@inneranimalmedia/agentsam-sdk 2.6.5 → 2.6.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (371) hide show
  1. package/AGENTSAM.md +29 -0
  2. package/apps/README.md +5 -0
  3. package/apps/cad-creator/README.md +4 -4
  4. package/apps/cad-creator/shared/cad/package.json +1 -1
  5. package/apps/client-cms-editor/AGENTS.md +12 -7
  6. package/apps/client-cms-editor/README.md +76 -48
  7. package/apps/client-cms-editor/agentsam.app.json +26 -9
  8. package/apps/client-cms-editor/backend/package.json +20 -3
  9. package/apps/client-cms-editor/backend/src/api/client.ts +134 -101
  10. package/apps/client-cms-editor/backend/src/index.ts +1 -1
  11. package/apps/client-cms-editor/backend/src/model.ts +11 -115
  12. package/apps/client-cms-editor/backend/src/preview/bridge.ts +1 -1
  13. package/apps/client-cms-editor/backend/tsconfig.json +6 -1
  14. package/apps/client-cms-editor/bin/agentsam-cms.js +262 -0
  15. package/apps/client-cms-editor/bin/agentsam-cms.mjs +2 -228
  16. package/apps/client-cms-editor/frontend/package.json +16 -7
  17. package/apps/client-cms-editor/frontend/src/AgentSamDrawer.tsx +9 -41
  18. package/apps/client-cms-editor/frontend/src/CmsAgentSurface.tsx +19 -174
  19. package/apps/client-cms-editor/frontend/src/adapters/heuristic.ts +29 -0
  20. package/apps/client-cms-editor/frontend/src/adapters/http.ts +628 -0
  21. package/apps/client-cms-editor/frontend/src/adapters/memory.ts +510 -0
  22. package/apps/client-cms-editor/frontend/src/editor/CmsEditor.tsx +213 -0
  23. package/apps/client-cms-editor/frontend/src/editor/CmsEditorProvider.tsx +20 -0
  24. package/apps/client-cms-editor/frontend/src/editor/canvas/PreviewCanvas.tsx +53 -0
  25. package/apps/client-cms-editor/frontend/src/{CmsEditor.tsx → editor/legacy/CmsEditorPrototype.tsx} +52 -23
  26. package/apps/client-cms-editor/frontend/src/editor/useCmsEditorController.ts +218 -0
  27. package/apps/client-cms-editor/frontend/src/index.ts +19 -5
  28. package/apps/client-cms-editor/frontend/src/lib/agent-host.ts +24 -0
  29. package/apps/client-cms-editor/frontend/src/main.tsx +82 -8
  30. package/apps/client-cms-editor/frontend/src/mount.tsx +92 -30
  31. package/apps/client-cms-editor/frontend/src/styles/agentsam-drawer.css +1 -1
  32. package/apps/client-cms-editor/frontend/src/styles/cmsShell.css +8 -8
  33. package/apps/client-cms-editor/frontend/src/styles/studio.css +55 -3
  34. package/apps/client-cms-editor/frontend/tsconfig.json +12 -1
  35. package/apps/client-cms-editor/frontend/vite.config.ts +12 -0
  36. package/apps/client-cms-editor/package-lock.json +973 -134
  37. package/apps/client-cms-editor/package.json +118 -6
  38. package/apps/client-cms-editor/reference/harvest/HARVEST_RECEIPT.json +201 -0
  39. package/apps/client-cms-editor/reference/harvest/PROVENANCE_HISTORY.txt +10 -0
  40. package/apps/client-cms-editor/reference/harvest/README.md +8 -0
  41. package/apps/client-cms-editor/reference/harvest/plans/ARCHIVE-INTAKE.md +135 -0
  42. package/apps/client-cms-editor/reference/harvest/plans/CHATGPT-IDENTITY-HARVEST.md +83 -0
  43. package/apps/client-cms-editor/reference/harvest/plans/CMS-EDITOR-HARVEST.md +166 -0
  44. package/apps/client-cms-editor/reference/harvest/plans/HARVEST-INDEX.md +196 -0
  45. package/apps/client-cms-editor/reference/harvest/plans/INNERANIMALS-CONTENT-001.md +137 -0
  46. package/apps/client-cms-editor/reference/harvest/plans/NO-IMPLICIT-SIDE-EFFECTS.md +87 -0
  47. package/apps/client-cms-editor/reference/harvest/plans/STOREFRONT-SURFACE-MAP.md +140 -0
  48. package/apps/client-cms-editor/reference/harvest/plans/THEME-INNERANIMALS-HARVEST.md +137 -0
  49. package/apps/client-cms-editor/reference/harvest/plans/TOOLING-LAB.md +63 -0
  50. package/apps/client-cms-editor/reference/harvest/plans/harvest-manifest.json +97 -0
  51. package/apps/client-cms-editor/reference/harvest/plans/local-cms-harvest-schema.sql +328 -0
  52. package/apps/client-cms-editor/shared/cms/package.json +17 -7
  53. package/apps/client-cms-editor/shared/cms/src/adapter.ts +204 -0
  54. package/apps/client-cms-editor/shared/cms/src/agent-context.ts +7 -5
  55. package/apps/client-cms-editor/shared/cms/src/editor-types.ts +32 -0
  56. package/apps/client-cms-editor/shared/cms/src/host.ts +82 -0
  57. package/apps/client-cms-editor/shared/cms/src/index.ts +4 -0
  58. package/apps/client-cms-editor/shared/cms/src/map.ts +115 -0
  59. package/apps/client-cms-editor/shared/cms/src/starter-pack.ts +158 -0
  60. package/contracts/source-types.v1.json +353 -0
  61. package/docs/CMS_CONTEXTUAL_COMPOSER.md +1 -1
  62. package/docs/PRODUCT_LIFECYCLE.md +566 -0
  63. package/docs/THEME_REFINERY.md +2 -2
  64. package/docs/architecture/AGENTSAM_RUNTIME_PROTOCOL.md +40 -20
  65. package/docs/content-studio/REVISION_GATE_2026-09-27.md +1 -1
  66. package/docs/plans/LOCAL_STUDIO_DESKTOP_RELEASE_2026-09-29.md +150 -0
  67. package/migrations/d1/0017_identity_native_oauth.sql +21 -0
  68. package/native/agentsam-machine/Cargo.lock +426 -0
  69. package/native/agentsam-machine/Cargo.toml +9 -0
  70. package/native/agentsam-machine/cli/Cargo.toml +14 -0
  71. package/native/agentsam-machine/cli/src/main.rs +77 -0
  72. package/native/agentsam-machine/core/Cargo.toml +15 -0
  73. package/native/agentsam-machine/core/src/assets.rs +790 -0
  74. package/native/agentsam-machine/core/src/bound.rs +298 -0
  75. package/native/agentsam-machine/core/src/enrich.rs +706 -0
  76. package/native/agentsam-machine/core/src/frontend.rs +442 -0
  77. package/native/agentsam-machine/core/src/lib.rs +1086 -0
  78. package/native/agentsam-machine/core/src/liquid.rs +528 -0
  79. package/native/agentsam-machine/core/src/source_types.rs +78 -0
  80. package/package.json +51 -21
  81. package/packages/agentsam-brand/README.md +1 -1
  82. package/packages/agentsam-brand/package.json +4 -4
  83. package/packages/agentsam-brand/src/index.js +1 -1
  84. package/packages/agentsam-contracts/package.json +13 -3
  85. package/packages/agentsam-contracts/src/tools.ts +22 -0
  86. package/packages/agentsam-errors/package.json +13 -3
  87. package/packages/agentsam-knowledge/package.json +18 -4
  88. package/packages/agentsam-knowledge/src/autorag/index.js +10 -3
  89. package/packages/agentsam-knowledge/src/backends/index.js +33 -1
  90. package/packages/agentsam-knowledge/test/autorag.test.mjs +60 -1
  91. package/packages/agentsam-nav/package.json +24 -6
  92. package/packages/agentsam-queue-control/README.md +1 -1
  93. package/packages/agentsam-queue-control/package.json +7 -2
  94. package/packages/agentsam-rapid-rust/src/main.rs +1 -1
  95. package/packages/agentsam-repository/package.json +13 -3
  96. package/packages/agentsam-repository/src/source-types.js +8 -0
  97. package/packages/agentsam-vault/package.json +14 -4
  98. package/packages/agentsam-workbench/package.json +15 -4
  99. package/packages/agentsam-workbench/src/agent/ToolPermissionRequest.tsx +94 -0
  100. package/packages/agentsam-workbench/src/agent/index.ts +2 -0
  101. package/packages/agentsam-workbench/src/agent/tool-permission.css +134 -0
  102. package/packages/connectors/cloudflare/package.json +13 -3
  103. package/packages/connectors/cloudflare/src/api-client.js +3 -2
  104. package/packages/connectors/cloudflare/src/families/vectorize.js +127 -0
  105. package/packages/connectors/cloudflare/src/index.js +1 -0
  106. package/packages/heuristic-theme/README.md +2 -2
  107. package/packages/heuristic-theme/package.json +8 -3
  108. package/packages/heuristic-theme/src/registry.js +2 -2
  109. package/packages/heuristic-theme/src/theme.js +1 -1
  110. package/packages/heuristic-theme/test/theme.test.mjs +1 -1
  111. package/packages/identity/.agentsam/features/oauth-login-portal/agentsam.feature.json +1 -1
  112. package/packages/identity/.agentsam/features/oauth-login-portal/providers.json +27 -7
  113. package/packages/identity/README.md +2 -2
  114. package/packages/identity/migrations/D1_SCHEMA_MAPPING.md +18 -15
  115. package/packages/identity/migrations/apply-portable.js +109 -0
  116. package/packages/identity/migrations/sqlite/004_identity_oauth_consent_catalog.sql +1 -1
  117. package/packages/identity/migrations/sqlite/005_identity_company_native.sql +52 -0
  118. package/packages/identity/package.json +27 -6
  119. package/packages/identity/schema/agentsam.identity/manifest.json +101 -0
  120. package/packages/identity/scripts/local-identity-bridge.mjs +13 -7
  121. package/packages/identity/scripts/preview-auth-portal.mjs +6 -6
  122. package/packages/identity/src/adapters/cloudflare-d1/index.js +8 -401
  123. package/packages/identity/src/adapters/iam-compat/index.js +540 -0
  124. package/packages/identity/src/adapters/portable-d1/index.js +18 -0
  125. package/packages/identity/src/adapters/portable-store.js +479 -0
  126. package/packages/identity/src/adapters/sqlite/index.js +13 -312
  127. package/packages/identity/src/contracts/auth-config.js +0 -1
  128. package/packages/identity/src/contracts/identity-store.js +56 -5
  129. package/packages/identity/src/contracts/provider.js +1 -0
  130. package/packages/identity/src/contracts/sign-in-options.js +104 -0
  131. package/packages/identity/src/core/constants.js +1 -1
  132. package/packages/identity/src/core/session-policy.js +31 -0
  133. package/packages/identity/src/frontend/auth-portal/pages/login.html +6 -6
  134. package/packages/identity/src/frontend/auth-portal/pages/reset.html +5 -5
  135. package/packages/identity/src/frontend/auth-portal/pages/signup.html +5 -5
  136. package/packages/identity/src/frontend/auth-portal/shared/company-branding.js +1 -1
  137. package/packages/identity/src/frontend/auth-portal/shared/desktop-identity-bridge.js +6 -37
  138. package/packages/identity/src/index.js +28 -1
  139. package/packages/identity/src/migrations/README.md +23 -23
  140. package/packages/identity/src/oauth/README.md +1 -1
  141. package/packages/identity/src/oauth/credentials.js +10 -11
  142. package/packages/identity/src/oauth/google-desktop-exchange.js +195 -27
  143. package/packages/identity/src/oauth/iam-platform.js +21 -9
  144. package/packages/identity/src/oauth/native-handoff.js +136 -0
  145. package/packages/identity/src/providers/chatgpt/headers.js +65 -0
  146. package/packages/identity/src/providers/chatgpt/index.js +86 -0
  147. package/packages/identity/src/providers/chatgpt/mapper.js +43 -0
  148. package/packages/identity/src/providers/chatgpt/paths.js +45 -0
  149. package/packages/identity/src/providers/github/oauth.js +1 -2
  150. package/packages/identity/src/providers/github/profile.js +16 -2
  151. package/packages/identity/src/providers/index.js +11 -3
  152. package/packages/identity/src/server/identity-service.js +2 -1
  153. package/packages/identity/src/server/worker-router.js +71 -18
  154. package/packages/identity/tests/chatgpt-provider.test.mjs +75 -0
  155. package/packages/identity/tests/google-desktop-identity-login.test.mjs +210 -0
  156. package/packages/identity/tests/identity-init-scaffold.test.mjs +15 -4
  157. package/packages/identity/tests/lane1-identity-store-parity.test.mjs +527 -0
  158. package/packages/identity/tests/lane1-packed-consumer.test.mjs +175 -0
  159. package/packages/identity/tests/native-oauth-handoff.test.mjs +292 -0
  160. package/packages/identity/tests/oauth-credentials.test.mjs +4 -4
  161. package/packages/identity/tests/preview-auth-portal.test.mjs +4 -2
  162. package/packages/identity/tests/session-routes-policy.test.mjs +13 -1
  163. package/packages/identity/tests/worker-runtime-boundary.test.mjs +11 -0
  164. package/packages/providers/completeful/package.json +7 -2
  165. package/packages/theme-church-site/package.json +17 -6
  166. package/packages/theme-church-site/src/harvest.json +4 -2
  167. package/packages/theme-church-site/src/index.js +7 -3
  168. package/packages/theme-church-site/test/theme.test.mjs +4 -2
  169. package/packages/theme-companions-site/package.json +17 -6
  170. package/packages/theme-companions-site/src/harvest.json +4 -2
  171. package/packages/theme-companions-site/src/index.js +7 -3
  172. package/packages/theme-companions-site/test/theme.test.mjs +4 -2
  173. package/packages/theme-floors-site/package.json +17 -6
  174. package/packages/theme-floors-site/src/harvest.json +4 -2
  175. package/packages/theme-floors-site/src/index.js +7 -3
  176. package/packages/theme-floors-site/test/theme.test.mjs +4 -2
  177. package/packages/theme-fuelnfree-site/package.json +17 -6
  178. package/packages/theme-fuelnfree-site/src/harvest.json +4 -2
  179. package/packages/theme-fuelnfree-site/src/index.js +7 -3
  180. package/packages/theme-fuelnfree-site/test/theme.test.mjs +4 -2
  181. package/packages/theme-handyman-site/package.json +17 -6
  182. package/packages/theme-handyman-site/src/harvest.json +4 -2
  183. package/packages/theme-handyman-site/src/index.js +7 -3
  184. package/packages/theme-handyman-site/test/theme.test.mjs +4 -2
  185. package/packages/theme-insurance-site/package.json +17 -6
  186. package/packages/theme-insurance-site/src/harvest.json +4 -2
  187. package/packages/theme-insurance-site/src/index.js +7 -3
  188. package/packages/theme-insurance-site/test/theme.test.mjs +4 -2
  189. package/packages/theme-scenes/README.md +1 -1
  190. package/packages/theme-scenes/package.json +4 -3
  191. package/packages/theme-scenes/src/registry.js +187 -0
  192. package/packages/theme-shinshu-site/package.json +17 -6
  193. package/packages/theme-shinshu-site/src/harvest.json +4 -2
  194. package/packages/theme-shinshu-site/src/index.js +7 -3
  195. package/packages/theme-shinshu-site/test/theme.test.mjs +4 -2
  196. package/packages/work-graph/package.json +14 -4
  197. package/protocol/FILEMETA_V1.md +2 -2
  198. package/protocol/capabilities/manifest.json +1 -1
  199. package/protocol/database/agentsam.schema-pack.v1.schema.json +72 -0
  200. package/protocol/presets/catalog.json +2 -2
  201. package/protocol/theme-refinery/lineage-registry.json +105 -0
  202. package/protocol/theme-refinery/product-metadata.schema.json +21 -1
  203. package/skills/grok-auth/SKILL.md +110 -0
  204. package/skills/grok-auth/agentsam.skill.json +25 -0
  205. package/skills/grok-auth/references/grok-identity.md +64 -0
  206. package/skills/grok-auth/references/per-user-data.md +49 -0
  207. package/skills/grok-auth/references/prewired-and-env.md +54 -0
  208. package/skills/grok-auth/references/session-ui.md +133 -0
  209. package/skills/grok-auth/references/sign-in-methods.md +55 -0
  210. package/skills/grok-auth/references/wiring.md +71 -0
  211. package/skills/grok-building-games/SKILL.md +213 -0
  212. package/skills/grok-building-games/agentsam.skill.json +25 -0
  213. package/skills/grok-building-games/references/3d-libs.md +64 -0
  214. package/skills/grok-building-games/references/ai-pathfinding.md +122 -0
  215. package/skills/grok-building-games/references/audio.md +129 -0
  216. package/skills/grok-building-games/references/babylon.md +202 -0
  217. package/skills/grok-building-games/references/collision-physics.md +122 -0
  218. package/skills/grok-building-games/references/ecs-architecture.md +111 -0
  219. package/skills/grok-building-games/references/game-feel-juice.md +110 -0
  220. package/skills/grok-building-games/references/genres/board-card-chess.md +89 -0
  221. package/skills/grok-building-games/references/genres/endless-runner.md +83 -0
  222. package/skills/grok-building-games/references/genres/fps.md +105 -0
  223. package/skills/grok-building-games/references/genres/platformer-2d.md +97 -0
  224. package/skills/grok-building-games/references/genres/puzzle-match3-tetris.md +131 -0
  225. package/skills/grok-building-games/references/genres/racing-kart.md +106 -0
  226. package/skills/grok-building-games/references/genres/topdown-twin-stick.md +97 -0
  227. package/skills/grok-building-games/references/genres/tower-defense.md +84 -0
  228. package/skills/grok-building-games/references/genres/voxel-minecraft.md +89 -0
  229. package/skills/grok-building-games/references/input.md +139 -0
  230. package/skills/grok-building-games/references/phaser.md +277 -0
  231. package/skills/grok-building-games/references/procedural-generation.md +141 -0
  232. package/skills/grok-building-games/references/save-persistence.md +108 -0
  233. package/skills/grok-building-games/references/threejs-foundational.md +148 -0
  234. package/skills/grok-controls/SKILL.md +274 -0
  235. package/skills/grok-controls/agentsam.skill.json +25 -0
  236. package/skills/grok-design-ui/SKILL.md +122 -0
  237. package/skills/grok-design-ui/agentsam.skill.json +25 -0
  238. package/skills/grok-design-ui/references/animations.md +379 -0
  239. package/skills/grok-design-ui/references/performance.md +88 -0
  240. package/skills/grok-design-ui/references/refined-ui.md +384 -0
  241. package/skills/grok-design-ui/references/surfaces.md +247 -0
  242. package/skills/grok-design-ui/references/typography.md +123 -0
  243. package/skills/grok-game-animation-frames/SKILL.md +84 -0
  244. package/skills/grok-game-animation-frames/agentsam.skill.json +25 -0
  245. package/skills/grok-game-asset-core/SKILL.md +69 -0
  246. package/skills/grok-game-asset-core/agentsam.skill.json +25 -0
  247. package/skills/grok-game-character-consistency/SKILL.md +69 -0
  248. package/skills/grok-game-character-consistency/agentsam.skill.json +25 -0
  249. package/skills/grok-game-tilesets/SKILL.md +65 -0
  250. package/skills/grok-game-tilesets/agentsam.skill.json +25 -0
  251. package/skills/grok-game-ui-icons/SKILL.md +56 -0
  252. package/skills/grok-game-ui-icons/agentsam.skill.json +25 -0
  253. package/skills/grok-generate2dmap/LICENSE +21 -0
  254. package/skills/grok-generate2dmap/SKILL.md +120 -0
  255. package/skills/grok-generate2dmap/SOURCE.md +6 -0
  256. package/skills/grok-generate2dmap/agentsam.skill.json +25 -0
  257. package/skills/grok-generate2dmap/references/deliverables.md +101 -0
  258. package/skills/grok-generate2dmap/references/layered-map-contract.md +209 -0
  259. package/skills/grok-generate2dmap/references/map-strategies.md +341 -0
  260. package/skills/grok-generate2dmap/references/object-production-gate.md +24 -0
  261. package/skills/grok-generate2dmap/references/pipeline.md +149 -0
  262. package/skills/grok-generate2dmap/references/prop-pack-contract.md +174 -0
  263. package/skills/grok-generate2dmap/references/side-scroll-stages.md +29 -0
  264. package/skills/grok-generate2dmap/scripts/compose_layered_preview.py +157 -0
  265. package/skills/grok-generate2dmap/scripts/extract_prop_pack.py +369 -0
  266. package/skills/grok-generate2dsprite/LICENSE +21 -0
  267. package/skills/grok-generate2dsprite/SKILL.md +313 -0
  268. package/skills/grok-generate2dsprite/SOURCE.md +6 -0
  269. package/skills/grok-generate2dsprite/agentsam.skill.json +25 -0
  270. package/skills/grok-generate2dsprite/references/modes.md +124 -0
  271. package/skills/grok-generate2dsprite/references/prompt-rules.md +315 -0
  272. package/skills/grok-generate2dsprite/scripts/generate2dsprite.py +1031 -0
  273. package/skills/grok-generate2dsprite/scripts/make_layout_guide.py +109 -0
  274. package/skills/grok-imagine/SKILL.md +201 -0
  275. package/skills/grok-imagine/agentsam.skill.json +25 -0
  276. package/skills/grok-multiplayer-p2p/SKILL.md +111 -0
  277. package/skills/grok-multiplayer-p2p/agentsam.skill.json +25 -0
  278. package/skills/grok-multiplayer-p2p/references/react-binding.md +144 -0
  279. package/skills/grok-multiplayer-p2p/references/signaling-relay.md +269 -0
  280. package/skills/grok-neon/SKILL.md +157 -0
  281. package/skills/grok-neon/agentsam.skill.json +25 -0
  282. package/skills/grok-og/SKILL.md +102 -0
  283. package/skills/grok-og/agentsam.skill.json +25 -0
  284. package/skills/grok-og/references/brand-pass.md +53 -0
  285. package/skills/grok-og/references/custom-card.md +107 -0
  286. package/skills/grok-og/references/favicon-and-icons.md +48 -0
  287. package/skills/grok-og/references/og-type-contract.md +18 -0
  288. package/skills/grok-og/references/placeholder-card.md +21 -0
  289. package/skills/grok-og/references/x-banner.md +41 -0
  290. package/skills/grok-threejs/SKILL.md +67 -0
  291. package/skills/grok-threejs/agentsam.skill.json +25 -0
  292. package/skills/grok-threejs/references/llms-full.txt +2780 -0
  293. package/skills/grok-video2dsprite/LICENSE +21 -0
  294. package/skills/grok-video2dsprite/SKILL.md +236 -0
  295. package/skills/grok-video2dsprite/SOURCE.md +6 -0
  296. package/skills/grok-video2dsprite/agentsam.skill.json +25 -0
  297. package/skills/grok-video2dsprite/references/pipeline.md +90 -0
  298. package/skills/grok-video2dsprite/references/prompt-rules.md +63 -0
  299. package/skills/grok-video2dsprite/scripts/video2dsprite.py +490 -0
  300. package/skills/grok-xai-api/SKILL.md +152 -0
  301. package/skills/grok-xai-api/agentsam.skill.json +25 -0
  302. package/src/cli/command-catalog.js +46 -4
  303. package/src/cli/dispatch.js +1 -0
  304. package/src/cli.js +10 -0
  305. package/src/cloudflare/runtime-status.js +2 -1
  306. package/src/commands/autorag.js +67 -13
  307. package/src/commands/cheat-sheet.js +29 -4
  308. package/src/commands/codebaseindex.js +45 -2
  309. package/src/commands/knowledge.js +59 -2
  310. package/src/commands/machine-binary.js +103 -0
  311. package/src/commands/machine.js +137 -0
  312. package/src/commands/security.js +67 -4
  313. package/src/commands/setup.js +33 -16
  314. package/src/commands/status.js +8 -1
  315. package/src/features/resolve.js +1 -0
  316. package/src/knowledge/engine.js +21 -2
  317. package/src/knowledge/runtime-discovery.js +127 -0
  318. package/src/lib/identity-scaffold.js +53 -13
  319. package/src/lib/setup/recipes.js +1 -1
  320. package/src/models/discovery.js +40 -22
  321. package/src/models/inventory-core.d.ts +105 -0
  322. package/src/models/inventory-core.js +54 -6
  323. package/src/security/logs.js +3 -0
  324. package/src/ui/cli/help.js +41 -0
  325. package/test/apps-scaffold-contract.test.mjs +3 -2
  326. package/test/cli/api-key-env-whoami.test.mjs +2 -2
  327. package/test/cli/catalog-authority.test.mjs +64 -0
  328. package/test/cli/machine-command.test.mjs +34 -0
  329. package/test/fixtures/project-authority/customer-app/.agentsam/app.json +5 -0
  330. package/test/fixtures/project-authority/customer-app/apps/my-product/index.ts +1 -0
  331. package/test/fixtures/project-authority/customer-app/wrangler.toml +17 -0
  332. package/test/integration/autorag-project-authority.integration.test.mjs +51 -0
  333. package/test/integration/autorag-runtime-discovery.test.mjs +107 -0
  334. package/test/integration/cms-app-scaffold.test.mjs +37 -31
  335. package/test/integration/cms-site-tenancy-contract.test.mjs +28 -17
  336. package/test/integration/codebaseindex-ingest.test.mjs +41 -0
  337. package/test/integration/database-hosted-honesty.test.mjs +49 -0
  338. package/test/integration/desktop-keychain-boundary.test.mjs +45 -0
  339. package/test/integration/hosted-work-host-authority.test.mjs +47 -0
  340. package/test/integration/inventory-eligibility.test.mjs +59 -0
  341. package/test/integration/local-provider-bridge.test.mjs +65 -0
  342. package/test/integration/local-studio-settings-production.test.mjs +40 -0
  343. package/test/integration/lockfile-sync.test.mjs +26 -0
  344. package/test/integration/provider-env-cli.test.mjs +13 -3
  345. package/test/integration/runtime-status.integration.test.mjs +16 -1
  346. package/test/integration/theme-package-registry.test.mjs +31 -0
  347. package/test/repository-snapshot-view.test.mjs +2 -2
  348. package/test/security.test.mjs +14 -0
  349. package/test/terminal-machine-identity.test.mjs +2 -2
  350. package/apps/client-cms-editor/backend/src/demo-bootstrap.ts +0 -145
  351. package/packages/agentsam-nav/dist/Nav.d.ts +0 -43
  352. package/packages/agentsam-nav/dist/NavCollapsible.d.ts +0 -10
  353. package/packages/agentsam-nav/dist/NavContent.d.ts +0 -2
  354. package/packages/agentsam-nav/dist/NavFooter.d.ts +0 -2
  355. package/packages/agentsam-nav/dist/NavGroup.d.ts +0 -3
  356. package/packages/agentsam-nav/dist/NavHeader.d.ts +0 -2
  357. package/packages/agentsam-nav/dist/NavMenu.d.ts +0 -22
  358. package/packages/agentsam-nav/dist/NavProvider.d.ts +0 -35
  359. package/packages/agentsam-nav/dist/NavTrigger.d.ts +0 -2
  360. package/packages/agentsam-nav/dist/Surfaces.d.ts +0 -41
  361. package/packages/agentsam-nav/dist/browser.d.ts +0 -11
  362. package/packages/agentsam-nav/dist/browser.global.js +0 -132
  363. package/packages/agentsam-nav/dist/browser.js +0 -613
  364. package/packages/agentsam-nav/dist/contracts.d.ts +0 -76
  365. package/packages/agentsam-nav/dist/index.d.ts +0 -11
  366. package/packages/agentsam-nav/dist/index.js +0 -614
  367. package/packages/agentsam-nav/dist/legacy.css +0 -83
  368. package/packages/agentsam-nav/dist/shell.css +0 -113
  369. package/packages/agentsam-nav/dist/theme.css +0 -113
  370. package/packages/agentsam-nav/dist/utils.d.ts +0 -1
  371. package/packages/agentsam-repository/src/goap.js.bak-20260922011251 +0 -670
@@ -0,0 +1,442 @@
1
+ //! Deterministic frontend-source candidate extraction (TS/JS/TSX/JSX).
2
+ //! Emits observed literals and generic *_candidate findings only.
3
+ //! Does NOT invent CMS theme identities (hero.cinematic, etc.) — refinery owns that.
4
+
5
+ use crate::MachineReceipt;
6
+ use serde_json::{json, Value};
7
+ use std::collections::BTreeSet;
8
+ use std::fs;
9
+ use std::path::Path;
10
+
11
+ const ZONES: &[&str] = &["HEADER", "BODY", "FOOTER", "TEMPLATE"];
12
+
13
+ pub fn enrich_frontend_source_candidates(root: &Path, receipt: &mut MachineReceipt) {
14
+ let ts_paths: Vec<String> = receipt
15
+ .facts
16
+ .iter()
17
+ .filter(|f| matches!(f.source.type_id.as_str(), "typescript" | "javascript"))
18
+ .map(|f| f.path.clone())
19
+ .collect();
20
+ if ts_paths.is_empty() {
21
+ return;
22
+ }
23
+
24
+ let mut route_candidates: BTreeSet<String> = BTreeSet::new();
25
+ let mut shell_candidates: BTreeSet<String> = BTreeSet::new();
26
+ let mut section_keys: BTreeSet<String> = BTreeSet::new();
27
+ let mut section_candidates: Vec<Value> = Vec::new();
28
+ let mut component_candidates: BTreeSet<String> = BTreeSet::new();
29
+ let mut interaction_candidates: BTreeSet<String> = BTreeSet::new();
30
+ let mut design_tokens: BTreeSet<String> = BTreeSet::new();
31
+ let mut repeater_candidates: BTreeSet<String> = BTreeSet::new();
32
+ let mut evidence_fact_ids: BTreeSet<String> = BTreeSet::new();
33
+
34
+ for rel in &ts_paths {
35
+ let abs = root.join(rel);
36
+ let Ok(text) = fs::read_to_string(&abs) else {
37
+ continue;
38
+ };
39
+ evidence_fact_ids.insert(format!("file:{rel}"));
40
+
41
+ if let Some(route) = app_router_route_from_path(rel) {
42
+ route_candidates.insert(route);
43
+ }
44
+
45
+ for slug in extract_slug_literals(&text) {
46
+ route_candidates.insert(slug);
47
+ }
48
+
49
+ for zone in ZONES {
50
+ if text.contains(&format!("\"{zone}\"")) || text.contains(&format!("'{zone}'")) {
51
+ shell_candidates.insert((*zone).to_string());
52
+ }
53
+ }
54
+
55
+ for cand in extract_section_object_candidates(&text) {
56
+ let key = cand.to_string();
57
+ if section_keys.insert(key) {
58
+ section_candidates.push(cand);
59
+ }
60
+ }
61
+
62
+ for name in extract_quoted_string_array_after(&text, "components") {
63
+ component_candidates.insert(name);
64
+ }
65
+ for name in extract_quoted_string_array_after(&text, "templateCards") {
66
+ component_candidates.insert(name);
67
+ }
68
+
69
+ for msg in extract_cms_message_types(&text) {
70
+ interaction_candidates.insert(msg);
71
+ }
72
+
73
+ for token in extract_css_custom_properties(&text) {
74
+ design_tokens.insert(token);
75
+ }
76
+ for color in extract_hex_colors(&text) {
77
+ design_tokens.insert(color);
78
+ }
79
+
80
+ if text.contains(".map(") && (text.contains("sections") || text.contains("pages")) {
81
+ repeater_candidates.insert(format!("file:{rel}"));
82
+ }
83
+ }
84
+
85
+ if route_candidates.is_empty()
86
+ && shell_candidates.is_empty()
87
+ && section_candidates.is_empty()
88
+ && component_candidates.is_empty()
89
+ && interaction_candidates.is_empty()
90
+ && design_tokens.is_empty()
91
+ {
92
+ return;
93
+ }
94
+
95
+ let route_list: Vec<String> = route_candidates.into_iter().collect();
96
+ let shell_list: Vec<String> = shell_candidates.into_iter().collect();
97
+ let component_list: Vec<String> = component_candidates.into_iter().collect();
98
+ let interaction_list: Vec<String> = interaction_candidates.into_iter().collect();
99
+ let token_list: Vec<String> = design_tokens.into_iter().take(128).collect();
100
+ let repeater_list: Vec<String> = repeater_candidates.into_iter().collect();
101
+ let fact_ids: Vec<String> = evidence_fact_ids.into_iter().collect();
102
+
103
+ receipt.findings.push(json!({
104
+ "id": "finding:frontend_source_candidates",
105
+ "kind": "frontend_source_candidates",
106
+ "schema": "agentsam.machine.finding.v1",
107
+ "basis": "observed",
108
+ "evidence": {
109
+ "fact_ids": fact_ids,
110
+ "note": "Generic candidates from TS/JS literals only; CMS identity mapping belongs to the refinery.",
111
+ },
112
+ "candidates": {
113
+ "route_candidate": route_list.clone(),
114
+ "shell_candidate": shell_list.clone(),
115
+ "section_candidate": section_candidates.clone(),
116
+ "component_candidate": component_list.clone(),
117
+ "repeater_candidate": repeater_list.clone(),
118
+ "interaction_candidate": interaction_list.clone(),
119
+ "design_token_evidence": token_list.clone(),
120
+ }
121
+ }));
122
+
123
+ // Merge into / refresh frontend_manifest artifact when present.
124
+ let mut merged = false;
125
+ for art in &mut receipt.artifacts {
126
+ if art.get("kind").and_then(|v| v.as_str()) == Some("frontend_manifest") {
127
+ if let Some(data) = art.get_mut("data").and_then(|d| d.as_object_mut()) {
128
+ data.insert("route_candidates".into(), json!(route_list));
129
+ data.insert("shell_candidates".into(), json!(shell_list));
130
+ data.insert("section_candidates".into(), json!(section_candidates));
131
+ data.insert("component_candidates".into(), json!(component_list));
132
+ data.insert("interaction_candidates".into(), json!(interaction_list));
133
+ data.insert("design_token_evidence".into(), json!(token_list));
134
+ data.insert("repeater_candidates".into(), json!(repeater_list));
135
+ merged = true;
136
+ }
137
+ }
138
+ }
139
+ if !merged {
140
+ receipt.artifacts.push(json!({
141
+ "kind": "frontend_manifest",
142
+ "schema": "agentsam.machine.frontend.v1",
143
+ "data": {
144
+ "route_candidates": route_list,
145
+ "shell_candidates": shell_list,
146
+ "section_candidates": section_candidates,
147
+ "component_candidates": component_list,
148
+ "interaction_candidates": interaction_list,
149
+ "design_token_evidence": token_list,
150
+ "repeater_candidates": repeater_list,
151
+ "note": "Candidates from frontend source literals — not normalized CMS primitives.",
152
+ }
153
+ }));
154
+ }
155
+ }
156
+
157
+ fn app_router_route_from_path(rel: &str) -> Option<String> {
158
+ let norm = rel.replace('\\', "/");
159
+ let marker = "/app/";
160
+ let idx = norm.find(marker).or_else(|| {
161
+ if norm.starts_with("app/") {
162
+ Some(0)
163
+ } else {
164
+ None
165
+ }
166
+ })?;
167
+ let after = if norm[idx..].starts_with("app/") {
168
+ &norm[idx + 4..]
169
+ } else {
170
+ &norm[idx + marker.len()..]
171
+ };
172
+ let file = after.rsplit('/').next().unwrap_or(after);
173
+ if !(file == "page.tsx"
174
+ || file == "page.jsx"
175
+ || file == "page.ts"
176
+ || file == "page.js"
177
+ || file == "route.ts"
178
+ || file == "route.js")
179
+ {
180
+ return None;
181
+ }
182
+ let dir = after.rsplit_once('/').map(|(d, _)| d).unwrap_or("");
183
+ if dir.is_empty() {
184
+ return Some("/".to_string());
185
+ }
186
+ let mut parts = Vec::new();
187
+ for seg in dir.split('/') {
188
+ if seg.is_empty() || seg.starts_with('(') && seg.ends_with(')') {
189
+ continue; // route groups
190
+ }
191
+ if seg.starts_with('@') {
192
+ continue; // parallel routes
193
+ }
194
+ if seg.starts_with('[') && seg.ends_with(']') {
195
+ parts.push(format!(
196
+ ":{}",
197
+ seg.trim_matches(|c| c == '[' || c == ']' || c == '.')
198
+ ));
199
+ continue;
200
+ }
201
+ parts.push(seg.to_string());
202
+ }
203
+ if parts.is_empty() {
204
+ Some("/".to_string())
205
+ } else {
206
+ Some(format!("/{}", parts.join("/")))
207
+ }
208
+ }
209
+
210
+ fn extract_slug_literals(text: &str) -> Vec<String> {
211
+ let mut out = Vec::new();
212
+ for (prefix, quote) in [
213
+ ("slug: \"", '"'),
214
+ ("slug: '", '\''),
215
+ ("slug:\"", '"'),
216
+ ("slug:'", '\''),
217
+ ] {
218
+ let mut search = text;
219
+ while let Some(idx) = search.find(prefix) {
220
+ let rest = &search[idx + prefix.len()..];
221
+ if let Some(end) = rest.find(quote) {
222
+ let slug = &rest[..end];
223
+ if slug.starts_with('/') && slug.len() < 128 && !slug.contains(' ') {
224
+ out.push(slug.to_string());
225
+ }
226
+ search = &rest[end + 1..];
227
+ } else {
228
+ break;
229
+ }
230
+ }
231
+ }
232
+ out
233
+ }
234
+
235
+ fn floor_char_boundary(text: &str, index: usize) -> usize {
236
+ let mut boundary = index.min(text.len());
237
+ while boundary > 0 && !text.is_char_boundary(boundary) {
238
+ boundary -= 1;
239
+ }
240
+ boundary
241
+ }
242
+
243
+ fn extract_section_object_candidates(text: &str) -> Vec<Value> {
244
+ // Look for compact object literals with type + zone nearby: type: "Hero", zone: "BODY"
245
+ let mut out = Vec::new();
246
+ let mut search = text;
247
+ while let Some(type_idx) = find_type_literal(search) {
248
+ let window_start = floor_char_boundary(search, type_idx.saturating_sub(80));
249
+ let window_end = floor_char_boundary(search, (type_idx + 200).min(search.len()));
250
+ let window = &search[window_start..window_end];
251
+ let Some((section_type, _)) = quoted_after(window, "type:") else {
252
+ search = &search[type_idx + 5..];
253
+ continue;
254
+ };
255
+ let zone = quoted_after(window, "zone:")
256
+ .map(|(z, _)| z)
257
+ .filter(|z| ZONES.contains(&z.as_str()));
258
+ let name = quoted_after(window, "name:").map(|(n, _)| n);
259
+ // Require an explicit layout zone so Toast/Page status types are not candidates.
260
+ if let Some(z) = zone {
261
+ let mut obj = serde_json::Map::new();
262
+ obj.insert("type".into(), json!(section_type));
263
+ obj.insert("zone".into(), json!(z));
264
+ if let Some(n) = name {
265
+ obj.insert("name".into(), json!(n));
266
+ }
267
+ out.push(Value::Object(obj));
268
+ }
269
+ search = &search[type_idx + 5..];
270
+ if out.len() >= 64 {
271
+ break;
272
+ }
273
+ }
274
+ out
275
+ }
276
+
277
+ fn find_type_literal(text: &str) -> Option<usize> {
278
+ text.find("type: \"")
279
+ .or_else(|| text.find("type: '"))
280
+ .or_else(|| text.find("type:\"").or_else(|| text.find("type:'")))
281
+ }
282
+
283
+ fn quoted_after(text: &str, key: &str) -> Option<(String, usize)> {
284
+ let idx = text.find(key)?;
285
+ let rest = text[idx + key.len()..].trim_start();
286
+ let quote = rest.chars().next()?;
287
+ if quote != '"' && quote != '\'' {
288
+ return None;
289
+ }
290
+ let inner = &rest[1..];
291
+ let end = inner.find(quote)?;
292
+ Some((inner[..end].to_string(), idx))
293
+ }
294
+
295
+ fn extract_quoted_string_array_after(text: &str, binding: &str) -> Vec<String> {
296
+ let patterns = [
297
+ format!("const {binding} = ["),
298
+ format!("const {binding}=["),
299
+ format!("let {binding} = ["),
300
+ format!("{binding}: ["),
301
+ ];
302
+ let mut out = Vec::new();
303
+ for pat in &patterns {
304
+ if let Some(idx) = text.find(pat) {
305
+ let rest = &text[idx + pat.len()..];
306
+ let end = rest.find(']').unwrap_or(rest.len().min(2000));
307
+ let body = &rest[..end];
308
+ out.extend(extract_quoted_strings(body));
309
+ break;
310
+ }
311
+ }
312
+ out
313
+ }
314
+
315
+ fn extract_quoted_strings(text: &str) -> Vec<String> {
316
+ let mut out = Vec::new();
317
+ let bytes = text.as_bytes();
318
+ let mut i = 0;
319
+ while i < bytes.len() {
320
+ let b = bytes[i];
321
+ if b == b'"' || b == b'\'' {
322
+ let q = b;
323
+ i += 1;
324
+ let start = i;
325
+ while i < bytes.len() && bytes[i] != q {
326
+ if bytes[i] == b'\\' && i + 1 < bytes.len() {
327
+ i += 2;
328
+ continue;
329
+ }
330
+ i += 1;
331
+ }
332
+ if i <= bytes.len() {
333
+ let s = &text[start..i.min(text.len())];
334
+ if !s.is_empty() && s.len() < 120 {
335
+ out.push(s.to_string());
336
+ }
337
+ }
338
+ }
339
+ i += 1;
340
+ }
341
+ out
342
+ }
343
+
344
+ fn extract_cms_message_types(text: &str) -> Vec<String> {
345
+ let mut out = Vec::new();
346
+ let mut search = text;
347
+ while let Some(idx) = search.find("cms:") {
348
+ let rest = &search[idx..];
349
+ let end = rest
350
+ .find(|c: char| !(c.is_ascii_alphanumeric() || c == ':' || c == '-' || c == '_'))
351
+ .unwrap_or(rest.len().min(48));
352
+ let token = &rest[..end];
353
+ if token.starts_with("cms:") && token.len() > 4 {
354
+ out.push(token.to_string());
355
+ }
356
+ search = &search[idx + 4..];
357
+ }
358
+ out
359
+ }
360
+
361
+ fn extract_css_custom_properties(text: &str) -> Vec<String> {
362
+ let mut out = Vec::new();
363
+ let mut search = text;
364
+ while let Some(idx) = search.find("--") {
365
+ let rest = &search[idx..];
366
+ let name_end = rest[2..]
367
+ .find(|c: char| !(c.is_ascii_alphanumeric() || c == '-' || c == '_'))
368
+ .map(|i| i + 2)
369
+ .unwrap_or(rest.len().min(64));
370
+ if name_end > 3 {
371
+ let name = &rest[..name_end];
372
+ if name
373
+ .chars()
374
+ .all(|c| c.is_ascii_alphanumeric() || c == '-' || c == '_')
375
+ {
376
+ out.push(name.to_string());
377
+ }
378
+ }
379
+ search = &search[idx + 2..];
380
+ if out.len() >= 64 {
381
+ break;
382
+ }
383
+ }
384
+ out
385
+ }
386
+
387
+ fn extract_hex_colors(text: &str) -> Vec<String> {
388
+ let mut out = Vec::new();
389
+ let bytes = text.as_bytes();
390
+ let mut i = 0;
391
+ while i < bytes.len() {
392
+ if bytes[i] == b'#' {
393
+ let start = i;
394
+ i += 1;
395
+ let mut len = 0;
396
+ while i < bytes.len() && bytes[i].is_ascii_hexdigit() && len < 8 {
397
+ i += 1;
398
+ len += 1;
399
+ }
400
+ if len == 3 || len == 6 || len == 8 {
401
+ out.push(text[start..start + 1 + len].to_ascii_lowercase());
402
+ }
403
+ continue;
404
+ }
405
+ i += 1;
406
+ if out.len() >= 64 {
407
+ break;
408
+ }
409
+ }
410
+ out
411
+ }
412
+
413
+ #[cfg(test)]
414
+ mod tests {
415
+ use super::*;
416
+
417
+ #[test]
418
+ fn app_router_route_from_studio_page() {
419
+ assert_eq!(
420
+ app_router_route_from_path("app/studio/page.tsx").as_deref(),
421
+ Some("/studio")
422
+ );
423
+ assert_eq!(
424
+ app_router_route_from_path("app/page.tsx").as_deref(),
425
+ Some("/")
426
+ );
427
+ }
428
+
429
+ #[test]
430
+ fn section_candidate_windows_are_utf8_safe() {
431
+ for tail in ["a", "\u{00a0}", "é", "🙂"] {
432
+ let source = format!(
433
+ "const section = {{ type: \"Hero\", zone: \"BODY\", name: \"Café\" }};{}",
434
+ tail.repeat(220)
435
+ );
436
+ let candidates = extract_section_object_candidates(&source);
437
+ assert_eq!(candidates.len(), 1, "failed for tail {tail:?}");
438
+ assert_eq!(candidates[0]["type"], "Hero");
439
+ assert_eq!(candidates[0]["zone"], "BODY");
440
+ }
441
+ }
442
+ }