@ai-matrx/code-runtime 0.1.4

package/CHANGELOG.md

@@ -0,0 +1,50 @@
+# Changelog — @ai-matrx/code-runtime
+
+## 0.1.4
+
+Automatic changed-only republish (docs/metadata drift since the last tag — see
+`git diff npm/code-runtime/vnull..npm/code-runtime/v0.1.4 -- apps/shared/code-runtime`).
+No source changes intended and no consumer action required.
+
+## 0.1.3
+
+Automatic changed-only republish (docs/metadata drift since the last tag — see
+`git diff npm/code-runtime/vnull..npm/code-runtime/v0.1.3 -- apps/shared/code-runtime`).
+No source changes intended and no consumer action required.
+
+## 0.1.2
+
+Automatic changed-only republish (docs/metadata drift since the last tag — see
+`git diff npm/code-runtime/vnull..npm/code-runtime/v0.1.2 -- apps/shared/code-runtime`).
+No source changes intended and no consumer action required.
+
+## 0.1.1
+
+Automatic changed-only republish (docs/metadata drift since the last tag — see
+`git diff npm/code-runtime/vnull..npm/code-runtime/v0.1.1 -- apps/shared/code-runtime`).
+No source changes intended and no consumer action required.
+
+## 0.1.0 — 2026-10-06
+
+First release (Applets AP-5, CONTRACTS §7). Absorbs matrx-frontend's six in-browser compile
+paths, its two scope registries and the source gate.
+
+- `compile(files, entry, scope)`: multi-file TSX with relative imports (CommonJS linking,
+  non-strict to match stored bodies), default export or last top-level PascalCase binding.
+- `/transform` (Babel, pure) and `/execute` (no Babel) for the sandbox frame's split.
+- ONE scope registry (`listScopeEntries()`); package-owned modules for react, lucide-react,
+  `@ai-matrx/icons`, `@ai-matrx/design-system` (+ `/controls`), `@/lib/utils`, the legacy
+  `@/components/ui/*` aliases and recharts; host-owned entries via `provideScopeModules`.
+- Named stand-ins + the unresolved list on every result + `onUnresolved(origin, list)`.
+- `gate(files) → Finding[]` with file and line; `gate-lists.json` exported.
+- `createCompileCache()` per (id, version); `kindComponentCompiler()` for content-ir-react's port.
+
+### Consumer action
+
+- matrx-frontend: provide host modules once at boot of the compile chunk
+  (`provideScopeModules({...})` for MarkdownStream + aliases, kind-kit, CopyButtons,
+  CopyForAiButton, `@/applets`, `@/components/ui/*`, and the heavy libraries), replace every
+  call of `compileSlotComponent`, `compileReactComponent`, `transformKindComponentBody` /
+  `executeKindBody` and `componentSourceGate` with this package, and delete the originals.
+
+

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 AI Matrix Engine
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,31 @@
+# @ai-matrx/code-runtime
+
+Compile stored TSX — one file or many — into a React component, against one documented import
+scope, with a visible, reported stand-in for anything the scope cannot supply.
+
+```ts
+import { compile, gate } from "@ai-matrx/code-runtime";
+
+const files = {
+  "App.tsx": `import { Form } from "./Form"; export default () => <Form />;`,
+  "Form.tsx": `import { Button } from "@ai-matrx/design-system/controls";
+               export const Form = () => <Button>Save</Button>;`,
+};
+if (gate(files).some((f) => f.severity === "refuse")) throw new Error("refused");
+const r = compile(files, "App.tsx", { entries: ["react", "@ai-matrx/design-system/controls"], shadowDangerousGlobals: true });
+if (r.ok) render(<r.Component />); else show(r.error.message);
+```
+
+- **Scope**: `listScopeEntries()` is the whole registry. Package-owned entries work anywhere
+  (Next.js, Vite). Host-owned ones (Markdown, kind-kit, copy buttons, Applet parts, heavy
+  libraries) are supplied once: `provideScopeModules({ "@/components/MarkdownStream": () => mod })`.
+  Async entries (recharts) need `await prepareScope(spec)` or `compileAsync`.
+- **Sandbox split**: the parent runs `@ai-matrx/code-runtime/transform` (`transformFiles`) and
+  posts the JSON graph; the frame runs `@ai-matrx/code-runtime/execute` (`executeGraph`), no Babel.
+- **Gate**: `@ai-matrx/code-runtime/gate` is pure (servers, write paths). The lists ship as
+  `@ai-matrx/code-runtime/gate-lists.json`.
+- **Kinds**: inject `kindComponentCompiler()` into `@ai-matrx/content-ir-react`'s
+  `createDbKindComponentCache({ compile })`.
+
+Not a security boundary: the dangerous-global stubs shadow bare identifiers only. Isolation is
+the sandbox frame.