@inneranimalmedia/agentsam-sdk 2.6.4 → 2.6.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (418) hide show
  1. package/AGENTSAM.md +11 -0
  2. package/README.md +15 -9
  3. package/apps/client-cms-editor/AGENTS.md +12 -0
  4. package/apps/client-cms-editor/IMPORT_PROVENANCE.json +8 -0
  5. package/apps/client-cms-editor/README.md +72 -0
  6. package/apps/client-cms-editor/agentsam.app.json +57 -0
  7. package/apps/client-cms-editor/backend/README.md +5 -0
  8. package/apps/client-cms-editor/backend/package.json +22 -0
  9. package/apps/client-cms-editor/backend/src/api/client.ts +200 -0
  10. package/apps/client-cms-editor/backend/src/demo-bootstrap.ts +145 -0
  11. package/apps/client-cms-editor/backend/src/index.ts +6 -0
  12. package/apps/client-cms-editor/backend/src/model.ts +115 -0
  13. package/apps/client-cms-editor/backend/src/preview/bridge.ts +79 -0
  14. package/apps/client-cms-editor/backend/src/preview/urls.ts +55 -0
  15. package/apps/client-cms-editor/backend/src/routing/cms-route.js +293 -0
  16. package/apps/client-cms-editor/backend/src/routing/index.js +10 -0
  17. package/apps/client-cms-editor/backend/src/storefront.ts +52 -0
  18. package/apps/client-cms-editor/backend/tsconfig.json +15 -0
  19. package/apps/client-cms-editor/backend/worker/index.js +34 -0
  20. package/apps/client-cms-editor/backend/wrangler.jsonc +11 -0
  21. package/apps/client-cms-editor/bin/agentsam-cms.mjs +229 -0
  22. package/apps/client-cms-editor/frontend/index.html +12 -0
  23. package/apps/client-cms-editor/frontend/package.json +33 -0
  24. package/apps/client-cms-editor/frontend/src/AgentSamDrawer.tsx +188 -0
  25. package/apps/client-cms-editor/frontend/src/CmsAgentSurface.tsx +191 -0
  26. package/apps/client-cms-editor/frontend/src/CmsEditor.tsx +1345 -0
  27. package/apps/client-cms-editor/frontend/src/env.d.ts +14 -0
  28. package/apps/client-cms-editor/frontend/src/index.ts +8 -0
  29. package/apps/client-cms-editor/frontend/src/lib/content-safety.ts +63 -0
  30. package/apps/client-cms-editor/frontend/src/main.tsx +17 -0
  31. package/apps/client-cms-editor/frontend/src/mount.tsx +51 -0
  32. package/apps/client-cms-editor/frontend/src/styles/agentsam-drawer.css +214 -0
  33. package/apps/client-cms-editor/frontend/src/styles/cmsShell.css +1739 -0
  34. package/apps/client-cms-editor/frontend/src/styles/studio.css +106 -0
  35. package/apps/client-cms-editor/frontend/src/surfaces/CmsDashboard.tsx +313 -0
  36. package/apps/client-cms-editor/frontend/src/surfaces/CmsGuidedChatHero.tsx +121 -0
  37. package/apps/client-cms-editor/frontend/src/surfaces/CmsHubPage.tsx +132 -0
  38. package/apps/client-cms-editor/frontend/src/surfaces/CmsSiteSwitcher.tsx +176 -0
  39. package/apps/client-cms-editor/frontend/src/surfaces/index.ts +5 -0
  40. package/apps/client-cms-editor/frontend/src/surfaces/types.ts +48 -0
  41. package/apps/client-cms-editor/frontend/tsconfig.json +25 -0
  42. package/apps/client-cms-editor/frontend/vite.config.ts +13 -0
  43. package/apps/client-cms-editor/package-lock.json +3832 -0
  44. package/apps/client-cms-editor/package.json +23 -0
  45. package/apps/client-cms-editor/reference/DONOR_README.md +52 -0
  46. package/apps/client-cms-editor/reference/DONOR_package-lock.json +1253 -0
  47. package/apps/client-cms-editor/reference/DONOR_tsconfig.json +15 -0
  48. package/apps/client-cms-editor/shared/cms/package.json +21 -0
  49. package/apps/client-cms-editor/shared/cms/src/agent-context.ts +35 -0
  50. package/apps/client-cms-editor/shared/cms/src/cloudflare-bindings.ts +51 -0
  51. package/apps/client-cms-editor/shared/cms/src/editor-types.ts +58 -0
  52. package/apps/client-cms-editor/shared/cms/src/index.ts +5 -0
  53. package/apps/client-cms-editor/shared/cms/src/publication.ts +24 -0
  54. package/apps/client-cms-editor/shared/cms/src/routes.ts +11 -0
  55. package/apps/client-cms-editor/shared/cms/tsconfig.json +12 -0
  56. package/bin/agentsam-rapid-rust +36 -0
  57. package/docs/AUTH_IDENTITY_CONTRACT.md +2 -0
  58. package/docs/MACHINE_INTELLIGENCE.md +120 -0
  59. package/docs/WINDOWS_RUNTIME_INSTALL.md +30 -0
  60. package/docs/architecture/AGENTSAM_APPLICATION_CONTRACT.md +188 -0
  61. package/docs/architecture/AGENTSAM_RUNTIME_PROTOCOL.md +151 -0
  62. package/docs/architecture/LOCAL_STUDIO_CLOUDFLARE_OAUTH.md +12 -4
  63. package/docs/architecture/R2_SLUG_NAMESPACE.md +20 -0
  64. package/docs/architecture/WORK_PRODUCT_EXTRACTION.md +97 -0
  65. package/docs/brand/AGENT_SAM_ICON_GRAMMAR.md +70 -0
  66. package/docs/content-studio/HOST_MOUNT_CHECKLIST.md +71 -0
  67. package/docs/content-studio/REVISION_GATE_2026-09-27.md +501 -0
  68. package/docs/contracts/capability-install-planner.md +67 -0
  69. package/docs/contracts/environment-vocabulary.md +195 -0
  70. package/docs/contracts/google-cloud-oauth-setup.md +199 -0
  71. package/docs/local-studio/WORKMODE_DONOR_NOTES.md +1 -1
  72. package/docs/plans/LOCAL-STUDIO-GRADUATION-2026-09-26.md +290 -0
  73. package/docs/plans/LOCAL-STUDIO-REAL-APP-CONTRACT-ADDENDUM-2026-09-27.md +394 -0
  74. package/docs/plans/MACHINE-FIRST-APPS-TUI-2026-09-24.md +227 -0
  75. package/docs/plans/TOMORROW-EXTENSIVE-TODO-2026-09-26.md +221 -0
  76. package/docs/plans/TOMORROW-MACHINE-FIRST-BRIEFING.md +145 -0
  77. package/docs/plans/UNIVERSAL-INGEST-MACHINE-FIRST-2026-09-24.md +215 -0
  78. package/docs/plugins.md +2 -2
  79. package/docs/product/AGENTSAM_PRODUCT_EXPERIENCE_STANDARD.md +280 -0
  80. package/docs/product/LOCAL_STUDIO_DESKTOP_EXPERIENCE.md +139 -0
  81. package/docs/product/README.md +8 -0
  82. package/docs/rapid-rust-wasm.md +35 -0
  83. package/migrations/d1/0016_cloudflare_oauth_user_oauth_tokens_ssot.sql +14 -0
  84. package/package.json +73 -14
  85. package/packages/agentsam-brand/README.md +106 -11
  86. package/packages/agentsam-brand/bin/agentsam-brand.mjs +9 -0
  87. package/packages/agentsam-brand/package.json +39 -7
  88. package/packages/agentsam-brand/src/adapters/cloudflare-images.js +453 -0
  89. package/packages/agentsam-brand/src/adapters/cloudflare-r2.js +74 -0
  90. package/packages/agentsam-brand/src/adapters/d1-registry.js +26 -0
  91. package/packages/agentsam-brand/src/adapters/filesystem.js +59 -0
  92. package/packages/agentsam-brand/src/adapters/memory.js +31 -0
  93. package/packages/agentsam-brand/src/cli/controller.js +503 -0
  94. package/packages/agentsam-brand/src/cli/wizard.js +526 -0
  95. package/packages/agentsam-brand/src/core/capabilities.js +201 -0
  96. package/packages/agentsam-brand/src/core/derivatives.js +211 -0
  97. package/packages/agentsam-brand/src/core/errors.js +12 -0
  98. package/packages/agentsam-brand/src/core/ingest.js +195 -0
  99. package/packages/agentsam-brand/src/core/inspect.js +109 -0
  100. package/packages/agentsam-brand/src/core/keys.js +83 -0
  101. package/packages/agentsam-brand/src/core/naming.js +142 -0
  102. package/packages/agentsam-brand/src/core/optimize.js +316 -0
  103. package/packages/agentsam-brand/src/core/pack.js +305 -0
  104. package/packages/agentsam-brand/src/core/plan.js +276 -0
  105. package/packages/agentsam-brand/src/core/preview.js +159 -0
  106. package/packages/agentsam-brand/src/core/processors/cloudflare.js +68 -0
  107. package/packages/agentsam-brand/src/core/processors/contract.js +203 -0
  108. package/packages/agentsam-brand/src/core/processors/index.js +148 -0
  109. package/packages/agentsam-brand/src/core/processors/native.js +82 -0
  110. package/packages/agentsam-brand/src/core/processors/sharp.js +113 -0
  111. package/packages/agentsam-brand/src/core/processors/squoosh-binary.js +195 -0
  112. package/packages/agentsam-brand/src/core/promote.js +288 -0
  113. package/packages/agentsam-brand/src/core/receipts.js +155 -0
  114. package/packages/agentsam-brand/src/core/v2/compile.js +280 -0
  115. package/packages/agentsam-brand/src/core/v2/derivatives-semantic.js +207 -0
  116. package/packages/agentsam-brand/src/core/v2/ingest-graph.js +387 -0
  117. package/packages/agentsam-brand/src/core/v2/roles.js +180 -0
  118. package/packages/agentsam-brand/src/core/v2/schema.js +209 -0
  119. package/packages/agentsam-brand/src/core/v2/templates.js +114 -0
  120. package/packages/agentsam-brand/src/index.js +193 -36
  121. package/packages/agentsam-brand/src/presets/app-icon.json +16 -0
  122. package/packages/agentsam-brand/src/presets/favicon.json +17 -0
  123. package/packages/agentsam-brand/src/presets/hero.json +12 -0
  124. package/packages/agentsam-brand/src/presets/index.js +40 -0
  125. package/packages/agentsam-brand/src/presets/logo.json +12 -0
  126. package/packages/agentsam-brand/src/presets/model.json +8 -0
  127. package/packages/agentsam-brand/src/presets/og-image.json +10 -0
  128. package/packages/agentsam-brand/src/presets/product-shot.json +11 -0
  129. package/packages/agentsam-brand/src/presets/social-image.json +10 -0
  130. package/packages/agentsam-brand/src/presets/web-image.json +10 -0
  131. package/packages/agentsam-contracts/src/artifacts.ts +41 -0
  132. package/packages/agentsam-knowledge/src/autorag/index.js +1 -1
  133. package/packages/agentsam-knowledge/src/providers/index.js +6 -4
  134. package/packages/agentsam-knowledge/src/providers/ollama-endpoint.js +31 -0
  135. package/packages/agentsam-knowledge/test/autorag.test.mjs +22 -1
  136. package/packages/agentsam-nav/package.json +2 -2
  137. package/packages/agentsam-rapid-rust/Cargo.lock +344 -0
  138. package/packages/agentsam-rapid-rust/Cargo.toml +18 -0
  139. package/packages/agentsam-rapid-rust/README.md +5 -0
  140. package/packages/agentsam-rapid-rust/src/main.rs +718 -0
  141. package/packages/agentsam-rapid-rust/templates/api/Cargo.toml.tmpl +18 -0
  142. package/packages/agentsam-rapid-rust/templates/api/src/lib.rs.tmpl +17 -0
  143. package/packages/agentsam-rapid-rust/templates/common/README.md.tmpl +22 -0
  144. package/packages/agentsam-rapid-rust/templates/common/package.json.tmpl +12 -0
  145. package/packages/agentsam-rapid-rust/templates/common/wrangler.toml.tmpl +6 -0
  146. package/packages/agentsam-rapid-rust/templates/crypto-auth/Cargo.toml.tmpl +21 -0
  147. package/packages/agentsam-rapid-rust/templates/crypto-auth/src/lib.rs.tmpl +32 -0
  148. package/packages/agentsam-rapid-rust/templates/data-processor/Cargo.toml.tmpl +18 -0
  149. package/packages/agentsam-rapid-rust/templates/data-processor/src/lib.rs.tmpl +41 -0
  150. package/packages/agentsam-rapid-rust/templates/shared-core/Cargo.toml.tmpl +9 -0
  151. package/packages/agentsam-rapid-rust/templates/shared-core/core/Cargo.toml.tmpl +7 -0
  152. package/packages/agentsam-rapid-rust/templates/shared-core/core/src/lib.rs.tmpl +23 -0
  153. package/packages/agentsam-rapid-rust/templates/shared-core/worker/Cargo.toml.tmpl +12 -0
  154. package/packages/agentsam-rapid-rust/templates/shared-core/worker/src/lib.rs.tmpl +16 -0
  155. package/packages/agentsam-rapid-rust/templates/shared-core/wrangler.toml.tmpl +6 -0
  156. package/packages/agentsam-repository/src/index.js +1 -0
  157. package/packages/agentsam-repository/src/merkle/semantic.js +3 -10
  158. package/packages/agentsam-repository/src/source-types.js +85 -0
  159. package/packages/agentsam-vault/README.md +96 -0
  160. package/packages/agentsam-vault/package.json +32 -0
  161. package/packages/agentsam-vault/src/contracts/credential.d.ts +78 -0
  162. package/packages/agentsam-vault/src/contracts/credential.js +132 -0
  163. package/packages/agentsam-vault/src/crypto/aes-gcm.d.ts +30 -0
  164. package/packages/agentsam-vault/src/crypto/aes-gcm.js +107 -0
  165. package/packages/agentsam-vault/src/crypto/oauth-envelope.js +150 -0
  166. package/packages/agentsam-vault/src/index.d.ts +9 -0
  167. package/packages/agentsam-vault/src/index.js +27 -0
  168. package/packages/agentsam-vault/src/providers/registry.js +90 -0
  169. package/packages/agentsam-vault/src/runtime/resolver.js +77 -0
  170. package/packages/agentsam-workbench/README.md +24 -0
  171. package/packages/agentsam-workbench/package.json +38 -0
  172. package/packages/agentsam-workbench/src/agent/AgentPanel.tsx +41 -0
  173. package/packages/agentsam-workbench/src/agent/ArtifactCard.tsx +9 -0
  174. package/packages/agentsam-workbench/src/agent/Composer.tsx +102 -0
  175. package/packages/agentsam-workbench/src/agent/ConnectedAgentPanel.tsx +194 -0
  176. package/packages/agentsam-workbench/src/agent/ContextualComposer.tsx +788 -0
  177. package/packages/agentsam-workbench/src/agent/GoalStatusStrip.tsx +38 -0
  178. package/packages/agentsam-workbench/src/agent/MiniAgentSam.tsx +86 -0
  179. package/packages/agentsam-workbench/src/agent/ModelSelect.tsx +19 -0
  180. package/packages/agentsam-workbench/src/agent/Thread.tsx +56 -0
  181. package/packages/agentsam-workbench/src/agent/ToolReceipt.tsx +11 -0
  182. package/packages/agentsam-workbench/src/agent/contextual-composer.css +611 -0
  183. package/packages/agentsam-workbench/src/agent/index.ts +10 -0
  184. package/packages/agentsam-workbench/src/agent/mini-agentsam.css +12 -0
  185. package/packages/agentsam-workbench/src/browser/BrowserFrame.tsx +37 -0
  186. package/packages/agentsam-workbench/src/browser/index.ts +1 -0
  187. package/packages/agentsam-workbench/src/index.ts +6 -0
  188. package/packages/agentsam-workbench/src/project-control.css +160 -0
  189. package/packages/agentsam-workbench/src/projects/ProjectsSurface.tsx +131 -0
  190. package/packages/agentsam-workbench/src/projects/index.ts +1 -0
  191. package/packages/agentsam-workbench/src/shell/Breadcrumb.tsx +35 -0
  192. package/packages/agentsam-workbench/src/shell/ResizableStage.tsx +99 -0
  193. package/packages/agentsam-workbench/src/shell/SidePanel.tsx +5 -0
  194. package/packages/agentsam-workbench/src/shell/index.ts +4 -0
  195. package/packages/agentsam-workbench/src/shell/surfaceRegistry.ts +29 -0
  196. package/packages/agentsam-workbench/src/terminal/TerminalSurface.tsx +5 -0
  197. package/packages/agentsam-workbench/src/terminal/index.ts +1 -0
  198. package/packages/agentsam-workbench/src/timeline/GanttBoard.tsx +258 -0
  199. package/packages/agentsam-workbench/src/timeline/index.ts +1 -0
  200. package/packages/agentsam-workbench/tsconfig.json +13 -0
  201. package/packages/connectors/cloudflare/OAUTH_STORAGE_AUDIT.md +53 -0
  202. package/packages/connectors/cloudflare/package.json +3 -1
  203. package/packages/connectors/cloudflare/src/api-client.js +279 -0
  204. package/packages/connectors/cloudflare/src/capabilities.js +585 -0
  205. package/packages/connectors/cloudflare/src/credential.js +318 -0
  206. package/packages/connectors/cloudflare/src/families/brand-protection.js +123 -0
  207. package/packages/connectors/cloudflare/src/families/keyless.js +114 -0
  208. package/packages/connectors/cloudflare/src/families/pages.js +151 -0
  209. package/packages/connectors/cloudflare/src/families/scanner.js +123 -0
  210. package/packages/connectors/cloudflare/src/families/snippets.js +207 -0
  211. package/packages/connectors/cloudflare/src/families/tag-gateway.js +46 -0
  212. package/packages/connectors/cloudflare/src/families/tags.js +124 -0
  213. package/packages/connectors/cloudflare/src/families/token-validation.js +95 -0
  214. package/packages/connectors/cloudflare/src/families/workflows.js +156 -0
  215. package/packages/connectors/cloudflare/src/index.js +102 -265
  216. package/packages/connectors/cloudflare/src/oauth-persist.js +336 -0
  217. package/packages/connectors/cloudflare/src/owner.js +42 -12
  218. package/packages/connectors/cloudflare/src/permission-options.js +1064 -0
  219. package/packages/connectors/cloudflare/src/routes.js +309 -144
  220. package/packages/connectors/cloudflare/src/scope-catalog.js +345 -0
  221. package/packages/connectors/cloudflare/src/vault.js +2 -2
  222. package/packages/connectors/cloudflare/tests/capabilities.test.mjs +276 -0
  223. package/packages/connectors/cloudflare/tests/connector.test.mjs +26 -30
  224. package/packages/connectors/cloudflare/tests/oauth-persist.test.mjs +125 -0
  225. package/packages/identity/.agentsam/features/oauth-login-portal/providers.json +22 -2
  226. package/packages/identity/.agentsam/features/oauth-login-portal/resources.json +10 -4
  227. package/packages/identity/.agentsam/features/oauth-login-portal/routes.json +20 -0
  228. package/packages/identity/README.md +1 -1
  229. package/packages/identity/backend/README.md +1 -1
  230. package/packages/identity/migrations/D1_SCHEMA_MAPPING.md +3 -2
  231. package/packages/identity/migrations/sqlite/004_identity_oauth_consent_catalog.sql +48 -0
  232. package/packages/identity/package.json +4 -3
  233. package/packages/identity/scripts/local-identity-bridge.mjs +184 -0
  234. package/packages/identity/scripts/preview-auth-portal.mjs +7 -7
  235. package/packages/identity/src/adapters/cloudflare-d1/index.js +31 -2
  236. package/packages/identity/src/adapters/sqlite/index.js +4 -1
  237. package/packages/identity/src/contracts/auth-config.js +28 -8
  238. package/packages/identity/src/contracts/external-identity.js +1 -1
  239. package/packages/identity/src/contracts/provider.js +1 -0
  240. package/packages/identity/src/frontend/auth-portal/README.md +2 -1
  241. package/packages/identity/src/frontend/auth-portal/pages/login.html +6 -5
  242. package/packages/identity/src/frontend/auth-portal/pages/reset.html +6 -5
  243. package/packages/identity/src/frontend/auth-portal/pages/signup.html +6 -5
  244. package/packages/identity/src/frontend/auth-portal/shared/company-branding.js +1 -1
  245. package/packages/identity/src/frontend/auth-portal/shared/desktop-identity-bridge.js +207 -0
  246. package/packages/identity/src/index.js +16 -0
  247. package/packages/identity/src/migrations/0001_identity_core.sql +19 -2
  248. package/packages/identity/src/migrations/0003_accounts_ssot.sql +20 -0
  249. package/packages/identity/src/migrations/README.md +5 -2
  250. package/packages/identity/src/oauth/README.md +10 -5
  251. package/packages/identity/src/oauth/consent-view.js +388 -0
  252. package/packages/identity/src/oauth/credentials.js +31 -11
  253. package/packages/identity/src/oauth/google-desktop-exchange.js +173 -0
  254. package/packages/identity/src/providers/cloudflare/oauth.js +3 -4
  255. package/packages/identity/src/providers/cloudflare/profile.js +49 -14
  256. package/packages/identity/src/providers/iam/index.js +27 -5
  257. package/packages/identity/src/server/identity-service.js +31 -2
  258. package/packages/identity/src/server/worker-router.js +111 -81
  259. package/packages/identity/tests/auth-config.test.mjs +3 -2
  260. package/packages/identity/tests/identity-init-scaffold.test.mjs +3 -0
  261. package/packages/identity/tests/identity-service.test.mjs +16 -0
  262. package/packages/identity/tests/native-session-worker.test.mjs +64 -0
  263. package/packages/identity/tests/oauth-consent-view.test.mjs +106 -0
  264. package/packages/identity/tests/oauth-credentials.test.mjs +17 -4
  265. package/packages/identity/tests/oauth-presets-accounts-ssot.test.mjs +58 -0
  266. package/packages/identity/tests/preview-auth-portal.test.mjs +3 -3
  267. package/packages/runtime-protocol/src/index.js +154 -0
  268. package/packages/theme-scenes/README.md +164 -0
  269. package/packages/theme-scenes/package.json +53 -0
  270. package/packages/theme-scenes/src/blocks/index.js +30 -0
  271. package/packages/theme-scenes/src/contracts/index.js +286 -0
  272. package/packages/theme-scenes/src/demos/index.js +65 -0
  273. package/packages/theme-scenes/src/index.js +75 -0
  274. package/packages/theme-scenes/src/presets/index.js +263 -0
  275. package/packages/theme-scenes/src/runtime/compile.js +119 -0
  276. package/packages/theme-scenes/src/scenes/index.js +146 -0
  277. package/packages/theme-scenes/src/shell/index.js +47 -0
  278. package/packages/theme-scenes/src/themes/index.js +129 -0
  279. package/packages/theme-scenes/src/visuals/index.js +41 -0
  280. package/packages/theme-scenes/test/theme-scenes.test.mjs +179 -0
  281. package/packages/work-graph/src/index.js +34 -1
  282. package/packages/work-graph/src/renderers/gantt-model.js +24 -0
  283. package/packages/work-graph/test/work-graph.test.mjs +27 -7
  284. package/protocol/README.md +15 -7
  285. package/protocol/apps/agentsam.app.v1.schema.json +89 -7
  286. package/protocol/apps/agentsam.host-install.v1.schema.json +36 -0
  287. package/protocol/assets/README.md +9 -0
  288. package/protocol/assets/asset-record.v1.schema.json +64 -0
  289. package/protocol/runtime/agentsam.runtime.v1.schema.json +75 -0
  290. package/protocol/scoring/README.md +10 -0
  291. package/protocol/scoring/scorecard.v1.schema.json +65 -0
  292. package/protocol/ui/icon-registry.mjs +1 -0
  293. package/registry/cms-rust-machine-20260928/installable-products.json +31 -0
  294. package/registry/cms-rust-machine-20260928/manifest.json +22 -0
  295. package/registry/cms-rust-machine-20260928/migration.sql +237 -0
  296. package/registry/cms-rust-machine-20260928/receipt.json +21 -0
  297. package/registry/cms-rust-machine-20260928/receipt.sql +27 -0
  298. package/scripts/build_rapid_rust_cli.py +83 -0
  299. package/src/attachments/index.js +6 -0
  300. package/src/attachments/intake.js +235 -0
  301. package/src/capabilities/repository-snapshot.js +19 -2
  302. package/src/cli/command-catalog.js +8 -0
  303. package/src/cli.js +182 -26
  304. package/src/commands/account-auth.js +94 -8
  305. package/src/commands/app.js +307 -3
  306. package/src/commands/billing.js +127 -0
  307. package/src/commands/brand.js +74 -60
  308. package/src/commands/cheat-sheet.js +154 -0
  309. package/src/commands/cloudflare-login.js +222 -0
  310. package/src/commands/cloudflare.js +453 -23
  311. package/src/commands/codebaseindex.js +6 -1
  312. package/src/commands/compute.js +4 -0
  313. package/src/commands/connections.js +11 -5
  314. package/src/commands/credentials.js +116 -0
  315. package/src/commands/gcloud-auth.js +427 -0
  316. package/src/commands/google-cloud.js +375 -0
  317. package/src/commands/identity-init.js +2 -2
  318. package/src/commands/mcp.js +226 -33
  319. package/src/commands/ollama.js +3 -2
  320. package/src/commands/plugins.js +7 -2
  321. package/src/commands/product.js +36 -0
  322. package/src/commands/runtime-status.js +28 -9
  323. package/src/commands/runtime.js +313 -0
  324. package/src/commands/rust.js +24 -0
  325. package/src/commands/setup.js +279 -0
  326. package/src/commands/shell.js +16 -3
  327. package/src/commands/start-local.js +2 -2
  328. package/src/commands/terminal.js +171 -0
  329. package/src/commands/update.js +140 -0
  330. package/src/commands/whoami.js +329 -65
  331. package/src/features/resolve.js +1 -0
  332. package/src/index.js +4 -0
  333. package/src/indexing/ingest/inventory.js +254 -19
  334. package/src/indexing/ingest/materials.js +3 -9
  335. package/src/indexing/ingest/style-evidence.js +181 -0
  336. package/src/knowledge/source.js +3 -3
  337. package/src/lib/account-session.js +11 -4
  338. package/src/lib/app-authority.js +172 -0
  339. package/src/lib/auth.js +94 -21
  340. package/src/lib/core-client.js +5 -6
  341. package/src/lib/credentials-audit.js +451 -0
  342. package/src/lib/deploy/health.js +24 -6
  343. package/src/lib/detect-context.js +7 -1
  344. package/src/lib/google-cloud-connection.js +270 -0
  345. package/src/lib/google-cloud-inventory.js +385 -0
  346. package/src/lib/google-desktop-oauth.js +372 -0
  347. package/src/lib/google-studio-brokered-oauth.js +158 -0
  348. package/src/lib/identity-scaffold.js +24 -6
  349. package/src/lib/init-options.js +192 -0
  350. package/src/lib/local-scaffold.js +48 -16
  351. package/src/lib/provider-command-remediation.js +308 -0
  352. package/src/lib/provider-credentials.js +8 -0
  353. package/src/lib/scaffold/index.js +8 -2
  354. package/src/lib/scaffold/mcp-server.js +43 -0
  355. package/src/lib/scaffold/templates/mcp-server/index.js +397 -0
  356. package/src/lib/scaffold/templates/mcp-server/presets.js +39 -0
  357. package/src/lib/scaffold/wizards/cms.js +93 -0
  358. package/src/lib/scaffold/wizards/mcp-server.js +61 -0
  359. package/src/lib/setup/contract.js +26 -0
  360. package/src/lib/setup/discover.js +116 -0
  361. package/src/lib/setup/execute.js +205 -0
  362. package/src/lib/setup/planner.js +134 -0
  363. package/src/lib/setup/recipes.js +235 -0
  364. package/src/lib/setup/runtime-persist.js +197 -0
  365. package/src/lib/setup/runtime.js +394 -0
  366. package/src/lib/slash-commands.js +2 -0
  367. package/src/lib/terminal/machine-identity.js +95 -0
  368. package/src/lib/terminal-local.js +164 -0
  369. package/src/lib/terminal-scopes.js +52 -0
  370. package/src/lib/whoami-capabilities.js +184 -0
  371. package/src/local-pty/server.js +34 -5
  372. package/src/mcp/authority.js +58 -108
  373. package/src/mcp/client-adapters.js +68 -144
  374. package/src/mcp/client.js +142 -122
  375. package/src/mcp/cloudflare-bundles.js +225 -0
  376. package/src/mcp/index.js +12 -0
  377. package/src/plugins/cloudflare.js +1 -1
  378. package/src/providers/ollama-chat.js +2 -1
  379. package/src/sam/types.js +27 -2
  380. package/src/security/inventory.js +12 -2
  381. package/src/security/local-vault.js +2 -0
  382. package/src/security/scan.js +1 -1
  383. package/test/account-session.test.mjs +3 -3
  384. package/test/app-authority-context.test.mjs +32 -0
  385. package/test/cli/codebaseindex-plan-ux.test.mjs +1 -1
  386. package/test/cli/mcp-client.test.mjs +21 -10
  387. package/test/cli/runtime-persist.test.mjs +56 -0
  388. package/test/cli/rust-command.test.mjs +21 -0
  389. package/test/credentials-audit.test.mjs +113 -0
  390. package/test/deploy-health-scan.test.mjs +29 -1
  391. package/test/gcloud-auth.test.mjs +111 -0
  392. package/test/google-cloud-connection.test.mjs +83 -0
  393. package/test/google-cloud-inventory.test.mjs +64 -0
  394. package/test/init-options.test.mjs +35 -0
  395. package/test/integration/app-command.test.mjs +30 -0
  396. package/test/integration/cad-project.test.mjs +4 -1
  397. package/test/integration/cms-app-scaffold.test.mjs +71 -0
  398. package/test/integration/cms-site-tenancy-contract.test.mjs +3 -2
  399. package/test/integration/codebaseindex-ingest.test.mjs +48 -0
  400. package/test/integration/features-resolve.test.mjs +30 -11
  401. package/test/integration/inspect-path-cli.test.mjs +46 -0
  402. package/test/integration/inventory-evidence.test.mjs +125 -0
  403. package/test/integration/runtime-status.integration.test.mjs +2 -1
  404. package/test/knowledge.test.mjs +35 -1
  405. package/test/loopback-oauth.test.mjs +53 -0
  406. package/test/ollama.test.mjs +22 -0
  407. package/test/security.test.mjs +23 -0
  408. package/test/setup-planner.test.mjs +74 -0
  409. package/test/setup-runtime.test.mjs +51 -0
  410. package/test/terminal/local-pty.mock.test.mjs +3 -1
  411. package/test/terminal-machine-identity.test.mjs +88 -0
  412. package/test/whoami-resume.test.mjs +27 -6
  413. package/packages/agentsam-brand/test/brand-scan.test.mjs +0 -106
  414. package/packages/work-graph/prototype/README.md +0 -32
  415. package/packages/work-graph/prototype/data/demo-workgraph.js +0 -47
  416. package/packages/work-graph/prototype/renderers/timeline-model.js +0 -21
  417. package/packages/work-graph/prototype/renderers/workgraph-runtime.js +0 -38
  418. package/packages/work-graph/prototype-gnantt.html +0 -655
@@ -0,0 +1,387 @@
1
+ /**
2
+ * BrandPack v2 ingest — folders, archives (zip/tar/gz), HTML/CSS/code extraction.
3
+ */
4
+ import fs from 'node:fs';
5
+ import path from 'node:path';
6
+ import zlib from 'node:zlib';
7
+ import { spawnSync } from 'node:child_process';
8
+ import { BrandAssetError } from '../errors.js';
9
+ import { expandHome, isImagePath } from '../ingest.js';
10
+ import { INGEST_EXTENSIONS, formatCapabilities } from '../capabilities.js';
11
+ import { classifyAssetRole } from './roles.js';
12
+ import {
13
+ createEmptyBrandPack,
14
+ normalizeBrandPack,
15
+ normalizeAssetNode,
16
+ touchProvenance,
17
+ BRAND_PACK_FILENAME,
18
+ } from './schema.js';
19
+ import { sha256File } from '../inspect.js';
20
+
21
+ const ARCHIVE_EXTS = new Set(['.zip', '.tar', '.gz', '.tgz', '.tar.gz']);
22
+ const CODE_EXTS = new Set(['.html', '.htm', '.css', '.scss', '.js', '.ts', '.tsx', '.jsx', '.vue', '.svelte', '.json', '.md', '.yaml', '.yml']);
23
+
24
+ function extOf(filePath) {
25
+ const lower = String(filePath || '').toLowerCase();
26
+ if (lower.endsWith('.tar.gz')) return '.tar.gz';
27
+ return path.extname(lower);
28
+ }
29
+
30
+ export function isArchivePath(filePath) {
31
+ return ARCHIVE_EXTS.has(extOf(filePath));
32
+ }
33
+
34
+ export function isIngestiblePath(filePath) {
35
+ const ext = extOf(filePath);
36
+ if (ARCHIVE_EXTS.has(ext)) return true;
37
+ if (INGEST_EXTENSIONS.includes(ext)) return true;
38
+ if (CODE_EXTS.has(ext)) return true;
39
+ return isImagePath(filePath);
40
+ }
41
+
42
+ /**
43
+ * Extract archive to a work directory (uses system unzip/tar).
44
+ */
45
+ export function extractArchive(archivePath, destDir) {
46
+ const abs = path.resolve(archivePath);
47
+ const ext = extOf(abs);
48
+ fs.mkdirSync(destDir, { recursive: true });
49
+
50
+ if (ext === '.zip') {
51
+ const r = spawnSync('unzip', ['-q', '-o', abs, '-d', destDir], { encoding: 'utf8' });
52
+ if (r.status !== 0) {
53
+ throw new BrandAssetError('unzip_failed', r.stderr || 'unzip failed');
54
+ }
55
+ return destDir;
56
+ }
57
+ if (ext === '.tar' || ext === '.tgz' || ext === '.tar.gz') {
58
+ const args = ext === '.tar' ? ['-xf', abs, '-C', destDir] : ['-xzf', abs, '-C', destDir];
59
+ const r = spawnSync('tar', args, { encoding: 'utf8' });
60
+ if (r.status !== 0) {
61
+ throw new BrandAssetError('tar_failed', r.stderr || 'tar failed');
62
+ }
63
+ return destDir;
64
+ }
65
+ if (ext === '.gz' && !abs.endsWith('.tar.gz')) {
66
+ const outName = path.basename(abs, '.gz');
67
+ const outPath = path.join(destDir, outName);
68
+ fs.writeFileSync(outPath, zlib.gunzipSync(fs.readFileSync(abs)));
69
+ return destDir;
70
+ }
71
+ throw new BrandAssetError('archive_unsupported', `Unsupported archive: ${ext}`);
72
+ }
73
+
74
+ /**
75
+ * Extract colors, font-families, image urls from HTML/CSS/JS text.
76
+ */
77
+ export function extractFromCode(sourceText, { filePath = '' } = {}) {
78
+ const text = String(sourceText || '');
79
+ const colors = new Set();
80
+ const fonts = new Set();
81
+ const urls = new Set();
82
+ const cssVars = {};
83
+
84
+ const hexRe = /#(?:[0-9a-fA-F]{3,4}|[0-9a-fA-F]{6}|[0-9a-fA-F]{8})\b/g;
85
+ const rgbRe = /rgba?\(\s*[\d.]+\s*,\s*[\d.]+\s*,\s*[\d.]+(?:\s*,\s*[\d.]+)?\s*\)/gi;
86
+ const oklchRe = /oklch\(\s*[^)]+\)/gi;
87
+ const fontRe = /font-family\s*:\s*([^;!}{]+)/gi;
88
+ const urlRe = /url\(\s*['"]?([^'")\s]+)['"]?\s*\)/gi;
89
+ const srcRe = /(?:src|href)=['"]([^'"]+\.(?:png|jpe?g|webp|avif|svg|gif|woff2?|ttf|otf|mp4|webm|glb))['"]/gi;
90
+ const varRe = /--([a-zA-Z0-9-_]+)\s*:\s*([^;]+);/g;
91
+
92
+ for (const m of text.matchAll(hexRe)) colors.add(m[0].toLowerCase());
93
+ for (const m of text.matchAll(rgbRe)) colors.add(m[0].replace(/\s+/g, ''));
94
+ for (const m of text.matchAll(oklchRe)) colors.add(m[0].replace(/\s+/g, ' '));
95
+ for (const m of text.matchAll(fontRe)) {
96
+ const raw = m[1].split(',')[0].replace(/['"]/g, '').trim();
97
+ if (raw && !/^(inherit|initial|sans-serif|serif|monospace|system-ui)$/i.test(raw)) {
98
+ fonts.add(raw);
99
+ }
100
+ }
101
+ for (const m of text.matchAll(urlRe)) urls.add(m[1]);
102
+ for (const m of text.matchAll(srcRe)) urls.add(m[1]);
103
+ for (const m of text.matchAll(varRe)) {
104
+ cssVars[`--${m[1]}`] = m[2].trim();
105
+ }
106
+
107
+ return {
108
+ file: filePath || null,
109
+ colors: [...colors].slice(0, 64),
110
+ fonts: [...fonts].slice(0, 32),
111
+ asset_urls: [...urls].slice(0, 128),
112
+ css_variables: cssVars,
113
+ };
114
+ }
115
+
116
+ function walkFiles(root, { maxFiles = 5000 } = {}) {
117
+ const out = [];
118
+ const stack = [root];
119
+ while (stack.length && out.length < maxFiles) {
120
+ const dir = stack.pop();
121
+ let entries;
122
+ try {
123
+ entries = fs.readdirSync(dir, { withFileTypes: true });
124
+ } catch {
125
+ continue;
126
+ }
127
+ for (const ent of entries) {
128
+ if (ent.name.startsWith('.') || ent.name === 'node_modules' || ent.name === '__MACOSX') continue;
129
+ const full = path.join(dir, ent.name);
130
+ if (ent.isDirectory()) stack.push(full);
131
+ else if (ent.isFile()) out.push(full);
132
+ }
133
+ }
134
+ return out;
135
+ }
136
+
137
+ function classifyFile(filePath, rootDir) {
138
+ const rel = path.relative(rootDir, filePath).replace(/\\/g, '/');
139
+ const ext = extOf(filePath).replace(/^\./, '');
140
+ const caps = formatCapabilities(ext);
141
+ const classification = classifyAssetRole({ path: filePath, contentType: null });
142
+ let bytes = 0;
143
+ try { bytes = fs.statSync(filePath).size; } catch { /* ignore */ }
144
+
145
+ const node = normalizeAssetNode({
146
+ id: `asset_${rel.replace(/[^a-z0-9]+/gi, '_').slice(0, 64)}`,
147
+ role: classification.role,
148
+ family: classification.family,
149
+ label: path.basename(filePath),
150
+ master: {
151
+ path: filePath,
152
+ relative: rel,
153
+ format: ext || null,
154
+ bytes,
155
+ sha256: bytes < 50_000_000 ? safeSha(filePath) : null,
156
+ },
157
+ provenance: {
158
+ source: 'ingest',
159
+ confidence: classification.confidence,
160
+ needs_review: classification.needs_review,
161
+ },
162
+ licensing: caps.licensing_required
163
+ ? { redistributable: false, status: 'unknown', note: 'Font licensing must be confirmed before ZIP export' }
164
+ : null,
165
+ });
166
+
167
+ return {
168
+ asset: node,
169
+ classification,
170
+ caps,
171
+ };
172
+ }
173
+
174
+ function safeSha(filePath) {
175
+ try { return sha256File(filePath); } catch { return null; }
176
+ }
177
+
178
+ /**
179
+ * Ingest a path (file, folder, or archive) into a brand.pack.json graph.
180
+ */
181
+ export async function ingestBrandSources(inputPath, options = {}) {
182
+ const cwd = options.cwd || process.cwd();
183
+ const abs = expandHome(inputPath);
184
+ if (!abs || !fs.existsSync(abs)) {
185
+ throw new BrandAssetError('ingest_missing', `Not found: ${inputPath}`);
186
+ }
187
+
188
+ const workRoot = options.workDir
189
+ || path.join(cwd, '.agentsam', 'brand', 'ingest', `run-${Date.now()}`);
190
+ fs.mkdirSync(workRoot, { recursive: true });
191
+
192
+ let scanRoot = abs;
193
+ const extracted = [];
194
+
195
+ if (fs.statSync(abs).isFile() && isArchivePath(abs)) {
196
+ const dest = path.join(workRoot, 'extracted');
197
+ extractArchive(abs, dest);
198
+ scanRoot = dest;
199
+ extracted.push(abs);
200
+ } else if (fs.statSync(abs).isFile()) {
201
+ scanRoot = path.dirname(abs);
202
+ }
203
+
204
+ // Also expand nested archives one level
205
+ if (fs.statSync(scanRoot).isDirectory()) {
206
+ for (const f of walkFiles(scanRoot, { maxFiles: 200 })) {
207
+ if (isArchivePath(f) && f !== abs) {
208
+ const nested = path.join(workRoot, 'nested', path.basename(f, extOf(f)));
209
+ try {
210
+ extractArchive(f, nested);
211
+ extracted.push(f);
212
+ } catch {
213
+ /* keep going */
214
+ }
215
+ }
216
+ }
217
+ }
218
+
219
+ const roots = [scanRoot];
220
+ if (fs.existsSync(path.join(workRoot, 'nested'))) {
221
+ roots.push(...fs.readdirSync(path.join(workRoot, 'nested')).map((n) => path.join(workRoot, 'nested', n)));
222
+ }
223
+
224
+ let pack = options.pack
225
+ ? normalizeBrandPack(options.pack)
226
+ : createEmptyBrandPack({ brandId: options.brandId || '', brandName: options.brandName || '' });
227
+
228
+ if (!pack.brand.id && options.brandId) pack.brand.id = String(options.brandId).toLowerCase();
229
+
230
+ const detections = [];
231
+ const codeExtractions = [];
232
+ const recommendations = [];
233
+ const seenSha = new Map();
234
+
235
+ for (const root of roots) {
236
+ if (!fs.existsSync(root)) continue;
237
+ const files = fs.statSync(root).isFile()
238
+ ? [root]
239
+ : walkFiles(root).filter(isIngestiblePath);
240
+
241
+ // Single-file ingest when user pointed at one file
242
+ if (fs.statSync(abs).isFile() && !isArchivePath(abs)) {
243
+ files.length = 0;
244
+ files.push(abs);
245
+ }
246
+
247
+ for (const file of files) {
248
+ const ext = extOf(file);
249
+ if (ARCHIVE_EXTS.has(ext)) continue;
250
+
251
+ if (CODE_EXTS.has(ext) || ext === '.html' || ext === '.htm') {
252
+ try {
253
+ const text = fs.readFileSync(file, 'utf8');
254
+ const extractedCode = extractFromCode(text, { filePath: file });
255
+ codeExtractions.push(extractedCode);
256
+ // Merge CSS vars / colors into tokens (soft)
257
+ for (const [k, v] of Object.entries(extractedCode.css_variables || {})) {
258
+ if (!pack.tokens.color[k]) {
259
+ pack.tokens.color[k] = { value: v, source: path.basename(file), inferred: true };
260
+ }
261
+ }
262
+ let fi = 0;
263
+ for (const font of extractedCode.fonts) {
264
+ const key = `font.inferred.${fi++}`;
265
+ if (!pack.tokens.type[key]) {
266
+ pack.tokens.type[key] = { family: font, source: path.basename(file), inferred: true };
267
+ }
268
+ }
269
+ } catch {
270
+ /* binary masquerading */
271
+ }
272
+ }
273
+
274
+ if (!isIngestiblePath(file)) continue;
275
+ // Skip pure code from asset list unless it's tokens/docs
276
+ if (['.js', '.ts', '.tsx', '.jsx', '.vue', '.svelte'].includes(ext)) continue;
277
+
278
+ const { asset, classification } = classifyFile(file, root);
279
+ const sha = asset.master?.sha256;
280
+ if (sha && seenSha.has(sha)) {
281
+ recommendations.push({
282
+ type: 'duplicate',
283
+ message: `${path.basename(file)} duplicates ${seenSha.get(sha)}`,
284
+ path: file,
285
+ });
286
+ continue;
287
+ }
288
+ if (sha) seenSha.set(sha, asset.master.relative || file);
289
+
290
+ pack.assets.push(asset);
291
+ detections.push({
292
+ path: asset.master?.relative || file,
293
+ role: classification.role,
294
+ confidence: classification.confidence,
295
+ ok: classification.confidence >= 0.7,
296
+ label: classification.label,
297
+ });
298
+ }
299
+ }
300
+
301
+ // Recommendations
302
+ const roles = new Set(pack.assets.map((a) => a.role));
303
+ if (roles.has('logo.primary') === false && pack.assets.some((a) => a.family === 'logo')) {
304
+ /* ok */
305
+ }
306
+ if (!roles.has('logo.primary') && !roles.has('logo.mark')) {
307
+ recommendations.push({ type: 'missing', message: 'No primary logo / mark detected' });
308
+ }
309
+ if (!roles.has('favicon') && !roles.has('icon.app')) {
310
+ recommendations.push({ type: 'missing', message: 'No favicon or app icon detected' });
311
+ }
312
+ if (roles.has('hero.landscape') && !roles.has('hero.mobile')) {
313
+ recommendations.push({ type: 'missing', message: 'Desktop hero found but no mobile hero — consider art-direction crop' });
314
+ }
315
+ for (const a of pack.assets) {
316
+ if (a.provenance?.needs_review) {
317
+ recommendations.push({
318
+ type: 'review',
319
+ message: `Low-confidence classification for ${a.label || a.id} → ${a.role}`,
320
+ asset_id: a.id,
321
+ });
322
+ }
323
+ if (a.licensing?.status === 'unknown') {
324
+ recommendations.push({
325
+ type: 'licensing',
326
+ message: `Font ${a.label} cannot be redistributed until licensing is confirmed`,
327
+ asset_id: a.id,
328
+ });
329
+ }
330
+ }
331
+
332
+ pack = touchProvenance(pack, {
333
+ op: 'ingest',
334
+ input: abs,
335
+ asset_count: pack.assets.length,
336
+ archives: extracted.map((p) => path.basename(p)),
337
+ });
338
+
339
+ const outDir = options.outDir || path.join(cwd, '.agentsam', 'brand', 'packs', pack.brand.id || 'untitled');
340
+ fs.mkdirSync(outDir, { recursive: true });
341
+ const packPath = path.join(outDir, BRAND_PACK_FILENAME);
342
+ if (options.write !== false) {
343
+ fs.writeFileSync(packPath, `${JSON.stringify(pack, null, 2)}\n`);
344
+ }
345
+
346
+ return {
347
+ ok: true,
348
+ capability: 'brand.ingest',
349
+ pack,
350
+ pack_path: packPath,
351
+ detections,
352
+ code_extractions: codeExtractions,
353
+ recommendations,
354
+ stats: {
355
+ assets: pack.assets.length,
356
+ high_confidence: detections.filter((d) => d.ok).length,
357
+ needs_review: detections.filter((d) => !d.ok).length,
358
+ archives_expanded: extracted.length,
359
+ tokens_color: Object.keys(pack.tokens.color).length,
360
+ tokens_type: Object.keys(pack.tokens.type).length,
361
+ },
362
+ };
363
+ }
364
+
365
+ export async function loadBrandPack(fromPath, { cwd = process.cwd() } = {}) {
366
+ const abs = path.resolve(cwd, fromPath);
367
+ if (fs.statSync(abs).isDirectory()) {
368
+ const candidate = path.join(abs, BRAND_PACK_FILENAME);
369
+ if (fs.existsSync(candidate)) {
370
+ return normalizeBrandPack(JSON.parse(fs.readFileSync(candidate, 'utf8')));
371
+ }
372
+ throw new BrandAssetError('pack_missing', `No ${BRAND_PACK_FILENAME} in ${fromPath}`);
373
+ }
374
+ return normalizeBrandPack(JSON.parse(fs.readFileSync(abs, 'utf8')));
375
+ }
376
+
377
+ export function saveBrandPack(pack, outDir) {
378
+ fs.mkdirSync(outDir, { recursive: true });
379
+ const file = path.join(outDir, BRAND_PACK_FILENAME);
380
+ const normalized = normalizeBrandPack(pack);
381
+ normalized.provenance = {
382
+ ...normalized.provenance,
383
+ updated_at: new Date().toISOString(),
384
+ };
385
+ fs.writeFileSync(file, `${JSON.stringify(normalized, null, 2)}\n`);
386
+ return file;
387
+ }
@@ -0,0 +1,180 @@
1
+ /**
2
+ * Asset roles — semantic identity, not dimensions.
3
+ * A 512px logo and a 512px app icon are different assets.
4
+ */
5
+
6
+ export const ASSET_ROLES = Object.freeze({
7
+ // Logo system
8
+ 'logo.primary': {
9
+ family: 'logo',
10
+ label: 'Primary logo',
11
+ canonical_policy: 'vector_preferred',
12
+ master_prefers: ['svg', 'pdf'],
13
+ },
14
+ 'logo.secondary': { family: 'logo', label: 'Secondary logo', canonical_policy: 'vector_preferred', master_prefers: ['svg'] },
15
+ 'logo.mark': { family: 'logo', label: 'Mark / monogram', canonical_policy: 'vector_preferred', master_prefers: ['svg'] },
16
+ 'logo.wordmark': { family: 'logo', label: 'Wordmark', canonical_policy: 'vector_preferred', master_prefers: ['svg'] },
17
+ 'logo.black': { family: 'logo', label: 'Logo black', canonical_policy: 'vector_preferred', master_prefers: ['svg'] },
18
+ 'logo.white': { family: 'logo', label: 'Logo white', canonical_policy: 'vector_preferred', master_prefers: ['svg'] },
19
+
20
+ // Icons / platform
21
+ favicon: { family: 'favicon', label: 'Favicon', canonical_policy: 'svg_plus_png', master_prefers: ['svg', 'png'] },
22
+ 'icon.app': { family: 'app-icon', label: 'App icon', canonical_policy: 'artwork_1024', master_prefers: ['png', 'svg'] },
23
+ 'icon.ios': { family: 'app-icon', label: 'iOS icon set', canonical_policy: 'artwork_1024', master_prefers: ['png'] },
24
+ 'icon.macos': { family: 'app-icon', label: 'macOS icon', canonical_policy: 'artwork_1024', master_prefers: ['png', 'icns'] },
25
+ 'icon.android': { family: 'app-icon', label: 'Android icon', canonical_policy: 'artwork_1024', master_prefers: ['png', 'svg'] },
26
+ 'icon.maskable': { family: 'app-icon', label: 'Maskable / adaptive', canonical_policy: 'artwork_1024', master_prefers: ['png'] },
27
+ 'icon.windows': { family: 'app-icon', label: 'Windows icon', canonical_policy: 'artwork_1024', master_prefers: ['png', 'ico'] },
28
+
29
+ // Heroes / imagery
30
+ 'hero.landscape': { family: 'hero', label: 'Desktop hero', canonical_policy: 'photographic', master_prefers: ['jpg', 'png', 'tiff'] },
31
+ 'hero.ultrawide': { family: 'hero', label: 'Ultrawide hero', canonical_policy: 'photographic', master_prefers: ['jpg', 'png'] },
32
+ 'hero.mobile': { family: 'hero', label: 'Mobile hero', canonical_policy: 'photographic', master_prefers: ['jpg', 'png'] },
33
+ 'hero.poster': { family: 'hero', label: 'Poster / still', canonical_policy: 'photographic', master_prefers: ['jpg', 'png'] },
34
+ 'hero.background': { family: 'hero', label: 'Background hero', canonical_policy: 'photographic', master_prefers: ['jpg', 'png'] },
35
+ 'hero.product': { family: 'hero', label: 'Product hero', canonical_policy: 'photographic', master_prefers: ['png', 'jpg'] },
36
+
37
+ // Social
38
+ 'social.og': { family: 'social', label: 'Open Graph', canonical_policy: 'composition', master_prefers: ['png', 'jpg'] },
39
+ 'social.square': { family: 'social', label: 'Square social', canonical_policy: 'composition', master_prefers: ['png', 'jpg'] },
40
+ 'social.portrait': { family: 'social', label: 'Portrait social', canonical_policy: 'composition', master_prefers: ['png', 'jpg'] },
41
+ 'social.story': { family: 'social', label: 'Story / reel poster', canonical_policy: 'composition', master_prefers: ['png', 'jpg'] },
42
+
43
+ // Product shots
44
+ 'product.raw': { family: 'product-shot', label: 'Raw screenshot', canonical_policy: 'png_transparency', master_prefers: ['png'] },
45
+ 'product.framed': { family: 'product-shot', label: 'Device-framed shot', canonical_policy: 'png_transparency', master_prefers: ['png'] },
46
+ 'product.marketing': { family: 'product-shot', label: 'Marketing composition', canonical_policy: 'composition', master_prefers: ['png', 'jpg'] },
47
+ 'product.thumb': { family: 'product-shot', label: 'Thumbnail', canonical_policy: 'png_transparency', master_prefers: ['png', 'webp'] },
48
+ 'product.docs': { family: 'product-shot', label: 'Documentation shot', canonical_policy: 'png_transparency', master_prefers: ['png'] },
49
+
50
+ // Motion
51
+ 'motion.hero': { family: 'video', label: 'Hero video', canonical_policy: 'video_master', master_prefers: ['mov', 'mp4'] },
52
+ 'motion.loop': { family: 'video', label: 'UI loop (silent)', canonical_policy: 'video_loop', master_prefers: ['mp4', 'webm'] },
53
+ 'motion.lottie': { family: 'motion-graphics', label: 'Lottie', canonical_policy: 'source_preserve', master_prefers: ['json'] },
54
+ 'motion.rive': { family: 'motion-graphics', label: 'Rive', canonical_policy: 'source_preserve', master_prefers: ['riv'] },
55
+
56
+ // 3D
57
+ 'model.product': { family: 'model', label: 'Product model', canonical_policy: 'glb', master_prefers: ['glb', 'gltf'] },
58
+ 'model.brand': { family: 'model', label: 'Brand render model', canonical_policy: 'glb', master_prefers: ['glb'] },
59
+ 'model.ar': { family: 'model', label: 'AR model', canonical_policy: 'glb_usdz', master_prefers: ['glb', 'usdz'] },
60
+ 'model.engineering': { family: 'model', label: 'Engineering model', canonical_policy: 'source_preserve', master_prefers: ['glb', 'fbx', 'obj'] },
61
+
62
+ // Type + tokens + docs
63
+ 'type.display': { family: 'font', label: 'Display font', canonical_policy: 'licensed_source', master_prefers: ['otf', 'ttf'] },
64
+ 'type.heading': { family: 'font', label: 'Heading font', canonical_policy: 'licensed_source', master_prefers: ['otf', 'ttf', 'woff2'] },
65
+ 'type.body': { family: 'font', label: 'Body font', canonical_policy: 'licensed_source', master_prefers: ['otf', 'ttf', 'woff2'] },
66
+ 'type.mono': { family: 'font', label: 'Mono font', canonical_policy: 'licensed_source', master_prefers: ['otf', 'ttf', 'woff2'] },
67
+ 'type.ui': { family: 'font', label: 'UI font', canonical_policy: 'licensed_source', master_prefers: ['otf', 'ttf', 'woff2'] },
68
+ 'token.color': { family: 'tokens', label: 'Color tokens', canonical_policy: 'dtcg_json', master_prefers: ['json', 'yaml'] },
69
+ 'token.type': { family: 'tokens', label: 'Type tokens', canonical_policy: 'dtcg_json', master_prefers: ['json'] },
70
+ 'token.theme': { family: 'tokens', label: 'Theme / CSS', canonical_policy: 'token_source', master_prefers: ['css', 'json'] },
71
+ 'doc.guideline': { family: 'docs', label: 'Brand guideline', canonical_policy: 'structured', master_prefers: ['md', 'html', 'json'] },
72
+ 'doc.markdown': { family: 'docs', label: 'Markdown doc', canonical_policy: 'structured', master_prefers: ['md'] },
73
+
74
+ 'asset.generic': { family: 'generic', label: 'Unclassified asset', canonical_policy: 'inspect', master_prefers: [] },
75
+ });
76
+
77
+ export function listAssetRoles() {
78
+ return Object.entries(ASSET_ROLES).map(([id, meta]) => ({ id, ...meta }));
79
+ }
80
+
81
+ export function getAssetRole(id) {
82
+ return ASSET_ROLES[String(id || '').trim()] || null;
83
+ }
84
+
85
+ /** Composition / canvas targets for hero & social roles */
86
+ export const ROLE_CANVAS = Object.freeze({
87
+ 'hero.landscape': { width: 1920, height: 1080 },
88
+ 'hero.ultrawide': { width: 2560, height: 1080 },
89
+ 'hero.mobile': { width: 1080, height: 1350 },
90
+ 'hero.poster': { width: 1080, height: 1920 },
91
+ 'hero.product': { width: 1920, height: 1080 },
92
+ 'social.og': { width: 1200, height: 630 },
93
+ 'social.square': { width: 1080, height: 1080 },
94
+ 'social.portrait': { width: 1080, height: 1350 },
95
+ 'social.story': { width: 1080, height: 1920 },
96
+ 'icon.app': { width: 1024, height: 1024 },
97
+ 'icon.maskable': { width: 512, height: 512, safe_padding: 0.2 },
98
+ });
99
+
100
+ /**
101
+ * Heuristic role classification from filename + extension + optional dims.
102
+ */
103
+ export function classifyAssetRole({ path: filePath, contentType, width, height, textHint } = {}) {
104
+ const name = String(filePath || '').toLowerCase();
105
+ const base = name.split('/').pop() || '';
106
+ const ext = (base.includes('.') ? base.split('.').pop() : '') || '';
107
+ const hints = `${base} ${textHint || ''}`.toLowerCase();
108
+
109
+ let role = 'asset.generic';
110
+ let confidence = 0.35;
111
+
112
+ if (/\.(otf|ttf|woff2?)$/i.test(name) || ['otf', 'ttf', 'woff', 'woff2'].includes(ext)) {
113
+ role = hints.includes('mono') || hints.includes('code')
114
+ ? 'type.mono'
115
+ : hints.includes('display')
116
+ ? 'type.display'
117
+ : hints.includes('heading') || hints.includes('title')
118
+ ? 'type.heading'
119
+ : 'type.body';
120
+ confidence = 0.95;
121
+ } else if (/\.(glb|gltf|usdz|obj|fbx)$/i.test(name)) {
122
+ role = hints.includes('ar') || ext === 'usdz' ? 'model.ar' : 'model.product';
123
+ confidence = 0.88;
124
+ } else if (/\.(mp4|mov|webm|mkv)$/i.test(name)) {
125
+ role = hints.includes('loop') || hints.includes('ui') ? 'motion.loop' : 'motion.hero';
126
+ confidence = 0.9;
127
+ } else if (/\.json$/i.test(name) && (hints.includes('lottie') || hints.includes('animation'))) {
128
+ role = 'motion.lottie';
129
+ confidence = 0.85;
130
+ } else if (/\.riv$/i.test(name)) {
131
+ role = 'motion.rive';
132
+ confidence = 0.9;
133
+ } else if (/\.(css|scss)$/i.test(name) || (/\.json$/i.test(name) && hints.includes('token'))) {
134
+ role = hints.includes('token') || hints.includes('theme') ? 'token.theme' : 'token.color';
135
+ confidence = 0.8;
136
+ } else if (/\.(md|markdown)$/i.test(name)) {
137
+ role = hints.includes('brand') || hints.includes('guideline') ? 'doc.guideline' : 'doc.markdown';
138
+ confidence = 0.75;
139
+ } else if (/favicon|apple-touch|site\.webmanifest/i.test(hints)) {
140
+ role = 'favicon';
141
+ confidence = 0.96;
142
+ } else if (/maskable|adaptive/i.test(hints)) {
143
+ role = 'icon.maskable';
144
+ confidence = 0.92;
145
+ } else if (/app[-_]?icon|icon[-_]?1024|icns/i.test(hints)) {
146
+ role = 'icon.app';
147
+ confidence = 0.93;
148
+ } else if (/logo|wordmark|mark[-_]/i.test(hints) || ext === 'svg') {
149
+ if (/mark|mono|glyph/i.test(hints)) role = 'logo.mark';
150
+ else if (/word/i.test(hints)) role = 'logo.wordmark';
151
+ else if (/white/i.test(hints)) role = 'logo.white';
152
+ else if (/black/i.test(hints)) role = 'logo.black';
153
+ else role = 'logo.primary';
154
+ confidence = ext === 'svg' ? 0.96 : 0.85;
155
+ } else if (/og[-_]?image|open[-_]?graph|twitter[-_]?card|social/i.test(hints)) {
156
+ role = 'social.og';
157
+ confidence = 0.91;
158
+ } else if (/hero|banner|masthead/i.test(hints)) {
159
+ if (width && height && height > width) role = 'hero.mobile';
160
+ else if (width && height && width / height > 2) role = 'hero.ultrawide';
161
+ else role = 'hero.landscape';
162
+ confidence = 0.88;
163
+ } else if (/screenshot|product[-_]?shot|ui[-_]?shot/i.test(hints)) {
164
+ role = 'product.raw';
165
+ confidence = 0.86;
166
+ } else if (ext === 'html' || ext === 'htm') {
167
+ role = 'doc.guideline';
168
+ confidence = 0.55;
169
+ }
170
+
171
+ const meta = getAssetRole(role) || ASSET_ROLES['asset.generic'];
172
+ return {
173
+ role,
174
+ family: meta.family,
175
+ confidence,
176
+ label: meta.label,
177
+ canonical_policy: meta.canonical_policy,
178
+ needs_review: confidence < 0.7,
179
+ };
180
+ }