@amirhosseinnateghi/vibed-cli 0.1.5 → 0.1.7

package/dist/index.js

@@ -5983,6 +5983,7 @@ import { homedir } from "node:os";
 import { join } from "node:path";
 import { mkdir, readFile, writeFile, chmod } from "node:fs/promises";
 var DEFAULT_API = "https://vibed.city";
+var LEGACY_API_DEFAULTS = /* @__PURE__ */ new Set(["https://web-production-834c9.up.railway.app"]);
 var dir = () => join(homedir(), ".vibed");
 var file = () => join(dir(), "config.json");
 async function readFileConfig() {
@@ -5994,7 +5995,8 @@ async function readFileConfig() {
 }
 async function loadConfig(overrides = {}) {
   const fromFile = await readFileConfig();
-  const apiBase = (overrides.api || process.env.VIBED_API || fromFile.apiBase || DEFAULT_API).replace(/\/$/, "");
+  let apiBase = (overrides.api || process.env.VIBED_API || fromFile.apiBase || DEFAULT_API).replace(/\/$/, "");
+  if (LEGACY_API_DEFAULTS.has(apiBase)) apiBase = DEFAULT_API;
   const token = process.env.VIBED_TOKEN || fromFile.token;
   return { apiBase, token };
 }
@@ -10371,13 +10373,19 @@ var turnAttachmentSchema = external_exports.object({
   // NUL bytes break Postgres jsonb (and mean binary-not-text) — strip defensively.
   text: external_exports.string().max(5e4).transform((t) => t.replace(/\u0000/g, "")).optional()
 });
+var voiceInputSchema = external_exports.object({
+  key: external_exports.string().min(1).max(300),
+  mime: external_exports.string().max(100).default("audio/webm")
+});
 var createTurnRequestSchema = external_exports.object({
   clientTurnId: external_exports.string().uuid(),
   content: external_exports.string().max(4e3).default(""),
   attachments: external_exports.array(turnAttachmentSchema).max(6).optional(),
+  // A voice turn carries no text yet — the worker transcribes `voice` first (م۷).
+  voice: voiceInputSchema.optional(),
   model: external_exports.string().max(100).optional()
-}).refine((v) => v.content.trim().length > 0 || (v.attachments?.length ?? 0) > 0, {
-  message: "Send a message or an attachment."
+}).refine((v) => v.content.trim().length > 0 || (v.attachments?.length ?? 0) > 0 || !!v.voice, {
+  message: "Send a message, an attachment, or a voice recording."
 });
 var builderAttachmentSchema = external_exports.object({
   kind: external_exports.enum(["image", "file", "audio"]),
@@ -10511,6 +10519,13 @@ var buildEventSchema = external_exports.discriminatedUnion("type", [
   }),
   /** Friendly status chip ("index.html", "Fixing a couple of things…"). */
   external_exports.object({ ...base, type: external_exports.literal("status"), summary: external_exports.string() }),
+  /**
+   * The user's spoken words, transcribed server-side (م۷). A voice turn starts
+   * with empty `userText` and a "🎤 Transcribing…" bubble; this event fills the
+   * user bubble with the transcript the moment the worker finishes transcribing,
+   * before the build's prose begins.
+   */
+  external_exports.object({ ...base, type: external_exports.literal("transcript"), text: external_exports.string() }),
   /** First-message category classification. */
   external_exports.object({ ...base, type: external_exports.literal("category"), category: external_exports.string() }),
   /** The validated draft landed. Preview loads it from the draft URL. */
@@ -11214,6 +11229,15 @@ function formatReport(result) {
       out2.push(`  \u2022 \u2026and ${result.inlineWarnings.length - 12} more`);
     }
   }
+  const usesBrowserStorage = [...result.warnings.map((w) => w.message), ...result.inlineWarnings].some(
+    (m) => /BROWSER_STORAGE|localStorage|sessionStorage|indexedDB/i.test(m)
+  );
+  if (usesBrowserStorage) {
+    out2.push(
+      "",
+      "\u2139 Uses browser storage (blocked in the sandbox). Port it to `window.vibed.storage` \u2014 run `vibed storage` (or the vibed_storage_guide MCP tool) for the local + shared SDK."
+    );
+  }
   return out2.join("\n");
 }
 
@@ -11391,6 +11415,82 @@ async function deleteExperience(client, idOrUrl) {
   return id;
 }
 
+// src/storageGuide.ts
+var STORAGE_GUIDE = `# vibed storage \u2014 add persistence to a vibe (\`window.vibed.storage\`)
+
+A vibe is ONE static sandboxed HTML file with no backend. \`localStorage\`,
+\`sessionStorage\`, \`indexedDB\`, and cookies are BLOCKED \u2014 they throw in the
+sandbox (\`vibed check\` warns \`BROWSER_STORAGE\`). For anything you'd persist,
+use the injected \`window.vibed.storage\` SDK instead. The platform is the
+backend; you write zero server code.
+
+## Two rules that apply to EVERY call
+1. Every call returns a Promise that can reject \u2014 always guard it. When the vibe
+   runs OUTSIDE vibed (e.g. a local file, your \`vibed draft\`/\`preview\`), calls
+   reject with \`{ code: "no_host" }\`. The vibe must stay playable standalone, so
+   treat missing storage as "no saved data yet", never a crash.
+2. WRITES require the viewer to be signed in. If not, they reject with
+   \`{ code: "unauthenticated" }\` \u2014 catch it and show a gentle "sign in to save"
+   nudge. READS of shared data work for everyone.
+
+Publishing auto-detects SDK usage and turns storage on for the post \u2014 no flags.
+
+## Tier 1 \u2014 \`vibed.storage.local\`  (LOCAL: private, per-viewer, per-post)
+Each viewer gets their own private bucket for THIS post. Nobody else can read it.
+Use for: this player's high score, their settings, "resume where I left off".
+\`\`\`js
+await vibed.storage.local.set("best", 8200);
+const best = await vibed.storage.local.get("best");   // null if never set
+await vibed.storage.local.delete("best");
+\`\`\`
+
+## Tier 2 \u2014 \`vibed.storage.shared\`  (GLOBAL: one collective store for the whole post)
+Data every viewer of the post shares \u2014 leaderboards, votes, guestbooks, shared
+state. Organized into named "collections" (like tables) you invent.
+\`\`\`js
+// key/value doc with optimistic concurrency
+await vibed.storage.shared.set("state", "doc", { phase: "open" });        // \u2192 { value, version, ... }
+await vibed.storage.shared.set("state", "doc", next, { ifVersion: 3 });   // rejects { code: "conflict" }
+const doc = await vibed.storage.shared.get("state", "doc");               // null if missing
+await vibed.storage.shared.delete("state", "doc");
+
+// append-only list + query (guestbook, bets, submissions)
+await vibed.storage.shared.append("bets", { pick: "Argentina", stake: 50 });
+const mine = await vibed.storage.shared.query("bets", { mine: true });
+const feed = await vibed.storage.shared.query("bets", { sort: "-created", limit: 30 });
+
+// counter (poll / reactions)
+const { num } = await vibed.storage.shared.increment("votes", "argentina", 1);
+
+// leaderboard: submit a score (keep the best), read the top, get MY rank
+await vibed.storage.shared.submit("leaderboard", { score, keep: "max", meta: { emoji: "\u{1F427}" } });
+const top  = await vibed.storage.shared.query("leaderboard", { sort: "-num", limit: 10 });
+const rank = await vibed.storage.shared.rank("leaderboard");   // { rank, of, score } | null
+
+// live updates (polling now): re-renders when the collection changes; returns an unsubscribe fn
+const off = vibed.storage.shared.subscribe("leaderboard", (r) => render(r.rows), { intervalMs: 4000 });
+\`\`\`
+
+## Who is watching
+\`\`\`js
+const me = await vibed.storage.identity();  // { id, signedIn, name? } \u2014 stable per viewer; identify entries
+const m  = await vibed.storage.meta();      // { postId, ... } \u2014 this post's context
+\`\`\`
+
+## Limits (free tier \u2014 design within these)
+- Each value must be JSON-serializable and under the per-value byte cap
+  (rejects \`{ code: "too_large" }\`); \`invalid\` if it can't be JSON-stringified.
+- shared collections are for structured game/app state, NOT open chat/DM/messaging.
+
+## Porting a project that used browser storage (the \`BROWSER_STORAGE\` warning)
+1. Find every \`localStorage\`/\`sessionStorage\`/\`indexedDB\`/cookie use.
+2. Per-viewer state (settings, progress, personal best) \u2192 \`vibed.storage.local\`.
+3. Anything others should see (scores to compare, shared counters, submissions)
+   \u2192 the matching \`vibed.storage.shared\` primitive above.
+4. Make every call \`await\` + \`try/catch\`, with a standalone fallback (no_host).
+5. Re-run \`vibed check\` \u2014 the \`BROWSER_STORAGE\` warning should be gone.
+`;
+
 // src/index.ts
 function parseArgs(argv) {
   const _ = [];
@@ -11423,6 +11523,7 @@ var USAGE = `vibed \u2014 make it vibed
 Usage:
   vibed login                 Authenticate this machine (opens the browser)
   vibed check [path]          Check if a project can be published (no network)
+  vibed storage               Print the persistence guide (leaderboards, saves, shared state)
   vibed preview [path]        Bundle + open the artifact locally (no publish)
   vibed draft [path]          Upload a private, hosted preview link (no publish)
   vibed publish [path]        Bundle the project and publish it to vibed
@@ -11670,6 +11771,9 @@ async function main() {
       return cmdWhoami(args);
     case "check":
       return cmdCheck(args);
+    case "storage":
+      console.log(STORAGE_GUIDE);
+      return 0;
     case "preview":
       return cmdPreview(args);
     case "draft":

package/dist/vibed.cjs

@@ -5984,6 +5984,7 @@ var import_node_os = require("node:os");
 var import_node_path = require("node:path");
 var import_promises = require("node:fs/promises");
 var DEFAULT_API = "https://vibed.city";
+var LEGACY_API_DEFAULTS = /* @__PURE__ */ new Set(["https://web-production-834c9.up.railway.app"]);
 var dir = () => (0, import_node_path.join)((0, import_node_os.homedir)(), ".vibed");
 var file = () => (0, import_node_path.join)(dir(), "config.json");
 async function readFileConfig() {
@@ -5995,7 +5996,8 @@ async function readFileConfig() {
 }
 async function loadConfig(overrides = {}) {
   const fromFile = await readFileConfig();
-  const apiBase = (overrides.api || process.env.VIBED_API || fromFile.apiBase || DEFAULT_API).replace(/\/$/, "");
+  let apiBase = (overrides.api || process.env.VIBED_API || fromFile.apiBase || DEFAULT_API).replace(/\/$/, "");
+  if (LEGACY_API_DEFAULTS.has(apiBase)) apiBase = DEFAULT_API;
   const token = process.env.VIBED_TOKEN || fromFile.token;
   return { apiBase, token };
 }
@@ -10372,13 +10374,19 @@ var turnAttachmentSchema = external_exports.object({
   // NUL bytes break Postgres jsonb (and mean binary-not-text) — strip defensively.
   text: external_exports.string().max(5e4).transform((t) => t.replace(/\u0000/g, "")).optional()
 });
+var voiceInputSchema = external_exports.object({
+  key: external_exports.string().min(1).max(300),
+  mime: external_exports.string().max(100).default("audio/webm")
+});
 var createTurnRequestSchema = external_exports.object({
   clientTurnId: external_exports.string().uuid(),
   content: external_exports.string().max(4e3).default(""),
   attachments: external_exports.array(turnAttachmentSchema).max(6).optional(),
+  // A voice turn carries no text yet — the worker transcribes `voice` first (م۷).
+  voice: voiceInputSchema.optional(),
   model: external_exports.string().max(100).optional()
-}).refine((v) => v.content.trim().length > 0 || (v.attachments?.length ?? 0) > 0, {
-  message: "Send a message or an attachment."
+}).refine((v) => v.content.trim().length > 0 || (v.attachments?.length ?? 0) > 0 || !!v.voice, {
+  message: "Send a message, an attachment, or a voice recording."
 });
 var builderAttachmentSchema = external_exports.object({
   kind: external_exports.enum(["image", "file", "audio"]),
@@ -10512,6 +10520,13 @@ var buildEventSchema = external_exports.discriminatedUnion("type", [
   }),
   /** Friendly status chip ("index.html", "Fixing a couple of things…"). */
   external_exports.object({ ...base, type: external_exports.literal("status"), summary: external_exports.string() }),
+  /**
+   * The user's spoken words, transcribed server-side (م۷). A voice turn starts
+   * with empty `userText` and a "🎤 Transcribing…" bubble; this event fills the
+   * user bubble with the transcript the moment the worker finishes transcribing,
+   * before the build's prose begins.
+   */
+  external_exports.object({ ...base, type: external_exports.literal("transcript"), text: external_exports.string() }),
   /** First-message category classification. */
   external_exports.object({ ...base, type: external_exports.literal("category"), category: external_exports.string() }),
   /** The validated draft landed. Preview loads it from the draft URL. */
@@ -11215,6 +11230,15 @@ function formatReport(result) {
       out2.push(`  \u2022 \u2026and ${result.inlineWarnings.length - 12} more`);
     }
   }
+  const usesBrowserStorage = [...result.warnings.map((w) => w.message), ...result.inlineWarnings].some(
+    (m) => /BROWSER_STORAGE|localStorage|sessionStorage|indexedDB/i.test(m)
+  );
+  if (usesBrowserStorage) {
+    out2.push(
+      "",
+      "\u2139 Uses browser storage (blocked in the sandbox). Port it to `window.vibed.storage` \u2014 run `vibed storage` (or the vibed_storage_guide MCP tool) for the local + shared SDK."
+    );
+  }
   return out2.join("\n");
 }
 
@@ -11392,6 +11416,82 @@ async function deleteExperience(client, idOrUrl) {
   return id;
 }
 
+// src/storageGuide.ts
+var STORAGE_GUIDE = `# vibed storage \u2014 add persistence to a vibe (\`window.vibed.storage\`)
+
+A vibe is ONE static sandboxed HTML file with no backend. \`localStorage\`,
+\`sessionStorage\`, \`indexedDB\`, and cookies are BLOCKED \u2014 they throw in the
+sandbox (\`vibed check\` warns \`BROWSER_STORAGE\`). For anything you'd persist,
+use the injected \`window.vibed.storage\` SDK instead. The platform is the
+backend; you write zero server code.
+
+## Two rules that apply to EVERY call
+1. Every call returns a Promise that can reject \u2014 always guard it. When the vibe
+   runs OUTSIDE vibed (e.g. a local file, your \`vibed draft\`/\`preview\`), calls
+   reject with \`{ code: "no_host" }\`. The vibe must stay playable standalone, so
+   treat missing storage as "no saved data yet", never a crash.
+2. WRITES require the viewer to be signed in. If not, they reject with
+   \`{ code: "unauthenticated" }\` \u2014 catch it and show a gentle "sign in to save"
+   nudge. READS of shared data work for everyone.
+
+Publishing auto-detects SDK usage and turns storage on for the post \u2014 no flags.
+
+## Tier 1 \u2014 \`vibed.storage.local\`  (LOCAL: private, per-viewer, per-post)
+Each viewer gets their own private bucket for THIS post. Nobody else can read it.
+Use for: this player's high score, their settings, "resume where I left off".
+\`\`\`js
+await vibed.storage.local.set("best", 8200);
+const best = await vibed.storage.local.get("best");   // null if never set
+await vibed.storage.local.delete("best");
+\`\`\`
+
+## Tier 2 \u2014 \`vibed.storage.shared\`  (GLOBAL: one collective store for the whole post)
+Data every viewer of the post shares \u2014 leaderboards, votes, guestbooks, shared
+state. Organized into named "collections" (like tables) you invent.
+\`\`\`js
+// key/value doc with optimistic concurrency
+await vibed.storage.shared.set("state", "doc", { phase: "open" });        // \u2192 { value, version, ... }
+await vibed.storage.shared.set("state", "doc", next, { ifVersion: 3 });   // rejects { code: "conflict" }
+const doc = await vibed.storage.shared.get("state", "doc");               // null if missing
+await vibed.storage.shared.delete("state", "doc");
+
+// append-only list + query (guestbook, bets, submissions)
+await vibed.storage.shared.append("bets", { pick: "Argentina", stake: 50 });
+const mine = await vibed.storage.shared.query("bets", { mine: true });
+const feed = await vibed.storage.shared.query("bets", { sort: "-created", limit: 30 });
+
+// counter (poll / reactions)
+const { num } = await vibed.storage.shared.increment("votes", "argentina", 1);
+
+// leaderboard: submit a score (keep the best), read the top, get MY rank
+await vibed.storage.shared.submit("leaderboard", { score, keep: "max", meta: { emoji: "\u{1F427}" } });
+const top  = await vibed.storage.shared.query("leaderboard", { sort: "-num", limit: 10 });
+const rank = await vibed.storage.shared.rank("leaderboard");   // { rank, of, score } | null
+
+// live updates (polling now): re-renders when the collection changes; returns an unsubscribe fn
+const off = vibed.storage.shared.subscribe("leaderboard", (r) => render(r.rows), { intervalMs: 4000 });
+\`\`\`
+
+## Who is watching
+\`\`\`js
+const me = await vibed.storage.identity();  // { id, signedIn, name? } \u2014 stable per viewer; identify entries
+const m  = await vibed.storage.meta();      // { postId, ... } \u2014 this post's context
+\`\`\`
+
+## Limits (free tier \u2014 design within these)
+- Each value must be JSON-serializable and under the per-value byte cap
+  (rejects \`{ code: "too_large" }\`); \`invalid\` if it can't be JSON-stringified.
+- shared collections are for structured game/app state, NOT open chat/DM/messaging.
+
+## Porting a project that used browser storage (the \`BROWSER_STORAGE\` warning)
+1. Find every \`localStorage\`/\`sessionStorage\`/\`indexedDB\`/cookie use.
+2. Per-viewer state (settings, progress, personal best) \u2192 \`vibed.storage.local\`.
+3. Anything others should see (scores to compare, shared counters, submissions)
+   \u2192 the matching \`vibed.storage.shared\` primitive above.
+4. Make every call \`await\` + \`try/catch\`, with a standalone fallback (no_host).
+5. Re-run \`vibed check\` \u2014 the \`BROWSER_STORAGE\` warning should be gone.
+`;
+
 // src/index.ts
 function parseArgs(argv) {
   const _ = [];
@@ -11424,6 +11524,7 @@ var USAGE = `vibed \u2014 make it vibed
 Usage:
   vibed login                 Authenticate this machine (opens the browser)
   vibed check [path]          Check if a project can be published (no network)
+  vibed storage               Print the persistence guide (leaderboards, saves, shared state)
   vibed preview [path]        Bundle + open the artifact locally (no publish)
   vibed draft [path]          Upload a private, hosted preview link (no publish)
   vibed publish [path]        Bundle the project and publish it to vibed
@@ -11671,6 +11772,9 @@ async function main() {
       return cmdWhoami(args);
     case "check":
       return cmdCheck(args);
+    case "storage":
+      console.log(STORAGE_GUIDE);
+      return 0;
     case "preview":
       return cmdPreview(args);
     case "draft":

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amirhosseinnateghi/vibed-cli",
-  "version": "0.1.5",
+  "version": "0.1.7",
   "description": "make it vibed — check, bundle, and publish a project to vibed from the terminal",
   "license": "MIT",
   "type": "module",