@theaiplatform/miniapp-sdk 0.1.0-pr.6741.f8725bd → 0.1.0

package/README.md

@@ -8,8 +8,9 @@ pnpm add @theaiplatform/miniapp-sdk
 ```
 
 The package provides the host-injected SDK API, isolated surface lifecycle
-types, browser helpers, manifest schema, and the Rspack/Rslib integration used
-to produce descriptor-backed Module Federation targets.
+types, browser helpers, portable React UI components, manifest schema, and the
+Rspack/Rslib integration used to produce descriptor-backed Module Federation
+targets.
 
 Start with the [Miniapp SDK documentation](https://docs.theaiplatform.app/miniapps/).
 
@@ -18,6 +19,11 @@ Start with the [Miniapp SDK documentation](https://docs.theaiplatform.app/miniap
 - `@theaiplatform/miniapp-sdk`
 - `@theaiplatform/miniapp-sdk/sdk`
 - `@theaiplatform/miniapp-sdk/web`
+- `@theaiplatform/miniapp-sdk/ui`
+- `@theaiplatform/miniapp-sdk/ui/wasm`
+- `@theaiplatform/miniapp-sdk/ui/styles.css`
+- `@theaiplatform/miniapp-sdk/ui/tailwind.css`
+- `@theaiplatform/miniapp-sdk/ui-components.json`
 - `@theaiplatform/miniapp-sdk/surface`
 - `@theaiplatform/miniapp-sdk/config`
 - `@theaiplatform/miniapp-sdk/rspack`
@@ -25,6 +31,100 @@ Start with the [Miniapp SDK documentation](https://docs.theaiplatform.app/miniap
 
 The host API is injected at runtime. Importing an entry point is safe in build
 tools and tests; host-backed calls fail when used outside a supported runtime.
+`sdk.storage` provides revisioned non-secret JSON scoped by the host to the
+active workspace and exact package. `sdk.presence` provides host-stamped,
+ephemeral room membership and state; package code never supplies participant
+identity. On supported desktop surfaces, `sdk.http` sends bounded HTTP(S)
+requests through host consent instead of browser `fetch`, and
+`sdk.credentials` lists metadata-only HTTP credential references. Credential
+secrets remain in the host vault and are injected only by the native request
+authority.
+
+## Discovery metadata
+
+Descriptor-backed packages may assign up to three unique
+`presentation.categories`. Import the `MiniAppCategory` type from the package
+root or `/config`; accepted values are `productivity`, `developer-tools`,
+`creativity`, `communication`, `data-and-analytics`, `business`, `education`,
+`media-and-entertainment`, `utilities`, and `other`.
+
+Do not add an authored `includes` field. The host derives the package's stable,
+counted capability summary from its verified `contributions`, so Marketplace
+details cannot drift from the code the descriptor is allowed to expose.
+
+## Portable UI
+
+Import the precompiled stylesheet once at the miniapp entry point, then use
+components from the public UI entry. React 19 is a peer dependency.
+
+```tsx
+import '@theaiplatform/miniapp-sdk/ui/styles.css';
+
+import {
+  Button,
+  Card,
+  CardContent,
+  CardHeader,
+  CardTitle,
+} from '@theaiplatform/miniapp-sdk/ui';
+
+export function WelcomeCard() {
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle>Ready to build</CardTitle>
+      </CardHeader>
+      <CardContent>
+        <Button>Continue</Button>
+      </CardContent>
+    </Card>
+  );
+}
+```
+
+Tailwind v4 miniapps can instead import the source integration after
+`tailwindcss` and `tw-animate-css`; it supplies the platform theme and scans the
+SDK's UI bundle for component classes.
+
+```css
+@import 'tailwindcss' source(none);
+@import 'tw-animate-css';
+@import '@theaiplatform/miniapp-sdk/ui/tailwind.css';
+
+@source './src';
+```
+
+Use `installMiniAppAppearanceSync()` from the `/web` entry to apply the host's
+light/dark theme and bounded UI scale. Tools and agents can read the exported
+`ui-components.json` catalog to discover the supported component families and
+style entry points without importing application-private packages.
+
+### Rust/WASM UI
+
+Rust/WASM miniapps can render the same public component library through the
+imperative `/ui/wasm` entry. It accepts a bounded serializable model, owns its
+React root and providers, and emits serializable actions with stable control
+IDs, entity IDs, model revisions, and unique event IDs.
+
+```ts
+import '@theaiplatform/miniapp-sdk/ui/styles.css';
+import { createMiniAppUiRoot } from '@theaiplatform/miniapp-sdk/ui/wasm';
+
+const ui = createMiniAppUiRoot(element, model, (action) => {
+  wasm.onUiAction(action);
+});
+
+ui.update(nextModel);
+ui.focus('project-name');
+ui.unmount();
+```
+
+The bridge synchronizes theme and UI scale, restores focus for controlled
+dialogs, exposes a live-announcement method, rejects malformed or stale models,
+reports render and dispatch failures explicitly, and makes teardown idempotent.
+See [`examples/wasm-ui`](./examples/wasm-ui) for a clean wasm-bindgen consumer
+that maps JavaScript exceptions to Rust `Result` values and rejects stale or
+replayed actions.
 
 ## License and public policies
 

package/THIRD_PARTY_NOTICES.md

@@ -2,26 +2,54 @@
 
 ## Scope
 
-The `@theaiplatform/miniapp-sdk` package tarball does not embed third-party
-package code. Its `./rspack` entry imports separately installed runtime
-dependencies. Optional peer dependencies are not distributed with this package
-and remain subject to their own licenses.
+The `@theaiplatform/miniapp-sdk` JavaScript entries import separately installed
+runtime dependencies. Its precompiled UI stylesheet is generated with
+Tailwind CSS and `tw-animate-css`; the Tailwind integration stylesheet is
+distributed as source. Optional peer dependencies are not distributed with
+this package and remain subject to their own licenses.
 
 The inventory below records the direct and transitive runtime dependency
-versions resolved by the release workspace lockfile on July 15, 2026. A
+versions resolved by the release workspace lockfile on July 18, 2026. A
 downstream application may resolve a different compatible transitive version
 and is responsible for reviewing the notices required by its own lockfile and
 distribution artifact.
 
-| Relationship     | Package                | Version | License      |
-| ---------------- | ---------------------- | ------: | ------------ |
-| Direct           | `ajv`                  |  8.20.0 | MIT          |
-| Ajv transitive   | `fast-deep-equal`      |   3.1.3 | MIT          |
-| Ajv transitive   | `fast-uri`             |   3.1.2 | BSD-3-Clause |
-| Ajv transitive   | `json-schema-traverse` |   1.0.0 | MIT          |
-| Ajv transitive   | `require-from-string`  |   2.0.2 | MIT          |
-| Direct           | `saxes`                |   6.0.0 | ISC          |
-| Saxes transitive | `xmlchars`             |   2.2.0 | MIT          |
+| Relationship     | Package                        | Version | License      |
+| ---------------- | ------------------------------ | ------: | ------------ |
+| Direct UI        | `@radix-ui/react-alert-dialog` |  1.1.15 | MIT          |
+| Direct UI        | `@radix-ui/react-avatar`       |  1.1.11 | MIT          |
+| Direct UI        | `@radix-ui/react-checkbox`     |   1.3.3 | MIT          |
+| Direct UI        | `@radix-ui/react-compose-refs` |   1.1.2 | MIT          |
+| Direct UI        | `@radix-ui/react-dialog`       |  1.1.15 | MIT          |
+| Direct UI        | `@radix-ui/react-label`        |   2.1.8 | MIT          |
+| Direct UI        | `@radix-ui/react-progress`     |   1.1.8 | MIT          |
+| Direct UI        | `@radix-ui/react-radio-group`  |   1.3.8 | MIT          |
+| Direct UI        | `@radix-ui/react-scroll-area`  |  1.2.10 | MIT          |
+| Direct UI        | `@radix-ui/react-select`       |   2.2.6 | MIT          |
+| Direct UI        | `@radix-ui/react-separator`    |   1.1.8 | MIT          |
+| Direct UI        | `@radix-ui/react-slider`       |   1.3.6 | MIT          |
+| Direct UI        | `@radix-ui/react-slot`         |   1.2.4 | MIT          |
+| Direct UI        | `@radix-ui/react-tabs`         |  1.1.13 | MIT          |
+| Direct UI        | `@radix-ui/react-toggle`       |  1.1.10 | MIT          |
+| Direct UI        | `@radix-ui/react-toggle-group` |  1.1.11 | MIT          |
+| Direct UI        | `@radix-ui/react-tooltip`      |   1.2.8 | MIT          |
+| Direct UI        | `class-variance-authority`     |   0.7.1 | Apache-2.0   |
+| Direct UI        | `clsx`                         |   2.1.1 | MIT          |
+| Direct UI        | `lucide-react`                 |  1.20.0 | ISC          |
+| Direct UI        | `prism-react-renderer`         |   2.4.1 | MIT          |
+| Direct UI        | `react-resizable-panels`       |  4.11.1 | MIT          |
+| Direct UI        | `tailwind-merge`               |   3.6.0 | MIT          |
+| Styles build     | `@tailwindcss/postcss`         |   4.3.0 | MIT          |
+| Styles build     | `tailwindcss`                  |   4.3.0 | MIT          |
+| Styles build     | `tw-animate-css`               |   1.4.0 | MIT          |
+| Direct           | `ajv`                          |  8.20.0 | MIT          |
+| Ajv transitive   | `fast-deep-equal`              |   3.1.3 | MIT          |
+| Ajv transitive   | `fast-uri`                     |   3.1.2 | BSD-3-Clause |
+| Ajv transitive   | `json-schema-traverse`         |   1.0.0 | MIT          |
+| Ajv transitive   | `require-from-string`          |   2.0.2 | MIT          |
+| Direct           | `saxes`                        |   6.0.0 | ISC          |
+| Direct           | `zod`                          |   4.4.3 | MIT          |
+| Saxes transitive | `xmlchars`                     |   2.2.0 | MIT          |
 
 ## License texts