@polyxd/runtime 0.4.0

package/LICENSE

@@ -0,0 +1,202 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+

package/NOTICE

@@ -0,0 +1,224 @@
+Polyxd
+Copyright 2026 the Polyxd authors
+
+This product includes software developed at Polyxd, licensed under the Apache
+License, Version 2.0 (see LICENSE), except Polyxd Studio (apps/studio), which is
+licensed under the Functional Source License, Version 1.1, ALv2 Future License
+(see apps/studio/LICENSE).
+
+It also includes material from the projects below. Each is used under its own
+licence, and each licence is included in full beside the material it covers.
+
+
+## Design-system packs
+
+A pack reads a design system's published tokens and maps them onto Polyxd's
+semantic token contract. The upstream token files are vendored verbatim — so a
+pack can be regenerated and audited without a network — under that pack's
+`scripts/sources/` directory, together with the upstream licence.
+
+The packs are Polyxd's work, not the work of the design systems they read. The
+names below identify whose tokens a pack reads. Polyxd is not affiliated with,
+endorsed by, or sponsored by any of these projects or their owners, and each
+name is the trademark of its owner.
+
+### Ant Design  (`@polyxd/ds-antd`)
+
+Upstream: https://github.com/ant-design/ant-design
+
+- npm:antd 6.6.4 — MIT
+- npm:@ant-design/colors 8.0.1 — MIT
+
+Vendored under `packages/ds-antd/scripts/sources/`, with the upstream licence file beside it.
+
+### Bootstrap 5  (`@polyxd/ds-bootstrap`)
+
+Upstream: https://github.com/twbs/bootstrap
+
+- npm:bootstrap dist/css/bootstrap.css 5.3.8 — MIT
+
+Vendored under `packages/ds-bootstrap/scripts/sources/`, with the upstream licence file beside it.
+
+### IBM Carbon  (`@polyxd/ds-carbon`)
+
+Upstream: https://github.com/carbon-design-system/carbon
+
+- npm:@carbon/colors 11.58.0 — Apache-2.0
+- npm:@carbon/themes 11.81.0 — Apache-2.0
+- npm:@carbon/layout 11.59.0 — Apache-2.0
+- npm:@carbon/type 11.67.0 — Apache-2.0
+- npm:@carbon/motion 11.52.0 — Apache-2.0
+- npm:@carbon/charts scss/_color-palette.scss 1.27.20 — Apache-2.0
+- npm:@carbon/styles scss/utilities/_box-shadow.scss and _focus-outline.scss 1.115.0 — Apache-2.0
+
+Vendored under `packages/ds-carbon/scripts/sources/`, with the upstream licence file beside it.
+
+### Chakra UI 3  (`@polyxd/ds-chakra`)
+
+Upstream: https://github.com/chakra-ui/chakra-ui
+
+- npm:@chakra-ui/react defaultSystem.getTokenCss 3.37.0 — MIT
+
+Vendored under `packages/ds-chakra/scripts/sources/`, with the upstream licence file beside it.
+
+### Microsoft Fluent 2  (`@polyxd/ds-fluent`)
+
+Upstream: https://github.com/microsoft/fluentui
+
+- npm:@fluentui/tokens 1.0.0-alpha.24 — MIT
+
+Vendored under `packages/ds-fluent/scripts/sources/`, with the upstream licence file beside it.
+
+### GOV.UK Frontend  (`@polyxd/ds-govuk`)
+
+Upstream: https://github.com/alphagov/govuk-frontend
+
+- npm:govuk-frontend dist/govuk/settings 6.5.1 — MIT
+
+Vendored under `packages/ds-govuk/scripts/sources/`, with the upstream licence file beside it.
+
+### Mantine 8  (`@polyxd/ds-mantine`)
+
+Upstream: https://github.com/mantinedev/mantine
+
+- npm:@mantine/core styles.css 8.4.2 — MIT
+
+Vendored under `packages/ds-mantine/scripts/sources/`, with the upstream licence file beside it.
+
+### Material 3  (`@polyxd/ds-material3`)
+
+Upstream: https://github.com/material-components/material-web
+
+- npm:@material/material-color-utilities 0.4.0 — Apache-2.0
+- github:material-components/material-web tokens/versions/v0_192/_md-ref-typeface.scss, _md-sys-typescale.scss, _md-sys-shape.scss, _md-sys-motion.scss, _md-sys-state.scss, _md-sys-elevation.scss v2.5.0 (commit b4de401eb665ec63474f39319a4ba8f2145974cc) — Apache-2.0
+- github:material-components/material-web tokens/versions/v0_192/_md-comp-scrim.scss, _md-comp-filled-button.scss, _md-comp-icon-button.scss, _md-comp-outlined-text-field.scss v2.5.0 (commit b4de401eb665ec63474f39319a4ba8f2145974cc) — Apache-2.0
+- github:material-components/material-web tokens/_md-comp-focus-ring.scss and elevation/internal/_elevation.scss v2.5.0 (commit b4de401eb665ec63474f39319a4ba8f2145974cc) — Apache-2.0
+
+Vendored under `packages/ds-material3/scripts/sources/`, with the upstream licence file beside it.
+
+### Shopify Polaris  (`@polyxd/ds-polaris`)
+
+Upstream: https://github.com/Shopify/polaris
+
+- npm:@shopify/polaris-tokens dist/css/styles.css 9.4.2 — MIT
+
+Vendored under `packages/ds-polaris/scripts/sources/`, with the upstream licence file beside it.
+
+### GitHub Primer  (`@polyxd/ds-primer`)
+
+Upstream: https://github.com/primer/primitives
+
+- npm:@primer/primitives dist/css 11.10.0 — MIT
+
+Vendored under `packages/ds-primer/scripts/sources/`, with the upstream licence file beside it.
+
+### Radix Themes 3  (`@polyxd/ds-radix`)
+
+Upstream: https://github.com/radix-ui/themes
+
+- npm:@radix-ui/themes styles.css 3.3.0 — MIT
+
+Vendored under `packages/ds-radix/scripts/sources/`, with the upstream licence file beside it.
+
+### shadcn/ui on Tailwind CSS  (`@polyxd/ds-shadcn`)
+
+Upstream: https://github.com/shadcn-ui/ui
+
+- shadcn/ui default theme main @ 2026-09-20 — MIT
+- npm:tailwindcss theme.css 4.3.3 — MIT
+
+Vendored under `packages/ds-shadcn/scripts/sources/`, with the upstream licence file beside it.
+
+### Adobe Spectrum 2  (`@polyxd/ds-spectrum`)
+
+Upstream: https://github.com/adobe/spectrum-tokens
+
+- npm:@adobe/spectrum-tokens dist/json/variables.json 15.4.1 — Apache-2.0
+
+Vendored under `packages/ds-spectrum/scripts/sources/`, with the upstream licence file beside it.
+
+## Logos
+
+Twelve packs ship their design system's official logo, unaltered, as `logo.svg`
+(Bootstrap and Radix also ship the owner's white version as `logo-white.svg`),
+downloaded from the owner's own site, repository or brand page. Where a design
+system has no mark of its own (Polaris, Spectrum, Primer), the pack ships its
+company's logo. Each is used only to identify the design system a pack is
+modelled on, beside its name. The logos are trademarks of their owners, not
+Polyxd's, and are not covered by Polyxd's licence:
+
+- Material 3 (`@polyxd/ds-material3`) — Google LLC
+- Carbon (`@polyxd/ds-carbon`) — IBM Corp.
+- Fluent 2 (`@polyxd/ds-fluent`) — Microsoft Corporation
+- Polaris (`@polyxd/ds-polaris`) — the Shopify logo, Shopify Inc.
+- Spectrum 2 (`@polyxd/ds-spectrum`) — the Adobe logo, Adobe Inc.
+- Primer (`@polyxd/ds-primer`) — the GitHub logo, GitHub, Inc.
+- shadcn/ui (`@polyxd/ds-shadcn`) — shadcn
+- Ant Design (`@polyxd/ds-antd`) — Ant Group
+- Bootstrap (`@polyxd/ds-bootstrap`) — the Bootstrap team
+- Chakra UI (`@polyxd/ds-chakra`) — Chakra Systems Inc.
+- Mantine (`@polyxd/ds-mantine`) — Vitaly Rtishchev
+- Radix UI (`@polyxd/ds-radix`) — WorkOS
+
+Google, IBM, Microsoft, Shopify, Adobe and GitHub restrict the use of their
+logos without permission; each pack's manifest (`logo`) and README record the
+source and the owner's guidelines. GOV.UK's crown and logotype are protected and
+may not be used by a service that is not on GOV.UK, so `@polyxd/ds-govuk` ships
+no logo and is named in words only.
+
+The twelve template packs' `logo.svg` files are Polyxd's own marks, drawn from
+each template's tokens.
+
+## Template packs
+
+Twelve packs are original Polyxd templates, not readings of any design system:
+`@polyxd/ds-sketch`, `@polyxd/ds-wireframe`, `@polyxd/ds-editorial`,
+`@polyxd/ds-brutalist`, `@polyxd/ds-glass`, `@polyxd/ds-terminal`,
+`@polyxd/ds-pastel`, `@polyxd/ds-civic`, `@polyxd/ds-finance`,
+`@polyxd/ds-health`, `@polyxd/ds-neon` and `@polyxd/ds-mono`. Every value in
+them was chosen for the template, they vendor nothing, and they are Apache-2.0
+like the rest of Polyxd. The typefaces some of them name (Caveat, Patrick Hand,
+Fraunces, Nunito, JetBrains Mono, Space Grotesk) are under the SIL Open Font
+License and are loaded from Google Fonts by the page that uses them, never
+distributed here.
+
+## Specification
+
+### A2UI
+
+- `packages/a2ui/vendor/a2ui/v1_0-04e6f07/` — Apache-2.0
+
+Vendored at a pinned commit so the component catalogue can be checked against
+A2UI's schema without a network.
+
+
+## Dependencies
+
+Everything Polyxd depends on at runtime or to build is fetched from npm rather
+than vendored, so the licences below are recorded rather than reproduced.
+
+Apache-2.0: playwright
+MIT: react, react-dom, radix-ui, ajv, ajv-formats, vite, @vitejs/plugin-react,
+     marked, lenis, @types/react, @types/react-dom
+MIT OR Apache-2.0: wrangler, @cloudflare/workers-types
+
+Two need a word.
+
+**axe-core** (Mozilla Public License 2.0) runs inside the verifier's rendered
+audit. MPL-2.0 is file-level copyleft: it attaches to modified MPL files, and
+axe-core is used unmodified, as a library. No Polyxd file is covered by it.
+
+**GSAP** (https://gsap.com/standard-license) drives the motion on polyxd.com
+only, and is not an OSI-approved licence. It is not used by the spec, the
+renderer, the packs or the verifier, none of which it can reach; and no GSAP
+file is committed to this repository — the site's build copies them out of
+node_modules into its own output. Anyone building the site is therefore subject
+to GSAP's licence, and anyone using the rest of Polyxd is not.
+
+
+## Fonts
+
+No font files are distributed. polyxd.com loads its typefaces from Google Fonts
+at request time, and a design-system pack names the typeface its system
+specifies without shipping it — a pack that asks for Adobe Clean, for example,
+names an open metric-compatible fallback for anyone who does not have it.

package/README.md

@@ -0,0 +1,85 @@
+# @polyxd/runtime
+
+Generates a spec-valid Polyxd UI document for an ask, with the model you choose. It builds the prompt from the spec and your Design Direction, checks the answer, sends the problems back for repair, streams as it goes, and remembers the screen shown for each intent so the next one is recognisable. It uses `fetch` only and has no model SDK dependencies. It runs in Node, browsers and Cloudflare Workers as it is: the spec's schema checks come compiled ahead of time, so nothing needs `eval` or `new Function`.
+
+```ts
+import { createRuntime, anthropic, memoryStore } from "@polyxd/runtime";
+
+const runtime = createRuntime({
+  generator: anthropic({ apiKey: process.env.ANTHROPIC_API_KEY }),  // model defaults to claude-sonnet-5
+  direction,                                                        // your direction.json
+  memory: memoryStore(),
+});
+
+const { document, report, attempts, usage } = await runtime.generate({
+  ask: "Send £250 to Alex for the rent",
+  intent: "money.send",
+  capabilities: { "transfer.confirm": registry.capabilities["transfer.confirm"] },
+  data: { quote },
+});
+
+if (report.valid) render(document, { data: { quote } });
+```
+
+## Generators
+
+One interface, `generate({ system, messages, signal, onText })`, returning the text and token usage. Four adapters implement it. Keys are passed in by you; the runtime never reads them from anywhere and never logs them.
+
+| Adapter | Calls | Model |
+|---|---|---|
+| `anthropic({ apiKey, model?, maxTokens?, temperature?, baseURL?, cache?, browser? })` | Anthropic Messages API, streaming. The system prompt is marked for prompt caching unless `cache: false` | Default `claude-sonnet-5` |
+| `openai({ apiKey, model, api?, baseURL?, maxTokens?, temperature? })` | Chat Completions (`api: "chat"`, the default) or the Responses API (`api: "responses"`, sent with `store: false`) | Required |
+| `gemini({ apiKey, model, baseURL?, maxTokens?, temperature? })` | Gemini API `streamGenerateContent`, asking for JSON output. The key goes in a header, not the URL | Required |
+| `local({ model, baseURL?, apiKey?, maxTokens?, temperature? })` | Any OpenAI-compatible server. Default `http://localhost:11434/v1` (Ollama); llama.cpp is usually on port 8080, LM Studio on 1234 | Required |
+
+Every adapter also takes `fetch` (your own, for a proxy or tests) and `headers`. A refusal or failure throws a `GeneratorError` with the provider and the HTTP status. Anything with a `name` and a `generate` method works as a generator, so your own code or a fake in tests can stand in.
+
+## What goes in the prompt
+
+`systemPrompt()` is built from the spec at build time: the document shape, the rules for a generated document (bind data by JSON Pointer, only the capabilities offered, destructive actions from a `Confirm`, no shell components), every surface component with its props, and the patterns. It is the same for every ask. Pass `components` to `createRuntime` to offer only the components your product allows.
+
+`userPrompt()` holds everything about this ask:
+
+- the ask, the intent, and a pattern when you name one;
+- the capabilities on offer, with risk, inputs and undo;
+- the data, and the JSON Pointers it offers;
+- the Direction: profile, voice and rules as instructions, the preferred patterns that fit this ask, and disallowed patterns;
+- up to two exemplars from the Direction, chosen by the words they share with the ask (`exemplars` sets how many; `resolveExemplar` turns a `document` path into the document);
+- the screen shown last time for this intent, from memory.
+
+The same input gives the same text. `runtime.prompt(ask)` returns exactly what the first call would send.
+
+## Checks and repair
+
+Each answer is parsed (code fences and prose around the JSON are tolerated) and checked:
+
+- `checkDocument`: the verifier's document checks, `staticAudit` from `@polyxd/verifier/static`. That is the spec validator, with the Direction's `emphasisBudget` and bindings checked against your data; the declared pattern's checks; the capabilities on offer; the Direction's rules and its compiled voice; and the verifier's agent-readiness checks (distinct control names, labels that say what happens, no template placeholders, and the rest). They read no files and load no browser, so they run anywhere.
+- Generated-only checks: never a shell (`generated:shell`), only allowed components (`generated:component`), no disallowed pattern (`direction:pattern-disallowed`).
+
+Pass `audit` to use checks of your own instead of `checkDocument`. It gets the same options `staticAudit` takes.
+
+If anything is an error, the model gets its answer back with the problems listed and is asked for the whole document again, up to `maxRepairs` times (default 2). `repairWarnings: true` sends warnings back too. The result is `{ document, report, attempts, usage }`. When it gives up, `report.valid` is false and `document` is the last one that parsed.
+
+## Streaming
+
+```ts
+for await (const p of runtime.stream(ask)) {
+  if (p.type === "text") showTyping(p.text);
+  if (p.type === "done") show(p.result.document);
+  if (p.type === "error") showFallback(p.reason);
+}
+```
+
+The order is `started`, then for each attempt its `text` pieces and an `attempt` report, then `repaired` if a repair worked, then `done` or `error`. Leaving the loop early aborts the model call. `generate(ask, { onProgress })` gives the same sequence as a callback, and `ask.signal` cancels either.
+
+## Memory
+
+`memoryStore()` keeps screens in memory; `storageStore(localStorage)` keeps them in `localStorage` or anything with `getItem`, `setItem` and `removeItem`. When a document passes, it is stored by intent without its data. The next ask with that intent sends it to the model as the screen to keep recognisable. Nothing leaves the client.
+
+## Events
+
+`onEvent` receives `started`, `text`, `attempt`, `repaired`, `done` and `error` with counts, timings, validity, token usage and check ids only. Never the ask, the data or the document. The package sends no telemetry anywhere; what you do with the events is up to you.
+
+## Tests
+
+`npm test -w @polyxd/runtime` runs with a fake generator and no network: prompt snapshots, the repair loop and giving up, fence stripping, streaming order, memory, event redaction, the default checks and a custom `audit`, that nothing loads the file system or Playwright, and each adapter's request and stream parsing against fixture streams written in each provider's documented format. `npm run build:catalog -w @polyxd/runtime` regenerates the spec catalog; a test fails when it is out of date.

package/dist/adapters/anthropic.d.ts

@@ -0,0 +1,22 @@
+import type { Generator } from "../types.ts";
+import { type HttpOptions } from "./http.ts";
+export interface AnthropicOptions extends HttpOptions {
+    /** Your API key. Leave it out only when a proxy at `baseURL` adds it. */
+    apiKey?: string;
+    /** Default `claude-sonnet-5`. */
+    model?: string;
+    /** Default 8192. */
+    maxTokens?: number;
+    temperature?: number;
+    /** Default `https://api.anthropic.com`. */
+    baseURL?: string;
+    /** Mark the system prompt for prompt caching, since it's the same for every ask. Default true. */
+    cache?: boolean;
+    /**
+     * Send the header Anthropic requires for calls straight from a browser. Only for a key the person
+     * using the page owns; a key of yours in a page is a key anyone can read.
+     */
+    browser?: boolean;
+}
+/** Claude, through the Anthropic Messages API, streaming. */
+export declare function anthropic(options?: AnthropicOptions): Generator;

package/dist/adapters/anthropic.js

@@ -0,0 +1,48 @@
+import { GeneratorError, json, post, serverEvents, trimSlash } from "./http.js";
+/** Claude, through the Anthropic Messages API, streaming. */
+export function anthropic(options = {}) {
+    const model = options.model ?? "claude-sonnet-5";
+    const url = `${trimSlash(options.baseURL ?? "https://api.anthropic.com")}/v1/messages`;
+    return {
+        name: "anthropic",
+        async generate({ system, messages, signal, onText }) {
+            const headers = { "anthropic-version": "2023-06-01" };
+            if (options.apiKey)
+                headers["x-api-key"] = options.apiKey;
+            if (options.browser)
+                headers["anthropic-dangerous-direct-browser-access"] = "true";
+            const body = {
+                model,
+                max_tokens: options.maxTokens ?? 8192,
+                system: options.cache === false ? system : [{ type: "text", text: system, cache_control: { type: "ephemeral" } }],
+                messages: messages.map((m) => ({ role: m.role, content: m.content })),
+                stream: true,
+            };
+            if (options.temperature !== undefined)
+                body.temperature = options.temperature;
+            const stream = await post("anthropic", options, url, headers, body, signal);
+            let text = "";
+            const usage = { inputTokens: 0, outputTokens: 0 };
+            for await (const e of serverEvents(stream)) {
+                const d = json("anthropic", e.data);
+                if (d.type === "message_start") {
+                    const u = d.message?.usage ?? {};
+                    usage.inputTokens = (u.input_tokens ?? 0) + (u.cache_creation_input_tokens ?? 0) + (u.cache_read_input_tokens ?? 0);
+                    usage.outputTokens = u.output_tokens ?? 0;
+                }
+                else if (d.type === "content_block_delta" && d.delta?.type === "text_delta") {
+                    text += d.delta.text;
+                    onText?.(d.delta.text);
+                }
+                else if (d.type === "message_delta" && d.usage?.output_tokens !== undefined) {
+                    usage.outputTokens = d.usage.output_tokens;
+                }
+                else if (d.type === "error") {
+                    throw new GeneratorError("anthropic", `anthropic stopped: ${d.error?.type ?? "error"}${d.error?.message ? `: ${d.error.message}` : ""}`);
+                }
+            }
+            return { text, usage };
+        },
+    };
+}
+//# sourceMappingURL=anthropic.js.map

package/dist/adapters/anthropic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropic.js","sourceRoot":"","sources":["../../src/adapters/anthropic.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAoB,MAAM,WAAW,CAAC;AAqBlG,6DAA6D;AAC7D,MAAM,UAAU,SAAS,CAAC,OAAO,GAAqB,EAAE;IACtD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,iBAAiB,CAAC;IACjD,MAAM,GAAG,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,IAAI,2BAA2B,CAAC,cAAc,CAAC;IACvF,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,KAAK,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE;YACjD,MAAM,OAAO,GAA2B,EAAE,mBAAmB,EAAE,YAAY,EAAE,CAAC;YAC9E,IAAI,OAAO,CAAC,MAAM;gBAAE,OAAO,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;YAC1D,IAAI,OAAO,CAAC,OAAO;gBAAE,OAAO,CAAC,2CAA2C,CAAC,GAAG,MAAM,CAAC;YACnF,MAAM,IAAI,GAA4B;gBACpC,KAAK;gBACL,UAAU,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;gBACrC,MAAM,EAAE,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC;gBACjH,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;gBACrE,MAAM,EAAE,IAAI;aACb,CAAC;YACF,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;gBAAE,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;YAC9E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5E,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,MAAM,KAAK,GAAU,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;YACzD,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3C,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;gBACpC,IAAI,CAAC,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;oBAC/B,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC;oBACjC,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,2BAA2B,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,uBAAuB,IAAI,CAAC,CAAC,CAAC;oBACpH,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC;gBAC5C,CAAC;qBAAM,IAAI,CAAC,CAAC,IAAI,KAAK,qBAAqB,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;oBAC9E,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;oBACrB,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACzB,CAAC;qBAAM,IAAI,CAAC,CAAC,IAAI,KAAK,eAAe,IAAI,CAAC,CAAC,KAAK,EAAE,aAAa,KAAK,SAAS,EAAE,CAAC;oBAC9E,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC;gBAC7C,CAAC;qBAAM,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC9B,MAAM,IAAI,cAAc,CAAC,WAAW,EAAE,sBAAsB,CAAC,CAAC,KAAK,EAAE,IAAI,IAAI,OAAO,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC3I,CAAC;YACH,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACzB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/adapters/gemini.d.ts

@@ -0,0 +1,14 @@
+import type { Generator } from "../types.ts";
+import { type HttpOptions } from "./http.ts";
+export interface GeminiOptions extends HttpOptions {
+    /** Your API key, sent in a header, never in the URL. Leave it out only when a proxy at `baseURL` adds it. */
+    apiKey?: string;
+    /** The model id. There is no default. */
+    model: string;
+    /** Default `https://generativelanguage.googleapis.com/v1beta`. */
+    baseURL?: string;
+    maxTokens?: number;
+    temperature?: number;
+}
+/** Google Gemini, through the Gemini API's `streamGenerateContent`, asking for JSON output. */
+export declare function gemini(options: GeminiOptions): Generator;

package/dist/adapters/gemini.js

@@ -0,0 +1,42 @@
+import { GeneratorError, json, post, serverEvents, trimSlash } from "./http.js";
+/** Google Gemini, through the Gemini API's `streamGenerateContent`, asking for JSON output. */
+export function gemini(options) {
+    const base = trimSlash(options.baseURL ?? "https://generativelanguage.googleapis.com/v1beta");
+    const model = options.model.replace(/^models\//, "");
+    const url = `${base}/models/${encodeURIComponent(model)}:streamGenerateContent?alt=sse`;
+    return {
+        name: "gemini",
+        async generate({ system, messages, signal, onText }) {
+            const headers = options.apiKey ? { "x-goog-api-key": options.apiKey } : {};
+            const generationConfig = { responseMimeType: "application/json" };
+            if (options.maxTokens !== undefined)
+                generationConfig.maxOutputTokens = options.maxTokens;
+            if (options.temperature !== undefined)
+                generationConfig.temperature = options.temperature;
+            const body = {
+                systemInstruction: { parts: [{ text: system }] },
+                contents: messages.map((m) => ({ role: m.role === "assistant" ? "model" : "user", parts: [{ text: m.content }] })),
+                generationConfig,
+            };
+            const stream = await post("gemini", options, url, headers, body, signal);
+            let text = "";
+            let usage;
+            for await (const e of serverEvents(stream)) {
+                const d = json("gemini", e.data);
+                if (d.error)
+                    throw new GeneratorError("gemini", `gemini stopped: ${d.error.message ?? "error"}`, d.error.code);
+                for (const part of d.candidates?.[0]?.content?.parts ?? []) {
+                    if (part.thought || typeof part.text !== "string" || !part.text)
+                        continue;
+                    text += part.text;
+                    onText?.(part.text);
+                }
+                const u = d.usageMetadata;
+                if (u)
+                    usage = { inputTokens: u.promptTokenCount ?? 0, outputTokens: u.candidatesTokenCount ?? 0 };
+            }
+            return { text, usage };
+        },
+    };
+}
+//# sourceMappingURL=gemini.js.map

package/dist/adapters/gemini.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemini.js","sourceRoot":"","sources":["../../src/adapters/gemini.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAoB,MAAM,WAAW,CAAC;AAalG,+FAA+F;AAC/F,MAAM,UAAU,MAAM,CAAC,OAAsB;IAC3C,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,IAAI,kDAAkD,CAAC,CAAC;IAC9F,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,GAAG,IAAI,WAAW,kBAAkB,CAAC,KAAK,CAAC,gCAAgC,CAAC;IACxF,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,KAAK,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE;YACjD,MAAM,OAAO,GAA2B,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnG,MAAM,gBAAgB,GAA4B,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,CAAC;YAC3F,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;gBAAE,gBAAgB,CAAC,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC;YAC1F,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;gBAAE,gBAAgB,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;YAC1F,MAAM,IAAI,GAAG;gBACX,iBAAiB,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE;gBAChD,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;gBAClH,gBAAgB;aACjB,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YACzE,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,IAAI,KAAwB,CAAC;YAC7B,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3C,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;gBACjC,IAAI,CAAC,CAAC,KAAK;oBAAE,MAAM,IAAI,cAAc,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC/G,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;oBAC3D,IAAI,IAAI,CAAC,OAAO,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI;wBAAE,SAAS;oBAC1E,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC;oBAClB,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtB,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC;gBAC1B,IAAI,CAAC;oBAAE,KAAK,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC,gBAAgB,IAAI,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,oBAAoB,IAAI,CAAC,EAAE,CAAC;YACrG,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACzB,CAAC;KACF,CAAC;AACJ,CAAC"}