@ivoryheart/herdr-world 0.1.0-rc.10

package/LICENSE

@@ -0,0 +1,22 @@
+MIT License
+
+Copyright (c) 2026 Kevin
+Copyright (c) 2026 IvoryHeart contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,42 @@
+# Herdr World
+
+Herdr World is a browser and mobile client for monitoring and controlling Herdr agents.
+
+## Install
+
+```bash
+npm install --global @ivoryheart/herdr-world
+herdr-world
+```
+
+The package contains the tested Linux x64, macOS ARM64, and macOS x64 bridge binaries and the
+bundled web application. It requires Node.js 22.14.0 or newer and Linux glibc 2.34 or newer.
+Windows, Linux ARM64, musl Linux, and unknown libc environments are not supported.
+
+Package installation only installs files. It does not download or build native code, install Herdr,
+create a workspace, or start a process.
+
+Herdr World still requires a running Herdr 0.8.2 or newer session using terminal protocol 20. Start
+Herdr from the directory containing the work it should manage, then run `herdr-world`. Use
+`herdr-world --help` for bridge options. The bridge binds to loopback by default; Host, Origin, and
+Content Security Policy checks are request protections, not user authentication.
+
+The package includes the complete application legal notices and dependency inventories. The exact
+source release and package checksums are recorded in the corresponding GitHub release workflow.
+
+## Using Herdr's plugin
+
+The Herdr plugin is installed from the Herdr World GitHub repository, not from this npm package:
+
+```bash
+herdr plugin install IvoryHeart/herdr-world --ref vX.Y.Z
+```
+
+It installs the exact matching npm payload privately inside Herdr's managed plugin checkout and
+supervises its bridge for the invoking Herdr session. The plugin requires Node.js 22.14.0 or newer
+and npm at installation and runtime; it does not use this package's global installation or a
+Homebrew installation. Installation does not start the bridge immediately. Herdr's startup hook
+starts it on the next server restore; invoke the plugin's `open` or `start` action for an already
+running server. See the repository [plugin documentation](https://github.com/IvoryHeart/herdr-world#herdr-plugin)
+for configuration, lifecycle actions, startup and failure behavior, security, and the standalone
+distribution relationship.

package/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,52 @@
+# Third-party notices
+
+Herdr World contains code and assets from the projects below. The repository
+history, lockfiles, and referenced manifests provide the exact version record.
+
+## Herdr Web
+
+Herdr World is derived from
+[`kcosr/herdr-web`](https://github.com/kcosr/herdr-web), licensed under the MIT
+License, Copyright (c) 2026 Kevin. The retained MIT terms are in the repository
+[`LICENSE`](LICENSE). The current synchronized revision is recorded in
+[`UPSTREAM.md`](UPSTREAM.md).
+
+## Herdr compatibility source
+
+`vendor/herdr-compat` contains copied or adapted source from
+[`herdrdev/herdr`](https://github.com/herdrdev/herdr) v0.8.2 at commit
+`9eb521456ac0d19d3ab3d9d7cea3cca10baa8a4c`, licensed under Apache-2.0.
+The exact source paths, hashes, and local dispositions are recorded in
+[`vendor/herdr-compat/VENDOR-MANIFEST.toml`](vendor/herdr-compat/VENDOR-MANIFEST.toml).
+The license text is retained in
+[`third_party/licenses/Apache-2.0.txt`](third_party/licenses/Apache-2.0.txt).
+
+## Claw-Empire character assets and Office adaptations
+
+The character sprites in `web/public/world/characters` are copied from
+[`GreenSheep01201/claw-empire`](https://github.com/GreenSheep01201/claw-empire)
+at commit `66a24ea7df2435ef897c48c147deb7ec572c01c2`, licensed under
+Apache-2.0, Copyright 2026 GreenSheep01201 (seowongil@gmail.com).
+
+The Office geometry and drawing TypeScript files are modified adaptations of
+the historical sources identified by hash in [`docs/world-assets.md`](docs/world-assets.md).
+Herdr World's TypeScript port and subsequent modifications are documented
+there as modified material. The Apache-2.0 text is retained in
+[`third_party/licenses/Apache-2.0.txt`](third_party/licenses/Apache-2.0.txt).
+
+## PixiJS
+
+World rendering uses PixiJS 8.3.4, licensed under the MIT License, Copyright
+(c) 2013-2023 Mathew Groves and Chad Engler. Its license is retained in
+[`third_party/licenses/PixiJS-MIT.txt`](third_party/licenses/PixiJS-MIT.txt)
+and alongside the shipped World assets.
+
+## Other dependencies
+
+JavaScript and Rust dependency versions are pinned by `package-lock.json`,
+`web/package-lock.json`, `bridge/Cargo.lock`, and
+`vendor/herdr-compat/Cargo.lock`. The complete production npm and planned
+desktop Cargo closures, their selected licences, copyright notices, and full
+licence texts are checked in under
+[`third_party/dependencies`](third_party/dependencies). Release assembly fails
+when those generated inventories drift from the resolved dependency graphs.

package/UPSTREAM.md

@@ -0,0 +1,33 @@
+# Upstreams
+
+Herdr World is derived from
+[`kcosr/herdr-web`](https://github.com/kcosr/herdr-web) and runs against
+[`herdrdev/herdr`](https://github.com/herdrdev/herdr).
+
+The Git remotes are:
+
+```text
+origin    git@github.com:IvoryHeart/herdr-world.git
+upstream  git@github.com:kcosr/herdr-web.git
+```
+
+Current synchronization points:
+
+- Herdr Web: `e67537b6bdd99fe489584252ba2f84ea070a3193`
+  (`v0.5.0` plus its next-development marker)
+- Herdr compatibility: Herdr `v0.8.2`, commit
+  `9eb521456ac0d19d3ab3d9d7cea3cca10baa8a4c`, terminal protocol `20`
+
+Git history is the synchronization record. The Herdr Web commit above is a
+merge ancestor of this repository; there is no separate hand-maintained
+adoption ledger.
+
+To update:
+
+```bash
+git fetch upstream
+git merge upstream/main
+```
+
+Keep World implementation in its World-owned directories and resolve only the
+small integration seams when an upstream change touches them.

package/bin/herdr-world

@@ -0,0 +1,128 @@
+#!/usr/bin/env node
+import { spawn } from "node:child_process";
+import { realpathSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+import { dirname, join, resolve } from "node:path";
+
+export const SUPPORTED_PLATFORMS = {
+  "linux-x64": "linux-x64",
+  "darwin-arm64": "macos-arm64",
+  "darwin-x64": "macos-x64",
+};
+
+export function parseGlibcVersion(value) {
+  const match = typeof value === "string" ? value.match(/^(\d+)\.(\d+)$/) : null;
+  return match ? { major: Number(match[1]), minor: Number(match[2]) } : null;
+}
+
+function compareVersions(left, right) {
+  if (left.major !== right.major) return left.major - right.major;
+  return left.minor - right.minor;
+}
+
+export function selectBridge({
+  platform = process.platform,
+  arch = process.arch,
+  report = process.report,
+} = {}) {
+  const key = `${platform}-${arch}`;
+  const target = SUPPORTED_PLATFORMS[key];
+  if (!target) {
+    throw new Error(`Herdr World does not support this platform or architecture: ${key}`);
+  }
+
+  if (platform !== "linux") return target;
+
+  const glibcValue = report?.getReport?.().header?.glibcVersionRuntime;
+  if (typeof glibcValue !== "string") {
+    throw new Error("Herdr World requires a detectable glibc runtime on Linux; musl or unknown libc is unsupported");
+  }
+  const glibc = parseGlibcVersion(glibcValue);
+  if (!glibc) {
+    throw new Error(`Herdr World could not parse the Linux glibc version: ${glibcValue}`);
+  }
+  if (compareVersions(glibc, { major: 2, minor: 34 }) < 0) {
+    throw new Error(`Herdr World requires glibc 2.34 or newer; found ${glibcValue}`);
+  }
+  return target;
+}
+
+export function packageHelp() {
+  return `Usage: herdr-world [OPTIONS]
+
+Starts the Herdr World browser bridge for the selected Herdr session.
+
+Options are forwarded to the bridge:
+  --host HOST                 Bind address (loopback by default)
+  --port PORT                 HTTP port (8787 by default)
+  --session NAME              Select a named Herdr session
+  --no-herdr-setup            Disable interactive Herdr setup
+  -h, --help                  Show this help without starting Herdr or a bridge
+
+The bridge requires Herdr 0.8.2 or newer with terminal protocol 20.
+`;
+}
+
+export function isHelpRequest(args) {
+  return args.includes("-h") || args.includes("--help");
+}
+
+export function runPackageLauncher(args = process.argv.slice(2), {
+  platform = process.platform,
+  arch = process.arch,
+  report = process.report,
+  packageRoot = resolve(dirname(fileURLToPath(import.meta.url)), ".."),
+} = {}) {
+  if (isHelpRequest(args)) {
+    process.stdout.write(packageHelp());
+    return null;
+  }
+
+  const target = selectBridge({ platform, arch, report });
+  const bridge = join(packageRoot, "lib", "bridges", target, "herdr-world-bridge");
+  const launcher = join(packageRoot, "lib", "herdr-world-launcher.sh");
+  const staticDir = join(packageRoot, "share", "herdr-world", "web");
+  const child = spawn("/bin/bash", [launcher, ...args], {
+    env: {
+      ...process.env,
+      HERDR_WORLD_BRIDGE_BIN: bridge,
+      HERDR_WORLD_STATIC_DIR: staticDir,
+    },
+    stdio: "inherit",
+  });
+
+  const signalHandlers = new Map();
+  for (const signal of ["SIGINT", "SIGTERM", "SIGHUP"]) {
+    const handler = () => child.kill(signal);
+    signalHandlers.set(signal, handler);
+    process.on(signal, handler);
+  }
+  child.once("error", (error) => {
+    console.error(`could not start Herdr World: ${error.message}`);
+    process.exitCode = 1;
+  });
+  child.once("exit", (code, signal) => {
+    if (signal) {
+      for (const [forwardedSignal, handler] of signalHandlers) {
+        process.removeListener(forwardedSignal, handler);
+      }
+      process.kill(process.pid, signal);
+    } else {
+      process.exitCode = code ?? 1;
+    }
+  });
+  return child;
+}
+
+if (
+  process.argv[1] &&
+  realpathSync(resolve(process.argv[1])) === realpathSync(fileURLToPath(import.meta.url))
+) {
+  try {
+    const result = runPackageLauncher();
+    if (!result) process.exit(0);
+  } catch (error) {
+    console.error(error.message);
+    process.exit(1);
+  }
+}

package/docs/world-assets.md

@@ -0,0 +1,51 @@
+# Pixel Office asset provenance
+
+The Herdr World Pixel Office port uses character assets traceable to the
+Claw-Empire repository at revision
+`66a24ea7df2435ef897c48c147deb7ec572c01c2`, under `public/sprites/`. The
+tracked PNGs are byte-identical to those source files. That source carries the
+Apache License 2.0 and the copyright notice `Copyright 2026 GreenSheep01201
+(seowongil@gmail.com)`. Herdr World has no build or runtime dependency on the
+reference workspace. The copied character sprites now live under
+`web/public/world/characters/`.
+
+The reference workspace is historical provenance only; contributors do not
+need to clone or start another repository to build, test, or run Herdr World.
+The release notice bundle MUST include the Apache-2.0 license and this
+attribution. The adapted TypeScript geometry/drawing files are modified files
+and MUST carry a prominent modification notice as required by Apache-2.0
+Section 4(b); the provenance manifest will identify the exact source hashes,
+copied-file hashes, and notices.
+
+The historical reference Office directory was untracked in the source
+checkout at port time, so that local directory has no source commit to cite.
+The immutable Extension 001 approval commit authorizing this port is
+`7be916e3c4713582c72665cd787ef0300658ea26`. The Claw-Empire revision and
+these SHA-256 values identify the exact copied assets:
+
+| Asset | SHA-256 |
+| --- | --- |
+| `1-D-1.png` | `97e11be5369a5865f9e0a7b1657af23fd5d7f4b244fb94010ebb7e9e66a3e004` |
+| `2-D-1.png` | `f3053d7f6bc2959ad375b1cfd23eb9fb1e34e7329ba837fd7518268459d0a83d` |
+| `3-D-1.png` | `eb8cb07677ec3ff81a43e019990b288ca3b858309fe51b2d5b52ccf3f8b855f5` |
+| `4-D-1.png` | `23dab1383ef8f98af148885e5f01c25063ce0e7b6d0ae6a255c5bdb83dae01f2` |
+| `5-D-1.png` | `32d8159b707fc64447fc6ab27a6a00ba2ddf318627fada114d43d5aef9c93fa9` |
+| `6-D-1.png` | `7ae5935cf9f454f0ea8ee099111fde50da5055a50a7b05c53a98e5eb914b3739` |
+| `7-D-1.png` | `4fb4bcf9046c66f7e4630edf636deb6d076a062e195c9dfb44caf713e9e46dcf` |
+| `8-D-1.png` | `63d8d576aff2f9973d38d24c0d0ca87498af8880c1326aceaa0c644c5df03d66` |
+| `9-D-1.png` | `1fc674238ce13ae382c07189d4422780e47bdd1417bf468bb492786cf211f4bf` |
+| `10-D-1.png` | `c4d22e7ccec30505873469a2e1cef76cf8435be84d71d3f201d84147de8f5738` |
+| `11-D-1.png` | `6e2c79f2fdb5afe8fd8c1537ba550a8ada9d301e4b493e4a528dbb37d3d4a549` |
+| `12-D-1.png` | `334595aa69f05095faa88227413dcddd6d1a2f177fbaeb625bd78f8dc7bcef34` |
+
+The geometry and drawing behavior are TypeScript adaptations of `office-geometry.js`,
+`office-drawing.js`, and the rendering portions of `office-scene.js`; their source hashes at port
+time were respectively:
+
+- `6ab54a94369e8695c3bac2cf94ac76bab62613563382e4a712944ff0ff70e028`
+- `56edfdd364ace64663e4a98c931d15d2ef5bfcb725acee8d8791e88f974fd210`
+- `f4975a6e840506a003f39153dfa6e32830d311624402980a1884ecb5351a1e3f`
+
+PixiJS `8.3.4` is pinned as an npm dependency. Its MIT license is retained at
+`web/public/world/LICENSE-PixiJS.txt`. The Claw-Empire Apache-2.0 license is a
+release requirement and is not inferred from PixiJS or any neighboring asset.