@skaile/forge-app 0.0.0-stage → 1.0.1

package/CHANGELOG.md

@@ -0,0 +1,13 @@
+# Changelog
+
+## 1.0.1
+
+- Dependency `@skaile/forge-app-actions` widened to `^0.4.0 || ^0.5.0`. The layer only registers its Nuxt module, which 0.5.0 did not change. Before, a host on forge-app-actions 0.5.0 got a second, nested 0.4.x copy, and the layer registered that one. Hosts that resolve 0.5.0 get its breaking changes: the Workspaces capability bridge (`clientCapabilityBridge`, `capabilityRegistry`, `routeCapabilityInvocation`, …) is no longer a Nuxt server auto-import or a `/server` export; import it from `@skaile/forge-app-actions/server/workspaces`.
+
+## 1.0.0
+
+Initial release: an optional Nuxt layer for Skaile forge apps.
+
+- `extends: ['@skaile/forge-app']` registers `modules: ['@nuxt/ui', '@skaile/forge-app-actions']` in that order.
+- One shared stylesheet (`@import "tailwindcss"; @import "@nuxt/ui"; @import "@skaile/brand/nuxt-ui.css";`) registered once. Capability stylesheets stay in their own modules.
+- No HTTP or MCP action endpoint, no principal or deps resolver, no settings or provider route, no editor or chat wiring: hosts add each feature explicitly.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Matthias Ortegro
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,101 @@
-# Temporary Holding Version
+# @skaile/forge-app
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+An optional Nuxt layer for Skaile forge apps. It saves the same three lines of setup in every host and nothing else.
+
+## What the layer gives you
+
+```ts
+// nuxt.config.ts
+export default defineNuxtConfig({
+  extends: ['@skaile/forge-app'],
+})
+```
+
+- `modules: ['@nuxt/ui', '@skaile/forge-app-actions']`, in that order (the actions module refuses to load unless Nuxt UI came first). Hosts keep their own `modules`; entries are merged, the layer's first.
+- One stylesheet, registered once:
+
+  ```css
+  @import "tailwindcss";
+  @import "@nuxt/ui";
+  @import "@skaile/brand/nuxt-ui.css";
+  ```
+
+  The brand bridge comes after Nuxt UI on purpose (equal specificity, source order decides). Capability stylesheets (editor, chat, inbox) stay in the modules that own them.
+
+Install:
+
+```sh
+bun add @skaile/forge-app @nuxt/ui nuxt tailwindcss
+```
+
+Peers: `nuxt ^4`, `@nuxt/ui ^4.11`, `tailwindcss ^4`. Dependencies: `@skaile/forge-app-actions ^0.4.0 || ^0.5.0`, `@skaile/brand ^0.7.0`. Wrap the root in `<UApp>` as Nuxt UI requires.
+
+## What the layer does not do
+
+No HTTP or MCP action endpoint, no principal or deps resolver, no settings or provider route, no annotation or editor authorization, no chat handler, no central dependency list. Identity, grants and per-feature permission checks stay in the host. Compose chat with `createAiSdkChatHandler` yourself; the layer has no wrapper for it. Express/Vite apps do not use this layer; they use the framework-neutral packages directly.
+
+## What hosts add explicitly
+
+Each feature is opt-in in the host's own `nuxt.config.ts`.
+
+**HTTP actions** (typed client, `forge-actions` CLI). Deny by default until your hook allows:
+
+```ts
+export default defineNuxtConfig({
+  extends: ['@skaile/forge-app'],
+  forgeAppActions: { http: { route: '/api/actions' } },
+})
+```
+
+```ts
+// server/plugins/actions-auth.ts
+export default defineNitroPlugin((nitro) => {
+  nitro.hooks.hook('forge-app-actions:http:authorize', async (decision) => {
+    // decision: { event, bearer, allowed, principal?, deps? }
+    // Cookie sessions: do the same-origin check here.
+    decision.allowed = await isAllowed(decision.event, decision.bearer)
+  })
+})
+```
+
+**MCP** (serves the `llm`-audience actions):
+
+```ts
+forgeAppActions: { mcp: { route: '/mcp', name: 'my-app' } },
+// plus a Nitro hook on 'forge-app-actions:mcp:authorize' that sets decision.allowed
+```
+
+**Provider settings** (installed after `@nuxt/ui`, provides `<ForgeProvidersPanel>`):
+
+```ts
+extends: ['@skaile/forge-app'],
+modules: ['@skaile/forge-settings/nuxt'],
+```
+
+Settings storage, scopes and permissions stay in the host; see `@skaile/forge-settings`.
+
+**Editor** (chat-free by default; the sidebar lives at `@skaile/forge-editor/ai/vue/chat` and needs `@skaile/forge-chat`):
+
+```ts
+extends: ['@skaile/forge-app'],
+modules: ['@skaile/forge-editor/nuxt'],
+```
+
+A plain editor host installs no settings storage and no agent runtime.
+
+## Proof
+
+`scripts/packed-consumer.mjs` packs the layer with `npm pack`, installs the tarball into a throwaway Nuxt app under `.scratch/packed-consumer/` (gitignored), runs `nuxi build`, boots `.output/server/index.mjs` on a free port and checks:
+
+- Nuxt UI registered before `@skaile/forge-app-actions`; the packed layer is the extended layer; the stylesheet is registered once
+- no HTTP/MCP options set; `GET/POST /api/actions` and `/mcp` answer 404
+- the brand bridge is in the built CSS once, after Nuxt UI's defaults
+- a second variant adds `@skaile/forge-editor` (and its Nuxt module): the build output and dependency tree contain no `@skaile/forge-settings`, `@skaile/forge-agent-runtime`, `@skaile/forge-common`, `@skaile/workspaces` or `@skaile/forge-chat`
+
+```sh
+node scripts/packed-consumer.mjs            # both variants (~40s, needs registry access)
+node scripts/packed-consumer.mjs base       # layer only
+node scripts/packed-consumer.mjs editor     # layer + @skaile/forge-editor
+```
+
+Exit 0 only when every check prints `PASS`. Unit tests (`bun run test`) cover the layer config itself.

package/assets/css/forge-app.css

@@ -0,0 +1,9 @@
+/*
+ * @skaile/forge-app shared stylesheet, registered once by the layer.
+ * Order matters: the brand bridge must come after "@nuxt/ui" (equal
+ * specificity, source order decides). Capability stylesheets (chat, editor,
+ * inbox) stay in the modules that own them.
+ */
+@import "tailwindcss";
+@import "@nuxt/ui";
+@import "@skaile/brand/nuxt-ui.css";

package/nuxt.config.ts

@@ -0,0 +1,14 @@
+import { fileURLToPath } from "node:url";
+import { defineNuxtConfig } from "nuxt/config";
+
+// Optional layer: `extends: ['@skaile/forge-app']`.
+//
+// - `@nuxt/ui` MUST precede `@skaile/forge-app-actions` (the actions module
+//   refuses to load otherwise and renders Nuxt UI primitives).
+// - `forgeAppActions` is deliberately left unset: no HTTP or MCP endpoint, no
+//   principal/deps resolver. Hosts opt in per feature.
+// - No dependency list, no settings/provider route, no chat or editor wiring.
+export default defineNuxtConfig({
+  modules: ["@nuxt/ui", "@skaile/forge-app-actions"],
+  css: [fileURLToPath(new URL("./assets/css/forge-app.css", import.meta.url))],
+});

package/package.json

@@ -1,6 +1,52 @@
 {
   "name": "@skaile/forge-app",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "1.0.1",
+  "description": "Optional Nuxt layer for Skaile forge apps: Nuxt UI, @skaile/forge-app-actions and the shared Tailwind + brand stylesheet, registered once. Adds no routes, resolvers or permissions.",
+  "type": "module",
+  "packageManager": "bun@1.3.9",
+  "main": "./nuxt.config.ts",
+  "files": [
+    "nuxt.config.ts",
+    "assets",
+    "README.md",
+    "CHANGELOG.md",
+    "LICENSE"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/skaile-ai/forge-app.git"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "license": "MIT",
+  "scripts": {
+    "test": "bun x --bun vitest run",
+    "typecheck": "tsc --noEmit",
+    "proof:packed": "node scripts/packed-consumer.mjs",
+    "check": "bun run format && bun run lint",
+    "format": "biome format --write nuxt.config.ts tests scripts",
+    "lint": "biome lint --fix --unsafe nuxt.config.ts tests scripts"
+  },
+  "dependencies": {
+    "@skaile/brand": "^0.7.0",
+    "@skaile/forge-app-actions": "^0.4.0 || ^0.5.0"
+  },
+  "peerDependencies": {
+    "@nuxt/ui": "^4.11.1",
+    "nuxt": "^4.0.0",
+    "tailwindcss": "^4.0.0"
+  },
+  "devDependencies": {
+    "@biomejs/biome": "^2.4.9",
+    "@nuxt/ui": "^4.11.1",
+    "@types/node": "^22.0.0",
+    "nuxt": "^4.0.0",
+    "tailwindcss": "^4.0.0",
+    "typescript": "^5.0.0",
+    "vitest": "^3.2.0"
+  },
+  "engines": {
+    "node": ">=20"
+  }
+}