@alashi/cli 0.8.1 → 0.10.0

package/assets/v1/chat.js

@@ -1,4 +1,4 @@
-/* alashi chat component v1
+/* alashi chat + markdown components v1
  *
  * The system chat UI, served by the host. Apps drop in:
  *
@@ -9,6 +9,10 @@
  * and cost display. Renders into light DOM using system.css classes, so it
  * inherits the app's theme tokens.
  *
+ * The same script also registers <alashi-markdown>, the markdown renderer on
+ * its own for apps that display prose outside a conversation (see the bottom
+ * of this file). One renderer, one place formatting bugs get fixed.
+ *
  * Attributes:
  *   app            app name (default: derived from /app/<name>/ in the URL)
  *   placeholder    input placeholder text
@@ -31,7 +35,8 @@
  * Breaking changes ship as /assets/v2/chat.js. */
 
 (() => {
-  if (customElements.get('alashi-chat')) return;
+  // Loading the script twice is a no-op for every element it defines.
+  if (customElements.get('alashi-chat') || customElements.get('alashi-markdown')) return;
 
   const escapeHtml = (s) =>
     s
@@ -357,5 +362,40 @@
     }
   }
 
+  /* <alashi-markdown> — the same renderMarkdown() as chat bubbles, as a
+   * standalone display primitive. No fetching, no SSE, no conversations.
+   *
+   *   <alashi-markdown text="**hi**"></alashi-markdown>   // static markup
+   *   node.text = card.description;                       // re-renders
+   *
+   * The `text` property is the primary path: apps pass model-derived,
+   * multi-line strings that do not belong in an attribute. Renders into light
+   * DOM (like _setMsgText) so it inherits the app's theme tokens, and carries
+   * the `markdown` class so system.css can style its children. */
+  class AlashiMarkdown extends HTMLElement {
+    connectedCallback() {
+      this.classList.add('markdown');
+      // A property set before connect wins; the attribute is the static path.
+      if (this._text === undefined) this._text = this.getAttribute('text') ?? '';
+      this._render();
+    }
+
+    get text() {
+      return this._text ?? '';
+    }
+
+    set text(value) {
+      this._text = String(value ?? '');
+      this._render();
+    }
+
+    _render() {
+      // Escape-first pipeline: renderMarkdown escapes before rebuilding a
+      // known-safe subset of tags, so untrusted markdown stays inert.
+      this.innerHTML = renderMarkdown(String(this._text ?? ''));
+    }
+  }
+
   customElements.define('alashi-chat', AlashiChat);
+  customElements.define('alashi-markdown', AlashiMarkdown);
 })();

package/assets/v1/system.css

@@ -578,41 +578,39 @@ input[type="checkbox"] {
   /* assistant bubbles hold rendered markdown (chat.js), not preformatted text */
   white-space: normal;
 }
-.msg.assistant p,
-.msg.assistant ul,
-.msg.assistant ol,
-.msg.assistant pre,
-.msg.assistant h3,
-.msg.assistant h4,
-.msg.assistant h5,
-.msg.assistant h6 {
+/* Rendered-markdown prose. Shared by assistant chat bubbles and the
+ * <alashi-markdown> element (or any `.markdown` container) — chat.js renders
+ * both with the same renderMarkdown(), so the styling lives in one place too.
+ * Headings stay h3..h6 because that is what renderMarkdown emits. */
+alashi-markdown {
+  /* unknown element to CSS, same as <alashi-chat> in consumer apps */
+  display: block;
+}
+:is(.msg.assistant, alashi-markdown, .markdown) :is(p, ul, ol, pre, h3, h4, h5, h6) {
   margin: 0 0 0.6rem;
 }
-.msg.assistant > :last-child {
+:is(.msg.assistant, alashi-markdown, .markdown) > :last-child {
   margin-bottom: 0;
 }
-.msg.assistant ul,
-.msg.assistant ol {
+:is(.msg.assistant, alashi-markdown, .markdown) :is(ul, ol) {
   padding-left: 1.3rem;
 }
-.msg.assistant li {
+:is(.msg.assistant, alashi-markdown, .markdown) li {
   margin: 0.15rem 0;
 }
-.msg.assistant img {
+:is(.msg.assistant, alashi-markdown, .markdown) img {
   max-width: 100%;
   border-radius: var(--radius-sm);
   border: 1px solid var(--border);
 }
-.msg.assistant pre {
+:is(.msg.assistant, alashi-markdown, .markdown) pre {
   background: var(--panel);
   padding: 0.6rem 0.75rem;
 }
-.msg.assistant h3 {
+:is(.msg.assistant, alashi-markdown, .markdown) h3 {
   font-size: 1rem;
 }
-.msg.assistant h4,
-.msg.assistant h5,
-.msg.assistant h6 {
+:is(.msg.assistant, alashi-markdown, .markdown) :is(h4, h5, h6) {
   font-size: 0.92rem;
 }
 .msg.assistant.pending {

package/dist/cli.mjs

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-import { a as installApp, c as addRegistry, d as removeRegistry, g as loadApp, i as resolveAppConfig, n as createServer, o as removeApp, s as updateApp, t as Store } from "./store-Cxxnjq70.mjs";
+import { A as UsageRecorder, E as budgetStatus, O as setAppBudget, b as loadApp, c as installApp, d as updateApp, f as addRegistry, h as removeRegistry, i as resolveAppConfig, n as createServer, o as exportApp, s as importApp, t as Store, u as removeApp } from "./store-VoJe_U1Q.mjs";
 import { APP_NAME_PATTERN, AppSdkError } from "@alashi/apps-sdk";
 import { mkdir, readFile, readdir, writeFile } from "node:fs/promises";
-import { join, resolve } from "node:path";
+import { isAbsolute, join, relative, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { ClaudeCodeProvider } from "@alashi/provider-claude";
 import { serve } from "@hono/node-server";
@@ -109,10 +109,39 @@ program.command("remove").argument("<name>", "installed app name").option("--pur
 	await removeApp(store, name, { purge: options.purge ?? false });
 	console.log(options.purge ? `Removed ${name} (purged)` : `Removed ${name} (data kept)`);
 });
+/** Prints archive paths the way the user would type them. */
+function displayPath(path) {
+	const rel = relative(process.cwd(), path);
+	return rel === "" || rel.startsWith("..") || isAbsolute(rel) ? path : `./${rel}`;
+}
+program.command("export").argument("<name>", "installed app name").option("-o, --out <file>", "archive path (default: ./<name>-<version>.tar.gz)").description("Pack an app container and its chat transcripts into a tar.gz").action(async (name, options) => {
+	const result = await exportApp(store, new ClaudeCodeProvider(), name, { ...options.out && { out: options.out } });
+	for (const warning of result.warnings) console.log(`  warning: ${warning}`);
+	console.log(`Exported ${result.record.name}@${result.record.version} -> ${displayPath(result.archivePath)} (${result.transcriptCount} transcripts)`);
+	if (result.record.source.type === "local") console.log("  note: repo/ was captured as real files, not as the local symlink");
+});
+async function importArchive(file) {
+	const result = await importApp(store, new ClaudeCodeProvider(), file);
+	for (const warning of result.warnings) console.log(`  warning: ${warning}`);
+	console.log(`Imported ${result.record.name}@${result.record.version} (${result.transcriptCount} transcripts restored)`);
+	console.log(`  data:   ${store.appDataDir(result.record.name)}`);
+	console.log(`  config: ${store.appConfigPath(result.record.name)}`);
+}
+program.command("import").argument("<file>", "archive produced by alashi export").description("Restore an app container and its chat transcripts from a tar.gz").action(importArchive);
 program.command("list").option("--json", "machine-readable output").description("List installed apps").action(async (options) => {
+	const usage = new UsageRecorder(store);
 	const records = await store.listInstalled();
+	const spend = new Map(await Promise.all(records.map(async (record) => [record.name, await budgetStatus(store, usage, record.name)])));
 	if (options.json) {
-		console.log(JSON.stringify(records, null, 2));
+		console.log(JSON.stringify(records.map((record) => {
+			const budget = spend.get(record.name);
+			return {
+				...record,
+				todayCostUsd: budget?.spentUsd ?? 0,
+				overBudget: budget?.overBudget ?? false,
+				...budget?.dailyUsd !== void 0 && { dailyBudgetUsd: budget.dailyUsd }
+			};
+		}), null, 2));
 		return;
 	}
 	if (records.length === 0) {
@@ -121,8 +150,27 @@ program.command("list").option("--json", "machine-readable output").description(
 	}
 	for (const record of records) {
 		const origin = record.source.type === "git" ? record.source.url : record.source.path;
-		console.log(`${record.name}@${record.version}  ${record.source.type}  ${origin}`);
+		const budget = spend.get(record.name);
+		const today = (budget?.spentUsd ?? 0).toFixed(4);
+		const cap = budget?.dailyUsd === void 0 ? "" : ` of $${budget.dailyUsd.toFixed(2)} cap${budget.overBudget ? " (OVER BUDGET)" : ""}`;
+		console.log(`${record.name}@${record.version}  ${record.source.type}  ${origin}  $${today} today${cap}`);
+	}
+});
+program.command("budget").argument("<name>", "installed app name").argument("[dailyUsd]", "daily cap in USD, or \"none\" to remove it (omit to just show)").description("Show or set an app's host-enforced daily AI spend cap").action(async (name, dailyUsd) => {
+	if (!await store.readAppRecord(name)) throw new Error(`App "${name}" is not installed`);
+	if (dailyUsd !== void 0) {
+		const amount = dailyUsd === "none" || dailyUsd === "off" ? void 0 : Number(dailyUsd);
+		if (amount !== void 0 && (!Number.isFinite(amount) || amount < 0)) throw new Error(`Invalid daily spend cap: ${dailyUsd}`);
+		await setAppBudget(store, name, amount);
+	}
+	const status = await budgetStatus(store, new UsageRecorder(store), name);
+	const spent = `$${status.spentUsd.toFixed(4)} spent on ${status.date} (UTC)`;
+	if (status.dailyUsd === void 0) {
+		console.log(`${name}: no daily cap — ${spent}`);
+		return;
 	}
+	console.log(`${name}: $${status.dailyUsd.toFixed(2)} daily cap — ${spent}, $${(status.remainingUsd ?? 0).toFixed(4)} left`);
+	if (status.overBudget) console.log("  OVER BUDGET: new AI sessions are refused until 00:00 UTC");
 });
 const registry = program.command("registry").description("Manage app registries");
 registry.command("add").argument("<name>", "registry name").argument("<url>", "index.json URL or git repo URL").action(async (name, url) => {

package/dist/cli.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"cli.mjs","names":[],"sources":["../src/create.ts","../src/cli.ts"],"sourcesContent":["import { mkdir, readdir, readFile, writeFile } from 'node:fs/promises';\nimport { join } from 'node:path';\nimport { fileURLToPath } from 'node:url';\nimport { APP_NAME_PATTERN, AppSdkError } from '@alashi/apps-sdk';\n\n// Works from both src/ (tests) and dist/ (published build) — the templates\n// dir sits one level up in the package root either way.\nconst TEMPLATE_DIR = fileURLToPath(new URL('../templates/basic-app', import.meta.url));\n\n// npm strips .gitignore from published packages, so it ships unprefixed.\nconst RENAMES: Record<string, string> = { gitignore: '.gitignore' };\n\n/**\n * Scaffolds a new app from the basic-app template into targetDir,\n * substituting the app name. Returns the created files, relative to\n * targetDir. Refuses to write into a non-empty directory.\n */\nexport async function scaffoldApp(name: string, targetDir: string): Promise<string[]> {\n  if (!APP_NAME_PATTERN.test(name)) {\n    throw new AppSdkError(\n      `Invalid app name \"${name}\": use lowercase letters, digits, and hyphens (max 64 chars)`,\n    );\n  }\n  const existing = await readdir(targetDir).catch(() => undefined);\n  if (existing && existing.length > 0) {\n    throw new AppSdkError(`Directory is not empty: ${targetDir}`);\n  }\n\n  const written: string[] = [];\n  async function copyDir(rel: string): Promise<void> {\n    const entries = await readdir(join(TEMPLATE_DIR, rel), { withFileTypes: true });\n    await mkdir(join(targetDir, rel), { recursive: true });\n    for (const entry of entries) {\n      const relPath = join(rel, entry.name);\n      if (entry.isDirectory()) {\n        await copyDir(relPath);\n        continue;\n      }\n      const content = await readFile(join(TEMPLATE_DIR, relPath), 'utf8');\n      const outPath = join(rel, RENAMES[entry.name] ?? entry.name);\n      await writeFile(join(targetDir, outPath), content.replaceAll('__APP_NAME__', name), 'utf8');\n      written.push(outPath);\n    }\n  }\n  await copyDir('');\n  return written.sort();\n}\n","#!/usr/bin/env node\nimport { resolve } from 'node:path';\nimport { ClaudeCodeProvider } from '@alashi/provider-claude';\nimport { serve } from '@hono/node-server';\nimport { Command } from 'commander';\nimport { scaffoldApp } from './create.js';\nimport { installApp, removeApp, updateApp } from './installer.js';\nimport { loadApp } from './loader.js';\nimport { addRegistry, removeRegistry } from './registry.js';\nimport { resolveAppConfig } from './runtime.js';\nimport { createServer } from './server.js';\nimport { Store } from './store.js';\n\nconst program = new Command();\nconst store = new Store();\n\nprogram.name('alashi').description('Install, manage, and run Claude Code-powered apps');\n\nasync function serveDashboard(portArg?: string, hostArg?: string): Promise<void> {\n  const config = await store.readGlobalConfig();\n  const port = portArg ? Number(portArg) : (config.port ?? 4141);\n  if (!Number.isInteger(port) || port < 0 || port > 65535) {\n    throw new Error(`Invalid port: ${portArg}`);\n  }\n  // Loopback by default: the dashboard has no auth, so it must not be\n  // LAN-reachable unless the user explicitly opts in with --host.\n  const hostname = hostArg ?? config.host ?? '127.0.0.1';\n  const server = createServer(store, new ClaudeCodeProvider());\n  await server.scheduler.start();\n  const httpServer = serve({ fetch: server.app.fetch, port, hostname }, (info) => {\n    console.log(`alashi dashboard at http://localhost:${info.port}`);\n    if (hostname !== '127.0.0.1' && hostname !== 'localhost') {\n      console.log(`  WARNING: listening on ${hostname} — the dashboard has no authentication`);\n    }\n  });\n  const shutdown = (): void => {\n    httpServer.close();\n    void server.close().finally(() => process.exit(0));\n  };\n  process.on('SIGINT', shutdown);\n  process.on('SIGTERM', shutdown);\n}\n\nprogram\n  .command('serve', { isDefault: true })\n  .option('-p, --port <port>', 'port to listen on (default: config port or 4141)')\n  .option('--host <host>', 'address to bind (default: 127.0.0.1; the dashboard has no auth)')\n  .description('Serve the web dashboard (the default when no command is given)')\n  .action(async (options: { port?: string; host?: string }) =>\n    serveDashboard(options.port, options.host),\n  );\n\nprogram\n  .command('create')\n  .argument('<name>', 'app name (lowercase letters, digits, hyphens)')\n  .argument('[directory]', 'target directory (default: ./<name>)')\n  .description('Scaffold a new app from the basic template')\n  .action(async (name: string, directory?: string) => {\n    const target = directory ?? name;\n    const files = await scaffoldApp(name, resolve(target));\n    console.log(`Created ${name}/`);\n    for (const file of files) console.log(`  ${file}`);\n    console.log('\\nNext steps:');\n    console.log(`  cd ${target}`);\n    console.log('  npm install');\n    console.log('  alashi install .');\n    console.log('  alashi    # dashboard at http://localhost:4141');\n  });\n\nprogram\n  .command('install')\n  .argument('<source>', 'app name (via registry), git URL, or local path')\n  .description('Install an app')\n  .action(async (source: string) => {\n    const record = await installApp(store, source);\n    console.log(`Installed ${record.name}@${record.version} (${record.source.type})`);\n    console.log(`  data:   ${store.appDataDir(record.name)}`);\n    console.log(`  config: ${store.appConfigPath(record.name)}`);\n    await printSetupHints(record.name);\n  });\n\n/** After install: what still needs configuring, and which integrations exist. */\nasync function printSetupHints(name: string): Promise<void> {\n  let manifest: Awaited<ReturnType<typeof loadApp>>['manifest'];\n  try {\n    ({ manifest } = await loadApp(store.appRepoDir(name)));\n  } catch {\n    return; // install already succeeded; hints are best-effort\n  }\n  const { status } = await resolveAppConfig(store, manifest);\n  if (status.missing.length > 0) {\n    console.log(`  requires: ${status.missing.join(', ')}`);\n  }\n  const optional = status.integrations.filter((i) => i.optional && !i.configured);\n  if (optional.length > 0) {\n    const list = optional.map((i) => `${i.name} (needs ${i.missing.join(', ')})`).join(', ');\n    console.log(`  optional integrations: ${list}`);\n  }\n  if (status.missing.length > 0 || optional.length > 0) {\n    console.log(`  configure via the dashboard settings page or the config file above`);\n  }\n}\n\nprogram\n  .command('update')\n  .argument('<name>', 'installed app name')\n  .description('Update an installed app')\n  .action(async (name: string) => {\n    const record = await updateApp(store, name);\n    console.log(`Updated ${record.name} to ${record.version}`);\n  });\n\nprogram\n  .command('remove')\n  .argument('<name>', 'installed app name')\n  .option('--purge', 'also delete the app data and config')\n  .description('Remove an installed app (keeps data unless --purge)')\n  .action(async (name: string, options: { purge?: boolean }) => {\n    await removeApp(store, name, { purge: options.purge ?? false });\n    console.log(options.purge ? `Removed ${name} (purged)` : `Removed ${name} (data kept)`);\n  });\n\nprogram\n  .command('list')\n  .option('--json', 'machine-readable output')\n  .description('List installed apps')\n  .action(async (options: { json?: boolean }) => {\n    const records = await store.listInstalled();\n    if (options.json) {\n      console.log(JSON.stringify(records, null, 2));\n      return;\n    }\n    if (records.length === 0) {\n      console.log('No apps installed. Try: alashi install <name|git-url|path>');\n      return;\n    }\n    for (const record of records) {\n      const origin = record.source.type === 'git' ? record.source.url : record.source.path;\n      console.log(`${record.name}@${record.version}  ${record.source.type}  ${origin}`);\n    }\n  });\n\nconst registry = program.command('registry').description('Manage app registries');\n\nregistry\n  .command('add')\n  .argument('<name>', 'registry name')\n  .argument('<url>', 'index.json URL or git repo URL')\n  .action(async (name: string, url: string) => {\n    const index = await addRegistry(store, name, url);\n    console.log(`Added registry \"${name}\" (${index.apps.length} apps)`);\n  });\n\nregistry\n  .command('remove')\n  .argument('<name>', 'registry name')\n  .action(async (name: string) => {\n    await removeRegistry(store, name);\n    console.log(`Removed registry \"${name}\"`);\n  });\n\nregistry.command('list').action(async () => {\n  const config = await store.readGlobalConfig();\n  if (config.registries.length === 0) {\n    console.log('No registries configured.');\n    return;\n  }\n  for (const r of config.registries) console.log(`${r.name}  ${r.url}`);\n});\n\nprogram.parseAsync().catch((err: unknown) => {\n  console.error(err instanceof Error ? err.message : err);\n  process.exitCode = 1;\n});\n"],"mappings":";;;;;;;;;;AAOA,MAAM,eAAe,cAAc,IAAI,IAAI,0BAA0B,YAAY,GAAG,CAAC;AAGrF,MAAM,UAAkC,EAAE,WAAW,aAAa;;;;;;AAOlE,eAAsB,YAAY,MAAc,WAAsC;CACpF,IAAI,CAAC,iBAAiB,KAAK,IAAI,GAC7B,MAAM,IAAI,YACR,qBAAqB,KAAK,6DAC5B;CAEF,MAAM,WAAW,MAAM,QAAQ,SAAS,CAAC,CAAC,YAAY,KAAA,CAAS;CAC/D,IAAI,YAAY,SAAS,SAAS,GAChC,MAAM,IAAI,YAAY,2BAA2B,WAAW;CAG9D,MAAM,UAAoB,CAAC;CAC3B,eAAe,QAAQ,KAA4B;EACjD,MAAM,UAAU,MAAM,QAAQ,KAAK,cAAc,GAAG,GAAG,EAAE,eAAe,KAAK,CAAC;EAC9E,MAAM,MAAM,KAAK,WAAW,GAAG,GAAG,EAAE,WAAW,KAAK,CAAC;EACrD,KAAK,MAAM,SAAS,SAAS;GAC3B,MAAM,UAAU,KAAK,KAAK,MAAM,IAAI;GACpC,IAAI,MAAM,YAAY,GAAG;IACvB,MAAM,QAAQ,OAAO;IACrB;GACF;GACA,MAAM,UAAU,MAAM,SAAS,KAAK,cAAc,OAAO,GAAG,MAAM;GAClE,MAAM,UAAU,KAAK,KAAK,QAAQ,MAAM,SAAS,MAAM,IAAI;GAC3D,MAAM,UAAU,KAAK,WAAW,OAAO,GAAG,QAAQ,WAAW,gBAAgB,IAAI,GAAG,MAAM;GAC1F,QAAQ,KAAK,OAAO;EACtB;CACF;CACA,MAAM,QAAQ,EAAE;CAChB,OAAO,QAAQ,KAAK;AACtB;;;ACjCA,MAAM,UAAU,IAAI,QAAQ;AAC5B,MAAM,QAAQ,IAAI,MAAM;AAExB,QAAQ,KAAK,QAAQ,CAAC,CAAC,YAAY,mDAAmD;AAEtF,eAAe,eAAe,SAAkB,SAAiC;CAC/E,MAAM,SAAS,MAAM,MAAM,iBAAiB;CAC5C,MAAM,OAAO,UAAU,OAAO,OAAO,IAAK,OAAO,QAAQ;CACzD,IAAI,CAAC,OAAO,UAAU,IAAI,KAAK,OAAO,KAAK,OAAO,OAChD,MAAM,IAAI,MAAM,iBAAiB,SAAS;CAI5C,MAAM,WAAW,WAAW,OAAO,QAAQ;CAC3C,MAAM,SAAS,aAAa,OAAO,IAAI,mBAAmB,CAAC;CAC3D,MAAM,OAAO,UAAU,MAAM;CAC7B,MAAM,aAAa,MAAM;EAAE,OAAO,OAAO,IAAI;EAAO;EAAM;CAAS,IAAI,SAAS;EAC9E,QAAQ,IAAI,wCAAwC,KAAK,MAAM;EAC/D,IAAI,aAAa,eAAe,aAAa,aAC3C,QAAQ,IAAI,2BAA2B,SAAS,uCAAuC;CAE3F,CAAC;CACD,MAAM,iBAAuB;EAC3B,WAAW,MAAM;EACjB,OAAY,MAAM,CAAC,CAAC,cAAc,QAAQ,KAAK,CAAC,CAAC;CACnD;CACA,QAAQ,GAAG,UAAU,QAAQ;CAC7B,QAAQ,GAAG,WAAW,QAAQ;AAChC;AAEA,QACG,QAAQ,SAAS,EAAE,WAAW,KAAK,CAAC,CAAC,CACrC,OAAO,qBAAqB,kDAAkD,CAAC,CAC/E,OAAO,iBAAiB,iEAAiE,CAAC,CAC1F,YAAY,gEAAgE,CAAC,CAC7E,OAAO,OAAO,YACb,eAAe,QAAQ,MAAM,QAAQ,IAAI,CAC3C;AAEF,QACG,QAAQ,QAAQ,CAAC,CACjB,SAAS,UAAU,+CAA+C,CAAC,CACnE,SAAS,eAAe,sCAAsC,CAAC,CAC/D,YAAY,4CAA4C,CAAC,CACzD,OAAO,OAAO,MAAc,cAAuB;CAClD,MAAM,SAAS,aAAa;CAC5B,MAAM,QAAQ,MAAM,YAAY,MAAM,QAAQ,MAAM,CAAC;CACrD,QAAQ,IAAI,WAAW,KAAK,EAAE;CAC9B,KAAK,MAAM,QAAQ,OAAO,QAAQ,IAAI,KAAK,MAAM;CACjD,QAAQ,IAAI,eAAe;CAC3B,QAAQ,IAAI,QAAQ,QAAQ;CAC5B,QAAQ,IAAI,eAAe;CAC3B,QAAQ,IAAI,oBAAoB;CAChC,QAAQ,IAAI,kDAAkD;AAChE,CAAC;AAEH,QACG,QAAQ,SAAS,CAAC,CAClB,SAAS,YAAY,iDAAiD,CAAC,CACvE,YAAY,gBAAgB,CAAC,CAC7B,OAAO,OAAO,WAAmB;CAChC,MAAM,SAAS,MAAM,WAAW,OAAO,MAAM;CAC7C,QAAQ,IAAI,aAAa,OAAO,KAAK,GAAG,OAAO,QAAQ,IAAI,OAAO,OAAO,KAAK,EAAE;CAChF,QAAQ,IAAI,aAAa,MAAM,WAAW,OAAO,IAAI,GAAG;CACxD,QAAQ,IAAI,aAAa,MAAM,cAAc,OAAO,IAAI,GAAG;CAC3D,MAAM,gBAAgB,OAAO,IAAI;AACnC,CAAC;;AAGH,eAAe,gBAAgB,MAA6B;CAC1D,IAAI;CACJ,IAAI;EACF,CAAC,CAAE,YAAa,MAAM,QAAQ,MAAM,WAAW,IAAI,CAAC;CACtD,QAAQ;EACN;CACF;CACA,MAAM,EAAE,WAAW,MAAM,iBAAiB,OAAO,QAAQ;CACzD,IAAI,OAAO,QAAQ,SAAS,GAC1B,QAAQ,IAAI,eAAe,OAAO,QAAQ,KAAK,IAAI,GAAG;CAExD,MAAM,WAAW,OAAO,aAAa,QAAQ,MAAM,EAAE,YAAY,CAAC,EAAE,UAAU;CAC9E,IAAI,SAAS,SAAS,GAAG;EACvB,MAAM,OAAO,SAAS,KAAK,MAAM,GAAG,EAAE,KAAK,UAAU,EAAE,QAAQ,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI;EACvF,QAAQ,IAAI,4BAA4B,MAAM;CAChD;CACA,IAAI,OAAO,QAAQ,SAAS,KAAK,SAAS,SAAS,GACjD,QAAQ,IAAI,sEAAsE;AAEtF;AAEA,QACG,QAAQ,QAAQ,CAAC,CACjB,SAAS,UAAU,oBAAoB,CAAC,CACxC,YAAY,yBAAyB,CAAC,CACtC,OAAO,OAAO,SAAiB;CAC9B,MAAM,SAAS,MAAM,UAAU,OAAO,IAAI;CAC1C,QAAQ,IAAI,WAAW,OAAO,KAAK,MAAM,OAAO,SAAS;AAC3D,CAAC;AAEH,QACG,QAAQ,QAAQ,CAAC,CACjB,SAAS,UAAU,oBAAoB,CAAC,CACxC,OAAO,WAAW,qCAAqC,CAAC,CACxD,YAAY,qDAAqD,CAAC,CAClE,OAAO,OAAO,MAAc,YAAiC;CAC5D,MAAM,UAAU,OAAO,MAAM,EAAE,OAAO,QAAQ,SAAS,MAAM,CAAC;CAC9D,QAAQ,IAAI,QAAQ,QAAQ,WAAW,KAAK,aAAa,WAAW,KAAK,aAAa;AACxF,CAAC;AAEH,QACG,QAAQ,MAAM,CAAC,CACf,OAAO,UAAU,yBAAyB,CAAC,CAC3C,YAAY,qBAAqB,CAAC,CAClC,OAAO,OAAO,YAAgC;CAC7C,MAAM,UAAU,MAAM,MAAM,cAAc;CAC1C,IAAI,QAAQ,MAAM;EAChB,QAAQ,IAAI,KAAK,UAAU,SAAS,MAAM,CAAC,CAAC;EAC5C;CACF;CACA,IAAI,QAAQ,WAAW,GAAG;EACxB,QAAQ,IAAI,4DAA4D;EACxE;CACF;CACA,KAAK,MAAM,UAAU,SAAS;EAC5B,MAAM,SAAS,OAAO,OAAO,SAAS,QAAQ,OAAO,OAAO,MAAM,OAAO,OAAO;EAChF,QAAQ,IAAI,GAAG,OAAO,KAAK,GAAG,OAAO,QAAQ,IAAI,OAAO,OAAO,KAAK,IAAI,QAAQ;CAClF;AACF,CAAC;AAEH,MAAM,WAAW,QAAQ,QAAQ,UAAU,CAAC,CAAC,YAAY,uBAAuB;AAEhF,SACG,QAAQ,KAAK,CAAC,CACd,SAAS,UAAU,eAAe,CAAC,CACnC,SAAS,SAAS,gCAAgC,CAAC,CACnD,OAAO,OAAO,MAAc,QAAgB;CAC3C,MAAM,QAAQ,MAAM,YAAY,OAAO,MAAM,GAAG;CAChD,QAAQ,IAAI,mBAAmB,KAAK,KAAK,MAAM,KAAK,OAAO,OAAO;AACpE,CAAC;AAEH,SACG,QAAQ,QAAQ,CAAC,CACjB,SAAS,UAAU,eAAe,CAAC,CACnC,OAAO,OAAO,SAAiB;CAC9B,MAAM,eAAe,OAAO,IAAI;CAChC,QAAQ,IAAI,qBAAqB,KAAK,EAAE;AAC1C,CAAC;AAEH,SAAS,QAAQ,MAAM,CAAC,CAAC,OAAO,YAAY;CAC1C,MAAM,SAAS,MAAM,MAAM,iBAAiB;CAC5C,IAAI,OAAO,WAAW,WAAW,GAAG;EAClC,QAAQ,IAAI,2BAA2B;EACvC;CACF;CACA,KAAK,MAAM,KAAK,OAAO,YAAY,QAAQ,IAAI,GAAG,EAAE,KAAK,IAAI,EAAE,KAAK;AACtE,CAAC;AAED,QAAQ,WAAW,CAAC,CAAC,OAAO,QAAiB;CAC3C,QAAQ,MAAM,eAAe,QAAQ,IAAI,UAAU,GAAG;CACtD,QAAQ,WAAW;AACrB,CAAC"}
+{"version":3,"file":"cli.mjs","names":[],"sources":["../src/create.ts","../src/cli.ts"],"sourcesContent":["import { mkdir, readdir, readFile, writeFile } from 'node:fs/promises';\nimport { join } from 'node:path';\nimport { fileURLToPath } from 'node:url';\nimport { APP_NAME_PATTERN, AppSdkError } from '@alashi/apps-sdk';\n\n// Works from both src/ (tests) and dist/ (published build) — the templates\n// dir sits one level up in the package root either way.\nconst TEMPLATE_DIR = fileURLToPath(new URL('../templates/basic-app', import.meta.url));\n\n// npm strips .gitignore from published packages, so it ships unprefixed.\nconst RENAMES: Record<string, string> = { gitignore: '.gitignore' };\n\n/**\n * Scaffolds a new app from the basic-app template into targetDir,\n * substituting the app name. Returns the created files, relative to\n * targetDir. Refuses to write into a non-empty directory.\n */\nexport async function scaffoldApp(name: string, targetDir: string): Promise<string[]> {\n  if (!APP_NAME_PATTERN.test(name)) {\n    throw new AppSdkError(\n      `Invalid app name \"${name}\": use lowercase letters, digits, and hyphens (max 64 chars)`,\n    );\n  }\n  const existing = await readdir(targetDir).catch(() => undefined);\n  if (existing && existing.length > 0) {\n    throw new AppSdkError(`Directory is not empty: ${targetDir}`);\n  }\n\n  const written: string[] = [];\n  async function copyDir(rel: string): Promise<void> {\n    const entries = await readdir(join(TEMPLATE_DIR, rel), { withFileTypes: true });\n    await mkdir(join(targetDir, rel), { recursive: true });\n    for (const entry of entries) {\n      const relPath = join(rel, entry.name);\n      if (entry.isDirectory()) {\n        await copyDir(relPath);\n        continue;\n      }\n      const content = await readFile(join(TEMPLATE_DIR, relPath), 'utf8');\n      const outPath = join(rel, RENAMES[entry.name] ?? entry.name);\n      await writeFile(join(targetDir, outPath), content.replaceAll('__APP_NAME__', name), 'utf8');\n      written.push(outPath);\n    }\n  }\n  await copyDir('');\n  return written.sort();\n}\n","#!/usr/bin/env node\nimport { isAbsolute, relative, resolve } from 'node:path';\nimport { ClaudeCodeProvider } from '@alashi/provider-claude';\nimport { serve } from '@hono/node-server';\nimport { Command } from 'commander';\nimport { budgetStatus, setAppBudget } from './budget.js';\nimport { scaffoldApp } from './create.js';\nimport { installApp, removeApp, updateApp } from './installer.js';\nimport { loadApp } from './loader.js';\nimport { exportApp, importApp } from './portability.js';\nimport { addRegistry, removeRegistry } from './registry.js';\nimport { resolveAppConfig } from './runtime.js';\nimport { createServer } from './server.js';\nimport { Store } from './store.js';\nimport { UsageRecorder } from './usage.js';\n\nconst program = new Command();\nconst store = new Store();\n\nprogram.name('alashi').description('Install, manage, and run Claude Code-powered apps');\n\nasync function serveDashboard(portArg?: string, hostArg?: string): Promise<void> {\n  const config = await store.readGlobalConfig();\n  const port = portArg ? Number(portArg) : (config.port ?? 4141);\n  if (!Number.isInteger(port) || port < 0 || port > 65535) {\n    throw new Error(`Invalid port: ${portArg}`);\n  }\n  // Loopback by default: the dashboard has no auth, so it must not be\n  // LAN-reachable unless the user explicitly opts in with --host.\n  const hostname = hostArg ?? config.host ?? '127.0.0.1';\n  const server = createServer(store, new ClaudeCodeProvider());\n  await server.scheduler.start();\n  const httpServer = serve({ fetch: server.app.fetch, port, hostname }, (info) => {\n    console.log(`alashi dashboard at http://localhost:${info.port}`);\n    if (hostname !== '127.0.0.1' && hostname !== 'localhost') {\n      console.log(`  WARNING: listening on ${hostname} — the dashboard has no authentication`);\n    }\n  });\n  const shutdown = (): void => {\n    httpServer.close();\n    void server.close().finally(() => process.exit(0));\n  };\n  process.on('SIGINT', shutdown);\n  process.on('SIGTERM', shutdown);\n}\n\nprogram\n  .command('serve', { isDefault: true })\n  .option('-p, --port <port>', 'port to listen on (default: config port or 4141)')\n  .option('--host <host>', 'address to bind (default: 127.0.0.1; the dashboard has no auth)')\n  .description('Serve the web dashboard (the default when no command is given)')\n  .action(async (options: { port?: string; host?: string }) =>\n    serveDashboard(options.port, options.host),\n  );\n\nprogram\n  .command('create')\n  .argument('<name>', 'app name (lowercase letters, digits, hyphens)')\n  .argument('[directory]', 'target directory (default: ./<name>)')\n  .description('Scaffold a new app from the basic template')\n  .action(async (name: string, directory?: string) => {\n    const target = directory ?? name;\n    const files = await scaffoldApp(name, resolve(target));\n    console.log(`Created ${name}/`);\n    for (const file of files) console.log(`  ${file}`);\n    console.log('\\nNext steps:');\n    console.log(`  cd ${target}`);\n    console.log('  npm install');\n    console.log('  alashi install .');\n    console.log('  alashi    # dashboard at http://localhost:4141');\n  });\n\nprogram\n  .command('install')\n  .argument('<source>', 'app name (via registry), git URL, or local path')\n  .description('Install an app')\n  .action(async (source: string) => {\n    const record = await installApp(store, source);\n    console.log(`Installed ${record.name}@${record.version} (${record.source.type})`);\n    console.log(`  data:   ${store.appDataDir(record.name)}`);\n    console.log(`  config: ${store.appConfigPath(record.name)}`);\n    await printSetupHints(record.name);\n  });\n\n/** After install: what still needs configuring, and which integrations exist. */\nasync function printSetupHints(name: string): Promise<void> {\n  let manifest: Awaited<ReturnType<typeof loadApp>>['manifest'];\n  try {\n    ({ manifest } = await loadApp(store.appRepoDir(name)));\n  } catch {\n    return; // install already succeeded; hints are best-effort\n  }\n  const { status } = await resolveAppConfig(store, manifest);\n  if (status.missing.length > 0) {\n    console.log(`  requires: ${status.missing.join(', ')}`);\n  }\n  const optional = status.integrations.filter((i) => i.optional && !i.configured);\n  if (optional.length > 0) {\n    const list = optional.map((i) => `${i.name} (needs ${i.missing.join(', ')})`).join(', ');\n    console.log(`  optional integrations: ${list}`);\n  }\n  if (status.missing.length > 0 || optional.length > 0) {\n    console.log(`  configure via the dashboard settings page or the config file above`);\n  }\n}\n\nprogram\n  .command('update')\n  .argument('<name>', 'installed app name')\n  .description('Update an installed app')\n  .action(async (name: string) => {\n    const record = await updateApp(store, name);\n    console.log(`Updated ${record.name} to ${record.version}`);\n  });\n\nprogram\n  .command('remove')\n  .argument('<name>', 'installed app name')\n  .option('--purge', 'also delete the app data and config')\n  .description('Remove an installed app (keeps data unless --purge)')\n  .action(async (name: string, options: { purge?: boolean }) => {\n    await removeApp(store, name, { purge: options.purge ?? false });\n    console.log(options.purge ? `Removed ${name} (purged)` : `Removed ${name} (data kept)`);\n  });\n\n/** Prints archive paths the way the user would type them. */\nfunction displayPath(path: string): string {\n  const rel = relative(process.cwd(), path);\n  return rel === '' || rel.startsWith('..') || isAbsolute(rel) ? path : `./${rel}`;\n}\n\nprogram\n  .command('export')\n  .argument('<name>', 'installed app name')\n  .option('-o, --out <file>', 'archive path (default: ./<name>-<version>.tar.gz)')\n  .description('Pack an app container and its chat transcripts into a tar.gz')\n  .action(async (name: string, options: { out?: string }) => {\n    const result = await exportApp(store, new ClaudeCodeProvider(), name, {\n      ...(options.out && { out: options.out }),\n    });\n    for (const warning of result.warnings) console.log(`  warning: ${warning}`);\n    console.log(\n      `Exported ${result.record.name}@${result.record.version} -> ${displayPath(result.archivePath)} (${result.transcriptCount} transcripts)`,\n    );\n    if (result.record.source.type === 'local') {\n      console.log('  note: repo/ was captured as real files, not as the local symlink');\n    }\n  });\n\n// `import` is a reserved word, so the handler cannot be named after it; the\n// commander command string itself is fine.\nasync function importArchive(file: string): Promise<void> {\n  const result = await importApp(store, new ClaudeCodeProvider(), file);\n  for (const warning of result.warnings) console.log(`  warning: ${warning}`);\n  console.log(\n    `Imported ${result.record.name}@${result.record.version} (${result.transcriptCount} transcripts restored)`,\n  );\n  console.log(`  data:   ${store.appDataDir(result.record.name)}`);\n  console.log(`  config: ${store.appConfigPath(result.record.name)}`);\n}\n\nprogram\n  .command('import')\n  .argument('<file>', 'archive produced by alashi export')\n  .description('Restore an app container and its chat transcripts from a tar.gz')\n  .action(importArchive);\n\nprogram\n  .command('list')\n  .option('--json', 'machine-readable output')\n  .description('List installed apps')\n  .action(async (options: { json?: boolean }) => {\n    const usage = new UsageRecorder(store);\n    const records = await store.listInstalled();\n    const spend = new Map(\n      await Promise.all(\n        records.map(\n          async (record) => [record.name, await budgetStatus(store, usage, record.name)] as const,\n        ),\n      ),\n    );\n    if (options.json) {\n      console.log(\n        JSON.stringify(\n          records.map((record) => {\n            const budget = spend.get(record.name);\n            return {\n              ...record,\n              todayCostUsd: budget?.spentUsd ?? 0,\n              overBudget: budget?.overBudget ?? false,\n              ...(budget?.dailyUsd !== undefined && { dailyBudgetUsd: budget.dailyUsd }),\n            };\n          }),\n          null,\n          2,\n        ),\n      );\n      return;\n    }\n    if (records.length === 0) {\n      console.log('No apps installed. Try: alashi install <name|git-url|path>');\n      return;\n    }\n    for (const record of records) {\n      const origin = record.source.type === 'git' ? record.source.url : record.source.path;\n      const budget = spend.get(record.name);\n      const today = (budget?.spentUsd ?? 0).toFixed(4);\n      const cap =\n        budget?.dailyUsd === undefined\n          ? ''\n          : ` of $${budget.dailyUsd.toFixed(2)} cap${budget.overBudget ? ' (OVER BUDGET)' : ''}`;\n      console.log(\n        `${record.name}@${record.version}  ${record.source.type}  ${origin}  $${today} today${cap}`,\n      );\n    }\n  });\n\nprogram\n  .command('budget')\n  .argument('<name>', 'installed app name')\n  .argument('[dailyUsd]', 'daily cap in USD, or \"none\" to remove it (omit to just show)')\n  .description(\"Show or set an app's host-enforced daily AI spend cap\")\n  .action(async (name: string, dailyUsd?: string) => {\n    if (!(await store.readAppRecord(name))) throw new Error(`App \"${name}\" is not installed`);\n    if (dailyUsd !== undefined) {\n      const cleared = dailyUsd === 'none' || dailyUsd === 'off';\n      const amount = cleared ? undefined : Number(dailyUsd);\n      if (amount !== undefined && (!Number.isFinite(amount) || amount < 0)) {\n        throw new Error(`Invalid daily spend cap: ${dailyUsd}`);\n      }\n      await setAppBudget(store, name, amount);\n    }\n    const status = await budgetStatus(store, new UsageRecorder(store), name);\n    const spent = `$${status.spentUsd.toFixed(4)} spent on ${status.date} (UTC)`;\n    if (status.dailyUsd === undefined) {\n      console.log(`${name}: no daily cap — ${spent}`);\n      return;\n    }\n    console.log(\n      `${name}: $${status.dailyUsd.toFixed(2)} daily cap — ${spent}, $${(status.remainingUsd ?? 0).toFixed(4)} left`,\n    );\n    if (status.overBudget)\n      console.log('  OVER BUDGET: new AI sessions are refused until 00:00 UTC');\n  });\n\nconst registry = program.command('registry').description('Manage app registries');\n\nregistry\n  .command('add')\n  .argument('<name>', 'registry name')\n  .argument('<url>', 'index.json URL or git repo URL')\n  .action(async (name: string, url: string) => {\n    const index = await addRegistry(store, name, url);\n    console.log(`Added registry \"${name}\" (${index.apps.length} apps)`);\n  });\n\nregistry\n  .command('remove')\n  .argument('<name>', 'registry name')\n  .action(async (name: string) => {\n    await removeRegistry(store, name);\n    console.log(`Removed registry \"${name}\"`);\n  });\n\nregistry.command('list').action(async () => {\n  const config = await store.readGlobalConfig();\n  if (config.registries.length === 0) {\n    console.log('No registries configured.');\n    return;\n  }\n  for (const r of config.registries) console.log(`${r.name}  ${r.url}`);\n});\n\nprogram.parseAsync().catch((err: unknown) => {\n  console.error(err instanceof Error ? err.message : err);\n  process.exitCode = 1;\n});\n"],"mappings":";;;;;;;;;;AAOA,MAAM,eAAe,cAAc,IAAI,IAAI,0BAA0B,YAAY,GAAG,CAAC;AAGrF,MAAM,UAAkC,EAAE,WAAW,aAAa;;;;;;AAOlE,eAAsB,YAAY,MAAc,WAAsC;CACpF,IAAI,CAAC,iBAAiB,KAAK,IAAI,GAC7B,MAAM,IAAI,YACR,qBAAqB,KAAK,6DAC5B;CAEF,MAAM,WAAW,MAAM,QAAQ,SAAS,CAAC,CAAC,YAAY,KAAA,CAAS;CAC/D,IAAI,YAAY,SAAS,SAAS,GAChC,MAAM,IAAI,YAAY,2BAA2B,WAAW;CAG9D,MAAM,UAAoB,CAAC;CAC3B,eAAe,QAAQ,KAA4B;EACjD,MAAM,UAAU,MAAM,QAAQ,KAAK,cAAc,GAAG,GAAG,EAAE,eAAe,KAAK,CAAC;EAC9E,MAAM,MAAM,KAAK,WAAW,GAAG,GAAG,EAAE,WAAW,KAAK,CAAC;EACrD,KAAK,MAAM,SAAS,SAAS;GAC3B,MAAM,UAAU,KAAK,KAAK,MAAM,IAAI;GACpC,IAAI,MAAM,YAAY,GAAG;IACvB,MAAM,QAAQ,OAAO;IACrB;GACF;GACA,MAAM,UAAU,MAAM,SAAS,KAAK,cAAc,OAAO,GAAG,MAAM;GAClE,MAAM,UAAU,KAAK,KAAK,QAAQ,MAAM,SAAS,MAAM,IAAI;GAC3D,MAAM,UAAU,KAAK,WAAW,OAAO,GAAG,QAAQ,WAAW,gBAAgB,IAAI,GAAG,MAAM;GAC1F,QAAQ,KAAK,OAAO;EACtB;CACF;CACA,MAAM,QAAQ,EAAE;CAChB,OAAO,QAAQ,KAAK;AACtB;;;AC9BA,MAAM,UAAU,IAAI,QAAQ;AAC5B,MAAM,QAAQ,IAAI,MAAM;AAExB,QAAQ,KAAK,QAAQ,CAAC,CAAC,YAAY,mDAAmD;AAEtF,eAAe,eAAe,SAAkB,SAAiC;CAC/E,MAAM,SAAS,MAAM,MAAM,iBAAiB;CAC5C,MAAM,OAAO,UAAU,OAAO,OAAO,IAAK,OAAO,QAAQ;CACzD,IAAI,CAAC,OAAO,UAAU,IAAI,KAAK,OAAO,KAAK,OAAO,OAChD,MAAM,IAAI,MAAM,iBAAiB,SAAS;CAI5C,MAAM,WAAW,WAAW,OAAO,QAAQ;CAC3C,MAAM,SAAS,aAAa,OAAO,IAAI,mBAAmB,CAAC;CAC3D,MAAM,OAAO,UAAU,MAAM;CAC7B,MAAM,aAAa,MAAM;EAAE,OAAO,OAAO,IAAI;EAAO;EAAM;CAAS,IAAI,SAAS;EAC9E,QAAQ,IAAI,wCAAwC,KAAK,MAAM;EAC/D,IAAI,aAAa,eAAe,aAAa,aAC3C,QAAQ,IAAI,2BAA2B,SAAS,uCAAuC;CAE3F,CAAC;CACD,MAAM,iBAAuB;EAC3B,WAAW,MAAM;EACjB,OAAY,MAAM,CAAC,CAAC,cAAc,QAAQ,KAAK,CAAC,CAAC;CACnD;CACA,QAAQ,GAAG,UAAU,QAAQ;CAC7B,QAAQ,GAAG,WAAW,QAAQ;AAChC;AAEA,QACG,QAAQ,SAAS,EAAE,WAAW,KAAK,CAAC,CAAC,CACrC,OAAO,qBAAqB,kDAAkD,CAAC,CAC/E,OAAO,iBAAiB,iEAAiE,CAAC,CAC1F,YAAY,gEAAgE,CAAC,CAC7E,OAAO,OAAO,YACb,eAAe,QAAQ,MAAM,QAAQ,IAAI,CAC3C;AAEF,QACG,QAAQ,QAAQ,CAAC,CACjB,SAAS,UAAU,+CAA+C,CAAC,CACnE,SAAS,eAAe,sCAAsC,CAAC,CAC/D,YAAY,4CAA4C,CAAC,CACzD,OAAO,OAAO,MAAc,cAAuB;CAClD,MAAM,SAAS,aAAa;CAC5B,MAAM,QAAQ,MAAM,YAAY,MAAM,QAAQ,MAAM,CAAC;CACrD,QAAQ,IAAI,WAAW,KAAK,EAAE;CAC9B,KAAK,MAAM,QAAQ,OAAO,QAAQ,IAAI,KAAK,MAAM;CACjD,QAAQ,IAAI,eAAe;CAC3B,QAAQ,IAAI,QAAQ,QAAQ;CAC5B,QAAQ,IAAI,eAAe;CAC3B,QAAQ,IAAI,oBAAoB;CAChC,QAAQ,IAAI,kDAAkD;AAChE,CAAC;AAEH,QACG,QAAQ,SAAS,CAAC,CAClB,SAAS,YAAY,iDAAiD,CAAC,CACvE,YAAY,gBAAgB,CAAC,CAC7B,OAAO,OAAO,WAAmB;CAChC,MAAM,SAAS,MAAM,WAAW,OAAO,MAAM;CAC7C,QAAQ,IAAI,aAAa,OAAO,KAAK,GAAG,OAAO,QAAQ,IAAI,OAAO,OAAO,KAAK,EAAE;CAChF,QAAQ,IAAI,aAAa,MAAM,WAAW,OAAO,IAAI,GAAG;CACxD,QAAQ,IAAI,aAAa,MAAM,cAAc,OAAO,IAAI,GAAG;CAC3D,MAAM,gBAAgB,OAAO,IAAI;AACnC,CAAC;;AAGH,eAAe,gBAAgB,MAA6B;CAC1D,IAAI;CACJ,IAAI;EACF,CAAC,CAAE,YAAa,MAAM,QAAQ,MAAM,WAAW,IAAI,CAAC;CACtD,QAAQ;EACN;CACF;CACA,MAAM,EAAE,WAAW,MAAM,iBAAiB,OAAO,QAAQ;CACzD,IAAI,OAAO,QAAQ,SAAS,GAC1B,QAAQ,IAAI,eAAe,OAAO,QAAQ,KAAK,IAAI,GAAG;CAExD,MAAM,WAAW,OAAO,aAAa,QAAQ,MAAM,EAAE,YAAY,CAAC,EAAE,UAAU;CAC9E,IAAI,SAAS,SAAS,GAAG;EACvB,MAAM,OAAO,SAAS,KAAK,MAAM,GAAG,EAAE,KAAK,UAAU,EAAE,QAAQ,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI;EACvF,QAAQ,IAAI,4BAA4B,MAAM;CAChD;CACA,IAAI,OAAO,QAAQ,SAAS,KAAK,SAAS,SAAS,GACjD,QAAQ,IAAI,sEAAsE;AAEtF;AAEA,QACG,QAAQ,QAAQ,CAAC,CACjB,SAAS,UAAU,oBAAoB,CAAC,CACxC,YAAY,yBAAyB,CAAC,CACtC,OAAO,OAAO,SAAiB;CAC9B,MAAM,SAAS,MAAM,UAAU,OAAO,IAAI;CAC1C,QAAQ,IAAI,WAAW,OAAO,KAAK,MAAM,OAAO,SAAS;AAC3D,CAAC;AAEH,QACG,QAAQ,QAAQ,CAAC,CACjB,SAAS,UAAU,oBAAoB,CAAC,CACxC,OAAO,WAAW,qCAAqC,CAAC,CACxD,YAAY,qDAAqD,CAAC,CAClE,OAAO,OAAO,MAAc,YAAiC;CAC5D,MAAM,UAAU,OAAO,MAAM,EAAE,OAAO,QAAQ,SAAS,MAAM,CAAC;CAC9D,QAAQ,IAAI,QAAQ,QAAQ,WAAW,KAAK,aAAa,WAAW,KAAK,aAAa;AACxF,CAAC;;AAGH,SAAS,YAAY,MAAsB;CACzC,MAAM,MAAM,SAAS,QAAQ,IAAI,GAAG,IAAI;CACxC,OAAO,QAAQ,MAAM,IAAI,WAAW,IAAI,KAAK,WAAW,GAAG,IAAI,OAAO,KAAK;AAC7E;AAEA,QACG,QAAQ,QAAQ,CAAC,CACjB,SAAS,UAAU,oBAAoB,CAAC,CACxC,OAAO,oBAAoB,mDAAmD,CAAC,CAC/E,YAAY,8DAA8D,CAAC,CAC3E,OAAO,OAAO,MAAc,YAA8B;CACzD,MAAM,SAAS,MAAM,UAAU,OAAO,IAAI,mBAAmB,GAAG,MAAM,EACpE,GAAI,QAAQ,OAAO,EAAE,KAAK,QAAQ,IAAI,EACxC,CAAC;CACD,KAAK,MAAM,WAAW,OAAO,UAAU,QAAQ,IAAI,cAAc,SAAS;CAC1E,QAAQ,IACN,YAAY,OAAO,OAAO,KAAK,GAAG,OAAO,OAAO,QAAQ,MAAM,YAAY,OAAO,WAAW,EAAE,IAAI,OAAO,gBAAgB,cAC3H;CACA,IAAI,OAAO,OAAO,OAAO,SAAS,SAChC,QAAQ,IAAI,oEAAoE;AAEpF,CAAC;AAIH,eAAe,cAAc,MAA6B;CACxD,MAAM,SAAS,MAAM,UAAU,OAAO,IAAI,mBAAmB,GAAG,IAAI;CACpE,KAAK,MAAM,WAAW,OAAO,UAAU,QAAQ,IAAI,cAAc,SAAS;CAC1E,QAAQ,IACN,YAAY,OAAO,OAAO,KAAK,GAAG,OAAO,OAAO,QAAQ,IAAI,OAAO,gBAAgB,uBACrF;CACA,QAAQ,IAAI,aAAa,MAAM,WAAW,OAAO,OAAO,IAAI,GAAG;CAC/D,QAAQ,IAAI,aAAa,MAAM,cAAc,OAAO,OAAO,IAAI,GAAG;AACpE;AAEA,QACG,QAAQ,QAAQ,CAAC,CACjB,SAAS,UAAU,mCAAmC,CAAC,CACvD,YAAY,iEAAiE,CAAC,CAC9E,OAAO,aAAa;AAEvB,QACG,QAAQ,MAAM,CAAC,CACf,OAAO,UAAU,yBAAyB,CAAC,CAC3C,YAAY,qBAAqB,CAAC,CAClC,OAAO,OAAO,YAAgC;CAC7C,MAAM,QAAQ,IAAI,cAAc,KAAK;CACrC,MAAM,UAAU,MAAM,MAAM,cAAc;CAC1C,MAAM,QAAQ,IAAI,IAChB,MAAM,QAAQ,IACZ,QAAQ,IACN,OAAO,WAAW,CAAC,OAAO,MAAM,MAAM,aAAa,OAAO,OAAO,OAAO,IAAI,CAAC,CAC/E,CACF,CACF;CACA,IAAI,QAAQ,MAAM;EAChB,QAAQ,IACN,KAAK,UACH,QAAQ,KAAK,WAAW;GACtB,MAAM,SAAS,MAAM,IAAI,OAAO,IAAI;GACpC,OAAO;IACL,GAAG;IACH,cAAc,QAAQ,YAAY;IAClC,YAAY,QAAQ,cAAc;IAClC,GAAI,QAAQ,aAAa,KAAA,KAAa,EAAE,gBAAgB,OAAO,SAAS;GAC1E;EACF,CAAC,GACD,MACA,CACF,CACF;EACA;CACF;CACA,IAAI,QAAQ,WAAW,GAAG;EACxB,QAAQ,IAAI,4DAA4D;EACxE;CACF;CACA,KAAK,MAAM,UAAU,SAAS;EAC5B,MAAM,SAAS,OAAO,OAAO,SAAS,QAAQ,OAAO,OAAO,MAAM,OAAO,OAAO;EAChF,MAAM,SAAS,MAAM,IAAI,OAAO,IAAI;EACpC,MAAM,SAAS,QAAQ,YAAY,EAAA,CAAG,QAAQ,CAAC;EAC/C,MAAM,MACJ,QAAQ,aAAa,KAAA,IACjB,KACA,QAAQ,OAAO,SAAS,QAAQ,CAAC,EAAE,MAAM,OAAO,aAAa,mBAAmB;EACtF,QAAQ,IACN,GAAG,OAAO,KAAK,GAAG,OAAO,QAAQ,IAAI,OAAO,OAAO,KAAK,IAAI,OAAO,KAAK,MAAM,QAAQ,KACxF;CACF;AACF,CAAC;AAEH,QACG,QAAQ,QAAQ,CAAC,CACjB,SAAS,UAAU,oBAAoB,CAAC,CACxC,SAAS,cAAc,gEAA8D,CAAC,CACtF,YAAY,uDAAuD,CAAC,CACpE,OAAO,OAAO,MAAc,aAAsB;CACjD,IAAI,CAAE,MAAM,MAAM,cAAc,IAAI,GAAI,MAAM,IAAI,MAAM,QAAQ,KAAK,mBAAmB;CACxF,IAAI,aAAa,KAAA,GAAW;EAE1B,MAAM,SADU,aAAa,UAAU,aAAa,QAC3B,KAAA,IAAY,OAAO,QAAQ;EACpD,IAAI,WAAW,KAAA,MAAc,CAAC,OAAO,SAAS,MAAM,KAAK,SAAS,IAChE,MAAM,IAAI,MAAM,4BAA4B,UAAU;EAExD,MAAM,aAAa,OAAO,MAAM,MAAM;CACxC;CACA,MAAM,SAAS,MAAM,aAAa,OAAO,IAAI,cAAc,KAAK,GAAG,IAAI;CACvE,MAAM,QAAQ,IAAI,OAAO,SAAS,QAAQ,CAAC,EAAE,YAAY,OAAO,KAAK;CACrE,IAAI,OAAO,aAAa,KAAA,GAAW;EACjC,QAAQ,IAAI,GAAG,KAAK,mBAAmB,OAAO;EAC9C;CACF;CACA,QAAQ,IACN,GAAG,KAAK,KAAK,OAAO,SAAS,QAAQ,CAAC,EAAE,eAAe,MAAM,MAAM,OAAO,gBAAgB,EAAA,CAAG,QAAQ,CAAC,EAAE,MAC1G;CACA,IAAI,OAAO,YACT,QAAQ,IAAI,4DAA4D;AAC5E,CAAC;AAEH,MAAM,WAAW,QAAQ,QAAQ,UAAU,CAAC,CAAC,YAAY,uBAAuB;AAEhF,SACG,QAAQ,KAAK,CAAC,CACd,SAAS,UAAU,eAAe,CAAC,CACnC,SAAS,SAAS,gCAAgC,CAAC,CACnD,OAAO,OAAO,MAAc,QAAgB;CAC3C,MAAM,QAAQ,MAAM,YAAY,OAAO,MAAM,GAAG;CAChD,QAAQ,IAAI,mBAAmB,KAAK,KAAK,MAAM,KAAK,OAAO,OAAO;AACpE,CAAC;AAEH,SACG,QAAQ,QAAQ,CAAC,CACjB,SAAS,UAAU,eAAe,CAAC,CACnC,OAAO,OAAO,SAAiB;CAC9B,MAAM,eAAe,OAAO,IAAI;CAChC,QAAQ,IAAI,qBAAqB,KAAK,EAAE;AAC1C,CAAC;AAEH,SAAS,QAAQ,MAAM,CAAC,CAAC,OAAO,YAAY;CAC1C,MAAM,SAAS,MAAM,MAAM,iBAAiB;CAC5C,IAAI,OAAO,WAAW,WAAW,GAAG;EAClC,QAAQ,IAAI,2BAA2B;EACvC;CACF;CACA,KAAK,MAAM,KAAK,OAAO,YAAY,QAAQ,IAAI,GAAG,EAAE,KAAK,IAAI,EAAE,KAAK;AACtE,CAAC;AAED,QAAQ,WAAW,CAAC,CAAC,OAAO,QAAiB;CAC3C,QAAQ,MAAM,eAAe,QAAQ,IAAI,UAAU,GAAG;CACtD,QAAQ,WAAW;AACrB,CAAC"}

package/dist/index.d.mts

@@ -1,12 +1,5 @@
-import { AIProvider, AppContext, AppDefinition, AppManifest, ConfigObject } from "@alashi/apps-sdk";
+import { AIProvider, AppContext, AppDefinition, AppManifest, AppSdkError, ConfigObject } from "@alashi/apps-sdk";
 import { Hono } from "hono";
-//#region src/compat.d.ts
-/**
- * Enforces the manifest's declared `sdkVersion` range against the SDK
- * this host is built with. Apps that declare nothing are accepted.
- */
-declare function checkSdkCompatibility(manifest: AppManifest): void;
-//#endregion
 //#region src/sources.d.ts
 type AppSourceSpec = {
   type: "git";
@@ -32,6 +25,14 @@ interface RegistryRef {
   name: string;
   url: string;
 }
+/** Host-enforced spend limits for one app. */
+interface AppBudget {
+  /**
+   * Daily AI spend ceiling in USD. Once the app's spend for the UTC day
+   * reaches it, the host refuses `createSession`. `0` means "no AI at all".
+   */
+  dailyUsd: number;
+}
 interface GlobalConfig {
   registries: RegistryRef[];
   port?: number;
@@ -39,6 +40,15 @@ interface GlobalConfig {
   host?: string;
   /** Per-app global overrides, keyed by app name (middle config layer). */
   apps?: Record<string, ConfigObject>;
+  /**
+   * Host-enforced per-app spend caps, keyed by app name.
+   *
+   * Deliberately a sibling of `apps` rather than a key inside it: everything in
+   * `apps` is merged into the app's config and can be overridden by the app's
+   * own `config.json` layer, which would let an app raise its own ceiling.
+   * A cap is enforcement, so it lives where only the host can set it.
+   */
+  budgets?: Record<string, AppBudget>;
 }
 interface Conversation {
   id: string;
@@ -64,6 +74,19 @@ interface JobState {
   lastRun: Record<string, string>;
   runs: JobRun[];
 }
+/** One UTC day of AI spend for an app. */
+interface UsageDay {
+  /** UTC calendar day, `YYYY-MM-DD`. */
+  date: string;
+  /** Sum of the `costUsd` the provider reported for that day's turns. */
+  costUsd: number;
+  /** Turns that reported a cost (turns without one are not counted). */
+  turns: number;
+}
+/** Host-side AI spend for an app, oldest day first, trimmed to the retention window. */
+interface UsageState {
+  days: UsageDay[];
+}
 interface InstallRecord {
   name: string;
   version: string;
@@ -93,6 +116,7 @@ declare class Store {
   appRecordPath(name: string): string;
   appChatStatePath(name: string): string;
   appJobStatePath(name: string): string;
+  appUsagePath(name: string): string;
   registryCachePath(name: string): string;
   readGlobalConfig(): Promise<GlobalConfig>;
   writeGlobalConfig(config: GlobalConfig): Promise<void>;
@@ -104,10 +128,149 @@ declare class Store {
   writeChatState(name: string, state: ChatState): Promise<void>;
   readJobState(name: string): Promise<JobState>;
   writeJobState(name: string, state: JobState): Promise<void>;
+  readUsageState(name: string): Promise<UsageState>;
+  writeUsageState(name: string, state: UsageState): Promise<void>;
   listInstalled(): Promise<InstallRecord[]>;
 }
 //#endregion
+//#region src/usage.d.ts
+/** Days of history kept in usage.json; older days are dropped on write. */
+declare const USAGE_RETENTION_DAYS = 90;
+/** The UTC calendar day (`YYYY-MM-DD`) a timestamp falls in. */
+declare function utcDay(at?: Date): string;
+/** Money for humans: sub-dollar spend needs the extra digits, larger sums don't. */
+declare function formatUsd(value: number): string;
+/** A summary of an app's recorded spend, as served by GET /api/apps/:name/usage. */
+interface UsageSummary {
+  /** The UTC day "today" refers to. */
+  date: string;
+  /** Spend recorded so far today. */
+  todayCostUsd: number;
+  /** Turns recorded so far today. */
+  todayTurns: number;
+  /** Spend across the whole retention window. */
+  totalCostUsd: number;
+  /** Days kept in the retention window. */
+  retentionDays: number;
+  /** Daily series, oldest first; days with no spend are absent. */
+  days: UsageDay[];
+}
+/**
+ * Per-app, per-UTC-day AI spend, persisted as OS bookkeeping in the app
+ * container (`apps/<name>/usage.json`, next to jobs.json and chat.json).
+ *
+ * Cost arrives from the `result` event's `costUsd`, which the SDK contract
+ * marks optional: engines that do not report cost simply contribute nothing.
+ * Writes are serialized per app so concurrent turns cannot lose an update,
+ * and each app has its own queue so a slow write for one app never delays
+ * another.
+ */
+declare class UsageRecorder {
+  private readonly store;
+  private readonly retentionDays;
+  /** Serializes usage.json read-modify-write per app. */
+  private readonly queues;
+  constructor(store: Store, retentionDays?: number);
+  /**
+   * Adds one turn's cost to the app's total for the UTC day of `at`.
+   * A missing, non-finite, or negative `costUsd` is ignored (no turn counted,
+   * no file written) so a provider that omits cost cannot corrupt the totals.
+   */
+  record(appName: string, costUsd: number | undefined, at?: Date): Promise<void>;
+  /** The app's recorded days, oldest first, with expired days filtered out. */
+  read(appName: string, at?: Date): Promise<UsageState>;
+  /** Today's spend plus the daily series, for the dashboard and the usage endpoint. */
+  summary(appName: string, at?: Date): Promise<UsageSummary>;
+  /** Drops days outside the retention window and normalizes ordering/values. */
+  private prune;
+  private enqueue;
+}
+//#endregion
+//#region src/budget.d.ts
+/**
+ * Stable discriminator on the thrown error. Apps see the host's error object
+ * across a package boundary (and, once `AppContext` becomes RPC, across a
+ * process boundary), so the reliable check is this code — not `instanceof`.
+ */
+declare const BUDGET_EXCEEDED_CODE = "budget_exceeded";
+/** Today's spend for an app measured against its cap. */
+interface BudgetStatus {
+  /** The UTC calendar day the numbers cover. */
+  date: string;
+  /** Spend recorded for that day. */
+  spentUsd: number;
+  /** The configured daily cap; absent when the app has none. */
+  dailyUsd?: number;
+  /** Spend left before sessions are refused; absent when there is no cap. */
+  remainingUsd?: number;
+  /** True only when a cap is set and the day's spend has reached it. */
+  overBudget: boolean;
+}
+/**
+ * Refusal from the `createSession` budget gate.
+ *
+ * Extends the SDK's `AppSdkError` so it stays inside the taxonomy apps already
+ * catch, and carries a `code` plus the numbers behind the decision so an app
+ * can degrade gracefully (queue the work, skip the run, tell the user) instead
+ * of treating a spend cap as a crash. The message is written to stand alone:
+ * it is often the only text a human sees, rendered somewhere far from the host.
+ */
+declare class BudgetExceededError extends AppSdkError {
+  readonly code: typeof BUDGET_EXCEEDED_CODE;
+  readonly appName: string;
+  /** UTC day the cap applies to. */
+  readonly date: string;
+  /** The configured cap in USD. */
+  readonly limitUsd: number;
+  /** Spend already recorded for `date`. */
+  readonly spentUsd: number;
+  constructor(appName: string, params: {
+    date: string;
+    limitUsd: number;
+    spentUsd: number;
+  });
+  /** Duck-typed check that survives duplicate copies of this module. */
+  static is(err: unknown): err is BudgetExceededError;
+}
+/**
+ * The cap the *host* has set for an app, or undefined when there is none.
+ *
+ * Read only from `GlobalConfig.budgets`, which is deliberately not part of the
+ * config layers merged into `ctx.config`: an app must not be able to raise its
+ * own ceiling through its manifest defaults or `apps/<name>/config.json`.
+ *
+ * A hand-edited cap that is not a finite number >= 0 is ignored rather than
+ * treated as zero — a typo in config.json should not brick an app, and the
+ * dashboard/settings write path validates before it ever gets stored.
+ */
+declare function appBudget(config: GlobalConfig, name: string): number | undefined;
+/** Combines an already-read usage summary with a cap; no I/O. */
+declare function budgetStatusFor(summary: UsageSummary, dailyUsd: number | undefined): BudgetStatus;
+/** Today's spend against the app's cap, for the gate, the dashboard, and settings. */
+declare function budgetStatus(store: Store, usage: UsageRecorder, name: string, at?: Date): Promise<BudgetStatus>;
+/**
+ * Fail-closed gate: throws `BudgetExceededError` when the app has already
+ * spent its daily cap. Evaluated fresh on every call, so a cap edit or a
+ * mid-day overspend takes effect without restarting the app.
+ */
+declare function assertWithinBudget(store: Store, usage: UsageRecorder, name: string, at?: Date): Promise<void>;
+/**
+ * Sets (or, with `undefined`, clears) an app's daily cap in the host config.
+ * Rejects anything that is not a finite, non-negative dollar amount; `0` is a
+ * legitimate value meaning "no AI spend at all for this app".
+ */
+declare function setAppBudget(store: Store, name: string, dailyUsd: number | undefined): Promise<void>;
+//#endregion
+//#region src/compat.d.ts
+/**
+ * Enforces the manifest's declared `sdkVersion` range against the SDK
+ * this host is built with. Apps that declare nothing are accepted.
+ */
+declare function checkSdkCompatibility(manifest: Pick<AppManifest, "name" | "sdkVersion">): void;
+//#endregion
 //#region src/installer.d.ts
+/** Lifecycle scripts stay off: installing an app must not execute arbitrary code. */
+declare function installDependencies(dir: string): Promise<void>;
 interface InstallOptions {
   /** Expected app name (enforced against the manifest when set). */
   expectName?: string;
@@ -138,6 +301,50 @@ interface LoadedApp {
  */
 declare function loadApp(repoDir: string): Promise<LoadedApp>;
 //#endregion
+//#region src/portability.d.ts
+/**
+ * Container portability. An app is only half-portable on its own: the
+ * container holds sessionId pointers, but the conversation transcripts live
+ * with the engine (keyed by the app's data dir as cwd). An export therefore
+ * snapshots the container *plus* the transcripts, engine-neutrally, and the
+ * import re-keys them to this machine's data dir.
+ *
+ * Archive layout (tar.gz):
+ *   alashi-export.json          { formatVersion, exportedAt, app, transcripts }
+ *   container/                  the contents of $ALASHI_HOME/apps/<name>/
+ *   transcripts/<sessionId>.jsonl
+ */
+declare const EXPORT_FORMAT_VERSION = 1;
+interface ExportMetadata {
+  formatVersion: number;
+  exportedAt: string;
+  app: InstallRecord;
+  /** Session ids that have a transcripts/<id>.jsonl entry in the archive. */
+  transcripts: string[];
+}
+interface ExportOptions {
+  /** Archive path; defaults to ./<name>-<version>.tar.gz under the cwd. */
+  out?: string;
+}
+interface ExportResult {
+  archivePath: string;
+  record: InstallRecord;
+  transcriptCount: number;
+  warnings: string[];
+}
+interface ImportResult {
+  record: InstallRecord;
+  transcriptCount: number;
+  warnings: string[];
+}
+/**
+ * Packs apps/<name>/ plus the transcripts of every conversation that ever had
+ * a turn into a single self-contained tar.gz.
+ */
+declare function exportApp(store: Store, provider: AIProvider, name: string, options?: ExportOptions): Promise<ExportResult>;
+/** Restores a container exported by {@link exportApp}, plus its transcripts. */
+declare function importApp(store: Store, provider: AIProvider, archivePath: string): Promise<ImportResult>;
+//#endregion
 //#region src/registry.d.ts
 interface RegistryApp {
   name: string;
@@ -175,8 +382,12 @@ declare function resolveApp(store: Store, appName: string): Promise<ResolvedApp>
  * Setup state shapes the session defaults: unconfigured MCP servers are
  * dropped (with their tools) so interpolation never hits a missing key, and
  * while required keys are missing the scoped provider fails closed.
+ *
+ * When a `usage` recorder is supplied, every session opened through the
+ * returned context reports its per-turn cost to it, and the app's host-set
+ * daily spend cap (if any) is enforced on every createSession.
  */
-declare function buildAppContext(store: Store, manifest: AppManifest, provider: AIProvider): Promise<AppContext>;
+declare function buildAppContext(store: Store, manifest: AppManifest, provider: AIProvider, usage?: UsageRecorder): Promise<AppContext>;
 //#endregion
 //#region src/scheduler.d.ts
 interface SchedulableApp {
@@ -235,10 +446,17 @@ interface AppServer {
  * The host HTTP surface:
  *   GET  /                      dashboard of installed apps
  *   GET  /settings/:name        per-app settings page (config form)
- *   GET  /api/apps              installed apps as JSON
+ *   GET  /api/apps              installed apps as JSON, each with todayCostUsd
+ *                               and its daily spend cap / over-budget state
+ *   GET  /api/apps/:name/usage  recorded AI spend: today's total, a daily series,
+ *                               and the budget status
+ *   GET  /api/apps/:name/budget today's spend against the app's daily cap
+ *   PUT  /api/apps/:name/budget { dailyUsd: number | null } -> set or clear the cap
+ *                               (a host setting; apps cannot set their own)
  *   POST /api/apps/:name/chat   { message, conversationId? } -> SSE stream of AgentEvents
  *                               (omit conversationId to start a new conversation; the
- *                                id is echoed in the x-conversation-id response header)
+ *                                id is echoed in the x-conversation-id response header;
+ *                                402 when the app is over its daily spend cap)
  *   GET  /api/apps/:name/chat/conversations          conversations, most recent first
  *   POST /api/apps/:name/chat/conversations  { sessionId?, title? } -> create a conversation,
  *                               optionally adopting an existing provider session (e.g. an
@@ -260,5 +478,5 @@ interface AppServer {
  */
 declare function createServer(store: Store, provider: AIProvider): AppServer;
 //#endregion
-export { type AppServer, type AppSourceSpec, type GlobalConfig, type InstallOptions, type InstallRecord, type LoadedApp, type RegistryApp, type RegistryIndex, type RegistryRef, type RemoveOptions, type ResolvedApp, type SourceArg, Store, addRegistry, buildAppContext, checkSdkCompatibility, createServer, fetchSource, installApp, loadApp, parseSourceArg, readCachedIndex, refreshRegistry, removeApp, removeRegistry, resolveApp, updateApp, updateSource };
+export { type AppBudget, type AppServer, type AppSourceSpec, BUDGET_EXCEEDED_CODE, BudgetExceededError, type BudgetStatus, EXPORT_FORMAT_VERSION, type ExportMetadata, type ExportOptions, type ExportResult, type GlobalConfig, type ImportResult, type InstallOptions, type InstallRecord, type LoadedApp, type RegistryApp, type RegistryIndex, type RegistryRef, type RemoveOptions, type ResolvedApp, type SourceArg, Store, USAGE_RETENTION_DAYS, type UsageDay, UsageRecorder, type UsageState, type UsageSummary, addRegistry, appBudget, assertWithinBudget, budgetStatus, budgetStatusFor, buildAppContext, checkSdkCompatibility, createServer, exportApp, fetchSource, formatUsd, importApp, installApp, installDependencies, loadApp, parseSourceArg, readCachedIndex, refreshRegistry, removeApp, removeRegistry, resolveApp, setAppBudget, updateApp, updateSource, utcDay };
 //# sourceMappingURL=index.d.mts.map

package/dist/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","names":[],"sources":["../src/compat.ts","../src/sources.ts","../src/store.ts","../src/installer.ts","../src/loader.ts","../src/registry.ts","../src/runtime.ts","../src/scheduler.ts","../src/server.ts"],"mappings":";;;;;;;iBAOgB,sBAAsB,UAAU;;;KCCpC;EACN;EAAa;EAAa;;EAC1B;EAAe;;;KAGT,YAAY;EAAkB;EAAkB;;iBAE5C,eAAe,cAAc;;iBAwBvB,YAAY,MAAM,eAAe,kBAAkB;;iBAanD,aAAa,MAAM,eAAe,kBAAkB;;;UC9CzD;EACf;EACA;;UAGe;EACf,YAAY;EACZ;;EAEA;;EAEA,OAAO,eAAe;;UAGP;EACf;;EAEA;EACA;EACA;;;UAIe;EACf,eAAe;;UAGA;EACf;EACA;EACA;EACA;EACA;EACA;;;UAIe;EACf,SAAS;EACT,MAAM;;UAGS;EACf;EACA;;EAEA;EACA,QAAQ;EACR;EACA;;;;;;;cAwBW;WACF;EAET,YAAY;MAIR;MAIA;MAIA;MAIA;;EAKJ,OAAO;EAOP,WAAW;EAIX,WAAW;EAIX,cAAc;EAId,cAAc;EAId,iBAAiB;EAIjB,gBAAgB;EAIhB,kBAAkB;EAOlB,oBAA0B,QAAQ;EAIlC,kBAAwB,QAAQ,eAAe;EAI/C,cAAoB,eAAe,QAAQ;EAI3C,eAAqB,QAAQ,gBAAgB;EAI7C,cAAoB,eAAe,QAAQ;EAI3C,eAAqB,cAAc,QAAQ,eAAe;EAI1D,cAAoB,eAAe,QAAQ;EAK3C,eAAqB,cAAc,OAAO,YAAY;EAItD,aAAmB,eAAe,QAAQ;EAK1C,cAAoB,cAAc,OAAO,WAAW;EAIpD,iBAAuB,QAAQ;;;;UC9IhB;;EAEf;;;;;;;iBAQoB,WACpB,OAAO,OACP,iBAAiB,eACjB,UAAS,iBACR,QAAQ;iBA0EW,UAAU,OAAO,OAAO,eAAe,QAAQ;UAuBpD;;EAEf;;iBAGoB,UACpB,OAAO,OACP,cACA,UAAS,gBACR;;;UCzIc;EACf,YAAY;EACZ,UAAU;EACV;;;;;;;iBAQoB,QAAQ,kBAAkB,QAAQ;;;UC5BvC;EACf;EACA;EACA;EACA;EACA;;UAGe;EACf,MAAM;;;;;;;iBAkCc,gBAAgB,OAAO,OAAO,UAAU,cAAc,QAAQ;iBAuB9D,gBACpB,OAAO,OACP,eACC,QAAQ;iBASW,YAAY,OAAO,OAAO,cAAc,cAAc,QAAQ;iBAW9D,eAAe,OAAO,OAAO,eAAe;UAWjD;EACf;EACA,KAAK;;;iBAIe,WAAW,OAAO,OAAO,kBAAkB,QAAQ;;;;;;;;;;;;;iBC8BnD,gBACpB,OAAO,OACP,UAAU,aACV,UAAU,aACT,QAAQ;;;UC/IM;EACf,UAAU;EACV,KAAK;EACL,cAAc,gBAAgB,KAAK,eAAe;;UAGnC;EACf;EACA;EACA;;EAEA;EACA;EACA;EACA;EACA,YAAY;;;;;;;;cAiBD;mBAQT;mBACA;UARM;UACA;UACA;;UAEA;EAER,YACE,OAAwB,OACxB,SAA0B,iBAAiB,QAAQ;EAGrD,SAAe;EAuCf;;;;;EAUA,IACE,iBACA,iBACA,UAAS,oBACR,QAAQ;;EAmCX,OAAa,kBAAkB,QAAQ;UA4B/B;;;;UCpHO;;EAEf,KAAK;;EAEL,WAAW;;EAEX,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA8BK,aAAa,OAAO,OAAO,UAAU,aAAa"}
+{"version":3,"file":"index.d.mts","names":[],"sources":["../src/sources.ts","../src/store.ts","../src/usage.ts","../src/budget.ts","../src/compat.ts","../src/installer.ts","../src/loader.ts","../src/portability.ts","../src/registry.ts","../src/runtime.ts","../src/scheduler.ts","../src/server.ts"],"mappings":";;;KAQY;EACN;EAAa;EAAa;;EAC1B;EAAe;;;KAGT,YAAY;EAAkB;EAAkB;;iBAE5C,eAAe,cAAc;;iBAwBvB,YAAY,MAAM,eAAe,kBAAkB;;iBAanD,aAAa,MAAM,eAAe,kBAAkB;;;UC9CzD;EACf;EACA;;;UAIe;;;;;EAKf;;UAGe;EACf,YAAY;EACZ;;EAEA;;EAEA,OAAO,eAAe;;;;;;;;;EAStB,UAAU,eAAe;;UAGV;EACf;;EAEA;EACA;EACA;;;UAIe;EACf,eAAe;;UAGA;EACf;EACA;EACA;EACA;EACA;EACA;;;UAIe;EACf,SAAS;EACT,MAAM;;;UAIS;;EAEf;;EAEA;;EAEA;;;UAIe;EACf,MAAM;;UAGS;EACf;EACA;;EAEA;EACA,QAAQ;EACR;EACA;;;;;;;cAwBW;WACF;EAET,YAAY;MAIR;MAIA;MAIA;MAIA;;EAKJ,OAAO;EAOP,WAAW;EAIX,WAAW;EAIX,cAAc;EAId,cAAc;EAId,iBAAiB;EAIjB,gBAAgB;EAIhB,aAAa;EAIb,kBAAkB;EAOlB,oBAA0B,QAAQ;EAIlC,kBAAwB,QAAQ,eAAe;EAI/C,cAAoB,eAAe,QAAQ;EAI3C,eAAqB,QAAQ,gBAAgB;EAI7C,cAAoB,eAAe,QAAQ;EAI3C,eAAqB,cAAc,QAAQ,eAAe;EAI1D,cAAoB,eAAe,QAAQ;EAK3C,eAAqB,cAAc,OAAO,YAAY;EAItD,aAAmB,eAAe,QAAQ;EAK1C,cAAoB,cAAc,OAAO,WAAW;EAIpD,eAAqB,eAAe,QAAQ;EAK5C,gBAAsB,cAAc,OAAO,aAAa;EAIxD,iBAAuB,QAAQ;;;;;cClOpB;;iBAQG,OAAO,KAAI;;iBASX,UAAU;;UAKT;;EAEf;;EAEA;;EAEA;;EAEA;;EAEA;;EAEA,MAAM;;;;;;;;;;;;cAaK;mBAKT;mBACA;;mBAJe;EAEjB,YACE,OAAwB,OACxB;;;;;;EAQF,OAAO,iBAAiB,6BAA6B,KAAI,OAAoB;;EAmB7E,KAAW,iBAAiB,KAAI,OAAoB,QAAQ;;EAK5D,QAAc,iBAAiB,KAAI,OAAoB,QAAQ;;UAevD;UAmBA;;;;;;;;;cCjHG;;UAGI;;EAEf;;EAEA;;EAEA;;EAEA;;EAEA;;;;;;;;;;;cAYW,4BAA4B;WAC9B,aAAa;WACb;;WAEA;;WAEA;;WAEA;EAET,YAAY,iBAAiB;IAAU;IAAc;IAAkB;;;SAchE,GAAG,eAAe,OAAO;;;;;;;;;;;;;iBAkBlB,UAAU,QAAQ,cAAc;;iBAYhC,gBAAgB,SAAS,cAAc,+BAA+B;;iBAahE,aACpB,OAAO,OACP,OAAO,eACP,cACA,KAAI,OACH,QAAQ;;;;;;iBAUW,mBACpB,OAAO,OACP,OAAO,eACP,cACA,KAAI,OACH;;;;;;iBAemB,aACpB,OAAO,OACP,cACA,+BACC;;;;;;;iBCrIa,sBAAsB,UAAU,KAAK;;;;iBCkB/B,oBAAoB,cAAc;UAevC;;EAEf;;;;;;;iBAQoB,WACpB,OAAO,OACP,iBAAiB,eACjB,UAAS,iBACR,QAAQ;iBAyEW,UAAU,OAAO,OAAO,eAAe,QAAQ;UAsBpD;;EAEf;;iBAGoB,UACpB,OAAO,OACP,cACA,UAAS,gBACR;;;UCrIc;EACf,YAAY;EACZ,UAAU;EACV;;;;;;;iBAQoB,QAAQ,kBAAkB,QAAQ;;;;;;;;;;;;;;;cCG3C;UAaI;EACf;EACA;EACA,KAAK;;EAEL;;UAGe;;EAEf;;UAGe;EACf;EACA,QAAQ;EACR;EACA;;UAGe;EACf,QAAQ;EACR;EACA;;;;;;iBA8CoB,UACpB,OAAO,OACP,UAAU,YACV,cACA,UAAS,gBACR,QAAQ;;iBAgMW,UACpB,OAAO,OACP,UAAU,YACV,sBACC,QAAQ;;;UC3TM;EACf;EACA;EACA;EACA;EACA;;UAGe;EACf,MAAM;;;;;;;iBAkCc,gBAAgB,OAAO,OAAO,UAAU,cAAc,QAAQ;iBAuB9D,gBACpB,OAAO,OACP,eACC,QAAQ;iBASW,YAAY,OAAO,OAAO,cAAc,cAAc,QAAQ;iBAW9D,eAAe,OAAO,OAAO,eAAe;UAWjD;EACf;EACA,KAAK;;;iBAIe,WAAW,OAAO,OAAO,kBAAkB,QAAQ;;;;;;;;;;;;;;;;;iBCgFnD,gBACpB,OAAO,OACP,UAAU,aACV,UAAU,YACV,QAAQ,gBACP,QAAQ;;;UClMM;EACf,UAAU;EACV,KAAK;EACL,cAAc,gBAAgB,KAAK,eAAe;;UAGnC;EACf;EACA;EACA;;EAEA;EACA;EACA;EACA;EACA,YAAY;;;;;;;;cAiBD;mBAQT;mBACA;UARM;UACA;UACA;;UAEA;EAER,YACE,OAAwB,OACxB,SAA0B,iBAAiB,QAAQ;EAGrD,SAAe;EAuCf;;;;;EAUA,IACE,iBACA,iBACA,UAAS,oBACR,QAAQ;;EAmCX,OAAa,kBAAkB,QAAQ;UA4B/B;;;;UCnFO;;EAEf,KAAK;;EAEL,WAAW;;EAEX,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAqCK,aAAa,OAAO,OAAO,UAAU,aAAa"}

package/dist/index.mjs

@@ -1,2 +1,2 @@
-import { _ as checkSdkCompatibility, a as installApp, c as addRegistry, d as removeRegistry, f as resolveApp, g as loadApp, h as updateSource, l as readCachedIndex, m as parseSourceArg, n as createServer, o as removeApp, p as fetchSource, r as buildAppContext, s as updateApp, t as Store, u as refreshRegistry } from "./store-Cxxnjq70.mjs";
-export { Store, addRegistry, buildAppContext, checkSdkCompatibility, createServer, fetchSource, installApp, loadApp, parseSourceArg, readCachedIndex, refreshRegistry, removeApp, removeRegistry, resolveApp, updateApp, updateSource };
+import { A as UsageRecorder, C as BudgetExceededError, D as budgetStatusFor, E as budgetStatus, M as utcDay, O as setAppBudget, S as BUDGET_EXCEEDED_CODE, T as assertWithinBudget, _ as fetchSource, a as EXPORT_FORMAT_VERSION, b as loadApp, c as installApp, d as updateApp, f as addRegistry, g as resolveApp, h as removeRegistry, j as formatUsd, k as USAGE_RETENTION_DAYS, l as installDependencies, m as refreshRegistry, n as createServer, o as exportApp, p as readCachedIndex, r as buildAppContext, s as importApp, t as Store, u as removeApp, v as parseSourceArg, w as appBudget, x as checkSdkCompatibility, y as updateSource } from "./store-VoJe_U1Q.mjs";
+export { BUDGET_EXCEEDED_CODE, BudgetExceededError, EXPORT_FORMAT_VERSION, Store, USAGE_RETENTION_DAYS, UsageRecorder, addRegistry, appBudget, assertWithinBudget, budgetStatus, budgetStatusFor, buildAppContext, checkSdkCompatibility, createServer, exportApp, fetchSource, formatUsd, importApp, installApp, installDependencies, loadApp, parseSourceArg, readCachedIndex, refreshRegistry, removeApp, removeRegistry, resolveApp, setAppBudget, updateApp, updateSource, utcDay };