@glasshome/widget-cli 0.4.14 → 0.5.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@glasshome/widget-cli",
-  "version": "0.4.14",
+  "version": "0.5.1",
   "description": "CLI for creating and managing GlassHome widgets",
   "type": "module",
   "bin": {
@@ -21,7 +21,8 @@
   },
   "dependencies": {
     "@clack/prompts": "^0.10.0",
-    "@glasshome/widget-sdk": "^0.5.0",
+    "@glasshome/widget-contract": "0.1.0",
+    "@glasshome/widget-sdk": "1.1.0",
     "open": "^11.0.0",
     "semver": "^7.6.0",
     "vite-plugin-solid": "^2.11.0"

package/src/commands/connect.ts

@@ -52,8 +52,28 @@ async function uploadAndRegister(
     throw new Error(`Failed to upload bundle for ${slug}: HTTP ${uploadRes.status}`);
   }
 
+  // Widgets render in shadow roots and need their own stylesheet uploaded
+  // alongside the bundle.
+  const cssPath = resolve(distDir, `${slug}.css`);
+  let cssUrl: string | undefined;
+  if (existsSync(cssPath)) {
+    const cssRes = await fetch(`${api}/bundles/local/local/${slug}`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "text/css",
+        Authorization: `Bearer ${token}`,
+      },
+      body: readFileSync(cssPath, "utf-8"),
+    });
+    if (!cssRes.ok) {
+      throw new Error(`Failed to upload stylesheet for ${slug}: HTTP ${cssRes.status}`);
+    }
+    cssUrl = `/bundles/local/local/${slug}/bundle.css`;
+  }
+
   const manifest = { ...widget };
   delete (manifest as Record<string, unknown>).bundleUrl;
+  delete (manifest as Record<string, unknown>).cssUrl;
 
   await trpcMutate({
     apiUrl: api,
@@ -64,6 +84,7 @@ async function uploadAndRegister(
       name: slug,
       version: widget.version,
       bundleUrl: `/bundles/local/local/${slug}/bundle.js`,
+      ...(cssUrl ? { cssUrl } : {}),
       manifestJson: JSON.stringify(manifest),
     },
   });
@@ -94,7 +115,13 @@ export async function runConnect(
 ): Promise<void> {
   const distDir = resolve(cwd, "dist");
   const solid = (await import("vite-plugin-solid")).default;
-  const buildOpts = { srcDir: "src", outDir: "dist", plugins: [solid()] };
+  // delegateEvents: false — widgets run in closed shadow roots where Solid's
+  // document-level event delegation cannot see the target.
+  const buildOpts = {
+    srcDir: "src",
+    outDir: "dist",
+    plugins: [solid({ solid: { delegateEvents: false } })],
+  };
 
   // Step 1: Initial build
   const s = spinner();

package/src/commands/publish.ts

@@ -1,5 +1,5 @@
 import { createHash } from "node:crypto";
-import { readFileSync } from "node:fs";
+import { existsSync, readFileSync } from "node:fs";
 import { resolve } from "node:path";
 import { cancel, isCancel, log, select, spinner } from "@clack/prompts";
 import semver from "semver";
@@ -192,6 +192,17 @@ export async function runPublish(
 
   const sha256Hash = createHash("sha256").update(bundleBuffer).digest("hex");
 
+  // Optional stylesheet emitted next to the bundle; published alongside it
+  // so the Hub can serve and integrity-check both.
+  const cssPath = resolve(cwd, "dist", `${widgetName}.css`);
+  let cssBuffer: Buffer | null = null;
+  if (existsSync(cssPath)) {
+    cssBuffer = Buffer.from(readFileSync(cssPath));
+  }
+  const cssSha256Hash = cssBuffer
+    ? createHash("sha256").update(cssBuffer).digest("hex")
+    : undefined;
+
   s.start(`Publishing ${manifest.name}@${version}...`);
 
   let publishData: Awaited<ReturnType<typeof requestPublish>>;
@@ -208,6 +219,9 @@ export async function runPublish(
       version,
       bundleSize: bundleBuffer.byteLength,
       sha256Hash,
+      ...(cssBuffer && cssSha256Hash
+        ? { cssSize: cssBuffer.byteLength, cssSha256Hash }
+        : {}),
       manifestJson: JSON.stringify(manifest),
     });
   } catch (err: any) {
@@ -227,11 +241,28 @@ export async function runPublish(
     process.exit(1);
   }
 
+  if (cssBuffer) {
+    if (!publishData.cssUploadUrl) {
+      s.stop(
+        `dist/${widgetName}.css exists but the Hub did not return a css upload URL — update the Hub or remove the stylesheet`,
+      );
+      process.exit(1);
+    }
+    s.message(`Uploading ${manifest.name} styles to CDN...`);
+    try {
+      await uploadToR2(publishData.cssUploadUrl, cssBuffer, "text/css");
+    } catch (err: any) {
+      s.stop(`CSS upload failed: ${err.message}`);
+      process.exit(1);
+    }
+  }
+
   s.message(`Confirming ${manifest.name}...`);
   try {
     const result = await confirmPublish(hubUrl, token!, publishData.versionId);
     s.stop(`Published ${manifest.name}@${version}`);
     log.info(`CDN: ${result.bundleUrl}`);
+    if (result.cssUrl) log.info(`CSS: ${result.cssUrl}`);
   } catch (err: any) {
     s.stop(`Confirmation failed: ${err.message}`);
     process.exit(1);

package/src/commands/validate.ts

@@ -1,6 +1,11 @@
 import { existsSync } from "node:fs";
 import { resolve } from "node:path";
 import { log, spinner } from "@clack/prompts";
+import {
+  formatSchemaError,
+  publishManifestSchema,
+  requiresCapabilities,
+} from "@glasshome/widget-contract";
 import {
   discoverWidgets,
   formatBytes,
@@ -28,9 +33,17 @@ function validateManifest(manifest: WidgetManifest): ValidationResult {
     typeof manifest.maxSize.w === "number" &&
     typeof manifest.maxSize.h === "number";
 
-  // Required fields
-  if (!manifest.name) errors.push("Missing required field: name");
-  if (!manifest.sdkVersion) errors.push("Missing required field: sdkVersion");
+  // Canonical publish-time validation shared with the Hub.
+  const schemaResult = publishManifestSchema.safeParse(manifest);
+  if (!schemaResult.success) {
+    errors.push(`Manifest schema: ${formatSchemaError(schemaResult.error)}`);
+    const capabilities = (manifest as { capabilities?: unknown }).capabilities;
+    if (manifest.sdkVersion && requiresCapabilities(manifest.sdkVersion) && capabilities === undefined) {
+      errors.push(
+        `sdkVersion "${manifest.sdkVersion}" only admits SDK >= 1.0.0, so manifest.json must declare "capabilities" — use [] if the widget never reads or controls Home Assistant`,
+      );
+    }
+  }
 
   // INS-05: "*" sdkVersion is rejected at publish time — authors must declare
   // a real range (e.g. "^0.3.0"). Installed widgets that already ship "*" are
@@ -42,13 +55,7 @@ function validateManifest(manifest: WidgetManifest): ValidationResult {
     );
   }
 
-  // Size validation
-  if (!hasValidMinSize) {
-    errors.push("minSize must be an object with numeric w and h properties");
-  }
-  if (!hasValidMaxSize) {
-    errors.push("maxSize must be an object with numeric w and h properties");
-  }
+  // Size validation (cross-field checks the schema does not cover)
   if (
     manifest.defaultSize &&
     (typeof manifest.defaultSize.w !== "number" || typeof manifest.defaultSize.h !== "number")

package/src/utils/hub-api.ts

@@ -29,6 +29,8 @@ interface PublishRequestParams {
   version: string;
   bundleSize: number;
   sha256Hash: string;
+  cssSize?: number;
+  cssSha256Hash?: string;
   manifestJson: string;
 }
 
@@ -37,11 +39,14 @@ interface PublishRequestResponse {
   cdnUrl: string;
   widgetId: string;
   versionId: string;
+  cssUploadUrl?: string;
+  cssUrl?: string;
 }
 
 interface PublishConfirmResponse {
   success: boolean;
   bundleUrl: string;
+  cssUrl?: string;
 }
 
 export async function requestPublish(
@@ -107,10 +112,14 @@ export async function confirmPublish(
   return res.json() as Promise<PublishConfirmResponse>;
 }
 
-export async function uploadToR2(uploadUrl: string, bundleBuffer: Uint8Array): Promise<void> {
+export async function uploadToR2(
+  uploadUrl: string,
+  bundleBuffer: Uint8Array,
+  contentType: string = "application/javascript",
+): Promise<void> {
   const res = await fetch(uploadUrl, {
     method: "PUT",
-    headers: { "Content-Type": "application/javascript" },
+    headers: { "Content-Type": contentType },
     body: bundleBuffer as unknown as BodyInit,
   });