@ekrooh/bare 0.1.0 → 0.2.0

package/dist/plugins.d.mts

@@ -1,5 +1,5 @@
 import { A as CapabilityDescriptor, G as PluginInvokeRequestHeader, K as PluginInvokeResponseHeader, Y as RuntimeTarget, q as PluginManifest } from "./index-DjulYFJL.mjs";
-import { t as LoopbackServer } from "./static-file-server-CxeI_mQr.mjs";
+import { n as LoopbackServer } from "./static-file-server-DY9EKEVf.mjs";
 //#region plugins/discovery/plugin.d.ts
 type DiscoveryPluginDeps = {
   listBareCapabilities: () => Array<{

package/dist/runtime.d.mts

@@ -1,5 +1,5 @@
-import { A as CapabilityDescriptor, G as PluginInvokeRequestHeader, K as PluginInvokeResponseHeader, d as MessageProtocol, t as BareRuntimeContext, v as createPluginRegistry, y as createPluginRouter } from "./index-DjulYFJL.mjs";
-import { n as createLoopbackServer, t as LoopbackServer } from "./static-file-server-CxeI_mQr.mjs";
+import { A as CapabilityDescriptor, G as PluginInvokeRequestHeader, K as PluginInvokeResponseHeader, V as MessageHeader, d as MessageProtocol, q as PluginManifest, t as BareRuntimeContext, v as createPluginRegistry, y as createPluginRouter } from "./index-DjulYFJL.mjs";
+import { i as createLoopbackServer, n as LoopbackServer, r as collectRequestBody, t as LoopbackRouteHandler } from "./static-file-server-DY9EKEVf.mjs";
 //#region core/messages/host-ipc.d.ts
 type BareIpcLike = {
   write(data: Uint8Array | Buffer | string): boolean;
@@ -14,6 +14,13 @@ declare function createHostIpcBridge(config: {
 };
 //#endregion
 //#region core/server/websocket-server.d.ts
+/** Envelope encoder bound to a loopback server's connected protocol socket —
+ * the server-initiated (backend → web) push seam. */
+type LoopbackPush = (header: MessageHeader, payload?: Uint8Array | ArrayBuffer | null) => boolean;
+/** Builds the push seam for the server's connected protocol socket: encodes a
+ * `DISPATCH`-style envelope and writes it, mirroring how `attachWebSocketProtocol`
+ * writes responses. Returns false when no socket is connected. */
+declare function createLoopbackPush(server: LoopbackServer, protocol: MessageProtocol): LoopbackPush;
 /**
  * Attaches the framed-protocol socket to the unified loopback server. The
  * server owns the WebSocket upgrade (origin check, cookie/token auth, single
@@ -60,6 +67,9 @@ type WorkletRuntimeOptions = {
   port?: number;
   /** Require the per-session token/cookie. Defaults to on in device mode. */
   auth?: boolean;
+  /** Additional plugin manifests to register after the canonical defaults
+   * (consumer product plugins, e.g. `app.photos`). */
+  plugins?: PluginManifest[];
   /** Idle timeout (ms) after which an authenticated WebSocket is dropped. */
   wsIdleTimeoutMs?: number;
 };
@@ -93,4 +103,4 @@ interface WorkletRuntime {
  */
 declare function createWorkletRuntime(options?: WorkletRuntimeOptions): WorkletRuntime;
 //#endregion
-export { type LoopbackServer, WorkletRuntime, WorkletRuntimeConfig, WorkletRuntimeOptions, attachWebSocketProtocol, createLoopbackServer, createWorkletRuntime, getIPC, resolveWorkletConfig };
+export { type LoopbackPush, type LoopbackRouteHandler, type LoopbackServer, WorkletRuntime, WorkletRuntimeConfig, WorkletRuntimeOptions, attachWebSocketProtocol, collectRequestBody, createLoopbackPush, createLoopbackServer, createWorkletRuntime, getIPC, resolveWorkletConfig };

package/dist/runtime.mjs

@@ -13,7 +13,7 @@ import crypto from "bare-crypto";
 * In Bare (Sidecar), it uses Bare.IPC.
 */
 function getIPC() {
-	const IPC = typeof BareKit !== "undefined" ? BareKit.IPC : Bare.IPC;
+	const IPC = typeof BareKit !== "undefined" ? BareKit.IPC : typeof Bare !== "undefined" ? Bare.IPC : void 0;
 	if (IPC && typeof IPC.resume === "function") IPC.resume();
 	return IPC;
 }
@@ -219,6 +219,7 @@ function createLoopbackServer(options = {}) {
 	const wsIdleTimeoutMs = options.wsIdleTimeoutMs ?? 6e4;
 	const fileMounts = /* @__PURE__ */ new Map();
 	const dirMounts = /* @__PURE__ */ new Map();
+	const routeHandlers = /* @__PURE__ */ new Map();
 	const connectionHandlers = [];
 	let token = options.token ?? null;
 	let boundOrigin = "";
@@ -375,6 +376,19 @@ function createLoopbackServer(options = {}) {
 				writeError(res, 400, "Bad request");
 				return;
 			}
+			const route = routeHandlers.get(`${req.method} ${cleanPath}`);
+			if (route) {
+				if (!isAuthorized(headers, query)) {
+					writeError(res, 401, "Unauthorized");
+					return;
+				}
+				try {
+					route(req, res);
+				} catch (err) {
+					writeError(res, 500, err instanceof Error ? err.message : String(err));
+				}
+				return;
+			}
 			const mount = resolveMount(cleanPath);
 			if (!(mount !== null && mount.kind === "dir") && !isAuthorized(headers, query)) {
 				writeError(res, 401, "Unauthorized");
@@ -471,6 +485,18 @@ function createLoopbackServer(options = {}) {
 		onConnection(handler) {
 			connectionHandlers.push(handler);
 		},
+		registerRoute(method, path, handler) {
+			routeHandlers.set(`${method.toUpperCase()} ${path}`, handler);
+		},
+		push(frame) {
+			if (!activeSocket) return false;
+			try {
+				activeSocket.write(frame);
+				return true;
+			} catch {
+				return false;
+			}
+		},
 		close(cb) {
 			if (activeSocket) try {
 				activeSocket.destroy();
@@ -486,6 +512,15 @@ function toUint8Array$1(data) {
 	if (data instanceof ArrayBuffer) return new Uint8Array(data);
 	throw new Error("Expected Uint8Array or ArrayBuffer from socket data");
 }
+/** Builds the push seam for the server's connected protocol socket: encodes a
+* `DISPATCH`-style envelope and writes it, mirroring how `attachWebSocketProtocol`
+* writes responses. Returns false when no socket is connected. */
+function createLoopbackPush(server, protocol) {
+	return (header, payload = null) => {
+		const frame = protocol.encode(MessageType.ENVELOPE, header, payload);
+		return server.push(frame);
+	};
+}
 /**
 * Attaches the framed-protocol socket to the unified loopback server. The
 * server owns the WebSocket upgrade (origin check, cookie/token auth, single
@@ -582,6 +617,7 @@ function createWorkletRuntime(options = {}) {
 		staticServer: server,
 		invokeOnHost: (header, payload) => hostBridge?.invokeOnHost(header, payload) ?? Promise.resolve(null)
 	})) pluginRegistry.register(plugin);
+	for (const plugin of options.plugins ?? []) pluginRegistry.register(plugin);
 	const pluginRouter = createPluginRouter(pluginRegistry, "bare", { delegateToHost: (header, payload) => hostBridge?.invokeOnHost(header, payload) ?? Promise.resolve(null) });
 	if (ipc) ipc.on("data", async (data) => {
 		try {
@@ -607,7 +643,7 @@ function createWorkletRuntime(options = {}) {
 			pluginRouter
 		});
 		const credentials = await server.credentials();
-		if (deviceMode && options.storage) try {
+		if (auth && options.storage) try {
 			fs.writeFileSync(path.join(options.storage, "handoff.json"), JSON.stringify(credentials));
 		} catch (err) {
 			const message = err instanceof Error ? err.message : String(err);
@@ -634,4 +670,4 @@ function createWorkletRuntime(options = {}) {
 	};
 }
 //#endregion
-export { attachWebSocketProtocol, createLoopbackServer, createWorkletRuntime, getIPC, resolveWorkletConfig };
+export { attachWebSocketProtocol, collectRequestBody, createLoopbackPush, createLoopbackServer, createWorkletRuntime, getIPC, resolveWorkletConfig };

package/dist/{static-file-server-CxeI_mQr.d.mts → static-file-server-DY9EKEVf.d.mts}

@@ -1,5 +1,10 @@
-import "bare-http1";
+import { HTTPIncomingMessage, HTTPServerResponse } from "bare-http1";
 //#region core/server/static-file-server.d.ts
+/** Accumulates an HTTP request body into a UTF-8 string. Node http emits
+ * Buffers, bare-http1 emits Uint8Arrays, and a setEncoding'd stream emits
+ * strings — `String(uint8array)` would join bytes with commas, so decode
+ * explicitly (the `/login` token body must match byte-for-byte). */
+declare function collectRequestBody(req: HTTPIncomingMessage): Promise<string>;
 type WebSocketLike = {
   on(event: 'data', listener: (chunk: unknown) => void): unknown;
   on(event: 'close', listener: () => void): unknown;
@@ -7,6 +12,8 @@ type WebSocketLike = {
   write(data: unknown): boolean;
   destroy(): void;
 };
+/** Handler for a registered HTTP route on the loopback server. */
+type LoopbackRouteHandler = (req: HTTPIncomingMessage, res: HTTPServerResponse) => void;
 /** Minimal shape of the HTTP request object handed to WS upgrade handlers. */
 type LoopbackRequest = {
   url?: string;
@@ -54,6 +61,13 @@ interface LoopbackServer {
   /** Registers a handler for authenticated, handshaken WebSocket connections
    * (the protocol socket). */
   onConnection(handler: LoopbackConnectionHandler): void;
+  /** Registers an HTTP route. `handler` runs before mount resolution, after
+   * the auth gate (device mode requires the session cookie/token). The route
+   * body is read with `collectRequestBody`. */
+  registerRoute(method: string, path: string, handler: LoopbackRouteHandler): void;
+  /** Writes a raw frame to the connected protocol socket (if any) — the
+   * server-initiated push seam (e.g. a `photos.changed` dispatch). */
+  push(frame: Uint8Array): boolean;
   /** Stops accepting connections and closes the server. */
   close(cb?: (err?: Error | null) => void): void;
 }
@@ -71,4 +85,4 @@ interface LoopbackServer {
  */
 declare function createLoopbackServer(options?: LoopbackServerOptions): LoopbackServer;
 //#endregion
-export { createLoopbackServer as n, LoopbackServer as t };
+export { createLoopbackServer as i, LoopbackServer as n, collectRequestBody as r, LoopbackRouteHandler as t };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ekrooh/bare",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "type": "module",
   "description": "One soul, many platforms — the boring bootstrap for cross-platform apps on the Bare runtime: wire protocol, plugin kernel, RPC messenger, transports, and native host bridges.",
   "license": "MIT",
@@ -10,7 +10,8 @@
   },
   "workspaces": [
     "examples/*",
-    "e2e"
+    "e2e",
+    "apps/*"
   ],
   "exports": {
     ".": "./dist/index.mjs",
@@ -30,6 +31,10 @@
   "scripts": {
     "check": "vp check",
     "lint": "vp fmt . --fix",
+    "docs:dev": "vp run docs#dev",
+    "docs:build": "vp run docs#build",
+    "docs:preview": "vp run docs#preview",
+    "docs:check": "node scripts/docs-check.mjs",
     "typecheck": "tsc --noEmit",
     "test": "vp test && npm run test:e2e:web && npm run test:e2e:harness",
     "test:unit": "vp test",