@knpkv/hub-app 0.0.0-stage → 0.2.0

package/dist/standalone.d.ts

@@ -0,0 +1,17 @@
+/**
+ * The standalone shell, bundled to `dist/standalone-shell.js` and served at `/app/shell.js`: spends the
+ * bootstrap link, renders the app's label and page tabs, routes by hash and mounts the app's client.
+ *
+ * Routes use the hub's own shape (`?query#<module>/<page>`), so links an app builds work in both shells.
+ *
+ * @module
+ */
+import { Schema } from "effect";
+declare const StandaloneShellError_base: Schema.Class<StandaloneShellError, Schema.TaggedStruct<"StandaloneShellError", {
+    readonly part: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+/** The page's own markup is missing a part this shell fills. */
+export declare class StandaloneShellError extends StandaloneShellError_base {
+}
+export {};
+//# sourceMappingURL=standalone.d.ts.map

package/dist/standalone.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"standalone.d.ts","sourceRoot":"","sources":["../src/standalone.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAA6C,MAAM,EAAE,MAAM,QAAQ,CAAA;;;;AAK1E,gEAAgE;AAChE,qBAAa,oBAAqB,SAAQ,yBAExC;CAAG"}

package/dist/standalone.js

@@ -0,0 +1,140 @@
+var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExtension) || function (path, preserveJsx) {
+    if (typeof path === "string" && /^\.\.?\//.test(path)) {
+        return path.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i, function (m, tsx, d, ext, cm) {
+            return tsx ? preserveJsx ? ".jsx" : ".js" : d && (!ext || !cm) ? m : (d + ext + "." + cm.toLowerCase() + "js");
+        });
+    }
+    return path;
+};
+/**
+ * The standalone shell, bundled to `dist/standalone-shell.js` and served at `/app/shell.js`: spends the
+ * bootstrap link, renders the app's label and page tabs, routes by hash and mounts the app's client.
+ *
+ * Routes use the hub's own shape (`?query#<module>/<page>`), so links an app builds work in both shells.
+ *
+ * @module
+ */
+import { Effect, ManagedRuntime, Option, Predicate, Schema } from "effect";
+import { FetchHttpClient, HttpClient, HttpClientRequest } from "effect/http";
+import { AppManifest } from "./manifest.js";
+/** The page's own markup is missing a part this shell fills. */
+export class StandaloneShellError extends Schema.TaggedError()("StandaloneShellError", {
+    part: Schema.String
+}) {
+}
+const runtime = ManagedRuntime.make(FetchHttpClient.layer);
+const csrfKey = "hub-app-csrf";
+const BootstrapReply = Schema.Struct({ csrfToken: Schema.optionalKey(Schema.String) });
+/** An app's client module, checked before it is mounted: a default export with a contract and a mount. */
+const ClientModule = Schema.Struct({
+    default: Schema.Struct({
+        contract: Schema.Number,
+        mount: Schema.declare((input) => Predicate.isFunction(input))
+    })
+});
+const element = (selector) => {
+    const found = document.querySelector(selector);
+    if (found === null)
+        throw new StandaloneShellError({ part: selector });
+    return found;
+};
+/** Spend `#bootstrap_token=…` once, keep the CSRF token for this tab, and drop the fragment. */
+const bootstrap = Effect.fn("StandaloneShell.bootstrap")(function* () {
+    const code = new URLSearchParams(window.location.hash.slice(1)).get("bootstrap_token");
+    if (code === null)
+        return;
+    window.history.replaceState(null, "", `${window.location.pathname}${window.location.search}`);
+    const client = yield* HttpClient.HttpClient;
+    const response = yield* client.execute(HttpClientRequest.post(new URL("/auth/bootstrap", window.location.href)).pipe(HttpClientRequest.bearerToken(code))).pipe(Effect.provideService(FetchHttpClient.RequestInit, { credentials: "same-origin", cache: "no-store" }));
+    const body = yield* response.json;
+    if (response.status !== 200)
+        return;
+    const reply = Schema.decodeUnknownOption(BootstrapReply)(body);
+    if (Option.isSome(reply) && reply.value.csrfToken !== undefined) {
+        window.sessionStorage.setItem(csrfKey, reply.value.csrfToken);
+    }
+});
+/** The page named by `#<module>/<page>`, or the default page for anything else. */
+const currentPage = (manifest) => {
+    const [module, page] = window.location.hash.slice(1).split("/");
+    return module === manifest.id && manifest.module.pages.some((entry) => entry.id === page) && page !== undefined
+        ? page
+        : manifest.module.defaultPage;
+};
+const start = async () => {
+    const manifestText = element("#hub-app-manifest").textContent ?? "";
+    const manifest = Schema.decodeUnknownSync(Schema.fromJsonString(AppManifest))(manifestText);
+    await runtime.runPromise(bootstrap().pipe(Effect.catch((error) => Effect.logWarning("Sign-in link not spent", error))));
+    const root = element("#hub-app-root");
+    const portalRoot = element("#hub-app-portals");
+    element("[data-hub-shell=label]").textContent = manifest.module.label;
+    const crumb = element("[data-hub-shell=crumb]");
+    const slot = element("[data-hub-shell=slot]");
+    const pages = element("[data-hub-shell=pages]");
+    const tabs = manifest.module.pages.map((page) => {
+        const link = document.createElement("a");
+        link.href = `#${manifest.id}/${page.id}`;
+        link.textContent = page.label;
+        pages.append(link);
+        return { id: page.id, link };
+    });
+    // The owner session's cookie is scoped to `/api`.
+    const api = (path) => `/api/v1/modules/${manifest.id}${path}`;
+    let mounted = null;
+    const context = () => {
+        const page = currentPage(manifest);
+        for (const tab of tabs) {
+            if (tab.id === page)
+                tab.link.setAttribute("aria-current", "page");
+            else
+                tab.link.removeAttribute("aria-current");
+        }
+        return {
+            contract: 1,
+            mode: "standalone",
+            api,
+            requestHeaders: () => {
+                const csrf = window.sessionStorage.getItem(csrfKey);
+                return csrf === null ? {} : { "x-csrf-token": csrf };
+            },
+            caller: { login: "owner" },
+            page,
+            search: new URLSearchParams(window.location.search),
+            active: true,
+            navigate: (href, history) => {
+                const target = new URL(href, window.location.href);
+                if (history === "push")
+                    window.history.pushState(null, "", target);
+                else
+                    window.history.replaceState(null, "", target);
+                mounted?.update(context());
+            },
+            closeSelection: (parentHref) => {
+                window.history.replaceState(null, "", new URL(parentHref, window.location.href));
+                mounted?.update(context());
+            },
+            setCrumb: (items) => {
+                crumb.textContent = items.map((item) => item.label).join(" › ");
+            },
+            setHeaderSlot: (value) => {
+                slot.textContent = value === null ? "" : `${value.label}: ${value.text}`;
+            },
+            setEmpty: (empty) => {
+                root.toggleAttribute("data-empty", empty);
+            },
+            setBadge: () => { },
+            portalRoot
+        };
+    };
+    const loaded = Schema.decodeUnknownOption(ClientModule)(await import(__rewriteRelativeImportExtension(`/app/assets/${manifest.client.entry}`)));
+    if (Option.isNone(loaded) || loaded.value.default.contract !== 1) {
+        root.textContent = `${manifest.module.label} can't be shown by this version of its shell.`;
+        return;
+    }
+    mounted = loaded.value.default.mount(root, context());
+    window.addEventListener("popstate", () => mounted?.update(context()));
+    window.addEventListener("hashchange", () => mounted?.update(context()));
+};
+if (document.querySelector("#hub-app-manifest") !== null)
+    void start();
+//# sourceMappingURL=standalone.js.map

package/dist/standalone.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"standalone.js","sourceRoot":"","sources":["../src/standalone.ts"],"names":[],"mappings":";;;;;;;;AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC1E,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAE5E,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAE3C,gEAAgE;AAChE,MAAM,OAAO,oBAAqB,SAAQ,MAAM,CAAC,WAAW,EAAwB,CAAC,sBAAsB,EAAE;IAC3G,IAAI,EAAE,MAAM,CAAC,MAAM;CACpB,CAAC;CAAG;AAEL,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAA;AAC1D,MAAM,OAAO,GAAG,cAAc,CAAA;AAC9B,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;AAEtF,0GAA0G;AAC1G,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;QACrB,QAAQ,EAAE,MAAM,CAAC,MAAM;QACvB,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAA+B,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;KAC3F,CAAC;CACH,CAAC,CAAA;AAEF,MAAM,OAAO,GAAG,CAAC,QAAgB,EAAe,EAAE;IAChD,MAAM,KAAK,GAAG,QAAQ,CAAC,aAAa,CAAc,QAAQ,CAAC,CAAA;IAC3D,IAAI,KAAK,KAAK,IAAI;QAAE,MAAM,IAAI,oBAAoB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;IACtE,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAED,gGAAgG;AAChG,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,2BAA2B,CAAC,CAAC,QAAQ,CAAC;IAChE,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;IACtF,IAAI,IAAI,KAAK,IAAI;QAAE,OAAM;IACzB,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;IAC7F,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAA;IAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CACpC,iBAAiB,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CACnH,CAAC,IAAI,CACJ,MAAM,CAAC,cAAc,CAAC,eAAe,CAAC,WAAW,EAAE,EAAE,WAAW,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CACtG,CAAA;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAA;IACjC,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,OAAM;IACnC,MAAM,KAAK,GAAG,MAAM,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAA;IAC9D,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAChE,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IAC/D,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,mFAAmF;AACnF,MAAM,WAAW,GAAG,CAAC,QAAqB,EAAU,EAAE;IACpD,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC/D,OAAO,MAAM,KAAK,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,IAAI,CAAC,IAAI,IAAI,KAAK,SAAS;QAC7G,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAA;AACjC,CAAC,CAAA;AAED,MAAM,KAAK,GAAG,KAAK,IAAmB,EAAE;IACtC,MAAM,YAAY,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC,WAAW,IAAI,EAAE,CAAA;IACnE,MAAM,QAAQ,GAAG,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAA;IAC3F,MAAM,OAAO,CAAC,UAAU,CACtB,SAAS,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC,CAAC,CAC9F,CAAA;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IACrC,MAAM,UAAU,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;IAC9C,OAAO,CAAC,wBAAwB,CAAC,CAAC,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAA;IACrE,MAAM,KAAK,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAA;IAC/C,MAAM,IAAI,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAA;IAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAA;IAC/C,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAC9C,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;QACxC,IAAI,CAAC,IAAI,GAAG,IAAI,QAAQ,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,EAAE,CAAA;QACxC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAA;QAC7B,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAClB,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,CAAA;IAC9B,CAAC,CAAC,CAAA;IACF,kDAAkD;IAClD,MAAM,GAAG,GAAG,CAAC,IAAkB,EAAE,EAAE,CAAC,mBAAmB,QAAQ,CAAC,EAAE,GAAG,IAAI,EAAE,CAAA;IAC3E,IAAI,OAAO,GAAsB,IAAI,CAAA;IACrC,MAAM,OAAO,GAAG,GAAiB,EAAE;QACjC,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAA;QAClC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,GAAG,CAAC,EAAE,KAAK,IAAI;gBAAE,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,CAAA;;gBAC7D,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,CAAA;QAC/C,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,CAAC;YACX,IAAI,EAAE,YAAY;YAClB,GAAG;YACH,cAAc,EAAE,GAAG,EAAE;gBACnB,MAAM,IAAI,GAAG,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;gBACnD,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAA;YACtD,CAAC;YACD,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;YAC1B,IAAI;YACJ,MAAM,EAAE,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YACnD,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE;gBAC1B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;gBAClD,IAAI,OAAO,KAAK,MAAM;oBAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,CAAA;;oBAC7D,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,CAAA;gBAClD,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA;YAC5B,CAAC;YACD,cAAc,EAAE,CAAC,UAAU,EAAE,EAAE;gBAC7B,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA;gBAChF,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA;YAC5B,CAAC;YACD,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;gBAClB,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACjE,CAAC;YACD,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE;gBACvB,IAAI,CAAC,WAAW,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,CAAA;YAC1E,CAAC;YACD,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;gBAClB,IAAI,CAAC,eAAe,CAAC,YAAY,EAAE,KAAK,CAAC,CAAA;YAC3C,CAAC;YACD,QAAQ,EAAE,GAAG,EAAE,GAAE,CAAC;YAClB,UAAU;SACX,CAAA;IACH,CAAC,CAAA;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC,MAAM,MAAM,kCAAC,eAAe,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,EAAC,CAAC,CAAA;IAC7G,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACjE,IAAI,CAAC,WAAW,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,+CAA+C,CAAA;QAC1F,OAAM;IACR,CAAC;IACD,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;IACrD,MAAM,CAAC,gBAAgB,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;IACrE,MAAM,CAAC,gBAAgB,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;AACzE,CAAC,CAAA;AAED,IAAI,QAAQ,CAAC,aAAa,CAAC,mBAAmB,CAAC,KAAK,IAAI;IAAE,KAAK,KAAK,EAAE,CAAA"}

package/dist/wire.d.ts

@@ -0,0 +1,75 @@
+/**
+ * The HTTP surface between hub and app, named once so both sides agree.
+ *
+ * - Hub → app (over the app's unix socket): `/app/*` paths and module routes, with the `x-hub-*` headers.
+ * - App → hub (the hub's loopback listener): `/v1/app-services/*`, authenticated with the per-app token.
+ *
+ * @module
+ */
+import { Schema } from "effect";
+export declare const appPaths: {
+    manifest: "/app/manifest";
+    health: "/app/health";
+    needsYou: "/app/needs-you";
+    badge: "/app/badge";
+    assets: "/app/assets/";
+};
+/** Headers the hub sets on a proxied request and strips from every inbound one. */
+export declare const hubHeaders: {
+    caller: string;
+    requestId: string;
+    grant: string;
+    listener: string;
+    app: string;
+};
+/** Paths the hub serves to apps on its loopback listener. */
+export declare const appServicePaths: {
+    host: string;
+    fleetRead: string;
+    jobs: string;
+    relay: string;
+};
+export declare const HostInfo: Schema.Struct<{
+    readonly host: Schema.String;
+    readonly isHub: Schema.Boolean;
+    readonly hosts: Schema.$Array<Schema.String>;
+}>;
+export interface HostInfo extends Schema.Schema.Type<typeof HostInfo> {
+}
+/** Fleet reads the hub already fans out to its peers; each answers the hub's own JSON for that read. */
+export declare const FleetReadKind: Schema.Literals<readonly ["usage", "limits"]>;
+export type FleetReadKind = typeof FleetReadKind.Type;
+export declare const FleetReadRequest: Schema.Struct<{
+    readonly read: Schema.Literals<readonly ["usage", "limits"]>;
+    readonly query: Schema.$Record<Schema.String, Schema.String>;
+}>;
+export interface FleetReadRequest extends Schema.Schema.Type<typeof FleetReadRequest> {
+}
+/** A Fleet job submitted for the caller the grant names. The payload is checked by the hub's job schema. */
+export declare const JobSubmission: Schema.Struct<{
+    readonly grant: Schema.brand<Schema.String, "HubGrant">;
+    readonly payload: Schema.Codec<Schema.Json, Schema.Json, never, never>;
+}>;
+export interface JobSubmission extends Schema.Schema.Type<typeof JobSubmission> {
+}
+export declare const JobAccepted: Schema.Struct<{
+    readonly jobId: Schema.String;
+    readonly status: Schema.String;
+}>;
+export interface JobAccepted extends Schema.Schema.Type<typeof JobAccepted> {
+}
+/** A Relay post as the app, or as the caller when a grant is given. */
+export declare const RelayPost: Schema.Struct<{
+    readonly grant: Schema.NullOr<Schema.brand<Schema.String, "HubGrant">>;
+    readonly kind: Schema.Literals<readonly ["status", "blocker"]>;
+    readonly text: Schema.String;
+}>;
+export interface RelayPost extends Schema.Schema.Type<typeof RelayPost> {
+}
+/** Why the hub refused an app-service call. */
+export declare const AppServiceRefusal: Schema.Struct<{
+    readonly code: Schema.Literals<readonly ["unauthorized", "undeclared", "grant_unknown", "grant_expired", "grant_used", "grant_app_mismatch", "grant_read_only", "rejected", "unavailable"]>;
+}>;
+export interface AppServiceRefusal extends Schema.Schema.Type<typeof AppServiceRefusal> {
+}
+//# sourceMappingURL=wire.d.ts.map

package/dist/wire.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire.d.ts","sourceRoot":"","sources":["../src/wire.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAG/B,eAAO,MAAM,QAAQ;;;;;;CAMmB,CAAA;AAExC,mFAAmF;AACnF,eAAO,MAAM,UAAU;IACrB,MAAM;IACN,SAAS;IACT,KAAK;IACL,QAAQ;IACR,GAAG;CACJ,CAAA;AAED,6DAA6D;AAC7D,eAAO,MAAM,eAAe;IAC1B,IAAI;IACJ,SAAS;IACT,IAAI;IACJ,KAAK;CACN,CAAA;AAED,eAAO,MAAM,QAAQ;;;;EAInB,CAAA;AACF,MAAM,WAAW,QAAS,SAAQ,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,QAAQ,CAAC;CAAG;AAExE,wGAAwG;AACxG,eAAO,MAAM,aAAa,+CAAuC,CAAA;AACjE,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAC,IAAI,CAAA;AAErD,eAAO,MAAM,gBAAgB;;;EAG3B,CAAA;AACF,MAAM,WAAW,gBAAiB,SAAQ,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,gBAAgB,CAAC;CAAG;AAExF,4GAA4G;AAC5G,eAAO,MAAM,aAAa;;;EAAwD,CAAA;AAClF,MAAM,WAAW,aAAc,SAAQ,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,aAAa,CAAC;CAAG;AAElF,eAAO,MAAM,WAAW;;;EAAiE,CAAA;AACzF,MAAM,WAAW,WAAY,SAAQ,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,WAAW,CAAC;CAAG;AAE9E,uEAAuE;AACvE,eAAO,MAAM,SAAS;;;;EAIpB,CAAA;AACF,MAAM,WAAW,SAAU,SAAQ,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,SAAS,CAAC;CAAG;AAE1E,+CAA+C;AAC/C,eAAO,MAAM,iBAAiB;;EAY5B,CAAA;AACF,MAAM,WAAW,iBAAkB,SAAQ,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,iBAAiB,CAAC;CAAG"}

package/dist/wire.js

@@ -0,0 +1,67 @@
+/**
+ * The HTTP surface between hub and app, named once so both sides agree.
+ *
+ * - Hub → app (over the app's unix socket): `/app/*` paths and module routes, with the `x-hub-*` headers.
+ * - App → hub (the hub's loopback listener): `/v1/app-services/*`, authenticated with the per-app token.
+ *
+ * @module
+ */
+import { Schema } from "effect";
+import { Grant } from "./route.js";
+export const appPaths = {
+    manifest: "/app/manifest",
+    health: "/app/health",
+    needsYou: "/app/needs-you",
+    badge: "/app/badge",
+    assets: "/app/assets/"
+};
+/** Headers the hub sets on a proxied request and strips from every inbound one. */
+export const hubHeaders = {
+    caller: "x-hub-caller",
+    requestId: "x-hub-request-id",
+    grant: "x-hub-grant",
+    listener: "x-hub-listener",
+    app: "x-hub-app"
+};
+/** Paths the hub serves to apps on its loopback listener. */
+export const appServicePaths = {
+    host: "/v1/app-services/host",
+    fleetRead: "/v1/app-services/fleet-read",
+    jobs: "/v1/app-services/jobs",
+    relay: "/v1/app-services/relay"
+};
+export const HostInfo = Schema.Struct({
+    host: Schema.String,
+    isHub: Schema.Boolean,
+    hosts: Schema.Array(Schema.String)
+});
+/** Fleet reads the hub already fans out to its peers; each answers the hub's own JSON for that read. */
+export const FleetReadKind = Schema.Literals(["usage", "limits"]);
+export const FleetReadRequest = Schema.Struct({
+    read: FleetReadKind,
+    query: Schema.Record(Schema.String, Schema.String)
+});
+/** A Fleet job submitted for the caller the grant names. The payload is checked by the hub's job schema. */
+export const JobSubmission = Schema.Struct({ grant: Grant, payload: Schema.Json });
+export const JobAccepted = Schema.Struct({ jobId: Schema.String, status: Schema.String });
+/** A Relay post as the app, or as the caller when a grant is given. */
+export const RelayPost = Schema.Struct({
+    grant: Schema.NullOr(Grant),
+    kind: Schema.Literals(["status", "blocker"]),
+    text: Schema.String.check(Schema.isNonEmpty(), Schema.isMaxLength(4_000))
+});
+/** Why the hub refused an app-service call. */
+export const AppServiceRefusal = Schema.Struct({
+    code: Schema.Literals([
+        "unauthorized",
+        "undeclared",
+        "grant_unknown",
+        "grant_expired",
+        "grant_used",
+        "grant_app_mismatch",
+        "grant_read_only",
+        "rejected",
+        "unavailable"
+    ])
+});
+//# sourceMappingURL=wire.js.map

package/dist/wire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire.js","sourceRoot":"","sources":["../src/wire.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC/B,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAElC,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,QAAQ,EAAE,eAAe;IACzB,MAAM,EAAE,aAAa;IACrB,QAAQ,EAAE,gBAAgB;IAC1B,KAAK,EAAE,YAAY;IACnB,MAAM,EAAE,cAAc;CACgB,CAAA;AAExC,mFAAmF;AACnF,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,MAAM,EAAE,cAAc;IACtB,SAAS,EAAE,kBAAkB;IAC7B,KAAK,EAAE,aAAa;IACpB,QAAQ,EAAE,gBAAgB;IAC1B,GAAG,EAAE,WAAW;CACjB,CAAA;AAED,6DAA6D;AAC7D,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,IAAI,EAAE,uBAAuB;IAC7B,SAAS,EAAE,6BAA6B;IACxC,IAAI,EAAE,uBAAuB;IAC7B,KAAK,EAAE,wBAAwB;CAChC,CAAA;AAED,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;IACpC,IAAI,EAAE,MAAM,CAAC,MAAM;IACnB,KAAK,EAAE,MAAM,CAAC,OAAO;IACrB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;CACnC,CAAC,CAAA;AAGF,wGAAwG;AACxG,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAA;AAGjE,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,aAAa;IACnB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;CACnD,CAAC,CAAA;AAGF,4GAA4G;AAC5G,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;AAGlF,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;AAGzF,uEAAuE;AACvE,MAAM,CAAC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;IACrC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC5C,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;CAC1E,CAAC,CAAA;AAGF,+CAA+C;AAC/C,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7C,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC;QACpB,cAAc;QACd,YAAY;QACZ,eAAe;QACf,eAAe;QACf,YAAY;QACZ,oBAAoB;QACpB,iBAAiB;QACjB,UAAU;QACV,aAAa;KACd,CAAC;CACH,CAAC,CAAA"}

package/package.json

@@ -1,6 +1,65 @@
 {
   "name": "@knpkv/hub-app",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.2.0",
+  "description": "Contract and runner for apps that run standalone on their own port and mount in the Relay hub",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/knpkv/npm.git",
+    "directory": "packages/hub-app"
+  },
+  "type": "module",
+  "sideEffects": [
+    "./dist/standalone.js",
+    "./dist/standalone-shell.js"
+  ],
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./node": {
+      "types": "./dist/node.d.ts",
+      "import": "./dist/node.js"
+    },
+    "./hub-client": {
+      "types": "./dist/hub-client.d.ts",
+      "import": "./dist/hub-client.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=26"
+  },
+  "dependencies": {
+    "@effect/platform-node": "4.0.0",
+    "@effect/platform-node-shared": "4.0.0",
+    "@knpkv/browser-pairing": "^0.8.0"
+  },
+  "peerDependencies": {
+    "effect": "4.0.0"
+  },
+  "devDependencies": {
+    "@effect/vitest": "4.0.0",
+    "@types/node": "^26.6.4",
+    "effect": "4.0.0",
+    "esbuild": "0.28.2",
+    "rimraf": "^6.1.3",
+    "typescript": "npm:@typescript/typescript6@^6.0.2",
+    "vitest": "^5.0.5"
+  },
+  "scripts": {
+    "build": "tsc -b tsconfig.build.json --force && node scripts/build-shell.mjs",
+    "check": "tsc -b tsconfig.json && tsc -p tsconfig.test.json --noEmit",
+    "lint": "eslint src test",
+    "test": "vitest run"
+  }
 }