@oxprotocol/cli 0.1.0

package/templates/hello-rust/wit/deps/oxp-host/oxp-host.wit

@@ -0,0 +1,136 @@
+// oxp:host@0.1.0
+//
+// Capability interfaces the OXP host provides to extension components.
+// Every interface here is a *gated* import: an extension only resolves
+// the interfaces named in its manifest's `permissions` list, and even
+// then individual operations are filtered by the scope passed to the
+// host capability broker.
+//
+// Stability: pinned. Breaking changes go to oxp:host@0.2.0 and require
+// a coordinated runtime + manifest spec bump.
+
+package oxp:host@0.1.0;
+
+// ─────────────────────────────────────────────────────────────────────
+// Common types
+// ─────────────────────────────────────────────────────────────────────
+
+interface types {
+  // Opaque, host-issued handle. Extensions never construct these.
+  type handle = u64;
+
+  record diagnostic {
+    code: string,
+    message: string,
+  }
+}
+
+// ─────────────────────────────────────────────────────────────────────
+// log — always available, never gated
+// ─────────────────────────────────────────────────────────────────────
+
+interface log {
+  enum level { trace, debug, info, warn, error }
+  log: func(lvl: level, message: string);
+}
+
+// ─────────────────────────────────────────────────────────────────────
+// storage — always available; namespaced per (publisher, slug)
+// ─────────────────────────────────────────────────────────────────────
+
+interface storage {
+  get:    func(key: string) -> option<list<u8>>;
+  set:    func(key: string, value: list<u8>);
+  delete: func(key: string);
+  keys:   func() -> list<string>;
+}
+
+// ─────────────────────────────────────────────────────────────────────
+// ui — always available; the host renders, the component owns state
+// ─────────────────────────────────────────────────────────────────────
+
+interface ui {
+  // Push a serialized oxp-ui-v1 tree (msgpack or JSON; host decides).
+  render: func(tree: list<u8>);
+
+  // Update a status-bar item this extension owns.
+  set-status: func(text: string, tooltip: option<string>);
+
+  // Show a toast notification. Returns the user's choice if buttons given.
+  notify: func(message: string, buttons: list<string>) -> option<string>;
+}
+
+// ─────────────────────────────────────────────────────────────────────
+// fs — gated by manifest.permissions[fs.read | fs.write | fs.delete]
+//     paths are pre-filtered against permission scope by the host
+// ─────────────────────────────────────────────────────────────────────
+
+interface fs {
+  variant fs-error {
+    not-found,
+    forbidden(string),         // path outside granted scope
+    io(string),
+    too-large(u64),            // bytes
+  }
+
+  record file-stat {
+    size: u64,
+    is-dir: bool,
+    mtime-ms: u64,
+  }
+
+  read-file:  func(path: string)                       -> result<list<u8>, fs-error>;
+  write-file: func(path: string, bytes: list<u8>)       -> result<_,        fs-error>;
+  delete:     func(path: string)                        -> result<_,        fs-error>;
+  stat:       func(path: string)                        -> result<file-stat, fs-error>;
+  list-dir:   func(path: string)                        -> result<list<string>, fs-error>;
+}
+
+// ─────────────────────────────────────────────────────────────────────
+// net — gated by manifest.permissions[net.fetch]
+//     origins are pre-filtered against permission scope by the host
+// ─────────────────────────────────────────────────────────────────────
+
+interface net {
+  record http-request {
+    method:  string,
+    url:     string,
+    headers: list<tuple<string, string>>,
+    body:    option<list<u8>>,
+  }
+
+  record http-response {
+    status:  u16,
+    headers: list<tuple<string, string>>,
+    body:    list<u8>,
+  }
+
+  variant net-error {
+    forbidden(string),         // origin not in granted scope
+    timeout,
+    transport(string),
+    too-large(u64),
+  }
+
+  fetch: func(req: http-request) -> result<http-response, net-error>;
+}
+
+// ─────────────────────────────────────────────────────────────────────
+// secrets — gated by manifest.permissions[secrets.read | secrets.write]
+//     keys are namespaced per (publisher, slug); host stores at-rest enc.
+// ─────────────────────────────────────────────────────────────────────
+
+interface secrets {
+  get:    func(key: string) -> option<string>;
+  set:    func(key: string, value: string);
+  delete: func(key: string);
+}
+
+// ─────────────────────────────────────────────────────────────────────
+// commands — gated by manifest.permissions[commands.executeHost]
+// ─────────────────────────────────────────────────────────────────────
+
+interface commands {
+  // Run a host-registered command by id. Args are JSON-encoded.
+  execute: func(id: string, args-json: string) -> result<string, string>;
+}

package/templates/hello-rust/wit/extension.wit

@@ -0,0 +1,71 @@
+// oxp:extension@0.1.0
+//
+// Interfaces an OXP extension component must export and the world
+// it targets. The host calls these functions; the component never
+// drives the host loop directly.
+//
+// Stability: pinned. Breaking changes go to oxp:extension@0.2.0 and
+// require a coordinated runtime + manifest spec bump.
+
+package oxp:extension@0.1.0;
+
+interface lifecycle {
+  record activate-ctx {
+    extension-id: string,        // "@publisher/slug"
+    version:      string,        // semver
+    host:         string,        // "vscode" | "piye" | "cli" | …
+    host-version: string,
+  }
+
+  // Called once after install or reload, before any other export.
+  // Return err(reason) to abort activation.
+  activate:   func(ctx: activate-ctx) -> result<_, string>;
+
+  // Called on uninstall, host shutdown, or eviction. Best effort —
+  // the host may kill the instance if this exceeds its fuel budget.
+  deactivate: func() -> result<_, string>;
+}
+
+interface ui-handler {
+  // Serialized oxp-ui-v1 event (msgpack or JSON; same encoding as render).
+  variant event-error {
+    unknown-target(string),
+    invalid-payload(string),
+    internal(string),
+  }
+
+  on-event: func(event: list<u8>) -> result<_, event-error>;
+}
+
+interface command-handler {
+  // Args + return are JSON-encoded for forward compatibility.
+  on-command: func(id: string, args-json: string) -> result<string, string>;
+}
+
+// ─────────────────────────────────────────────────────────────────────
+// The single world OXP extensions target in spec v1.
+//
+// Imports listed here are the *maximum* a component may use. The
+// concrete set actually linked at instantiate time is restricted by
+// manifest.permissions; declaring an import here that is not granted
+// will cause the component to be rejected at install with a clear
+// "permission not granted" diagnostic — never a silent stub.
+// ─────────────────────────────────────────────────────────────────────
+
+world extension {
+  // always-on imports
+  import oxp:host/log@0.1.0;
+  import oxp:host/storage@0.1.0;
+  import oxp:host/ui@0.1.0;
+
+  // gated imports (unlocked by manifest.permissions)
+  import oxp:host/fs@0.1.0;
+  import oxp:host/net@0.1.0;
+  import oxp:host/secrets@0.1.0;
+  import oxp:host/commands@0.1.0;
+
+  // exports the host calls
+  export lifecycle;
+  export ui-handler;
+  export command-handler;
+}

package/templates/hello-tree/README.md

@@ -0,0 +1,15 @@
+# __DISPLAY_NAME__
+
+A V1 component-tree extension. The UI is a static `ui/tree.json` rendered by
+the host through `@oxprotocol/ui/dom`. No HTML, no CSS, no JS — and on Piye-native
+hosts, no DOM either.
+
+```sh
+oxp dev   # hot-reloads the tree on every save
+oxp pack  # produces a signed .tgz bundle
+```
+
+Edit `ui/tree.json` to change the UI. The vocabulary is frozen at six nodes:
+`box`, `stack`, `text`, `button`, `virtual-list`, `code`. Buttons emit a
+`data-oxp-action` attribute that the host bridges to `host.dispatch(action)`
+once the worker harness lands.

package/templates/hello-tree/oxp.json

@@ -0,0 +1,14 @@
+{
+  "specVersion": "1",
+  "id": "@__PUBLISHER__/__SLUG__",
+  "publisher": "__PUBLISHER__",
+  "version": "0.0.1",
+  "displayName": "__DISPLAY_NAME__",
+  "description": "OXP V1 component tree (Piye-native ready).",
+  "license": "MIT",
+  "categories": ["other"],
+  "engines": { "oxp": "^1.0.0" },
+  "main": { "ui": "ui/tree.json" },
+  "ui": { "components": "oxp-ui-v1", "preferredSurface": "panel" },
+  "permissions": []
+}

package/templates/hello-tree/ui/tree.json

@@ -0,0 +1,27 @@
+{
+  "kind": "stack",
+  "axis": "vertical",
+  "gap": 3,
+  "children": [
+    { "kind": "text", "value": "__DISPLAY_NAME__", "variant": "heading" },
+    {
+      "kind": "text",
+      "value": "Authored with the frozen V1 component vocabulary.",
+      "variant": "caption"
+    },
+    {
+      "kind": "stack",
+      "axis": "horizontal",
+      "gap": 2,
+      "children": [
+        { "kind": "button", "label": "Run", "action": "run", "variant": "primary" },
+        { "kind": "button", "label": "Cancel", "action": "cancel", "variant": "secondary" }
+      ]
+    },
+    {
+      "kind": "code",
+      "language": "json",
+      "value": "{ \"hello\": \"oxp-ui-v1\" }"
+    }
+  ]
+}