@rizom/brain 0.2.0-alpha.6 → 0.2.0-alpha.61

package/dist/themes.d.ts

@@ -1,48 +1,9 @@
 /**
- * ⚠️ TEMPORARY HAND-WRITTEN PUBLIC API SURFACE ⚠️
+ * Compose a complete theme by prepending shared base utilities.
  *
- * Public API contract for `@rizom/brain/themes`. Hand-maintained
- * as a stopgap because the auto-bundlers choke on the size and
- * edge cases of the `@brains/*` type graph. See
- * `docs/plans/external-plugin-api.md` for the replacement plan.
- *
- * **Sync rules:**
- * - When `composeTheme`'s signature changes in `@brains/theme-base`,
- *   update this file in the same commit.
- * - The runtime side (`../entries/themes.ts`) re-exports the real
- *   implementation from `@brains/theme-base`. The .js bundle
- *   produced by `scripts/build.ts` is what consumers execute.
- *   This .d.ts file is what their tsc sees.
+ * Base utilities live in @layer theme-base; theme-specific styles
+ * should use @layer theme-override to guarantee correct cascade order.
  */
+declare function composeTheme(themeCSS: string): string;
 
-/**
- * Prepend the shared base theme utilities to a raw theme CSS string
- * and return the combined result.
- *
- * The base utilities layer contains:
- *
- * - Palette tokens (`--palette-*`) for neutral colors, status colors,
- *   and universal UI signals
- * - `@theme inline` declarations that expose the semantic color
- *   tokens (`--color-brand`, `--color-bg`, `--color-text`, etc.) to
- *   Tailwind v4's JIT so utilities like `bg-brand`, `text-brand`,
- *   `border-brand`, `focus-visible:ring-brand` auto-generate
- * - Layer ordering (`@layer theme-base, theme-override`) so theme
- *   overrides cascade correctly regardless of concat order
- * - Universal gradient, status, selection, and warning utilities
- * - Prose color slots for `@tailwindcss/typography`
- *
- * The framework resolver uses this helper when it loads a raw theme
- * package or inline theme CSS. Advanced consumers can use the same
- * helper when they need a fully composed CSS string outside the
- * resolver.
- *
- * @example
- * ```ts
- * import { composeTheme } from "@rizom/brain/themes";
- * import themeCSS from "./theme.css" with { type: "text" };
- *
- * const fullThemeCSS = composeTheme(themeCSS);
- * ```
- */
-export function composeTheme(themeCSS: string): string;
+export { composeTheme };

package/dist/themes.js

@@ -1,5 +1,5 @@
 // @bun
-var t=`/* ============================================
+var e=`/* ============================================
    THEME BASE - Shared utilities for all themes
    ============================================
    This file contains CSS that is IDENTICAL across all themes.
@@ -45,11 +45,17 @@ var t=`/* ============================================
   /* Selection colors */
   --color-selection: var(--color-selection);
 
+  /* Rule colors \u2014 subtle hairlines for dividers, entry borders, footer top */
+  --color-rule: var(--color-rule);
+  --color-rule-strong: var(--color-rule-strong);
+
   /* Monospace font \u2014 used by ui-library widgets, code blocks, etc.
      Defined by every theme (or left empty for ranger). Brand-specific
      fonts (\`font-display\`, \`font-body\`, \`font-label\`, \`font-nav\`)
      and the typography scale live in the brand theme that uses them
      so non-brand themes don't ship broken utilities. */
+  --font-sans: var(--font-sans);
+  --font-heading: var(--font-heading);
   --font-mono: var(--font-mono);
 
   /* Typography scale \u2014 each entry bundles font-size + line-height +
@@ -150,6 +156,7 @@ var t=`/* ============================================
   .text-theme-muted { color: var(--color-text-muted); }
   .text-theme-light { color: var(--color-text-light); }
   .text-theme-inverse { color: var(--color-text-inverse); }
+  .text-theme-on-dark { color: var(--color-text-on-dark, var(--color-text-inverse)); }
   .text-heading { color: var(--color-heading); }
   .text-selection { color: var(--color-selection); }
   .border-theme { border-color: var(--color-border); }
@@ -186,6 +193,82 @@ var t=`/* ============================================
     background-color: var(--color-selection-bg);
     color: var(--color-selection-text);
   }
+
+  /* Sticky-footer hygiene for site layouts that use flex-grow mains. */
+  body {
+    min-height: 100dvh;
+    display: flex;
+    flex-direction: column;
+  }
+
+  /* Reusable editorial decoration hooks. Themes provide colors through
+     semantic tokens; these classes only define layering and gradients. */
+  .hero-decor,
+  .cta-decor {
+    position: relative;
+    overflow: hidden;
+    isolation: isolate;
+  }
+
+  .hero-decor > *,
+  .cta-decor > * {
+    position: relative;
+    z-index: 1;
+  }
+
+  .hero-decor::before,
+  .hero-decor::after,
+  .cta-decor::before,
+  .cta-decor::after {
+    content: "";
+    position: absolute;
+    pointer-events: none;
+    z-index: 0;
+  }
+
+  .hero-decor::before {
+    inset: -30% -20% auto;
+    height: 120%;
+    background:
+      radial-gradient(circle at 50% 20%, rgb(from var(--color-accent) r g b / 0.5), transparent 28%),
+      radial-gradient(circle at 68% 38%, rgb(from var(--color-brand-dark) r g b / 0.35), transparent 36%);
+    filter: blur(8px);
+  }
+
+  .hero-decor::after,
+  .cta-decor::before {
+    inset: 0;
+    opacity: 0.12;
+    mix-blend-mode: soft-light;
+    background-image: url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' width='160' height='160' viewBox='0 0 160 160'%3E%3Cfilter id='n'%3E%3CfeTurbulence type='fractalNoise' baseFrequency='.8' numOctaves='4' stitchTiles='stitch'/%3E%3C/filter%3E%3Crect width='160' height='160' filter='url(%23n)' opacity='.65'/%3E%3C/svg%3E");
+  }
+
+  .cta-decor::after {
+    width: min(48rem, 70vw);
+    aspect-ratio: 1;
+    right: -18rem;
+    bottom: -28rem;
+    border-radius: 9999px;
+    background: radial-gradient(circle, rgb(from var(--color-brand) r g b / 0.42), transparent 66%);
+    filter: blur(6px);
+  }
+
+  .pulse-sparkle {
+    animation: hero-pulse 2.8s ease-in-out infinite;
+  }
+
+  @keyframes hero-pulse {
+    0%, 100% {
+      opacity: 0.55;
+      transform: scale(1);
+      box-shadow: 0 0 0 0 rgb(from var(--color-accent) r g b / 0.28);
+    }
+    50% {
+      opacity: 1;
+      transform: scale(1.18);
+      box-shadow: 0 0 0 10px rgb(from var(--color-accent) r g b / 0);
+    }
+  }
 }
 
 /* ============================================
@@ -268,21 +351,21 @@ var t=`/* ============================================
    ============================================ */
 @layer theme-base {
   [data-theme="dark"] .sun-icon {
-    display: block;
+    display: none;
   }
   [data-theme="dark"] .moon-icon {
-    display: none;
+    display: block;
   }
   [data-theme="light"] .sun-icon {
-    display: none;
+    display: block;
   }
   [data-theme="light"] .moon-icon {
-    display: block;
+    display: none;
   }
 }
-`;function o(e){return t+`
+`;function o(t){return e+`
 
-`+e}export{o as composeTheme};
+`+t}export{o as composeTheme};
 
-//# debugId=AA4E52472A90D8F564756E2164756E21
+//# debugId=11AD1BC3215EB2DC64756E2164756E21
 //# sourceMappingURL=themes.js.map

package/dist/themes.js.map

@@ -4,7 +4,7 @@
   "sourcesContent": [
     "// Types for CSS imports are defined in types.d.ts\n/// <reference types=\"./types.d.ts\" />\n\nimport themeBaseCSS from \"./theme-base.css\" with { type: \"text\" };\n\n/**\n * Compose a complete theme by prepending shared base utilities.\n *\n * Base utilities live in @layer theme-base; theme-specific styles\n * should use @layer theme-override to guarantee correct cascade order.\n */\nexport function composeTheme(themeCSS: string): string {\n  return themeBaseCSS + \"\\n\\n\" + themeCSS;\n}\n\nexport default themeBaseCSS;\nexport { themeBaseCSS };\n"
   ],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAWO,SAAS,CAAY,CAAC,EAA0B,CACrD,OAAO,EAAe;AAAA;AAAA,EAAS",
-  "debugId": "AA4E52472A90D8F564756E2164756E21",
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAWO,SAAS,CAAY,CAAC,EAA0B,CACrD,OAAO,EAAe;AAAA;AAAA,EAAS",
+  "debugId": "11AD1BC3215EB2DC64756E2164756E21",
   "names": []
 }

package/package.json

@@ -1,13 +1,37 @@
 {
   "name": "@rizom/brain",
-  "version": "0.2.0-alpha.6",
+  "version": "0.2.0-alpha.61",
   "description": "Brain runtime + CLI — scaffold, run, and manage AI brain instances",
   "type": "module",
   "bin": {
     "brain": "./dist/brain.js"
   },
   "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
     "./cli": "./dist/brain.js",
+    "./plugins": {
+      "types": "./dist/plugins.d.ts",
+      "import": "./dist/plugins.js"
+    },
+    "./entities": {
+      "types": "./dist/entities.d.ts",
+      "import": "./dist/entities.js"
+    },
+    "./services": {
+      "types": "./dist/services.d.ts",
+      "import": "./dist/services.js"
+    },
+    "./interfaces": {
+      "types": "./dist/interfaces.d.ts",
+      "import": "./dist/interfaces.js"
+    },
+    "./templates": {
+      "types": "./dist/templates.d.ts",
+      "import": "./dist/templates.js"
+    },
     "./site": {
       "types": "./dist/site.d.ts",
       "import": "./dist/site.js"
@@ -19,14 +43,18 @@
     "./deploy": {
       "types": "./dist/deploy.d.ts",
       "import": "./dist/deploy.js"
-    }
+    },
+    "./tsconfig.instance.json": "./tsconfig.instance.json"
   },
   "files": [
-    "dist"
+    "dist",
+    "templates",
+    "tsconfig.instance.json"
   ],
   "scripts": {
     "build": "bun scripts/build.ts",
     "prepublishOnly": "bun scripts/build.ts",
+    "dev:start": "bun dist/brain.js start",
     "typecheck": "tsc --noEmit",
     "test": "bun test",
     "lint": "eslint . --ext .ts"
@@ -42,6 +70,7 @@
     "tailwindcss": "^4.1.11"
   },
   "optionalDependencies": {
+    "@bitwarden/sdk-napi": "^1.0.0",
     "@libsql/client": "^0.15.7",
     "@tailwindcss/oxide": "^4.1.4",
     "better-sqlite3": "^11.8.1",
@@ -51,6 +80,7 @@
   },
   "devDependencies": {
     "@brains/app": "workspace:*",
+    "@brains/deploy-templates": "workspace:*",
     "@brains/eslint-config": "workspace:*",
     "@brains/mcp-service": "workspace:*",
     "@brains/plugins": "workspace:*",
@@ -61,12 +91,13 @@
     "@brains/site-default": "workspace:*",
     "@brains/site-personal": "workspace:*",
     "@brains/site-professional": "workspace:*",
-    "@brains/site-rizom": "workspace:*",
     "@brains/theme-default": "workspace:*",
     "@brains/theme-rizom": "workspace:*",
     "@brains/typescript-config": "workspace:*",
     "@brains/utils": "workspace:*",
     "@types/bun": "latest",
+    "rollup": "^4.60.2",
+    "rollup-plugin-dts": "^6.4.1",
     "typescript": "^5.3.3"
   },
   "publishConfig": {

package/templates/deploy/scripts/provision-server.ts

@@ -0,0 +1,109 @@
+import {
+  readJsonResponse,
+  requireEnv,
+  writeGitHubOutput,
+  writeGitHubEnv,
+} from "./helpers";
+
+const token = requireEnv("HCLOUD_TOKEN");
+const instanceName = requireEnv("INSTANCE_NAME");
+const sshKeyName = requireEnv("HCLOUD_SSH_KEY_NAME");
+const serverType = requireEnv("HCLOUD_SERVER_TYPE");
+const location = requireEnv("HCLOUD_LOCATION");
+
+const headers: Record<string, string> = {
+  Authorization: `Bearer ${token}`,
+  "Content-Type": "application/json",
+};
+const baseUrl = "https://api.hetzner.cloud/v1";
+const labelSelector = `brain=${instanceName}`;
+const MAX_POLLS = 30;
+const POLL_INTERVAL_MS = 10_000;
+
+interface HetznerServer {
+  id: number;
+  status: string;
+  public_net?: { ipv4?: { ip?: string } };
+}
+
+function sleep(ms: number): Promise<void> {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+
+async function listServers(): Promise<HetznerServer[]> {
+  const url = `${baseUrl}/servers?label_selector=${encodeURIComponent(labelSelector)}`;
+  const response = await fetch(url, { headers });
+  const payload = (await readJsonResponse(
+    response,
+    "Hetzner server lookup",
+  )) as {
+    servers?: HetznerServer[];
+  };
+  if (!response.ok || !payload.servers) {
+    throw new Error(`Hetzner server lookup failed: ${JSON.stringify(payload)}`);
+  }
+  return payload.servers;
+}
+
+async function createServer(): Promise<HetznerServer> {
+  const response = await fetch(`${baseUrl}/servers`, {
+    method: "POST",
+    headers,
+    body: JSON.stringify({
+      name: instanceName,
+      server_type: serverType,
+      image: "ubuntu-22.04",
+      location,
+      ssh_keys: [sshKeyName],
+      labels: { brain: instanceName },
+    }),
+  });
+  const payload = (await readJsonResponse(
+    response,
+    "Hetzner server create",
+  )) as {
+    server?: HetznerServer;
+  };
+  if (!response.ok || !payload.server) {
+    throw new Error(`Hetzner server create failed: ${JSON.stringify(payload)}`);
+  }
+  return payload.server;
+}
+
+async function getServer(id: number): Promise<HetznerServer> {
+  const response = await fetch(`${baseUrl}/servers/${id}`, { headers });
+  const payload = (await readJsonResponse(response, "Hetzner server poll")) as {
+    server?: HetznerServer;
+  };
+  if (!response.ok || !payload.server) {
+    throw new Error(`Hetzner server poll failed: ${JSON.stringify(payload)}`);
+  }
+  return payload.server;
+}
+
+let server: HetznerServer | undefined = (await listServers())[0];
+server ??= await createServer();
+
+let polls = 0;
+while (server.status !== "running" || !server.public_net?.ipv4?.ip) {
+  if (++polls > MAX_POLLS) {
+    throw new Error(
+      `Server ${server.id} did not become ready after ${(MAX_POLLS * POLL_INTERVAL_MS) / 1000}s (status: ${server.status})`,
+    );
+  }
+  if (server.status === "error") {
+    throw new Error(`Server ${server.id} entered error state`);
+  }
+  console.log(
+    `Waiting for server ${server.id} (status: ${server.status}, poll ${polls}/${MAX_POLLS})...`,
+  );
+  await sleep(POLL_INTERVAL_MS);
+  server = await getServer(server.id);
+}
+
+const serverIp = server.public_net.ipv4.ip;
+if (!serverIp) {
+  throw new Error(`Server ${server.id} running but has no IPv4 address`);
+}
+writeGitHubOutput("server_ip", serverIp);
+writeGitHubEnv("SERVER_IP", serverIp);

package/templates/deploy/scripts/update-dns.ts

@@ -0,0 +1,65 @@
+import { readJsonResponse, requireEnv } from "./helpers";
+
+const token = requireEnv("CF_API_TOKEN");
+const zoneId = requireEnv("CF_ZONE_ID");
+const domain = requireEnv("BRAIN_DOMAIN");
+const serverIp = requireEnv("SERVER_IP");
+
+const headers: Record<string, string> = {
+  Authorization: `Bearer ${token}`,
+  "Content-Type": "application/json",
+};
+const baseUrl = "https://api.cloudflare.com/client/v4";
+
+interface CloudflareResult {
+  success: boolean;
+  result?: Array<{ id: string }>;
+}
+
+async function findRecordId(
+  name: string,
+  type: "A" | "CNAME",
+): Promise<string | undefined> {
+  const lookupUrl = `${baseUrl}/zones/${zoneId}/dns_records?type=${type}&name=${encodeURIComponent(name)}`;
+  const lookup = await fetch(lookupUrl, { headers });
+  const payload = (await readJsonResponse(
+    lookup,
+    "Cloudflare DNS lookup",
+  )) as CloudflareResult;
+  if (!lookup.ok || !payload.success) {
+    throw new Error(`Cloudflare DNS lookup failed: ${JSON.stringify(payload)}`);
+  }
+
+  return payload.result?.[0]?.id;
+}
+
+async function upsertRecord(name: string): Promise<void> {
+  // Prefer an existing A record. If the hostname currently has a CNAME,
+  // replace that CNAME in-place so deploys can claim legacy www aliases.
+  const existing =
+    (await findRecordId(name, "A")) ?? (await findRecordId(name, "CNAME"));
+  const url = existing
+    ? `${baseUrl}/zones/${zoneId}/dns_records/${existing}`
+    : `${baseUrl}/zones/${zoneId}/dns_records`;
+
+  const response = await fetch(url, {
+    method: existing ? "PUT" : "POST",
+    headers,
+    body: JSON.stringify({
+      type: "A",
+      name,
+      content: serverIp,
+      ttl: 1,
+      proxied: true,
+    }),
+  });
+  const result = (await readJsonResponse(
+    response,
+    "Cloudflare DNS upsert",
+  )) as CloudflareResult;
+  if (!response.ok || !result.success) {
+    throw new Error(`Cloudflare DNS upsert failed: ${JSON.stringify(result)}`);
+  }
+}
+
+await upsertRecord(domain);

package/templates/deploy/scripts/write-ssh-key.ts

@@ -0,0 +1,17 @@
+import { mkdirSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { requireEnv } from "./helpers";
+
+const privateKey = requireEnv("KAMAL_SSH_PRIVATE_KEY");
+
+let normalized = privateKey.replace(/\r\n/g, "\n").replace(/\\n/g, "\n");
+if (!normalized.endsWith("\n")) {
+  normalized += "\n";
+}
+
+const sshDir = join(process.env["HOME"] ?? "/root", ".ssh");
+mkdirSync(sshDir, { recursive: true });
+writeFileSync(join(sshDir, "id_ed25519"), normalized, {
+  encoding: "utf8",
+  mode: 0o600,
+});

package/tsconfig.instance.json

@@ -0,0 +1,31 @@
+{
+  "$schema": "https://json.schemastore.org/tsconfig",
+  "display": "Rizom Brain Instance",
+  "compilerOptions": {
+    "esModuleInterop": true,
+    "forceConsistentCasingInFileNames": true,
+    "isolatedModules": true,
+    "moduleResolution": "bundler",
+    "resolveJsonModule": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "noImplicitAny": true,
+    "exactOptionalPropertyTypes": true,
+    "noImplicitReturns": true,
+    "noFallthroughCasesInSwitch": true,
+    "noUncheckedIndexedAccess": true,
+    "noPropertyAccessFromIndexSignature": true,
+    "allowUnreachableCode": false,
+    "allowUnusedLabels": false,
+    "noImplicitOverride": true,
+    "preserveWatchOutput": true,
+    "skipLibCheck": true,
+    "strict": true,
+    "target": "ES2022",
+    "module": "ESNext",
+    "lib": ["ES2022", "DOM", "DOM.Iterable"],
+    "jsx": "react-jsx",
+    "jsxImportSource": "preact",
+    "noEmit": true
+  }
+}