@aotter/mantle 0.1.2-alpha.6 → 0.1.2-rc.1

package/README.md

@@ -87,6 +87,8 @@ use generated `bindMantle(runtime)`, or skip code generation and call
 `runtime.executeView({ view: "published-notes" })` directly.
 
 Author the application directly using [the installed guide](docs/handbook/start/project-and-cli.md).
+Admin is opt-in; use [local Admin OTP](docs/handbook/start/quickstart-admin.md)
+only when humans need a console.
 The CLI has no scaffold/type picker; missing manifests fail without creating
 an application or a visitor home page.
 
@@ -185,9 +187,10 @@ internals or rebuilding Mantle's adapters.
 Use the installed install skill and [direct-authoring guide](docs/handbook/start/project-and-cli.md).
 The owner or agent writes the application's manifests, entry and configuration;
 `generate` compiles them and `skills` projects the version-matched instructions.
-The [minimal Worker reference](docs/examples/minimal-worker/README.md) is an
-executable example, not a scaffold command. Legacy Landing/Starters remain on
-alpha.17 and are not required by new applications.
+The [minimal Worker reference](docs/examples/host-minimal-worker/README.md) is
+the embed / adapter path without Admin. The
+[local Admin OTP reference](docs/examples/host-local-admin-otp/README.md) is the
+opt-in Dev UI path. Neither is a scaffold command. Admin is optional.
 
 ## Agent marketplace install
 
@@ -242,12 +245,14 @@ adapter is a port-implementation exercise, not a runtime refactor.
 
 - The handbook is the user documentation and ships inside this npm package:
   `node_modules/@aotter/mantle/docs/handbook/` (start, concepts, Cloudflare
-  guides, examples, reference; `navigation.json` lists every page in order).
+  guides, example redirects, reference; `navigation.json` lists every page in order).
+  Worked Manifests live in `node_modules/@aotter/mantle/docs/examples/`
+  ([index](docs/examples/README.md)).
   The copy in `node_modules` describes the installed release.
 - Embedded docs and agent skills ship inside this npm package for
   generated-site agents:
   - `node_modules/@aotter/mantle/docs/handbook/reference/manifest.md`
-  - `node_modules/@aotter/mantle/docs/handbook/examples/guarded-api.md` (anonymous,
+  - `node_modules/@aotter/mantle/docs/examples/cf-primitives-guarded-api.md` (anonymous,
     API-key, paid guard, personal-token, OAuth, REST, and MCP examples)
   - `node_modules/@aotter/mantle/docs/handbook/cloudflare/media-r2.md` (Cloudflare R2 adapter recipe)
   - `node_modules/@aotter/mantle/docs/handbook/cloudflare/deferred-hooks-queues.md` (versioned
@@ -264,7 +269,7 @@ adapter is a port-implementation exercise, not a runtime refactor.
   - `node_modules/@aotter/mantle/skills/install/SKILL.md`
   - `node_modules/@aotter/mantle/skills/provision/SKILL.md`
 - [4-atom manifest model (ADR-0001)](docs/adr/0001-four-atom-manifest-model.md)
-- [API and MCP authorization](docs/handbook/examples/guarded-api.md)
+- [API and MCP authorization](docs/examples/cf-primitives-guarded-api.md)
 - [Deferred lifecycle Queues](docs/handbook/cloudflare/deferred-hooks-queues.md)
 - [Schema indexes on D1](docs/handbook/reference/schema.md)
 - [Release process](docs/release-process.md)

package/dist/cli/generate.d.ts

@@ -8,4 +8,13 @@ export interface GenerateDeps {
  */
 export declare function resolveAdminUiIndexHtml(): string | null;
 export declare function runGenerate(rawArgs: readonly string[], deps?: GenerateDeps): Promise<number>;
+export declare function printGenerateNextSteps(adminUiInstalled: boolean, write?: {
+    (buffer: Uint8Array | string, cb?: (err?: Error | null) => void): boolean;
+    (str: Uint8Array | string, encoding?: BufferEncoding, cb?: (err?: Error | null) => void): boolean;
+}): void;
+/** Cheap hint: Admin SPA was synced but wrangler has no ASSETS binding. */
+export declare function warnMissingWranglerAssets(root: string, write?: {
+    (buffer: Uint8Array | string, cb?: (err?: Error | null) => void): boolean;
+    (str: Uint8Array | string, encoding?: BufferEncoding, cb?: (err?: Error | null) => void): boolean;
+}): void;
 //# sourceMappingURL=generate.d.ts.map

package/dist/cli/generate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"generate.d.ts","sourceRoot":"","sources":["../../src/cli/generate.ts"],"names":[],"mappings":"AAiBA,yDAAyD;AACzD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;CACxD;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,IAAI,MAAM,GAAG,IAAI,CAOvD;AAED,wBAAsB,WAAW,CAC/B,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,MAAM,CAAC,CA+CjB"}
+{"version":3,"file":"generate.d.ts","sourceRoot":"","sources":["../../src/cli/generate.ts"],"names":[],"mappings":"AAiBA,yDAAyD;AACzD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;CACxD;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,IAAI,MAAM,GAAG,IAAI,CAOvD;AAED,wBAAsB,WAAW,CAC/B,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,MAAM,CAAC,CAiDjB;AA0CD,wBAAgB,sBAAsB,CAAC,gBAAgB,EAAE,OAAO,EAAE,KAAK;2CAIxC,CAAC;mEAK0B,CAAC;CATwC,GAAG,IAAI,CAmBzG;AAiBD,2EAA2E;AAC3E,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK;2CAjC9B,CAAC;mEAK0B,CAAC;CA4B8B,GAAG,IAAI,CAa/F"}

package/dist/cli/generate.js

@@ -1,4 +1,4 @@
-import { existsSync } from "node:fs";
+import { existsSync, readFileSync } from "node:fs";
 import { mkdir, readFile, readdir, rm, writeFile } from "node:fs/promises";
 import { dirname, join, resolve } from "node:path";
 import { cwd, stderr, stdout } from "node:process";
@@ -59,11 +59,15 @@ export async function runGenerate(rawArgs, deps = {}) {
         const adminSource = dirname(adminIndex);
         const adminTarget = resolve(cwd(), "public/_mantle/admin");
         stale = !(await syncAdminAssets(adminSource, adminTarget, options.check)) || stale;
+        if (!options.check)
+            warnMissingWranglerAssets(cwd());
     }
     if (stale && options.check) {
         stderr.write("Mantle generated files are stale; run `mantle generate`.\n");
         return 1;
     }
+    if (!options.check)
+        printGenerateNextSteps(adminIndex !== null);
     return 0;
 }
 function parseGenerateArgs(rawArgs) {
@@ -93,6 +97,10 @@ function printHelp() {
 
 Usage: mantle generate [options]
 
+This is the Minimal compile path (Spec + generate). It writes .mantle/generated/mantle.ts.
+Admin is opt-in: when @aotter/mantle-admin-ui is installed, generate also syncs
+the prebuilt Admin SPA. See \`mantle --help\` for optional surfaces.
+
 Options:
   --manifests <dir>   Manifest directory (default: ./manifests)
   -o, --output <dir>  Generated root (default: .mantle/generated)
@@ -101,6 +109,22 @@ Options:
   -h, --help          This help
 `);
 }
+export function printGenerateNextSteps(adminUiInstalled, write = stdout.write.bind(stdout)) {
+    if (adminUiInstalled) {
+        write("Synced public/_mantle/admin/ from @aotter/mantle-admin-ui (opt-in, prebuilt; do not vite-build).\n" +
+            "Admin / Dev UI next steps:\n" +
+            "  1. wrangler assets.directory=./public and binding=ASSETS\n" +
+            "  2. pnpm dev  →  open /admin/sign-in\n" +
+            "  3. email OTP via ConsoleEmailSender (code in wrangler logs)\n" +
+            "PUBLIC_ORIGIN must equal the origin wrangler prints; a mismatch is INVALID_ORIGIN.\n" +
+            "See docs/examples/host-local-admin-otp or node_modules/@aotter/mantle/docs/examples/host-local-admin-otp.\n");
+        return;
+    }
+    write("API-only (Admin is opt-in). A complete service does not require a Dev UI. " +
+        "To add Admin later: install @aotter/mantle-admin and @aotter/mantle-admin-ui, " +
+        "re-run generate, configure wrangler ASSETS, and wire local email-otp " +
+        "(docs/examples/host-local-admin-otp or node_modules/@aotter/mantle/docs/examples/host-local-admin-otp).\n");
+}
 function printDiagnostics(diagnostics) {
     for (const diagnostic of diagnostics) {
         stderr.write(`${diagnostic.code} ${diagnostic.path}: ${diagnostic.message}\n`);
@@ -116,6 +140,21 @@ async function syncText(path, expected, check) {
     await writeFile(path, expected, "utf8");
     return true;
 }
+/** Cheap hint: Admin SPA was synced but wrangler has no ASSETS binding. */
+export function warnMissingWranglerAssets(root, write = stderr.write.bind(stderr)) {
+    const wrangler = ["wrangler.jsonc", "wrangler.json", "wrangler.toml"]
+        .map((name) => join(root, name))
+        .find((path) => existsSync(path));
+    if (!wrangler)
+        return;
+    const text = readFileSync(wrangler, "utf8");
+    if (/["']?binding["']?\s*[:=]\s*["']ASSETS["']/.test(text))
+        return;
+    write("warning: @aotter/mantle-admin-ui synced public/_mantle/admin, but wrangler has no ASSETS binding. " +
+        "/admin can return HTML 200 while /_mantle/admin/assets/* 404s (white screen). " +
+        'Add "assets": { "directory": "./public", "binding": "ASSETS" }. ' +
+        "Do not put /_mantle in run_worker_first.\n");
+}
 async function syncAdminAssets(source, target, check) {
     const sourceFiles = (await listFiles(source)).filter((path) => !path.startsWith("server."));
     const targetFiles = await listFiles(target).catch(() => []);

package/dist/cli/generate.js.map

@@ -1 +1 @@
-{"version":3,"file":"generate.js","sourceRoot":"","sources":["../../src/cli/generate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,wBAAwB,EAAmB,MAAM,qBAAqB,CAAC;AAChF,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAczF;;;GAGG;AACH,MAAM,UAAU,uBAAuB;IACrC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC,CAAC;QACtF,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAA0B,EAC1B,OAAqB,EAAE;IAEvB,IAAI,OAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,SAAS,EAAE,CAAC;YACZ,OAAO,CAAC,CAAC;QACX,CAAC;QACD,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpC,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM;QAC9B,CAAC,CAAC,wBAAwB,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QACzD,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;IACxD,MAAM,gBAAgB,GAAG,CAAC,GAAG,MAAM,CAAC,WAAW,EAAE,GAAG,UAAU,CAAC,WAAW,CAAC;SACxE,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IAC3D,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;QACtD,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;QACnC,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,OAAO,GAAG,gBAAgB,CAAC;QAC/B,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,gBAAgB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACtC,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,KAAK,GAAG,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACxF,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,uBAAuB,IAAI,uBAAuB,CAAC,EAAE,CAAC;IAC/E,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,MAAM,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;QACxC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,sBAAsB,CAAC,CAAC;QAC3D,KAAK,GAAG,CAAC,CAAC,MAAM,eAAe,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC;IACrF,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAC3B,MAAM,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAC3E,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,iBAAiB,CAAC,OAA0B;IACnD,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QAC3B,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC;QAClB,OAAO,EAAE;YACP,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC7B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE;YACtC,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC7B,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YAC1B,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE;SACtC;KACF,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAC7B,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,QAAQ,CAAC;IAC/C,qBAAqB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IAChD,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,aAAa;QAC5C,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,mBAAmB;QAC5C,SAAS;QACT,KAAK,EAAE,MAAM,CAAC,KAAK,KAAK,IAAI;KAC7B,CAAC;AACJ,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,CAAC,KAAK,CAAC;;;;;;;;;;CAUd,CAAC,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,WAAkC;IAC1D,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC;IACjF,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,QAAgB,EAAE,KAAc;IACpE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC/D,IAAI,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,MAAc,EAAE,MAAc,EAAE,KAAc;IAC3E,MAAM,WAAW,GAAG,CAAC,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5F,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM;WACpD,WAAW,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,WAAW,CAAC,KAAK,CAAC,CAAC;WAC/D,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CACnD,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAChF,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrB,IAAI,OAAO,IAAI,KAAK;QAAE,OAAO,OAAO,CAAC;IAErC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACvC,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,MAAM,SAAS,CAAC,WAAW,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,MAAM,GAAG,EAAE;IAChD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC,CAAC;IACJ,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC"}
+{"version":3,"file":"generate.js","sourceRoot":"","sources":["../../src/cli/generate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,wBAAwB,EAAmB,MAAM,qBAAqB,CAAC;AAChF,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAczF;;;GAGG;AACH,MAAM,UAAU,uBAAuB;IACrC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC,CAAC;QACtF,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAA0B,EAC1B,OAAqB,EAAE;IAEvB,IAAI,OAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,SAAS,EAAE,CAAC;YACZ,OAAO,CAAC,CAAC;QACX,CAAC;QACD,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpC,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM;QAC9B,CAAC,CAAC,wBAAwB,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QACzD,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;IACxD,MAAM,gBAAgB,GAAG,CAAC,GAAG,MAAM,CAAC,WAAW,EAAE,GAAG,UAAU,CAAC,WAAW,CAAC;SACxE,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IAC3D,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;QACtD,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;QACnC,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,OAAO,GAAG,gBAAgB,CAAC;QAC/B,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,gBAAgB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACtC,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,KAAK,GAAG,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACxF,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,uBAAuB,IAAI,uBAAuB,CAAC,EAAE,CAAC;IAC/E,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,MAAM,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;QACxC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,sBAAsB,CAAC,CAAC;QAC3D,KAAK,GAAG,CAAC,CAAC,MAAM,eAAe,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC;QACnF,IAAI,CAAC,OAAO,CAAC,KAAK;YAAE,yBAAyB,CAAC,GAAG,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAC3B,MAAM,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAC3E,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,KAAK;QAAE,sBAAsB,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC;IAChE,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,iBAAiB,CAAC,OAA0B;IACnD,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QAC3B,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC;QAClB,OAAO,EAAE;YACP,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC7B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE;YACtC,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC7B,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YAC1B,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE;SACtC;KACF,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAC7B,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,QAAQ,CAAC;IAC/C,qBAAqB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IAChD,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,aAAa;QAC5C,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,mBAAmB;QAC5C,SAAS;QACT,KAAK,EAAE,MAAM,CAAC,KAAK,KAAK,IAAI;KAC7B,CAAC;AACJ,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,CAAC,KAAK,CAAC;;;;;;;;;;;;;;CAcd,CAAC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,gBAAyB,EAAE,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;IACjG,IAAI,gBAAgB,EAAE,CAAC;QACrB,KAAK,CACH,oGAAoG;YAClG,8BAA8B;YAC9B,8DAA8D;YAC9D,yCAAyC;YACzC,iEAAiE;YACjE,sFAAsF;YACtF,6GAA6G,CAChH,CAAC;QACF,OAAO;IACT,CAAC;IACD,KAAK,CACH,4EAA4E;QAC1E,gFAAgF;QAChF,uEAAuE;QACvE,2GAA2G,CAC9G,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,WAAkC;IAC1D,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC;IACjF,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,QAAgB,EAAE,KAAc;IACpE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC/D,IAAI,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,yBAAyB,CAAC,IAAY,EAAE,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;IACvF,MAAM,QAAQ,GAAG,CAAC,gBAAgB,EAAE,eAAe,EAAE,eAAe,CAAC;SAClE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;SAC/B,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IACpC,IAAI,CAAC,QAAQ;QAAE,OAAO;IACtB,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC5C,IAAI,2CAA2C,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO;IACnE,KAAK,CACH,oGAAoG;QAClG,gFAAgF;QAChF,kEAAkE;QAClE,4CAA4C,CAC/C,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,MAAc,EAAE,MAAc,EAAE,KAAc;IAC3E,MAAM,WAAW,GAAG,CAAC,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5F,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM;WACpD,WAAW,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,WAAW,CAAC,KAAK,CAAC,CAAC;WAC/D,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CACnD,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAChF,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrB,IAAI,OAAO,IAAI,KAAK;QAAE,OAAO,OAAO,CAAC;IAErC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACvC,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,MAAM,SAAS,CAAC,WAAW,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,MAAM,GAAG,EAAE;IAChD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC,CAAC;IACJ,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC"}

package/dist/cli/main.d.ts

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
-export {};
+export declare const MANTLE_OVERVIEW = "mantle \u2014 compile manifests into a RuntimePlan and typed binding\n\nOverview\n  Optional surfaces \u2014 take only what you need. Admin is opt-in. You can ship a\n  complete service with no Dev UI, no visitor frontend, and no extra packages.\n\n  Minimal \u2014 Spec + generate\n    validate + generate compile manifests into a sealed plan and typed binding.\n    Embed that binding in an existing host. No Admin, no visitor UI.\n\n  Runtime / adapter\n    Bind Runtime through an adapter (Cloudflare Worker, Bun, Vercel, or yours).\n    HTTP Views, MCP, and Auth work without Admin.\n    See docs/examples/host-minimal-worker or\n    node_modules/@aotter/mantle/docs/examples/host-minimal-worker.\n\n  Opt-in \u2014 Admin / Dev UI\n    Add @aotter/mantle-admin and @aotter/mantle-admin-ui only when humans need\n    a console. Then re-run generate, bind wrangler ASSETS, and open\n    /admin/sign-in (local email OTP via ConsoleEmailSender).\n    See docs/examples/host-local-admin-otp or\n    node_modules/@aotter/mantle/docs/examples/host-local-admin-otp.\n\n  Further (ask the subcommand for details)\n    skills          project version-matched agent instructions\n    emit-openapi    OpenAPI 3.1 from HTTP Triggers and Views\n    mantle-harness  measure indexes and live HTTP (separate binary)\n\nUsage: mantle <subcommand> [options]\n\nSubcommands:\n  generate       Compile manifests into a typed runtime binding\n  validate       Static manifest and handler-source validation\n  skills         Project version-matched Core skills\n  emit-openapi   Emit OpenAPI 3.1 from Triggers and Views\n";
 //# sourceMappingURL=main.d.ts.map

package/dist/cli/main.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../../src/cli/main.ts"],"names":[],"mappings":""}
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../../src/cli/main.ts"],"names":[],"mappings":";AAgCA,eAAO,MAAM,eAAe,wkDAmC3B,CAAC"}

package/dist/cli/main.js

@@ -6,15 +6,7 @@ import { runSkills } from "./skills.js";
 async function main() {
     const command = argv[2];
     if (!command || command === "--help" || command === "-h") {
-        stdout.write(`mantle - SDK authoring CLI
-
-Usage: mantle <subcommand> [options]
-
-Subcommands:
-  generate       Compile manifests and handler types
-  skills         Project version-matched Core skills
-  validate       Static manifest + handler-source validation
-  emit-openapi   Emit OpenAPI 3.1 from Triggers + Views
+        stdout.write(`${MANTLE_OVERVIEW}
 `);
         return command ? 0 : 2;
     }
@@ -33,6 +25,42 @@ Subcommands:
             return 2;
     }
 }
+export const MANTLE_OVERVIEW = `mantle — compile manifests into a RuntimePlan and typed binding
+
+Overview
+  Optional surfaces — take only what you need. Admin is opt-in. You can ship a
+  complete service with no Dev UI, no visitor frontend, and no extra packages.
+
+  Minimal — Spec + generate
+    validate + generate compile manifests into a sealed plan and typed binding.
+    Embed that binding in an existing host. No Admin, no visitor UI.
+
+  Runtime / adapter
+    Bind Runtime through an adapter (Cloudflare Worker, Bun, Vercel, or yours).
+    HTTP Views, MCP, and Auth work without Admin.
+    See docs/examples/host-minimal-worker or
+    node_modules/@aotter/mantle/docs/examples/host-minimal-worker.
+
+  Opt-in — Admin / Dev UI
+    Add @aotter/mantle-admin and @aotter/mantle-admin-ui only when humans need
+    a console. Then re-run generate, bind wrangler ASSETS, and open
+    /admin/sign-in (local email OTP via ConsoleEmailSender).
+    See docs/examples/host-local-admin-otp or
+    node_modules/@aotter/mantle/docs/examples/host-local-admin-otp.
+
+  Further (ask the subcommand for details)
+    skills          project version-matched agent instructions
+    emit-openapi    OpenAPI 3.1 from HTTP Triggers and Views
+    mantle-harness  measure indexes and live HTTP (separate binary)
+
+Usage: mantle <subcommand> [options]
+
+Subcommands:
+  generate       Compile manifests into a typed runtime binding
+  validate       Static manifest and handler-source validation
+  skills         Project version-matched Core skills
+  emit-openapi   Emit OpenAPI 3.1 from Triggers and Views
+`;
 main().then((code) => {
     process.exitCode = code;
 }, (error) => {

package/dist/cli/main.js.map

@@ -1 +1 @@
-{"version":3,"file":"main.js","sourceRoot":"","sources":["../../src/cli/main.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EACL,cAAc,EACd,WAAW,GACZ,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,KAAK,UAAU,IAAI;IACjB,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACzD,MAAM,CAAC,KAAK,CAAC;;;;;;;;;CAShB,CAAC,CAAC;QACC,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,UAAU;YACb,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;QAC3B,KAAK,QAAQ;YACX,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;QACzB,KAAK,UAAU;YACb,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;QAC3B,KAAK,cAAc;YACjB,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC;QAC9B;YACE,MAAM,CAAC,KAAK,CAAC,uBAAuB,OAAO,IAAI,CAAC,CAAC;YACjD,OAAO,CAAC,CAAC;IACb,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,IAAI,CACT,CAAC,IAAI,EAAE,EAAE;IACP,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;AAC1B,CAAC,EACD,CAAC,KAAK,EAAE,EAAE;IACR,MAAM,CAAC,KAAK,CAAC,mBAAmB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3G,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CACF,CAAC"}
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../src/cli/main.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EACL,cAAc,EACd,WAAW,GACZ,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,KAAK,UAAU,IAAI;IACjB,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACzD,MAAM,CAAC,KAAK,CAAC,GAAG,eAAe;CAClC,CAAC,CAAC;QACC,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,UAAU;YACb,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;QAC3B,KAAK,QAAQ;YACX,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;QACzB,KAAK,UAAU;YACb,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;QAC3B,KAAK,cAAc;YACjB,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC;QAC9B;YACE,MAAM,CAAC,KAAK,CAAC,uBAAuB,OAAO,IAAI,CAAC,CAAC;YACjD,OAAO,CAAC,CAAC;IACb,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmC9B,CAAC;AAEF,IAAI,EAAE,CAAC,IAAI,CACT,CAAC,IAAI,EAAE,EAAE;IACP,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;AAC1B,CAAC,EACD,CAAC,KAAK,EAAE,EAAE;IACR,MAAM,CAAC,KAAK,CAAC,mBAAmB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3G,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CACF,CAAC"}

package/docs/adapter-guide.md

@@ -136,7 +136,7 @@ adapter. A narrow adapter extension seam may let consumer code verify its own
 API-key or personal-token formats, but credential storage/issuance must not
 become a runtime port. The Cloudflare reference is
 `mount/resolveCaller.ts`; consumer usage is documented in
-[API and MCP authorization](handbook/examples/guarded-api.md).
+[API and MCP authorization](examples/cf-primitives-guarded-api.md).
 
 Minimum HTTP behavior for a full adapter:
 

package/docs/adr/adr-lite-845-frontend-client.md

@@ -0,0 +1,38 @@
+# ADR-lite #845: frontend calls use the existing HTTP Trigger contract
+
+Status: Accepted for implementation under #845 and mantle-home #86.
+
+`mantle-web/client` is a browser-safe fetch client for declared public Views and
+HTTP Triggers. `mantle-web/client-runtime` projects that contract from the sealed
+RuntimePlan and binds the same client to `createMantleRequestHandler`, with a
+request-local principal. Local SSR makes no network call and invokes no internal
+EntryReader. Calls retain Trigger identity. No manifest grammar changes.
+
+The public contract uses wire names, input/output schemas and the plan fingerprint.
+View rows remain records: the existing View API does not promise a generated row
+schema. The generic response shape includes rows/page/show/hasMore. This is not a
+new generator or validation engine; Runtime still validates and authorizes.
+
+Remote callers inject fetch and a request-local token resolver. Clients never
+retry a mutation or follow redirects with credentials. Business diagnostics and
+OAuth challenge remain available in MantleClientError; network and abort errors
+remain native errors. The browser export imports no runtime or storage module.
+
+Cloudflare's opt-in frontendOrigins accepts exact origins for API CORS, exposes
+WWW-Authenticate and permits Authorization/Content-Type preflights. Cross-origin
+responses use no-store and do not enable cookie credentials. Cookie CSRF checks
+and configured bearer issuer/audience/scope checks remain the same. Host-owned
+OAuth/connection policy is independent of application revision. Existing Better
+Auth PKCE registration, consent and revocation remain the authority.
+
+In a provider composed with MCP, user grants for additional configured resources
+carry the same consent lineage and session binding as MCP grants. Verification
+reuses the current-consent/session check for those resources too; API JWTs cannot
+outlive revocation or become valid again on reconnect. OAuth discovery responses
+also receive the configured exact-origin CORS policy for public browser clients.
+
+Existing native public cache tags and purge handle same-Worker invalidation.
+External consumers start with private/no-store, or explicitly bound TTL; durable
+remote invalidation delivery remains the parent #792 contract and must be proven
+before advertising a stronger freshness guarantee. Cloud's integration includes
+the actual external consumer and browser evidence, not only this package change.

package/docs/agent-prompts.md

@@ -0,0 +1,92 @@
+# Task-specific agent prompts
+
+Copy one block into a coding agent. Resolve handbook pages and official
+examples from `docs/` in this checkout, or from
+`node_modules/@aotter/mantle/docs/` after install. If neither tree exists,
+pin `@aotter/mantle` first. `npx --no-install mantle --help` is the layered
+overview. There is no `mantle create`. Admin is opt-in.
+
+### Embed Runtime with typed APIs
+
+```text
+Read handbook/start/project-and-cli.md and npx --no-install mantle --help.
+Pin @aotter/mantle at the exact version we agree, author manifests for
+this existing host, then run mantle generate. Embed
+the typed binding from .mantle/generated/mantle.ts into the current
+system. Do not add Admin, mantle-admin-ui, a visitor frontend, or a
+Cloudflare adapter unless I ask. Do not invent a default Schema.
+```
+
+### Minimal API service locally
+
+```text
+Read handbook/start/quickstart-worker.md and examples/host-minimal-worker/.
+Author a Cloudflare Worker from that official example or from scratch:
+one Schema, one public View (copy the contract, not the tree wholesale).
+Pin every @aotter/mantle* package to the same exact version. Run
+pnpm install && pnpm generate && pnpm dev (or wrangler dev --local).
+Probe GET /api/views/<name> with curl. GET / may 404. Do not install
+Admin or wrangler ASSETS unless I ask.
+```
+
+### Full local Dev UI (opt-in)
+
+```text
+I want the optional Admin / Dev UI. Read handbook/start/quickstart-admin.md
+and examples/host-local-admin-otp/. Interview me for a bootstrap owner email.
+Install @aotter/mantle-admin and @aotter/mantle-admin-ui, run
+mantle generate (it syncs the prebuilt SPA — do not vite-build), and set
+wrangler assets.directory=./public with binding ASSETS (required when
+Admin is installed). Wire createAuth email-otp + ConsoleEmailSender.
+Then pnpm install && pnpm generate && pnpm dev, open /admin/sign-in, and
+read the OTP from wrangler logs. If /admin is a white screen, fetch
+/_mantle/admin/assets/* — 404 means ASSETS is missing, not a missing
+frontend build.
+```
+
+### Interview then build
+
+```text
+Interview me about the service: host, who uses it, whether humans need a
+Dev UI, and whether we only embed Spec/Runtime. Read mantle --help, then
+handbook/start/project-and-cli.md. Use docs/examples/README.md as the
+examples index; copy builtin-* Manifests only (not cf-primitives-*).
+Implement locally first. Take only the surfaces we chose.
+For Spec-only use, skip Runtime and code generation. For a Worker without
+Admin, follow examples/host-minimal-worker/. For a Worker with Dev UI,
+follow examples/host-local-admin-otp/. No mantle create. Pin all
+@aotter/mantle* packages to one exact version.
+```
+
+### Later layer: MCP or public web (opt-in)
+
+```text
+Do not add Admin unless it is already in this project. Read
+handbook/concepts/mcp-and-agents.md and/or
+handbook/cloudflare/public-web.md. Add only the surface I name: MCP
+Triggers at /mcp or /mcp/staff, or optional @aotter/mantle-web
+composition. Keep Core adapter-neutral. Probe the new route; do not
+claim Auth or Admin works from a public 200.
+```
+
+### Mantle on ChatGPT Sites, including media
+
+```text
+Build with ChatGPT Sites; use Mantle for content management and publishing.
+Read the matching SDK docs/handbook/sites/index.md and
+docs/examples/host-chatgpt-sites/README.md. Use that runnable host as a
+reference. Follow its supported installation path, including packed-checkout
+installation while release support is pending. Derive Schema, View,
+Procedure and Trigger from my requirements and check the Admin editor/picker and public
+projections against them. Request both Sites D1 and R2 when my workflow
+includes uploads. Bind the R2 media port, declare media.purposes, and keep
+the same-origin PUT and committed-only public GET checks. Pin every
+@aotter/mantle* dependency to one exact version. Run the local smoke,
+show a draft-to-publish walkthrough, then save and deploy through Sites when
+requested. Verify the deployed owner/member role, R2 upload, published page, and anonymous draft 404. Treat public read-only
+MCP, Admin WebMCP, and staff OAuth MCP as separate acceptance gates; never
+claim staff MCP from a working browser session or connector URL alone.
+```
+
+
+[Back to the Core README](../README.md#for-engineers-and-agents).

package/docs/api-mcp-authorization.md

@@ -1,5 +1,5 @@
 # API and MCP authorization
 
 See [Authorization](handbook/reference/authorization.md),
-[Guarded API access](handbook/examples/guarded-api.md), and
+[Guarded API access](examples/cf-primitives-guarded-api.md), and
 [OAuth resource primitives](handbook/cloudflare/authentication.md#oauth-resource-primitives).

package/docs/auth-hosting-model.md

@@ -138,7 +138,7 @@ handler that checks current business state.
 Mantle Platform may be the identity or OAuth token authority for a hosted
 flow. That does not make token claims the generated site's live membership or
 entitlement authority. The target site's guard reads its authoritative state
-on every call. See [API and MCP authorization](handbook/examples/guarded-api.md) for
+on every call. See [API and MCP authorization](examples/cf-primitives-guarded-api.md) for
 the exact public API and four consumer examples.
 
 ## SDK Surface Rule

package/docs/examples/README.md

@@ -0,0 +1,22 @@
+# Examples hub
+
+This folder is the only official examples tree. Filenames carry the handler class. There is no second Manifest body under `docs/handbook/examples/` — those pages redirect here.
+
+**Builder** may ingest a Manifest only when every Procedure is `handler.kind: builtin` (or the example has no Procedures). That is the `builtin-*` prefix. `cf-primitives-*` documents Durable Objects, Queues, cron, R2, and/or `handler.kind: ref`. `host-*` directories are runnable consumer projects, not business presets.
+
+Drop a `builtin-*` YAML block into `host-local-admin-otp/manifests/` (or `host-minimal-worker/manifests/`) and run `mantle validate`.
+
+| Id / filename | Meaning | Class | Builder | Admin | Related host |
+|---|---|---|---|---|---|
+| [`builtin-intake.md`](./builtin-intake.md) | Public request form; builtin create; staff list | builtin | yes | optional (staff View / Staff MCP) | `host-minimal-worker` or `host-local-admin-otp` |
+| [`builtin-reservation.md`](./builtin-reservation.md) | Public reservation queue; builtin create; staff list | builtin | yes | optional | `host-minimal-worker` or `host-local-admin-otp` |
+| [`builtin-publication.md`](./builtin-publication.md) | Localized posts, public list, reader suggestions | builtin | yes | optional (Admin or Staff MCP to draft/publish) | `host-local-admin-otp` |
+| [`builtin-procurement.md`](./builtin-procurement.md) | Member requisitions and staff approve/reject with OCC | builtin | yes | optional (Admin or Staff MCP) | `host-local-admin-otp` |
+| [`builtin-legal-documents.md`](./builtin-legal-documents.md) | Localized Terms/Privacy revisions and signed-in acceptances | builtin | yes | optional (staff create via MCP; Admin for review) | `host-local-admin-otp` |
+| [`builtin-commerce.md`](./builtin-commerce.md) | Product catalog, guest orders, staff fulfill/cancel; builtin create/update only | builtin | yes | optional (Admin or Staff MCP to publish products) | `host-local-admin-otp` |
+| [`cf-primitives-intake-hooks.md`](./cf-primitives-intake-hooks.md) | Same intake Schema with Turnstile `before_create` and email `after_create` `ref` hooks | cf-primitives | no | optional | `host-minimal-worker` plus handlers |
+| [`cf-primitives-commerce-inventory.md`](./cf-primitives-commerce-inventory.md) | Catalog plus Durable Object stock authority, Queue expiry, payment callback, `ref` handlers | cf-primitives | no | optional | `host-minimal-worker` plus DO/Queue/cron |
+| [`cf-primitives-guarded-api.md`](./cf-primitives-guarded-api.md) | API keys, scopes, live entitlement `ref` guards over REST and MCP | cf-primitives | no | none | `host-minimal-worker` plus credential resolver |
+| [`host-minimal-worker/`](./host-minimal-worker/README.md) | Executable Spec + adapter without Admin | host | no | none | itself |
+| [`host-local-admin-otp/`](./host-local-admin-otp/README.md) | Executable opt-in Admin / Dev UI with email OTP | host | no | required | itself |
+| [Mantle on ChatGPT Sites](../handbook/sites/index.md) · [runnable reference](./host-chatgpt-sites/README.md) | Runnable Sites D1/R2, ChatGPT identity, Admin media, published web and public read-only MCP | host | no | required | itself |