@pwfabric/cli 0.0.0-stage → 1.0.0-rc.0

package/dist/host/records.js

@@ -0,0 +1,229 @@
+/**
+ * The app's own records, in memory (data-protocol §5).
+ *
+ * One collection per entity type declared in `app/definitions/entities.json`,
+ * seeded on first use from `app/data/` (see `readSeed`). A record is
+ * `{ …fields, id, entityType, createdAt, updatedAt }`, fields spread at the
+ * top level like the reference server's.
+ *
+ * ACCESS, read off the declarations — a deliberately small version of what a
+ * hosted session server decides:
+ *
+ *  - `auth.json` `required: true`: every data request needs a session
+ *    (`401 SIGN_IN_REQUIRED`).
+ *  - A collection is OWNER-SCOPED when an `access.rules[]` entry names it and
+ *    is not a public read grant (subject `public`/`anyone`/`visitors`/…, a
+ *    rule that grants reading and does not say "own"), when the entity
+ *    declares an owner field (`owner`, `ownerId`, `userId`, `createdBy`, …),
+ *    or when the entity carries `"scope": "owner"`. An owner-scoped collection
+ *    needs a session, lists only the caller's rows, and answers another
+ *    visitor's row as `404`.
+ *  - Every other collection is shared by the whole app: anyone may read and
+ *    write it.
+ */
+import { randomUUID } from 'node:crypto';
+import { HostError } from './http.js';
+import { readSeed } from './definitions.js';
+import { aggregate, matches, parseFilter, parseSort, sortRows } from './query.js';
+const PUBLIC_SUBJECTS = new Set([
+    'public',
+    'anyone',
+    'anybody',
+    'everyone',
+    'everybody',
+    'all',
+    'visitor',
+    'visitors',
+    'guest',
+    'guests',
+    'anonymous',
+    '*',
+]);
+const READ_VERB = /\b(read|reads|see|sees|view|views|list|lists|browse|browses)\b/i;
+const OWN_WORD = /\b(own|their|his|her|only)\b/i;
+const OWNER_FIELDS = new Set([
+    'owner',
+    'ownerid',
+    'createdby',
+    'createdbyid',
+    'userid',
+    'memberid',
+    'authorid',
+    'principalid',
+    'accountid',
+]);
+const RESERVED = new Set(['id', 'entityType', 'createdAt', 'updatedAt', '__proto__', 'constructor', 'prototype']);
+const norm = (s) => s.toLowerCase().replace(/[\s_-]/g, '');
+function ownerFieldOf(entity) {
+    return entity.fields.find((f) => OWNER_FIELDS.has(norm(f.name)))?.name;
+}
+export function scopeOf(entity, auth) {
+    const names = new Set([norm(entity.typeId), ...(entity.displayName ? [norm(entity.displayName)] : [])]);
+    const rules = (auth?.access.rules ?? []).filter((r) => names.has(norm(r.model)));
+    const publicGrant = rules.some((r) => PUBLIC_SUBJECTS.has(r.subject.trim().toLowerCase()) && READ_VERB.test(r.rule) && !OWN_WORD.test(r.rule));
+    if (publicGrant)
+        return 'project';
+    if (rules.length > 0 || ownerFieldOf(entity) !== undefined || entity.scope === 'owner')
+        return 'owner';
+    return 'project';
+}
+const isEmpty = (v) => v === undefined || v === null || v === '';
+export class RecordStore {
+    root;
+    devUser;
+    collections = new Map();
+    clock = 0;
+    constructor(root, devUser) {
+        this.root = root;
+        this.devUser = devUser;
+    }
+    reset() {
+        this.collections.clear();
+        this.clock = 0;
+    }
+    collection(entity) {
+        let rows = this.collections.get(entity.typeId);
+        if (rows)
+            return rows;
+        rows = new Map();
+        const now = new Date().toISOString();
+        const ownerField = ownerFieldOf(entity);
+        for (const seed of readSeed(this.root, entity.typeId)) {
+            const id = typeof seed.id === 'string' || typeof seed.id === 'number' ? String(seed.id) : randomUUID();
+            const declaredOwner = ownerField ? seed[ownerField] : undefined;
+            rows.set(id, {
+                record: {
+                    ...seed,
+                    id,
+                    entityType: entity.typeId,
+                    createdAt: typeof seed.createdAt === 'string' ? seed.createdAt : now,
+                    updatedAt: typeof seed.updatedAt === 'string' ? seed.updatedAt : now,
+                },
+                // Seed rows belong to the development user unless they name an owner.
+                owner: typeof declaredOwner === 'string' && declaredOwner ? declaredOwner : this.devUser.id,
+                touched: ++this.clock,
+            });
+        }
+        this.collections.set(entity.typeId, rows);
+        return rows;
+    }
+    /** Refuses a caller the declarations do not let in; answers the collection's scope. */
+    guard({ entity, auth, caller }) {
+        if (auth?.required && !caller.principal) {
+            throw new HostError(401, 'SIGN_IN_REQUIRED', 'Sign in to use this app.');
+        }
+        const scope = scopeOf(entity, auth);
+        if (scope === 'owner' && !caller.principal) {
+            throw new HostError(401, 'SIGN_IN_REQUIRED', `Sign in to see your ${entity.displayName ?? entity.typeId} records.`);
+        }
+        return scope;
+    }
+    /** The rows this caller may see, newest change first, after `filter`. */
+    visible(target, params) {
+        const scope = this.guard(target);
+        let filter;
+        try {
+            filter = parseFilter(params.get('filter'));
+        }
+        catch {
+            throw new HostError(400, 'INVALID_QUERY', 'filter must be a JSON filter object.');
+        }
+        const rows = [...this.collection(target.entity).values()]
+            .filter((s) => scope === 'project' || s.owner === target.caller.principal?.id)
+            .sort((a, b) => b.touched - a.touched)
+            .map((s) => s.record);
+        return { scope, rows: filter ? rows.filter((r) => matches(r, filter)) : rows };
+    }
+    list(target, params) {
+        const { scope, rows } = this.visible(target, params);
+        const sort = parseSort(params.get('sort'));
+        const ordered = sort.length > 0 ? sortRows(rows, sort) : rows;
+        const limitRaw = Number(params.get('limit') ?? '100');
+        const offsetRaw = Number(params.get('offset') ?? '0');
+        const limit = Number.isFinite(limitRaw) ? Math.min(500, Math.max(1, Math.trunc(limitRaw))) : 100;
+        const offset = Number.isFinite(offsetRaw) ? Math.max(0, Math.trunc(offsetRaw)) : 0;
+        return {
+            data: ordered.slice(offset, offset + limit),
+            meta: { total: ordered.length, scope, timestamp: new Date().toISOString() },
+        };
+    }
+    /** `/count` (`plainCount`) or `/aggregate?fn&field`. */
+    aggregate(target, params, plainCount) {
+        const fn = plainCount ? 'count' : params.get('fn');
+        if (fn !== 'count' && fn !== 'sum' && fn !== 'avg') {
+            throw new HostError(400, 'INVALID_QUERY', 'fn must be count, sum or avg.');
+        }
+        const field = plainCount ? undefined : (params.get('field') ?? undefined);
+        if (fn !== 'count' && !field)
+            throw new HostError(400, 'INVALID_QUERY', `${fn} needs a field.`);
+        const { scope, rows } = this.visible(target, params);
+        return { data: aggregate(rows, fn, field), meta: { scope, timestamp: new Date().toISOString() } };
+    }
+    find(target, id) {
+        const scope = this.guard(target);
+        const stored = this.collection(target.entity).get(id);
+        if (!stored || (scope === 'owner' && stored.owner !== target.caller.principal?.id)) {
+            throw new HostError(404, 'NOT_FOUND', `No ${target.entity.typeId} record "${id}".`);
+        }
+        return stored;
+    }
+    read(target, id) {
+        return this.find(target, id).record;
+    }
+    create(target, body) {
+        const { entity, caller } = target;
+        const scope = this.guard(target);
+        const fields = writable(body);
+        const ownerField = ownerFieldOf(entity);
+        if (scope === 'owner' && ownerField && isEmpty(fields[ownerField]) && caller.principal) {
+            fields[ownerField] = caller.principal.id;
+        }
+        const missing = entity.fields.filter((f) => f.required && isEmpty(fields[f.name])).map((f) => f.name);
+        if (missing.length > 0) {
+            throw new HostError(400, 'VALIDATION_FAILED', `Missing required field(s): ${missing.join(', ')}.`);
+        }
+        const now = new Date().toISOString();
+        const id = randomUUID();
+        const record = { ...fields, id, entityType: entity.typeId, createdAt: now, updatedAt: now };
+        this.collection(entity).set(id, { record, owner: caller.principal?.id, touched: ++this.clock });
+        return record;
+    }
+    update(target, id, body) {
+        const stored = this.find(target, id);
+        const fields = writable(body);
+        const cleared = target.entity.fields
+            .filter((f) => f.required && f.name in fields && isEmpty(fields[f.name]))
+            .map((f) => f.name);
+        if (cleared.length > 0) {
+            throw new HostError(400, 'VALIDATION_FAILED', `Required field(s) cannot be empty: ${cleared.join(', ')}.`);
+        }
+        stored.record = {
+            ...stored.record,
+            ...fields,
+            id,
+            entityType: target.entity.typeId,
+            updatedAt: new Date().toISOString(),
+        };
+        stored.touched = ++this.clock;
+        return stored.record;
+    }
+    remove(target, id) {
+        this.find(target, id);
+        this.collection(target.entity).delete(id);
+    }
+}
+/** The record itself is the body; a lone `{ data: { … } }` wrapper is unwrapped. Server-owned members are dropped. */
+function writable(body) {
+    const keys = Object.keys(body);
+    const inner = body.data;
+    const source = keys.length === 1 && keys[0] === 'data' && inner && typeof inner === 'object' && !Array.isArray(inner)
+        ? inner
+        : body;
+    const out = {};
+    for (const [k, v] of Object.entries(source)) {
+        if (!RESERVED.has(k))
+            out[k] = v;
+    }
+    return out;
+}
+//# sourceMappingURL=records.js.map

package/dist/host/records.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"records.js","sourceRoot":"","sources":["../../src/host/records.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AACrC,OAAO,EAAE,QAAQ,EAAgD,MAAM,kBAAkB,CAAA;AACzF,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAA+C,MAAM,YAAY,CAAA;AAK9H,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,UAAU;IACV,WAAW;IACX,KAAK;IACL,SAAS;IACT,UAAU;IACV,OAAO;IACP,QAAQ;IACR,WAAW;IACX,GAAG;CACJ,CAAC,CAAA;AACF,MAAM,SAAS,GAAG,iEAAiE,CAAA;AACnF,MAAM,QAAQ,GAAG,+BAA+B,CAAA;AAChD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,OAAO;IACP,SAAS;IACT,WAAW;IACX,aAAa;IACb,QAAQ;IACR,UAAU;IACV,UAAU;IACV,aAAa;IACb,WAAW;CACZ,CAAC,CAAA;AACF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAA;AAEjH,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;AAE1E,SAAS,YAAY,CAAC,MAAyB;IAC7C,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAA;AACxE,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,MAAyB,EAAE,IAAiC;IAClF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IACvG,MAAM,KAAK,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAChF,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAC5B,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAC/G,CAAA;IACD,IAAI,WAAW;QAAE,OAAO,SAAS,CAAA;IACjC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO;QAAE,OAAO,OAAO,CAAA;IACtG,OAAO,SAAS,CAAA;AAClB,CAAC;AAsBD,MAAM,OAAO,GAAG,CAAC,CAAU,EAAW,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAA;AASlF,MAAM,OAAO,WAAW;IAKH;IACA;IALF,WAAW,GAAG,IAAI,GAAG,EAA+B,CAAA;IAC7D,KAAK,GAAG,CAAC,CAAA;IAEjB,YACmB,IAAY,EACZ,OAAkB;QADlB,SAAI,GAAJ,IAAI,CAAQ;QACZ,YAAO,GAAP,OAAO,CAAW;IAClC,CAAC;IAEJ,KAAK;QACH,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAA;QACxB,IAAI,CAAC,KAAK,GAAG,CAAC,CAAA;IAChB,CAAC;IAEO,UAAU,CAAC,MAAyB;QAC1C,IAAI,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAC9C,IAAI,IAAI;YAAE,OAAO,IAAI,CAAA;QACrB,IAAI,GAAG,IAAI,GAAG,EAAE,CAAA;QAChB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACpC,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;QACvC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACtD,MAAM,EAAE,GAAG,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAA;YACtG,MAAM,aAAa,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YAC/D,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE;gBACX,MAAM,EAAE;oBACN,GAAG,IAAI;oBACP,EAAE;oBACF,UAAU,EAAE,MAAM,CAAC,MAAM;oBACzB,SAAS,EAAE,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG;oBACpE,SAAS,EAAE,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG;iBACrE;gBACD,sEAAsE;gBACtE,KAAK,EAAE,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;gBAC3F,OAAO,EAAE,EAAE,IAAI,CAAC,KAAK;aACtB,CAAC,CAAA;QACJ,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QACzC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,uFAAuF;IAC/E,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAU;QAC5C,IAAI,IAAI,EAAE,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACxC,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,kBAAkB,EAAE,0BAA0B,CAAC,CAAA;QAC1E,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QACnC,IAAI,KAAK,KAAK,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC3C,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,kBAAkB,EAAE,uBAAuB,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,MAAM,WAAW,CAAC,CAAA;QACrH,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED,yEAAyE;IACjE,OAAO,CAAC,MAAc,EAAE,MAAuB;QACrD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAChC,IAAI,MAA0B,CAAA;QAC9B,IAAI,CAAC;YACH,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,eAAe,EAAE,sCAAsC,CAAC,CAAA;QACnF,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;aACtD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC;aAC7E,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;aACrC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;QACvB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAChF,CAAC;IAED,IAAI,CAAC,MAAc,EAAE,MAAuB;QAC1C,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QACpD,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAC7D,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,CAAA;QACrD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAA;QACrD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;QAChG,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAClF,OAAO;YACL,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC;YAC3C,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;SAC5E,CAAA;IACH,CAAC;IAED,wDAAwD;IACxD,SAAS,CAAC,MAAc,EAAE,MAAuB,EAAE,UAAmB;QACpE,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAClD,IAAI,EAAE,KAAK,OAAO,IAAI,EAAE,KAAK,KAAK,IAAI,EAAE,KAAK,KAAK,EAAE,CAAC;YACnD,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,eAAe,EAAE,+BAA+B,CAAC,CAAA;QAC5E,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,CAAA;QACzE,IAAI,EAAE,KAAK,OAAO,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,iBAAiB,CAAC,CAAA;QAC/F,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QACpD,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,CAAA;IACnG,CAAC;IAEO,IAAI,CAAC,MAAc,EAAE,EAAU;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAChC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACrD,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,KAAK,OAAO,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC;YACnF,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,YAAY,EAAE,IAAI,CAAC,CAAA;QACrF,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAED,IAAI,CAAC,MAAc,EAAE,EAAU;QAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAA;IACrC,CAAC;IAED,MAAM,CAAC,MAAc,EAAE,IAA6B;QAClD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAA;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAChC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;QAC7B,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;QACvC,IAAI,KAAK,KAAK,OAAO,IAAI,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACvF,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,EAAE,CAAA;QAC1C,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QACrG,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,mBAAmB,EAAE,8BAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACpG,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACpC,MAAM,EAAE,GAAG,UAAU,EAAE,CAAA;QACvB,MAAM,MAAM,GAAQ,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,CAAA;QAChG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAA;QAC/F,OAAO,MAAM,CAAA;IACf,CAAC;IAED,MAAM,CAAC,MAAc,EAAE,EAAU,EAAE,IAA6B;QAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QACpC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;QAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM;aACjC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,IAAI,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;aACxE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QACrB,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,mBAAmB,EAAE,sCAAsC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5G,CAAC;QACD,MAAM,CAAC,MAAM,GAAG;YACd,GAAG,MAAM,CAAC,MAAM;YAChB,GAAG,MAAM;YACT,EAAE;YACF,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;YAChC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAA;QACD,MAAM,CAAC,OAAO,GAAG,EAAE,IAAI,CAAC,KAAK,CAAA;QAC7B,OAAO,MAAM,CAAC,MAAM,CAAA;IACtB,CAAC;IAED,MAAM,CAAC,MAAc,EAAE,EAAU;QAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QACrB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAC3C,CAAC;CACF;AAED,sHAAsH;AACtH,SAAS,QAAQ,CAAC,IAA6B;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAA;IACvB,MAAM,MAAM,GACV,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpG,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,IAAI,CAAA;IACV,MAAM,GAAG,GAA4B,EAAE,CAAA;IACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;IAClC,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/host/tokens.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Opaque tokens, in memory.
+ *
+ * Every credential the local host hands out — an app session, an issuer
+ * access token, a door token, a refresh token, an authorization code — is 32
+ * random bytes, base64url. Only its SHA-256 is kept (as a session server
+ * should), so even a heap dump of the development server holds no usable
+ * token. Expired entries are dropped when they are looked up.
+ */
+export interface Principal {
+    readonly id: string;
+    readonly email: string;
+    readonly displayName: string;
+}
+export declare function newToken(): string;
+export declare class TokenStore<T extends {
+    readonly expiresAt: number;
+}> {
+    private readonly entries;
+    /** Mints a token for `entry` and returns it. */
+    issue(entry: T): string;
+    /** The live entry for `token`, or undefined (unknown or expired). */
+    get(token: string | undefined): T | undefined;
+    /** Looks the token up and forgets it — single use. */
+    take(token: string | undefined): T | undefined;
+    revoke(token: string | undefined): void;
+    clear(): void;
+}
+//# sourceMappingURL=tokens.d.ts.map

package/dist/host/tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../../src/host/tokens.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC7B;AAED,wBAAgB,QAAQ,IAAI,MAAM,CAEjC;AAID,qBAAa,UAAU,CAAC,CAAC,SAAS;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE;IAC9D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuB;IAE/C,gDAAgD;IAChD,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,MAAM;IAMvB,qEAAqE;IACrE,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,CAAC,GAAG,SAAS;IAY7C,sDAAsD;IACtD,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,CAAC,GAAG,SAAS;IAM9C,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IAIvC,KAAK,IAAI,IAAI;CAGd"}

package/dist/host/tokens.js

@@ -0,0 +1,52 @@
+/**
+ * Opaque tokens, in memory.
+ *
+ * Every credential the local host hands out — an app session, an issuer
+ * access token, a door token, a refresh token, an authorization code — is 32
+ * random bytes, base64url. Only its SHA-256 is kept (as a session server
+ * should), so even a heap dump of the development server holds no usable
+ * token. Expired entries are dropped when they are looked up.
+ */
+import { createHash, randomBytes } from 'node:crypto';
+export function newToken() {
+    return randomBytes(32).toString('base64url');
+}
+const digest = (token) => createHash('sha256').update(token).digest('hex');
+export class TokenStore {
+    entries = new Map();
+    /** Mints a token for `entry` and returns it. */
+    issue(entry) {
+        const token = newToken();
+        this.entries.set(digest(token), entry);
+        return token;
+    }
+    /** The live entry for `token`, or undefined (unknown or expired). */
+    get(token) {
+        if (!token)
+            return undefined;
+        const key = digest(token);
+        const entry = this.entries.get(key);
+        if (!entry)
+            return undefined;
+        if (entry.expiresAt <= Date.now()) {
+            this.entries.delete(key);
+            return undefined;
+        }
+        return entry;
+    }
+    /** Looks the token up and forgets it — single use. */
+    take(token) {
+        const entry = this.get(token);
+        if (entry && token)
+            this.entries.delete(digest(token));
+        return entry;
+    }
+    revoke(token) {
+        if (token)
+            this.entries.delete(digest(token));
+    }
+    clear() {
+        this.entries.clear();
+    }
+}
+//# sourceMappingURL=tokens.js.map

package/dist/host/tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../../src/host/tokens.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAQrD,MAAM,UAAU,QAAQ;IACtB,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;AAC9C,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAE1F,MAAM,OAAO,UAAU;IACJ,OAAO,GAAG,IAAI,GAAG,EAAa,CAAA;IAE/C,gDAAgD;IAChD,KAAK,CAAC,KAAQ;QACZ,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAA;QACxB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAA;QACtC,OAAO,KAAK,CAAA;IACd,CAAC;IAED,qEAAqE;IACrE,GAAG,CAAC,KAAyB;QAC3B,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAA;QAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACnC,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAA;QAC5B,IAAI,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAClC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YACxB,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED,sDAAsD;IACtD,IAAI,CAAC,KAAyB;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAC7B,IAAI,KAAK,IAAI,KAAK;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QACtD,OAAO,KAAK,CAAA;IACd,CAAC;IAED,MAAM,CAAC,KAAyB;QAC9B,IAAI,KAAK;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;IAC/C,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAA;IACtB,CAAC;CACF"}

package/dist/host/types.d.ts

@@ -0,0 +1,33 @@
+/**
+ * The local host: a small in-process implementation of the session and data
+ * protocols (spec/session-protocol.md, spec/data-protocol.md) for development.
+ *
+ * It is NOT a production server. It keeps records in memory, signs in a
+ * single development user without a password, and serves receipts from the
+ * pwpack folder. `pwf dev` mounts it under a path prefix on its own HTTP
+ * server; tests can mount it on their own.
+ */
+import type { IncomingMessage, ServerResponse } from 'node:http';
+export interface LocalHostOptions {
+    /** Absolute path of the pwpack folder (receipts, definitions, seed data). */
+    readonly root: string;
+    /** Path prefix the host is mounted under, e.g. "/_host". */
+    readonly prefix: string;
+    /** The development user signed in by the dev issuer. */
+    readonly user?: {
+        readonly id: string;
+        readonly name: string;
+        readonly email: string;
+    };
+}
+export interface LocalHost {
+    /** Envelope fields the runner needs to reach this host (session, auth and data URLs). */
+    envelopeEntries(origin: string): Readonly<Record<string, unknown>>;
+    /** Handles a request under `prefix`; resolves false when the path is not the host's. */
+    handle(req: IncomingMessage, res: ServerResponse): Promise<boolean>;
+    /** Clears records and sessions. */
+    reset(): void;
+}
+/** Implemented in ./local-host.ts. */
+export type CreateLocalHost = (options: LocalHostOptions) => LocalHost;
+//# sourceMappingURL=types.d.ts.map

package/dist/host/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/host/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAEhE,MAAM,WAAW,gBAAgB;IAC/B,6EAA6E;IAC7E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,4DAA4D;IAC5D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,wDAAwD;IACxD,QAAQ,CAAC,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;CACvF;AAED,MAAM,WAAW,SAAS;IACxB,yFAAyF;IACzF,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IAClE,wFAAwF;IACxF,MAAM,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACnE,mCAAmC;IACnC,KAAK,IAAI,IAAI,CAAA;CACd;AAED,sCAAsC;AACtC,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,gBAAgB,KAAK,SAAS,CAAA"}

package/dist/host/types.js

@@ -0,0 +1,11 @@
+/**
+ * The local host: a small in-process implementation of the session and data
+ * protocols (spec/session-protocol.md, spec/data-protocol.md) for development.
+ *
+ * It is NOT a production server. It keeps records in memory, signs in a
+ * single development user without a password, and serves receipts from the
+ * pwpack folder. `pwf dev` mounts it under a path prefix on its own HTTP
+ * server; tests can mount it on their own.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/host/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/host/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}

package/dist/index.d.ts

@@ -0,0 +1,17 @@
+/**
+ * `pwf` — the PWFabric command line.
+ *
+ * Creates, develops, validates, packs and runs PWFabric applications with
+ * nothing but the engine's own packages. It never calls a hosted service:
+ * there is no login, publish or deploy here.
+ */
+import type { CommandIO } from './commands/types.js';
+export { parseArgs } from './args.js';
+export { COMMANDS, findCommand } from './commands/registry.js';
+export type { Command, CommandIO, ParsedArgs } from './commands/types.js';
+export type { DevServer, DevServerOptions, DevBuildResult, StartDevServer } from './dev/types.js';
+export type { LocalHost, LocalHostOptions, CreateLocalHost } from './host/types.js';
+export { createLocalHost } from './host/local-host.js';
+/** Runs one invocation and resolves to its exit code. */
+export declare function main(argv: readonly string[], io: CommandIO): Promise<number>;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAEpD,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AACrC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAA;AAC9D,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AACzE,YAAY,EAAE,SAAS,EAAE,gBAAgB,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AACjG,YAAY,EAAE,SAAS,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACnF,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAUtD,yDAAyD;AACzD,wBAAsB,IAAI,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAkBlF"}

package/dist/index.js

@@ -0,0 +1,41 @@
+/**
+ * `pwf` — the PWFabric command line.
+ *
+ * Creates, develops, validates, packs and runs PWFabric applications with
+ * nothing but the engine's own packages. It never calls a hosted service:
+ * there is no login, publish or deploy here.
+ */
+import { parseArgs } from './args.js';
+import { COMMANDS, findCommand } from './commands/registry.js';
+export { parseArgs } from './args.js';
+export { COMMANDS, findCommand } from './commands/registry.js';
+export { createLocalHost } from './host/local-host.js';
+function help(io) {
+    io.out('Usage: pwf <command> [options]');
+    io.out('');
+    for (const c of COMMANDS)
+        io.out(`  ${c.name.padEnd(10)} ${c.summary}`);
+    io.out('');
+    io.out('Run `pwf <command> --help` for the options of one command.');
+}
+/** Runs one invocation and resolves to its exit code. */
+export async function main(argv, io) {
+    const { command, args } = parseArgs(argv);
+    if (command === undefined || command === 'help') {
+        help(io);
+        return 0;
+    }
+    const cmd = findCommand(command);
+    if (!cmd) {
+        io.err(`pwf: unknown command "${command}"`);
+        help(io);
+        return 2;
+    }
+    if (args.flags.help === true) {
+        io.out(`Usage: ${cmd.usage}`);
+        io.out(cmd.summary);
+        return 0;
+    }
+    return cmd.run(args, io);
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AACrC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAA;AAG9D,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AACrC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAA;AAI9D,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAEtD,SAAS,IAAI,CAAC,EAAa;IACzB,EAAE,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAA;IACxC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACV,KAAK,MAAM,CAAC,IAAI,QAAQ;QAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;IACvE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACV,EAAE,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAA;AACtE,CAAC;AAED,yDAAyD;AACzD,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,IAAuB,EAAE,EAAa;IAC/D,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;IACzC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QAChD,IAAI,CAAC,EAAE,CAAC,CAAA;QACR,OAAO,CAAC,CAAA;IACV,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,CAAA;IAChC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,EAAE,CAAC,GAAG,CAAC,yBAAyB,OAAO,GAAG,CAAC,CAAA;QAC3C,IAAI,CAAC,EAAE,CAAC,CAAA;QACR,OAAO,CAAC,CAAA;IACV,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QAC7B,EAAE,CAAC,GAAG,CAAC,UAAU,GAAG,CAAC,KAAK,EAAE,CAAC,CAAA;QAC7B,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACnB,OAAO,CAAC,CAAA;IACV,CAAC;IACD,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;AAC1B,CAAC"}

package/package.json

@@ -1,6 +1,68 @@
 {
   "name": "@pwfabric/cli",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "1.0.0-rc.0",
+  "description": "The PWFabric command line: create, develop, validate, pack and run PWFabric applications without any hosted service",
+  "type": "module",
+  "bin": {
+    "pwf": "./dist/bin.js"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "LICENSE",
+    "README.md"
+  ],
+  "dependencies": {
+    "@pwfabric/contracts": "1.0.0-rc.0",
+    "@pwfabric/core": "1.0.0-rc.0",
+    "@pwfabric/embed": "1.0.0-rc.0",
+    "@pwfabric/pack": "1.0.0-rc.0",
+    "@pwfabric/authoring": "1.0.0-rc.0",
+    "@pwfabric/runner": "1.0.0-rc.0",
+    "@pwfabric/compiler": "1.0.0-rc.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "@vitest/coverage-v8": "^2.1.9",
+    "ajv": "^8.20.0",
+    "ajv-formats": "^3.0.1",
+    "jsdom": "^26.0.0",
+    "typescript": "^5.4.0",
+    "vitest": "^2.0.0"
+  },
+  "engines": {
+    "node": ">=22"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/pwfabric/pwfabric",
+    "directory": "packages/cli"
+  },
+  "homepage": "https://github.com/pwfabric/pwfabric#readme",
+  "bugs": {
+    "url": "https://github.com/pwfabric/pwfabric/issues"
+  },
+  "license": "Apache-2.0",
+  "author": "PhiMajor Solutions",
+  "scripts": {
+    "build": "rm -rf dist tsconfig.tsbuildinfo && tsc",
+    "dev": "tsc --watch",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:coverage": "vitest run --coverage",
+    "lint": "eslint src",
+    "lint:fix": "eslint src --fix",
+    "typecheck": "tsc --noEmit",
+    "clean": "rm -rf dist"
+  }
 }