@plotpaper/cli 0.2.0

package/dist/commands/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../src/commands/validate.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,yDAAyD;AACzD,gFAAgF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAWhF,kCAuDC;AAhED,uCAAyB;AACzB,2CAA6B;AAC7B,kDAA0B;AAC1B,8CAA+C;AAMxC,KAAK,UAAU,WAAW,CAAC,QAAgB,EAAE,OAAyB;IAC3E,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAExC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,mBAAmB,QAAQ,EAAE,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,IAAA,2BAAc,EAAC,MAAM,EAAE;QACpC,QAAQ,EAAE,QAAQ;QAClB,UAAU,EAAE,OAAO,EAAE,MAAM;KAC5B,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,YAAY,CAAC,CAAC,CAAC;QACnE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM,cAAc,CAAC,CAAC,CAAC;QAC1E,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;QACxB,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC7C,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,aAAa,WAAW,SAAS,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,UAAU,CAAC,CAAC,CAAC;QAClH,KAAK,MAAM,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACvC,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,SAAS,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,SAAS,CAAC,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,WAAW,CAAC,MAAM,UAAU,CAAC,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,eAAK,CAAC,GAAG,CAAC,KAAK,MAAM,MAAM,CAAC,CAAC,CAAC;IAC5E,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;QAC3C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/index.js

@@ -0,0 +1,52 @@
+"use strict";
+// =============================================================================
+// Plotpaper CLI — validate, bundle, and submit mini apps
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+const commander_1 = require("commander");
+const validate_1 = require("./commands/validate");
+const bundle_1 = require("./commands/bundle");
+const submit_1 = require("./commands/submit");
+const program = new commander_1.Command();
+program
+    .name("plotpaper-cli")
+    .description("CLI for building and submitting Plotpaper mini apps")
+    .version("0.1.0");
+// ── validate ────────────────────────────────────────────────────────────
+program
+    .command("validate <file>")
+    .description("Validate a mini app source file against all rules")
+    .option("-s, --schema <path>", "Path to schema.json file")
+    .action(async (file, options) => {
+    await (0, validate_1.runValidate)(file, options);
+});
+// ── bundle ──────────────────────────────────────────────────────────────
+program
+    .command("bundle <file>")
+    .description("Bundle a mini app source file into an IIFE")
+    .option("-o, --output <path>", "Output file path (default: <file>.bundle.js)")
+    .option("--bundle-id <id>", "Custom bundle ID (default: random UUID)")
+    .option("-s, --schema <path>", "Path to schema.json file")
+    .action(async (file, options) => {
+    await (0, bundle_1.runBundle)(file, options);
+});
+// ── submit ──────────────────────────────────────────────────────────────
+program
+    .command("submit <file>")
+    .description("Submit a mini app to the Plotpaper platform")
+    .requiredOption("-e, --email <email>", "Your registered Plotpaper email")
+    .option("-n, --name <name>", "App name (default: filename)")
+    .option("-d, --description <desc>", "App description")
+    .option("-m, --mode <mode>", "App mode: private or multiplayer", "private")
+    .option("-s, --schema <path>", "Path to schema.json file")
+    .action(async (file, options) => {
+    await (0, submit_1.runSubmit)(file, {
+        email: options.email,
+        name: options.name,
+        description: options.description,
+        mode: options.mode || "private",
+        schema: options.schema,
+    });
+});
+program.parse();
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,yDAAyD;AACzD,gFAAgF;;AAEhF,yCAAoC;AACpC,kDAAkD;AAClD,8CAA8C;AAC9C,8CAA8C;AAE9C,MAAM,OAAO,GAAG,IAAI,mBAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,eAAe,CAAC;KACrB,WAAW,CAAC,qDAAqD,CAAC;KAClE,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,2EAA2E;AAC3E,OAAO;KACJ,OAAO,CAAC,iBAAiB,CAAC;KAC1B,WAAW,CAAC,mDAAmD,CAAC;KAChE,MAAM,CAAC,qBAAqB,EAAE,0BAA0B,CAAC;KACzD,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,OAA4B,EAAE,EAAE;IAC3D,MAAM,IAAA,sBAAW,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACnC,CAAC,CAAC,CAAC;AAEL,2EAA2E;AAC3E,OAAO;KACJ,OAAO,CAAC,eAAe,CAAC;KACxB,WAAW,CAAC,4CAA4C,CAAC;KACzD,MAAM,CAAC,qBAAqB,EAAE,8CAA8C,CAAC;KAC7E,MAAM,CAAC,kBAAkB,EAAE,yCAAyC,CAAC;KACrE,MAAM,CAAC,qBAAqB,EAAE,0BAA0B,CAAC;KACzD,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,OAAgE,EAAE,EAAE;IAC/F,MAAM,IAAA,kBAAS,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACjC,CAAC,CAAC,CAAC;AAEL,2EAA2E;AAC3E,OAAO;KACJ,OAAO,CAAC,eAAe,CAAC;KACxB,WAAW,CAAC,6CAA6C,CAAC;KAC1D,cAAc,CAAC,qBAAqB,EAAE,iCAAiC,CAAC;KACxE,MAAM,CAAC,mBAAmB,EAAE,8BAA8B,CAAC;KAC3D,MAAM,CAAC,0BAA0B,EAAE,iBAAiB,CAAC;KACrD,MAAM,CAAC,mBAAmB,EAAE,kCAAkC,EAAE,SAAS,CAAC;KAC1E,MAAM,CAAC,qBAAqB,EAAE,0BAA0B,CAAC;KACzD,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,OAA+F,EAAE,EAAE;IAC9H,MAAM,IAAA,kBAAS,EAAC,IAAI,EAAE;QACpB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,IAAI,EAAG,OAAO,CAAC,IAAkC,IAAI,SAAS;QAC9D,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/utils/api.d.ts

@@ -0,0 +1,15 @@
+export interface SubmitPayload {
+    email: string;
+    sourceCode: string;
+    name: string;
+    description: string;
+    schema?: any;
+    permissions?: any;
+    appMode: "private" | "multiplayer";
+}
+export interface SubmitResult {
+    appId: string;
+    versionId?: string;
+    creditsCharged?: number;
+}
+export declare function submitApp(payload: SubmitPayload): Promise<SubmitResult>;

package/dist/utils/api.js

@@ -0,0 +1,56 @@
+"use strict";
+// =============================================================================
+// API Client for Plotpaper Platform
+// =============================================================================
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.submitApp = submitApp;
+const https_1 = __importDefault(require("https"));
+const http_1 = __importDefault(require("http"));
+async function submitApp(payload) {
+    const apiUrl = process.env.PLOTPAPER_API_URL || "https://vd9d2wo194.execute-api.ap-southeast-1.amazonaws.com/prod";
+    const url = new URL("/api/custom-apps/submit", apiUrl);
+    const body = JSON.stringify(payload);
+    const isHttps = url.protocol === "https:";
+    const httpModule = isHttps ? https_1.default : http_1.default;
+    return new Promise((resolve, reject) => {
+        const req = httpModule.request(url, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                "Content-Length": Buffer.byteLength(body),
+            },
+        }, (res) => {
+            let data = "";
+            res.on("data", (chunk) => (data += chunk));
+            res.on("end", () => {
+                if (res.statusCode && res.statusCode >= 200 && res.statusCode < 300) {
+                    try {
+                        resolve(JSON.parse(data));
+                    }
+                    catch {
+                        reject(new Error("Invalid response from server"));
+                    }
+                }
+                else {
+                    let message = `Server returned ${res.statusCode}`;
+                    try {
+                        const parsed = JSON.parse(data);
+                        if (parsed.error)
+                            message = parsed.error;
+                    }
+                    catch {
+                        // Use status code message
+                    }
+                    reject(new Error(message));
+                }
+            });
+        });
+        req.on("error", (err) => reject(new Error(`Network error: ${err.message}`)));
+        req.write(body);
+        req.end();
+    });
+}
+//# sourceMappingURL=api.js.map

package/dist/utils/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../src/utils/api.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,oCAAoC;AACpC,gFAAgF;;;;;AAqBhF,8BA8CC;AAjED,kDAA0B;AAC1B,gDAAwB;AAkBjB,KAAK,UAAU,SAAS,CAAC,OAAsB;IACpD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,kEAAkE,CAAC;IACnH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,yBAAyB,EAAE,MAAM,CAAC,CAAC;IAEvD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC;IAC1C,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,eAAK,CAAC,CAAC,CAAC,cAAI,CAAC;IAE1C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAC5B,GAAG,EACH;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;aAC1C;SACF,EACD,CAAC,GAAG,EAAE,EAAE;YACN,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC;YAC3C,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC;oBACpE,IAAI,CAAC;wBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;oBAC5B,CAAC;oBAAC,MAAM,CAAC;wBACP,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC;oBACpD,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,IAAI,OAAO,GAAG,mBAAmB,GAAG,CAAC,UAAU,EAAE,CAAC;oBAClD,IAAI,CAAC;wBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBAChC,IAAI,MAAM,CAAC,KAAK;4BAAE,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC;oBAC3C,CAAC;oBAAC,MAAM,CAAC;wBACP,0BAA0B;oBAC5B,CAAC;oBACD,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QAEF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,kBAAkB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7E,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChB,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/utils/config.d.ts

@@ -0,0 +1,9 @@
+export interface PlotpaperConfig {
+    apiKey?: string;
+    apiUrl?: string;
+}
+export declare function loadConfig(): PlotpaperConfig & {
+    apiKey?: string;
+    apiUrl: string;
+};
+export declare function saveConfig(config: PlotpaperConfig): void;

package/dist/utils/config.js

@@ -0,0 +1,73 @@
+"use strict";
+// =============================================================================
+// CLI Configuration
+// =============================================================================
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadConfig = loadConfig;
+exports.saveConfig = saveConfig;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+const CONFIG_DIR = path.join(os.homedir(), ".plotpaper");
+const CONFIG_FILE = path.join(CONFIG_DIR, "config.json");
+const DEFAULT_API_URL = "https://api.plotpaper.com";
+function loadConfig() {
+    // Env var takes precedence
+    const envKey = process.env.PLOTPAPER_API_KEY;
+    const envUrl = process.env.PLOTPAPER_API_URL;
+    let fileConfig = {};
+    if (fs.existsSync(CONFIG_FILE)) {
+        try {
+            fileConfig = JSON.parse(fs.readFileSync(CONFIG_FILE, "utf-8"));
+        }
+        catch {
+            // Ignore malformed config
+        }
+    }
+    return {
+        apiKey: envKey || fileConfig.apiKey,
+        apiUrl: envUrl || fileConfig.apiUrl || DEFAULT_API_URL,
+    };
+}
+function saveConfig(config) {
+    if (!fs.existsSync(CONFIG_DIR)) {
+        fs.mkdirSync(CONFIG_DIR, { recursive: true });
+    }
+    const existing = loadConfig();
+    const merged = { ...existing, ...config };
+    fs.writeFileSync(CONFIG_FILE, JSON.stringify(merged, null, 2), "utf-8");
+}
+//# sourceMappingURL=config.js.map

package/dist/utils/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/utils/config.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,oBAAoB;AACpB,gFAAgF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgBhF,gCAkBC;AAED,gCAQC;AA1CD,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AAEzB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,CAAC;AACzD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;AAOzD,MAAM,eAAe,GAAG,2BAA2B,CAAC;AAEpD,SAAgB,UAAU;IACxB,2BAA2B;IAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAE7C,IAAI,UAAU,GAAoB,EAAE,CAAC;IACrC,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,0BAA0B;QAC5B,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,EAAE,MAAM,IAAI,UAAU,CAAC,MAAM;QACnC,MAAM,EAAE,MAAM,IAAI,UAAU,CAAC,MAAM,IAAI,eAAe;KACvD,CAAC;AACJ,CAAC;AAED,SAAgB,UAAU,CAAC,MAAuB;IAChD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,QAAQ,GAAG,UAAU,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;IAC1C,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AAC1E,CAAC"}

package/dist/validation/imports.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Extract all import sources from source code and check against allowed list.
+ * Returns list of violations (empty = all good).
+ */
+export declare function validateImports(source: string): string[];

package/dist/validation/imports.js

@@ -0,0 +1,33 @@
+"use strict";
+// =============================================================================
+// Import Validation
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateImports = validateImports;
+const patterns_1 = require("./patterns");
+/**
+ * Extract all import sources from source code and check against allowed list.
+ * Returns list of violations (empty = all good).
+ */
+function validateImports(source) {
+    const violations = [];
+    // Match ES import statements
+    const importRegex = /import\s+(?:[\w*{}\s,]+)\s+from\s+["']([^"']+)["']/g;
+    let match;
+    while ((match = importRegex.exec(source)) !== null) {
+        const mod = match[1];
+        if (!patterns_1.ALLOWED_MODULES.includes(mod)) {
+            violations.push(`Forbidden import: "${mod}" — only allowed: ${patterns_1.ALLOWED_MODULES.join(", ")}`);
+        }
+    }
+    // Match require() calls
+    const requireRegex = /require\s*\(\s*["']([^"']+)["']\s*\)/g;
+    while ((match = requireRegex.exec(source)) !== null) {
+        const mod = match[1];
+        if (!patterns_1.ALLOWED_MODULES.includes(mod)) {
+            violations.push(`Forbidden require: "${mod}" — only allowed: ${patterns_1.ALLOWED_MODULES.join(", ")}`);
+        }
+    }
+    return violations;
+}
+//# sourceMappingURL=imports.js.map

package/dist/validation/imports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"imports.js","sourceRoot":"","sources":["../../src/validation/imports.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,oBAAoB;AACpB,gFAAgF;;AAQhF,0CAuBC;AA7BD,yCAA6C;AAE7C;;;GAGG;AACH,SAAgB,eAAe,CAAC,MAAc;IAC5C,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,6BAA6B;IAC7B,MAAM,WAAW,GAAG,qDAAqD,CAAC;IAC1E,IAAI,KAAK,CAAC;IACV,OAAO,CAAC,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACnD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,CAAC,0BAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,UAAU,CAAC,IAAI,CAAC,sBAAsB,GAAG,qBAAqB,0BAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IAED,wBAAwB;IACxB,MAAM,YAAY,GAAG,uCAAuC,CAAC;IAC7D,OAAO,CAAC,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,CAAC,0BAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,UAAU,CAAC,IAAI,CAAC,uBAAuB,GAAG,qBAAqB,0BAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/validation/index.d.ts

@@ -0,0 +1,27 @@
+import type { ResolvedSchema } from "./schema";
+export { validateSchema, resolveSchema } from "./schema";
+export type { ResolvedSchema } from "./schema";
+export interface ValidationResult {
+    valid: boolean;
+    errors: string[];
+    warnings: string[];
+    schema: ResolvedSchema | null;
+}
+export interface ValidateOptions {
+    /** Path to the source file (used for resolving schema.json alongside it) */
+    filePath?: string;
+    /** Explicit path to a schema.json file */
+    schemaPath?: string;
+}
+/**
+ * Validate mini app source code against all rules.
+ * Returns a result object (never throws).
+ */
+export declare function validateSource(source: string, options?: ValidateOptions): ValidationResult;
+/**
+ * Validate a bundled IIFE output.
+ */
+export declare function validateBundle(bundle: string): {
+    valid: boolean;
+    error?: string;
+};

package/dist/validation/index.js

@@ -0,0 +1,79 @@
+"use strict";
+// =============================================================================
+// Source Validation — runs all checks on mini app source code
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveSchema = exports.validateSchema = void 0;
+exports.validateSource = validateSource;
+exports.validateBundle = validateBundle;
+const patterns_1 = require("./patterns");
+const imports_1 = require("./imports");
+const schema_1 = require("./schema");
+var schema_2 = require("./schema");
+Object.defineProperty(exports, "validateSchema", { enumerable: true, get: function () { return schema_2.validateSchema; } });
+Object.defineProperty(exports, "resolveSchema", { enumerable: true, get: function () { return schema_2.resolveSchema; } });
+/**
+ * Validate mini app source code against all rules.
+ * Returns a result object (never throws).
+ */
+function validateSource(source, options) {
+    const errors = [];
+    const warnings = [];
+    // 1. Size check
+    const sizeBytes = Buffer.byteLength(source, "utf-8");
+    if (sizeBytes > patterns_1.MAX_SOURCE_SIZE_BYTES) {
+        errors.push(`Source is ${sizeBytes} bytes, exceeds ${patterns_1.MAX_SOURCE_SIZE_BYTES} byte (50KB) limit`);
+    }
+    // 2. Default export check
+    if (!/export\s+default\s+/.test(source)) {
+        errors.push("Source must have a default export (export default function ...)");
+    }
+    // 3. Blocked patterns
+    for (const { pattern, label, help } of patterns_1.BLOCKED_PATTERNS) {
+        if (pattern.test(source)) {
+            errors.push(`Blocked pattern: ${label} — ${help}`);
+        }
+    }
+    // 4. Import validation (more detailed than blocked patterns)
+    const importViolations = (0, imports_1.validateImports)(source);
+    for (const v of importViolations) {
+        if (!errors.some((e) => e.includes("forbidden import") || e.includes("forbidden require"))) {
+            errors.push(v);
+        }
+    }
+    // 5. Schema validation — resolve from schema.json file
+    let schema = null;
+    try {
+        schema = (0, schema_1.resolveSchema)(options?.filePath || "source.tsx", options?.schemaPath);
+    }
+    catch (e) {
+        errors.push(e.message);
+    }
+    // 6. Warnings (non-blocking)
+    if (!schema) {
+        warnings.push("No schema.json found — app will have no database. Create a schema.json file next to your source.");
+    }
+    if (sizeBytes > 40000) {
+        warnings.push(`Source is ${sizeBytes} bytes — approaching 50KB limit`);
+    }
+    return {
+        valid: errors.length === 0,
+        errors,
+        warnings,
+        schema,
+    };
+}
+/**
+ * Validate a bundled IIFE output.
+ */
+function validateBundle(bundle) {
+    const sizeBytes = Buffer.byteLength(bundle, "utf-8");
+    if (sizeBytes > patterns_1.MAX_BUNDLE_SIZE_BYTES) {
+        return {
+            valid: false,
+            error: `Bundle is ${sizeBytes} bytes, exceeds ${patterns_1.MAX_BUNDLE_SIZE_BYTES} byte limit`,
+        };
+    }
+    return { valid: true };
+}
+//# sourceMappingURL=index.js.map

package/dist/validation/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/validation/index.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,8DAA8D;AAC9D,gFAAgF;;;AAgChF,wCAwDC;AAKD,wCASC;AApGD,yCAIoB;AACpB,uCAA4C;AAC5C,qCAAyC;AAGzC,mCAAyD;AAAhD,wGAAA,cAAc,OAAA;AAAE,uGAAA,aAAa,OAAA;AAiBtC;;;GAGG;AACH,SAAgB,cAAc,CAAC,MAAc,EAAE,OAAyB;IACtE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,gBAAgB;IAChB,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrD,IAAI,SAAS,GAAG,gCAAqB,EAAE,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,aAAa,SAAS,mBAAmB,gCAAqB,oBAAoB,CAAC,CAAC;IAClG,CAAC;IAED,0BAA0B;IAC1B,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;IACjF,CAAC;IAED,sBAAsB;IACtB,KAAK,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,2BAAgB,EAAE,CAAC;QACxD,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,oBAAoB,KAAK,MAAM,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED,6DAA6D;IAC7D,MAAM,gBAAgB,GAAG,IAAA,yBAAe,EAAC,MAAM,CAAC,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,gBAAgB,EAAE,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,EAAE,CAAC;YAC3F,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,uDAAuD;IACvD,IAAI,MAAM,GAA0B,IAAI,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,GAAG,IAAA,sBAAa,EACpB,OAAO,EAAE,QAAQ,IAAI,YAAY,EACjC,OAAO,EAAE,UAAU,CACpB,CAAC;IACJ,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IAED,6BAA6B;IAC7B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,QAAQ,CAAC,IAAI,CAAC,kGAAkG,CAAC,CAAC;IACpH,CAAC;IAED,IAAI,SAAS,GAAG,KAAM,EAAE,CAAC;QACvB,QAAQ,CAAC,IAAI,CAAC,aAAa,SAAS,iCAAiC,CAAC,CAAC;IACzE,CAAC;IAED,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,MAAM;QACN,QAAQ;QACR,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAgB,cAAc,CAAC,MAAc;IAC3C,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrD,IAAI,SAAS,GAAG,gCAAqB,EAAE,CAAC;QACtC,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,aAAa,SAAS,mBAAmB,gCAAqB,aAAa;SACnF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC"}

package/dist/validation/patterns.d.ts

@@ -0,0 +1,8 @@
+export declare const MAX_SOURCE_SIZE_BYTES = 50000;
+export declare const MAX_BUNDLE_SIZE_BYTES = 150000;
+export declare const ALLOWED_MODULES: string[];
+export declare const BLOCKED_PATTERNS: Array<{
+    pattern: RegExp;
+    label: string;
+    help: string;
+}>;

package/dist/validation/patterns.js

@@ -0,0 +1,38 @@
+"use strict";
+// =============================================================================
+// Validation Rules — ported from plotpaper-aws validation.ts
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BLOCKED_PATTERNS = exports.ALLOWED_MODULES = exports.MAX_BUNDLE_SIZE_BYTES = exports.MAX_SOURCE_SIZE_BYTES = void 0;
+exports.MAX_SOURCE_SIZE_BYTES = 50000;
+exports.MAX_BUNDLE_SIZE_BYTES = 150000;
+exports.ALLOWED_MODULES = [
+    "react",
+    "react-native",
+    "@plotpaper/mini-app-sdk",
+    "@expo/vector-icons/Feather",
+    "react-native-svg",
+    "react-native-safe-area-context",
+];
+function buildAllowedModulesPattern() {
+    return exports.ALLOWED_MODULES.map((m) => m.replace(/[.*+?^${}()|[\]\\\/]/g, "\\$&")).join("|");
+}
+const allowedAlt = buildAllowedModulesPattern();
+exports.BLOCKED_PATTERNS = [
+    { pattern: new RegExp(`require\\s*\\(\\s*["'](?!(?:${allowedAlt})["'])`), label: "forbidden require()", help: "Only these modules can be imported: " + exports.ALLOWED_MODULES.join(", ") },
+    { pattern: new RegExp(`import\\s+.*from\\s+["'](?!(?:${allowedAlt})["'])`), label: "forbidden import", help: "Only these modules can be imported: " + exports.ALLOWED_MODULES.join(", ") },
+    { pattern: /\bfetch\s*\(/, label: "fetch()", help: "Network requests are not allowed. Use sdk.ai for AI-generated content." },
+    { pattern: /XMLHttpRequest/, label: "XMLHttpRequest", help: "Network requests are not allowed. Use sdk.ai for AI-generated content." },
+    { pattern: /\beval\s*\(/, label: "eval()", help: "eval() is not allowed for security reasons." },
+    { pattern: /Function\s*\(/, label: "Function constructor", help: "Function constructor is not allowed for security reasons." },
+    { pattern: /AsyncStorage/, label: "AsyncStorage", help: "Use sdk.db for data persistence instead of AsyncStorage." },
+    { pattern: /\bLinking\b/, label: "Linking", help: "Linking module is not allowed. Use sdk methods for navigation." },
+    { pattern: /NativeModules/, label: "NativeModules", help: "Direct native module access is not allowed." },
+    { pattern: /\bconstructor\s*\.\s*constructor/, label: "constructor chain", help: "Constructor chain access is blocked for security." },
+    { pattern: /\.__proto__/, label: "__proto__ access", help: "Prototype access is blocked for security." },
+    { pattern: /Object\s*\.\s*getPrototypeOf/, label: "prototype access", help: "Prototype access is blocked for security." },
+    { pattern: /\bReflect\s*\.\s*(?:defineProperty|setPrototypeOf|set)\b/, label: "Reflect mutation", help: "Reflect mutations are blocked for security." },
+    { pattern: /\bprocess\s*\./, label: "process access", help: "process access is not allowed." },
+    { pattern: /\bglobalThis\b(?!\s*\.\s*__pp)/, label: "globalThis access", help: "Direct globalThis access is not allowed." },
+];
+//# sourceMappingURL=patterns.js.map

package/dist/validation/patterns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"patterns.js","sourceRoot":"","sources":["../../src/validation/patterns.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,6DAA6D;AAC7D,gFAAgF;;;AAEnE,QAAA,qBAAqB,GAAG,KAAM,CAAC;AAC/B,QAAA,qBAAqB,GAAG,MAAO,CAAC;AAEhC,QAAA,eAAe,GAAG;IAC7B,OAAO;IACP,cAAc;IACd,yBAAyB;IACzB,4BAA4B;IAC5B,kBAAkB;IAClB,gCAAgC;CACjC,CAAC;AAEF,SAAS,0BAA0B;IACjC,OAAO,uBAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC/B,CAAC,CAAC,OAAO,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAC3C,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,MAAM,UAAU,GAAG,0BAA0B,EAAE,CAAC;AAEnC,QAAA,gBAAgB,GAA4D;IACvF,EAAE,OAAO,EAAE,IAAI,MAAM,CAAC,+BAA+B,UAAU,QAAQ,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,IAAI,EAAE,sCAAsC,GAAG,uBAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;IACnL,EAAE,OAAO,EAAE,IAAI,MAAM,CAAC,iCAAiC,UAAU,QAAQ,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,sCAAsC,GAAG,uBAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;IAClL,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,wEAAwE,EAAE;IAC7H,EAAE,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,wEAAwE,EAAE;IACtI,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,6CAA6C,EAAE;IAChG,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,sBAAsB,EAAE,IAAI,EAAE,2DAA2D,EAAE;IAC9H,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,0DAA0D,EAAE;IACpH,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,gEAAgE,EAAE;IACpH,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,6CAA6C,EAAE;IACzG,EAAE,OAAO,EAAE,kCAAkC,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,mDAAmD,EAAE;IACtI,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,2CAA2C,EAAE;IACxG,EAAE,OAAO,EAAE,8BAA8B,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,2CAA2C,EAAE;IACzH,EAAE,OAAO,EAAE,0DAA0D,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,6CAA6C,EAAE;IACvJ,EAAE,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,gCAAgC,EAAE;IAC9F,EAAE,OAAO,EAAE,gCAAgC,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,0CAA0C,EAAE;CAC5H,CAAC"}