@hitch42/applet 0.1.1-beta.16 → 0.1.1-beta.18

package/dist/_internal/client.js

@@ -1,5 +1,5 @@
 import { i as openCacheDatabase, n as clearAppletQueryCaches, o as sweepExpiredQueryCaches, r as indexedDbPersister, t as cacheTabId } from "../query-cache-CXmAyLv3.js";
-import { QueryClientProvider } from "@tanstack/react-query";
+import { QueryClientProvider, useIsRestoring } from "@tanstack/react-query";
 import { PersistQueryClientProvider } from "@tanstack/react-query-persist-client";
 import { RouterProvider } from "@tanstack/react-router";
 import { createElement, useEffect } from "react";
@@ -130,6 +130,9 @@ async function appletQueryPersistence(appletCode) {
 		return;
 	}
 }
+function RestoredRouter({ router }) {
+	return useIsRestoring() ? null : createElement(RouterProvider, { router });
+}
 function mountApplet(router, appletCode) {
 	const queryClient = router.options.context.queryClient;
 	if (!queryClient) throw new Error("getRouter must provide a QueryClient via createRouter({ context: { queryClient } }).");
@@ -159,7 +162,7 @@ function mountApplet(router, appletCode) {
 				console.error("Could not restore the applet query cache.");
 				sweepWhenIdle();
 			}
-		}, applet) : createElement(QueryClientProvider, { client: queryClient }, applet));
+		}, createElement(RestoredRouter, { router })) : createElement(QueryClientProvider, { client: queryClient }, applet));
 	}).catch((error) => {
 		console.error("Could not initialize the applet query cache.", error);
 		createRoot(root).render(createElement(QueryClientProvider, { client: queryClient }, applet));

package/dist/_internal/log-context.d.ts

@@ -19,8 +19,6 @@ declare function cloudflareRequestFields(request: Request): {
   cfRay: string | undefined;
   traceparent: string | undefined;
   colo: string | undefined;
-  country: string | undefined;
-  asn: number | undefined;
 };
 type NoteLog = {
   set(fields: Record<string, unknown>): void;

package/dist/_internal/log-context.js

@@ -1,2 +1,2 @@
-import { a as errorNote, c as requestIdFrom, i as createNoteLog, n as REQUEST_CONTEXT_CHANNEL, o as isUuid, r as cloudflareRequestFields, s as publishNote, t as APP_CONTEXT_CHANNEL } from "../log-context-zu8U9Sjm.js";
+import { a as errorNote, c as requestIdFrom, i as createNoteLog, n as REQUEST_CONTEXT_CHANNEL, o as isUuid, r as cloudflareRequestFields, s as publishNote, t as APP_CONTEXT_CHANNEL } from "../log-context-DWznGjfz.js";
 export { APP_CONTEXT_CHANNEL, REQUEST_CONTEXT_CHANNEL, cloudflareRequestFields, createNoteLog, errorNote, isUuid, publishNote, requestIdFrom };

package/dist/_internal/server.js

@@ -1,6 +1,6 @@
-import { a as HITCH_ORG_CODE_HEADER, c as HITCH_SCHEDULE_HEADER, d as HITCH_USER_HEADER, f as HITCH_WORKFLOW_HEADER, i as HITCH_ORGANIZATION_HEADER, l as HITCH_SCHEDULE_RUN_HEADER, m as HITCH_WORKFLOW_RUN_HEADER, n as HITCH_APPLET_HEADER, o as HITCH_RELEASE_HEADER, p as HITCH_WORKFLOW_INVOCATION_HEADER, r as HITCH_APPLET_TOKEN_HEADER, u as HITCH_SESSION_HEADER } from "../headers-DkNr9MLJ.js";
+import { a as HITCH_ORG_CODE_HEADER, d as HITCH_SESSION_HEADER, f as HITCH_USER_HEADER, h as HITCH_WORKFLOW_RUN_HEADER, i as HITCH_ORGANIZATION_HEADER, l as HITCH_SCHEDULE_HEADER, m as HITCH_WORKFLOW_INVOCATION_HEADER, n as HITCH_APPLET_HEADER, o as HITCH_PUBLIC_HEADER, p as HITCH_WORKFLOW_HEADER, r as HITCH_APPLET_TOKEN_HEADER, s as HITCH_RELEASE_HEADER, u as HITCH_SCHEDULE_RUN_HEADER } from "../headers-CeRX-Xji.js";
 import { a as getRequestContext, o as runWithRequestContext, r as toMilliseconds, t as MAX_DURATION_MS } from "../workflow-CTo2kZF1.js";
-import { a as errorNote, c as requestIdFrom, i as createNoteLog, r as cloudflareRequestFields, s as publishNote, t as APP_CONTEXT_CHANNEL } from "../log-context-zu8U9Sjm.js";
+import { a as errorNote, c as requestIdFrom, i as createNoteLog, r as cloudflareRequestFields, s as publishNote, t as APP_CONTEXT_CHANNEL } from "../log-context-DWznGjfz.js";
 import { a as workflowOutcomeSchema, i as workflowInvocationRequestSchema, n as runWorkflowJournal, r as journalEntrySchema, t as WorkflowFailedError } from "../workflow-engine-BOTzURKM.js";
 import { RPCHandler } from "@orpc/server/fetch";
 import { z } from "zod";
@@ -174,11 +174,12 @@ function createWorkerEntry(server, options) {
 			} : appletId !== null && token !== null ? {
 				kind: "applet",
 				appletId,
-				token
+				token,
+				public: request.headers.get(HITCH_PUBLIC_HEADER) === "1"
 			} : void 0;
 			if (identity === void 0) return jsonError(401, "missing_identity");
 			log.set({
-				callerType: identity.kind,
+				callerType: identity.kind === "applet" && identity.public ? "public" : identity.kind,
 				callerId: identity.kind === "user" ? `user:${identity.userId}` : `applet:${identity.appletId}`
 			});
 			const bindings = typeof env === "object" && env !== null ? env : {};
@@ -202,6 +203,7 @@ function createWorkerEntry(server, options) {
 				requestId
 			}, async () => {
 				const pathname = new URL(request.url).pathname;
+				if (pathname.startsWith("/api/__hitch/") && identity.kind === "applet" && identity.public) return jsonError(403, "platform_identity_required");
 				if (pathname === "/api/__hitch/telephony/message-received" && request.method === "POST") {
 					log.set({ route: "/api/__hitch/telephony/message-received" });
 					if (identity.kind !== "applet") return jsonError(403, "applet_identity_required");

package/dist/applet.js

@@ -99,23 +99,23 @@ async function main() {
 	const noLogFlags = values.run === void 0 && values.filter === void 0 && values.level === void 0 && values.limit === void 0 && values.live === void 0 && values.search === void 0 && values.since === void 0;
 	const noModeFlags = values["client-only"] === void 0 && values["server-only"] === void 0;
 	if (positionals.length === 1 && positionals[0] === "bootstrap" && noModeFlags && noGitFlags && noVariableFlags && noLogFlags) {
-		await (await import("./init-BGQ_bP44.js")).runBootstrap({ install: values["no-install"] !== true });
+		await (await import("./init-DT0faD-q.js")).runBootstrap({ install: values["no-install"] !== true });
 		return;
 	}
 	if (positionals.length === 1 && positionals[0] === "generate" && values["no-install"] === void 0 && noModeFlags && noGitFlags && noVariableFlags && noLogFlags) {
-		await (await import("./generate-C9bWqdaB.js")).runGenerate();
+		await (await import("./generate-Df29-UJm.js")).runGenerate();
 		return;
 	}
 	if (positionals.length === 1 && positionals[0] === "build" && values["no-install"] === void 0 && noModeFlags && noGitFlags && noVariableFlags && noLogFlags) {
-		await (await import("./build-ueR7XjZT.js")).runBuild();
+		await (await import("./build-DpkWOvd2.js")).runBuild();
 		return;
 	}
 	if (positionals.length === 1 && positionals[0] === "deploy" && values["no-install"] === void 0 && noModeFlags && noGitFlags && noVariableFlags && noLogFlags) {
-		await (await import("./deploy-C5JDIn2Y.js")).runDeploy({});
+		await (await import("./deploy-DODTE8ri.js")).runDeploy({});
 		return;
 	}
 	if (positionals.length === 2 && positionals[0] === "init" && noModeFlags && noVariableFlags && noLogFlags) {
-		await (await import("./init-BGQ_bP44.js")).runInit(positionals[1], {
+		await (await import("./init-DT0faD-q.js")).runInit(positionals[1], {
 			commit: values["no-commit"] !== true,
 			git: values["no-git"] !== true,
 			install: values["no-install"] !== true
@@ -123,7 +123,7 @@ async function main() {
 		return;
 	}
 	if (positionals.length === 2 && positionals[0] === "new" && noGitFlags && noVariableFlags && noLogFlags) {
-		await (await import("./init-BGQ_bP44.js")).runNew({
+		await (await import("./init-DT0faD-q.js")).runNew({
 			code: positionals[1],
 			clientOnly: values["client-only"],
 			install: values["no-install"] !== true,
@@ -132,7 +132,7 @@ async function main() {
 		return;
 	}
 	if ((positionals.length === 1 || positionals.length === 2) && positionals[0] === "logs" && values["no-install"] === void 0 && noModeFlags && noGitFlags && noVariableFlags) {
-		await (await import("./logs-DOkT5ots.js")).runLogs({
+		await (await import("./logs-CEIikWzV.js")).runLogs({
 			code: positionals[1],
 			filter: values.filter,
 			run: values.run,
@@ -145,14 +145,14 @@ async function main() {
 		return;
 	}
 	if (positionals.length === 3 && positionals[0] === "schedules" && positionals[1] === "run" && values["no-install"] === void 0 && noModeFlags && noGitFlags && noLogFlags && values.secret === void 0) {
-		await (await import("./schedules-D6-3v-Az.js")).runSchedule({
+		await (await import("./schedules-B7xNl9oy.js")).runSchedule({
 			code: positionals[2],
 			yes: values.yes
 		});
 		return;
 	}
 	if ((positionals.length === 3 || positionals.length === 4) && positionals[0] === "variables" && positionals[1] === "set" && values["no-install"] === void 0 && noModeFlags && noGitFlags && noLogFlags) {
-		await (await import("./variables-BSFZnLxY.js")).runVariablesSet({
+		await (await import("./variables-DCbLJBr0.js")).runVariablesSet({
 			key: positionals[2],
 			secret: values.secret,
 			value: positionals[3],
@@ -161,11 +161,11 @@ async function main() {
 		return;
 	}
 	if (positionals.length === 2 && positionals[0] === "variables" && positionals[1] === "list" && values["no-install"] === void 0 && noModeFlags && noGitFlags && noVariableFlags && noLogFlags) {
-		await (await import("./variables-BSFZnLxY.js")).runVariablesList();
+		await (await import("./variables-DCbLJBr0.js")).runVariablesList();
 		return;
 	}
 	if (positionals.length === 3 && positionals[0] === "variables" && positionals[1] === "delete" && values["no-install"] === void 0 && noModeFlags && noGitFlags && values.secret === void 0 && noLogFlags) {
-		await (await import("./variables-BSFZnLxY.js")).runVariablesDelete({
+		await (await import("./variables-DCbLJBr0.js")).runVariablesDelete({
 			key: positionals[2],
 			yes: values.yes
 		});

package/dist/{lazy-client-x0DCI98S.js → batch-_ZjAg-Kk.js}

@@ -48,17 +48,4 @@ function withBatchRecorder(target, contract) {
 	} });
 }
 //#endregion
-//#region src/lazy-client.ts
-function createLazyClientProxy(build) {
-	let client;
-	const at = (path) => new Proxy(() => void 0, {
-		get: (_target, property) => at([...path, property]),
-		apply: (_target, _thisArg, args) => {
-			client ??= build();
-			return path.reduce((value, property) => value[property], client)(...args);
-		}
-	});
-	return at([]);
-}
-//#endregion
-export { withBatchRecorder as n, createLazyClientProxy as t };
+export { withBatchRecorder as t };

package/dist/{build-XHoa_sJL.js → build-DkKTiIu7.js}

@@ -1,4 +1,4 @@
-import { i as prepareAppletProjects, r as prepareAppletProject } from "./project-CCVqCCgU.js";
+import { i as prepareAppletProjects, r as prepareAppletProject } from "./project-CWVwic2C.js";
 import { rm } from "node:fs/promises";
 import { resolve } from "node:path";
 import { spawn } from "node:child_process";

package/dist/build-DpkWOvd2.js

@@ -0,0 +1,2 @@
+import { i as runBuild } from "./build-DkKTiIu7.js";
+export { runBuild };

package/dist/client/hitch/client.d.ts

@@ -0,0 +1,2 @@
+import { t as hitch } from "../../hitch-client--qZVa2KM.js";
+export { hitch };

package/dist/client/hitch/client.js

@@ -0,0 +1,2 @@
+import { t as hitch } from "../../hitch-client-Cw-WZ_8v.js";
+export { hitch };

package/dist/client/hitch/phone.d.ts

@@ -0,0 +1,2 @@
+import { t as usePhone } from "../../use-phone-M7c_HsB7.js";
+export { usePhone };

package/dist/client/hitch/phone.js

@@ -0,0 +1,2 @@
+import { t as usePhone } from "../../use-phone-ug4B5gQp.js";
+export { usePhone };

package/dist/client/hitch.d.ts

@@ -0,0 +1,3 @@
+import { t as hitch } from "../hitch-client--qZVa2KM.js";
+import { i as createPhone, n as Phone, r as PhoneState, t as usePhone } from "../use-phone-M7c_HsB7.js";
+export { type Phone, type PhoneState, createPhone, hitch, usePhone };

package/dist/client/hitch.js

@@ -0,0 +1,3 @@
+import { t as hitch } from "../hitch-client-Cw-WZ_8v.js";
+import { n as createPhone, t as usePhone } from "../use-phone-ug4B5gQp.js";
+export { createPhone, hitch, usePhone };

package/dist/{react → client/react}/markdown-editor.d.ts

@@ -1,2 +1,2 @@
-import { n as MarkdownEditorProps, r as MarkdownEditorFiles, t as MarkdownEditor } from "../markdown-editor-BmEaBzd7.js";
+import { n as MarkdownEditorProps, r as MarkdownEditorFiles, t as MarkdownEditor } from "../../markdown-editor-BmEaBzd7.js";
 export { MarkdownEditor, type MarkdownEditorFiles, MarkdownEditorProps };

package/dist/client/react/markdown-editor.js

@@ -0,0 +1,2 @@
+import { t as MarkdownEditor } from "../../markdown-editor-C5mLHGqu.js";
+export { MarkdownEditor };

package/dist/client/react/markdown.d.ts

@@ -0,0 +1,2 @@
+import { n as MarkdownFiles, r as MarkdownProps, t as Markdown } from "../../markdown-DSHOQIOb.js";
+export { Markdown, MarkdownFiles, MarkdownProps };

package/dist/client/react/markdown.js

@@ -0,0 +1,2 @@
+import { t as Markdown } from "../../markdown-CwlqzBtP.js";
+export { Markdown };

package/dist/{react.d.ts → client/react.d.ts}

@@ -1,3 +1,3 @@
-import { n as MarkdownFiles, r as MarkdownProps, t as Markdown } from "./markdown-DSHOQIOb.js";
-import { n as MarkdownEditorProps, r as MarkdownEditorFiles, t as MarkdownEditor } from "./markdown-editor-BmEaBzd7.js";
+import { n as MarkdownFiles, r as MarkdownProps, t as Markdown } from "../markdown-DSHOQIOb.js";
+import { n as MarkdownEditorProps, r as MarkdownEditorFiles, t as MarkdownEditor } from "../markdown-editor-BmEaBzd7.js";
 export { Markdown, MarkdownEditor, type MarkdownEditorFiles, type MarkdownEditorProps, type MarkdownFiles, type MarkdownProps };

package/dist/client/react.js

@@ -0,0 +1,3 @@
+import { t as Markdown } from "../markdown-CwlqzBtP.js";
+import { t as MarkdownEditor } from "../markdown-editor-C5mLHGqu.js";
+export { Markdown, MarkdownEditor };

package/dist/client.d.ts

@@ -1,48 +1,7 @@
-import { d as RegisteredRouter, l as RegisteredContract, u as RegisteredManifest } from "./manifest-BSUtHbu-.js";
-import { t as NarrowContract } from "./contract-D9wEvxGI.js";
-import { t as WithBatchRecorder } from "./batch-Qa4B4-Yp.js";
-import { o as WithFilesUpload } from "./upload-D_kkmne_.js";
+import { d as RegisteredRouter } from "./manifest-BBHD_EY9.js";
+import { t as ExactRouterUtils } from "./query-utils-zz9pVjgp.js";
 import { RouterClient } from "@orpc/server";
-import { ContractRouterClient } from "@orpc/contract";
-import { NestedClient } from "@orpc/client";
-import { RouterUtils } from "@orpc/tanstack-query";
-//#region src/query-utils.d.ts
-type Exact<Expected, Actual> = Actual extends symbol ? Actual : Actual extends Expected ? Actual extends readonly unknown[] ? Actual : Actual extends object ? NonNullable<Expected> extends object ? { [Key in keyof Actual]: Key extends keyof NonNullable<Expected> ? Exact<NonNullable<Expected>[Key], Actual[Key]> : never; } : Actual : Actual : never;
-type QueryOptionsFunction<Utils> = Extract<Utils extends {
-  queryOptions: infer Function;
-} ? Function : never, (...args: never[]) => unknown>;
-type QueryOptionsArgument<Utils> = NonNullable<Parameters<QueryOptionsFunction<Utils>>[0]>;
-type ExactOptions<Input, Options> = Options extends {
-  input: infer Actual;
-} ? Options & {
-  input: Exact<Input, Actual>;
-} : Options extends {
-  input?: infer Actual;
-} ? Options & {
-  input?: Exact<Input, Actual>;
-} : Options;
-type QueryOptionsResult<Utils, Options> = Options & Omit<ReturnType<QueryOptionsFunction<Utils>>, keyof Options>;
-type ExactQueryOptions<Utils, Input> = <Options extends QueryOptionsArgument<Utils> = QueryOptionsArgument<Utils>>(...rest: undefined extends Input ? [options?: ExactOptions<Input, Options>] : [options: ExactOptions<Input, Options>]) => QueryOptionsResult<Utils, Options>;
-type ClientTree = NestedClient<Record<never, never>>;
-type ExactRouterUtils<Client extends ClientTree> = Client extends ((...args: infer Arguments) => unknown) ? Omit<RouterUtils<Client>, "queryOptions"> & {
-  queryOptions: ExactQueryOptions<RouterUtils<Client>, Arguments[0]>;
-} : Omit<RouterUtils<Client>, keyof Client> & { [Key in keyof Client]: Client[Key] extends ClientTree ? ExactRouterUtils<Client[Key]> : never; };
-//#endregion
 //#region src/author/client.d.ts
-type AuthorContract = NarrowContract<RegisteredContract, RegisteredManifest>;
-type BaseHitchClient = ContractRouterClient<AuthorContract>;
-type AuthorHitchClient = WithBatchRecorder<BaseHitchClient>;
-type BaseHitchUtils = ExactRouterUtils<BaseHitchClient>;
-type AuthorHitchUtils = AuthorHitchClient extends {
-  batch: infer Batch;
-} ? BaseHitchUtils extends {
-  batch: infer BatchUtils;
-} ? Omit<BaseHitchUtils, "batch"> & {
-  batch: Omit<BatchUtils, "call"> & {
-    call: Batch;
-  };
-} : BaseHitchUtils : BaseHitchUtils;
-declare const hitch: WithFilesUpload<AuthorHitchUtils>;
 declare const api: ExactRouterUtils<RouterClient<RegisteredRouter>>;
 //#endregion
-export { api, hitch };
+export { api };

package/dist/client.js

@@ -1,17 +1,7 @@
-import { n as withFilesUpload, r as getRegisteredHitchContract } from "./upload-DRbVhuDm.js";
-import { n as withBatchRecorder, t as createLazyClientProxy } from "./lazy-client-x0DCI98S.js";
+import { t as createLazyClientProxy } from "./lazy-client-CwIzYAoE.js";
 import { createORPCClient } from "@orpc/client";
-import { OpenAPILink } from "@orpc/openapi-client/fetch";
 import { createTanstackQueryUtils } from "@orpc/tanstack-query";
 import { RPCLink } from "@orpc/client/fetch";
-//#region src/hitch/browser.ts
-function createHitchClient(contract) {
-	return createLazyClientProxy(() => createORPCClient(new OpenAPILink(contract, {
-		url: `${location.origin}/api`,
-		fetch: (request, init) => globalThis.fetch(request, init)
-	})));
-}
-//#endregion
 //#region src/client.ts
 function createClient(...[options]) {
 	const clientOptions = options;
@@ -26,13 +16,6 @@ function createClient(...[options]) {
 }
 //#endregion
 //#region src/author/client.ts
-function buildClientHitch() {
-	const contract = getRegisteredHitchContract();
-	if (contract === void 0) throw new Error("`hitch` is unavailable: run `applet generate` first. The framework imports your .hitch automatically at build; in plain node import your .hitch once before calling hitch.");
-	return withBatchRecorder(createHitchClient(contract), contract);
-}
-const hitchClient = createLazyClientProxy(buildClientHitch);
-const hitch = withFilesUpload(createTanstackQueryUtils(hitchClient), () => hitchClient.files);
 const api = createTanstackQueryUtils(createClient());
 //#endregion
-export { api, hitch };
+export { api };

package/dist/{contract-BbOj5EB7.js → contract-BeKz1Qcs.js}

@@ -17,7 +17,12 @@ function pruneContract(contract, manifest) {
 		}
 		return [manifestObject.code, pruned];
 	}));
-	return Object.assign({}, contract, { records });
+	const platform = Object.assign({}, contract);
+	if (manifest.public === true) {
+		delete platform.email;
+		delete platform.telephony;
+	}
+	return Object.assign(platform, { records });
 }
 //#endregion
 export { pruneContract as t };

package/dist/{contract-D9wEvxGI.d.ts → contract-CJv-n1l3.d.ts}

@@ -1,4 +1,4 @@
-import { n as AppletManifest } from "./manifest-BSUtHbu-.js";
+import { n as AppletManifest } from "./manifest-BBHD_EY9.js";
 import { AnyContractRouter } from "@orpc/contract";
 //#region src/hitch/contract.d.ts
 type ManifestObjectFor<Manifest, Code> = Manifest extends {
@@ -15,7 +15,9 @@ type Capability<ManifestObject, Key extends "canCreate" | "canDelete" | "readWri
 type NarrowProcedures<Procedures, ManifestObject> = Omit<Procedures, (true extends Capability<ManifestObject, "canCreate"> ? never : "create") | (true extends Capability<ManifestObject, "canDelete"> ? never : "delete") | (Capability<ManifestObject, "readWrite"> extends readonly [] ? "update" | "updateWhere" : never)>;
 type NarrowContract<Contract, Manifest> = Contract extends {
   records: infer Records;
-} ? Omit<Contract, "records"> & {
+} ? Omit<Contract, "records" | (Manifest extends {
+  public: true;
+} ? "email" | "telephony" : never)> & {
   records: { [Code in keyof Records & ManifestObjectCodes<Manifest>]: NarrowProcedures<Records[Code], ManifestObjectFor<Manifest, Code>>; };
 } : Contract;
 declare function pruneContract<const Contract extends AnyContractRouter, const Manifest extends AppletManifest>(contract: Contract, manifest: Manifest): NarrowContract<Contract, Manifest>;

package/dist/{deploy-C5JDIn2Y.js → deploy-DODTE8ri.js}

@@ -1,7 +1,7 @@
 import { n as readWorkspaceConfig } from "./workspace-8yqXsvce.js";
 import { t as fetchWithOrgAuth } from "./auth-D3CrCtZq.js";
 import { a as loadGitHubActionsSources, n as githubActionsContext, r as hitchResponseError, t as fetchWithGitHubActions } from "./ci-B5-mH-YW.js";
-import { n as buildPreparedApplet, r as prepareWorkspaceBuild, t as buildApplet } from "./build-XHoa_sJL.js";
+import { n as buildPreparedApplet, r as prepareWorkspaceBuild, t as buildApplet } from "./build-DkKTiIu7.js";
 import { createRequire } from "node:module";
 import { createHash } from "node:crypto";
 import { existsSync } from "node:fs";
@@ -2546,6 +2546,28 @@ async function deployApplet(appletRoot, options, logPrefix = "", sourceHash) {
 	if (result.unset_variables?.length) console.warn(`${logPrefix}Warning: declared variables not set: ${result.unset_variables.join(", ")}. Set them with applet variables set.`);
 	return result;
 }
+function buildConcurrency() {
+	const value = process.env.APPLET_BUILD_CONCURRENCY;
+	if (value === void 0) return Infinity;
+	if (/^[1-9]\d*$/.test(value)) return Number(value);
+	console.warn(`Ignoring APPLET_BUILD_CONCURRENCY=${JSON.stringify(value)}: it must be a positive integer. Building every applet at once.`);
+	return Infinity;
+}
+function semaphore(limit) {
+	let active = 0;
+	const waiting = [];
+	return async (task) => {
+		if (active < limit) active++;
+		else await new Promise((resolve) => waiting.push(resolve));
+		try {
+			return await task();
+		} finally {
+			const next = waiting.shift();
+			if (next === void 0) active--;
+			else next();
+		}
+	};
+}
 async function workspaceAppletRoots(workspaceRoot) {
 	const appletsDir = resolve(workspaceRoot, "applets");
 	const roots = (await readdir(appletsDir, { withFileTypes: true }).catch((error) => {
@@ -2607,9 +2629,10 @@ async function runDeploy(options) {
 	if (selectedRoots.length === 0) return;
 	if (options.dist === void 0) await prepareWorkspaceBuild(root, appletRoots);
 	const interactive = github === void 0 && process.stdin.isTTY === true;
+	const buildSlot = semaphore(buildConcurrency());
 	const deploy = async (appletRoot) => {
 		const logPrefix = `[${relative(root, appletRoot)}] `;
-		if (options.dist === void 0) await buildPreparedApplet(appletRoot, ".hitch/dist", interactive ? "" : logPrefix);
+		if (options.dist === void 0) await buildSlot(() => buildPreparedApplet(appletRoot, ".hitch/dist", interactive ? "" : logPrefix));
 		await deployApplet(appletRoot, {
 			...options,
 			dist: options.dist ?? ".hitch/dist"

package/dist/{generate-BV_emZgy.js → generate-8yyxKRSz.js}

@@ -1,8 +1,8 @@
 import { a as organizationInstanceUrl, c as resolveInstanceUrl } from "./store-B8N_8JIN.js";
 import { t as fetchWithOrgAuth } from "./auth-D3CrCtZq.js";
-import { t as loadAppletConfig } from "./load-config-Dkr2VxZN.js";
+import { t as loadAppletConfig } from "./load-config-BYrBjPlr.js";
 import { i as loadGitHubActionsBuildInputs, n as githubActionsContext } from "./ci-B5-mH-YW.js";
-import { r as prepareAppletProject } from "./project-CCVqCCgU.js";
+import { r as prepareAppletProject } from "./project-CWVwic2C.js";
 import { createRequire } from "node:module";
 import { isContractProcedure, minifyContractRouter } from "@orpc/contract";
 import { randomUUID } from "node:crypto";
@@ -308,17 +308,16 @@ function guardManifestForSpec(spec, manifest) {
 }
 //#endregion
 //#region src/typegen/register.ts
-function registerFile(catalog, options) {
+function registerFile(catalog, options, publicApplet) {
 	const catalogType = catalog === void 0 ? "type Catalog = Record<string, string>;" : `type Catalog = {
 ${Object.entries(catalog).map(([objectCode, attributeCodes]) => `  ${JSON.stringify(objectCode)}: ${attributeCodes.map((code) => JSON.stringify(code)).join(" | ") || "never"};`).join("\n")}
 };`;
-	return `// Generated by @hitch42/applet — do not edit.
-import type manifest from "./manifest.gen.ts";
-${options.hasServer ? "import type server from \"../src/server/main.ts\";\nimport type * as serverModule from \"../src/server/main.ts\";\n" : ""}${options.hasClient ? "import type { Route as indexRoute } from \"../src/client/routes/index.tsx\";\n" : ""}${options.hasServer ? "import type { AnyRouter } from \"@orpc/server\";\n" : ""}${options.hasClient ? "import type { AnyRoute } from \"@tanstack/react-router\";\n" : ""}${options.hasServer ? "import type { WorkflowDefinition } from \"@hitch42/applet/server\";\nimport type { TelephonyMessageReceivedEvent, EmailMessageReceivedEvent } from \"@hitch42/applet\";\n" : ""}
-${catalogType}
-
-type Expect<T extends true> = T;
-${options.hasServer ? `type ServerWorkflows = typeof serverModule extends {
+	const serverSourceImport = options.hasServer ? "import type server from \"../src/server/main.ts\";\nimport type * as serverModule from \"../src/server/main.ts\";\n" : "";
+	const clientSourceImport = options.hasClient ? "import type { Route as indexRoute } from \"../src/client/routes/index.tsx\";\n" : "";
+	const serverTypeImports = options.hasServer ? "import type { AnyRouter } from \"@orpc/server\";\n" : "";
+	const clientTypeImports = options.hasClient ? "import type { AnyRoute } from \"@tanstack/react-router\";\n" : "";
+	const workflowImport = options.hasServer ? "import type { WorkflowDefinition } from \"@hitch42/applet/server\";\nimport type { TelephonyMessageReceivedEvent, EmailMessageReceivedEvent } from \"@hitch42/applet\";\n" : "";
+	const serverCheck = options.hasServer ? `type ServerWorkflows = typeof serverModule extends {
   workflows: infer Workflows extends Record<string, WorkflowDefinition<any, any>>;
 }
   ? Workflows
@@ -340,10 +339,21 @@ type _SrcServerWorkflowsMustBeNamedExport = Expect<
       : false
     : true
 >;
-` : ""}${options.hasClient ? `type _SrcClientRoutesIndexMustExportARoute = Expect<
+` : "";
+	const clientCheck = options.hasClient ? `type _SrcClientRoutesIndexMustExportARoute = Expect<
   typeof indexRoute extends AnyRoute ? true : false
 >;
-` : ""}
+` : "";
+	return `// Generated by @hitch42/applet — do not edit.
+import type manifest from "./manifest.gen.ts";
+${serverSourceImport}${clientSourceImport}${serverTypeImports}${clientTypeImports}${workflowImport}
+${catalogType}
+
+type Expect<T extends true> = T;
+${serverCheck}${publicApplet && options.hasServer ? `type _PublicAppletsCannotDefineWorkflows = Expect<keyof ServerWorkflows extends never ? true : false>;
+type _PublicAppletsCannotHandleEmail = Expect<"email" extends keyof typeof server ? false : true>;
+type _PublicAppletsCannotHandleTelephony = Expect<"telephony" extends keyof typeof server ? false : true>;
+` : ""}${clientCheck}
 declare module "@hitch42/applet" {
   interface HitchRegister {
     catalog: Catalog;
@@ -354,12 +364,12 @@ ${options.hasServer ? `    router: (typeof server)["router"];
 }
 `;
 }
-async function writeRegisterDeclaration(outDir, catalog) {
+async function writeRegisterDeclaration(outDir, catalog, publicApplet = false) {
 	await mkdir(resolve(outDir), { recursive: true });
 	await writeFile(resolve(outDir, "register.ts"), registerFile(catalog, {
 		hasClient: existsSync(resolve(outDir, "../src/client/routes/index.tsx")),
 		hasServer: existsSync(resolve(outDir, "../src/server/main.ts"))
-	}));
+	}, publicApplet));
 }
 //#endregion
 //#region src/typegen/generate.ts
@@ -480,7 +490,7 @@ async function writeContractFiles(outDir, manifest, spec) {
 	const preparedSpec = prepareRecordSpec(spec, manifest);
 	await generateContract(preparedSpec, outDir);
 	await writeManifestGen(outDir, manifest);
-	await writeRegisterDeclaration(outDir, catalog);
+	await writeRegisterDeclaration(outDir, catalog, manifest.public === true);
 	const hasBatch = Object.hasOwn(preparedSpec.paths, "/v1/batch");
 	await writeFile(resolve(outDir, "index.ts"), `// Generated by applet generate — do not edit.
 import { emailContract, filesContract as files, meContract as me, pruneContract, registerHitchContract, teamsContract as teams, telephonyContract as telephony } from "@hitch42/applet";

package/dist/generate-Df29-UJm.js

@@ -0,0 +1,2 @@
+import { r as runGenerate } from "./generate-8yyxKRSz.js";
+export { runGenerate };

package/dist/{headers-DkNr9MLJ.js → headers-CeRX-Xji.js}

@@ -4,6 +4,7 @@ const HITCH_SESSION_HEADER = "x-hitch-session";
 const HITCH_APPLET_HEADER = "x-hitch-applet";
 const HITCH_APPLET_CODE_HEADER = "x-hitch-applet-code";
 const HITCH_APPLET_TOKEN_HEADER = "x-hitch-applet-token";
+const HITCH_PUBLIC_HEADER = "x-hitch-public";
 const HITCH_SCHEDULE_RUN_HEADER = "x-hitch-schedule-run";
 const HITCH_SCHEDULE_HEADER = "x-hitch-schedule";
 const HITCH_ORG_CODE_HEADER = "x-hitch-org-code";
@@ -14,4 +15,4 @@ const HITCH_WORKFLOW_RUN_HEADER = "x-hitch-workflow-run";
 const HITCH_WORKFLOW_HEADER = "x-hitch-workflow";
 const HITCH_WORKFLOW_INVOCATION_HEADER = "x-hitch-workflow-invocation";
 //#endregion
-export { HITCH_ORG_CODE_HEADER as a, HITCH_SCHEDULE_HEADER as c, HITCH_USER_HEADER as d, HITCH_WORKFLOW_HEADER as f, HITCH_ORGANIZATION_HEADER as i, HITCH_SCHEDULE_RUN_HEADER as l, HITCH_WORKFLOW_RUN_HEADER as m, HITCH_APPLET_HEADER as n, HITCH_RELEASE_HEADER as o, HITCH_WORKFLOW_INVOCATION_HEADER as p, HITCH_APPLET_TOKEN_HEADER as r, HITCH_REQUEST_HOST_HEADER as s, HITCH_APPLET_CODE_HEADER as t, HITCH_SESSION_HEADER as u };
+export { HITCH_ORG_CODE_HEADER as a, HITCH_REQUEST_HOST_HEADER as c, HITCH_SESSION_HEADER as d, HITCH_USER_HEADER as f, HITCH_WORKFLOW_RUN_HEADER as h, HITCH_ORGANIZATION_HEADER as i, HITCH_SCHEDULE_HEADER as l, HITCH_WORKFLOW_INVOCATION_HEADER as m, HITCH_APPLET_HEADER as n, HITCH_PUBLIC_HEADER as o, HITCH_WORKFLOW_HEADER as p, HITCH_APPLET_TOKEN_HEADER as r, HITCH_RELEASE_HEADER as s, HITCH_APPLET_CODE_HEADER as t, HITCH_SCHEDULE_RUN_HEADER as u };

package/dist/hitch-client--qZVa2KM.d.ts

@@ -0,0 +1,23 @@
+import { l as RegisteredContract, u as RegisteredManifest } from "./manifest-BBHD_EY9.js";
+import { t as NarrowContract } from "./contract-CJv-n1l3.js";
+import { t as WithBatchRecorder } from "./batch-Qa4B4-Yp.js";
+import { o as WithFilesUpload } from "./upload-D_kkmne_.js";
+import { t as ExactRouterUtils } from "./query-utils-zz9pVjgp.js";
+import { ContractRouterClient } from "@orpc/contract";
+//#region src/author/hitch-client.d.ts
+type AuthorContract = NarrowContract<RegisteredContract, RegisteredManifest>;
+type BaseHitchClient = ContractRouterClient<AuthorContract>;
+type AuthorHitchClient = WithBatchRecorder<BaseHitchClient>;
+type BaseHitchUtils = ExactRouterUtils<BaseHitchClient>;
+type AuthorHitchUtils = AuthorHitchClient extends {
+  batch: infer Batch;
+} ? BaseHitchUtils extends {
+  batch: infer BatchUtils;
+} ? Omit<BaseHitchUtils, "batch"> & {
+  batch: Omit<BatchUtils, "call"> & {
+    call: Batch;
+  };
+} : BaseHitchUtils : BaseHitchUtils;
+declare const hitch: WithFilesUpload<AuthorHitchUtils>;
+//#endregion
+export { hitch as t };

package/dist/hitch-client-Cw-WZ_8v.js

@@ -0,0 +1,24 @@
+import { n as withFilesUpload, r as getRegisteredHitchContract } from "./upload-DRbVhuDm.js";
+import { t as withBatchRecorder } from "./batch-_ZjAg-Kk.js";
+import { t as createLazyClientProxy } from "./lazy-client-CwIzYAoE.js";
+import { createORPCClient } from "@orpc/client";
+import { OpenAPILink } from "@orpc/openapi-client/fetch";
+import { createTanstackQueryUtils } from "@orpc/tanstack-query";
+//#region src/hitch/browser.ts
+function createHitchClient(contract) {
+	return createLazyClientProxy(() => createORPCClient(new OpenAPILink(contract, {
+		url: `${location.origin}/api`,
+		fetch: (request, init) => globalThis.fetch(request, init)
+	})));
+}
+//#endregion
+//#region src/author/hitch-client.ts
+function buildClientHitch() {
+	const contract = getRegisteredHitchContract();
+	if (contract === void 0) throw new Error("`hitch` is unavailable: run `applet generate` first. The framework imports your .hitch automatically at build; in plain node import your .hitch once before calling hitch.");
+	return withBatchRecorder(createHitchClient(contract), contract);
+}
+const hitchClient = createLazyClientProxy(buildClientHitch);
+const hitch = withFilesUpload(createTanstackQueryUtils(hitchClient), () => hitchClient.files);
+//#endregion
+export { hitch as t };

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { a as AppletSourceDefinition, c as RegisteredCatalog, d as RegisteredRouter, f as RegisteredVariableKeys, h as registerHitchContract, i as AppletPackages, l as RegisteredContract, m as RegisteredWorkflows, n as AppletManifest, o as RegisteredAppletSourceDefinition, p as RegisteredVariables, r as AppletManifestObject, s as HitchRegister, t as AppletDefinition, u as RegisteredManifest } from "./manifest-BSUtHbu-.js";
-import { n as pruneContract, t as NarrowContract } from "./contract-D9wEvxGI.js";
+import { a as AppletSourceDefinition, c as RegisteredCatalog, d as RegisteredRouter, f as RegisteredVariableKeys, h as registerHitchContract, i as AppletPackages, l as RegisteredContract, m as RegisteredWorkflows, n as AppletManifest, o as RegisteredAppletSourceDefinition, p as RegisteredVariables, r as AppletManifestObject, s as HitchRegister, t as AppletDefinition, u as RegisteredManifest } from "./manifest-BBHD_EY9.js";
+import { n as pruneContract, t as NarrowContract } from "./contract-CJv-n1l3.js";
 import { a as UploadedHitchFile, c as filesContract, i as UploadProgress, n as FilesUpload, r as UploadFileOptions, s as uploadFile, t as FilesClient } from "./upload-D_kkmne_.js";
 import { a as EmailTracker, c as HitchEmailMessage, f as ListEmailTrackersOutput, g as emailContract, h as SendHitchEmailInput, i as EmailContract, l as HitchEmailThread, m as ListHitchEmailThreadsInput, n as TelephonyMessageReceivedEvent, o as HitchEmailAddress, p as ListHitchEmailMessagesInput, s as HitchEmailAttachment, t as EmailMessageReceivedEvent, u as HitchMailbox } from "./email-protocol-B9u_dh2p.js";
 import { ContractProcedure, Meta, Schema } from "@orpc/contract";

package/dist/index.js

@@ -1,5 +1,5 @@
 import { i as registerHitchContract, t as uploadFile } from "./upload-DRbVhuDm.js";
-import { t as pruneContract } from "./contract-BbOj5EB7.js";
+import { t as pruneContract } from "./contract-BeKz1Qcs.js";
 import { oc, type } from "@orpc/contract";
 //#region src/hitch/email.ts
 function emailContract(appletCode) {

package/dist/{init-BGQ_bP44.js → init-DT0faD-q.js}

@@ -1,8 +1,8 @@
 import { c as resolveInstanceUrl, s as resolveAuthForOrg } from "./store-B8N_8JIN.js";
 import { n as readWorkspaceConfig } from "./workspace-8yqXsvce.js";
-import { r as runGenerate } from "./generate-BV_emZgy.js";
-import { n as loadAppletSourceDefinition, o as APPLET_CODE_PATTERN, s as ORG_CODE_PATTERN } from "./load-config-Dkr2VxZN.js";
-import { a as writeAppletSupport, n as loadCliManifest, o as writeWorkspaceSupport, t as assertWorkspaceCli } from "./project-CCVqCCgU.js";
+import { r as runGenerate } from "./generate-8yyxKRSz.js";
+import { n as loadAppletSourceDefinition, o as APPLET_CODE_PATTERN, s as ORG_CODE_PATTERN } from "./load-config-BYrBjPlr.js";
+import { a as writeAppletSupport, n as loadCliManifest, o as writeWorkspaceSupport, t as assertWorkspaceCli } from "./project-CWVwic2C.js";
 import { access, cp, mkdir, readdir, writeFile } from "node:fs/promises";
 import { relative, resolve } from "node:path";
 import { spawn } from "node:child_process";

package/dist/lazy-client-CwIzYAoE.js

@@ -0,0 +1,14 @@
+//#region src/lazy-client.ts
+function createLazyClientProxy(build) {
+	let client;
+	const at = (path) => new Proxy(() => void 0, {
+		get: (_target, property) => at([...path, property]),
+		apply: (_target, _thisArg, args) => {
+			client ??= build();
+			return path.reduce((value, property) => value[property], client)(...args);
+		}
+	});
+	return at([]);
+}
+//#endregion
+export { createLazyClientProxy as t };