@crowdedkingdoms/crowdyjs 15.12.1 → 16.0.0-dev.1

package/dist/crowdy-dsh/pane.js

@@ -0,0 +1,247 @@
+/**
+ * The Studio agent pane: a same-origin iframe hosting the DeepSeek Harness
+ * web UI (running in a Web Worker) plus the Crowdy chrome around it — the
+ * provider-data notice the player accepts once, a Screenshot button, the
+ * payer / spend line, and the bridge status.
+ *
+ * The harness owns the conversation UI (chat, diffs, plan mode, approvals);
+ * this pane owns what the game knows: who pays, whether the player consented,
+ * and the capture button that pushes a frame into the model's `captures/`.
+ */
+import { StudioDshBridge } from './bridge.js';
+const USAGE_REFRESH_MS = 30000;
+export class CrowdyStudioDshPane {
+    constructor(parent, options) {
+        this.options = options;
+        this.usageTimer = null;
+        this.started = false;
+        this.disposed = false;
+        this.root = el('section', 'ck-crowdy-studio-dsh');
+        this.root.setAttribute('aria-label', 'Crowdy Studio agent');
+        const header = el('header');
+        const title = el('h2');
+        title.textContent = 'Agent';
+        this.status = el('span', 'ck-crowdy-studio-dsh-status');
+        this.status.textContent = 'Starting…';
+        this.captureButton = el('button', 'ck-crowdy-studio-dsh-capture');
+        this.captureButton.type = 'button';
+        this.captureButton.textContent = 'Screenshot';
+        this.captureButton.title = 'Share what you see with the agent (saved under captures/)';
+        this.captureButton.disabled = true;
+        this.captureButton.addEventListener('click', () => {
+            void this.run(async () => {
+                const shot = await this.bridge.shareCapture('player capture');
+                this.say(`Shared ${shot.name} (${shot.width}x${shot.height}) with the agent.`);
+            });
+        });
+        header.append(title, this.status, this.captureButton);
+        this.notice = el('div', 'ck-crowdy-studio-dsh-notice');
+        this.notice.hidden = true;
+        this.frame = document.createElement('iframe');
+        this.frame.className = 'ck-crowdy-studio-dsh-frame';
+        this.frame.title = 'Crowdy Studio agent';
+        this.frame.setAttribute('allow', 'clipboard-write');
+        // The harness is served from the game's own origin: `BroadcastChannel`
+        // and OPFS are origin-scoped, so it cannot live anywhere else today.
+        // `allow-same-origin` is therefore required and `allow-scripts` runs the
+        // worker. With both set the sandbox does NOT isolate the frame from this
+        // page (the browser says as much in its console); what it still removes is
+        // top-level navigation, popups, forms, downloads and modals. The real
+        // control is the CSP the host serves on `/dsh/*`.
+        this.frame.setAttribute('sandbox', 'allow-scripts allow-same-origin');
+        this.spend = el('div', 'ck-crowdy-studio-dsh-spend');
+        this.message = el('div', 'ck-crowdy-studio-dsh-message');
+        this.message.hidden = true;
+        this.root.append(header, this.notice, this.frame, this.spend, this.message);
+        parent.appendChild(this.root);
+        this.bridge = new StudioDshBridge({
+            controller: options.controller,
+            transport: options.transport,
+            appId: options.appId,
+            persistScope: options.persistScope,
+            getToken: options.getToken,
+            graphqlUrl: options.graphqlUrl,
+            host: options.host,
+            confirmLiveDeploy: (summary) => this.confirmLiveDeploy(summary.projectName),
+            onWarning: (text) => {
+                this.say(text);
+                options.onWarning?.(text);
+            },
+            onStatus: (status) => this.renderStatus(status),
+            onFileChanged: (change) => this.say(`Agent updated ${change.target.toLowerCase()}/${change.path}.`),
+        });
+    }
+    /**
+     * The page-side gate on a live deploy. The harness UI has its own approval
+     * inside the iframe, but the page cannot see it and the channel is open to
+     * any same-origin script, so the player confirms here too. Auto-declines
+     * after a minute so a stale prompt cannot be accepted by accident later.
+     */
+    confirmLiveDeploy(projectName) {
+        return new Promise((resolve) => {
+            this.message.hidden = false;
+            this.message.replaceChildren();
+            const text = el('span');
+            text.textContent = `The agent wants to deploy ${projectName} live to everyone in this grid. `;
+            const approve = el('button', 'ck-crowdy-studio-dsh-confirm');
+            approve.type = 'button';
+            approve.textContent = 'Deploy live';
+            const decline = el('button', 'ck-crowdy-studio-dsh-decline');
+            decline.type = 'button';
+            decline.textContent = 'Not now';
+            let settled = false;
+            const finish = (answer) => {
+                if (settled)
+                    return;
+                settled = true;
+                clearTimeout(timer);
+                this.message.replaceChildren();
+                this.message.hidden = true;
+                resolve(answer);
+            };
+            const timer = setTimeout(() => finish(false), 60000);
+            approve.addEventListener('click', () => finish(true));
+            decline.addEventListener('click', () => finish(false));
+            this.message.append(text, approve, ' ', decline);
+        });
+    }
+    /** Boot once the pane is visible; the notice gates the first boot on consent. */
+    async start() {
+        if (this.started || this.disposed)
+            return;
+        this.started = true;
+        try {
+            const consent = await this.options.transport.consent(this.options.appId);
+            if (!consent.consented) {
+                this.started = false;
+                this.renderNotice();
+                this.status.textContent = 'Waiting for your OK';
+                return;
+            }
+            await this.boot();
+        }
+        catch (error) {
+            this.started = false;
+            this.renderStatus({ phase: 'failed', message: error instanceof Error ? error.message : String(error) });
+        }
+    }
+    dispose() {
+        this.disposed = true;
+        if (this.usageTimer)
+            clearInterval(this.usageTimer);
+        this.bridge.detach();
+        this.root.remove();
+    }
+    async boot() {
+        const base = this.options.webBase.endsWith('/') ? this.options.webBase : `${this.options.webBase}/`;
+        this.frame.src = `${base}index.html`;
+        await this.bridge.attach(this.frame);
+        this.captureButton.disabled = !this.options.host?.captureFrame;
+        await this.refreshUsage();
+        this.usageTimer = setInterval(() => void this.refreshUsage(), USAGE_REFRESH_MS);
+    }
+    renderNotice() {
+        this.notice.hidden = false;
+        this.notice.replaceChildren();
+        const text = el('p');
+        text.textContent =
+            'The agent sends your project source, your messages and any screenshots you share to a model provider through Crowded Kingdoms (zero data retention, no training). ' +
+                'Model usage is charged to your wallet at the app\'s rates unless the app pays for it.';
+        const actions = el('div', 'ck-crowdy-studio-dsh-notice-actions');
+        const accept = el('button');
+        accept.type = 'button';
+        accept.textContent = 'I understand, start the agent';
+        accept.addEventListener('click', () => {
+            void this.run(async () => {
+                await this.options.transport.setConsent(this.options.appId, true);
+                this.notice.hidden = true;
+                this.started = true;
+                await this.boot();
+            });
+        });
+        actions.append(accept);
+        this.notice.append(text, actions);
+    }
+    renderStatus(status) {
+        this.root.dataset.phase = status.phase;
+        switch (status.phase) {
+            case 'idle':
+                this.status.textContent = '';
+                break;
+            case 'waiting-for-frame':
+            case 'booting':
+                this.status.textContent = 'Starting…';
+                break;
+            case 'ready':
+                this.status.textContent = status.store ? 'Ready · GitHub' : 'Ready';
+                this.status.title = status.store ?? '';
+                break;
+            case 'failed':
+                this.status.textContent = 'Unavailable';
+                this.say(status.message);
+                break;
+        }
+    }
+    async refreshUsage() {
+        if (this.disposed)
+            return;
+        try {
+            const usage = await this.options.transport.usage(this.options.appId, 1);
+            this.renderSpend(usage);
+        }
+        catch {
+            // Usage is informational; the endpoint enforces the budget.
+        }
+    }
+    renderSpend(usage) {
+        const spent = Number(usage.todayChargeMicrousd) / 1000000;
+        const limit = Number(usage.dayLimitMicrousd) / 1000000;
+        const payer = usage.payerKind === 'PLAYER' ? 'your wallet' : usage.payerKind === 'ORG' ? "the app's wallet" : 'the platform';
+        this.spend.replaceChildren();
+        const text = el('span');
+        text.textContent = `Today: $${spent.toFixed(2)} of $${limit.toFixed(2)} · ${usage.todayRequests} requests · paid by ${payer}`;
+        this.spend.append(text);
+        if (usage.payerKind === 'PLAYER' && this.options.studioOrigin) {
+            const link = el('a');
+            link.href = `${this.options.studioOrigin.replace(/\/+$/, '')}/account/wallet`;
+            link.target = '_blank';
+            link.rel = 'noopener';
+            link.textContent = 'Add funds';
+            this.spend.append(' · ', link);
+        }
+    }
+    say(text) {
+        this.message.hidden = false;
+        this.message.textContent = text;
+    }
+    async run(work) {
+        try {
+            await work();
+        }
+        catch (error) {
+            this.say(error instanceof Error ? error.message : String(error));
+        }
+    }
+}
+function el(tag, className) {
+    const node = document.createElement(tag);
+    if (className)
+        node.className = className;
+    return node;
+}
+export const CROWDY_STUDIO_DSH_STYLES = `
+.ck-crowdy-studio-dsh{flex:none;display:flex;flex-direction:column;min-width:0;min-height:0;border-left:1px solid var(--ck-line);background:#0b1220}
+.ck-crowdy-studio-dsh>header{display:flex;align-items:center;gap:8px;padding:6px 10px;border-bottom:1px solid var(--ck-line)}
+.ck-crowdy-studio-dsh>header h2{margin:0;font-size:13px;flex:none}
+.ck-crowdy-studio-dsh-status{flex:1;min-width:0;color:var(--ck-muted);font-size:12px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+.ck-crowdy-studio-dsh[data-phase=failed] .ck-crowdy-studio-dsh-status{color:#fca5a5}
+.ck-crowdy-studio-dsh-frame{flex:1;min-height:0;width:100%;border:0;background:#fff}
+.ck-crowdy-studio-dsh-notice{padding:10px;font-size:12px;color:var(--ck-text);border-bottom:1px solid var(--ck-line)}
+.ck-crowdy-studio-dsh-notice p{margin:0 0 8px}
+.ck-crowdy-studio-dsh-notice-actions{display:flex;gap:6px}
+.ck-crowdy-studio-dsh-spend{padding:4px 10px;font-size:11px;color:var(--ck-muted);border-top:1px solid var(--ck-line)}
+.ck-crowdy-studio-dsh-spend a{color:#bae6fd}
+.ck-crowdy-studio-dsh-message{padding:4px 10px;font-size:11px;color:#fde68a;border-top:1px solid var(--ck-line)}
+.ck-crowdy-studio-dsh-message button{font-size:11px;padding:2px 8px;margin-left:4px}
+.ck-crowdy-studio-dsh-confirm{background:#b91c1c;color:#fff;border:0;border-radius:3px}
+`;

package/dist/crowdy-dsh/protocol.d.ts

@@ -0,0 +1,249 @@
+/**
+ * Wire protocol between the Crowdy Studio page and the DeepSeek Harness that
+ * runs in a Web Worker inside the Studio agent pane.
+ *
+ * The harness side lives in the published `@crowdedkingdoms/crowdy-dsh`
+ * package (`bridge-protocol` export); this file mirrors it so the SDK stays
+ * dependency-free. Keep the two in step.
+ *
+ * Two channels exist:
+ *
+ *   - `postMessage` between the page and the harness iframe: the iframe says
+ *     `crowdy-dsh:ready`, the page answers `crowdy-dsh:boot` with the home
+ *     files to seed and a one-time `nonce`, and the iframe reports
+ *     `crowdy-dsh:booted` or `:failed`.
+ *   - one `BroadcastChannel` (name chosen by the page) between the page and
+ *     the worker: the worker asks the page to do what only the page can
+ *     (draft tests, screenshots, project switching, game observation) and the
+ *     page pushes token, project and context updates.
+ *
+ * A `BroadcastChannel` is open to every same-origin script, so the channel
+ * name is unguessable and every frame carries the boot nonce; a frame without
+ * the right nonce is dropped. The page still confirms a live deploy with the
+ * player before running it, because the harness UI's approval is inside the
+ * iframe and the page cannot see it.
+ */
+export declare const CROWDY_DSH_PROTOCOL_VERSION: 2;
+export type DshBridgeSide = 'page' | 'worker';
+export type DshBridgeFrame = {
+    v: 2;
+    n: string;
+    from: DshBridgeSide;
+    t: 'req';
+    id: string;
+    method: string;
+    params: unknown;
+} | {
+    v: 2;
+    n: string;
+    from: DshBridgeSide;
+    t: 'res';
+    id: string;
+    result: unknown;
+} | {
+    v: 2;
+    n: string;
+    from: DshBridgeSide;
+    t: 'err';
+    id: string;
+    code: string;
+    message: string;
+} | {
+    v: 2;
+    n: string;
+    from: DshBridgeSide;
+    t: 'event';
+    event: string;
+    payload: unknown;
+};
+export interface DshScreenshotResult {
+    name: string;
+    mediaType: 'image/png' | 'image/jpeg' | 'image/webp';
+    bytes: ArrayBuffer;
+    width: number;
+    height: number;
+    caption?: string;
+}
+export interface DshDiagnostic {
+    target: 'SERVER' | 'CLIENT';
+    path: string;
+    line?: number;
+    column?: number;
+    severity: 'error' | 'warning' | 'info';
+    message: string;
+}
+export interface DshRuntimeStatus {
+    target: 'SERVER' | 'CLIENT';
+    phase: string;
+    moduleName?: string;
+    runningRevision?: string;
+    savedRevision?: string;
+    message?: string;
+}
+export interface DshBuildResult {
+    ok: boolean;
+    mode: 'draft' | 'live';
+    summary: string;
+    diagnostics: DshDiagnostic[];
+    buildLog: string;
+    runtime: DshRuntimeStatus[];
+    screenshot?: DshScreenshotResult;
+}
+export interface DshProjectSummary {
+    projectId: string;
+    name: string;
+    kind: string;
+    updatedAt: string;
+    github?: string;
+}
+export interface DshBridgeRequestMap {
+    'studio.screenshot': {
+        params: {
+            label?: string;
+        };
+        result: DshScreenshotResult;
+    };
+    'studio.draftTest': {
+        params: Record<string, never>;
+        result: DshBuildResult;
+    };
+    'studio.deployLive': {
+        params: Record<string, never>;
+        result: DshBuildResult;
+    };
+    'studio.runtimeStatus': {
+        params: Record<string, never>;
+        result: {
+            runtime: DshRuntimeStatus[];
+        };
+    };
+    'studio.runtimeLogs': {
+        params: {
+            limit?: number;
+        };
+        result: {
+            lines: string[];
+            truncated: boolean;
+        };
+    };
+    'studio.clientLogs': {
+        params: {
+            limit?: number;
+        };
+        result: {
+            lines: string[];
+            truncated: boolean;
+        };
+    };
+    'studio.projectList': {
+        params: Record<string, never>;
+        result: {
+            projects: DshProjectSummary[];
+            currentProjectId: string | null;
+        };
+    };
+    'studio.projectOpen': {
+        params: {
+            projectId: string;
+        };
+        result: {
+            project: DshProjectSummary;
+        };
+    };
+    'studio.projectCreate': {
+        params: {
+            name: string;
+            template?: string;
+        };
+        result: {
+            project: DshProjectSummary;
+        };
+    };
+    'game.observe': {
+        params: Record<string, never>;
+        result: {
+            observation: unknown;
+            capturedAt: string;
+        };
+    };
+}
+export type DshBridgeMethod = keyof DshBridgeRequestMap;
+export interface DshPageEventMap {
+    'page.hello': {
+        appId: string;
+        projectId: string | null;
+        appToken?: string;
+    };
+    'page.token': {
+        appToken: string;
+    };
+    'page.project': {
+        projectId: string | null;
+    };
+    'page.saved': {
+        revision?: string;
+    };
+    'page.context': {
+        observation?: unknown;
+        clientLogs?: string[];
+        diagnostics?: DshDiagnostic[];
+        runtime?: DshRuntimeStatus[];
+        note?: string;
+    };
+    'page.capture': DshScreenshotResult;
+    /** Text for the agent, queued into the latest live session (or a new one). */
+    'page.prompt': {
+        text: string;
+        mode?: 'queue' | 'steer';
+    };
+    'page.bye': Record<string, never>;
+}
+export interface DshWorkerEventMap {
+    'worker.ready': {
+        root: string;
+        store?: string;
+    };
+    'worker.fileChanged': {
+        target: 'SERVER' | 'CLIENT';
+        path: string;
+    };
+    'worker.warning': {
+        message: string;
+    };
+    'worker.openFile': {
+        target: 'SERVER' | 'CLIENT';
+        path: string;
+        line?: number;
+    };
+}
+/** Messages the harness iframe posts to its parent (`source: 'crowdy-dsh'`). */
+export type DshFrameMessage = {
+    source: 'crowdy-dsh';
+    type: 'crowdy-dsh:ready';
+} | {
+    source: 'crowdy-dsh';
+    type: 'crowdy-dsh:booted';
+    mount: string;
+} | {
+    source: 'crowdy-dsh';
+    type: 'crowdy-dsh:failed';
+    message: string;
+};
+/** The page's answer to `crowdy-dsh:ready`. */
+export interface DshBootMessage {
+    type: 'crowdy-dsh:boot';
+    /**
+     * Home-relative files to seed (`crowdy.json`, `settings.yaml`). Never the
+     * app token: that travels over the channel (`page.hello` / `page.token`) and
+     * lives only in the worker's memory.
+     */
+    files: Record<string, string>;
+    /** One-time secret every bridge frame must carry; also in `crowdy.json`. */
+    nonce: string;
+    /** OPFS scope for restored sessions; omit to start fresh. */
+    persistScope?: string;
+    mount?: string;
+}
+export declare function isDshBridgeFrame(value: unknown, nonce?: string): value is DshBridgeFrame;
+export declare function isDshFrameMessage(value: unknown): value is DshFrameMessage;
+//# sourceMappingURL=protocol.d.ts.map

package/dist/crowdy-dsh/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../../src/crowdy-dsh/protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,eAAO,MAAM,2BAA2B,EAAG,CAAU,CAAC;AAEtD,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE9C,MAAM,MAAM,cAAc,GACtB;IAAE,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,aAAa,CAAC;IAAC,CAAC,EAAE,KAAK,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GAC/F;IAAE,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,aAAa,CAAC;IAAC,CAAC,EAAE,KAAK,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GAC/E;IAAE,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,aAAa,CAAC;IAAC,CAAC,EAAE,KAAK,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC7F;IAAE,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,aAAa,CAAC;IAAC,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC;AAE1F,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,WAAW,GAAG,YAAY,GAAG,YAAY,CAAC;IACrD,KAAK,EAAE,WAAW,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;IACvC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,aAAa,EAAE,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAClC;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,mBAAmB,EAAE;QAAE,MAAM,EAAE;YAAE,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,MAAM,EAAE,mBAAmB,CAAA;KAAE,CAAC;IACjF,kBAAkB,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAAC,MAAM,EAAE,cAAc,CAAA;KAAE,CAAC;IAC9E,mBAAmB,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAAC,MAAM,EAAE,cAAc,CAAA;KAAE,CAAC;IAC/E,sBAAsB,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAAC,MAAM,EAAE;YAAE,OAAO,EAAE,gBAAgB,EAAE,CAAA;SAAE,CAAA;KAAE,CAAC;IACnG,oBAAoB,EAAE;QAAE,MAAM,EAAE;YAAE,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,MAAM,EAAE;YAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAAC,SAAS,EAAE,OAAO,CAAA;SAAE,CAAA;KAAE,CAAC;IACtG,mBAAmB,EAAE;QAAE,MAAM,EAAE;YAAE,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,MAAM,EAAE;YAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAAC,SAAS,EAAE,OAAO,CAAA;SAAE,CAAA;KAAE,CAAC;IACrG,oBAAoB,EAAE;QACpB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC9B,MAAM,EAAE;YAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC;YAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,CAAC;KAC5E,CAAC;IACF,oBAAoB,EAAE;QAAE,MAAM,EAAE;YAAE,SAAS,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,MAAM,EAAE;YAAE,OAAO,EAAE,iBAAiB,CAAA;SAAE,CAAA;KAAE,CAAC;IAChG,sBAAsB,EAAE;QAAE,MAAM,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,MAAM,EAAE;YAAE,OAAO,EAAE,iBAAiB,CAAA;SAAE,CAAA;KAAE,CAAC;IAChH,cAAc,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAAC,MAAM,EAAE;YAAE,WAAW,EAAE,OAAO,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;CACzG;AAED,MAAM,MAAM,eAAe,GAAG,MAAM,mBAAmB,CAAC;AAExD,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7E,YAAY,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IACnC,cAAc,EAAE;QAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAC7C,YAAY,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACpC,cAAc,EAAE;QACd,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QACtB,WAAW,CAAC,EAAE,aAAa,EAAE,CAAC;QAC9B,OAAO,CAAC,EAAE,gBAAgB,EAAE,CAAC;QAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;IACF,cAAc,EAAE,mBAAmB,CAAC;IACpC,8EAA8E;IAC9E,aAAa,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAA;KAAE,CAAC;IAC1D,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,iBAAiB;IAChC,cAAc,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACjD,oBAAoB,EAAE;QAAE,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACpE,gBAAgB,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACtC,iBAAiB,EAAE;QAAE,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACjF;AAED,gFAAgF;AAChF,MAAM,MAAM,eAAe,GACvB;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,kBAAkB,CAAA;CAAE,GAClD;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,mBAAmB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAClE;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,mBAAmB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzE,+CAA+C;AAC/C,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,iBAAiB,CAAC;IACxB;;;;OAIG;IACH,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,4EAA4E;IAC5E,KAAK,EAAE,MAAM,CAAC;IACd,6DAA6D;IAC7D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,KAAK,IAAI,cAAc,CAMxF;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,eAAe,CAE1E"}

package/dist/crowdy-dsh/protocol.js

@@ -0,0 +1,39 @@
+/**
+ * Wire protocol between the Crowdy Studio page and the DeepSeek Harness that
+ * runs in a Web Worker inside the Studio agent pane.
+ *
+ * The harness side lives in the published `@crowdedkingdoms/crowdy-dsh`
+ * package (`bridge-protocol` export); this file mirrors it so the SDK stays
+ * dependency-free. Keep the two in step.
+ *
+ * Two channels exist:
+ *
+ *   - `postMessage` between the page and the harness iframe: the iframe says
+ *     `crowdy-dsh:ready`, the page answers `crowdy-dsh:boot` with the home
+ *     files to seed and a one-time `nonce`, and the iframe reports
+ *     `crowdy-dsh:booted` or `:failed`.
+ *   - one `BroadcastChannel` (name chosen by the page) between the page and
+ *     the worker: the worker asks the page to do what only the page can
+ *     (draft tests, screenshots, project switching, game observation) and the
+ *     page pushes token, project and context updates.
+ *
+ * A `BroadcastChannel` is open to every same-origin script, so the channel
+ * name is unguessable and every frame carries the boot nonce; a frame without
+ * the right nonce is dropped. The page still confirms a live deploy with the
+ * player before running it, because the harness UI's approval is inside the
+ * iframe and the page cannot see it.
+ */
+export const CROWDY_DSH_PROTOCOL_VERSION = 2;
+export function isDshBridgeFrame(value, nonce) {
+    if (!value || typeof value !== 'object')
+        return false;
+    const frame = value;
+    if (frame.v !== CROWDY_DSH_PROTOCOL_VERSION || typeof frame.n !== 'string' || typeof frame.t !== 'string')
+        return false;
+    if (frame.from !== 'page' && frame.from !== 'worker')
+        return false;
+    return nonce === undefined || frame.n === nonce;
+}
+export function isDshFrameMessage(value) {
+    return !!value && typeof value === 'object' && value.source === 'crowdy-dsh';
+}

package/dist/crowdy-dsh/transport.d.ts

@@ -0,0 +1,66 @@
+/**
+ * The game-API surface the Studio agent pane needs beyond project files:
+ * the provider-data consent, the player's own model usage, and the list of
+ * models the metered endpoint will serve for this app.
+ *
+ * Every call carries the app-scoped token the game already holds; there is no
+ * second credential. The model list is REST (`GET /v1/model/models`, the
+ * OpenAI shape the harness reads) and the rest is GraphQL.
+ */
+import type { GraphQLClient } from '../client.js';
+export interface CrowdyStudioProviderConsent {
+    appId: string;
+    consented: boolean;
+    consentedAt: string | null;
+}
+export interface CrowdyStudioModelUsageEntry {
+    usageId: string;
+    payerKind: string;
+    status: string;
+    requestedModel: string;
+    resolvedModel: string | null;
+    promptTokens: string;
+    completionTokens: string;
+    reasoningTokens: string;
+    chargeMicrousd: string;
+    occurredAt: string;
+    client: string;
+}
+export interface CrowdyStudioModelUsage {
+    appId: string;
+    /** `PLAYER` (the caller's wallet), `ORG` (the app's org wallet) or `PLATFORM`. */
+    payerKind: string;
+    todayRequests: string;
+    todayChargeMicrousd: string;
+    dayLimitMicrousd: string;
+    recent: CrowdyStudioModelUsageEntry[];
+}
+export interface CrowdyStudioModelCatalogEntry {
+    id: string;
+    name: string;
+    contextWindow: number | null;
+    inputModalities: string[];
+    pricingMicrousdPerMillion: {
+        input: number;
+        output: number;
+        reasoning: number;
+        cachedInput: number;
+    };
+}
+export declare class CrowdyStudioDshTransport {
+    private readonly graphql;
+    private readonly options;
+    constructor(graphql: GraphQLClient, options: {
+        /** Origin of the game API, e.g. `https://ck-or.dev.crowdedkingdoms.com` or the page origin behind a proxy. */
+        apiOrigin: string;
+        getToken(): string | null;
+    });
+    /** Base URL the harness posts completions to (`<origin>/v1/model`). */
+    get modelBaseUrl(): string;
+    consent(appId: string): Promise<CrowdyStudioProviderConsent>;
+    setConsent(appId: string, consented: boolean): Promise<CrowdyStudioProviderConsent>;
+    usage(appId: string, limit?: number): Promise<CrowdyStudioModelUsage>;
+    /** Models the metered endpoint offers this caller; empty when the agent is disabled for the app. */
+    models(appId: string): Promise<CrowdyStudioModelCatalogEntry[]>;
+}
+//# sourceMappingURL=transport.d.ts.map

package/dist/crowdy-dsh/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../src/crowdy-dsh/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,kFAAkF;IAClF,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,2BAA2B,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,6BAA6B;IAC5C,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,yBAAyB,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;CACtG;AAuBD,qBAAa,wBAAwB;IAEjC,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBADP,OAAO,EAAE,aAAa,EACtB,OAAO,EAAE;QACxB,8GAA8G;QAC9G,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,IAAI,MAAM,GAAG,IAAI,CAAC;KAC3B;IAGH,uEAAuE;IACvE,IAAI,YAAY,IAAI,MAAM,CAEzB;IAEK,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,2BAA2B,CAAC;IAO5D,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,OAAO,CAAC,2BAA2B,CAAC;IAQnF,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAQvE,oGAAoG;IAC9F,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,6BAA6B,EAAE,CAAC;CAsCtE"}