@ambasada/cli 0.8.2 → 0.8.4

package/dist/ambasada.mjs

@@ -1,7 +1,41 @@
 #!/usr/bin/env node
 
 // <define:__AMBASADA_TEMPLATES__>
-var define_AMBASADA_TEMPLATES_default = { next: { ".claude/skills/ambasada-product/SKILL.md": "---\nname: ambasada-product\ndescription: Build an app on Ambasada and put it online. Use when the user wants to make an app, tool, game or website, start one with `npm create ambasada@latest`, run it with `ambasada dev`, publish it with `ambasada deploy` at <slug>.ambasada.dev, show it in the Ambasada app (mini app, notifications, sign-in), store data in the app's SQLite database, KV or file storage, make it realtime with Durable Objects or an agent (Agents SDK), bring a site built in ChatGPT, Lovable, Bolt or v0, or upgrade a project made with an older CLI (`ambasada upgrade`). Default stack: Next.js on Cloudflare.\n---\n\n# Build an app on Ambasada and put it online\n\nAn app is **one website** (one Cloudflare Worker) at `https://<your-slug>.ambasada.dev`. It comes with\nSign in with Ambasada (Ambasada ID), a SQLite database, key-value, file storage and Durable Objects for\nrealtime, and it can live inside the Ambasada app as a mini app with push notifications. No servers, no\nCloudflare account, no keys to configure.\n\n## Start\n\n```sh\nnpm create ambasada@latest my-app           # Next.js (default)\ncd my-app && npm install\nnpx ambasada dev                            # the mock API + your site, no login\n```\n\nOther templates: add `-- --template spa` (Vite + React; for code exported from Lovable or Bolt) or\n`-- --template worker` (plain HTML + small fetch handlers; the smallest possible app). All three have the\nsame `ambasada.config.ts`, sign-in routes, notifications webhook and storage helpers, and a notes example.\n\n## What to read\n\n| The user wants to\u2026 | Read |\n|---|---|\n| know where files go, what Next.js features are allowed, secrets, who is signed in | [reference/stack.md](reference/stack.md) |\n| store data (tables, migrations), sessions or caches, uploads; make it live between people (chat, presence, a shared board, counters); build an AI agent | [reference/storage.md](reference/storage.md) |\n| run it locally, put it online, use their own Cloudflare account | [reference/dev-and-deploy.md](reference/dev-and-deploy.md) |\n| make it look good and easy to use | [reference/design.md](reference/design.md) |\n| show up in the Ambasada app, send push notifications, sign people in inside the app | [reference/mini-app.md](reference/mini-app.md) |\n| build in ChatGPT, Lovable, Bolt or v0 and bring it here | [reference/build-elsewhere.md](reference/build-elsewhere.md) |\n| upgrade a project made with an older CLI | [reference/upgrading.md](reference/upgrading.md) |\n\nFor the Hack A Ton (TON payments, offerings, the agent that runs a shop): `npx ambasada add village`, then\nthe **ambasada-village** skill.\n\n## Rules (break one and the app does not work)\n\n1. **One app = one Worker.** No separate backend, no Docker. State lives in the app's SQLite (`env.DB`),\n   key-value (`env.KV`), file storage (`env.FILES`) or a Durable Object, never in module variables.\n   See [reference/storage.md](reference/storage.md).\n2. **Only the allowed Next.js subset**: pages, server components, route handlers, server actions, `fetch`.\n   No `next/image` default loader, no ISR/`revalidate`, no `fs`/`child_process`/native packages, no custom\n   server, no `middleware.ts`/`proxy.ts`, no `runtime = \"edge\"`. See [reference/stack.md](reference/stack.md#nextjs-allowed-and-banned).\n3. **Keys never reach the browser.** They live in `.env` locally and `ambasada env set` online; only server\n   code reads them. Never prefix one with `NEXT_PUBLIC_`.\n4. **Sign-in is Ambasada ID.** Use the template's `/api/auth/*` routes and `auth.user(req)`; don't add\n   Clerk, Auth.js or Supabase Auth, and don't build an accounts table. Key per-person data by `user.id`.\n5. **Tables change through migrations**: a new `db/migrations/NNNN_name.sql` per change, never edits to an\n   applied one; `npx ambasada db migrate` after deploying.\n\n## When the user is not a developer\n\nDo the work; don't ask them to edit code. Ask at most: what it does and for whom. Then build one page, run\n`npx ambasada dev`, open it, use it as the fake visitor, and show them it worked. Explain in one sentence\nper step, no jargon.\n", ".claude/skills/ambasada-product/reference/build-elsewhere.md": "# Built in ChatGPT, Lovable, Bolt or v0\n\nThree ways, easiest first.\n\n## A. Keep it hosted there, link it\n\nGood for: a site that is finished where it is and only needs to show up in the Ambasada app.\n\n1. On a laptop with Node 22+, once:\n\n   ```sh\n   npm create ambasada@latest my-app       # you need its ambasada.config.ts and the manifest\n   cd my-app && npm install\n   npx ambasada login\n   npx ambasada link https://YOUR-SITE\n   ```\n\n2. The site must serve `/.well-known/ambasada.json` and `/icon.png` (copy them from the new project's\n   `public/`) and pass `npx ambasada check https://YOUR-SITE` ([mini-app.md](mini-app.md)).\n\nLimit: Sign in with Ambasada, notifications and the app's database, KV and files come with hosting on\nambasada.dev. A site hosted elsewhere keeps its own backend; use B or C to get them.\n\n## B. Bring the code home (recommended for Lovable and Bolt)\n\nGood for: anything with real work behind it. You get hosting on ambasada.dev and the full rules.\n\n1. Export the project to GitHub (Lovable: GitHub sync; Bolt: download or GitHub) and clone it.\n2. `npm create ambasada@latest my-app -- --template spa` and copy the exported `src/` (components, pages,\n   styles) into the new project's `src/`, replacing the starter UI. Keep the template's `api/`, `lib/`,\n   `db/`, `ambasada.config.ts`, `wrangler.jsonc` and `vite.config.ts`.\n3. Open the project in Claude Code, Cursor or Codex and say:\n\n   > This is an Ambasada app (see .claude/skills/ambasada-product). Replace Supabase/Firebase with the\n   > app's env.DB (tables in db/migrations), env.KV and env.FILES, and any login with Sign in with Ambasada\n   > (api/auth.ts, /api/auth/me). Then run it with `npx ambasada dev`.\n\n4. `npx ambasada dev`, try it, then `npx ambasada deploy`.\n\n## C. ChatGPT (or any chat) writes the code, you paste it\n\n1. `npm create ambasada@latest my-app`, `cd my-app && npm install`, `npx ambasada dev`.\n2. Paste this into ChatGPT, then the files it mentions, then your idea:\n\n   > I have a Next.js 16 App Router project that runs on Cloudflare Workers (OpenNext). Rules: no `fs`, no\n   > native packages, no `next/image` (use `<img>`), no middleware, no `revalidate`, no other login than the\n   > one in `app/api/auth`. Data goes in SQLite through `lib/db.ts` (tables in `db/migrations/*.sql`), the\n   > signed-in person comes from `currentUser()` in `lib/ambasada.ts`. Below are my `app/page.tsx`,\n   > `app/api/notes/route.ts` and `db/migrations/0001_init.sql`. Rewrite them for my idea: the main action\n   > visible on a phone without scrolling. Write complete files, one code block per file, with the file path\n   > above each. My idea: \u2026\n\n3. Paste each file where ChatGPT says, keep `npx ambasada dev` running, check the page. New tables: a new\n   file in `db/migrations/` (never edit an applied one). When it works: `npx ambasada deploy` and\n   `npx ambasada db migrate`.\n\nUse ChatGPT to write files, not to decide the stack: if its answer adds Prisma, Supabase, NextAuth,\n`next/image` or a `middleware.ts`, tell it \"that's banned in my project, do it without\".\n", ".claude/skills/ambasada-product/reference/design.md": '# Design for people who decide in 10 seconds\n\nPeople open your app on a phone, often inside the Ambasada app, between two other things. They decide in\nseconds whether it is for them. Build for that.\n\n## One page, one action\n\n- **One page first.** What it is, and the one thing to do, fit on the first screen of a phone (375 \xD7 667).\n  Extra pages only when the action needs them.\n- **One action.** One button that does the main thing. Add a second only after people use the first.\n- **Few words.** A headline of up to 8 words, one sentence under it, the button. Cut every adjective you can.\n- **Show the result.** One example of what people get (an image, a sample text) beats any description.\n- **No walls.** No signup before the first use, no cookie banner, no tour. Ask for sign-in when the app\n  needs to remember someone (Sign in with Ambasada is one tap inside the Ambasada app).\n\n## The button\n\n- Label it with the action: **Make my poem**, not **Submit**.\n- Big (at least 48 px tall), full width on phones, one strong colour, nothing else in that colour.\n- If people must type something first, put that one field right above the button.\n- After the action, show the result, or "Working on it\u2026" and the result appearing when ready (a live room\n  or polling). Never a blank page.\n\n## Look\n\n- The templates use `@ambasada/ui` (the Ambasada app\'s look: tokens, `ui-card`, `ui-button`); start there\n  ([mini-app.md](mini-app.md)). Otherwise plain CSS: one font, two colours plus grey, generous spacing.\n- Large text: 18 px body on phones, a headline twice that. Light theme.\n- Works with one thumb: tap targets 48 px, no hover-only menus.\n- Loads fast: no video backgrounds, no 3 MB hero images, no animation libraries.\n\n## Words\n\n- Say what they get, not how it works. "A logo in 1 minute", not "AI-powered logo generation".\n- Write in the language of your users; one is fine.\n\n## Before and after\n\n```\nBad:  Welcome to PoemForge\u2122, the next-generation AI-powered creative writing platform\n      [Features] [Pricing] [About] [Sign up]   \u2026scroll\u2026   [Get started]\n\nGood: Your name as a folk poem\n      Type a name. Get a 4-line Romanian folk poem in 10 seconds.\n      [ Name: _________ ]\n      [   Make my poem   ]\n      "Ana, floare de la munte, / \u2026"  \u2190 one real example\n```\n', ".claude/skills/ambasada-product/reference/dev-and-deploy.md": "# Run it, put it online\n\n## `ambasada dev`: everything on your laptop\n\n```sh\nnpx ambasada dev\n```\n\nStarts two things:\n\n1. a **mock Ambasada API** on `http://127.0.0.1:8788`: same routes and signatures as the real one. Sign in\n   with Ambasada signs you in as \"Fake Visitor\"; `apps.notify` lands in a fake hub; `ambasada.store` and\n   `ambasada.files` work in memory. Open it in a browser for a page with what happened.\n2. **your site** with its normal dev server (`next dev`, `vite` or `wrangler dev`), pointed at the mock.\n\nNo login. The app's database, KV, files and Durable Objects run locally too (wrangler, `.wrangler/state`);\n`ambasada dev` applies `db/migrations/` to the local database before it starts the site.\n\nTry it: open your site, sign in, add a note; `http://localhost:3000/?ambasada_shell=mock` pretends to be inside\nthe Ambasada app (host bar insets, silent sign-in).\n\n`npx ambasada dev --mock-only` starts only the mock, if you run your site yourself. The mock's keys:\n`AMBASADA_API_URL=http://127.0.0.1:8788`, `AMBASADA_API_KEY=sk_test_dev` (already in the project's `.env`).\n\n## `ambasada deploy`: online at `<slug>.ambasada.dev`\n\nOnce, per laptop:\n\n```sh\nnpx ambasada login        # opens a page: sign in with Ambasada ID\n```\n\n(If it asks for a key instead: https://developer.ambasada.dev \u2192 your app \u2192 a project key, `vk_\u2026`.)\n\nThen, every time you want the new version online:\n\n```sh\nnpx ambasada deploy\n```\n\nIt does, in order:\n\n1. **build**: `opennextjs-cloudflare build` (Next), `vite build` (spa) or a bundle of the Worker (worker);\n2. **smoke test**: runs the built Worker locally in workerd and requests `/` and `/.well-known/ambasada.json`;\n   a crash stops the deploy (skip with `--no-smoke` only if you know why it fails);\n3. **upload**: the URL is `https://<your-slug>.ambasada.dev`, with `AMBASADA_API_KEY`, `AMBASADA_API_URL`,\n   Sign in with Ambasada and the app secret set for you, and the app's own database, KV namespace and bucket\n   bound as `DB`, `KV`, `FILES` (created on the first deploy) plus the Durable Objects from `wrangler.jsonc`.\n\nThe database's tables are not created by the deploy: run `npx ambasada db migrate` (it applies the new files\nin `db/migrations/`). No Cloudflare account needed. `--dry-run` builds and prints what it would upload.\n\nYour own secrets (an API key for another service): `npx ambasada env set NAME value` (live at once, and on\nevery deploy); `npx ambasada env list` shows the names.\n\nLimits: 10 MB compressed bundle, 1000 static files, short CPU time per request (waiting on `fetch` does not\ncount). Heavy work belongs in an API you call, or a Durable Object, not in one request.\n\n## `ambasada dev --tunnel`: your laptop, live\n\nWhen the Ambasada app, sign-in or webhooks need to reach the version on your laptop (before deploying, or to\ndebug), log in once, then:\n\n```sh\nnpx ambasada dev --tunnel         # your dev server, against the real API, at https://<slug>-dev.ambasada.dev\nnpx ambasada tunnel --port 5173   # or: only the tunnel, for a server you started yourself\n```\n\nUntil Ctrl+C, `https://<slug>-dev.ambasada.dev` is your app's URL. There is no mock in this mode. The first\ntime takes up to 2 minutes while the address is published; after that it is instant. Only one terminal per\napp at a time: `--force` takes it over. More: docs/TUNNEL.md.\n\n## `ambasada deploy --own`: your own Cloudflare account\n\nRuns `wrangler deploy` into your account (you need `npx wrangler login` first), then\n`ambasada link <your workers.dev URL>`. Set the secrets yourself: `npx wrangler secret put AMBASADA_API_KEY`.\n\n## `ambasada link`: the app is hosted somewhere else\n\n```sh\nnpx ambasada link https://my-thing.lovable.app\n```\n\nSets `product.url` in `ambasada.config.ts` and checks that `<url>/health` answers. Use it for Lovable, Bolt,\nv0, Vercel, your own server. See [build-elsewhere.md](build-elsewhere.md).\n\n## Watch it run\n\n```sh\nnpx ambasada logs --follow     # the last deploy and new errors\nnpx ambasada check https://<slug>.ambasada.dev   # the Ambasada app's checks on the live app\n```\n\nThe Developer app (https://developer.ambasada.dev) has deploys, errors, users and the storage tabs.\n\n## Upgrading\n\nA new devkit: `npx ambasada upgrade` (dependencies, skills, mechanical code changes), then\n[upgrading.md](upgrading.md) for the steps a coding agent does.\n\n## When it goes wrong\n\n| Symptom | Fix |\n|---|---|\n| build fails on `fs`, `child_process`, a `.node` file, `sharp` | a banned package: see [stack.md](stack.md#nextjs-allowed-and-banned) |\n| smoke test: `/` answers 500 | open `npx ambasada dev`, load `/`, read the terminal error |\n| `no such table: \u2026` online | `npx ambasada db migrate` |\n| a Durable Object migration is refused on deploy | never edit or remove a deployed tag in `wrangler.jsonc`'s `migrations`; add the next one ([storage.md](storage.md)) |\n| `CONFIG: no API key` | missing `AMBASADA_API_KEY`: `.env` locally, `ambasada login` before deploying |\n| sign-in loops back to the login page | `PUBLIC_URL` differs from the URL in the browser; remove it or fix it |\n| `this app uses the village \u2026 not installed` | a Hack A Ton project: `npx ambasada upgrade` (adds `@ambasada/village`) |\n", ".claude/skills/ambasada-product/reference/mini-app.md": '# The product inside the Ambasada app (mini app)\n\nEvery product on `https://<slug>.ambasada.dev` is also a **mini app**: it can open inside the Ambasada\nmobile app, sign people in without a consent screen and send them push notifications. The template does\nthe wiring; this page says what is there and how to use it. Platform spec: docs/MINI-APPS.md in the repo.\n\n## Is it listed?\n\n`ambasada deploy` registers the product with the Ambasada hub and checks it. It prints one line:\n\n```\n\u2713 in the Ambasada app: Listed for the event\n! in the Ambasada app: Unlisted \xB7 needs: icon, viewport\n```\n\nUnlisted apps work, but only you see them in the Ambasada app. Fix what `needs` says and deploy again,\nor run `npx ambasada check https://<slug>.ambasada.dev` (or `npx ambasada check` for the local folder).\nThe checks: `/.well-known/ambasada.json` valid, `icon.png` a 1024\xD71024 PNG with no transparency, the page\nhas `<meta name="viewport" content="width=device-width, initial-scale=1">`, no dark-only theme, the\nfirst page answers in under 3 s, `/api/auth/callback` exists, the notifications webhook answers a signed ping.\nConnected tools can do the same through MCP: `app_status`, `app_check`.\n\n## Look like the app: @ambasada/ui\n\nThe templates import `@ambasada/ui` (tokens, Inter + JetBrains Mono, `ui-card`, `ui-button`, `ui-row`,\n`ui-pill`, `ui-sheet`, `ui-stepper`, `ui-empty`, `ui-skeleton`). Use those classes before writing CSS.\nReact: `import { Card, Button, Sheet } from "@ambasada/ui/react"`. Plain HTML: one\n`<link rel="stylesheet" href="https://unpkg.com/@ambasada/ui@0.5/dist/ambasada-ui.css">`.\nLeave space for the app\'s bar: the page uses `--ambasada-safe-area-*` and `--ambasada-host-bar`.\nLight theme only; one red (primary) button per screen.\n\n## Notifications\n\nAlready wired in every template:\n\n| Piece | Where |\n|---|---|\n| manifest: `"scopes": ["identity", "notifications"]`, `"notifications": { "webhook": "/api/ambasada/webhook" }`, `"privacy_url": "/privacy"` | `public/.well-known/ambasada.json` (`web/` in the worker template) |\n| the webhook: verifies the hub\'s signature, saves `token \u2194 Ambasada user id` in `ambasada.store` | `app/api/ambasada/webhook/route.ts` (Next), `api/ambasada-webhook.ts` (spa, worker) |\n| `notifyUser(app, userId, { \u2026 })`: push to one person if they turned notifications on | `lib/notifications.ts` |\n| the privacy page the scopes need | `app/privacy/page.tsx`, `public/privacy.html`, `web/privacy.html` |\n\nSend one when something the person waits for happens (their order is ready), never as marketing:\n\n```ts\nimport { notifyUser } from "../lib/notifications.ts";\n\nconst user = await ambasada().auth.user(req);            // signed in with Ambasada\nif (user) await notifyUser(ambasada(), user.id, {\n  notification_id: `order-${id}-ready`,                  // unique per message; repeats are dropped for 24 h\n  title: "Your translation is ready",                    // \u2264 40 characters\n  body: "Tap to read it.",                               // \u2264 140\n  url: `/orders/${id}`,                                  // a path on your site: where the tap opens\n});\n```\n\nPeople turn notifications on in the app (the app asks; the page can ask too with\n`notifications.request()` from `@ambasada/miniapp`, from a button). The secret (`AMBASADA_APP_SECRET`) is\ninjected by `ambasada deploy`; never put it in the browser.\n\n## Signed in without a consent screen\n\nInside the Ambasada app the page signs in silently: `auth.signIn()` from `@ambasada/miniapp` gets a short\ntoken from the app and POSTs it to `/api/auth/shell`, which sets the same session as "Sign in with\nAmbasada". Server code doesn\'t change: `currentUser()` / `ambasada().auth.user(req)` work either way.\nOn the web, the button and consent screen stay. Silent sign-in needs the app to be Verified; until then\n`signIn()` resolves `null` and the button shows.\n\n## Try it locally\n\n`npx ambasada dev` plays the hub: when your product starts it sends a signed `ping` and\n`notifications_enabled` to your webhook (the token lands in the store as\n`ambasada/notifications/user_fake_visitor`), and its `/api/apps/notify` accepts pushes for that token\n(they show in the terminal). Open `http://localhost:3000/?ambasada_shell=mock` to pretend to be inside the\napp: the fake shell signs you in silently as "Fake Visitor".\n', ".claude/skills/ambasada-product/reference/stack.md": '# The stack: Next.js on Cloudflare\n\nEvery Ambasada app is one Cloudflare Worker. The default template builds it from **Next.js 16.4**\nwith **@opennextjs/cloudflare 1.20** (the OpenNext adapter) and the `nodejs_compat` flag. You write a\nnormal Next.js App Router app; `ambasada deploy` turns it into a Worker.\n\n## Folder layout (template `next`)\n\n```\nmy-app/\n  app/page.tsx                 the landing page\n  app/notes.tsx                the notes example (a client component calling app/api/notes)\n  app/api/notes/route.ts       rows in env.DB, the list cached in env.KV\n  app/api/files/route.ts       uploads to env.FILES; app/files/[...key]/route.ts serves them\n  app/api/auth/*/route.ts      Sign in with Ambasada: login, callback, logout, me, shell (silent, in the app)\n  app/api/ambasada/webhook/    the Ambasada app\'s events: who turned notifications on (reference/mini-app.md)\n  app/account.tsx              the header: "Sign in with Ambasada", or the person\'s name and avatar\n  app/miniapp.tsx              inside the Ambasada app: ready() and silent sign-in\n  app/privacy/page.tsx         what you keep about people (the manifest\'s privacy_url)\n  app/room/                    the live room demo\n  lib/ambasada.ts              the Ambasada client for server code (reads the Worker env)\n  lib/notifications.ts         notifyUser(): a push to one person who turned notifications on\n  lib/db.ts, kv.ts, files.ts   env.DB, env.KV, env.FILES (reference/storage.md); lib/bindings.ts reaches them\n  db/migrations/               the database\'s tables, one .sql file per change\n  src/realtime/                the live room (a Durable Object) and its React hook\n  ambasada.config.ts           app id, name, one-line description, product URL\n  wrangler.jsonc               Worker settings (nodejs_compat, assets) and the bindings DB, KV, FILES, ROOMS\n  worker.ts                    the Worker entry: live rooms\' WebSockets, then the Next.js app\n  open-next.config.ts          OpenNext settings; leave as is\n  .env                         secrets for local runs (never commit, never send to the browser)\n  .ambasada/project.json       the template and devkit version (`ambasada upgrade` reads it); commit it\n  .claude/skills/              this skill\n```\n\nOne more endpoint = one more `app/api/<name>/route.ts`. Data it keeps goes in `env.DB` (a migration in\n`db/migrations/`), `env.KV` or `env.FILES` ([storage.md](storage.md)).\n\n## Using the client\n\nServer code only (route handlers, server components, server actions):\n\n```ts\n// app/api/hello/route.ts\nimport { ambasada } from "../../../lib/ambasada.ts";\n\nexport async function GET(req: Request) {\n  const user = await ambasada().auth.user(req);\n  return Response.json({ hello: user?.name ?? "stranger" });\n}\n```\n\n`lib/ambasada.ts` creates one client per Worker instance with `createAmbasada({ env })` from `@ambasada/sdk`,\nwhere `env` comes from `getCloudflareContext()` (deployed); under `next dev` the SDK reads `process.env`.\nIt reads `AMBASADA_API_KEY` and `AMBASADA_API_URL` (default https://api.ambasada.dev). The client has `auth`\n(below), `apps` (notifications, [mini-app.md](mini-app.md)), `store` and `files`.\n\n## Who is signed in\n\nEvery hosted app gets **Sign in with Ambasada** (Ambasada ID) for free: no keys, no settings.\nThe template\'s header already has the button. In server code:\n\n```ts\nimport { currentUser } from "../lib/ambasada.ts";\nimport { bindings } from "../lib/bindings.ts";\nimport { run } from "../lib/db.ts";\n\nconst user = await currentUser(); // null, or { id, name, avatar_url, builder, pass, member_since, \u2026 }\nif (!user) redirect("/api/auth/login?returnTo=/orders");\nawait run(bindings().DB, "INSERT INTO orders (user_id, item) VALUES (?, ?)", user.id, item); // key per-person data by user.id\n```\n\nIn a route handler, `ambasada().auth.user(req)` does the same. Client components fetch `/api/auth/me`.\nAsk for the email only if you need it: `/api/auth/login` calls `auth.login(req, { email: true })`.\nDon\'t build your own login or accounts table, and don\'t add Clerk, Auth.js or Supabase Auth.\n\n## Next.js: allowed and banned\n\nAllowed, and enough for any product here:\n\n- pages and layouts (`app/**/page.tsx`, `layout.tsx`), server components, client components (`"use client"`)\n- route handlers (`app/api/**/route.ts`), server actions (`"use server"`)\n- `fetch` to any HTTPS API, `next/link`, `next/font`, plain CSS / CSS modules / Tailwind\n\nBanned (they fail on Workers or break the deploy):\n\n| Don\'t | Do instead |\n|---|---|\n| `next/image` with the default loader | `<img>`, or `images: { unoptimized: true }` in `next.config.ts` |\n| ISR, `export const revalidate = \u2026`, `revalidatePath`, `unstable_cache` | render on each request (`export const dynamic = "force-dynamic"`), or cache results in `env.KV` |\n| `fs`, `child_process`, `sharp`, `bcrypt`, `sqlite3`, `puppeteer`, any native package | `fetch` an API (an LLM provider with your own key in a secret, for example) |\n| a custom server (`server.js`, Express inside Next) | route handlers |\n| `middleware.ts` / `proxy.ts`, `export const runtime = "edge"` | check inside the page or route handler; Next\'s default runtime is right |\n| Prisma, Drizzle with a database, Supabase, Firebase, Mongo, Redis | `env.DB` (SQLite), `env.KV`, `env.FILES` ([storage.md](storage.md)) |\n| writing files at runtime, global variables as storage | `env.DB`, `env.KV`, `env.FILES` or a Durable Object (each request can run on a different machine) |\n\nKeep the bundle small: the Worker limit is 10 MB compressed. Big UI kits and icon packs are the usual cause.\n\n## Where data lives\n\nThe app has its own SQLite database (`env.DB`), key-value (`env.KV`), file storage (`env.FILES`, public at\n`/files/<key>`) and Durable Objects for live state, created at the first deploy. Which one fits, the migrations\nworkflow and copy-paste patterns: [storage.md](storage.md).\n\nAlso there, for small things: `ambasada.store` (JSON, 1 MB for the whole app: settings, not user data) and\n`ambasada.files.put(\u2026)` \u2192 `{ url }` (platform-hosted files that expire).\n\n## Secrets\n\n- Local: `.env` in the project (Cloudflare\'s `.dev.vars` works too). The template writes it with test\n  values for `ambasada dev`. Both are in `.gitignore`; keep them there.\n- Deployed: `ambasada deploy` injects `AMBASADA_API_KEY`, `AMBASADA_API_URL`, the Sign in with Ambasada\n  credentials (`AMBASADA_AUTH_*`) and the mini-app secret (`AMBASADA_APP_SECRET`, with `AMBASADA_HUB_URL`\n  and `AMBASADA_APP_ORIGIN`) for you. With `--own`, set them yourself: `npx wrangler secret put AMBASADA_API_KEY`.\n- Other services\' keys (an OpenAI key, say): `.env` locally, `npx ambasada env set OPENAI_API_KEY \u2026` online;\n  read on the server only.\n- Anything named `NEXT_PUBLIC_*` is copied into the browser. Never put a key there.\n- Never paste a key into a page, a client component, a prompt for a no-code builder, or a commit.\n\n## Variants\n\n- `spa`: Vite + React with `@cloudflare/vite-plugin`, for code exported from Lovable or Bolt. The\n  `api/` endpoints are small fetch handlers; the React app calls them with `fetch("/api/\u2026")`.\n- `worker`: `web/` (plain HTML/CSS) plus `api/*.ts` fetch handlers. Best when the app is a page or two.\n\nThe rules on this page (state, secrets, no native packages) apply to all three.\n', ".claude/skills/ambasada-product/reference/storage.md": '# Data, files and realtime\n\nEvery app on ambasada.dev gets a real database, key-value, file storage and Durable Objects. They are created\nat the first `ambasada deploy` and bound to the Worker on every deploy; nothing to sign up for or configure.\nLocally (`ambasada dev`, `wrangler dev`, `vite`) wrangler runs the same things from `.wrangler/state`.\n\n| Need | Use | Not |\n|---|---|---|\n| anything with rows: users\' data, orders, posts, scores, anything you query, sort or join | `env.DB` (SQLite, D1) | KV, files, `ambasada.store` |\n| sessions, caches of slow results, feature flags, "seen this already" | `env.KV` | a table you scan |\n| uploads, images, audio, PDFs, generated files | `env.FILES` (R2), public at `/files/<key>` | base64 in the database |\n| state several people see change live: chat, presence, a shared board, a game table, live counters, a queue, rate limits, one thing per entity | a Durable Object (`env.ROOMS` in the templates) | polling the database |\n| an AI agent with memory, schedules and live state per user or task | the Agents SDK (`examples/agent/`) | a cron that rereads everything |\n| a few small settings for a tiny app | `ambasada.store` (1 MB per app) | user data of any size |\n\nQuotas per app: database 500 MB, KV 1 GB, files 5 GB. A database over its quota stops the next deploy.\n\n## `env.DB`: SQLite\n\nSchema lives in `db/migrations/`, one file per change, applied in name order, never edited once applied:\n\n```sql\n-- db/migrations/0002_orders.sql\nCREATE TABLE orders (\n  id INTEGER PRIMARY KEY AUTOINCREMENT,\n  user_id TEXT NOT NULL,\n  item TEXT NOT NULL,\n  paid INTEGER NOT NULL DEFAULT 0,\n  created_at INTEGER NOT NULL\n);\nCREATE INDEX orders_user ON orders (user_id, created_at);\n```\n\n```sh\nnpx wrangler d1 migrations apply DB --local   # the local database, for ambasada dev\nnpx ambasada db migrate                       # the app\'s database online (run before or right after deploying)\nnpx ambasada db shell "SELECT * FROM orders LIMIT 5"\n```\n\nQuery with `lib/db.ts` (SQL with `?` placeholders, typed rows, no ORM):\n\n```ts\nimport { all, batch, first, run } from "../lib/db.ts";\n\ntype Order = { id: number; user_id: string; item: string; paid: number; created_at: number };\nconst mine = await all<Order>(env.DB, "SELECT * FROM orders WHERE user_id = ? ORDER BY created_at DESC LIMIT 50", user.id);\nconst one = await first<Order>(env.DB, "SELECT * FROM orders WHERE id = ?", id);\nconst { lastRowId } = await run(env.DB, "INSERT INTO orders (user_id, item, created_at) VALUES (?, ?, ?)", user.id, item, Date.now());\nawait batch(env.DB, [["UPDATE stock SET n = n - 1 WHERE item = ?", item], ["UPDATE orders SET paid = 1 WHERE id = ?", id]]); // all or nothing\n```\n\nIn Next.js route handlers and server components, the bindings come from `bindings()` (`lib/bindings.ts`):\n`const { DB } = bindings();`. In the spa and worker templates, handlers get `env`.\n\nRules: always placeholders, never string-built SQL. Key per-person rows by the Ambasada user id\n(`auth.user(req).id`). Add an index for every `WHERE` you run often. Times as `Date.now()` integers.\n\n## `env.KV`: sessions, caches, flags\n\nReads are fast everywhere; a write shows up everywhere within about a minute; one write per second per key.\n\n```ts\nimport { cached, getJson, putJson } from "../lib/kv.ts";\n\nawait putJson(env.KV, `session:${id}`, { userId }, { ttl: 60 * 60 * 24 });\nconst session = await getJson<{ userId: string }>(env.KV, `session:${id}`);\nconst stats = await cached(env.KV, "home:stats", 300, () => computeStats(env)); // recompute at most every 5 min\n```\n\nNot for counters, balances or anything two people write at once: use `env.DB` (a transaction) or a Durable Object.\n\n## `env.FILES`: uploads and generated files\n\n```ts\nimport { serveFile, upload } from "../lib/files.ts";\n\n// POST /api/files: a signed-in person uploads (the templates\' api/files.ts)\nconst { key, url } = await upload(env.FILES, req.body, { contentType: req.headers.get("content-type") ?? undefined, folder: `u/${user.id}` });\nawait run(env.DB, "INSERT INTO photos (user_id, file_key) VALUES (?, ?)", user.id, key); // keep the key, not the bytes\n\n// GET /files/*: already wired in every template, with ETag, ranges and cache headers\nreturn serveFile(env.FILES, req);\n```\n\n`url` is `/files/<key>` on the app (`https://<slug>.ambasada.dev/files/<key>`): public to anyone with the link.\nPrivate files: store them under a key nobody can guess and serve them from your own route that checks\n`auth.user(req)` first, instead of `/files/*`. `npx ambasada files list | put | url | delete` from the terminal.\n\n## Durable Objects: realtime and per-entity state\n\nA Durable Object is one tiny server per id (a room, a document, a match, a user) with its own SQLite, that\nevery request for that id reaches. Use one whenever people must see each other\'s changes live, or one thing\nmust never be updated by two requests at once. The templates ship `src/realtime/room.ts` (`env.ROOMS`):\n\n```ts\n// the Worker: /api/rooms/<id>/ws \u2192 the room\nconst room = /^\\/api\\/rooms\\/([^/]+)\\/ws$/.exec(pathname);\nif (room) return env.ROOMS.getByName(decodeURIComponent(room[1]!)).fetch(req);\n```\n\n```ts\n// the room (shortened): WebSocket hibernation, broadcast, its own SQLite\nexport class Room extends DurableObject<unknown> {\n  async fetch(req: Request) {\n    const { 0: client, 1: server } = new WebSocketPair();\n    this.ctx.acceptWebSocket(server);              // hibernation: no cost while nobody talks\n    server.serializeAttachment({ name: "guest" }); // per-connection data that survives hibernation\n    return new Response(null, { status: 101, webSocket: client });\n  }\n  async webSocketMessage(ws: WebSocket, data: string | ArrayBuffer) {\n    this.ctx.storage.sql.exec("INSERT INTO messages (text, at) VALUES (?, ?)", String(data), Date.now());\n    for (const peer of this.ctx.getWebSockets()) peer.send(String(data)); // everyone in the room\n  }\n}\n```\n\n```tsx\n// the browser (React): src/realtime/use-room.ts\nconst { messages, online, send, status } = useRoom(roomId, { name: user.name });\n```\n\nA new class needs a binding and a migration in `wrangler.jsonc` (new tags go at the end; never edit or remove one\nthat was deployed; to drop a class add `{ "tag": "v3", "deleted_classes": ["Old"] }`):\n\n```jsonc\n"durable_objects": { "bindings": [{ "name": "ROOMS", "class_name": "Room" }, { "name": "BOARDS", "class_name": "Board" }] },\n"migrations": [{ "tag": "v1", "new_sqlite_classes": ["Room"] }, { "tag": "v2", "new_sqlite_classes": ["Board"] }]\n```\n\nExport the class from the Worker\'s entry (`src/worker.ts`; spa `worker/index.ts`; next `worker.ts`).\nOther shapes, same pattern: presence (who is online), a live counter (`UPDATE \u2026 RETURNING`, then broadcast), a\nper-user rate limit (`getByName(user.id)`), a job queue (`this.ctx.storage.setAlarm`). A Durable Object belongs\nto this app; other apps can\'t reach it. Under `next dev` they don\'t run: use `npm run preview` (workerd).\n\n## Agents (Agents SDK)\n\nFor agentic products (an assistant per user, a research task that runs for minutes, a bot that follows up),\nuse the Cloudflare Agents SDK: `examples/agent/` in the template (`npm i agents`, four lines to wire). An agent\nis a Durable Object with live state synced to clients (`setState`, `useAgent` in React), `this.sql`,\n`this.schedule(\u2026)` and WebSockets. One agent per user or task: `/agents/agent-example/<user id>`.\n\n## Don\'t\n\n- Poll (`setInterval(fetch\u2026)`) for what others changed: a Durable Object + WebSocket pushes it.\n- Put files or base64 in the database or KV: `env.FILES`, and keep the key in a row.\n- Keep user data in `ambasada.store`: it is 1 MB for the whole app.\n- Keep state in module variables or global objects: every request may run on another machine.\n- Count, rank or move money in KV: use a SQL transaction (`batch`) or a Durable Object.\n- Build SQL by joining strings with user input: `?` placeholders.\n- Edit an applied migration: add the next file.\n- Add Prisma, Drizzle with Postgres, Supabase, Firebase, Mongo or Redis: everything above is already here.\n', ".claude/skills/ambasada-product/reference/upgrading.md": "# Upgrading a project\n\n`npx ambasada upgrade` does the mechanical part: every `@ambasada/*` dependency to the CLI's version, the\npackage manager, `.claude/skills/ambasada-*` re-synced (the project's own skills are left alone), the code\nchanges listed below as \"done by `upgrade`\", the `ambasada check` rules, and `.ambasada/project.json`\n(the template and devkit version). `npx ambasada upgrade --check` only reports.\n\nWhat is left is below, per version, for a coding agent. Do the steps for every version between the one in\n`.ambasada/project.json` (none: 0.7) and the current one, in order. After each, run the app with\n`npx ambasada dev` and the project's `typecheck` script.\n\n## 0.7 \u2192 0.8: the platform and the village split\n\n0.8 splits the devkit: `@ambasada/sdk` and `ambasada` are the platform (sign-in, notifications, storage,\nhosting); the Hack A Ton economy (TON, checkout, offerings, the agent) is the add-on `@ambasada/village`.\n\nDone by `upgrade`:\n\n- the village names (`village`, `createVillage`, `offering`, `defineCompany`, `isVillageError`, the receipt and\n  webhook helpers, their types) import from `@ambasada/village`; in a village app `createAmbasada` became\n  `createVillage` and `DEFAULT_API_URL` became `DEFAULT_VILLAGE_API_URL` (their 0.7 meaning);\n- `@ambasada/village` added to `package.json` when the app has `offerings.ts` or an `idea`;\n- `.env` / `.dev.vars`: `AMBASADA_API_URL=https://hackaton.ambasada.id` became `https://api.ambasada.dev` plus\n  `AMBASADA_VILLAGE_API_URL=https://hackaton.ambasada.id`;\n- the `ambasada-payments` skill replaced by `ambasada-village`.\n\nFor the agent:\n\n1. **Platform code uses the platform client.** Files that only sign people in, send notifications or use\n   `store`/`files` can import `createAmbasada` / `ambasada` from `@ambasada/sdk` instead of the village client.\n   Leave files that sell, check receipts or call `llm` on the village client.\n2. **Config.** `ambasada.config.ts` may stay `defineCompany({ id, name, idea, \u2026 })`; the 0.8 form is\n   `defineCompany(defineApp({ id, name, description, product }), { idea, offerings, agent })` with\n   `defineApp` from `@ambasada/sdk`. Add a one-line `description` (the manifest's subtitle).\n3. **CLI calls.** In scripts, READMEs and `package.json`: `ambasada wallet|ledger|offerings|market|steer|webhook|links`\n   \u2192 `ambasada village \u2026`, `ambasada logs --agent` \u2192 `ambasada village logs --agent`, `ambasada dev buy` \u2192\n   `ambasada village dev buy`. The old spellings still work through 1.x with a warning.\n4. **Pages that load pay.js** from `AMBASADA_API_URL` should use the village client's `apiUrl` (or\n   `AMBASADA_VILLAGE_API_URL`): `AMBASADA_API_URL` is the platform's from 0.8.\n5. **Login.** The CLI's login moved from `~/.config/village` to `~/.config/ambasada` (moved on first use);\n   nothing to do unless a script reads that file.\n6. Run `npx ambasada check`, `npx ambasada dev` and the typecheck; deploy when they pass.\n", "AGENTS.md": "# Agents\n\nThis is an Ambasada app: Next.js that runs as one Cloudflare Worker (OpenNext), with `@ambasada/sdk` for\nsign-in, notifications and the store. Read `README.md` first, and `.claude/skills/ambasada-product/`.\nRun it with `npm run dev` (`ambasada dev`: the mock API + `next dev`). Data and realtime (`env.DB`, `env.KV`,\n`env.FILES`, live rooms): `.claude/skills/ambasada-product/reference/storage.md`.\n\n<!-- BEGIN:nextjs-agent-rules -->\n\n## This is NOT the Next.js you know\n\nThis version has breaking changes \u2014 APIs, conventions, and file structure may all differ from your training data. Read the relevant guide in `node_modules/next/dist/docs/` (resolved from this file's directory; in monorepos the `next` package may not be visible from the repo root) before writing any code. Heed deprecation notices.\n\nThis block is written and re-added by `next dev` \u2014 verify at `node_modules/next/dist/server/lib/generate-agent-files.js`. Removing it from a diff only re-creates the uncommitted change; committing it with your work keeps the tree clean.\n\n<!-- END:nextjs-agent-rules -->\n", "README.md": "# My App\n\nAn app on Ambasada, Next.js on one Cloudflare Worker (template `next`): sign-in with Ambasada ID, notifications in the Ambasada app, a database,\nkey-value, files and live rooms. Everything here is a default; change anything.\n\n```\nambasada.config.ts          id, name, one-line description, where the app runs\npublic/.well-known/ambasada.json the app manifest: the Ambasada app lists your app from it (written by `ambasada init` from ambasada.config.ts; icon public/icon.png)\napp/page.tsx, app/notes.tsx the landing page and the notes example\napp/api/auth/*              Sign in with Ambasada (login, callback, logout, me, shell); app/account.tsx is the header\napp/api/ambasada/webhook    the Ambasada app's events (notifications on/off); lib/notifications.ts sends pushes\napp/api/notes, app/api/files   env.DB + env.KV, uploads to env.FILES; app/files/[...key] serves them\nlib/ambasada.ts             the SDK client from the Worker's env (getCloudflareContext), process.env under `next dev`\nlib/db.ts, kv.ts, files.ts  env.DB, env.KV, env.FILES; db/migrations/ the tables; lib/bindings.ts reaches them\nsrc/realtime/               the live room (a Durable Object) and its React hook; worker.ts routes its WebSockets\nnext.config.ts, open-next.config.ts, wrangler.jsonc, worker.ts   Next.js \u2192 one Worker (OpenNext, nodejs_compat)\n.claude/skills/             docs your coding agent reads (ambasada-product)\n```\n\n## 1. Run it (2 min)\n\nNeeds Node \u2265 22.\n\n```sh\nnpm install\nnpm run dev                # `ambasada dev`: the mock Ambasada API on :8788 + `next dev` on http://localhost:3000\n```\n\nOpen http://localhost:3000: add a note, sign in (the mock signs you in as \"Fake Visitor\"), open /room in two tabs.\nhttp://127.0.0.1:8788 is the mock's page (sign-ins, notifications, the store). `ambasada dev` points your app at the\nmock whatever `.env` says; http://localhost:3000/?ambasada_shell=mock pretends to be inside the Ambasada app.\n\n## 2. Make it yours\n\n- `ambasada.config.ts`: name and description (the manifest is written from them).\n- A new endpoint: `app/api/<name>/route.ts`. Data goes in `env.DB` (a migration in `db/migrations/`), `env.KV` or `env.FILES`.\n- Ask your coding agent: it has the ambasada-product skill (stack, storage, sign-in, mini app, deploy).\n\nStay inside what runs on a Worker: pages, server components, route handlers, server actions and `fetch`.\nNot: the `next/image` default loader, ISR / `revalidate`, `fs`, `child_process` or native packages, a custom\nserver. `npm run preview` builds the Worker (`opennextjs-cloudflare build`) and runs it in workerd, as in production.\n\n## 3. Go live (1 min)\n\n```sh\nnpx ambasada login         # Ambasada ID, or a project key from https://developer.ambasada.dev\nnpx ambasada deploy        # build, smoke test, host at https://my-app.ambasada.dev\nnpx ambasada db migrate    # db/migrations \u2192 the app's database\nnpx ambasada logs          # the last deploy and recent errors\n```\n\nSign-in, notifications and the storage are set up by the deploy; nothing to configure. Your own secrets:\n`npx ambasada env set NAME value`. Hosting elsewhere: `npx opennextjs-cloudflare build && npx opennextjs-cloudflare deploy`, then `npx ambasada link https://\u2026`.\n\n**Sign in with Ambasada**: the header's button signs people in with their Ambasada ID; on the server,\n`ambasada(\u2026).auth.user(req)` gives `{ id, name, avatar_url, builder, pass }` or null.\n\n## Storage and realtime\n\nEvery app gets these, provisioned at the first `ambasada deploy`; locally wrangler keeps them in `.wrangler/state`.\n\n| Binding | For | Here |\n|---|---|---|\n| `env.DB` | SQLite: anything relational | `lib/db.ts`, tables in `db/migrations/`, example `app/api/notes/route.ts` |\n| `env.KV` | sessions, caches, flags | `lib/kv.ts` (the notes cache) |\n| `env.FILES` | uploads, generated files; public at `/files/<key>` | `lib/files.ts`, upload `app/api/files/route.ts` |\n| `env.ROOMS` | live state shared between people (Durable Object) | `src/realtime/room.ts` (wired in `worker.ts`), hook `src/realtime/use-room.ts`, demo at `/room` |\n\n```sh\nnpx wrangler d1 migrations apply DB --local   # db/migrations \u2192 the local database (ambasada dev)\nnpx ambasada db migrate                       # \u2026 \u2192 the app's database online\nnpx ambasada db shell \"SELECT * FROM notes\"   # or `ambasada db shell` for a prompt\nnpx ambasada kv list | get <key> | put <key> <value> | delete <key>\nnpx ambasada files put <file> | list | url <key> | delete <key>\n```\n\nUnder `next dev`, `env.DB`, `env.KV` and `env.FILES` work (`lib/bindings.ts`); live rooms need workerd: `npm run preview`.\n\nOptional: an agent with the Agents SDK in `examples/agent/` (its README: `npm i agents` and four lines to wire it).\n\n## Rules worth knowing\n\n- State lives in `env.DB`, `env.KV`, `env.FILES` or a Durable Object, never in module variables: a Worker has many instances.\n- Secrets only in `.env` locally and `ambasada env set` online; never in the code or `wrangler.jsonc` vars.\n- `npx ambasada check` runs the Ambasada app's checks (manifest, icon, viewport); `npx ambasada upgrade` after a new devkit.\n\nFor the Hack A Ton: `npx ambasada add village` (the add-on).\n\nBuilt by [CENTYSO](https://centyso.com) for [Ambasada](https://ambasada.id).\n", "ambasada.config.ts": 'import { defineApp } from "@ambasada/sdk";\n\nexport default defineApp({\n  id: "my-app",\n  name: "My App",\n  // One line about the app: the Ambasada app shows it under the name (`ambasada init` writes the manifest from it).\n  description: "Notes, a live room and sign-in",\n  // Where the app runs. `ambasada dev` serves it on http://localhost:3000; hosted, it is https://my-app.ambasada.dev\n  // (`ambasada deploy` sets it; `ambasada link https://\u2026` when you host elsewhere).\n  product: { url: "http://localhost:3000" },\n});\n', "app/account.tsx": `import { ambasada, currentUser } from "../lib/ambasada.ts";
+var define_AMBASADA_TEMPLATES_default = { next: { ".claude/skills/ambasada-product/SKILL.md": "---\nname: ambasada-product\ndescription: Build an app on Ambasada and put it online. Use when the user wants to make an app, tool, game or website, start one with `npm create ambasada@latest`, run it with `ambasada dev`, publish it with `ambasada deploy` at <slug>.ambasada.dev, show it in the Ambasada app (mini app, notifications, sign-in), store data in the app's SQLite database, KV or file storage, make it realtime with Durable Objects or an agent (Agents SDK), bring a site built in ChatGPT, Lovable, Bolt or v0, or upgrade a project made with an older CLI (`ambasada upgrade`). Default stack: Next.js on Cloudflare.\n---\n\n# Build an app on Ambasada and put it online\n\nAn app is **one website** (one Cloudflare Worker) at `https://<your-slug>.ambasada.dev`. It comes with\nSign in with Ambasada (Ambasada ID), a SQLite database, key-value, file storage and Durable Objects for\nrealtime. If you want, it also gets a mini app inside the Ambasada app, with push notifications (off by default). No servers, no\nCloudflare account, no keys to configure.\n\n## Start\n\n```sh\nnpm create ambasada@latest my-app           # Next.js (default)\ncd my-app && npm install\nnpx ambasada dev                            # the mock API + your site, no login\n```\n\nOther templates: add `-- --template spa` (Vite + React; for code exported from Lovable or Bolt) or\n`-- --template worker` (plain HTML + small fetch handlers; the smallest possible app). All three have the\nsame `ambasada.config.ts`, sign-in routes, notifications webhook and storage helpers, and a notes example.\n\n## What to read\n\n| The user wants to\u2026 | Read |\n|---|---|\n| know where files go, what Next.js features are allowed, secrets, who is signed in | [reference/stack.md](reference/stack.md) |\n| store data (tables, migrations), sessions or caches, uploads; make it live between people (chat, presence, a shared board, counters); build an AI agent | [reference/storage.md](reference/storage.md) |\n| run it locally, put it online, use their own Cloudflare account | [reference/dev-and-deploy.md](reference/dev-and-deploy.md) |\n| make it look good and easy to use | [reference/design.md](reference/design.md) |\n| show up in the Ambasada app (optional: `npx ambasada miniapp enable`), send push notifications, sign people in inside the app | [reference/mini-app.md](reference/mini-app.md) |\n| build in ChatGPT, Lovable, Bolt or v0 and bring it here | [reference/build-elsewhere.md](reference/build-elsewhere.md) |\n| upgrade a project made with an older CLI | [reference/upgrading.md](reference/upgrading.md) |\n\nFor the Hack A Ton (TON payments, offerings, the agent that runs a shop): `npx ambasada add village`, then\nthe **ambasada-village** skill.\n\n## Rules (break one and the app does not work)\n\n1. **One app = one Worker.** No separate backend, no Docker. State lives in the app's SQLite (`env.DB`),\n   key-value (`env.KV`), file storage (`env.FILES`) or a Durable Object, never in module variables.\n   See [reference/storage.md](reference/storage.md).\n2. **Only the allowed Next.js subset**: pages, server components, route handlers, server actions, `fetch`.\n   No `next/image` default loader, no ISR/`revalidate`, no `fs`/`child_process`/native packages, no custom\n   server, no `middleware.ts`/`proxy.ts`, no `runtime = \"edge\"`. See [reference/stack.md](reference/stack.md#nextjs-allowed-and-banned).\n3. **Keys never reach the browser.** They live in `.env` locally and `ambasada env set` online; only server\n   code reads them. Never prefix one with `NEXT_PUBLIC_`.\n4. **Sign-in is Ambasada ID.** Use the template's `/api/auth/*` routes and `auth.user(req)`; don't add\n   Clerk, Auth.js or Supabase Auth, and don't build an accounts table. Key per-person data by `user.id`.\n5. **Tables change through migrations**: a new `db/migrations/NNNN_name.sql` per change, never edits to an\n   applied one; `npx ambasada db migrate` after deploying.\n\n## When the user is not a developer\n\nDo the work; don't ask them to edit code. Ask at most: what it does and for whom. Then build one page, run\n`npx ambasada dev`, open it, use it as the fake visitor, and show them it worked. Explain in one sentence\nper step, no jargon.\n", ".claude/skills/ambasada-product/reference/build-elsewhere.md": "# Built in ChatGPT, Lovable, Bolt or v0\n\nThree ways, easiest first.\n\n## A. Keep it hosted there, link it\n\nGood for: a site that is finished where it is and only needs to show up in the Ambasada app.\n\n1. On a laptop with Node 22+, once:\n\n   ```sh\n   npm create ambasada@latest my-app -- --miniapp --entry /   # its ambasada.config.ts and the manifest\n   cd my-app && npm install\n   npx ambasada login\n   npx ambasada link https://YOUR-SITE\n   ```\n\n2. The site must serve `/.well-known/ambasada.json` and `/icon.png` (copy them from the new project's\n   `public/`; `npx ambasada dev` writes the manifest there) and pass `npx ambasada check https://YOUR-SITE`\n   ([mini-app.md](mini-app.md)).\n\nLimit: Sign in with Ambasada, notifications and the app's database, KV and files come with hosting on\nambasada.dev. A site hosted elsewhere keeps its own backend; use B or C to get them.\n\n## B. Bring the code home (recommended for Lovable and Bolt)\n\nGood for: anything with real work behind it. You get hosting on ambasada.dev and the full rules.\n\n1. Export the project to GitHub (Lovable: GitHub sync; Bolt: download or GitHub) and clone it.\n2. `npm create ambasada@latest my-app -- --template spa` and copy the exported `src/` (components, pages,\n   styles) into the new project's `src/`, replacing the starter UI. Keep the template's `api/`, `lib/`,\n   `db/`, `ambasada.config.ts`, `wrangler.jsonc` and `vite.config.ts`.\n3. Open the project in Claude Code, Cursor or Codex and say:\n\n   > This is an Ambasada app (see .claude/skills/ambasada-product). Replace Supabase/Firebase with the\n   > app's env.DB (tables in db/migrations), env.KV and env.FILES, and any login with Sign in with Ambasada\n   > (api/auth.ts, /api/auth/me). Then run it with `npx ambasada dev`.\n\n4. `npx ambasada dev`, try it, then `npx ambasada deploy`.\n\n## C. ChatGPT (or any chat) writes the code, you paste it\n\n1. `npm create ambasada@latest my-app`, `cd my-app && npm install`, `npx ambasada dev`.\n2. Paste this into ChatGPT, then the files it mentions, then your idea:\n\n   > I have a Next.js 16 App Router project that runs on Cloudflare Workers (OpenNext). Rules: no `fs`, no\n   > native packages, no `next/image` (use `<img>`), no middleware, no `revalidate`, no other login than the\n   > one in `app/api/auth`. Data goes in SQLite through `lib/db.ts` (tables in `db/migrations/*.sql`), the\n   > signed-in person comes from `currentUser()` in `lib/ambasada.ts`. Below are my `app/page.tsx`,\n   > `app/api/notes/route.ts` and `db/migrations/0001_init.sql`. Rewrite them for my idea: the main action\n   > visible on a phone without scrolling. Write complete files, one code block per file, with the file path\n   > above each. My idea: \u2026\n\n3. Paste each file where ChatGPT says, keep `npx ambasada dev` running, check the page. New tables: a new\n   file in `db/migrations/` (never edit an applied one). When it works: `npx ambasada deploy` and\n   `npx ambasada db migrate`.\n\nUse ChatGPT to write files, not to decide the stack: if its answer adds Prisma, Supabase, NextAuth,\n`next/image` or a `middleware.ts`, tell it \"that's banned in my project, do it without\".\n", ".claude/skills/ambasada-product/reference/design.md": '# Design for people who decide in 10 seconds\n\nPeople open your app on a phone, often inside the Ambasada app, between two other things. They decide in\nseconds whether it is for them. Build for that.\n\n## One page, one action\n\n- **One page first.** What it is, and the one thing to do, fit on the first screen of a phone (375 \xD7 667).\n  Extra pages only when the action needs them.\n- **One action.** One button that does the main thing. Add a second only after people use the first.\n- **Few words.** A headline of up to 8 words, one sentence under it, the button. Cut every adjective you can.\n- **Show the result.** One example of what people get (an image, a sample text) beats any description.\n- **No walls.** No signup before the first use, no cookie banner, no tour. Ask for sign-in when the app\n  needs to remember someone (Sign in with Ambasada is one tap inside the Ambasada app).\n\n## The button\n\n- Label it with the action: **Make my poem**, not **Submit**.\n- Big (at least 48 px tall), full width on phones, one strong colour, nothing else in that colour.\n- If people must type something first, put that one field right above the button.\n- After the action, show the result, or "Working on it\u2026" and the result appearing when ready (a live room\n  or polling). Never a blank page.\n\n## Look\n\n- The templates use `@ambasada/ui` (the Ambasada app\'s look: tokens, `ui-card`, `ui-button`); start there\n  ([mini-app.md](mini-app.md)). Otherwise plain CSS: one font, two colours plus grey, generous spacing.\n- Large text: 18 px body on phones, a headline twice that. Light theme.\n- Works with one thumb: tap targets 48 px, no hover-only menus.\n- Loads fast: no video backgrounds, no 3 MB hero images, no animation libraries.\n\n## Words\n\n- Say what they get, not how it works. "A logo in 1 minute", not "AI-powered logo generation".\n- Write in the language of your users; one is fine.\n\n## Before and after\n\n```\nBad:  Welcome to PoemForge\u2122, the next-generation AI-powered creative writing platform\n      [Features] [Pricing] [About] [Sign up]   \u2026scroll\u2026   [Get started]\n\nGood: Your name as a folk poem\n      Type a name. Get a 4-line Romanian folk poem in 10 seconds.\n      [ Name: _________ ]\n      [   Make my poem   ]\n      "Ana, floare de la munte, / \u2026"  \u2190 one real example\n```\n', ".claude/skills/ambasada-product/reference/dev-and-deploy.md": "# Run it, put it online\n\n## `ambasada dev`: everything on your laptop\n\n```sh\nnpx ambasada dev\n```\n\nStarts two things:\n\n1. a **mock Ambasada API** on `http://127.0.0.1:8788`: same routes and signatures as the real one. Sign in\n   with Ambasada signs you in as \"Fake Visitor\"; `apps.notify` lands in a fake hub; `ambasada.store` and\n   `ambasada.files` work in memory. Open it in a browser for a page with what happened.\n2. **your site** with its normal dev server (`next dev`, `vite` or `wrangler dev`), pointed at the mock.\n\nNo login. The app's database, KV, files and Durable Objects run locally too (wrangler, `.wrangler/state`);\n`ambasada dev` applies `db/migrations/` to the local database before it starts the site.\n\nTry it: open your site, sign in, add a note. With the mini app on, `http://localhost:3000/app?ambasada_shell=mock`\n(your `miniapp.entry`) pretends to be inside the Ambasada app (host bar insets, silent sign-in).\n\n`npx ambasada dev --mock-only` starts only the mock, if you run your site yourself. The mock's keys:\n`AMBASADA_API_URL=http://127.0.0.1:8788`, `AMBASADA_API_KEY=sk_test_dev` (already in the project's `.env`).\n\n## `ambasada deploy`: online at `<slug>.ambasada.dev`\n\nOnce, per laptop:\n\n```sh\nnpx ambasada login        # opens a page: sign in with Ambasada ID\n```\n\n(If it asks for a key instead: https://developer.ambasada.dev \u2192 your app \u2192 a project key, `vk_\u2026`.)\n\nThen, every time you want the new version online:\n\n```sh\nnpx ambasada deploy\n```\n\nIt does, in order:\n\n1. **build**: `opennextjs-cloudflare build` (Next), `vite build` (spa) or a bundle of the Worker (worker);\n2. **smoke test**: runs the built Worker locally in workerd and requests `/` and `/.well-known/ambasada.json`\n   (written from `ambasada.config.ts` first, when the mini app is on: [mini-app.md](mini-app.md));\n   a crash stops the deploy (skip with `--no-smoke` only if you know why it fails);\n3. **upload**: the URL is `https://<your-slug>.ambasada.dev`, with `AMBASADA_API_KEY`, `AMBASADA_API_URL`,\n   Sign in with Ambasada and the app secret set for you, and the app's own database, KV namespace and bucket\n   bound as `DB`, `KV`, `FILES` (created on the first deploy) plus the Durable Objects from `wrangler.jsonc`.\n\nThe database's tables are not created by the deploy: run `npx ambasada db migrate` (it applies the new files\nin `db/migrations/`). No Cloudflare account needed. `--dry-run` builds and prints what it would upload.\n\nYour own secrets (an API key for another service): `npx ambasada env set NAME value` (live within about 30 s, and on\nevery deploy); `npx ambasada env list` shows the names.\n\nLimits: 10 MB compressed bundle, 1000 static files, short CPU time per request (waiting on `fetch` does not\ncount). Heavy work belongs in an API you call, or a Durable Object, not in one request.\n\n## `ambasada dev --tunnel`: your laptop, live\n\nWhen the Ambasada app, sign-in or webhooks need to reach the version on your laptop (before deploying, or to\ndebug), log in once, then:\n\n```sh\nnpx ambasada dev --tunnel         # your dev server, against the real API, at https://<slug>-dev.ambasada.dev\nnpx ambasada tunnel --port 5173   # or: only the tunnel, for a server you started yourself\n```\n\nUntil Ctrl+C, `https://<slug>-dev.ambasada.dev` is your app's URL. There is no mock in this mode. The first\ntime takes up to 2 minutes while the address is published; after that it is instant. Only one terminal per\napp at a time: `--force` takes it over. More: docs/TUNNEL.md.\n\n## `ambasada deploy --own`: your own Cloudflare account\n\nRuns `wrangler deploy` into your account (you need `npx wrangler login` first), then\n`ambasada link <your workers.dev URL>`. Set the secrets yourself: `npx wrangler secret put AMBASADA_API_KEY`.\n\n## `ambasada link`: the app is hosted somewhere else\n\n```sh\nnpx ambasada link https://my-thing.lovable.app\n```\n\nSets `product.url` in `ambasada.config.ts` and checks that `<url>/health` answers. Use it for Lovable, Bolt,\nv0, Vercel, your own server. See [build-elsewhere.md](build-elsewhere.md).\n\n## Watch it run\n\n```sh\nnpx ambasada logs --follow     # the last deploy and new errors\nnpx ambasada check https://<slug>.ambasada.dev   # https, no redirects, speed; the mini-app rules when it is on\n```\n\nThe Developer app (https://developer.ambasada.dev) has deploys, errors, users and the storage tabs.\n\n## Upgrading\n\nA new devkit: `npx ambasada upgrade` (dependencies, skills, mechanical code changes), then\n[upgrading.md](upgrading.md) for the steps a coding agent does.\n\n## When it goes wrong\n\n| Symptom | Fix |\n|---|---|\n| build fails on `fs`, `child_process`, a `.node` file, `sharp` | a banned package: see [stack.md](stack.md#nextjs-allowed-and-banned) |\n| smoke test: `/` answers 500 | open `npx ambasada dev`, load `/`, read the terminal error |\n| `no such table: \u2026` online | `npx ambasada db migrate` |\n| a Durable Object migration is refused on deploy | never edit or remove a deployed tag in `wrangler.jsonc`'s `migrations`; add the next one ([storage.md](storage.md)) |\n| `CONFIG: no API key` | missing `AMBASADA_API_KEY`: `.env` locally, `ambasada login` before deploying |\n| sign-in loops back to the login page | `PUBLIC_URL` differs from the URL in the browser; remove it or fix it |\n| `this app uses the village \u2026 not installed` | a Hack A Ton project: `npx ambasada upgrade` (adds `@ambasada/village`) |\n", ".claude/skills/ambasada-product/reference/mini-app.md": '# The app inside the Ambasada app (mini app)\n\n**Optional, opt in with `npx ambasada miniapp enable`** (or `npm create ambasada@latest my-app -- --miniapp`). An app\nis a website first; most stay that way. The mini app is one more surface of it, at a path: what the Ambasada mobile\napp opens, with silent sign-in and push notifications. Platform spec: docs/MINI-APPS.md (\xA715, decision 15.6).\n\n## Turn it on\n\n```sh\nnpx ambasada miniapp enable              # at /app; --entry /in-app for another path, --entry / for the whole site\nnpx ambasada miniapp                     # on or off, and the entry\n```\n\nIt adds:\n\n| | |\n|---|---|\n| `miniapp: { entry: "/app" }` | `ambasada.config.ts`; optional `icon`, `category`, `accent`, `scopes`, `visibility` next to `entry` |\n| the in-app layout and page, no site header | `app/app/` (Next), `src/in-app/InApp.tsx` rendered by `src/main.tsx` (spa), `web/app.html` (worker) |\n| `ready()` and silent sign-in | `app/app/in-app.tsx`, `src/in-app/shell.ts`, `web/in-app.js`; with `--entry /` hooked into the root layout instead |\n| a placeholder icon, 1024\xD71024 | `public/icon.png` (`web/icon.png`): replace it, keep it square and opaque |\n| `@ambasada/miniapp` | `package.json` (Next, spa): run `npm install` |\n\nThe manifest, `/.well-known/ambasada.json`, is not a file you keep: `ambasada dev` and `ambasada deploy` write it\nfrom `ambasada.config.ts` (id, name, description, `miniapp`) into `public/` (`web/`), and `.gitignore` leaves it out.\nTo write it by hand, put your own there and drop that `.gitignore` line: yours wins. Without `miniapp`, nothing is\nserved, `ambasada check` says "mini app: off" and the deploy does not register the app with the Ambasada app.\n\n## Is it listed?\n\n`ambasada deploy` registers the app with the Ambasada hub only when it serves the manifest, then checks it. It prints:\n\n```\n\u2713 in the Ambasada app: Listed for the event\n! in the Ambasada app: Unlisted \xB7 needs: icon, viewport\n  mini app: off, not in the Ambasada app (`ambasada miniapp enable` adds one)\n```\n\nUnlisted apps work, but only you see them in the Ambasada app. Fix what `needs` says and deploy again,\nor run `npx ambasada check https://<slug>.ambasada.dev` (or `npx ambasada check` for the local folder).\nThe checks: `/.well-known/ambasada.json` valid, `icon.png` a 1024\xD71024 PNG with no transparency, the entry page\nhas `<meta name="viewport" content="width=device-width, initial-scale=1">`, no dark-only theme, it answers in under\n3 s without a redirect, `/api/auth/callback` exists, the notifications webhook answers a signed ping. With the mini\napp off, only https, no redirects and the response time of `/`.\nConnected tools can do the same through MCP: `app_status`, `app_check`.\n\n## Look like the app: @ambasada/ui\n\nThe templates import `@ambasada/ui` (tokens, Inter + JetBrains Mono, `ui-card`, `ui-button`, `ui-row`,\n`ui-pill`, `ui-sheet`, `ui-stepper`, `ui-empty`, `ui-skeleton`). Use those classes before writing CSS.\nReact: `import { Card, Button, Sheet } from "@ambasada/ui/react"`. Plain HTML: one\n`<link rel="stylesheet" href="https://unpkg.com/@ambasada/ui@0.8/dist/ambasada-ui.css">`.\nLeave space for the app\'s bar: the page uses `--ambasada-safe-area-*` and `--ambasada-host-bar`.\nLight theme only; one red (primary) button per screen.\n\n## Notifications\n\nAlready wired in every template; they work once the mini app is on:\n\n| Piece | Where |\n|---|---|\n| manifest: `"scopes": ["identity", "notifications"]`, `"notifications": { "webhook": "/api/ambasada/webhook" }`, `"privacy_url": "/privacy"` | generated from `ambasada.config.ts` (the defaults; `miniapp.scopes` to change them) |\n| the webhook: verifies the hub\'s signature, saves `token \u2194 Ambasada user id` in `ambasada.store` | `app/api/ambasada/webhook/route.ts` (Next), `api/ambasada-webhook.ts` (spa, worker) |\n| `notifyUser(app, userId, { \u2026 })`: push to one person if they turned notifications on | `lib/notifications.ts` |\n| the privacy page the scopes need | `app/(site)/privacy/page.tsx`, `public/privacy.html`, `web/privacy.html` |\n\nSend one when something the person waits for happens (their order is ready), never as marketing:\n\n```ts\nimport { notifyUser } from "../lib/notifications.ts";\n\nconst user = await ambasada().auth.user(req);            // signed in with Ambasada\nif (user) await notifyUser(ambasada(), user.id, {\n  notification_id: `order-${id}-ready`,                  // unique per message; repeats are dropped for 24 h\n  title: "Your translation is ready",                    // \u2264 40 characters\n  body: "Tap to read it.",                               // \u2264 140\n  url: `/orders/${id}`,                                  // a path on your site: where the tap opens\n});\n```\n\nPeople turn notifications on in the app (the app asks; the page can ask too with\n`notifications.request()` from `@ambasada/miniapp`, from a button). The secret (`AMBASADA_APP_SECRET`) is\ninjected by `ambasada deploy`; never put it in the browser.\n\n## Signed in without a consent screen\n\nInside the Ambasada app the page signs in silently: `auth.signIn()` from `@ambasada/miniapp` gets a short\ntoken from the app and POSTs it to `/api/auth/shell`, which sets the same session as "Sign in with\nAmbasada". Server code doesn\'t change: `currentUser()` / `ambasada().auth.user(req)` work either way.\nOn the web, the button and consent screen stay. Silent sign-in needs the app to be Verified; until then\n`signIn()` resolves `null` and the button shows.\n\n## Try it locally\n\n`npx ambasada dev` plays the hub (with the mini app on): when your app starts it sends a signed `ping` and\n`notifications_enabled` to your webhook (the token lands in the store as\n`ambasada/notifications/user_fake_visitor`), and its `/api/apps/notify` accepts pushes for that token\n(they show in the terminal). Open `http://localhost:3000/app?ambasada_shell=mock` (your entry) to pretend to be\ninside the app: the fake shell signs you in silently as "Fake Visitor".\n', ".claude/skills/ambasada-product/reference/stack.md": '# The stack: Next.js on Cloudflare\n\nEvery Ambasada app is one Cloudflare Worker. The default template builds it from **Next.js 16.4**\nwith **@opennextjs/cloudflare 1.20** (the OpenNext adapter) and the `nodejs_compat` flag. You write a\nnormal Next.js App Router app; `ambasada deploy` turns it into a Worker.\n\n## Folder layout (template `next`)\n\n```\nmy-app/\n  app/layout.tsx               <html>, the Ambasada look (@ambasada/ui) and globals.css\n  app/(site)/layout.tsx        the site\'s header (app/account.tsx) around its pages; (site) is not in the URL\n  app/(site)/page.tsx          the landing page\n  app/notes.tsx                the notes example (a client component calling app/api/notes)\n  app/api/notes/route.ts       rows in env.DB, the list cached in env.KV\n  app/api/files/route.ts       uploads to env.FILES; app/files/[...key]/route.ts serves them\n  app/api/auth/*/route.ts      Sign in with Ambasada: login, callback, logout, me, shell (silent, in the app)\n  app/api/ambasada/webhook/    the Ambasada app\'s events: who turned notifications on (reference/mini-app.md)\n  app/account.tsx              the header: "Sign in with Ambasada", or the person\'s name and avatar\n  app/(site)/privacy/page.tsx  what you keep about people (the mini app\'s privacy_url)\n  app/(site)/room/             the live room demo\n  app/app/                     the mini app, once on (`ambasada miniapp enable`): its layout, page and in-app.tsx\n  lib/ambasada.ts              the Ambasada client for server code (reads the Worker env)\n  lib/notifications.ts         notifyUser(): a push to one person who turned notifications on\n  lib/db.ts, kv.ts, files.ts   env.DB, env.KV, env.FILES (reference/storage.md); lib/bindings.ts reaches them\n  db/migrations/               the database\'s tables, one .sql file per change\n  src/realtime/                the live room (a Durable Object) and its React hook\n  ambasada.config.ts           app id, name, one-line description, product URL, `miniapp` (optional)\n  wrangler.jsonc               Worker settings (nodejs_compat, assets) and the bindings DB, KV, FILES, ROOMS\n  worker.ts                    the Worker entry: live rooms\' WebSockets, then the Next.js app\n  open-next.config.ts          OpenNext settings; leave as is\n  .env                         secrets for local runs (never commit, never send to the browser)\n  .ambasada/project.json       the template and devkit version (`ambasada upgrade` reads it); commit it\n  .claude/skills/              this skill\n```\n\nOne more endpoint = one more `app/api/<name>/route.ts`. Data it keeps goes in `env.DB` (a migration in\n`db/migrations/`), `env.KV` or `env.FILES` ([storage.md](storage.md)).\n\n## Using the client\n\nServer code only (route handlers, server components, server actions):\n\n```ts\n// app/api/hello/route.ts\nimport { ambasada } from "../../../lib/ambasada.ts";\n\nexport async function GET(req: Request) {\n  const user = await ambasada().auth.user(req);\n  return Response.json({ hello: user?.name ?? "stranger" });\n}\n```\n\n`lib/ambasada.ts` creates one client per Worker instance with `createAmbasada({ env })` from `@ambasada/sdk`,\nwhere `env` comes from `getCloudflareContext()` (deployed); under `next dev` the SDK reads `process.env`.\nIt reads `AMBASADA_API_KEY` and `AMBASADA_API_URL` (default https://api.ambasada.dev). The client has `auth`\n(below), `apps` (notifications, [mini-app.md](mini-app.md)), `store` and `files`.\n\n## Who is signed in\n\nEvery hosted app gets **Sign in with Ambasada** (Ambasada ID) for free: no keys, no settings.\nThe template\'s header already has the button. In server code:\n\n```ts\nimport { currentUser } from "../lib/ambasada.ts";\nimport { bindings } from "../lib/bindings.ts";\nimport { run } from "../lib/db.ts";\n\nconst user = await currentUser(); // null, or { id, name, avatar_url, builder, pass, member_since, \u2026 }\nif (!user) redirect("/api/auth/login?returnTo=/orders");\nawait run(bindings().DB, "INSERT INTO orders (user_id, item) VALUES (?, ?)", user.id, item); // key per-person data by user.id\n```\n\nIn a route handler, `ambasada().auth.user(req)` does the same. Client components fetch `/api/auth/me`.\nAsk for the email only if you need it: `/api/auth/login` calls `auth.login(req, { email: true })`.\nDon\'t build your own login or accounts table, and don\'t add Clerk, Auth.js or Supabase Auth.\n\n## Next.js: allowed and banned\n\nAllowed, and enough for any product here:\n\n- pages and layouts (`app/**/page.tsx`, `layout.tsx`), server components, client components (`"use client"`)\n- route handlers (`app/api/**/route.ts`), server actions (`"use server"`)\n- `fetch` to any HTTPS API, `next/link`, `next/font`, plain CSS / CSS modules / Tailwind\n\nBanned (they fail on Workers or break the deploy):\n\n| Don\'t | Do instead |\n|---|---|\n| `next/image` with the default loader | `<img>`, or `images: { unoptimized: true }` in `next.config.ts` |\n| ISR, `export const revalidate = \u2026`, `revalidatePath`, `unstable_cache` | render on each request (`export const dynamic = "force-dynamic"`), or cache results in `env.KV` |\n| `fs`, `child_process`, `sharp`, `bcrypt`, `sqlite3`, `puppeteer`, any native package | `fetch` an API (an LLM provider with your own key in a secret, for example) |\n| a custom server (`server.js`, Express inside Next) | route handlers |\n| `middleware.ts` / `proxy.ts`, `export const runtime = "edge"` | check inside the page or route handler; Next\'s default runtime is right |\n| Prisma, Drizzle with a database, Supabase, Firebase, Mongo, Redis | `env.DB` (SQLite), `env.KV`, `env.FILES` ([storage.md](storage.md)) |\n| writing files at runtime, global variables as storage | `env.DB`, `env.KV`, `env.FILES` or a Durable Object (each request can run on a different machine) |\n\nKeep the bundle small: the Worker limit is 10 MB compressed. Big UI kits and icon packs are the usual cause.\n\n## Where data lives\n\nThe app has its own SQLite database (`env.DB`), key-value (`env.KV`), file storage (`env.FILES`, public at\n`/files/<key>`) and Durable Objects for live state, created at the first deploy. Which one fits, the migrations\nworkflow and copy-paste patterns: [storage.md](storage.md).\n\nAlso there, for small things: `ambasada.store` (JSON, 1 MB for the whole app: settings, not user data) and\n`ambasada.files.put(\u2026)` \u2192 `{ url }` (platform-hosted files that expire).\n\n## Secrets\n\n- Local: `.env` in the project (Cloudflare\'s `.dev.vars` works too). The template writes it with test\n  values for `ambasada dev`. Both are in `.gitignore`; keep them there.\n- Deployed: `ambasada deploy` injects `AMBASADA_API_KEY`, `AMBASADA_API_URL`, the Sign in with Ambasada\n  credentials (`AMBASADA_AUTH_*`) and the mini-app secret (`AMBASADA_APP_SECRET`, with `AMBASADA_HUB_URL`\n  and `AMBASADA_APP_ORIGIN`) for you. With `--own`, set them yourself: `npx wrangler secret put AMBASADA_API_KEY`.\n- Other services\' keys (an OpenAI key, say): `.env` locally, `npx ambasada env set OPENAI_API_KEY \u2026` online;\n  read on the server only.\n- Anything named `NEXT_PUBLIC_*` is copied into the browser. Never put a key there.\n- Never paste a key into a page, a client component, a prompt for a no-code builder, or a commit.\n\n## Variants\n\n- `spa`: Vite + React with `@cloudflare/vite-plugin`, for code exported from Lovable or Bolt. The\n  `api/` endpoints are small fetch handlers; the React app calls them with `fetch("/api/\u2026")`.\n- `worker`: `web/` (plain HTML/CSS) plus `api/*.ts` fetch handlers. Best when the app is a page or two.\n\nThe rules on this page (state, secrets, no native packages) apply to all three.\n', ".claude/skills/ambasada-product/reference/storage.md": '# Data, files and realtime\n\nEvery app on ambasada.dev gets a real database, key-value, file storage and Durable Objects. They are created\nat the first `ambasada deploy` and bound to the Worker on every deploy; nothing to sign up for or configure.\nLocally (`ambasada dev`, `wrangler dev`, `vite`) wrangler runs the same things from `.wrangler/state`.\n\n| Need | Use | Not |\n|---|---|---|\n| anything with rows: users\' data, orders, posts, scores, anything you query, sort or join | `env.DB` (SQLite, D1) | KV, files, `ambasada.store` |\n| sessions, caches of slow results, feature flags, "seen this already" | `env.KV` | a table you scan |\n| uploads, images, audio, PDFs, generated files | `env.FILES` (R2), public at `/files/<key>` | base64 in the database |\n| state several people see change live: chat, presence, a shared board, a game table, live counters, a queue, rate limits, one thing per entity | a Durable Object (`env.ROOMS` in the templates) | polling the database |\n| an AI agent with memory, schedules and live state per user or task | the Agents SDK (`examples/agent/`) | a cron that rereads everything |\n| a few small settings for a tiny app | `ambasada.store` (1 MB per app) | user data of any size |\n\nQuotas per app: database 500 MB, KV 1 GB, files 5 GB. A database over its quota stops the next deploy.\n\n## `env.DB`: SQLite\n\nSchema lives in `db/migrations/`, one file per change, applied in name order, never edited once applied:\n\n```sql\n-- db/migrations/0002_orders.sql\nCREATE TABLE orders (\n  id INTEGER PRIMARY KEY AUTOINCREMENT,\n  user_id TEXT NOT NULL,\n  item TEXT NOT NULL,\n  paid INTEGER NOT NULL DEFAULT 0,\n  created_at INTEGER NOT NULL\n);\nCREATE INDEX orders_user ON orders (user_id, created_at);\n```\n\n```sh\nnpx wrangler d1 migrations apply DB --local   # the local database, for ambasada dev\nnpx ambasada db migrate                       # the app\'s database online (run before or right after deploying)\nnpx ambasada db shell "SELECT * FROM orders LIMIT 5"\n```\n\nQuery with `lib/db.ts` (SQL with `?` placeholders, typed rows, no ORM):\n\n```ts\nimport { all, batch, first, run } from "../lib/db.ts";\n\ntype Order = { id: number; user_id: string; item: string; paid: number; created_at: number };\nconst mine = await all<Order>(env.DB, "SELECT * FROM orders WHERE user_id = ? ORDER BY created_at DESC LIMIT 50", user.id);\nconst one = await first<Order>(env.DB, "SELECT * FROM orders WHERE id = ?", id);\nconst { lastRowId } = await run(env.DB, "INSERT INTO orders (user_id, item, created_at) VALUES (?, ?, ?)", user.id, item, Date.now());\nawait batch(env.DB, [["UPDATE stock SET n = n - 1 WHERE item = ?", item], ["UPDATE orders SET paid = 1 WHERE id = ?", id]]); // all or nothing\n```\n\nIn Next.js route handlers and server components, the bindings come from `bindings()` (`lib/bindings.ts`):\n`const { DB } = bindings();`. In the spa and worker templates, handlers get `env`.\n\nRules: always placeholders, never string-built SQL. Key per-person rows by the Ambasada user id\n(`auth.user(req).id`). Add an index for every `WHERE` you run often. Times as `Date.now()` integers.\n\n## `env.KV`: sessions, caches, flags\n\nReads are fast everywhere; a write shows up everywhere within about a minute; one write per second per key.\n\n```ts\nimport { cached, getJson, putJson } from "../lib/kv.ts";\n\nawait putJson(env.KV, `session:${id}`, { userId }, { ttl: 60 * 60 * 24 });\nconst session = await getJson<{ userId: string }>(env.KV, `session:${id}`);\nconst stats = await cached(env.KV, "home:stats", 300, () => computeStats(env)); // recompute at most every 5 min\n```\n\nNot for counters, balances or anything two people write at once: use `env.DB` (a transaction) or a Durable Object.\n\n## `env.FILES`: uploads and generated files\n\n```ts\nimport { serveFile, upload } from "../lib/files.ts";\n\n// POST /api/files: a signed-in person uploads (the templates\' api/files.ts)\nconst { key, url } = await upload(env.FILES, req.body, { contentType: req.headers.get("content-type") ?? undefined, folder: `u/${user.id}` });\nawait run(env.DB, "INSERT INTO photos (user_id, file_key) VALUES (?, ?)", user.id, key); // keep the key, not the bytes\n\n// GET /files/*: already wired in every template, with ETag, ranges and cache headers\nreturn serveFile(env.FILES, req);\n```\n\n`url` is `/files/<key>` on the app (`https://<slug>.ambasada.dev/files/<key>`): public to anyone with the link.\nPrivate files: store them under a key nobody can guess and serve them from your own route that checks\n`auth.user(req)` first, instead of `/files/*`. `npx ambasada files list | put | url | delete` from the terminal.\n\n## Durable Objects: realtime and per-entity state\n\nA Durable Object is one tiny server per id (a room, a document, a match, a user) with its own SQLite, that\nevery request for that id reaches. Use one whenever people must see each other\'s changes live, or one thing\nmust never be updated by two requests at once. The templates ship `src/realtime/room.ts` (`env.ROOMS`):\n\n```ts\n// the Worker: /api/rooms/<id>/ws \u2192 the room\nconst room = /^\\/api\\/rooms\\/([^/]+)\\/ws$/.exec(pathname);\nif (room) return env.ROOMS.getByName(decodeURIComponent(room[1]!)).fetch(req);\n```\n\n```ts\n// the room (shortened): WebSocket hibernation, broadcast, its own SQLite\nexport class Room extends DurableObject<unknown> {\n  async fetch(req: Request) {\n    const { 0: client, 1: server } = new WebSocketPair();\n    this.ctx.acceptWebSocket(server);              // hibernation: no cost while nobody talks\n    server.serializeAttachment({ name: "guest" }); // per-connection data that survives hibernation\n    return new Response(null, { status: 101, webSocket: client });\n  }\n  async webSocketMessage(ws: WebSocket, data: string | ArrayBuffer) {\n    this.ctx.storage.sql.exec("INSERT INTO messages (text, at) VALUES (?, ?)", String(data), Date.now());\n    for (const peer of this.ctx.getWebSockets()) peer.send(String(data)); // everyone in the room\n  }\n}\n```\n\n```tsx\n// the browser (React): src/realtime/use-room.ts\nconst { messages, online, send, status } = useRoom(roomId, { name: user.name });\n```\n\nA new class needs a binding and a migration in `wrangler.jsonc` (new tags go at the end; never edit or remove one\nthat was deployed; to drop a class add `{ "tag": "v3", "deleted_classes": ["Old"] }`):\n\n```jsonc\n"durable_objects": { "bindings": [{ "name": "ROOMS", "class_name": "Room" }, { "name": "BOARDS", "class_name": "Board" }] },\n"migrations": [{ "tag": "v1", "new_sqlite_classes": ["Room"] }, { "tag": "v2", "new_sqlite_classes": ["Board"] }]\n```\n\nExport the class from the Worker\'s entry (`src/worker.ts`; spa `worker/index.ts`; next `worker.ts`).\nOther shapes, same pattern: presence (who is online), a live counter (`UPDATE \u2026 RETURNING`, then broadcast), a\nper-user rate limit (`getByName(user.id)`), a job queue (`this.ctx.storage.setAlarm`). A Durable Object belongs\nto this app; other apps can\'t reach it. Under `next dev` they don\'t run: use `npm run preview` (workerd).\n\n## Agents (Agents SDK)\n\nFor agentic products (an assistant per user, a research task that runs for minutes, a bot that follows up),\nuse the Cloudflare Agents SDK: `examples/agent/` in the template (`npm i agents`, four lines to wire). An agent\nis a Durable Object with live state synced to clients (`setState`, `useAgent` in React), `this.sql`,\n`this.schedule(\u2026)` and WebSockets. One agent per user or task: `/agents/agent-example/<user id>`.\n\n## Don\'t\n\n- Poll (`setInterval(fetch\u2026)`) for what others changed: a Durable Object + WebSocket pushes it.\n- Put files or base64 in the database or KV: `env.FILES`, and keep the key in a row.\n- Keep user data in `ambasada.store`: it is 1 MB for the whole app.\n- Keep state in module variables or global objects: every request may run on another machine.\n- Count, rank or move money in KV: use a SQL transaction (`batch`) or a Durable Object.\n- Build SQL by joining strings with user input: `?` placeholders.\n- Edit an applied migration: add the next file.\n- Add Prisma, Drizzle with Postgres, Supabase, Firebase, Mongo or Redis: everything above is already here.\n', ".claude/skills/ambasada-product/reference/upgrading.md": "# Upgrading a project\n\n`npx ambasada upgrade` does the mechanical part: every `@ambasada/*` dependency to the CLI's version, the\npackage manager, `.claude/skills/ambasada-*` re-synced (the project's own skills are left alone), the code\nchanges listed below as \"done by `upgrade`\", the `ambasada check` rules, and `.ambasada/project.json`\n(the template and devkit version). `npx ambasada upgrade --check` only reports.\n\nWhat is left is below, per version, for a coding agent. Do the steps for every version between the one in\n`.ambasada/project.json` (none: 0.7) and the current one, in order. After each, run the app with\n`npx ambasada dev` and the project's `typecheck` script.\n\n## 0.7 \u2192 0.8: the platform and the village split\n\n0.8 splits the devkit: `@ambasada/sdk` and `ambasada` are the platform (sign-in, notifications, storage,\nhosting); the Hack A Ton economy (TON, checkout, offerings, the agent) is the add-on `@ambasada/village`.\n\nDone by `upgrade`:\n\n- the village names (`village`, `createVillage`, `offering`, `defineCompany`, `isVillageError`, the receipt and\n  webhook helpers, their types) import from `@ambasada/village`; in a village app `createAmbasada` became\n  `createVillage` and `DEFAULT_API_URL` became `DEFAULT_VILLAGE_API_URL` (their 0.7 meaning);\n- `@ambasada/village` added to `package.json` when the app has `offerings.ts` or an `idea`;\n- `.env` / `.dev.vars`: `AMBASADA_API_URL=https://hackaton.ambasada.id` became `https://api.ambasada.dev` plus\n  `AMBASADA_VILLAGE_API_URL=https://hackaton.ambasada.id`;\n- the `ambasada-payments` skill replaced by `ambasada-village`.\n\nFor the agent:\n\n1. **Platform code uses the platform client.** Files that only sign people in, send notifications or use\n   `store`/`files` can import `createAmbasada` / `ambasada` from `@ambasada/sdk` instead of the village client.\n   Leave files that sell, check receipts or call `llm` on the village client.\n2. **Config.** `ambasada.config.ts` may stay `defineCompany({ id, name, idea, \u2026 })`; the 0.8 form is\n   `defineCompany(defineApp({ id, name, description, product }), { idea, offerings, agent })` with\n   `defineApp` from `@ambasada/sdk`. Add a one-line `description` (the manifest's subtitle).\n3. **CLI calls.** In scripts, READMEs and `package.json`: `ambasada wallet|ledger|offerings|market|steer|webhook|links`\n   \u2192 `ambasada village \u2026`, `ambasada logs --agent` \u2192 `ambasada village logs --agent`, `ambasada dev buy` \u2192\n   `ambasada village dev buy`. The old spellings still work through 1.x with a warning.\n4. **Pages that load pay.js** from `AMBASADA_API_URL` should use the village client's `apiUrl` (or\n   `AMBASADA_VILLAGE_API_URL`): `AMBASADA_API_URL` is the platform's from 0.8.\n5. **Login.** The CLI's login moved from `~/.config/village` to `~/.config/ambasada` (moved on first use);\n   nothing to do unless a script reads that file.\n6. Run `npx ambasada check`, `npx ambasada dev` and the typecheck; deploy when they pass.\n", "AGENTS.md": "# Agents\n\nThis is an Ambasada app: Next.js that runs as one Cloudflare Worker (OpenNext), with `@ambasada/sdk` for\nsign-in, notifications and the store. Read `README.md` first, and `.claude/skills/ambasada-product/`.\nRun it with `npm run dev` (`ambasada dev`: the mock API + `next dev`). Data and realtime (`env.DB`, `env.KV`,\n`env.FILES`, live rooms): `.claude/skills/ambasada-product/reference/storage.md`.\n\n<!-- BEGIN:nextjs-agent-rules -->\n\n## This is NOT the Next.js you know\n\nThis version has breaking changes \u2014 APIs, conventions, and file structure may all differ from your training data. Read the relevant guide in `node_modules/next/dist/docs/` (resolved from this file's directory; in monorepos the `next` package may not be visible from the repo root) before writing any code. Heed deprecation notices.\n\nThis block is written and re-added by `next dev` \u2014 verify at `node_modules/next/dist/server/lib/generate-agent-files.js`. Removing it from a diff only re-creates the uncommitted change; committing it with your work keeps the tree clean.\n\n<!-- END:nextjs-agent-rules -->\n", "README.md": "# My App\n\nAn app on Ambasada, Next.js on one Cloudflare Worker (template `next`): sign-in with Ambasada ID, a database,\nkey-value, files and live rooms; a mini app inside the Ambasada app if you want one. Everything here is a default;\nchange anything.\n\n```\nambasada.config.ts          id, name, one-line description, where the app runs\napp/(site)/, app/notes.tsx  the site: header, landing page, room, privacy; the notes example\napp/api/auth/*              Sign in with Ambasada (login, callback, logout, me, shell); app/account.tsx is the header\napp/api/ambasada/webhook    the Ambasada app's events (notifications on/off); lib/notifications.ts sends pushes\napp/api/notes, app/api/files   env.DB + env.KV, uploads to env.FILES; app/files/[...key] serves them\nlib/ambasada.ts             the SDK client from the Worker's env (getCloudflareContext), process.env under `next dev`\nlib/db.ts, kv.ts, files.ts  env.DB, env.KV, env.FILES; db/migrations/ the tables; lib/bindings.ts reaches them\nsrc/realtime/               the live room (a Durable Object) and its React hook; worker.ts routes its WebSockets\nnext.config.ts, open-next.config.ts, wrangler.jsonc, worker.ts   Next.js \u2192 one Worker (OpenNext, nodejs_compat)\n.claude/skills/             docs your coding agent reads (ambasada-product)\n```\n\n## 1. Run it (2 min)\n\nNeeds Node \u2265 22.\n\n```sh\nnpm install\nnpm run dev                # `ambasada dev`: the mock Ambasada API on :8788 + `next dev` on http://localhost:3000\n```\n\nOpen http://localhost:3000: add a note, sign in (the mock signs you in as \"Fake Visitor\"), open /room in two tabs.\nhttp://127.0.0.1:8788 is the mock's page (sign-ins, notifications, the store). `ambasada dev` points your app at the\nmock whatever `.env` says.\n\n## 2. Make it yours\n\n- `ambasada.config.ts`: name and description.\n- A new endpoint: `app/api/<name>/route.ts`. Data goes in `env.DB` (a migration in `db/migrations/`), `env.KV` or `env.FILES`.\n- Ask your coding agent: it has the ambasada-product skill (stack, storage, sign-in, mini app, deploy).\n\nStay inside what runs on a Worker: pages, server components, route handlers, server actions and `fetch`.\nNot: the `next/image` default loader, ISR / `revalidate`, `fs`, `child_process` or native packages, a custom\nserver. `npm run preview` builds the Worker (`opennextjs-cloudflare build`) and runs it in workerd, as in production.\n\n## 3. Go live (1 min)\n\n```sh\nnpx ambasada login         # Ambasada ID, or a project key from https://developer.ambasada.dev\nnpx ambasada deploy        # build, smoke test, host at https://my-app.ambasada.dev\nnpx ambasada db migrate    # db/migrations \u2192 the app's database\nnpx ambasada logs          # the last deploy and recent errors\n```\n\nSign-in, notifications and the storage are set up by the deploy; nothing to configure. Your own secrets:\n`npx ambasada env set NAME value`. Hosting elsewhere: `npx opennextjs-cloudflare build && npx opennextjs-cloudflare deploy`, then `npx ambasada link https://\u2026`.\n\n**Sign in with Ambasada**: the header's button signs people in with their Ambasada ID; on the server,\n`ambasada(\u2026).auth.user(req)` gives `{ id, name, avatar_url, builder, pass }` or null.\n\n## Storage and realtime\n\nEvery app gets these, provisioned at the first `ambasada deploy`; locally wrangler keeps them in `.wrangler/state`.\n\n| Binding | For | Here |\n|---|---|---|\n| `env.DB` | SQLite: anything relational | `lib/db.ts`, tables in `db/migrations/`, example `app/api/notes/route.ts` |\n| `env.KV` | sessions, caches, flags | `lib/kv.ts` (the notes cache) |\n| `env.FILES` | uploads, generated files; public at `/files/<key>` | `lib/files.ts`, upload `app/api/files/route.ts` |\n| `env.ROOMS` | live state shared between people (Durable Object) | `src/realtime/room.ts` (wired in `worker.ts`), hook `src/realtime/use-room.ts`, demo at `/room` |\n\n```sh\nnpx wrangler d1 migrations apply DB --local   # db/migrations \u2192 the local database (ambasada dev)\nnpx ambasada db migrate                       # \u2026 \u2192 the app's database online\nnpx ambasada db shell \"SELECT * FROM notes\"   # or `ambasada db shell` for a prompt\nnpx ambasada kv list | get <key> | put <key> <value> | delete <key>\nnpx ambasada files put <file> | list | url <key> | delete <key>\n```\n\nUnder `next dev`, `env.DB`, `env.KV` and `env.FILES` work (`lib/bindings.ts`); live rooms need workerd: `npm run preview`.\n\nOptional: an agent with the Agents SDK in `examples/agent/` (its README: `npm i agents` and four lines to wire it).\n\n## In the Ambasada app (optional)\n\nOff by default: this is a website. `npx ambasada miniapp enable` adds a mini app at `/app` (`--entry /` for the whole\nsite): `miniapp: { entry: \"/app\" }` in `ambasada.config.ts`, app/app/ (layout, page) and app/app/in-app.tsx, a placeholder\n`public/icon.png`, and the manifest `ambasada dev` and `deploy` serve at `/.well-known/ambasada.json`. Then\n`http://localhost:3000/app?ambasada_shell=mock` pretends to be inside the Ambasada app. The ambasada-product skill:\nreference/mini-app.md.\n\n## Rules worth knowing\n\n- State lives in `env.DB`, `env.KV`, `env.FILES` or a Durable Object, never in module variables: a Worker has many instances.\n- Secrets only in `.env` locally and `ambasada env set` online; never in the code or `wrangler.jsonc` vars.\n- `npx ambasada check` runs the checks (https, no redirects, speed; the mini-app rules when it is on); `npx ambasada upgrade` after a new devkit.\n\nFor the Hack A Ton: `npx ambasada add village` (the add-on).\n\nBuilt by [CENTYSO](https://centyso.com) for [Ambasada](https://ambasada.id).\n", "ambasada.config.ts": 'import { defineApp } from "@ambasada/sdk";\n\nexport default defineApp({\n  id: "my-app",\n  name: "My App",\n  // One line about the app (the subtitle of its Ambasada mini app, if you add one: `ambasada miniapp enable`).\n  description: "Notes, a live room and sign-in",\n  // Where the app runs. `ambasada dev` serves it on http://localhost:3000; hosted, it is https://my-app.ambasada.dev\n  // (`ambasada deploy` sets it; `ambasada link https://\u2026` when you host elsewhere).\n  product: { url: "http://localhost:3000" },\n});\n', "app/(site)/layout.tsx": `import type { ReactNode } from "react";
+import { Account } from "../account.tsx";
+
+/** The site's pages (the route group adds nothing to the URL): the header with sign-in, then the page. */
+export default function SiteLayout({ children }: { children: ReactNode }) {
+  return (
+    <>
+      <Account />
+      <main className="page">{children}</main>
+    </>
+  );
+}
+`, "app/(site)/page.tsx": 'import { currentUser } from "../../lib/ambasada.ts";\nimport { Notes } from "../notes.tsx";\n\n// Who is signed in comes from the request: render per request, not at build time.\nexport const dynamic = "force-dynamic";\n\nexport default async function Home() {\n  const user = await currentUser();\n  return (\n    <>\n      <p className="ui-label eyebrow">Ambasada app</p>\n      <h1>My App</h1>\n      <p className="lead">\n        {user ? `Hello, ${user.name ?? "you"}. ` : ""}Notes in a database, a live room, and Sign in with Ambasada. Change anything.\n      </p>\n      {/* app/api/notes: rows in env.DB (db/migrations/0001_init.sql), the list cached in env.KV. */}\n      <Notes />\n      <p>\n        <a href="/room">Open the live room</a> in two tabs and type.\n      </p>\n    </>\n  );\n}\n', "app/(site)/privacy/page.tsx": `// /privacy: the manifest's privacy_url. Apps that ask for scopes (identity, notifications) need one to be Listed
+// (docs/MINI-APPS.md \xA72). Say plainly what you keep; edit it when that changes.
+import Link from "next/link";
+
+export const metadata = { title: "Privacy \xB7 My App" };
+
+export default function Privacy() {
+  return (
+    <>
+      <h1>Privacy</h1>
+      <p className="lead">What My App keeps about you, and why.</p>
+      <ul>
+        <li>When you sign in with Ambasada: your Ambasada ID, name and avatar, in a cookie on this site only. Signing out deletes it.</li>
+        <li>When you turn on notifications in the Ambasada app: a notification token, so we can tell you when your order is ready. Turn them off in the app and we forget it.</li>
+        <li>What you send to translate goes to a language model to be translated and is not kept after the answer.</li>
+      </ul>
+      <p>
+        <Link href="/">\u2190 back</Link>
+      </p>
+    </>
+  );
+}
+`, "app/(site)/room/live-room.tsx": '"use client";\nimport { useState } from "react";\nimport { useRoom } from "../../../src/realtime/use-room.ts";\n\nexport function LiveRoom({ id }: { id: string }) {\n  const { messages, online, status, send } = useRoom(id, { name: "guest" });\n  const [text, setText] = useState("");\n  return (\n    <>\n      <h1>Live room</h1>\n      <p className="ui-label">{status === "open" ? `${online} online` : `${status}\u2026`}</p>\n      {status === "closed" && <p className="hint">Under `next dev` rooms don&apos;t connect: try `npm run preview`.</p>}\n      <ul>\n        {messages.map((m) => (\n          <li key={m.id}>\n            {m.name}: {m.text}\n          </li>\n        ))}\n      </ul>\n      <form onSubmit={(e) => (e.preventDefault(), text.trim() && send(text) && setText(""))}>\n        <input value={text} onChange={(e) => setText(e.target.value)} placeholder="Say something" /> <button className="ui-button">Send</button>\n      </form>\n    </>\n  );\n}\n', "app/(site)/room/page.tsx": '// /room: a live room (src/realtime/room.ts). Open it in two tabs and type; ?room=<id> picks the room.\n// The WebSocket is answered by worker.ts: deployed and under `npm run preview`, not under `next dev`.\nimport { LiveRoom } from "./live-room.tsx";\n\nexport default async function RoomPage({ searchParams }: { searchParams: Promise<{ room?: string }> }) {\n  return <LiveRoom id={(await searchParams).room ?? "lobby"} />;\n}\n', "app/account.tsx": `import { ambasada, currentUser } from "../lib/ambasada.ts";
 
 /** The header: "Sign in with Ambasada", or the person's name and avatar once signed in (app/api/auth/*). */
 export async function Account() {
@@ -68,9 +102,6 @@ a { color: var(--color-accent-text); }
 [hidden] { display: none !important; }
 `, "app/health/route.ts": "// GET /health: `ambasada link` and the deploy smoke test check that the product answers.\nexport function GET(): Response {\n  return Response.json({ ok: true });\n}\n", "app/layout.tsx": `import type { Metadata } from "next";
 import type { ReactNode } from "react";
-import { currentUser } from "../lib/ambasada.ts";
-import { Account } from "./account.tsx";
-import { MiniApp } from "./miniapp.tsx";
 // The Ambasada look (@ambasada/ui: tokens, fonts, ui-card / ui-button / \u2026), then this app's own styles.
 import "@ambasada/ui";
 import "./globals.css";
@@ -80,41 +111,14 @@ export const metadata: Metadata = {
   description: "Notes, a live room and sign-in",
 };
 
-export default async function RootLayout({ children }: { children: ReactNode }) {
-  const user = await currentUser();
+export default function RootLayout({ children }: { children: ReactNode }) {
   return (
     <html lang="en">
-      <body>
-        <Account />
-        <main className="page">{children}</main>
-        <MiniApp signedIn={!!user} />
-      </body>
+      <body>{children}</body>
     </html>
   );
 }
-`, "app/miniapp.tsx": '"use client";\n\nimport { auth, mockEnv, ready } from "@ambasada/miniapp";\nimport { useRouter } from "next/navigation";\nimport { useEffect } from "react";\n\n/**\n * Inside the Ambasada app: tells the shell the first screen is drawn (drops the splash), then signs in without a\n * consent screen (docs/MINI-APPS.md \xA75): `auth.signIn()` gets a shell token and POSTs it to /api/auth/shell, which\n * sets the same session as "Sign in with Ambasada". On the web: a no-op. Under `ambasada dev`,\n * /?ambasada_shell=mock pretends to be inside the app (the mock signs the token).\n */\nexport function MiniApp({ signedIn }: { signedIn: boolean }) {\n  const router = useRouter();\n  useEffect(() => {\n    void (async () => {\n      if (new URLSearchParams(location.search).get("ambasada_shell") === "mock" || sessionStorage.getItem("ambasada_shell") === "mock") {\n        const me = (await fetch("/api/auth/me").then((r) => r.json())) as { dev_issuer?: string };\n        if (me.dev_issuer) {\n          sessionStorage.setItem("ambasada_shell", "mock");\n          mockEnv({ issuer: me.dev_issuer });\n        }\n      }\n      ready();\n      if (!signedIn && (await auth.signIn().catch(() => null))) router.refresh();\n    })();\n  }, [signedIn, router]);\n  return null;\n}\n', "app/notes.tsx": '"use client";\n\nimport { useEffect, useState } from "react";\n\ntype Note = { id: number; text: string; created_at: number };\n\n/** The notes example: GET and POST /api/notes (app/api/notes/route.ts). */\nexport function Notes() {\n  const [notes, setNotes] = useState<Note[]>([]);\n  const [text, setText] = useState("");\n  const load = () =>\n    fetch("/api/notes")\n      .then((res) => res.json() as Promise<{ notes: Note[] }>)\n      .then((r) => setNotes(r.notes))\n      .catch(() => setNotes([]));\n  useEffect(() => void load(), []);\n  return (\n    <form\n      className="ui-card"\n      onSubmit={async (e) => {\n        e.preventDefault();\n        if (!text.trim()) return;\n        await fetch("/api/notes", { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify({ text }) });\n        setText("");\n        await load();\n      }}\n    >\n      <div className="row">\n        <input value={text} onChange={(e) => setText(e.target.value)} maxLength={500} placeholder="A note" aria-label="A note" />\n        <button type="submit" className="ui-button">\n          Add\n        </button>\n      </div>\n      <ul>\n        {notes.map((n) => (\n          <li key={n.id}>{n.text}</li>\n        ))}\n      </ul>\n    </form>\n  );\n}\n', "app/page.tsx": 'import { currentUser } from "../lib/ambasada.ts";\nimport { Notes } from "./notes.tsx";\n\n// Who is signed in comes from the request: render per request, not at build time.\nexport const dynamic = "force-dynamic";\n\nexport default async function Home() {\n  const user = await currentUser();\n  return (\n    <>\n      <p className="ui-label eyebrow">Ambasada app</p>\n      <h1>My App</h1>\n      <p className="lead">\n        {user ? `Hello, ${user.name ?? "you"}. ` : ""}Notes in a database, a live room, and Sign in with Ambasada. Change anything.\n      </p>\n      {/* app/api/notes: rows in env.DB (db/migrations/0001_init.sql), the list cached in env.KV. */}\n      <Notes />\n      <p>\n        <a href="/room">Open the live room</a> in two tabs and type.\n      </p>\n    </>\n  );\n}\n', "app/privacy/page.tsx": `// /privacy: the manifest's privacy_url. Apps that ask for scopes (identity, notifications) need one to be Listed
-// (docs/MINI-APPS.md \xA72). Say plainly what you keep; edit it when that changes.
-import Link from "next/link";
-
-export const metadata = { title: "Privacy \xB7 My App" };
-
-export default function Privacy() {
-  return (
-    <>
-      <h1>Privacy</h1>
-      <p className="lead">What My App keeps about you, and why.</p>
-      <ul>
-        <li>When you sign in with Ambasada: your Ambasada ID, name and avatar, in a cookie on this site only. Signing out deletes it.</li>
-        <li>When you turn on notifications in the Ambasada app: a notification token, so we can tell you when your order is ready. Turn them off in the app and we forget it.</li>
-        <li>What you send to translate goes to a language model to be translated and is not kept after the answer.</li>
-      </ul>
-      <p>
-        <Link href="/">\u2190 back</Link>
-      </p>
-    </>
-  );
-}
-`, "app/room/live-room.tsx": '"use client";\nimport { useState } from "react";\nimport { useRoom } from "../../src/realtime/use-room.ts";\n\nexport function LiveRoom({ id }: { id: string }) {\n  const { messages, online, status, send } = useRoom(id, { name: "guest" });\n  const [text, setText] = useState("");\n  return (\n    <>\n      <h1>Live room</h1>\n      <p className="ui-label">{status === "open" ? `${online} online` : `${status}\u2026`}</p>\n      {status === "closed" && <p className="hint">Under `next dev` rooms don&apos;t connect: try `npm run preview`.</p>}\n      <ul>\n        {messages.map((m) => (\n          <li key={m.id}>\n            {m.name}: {m.text}\n          </li>\n        ))}\n      </ul>\n      <form onSubmit={(e) => (e.preventDefault(), text.trim() && send(text) && setText(""))}>\n        <input value={text} onChange={(e) => setText(e.target.value)} placeholder="Say something" /> <button className="ui-button">Send</button>\n      </form>\n    </>\n  );\n}\n', "app/room/page.tsx": '// /room: a live room (src/realtime/room.ts). Open it in two tabs and type; ?room=<id> picks the room.\n// The WebSocket is answered by worker.ts: deployed and under `npm run preview`, not under `next dev`.\nimport { LiveRoom } from "./live-room.tsx";\n\nexport default async function RoomPage({ searchParams }: { searchParams: Promise<{ room?: string }> }) {\n  return <LiveRoom id={(await searchParams).room ?? "lobby"} />;\n}\n', "db/migrations/0001_init.sql": "-- The app's first table. Add the next change as db/migrations/0002_<what>.sql (never edit an applied file), then:\n--   npx wrangler d1 migrations apply DB --local   (ambasada dev)\n--   npx ambasada db migrate                       (online)\nCREATE TABLE notes (\n  id INTEGER PRIMARY KEY AUTOINCREMENT,\n  text TEXT NOT NULL,\n  created_at INTEGER NOT NULL\n);\nCREATE INDEX notes_created ON notes (created_at);\n", "examples/agent/README.md": '# Agent (optional): the Cloudflare Agents SDK\n\nFor agentic products: an agent per user, document or task, with live state, its own SQL, schedules and\nWebSockets (`agent.ts`). It is a Durable Object, so it runs on ambasada.dev like the live rooms. To turn it on:\n\n1. `npm i agents`\n2. `wrangler.jsonc`: add the binding and a migration after the existing ones:\n   ```jsonc\n   "durable_objects": { "bindings": [{ "name": "ROOMS", "class_name": "Room" }, { "name": "AgentExample", "class_name": "AgentExample" }] },\n   "migrations": [{ "tag": "v1", "new_sqlite_classes": ["Room"] }, { "tag": "v2", "new_sqlite_classes": ["AgentExample"] }]\n   ```\n3. In the Worker entry (`src/worker.ts`; spa: `worker/index.ts`; next: `worker.ts`):\n   ```ts\n   export { AgentExample } from "../examples/agent/agent.ts"; // next: "./examples/agent/agent.ts"\n   import { routeAgents } from "../examples/agent/agent.ts";\n   // first thing in fetch():\n   const agent = await routeAgents(req, env as unknown as Record<string, unknown>);\n   if (agent) return agent;\n   ```\n4. In the browser (React): `useAgent({ agent: "agent-example", name: user.id, onStateUpdate: setState })` from\n   `agents/react`; `agent.send("hello")`. Plain fetch: `GET /agents/agent-example/<name>`.\n\n`ambasada deploy` sends the new class and its migration; nothing else to set up. Docs: https://developers.cloudflare.com/agents/\n', "examples/agent/agent.ts": '/**\n * Optional: an agent with the Cloudflare Agents SDK (`agents`), for agentic products. An agent is a Durable\n * Object with superpowers: state synced live to every connected client (`setState`), its own SQL (`this.sql`),\n * scheduled work (`this.schedule`), WebSockets and HTTP. One instance per name: per user, per document, per task.\n * Not wired in by default: examples/agent/README.md has the four steps.\n */\nimport { Agent, routeAgentRequest, type Connection, type WSMessage } from "agents";\n\ntype State = { notes: number; lastNote: string | null };\n\nexport class AgentExample extends Agent<Cloudflare.Env, State> {\n  initialState: State = { notes: 0, lastNote: null };\n\n  async onStart() {\n    this.sql`CREATE TABLE IF NOT EXISTS notes (id INTEGER PRIMARY KEY AUTOINCREMENT, text TEXT NOT NULL, at INTEGER NOT NULL)`;\n  }\n\n  // GET /agents/agent-example/<name>: what this agent knows.\n  async onRequest(_req: Request): Promise<Response> {\n    const notes = this.sql<{ id: number; text: string; at: number }>`SELECT id, text, at FROM notes ORDER BY id DESC LIMIT 20`;\n    return Response.json({ state: this.state, notes });\n  }\n\n  // A client (useAgent in the browser) sent a message: remember it, sync the new state to every client,\n  // and come back to it in a minute (call an LLM here, send a notification, \u2026).\n  async onMessage(connection: Connection, message: WSMessage) {\n    const text = String(message).slice(0, 2000);\n    this.sql`INSERT INTO notes (text, at) VALUES (${text}, ${Date.now()})`;\n    this.setState({ notes: this.state.notes + 1, lastNote: text });\n    await this.schedule(60, "followUp", { text });\n    connection.send(JSON.stringify({ ok: true }));\n  }\n\n  async followUp(payload: { text: string }) {\n    console.log(`a minute ago someone wrote: ${payload.text}`);\n  }\n}\n\n/** In your Worker\'s fetch, before your own routes: answers /agents/<agent>/<name> (HTTP and WebSocket). */\nexport const routeAgents = (req: Request, env: Record<string, unknown>) => routeAgentRequest(req, env);\n', gitignore: "node_modules/\n.next/\n.open-next/\n.wrangler/\nnext-env.d.ts\n*.tsbuildinfo\n.env*\n.dev.vars*\n.DS_Store\n# build output of `ambasada deploy`; project.json (template, devkit version) is kept\n.ambasada/*\n!.ambasada/project.json\n", "lib/ambasada.ts": 'import { createAmbasada, type Ambasada, type AmbasadaUser } from "@ambasada/sdk";\nimport { getCloudflareContext } from "@opennextjs/cloudflare";\nimport { headers } from "next/headers";\n\n/**\n * The Worker\'s env (secrets injected at deploy, `.env` locally). Under `next dev` there is no\n * Cloudflare context: the SDK then reads process.env, which `ambasada dev` points at the mock.\n */\nfunction cloudflareEnv(): Record<string, unknown> | undefined {\n  try {\n    return getCloudflareContext().env as unknown as Record<string, unknown>;\n  } catch {\n    return undefined;\n  }\n}\n\n/** A variable from the Worker\'s env, else process.env. */\nexport function env(name: string): string | undefined {\n  const value = cloudflareEnv()?.[name] ?? process.env[name];\n  return typeof value === "string" && value ? value : undefined;\n}\n\nlet client: Ambasada | undefined;\n\n/** One client per isolate: it caches the API\'s signing keys. */\nexport function ambasada(): Ambasada {\n  return (client ??= createAmbasada({ env: cloudflareEnv() }));\n}\n\n/** Who is signed in with Ambasada (app/api/auth/*), in server components and route handlers; null when signed out. */\nexport async function currentUser(): Promise<AmbasadaUser | null> {\n  return ambasada().auth.user({ headers: await headers() });\n}\n', "lib/bindings.ts": `import { getCloudflareContext } from "@opennextjs/cloudflare";
+`, "app/notes.tsx": '"use client";\n\nimport { useEffect, useState } from "react";\n\ntype Note = { id: number; text: string; created_at: number };\n\n/** The notes example: GET and POST /api/notes (app/api/notes/route.ts). */\nexport function Notes() {\n  const [notes, setNotes] = useState<Note[]>([]);\n  const [text, setText] = useState("");\n  const load = () =>\n    fetch("/api/notes")\n      .then((res) => res.json() as Promise<{ notes: Note[] }>)\n      .then((r) => setNotes(r.notes))\n      .catch(() => setNotes([]));\n  useEffect(() => void load(), []);\n  return (\n    <form\n      className="ui-card"\n      onSubmit={async (e) => {\n        e.preventDefault();\n        if (!text.trim()) return;\n        await fetch("/api/notes", { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify({ text }) });\n        setText("");\n        await load();\n      }}\n    >\n      <div className="row">\n        <input value={text} onChange={(e) => setText(e.target.value)} maxLength={500} placeholder="A note" aria-label="A note" />\n        <button type="submit" className="ui-button">\n          Add\n        </button>\n      </div>\n      <ul>\n        {notes.map((n) => (\n          <li key={n.id}>{n.text}</li>\n        ))}\n      </ul>\n    </form>\n  );\n}\n', "db/migrations/0001_init.sql": "-- The app's first table. Add the next change as db/migrations/0002_<what>.sql (never edit an applied file), then:\n--   npx wrangler d1 migrations apply DB --local   (ambasada dev)\n--   npx ambasada db migrate                       (online)\nCREATE TABLE notes (\n  id INTEGER PRIMARY KEY AUTOINCREMENT,\n  text TEXT NOT NULL,\n  created_at INTEGER NOT NULL\n);\nCREATE INDEX notes_created ON notes (created_at);\n", "examples/agent/README.md": '# Agent (optional): the Cloudflare Agents SDK\n\nFor agentic products: an agent per user, document or task, with live state, its own SQL, schedules and\nWebSockets (`agent.ts`). It is a Durable Object, so it runs on ambasada.dev like the live rooms. To turn it on:\n\n1. `npm i agents`\n2. `wrangler.jsonc`: add the binding and a migration after the existing ones:\n   ```jsonc\n   "durable_objects": { "bindings": [{ "name": "ROOMS", "class_name": "Room" }, { "name": "AgentExample", "class_name": "AgentExample" }] },\n   "migrations": [{ "tag": "v1", "new_sqlite_classes": ["Room"] }, { "tag": "v2", "new_sqlite_classes": ["AgentExample"] }]\n   ```\n3. In the Worker entry (`src/worker.ts`; spa: `worker/index.ts`; next: `worker.ts`):\n   ```ts\n   export { AgentExample } from "../examples/agent/agent.ts"; // next: "./examples/agent/agent.ts"\n   import { routeAgents } from "../examples/agent/agent.ts";\n   // first thing in fetch():\n   const agent = await routeAgents(req, env as unknown as Record<string, unknown>);\n   if (agent) return agent;\n   ```\n4. In the browser (React): `useAgent({ agent: "agent-example", name: user.id, onStateUpdate: setState })` from\n   `agents/react`; `agent.send("hello")`. Plain fetch: `GET /agents/agent-example/<name>`.\n\n`ambasada deploy` sends the new class and its migration; nothing else to set up. Docs: https://developers.cloudflare.com/agents/\n', "examples/agent/agent.ts": '/**\n * Optional: an agent with the Cloudflare Agents SDK (`agents`), for agentic products. An agent is a Durable\n * Object with superpowers: state synced live to every connected client (`setState`), its own SQL (`this.sql`),\n * scheduled work (`this.schedule`), WebSockets and HTTP. One instance per name: per user, per document, per task.\n * Not wired in by default: examples/agent/README.md has the four steps.\n */\nimport { Agent, routeAgentRequest, type Connection, type WSMessage } from "agents";\n\ntype State = { notes: number; lastNote: string | null };\n\nexport class AgentExample extends Agent<Cloudflare.Env, State> {\n  initialState: State = { notes: 0, lastNote: null };\n\n  async onStart() {\n    this.sql`CREATE TABLE IF NOT EXISTS notes (id INTEGER PRIMARY KEY AUTOINCREMENT, text TEXT NOT NULL, at INTEGER NOT NULL)`;\n  }\n\n  // GET /agents/agent-example/<name>: what this agent knows.\n  async onRequest(_req: Request): Promise<Response> {\n    const notes = this.sql<{ id: number; text: string; at: number }>`SELECT id, text, at FROM notes ORDER BY id DESC LIMIT 20`;\n    return Response.json({ state: this.state, notes });\n  }\n\n  // A client (useAgent in the browser) sent a message: remember it, sync the new state to every client,\n  // and come back to it in a minute (call an LLM here, send a notification, \u2026).\n  async onMessage(connection: Connection, message: WSMessage) {\n    const text = String(message).slice(0, 2000);\n    this.sql`INSERT INTO notes (text, at) VALUES (${text}, ${Date.now()})`;\n    this.setState({ notes: this.state.notes + 1, lastNote: text });\n    await this.schedule(60, "followUp", { text });\n    connection.send(JSON.stringify({ ok: true }));\n  }\n\n  async followUp(payload: { text: string }) {\n    console.log(`a minute ago someone wrote: ${payload.text}`);\n  }\n}\n\n/** In your Worker\'s fetch, before your own routes: answers /agents/<agent>/<name> (HTTP and WebSocket). */\nexport const routeAgents = (req: Request, env: Record<string, unknown>) => routeAgentRequest(req, env);\n', gitignore: "node_modules/\n.next/\n.open-next/\n.wrangler/\nnext-env.d.ts\n*.tsbuildinfo\n.env*\n.dev.vars*\n.DS_Store\n# build output of `ambasada deploy`; project.json (template, devkit version) is kept\n.ambasada/*\n!.ambasada/project.json\n", "lib/ambasada.ts": 'import { createAmbasada, type Ambasada, type AmbasadaUser } from "@ambasada/sdk";\nimport { getCloudflareContext } from "@opennextjs/cloudflare";\nimport { headers } from "next/headers";\n\n/**\n * The Worker\'s env (secrets injected at deploy, `.env` locally). Under `next dev` there is no\n * Cloudflare context: the SDK then reads process.env, which `ambasada dev` points at the mock.\n */\nfunction cloudflareEnv(): Record<string, unknown> | undefined {\n  try {\n    return getCloudflareContext().env as unknown as Record<string, unknown>;\n  } catch {\n    return undefined;\n  }\n}\n\n/** A variable from the Worker\'s env, else process.env. */\nexport function env(name: string): string | undefined {\n  const value = cloudflareEnv()?.[name] ?? process.env[name];\n  return typeof value === "string" && value ? value : undefined;\n}\n\nlet client: Ambasada | undefined;\n\n/** One client per isolate: it caches the API\'s signing keys. */\nexport function ambasada(): Ambasada {\n  return (client ??= createAmbasada({ env: cloudflareEnv() }));\n}\n\n/** Who is signed in with Ambasada (app/api/auth/*), in server components and route handlers; null when signed out. */\nexport async function currentUser(): Promise<AmbasadaUser | null> {\n  return ambasada().auth.user({ headers: await headers() });\n}\n', "lib/bindings.ts": `import { getCloudflareContext } from "@opennextjs/cloudflare";
 import type { Database } from "./db.ts";
 import type { Bucket } from "./files.ts";
 import type { KeyValue } from "./kv.ts";
@@ -131,7 +135,7 @@ export interface Bindings {
 }
 
 export const bindings = (): Bindings => getCloudflareContext().env as unknown as Bindings;
-`, "lib/db.ts": '/**\n * env.DB: this app\'s SQLite database (Cloudflare D1). The tables come from db/migrations/*.sql:\n * `npx ambasada db migrate` online, `npx wrangler d1 migrations apply DB --local` for `ambasada dev`.\n * A tiny typed layer, no ORM: SQL with ? placeholders in, plain objects out.\n *\n *   const notes = await all<Note>(env.DB, "SELECT * FROM notes ORDER BY id DESC LIMIT ?", 20);\n *   const note = await first<Note>(env.DB, "SELECT * FROM notes WHERE id = ?", id);\n *   const { lastRowId } = await run(env.DB, "INSERT INTO notes (text) VALUES (?)", text);\n *   await batch(env.DB, [["UPDATE a SET n = n - 1 WHERE id = ?", 1], ["UPDATE b SET n = n + 1 WHERE id = ?", 2]]); // one transaction\n */\n\nexport type Param = string | number | boolean | null | ArrayBuffer;\n\n/** What this file needs from a D1 binding (env.DB satisfies it). */\nexport interface Database {\n  prepare(query: string): Statement;\n  batch(statements: Statement[]): Promise<unknown[]>;\n}\n\nexport interface Statement {\n  bind(...values: unknown[]): Statement;\n  all<T = Record<string, unknown>>(): Promise<{ results: T[] }>;\n  first<T = Record<string, unknown>>(): Promise<T | null>;\n  run(): Promise<{ meta: { changes: number; last_row_id: number } }>;\n}\n\nconst statement = (db: Database, query: string, params: Param[]) => db.prepare(query).bind(...params);\n\n/** Every row. */\nexport async function all<T = Record<string, unknown>>(db: Database, query: string, ...params: Param[]): Promise<T[]> {\n  return (await statement(db, query, params).all<T>()).results;\n}\n\n/** The first row, or null. */\nexport function first<T = Record<string, unknown>>(db: Database, query: string, ...params: Param[]): Promise<T | null> {\n  return statement(db, query, params).first<T>();\n}\n\n/** INSERT, UPDATE, DELETE: how many rows changed and the last inserted id. */\nexport async function run(db: Database, query: string, ...params: Param[]): Promise<{ changes: number; lastRowId: number }> {\n  const { meta } = await statement(db, query, params).run();\n  return { changes: meta.changes, lastRowId: meta.last_row_id };\n}\n\n/** Several statements in one transaction: all of them apply, or none. */\nexport async function batch(db: Database, statements: [query: string, ...params: Param[]][]): Promise<void> {\n  await db.batch(statements.map(([query, ...params]) => statement(db, query, params)));\n}\n', "lib/files.ts": '/**\n * env.FILES: this app\'s file storage (Cloudflare R2). Uploads and generated files; each one is public at\n * /files/<key> on the app\'s own address (the /files/* route calls serveFile). Don\'t keep files in the database.\n *\n *   const { key, url } = await upload(env.FILES, req.body, { contentType: "image/png" });   // url: /files/u/\u2026\n *   return serveFile(env.FILES, req);                                                        // GET /files/*\n *\n * Files are public to anyone with the URL: keep private documents behind your own route that checks who asks.\n * `npx ambasada files put|list|delete|url` manages them from the terminal.\n */\n\n/** What this file needs from an R2 binding (env.FILES satisfies it). */\nexport interface Bucket {\n  put(key: string, value: ReadableStream | ArrayBuffer | ArrayBufferView | string | Blob | null, options?: { httpMetadata?: { contentType?: string } }): Promise<unknown>;\n  get(key: string, options?: { onlyIf?: Headers; range?: Headers }): Promise<StoredFile | null>;\n  delete(key: string): Promise<void>;\n}\n\nexport interface StoredFile {\n  httpEtag: string;\n  size: number;\n  httpMetadata?: { contentType?: string };\n  range?: { offset?: number; length?: number; suffix?: number };\n  body?: ReadableStream;\n}\n\nexport const FILES_PATH = "/files/";\n\n/** Stores `body` under a new random key (in `folder`) \u2192 `{ key, url }`, url relative to the app (/files/<key>). */\nexport async function upload(bucket: Bucket, body: ReadableStream | ArrayBuffer | ArrayBufferView | string | Blob | null, options: { contentType?: string; folder?: string } = {}): Promise<{ key: string; url: string }> {\n  const key = `${options.folder ?? "u"}/${crypto.randomUUID()}`;\n  await bucket.put(key, body, { httpMetadata: { contentType: options.contentType ?? "application/octet-stream" } });\n  return { key, url: fileUrl(key) };\n}\n\nexport const fileUrl = (key: string) => `${FILES_PATH}${key.split("/").map(encodeURIComponent).join("/")}`;\n\n/** GET/HEAD /files/<key>: the file with its type, an ETag (304 when unchanged), byte ranges, and a cache header. */\nexport async function serveFile(bucket: Bucket, req: Request): Promise<Response> {\n  if (req.method !== "GET" && req.method !== "HEAD") return new Response(null, { status: 405, headers: { allow: "GET, HEAD" } });\n  const path = new URL(req.url).pathname;\n  const key = decodeURIComponent(path.slice(path.indexOf(FILES_PATH) + FILES_PATH.length));\n  if (!key) return new Response("Not found", { status: 404 });\n  const file = await bucket.get(key, { onlyIf: req.headers, range: req.headers });\n  if (!file) return new Response("Not found", { status: 404 });\n  const headers = new Headers({ etag: file.httpEtag, "cache-control": "public, max-age=3600", "accept-ranges": "bytes" });\n  if (file.httpMetadata?.contentType) headers.set("content-type", file.httpMetadata.contentType);\n  if (!file.body) return new Response(null, { status: 304, headers }); // If-None-Match matched: nothing changed\n  const r = file.range;\n  if (r && req.headers.has("range")) {\n    const offset = r.suffix !== undefined ? file.size - r.suffix : (r.offset ?? 0);\n    const length = r.suffix ?? r.length ?? file.size - offset;\n    headers.set("content-range", `bytes ${offset}-${offset + length - 1}/${file.size}`);\n    headers.set("content-length", String(length));\n    return new Response(req.method === "HEAD" ? null : file.body, { status: 206, headers });\n  }\n  headers.set("content-length", String(file.size));\n  return new Response(req.method === "HEAD" ? null : file.body, { headers });\n}\n', "lib/kv.ts": '/**\n * env.KV: this app\'s key-value store (Cloudflare KV). Fast reads everywhere, writes visible within about a\n * minute, at most one write per second per key. Good for sessions, caches and feature flags; not for counters\n * or anything two people change at once (use env.DB, or a Durable Object for live state).\n *\n *   await putJson(env.KV, `session:${id}`, { user }, { ttl: 60 * 60 * 24 });\n *   const session = await getJson<{ user: string }>(env.KV, `session:${id}`);\n *   const page = await cached(env.KV, "home:stats", 60, () => computeStats());\n */\n\n/** What this file needs from a KV binding (env.KV satisfies it). */\nexport interface KeyValue {\n  get(key: string, type: "text"): Promise<string | null>;\n  put(key: string, value: string, options?: { expirationTtl?: number }): Promise<void>;\n  delete(key: string): Promise<void>;\n}\n\n/** The value saved under `key`, parsed; null when there is none (or it expired). */\nexport async function getJson<T>(kv: KeyValue, key: string): Promise<T | null> {\n  const text = await kv.get(key, "text");\n  return text === null ? null : (JSON.parse(text) as T);\n}\n\n/** Saves `value` as JSON. `ttl`: seconds until it disappears (at least 60). */\nexport function putJson(kv: KeyValue, key: string, value: unknown, options: { ttl?: number } = {}): Promise<void> {\n  return kv.put(key, JSON.stringify(value), options.ttl ? { expirationTtl: Math.max(60, options.ttl) } : undefined);\n}\n\nexport function remove(kv: KeyValue, key: string): Promise<void> {\n  return kv.delete(key);\n}\n\n/** `load()`\'s result, kept for `ttl` seconds: a cache in front of something slow. */\nexport async function cached<T>(kv: KeyValue, key: string, ttl: number, load: () => Promise<T>): Promise<T> {\n  const hit = await getJson<T>(kv, key);\n  if (hit !== null) return hit;\n  const value = await load();\n  await putJson(kv, key, value, { ttl });\n  return value;\n}\n', "lib/notifications.ts": '// Who turned notifications on, and how to reach them (docs/MINI-APPS.md \xA77). The hub sends a token per person\n// to the webhook route (api/ambasada-webhook.ts; app/api/ambasada/webhook/route.ts in Next); it lives in your\n// ambasada.store under the person\'s Ambasada user id.\nimport type { Ambasada, AppNotifyInput } from "@ambasada/sdk";\n\nconst key = (user: string) => `ambasada/notifications/${user}`;\n\nexport const saveToken = (app: Ambasada, user: string, token: string) => app.store.set(key(user), { token, enabled_at: new Date().toISOString() });\nexport const forgetToken = (app: Ambasada, user: string) => app.store.delete(key(user));\n\n/**\n * A push to one person (their Ambasada user id, e.g. `(await app.auth.user(req)).id`), if they turned\n * notifications on. False when they haven\'t, or the hub said the token is gone (then it is forgotten).\n *   await notifyUser(app, user.id, { notification_id: `order-${id}`, title: "Your translation is ready", body: "\u2026", url: `/orders/${id}` });\n */\nexport async function notifyUser(app: Ambasada, user: string, notification: Omit<AppNotifyInput, "tokens" | "users">): Promise<boolean> {\n  const saved = await app.store.get<{ token: string }>(key(user));\n  if (!saved) return false;\n  const result = await app.apps.notify({ ...notification, tokens: [saved.token] });\n  if (result.invalid.includes(saved.token)) await forgetToken(app, user);\n  return result.sent.includes(saved.token);\n}\n', "next.config.ts": 'import { initOpenNextCloudflareForDev } from "@opennextjs/cloudflare";\nimport type { NextConfig } from "next";\n\n// The product runs as one Cloudflare Worker (OpenNext). Stick to pages, server components, route\n// handlers, server actions and fetch: no next/image default loader, ISR, fs or native dependencies.\nconst nextConfig: NextConfig = {\n  // `ambasada dev --tunnel` serves `next dev` at https://<slug>-dev.ambasada.dev: let it load dev assets and HMR from there.\n  allowedDevOrigins: ["*.ambasada.dev"],\n};\n\nexport default nextConfig;\n\n// `next dev` reaches env.DB, env.KV and env.FILES (wrangler\'s local copies) through getCloudflareContext() (lib/bindings.ts).\ninitOpenNextCloudflareForDev();\n', "open-next.config.ts": 'import { defineCloudflareConfig } from "@opennextjs/cloudflare";\n\n// `opennextjs-cloudflare build` turns the Next.js app into one Worker (.open-next/worker.js + assets).\nexport default defineCloudflareConfig();\n', "package.json": '{\n  "name": "@ambasada/template-next",\n  "version": "0.1.0",\n  "private": true,\n  "description": "An Ambasada app: Next.js as one Cloudflare Worker (OpenNext), with sign-in, notifications and storage.",\n  "type": "module",\n  "engines": {\n    "node": ">=22"\n  },\n  "scripts": {\n    "dev": "ambasada dev",\n    "build": "next build",\n    "build:worker": "opennextjs-cloudflare build",\n    "preview": "opennextjs-cloudflare build && wrangler dev --port 3000",\n    "typecheck": "next typegen && tsc --noEmit && wrangler types node_modules/.worker-env.d.ts && tsc -p tsconfig.worker.json",\n    "ambasada": "ambasada"\n  },\n  "dependencies": {\n    "@ambasada/miniapp": "workspace:*",\n    "@ambasada/sdk": "workspace:*",\n    "@ambasada/ui": "workspace:*",\n    "@opennextjs/cloudflare": "~1.20.15",\n    "next": "~16.4.3",\n    "react": "~19.3.1",\n    "react-dom": "~19.3.1"\n  },\n  "devDependencies": {\n    "@ambasada/cli": "workspace:*",\n    "@types/node": "^22.20.5",\n    "@types/react": "^19.3.0",\n    "@types/react-dom": "^19.3.0",\n    "typescript": "~5.9.3",\n    "wrangler": "^4.156.1"\n  }\n}\n', "public/.well-known/ambasada.json": '{\n  "schema": 2,\n  "id": "my-app",\n  "name": "My App",\n  "subtitle": "Notes, a live room and sign-in",\n  "description": "Notes, a live room and sign-in",\n  "icon": "/icon.png",\n  "splash": {\n    "image": "/icon.png",\n    "color": "#FFFFFF"\n  },\n  "accent": "#FF002E",\n  "entry": "/",\n  "kind": "product",\n  "category": "other",\n  "scopes": [\n    "identity",\n    "notifications"\n  ],\n  "notifications": {\n    "webhook": "/api/ambasada/webhook"\n  },\n  "privacy_url": "/privacy",\n  "visibility": "public"\n}\n', "public/icon.png": "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", "src/realtime/room.ts": '/**\n * A live room (Durable Object `Room`, bound as env.ROOMS): everyone connected to the same room id shares it.\n *\n *   GET /api/rooms/<id>/ws  (WebSocket)  \u2192 env.ROOMS.getByName(id).fetch(req)\n *   client \u2192 { "text": "hi" }            server \u2192 { type: "history", messages } on join,\n *                                                 { type: "message", message } to everyone,\n *                                                 { type: "presence", online } when people come and go\n *\n * WebSocket hibernation: the object sleeps between messages and the connections stay open, so an idle room\n * costs nothing. Its own SQLite (`ctx.storage.sql`) keeps the last 50 messages, replayed to whoever joins.\n * The same shape fits presence, live counters, a game table, a queue or a rate limit: one object per thing.\n */\nimport { DurableObject } from "cloudflare:workers";\n\nconst KEEP = 50;\n\nexport type RoomMessage = { id: number; name: string; text: string; at: number };\nexport type RoomEvent = { type: "history"; messages: RoomMessage[] } | { type: "message"; message: RoomMessage } | { type: "presence"; online: number };\n\nexport class Room extends DurableObject<unknown> {\n  constructor(ctx: DurableObjectState, env: unknown) {\n    super(ctx, env);\n    ctx.storage.sql.exec("CREATE TABLE IF NOT EXISTS messages (id INTEGER PRIMARY KEY AUTOINCREMENT, name TEXT NOT NULL, text TEXT NOT NULL, at INTEGER NOT NULL)");\n  }\n\n  async fetch(req: Request): Promise<Response> {\n    if (req.headers.get("upgrade") !== "websocket") return Response.json({ online: this.ctx.getWebSockets().length, messages: this.history() });\n    // Who is talking: the client says. Behind Sign in with Ambasada, pass the signed-in name from your route instead.\n    const name = (new URL(req.url).searchParams.get("name") ?? "").trim().slice(0, 40) || "guest";\n    const { 0: client, 1: server } = new WebSocketPair();\n    this.ctx.acceptWebSocket(server);\n    server.serializeAttachment({ name });\n    server.send(JSON.stringify({ type: "history", messages: this.history() } satisfies RoomEvent));\n    this.broadcast({ type: "presence", online: this.ctx.getWebSockets().length });\n    return new Response(null, { status: 101, webSocket: client });\n  }\n\n  async webSocketMessage(ws: WebSocket, data: string | ArrayBuffer): Promise<void> {\n    let text = "";\n    try {\n      text = String((JSON.parse(typeof data === "string" ? data : new TextDecoder().decode(data)) as { text?: unknown }).text ?? "").trim().slice(0, 2000);\n    } catch {\n      return;\n    }\n    if (!text) return;\n    const { name } = ws.deserializeAttachment() as { name: string };\n    const at = Date.now();\n    const { id } = this.ctx.storage.sql.exec<{ id: number }>("INSERT INTO messages (name, text, at) VALUES (?, ?, ?) RETURNING id", name, text, at).one();\n    this.ctx.storage.sql.exec("DELETE FROM messages WHERE id <= ?", id - KEEP);\n    this.broadcast({ type: "message", message: { id, name, text, at } });\n  }\n\n  async webSocketClose(ws: WebSocket, code: number, reason: string): Promise<void> {\n    try {\n      ws.close(code, reason);\n    } catch {\n      // already closed\n    }\n    this.broadcast({ type: "presence", online: this.ctx.getWebSockets().filter((s) => s !== ws).length });\n  }\n\n  private history(): RoomMessage[] {\n    return this.ctx.storage.sql.exec<RoomMessage>("SELECT id, name, text, at FROM messages ORDER BY id").toArray();\n  }\n\n  private broadcast(event: RoomEvent): void {\n    const text = JSON.stringify(event);\n    for (const ws of this.ctx.getWebSockets()) {\n      try {\n        ws.send(text);\n      } catch {\n        // a closing socket: webSocketClose cleans up\n      }\n    }\n  }\n}\n', "src/realtime/use-room.ts": '/**\n * `useRoom(id)`: a live room in a React component (src/realtime/room.ts on the server). Reconnects on its own.\n *\n *   const { messages, online, send, status } = useRoom("lobby", { name: "Ana" });\n */\n"use client";\nimport { useCallback, useEffect, useRef, useState } from "react";\n\nexport type RoomMessage = { id: number; name: string; text: string; at: number };\ntype RoomEvent = { type: "history"; messages: RoomMessage[] } | { type: "message"; message: RoomMessage } | { type: "presence"; online: number };\n\nexport function useRoom(id: string, options: { name?: string } = {}) {\n  const [messages, setMessages] = useState<RoomMessage[]>([]);\n  const [online, setOnline] = useState(0);\n  const [status, setStatus] = useState<"connecting" | "open" | "closed">("connecting");\n  const socket = useRef<WebSocket | null>(null);\n\n  useEffect(() => {\n    let stopped = false;\n    let retry: ReturnType<typeof setTimeout> | undefined;\n    let tries = 0;\n    const connect = () => {\n      const url = new URL(`/api/rooms/${encodeURIComponent(id)}/ws`, location.href);\n      url.protocol = url.protocol === "https:" ? "wss:" : "ws:";\n      if (options.name) url.searchParams.set("name", options.name);\n      const ws = new WebSocket(url);\n      socket.current = ws;\n      setStatus("connecting");\n      const timeout = setTimeout(() => ws.close(), 10_000); // no answer (e.g. `next dev`, which can\'t serve rooms): retry later\n      ws.onopen = () => {\n        clearTimeout(timeout);\n        tries = 0;\n        setStatus("open");\n      };\n      ws.onmessage = (e) => {\n        const event = JSON.parse(String(e.data)) as RoomEvent;\n        if (event.type === "history") setMessages(event.messages);\n        else if (event.type === "message") setMessages((m) => [...m.slice(-49), event.message]);\n        else setOnline(event.online);\n      };\n      ws.onclose = () => {\n        clearTimeout(timeout);\n        setStatus("closed");\n        if (!stopped) retry = setTimeout(connect, Math.min(30_000, 1000 * 2 ** tries++)); // back off; give up never\n      };\n    };\n    connect();\n    return () => {\n      stopped = true;\n      clearTimeout(retry);\n      socket.current?.close();\n    };\n  }, [id, options.name]);\n\n  const send = useCallback((text: string) => {\n    if (socket.current?.readyState !== WebSocket.OPEN) return false;\n    socket.current.send(JSON.stringify({ text }));\n    return true;\n  }, []);\n\n  return { messages, online, status, send };\n}\n', "tsconfig.json": '{\n  "compilerOptions": {\n    "target": "ES2022",\n    "lib": [\n      "DOM",\n      "DOM.Iterable",\n      "ES2022"\n    ],\n    "module": "ESNext",\n    "moduleResolution": "Bundler",\n    "jsx": "react-jsx",\n    "strict": true,\n    "noEmit": true,\n    "skipLibCheck": true,\n    "isolatedModules": true,\n    "allowImportingTsExtensions": true,\n    "resolveJsonModule": true,\n    "esModuleInterop": true,\n    "incremental": true,\n    "plugins": [\n      {\n        "name": "next"\n      }\n    ],\n    "allowJs": true\n  },\n  "include": [\n    "next-env.d.ts",\n    "**/*.ts",\n    "**/*.tsx",\n    ".next/types/**/*.ts",\n    ".next/dev/types/**/*.ts"\n  ],\n  "exclude": [\n    "node_modules",\n    ".open-next",\n    ".wrangler",\n    "worker.ts",\n    "src/realtime/room.ts",\n    "examples"\n  ]\n}\n', "tsconfig.worker.json": '{\n  // worker.ts and the Durable Objects run in workerd, not in Next.js: their types come from\n  // `wrangler types` (npm run typecheck writes them to node_modules/.worker-env.d.ts).\n  "compilerOptions": {\n    "target": "ES2022",\n    "lib": ["ES2022"],\n    "module": "ESNext",\n    "moduleResolution": "Bundler",\n    "strict": true,\n    "noEmit": true,\n    "skipLibCheck": true,\n    "isolatedModules": true,\n    "allowImportingTsExtensions": true,\n    "types": []\n  },\n  "files": ["node_modules/.worker-env.d.ts", "worker.ts", "src/realtime/room.ts"]\n}\n', "worker.ts": '/**\n * The Worker\'s entry (wrangler.jsonc `main`): the live rooms\' WebSockets, which Next.js can\'t answer\n * (/api/rooms/<id>/ws \u2192 src/realtime/room.ts), then everything else to the Next.js app OpenNext built.\n * Durable Object classes are exported from here.\n */\n// @ts-ignore: .open-next/worker.js is written by `opennextjs-cloudflare build`\nimport { default as nextApp } from "./.open-next/worker.js";\n\nexport { Room } from "./src/realtime/room.ts";\n\nexport default {\n  async fetch(req, env, ctx) {\n    const room = /^\\/api\\/rooms\\/([^/]+)\\/ws$/.exec(new URL(req.url).pathname);\n    if (room) return env.ROOMS.getByName(decodeURIComponent(room[1]!)).fetch(req);\n    return nextApp.fetch(req, env, ctx);\n  },\n} satisfies ExportedHandler<Env>;\n', "wrangler.jsonc": '{\n  "$schema": "node_modules/wrangler/config-schema.json",\n  // One Worker: worker.ts (live rooms, then the Next.js app built by OpenNext into .open-next/) plus static assets.\n  "name": "my-app",\n  "main": "worker.ts",\n  "compatibility_date": "2026-09-01",\n  "compatibility_flags": ["nodejs_compat"],\n  "assets": {\n    "directory": ".open-next/assets",\n    "binding": "ASSETS"\n  },\n  // Storage and realtime: env.DB (SQLite), env.KV, env.FILES and the live rooms (src/realtime/room.ts).\n  // No ids: wrangler keeps local copies in .wrangler/state; `ambasada deploy` attaches the app\'s real ones.\n  "d1_databases": [{ "binding": "DB", "database_name": "my-app", "migrations_dir": "db/migrations", "migrations_table": "_ambasada_migrations" }],\n  "kv_namespaces": [{ "binding": "KV" }],\n  "r2_buckets": [{ "binding": "FILES", "bucket_name": "my-app" }],\n  "durable_objects": { "bindings": [{ "name": "ROOMS", "class_name": "Room" }] },\n  // Every Durable Object class needs a migration; add new ones at the end, never edit or remove an applied tag.\n  "migrations": [{ "tag": "v1", "new_sqlite_classes": ["Room"] }],\n  "observability": { "enabled": true }\n}\n' }, spa: { ".claude/skills/ambasada-product/SKILL.md": "---\nname: ambasada-product\ndescription: Build an app on Ambasada and put it online. Use when the user wants to make an app, tool, game or website, start one with `npm create ambasada@latest`, run it with `ambasada dev`, publish it with `ambasada deploy` at <slug>.ambasada.dev, show it in the Ambasada app (mini app, notifications, sign-in), store data in the app's SQLite database, KV or file storage, make it realtime with Durable Objects or an agent (Agents SDK), bring a site built in ChatGPT, Lovable, Bolt or v0, or upgrade a project made with an older CLI (`ambasada upgrade`). Default stack: Next.js on Cloudflare.\n---\n\n# Build an app on Ambasada and put it online\n\nAn app is **one website** (one Cloudflare Worker) at `https://<your-slug>.ambasada.dev`. It comes with\nSign in with Ambasada (Ambasada ID), a SQLite database, key-value, file storage and Durable Objects for\nrealtime, and it can live inside the Ambasada app as a mini app with push notifications. No servers, no\nCloudflare account, no keys to configure.\n\n## Start\n\n```sh\nnpm create ambasada@latest my-app           # Next.js (default)\ncd my-app && npm install\nnpx ambasada dev                            # the mock API + your site, no login\n```\n\nOther templates: add `-- --template spa` (Vite + React; for code exported from Lovable or Bolt) or\n`-- --template worker` (plain HTML + small fetch handlers; the smallest possible app). All three have the\nsame `ambasada.config.ts`, sign-in routes, notifications webhook and storage helpers, and a notes example.\n\n## What to read\n\n| The user wants to\u2026 | Read |\n|---|---|\n| know where files go, what Next.js features are allowed, secrets, who is signed in | [reference/stack.md](reference/stack.md) |\n| store data (tables, migrations), sessions or caches, uploads; make it live between people (chat, presence, a shared board, counters); build an AI agent | [reference/storage.md](reference/storage.md) |\n| run it locally, put it online, use their own Cloudflare account | [reference/dev-and-deploy.md](reference/dev-and-deploy.md) |\n| make it look good and easy to use | [reference/design.md](reference/design.md) |\n| show up in the Ambasada app, send push notifications, sign people in inside the app | [reference/mini-app.md](reference/mini-app.md) |\n| build in ChatGPT, Lovable, Bolt or v0 and bring it here | [reference/build-elsewhere.md](reference/build-elsewhere.md) |\n| upgrade a project made with an older CLI | [reference/upgrading.md](reference/upgrading.md) |\n\nFor the Hack A Ton (TON payments, offerings, the agent that runs a shop): `npx ambasada add village`, then\nthe **ambasada-village** skill.\n\n## Rules (break one and the app does not work)\n\n1. **One app = one Worker.** No separate backend, no Docker. State lives in the app's SQLite (`env.DB`),\n   key-value (`env.KV`), file storage (`env.FILES`) or a Durable Object, never in module variables.\n   See [reference/storage.md](reference/storage.md).\n2. **Only the allowed Next.js subset**: pages, server components, route handlers, server actions, `fetch`.\n   No `next/image` default loader, no ISR/`revalidate`, no `fs`/`child_process`/native packages, no custom\n   server, no `middleware.ts`/`proxy.ts`, no `runtime = \"edge\"`. See [reference/stack.md](reference/stack.md#nextjs-allowed-and-banned).\n3. **Keys never reach the browser.** They live in `.env` locally and `ambasada env set` online; only server\n   code reads them. Never prefix one with `NEXT_PUBLIC_`.\n4. **Sign-in is Ambasada ID.** Use the template's `/api/auth/*` routes and `auth.user(req)`; don't add\n   Clerk, Auth.js or Supabase Auth, and don't build an accounts table. Key per-person data by `user.id`.\n5. **Tables change through migrations**: a new `db/migrations/NNNN_name.sql` per change, never edits to an\n   applied one; `npx ambasada db migrate` after deploying.\n\n## When the user is not a developer\n\nDo the work; don't ask them to edit code. Ask at most: what it does and for whom. Then build one page, run\n`npx ambasada dev`, open it, use it as the fake visitor, and show them it worked. Explain in one sentence\nper step, no jargon.\n", ".claude/skills/ambasada-product/reference/build-elsewhere.md": "# Built in ChatGPT, Lovable, Bolt or v0\n\nThree ways, easiest first.\n\n## A. Keep it hosted there, link it\n\nGood for: a site that is finished where it is and only needs to show up in the Ambasada app.\n\n1. On a laptop with Node 22+, once:\n\n   ```sh\n   npm create ambasada@latest my-app       # you need its ambasada.config.ts and the manifest\n   cd my-app && npm install\n   npx ambasada login\n   npx ambasada link https://YOUR-SITE\n   ```\n\n2. The site must serve `/.well-known/ambasada.json` and `/icon.png` (copy them from the new project's\n   `public/`) and pass `npx ambasada check https://YOUR-SITE` ([mini-app.md](mini-app.md)).\n\nLimit: Sign in with Ambasada, notifications and the app's database, KV and files come with hosting on\nambasada.dev. A site hosted elsewhere keeps its own backend; use B or C to get them.\n\n## B. Bring the code home (recommended for Lovable and Bolt)\n\nGood for: anything with real work behind it. You get hosting on ambasada.dev and the full rules.\n\n1. Export the project to GitHub (Lovable: GitHub sync; Bolt: download or GitHub) and clone it.\n2. `npm create ambasada@latest my-app -- --template spa` and copy the exported `src/` (components, pages,\n   styles) into the new project's `src/`, replacing the starter UI. Keep the template's `api/`, `lib/`,\n   `db/`, `ambasada.config.ts`, `wrangler.jsonc` and `vite.config.ts`.\n3. Open the project in Claude Code, Cursor or Codex and say:\n\n   > This is an Ambasada app (see .claude/skills/ambasada-product). Replace Supabase/Firebase with the\n   > app's env.DB (tables in db/migrations), env.KV and env.FILES, and any login with Sign in with Ambasada\n   > (api/auth.ts, /api/auth/me). Then run it with `npx ambasada dev`.\n\n4. `npx ambasada dev`, try it, then `npx ambasada deploy`.\n\n## C. ChatGPT (or any chat) writes the code, you paste it\n\n1. `npm create ambasada@latest my-app`, `cd my-app && npm install`, `npx ambasada dev`.\n2. Paste this into ChatGPT, then the files it mentions, then your idea:\n\n   > I have a Next.js 16 App Router project that runs on Cloudflare Workers (OpenNext). Rules: no `fs`, no\n   > native packages, no `next/image` (use `<img>`), no middleware, no `revalidate`, no other login than the\n   > one in `app/api/auth`. Data goes in SQLite through `lib/db.ts` (tables in `db/migrations/*.sql`), the\n   > signed-in person comes from `currentUser()` in `lib/ambasada.ts`. Below are my `app/page.tsx`,\n   > `app/api/notes/route.ts` and `db/migrations/0001_init.sql`. Rewrite them for my idea: the main action\n   > visible on a phone without scrolling. Write complete files, one code block per file, with the file path\n   > above each. My idea: \u2026\n\n3. Paste each file where ChatGPT says, keep `npx ambasada dev` running, check the page. New tables: a new\n   file in `db/migrations/` (never edit an applied one). When it works: `npx ambasada deploy` and\n   `npx ambasada db migrate`.\n\nUse ChatGPT to write files, not to decide the stack: if its answer adds Prisma, Supabase, NextAuth,\n`next/image` or a `middleware.ts`, tell it \"that's banned in my project, do it without\".\n", ".claude/skills/ambasada-product/reference/design.md": '# Design for people who decide in 10 seconds\n\nPeople open your app on a phone, often inside the Ambasada app, between two other things. They decide in\nseconds whether it is for them. Build for that.\n\n## One page, one action\n\n- **One page first.** What it is, and the one thing to do, fit on the first screen of a phone (375 \xD7 667).\n  Extra pages only when the action needs them.\n- **One action.** One button that does the main thing. Add a second only after people use the first.\n- **Few words.** A headline of up to 8 words, one sentence under it, the button. Cut every adjective you can.\n- **Show the result.** One example of what people get (an image, a sample text) beats any description.\n- **No walls.** No signup before the first use, no cookie banner, no tour. Ask for sign-in when the app\n  needs to remember someone (Sign in with Ambasada is one tap inside the Ambasada app).\n\n## The button\n\n- Label it with the action: **Make my poem**, not **Submit**.\n- Big (at least 48 px tall), full width on phones, one strong colour, nothing else in that colour.\n- If people must type something first, put that one field right above the button.\n- After the action, show the result, or "Working on it\u2026" and the result appearing when ready (a live room\n  or polling). Never a blank page.\n\n## Look\n\n- The templates use `@ambasada/ui` (the Ambasada app\'s look: tokens, `ui-card`, `ui-button`); start there\n  ([mini-app.md](mini-app.md)). Otherwise plain CSS: one font, two colours plus grey, generous spacing.\n- Large text: 18 px body on phones, a headline twice that. Light theme.\n- Works with one thumb: tap targets 48 px, no hover-only menus.\n- Loads fast: no video backgrounds, no 3 MB hero images, no animation libraries.\n\n## Words\n\n- Say what they get, not how it works. "A logo in 1 minute", not "AI-powered logo generation".\n- Write in the language of your users; one is fine.\n\n## Before and after\n\n```\nBad:  Welcome to PoemForge\u2122, the next-generation AI-powered creative writing platform\n      [Features] [Pricing] [About] [Sign up]   \u2026scroll\u2026   [Get started]\n\nGood: Your name as a folk poem\n      Type a name. Get a 4-line Romanian folk poem in 10 seconds.\n      [ Name: _________ ]\n      [   Make my poem   ]\n      "Ana, floare de la munte, / \u2026"  \u2190 one real example\n```\n', ".claude/skills/ambasada-product/reference/dev-and-deploy.md": "# Run it, put it online\n\n## `ambasada dev`: everything on your laptop\n\n```sh\nnpx ambasada dev\n```\n\nStarts two things:\n\n1. a **mock Ambasada API** on `http://127.0.0.1:8788`: same routes and signatures as the real one. Sign in\n   with Ambasada signs you in as \"Fake Visitor\"; `apps.notify` lands in a fake hub; `ambasada.store` and\n   `ambasada.files` work in memory. Open it in a browser for a page with what happened.\n2. **your site** with its normal dev server (`next dev`, `vite` or `wrangler dev`), pointed at the mock.\n\nNo login. The app's database, KV, files and Durable Objects run locally too (wrangler, `.wrangler/state`);\n`ambasada dev` applies `db/migrations/` to the local database before it starts the site.\n\nTry it: open your site, sign in, add a note; `http://localhost:3000/?ambasada_shell=mock` pretends to be inside\nthe Ambasada app (host bar insets, silent sign-in).\n\n`npx ambasada dev --mock-only` starts only the mock, if you run your site yourself. The mock's keys:\n`AMBASADA_API_URL=http://127.0.0.1:8788`, `AMBASADA_API_KEY=sk_test_dev` (already in the project's `.env`).\n\n## `ambasada deploy`: online at `<slug>.ambasada.dev`\n\nOnce, per laptop:\n\n```sh\nnpx ambasada login        # opens a page: sign in with Ambasada ID\n```\n\n(If it asks for a key instead: https://developer.ambasada.dev \u2192 your app \u2192 a project key, `vk_\u2026`.)\n\nThen, every time you want the new version online:\n\n```sh\nnpx ambasada deploy\n```\n\nIt does, in order:\n\n1. **build**: `opennextjs-cloudflare build` (Next), `vite build` (spa) or a bundle of the Worker (worker);\n2. **smoke test**: runs the built Worker locally in workerd and requests `/` and `/.well-known/ambasada.json`;\n   a crash stops the deploy (skip with `--no-smoke` only if you know why it fails);\n3. **upload**: the URL is `https://<your-slug>.ambasada.dev`, with `AMBASADA_API_KEY`, `AMBASADA_API_URL`,\n   Sign in with Ambasada and the app secret set for you, and the app's own database, KV namespace and bucket\n   bound as `DB`, `KV`, `FILES` (created on the first deploy) plus the Durable Objects from `wrangler.jsonc`.\n\nThe database's tables are not created by the deploy: run `npx ambasada db migrate` (it applies the new files\nin `db/migrations/`). No Cloudflare account needed. `--dry-run` builds and prints what it would upload.\n\nYour own secrets (an API key for another service): `npx ambasada env set NAME value` (live at once, and on\nevery deploy); `npx ambasada env list` shows the names.\n\nLimits: 10 MB compressed bundle, 1000 static files, short CPU time per request (waiting on `fetch` does not\ncount). Heavy work belongs in an API you call, or a Durable Object, not in one request.\n\n## `ambasada dev --tunnel`: your laptop, live\n\nWhen the Ambasada app, sign-in or webhooks need to reach the version on your laptop (before deploying, or to\ndebug), log in once, then:\n\n```sh\nnpx ambasada dev --tunnel         # your dev server, against the real API, at https://<slug>-dev.ambasada.dev\nnpx ambasada tunnel --port 5173   # or: only the tunnel, for a server you started yourself\n```\n\nUntil Ctrl+C, `https://<slug>-dev.ambasada.dev` is your app's URL. There is no mock in this mode. The first\ntime takes up to 2 minutes while the address is published; after that it is instant. Only one terminal per\napp at a time: `--force` takes it over. More: docs/TUNNEL.md.\n\n## `ambasada deploy --own`: your own Cloudflare account\n\nRuns `wrangler deploy` into your account (you need `npx wrangler login` first), then\n`ambasada link <your workers.dev URL>`. Set the secrets yourself: `npx wrangler secret put AMBASADA_API_KEY`.\n\n## `ambasada link`: the app is hosted somewhere else\n\n```sh\nnpx ambasada link https://my-thing.lovable.app\n```\n\nSets `product.url` in `ambasada.config.ts` and checks that `<url>/health` answers. Use it for Lovable, Bolt,\nv0, Vercel, your own server. See [build-elsewhere.md](build-elsewhere.md).\n\n## Watch it run\n\n```sh\nnpx ambasada logs --follow     # the last deploy and new errors\nnpx ambasada check https://<slug>.ambasada.dev   # the Ambasada app's checks on the live app\n```\n\nThe Developer app (https://developer.ambasada.dev) has deploys, errors, users and the storage tabs.\n\n## Upgrading\n\nA new devkit: `npx ambasada upgrade` (dependencies, skills, mechanical code changes), then\n[upgrading.md](upgrading.md) for the steps a coding agent does.\n\n## When it goes wrong\n\n| Symptom | Fix |\n|---|---|\n| build fails on `fs`, `child_process`, a `.node` file, `sharp` | a banned package: see [stack.md](stack.md#nextjs-allowed-and-banned) |\n| smoke test: `/` answers 500 | open `npx ambasada dev`, load `/`, read the terminal error |\n| `no such table: \u2026` online | `npx ambasada db migrate` |\n| a Durable Object migration is refused on deploy | never edit or remove a deployed tag in `wrangler.jsonc`'s `migrations`; add the next one ([storage.md](storage.md)) |\n| `CONFIG: no API key` | missing `AMBASADA_API_KEY`: `.env` locally, `ambasada login` before deploying |\n| sign-in loops back to the login page | `PUBLIC_URL` differs from the URL in the browser; remove it or fix it |\n| `this app uses the village \u2026 not installed` | a Hack A Ton project: `npx ambasada upgrade` (adds `@ambasada/village`) |\n", ".claude/skills/ambasada-product/reference/mini-app.md": '# The product inside the Ambasada app (mini app)\n\nEvery product on `https://<slug>.ambasada.dev` is also a **mini app**: it can open inside the Ambasada\nmobile app, sign people in without a consent screen and send them push notifications. The template does\nthe wiring; this page says what is there and how to use it. Platform spec: docs/MINI-APPS.md in the repo.\n\n## Is it listed?\n\n`ambasada deploy` registers the product with the Ambasada hub and checks it. It prints one line:\n\n```\n\u2713 in the Ambasada app: Listed for the event\n! in the Ambasada app: Unlisted \xB7 needs: icon, viewport\n```\n\nUnlisted apps work, but only you see them in the Ambasada app. Fix what `needs` says and deploy again,\nor run `npx ambasada check https://<slug>.ambasada.dev` (or `npx ambasada check` for the local folder).\nThe checks: `/.well-known/ambasada.json` valid, `icon.png` a 1024\xD71024 PNG with no transparency, the page\nhas `<meta name="viewport" content="width=device-width, initial-scale=1">`, no dark-only theme, the\nfirst page answers in under 3 s, `/api/auth/callback` exists, the notifications webhook answers a signed ping.\nConnected tools can do the same through MCP: `app_status`, `app_check`.\n\n## Look like the app: @ambasada/ui\n\nThe templates import `@ambasada/ui` (tokens, Inter + JetBrains Mono, `ui-card`, `ui-button`, `ui-row`,\n`ui-pill`, `ui-sheet`, `ui-stepper`, `ui-empty`, `ui-skeleton`). Use those classes before writing CSS.\nReact: `import { Card, Button, Sheet } from "@ambasada/ui/react"`. Plain HTML: one\n`<link rel="stylesheet" href="https://unpkg.com/@ambasada/ui@0.5/dist/ambasada-ui.css">`.\nLeave space for the app\'s bar: the page uses `--ambasada-safe-area-*` and `--ambasada-host-bar`.\nLight theme only; one red (primary) button per screen.\n\n## Notifications\n\nAlready wired in every template:\n\n| Piece | Where |\n|---|---|\n| manifest: `"scopes": ["identity", "notifications"]`, `"notifications": { "webhook": "/api/ambasada/webhook" }`, `"privacy_url": "/privacy"` | `public/.well-known/ambasada.json` (`web/` in the worker template) |\n| the webhook: verifies the hub\'s signature, saves `token \u2194 Ambasada user id` in `ambasada.store` | `app/api/ambasada/webhook/route.ts` (Next), `api/ambasada-webhook.ts` (spa, worker) |\n| `notifyUser(app, userId, { \u2026 })`: push to one person if they turned notifications on | `lib/notifications.ts` |\n| the privacy page the scopes need | `app/privacy/page.tsx`, `public/privacy.html`, `web/privacy.html` |\n\nSend one when something the person waits for happens (their order is ready), never as marketing:\n\n```ts\nimport { notifyUser } from "../lib/notifications.ts";\n\nconst user = await ambasada().auth.user(req);            // signed in with Ambasada\nif (user) await notifyUser(ambasada(), user.id, {\n  notification_id: `order-${id}-ready`,                  // unique per message; repeats are dropped for 24 h\n  title: "Your translation is ready",                    // \u2264 40 characters\n  body: "Tap to read it.",                               // \u2264 140\n  url: `/orders/${id}`,                                  // a path on your site: where the tap opens\n});\n```\n\nPeople turn notifications on in the app (the app asks; the page can ask too with\n`notifications.request()` from `@ambasada/miniapp`, from a button). The secret (`AMBASADA_APP_SECRET`) is\ninjected by `ambasada deploy`; never put it in the browser.\n\n## Signed in without a consent screen\n\nInside the Ambasada app the page signs in silently: `auth.signIn()` from `@ambasada/miniapp` gets a short\ntoken from the app and POSTs it to `/api/auth/shell`, which sets the same session as "Sign in with\nAmbasada". Server code doesn\'t change: `currentUser()` / `ambasada().auth.user(req)` work either way.\nOn the web, the button and consent screen stay. Silent sign-in needs the app to be Verified; until then\n`signIn()` resolves `null` and the button shows.\n\n## Try it locally\n\n`npx ambasada dev` plays the hub: when your product starts it sends a signed `ping` and\n`notifications_enabled` to your webhook (the token lands in the store as\n`ambasada/notifications/user_fake_visitor`), and its `/api/apps/notify` accepts pushes for that token\n(they show in the terminal). Open `http://localhost:3000/?ambasada_shell=mock` to pretend to be inside the\napp: the fake shell signs you in silently as "Fake Visitor".\n', ".claude/skills/ambasada-product/reference/stack.md": '# The stack: Next.js on Cloudflare\n\nEvery Ambasada app is one Cloudflare Worker. The default template builds it from **Next.js 16.4**\nwith **@opennextjs/cloudflare 1.20** (the OpenNext adapter) and the `nodejs_compat` flag. You write a\nnormal Next.js App Router app; `ambasada deploy` turns it into a Worker.\n\n## Folder layout (template `next`)\n\n```\nmy-app/\n  app/page.tsx                 the landing page\n  app/notes.tsx                the notes example (a client component calling app/api/notes)\n  app/api/notes/route.ts       rows in env.DB, the list cached in env.KV\n  app/api/files/route.ts       uploads to env.FILES; app/files/[...key]/route.ts serves them\n  app/api/auth/*/route.ts      Sign in with Ambasada: login, callback, logout, me, shell (silent, in the app)\n  app/api/ambasada/webhook/    the Ambasada app\'s events: who turned notifications on (reference/mini-app.md)\n  app/account.tsx              the header: "Sign in with Ambasada", or the person\'s name and avatar\n  app/miniapp.tsx              inside the Ambasada app: ready() and silent sign-in\n  app/privacy/page.tsx         what you keep about people (the manifest\'s privacy_url)\n  app/room/                    the live room demo\n  lib/ambasada.ts              the Ambasada client for server code (reads the Worker env)\n  lib/notifications.ts         notifyUser(): a push to one person who turned notifications on\n  lib/db.ts, kv.ts, files.ts   env.DB, env.KV, env.FILES (reference/storage.md); lib/bindings.ts reaches them\n  db/migrations/               the database\'s tables, one .sql file per change\n  src/realtime/                the live room (a Durable Object) and its React hook\n  ambasada.config.ts           app id, name, one-line description, product URL\n  wrangler.jsonc               Worker settings (nodejs_compat, assets) and the bindings DB, KV, FILES, ROOMS\n  worker.ts                    the Worker entry: live rooms\' WebSockets, then the Next.js app\n  open-next.config.ts          OpenNext settings; leave as is\n  .env                         secrets for local runs (never commit, never send to the browser)\n  .ambasada/project.json       the template and devkit version (`ambasada upgrade` reads it); commit it\n  .claude/skills/              this skill\n```\n\nOne more endpoint = one more `app/api/<name>/route.ts`. Data it keeps goes in `env.DB` (a migration in\n`db/migrations/`), `env.KV` or `env.FILES` ([storage.md](storage.md)).\n\n## Using the client\n\nServer code only (route handlers, server components, server actions):\n\n```ts\n// app/api/hello/route.ts\nimport { ambasada } from "../../../lib/ambasada.ts";\n\nexport async function GET(req: Request) {\n  const user = await ambasada().auth.user(req);\n  return Response.json({ hello: user?.name ?? "stranger" });\n}\n```\n\n`lib/ambasada.ts` creates one client per Worker instance with `createAmbasada({ env })` from `@ambasada/sdk`,\nwhere `env` comes from `getCloudflareContext()` (deployed); under `next dev` the SDK reads `process.env`.\nIt reads `AMBASADA_API_KEY` and `AMBASADA_API_URL` (default https://api.ambasada.dev). The client has `auth`\n(below), `apps` (notifications, [mini-app.md](mini-app.md)), `store` and `files`.\n\n## Who is signed in\n\nEvery hosted app gets **Sign in with Ambasada** (Ambasada ID) for free: no keys, no settings.\nThe template\'s header already has the button. In server code:\n\n```ts\nimport { currentUser } from "../lib/ambasada.ts";\nimport { bindings } from "../lib/bindings.ts";\nimport { run } from "../lib/db.ts";\n\nconst user = await currentUser(); // null, or { id, name, avatar_url, builder, pass, member_since, \u2026 }\nif (!user) redirect("/api/auth/login?returnTo=/orders");\nawait run(bindings().DB, "INSERT INTO orders (user_id, item) VALUES (?, ?)", user.id, item); // key per-person data by user.id\n```\n\nIn a route handler, `ambasada().auth.user(req)` does the same. Client components fetch `/api/auth/me`.\nAsk for the email only if you need it: `/api/auth/login` calls `auth.login(req, { email: true })`.\nDon\'t build your own login or accounts table, and don\'t add Clerk, Auth.js or Supabase Auth.\n\n## Next.js: allowed and banned\n\nAllowed, and enough for any product here:\n\n- pages and layouts (`app/**/page.tsx`, `layout.tsx`), server components, client components (`"use client"`)\n- route handlers (`app/api/**/route.ts`), server actions (`"use server"`)\n- `fetch` to any HTTPS API, `next/link`, `next/font`, plain CSS / CSS modules / Tailwind\n\nBanned (they fail on Workers or break the deploy):\n\n| Don\'t | Do instead |\n|---|---|\n| `next/image` with the default loader | `<img>`, or `images: { unoptimized: true }` in `next.config.ts` |\n| ISR, `export const revalidate = \u2026`, `revalidatePath`, `unstable_cache` | render on each request (`export const dynamic = "force-dynamic"`), or cache results in `env.KV` |\n| `fs`, `child_process`, `sharp`, `bcrypt`, `sqlite3`, `puppeteer`, any native package | `fetch` an API (an LLM provider with your own key in a secret, for example) |\n| a custom server (`server.js`, Express inside Next) | route handlers |\n| `middleware.ts` / `proxy.ts`, `export const runtime = "edge"` | check inside the page or route handler; Next\'s default runtime is right |\n| Prisma, Drizzle with a database, Supabase, Firebase, Mongo, Redis | `env.DB` (SQLite), `env.KV`, `env.FILES` ([storage.md](storage.md)) |\n| writing files at runtime, global variables as storage | `env.DB`, `env.KV`, `env.FILES` or a Durable Object (each request can run on a different machine) |\n\nKeep the bundle small: the Worker limit is 10 MB compressed. Big UI kits and icon packs are the usual cause.\n\n## Where data lives\n\nThe app has its own SQLite database (`env.DB`), key-value (`env.KV`), file storage (`env.FILES`, public at\n`/files/<key>`) and Durable Objects for live state, created at the first deploy. Which one fits, the migrations\nworkflow and copy-paste patterns: [storage.md](storage.md).\n\nAlso there, for small things: `ambasada.store` (JSON, 1 MB for the whole app: settings, not user data) and\n`ambasada.files.put(\u2026)` \u2192 `{ url }` (platform-hosted files that expire).\n\n## Secrets\n\n- Local: `.env` in the project (Cloudflare\'s `.dev.vars` works too). The template writes it with test\n  values for `ambasada dev`. Both are in `.gitignore`; keep them there.\n- Deployed: `ambasada deploy` injects `AMBASADA_API_KEY`, `AMBASADA_API_URL`, the Sign in with Ambasada\n  credentials (`AMBASADA_AUTH_*`) and the mini-app secret (`AMBASADA_APP_SECRET`, with `AMBASADA_HUB_URL`\n  and `AMBASADA_APP_ORIGIN`) for you. With `--own`, set them yourself: `npx wrangler secret put AMBASADA_API_KEY`.\n- Other services\' keys (an OpenAI key, say): `.env` locally, `npx ambasada env set OPENAI_API_KEY \u2026` online;\n  read on the server only.\n- Anything named `NEXT_PUBLIC_*` is copied into the browser. Never put a key there.\n- Never paste a key into a page, a client component, a prompt for a no-code builder, or a commit.\n\n## Variants\n\n- `spa`: Vite + React with `@cloudflare/vite-plugin`, for code exported from Lovable or Bolt. The\n  `api/` endpoints are small fetch handlers; the React app calls them with `fetch("/api/\u2026")`.\n- `worker`: `web/` (plain HTML/CSS) plus `api/*.ts` fetch handlers. Best when the app is a page or two.\n\nThe rules on this page (state, secrets, no native packages) apply to all three.\n', ".claude/skills/ambasada-product/reference/storage.md": '# Data, files and realtime\n\nEvery app on ambasada.dev gets a real database, key-value, file storage and Durable Objects. They are created\nat the first `ambasada deploy` and bound to the Worker on every deploy; nothing to sign up for or configure.\nLocally (`ambasada dev`, `wrangler dev`, `vite`) wrangler runs the same things from `.wrangler/state`.\n\n| Need | Use | Not |\n|---|---|---|\n| anything with rows: users\' data, orders, posts, scores, anything you query, sort or join | `env.DB` (SQLite, D1) | KV, files, `ambasada.store` |\n| sessions, caches of slow results, feature flags, "seen this already" | `env.KV` | a table you scan |\n| uploads, images, audio, PDFs, generated files | `env.FILES` (R2), public at `/files/<key>` | base64 in the database |\n| state several people see change live: chat, presence, a shared board, a game table, live counters, a queue, rate limits, one thing per entity | a Durable Object (`env.ROOMS` in the templates) | polling the database |\n| an AI agent with memory, schedules and live state per user or task | the Agents SDK (`examples/agent/`) | a cron that rereads everything |\n| a few small settings for a tiny app | `ambasada.store` (1 MB per app) | user data of any size |\n\nQuotas per app: database 500 MB, KV 1 GB, files 5 GB. A database over its quota stops the next deploy.\n\n## `env.DB`: SQLite\n\nSchema lives in `db/migrations/`, one file per change, applied in name order, never edited once applied:\n\n```sql\n-- db/migrations/0002_orders.sql\nCREATE TABLE orders (\n  id INTEGER PRIMARY KEY AUTOINCREMENT,\n  user_id TEXT NOT NULL,\n  item TEXT NOT NULL,\n  paid INTEGER NOT NULL DEFAULT 0,\n  created_at INTEGER NOT NULL\n);\nCREATE INDEX orders_user ON orders (user_id, created_at);\n```\n\n```sh\nnpx wrangler d1 migrations apply DB --local   # the local database, for ambasada dev\nnpx ambasada db migrate                       # the app\'s database online (run before or right after deploying)\nnpx ambasada db shell "SELECT * FROM orders LIMIT 5"\n```\n\nQuery with `lib/db.ts` (SQL with `?` placeholders, typed rows, no ORM):\n\n```ts\nimport { all, batch, first, run } from "../lib/db.ts";\n\ntype Order = { id: number; user_id: string; item: string; paid: number; created_at: number };\nconst mine = await all<Order>(env.DB, "SELECT * FROM orders WHERE user_id = ? ORDER BY created_at DESC LIMIT 50", user.id);\nconst one = await first<Order>(env.DB, "SELECT * FROM orders WHERE id = ?", id);\nconst { lastRowId } = await run(env.DB, "INSERT INTO orders (user_id, item, created_at) VALUES (?, ?, ?)", user.id, item, Date.now());\nawait batch(env.DB, [["UPDATE stock SET n = n - 1 WHERE item = ?", item], ["UPDATE orders SET paid = 1 WHERE id = ?", id]]); // all or nothing\n```\n\nIn Next.js route handlers and server components, the bindings come from `bindings()` (`lib/bindings.ts`):\n`const { DB } = bindings();`. In the spa and worker templates, handlers get `env`.\n\nRules: always placeholders, never string-built SQL. Key per-person rows by the Ambasada user id\n(`auth.user(req).id`). Add an index for every `WHERE` you run often. Times as `Date.now()` integers.\n\n## `env.KV`: sessions, caches, flags\n\nReads are fast everywhere; a write shows up everywhere within about a minute; one write per second per key.\n\n```ts\nimport { cached, getJson, putJson } from "../lib/kv.ts";\n\nawait putJson(env.KV, `session:${id}`, { userId }, { ttl: 60 * 60 * 24 });\nconst session = await getJson<{ userId: string }>(env.KV, `session:${id}`);\nconst stats = await cached(env.KV, "home:stats", 300, () => computeStats(env)); // recompute at most every 5 min\n```\n\nNot for counters, balances or anything two people write at once: use `env.DB` (a transaction) or a Durable Object.\n\n## `env.FILES`: uploads and generated files\n\n```ts\nimport { serveFile, upload } from "../lib/files.ts";\n\n// POST /api/files: a signed-in person uploads (the templates\' api/files.ts)\nconst { key, url } = await upload(env.FILES, req.body, { contentType: req.headers.get("content-type") ?? undefined, folder: `u/${user.id}` });\nawait run(env.DB, "INSERT INTO photos (user_id, file_key) VALUES (?, ?)", user.id, key); // keep the key, not the bytes\n\n// GET /files/*: already wired in every template, with ETag, ranges and cache headers\nreturn serveFile(env.FILES, req);\n```\n\n`url` is `/files/<key>` on the app (`https://<slug>.ambasada.dev/files/<key>`): public to anyone with the link.\nPrivate files: store them under a key nobody can guess and serve them from your own route that checks\n`auth.user(req)` first, instead of `/files/*`. `npx ambasada files list | put | url | delete` from the terminal.\n\n## Durable Objects: realtime and per-entity state\n\nA Durable Object is one tiny server per id (a room, a document, a match, a user) with its own SQLite, that\nevery request for that id reaches. Use one whenever people must see each other\'s changes live, or one thing\nmust never be updated by two requests at once. The templates ship `src/realtime/room.ts` (`env.ROOMS`):\n\n```ts\n// the Worker: /api/rooms/<id>/ws \u2192 the room\nconst room = /^\\/api\\/rooms\\/([^/]+)\\/ws$/.exec(pathname);\nif (room) return env.ROOMS.getByName(decodeURIComponent(room[1]!)).fetch(req);\n```\n\n```ts\n// the room (shortened): WebSocket hibernation, broadcast, its own SQLite\nexport class Room extends DurableObject<unknown> {\n  async fetch(req: Request) {\n    const { 0: client, 1: server } = new WebSocketPair();\n    this.ctx.acceptWebSocket(server);              // hibernation: no cost while nobody talks\n    server.serializeAttachment({ name: "guest" }); // per-connection data that survives hibernation\n    return new Response(null, { status: 101, webSocket: client });\n  }\n  async webSocketMessage(ws: WebSocket, data: string | ArrayBuffer) {\n    this.ctx.storage.sql.exec("INSERT INTO messages (text, at) VALUES (?, ?)", String(data), Date.now());\n    for (const peer of this.ctx.getWebSockets()) peer.send(String(data)); // everyone in the room\n  }\n}\n```\n\n```tsx\n// the browser (React): src/realtime/use-room.ts\nconst { messages, online, send, status } = useRoom(roomId, { name: user.name });\n```\n\nA new class needs a binding and a migration in `wrangler.jsonc` (new tags go at the end; never edit or remove one\nthat was deployed; to drop a class add `{ "tag": "v3", "deleted_classes": ["Old"] }`):\n\n```jsonc\n"durable_objects": { "bindings": [{ "name": "ROOMS", "class_name": "Room" }, { "name": "BOARDS", "class_name": "Board" }] },\n"migrations": [{ "tag": "v1", "new_sqlite_classes": ["Room"] }, { "tag": "v2", "new_sqlite_classes": ["Board"] }]\n```\n\nExport the class from the Worker\'s entry (`src/worker.ts`; spa `worker/index.ts`; next `worker.ts`).\nOther shapes, same pattern: presence (who is online), a live counter (`UPDATE \u2026 RETURNING`, then broadcast), a\nper-user rate limit (`getByName(user.id)`), a job queue (`this.ctx.storage.setAlarm`). A Durable Object belongs\nto this app; other apps can\'t reach it. Under `next dev` they don\'t run: use `npm run preview` (workerd).\n\n## Agents (Agents SDK)\n\nFor agentic products (an assistant per user, a research task that runs for minutes, a bot that follows up),\nuse the Cloudflare Agents SDK: `examples/agent/` in the template (`npm i agents`, four lines to wire). An agent\nis a Durable Object with live state synced to clients (`setState`, `useAgent` in React), `this.sql`,\n`this.schedule(\u2026)` and WebSockets. One agent per user or task: `/agents/agent-example/<user id>`.\n\n## Don\'t\n\n- Poll (`setInterval(fetch\u2026)`) for what others changed: a Durable Object + WebSocket pushes it.\n- Put files or base64 in the database or KV: `env.FILES`, and keep the key in a row.\n- Keep user data in `ambasada.store`: it is 1 MB for the whole app.\n- Keep state in module variables or global objects: every request may run on another machine.\n- Count, rank or move money in KV: use a SQL transaction (`batch`) or a Durable Object.\n- Build SQL by joining strings with user input: `?` placeholders.\n- Edit an applied migration: add the next file.\n- Add Prisma, Drizzle with Postgres, Supabase, Firebase, Mongo or Redis: everything above is already here.\n', ".claude/skills/ambasada-product/reference/upgrading.md": "# Upgrading a project\n\n`npx ambasada upgrade` does the mechanical part: every `@ambasada/*` dependency to the CLI's version, the\npackage manager, `.claude/skills/ambasada-*` re-synced (the project's own skills are left alone), the code\nchanges listed below as \"done by `upgrade`\", the `ambasada check` rules, and `.ambasada/project.json`\n(the template and devkit version). `npx ambasada upgrade --check` only reports.\n\nWhat is left is below, per version, for a coding agent. Do the steps for every version between the one in\n`.ambasada/project.json` (none: 0.7) and the current one, in order. After each, run the app with\n`npx ambasada dev` and the project's `typecheck` script.\n\n## 0.7 \u2192 0.8: the platform and the village split\n\n0.8 splits the devkit: `@ambasada/sdk` and `ambasada` are the platform (sign-in, notifications, storage,\nhosting); the Hack A Ton economy (TON, checkout, offerings, the agent) is the add-on `@ambasada/village`.\n\nDone by `upgrade`:\n\n- the village names (`village`, `createVillage`, `offering`, `defineCompany`, `isVillageError`, the receipt and\n  webhook helpers, their types) import from `@ambasada/village`; in a village app `createAmbasada` became\n  `createVillage` and `DEFAULT_API_URL` became `DEFAULT_VILLAGE_API_URL` (their 0.7 meaning);\n- `@ambasada/village` added to `package.json` when the app has `offerings.ts` or an `idea`;\n- `.env` / `.dev.vars`: `AMBASADA_API_URL=https://hackaton.ambasada.id` became `https://api.ambasada.dev` plus\n  `AMBASADA_VILLAGE_API_URL=https://hackaton.ambasada.id`;\n- the `ambasada-payments` skill replaced by `ambasada-village`.\n\nFor the agent:\n\n1. **Platform code uses the platform client.** Files that only sign people in, send notifications or use\n   `store`/`files` can import `createAmbasada` / `ambasada` from `@ambasada/sdk` instead of the village client.\n   Leave files that sell, check receipts or call `llm` on the village client.\n2. **Config.** `ambasada.config.ts` may stay `defineCompany({ id, name, idea, \u2026 })`; the 0.8 form is\n   `defineCompany(defineApp({ id, name, description, product }), { idea, offerings, agent })` with\n   `defineApp` from `@ambasada/sdk`. Add a one-line `description` (the manifest's subtitle).\n3. **CLI calls.** In scripts, READMEs and `package.json`: `ambasada wallet|ledger|offerings|market|steer|webhook|links`\n   \u2192 `ambasada village \u2026`, `ambasada logs --agent` \u2192 `ambasada village logs --agent`, `ambasada dev buy` \u2192\n   `ambasada village dev buy`. The old spellings still work through 1.x with a warning.\n4. **Pages that load pay.js** from `AMBASADA_API_URL` should use the village client's `apiUrl` (or\n   `AMBASADA_VILLAGE_API_URL`): `AMBASADA_API_URL` is the platform's from 0.8.\n5. **Login.** The CLI's login moved from `~/.config/village` to `~/.config/ambasada` (moved on first use);\n   nothing to do unless a script reads that file.\n6. Run `npx ambasada check`, `npx ambasada dev` and the typecheck; deploy when they pass.\n", "README.md": "# My App\n\nAn app on Ambasada, Vite + React on one Cloudflare Worker (template `spa`): sign-in with Ambasada ID, notifications in the Ambasada app, a database,\nkey-value, files and live rooms. Everything here is a default; change anything.\n\n```\nambasada.config.ts          id, name, one-line description, where the app runs\npublic/.well-known/ambasada.json the app manifest: the Ambasada app lists your app from it (written by `ambasada init` from ambasada.config.ts; icon public/icon.png)\nsrc/                        the React app (drop a Lovable/Bolt export here); src/App.tsx has the header and the notes example\nworker/index.ts             the Worker: /api/<name> \u2192 api/<name>.ts, everything else is the app\napi/auth.ts                 Sign in with Ambasada (login, callback, logout, me, shell)\napi/ambasada-webhook.ts     the Ambasada app's events (notifications on/off); lib/notifications.ts sends pushes\napi/notes.ts, api/files.ts  env.DB + env.KV, uploads to env.FILES\nlib/ambasada.ts             the SDK client from the Worker's env\nlib/db.ts, kv.ts, files.ts  env.DB, env.KV, env.FILES; db/migrations/ the tables\nsrc/realtime/               the live room (a Durable Object) and its React hook\nvite.config.ts, wrangler.jsonc   @cloudflare/vite-plugin: `vite` runs the app and the Worker together\n.claude/skills/             docs your coding agent reads (ambasada-product)\n```\n\n## 1. Run it (2 min)\n\nNeeds Node \u2265 22.\n\n```sh\nnpm install\nnpm run dev                # `ambasada dev`: the mock Ambasada API on :8788 + `vite` on http://localhost:3000\n```\n\nOpen http://localhost:3000: add a note, sign in (the mock signs you in as \"Fake Visitor\"), open /room in two tabs.\nhttp://127.0.0.1:8788 is the mock's page (sign-ins, notifications, the store). `ambasada dev` points your app at the\nmock whatever `.env` says; http://localhost:3000/?ambasada_shell=mock pretends to be inside the Ambasada app.\n\n## 2. Make it yours\n\n- `ambasada.config.ts`: name and description (the manifest is written from them).\n- A new endpoint: `api/<name>.ts` (and a line in `worker/index.ts`). Data goes in `env.DB` (a migration in `db/migrations/`), `env.KV` or `env.FILES`.\n- Ask your coding agent: it has the ambasada-product skill (stack, storage, sign-in, mini app, deploy).\n\n## 3. Go live (1 min)\n\n```sh\nnpx ambasada login         # Ambasada ID, or a project key from https://developer.ambasada.dev\nnpx ambasada deploy        # build, smoke test, host at https://my-app.ambasada.dev\nnpx ambasada db migrate    # db/migrations \u2192 the app's database\nnpx ambasada logs          # the last deploy and recent errors\n```\n\nSign-in, notifications and the storage are set up by the deploy; nothing to configure. Your own secrets:\n`npx ambasada env set NAME value`. Hosting elsewhere: `npx vite build && npx wrangler deploy`, then `npx ambasada link https://\u2026`.\n\n**Sign in with Ambasada**: the header's button signs people in with their Ambasada ID; on the server,\n`ambasada(\u2026).auth.user(req)` gives `{ id, name, avatar_url, builder, pass }` or null.\n\n## Storage and realtime\n\nEvery app gets these, provisioned at the first `ambasada deploy`; locally wrangler keeps them in `.wrangler/state`.\n\n| Binding | For | Here |\n|---|---|---|\n| `env.DB` | SQLite: anything relational | `lib/db.ts`, tables in `db/migrations/`, example `api/notes.ts` |\n| `env.KV` | sessions, caches, flags | `lib/kv.ts` (the notes cache) |\n| `env.FILES` | uploads, generated files; public at `/files/<key>` | `lib/files.ts`, upload `api/files.ts` |\n| `env.ROOMS` | live state shared between people (Durable Object) | `src/realtime/room.ts`, hook `src/realtime/use-room.ts`, demo at `/room` |\n\n```sh\nnpx wrangler d1 migrations apply DB --local   # db/migrations \u2192 the local database (ambasada dev)\nnpx ambasada db migrate                       # \u2026 \u2192 the app's database online\nnpx ambasada db shell \"SELECT * FROM notes\"   # or `ambasada db shell` for a prompt\nnpx ambasada kv list | get <key> | put <key> <value> | delete <key>\nnpx ambasada files put <file> | list | url <key> | delete <key>\n```\n\nOptional: an agent with the Agents SDK in `examples/agent/` (its README: `npm i agents` and four lines to wire it).\n\n## Rules worth knowing\n\n- State lives in `env.DB`, `env.KV`, `env.FILES` or a Durable Object, never in module variables: a Worker has many instances.\n- Secrets only in `.env` locally and `ambasada env set` online; never in the code or `wrangler.jsonc` vars.\n- `npx ambasada check` runs the Ambasada app's checks (manifest, icon, viewport); `npx ambasada upgrade` after a new devkit.\n\nFor the Hack A Ton: `npx ambasada add village` (the add-on).\n\nBuilt by [CENTYSO](https://centyso.com) for [Ambasada](https://ambasada.id).\n", "ambasada.config.ts": 'import { defineApp } from "@ambasada/sdk";\n\nexport default defineApp({\n  id: "my-app",\n  name: "My App",\n  // One line about the app: the Ambasada app shows it under the name (`ambasada init` writes the manifest from it).\n  description: "Notes, a live room and sign-in",\n  // Where the app runs. `ambasada dev` serves it on http://localhost:3000; hosted, it is https://my-app.ambasada.dev\n  // (`ambasada deploy` sets it; `ambasada link https://\u2026` when you host elsewhere).\n  product: { url: "http://localhost:3000" },\n});\n', "api/ambasada-webhook.ts": '// POST /api/ambasada/webhook: the Ambasada app\'s events for this mini app (docs/MINI-APPS.md \xA77), signed with\n// AMBASADA_APP_SECRET (injected on ambasada.dev; `ambasada dev` plays the hub and sends a ping and\n// notifications_enabled here when it starts). The manifest points here: notifications.webhook.\nimport { isAmbasadaError } from "@ambasada/sdk";\nimport { ambasada, type Env } from "../lib/ambasada.ts";\nimport { forgetToken, saveToken } from "../lib/notifications.ts";\n\nexport default async function appWebhook(req: Request, env: Env): Promise<Response> {\n  const app = ambasada(env);\n  try {\n    const event = await app.apps.verifyWebhook(req); // throws if forged or stale\n    switch (event.event) {\n      case "notifications_enabled":\n      case "app_added":\n        if (event.token) await saveToken(app, event.user, event.token);\n        break;\n      case "notifications_disabled":\n      case "app_removed":\n        await forgetToken(app, event.user);\n        break;\n      case "ping": // `ambasada check` and the registry: answer 200\n        break;\n    }\n    return new Response("ok");\n  } catch (error) {\n    if (isAmbasadaError(error)) return error.toResponse();\n    throw error;\n  }\n}\n', "api/auth.ts": '// Sign in with Ambasada (Ambasada ID, OAuth + PKCE): zero setup. On https://<slug>.ambasada.dev the deploy\n// injects AMBASADA_AUTH_*; under `ambasada dev` the mock signs you in as a fake visitor.\n//   GET /api/auth/login?returnTo=/   \u2192 the Ambasada ID consent screen\n//   GET /api/auth/callback           \u2192 back from it: sets an HttpOnly session cookie, redirects to returnTo\n//   GET /api/auth/logout             \u2192 clears it\n//   GET /api/auth/me                 \u2192 { user } (null when signed out), for the browser\n//   POST /api/auth/shell { token }   \u2192 silent sign-in inside the Ambasada app: the same session, no consent screen\n//                                      (the page calls `auth.signIn()` from @ambasada/miniapp)\n// On the server: `await ambasada(env).auth.user(req)` \u2192 { id, name, avatar_url, builder, pass, \u2026 } or null.\nimport { isAmbasadaError } from "@ambasada/sdk";\nimport { ambasada, type Env } from "../lib/ambasada.ts";\n\nexport default async function auth(req: Request, env: Env): Promise<Response> {\n  const { auth } = ambasada(env);\n  try {\n    switch (new URL(req.url).pathname.replace(/\\/+$/, "")) {\n      case "/api/auth/login":\n        return await auth.login(req);\n      case "/api/auth/callback":\n        return await auth.callback(req);\n      case "/api/auth/logout":\n        return auth.logout(req);\n      case "/api/auth/shell":\n        return await auth.shell(req);\n      case "/api/auth/me": {\n        // Under `ambasada dev` the page needs the mock issuer for its fake shell (?ambasada_shell=mock).\n        const devIssuer = env.AMBASADA_AUTH_ISSUER?.startsWith("http://") ? env.AMBASADA_AUTH_ISSUER : undefined;\n        return Response.json({ user: await auth.user(req), configured: auth.configured, ...(devIssuer ? { dev_issuer: devIssuer } : {}) }, { headers: { "cache-control": "no-store" } });\n      }\n    }\n    return Response.json({ error: { code: "NOT_FOUND", message: "no such route" } }, { status: 404 });\n  } catch (error) {\n    if (isAmbasadaError(error)) return error.toResponse();\n    throw error;\n  }\n}\n', "api/files.ts": '// POST /api/files (raw body, content-type): a signed-in person uploads a file to env.FILES (lib/files.ts)\n// \u2192 { key, url }; the url (/files/<key>) is public and served by the /files/* route.\nimport { ambasada, type Env } from "../lib/ambasada.ts";\nimport { upload } from "../lib/files.ts";\n\nconst MAX_BYTES = 10 * 1024 * 1024;\n\nexport default async function files(req: Request, env: Env): Promise<Response> {\n  if (req.method !== "POST") return Response.json({ error: { code: "INVALID_REQUEST", message: "POST the file" } }, { status: 405 });\n  const user = await ambasada(env).auth.user(req);\n  if (!user) return Response.json({ error: { code: "UNAUTHORIZED", message: "sign in to upload" } }, { status: 401 });\n  const size = Number(req.headers.get("content-length") ?? 0);\n  if (!size || size > MAX_BYTES) return Response.json({ error: { code: "INVALID_REQUEST", message: "send a file up to 10 MB with a content-length" } }, { status: 413 });\n  const stored = await upload(env.FILES, req.body, { contentType: req.headers.get("content-type") ?? undefined, folder: `u/${user.id}` });\n  return Response.json(stored, { status: 201 });\n}\n', "api/notes.ts": '// GET /api/notes: the latest notes from env.DB (lib/db.ts), cached a minute in env.KV (lib/kv.ts).\n// POST /api/notes { text }: adds one. The table is db/migrations/0001_init.sql.\nimport type { Env } from "../lib/ambasada.ts";\nimport { all, run } from "../lib/db.ts";\nimport { cached, remove } from "../lib/kv.ts";\n\ntype Note = { id: number; text: string; created_at: number };\n\nexport default async function notes(req: Request, env: Env): Promise<Response> {\n  if (req.method === "POST") {\n    const { text } = (await req.json().catch(() => ({}))) as { text?: unknown };\n    if (typeof text !== "string" || !text.trim() || text.length > 500) {\n      return Response.json({ error: { code: "INVALID_REQUEST", message: "body must be { text }, 1 to 500 characters" } }, { status: 400 });\n    }\n    const { lastRowId } = await run(env.DB, "INSERT INTO notes (text, created_at) VALUES (?, ?)", text.trim(), Date.now());\n    await remove(env.KV, "notes:latest");\n    return Response.json({ id: lastRowId }, { status: 201 });\n  }\n  const latest = await cached(env.KV, "notes:latest", 60, () => all<Note>(env.DB, "SELECT id, text, created_at FROM notes ORDER BY id DESC LIMIT 20"));\n  return Response.json({ notes: latest });\n}\n', "db/migrations/0001_init.sql": "-- The app's first table. Add the next change as db/migrations/0002_<what>.sql (never edit an applied file), then:\n--   npx wrangler d1 migrations apply DB --local   (ambasada dev)\n--   npx ambasada db migrate                       (online)\nCREATE TABLE notes (\n  id INTEGER PRIMARY KEY AUTOINCREMENT,\n  text TEXT NOT NULL,\n  created_at INTEGER NOT NULL\n);\nCREATE INDEX notes_created ON notes (created_at);\n", "examples/agent/README.md": '# Agent (optional): the Cloudflare Agents SDK\n\nFor agentic products: an agent per user, document or task, with live state, its own SQL, schedules and\nWebSockets (`agent.ts`). It is a Durable Object, so it runs on ambasada.dev like the live rooms. To turn it on:\n\n1. `npm i agents`\n2. `wrangler.jsonc`: add the binding and a migration after the existing ones:\n   ```jsonc\n   "durable_objects": { "bindings": [{ "name": "ROOMS", "class_name": "Room" }, { "name": "AgentExample", "class_name": "AgentExample" }] },\n   "migrations": [{ "tag": "v1", "new_sqlite_classes": ["Room"] }, { "tag": "v2", "new_sqlite_classes": ["AgentExample"] }]\n   ```\n3. In the Worker entry (`src/worker.ts`; spa: `worker/index.ts`; next: `worker.ts`):\n   ```ts\n   export { AgentExample } from "../examples/agent/agent.ts"; // next: "./examples/agent/agent.ts"\n   import { routeAgents } from "../examples/agent/agent.ts";\n   // first thing in fetch():\n   const agent = await routeAgents(req, env as unknown as Record<string, unknown>);\n   if (agent) return agent;\n   ```\n4. In the browser (React): `useAgent({ agent: "agent-example", name: user.id, onStateUpdate: setState })` from\n   `agents/react`; `agent.send("hello")`. Plain fetch: `GET /agents/agent-example/<name>`.\n\n`ambasada deploy` sends the new class and its migration; nothing else to set up. Docs: https://developers.cloudflare.com/agents/\n', "examples/agent/agent.ts": '/**\n * Optional: an agent with the Cloudflare Agents SDK (`agents`), for agentic products. An agent is a Durable\n * Object with superpowers: state synced live to every connected client (`setState`), its own SQL (`this.sql`),\n * scheduled work (`this.schedule`), WebSockets and HTTP. One instance per name: per user, per document, per task.\n * Not wired in by default: examples/agent/README.md has the four steps.\n */\nimport { Agent, routeAgentRequest, type Connection, type WSMessage } from "agents";\n\ntype State = { notes: number; lastNote: string | null };\n\nexport class AgentExample extends Agent<Cloudflare.Env, State> {\n  initialState: State = { notes: 0, lastNote: null };\n\n  async onStart() {\n    this.sql`CREATE TABLE IF NOT EXISTS notes (id INTEGER PRIMARY KEY AUTOINCREMENT, text TEXT NOT NULL, at INTEGER NOT NULL)`;\n  }\n\n  // GET /agents/agent-example/<name>: what this agent knows.\n  async onRequest(_req: Request): Promise<Response> {\n    const notes = this.sql<{ id: number; text: string; at: number }>`SELECT id, text, at FROM notes ORDER BY id DESC LIMIT 20`;\n    return Response.json({ state: this.state, notes });\n  }\n\n  // A client (useAgent in the browser) sent a message: remember it, sync the new state to every client,\n  // and come back to it in a minute (call an LLM here, send a notification, \u2026).\n  async onMessage(connection: Connection, message: WSMessage) {\n    const text = String(message).slice(0, 2000);\n    this.sql`INSERT INTO notes (text, at) VALUES (${text}, ${Date.now()})`;\n    this.setState({ notes: this.state.notes + 1, lastNote: text });\n    await this.schedule(60, "followUp", { text });\n    connection.send(JSON.stringify({ ok: true }));\n  }\n\n  async followUp(payload: { text: string }) {\n    console.log(`a minute ago someone wrote: ${payload.text}`);\n  }\n}\n\n/** In your Worker\'s fetch, before your own routes: answers /agents/<agent>/<name> (HTTP and WebSocket). */\nexport const routeAgents = (req: Request, env: Record<string, unknown>) => routeAgentRequest(req, env);\n', gitignore: "node_modules/\ndist/\n.wrangler/\n*.tsbuildinfo\n.env*\n.dev.vars*\n.DS_Store\n# build output of `ambasada deploy`; project.json (template, devkit version) is kept\n.ambasada/*\n!.ambasada/project.json\n", "index.html": '<!doctype html>\n<html lang="en">\n  <head>\n    <meta charset="utf-8" />\n    <meta name="viewport" content="width=device-width, initial-scale=1" />\n    <title>My App</title>\n  </head>\n  <body>\n    <div id="root"></div>\n    <script type="module" src="/src/main.tsx"></script>\n  </body>\n</html>\n', "lib/ambasada.ts": 'import { createAmbasada, type Ambasada } from "@ambasada/sdk";\nimport type { Room } from "../src/realtime/room.ts";\n\n/** The Worker\'s env: `.env` locally (`ambasada dev` points it at the mock), secrets injected at deploy. */\nexport interface Env {\n  ASSETS: Fetcher;\n  /** The app\'s SQLite database (lib/db.ts), key-value (lib/kv.ts), files (lib/files.ts) and live rooms (src/realtime/room.ts). */\n  DB: D1Database;\n  KV: KVNamespace;\n  FILES: R2Bucket;\n  ROOMS: DurableObjectNamespace<Room>;\n  AMBASADA_API_KEY?: string;\n  /** Set by `ambasada deploy` and `ambasada dev`; the SDK defaults to https://api.ambasada.dev. */\n  AMBASADA_API_URL?: string;\n  AMBASADA_APP_ID?: string;\n  /** Sign in with Ambasada (api/auth.ts): set by `ambasada deploy` on ambasada.dev, and by `ambasada dev`. */\n  AMBASADA_AUTH_CLIENT_ID?: string;\n  AMBASADA_AUTH_CLIENT_SECRET?: string;\n  AMBASADA_AUTH_ISSUER?: string;\n  /** Mini-app notifications (api/ambasada-webhook.ts, lib/notifications.ts): set on ambasada.dev and by `ambasada dev`. */\n  AMBASADA_APP_SECRET?: string;\n  AMBASADA_HUB_URL?: string;\n  AMBASADA_APP_ORIGIN?: string;\n  /** Your public URL, if the Worker sees another host (behind a proxy). */\n  PUBLIC_URL?: string;\n}\n\nlet client: Ambasada | undefined;\n\n/** One client per isolate: it caches the API\'s signing keys. */\nexport function ambasada(env: Env): Ambasada {\n  return (client ??= createAmbasada({ env: env as unknown as Record<string, unknown> }));\n}\n', "lib/db.ts": '/**\n * env.DB: this app\'s SQLite database (Cloudflare D1). The tables come from db/migrations/*.sql:\n * `npx ambasada db migrate` online, `npx wrangler d1 migrations apply DB --local` for `ambasada dev`.\n * A tiny typed layer, no ORM: SQL with ? placeholders in, plain objects out.\n *\n *   const notes = await all<Note>(env.DB, "SELECT * FROM notes ORDER BY id DESC LIMIT ?", 20);\n *   const note = await first<Note>(env.DB, "SELECT * FROM notes WHERE id = ?", id);\n *   const { lastRowId } = await run(env.DB, "INSERT INTO notes (text) VALUES (?)", text);\n *   await batch(env.DB, [["UPDATE a SET n = n - 1 WHERE id = ?", 1], ["UPDATE b SET n = n + 1 WHERE id = ?", 2]]); // one transaction\n */\n\nexport type Param = string | number | boolean | null | ArrayBuffer;\n\n/** What this file needs from a D1 binding (env.DB satisfies it). */\nexport interface Database {\n  prepare(query: string): Statement;\n  batch(statements: Statement[]): Promise<unknown[]>;\n}\n\nexport interface Statement {\n  bind(...values: unknown[]): Statement;\n  all<T = Record<string, unknown>>(): Promise<{ results: T[] }>;\n  first<T = Record<string, unknown>>(): Promise<T | null>;\n  run(): Promise<{ meta: { changes: number; last_row_id: number } }>;\n}\n\nconst statement = (db: Database, query: string, params: Param[]) => db.prepare(query).bind(...params);\n\n/** Every row. */\nexport async function all<T = Record<string, unknown>>(db: Database, query: string, ...params: Param[]): Promise<T[]> {\n  return (await statement(db, query, params).all<T>()).results;\n}\n\n/** The first row, or null. */\nexport function first<T = Record<string, unknown>>(db: Database, query: string, ...params: Param[]): Promise<T | null> {\n  return statement(db, query, params).first<T>();\n}\n\n/** INSERT, UPDATE, DELETE: how many rows changed and the last inserted id. */\nexport async function run(db: Database, query: string, ...params: Param[]): Promise<{ changes: number; lastRowId: number }> {\n  const { meta } = await statement(db, query, params).run();\n  return { changes: meta.changes, lastRowId: meta.last_row_id };\n}\n\n/** Several statements in one transaction: all of them apply, or none. */\nexport async function batch(db: Database, statements: [query: string, ...params: Param[]][]): Promise<void> {\n  await db.batch(statements.map(([query, ...params]) => statement(db, query, params)));\n}\n', "lib/files.ts": '/**\n * env.FILES: this app\'s file storage (Cloudflare R2). Uploads and generated files; each one is public at\n * /files/<key> on the app\'s own address (the /files/* route calls serveFile). Don\'t keep files in the database.\n *\n *   const { key, url } = await upload(env.FILES, req.body, { contentType: "image/png" });   // url: /files/u/\u2026\n *   return serveFile(env.FILES, req);                                                        // GET /files/*\n *\n * Files are public to anyone with the URL: keep private documents behind your own route that checks who asks.\n * `npx ambasada files put|list|delete|url` manages them from the terminal.\n */\n\n/** What this file needs from an R2 binding (env.FILES satisfies it). */\nexport interface Bucket {\n  put(key: string, value: ReadableStream | ArrayBuffer | ArrayBufferView | string | Blob | null, options?: { httpMetadata?: { contentType?: string } }): Promise<unknown>;\n  get(key: string, options?: { onlyIf?: Headers; range?: Headers }): Promise<StoredFile | null>;\n  delete(key: string): Promise<void>;\n}\n\nexport interface StoredFile {\n  httpEtag: string;\n  size: number;\n  httpMetadata?: { contentType?: string };\n  range?: { offset?: number; length?: number; suffix?: number };\n  body?: ReadableStream;\n}\n\nexport const FILES_PATH = "/files/";\n\n/** Stores `body` under a new random key (in `folder`) \u2192 `{ key, url }`, url relative to the app (/files/<key>). */\nexport async function upload(bucket: Bucket, body: ReadableStream | ArrayBuffer | ArrayBufferView | string | Blob | null, options: { contentType?: string; folder?: string } = {}): Promise<{ key: string; url: string }> {\n  const key = `${options.folder ?? "u"}/${crypto.randomUUID()}`;\n  await bucket.put(key, body, { httpMetadata: { contentType: options.contentType ?? "application/octet-stream" } });\n  return { key, url: fileUrl(key) };\n}\n\nexport const fileUrl = (key: string) => `${FILES_PATH}${key.split("/").map(encodeURIComponent).join("/")}`;\n\n/** GET/HEAD /files/<key>: the file with its type, an ETag (304 when unchanged), byte ranges, and a cache header. */\nexport async function serveFile(bucket: Bucket, req: Request): Promise<Response> {\n  if (req.method !== "GET" && req.method !== "HEAD") return new Response(null, { status: 405, headers: { allow: "GET, HEAD" } });\n  const path = new URL(req.url).pathname;\n  const key = decodeURIComponent(path.slice(path.indexOf(FILES_PATH) + FILES_PATH.length));\n  if (!key) return new Response("Not found", { status: 404 });\n  const file = await bucket.get(key, { onlyIf: req.headers, range: req.headers });\n  if (!file) return new Response("Not found", { status: 404 });\n  const headers = new Headers({ etag: file.httpEtag, "cache-control": "public, max-age=3600", "accept-ranges": "bytes" });\n  if (file.httpMetadata?.contentType) headers.set("content-type", file.httpMetadata.contentType);\n  if (!file.body) return new Response(null, { status: 304, headers }); // If-None-Match matched: nothing changed\n  const r = file.range;\n  if (r && req.headers.has("range")) {\n    const offset = r.suffix !== undefined ? file.size - r.suffix : (r.offset ?? 0);\n    const length = r.suffix ?? r.length ?? file.size - offset;\n    headers.set("content-range", `bytes ${offset}-${offset + length - 1}/${file.size}`);\n    headers.set("content-length", String(length));\n    return new Response(req.method === "HEAD" ? null : file.body, { status: 206, headers });\n  }\n  headers.set("content-length", String(file.size));\n  return new Response(req.method === "HEAD" ? null : file.body, { headers });\n}\n', "lib/kv.ts": '/**\n * env.KV: this app\'s key-value store (Cloudflare KV). Fast reads everywhere, writes visible within about a\n * minute, at most one write per second per key. Good for sessions, caches and feature flags; not for counters\n * or anything two people change at once (use env.DB, or a Durable Object for live state).\n *\n *   await putJson(env.KV, `session:${id}`, { user }, { ttl: 60 * 60 * 24 });\n *   const session = await getJson<{ user: string }>(env.KV, `session:${id}`);\n *   const page = await cached(env.KV, "home:stats", 60, () => computeStats());\n */\n\n/** What this file needs from a KV binding (env.KV satisfies it). */\nexport interface KeyValue {\n  get(key: string, type: "text"): Promise<string | null>;\n  put(key: string, value: string, options?: { expirationTtl?: number }): Promise<void>;\n  delete(key: string): Promise<void>;\n}\n\n/** The value saved under `key`, parsed; null when there is none (or it expired). */\nexport async function getJson<T>(kv: KeyValue, key: string): Promise<T | null> {\n  const text = await kv.get(key, "text");\n  return text === null ? null : (JSON.parse(text) as T);\n}\n\n/** Saves `value` as JSON. `ttl`: seconds until it disappears (at least 60). */\nexport function putJson(kv: KeyValue, key: string, value: unknown, options: { ttl?: number } = {}): Promise<void> {\n  return kv.put(key, JSON.stringify(value), options.ttl ? { expirationTtl: Math.max(60, options.ttl) } : undefined);\n}\n\nexport function remove(kv: KeyValue, key: string): Promise<void> {\n  return kv.delete(key);\n}\n\n/** `load()`\'s result, kept for `ttl` seconds: a cache in front of something slow. */\nexport async function cached<T>(kv: KeyValue, key: string, ttl: number, load: () => Promise<T>): Promise<T> {\n  const hit = await getJson<T>(kv, key);\n  if (hit !== null) return hit;\n  const value = await load();\n  await putJson(kv, key, value, { ttl });\n  return value;\n}\n', "lib/notifications.ts": '// Who turned notifications on, and how to reach them (docs/MINI-APPS.md \xA77). The hub sends a token per person\n// to the webhook route (api/ambasada-webhook.ts; app/api/ambasada/webhook/route.ts in Next); it lives in your\n// ambasada.store under the person\'s Ambasada user id.\nimport type { Ambasada, AppNotifyInput } from "@ambasada/sdk";\n\nconst key = (user: string) => `ambasada/notifications/${user}`;\n\nexport const saveToken = (app: Ambasada, user: string, token: string) => app.store.set(key(user), { token, enabled_at: new Date().toISOString() });\nexport const forgetToken = (app: Ambasada, user: string) => app.store.delete(key(user));\n\n/**\n * A push to one person (their Ambasada user id, e.g. `(await app.auth.user(req)).id`), if they turned\n * notifications on. False when they haven\'t, or the hub said the token is gone (then it is forgotten).\n *   await notifyUser(app, user.id, { notification_id: `order-${id}`, title: "Your translation is ready", body: "\u2026", url: `/orders/${id}` });\n */\nexport async function notifyUser(app: Ambasada, user: string, notification: Omit<AppNotifyInput, "tokens" | "users">): Promise<boolean> {\n  const saved = await app.store.get<{ token: string }>(key(user));\n  if (!saved) return false;\n  const result = await app.apps.notify({ ...notification, tokens: [saved.token] });\n  if (result.invalid.includes(saved.token)) await forgetToken(app, user);\n  return result.sent.includes(saved.token);\n}\n', "package.json": '{\n  "name": "@ambasada/template-spa",\n  "version": "0.1.0",\n  "private": true,\n  "description": "An Ambasada app: Vite + React (Lovable/Bolt exports) and api/*.ts handlers as one Cloudflare Worker.",\n  "type": "module",\n  "engines": {\n    "node": ">=22"\n  },\n  "scripts": {\n    "dev": "ambasada dev",\n    "build": "vite build",\n    "preview": "vite build && vite preview --port 3000",\n    "typecheck": "tsc -b",\n    "ambasada": "ambasada"\n  },\n  "dependencies": {\n    "@ambasada/miniapp": "workspace:*",\n    "@ambasada/sdk": "workspace:*",\n    "@ambasada/ui": "workspace:*",\n    "react": "~19.3.1",\n    "react-dom": "~19.3.1"\n  },\n  "devDependencies": {\n    "@ambasada/cli": "workspace:*",\n    "@cloudflare/vite-plugin": "^1.67.0",\n    "@cloudflare/workers-types": "^5.20261102.1",\n    "@types/node": "^22.20.5",\n    "@types/react": "^19.3.0",\n    "@types/react-dom": "^19.3.0",\n    "@vitejs/plugin-react": "^6.1.2",\n    "typescript": "~5.9.3",\n    "vite": "^8.3.5",\n    "wrangler": "^4.156.1"\n  }\n}\n', "public/.well-known/ambasada.json": '{\n  "schema": 2,\n  "id": "my-app",\n  "name": "My App",\n  "subtitle": "Notes, a live room and sign-in",\n  "description": "Notes, a live room and sign-in",\n  "icon": "/icon.png",\n  "splash": {\n    "image": "/icon.png",\n    "color": "#FFFFFF"\n  },\n  "accent": "#FF002E",\n  "entry": "/",\n  "kind": "product",\n  "category": "other",\n  "scopes": [\n    "identity",\n    "notifications"\n  ],\n  "notifications": {\n    "webhook": "/api/ambasada/webhook"\n  },\n  "privacy_url": "/privacy",\n  "visibility": "public"\n}\n', "public/icon.png": "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", "public/privacy.html": `<!doctype html>
+`, "lib/db.ts": '/**\n * env.DB: this app\'s SQLite database (Cloudflare D1). The tables come from db/migrations/*.sql:\n * `npx ambasada db migrate` online, `npx wrangler d1 migrations apply DB --local` for `ambasada dev`.\n * A tiny typed layer, no ORM: SQL with ? placeholders in, plain objects out.\n *\n *   const notes = await all<Note>(env.DB, "SELECT * FROM notes ORDER BY id DESC LIMIT ?", 20);\n *   const note = await first<Note>(env.DB, "SELECT * FROM notes WHERE id = ?", id);\n *   const { lastRowId } = await run(env.DB, "INSERT INTO notes (text) VALUES (?)", text);\n *   await batch(env.DB, [["UPDATE a SET n = n - 1 WHERE id = ?", 1], ["UPDATE b SET n = n + 1 WHERE id = ?", 2]]); // one transaction\n */\n\nexport type Param = string | number | boolean | null | ArrayBuffer;\n\n/** What this file needs from a D1 binding (env.DB satisfies it). */\nexport interface Database {\n  prepare(query: string): Statement;\n  batch(statements: Statement[]): Promise<unknown[]>;\n}\n\nexport interface Statement {\n  bind(...values: unknown[]): Statement;\n  all<T = Record<string, unknown>>(): Promise<{ results: T[] }>;\n  first<T = Record<string, unknown>>(): Promise<T | null>;\n  run(): Promise<{ meta: { changes: number; last_row_id: number } }>;\n}\n\nconst statement = (db: Database, query: string, params: Param[]) => db.prepare(query).bind(...params);\n\n/** Every row. */\nexport async function all<T = Record<string, unknown>>(db: Database, query: string, ...params: Param[]): Promise<T[]> {\n  return (await statement(db, query, params).all<T>()).results;\n}\n\n/** The first row, or null. */\nexport function first<T = Record<string, unknown>>(db: Database, query: string, ...params: Param[]): Promise<T | null> {\n  return statement(db, query, params).first<T>();\n}\n\n/** INSERT, UPDATE, DELETE: how many rows changed and the last inserted id. */\nexport async function run(db: Database, query: string, ...params: Param[]): Promise<{ changes: number; lastRowId: number }> {\n  const { meta } = await statement(db, query, params).run();\n  return { changes: meta.changes, lastRowId: meta.last_row_id };\n}\n\n/** Several statements in one transaction: all of them apply, or none. */\nexport async function batch(db: Database, statements: [query: string, ...params: Param[]][]): Promise<void> {\n  await db.batch(statements.map(([query, ...params]) => statement(db, query, params)));\n}\n', "lib/files.ts": '/**\n * env.FILES: this app\'s file storage (Cloudflare R2). Uploads and generated files; each one is public at\n * /files/<key> on the app\'s own address (the /files/* route calls serveFile). Don\'t keep files in the database.\n *\n *   const { key, url } = await upload(env.FILES, req.body, { contentType: "image/png" });   // url: /files/u/\u2026\n *   return serveFile(env.FILES, req);                                                        // GET /files/*\n *\n * Files are public to anyone with the URL: keep private documents behind your own route that checks who asks.\n * `npx ambasada files put|list|delete|url` manages them from the terminal.\n */\n\n/** What this file needs from an R2 binding (env.FILES satisfies it). */\nexport interface Bucket {\n  put(key: string, value: ReadableStream | ArrayBuffer | ArrayBufferView | string | Blob | null, options?: { httpMetadata?: { contentType?: string } }): Promise<unknown>;\n  get(key: string, options?: { onlyIf?: Headers; range?: Headers }): Promise<StoredFile | null>;\n  delete(key: string): Promise<void>;\n}\n\nexport interface StoredFile {\n  httpEtag: string;\n  size: number;\n  httpMetadata?: { contentType?: string };\n  range?: { offset?: number; length?: number; suffix?: number };\n  body?: ReadableStream;\n}\n\nexport const FILES_PATH = "/files/";\n\n/** Stores `body` under a new random key (in `folder`) \u2192 `{ key, url }`, url relative to the app (/files/<key>). */\nexport async function upload(bucket: Bucket, body: ReadableStream | ArrayBuffer | ArrayBufferView | string | Blob | null, options: { contentType?: string; folder?: string } = {}): Promise<{ key: string; url: string }> {\n  const key = `${options.folder ?? "u"}/${crypto.randomUUID()}`;\n  await bucket.put(key, body, { httpMetadata: { contentType: options.contentType ?? "application/octet-stream" } });\n  return { key, url: fileUrl(key) };\n}\n\nexport const fileUrl = (key: string) => `${FILES_PATH}${key.split("/").map(encodeURIComponent).join("/")}`;\n\n/** GET/HEAD /files/<key>: the file with its type, an ETag (304 when unchanged), byte ranges, and a cache header. */\nexport async function serveFile(bucket: Bucket, req: Request): Promise<Response> {\n  if (req.method !== "GET" && req.method !== "HEAD") return new Response(null, { status: 405, headers: { allow: "GET, HEAD" } });\n  const path = new URL(req.url).pathname;\n  const key = decodeURIComponent(path.slice(path.indexOf(FILES_PATH) + FILES_PATH.length));\n  if (!key) return new Response("Not found", { status: 404 });\n  const file = await bucket.get(key, { onlyIf: req.headers, range: req.headers });\n  if (!file) return new Response("Not found", { status: 404 });\n  const headers = new Headers({ etag: file.httpEtag, "cache-control": "public, max-age=3600", "accept-ranges": "bytes" });\n  if (file.httpMetadata?.contentType) headers.set("content-type", file.httpMetadata.contentType);\n  if (!file.body) return new Response(null, { status: 304, headers }); // If-None-Match matched: nothing changed\n  const r = file.range;\n  if (r && req.headers.has("range")) {\n    const offset = r.suffix !== undefined ? file.size - r.suffix : (r.offset ?? 0);\n    const length = r.suffix ?? r.length ?? file.size - offset;\n    headers.set("content-range", `bytes ${offset}-${offset + length - 1}/${file.size}`);\n    headers.set("content-length", String(length));\n    return new Response(req.method === "HEAD" ? null : file.body, { status: 206, headers });\n  }\n  headers.set("content-length", String(file.size));\n  return new Response(req.method === "HEAD" ? null : file.body, { headers });\n}\n', "lib/kv.ts": '/**\n * env.KV: this app\'s key-value store (Cloudflare KV). Fast reads everywhere, writes visible within about a\n * minute, at most one write per second per key. Good for sessions, caches and feature flags; not for counters\n * or anything two people change at once (use env.DB, or a Durable Object for live state).\n *\n *   await putJson(env.KV, `session:${id}`, { user }, { ttl: 60 * 60 * 24 });\n *   const session = await getJson<{ user: string }>(env.KV, `session:${id}`);\n *   const page = await cached(env.KV, "home:stats", 60, () => computeStats());\n */\n\n/** What this file needs from a KV binding (env.KV satisfies it). */\nexport interface KeyValue {\n  get(key: string, type: "text"): Promise<string | null>;\n  put(key: string, value: string, options?: { expirationTtl?: number }): Promise<void>;\n  delete(key: string): Promise<void>;\n}\n\n/** The value saved under `key`, parsed; null when there is none (or it expired). */\nexport async function getJson<T>(kv: KeyValue, key: string): Promise<T | null> {\n  const text = await kv.get(key, "text");\n  return text === null ? null : (JSON.parse(text) as T);\n}\n\n/** Saves `value` as JSON. `ttl`: seconds until it disappears (at least 60). */\nexport function putJson(kv: KeyValue, key: string, value: unknown, options: { ttl?: number } = {}): Promise<void> {\n  return kv.put(key, JSON.stringify(value), options.ttl ? { expirationTtl: Math.max(60, options.ttl) } : undefined);\n}\n\nexport function remove(kv: KeyValue, key: string): Promise<void> {\n  return kv.delete(key);\n}\n\n/** `load()`\'s result, kept for `ttl` seconds: a cache in front of something slow. */\nexport async function cached<T>(kv: KeyValue, key: string, ttl: number, load: () => Promise<T>): Promise<T> {\n  const hit = await getJson<T>(kv, key);\n  if (hit !== null) return hit;\n  const value = await load();\n  await putJson(kv, key, value, { ttl });\n  return value;\n}\n', "lib/notifications.ts": '// Who turned notifications on, and how to reach them (docs/MINI-APPS.md \xA77). The hub sends a token per person\n// to the webhook route (api/ambasada-webhook.ts; app/api/ambasada/webhook/route.ts in Next); it lives in your\n// ambasada.store under the person\'s Ambasada user id.\nimport type { Ambasada, AppNotifyInput } from "@ambasada/sdk";\n\nconst key = (user: string) => `ambasada/notifications/${user}`;\n\nexport const saveToken = (app: Ambasada, user: string, token: string) => app.store.set(key(user), { token, enabled_at: new Date().toISOString() });\nexport const forgetToken = (app: Ambasada, user: string) => app.store.delete(key(user));\n\n/**\n * A push to one person (their Ambasada user id, e.g. `(await app.auth.user(req)).id`), if they turned\n * notifications on. False when they haven\'t, or the hub said the token is gone (then it is forgotten).\n *   await notifyUser(app, user.id, { notification_id: `order-${id}`, title: "Your translation is ready", body: "\u2026", url: `/orders/${id}` });\n */\nexport async function notifyUser(app: Ambasada, user: string, notification: Omit<AppNotifyInput, "tokens" | "users">): Promise<boolean> {\n  const saved = await app.store.get<{ token: string }>(key(user));\n  if (!saved) return false;\n  const result = await app.apps.notify({ ...notification, tokens: [saved.token] });\n  if (result.invalid.includes(saved.token)) await forgetToken(app, user);\n  return result.sent.includes(saved.token);\n}\n', "next.config.ts": 'import { initOpenNextCloudflareForDev } from "@opennextjs/cloudflare";\nimport type { NextConfig } from "next";\n\n// The product runs as one Cloudflare Worker (OpenNext). Stick to pages, server components, route\n// handlers, server actions and fetch: no next/image default loader, ISR, fs or native dependencies.\nconst nextConfig: NextConfig = {\n  // `ambasada dev --tunnel` serves `next dev` at https://<slug>-dev.ambasada.dev: let it load dev assets and HMR from there.\n  allowedDevOrigins: ["*.ambasada.dev"],\n};\n\nexport default nextConfig;\n\n// `next dev` reaches env.DB, env.KV and env.FILES (wrangler\'s local copies) through getCloudflareContext() (lib/bindings.ts).\ninitOpenNextCloudflareForDev();\n', "open-next.config.ts": 'import { defineCloudflareConfig } from "@opennextjs/cloudflare";\n\n// `opennextjs-cloudflare build` turns the Next.js app into one Worker (.open-next/worker.js + assets).\nexport default defineCloudflareConfig();\n', "package.json": '{\n  "name": "@ambasada/template-next",\n  "version": "0.1.0",\n  "private": true,\n  "description": "An Ambasada app: Next.js as one Cloudflare Worker (OpenNext), with sign-in, notifications and storage.",\n  "type": "module",\n  "engines": {\n    "node": ">=22"\n  },\n  "scripts": {\n    "dev": "ambasada dev",\n    "build": "next build",\n    "build:worker": "opennextjs-cloudflare build",\n    "preview": "opennextjs-cloudflare build && wrangler dev --port 3000",\n    "typecheck": "next typegen && tsc --noEmit && wrangler types node_modules/.worker-env.d.ts && tsc -p tsconfig.worker.json",\n    "ambasada": "ambasada"\n  },\n  "dependencies": {\n    "@ambasada/sdk": "workspace:*",\n    "@ambasada/ui": "workspace:*",\n    "@opennextjs/cloudflare": "~1.20.15",\n    "next": "~16.4.3",\n    "react": "~19.3.1",\n    "react-dom": "~19.3.1"\n  },\n  "devDependencies": {\n    "@ambasada/cli": "workspace:*",\n    "@types/node": "^22.20.5",\n    "@types/react": "^19.3.0",\n    "@types/react-dom": "^19.3.0",\n    "typescript": "~5.9.3",\n    "wrangler": "^4.156.1"\n  }\n}\n', "src/realtime/room.ts": '/**\n * A live room (Durable Object `Room`, bound as env.ROOMS): everyone connected to the same room id shares it.\n *\n *   GET /api/rooms/<id>/ws  (WebSocket)  \u2192 env.ROOMS.getByName(id).fetch(req)\n *   client \u2192 { "text": "hi" }            server \u2192 { type: "history", messages } on join,\n *                                                 { type: "message", message } to everyone,\n *                                                 { type: "presence", online } when people come and go\n *\n * WebSocket hibernation: the object sleeps between messages and the connections stay open, so an idle room\n * costs nothing. Its own SQLite (`ctx.storage.sql`) keeps the last 50 messages, replayed to whoever joins.\n * The same shape fits presence, live counters, a game table, a queue or a rate limit: one object per thing.\n */\nimport { DurableObject } from "cloudflare:workers";\n\nconst KEEP = 50;\n\nexport type RoomMessage = { id: number; name: string; text: string; at: number };\nexport type RoomEvent = { type: "history"; messages: RoomMessage[] } | { type: "message"; message: RoomMessage } | { type: "presence"; online: number };\n\nexport class Room extends DurableObject<unknown> {\n  constructor(ctx: DurableObjectState, env: unknown) {\n    super(ctx, env);\n    ctx.storage.sql.exec("CREATE TABLE IF NOT EXISTS messages (id INTEGER PRIMARY KEY AUTOINCREMENT, name TEXT NOT NULL, text TEXT NOT NULL, at INTEGER NOT NULL)");\n  }\n\n  async fetch(req: Request): Promise<Response> {\n    if (req.headers.get("upgrade") !== "websocket") return Response.json({ online: this.ctx.getWebSockets().length, messages: this.history() });\n    // Who is talking: the client says. Behind Sign in with Ambasada, pass the signed-in name from your route instead.\n    const name = (new URL(req.url).searchParams.get("name") ?? "").trim().slice(0, 40) || "guest";\n    const { 0: client, 1: server } = new WebSocketPair();\n    this.ctx.acceptWebSocket(server);\n    server.serializeAttachment({ name });\n    server.send(JSON.stringify({ type: "history", messages: this.history() } satisfies RoomEvent));\n    this.broadcast({ type: "presence", online: this.ctx.getWebSockets().length });\n    return new Response(null, { status: 101, webSocket: client });\n  }\n\n  async webSocketMessage(ws: WebSocket, data: string | ArrayBuffer): Promise<void> {\n    let text = "";\n    try {\n      text = String((JSON.parse(typeof data === "string" ? data : new TextDecoder().decode(data)) as { text?: unknown }).text ?? "").trim().slice(0, 2000);\n    } catch {\n      return;\n    }\n    if (!text) return;\n    const { name } = ws.deserializeAttachment() as { name: string };\n    const at = Date.now();\n    const { id } = this.ctx.storage.sql.exec<{ id: number }>("INSERT INTO messages (name, text, at) VALUES (?, ?, ?) RETURNING id", name, text, at).one();\n    this.ctx.storage.sql.exec("DELETE FROM messages WHERE id <= ?", id - KEEP);\n    this.broadcast({ type: "message", message: { id, name, text, at } });\n  }\n\n  async webSocketClose(ws: WebSocket, code: number, reason: string): Promise<void> {\n    try {\n      ws.close(code, reason);\n    } catch {\n      // already closed\n    }\n    this.broadcast({ type: "presence", online: this.ctx.getWebSockets().filter((s) => s !== ws).length });\n  }\n\n  private history(): RoomMessage[] {\n    return this.ctx.storage.sql.exec<RoomMessage>("SELECT id, name, text, at FROM messages ORDER BY id").toArray();\n  }\n\n  private broadcast(event: RoomEvent): void {\n    const text = JSON.stringify(event);\n    for (const ws of this.ctx.getWebSockets()) {\n      try {\n        ws.send(text);\n      } catch {\n        // a closing socket: webSocketClose cleans up\n      }\n    }\n  }\n}\n', "src/realtime/use-room.ts": '/**\n * `useRoom(id)`: a live room in a React component (src/realtime/room.ts on the server). Reconnects on its own.\n *\n *   const { messages, online, send, status } = useRoom("lobby", { name: "Ana" });\n */\n"use client";\nimport { useCallback, useEffect, useRef, useState } from "react";\n\nexport type RoomMessage = { id: number; name: string; text: string; at: number };\ntype RoomEvent = { type: "history"; messages: RoomMessage[] } | { type: "message"; message: RoomMessage } | { type: "presence"; online: number };\n\nexport function useRoom(id: string, options: { name?: string } = {}) {\n  const [messages, setMessages] = useState<RoomMessage[]>([]);\n  const [online, setOnline] = useState(0);\n  const [status, setStatus] = useState<"connecting" | "open" | "closed">("connecting");\n  const socket = useRef<WebSocket | null>(null);\n\n  useEffect(() => {\n    let stopped = false;\n    let retry: ReturnType<typeof setTimeout> | undefined;\n    let tries = 0;\n    const connect = () => {\n      const url = new URL(`/api/rooms/${encodeURIComponent(id)}/ws`, location.href);\n      url.protocol = url.protocol === "https:" ? "wss:" : "ws:";\n      if (options.name) url.searchParams.set("name", options.name);\n      const ws = new WebSocket(url);\n      socket.current = ws;\n      setStatus("connecting");\n      const timeout = setTimeout(() => ws.close(), 10_000); // no answer (e.g. `next dev`, which can\'t serve rooms): retry later\n      ws.onopen = () => {\n        clearTimeout(timeout);\n        tries = 0;\n        setStatus("open");\n      };\n      ws.onmessage = (e) => {\n        const event = JSON.parse(String(e.data)) as RoomEvent;\n        if (event.type === "history") setMessages(event.messages);\n        else if (event.type === "message") setMessages((m) => [...m.slice(-49), event.message]);\n        else setOnline(event.online);\n      };\n      ws.onclose = () => {\n        clearTimeout(timeout);\n        setStatus("closed");\n        if (!stopped) retry = setTimeout(connect, Math.min(30_000, 1000 * 2 ** tries++)); // back off; give up never\n      };\n    };\n    connect();\n    return () => {\n      stopped = true;\n      clearTimeout(retry);\n      socket.current?.close();\n    };\n  }, [id, options.name]);\n\n  const send = useCallback((text: string) => {\n    if (socket.current?.readyState !== WebSocket.OPEN) return false;\n    socket.current.send(JSON.stringify({ text }));\n    return true;\n  }, []);\n\n  return { messages, online, status, send };\n}\n', "tsconfig.json": '{\n  "compilerOptions": {\n    "target": "ES2022",\n    "lib": [\n      "DOM",\n      "DOM.Iterable",\n      "ES2022"\n    ],\n    "module": "ESNext",\n    "moduleResolution": "Bundler",\n    "jsx": "react-jsx",\n    "strict": true,\n    "noEmit": true,\n    "skipLibCheck": true,\n    "isolatedModules": true,\n    "allowImportingTsExtensions": true,\n    "resolveJsonModule": true,\n    "esModuleInterop": true,\n    "incremental": true,\n    "plugins": [\n      {\n        "name": "next"\n      }\n    ],\n    "allowJs": true\n  },\n  "include": [\n    "next-env.d.ts",\n    "**/*.ts",\n    "**/*.tsx",\n    ".next/types/**/*.ts",\n    ".next/dev/types/**/*.ts"\n  ],\n  "exclude": [\n    "node_modules",\n    ".open-next",\n    ".wrangler",\n    "worker.ts",\n    "src/realtime/room.ts",\n    "examples"\n  ]\n}\n', "tsconfig.worker.json": '{\n  // worker.ts and the Durable Objects run in workerd, not in Next.js: their types come from\n  // `wrangler types` (npm run typecheck writes them to node_modules/.worker-env.d.ts).\n  "compilerOptions": {\n    "target": "ES2022",\n    "lib": ["ES2022"],\n    "module": "ESNext",\n    "moduleResolution": "Bundler",\n    "strict": true,\n    "noEmit": true,\n    "skipLibCheck": true,\n    "isolatedModules": true,\n    "allowImportingTsExtensions": true,\n    "types": []\n  },\n  "files": ["node_modules/.worker-env.d.ts", "worker.ts", "src/realtime/room.ts"]\n}\n', "worker.ts": '/**\n * The Worker\'s entry (wrangler.jsonc `main`): the live rooms\' WebSockets, which Next.js can\'t answer\n * (/api/rooms/<id>/ws \u2192 src/realtime/room.ts), then everything else to the Next.js app OpenNext built.\n * Durable Object classes are exported from here.\n */\n// @ts-ignore: .open-next/worker.js is written by `opennextjs-cloudflare build`\nimport { default as nextApp } from "./.open-next/worker.js";\n\nexport { Room } from "./src/realtime/room.ts";\n\nexport default {\n  async fetch(req, env, ctx) {\n    const room = /^\\/api\\/rooms\\/([^/]+)\\/ws$/.exec(new URL(req.url).pathname);\n    if (room) return env.ROOMS.getByName(decodeURIComponent(room[1]!)).fetch(req);\n    return nextApp.fetch(req, env, ctx);\n  },\n} satisfies ExportedHandler<Env>;\n', "wrangler.jsonc": '{\n  "$schema": "node_modules/wrangler/config-schema.json",\n  // One Worker: worker.ts (live rooms, then the Next.js app built by OpenNext into .open-next/) plus static assets.\n  "name": "my-app",\n  "main": "worker.ts",\n  "compatibility_date": "2026-09-01",\n  "compatibility_flags": ["nodejs_compat"],\n  "assets": {\n    "directory": ".open-next/assets",\n    "binding": "ASSETS"\n  },\n  // Storage and realtime: env.DB (SQLite), env.KV, env.FILES and the live rooms (src/realtime/room.ts).\n  // No ids: wrangler keeps local copies in .wrangler/state; `ambasada deploy` attaches the app\'s real ones.\n  "d1_databases": [{ "binding": "DB", "database_name": "my-app", "migrations_dir": "db/migrations", "migrations_table": "_ambasada_migrations" }],\n  "kv_namespaces": [{ "binding": "KV" }],\n  "r2_buckets": [{ "binding": "FILES", "bucket_name": "my-app" }],\n  "durable_objects": { "bindings": [{ "name": "ROOMS", "class_name": "Room" }] },\n  // Every Durable Object class needs a migration; add new ones at the end, never edit or remove an applied tag.\n  "migrations": [{ "tag": "v1", "new_sqlite_classes": ["Room"] }],\n  "observability": { "enabled": true }\n}\n' }, spa: { ".claude/skills/ambasada-product/SKILL.md": "---\nname: ambasada-product\ndescription: Build an app on Ambasada and put it online. Use when the user wants to make an app, tool, game or website, start one with `npm create ambasada@latest`, run it with `ambasada dev`, publish it with `ambasada deploy` at <slug>.ambasada.dev, show it in the Ambasada app (mini app, notifications, sign-in), store data in the app's SQLite database, KV or file storage, make it realtime with Durable Objects or an agent (Agents SDK), bring a site built in ChatGPT, Lovable, Bolt or v0, or upgrade a project made with an older CLI (`ambasada upgrade`). Default stack: Next.js on Cloudflare.\n---\n\n# Build an app on Ambasada and put it online\n\nAn app is **one website** (one Cloudflare Worker) at `https://<your-slug>.ambasada.dev`. It comes with\nSign in with Ambasada (Ambasada ID), a SQLite database, key-value, file storage and Durable Objects for\nrealtime. If you want, it also gets a mini app inside the Ambasada app, with push notifications (off by default). No servers, no\nCloudflare account, no keys to configure.\n\n## Start\n\n```sh\nnpm create ambasada@latest my-app           # Next.js (default)\ncd my-app && npm install\nnpx ambasada dev                            # the mock API + your site, no login\n```\n\nOther templates: add `-- --template spa` (Vite + React; for code exported from Lovable or Bolt) or\n`-- --template worker` (plain HTML + small fetch handlers; the smallest possible app). All three have the\nsame `ambasada.config.ts`, sign-in routes, notifications webhook and storage helpers, and a notes example.\n\n## What to read\n\n| The user wants to\u2026 | Read |\n|---|---|\n| know where files go, what Next.js features are allowed, secrets, who is signed in | [reference/stack.md](reference/stack.md) |\n| store data (tables, migrations), sessions or caches, uploads; make it live between people (chat, presence, a shared board, counters); build an AI agent | [reference/storage.md](reference/storage.md) |\n| run it locally, put it online, use their own Cloudflare account | [reference/dev-and-deploy.md](reference/dev-and-deploy.md) |\n| make it look good and easy to use | [reference/design.md](reference/design.md) |\n| show up in the Ambasada app (optional: `npx ambasada miniapp enable`), send push notifications, sign people in inside the app | [reference/mini-app.md](reference/mini-app.md) |\n| build in ChatGPT, Lovable, Bolt or v0 and bring it here | [reference/build-elsewhere.md](reference/build-elsewhere.md) |\n| upgrade a project made with an older CLI | [reference/upgrading.md](reference/upgrading.md) |\n\nFor the Hack A Ton (TON payments, offerings, the agent that runs a shop): `npx ambasada add village`, then\nthe **ambasada-village** skill.\n\n## Rules (break one and the app does not work)\n\n1. **One app = one Worker.** No separate backend, no Docker. State lives in the app's SQLite (`env.DB`),\n   key-value (`env.KV`), file storage (`env.FILES`) or a Durable Object, never in module variables.\n   See [reference/storage.md](reference/storage.md).\n2. **Only the allowed Next.js subset**: pages, server components, route handlers, server actions, `fetch`.\n   No `next/image` default loader, no ISR/`revalidate`, no `fs`/`child_process`/native packages, no custom\n   server, no `middleware.ts`/`proxy.ts`, no `runtime = \"edge\"`. See [reference/stack.md](reference/stack.md#nextjs-allowed-and-banned).\n3. **Keys never reach the browser.** They live in `.env` locally and `ambasada env set` online; only server\n   code reads them. Never prefix one with `NEXT_PUBLIC_`.\n4. **Sign-in is Ambasada ID.** Use the template's `/api/auth/*` routes and `auth.user(req)`; don't add\n   Clerk, Auth.js or Supabase Auth, and don't build an accounts table. Key per-person data by `user.id`.\n5. **Tables change through migrations**: a new `db/migrations/NNNN_name.sql` per change, never edits to an\n   applied one; `npx ambasada db migrate` after deploying.\n\n## When the user is not a developer\n\nDo the work; don't ask them to edit code. Ask at most: what it does and for whom. Then build one page, run\n`npx ambasada dev`, open it, use it as the fake visitor, and show them it worked. Explain in one sentence\nper step, no jargon.\n", ".claude/skills/ambasada-product/reference/build-elsewhere.md": "# Built in ChatGPT, Lovable, Bolt or v0\n\nThree ways, easiest first.\n\n## A. Keep it hosted there, link it\n\nGood for: a site that is finished where it is and only needs to show up in the Ambasada app.\n\n1. On a laptop with Node 22+, once:\n\n   ```sh\n   npm create ambasada@latest my-app -- --miniapp --entry /   # its ambasada.config.ts and the manifest\n   cd my-app && npm install\n   npx ambasada login\n   npx ambasada link https://YOUR-SITE\n   ```\n\n2. The site must serve `/.well-known/ambasada.json` and `/icon.png` (copy them from the new project's\n   `public/`; `npx ambasada dev` writes the manifest there) and pass `npx ambasada check https://YOUR-SITE`\n   ([mini-app.md](mini-app.md)).\n\nLimit: Sign in with Ambasada, notifications and the app's database, KV and files come with hosting on\nambasada.dev. A site hosted elsewhere keeps its own backend; use B or C to get them.\n\n## B. Bring the code home (recommended for Lovable and Bolt)\n\nGood for: anything with real work behind it. You get hosting on ambasada.dev and the full rules.\n\n1. Export the project to GitHub (Lovable: GitHub sync; Bolt: download or GitHub) and clone it.\n2. `npm create ambasada@latest my-app -- --template spa` and copy the exported `src/` (components, pages,\n   styles) into the new project's `src/`, replacing the starter UI. Keep the template's `api/`, `lib/`,\n   `db/`, `ambasada.config.ts`, `wrangler.jsonc` and `vite.config.ts`.\n3. Open the project in Claude Code, Cursor or Codex and say:\n\n   > This is an Ambasada app (see .claude/skills/ambasada-product). Replace Supabase/Firebase with the\n   > app's env.DB (tables in db/migrations), env.KV and env.FILES, and any login with Sign in with Ambasada\n   > (api/auth.ts, /api/auth/me). Then run it with `npx ambasada dev`.\n\n4. `npx ambasada dev`, try it, then `npx ambasada deploy`.\n\n## C. ChatGPT (or any chat) writes the code, you paste it\n\n1. `npm create ambasada@latest my-app`, `cd my-app && npm install`, `npx ambasada dev`.\n2. Paste this into ChatGPT, then the files it mentions, then your idea:\n\n   > I have a Next.js 16 App Router project that runs on Cloudflare Workers (OpenNext). Rules: no `fs`, no\n   > native packages, no `next/image` (use `<img>`), no middleware, no `revalidate`, no other login than the\n   > one in `app/api/auth`. Data goes in SQLite through `lib/db.ts` (tables in `db/migrations/*.sql`), the\n   > signed-in person comes from `currentUser()` in `lib/ambasada.ts`. Below are my `app/page.tsx`,\n   > `app/api/notes/route.ts` and `db/migrations/0001_init.sql`. Rewrite them for my idea: the main action\n   > visible on a phone without scrolling. Write complete files, one code block per file, with the file path\n   > above each. My idea: \u2026\n\n3. Paste each file where ChatGPT says, keep `npx ambasada dev` running, check the page. New tables: a new\n   file in `db/migrations/` (never edit an applied one). When it works: `npx ambasada deploy` and\n   `npx ambasada db migrate`.\n\nUse ChatGPT to write files, not to decide the stack: if its answer adds Prisma, Supabase, NextAuth,\n`next/image` or a `middleware.ts`, tell it \"that's banned in my project, do it without\".\n", ".claude/skills/ambasada-product/reference/design.md": '# Design for people who decide in 10 seconds\n\nPeople open your app on a phone, often inside the Ambasada app, between two other things. They decide in\nseconds whether it is for them. Build for that.\n\n## One page, one action\n\n- **One page first.** What it is, and the one thing to do, fit on the first screen of a phone (375 \xD7 667).\n  Extra pages only when the action needs them.\n- **One action.** One button that does the main thing. Add a second only after people use the first.\n- **Few words.** A headline of up to 8 words, one sentence under it, the button. Cut every adjective you can.\n- **Show the result.** One example of what people get (an image, a sample text) beats any description.\n- **No walls.** No signup before the first use, no cookie banner, no tour. Ask for sign-in when the app\n  needs to remember someone (Sign in with Ambasada is one tap inside the Ambasada app).\n\n## The button\n\n- Label it with the action: **Make my poem**, not **Submit**.\n- Big (at least 48 px tall), full width on phones, one strong colour, nothing else in that colour.\n- If people must type something first, put that one field right above the button.\n- After the action, show the result, or "Working on it\u2026" and the result appearing when ready (a live room\n  or polling). Never a blank page.\n\n## Look\n\n- The templates use `@ambasada/ui` (the Ambasada app\'s look: tokens, `ui-card`, `ui-button`); start there\n  ([mini-app.md](mini-app.md)). Otherwise plain CSS: one font, two colours plus grey, generous spacing.\n- Large text: 18 px body on phones, a headline twice that. Light theme.\n- Works with one thumb: tap targets 48 px, no hover-only menus.\n- Loads fast: no video backgrounds, no 3 MB hero images, no animation libraries.\n\n## Words\n\n- Say what they get, not how it works. "A logo in 1 minute", not "AI-powered logo generation".\n- Write in the language of your users; one is fine.\n\n## Before and after\n\n```\nBad:  Welcome to PoemForge\u2122, the next-generation AI-powered creative writing platform\n      [Features] [Pricing] [About] [Sign up]   \u2026scroll\u2026   [Get started]\n\nGood: Your name as a folk poem\n      Type a name. Get a 4-line Romanian folk poem in 10 seconds.\n      [ Name: _________ ]\n      [   Make my poem   ]\n      "Ana, floare de la munte, / \u2026"  \u2190 one real example\n```\n', ".claude/skills/ambasada-product/reference/dev-and-deploy.md": "# Run it, put it online\n\n## `ambasada dev`: everything on your laptop\n\n```sh\nnpx ambasada dev\n```\n\nStarts two things:\n\n1. a **mock Ambasada API** on `http://127.0.0.1:8788`: same routes and signatures as the real one. Sign in\n   with Ambasada signs you in as \"Fake Visitor\"; `apps.notify` lands in a fake hub; `ambasada.store` and\n   `ambasada.files` work in memory. Open it in a browser for a page with what happened.\n2. **your site** with its normal dev server (`next dev`, `vite` or `wrangler dev`), pointed at the mock.\n\nNo login. The app's database, KV, files and Durable Objects run locally too (wrangler, `.wrangler/state`);\n`ambasada dev` applies `db/migrations/` to the local database before it starts the site.\n\nTry it: open your site, sign in, add a note. With the mini app on, `http://localhost:3000/app?ambasada_shell=mock`\n(your `miniapp.entry`) pretends to be inside the Ambasada app (host bar insets, silent sign-in).\n\n`npx ambasada dev --mock-only` starts only the mock, if you run your site yourself. The mock's keys:\n`AMBASADA_API_URL=http://127.0.0.1:8788`, `AMBASADA_API_KEY=sk_test_dev` (already in the project's `.env`).\n\n## `ambasada deploy`: online at `<slug>.ambasada.dev`\n\nOnce, per laptop:\n\n```sh\nnpx ambasada login        # opens a page: sign in with Ambasada ID\n```\n\n(If it asks for a key instead: https://developer.ambasada.dev \u2192 your app \u2192 a project key, `vk_\u2026`.)\n\nThen, every time you want the new version online:\n\n```sh\nnpx ambasada deploy\n```\n\nIt does, in order:\n\n1. **build**: `opennextjs-cloudflare build` (Next), `vite build` (spa) or a bundle of the Worker (worker);\n2. **smoke test**: runs the built Worker locally in workerd and requests `/` and `/.well-known/ambasada.json`\n   (written from `ambasada.config.ts` first, when the mini app is on: [mini-app.md](mini-app.md));\n   a crash stops the deploy (skip with `--no-smoke` only if you know why it fails);\n3. **upload**: the URL is `https://<your-slug>.ambasada.dev`, with `AMBASADA_API_KEY`, `AMBASADA_API_URL`,\n   Sign in with Ambasada and the app secret set for you, and the app's own database, KV namespace and bucket\n   bound as `DB`, `KV`, `FILES` (created on the first deploy) plus the Durable Objects from `wrangler.jsonc`.\n\nThe database's tables are not created by the deploy: run `npx ambasada db migrate` (it applies the new files\nin `db/migrations/`). No Cloudflare account needed. `--dry-run` builds and prints what it would upload.\n\nYour own secrets (an API key for another service): `npx ambasada env set NAME value` (live within about 30 s, and on\nevery deploy); `npx ambasada env list` shows the names.\n\nLimits: 10 MB compressed bundle, 1000 static files, short CPU time per request (waiting on `fetch` does not\ncount). Heavy work belongs in an API you call, or a Durable Object, not in one request.\n\n## `ambasada dev --tunnel`: your laptop, live\n\nWhen the Ambasada app, sign-in or webhooks need to reach the version on your laptop (before deploying, or to\ndebug), log in once, then:\n\n```sh\nnpx ambasada dev --tunnel         # your dev server, against the real API, at https://<slug>-dev.ambasada.dev\nnpx ambasada tunnel --port 5173   # or: only the tunnel, for a server you started yourself\n```\n\nUntil Ctrl+C, `https://<slug>-dev.ambasada.dev` is your app's URL. There is no mock in this mode. The first\ntime takes up to 2 minutes while the address is published; after that it is instant. Only one terminal per\napp at a time: `--force` takes it over. More: docs/TUNNEL.md.\n\n## `ambasada deploy --own`: your own Cloudflare account\n\nRuns `wrangler deploy` into your account (you need `npx wrangler login` first), then\n`ambasada link <your workers.dev URL>`. Set the secrets yourself: `npx wrangler secret put AMBASADA_API_KEY`.\n\n## `ambasada link`: the app is hosted somewhere else\n\n```sh\nnpx ambasada link https://my-thing.lovable.app\n```\n\nSets `product.url` in `ambasada.config.ts` and checks that `<url>/health` answers. Use it for Lovable, Bolt,\nv0, Vercel, your own server. See [build-elsewhere.md](build-elsewhere.md).\n\n## Watch it run\n\n```sh\nnpx ambasada logs --follow     # the last deploy and new errors\nnpx ambasada check https://<slug>.ambasada.dev   # https, no redirects, speed; the mini-app rules when it is on\n```\n\nThe Developer app (https://developer.ambasada.dev) has deploys, errors, users and the storage tabs.\n\n## Upgrading\n\nA new devkit: `npx ambasada upgrade` (dependencies, skills, mechanical code changes), then\n[upgrading.md](upgrading.md) for the steps a coding agent does.\n\n## When it goes wrong\n\n| Symptom | Fix |\n|---|---|\n| build fails on `fs`, `child_process`, a `.node` file, `sharp` | a banned package: see [stack.md](stack.md#nextjs-allowed-and-banned) |\n| smoke test: `/` answers 500 | open `npx ambasada dev`, load `/`, read the terminal error |\n| `no such table: \u2026` online | `npx ambasada db migrate` |\n| a Durable Object migration is refused on deploy | never edit or remove a deployed tag in `wrangler.jsonc`'s `migrations`; add the next one ([storage.md](storage.md)) |\n| `CONFIG: no API key` | missing `AMBASADA_API_KEY`: `.env` locally, `ambasada login` before deploying |\n| sign-in loops back to the login page | `PUBLIC_URL` differs from the URL in the browser; remove it or fix it |\n| `this app uses the village \u2026 not installed` | a Hack A Ton project: `npx ambasada upgrade` (adds `@ambasada/village`) |\n", ".claude/skills/ambasada-product/reference/mini-app.md": '# The app inside the Ambasada app (mini app)\n\n**Optional, opt in with `npx ambasada miniapp enable`** (or `npm create ambasada@latest my-app -- --miniapp`). An app\nis a website first; most stay that way. The mini app is one more surface of it, at a path: what the Ambasada mobile\napp opens, with silent sign-in and push notifications. Platform spec: docs/MINI-APPS.md (\xA715, decision 15.6).\n\n## Turn it on\n\n```sh\nnpx ambasada miniapp enable              # at /app; --entry /in-app for another path, --entry / for the whole site\nnpx ambasada miniapp                     # on or off, and the entry\n```\n\nIt adds:\n\n| | |\n|---|---|\n| `miniapp: { entry: "/app" }` | `ambasada.config.ts`; optional `icon`, `category`, `accent`, `scopes`, `visibility` next to `entry` |\n| the in-app layout and page, no site header | `app/app/` (Next), `src/in-app/InApp.tsx` rendered by `src/main.tsx` (spa), `web/app.html` (worker) |\n| `ready()` and silent sign-in | `app/app/in-app.tsx`, `src/in-app/shell.ts`, `web/in-app.js`; with `--entry /` hooked into the root layout instead |\n| a placeholder icon, 1024\xD71024 | `public/icon.png` (`web/icon.png`): replace it, keep it square and opaque |\n| `@ambasada/miniapp` | `package.json` (Next, spa): run `npm install` |\n\nThe manifest, `/.well-known/ambasada.json`, is not a file you keep: `ambasada dev` and `ambasada deploy` write it\nfrom `ambasada.config.ts` (id, name, description, `miniapp`) into `public/` (`web/`), and `.gitignore` leaves it out.\nTo write it by hand, put your own there and drop that `.gitignore` line: yours wins. Without `miniapp`, nothing is\nserved, `ambasada check` says "mini app: off" and the deploy does not register the app with the Ambasada app.\n\n## Is it listed?\n\n`ambasada deploy` registers the app with the Ambasada hub only when it serves the manifest, then checks it. It prints:\n\n```\n\u2713 in the Ambasada app: Listed for the event\n! in the Ambasada app: Unlisted \xB7 needs: icon, viewport\n  mini app: off, not in the Ambasada app (`ambasada miniapp enable` adds one)\n```\n\nUnlisted apps work, but only you see them in the Ambasada app. Fix what `needs` says and deploy again,\nor run `npx ambasada check https://<slug>.ambasada.dev` (or `npx ambasada check` for the local folder).\nThe checks: `/.well-known/ambasada.json` valid, `icon.png` a 1024\xD71024 PNG with no transparency, the entry page\nhas `<meta name="viewport" content="width=device-width, initial-scale=1">`, no dark-only theme, it answers in under\n3 s without a redirect, `/api/auth/callback` exists, the notifications webhook answers a signed ping. With the mini\napp off, only https, no redirects and the response time of `/`.\nConnected tools can do the same through MCP: `app_status`, `app_check`.\n\n## Look like the app: @ambasada/ui\n\nThe templates import `@ambasada/ui` (tokens, Inter + JetBrains Mono, `ui-card`, `ui-button`, `ui-row`,\n`ui-pill`, `ui-sheet`, `ui-stepper`, `ui-empty`, `ui-skeleton`). Use those classes before writing CSS.\nReact: `import { Card, Button, Sheet } from "@ambasada/ui/react"`. Plain HTML: one\n`<link rel="stylesheet" href="https://unpkg.com/@ambasada/ui@0.8/dist/ambasada-ui.css">`.\nLeave space for the app\'s bar: the page uses `--ambasada-safe-area-*` and `--ambasada-host-bar`.\nLight theme only; one red (primary) button per screen.\n\n## Notifications\n\nAlready wired in every template; they work once the mini app is on:\n\n| Piece | Where |\n|---|---|\n| manifest: `"scopes": ["identity", "notifications"]`, `"notifications": { "webhook": "/api/ambasada/webhook" }`, `"privacy_url": "/privacy"` | generated from `ambasada.config.ts` (the defaults; `miniapp.scopes` to change them) |\n| the webhook: verifies the hub\'s signature, saves `token \u2194 Ambasada user id` in `ambasada.store` | `app/api/ambasada/webhook/route.ts` (Next), `api/ambasada-webhook.ts` (spa, worker) |\n| `notifyUser(app, userId, { \u2026 })`: push to one person if they turned notifications on | `lib/notifications.ts` |\n| the privacy page the scopes need | `app/(site)/privacy/page.tsx`, `public/privacy.html`, `web/privacy.html` |\n\nSend one when something the person waits for happens (their order is ready), never as marketing:\n\n```ts\nimport { notifyUser } from "../lib/notifications.ts";\n\nconst user = await ambasada().auth.user(req);            // signed in with Ambasada\nif (user) await notifyUser(ambasada(), user.id, {\n  notification_id: `order-${id}-ready`,                  // unique per message; repeats are dropped for 24 h\n  title: "Your translation is ready",                    // \u2264 40 characters\n  body: "Tap to read it.",                               // \u2264 140\n  url: `/orders/${id}`,                                  // a path on your site: where the tap opens\n});\n```\n\nPeople turn notifications on in the app (the app asks; the page can ask too with\n`notifications.request()` from `@ambasada/miniapp`, from a button). The secret (`AMBASADA_APP_SECRET`) is\ninjected by `ambasada deploy`; never put it in the browser.\n\n## Signed in without a consent screen\n\nInside the Ambasada app the page signs in silently: `auth.signIn()` from `@ambasada/miniapp` gets a short\ntoken from the app and POSTs it to `/api/auth/shell`, which sets the same session as "Sign in with\nAmbasada". Server code doesn\'t change: `currentUser()` / `ambasada().auth.user(req)` work either way.\nOn the web, the button and consent screen stay. Silent sign-in needs the app to be Verified; until then\n`signIn()` resolves `null` and the button shows.\n\n## Try it locally\n\n`npx ambasada dev` plays the hub (with the mini app on): when your app starts it sends a signed `ping` and\n`notifications_enabled` to your webhook (the token lands in the store as\n`ambasada/notifications/user_fake_visitor`), and its `/api/apps/notify` accepts pushes for that token\n(they show in the terminal). Open `http://localhost:3000/app?ambasada_shell=mock` (your entry) to pretend to be\ninside the app: the fake shell signs you in silently as "Fake Visitor".\n', ".claude/skills/ambasada-product/reference/stack.md": '# The stack: Next.js on Cloudflare\n\nEvery Ambasada app is one Cloudflare Worker. The default template builds it from **Next.js 16.4**\nwith **@opennextjs/cloudflare 1.20** (the OpenNext adapter) and the `nodejs_compat` flag. You write a\nnormal Next.js App Router app; `ambasada deploy` turns it into a Worker.\n\n## Folder layout (template `next`)\n\n```\nmy-app/\n  app/layout.tsx               <html>, the Ambasada look (@ambasada/ui) and globals.css\n  app/(site)/layout.tsx        the site\'s header (app/account.tsx) around its pages; (site) is not in the URL\n  app/(site)/page.tsx          the landing page\n  app/notes.tsx                the notes example (a client component calling app/api/notes)\n  app/api/notes/route.ts       rows in env.DB, the list cached in env.KV\n  app/api/files/route.ts       uploads to env.FILES; app/files/[...key]/route.ts serves them\n  app/api/auth/*/route.ts      Sign in with Ambasada: login, callback, logout, me, shell (silent, in the app)\n  app/api/ambasada/webhook/    the Ambasada app\'s events: who turned notifications on (reference/mini-app.md)\n  app/account.tsx              the header: "Sign in with Ambasada", or the person\'s name and avatar\n  app/(site)/privacy/page.tsx  what you keep about people (the mini app\'s privacy_url)\n  app/(site)/room/             the live room demo\n  app/app/                     the mini app, once on (`ambasada miniapp enable`): its layout, page and in-app.tsx\n  lib/ambasada.ts              the Ambasada client for server code (reads the Worker env)\n  lib/notifications.ts         notifyUser(): a push to one person who turned notifications on\n  lib/db.ts, kv.ts, files.ts   env.DB, env.KV, env.FILES (reference/storage.md); lib/bindings.ts reaches them\n  db/migrations/               the database\'s tables, one .sql file per change\n  src/realtime/                the live room (a Durable Object) and its React hook\n  ambasada.config.ts           app id, name, one-line description, product URL, `miniapp` (optional)\n  wrangler.jsonc               Worker settings (nodejs_compat, assets) and the bindings DB, KV, FILES, ROOMS\n  worker.ts                    the Worker entry: live rooms\' WebSockets, then the Next.js app\n  open-next.config.ts          OpenNext settings; leave as is\n  .env                         secrets for local runs (never commit, never send to the browser)\n  .ambasada/project.json       the template and devkit version (`ambasada upgrade` reads it); commit it\n  .claude/skills/              this skill\n```\n\nOne more endpoint = one more `app/api/<name>/route.ts`. Data it keeps goes in `env.DB` (a migration in\n`db/migrations/`), `env.KV` or `env.FILES` ([storage.md](storage.md)).\n\n## Using the client\n\nServer code only (route handlers, server components, server actions):\n\n```ts\n// app/api/hello/route.ts\nimport { ambasada } from "../../../lib/ambasada.ts";\n\nexport async function GET(req: Request) {\n  const user = await ambasada().auth.user(req);\n  return Response.json({ hello: user?.name ?? "stranger" });\n}\n```\n\n`lib/ambasada.ts` creates one client per Worker instance with `createAmbasada({ env })` from `@ambasada/sdk`,\nwhere `env` comes from `getCloudflareContext()` (deployed); under `next dev` the SDK reads `process.env`.\nIt reads `AMBASADA_API_KEY` and `AMBASADA_API_URL` (default https://api.ambasada.dev). The client has `auth`\n(below), `apps` (notifications, [mini-app.md](mini-app.md)), `store` and `files`.\n\n## Who is signed in\n\nEvery hosted app gets **Sign in with Ambasada** (Ambasada ID) for free: no keys, no settings.\nThe template\'s header already has the button. In server code:\n\n```ts\nimport { currentUser } from "../lib/ambasada.ts";\nimport { bindings } from "../lib/bindings.ts";\nimport { run } from "../lib/db.ts";\n\nconst user = await currentUser(); // null, or { id, name, avatar_url, builder, pass, member_since, \u2026 }\nif (!user) redirect("/api/auth/login?returnTo=/orders");\nawait run(bindings().DB, "INSERT INTO orders (user_id, item) VALUES (?, ?)", user.id, item); // key per-person data by user.id\n```\n\nIn a route handler, `ambasada().auth.user(req)` does the same. Client components fetch `/api/auth/me`.\nAsk for the email only if you need it: `/api/auth/login` calls `auth.login(req, { email: true })`.\nDon\'t build your own login or accounts table, and don\'t add Clerk, Auth.js or Supabase Auth.\n\n## Next.js: allowed and banned\n\nAllowed, and enough for any product here:\n\n- pages and layouts (`app/**/page.tsx`, `layout.tsx`), server components, client components (`"use client"`)\n- route handlers (`app/api/**/route.ts`), server actions (`"use server"`)\n- `fetch` to any HTTPS API, `next/link`, `next/font`, plain CSS / CSS modules / Tailwind\n\nBanned (they fail on Workers or break the deploy):\n\n| Don\'t | Do instead |\n|---|---|\n| `next/image` with the default loader | `<img>`, or `images: { unoptimized: true }` in `next.config.ts` |\n| ISR, `export const revalidate = \u2026`, `revalidatePath`, `unstable_cache` | render on each request (`export const dynamic = "force-dynamic"`), or cache results in `env.KV` |\n| `fs`, `child_process`, `sharp`, `bcrypt`, `sqlite3`, `puppeteer`, any native package | `fetch` an API (an LLM provider with your own key in a secret, for example) |\n| a custom server (`server.js`, Express inside Next) | route handlers |\n| `middleware.ts` / `proxy.ts`, `export const runtime = "edge"` | check inside the page or route handler; Next\'s default runtime is right |\n| Prisma, Drizzle with a database, Supabase, Firebase, Mongo, Redis | `env.DB` (SQLite), `env.KV`, `env.FILES` ([storage.md](storage.md)) |\n| writing files at runtime, global variables as storage | `env.DB`, `env.KV`, `env.FILES` or a Durable Object (each request can run on a different machine) |\n\nKeep the bundle small: the Worker limit is 10 MB compressed. Big UI kits and icon packs are the usual cause.\n\n## Where data lives\n\nThe app has its own SQLite database (`env.DB`), key-value (`env.KV`), file storage (`env.FILES`, public at\n`/files/<key>`) and Durable Objects for live state, created at the first deploy. Which one fits, the migrations\nworkflow and copy-paste patterns: [storage.md](storage.md).\n\nAlso there, for small things: `ambasada.store` (JSON, 1 MB for the whole app: settings, not user data) and\n`ambasada.files.put(\u2026)` \u2192 `{ url }` (platform-hosted files that expire).\n\n## Secrets\n\n- Local: `.env` in the project (Cloudflare\'s `.dev.vars` works too). The template writes it with test\n  values for `ambasada dev`. Both are in `.gitignore`; keep them there.\n- Deployed: `ambasada deploy` injects `AMBASADA_API_KEY`, `AMBASADA_API_URL`, the Sign in with Ambasada\n  credentials (`AMBASADA_AUTH_*`) and the mini-app secret (`AMBASADA_APP_SECRET`, with `AMBASADA_HUB_URL`\n  and `AMBASADA_APP_ORIGIN`) for you. With `--own`, set them yourself: `npx wrangler secret put AMBASADA_API_KEY`.\n- Other services\' keys (an OpenAI key, say): `.env` locally, `npx ambasada env set OPENAI_API_KEY \u2026` online;\n  read on the server only.\n- Anything named `NEXT_PUBLIC_*` is copied into the browser. Never put a key there.\n- Never paste a key into a page, a client component, a prompt for a no-code builder, or a commit.\n\n## Variants\n\n- `spa`: Vite + React with `@cloudflare/vite-plugin`, for code exported from Lovable or Bolt. The\n  `api/` endpoints are small fetch handlers; the React app calls them with `fetch("/api/\u2026")`.\n- `worker`: `web/` (plain HTML/CSS) plus `api/*.ts` fetch handlers. Best when the app is a page or two.\n\nThe rules on this page (state, secrets, no native packages) apply to all three.\n', ".claude/skills/ambasada-product/reference/storage.md": '# Data, files and realtime\n\nEvery app on ambasada.dev gets a real database, key-value, file storage and Durable Objects. They are created\nat the first `ambasada deploy` and bound to the Worker on every deploy; nothing to sign up for or configure.\nLocally (`ambasada dev`, `wrangler dev`, `vite`) wrangler runs the same things from `.wrangler/state`.\n\n| Need | Use | Not |\n|---|---|---|\n| anything with rows: users\' data, orders, posts, scores, anything you query, sort or join | `env.DB` (SQLite, D1) | KV, files, `ambasada.store` |\n| sessions, caches of slow results, feature flags, "seen this already" | `env.KV` | a table you scan |\n| uploads, images, audio, PDFs, generated files | `env.FILES` (R2), public at `/files/<key>` | base64 in the database |\n| state several people see change live: chat, presence, a shared board, a game table, live counters, a queue, rate limits, one thing per entity | a Durable Object (`env.ROOMS` in the templates) | polling the database |\n| an AI agent with memory, schedules and live state per user or task | the Agents SDK (`examples/agent/`) | a cron that rereads everything |\n| a few small settings for a tiny app | `ambasada.store` (1 MB per app) | user data of any size |\n\nQuotas per app: database 500 MB, KV 1 GB, files 5 GB. A database over its quota stops the next deploy.\n\n## `env.DB`: SQLite\n\nSchema lives in `db/migrations/`, one file per change, applied in name order, never edited once applied:\n\n```sql\n-- db/migrations/0002_orders.sql\nCREATE TABLE orders (\n  id INTEGER PRIMARY KEY AUTOINCREMENT,\n  user_id TEXT NOT NULL,\n  item TEXT NOT NULL,\n  paid INTEGER NOT NULL DEFAULT 0,\n  created_at INTEGER NOT NULL\n);\nCREATE INDEX orders_user ON orders (user_id, created_at);\n```\n\n```sh\nnpx wrangler d1 migrations apply DB --local   # the local database, for ambasada dev\nnpx ambasada db migrate                       # the app\'s database online (run before or right after deploying)\nnpx ambasada db shell "SELECT * FROM orders LIMIT 5"\n```\n\nQuery with `lib/db.ts` (SQL with `?` placeholders, typed rows, no ORM):\n\n```ts\nimport { all, batch, first, run } from "../lib/db.ts";\n\ntype Order = { id: number; user_id: string; item: string; paid: number; created_at: number };\nconst mine = await all<Order>(env.DB, "SELECT * FROM orders WHERE user_id = ? ORDER BY created_at DESC LIMIT 50", user.id);\nconst one = await first<Order>(env.DB, "SELECT * FROM orders WHERE id = ?", id);\nconst { lastRowId } = await run(env.DB, "INSERT INTO orders (user_id, item, created_at) VALUES (?, ?, ?)", user.id, item, Date.now());\nawait batch(env.DB, [["UPDATE stock SET n = n - 1 WHERE item = ?", item], ["UPDATE orders SET paid = 1 WHERE id = ?", id]]); // all or nothing\n```\n\nIn Next.js route handlers and server components, the bindings come from `bindings()` (`lib/bindings.ts`):\n`const { DB } = bindings();`. In the spa and worker templates, handlers get `env`.\n\nRules: always placeholders, never string-built SQL. Key per-person rows by the Ambasada user id\n(`auth.user(req).id`). Add an index for every `WHERE` you run often. Times as `Date.now()` integers.\n\n## `env.KV`: sessions, caches, flags\n\nReads are fast everywhere; a write shows up everywhere within about a minute; one write per second per key.\n\n```ts\nimport { cached, getJson, putJson } from "../lib/kv.ts";\n\nawait putJson(env.KV, `session:${id}`, { userId }, { ttl: 60 * 60 * 24 });\nconst session = await getJson<{ userId: string }>(env.KV, `session:${id}`);\nconst stats = await cached(env.KV, "home:stats", 300, () => computeStats(env)); // recompute at most every 5 min\n```\n\nNot for counters, balances or anything two people write at once: use `env.DB` (a transaction) or a Durable Object.\n\n## `env.FILES`: uploads and generated files\n\n```ts\nimport { serveFile, upload } from "../lib/files.ts";\n\n// POST /api/files: a signed-in person uploads (the templates\' api/files.ts)\nconst { key, url } = await upload(env.FILES, req.body, { contentType: req.headers.get("content-type") ?? undefined, folder: `u/${user.id}` });\nawait run(env.DB, "INSERT INTO photos (user_id, file_key) VALUES (?, ?)", user.id, key); // keep the key, not the bytes\n\n// GET /files/*: already wired in every template, with ETag, ranges and cache headers\nreturn serveFile(env.FILES, req);\n```\n\n`url` is `/files/<key>` on the app (`https://<slug>.ambasada.dev/files/<key>`): public to anyone with the link.\nPrivate files: store them under a key nobody can guess and serve them from your own route that checks\n`auth.user(req)` first, instead of `/files/*`. `npx ambasada files list | put | url | delete` from the terminal.\n\n## Durable Objects: realtime and per-entity state\n\nA Durable Object is one tiny server per id (a room, a document, a match, a user) with its own SQLite, that\nevery request for that id reaches. Use one whenever people must see each other\'s changes live, or one thing\nmust never be updated by two requests at once. The templates ship `src/realtime/room.ts` (`env.ROOMS`):\n\n```ts\n// the Worker: /api/rooms/<id>/ws \u2192 the room\nconst room = /^\\/api\\/rooms\\/([^/]+)\\/ws$/.exec(pathname);\nif (room) return env.ROOMS.getByName(decodeURIComponent(room[1]!)).fetch(req);\n```\n\n```ts\n// the room (shortened): WebSocket hibernation, broadcast, its own SQLite\nexport class Room extends DurableObject<unknown> {\n  async fetch(req: Request) {\n    const { 0: client, 1: server } = new WebSocketPair();\n    this.ctx.acceptWebSocket(server);              // hibernation: no cost while nobody talks\n    server.serializeAttachment({ name: "guest" }); // per-connection data that survives hibernation\n    return new Response(null, { status: 101, webSocket: client });\n  }\n  async webSocketMessage(ws: WebSocket, data: string | ArrayBuffer) {\n    this.ctx.storage.sql.exec("INSERT INTO messages (text, at) VALUES (?, ?)", String(data), Date.now());\n    for (const peer of this.ctx.getWebSockets()) peer.send(String(data)); // everyone in the room\n  }\n}\n```\n\n```tsx\n// the browser (React): src/realtime/use-room.ts\nconst { messages, online, send, status } = useRoom(roomId, { name: user.name });\n```\n\nA new class needs a binding and a migration in `wrangler.jsonc` (new tags go at the end; never edit or remove one\nthat was deployed; to drop a class add `{ "tag": "v3", "deleted_classes": ["Old"] }`):\n\n```jsonc\n"durable_objects": { "bindings": [{ "name": "ROOMS", "class_name": "Room" }, { "name": "BOARDS", "class_name": "Board" }] },\n"migrations": [{ "tag": "v1", "new_sqlite_classes": ["Room"] }, { "tag": "v2", "new_sqlite_classes": ["Board"] }]\n```\n\nExport the class from the Worker\'s entry (`src/worker.ts`; spa `worker/index.ts`; next `worker.ts`).\nOther shapes, same pattern: presence (who is online), a live counter (`UPDATE \u2026 RETURNING`, then broadcast), a\nper-user rate limit (`getByName(user.id)`), a job queue (`this.ctx.storage.setAlarm`). A Durable Object belongs\nto this app; other apps can\'t reach it. Under `next dev` they don\'t run: use `npm run preview` (workerd).\n\n## Agents (Agents SDK)\n\nFor agentic products (an assistant per user, a research task that runs for minutes, a bot that follows up),\nuse the Cloudflare Agents SDK: `examples/agent/` in the template (`npm i agents`, four lines to wire). An agent\nis a Durable Object with live state synced to clients (`setState`, `useAgent` in React), `this.sql`,\n`this.schedule(\u2026)` and WebSockets. One agent per user or task: `/agents/agent-example/<user id>`.\n\n## Don\'t\n\n- Poll (`setInterval(fetch\u2026)`) for what others changed: a Durable Object + WebSocket pushes it.\n- Put files or base64 in the database or KV: `env.FILES`, and keep the key in a row.\n- Keep user data in `ambasada.store`: it is 1 MB for the whole app.\n- Keep state in module variables or global objects: every request may run on another machine.\n- Count, rank or move money in KV: use a SQL transaction (`batch`) or a Durable Object.\n- Build SQL by joining strings with user input: `?` placeholders.\n- Edit an applied migration: add the next file.\n- Add Prisma, Drizzle with Postgres, Supabase, Firebase, Mongo or Redis: everything above is already here.\n', ".claude/skills/ambasada-product/reference/upgrading.md": "# Upgrading a project\n\n`npx ambasada upgrade` does the mechanical part: every `@ambasada/*` dependency to the CLI's version, the\npackage manager, `.claude/skills/ambasada-*` re-synced (the project's own skills are left alone), the code\nchanges listed below as \"done by `upgrade`\", the `ambasada check` rules, and `.ambasada/project.json`\n(the template and devkit version). `npx ambasada upgrade --check` only reports.\n\nWhat is left is below, per version, for a coding agent. Do the steps for every version between the one in\n`.ambasada/project.json` (none: 0.7) and the current one, in order. After each, run the app with\n`npx ambasada dev` and the project's `typecheck` script.\n\n## 0.7 \u2192 0.8: the platform and the village split\n\n0.8 splits the devkit: `@ambasada/sdk` and `ambasada` are the platform (sign-in, notifications, storage,\nhosting); the Hack A Ton economy (TON, checkout, offerings, the agent) is the add-on `@ambasada/village`.\n\nDone by `upgrade`:\n\n- the village names (`village`, `createVillage`, `offering`, `defineCompany`, `isVillageError`, the receipt and\n  webhook helpers, their types) import from `@ambasada/village`; in a village app `createAmbasada` became\n  `createVillage` and `DEFAULT_API_URL` became `DEFAULT_VILLAGE_API_URL` (their 0.7 meaning);\n- `@ambasada/village` added to `package.json` when the app has `offerings.ts` or an `idea`;\n- `.env` / `.dev.vars`: `AMBASADA_API_URL=https://hackaton.ambasada.id` became `https://api.ambasada.dev` plus\n  `AMBASADA_VILLAGE_API_URL=https://hackaton.ambasada.id`;\n- the `ambasada-payments` skill replaced by `ambasada-village`.\n\nFor the agent:\n\n1. **Platform code uses the platform client.** Files that only sign people in, send notifications or use\n   `store`/`files` can import `createAmbasada` / `ambasada` from `@ambasada/sdk` instead of the village client.\n   Leave files that sell, check receipts or call `llm` on the village client.\n2. **Config.** `ambasada.config.ts` may stay `defineCompany({ id, name, idea, \u2026 })`; the 0.8 form is\n   `defineCompany(defineApp({ id, name, description, product }), { idea, offerings, agent })` with\n   `defineApp` from `@ambasada/sdk`. Add a one-line `description` (the manifest's subtitle).\n3. **CLI calls.** In scripts, READMEs and `package.json`: `ambasada wallet|ledger|offerings|market|steer|webhook|links`\n   \u2192 `ambasada village \u2026`, `ambasada logs --agent` \u2192 `ambasada village logs --agent`, `ambasada dev buy` \u2192\n   `ambasada village dev buy`. The old spellings still work through 1.x with a warning.\n4. **Pages that load pay.js** from `AMBASADA_API_URL` should use the village client's `apiUrl` (or\n   `AMBASADA_VILLAGE_API_URL`): `AMBASADA_API_URL` is the platform's from 0.8.\n5. **Login.** The CLI's login moved from `~/.config/village` to `~/.config/ambasada` (moved on first use);\n   nothing to do unless a script reads that file.\n6. Run `npx ambasada check`, `npx ambasada dev` and the typecheck; deploy when they pass.\n", "README.md": "# My App\n\nAn app on Ambasada, Vite + React on one Cloudflare Worker (template `spa`): sign-in with Ambasada ID, a database,\nkey-value, files and live rooms; a mini app inside the Ambasada app if you want one. Everything here is a default;\nchange anything.\n\n```\nambasada.config.ts          id, name, one-line description, where the app runs\nsrc/                        the React app (drop a Lovable/Bolt export here); src/App.tsx has the header and the notes example\nworker/index.ts             the Worker: /api/<name> \u2192 api/<name>.ts, everything else is the app\napi/auth.ts                 Sign in with Ambasada (login, callback, logout, me, shell)\napi/ambasada-webhook.ts     the Ambasada app's events (notifications on/off); lib/notifications.ts sends pushes\napi/notes.ts, api/files.ts  env.DB + env.KV, uploads to env.FILES\nlib/ambasada.ts             the SDK client from the Worker's env\nlib/db.ts, kv.ts, files.ts  env.DB, env.KV, env.FILES; db/migrations/ the tables\nsrc/realtime/               the live room (a Durable Object) and its React hook\nvite.config.ts, wrangler.jsonc   @cloudflare/vite-plugin: `vite` runs the app and the Worker together\n.claude/skills/             docs your coding agent reads (ambasada-product)\n```\n\n## 1. Run it (2 min)\n\nNeeds Node \u2265 22.\n\n```sh\nnpm install\nnpm run dev                # `ambasada dev`: the mock Ambasada API on :8788 + `vite` on http://localhost:3000\n```\n\nOpen http://localhost:3000: add a note, sign in (the mock signs you in as \"Fake Visitor\"), open /room in two tabs.\nhttp://127.0.0.1:8788 is the mock's page (sign-ins, notifications, the store). `ambasada dev` points your app at the\nmock whatever `.env` says.\n\n## 2. Make it yours\n\n- `ambasada.config.ts`: name and description.\n- A new endpoint: `api/<name>.ts` (and a line in `worker/index.ts`). Data goes in `env.DB` (a migration in `db/migrations/`), `env.KV` or `env.FILES`.\n- Ask your coding agent: it has the ambasada-product skill (stack, storage, sign-in, mini app, deploy).\n\n## 3. Go live (1 min)\n\n```sh\nnpx ambasada login         # Ambasada ID, or a project key from https://developer.ambasada.dev\nnpx ambasada deploy        # build, smoke test, host at https://my-app.ambasada.dev\nnpx ambasada db migrate    # db/migrations \u2192 the app's database\nnpx ambasada logs          # the last deploy and recent errors\n```\n\nSign-in, notifications and the storage are set up by the deploy; nothing to configure. Your own secrets:\n`npx ambasada env set NAME value`. Hosting elsewhere: `npx vite build && npx wrangler deploy`, then `npx ambasada link https://\u2026`.\n\n**Sign in with Ambasada**: the header's button signs people in with their Ambasada ID; on the server,\n`ambasada(\u2026).auth.user(req)` gives `{ id, name, avatar_url, builder, pass }` or null.\n\n## Storage and realtime\n\nEvery app gets these, provisioned at the first `ambasada deploy`; locally wrangler keeps them in `.wrangler/state`.\n\n| Binding | For | Here |\n|---|---|---|\n| `env.DB` | SQLite: anything relational | `lib/db.ts`, tables in `db/migrations/`, example `api/notes.ts` |\n| `env.KV` | sessions, caches, flags | `lib/kv.ts` (the notes cache) |\n| `env.FILES` | uploads, generated files; public at `/files/<key>` | `lib/files.ts`, upload `api/files.ts` |\n| `env.ROOMS` | live state shared between people (Durable Object) | `src/realtime/room.ts`, hook `src/realtime/use-room.ts`, demo at `/room` |\n\n```sh\nnpx wrangler d1 migrations apply DB --local   # db/migrations \u2192 the local database (ambasada dev)\nnpx ambasada db migrate                       # \u2026 \u2192 the app's database online\nnpx ambasada db shell \"SELECT * FROM notes\"   # or `ambasada db shell` for a prompt\nnpx ambasada kv list | get <key> | put <key> <value> | delete <key>\nnpx ambasada files put <file> | list | url <key> | delete <key>\n```\n\nOptional: an agent with the Agents SDK in `examples/agent/` (its README: `npm i agents` and four lines to wire it).\n\n## In the Ambasada app (optional)\n\nOff by default: this is a website. `npx ambasada miniapp enable` adds a mini app at `/app` (`--entry /` for the whole\nsite): `miniapp: { entry: \"/app\" }` in `ambasada.config.ts`, src/in-app/ (the in-app page, rendered by src/main.tsx under the entry), a placeholder\n`public/icon.png`, and the manifest `ambasada dev` and `deploy` serve at `/.well-known/ambasada.json`. Then\n`http://localhost:3000/app?ambasada_shell=mock` pretends to be inside the Ambasada app. The ambasada-product skill:\nreference/mini-app.md.\n\n## Rules worth knowing\n\n- State lives in `env.DB`, `env.KV`, `env.FILES` or a Durable Object, never in module variables: a Worker has many instances.\n- Secrets only in `.env` locally and `ambasada env set` online; never in the code or `wrangler.jsonc` vars.\n- `npx ambasada check` runs the checks (https, no redirects, speed; the mini-app rules when it is on); `npx ambasada upgrade` after a new devkit.\n\nFor the Hack A Ton: `npx ambasada add village` (the add-on).\n\nBuilt by [CENTYSO](https://centyso.com) for [Ambasada](https://ambasada.id).\n", "ambasada.config.ts": 'import { defineApp } from "@ambasada/sdk";\n\nexport default defineApp({\n  id: "my-app",\n  name: "My App",\n  // One line about the app (the subtitle of its Ambasada mini app, if you add one: `ambasada miniapp enable`).\n  description: "Notes, a live room and sign-in",\n  // Where the app runs. `ambasada dev` serves it on http://localhost:3000; hosted, it is https://my-app.ambasada.dev\n  // (`ambasada deploy` sets it; `ambasada link https://\u2026` when you host elsewhere).\n  product: { url: "http://localhost:3000" },\n});\n', "api/ambasada-webhook.ts": '// POST /api/ambasada/webhook: the Ambasada app\'s events for this mini app (docs/MINI-APPS.md \xA77), signed with\n// AMBASADA_APP_SECRET (injected on ambasada.dev; `ambasada dev` plays the hub and sends a ping and\n// notifications_enabled here when it starts). The manifest points here: notifications.webhook.\nimport { isAmbasadaError } from "@ambasada/sdk";\nimport { ambasada, type Env } from "../lib/ambasada.ts";\nimport { forgetToken, saveToken } from "../lib/notifications.ts";\n\nexport default async function appWebhook(req: Request, env: Env): Promise<Response> {\n  const app = ambasada(env);\n  try {\n    const event = await app.apps.verifyWebhook(req); // throws if forged or stale\n    switch (event.event) {\n      case "notifications_enabled":\n      case "app_added":\n        if (event.token) await saveToken(app, event.user, event.token);\n        break;\n      case "notifications_disabled":\n      case "app_removed":\n        await forgetToken(app, event.user);\n        break;\n      case "ping": // `ambasada check` and the registry: answer 200\n        break;\n    }\n    return new Response("ok");\n  } catch (error) {\n    if (isAmbasadaError(error)) return error.toResponse();\n    throw error;\n  }\n}\n', "api/auth.ts": '// Sign in with Ambasada (Ambasada ID, OAuth + PKCE): zero setup. On https://<slug>.ambasada.dev the deploy\n// injects AMBASADA_AUTH_*; under `ambasada dev` the mock signs you in as a fake visitor.\n//   GET /api/auth/login?returnTo=/   \u2192 the Ambasada ID consent screen\n//   GET /api/auth/callback           \u2192 back from it: sets an HttpOnly session cookie, redirects to returnTo\n//   GET /api/auth/logout             \u2192 clears it\n//   GET /api/auth/me                 \u2192 { user } (null when signed out), for the browser\n//   POST /api/auth/shell { token }   \u2192 silent sign-in inside the Ambasada app: the same session, no consent screen\n//                                      (the page calls `auth.signIn()` from @ambasada/miniapp)\n// On the server: `await ambasada(env).auth.user(req)` \u2192 { id, name, avatar_url, builder, pass, \u2026 } or null.\nimport { isAmbasadaError } from "@ambasada/sdk";\nimport { ambasada, type Env } from "../lib/ambasada.ts";\n\nexport default async function auth(req: Request, env: Env): Promise<Response> {\n  const { auth } = ambasada(env);\n  try {\n    switch (new URL(req.url).pathname.replace(/\\/+$/, "")) {\n      case "/api/auth/login":\n        return await auth.login(req);\n      case "/api/auth/callback":\n        return await auth.callback(req);\n      case "/api/auth/logout":\n        return auth.logout(req);\n      case "/api/auth/shell":\n        return await auth.shell(req);\n      case "/api/auth/me": {\n        // Under `ambasada dev` the page needs the mock issuer for its fake shell (?ambasada_shell=mock).\n        const devIssuer = env.AMBASADA_AUTH_ISSUER?.startsWith("http://") ? env.AMBASADA_AUTH_ISSUER : undefined;\n        return Response.json({ user: await auth.user(req), configured: auth.configured, ...(devIssuer ? { dev_issuer: devIssuer } : {}) }, { headers: { "cache-control": "no-store" } });\n      }\n    }\n    return Response.json({ error: { code: "NOT_FOUND", message: "no such route" } }, { status: 404 });\n  } catch (error) {\n    if (isAmbasadaError(error)) return error.toResponse();\n    throw error;\n  }\n}\n', "api/files.ts": '// POST /api/files (raw body, content-type): a signed-in person uploads a file to env.FILES (lib/files.ts)\n// \u2192 { key, url }; the url (/files/<key>) is public and served by the /files/* route.\nimport { ambasada, type Env } from "../lib/ambasada.ts";\nimport { upload } from "../lib/files.ts";\n\nconst MAX_BYTES = 10 * 1024 * 1024;\n\nexport default async function files(req: Request, env: Env): Promise<Response> {\n  if (req.method !== "POST") return Response.json({ error: { code: "INVALID_REQUEST", message: "POST the file" } }, { status: 405 });\n  const user = await ambasada(env).auth.user(req);\n  if (!user) return Response.json({ error: { code: "UNAUTHORIZED", message: "sign in to upload" } }, { status: 401 });\n  const size = Number(req.headers.get("content-length") ?? 0);\n  if (!size || size > MAX_BYTES) return Response.json({ error: { code: "INVALID_REQUEST", message: "send a file up to 10 MB with a content-length" } }, { status: 413 });\n  const stored = await upload(env.FILES, req.body, { contentType: req.headers.get("content-type") ?? undefined, folder: `u/${user.id}` });\n  return Response.json(stored, { status: 201 });\n}\n', "api/notes.ts": '// GET /api/notes: the latest notes from env.DB (lib/db.ts), cached a minute in env.KV (lib/kv.ts).\n// POST /api/notes { text }: adds one. The table is db/migrations/0001_init.sql.\nimport type { Env } from "../lib/ambasada.ts";\nimport { all, run } from "../lib/db.ts";\nimport { cached, remove } from "../lib/kv.ts";\n\ntype Note = { id: number; text: string; created_at: number };\n\nexport default async function notes(req: Request, env: Env): Promise<Response> {\n  if (req.method === "POST") {\n    const { text } = (await req.json().catch(() => ({}))) as { text?: unknown };\n    if (typeof text !== "string" || !text.trim() || text.length > 500) {\n      return Response.json({ error: { code: "INVALID_REQUEST", message: "body must be { text }, 1 to 500 characters" } }, { status: 400 });\n    }\n    const { lastRowId } = await run(env.DB, "INSERT INTO notes (text, created_at) VALUES (?, ?)", text.trim(), Date.now());\n    await remove(env.KV, "notes:latest");\n    return Response.json({ id: lastRowId }, { status: 201 });\n  }\n  const latest = await cached(env.KV, "notes:latest", 60, () => all<Note>(env.DB, "SELECT id, text, created_at FROM notes ORDER BY id DESC LIMIT 20"));\n  return Response.json({ notes: latest });\n}\n', "db/migrations/0001_init.sql": "-- The app's first table. Add the next change as db/migrations/0002_<what>.sql (never edit an applied file), then:\n--   npx wrangler d1 migrations apply DB --local   (ambasada dev)\n--   npx ambasada db migrate                       (online)\nCREATE TABLE notes (\n  id INTEGER PRIMARY KEY AUTOINCREMENT,\n  text TEXT NOT NULL,\n  created_at INTEGER NOT NULL\n);\nCREATE INDEX notes_created ON notes (created_at);\n", "examples/agent/README.md": '# Agent (optional): the Cloudflare Agents SDK\n\nFor agentic products: an agent per user, document or task, with live state, its own SQL, schedules and\nWebSockets (`agent.ts`). It is a Durable Object, so it runs on ambasada.dev like the live rooms. To turn it on:\n\n1. `npm i agents`\n2. `wrangler.jsonc`: add the binding and a migration after the existing ones:\n   ```jsonc\n   "durable_objects": { "bindings": [{ "name": "ROOMS", "class_name": "Room" }, { "name": "AgentExample", "class_name": "AgentExample" }] },\n   "migrations": [{ "tag": "v1", "new_sqlite_classes": ["Room"] }, { "tag": "v2", "new_sqlite_classes": ["AgentExample"] }]\n   ```\n3. In the Worker entry (`src/worker.ts`; spa: `worker/index.ts`; next: `worker.ts`):\n   ```ts\n   export { AgentExample } from "../examples/agent/agent.ts"; // next: "./examples/agent/agent.ts"\n   import { routeAgents } from "../examples/agent/agent.ts";\n   // first thing in fetch():\n   const agent = await routeAgents(req, env as unknown as Record<string, unknown>);\n   if (agent) return agent;\n   ```\n4. In the browser (React): `useAgent({ agent: "agent-example", name: user.id, onStateUpdate: setState })` from\n   `agents/react`; `agent.send("hello")`. Plain fetch: `GET /agents/agent-example/<name>`.\n\n`ambasada deploy` sends the new class and its migration; nothing else to set up. Docs: https://developers.cloudflare.com/agents/\n', "examples/agent/agent.ts": '/**\n * Optional: an agent with the Cloudflare Agents SDK (`agents`), for agentic products. An agent is a Durable\n * Object with superpowers: state synced live to every connected client (`setState`), its own SQL (`this.sql`),\n * scheduled work (`this.schedule`), WebSockets and HTTP. One instance per name: per user, per document, per task.\n * Not wired in by default: examples/agent/README.md has the four steps.\n */\nimport { Agent, routeAgentRequest, type Connection, type WSMessage } from "agents";\n\ntype State = { notes: number; lastNote: string | null };\n\nexport class AgentExample extends Agent<Cloudflare.Env, State> {\n  initialState: State = { notes: 0, lastNote: null };\n\n  async onStart() {\n    this.sql`CREATE TABLE IF NOT EXISTS notes (id INTEGER PRIMARY KEY AUTOINCREMENT, text TEXT NOT NULL, at INTEGER NOT NULL)`;\n  }\n\n  // GET /agents/agent-example/<name>: what this agent knows.\n  async onRequest(_req: Request): Promise<Response> {\n    const notes = this.sql<{ id: number; text: string; at: number }>`SELECT id, text, at FROM notes ORDER BY id DESC LIMIT 20`;\n    return Response.json({ state: this.state, notes });\n  }\n\n  // A client (useAgent in the browser) sent a message: remember it, sync the new state to every client,\n  // and come back to it in a minute (call an LLM here, send a notification, \u2026).\n  async onMessage(connection: Connection, message: WSMessage) {\n    const text = String(message).slice(0, 2000);\n    this.sql`INSERT INTO notes (text, at) VALUES (${text}, ${Date.now()})`;\n    this.setState({ notes: this.state.notes + 1, lastNote: text });\n    await this.schedule(60, "followUp", { text });\n    connection.send(JSON.stringify({ ok: true }));\n  }\n\n  async followUp(payload: { text: string }) {\n    console.log(`a minute ago someone wrote: ${payload.text}`);\n  }\n}\n\n/** In your Worker\'s fetch, before your own routes: answers /agents/<agent>/<name> (HTTP and WebSocket). */\nexport const routeAgents = (req: Request, env: Record<string, unknown>) => routeAgentRequest(req, env);\n', gitignore: "node_modules/\ndist/\n.wrangler/\n*.tsbuildinfo\n.env*\n.dev.vars*\n.DS_Store\n# build output of `ambasada deploy`; project.json (template, devkit version) is kept\n.ambasada/*\n!.ambasada/project.json\n", "index.html": '<!doctype html>\n<html lang="en">\n  <head>\n    <meta charset="utf-8" />\n    <meta name="viewport" content="width=device-width, initial-scale=1" />\n    <title>My App</title>\n  </head>\n  <body>\n    <div id="root"></div>\n    <script type="module" src="/src/main.tsx"></script>\n  </body>\n</html>\n', "lib/ambasada.ts": 'import { createAmbasada, type Ambasada } from "@ambasada/sdk";\nimport type { Room } from "../src/realtime/room.ts";\n\n/** The Worker\'s env: `.env` locally (`ambasada dev` points it at the mock), secrets injected at deploy. */\nexport interface Env {\n  ASSETS: Fetcher;\n  /** The app\'s SQLite database (lib/db.ts), key-value (lib/kv.ts), files (lib/files.ts) and live rooms (src/realtime/room.ts). */\n  DB: D1Database;\n  KV: KVNamespace;\n  FILES: R2Bucket;\n  ROOMS: DurableObjectNamespace<Room>;\n  AMBASADA_API_KEY?: string;\n  /** Set by `ambasada deploy` and `ambasada dev`; the SDK defaults to https://api.ambasada.dev. */\n  AMBASADA_API_URL?: string;\n  AMBASADA_APP_ID?: string;\n  /** Sign in with Ambasada (api/auth.ts): set by `ambasada deploy` on ambasada.dev, and by `ambasada dev`. */\n  AMBASADA_AUTH_CLIENT_ID?: string;\n  AMBASADA_AUTH_CLIENT_SECRET?: string;\n  AMBASADA_AUTH_ISSUER?: string;\n  /** Mini-app notifications (api/ambasada-webhook.ts, lib/notifications.ts): set on ambasada.dev and by `ambasada dev`. */\n  AMBASADA_APP_SECRET?: string;\n  AMBASADA_HUB_URL?: string;\n  AMBASADA_APP_ORIGIN?: string;\n  /** Your public URL, if the Worker sees another host (behind a proxy). */\n  PUBLIC_URL?: string;\n}\n\nlet client: Ambasada | undefined;\n\n/** One client per isolate: it caches the API\'s signing keys. */\nexport function ambasada(env: Env): Ambasada {\n  return (client ??= createAmbasada({ env: env as unknown as Record<string, unknown> }));\n}\n', "lib/db.ts": '/**\n * env.DB: this app\'s SQLite database (Cloudflare D1). The tables come from db/migrations/*.sql:\n * `npx ambasada db migrate` online, `npx wrangler d1 migrations apply DB --local` for `ambasada dev`.\n * A tiny typed layer, no ORM: SQL with ? placeholders in, plain objects out.\n *\n *   const notes = await all<Note>(env.DB, "SELECT * FROM notes ORDER BY id DESC LIMIT ?", 20);\n *   const note = await first<Note>(env.DB, "SELECT * FROM notes WHERE id = ?", id);\n *   const { lastRowId } = await run(env.DB, "INSERT INTO notes (text) VALUES (?)", text);\n *   await batch(env.DB, [["UPDATE a SET n = n - 1 WHERE id = ?", 1], ["UPDATE b SET n = n + 1 WHERE id = ?", 2]]); // one transaction\n */\n\nexport type Param = string | number | boolean | null | ArrayBuffer;\n\n/** What this file needs from a D1 binding (env.DB satisfies it). */\nexport interface Database {\n  prepare(query: string): Statement;\n  batch(statements: Statement[]): Promise<unknown[]>;\n}\n\nexport interface Statement {\n  bind(...values: unknown[]): Statement;\n  all<T = Record<string, unknown>>(): Promise<{ results: T[] }>;\n  first<T = Record<string, unknown>>(): Promise<T | null>;\n  run(): Promise<{ meta: { changes: number; last_row_id: number } }>;\n}\n\nconst statement = (db: Database, query: string, params: Param[]) => db.prepare(query).bind(...params);\n\n/** Every row. */\nexport async function all<T = Record<string, unknown>>(db: Database, query: string, ...params: Param[]): Promise<T[]> {\n  return (await statement(db, query, params).all<T>()).results;\n}\n\n/** The first row, or null. */\nexport function first<T = Record<string, unknown>>(db: Database, query: string, ...params: Param[]): Promise<T | null> {\n  return statement(db, query, params).first<T>();\n}\n\n/** INSERT, UPDATE, DELETE: how many rows changed and the last inserted id. */\nexport async function run(db: Database, query: string, ...params: Param[]): Promise<{ changes: number; lastRowId: number }> {\n  const { meta } = await statement(db, query, params).run();\n  return { changes: meta.changes, lastRowId: meta.last_row_id };\n}\n\n/** Several statements in one transaction: all of them apply, or none. */\nexport async function batch(db: Database, statements: [query: string, ...params: Param[]][]): Promise<void> {\n  await db.batch(statements.map(([query, ...params]) => statement(db, query, params)));\n}\n', "lib/files.ts": '/**\n * env.FILES: this app\'s file storage (Cloudflare R2). Uploads and generated files; each one is public at\n * /files/<key> on the app\'s own address (the /files/* route calls serveFile). Don\'t keep files in the database.\n *\n *   const { key, url } = await upload(env.FILES, req.body, { contentType: "image/png" });   // url: /files/u/\u2026\n *   return serveFile(env.FILES, req);                                                        // GET /files/*\n *\n * Files are public to anyone with the URL: keep private documents behind your own route that checks who asks.\n * `npx ambasada files put|list|delete|url` manages them from the terminal.\n */\n\n/** What this file needs from an R2 binding (env.FILES satisfies it). */\nexport interface Bucket {\n  put(key: string, value: ReadableStream | ArrayBuffer | ArrayBufferView | string | Blob | null, options?: { httpMetadata?: { contentType?: string } }): Promise<unknown>;\n  get(key: string, options?: { onlyIf?: Headers; range?: Headers }): Promise<StoredFile | null>;\n  delete(key: string): Promise<void>;\n}\n\nexport interface StoredFile {\n  httpEtag: string;\n  size: number;\n  httpMetadata?: { contentType?: string };\n  range?: { offset?: number; length?: number; suffix?: number };\n  body?: ReadableStream;\n}\n\nexport const FILES_PATH = "/files/";\n\n/** Stores `body` under a new random key (in `folder`) \u2192 `{ key, url }`, url relative to the app (/files/<key>). */\nexport async function upload(bucket: Bucket, body: ReadableStream | ArrayBuffer | ArrayBufferView | string | Blob | null, options: { contentType?: string; folder?: string } = {}): Promise<{ key: string; url: string }> {\n  const key = `${options.folder ?? "u"}/${crypto.randomUUID()}`;\n  await bucket.put(key, body, { httpMetadata: { contentType: options.contentType ?? "application/octet-stream" } });\n  return { key, url: fileUrl(key) };\n}\n\nexport const fileUrl = (key: string) => `${FILES_PATH}${key.split("/").map(encodeURIComponent).join("/")}`;\n\n/** GET/HEAD /files/<key>: the file with its type, an ETag (304 when unchanged), byte ranges, and a cache header. */\nexport async function serveFile(bucket: Bucket, req: Request): Promise<Response> {\n  if (req.method !== "GET" && req.method !== "HEAD") return new Response(null, { status: 405, headers: { allow: "GET, HEAD" } });\n  const path = new URL(req.url).pathname;\n  const key = decodeURIComponent(path.slice(path.indexOf(FILES_PATH) + FILES_PATH.length));\n  if (!key) return new Response("Not found", { status: 404 });\n  const file = await bucket.get(key, { onlyIf: req.headers, range: req.headers });\n  if (!file) return new Response("Not found", { status: 404 });\n  const headers = new Headers({ etag: file.httpEtag, "cache-control": "public, max-age=3600", "accept-ranges": "bytes" });\n  if (file.httpMetadata?.contentType) headers.set("content-type", file.httpMetadata.contentType);\n  if (!file.body) return new Response(null, { status: 304, headers }); // If-None-Match matched: nothing changed\n  const r = file.range;\n  if (r && req.headers.has("range")) {\n    const offset = r.suffix !== undefined ? file.size - r.suffix : (r.offset ?? 0);\n    const length = r.suffix ?? r.length ?? file.size - offset;\n    headers.set("content-range", `bytes ${offset}-${offset + length - 1}/${file.size}`);\n    headers.set("content-length", String(length));\n    return new Response(req.method === "HEAD" ? null : file.body, { status: 206, headers });\n  }\n  headers.set("content-length", String(file.size));\n  return new Response(req.method === "HEAD" ? null : file.body, { headers });\n}\n', "lib/kv.ts": '/**\n * env.KV: this app\'s key-value store (Cloudflare KV). Fast reads everywhere, writes visible within about a\n * minute, at most one write per second per key. Good for sessions, caches and feature flags; not for counters\n * or anything two people change at once (use env.DB, or a Durable Object for live state).\n *\n *   await putJson(env.KV, `session:${id}`, { user }, { ttl: 60 * 60 * 24 });\n *   const session = await getJson<{ user: string }>(env.KV, `session:${id}`);\n *   const page = await cached(env.KV, "home:stats", 60, () => computeStats());\n */\n\n/** What this file needs from a KV binding (env.KV satisfies it). */\nexport interface KeyValue {\n  get(key: string, type: "text"): Promise<string | null>;\n  put(key: string, value: string, options?: { expirationTtl?: number }): Promise<void>;\n  delete(key: string): Promise<void>;\n}\n\n/** The value saved under `key`, parsed; null when there is none (or it expired). */\nexport async function getJson<T>(kv: KeyValue, key: string): Promise<T | null> {\n  const text = await kv.get(key, "text");\n  return text === null ? null : (JSON.parse(text) as T);\n}\n\n/** Saves `value` as JSON. `ttl`: seconds until it disappears (at least 60). */\nexport function putJson(kv: KeyValue, key: string, value: unknown, options: { ttl?: number } = {}): Promise<void> {\n  return kv.put(key, JSON.stringify(value), options.ttl ? { expirationTtl: Math.max(60, options.ttl) } : undefined);\n}\n\nexport function remove(kv: KeyValue, key: string): Promise<void> {\n  return kv.delete(key);\n}\n\n/** `load()`\'s result, kept for `ttl` seconds: a cache in front of something slow. */\nexport async function cached<T>(kv: KeyValue, key: string, ttl: number, load: () => Promise<T>): Promise<T> {\n  const hit = await getJson<T>(kv, key);\n  if (hit !== null) return hit;\n  const value = await load();\n  await putJson(kv, key, value, { ttl });\n  return value;\n}\n', "lib/notifications.ts": '// Who turned notifications on, and how to reach them (docs/MINI-APPS.md \xA77). The hub sends a token per person\n// to the webhook route (api/ambasada-webhook.ts; app/api/ambasada/webhook/route.ts in Next); it lives in your\n// ambasada.store under the person\'s Ambasada user id.\nimport type { Ambasada, AppNotifyInput } from "@ambasada/sdk";\n\nconst key = (user: string) => `ambasada/notifications/${user}`;\n\nexport const saveToken = (app: Ambasada, user: string, token: string) => app.store.set(key(user), { token, enabled_at: new Date().toISOString() });\nexport const forgetToken = (app: Ambasada, user: string) => app.store.delete(key(user));\n\n/**\n * A push to one person (their Ambasada user id, e.g. `(await app.auth.user(req)).id`), if they turned\n * notifications on. False when they haven\'t, or the hub said the token is gone (then it is forgotten).\n *   await notifyUser(app, user.id, { notification_id: `order-${id}`, title: "Your translation is ready", body: "\u2026", url: `/orders/${id}` });\n */\nexport async function notifyUser(app: Ambasada, user: string, notification: Omit<AppNotifyInput, "tokens" | "users">): Promise<boolean> {\n  const saved = await app.store.get<{ token: string }>(key(user));\n  if (!saved) return false;\n  const result = await app.apps.notify({ ...notification, tokens: [saved.token] });\n  if (result.invalid.includes(saved.token)) await forgetToken(app, user);\n  return result.sent.includes(saved.token);\n}\n', "package.json": '{\n  "name": "@ambasada/template-spa",\n  "version": "0.1.0",\n  "private": true,\n  "description": "An Ambasada app: Vite + React (Lovable/Bolt exports) and api/*.ts handlers as one Cloudflare Worker.",\n  "type": "module",\n  "engines": {\n    "node": ">=22"\n  },\n  "scripts": {\n    "dev": "ambasada dev",\n    "build": "vite build",\n    "preview": "vite build && vite preview --port 3000",\n    "typecheck": "tsc -b",\n    "ambasada": "ambasada"\n  },\n  "dependencies": {\n    "@ambasada/sdk": "workspace:*",\n    "@ambasada/ui": "workspace:*",\n    "react": "~19.3.1",\n    "react-dom": "~19.3.1"\n  },\n  "devDependencies": {\n    "@ambasada/cli": "workspace:*",\n    "@cloudflare/vite-plugin": "^1.67.0",\n    "@cloudflare/workers-types": "^5.20261102.1",\n    "@types/node": "^22.20.5",\n    "@types/react": "^19.3.0",\n    "@types/react-dom": "^19.3.0",\n    "@vitejs/plugin-react": "^6.1.2",\n    "typescript": "~5.9.3",\n    "vite": "^8.3.5",\n    "wrangler": "^4.156.1"\n  }\n}\n', "public/privacy.html": `<!doctype html>
 <!-- /privacy: the manifest's privacy_url. Apps that ask for scopes (identity, notifications) need one to be Listed
      (docs/MINI-APPS.md \xA72). Say plainly what you keep; edit it when that changes. -->
 <html lang="en">
@@ -139,7 +143,7 @@ export const bindings = (): Bindings => getCloudflareContext().env as unknown as
     <meta charset="utf-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1" />
     <title>Privacy \xB7 My App</title>
-    <link rel="stylesheet" href="https://unpkg.com/@ambasada/ui@0.5/dist/ambasada-ui.css" />
+    <link rel="stylesheet" href="https://unpkg.com/@ambasada/ui@0.8/dist/ambasada-ui.css" />
   </head>
   <body>
     <main class="ui-page">
@@ -154,8 +158,7 @@ export const bindings = (): Bindings => getCloudflareContext().env as unknown as
     </main>
   </body>
 </html>
-`, "src/App.tsx": 'import { auth, mockEnv, ready } from "@ambasada/miniapp";\nimport { useEffect, useState } from "react";\nimport { RoomDemo } from "./realtime/room-demo.tsx";\n\n/** Two pages: the landing page and /room (a live room). */\nexport function App() {\n  return (\n    <>\n      <Header />\n      <main className="page">{location.pathname === "/room" ? <RoomDemo /> : <Home />}</main>\n    </>\n  );\n}\n\n/** What GET /api/auth/me returns (api/auth.ts): the person signed in with Ambasada, or null. */\ntype User = { id: string; name: string | null; avatar_url: string | null; builder: boolean; pass: string | null };\n\ntype Me = { user: User | null; configured: boolean; dev_issuer?: string };\n\n/**\n * Inside the Ambasada app, sign in without a consent screen (docs/MINI-APPS.md \xA75): `auth.signIn()` gets a shell\n * token and POSTs it to /api/auth/shell, which sets the same session as "Sign in with Ambasada". Under\n * `ambasada dev`, /?ambasada_shell=mock pretends to be inside the app (the mock signs the token).\n */\nasync function inTheApp(me: Me): Promise<User | null> {\n  if (me.dev_issuer && (new URLSearchParams(location.search).get("ambasada_shell") === "mock" || sessionStorage.getItem("ambasada_shell") === "mock")) {\n    sessionStorage.setItem("ambasada_shell", "mock");\n    mockEnv({ issuer: me.dev_issuer });\n    ready();\n  }\n  return me.user ? null : auth.signIn<User>().catch(() => null);\n}\n\n/** "Sign in with Ambasada", or the person\'s name and avatar once signed in. */\nfunction Header() {\n  const [me, setMe] = useState<Me | null>(null);\n  useEffect(() => {\n    fetch("/api/auth/me")\n      .then((res) => (res.ok ? (res.json() as Promise<Me>) : null))\n      .then(async (m) => {\n        setMe(m);\n        const user = m && (await inTheApp(m));\n        if (user) setMe({ ...m, user });\n      })\n      .catch(() => setMe(null));\n  }, []);\n  return (\n    <header className="topbar">\n      <a className="brand" href="/">\n        My App\n      </a>\n      {me?.user ? (\n        <span className="account">\n          {me.user.avatar_url && <img src={me.user.avatar_url} alt="" />}\n          <span>{me.user.name ?? "Signed in"}</span>\n          <a href="/api/auth/logout">Sign out</a>\n        </span>\n      ) : me?.configured ? (\n        <a className="ui-button secondary signin" href={`/api/auth/login?returnTo=${encodeURIComponent(location.pathname + location.search)}`}>\n          Sign in with Ambasada\n        </a>\n      ) : null}\n    </header>\n  );\n}\n\nfunction Home() {\n  return (\n    <>\n      <p className="ui-label eyebrow">Ambasada app</p>\n      <h1>My App</h1>\n      <p className="lead">Notes in a database, a live room, and Sign in with Ambasada. Change anything.</p>\n      <Notes />\n      <p>\n        <a href="/room">Open the live room</a> in two tabs and type.\n      </p>\n    </>\n  );\n}\n\ntype Note = { id: number; text: string; created_at: number };\n\n/** api/notes.ts: rows in env.DB (db/migrations/0001_init.sql), the list cached in env.KV. */\nfunction Notes() {\n  const [notes, setNotes] = useState<Note[]>([]);\n  const [text, setText] = useState("");\n  const load = () =>\n    fetch("/api/notes")\n      .then((res) => res.json() as Promise<{ notes: Note[] }>)\n      .then((r) => setNotes(r.notes))\n      .catch(() => setNotes([]));\n  useEffect(() => void load(), []);\n  return (\n    <form\n      className="ui-card"\n      onSubmit={async (e) => {\n        e.preventDefault();\n        if (!text.trim()) return;\n        await fetch("/api/notes", { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify({ text }) });\n        setText("");\n        await load();\n      }}\n    >\n      <div className="row">\n        <input value={text} onChange={(e) => setText(e.target.value)} maxLength={500} placeholder="A note" aria-label="A note" />\n        <button type="submit" className="ui-button">\n          Add\n        </button>\n      </div>\n      <ul>\n        {notes.map((n) => (\n          <li key={n.id}>{n.text}</li>\n        ))}\n      </ul>\n    </form>\n  );\n}\n', "src/env.d.ts": '/// <reference types="vite/client" />\n', "src/main.tsx": `import { ready } from "@ambasada/miniapp";
-import { StrictMode } from "react";
+`, "src/App.tsx": 'import { useEffect, useState } from "react";\nimport { RoomDemo } from "./realtime/room-demo.tsx";\n\n/** Two pages: the landing page and /room (a live room). */\nexport function App() {\n  return (\n    <>\n      <Header />\n      <main className="page">{location.pathname === "/room" ? <RoomDemo /> : <Home />}</main>\n    </>\n  );\n}\n\n/** What GET /api/auth/me returns (api/auth.ts): the person signed in with Ambasada, or null. */\ntype User = { id: string; name: string | null; avatar_url: string | null; builder: boolean; pass: string | null };\n\ntype Me = { user: User | null; configured: boolean; dev_issuer?: string };\n\n/** "Sign in with Ambasada", or the person\'s name and avatar once signed in. */\nfunction Header() {\n  const [me, setMe] = useState<Me | null>(null);\n  useEffect(() => {\n    fetch("/api/auth/me")\n      .then((res) => (res.ok ? (res.json() as Promise<Me>) : null))\n      .then(setMe)\n      .catch(() => setMe(null));\n  }, []);\n  return (\n    <header className="topbar">\n      <a className="brand" href="/">\n        My App\n      </a>\n      {me?.user ? (\n        <span className="account">\n          {me.user.avatar_url && <img src={me.user.avatar_url} alt="" />}\n          <span>{me.user.name ?? "Signed in"}</span>\n          <a href="/api/auth/logout">Sign out</a>\n        </span>\n      ) : me?.configured ? (\n        <a className="ui-button secondary signin" href={`/api/auth/login?returnTo=${encodeURIComponent(location.pathname + location.search)}`}>\n          Sign in with Ambasada\n        </a>\n      ) : null}\n    </header>\n  );\n}\n\nfunction Home() {\n  return (\n    <>\n      <p className="ui-label eyebrow">Ambasada app</p>\n      <h1>My App</h1>\n      <p className="lead">Notes in a database, a live room, and Sign in with Ambasada. Change anything.</p>\n      <Notes />\n      <p>\n        <a href="/room">Open the live room</a> in two tabs and type.\n      </p>\n    </>\n  );\n}\n\ntype Note = { id: number; text: string; created_at: number };\n\n/** api/notes.ts: rows in env.DB (db/migrations/0001_init.sql), the list cached in env.KV. */\nfunction Notes() {\n  const [notes, setNotes] = useState<Note[]>([]);\n  const [text, setText] = useState("");\n  const load = () =>\n    fetch("/api/notes")\n      .then((res) => res.json() as Promise<{ notes: Note[] }>)\n      .then((r) => setNotes(r.notes))\n      .catch(() => setNotes([]));\n  useEffect(() => void load(), []);\n  return (\n    <form\n      className="ui-card"\n      onSubmit={async (e) => {\n        e.preventDefault();\n        if (!text.trim()) return;\n        await fetch("/api/notes", { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify({ text }) });\n        setText("");\n        await load();\n      }}\n    >\n      <div className="row">\n        <input value={text} onChange={(e) => setText(e.target.value)} maxLength={500} placeholder="A note" aria-label="A note" />\n        <button type="submit" className="ui-button">\n          Add\n        </button>\n      </div>\n      <ul>\n        {notes.map((n) => (\n          <li key={n.id}>{n.text}</li>\n        ))}\n      </ul>\n    </form>\n  );\n}\n', "src/env.d.ts": '/// <reference types="vite/client" />\n', "src/main.tsx": `import { StrictMode } from "react";
 import { createRoot } from "react-dom/client";
 import { App } from "./App.tsx";
 // The Ambasada look (@ambasada/ui: tokens, fonts, ui-card / ui-button / \u2026), then this product's own styles.
@@ -167,8 +170,6 @@ createRoot(document.getElementById("root")!).render(
     <App />
   </StrictMode>,
 );
-// Inside the Ambasada app: the first screen is drawn, drop the splash. On the web: a no-op.
-ready();
 `, "src/realtime/room-demo.tsx": 'import { useState } from "react";\nimport { useRoom } from "./use-room.ts";\n\n/** /room: a live room (src/realtime/room.ts). Open it in two tabs and type; ?room=<id> picks the room. */\nexport function RoomDemo() {\n  const id = new URLSearchParams(location.search).get("room") ?? "lobby";\n  const { messages, online, status, send } = useRoom(id, { name: "guest" });\n  const [text, setText] = useState("");\n  return (\n    <>\n      <h1>Live room</h1>\n      <p className="ui-label">{status === "open" ? `${online} online` : `${status}\u2026`}</p>\n      <ul>\n        {messages.map((m) => (\n          <li key={m.id}>\n            {m.name}: {m.text}\n          </li>\n        ))}\n      </ul>\n      <form onSubmit={(e) => (e.preventDefault(), text.trim() && send(text) && setText(""))}>\n        <input value={text} onChange={(e) => setText(e.target.value)} placeholder="Say something" /> <button className="ui-button">Send</button>\n      </form>\n    </>\n  );\n}\n', "src/realtime/room.ts": '/**\n * A live room (Durable Object `Room`, bound as env.ROOMS): everyone connected to the same room id shares it.\n *\n *   GET /api/rooms/<id>/ws  (WebSocket)  \u2192 env.ROOMS.getByName(id).fetch(req)\n *   client \u2192 { "text": "hi" }            server \u2192 { type: "history", messages } on join,\n *                                                 { type: "message", message } to everyone,\n *                                                 { type: "presence", online } when people come and go\n *\n * WebSocket hibernation: the object sleeps between messages and the connections stay open, so an idle room\n * costs nothing. Its own SQLite (`ctx.storage.sql`) keeps the last 50 messages, replayed to whoever joins.\n * The same shape fits presence, live counters, a game table, a queue or a rate limit: one object per thing.\n */\nimport { DurableObject } from "cloudflare:workers";\n\nconst KEEP = 50;\n\nexport type RoomMessage = { id: number; name: string; text: string; at: number };\nexport type RoomEvent = { type: "history"; messages: RoomMessage[] } | { type: "message"; message: RoomMessage } | { type: "presence"; online: number };\n\nexport class Room extends DurableObject<unknown> {\n  constructor(ctx: DurableObjectState, env: unknown) {\n    super(ctx, env);\n    ctx.storage.sql.exec("CREATE TABLE IF NOT EXISTS messages (id INTEGER PRIMARY KEY AUTOINCREMENT, name TEXT NOT NULL, text TEXT NOT NULL, at INTEGER NOT NULL)");\n  }\n\n  async fetch(req: Request): Promise<Response> {\n    if (req.headers.get("upgrade") !== "websocket") return Response.json({ online: this.ctx.getWebSockets().length, messages: this.history() });\n    // Who is talking: the client says. Behind Sign in with Ambasada, pass the signed-in name from your route instead.\n    const name = (new URL(req.url).searchParams.get("name") ?? "").trim().slice(0, 40) || "guest";\n    const { 0: client, 1: server } = new WebSocketPair();\n    this.ctx.acceptWebSocket(server);\n    server.serializeAttachment({ name });\n    server.send(JSON.stringify({ type: "history", messages: this.history() } satisfies RoomEvent));\n    this.broadcast({ type: "presence", online: this.ctx.getWebSockets().length });\n    return new Response(null, { status: 101, webSocket: client });\n  }\n\n  async webSocketMessage(ws: WebSocket, data: string | ArrayBuffer): Promise<void> {\n    let text = "";\n    try {\n      text = String((JSON.parse(typeof data === "string" ? data : new TextDecoder().decode(data)) as { text?: unknown }).text ?? "").trim().slice(0, 2000);\n    } catch {\n      return;\n    }\n    if (!text) return;\n    const { name } = ws.deserializeAttachment() as { name: string };\n    const at = Date.now();\n    const { id } = this.ctx.storage.sql.exec<{ id: number }>("INSERT INTO messages (name, text, at) VALUES (?, ?, ?) RETURNING id", name, text, at).one();\n    this.ctx.storage.sql.exec("DELETE FROM messages WHERE id <= ?", id - KEEP);\n    this.broadcast({ type: "message", message: { id, name, text, at } });\n  }\n\n  async webSocketClose(ws: WebSocket, code: number, reason: string): Promise<void> {\n    try {\n      ws.close(code, reason);\n    } catch {\n      // already closed\n    }\n    this.broadcast({ type: "presence", online: this.ctx.getWebSockets().filter((s) => s !== ws).length });\n  }\n\n  private history(): RoomMessage[] {\n    return this.ctx.storage.sql.exec<RoomMessage>("SELECT id, name, text, at FROM messages ORDER BY id").toArray();\n  }\n\n  private broadcast(event: RoomEvent): void {\n    const text = JSON.stringify(event);\n    for (const ws of this.ctx.getWebSockets()) {\n      try {\n        ws.send(text);\n      } catch {\n        // a closing socket: webSocketClose cleans up\n      }\n    }\n  }\n}\n', "src/realtime/use-room.ts": '/**\n * `useRoom(id)`: a live room in a React component (src/realtime/room.ts on the server). Reconnects on its own.\n *\n *   const { messages, online, send, status } = useRoom("lobby", { name: "Ana" });\n */\n"use client";\nimport { useCallback, useEffect, useRef, useState } from "react";\n\nexport type RoomMessage = { id: number; name: string; text: string; at: number };\ntype RoomEvent = { type: "history"; messages: RoomMessage[] } | { type: "message"; message: RoomMessage } | { type: "presence"; online: number };\n\nexport function useRoom(id: string, options: { name?: string } = {}) {\n  const [messages, setMessages] = useState<RoomMessage[]>([]);\n  const [online, setOnline] = useState(0);\n  const [status, setStatus] = useState<"connecting" | "open" | "closed">("connecting");\n  const socket = useRef<WebSocket | null>(null);\n\n  useEffect(() => {\n    let stopped = false;\n    let retry: ReturnType<typeof setTimeout> | undefined;\n    let tries = 0;\n    const connect = () => {\n      const url = new URL(`/api/rooms/${encodeURIComponent(id)}/ws`, location.href);\n      url.protocol = url.protocol === "https:" ? "wss:" : "ws:";\n      if (options.name) url.searchParams.set("name", options.name);\n      const ws = new WebSocket(url);\n      socket.current = ws;\n      setStatus("connecting");\n      const timeout = setTimeout(() => ws.close(), 10_000); // no answer (e.g. `next dev`, which can\'t serve rooms): retry later\n      ws.onopen = () => {\n        clearTimeout(timeout);\n        tries = 0;\n        setStatus("open");\n      };\n      ws.onmessage = (e) => {\n        const event = JSON.parse(String(e.data)) as RoomEvent;\n        if (event.type === "history") setMessages(event.messages);\n        else if (event.type === "message") setMessages((m) => [...m.slice(-49), event.message]);\n        else setOnline(event.online);\n      };\n      ws.onclose = () => {\n        clearTimeout(timeout);\n        setStatus("closed");\n        if (!stopped) retry = setTimeout(connect, Math.min(30_000, 1000 * 2 ** tries++)); // back off; give up never\n      };\n    };\n    connect();\n    return () => {\n      stopped = true;\n      clearTimeout(retry);\n      socket.current?.close();\n    };\n  }, [id, options.name]);\n\n  const send = useCallback((text: string) => {\n    if (socket.current?.readyState !== WebSocket.OPEN) return false;\n    socket.current.send(JSON.stringify({ text }));\n    return true;\n  }, []);\n\n  return { messages, online, status, send };\n}\n', "src/style.css": `/*
  * This product's own styles, on top of @ambasada/ui: the Ambasada tokens (var(--color-\u2026), var(--space-\u2026))
  * and components (ui-card, ui-button, ui-label, \u2026), loaded first by app/layout.tsx (next), src/main.tsx (spa)
@@ -209,7 +210,56 @@ a { color: var(--color-accent-text); }
 .account img { width: 28px; height: 28px; border-radius: 50%; object-fit: cover; background: var(--color-line); }
 .account a { font-weight: var(--weight-regular); font-size: var(--text-sm); color: var(--color-ink-2); }
 [hidden] { display: none !important; }
-`, "tsconfig.app.json": '{\n  "compilerOptions": {\n    "composite": true,\n    "tsBuildInfoFile": "./node_modules/.tmp/tsconfig.app.tsbuildinfo",\n    "target": "ES2022",\n    "lib": ["ES2022", "DOM", "DOM.Iterable"],\n    "module": "ESNext",\n    "moduleResolution": "Bundler",\n    "jsx": "react-jsx",\n    "strict": true,\n    "noEmit": true,\n    "skipLibCheck": true,\n    "isolatedModules": true,\n    "verbatimModuleSyntax": true,\n    "allowImportingTsExtensions": true\n  },\n  "include": ["src"],\n  "exclude": ["src/realtime/room.ts"]\n}\n', "tsconfig.json": '{\n  "files": [],\n  "references": [{ "path": "./tsconfig.app.json" }, { "path": "./tsconfig.worker.json" }, { "path": "./tsconfig.node.json" }]\n}\n', "tsconfig.node.json": '{\n  "compilerOptions": {\n    "composite": true,\n    "tsBuildInfoFile": "./node_modules/.tmp/tsconfig.node.tsbuildinfo",\n    "target": "ES2022",\n    "lib": ["ES2023"],\n    "types": ["node"],\n    "module": "ESNext",\n    "moduleResolution": "Bundler",\n    "strict": true,\n    "noEmit": true,\n    "skipLibCheck": true,\n    "isolatedModules": true,\n    "verbatimModuleSyntax": true\n  },\n  "include": ["vite.config.ts"]\n}\n', "tsconfig.worker.json": '{\n  "compilerOptions": {\n    "composite": true,\n    "tsBuildInfoFile": "./node_modules/.tmp/tsconfig.worker.tsbuildinfo",\n    "target": "ES2022",\n    "lib": ["ES2022"],\n    "types": ["@cloudflare/workers-types"],\n    "module": "ESNext",\n    "moduleResolution": "Bundler",\n    "strict": true,\n    "noEmit": true,\n    "skipLibCheck": true,\n    "isolatedModules": true,\n    "verbatimModuleSyntax": true,\n    "allowImportingTsExtensions": true\n  },\n  "include": ["worker", "api", "lib", "src/realtime/room.ts", "ambasada.config.ts"]\n}\n', "vite.config.ts": 'import { cloudflare } from "@cloudflare/vite-plugin";\nimport react from "@vitejs/plugin-react";\nimport { defineConfig } from "vite";\n\nexport default defineConfig({\n  plugins: [react(), cloudflare()],\n  // allowedHosts: `ambasada dev --tunnel` serves this at https://<slug>-dev.ambasada.dev.\n  server: { port: 3000, allowedHosts: [".ambasada.dev"] },\n});\n', "worker/index.ts": '/**\n * The app\'s Worker (`vite` runs it locally through @cloudflare/vite-plugin):\n *\n *   /api/<name>  \u2192 api/<name>.ts (fetch handlers; add yours to API below)\n *   /api/auth/*  \u2192 api/auth.ts: Sign in with Ambasada (login, callback, logout, me, shell)\n *   /api/ambasada/webhook \u2192 api/ambasada-webhook.ts: the Ambasada app\'s events (notifications on/off, ping)\n *   /api/notes, /api/files \u2192 api/notes.ts (env.DB + env.KV), api/files.ts (uploads to env.FILES)\n *   /api/rooms/<id>/ws \u2192 the live room <id> (src/realtime/room.ts, a Durable Object); demo at /room\n *   /files/*     \u2192 files from env.FILES (lib/files.ts)\n *   /health      \u2192 { ok: true }\n *   the rest     \u2192 the React app in src/ (static assets; unknown paths get index.html, see wrangler.jsonc)\n */\nimport appWebhook from "../api/ambasada-webhook.ts";\nimport auth from "../api/auth.ts";\nimport files from "../api/files.ts";\nimport notes from "../api/notes.ts";\nimport type { Env } from "../lib/ambasada.ts";\nimport { FILES_PATH, serveFile } from "../lib/files.ts";\n\nexport { Room } from "../src/realtime/room.ts";\n\ntype Handler = (req: Request, env: Env) => Promise<Response>;\nconst API: Record<string, Handler> = { files, notes };\n\nexport default {\n  async fetch(req, env) {\n    const { pathname } = new URL(req.url);\n    try {\n      if (pathname === "/health") return Response.json({ ok: true });\n      if (pathname.startsWith("/api/auth/")) return await auth(req, env);\n      if (pathname === "/api/ambasada/webhook") return await appWebhook(req, env);\n      const room = /^\\/api\\/rooms\\/([^/]+)\\/ws$/.exec(pathname);\n      if (room) return await env.ROOMS.getByName(decodeURIComponent(room[1]!)).fetch(req);\n      if (pathname.startsWith(FILES_PATH)) return await serveFile(env.FILES, req);\n      const api = /^\\/api\\/([^/]+)\\/?$/.exec(pathname);\n      const handler = api ? API[api[1]!] : undefined;\n      if (handler) return await handler(req, env);\n      if (api) return Response.json({ error: { code: "NOT_FOUND", message: "no such route" } }, { status: 404 });\n      return env.ASSETS.fetch(req);\n    } catch (error) {\n      console.error(error);\n      return Response.json({ error: { code: "INTERNAL", message: "internal error" } }, { status: 500 });\n    }\n  },\n} satisfies ExportedHandler<Env>;\n', "wrangler.jsonc": '{\n  "$schema": "node_modules/wrangler/config-schema.json",\n  // One Worker: worker/index.ts answers /api/*, /files/* and /health; the React app (vite build) is served as assets.\n  "name": "my-app",\n  "main": "worker/index.ts",\n  "compatibility_date": "2026-09-01",\n  "compatibility_flags": ["nodejs_compat"],\n  "assets": {\n    "binding": "ASSETS",\n    "not_found_handling": "single-page-application",\n    "run_worker_first": ["/api/*", "/files/*", "/health"]\n  },\n  // Storage and realtime: env.DB (SQLite), env.KV, env.FILES and the live rooms (src/realtime/room.ts).\n  // No ids: wrangler keeps local copies in .wrangler/state; `ambasada deploy` attaches the app\'s real ones.\n  "d1_databases": [{ "binding": "DB", "database_name": "my-app", "migrations_dir": "db/migrations", "migrations_table": "_ambasada_migrations" }],\n  "kv_namespaces": [{ "binding": "KV" }],\n  "r2_buckets": [{ "binding": "FILES", "bucket_name": "my-app" }],\n  "durable_objects": { "bindings": [{ "name": "ROOMS", "class_name": "Room" }] },\n  // Every Durable Object class needs a migration; add new ones at the end, never edit or remove an applied tag.\n  "migrations": [{ "tag": "v1", "new_sqlite_classes": ["Room"] }],\n  "observability": { "enabled": true }\n}\n' }, worker: { ".claude/skills/ambasada-product/SKILL.md": "---\nname: ambasada-product\ndescription: Build an app on Ambasada and put it online. Use when the user wants to make an app, tool, game or website, start one with `npm create ambasada@latest`, run it with `ambasada dev`, publish it with `ambasada deploy` at <slug>.ambasada.dev, show it in the Ambasada app (mini app, notifications, sign-in), store data in the app's SQLite database, KV or file storage, make it realtime with Durable Objects or an agent (Agents SDK), bring a site built in ChatGPT, Lovable, Bolt or v0, or upgrade a project made with an older CLI (`ambasada upgrade`). Default stack: Next.js on Cloudflare.\n---\n\n# Build an app on Ambasada and put it online\n\nAn app is **one website** (one Cloudflare Worker) at `https://<your-slug>.ambasada.dev`. It comes with\nSign in with Ambasada (Ambasada ID), a SQLite database, key-value, file storage and Durable Objects for\nrealtime, and it can live inside the Ambasada app as a mini app with push notifications. No servers, no\nCloudflare account, no keys to configure.\n\n## Start\n\n```sh\nnpm create ambasada@latest my-app           # Next.js (default)\ncd my-app && npm install\nnpx ambasada dev                            # the mock API + your site, no login\n```\n\nOther templates: add `-- --template spa` (Vite + React; for code exported from Lovable or Bolt) or\n`-- --template worker` (plain HTML + small fetch handlers; the smallest possible app). All three have the\nsame `ambasada.config.ts`, sign-in routes, notifications webhook and storage helpers, and a notes example.\n\n## What to read\n\n| The user wants to\u2026 | Read |\n|---|---|\n| know where files go, what Next.js features are allowed, secrets, who is signed in | [reference/stack.md](reference/stack.md) |\n| store data (tables, migrations), sessions or caches, uploads; make it live between people (chat, presence, a shared board, counters); build an AI agent | [reference/storage.md](reference/storage.md) |\n| run it locally, put it online, use their own Cloudflare account | [reference/dev-and-deploy.md](reference/dev-and-deploy.md) |\n| make it look good and easy to use | [reference/design.md](reference/design.md) |\n| show up in the Ambasada app, send push notifications, sign people in inside the app | [reference/mini-app.md](reference/mini-app.md) |\n| build in ChatGPT, Lovable, Bolt or v0 and bring it here | [reference/build-elsewhere.md](reference/build-elsewhere.md) |\n| upgrade a project made with an older CLI | [reference/upgrading.md](reference/upgrading.md) |\n\nFor the Hack A Ton (TON payments, offerings, the agent that runs a shop): `npx ambasada add village`, then\nthe **ambasada-village** skill.\n\n## Rules (break one and the app does not work)\n\n1. **One app = one Worker.** No separate backend, no Docker. State lives in the app's SQLite (`env.DB`),\n   key-value (`env.KV`), file storage (`env.FILES`) or a Durable Object, never in module variables.\n   See [reference/storage.md](reference/storage.md).\n2. **Only the allowed Next.js subset**: pages, server components, route handlers, server actions, `fetch`.\n   No `next/image` default loader, no ISR/`revalidate`, no `fs`/`child_process`/native packages, no custom\n   server, no `middleware.ts`/`proxy.ts`, no `runtime = \"edge\"`. See [reference/stack.md](reference/stack.md#nextjs-allowed-and-banned).\n3. **Keys never reach the browser.** They live in `.env` locally and `ambasada env set` online; only server\n   code reads them. Never prefix one with `NEXT_PUBLIC_`.\n4. **Sign-in is Ambasada ID.** Use the template's `/api/auth/*` routes and `auth.user(req)`; don't add\n   Clerk, Auth.js or Supabase Auth, and don't build an accounts table. Key per-person data by `user.id`.\n5. **Tables change through migrations**: a new `db/migrations/NNNN_name.sql` per change, never edits to an\n   applied one; `npx ambasada db migrate` after deploying.\n\n## When the user is not a developer\n\nDo the work; don't ask them to edit code. Ask at most: what it does and for whom. Then build one page, run\n`npx ambasada dev`, open it, use it as the fake visitor, and show them it worked. Explain in one sentence\nper step, no jargon.\n", ".claude/skills/ambasada-product/reference/build-elsewhere.md": "# Built in ChatGPT, Lovable, Bolt or v0\n\nThree ways, easiest first.\n\n## A. Keep it hosted there, link it\n\nGood for: a site that is finished where it is and only needs to show up in the Ambasada app.\n\n1. On a laptop with Node 22+, once:\n\n   ```sh\n   npm create ambasada@latest my-app       # you need its ambasada.config.ts and the manifest\n   cd my-app && npm install\n   npx ambasada login\n   npx ambasada link https://YOUR-SITE\n   ```\n\n2. The site must serve `/.well-known/ambasada.json` and `/icon.png` (copy them from the new project's\n   `public/`) and pass `npx ambasada check https://YOUR-SITE` ([mini-app.md](mini-app.md)).\n\nLimit: Sign in with Ambasada, notifications and the app's database, KV and files come with hosting on\nambasada.dev. A site hosted elsewhere keeps its own backend; use B or C to get them.\n\n## B. Bring the code home (recommended for Lovable and Bolt)\n\nGood for: anything with real work behind it. You get hosting on ambasada.dev and the full rules.\n\n1. Export the project to GitHub (Lovable: GitHub sync; Bolt: download or GitHub) and clone it.\n2. `npm create ambasada@latest my-app -- --template spa` and copy the exported `src/` (components, pages,\n   styles) into the new project's `src/`, replacing the starter UI. Keep the template's `api/`, `lib/`,\n   `db/`, `ambasada.config.ts`, `wrangler.jsonc` and `vite.config.ts`.\n3. Open the project in Claude Code, Cursor or Codex and say:\n\n   > This is an Ambasada app (see .claude/skills/ambasada-product). Replace Supabase/Firebase with the\n   > app's env.DB (tables in db/migrations), env.KV and env.FILES, and any login with Sign in with Ambasada\n   > (api/auth.ts, /api/auth/me). Then run it with `npx ambasada dev`.\n\n4. `npx ambasada dev`, try it, then `npx ambasada deploy`.\n\n## C. ChatGPT (or any chat) writes the code, you paste it\n\n1. `npm create ambasada@latest my-app`, `cd my-app && npm install`, `npx ambasada dev`.\n2. Paste this into ChatGPT, then the files it mentions, then your idea:\n\n   > I have a Next.js 16 App Router project that runs on Cloudflare Workers (OpenNext). Rules: no `fs`, no\n   > native packages, no `next/image` (use `<img>`), no middleware, no `revalidate`, no other login than the\n   > one in `app/api/auth`. Data goes in SQLite through `lib/db.ts` (tables in `db/migrations/*.sql`), the\n   > signed-in person comes from `currentUser()` in `lib/ambasada.ts`. Below are my `app/page.tsx`,\n   > `app/api/notes/route.ts` and `db/migrations/0001_init.sql`. Rewrite them for my idea: the main action\n   > visible on a phone without scrolling. Write complete files, one code block per file, with the file path\n   > above each. My idea: \u2026\n\n3. Paste each file where ChatGPT says, keep `npx ambasada dev` running, check the page. New tables: a new\n   file in `db/migrations/` (never edit an applied one). When it works: `npx ambasada deploy` and\n   `npx ambasada db migrate`.\n\nUse ChatGPT to write files, not to decide the stack: if its answer adds Prisma, Supabase, NextAuth,\n`next/image` or a `middleware.ts`, tell it \"that's banned in my project, do it without\".\n", ".claude/skills/ambasada-product/reference/design.md": '# Design for people who decide in 10 seconds\n\nPeople open your app on a phone, often inside the Ambasada app, between two other things. They decide in\nseconds whether it is for them. Build for that.\n\n## One page, one action\n\n- **One page first.** What it is, and the one thing to do, fit on the first screen of a phone (375 \xD7 667).\n  Extra pages only when the action needs them.\n- **One action.** One button that does the main thing. Add a second only after people use the first.\n- **Few words.** A headline of up to 8 words, one sentence under it, the button. Cut every adjective you can.\n- **Show the result.** One example of what people get (an image, a sample text) beats any description.\n- **No walls.** No signup before the first use, no cookie banner, no tour. Ask for sign-in when the app\n  needs to remember someone (Sign in with Ambasada is one tap inside the Ambasada app).\n\n## The button\n\n- Label it with the action: **Make my poem**, not **Submit**.\n- Big (at least 48 px tall), full width on phones, one strong colour, nothing else in that colour.\n- If people must type something first, put that one field right above the button.\n- After the action, show the result, or "Working on it\u2026" and the result appearing when ready (a live room\n  or polling). Never a blank page.\n\n## Look\n\n- The templates use `@ambasada/ui` (the Ambasada app\'s look: tokens, `ui-card`, `ui-button`); start there\n  ([mini-app.md](mini-app.md)). Otherwise plain CSS: one font, two colours plus grey, generous spacing.\n- Large text: 18 px body on phones, a headline twice that. Light theme.\n- Works with one thumb: tap targets 48 px, no hover-only menus.\n- Loads fast: no video backgrounds, no 3 MB hero images, no animation libraries.\n\n## Words\n\n- Say what they get, not how it works. "A logo in 1 minute", not "AI-powered logo generation".\n- Write in the language of your users; one is fine.\n\n## Before and after\n\n```\nBad:  Welcome to PoemForge\u2122, the next-generation AI-powered creative writing platform\n      [Features] [Pricing] [About] [Sign up]   \u2026scroll\u2026   [Get started]\n\nGood: Your name as a folk poem\n      Type a name. Get a 4-line Romanian folk poem in 10 seconds.\n      [ Name: _________ ]\n      [   Make my poem   ]\n      "Ana, floare de la munte, / \u2026"  \u2190 one real example\n```\n', ".claude/skills/ambasada-product/reference/dev-and-deploy.md": "# Run it, put it online\n\n## `ambasada dev`: everything on your laptop\n\n```sh\nnpx ambasada dev\n```\n\nStarts two things:\n\n1. a **mock Ambasada API** on `http://127.0.0.1:8788`: same routes and signatures as the real one. Sign in\n   with Ambasada signs you in as \"Fake Visitor\"; `apps.notify` lands in a fake hub; `ambasada.store` and\n   `ambasada.files` work in memory. Open it in a browser for a page with what happened.\n2. **your site** with its normal dev server (`next dev`, `vite` or `wrangler dev`), pointed at the mock.\n\nNo login. The app's database, KV, files and Durable Objects run locally too (wrangler, `.wrangler/state`);\n`ambasada dev` applies `db/migrations/` to the local database before it starts the site.\n\nTry it: open your site, sign in, add a note; `http://localhost:3000/?ambasada_shell=mock` pretends to be inside\nthe Ambasada app (host bar insets, silent sign-in).\n\n`npx ambasada dev --mock-only` starts only the mock, if you run your site yourself. The mock's keys:\n`AMBASADA_API_URL=http://127.0.0.1:8788`, `AMBASADA_API_KEY=sk_test_dev` (already in the project's `.env`).\n\n## `ambasada deploy`: online at `<slug>.ambasada.dev`\n\nOnce, per laptop:\n\n```sh\nnpx ambasada login        # opens a page: sign in with Ambasada ID\n```\n\n(If it asks for a key instead: https://developer.ambasada.dev \u2192 your app \u2192 a project key, `vk_\u2026`.)\n\nThen, every time you want the new version online:\n\n```sh\nnpx ambasada deploy\n```\n\nIt does, in order:\n\n1. **build**: `opennextjs-cloudflare build` (Next), `vite build` (spa) or a bundle of the Worker (worker);\n2. **smoke test**: runs the built Worker locally in workerd and requests `/` and `/.well-known/ambasada.json`;\n   a crash stops the deploy (skip with `--no-smoke` only if you know why it fails);\n3. **upload**: the URL is `https://<your-slug>.ambasada.dev`, with `AMBASADA_API_KEY`, `AMBASADA_API_URL`,\n   Sign in with Ambasada and the app secret set for you, and the app's own database, KV namespace and bucket\n   bound as `DB`, `KV`, `FILES` (created on the first deploy) plus the Durable Objects from `wrangler.jsonc`.\n\nThe database's tables are not created by the deploy: run `npx ambasada db migrate` (it applies the new files\nin `db/migrations/`). No Cloudflare account needed. `--dry-run` builds and prints what it would upload.\n\nYour own secrets (an API key for another service): `npx ambasada env set NAME value` (live at once, and on\nevery deploy); `npx ambasada env list` shows the names.\n\nLimits: 10 MB compressed bundle, 1000 static files, short CPU time per request (waiting on `fetch` does not\ncount). Heavy work belongs in an API you call, or a Durable Object, not in one request.\n\n## `ambasada dev --tunnel`: your laptop, live\n\nWhen the Ambasada app, sign-in or webhooks need to reach the version on your laptop (before deploying, or to\ndebug), log in once, then:\n\n```sh\nnpx ambasada dev --tunnel         # your dev server, against the real API, at https://<slug>-dev.ambasada.dev\nnpx ambasada tunnel --port 5173   # or: only the tunnel, for a server you started yourself\n```\n\nUntil Ctrl+C, `https://<slug>-dev.ambasada.dev` is your app's URL. There is no mock in this mode. The first\ntime takes up to 2 minutes while the address is published; after that it is instant. Only one terminal per\napp at a time: `--force` takes it over. More: docs/TUNNEL.md.\n\n## `ambasada deploy --own`: your own Cloudflare account\n\nRuns `wrangler deploy` into your account (you need `npx wrangler login` first), then\n`ambasada link <your workers.dev URL>`. Set the secrets yourself: `npx wrangler secret put AMBASADA_API_KEY`.\n\n## `ambasada link`: the app is hosted somewhere else\n\n```sh\nnpx ambasada link https://my-thing.lovable.app\n```\n\nSets `product.url` in `ambasada.config.ts` and checks that `<url>/health` answers. Use it for Lovable, Bolt,\nv0, Vercel, your own server. See [build-elsewhere.md](build-elsewhere.md).\n\n## Watch it run\n\n```sh\nnpx ambasada logs --follow     # the last deploy and new errors\nnpx ambasada check https://<slug>.ambasada.dev   # the Ambasada app's checks on the live app\n```\n\nThe Developer app (https://developer.ambasada.dev) has deploys, errors, users and the storage tabs.\n\n## Upgrading\n\nA new devkit: `npx ambasada upgrade` (dependencies, skills, mechanical code changes), then\n[upgrading.md](upgrading.md) for the steps a coding agent does.\n\n## When it goes wrong\n\n| Symptom | Fix |\n|---|---|\n| build fails on `fs`, `child_process`, a `.node` file, `sharp` | a banned package: see [stack.md](stack.md#nextjs-allowed-and-banned) |\n| smoke test: `/` answers 500 | open `npx ambasada dev`, load `/`, read the terminal error |\n| `no such table: \u2026` online | `npx ambasada db migrate` |\n| a Durable Object migration is refused on deploy | never edit or remove a deployed tag in `wrangler.jsonc`'s `migrations`; add the next one ([storage.md](storage.md)) |\n| `CONFIG: no API key` | missing `AMBASADA_API_KEY`: `.env` locally, `ambasada login` before deploying |\n| sign-in loops back to the login page | `PUBLIC_URL` differs from the URL in the browser; remove it or fix it |\n| `this app uses the village \u2026 not installed` | a Hack A Ton project: `npx ambasada upgrade` (adds `@ambasada/village`) |\n", ".claude/skills/ambasada-product/reference/mini-app.md": '# The product inside the Ambasada app (mini app)\n\nEvery product on `https://<slug>.ambasada.dev` is also a **mini app**: it can open inside the Ambasada\nmobile app, sign people in without a consent screen and send them push notifications. The template does\nthe wiring; this page says what is there and how to use it. Platform spec: docs/MINI-APPS.md in the repo.\n\n## Is it listed?\n\n`ambasada deploy` registers the product with the Ambasada hub and checks it. It prints one line:\n\n```\n\u2713 in the Ambasada app: Listed for the event\n! in the Ambasada app: Unlisted \xB7 needs: icon, viewport\n```\n\nUnlisted apps work, but only you see them in the Ambasada app. Fix what `needs` says and deploy again,\nor run `npx ambasada check https://<slug>.ambasada.dev` (or `npx ambasada check` for the local folder).\nThe checks: `/.well-known/ambasada.json` valid, `icon.png` a 1024\xD71024 PNG with no transparency, the page\nhas `<meta name="viewport" content="width=device-width, initial-scale=1">`, no dark-only theme, the\nfirst page answers in under 3 s, `/api/auth/callback` exists, the notifications webhook answers a signed ping.\nConnected tools can do the same through MCP: `app_status`, `app_check`.\n\n## Look like the app: @ambasada/ui\n\nThe templates import `@ambasada/ui` (tokens, Inter + JetBrains Mono, `ui-card`, `ui-button`, `ui-row`,\n`ui-pill`, `ui-sheet`, `ui-stepper`, `ui-empty`, `ui-skeleton`). Use those classes before writing CSS.\nReact: `import { Card, Button, Sheet } from "@ambasada/ui/react"`. Plain HTML: one\n`<link rel="stylesheet" href="https://unpkg.com/@ambasada/ui@0.5/dist/ambasada-ui.css">`.\nLeave space for the app\'s bar: the page uses `--ambasada-safe-area-*` and `--ambasada-host-bar`.\nLight theme only; one red (primary) button per screen.\n\n## Notifications\n\nAlready wired in every template:\n\n| Piece | Where |\n|---|---|\n| manifest: `"scopes": ["identity", "notifications"]`, `"notifications": { "webhook": "/api/ambasada/webhook" }`, `"privacy_url": "/privacy"` | `public/.well-known/ambasada.json` (`web/` in the worker template) |\n| the webhook: verifies the hub\'s signature, saves `token \u2194 Ambasada user id` in `ambasada.store` | `app/api/ambasada/webhook/route.ts` (Next), `api/ambasada-webhook.ts` (spa, worker) |\n| `notifyUser(app, userId, { \u2026 })`: push to one person if they turned notifications on | `lib/notifications.ts` |\n| the privacy page the scopes need | `app/privacy/page.tsx`, `public/privacy.html`, `web/privacy.html` |\n\nSend one when something the person waits for happens (their order is ready), never as marketing:\n\n```ts\nimport { notifyUser } from "../lib/notifications.ts";\n\nconst user = await ambasada().auth.user(req);            // signed in with Ambasada\nif (user) await notifyUser(ambasada(), user.id, {\n  notification_id: `order-${id}-ready`,                  // unique per message; repeats are dropped for 24 h\n  title: "Your translation is ready",                    // \u2264 40 characters\n  body: "Tap to read it.",                               // \u2264 140\n  url: `/orders/${id}`,                                  // a path on your site: where the tap opens\n});\n```\n\nPeople turn notifications on in the app (the app asks; the page can ask too with\n`notifications.request()` from `@ambasada/miniapp`, from a button). The secret (`AMBASADA_APP_SECRET`) is\ninjected by `ambasada deploy`; never put it in the browser.\n\n## Signed in without a consent screen\n\nInside the Ambasada app the page signs in silently: `auth.signIn()` from `@ambasada/miniapp` gets a short\ntoken from the app and POSTs it to `/api/auth/shell`, which sets the same session as "Sign in with\nAmbasada". Server code doesn\'t change: `currentUser()` / `ambasada().auth.user(req)` work either way.\nOn the web, the button and consent screen stay. Silent sign-in needs the app to be Verified; until then\n`signIn()` resolves `null` and the button shows.\n\n## Try it locally\n\n`npx ambasada dev` plays the hub: when your product starts it sends a signed `ping` and\n`notifications_enabled` to your webhook (the token lands in the store as\n`ambasada/notifications/user_fake_visitor`), and its `/api/apps/notify` accepts pushes for that token\n(they show in the terminal). Open `http://localhost:3000/?ambasada_shell=mock` to pretend to be inside the\napp: the fake shell signs you in silently as "Fake Visitor".\n', ".claude/skills/ambasada-product/reference/stack.md": '# The stack: Next.js on Cloudflare\n\nEvery Ambasada app is one Cloudflare Worker. The default template builds it from **Next.js 16.4**\nwith **@opennextjs/cloudflare 1.20** (the OpenNext adapter) and the `nodejs_compat` flag. You write a\nnormal Next.js App Router app; `ambasada deploy` turns it into a Worker.\n\n## Folder layout (template `next`)\n\n```\nmy-app/\n  app/page.tsx                 the landing page\n  app/notes.tsx                the notes example (a client component calling app/api/notes)\n  app/api/notes/route.ts       rows in env.DB, the list cached in env.KV\n  app/api/files/route.ts       uploads to env.FILES; app/files/[...key]/route.ts serves them\n  app/api/auth/*/route.ts      Sign in with Ambasada: login, callback, logout, me, shell (silent, in the app)\n  app/api/ambasada/webhook/    the Ambasada app\'s events: who turned notifications on (reference/mini-app.md)\n  app/account.tsx              the header: "Sign in with Ambasada", or the person\'s name and avatar\n  app/miniapp.tsx              inside the Ambasada app: ready() and silent sign-in\n  app/privacy/page.tsx         what you keep about people (the manifest\'s privacy_url)\n  app/room/                    the live room demo\n  lib/ambasada.ts              the Ambasada client for server code (reads the Worker env)\n  lib/notifications.ts         notifyUser(): a push to one person who turned notifications on\n  lib/db.ts, kv.ts, files.ts   env.DB, env.KV, env.FILES (reference/storage.md); lib/bindings.ts reaches them\n  db/migrations/               the database\'s tables, one .sql file per change\n  src/realtime/                the live room (a Durable Object) and its React hook\n  ambasada.config.ts           app id, name, one-line description, product URL\n  wrangler.jsonc               Worker settings (nodejs_compat, assets) and the bindings DB, KV, FILES, ROOMS\n  worker.ts                    the Worker entry: live rooms\' WebSockets, then the Next.js app\n  open-next.config.ts          OpenNext settings; leave as is\n  .env                         secrets for local runs (never commit, never send to the browser)\n  .ambasada/project.json       the template and devkit version (`ambasada upgrade` reads it); commit it\n  .claude/skills/              this skill\n```\n\nOne more endpoint = one more `app/api/<name>/route.ts`. Data it keeps goes in `env.DB` (a migration in\n`db/migrations/`), `env.KV` or `env.FILES` ([storage.md](storage.md)).\n\n## Using the client\n\nServer code only (route handlers, server components, server actions):\n\n```ts\n// app/api/hello/route.ts\nimport { ambasada } from "../../../lib/ambasada.ts";\n\nexport async function GET(req: Request) {\n  const user = await ambasada().auth.user(req);\n  return Response.json({ hello: user?.name ?? "stranger" });\n}\n```\n\n`lib/ambasada.ts` creates one client per Worker instance with `createAmbasada({ env })` from `@ambasada/sdk`,\nwhere `env` comes from `getCloudflareContext()` (deployed); under `next dev` the SDK reads `process.env`.\nIt reads `AMBASADA_API_KEY` and `AMBASADA_API_URL` (default https://api.ambasada.dev). The client has `auth`\n(below), `apps` (notifications, [mini-app.md](mini-app.md)), `store` and `files`.\n\n## Who is signed in\n\nEvery hosted app gets **Sign in with Ambasada** (Ambasada ID) for free: no keys, no settings.\nThe template\'s header already has the button. In server code:\n\n```ts\nimport { currentUser } from "../lib/ambasada.ts";\nimport { bindings } from "../lib/bindings.ts";\nimport { run } from "../lib/db.ts";\n\nconst user = await currentUser(); // null, or { id, name, avatar_url, builder, pass, member_since, \u2026 }\nif (!user) redirect("/api/auth/login?returnTo=/orders");\nawait run(bindings().DB, "INSERT INTO orders (user_id, item) VALUES (?, ?)", user.id, item); // key per-person data by user.id\n```\n\nIn a route handler, `ambasada().auth.user(req)` does the same. Client components fetch `/api/auth/me`.\nAsk for the email only if you need it: `/api/auth/login` calls `auth.login(req, { email: true })`.\nDon\'t build your own login or accounts table, and don\'t add Clerk, Auth.js or Supabase Auth.\n\n## Next.js: allowed and banned\n\nAllowed, and enough for any product here:\n\n- pages and layouts (`app/**/page.tsx`, `layout.tsx`), server components, client components (`"use client"`)\n- route handlers (`app/api/**/route.ts`), server actions (`"use server"`)\n- `fetch` to any HTTPS API, `next/link`, `next/font`, plain CSS / CSS modules / Tailwind\n\nBanned (they fail on Workers or break the deploy):\n\n| Don\'t | Do instead |\n|---|---|\n| `next/image` with the default loader | `<img>`, or `images: { unoptimized: true }` in `next.config.ts` |\n| ISR, `export const revalidate = \u2026`, `revalidatePath`, `unstable_cache` | render on each request (`export const dynamic = "force-dynamic"`), or cache results in `env.KV` |\n| `fs`, `child_process`, `sharp`, `bcrypt`, `sqlite3`, `puppeteer`, any native package | `fetch` an API (an LLM provider with your own key in a secret, for example) |\n| a custom server (`server.js`, Express inside Next) | route handlers |\n| `middleware.ts` / `proxy.ts`, `export const runtime = "edge"` | check inside the page or route handler; Next\'s default runtime is right |\n| Prisma, Drizzle with a database, Supabase, Firebase, Mongo, Redis | `env.DB` (SQLite), `env.KV`, `env.FILES` ([storage.md](storage.md)) |\n| writing files at runtime, global variables as storage | `env.DB`, `env.KV`, `env.FILES` or a Durable Object (each request can run on a different machine) |\n\nKeep the bundle small: the Worker limit is 10 MB compressed. Big UI kits and icon packs are the usual cause.\n\n## Where data lives\n\nThe app has its own SQLite database (`env.DB`), key-value (`env.KV`), file storage (`env.FILES`, public at\n`/files/<key>`) and Durable Objects for live state, created at the first deploy. Which one fits, the migrations\nworkflow and copy-paste patterns: [storage.md](storage.md).\n\nAlso there, for small things: `ambasada.store` (JSON, 1 MB for the whole app: settings, not user data) and\n`ambasada.files.put(\u2026)` \u2192 `{ url }` (platform-hosted files that expire).\n\n## Secrets\n\n- Local: `.env` in the project (Cloudflare\'s `.dev.vars` works too). The template writes it with test\n  values for `ambasada dev`. Both are in `.gitignore`; keep them there.\n- Deployed: `ambasada deploy` injects `AMBASADA_API_KEY`, `AMBASADA_API_URL`, the Sign in with Ambasada\n  credentials (`AMBASADA_AUTH_*`) and the mini-app secret (`AMBASADA_APP_SECRET`, with `AMBASADA_HUB_URL`\n  and `AMBASADA_APP_ORIGIN`) for you. With `--own`, set them yourself: `npx wrangler secret put AMBASADA_API_KEY`.\n- Other services\' keys (an OpenAI key, say): `.env` locally, `npx ambasada env set OPENAI_API_KEY \u2026` online;\n  read on the server only.\n- Anything named `NEXT_PUBLIC_*` is copied into the browser. Never put a key there.\n- Never paste a key into a page, a client component, a prompt for a no-code builder, or a commit.\n\n## Variants\n\n- `spa`: Vite + React with `@cloudflare/vite-plugin`, for code exported from Lovable or Bolt. The\n  `api/` endpoints are small fetch handlers; the React app calls them with `fetch("/api/\u2026")`.\n- `worker`: `web/` (plain HTML/CSS) plus `api/*.ts` fetch handlers. Best when the app is a page or two.\n\nThe rules on this page (state, secrets, no native packages) apply to all three.\n', ".claude/skills/ambasada-product/reference/storage.md": '# Data, files and realtime\n\nEvery app on ambasada.dev gets a real database, key-value, file storage and Durable Objects. They are created\nat the first `ambasada deploy` and bound to the Worker on every deploy; nothing to sign up for or configure.\nLocally (`ambasada dev`, `wrangler dev`, `vite`) wrangler runs the same things from `.wrangler/state`.\n\n| Need | Use | Not |\n|---|---|---|\n| anything with rows: users\' data, orders, posts, scores, anything you query, sort or join | `env.DB` (SQLite, D1) | KV, files, `ambasada.store` |\n| sessions, caches of slow results, feature flags, "seen this already" | `env.KV` | a table you scan |\n| uploads, images, audio, PDFs, generated files | `env.FILES` (R2), public at `/files/<key>` | base64 in the database |\n| state several people see change live: chat, presence, a shared board, a game table, live counters, a queue, rate limits, one thing per entity | a Durable Object (`env.ROOMS` in the templates) | polling the database |\n| an AI agent with memory, schedules and live state per user or task | the Agents SDK (`examples/agent/`) | a cron that rereads everything |\n| a few small settings for a tiny app | `ambasada.store` (1 MB per app) | user data of any size |\n\nQuotas per app: database 500 MB, KV 1 GB, files 5 GB. A database over its quota stops the next deploy.\n\n## `env.DB`: SQLite\n\nSchema lives in `db/migrations/`, one file per change, applied in name order, never edited once applied:\n\n```sql\n-- db/migrations/0002_orders.sql\nCREATE TABLE orders (\n  id INTEGER PRIMARY KEY AUTOINCREMENT,\n  user_id TEXT NOT NULL,\n  item TEXT NOT NULL,\n  paid INTEGER NOT NULL DEFAULT 0,\n  created_at INTEGER NOT NULL\n);\nCREATE INDEX orders_user ON orders (user_id, created_at);\n```\n\n```sh\nnpx wrangler d1 migrations apply DB --local   # the local database, for ambasada dev\nnpx ambasada db migrate                       # the app\'s database online (run before or right after deploying)\nnpx ambasada db shell "SELECT * FROM orders LIMIT 5"\n```\n\nQuery with `lib/db.ts` (SQL with `?` placeholders, typed rows, no ORM):\n\n```ts\nimport { all, batch, first, run } from "../lib/db.ts";\n\ntype Order = { id: number; user_id: string; item: string; paid: number; created_at: number };\nconst mine = await all<Order>(env.DB, "SELECT * FROM orders WHERE user_id = ? ORDER BY created_at DESC LIMIT 50", user.id);\nconst one = await first<Order>(env.DB, "SELECT * FROM orders WHERE id = ?", id);\nconst { lastRowId } = await run(env.DB, "INSERT INTO orders (user_id, item, created_at) VALUES (?, ?, ?)", user.id, item, Date.now());\nawait batch(env.DB, [["UPDATE stock SET n = n - 1 WHERE item = ?", item], ["UPDATE orders SET paid = 1 WHERE id = ?", id]]); // all or nothing\n```\n\nIn Next.js route handlers and server components, the bindings come from `bindings()` (`lib/bindings.ts`):\n`const { DB } = bindings();`. In the spa and worker templates, handlers get `env`.\n\nRules: always placeholders, never string-built SQL. Key per-person rows by the Ambasada user id\n(`auth.user(req).id`). Add an index for every `WHERE` you run often. Times as `Date.now()` integers.\n\n## `env.KV`: sessions, caches, flags\n\nReads are fast everywhere; a write shows up everywhere within about a minute; one write per second per key.\n\n```ts\nimport { cached, getJson, putJson } from "../lib/kv.ts";\n\nawait putJson(env.KV, `session:${id}`, { userId }, { ttl: 60 * 60 * 24 });\nconst session = await getJson<{ userId: string }>(env.KV, `session:${id}`);\nconst stats = await cached(env.KV, "home:stats", 300, () => computeStats(env)); // recompute at most every 5 min\n```\n\nNot for counters, balances or anything two people write at once: use `env.DB` (a transaction) or a Durable Object.\n\n## `env.FILES`: uploads and generated files\n\n```ts\nimport { serveFile, upload } from "../lib/files.ts";\n\n// POST /api/files: a signed-in person uploads (the templates\' api/files.ts)\nconst { key, url } = await upload(env.FILES, req.body, { contentType: req.headers.get("content-type") ?? undefined, folder: `u/${user.id}` });\nawait run(env.DB, "INSERT INTO photos (user_id, file_key) VALUES (?, ?)", user.id, key); // keep the key, not the bytes\n\n// GET /files/*: already wired in every template, with ETag, ranges and cache headers\nreturn serveFile(env.FILES, req);\n```\n\n`url` is `/files/<key>` on the app (`https://<slug>.ambasada.dev/files/<key>`): public to anyone with the link.\nPrivate files: store them under a key nobody can guess and serve them from your own route that checks\n`auth.user(req)` first, instead of `/files/*`. `npx ambasada files list | put | url | delete` from the terminal.\n\n## Durable Objects: realtime and per-entity state\n\nA Durable Object is one tiny server per id (a room, a document, a match, a user) with its own SQLite, that\nevery request for that id reaches. Use one whenever people must see each other\'s changes live, or one thing\nmust never be updated by two requests at once. The templates ship `src/realtime/room.ts` (`env.ROOMS`):\n\n```ts\n// the Worker: /api/rooms/<id>/ws \u2192 the room\nconst room = /^\\/api\\/rooms\\/([^/]+)\\/ws$/.exec(pathname);\nif (room) return env.ROOMS.getByName(decodeURIComponent(room[1]!)).fetch(req);\n```\n\n```ts\n// the room (shortened): WebSocket hibernation, broadcast, its own SQLite\nexport class Room extends DurableObject<unknown> {\n  async fetch(req: Request) {\n    const { 0: client, 1: server } = new WebSocketPair();\n    this.ctx.acceptWebSocket(server);              // hibernation: no cost while nobody talks\n    server.serializeAttachment({ name: "guest" }); // per-connection data that survives hibernation\n    return new Response(null, { status: 101, webSocket: client });\n  }\n  async webSocketMessage(ws: WebSocket, data: string | ArrayBuffer) {\n    this.ctx.storage.sql.exec("INSERT INTO messages (text, at) VALUES (?, ?)", String(data), Date.now());\n    for (const peer of this.ctx.getWebSockets()) peer.send(String(data)); // everyone in the room\n  }\n}\n```\n\n```tsx\n// the browser (React): src/realtime/use-room.ts\nconst { messages, online, send, status } = useRoom(roomId, { name: user.name });\n```\n\nA new class needs a binding and a migration in `wrangler.jsonc` (new tags go at the end; never edit or remove one\nthat was deployed; to drop a class add `{ "tag": "v3", "deleted_classes": ["Old"] }`):\n\n```jsonc\n"durable_objects": { "bindings": [{ "name": "ROOMS", "class_name": "Room" }, { "name": "BOARDS", "class_name": "Board" }] },\n"migrations": [{ "tag": "v1", "new_sqlite_classes": ["Room"] }, { "tag": "v2", "new_sqlite_classes": ["Board"] }]\n```\n\nExport the class from the Worker\'s entry (`src/worker.ts`; spa `worker/index.ts`; next `worker.ts`).\nOther shapes, same pattern: presence (who is online), a live counter (`UPDATE \u2026 RETURNING`, then broadcast), a\nper-user rate limit (`getByName(user.id)`), a job queue (`this.ctx.storage.setAlarm`). A Durable Object belongs\nto this app; other apps can\'t reach it. Under `next dev` they don\'t run: use `npm run preview` (workerd).\n\n## Agents (Agents SDK)\n\nFor agentic products (an assistant per user, a research task that runs for minutes, a bot that follows up),\nuse the Cloudflare Agents SDK: `examples/agent/` in the template (`npm i agents`, four lines to wire). An agent\nis a Durable Object with live state synced to clients (`setState`, `useAgent` in React), `this.sql`,\n`this.schedule(\u2026)` and WebSockets. One agent per user or task: `/agents/agent-example/<user id>`.\n\n## Don\'t\n\n- Poll (`setInterval(fetch\u2026)`) for what others changed: a Durable Object + WebSocket pushes it.\n- Put files or base64 in the database or KV: `env.FILES`, and keep the key in a row.\n- Keep user data in `ambasada.store`: it is 1 MB for the whole app.\n- Keep state in module variables or global objects: every request may run on another machine.\n- Count, rank or move money in KV: use a SQL transaction (`batch`) or a Durable Object.\n- Build SQL by joining strings with user input: `?` placeholders.\n- Edit an applied migration: add the next file.\n- Add Prisma, Drizzle with Postgres, Supabase, Firebase, Mongo or Redis: everything above is already here.\n', ".claude/skills/ambasada-product/reference/upgrading.md": "# Upgrading a project\n\n`npx ambasada upgrade` does the mechanical part: every `@ambasada/*` dependency to the CLI's version, the\npackage manager, `.claude/skills/ambasada-*` re-synced (the project's own skills are left alone), the code\nchanges listed below as \"done by `upgrade`\", the `ambasada check` rules, and `.ambasada/project.json`\n(the template and devkit version). `npx ambasada upgrade --check` only reports.\n\nWhat is left is below, per version, for a coding agent. Do the steps for every version between the one in\n`.ambasada/project.json` (none: 0.7) and the current one, in order. After each, run the app with\n`npx ambasada dev` and the project's `typecheck` script.\n\n## 0.7 \u2192 0.8: the platform and the village split\n\n0.8 splits the devkit: `@ambasada/sdk` and `ambasada` are the platform (sign-in, notifications, storage,\nhosting); the Hack A Ton economy (TON, checkout, offerings, the agent) is the add-on `@ambasada/village`.\n\nDone by `upgrade`:\n\n- the village names (`village`, `createVillage`, `offering`, `defineCompany`, `isVillageError`, the receipt and\n  webhook helpers, their types) import from `@ambasada/village`; in a village app `createAmbasada` became\n  `createVillage` and `DEFAULT_API_URL` became `DEFAULT_VILLAGE_API_URL` (their 0.7 meaning);\n- `@ambasada/village` added to `package.json` when the app has `offerings.ts` or an `idea`;\n- `.env` / `.dev.vars`: `AMBASADA_API_URL=https://hackaton.ambasada.id` became `https://api.ambasada.dev` plus\n  `AMBASADA_VILLAGE_API_URL=https://hackaton.ambasada.id`;\n- the `ambasada-payments` skill replaced by `ambasada-village`.\n\nFor the agent:\n\n1. **Platform code uses the platform client.** Files that only sign people in, send notifications or use\n   `store`/`files` can import `createAmbasada` / `ambasada` from `@ambasada/sdk` instead of the village client.\n   Leave files that sell, check receipts or call `llm` on the village client.\n2. **Config.** `ambasada.config.ts` may stay `defineCompany({ id, name, idea, \u2026 })`; the 0.8 form is\n   `defineCompany(defineApp({ id, name, description, product }), { idea, offerings, agent })` with\n   `defineApp` from `@ambasada/sdk`. Add a one-line `description` (the manifest's subtitle).\n3. **CLI calls.** In scripts, READMEs and `package.json`: `ambasada wallet|ledger|offerings|market|steer|webhook|links`\n   \u2192 `ambasada village \u2026`, `ambasada logs --agent` \u2192 `ambasada village logs --agent`, `ambasada dev buy` \u2192\n   `ambasada village dev buy`. The old spellings still work through 1.x with a warning.\n4. **Pages that load pay.js** from `AMBASADA_API_URL` should use the village client's `apiUrl` (or\n   `AMBASADA_VILLAGE_API_URL`): `AMBASADA_API_URL` is the platform's from 0.8.\n5. **Login.** The CLI's login moved from `~/.config/village` to `~/.config/ambasada` (moved on first use);\n   nothing to do unless a script reads that file.\n6. Run `npx ambasada check`, `npx ambasada dev` and the typecheck; deploy when they pass.\n", "README.md": "# My App\n\nAn app on Ambasada, one bare Cloudflare Worker (template `worker`): sign-in with Ambasada ID, notifications in the Ambasada app, a database,\nkey-value, files and live rooms. Everything here is a default; change anything.\n\n```\nambasada.config.ts          id, name, one-line description, where the app runs\nweb/.well-known/ambasada.json the app manifest: the Ambasada app lists your app from it (written by `ambasada init` from ambasada.config.ts; icon web/icon.png)\nsrc/worker.ts               the Worker: /api/<name> \u2192 api/<name>.ts, / (landing page), the rest from web/\napi/auth.ts                 Sign in with Ambasada (login, callback, logout, me, shell)\napi/ambasada-webhook.ts     the Ambasada app's events (notifications on/off); lib/notifications.ts sends pushes\napi/notes.ts, api/files.ts  env.DB + env.KV, uploads to env.FILES\nlib/ambasada.ts             the SDK client from the Worker's env\nlib/db.ts, kv.ts, files.ts  env.DB, env.KV, env.FILES; db/migrations/ the tables\nsrc/realtime/room.ts        the live room (a Durable Object); web/room.html is the demo\nweb/                        the landing page, static assets\nwrangler.jsonc              one Worker + assets, nodejs_compat, the storage bindings\n.claude/skills/             docs your coding agent reads (ambasada-product)\n```\n\n## 1. Run it (2 min)\n\nNeeds Node \u2265 22.\n\n```sh\nnpm install\nnpm run dev                # `ambasada dev`: the mock Ambasada API on :8788 + `wrangler dev` on http://localhost:3000\n```\n\nOpen http://localhost:3000: add a note, sign in (the mock signs you in as \"Fake Visitor\"), open /room in two tabs.\nhttp://127.0.0.1:8788 is the mock's page (sign-ins, notifications, the store). `ambasada dev` points your app at the\nmock whatever `.env` says; http://localhost:3000/?ambasada_shell=mock pretends to be inside the Ambasada app.\n\n## 2. Make it yours\n\n- `ambasada.config.ts`: name and description (the manifest is written from them).\n- A new endpoint: `api/<name>.ts` (and a line in `src/worker.ts`). Data goes in `env.DB` (a migration in `db/migrations/`), `env.KV` or `env.FILES`.\n- Ask your coding agent: it has the ambasada-product skill (stack, storage, sign-in, mini app, deploy).\n\nNo framework, no build step: `wrangler` bundles `src/worker.ts`, and `web/` is served as is.\n\n## 3. Go live (1 min)\n\n```sh\nnpx ambasada login         # Ambasada ID, or a project key from https://developer.ambasada.dev\nnpx ambasada deploy        # build, smoke test, host at https://my-app.ambasada.dev\nnpx ambasada db migrate    # db/migrations \u2192 the app's database\nnpx ambasada logs          # the last deploy and recent errors\n```\n\nSign-in, notifications and the storage are set up by the deploy; nothing to configure. Your own secrets:\n`npx ambasada env set NAME value`. Hosting elsewhere: `npx wrangler deploy`, then `npx ambasada link https://\u2026`.\n\n**Sign in with Ambasada**: the header's button signs people in with their Ambasada ID; on the server,\n`ambasada(\u2026).auth.user(req)` gives `{ id, name, avatar_url, builder, pass }` or null.\n\n## Storage and realtime\n\nEvery app gets these, provisioned at the first `ambasada deploy`; locally wrangler keeps them in `.wrangler/state`.\n\n| Binding | For | Here |\n|---|---|---|\n| `env.DB` | SQLite: anything relational | `lib/db.ts`, tables in `db/migrations/`, example `api/notes.ts` |\n| `env.KV` | sessions, caches, flags | `lib/kv.ts` (the notes cache) |\n| `env.FILES` | uploads, generated files; public at `/files/<key>` | `lib/files.ts`, upload `api/files.ts` |\n| `env.ROOMS` | live state shared between people (Durable Object) | `src/realtime/room.ts`, demo at `/room` |\n\n```sh\nnpx wrangler d1 migrations apply DB --local   # db/migrations \u2192 the local database (ambasada dev)\nnpx ambasada db migrate                       # \u2026 \u2192 the app's database online\nnpx ambasada db shell \"SELECT * FROM notes\"   # or `ambasada db shell` for a prompt\nnpx ambasada kv list | get <key> | put <key> <value> | delete <key>\nnpx ambasada files put <file> | list | url <key> | delete <key>\n```\n\nOptional: an agent with the Agents SDK in `examples/agent/` (its README: `npm i agents` and four lines to wire it).\n\n## Rules worth knowing\n\n- State lives in `env.DB`, `env.KV`, `env.FILES` or a Durable Object, never in module variables: a Worker has many instances.\n- Secrets only in `.env` locally and `ambasada env set` online; never in the code or `wrangler.jsonc` vars.\n- `npx ambasada check` runs the Ambasada app's checks (manifest, icon, viewport); `npx ambasada upgrade` after a new devkit.\n\nFor the Hack A Ton: `npx ambasada add village` (the add-on).\n\nBuilt by [CENTYSO](https://centyso.com) for [Ambasada](https://ambasada.id).\n", "ambasada.config.ts": 'import { defineApp } from "@ambasada/sdk";\n\nexport default defineApp({\n  id: "my-app",\n  name: "My App",\n  // One line about the app: the Ambasada app shows it under the name (`ambasada init` writes the manifest from it).\n  description: "Notes, a live room and sign-in",\n  // Where the app runs. `ambasada dev` serves it on http://localhost:3000; hosted, it is https://my-app.ambasada.dev\n  // (`ambasada deploy` sets it; `ambasada link https://\u2026` when you host elsewhere).\n  product: { url: "http://localhost:3000" },\n});\n', "api/ambasada-webhook.ts": '// POST /api/ambasada/webhook: the Ambasada app\'s events for this mini app (docs/MINI-APPS.md \xA77), signed with\n// AMBASADA_APP_SECRET (injected on ambasada.dev; `ambasada dev` plays the hub and sends a ping and\n// notifications_enabled here when it starts). The manifest points here: notifications.webhook.\nimport { isAmbasadaError } from "@ambasada/sdk";\nimport { ambasada, type Env } from "../lib/ambasada.ts";\nimport { forgetToken, saveToken } from "../lib/notifications.ts";\n\nexport default async function appWebhook(req: Request, env: Env): Promise<Response> {\n  const app = ambasada(env);\n  try {\n    const event = await app.apps.verifyWebhook(req); // throws if forged or stale\n    switch (event.event) {\n      case "notifications_enabled":\n      case "app_added":\n        if (event.token) await saveToken(app, event.user, event.token);\n        break;\n      case "notifications_disabled":\n      case "app_removed":\n        await forgetToken(app, event.user);\n        break;\n      case "ping": // `ambasada check` and the registry: answer 200\n        break;\n    }\n    return new Response("ok");\n  } catch (error) {\n    if (isAmbasadaError(error)) return error.toResponse();\n    throw error;\n  }\n}\n', "api/auth.ts": '// Sign in with Ambasada (Ambasada ID, OAuth + PKCE): zero setup. On https://<slug>.ambasada.dev the deploy\n// injects AMBASADA_AUTH_*; under `ambasada dev` the mock signs you in as a fake visitor.\n//   GET /api/auth/login?returnTo=/   \u2192 the Ambasada ID consent screen\n//   GET /api/auth/callback           \u2192 back from it: sets an HttpOnly session cookie, redirects to returnTo\n//   GET /api/auth/logout             \u2192 clears it\n//   GET /api/auth/me                 \u2192 { user } (null when signed out), for the browser\n//   POST /api/auth/shell { token }   \u2192 silent sign-in inside the Ambasada app: the same session, no consent screen\n//                                      (the page calls `auth.signIn()` from @ambasada/miniapp)\n// On the server: `await ambasada(env).auth.user(req)` \u2192 { id, name, avatar_url, builder, pass, \u2026 } or null.\nimport { isAmbasadaError } from "@ambasada/sdk";\nimport { ambasada, type Env } from "../lib/ambasada.ts";\n\nexport default async function auth(req: Request, env: Env): Promise<Response> {\n  const { auth } = ambasada(env);\n  try {\n    switch (new URL(req.url).pathname.replace(/\\/+$/, "")) {\n      case "/api/auth/login":\n        return await auth.login(req);\n      case "/api/auth/callback":\n        return await auth.callback(req);\n      case "/api/auth/logout":\n        return auth.logout(req);\n      case "/api/auth/shell":\n        return await auth.shell(req);\n      case "/api/auth/me": {\n        // Under `ambasada dev` the page needs the mock issuer for its fake shell (?ambasada_shell=mock).\n        const devIssuer = env.AMBASADA_AUTH_ISSUER?.startsWith("http://") ? env.AMBASADA_AUTH_ISSUER : undefined;\n        return Response.json({ user: await auth.user(req), configured: auth.configured, ...(devIssuer ? { dev_issuer: devIssuer } : {}) }, { headers: { "cache-control": "no-store" } });\n      }\n    }\n    return Response.json({ error: { code: "NOT_FOUND", message: "no such route" } }, { status: 404 });\n  } catch (error) {\n    if (isAmbasadaError(error)) return error.toResponse();\n    throw error;\n  }\n}\n', "api/files.ts": '// POST /api/files (raw body, content-type): a signed-in person uploads a file to env.FILES (lib/files.ts)\n// \u2192 { key, url }; the url (/files/<key>) is public and served by the /files/* route.\nimport { ambasada, type Env } from "../lib/ambasada.ts";\nimport { upload } from "../lib/files.ts";\n\nconst MAX_BYTES = 10 * 1024 * 1024;\n\nexport default async function files(req: Request, env: Env): Promise<Response> {\n  if (req.method !== "POST") return Response.json({ error: { code: "INVALID_REQUEST", message: "POST the file" } }, { status: 405 });\n  const user = await ambasada(env).auth.user(req);\n  if (!user) return Response.json({ error: { code: "UNAUTHORIZED", message: "sign in to upload" } }, { status: 401 });\n  const size = Number(req.headers.get("content-length") ?? 0);\n  if (!size || size > MAX_BYTES) return Response.json({ error: { code: "INVALID_REQUEST", message: "send a file up to 10 MB with a content-length" } }, { status: 413 });\n  const stored = await upload(env.FILES, req.body, { contentType: req.headers.get("content-type") ?? undefined, folder: `u/${user.id}` });\n  return Response.json(stored, { status: 201 });\n}\n', "api/notes.ts": '// GET /api/notes: the latest notes from env.DB (lib/db.ts), cached a minute in env.KV (lib/kv.ts).\n// POST /api/notes { text }: adds one. The table is db/migrations/0001_init.sql.\nimport type { Env } from "../lib/ambasada.ts";\nimport { all, run } from "../lib/db.ts";\nimport { cached, remove } from "../lib/kv.ts";\n\ntype Note = { id: number; text: string; created_at: number };\n\nexport default async function notes(req: Request, env: Env): Promise<Response> {\n  if (req.method === "POST") {\n    const { text } = (await req.json().catch(() => ({}))) as { text?: unknown };\n    if (typeof text !== "string" || !text.trim() || text.length > 500) {\n      return Response.json({ error: { code: "INVALID_REQUEST", message: "body must be { text }, 1 to 500 characters" } }, { status: 400 });\n    }\n    const { lastRowId } = await run(env.DB, "INSERT INTO notes (text, created_at) VALUES (?, ?)", text.trim(), Date.now());\n    await remove(env.KV, "notes:latest");\n    return Response.json({ id: lastRowId }, { status: 201 });\n  }\n  const latest = await cached(env.KV, "notes:latest", 60, () => all<Note>(env.DB, "SELECT id, text, created_at FROM notes ORDER BY id DESC LIMIT 20"));\n  return Response.json({ notes: latest });\n}\n', "db/migrations/0001_init.sql": "-- The app's first table. Add the next change as db/migrations/0002_<what>.sql (never edit an applied file), then:\n--   npx wrangler d1 migrations apply DB --local   (ambasada dev)\n--   npx ambasada db migrate                       (online)\nCREATE TABLE notes (\n  id INTEGER PRIMARY KEY AUTOINCREMENT,\n  text TEXT NOT NULL,\n  created_at INTEGER NOT NULL\n);\nCREATE INDEX notes_created ON notes (created_at);\n", "examples/agent/README.md": '# Agent (optional): the Cloudflare Agents SDK\n\nFor agentic products: an agent per user, document or task, with live state, its own SQL, schedules and\nWebSockets (`agent.ts`). It is a Durable Object, so it runs on ambasada.dev like the live rooms. To turn it on:\n\n1. `npm i agents`\n2. `wrangler.jsonc`: add the binding and a migration after the existing ones:\n   ```jsonc\n   "durable_objects": { "bindings": [{ "name": "ROOMS", "class_name": "Room" }, { "name": "AgentExample", "class_name": "AgentExample" }] },\n   "migrations": [{ "tag": "v1", "new_sqlite_classes": ["Room"] }, { "tag": "v2", "new_sqlite_classes": ["AgentExample"] }]\n   ```\n3. In the Worker entry (`src/worker.ts`; spa: `worker/index.ts`; next: `worker.ts`):\n   ```ts\n   export { AgentExample } from "../examples/agent/agent.ts"; // next: "./examples/agent/agent.ts"\n   import { routeAgents } from "../examples/agent/agent.ts";\n   // first thing in fetch():\n   const agent = await routeAgents(req, env as unknown as Record<string, unknown>);\n   if (agent) return agent;\n   ```\n4. In the browser (React): `useAgent({ agent: "agent-example", name: user.id, onStateUpdate: setState })` from\n   `agents/react`; `agent.send("hello")`. Plain fetch: `GET /agents/agent-example/<name>`.\n\n`ambasada deploy` sends the new class and its migration; nothing else to set up. Docs: https://developers.cloudflare.com/agents/\n', "examples/agent/agent.ts": '/**\n * Optional: an agent with the Cloudflare Agents SDK (`agents`), for agentic products. An agent is a Durable\n * Object with superpowers: state synced live to every connected client (`setState`), its own SQL (`this.sql`),\n * scheduled work (`this.schedule`), WebSockets and HTTP. One instance per name: per user, per document, per task.\n * Not wired in by default: examples/agent/README.md has the four steps.\n */\nimport { Agent, routeAgentRequest, type Connection, type WSMessage } from "agents";\n\ntype State = { notes: number; lastNote: string | null };\n\nexport class AgentExample extends Agent<Cloudflare.Env, State> {\n  initialState: State = { notes: 0, lastNote: null };\n\n  async onStart() {\n    this.sql`CREATE TABLE IF NOT EXISTS notes (id INTEGER PRIMARY KEY AUTOINCREMENT, text TEXT NOT NULL, at INTEGER NOT NULL)`;\n  }\n\n  // GET /agents/agent-example/<name>: what this agent knows.\n  async onRequest(_req: Request): Promise<Response> {\n    const notes = this.sql<{ id: number; text: string; at: number }>`SELECT id, text, at FROM notes ORDER BY id DESC LIMIT 20`;\n    return Response.json({ state: this.state, notes });\n  }\n\n  // A client (useAgent in the browser) sent a message: remember it, sync the new state to every client,\n  // and come back to it in a minute (call an LLM here, send a notification, \u2026).\n  async onMessage(connection: Connection, message: WSMessage) {\n    const text = String(message).slice(0, 2000);\n    this.sql`INSERT INTO notes (text, at) VALUES (${text}, ${Date.now()})`;\n    this.setState({ notes: this.state.notes + 1, lastNote: text });\n    await this.schedule(60, "followUp", { text });\n    connection.send(JSON.stringify({ ok: true }));\n  }\n\n  async followUp(payload: { text: string }) {\n    console.log(`a minute ago someone wrote: ${payload.text}`);\n  }\n}\n\n/** In your Worker\'s fetch, before your own routes: answers /agents/<agent>/<name> (HTTP and WebSocket). */\nexport const routeAgents = (req: Request, env: Record<string, unknown>) => routeAgentRequest(req, env);\n', gitignore: "node_modules/\n.env*\n.dev.vars*\n.wrangler/\ndist/\n.DS_Store\n# build output of `ambasada deploy`; project.json (template, devkit version) is kept\n.ambasada/*\n!.ambasada/project.json\n", "lib/ambasada.ts": 'import { createAmbasada, type Ambasada } from "@ambasada/sdk";\nimport type { Room } from "../src/realtime/room.ts";\n\n/** The Worker\'s env: `.env` locally (`ambasada dev` points it at the mock), secrets injected at deploy. */\nexport interface Env {\n  ASSETS: Fetcher;\n  /** The app\'s SQLite database (lib/db.ts), key-value (lib/kv.ts), files (lib/files.ts) and live rooms (src/realtime/room.ts). */\n  DB: D1Database;\n  KV: KVNamespace;\n  FILES: R2Bucket;\n  ROOMS: DurableObjectNamespace<Room>;\n  AMBASADA_API_KEY?: string;\n  /** Set by `ambasada deploy` and `ambasada dev`; the SDK defaults to https://api.ambasada.dev. */\n  AMBASADA_API_URL?: string;\n  AMBASADA_APP_ID?: string;\n  /** Sign in with Ambasada (api/auth.ts): set by `ambasada deploy` on ambasada.dev, and by `ambasada dev`. */\n  AMBASADA_AUTH_CLIENT_ID?: string;\n  AMBASADA_AUTH_CLIENT_SECRET?: string;\n  AMBASADA_AUTH_ISSUER?: string;\n  /** Mini-app notifications (api/ambasada-webhook.ts, lib/notifications.ts): set on ambasada.dev and by `ambasada dev`. */\n  AMBASADA_APP_SECRET?: string;\n  AMBASADA_HUB_URL?: string;\n  AMBASADA_APP_ORIGIN?: string;\n  /** Your public URL, if the Worker sees another host (behind a proxy). */\n  PUBLIC_URL?: string;\n}\n\nlet client: Ambasada | undefined;\n\n/** One client per isolate: it caches the API\'s signing keys. */\nexport function ambasada(env: Env): Ambasada {\n  return (client ??= createAmbasada({ env: env as unknown as Record<string, unknown> }));\n}\n', "lib/db.ts": '/**\n * env.DB: this app\'s SQLite database (Cloudflare D1). The tables come from db/migrations/*.sql:\n * `npx ambasada db migrate` online, `npx wrangler d1 migrations apply DB --local` for `ambasada dev`.\n * A tiny typed layer, no ORM: SQL with ? placeholders in, plain objects out.\n *\n *   const notes = await all<Note>(env.DB, "SELECT * FROM notes ORDER BY id DESC LIMIT ?", 20);\n *   const note = await first<Note>(env.DB, "SELECT * FROM notes WHERE id = ?", id);\n *   const { lastRowId } = await run(env.DB, "INSERT INTO notes (text) VALUES (?)", text);\n *   await batch(env.DB, [["UPDATE a SET n = n - 1 WHERE id = ?", 1], ["UPDATE b SET n = n + 1 WHERE id = ?", 2]]); // one transaction\n */\n\nexport type Param = string | number | boolean | null | ArrayBuffer;\n\n/** What this file needs from a D1 binding (env.DB satisfies it). */\nexport interface Database {\n  prepare(query: string): Statement;\n  batch(statements: Statement[]): Promise<unknown[]>;\n}\n\nexport interface Statement {\n  bind(...values: unknown[]): Statement;\n  all<T = Record<string, unknown>>(): Promise<{ results: T[] }>;\n  first<T = Record<string, unknown>>(): Promise<T | null>;\n  run(): Promise<{ meta: { changes: number; last_row_id: number } }>;\n}\n\nconst statement = (db: Database, query: string, params: Param[]) => db.prepare(query).bind(...params);\n\n/** Every row. */\nexport async function all<T = Record<string, unknown>>(db: Database, query: string, ...params: Param[]): Promise<T[]> {\n  return (await statement(db, query, params).all<T>()).results;\n}\n\n/** The first row, or null. */\nexport function first<T = Record<string, unknown>>(db: Database, query: string, ...params: Param[]): Promise<T | null> {\n  return statement(db, query, params).first<T>();\n}\n\n/** INSERT, UPDATE, DELETE: how many rows changed and the last inserted id. */\nexport async function run(db: Database, query: string, ...params: Param[]): Promise<{ changes: number; lastRowId: number }> {\n  const { meta } = await statement(db, query, params).run();\n  return { changes: meta.changes, lastRowId: meta.last_row_id };\n}\n\n/** Several statements in one transaction: all of them apply, or none. */\nexport async function batch(db: Database, statements: [query: string, ...params: Param[]][]): Promise<void> {\n  await db.batch(statements.map(([query, ...params]) => statement(db, query, params)));\n}\n', "lib/files.ts": '/**\n * env.FILES: this app\'s file storage (Cloudflare R2). Uploads and generated files; each one is public at\n * /files/<key> on the app\'s own address (the /files/* route calls serveFile). Don\'t keep files in the database.\n *\n *   const { key, url } = await upload(env.FILES, req.body, { contentType: "image/png" });   // url: /files/u/\u2026\n *   return serveFile(env.FILES, req);                                                        // GET /files/*\n *\n * Files are public to anyone with the URL: keep private documents behind your own route that checks who asks.\n * `npx ambasada files put|list|delete|url` manages them from the terminal.\n */\n\n/** What this file needs from an R2 binding (env.FILES satisfies it). */\nexport interface Bucket {\n  put(key: string, value: ReadableStream | ArrayBuffer | ArrayBufferView | string | Blob | null, options?: { httpMetadata?: { contentType?: string } }): Promise<unknown>;\n  get(key: string, options?: { onlyIf?: Headers; range?: Headers }): Promise<StoredFile | null>;\n  delete(key: string): Promise<void>;\n}\n\nexport interface StoredFile {\n  httpEtag: string;\n  size: number;\n  httpMetadata?: { contentType?: string };\n  range?: { offset?: number; length?: number; suffix?: number };\n  body?: ReadableStream;\n}\n\nexport const FILES_PATH = "/files/";\n\n/** Stores `body` under a new random key (in `folder`) \u2192 `{ key, url }`, url relative to the app (/files/<key>). */\nexport async function upload(bucket: Bucket, body: ReadableStream | ArrayBuffer | ArrayBufferView | string | Blob | null, options: { contentType?: string; folder?: string } = {}): Promise<{ key: string; url: string }> {\n  const key = `${options.folder ?? "u"}/${crypto.randomUUID()}`;\n  await bucket.put(key, body, { httpMetadata: { contentType: options.contentType ?? "application/octet-stream" } });\n  return { key, url: fileUrl(key) };\n}\n\nexport const fileUrl = (key: string) => `${FILES_PATH}${key.split("/").map(encodeURIComponent).join("/")}`;\n\n/** GET/HEAD /files/<key>: the file with its type, an ETag (304 when unchanged), byte ranges, and a cache header. */\nexport async function serveFile(bucket: Bucket, req: Request): Promise<Response> {\n  if (req.method !== "GET" && req.method !== "HEAD") return new Response(null, { status: 405, headers: { allow: "GET, HEAD" } });\n  const path = new URL(req.url).pathname;\n  const key = decodeURIComponent(path.slice(path.indexOf(FILES_PATH) + FILES_PATH.length));\n  if (!key) return new Response("Not found", { status: 404 });\n  const file = await bucket.get(key, { onlyIf: req.headers, range: req.headers });\n  if (!file) return new Response("Not found", { status: 404 });\n  const headers = new Headers({ etag: file.httpEtag, "cache-control": "public, max-age=3600", "accept-ranges": "bytes" });\n  if (file.httpMetadata?.contentType) headers.set("content-type", file.httpMetadata.contentType);\n  if (!file.body) return new Response(null, { status: 304, headers }); // If-None-Match matched: nothing changed\n  const r = file.range;\n  if (r && req.headers.has("range")) {\n    const offset = r.suffix !== undefined ? file.size - r.suffix : (r.offset ?? 0);\n    const length = r.suffix ?? r.length ?? file.size - offset;\n    headers.set("content-range", `bytes ${offset}-${offset + length - 1}/${file.size}`);\n    headers.set("content-length", String(length));\n    return new Response(req.method === "HEAD" ? null : file.body, { status: 206, headers });\n  }\n  headers.set("content-length", String(file.size));\n  return new Response(req.method === "HEAD" ? null : file.body, { headers });\n}\n', "lib/kv.ts": '/**\n * env.KV: this app\'s key-value store (Cloudflare KV). Fast reads everywhere, writes visible within about a\n * minute, at most one write per second per key. Good for sessions, caches and feature flags; not for counters\n * or anything two people change at once (use env.DB, or a Durable Object for live state).\n *\n *   await putJson(env.KV, `session:${id}`, { user }, { ttl: 60 * 60 * 24 });\n *   const session = await getJson<{ user: string }>(env.KV, `session:${id}`);\n *   const page = await cached(env.KV, "home:stats", 60, () => computeStats());\n */\n\n/** What this file needs from a KV binding (env.KV satisfies it). */\nexport interface KeyValue {\n  get(key: string, type: "text"): Promise<string | null>;\n  put(key: string, value: string, options?: { expirationTtl?: number }): Promise<void>;\n  delete(key: string): Promise<void>;\n}\n\n/** The value saved under `key`, parsed; null when there is none (or it expired). */\nexport async function getJson<T>(kv: KeyValue, key: string): Promise<T | null> {\n  const text = await kv.get(key, "text");\n  return text === null ? null : (JSON.parse(text) as T);\n}\n\n/** Saves `value` as JSON. `ttl`: seconds until it disappears (at least 60). */\nexport function putJson(kv: KeyValue, key: string, value: unknown, options: { ttl?: number } = {}): Promise<void> {\n  return kv.put(key, JSON.stringify(value), options.ttl ? { expirationTtl: Math.max(60, options.ttl) } : undefined);\n}\n\nexport function remove(kv: KeyValue, key: string): Promise<void> {\n  return kv.delete(key);\n}\n\n/** `load()`\'s result, kept for `ttl` seconds: a cache in front of something slow. */\nexport async function cached<T>(kv: KeyValue, key: string, ttl: number, load: () => Promise<T>): Promise<T> {\n  const hit = await getJson<T>(kv, key);\n  if (hit !== null) return hit;\n  const value = await load();\n  await putJson(kv, key, value, { ttl });\n  return value;\n}\n', "lib/notifications.ts": '// Who turned notifications on, and how to reach them (docs/MINI-APPS.md \xA77). The hub sends a token per person\n// to the webhook route (api/ambasada-webhook.ts; app/api/ambasada/webhook/route.ts in Next); it lives in your\n// ambasada.store under the person\'s Ambasada user id.\nimport type { Ambasada, AppNotifyInput } from "@ambasada/sdk";\n\nconst key = (user: string) => `ambasada/notifications/${user}`;\n\nexport const saveToken = (app: Ambasada, user: string, token: string) => app.store.set(key(user), { token, enabled_at: new Date().toISOString() });\nexport const forgetToken = (app: Ambasada, user: string) => app.store.delete(key(user));\n\n/**\n * A push to one person (their Ambasada user id, e.g. `(await app.auth.user(req)).id`), if they turned\n * notifications on. False when they haven\'t, or the hub said the token is gone (then it is forgotten).\n *   await notifyUser(app, user.id, { notification_id: `order-${id}`, title: "Your translation is ready", body: "\u2026", url: `/orders/${id}` });\n */\nexport async function notifyUser(app: Ambasada, user: string, notification: Omit<AppNotifyInput, "tokens" | "users">): Promise<boolean> {\n  const saved = await app.store.get<{ token: string }>(key(user));\n  if (!saved) return false;\n  const result = await app.apps.notify({ ...notification, tokens: [saved.token] });\n  if (result.invalid.includes(saved.token)) await forgetToken(app, user);\n  return result.sent.includes(saved.token);\n}\n', "package.json": '{\n  "name": "@ambasada/template-worker",\n  "version": "0.1.0",\n  "private": true,\n  "description": "An Ambasada app: one bare Cloudflare Worker, web/ + api/*.ts fetch handlers.",\n  "type": "module",\n  "engines": {\n    "node": ">=22"\n  },\n  "scripts": {\n    "dev": "ambasada dev",\n    "preview": "wrangler dev --port 3000",\n    "typecheck": "tsc -p .",\n    "ambasada": "ambasada"\n  },\n  "dependencies": {\n    "@ambasada/sdk": "workspace:*"\n  },\n  "devDependencies": {\n    "@ambasada/cli": "workspace:*",\n    "@cloudflare/workers-types": "^5.20261102.1",\n    "typescript": "~5.9.3",\n    "wrangler": "^4.156.1"\n  }\n}\n', "src/realtime/room.ts": '/**\n * A live room (Durable Object `Room`, bound as env.ROOMS): everyone connected to the same room id shares it.\n *\n *   GET /api/rooms/<id>/ws  (WebSocket)  \u2192 env.ROOMS.getByName(id).fetch(req)\n *   client \u2192 { "text": "hi" }            server \u2192 { type: "history", messages } on join,\n *                                                 { type: "message", message } to everyone,\n *                                                 { type: "presence", online } when people come and go\n *\n * WebSocket hibernation: the object sleeps between messages and the connections stay open, so an idle room\n * costs nothing. Its own SQLite (`ctx.storage.sql`) keeps the last 50 messages, replayed to whoever joins.\n * The same shape fits presence, live counters, a game table, a queue or a rate limit: one object per thing.\n */\nimport { DurableObject } from "cloudflare:workers";\n\nconst KEEP = 50;\n\nexport type RoomMessage = { id: number; name: string; text: string; at: number };\nexport type RoomEvent = { type: "history"; messages: RoomMessage[] } | { type: "message"; message: RoomMessage } | { type: "presence"; online: number };\n\nexport class Room extends DurableObject<unknown> {\n  constructor(ctx: DurableObjectState, env: unknown) {\n    super(ctx, env);\n    ctx.storage.sql.exec("CREATE TABLE IF NOT EXISTS messages (id INTEGER PRIMARY KEY AUTOINCREMENT, name TEXT NOT NULL, text TEXT NOT NULL, at INTEGER NOT NULL)");\n  }\n\n  async fetch(req: Request): Promise<Response> {\n    if (req.headers.get("upgrade") !== "websocket") return Response.json({ online: this.ctx.getWebSockets().length, messages: this.history() });\n    // Who is talking: the client says. Behind Sign in with Ambasada, pass the signed-in name from your route instead.\n    const name = (new URL(req.url).searchParams.get("name") ?? "").trim().slice(0, 40) || "guest";\n    const { 0: client, 1: server } = new WebSocketPair();\n    this.ctx.acceptWebSocket(server);\n    server.serializeAttachment({ name });\n    server.send(JSON.stringify({ type: "history", messages: this.history() } satisfies RoomEvent));\n    this.broadcast({ type: "presence", online: this.ctx.getWebSockets().length });\n    return new Response(null, { status: 101, webSocket: client });\n  }\n\n  async webSocketMessage(ws: WebSocket, data: string | ArrayBuffer): Promise<void> {\n    let text = "";\n    try {\n      text = String((JSON.parse(typeof data === "string" ? data : new TextDecoder().decode(data)) as { text?: unknown }).text ?? "").trim().slice(0, 2000);\n    } catch {\n      return;\n    }\n    if (!text) return;\n    const { name } = ws.deserializeAttachment() as { name: string };\n    const at = Date.now();\n    const { id } = this.ctx.storage.sql.exec<{ id: number }>("INSERT INTO messages (name, text, at) VALUES (?, ?, ?) RETURNING id", name, text, at).one();\n    this.ctx.storage.sql.exec("DELETE FROM messages WHERE id <= ?", id - KEEP);\n    this.broadcast({ type: "message", message: { id, name, text, at } });\n  }\n\n  async webSocketClose(ws: WebSocket, code: number, reason: string): Promise<void> {\n    try {\n      ws.close(code, reason);\n    } catch {\n      // already closed\n    }\n    this.broadcast({ type: "presence", online: this.ctx.getWebSockets().filter((s) => s !== ws).length });\n  }\n\n  private history(): RoomMessage[] {\n    return this.ctx.storage.sql.exec<RoomMessage>("SELECT id, name, text, at FROM messages ORDER BY id").toArray();\n  }\n\n  private broadcast(event: RoomEvent): void {\n    const text = JSON.stringify(event);\n    for (const ws of this.ctx.getWebSockets()) {\n      try {\n        ws.send(text);\n      } catch {\n        // a closing socket: webSocketClose cleans up\n      }\n    }\n  }\n}\n', "src/worker.ts": '/**\n * The app: one Cloudflare Worker (`wrangler dev`, or `ambasada dev` with the mock API).\n *\n *   /api/<name>  \u2192 api/<name>.ts (fetch handlers; add yours to API below)\n *   /api/auth/*  \u2192 api/auth.ts: Sign in with Ambasada (login, callback, logout, me, shell)\n *   /api/ambasada/webhook \u2192 api/ambasada-webhook.ts: the Ambasada app\'s events (notifications on/off, ping)\n *   /api/notes, /api/files \u2192 api/notes.ts (env.DB + env.KV), api/files.ts (uploads to env.FILES)\n *   /api/rooms/<id>/ws \u2192 the live room <id> (src/realtime/room.ts, a Durable Object); demo at /room\n *   /files/*     \u2192 files from env.FILES (lib/files.ts)\n *   /            \u2192 web/index.html with who is signed in filled in\n *   the rest     \u2192 static files from web/ (wrangler.jsonc \u2192 assets)\n */\nimport appWebhook from "../api/ambasada-webhook.ts";\nimport auth from "../api/auth.ts";\nimport files from "../api/files.ts";\nimport notes from "../api/notes.ts";\nimport { ambasada, type Env } from "../lib/ambasada.ts";\nimport { FILES_PATH, serveFile } from "../lib/files.ts";\n\nexport { Room } from "./realtime/room.ts";\n\ntype Handler = (req: Request, env: Env) => Promise<Response>;\nconst API: Record<string, Handler> = { files, notes };\n\n/** The landing page, with the header\'s "Sign in with Ambasada" button or, once signed in, the person\'s name and avatar. */\nasync function landing(req: Request, env: Env): Promise<Response> {\n  const { auth } = ambasada(env);\n  const user = await auth.user(req);\n  return new HTMLRewriter()\n    .on("[data-auth-signin]", { element: (el) => void ((user || !auth.configured) && el.remove()) })\n    .on("[data-auth-user]", { element: (el) => void (user ? el.removeAttribute("hidden") : el.remove()) })\n    .on("[data-auth-avatar]", { element: (el) => void (user?.avatar_url ? el.setAttribute("src", user.avatar_url) : el.remove()) })\n    .on("[data-auth-name]", { element: (el) => void el.setInnerContent(user?.name ?? "Signed in") })\n    .transform(await env.ASSETS.fetch(req));\n}\n\nexport default {\n  async fetch(req, env) {\n    const { pathname } = new URL(req.url);\n    try {\n      if (pathname === "/health") return Response.json({ ok: true });\n      if (pathname.startsWith("/api/auth/")) return await auth(req, env);\n      if (pathname === "/api/ambasada/webhook") return await appWebhook(req, env);\n      const room = /^\\/api\\/rooms\\/([^/]+)\\/ws$/.exec(pathname);\n      if (room) return await env.ROOMS.getByName(decodeURIComponent(room[1]!)).fetch(req);\n      if (pathname.startsWith(FILES_PATH)) return await serveFile(env.FILES, req);\n      const api = /^\\/api\\/([^/]+)\\/?$/.exec(pathname);\n      if (api) {\n        const handler = API[api[1]!];\n        return handler ? await handler(req, env) : Response.json({ error: { code: "NOT_FOUND", message: "no such route" } }, { status: 404 });\n      }\n      if (pathname === "/") return await landing(req, env);\n      return env.ASSETS.fetch(req);\n    } catch (error) {\n      console.error(error);\n      return Response.json({ error: { code: "INTERNAL", message: "internal error" } }, { status: 500 });\n    }\n  },\n} satisfies ExportedHandler<Env>;\n', "tsconfig.json": '{\n  "compilerOptions": {\n    "target": "ES2022",\n    "module": "ESNext",\n    "moduleResolution": "Bundler",\n    "lib": ["ES2022"],\n    "types": ["@cloudflare/workers-types"],\n    "strict": true,\n    "noEmit": true,\n    "skipLibCheck": true,\n    "isolatedModules": true,\n    "verbatimModuleSyntax": true,\n    "allowImportingTsExtensions": true\n  },\n  "include": ["ambasada.config.ts", "src", "api", "lib"]\n}\n', "web/.well-known/ambasada.json": '{\n  "schema": 2,\n  "id": "my-app",\n  "name": "My App",\n  "subtitle": "Notes, a live room and sign-in",\n  "description": "Notes, a live room and sign-in",\n  "icon": "/icon.png",\n  "splash": {\n    "image": "/icon.png",\n    "color": "#FFFFFF"\n  },\n  "accent": "#FF002E",\n  "entry": "/",\n  "kind": "product",\n  "category": "other",\n  "scopes": [\n    "identity",\n    "notifications"\n  ],\n  "notifications": {\n    "webhook": "/api/ambasada/webhook"\n  },\n  "privacy_url": "/privacy",\n  "visibility": "public"\n}\n', "web/icon.png": "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", "web/index.html": '<!doctype html>\n<html lang="en">\n  <head>\n    <meta charset="utf-8" />\n    <meta name="viewport" content="width=device-width, initial-scale=1" />\n    <title>My App</title>\n    <!-- The Ambasada look (@ambasada/ui: tokens, fonts, ui-card / ui-button / \u2026), then this product\'s own styles. -->\n    <link rel="stylesheet" href="https://unpkg.com/@ambasada/ui@0.5/dist/ambasada-ui.css" />\n    <link rel="stylesheet" href="/style.css" />\n    <!-- Mini-app shell (@ambasada/miniapp as a <script>): ready() drops the Ambasada app\'s splash; a no-op on the web. -->\n    <script src="https://hub.ambasada.id/miniapp.js" defer></script>\n    <script>\n      // Inside the Ambasada app: drop the splash, then sign in without a consent screen (docs/MINI-APPS.md \xA75):\n      // a shell token, POSTed to /api/auth/shell, gives the same session as "Sign in with Ambasada".\n      // Under `ambasada dev`, /?ambasada_shell=mock pretends to be inside the app (the mock signs the token).\n      addEventListener("DOMContentLoaded", async () => {\n        const a = window.ambasada;\n        if (!a) return;\n        const mock = new URLSearchParams(location.search).get("ambasada_shell") === "mock";\n        if (!mock) a.ready();\n        const me = await fetch("/api/auth/me").then((r) => r.json());\n        if (mock && me.dev_issuer) {\n          const token = await fetch(`${me.dev_issuer}/dev/shell-token?aud=${encodeURIComponent(location.origin)}`).then((r) => r.json());\n          a.mockEnv({ answers: { "auth.getToken": token } });\n          a.ready();\n        }\n        if (me.user || !a.capabilities().includes("auth.getToken")) return;\n        const shell = await a.auth.getToken().catch(() => null);\n        if (!shell) return;\n        const res = await fetch("/api/auth/shell", { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify({ token: shell.token }) });\n        if (res.ok) location.replace(location.pathname);\n      });\n    </script>\n  </head>\n  <body>\n    <!-- Sign in with Ambasada: src/worker.ts keeps the button, or shows who is signed in (api/auth.ts). -->\n    <header class="topbar">\n      <a class="brand" href="/">My App</a>\n      <a class="ui-button secondary signin" href="/api/auth/login" data-auth-signin>Sign in with Ambasada</a>\n      <span class="account" data-auth-user hidden><img data-auth-avatar alt="" /><span data-auth-name></span><a href="/api/auth/logout">Sign out</a></span>\n    </header>\n    <main class="page">\n      <p class="ui-label eyebrow">Ambasada app</p>\n      <h1>My App</h1>\n      <p class="lead">Notes in a database, a live room, and Sign in with Ambasada. Change anything.</p>\n\n      <!-- api/notes.ts: rows in env.DB (db/migrations/0001_init.sql), the list cached in env.KV. -->\n      <form class="ui-card" id="notes">\n        <div class="row">\n          <input name="text" maxlength="500" required placeholder="A note" aria-label="A note" />\n          <button type="submit" class="ui-button">Add</button>\n        </div>\n        <ul id="list"></ul>\n      </form>\n      <p><a href="/room">Open the live room</a> in two tabs and type.</p>\n    </main>\n    <script>\n      const form = document.getElementById("notes");\n      const list = document.getElementById("list");\n      const load = async () => {\n        const { notes } = await fetch("/api/notes").then((r) => r.json());\n        list.replaceChildren(...notes.map((n) => Object.assign(document.createElement("li"), { textContent: n.text })));\n      };\n      form.addEventListener("submit", async (e) => {\n        e.preventDefault();\n        await fetch("/api/notes", { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify({ text: form.text.value }) });\n        form.reset();\n        await load();\n      });\n      load();\n    </script>\n  </body>\n</html>\n', "web/privacy.html": `<!doctype html>
+`, "tsconfig.app.json": '{\n  "compilerOptions": {\n    "composite": true,\n    "tsBuildInfoFile": "./node_modules/.tmp/tsconfig.app.tsbuildinfo",\n    "target": "ES2022",\n    "lib": ["ES2022", "DOM", "DOM.Iterable"],\n    "module": "ESNext",\n    "moduleResolution": "Bundler",\n    "jsx": "react-jsx",\n    "strict": true,\n    "noEmit": true,\n    "skipLibCheck": true,\n    "isolatedModules": true,\n    "verbatimModuleSyntax": true,\n    "allowImportingTsExtensions": true\n  },\n  "include": ["src"],\n  "exclude": ["src/realtime/room.ts"]\n}\n', "tsconfig.json": '{\n  "files": [],\n  "references": [{ "path": "./tsconfig.app.json" }, { "path": "./tsconfig.worker.json" }, { "path": "./tsconfig.node.json" }]\n}\n', "tsconfig.node.json": '{\n  "compilerOptions": {\n    "composite": true,\n    "tsBuildInfoFile": "./node_modules/.tmp/tsconfig.node.tsbuildinfo",\n    "target": "ES2022",\n    "lib": ["ES2023"],\n    "types": ["node"],\n    "module": "ESNext",\n    "moduleResolution": "Bundler",\n    "strict": true,\n    "noEmit": true,\n    "skipLibCheck": true,\n    "isolatedModules": true,\n    "verbatimModuleSyntax": true\n  },\n  "include": ["vite.config.ts"]\n}\n', "tsconfig.worker.json": '{\n  "compilerOptions": {\n    "composite": true,\n    "tsBuildInfoFile": "./node_modules/.tmp/tsconfig.worker.tsbuildinfo",\n    "target": "ES2022",\n    "lib": ["ES2022"],\n    "types": ["@cloudflare/workers-types"],\n    "module": "ESNext",\n    "moduleResolution": "Bundler",\n    "strict": true,\n    "noEmit": true,\n    "skipLibCheck": true,\n    "isolatedModules": true,\n    "verbatimModuleSyntax": true,\n    "allowImportingTsExtensions": true\n  },\n  "include": ["worker", "api", "lib", "src/realtime/room.ts", "ambasada.config.ts"]\n}\n', "vite.config.ts": 'import { cloudflare } from "@cloudflare/vite-plugin";\nimport react from "@vitejs/plugin-react";\nimport { defineConfig } from "vite";\n\nexport default defineConfig({\n  plugins: [react(), cloudflare()],\n  // allowedHosts: `ambasada dev --tunnel` serves this at https://<slug>-dev.ambasada.dev.\n  server: { port: 3000, allowedHosts: [".ambasada.dev"] },\n});\n', "worker/index.ts": '/**\n * The app\'s Worker (`vite` runs it locally through @cloudflare/vite-plugin):\n *\n *   /api/<name>  \u2192 api/<name>.ts (fetch handlers; add yours to API below)\n *   /api/auth/*  \u2192 api/auth.ts: Sign in with Ambasada (login, callback, logout, me, shell)\n *   /api/ambasada/webhook \u2192 api/ambasada-webhook.ts: the Ambasada app\'s events (notifications on/off, ping)\n *   /api/notes, /api/files \u2192 api/notes.ts (env.DB + env.KV), api/files.ts (uploads to env.FILES)\n *   /api/rooms/<id>/ws \u2192 the live room <id> (src/realtime/room.ts, a Durable Object); demo at /room\n *   /files/*     \u2192 files from env.FILES (lib/files.ts)\n *   /health      \u2192 { ok: true }\n *   the rest     \u2192 the React app in src/ (static assets; unknown paths get index.html, see wrangler.jsonc)\n */\nimport appWebhook from "../api/ambasada-webhook.ts";\nimport auth from "../api/auth.ts";\nimport files from "../api/files.ts";\nimport notes from "../api/notes.ts";\nimport type { Env } from "../lib/ambasada.ts";\nimport { FILES_PATH, serveFile } from "../lib/files.ts";\n\nexport { Room } from "../src/realtime/room.ts";\n\ntype Handler = (req: Request, env: Env) => Promise<Response>;\nconst API: Record<string, Handler> = { files, notes };\n\nexport default {\n  async fetch(req, env) {\n    const { pathname } = new URL(req.url);\n    try {\n      if (pathname === "/health") return Response.json({ ok: true });\n      if (pathname.startsWith("/api/auth/")) return await auth(req, env);\n      if (pathname === "/api/ambasada/webhook") return await appWebhook(req, env);\n      const room = /^\\/api\\/rooms\\/([^/]+)\\/ws$/.exec(pathname);\n      if (room) return await env.ROOMS.getByName(decodeURIComponent(room[1]!)).fetch(req);\n      if (pathname.startsWith(FILES_PATH)) return await serveFile(env.FILES, req);\n      const api = /^\\/api\\/([^/]+)\\/?$/.exec(pathname);\n      const handler = api ? API[api[1]!] : undefined;\n      if (handler) return await handler(req, env);\n      if (api) return Response.json({ error: { code: "NOT_FOUND", message: "no such route" } }, { status: 404 });\n      return env.ASSETS.fetch(req);\n    } catch (error) {\n      console.error(error);\n      return Response.json({ error: { code: "INTERNAL", message: "internal error" } }, { status: 500 });\n    }\n  },\n} satisfies ExportedHandler<Env>;\n', "wrangler.jsonc": '{\n  "$schema": "node_modules/wrangler/config-schema.json",\n  // One Worker: worker/index.ts answers /api/*, /files/* and /health; the React app (vite build) is served as assets.\n  "name": "my-app",\n  "main": "worker/index.ts",\n  "compatibility_date": "2026-09-01",\n  "compatibility_flags": ["nodejs_compat"],\n  "assets": {\n    "binding": "ASSETS",\n    "not_found_handling": "single-page-application",\n    "run_worker_first": ["/api/*", "/files/*", "/health"]\n  },\n  // Storage and realtime: env.DB (SQLite), env.KV, env.FILES and the live rooms (src/realtime/room.ts).\n  // No ids: wrangler keeps local copies in .wrangler/state; `ambasada deploy` attaches the app\'s real ones.\n  "d1_databases": [{ "binding": "DB", "database_name": "my-app", "migrations_dir": "db/migrations", "migrations_table": "_ambasada_migrations" }],\n  "kv_namespaces": [{ "binding": "KV" }],\n  "r2_buckets": [{ "binding": "FILES", "bucket_name": "my-app" }],\n  "durable_objects": { "bindings": [{ "name": "ROOMS", "class_name": "Room" }] },\n  // Every Durable Object class needs a migration; add new ones at the end, never edit or remove an applied tag.\n  "migrations": [{ "tag": "v1", "new_sqlite_classes": ["Room"] }],\n  "observability": { "enabled": true }\n}\n' }, worker: { ".claude/skills/ambasada-product/SKILL.md": "---\nname: ambasada-product\ndescription: Build an app on Ambasada and put it online. Use when the user wants to make an app, tool, game or website, start one with `npm create ambasada@latest`, run it with `ambasada dev`, publish it with `ambasada deploy` at <slug>.ambasada.dev, show it in the Ambasada app (mini app, notifications, sign-in), store data in the app's SQLite database, KV or file storage, make it realtime with Durable Objects or an agent (Agents SDK), bring a site built in ChatGPT, Lovable, Bolt or v0, or upgrade a project made with an older CLI (`ambasada upgrade`). Default stack: Next.js on Cloudflare.\n---\n\n# Build an app on Ambasada and put it online\n\nAn app is **one website** (one Cloudflare Worker) at `https://<your-slug>.ambasada.dev`. It comes with\nSign in with Ambasada (Ambasada ID), a SQLite database, key-value, file storage and Durable Objects for\nrealtime. If you want, it also gets a mini app inside the Ambasada app, with push notifications (off by default). No servers, no\nCloudflare account, no keys to configure.\n\n## Start\n\n```sh\nnpm create ambasada@latest my-app           # Next.js (default)\ncd my-app && npm install\nnpx ambasada dev                            # the mock API + your site, no login\n```\n\nOther templates: add `-- --template spa` (Vite + React; for code exported from Lovable or Bolt) or\n`-- --template worker` (plain HTML + small fetch handlers; the smallest possible app). All three have the\nsame `ambasada.config.ts`, sign-in routes, notifications webhook and storage helpers, and a notes example.\n\n## What to read\n\n| The user wants to\u2026 | Read |\n|---|---|\n| know where files go, what Next.js features are allowed, secrets, who is signed in | [reference/stack.md](reference/stack.md) |\n| store data (tables, migrations), sessions or caches, uploads; make it live between people (chat, presence, a shared board, counters); build an AI agent | [reference/storage.md](reference/storage.md) |\n| run it locally, put it online, use their own Cloudflare account | [reference/dev-and-deploy.md](reference/dev-and-deploy.md) |\n| make it look good and easy to use | [reference/design.md](reference/design.md) |\n| show up in the Ambasada app (optional: `npx ambasada miniapp enable`), send push notifications, sign people in inside the app | [reference/mini-app.md](reference/mini-app.md) |\n| build in ChatGPT, Lovable, Bolt or v0 and bring it here | [reference/build-elsewhere.md](reference/build-elsewhere.md) |\n| upgrade a project made with an older CLI | [reference/upgrading.md](reference/upgrading.md) |\n\nFor the Hack A Ton (TON payments, offerings, the agent that runs a shop): `npx ambasada add village`, then\nthe **ambasada-village** skill.\n\n## Rules (break one and the app does not work)\n\n1. **One app = one Worker.** No separate backend, no Docker. State lives in the app's SQLite (`env.DB`),\n   key-value (`env.KV`), file storage (`env.FILES`) or a Durable Object, never in module variables.\n   See [reference/storage.md](reference/storage.md).\n2. **Only the allowed Next.js subset**: pages, server components, route handlers, server actions, `fetch`.\n   No `next/image` default loader, no ISR/`revalidate`, no `fs`/`child_process`/native packages, no custom\n   server, no `middleware.ts`/`proxy.ts`, no `runtime = \"edge\"`. See [reference/stack.md](reference/stack.md#nextjs-allowed-and-banned).\n3. **Keys never reach the browser.** They live in `.env` locally and `ambasada env set` online; only server\n   code reads them. Never prefix one with `NEXT_PUBLIC_`.\n4. **Sign-in is Ambasada ID.** Use the template's `/api/auth/*` routes and `auth.user(req)`; don't add\n   Clerk, Auth.js or Supabase Auth, and don't build an accounts table. Key per-person data by `user.id`.\n5. **Tables change through migrations**: a new `db/migrations/NNNN_name.sql` per change, never edits to an\n   applied one; `npx ambasada db migrate` after deploying.\n\n## When the user is not a developer\n\nDo the work; don't ask them to edit code. Ask at most: what it does and for whom. Then build one page, run\n`npx ambasada dev`, open it, use it as the fake visitor, and show them it worked. Explain in one sentence\nper step, no jargon.\n", ".claude/skills/ambasada-product/reference/build-elsewhere.md": "# Built in ChatGPT, Lovable, Bolt or v0\n\nThree ways, easiest first.\n\n## A. Keep it hosted there, link it\n\nGood for: a site that is finished where it is and only needs to show up in the Ambasada app.\n\n1. On a laptop with Node 22+, once:\n\n   ```sh\n   npm create ambasada@latest my-app -- --miniapp --entry /   # its ambasada.config.ts and the manifest\n   cd my-app && npm install\n   npx ambasada login\n   npx ambasada link https://YOUR-SITE\n   ```\n\n2. The site must serve `/.well-known/ambasada.json` and `/icon.png` (copy them from the new project's\n   `public/`; `npx ambasada dev` writes the manifest there) and pass `npx ambasada check https://YOUR-SITE`\n   ([mini-app.md](mini-app.md)).\n\nLimit: Sign in with Ambasada, notifications and the app's database, KV and files come with hosting on\nambasada.dev. A site hosted elsewhere keeps its own backend; use B or C to get them.\n\n## B. Bring the code home (recommended for Lovable and Bolt)\n\nGood for: anything with real work behind it. You get hosting on ambasada.dev and the full rules.\n\n1. Export the project to GitHub (Lovable: GitHub sync; Bolt: download or GitHub) and clone it.\n2. `npm create ambasada@latest my-app -- --template spa` and copy the exported `src/` (components, pages,\n   styles) into the new project's `src/`, replacing the starter UI. Keep the template's `api/`, `lib/`,\n   `db/`, `ambasada.config.ts`, `wrangler.jsonc` and `vite.config.ts`.\n3. Open the project in Claude Code, Cursor or Codex and say:\n\n   > This is an Ambasada app (see .claude/skills/ambasada-product). Replace Supabase/Firebase with the\n   > app's env.DB (tables in db/migrations), env.KV and env.FILES, and any login with Sign in with Ambasada\n   > (api/auth.ts, /api/auth/me). Then run it with `npx ambasada dev`.\n\n4. `npx ambasada dev`, try it, then `npx ambasada deploy`.\n\n## C. ChatGPT (or any chat) writes the code, you paste it\n\n1. `npm create ambasada@latest my-app`, `cd my-app && npm install`, `npx ambasada dev`.\n2. Paste this into ChatGPT, then the files it mentions, then your idea:\n\n   > I have a Next.js 16 App Router project that runs on Cloudflare Workers (OpenNext). Rules: no `fs`, no\n   > native packages, no `next/image` (use `<img>`), no middleware, no `revalidate`, no other login than the\n   > one in `app/api/auth`. Data goes in SQLite through `lib/db.ts` (tables in `db/migrations/*.sql`), the\n   > signed-in person comes from `currentUser()` in `lib/ambasada.ts`. Below are my `app/page.tsx`,\n   > `app/api/notes/route.ts` and `db/migrations/0001_init.sql`. Rewrite them for my idea: the main action\n   > visible on a phone without scrolling. Write complete files, one code block per file, with the file path\n   > above each. My idea: \u2026\n\n3. Paste each file where ChatGPT says, keep `npx ambasada dev` running, check the page. New tables: a new\n   file in `db/migrations/` (never edit an applied one). When it works: `npx ambasada deploy` and\n   `npx ambasada db migrate`.\n\nUse ChatGPT to write files, not to decide the stack: if its answer adds Prisma, Supabase, NextAuth,\n`next/image` or a `middleware.ts`, tell it \"that's banned in my project, do it without\".\n", ".claude/skills/ambasada-product/reference/design.md": '# Design for people who decide in 10 seconds\n\nPeople open your app on a phone, often inside the Ambasada app, between two other things. They decide in\nseconds whether it is for them. Build for that.\n\n## One page, one action\n\n- **One page first.** What it is, and the one thing to do, fit on the first screen of a phone (375 \xD7 667).\n  Extra pages only when the action needs them.\n- **One action.** One button that does the main thing. Add a second only after people use the first.\n- **Few words.** A headline of up to 8 words, one sentence under it, the button. Cut every adjective you can.\n- **Show the result.** One example of what people get (an image, a sample text) beats any description.\n- **No walls.** No signup before the first use, no cookie banner, no tour. Ask for sign-in when the app\n  needs to remember someone (Sign in with Ambasada is one tap inside the Ambasada app).\n\n## The button\n\n- Label it with the action: **Make my poem**, not **Submit**.\n- Big (at least 48 px tall), full width on phones, one strong colour, nothing else in that colour.\n- If people must type something first, put that one field right above the button.\n- After the action, show the result, or "Working on it\u2026" and the result appearing when ready (a live room\n  or polling). Never a blank page.\n\n## Look\n\n- The templates use `@ambasada/ui` (the Ambasada app\'s look: tokens, `ui-card`, `ui-button`); start there\n  ([mini-app.md](mini-app.md)). Otherwise plain CSS: one font, two colours plus grey, generous spacing.\n- Large text: 18 px body on phones, a headline twice that. Light theme.\n- Works with one thumb: tap targets 48 px, no hover-only menus.\n- Loads fast: no video backgrounds, no 3 MB hero images, no animation libraries.\n\n## Words\n\n- Say what they get, not how it works. "A logo in 1 minute", not "AI-powered logo generation".\n- Write in the language of your users; one is fine.\n\n## Before and after\n\n```\nBad:  Welcome to PoemForge\u2122, the next-generation AI-powered creative writing platform\n      [Features] [Pricing] [About] [Sign up]   \u2026scroll\u2026   [Get started]\n\nGood: Your name as a folk poem\n      Type a name. Get a 4-line Romanian folk poem in 10 seconds.\n      [ Name: _________ ]\n      [   Make my poem   ]\n      "Ana, floare de la munte, / \u2026"  \u2190 one real example\n```\n', ".claude/skills/ambasada-product/reference/dev-and-deploy.md": "# Run it, put it online\n\n## `ambasada dev`: everything on your laptop\n\n```sh\nnpx ambasada dev\n```\n\nStarts two things:\n\n1. a **mock Ambasada API** on `http://127.0.0.1:8788`: same routes and signatures as the real one. Sign in\n   with Ambasada signs you in as \"Fake Visitor\"; `apps.notify` lands in a fake hub; `ambasada.store` and\n   `ambasada.files` work in memory. Open it in a browser for a page with what happened.\n2. **your site** with its normal dev server (`next dev`, `vite` or `wrangler dev`), pointed at the mock.\n\nNo login. The app's database, KV, files and Durable Objects run locally too (wrangler, `.wrangler/state`);\n`ambasada dev` applies `db/migrations/` to the local database before it starts the site.\n\nTry it: open your site, sign in, add a note. With the mini app on, `http://localhost:3000/app?ambasada_shell=mock`\n(your `miniapp.entry`) pretends to be inside the Ambasada app (host bar insets, silent sign-in).\n\n`npx ambasada dev --mock-only` starts only the mock, if you run your site yourself. The mock's keys:\n`AMBASADA_API_URL=http://127.0.0.1:8788`, `AMBASADA_API_KEY=sk_test_dev` (already in the project's `.env`).\n\n## `ambasada deploy`: online at `<slug>.ambasada.dev`\n\nOnce, per laptop:\n\n```sh\nnpx ambasada login        # opens a page: sign in with Ambasada ID\n```\n\n(If it asks for a key instead: https://developer.ambasada.dev \u2192 your app \u2192 a project key, `vk_\u2026`.)\n\nThen, every time you want the new version online:\n\n```sh\nnpx ambasada deploy\n```\n\nIt does, in order:\n\n1. **build**: `opennextjs-cloudflare build` (Next), `vite build` (spa) or a bundle of the Worker (worker);\n2. **smoke test**: runs the built Worker locally in workerd and requests `/` and `/.well-known/ambasada.json`\n   (written from `ambasada.config.ts` first, when the mini app is on: [mini-app.md](mini-app.md));\n   a crash stops the deploy (skip with `--no-smoke` only if you know why it fails);\n3. **upload**: the URL is `https://<your-slug>.ambasada.dev`, with `AMBASADA_API_KEY`, `AMBASADA_API_URL`,\n   Sign in with Ambasada and the app secret set for you, and the app's own database, KV namespace and bucket\n   bound as `DB`, `KV`, `FILES` (created on the first deploy) plus the Durable Objects from `wrangler.jsonc`.\n\nThe database's tables are not created by the deploy: run `npx ambasada db migrate` (it applies the new files\nin `db/migrations/`). No Cloudflare account needed. `--dry-run` builds and prints what it would upload.\n\nYour own secrets (an API key for another service): `npx ambasada env set NAME value` (live within about 30 s, and on\nevery deploy); `npx ambasada env list` shows the names.\n\nLimits: 10 MB compressed bundle, 1000 static files, short CPU time per request (waiting on `fetch` does not\ncount). Heavy work belongs in an API you call, or a Durable Object, not in one request.\n\n## `ambasada dev --tunnel`: your laptop, live\n\nWhen the Ambasada app, sign-in or webhooks need to reach the version on your laptop (before deploying, or to\ndebug), log in once, then:\n\n```sh\nnpx ambasada dev --tunnel         # your dev server, against the real API, at https://<slug>-dev.ambasada.dev\nnpx ambasada tunnel --port 5173   # or: only the tunnel, for a server you started yourself\n```\n\nUntil Ctrl+C, `https://<slug>-dev.ambasada.dev` is your app's URL. There is no mock in this mode. The first\ntime takes up to 2 minutes while the address is published; after that it is instant. Only one terminal per\napp at a time: `--force` takes it over. More: docs/TUNNEL.md.\n\n## `ambasada deploy --own`: your own Cloudflare account\n\nRuns `wrangler deploy` into your account (you need `npx wrangler login` first), then\n`ambasada link <your workers.dev URL>`. Set the secrets yourself: `npx wrangler secret put AMBASADA_API_KEY`.\n\n## `ambasada link`: the app is hosted somewhere else\n\n```sh\nnpx ambasada link https://my-thing.lovable.app\n```\n\nSets `product.url` in `ambasada.config.ts` and checks that `<url>/health` answers. Use it for Lovable, Bolt,\nv0, Vercel, your own server. See [build-elsewhere.md](build-elsewhere.md).\n\n## Watch it run\n\n```sh\nnpx ambasada logs --follow     # the last deploy and new errors\nnpx ambasada check https://<slug>.ambasada.dev   # https, no redirects, speed; the mini-app rules when it is on\n```\n\nThe Developer app (https://developer.ambasada.dev) has deploys, errors, users and the storage tabs.\n\n## Upgrading\n\nA new devkit: `npx ambasada upgrade` (dependencies, skills, mechanical code changes), then\n[upgrading.md](upgrading.md) for the steps a coding agent does.\n\n## When it goes wrong\n\n| Symptom | Fix |\n|---|---|\n| build fails on `fs`, `child_process`, a `.node` file, `sharp` | a banned package: see [stack.md](stack.md#nextjs-allowed-and-banned) |\n| smoke test: `/` answers 500 | open `npx ambasada dev`, load `/`, read the terminal error |\n| `no such table: \u2026` online | `npx ambasada db migrate` |\n| a Durable Object migration is refused on deploy | never edit or remove a deployed tag in `wrangler.jsonc`'s `migrations`; add the next one ([storage.md](storage.md)) |\n| `CONFIG: no API key` | missing `AMBASADA_API_KEY`: `.env` locally, `ambasada login` before deploying |\n| sign-in loops back to the login page | `PUBLIC_URL` differs from the URL in the browser; remove it or fix it |\n| `this app uses the village \u2026 not installed` | a Hack A Ton project: `npx ambasada upgrade` (adds `@ambasada/village`) |\n", ".claude/skills/ambasada-product/reference/mini-app.md": '# The app inside the Ambasada app (mini app)\n\n**Optional, opt in with `npx ambasada miniapp enable`** (or `npm create ambasada@latest my-app -- --miniapp`). An app\nis a website first; most stay that way. The mini app is one more surface of it, at a path: what the Ambasada mobile\napp opens, with silent sign-in and push notifications. Platform spec: docs/MINI-APPS.md (\xA715, decision 15.6).\n\n## Turn it on\n\n```sh\nnpx ambasada miniapp enable              # at /app; --entry /in-app for another path, --entry / for the whole site\nnpx ambasada miniapp                     # on or off, and the entry\n```\n\nIt adds:\n\n| | |\n|---|---|\n| `miniapp: { entry: "/app" }` | `ambasada.config.ts`; optional `icon`, `category`, `accent`, `scopes`, `visibility` next to `entry` |\n| the in-app layout and page, no site header | `app/app/` (Next), `src/in-app/InApp.tsx` rendered by `src/main.tsx` (spa), `web/app.html` (worker) |\n| `ready()` and silent sign-in | `app/app/in-app.tsx`, `src/in-app/shell.ts`, `web/in-app.js`; with `--entry /` hooked into the root layout instead |\n| a placeholder icon, 1024\xD71024 | `public/icon.png` (`web/icon.png`): replace it, keep it square and opaque |\n| `@ambasada/miniapp` | `package.json` (Next, spa): run `npm install` |\n\nThe manifest, `/.well-known/ambasada.json`, is not a file you keep: `ambasada dev` and `ambasada deploy` write it\nfrom `ambasada.config.ts` (id, name, description, `miniapp`) into `public/` (`web/`), and `.gitignore` leaves it out.\nTo write it by hand, put your own there and drop that `.gitignore` line: yours wins. Without `miniapp`, nothing is\nserved, `ambasada check` says "mini app: off" and the deploy does not register the app with the Ambasada app.\n\n## Is it listed?\n\n`ambasada deploy` registers the app with the Ambasada hub only when it serves the manifest, then checks it. It prints:\n\n```\n\u2713 in the Ambasada app: Listed for the event\n! in the Ambasada app: Unlisted \xB7 needs: icon, viewport\n  mini app: off, not in the Ambasada app (`ambasada miniapp enable` adds one)\n```\n\nUnlisted apps work, but only you see them in the Ambasada app. Fix what `needs` says and deploy again,\nor run `npx ambasada check https://<slug>.ambasada.dev` (or `npx ambasada check` for the local folder).\nThe checks: `/.well-known/ambasada.json` valid, `icon.png` a 1024\xD71024 PNG with no transparency, the entry page\nhas `<meta name="viewport" content="width=device-width, initial-scale=1">`, no dark-only theme, it answers in under\n3 s without a redirect, `/api/auth/callback` exists, the notifications webhook answers a signed ping. With the mini\napp off, only https, no redirects and the response time of `/`.\nConnected tools can do the same through MCP: `app_status`, `app_check`.\n\n## Look like the app: @ambasada/ui\n\nThe templates import `@ambasada/ui` (tokens, Inter + JetBrains Mono, `ui-card`, `ui-button`, `ui-row`,\n`ui-pill`, `ui-sheet`, `ui-stepper`, `ui-empty`, `ui-skeleton`). Use those classes before writing CSS.\nReact: `import { Card, Button, Sheet } from "@ambasada/ui/react"`. Plain HTML: one\n`<link rel="stylesheet" href="https://unpkg.com/@ambasada/ui@0.8/dist/ambasada-ui.css">`.\nLeave space for the app\'s bar: the page uses `--ambasada-safe-area-*` and `--ambasada-host-bar`.\nLight theme only; one red (primary) button per screen.\n\n## Notifications\n\nAlready wired in every template; they work once the mini app is on:\n\n| Piece | Where |\n|---|---|\n| manifest: `"scopes": ["identity", "notifications"]`, `"notifications": { "webhook": "/api/ambasada/webhook" }`, `"privacy_url": "/privacy"` | generated from `ambasada.config.ts` (the defaults; `miniapp.scopes` to change them) |\n| the webhook: verifies the hub\'s signature, saves `token \u2194 Ambasada user id` in `ambasada.store` | `app/api/ambasada/webhook/route.ts` (Next), `api/ambasada-webhook.ts` (spa, worker) |\n| `notifyUser(app, userId, { \u2026 })`: push to one person if they turned notifications on | `lib/notifications.ts` |\n| the privacy page the scopes need | `app/(site)/privacy/page.tsx`, `public/privacy.html`, `web/privacy.html` |\n\nSend one when something the person waits for happens (their order is ready), never as marketing:\n\n```ts\nimport { notifyUser } from "../lib/notifications.ts";\n\nconst user = await ambasada().auth.user(req);            // signed in with Ambasada\nif (user) await notifyUser(ambasada(), user.id, {\n  notification_id: `order-${id}-ready`,                  // unique per message; repeats are dropped for 24 h\n  title: "Your translation is ready",                    // \u2264 40 characters\n  body: "Tap to read it.",                               // \u2264 140\n  url: `/orders/${id}`,                                  // a path on your site: where the tap opens\n});\n```\n\nPeople turn notifications on in the app (the app asks; the page can ask too with\n`notifications.request()` from `@ambasada/miniapp`, from a button). The secret (`AMBASADA_APP_SECRET`) is\ninjected by `ambasada deploy`; never put it in the browser.\n\n## Signed in without a consent screen\n\nInside the Ambasada app the page signs in silently: `auth.signIn()` from `@ambasada/miniapp` gets a short\ntoken from the app and POSTs it to `/api/auth/shell`, which sets the same session as "Sign in with\nAmbasada". Server code doesn\'t change: `currentUser()` / `ambasada().auth.user(req)` work either way.\nOn the web, the button and consent screen stay. Silent sign-in needs the app to be Verified; until then\n`signIn()` resolves `null` and the button shows.\n\n## Try it locally\n\n`npx ambasada dev` plays the hub (with the mini app on): when your app starts it sends a signed `ping` and\n`notifications_enabled` to your webhook (the token lands in the store as\n`ambasada/notifications/user_fake_visitor`), and its `/api/apps/notify` accepts pushes for that token\n(they show in the terminal). Open `http://localhost:3000/app?ambasada_shell=mock` (your entry) to pretend to be\ninside the app: the fake shell signs you in silently as "Fake Visitor".\n', ".claude/skills/ambasada-product/reference/stack.md": '# The stack: Next.js on Cloudflare\n\nEvery Ambasada app is one Cloudflare Worker. The default template builds it from **Next.js 16.4**\nwith **@opennextjs/cloudflare 1.20** (the OpenNext adapter) and the `nodejs_compat` flag. You write a\nnormal Next.js App Router app; `ambasada deploy` turns it into a Worker.\n\n## Folder layout (template `next`)\n\n```\nmy-app/\n  app/layout.tsx               <html>, the Ambasada look (@ambasada/ui) and globals.css\n  app/(site)/layout.tsx        the site\'s header (app/account.tsx) around its pages; (site) is not in the URL\n  app/(site)/page.tsx          the landing page\n  app/notes.tsx                the notes example (a client component calling app/api/notes)\n  app/api/notes/route.ts       rows in env.DB, the list cached in env.KV\n  app/api/files/route.ts       uploads to env.FILES; app/files/[...key]/route.ts serves them\n  app/api/auth/*/route.ts      Sign in with Ambasada: login, callback, logout, me, shell (silent, in the app)\n  app/api/ambasada/webhook/    the Ambasada app\'s events: who turned notifications on (reference/mini-app.md)\n  app/account.tsx              the header: "Sign in with Ambasada", or the person\'s name and avatar\n  app/(site)/privacy/page.tsx  what you keep about people (the mini app\'s privacy_url)\n  app/(site)/room/             the live room demo\n  app/app/                     the mini app, once on (`ambasada miniapp enable`): its layout, page and in-app.tsx\n  lib/ambasada.ts              the Ambasada client for server code (reads the Worker env)\n  lib/notifications.ts         notifyUser(): a push to one person who turned notifications on\n  lib/db.ts, kv.ts, files.ts   env.DB, env.KV, env.FILES (reference/storage.md); lib/bindings.ts reaches them\n  db/migrations/               the database\'s tables, one .sql file per change\n  src/realtime/                the live room (a Durable Object) and its React hook\n  ambasada.config.ts           app id, name, one-line description, product URL, `miniapp` (optional)\n  wrangler.jsonc               Worker settings (nodejs_compat, assets) and the bindings DB, KV, FILES, ROOMS\n  worker.ts                    the Worker entry: live rooms\' WebSockets, then the Next.js app\n  open-next.config.ts          OpenNext settings; leave as is\n  .env                         secrets for local runs (never commit, never send to the browser)\n  .ambasada/project.json       the template and devkit version (`ambasada upgrade` reads it); commit it\n  .claude/skills/              this skill\n```\n\nOne more endpoint = one more `app/api/<name>/route.ts`. Data it keeps goes in `env.DB` (a migration in\n`db/migrations/`), `env.KV` or `env.FILES` ([storage.md](storage.md)).\n\n## Using the client\n\nServer code only (route handlers, server components, server actions):\n\n```ts\n// app/api/hello/route.ts\nimport { ambasada } from "../../../lib/ambasada.ts";\n\nexport async function GET(req: Request) {\n  const user = await ambasada().auth.user(req);\n  return Response.json({ hello: user?.name ?? "stranger" });\n}\n```\n\n`lib/ambasada.ts` creates one client per Worker instance with `createAmbasada({ env })` from `@ambasada/sdk`,\nwhere `env` comes from `getCloudflareContext()` (deployed); under `next dev` the SDK reads `process.env`.\nIt reads `AMBASADA_API_KEY` and `AMBASADA_API_URL` (default https://api.ambasada.dev). The client has `auth`\n(below), `apps` (notifications, [mini-app.md](mini-app.md)), `store` and `files`.\n\n## Who is signed in\n\nEvery hosted app gets **Sign in with Ambasada** (Ambasada ID) for free: no keys, no settings.\nThe template\'s header already has the button. In server code:\n\n```ts\nimport { currentUser } from "../lib/ambasada.ts";\nimport { bindings } from "../lib/bindings.ts";\nimport { run } from "../lib/db.ts";\n\nconst user = await currentUser(); // null, or { id, name, avatar_url, builder, pass, member_since, \u2026 }\nif (!user) redirect("/api/auth/login?returnTo=/orders");\nawait run(bindings().DB, "INSERT INTO orders (user_id, item) VALUES (?, ?)", user.id, item); // key per-person data by user.id\n```\n\nIn a route handler, `ambasada().auth.user(req)` does the same. Client components fetch `/api/auth/me`.\nAsk for the email only if you need it: `/api/auth/login` calls `auth.login(req, { email: true })`.\nDon\'t build your own login or accounts table, and don\'t add Clerk, Auth.js or Supabase Auth.\n\n## Next.js: allowed and banned\n\nAllowed, and enough for any product here:\n\n- pages and layouts (`app/**/page.tsx`, `layout.tsx`), server components, client components (`"use client"`)\n- route handlers (`app/api/**/route.ts`), server actions (`"use server"`)\n- `fetch` to any HTTPS API, `next/link`, `next/font`, plain CSS / CSS modules / Tailwind\n\nBanned (they fail on Workers or break the deploy):\n\n| Don\'t | Do instead |\n|---|---|\n| `next/image` with the default loader | `<img>`, or `images: { unoptimized: true }` in `next.config.ts` |\n| ISR, `export const revalidate = \u2026`, `revalidatePath`, `unstable_cache` | render on each request (`export const dynamic = "force-dynamic"`), or cache results in `env.KV` |\n| `fs`, `child_process`, `sharp`, `bcrypt`, `sqlite3`, `puppeteer`, any native package | `fetch` an API (an LLM provider with your own key in a secret, for example) |\n| a custom server (`server.js`, Express inside Next) | route handlers |\n| `middleware.ts` / `proxy.ts`, `export const runtime = "edge"` | check inside the page or route handler; Next\'s default runtime is right |\n| Prisma, Drizzle with a database, Supabase, Firebase, Mongo, Redis | `env.DB` (SQLite), `env.KV`, `env.FILES` ([storage.md](storage.md)) |\n| writing files at runtime, global variables as storage | `env.DB`, `env.KV`, `env.FILES` or a Durable Object (each request can run on a different machine) |\n\nKeep the bundle small: the Worker limit is 10 MB compressed. Big UI kits and icon packs are the usual cause.\n\n## Where data lives\n\nThe app has its own SQLite database (`env.DB`), key-value (`env.KV`), file storage (`env.FILES`, public at\n`/files/<key>`) and Durable Objects for live state, created at the first deploy. Which one fits, the migrations\nworkflow and copy-paste patterns: [storage.md](storage.md).\n\nAlso there, for small things: `ambasada.store` (JSON, 1 MB for the whole app: settings, not user data) and\n`ambasada.files.put(\u2026)` \u2192 `{ url }` (platform-hosted files that expire).\n\n## Secrets\n\n- Local: `.env` in the project (Cloudflare\'s `.dev.vars` works too). The template writes it with test\n  values for `ambasada dev`. Both are in `.gitignore`; keep them there.\n- Deployed: `ambasada deploy` injects `AMBASADA_API_KEY`, `AMBASADA_API_URL`, the Sign in with Ambasada\n  credentials (`AMBASADA_AUTH_*`) and the mini-app secret (`AMBASADA_APP_SECRET`, with `AMBASADA_HUB_URL`\n  and `AMBASADA_APP_ORIGIN`) for you. With `--own`, set them yourself: `npx wrangler secret put AMBASADA_API_KEY`.\n- Other services\' keys (an OpenAI key, say): `.env` locally, `npx ambasada env set OPENAI_API_KEY \u2026` online;\n  read on the server only.\n- Anything named `NEXT_PUBLIC_*` is copied into the browser. Never put a key there.\n- Never paste a key into a page, a client component, a prompt for a no-code builder, or a commit.\n\n## Variants\n\n- `spa`: Vite + React with `@cloudflare/vite-plugin`, for code exported from Lovable or Bolt. The\n  `api/` endpoints are small fetch handlers; the React app calls them with `fetch("/api/\u2026")`.\n- `worker`: `web/` (plain HTML/CSS) plus `api/*.ts` fetch handlers. Best when the app is a page or two.\n\nThe rules on this page (state, secrets, no native packages) apply to all three.\n', ".claude/skills/ambasada-product/reference/storage.md": '# Data, files and realtime\n\nEvery app on ambasada.dev gets a real database, key-value, file storage and Durable Objects. They are created\nat the first `ambasada deploy` and bound to the Worker on every deploy; nothing to sign up for or configure.\nLocally (`ambasada dev`, `wrangler dev`, `vite`) wrangler runs the same things from `.wrangler/state`.\n\n| Need | Use | Not |\n|---|---|---|\n| anything with rows: users\' data, orders, posts, scores, anything you query, sort or join | `env.DB` (SQLite, D1) | KV, files, `ambasada.store` |\n| sessions, caches of slow results, feature flags, "seen this already" | `env.KV` | a table you scan |\n| uploads, images, audio, PDFs, generated files | `env.FILES` (R2), public at `/files/<key>` | base64 in the database |\n| state several people see change live: chat, presence, a shared board, a game table, live counters, a queue, rate limits, one thing per entity | a Durable Object (`env.ROOMS` in the templates) | polling the database |\n| an AI agent with memory, schedules and live state per user or task | the Agents SDK (`examples/agent/`) | a cron that rereads everything |\n| a few small settings for a tiny app | `ambasada.store` (1 MB per app) | user data of any size |\n\nQuotas per app: database 500 MB, KV 1 GB, files 5 GB. A database over its quota stops the next deploy.\n\n## `env.DB`: SQLite\n\nSchema lives in `db/migrations/`, one file per change, applied in name order, never edited once applied:\n\n```sql\n-- db/migrations/0002_orders.sql\nCREATE TABLE orders (\n  id INTEGER PRIMARY KEY AUTOINCREMENT,\n  user_id TEXT NOT NULL,\n  item TEXT NOT NULL,\n  paid INTEGER NOT NULL DEFAULT 0,\n  created_at INTEGER NOT NULL\n);\nCREATE INDEX orders_user ON orders (user_id, created_at);\n```\n\n```sh\nnpx wrangler d1 migrations apply DB --local   # the local database, for ambasada dev\nnpx ambasada db migrate                       # the app\'s database online (run before or right after deploying)\nnpx ambasada db shell "SELECT * FROM orders LIMIT 5"\n```\n\nQuery with `lib/db.ts` (SQL with `?` placeholders, typed rows, no ORM):\n\n```ts\nimport { all, batch, first, run } from "../lib/db.ts";\n\ntype Order = { id: number; user_id: string; item: string; paid: number; created_at: number };\nconst mine = await all<Order>(env.DB, "SELECT * FROM orders WHERE user_id = ? ORDER BY created_at DESC LIMIT 50", user.id);\nconst one = await first<Order>(env.DB, "SELECT * FROM orders WHERE id = ?", id);\nconst { lastRowId } = await run(env.DB, "INSERT INTO orders (user_id, item, created_at) VALUES (?, ?, ?)", user.id, item, Date.now());\nawait batch(env.DB, [["UPDATE stock SET n = n - 1 WHERE item = ?", item], ["UPDATE orders SET paid = 1 WHERE id = ?", id]]); // all or nothing\n```\n\nIn Next.js route handlers and server components, the bindings come from `bindings()` (`lib/bindings.ts`):\n`const { DB } = bindings();`. In the spa and worker templates, handlers get `env`.\n\nRules: always placeholders, never string-built SQL. Key per-person rows by the Ambasada user id\n(`auth.user(req).id`). Add an index for every `WHERE` you run often. Times as `Date.now()` integers.\n\n## `env.KV`: sessions, caches, flags\n\nReads are fast everywhere; a write shows up everywhere within about a minute; one write per second per key.\n\n```ts\nimport { cached, getJson, putJson } from "../lib/kv.ts";\n\nawait putJson(env.KV, `session:${id}`, { userId }, { ttl: 60 * 60 * 24 });\nconst session = await getJson<{ userId: string }>(env.KV, `session:${id}`);\nconst stats = await cached(env.KV, "home:stats", 300, () => computeStats(env)); // recompute at most every 5 min\n```\n\nNot for counters, balances or anything two people write at once: use `env.DB` (a transaction) or a Durable Object.\n\n## `env.FILES`: uploads and generated files\n\n```ts\nimport { serveFile, upload } from "../lib/files.ts";\n\n// POST /api/files: a signed-in person uploads (the templates\' api/files.ts)\nconst { key, url } = await upload(env.FILES, req.body, { contentType: req.headers.get("content-type") ?? undefined, folder: `u/${user.id}` });\nawait run(env.DB, "INSERT INTO photos (user_id, file_key) VALUES (?, ?)", user.id, key); // keep the key, not the bytes\n\n// GET /files/*: already wired in every template, with ETag, ranges and cache headers\nreturn serveFile(env.FILES, req);\n```\n\n`url` is `/files/<key>` on the app (`https://<slug>.ambasada.dev/files/<key>`): public to anyone with the link.\nPrivate files: store them under a key nobody can guess and serve them from your own route that checks\n`auth.user(req)` first, instead of `/files/*`. `npx ambasada files list | put | url | delete` from the terminal.\n\n## Durable Objects: realtime and per-entity state\n\nA Durable Object is one tiny server per id (a room, a document, a match, a user) with its own SQLite, that\nevery request for that id reaches. Use one whenever people must see each other\'s changes live, or one thing\nmust never be updated by two requests at once. The templates ship `src/realtime/room.ts` (`env.ROOMS`):\n\n```ts\n// the Worker: /api/rooms/<id>/ws \u2192 the room\nconst room = /^\\/api\\/rooms\\/([^/]+)\\/ws$/.exec(pathname);\nif (room) return env.ROOMS.getByName(decodeURIComponent(room[1]!)).fetch(req);\n```\n\n```ts\n// the room (shortened): WebSocket hibernation, broadcast, its own SQLite\nexport class Room extends DurableObject<unknown> {\n  async fetch(req: Request) {\n    const { 0: client, 1: server } = new WebSocketPair();\n    this.ctx.acceptWebSocket(server);              // hibernation: no cost while nobody talks\n    server.serializeAttachment({ name: "guest" }); // per-connection data that survives hibernation\n    return new Response(null, { status: 101, webSocket: client });\n  }\n  async webSocketMessage(ws: WebSocket, data: string | ArrayBuffer) {\n    this.ctx.storage.sql.exec("INSERT INTO messages (text, at) VALUES (?, ?)", String(data), Date.now());\n    for (const peer of this.ctx.getWebSockets()) peer.send(String(data)); // everyone in the room\n  }\n}\n```\n\n```tsx\n// the browser (React): src/realtime/use-room.ts\nconst { messages, online, send, status } = useRoom(roomId, { name: user.name });\n```\n\nA new class needs a binding and a migration in `wrangler.jsonc` (new tags go at the end; never edit or remove one\nthat was deployed; to drop a class add `{ "tag": "v3", "deleted_classes": ["Old"] }`):\n\n```jsonc\n"durable_objects": { "bindings": [{ "name": "ROOMS", "class_name": "Room" }, { "name": "BOARDS", "class_name": "Board" }] },\n"migrations": [{ "tag": "v1", "new_sqlite_classes": ["Room"] }, { "tag": "v2", "new_sqlite_classes": ["Board"] }]\n```\n\nExport the class from the Worker\'s entry (`src/worker.ts`; spa `worker/index.ts`; next `worker.ts`).\nOther shapes, same pattern: presence (who is online), a live counter (`UPDATE \u2026 RETURNING`, then broadcast), a\nper-user rate limit (`getByName(user.id)`), a job queue (`this.ctx.storage.setAlarm`). A Durable Object belongs\nto this app; other apps can\'t reach it. Under `next dev` they don\'t run: use `npm run preview` (workerd).\n\n## Agents (Agents SDK)\n\nFor agentic products (an assistant per user, a research task that runs for minutes, a bot that follows up),\nuse the Cloudflare Agents SDK: `examples/agent/` in the template (`npm i agents`, four lines to wire). An agent\nis a Durable Object with live state synced to clients (`setState`, `useAgent` in React), `this.sql`,\n`this.schedule(\u2026)` and WebSockets. One agent per user or task: `/agents/agent-example/<user id>`.\n\n## Don\'t\n\n- Poll (`setInterval(fetch\u2026)`) for what others changed: a Durable Object + WebSocket pushes it.\n- Put files or base64 in the database or KV: `env.FILES`, and keep the key in a row.\n- Keep user data in `ambasada.store`: it is 1 MB for the whole app.\n- Keep state in module variables or global objects: every request may run on another machine.\n- Count, rank or move money in KV: use a SQL transaction (`batch`) or a Durable Object.\n- Build SQL by joining strings with user input: `?` placeholders.\n- Edit an applied migration: add the next file.\n- Add Prisma, Drizzle with Postgres, Supabase, Firebase, Mongo or Redis: everything above is already here.\n', ".claude/skills/ambasada-product/reference/upgrading.md": "# Upgrading a project\n\n`npx ambasada upgrade` does the mechanical part: every `@ambasada/*` dependency to the CLI's version, the\npackage manager, `.claude/skills/ambasada-*` re-synced (the project's own skills are left alone), the code\nchanges listed below as \"done by `upgrade`\", the `ambasada check` rules, and `.ambasada/project.json`\n(the template and devkit version). `npx ambasada upgrade --check` only reports.\n\nWhat is left is below, per version, for a coding agent. Do the steps for every version between the one in\n`.ambasada/project.json` (none: 0.7) and the current one, in order. After each, run the app with\n`npx ambasada dev` and the project's `typecheck` script.\n\n## 0.7 \u2192 0.8: the platform and the village split\n\n0.8 splits the devkit: `@ambasada/sdk` and `ambasada` are the platform (sign-in, notifications, storage,\nhosting); the Hack A Ton economy (TON, checkout, offerings, the agent) is the add-on `@ambasada/village`.\n\nDone by `upgrade`:\n\n- the village names (`village`, `createVillage`, `offering`, `defineCompany`, `isVillageError`, the receipt and\n  webhook helpers, their types) import from `@ambasada/village`; in a village app `createAmbasada` became\n  `createVillage` and `DEFAULT_API_URL` became `DEFAULT_VILLAGE_API_URL` (their 0.7 meaning);\n- `@ambasada/village` added to `package.json` when the app has `offerings.ts` or an `idea`;\n- `.env` / `.dev.vars`: `AMBASADA_API_URL=https://hackaton.ambasada.id` became `https://api.ambasada.dev` plus\n  `AMBASADA_VILLAGE_API_URL=https://hackaton.ambasada.id`;\n- the `ambasada-payments` skill replaced by `ambasada-village`.\n\nFor the agent:\n\n1. **Platform code uses the platform client.** Files that only sign people in, send notifications or use\n   `store`/`files` can import `createAmbasada` / `ambasada` from `@ambasada/sdk` instead of the village client.\n   Leave files that sell, check receipts or call `llm` on the village client.\n2. **Config.** `ambasada.config.ts` may stay `defineCompany({ id, name, idea, \u2026 })`; the 0.8 form is\n   `defineCompany(defineApp({ id, name, description, product }), { idea, offerings, agent })` with\n   `defineApp` from `@ambasada/sdk`. Add a one-line `description` (the manifest's subtitle).\n3. **CLI calls.** In scripts, READMEs and `package.json`: `ambasada wallet|ledger|offerings|market|steer|webhook|links`\n   \u2192 `ambasada village \u2026`, `ambasada logs --agent` \u2192 `ambasada village logs --agent`, `ambasada dev buy` \u2192\n   `ambasada village dev buy`. The old spellings still work through 1.x with a warning.\n4. **Pages that load pay.js** from `AMBASADA_API_URL` should use the village client's `apiUrl` (or\n   `AMBASADA_VILLAGE_API_URL`): `AMBASADA_API_URL` is the platform's from 0.8.\n5. **Login.** The CLI's login moved from `~/.config/village` to `~/.config/ambasada` (moved on first use);\n   nothing to do unless a script reads that file.\n6. Run `npx ambasada check`, `npx ambasada dev` and the typecheck; deploy when they pass.\n", "README.md": "# My App\n\nAn app on Ambasada, one bare Cloudflare Worker (template `worker`): sign-in with Ambasada ID, a database,\nkey-value, files and live rooms; a mini app inside the Ambasada app if you want one. Everything here is a default;\nchange anything.\n\n```\nambasada.config.ts          id, name, one-line description, where the app runs\nsrc/worker.ts               the Worker: /api/<name> \u2192 api/<name>.ts, / (landing page), the rest from web/\napi/auth.ts                 Sign in with Ambasada (login, callback, logout, me, shell)\napi/ambasada-webhook.ts     the Ambasada app's events (notifications on/off); lib/notifications.ts sends pushes\napi/notes.ts, api/files.ts  env.DB + env.KV, uploads to env.FILES\nlib/ambasada.ts             the SDK client from the Worker's env\nlib/db.ts, kv.ts, files.ts  env.DB, env.KV, env.FILES; db/migrations/ the tables\nsrc/realtime/room.ts        the live room (a Durable Object); web/room.html is the demo\nweb/                        the landing page, static assets\nwrangler.jsonc              one Worker + assets, nodejs_compat, the storage bindings\n.claude/skills/             docs your coding agent reads (ambasada-product)\n```\n\n## 1. Run it (2 min)\n\nNeeds Node \u2265 22.\n\n```sh\nnpm install\nnpm run dev                # `ambasada dev`: the mock Ambasada API on :8788 + `wrangler dev` on http://localhost:3000\n```\n\nOpen http://localhost:3000: add a note, sign in (the mock signs you in as \"Fake Visitor\"), open /room in two tabs.\nhttp://127.0.0.1:8788 is the mock's page (sign-ins, notifications, the store). `ambasada dev` points your app at the\nmock whatever `.env` says.\n\n## 2. Make it yours\n\n- `ambasada.config.ts`: name and description.\n- A new endpoint: `api/<name>.ts` (and a line in `src/worker.ts`). Data goes in `env.DB` (a migration in `db/migrations/`), `env.KV` or `env.FILES`.\n- Ask your coding agent: it has the ambasada-product skill (stack, storage, sign-in, mini app, deploy).\n\nNo framework, no build step: `wrangler` bundles `src/worker.ts`, and `web/` is served as is.\n\n## 3. Go live (1 min)\n\n```sh\nnpx ambasada login         # Ambasada ID, or a project key from https://developer.ambasada.dev\nnpx ambasada deploy        # build, smoke test, host at https://my-app.ambasada.dev\nnpx ambasada db migrate    # db/migrations \u2192 the app's database\nnpx ambasada logs          # the last deploy and recent errors\n```\n\nSign-in, notifications and the storage are set up by the deploy; nothing to configure. Your own secrets:\n`npx ambasada env set NAME value`. Hosting elsewhere: `npx wrangler deploy`, then `npx ambasada link https://\u2026`.\n\n**Sign in with Ambasada**: the header's button signs people in with their Ambasada ID; on the server,\n`ambasada(\u2026).auth.user(req)` gives `{ id, name, avatar_url, builder, pass }` or null.\n\n## Storage and realtime\n\nEvery app gets these, provisioned at the first `ambasada deploy`; locally wrangler keeps them in `.wrangler/state`.\n\n| Binding | For | Here |\n|---|---|---|\n| `env.DB` | SQLite: anything relational | `lib/db.ts`, tables in `db/migrations/`, example `api/notes.ts` |\n| `env.KV` | sessions, caches, flags | `lib/kv.ts` (the notes cache) |\n| `env.FILES` | uploads, generated files; public at `/files/<key>` | `lib/files.ts`, upload `api/files.ts` |\n| `env.ROOMS` | live state shared between people (Durable Object) | `src/realtime/room.ts`, demo at `/room` |\n\n```sh\nnpx wrangler d1 migrations apply DB --local   # db/migrations \u2192 the local database (ambasada dev)\nnpx ambasada db migrate                       # \u2026 \u2192 the app's database online\nnpx ambasada db shell \"SELECT * FROM notes\"   # or `ambasada db shell` for a prompt\nnpx ambasada kv list | get <key> | put <key> <value> | delete <key>\nnpx ambasada files put <file> | list | url <key> | delete <key>\n```\n\nOptional: an agent with the Agents SDK in `examples/agent/` (its README: `npm i agents` and four lines to wire it).\n\n## In the Ambasada app (optional)\n\nOff by default: this is a website. `npx ambasada miniapp enable` adds a mini app at `/app` (`--entry /` for the whole\nsite): `miniapp: { entry: \"/app\" }` in `ambasada.config.ts`, web/app.html and web/in-app.js, a placeholder\n`web/icon.png`, and the manifest `ambasada dev` and `deploy` serve at `/.well-known/ambasada.json`. Then\n`http://localhost:3000/app?ambasada_shell=mock` pretends to be inside the Ambasada app. The ambasada-product skill:\nreference/mini-app.md.\n\n## Rules worth knowing\n\n- State lives in `env.DB`, `env.KV`, `env.FILES` or a Durable Object, never in module variables: a Worker has many instances.\n- Secrets only in `.env` locally and `ambasada env set` online; never in the code or `wrangler.jsonc` vars.\n- `npx ambasada check` runs the checks (https, no redirects, speed; the mini-app rules when it is on); `npx ambasada upgrade` after a new devkit.\n\nFor the Hack A Ton: `npx ambasada add village` (the add-on).\n\nBuilt by [CENTYSO](https://centyso.com) for [Ambasada](https://ambasada.id).\n", "ambasada.config.ts": 'import { defineApp } from "@ambasada/sdk";\n\nexport default defineApp({\n  id: "my-app",\n  name: "My App",\n  // One line about the app (the subtitle of its Ambasada mini app, if you add one: `ambasada miniapp enable`).\n  description: "Notes, a live room and sign-in",\n  // Where the app runs. `ambasada dev` serves it on http://localhost:3000; hosted, it is https://my-app.ambasada.dev\n  // (`ambasada deploy` sets it; `ambasada link https://\u2026` when you host elsewhere).\n  product: { url: "http://localhost:3000" },\n});\n', "api/ambasada-webhook.ts": '// POST /api/ambasada/webhook: the Ambasada app\'s events for this mini app (docs/MINI-APPS.md \xA77), signed with\n// AMBASADA_APP_SECRET (injected on ambasada.dev; `ambasada dev` plays the hub and sends a ping and\n// notifications_enabled here when it starts). The manifest points here: notifications.webhook.\nimport { isAmbasadaError } from "@ambasada/sdk";\nimport { ambasada, type Env } from "../lib/ambasada.ts";\nimport { forgetToken, saveToken } from "../lib/notifications.ts";\n\nexport default async function appWebhook(req: Request, env: Env): Promise<Response> {\n  const app = ambasada(env);\n  try {\n    const event = await app.apps.verifyWebhook(req); // throws if forged or stale\n    switch (event.event) {\n      case "notifications_enabled":\n      case "app_added":\n        if (event.token) await saveToken(app, event.user, event.token);\n        break;\n      case "notifications_disabled":\n      case "app_removed":\n        await forgetToken(app, event.user);\n        break;\n      case "ping": // `ambasada check` and the registry: answer 200\n        break;\n    }\n    return new Response("ok");\n  } catch (error) {\n    if (isAmbasadaError(error)) return error.toResponse();\n    throw error;\n  }\n}\n', "api/auth.ts": '// Sign in with Ambasada (Ambasada ID, OAuth + PKCE): zero setup. On https://<slug>.ambasada.dev the deploy\n// injects AMBASADA_AUTH_*; under `ambasada dev` the mock signs you in as a fake visitor.\n//   GET /api/auth/login?returnTo=/   \u2192 the Ambasada ID consent screen\n//   GET /api/auth/callback           \u2192 back from it: sets an HttpOnly session cookie, redirects to returnTo\n//   GET /api/auth/logout             \u2192 clears it\n//   GET /api/auth/me                 \u2192 { user } (null when signed out), for the browser\n//   POST /api/auth/shell { token }   \u2192 silent sign-in inside the Ambasada app: the same session, no consent screen\n//                                      (the page calls `auth.signIn()` from @ambasada/miniapp)\n// On the server: `await ambasada(env).auth.user(req)` \u2192 { id, name, avatar_url, builder, pass, \u2026 } or null.\nimport { isAmbasadaError } from "@ambasada/sdk";\nimport { ambasada, type Env } from "../lib/ambasada.ts";\n\nexport default async function auth(req: Request, env: Env): Promise<Response> {\n  const { auth } = ambasada(env);\n  try {\n    switch (new URL(req.url).pathname.replace(/\\/+$/, "")) {\n      case "/api/auth/login":\n        return await auth.login(req);\n      case "/api/auth/callback":\n        return await auth.callback(req);\n      case "/api/auth/logout":\n        return auth.logout(req);\n      case "/api/auth/shell":\n        return await auth.shell(req);\n      case "/api/auth/me": {\n        // Under `ambasada dev` the page needs the mock issuer for its fake shell (?ambasada_shell=mock).\n        const devIssuer = env.AMBASADA_AUTH_ISSUER?.startsWith("http://") ? env.AMBASADA_AUTH_ISSUER : undefined;\n        return Response.json({ user: await auth.user(req), configured: auth.configured, ...(devIssuer ? { dev_issuer: devIssuer } : {}) }, { headers: { "cache-control": "no-store" } });\n      }\n    }\n    return Response.json({ error: { code: "NOT_FOUND", message: "no such route" } }, { status: 404 });\n  } catch (error) {\n    if (isAmbasadaError(error)) return error.toResponse();\n    throw error;\n  }\n}\n', "api/files.ts": '// POST /api/files (raw body, content-type): a signed-in person uploads a file to env.FILES (lib/files.ts)\n// \u2192 { key, url }; the url (/files/<key>) is public and served by the /files/* route.\nimport { ambasada, type Env } from "../lib/ambasada.ts";\nimport { upload } from "../lib/files.ts";\n\nconst MAX_BYTES = 10 * 1024 * 1024;\n\nexport default async function files(req: Request, env: Env): Promise<Response> {\n  if (req.method !== "POST") return Response.json({ error: { code: "INVALID_REQUEST", message: "POST the file" } }, { status: 405 });\n  const user = await ambasada(env).auth.user(req);\n  if (!user) return Response.json({ error: { code: "UNAUTHORIZED", message: "sign in to upload" } }, { status: 401 });\n  const size = Number(req.headers.get("content-length") ?? 0);\n  if (!size || size > MAX_BYTES) return Response.json({ error: { code: "INVALID_REQUEST", message: "send a file up to 10 MB with a content-length" } }, { status: 413 });\n  const stored = await upload(env.FILES, req.body, { contentType: req.headers.get("content-type") ?? undefined, folder: `u/${user.id}` });\n  return Response.json(stored, { status: 201 });\n}\n', "api/notes.ts": '// GET /api/notes: the latest notes from env.DB (lib/db.ts), cached a minute in env.KV (lib/kv.ts).\n// POST /api/notes { text }: adds one. The table is db/migrations/0001_init.sql.\nimport type { Env } from "../lib/ambasada.ts";\nimport { all, run } from "../lib/db.ts";\nimport { cached, remove } from "../lib/kv.ts";\n\ntype Note = { id: number; text: string; created_at: number };\n\nexport default async function notes(req: Request, env: Env): Promise<Response> {\n  if (req.method === "POST") {\n    const { text } = (await req.json().catch(() => ({}))) as { text?: unknown };\n    if (typeof text !== "string" || !text.trim() || text.length > 500) {\n      return Response.json({ error: { code: "INVALID_REQUEST", message: "body must be { text }, 1 to 500 characters" } }, { status: 400 });\n    }\n    const { lastRowId } = await run(env.DB, "INSERT INTO notes (text, created_at) VALUES (?, ?)", text.trim(), Date.now());\n    await remove(env.KV, "notes:latest");\n    return Response.json({ id: lastRowId }, { status: 201 });\n  }\n  const latest = await cached(env.KV, "notes:latest", 60, () => all<Note>(env.DB, "SELECT id, text, created_at FROM notes ORDER BY id DESC LIMIT 20"));\n  return Response.json({ notes: latest });\n}\n', "db/migrations/0001_init.sql": "-- The app's first table. Add the next change as db/migrations/0002_<what>.sql (never edit an applied file), then:\n--   npx wrangler d1 migrations apply DB --local   (ambasada dev)\n--   npx ambasada db migrate                       (online)\nCREATE TABLE notes (\n  id INTEGER PRIMARY KEY AUTOINCREMENT,\n  text TEXT NOT NULL,\n  created_at INTEGER NOT NULL\n);\nCREATE INDEX notes_created ON notes (created_at);\n", "examples/agent/README.md": '# Agent (optional): the Cloudflare Agents SDK\n\nFor agentic products: an agent per user, document or task, with live state, its own SQL, schedules and\nWebSockets (`agent.ts`). It is a Durable Object, so it runs on ambasada.dev like the live rooms. To turn it on:\n\n1. `npm i agents`\n2. `wrangler.jsonc`: add the binding and a migration after the existing ones:\n   ```jsonc\n   "durable_objects": { "bindings": [{ "name": "ROOMS", "class_name": "Room" }, { "name": "AgentExample", "class_name": "AgentExample" }] },\n   "migrations": [{ "tag": "v1", "new_sqlite_classes": ["Room"] }, { "tag": "v2", "new_sqlite_classes": ["AgentExample"] }]\n   ```\n3. In the Worker entry (`src/worker.ts`; spa: `worker/index.ts`; next: `worker.ts`):\n   ```ts\n   export { AgentExample } from "../examples/agent/agent.ts"; // next: "./examples/agent/agent.ts"\n   import { routeAgents } from "../examples/agent/agent.ts";\n   // first thing in fetch():\n   const agent = await routeAgents(req, env as unknown as Record<string, unknown>);\n   if (agent) return agent;\n   ```\n4. In the browser (React): `useAgent({ agent: "agent-example", name: user.id, onStateUpdate: setState })` from\n   `agents/react`; `agent.send("hello")`. Plain fetch: `GET /agents/agent-example/<name>`.\n\n`ambasada deploy` sends the new class and its migration; nothing else to set up. Docs: https://developers.cloudflare.com/agents/\n', "examples/agent/agent.ts": '/**\n * Optional: an agent with the Cloudflare Agents SDK (`agents`), for agentic products. An agent is a Durable\n * Object with superpowers: state synced live to every connected client (`setState`), its own SQL (`this.sql`),\n * scheduled work (`this.schedule`), WebSockets and HTTP. One instance per name: per user, per document, per task.\n * Not wired in by default: examples/agent/README.md has the four steps.\n */\nimport { Agent, routeAgentRequest, type Connection, type WSMessage } from "agents";\n\ntype State = { notes: number; lastNote: string | null };\n\nexport class AgentExample extends Agent<Cloudflare.Env, State> {\n  initialState: State = { notes: 0, lastNote: null };\n\n  async onStart() {\n    this.sql`CREATE TABLE IF NOT EXISTS notes (id INTEGER PRIMARY KEY AUTOINCREMENT, text TEXT NOT NULL, at INTEGER NOT NULL)`;\n  }\n\n  // GET /agents/agent-example/<name>: what this agent knows.\n  async onRequest(_req: Request): Promise<Response> {\n    const notes = this.sql<{ id: number; text: string; at: number }>`SELECT id, text, at FROM notes ORDER BY id DESC LIMIT 20`;\n    return Response.json({ state: this.state, notes });\n  }\n\n  // A client (useAgent in the browser) sent a message: remember it, sync the new state to every client,\n  // and come back to it in a minute (call an LLM here, send a notification, \u2026).\n  async onMessage(connection: Connection, message: WSMessage) {\n    const text = String(message).slice(0, 2000);\n    this.sql`INSERT INTO notes (text, at) VALUES (${text}, ${Date.now()})`;\n    this.setState({ notes: this.state.notes + 1, lastNote: text });\n    await this.schedule(60, "followUp", { text });\n    connection.send(JSON.stringify({ ok: true }));\n  }\n\n  async followUp(payload: { text: string }) {\n    console.log(`a minute ago someone wrote: ${payload.text}`);\n  }\n}\n\n/** In your Worker\'s fetch, before your own routes: answers /agents/<agent>/<name> (HTTP and WebSocket). */\nexport const routeAgents = (req: Request, env: Record<string, unknown>) => routeAgentRequest(req, env);\n', gitignore: "node_modules/\n.env*\n.dev.vars*\n.wrangler/\ndist/\n.DS_Store\n# build output of `ambasada deploy`; project.json (template, devkit version) is kept\n.ambasada/*\n!.ambasada/project.json\n", "lib/ambasada.ts": 'import { createAmbasada, type Ambasada } from "@ambasada/sdk";\nimport type { Room } from "../src/realtime/room.ts";\n\n/** The Worker\'s env: `.env` locally (`ambasada dev` points it at the mock), secrets injected at deploy. */\nexport interface Env {\n  ASSETS: Fetcher;\n  /** The app\'s SQLite database (lib/db.ts), key-value (lib/kv.ts), files (lib/files.ts) and live rooms (src/realtime/room.ts). */\n  DB: D1Database;\n  KV: KVNamespace;\n  FILES: R2Bucket;\n  ROOMS: DurableObjectNamespace<Room>;\n  AMBASADA_API_KEY?: string;\n  /** Set by `ambasada deploy` and `ambasada dev`; the SDK defaults to https://api.ambasada.dev. */\n  AMBASADA_API_URL?: string;\n  AMBASADA_APP_ID?: string;\n  /** Sign in with Ambasada (api/auth.ts): set by `ambasada deploy` on ambasada.dev, and by `ambasada dev`. */\n  AMBASADA_AUTH_CLIENT_ID?: string;\n  AMBASADA_AUTH_CLIENT_SECRET?: string;\n  AMBASADA_AUTH_ISSUER?: string;\n  /** Mini-app notifications (api/ambasada-webhook.ts, lib/notifications.ts): set on ambasada.dev and by `ambasada dev`. */\n  AMBASADA_APP_SECRET?: string;\n  AMBASADA_HUB_URL?: string;\n  AMBASADA_APP_ORIGIN?: string;\n  /** Your public URL, if the Worker sees another host (behind a proxy). */\n  PUBLIC_URL?: string;\n}\n\nlet client: Ambasada | undefined;\n\n/** One client per isolate: it caches the API\'s signing keys. */\nexport function ambasada(env: Env): Ambasada {\n  return (client ??= createAmbasada({ env: env as unknown as Record<string, unknown> }));\n}\n', "lib/db.ts": '/**\n * env.DB: this app\'s SQLite database (Cloudflare D1). The tables come from db/migrations/*.sql:\n * `npx ambasada db migrate` online, `npx wrangler d1 migrations apply DB --local` for `ambasada dev`.\n * A tiny typed layer, no ORM: SQL with ? placeholders in, plain objects out.\n *\n *   const notes = await all<Note>(env.DB, "SELECT * FROM notes ORDER BY id DESC LIMIT ?", 20);\n *   const note = await first<Note>(env.DB, "SELECT * FROM notes WHERE id = ?", id);\n *   const { lastRowId } = await run(env.DB, "INSERT INTO notes (text) VALUES (?)", text);\n *   await batch(env.DB, [["UPDATE a SET n = n - 1 WHERE id = ?", 1], ["UPDATE b SET n = n + 1 WHERE id = ?", 2]]); // one transaction\n */\n\nexport type Param = string | number | boolean | null | ArrayBuffer;\n\n/** What this file needs from a D1 binding (env.DB satisfies it). */\nexport interface Database {\n  prepare(query: string): Statement;\n  batch(statements: Statement[]): Promise<unknown[]>;\n}\n\nexport interface Statement {\n  bind(...values: unknown[]): Statement;\n  all<T = Record<string, unknown>>(): Promise<{ results: T[] }>;\n  first<T = Record<string, unknown>>(): Promise<T | null>;\n  run(): Promise<{ meta: { changes: number; last_row_id: number } }>;\n}\n\nconst statement = (db: Database, query: string, params: Param[]) => db.prepare(query).bind(...params);\n\n/** Every row. */\nexport async function all<T = Record<string, unknown>>(db: Database, query: string, ...params: Param[]): Promise<T[]> {\n  return (await statement(db, query, params).all<T>()).results;\n}\n\n/** The first row, or null. */\nexport function first<T = Record<string, unknown>>(db: Database, query: string, ...params: Param[]): Promise<T | null> {\n  return statement(db, query, params).first<T>();\n}\n\n/** INSERT, UPDATE, DELETE: how many rows changed and the last inserted id. */\nexport async function run(db: Database, query: string, ...params: Param[]): Promise<{ changes: number; lastRowId: number }> {\n  const { meta } = await statement(db, query, params).run();\n  return { changes: meta.changes, lastRowId: meta.last_row_id };\n}\n\n/** Several statements in one transaction: all of them apply, or none. */\nexport async function batch(db: Database, statements: [query: string, ...params: Param[]][]): Promise<void> {\n  await db.batch(statements.map(([query, ...params]) => statement(db, query, params)));\n}\n', "lib/files.ts": '/**\n * env.FILES: this app\'s file storage (Cloudflare R2). Uploads and generated files; each one is public at\n * /files/<key> on the app\'s own address (the /files/* route calls serveFile). Don\'t keep files in the database.\n *\n *   const { key, url } = await upload(env.FILES, req.body, { contentType: "image/png" });   // url: /files/u/\u2026\n *   return serveFile(env.FILES, req);                                                        // GET /files/*\n *\n * Files are public to anyone with the URL: keep private documents behind your own route that checks who asks.\n * `npx ambasada files put|list|delete|url` manages them from the terminal.\n */\n\n/** What this file needs from an R2 binding (env.FILES satisfies it). */\nexport interface Bucket {\n  put(key: string, value: ReadableStream | ArrayBuffer | ArrayBufferView | string | Blob | null, options?: { httpMetadata?: { contentType?: string } }): Promise<unknown>;\n  get(key: string, options?: { onlyIf?: Headers; range?: Headers }): Promise<StoredFile | null>;\n  delete(key: string): Promise<void>;\n}\n\nexport interface StoredFile {\n  httpEtag: string;\n  size: number;\n  httpMetadata?: { contentType?: string };\n  range?: { offset?: number; length?: number; suffix?: number };\n  body?: ReadableStream;\n}\n\nexport const FILES_PATH = "/files/";\n\n/** Stores `body` under a new random key (in `folder`) \u2192 `{ key, url }`, url relative to the app (/files/<key>). */\nexport async function upload(bucket: Bucket, body: ReadableStream | ArrayBuffer | ArrayBufferView | string | Blob | null, options: { contentType?: string; folder?: string } = {}): Promise<{ key: string; url: string }> {\n  const key = `${options.folder ?? "u"}/${crypto.randomUUID()}`;\n  await bucket.put(key, body, { httpMetadata: { contentType: options.contentType ?? "application/octet-stream" } });\n  return { key, url: fileUrl(key) };\n}\n\nexport const fileUrl = (key: string) => `${FILES_PATH}${key.split("/").map(encodeURIComponent).join("/")}`;\n\n/** GET/HEAD /files/<key>: the file with its type, an ETag (304 when unchanged), byte ranges, and a cache header. */\nexport async function serveFile(bucket: Bucket, req: Request): Promise<Response> {\n  if (req.method !== "GET" && req.method !== "HEAD") return new Response(null, { status: 405, headers: { allow: "GET, HEAD" } });\n  const path = new URL(req.url).pathname;\n  const key = decodeURIComponent(path.slice(path.indexOf(FILES_PATH) + FILES_PATH.length));\n  if (!key) return new Response("Not found", { status: 404 });\n  const file = await bucket.get(key, { onlyIf: req.headers, range: req.headers });\n  if (!file) return new Response("Not found", { status: 404 });\n  const headers = new Headers({ etag: file.httpEtag, "cache-control": "public, max-age=3600", "accept-ranges": "bytes" });\n  if (file.httpMetadata?.contentType) headers.set("content-type", file.httpMetadata.contentType);\n  if (!file.body) return new Response(null, { status: 304, headers }); // If-None-Match matched: nothing changed\n  const r = file.range;\n  if (r && req.headers.has("range")) {\n    const offset = r.suffix !== undefined ? file.size - r.suffix : (r.offset ?? 0);\n    const length = r.suffix ?? r.length ?? file.size - offset;\n    headers.set("content-range", `bytes ${offset}-${offset + length - 1}/${file.size}`);\n    headers.set("content-length", String(length));\n    return new Response(req.method === "HEAD" ? null : file.body, { status: 206, headers });\n  }\n  headers.set("content-length", String(file.size));\n  return new Response(req.method === "HEAD" ? null : file.body, { headers });\n}\n', "lib/kv.ts": '/**\n * env.KV: this app\'s key-value store (Cloudflare KV). Fast reads everywhere, writes visible within about a\n * minute, at most one write per second per key. Good for sessions, caches and feature flags; not for counters\n * or anything two people change at once (use env.DB, or a Durable Object for live state).\n *\n *   await putJson(env.KV, `session:${id}`, { user }, { ttl: 60 * 60 * 24 });\n *   const session = await getJson<{ user: string }>(env.KV, `session:${id}`);\n *   const page = await cached(env.KV, "home:stats", 60, () => computeStats());\n */\n\n/** What this file needs from a KV binding (env.KV satisfies it). */\nexport interface KeyValue {\n  get(key: string, type: "text"): Promise<string | null>;\n  put(key: string, value: string, options?: { expirationTtl?: number }): Promise<void>;\n  delete(key: string): Promise<void>;\n}\n\n/** The value saved under `key`, parsed; null when there is none (or it expired). */\nexport async function getJson<T>(kv: KeyValue, key: string): Promise<T | null> {\n  const text = await kv.get(key, "text");\n  return text === null ? null : (JSON.parse(text) as T);\n}\n\n/** Saves `value` as JSON. `ttl`: seconds until it disappears (at least 60). */\nexport function putJson(kv: KeyValue, key: string, value: unknown, options: { ttl?: number } = {}): Promise<void> {\n  return kv.put(key, JSON.stringify(value), options.ttl ? { expirationTtl: Math.max(60, options.ttl) } : undefined);\n}\n\nexport function remove(kv: KeyValue, key: string): Promise<void> {\n  return kv.delete(key);\n}\n\n/** `load()`\'s result, kept for `ttl` seconds: a cache in front of something slow. */\nexport async function cached<T>(kv: KeyValue, key: string, ttl: number, load: () => Promise<T>): Promise<T> {\n  const hit = await getJson<T>(kv, key);\n  if (hit !== null) return hit;\n  const value = await load();\n  await putJson(kv, key, value, { ttl });\n  return value;\n}\n', "lib/notifications.ts": '// Who turned notifications on, and how to reach them (docs/MINI-APPS.md \xA77). The hub sends a token per person\n// to the webhook route (api/ambasada-webhook.ts; app/api/ambasada/webhook/route.ts in Next); it lives in your\n// ambasada.store under the person\'s Ambasada user id.\nimport type { Ambasada, AppNotifyInput } from "@ambasada/sdk";\n\nconst key = (user: string) => `ambasada/notifications/${user}`;\n\nexport const saveToken = (app: Ambasada, user: string, token: string) => app.store.set(key(user), { token, enabled_at: new Date().toISOString() });\nexport const forgetToken = (app: Ambasada, user: string) => app.store.delete(key(user));\n\n/**\n * A push to one person (their Ambasada user id, e.g. `(await app.auth.user(req)).id`), if they turned\n * notifications on. False when they haven\'t, or the hub said the token is gone (then it is forgotten).\n *   await notifyUser(app, user.id, { notification_id: `order-${id}`, title: "Your translation is ready", body: "\u2026", url: `/orders/${id}` });\n */\nexport async function notifyUser(app: Ambasada, user: string, notification: Omit<AppNotifyInput, "tokens" | "users">): Promise<boolean> {\n  const saved = await app.store.get<{ token: string }>(key(user));\n  if (!saved) return false;\n  const result = await app.apps.notify({ ...notification, tokens: [saved.token] });\n  if (result.invalid.includes(saved.token)) await forgetToken(app, user);\n  return result.sent.includes(saved.token);\n}\n', "package.json": '{\n  "name": "@ambasada/template-worker",\n  "version": "0.1.0",\n  "private": true,\n  "description": "An Ambasada app: one bare Cloudflare Worker, web/ + api/*.ts fetch handlers.",\n  "type": "module",\n  "engines": {\n    "node": ">=22"\n  },\n  "scripts": {\n    "dev": "ambasada dev",\n    "preview": "wrangler dev --port 3000",\n    "typecheck": "tsc -p .",\n    "ambasada": "ambasada"\n  },\n  "dependencies": {\n    "@ambasada/sdk": "workspace:*"\n  },\n  "devDependencies": {\n    "@ambasada/cli": "workspace:*",\n    "@cloudflare/workers-types": "^5.20261102.1",\n    "typescript": "~5.9.3",\n    "wrangler": "^4.156.1"\n  }\n}\n', "src/realtime/room.ts": '/**\n * A live room (Durable Object `Room`, bound as env.ROOMS): everyone connected to the same room id shares it.\n *\n *   GET /api/rooms/<id>/ws  (WebSocket)  \u2192 env.ROOMS.getByName(id).fetch(req)\n *   client \u2192 { "text": "hi" }            server \u2192 { type: "history", messages } on join,\n *                                                 { type: "message", message } to everyone,\n *                                                 { type: "presence", online } when people come and go\n *\n * WebSocket hibernation: the object sleeps between messages and the connections stay open, so an idle room\n * costs nothing. Its own SQLite (`ctx.storage.sql`) keeps the last 50 messages, replayed to whoever joins.\n * The same shape fits presence, live counters, a game table, a queue or a rate limit: one object per thing.\n */\nimport { DurableObject } from "cloudflare:workers";\n\nconst KEEP = 50;\n\nexport type RoomMessage = { id: number; name: string; text: string; at: number };\nexport type RoomEvent = { type: "history"; messages: RoomMessage[] } | { type: "message"; message: RoomMessage } | { type: "presence"; online: number };\n\nexport class Room extends DurableObject<unknown> {\n  constructor(ctx: DurableObjectState, env: unknown) {\n    super(ctx, env);\n    ctx.storage.sql.exec("CREATE TABLE IF NOT EXISTS messages (id INTEGER PRIMARY KEY AUTOINCREMENT, name TEXT NOT NULL, text TEXT NOT NULL, at INTEGER NOT NULL)");\n  }\n\n  async fetch(req: Request): Promise<Response> {\n    if (req.headers.get("upgrade") !== "websocket") return Response.json({ online: this.ctx.getWebSockets().length, messages: this.history() });\n    // Who is talking: the client says. Behind Sign in with Ambasada, pass the signed-in name from your route instead.\n    const name = (new URL(req.url).searchParams.get("name") ?? "").trim().slice(0, 40) || "guest";\n    const { 0: client, 1: server } = new WebSocketPair();\n    this.ctx.acceptWebSocket(server);\n    server.serializeAttachment({ name });\n    server.send(JSON.stringify({ type: "history", messages: this.history() } satisfies RoomEvent));\n    this.broadcast({ type: "presence", online: this.ctx.getWebSockets().length });\n    return new Response(null, { status: 101, webSocket: client });\n  }\n\n  async webSocketMessage(ws: WebSocket, data: string | ArrayBuffer): Promise<void> {\n    let text = "";\n    try {\n      text = String((JSON.parse(typeof data === "string" ? data : new TextDecoder().decode(data)) as { text?: unknown }).text ?? "").trim().slice(0, 2000);\n    } catch {\n      return;\n    }\n    if (!text) return;\n    const { name } = ws.deserializeAttachment() as { name: string };\n    const at = Date.now();\n    const { id } = this.ctx.storage.sql.exec<{ id: number }>("INSERT INTO messages (name, text, at) VALUES (?, ?, ?) RETURNING id", name, text, at).one();\n    this.ctx.storage.sql.exec("DELETE FROM messages WHERE id <= ?", id - KEEP);\n    this.broadcast({ type: "message", message: { id, name, text, at } });\n  }\n\n  async webSocketClose(ws: WebSocket, code: number, reason: string): Promise<void> {\n    try {\n      ws.close(code, reason);\n    } catch {\n      // already closed\n    }\n    this.broadcast({ type: "presence", online: this.ctx.getWebSockets().filter((s) => s !== ws).length });\n  }\n\n  private history(): RoomMessage[] {\n    return this.ctx.storage.sql.exec<RoomMessage>("SELECT id, name, text, at FROM messages ORDER BY id").toArray();\n  }\n\n  private broadcast(event: RoomEvent): void {\n    const text = JSON.stringify(event);\n    for (const ws of this.ctx.getWebSockets()) {\n      try {\n        ws.send(text);\n      } catch {\n        // a closing socket: webSocketClose cleans up\n      }\n    }\n  }\n}\n', "src/worker.ts": '/**\n * The app: one Cloudflare Worker (`wrangler dev`, or `ambasada dev` with the mock API).\n *\n *   /api/<name>  \u2192 api/<name>.ts (fetch handlers; add yours to API below)\n *   /api/auth/*  \u2192 api/auth.ts: Sign in with Ambasada (login, callback, logout, me, shell)\n *   /api/ambasada/webhook \u2192 api/ambasada-webhook.ts: the Ambasada app\'s events (notifications on/off, ping)\n *   /api/notes, /api/files \u2192 api/notes.ts (env.DB + env.KV), api/files.ts (uploads to env.FILES)\n *   /api/rooms/<id>/ws \u2192 the live room <id> (src/realtime/room.ts, a Durable Object); demo at /room\n *   /files/*     \u2192 files from env.FILES (lib/files.ts)\n *   /            \u2192 web/index.html with who is signed in filled in\n *   the rest     \u2192 static files from web/ (wrangler.jsonc \u2192 assets)\n */\nimport appWebhook from "../api/ambasada-webhook.ts";\nimport auth from "../api/auth.ts";\nimport files from "../api/files.ts";\nimport notes from "../api/notes.ts";\nimport { ambasada, type Env } from "../lib/ambasada.ts";\nimport { FILES_PATH, serveFile } from "../lib/files.ts";\n\nexport { Room } from "./realtime/room.ts";\n\ntype Handler = (req: Request, env: Env) => Promise<Response>;\nconst API: Record<string, Handler> = { files, notes };\n\n/** The landing page, with the header\'s "Sign in with Ambasada" button or, once signed in, the person\'s name and avatar. */\nasync function landing(req: Request, env: Env): Promise<Response> {\n  const { auth } = ambasada(env);\n  const user = await auth.user(req);\n  return new HTMLRewriter()\n    .on("[data-auth-signin]", { element: (el) => void ((user || !auth.configured) && el.remove()) })\n    .on("[data-auth-user]", { element: (el) => void (user ? el.removeAttribute("hidden") : el.remove()) })\n    .on("[data-auth-avatar]", { element: (el) => void (user?.avatar_url ? el.setAttribute("src", user.avatar_url) : el.remove()) })\n    .on("[data-auth-name]", { element: (el) => void el.setInnerContent(user?.name ?? "Signed in") })\n    .transform(await env.ASSETS.fetch(req));\n}\n\nexport default {\n  async fetch(req, env) {\n    const { pathname } = new URL(req.url);\n    try {\n      if (pathname === "/health") return Response.json({ ok: true });\n      if (pathname.startsWith("/api/auth/")) return await auth(req, env);\n      if (pathname === "/api/ambasada/webhook") return await appWebhook(req, env);\n      const room = /^\\/api\\/rooms\\/([^/]+)\\/ws$/.exec(pathname);\n      if (room) return await env.ROOMS.getByName(decodeURIComponent(room[1]!)).fetch(req);\n      if (pathname.startsWith(FILES_PATH)) return await serveFile(env.FILES, req);\n      const api = /^\\/api\\/([^/]+)\\/?$/.exec(pathname);\n      if (api) {\n        const handler = API[api[1]!];\n        return handler ? await handler(req, env) : Response.json({ error: { code: "NOT_FOUND", message: "no such route" } }, { status: 404 });\n      }\n      if (pathname === "/") return await landing(req, env);\n      return env.ASSETS.fetch(req);\n    } catch (error) {\n      console.error(error);\n      return Response.json({ error: { code: "INTERNAL", message: "internal error" } }, { status: 500 });\n    }\n  },\n} satisfies ExportedHandler<Env>;\n', "tsconfig.json": '{\n  "compilerOptions": {\n    "target": "ES2022",\n    "module": "ESNext",\n    "moduleResolution": "Bundler",\n    "lib": ["ES2022"],\n    "types": ["@cloudflare/workers-types"],\n    "strict": true,\n    "noEmit": true,\n    "skipLibCheck": true,\n    "isolatedModules": true,\n    "verbatimModuleSyntax": true,\n    "allowImportingTsExtensions": true\n  },\n  "include": ["ambasada.config.ts", "src", "api", "lib"]\n}\n', "web/index.html": `<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <title>My App</title>
+    <!-- The Ambasada look (@ambasada/ui: tokens, fonts, ui-card / ui-button / \u2026), then this product's own styles. -->
+    <link rel="stylesheet" href="https://unpkg.com/@ambasada/ui@0.8/dist/ambasada-ui.css" />
+    <link rel="stylesheet" href="/style.css" />
+  </head>
+  <body>
+    <!-- Sign in with Ambasada: src/worker.ts keeps the button, or shows who is signed in (api/auth.ts). -->
+    <header class="topbar">
+      <a class="brand" href="/">My App</a>
+      <a class="ui-button secondary signin" href="/api/auth/login" data-auth-signin>Sign in with Ambasada</a>
+      <span class="account" data-auth-user hidden><img data-auth-avatar alt="" /><span data-auth-name></span><a href="/api/auth/logout">Sign out</a></span>
+    </header>
+    <main class="page">
+      <p class="ui-label eyebrow">Ambasada app</p>
+      <h1>My App</h1>
+      <p class="lead">Notes in a database, a live room, and Sign in with Ambasada. Change anything.</p>
+
+      <!-- api/notes.ts: rows in env.DB (db/migrations/0001_init.sql), the list cached in env.KV. -->
+      <form class="ui-card" id="notes">
+        <div class="row">
+          <input name="text" maxlength="500" required placeholder="A note" aria-label="A note" />
+          <button type="submit" class="ui-button">Add</button>
+        </div>
+        <ul id="list"></ul>
+      </form>
+      <p><a href="/room">Open the live room</a> in two tabs and type.</p>
+    </main>
+    <script>
+      const form = document.getElementById("notes");
+      const list = document.getElementById("list");
+      const load = async () => {
+        const { notes } = await fetch("/api/notes").then((r) => r.json());
+        list.replaceChildren(...notes.map((n) => Object.assign(document.createElement("li"), { textContent: n.text })));
+      };
+      form.addEventListener("submit", async (e) => {
+        e.preventDefault();
+        await fetch("/api/notes", { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify({ text: form.text.value }) });
+        form.reset();
+        await load();
+      });
+      load();
+    </script>
+  </body>
+</html>
+`, "web/privacy.html": `<!doctype html>
 <!-- /privacy: the manifest's privacy_url. Apps that ask for scopes (identity, notifications) need one to be Listed
      (docs/MINI-APPS.md \xA72). Say plainly what you keep; edit it when that changes. -->
 <html lang="en">
@@ -217,7 +267,7 @@ a { color: var(--color-accent-text); }
     <meta charset="utf-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1" />
     <title>Privacy \xB7 My App</title>
-    <link rel="stylesheet" href="https://unpkg.com/@ambasada/ui@0.5/dist/ambasada-ui.css" />
+    <link rel="stylesheet" href="https://unpkg.com/@ambasada/ui@0.8/dist/ambasada-ui.css" />
   </head>
   <body>
     <main class="ui-page">
@@ -232,7 +282,7 @@ a { color: var(--color-accent-text); }
     </main>
   </body>
 </html>
-`, "web/room.html": '<!doctype html>\n<html lang="en">\n  <head>\n    <meta charset="utf-8" />\n    <meta name="viewport" content="width=device-width, initial-scale=1" />\n    <title>Live room</title>\n    <link rel="stylesheet" href="https://unpkg.com/@ambasada/ui@0.5/dist/ambasada-ui.css" />\n    <link rel="stylesheet" href="/style.css" />\n  </head>\n  <body>\n    <!-- A live room (src/realtime/room.ts): open this page in two tabs and type. ?room=<id> picks the room. -->\n    <main class="page">\n      <h1>Live room</h1>\n      <p class="ui-label" id="status">connecting\u2026</p>\n      <ul id="messages"></ul>\n      <form id="send"><input name="text" autocomplete="off" placeholder="Say something" /> <button class="ui-button">Send</button></form>\n      <p><a href="/">\u2190 back</a></p>\n    </main>\n    <script>\n      const room = new URLSearchParams(location.search).get("room") || "lobby";\n      const list = document.getElementById("messages");\n      const status = document.getElementById("status");\n      const show = (m) => list.insertAdjacentHTML("beforeend", "<li></li>") || (list.lastElementChild.textContent = `${m.name}: ${m.text}`);\n      let ws;\n      function connect() {\n        ws = new WebSocket(`${location.protocol === "https:" ? "wss" : "ws"}://${location.host}/api/rooms/${encodeURIComponent(room)}/ws?name=guest`);\n        ws.onmessage = (e) => {\n          const event = JSON.parse(e.data);\n          if (event.type === "history") (list.textContent = "", event.messages.forEach(show));\n          else if (event.type === "message") show(event.message);\n          else status.textContent = `${event.online} online`;\n        };\n        ws.onclose = () => ((status.textContent = "reconnecting\u2026"), setTimeout(connect, 2000));\n      }\n      connect();\n      document.getElementById("send").onsubmit = (e) => {\n        e.preventDefault();\n        if (ws.readyState === WebSocket.OPEN && e.target.text.value.trim()) ws.send(JSON.stringify({ text: e.target.text.value }));\n        e.target.text.value = "";\n      };\n    </script>\n  </body>\n</html>\n', "web/style.css": `/*
+`, "web/room.html": '<!doctype html>\n<html lang="en">\n  <head>\n    <meta charset="utf-8" />\n    <meta name="viewport" content="width=device-width, initial-scale=1" />\n    <title>Live room</title>\n    <link rel="stylesheet" href="https://unpkg.com/@ambasada/ui@0.8/dist/ambasada-ui.css" />\n    <link rel="stylesheet" href="/style.css" />\n  </head>\n  <body>\n    <!-- A live room (src/realtime/room.ts): open this page in two tabs and type. ?room=<id> picks the room. -->\n    <main class="page">\n      <h1>Live room</h1>\n      <p class="ui-label" id="status">connecting\u2026</p>\n      <ul id="messages"></ul>\n      <form id="send"><input name="text" autocomplete="off" placeholder="Say something" /> <button class="ui-button">Send</button></form>\n      <p><a href="/">\u2190 back</a></p>\n    </main>\n    <script>\n      const room = new URLSearchParams(location.search).get("room") || "lobby";\n      const list = document.getElementById("messages");\n      const status = document.getElementById("status");\n      const show = (m) => list.insertAdjacentHTML("beforeend", "<li></li>") || (list.lastElementChild.textContent = `${m.name}: ${m.text}`);\n      let ws;\n      function connect() {\n        ws = new WebSocket(`${location.protocol === "https:" ? "wss" : "ws"}://${location.host}/api/rooms/${encodeURIComponent(room)}/ws?name=guest`);\n        ws.onmessage = (e) => {\n          const event = JSON.parse(e.data);\n          if (event.type === "history") (list.textContent = "", event.messages.forEach(show));\n          else if (event.type === "message") show(event.message);\n          else status.textContent = `${event.online} online`;\n        };\n        ws.onclose = () => ((status.textContent = "reconnecting\u2026"), setTimeout(connect, 2000));\n      }\n      connect();\n      document.getElementById("send").onsubmit = (e) => {\n        e.preventDefault();\n        if (ws.readyState === WebSocket.OPEN && e.target.text.value.trim()) ws.send(JSON.stringify({ text: e.target.text.value }));\n        e.target.text.value = "";\n      };\n    </script>\n  </body>\n</html>\n', "web/style.css": `/*
  * This product's own styles, on top of @ambasada/ui: the Ambasada tokens (var(--color-\u2026), var(--space-\u2026))
  * and components (ui-card, ui-button, ui-label, \u2026), loaded first by app/layout.tsx (next), src/main.tsx (spa)
  * or a <link> in web/index.html (worker). Use the tokens rather than raw values. The same file in all three.
@@ -272,11 +322,11 @@ a { color: var(--color-accent-text); }
 .account img { width: 28px; height: 28px; border-radius: 50%; object-fit: cover; background: var(--color-line); }
 .account a { font-weight: var(--weight-regular); font-size: var(--text-sm); color: var(--color-ink-2); }
 [hidden] { display: none !important; }
-`, "wrangler.jsonc": '{\n  "$schema": "node_modules/wrangler/config-schema.json",\n  // One Worker: src/worker.ts answers /, /api/*, /files/*, /thanks and /health; web/ is served as static assets.\n  "name": "my-app",\n  "main": "src/worker.ts",\n  "compatibility_date": "2026-09-01",\n  "compatibility_flags": ["nodejs_compat"],\n  "assets": {\n    "directory": "./web",\n    "binding": "ASSETS",\n    "run_worker_first": ["/", "/api/*", "/files/*", "/thanks", "/health"]\n  },\n  // Storage and realtime: env.DB (SQLite), env.KV, env.FILES and the live rooms (src/realtime/room.ts).\n  // No ids: wrangler keeps local copies in .wrangler/state; `ambasada deploy` attaches the app\'s real ones.\n  "d1_databases": [{ "binding": "DB", "database_name": "my-app", "migrations_dir": "db/migrations", "migrations_table": "_ambasada_migrations" }],\n  "kv_namespaces": [{ "binding": "KV" }],\n  "r2_buckets": [{ "binding": "FILES", "bucket_name": "my-app" }],\n  "durable_objects": { "bindings": [{ "name": "ROOMS", "class_name": "Room" }] },\n  // Every Durable Object class needs a migration; add new ones at the end, never edit or remove an applied tag.\n  "migrations": [{ "tag": "v1", "new_sqlite_classes": ["Room"] }],\n  "observability": { "enabled": true }\n}\n' } };
+`, "wrangler.jsonc": '{\n  "$schema": "node_modules/wrangler/config-schema.json",\n  // One Worker: src/worker.ts answers /, /api/*, /files/*, /thanks and /health; web/ is served as static assets.\n  "name": "my-app",\n  "main": "src/worker.ts",\n  "compatibility_date": "2026-09-01",\n  "compatibility_flags": ["nodejs_compat"],\n  "assets": {\n    "directory": "./web",\n    "binding": "ASSETS",\n    "run_worker_first": ["/", "/api/*", "/files/*", "/thanks", "/health"]\n  },\n  // Storage and realtime: env.DB (SQLite), env.KV, env.FILES and the live rooms (src/realtime/room.ts).\n  // No ids: wrangler keeps local copies in .wrangler/state; `ambasada deploy` attaches the app\'s real ones.\n  "d1_databases": [{ "binding": "DB", "database_name": "my-app", "migrations_dir": "db/migrations", "migrations_table": "_ambasada_migrations" }],\n  "kv_namespaces": [{ "binding": "KV" }],\n  "r2_buckets": [{ "binding": "FILES", "bucket_name": "my-app" }],\n  "durable_objects": { "bindings": [{ "name": "ROOMS", "class_name": "Room" }] },\n  // Every Durable Object class needs a migration; add new ones at the end, never edit or remove an applied tag.\n  "migrations": [{ "tag": "v1", "new_sqlite_classes": ["Room"] }],\n  "observability": { "enabled": true }\n}\n' }, miniapp: { "README.md": '# The mini-app pieces\n\nWhat `ambasada miniapp enable` and `ambasada init --miniapp` add to an app made from templates/{next,spa,worker}\n(docs/MINI-APPS.md \xA715, decision 15.6). Not a template on its own: packages/cli/src/miniapp.ts writes these files.\n\n- `__ENTRY__` is `miniapp.entry` ("/app"), `__ENTRY_DIR__` the same without the leading slash ("app"), `__ROOT__`\n  the way back from the file to the app\'s root ("../..").\n- Entry `/`: only the glue (`in-app.tsx`, `shell.ts`, `in-app.js`), hooked into the root (app/layout.tsx,\n  src/main.tsx, web/index.html). Any other entry: the in-app layout and page under that path too.\n- `icon.png`: the 1024\xD71024 placeholder the manifest points at.\n', "icon.png": "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", "next/in-app.tsx": '"use client";\n\nimport { auth, mockEnv, ready } from "@ambasada/miniapp";\nimport { useRouter } from "next/navigation";\nimport { useEffect } from "react";\n\n/**\n * Inside the Ambasada app: drops the splash (`ready()`), then signs in without a consent screen\n * (docs/MINI-APPS.md \xA75): `auth.signIn()` gets a shell token and POSTs it to /api/auth/shell, which sets the same\n * session as "Sign in with Ambasada". On the web: a no-op. Under `ambasada dev`, `?ambasada_shell=mock` pretends to\n * be inside the app (the mock signs the token).\n */\nexport function InApp() {\n  const router = useRouter();\n  useEffect(() => {\n    void (async () => {\n      const me = (await fetch("/api/auth/me")\n        .then((r) => r.json())\n        .catch(() => null)) as { user?: unknown; dev_issuer?: string } | null;\n      if (me?.dev_issuer && (new URLSearchParams(location.search).get("ambasada_shell") === "mock" || sessionStorage.getItem("ambasada_shell") === "mock")) {\n        sessionStorage.setItem("ambasada_shell", "mock");\n        mockEnv({ issuer: me.dev_issuer });\n      }\n      ready();\n      if (!me?.user && (await auth.signIn().catch(() => null))) router.refresh();\n    })();\n  }, [router]);\n  return null;\n}\n', "next/layout.tsx": 'import { Page } from "@ambasada/ui/react";\nimport type { ReactNode } from "react";\nimport { InApp } from "./in-app.tsx";\n\n/**\n * The mini app: what the Ambasada app opens (`miniapp.entry` in ambasada.config.ts). Outside the (site) group, so\n * no site header: the Ambasada app draws its own bar, and `Page` (ui-page) keeps clear of it and the safe areas.\n */\nexport default function InAppLayout({ children }: { children: ReactNode }) {\n  return (\n    <Page>\n      {children}\n      <InApp />\n    </Page>\n  );\n}\n', "next/page.tsx": 'import { Card } from "@ambasada/ui/react";\nimport { currentUser } from "__ROOT__/lib/ambasada.ts";\n\n// Who is signed in comes from the request: render per request, not at build time.\nexport const dynamic = "force-dynamic";\n\n/** The mini app\'s first screen. Build the in-app experience under this folder; the site stays as it is. */\nexport default async function InAppHome() {\n  const user = await currentUser();\n  return (\n    <>\n      <p className="ui-label">My App</p>\n      <h1>{user ? `Hello, ${user.name ?? "you"}` : "Hello"}</h1>\n      <Card title="In the Ambasada app">\n        <p>\n          This is <code>__ENTRY__</code>, the page the Ambasada app opens. Edit <code>app/__ENTRY_DIR__/page.tsx</code>.\n        </p>\n      </Card>\n    </>\n  );\n}\n', "spa/InApp.tsx": 'import { Card, Page } from "@ambasada/ui/react";\nimport { useEffect, useState } from "react";\nimport { startInApp } from "./shell.ts";\n\n/** Where the mini app lives (`miniapp.entry` in ambasada.config.ts): src/main.tsx renders InApp there. */\nexport const IN_APP = "__ENTRY__";\nexport const isInApp = (path: string) => path === IN_APP || path.startsWith(`${IN_APP}/`);\n\ntype Me = { user: { name: string | null } | null };\n\n/**\n * The mini app: what the Ambasada app opens. No site header: the Ambasada app draws its own bar, and `Page`\n * (ui-page) keeps clear of it and the safe areas. Build the in-app experience here; the site stays as it is.\n */\nexport function InApp() {\n  const [me, setMe] = useState<Me | null>(null);\n  useEffect(() => {\n    const load = () =>\n      fetch("/api/auth/me")\n        .then((res) => (res.ok ? (res.json() as Promise<Me>) : null))\n        .then(setMe)\n        .catch(() => setMe(null));\n    void load();\n    void startInApp(() => void load());\n  }, []);\n  return (\n    <Page>\n      <p className="ui-label">My App</p>\n      <h1>{me?.user ? `Hello, ${me.user.name ?? "you"}` : "Hello"}</h1>\n      <Card title="In the Ambasada app">\n        <p>\n          This is <code>{IN_APP}</code>, the page the Ambasada app opens. Edit <code>src/in-app/InApp.tsx</code>.\n        </p>\n      </Card>\n    </Page>\n  );\n}\n', "spa/shell.ts": 'import { auth, mockEnv, ready } from "@ambasada/miniapp";\n\n/**\n * Inside the Ambasada app: drops the splash (`ready()`), then signs in without a consent screen\n * (docs/MINI-APPS.md \xA75): `auth.signIn()` gets a shell token and POSTs it to /api/auth/shell, which sets the same\n * session as "Sign in with Ambasada"; `onSignedIn` runs after that. On the web: a no-op. Under `ambasada dev`,\n * `?ambasada_shell=mock` pretends to be inside the app (the mock signs the token).\n */\nexport async function startInApp(onSignedIn: () => void): Promise<void> {\n  const me = (await fetch("/api/auth/me")\n    .then((r) => (r.ok ? r.json() : null))\n    .catch(() => null)) as { user?: unknown; dev_issuer?: string } | null;\n  if (me?.dev_issuer && (new URLSearchParams(location.search).get("ambasada_shell") === "mock" || sessionStorage.getItem("ambasada_shell") === "mock")) {\n    sessionStorage.setItem("ambasada_shell", "mock");\n    mockEnv({ issuer: me.dev_issuer });\n  }\n  ready();\n  if (!me?.user && (await auth.signIn().catch(() => null))) onSignedIn();\n}\n', "worker/in-app.js": '// Inside the Ambasada app (the mini app, `miniapp.entry` in ambasada.config.ts): drop the splash, then sign in without\n// a consent screen (docs/MINI-APPS.md \xA75): a shell token, POSTed to /api/auth/shell, gives the same session as\n// "Sign in with Ambasada". Needs https://hub.ambasada.id/miniapp.js before it; on the web it does nothing.\n// Under `ambasada dev`, ?ambasada_shell=mock pretends to be inside the app (the mock signs the token).\naddEventListener("DOMContentLoaded", async () => {\n  const a = window.ambasada;\n  const me = await fetch("/api/auth/me").then((r) => r.json()).catch(() => ({}));\n  for (const el of document.querySelectorAll("[data-in-app-name]")) if (me.user) el.textContent = `, ${me.user.name ?? "you"}`;\n  if (!a) return;\n  const mock = new URLSearchParams(location.search).get("ambasada_shell") === "mock";\n  if (mock && me.dev_issuer) {\n    const token = await fetch(`${me.dev_issuer}/dev/shell-token?aud=${encodeURIComponent(location.origin)}`).then((r) => r.json());\n    a.mockEnv({ answers: { "auth.getToken": token } });\n  }\n  a.ready();\n  if (me.user || !a.capabilities().includes("auth.getToken")) return;\n  const shell = await a.auth.getToken().catch(() => null);\n  if (!shell) return;\n  const res = await fetch("/api/auth/shell", { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify({ token: shell.token }) });\n  if (res.ok) location.replace(location.pathname);\n});\n', "worker/page.html": '<!doctype html>\n<html lang="en">\n  <head>\n    <meta charset="utf-8" />\n    <meta name="viewport" content="width=device-width, initial-scale=1" />\n    <title>My App</title>\n    <!-- The mini app: what the Ambasada app opens (`miniapp.entry` in ambasada.config.ts). No site header: the\n         Ambasada app draws its own bar, and ui-page keeps clear of it and the safe areas. -->\n    <link rel="stylesheet" href="https://unpkg.com/@ambasada/ui@0.8/dist/ambasada-ui.css" />\n    <link rel="stylesheet" href="/style.css" />\n    <script src="https://hub.ambasada.id/miniapp.js" defer></script>\n    <script src="/in-app.js" defer></script>\n  </head>\n  <body>\n    <main class="ui-page">\n      <p class="ui-label">My App</p>\n      <h1>Hello<span data-in-app-name></span></h1>\n      <section class="ui-card">\n        <h2 class="ui-card-title">In the Ambasada app</h2>\n        <p>This is <code>__ENTRY__</code>, the page the Ambasada app opens. Edit <code>web/__ENTRY_DIR__.html</code>.</p>\n      </section>\n    </main>\n  </body>\n</html>\n' } };
 
 // src/main.ts
-import { existsSync as existsSync11 } from "node:fs";
-import { join as join12 } from "node:path";
+import { existsSync as existsSync13 } from "node:fs";
+import { join as join14 } from "node:path";
 
 // ../protocol/src/money.ts
 var NANO_PER_TON = 1e9;
@@ -345,10 +395,10 @@ function aexists(instance, checkFinished = true) {
   if (checkFinished && instance.finished)
     throw new Error("digest() was already called");
 }
-function aoutput(out6, instance) {
-  abytes(out6, void 0, "output");
+function aoutput(out7, instance) {
+  abytes(out7, void 0, "output");
   const min = instance.outputLen;
-  if (!(out6.length >= min)) {
+  if (!(out7.length >= min)) {
     throw new RangeError('"output" expected length >= ' + min);
   }
 }
@@ -446,9 +496,9 @@ var HashMD = class {
       this.roundClean();
     return this;
   }
-  digestInto(out6) {
+  digestInto(out7) {
     aexists(this);
-    aoutput(out6, this);
+    aoutput(out7, this);
     this.finished = true;
     const { buffer, view, blockLen, isLE } = this;
     let { pos } = this;
@@ -461,7 +511,7 @@ var HashMD = class {
     setU64FromNum(view, blockLen - 8, this.length * 8, isLE);
     this.process(view, 0);
     this.roundClean();
-    const oview = out6 === buffer ? view : createView(out6);
+    const oview = out7 === buffer ? view : createView(out7);
     const len = this.outputLen;
     const outLen = len / 4;
     const state = this.get();
@@ -915,9 +965,9 @@ function checkIcon(bytes) {
 function metaTags(html) {
   const tags = [];
   for (const [, attrs] of html.matchAll(/<meta\b([^>]*)>/gi)) {
-    const out6 = {};
-    for (const [, key, dq, sq, bare] of attrs.matchAll(/([a-zA-Z-]+)\s*=\s*(?:"([^"]*)"|'([^']*)'|([^\s"'>]+))/g)) out6[key.toLowerCase()] = (dq ?? sq ?? bare ?? "").trim();
-    tags.push(out6);
+    const out7 = {};
+    for (const [, key, dq, sq, bare] of attrs.matchAll(/([a-zA-Z-]+)\s*=\s*(?:"([^"]*)"|'([^']*)'|([^\s"'>]+))/g)) out7[key.toLowerCase()] = (dq ?? sq ?? bare ?? "").trim();
+    tags.push(out7);
   }
   return tags;
 }
@@ -941,6 +991,20 @@ var USER_AGENT = "ambasada-check/1 (+https://ambasada.id)";
 async function get(fetchImpl, url) {
   return fetchImpl(url, { redirect: "manual", signal: AbortSignal.timeout(FETCH_TIMEOUT_MS), headers: { "user-agent": USER_AGENT, accept: "*/*" } });
 }
+async function checkPage(fetchImpl, url, report, html) {
+  try {
+    const started = Date.now();
+    const res = await get(fetchImpl, url);
+    const text = res.status === 200 && html ? await res.text() : "";
+    if (!html) await res.body?.cancel();
+    const ms = Date.now() - started;
+    if (res.status !== 200) report.problems.push({ code: "entry_status", message: `${url} answered ${res.status}${res.headers.get("location") ? ` \u2192 ${res.headers.get("location")}` : ""}; ${html ? "the entry" : "the app"} must answer 200 without redirects` });
+    else if (html) merge(report, checkHtml(text));
+    if (ms > SLOW_ENTRY_MS) report.warnings.push({ code: "slow_entry", message: `${url} took ${ms} ms; aim for under ${SLOW_ENTRY_MS} ms${html ? " (the splash stays until ready())" : ""}` });
+  } catch (error) {
+    report.problems.push({ code: "entry_fetch", message: `could not fetch ${url}: ${error.message}` });
+  }
+}
 async function checkRemote(url, fetchImpl = fetch, options = {}) {
   const report = { ok: true, target: url, problems: [], warnings: [], notes: [] };
   let origin;
@@ -954,8 +1018,23 @@ async function checkRemote(url, fetchImpl = fetch, options = {}) {
   if (origin.protocol !== "https:") report.problems.push({ code: "not_https", message: "the app must be served over https" });
   let manifest = null;
   const manifestUrl = new URL(MANIFEST_URL_PATH, origin).toString();
+  if (options.miniapp === false) {
+    report.miniapp = { on: false, entry: null };
+    report.notes.push("mini app: off");
+    await checkPage(fetchImpl, new URL("/", origin).toString(), report, false);
+    report.ok = report.problems.length === 0;
+    return report;
+  }
   try {
     let res = await get(fetchImpl, manifestUrl);
+    if (res.status === 404 && options.miniapp === void 0) {
+      await res.body?.cancel();
+      report.miniapp = { on: false, entry: null };
+      report.notes.push(`mini app: off (no ${MANIFEST_URL_PATH})`);
+      await checkPage(fetchImpl, new URL("/", origin).toString(), report, false);
+      report.ok = report.problems.length === 0;
+      return report;
+    }
     if (res.status >= 300 && res.status < 400) {
       const location = res.headers.get("location") ?? "";
       if (res.status === 307 && HOSTED_MANIFEST.test(location)) {
@@ -977,18 +1056,8 @@ async function checkRemote(url, fetchImpl = fetch, options = {}) {
     report.problems.push({ code: "manifest_fetch", message: `could not fetch ${manifestUrl}: ${error.message}` });
   }
   const entryPath = typeof manifest?.entry === "string" && manifest.entry.startsWith("/") ? manifest.entry : "/";
-  const entryUrl = new URL(entryPath, origin).toString();
-  try {
-    const started = Date.now();
-    const res = await get(fetchImpl, entryUrl);
-    const html = res.status === 200 ? await res.text() : "";
-    const ms = Date.now() - started;
-    if (res.status !== 200) report.problems.push({ code: "entry_status", message: `${entryUrl} answered ${res.status}${res.headers.get("location") ? ` \u2192 ${res.headers.get("location")}` : ""}; the entry must answer 200 without redirects` });
-    else merge(report, checkHtml(html));
-    if (ms > SLOW_ENTRY_MS) report.warnings.push({ code: "slow_entry", message: `${entryUrl} took ${ms} ms; the splash stays until ready(), aim for under ${SLOW_ENTRY_MS} ms` });
-  } catch (error) {
-    report.problems.push({ code: "entry_fetch", message: `could not fetch ${entryUrl}: ${error.message}` });
-  }
+  report.miniapp = { on: true, entry: entryPath };
+  await checkPage(fetchImpl, new URL(entryPath, origin).toString(), report, true);
   if (typeof manifest?.icon === "string" && manifest.icon) {
     const iconUrl = new URL(manifest.icon, origin).toString();
     try {
@@ -1036,6 +1105,7 @@ async function checkRemote(url, fetchImpl = fetch, options = {}) {
   return report;
 }
 function listingLine(tier, check2) {
+  if (check2?.miniapp === "off") return "Mini app: off";
   if (tier === "verified") return "Verified";
   if (tier === "listed") return "Listed for the event";
   if (tier === "unlisted") return check2?.needs.length ? `Unlisted \xB7 needs: ${check2.needs.join(", ")}` : "Unlisted";
@@ -1098,6 +1168,8 @@ var ERROR_STATUS = {
   FROZEN: 403,
   // Exchange stream: an agent sent too many inbox messages
   CAP_INBOX_RATE: 429,
+  // The CEO chat: too many turns for one company
+  CAP_CHAT_RATE: 429,
   // SDK-side
   NETWORK: 0,
   CONFIG: 0,
@@ -1242,9 +1314,9 @@ function b64url(bytes) {
 }
 function fromB64url(text) {
   const s = atob(text.replace(/-/g, "+").replace(/_/g, "/") + "===".slice((text.length + 3) % 4));
-  const out6 = new Uint8Array(s.length);
-  for (let i = 0; i < s.length; i++) out6[i] = s.charCodeAt(i);
-  return out6;
+  const out7 = new Uint8Array(s.length);
+  for (let i = 0; i < s.length; i++) out7[i] = s.charCodeAt(i);
+  return out7;
 }
 var random = (n) => b64url(crypto.getRandomValues(new Uint8Array(n)));
 async function pkce() {
@@ -1685,21 +1757,98 @@ function cachedKeys(load, ttlMs = 10 * 6e4) {
   };
 }
 
+// ../sdk/src/define.ts
+var MINIAPP_ENTRY = /^\/(?:[A-Za-z0-9._~-]+(?:\/[A-Za-z0-9._~-]+)*)?$/;
+
 // ../sdk/src/platform.ts
 var ambasada = new Ambasada();
 
 // src/commands.ts
-import { execFileSync as execFileSync3 } from "node:child_process";
-import { existsSync as existsSync10, readFileSync as readFileSync5 } from "node:fs";
-import { appendFile, mkdir as mkdir5, readdir as readdir3, readFile as readFile7, writeFile as writeFile7 } from "node:fs/promises";
-import { basename as basename3, dirname as dirname6, join as join11, resolve as resolvePath5 } from "node:path";
+import { execFileSync as execFileSync4 } from "node:child_process";
+import { existsSync as existsSync12, readFileSync as readFileSync6 } from "node:fs";
+import { appendFile as appendFile2, mkdir as mkdir6, readdir as readdir3, readFile as readFile8, writeFile as writeFile8 } from "node:fs/promises";
+import { basename as basename3, dirname as dirname7, join as join13, resolve as resolvePath5 } from "node:path";
 import { createInterface as createInterface2 } from "node:readline/promises";
 
 // src/config.ts
-import { existsSync } from "node:fs";
-import { chmod, mkdir, readFile, writeFile } from "node:fs/promises";
+import { existsSync as existsSync3 } from "node:fs";
+import { chmod, mkdir, readFile as readFile2, writeFile as writeFile2 } from "node:fs/promises";
 import { homedir } from "node:os";
+import { join as join3 } from "node:path";
+
+// src/manifest.ts
+import { existsSync, readdirSync, statSync } from "node:fs";
 import { join } from "node:path";
+var MANIFEST_FILES = {
+  next: "public/.well-known/ambasada.json",
+  spa: "public/.well-known/ambasada.json",
+  worker: "web/.well-known/ambasada.json"
+};
+var STATIC_DIRS = ["public", "web", "static"];
+function findLocalManifest(dir) {
+  for (const rel of Object.values(MANIFEST_FILES)) if (existsSync(join(dir, rel))) return join(dir, rel);
+  const candidates = [join(dir, ".well-known/ambasada.json"), ...STATIC_DIRS.map((s) => join(dir, s, ".well-known/ambasada.json"))];
+  for (const s of STATIC_DIRS) {
+    const base = join(dir, s);
+    if (existsSync(base) && statSync(base).isDirectory()) {
+      for (const sub of readdirSync(base)) candidates.push(join(base, sub, ".well-known/ambasada.json"));
+    }
+  }
+  return candidates.find((c2) => existsSync(c2)) ?? null;
+}
+var APP_WEBHOOK_PATH = "/api/ambasada/webhook";
+var oneLine = (s, max) => {
+  const line = s.replace(/\s+/g, " ").trim();
+  return line.length > max ? `${line.slice(0, max - 1).trimEnd()}\u2026` : line;
+};
+function appManifest(app, miniapp2 = { entry: "/" }) {
+  const description = app.description || app.name;
+  const icon = miniapp2.icon ?? "/icon.png";
+  const scopes = miniapp2.scopes ?? ["identity", "notifications"];
+  return {
+    schema: 2,
+    id: app.id,
+    name: oneLine(app.name, MANIFEST_LIMITS.name),
+    subtitle: oneLine(description, MANIFEST_LIMITS.subtitle),
+    description: description.length > MANIFEST_LIMITS.description ? oneLine(description, MANIFEST_LIMITS.description) : description,
+    icon,
+    splash: { image: icon, color: "#FFFFFF" },
+    accent: miniapp2.accent ?? "#FF002E",
+    entry: miniapp2.entry,
+    kind: "product",
+    category: miniapp2.category ?? "other",
+    scopes,
+    ...scopes.includes("notifications") ? { notifications: { webhook: APP_WEBHOOK_PATH } } : {},
+    ...scopes.length ? { privacy_url: "/privacy" } : {},
+    visibility: miniapp2.visibility ?? "public"
+  };
+}
+var manifestJson = (app, miniapp2) => `${JSON.stringify(appManifest(app, miniapp2), null, 2)}
+`;
+function readCompany(configSource) {
+  const str4 = (re) => {
+    const m = re.exec(configSource);
+    return m ? JSON.parse(`"${m[1]}"`) : void 0;
+  };
+  const id = str4(/\bid\s*:\s*"((?:[^"\\]|\\.)*)"/);
+  const name = str4(/\bname\s*:\s*"((?:[^"\\]|\\.)*)"/);
+  const description = str4(/\bdescription\s*:\s*"((?:[^"\\]|\\.)*)"/) ?? str4(/\bidea\s*:\s*\{\s*title\s*:\s*"((?:[^"\\]|\\.)*)"/);
+  return id && name ? { id, name, description: description ?? "" } : null;
+}
+function readMiniapp(configSource) {
+  const block = /\bminiapp\s*:\s*\{([^}]*)\}/.exec(configSource.replace(/(?<!:)\/\/[^\n]*|\/\*[\s\S]*?\*\//g, ""));
+  if (!block) return null;
+  const entry2 = /\bentry\s*:\s*["'`]([^"'`]*)["'`]/.exec(block[1])?.[1];
+  const icon = /\bicon\s*:\s*["'`]([^"'`]*)["'`]/.exec(block[1])?.[1];
+  return entry2 === void 0 ? null : { entry: entry2, ...icon ? { icon } : {} };
+}
+
+// src/project.ts
+import { existsSync as existsSync2 } from "node:fs";
+import { readFile, rm, writeFile } from "node:fs/promises";
+import * as nodeModule from "node:module";
+import { dirname, join as join2, resolve as resolvePath } from "node:path";
+import { pathToFileURL } from "node:url";
 
 // src/ui.ts
 var useColor = process.stdout.isTTY && !process.env.NO_COLOR;
@@ -1709,8 +1858,9 @@ function table(rows, columns) {
   if (!rows.length) return c.dim("(none)");
   const cols = columns ?? Object.keys(rows[0]);
   const cell = (v) => v === null || v === void 0 ? "" : typeof v === "object" ? JSON.stringify(v) : String(v);
-  const widths = cols.map((col) => Math.min(60, Math.max(col.length, ...rows.map((r) => cell(r[col]).length))));
-  const line = (vals) => vals.map((v, i) => v.slice(0, widths[i]).padEnd(widths[i])).join("  ").trimEnd();
+  const widths = cols.map((col, i) => Math.min(i === cols.length - 1 ? Infinity : 60, Math.max(col.length, ...rows.map((r) => cell(r[col]).length))));
+  const fit = (v, w) => v.length > w ? `${v.slice(0, w - 1)}\u2026` : v.padEnd(w);
+  const line = (vals) => vals.map((v, i) => fit(v, widths[i])).join("  ").trimEnd();
   return [c.dim(line(cols)), ...rows.map((r) => line(cols.map((col) => cell(r[col]))))].join("\n");
 }
 function ton(amount) {
@@ -1725,26 +1875,81 @@ var CliError = class extends Error {
   exitCode;
 };
 
+// src/project.ts
+var CONFIG_FILE = "ambasada.config.ts";
+function findRoot(from = process.cwd()) {
+  let dir = resolvePath(from);
+  for (; ; ) {
+    if (existsSync2(join2(dir, CONFIG_FILE))) return dir;
+    const parent = dirname(dir);
+    if (parent === dir) return null;
+    dir = parent;
+  }
+}
+async function importTs(file) {
+  const url = `${pathToFileURL(file).href}?t=${Date.now()}`;
+  try {
+    return (await import(url)).default;
+  } catch (error) {
+    const code = error.code;
+    const missing = /Cannot find (?:package|module) '(@ambasada\/[a-z-]+)/.exec(String(error.message))?.[1];
+    if (code === "ERR_MODULE_NOT_FOUND" && missing) {
+      throw new CliError(`${file} imports ${missing}, which is not installed: run \`npm install\` in ${dirname(file)}`);
+    }
+    if (code !== "ERR_UNKNOWN_FILE_EXTENSION") throw error;
+    const strip = nodeModule.stripTypeScriptTypes;
+    if (!strip) throw new CliError(`can't load ${file}: use Node \u2265 22.18, or Bun (\`bunx ambasada \u2026\`)`);
+    const tmp = file.replace(/\.ts$/, `.village-${process.pid}.mjs`);
+    await writeFile(tmp, strip(await readFile(file, "utf8")));
+    try {
+      return (await import(`${pathToFileURL(tmp).href}?t=${Date.now()}`)).default;
+    } finally {
+      await rm(tmp, { force: true });
+    }
+  }
+}
+async function loadProject(from) {
+  const root = findRoot(from);
+  if (!root) throw new CliError(`no ${CONFIG_FILE} here or in a parent folder: run \`ambasada init\` first`);
+  const config = await importTs(join2(root, CONFIG_FILE));
+  if (!config || typeof config !== "object" || typeof config.id !== "string") {
+    throw new CliError(`${CONFIG_FILE} must \`export default defineApp({ id, name, \u2026 })\``);
+  }
+  return { root, config };
+}
+async function setProductUrl(root, url) {
+  const file = join2(root, CONFIG_FILE);
+  const source = await readFile(file, "utf8");
+  const next = source.replace(/(product\s*:\s*\{\s*url\s*:\s*)(["'`])[^"'`]*\2/, `$1"${url}"`);
+  if (next === source) return source.includes(`url: "${url}"`) || source.includes(`url: '${url}'`);
+  await writeFile(file, next);
+  return true;
+}
+async function loadIdName(root) {
+  const app = readCompany(await readFile(join2(root, CONFIG_FILE), "utf8"));
+  return app ? { id: app.id, name: app.name } : null;
+}
+
 // src/config.ts
 var OLD_DEFAULT_API_URL = "https://hackaton.ambasada.id";
-var baseDir = () => process.env.XDG_CONFIG_HOME ?? join(homedir(), ".config");
+var baseDir = () => process.env.XDG_CONFIG_HOME ?? join3(homedir(), ".config");
 function configDir() {
-  return process.env.AMBASADA_CONFIG_DIR ?? join(baseDir(), "ambasada");
+  return process.env.AMBASADA_CONFIG_DIR ?? join3(baseDir(), "ambasada");
 }
 function configPath() {
-  return join(configDir(), "config.json");
+  return join3(configDir(), "config.json");
 }
 function legacyPath() {
-  return process.env.AMBASADA_CONFIG_DIR ? null : join(baseDir(), "village", "config.json");
+  return process.env.AMBASADA_CONFIG_DIR ? null : join3(baseDir(), "village", "config.json");
 }
 async function readConfig() {
   try {
-    return JSON.parse(await readFile(configPath(), "utf8"));
+    return JSON.parse(await readFile2(configPath(), "utf8"));
   } catch {
     const legacy = legacyPath();
-    if (!legacy || !existsSync(legacy) || existsSync(configPath())) return {};
+    if (!legacy || !existsSync3(legacy) || existsSync3(configPath())) return {};
     try {
-      const old = JSON.parse(await readFile(legacy, "utf8"));
+      const old = JSON.parse(await readFile2(legacy, "utf8"));
       const { apiUrl, company, ...rest } = old;
       const migrated = { ...rest, ...apiUrl && apiUrl.replace(/\/+$/, "") !== OLD_DEFAULT_API_URL ? { apiUrl } : {}, ...company ? { project: company } : {} };
       await writeConfig(migrated);
@@ -1756,19 +1961,59 @@ async function readConfig() {
 }
 async function writeConfig(config) {
   await mkdir(configDir(), { recursive: true });
-  await writeFile(configPath(), `${JSON.stringify(config, null, 2)}
+  await writeFile2(configPath(), `${JSON.stringify(config, null, 2)}
 `, { mode: 384 });
   await chmod(configPath(), 384);
 }
 var str = (v) => typeof v === "string" && v ? v : void 0;
+async function folderApp() {
+  const root = findRoot();
+  if (!root) return void 0;
+  try {
+    return (await loadIdName(root))?.id;
+  } catch {
+    return void 0;
+  }
+}
 async function resolve(flags) {
   const file = await readConfig();
+  const here = await folderApp();
+  const saved = here ? file.apps?.[here] : void 0;
+  const given = str(flags.key) ?? process.env.AMBASADA_API_KEY;
+  const named = process.env.AMBASADA_APP_ID ?? process.env.AMBASADA_COMPANY;
   return {
-    apiUrl: (str(flags["api-url"]) ?? process.env.AMBASADA_API_URL ?? file.apiUrl ?? DEFAULT_API_URL).replace(/\/+$/, ""),
-    apiKey: str(flags.key) ?? process.env.AMBASADA_API_KEY ?? file.apiKey,
-    project: process.env.AMBASADA_APP_ID ?? process.env.AMBASADA_COMPANY ?? file.project ?? file.company
+    apiUrl: (str(flags["api-url"]) ?? process.env.AMBASADA_API_URL ?? saved?.apiUrl ?? file.apiUrl ?? DEFAULT_API_URL).replace(/\/+$/, ""),
+    apiKey: given ?? saved?.apiKey ?? file.apiKey,
+    // A key from a flag or the environment: only the environment can say whose it is. A saved one: whose it was at login.
+    project: given ? named : named ?? (saved ? here : file.project ?? file.company),
+    here
   };
 }
+async function whoseKey(apiUrl, key) {
+  let res;
+  try {
+    res = await fetch(`${apiUrl.replace(/\/$/, "")}/v1/key`, { headers: { authorization: `Bearer ${key}`, accept: "application/json" } });
+  } catch (error) {
+    throw new CliError(`can't reach ${apiUrl}: ${error.message}`);
+  }
+  if (res.status === 401) throw new CliError("that key was refused (UNAUTHORIZED)");
+  if (res.ok) {
+    const body = await res.json();
+    return { id: body.id, name: body.name ?? null, kind: body.kind === "project" ? "project" : "company" };
+  }
+  throw new CliError(`${apiUrl}/v1/key answered ${res.status}: is --api-url an Ambasada API?`);
+}
+async function resolveForApp(flags) {
+  const r = await resolve(flags);
+  if (!r.apiKey || !r.here) return r;
+  const owner = r.project ?? (await whoseKey(r.apiUrl, r.apiKey)).id;
+  if (owner !== r.here) {
+    throw new CliError(
+      `this folder is the app ${r.here} (ambasada.config.ts), but you are logged in as ${owner}: run \`ambasada login --key vk_\u2026\` here with ${r.here}'s key (https://developer.ambasada.dev \u2192 ${r.here} \u2192 Settings \u2192 New key)`
+    );
+  }
+  return { ...r, project: owner };
+}
 
 // src/mock/server.ts
 import { createServer } from "node:http";
@@ -2009,8 +2254,8 @@ async function startMock(options = {}) {
     }
     if (path === "/dev/app/event" && method === "POST") {
       const b = await body();
-      const out6 = await appEvent(String(b.event ?? "ping"), { user: typeof b.user === "string" ? b.user : void 0, webhook: typeof b.webhook === "string" ? b.webhook : void 0 });
-      return json2(out6, out6.error ? 502 : 200);
+      const out7 = await appEvent(String(b.event ?? "ping"), { user: typeof b.user === "string" ? b.user : void 0, webhook: typeof b.webhook === "string" ? b.webhook : void 0 });
+      return json2(out7, out7.error ? 502 : 200);
     }
     if (path === "/dev/state") return json2(Object.assign({ company, notifications, events }, ...extensions.map((e) => e.state?.() ?? {})));
     if (!path.startsWith("/v1/")) throw fail("NOT_FOUND", "no such route");
@@ -2114,118 +2359,12 @@ async function startMock(options = {}) {
 }
 
 // src/plugin.ts
-import { existsSync as existsSync3, readFileSync } from "node:fs";
+import { existsSync as existsSync4, readFileSync } from "node:fs";
 import { createRequire } from "node:module";
-import { dirname as dirname2, isAbsolute, join as join3, resolve as resolvePath2 } from "node:path";
+import { dirname as dirname2, isAbsolute, join as join4, resolve as resolvePath2 } from "node:path";
 import { pathToFileURL as pathToFileURL2 } from "node:url";
-
-// src/manifest.ts
-var MANIFEST_FILES = {
-  next: "public/.well-known/ambasada.json",
-  spa: "public/.well-known/ambasada.json",
-  worker: "web/.well-known/ambasada.json"
-};
-var APP_WEBHOOK_PATH = "/api/ambasada/webhook";
-var oneLine = (s, max) => {
-  const line = s.replace(/\s+/g, " ").trim();
-  return line.length > max ? `${line.slice(0, max - 1).trimEnd()}\u2026` : line;
-};
-function appManifest(company) {
-  return {
-    schema: 2,
-    id: company.id,
-    name: oneLine(company.name, MANIFEST_LIMITS.name),
-    subtitle: oneLine(company.description, MANIFEST_LIMITS.subtitle),
-    description: company.description,
-    icon: "/icon.png",
-    splash: { image: "/icon.png", color: "#FFFFFF" },
-    accent: "#FF002E",
-    entry: "/",
-    kind: "product",
-    category: "other",
-    // Sign in with Ambasada and notifications (docs/MINI-APPS.md §5, §7): the templates ship both routes.
-    scopes: ["identity", "notifications"],
-    notifications: { webhook: APP_WEBHOOK_PATH },
-    privacy_url: "/privacy",
-    visibility: "public"
-  };
-}
-var manifestJson = (company) => `${JSON.stringify(appManifest(company), null, 2)}
-`;
-function readCompany(configSource) {
-  const str4 = (re) => {
-    const m = re.exec(configSource);
-    return m ? JSON.parse(`"${m[1]}"`) : void 0;
-  };
-  const id = str4(/\bid\s*:\s*"((?:[^"\\]|\\.)*)"/);
-  const name = str4(/\bname\s*:\s*"((?:[^"\\]|\\.)*)"/);
-  const description = str4(/\bdescription\s*:\s*"((?:[^"\\]|\\.)*)"/) ?? str4(/\bidea\s*:\s*\{\s*title\s*:\s*"((?:[^"\\]|\\.)*)"/);
-  return id && name && description !== void 0 ? { id, name, description } : null;
-}
-
-// src/project.ts
-import { existsSync as existsSync2 } from "node:fs";
-import { readFile as readFile2, rm, writeFile as writeFile2 } from "node:fs/promises";
-import * as nodeModule from "node:module";
-import { dirname, join as join2, resolve as resolvePath } from "node:path";
-import { pathToFileURL } from "node:url";
-var CONFIG_FILE = "ambasada.config.ts";
-function findRoot(from = process.cwd()) {
-  let dir = resolvePath(from);
-  for (; ; ) {
-    if (existsSync2(join2(dir, CONFIG_FILE))) return dir;
-    const parent = dirname(dir);
-    if (parent === dir) return null;
-    dir = parent;
-  }
-}
-async function importTs(file) {
-  const url = `${pathToFileURL(file).href}?t=${Date.now()}`;
-  try {
-    return (await import(url)).default;
-  } catch (error) {
-    const code = error.code;
-    const missing = /Cannot find (?:package|module) '(@ambasada\/[a-z-]+)/.exec(String(error.message))?.[1];
-    if (code === "ERR_MODULE_NOT_FOUND" && missing) {
-      throw new CliError(`${file} imports ${missing}, which is not installed: run \`npm install\` in ${dirname(file)}`);
-    }
-    if (code !== "ERR_UNKNOWN_FILE_EXTENSION") throw error;
-    const strip = nodeModule.stripTypeScriptTypes;
-    if (!strip) throw new CliError(`can't load ${file}: use Node \u2265 22.18, or Bun (\`bunx ambasada \u2026\`)`);
-    const tmp = file.replace(/\.ts$/, `.village-${process.pid}.mjs`);
-    await writeFile2(tmp, strip(await readFile2(file, "utf8")));
-    try {
-      return (await import(`${pathToFileURL(tmp).href}?t=${Date.now()}`)).default;
-    } finally {
-      await rm(tmp, { force: true });
-    }
-  }
-}
-async function loadProject(from) {
-  const root = findRoot(from);
-  if (!root) throw new CliError(`no ${CONFIG_FILE} here or in a parent folder: run \`ambasada init\` first`);
-  const config = await importTs(join2(root, CONFIG_FILE));
-  if (!config || typeof config !== "object" || typeof config.id !== "string") {
-    throw new CliError(`${CONFIG_FILE} must \`export default defineApp({ id, name, \u2026 })\``);
-  }
-  return { root, config };
-}
-async function setProductUrl(root, url) {
-  const file = join2(root, CONFIG_FILE);
-  const source = await readFile2(file, "utf8");
-  const next = source.replace(/(product\s*:\s*\{\s*url\s*:\s*)(["'`])[^"'`]*\2/, `$1"${url}"`);
-  if (next === source) return source.includes(`url: "${url}"`) || source.includes(`url: '${url}'`);
-  await writeFile2(file, next);
-  return true;
-}
-async function loadIdName(root) {
-  const app = readCompany(await readFile2(join2(root, CONFIG_FILE), "utf8"));
-  return app ? { id: app.id, name: app.name } : null;
-}
-
-// src/plugin.ts
 var PLATFORM_CONFIG_KEYS = ["id", "name", "product", "addons"];
-var VERSION = true ? "0.8.2" : "0.1.0-dev";
+var VERSION = true ? "0.8.4" : "0.1.0-dev";
 var shortName = (pkg) => pkg.replace(/^@ambasada\//, "").replace(/^ambasada-(addon-)?/, "");
 var KNOWN_ADDONS = { village: "@ambasada/village" };
 function readJson(file) {
@@ -2238,8 +2377,8 @@ function readJson(file) {
 function packageDir(name, root) {
   let dir = resolvePath2(root);
   for (; ; ) {
-    const candidate = join3(dir, "node_modules", name);
-    if (existsSync3(join3(candidate, "package.json"))) return candidate;
+    const candidate = join4(dir, "node_modules", name);
+    if (existsSync4(join4(candidate, "package.json"))) return candidate;
     const parent = dirname2(dir);
     if (parent === dir) return null;
     dir = parent;
@@ -2249,11 +2388,11 @@ function findAddons(root, configAddons = []) {
   const dirs = /* @__PURE__ */ new Set();
   for (const dir of (process.env.AMBASADA_ADDONS ?? "").split(",").map((s) => s.trim()).filter(Boolean)) dirs.add(resolvePath2(dir));
   if (root) {
-    const pkg = readJson(join3(root, "package.json"));
+    const pkg = readJson(join4(root, "package.json"));
     const names2 = /* @__PURE__ */ new Set([...Object.keys(pkg?.dependencies ?? {}), ...Object.keys(pkg?.devDependencies ?? {}), ...configAddons]);
     for (const name of names2) {
       const dir = isAbsolute(name) || name.startsWith(".") ? resolvePath2(root, name) : packageDir(name, root);
-      if (dir && readJson(join3(dir, "package.json"))?.ambasada?.plugin) dirs.add(dir);
+      if (dir && readJson(join4(dir, "package.json"))?.ambasada?.plugin) dirs.add(dir);
     }
   }
   return [...dirs];
@@ -2266,11 +2405,11 @@ function besideCli(name) {
   }
 }
 async function loadAddon(dir) {
-  const pkg = readJson(join3(dir, "package.json"));
+  const pkg = readJson(join4(dir, "package.json"));
   const entry2 = pkg?.ambasada?.plugin;
   if (!pkg?.name || !entry2) throw new CliError(`${dir} is not an ambasada add-on (no "ambasada": { "plugin" } in package.json)`);
-  const file = join3(dir, entry2);
-  if (!existsSync3(file)) throw new CliError(`${pkg.name}: ${entry2} is missing (build the add-on, or reinstall it)`);
+  const file = join4(dir, entry2);
+  if (!existsSync4(file)) throw new CliError(`${pkg.name}: ${entry2} is missing (build the add-on, or reinstall it)`);
   const mod = await import(pathToFileURL2(file).href);
   const register = mod.register ?? mod.default?.register;
   if (typeof register !== "function") throw new CliError(`${pkg.name}: ${entry2} exports no register(api)`);
@@ -2358,8 +2497,8 @@ function setAddons(a) {
 
 // src/stack.ts
 import { spawn } from "node:child_process";
-import { existsSync as existsSync4, readFileSync as readFileSync2 } from "node:fs";
-import { dirname as dirname3, join as join4 } from "node:path";
+import { existsSync as existsSync5, readFileSync as readFileSync2 } from "node:fs";
+import { dirname as dirname3, join as join5 } from "node:path";
 var STACKS = [
   {
     files: ["next.config.ts", "next.config.mjs", "next.config.js", "open-next.config.ts"],
@@ -2396,15 +2535,15 @@ var STACKS = [
   }
 ];
 function detectStack(root) {
-  return STACKS.find((s) => s.files.some((f) => existsSync4(join4(root, f))))?.stack ?? null;
+  return STACKS.find((s) => s.files.some((f) => existsSync5(join5(root, f))))?.stack ?? null;
 }
 function resolveBin(root, pkg, bin2) {
   for (let dir = root; ; dir = dirname3(dir)) {
-    const manifest = join4(dir, "node_modules", pkg, "package.json");
-    if (existsSync4(manifest)) {
+    const manifest = join5(dir, "node_modules", pkg, "package.json");
+    if (existsSync5(manifest)) {
       const json2 = JSON.parse(readFileSync2(manifest, "utf8"));
       const rel = typeof json2.bin === "string" ? json2.bin : json2.bin?.[bin2];
-      return rel ? join4(dirname3(manifest), rel) : null;
+      return rel ? join5(dirname3(manifest), rel) : null;
     }
     if (dirname3(dir) === dir) return null;
   }
@@ -2445,55 +2584,17 @@ function startApp(root, stack, bin2, url, vars, print, prefix) {
 }
 
 // src/check.ts
-import { existsSync as existsSync5, readdirSync, readFileSync as readFileSync3, statSync } from "node:fs";
-import { dirname as dirname4, join as join5, resolve as resolvePath3 } from "node:path";
-var merge2 = (into, from) => {
-  into.problems.push(...from.problems);
-  into.warnings.push(...from.warnings);
-};
-var STATIC_DIRS = ["public", "web", "static"];
-function findLocalManifest(dir) {
-  for (const rel of Object.values(MANIFEST_FILES)) if (existsSync5(join5(dir, rel))) return join5(dir, rel);
-  const candidates = [join5(dir, ".well-known/ambasada.json"), ...STATIC_DIRS.map((s) => join5(dir, s, ".well-known/ambasada.json"))];
-  for (const s of STATIC_DIRS) {
-    const base = join5(dir, s);
-    if (existsSync5(base) && statSync(base).isDirectory()) {
-      for (const sub of readdirSync(base)) candidates.push(join5(base, sub, ".well-known/ambasada.json"));
-    }
-  }
-  return candidates.find((c2) => existsSync5(c2)) ?? null;
-}
-async function checkLocal(dir) {
-  const target2 = resolvePath3(dir);
-  const report = { ok: true, target: target2, problems: [], warnings: [], notes: [] };
-  const manifestFile = findLocalManifest(target2);
-  if (!manifestFile) {
-    report.problems.push({ code: "manifest_missing", message: `no .well-known/ambasada.json under ${target2} (${Object.values(MANIFEST_FILES).join(", ")}): \`ambasada init\` writes one` });
-    report.ok = false;
-    return report;
-  }
-  const staticRoot = dirname4(dirname4(manifestFile));
-  let manifest = null;
-  try {
-    manifest = JSON.parse(readFileSync3(manifestFile, "utf8"));
-    merge2(report, validateManifest(manifest));
-  } catch (error) {
-    report.problems.push({ code: "manifest_json", message: `${manifestFile} is not valid JSON: ${error.message}` });
-  }
-  const iconPath = typeof manifest?.icon === "string" && manifest.icon.startsWith("/") ? join5(staticRoot, manifest.icon) : null;
-  if (iconPath) {
-    if (!existsSync5(iconPath)) report.problems.push({ code: "icon_missing", message: `the manifest's icon ${manifest.icon} is not in ${staticRoot}` });
-    else merge2(report, checkIcon(readFileSync3(iconPath)));
-  } else if (manifest && typeof manifest.icon === "string") report.notes.push(`icon ${manifest.icon}: not a local path, not checked`);
-  const index = join5(staticRoot, "index.html");
-  if (existsSync5(index)) merge2(report, checkHtml(readFileSync3(index, "utf8")));
-  else report.notes.push(`no static ${index}: the entry page is rendered by the app, checked by \`ambasada check <url>\` once deployed`);
-  report.ok = report.problems.length === 0;
-  return report;
-}
+import { existsSync as existsSync7, readFileSync as readFileSync5 } from "node:fs";
+import { dirname as dirname5, join as join8, resolve as resolvePath3 } from "node:path";
+
+// src/miniapp.ts
+import { execFileSync } from "node:child_process";
+import { existsSync as existsSync6, readFileSync as readFileSync4 } from "node:fs";
+import { appendFile, mkdir as mkdir2, readFile as readFile3, rm as rm2, writeFile as writeFile3 } from "node:fs/promises";
+import { dirname as dirname4, join as join7, relative as relative2 } from "node:path";
 
 // src/template.ts
-import { readdirSync as readdirSync2, readFileSync as readFileSync4, statSync as statSync2 } from "node:fs";
+import { readdirSync as readdirSync2, readFileSync as readFileSync3, statSync as statSync2 } from "node:fs";
 import { join as join6, relative } from "node:path";
 import { fileURLToPath } from "node:url";
 var TEMPLATES = ["next", "spa", "worker"];
@@ -2501,58 +2602,388 @@ var SKIP = /* @__PURE__ */ new Set(["node_modules", "dist", ".next", ".open-next
 var BINARY = /\.(png|ico|jpe?g|gif|webp|woff2?)$/i;
 var isBinary = (path) => BINARY.test(path);
 function readTemplateDir(dir) {
-  const out6 = {};
+  const out7 = {};
   const walk2 = (d) => {
     for (const name of readdirSync2(d)) {
       if (SKIP.has(name)) continue;
       const path = join6(d, name);
       if (statSync2(path).isDirectory()) walk2(path);
-      else out6[relative(dir, path).split("\\").join("/")] = readFileSync4(path, isBinary(name) ? "base64" : "utf8");
+      else out7[relative(dir, path).split("\\").join("/")] = readFileSync3(path, isBinary(name) ? "base64" : "utf8");
     }
   };
   walk2(dir);
-  return out6;
+  return out7;
 }
 function templateFiles(name) {
   if (typeof define_AMBASADA_TEMPLATES_default !== "undefined") return define_AMBASADA_TEMPLATES_default[name] ?? {};
   return readTemplateDir(fileURLToPath(new URL(`../../../templates/${name}/`, import.meta.url)));
 }
+var miniappFiles = () => templateFiles("miniapp");
+
+// src/miniapp.ts
+var out = (s = "") => process.stdout.write(`${s}
+`);
+var GENERATED_RECORD = ".ambasada/manifest.json";
+var DEFAULT_ENTRY = "/app";
+var OFF = { on: false, entry: null, source: null, file: null };
+function templateOf(root) {
+  const stack = detectStack(root);
+  if (stack) return stack.name;
+  return existsSync6(join7(root, "src/worker.ts")) ? "worker" : "next";
+}
+var staticDir = (template) => dirname4(dirname4(MANIFEST_FILES[template]));
+function appInfo(config) {
+  const idea = config.idea;
+  return { id: config.id, name: config.name, description: config.description ?? (typeof idea?.title === "string" ? idea.title : "") };
+}
+function readRecord(root) {
+  try {
+    return JSON.parse(readFileSync4(join7(root, GENERATED_RECORD), "utf8"));
+  } catch {
+    return null;
+  }
+}
+function isOurs(root, file) {
+  const record = readRecord(root);
+  if (!record || join7(root, record.path) !== file || !existsSync6(file)) return false;
+  return readFileSync4(file, "utf8") === record.content;
+}
+function handWritten(root) {
+  const file = findLocalManifest(root);
+  return file && !isOurs(root, file) ? file : null;
+}
+function fileEntry(file) {
+  try {
+    const entry2 = JSON.parse(readFileSync4(file, "utf8")).entry;
+    return typeof entry2 === "string" && entry2.startsWith("/") ? entry2 : "/";
+  } catch {
+    return "/";
+  }
+}
+function miniappState(root, miniapp2) {
+  const file = handWritten(root);
+  if (file) return { on: true, entry: fileEntry(file), source: "file", file };
+  return miniapp2 ? { on: true, entry: miniapp2.entry, source: "config", file: null } : OFF;
+}
+function miniappOfSource(root) {
+  const file = join7(root, CONFIG_FILE);
+  const source = existsSync6(file) ? readFileSync4(file, "utf8") : "";
+  return { app: readCompany(source), miniapp: readMiniapp(source) };
+}
+async function ensureGitignored(root, rel) {
+  const file = join7(root, ".gitignore");
+  if (!existsSync6(file)) return;
+  const text = await readFile3(file, "utf8");
+  if (text.split("\n").some((l) => l.trim() === `/${rel}`)) return;
+  await appendFile(file, `${text.endsWith("\n") ? "" : "\n"}# the mini-app manifest: \`ambasada dev\` and \`deploy\` write it from ambasada.config.ts (drop this line to write it by hand)
+/${rel}
+`);
+}
+async function writeGenerated(root, template, app, miniapp2) {
+  const rel = MANIFEST_FILES[template];
+  const text = manifestJson(app, miniapp2);
+  await mkdir2(dirname4(join7(root, rel)), { recursive: true });
+  if (!existsSync6(join7(root, rel)) || readFileSync4(join7(root, rel), "utf8") !== text) await writeFile3(join7(root, rel), text);
+  await mkdir2(join7(root, ".ambasada"), { recursive: true });
+  await writeFile3(join7(root, GENERATED_RECORD), `${JSON.stringify({ path: rel, content: text }, null, 2)}
+`);
+  await ensureGitignored(root, rel);
+}
+async function syncManifest(root, config) {
+  const template = templateOf(root);
+  const target2 = join7(root, MANIFEST_FILES[template]);
+  const state = miniappState(root, config.miniapp);
+  if (state.source === "config") await writeGenerated(root, template, appInfo(config), config.miniapp);
+  else if (!config.miniapp && isOurs(root, target2)) {
+    await rm2(target2, { force: true });
+    await rm2(join7(root, GENERATED_RECORD), { force: true });
+  }
+  return state;
+}
+function stateLine(state) {
+  if (!state.on) return `mini app: off ${c.dim("(`ambasada miniapp enable` adds one)")}`;
+  return `mini app: on at ${c.bold(state.entry ?? "/")}${state.source === "file" ? c.dim(` (manifest: ${state.file})`) : ""}`;
+}
+var COMMENT = "// The Ambasada mini app, at a path of this app: `ambasada dev` and `deploy` serve its manifest from this.";
+function setMiniappEntry(source, entry2) {
+  const existing = /(\bminiapp\s*:\s*\{[^}]*?\bentry\s*:\s*)(["'`])[^"'`]*\2/;
+  if (existing.test(source)) return source.replace(existing, `$1"${entry2}"`);
+  const product = /^([ \t]*product\s*:\s*\{[^}]*\})(,?)([^\n]*\n)/m.exec(source);
+  if (product) {
+    const indent = /^[ \t]*/.exec(product[1])[0];
+    const line = `${product[1]},${product[3]}`;
+    return `${source.slice(0, product.index)}${line}${indent}${COMMENT}
+${indent}miniapp: { entry: "${entry2}" },
+${source.slice(product.index + product[0].length)}`;
+  }
+  const close = /\n([ \t]*)\}\)/.exec(source.slice(source.indexOf("defineApp(")));
+  if (!source.includes("defineApp(") || !close) throw new CliError(`could not find defineApp({ \u2026 }) in ${CONFIG_FILE}: add \`miniapp: { entry: "${entry2}" }\` to it by hand`);
+  const at = source.indexOf("defineApp(") + close.index;
+  const body = source.slice(0, at).trimEnd();
+  return `${body}${body.endsWith(",") || body.endsWith("{") ? "" : ","}
+  ${COMMENT}
+  miniapp: { entry: "${entry2}" },${source.slice(at)}`;
+}
+async function patch(root, rel, done, apply, manual, placed) {
+  const file = join7(root, rel);
+  const text = existsSync6(file) ? await readFile3(file, "utf8") : null;
+  if (text !== null && done.test(text)) return;
+  const next = text === null ? null : apply(text);
+  if (next === null || next === text) placed.manual.push(manual);
+  else {
+    await writeFile3(file, next);
+    placed.patched.push(rel);
+  }
+}
+async function placeFiles(root, template, entry2, name, placed) {
+  const pieces = miniappFiles();
+  const dir = entry2.slice(1);
+  const write = async (piece, rel) => {
+    const dest = join7(root, rel);
+    if (existsSync6(dest)) return;
+    const back = relative2(dirname4(dest), root).split("\\").join("/") || ".";
+    const text = pieces[`${template}/${piece}`];
+    if (text === void 0) throw new CliError(`this CLI has no ${template}/${piece} mini-app piece`);
+    await mkdir2(dirname4(dest), { recursive: true });
+    await writeFile3(dest, text.replaceAll("__ENTRY_DIR__", dir).replaceAll("__ENTRY__", entry2).replaceAll("__ROOT__", back).replaceAll("My App", name));
+    placed.written.push(rel);
+  };
+  if (template === "next") {
+    if (entry2 === "/") {
+      await write("in-app.tsx", "app/in-app.tsx");
+      await patch(
+        root,
+        "app/layout.tsx",
+        /<InApp\b/,
+        (t) => t.includes("<body>{children}</body>") ? t.replace('import type { ReactNode } from "react";\n', 'import type { ReactNode } from "react";\nimport { InApp } from "./in-app.tsx";\n').replace("<body>{children}</body>", "<body>\n        {children}\n        <InApp />\n      </body>") : null,
+        "app/layout.tsx: render <InApp /> (app/in-app.tsx) inside <body>",
+        placed
+      );
+      return;
+    }
+    for (const taken of [`app/${dir}/page.tsx`, `app/(site)/${dir}/page.tsx`]) {
+      if (existsSync6(join7(root, taken)) && !existsSync6(join7(root, `app/${dir}/in-app.tsx`))) throw new CliError(`${taken} is a page already: pick another --entry`);
+    }
+    for (const piece of ["layout.tsx", "page.tsx", "in-app.tsx"]) await write(piece, `app/${dir}/${piece}`);
+    return;
+  }
+  if (template === "spa") {
+    await write("shell.ts", "src/in-app/shell.ts");
+    if (entry2 === "/") {
+      await patch(
+        root,
+        "src/main.tsx",
+        /startInApp/,
+        (t) => t.includes('import { App } from "./App.tsx";\n') ? `${t.replace('import { App } from "./App.tsx";\n', 'import { App } from "./App.tsx";\nimport { startInApp } from "./in-app/shell.ts";\n').trimEnd()}
+// Inside the Ambasada app: drop the splash and sign in silently (src/in-app/shell.ts). On the web: a no-op.
+void startInApp(() => location.reload());
+` : null,
+        "src/main.tsx: call startInApp(() => location.reload()) from src/in-app/shell.ts",
+        placed
+      );
+      return;
+    }
+    await write("InApp.tsx", "src/in-app/InApp.tsx");
+    await patch(
+      root,
+      "src/main.tsx",
+      /isInApp/,
+      (t) => t.includes('import { App } from "./App.tsx";\n') && t.includes("<App />") ? t.replace('import { App } from "./App.tsx";\n', 'import { App } from "./App.tsx";\nimport { InApp, isInApp } from "./in-app/InApp.tsx";\n').replace("<App />", "{isInApp(location.pathname) ? <InApp /> : <App />}") : null,
+      `src/main.tsx: render <InApp /> (src/in-app/InApp.tsx) when isInApp(location.pathname)`,
+      placed
+    );
+    return;
+  }
+  const web = staticDir("worker");
+  await write("in-app.js", `${web}/in-app.js`);
+  if (entry2 === "/") {
+    await patch(
+      root,
+      `${web}/index.html`,
+      /in-app\.js/,
+      (t) => t.includes("  </head>") ? t.replace(
+        "  </head>",
+        '    <!-- The mini app (`miniapp.entry` in ambasada.config.ts): @ambasada/miniapp as a <script>, then web/in-app.js. -->\n    <script src="https://hub.ambasada.id/miniapp.js" defer></script>\n    <script src="/in-app.js" defer></script>\n  </head>'
+      ) : null,
+      `${web}/index.html: <script src="https://hub.ambasada.id/miniapp.js" defer></script> and <script src="/in-app.js" defer></script> in <head>`,
+      placed
+    );
+    return;
+  }
+  if (existsSync6(join7(root, web, `${dir}.html`)) || existsSync6(join7(root, web, dir, "index.html"))) {
+    if (!readFileSync4(join7(root, web, existsSync6(join7(root, web, `${dir}.html`)) ? `${dir}.html` : `${dir}/index.html`), "utf8").includes("in-app.js")) throw new CliError(`${web}/${dir}.html is a page already: pick another --entry`);
+    return;
+  }
+  await write("page.html", `${web}/${dir}.html`);
+}
+function miniappSpec(deps, flags, fallback) {
+  const given = typeof flags["miniapp-spec"] === "string" ? flags["miniapp-spec"] : process.env.AMBASADA_MINIAPP_SPEC;
+  if (given) return given;
+  const like = [deps["@ambasada/ui"], deps["@ambasada/sdk"]].find((v) => v && /^[\^~]?\d/.test(v));
+  return like ?? fallback;
+}
+async function enableMiniapp(root, entry2, flags, opts) {
+  if (!MINIAPP_ENTRY.test(entry2) || entry2.split("/").includes("..")) throw new CliError(`--entry must be a path like "/app" or "/" (got ${JSON.stringify(entry2)})`);
+  const template = opts.template ?? templateOf(root);
+  const placed = { written: [], patched: [], manual: [] };
+  const configFile = join7(root, CONFIG_FILE);
+  const source = await readFile3(configFile, "utf8");
+  const next = setMiniappEntry(source, entry2);
+  if (next !== source) {
+    await writeFile3(configFile, next);
+    placed.patched.push(CONFIG_FILE);
+  }
+  const app = readCompany(next) ?? { id: "my-app", name: "My App", description: "" };
+  const miniapp2 = readMiniapp(next) ?? { entry: entry2 };
+  await placeFiles(root, template, entry2, app.name, placed);
+  const icon = join7(root, staticDir(template), (miniapp2.icon ?? "/icon.png").slice(1));
+  if (!existsSync6(icon)) {
+    const png = miniappFiles()["icon.png"];
+    if (png && isBinary("icon.png")) {
+      await mkdir2(dirname4(icon), { recursive: true });
+      await writeFile3(icon, Buffer.from(png, "base64"));
+      placed.written.push(relative2(root, icon));
+    }
+  }
+  let installNeeded = false;
+  if (template !== "worker") {
+    const pkgFile = join7(root, "package.json");
+    const pkg = JSON.parse(await readFile3(pkgFile, "utf8"));
+    const deps = pkg.dependencies ?? {};
+    if (!deps["@ambasada/miniapp"]) {
+      pkg.dependencies = Object.fromEntries(Object.entries({ ...deps, "@ambasada/miniapp": miniappSpec(deps, flags, opts.releaseLine) }).sort(([a], [b]) => a.localeCompare(b)));
+      await writeFile3(pkgFile, `${JSON.stringify(pkg, null, 2)}
+`);
+      placed.patched.push("package.json");
+      installNeeded = true;
+    }
+  }
+  if (!handWritten(root)) await writeGenerated(root, template, app, miniapp2);
+  return { ...placed, entry: entry2, installNeeded };
+}
+async function miniappCommand(args, flags, releaseLine) {
+  const root = findRoot();
+  if (!root) throw new CliError(`run \`ambasada miniapp\` inside your app (no ${CONFIG_FILE} found)`);
+  const [sub] = args;
+  const { miniapp: miniapp2 } = miniappOfSource(root);
+  if (!sub || sub === "status") {
+    const state = miniappState(root, miniapp2);
+    if (flags.json) out(JSON.stringify(state, null, 2));
+    else out(stateLine(state));
+    return;
+  }
+  if (sub !== "enable") throw new CliError("usage: ambasada miniapp [enable [--entry /app]]");
+  const current2 = miniappState(root, miniapp2);
+  if (current2.source === "file") throw new CliError(`the mini app is on already, from ${current2.file} (yours, it wins): change its "entry" there`);
+  const entry2 = typeof flags.entry === "string" ? flags.entry : miniapp2?.entry ?? DEFAULT_ENTRY;
+  const moved = miniapp2 && miniapp2.entry !== entry2 ? miniapp2.entry : null;
+  const done = await enableMiniapp(root, entry2, flags, { releaseLine });
+  if (done.installNeeded && existsSync6(join7(root, "node_modules")) && !flags["no-install"]) {
+    out(c.dim("npm install \u2026"));
+    try {
+      execFileSync(process.platform === "win32" ? "npm.cmd" : "npm", ["install"], { cwd: root, stdio: "inherit" });
+      done.installNeeded = false;
+    } catch {
+      out(c.yellow("! npm install failed: run it yourself (@ambasada/miniapp)"));
+    }
+  }
+  printEnabled(done, root);
+  if (moved) out(c.yellow(`! the entry moved from ${moved}: move what you built there, and delete the old in-app files if you don't need them`));
+}
+function printEnabled(done, root) {
+  out(`${c.green("\u2713")} mini app on at ${c.bold(done.entry)}`);
+  for (const f of done.patched) out(`  ${c.dim("changed")} ${f}`);
+  for (const f of done.written) out(`  ${c.dim("added")}   ${f}`);
+  out(`  ${c.dim("/.well-known/ambasada.json: written from ambasada.config.ts by `ambasada dev` and `deploy`")}`);
+  if (done.written.some((f) => f.endsWith("icon.png"))) out(`  ${c.dim("icon.png is a placeholder: replace it with your 1024\xD71024 PNG, no transparency")}`);
+  for (const m of done.manual) out(c.yellow(`! by hand: ${m}`));
+  if (done.installNeeded && existsSync6(join7(root, "node_modules"))) out(`  then: npm install ${c.dim("(@ambasada/miniapp)")}`);
+}
+
+// src/check.ts
+var merge2 = (into, from) => {
+  into.problems.push(...from.problems);
+  into.warnings.push(...from.warnings);
+};
+async function checkLocal(dir, opts) {
+  const target2 = resolvePath3(dir);
+  const report = { ok: true, target: target2, problems: [], warnings: [], notes: [] };
+  const { app, miniapp: miniapp2 } = opts ?? miniappOfSource(target2);
+  const state = miniappState(target2, miniapp2);
+  report.miniapp = { on: state.on, entry: state.entry };
+  if (!state.on) {
+    report.notes.push("mini app: off (`ambasada miniapp enable` adds one)");
+    report.notes.push("the product rules (https, no redirects, response time) need a URL: `ambasada check https://\u2026`");
+    return report;
+  }
+  let manifest = null;
+  let staticRoot;
+  if (state.file) {
+    staticRoot = dirname5(dirname5(state.file));
+    try {
+      manifest = JSON.parse(readFileSync5(state.file, "utf8"));
+      merge2(report, validateManifest(manifest));
+    } catch (error) {
+      report.problems.push({ code: "manifest_json", message: `${state.file} is not valid JSON: ${error.message}` });
+    }
+    if (miniapp2 && manifest && manifest.entry !== miniapp2.entry) {
+      report.warnings.push({ code: "entry_mismatch", message: `ambasada.config.ts says miniapp.entry ${miniapp2.entry}, your ${state.file} says ${JSON.stringify(manifest.entry)}: yours wins` });
+    }
+  } else {
+    staticRoot = join8(target2, staticDir(templateOf(target2)));
+    manifest = appManifest(app ?? { id: "my-app", name: "My App", description: "" }, miniapp2);
+    merge2(report, validateManifest(manifest));
+    report.notes.push("manifest: generated from ambasada.config.ts (`ambasada dev` and `deploy` serve it)");
+  }
+  const iconPath = typeof manifest?.icon === "string" && manifest.icon.startsWith("/") ? join8(staticRoot, manifest.icon) : null;
+  if (iconPath) {
+    if (!existsSync7(iconPath)) report.problems.push({ code: "icon_missing", message: `the manifest's icon ${manifest.icon} is not in ${staticRoot}` });
+    else merge2(report, checkIcon(readFileSync5(iconPath)));
+  } else if (manifest && typeof manifest.icon === "string") report.notes.push(`icon ${manifest.icon}: not a local path, not checked`);
+  const entry2 = state.entry ?? "/";
+  const pages = entry2 === "/" ? [join8(staticRoot, "index.html")] : [join8(staticRoot, `${entry2.slice(1)}.html`), join8(staticRoot, entry2.slice(1), "index.html")];
+  const page = pages.find((p) => existsSync7(p));
+  if (page) merge2(report, checkHtml(readFileSync5(page, "utf8")));
+  else report.notes.push(`no static ${pages[0]}: the entry page is rendered by the app, checked by \`ambasada check <url>\` once deployed`);
+  report.ok = report.problems.length === 0;
+  return report;
+}
 
 // src/storage.ts
 import { createHash } from "node:crypto";
-import { existsSync as existsSync8 } from "node:fs";
-import { mkdtemp, readdir as readdir2, readFile as readFile5, rm as rm4, writeFile as writeFile5 } from "node:fs/promises";
+import { existsSync as existsSync10 } from "node:fs";
+import { mkdtemp, readdir as readdir2, readFile as readFile6, rm as rm5, writeFile as writeFile6 } from "node:fs/promises";
 import { tmpdir } from "node:os";
-import { basename as basename2, extname as extname2, join as join9 } from "node:path";
+import { basename as basename2, extname as extname2, join as join11 } from "node:path";
 import { createInterface } from "node:readline";
 
 // src/deploy.ts
-import { execFileSync as execFileSync2, spawn as spawn2 } from "node:child_process";
-import { existsSync as existsSync7 } from "node:fs";
-import { mkdir as mkdir3, readdir, readFile as readFile4, rm as rm3, stat, writeFile as writeFile4 } from "node:fs/promises";
+import { execFileSync as execFileSync3, spawn as spawn2 } from "node:child_process";
+import { existsSync as existsSync9 } from "node:fs";
+import { mkdir as mkdir4, readdir, readFile as readFile5, rm as rm4, stat, writeFile as writeFile5 } from "node:fs/promises";
 import { createServer as createServer2 } from "node:net";
-import { basename, dirname as dirname5, extname, join as join8, relative as relative3, resolve as resolvePath4, sep } from "node:path";
+import { basename, dirname as dirname6, extname, join as join10, relative as relative4, resolve as resolvePath4, sep } from "node:path";
 
 // src/upgrade.ts
-import { execFileSync } from "node:child_process";
-import { existsSync as existsSync6, readdirSync as readdirSync3, statSync as statSync3 } from "node:fs";
-import { mkdir as mkdir2, readFile as readFile3, rm as rm2, writeFile as writeFile3 } from "node:fs/promises";
-import { join as join7, relative as relative2 } from "node:path";
-var VERSION2 = true ? "0.8.2" : "0.1.0-dev";
+import { execFileSync as execFileSync2 } from "node:child_process";
+import { existsSync as existsSync8, readdirSync as readdirSync3, statSync as statSync3 } from "node:fs";
+import { mkdir as mkdir3, readFile as readFile4, rm as rm3, writeFile as writeFile4 } from "node:fs/promises";
+import { join as join9, relative as relative3 } from "node:path";
+var VERSION2 = true ? "0.8.4" : "0.1.0-dev";
 var RELEASE_SPEC = /^\d+\.\d+\.\d+$/.test(VERSION2) ? `^${VERSION2}` : "latest";
-var PROJECT_FILE = join7(".ambasada", "project.json");
-var out = (s = "") => process.stdout.write(`${s}
+var PROJECT_FILE = join9(".ambasada", "project.json");
+var out2 = (s = "") => process.stdout.write(`${s}
 `);
 async function readProjectInfo(root) {
   try {
-    return JSON.parse(await readFile3(join7(root, PROJECT_FILE), "utf8"));
+    return JSON.parse(await readFile4(join9(root, PROJECT_FILE), "utf8"));
   } catch {
     return null;
   }
 }
 async function writeProjectInfo(root, info) {
-  await mkdir2(join7(root, ".ambasada"), { recursive: true });
-  await writeFile3(join7(root, PROJECT_FILE), `${JSON.stringify(info, null, 2)}
+  await mkdir3(join9(root, ".ambasada"), { recursive: true });
+  await writeFile4(join9(root, PROJECT_FILE), `${JSON.stringify(info, null, 2)}
 `);
 }
 var devkitVersion = () => VERSION2;
@@ -2643,16 +3074,20 @@ AMBASADA_VILLAGE_API_URL=${OLD_VILLAGE_URL}`);
   return source.replace(m[0], `${m[0]}
 AMBASADA_VILLAGE_API_URL=${url}`);
 }
+function rewriteUiLink(source, line) {
+  return source.replace(/(unpkg\.com\/@ambasada\/ui@)(\d+\.\d+)(?=\/)/g, (m, prefix, at) => at === line ? m : `${prefix}${line}`);
+}
 var SOURCE = /\.(m?[jt]sx?)$/;
+var WEB = /\.(m?[jt]sx?|html?)$/;
 var SKIP_DIRS = /* @__PURE__ */ new Set(["node_modules", ".next", ".open-next", ".wrangler", "dist", ".git", ".ambasada", ".claude"]);
-function sourceFiles(root) {
+function sourceFiles(root, pattern = SOURCE) {
   const found = [];
   const walk2 = (dir) => {
     for (const name of readdirSync3(dir)) {
       if (SKIP_DIRS.has(name)) continue;
-      const path = join7(dir, name);
+      const path = join9(dir, name);
       if (statSync3(path).isDirectory()) walk2(path);
-      else if (SOURCE.test(name) && !name.endsWith(".d.ts")) found.push(path);
+      else if (pattern.test(name) && !name.endsWith(".d.ts")) found.push(path);
     }
   };
   walk2(root);
@@ -2660,12 +3095,12 @@ function sourceFiles(root) {
 }
 async function usesVillage(root, pkg) {
   if (pkg.dependencies?.["@ambasada/village"] || pkg.devDependencies?.["@ambasada/village"]) return true;
-  if (existsSync6(join7(root, "offerings.ts")) || existsSync6(join7(root, "product/offerings.ts"))) return true;
-  const config = await readFile3(join7(root, CONFIG_FILE), "utf8").catch(() => "");
+  if (existsSync8(join9(root, "offerings.ts")) || existsSync8(join9(root, "product/offerings.ts"))) return true;
+  const config = await readFile4(join9(root, CONFIG_FILE), "utf8").catch(() => "");
   return /\bdefineCompany\b|\bidea\s*:/.test(config);
 }
-function templateOf(root) {
-  return detectStack(root)?.name ?? (existsSync6(join7(root, "src/worker.ts")) ? "worker" : "next");
+function templateOf2(root) {
+  return detectStack(root)?.name ?? (existsSync8(join9(root, "src/worker.ts")) ? "worker" : "next");
 }
 var specFor = (name) => process.env[`AMBASADA_${name.replace(/^@ambasada\//, "").toUpperCase()}_SPEC`] ?? RELEASE_SPEC;
 async function upgrade(_args, flags) {
@@ -2673,16 +3108,16 @@ async function upgrade(_args, flags) {
   if (!root) throw new CliError(`run \`ambasada upgrade\` inside your app (no ${CONFIG_FILE} found)`);
   const checkOnly = flags.check === true;
   const info = await readProjectInfo(root);
-  const pkgFile = join7(root, "package.json");
-  const pkg = JSON.parse(await readFile3(pkgFile, "utf8"));
+  const pkgFile = join9(root, "package.json");
+  const pkg = JSON.parse(await readFile4(pkgFile, "utf8"));
   const village = await usesVillage(root, pkg);
-  const template = info?.template && TEMPLATES.includes(info.template) ? info.template : templateOf(root);
+  const template = info?.template && TEMPLATES.includes(info.template) ? info.template : templateOf2(root);
   const changes = [];
-  const rel = (p) => relative2(root, p);
+  const rel = (p) => relative3(root, p);
   const before08 = !info || /^0\.[0-7]\./.test(info.devkit) && !info.devkit.includes("-dev");
   const edits = /* @__PURE__ */ new Map();
   for (const file of before08 ? sourceFiles(root) : []) {
-    const text = await readFile3(file, "utf8");
+    const text = await readFile4(file, "utf8");
     if (!text.includes("@ambasada/sdk")) continue;
     const next = rewriteImports(text, village);
     if (next !== text) {
@@ -2691,15 +3126,27 @@ async function upgrade(_args, flags) {
     }
   }
   for (const name of before08 ? [".env", ".dev.vars"] : []) {
-    const file = join7(root, name);
-    if (!existsSync6(file)) continue;
-    const text = await readFile3(file, "utf8");
+    const file = join9(root, name);
+    if (!existsSync8(file)) continue;
+    const text = await readFile4(file, "utf8");
     const next = rewriteEnv(text, village);
     if (next !== text) {
       edits.set(file, next);
       changes.push(`${name}: AMBASADA_VILLAGE_API_URL`);
     }
   }
+  const uiLine = VERSION2.split(".").slice(0, 2).join(".");
+  if (/^\d+\.\d+$/.test(uiLine) && !VERSION2.includes("-dev")) {
+    for (const file of sourceFiles(root, WEB)) {
+      const text = edits.get(file) ?? await readFile4(file, "utf8");
+      if (!text.includes("@ambasada/ui@")) continue;
+      const next = rewriteUiLink(text, uiLine);
+      if (next !== text) {
+        edits.set(file, next);
+        changes.push(`${rel(file)}: @ambasada/ui link \u2192 ${uiLine}`);
+      }
+    }
+  }
   const deps = { ...pkg.dependencies };
   const devDeps = { ...pkg.devDependencies };
   for (const table2 of [deps, devDeps]) {
@@ -2720,10 +3167,10 @@ async function upgrade(_args, flags) {
   const skills = {};
   for (const [path, text] of Object.entries(templateFiles(template))) if (path.startsWith(".claude/skills/ambasada-")) skills[path] = text.replaceAll("my-app", idName.id).replaceAll("My App", idName.name);
   const stale = [];
-  const skillsDir = join7(root, ".claude/skills");
-  if (existsSync6(join7(skillsDir, "ambasada-payments"))) stale.push("ambasada-payments");
+  const skillsDir = join9(root, ".claude/skills");
+  if (existsSync8(join9(skillsDir, "ambasada-payments"))) stale.push("ambasada-payments");
   for (const [path, text] of Object.entries(skills)) {
-    const current2 = await readFile3(join7(root, path), "utf8").catch(() => null);
+    const current2 = await readFile4(join9(root, path), "utf8").catch(() => null);
     if (current2 !== text) changes.push(`${path.split("/").slice(0, 3).join("/")}: re-synced`);
   }
   const nextInfo = { template, devkit: VERSION2, addons: village ? ["village"] : info?.addons ?? [] };
@@ -2734,28 +3181,28 @@ async function upgrade(_args, flags) {
   const from = info?.devkit ?? "0.7";
   if (checkOnly) {
     if (!uniqueChanges.length && !stale.length) {
-      out(`${c.green("\u2713")} up to date with the devkit ${VERSION2}`);
+      out2(`${c.green("\u2713")} up to date with the devkit ${VERSION2}`);
       return;
     }
-    out(`devkit ${from} \u2192 ${VERSION2}:`);
-    for (const line of uniqueChanges) out(`  ${line}`);
-    for (const s of stale) out(`  .claude/skills/${s}: removed`);
+    out2(`devkit ${from} \u2192 ${VERSION2}:`);
+    for (const line of uniqueChanges) out2(`  ${line}`);
+    for (const s of stale) out2(`  .claude/skills/${s}: removed`);
     throw new CliError("`ambasada upgrade` would change the above", 1);
   }
-  for (const [file, text] of edits) await writeFile3(file, text);
+  for (const [file, text] of edits) await writeFile4(file, text);
   pkg.dependencies = deps;
   if (pkg.devDependencies) pkg.devDependencies = devDeps;
-  await writeFile3(pkgFile, `${JSON.stringify(pkg, null, 2)}
+  await writeFile4(pkgFile, `${JSON.stringify(pkg, null, 2)}
 `);
   for (const [path, text] of Object.entries(skills)) {
-    await mkdir2(join7(root, path, ".."), { recursive: true });
-    await writeFile3(join7(root, path), text);
+    await mkdir3(join9(root, path, ".."), { recursive: true });
+    await writeFile4(join9(root, path), text);
   }
-  for (const s of stale) await rm2(join7(skillsDir, s), { recursive: true, force: true });
+  for (const s of stale) await rm3(join9(skillsDir, s), { recursive: true, force: true });
   if (!flags["no-install"]) {
-    out(c.dim("npm install \u2026"));
+    out2(c.dim("npm install \u2026"));
     try {
-      execFileSync(process.platform === "win32" ? "npm.cmd" : "npm", ["install"], { cwd: root, stdio: "inherit" });
+      execFileSync2(process.platform === "win32" ? "npm.cmd" : "npm", ["install"], { cwd: root, stdio: "inherit" });
     } catch {
       throw new CliError(`npm install failed in ${root}: fix it, then \`ambasada upgrade\` again`);
     }
@@ -2764,33 +3211,33 @@ async function upgrade(_args, flags) {
   setAddons(addons2);
   for (const addon of addons2.list) {
     for (const [path, text] of Object.entries(addon.skills)) {
-      const file = join7(skillsDir, path);
-      await mkdir2(join7(file, ".."), { recursive: true });
-      await writeFile3(file, text);
+      const file = join9(skillsDir, path);
+      await mkdir3(join9(file, ".."), { recursive: true });
+      await writeFile4(file, text);
     }
   }
-  if (village && !addons2.get("village")) out(c.yellow("! @ambasada/village is in package.json but not installed yet: run `npm install`, then `ambasada upgrade` again for its skill"));
+  if (village && !addons2.get("village")) out2(c.yellow("! @ambasada/village is in package.json but not installed yet: run `npm install`, then `ambasada upgrade` again for its skill"));
   await writeProjectInfo(root, nextInfo);
-  for (const line of uniqueChanges) out(`${c.green("\u2713")} ${line}`);
-  for (const s of stale) out(`${c.green("\u2713")} .claude/skills/${s}: removed (now ambasada-village)`);
+  for (const line of uniqueChanges) out2(`${c.green("\u2713")} ${line}`);
+  for (const s of stale) out2(`${c.green("\u2713")} .claude/skills/${s}: removed (now ambasada-village)`);
   const report = await checkLocal(root).catch(() => null);
-  for (const p of report?.problems ?? []) out(`${c.yellow("!")} ${p.message} ${c.dim(`(${p.code}, \`ambasada check\`)`)}`);
-  out(`${c.green("\u2713")} devkit ${from} \u2192 ${VERSION2}`);
+  for (const p of report?.problems ?? []) out2(`${c.yellow("!")} ${p.message} ${c.dim(`(${p.code}, \`ambasada check\`)`)}`);
+  out2(`${c.green("\u2713")} devkit ${from} \u2192 ${VERSION2}`);
   if (before08) {
-    out("");
-    out(`Then ask your coding agent: ${c.bold(`"run the Ambasada upgrade steps for 0.7 \u2192 0.8"`)} (.claude/skills/ambasada-product/reference/upgrading.md)`);
+    out2("");
+    out2(`Then ask your coding agent: ${c.bold(`"run the Ambasada upgrade steps for 0.7 \u2192 0.8"`)} (.claude/skills/ambasada-product/reference/upgrading.md)`);
   }
 }
 
 // src/deploy.ts
-var out2 = (s = "") => process.stdout.write(`${s}
+var out3 = (s = "") => process.stdout.write(`${s}
 `);
 var LIMITS = { assets: 1e3, assetBytes: 25 * 1024 * 1024 };
 var WEBHOOK_FILES = ["app/api/webhook/route.ts", "app/api/webhook/route.js", "src/app/api/webhook/route.ts", "api/webhook.ts", "src/api/webhook.ts", "functions/api/webhook.ts", "product/api/webhook.ts"];
 var PLATFORM_STORAGE = { d1: "DB", kv: "KV", r2: "FILES" };
 async function deploy(_args, flags) {
   const project = await loadProject();
-  const hooks = (url = project.config.product?.url) => addons().afterDeploy({ event: "deploy", project, url, flags, out: out2 });
+  const hooks = (url = project.config.product?.url) => addons().afterDeploy({ event: "deploy", project, url, flags, out: out3 });
   if (flags["agent-only"] || flags["offerings-only"]) {
     if (!addons().get("village")) throw new CliError("--agent-only and --offerings-only belong to the village add-on: `ambasada add village`");
     return hooks();
@@ -2798,47 +3245,52 @@ async function deploy(_args, flags) {
   const dir = findProductDir(project.root);
   if (!dir) {
     if (!project.config.product?.url || !addons().list.length) productDir(project.root);
-    out2(c.dim(`no wrangler.jsonc: not hosting ${project.config.product.url}`));
+    out3(c.dim(`no wrangler.jsonc: not hosting ${project.config.product.url}`));
     return hooks();
   }
   const template = detectTemplate(dir);
   if (!flags.own && await isMockApi((await resolve(flags)).apiUrl)) {
-    out2(c.dim("ambasada dev does not host apps (deploy without --api-url to go live)"));
+    out3(c.dim("ambasada dev does not host apps (deploy without --api-url to go live)"));
     return hooks();
   }
+  const r = flags.own || flags["dry-run"] ? await resolve(flags) : await resolveForApp(flags);
+  if (!flags.own && !flags["dry-run"] && !r.apiKey) throw new CliError("not logged in: run `ambasada login` (or set AMBASADA_API_KEY)");
+  const inApp = await syncManifest(project.root, project.config);
+  out3(stateLine(inApp));
   if (!flags["no-build"]) await build(dir, template);
   if (flags.own) {
-    out2(c.bold("wrangler deploy (your Cloudflare account)"));
+    out3(c.bold("wrangler deploy (your Cloudflare account)"));
     const output = await run(bin(dir, "wrangler"), ["deploy"], dir, { capture: true });
     const url = /https:\/\/[^\s]+\.workers\.dev|https:\/\/[a-z0-9.-]+\.[a-z]{2,}(?=\s|$)/m.exec(output)?.[0];
     if (!url) throw new CliError("wrangler deployed, but I could not read the URL from its output: run `ambasada link https://\u2026` yourself");
     await link([url], flags);
-    return addons().afterDeploy({ event: "deploy", project: await loadProject(project.root), url, flags: { ...flags, "agent-only": true }, out: out2 });
+    return addons().afterDeploy({ event: "deploy", project: await loadProject(project.root), url, flags: { ...flags, "agent-only": true }, out: out3 });
   }
   const built = await bundle(dir, template);
   durableObjects(built.config);
-  for (const warning of storageWarnings(built.config)) out2(c.yellow(`! ${warning}`));
-  out2(`${c.green("\u2713")} built ${c.bold(template)}: ${built.modules.length} module(s), ${built.assets.length} static file(s)`);
+  for (const warning of storageWarnings(built.config)) out3(c.yellow(`! ${warning}`));
+  out3(`${c.green("\u2713")} built ${c.bold(template)}: ${built.modules.length} module(s), ${built.assets.length} static file(s)`);
   const smoked = flags["no-smoke"] ? { ok: false, skipped: true, checks: [], ms: null } : await smoke(built, project.config.id);
-  const r = await resolve(flags);
   const metadata = { ...deployMetadata(built, project.root), report: { template, devkit: devkitVersion(), smoke: smoked, git: gitInfo(project.root) } };
   if (flags["dry-run"]) {
-    out2(`would POST ${r.apiUrl}/v1/product/deploy ${JSON.stringify({ ...metadata, modules: built.modules.map((m) => m.name), assets: built.assets.length })}`);
+    out3(`would POST ${r.apiUrl}/v1/product/deploy ${JSON.stringify({ ...metadata, modules: built.modules.map((m) => m.name), assets: built.assets.length })}`);
     return hooks();
   }
-  if (!r.apiKey) throw new CliError("not logged in: run `ambasada login` (or set AMBASADA_API_KEY)");
   const deployment = await upload(r.apiUrl, r.apiKey, built, metadata);
-  out2(`${c.green("\u2713")} live at ${c.bold(c.cyan(deployment.url))} ${c.dim(`v${deployment.version}, ${kb(deployment.bundle_bytes)} gzipped`)}`);
-  for (const line of resourceLines(deployment.resources)) out2(line);
-  if (deployment.offerings_moved?.length) out2(`  offerings moved to it: ${deployment.offerings_moved.join(", ")}`);
-  if (deployment.webhook) out2(`  webhooks \u2192 ${deployment.webhook}`);
-  if (deployment.tier) {
+  out3(`${c.green("\u2713")} live at ${c.bold(c.cyan(deployment.url))} ${c.dim(`v${deployment.version}, ${kb(deployment.bundle_bytes)} gzipped`)}`);
+  for (const line of resourceLines(deployment.resources)) out3(line);
+  if (deployment.offerings_moved?.length) out3(`  offerings moved to it: ${deployment.offerings_moved.join(", ")}`);
+  if (deployment.webhook) out3(`  webhooks \u2192 ${deployment.webhook}`);
+  if (deployment.miniapp === false) {
+    out3(`  ${c.dim("mini app: off, not in the Ambasada app (`ambasada miniapp enable` adds one)")}`);
+    for (const issue of deployment.check?.issues.filter((i) => i.level === "problem") ?? []) out3(c.yellow(`! ${issue.message}`));
+  } else if (deployment.tier) {
     const line = listingLine(deployment.tier, deployment.check);
-    out2(`  ${deployment.tier === "listed" || deployment.tier === "verified" ? c.green("\u2713") : c.yellow("!")} in the Ambasada app: ${line}`);
-    for (const issue of deployment.check?.issues.filter((i) => i.level === "problem") ?? []) out2(c.dim(`    ${issue.message}`));
+    out3(`  ${deployment.tier === "listed" || deployment.tier === "verified" ? c.green("\u2713") : c.yellow("!")} in the Ambasada app: ${line}`);
+    for (const issue of deployment.check?.issues.filter((i) => i.level === "problem") ?? []) out3(c.dim(`    ${issue.message}`));
   }
   if (!await setProductUrl(project.root, deployment.url)) {
-    out2(c.yellow(`! add \`product: { url: "${deployment.url}" }\` to ambasada.config.ts`));
+    out3(c.yellow(`! add \`product: { url: "${deployment.url}" }\` to ambasada.config.ts`));
   }
   if (deployment.kind === "project") return;
   await hooks(deployment.url);
@@ -2853,41 +3305,41 @@ async function isMockApi(apiUrl) {
   }
 }
 function findProductDir(root) {
-  for (const d of [root, join8(root, "product")]) if (["wrangler.jsonc", "wrangler.json"].some((f) => existsSync7(join8(d, f)))) return d;
+  for (const d of [root, join10(root, "product")]) if (["wrangler.jsonc", "wrangler.json"].some((f) => existsSync9(join10(d, f)))) return d;
   return null;
 }
 function productDir(root) {
   const dir = findProductDir(root);
   if (dir) return dir;
-  if (existsSync7(join8(root, "wrangler.toml"))) throw new CliError("wrangler.toml is not supported by `ambasada deploy`: use wrangler.jsonc");
+  if (existsSync9(join10(root, "wrangler.toml"))) throw new CliError("wrangler.toml is not supported by `ambasada deploy`: use wrangler.jsonc");
   throw new CliError("no wrangler.jsonc here, so `ambasada deploy` can't host this app. Host it anywhere and `ambasada link <url>`");
 }
 function detectTemplate(dir) {
-  const has = (...files2) => files2.some((f) => existsSync7(join8(dir, f)));
+  const has = (...files2) => files2.some((f) => existsSync9(join10(dir, f)));
   if (has("open-next.config.ts", "open-next.config.js", "next.config.ts", "next.config.js", "next.config.mjs")) return "next";
   if (has("vite.config.ts", "vite.config.js", "vite.config.mjs", "vite.config.mts")) return "spa";
   return "worker";
 }
 async function build(dir, template) {
   if (template === "next") {
-    out2(c.bold("opennextjs-cloudflare build"));
+    out3(c.bold("opennextjs-cloudflare build"));
     await run(bin(dir, "opennextjs-cloudflare", "@opennextjs/cloudflare"), ["build"], dir);
   } else if (template === "spa") {
-    out2(c.bold("vite build"));
+    out3(c.bold("vite build"));
     await run(bin(dir, "vite"), ["build"], dir);
   }
 }
 async function bundle(dir, template) {
   const { file: configFile, config } = await readWranglerConfig(dir);
-  const outdir = join8(dir, ".ambasada", "deploy");
-  await rm3(outdir, { recursive: true, force: true });
+  const outdir = join10(dir, ".ambasada", "deploy");
+  await rm4(outdir, { recursive: true, force: true });
   await run(bin(dir, "wrangler"), ["deploy", "--dry-run", "--outdir", outdir], dir, { capture: true });
-  const modules = (await walk(outdir)).map((path) => ({ name: relative3(outdir, path).split(sep).join("/"), path })).filter((m) => !m.name.endsWith(".map") && m.name !== "README.md");
+  const modules = (await walk(outdir)).map((path) => ({ name: relative4(outdir, path).split(sep).join("/"), path })).filter((m) => !m.name.endsWith(".map") && m.name !== "README.md");
   const wanted = config.main ? `${basename(config.main, extname(config.main))}.js` : "index.js";
   const main2 = modules.find((m) => m.name === wanted) ?? modules.find((m) => m.name === "index.js") ?? (modules.filter((m) => /\.m?js$/.test(m.name)).length === 1 ? modules.find((m) => /\.m?js$/.test(m.name)) : void 0);
   if (!main2) throw new CliError(`wrangler wrote ${modules.map((m) => m.name).join(", ") || "nothing"} to ${outdir}: can't tell which is the main module`);
-  const assetsDir = config.assets?.directory ? resolvePath4(dirname5(configFile), config.assets.directory) : null;
-  const assets = assetsDir && existsSync7(assetsDir) ? await collectAssets(assetsDir) : [];
+  const assetsDir = config.assets?.directory ? resolvePath4(dirname6(configFile), config.assets.directory) : null;
+  const assets = assetsDir && existsSync9(assetsDir) ? await collectAssets(assetsDir) : [];
   if (assets.length > LIMITS.assets) throw new CliError(`${assets.length} static files in ${assetsDir}; ambasada.dev hosts up to ${LIMITS.assets}`);
   const big = assets.find((a) => a.size > LIMITS.assetBytes);
   if (big) throw new CliError(`${big.file} is ${kb(big.size)}; static files are at most 25 MB`);
@@ -2897,7 +3349,7 @@ function deployMetadata(built, root) {
   const a = built.config.assets ?? {};
   const assetsConfig = Object.fromEntries(Object.entries({ html_handling: a.html_handling, not_found_handling: a.not_found_handling, run_worker_first: a.run_worker_first }).filter(([, v]) => v !== void 0));
   const vars = Object.fromEntries(Object.entries(built.config.vars ?? {}).filter(([k, v]) => typeof v === "string" && !/^(AMBASADA|VILLAGE)_/.test(k)));
-  const webhook = WEBHOOK_FILES.some((f) => existsSync7(join8(root, f)) || existsSync7(join8(built.dir, f)));
+  const webhook = WEBHOOK_FILES.some((f) => existsSync9(join10(root, f)) || existsSync9(join10(built.dir, f)));
   return {
     main_module: built.mainModule,
     compatibility_date: built.config.compatibility_date,
@@ -2911,9 +3363,9 @@ function deployMetadata(built, root) {
 }
 function durableObjects(config) {
   const bindings = config.durable_objects?.bindings ?? [];
-  const out6 = {};
+  const out7 = {};
   if (bindings.length) {
-    out6.durable_objects = bindings.map((b) => {
+    out7.durable_objects = bindings.map((b) => {
       if (!b.name || !b.class_name) throw new CliError("every durable_objects.bindings entry in wrangler.jsonc needs a name and a class_name");
       if (b.script_name) throw new CliError(`durable_objects binding ${b.name} points at another Worker (script_name ${b.script_name}): on ambasada.dev a Durable Object lives in its own app's Worker; export ${b.class_name} from this one and drop script_name`);
       return { name: b.name, class_name: b.class_name };
@@ -2921,13 +3373,13 @@ function durableObjects(config) {
   }
   const migrations = config.migrations ?? [];
   if (migrations.length) {
-    out6.migrations = migrations.map((m) => {
+    out7.migrations = migrations.map((m) => {
       if (!m || typeof m.tag !== "string" || !m.tag) throw new CliError("every entry of `migrations` in wrangler.jsonc needs a tag");
       const keep = ["tag", "new_sqlite_classes", "new_classes", "renamed_classes", "deleted_classes", "transferred_classes"];
       return Object.fromEntries(keep.filter((k) => m[k] !== void 0).map((k) => [k, m[k]]));
     });
   }
-  return out6;
+  return out7;
 }
 function storageWarnings(config) {
   const warnings = [];
@@ -2942,17 +3394,17 @@ function storageWarnings(config) {
   return warnings;
 }
 function localBindings(config) {
-  const out6 = {};
+  const out7 = {};
   const d1 = (config.d1_databases ?? []).filter((b) => b.binding);
-  if (d1.length) out6.d1_databases = d1.map((b) => ({ binding: b.binding, database_name: b.database_name ?? `local-${b.binding.toLowerCase()}`, database_id: b.database_id ?? `local-${b.binding.toLowerCase()}` }));
+  if (d1.length) out7.d1_databases = d1.map((b) => ({ binding: b.binding, database_name: b.database_name ?? `local-${b.binding.toLowerCase()}`, database_id: b.database_id ?? `local-${b.binding.toLowerCase()}` }));
   const kv2 = (config.kv_namespaces ?? []).filter((b) => b.binding);
-  if (kv2.length) out6.kv_namespaces = kv2.map((b) => ({ binding: b.binding, id: b.id ?? `local-${b.binding.toLowerCase()}` }));
+  if (kv2.length) out7.kv_namespaces = kv2.map((b) => ({ binding: b.binding, id: b.id ?? `local-${b.binding.toLowerCase()}` }));
   const r2 = (config.r2_buckets ?? []).filter((b) => b.binding);
-  if (r2.length) out6.r2_buckets = r2.map((b) => ({ binding: b.binding, bucket_name: b.bucket_name ?? `local-${b.binding.toLowerCase()}` }));
+  if (r2.length) out7.r2_buckets = r2.map((b) => ({ binding: b.binding, bucket_name: b.bucket_name ?? `local-${b.binding.toLowerCase()}` }));
   const dos = (config.durable_objects?.bindings ?? []).filter((b) => b.name && b.class_name && !b.script_name);
-  if (dos.length) out6.durable_objects = { bindings: dos.map((b) => ({ name: b.name, class_name: b.class_name })) };
-  if (config.migrations?.length) out6.migrations = config.migrations;
-  return out6;
+  if (dos.length) out7.durable_objects = { bindings: dos.map((b) => ({ name: b.name, class_name: b.class_name })) };
+  if (config.migrations?.length) out7.migrations = config.migrations;
+  return out7;
 }
 function resourceLines(r) {
   if (!r) return [];
@@ -2979,9 +3431,9 @@ function resourceLines(r) {
 async function upload(apiUrl, apiKey, built, metadata) {
   const form = new FormData();
   form.append("metadata", new Blob([JSON.stringify(metadata)], { type: "application/json" }));
-  for (const m of built.modules) form.append(`module:${m.name}`, new Blob([await readFile4(m.path)], { type: /\.m?js$/.test(m.name) ? "application/javascript+module" : "" }), m.name);
-  for (const a of built.assets) form.append(`asset:${a.path}`, new Blob([await readFile4(a.file)]), basename(a.file));
-  out2(c.dim(`uploading to ${apiUrl} \u2026`));
+  for (const m of built.modules) form.append(`module:${m.name}`, new Blob([await readFile5(m.path)], { type: /\.m?js$/.test(m.name) ? "application/javascript+module" : "" }), m.name);
+  for (const a of built.assets) form.append(`asset:${a.path}`, new Blob([await readFile5(a.file)]), basename(a.file));
+  out3(c.dim(`uploading to ${apiUrl} \u2026`));
   let res;
   try {
     res = await fetch(`${apiUrl}/v1/product/deploy`, { method: "POST", headers: { authorization: `Bearer ${apiKey}`, accept: "application/json" }, body: form, signal: AbortSignal.timeout(3e5) });
@@ -2994,14 +3446,14 @@ async function upload(apiUrl, apiKey, built, metadata) {
 }
 async function smoke(built, company) {
   const started = Date.now();
-  const smokeDir = join8(built.dir, ".ambasada", "smoke");
-  await rm3(smokeDir, { recursive: true, force: true });
-  await mkdir3(smokeDir, { recursive: true });
-  const outdir = dirname5(built.modules.find((m) => m.name === built.mainModule).path);
+  const smokeDir = join10(built.dir, ".ambasada", "smoke");
+  await rm4(smokeDir, { recursive: true, force: true });
+  await mkdir4(smokeDir, { recursive: true });
+  const outdir = dirname6(built.modules.find((m) => m.name === built.mainModule).path);
   const a = built.config.assets;
   const config = {
     name: built.config.name ?? company,
-    main: join8(outdir, built.mainModule),
+    main: join10(outdir, built.mainModule),
     compatibility_date: built.config.compatibility_date,
     compatibility_flags: built.config.compatibility_flags ?? [],
     no_bundle: true,
@@ -3013,20 +3465,20 @@ async function smoke(built, company) {
     // DB, KV, FILES and the Durable Objects as wrangler simulates them locally, in a fresh state under .ambasada/smoke.
     ...localBindings(built.config)
   };
-  const configPath2 = join8(smokeDir, "wrangler.json");
-  await writeFile4(configPath2, JSON.stringify(config, null, 2));
-  const persistTo = join8(smokeDir, "state");
+  const configPath2 = join10(smokeDir, "wrangler.json");
+  await writeFile5(configPath2, JSON.stringify(config, null, 2));
+  const persistTo = join10(smokeDir, "state");
   if (config.d1_databases?.some((d) => d.binding === PLATFORM_STORAGE.d1)) {
     const root = findRoot(built.dir) ?? built.dir;
     try {
       await migrateLocal({ dir: built.dir, root, config: configPath2, persistTo, wrangler: bin(built.dir, "wrangler") });
     } catch (error) {
-      out2(c.yellow(`! smoke test: could not apply db/migrations locally: ${error.message.split("\n")[0]}`));
+      out3(c.yellow(`! smoke test: could not apply db/migrations locally: ${error.message.split("\n")[0]}`));
     }
   }
   const port = await freePort();
-  out2(c.dim(`smoke test: wrangler dev on :${port} \u2026`));
-  const child = spawn2(bin(built.dir, "wrangler"), ["dev", "--config", join8(smokeDir, "wrangler.json"), "--port", String(port), "--ip", "127.0.0.1", "--inspector-port", String(await freePort()), "--persist-to", persistTo, "--show-interactive-dev-session=false", "--log-level", "error"], {
+  out3(c.dim(`smoke test: wrangler dev on :${port} \u2026`));
+  const child = spawn2(bin(built.dir, "wrangler"), ["dev", "--config", join10(smokeDir, "wrangler.json"), "--port", String(port), "--ip", "127.0.0.1", "--inspector-port", String(await freePort()), "--persist-to", persistTo, "--show-interactive-dev-session=false", "--log-level", "error"], {
     cwd: built.dir,
     stdio: ["ignore", "pipe", "pipe"],
     env: { ...process.env, WRANGLER_SEND_METRICS: "false", CI: "1" }
@@ -3048,17 +3500,17 @@ ${(await res.text()).slice(0, 500)}`);
       await res.body?.cancel();
       checks.push({ method: check2.method, path: check2.path, status: res.status });
     }
-    out2(`${c.green("\u2713")} smoke test: ${checks.map((k) => `${k.method} ${k.path} ${k.status}`).join(", ")}`);
+    out3(`${c.green("\u2713")} smoke test: ${checks.map((k) => `${k.method} ${k.path} ${k.status}`).join(", ")}`);
     return { ok: true, skipped: false, checks, ms: Date.now() - started };
   } finally {
     child.kill("SIGTERM");
-    await rm3(smokeDir, { recursive: true, force: true });
+    await rm4(smokeDir, { recursive: true, force: true });
   }
 }
 function gitInfo(dir) {
   const git = (...args) => {
     try {
-      return execFileSync2("git", args, { cwd: dir, stdio: ["ignore", "pipe", "ignore"], encoding: "utf8", timeout: 3e3 }).trim() || null;
+      return execFileSync3("git", args, { cwd: dir, stdio: ["ignore", "pipe", "ignore"], encoding: "utf8", timeout: 3e3 }).trim() || null;
     } catch {
       return null;
     }
@@ -3092,16 +3544,16 @@ function freePort() {
   });
 }
 async function readWranglerConfig(dir) {
-  const redirect2 = join8(dir, ".wrangler", "deploy", "config.json");
+  const redirect2 = join10(dir, ".wrangler", "deploy", "config.json");
   let file;
-  if (existsSync7(redirect2)) {
-    const target2 = JSON.parse(await readFile4(redirect2, "utf8")).configPath;
-    if (target2) file = resolvePath4(dirname5(redirect2), target2);
+  if (existsSync9(redirect2)) {
+    const target2 = JSON.parse(await readFile5(redirect2, "utf8")).configPath;
+    if (target2) file = resolvePath4(dirname6(redirect2), target2);
   }
-  file ??= ["wrangler.jsonc", "wrangler.json"].map((f) => join8(dir, f)).find((f) => existsSync7(f));
+  file ??= ["wrangler.jsonc", "wrangler.json"].map((f) => join10(dir, f)).find((f) => existsSync9(f));
   if (!file) throw new CliError(`no wrangler.jsonc in ${dir}`);
   try {
-    return { file, config: JSON.parse(stripJsonc(await readFile4(file, "utf8"))) };
+    return { file, config: JSON.parse(stripJsonc(await readFile5(file, "utf8"))) };
   } catch (error) {
     throw new CliError(`${file} is not valid JSON(C): ${error.message}`);
   }
@@ -3126,11 +3578,11 @@ function stripJsonc(text) {
   return result.replace(/,(\s*[}\]])/g, "$1");
 }
 async function collectAssets(dir) {
-  const ignore = existsSync7(join8(dir, ".assetsignore")) ? (await readFile4(join8(dir, ".assetsignore"), "utf8")).split("\n").map((l) => l.trim()).filter((l) => l && !l.startsWith("#")) : [];
+  const ignore = existsSync9(join10(dir, ".assetsignore")) ? (await readFile5(join10(dir, ".assetsignore"), "utf8")).split("\n").map((l) => l.trim()).filter((l) => l && !l.startsWith("#")) : [];
   const patterns = ignore.map((p) => new RegExp(`^${p.replace(/^\//, "").replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*\*/g, "\0").replace(/\*/g, "[^/]*").replace(/\u0000/g, ".*")}(/.*)?$`));
   const files2 = [];
   for (const file of await walk(dir)) {
-    const rel = relative3(dir, file).split(sep).join("/");
+    const rel = relative4(dir, file).split(sep).join("/");
     const name = basename(rel);
     if (name === ".assetsignore" || name === ".DS_Store" || name === "_headers" || name === "_redirects" || rel.startsWith("node_modules/")) continue;
     if (patterns.some((p) => p.test(rel) || p.test(name))) continue;
@@ -3141,17 +3593,17 @@ async function collectAssets(dir) {
 async function walk(dir) {
   const files2 = [];
   for (const entry2 of await readdir(dir, { withFileTypes: true })) {
-    const path = join8(dir, entry2.name);
+    const path = join10(dir, entry2.name);
     if (entry2.isDirectory()) files2.push(...await walk(path));
     else if (entry2.isFile()) files2.push(path);
   }
   return files2.sort();
 }
 function bin(dir, name, pkg = name) {
-  for (let d = dir; ; d = dirname5(d)) {
-    const local = join8(d, "node_modules", ".bin", name);
-    if (existsSync7(local)) return local;
-    if (dirname5(d) === d) return `npx --yes ${pkg}`;
+  for (let d = dir; ; d = dirname6(d)) {
+    const local = join10(d, "node_modules", ".bin", name);
+    if (existsSync9(local)) return local;
+    if (dirname6(d) === d) return `npx --yes ${pkg}`;
   }
 }
 function run(command, args, cwd, opts = {}) {
@@ -3172,10 +3624,10 @@ ${output.slice(-3e3)}` : ""}`));
 var kb = (n) => n > 1024 * 1024 ? `${(n / 1024 / 1024).toFixed(1)} MB` : `${Math.ceil(n / 1024)} KB`;
 
 // src/storage.ts
-var out3 = (s = "") => void process.stdout.write(`${s}
+var out4 = (s = "") => void process.stdout.write(`${s}
 `);
 var str2 = (v) => typeof v === "string" && v ? v : void 0;
-var MIGRATIONS_DIR = join9("db", "migrations");
+var MIGRATIONS_DIR = join11("db", "migrations");
 var MIGRATIONS_TABLE = "_ambasada_migrations";
 var CREATE_MIGRATIONS = `CREATE TABLE IF NOT EXISTS ${MIGRATIONS_TABLE} (id INTEGER PRIMARY KEY AUTOINCREMENT, name TEXT UNIQUE, applied_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP NOT NULL, sha256 TEXT);`;
 var PRODUCTS_DOMAIN = "ambasada.dev";
@@ -3183,11 +3635,11 @@ async function target(flags) {
   const r = await resolve(flags);
   let local = flags.local === true;
   if (!local && await isMockApi(r.apiUrl)) {
-    out3(c.dim(`${r.apiUrl} is ambasada dev: using wrangler's local state (--local)`));
+    out4(c.dim(`${r.apiUrl} is ambasada dev: using wrangler's local state (--local)`));
     local = true;
   }
   if (!local && !r.apiKey && findProductDir(findRoot() ?? process.cwd())) {
-    out3(c.dim("not logged in: using wrangler's local state (--local); `ambasada login` for the hosted app"));
+    out4(c.dim("not logged in: using wrangler's local state (--local); `ambasada login` for the hosted app"));
     local = true;
   }
   if (local) {
@@ -3197,6 +3649,7 @@ async function target(flags) {
     return { local: true, dir, root, wrangler: bin(dir, "wrangler") };
   }
   if (!r.apiKey) throw new CliError("not logged in: run `ambasada login` (or set AMBASADA_API_KEY), or add --local for wrangler's local state");
+  await resolveForApp(flags);
   return { local: false, apiUrl: r.apiUrl, apiKey: r.apiKey };
 }
 async function api(t, method, path, body) {
@@ -3246,23 +3699,23 @@ ${output.slice(-1e3)}`);
   }
 }
 async function readMigrations(root) {
-  const dir = join9(root, MIGRATIONS_DIR);
-  if (!existsSync8(dir)) return [];
+  const dir = join11(root, MIGRATIONS_DIR);
+  if (!existsSync10(dir)) return [];
   const names2 = (await readdir2(dir)).filter((f) => f.endsWith(".sql")).sort();
-  return Promise.all(names2.map(async (name) => ({ name, sql: await readFile5(join9(dir, name), "utf8") })));
+  return Promise.all(names2.map(async (name) => ({ name, sql: await readFile6(join11(dir, name), "utf8") })));
 }
 var sha2562 = (s) => createHash("sha256").update(s).digest("hex");
 var names = (list) => Array.isArray(list) ? list.map((x) => typeof x === "string" ? x : String(x?.name ?? "")).filter(Boolean) : [];
 var sqlString = (s) => `'${s.replace(/'/g, "''")}'`;
 async function localQuery(t, sql, extra = {}) {
-  const dir = await mkdtemp(join9(tmpdir(), "ambasada-sql-"));
+  const dir = await mkdtemp(join11(tmpdir(), "ambasada-sql-"));
   let rows;
   try {
-    const file = join9(dir, "query.sql");
-    await writeFile5(file, sql);
+    const file = join11(dir, "query.sql");
+    await writeFile6(file, sql);
     rows = wranglerJson(await wrangler(t, ["d1", "execute", PLATFORM_STORAGE.d1, "--file", file, "--json", "--yes"], extra));
   } finally {
-    await rm4(dir, { recursive: true, force: true });
+    await rm5(dir, { recursive: true, force: true });
   }
   return rows.map((r) => {
     const results = r.results ?? [];
@@ -3275,13 +3728,13 @@ async function localQuery(t, sql, extra = {}) {
   });
 }
 async function localExec(t, sql, extra = {}) {
-  const dir = await mkdtemp(join9(tmpdir(), "ambasada-sql-"));
+  const dir = await mkdtemp(join11(tmpdir(), "ambasada-sql-"));
   try {
-    const file = join9(dir, "migration.sql");
-    await writeFile5(file, sql);
+    const file = join11(dir, "migration.sql");
+    await writeFile6(file, sql);
     await wrangler(t, ["d1", "execute", PLATFORM_STORAGE.d1, "--file", file, "--yes"], extra);
   } finally {
-    await rm4(dir, { recursive: true, force: true });
+    await rm5(dir, { recursive: true, force: true });
   }
 }
 async function migrateLocal(opts) {
@@ -3321,7 +3774,7 @@ INSERT INTO ${MIGRATIONS_TABLE} ${hasSha ? `(name, sha256) VALUES (${sqlString(m
 }
 async function migrateBeforeDev(root, print) {
   const dir = findProductDir(root);
-  if (!dir || !existsSync8(join9(root, MIGRATIONS_DIR))) return;
+  if (!dir || !existsSync10(join11(root, MIGRATIONS_DIR))) return;
   try {
     const { config } = await readWranglerConfig(dir);
     if (!config.d1_databases?.some((d) => d.binding === PLATFORM_STORAGE.d1)) return;
@@ -3334,26 +3787,26 @@ async function migrateBeforeDev(root, print) {
 }
 function printMigrate(r, dryRun, where) {
   if (dryRun) {
-    out3(r.pending.length ? `would apply to ${where}: ${r.pending.join(", ")}` : `${where}: nothing to apply`);
+    out4(r.pending.length ? `would apply to ${where}: ${r.pending.join(", ")}` : `${where}: nothing to apply`);
   } else {
-    for (const name of r.applied) out3(`${c.green("\u2713")} applied ${c.bold(name)}`);
-    if (!r.applied.length) out3(`${c.green("\u2713")} ${where}: up to date`);
+    for (const name of r.applied) out4(`${c.green("\u2713")} applied ${c.bold(name)}`);
+    if (!r.applied.length) out4(`${c.green("\u2713")} ${where}: up to date`);
   }
-  if (r.skipped.length) out3(c.dim(`  already applied: ${r.skipped.join(", ")}`));
-  if (r.changed.length) out3(c.yellow(`! edited after they were applied (they don't run again; add a new migration instead): ${r.changed.join(", ")}`));
+  if (r.skipped.length) out4(c.dim(`  already applied: ${r.skipped.join(", ")}`));
+  if (r.changed.length) out4(c.yellow(`! edited after they were applied (they don't run again; add a new migration instead): ${r.changed.join(", ")}`));
 }
 function printResults(results) {
   results.forEach((r, i) => {
-    if (results.length > 1) out3(c.dim(`-- statement ${i + 1}`));
+    if (results.length > 1) out4(c.dim(`-- statement ${i + 1}`));
     if (r.columns.length) {
       const cols = r.columns.map((col, j) => r.columns.indexOf(col) === j ? col : `${col}:${j}`);
-      out3(table(r.rows.map((row) => Object.fromEntries(cols.map((col, j) => [col, row[j]]))), cols));
+      out4(table(r.rows.map((row) => Object.fromEntries(cols.map((col, j) => [col, row[j]]))), cols));
     }
     const m = r.meta ?? {};
     const parts = [`${r.rows.length} row${r.rows.length === 1 ? "" : "s"}`];
     if (m.changes) parts.push(`${m.changes} changed`);
     if (typeof m.duration_ms === "number") parts.push(`${Math.round(m.duration_ms * 100) / 100} ms`);
-    out3(c.dim(parts.join(" \xB7 ")));
+    out4(c.dim(parts.join(" \xB7 ")));
   });
 }
 async function query(t, sql) {
@@ -3370,7 +3823,7 @@ async function tables(t) {
 }
 async function shell(t, flags) {
   const where = t.local ? "local" : "ambasada.dev";
-  out3(`${c.bold("ambasada db shell")} ${c.dim(`(${where}) \xB7 end statements with ; \xB7 .tables \xB7 .schema [table] \xB7 .quit`)}`);
+  out4(`${c.bold("ambasada db shell")} ${c.dim(`(${where}) \xB7 end statements with ; \xB7 .tables \xB7 .schema [table] \xB7 .quit`)}`);
   const rl = createInterface({ input: process.stdin, output: process.stdout, terminal: process.stdin.isTTY, historySize: 200, prompt: "db> " });
   let buffer = "";
   const run2 = async (line) => {
@@ -3378,19 +3831,19 @@ async function shell(t, flags) {
     if (!buffer && trimmed.startsWith(".")) {
       const [cmd, arg] = trimmed.split(/\s+/);
       if (cmd === ".quit" || cmd === ".exit") return rl.close();
-      if (cmd === ".tables") return out3(table((await tables(t)).map((x) => ({ table: x.name, rows: x.rows }))));
+      if (cmd === ".tables") return out4(table((await tables(t)).map((x) => ({ table: x.name, rows: x.rows }))));
       if (cmd === ".schema") {
-        for (const x of (await tables(t)).filter((x2) => !arg || x2.name === arg)) out3(`${x.sql ?? `-- ${x.name}`};`);
+        for (const x of (await tables(t)).filter((x2) => !arg || x2.name === arg)) out4(`${x.sql ?? `-- ${x.name}`};`);
         return;
       }
-      return out3(c.yellow(`unknown command ${cmd}: .tables, .schema [table], .quit`));
+      return out4(c.yellow(`unknown command ${cmd}: .tables, .schema [table], .quit`));
     }
     buffer += `${line}
 `;
     if (!/;\s*$/.test(trimmed)) return;
     const sql = buffer;
     buffer = "";
-    if (flags.json) out3(JSON.stringify(await query(t, sql), null, 2));
+    if (flags.json) out4(JSON.stringify(await query(t, sql), null, 2));
     else printResults(await query(t, sql));
   };
   rl.prompt();
@@ -3398,7 +3851,7 @@ async function shell(t, flags) {
     try {
       await run2(line);
     } catch (error) {
-      out3(c.red(`\u2717 ${error.message}`));
+      out4(c.red(`\u2717 ${error.message}`));
     }
     rl.setPrompt(buffer ? "  > " : "db> ");
     rl.prompt();
@@ -3415,11 +3868,11 @@ async function db(args, flags) {
       const dryRun = flags["dry-run"] === true;
       if (t.local) {
         const r2 = await migrateLocal({ dir: t.dir, root, wrangler: t.wrangler, dryRun });
-        if (flags.json) return out3(JSON.stringify(r2, null, 2));
+        if (flags.json) return out4(JSON.stringify(r2, null, 2));
         return printMigrate(r2, dryRun, "local DB");
       }
       const r = await api(t, "POST", "/v1/dev/db/migrate", { json: { migrations, dry_run: dryRun } });
-      if (flags.json) return out3(JSON.stringify(r, null, 2));
+      if (flags.json) return out4(JSON.stringify(r, null, 2));
       return printMigrate({ applied: names(r.applied), skipped: names(r.skipped), changed: names(r.changed), pending: names(r.pending) }, dryRun, "the app's DB");
     }
     case "shell":
@@ -3428,19 +3881,19 @@ async function db(args, flags) {
       const sql = rest.join(" ").trim();
       if (!sql) return shell(t, flags);
       const results = await query(t, sql);
-      if (flags.json) return out3(JSON.stringify({ results }, null, 2));
+      if (flags.json) return out4(JSON.stringify({ results }, null, 2));
       return printResults(results);
     }
     case "tables": {
       const list = await tables(t);
-      if (flags.json) return out3(JSON.stringify({ tables: list }, null, 2));
-      return out3(table(list.map((x) => ({ table: x.name, rows: x.rows, columns: x.columns.length ? x.columns.map((col) => col.name).join(", ") : "" }))));
+      if (flags.json) return out4(JSON.stringify({ tables: list }, null, 2));
+      return out4(table(list.map((x) => ({ table: x.name, rows: x.rows, columns: x.columns.length ? x.columns.map((col) => col.name).join(", ") : "" }))));
     }
     case "migrations": {
       const applied = t.local ? ((await localQuery(t, `${CREATE_MIGRATIONS}
 SELECT name, applied_at FROM ${MIGRATIONS_TABLE} ORDER BY id;`))[1]?.rows ?? []).map((r) => ({ name: r[0], applied_at: r[1] })) : (await api(t, "GET", "/v1/dev/db/migrations")).applied ?? [];
-      if (flags.json) return out3(JSON.stringify({ applied }, null, 2));
-      return out3(table(applied, ["name", "applied_at"]));
+      if (flags.json) return out4(JSON.stringify({ applied }, null, 2));
+      return out4(table(applied, ["name", "applied_at"]));
     }
     default:
       throw new CliError(`usage: ambasada db migrate [--dry-run] | shell ["<sql>"] | tables | migrations   (--local: wrangler's local DB)`);
@@ -3468,18 +3921,18 @@ async function kv(args, flags) {
           cursor = r.cursor;
         }
       }
-      if (flags.json) return out3(JSON.stringify({ keys: keys3 }, null, 2));
-      return out3(table(keys3.map((k) => ({ key: k.name, expires: k.expiration ? new Date(k.expiration * 1e3).toISOString() : "" })), ["key", "expires"]));
+      if (flags.json) return out4(JSON.stringify({ keys: keys3 }, null, 2));
+      return out4(table(keys3.map((k) => ({ key: k.name, expires: k.expiration ? new Date(k.expiration * 1e3).toISOString() : "" })), ["key", "expires"]));
     }
     case "get": {
       if (!key) throw new CliError("usage: ambasada kv get <key>");
       if (t.local) return void process.stdout.write(await wrangler(t, ["kv", "key", "get", key, "--binding", PLATFORM_STORAGE.kv, "--text"]));
       const r = await api(t, "GET", kvPath(key));
-      if (flags.json) return out3(JSON.stringify(r, null, 2));
+      if (flags.json) return out4(JSON.stringify(r, null, 2));
       if (r.binary) {
-        out3(c.dim(`(${r.size} bytes, binary; base64:)`));
+        out4(c.dim(`(${r.size} bytes, binary; base64:)`));
       }
-      return out3(r.value ?? "");
+      return out4(r.value ?? "");
     }
     case "put":
     case "set": {
@@ -3488,19 +3941,19 @@ async function kv(args, flags) {
       const fromFile = value.startsWith("@") ? value.slice(1) : null;
       if (t.local) {
         await wrangler(t, ["kv", "key", "put", key, ...fromFile ? ["--path", fromFile] : [value], "--binding", PLATFORM_STORAGE.kv, ...ttl ? ["--ttl", ttl] : []]);
-        return out3(`${c.green("\u2713")} ${key} (local)`);
+        return out4(`${c.green("\u2713")} ${key} (local)`);
       }
-      const raw = fromFile ? new Uint8Array(await readFile5(fromFile)) : value;
+      const raw = fromFile ? new Uint8Array(await readFile6(fromFile)) : value;
       const r = await api(t, "PUT", `${kvPath(key)}${ttl ? `?ttl=${ttl}` : ""}`, { raw, type: fromFile ? "application/octet-stream" : "text/plain; charset=utf-8" });
-      if (flags.json) return out3(JSON.stringify(r, null, 2));
-      return out3(`${c.green("\u2713")} ${r.key} ${c.dim(`${r.size} bytes${ttl ? `, expires in ${ttl} s` : ""}`)}`);
+      if (flags.json) return out4(JSON.stringify(r, null, 2));
+      return out4(`${c.green("\u2713")} ${r.key} ${c.dim(`${r.size} bytes${ttl ? `, expires in ${ttl} s` : ""}`)}`);
     }
     case "delete":
     case "rm": {
       if (!key) throw new CliError("usage: ambasada kv delete <key>");
       if (t.local) await wrangler(t, ["kv", "key", "delete", key, "--binding", PLATFORM_STORAGE.kv]);
       else await api(t, "DELETE", kvPath(key));
-      return out3(`${c.green("\u2713")} deleted ${key}${t.local ? " (local)" : ""}`);
+      return out4(`${c.green("\u2713")} deleted ${key}${t.local ? " (local)" : ""}`);
     }
     default:
       throw new CliError("usage: ambasada kv list [prefix] | get <key> | put <key> <value | @file> [--ttl N] | delete <key>   (--local: wrangler's local KV)");
@@ -3567,22 +4020,22 @@ async function files(args, flags) {
         if (!r.truncated || !r.cursor) break;
         cursor = r.cursor;
       }
-      if (flags.json) return out3(JSON.stringify({ objects }, null, 2));
-      return out3(table(objects.map((o) => ({ key: o.key, size: size(o.size), type: o.content_type ?? "", uploaded: o.uploaded ?? "" })), ["key", "size", "type", "uploaded"]));
+      if (flags.json) return out4(JSON.stringify({ objects }, null, 2));
+      return out4(table(objects.map((o) => ({ key: o.key, size: size(o.size), type: o.content_type ?? "", uploaded: o.uploaded ?? "" })), ["key", "size", "type", "uploaded"]));
     }
     case "put":
     case "upload": {
       if (!a) throw new CliError("usage: ambasada files put <path> [key] [--content-type type]");
-      if (!existsSync8(a)) throw new CliError(`no file ${a}`);
+      if (!existsSync10(a)) throw new CliError(`no file ${a}`);
       const key = checkKey(b ?? basename2(a));
       const type = str2(flags["content-type"]) ?? contentTypeOf(a);
       if (t.local) {
         await wrangler(t, ["r2", "object", "put", `${await localBucket(t)}/${key}`, "--file", a, "--content-type", type]);
-        return out3(`${c.green("\u2713")} ${key} (local) \u2192 ${await fileUrl(t, key, flags)}`);
+        return out4(`${c.green("\u2713")} ${key} (local) \u2192 ${await fileUrl(t, key, flags)}`);
       }
-      const r = await api(t, "PUT", `/v1/dev/files/${keyPath(key)}`, { raw: new Uint8Array(await readFile5(a)), type });
-      if (flags.json) return out3(JSON.stringify(r, null, 2));
-      return out3(`${c.green("\u2713")} ${r.key} ${c.dim(size(r.size))} \u2192 ${c.cyan(r.url ?? await fileUrl(t, key, flags))}`);
+      const r = await api(t, "PUT", `/v1/dev/files/${keyPath(key)}`, { raw: new Uint8Array(await readFile6(a)), type });
+      if (flags.json) return out4(JSON.stringify(r, null, 2));
+      return out4(`${c.green("\u2713")} ${r.key} ${c.dim(size(r.size))} \u2192 ${c.cyan(r.url ?? await fileUrl(t, key, flags))}`);
     }
     case "delete":
     case "rm": {
@@ -3590,11 +4043,11 @@ async function files(args, flags) {
       const key = checkKey(a);
       if (t.local) await wrangler(t, ["r2", "object", "delete", `${await localBucket(t)}/${key}`]);
       else await api(t, "DELETE", `/v1/dev/files/${keyPath(key)}`);
-      return out3(`${c.green("\u2713")} deleted ${key}${t.local ? " (local)" : ""}`);
+      return out4(`${c.green("\u2713")} deleted ${key}${t.local ? " (local)" : ""}`);
     }
     case "url": {
       if (!a) throw new CliError("usage: ambasada files url <key>");
-      return out3(await fileUrl(t, checkKey(a), flags));
+      return out4(await fileUrl(t, checkKey(a), flags));
     }
     default:
       throw new CliError("usage: ambasada files list [prefix] | put <path> [key] [--content-type T] | delete <key> | url <key>   (--local: wrangler's local bucket)");
@@ -3604,11 +4057,11 @@ async function files(args, flags) {
 // src/tunnel.ts
 import { spawn as spawn3, spawnSync } from "node:child_process";
 import { createHash as createHash2 } from "node:crypto";
-import { existsSync as existsSync9 } from "node:fs";
-import { chmod as chmod2, mkdir as mkdir4, mkdtemp as mkdtemp2, readFile as readFile6, rename, rm as rm5, writeFile as writeFile6 } from "node:fs/promises";
+import { existsSync as existsSync11 } from "node:fs";
+import { chmod as chmod2, mkdir as mkdir5, mkdtemp as mkdtemp2, readFile as readFile7, rename, rm as rm6, writeFile as writeFile7 } from "node:fs/promises";
 import { tmpdir as tmpdir2 } from "node:os";
-import { join as join10 } from "node:path";
-var out4 = (s = "") => process.stdout.write(`${s}
+import { join as join12 } from "node:path";
+var out5 = (s = "") => process.stdout.write(`${s}
 `);
 var CLOUDFLARED_VERSION = "2026.10.7";
 var CLOUDFLARED_ASSETS = {
@@ -3619,11 +4072,11 @@ var CLOUDFLARED_ASSETS = {
   "win32-x64": { file: "cloudflared-windows-amd64.exe", sha256: "2493dbc168923bb3e59e5e7716f71deced92992eea9acd6e9d74f84ac7751343" }
 };
 var RELEASES = "https://github.com/cloudflare/cloudflared/releases/download";
-async function cloudflaredBin(print = out4) {
+async function cloudflaredBin(print = out5) {
   if (process.env.AMBASADA_CLOUDFLARED) return process.env.AMBASADA_CLOUDFLARED;
   if (spawnSync("cloudflared", ["--version"], { stdio: "ignore" }).status === 0) return "cloudflared";
-  const dest = join10(configDir(), "bin", `cloudflared-${CLOUDFLARED_VERSION}${process.platform === "win32" ? ".exe" : ""}`);
-  if (existsSync9(dest)) return dest;
+  const dest = join12(configDir(), "bin", `cloudflared-${CLOUDFLARED_VERSION}${process.platform === "win32" ? ".exe" : ""}`);
+  if (existsSync11(dest)) return dest;
   print(c.dim(`downloading cloudflared ${CLOUDFLARED_VERSION} (once, ~20\u201340 MB) \u2026`));
   await downloadCloudflared(dest);
   return dest;
@@ -3643,22 +4096,22 @@ async function downloadCloudflared(dest, opts = {}) {
   }
   const digest = createHash2("sha256").update(bytes).digest("hex");
   if (digest !== asset.sha256) throw new CliError(`cloudflared download from ${url} has SHA-256 ${digest}, expected ${asset.sha256}: not running it`);
-  const dir = join10(dest, "..");
-  await mkdir4(dir, { recursive: true });
-  const work = await mkdtemp2(join10(tmpdir2(), "ambasada-cloudflared-"));
+  const dir = join12(dest, "..");
+  await mkdir5(dir, { recursive: true });
+  const work = await mkdtemp2(join12(tmpdir2(), "ambasada-cloudflared-"));
   try {
-    const binary = join10(work, "cloudflared");
+    const binary = join12(work, "cloudflared");
     if (asset.file.endsWith(".tgz")) {
-      await writeFile6(join10(work, asset.file), bytes);
-      const tar = spawnSync("tar", ["-xzf", join10(work, asset.file), "-C", work], { encoding: "utf8" });
-      if (tar.status !== 0 || !existsSync9(binary)) throw new CliError(`could not unpack ${asset.file}: ${tar.stderr || "no cloudflared inside"}`);
-    } else await writeFile6(binary, bytes);
+      await writeFile7(join12(work, asset.file), bytes);
+      const tar = spawnSync("tar", ["-xzf", join12(work, asset.file), "-C", work], { encoding: "utf8" });
+      if (tar.status !== 0 || !existsSync11(binary)) throw new CliError(`could not unpack ${asset.file}: ${tar.stderr || "no cloudflared inside"}`);
+    } else await writeFile7(binary, bytes);
     await chmod2(binary, 493);
     const tmp = `${dest}.${process.pid}`;
-    await writeFile6(tmp, await readFile6(binary), { mode: 493 });
+    await writeFile7(tmp, await readFile7(binary), { mode: 493 });
     await rename(tmp, dest);
   } finally {
-    await rm5(work, { recursive: true, force: true });
+    await rm6(work, { recursive: true, force: true });
   }
 }
 async function call(opts, method, path, body) {
@@ -3676,7 +4129,7 @@ async function call(opts, method, path, body) {
   return { status: res.status, json: await res.json().catch(() => ({})) };
 }
 async function startTunnel(opts) {
-  const print = opts.print ?? out4;
+  const print = opts.print ?? out5;
   const bin2 = await cloudflaredBin(print);
   const opened = await call(opts, "POST", "/v1/product/tunnel", { port: opts.port, force: opts.force === true, register: opts.register !== false, ...opts.webhookPath ? { webhook_path: opts.webhookPath } : {} });
   if (opened.status !== 201) throw new CliError(`tunnel refused: ${opened.json.error?.code ?? opened.status}: ${opened.json.error?.message ?? "no answer"}`);
@@ -3757,7 +4210,7 @@ async function waitForPublic(url, timeoutMs = 18e4, streak = 1) {
   }
 }
 async function startTunnelAndWait(opts) {
-  const print = opts.print ?? out4;
+  const print = opts.print ?? out5;
   const session = await startTunnel(opts);
   const { info } = session;
   print(c.dim(info.dns_propagating ? `publishing ${info.hostname} on Cloudflare's edge (first time only, up to 2 minutes) \u2026` : `connecting ${info.hostname} \u2026`));
@@ -3787,7 +4240,7 @@ function untilStopped(ended) {
     });
   });
 }
-function printOpened(info, print = out4) {
+function printOpened(info, print = out5) {
   print(`${c.green("\u2713")} ${c.bold(c.cyan(info.url))} \u2192 ${info.local}  ${c.dim("(press Ctrl+C to stop)")}`);
   if (info.registered) {
     print(`  the village sends buyers, Checkout and webhooks here until you stop${info.previous_url ? c.dim(` (then back to ${info.previous_url})`) : ""}`);
@@ -3795,7 +4248,7 @@ function printOpened(info, print = out4) {
     if (info.webhook) print(`  webhooks \u2192 ${info.webhook.url}`);
   } else print(c.dim("  only exposed: the product URL, offerings and webhook stay where they are (--no-register)"));
 }
-function printClosed(closed, print = out4) {
+function printClosed(closed, print = out5) {
   if (!closed) print(c.yellow("! could not reach the village to close the tunnel: it closes itself within 5 minutes"));
   else print(`${c.green("\u2713")} tunnel closed${closed.url ? `; product URL back to ${closed.url}` : ""}`);
 }
@@ -3815,42 +4268,42 @@ async function tunnelPort(flags) {
   return 3e3;
 }
 function webhookPath(root) {
-  return root && WEBHOOK_FILES.some((f) => existsSync9(join10(root, f))) ? "/api/webhook" : void 0;
+  return root && WEBHOOK_FILES.some((f) => existsSync11(join12(root, f))) ? "/api/webhook" : void 0;
 }
 async function tunnel(_args, flags) {
-  const r = await resolve(flags);
+  const r = await resolveForApp(flags);
   if (!r.apiKey) throw new CliError("not logged in: run `ambasada login` (or set AMBASADA_API_KEY)");
   const port = await tunnelPort(flags);
   const local = `http://localhost:${port}`;
   try {
     await fetch(local, { signal: AbortSignal.timeout(2e3) });
   } catch {
-    out4(c.yellow(`! nothing answers on ${local} yet: start your dev server there (or pass --port)`));
+    out5(c.yellow(`! nothing answers on ${local} yet: start your dev server there (or pass --port)`));
   }
   const root = findRoot();
-  if (root && existsSync9(join10(root, ".env")) && /AMBASADA_API_URL=http:\/\/(127\.0\.0\.1|localhost)/.test(await readFile6(join10(root, ".env"), "utf8"))) {
-    out4(c.yellow("! your .env points AMBASADA_API_URL at the mock: real buyers' receipts won't verify. `ambasada dev --tunnel` runs your dev server against the village instead"));
+  if (root && existsSync11(join12(root, ".env")) && /AMBASADA_API_URL=http:\/\/(127\.0\.0\.1|localhost)/.test(await readFile7(join12(root, ".env"), "utf8"))) {
+    out5(c.yellow("! your .env points AMBASADA_API_URL at the mock: real buyers' receipts won't verify. `ambasada dev --tunnel` runs your dev server against the village instead"));
   }
   const register = flags["no-register"] !== true;
   const session = await startTunnelAndWait({ apiUrl: r.apiUrl, apiKey: r.apiKey, port, force: flags.force === true, register, webhookPath: register ? webhookPath(root) : void 0 });
-  if (flags.json) out4(JSON.stringify({ ...session.info, token: void 0 }, null, 2));
+  if (flags.json) out5(JSON.stringify({ ...session.info, token: void 0 }, null, 2));
   else printOpened(session.info);
   const reason = await untilStopped(session.ended);
-  if (reason) out4(c.yellow(`! ${reason}`));
-  else out4("\nclosing the tunnel");
+  if (reason) out5(c.yellow(`! ${reason}`));
+  else out5("\nclosing the tunnel");
   printClosed(await session.close());
   if (reason) throw new CliError(reason);
 }
 
 // src/commands.ts
-var SDK_VERSION = /^\d+\.\d+\.\d+$/.test("0.8.2") ? `^${"0.8.2"}` : "latest";
+var SDK_VERSION = /^\d+\.\d+\.\d+$/.test("0.8.4") ? `^${"0.8.4"}` : "latest";
 var DEV_PORT = 8788;
-var out5 = (s = "") => process.stdout.write(`${s}
+var out6 = (s = "") => process.stdout.write(`${s}
 `);
 var str3 = (v) => typeof v === "string" && v ? v : void 0;
 var json = (flags, value) => {
   if (!flags.json) return false;
-  out5(JSON.stringify(value, null, 2));
+  out6(JSON.stringify(value, null, 2));
   return true;
 };
 var sleep = (ms) => new Promise((r) => setTimeout(r, ms));
@@ -3869,8 +4322,8 @@ async function deviceLogin(apiUrl) {
   if (res.status === 404 || res.status === 405 || !(res.headers.get("content-type") ?? "").includes("json")) return null;
   if (!res.ok) return null;
   const start = await res.json();
-  out5(`Open ${c.bold(start.verification_uri_complete ?? start.verification_uri)}`);
-  out5(`and confirm the code ${c.bold(c.cyan(start.user_code))} with your Ambasada ID.`);
+  out6(`Open ${c.bold(start.verification_uri_complete ?? start.verification_uri)}`);
+  out6(`and confirm the code ${c.bold(c.cyan(start.user_code))} with your Ambasada ID.`);
   let interval = Math.max(1, start.interval ?? 5) * 1e3;
   const deadline = Date.now() + (start.expires_in ?? 600) * 1e3;
   while (Date.now() < deadline) {
@@ -3901,47 +4354,38 @@ async function prompt(question) {
   }
 }
 async function login(_args, flags) {
-  const { apiUrl } = await resolve(flags);
+  const { apiUrl, here } = await resolve(flags);
   let key = str3(flags.key);
   if (!key && !flags["no-device"]) {
     const device = await deviceLogin(apiUrl);
     if (device) key = device.token;
   }
   if (!key) {
-    out5(`Paste your app's key: ${c.bold("https://developer.ambasada.dev")} \u2192 New app (or Settings \u2192 New key).`);
+    out6(`Paste your app's key: ${c.bold("https://developer.ambasada.dev")} \u2192 New app (or Settings \u2192 New key).`);
     key = await prompt("API key: ");
   }
   if (!key) throw new CliError("no key given");
   const who = await whoseKey(apiUrl, key);
-  const { company: _old, ...stored } = await readConfig();
-  await writeConfig({ ...stored, apiUrl, apiKey: key, project: who.id });
-  out5(`${c.green("\u2713")} logged in as ${c.bold(who.id)} on ${apiUrl} ${c.dim(`(saved to ${configPath()})`)}`);
-}
-async function whoseKey(apiUrl, key) {
-  let res;
-  try {
-    res = await fetch(`${apiUrl.replace(/\/$/, "")}/v1/key`, { headers: { authorization: `Bearer ${key}`, accept: "application/json" } });
-  } catch (error) {
-    throw new CliError(`can't reach ${apiUrl}: ${error.message}`);
-  }
-  if (res.status === 401) throw new CliError("that key was refused (UNAUTHORIZED)");
-  if (res.ok) {
-    const body = await res.json();
-    return { id: body.id, name: body.name ?? null, kind: body.kind === "project" ? "project" : "company" };
-  }
-  throw new CliError(`${apiUrl}/v1/key answered ${res.status}: is --api-url an Ambasada API?`);
-}
-async function logout() {
-  const { apiKey: _k, company: _c, project: _p, ...rest } = await readConfig();
-  await writeConfig(rest);
-  out5("logged out");
+  const { company: _old, apps, ...stored } = await readConfig();
+  await writeConfig({ ...stored, apiUrl, apiKey: key, project: who.id, apps: { ...apps, [who.id]: { apiKey: key, apiUrl } } });
+  out6(`${c.green("\u2713")} logged in as ${c.bold(who.id)} on ${apiUrl} ${c.dim(`(saved to ${configPath()})`)}`);
+  if (here && here !== who.id) out6(c.yellow(`! this folder is the app ${here}, and the key is ${who.id}'s: deploy and storage commands here will refuse it`));
+}
+async function logout(_args = [], flags = {}) {
+  const { here } = await resolve(flags);
+  const { apiKey: _k, company: _c, project, apps = {}, ...rest } = await readConfig();
+  const { [here ?? ""]: _here, ...others } = apps;
+  const kept = flags.all ? {} : here ? others : apps;
+  await writeConfig({ ...rest, ...Object.keys(kept).length ? { apps: kept } : {} });
+  out6(flags.all ? "logged out of every app" : here && _here ? `logged out of ${here}` : "logged out");
 }
 async function whoami(_args, flags) {
   const r = await resolve(flags);
   if (!r.apiKey) throw new CliError("not logged in: run `ambasada login` (or set AMBASADA_API_KEY)");
   const who = await whoseKey(r.apiUrl, r.apiKey);
-  if (json(flags, { apiUrl: r.apiUrl, project: who.id, kind: who.kind })) return;
-  out5(`${c.bold(who.id)} on ${r.apiUrl}`);
+  if (json(flags, { apiUrl: r.apiUrl, project: who.id, kind: who.kind, folder: r.here ?? null })) return;
+  out6(`${c.bold(who.id)} on ${r.apiUrl}`);
+  if (r.here && r.here !== who.id) out6(c.yellow(`! this folder is the app ${r.here}: \`ambasada login --key \u2026\` here with its key`));
 }
 function addonFlag(flags) {
   if (flags.village || str3(flags.for) === "hackaton" || str3(flags.for) === "village") return "village";
@@ -3951,11 +4395,11 @@ var addonSpec = (short, flags) => str3(flags[`${short}-spec`]) ?? process.env[`A
 async function writeFiles(root, files2, map, force = true) {
   const written = [];
   for (const [rel, content] of Object.entries(files2)) {
-    const dest = join11(root, rel === "gitignore" ? ".gitignore" : rel);
-    if (!force && existsSync10(dest)) continue;
-    await mkdir5(dirname6(dest), { recursive: true });
-    if (isBinary(rel)) await writeFile7(dest, Buffer.from(content, "base64"));
-    else await writeFile7(dest, map(rel, content));
+    const dest = join13(root, rel === "gitignore" ? ".gitignore" : rel);
+    if (!force && existsSync12(dest)) continue;
+    await mkdir6(dirname7(dest), { recursive: true });
+    if (isBinary(rel)) await writeFile8(dest, Buffer.from(content, "base64"));
+    else await writeFile8(dest, map(rel, content));
     written.push(rel);
   }
   return written;
@@ -3964,7 +4408,7 @@ async function init(args, flags) {
   const target2 = resolvePath5(args[0] ?? ".");
   const name = str3(flags.name) ?? (args[0] ? basename3(target2) : "My App");
   const id = slug(str3(flags.id) ?? name);
-  if (existsSync10(target2) && (await readdir3(target2)).filter((f) => f !== ".git").length && !flags.force) {
+  if (existsSync12(target2) && (await readdir3(target2)).filter((f) => f !== ".git").length && !flags.force) {
     throw new CliError(`${target2} is not empty (use --force to scaffold anyway)`);
   }
   const template = str3(flags.template) ?? TEMPLATES[0];
@@ -3977,15 +4421,15 @@ async function init(args, flags) {
     pkg.name = id;
     pkg.dependencies["@ambasada/sdk"] = sdkSpec;
     const releaseLine = /^(file|link):/.test(sdkSpec) ? SDK_VERSION : sdkSpec;
-    if (pkg.dependencies["@ambasada/miniapp"]) pkg.dependencies["@ambasada/miniapp"] = str3(flags.miniapp) ?? process.env.AMBASADA_MINIAPP_SPEC ?? releaseLine;
+    if (pkg.dependencies["@ambasada/miniapp"]) pkg.dependencies["@ambasada/miniapp"] = str3(flags["miniapp-spec"]) ?? process.env.AMBASADA_MINIAPP_SPEC ?? releaseLine;
     if (pkg.dependencies["@ambasada/ui"]) pkg.dependencies["@ambasada/ui"] = str3(flags.ui) ?? process.env.AMBASADA_UI_SPEC ?? releaseLine;
     if (pkg.devDependencies?.["@ambasada/cli"]) pkg.devDependencies["@ambasada/cli"] = str3(flags.cli) ?? process.env.AMBASADA_CLI_SPEC ?? SDK_VERSION;
     return `${JSON.stringify(pkg, null, 2)}
 `;
   });
-  const env2 = join11(target2, ".env");
-  if (!existsSync10(env2)) {
-    await writeFile7(
+  const env2 = join13(target2, ".env");
+  if (!existsSync12(env2)) {
+    await writeFile8(
       env2,
       [
         "# Local development against `ambasada dev`. On ambasada.dev the deploy sets the real values.",
@@ -4006,38 +4450,35 @@ async function init(args, flags) {
   const addonName = addonFlag(flags);
   let addon = null;
   if (addonName) addon = await applyAddon(target2, template, addonName, flags, true);
-  const app = readCompany(await readFile7(join11(target2, CONFIG_FILE), "utf8"));
-  if (app) await writeFile7(join11(target2, MANIFEST_FILES[template]), manifestJson(app));
+  const entry2 = flags.miniapp ? str3(flags.entry) ?? DEFAULT_ENTRY : addon?.overlay?.miniapp?.entry;
+  const miniapp2 = entry2 ? await enableMiniapp(target2, entry2, flags, { template, releaseLine: /^(file|link):/.test(sdkSpec) ? SDK_VERSION : sdkSpec }) : null;
   await writeProjectInfo(target2, { template, devkit: devkitVersion(), addons: addon ? [addon.short] : [] });
   const rel = args[0] ?? ".";
-  out5(`${c.green("\u2713")} ${c.bold(name)} (${id}) scaffolded in ${target2} ${c.dim(`(template ${template}${addon ? `, ${addon.short}` : ""})`)}`);
-  out5("");
-  out5("Next:");
-  if (rel !== ".") out5(`  cd ${rel}`);
-  if (!addon) out5("  npm install");
-  out5(`  npm run dev             ${c.dim("# ambasada dev: the mock API on :8788 + your app on http://localhost:3000")}`);
-  for (const line of addon?.overlay?.next ?? []) out5(`  ${line}`);
-  out5("");
-  out5(`Then ${c.bold("ambasada login")} (a key from https://developer.ambasada.dev \u2192 New app) and ${c.bold("ambasada deploy")}. See README.md.`);
-}
-function templateOf2(root) {
-  const stack = detectStack(root);
-  if (stack) return stack.name;
-  return existsSync10(join11(root, "src/worker.ts")) ? "worker" : "next";
+  out6(`${c.green("\u2713")} ${c.bold(name)} (${id}) scaffolded in ${target2} ${c.dim(`(template ${template}${addon ? `, ${addon.short}` : ""})`)}`);
+  out6(miniapp2 ? `  mini app: on at ${c.bold(miniapp2.entry)} ${c.dim(`(${miniapp2.entry === "/" ? "the in-app glue" : "the in-app layout"}, icon.png, the manifest from ambasada.config.ts)`)}` : `  ${stateLine({ on: false, entry: null, source: null, file: null })}`);
+  for (const m of miniapp2?.manual ?? []) out6(c.yellow(`! by hand: ${m}`));
+  out6("");
+  out6("Next:");
+  if (rel !== ".") out6(`  cd ${rel}`);
+  if (!addon) out6("  npm install");
+  out6(`  npm run dev             ${c.dim("# ambasada dev: the mock API on :8788 + your app on http://localhost:3000")}`);
+  for (const line of addon?.overlay?.next ?? []) out6(`  ${line}`);
+  out6("");
+  out6(`Then ${c.bold("ambasada login")} (a key from https://developer.ambasada.dev \u2192 New app) and ${c.bold("ambasada deploy")}. See README.md.`);
 }
 async function applyAddon(root, template, short, flags, fresh) {
   const pkgName = KNOWN_ADDONS[short] ?? short;
-  const pkgFile = join11(root, "package.json");
-  const pkg = JSON.parse(await readFile7(pkgFile, "utf8"));
+  const pkgFile = join13(root, "package.json");
+  const pkg = JSON.parse(await readFile8(pkgFile, "utf8"));
   pkg.dependencies = { ...pkg.dependencies, [pkgName]: pkg.dependencies?.[pkgName] ?? addonSpec(shortName(pkgName), flags) };
-  await writeFile7(pkgFile, `${JSON.stringify(pkg, null, 2)}
+  await writeFile8(pkgFile, `${JSON.stringify(pkg, null, 2)}
 `);
   const find = () => findAddons(root).find((dir2) => readJsonName(dir2) === pkgName) ?? besideCli(pkgName);
   let dir = find() ?? packageDir(pkgName, root);
   if (!dir && !flags["no-install"]) {
-    out5(c.dim(`npm install ${pkgName} \u2026`));
+    out6(c.dim(`npm install ${pkgName} \u2026`));
     try {
-      execFileSync3(process.platform === "win32" ? "npm.cmd" : "npm", ["install"], { cwd: root, stdio: "inherit" });
+      execFileSync4(process.platform === "win32" ? "npm.cmd" : "npm", ["install"], { cwd: root, stdio: "inherit" });
     } catch {
       throw new CliError(`npm install failed in ${root}: install ${pkgName} yourself, then \`ambasada add ${shortName(pkgName)}\``);
     }
@@ -4050,37 +4491,37 @@ async function applyAddon(root, template, short, flags, fresh) {
     const id = await loadIdName(root) ?? { id: "my-app", name: "My App" };
     await writeFiles(root, overlay.files(template), (_rel, text) => text.replaceAll("my-app", id.id).replaceAll("My App", id.name), fresh || flags.force === true);
     if (overlay.config) {
-      const file = join11(root, CONFIG_FILE);
-      await writeFile7(file, overlay.config(await readFile7(file, "utf8"), template));
+      const file = join13(root, CONFIG_FILE);
+      await writeFile8(file, overlay.config(await readFile8(file, "utf8"), template));
     }
     if (overlay.env?.length) {
-      const env2 = join11(root, ".env");
-      const current2 = existsSync10(env2) ? await readFile7(env2, "utf8") : "";
+      const env2 = join13(root, ".env");
+      const current2 = existsSync12(env2) ? await readFile8(env2, "utf8") : "";
       const missing = overlay.env.filter((line) => line.startsWith("#") || !current2.includes(`${line.split("=")[0]}=`));
-      if (missing.some((l) => !l.startsWith("#"))) await appendFile(env2, `${current2 && !current2.endsWith("\n") ? "\n" : ""}${missing.join("\n")}
+      if (missing.some((l) => !l.startsWith("#"))) await appendFile2(env2, `${current2 && !current2.endsWith("\n") ? "\n" : ""}${missing.join("\n")}
 `);
     }
     for (const [rel, text] of Object.entries(overlay.append ?? {})) {
-      const file = join11(root, rel);
-      const current2 = existsSync10(file) ? await readFile7(file, "utf8") : "";
-      if (!current2.includes(text.trim().split("\n")[0])) await writeFile7(file, `${current2.trimEnd()}
+      const file = join13(root, rel);
+      const current2 = existsSync12(file) ? await readFile8(file, "utf8") : "";
+      if (!current2.includes(text.trim().split("\n")[0])) await writeFile8(file, `${current2.trimEnd()}
 
 ${text.trim()}
 `);
     }
     if (overlay.dependencies) {
-      const next = JSON.parse(await readFile7(pkgFile, "utf8"));
+      const next = JSON.parse(await readFile8(pkgFile, "utf8"));
       next.dependencies = { ...overlay.dependencies, ...next.dependencies };
-      await writeFile7(pkgFile, `${JSON.stringify(next, null, 2)}
+      await writeFile8(pkgFile, `${JSON.stringify(next, null, 2)}
 `);
     }
   }
-  await writeFiles(join11(root, ".claude/skills"), addon.skills, (_rel, text) => text, true);
+  await writeFiles(join13(root, ".claude/skills"), addon.skills, (_rel, text) => text, true);
   return addon;
 }
 function readJsonName(dir) {
   try {
-    return JSON.parse(readFileSync5(join11(dir, "package.json"), "utf8")).name;
+    return JSON.parse(readFileSync6(join13(dir, "package.json"), "utf8")).name;
   } catch {
     return void 0;
   }
@@ -4091,34 +4532,42 @@ async function add(args, flags) {
   if (!KNOWN_ADDONS[short] && !short.includes("/")) throw new CliError(`unknown add-on ${short} (known: ${Object.keys(KNOWN_ADDONS).join(", ")})`);
   const root = findRoot();
   if (!root) throw new CliError(`run \`ambasada add ${short}\` inside your app (no ${CONFIG_FILE} found)`);
-  const template = templateOf2(root);
+  const template = templateOf(root);
   const addon = await applyAddon(root, template, short, flags, false);
-  const app = readCompany(await readFile7(join11(root, CONFIG_FILE), "utf8"));
-  const manifest = join11(root, MANIFEST_FILES[template]);
-  if (app && !existsSync10(manifest)) await writeFile7(manifest, manifestJson(app));
+  const entry2 = addon.overlay?.miniapp?.entry;
+  if (entry2 && !miniappState(root, miniappOfSource(root).miniapp).on) printEnabled(await enableMiniapp(root, entry2, flags, { template, releaseLine: SDK_VERSION }), root);
   const info = await readProjectInfo(root) ?? { template, devkit: devkitVersion(), addons: [] };
   await writeProjectInfo(root, { ...info, addons: [.../* @__PURE__ */ new Set([...info.addons, addon.short])] });
-  out5(`${c.green("\u2713")} ${c.bold(addon.name)} added ${c.dim(`(${CONFIG_FILE}, package.json, .env, .claude/skills; existing files kept, --force overwrites)`)}`);
-  for (const line of addon.overlay?.next ?? []) out5(`  ${line}`);
-  out5(`  ambasada ${addon.short} --help`);
+  out6(`${c.green("\u2713")} ${c.bold(addon.name)} added ${c.dim(`(${CONFIG_FILE}, package.json, .env, .claude/skills; existing files kept, --force overwrites)`)}`);
+  for (const line of addon.overlay?.next ?? []) out6(`  ${line}`);
+  out6(`  ambasada ${addon.short} --help`);
 }
 async function check(args, flags) {
   const target2 = args[0];
   let report;
-  if (target2 && /^https?:\/\//i.test(target2)) report = await checkRemote(target2);
-  else {
+  if (target2 && /^https?:\/\//i.test(target2)) {
+    const root = findRoot();
+    const on = root ? miniappState(root, miniappOfSource(root).miniapp).on : false;
+    report = await checkRemote(target2, void 0, on ? { miniapp: true } : {});
+  } else {
     const dir = target2 ? resolvePath5(target2) : findRoot();
-    if (!dir) throw new CliError("no ambasada.config.ts here or in a parent folder: pass a folder or a URL (ambasada check https://your.product)");
+    if (!dir) throw new CliError("no ambasada.config.ts here or in a parent folder: pass a folder or a URL (ambasada check https://your.app)");
     report = await checkLocal(dir);
+    const url = /\bproduct\s*:\s*\{\s*url\s*:\s*["'`](https:\/\/[^"'`]+)["'`]/.exec(existsSync12(join13(dir, CONFIG_FILE)) ? readFileSync6(join13(dir, CONFIG_FILE), "utf8") : "")?.[1];
+    if (!report.miniapp?.on && url) report = await checkRemote(url, void 0, { miniapp: false });
   }
   if (!json(flags, report)) {
-    for (const p of report.problems) out5(`${c.red("\u2717")} ${p.message} ${c.dim(`(${p.code})`)}`);
-    for (const w of report.warnings) out5(`${c.yellow("!")} ${w.message} ${c.dim(`(${w.code})`)}`);
-    for (const n of report.notes) out5(`${c.dim("\xB7")} ${c.dim(n)}`);
-    if (report.ok) out5(`${c.green("\u2713")} ${report.target} passes the mini-app checks${report.warnings.length ? c.dim(` (${report.warnings.length} warning${report.warnings.length === 1 ? "" : "s"})`) : ""}`);
+    const on = report.miniapp?.on !== false;
+    out6(on ? `mini app: on at ${c.bold(report.miniapp?.entry ?? "/")}` : stateLine({ on: false, entry: null, source: null, file: null }));
+    for (const p of report.problems) out6(`${c.red("\u2717")} ${p.message} ${c.dim(`(${p.code})`)}`);
+    for (const w of report.warnings) out6(`${c.yellow("!")} ${w.message} ${c.dim(`(${w.code})`)}`);
+    for (const n of report.notes.filter((n2) => !n2.startsWith("mini app: off"))) out6(`${c.dim("\xB7")} ${c.dim(n)}`);
+    const warnings = report.warnings.length ? c.dim(` (${report.warnings.length} warning${report.warnings.length === 1 ? "" : "s"})`) : "";
+    if (report.ok) out6(`${c.green("\u2713")} ${report.target} passes the ${on ? "mini-app" : "product"} checks${warnings}`);
   }
   if (!report.ok) throw new CliError(`${report.problems.length} problem${report.problems.length === 1 ? "" : "s"} in ${report.target}: fix them and run \`ambasada check\` again`);
 }
+var miniapp = (args, flags) => miniappCommand(args, flags, SDK_VERSION);
 async function dev(_args, flags) {
   const port = Number(str3(flags.port) ?? DEV_PORT);
   if (flags.tunnel) return devTunnel(flags);
@@ -4130,18 +4579,20 @@ async function dev(_args, flags) {
   const local = /^(localhost|127\.0\.0\.1|\[::1\])$/.test(new URL(productUrl).hostname);
   if (stack && !local) throw new CliError(`--product ${productUrl} is not local: \`ambasada dev --mock-only\` to point the mock at it`);
   const bin2 = stack ? stackBin(project.root, stack) : null;
-  const appWebhook = project ? manifestWebhook(project.root, productUrl) : null;
+  const inApp = project ? await syncManifest(project.root, project.config) : null;
+  const appWebhook = project && inApp?.on ? manifestWebhook(project.root, productUrl) : null;
   const mock = await startMock({
     port,
     host: str3(flags.host) ?? "127.0.0.1",
     company,
     appWebhook: appWebhook ?? void 0,
     extensions: addons().mocks,
-    log: (line) => out5(`${c.dim((/* @__PURE__ */ new Date()).toISOString().slice(11, 19))} ${line}`)
+    log: (line) => out6(`${c.dim((/* @__PURE__ */ new Date()).toISOString().slice(11, 19))} ${line}`)
   });
-  out5(`${c.bold("ambasada dev")} \xB7 mock Ambasada API on ${c.cyan(mock.url)}  ${c.dim("(dashboard: open it in a browser)")}`);
-  out5(`  app ${c.bold(company)} \xB7 key ${c.bold(DEV_KEY)} \xB7 sign-in as a fake visitor \xB7 notifications to the mock hub`);
-  out5(`  in your app: AMBASADA_API_URL=${mock.url} AMBASADA_API_KEY=${DEV_KEY}`);
+  out6(`${c.bold("ambasada dev")} \xB7 mock Ambasada API on ${c.cyan(mock.url)}  ${c.dim("(dashboard: open it in a browser)")}`);
+  out6(`  app ${c.bold(company)} \xB7 key ${c.bold(DEV_KEY)} \xB7 sign-in as a fake visitor \xB7 notifications to the mock hub`);
+  out6(`  in your app: AMBASADA_API_URL=${mock.url} AMBASADA_API_KEY=${DEV_KEY}`);
+  if (inApp) out6(`  ${stateLine(inApp)}`);
   const env2 = {
     AMBASADA_API_URL: mock.url,
     AMBASADA_API_KEY: DEV_KEY,
@@ -4155,33 +4606,33 @@ async function dev(_args, flags) {
     AMBASADA_HUB_URL: mock.url,
     AMBASADA_APP_ORIGIN: new URL(productUrl).origin
   };
-  const ctx = { project, mockUrl: mock.url, productUrl, company, env: env2, hints: [], once: flags.once === true, out: out5 };
+  const ctx = { project, mockUrl: mock.url, productUrl, company, env: env2, hints: [], once: flags.once === true, out: out6 };
   await addons().dev(ctx);
-  if (!project) out5(c.dim(`  (no ${CONFIG_FILE} here: only the mock)`));
-  const hints = () => ctx.hints.forEach((h) => out5(h));
+  if (!project) out6(c.dim(`  (no ${CONFIG_FILE} here: only the mock)`));
+  const hints = () => ctx.hints.forEach((h) => out6(h));
   if (flags.once) {
     hints();
     await mock.close();
     return;
   }
-  if (stack && project) await migrateBeforeDev(project.root, out5);
-  const app = stack && bin2 ? startApp(project.root, stack, bin2, new URL(productUrl), env2, out5, c.dim(`${stack.pkg} \u2502`)) : null;
+  if (stack && project) await migrateBeforeDev(project.root, out6);
+  const app = stack && bin2 ? startApp(project.root, stack, bin2, new URL(productUrl), env2, out6, c.dim(`${stack.pkg} \u2502`)) : null;
   if (app) {
-    out5(`  starting ${c.bold(stack.label)} on ${productUrl} ${c.dim("(your app, with AMBASADA_* pointed at the mock)")}`);
+    out6(`  starting ${c.bold(stack.label)} on ${productUrl} ${c.dim("(your app, with AMBASADA_* pointed at the mock)")}`);
     void app.ready.then((ok) => {
       if (ok) {
-        out5(`${c.green("\u2713")} app on ${c.cyan(productUrl)}`);
-        out5(`  inside the Ambasada app: ${c.cyan(new URL("/?ambasada_shell=mock", productUrl).toString())} ${c.dim("(fake shell: host bar insets, silent sign-in)")}`);
+        out6(`${c.green("\u2713")} app on ${c.cyan(productUrl)}`);
+        if (inApp?.on) out6(`  inside the Ambasada app: ${c.cyan(new URL(`${inApp.entry ?? "/"}?ambasada_shell=mock`, productUrl).toString())} ${c.dim("(fake shell: host bar insets, silent sign-in)")}`);
         hints();
         if (appWebhook) void playHub(mock, appWebhook);
-      } else if (app.child.exitCode === null) out5(c.yellow(`! ${productUrl} does not answer yet`));
+      } else if (app.child.exitCode === null) out6(c.yellow(`! ${productUrl} does not answer yet`));
     });
   } else hints();
   let closing;
   const close = () => closing ??= mock.close();
   const code = await new Promise((resolveStop) => {
     const stop2 = () => {
-      out5("\nstopping ambasada dev");
+      out6("\nstopping ambasada dev");
       app?.child.kill("SIGTERM");
       void close().then(() => resolveStop(null));
     };
@@ -4196,7 +4647,7 @@ async function devTunnel(flags) {
   const project = await loadProject();
   const stack = detectStack(project.root);
   if (!stack) throw new CliError("no dev server to start here (no next, vite or wrangler config): run it yourself and `ambasada tunnel --port <port>`");
-  const r = await resolve(flags);
+  const r = await resolveForApp(flags);
   if (!r.apiKey) throw new CliError("not logged in: run `ambasada login` first (the tunnel is registered with the real API)");
   const productUrl = new URL(str3(flags.product) ?? project.config.product?.url ?? "http://localhost:3000");
   if (!/^(localhost|127\.0\.0\.1|\[::1\])$/.test(productUrl.hostname)) throw new CliError(`product.url is ${productUrl.origin}: \`ambasada dev --tunnel --product http://localhost:3000\``);
@@ -4212,18 +4663,18 @@ async function devTunnel(flags) {
     ...info.webhook ? { AMBASADA_WEBHOOK_SECRET: info.webhook.secret } : {},
     ...info.sign_in ? { AMBASADA_AUTH_CLIENT_ID: info.sign_in.client_id, AMBASADA_AUTH_CLIENT_SECRET: info.sign_in.client_secret, AMBASADA_AUTH_ISSUER: info.sign_in.issuer } : {}
   };
-  out5(`${c.bold("ambasada dev --tunnel")} \xB7 ${c.bold(company)} on ${r.apiUrl} ${c.dim("(the real API, no mock)")}`);
+  out6(`${c.bold("ambasada dev --tunnel")} \xB7 ${c.bold(company)} on ${r.apiUrl} ${c.dim("(the real API, no mock)")}`);
   printOpened(info);
-  if (!info.sign_in) out5(c.dim("  Sign in with Ambasada is not set up on this API: login keeps the .env values"));
-  const app = startApp(project.root, stack, bin2, productUrl, env2, out5, c.dim(`${stack.pkg} \u2502`));
-  out5(`  starting ${c.bold(stack.label)} on ${productUrl.origin}`);
+  if (!info.sign_in) out6(c.dim("  Sign in with Ambasada is not set up on this API: login keeps the .env values"));
+  const app = startApp(project.root, stack, bin2, productUrl, env2, out6, c.dim(`${stack.pkg} \u2502`));
+  out6(`  starting ${c.bold(stack.label)} on ${productUrl.origin}`);
   void app.ready.then((ok) => {
-    if (ok) out5(`${c.green("\u2713")} product on ${productUrl.origin}, live at ${c.cyan(info.url)}`);
-    else if (app.child.exitCode === null) out5(c.yellow(`! ${productUrl.origin} does not answer yet`));
+    if (ok) out6(`${c.green("\u2713")} product on ${productUrl.origin}, live at ${c.cyan(info.url)}`);
+    else if (app.child.exitCode === null) out6(c.yellow(`! ${productUrl.origin} does not answer yet`));
   });
   const appExit = new Promise((resolveExit) => app.child.once("exit", (code) => resolveExit(`${stack.label} exited${code ? ` with code ${code}` : ""}`)));
   const reason = await untilStopped(Promise.race([session.ended, appExit]));
-  out5(reason ? c.yellow(`! ${reason}`) : "\nstopping ambasada dev --tunnel");
+  out6(reason ? c.yellow(`! ${reason}`) : "\nstopping ambasada dev --tunnel");
   app.child.kill("SIGTERM");
   printClosed(await session.close());
   if (reason) throw new CliError(reason);
@@ -4232,7 +4683,7 @@ function manifestWebhook(root, productUrl) {
   const file = findLocalManifest(root);
   if (!file) return null;
   try {
-    const m = JSON.parse(readFileSync5(file, "utf8"));
+    const m = JSON.parse(readFileSync6(file, "utf8"));
     const path = m.notifications?.webhook;
     return Array.isArray(m.scopes) && m.scopes.includes("notifications") && typeof path === "string" && path ? new URL(path, productUrl).toString() : null;
   } catch {
@@ -4242,12 +4693,12 @@ function manifestWebhook(root, productUrl) {
 async function playHub(mock, webhook) {
   const ping = await mock.appEvent("ping");
   if (ping.status !== 200) {
-    out5(c.yellow(`! ${webhook} answered the signed ping with ${ping.status || ping.error}: it must answer 200 (ambasada.apps.verifyWebhook)`));
+    out6(c.yellow(`! ${webhook} answered the signed ping with ${ping.status || ping.error}: it must answer 200 (ambasada.apps.verifyWebhook)`));
     return;
   }
   const enabled = await mock.appEvent("notifications_enabled");
-  if (enabled.status === 200) out5(`${c.green("\u2713")} app webhook: ping and notifications_enabled delivered to ${webhook} ${c.dim(`(token ${enabled.token})`)}`);
-  else out5(c.yellow(`! ${webhook} answered notifications_enabled with ${enabled.status || enabled.error}`));
+  if (enabled.status === 200) out6(`${c.green("\u2713")} app webhook: ping and notifications_enabled delivered to ${webhook} ${c.dim(`(token ${enabled.token})`)}`);
+  else out6(c.yellow(`! ${webhook} answered notifications_enabled with ${enabled.status || enabled.error}`));
 }
 async function link(args, flags) {
   const url = args[0];
@@ -4255,17 +4706,17 @@ async function link(args, flags) {
   const root = findRoot();
   if (!root) throw new CliError(`run \`ambasada link\` inside your app (no ${CONFIG_FILE} found)`);
   if (!await setProductUrl(root, url.replace(/\/$/, ""))) throw new CliError(`could not find \`product: { url: "\u2026" }\` in ${CONFIG_FILE}: set it by hand`);
-  out5(`${c.green("\u2713")} product.url = ${url}`);
+  out6(`${c.green("\u2713")} product.url = ${url}`);
   try {
     const res = await fetch(new URL("/health", url), { signal: AbortSignal.timeout(5e3) });
-    out5(res.ok ? `${c.green("\u2713")} ${url} answers` : c.yellow(`! ${url}/health answered ${res.status}`));
+    out6(res.ok ? `${c.green("\u2713")} ${url} answers` : c.yellow(`! ${url}/health answered ${res.status}`));
   } catch {
-    out5(c.yellow(`! ${url} is not reachable from here yet`));
+    out6(c.yellow(`! ${url} is not reachable from here yet`));
   }
-  await addons().afterDeploy({ event: "link", project: await loadProject(root), url, flags, out: out5 });
+  await addons().afterDeploy({ event: "link", project: await loadProject(root), url, flags, out: out6 });
 }
 async function hosted(flags) {
-  const r = await resolve(flags);
+  const r = await resolveForApp(flags);
   if (!r.apiKey) throw new CliError("not logged in: run `ambasada login` (or set AMBASADA_API_KEY)");
   return { local: false, apiUrl: r.apiUrl, apiKey: r.apiKey };
 }
@@ -4277,7 +4728,7 @@ async function env(args, flags) {
   if (sub === "list") {
     const res = await api(t, "GET", "/v1/product/env");
     if (json(flags, res)) return;
-    out5(table(res.vars.map((v) => ({ name: v.name, type: v.type, set_by: v.platform ? "ambasada" : "you", updated: v.updated_at?.slice(0, 19).replace("T", " ") ?? "" }))));
+    out6(table(res.vars.map((v) => ({ name: v.name, type: v.type, set_by: v.platform ? "ambasada" : "you", updated: v.updated_at?.slice(0, 19).replace("T", " ") ?? "" }))));
     return;
   }
   if ((sub === "set" || sub === "unset") && name) {
@@ -4285,14 +4736,14 @@ async function env(args, flags) {
     if (PLATFORM_ENV.test(name)) throw new CliError(`${name} is set by the platform at deploy`);
     if (sub === "unset") {
       const res2 = await api(t, "DELETE", `/v1/product/env/${name}`);
-      out5(res2.deleted ? `${c.green("\u2713")} ${name} removed${res2.worker_updated ? " from the live Worker" : ""}` : c.dim(`${name} was not set`));
+      out6(res2.deleted ? `${c.green("\u2713")} ${name} removed${res2.worker_updated ? " from the live Worker" : ""}` : c.dim(`${name} was not set`));
       return;
     }
     let text = value.join(" ");
     if (!text && !process.stdin.isTTY) text = (await new Response(process.stdin).text()).replace(/\n$/, "");
     if (!text) throw new CliError(`usage: ambasada env set ${name} <value>   (or pipe the value on stdin)`);
     const res = await api(t, "PUT", `/v1/product/env/${name}`, { json: { value: text } });
-    out5(`${c.green("\u2713")} ${name} set ${c.dim(res.worker_updated ? "(live now, and on every deploy)" : "(on the next deploy)")}`);
+    out6(`${c.green("\u2713")} ${name} set ${c.dim(res.worker_updated ? "(live within about 30 s, and on every deploy)" : "(on the next deploy)")}`);
     return;
   }
   throw new CliError("usage: ambasada env list | set NAME <value> | unset NAME");
@@ -4304,14 +4755,14 @@ async function logs(_args, flags) {
     const res = await api(t, "GET", "/v1/product/logs");
     if (json(flags, res) && !flags.follow) return;
     if (first) {
-      out5(res.last_deploy ? `last deploy v${res.last_deploy.version} at ${res.last_deploy.deployed_at.slice(0, 19).replace("T", " ")}` : c.dim("not deployed yet: `ambasada deploy`"));
-      out5(c.dim(`${res.errors.total_24h} error${res.errors.total_24h === 1 ? "" : "s"} in the last 24 h`));
+      out6(res.last_deploy ? `last deploy v${res.last_deploy.version} at ${res.last_deploy.deployed_at.slice(0, 19).replace("T", " ")}` : c.dim("not deployed yet: `ambasada deploy`"));
+      out6(c.dim(`${res.errors.total_24h} error${res.errors.total_24h === 1 ? "" : "s"} in the last 24 h`));
     }
     for (const e of [...res.errors.recent].reverse()) {
       const key = `${e.at} ${e.message}`;
       if (seen.has(key)) continue;
       seen.add(key);
-      out5(`${c.dim(e.at.slice(0, 19).replace("T", " "))} ${c.red(String(e.status ?? "error"))} ${e.method ?? ""} ${e.path ?? ""} ${e.message ?? ""}`.trimEnd());
+      out6(`${c.dim(e.at.slice(0, 19).replace("T", " "))} ${c.red(String(e.status ?? "error"))} ${e.method ?? ""} ${e.path ?? ""} ${e.message ?? ""}`.trimEnd());
     }
     if (!flags.follow) return;
     await sleep(5e3);
@@ -4319,18 +4770,19 @@ async function logs(_args, flags) {
 }
 
 // src/main.ts
-var VERSION3 = true ? "0.8.2" : "0.1.0-dev";
+var VERSION3 = true ? "0.8.4" : "0.1.0-dev";
 var MAJOR_MINOR = VERSION3.split(".").slice(0, 2).join(".");
 var HELP = `${c.bold("ambasada")} ${MAJOR_MINOR}: build and host apps on Ambasada
 
   init [dir] [--template next|spa|worker] [--village]   scaffold an app (one Cloudflare Worker): next (default,
-                                                        Next.js via OpenNext), spa (Vite + React) or worker
+       [--miniapp [--entry /app]]                       Next.js via OpenNext), spa (Vite + React) or worker
   login [--key vk_\u2026] | logout | whoami                  Ambasada ID, or a project key from developer.ambasada.dev
   dev [--port] [--tunnel] [--mock-only]                 your dev server + the platform mock (:8788): sign-in as a
                                                         fake visitor, notifications, store, local D1/KV/R2/DO
   deploy [--own] [--no-smoke] [--dry-run]               host it at https://<slug>.ambasada.dev
   tunnel [--port] | link <url> | check [url|dir]        your laptop at https://<slug>-dev.ambasada.dev; hosted
-                                                        elsewhere; the mini-app checks
+                                                        elsewhere; the product (and mini-app) checks
+  miniapp [enable [--entry /app]]                       the Ambasada mini app at a path of your app: off by default
   env list|set|unset | logs [--follow]                  the hosted Worker
   db migrate|shell|tables | kv \u2026 | files \u2026              storage (env.DB, env.KV, env.FILES); --local: wrangler's
   add <addon>                                           install an add-on (today: village)
@@ -4348,7 +4800,7 @@ ${ns.help}`)).join("\n");
   return `${HELP}${extra || VILLAGE_HINT}
 ${FOOTER}`;
 }
-var BOOLEAN = /* @__PURE__ */ new Set(["village", "no-install", "check", "json", "force", "dry-run", "agent-only", "offerings-only", "follow", "agent", "gateway", "no-sync", "no-device", "rotate", "once", "mock-only", "help", "version", "own", "no-smoke", "no-build", "tunnel", "no-register", "local"]);
+var BOOLEAN = /* @__PURE__ */ new Set(["village", "miniapp", "no-install", "check", "json", "force", "dry-run", "agent-only", "offerings-only", "follow", "agent", "gateway", "no-sync", "no-device", "rotate", "once", "mock-only", "help", "version", "own", "no-smoke", "no-build", "tunnel", "no-register", "local"]);
 function parseArgs(argv) {
   const args = [];
   const flags = {};
@@ -4379,6 +4831,7 @@ var COMMANDS = {
   tunnel,
   link,
   check,
+  miniapp,
   env,
   logs,
   db,
@@ -4390,7 +4843,7 @@ var COMMANDS = {
 var VILLAGE_COMMANDS = /* @__PURE__ */ new Set(["wallet", "ledger", "offerings", "market", "steer", "webhook", "links", "village"]);
 async function villageHint(root, addons2) {
   if (!root || addons2.get("village")) return;
-  let uses = existsSync11(join12(root, "offerings.ts"));
+  let uses = existsSync13(join14(root, "offerings.ts"));
   if (!uses) {
     try {
       uses = (await loadProject(root)).config.idea !== void 0;