@hitch42/applet 0.1.1-beta.16 → 0.1.1-beta.18

package/dist/{load-config-Dkr2VxZN.js → load-config-BYrBjPlr.js}

@@ -77,6 +77,7 @@ const appletManifestShape = {
 	name: nameSchema,
 	code: codeSchema,
 	requiresChangeset: z.uuid().optional(),
+	public: z.boolean().optional(),
 	telephony: z.strictObject({
 		read: z.boolean().optional(),
 		send: z.boolean().optional(),
@@ -110,17 +111,30 @@ const checkDuplicateCodes = (manifest, context) => {
 		]
 	});
 };
-const appletManifestSchema = z.strictObject(appletManifestShape).superRefine(checkDuplicateCodes);
+const checkPublicFields = (manifest, context) => {
+	if (!manifest.public) return;
+	[
+		"schedules",
+		"email",
+		"telephony"
+	].filter((field) => manifest[field] !== void 0).forEach((field) => context.addIssue({
+		code: "custom",
+		message: `Public applets cannot declare ${field}.`,
+		path: [field]
+	}));
+};
+const appletManifestSchema = z.strictObject(appletManifestShape).superRefine(checkDuplicateCodes).superRefine(checkPublicFields);
 z.strictObject({
 	name: appletManifestShape.name,
 	code: appletManifestShape.code,
 	requiresChangeset: appletManifestShape.requiresChangeset,
+	public: appletManifestShape.public,
 	telephony: appletManifestShape.telephony,
 	email: appletManifestShape.email,
 	schedules: appletManifestShape.schedules,
 	variables: appletManifestShape.variables,
 	objects: appletManifestShape.objects
-}).superRefine(checkDuplicateCodes);
+}).superRefine(checkDuplicateCodes).superRefine(checkPublicFields);
 const packageVersionsSchema = z.record(z.string().min(1), z.string().min(1)).readonly();
 const RESERVED_APPLET_PACKAGES = /* @__PURE__ */ new Set([
 	"@fontsource-variable/geist-mono",
@@ -188,6 +202,7 @@ const appletSourceDefinitionSchema = z.strictObject({
 	name: appletManifestShape.name,
 	code: appletManifestShape.code,
 	requiresChangeset: appletManifestShape.requiresChangeset,
+	public: appletManifestShape.public,
 	telephony: appletManifestShape.telephony,
 	email: appletManifestShape.email,
 	schedules: appletManifestShape.schedules,
@@ -198,6 +213,7 @@ const appletSourceDefinitionSchema = z.strictObject({
 }).superRefine((manifest, context) => {
 	checkDuplicateCodes(manifest, context);
 	checkSourcePackages(manifest, context);
+	checkPublicFields(manifest, context);
 });
 //#endregion
 //#region src/workspace.ts

package/dist/{log-context-zu8U9Sjm.js → log-context-DWznGjfz.js}

@@ -42,14 +42,10 @@ function cloudflareRequestFields(request) {
 	const cf = Reflect.get(request, "cf");
 	const field = (key) => typeof cf === "object" && cf !== null && key in cf ? Reflect.get(cf, key) : void 0;
 	const colo = field("colo");
-	const country = field("country");
-	const asn = field("asn");
 	return {
 		cfRay: request.headers.get("cf-ray") ?? void 0,
 		traceparent: request.headers.get("traceparent") ?? void 0,
-		colo: typeof colo === "string" ? colo : void 0,
-		country: typeof country === "string" ? country : void 0,
-		asn: typeof asn === "number" ? asn : void 0
+		colo: typeof colo === "string" ? colo : void 0
 	};
 }
 function createNoteLog(initial) {

package/dist/{logs-DOkT5ots.js → logs-CEIikWzV.js}

@@ -1,6 +1,6 @@
 import { n as readWorkspaceConfig } from "./workspace-8yqXsvce.js";
 import { t as fetchWithOrgAuth } from "./auth-D3CrCtZq.js";
-import { o as APPLET_CODE_PATTERN, r as resolveWorkspaceOrg, t as loadAppletConfig } from "./load-config-Dkr2VxZN.js";
+import { o as APPLET_CODE_PATTERN, r as resolveWorkspaceOrg, t as loadAppletConfig } from "./load-config-BYrBjPlr.js";
 import { z } from "zod";
 //#region src/logs.ts
 const LOG_LEVELS = [

package/dist/{manifest-BSUtHbu-.d.ts → manifest-BBHD_EY9.d.ts}

@@ -34,6 +34,7 @@ interface AppletManifest {
   code: string;
   /** This code needs the schema as of this changeset. */
   requiresChangeset?: string;
+  public?: boolean;
   telephony?: {
     read?: boolean;
     send?: boolean;
@@ -78,13 +79,22 @@ type RouterSchedulePaths<R, Prefix extends string = ""> = R extends AnyProcedure
 type RegisteredSchedulePath = HitchRegister extends {
   router: infer R extends AnyRouter;
 } ? RouterSchedulePaths<R> : string;
-type RegisteredAppletManifest = Omit<AppletManifest, "objects" | "schedules"> & {
+type RegisteredAppletManifestFields = Omit<AppletManifest, "objects" | "schedules"> & {
   schedules?: readonly (Omit<NonNullable<AppletManifest["schedules"]>[number], "path"> & {
     path: RegisteredSchedulePath;
   })[];
   objects: readonly RegisteredAppletManifestObject[];
 };
-type RegisteredAppletDefinition = Omit<RegisteredAppletManifest, "org">;
+type RegisteredAppletManifest = (RegisteredAppletManifestFields & {
+  public?: false;
+}) | (Omit<RegisteredAppletManifestFields, "public" | "schedules" | "email" | "telephony"> & {
+  public: true;
+  schedules?: never;
+  email?: never;
+  telephony?: never;
+});
+type DistributiveOmit<T, K extends PropertyKey> = T extends unknown ? Omit<T, K> : never;
+type RegisteredAppletDefinition = DistributiveOmit<RegisteredAppletManifest, "org">;
 type RegisteredAppletSourceDefinition = RegisteredAppletDefinition & AppletPackages;
 //#endregion
 export { AppletSourceDefinition as a, RegisteredCatalog as c, RegisteredRouter as d, RegisteredVariableKeys as f, registerHitchContract as h, AppletPackages as i, RegisteredContract as l, RegisteredWorkflows as m, AppletManifest as n, RegisteredAppletSourceDefinition as o, RegisteredVariables as p, AppletManifestObject as r, HitchRegister as s, AppletDefinition as t, RegisteredManifest as u };

package/dist/{project-CCVqCCgU.js → project-CWVwic2C.js}

@@ -1,6 +1,6 @@
 import { a as organizationInstanceUrl, n as DEFAULT_INSTANCE_URL } from "./store-B8N_8JIN.js";
 import { n as readWorkspaceConfig } from "./workspace-8yqXsvce.js";
-import { n as loadAppletSourceDefinition } from "./load-config-Dkr2VxZN.js";
+import { n as loadAppletSourceDefinition } from "./load-config-BYrBjPlr.js";
 import { z } from "zod";
 import { existsSync } from "node:fs";
 import { cp, mkdir, readFile, readdir, rm, symlink, writeFile } from "node:fs/promises";
@@ -204,7 +204,7 @@ minimumReleaseAgeExclude:
   - "@hitch42/*"
 `;
 }
-const OXLINT_CONFIG = `{
+const oxlintConfigFile = (publicOverrides = "") => `{
   "$schema": "./node_modules/oxlint/configuration_schema.json",
   "plugins": ["eslint", "typescript", "unicorn", "import", "node"],
   "options": { "typeAware": true, "typeCheck": true },
@@ -248,18 +248,42 @@ const OXLINT_CONFIG = `{
           { "assertFunctionNames": ["expect", "expect*", "assert", "assert.*", "assert*"] }
         ]
       }
-    }
+    }${publicOverrides}
   ]
 }
 `;
+async function oxlintConfig(root) {
+	const appletsRoot = resolve(root, "applets");
+	const applets = existsSync(appletsRoot) ? await readdir(appletsRoot, { withFileTypes: true }) : [];
+	const publicApplets = (await Promise.all(applets.filter((applet) => applet.isDirectory() && existsSync(resolve(appletsRoot, applet.name, "applet.manifest.ts"))).map(async (applet) => {
+		return (await loadAppletSourceDefinition(resolve(appletsRoot, applet.name))).public === true ? applet.name : null;
+	}))).filter((code) => code !== null).sort();
+	return oxlintConfigFile(publicApplets.map((name) => `,
+    {
+      "files": [${JSON.stringify(`applets/${name}/**`)}],
+      "rules": {
+        "eslint/no-restricted-imports": [
+          "error",
+          {
+            "paths": [
+              {
+                "name": "@hitch42/applet/client/hitch",
+                "message": "Public applets have no Hitch client SDK. Call your server procedures with api from @hitch42/applet/client."
+              }
+            ]
+          }
+        ]
+      }
+    }`).join(""));
+}
 async function oxfmtConfig(root) {
 	const appletsRoot = resolve(root, "applets");
 	const overrides = (existsSync(appletsRoot) ? await readdir(appletsRoot) : []).filter((code) => existsSync(resolve(appletsRoot, code, "src/client/styles/globals.css"))).sort().map((code) => `
     {
-      "files": ["applets/${code}/**"],
+      "files": [${JSON.stringify(`applets/${code}/**`)}],
       "options": {
         "sortTailwindcss": {
-          "stylesheet": "applets/${code}/src/client/styles/globals.css",
+          "stylesheet": ${JSON.stringify(`applets/${code}/src/client/styles/globals.css`)},
           "functions": ["cn", "cva"]
         }
       }
@@ -331,6 +355,7 @@ async function writeWorkspaceSupport(root, config, cli) {
 	await ensureAgentConfigs(root, config.org);
 	const deployWorkflowTarget = resolve(root, ".github/workflows/hitch.yml");
 	const agents = await readFile(new URL("../scaffold/AGENTS.md", import.meta.url), "utf8");
+	const [lintConfig, formatConfig] = await Promise.all([oxlintConfig(root), oxfmtConfig(root)]);
 	await Promise.all([
 		mkdir(resolve(root, ".agents/skills"), { recursive: true }),
 		mkdir(resolve(root, ".claude/skills"), { recursive: true }),
@@ -346,8 +371,8 @@ async function writeWorkspaceSupport(root, config, cli) {
 		writeFile(resolve(root, "pnpm-workspace.yaml"), workspaceFile(resolvedCli)),
 		config.githubWorkflow === false || existsSync(deployWorkflowTarget) ? void 0 : cp(new URL("../scaffold/.github/workflows/hitch.yml", import.meta.url), deployWorkflowTarget),
 		writeFile(resolve(root, ".node-version"), "24\n"),
-		writeFile(resolve(root, ".oxlintrc.json"), OXLINT_CONFIG),
-		oxfmtConfig(root).then((config) => writeFile(resolve(root, ".oxfmtrc.json"), config)),
+		writeFile(resolve(root, ".oxlintrc.json"), lintConfig),
+		writeFile(resolve(root, ".oxfmtrc.json"), formatConfig),
 		writeGitignore(root),
 		writeFile(resolve(root, "AGENTS.md"), agents)
 	]);
@@ -506,7 +531,7 @@ export default defineConfig({
     "jsx": "react-jsx",
     "types": ["vite/client", "node"],
     "paths": {
-      "@/*": ["./src/*"]
+      "@/*": ["./src/*"]${definition.public === true ? ",\n      \"@hitch42/applet/client/hitch\": [\"./node_modules/@hitch42/applet/types/public-applet-client-hitch.d.ts\"]" : ""}
     }
   },
   "include": [

package/dist/query-utils-zz9pVjgp.d.ts

@@ -0,0 +1,25 @@
+import { NestedClient } from "@orpc/client";
+import { RouterUtils } from "@orpc/tanstack-query";
+//#region src/query-utils.d.ts
+type Exact<Expected, Actual> = Actual extends symbol ? Actual : Actual extends Expected ? Actual extends readonly unknown[] ? Actual : Actual extends object ? NonNullable<Expected> extends object ? { [Key in keyof Actual]: Key extends keyof NonNullable<Expected> ? Exact<NonNullable<Expected>[Key], Actual[Key]> : never; } : Actual : Actual : never;
+type QueryOptionsFunction<Utils> = Extract<Utils extends {
+  queryOptions: infer Function;
+} ? Function : never, (...args: never[]) => unknown>;
+type QueryOptionsArgument<Utils> = NonNullable<Parameters<QueryOptionsFunction<Utils>>[0]>;
+type ExactOptions<Input, Options> = Options extends {
+  input: infer Actual;
+} ? Options & {
+  input: Exact<Input, Actual>;
+} : Options extends {
+  input?: infer Actual;
+} ? Options & {
+  input?: Exact<Input, Actual>;
+} : Options;
+type QueryOptionsResult<Utils, Options> = Options & Omit<ReturnType<QueryOptionsFunction<Utils>>, keyof Options>;
+type ExactQueryOptions<Utils, Input> = <Options extends QueryOptionsArgument<Utils> = QueryOptionsArgument<Utils>>(...rest: undefined extends Input ? [options?: ExactOptions<Input, Options>] : [options: ExactOptions<Input, Options>]) => QueryOptionsResult<Utils, Options>;
+type ClientTree = NestedClient<Record<never, never>>;
+type ExactRouterUtils<Client extends ClientTree> = Client extends ((...args: infer Arguments) => unknown) ? Omit<RouterUtils<Client>, "queryOptions"> & {
+  queryOptions: ExactQueryOptions<RouterUtils<Client>, Arguments[0]>;
+} : Omit<RouterUtils<Client>, keyof Client> & { [Key in keyof Client]: Client[Key] extends ClientTree ? ExactRouterUtils<Client[Key]> : never; };
+//#endregion
+export { ExactRouterUtils as t };

package/dist/{schedules-D6-3v-Az.js → schedules-B7xNl9oy.js}

@@ -1,4 +1,4 @@
-import { t as loadAppletConfig } from "./load-config-Dkr2VxZN.js";
+import { t as loadAppletConfig } from "./load-config-BYrBjPlr.js";
 import { t as question } from "./prompt-ChS-grYO.js";
 import { RPCLink } from "@orpc/client/fetch";
 import { readFile } from "node:fs/promises";

package/dist/server.d.ts

@@ -1,6 +1,6 @@
 import { a as createWorkflow, i as WorkflowStep, n as WorkflowDefinition, r as WorkflowDuration } from "./workflow-DurM6Fwx.js";
-import { l as RegisteredContract, m as RegisteredWorkflows, p as RegisteredVariables, u as RegisteredManifest } from "./manifest-BSUtHbu-.js";
-import { t as NarrowContract } from "./contract-D9wEvxGI.js";
+import { l as RegisteredContract, m as RegisteredWorkflows, p as RegisteredVariables, u as RegisteredManifest } from "./manifest-BBHD_EY9.js";
+import { t as NarrowContract } from "./contract-CJv-n1l3.js";
 import { t as WithBatchRecorder } from "./batch-Qa4B4-Yp.js";
 import { o as WithFilesUpload } from "./upload-D_kkmne_.js";
 import { ContractRouterClient } from "@orpc/contract";
@@ -44,8 +44,11 @@ declare const log: {
 //#region src/author/server.d.ts
 type AuthorContract = NarrowContract<RegisteredContract, RegisteredManifest>;
 type AuthorHitchClient = WithBatchRecorder<ContractRouterClient<AuthorContract>>;
-declare const hitch: WithFilesUpload<AuthorHitchClient> & {
+type AuthorHitch = WithFilesUpload<AuthorHitchClient> & (RegisteredManifest extends {
+  public: true;
+} ? {} : {
   workflows: WorkflowsClient<RegisteredWorkflows>;
-};
+});
+declare const hitch: AuthorHitch;
 //#endregion
 export { type AppletEnv, type WorkflowDefinition, type WorkflowDuration, type WorkflowStep, createWorkflow, env, hitch, log };

package/dist/server.js

@@ -1,8 +1,9 @@
 import { n as withFilesUpload, r as getRegisteredHitchContract } from "./upload-DRbVhuDm.js";
-import { t as HITCH_APPLET_CODE_HEADER } from "./headers-DkNr9MLJ.js";
+import { t as HITCH_APPLET_CODE_HEADER } from "./headers-CeRX-Xji.js";
 import { a as getRequestContext, i as getIdentityBearer, n as createWorkflow, s as tryGetRequestContext } from "./workflow-CTo2kZF1.js";
-import { s as publishNote, t as APP_CONTEXT_CHANNEL } from "./log-context-zu8U9Sjm.js";
-import { n as withBatchRecorder, t as createLazyClientProxy } from "./lazy-client-x0DCI98S.js";
+import { s as publishNote, t as APP_CONTEXT_CHANNEL } from "./log-context-DWznGjfz.js";
+import { t as withBatchRecorder } from "./batch-_ZjAg-Kk.js";
+import { t as createLazyClientProxy } from "./lazy-client-CwIzYAoE.js";
 import { createORPCClient } from "@orpc/client";
 import { OpenAPILink } from "@orpc/openapi-client/fetch";
 //#region src/hitch/server.ts

package/dist/{telephony.d.ts → use-phone-M7c_HsB7.d.ts}

@@ -94,4 +94,4 @@ declare const usePhone: () => {
   active: Phone["active"];
 };
 //#endregion
-export { type Phone, type PhoneState, createPhone, usePhone };
+export { createPhone as i, Phone as n, PhoneState as r, usePhone as t };

package/dist/{telephony.js → use-phone-ug4B5gQp.js}

@@ -723,4 +723,4 @@ const usePhone = () => {
 	};
 };
 //#endregion
-export { createPhone, usePhone };
+export { createPhone as n, usePhone as t };

package/dist/{variables-BSFZnLxY.js → variables-DCbLJBr0.js}

@@ -1,5 +1,5 @@
 import { t as fetchWithOrgAuth } from "./auth-D3CrCtZq.js";
-import { t as loadAppletConfig } from "./load-config-Dkr2VxZN.js";
+import { t as loadAppletConfig } from "./load-config-BYrBjPlr.js";
 import { t as question } from "./prompt-ChS-grYO.js";
 import { z } from "zod";
 //#region src/variables.ts

package/dist/vite.d.ts

@@ -1,4 +1,4 @@
-import { o as RegisteredAppletSourceDefinition } from "./manifest-BSUtHbu-.js";
+import { o as RegisteredAppletSourceDefinition } from "./manifest-BBHD_EY9.js";
 import { PluginOption } from "vite";
 //#region src/vite.d.ts
 declare function applet<const M extends RegisteredAppletSourceDefinition>(sourceDefinition: M): PluginOption[];

package/dist/vite.js

@@ -1,10 +1,10 @@
-import { t as pruneContract } from "./contract-BbOj5EB7.js";
+import { t as pruneContract } from "./contract-BeKz1Qcs.js";
 import { a as openQueryCacheDatabase } from "./query-cache-CXmAyLv3.js";
-import { d as HITCH_USER_HEADER, u as HITCH_SESSION_HEADER } from "./headers-DkNr9MLJ.js";
+import { d as HITCH_SESSION_HEADER, f as HITCH_USER_HEADER } from "./headers-CeRX-Xji.js";
 import { a as workflowOutcomeSchema, n as runWorkflowJournal } from "./workflow-engine-BOTzURKM.js";
 import { a as organizationInstanceUrl, c as resolveInstanceUrl, o as rejectEnvironmentKey, r as bearerToken, s as resolveAuthForOrg } from "./store-B8N_8JIN.js";
-import { a as writeRegisterDeclaration, c as writeAppletRoot, d as writeServerEntry, i as syncContract, l as writeClientEntry, n as routesModuleSource, u as writeManifestGen } from "./generate-BV_emZgy.js";
-import { a as appletSourceDefinitionSchema, i as appletManifestSchema, o as APPLET_CODE_PATTERN, r as resolveWorkspaceOrg } from "./load-config-Dkr2VxZN.js";
+import { a as writeRegisterDeclaration, c as writeAppletRoot, d as writeServerEntry, i as syncContract, l as writeClientEntry, n as routesModuleSource, u as writeManifestGen } from "./generate-8yyxKRSz.js";
+import { a as appletSourceDefinitionSchema, i as appletManifestSchema, o as APPLET_CODE_PATTERN, r as resolveWorkspaceOrg } from "./load-config-BYrBjPlr.js";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
@@ -296,6 +296,18 @@ function createDevWorkflows(options) {
 	};
 }
 //#endregion
+//#region src/lazy-client-react.ts
+const CLIENT_REACT = "@hitch42/applet/client/react";
+const lazyClientReact = {
+	name: "hitch-lazy-client-react",
+	enforce: "pre",
+	apply: "build",
+	resolveId(source, importer, options) {
+		if (source !== CLIENT_REACT || options.kind !== "dynamic-import") return;
+		return this.resolve(`${CLIENT_REACT}?lazy`, importer, { skipSelf: true });
+	}
+};
+//#endregion
 //#region src/hitch/me-schemas.ts
 const personSchema = z.object({
 	id: z.uuid(),
@@ -661,7 +673,7 @@ function applet(sourceDefinition) {
 				}) : void 0,
 				hasClient && !hasAuthorRoot ? writeAppletRoot(root) : void 0,
 				hasServer ? writeServerEntry(root, hasHitchGen, manifest.code) : void 0,
-				hasHitchGen ? void 0 : writeRegisterDeclaration(resolve(root, ".hitch"))
+				hasHitchGen ? void 0 : writeRegisterDeclaration(resolve(root, ".hitch"), void 0, manifest.public === true)
 			]);
 			if (environment.command === "serve" && environment.mode !== "test" && environment.isPreview !== true) {
 				const instanceUrl = await resolveInstanceUrl();
@@ -923,6 +935,7 @@ function applet(sourceDefinition) {
 			...clsxFromCn,
 			enforce: "pre"
 		},
+		lazyClientReact,
 		...hasClientSource ? [
 			tanstackRouter({
 				generatedRouteTree: ".hitch/routeTree.gen.ts",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hitch42/applet",
-  "version": "0.1.1-beta.16",
+  "version": "0.1.1-beta.18",
   "license": "MIT",
   "bin": {
     "applet": "./dist/applet.js"
@@ -8,7 +8,8 @@
   "files": [
     "dist",
     "fonts",
-    "scaffold"
+    "scaffold",
+    "types"
   ],
   "type": "module",
   "sideEffects": [
@@ -27,22 +28,6 @@
       "source": "./src/author/client.ts",
       "default": "./dist/client.js"
     },
-    "./react": {
-      "source": "./src/react/index.ts",
-      "default": "./dist/react.js"
-    },
-    "./react/markdown": {
-      "source": "./src/react/markdown.tsx",
-      "default": "./dist/react/markdown.js"
-    },
-    "./react/markdown-editor": {
-      "source": "./src/react/markdown-editor.tsx",
-      "default": "./dist/react/markdown-editor.js"
-    },
-    "./telephony": {
-      "source": "./src/telephony/index.ts",
-      "default": "./dist/telephony.js"
-    },
     "./vite": {
       "source": "./src/vite.ts",
       "default": "./dist/vite.js"
@@ -59,6 +44,14 @@
     "./_internal/log-context": {
       "source": "./src/server/log-context.ts",
       "default": "./dist/_internal/log-context.js"
+    },
+    "./client/hitch": {
+      "source": "./src/author/client-hitch.ts",
+      "default": "./dist/client/hitch.js"
+    },
+    "./client/react": {
+      "source": "./src/react/index.ts",
+      "default": "./dist/client/react.js"
     }
   },
   "dependencies": {

package/scaffold/.agents/skills/hitch-applets/SKILL.md

@@ -9,6 +9,12 @@ Build small applets against an organization's Hitch data. Keep each applet focus
 
 Treat each applet as an isolated microfrontend. Keep it separate from the data storage layer, and access Hitch data through the SDK.
 
+## Public applets
+
+Set `public: true` for an applet that anonymous visitors can use. It runs as the applet identity. Its manifest grants cap its access.
+
+A public applet cannot use schedules, email, telephony, workflows, or `@hitch42/applet/client/hitch`. Client code calls its server procedures with `api` from `@hitch42/applet/client`.
+
 ## Go deeper
 
 This file holds the common rules. Read each matching reference before you edit an applet. Paths are relative to this file.
@@ -75,7 +81,7 @@ Use the client SDK unless the task needs a secret or an external service:
 
 ```ts
 import { useQuery } from "@tanstack/react-query";
-import { hitch } from "@hitch42/applet/client";
+import { hitch } from "@hitch42/applet/client/hitch";
 
 const deals = useQuery(
   hitch.records.deals.list.queryOptions({
@@ -122,7 +128,7 @@ Do not invent fields or silence type errors with casts. Ask the user when genera
 Upload a file with one call. The SDK creates the file record and sends the bytes directly to storage:
 
 ```ts
-import { hitch } from "@hitch42/applet/client";
+import { hitch } from "@hitch42/applet/client/hitch";
 
 const uploaded = await hitch.files.upload(file); // file is a web File
 ```

package/scaffold/.agents/skills/hitch-applets/references/files.md

@@ -11,7 +11,7 @@ Use the file API to upload bytes, read file metadata, and link files to records.
 - A failed upload throws an `Error` and leaves no usable id. Call `upload(file)` again to retry — the abandoned row is harmless.
 
 ```ts
-import { hitch } from "@hitch42/applet/client";
+import { hitch } from "@hitch42/applet/client/hitch";
 
 const uploaded = await hitch.files.upload(file);
 ```
@@ -34,7 +34,7 @@ Use a TanStack mutation in a React component:
 
 ```ts
 import { useMutation } from "@tanstack/react-query";
-import { hitch } from "@hitch42/applet/client";
+import { hitch } from "@hitch42/applet/client/hitch";
 
 const upload = useMutation({
   mutationFn: (file: File) => hitch.files.upload(file),

package/scaffold/.agents/skills/hitch-applets/references/markdown.md

@@ -9,8 +9,8 @@ Use the SDK components to edit and render markdown with Hitch file images.
 The editor supports GFM tables and task lists. A plain table serializes as GFM. A table with block content in a cell (for example a list) serializes as inline HTML, which the `Markdown` renderer also renders.
 
 ```tsx
-import { hitch } from "@hitch42/applet/client";
-import { MarkdownEditor } from "@hitch42/applet/react/markdown-editor";
+import { hitch } from "@hitch42/applet/client/hitch";
+import { MarkdownEditor } from "@hitch42/applet/client/react";
 
 <MarkdownEditor value={value} onChange={setValue} files={hitch.files} />;
 ```
@@ -31,7 +31,9 @@ The editor uses Tiptap and is large (about 166 KB gzip). Load it lazily when it
 import { lazy, Suspense } from "react";
 
 const MarkdownEditor = lazy(() =>
-  import("@hitch42/applet/react/markdown-editor").then((m) => ({ default: m.MarkdownEditor })),
+  import("@hitch42/applet/client/react").then((m) => ({
+    default: m.MarkdownEditor,
+  })),
 );
 
 <Suspense fallback={<div className="min-h-32" />}>
@@ -39,15 +41,15 @@ const MarkdownEditor = lazy(() =>
 </Suspense>;
 ```
 
-Use the `/react/markdown-editor` path for the lazy import. A lazy import from `@hitch42/applet/react` does not split the editor out when the applet also imports `Markdown`.
+The lazy import splits the editor out even when the page also imports `Markdown` statically: the `applet()` Vite plugin gives the dynamic import its own module.
 
 ## Render markdown
 
 Pass the same files surface to `Markdown`:
 
 ```tsx
-import { hitch } from "@hitch42/applet/client";
-import { Markdown } from "@hitch42/applet/react/markdown";
+import { hitch } from "@hitch42/applet/client/hitch";
+import { Markdown } from "@hitch42/applet/client/react";
 
 <Markdown files={hitch.files}>{value}</Markdown>;
 ```

package/scaffold/.agents/skills/hitch-applets/references/records.md

@@ -2,7 +2,7 @@
 
 Use the generated Hitch contract as the typed data plane.
 
-- Import `hitch` from `@hitch42/applet/client` in client code.
+- Import `hitch` from `@hitch42/applet/client/hitch` in client code. A public applet has no client `hitch`: it calls its own server procedures with `api` from `@hitch42/applet/client`.
 - Import `hitch` from `@hitch42/applet/server` in server code.
 - Read object codes, attribute codes, inputs, and outputs from the generated types.
 - Use only the target applet's `.hitch` types as schema evidence.
@@ -33,7 +33,7 @@ Use TanStack Query options from each generated procedure.
 
 ```ts
 import { useQuery } from "@tanstack/react-query";
-import { hitch } from "@hitch42/applet/client";
+import { hitch } from "@hitch42/applet/client/hitch";
 
 const deals = useQuery(
   hitch.records.deals.query.queryOptions({
@@ -46,7 +46,7 @@ const deals = useQuery(
 
 ```ts
 import { useMutation } from "@tanstack/react-query";
-import { hitch } from "@hitch42/applet/client";
+import { hitch } from "@hitch42/applet/client/hitch";
 
 const createDeal = useMutation(hitch.records.deals.create.mutationOptions());
 

package/scaffold/.github/workflows/hitch.yml

@@ -12,4 +12,4 @@ jobs:
       contents: read
       id-token: write
     # Hitch verifies the called workflow's commit SHA from the OIDC token.
-    uses: hitch-42/actions/.github/workflows/deploy.yml@4097528b45f7e2962eee9b67ff20a09a6c032d60
+    uses: hitch-42/actions/.github/workflows/deploy.yml@01e0cfa0a58c6186d678d425e96d8da330226e55

package/types/public-applet-client-hitch.d.ts

@@ -0,0 +1,2 @@
+// Public applets have no Hitch client SDK. Call your server procedures with api from @hitch42/applet/client.
+export {};

package/dist/build-ueR7XjZT.js

@@ -1,2 +0,0 @@
-import { i as runBuild } from "./build-XHoa_sJL.js";
-export { runBuild };

package/dist/generate-C9bWqdaB.js

@@ -1,2 +0,0 @@
-import { r as runGenerate } from "./generate-BV_emZgy.js";
-export { runGenerate };

package/dist/react/markdown-editor.js

@@ -1,2 +0,0 @@
-import { t as MarkdownEditor } from "../markdown-editor-C5mLHGqu.js";
-export { MarkdownEditor };

package/dist/react/markdown.d.ts

@@ -1,2 +0,0 @@
-import { n as MarkdownFiles, r as MarkdownProps, t as Markdown } from "../markdown-DSHOQIOb.js";
-export { Markdown, MarkdownFiles, MarkdownProps };

package/dist/react/markdown.js

@@ -1,2 +0,0 @@
-import { t as Markdown } from "../markdown-CwlqzBtP.js";
-export { Markdown };

package/dist/react.js

@@ -1,3 +0,0 @@
-import { t as Markdown } from "./markdown-CwlqzBtP.js";
-import { t as MarkdownEditor } from "./markdown-editor-C5mLHGqu.js";
-export { Markdown, MarkdownEditor };