@inneranimalmedia/agentsam-sdk 2.6.4 → 2.6.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (418) hide show
  1. package/AGENTSAM.md +11 -0
  2. package/README.md +15 -9
  3. package/apps/client-cms-editor/AGENTS.md +12 -0
  4. package/apps/client-cms-editor/IMPORT_PROVENANCE.json +8 -0
  5. package/apps/client-cms-editor/README.md +72 -0
  6. package/apps/client-cms-editor/agentsam.app.json +57 -0
  7. package/apps/client-cms-editor/backend/README.md +5 -0
  8. package/apps/client-cms-editor/backend/package.json +22 -0
  9. package/apps/client-cms-editor/backend/src/api/client.ts +200 -0
  10. package/apps/client-cms-editor/backend/src/demo-bootstrap.ts +145 -0
  11. package/apps/client-cms-editor/backend/src/index.ts +6 -0
  12. package/apps/client-cms-editor/backend/src/model.ts +115 -0
  13. package/apps/client-cms-editor/backend/src/preview/bridge.ts +79 -0
  14. package/apps/client-cms-editor/backend/src/preview/urls.ts +55 -0
  15. package/apps/client-cms-editor/backend/src/routing/cms-route.js +293 -0
  16. package/apps/client-cms-editor/backend/src/routing/index.js +10 -0
  17. package/apps/client-cms-editor/backend/src/storefront.ts +52 -0
  18. package/apps/client-cms-editor/backend/tsconfig.json +15 -0
  19. package/apps/client-cms-editor/backend/worker/index.js +34 -0
  20. package/apps/client-cms-editor/backend/wrangler.jsonc +11 -0
  21. package/apps/client-cms-editor/bin/agentsam-cms.mjs +229 -0
  22. package/apps/client-cms-editor/frontend/index.html +12 -0
  23. package/apps/client-cms-editor/frontend/package.json +33 -0
  24. package/apps/client-cms-editor/frontend/src/AgentSamDrawer.tsx +188 -0
  25. package/apps/client-cms-editor/frontend/src/CmsAgentSurface.tsx +191 -0
  26. package/apps/client-cms-editor/frontend/src/CmsEditor.tsx +1345 -0
  27. package/apps/client-cms-editor/frontend/src/env.d.ts +14 -0
  28. package/apps/client-cms-editor/frontend/src/index.ts +8 -0
  29. package/apps/client-cms-editor/frontend/src/lib/content-safety.ts +63 -0
  30. package/apps/client-cms-editor/frontend/src/main.tsx +17 -0
  31. package/apps/client-cms-editor/frontend/src/mount.tsx +51 -0
  32. package/apps/client-cms-editor/frontend/src/styles/agentsam-drawer.css +214 -0
  33. package/apps/client-cms-editor/frontend/src/styles/cmsShell.css +1739 -0
  34. package/apps/client-cms-editor/frontend/src/styles/studio.css +106 -0
  35. package/apps/client-cms-editor/frontend/src/surfaces/CmsDashboard.tsx +313 -0
  36. package/apps/client-cms-editor/frontend/src/surfaces/CmsGuidedChatHero.tsx +121 -0
  37. package/apps/client-cms-editor/frontend/src/surfaces/CmsHubPage.tsx +132 -0
  38. package/apps/client-cms-editor/frontend/src/surfaces/CmsSiteSwitcher.tsx +176 -0
  39. package/apps/client-cms-editor/frontend/src/surfaces/index.ts +5 -0
  40. package/apps/client-cms-editor/frontend/src/surfaces/types.ts +48 -0
  41. package/apps/client-cms-editor/frontend/tsconfig.json +25 -0
  42. package/apps/client-cms-editor/frontend/vite.config.ts +13 -0
  43. package/apps/client-cms-editor/package-lock.json +3832 -0
  44. package/apps/client-cms-editor/package.json +23 -0
  45. package/apps/client-cms-editor/reference/DONOR_README.md +52 -0
  46. package/apps/client-cms-editor/reference/DONOR_package-lock.json +1253 -0
  47. package/apps/client-cms-editor/reference/DONOR_tsconfig.json +15 -0
  48. package/apps/client-cms-editor/shared/cms/package.json +21 -0
  49. package/apps/client-cms-editor/shared/cms/src/agent-context.ts +35 -0
  50. package/apps/client-cms-editor/shared/cms/src/cloudflare-bindings.ts +51 -0
  51. package/apps/client-cms-editor/shared/cms/src/editor-types.ts +58 -0
  52. package/apps/client-cms-editor/shared/cms/src/index.ts +5 -0
  53. package/apps/client-cms-editor/shared/cms/src/publication.ts +24 -0
  54. package/apps/client-cms-editor/shared/cms/src/routes.ts +11 -0
  55. package/apps/client-cms-editor/shared/cms/tsconfig.json +12 -0
  56. package/bin/agentsam-rapid-rust +36 -0
  57. package/docs/AUTH_IDENTITY_CONTRACT.md +2 -0
  58. package/docs/MACHINE_INTELLIGENCE.md +120 -0
  59. package/docs/WINDOWS_RUNTIME_INSTALL.md +30 -0
  60. package/docs/architecture/AGENTSAM_APPLICATION_CONTRACT.md +188 -0
  61. package/docs/architecture/AGENTSAM_RUNTIME_PROTOCOL.md +151 -0
  62. package/docs/architecture/LOCAL_STUDIO_CLOUDFLARE_OAUTH.md +12 -4
  63. package/docs/architecture/R2_SLUG_NAMESPACE.md +20 -0
  64. package/docs/architecture/WORK_PRODUCT_EXTRACTION.md +97 -0
  65. package/docs/brand/AGENT_SAM_ICON_GRAMMAR.md +70 -0
  66. package/docs/content-studio/HOST_MOUNT_CHECKLIST.md +71 -0
  67. package/docs/content-studio/REVISION_GATE_2026-09-27.md +501 -0
  68. package/docs/contracts/capability-install-planner.md +67 -0
  69. package/docs/contracts/environment-vocabulary.md +195 -0
  70. package/docs/contracts/google-cloud-oauth-setup.md +199 -0
  71. package/docs/local-studio/WORKMODE_DONOR_NOTES.md +1 -1
  72. package/docs/plans/LOCAL-STUDIO-GRADUATION-2026-09-26.md +290 -0
  73. package/docs/plans/LOCAL-STUDIO-REAL-APP-CONTRACT-ADDENDUM-2026-09-27.md +394 -0
  74. package/docs/plans/MACHINE-FIRST-APPS-TUI-2026-09-24.md +227 -0
  75. package/docs/plans/TOMORROW-EXTENSIVE-TODO-2026-09-26.md +221 -0
  76. package/docs/plans/TOMORROW-MACHINE-FIRST-BRIEFING.md +145 -0
  77. package/docs/plans/UNIVERSAL-INGEST-MACHINE-FIRST-2026-09-24.md +215 -0
  78. package/docs/plugins.md +2 -2
  79. package/docs/product/AGENTSAM_PRODUCT_EXPERIENCE_STANDARD.md +280 -0
  80. package/docs/product/LOCAL_STUDIO_DESKTOP_EXPERIENCE.md +139 -0
  81. package/docs/product/README.md +8 -0
  82. package/docs/rapid-rust-wasm.md +35 -0
  83. package/migrations/d1/0016_cloudflare_oauth_user_oauth_tokens_ssot.sql +14 -0
  84. package/package.json +73 -14
  85. package/packages/agentsam-brand/README.md +106 -11
  86. package/packages/agentsam-brand/bin/agentsam-brand.mjs +9 -0
  87. package/packages/agentsam-brand/package.json +39 -7
  88. package/packages/agentsam-brand/src/adapters/cloudflare-images.js +453 -0
  89. package/packages/agentsam-brand/src/adapters/cloudflare-r2.js +74 -0
  90. package/packages/agentsam-brand/src/adapters/d1-registry.js +26 -0
  91. package/packages/agentsam-brand/src/adapters/filesystem.js +59 -0
  92. package/packages/agentsam-brand/src/adapters/memory.js +31 -0
  93. package/packages/agentsam-brand/src/cli/controller.js +503 -0
  94. package/packages/agentsam-brand/src/cli/wizard.js +526 -0
  95. package/packages/agentsam-brand/src/core/capabilities.js +201 -0
  96. package/packages/agentsam-brand/src/core/derivatives.js +211 -0
  97. package/packages/agentsam-brand/src/core/errors.js +12 -0
  98. package/packages/agentsam-brand/src/core/ingest.js +195 -0
  99. package/packages/agentsam-brand/src/core/inspect.js +109 -0
  100. package/packages/agentsam-brand/src/core/keys.js +83 -0
  101. package/packages/agentsam-brand/src/core/naming.js +142 -0
  102. package/packages/agentsam-brand/src/core/optimize.js +316 -0
  103. package/packages/agentsam-brand/src/core/pack.js +305 -0
  104. package/packages/agentsam-brand/src/core/plan.js +276 -0
  105. package/packages/agentsam-brand/src/core/preview.js +159 -0
  106. package/packages/agentsam-brand/src/core/processors/cloudflare.js +68 -0
  107. package/packages/agentsam-brand/src/core/processors/contract.js +203 -0
  108. package/packages/agentsam-brand/src/core/processors/index.js +148 -0
  109. package/packages/agentsam-brand/src/core/processors/native.js +82 -0
  110. package/packages/agentsam-brand/src/core/processors/sharp.js +113 -0
  111. package/packages/agentsam-brand/src/core/processors/squoosh-binary.js +195 -0
  112. package/packages/agentsam-brand/src/core/promote.js +288 -0
  113. package/packages/agentsam-brand/src/core/receipts.js +155 -0
  114. package/packages/agentsam-brand/src/core/v2/compile.js +280 -0
  115. package/packages/agentsam-brand/src/core/v2/derivatives-semantic.js +207 -0
  116. package/packages/agentsam-brand/src/core/v2/ingest-graph.js +387 -0
  117. package/packages/agentsam-brand/src/core/v2/roles.js +180 -0
  118. package/packages/agentsam-brand/src/core/v2/schema.js +209 -0
  119. package/packages/agentsam-brand/src/core/v2/templates.js +114 -0
  120. package/packages/agentsam-brand/src/index.js +193 -36
  121. package/packages/agentsam-brand/src/presets/app-icon.json +16 -0
  122. package/packages/agentsam-brand/src/presets/favicon.json +17 -0
  123. package/packages/agentsam-brand/src/presets/hero.json +12 -0
  124. package/packages/agentsam-brand/src/presets/index.js +40 -0
  125. package/packages/agentsam-brand/src/presets/logo.json +12 -0
  126. package/packages/agentsam-brand/src/presets/model.json +8 -0
  127. package/packages/agentsam-brand/src/presets/og-image.json +10 -0
  128. package/packages/agentsam-brand/src/presets/product-shot.json +11 -0
  129. package/packages/agentsam-brand/src/presets/social-image.json +10 -0
  130. package/packages/agentsam-brand/src/presets/web-image.json +10 -0
  131. package/packages/agentsam-contracts/src/artifacts.ts +41 -0
  132. package/packages/agentsam-knowledge/src/autorag/index.js +1 -1
  133. package/packages/agentsam-knowledge/src/providers/index.js +6 -4
  134. package/packages/agentsam-knowledge/src/providers/ollama-endpoint.js +31 -0
  135. package/packages/agentsam-knowledge/test/autorag.test.mjs +22 -1
  136. package/packages/agentsam-nav/package.json +2 -2
  137. package/packages/agentsam-rapid-rust/Cargo.lock +344 -0
  138. package/packages/agentsam-rapid-rust/Cargo.toml +18 -0
  139. package/packages/agentsam-rapid-rust/README.md +5 -0
  140. package/packages/agentsam-rapid-rust/src/main.rs +718 -0
  141. package/packages/agentsam-rapid-rust/templates/api/Cargo.toml.tmpl +18 -0
  142. package/packages/agentsam-rapid-rust/templates/api/src/lib.rs.tmpl +17 -0
  143. package/packages/agentsam-rapid-rust/templates/common/README.md.tmpl +22 -0
  144. package/packages/agentsam-rapid-rust/templates/common/package.json.tmpl +12 -0
  145. package/packages/agentsam-rapid-rust/templates/common/wrangler.toml.tmpl +6 -0
  146. package/packages/agentsam-rapid-rust/templates/crypto-auth/Cargo.toml.tmpl +21 -0
  147. package/packages/agentsam-rapid-rust/templates/crypto-auth/src/lib.rs.tmpl +32 -0
  148. package/packages/agentsam-rapid-rust/templates/data-processor/Cargo.toml.tmpl +18 -0
  149. package/packages/agentsam-rapid-rust/templates/data-processor/src/lib.rs.tmpl +41 -0
  150. package/packages/agentsam-rapid-rust/templates/shared-core/Cargo.toml.tmpl +9 -0
  151. package/packages/agentsam-rapid-rust/templates/shared-core/core/Cargo.toml.tmpl +7 -0
  152. package/packages/agentsam-rapid-rust/templates/shared-core/core/src/lib.rs.tmpl +23 -0
  153. package/packages/agentsam-rapid-rust/templates/shared-core/worker/Cargo.toml.tmpl +12 -0
  154. package/packages/agentsam-rapid-rust/templates/shared-core/worker/src/lib.rs.tmpl +16 -0
  155. package/packages/agentsam-rapid-rust/templates/shared-core/wrangler.toml.tmpl +6 -0
  156. package/packages/agentsam-repository/src/index.js +1 -0
  157. package/packages/agentsam-repository/src/merkle/semantic.js +3 -10
  158. package/packages/agentsam-repository/src/source-types.js +85 -0
  159. package/packages/agentsam-vault/README.md +96 -0
  160. package/packages/agentsam-vault/package.json +32 -0
  161. package/packages/agentsam-vault/src/contracts/credential.d.ts +78 -0
  162. package/packages/agentsam-vault/src/contracts/credential.js +132 -0
  163. package/packages/agentsam-vault/src/crypto/aes-gcm.d.ts +30 -0
  164. package/packages/agentsam-vault/src/crypto/aes-gcm.js +107 -0
  165. package/packages/agentsam-vault/src/crypto/oauth-envelope.js +150 -0
  166. package/packages/agentsam-vault/src/index.d.ts +9 -0
  167. package/packages/agentsam-vault/src/index.js +27 -0
  168. package/packages/agentsam-vault/src/providers/registry.js +90 -0
  169. package/packages/agentsam-vault/src/runtime/resolver.js +77 -0
  170. package/packages/agentsam-workbench/README.md +24 -0
  171. package/packages/agentsam-workbench/package.json +38 -0
  172. package/packages/agentsam-workbench/src/agent/AgentPanel.tsx +41 -0
  173. package/packages/agentsam-workbench/src/agent/ArtifactCard.tsx +9 -0
  174. package/packages/agentsam-workbench/src/agent/Composer.tsx +102 -0
  175. package/packages/agentsam-workbench/src/agent/ConnectedAgentPanel.tsx +194 -0
  176. package/packages/agentsam-workbench/src/agent/ContextualComposer.tsx +788 -0
  177. package/packages/agentsam-workbench/src/agent/GoalStatusStrip.tsx +38 -0
  178. package/packages/agentsam-workbench/src/agent/MiniAgentSam.tsx +86 -0
  179. package/packages/agentsam-workbench/src/agent/ModelSelect.tsx +19 -0
  180. package/packages/agentsam-workbench/src/agent/Thread.tsx +56 -0
  181. package/packages/agentsam-workbench/src/agent/ToolReceipt.tsx +11 -0
  182. package/packages/agentsam-workbench/src/agent/contextual-composer.css +611 -0
  183. package/packages/agentsam-workbench/src/agent/index.ts +10 -0
  184. package/packages/agentsam-workbench/src/agent/mini-agentsam.css +12 -0
  185. package/packages/agentsam-workbench/src/browser/BrowserFrame.tsx +37 -0
  186. package/packages/agentsam-workbench/src/browser/index.ts +1 -0
  187. package/packages/agentsam-workbench/src/index.ts +6 -0
  188. package/packages/agentsam-workbench/src/project-control.css +160 -0
  189. package/packages/agentsam-workbench/src/projects/ProjectsSurface.tsx +131 -0
  190. package/packages/agentsam-workbench/src/projects/index.ts +1 -0
  191. package/packages/agentsam-workbench/src/shell/Breadcrumb.tsx +35 -0
  192. package/packages/agentsam-workbench/src/shell/ResizableStage.tsx +99 -0
  193. package/packages/agentsam-workbench/src/shell/SidePanel.tsx +5 -0
  194. package/packages/agentsam-workbench/src/shell/index.ts +4 -0
  195. package/packages/agentsam-workbench/src/shell/surfaceRegistry.ts +29 -0
  196. package/packages/agentsam-workbench/src/terminal/TerminalSurface.tsx +5 -0
  197. package/packages/agentsam-workbench/src/terminal/index.ts +1 -0
  198. package/packages/agentsam-workbench/src/timeline/GanttBoard.tsx +258 -0
  199. package/packages/agentsam-workbench/src/timeline/index.ts +1 -0
  200. package/packages/agentsam-workbench/tsconfig.json +13 -0
  201. package/packages/connectors/cloudflare/OAUTH_STORAGE_AUDIT.md +53 -0
  202. package/packages/connectors/cloudflare/package.json +3 -1
  203. package/packages/connectors/cloudflare/src/api-client.js +279 -0
  204. package/packages/connectors/cloudflare/src/capabilities.js +585 -0
  205. package/packages/connectors/cloudflare/src/credential.js +318 -0
  206. package/packages/connectors/cloudflare/src/families/brand-protection.js +123 -0
  207. package/packages/connectors/cloudflare/src/families/keyless.js +114 -0
  208. package/packages/connectors/cloudflare/src/families/pages.js +151 -0
  209. package/packages/connectors/cloudflare/src/families/scanner.js +123 -0
  210. package/packages/connectors/cloudflare/src/families/snippets.js +207 -0
  211. package/packages/connectors/cloudflare/src/families/tag-gateway.js +46 -0
  212. package/packages/connectors/cloudflare/src/families/tags.js +124 -0
  213. package/packages/connectors/cloudflare/src/families/token-validation.js +95 -0
  214. package/packages/connectors/cloudflare/src/families/workflows.js +156 -0
  215. package/packages/connectors/cloudflare/src/index.js +102 -265
  216. package/packages/connectors/cloudflare/src/oauth-persist.js +336 -0
  217. package/packages/connectors/cloudflare/src/owner.js +42 -12
  218. package/packages/connectors/cloudflare/src/permission-options.js +1064 -0
  219. package/packages/connectors/cloudflare/src/routes.js +309 -144
  220. package/packages/connectors/cloudflare/src/scope-catalog.js +345 -0
  221. package/packages/connectors/cloudflare/src/vault.js +2 -2
  222. package/packages/connectors/cloudflare/tests/capabilities.test.mjs +276 -0
  223. package/packages/connectors/cloudflare/tests/connector.test.mjs +26 -30
  224. package/packages/connectors/cloudflare/tests/oauth-persist.test.mjs +125 -0
  225. package/packages/identity/.agentsam/features/oauth-login-portal/providers.json +22 -2
  226. package/packages/identity/.agentsam/features/oauth-login-portal/resources.json +10 -4
  227. package/packages/identity/.agentsam/features/oauth-login-portal/routes.json +20 -0
  228. package/packages/identity/README.md +1 -1
  229. package/packages/identity/backend/README.md +1 -1
  230. package/packages/identity/migrations/D1_SCHEMA_MAPPING.md +3 -2
  231. package/packages/identity/migrations/sqlite/004_identity_oauth_consent_catalog.sql +48 -0
  232. package/packages/identity/package.json +4 -3
  233. package/packages/identity/scripts/local-identity-bridge.mjs +184 -0
  234. package/packages/identity/scripts/preview-auth-portal.mjs +7 -7
  235. package/packages/identity/src/adapters/cloudflare-d1/index.js +31 -2
  236. package/packages/identity/src/adapters/sqlite/index.js +4 -1
  237. package/packages/identity/src/contracts/auth-config.js +28 -8
  238. package/packages/identity/src/contracts/external-identity.js +1 -1
  239. package/packages/identity/src/contracts/provider.js +1 -0
  240. package/packages/identity/src/frontend/auth-portal/README.md +2 -1
  241. package/packages/identity/src/frontend/auth-portal/pages/login.html +6 -5
  242. package/packages/identity/src/frontend/auth-portal/pages/reset.html +6 -5
  243. package/packages/identity/src/frontend/auth-portal/pages/signup.html +6 -5
  244. package/packages/identity/src/frontend/auth-portal/shared/company-branding.js +1 -1
  245. package/packages/identity/src/frontend/auth-portal/shared/desktop-identity-bridge.js +207 -0
  246. package/packages/identity/src/index.js +16 -0
  247. package/packages/identity/src/migrations/0001_identity_core.sql +19 -2
  248. package/packages/identity/src/migrations/0003_accounts_ssot.sql +20 -0
  249. package/packages/identity/src/migrations/README.md +5 -2
  250. package/packages/identity/src/oauth/README.md +10 -5
  251. package/packages/identity/src/oauth/consent-view.js +388 -0
  252. package/packages/identity/src/oauth/credentials.js +31 -11
  253. package/packages/identity/src/oauth/google-desktop-exchange.js +173 -0
  254. package/packages/identity/src/providers/cloudflare/oauth.js +3 -4
  255. package/packages/identity/src/providers/cloudflare/profile.js +49 -14
  256. package/packages/identity/src/providers/iam/index.js +27 -5
  257. package/packages/identity/src/server/identity-service.js +31 -2
  258. package/packages/identity/src/server/worker-router.js +111 -81
  259. package/packages/identity/tests/auth-config.test.mjs +3 -2
  260. package/packages/identity/tests/identity-init-scaffold.test.mjs +3 -0
  261. package/packages/identity/tests/identity-service.test.mjs +16 -0
  262. package/packages/identity/tests/native-session-worker.test.mjs +64 -0
  263. package/packages/identity/tests/oauth-consent-view.test.mjs +106 -0
  264. package/packages/identity/tests/oauth-credentials.test.mjs +17 -4
  265. package/packages/identity/tests/oauth-presets-accounts-ssot.test.mjs +58 -0
  266. package/packages/identity/tests/preview-auth-portal.test.mjs +3 -3
  267. package/packages/runtime-protocol/src/index.js +154 -0
  268. package/packages/theme-scenes/README.md +164 -0
  269. package/packages/theme-scenes/package.json +53 -0
  270. package/packages/theme-scenes/src/blocks/index.js +30 -0
  271. package/packages/theme-scenes/src/contracts/index.js +286 -0
  272. package/packages/theme-scenes/src/demos/index.js +65 -0
  273. package/packages/theme-scenes/src/index.js +75 -0
  274. package/packages/theme-scenes/src/presets/index.js +263 -0
  275. package/packages/theme-scenes/src/runtime/compile.js +119 -0
  276. package/packages/theme-scenes/src/scenes/index.js +146 -0
  277. package/packages/theme-scenes/src/shell/index.js +47 -0
  278. package/packages/theme-scenes/src/themes/index.js +129 -0
  279. package/packages/theme-scenes/src/visuals/index.js +41 -0
  280. package/packages/theme-scenes/test/theme-scenes.test.mjs +179 -0
  281. package/packages/work-graph/src/index.js +34 -1
  282. package/packages/work-graph/src/renderers/gantt-model.js +24 -0
  283. package/packages/work-graph/test/work-graph.test.mjs +27 -7
  284. package/protocol/README.md +15 -7
  285. package/protocol/apps/agentsam.app.v1.schema.json +89 -7
  286. package/protocol/apps/agentsam.host-install.v1.schema.json +36 -0
  287. package/protocol/assets/README.md +9 -0
  288. package/protocol/assets/asset-record.v1.schema.json +64 -0
  289. package/protocol/runtime/agentsam.runtime.v1.schema.json +75 -0
  290. package/protocol/scoring/README.md +10 -0
  291. package/protocol/scoring/scorecard.v1.schema.json +65 -0
  292. package/protocol/ui/icon-registry.mjs +1 -0
  293. package/registry/cms-rust-machine-20260928/installable-products.json +31 -0
  294. package/registry/cms-rust-machine-20260928/manifest.json +22 -0
  295. package/registry/cms-rust-machine-20260928/migration.sql +237 -0
  296. package/registry/cms-rust-machine-20260928/receipt.json +21 -0
  297. package/registry/cms-rust-machine-20260928/receipt.sql +27 -0
  298. package/scripts/build_rapid_rust_cli.py +83 -0
  299. package/src/attachments/index.js +6 -0
  300. package/src/attachments/intake.js +235 -0
  301. package/src/capabilities/repository-snapshot.js +19 -2
  302. package/src/cli/command-catalog.js +8 -0
  303. package/src/cli.js +182 -26
  304. package/src/commands/account-auth.js +94 -8
  305. package/src/commands/app.js +307 -3
  306. package/src/commands/billing.js +127 -0
  307. package/src/commands/brand.js +74 -60
  308. package/src/commands/cheat-sheet.js +154 -0
  309. package/src/commands/cloudflare-login.js +222 -0
  310. package/src/commands/cloudflare.js +453 -23
  311. package/src/commands/codebaseindex.js +6 -1
  312. package/src/commands/compute.js +4 -0
  313. package/src/commands/connections.js +11 -5
  314. package/src/commands/credentials.js +116 -0
  315. package/src/commands/gcloud-auth.js +427 -0
  316. package/src/commands/google-cloud.js +375 -0
  317. package/src/commands/identity-init.js +2 -2
  318. package/src/commands/mcp.js +226 -33
  319. package/src/commands/ollama.js +3 -2
  320. package/src/commands/plugins.js +7 -2
  321. package/src/commands/product.js +36 -0
  322. package/src/commands/runtime-status.js +28 -9
  323. package/src/commands/runtime.js +313 -0
  324. package/src/commands/rust.js +24 -0
  325. package/src/commands/setup.js +279 -0
  326. package/src/commands/shell.js +16 -3
  327. package/src/commands/start-local.js +2 -2
  328. package/src/commands/terminal.js +171 -0
  329. package/src/commands/update.js +140 -0
  330. package/src/commands/whoami.js +329 -65
  331. package/src/features/resolve.js +1 -0
  332. package/src/index.js +4 -0
  333. package/src/indexing/ingest/inventory.js +254 -19
  334. package/src/indexing/ingest/materials.js +3 -9
  335. package/src/indexing/ingest/style-evidence.js +181 -0
  336. package/src/knowledge/source.js +3 -3
  337. package/src/lib/account-session.js +11 -4
  338. package/src/lib/app-authority.js +172 -0
  339. package/src/lib/auth.js +94 -21
  340. package/src/lib/core-client.js +5 -6
  341. package/src/lib/credentials-audit.js +451 -0
  342. package/src/lib/deploy/health.js +24 -6
  343. package/src/lib/detect-context.js +7 -1
  344. package/src/lib/google-cloud-connection.js +270 -0
  345. package/src/lib/google-cloud-inventory.js +385 -0
  346. package/src/lib/google-desktop-oauth.js +372 -0
  347. package/src/lib/google-studio-brokered-oauth.js +158 -0
  348. package/src/lib/identity-scaffold.js +24 -6
  349. package/src/lib/init-options.js +192 -0
  350. package/src/lib/local-scaffold.js +48 -16
  351. package/src/lib/provider-command-remediation.js +308 -0
  352. package/src/lib/provider-credentials.js +8 -0
  353. package/src/lib/scaffold/index.js +8 -2
  354. package/src/lib/scaffold/mcp-server.js +43 -0
  355. package/src/lib/scaffold/templates/mcp-server/index.js +397 -0
  356. package/src/lib/scaffold/templates/mcp-server/presets.js +39 -0
  357. package/src/lib/scaffold/wizards/cms.js +93 -0
  358. package/src/lib/scaffold/wizards/mcp-server.js +61 -0
  359. package/src/lib/setup/contract.js +26 -0
  360. package/src/lib/setup/discover.js +116 -0
  361. package/src/lib/setup/execute.js +205 -0
  362. package/src/lib/setup/planner.js +134 -0
  363. package/src/lib/setup/recipes.js +235 -0
  364. package/src/lib/setup/runtime-persist.js +197 -0
  365. package/src/lib/setup/runtime.js +394 -0
  366. package/src/lib/slash-commands.js +2 -0
  367. package/src/lib/terminal/machine-identity.js +95 -0
  368. package/src/lib/terminal-local.js +164 -0
  369. package/src/lib/terminal-scopes.js +52 -0
  370. package/src/lib/whoami-capabilities.js +184 -0
  371. package/src/local-pty/server.js +34 -5
  372. package/src/mcp/authority.js +58 -108
  373. package/src/mcp/client-adapters.js +68 -144
  374. package/src/mcp/client.js +142 -122
  375. package/src/mcp/cloudflare-bundles.js +225 -0
  376. package/src/mcp/index.js +12 -0
  377. package/src/plugins/cloudflare.js +1 -1
  378. package/src/providers/ollama-chat.js +2 -1
  379. package/src/sam/types.js +27 -2
  380. package/src/security/inventory.js +12 -2
  381. package/src/security/local-vault.js +2 -0
  382. package/src/security/scan.js +1 -1
  383. package/test/account-session.test.mjs +3 -3
  384. package/test/app-authority-context.test.mjs +32 -0
  385. package/test/cli/codebaseindex-plan-ux.test.mjs +1 -1
  386. package/test/cli/mcp-client.test.mjs +21 -10
  387. package/test/cli/runtime-persist.test.mjs +56 -0
  388. package/test/cli/rust-command.test.mjs +21 -0
  389. package/test/credentials-audit.test.mjs +113 -0
  390. package/test/deploy-health-scan.test.mjs +29 -1
  391. package/test/gcloud-auth.test.mjs +111 -0
  392. package/test/google-cloud-connection.test.mjs +83 -0
  393. package/test/google-cloud-inventory.test.mjs +64 -0
  394. package/test/init-options.test.mjs +35 -0
  395. package/test/integration/app-command.test.mjs +30 -0
  396. package/test/integration/cad-project.test.mjs +4 -1
  397. package/test/integration/cms-app-scaffold.test.mjs +71 -0
  398. package/test/integration/cms-site-tenancy-contract.test.mjs +3 -2
  399. package/test/integration/codebaseindex-ingest.test.mjs +48 -0
  400. package/test/integration/features-resolve.test.mjs +30 -11
  401. package/test/integration/inspect-path-cli.test.mjs +46 -0
  402. package/test/integration/inventory-evidence.test.mjs +125 -0
  403. package/test/integration/runtime-status.integration.test.mjs +2 -1
  404. package/test/knowledge.test.mjs +35 -1
  405. package/test/loopback-oauth.test.mjs +53 -0
  406. package/test/ollama.test.mjs +22 -0
  407. package/test/security.test.mjs +23 -0
  408. package/test/setup-planner.test.mjs +74 -0
  409. package/test/setup-runtime.test.mjs +51 -0
  410. package/test/terminal/local-pty.mock.test.mjs +3 -1
  411. package/test/terminal-machine-identity.test.mjs +88 -0
  412. package/test/whoami-resume.test.mjs +27 -6
  413. package/packages/agentsam-brand/test/brand-scan.test.mjs +0 -106
  414. package/packages/work-graph/prototype/README.md +0 -32
  415. package/packages/work-graph/prototype/data/demo-workgraph.js +0 -47
  416. package/packages/work-graph/prototype/renderers/timeline-model.js +0 -21
  417. package/packages/work-graph/prototype/renderers/workgraph-runtime.js +0 -38
  418. package/packages/work-graph/prototype-gnantt.html +0 -655
@@ -0,0 +1,109 @@
1
+ import crypto from 'node:crypto';
2
+ import fs from 'node:fs';
3
+ import path from 'node:path';
4
+ import { BrandAssetError, assert } from './errors.js';
5
+
6
+ const PNG_SIG = Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a]);
7
+
8
+ export function sha256Buffer(buf) {
9
+ return `sha256:${crypto.createHash('sha256').update(buf).digest('hex')}`;
10
+ }
11
+
12
+ export function sha256File(filePath) {
13
+ return sha256Buffer(fs.readFileSync(filePath));
14
+ }
15
+
16
+ export function isExcludedIntermediate(filePath) {
17
+ const base = path.basename(String(filePath || '')).toLowerCase();
18
+ if (base.endsWith('.pbm')) return true;
19
+ if (base.includes('trace')) return true;
20
+ return false;
21
+ }
22
+
23
+ export function sniffContentType(filePath, buf) {
24
+ const ext = path.extname(filePath).toLowerCase();
25
+ if (buf?.length >= 8 && buf.subarray(0, 8).equals(PNG_SIG)) return 'image/png';
26
+ if (buf?.length >= 12 && buf.toString('ascii', 0, 4) === 'RIFF' && buf.toString('ascii', 8, 12) === 'WEBP') {
27
+ return 'image/webp';
28
+ }
29
+ if (buf?.length >= 12 && buf.toString('ascii', 4, 8) === 'ftyp') {
30
+ const brand = buf.toString('ascii', 8, 12);
31
+ if (brand === 'avif' || brand === 'avis' || brand === 'mif1') return 'image/avif';
32
+ }
33
+ if (ext === '.svg' || (buf && /<svg[\s>]/i.test(buf.toString('utf8', 0, Math.min(buf.length, 512))))) {
34
+ return 'image/svg+xml';
35
+ }
36
+ if (ext === '.icns') return 'image/x-icns';
37
+ if (ext === '.png') return 'image/png';
38
+ if (ext === '.webp') return 'image/webp';
39
+ if (ext === '.avif') return 'image/avif';
40
+ if (ext === '.jpg' || ext === '.jpeg') return 'image/jpeg';
41
+ return 'application/octet-stream';
42
+ }
43
+
44
+ export function readPngDimensions(buf) {
45
+ if (!buf || buf.length < 24 || !buf.subarray(0, 8).equals(PNG_SIG)) return null;
46
+ return { width: buf.readUInt32BE(16), height: buf.readUInt32BE(20) };
47
+ }
48
+
49
+ /** SVG product-asset gate: no scripts, no external URLs, no embedded rasters. */
50
+ export function validateSvgMark(svgText) {
51
+ const issues = [];
52
+ const text = String(svgText || '');
53
+ if (!/<svg[\s>]/i.test(text)) issues.push('missing_svg_root');
54
+ if (/<script[\s>]/i.test(text)) issues.push('script_element');
55
+ if (/on[a-z]+\s*=/i.test(text)) issues.push('inline_event_handler');
56
+ if (/<image[\s>]/i.test(text)) issues.push('embedded_image_element');
57
+ if (/xlink:href\s*=\s*["']https?:/i.test(text)) issues.push('external_xlink');
58
+ if (/href\s*=\s*["']https?:/i.test(text)) issues.push('external_href');
59
+ if (/data:image\//i.test(text)) issues.push('data_image_uri');
60
+ return { ok: issues.length === 0, issues };
61
+ }
62
+
63
+ /**
64
+ * Inspect a local asset file. Pure — no brand/product identity knowledge.
65
+ */
66
+ export function inspectBrandAsset(filePath, { role = 'asset', buffer = null } = {}) {
67
+ const abs = path.resolve(filePath);
68
+ assert(!isExcludedIntermediate(abs), 'asset_excluded_intermediate', `Excluded intermediate: ${path.basename(abs)}`);
69
+ assert(fs.existsSync(abs), 'asset_missing', `Asset not found: ${abs}`);
70
+
71
+ const buf = buffer || fs.readFileSync(abs);
72
+ const contentType = sniffContentType(abs, buf);
73
+ const sha256 = sha256Buffer(buf);
74
+ let width = null;
75
+ let height = null;
76
+ let alpha = null;
77
+
78
+ if (contentType === 'image/png') {
79
+ const dim = readPngDimensions(buf);
80
+ if (dim) {
81
+ width = dim.width;
82
+ height = dim.height;
83
+ }
84
+ if (buf.length >= 26) {
85
+ const colorType = buf[25];
86
+ alpha = colorType === 4 || colorType === 6;
87
+ }
88
+ } else if (contentType === 'image/svg+xml') {
89
+ const gate = validateSvgMark(buf.toString('utf8'));
90
+ if (!gate.ok) {
91
+ throw new BrandAssetError('svg_unsafe', `Unsafe SVG: ${gate.issues.join(',')}`, gate);
92
+ }
93
+ }
94
+
95
+ return {
96
+ role,
97
+ path: abs,
98
+ basename: path.basename(abs),
99
+ bytes: buf.length,
100
+ content_type: contentType,
101
+ sha256,
102
+ width,
103
+ height,
104
+ alpha,
105
+ };
106
+ }
107
+
108
+ /** Alias used by public SDK surface. */
109
+ export const inspectLocalAsset = inspectBrandAsset;
@@ -0,0 +1,83 @@
1
+ import { assert } from './errors.js';
2
+
3
+ export const BRAND_ASSETS_SCHEMA = 'agentsam.brand-asset-promotion.v1';
4
+
5
+ function cleanSegment(value, label) {
6
+ const s = String(value || '').trim().toLowerCase().replace(/[^a-z0-9._-]+/g, '-');
7
+ assert(s, `${label}_required`, `${label} is required`);
8
+ assert(!s.includes('..') && !s.startsWith('/') && !s.includes('\\'), `${label}_invalid`, `Invalid ${label}`);
9
+ return s;
10
+ }
11
+
12
+ /**
13
+ * Default key prefix: brands/<brand>/<asset>/<version>
14
+ * Override with naming.prefix or naming.convention callback.
15
+ */
16
+ export function brandAssetPrefix({ brand, asset, version, naming = {} } = {}) {
17
+ if (naming.prefix) {
18
+ return String(naming.prefix).replace(/^\/+|\/+$/g, '');
19
+ }
20
+ if (typeof naming.prefixFn === 'function') {
21
+ return String(naming.prefixFn({ brand, asset, version })).replace(/^\/+|\/+$/g, '');
22
+ }
23
+ const b = cleanSegment(brand, 'brand');
24
+ const a = cleanSegment(asset, 'asset');
25
+ const v = cleanSegment(version, 'version');
26
+ return `brands/${b}/${a}/${v}`;
27
+ }
28
+
29
+ function leafFor(assetId, kind, dims = {}) {
30
+ const asset = cleanSegment(assetId, 'asset');
31
+ const w = dims.width || dims.size || null;
32
+ if (kind === 'master') return `${asset}-master.png`;
33
+ if (kind === 'mark') return `${asset}-mark.svg`;
34
+ if (kind === 'icns') return `${asset}.icns`;
35
+ if (kind === 'png' && w) return `${asset}-${w}.png`;
36
+ if (kind === 'webp' && w) return `${asset}-${w}.webp`;
37
+ if (kind === 'avif' && w) return `${asset}-${w}.avif`;
38
+ if (kind === 'jpeg' && w) return `${asset}-${w}.jpg`;
39
+ return `${asset}.${kind}`;
40
+ }
41
+
42
+ /**
43
+ * Resolve R2/object keys from identity + optional naming strategy.
44
+ * NO brand/asset identity branches — leaf names are generic or explicit.
45
+ */
46
+ export function resolveKeyLayout({
47
+ brand,
48
+ asset,
49
+ version,
50
+ naming = {},
51
+ derivatives = [],
52
+ } = {}) {
53
+ const base = brandAssetPrefix({ brand, asset, version, naming });
54
+ const assetId = cleanSegment(asset, 'asset');
55
+ const files = typeof naming.files === 'function'
56
+ ? naming.files({ brand, asset: assetId, version, base })
57
+ : (naming.files || {});
58
+
59
+ const layout = {
60
+ prefix: base,
61
+ convention: naming.convention || 'brands',
62
+ source: `${base}/source/${files.source || leafFor(assetId, 'master')}`,
63
+ vector: {
64
+ mark: `${base}/vector/${files.mark || leafFor(assetId, 'mark')}`,
65
+ },
66
+ native: {
67
+ icns: `${base}/native/${files.icns || leafFor(assetId, 'icns')}`,
68
+ },
69
+ derivatives: {},
70
+ manifest: `${base}/manifest.json`,
71
+ };
72
+
73
+ for (const d of derivatives) {
74
+ const id = d.id || `${d.format}-${d.width || d.size || 'x'}`;
75
+ const folder = d.role === 'web' || d.format === 'webp' || d.format === 'avif' ? 'web' : 'raster';
76
+ const filename = d.filename
77
+ || files[id]
78
+ || leafFor(assetId, d.format, { width: d.width || d.size, height: d.height || d.size });
79
+ layout.derivatives[id] = `${base}/${folder}/${filename}`;
80
+ }
81
+
82
+ return Object.freeze(layout);
83
+ }
@@ -0,0 +1,142 @@
1
+ /**
2
+ * Semantic delivery naming — human-readable aliases.
3
+ * Machine identity remains asset.id (ast_…). Filename is never the identity.
4
+ *
5
+ * Discipline: readable + contextual — never keyword-stuffed SEO spam.
6
+ */
7
+
8
+ const STOP = new Set([
9
+ 'best', 'cheap', 'near', 'me', 'the', 'a', 'an', 'and', 'or', 'of', 'for',
10
+ 'to', 'in', 'on', 'with', 'company', 'services', 'service',
11
+ ]);
12
+
13
+ export function slugifySegment(value, { maxWords = 6 } = {}) {
14
+ const raw = String(value || '')
15
+ .toLowerCase()
16
+ .normalize('NFKD')
17
+ .replace(/[\u0300-\u036f]/g, '')
18
+ .replace(/[^a-z0-9]+/g, '-')
19
+ .replace(/^-+|-+$/g, '');
20
+ const words = raw.split('-').filter((w) => w && !STOP.has(w) && w.length < 32);
21
+ return words.slice(0, maxWords).join('-');
22
+ }
23
+
24
+ /**
25
+ * Build a delivery alias slug from brand + role + semantic context.
26
+ * @example agentsam-software-workspace-hero
27
+ */
28
+ export function buildSemanticSlug({
29
+ brandId,
30
+ role,
31
+ subject = [],
32
+ page,
33
+ section,
34
+ locale,
35
+ strategy = 'semantic',
36
+ } = {}) {
37
+ if (strategy === 'identity') {
38
+ return null; // caller uses asset id only
39
+ }
40
+
41
+ const parts = [];
42
+ if (brandId) parts.push(slugifySegment(brandId, { maxWords: 4 }));
43
+
44
+ const roleTail = String(role || '')
45
+ .split('.')
46
+ .filter(Boolean)
47
+ .slice(-2)
48
+ .join('-');
49
+ if (roleTail) parts.push(slugifySegment(roleTail, { maxWords: 3 }));
50
+
51
+ const subjects = Array.isArray(subject) ? subject : [subject];
52
+ for (const s of subjects.slice(0, 2)) {
53
+ const seg = slugifySegment(s, { maxWords: 3 });
54
+ if (seg && !parts.join('-').includes(seg)) parts.push(seg);
55
+ }
56
+
57
+ if (page) {
58
+ const p = slugifySegment(page, { maxWords: 3 });
59
+ if (p && !parts.includes(p)) parts.push(p);
60
+ }
61
+ if (section && section !== 'hero' && section !== 'main') {
62
+ const s = slugifySegment(section, { maxWords: 2 });
63
+ if (s && !parts.includes(s)) parts.push(s);
64
+ }
65
+
66
+ let slug = parts.filter(Boolean).join('-').replace(/-+/g, '-');
67
+ if (locale && locale !== 'en' && locale !== 'en-US') {
68
+ slug = `${slug}-${slugifySegment(locale, { maxWords: 2 })}`;
69
+ }
70
+
71
+ // Hard cap — readable, not a keyword dump
72
+ const tokens = slug.split('-').filter(Boolean);
73
+ if (tokens.length > 8) slug = tokens.slice(0, 8).join('-');
74
+ if (slug.length > 80) slug = slug.slice(0, 80).replace(/-$/, '');
75
+
76
+ return slug || 'asset';
77
+ }
78
+
79
+ /**
80
+ * Width-suffixed delivery alias.
81
+ * acme-showroom-hero-1280.avif
82
+ */
83
+ export function buildDerivativeFilename(slug, { width, format, dpr } = {}) {
84
+ const ext = String(format || 'webp').toLowerCase().replace('jpeg', 'jpg');
85
+ let base = slug || 'asset';
86
+ if (width) base = `${base}-${width}`;
87
+ if (dpr && dpr > 1) base = `${base}@${dpr}x`;
88
+ return `${base}.${ext}`;
89
+ }
90
+
91
+ /**
92
+ * Reject obvious keyword-stuffed proposals.
93
+ */
94
+ export function validateDeliveryName(name) {
95
+ const warnings = [];
96
+ const base = String(name || '').replace(/\.[a-z0-9]+$/i, '');
97
+ const parts = base.split('-').filter(Boolean);
98
+ if (parts.length > 10) warnings.push('too_many_segments');
99
+ if (base.length > 96) warnings.push('name_too_long');
100
+ const spam = parts.filter((p) => STOP.has(p) || /^(seo|keyword|rank|best|cheap)$/.test(p));
101
+ if (spam.length >= 2) warnings.push('keyword_stuffing');
102
+ if (/^\d+$/.test(base) || /^img[_-]?\d+/i.test(base)) warnings.push('opaque_camera_name');
103
+ return { ok: warnings.length === 0, warnings };
104
+ }
105
+
106
+ /**
107
+ * Enrich an asset node with naming + semantic fields (non-destructive).
108
+ */
109
+ export function applySemanticNaming(asset, context = {}) {
110
+ const semantic = {
111
+ subject: context.subject || asset.semantic?.subject || [],
112
+ page: context.page || asset.semantic?.page || null,
113
+ section: context.section || asset.semantic?.section || null,
114
+ locale: context.locale || asset.semantic?.locale || 'en-US',
115
+ intent: context.intent || asset.semantic?.intent || null,
116
+ };
117
+
118
+ const slug = buildSemanticSlug({
119
+ brandId: context.brandId || context.brand,
120
+ role: asset.role,
121
+ subject: semantic.subject,
122
+ page: semantic.page,
123
+ section: semantic.section,
124
+ locale: semantic.locale,
125
+ strategy: context.strategy || 'semantic',
126
+ });
127
+
128
+ const check = validateDeliveryName(slug);
129
+
130
+ return {
131
+ ...asset,
132
+ semantic: { ...asset.semantic, ...semantic },
133
+ naming: {
134
+ slug,
135
+ strategy: context.strategy || 'semantic',
136
+ aliases: asset.naming?.aliases || [],
137
+ validation: check,
138
+ ...(asset.naming || {}),
139
+ slug, // ensure latest wins
140
+ },
141
+ };
142
+ }
@@ -0,0 +1,316 @@
1
+ /**
2
+ * agentsam brand optimize — role-aware optimization without exposing encoders.
3
+ *
4
+ * Flow: inspect → classify path → plan formats → schedule processor → receipt
5
+ */
6
+
7
+ import fs from 'node:fs';
8
+ import path from 'node:path';
9
+ import { inspectBrandAsset } from './inspect.js';
10
+ import { getAssetRole } from './v2/roles.js';
11
+ import { planSemanticDerivatives } from './v2/derivatives-semantic.js';
12
+ import {
13
+ discoverProcessors,
14
+ optimizeWithScheduler,
15
+ encodeWithScheduler,
16
+ resolveProcessor,
17
+ } from './processors/index.js';
18
+ import {
19
+ applySemanticNaming,
20
+ buildDerivativeFilename,
21
+ buildSemanticSlug,
22
+ } from './naming.js';
23
+ import { assert } from './errors.js';
24
+
25
+ /**
26
+ * Role → encode policy (not a global "quality 80").
27
+ */
28
+ export function optimizePolicyForRole(role, meta = {}) {
29
+ const def = getAssetRole(role) || {};
30
+ const family = def.family || 'raster';
31
+ const alpha = Boolean(meta.alpha);
32
+
33
+ if (family === 'logo' || role?.startsWith('logo.') || role === 'favicon') {
34
+ return {
35
+ keep_master: true,
36
+ formats: alpha ? ['png', 'webp'] : ['webp', 'png'],
37
+ lossless_preferred: true,
38
+ quality: null,
39
+ cqLevel: null,
40
+ materialize_widths: [],
41
+ note: 'logo/vector-preserving path — prefer SVG master when available',
42
+ };
43
+ }
44
+
45
+ if (family === 'hero' || role?.startsWith('hero.') || role?.startsWith('social.')) {
46
+ return {
47
+ keep_master: true,
48
+ formats: ['avif', 'webp'],
49
+ lossless_preferred: false,
50
+ quality: 82,
51
+ cqLevel: 28,
52
+ materialize_widths: [1280, 1920],
53
+ note: 'photographic / hero delivery — AVIF + WebP; master retained for CF',
54
+ };
55
+ }
56
+
57
+ if (role?.includes('screenshot') || role?.startsWith('product.')) {
58
+ return {
59
+ keep_master: true,
60
+ formats: ['webp', 'avif'],
61
+ lossless_preferred: true,
62
+ quality: 90,
63
+ cqLevel: 24,
64
+ materialize_widths: [960, 1600],
65
+ note: 'UI/screenshot — sharper WebP/AVIF',
66
+ };
67
+ }
68
+
69
+ if (family === 'icon' || role?.startsWith('icon.')) {
70
+ return {
71
+ keep_master: true,
72
+ formats: ['png', 'webp'],
73
+ lossless_preferred: true,
74
+ quality: null,
75
+ cqLevel: null,
76
+ materialize_widths: [512, 1024],
77
+ note: 'app icon ladder — lossless-ish',
78
+ };
79
+ }
80
+
81
+ return {
82
+ keep_master: true,
83
+ formats: alpha ? ['webp', 'png'] : ['avif', 'webp'],
84
+ lossless_preferred: alpha,
85
+ quality: 80,
86
+ cqLevel: 30,
87
+ materialize_widths: [],
88
+ note: 'generic raster policy',
89
+ };
90
+ }
91
+
92
+ /**
93
+ * Optimize a source file into role-aware delivery candidates.
94
+ */
95
+ export async function optimizeBrandAsset({
96
+ sourcePath,
97
+ role = 'asset.generic',
98
+ target = 'web',
99
+ brandId = '',
100
+ outDir,
101
+ processor,
102
+ dryRun = false,
103
+ semantic = {},
104
+ widths,
105
+ } = {}) {
106
+ assert(sourcePath && fs.existsSync(sourcePath), 'source_missing', `Source missing: ${sourcePath}`);
107
+
108
+ const meta = inspectBrandAsset(sourcePath, { role });
109
+ const policy = optimizePolicyForRole(role, meta);
110
+ const discovery = discoverProcessors();
111
+
112
+ const slug = buildSemanticSlug({
113
+ brandId,
114
+ role,
115
+ subject: semantic.subject,
116
+ page: semantic.page,
117
+ section: semantic.section,
118
+ locale: semantic.locale,
119
+ });
120
+
121
+ const assetDraft = applySemanticNaming(
122
+ { id: `ast_${meta.sha256?.slice(7, 15) || Date.now().toString(36)}`, role, master: { path: sourcePath } },
123
+ { brandId, ...semantic },
124
+ );
125
+
126
+ const plan = {
127
+ role,
128
+ target,
129
+ policy,
130
+ naming: assetDraft.naming,
131
+ semantic: assetDraft.semantic,
132
+ source: {
133
+ path: sourcePath,
134
+ bytes: meta.bytes,
135
+ width: meta.width,
136
+ height: meta.height,
137
+ content_type: meta.content_type,
138
+ alpha: meta.alpha,
139
+ sha256: meta.sha256,
140
+ },
141
+ processors: discovery,
142
+ candidates: [],
143
+ artifacts: [],
144
+ };
145
+
146
+ if (target === 'cloudflare' || target === 'cf') {
147
+ plan.delivery = {
148
+ provider: 'cloudflare-images',
149
+ strategy: 'retain_master_edge_derive',
150
+ note: 'Upload high-quality master; let CF negotiate AVIF/WebP',
151
+ };
152
+ const edge = await resolveProcessor({ delivery: 'cloudflare-images', prefer_edge: true }, { force: 'cloudflare' });
153
+ for (const format of policy.formats) {
154
+ const edgePlan = await edge.encode(sourcePath, { format, quality: policy.quality });
155
+ plan.candidates.push({
156
+ format,
157
+ ...edgePlan,
158
+ filename: buildDerivativeFilename(slug, { format }),
159
+ });
160
+ }
161
+ if (dryRun) return { ok: true, dry_run: true, ...plan };
162
+ return { ok: true, ...plan, asset: assetDraft };
163
+ }
164
+
165
+ const destRoot = outDir || path.join(path.dirname(sourcePath), '.agentsam-optimize');
166
+ if (!dryRun) fs.mkdirSync(destRoot, { recursive: true });
167
+
168
+ const encodeWidths = widths || policy.materialize_widths || [];
169
+ const formats = policy.formats;
170
+
171
+ for (const format of formats) {
172
+ const filename = buildDerivativeFilename(slug, { format });
173
+ const outPath = path.join(destRoot, filename);
174
+ const candidate = {
175
+ format,
176
+ filename,
177
+ outPath,
178
+ status: dryRun ? 'planned' : 'pending',
179
+ };
180
+
181
+ if (dryRun) {
182
+ plan.candidates.push(candidate);
183
+ continue;
184
+ }
185
+
186
+ try {
187
+ const result = await encodeWithScheduler(sourcePath, {
188
+ format,
189
+ quality: policy.quality,
190
+ cqLevel: policy.cqLevel,
191
+ lossless: policy.lossless_preferred && (format === 'png' || format === 'webp'),
192
+ auto: format === 'webp' || format === 'avif' ? undefined : undefined,
193
+ outPath,
194
+ processor,
195
+ preserve_alpha: meta.alpha,
196
+ });
197
+ const savings = meta.bytes > 0
198
+ ? Number((((meta.bytes - result.bytes) / meta.bytes) * 100).toFixed(1))
199
+ : null;
200
+ plan.candidates.push({
201
+ ...candidate,
202
+ status: 'generated',
203
+ ...result,
204
+ savings_pct: savings,
205
+ receipt: {
206
+ processor: result.processor,
207
+ version: result.processor_version || null,
208
+ encoder: format,
209
+ options: result.options,
210
+ },
211
+ });
212
+ plan.artifacts.push(result.path);
213
+ } catch (err) {
214
+ // Try optimize path as fallback once
215
+ try {
216
+ const result = await optimizeWithScheduler(sourcePath, {
217
+ format,
218
+ quality: policy.quality,
219
+ outPath,
220
+ processor,
221
+ });
222
+ plan.candidates.push({
223
+ ...candidate,
224
+ status: 'generated',
225
+ ...result,
226
+ savings_pct: meta.bytes > 0
227
+ ? Number((((meta.bytes - result.bytes) / meta.bytes) * 100).toFixed(1))
228
+ : null,
229
+ });
230
+ plan.artifacts.push(result.path);
231
+ } catch (err2) {
232
+ plan.candidates.push({
233
+ ...candidate,
234
+ status: 'failed',
235
+ error: err2?.message || err?.message || String(err2 || err),
236
+ });
237
+ }
238
+ }
239
+ }
240
+
241
+ // Optional width materialization (first format only — keep lean)
242
+ const primaryFormat = formats[0];
243
+ for (const w of encodeWidths) {
244
+ const filename = buildDerivativeFilename(slug, { width: w, format: primaryFormat });
245
+ const outPath = path.join(destRoot, filename);
246
+ if (dryRun) {
247
+ plan.candidates.push({ format: primaryFormat, width: w, filename, status: 'planned' });
248
+ continue;
249
+ }
250
+ try {
251
+ const proc = await resolveProcessor({ format: primaryFormat }, { force: processor });
252
+ const resized = path.join(destRoot, `.tmp-${w}.png`);
253
+ if (typeof proc.resize === 'function') {
254
+ await proc.resize(sourcePath, { width: w, outPath: resized });
255
+ const encoded = await encodeWithScheduler(resized, {
256
+ format: primaryFormat,
257
+ quality: policy.quality,
258
+ cqLevel: policy.cqLevel,
259
+ outPath,
260
+ processor,
261
+ });
262
+ try {
263
+ fs.unlinkSync(resized);
264
+ } catch {
265
+ /* ignore */
266
+ }
267
+ plan.candidates.push({
268
+ format: primaryFormat,
269
+ width: w,
270
+ filename,
271
+ status: 'generated',
272
+ ...encoded,
273
+ });
274
+ plan.artifacts.push(encoded.path);
275
+ }
276
+ } catch (err) {
277
+ plan.candidates.push({
278
+ format: primaryFormat,
279
+ width: w,
280
+ filename,
281
+ status: 'failed',
282
+ error: err?.message || String(err),
283
+ });
284
+ }
285
+ }
286
+
287
+ // Comparison summary for Studio slider
288
+ const best = plan.candidates
289
+ .filter((c) => c.status === 'generated' && c.bytes != null)
290
+ .sort((a, b) => a.bytes - b.bytes)[0] || null;
291
+
292
+ plan.comparison = best
293
+ ? {
294
+ original: { bytes: meta.bytes, format: meta.content_type, width: meta.width, height: meta.height },
295
+ optimized: {
296
+ bytes: best.bytes,
297
+ format: best.format,
298
+ width: best.width,
299
+ height: best.height,
300
+ processor: best.processor,
301
+ savings_pct: best.savings_pct,
302
+ },
303
+ }
304
+ : null;
305
+
306
+ // Attach semantic derivative planner for pack consumers
307
+ plan.semantic_derivatives = planSemanticDerivatives(role, { materialize: 'pack' });
308
+
309
+ return {
310
+ ok: plan.candidates.some((c) => c.status === 'generated' || c.status === 'planned'),
311
+ dry_run: dryRun,
312
+ out_dir: destRoot,
313
+ asset: assetDraft,
314
+ ...plan,
315
+ };
316
+ }