@fias/plugin-dev-harness 1.5.3 → 1.5.4

package/dist/server/static/static/harness.js

@@ -1,1003 +0,0 @@
-/**
- * Fias Arche Dev — Client-side Bridge Host
- *
- * Handles postMessage communication with the plugin iframe,
- * enforcing permissions and rate limits, and proxying server-side
- * operations through the harness Express server.
- */
-(function () {
-  'use strict';
-
-  var iframe = document.getElementById('plugin-iframe');
-  var consoleBody = document.getElementById('console-body');
-  var consoleCount = document.getElementById('console-count');
-  var consoleToggle = document.getElementById('console-toggle');
-  var creditBalance = document.getElementById('credit-balance');
-  var themeToggle = document.getElementById('theme-toggle');
-  var reloadBtn = document.getElementById('reload-btn');
-  var modeBadge = document.getElementById('mode-badge');
-  var modeToggle = document.getElementById('mode-toggle');
-  var pluginStatus = document.getElementById('plugin-status');
-  var themeBadge = document.getElementById('theme-badge');
-  var envSelector = document.getElementById('env-selector');
-
-  var messageCount = 0;
-  var currentTheme = 'dark';
-  var currentMode = 'mock';
-  var currentEnvironment = 'staging';
-  var hasCredentials = false;
-  var cachedConfig = null;
-
-  /** Permission requirements per bridge call type (matches production) */
-  var PERMISSION_MAP = {
-    get_user: 'user:profile:read',
-    get_theme: 'theme:read',
-    entity_invoke: 'entities:invoke',
-    image_generate: 'entities:image_generate',
-    storage_read: 'storage:sandbox',
-    storage_write: 'storage:sandbox',
-    storage_list: 'storage:sandbox',
-    storage_delete: 'storage:sandbox',
-  };
-
-  /** Rate limits per message type (matches production) */
-  var RATE_LIMITS = {
-    entity_invoke: { maxPerMinute: 60 },
-    image_generate: { maxPerMinute: 10 },
-    storage_write: { maxPerMinute: 120 },
-    storage_read: { maxPerMinute: 300 },
-    storage_list: { maxPerMinute: 60 },
-    storage_delete: { maxPerMinute: 60 },
-  };
-  var rateBuckets = {};
-
-  // ────────────────────────────────────────────────────────────────
-  // Initialization
-  // ────────────────────────────────────────────────────────────────
-
-  fetchConfig().then(function (config) {
-    cachedConfig = config;
-    currentTheme = config.mockTheme || 'dark';
-    currentMode = config.mode || 'mock';
-    currentEnvironment = config.environment || 'staging';
-    hasCredentials = config.hasCredentials || false;
-
-    envSelector.value = currentEnvironment;
-    updateThemeBadge();
-    updateModeBadge();
-
-    if (currentMode === 'live') {
-      creditBalance.style.display = 'inline';
-      fetchCredits();
-    }
-
-    checkPluginReachable(config.pluginUrl, function (reachable) {
-      if (reachable) {
-        pluginStatus.classList.add('hidden');
-        iframe.classList.remove('hidden');
-        iframe.src = config.pluginUrl;
-      } else {
-        showPluginError(config.pluginUrl);
-      }
-    });
-  });
-
-  // ────────────────────────────────────────────────────────────────
-  // UI Controls
-  // ────────────────────────────────────────────────────────────────
-
-  consoleToggle.addEventListener('click', function () {
-    consoleBody.classList.toggle('open');
-  });
-
-  reloadBtn.addEventListener('click', function () {
-    if (cachedConfig) {
-      pluginStatus.classList.remove('hidden', 'error');
-      pluginStatus.innerHTML =
-        '<div class="status-spinner"></div><p>Connecting to plugin server...</p>';
-      iframe.classList.add('hidden');
-      checkPluginReachable(cachedConfig.pluginUrl, function (reachable) {
-        if (reachable) {
-          pluginStatus.classList.add('hidden');
-          iframe.classList.remove('hidden');
-          iframe.src = cachedConfig.pluginUrl;
-        } else {
-          showPluginError(cachedConfig.pluginUrl);
-        }
-      });
-    } else {
-      iframe.src = iframe.src;
-    }
-  });
-
-  themeToggle.addEventListener('click', function () {
-    currentTheme = currentTheme === 'dark' ? 'light' : 'dark';
-    updateThemeBadge();
-    sendToPlugin({
-      type: 'theme_update',
-      messageId: 'theme_' + Date.now(),
-      payload: getTheme(),
-    });
-    logMessage('send', 'theme_update', { mode: currentTheme });
-  });
-
-  // Mode toggle button
-  modeToggle.addEventListener('click', function () {
-    if (currentMode === 'mock') {
-      if (!hasCredentials) {
-        logMessage('error', 'Not authenticated. Run: npx fias-dev login');
-        return;
-      }
-      switchMode('live');
-    } else {
-      switchMode('mock');
-    }
-  });
-
-  // Environment selector
-  envSelector.addEventListener('change', function () {
-    fetch('/api/environment', {
-      method: 'POST',
-      headers: { 'Content-Type': 'application/json' },
-      body: JSON.stringify({ environment: envSelector.value }),
-    })
-      .then(function (r) {
-        return r.json();
-      })
-      .then(function (data) {
-        currentEnvironment = data.environment;
-        currentMode = data.mode;
-        hasCredentials = data.hasCredentials;
-        updateModeBadge();
-
-        if (currentMode === 'live') {
-          creditBalance.style.display = 'inline';
-          fetchCredits();
-        } else {
-          creditBalance.style.display = 'none';
-          creditBalance.textContent = '';
-        }
-
-        logMessage(
-          'info',
-          'Environment: ' +
-            currentEnvironment.toUpperCase() +
-            (hasCredentials ? '' : ' (not authenticated)'),
-        );
-      })
-      .catch(function (err) {
-        logMessage('error', err.message);
-      });
-  });
-
-  function switchMode(newMode) {
-    fetch('/api/mode', {
-      method: 'POST',
-      headers: { 'Content-Type': 'application/json' },
-      body: JSON.stringify({ mode: newMode }),
-    })
-      .then(function (r) {
-        if (!r.ok) {
-          return r.json().then(function (err) {
-            throw new Error(err.error || 'Failed to switch mode');
-          });
-        }
-        return r.json();
-      })
-      .then(function (data) {
-        currentMode = data.mode;
-        updateModeBadge();
-        logMessage('info', 'Mode switched to ' + currentMode.toUpperCase());
-
-        if (currentMode === 'live') {
-          creditBalance.style.display = 'inline';
-          fetchCredits();
-        } else {
-          creditBalance.style.display = 'none';
-          creditBalance.textContent = '';
-        }
-      })
-      .catch(function (err) {
-        logMessage('error', err.message);
-      });
-  }
-
-  // ────────────────────────────────────────────────────────────────
-  // Message Handling
-  // ────────────────────────────────────────────────────────────────
-
-  window.addEventListener('message', function (event) {
-    if (event.source !== iframe.contentWindow) return;
-
-    var data = event.data;
-    if (!data || typeof data !== 'object' || !data.type || !data.messageId) return;
-
-    logMessage('recv', data.type, data.payload);
-
-    if (data.type === 'ready') return;
-
-    if (data.type === 'resize') {
-      var height = data.payload && data.payload.height;
-      if (typeof height === 'number' && height > 0) {
-        iframe.style.height = height + 'px';
-        iframe.style.flex = 'none';
-      }
-      return;
-    }
-
-    if (data.type === 'toast') {
-      var msg = data.payload && data.payload.message;
-      if (typeof msg === 'string') {
-        logMessage('toast', msg, data.payload);
-      }
-      return;
-    }
-
-    if (data.type === 'navigate') {
-      var navPath = data.payload && data.payload.path;
-      if (typeof navPath === 'string') {
-        logMessage('nav', navPath);
-      }
-      return;
-    }
-
-    handleRequest(data);
-  });
-
-  function handleRequest(data) {
-    try {
-      var requiredPerm = PERMISSION_MAP[data.type];
-      if (requiredPerm && cachedConfig && cachedConfig.permissions.indexOf(requiredPerm) === -1) {
-        throw new Error('Permission denied: ' + requiredPerm + ' not granted');
-      }
-      checkRateLimit(data.type);
-    } catch (err) {
-      logMessage('error', err.message);
-      sendToPlugin({
-        type: 'response',
-        messageId: data.messageId,
-        payload: null,
-        error: err.message,
-      });
-      return;
-    }
-
-    // Streaming path for entity_invoke with stream: true
-    if (data.type === 'entity_invoke' && data.payload && data.payload.stream) {
-      handleStreamingRequest(data);
-      return;
-    }
-
-    fetch('/api/bridge', {
-      method: 'POST',
-      headers: { 'Content-Type': 'application/json' },
-      body: JSON.stringify({ type: data.type, payload: data.payload }),
-    })
-      .then(function (response) {
-        if (!response.ok) {
-          return response.json().then(function (err) {
-            throw new Error(err.error || 'Bridge call failed');
-          });
-        }
-        return response.json();
-      })
-      .then(function (result) {
-        logMessage('send', 'response', result);
-
-        if (
-          data.type === 'entity_invoke' &&
-          result.metadata &&
-          result.metadata.cost > 0
-        ) {
-          logMessage('cost', 'Credits used: ' + result.metadata.cost.toFixed(4));
-          fetchCredits();
-        }
-
-        sendToPlugin({
-          type: 'response',
-          messageId: data.messageId,
-          payload: result,
-        });
-      })
-      .catch(function (err) {
-        logMessage('error', err.message);
-        sendToPlugin({
-          type: 'response',
-          messageId: data.messageId,
-          payload: null,
-          error: err.message,
-        });
-      });
-  }
-
-  function handleStreamingRequest(data) {
-    fetch('/api/bridge/stream', {
-      method: 'POST',
-      headers: { 'Content-Type': 'application/json' },
-      body: JSON.stringify({ type: data.type, payload: data.payload }),
-    })
-      .then(function (response) {
-        if (!response.ok) {
-          return response.json().then(function (err) {
-            throw new Error(err.error || 'Bridge streaming call failed');
-          });
-        }
-
-        var contentType = response.headers.get('content-type') || '';
-        if (contentType.indexOf('text/event-stream') === -1) {
-          // Fallback: not SSE, parse as JSON
-          return response.json().then(function (result) {
-            sendToPlugin({ type: 'response', messageId: data.messageId, payload: result });
-          });
-        }
-
-        // Parse SSE stream
-        var reader = response.body.getReader();
-        var decoder = new TextDecoder();
-        var buffer = '';
-        var finalPayload = null;
-
-        function pump() {
-          return reader.read().then(function (chunk) {
-            if (chunk.done) {
-              if (finalPayload) {
-                logMessage('send', 'response', finalPayload);
-                sendToPlugin({ type: 'response', messageId: data.messageId, payload: finalPayload });
-              }
-              return;
-            }
-
-            buffer += decoder.decode(chunk.value, { stream: true });
-            var lines = buffer.split('\n');
-            buffer = lines.pop() || '';
-
-            for (var i = 0; i < lines.length; i++) {
-              var line = lines[i];
-              if (line.indexOf('data: ') !== 0) continue;
-              try {
-                var parsed = JSON.parse(line.slice(6));
-                if (parsed.error) throw new Error(parsed.error);
-                if (parsed.text) {
-                  sendToPlugin({ type: 'stream_token', messageId: data.messageId, text: parsed.text });
-                }
-                if (parsed.done) {
-                  finalPayload = { output: parsed.output, metadata: parsed.metadata };
-                  if (parsed.metadata && parsed.metadata.cost > 0) {
-                    logMessage('cost', 'Credits used: ' + parsed.metadata.cost.toFixed(4));
-                    fetchCredits();
-                  }
-                }
-              } catch (e) {
-                if (e instanceof SyntaxError) continue;
-                throw e;
-              }
-            }
-
-            return pump();
-          });
-        }
-
-        return pump();
-      })
-      .catch(function (err) {
-        logMessage('error', err.message);
-        sendToPlugin({
-          type: 'response',
-          messageId: data.messageId,
-          payload: null,
-          error: err.message,
-        });
-      });
-  }
-
-  // ────────────────────────────────────────────────────────────────
-  // Publish Wizard
-  // ────────────────────────────────────────────────────────────────
-
-  var publishBtn = document.getElementById('publish-btn');
-  var publishModal = document.getElementById('publish-modal');
-  var pubCancel = document.getElementById('pub-cancel');
-  var pubBack = document.getElementById('pub-back');
-  var pubNext = document.getElementById('pub-next');
-  var pubError = document.getElementById('pub-error');
-  var pubStep = 1;
-  var pubManifest = null;
-  var pubSubmissionId = null;
-  var pubPollTimer = null;
-  var pubValidationPassed = false;
-
-  publishBtn.addEventListener('click', function () {
-    if (currentMode !== 'live' || !hasCredentials) {
-      pubError.textContent = 'Switch to live mode and sign in to publish.';
-      pubError.style.display = 'block';
-      publishModal.style.display = 'flex';
-      showPublishStep(1);
-      return;
-    }
-    pubError.style.display = 'none';
-    fetch('/api/manifest')
-      .then(function (r) {
-        if (!r.ok) throw new Error('fias-plugin.json not found');
-        return r.json();
-      })
-      .then(function (manifest) {
-        pubManifest = manifest;
-        populatePublishForm(manifest);
-        publishModal.style.display = 'flex';
-        showPublishStep(1);
-      })
-      .catch(function (err) {
-        pubError.textContent = err.message;
-        pubError.style.display = 'block';
-        publishModal.style.display = 'flex';
-        showPublishStep(1);
-      });
-  });
-
-  pubCancel.addEventListener('click', closePublishModal);
-  publishModal.addEventListener('click', function (e) {
-    if (e.target === publishModal) closePublishModal();
-  });
-
-  function closePublishModal() {
-    publishModal.style.display = 'none';
-    if (pubPollTimer) { clearInterval(pubPollTimer); pubPollTimer = null; }
-    pubStep = 1;
-  }
-
-  pubBack.addEventListener('click', function () {
-    if (pubStep > 1) showPublishStep(pubStep - 1);
-  });
-
-  pubNext.addEventListener('click', function () {
-    pubError.style.display = 'none';
-    if (pubStep === 1) {
-      collectAndSaveManifest().then(function () { showPublishStep(2); startValidation(); });
-    } else if (pubStep === 2 && pubValidationPassed) {
-      showPublishStep(3);
-      showCostInfo();
-    } else if (pubStep === 3) {
-      startBuildAndSubmit();
-    } else if (pubStep === 4) {
-      closePublishModal();
-    }
-  });
-
-  function showPublishStep(step) {
-    pubStep = step;
-    for (var i = 1; i <= 4; i++) {
-      var el = document.getElementById('publish-step-' + i);
-      if (el) el.style.display = i === step ? 'block' : 'none';
-    }
-    var steps = document.querySelectorAll('.publish-step');
-    steps.forEach(function (s, idx) {
-      s.className = 'publish-step' + (idx + 1 === step ? ' active' : idx + 1 < step ? ' completed' : '');
-    });
-    pubBack.style.display = step > 1 && step < 4 ? 'inline-block' : 'none';
-    if (step === 1) { pubNext.textContent = 'Validate'; pubNext.style.display = 'inline-block'; }
-    else if (step === 2) { pubNext.textContent = 'Build & Submit'; pubNext.style.display = 'inline-block'; pubNext.disabled = !pubValidationPassed; }
-    else if (step === 3) { pubNext.textContent = 'Confirm & Build'; pubNext.style.display = 'inline-block'; }
-    else if (step === 4) { pubNext.textContent = 'Close'; pubNext.style.display = 'inline-block'; }
-  }
-
-  function populatePublishForm(m) {
-    document.getElementById('pub-name').value = m.name || '';
-    document.getElementById('pub-version').value = m.version || '1.0.0';
-    document.getElementById('pub-description').value = m.description || '';
-    document.getElementById('pub-expanded-desc').value = m.expandedDescription || '';
-    document.getElementById('pub-archetype').value = m.archeType || 'tool';
-    document.getElementById('pub-pricing-model').value = m.pricing?.model || 'free';
-    document.getElementById('pub-price').value = m.pricing?.priceCents || '';
-    document.getElementById('pub-price-row').style.display = m.pricing?.model === 'free' ? 'none' : 'block';
-
-    // Tags
-    var tagsList = document.getElementById('pub-tags-list');
-    tagsList.innerHTML = '';
-    (m.tags || []).forEach(function (t) { addPublishTag(t); });
-
-    // Permissions
-    var checkboxes = document.querySelectorAll('#pub-permissions input[type="checkbox"]');
-    var perms = m.permissions || [];
-    checkboxes.forEach(function (cb) { cb.checked = perms.indexOf(cb.value) !== -1; });
-  }
-
-  // Tag management
-  document.getElementById('pub-tags-input').addEventListener('keydown', function (e) {
-    if (e.key === 'Enter' || e.key === ',') {
-      e.preventDefault();
-      var val = this.value.trim().replace(/,/g, '');
-      if (val) { addPublishTag(val); this.value = ''; }
-    }
-  });
-
-  function addPublishTag(text) {
-    var tag = document.createElement('span');
-    tag.className = 'pub-tag';
-    tag.innerHTML = escapeHtml(text) + ' <button class="pub-tag-remove">&times;</button>';
-    tag.querySelector('.pub-tag-remove').addEventListener('click', function () { tag.remove(); });
-    document.getElementById('pub-tags-list').appendChild(tag);
-  }
-
-  // Pricing model change
-  document.getElementById('pub-pricing-model').addEventListener('change', function () {
-    document.getElementById('pub-price-row').style.display = this.value === 'free' ? 'none' : 'block';
-  });
-
-  function collectManifest() {
-    var tags = [];
-    document.querySelectorAll('#pub-tags-list .pub-tag').forEach(function (t) {
-      tags.push(t.textContent.replace('\u00d7', '').trim());
-    });
-    var perms = [];
-    document.querySelectorAll('#pub-permissions input:checked').forEach(function (cb) { perms.push(cb.value); });
-    var pricingModel = document.getElementById('pub-pricing-model').value;
-    var pricing = { model: pricingModel, currency: 'usd' };
-    if (pricingModel !== 'free') pricing.priceCents = parseInt(document.getElementById('pub-price').value, 10) || 0;
-
-    return {
-      name: document.getElementById('pub-name').value.trim(),
-      version: document.getElementById('pub-version').value.trim(),
-      description: document.getElementById('pub-description').value.trim(),
-      expandedDescription: document.getElementById('pub-expanded-desc').value.trim() || undefined,
-      main: (pubManifest && pubManifest.main) || 'src/index.tsx',
-      archeType: document.getElementById('pub-archetype').value,
-      tags: tags,
-      pricing: pricing,
-      permissions: perms,
-      sdk: (pubManifest && pubManifest.sdk) || '^1.0.0',
-      dependencies: pubManifest && pubManifest.dependencies,
-    };
-  }
-
-  function collectAndSaveManifest() {
-    var manifest = collectManifest();
-    pubManifest = manifest;
-    return fetch('/api/manifest', {
-      method: 'PUT',
-      headers: { 'Content-Type': 'application/json' },
-      body: JSON.stringify(manifest),
-    }).then(function (r) {
-      if (!r.ok) throw new Error('Failed to save manifest');
-    });
-  }
-
-  function startValidation() {
-    pubValidationPassed = false;
-    pubNext.disabled = true;
-    document.getElementById('pub-validate-loading').style.display = 'flex';
-    document.getElementById('pub-validate-results').style.display = 'none';
-
-    fetch('/api/publish/validate', { method: 'POST' })
-      .then(function (r) { return r.json(); })
-      .then(function (data) {
-        document.getElementById('pub-validate-loading').style.display = 'none';
-        document.getElementById('pub-validate-results').style.display = 'block';
-
-        var statusEl = document.getElementById('pub-validate-status');
-        var errorsEl = document.getElementById('pub-validate-errors');
-        var warningsEl = document.getElementById('pub-validate-warnings');
-        errorsEl.innerHTML = '';
-        warningsEl.innerHTML = '';
-
-        if (data.valid && (!data.errors || data.errors.length === 0)) {
-          statusEl.innerHTML = '<div class="pub-valid">Manifest is valid</div>';
-          pubValidationPassed = true;
-          pubNext.disabled = false;
-        } else {
-          statusEl.innerHTML = '<div style="color:#fca5a5;font-weight:500;margin-bottom:8px">Validation failed</div>';
-        }
-
-        if (data.errors) {
-          data.errors.forEach(function (e) {
-            var div = document.createElement('div');
-            div.className = 'pub-error-item';
-            div.textContent = e;
-            errorsEl.appendChild(div);
-          });
-        }
-        if (data.warnings) {
-          data.warnings.forEach(function (w) {
-            var div = document.createElement('div');
-            div.className = 'pub-warn-item';
-            div.textContent = w;
-            warningsEl.appendChild(div);
-          });
-        }
-
-        // Listing preview
-        var preview = document.getElementById('pub-listing-preview');
-        var m = pubManifest;
-        preview.innerHTML =
-          '<div class="pub-listing-name">' + escapeHtml(m.name) + '</div>' +
-          '<div class="pub-listing-desc">' + escapeHtml(m.description) + '</div>' +
-          '<div class="pub-listing-meta">' +
-            '<span>v' + escapeHtml(m.version) + '</span>' +
-            '<span>' + escapeHtml(m.archeType) + '</span>' +
-            '<span>' + escapeHtml(m.pricing.model) + '</span>' +
-          '</div>';
-      })
-      .catch(function (err) {
-        document.getElementById('pub-validate-loading').style.display = 'none';
-        pubError.textContent = err.message;
-        pubError.style.display = 'block';
-      });
-  }
-
-  function showCostInfo() {
-    var costEl = document.getElementById('pub-cost-info');
-    costEl.innerHTML = '<p>Submission cost: <strong>5,000 credits ($50.00)</strong> for first listing, <strong>100 credits ($1.00)</strong> for updates.</p>';
-    fetch('/api/credits').then(function (r) { return r.json(); }).then(function (d) {
-      if (d.balance != null && isFinite(d.balance)) {
-        costEl.innerHTML += '<p style="margin-top:8px">Your balance: <strong>' + d.balance.toFixed(2) + ' credits</strong></p>';
-      }
-    }).catch(function () {});
-    document.getElementById('pub-build-output').style.display = 'none';
-    document.getElementById('pub-build-output').textContent = '';
-    document.getElementById('pub-submit-progress').innerHTML = '';
-  }
-
-  function startBuildAndSubmit() {
-    pubNext.style.display = 'none';
-    pubBack.style.display = 'none';
-    var outputEl = document.getElementById('pub-build-output');
-    var progressEl = document.getElementById('pub-submit-progress');
-    outputEl.style.display = 'block';
-    outputEl.textContent = '';
-    progressEl.innerHTML = '<div class="pub-phase active" id="phase-build">Building...</div>' +
-      '<div class="pub-phase" id="phase-package">Packaging...</div>' +
-      '<div class="pub-phase" id="phase-submit">Uploading & submitting...</div>';
-
-    // SSE build
-    fetch('/api/publish/build', { method: 'POST' })
-      .then(function (response) {
-        var reader = response.body.getReader();
-        var decoder = new TextDecoder();
-        var buffer = '';
-
-        function pump() {
-          return reader.read().then(function (chunk) {
-            if (chunk.done) return;
-            buffer += decoder.decode(chunk.value, { stream: true });
-            var lines = buffer.split('\n');
-            buffer = lines.pop() || '';
-            for (var i = 0; i < lines.length; i++) {
-              if (lines[i].indexOf('data: ') !== 0) continue;
-              try {
-                var parsed = JSON.parse(lines[i].slice(6));
-                if (parsed.line) {
-                  outputEl.textContent += parsed.line + '\n';
-                  outputEl.scrollTop = outputEl.scrollHeight;
-                }
-                if (parsed.done) {
-                  if (parsed.code !== 0) throw new Error('Build failed (exit code ' + parsed.code + ')');
-                  document.getElementById('phase-build').className = 'pub-phase done';
-                  document.getElementById('phase-build').textContent = 'Build complete';
-                  return doPackageAndSubmit();
-                }
-              } catch (e) {
-                if (e instanceof SyntaxError) continue;
-                throw e;
-              }
-            }
-            return pump();
-          });
-        }
-        return pump();
-      })
-      .catch(function (err) {
-        document.getElementById('phase-build').className = 'pub-phase error';
-        document.getElementById('phase-build').textContent = 'Build failed: ' + err.message;
-        pubBack.style.display = 'inline-block';
-      });
-  }
-
-  function doPackageAndSubmit() {
-    var progressPhase = document.getElementById('phase-package');
-    progressPhase.className = 'pub-phase active';
-
-    return fetch('/api/publish/package', { method: 'POST' })
-      .then(function (r) {
-        if (!r.ok) return r.json().then(function (e) { throw new Error(e.error); });
-        return r.json();
-      })
-      .then(function (data) {
-        progressPhase.className = 'pub-phase done';
-        progressPhase.textContent = 'Packaged (' + Math.round(data.sizeBytes / 1024) + ' KB)';
-        document.getElementById('phase-submit').className = 'pub-phase active';
-
-        return fetch('/api/publish/submit', {
-          method: 'POST',
-          headers: { 'Content-Type': 'application/json' },
-          body: JSON.stringify({}),
-        });
-      })
-      .then(function (r) {
-        if (!r.ok) return r.json().then(function (e) { throw new Error(e.error); });
-        return r.json();
-      })
-      .then(function (data) {
-        document.getElementById('phase-submit').className = 'pub-phase done';
-        document.getElementById('phase-submit').textContent = 'Submitted for review';
-        pubSubmissionId = data.submissionId;
-        logMessage('info', 'Submitted: ' + pubSubmissionId);
-        setTimeout(function () { showPublishStep(4); startStatusPolling(); }, 1000);
-      })
-      .catch(function (err) {
-        var active = document.querySelector('.pub-phase.active');
-        if (active) { active.className = 'pub-phase error'; active.textContent += ' — ' + err.message; }
-        pubBack.style.display = 'inline-block';
-      });
-  }
-
-  function startStatusPolling() {
-    if (pubPollTimer) clearInterval(pubPollTimer);
-    document.getElementById('pub-review-status').style.display = 'block';
-    document.getElementById('pub-review-result').style.display = 'none';
-
-    pubPollTimer = setInterval(function () {
-      fetch('/api/publish/status/' + pubSubmissionId)
-        .then(function (r) { return r.json(); })
-        .then(function (data) {
-          var sub = data.submission || data;
-          var status = sub.status;
-          var statusEl = document.getElementById('pub-review-status');
-
-          if (status === 'reviewing') {
-            statusEl.innerHTML = '<div class="status-spinner"></div><p>AI is reviewing your plugin...</p>';
-          } else if (status === 'building') {
-            statusEl.innerHTML = '<div class="status-spinner"></div><p>Building your plugin...</p>';
-          } else if (status === 'published') {
-            clearInterval(pubPollTimer);
-            pubPollTimer = null;
-            statusEl.style.display = 'none';
-            document.getElementById('pub-review-result').style.display = 'block';
-            document.getElementById('pub-review-result').innerHTML =
-              '<div class="pub-congrats">Published!</div>' +
-              '<p style="text-align:center;color:#a1a1aa;font-size:13px">Your plugin is now live on the Fias marketplace.</p>';
-            logMessage('info', 'Plugin published!');
-          } else if (status === 'rejected') {
-            clearInterval(pubPollTimer);
-            pubPollTimer = null;
-            statusEl.style.display = 'none';
-            document.getElementById('pub-review-result').style.display = 'block';
-            var html = '<div class="pub-rejected">Submission Rejected</div>';
-            if (sub.errorMessage) html += '<p style="color:#a1a1aa;font-size:12px;margin-bottom:8px">' + escapeHtml(sub.errorMessage) + '</p>';
-            if (data.review) {
-              html += '<p style="color:#6b7280;font-size:11px">Risk score: ' + (data.review.riskScore || 'N/A') + '</p>';
-            }
-            document.getElementById('pub-review-result').innerHTML = html;
-          }
-        })
-        .catch(function () {});
-    }, 3000);
-  }
-
-  // ────────────────────────────────────────────────────────────────
-  // Iframe Init
-  // ────────────────────────────────────────────────────────────────
-
-  iframe.addEventListener('load', function () {
-    if (!cachedConfig) return;
-
-    sendToPlugin({
-      type: 'init',
-      messageId: 'init_0',
-      payload: {
-        archId: 'dev_harness',
-        permissions: cachedConfig.permissions,
-        theme: getTheme(),
-        currentPath: '/',
-      },
-    });
-    logMessage('send', 'init');
-  });
-
-  // ────────────────────────────────────────────────────────────────
-  // Helpers
-  // ────────────────────────────────────────────────────────────────
-
-  function updateModeBadge() {
-    var opposite = currentMode === 'live' ? 'Mock' : 'Live';
-    modeBadge.textContent = currentMode.toUpperCase();
-    modeBadge.className = 'mode-badge ' + (currentMode === 'live' ? 'mode-live' : 'mode-mock');
-    modeToggle.textContent = 'Switch to ' + opposite;
-  }
-
-  function updateThemeBadge() {
-    themeBadge.textContent = currentTheme.toUpperCase();
-    themeBadge.className = 'theme-badge theme-' + currentTheme;
-    document.body.style.background = currentTheme === 'light' ? '#ffffff' : '#0a0a0a';
-
-    // Update toolbar to match theme
-    var toolbar = document.querySelector('.toolbar');
-    var logo = document.querySelector('.logo');
-    var icons = document.querySelectorAll('.btn-icon');
-    var env = document.getElementById('env-selector');
-    if (currentTheme === 'light') {
-      if (toolbar) { toolbar.style.background = '#f5f5f5'; toolbar.style.borderBottomColor = '#e5e5e5'; }
-      if (logo) { logo.style.color = '#171717'; }
-      if (env) { env.style.background = '#e5e5e5'; env.style.color = '#171717'; env.style.borderColor = '#d4d4d4'; }
-      icons.forEach(function (btn) { btn.style.background = '#e5e5e5'; btn.style.color = '#171717'; btn.style.borderColor = '#d4d4d4'; });
-    } else {
-      if (toolbar) { toolbar.style.background = '#18181b'; toolbar.style.borderBottomColor = '#3f3f46'; }
-      if (logo) { logo.style.color = '#e4e4e7'; }
-      if (env) { env.style.background = '#27272a'; env.style.color = '#a1a1aa'; env.style.borderColor = '#3f3f46'; }
-      icons.forEach(function (btn) { btn.style.background = '#27272a'; btn.style.color = '#e4e4e7'; btn.style.borderColor = '#3f3f46'; });
-    }
-  }
-
-  function sendToPlugin(message) {
-    iframe.contentWindow && iframe.contentWindow.postMessage(message, '*');
-  }
-
-  function checkRateLimit(type) {
-    var limit = RATE_LIMITS[type];
-    if (!limit) return;
-
-    var now = Date.now();
-    var bucket = rateBuckets[type];
-
-    if (!bucket || now - bucket.windowStart > 60000) {
-      rateBuckets[type] = { count: 1, windowStart: now };
-      return;
-    }
-
-    if (bucket.count >= limit.maxPerMinute) {
-      throw new Error(
-        'Rate limit exceeded for ' + type + ': max ' + limit.maxPerMinute + '/minute',
-      );
-    }
-
-    bucket.count++;
-  }
-
-  var SYSTEM_FONTS = '-apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif';
-  var MONO_FONTS = '"SFMono-Regular", Consolas, "Liberation Mono", Menlo, monospace';
-  var SPACING = { xs: '4px', sm: '8px', md: '16px', lg: '24px', xl: '32px' };
-  var FONTS = { body: SYSTEM_FONTS, heading: SYSTEM_FONTS, mono: MONO_FONTS };
-
-  var COMPONENTS = {
-    borderRadius: '0.5rem',
-    buttonRadius: '0.375rem',
-    cardRadius: '0.5rem',
-    inputRadius: '0.375rem',
-    shadowSm: '0 1px 2px 0 rgba(0, 0, 0, 0.05)',
-    shadowMd: '0 4px 6px -1px rgba(0, 0, 0, 0.1), 0 2px 4px -2px rgba(0, 0, 0, 0.1)',
-    shadowLg: '0 10px 15px -3px rgba(0, 0, 0, 0.1), 0 4px 6px -4px rgba(0, 0, 0, 0.1)',
-    borderWidth: '1px',
-  };
-
-  function getTheme() {
-    if (currentTheme === 'light') {
-      return {
-        mode: 'light',
-        colors: {
-          primary: '#171717', primaryText: '#ffffff',
-          secondary: '#e5e5e5', accent: '#2563eb',
-          background: '#ffffff', surface: '#fafafa',
-          card: '#ffffff', cardText: '#0a0a0a',
-          text: '#0a0a0a', textSecondary: '#737373',
-          muted: '#f5f5f5', mutedText: '#a3a3a3',
-          border: '#e5e5e5',
-          error: '#dc2626', warning: '#d97706', success: '#16a34a', info: '#2563eb',
-        },
-        spacing: SPACING,
-        fonts: FONTS,
-        components: COMPONENTS,
-      };
-    }
-    return {
-      mode: 'dark',
-      colors: {
-        primary: '#ffffff', primaryText: '#0a0a0a',
-        secondary: '#1f1f1f', accent: '#3b82f6',
-        background: '#0a0a0a', surface: '#171717',
-        card: '#141414', cardText: '#ffffff',
-        text: '#ffffff', textSecondary: '#a6a6a6',
-        muted: '#1e1e1e', mutedText: '#737373',
-        border: '#2e2e2e',
-        error: '#ef4444', warning: '#f59e0b', success: '#22c55e', info: '#3b82f6',
-      },
-      spacing: SPACING,
-      fonts: FONTS,
-      components: COMPONENTS,
-    };
-  }
-
-  function fetchConfig() {
-    return fetch('/api/config').then(function (r) {
-      return r.json();
-    });
-  }
-
-  function fetchCredits() {
-    fetch('/api/credits')
-      .then(function (r) {
-        return r.json();
-      })
-      .then(function (data) {
-        if (data.balance !== undefined && data.balance !== null && isFinite(data.balance)) {
-          creditBalance.textContent = 'Credits: ' + data.balance.toFixed(2);
-        }
-      })
-      .catch(function () {});
-  }
-
-  function logMessage(direction, type, payload) {
-    messageCount++;
-    consoleCount.textContent = messageCount + ' messages';
-
-    var entry = document.createElement('div');
-    entry.className = 'log-entry';
-
-    var time = new Date().toLocaleTimeString();
-    var cls = 'log-info';
-    if (direction === 'error') cls = 'log-error';
-    if (direction === 'warn' || direction === 'cost') cls = 'log-warn';
-    if (direction === 'toast') cls = 'log-warn';
-
-    var text = '<span class="log-time">' + escapeHtml(time) + '</span>';
-    text +=
-      '<span class="' +
-      cls +
-      '">[' +
-      escapeHtml(direction.toUpperCase()) +
-      '] ' +
-      escapeHtml(String(type)) +
-      '</span>';
-    if (payload && typeof payload === 'object') {
-      text +=
-        ' <span style="color:#6b7280">' +
-        escapeHtml(JSON.stringify(payload).substring(0, 120)) +
-        '</span>';
-    }
-
-    entry.innerHTML = text;
-    consoleBody.appendChild(entry);
-    consoleBody.scrollTop = consoleBody.scrollHeight;
-  }
-
-  function escapeHtml(str) {
-    var div = document.createElement('div');
-    div.appendChild(document.createTextNode(str));
-    return div.innerHTML;
-  }
-
-  function checkPluginReachable(url, callback) {
-    var done = false;
-
-    fetch('/api/check-plugin')
-      .then(function (r) { return r.json(); })
-      .then(function (data) {
-        if (!done) {
-          done = true;
-          callback(data.reachable);
-        }
-      })
-      .catch(function () {
-        if (!done) {
-          done = true;
-          callback(true);
-        }
-      });
-
-    setTimeout(function () {
-      if (!done) {
-        done = true;
-        callback(false);
-      }
-    }, 5000);
-  }
-
-  function showPluginError(url) {
-    pluginStatus.classList.add('error');
-    pluginStatus.innerHTML =
-      '<p><strong>Plugin server not reachable</strong></p>' +
-      '<p>The harness cannot connect to your plugin at<br/><code>' + escapeHtml(url) + '</code></p>' +
-      '<p>Make sure your plugin dev server is running:</p>' +
-      '<p><code>npm run dev</code></p>' +
-      '<p style="color:#6b7280;font-size:12px;margin-top:8px;">' +
-      'The harness will automatically retry when you click the reload button (&#8635;).</p>';
-    iframe.classList.add('hidden');
-  }
-})();