@scenar/cli 0.1.19 → 0.1.20

package/src/deploy/deploy-flow.ts

@@ -0,0 +1,115 @@
+import type { PackManifest } from "../pack/pack-manifest.js";
+
+/**
+ * One presigned upload target as the backend returns it. Mirrors the relevant
+ * fields of ai.scenar.deploy.v1.FileUploadTarget.
+ */
+export interface UploadTarget {
+  readonly relativePath: string;
+  readonly presignedPutUrl: string;
+  /**
+   * Headers that MUST be replayed verbatim on the PUT for the signature to
+   * validate (Content-Type + x-amz-checksum-sha256). The backend deliberately
+   * omits host/content-length, which the HTTP layer owns.
+   */
+  readonly requiredHeaders: Record<string, string>;
+}
+
+/** A file declared to the upload session — the init shape for DeclaredFile. */
+export interface DeclaredFileInit {
+  readonly relativePath: string;
+  /** Lowercase-hex SHA-256 (the proto + presign both bind this exact form). */
+  readonly sha256: string;
+  /** int64 on the wire — carried as bigint to avoid precision loss. */
+  readonly sizeBytes: bigint;
+  readonly contentType: string;
+}
+
+/** Identity for the ensure-scenario (apply) step. */
+export interface ScenarioApplyInput {
+  readonly org: string;
+  readonly slug: string;
+  readonly name: string;
+}
+
+/**
+ * The side-effecting operations the flow depends on, injected so the ordering
+ * and payloads can be unit-tested against fakes without a live backend.
+ */
+export interface DeployFlowDeps {
+  /** Idempotently ensure the parent scenario exists; returns its metadata.id. */
+  applyScenario(input: ScenarioApplyInput): Promise<string>;
+  /** Open the upload session; returns the deploy id + per-file targets. */
+  createSession(
+    scenarioId: string,
+    files: DeclaredFileInit[],
+  ): Promise<{ deployId: string; uploadTargets: UploadTarget[] }>;
+  /** Read a bundle file's bytes by its relative path. */
+  readBundleFile(relativePath: string): Promise<Uint8Array>;
+  /** PUT one file's bytes to its presigned target, replaying required headers. */
+  uploadFile(target: UploadTarget, bytes: Uint8Array): Promise<void>;
+  /** Finalize the session; returns the published deploy's embed_url. */
+  completeSession(deployId: string): Promise<string>;
+  /** Progress sink (stderr in the command; captured in tests). */
+  log(message: string): void;
+}
+
+/** Map a pack manifest to the deploy session's declared-file inventory. */
+export function toDeclaredFiles(manifest: PackManifest): DeclaredFileInit[] {
+  return manifest.files.map((file) => ({
+    relativePath: file.path,
+    sha256: file.sha256,
+    sizeBytes: BigInt(file.sizeBytes),
+    contentType: file.contentType,
+  }));
+}
+
+/**
+ * Drive the deploy: ensure the parent scenario, open the upload session, PUT
+ * every file to its presigned target (in the order the backend returned them,
+ * replaying required headers verbatim), then complete and return the embed URL.
+ *
+ * The ensure-then-deploy ordering is load-bearing: createDeployUploadSession
+ * authorizes against and inherits its org from an existing scenario, so the
+ * scenario must exist first.
+ */
+export async function runDeployFlow(
+  deps: DeployFlowDeps,
+  opts: { manifest: PackManifest; org: string; slug: string; name: string },
+): Promise<{ deployId: string; embedUrl: string }> {
+  deps.log(`Ensuring scenario ${opts.org}/${opts.slug}...`);
+  const scenarioId = await deps.applyScenario({ org: opts.org, slug: opts.slug, name: opts.name });
+
+  const files = toDeclaredFiles(opts.manifest);
+  deps.log(`Creating deploy session (${files.length} files)...`);
+  const { deployId, uploadTargets } = await deps.createSession(scenarioId, files);
+
+  for (const target of uploadTargets) {
+    const bytes = await deps.readBundleFile(target.relativePath);
+    deps.log(`Uploading ${target.relativePath} (${bytes.byteLength} bytes)...`);
+    await deps.uploadFile(target, bytes);
+  }
+
+  deps.log("Completing deploy...");
+  const embedUrl = await deps.completeSession(deployId);
+  return { deployId, embedUrl };
+}
+
+/**
+ * Derive a locally-viewable URL from a deploy's embed_url. The backend always
+ * emits https://, but the local edge (wrangler dev) serves over http on
+ * *.localhost; for those hosts we downgrade the scheme so the link is clickable.
+ */
+export function localViewUrl(embedUrl: string): string {
+  try {
+    const url = new URL(embedUrl);
+    const isLocal = url.hostname === "localhost" || url.hostname.endsWith(".localhost");
+    if (isLocal && url.protocol === "https:") {
+      url.protocol = "http:";
+      return url.toString();
+    }
+  } catch {
+    // Not a parseable URL — return as-is.
+  }
+  return embedUrl;
+}

package/src/deploy/embed-snippet.d.ts

@@ -0,0 +1,27 @@
+import type { Viewport } from "../pack/viewport.js";
+/** Inputs for {@link buildEmbedSnippet}. */
+export interface EmbedSnippetInput {
+    /** The deploy's public embed URL (goes verbatim into the iframe `src`). */
+    readonly embedUrl: string;
+    /** Canonical viewport — pins the responsive box's aspect ratio + max width. */
+    readonly viewport: Viewport;
+    /** Optional human title for the iframe (a11y). Defaults to a generic label. */
+    readonly title?: string;
+}
+/**
+ * Build the responsive, framework-free `<iframe>` embed snippet — the default,
+ * no-JS embed of DD-002. The wrapper pins the intrinsic aspect ratio
+ * (`width / height` from the baked `ViewportConfig`, DD-004) with CSS
+ * `aspect-ratio` so the embed scales fluidly to its container without
+ * letterboxing or reflow, capped at the canonical width so it never upscales
+ * past crispness.
+ *
+ * `allow="autoplay; fullscreen"` is the canonical host half of the embed
+ * permission pair (DD-003) and matches the edge's `Permissions-Policy`; reuse it
+ * verbatim. Attribute values are escaped, since the snippet is copy-pasted into
+ * third-party HTML.
+ *
+ * Pure function — returns the snippet string; the caller decides where to print.
+ */
+export declare function buildEmbedSnippet(input: EmbedSnippetInput): string;
+//# sourceMappingURL=embed-snippet.d.ts.map

package/src/deploy/embed-snippet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"embed-snippet.d.ts","sourceRoot":"","sources":["../../../src/deploy/embed-snippet.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAEpD,4CAA4C;AAC5C,MAAM,WAAW,iBAAiB;IAChC,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,+EAA+E;IAC/E,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,+EAA+E;IAC/E,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,GAAG,MAAM,CAelE"}

package/src/deploy/embed-snippet.js

@@ -0,0 +1,40 @@
+/**
+ * Build the responsive, framework-free `<iframe>` embed snippet — the default,
+ * no-JS embed of DD-002. The wrapper pins the intrinsic aspect ratio
+ * (`width / height` from the baked `ViewportConfig`, DD-004) with CSS
+ * `aspect-ratio` so the embed scales fluidly to its container without
+ * letterboxing or reflow, capped at the canonical width so it never upscales
+ * past crispness.
+ *
+ * `allow="autoplay; fullscreen"` is the canonical host half of the embed
+ * permission pair (DD-003) and matches the edge's `Permissions-Policy`; reuse it
+ * verbatim. Attribute values are escaped, since the snippet is copy-pasted into
+ * third-party HTML.
+ *
+ * Pure function — returns the snippet string; the caller decides where to print.
+ */
+export function buildEmbedSnippet(input) {
+    const { embedUrl, viewport } = input;
+    const title = input.title ?? "Scenar embed";
+    return [
+        `<div style="position:relative;width:100%;max-width:${viewport.width}px;aspect-ratio:${viewport.width}/${viewport.height}">`,
+        `  <iframe`,
+        `    src="${escapeAttr(embedUrl)}"`,
+        `    title="${escapeAttr(title)}"`,
+        `    loading="lazy"`,
+        `    style="position:absolute;inset:0;width:100%;height:100%;border:0"`,
+        `    allow="autoplay; fullscreen"`,
+        `    allowfullscreen`,
+        `  ></iframe>`,
+        `</div>`,
+    ].join("\n");
+}
+/** Escape a string for safe interpolation into a double-quoted HTML attribute. */
+function escapeAttr(value) {
+    return value
+        .replace(/&/g, "&amp;")
+        .replace(/"/g, "&quot;")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;");
+}
+//# sourceMappingURL=embed-snippet.js.map

package/src/deploy/embed-snippet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"embed-snippet.js","sourceRoot":"","sources":["../../../src/deploy/embed-snippet.ts"],"names":[],"mappings":"AAYA;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAwB;IACxD,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IACrC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,cAAc,CAAC;IAC5C,OAAO;QACL,sDAAsD,QAAQ,CAAC,KAAK,mBAAmB,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,MAAM,IAAI;QAC5H,WAAW;QACX,YAAY,UAAU,CAAC,QAAQ,CAAC,GAAG;QACnC,cAAc,UAAU,CAAC,KAAK,CAAC,GAAG;QAClC,oBAAoB;QACpB,uEAAuE;QACvE,kCAAkC;QAClC,qBAAqB;QACrB,cAAc;QACd,QAAQ;KACT,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,kFAAkF;AAClF,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC3B,CAAC"}

package/src/deploy/embed-snippet.ts

@@ -0,0 +1,52 @@
+import type { Viewport } from "../pack/viewport.js";
+
+/** Inputs for {@link buildEmbedSnippet}. */
+export interface EmbedSnippetInput {
+  /** The deploy's public embed URL (goes verbatim into the iframe `src`). */
+  readonly embedUrl: string;
+  /** Canonical viewport — pins the responsive box's aspect ratio + max width. */
+  readonly viewport: Viewport;
+  /** Optional human title for the iframe (a11y). Defaults to a generic label. */
+  readonly title?: string;
+}
+
+/**
+ * Build the responsive, framework-free `<iframe>` embed snippet — the default,
+ * no-JS embed of DD-002. The wrapper pins the intrinsic aspect ratio
+ * (`width / height` from the baked `ViewportConfig`, DD-004) with CSS
+ * `aspect-ratio` so the embed scales fluidly to its container without
+ * letterboxing or reflow, capped at the canonical width so it never upscales
+ * past crispness.
+ *
+ * `allow="autoplay; fullscreen"` is the canonical host half of the embed
+ * permission pair (DD-003) and matches the edge's `Permissions-Policy`; reuse it
+ * verbatim. Attribute values are escaped, since the snippet is copy-pasted into
+ * third-party HTML.
+ *
+ * Pure function — returns the snippet string; the caller decides where to print.
+ */
+export function buildEmbedSnippet(input: EmbedSnippetInput): string {
+  const { embedUrl, viewport } = input;
+  const title = input.title ?? "Scenar embed";
+  return [
+    `<div style="position:relative;width:100%;max-width:${viewport.width}px;aspect-ratio:${viewport.width}/${viewport.height}">`,
+    `  <iframe`,
+    `    src="${escapeAttr(embedUrl)}"`,
+    `    title="${escapeAttr(title)}"`,
+    `    loading="lazy"`,
+    `    style="position:absolute;inset:0;width:100%;height:100%;border:0"`,
+    `    allow="autoplay; fullscreen"`,
+    `    allowfullscreen`,
+    `  ></iframe>`,
+    `</div>`,
+  ].join("\n");
+}
+
+/** Escape a string for safe interpolation into a double-quoted HTML attribute. */
+function escapeAttr(value: string): string {
+  return value
+    .replace(/&/g, "&amp;")
+    .replace(/"/g, "&quot;")
+    .replace(/</g, "&lt;")
+    .replace(/>/g, "&gt;");
+}

package/src/deploy/upload.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Upload one file's bytes to its presigned PUT target.
+ *
+ * The presign binds the content type and SHA-256 into the signature, so every
+ * header the backend returned in `required_headers` is replayed verbatim. The
+ * backend intentionally omits host and content-length (the HTTP layer owns
+ * them) — fetch sets content-length from the body, matching the declared size.
+ */
+export declare function putFile(presignedPutUrl: string, requiredHeaders: Record<string, string>, bytes: Uint8Array): Promise<void>;
+//# sourceMappingURL=upload.d.ts.map

package/src/deploy/upload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload.d.ts","sourceRoot":"","sources":["../../../src/deploy/upload.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,wBAAsB,OAAO,CAC3B,eAAe,EAAE,MAAM,EACvB,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACvC,KAAK,EAAE,UAAU,GAChB,OAAO,CAAC,IAAI,CAAC,CAgBf"}

package/src/deploy/upload.js

@@ -0,0 +1,23 @@
+/**
+ * Upload one file's bytes to its presigned PUT target.
+ *
+ * The presign binds the content type and SHA-256 into the signature, so every
+ * header the backend returned in `required_headers` is replayed verbatim. The
+ * backend intentionally omits host and content-length (the HTTP layer owns
+ * them) — fetch sets content-length from the body, matching the declared size.
+ */
+export async function putFile(presignedPutUrl, requiredHeaders, bytes) {
+    const response = await fetch(presignedPutUrl, {
+        method: "PUT",
+        headers: requiredHeaders,
+        // The DOM BodyInit type is overly narrow for Uint8Array under this TS/lib
+        // combination; raw bytes are a valid fetch body at runtime.
+        body: bytes,
+    });
+    if (!response.ok) {
+        const detail = await response.text().catch(() => "");
+        throw new Error(`upload failed (${response.status} ${response.statusText})` +
+            (detail ? `: ${detail.slice(0, 300)}` : ""));
+    }
+}
+//# sourceMappingURL=upload.js.map

package/src/deploy/upload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload.js","sourceRoot":"","sources":["../../../src/deploy/upload.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,eAAuB,EACvB,eAAuC,EACvC,KAAiB;IAEjB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE;QAC5C,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,eAAe;QACxB,0EAA0E;QAC1E,4DAA4D;QAC5D,IAAI,EAAE,KAA4B;KACnC,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACrD,MAAM,IAAI,KAAK,CACb,kBAAkB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,GAAG;YACzD,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC9C,CAAC;IACJ,CAAC;AACH,CAAC"}

package/src/deploy/upload.ts

@@ -0,0 +1,29 @@
+/**
+ * Upload one file's bytes to its presigned PUT target.
+ *
+ * The presign binds the content type and SHA-256 into the signature, so every
+ * header the backend returned in `required_headers` is replayed verbatim. The
+ * backend intentionally omits host and content-length (the HTTP layer owns
+ * them) — fetch sets content-length from the body, matching the declared size.
+ */
+export async function putFile(
+  presignedPutUrl: string,
+  requiredHeaders: Record<string, string>,
+  bytes: Uint8Array,
+): Promise<void> {
+  const response = await fetch(presignedPutUrl, {
+    method: "PUT",
+    headers: requiredHeaders,
+    // The DOM BodyInit type is overly narrow for Uint8Array under this TS/lib
+    // combination; raw bytes are a valid fetch body at runtime.
+    body: bytes as unknown as BodyInit,
+  });
+
+  if (!response.ok) {
+    const detail = await response.text().catch(() => "");
+    throw new Error(
+      `upload failed (${response.status} ${response.statusText})` +
+        (detail ? `: ${detail.slice(0, 300)}` : ""),
+    );
+  }
+}

package/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAMpC,wBAAgB,aAAa,IAAI,OAAO,CAcvC;AAED,wBAAgB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAGxC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAQpC,wBAAgB,aAAa,IAAI,OAAO,CAgBvC;AAED,wBAAgB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAGxC"}

package/src/index.js

@@ -3,16 +3,20 @@ import { registerValidateCommand } from "./commands/validate.js";
 import { registerNarrateCommand } from "./commands/narrate.js";
 import { registerPreviewCommand } from "./commands/preview.js";
 import { registerRenderCommand } from "./commands/render.js";
+import { registerPackCommand } from "./commands/pack.js";
+import { registerDeployCommand } from "./commands/deploy.js";
 export function createProgram() {
     const program = new Command();
     program
         .name("scenar")
-        .description("Scenar CLI — validate scenarios, generate narration, render videos, and manage previews.")
+        .description("Scenar CLI — validate scenarios, generate narration, render videos, pack embeds, and deploy.")
         .version("0.0.1");
     registerValidateCommand(program);
     registerNarrateCommand(program);
     registerRenderCommand(program);
     registerPreviewCommand(program);
+    registerPackCommand(program);
+    registerDeployCommand(program);
     return program;
 }
 export function run(argv) {

package/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,MAAM,UAAU,aAAa;IAC3B,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAE9B,OAAO;SACJ,IAAI,CAAC,QAAQ,CAAC;SACd,WAAW,CAAC,0FAA0F,CAAC;SACvG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEpB,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACjC,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAChC,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC/B,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAEhC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,IAAc;IAChC,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;IAChC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACtB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,MAAM,UAAU,aAAa;IAC3B,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAE9B,OAAO;SACJ,IAAI,CAAC,QAAQ,CAAC;SACd,WAAW,CAAC,8FAA8F,CAAC;SAC3G,OAAO,CAAC,OAAO,CAAC,CAAC;IAEpB,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACjC,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAChC,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC/B,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAChC,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7B,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAE/B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,IAAc;IAChC,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;IAChC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACtB,CAAC"}

package/src/index.ts

@@ -3,19 +3,23 @@ import { registerValidateCommand } from "./commands/validate.js";
 import { registerNarrateCommand } from "./commands/narrate.js";
 import { registerPreviewCommand } from "./commands/preview.js";
 import { registerRenderCommand } from "./commands/render.js";
+import { registerPackCommand } from "./commands/pack.js";
+import { registerDeployCommand } from "./commands/deploy.js";
 
 export function createProgram(): Command {
   const program = new Command();
 
   program
     .name("scenar")
-    .description("Scenar CLI — validate scenarios, generate narration, render videos, and manage previews.")
+    .description("Scenar CLI — validate scenarios, generate narration, render videos, pack embeds, and deploy.")
     .version("0.0.1");
 
   registerValidateCommand(program);
   registerNarrateCommand(program);
   registerRenderCommand(program);
   registerPreviewCommand(program);
+  registerPackCommand(program);
+  registerDeployCommand(program);
 
   return program;
 }

package/src/pack/build.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Vite build invocation for `scenar pack`.
+ *
+ * Vite is loaded dynamically (like the Remotion bundler in `render`) so the CLI
+ * stays lean for users who only validate/narrate. The build runs in "app mode"
+ * from a generated index.html, producing a self-contained static bundle.
+ */
+export interface ViteBuildInput {
+    /** Build root — the temp dir holding index.html + the generated entry. */
+    root: string;
+    /** Absolute output directory for the static bundle. */
+    outDir: string;
+    /** Absolute path to the generated index.html (the Rollup input). */
+    entryHtmlPath: string;
+}
+export declare function runViteBuild(input: ViteBuildInput): Promise<void>;
+//# sourceMappingURL=build.d.ts.map

package/src/pack/build.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../../../src/pack/build.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,WAAW,cAAc;IAC7B,0EAA0E;IAC1E,IAAI,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,MAAM,EAAE,MAAM,CAAC;IACf,oEAAoE;IACpE,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,wBAAsB,YAAY,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAyCvE"}

package/src/pack/build.js

@@ -0,0 +1,42 @@
+/**
+ * Vite build invocation for `scenar pack`.
+ *
+ * Vite is loaded dynamically (like the Remotion bundler in `render`) so the CLI
+ * stays lean for users who only validate/narrate. The build runs in "app mode"
+ * from a generated index.html, producing a self-contained static bundle.
+ */
+export async function runViteBuild(input) {
+    const vite = await import("vite").catch(() => {
+        throw new Error("Could not load vite.\n" +
+            "scenar pack bundles the embed with Vite. Install it:\n" +
+            "  pnpm add -D vite @vitejs/plugin-react");
+    });
+    const reactPluginMod = await import("@vitejs/plugin-react").catch(() => {
+        throw new Error("Could not load @vitejs/plugin-react.\n" +
+            "Install it: pnpm add -D vite @vitejs/plugin-react");
+    });
+    const react = (reactPluginMod.default ?? reactPluginMod);
+    await vite.build({
+        root: input.root,
+        base: "./", // relative asset URLs: the bundle is served from a per-deploy origin root.
+        configFile: false, // never pick up a vite.config.* from the consumer project.
+        logLevel: "warn",
+        plugins: [react()],
+        // A single React copy — the scenario, @scenar/react, and react-dom must agree.
+        resolve: { dedupe: ["react", "react-dom"] },
+        build: {
+            outDir: input.outDir,
+            emptyOutDir: true,
+            cssCodeSplit: false, // one stylesheet, served under style-src 'self'.
+            sourcemap: false, // .map is not in the deploy allowlist.
+            // Keep Vite's default assetsInlineLimit (4 KiB): small assets inline as data: URIs
+            // (allowed by the edge CSP's img-src/font-src 'self' data:), while larger images and
+            // fonts emit as hashed files — now first-class members of the deploy allowlist.
+            manifest: false, // pack writes its own deploy-facing pack-manifest.json.
+            // No inline modulepreload polyfill script — it would violate script-src 'self'.
+            modulePreload: { polyfill: false },
+            rollupOptions: { input: input.entryHtmlPath },
+        },
+    });
+}
+//# sourceMappingURL=build.js.map

package/src/pack/build.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build.js","sourceRoot":"","sources":["../../../src/pack/build.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAWH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAqB;IACtD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;QAC3C,MAAM,IAAI,KAAK,CACb,wBAAwB;YACtB,wDAAwD;YACxD,yCAAyC,CAC5C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;QACrE,MAAM,IAAI,KAAK,CACb,wCAAwC;YACtC,mDAAmD,CACtD,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,CAAC,cAAc,CAAC,OAAO,IAAI,cAAc,CAE3C,CAAC;IAEb,MAAO,IAAI,CAAC,KAA+D,CAAC;QAC1E,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,IAAI,EAAE,2EAA2E;QACvF,UAAU,EAAE,KAAK,EAAE,2DAA2D;QAC9E,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC;QAClB,+EAA+E;QAC/E,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE;QAC3C,KAAK,EAAE;YACL,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,WAAW,EAAE,IAAI;YACjB,YAAY,EAAE,KAAK,EAAE,iDAAiD;YACtE,SAAS,EAAE,KAAK,EAAE,uCAAuC;YACzD,mFAAmF;YACnF,qFAAqF;YACrF,gFAAgF;YAChF,QAAQ,EAAE,KAAK,EAAE,wDAAwD;YACzE,gFAAgF;YAChF,aAAa,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;YAClC,aAAa,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,aAAa,EAAE;SAC9C;KACF,CAAC,CAAC;AACL,CAAC"}

package/src/pack/build.ts

@@ -0,0 +1,59 @@
+/**
+ * Vite build invocation for `scenar pack`.
+ *
+ * Vite is loaded dynamically (like the Remotion bundler in `render`) so the CLI
+ * stays lean for users who only validate/narrate. The build runs in "app mode"
+ * from a generated index.html, producing a self-contained static bundle.
+ */
+
+export interface ViteBuildInput {
+  /** Build root — the temp dir holding index.html + the generated entry. */
+  root: string;
+  /** Absolute output directory for the static bundle. */
+  outDir: string;
+  /** Absolute path to the generated index.html (the Rollup input). */
+  entryHtmlPath: string;
+}
+
+export async function runViteBuild(input: ViteBuildInput): Promise<void> {
+  const vite = await import("vite").catch(() => {
+    throw new Error(
+      "Could not load vite.\n" +
+        "scenar pack bundles the embed with Vite. Install it:\n" +
+        "  pnpm add -D vite @vitejs/plugin-react",
+    );
+  });
+
+  const reactPluginMod = await import("@vitejs/plugin-react").catch(() => {
+    throw new Error(
+      "Could not load @vitejs/plugin-react.\n" +
+        "Install it: pnpm add -D vite @vitejs/plugin-react",
+    );
+  });
+  const react = (reactPluginMod.default ?? reactPluginMod) as (
+    ...args: unknown[]
+  ) => unknown;
+
+  await (vite.build as (config: Record<string, unknown>) => Promise<unknown>)({
+    root: input.root,
+    base: "./", // relative asset URLs: the bundle is served from a per-deploy origin root.
+    configFile: false, // never pick up a vite.config.* from the consumer project.
+    logLevel: "warn",
+    plugins: [react()],
+    // A single React copy — the scenario, @scenar/react, and react-dom must agree.
+    resolve: { dedupe: ["react", "react-dom"] },
+    build: {
+      outDir: input.outDir,
+      emptyOutDir: true,
+      cssCodeSplit: false, // one stylesheet, served under style-src 'self'.
+      sourcemap: false, // .map is not in the deploy allowlist.
+      // Keep Vite's default assetsInlineLimit (4 KiB): small assets inline as data: URIs
+      // (allowed by the edge CSP's img-src/font-src 'self' data:), while larger images and
+      // fonts emit as hashed files — now first-class members of the deploy allowlist.
+      manifest: false, // pack writes its own deploy-facing pack-manifest.json.
+      // No inline modulepreload polyfill script — it would violate script-src 'self'.
+      modulePreload: { polyfill: false },
+      rollupOptions: { input: input.entryHtmlPath },
+    },
+  });
+}

package/src/pack/bundle-contract.d.ts

@@ -0,0 +1,61 @@
+/**
+ * The bundle contract — the exact rules the Scenar Cloud backend enforces when
+ * it accepts a deploy. `scenar pack` validates its own output against these
+ * rules so a malformed bundle fails locally with a clear message rather than
+ * mid-upload, and a conformance test asserts pack output satisfies them so pack
+ * and the server can never drift.
+ *
+ * Source of truth (kept in lockstep):
+ *   - DeployContentTypes.java       — extension allowlist + canonical content type
+ *   - DeployManifestValidator.java  — path pattern, depth, dupes, content-type check
+ *   - CompleteDeployUploadSessionHandler.java — sha256/size/content-type shape
+ *   - ScenarioJsonValidator.java    — scenario.json rules
+ *
+ * The backend verifies each file's declared content type equals the canonical
+ * type for its extension (the same declared-then-verified contract as sha256 and
+ * size), so `CONTENT_TYPE_BY_EXTENSION` below must match the server's table
+ * exactly. svg is intentionally absent: it is active content (it can run script
+ * on direct same-origin navigation), so scenarios inline SVG (as a React
+ * component or a data URI) rather than emitting it as a served file.
+ */
+/** Conventional content type per allowed extension. Matches the backend exactly. */
+export declare const CONTENT_TYPE_BY_EXTENSION: {
+    readonly html: "text/html";
+    readonly js: "text/javascript";
+    readonly css: "text/css";
+    readonly json: "application/json";
+    readonly mp3: "audio/mpeg";
+    readonly png: "image/png";
+    readonly jpg: "image/jpeg";
+    readonly jpeg: "image/jpeg";
+    readonly gif: "image/gif";
+    readonly webp: "image/webp";
+    readonly avif: "image/avif";
+    readonly woff2: "font/woff2";
+    readonly woff: "font/woff";
+};
+/** Final-extension allowlist (lowercase, no dot). Derived from the content-type table. */
+export declare const ALLOWED_EXTENSIONS: (keyof typeof CONTENT_TYPE_BY_EXTENSION)[];
+/** A bundle-relative path: clean POSIX segments, no leading/trailing/double slash. */
+export declare const RELATIVE_PATH_PATTERN: RegExp;
+/** Maximum number of path segments (directory depth) the backend allows. */
+export declare const MAX_PATH_DEPTH = 12;
+/** Lowercase hex SHA-256 (exactly 64 chars) — the form the presign binds. */
+export declare const SHA256_HEX_PATTERN: RegExp;
+/** A `type/subtype` content type — the minimal shape the backend requires. */
+export declare const CONTENT_TYPE_PATTERN: RegExp;
+/** The file every bundle must contain at its root. */
+export declare const REQUIRED_FILE = "scenario.json";
+/** Returns the lowercase final extension of a path (no dot), or "" if none. */
+export declare function finalExtension(path: string): string;
+/**
+ * Validate one bundle-relative file path against the backend rules. Returns an
+ * error message, or null if the path is acceptable.
+ */
+export declare function validateRelativePath(path: string): string | null;
+/**
+ * Validate the parsed scenario.json content. Returns an error message, or null
+ * if it satisfies the backend's ScenarioJsonValidator rules.
+ */
+export declare function validateScenarioJson(raw: string): string | null;
+//# sourceMappingURL=bundle-contract.d.ts.map

package/src/pack/bundle-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-contract.d.ts","sourceRoot":"","sources":["../../../src/pack/bundle-contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,oFAAoF;AACpF,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;CAiB5B,CAAC;AAEX,0FAA0F;AAC1F,eAAO,MAAM,kBAAkB,EAE1B,CAAC,MAAM,OAAO,yBAAyB,CAAC,EAAE,CAAC;AAEhD,sFAAsF;AACtF,eAAO,MAAM,qBAAqB,QAA0C,CAAC;AAE7E,4EAA4E;AAC5E,eAAO,MAAM,cAAc,KAAK,CAAC;AAEjC,6EAA6E;AAC7E,eAAO,MAAM,kBAAkB,QAAmB,CAAC;AAEnD,8EAA8E;AAC9E,eAAO,MAAM,oBAAoB,QAAuB,CAAC;AAEzD,sDAAsD;AACtD,eAAO,MAAM,aAAa,kBAAkB,CAAC;AAQ7C,+EAA+E;AAC/E,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAInD;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAoBhE;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAuB/D"}