@inneranimalmedia/agentsam-sdk 2.6.4 → 2.6.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (418) hide show
  1. package/AGENTSAM.md +11 -0
  2. package/README.md +15 -9
  3. package/apps/client-cms-editor/AGENTS.md +12 -0
  4. package/apps/client-cms-editor/IMPORT_PROVENANCE.json +8 -0
  5. package/apps/client-cms-editor/README.md +72 -0
  6. package/apps/client-cms-editor/agentsam.app.json +57 -0
  7. package/apps/client-cms-editor/backend/README.md +5 -0
  8. package/apps/client-cms-editor/backend/package.json +22 -0
  9. package/apps/client-cms-editor/backend/src/api/client.ts +200 -0
  10. package/apps/client-cms-editor/backend/src/demo-bootstrap.ts +145 -0
  11. package/apps/client-cms-editor/backend/src/index.ts +6 -0
  12. package/apps/client-cms-editor/backend/src/model.ts +115 -0
  13. package/apps/client-cms-editor/backend/src/preview/bridge.ts +79 -0
  14. package/apps/client-cms-editor/backend/src/preview/urls.ts +55 -0
  15. package/apps/client-cms-editor/backend/src/routing/cms-route.js +293 -0
  16. package/apps/client-cms-editor/backend/src/routing/index.js +10 -0
  17. package/apps/client-cms-editor/backend/src/storefront.ts +52 -0
  18. package/apps/client-cms-editor/backend/tsconfig.json +15 -0
  19. package/apps/client-cms-editor/backend/worker/index.js +34 -0
  20. package/apps/client-cms-editor/backend/wrangler.jsonc +11 -0
  21. package/apps/client-cms-editor/bin/agentsam-cms.mjs +229 -0
  22. package/apps/client-cms-editor/frontend/index.html +12 -0
  23. package/apps/client-cms-editor/frontend/package.json +33 -0
  24. package/apps/client-cms-editor/frontend/src/AgentSamDrawer.tsx +188 -0
  25. package/apps/client-cms-editor/frontend/src/CmsAgentSurface.tsx +191 -0
  26. package/apps/client-cms-editor/frontend/src/CmsEditor.tsx +1345 -0
  27. package/apps/client-cms-editor/frontend/src/env.d.ts +14 -0
  28. package/apps/client-cms-editor/frontend/src/index.ts +8 -0
  29. package/apps/client-cms-editor/frontend/src/lib/content-safety.ts +63 -0
  30. package/apps/client-cms-editor/frontend/src/main.tsx +17 -0
  31. package/apps/client-cms-editor/frontend/src/mount.tsx +51 -0
  32. package/apps/client-cms-editor/frontend/src/styles/agentsam-drawer.css +214 -0
  33. package/apps/client-cms-editor/frontend/src/styles/cmsShell.css +1739 -0
  34. package/apps/client-cms-editor/frontend/src/styles/studio.css +106 -0
  35. package/apps/client-cms-editor/frontend/src/surfaces/CmsDashboard.tsx +313 -0
  36. package/apps/client-cms-editor/frontend/src/surfaces/CmsGuidedChatHero.tsx +121 -0
  37. package/apps/client-cms-editor/frontend/src/surfaces/CmsHubPage.tsx +132 -0
  38. package/apps/client-cms-editor/frontend/src/surfaces/CmsSiteSwitcher.tsx +176 -0
  39. package/apps/client-cms-editor/frontend/src/surfaces/index.ts +5 -0
  40. package/apps/client-cms-editor/frontend/src/surfaces/types.ts +48 -0
  41. package/apps/client-cms-editor/frontend/tsconfig.json +25 -0
  42. package/apps/client-cms-editor/frontend/vite.config.ts +13 -0
  43. package/apps/client-cms-editor/package-lock.json +3832 -0
  44. package/apps/client-cms-editor/package.json +23 -0
  45. package/apps/client-cms-editor/reference/DONOR_README.md +52 -0
  46. package/apps/client-cms-editor/reference/DONOR_package-lock.json +1253 -0
  47. package/apps/client-cms-editor/reference/DONOR_tsconfig.json +15 -0
  48. package/apps/client-cms-editor/shared/cms/package.json +21 -0
  49. package/apps/client-cms-editor/shared/cms/src/agent-context.ts +35 -0
  50. package/apps/client-cms-editor/shared/cms/src/cloudflare-bindings.ts +51 -0
  51. package/apps/client-cms-editor/shared/cms/src/editor-types.ts +58 -0
  52. package/apps/client-cms-editor/shared/cms/src/index.ts +5 -0
  53. package/apps/client-cms-editor/shared/cms/src/publication.ts +24 -0
  54. package/apps/client-cms-editor/shared/cms/src/routes.ts +11 -0
  55. package/apps/client-cms-editor/shared/cms/tsconfig.json +12 -0
  56. package/bin/agentsam-rapid-rust +36 -0
  57. package/docs/AUTH_IDENTITY_CONTRACT.md +2 -0
  58. package/docs/MACHINE_INTELLIGENCE.md +120 -0
  59. package/docs/WINDOWS_RUNTIME_INSTALL.md +30 -0
  60. package/docs/architecture/AGENTSAM_APPLICATION_CONTRACT.md +188 -0
  61. package/docs/architecture/AGENTSAM_RUNTIME_PROTOCOL.md +151 -0
  62. package/docs/architecture/LOCAL_STUDIO_CLOUDFLARE_OAUTH.md +12 -4
  63. package/docs/architecture/R2_SLUG_NAMESPACE.md +20 -0
  64. package/docs/architecture/WORK_PRODUCT_EXTRACTION.md +97 -0
  65. package/docs/brand/AGENT_SAM_ICON_GRAMMAR.md +70 -0
  66. package/docs/content-studio/HOST_MOUNT_CHECKLIST.md +71 -0
  67. package/docs/content-studio/REVISION_GATE_2026-09-27.md +501 -0
  68. package/docs/contracts/capability-install-planner.md +67 -0
  69. package/docs/contracts/environment-vocabulary.md +195 -0
  70. package/docs/contracts/google-cloud-oauth-setup.md +199 -0
  71. package/docs/local-studio/WORKMODE_DONOR_NOTES.md +1 -1
  72. package/docs/plans/LOCAL-STUDIO-GRADUATION-2026-09-26.md +290 -0
  73. package/docs/plans/LOCAL-STUDIO-REAL-APP-CONTRACT-ADDENDUM-2026-09-27.md +394 -0
  74. package/docs/plans/MACHINE-FIRST-APPS-TUI-2026-09-24.md +227 -0
  75. package/docs/plans/TOMORROW-EXTENSIVE-TODO-2026-09-26.md +221 -0
  76. package/docs/plans/TOMORROW-MACHINE-FIRST-BRIEFING.md +145 -0
  77. package/docs/plans/UNIVERSAL-INGEST-MACHINE-FIRST-2026-09-24.md +215 -0
  78. package/docs/plugins.md +2 -2
  79. package/docs/product/AGENTSAM_PRODUCT_EXPERIENCE_STANDARD.md +280 -0
  80. package/docs/product/LOCAL_STUDIO_DESKTOP_EXPERIENCE.md +139 -0
  81. package/docs/product/README.md +8 -0
  82. package/docs/rapid-rust-wasm.md +35 -0
  83. package/migrations/d1/0016_cloudflare_oauth_user_oauth_tokens_ssot.sql +14 -0
  84. package/package.json +73 -14
  85. package/packages/agentsam-brand/README.md +106 -11
  86. package/packages/agentsam-brand/bin/agentsam-brand.mjs +9 -0
  87. package/packages/agentsam-brand/package.json +39 -7
  88. package/packages/agentsam-brand/src/adapters/cloudflare-images.js +453 -0
  89. package/packages/agentsam-brand/src/adapters/cloudflare-r2.js +74 -0
  90. package/packages/agentsam-brand/src/adapters/d1-registry.js +26 -0
  91. package/packages/agentsam-brand/src/adapters/filesystem.js +59 -0
  92. package/packages/agentsam-brand/src/adapters/memory.js +31 -0
  93. package/packages/agentsam-brand/src/cli/controller.js +503 -0
  94. package/packages/agentsam-brand/src/cli/wizard.js +526 -0
  95. package/packages/agentsam-brand/src/core/capabilities.js +201 -0
  96. package/packages/agentsam-brand/src/core/derivatives.js +211 -0
  97. package/packages/agentsam-brand/src/core/errors.js +12 -0
  98. package/packages/agentsam-brand/src/core/ingest.js +195 -0
  99. package/packages/agentsam-brand/src/core/inspect.js +109 -0
  100. package/packages/agentsam-brand/src/core/keys.js +83 -0
  101. package/packages/agentsam-brand/src/core/naming.js +142 -0
  102. package/packages/agentsam-brand/src/core/optimize.js +316 -0
  103. package/packages/agentsam-brand/src/core/pack.js +305 -0
  104. package/packages/agentsam-brand/src/core/plan.js +276 -0
  105. package/packages/agentsam-brand/src/core/preview.js +159 -0
  106. package/packages/agentsam-brand/src/core/processors/cloudflare.js +68 -0
  107. package/packages/agentsam-brand/src/core/processors/contract.js +203 -0
  108. package/packages/agentsam-brand/src/core/processors/index.js +148 -0
  109. package/packages/agentsam-brand/src/core/processors/native.js +82 -0
  110. package/packages/agentsam-brand/src/core/processors/sharp.js +113 -0
  111. package/packages/agentsam-brand/src/core/processors/squoosh-binary.js +195 -0
  112. package/packages/agentsam-brand/src/core/promote.js +288 -0
  113. package/packages/agentsam-brand/src/core/receipts.js +155 -0
  114. package/packages/agentsam-brand/src/core/v2/compile.js +280 -0
  115. package/packages/agentsam-brand/src/core/v2/derivatives-semantic.js +207 -0
  116. package/packages/agentsam-brand/src/core/v2/ingest-graph.js +387 -0
  117. package/packages/agentsam-brand/src/core/v2/roles.js +180 -0
  118. package/packages/agentsam-brand/src/core/v2/schema.js +209 -0
  119. package/packages/agentsam-brand/src/core/v2/templates.js +114 -0
  120. package/packages/agentsam-brand/src/index.js +193 -36
  121. package/packages/agentsam-brand/src/presets/app-icon.json +16 -0
  122. package/packages/agentsam-brand/src/presets/favicon.json +17 -0
  123. package/packages/agentsam-brand/src/presets/hero.json +12 -0
  124. package/packages/agentsam-brand/src/presets/index.js +40 -0
  125. package/packages/agentsam-brand/src/presets/logo.json +12 -0
  126. package/packages/agentsam-brand/src/presets/model.json +8 -0
  127. package/packages/agentsam-brand/src/presets/og-image.json +10 -0
  128. package/packages/agentsam-brand/src/presets/product-shot.json +11 -0
  129. package/packages/agentsam-brand/src/presets/social-image.json +10 -0
  130. package/packages/agentsam-brand/src/presets/web-image.json +10 -0
  131. package/packages/agentsam-contracts/src/artifacts.ts +41 -0
  132. package/packages/agentsam-knowledge/src/autorag/index.js +1 -1
  133. package/packages/agentsam-knowledge/src/providers/index.js +6 -4
  134. package/packages/agentsam-knowledge/src/providers/ollama-endpoint.js +31 -0
  135. package/packages/agentsam-knowledge/test/autorag.test.mjs +22 -1
  136. package/packages/agentsam-nav/package.json +2 -2
  137. package/packages/agentsam-rapid-rust/Cargo.lock +344 -0
  138. package/packages/agentsam-rapid-rust/Cargo.toml +18 -0
  139. package/packages/agentsam-rapid-rust/README.md +5 -0
  140. package/packages/agentsam-rapid-rust/src/main.rs +718 -0
  141. package/packages/agentsam-rapid-rust/templates/api/Cargo.toml.tmpl +18 -0
  142. package/packages/agentsam-rapid-rust/templates/api/src/lib.rs.tmpl +17 -0
  143. package/packages/agentsam-rapid-rust/templates/common/README.md.tmpl +22 -0
  144. package/packages/agentsam-rapid-rust/templates/common/package.json.tmpl +12 -0
  145. package/packages/agentsam-rapid-rust/templates/common/wrangler.toml.tmpl +6 -0
  146. package/packages/agentsam-rapid-rust/templates/crypto-auth/Cargo.toml.tmpl +21 -0
  147. package/packages/agentsam-rapid-rust/templates/crypto-auth/src/lib.rs.tmpl +32 -0
  148. package/packages/agentsam-rapid-rust/templates/data-processor/Cargo.toml.tmpl +18 -0
  149. package/packages/agentsam-rapid-rust/templates/data-processor/src/lib.rs.tmpl +41 -0
  150. package/packages/agentsam-rapid-rust/templates/shared-core/Cargo.toml.tmpl +9 -0
  151. package/packages/agentsam-rapid-rust/templates/shared-core/core/Cargo.toml.tmpl +7 -0
  152. package/packages/agentsam-rapid-rust/templates/shared-core/core/src/lib.rs.tmpl +23 -0
  153. package/packages/agentsam-rapid-rust/templates/shared-core/worker/Cargo.toml.tmpl +12 -0
  154. package/packages/agentsam-rapid-rust/templates/shared-core/worker/src/lib.rs.tmpl +16 -0
  155. package/packages/agentsam-rapid-rust/templates/shared-core/wrangler.toml.tmpl +6 -0
  156. package/packages/agentsam-repository/src/index.js +1 -0
  157. package/packages/agentsam-repository/src/merkle/semantic.js +3 -10
  158. package/packages/agentsam-repository/src/source-types.js +85 -0
  159. package/packages/agentsam-vault/README.md +96 -0
  160. package/packages/agentsam-vault/package.json +32 -0
  161. package/packages/agentsam-vault/src/contracts/credential.d.ts +78 -0
  162. package/packages/agentsam-vault/src/contracts/credential.js +132 -0
  163. package/packages/agentsam-vault/src/crypto/aes-gcm.d.ts +30 -0
  164. package/packages/agentsam-vault/src/crypto/aes-gcm.js +107 -0
  165. package/packages/agentsam-vault/src/crypto/oauth-envelope.js +150 -0
  166. package/packages/agentsam-vault/src/index.d.ts +9 -0
  167. package/packages/agentsam-vault/src/index.js +27 -0
  168. package/packages/agentsam-vault/src/providers/registry.js +90 -0
  169. package/packages/agentsam-vault/src/runtime/resolver.js +77 -0
  170. package/packages/agentsam-workbench/README.md +24 -0
  171. package/packages/agentsam-workbench/package.json +38 -0
  172. package/packages/agentsam-workbench/src/agent/AgentPanel.tsx +41 -0
  173. package/packages/agentsam-workbench/src/agent/ArtifactCard.tsx +9 -0
  174. package/packages/agentsam-workbench/src/agent/Composer.tsx +102 -0
  175. package/packages/agentsam-workbench/src/agent/ConnectedAgentPanel.tsx +194 -0
  176. package/packages/agentsam-workbench/src/agent/ContextualComposer.tsx +788 -0
  177. package/packages/agentsam-workbench/src/agent/GoalStatusStrip.tsx +38 -0
  178. package/packages/agentsam-workbench/src/agent/MiniAgentSam.tsx +86 -0
  179. package/packages/agentsam-workbench/src/agent/ModelSelect.tsx +19 -0
  180. package/packages/agentsam-workbench/src/agent/Thread.tsx +56 -0
  181. package/packages/agentsam-workbench/src/agent/ToolReceipt.tsx +11 -0
  182. package/packages/agentsam-workbench/src/agent/contextual-composer.css +611 -0
  183. package/packages/agentsam-workbench/src/agent/index.ts +10 -0
  184. package/packages/agentsam-workbench/src/agent/mini-agentsam.css +12 -0
  185. package/packages/agentsam-workbench/src/browser/BrowserFrame.tsx +37 -0
  186. package/packages/agentsam-workbench/src/browser/index.ts +1 -0
  187. package/packages/agentsam-workbench/src/index.ts +6 -0
  188. package/packages/agentsam-workbench/src/project-control.css +160 -0
  189. package/packages/agentsam-workbench/src/projects/ProjectsSurface.tsx +131 -0
  190. package/packages/agentsam-workbench/src/projects/index.ts +1 -0
  191. package/packages/agentsam-workbench/src/shell/Breadcrumb.tsx +35 -0
  192. package/packages/agentsam-workbench/src/shell/ResizableStage.tsx +99 -0
  193. package/packages/agentsam-workbench/src/shell/SidePanel.tsx +5 -0
  194. package/packages/agentsam-workbench/src/shell/index.ts +4 -0
  195. package/packages/agentsam-workbench/src/shell/surfaceRegistry.ts +29 -0
  196. package/packages/agentsam-workbench/src/terminal/TerminalSurface.tsx +5 -0
  197. package/packages/agentsam-workbench/src/terminal/index.ts +1 -0
  198. package/packages/agentsam-workbench/src/timeline/GanttBoard.tsx +258 -0
  199. package/packages/agentsam-workbench/src/timeline/index.ts +1 -0
  200. package/packages/agentsam-workbench/tsconfig.json +13 -0
  201. package/packages/connectors/cloudflare/OAUTH_STORAGE_AUDIT.md +53 -0
  202. package/packages/connectors/cloudflare/package.json +3 -1
  203. package/packages/connectors/cloudflare/src/api-client.js +279 -0
  204. package/packages/connectors/cloudflare/src/capabilities.js +585 -0
  205. package/packages/connectors/cloudflare/src/credential.js +318 -0
  206. package/packages/connectors/cloudflare/src/families/brand-protection.js +123 -0
  207. package/packages/connectors/cloudflare/src/families/keyless.js +114 -0
  208. package/packages/connectors/cloudflare/src/families/pages.js +151 -0
  209. package/packages/connectors/cloudflare/src/families/scanner.js +123 -0
  210. package/packages/connectors/cloudflare/src/families/snippets.js +207 -0
  211. package/packages/connectors/cloudflare/src/families/tag-gateway.js +46 -0
  212. package/packages/connectors/cloudflare/src/families/tags.js +124 -0
  213. package/packages/connectors/cloudflare/src/families/token-validation.js +95 -0
  214. package/packages/connectors/cloudflare/src/families/workflows.js +156 -0
  215. package/packages/connectors/cloudflare/src/index.js +102 -265
  216. package/packages/connectors/cloudflare/src/oauth-persist.js +336 -0
  217. package/packages/connectors/cloudflare/src/owner.js +42 -12
  218. package/packages/connectors/cloudflare/src/permission-options.js +1064 -0
  219. package/packages/connectors/cloudflare/src/routes.js +309 -144
  220. package/packages/connectors/cloudflare/src/scope-catalog.js +345 -0
  221. package/packages/connectors/cloudflare/src/vault.js +2 -2
  222. package/packages/connectors/cloudflare/tests/capabilities.test.mjs +276 -0
  223. package/packages/connectors/cloudflare/tests/connector.test.mjs +26 -30
  224. package/packages/connectors/cloudflare/tests/oauth-persist.test.mjs +125 -0
  225. package/packages/identity/.agentsam/features/oauth-login-portal/providers.json +22 -2
  226. package/packages/identity/.agentsam/features/oauth-login-portal/resources.json +10 -4
  227. package/packages/identity/.agentsam/features/oauth-login-portal/routes.json +20 -0
  228. package/packages/identity/README.md +1 -1
  229. package/packages/identity/backend/README.md +1 -1
  230. package/packages/identity/migrations/D1_SCHEMA_MAPPING.md +3 -2
  231. package/packages/identity/migrations/sqlite/004_identity_oauth_consent_catalog.sql +48 -0
  232. package/packages/identity/package.json +4 -3
  233. package/packages/identity/scripts/local-identity-bridge.mjs +184 -0
  234. package/packages/identity/scripts/preview-auth-portal.mjs +7 -7
  235. package/packages/identity/src/adapters/cloudflare-d1/index.js +31 -2
  236. package/packages/identity/src/adapters/sqlite/index.js +4 -1
  237. package/packages/identity/src/contracts/auth-config.js +28 -8
  238. package/packages/identity/src/contracts/external-identity.js +1 -1
  239. package/packages/identity/src/contracts/provider.js +1 -0
  240. package/packages/identity/src/frontend/auth-portal/README.md +2 -1
  241. package/packages/identity/src/frontend/auth-portal/pages/login.html +6 -5
  242. package/packages/identity/src/frontend/auth-portal/pages/reset.html +6 -5
  243. package/packages/identity/src/frontend/auth-portal/pages/signup.html +6 -5
  244. package/packages/identity/src/frontend/auth-portal/shared/company-branding.js +1 -1
  245. package/packages/identity/src/frontend/auth-portal/shared/desktop-identity-bridge.js +207 -0
  246. package/packages/identity/src/index.js +16 -0
  247. package/packages/identity/src/migrations/0001_identity_core.sql +19 -2
  248. package/packages/identity/src/migrations/0003_accounts_ssot.sql +20 -0
  249. package/packages/identity/src/migrations/README.md +5 -2
  250. package/packages/identity/src/oauth/README.md +10 -5
  251. package/packages/identity/src/oauth/consent-view.js +388 -0
  252. package/packages/identity/src/oauth/credentials.js +31 -11
  253. package/packages/identity/src/oauth/google-desktop-exchange.js +173 -0
  254. package/packages/identity/src/providers/cloudflare/oauth.js +3 -4
  255. package/packages/identity/src/providers/cloudflare/profile.js +49 -14
  256. package/packages/identity/src/providers/iam/index.js +27 -5
  257. package/packages/identity/src/server/identity-service.js +31 -2
  258. package/packages/identity/src/server/worker-router.js +111 -81
  259. package/packages/identity/tests/auth-config.test.mjs +3 -2
  260. package/packages/identity/tests/identity-init-scaffold.test.mjs +3 -0
  261. package/packages/identity/tests/identity-service.test.mjs +16 -0
  262. package/packages/identity/tests/native-session-worker.test.mjs +64 -0
  263. package/packages/identity/tests/oauth-consent-view.test.mjs +106 -0
  264. package/packages/identity/tests/oauth-credentials.test.mjs +17 -4
  265. package/packages/identity/tests/oauth-presets-accounts-ssot.test.mjs +58 -0
  266. package/packages/identity/tests/preview-auth-portal.test.mjs +3 -3
  267. package/packages/runtime-protocol/src/index.js +154 -0
  268. package/packages/theme-scenes/README.md +164 -0
  269. package/packages/theme-scenes/package.json +53 -0
  270. package/packages/theme-scenes/src/blocks/index.js +30 -0
  271. package/packages/theme-scenes/src/contracts/index.js +286 -0
  272. package/packages/theme-scenes/src/demos/index.js +65 -0
  273. package/packages/theme-scenes/src/index.js +75 -0
  274. package/packages/theme-scenes/src/presets/index.js +263 -0
  275. package/packages/theme-scenes/src/runtime/compile.js +119 -0
  276. package/packages/theme-scenes/src/scenes/index.js +146 -0
  277. package/packages/theme-scenes/src/shell/index.js +47 -0
  278. package/packages/theme-scenes/src/themes/index.js +129 -0
  279. package/packages/theme-scenes/src/visuals/index.js +41 -0
  280. package/packages/theme-scenes/test/theme-scenes.test.mjs +179 -0
  281. package/packages/work-graph/src/index.js +34 -1
  282. package/packages/work-graph/src/renderers/gantt-model.js +24 -0
  283. package/packages/work-graph/test/work-graph.test.mjs +27 -7
  284. package/protocol/README.md +15 -7
  285. package/protocol/apps/agentsam.app.v1.schema.json +89 -7
  286. package/protocol/apps/agentsam.host-install.v1.schema.json +36 -0
  287. package/protocol/assets/README.md +9 -0
  288. package/protocol/assets/asset-record.v1.schema.json +64 -0
  289. package/protocol/runtime/agentsam.runtime.v1.schema.json +75 -0
  290. package/protocol/scoring/README.md +10 -0
  291. package/protocol/scoring/scorecard.v1.schema.json +65 -0
  292. package/protocol/ui/icon-registry.mjs +1 -0
  293. package/registry/cms-rust-machine-20260928/installable-products.json +31 -0
  294. package/registry/cms-rust-machine-20260928/manifest.json +22 -0
  295. package/registry/cms-rust-machine-20260928/migration.sql +237 -0
  296. package/registry/cms-rust-machine-20260928/receipt.json +21 -0
  297. package/registry/cms-rust-machine-20260928/receipt.sql +27 -0
  298. package/scripts/build_rapid_rust_cli.py +83 -0
  299. package/src/attachments/index.js +6 -0
  300. package/src/attachments/intake.js +235 -0
  301. package/src/capabilities/repository-snapshot.js +19 -2
  302. package/src/cli/command-catalog.js +8 -0
  303. package/src/cli.js +182 -26
  304. package/src/commands/account-auth.js +94 -8
  305. package/src/commands/app.js +307 -3
  306. package/src/commands/billing.js +127 -0
  307. package/src/commands/brand.js +74 -60
  308. package/src/commands/cheat-sheet.js +154 -0
  309. package/src/commands/cloudflare-login.js +222 -0
  310. package/src/commands/cloudflare.js +453 -23
  311. package/src/commands/codebaseindex.js +6 -1
  312. package/src/commands/compute.js +4 -0
  313. package/src/commands/connections.js +11 -5
  314. package/src/commands/credentials.js +116 -0
  315. package/src/commands/gcloud-auth.js +427 -0
  316. package/src/commands/google-cloud.js +375 -0
  317. package/src/commands/identity-init.js +2 -2
  318. package/src/commands/mcp.js +226 -33
  319. package/src/commands/ollama.js +3 -2
  320. package/src/commands/plugins.js +7 -2
  321. package/src/commands/product.js +36 -0
  322. package/src/commands/runtime-status.js +28 -9
  323. package/src/commands/runtime.js +313 -0
  324. package/src/commands/rust.js +24 -0
  325. package/src/commands/setup.js +279 -0
  326. package/src/commands/shell.js +16 -3
  327. package/src/commands/start-local.js +2 -2
  328. package/src/commands/terminal.js +171 -0
  329. package/src/commands/update.js +140 -0
  330. package/src/commands/whoami.js +329 -65
  331. package/src/features/resolve.js +1 -0
  332. package/src/index.js +4 -0
  333. package/src/indexing/ingest/inventory.js +254 -19
  334. package/src/indexing/ingest/materials.js +3 -9
  335. package/src/indexing/ingest/style-evidence.js +181 -0
  336. package/src/knowledge/source.js +3 -3
  337. package/src/lib/account-session.js +11 -4
  338. package/src/lib/app-authority.js +172 -0
  339. package/src/lib/auth.js +94 -21
  340. package/src/lib/core-client.js +5 -6
  341. package/src/lib/credentials-audit.js +451 -0
  342. package/src/lib/deploy/health.js +24 -6
  343. package/src/lib/detect-context.js +7 -1
  344. package/src/lib/google-cloud-connection.js +270 -0
  345. package/src/lib/google-cloud-inventory.js +385 -0
  346. package/src/lib/google-desktop-oauth.js +372 -0
  347. package/src/lib/google-studio-brokered-oauth.js +158 -0
  348. package/src/lib/identity-scaffold.js +24 -6
  349. package/src/lib/init-options.js +192 -0
  350. package/src/lib/local-scaffold.js +48 -16
  351. package/src/lib/provider-command-remediation.js +308 -0
  352. package/src/lib/provider-credentials.js +8 -0
  353. package/src/lib/scaffold/index.js +8 -2
  354. package/src/lib/scaffold/mcp-server.js +43 -0
  355. package/src/lib/scaffold/templates/mcp-server/index.js +397 -0
  356. package/src/lib/scaffold/templates/mcp-server/presets.js +39 -0
  357. package/src/lib/scaffold/wizards/cms.js +93 -0
  358. package/src/lib/scaffold/wizards/mcp-server.js +61 -0
  359. package/src/lib/setup/contract.js +26 -0
  360. package/src/lib/setup/discover.js +116 -0
  361. package/src/lib/setup/execute.js +205 -0
  362. package/src/lib/setup/planner.js +134 -0
  363. package/src/lib/setup/recipes.js +235 -0
  364. package/src/lib/setup/runtime-persist.js +197 -0
  365. package/src/lib/setup/runtime.js +394 -0
  366. package/src/lib/slash-commands.js +2 -0
  367. package/src/lib/terminal/machine-identity.js +95 -0
  368. package/src/lib/terminal-local.js +164 -0
  369. package/src/lib/terminal-scopes.js +52 -0
  370. package/src/lib/whoami-capabilities.js +184 -0
  371. package/src/local-pty/server.js +34 -5
  372. package/src/mcp/authority.js +58 -108
  373. package/src/mcp/client-adapters.js +68 -144
  374. package/src/mcp/client.js +142 -122
  375. package/src/mcp/cloudflare-bundles.js +225 -0
  376. package/src/mcp/index.js +12 -0
  377. package/src/plugins/cloudflare.js +1 -1
  378. package/src/providers/ollama-chat.js +2 -1
  379. package/src/sam/types.js +27 -2
  380. package/src/security/inventory.js +12 -2
  381. package/src/security/local-vault.js +2 -0
  382. package/src/security/scan.js +1 -1
  383. package/test/account-session.test.mjs +3 -3
  384. package/test/app-authority-context.test.mjs +32 -0
  385. package/test/cli/codebaseindex-plan-ux.test.mjs +1 -1
  386. package/test/cli/mcp-client.test.mjs +21 -10
  387. package/test/cli/runtime-persist.test.mjs +56 -0
  388. package/test/cli/rust-command.test.mjs +21 -0
  389. package/test/credentials-audit.test.mjs +113 -0
  390. package/test/deploy-health-scan.test.mjs +29 -1
  391. package/test/gcloud-auth.test.mjs +111 -0
  392. package/test/google-cloud-connection.test.mjs +83 -0
  393. package/test/google-cloud-inventory.test.mjs +64 -0
  394. package/test/init-options.test.mjs +35 -0
  395. package/test/integration/app-command.test.mjs +30 -0
  396. package/test/integration/cad-project.test.mjs +4 -1
  397. package/test/integration/cms-app-scaffold.test.mjs +71 -0
  398. package/test/integration/cms-site-tenancy-contract.test.mjs +3 -2
  399. package/test/integration/codebaseindex-ingest.test.mjs +48 -0
  400. package/test/integration/features-resolve.test.mjs +30 -11
  401. package/test/integration/inspect-path-cli.test.mjs +46 -0
  402. package/test/integration/inventory-evidence.test.mjs +125 -0
  403. package/test/integration/runtime-status.integration.test.mjs +2 -1
  404. package/test/knowledge.test.mjs +35 -1
  405. package/test/loopback-oauth.test.mjs +53 -0
  406. package/test/ollama.test.mjs +22 -0
  407. package/test/security.test.mjs +23 -0
  408. package/test/setup-planner.test.mjs +74 -0
  409. package/test/setup-runtime.test.mjs +51 -0
  410. package/test/terminal/local-pty.mock.test.mjs +3 -1
  411. package/test/terminal-machine-identity.test.mjs +88 -0
  412. package/test/whoami-resume.test.mjs +27 -6
  413. package/packages/agentsam-brand/test/brand-scan.test.mjs +0 -106
  414. package/packages/work-graph/prototype/README.md +0 -32
  415. package/packages/work-graph/prototype/data/demo-workgraph.js +0 -47
  416. package/packages/work-graph/prototype/renderers/timeline-model.js +0 -21
  417. package/packages/work-graph/prototype/renderers/workgraph-runtime.js +0 -38
  418. package/packages/work-graph/prototype-gnantt.html +0 -655
@@ -0,0 +1,526 @@
1
+ /**
2
+ * Interactive brand promote wizard — generic, prompt-injected.
3
+ * No product identity branches. Cloudflare discovery is optional CLI enhancement.
4
+ */
5
+ import fs from 'node:fs';
6
+ import path from 'node:path';
7
+ import { inspectBrandAsset, isExcludedIntermediate } from '../core/inspect.js';
8
+ import { formatBytesKb } from '../core/derivatives.js';
9
+ import { getDerivativePreset, listDerivativePresets } from '../presets/index.js';
10
+ import { expandHome, scanDropFolder, waitForDrop, resolveSourceInput } from '../core/ingest.js';
11
+ import { buildBrandPack } from '../core/pack.js';
12
+ import { previewBrandPack } from '../core/preview.js';
13
+ import { MemoryStorageAdapter } from '../adapters/memory.js';
14
+ import { FilesystemStorageAdapter } from '../adapters/filesystem.js';
15
+ import { CloudflareR2StorageAdapter } from '../adapters/cloudflare-r2.js';
16
+ import { CloudflareImagesDeliveryAdapter } from '../adapters/cloudflare-images.js';
17
+
18
+ async function downloadUrl(url, destPath, fetchImpl = globalThis.fetch) {
19
+ const res = await fetchImpl(url);
20
+ if (!res.ok) throw new Error(`download_failed:${res.status}`);
21
+ const buf = Buffer.from(await res.arrayBuffer());
22
+ fs.mkdirSync(path.dirname(destPath), { recursive: true });
23
+ fs.writeFileSync(destPath, buf);
24
+ return destPath;
25
+ }
26
+
27
+ function r2Configured(env = process.env) {
28
+ return Boolean(String(env.CLOUDFLARE_ACCOUNT_ID || '').trim()
29
+ && (String(env.CLOUDFLARE_API_TOKEN || '').trim()
30
+ || String(env.R2_ACCESS_KEY_ID || '').trim()));
31
+ }
32
+
33
+ export async function runBrandPromoteWizard(options = {}) {
34
+ const p = options.prompts;
35
+ if (!p?.select || !p?.text || !p?.confirm) throw new Error('wizard_prompts_required');
36
+ const cwd = path.resolve(options.cwd || process.cwd());
37
+ const workDir = path.join(cwd, '.agentsam', 'brand', 'work', `promote-${Date.now()}`);
38
+ fs.mkdirSync(workDir, { recursive: true });
39
+
40
+ const cancelled = (value) => {
41
+ if (p.isCancel?.(value)) {
42
+ p.cancel?.('Brand promote cancelled.');
43
+ return true;
44
+ }
45
+ return false;
46
+ };
47
+
48
+ p.intro?.('Brand asset promotion');
49
+
50
+ // 1. Source
51
+ const sourceKind = await p.select({
52
+ message: 'How will you provide the master asset?',
53
+ options: [
54
+ { value: 'path', label: 'Local file path', hint: 'drag-drop works' },
55
+ { value: 'url', label: 'URL / link' },
56
+ { value: 'drop', label: 'Drop-in folder', hint: '.agentsam/brand/inbox' },
57
+ { value: 'stdin', label: 'Stdin bytes', hint: 'pipe image → agentsam brand promote --source -' },
58
+ ],
59
+ });
60
+ if (cancelled(sourceKind)) return { cancelled: true, stage: 'source' };
61
+
62
+ let sourcePath = null;
63
+ let markPath = null;
64
+
65
+ if (sourceKind === 'path') {
66
+ const answer = await p.text({
67
+ message: 'File path',
68
+ placeholder: './assets/logo-master.png',
69
+ validate: (v) => {
70
+ const abs = expandHome(v);
71
+ if (!abs || !fs.existsSync(abs)) return 'File not found';
72
+ if (isExcludedIntermediate(abs)) return 'Tracing / .pbm intermediates are not product assets';
73
+ return undefined;
74
+ },
75
+ });
76
+ if (cancelled(answer)) return { cancelled: true, stage: 'source' };
77
+ const abs = expandHome(answer);
78
+ const inspected = inspectBrandAsset(abs);
79
+ if (inspected.content_type === 'image/svg+xml') markPath = abs;
80
+ else sourcePath = abs;
81
+ } else if (sourceKind === 'url') {
82
+ const answer = await p.text({
83
+ message: 'Asset URL',
84
+ placeholder: 'https://…',
85
+ validate: (v) => {
86
+ try {
87
+ const u = new URL(String(v || ''));
88
+ if (!/^https?:$/.test(u.protocol)) return 'http(s) URL required';
89
+ return undefined;
90
+ } catch {
91
+ return 'Invalid URL';
92
+ }
93
+ },
94
+ });
95
+ if (cancelled(answer)) return { cancelled: true, stage: 'source' };
96
+ const url = String(answer).trim();
97
+ const ext = path.extname(new URL(url).pathname) || '.png';
98
+ const dest = path.join(workDir, `download${ext}`);
99
+ p.note?.(`Fetching ${url}`, 'Download');
100
+ await downloadUrl(url, dest, options.fetchImpl);
101
+ const inspected = inspectBrandAsset(dest);
102
+ if (inspected.content_type === 'image/svg+xml') markPath = dest;
103
+ else sourcePath = dest;
104
+ } else if (sourceKind === 'stdin') {
105
+ p.note?.(
106
+ 'Stdin mode works best scripted:\n cat master.png | agentsam brand promote --brand acme --asset logo --source - --preset logo',
107
+ 'Stdin',
108
+ );
109
+ if (!process.stdin.isTTY) {
110
+ const ingested = await resolveSourceInput({ source: '-', workDir, cwd });
111
+ sourcePath = ingested.path;
112
+ } else {
113
+ p.cancel?.('No piped stdin — re-run with a pipe or pick another source.');
114
+ return { cancelled: true, stage: 'source' };
115
+ }
116
+ } else {
117
+ const defaultDrop = path.join(cwd, '.agentsam', 'brand', 'inbox');
118
+ fs.mkdirSync(defaultDrop, { recursive: true });
119
+ const answer = await p.text({
120
+ message: 'Drop folder',
121
+ initialValue: defaultDrop,
122
+ placeholder: '.agentsam/brand/inbox',
123
+ validate: (v) => {
124
+ const abs = expandHome(v);
125
+ if (!abs) return 'Folder required';
126
+ try {
127
+ fs.mkdirSync(abs, { recursive: true });
128
+ return undefined;
129
+ } catch {
130
+ return 'Cannot create folder';
131
+ }
132
+ },
133
+ });
134
+ if (cancelled(answer)) return { cancelled: true, stage: 'source' };
135
+ const dir = expandHome(answer);
136
+ const wait = await p.confirm({
137
+ message: 'Wait for a file to appear (watch)?',
138
+ initialValue: false,
139
+ });
140
+ if (cancelled(wait)) return { cancelled: true, stage: 'source' };
141
+
142
+ let scan;
143
+ try {
144
+ scan = wait ? await waitForDrop({ dir, timeoutMs: 120_000 }) : scanDropFolder(dir);
145
+ } catch (err) {
146
+ p.cancel?.(err?.message || 'Drop folder empty');
147
+ return { cancelled: true, stage: 'source' };
148
+ }
149
+ sourcePath = scan.sourcePath || null;
150
+ markPath = scan.markPath || null;
151
+ if (!sourcePath && !markPath) {
152
+ p.cancel?.('No usable PNG/SVG found.');
153
+ return { cancelled: true, stage: 'source' };
154
+ }
155
+ p.note?.(
156
+ [
157
+ sourcePath ? `source heuristic: ${path.basename(sourcePath)} (largest PNG)` : null,
158
+ markPath ? `mark heuristic: ${path.basename(markPath)}` : null,
159
+ 'Override later by editing the manifest if needed.',
160
+ ].filter(Boolean).join('\n'),
161
+ 'Scan heuristics (overridable)',
162
+ );
163
+ }
164
+
165
+ // 2. Identity — never seed agentsam / product paths
166
+ const brand = await p.text({
167
+ message: 'Brand id (slug — never an account id)',
168
+ placeholder: 'acme',
169
+ validate: (v) => {
170
+ const s = String(v || '').trim().toLowerCase();
171
+ if (!/^[a-z0-9][a-z0-9._-]*$/i.test(s)) return 'Invalid id';
172
+ if (s === 'agentsam' || s === 'agent-sam') return 'Use your customer brand slug — not a product name';
173
+ return undefined;
174
+ },
175
+ });
176
+ if (cancelled(brand)) return { cancelled: true, stage: 'identity' };
177
+
178
+ const assetType = await p.select({
179
+ message: 'Asset role',
180
+ options: [
181
+ { value: 'app-icon', label: 'App icon' },
182
+ { value: 'logo', label: 'Logo' },
183
+ { value: 'favicon', label: 'Favicon' },
184
+ { value: 'og-image', label: 'OG / social image' },
185
+ { value: 'mark', label: 'Mark' },
186
+ { value: 'photography', label: 'Photography' },
187
+ { value: 'illustration', label: 'Illustration' },
188
+ { value: 'custom', label: 'Custom id…' },
189
+ ],
190
+ });
191
+ if (cancelled(assetType)) return { cancelled: true, stage: 'identity' };
192
+
193
+ let asset = assetType;
194
+ if (assetType === 'custom') {
195
+ const custom = await p.text({
196
+ message: 'Asset id',
197
+ validate: (v) => (/^[a-z0-9][a-z0-9._-]*$/i.test(String(v || '').trim()) ? undefined : 'Invalid id'),
198
+ });
199
+ if (cancelled(custom)) return { cancelled: true, stage: 'identity' };
200
+ asset = String(custom).trim().toLowerCase();
201
+ }
202
+
203
+ const version = await p.text({
204
+ message: 'Version',
205
+ initialValue: 'v1',
206
+ validate: (v) => (/^[a-z0-9][a-z0-9._-]*$/i.test(String(v || '').trim()) ? undefined : 'Invalid'),
207
+ });
208
+ if (cancelled(version)) return { cancelled: true, stage: 'identity' };
209
+
210
+ const identity = {
211
+ brand: String(brand).trim().toLowerCase(),
212
+ asset: String(asset).trim().toLowerCase(),
213
+ version: String(version).trim().toLowerCase(),
214
+ };
215
+
216
+ // SEO (once per asset) — mirrored into pack manifest + CF Images metadata
217
+ const altText = await p.text({
218
+ message: 'Alt text (SEO / a11y)',
219
+ placeholder: `${identity.brand} ${identity.asset}`,
220
+ });
221
+ if (cancelled(altText)) return { cancelled: true, stage: 'seo' };
222
+ const seoTitle = await p.text({
223
+ message: 'Title (optional)',
224
+ placeholder: '',
225
+ });
226
+ if (cancelled(seoTitle)) return { cancelled: true, stage: 'seo' };
227
+ const seoDescription = await p.text({
228
+ message: 'Description (optional)',
229
+ placeholder: '',
230
+ });
231
+ if (cancelled(seoDescription)) return { cancelled: true, stage: 'seo' };
232
+
233
+ const seo = {
234
+ alt_text: String(altText || '').trim() || null,
235
+ title: String(seoTitle || '').trim() || null,
236
+ description: String(seoDescription || '').trim() || null,
237
+ };
238
+
239
+ // 3. Derivatives — declarative presets only
240
+ const presets = listDerivativePresets();
241
+ const defaultPreset = ['app-icon', 'logo', 'favicon', 'og-image'].includes(identity.asset)
242
+ ? identity.asset
243
+ : 'none';
244
+ const variantChoice = await p.select({
245
+ message: 'Derivative strategy',
246
+ options: [
247
+ { value: 'none', label: 'Original only' },
248
+ ...presets.map((pr) => ({
249
+ value: pr.id,
250
+ label: pr.label,
251
+ hint: pr.description,
252
+ })),
253
+ { value: 'custom', label: 'Custom (enter --derive style later via manifest)' },
254
+ ],
255
+ initialValue: defaultPreset === 'none' ? 'none' : defaultPreset,
256
+ });
257
+ if (cancelled(variantChoice)) return { cancelled: true, stage: 'derivatives' };
258
+
259
+ let derivatives = [];
260
+ let presetId = null;
261
+ if (variantChoice !== 'none' && variantChoice !== 'custom') {
262
+ presetId = variantChoice;
263
+ derivatives = getDerivativePreset(variantChoice)?.derivatives || [];
264
+ }
265
+
266
+ // 4. Destinations — storage vs delivery are separate layers
267
+ const storageOptions = [
268
+ { value: 'local', label: 'Local filesystem', hint: '.agentsam/brand-store' },
269
+ { value: 'memory', label: 'In-memory (plan / test)' },
270
+ { value: 'plan_only', label: 'Plan + receipt only', hint: 'no storage write' },
271
+ ];
272
+ if (r2Configured()) {
273
+ storageOptions.unshift({
274
+ value: 'r2',
275
+ label: 'Cloudflare R2',
276
+ hint: 'wrangler r2 object put (slug-keyed)',
277
+ });
278
+ }
279
+
280
+ const destChoice = await p.select({
281
+ message: 'Storage destination',
282
+ options: storageOptions,
283
+ });
284
+ if (cancelled(destChoice)) return { cancelled: true, stage: 'destinations' };
285
+
286
+ let storageAdapter = null;
287
+ let planOnly = destChoice === 'plan_only';
288
+ let storageDest = null;
289
+ if (destChoice === 'local') {
290
+ storageAdapter = new FilesystemStorageAdapter({
291
+ rootDir: path.join(cwd, '.agentsam', 'brand-store'),
292
+ });
293
+ storageDest = { provider: 'filesystem', root: '.agentsam/brand-store' };
294
+ } else if (destChoice === 'memory') {
295
+ storageAdapter = new MemoryStorageAdapter();
296
+ storageDest = { provider: 'memory' };
297
+ } else if (destChoice === 'r2') {
298
+ const bucket = await p.text({
299
+ message: 'R2 bucket name',
300
+ placeholder: 'agentsam-assets',
301
+ validate: (v) => (String(v || '').trim() ? undefined : 'Bucket required'),
302
+ });
303
+ if (cancelled(bucket)) return { cancelled: true, stage: 'destinations' };
304
+ storageAdapter = new CloudflareR2StorageAdapter({
305
+ bucket: String(bucket).trim(),
306
+ cwd,
307
+ });
308
+ storageDest = { provider: 'cloudflare-r2', bucket: String(bucket).trim() };
309
+ } else {
310
+ storageDest = { provider: 'plan_only' };
311
+ }
312
+
313
+ // Cloudflare Images is DELIVERY — only offer when configured; verify against API
314
+ const deliveryProbe = new CloudflareImagesDeliveryAdapter();
315
+ const caps = await deliveryProbe.capabilities();
316
+ let useDelivery = false;
317
+ let deliveryAdapter = null;
318
+ let deliveryDest = null;
319
+
320
+ if (caps.configured && caps.account_resolved) {
321
+ const verify = await deliveryProbe.verifyConnection();
322
+ p.note?.(
323
+ [
324
+ 'Cloudflare Images',
325
+ ` Account id ${verify.config?.account_id || '—'}`,
326
+ ` Account hash ${verify.config?.account_hash || '— (set CLOUDFLARE_IMAGES_ACCOUNT_HASH)'}`,
327
+ ` Delivery base ${verify.config?.delivery_base || '—'}`,
328
+ ` Authentication ● API token (${verify.config?.token_env || 'unknown'})`,
329
+ ` Permission ${verify.config?.permission || caps.required_permission}`,
330
+ ` Policy ${caps.policy || 'canonical_png'}`,
331
+ verify.authorized
332
+ ? ' Credential verified against Cloudflare ✓'
333
+ : ` Credential ${verify.error || 'not verified'}`,
334
+ ].join('\n'),
335
+ 'Delivery capability',
336
+ );
337
+ if (verify.authorized) {
338
+ const answer = await p.confirm({
339
+ message: 'Also publish to Cloudflare Images (real Images API)?',
340
+ initialValue: false,
341
+ });
342
+ if (cancelled(answer)) return { cancelled: true, stage: 'destinations' };
343
+ useDelivery = Boolean(answer);
344
+ if (useDelivery) {
345
+ deliveryAdapter = deliveryProbe;
346
+ deliveryDest = {
347
+ provider: 'cloudflare-images',
348
+ account_id: verify.config.account_id,
349
+ account_hash: verify.config.account_hash || null,
350
+ metadata: { ...seo },
351
+ };
352
+ }
353
+ } else {
354
+ p.note?.(
355
+ 'Images API not authorized — continuing with storage only. Token needs Account → Images → Write.',
356
+ 'Delivery',
357
+ );
358
+ }
359
+ } else {
360
+ p.note?.(
361
+ [
362
+ 'Cloudflare Images',
363
+ ' ○ not connected',
364
+ '',
365
+ 'Set:',
366
+ ' CLOUDFLARE_ACCOUNT_ID',
367
+ ' CLOUDFLARE_IMAGES_ACCOUNT_HASH',
368
+ ' CLOUDFLARE_IMAGES_API_TOKEN (Account → Images → Write)',
369
+ '',
370
+ 'Optional fallback: CLOUDFLARE_API_TOKEN (broader session).',
371
+ 'Storage can still proceed without Images.',
372
+ ].join('\n'),
373
+ 'Delivery capability',
374
+ );
375
+ const continueStorage = await p.confirm({
376
+ message: 'Continue with storage only (no Cloudflare Images)?',
377
+ initialValue: true,
378
+ });
379
+ if (cancelled(continueStorage) || !continueStorage) {
380
+ p.cancel?.('Aborted — connect Cloudflare Images or choose storage-only.');
381
+ return { cancelled: true, stage: 'destinations' };
382
+ }
383
+ }
384
+
385
+ // 5. Layout review
386
+ const prefix = `brands/${identity.brand}/${identity.asset}/${identity.version}`;
387
+ p.note?.(
388
+ [
389
+ `Prefix: ${prefix}/`,
390
+ `Derivatives: ${derivatives.length}`,
391
+ `Storage: ${storageDest.provider}`,
392
+ `Delivery: ${deliveryDest ? deliveryDest.provider : '— not requested'}`,
393
+ `SEO alt: ${seo.alt_text || '—'}`,
394
+ ].join('\n'),
395
+ 'Layout',
396
+ );
397
+
398
+ const accept = await p.confirm({ message: 'Accept layout?', initialValue: true });
399
+ if (cancelled(accept) || !accept) {
400
+ p.cancel?.('Aborted.');
401
+ return { cancelled: true, stage: 'layout' };
402
+ }
403
+
404
+ // 6. Inventory
405
+ const inventory = [];
406
+ if (sourcePath) {
407
+ const row = inspectBrandAsset(sourcePath, { role: 'source' });
408
+ inventory.push({
409
+ role: row.role,
410
+ path: row.path,
411
+ dims: row.width ? `${row.width}×${row.height}` : '—',
412
+ size_label: formatBytesKb(row.bytes),
413
+ });
414
+ }
415
+ if (markPath) {
416
+ const row = inspectBrandAsset(markPath, { role: 'vector.mark' });
417
+ inventory.push({
418
+ role: row.role,
419
+ path: row.path,
420
+ dims: '—',
421
+ size_label: formatBytesKb(row.bytes),
422
+ });
423
+ }
424
+ p.note?.(
425
+ inventory.map((r) => `✓ ${r.role.padEnd(14)} ${String(r.dims).padEnd(9)} ${String(r.size_label).padStart(8)} ${r.path}`).join('\n') || '(empty)',
426
+ 'Inventory',
427
+ );
428
+
429
+ // 6b. Pack + preview (local zip + gallery — before cloud publish)
430
+ let packResult = null;
431
+ const wantPack = await p.confirm({
432
+ message: 'Write zip brand pack?',
433
+ initialValue: true,
434
+ });
435
+ if (cancelled(wantPack)) return { cancelled: true, stage: 'pack' };
436
+
437
+ if (wantPack) {
438
+ const zipPath = path.join(
439
+ cwd,
440
+ '.agentsam',
441
+ 'brand',
442
+ 'packs',
443
+ `${identity.brand}-${identity.asset}-${identity.version}.zip`,
444
+ );
445
+ packResult = await buildBrandPack({
446
+ brand: identity.brand,
447
+ asset: identity.asset,
448
+ version: identity.version,
449
+ sourcePath,
450
+ markPath,
451
+ preset: presetId || 'app-icon',
452
+ derivatives,
453
+ zipPath,
454
+ altText: seo.alt_text,
455
+ title: seo.title,
456
+ description: seo.description,
457
+ cwd,
458
+ });
459
+ p.note?.(
460
+ [`Pack: ${packResult.root}`, packResult.zip ? `Zip: ${packResult.zip}` : null].filter(Boolean).join('\n'),
461
+ 'Brand pack',
462
+ );
463
+
464
+ const wantPreview = await p.confirm({
465
+ message: 'Open localhost preview gallery?',
466
+ initialValue: true,
467
+ });
468
+ if (cancelled(wantPreview)) return { cancelled: true, stage: 'preview' };
469
+ if (wantPreview) {
470
+ await previewBrandPack({
471
+ from: packResult.root,
472
+ cwd,
473
+ open: true,
474
+ waitForEnter: true,
475
+ write: (s) => process.stdout.write(s),
476
+ });
477
+ }
478
+ }
479
+
480
+ // 7. Approve cloud promote
481
+ const publish = await p.confirm({
482
+ message: planOnly ? 'Write local receipt only?' : 'Proceed with promote / publish?',
483
+ initialValue: false,
484
+ });
485
+ if (cancelled(publish) || !publish) {
486
+ p.cancel?.('Nothing published to storage/delivery.');
487
+ return {
488
+ cancelled: true,
489
+ stage: 'approve',
490
+ identity,
491
+ inventory,
492
+ pack: packResult,
493
+ };
494
+ }
495
+
496
+ p.outro?.('Running promote…');
497
+
498
+ const inputs = [];
499
+ if (sourcePath) inputs.push({ id: 'source', role: 'source', path: sourcePath });
500
+ if (markPath) inputs.push({ id: 'mark', role: 'vector.mark', path: markPath });
501
+
502
+ return {
503
+ cancelled: false,
504
+ identity,
505
+ inventory,
506
+ planOnly,
507
+ publish: !planOnly,
508
+ pack: packResult,
509
+ seo,
510
+ storageAdapter,
511
+ deliveryAdapter: useDelivery ? deliveryAdapter : null,
512
+ spec: {
513
+ brand: identity.brand,
514
+ asset: identity.asset,
515
+ version: identity.version,
516
+ inputs,
517
+ derivatives,
518
+ seo,
519
+ destinations: {
520
+ storage: storageDest,
521
+ delivery: deliveryDest,
522
+ registry: null,
523
+ },
524
+ },
525
+ };
526
+ }