Modules had no way to be told anything. Announcements — the first real product Ekklesia will absorb — has zero environment variables and compiles a LAN IP address into its source, so this is the contract standing between it and the module system. - A module declares what it needs in its manifest, using six bounded types (string, integer, boolean, enum, url, secret) with no nesting and no regular expressions. Static declaration is what lets the platform validate configuration *before* deciding whether a module may start: an enabled module missing a required value is reported `blocked · configuration_missing · <key>` rather than taking startup down from inside its own `start` hook, and Doctor reports the same while still importing no module code. That forces `manifestVersion: 5`, a hard cutover. - Ordinary values persist in one Core table (migration 0005), one row per (module_id, key), stored as text until validated against the declaring module's current manifest. Nothing is coerced; an invalid stored value blocks the module rather than falling back to the default. A key the manifest no longer declares is retained and ignored. - Secrets are never persisted. There is no encryption at rest in this repository, so a `secret` key is deployment-supplied and mapped in by the host under a name the module never sees. A secret declaration has no `default` field, the write API refuses secret material, and the HTTP view has no `value` field for one — absent by construction, not filtered. - Modules receive a frozen `context.config` on the registration, runtime, and HTTP handler contexts: the same object identity, per module, beside `services` rather than inside it (services is deliberately one shared instance). No environment access, no database reference, no way to reach another module's values. - Configuration decides eligibility through ADR 0028's existing resolver: three new blocked reasons, each with a distinct operator fix, propagating to required dependents through the same mechanism as a disabled module. - Changes take effect at the next restart; both resources report restartRequired. New restricted permission `core.modules.configuration.manage`, separate from lifecycle, at the sibling prefix `/api/v1/module-configuration`. - Migration participation stays independent of configuration validity. Endpoints and credentials for shared infrastructure stay platform concerns; a module declares which bucket it needs, not an S3 endpoint. See ADR 0029. Co-Authored-By: Claude Opus 5 <[email protected]>
231 lines
8.0 KiB
TypeScript
231 lines
8.0 KiB
TypeScript
import { mkdir, mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
|
|
import { tmpdir } from "node:os";
|
|
import path from "node:path";
|
|
import { afterEach, describe, expect, it } from "vitest";
|
|
import { buildModuleUi, ModuleUiBuildError } from "../src/index.js";
|
|
|
|
const temporaryDirectories: string[] = [];
|
|
|
|
afterEach(async () => {
|
|
await Promise.all(
|
|
temporaryDirectories
|
|
.splice(0)
|
|
.map((directory) => rm(directory, { recursive: true, force: true })),
|
|
);
|
|
});
|
|
|
|
interface ModuleFixtureOptions {
|
|
/** Omit to leave `entrypoints.ui` undeclared, as a backend-only module does. */
|
|
readonly ui?: string;
|
|
readonly manifest?: string;
|
|
readonly files?: Record<string, string>;
|
|
}
|
|
|
|
async function createModule(options: ModuleFixtureOptions = {}): Promise<string> {
|
|
const directory = await mkdtemp(path.join(tmpdir(), "ekklesia-ui-build-"));
|
|
temporaryDirectories.push(directory);
|
|
|
|
const manifest =
|
|
options.manifest ??
|
|
JSON.stringify({
|
|
manifestVersion: 5,
|
|
id: "example",
|
|
name: "Example",
|
|
version: "0.1.0",
|
|
compatibility: { platform: "^0.1.0", moduleSdk: "^0.1.0" },
|
|
entrypoints: {
|
|
server: "./dist/server/index.js",
|
|
...(options.ui === undefined ? {} : { ui: options.ui }),
|
|
},
|
|
});
|
|
await writeFile(path.join(directory, "ekklesia.module.json"), manifest);
|
|
|
|
for (const [relativePath, contents] of Object.entries(options.files ?? {})) {
|
|
const target = path.join(directory, relativePath);
|
|
await mkdir(path.dirname(target), { recursive: true });
|
|
await writeFile(target, contents);
|
|
}
|
|
return directory;
|
|
}
|
|
|
|
/** A UI entrypoint with no React, so the build tool's own tests exercise the pipeline mechanics
|
|
* without depending on a UI framework. The real React path is proven end to end by the module
|
|
* template's own test suite. */
|
|
const plainUiSource = `
|
|
const definition = {
|
|
id: "example",
|
|
version: "0.1.0",
|
|
mount(container) {
|
|
container.textContent = "example";
|
|
return () => {
|
|
container.textContent = "";
|
|
};
|
|
},
|
|
};
|
|
export default definition;
|
|
`;
|
|
|
|
describe("module UI build", () => {
|
|
it("bundles the declared entrypoint into the exact path the manifest names", async () => {
|
|
const directory = await createModule({
|
|
ui: "./dist/ui/index.js",
|
|
files: { "src/ui/index.tsx": plainUiSource },
|
|
});
|
|
|
|
const result = await buildModuleUi({ moduleDirectory: directory });
|
|
|
|
expect(result.outputFile).toBe(path.join(directory, "dist", "ui", "index.js"));
|
|
const artifact = await readFile(result.outputFile, "utf8");
|
|
expect(artifact).toContain("export {");
|
|
expect(artifact).toContain("as default");
|
|
});
|
|
|
|
it("honours an alternative declared artifact path", async () => {
|
|
const directory = await createModule({
|
|
ui: "./build/browser/ui.mjs",
|
|
files: { "src/ui/index.tsx": plainUiSource },
|
|
});
|
|
|
|
const result = await buildModuleUi({ moduleDirectory: directory });
|
|
|
|
expect(result.outputFile).toBe(path.join(directory, "build", "browser", "ui.mjs"));
|
|
});
|
|
|
|
it("emits a source map alongside the artifact", async () => {
|
|
const directory = await createModule({
|
|
ui: "./dist/ui/index.js",
|
|
files: { "src/ui/index.tsx": plainUiSource },
|
|
});
|
|
|
|
const result = await buildModuleUi({ moduleDirectory: directory });
|
|
|
|
await expect(readFile(`${result.outputFile}.map`, "utf8")).resolves.toContain("sources");
|
|
});
|
|
|
|
it("reports a backend-only module as having no UI to build rather than failing silently", async () => {
|
|
const directory = await createModule({ files: { "src/ui/index.tsx": plainUiSource } });
|
|
|
|
await expect(buildModuleUi({ moduleDirectory: directory })).rejects.toMatchObject({
|
|
code: "MODULE_UI_ENTRYPOINT_NOT_DECLARED",
|
|
});
|
|
});
|
|
|
|
it("fails when the declared UI has no source entrypoint", async () => {
|
|
const directory = await createModule({ ui: "./dist/ui/index.js" });
|
|
|
|
await expect(buildModuleUi({ moduleDirectory: directory })).rejects.toMatchObject({
|
|
code: "MODULE_UI_SOURCE_MISSING",
|
|
});
|
|
});
|
|
|
|
it("fails when the manifest cannot be read", async () => {
|
|
const directory = await createModule({ manifest: "{ not json" });
|
|
|
|
await expect(buildModuleUi({ moduleDirectory: directory })).rejects.toMatchObject({
|
|
code: "MODULE_UI_MANIFEST_UNREADABLE",
|
|
});
|
|
});
|
|
|
|
it.each([
|
|
["escapes the package", "../outside/ui.js"],
|
|
["is absolute", "/tmp/ui.js"],
|
|
["traverses upward", "./dist/../../ui.js"],
|
|
["is source TypeScript", "./src/ui/index.tsx"],
|
|
["carries a query", "./dist/ui/index.js?raw"],
|
|
["uses backslashes", ".\\dist\\ui\\index.js"],
|
|
])("refuses to write an artifact whose declared path %s", async (_label, ui) => {
|
|
const directory = await createModule({ ui, files: { "src/ui/index.tsx": plainUiSource } });
|
|
|
|
await expect(buildModuleUi({ moduleDirectory: directory })).rejects.toMatchObject({
|
|
code: "MODULE_UI_ENTRYPOINT_UNSAFE",
|
|
});
|
|
});
|
|
|
|
it("surfaces a build failure with esbuild's diagnostics attached", async () => {
|
|
const directory = await createModule({
|
|
ui: "./dist/ui/index.js",
|
|
files: { "src/ui/index.tsx": "export default { id: 'example', " },
|
|
});
|
|
|
|
try {
|
|
await buildModuleUi({ moduleDirectory: directory });
|
|
expect.unreachable("expected the build to fail");
|
|
} catch (error) {
|
|
expect(error).toBeInstanceOf(ModuleUiBuildError);
|
|
expect((error as ModuleUiBuildError).code).toBe("MODULE_UI_BUILD_FAILED");
|
|
// The sanitized message carries no path; the diagnostics a developer needs are attached.
|
|
expect((error as ModuleUiBuildError).message).not.toContain(directory);
|
|
expect((error as { diagnostics?: unknown[] }).diagnostics?.length).toBeGreaterThan(0);
|
|
}
|
|
});
|
|
|
|
it("fails on an unresolvable import instead of emitting a partial bundle", async () => {
|
|
const directory = await createModule({
|
|
ui: "./dist/ui/index.js",
|
|
files: { "src/ui/index.tsx": 'import "totally-not-installed";\nexport default {};' },
|
|
});
|
|
|
|
await expect(buildModuleUi({ moduleDirectory: directory })).rejects.toMatchObject({
|
|
code: "MODULE_UI_BUILD_FAILED",
|
|
});
|
|
});
|
|
|
|
it.each([
|
|
"styles.css",
|
|
"theme.scss",
|
|
"layout.less",
|
|
])("rejects a %s import rather than emitting an undeclared sidecar asset", async (stylesheet) => {
|
|
const directory = await createModule({
|
|
ui: "./dist/ui/index.js",
|
|
files: {
|
|
"src/ui/index.tsx": `import "./${stylesheet}";\nexport default {};`,
|
|
[`src/ui/${stylesheet}`]: ".example { color: red; }",
|
|
},
|
|
});
|
|
|
|
try {
|
|
await buildModuleUi({ moduleDirectory: directory });
|
|
expect.unreachable("expected the stylesheet import to be rejected");
|
|
} catch (error) {
|
|
expect((error as ModuleUiBuildError).code).toBe("MODULE_UI_BUILD_FAILED");
|
|
const diagnostics = (error as { diagnostics?: { text?: string }[] }).diagnostics ?? [];
|
|
expect(diagnostics.some((entry) => entry.text?.includes("cannot import a stylesheet"))).toBe(
|
|
true,
|
|
);
|
|
}
|
|
});
|
|
|
|
it("never leaves a stylesheet sidecar next to the artifact", async () => {
|
|
const directory = await createModule({
|
|
ui: "./dist/ui/index.js",
|
|
files: {
|
|
"src/ui/index.tsx": 'import "./styles.css";\nexport default {};',
|
|
"src/ui/styles.css": ".example { color: red; }",
|
|
},
|
|
});
|
|
|
|
await expect(buildModuleUi({ moduleDirectory: directory })).rejects.toBeInstanceOf(
|
|
ModuleUiBuildError,
|
|
);
|
|
await expect(
|
|
readFile(path.join(directory, "dist", "ui", "index.css"), "utf8"),
|
|
).rejects.toThrow();
|
|
});
|
|
|
|
it("substitutes NODE_ENV so the artifact never touches a Node global in a browser", async () => {
|
|
const directory = await createModule({
|
|
ui: "./dist/ui/index.js",
|
|
files: {
|
|
"src/ui/index.tsx":
|
|
'const mode = process.env.NODE_ENV;\nexport default { id: "example", version: "0.1.0", mount: () => { void mode; } };',
|
|
},
|
|
});
|
|
|
|
const result = await buildModuleUi({ moduleDirectory: directory });
|
|
const artifact = await readFile(result.outputFile, "utf8");
|
|
|
|
expect(artifact).toContain('"production"');
|
|
expect(artifact).not.toContain("process.env.NODE_ENV");
|
|
});
|
|
});
|