@amirhosseinnateghi/vibed-cli 0.1.6 → 0.1.7

package/dist/index.js

@@ -11229,6 +11229,15 @@ function formatReport(result) {
       out2.push(`  \u2022 \u2026and ${result.inlineWarnings.length - 12} more`);
     }
   }
+  const usesBrowserStorage = [...result.warnings.map((w) => w.message), ...result.inlineWarnings].some(
+    (m) => /BROWSER_STORAGE|localStorage|sessionStorage|indexedDB/i.test(m)
+  );
+  if (usesBrowserStorage) {
+    out2.push(
+      "",
+      "\u2139 Uses browser storage (blocked in the sandbox). Port it to `window.vibed.storage` \u2014 run `vibed storage` (or the vibed_storage_guide MCP tool) for the local + shared SDK."
+    );
+  }
   return out2.join("\n");
 }
 
@@ -11406,6 +11415,82 @@ async function deleteExperience(client, idOrUrl) {
   return id;
 }
 
+// src/storageGuide.ts
+var STORAGE_GUIDE = `# vibed storage \u2014 add persistence to a vibe (\`window.vibed.storage\`)
+
+A vibe is ONE static sandboxed HTML file with no backend. \`localStorage\`,
+\`sessionStorage\`, \`indexedDB\`, and cookies are BLOCKED \u2014 they throw in the
+sandbox (\`vibed check\` warns \`BROWSER_STORAGE\`). For anything you'd persist,
+use the injected \`window.vibed.storage\` SDK instead. The platform is the
+backend; you write zero server code.
+
+## Two rules that apply to EVERY call
+1. Every call returns a Promise that can reject \u2014 always guard it. When the vibe
+   runs OUTSIDE vibed (e.g. a local file, your \`vibed draft\`/\`preview\`), calls
+   reject with \`{ code: "no_host" }\`. The vibe must stay playable standalone, so
+   treat missing storage as "no saved data yet", never a crash.
+2. WRITES require the viewer to be signed in. If not, they reject with
+   \`{ code: "unauthenticated" }\` \u2014 catch it and show a gentle "sign in to save"
+   nudge. READS of shared data work for everyone.
+
+Publishing auto-detects SDK usage and turns storage on for the post \u2014 no flags.
+
+## Tier 1 \u2014 \`vibed.storage.local\`  (LOCAL: private, per-viewer, per-post)
+Each viewer gets their own private bucket for THIS post. Nobody else can read it.
+Use for: this player's high score, their settings, "resume where I left off".
+\`\`\`js
+await vibed.storage.local.set("best", 8200);
+const best = await vibed.storage.local.get("best");   // null if never set
+await vibed.storage.local.delete("best");
+\`\`\`
+
+## Tier 2 \u2014 \`vibed.storage.shared\`  (GLOBAL: one collective store for the whole post)
+Data every viewer of the post shares \u2014 leaderboards, votes, guestbooks, shared
+state. Organized into named "collections" (like tables) you invent.
+\`\`\`js
+// key/value doc with optimistic concurrency
+await vibed.storage.shared.set("state", "doc", { phase: "open" });        // \u2192 { value, version, ... }
+await vibed.storage.shared.set("state", "doc", next, { ifVersion: 3 });   // rejects { code: "conflict" }
+const doc = await vibed.storage.shared.get("state", "doc");               // null if missing
+await vibed.storage.shared.delete("state", "doc");
+
+// append-only list + query (guestbook, bets, submissions)
+await vibed.storage.shared.append("bets", { pick: "Argentina", stake: 50 });
+const mine = await vibed.storage.shared.query("bets", { mine: true });
+const feed = await vibed.storage.shared.query("bets", { sort: "-created", limit: 30 });
+
+// counter (poll / reactions)
+const { num } = await vibed.storage.shared.increment("votes", "argentina", 1);
+
+// leaderboard: submit a score (keep the best), read the top, get MY rank
+await vibed.storage.shared.submit("leaderboard", { score, keep: "max", meta: { emoji: "\u{1F427}" } });
+const top  = await vibed.storage.shared.query("leaderboard", { sort: "-num", limit: 10 });
+const rank = await vibed.storage.shared.rank("leaderboard");   // { rank, of, score } | null
+
+// live updates (polling now): re-renders when the collection changes; returns an unsubscribe fn
+const off = vibed.storage.shared.subscribe("leaderboard", (r) => render(r.rows), { intervalMs: 4000 });
+\`\`\`
+
+## Who is watching
+\`\`\`js
+const me = await vibed.storage.identity();  // { id, signedIn, name? } \u2014 stable per viewer; identify entries
+const m  = await vibed.storage.meta();      // { postId, ... } \u2014 this post's context
+\`\`\`
+
+## Limits (free tier \u2014 design within these)
+- Each value must be JSON-serializable and under the per-value byte cap
+  (rejects \`{ code: "too_large" }\`); \`invalid\` if it can't be JSON-stringified.
+- shared collections are for structured game/app state, NOT open chat/DM/messaging.
+
+## Porting a project that used browser storage (the \`BROWSER_STORAGE\` warning)
+1. Find every \`localStorage\`/\`sessionStorage\`/\`indexedDB\`/cookie use.
+2. Per-viewer state (settings, progress, personal best) \u2192 \`vibed.storage.local\`.
+3. Anything others should see (scores to compare, shared counters, submissions)
+   \u2192 the matching \`vibed.storage.shared\` primitive above.
+4. Make every call \`await\` + \`try/catch\`, with a standalone fallback (no_host).
+5. Re-run \`vibed check\` \u2014 the \`BROWSER_STORAGE\` warning should be gone.
+`;
+
 // src/index.ts
 function parseArgs(argv) {
   const _ = [];
@@ -11438,6 +11523,7 @@ var USAGE = `vibed \u2014 make it vibed
 Usage:
   vibed login                 Authenticate this machine (opens the browser)
   vibed check [path]          Check if a project can be published (no network)
+  vibed storage               Print the persistence guide (leaderboards, saves, shared state)
   vibed preview [path]        Bundle + open the artifact locally (no publish)
   vibed draft [path]          Upload a private, hosted preview link (no publish)
   vibed publish [path]        Bundle the project and publish it to vibed
@@ -11685,6 +11771,9 @@ async function main() {
       return cmdWhoami(args);
     case "check":
       return cmdCheck(args);
+    case "storage":
+      console.log(STORAGE_GUIDE);
+      return 0;
     case "preview":
       return cmdPreview(args);
     case "draft":

package/dist/vibed.cjs

@@ -11230,6 +11230,15 @@ function formatReport(result) {
       out2.push(`  \u2022 \u2026and ${result.inlineWarnings.length - 12} more`);
     }
   }
+  const usesBrowserStorage = [...result.warnings.map((w) => w.message), ...result.inlineWarnings].some(
+    (m) => /BROWSER_STORAGE|localStorage|sessionStorage|indexedDB/i.test(m)
+  );
+  if (usesBrowserStorage) {
+    out2.push(
+      "",
+      "\u2139 Uses browser storage (blocked in the sandbox). Port it to `window.vibed.storage` \u2014 run `vibed storage` (or the vibed_storage_guide MCP tool) for the local + shared SDK."
+    );
+  }
   return out2.join("\n");
 }
 
@@ -11407,6 +11416,82 @@ async function deleteExperience(client, idOrUrl) {
   return id;
 }
 
+// src/storageGuide.ts
+var STORAGE_GUIDE = `# vibed storage \u2014 add persistence to a vibe (\`window.vibed.storage\`)
+
+A vibe is ONE static sandboxed HTML file with no backend. \`localStorage\`,
+\`sessionStorage\`, \`indexedDB\`, and cookies are BLOCKED \u2014 they throw in the
+sandbox (\`vibed check\` warns \`BROWSER_STORAGE\`). For anything you'd persist,
+use the injected \`window.vibed.storage\` SDK instead. The platform is the
+backend; you write zero server code.
+
+## Two rules that apply to EVERY call
+1. Every call returns a Promise that can reject \u2014 always guard it. When the vibe
+   runs OUTSIDE vibed (e.g. a local file, your \`vibed draft\`/\`preview\`), calls
+   reject with \`{ code: "no_host" }\`. The vibe must stay playable standalone, so
+   treat missing storage as "no saved data yet", never a crash.
+2. WRITES require the viewer to be signed in. If not, they reject with
+   \`{ code: "unauthenticated" }\` \u2014 catch it and show a gentle "sign in to save"
+   nudge. READS of shared data work for everyone.
+
+Publishing auto-detects SDK usage and turns storage on for the post \u2014 no flags.
+
+## Tier 1 \u2014 \`vibed.storage.local\`  (LOCAL: private, per-viewer, per-post)
+Each viewer gets their own private bucket for THIS post. Nobody else can read it.
+Use for: this player's high score, their settings, "resume where I left off".
+\`\`\`js
+await vibed.storage.local.set("best", 8200);
+const best = await vibed.storage.local.get("best");   // null if never set
+await vibed.storage.local.delete("best");
+\`\`\`
+
+## Tier 2 \u2014 \`vibed.storage.shared\`  (GLOBAL: one collective store for the whole post)
+Data every viewer of the post shares \u2014 leaderboards, votes, guestbooks, shared
+state. Organized into named "collections" (like tables) you invent.
+\`\`\`js
+// key/value doc with optimistic concurrency
+await vibed.storage.shared.set("state", "doc", { phase: "open" });        // \u2192 { value, version, ... }
+await vibed.storage.shared.set("state", "doc", next, { ifVersion: 3 });   // rejects { code: "conflict" }
+const doc = await vibed.storage.shared.get("state", "doc");               // null if missing
+await vibed.storage.shared.delete("state", "doc");
+
+// append-only list + query (guestbook, bets, submissions)
+await vibed.storage.shared.append("bets", { pick: "Argentina", stake: 50 });
+const mine = await vibed.storage.shared.query("bets", { mine: true });
+const feed = await vibed.storage.shared.query("bets", { sort: "-created", limit: 30 });
+
+// counter (poll / reactions)
+const { num } = await vibed.storage.shared.increment("votes", "argentina", 1);
+
+// leaderboard: submit a score (keep the best), read the top, get MY rank
+await vibed.storage.shared.submit("leaderboard", { score, keep: "max", meta: { emoji: "\u{1F427}" } });
+const top  = await vibed.storage.shared.query("leaderboard", { sort: "-num", limit: 10 });
+const rank = await vibed.storage.shared.rank("leaderboard");   // { rank, of, score } | null
+
+// live updates (polling now): re-renders when the collection changes; returns an unsubscribe fn
+const off = vibed.storage.shared.subscribe("leaderboard", (r) => render(r.rows), { intervalMs: 4000 });
+\`\`\`
+
+## Who is watching
+\`\`\`js
+const me = await vibed.storage.identity();  // { id, signedIn, name? } \u2014 stable per viewer; identify entries
+const m  = await vibed.storage.meta();      // { postId, ... } \u2014 this post's context
+\`\`\`
+
+## Limits (free tier \u2014 design within these)
+- Each value must be JSON-serializable and under the per-value byte cap
+  (rejects \`{ code: "too_large" }\`); \`invalid\` if it can't be JSON-stringified.
+- shared collections are for structured game/app state, NOT open chat/DM/messaging.
+
+## Porting a project that used browser storage (the \`BROWSER_STORAGE\` warning)
+1. Find every \`localStorage\`/\`sessionStorage\`/\`indexedDB\`/cookie use.
+2. Per-viewer state (settings, progress, personal best) \u2192 \`vibed.storage.local\`.
+3. Anything others should see (scores to compare, shared counters, submissions)
+   \u2192 the matching \`vibed.storage.shared\` primitive above.
+4. Make every call \`await\` + \`try/catch\`, with a standalone fallback (no_host).
+5. Re-run \`vibed check\` \u2014 the \`BROWSER_STORAGE\` warning should be gone.
+`;
+
 // src/index.ts
 function parseArgs(argv) {
   const _ = [];
@@ -11439,6 +11524,7 @@ var USAGE = `vibed \u2014 make it vibed
 Usage:
   vibed login                 Authenticate this machine (opens the browser)
   vibed check [path]          Check if a project can be published (no network)
+  vibed storage               Print the persistence guide (leaderboards, saves, shared state)
   vibed preview [path]        Bundle + open the artifact locally (no publish)
   vibed draft [path]          Upload a private, hosted preview link (no publish)
   vibed publish [path]        Bundle the project and publish it to vibed
@@ -11686,6 +11772,9 @@ async function main() {
       return cmdWhoami(args);
     case "check":
       return cmdCheck(args);
+    case "storage":
+      console.log(STORAGE_GUIDE);
+      return 0;
     case "preview":
       return cmdPreview(args);
     case "draft":

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amirhosseinnateghi/vibed-cli",
-  "version": "0.1.6",
+  "version": "0.1.7",
   "description": "make it vibed — check, bundle, and publish a project to vibed from the terminal",
   "license": "MIT",
   "type": "module",