@iota-uz/sdk 0.4.43 → 0.5.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) IOTA
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,145 +1,14 @@
-# Applets
+# @iota-uz/sdk
 
-Go library and CLI for the applet framework, plus the **@iota-uz/sdk** npm package (applet context, host, UI components, Tailwind helpers). Consumed by [iota-sdk](https://github.com/iota-uz/iota-sdk) and EAI to build and run applets (e.g. BiChat).
+This is the single public JavaScript distribution for iota-sdk. Its bounded
+subpath APIs are built from separate internal workspace modules:
 
-Full architecture and development guides live in [iota-sdk docs](https://github.com/iota-uz/iota-sdk).
+- `@iota-uz/sdk/client-host`
+- `@iota-uz/sdk/lens`
+- `@iota-uz/sdk/lens/styles.css`
+- `@iota-uz/sdk/identity`
 
----
-
-## Go
-
-Add the module to your project:
-
-```bash
-go get github.com/iota-uz/applets@latest
-```
-
-Import the public API from the root package:
-
-```go
-import "github.com/iota-uz/applets"
-```
-
-Use `Registry`, `Controller`, RPC types, context helpers, and options as needed. For local development with a clone of this repo, use a [Go workspace](https://go.dev/ref/mod#workspaces) in your project with `use` pointing at the applets directory.
-
----
-
-## NPM
-
-Install the SDK in your applet frontend (e.g. Vite/React):
-
-```bash
-pnpm add @iota-uz/sdk
-```
-
-Use applet context, host utilities, BiChat UI components, and Tailwind configuration from the package.
-
----
-
-## Applet CLI
-
-Install the CLI (ensure `$GOBIN` is on your PATH):
-
-```bash
-go install github.com/iota-uz/applets/cmd/applet@latest
-```
-
-From a repo that contains an applet (e.g. iota-sdk or EAI):
-
-```bash
-applet doctor              # environment and config diagnostics
-applet rpc gen --name <applet-name>
-applet rpc check --name <applet-name>
-applet rpc watch --name <applet-name>
-applet deps check
-applet check               # deps + RPC drift for all applets
-applet schema export --name <applet>
-applet dev                 # start dev environment (all configured applets)
-applet dev --sdk-root ../../applets
-applet dev --rpc-watch     # include RPC codegen watch during dev
-applet build [name]        # build production bundle
-applet list                # list configured applets
-applet secrets set --name <applet> --key OPENAI_API_KEY --value ...
-applet secrets list --name <applet>
-applet secrets delete --name <applet> --key OPENAI_API_KEY
-```
-
-- **Specific version:** `go install github.com/iota-uz/applets/cmd/applet@v0.4.4`
-- **Shell completion:** `applet completion bash`, `applet completion zsh`, or `applet completion fish` — see `applet completion --help` for install instructions.
-- **Convention-based local SDK:** when `applet dev` can see a canonical local `@iota-uz/sdk` source checkout (for example `./applets` in a monorepo), it automatically builds/watches that SDK and wires applet consumers to a managed local SDK package for dev.
-- **Explicit escape hatch:** use `applet dev --sdk-root ../../applets` only when your local SDK checkout lives in a non-conventional location.
-
----
-
-## DX Migration Notes (Breaking)
-
-- `applets/` is the canonical source of `@iota-uz/sdk`; `iota-sdk/package.json` is no longer the publish source.
-- Local SDK iteration prefers convention over configuration. If your repo has `./applets` (or a conventional sibling `../applets`) you should not need any manual override at all.
-- For non-conventional layouts, pass `--sdk-root` directly to `applet dev` instead of persisting local env overrides.
-- Never commit local `pnpm` overrides/workspace links for `@iota-uz/sdk`.
-- `applet dev` now detects `go.work` dependencies and automatically watches/restarts critical processes when dependency code changes.
-
-### Release flow
-
-1. Publish SDK changes from `applets/` (bump `applets/package.json` version).
-2. Create and push a tag `iota-sdk-v<version>` where `<version>` exactly matches
-   `applets/package.json`. This triggers `publish-npm.yml`.
-3. Upgrade consumers (`eai/back`, applet web packages, etc.) to the published version.
-4. Commit only version upgrades in consumer repos; never commit local-link overrides.
-
----
-
-## Configuration
-
-The CLI expects a project root where `.applets/config.toml` exists.
-
-Minimal `.applets/config.toml` (schema v2):
-
-```toml
-version = 2
-
-# Project-level dev processes
-[[dev.processes]]
-name = "air"
-command = "air"
-critical = true
-
-[[dev.processes]]
-name = "templ"
-command = "templ"
-args = ["generate", "--watch"]
-
-# Applets: only base_path is required. Everything else is convention.
-[applets.bichat]
-base_path = "/bi-chat"
-hosts = ["chat.example.com"] # optional
-
-[applets.bichat.engine]
-runtime = "off"
-
-[applets.bichat.engine.backends]
-kv = "memory"
-db = "memory"
-jobs = "memory"
-files = "local"
-secrets = "env"
-
-[applets.bichat.frontend]
-type = "static" # static|ssr
-```
-
-**Convention defaults:**
-- `web` = `modules/<name>/presentation/web`
-- `vite_port` = auto-assigned (5173, 5174, …) by sorted name order
-- RPC router function = `Router` (hardcoded convention)
-- Entry point = `/src/main.tsx` (Vite standard)
-
-**Optional overrides:**
-- `web` — custom web directory path (rare)
-- `[applets.<name>.rpc] needs_reexport_shim = true` — for SDK applets that re-export RPC contracts
-- `hosts` — additional host-based mounts (subdomain/custom-domain)
-- `[applets.<name>.frontend] type = "static"|"ssr"` — SSR mode requires `engine.runtime = "bun"`
-- `[applets.<name>.engine.s3]` — required when `engine.backends.files = "s3"`
-- `[applets.<name>.engine.secrets] required = ["OPENAI_API_KEY"]` — startup-required secret keys
-
-Run `applet doctor` to validate config and environment.
+Version 0.5 is a clean break: legacy root, BiChat, applet, Tailwind, and asset
+exports are intentionally absent. React and ReactDOM are peer dependencies;
+Lens implementation dependencies are contained in lazy Lens chunks and are not
+loaded by client-host imports.

package/dist/client-host/applet.d.ts

@@ -0,0 +1,52 @@
+import type { ComponentType, PropsWithChildren } from 'react';
+import type { ClientRouteContext } from './route';
+import type { SessionService } from './transport';
+export interface StandardAppletContext {
+    config: {
+        basePath: string;
+        rpcUIEndpoint: string;
+        streamEndpoint?: string;
+        uploadEndpoint?: string;
+        assetsBasePath?: string;
+        shellMode?: string;
+    };
+    session?: {
+        csrfToken?: string;
+    };
+    user?: unknown;
+    tenant?: unknown;
+    locale?: unknown;
+    extensions?: unknown;
+}
+export interface StandardAppletInitial<TContext extends StandardAppletContext = StandardAppletContext> {
+    appletContext: TContext;
+}
+export interface BiChatHTTPConfig {
+    baseUrl: string;
+    rpcEndpoint: string;
+    streamEndpoint?: string;
+    uploadEndpoint?: string;
+    csrfToken?: string | (() => string);
+    headers?: Record<string, string>;
+    rpcTimeoutMs?: number;
+    streamConnectTimeoutMs?: number;
+}
+/** Replaces useHttpDataSourceConfigFromApplet/window globals for client routes. */
+export declare function biChatHTTPConfigFromRoute<TContext extends StandardAppletContext>(route: ClientRouteContext<StandardAppletInitial<TContext>>, session?: SessionService, options?: {
+    rpcTimeoutMs?: number;
+    streamConnectTimeoutMs?: number;
+}): BiChatHTTPConfig;
+type ExplicitAppletProvider<TContext> = ComponentType<PropsWithChildren<{
+    windowKey: string;
+    context?: TContext;
+}>>;
+/**
+ * Bridges the standard route bootstrap into @iota-uz/sdk's AppletProvider
+ * `context` prop. No window.__APPLET_CONTEXT__ compatibility global is written.
+ */
+export declare function AppletRouteBridge<TContext extends StandardAppletContext>({ provider: Provider, route, children, }: PropsWithChildren<{
+    provider: ExplicitAppletProvider<TContext>;
+    route: ClientRouteContext<StandardAppletInitial<TContext>>;
+}>): import("react/jsx-runtime").JSX.Element;
+export {};
+//# sourceMappingURL=applet.d.ts.map

package/dist/client-host/applet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"applet.d.ts","sourceRoot":"","sources":["../src/applet.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,OAAO,CAAA;AAC7D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAA;AACjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEjD,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE;QACN,QAAQ,EAAE,MAAM,CAAA;QAChB,aAAa,EAAE,MAAM,CAAA;QACrB,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,SAAS,CAAC,EAAE,MAAM,CAAA;KACnB,CAAA;IACD,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAChC,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAED,MAAM,WAAW,qBAAqB,CAAC,QAAQ,SAAS,qBAAqB,GAAG,qBAAqB;IACnG,aAAa,EAAE,QAAQ,CAAA;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,SAAS,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,CAAA;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,sBAAsB,CAAC,EAAE,MAAM,CAAA;CAChC;AAED,mFAAmF;AACnF,wBAAgB,yBAAyB,CAAC,QAAQ,SAAS,qBAAqB,EAC9E,KAAK,EAAE,kBAAkB,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,EAC1D,OAAO,CAAC,EAAE,cAAc,EACxB,OAAO,GAAE;IAAE,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,sBAAsB,CAAC,EAAE,MAAM,CAAA;CAAO,GACvE,gBAAgB,CAclB;AAED,KAAK,sBAAsB,CAAC,QAAQ,IAAI,aAAa,CAAC,iBAAiB,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,QAAQ,CAAA;CAAE,CAAC,CAAC,CAAA;AAEnH;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,SAAS,qBAAqB,EAAE,EACxE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,GACpC,EAAE,iBAAiB,CAAC;IACnB,QAAQ,EAAE,sBAAsB,CAAC,QAAQ,CAAC,CAAA;IAC1C,KAAK,EAAE,kBAAkB,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAA;CAC3D,CAAC,2CAED"}

package/dist/client-host/applet.js

@@ -0,0 +1,24 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+/** Replaces useHttpDataSourceConfigFromApplet/window globals for client routes. */
+export function biChatHTTPConfigFromRoute(route, session, options = {}) {
+    const config = route.initial.appletContext.config;
+    return {
+        // Applet context endpoints are route-ready paths (and may also be absolute
+        // URLs). HttpDataSource concatenates baseUrl with each endpoint, so using
+        // the applet's mount basePath here would incorrectly turn `/rpc` into
+        // `/admin/ali/chat/rpc` and prefix the stream endpoint a second time.
+        baseUrl: '',
+        rpcEndpoint: config.rpcUIEndpoint,
+        ...(config.streamEndpoint ? { streamEndpoint: config.streamEndpoint } : {}),
+        ...(config.uploadEndpoint ? { uploadEndpoint: config.uploadEndpoint } : {}),
+        ...(session ? { csrfToken: () => session.snapshot().csrf ?? '' } : route.csrf ? { csrfToken: route.csrf } : {}),
+        ...options,
+    };
+}
+/**
+ * Bridges the standard route bootstrap into @iota-uz/sdk's AppletProvider
+ * `context` prop. No window.__APPLET_CONTEXT__ compatibility global is written.
+ */
+export function AppletRouteBridge({ provider: Provider, route, children, }) {
+    return _jsx(Provider, { windowKey: "__unused_client_route_context__", context: route.initial.appletContext, children: children });
+}

package/dist/client-host/cache.d.ts

@@ -0,0 +1,15 @@
+export type QueryKey = readonly [namespace: string, method: string, request: string];
+export interface QueryCache {
+    get<T>(key: QueryKey): T | undefined;
+    set<T>(key: QueryKey, value: T): void;
+    invalidate(namespace: string, methods: readonly string[]): void;
+}
+export declare class MemoryQueryCache implements QueryCache {
+    private readonly values;
+    get<T>(key: QueryKey): T | undefined;
+    set<T>(key: QueryKey, value: T): void;
+    invalidate(namespace: string, methods: readonly string[]): void;
+}
+export declare function stableSerialize(value: unknown): string;
+export declare function queryKey(namespace: string, method: string, request: unknown): QueryKey;
+//# sourceMappingURL=cache.d.ts.map

package/dist/client-host/cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../src/cache.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,QAAQ,GAAG,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;AAEpF,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,GAAG,CAAC,GAAG,SAAS,CAAA;IACpC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,CAAA;IACrC,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAA;CAChE;AAID,qBAAa,gBAAiB,YAAW,UAAU;IACjD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6B;IAEpD,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,GAAG,CAAC,GAAG,SAAS;IACpC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI;IACrC,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI;CAOhE;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAMtD;AAED,wBAAgB,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,QAAQ,CAEtF"}

package/dist/client-host/cache.js

@@ -0,0 +1,27 @@
+function cacheKey(key) { return JSON.stringify(key); }
+export class MemoryQueryCache {
+    values = new Map();
+    get(key) { return this.values.get(cacheKey(key)); }
+    set(key, value) { this.values.set(cacheKey(key), value); }
+    invalidate(namespace, methods) {
+        const families = new Set(methods);
+        for (const encoded of this.values.keys()) {
+            const [entryNamespace, method] = JSON.parse(encoded);
+            if (entryNamespace === namespace && families.has(method))
+                this.values.delete(encoded);
+        }
+    }
+}
+export function stableSerialize(value) {
+    if (value === undefined)
+        return 'null';
+    if (value === null || typeof value !== 'object')
+        return JSON.stringify(value);
+    if (Array.isArray(value))
+        return `[${value.map(stableSerialize).join(',')}]`;
+    const object = value;
+    return `{${Object.keys(object).sort().map((key) => `${JSON.stringify(key)}:${stableSerialize(object[key])}`).join(',')}}`;
+}
+export function queryKey(namespace, method, request) {
+    return [namespace, method, stableSerialize(request)];
+}

package/dist/client-host/errors.d.ts

@@ -0,0 +1,16 @@
+export type HostErrorCode = 'unauthenticated' | 'permission_denied' | 'validation' | 'field_validation' | 'transient' | 'protocol' | 'unknown';
+export declare class HostError extends Error {
+    readonly code: HostErrorCode;
+    readonly details?: unknown | undefined;
+    readonly fieldErrors: Readonly<Record<string, string>>;
+    constructor(code: HostErrorCode, message: string, details?: unknown | undefined, fieldErrors?: Readonly<Record<string, string>>);
+    get retryable(): boolean;
+}
+export interface HostErrorHandlers {
+    unauthenticated?(error: HostError): void;
+    permissionDenied?(error: HostError): void;
+    validation?(error: HostError): void;
+}
+export declare function asHostError(input: unknown): HostError;
+export declare function dispatchHostError(error: HostError, handlers?: HostErrorHandlers): void;
+//# sourceMappingURL=errors.d.ts.map

package/dist/client-host/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GACrB,iBAAiB,GACjB,mBAAmB,GACnB,YAAY,GACZ,kBAAkB,GAClB,WAAW,GACX,UAAU,GACV,SAAS,CAAA;AAEb,qBAAa,SAAU,SAAQ,KAAK;IAEhC,QAAQ,CAAC,IAAI,EAAE,aAAa;IAE5B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO;IAC1B,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAH7C,IAAI,EAAE,aAAa,EAC5B,OAAO,EAAE,MAAM,EACN,OAAO,CAAC,EAAE,OAAO,YAAA,EACjB,WAAW,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAM;IAM7D,IAAI,SAAS,IAAI,OAAO,CAAqC;CAC9D;AAED,MAAM,WAAW,iBAAiB;IAChC,eAAe,CAAC,CAAC,KAAK,EAAE,SAAS,GAAG,IAAI,CAAA;IACxC,gBAAgB,CAAC,CAAC,KAAK,EAAE,SAAS,GAAG,IAAI,CAAA;IACzC,UAAU,CAAC,CAAC,KAAK,EAAE,SAAS,GAAG,IAAI,CAAA;CACpC;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,CAsBrD;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAItF"}

package/dist/client-host/errors.js

@@ -0,0 +1,45 @@
+export class HostError extends Error {
+    code;
+    details;
+    fieldErrors;
+    constructor(code, message, details, fieldErrors = {}) {
+        super(message);
+        this.code = code;
+        this.details = details;
+        this.fieldErrors = fieldErrors;
+        this.name = 'HostError';
+    }
+    get retryable() { return this.code === 'transient'; }
+}
+export function asHostError(input) {
+    if (input instanceof HostError)
+        return input;
+    const candidate = input;
+    const raw = String(candidate?.code ?? 'unknown');
+    const code = raw === 'unauthenticated' || raw === 'unauthorized'
+        ? 'unauthenticated'
+        : raw === 'forbidden' || raw === 'permission_denied'
+            ? 'permission_denied'
+            : raw === 'validation'
+                ? 'validation'
+                : raw === 'field_validation'
+                    ? 'field_validation'
+                    : raw === 'timeout' || raw === 'unavailable' || raw === 'transient'
+                        ? 'transient'
+                        : raw === 'protocol'
+                            ? 'protocol'
+                            : 'unknown';
+    const details = candidate?.details;
+    const fieldErrors = code === 'field_validation' && details && typeof details === 'object'
+        ? details
+        : {};
+    return new HostError(code, String(candidate?.message ?? input ?? 'Unknown host error'), details, fieldErrors);
+}
+export function dispatchHostError(error, handlers) {
+    if (error.code === 'unauthenticated')
+        handlers?.unauthenticated?.(error);
+    if (error.code === 'permission_denied')
+        handlers?.permissionDenied?.(error);
+    if (error.code === 'validation' || error.code === 'field_validation')
+        handlers?.validation?.(error);
+}

package/dist/client-host/identity.d.ts

@@ -0,0 +1,21 @@
+export declare const SDK_RELEASE_VERSION = "0.5.0";
+export declare const SDK_SOURCE_COMMIT = "2c307830bec7e560ad8683bf7b21ee91d1e2e348";
+export declare const SDK_PROTOCOL_VERSION = "1.0.0";
+export declare const SDK_IDENTITY: Readonly<{
+    releaseVersion: "0.5.0";
+    sourceCommit: "2c307830bec7e560ad8683bf7b21ee91d1e2e348";
+    protocolVersion: "1.0.0";
+}>;
+export interface SDKRuntimeIdentity {
+    releaseVersion: string;
+    sourceCommit: string;
+    protocolVersion: string;
+}
+export declare class SDKIdentityMismatchError extends Error {
+    readonly expected: SDKRuntimeIdentity;
+    readonly actual: SDKRuntimeIdentity;
+    readonly code = "SDK_IDENTITY_MISMATCH";
+    constructor(expected: SDKRuntimeIdentity, actual: SDKRuntimeIdentity);
+}
+export declare function assertSDKIdentity(actual: SDKRuntimeIdentity): void;
+//# sourceMappingURL=identity.d.ts.map

package/dist/client-host/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,mBAAmB,UAAU,CAAA;AAC1C,eAAO,MAAM,iBAAiB,+BAA+B,CAAA;AAC7D,eAAO,MAAM,oBAAoB,UAA+B,CAAA;AAChE,eAAO,MAAM,YAAY;;;;EAIvB,CAAA;AAEF,MAAM,WAAW,kBAAkB;IACjC,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;CACxB;AAED,qBAAa,wBAAyB,SAAQ,KAAK;IAGrC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB;IAAE,QAAQ,CAAC,MAAM,EAAE,kBAAkB;IAFtF,QAAQ,CAAC,IAAI,2BAA0B;gBAElB,QAAQ,EAAE,kBAAkB,EAAW,MAAM,EAAE,kBAAkB;CAIvF;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,kBAAkB,GAAG,IAAI,CASlE"}

package/dist/client-host/identity.js

@@ -0,0 +1,28 @@
+import { CLIENT_HOST_PROTOCOL_VERSION } from './protocol';
+export const SDK_RELEASE_VERSION = '0.5.0';
+export const SDK_SOURCE_COMMIT = '2c307830bec7e560ad8683bf7b21ee91d1e2e348';
+export const SDK_PROTOCOL_VERSION = CLIENT_HOST_PROTOCOL_VERSION;
+export const SDK_IDENTITY = Object.freeze({
+    releaseVersion: SDK_RELEASE_VERSION,
+    sourceCommit: SDK_SOURCE_COMMIT,
+    protocolVersion: SDK_PROTOCOL_VERSION,
+});
+export class SDKIdentityMismatchError extends Error {
+    expected;
+    actual;
+    code = 'SDK_IDENTITY_MISMATCH';
+    constructor(expected, actual) {
+        super(`SDK runtime ${actual.releaseVersion}@${actual.sourceCommit} is incompatible with ${expected.releaseVersion}@${expected.sourceCommit}`);
+        this.expected = expected;
+        this.actual = actual;
+        this.name = 'SDKIdentityMismatchError';
+    }
+}
+export function assertSDKIdentity(actual) {
+    const expected = SDK_IDENTITY;
+    if (actual.releaseVersion !== expected.releaseVersion
+        || actual.sourceCommit !== expected.sourceCommit
+        || actual.protocolVersion.split('.', 1)[0] !== expected.protocolVersion.split('.', 1)[0]) {
+        throw new SDKIdentityMismatchError(expected, actual);
+    }
+}

package/dist/client-host/index.d.ts

@@ -0,0 +1,11 @@
+export * from './applet';
+export * from './cache';
+export * from './errors';
+export * from './identity';
+export * from './portals';
+export * from './protocol';
+export * from './route';
+export * from './rpc';
+export * from './streaming';
+export * from './transport';
+//# sourceMappingURL=index.d.ts.map

package/dist/client-host/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAA;AACxB,cAAc,SAAS,CAAA;AACvB,cAAc,UAAU,CAAA;AACxB,cAAc,YAAY,CAAA;AAC1B,cAAc,WAAW,CAAA;AACzB,cAAc,YAAY,CAAA;AAC1B,cAAc,SAAS,CAAA;AACvB,cAAc,OAAO,CAAA;AACrB,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA"}

package/dist/client-host/index.js

@@ -0,0 +1,10 @@
+export * from './applet';
+export * from './cache';
+export * from './errors';
+export * from './identity';
+export * from './portals';
+export * from './protocol';
+export * from './route';
+export * from './rpc';
+export * from './streaming';
+export * from './transport';

package/dist/client-host/portals.d.ts

@@ -0,0 +1,30 @@
+import { type PropsWithChildren, type ReactNode } from 'react';
+export type PortalSurface = 'modal' | 'drawer' | 'toast' | 'command';
+export type WidgetSlotName = 'navigation-leading' | 'navigation-trailing' | 'header-actions' | 'document-status';
+export interface ClientHostProviderProps extends PropsWithChildren {
+    portalOwner: HTMLElement;
+    background?: HTMLElement | undefined;
+    widgetSlots?: Partial<Record<WidgetSlotName, HTMLElement>> | undefined;
+    theme?: 'light' | 'dark' | undefined;
+}
+/** Owns document-lifetime portal roots; feature roots must never append to body. */
+export declare function ClientHostProvider({ portalOwner, background, widgetSlots, theme, children }: ClientHostProviderProps): import("react/jsx-runtime").JSX.Element;
+export interface PortalProps extends PropsWithChildren {
+    surface: PortalSurface;
+    label: string;
+    className?: string;
+    onEscape?: () => void;
+    theme?: 'light' | 'dark';
+}
+export declare function Portal({ surface, label, className, onEscape, theme, children }: PortalProps): import("react").ReactPortal;
+/** Uses an existing standard host when present, otherwise creates a bounded
+ * compatibility host inside the feature root (never a body-level root). */
+export declare function ClientHostBoundary({ children, theme }: PropsWithChildren<{
+    theme?: 'light' | 'dark' | undefined;
+}>): string | number | boolean | Iterable<ReactNode> | import("react/jsx-runtime").JSX.Element | null | undefined;
+/** Widget slots are persistent shell surfaces and intentionally separate from overlays. */
+export declare function WidgetSlot({ name, children }: {
+    name: WidgetSlotName;
+    children: ReactNode;
+}): import("react").ReactPortal | null;
+//# sourceMappingURL=portals.d.ts.map

package/dist/client-host/portals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"portals.d.ts","sourceRoot":"","sources":["../src/portals.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAqC,KAAK,iBAAiB,EAAE,KAAK,SAAS,EAA2D,MAAM,OAAO,CAAA;AAG1J,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,QAAQ,GAAG,OAAO,GAAG,SAAS,CAAA;AACpE,MAAM,MAAM,cAAc,GAAG,oBAAoB,GAAG,qBAAqB,GAAG,gBAAgB,GAAG,iBAAiB,CAAA;AA2EhH,MAAM,WAAW,uBAAwB,SAAQ,iBAAiB;IAChE,WAAW,EAAE,WAAW,CAAA;IACxB,UAAU,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;IACpC,WAAW,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC,GAAG,SAAS,CAAA;IACtE,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAA;CACrC;AAED,oFAAoF;AACpF,wBAAgB,kBAAkB,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,WAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,uBAAuB,2CAQzH;AAED,MAAM,WAAW,WAAY,SAAQ,iBAAiB;IAAG,OAAO,EAAE,aAAa,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAA;CAAE;AAErK,wBAAgB,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,WAAW,+BA0B3F;AAED;2EAC2E;AAC3E,wBAAgB,kBAAkB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,iBAAiB,CAAC;IAAE,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC,gHAIlH;AAaD,2FAA2F;AAC3F,wBAAgB,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,EAAE,SAAS,CAAA;CAAE,sCAG3F"}

package/dist/client-host/portals.js

@@ -0,0 +1,149 @@
+import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
+import { createContext, useContext, useEffect, useId, useMemo, useRef, useState } from 'react';
+import { createPortal } from 'react-dom';
+const zLayers = { drawer: 600, modal: 700, command: 800, toast: 900 };
+class PortalRegistry {
+    owner;
+    background;
+    roots = new Map();
+    overlays = [];
+    lockState;
+    constructor(owner, background) {
+        this.owner = owner;
+        this.background = background;
+    }
+    root(surface) {
+        let root = this.roots.get(surface);
+        if (!root) {
+            root = document.createElement('div');
+            root.dataset.iotaPortal = surface;
+            root.style.position = 'relative';
+            root.style.zIndex = String(zLayers[surface]);
+            this.owner.append(root);
+            this.roots.set(surface, root);
+        }
+        return root;
+    }
+    mount(entry) {
+        this.overlays.push(entry);
+        this.sync();
+        return () => {
+            const index = this.overlays.findIndex((candidate) => candidate.id === entry.id);
+            const wasTop = index === this.overlays.length - 1;
+            if (index >= 0)
+                this.overlays.splice(index, 1);
+            this.sync();
+            if (wasTop)
+                entry.restore?.focus();
+        };
+    }
+    destroy() {
+        this.overlays.splice(0);
+        this.sync();
+        for (const root of this.roots.values())
+            root.remove();
+        this.roots.clear();
+    }
+    sync() {
+        const blocking = this.overlays.some(({ surface }) => surface === 'modal' || surface === 'drawer' || surface === 'command');
+        if (blocking && !this.lockState) {
+            this.lockState = {
+                overflow: document.documentElement.style.overflow,
+                ...(this.background ? {
+                    inert: this.background.inert,
+                    ariaHidden: this.background.getAttribute('aria-hidden'),
+                } : {}),
+            };
+            document.documentElement.style.overflow = 'hidden';
+            if (!this.background)
+                return;
+            this.background.inert = blocking;
+            this.background.setAttribute('aria-hidden', 'true');
+            return;
+        }
+        if (!blocking && this.lockState) {
+            document.documentElement.style.overflow = this.lockState.overflow;
+            if (this.background) {
+                this.background.inert = this.lockState.inert ?? false;
+                if (this.lockState.ariaHidden === null || this.lockState.ariaHidden === undefined)
+                    this.background.removeAttribute('aria-hidden');
+                else
+                    this.background.setAttribute('aria-hidden', this.lockState.ariaHidden);
+            }
+            this.lockState = undefined;
+        }
+    }
+}
+const PortalContext = createContext(undefined);
+const WidgetContext = createContext(new Map());
+/** Owns document-lifetime portal roots; feature roots must never append to body. */
+export function ClientHostProvider({ portalOwner, background, widgetSlots = {}, theme, children }) {
+    const registry = useMemo(() => new PortalRegistry(portalOwner, background), [portalOwner, background]);
+    const slots = useMemo(() => new Map(Object.entries(widgetSlots)), [widgetSlots]);
+    useEffect(() => {
+        if (theme)
+            portalOwner.dataset.theme = theme;
+        return () => { registry.destroy(); delete portalOwner.dataset.theme; };
+    }, [portalOwner, registry, theme]);
+    return _jsx(PortalContext.Provider, { value: registry, children: _jsx(WidgetContext.Provider, { value: slots, children: children }) });
+}
+export function Portal({ surface, label, className, onEscape, theme, children }) {
+    const registry = useContext(PortalContext);
+    if (!registry)
+        throw new Error('Portal must be rendered inside ClientHostProvider');
+    const id = useId();
+    const content = useRef(null);
+    useEffect(() => registry.mount({ id, surface, restore: document.activeElement }), [id, registry, surface]);
+    useEffect(() => {
+        if (surface === 'toast')
+            return;
+        const root = content.current;
+        const first = root?.querySelector('button,[href],input,select,textarea,[tabindex]:not([tabindex="-1"])');
+        first?.focus();
+    }, [surface]);
+    const trapFocus = (event) => {
+        if (event.key === 'Escape' && onEscape) {
+            event.preventDefault();
+            event.stopPropagation();
+            onEscape();
+            return;
+        }
+        if (event.key !== 'Tab' || surface === 'toast')
+            return;
+        const focusable = Array.from(content.current?.querySelectorAll('a[href],button:not([disabled]),input:not([disabled]),select:not([disabled]),textarea:not([disabled]),[tabindex]:not([tabindex="-1"])') ?? []);
+        if (focusable.length === 0) {
+            event.preventDefault();
+            content.current?.focus();
+            return;
+        }
+        const first = focusable[0];
+        const last = focusable.at(-1);
+        if (event.shiftKey && document.activeElement === first) {
+            event.preventDefault();
+            last?.focus();
+        }
+        else if (!event.shiftKey && document.activeElement === last) {
+            event.preventDefault();
+            first?.focus();
+        }
+    };
+    return createPortal(_jsx("div", { ref: content, role: surface === 'toast' ? 'status' : 'dialog', "aria-label": label, "aria-modal": surface === 'toast' ? undefined : true, className: className, "data-iota-surface": surface, "data-theme": theme, onKeyDown: trapFocus, tabIndex: -1, children: children }), registry.root(surface));
+}
+/** Uses an existing standard host when present, otherwise creates a bounded
+ * compatibility host inside the feature root (never a body-level root). */
+export function ClientHostBoundary({ children, theme }) {
+    const existing = useContext(PortalContext);
+    if (existing)
+        return children;
+    return _jsx(EmbeddedClientHost, { theme: theme, children: children });
+}
+function EmbeddedClientHost({ children, theme }) {
+    const [background, setBackground] = useState(null);
+    const [portals, setPortals] = useState(null);
+    return _jsxs(_Fragment, { children: [_jsx("div", { "data-client-route-background": true, ref: setBackground, children: background && portals ? _jsx(ClientHostProvider, { portalOwner: portals, background: background, theme: theme, children: children }) : null }), _jsx("div", { "data-client-route-portals": true, ref: setPortals })] });
+}
+/** Widget slots are persistent shell surfaces and intentionally separate from overlays. */
+export function WidgetSlot({ name, children }) {
+    const slot = useContext(WidgetContext).get(name);
+    return slot ? createPortal(children, slot) : null;
+}

package/dist/client-host/protocol.d.ts

@@ -0,0 +1,2 @@
+export declare const CLIENT_HOST_PROTOCOL_VERSION = "1.0.0";
+//# sourceMappingURL=protocol.d.ts.map

package/dist/client-host/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,4BAA4B,UAAU,CAAA"}