@anby/cli 0.1.1 → 0.7.0

package/dist/commands/codegen.d.ts

@@ -0,0 +1,23 @@
+/**
+ * `anby app codegen [--watch]` — PLAN-app-bootstrap-phase2 PR5.
+ *
+ * Reads `anby-app.manifest.json` and writes `.anby/types.d.ts` with
+ * TypeScript declaration merging that extends `@anby/platform-sdk`'s
+ * `AppProvidedEvents` and `AppRequiredEvents` interfaces. After this
+ * runs, calls to `publishEvent({ type: 'org.node.created', ... })` get
+ * compile-time autocomplete and typo-detection on the event name.
+ *
+ * For Vite users, prefer the `@anby/platform-sdk/vite` plugin which runs
+ * the same logic automatically as part of the dev server. This CLI
+ * exists for non-Vite runtimes (NestJS, plain Node, ESBuild, etc).
+ *
+ * `--watch` re-runs whenever the manifest file changes. Useful as a
+ * background process during dev: `anby app codegen --watch &`.
+ */
+interface CodegenOptions {
+    manifest: string;
+    out: string;
+    watch?: boolean;
+}
+export declare function codegenCommand(options: CodegenOptions): Promise<void>;
+export {};

package/dist/commands/codegen.js

@@ -0,0 +1,77 @@
+import { readFileSync, writeFileSync, mkdirSync, watch, existsSync } from 'node:fs';
+import { dirname, resolve, isAbsolute } from 'node:path';
+import kleur from 'kleur';
+function renderTypes(provides, requires) {
+    const sections = [];
+    sections.push('// Generated by @anby/cli — DO NOT EDIT.');
+    sections.push('// Re-runs whenever anby-app.manifest.json changes.');
+    sections.push('');
+    sections.push("declare module '@anby/platform-sdk' {");
+    if (provides.length > 0) {
+        sections.push('  interface AppProvidedEvents {');
+        for (const name of provides) {
+            sections.push(`    ${JSON.stringify(name)}: Record<string, unknown>;`);
+        }
+        sections.push('  }');
+    }
+    else {
+        sections.push('  interface AppProvidedEvents {}');
+    }
+    if (requires.length > 0) {
+        sections.push('  interface AppRequiredEvents {');
+        for (const name of requires) {
+            sections.push(`    ${JSON.stringify(name)}: Record<string, unknown>;`);
+        }
+        sections.push('  }');
+    }
+    else {
+        sections.push('  interface AppRequiredEvents {}');
+    }
+    sections.push('}');
+    sections.push('');
+    sections.push('export {};');
+    sections.push('');
+    return sections.join('\n');
+}
+function generate(manifestAbs, outAbs) {
+    if (!existsSync(manifestAbs)) {
+        console.error(kleur.red(`✖ Manifest not found at ${manifestAbs}`));
+        process.exit(1);
+    }
+    const raw = readFileSync(manifestAbs, 'utf-8');
+    const parsed = JSON.parse(raw);
+    const provides = Array.isArray(parsed.provides?.events) ? parsed.provides.events : [];
+    const requires = Array.isArray(parsed.requires?.events) ? parsed.requires.events : [];
+    const content = renderTypes(provides, requires);
+    mkdirSync(dirname(outAbs), { recursive: true });
+    writeFileSync(outAbs, content);
+    console.log(kleur.green(`✔ Wrote ${outAbs} (${provides.length} provided, ${requires.length} required)`));
+}
+export async function codegenCommand(options) {
+    const manifestAbs = isAbsolute(options.manifest)
+        ? options.manifest
+        : resolve(process.cwd(), options.manifest);
+    const outAbs = isAbsolute(options.out)
+        ? options.out
+        : resolve(process.cwd(), options.out);
+    generate(manifestAbs, outAbs);
+    if (options.watch) {
+        console.log(kleur.dim(`Watching ${manifestAbs} for changes... (Ctrl+C to exit)`));
+        let debounce = null;
+        watch(manifestAbs, () => {
+            if (debounce)
+                clearTimeout(debounce);
+            debounce = setTimeout(() => {
+                try {
+                    generate(manifestAbs, outAbs);
+                }
+                catch (err) {
+                    console.error(kleur.red(`✖ Codegen failed: ${err.message}`));
+                }
+            }, 100);
+        });
+        // Keep process alive
+        await new Promise(() => { });
+    }
+}
+//# sourceMappingURL=codegen.js.map

package/dist/commands/codegen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codegen.js","sourceRoot":"","sources":["../../src/commands/codegen.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACpF,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,KAAK,MAAM,OAAO,CAAC;AA8B1B,SAAS,WAAW,CAAC,QAAkB,EAAE,QAAkB;IACzD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;IAC1D,QAAQ,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;IACrE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClB,QAAQ,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACvD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,QAAQ,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QACjD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,QAAQ,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACzE,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;SAAM,CAAC;QACN,QAAQ,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,QAAQ,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QACjD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,QAAQ,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACzE,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;SAAM,CAAC;QACN,QAAQ,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IACpD,CAAC;IACD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClB,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClB,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,QAAQ,CAAC,WAAmB,EAAE,MAAc;IACnD,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,2BAA2B,WAAW,EAAE,CAAC,CAAC,CAAC;QACnE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAwB,CAAC;IACtD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAS,CAAC,MAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAS,CAAC,MAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAChD,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,KAAK,CACT,WAAW,MAAM,KAAK,QAAQ,CAAC,MAAM,cAAc,QAAQ,CAAC,MAAM,YAAY,CAC/E,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAuB;IAC1D,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC9C,CAAC,CAAC,OAAO,CAAC,QAAQ;QAClB,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC;QACpC,CAAC,CAAC,OAAO,CAAC,GAAG;QACb,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAExC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAE9B,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,WAAW,kCAAkC,CAAC,CAAC,CAAC;QAClF,IAAI,QAAQ,GAA0B,IAAI,CAAC;QAC3C,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE;YACtB,IAAI,QAAQ;gBAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;YACrC,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE;gBACzB,IAAI,CAAC;oBACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;gBAChC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,qBAAsB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBAC1E,CAAC;YACH,CAAC,EAAE,GAAG,CAAC,CAAC;QACV,CAAC,CAAC,CAAC;QACH,qBAAqB;QACrB,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC"}

package/dist/commands/index.js

@@ -3,6 +3,7 @@ import { validateCommand } from './validate.js';
 import { publishCommand } from './publish.js';
 import { installCommand } from './install.js';
 import { listCommand } from './list.js';
+import { codegenCommand } from './codegen.js';
 /**
  * All app-lifecycle commands live under `anby app <verb>` so we can add
  * other command namespaces later (`anby tenant`, `anby events`, etc.)
@@ -30,6 +31,8 @@ export function registerAppCommands(program) {
         .option('--public-url <url>', 'Public URL where this service is reachable')
         .option('--changelog <text>', 'Optional changelog note attached to this version')
         .option('--featured', 'Flag the app as featured in the setup wizard')
+        .option('--save-to <path>', 'Write the assembled ANBY_APP_TOKEN to this file (e.g. .env.local)')
+        .option('--platform-url <url>', 'Override the platform base URL embedded in the token (defaults to registry URL with /registry stripped)')
         .action(publishCommand);
     app
         .command('install')
@@ -44,5 +47,12 @@ export function registerAppCommands(program) {
         .option('--tenant <tenantId>', 'Show installed apps for this tenant')
         .option('--registry <url>', 'Registry base URL', process.env.REGISTRY_URL || 'http://localhost:3003')
         .action(listCommand);
+    app
+        .command('codegen')
+        .description('Generate TypeScript types from anby-app.manifest.json (event names, etc)')
+        .option('--manifest <path>', 'Path to manifest file', './anby-app.manifest.json')
+        .option('--out <path>', 'Output path for generated types', './.anby/types.d.ts')
+        .option('--watch', 'Watch the manifest and regenerate on change')
+        .action(codegenCommand);
 }
 //# sourceMappingURL=index.js.map

package/dist/commands/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/commands/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC;IAEnE,GAAG;SACA,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,gEAAgE,CAAC;SAC7E,MAAM,CAAC,WAAW,EAAE,iDAAiD,CAAC;SACtE,MAAM,CAAC,eAAe,EAAE,yBAAyB,CAAC;SAClD,MAAM,CAAC,eAAe,EAAE,cAAc,EAAE,MAAM,CAAC;SAC/C,MAAM,CAAC,WAAW,CAAC,CAAC;IAEvB,GAAG;SACA,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CAAC,mEAAmE,CAAC;SAChF,MAAM,CAAC,mBAAmB,EAAE,uBAAuB,EAAE,0BAA0B,CAAC;SAChF,MAAM,CAAC,eAAe,CAAC,CAAC;IAE3B,GAAG;SACA,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,sDAAsD,CAAC;SACnE,MAAM,CAAC,mBAAmB,EAAE,uBAAuB,EAAE,0BAA0B,CAAC;SAChF,MAAM,CAAC,kBAAkB,EAAE,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,uBAAuB,CAAC;SACpG,MAAM,CAAC,oBAAoB,EAAE,4CAA4C,CAAC;SAC1E,MAAM,CAAC,oBAAoB,EAAE,kDAAkD,CAAC;SAChF,MAAM,CAAC,YAAY,EAAE,8CAA8C,CAAC;SACpE,MAAM,CAAC,cAAc,CAAC,CAAC;IAE1B,GAAG;SACA,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,6BAA6B,CAAC;SAC1C,cAAc,CAAC,qBAAqB,EAAE,WAAW,CAAC;SAClD,cAAc,CAAC,eAAe,EAAE,mBAAmB,CAAC;SACpD,MAAM,CAAC,kBAAkB,EAAE,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,uBAAuB,CAAC;SACpG,MAAM,CAAC,cAAc,CAAC,CAAC;IAE1B,GAAG;SACA,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,6DAA6D,CAAC;SAC1E,MAAM,CAAC,qBAAqB,EAAE,qCAAqC,CAAC;SACpE,MAAM,CAAC,kBAAkB,EAAE,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,uBAAuB,CAAC;SACpG,MAAM,CAAC,WAAW,CAAC,CAAC;AACzB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/commands/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC;IAEnE,GAAG;SACA,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,gEAAgE,CAAC;SAC7E,MAAM,CAAC,WAAW,EAAE,iDAAiD,CAAC;SACtE,MAAM,CAAC,eAAe,EAAE,yBAAyB,CAAC;SAClD,MAAM,CAAC,eAAe,EAAE,cAAc,EAAE,MAAM,CAAC;SAC/C,MAAM,CAAC,WAAW,CAAC,CAAC;IAEvB,GAAG;SACA,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CAAC,mEAAmE,CAAC;SAChF,MAAM,CAAC,mBAAmB,EAAE,uBAAuB,EAAE,0BAA0B,CAAC;SAChF,MAAM,CAAC,eAAe,CAAC,CAAC;IAE3B,GAAG;SACA,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,sDAAsD,CAAC;SACnE,MAAM,CAAC,mBAAmB,EAAE,uBAAuB,EAAE,0BAA0B,CAAC;SAChF,MAAM,CAAC,kBAAkB,EAAE,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,uBAAuB,CAAC;SACpG,MAAM,CAAC,oBAAoB,EAAE,4CAA4C,CAAC;SAC1E,MAAM,CAAC,oBAAoB,EAAE,kDAAkD,CAAC;SAChF,MAAM,CAAC,YAAY,EAAE,8CAA8C,CAAC;SACpE,MAAM,CAAC,kBAAkB,EAAE,mEAAmE,CAAC;SAC/F,MAAM,CAAC,sBAAsB,EAAE,yGAAyG,CAAC;SACzI,MAAM,CAAC,cAAc,CAAC,CAAC;IAE1B,GAAG;SACA,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,6BAA6B,CAAC;SAC1C,cAAc,CAAC,qBAAqB,EAAE,WAAW,CAAC;SAClD,cAAc,CAAC,eAAe,EAAE,mBAAmB,CAAC;SACpD,MAAM,CAAC,kBAAkB,EAAE,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,uBAAuB,CAAC;SACpG,MAAM,CAAC,cAAc,CAAC,CAAC;IAE1B,GAAG;SACA,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,6DAA6D,CAAC;SAC1E,MAAM,CAAC,qBAAqB,EAAE,qCAAqC,CAAC;SACpE,MAAM,CAAC,kBAAkB,EAAE,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,uBAAuB,CAAC;SACpG,MAAM,CAAC,WAAW,CAAC,CAAC;IAEvB,GAAG;SACA,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,0EAA0E,CAAC;SACvF,MAAM,CAAC,mBAAmB,EAAE,uBAAuB,EAAE,0BAA0B,CAAC;SAChF,MAAM,CAAC,cAAc,EAAE,iCAAiC,EAAE,oBAAoB,CAAC;SAC/E,MAAM,CAAC,SAAS,EAAE,6CAA6C,CAAC;SAChE,MAAM,CAAC,cAAc,CAAC,CAAC;AAC5B,CAAC"}

package/dist/commands/init.d.ts

@@ -4,9 +4,19 @@ interface InitOptions {
     port?: string;
 }
 /**
- * Writes an `anby-app.manifest.json` skeleton that passes the AJV
- * schema out of the box. Refuses to overwrite an existing file so a
- * developer can't accidentally clobber their real manifest.
+ * One-stop project bootstrap for an Anby app.
+ *
+ * Run once after `npm create remix` (or any Vite-based stack):
+ *
+ *   1. Writes `anby-app.manifest.json` skeleton
+ *   2. Patches `vite.config.ts` to load `anbyVitePlugin()` from
+ *      `@anby/platform-sdk/vite` (idempotent — skips if already wired)
+ *   3. Adds `public/_anby/` to `.gitignore`
+ *
+ * After this single command the app is ready for the Marketplace
+ * Submit-app form: every dev/build run regenerates
+ * `public/_anby/manifest.json`, which the marketplace shell fetches
+ * directly. The publisher never edits any code by hand.
  */
 export declare function initCommand(options: InitOptions): Promise<void>;
 export {};

package/dist/commands/init.js

@@ -1,17 +1,36 @@
-import { writeFile, access } from 'node:fs/promises';
+import { writeFile, readFile, access } from 'node:fs/promises';
 import { resolve } from 'node:path';
 import kleur from 'kleur';
 /**
- * Writes an `anby-app.manifest.json` skeleton that passes the AJV
- * schema out of the box. Refuses to overwrite an existing file so a
- * developer can't accidentally clobber their real manifest.
+ * One-stop project bootstrap for an Anby app.
+ *
+ * Run once after `npm create remix` (or any Vite-based stack):
+ *
+ *   1. Writes `anby-app.manifest.json` skeleton
+ *   2. Patches `vite.config.ts` to load `anbyVitePlugin()` from
+ *      `@anby/platform-sdk/vite` (idempotent — skips if already wired)
+ *   3. Adds `public/_anby/` to `.gitignore`
+ *
+ * After this single command the app is ready for the Marketplace
+ * Submit-app form: every dev/build run regenerates
+ * `public/_anby/manifest.json`, which the marketplace shell fetches
+ * directly. The publisher never edits any code by hand.
  */
 export async function initCommand(options) {
+    await writeManifest(options);
+    await patchViteConfig();
+    await patchGitignore();
+    const port = Number.parseInt(options.port ?? '3099', 10);
+    console.log('');
+    console.log(kleur.green('✔ Anby app bootstrap complete'));
+    console.log(kleur.dim(`  Next: npm run dev — then submit ${kleur.cyan(`http://localhost:${port}`)} via the Marketplace UI`));
+}
+async function writeManifest(options) {
     const target = resolve('anby-app.manifest.json');
     try {
         await access(target);
-        console.error(kleur.red(`✖ ${target} already exists — refusing to overwrite`));
-        process.exit(1);
+        console.log(kleur.dim(`• ${target} already exists — leaving it alone`));
+        return;
     }
     catch {
         // ok — file doesn't exist
@@ -50,6 +69,111 @@ export async function initCommand(options) {
     };
     await writeFile(target, JSON.stringify(manifest, null, 2) + '\n', 'utf-8');
     console.log(kleur.green(`✔ Wrote ${target}`));
-    console.log(kleur.dim(`  Next: anby app validate && anby app publish --public-url http://localhost:${port}`));
+}
+/**
+ * Idempotently patch `vite.config.ts` (or `.js`/`.mts`/`.mjs`) to load
+ * `anbyVitePlugin()`. The patch is a deliberately small textual edit:
+ * we add the import line near the existing imports and inject
+ * `anbyVitePlugin(),` as the first entry of the `plugins: [` array.
+ *
+ * If the file is too unusual to patch safely (no `plugins: [` literal),
+ * we print a clear instruction for the publisher to add the lines by
+ * hand. Either way the manifest skeleton has already been written, so
+ * the command stays useful even when the patch fails.
+ */
+async function patchViteConfig() {
+    const candidates = [
+        'vite.config.ts',
+        'vite.config.mts',
+        'vite.config.js',
+        'vite.config.mjs',
+    ];
+    let target = null;
+    for (const name of candidates) {
+        try {
+            await access(resolve(name));
+            target = name;
+            break;
+        }
+        catch {
+            // try next
+        }
+    }
+    if (!target) {
+        console.log(kleur.dim('• No vite.config.* found — skipping plugin wiring. Add `anbyVitePlugin()` from `@anby/platform-sdk/vite` to your bundler manually.'));
+        return;
+    }
+    const path = resolve(target);
+    const original = await readFile(path, 'utf-8');
+    if (original.includes('anbyVitePlugin')) {
+        console.log(kleur.dim(`• ${target} already wires anbyVitePlugin — no patch needed`));
+        return;
+    }
+    const importLine = "import { anbyVitePlugin } from '@anby/platform-sdk/vite';";
+    // Insert the import after the last existing top-level `import ... from`
+    // line so we don't accidentally split a multi-line import statement.
+    const importRegex = /^import .+ from .+;?\s*$/gm;
+    let lastImportEnd = -1;
+    for (const match of original.matchAll(importRegex)) {
+        if (match.index !== undefined) {
+            lastImportEnd = match.index + match[0].length;
+        }
+    }
+    let withImport;
+    if (lastImportEnd >= 0) {
+        withImport =
+            original.slice(0, lastImportEnd) +
+                '\n' +
+                importLine +
+                original.slice(lastImportEnd);
+    }
+    else {
+        withImport = importLine + '\n' + original;
+    }
+    // Inject `anbyVitePlugin(),` as the first item of the `plugins: [` array.
+    // We match `plugins:` followed by `[` and any whitespace, and insert
+    // right after the `[`. Idempotency is enforced by the earlier
+    // `includes('anbyVitePlugin')` check above.
+    const pluginsArrayRegex = /(plugins\s*:\s*\[)(\s*)/;
+    if (!pluginsArrayRegex.test(withImport)) {
+        console.log(kleur.yellow(`! Could not find a \`plugins: [...]\` array in ${target}. ` +
+            `Add ${kleur.cyan('anbyVitePlugin()')} to your plugins manually.`));
+        return;
+    }
+    const patched = withImport.replace(pluginsArrayRegex, (_, head, ws) => `${head}${ws}anbyVitePlugin(),${ws}`);
+    await writeFile(path, patched, 'utf-8');
+    console.log(kleur.green(`✔ Patched ${target} to load anbyVitePlugin`));
+}
+/**
+ * Append `public/_anby/` to `.gitignore` so the auto-generated wire
+ * manifest doesn't pollute commits. Idempotent — does nothing if the
+ * line is already present, and creates the file if missing.
+ */
+async function patchGitignore() {
+    const path = resolve('.gitignore');
+    const line = 'public/_anby/';
+    let existing = '';
+    try {
+        existing = await readFile(path, 'utf-8');
+    }
+    catch {
+        // file doesn't exist — we'll create it below
+    }
+    // Match either `public/_anby/` or `public/_anby` on its own line, with
+    // optional trailing slash and surrounding whitespace.
+    const alreadyIgnored = existing
+        .split(/\r?\n/)
+        .map((l) => l.trim())
+        .some((l) => l === line || l === 'public/_anby');
+    if (alreadyIgnored) {
+        console.log(kleur.dim('• .gitignore already covers public/_anby/ — no change'));
+        return;
+    }
+    const block = (existing.length === 0 || existing.endsWith('\n') ? '' : '\n') +
+        '\n# Anby — auto-generated wire manifest (do not commit)\n' +
+        line +
+        '\n';
+    await writeFile(path, existing + block, 'utf-8');
+    console.log(kleur.green('✔ Added public/_anby/ to .gitignore'));
 }
 //# sourceMappingURL=init.js.map

package/dist/commands/init.js.map

@@ -1 +1 @@
-{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAQ1B;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAoB;IACpD,MAAM,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAEjD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;QACrB,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CAAC,KAAK,MAAM,yCAAyC,CAAC,CAChE,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,0BAA0B;IAC5B,CAAC;IAED,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,oBAAoB,CAAC;IAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,QAAQ,CAAC;IACtC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;IAEzD,MAAM,QAAQ,GAAG;QACf,OAAO,EAAE,+CAA+C;QACxD,EAAE;QACF,OAAO,EAAE,OAAO;QAChB,IAAI;QACJ,WAAW,EAAE,GAAG,IAAI,4BAA4B;QAChD,IAAI,EAAE,IAAI;QACV,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE;YACP,IAAI,EAAE,OAAO;YACb,IAAI;YACJ,WAAW,EAAE,aAAa;YAC1B,UAAU,EAAE,aAAa;SAC1B;QACD,QAAQ,EAAE;YACR,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAChD,WAAW,EAAE,SAAS;SACvB;QACD,QAAQ,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QACtC,QAAQ,EAAE;YACR,QAAQ,EAAE,CAAC,MAAM,CAAC;YAClB,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;SACvC;QACD,WAAW,EAAE,CAAC,gBAAgB,CAAC;QAC/B,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE;KACjC,CAAC;IAEF,MAAM,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,+EAA+E,IAAI,EAAE,CAAC,CAAC,CAAC;AAChH,CAAC"}
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAQ1B;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAoB;IACpD,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;IAC7B,MAAM,eAAe,EAAE,CAAC;IACxB,MAAM,cAAc,EAAE,CAAC;IAEvB,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CACP,qCAAqC,KAAK,CAAC,IAAI,CAAC,oBAAoB,IAAI,EAAE,CAAC,yBAAyB,CACrG,CACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,OAAoB;IAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAEjD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;QACrB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,KAAK,MAAM,oCAAoC,CAAC,CAC3D,CAAC;QACF,OAAO;IACT,CAAC;IAAC,MAAM,CAAC;QACP,0BAA0B;IAC5B,CAAC;IAED,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,oBAAoB,CAAC;IAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,QAAQ,CAAC;IACtC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;IAEzD,MAAM,QAAQ,GAAG;QACf,OAAO,EAAE,+CAA+C;QACxD,EAAE;QACF,OAAO,EAAE,OAAO;QAChB,IAAI;QACJ,WAAW,EAAE,GAAG,IAAI,4BAA4B;QAChD,IAAI,EAAE,IAAI;QACV,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE;YACP,IAAI,EAAE,OAAO;YACb,IAAI;YACJ,WAAW,EAAE,aAAa;YAC1B,UAAU,EAAE,aAAa;SAC1B;QACD,QAAQ,EAAE;YACR,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAChD,WAAW,EAAE,SAAS;SACvB;QACD,QAAQ,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QACtC,QAAQ,EAAE;YACR,QAAQ,EAAE,CAAC,MAAM,CAAC;YAClB,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;SACvC;QACD,WAAW,EAAE,CAAC,gBAAgB,CAAC;QAC/B,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE;KACjC,CAAC;IAEF,MAAM,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC,CAAC;AAChD,CAAC;AAED;;;;;;;;;;GAUG;AACH,KAAK,UAAU,eAAe;IAC5B,MAAM,UAAU,GAAG;QACjB,gBAAgB;QAChB,iBAAiB;QACjB,gBAAgB;QAChB,iBAAiB;KAClB,CAAC;IACF,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5B,MAAM,GAAG,IAAI,CAAC;YACd,MAAM;QACR,CAAC;QAAC,MAAM,CAAC;YACP,WAAW;QACb,CAAC;IACH,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CACP,oIAAoI,CACrI,CACF,CAAC;QACF,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAE/C,IAAI,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACxC,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,KAAK,MAAM,iDAAiD,CAAC,CACxE,CAAC;QACF,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GACd,2DAA2D,CAAC;IAE9D,wEAAwE;IACxE,qEAAqE;IACrE,MAAM,WAAW,GAAG,4BAA4B,CAAC;IACjD,IAAI,aAAa,GAAG,CAAC,CAAC,CAAC;IACvB,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACnD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC9B,aAAa,GAAG,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAChD,CAAC;IACH,CAAC;IAED,IAAI,UAAkB,CAAC;IACvB,IAAI,aAAa,IAAI,CAAC,EAAE,CAAC;QACvB,UAAU;YACR,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC;gBAChC,IAAI;gBACJ,UAAU;gBACV,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAClC,CAAC;SAAM,CAAC;QACN,UAAU,GAAG,UAAU,GAAG,IAAI,GAAG,QAAQ,CAAC;IAC5C,CAAC;IAED,0EAA0E;IAC1E,qEAAqE;IACrE,8DAA8D;IAC9D,4CAA4C;IAC5C,MAAM,iBAAiB,GAAG,yBAAyB,CAAC;IACpD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACxC,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,MAAM,CACV,kDAAkD,MAAM,IAAI;YAC1D,OAAO,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,4BAA4B,CACpE,CACF,CAAC;QACF,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAChC,iBAAiB,EACjB,CAAC,CAAC,EAAE,IAAY,EAAE,EAAU,EAAE,EAAE,CAAC,GAAG,IAAI,GAAG,EAAE,oBAAoB,EAAE,EAAE,CACtE,CAAC;IAEF,MAAM,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,MAAM,yBAAyB,CAAC,CAAC,CAAC;AACzE,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,cAAc;IAC3B,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,eAAe,CAAC;IAC7B,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,6CAA6C;IAC/C,CAAC;IAED,uEAAuE;IACvE,sDAAsD;IACtD,MAAM,cAAc,GAAG,QAAQ;SAC5B,KAAK,CAAC,OAAO,CAAC;SACd,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,cAAc,CAAC,CAAC;IACnD,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,uDAAuD,CAAC,CACnE,CAAC;QACF,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GACT,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9D,2DAA2D;QAC3D,IAAI;QACJ,IAAI,CAAC;IACP,MAAM,SAAS,CAAC,IAAI,EAAE,QAAQ,GAAG,KAAK,EAAE,OAAO,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAC;AAClE,CAAC"}

package/dist/commands/publish.d.ts

@@ -4,6 +4,17 @@ interface PublishOptions {
     publicUrl?: string;
     changelog?: string;
     featured?: boolean;
+    /**
+     * If set, the CLI writes the assembled ANBY_APP_TOKEN to this path
+     * (e.g. ".env.local"). Without this flag the token is only printed
+     * to stdout — the dev is responsible for capturing it.
+     */
+    saveTo?: string;
+    /**
+     * Override the platform base URL embedded in the token. Defaults to
+     * the registry URL with the /registry suffix stripped.
+     */
+    platformUrl?: string;
 }
 export declare function publishCommand(options: PublishOptions): Promise<void>;
 export {};

package/dist/commands/publish.js

@@ -1,5 +1,7 @@
 import kleur from 'kleur';
+import { writeFile } from 'node:fs/promises';
 import { publishAppFromManifest } from '@anby/platform-sdk';
+import { assembleToken } from '../lib/token.js';
 export async function publishCommand(options) {
     const result = await publishAppFromManifest({
         manifestPath: options.manifest,
@@ -16,5 +18,39 @@ export async function publishCommand(options) {
     if (result.app.publicUrl) {
         console.log(kleur.dim(`  publicUrl: ${result.app.publicUrl}`));
     }
+    // PLAN-app-bootstrap PR3: assemble + print ANBY_APP_TOKEN if the registry
+    // returned a fresh private key (only happens on first publish for an app).
+    if (result.privateKey) {
+        const platformUrl = options.platformUrl ?? options.registry.replace(/\/registry\/?$/, '');
+        const token = assembleToken({
+            appId: result.app.id,
+            platformUrl,
+            privateKey: result.privateKey,
+        });
+        console.log('');
+        console.log(kleur.bold().yellow('━━━ ANBY_APP_TOKEN (shown ONCE — store it safely) ━━━'));
+        console.log('');
+        console.log(token);
+        console.log('');
+        console.log(kleur.dim('Paste this into your app environment as ANBY_APP_TOKEN.\n' +
+            'It contains your app signing key. Treat it as a secret.\n' +
+            'If you lose it, run `anby app rotate-token <appId>` to issue a new one.'));
+        console.log(kleur.bold().yellow('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
+        if (options.saveTo) {
+            const envLine = `ANBY_APP_TOKEN=${token}\n`;
+            try {
+                await writeFile(options.saveTo, envLine, { mode: 0o600 });
+                console.log(kleur.green(`✔ Token written to ${options.saveTo}`));
+            }
+            catch (err) {
+                console.error(kleur.red(`✖ Failed to write token to ${options.saveTo}: ${err.message}`));
+                process.exit(1);
+            }
+        }
+    }
+    else {
+        console.log(kleur.dim('(No new ANBY_APP_TOKEN issued — this app already has a registered keypair.\n' +
+            ' To rotate, run `anby app rotate-token ' + result.app.id + '`.)'));
+    }
 }
 //# sourceMappingURL=publish.js.map

package/dist/commands/publish.js.map

@@ -1 +1 @@
-{"version":3,"file":"publish.js","sourceRoot":"","sources":["../../src/commands/publish.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAU5D,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAuB;IAC1D,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC;QAC1C,YAAY,EAAE,OAAO,CAAC,QAAQ;QAC9B,WAAW,EAAE,OAAO,CAAC,QAAQ;QAC7B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC,CAAC;QACzD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,KAAK,CACT,eAAe,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,YAAY,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CACvF,CACF,CAAC;IACF,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACjE,CAAC;AACH,CAAC"}
+{"version":3,"file":"publish.js","sourceRoot":"","sources":["../../src/commands/publish.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAqBhD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAuB;IAC1D,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC;QAC1C,YAAY,EAAE,OAAO,CAAC,QAAQ;QAC9B,WAAW,EAAE,OAAO,CAAC,QAAQ;QAC7B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC,CAAC;QACzD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,KAAK,CACT,eAAe,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,YAAY,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CACvF,CACF,CAAC;IACF,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,0EAA0E;IAC1E,2EAA2E;IAC3E,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,MAAM,WAAW,GACf,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;QACxE,MAAM,KAAK,GAAG,aAAa,CAAC;YAC1B,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE;YACpB,WAAW;YACX,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,uDAAuD,CAAC,CAAC,CAAC;QAC1F,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CACP,2DAA2D;YAC3D,2DAA2D;YAC3D,yEAAyE,CAC1E,CACF,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,uDAAuD,CAAC,CAAC,CAAC;QAE1F,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,OAAO,GAAG,kBAAkB,KAAK,IAAI,CAAC;YAC5C,IAAI,CAAC;gBACH,MAAM,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC1D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,sBAAsB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACnE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CAAC,8BAA8B,OAAO,CAAC,MAAM,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CACrF,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CACP,8EAA8E;YAC9E,yCAAyC,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,KAAK,CAClE,CACF,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/lib/token.d.ts

@@ -0,0 +1,17 @@
+/**
+ * ANBY_APP_TOKEN assembly helper.
+ *
+ * Mirrors the parser in @anby/platform-sdk/src/bootstrap. Kept in the CLI
+ * (rather than imported from the SDK) so the CLI doesn't have to ship the
+ * SDK's whole runtime just for one base64 wrapper.
+ *
+ * Format: anby_v1_<base64url(json)>
+ *   json = { v: 1, appId, platformUrl, privateKey }
+ */
+export declare const ANBY_TOKEN_PREFIX = "anby_v1_";
+export interface AssembleTokenInput {
+    appId: string;
+    platformUrl: string;
+    privateKey: string;
+}
+export declare function assembleToken(input: AssembleTokenInput): string;

package/dist/lib/token.js

@@ -0,0 +1,27 @@
+/**
+ * ANBY_APP_TOKEN assembly helper.
+ *
+ * Mirrors the parser in @anby/platform-sdk/src/bootstrap. Kept in the CLI
+ * (rather than imported from the SDK) so the CLI doesn't have to ship the
+ * SDK's whole runtime just for one base64 wrapper.
+ *
+ * Format: anby_v1_<base64url(json)>
+ *   json = { v: 1, appId, platformUrl, privateKey }
+ */
+export const ANBY_TOKEN_PREFIX = 'anby_v1_';
+export function assembleToken(input) {
+    if (!input.appId || !input.platformUrl || !input.privateKey) {
+        throw new Error('assembleToken: appId, platformUrl, and privateKey are required');
+    }
+    if (!input.privateKey.includes('PRIVATE KEY')) {
+        throw new Error('assembleToken: privateKey must be a PEM');
+    }
+    const payload = {
+        v: 1,
+        appId: input.appId,
+        platformUrl: input.platformUrl.replace(/\/$/, ''),
+        privateKey: input.privateKey,
+    };
+    return ANBY_TOKEN_PREFIX + Buffer.from(JSON.stringify(payload)).toString('base64url');
+}
+//# sourceMappingURL=token.js.map

package/dist/lib/token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.js","sourceRoot":"","sources":["../../src/lib/token.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,UAAU,CAAC;AAQ5C,MAAM,UAAU,aAAa,CAAC,KAAyB;IACrD,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,OAAO,GAAG;QACd,CAAC,EAAE,CAAU;QACb,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QACjD,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC;IACF,OAAO,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACxF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anby/cli",
-  "version": "0.1.1",
+  "version": "0.7.0",
   "description": "Anby Platform CLI — scaffold, validate, publish, and install Anby apps",
   "keywords": [
     "anby",
@@ -43,7 +43,7 @@
   },
   "dependencies": {
     "@anby/manifest-schema": "^0.1.1",
-    "@anby/platform-sdk": "^0.1.1",
+    "@anby/platform-sdk": "^0.7.0",
     "commander": "^12.1.0",
     "kleur": "^4.1.5"
   },