名占用查询、许可证归属确认、provenance、发布和部署由发布责任人在发布批次执行；施工代理不自动发布。
+
+## 当前工作区发布状态
+
+当前拆分源码仍在工作树中，尚未形成包含全部实现的正式提交；上表的
+`WebLoom 起始提交` 只是独立仓库初始化提交，不能充当 `0.1.0` 的源码 provenance。
+
+正式发布前必须由负责人完成以下确认：
+
+- 提交 WebLoom 全部实现和测试，并把该提交记录为发布 provenance；
+- 确认 `AGPL-3.0-only` 源码归属和发布责任；
+- 使用 `pnpm run pack:consumer` 验证 tarball 的 core-only、React 和 Worker 三类消费者；
+- 每个临时消费者都生成独立的 `smoke.ts`，使用临时项目自己的 `tsc --noEmit`
+  编译公开声明；Worker 消费者使用 `lib: ["ES2022", "WebWorker"]` 且不安装 React；
+- `npm pack --json` 必须通过发布文件白名单、tarball/解包体积上限和必需入口文件检查；
+- 从 tarball 解包后扫描全部 `.d.ts` 与 `.js.map`，禁止本地绝对路径、不可发布的
+  source map 路径以及产品领域字段；
+- 在负责人确认后创建 `v0.1.0` tag 并发布 npm 包。

package/package.json

@@ -0,0 +1,68 @@
+{
+  "name": "webloom-framework",
+  "version": "0.1.0",
+  "description": "通用前端插件生命周期框架",
+  "license": "AGPL-3.0-only",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/bsv8/WebLoom.git"
+  },
+  "bugs": {
+    "url": "https://github.com/bsv8/WebLoom/issues"
+  },
+  "homepage": "https://github.com/bsv8/WebLoom#readme",
+  "type": "module",
+  "packageManager": "pnpm@11.5.1",
+  "engines": {
+    "node": ">=18"
+  },
+  "sideEffects": false,
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE",
+    "docs"
+  ],
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./react": {
+      "types": "./dist/react.d.ts",
+      "import": "./dist/react.js"
+    },
+    "./testing": {
+      "types": "./dist/testing.d.ts",
+      "import": "./dist/testing.js"
+    }
+  },
+  "scripts": {
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run",
+    "build": "tsup",
+    "lint:boundaries": "node scripts/check-boundaries.mjs",
+    "prepack": "pnpm typecheck && pnpm test && pnpm build && pnpm lint:boundaries",
+    "pack": "npm pack",
+    "pack:consumer": "pnpm run prepack && node scripts/pack-consumer-smoke.mjs"
+  },
+  "peerDependencies": {
+    "react": ">=18"
+  },
+  "peerDependenciesMeta": {
+    "react": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@testing-library/react": "16.3.2",
+    "@types/react": "18.3.3",
+    "@types/react-dom": "18.3.0",
+    "jsdom": "25.0.1",
+    "react": "18.3.1",
+    "react-dom": "18.3.1",
+    "tsup": "8.5.1",
+    "typescript": "5.5.4",
+    "vitest": "3.2.4"
+  }
+}