@vibesdotdev/applets 0.0.0-stage → 1.0.0-rc.2

package/dist/contribution-registry.js

@@ -0,0 +1,488 @@
+import { CaughtFailureSchema, isCapabilityError, CapabilityError } from '@vibesdotdev/kernel';
+import * as z from 'zod/v4';
+import { APPLET_DISPATCH_PROTOCOL_VERSION, appletDispatchWireResponseSchema, appletCorrelationIdSchema, appletDispatchErrorMessageSchema } from "./schemas/dispatch.js";
+import { getLogger } from '@vibesdotdev/logging';
+import { authorizeAppletContribution, isContributionRegistrable } from "./authorization.js";
+/**
+ * Host-assigned identities.
+ *
+ * Namespacing is what stops collision and squatting, so it is computed here
+ * from the slug rather than read from anything the author supplied. CLI
+ * commands are always mounted under `vibes applet <slug>` and can never reach
+ * the top level, because this function cannot express a top-level command.
+ */
+export function appletToolId(slug, name) {
+    return `applet.${slug}.tool.${name}`;
+}
+export function appletCliCommandId(slug, command) {
+    return `applet.${slug}.cli.${command}`;
+}
+export function appletCliCommandPath(slug, command) {
+    return ['vibes', 'applet', slug, command];
+}
+export function appletEventHandlerId(slug, name) {
+    return `applet.${slug}.event.${name}`;
+}
+/**
+ * Decide what a subscription registers, given what the subscriber actually
+ * granted. Pure: it reads no runtime and performs no I/O.
+ */
+export function planAppletContributionRegistrations(input) {
+    const { slug, contributes, grantedCapabilities } = input;
+    const plan = { registered: [], withheld: [] };
+    if (!contributes)
+        return plan;
+    const granted = new Set(grantedCapabilities);
+    const consider = (kind, id, requires, impl) => {
+        if (isContributionRegistrable(requires, grantedCapabilities)) {
+            plan.registered.push({ kind, id, requires, impl });
+            return;
+        }
+        plan.withheld.push({
+            kind,
+            id,
+            missing: requires.filter((capability) => !granted.has(capability))
+        });
+    };
+    for (const tool of contributes.tools) {
+        consider('tools/tool', appletToolId(slug, tool.name), tool.requires, tool.impl);
+    }
+    for (const command of contributes.cli) {
+        consider('cli/command', appletCliCommandId(slug, command.command), command.requires, command.impl);
+    }
+    for (const handler of contributes.events) {
+        consider('applet/event-handler', appletEventHandlerId(slug, handler.name), handler.requires, handler.impl);
+    }
+    return plan;
+}
+/**
+ * Runtime key for one contributed implementation: `<entry>#<export>`.
+ *
+ * CANONICAL definition. The compiler emits this key onto the bundle's
+ * `__contributions` map and the runner reads it back, so the two must agree
+ * exactly or every dispatch resolves to nothing.
+ *
+ * `apps/applet-runner` mirrors this by value because it takes no @vibesdotdev
+ * runtime dependency; `apps/applet-runner/test/protocol-parity.test.ts` asserts
+ * the two implementations agree.
+ */
+export function appletContributionKey(impl) {
+    return `${impl.entry}#${impl.export}`;
+}
+export { APPLET_DISPATCH_PROTOCOL_VERSION } from "./schemas/dispatch.js";
+/**
+ * How long the HOST waits for a dispatch reply.
+ *
+ * This is the bound that actually protects the caller. The runner's own timeout
+ * cannot interrupt synchronous applet code — a `while (true)` in a contributed
+ * function blocks that frame's only thread and no reply is ever sent — so
+ * without a host-side deadline the caller waits forever on a hostile applet.
+ */
+export const APPLET_DISPATCH_TIMEOUT_MS = 20_000;
+export class AppletAuthorizationError extends CapabilityError {
+    constructor(reason, detail) {
+        super(detail, 'PERMISSION_DENIED', { reason, retryable: false });
+        this.name = 'AppletAuthorizationError';
+    }
+}
+/** Longest applet-supplied error text the host will carry. */
+export const MAX_DISPATCH_ERROR_MESSAGE = 500;
+function isPromiseLike(value) {
+    if (typeof value !== 'object' || value === null)
+        return false;
+    return z.object({ catch: z.function() }).safeParse(value).success;
+}
+/** Strip control characters before applet text reaches a log or a prompt. One space per control, like the regex it replaces. */
+function stripDispatchControlChars(text) {
+    let out = '';
+    for (const char of text) {
+        const code = char.codePointAt(0) ?? 0;
+        out += code < 0x20 || code === 0x7f ? ' ' : char;
+    }
+    return out;
+}
+/**
+ * Parse the ONE wire crossing from the sandbox into the host.
+ *
+ * The response is third-party output and was previously trusted raw: a malformed
+ * `{ok:false}` threw a TypeError instead of a dispatch error, and an
+ * applet-controlled `error.message` propagated verbatim into an agent's tool
+ * result — unbounded, control-character-bearing, prompt-injection-shaped.
+ */
+export function parseAppletDispatchResponse(value) {
+    const parsed = appletDispatchWireResponseSchema.safeParse(value);
+    if (!parsed.success) {
+        return { ok: false, error: { message: 'Applet returned a malformed dispatch response' } };
+    }
+    if (parsed.data.ok)
+        return { ok: true, result: parsed.data.result };
+    const message = z
+        .string()
+        .safeParse(appletDispatchErrorMessageSchema.safeParse(parsed.data.error).data?.message).data;
+    return {
+        ok: false,
+        error: {
+            message: message === undefined
+                ? 'Applet dispatch failed'
+                : stripDispatchControlChars(message).slice(0, MAX_DISPATCH_ERROR_MESSAGE)
+        }
+    };
+}
+export class AppletDispatchError extends CapabilityError {
+    /**
+     * Whether the HOST produced this, rather than relaying applet text.
+     *
+     * Without it an applet can forge a host error: returning
+     * `{ok:false, error:{message:'Applet dispatch timed out.'}}` produced a
+     * byte-identical exception, so a caller could not tell a real deadline from
+     * an applet pretending there was one.
+     */
+    hostOriginated;
+    constructor(message, init) {
+        super(message, init.code, { reason: init.reason, cause: init.cause });
+        this.name = 'AppletDispatchError';
+        this.hostOriginated = init.hostOriginated;
+    }
+}
+/**
+ * The shape a `tools/tool` implementation must have.
+ *
+ * `ToolImplementation.execute` takes THREE arguments — `(input, runtime, ctx)` —
+ * so a shim with a one-argument `execute` cannot be registered as a tool at all.
+ * Mirrored structurally rather than imported: `applets` must not take a
+ * dependency on the tools package for one interface.
+ *
+ * Honest limit: this is a STRUCTURAL mirror, not a proof. TypeScript accepts a
+ * narrower implementation for a wider signature, so nothing here fails if the
+ * tools contract changes. The parity that matters would be a test importing the
+ * real `ToolImplementation`, which the package edge forbids.
+ */
+/**
+ * Deep-copy args, and fail with a contract error rather than a platform one.
+ *
+ * These cross a MessagePort, so they must be structured-cloneable by definition.
+ * A caller passing a function or a class instance previously got a bare
+ * `DOMException: The object can not be cloned`, which names neither the caller's
+ * mistake nor the boundary that requires it.
+ */
+function cloneDispatchArgs(input) {
+    const attempt = (() => {
+        try {
+            return { ok: true, cloned: structuredClone(input) };
+        }
+        catch (error) {
+            return { ok: false, error };
+        }
+    })();
+    if (!attempt.ok) {
+        throw new AppletDispatchError('Dispatch arguments must be structured-cloneable wire data. Functions and symbol values throw here; note that class instances are FLATTENED to plain objects and symbol KEYS are dropped, because that is what structured cloning does.', {
+            code: 'INVALID_INPUT',
+            reason: 'applet-dispatch-args-invalid',
+            hostOriginated: true,
+            cause: CaughtFailureSchema.safeParse(attempt.error).data
+        });
+    }
+    return attempt.cloned;
+}
+/** Reject rather than wait forever when the far side never answers. */
+async function withDispatchDeadline(runtime, timeoutMs, send) {
+    const outcome = await (async () => {
+        try {
+            return {
+                ok: true,
+                response: await runtime.lifecycle.wait(send, { timeoutMs, reason: 'applet-dispatch' })
+            };
+        }
+        catch (error) {
+            return { ok: false, error };
+        }
+    })();
+    if (!outcome.ok) {
+        const error = outcome.error;
+        if (error instanceof Error && isCapabilityError(error) && error.code === 'TIMEOUT') {
+            throw new AppletDispatchError('Applet dispatch timed out.', {
+                code: 'TIMEOUT',
+                reason: 'applet-dispatch-timeout',
+                hostOriginated: true,
+                cause: error
+            });
+        }
+        throw error;
+    }
+    return outcome.response;
+}
+/**
+ * Correlation ids must satisfy the runner protocol's rule, or the far side
+ * rejects the envelope: 32-128 chars of `[A-Za-z0-9_-]`.
+ */
+export function isAppletCorrelationId(value) {
+    return appletCorrelationIdSchema.safeParse(value).success;
+}
+/**
+ * Build the implementation the host registers for one contributed descriptor.
+ *
+ * The returned object closes over identity and a transport. It never receives,
+ * resolves, or executes applet code — `impl` travels as data inside the
+ * envelope and is resolved on the far side of the boundary.
+ */
+export function createAppletDispatchShim(input) {
+    const { registration, release, transport, readAuthorization, newCorrelationId } = input;
+    const now = input.now ?? (() => new Date());
+    const requestedTimeout = input.dispatchTimeoutMs ?? APPLET_DISPATCH_TIMEOUT_MS;
+    // A zero or negative deadline is a caller mistake, not "no deadline": zero
+    // rejected every dispatch immediately and negatives were clamped to 1ms by the
+    // platform with a warning. Refuse rather than silently behave surprisingly.
+    if (!Number.isFinite(requestedTimeout) || requestedTimeout <= 0) {
+        throw new AppletDispatchError('Dispatch timeout must be a positive number of milliseconds', {
+            code: 'INVALID_INPUT',
+            reason: 'applet-dispatch-timeout-invalid',
+            hostOriginated: true
+        });
+    }
+    const dispatchTimeoutMs = requestedTimeout;
+    const recorder = input.recordObservation;
+    /** The logger a failed ledger append is forwarded through (declared once, per the logging contract). */
+    const logger = getLogger('applets:contribution-registry', input.runtime);
+    /** A ledger append failed: reported on the handed runtime, never thrown into the dispatch. */
+    const logRecorderFailure = (error) => {
+        logger.warn('applet observation recorder failed; dispatch continues', { error });
+    };
+    /**
+     * Never let the ledger break a dispatch.
+     *
+     * The comment above promises this and the code did not deliver it: a
+     * recorder that threw propagated straight out of `execute`, so a broken
+     * ledger took the feature down with it — which is precisely how a ledger ends
+     * up switched off. A failed append loses a row; a failed dispatch loses the
+     * user's work.
+     */
+    const record = (observation) => {
+        if (!recorder)
+            return;
+        // A real recorder is async DB I/O. `async () => { throw }` satisfies a
+        // `() => void` signature, so catching only synchronous throws left the
+        // realistic case escaping as an unhandled rejection.
+        const attempt = (() => {
+            try {
+                // The recorder promises `void`, but a real one is async DB I/O
+                // whose rejection must be joined below, not dropped.
+                const returned = recorder(observation);
+                return { ok: true, returned };
+            }
+            catch (error) {
+                return { ok: false, error };
+            }
+        })();
+        if (!attempt.ok) {
+            // Intentionally not rethrown (see above); the reason is logged.
+            logRecorderFailure(CaughtFailureSchema.safeParse(attempt.error).data);
+            return;
+        }
+        if (isPromiseLike(attempt.returned)) {
+            // A bare expression statement: the handler only logs, which the
+            // failure contract admits exactly in this terminal position. A
+            // rejected recorder promise joins here: parsed, logged, and
+            // contained — the ledger cannot break a dispatch.
+            attempt.returned.catch((reason) => {
+                logger.warn('applet observation recorder failed; dispatch continues', {
+                    error: reason
+                });
+            });
+        }
+    };
+    return {
+        registrationId: registration.id,
+        async execute(args = {}) {
+            // Re-read, every call. A revoked subscription must fail on the next
+            // dispatch, not at the next runtime boot.
+            const state = await readAuthorization();
+            const decision = authorizeAppletContribution({
+                subscription: state.subscription,
+                grant: state.grant,
+                lease: state.lease,
+                // Default-closed. Keying this off the surface enum meant any future
+                // surface value silently lost lease enforcement with no test failing.
+                leaseRequired: true,
+                release,
+                requires: registration.requires,
+                now: now()
+            });
+            const observed = (outcome, reason) => {
+                record({
+                    instanceId: state.subscription.instanceId,
+                    subscriptionId: state.subscription.id,
+                    capabilityGrantId: state.grant.id,
+                    release,
+                    registrationId: registration.id,
+                    capabilities: registration.requires,
+                    outcome,
+                    // A machine reason only. Applet-supplied text here would put
+                    // attacker-chosen strings into an operator's ledger.
+                    reason
+                });
+            };
+            if (!decision.allowed) {
+                // A refusal is the row worth having: "nothing happened" and
+                // "something was stopped" are indistinguishable without it.
+                observed('denied', decision.reason);
+                throw new AppletAuthorizationError(decision.reason, decision.detail);
+            }
+            const correlationId = newCorrelationId();
+            if (!isAppletCorrelationId(correlationId)) {
+                throw new AppletDispatchError('Dispatch correlation id is not protocol-valid', {
+                    code: 'INTERNAL',
+                    reason: 'applet-dispatch-correlation-invalid',
+                    hostOriginated: true
+                });
+            }
+            // Authorization proved a live lease exists; narrow for the envelope.
+            const lease = state.lease;
+            if (!lease) {
+                throw new AppletDispatchError('Dispatch requires a live launch lease', {
+                    code: 'INTERNAL',
+                    reason: 'applet-dispatch-lease-missing',
+                    hostOriginated: true
+                });
+            }
+            const response = parseAppletDispatchResponse(await withDispatchDeadline(input.runtime, dispatchTimeoutMs, () => transport.send({
+                type: 'dispatch',
+                version: APPLET_DISPATCH_PROTOCOL_VERSION,
+                correlationId,
+                instanceId: state.subscription.instanceId,
+                release,
+                registrationId: registration.id,
+                runId: lease.runId,
+                leaseId: lease.id,
+                impl: registration.impl,
+                // Deep-copied. `{...args}` is SHALLOW: a transport could reach through
+                // a nested object and mutate the caller's own data, which is the
+                // opposite of what the previous comment here claimed.
+                args: cloneDispatchArgs(args)
+            })));
+            if (!response.ok) {
+                observed('failed', 'dispatch-failed');
+                throw new AppletDispatchError(response.error.message, {
+                    code: 'INTERNAL',
+                    reason: 'applet-dispatch-failed',
+                    hostOriginated: false
+                });
+            }
+            observed('allowed', null);
+            return response.result;
+        }
+    };
+}
+/**
+ * The loader the host registers, in the shape `runtime.registerLoader` expects.
+ *
+ * `ImplementationLoader<T> = () => Promise<{ impl: T }>`. The blessed lazy
+ * pattern normally has the loader `import()` an implementation module — here it
+ * deliberately does not. There is nothing to import: the implementation lives
+ * inside the sandbox, and the loader hands back a shim that dispatches to it.
+ *
+ * This is the strongest form of the invariant. The usual lazy loader defers an
+ * import; this one has no import to defer, at any point, ever.
+ *
+ * Register with:
+ *   runtime.registerLoader(registration.kind, registration.id, loader)
+ */
+export function createAppletContributionLoader(input) {
+    return async () => ({ impl: createAppletDispatchShim(input) });
+}
+/**
+ * Map a manifest's `contributes` onto the compiler's contribution input.
+ *
+ * The translation exists because the two sides own different vocabularies:
+ * Applets declares WHAT a release contributes and why; Platform owns source,
+ * compilation, bundles, and releases and only needs to know WHICH named exports
+ * to expose. Keeping the compiler Applet-agnostic is what stops applet semantics
+ * leaking into the build.
+ *
+ * Deduplicated on the same `<entry>#<export>` key the compiler refuses
+ * duplicates on: two contributions may legitimately share one implementation
+ * (a tool and a CLI command over the same function), and that must not become a
+ * publish-time failure.
+ */
+export function appletCompileContributions(contributes) {
+    if (!contributes)
+        return [];
+    const out = [];
+    const seen = new Set();
+    const add = (impl) => {
+        // Only client implementations live in the browser bundle. A server
+        // implementation is a publish-time rejection today, and if one ever ships
+        // it does not belong in the runner's module.
+        if (impl.surface !== 'client')
+            return;
+        const key = appletContributionKey(impl);
+        if (seen.has(key))
+            return;
+        seen.add(key);
+        out.push({ entry: impl.entry, exportName: impl.export });
+    };
+    for (const tool of contributes.tools)
+        add(tool.impl);
+    for (const command of contributes.cli)
+        add(command.impl);
+    for (const handler of contributes.events)
+        add(handler.impl);
+    return out;
+}
+/**
+ * Turn live subscriptions into a registration plan.
+ *
+ * Pure. Registration decides only what EXISTS; every dispatch re-derives
+ * authority through `authorizeAppletContribution`, so nothing here is a security
+ * decision and a stale plan cannot grant anything. What it must get right is the
+ * opposite: never registering something the subscriber did not consent to, so a
+ * revoked or mismatched subscription contributes nothing at all.
+ *
+ * Reasons are recorded rather than silently dropped, because "my applet's tool
+ * isn't there" is otherwise unanswerable.
+ */
+export function resolveSubscribedContributions(subscribed) {
+    const plan = { registered: [], withheld: [], skipped: [] };
+    for (const entry of subscribed) {
+        const { subscription, grant, slug, definitionManifest } = entry;
+        const skip = (reason) => {
+            plan.skipped.push({ subscriptionId: subscription.id, reason });
+        };
+        if (subscription.revokedAt !== null || subscription.state !== 'active') {
+            skip(`subscription is ${subscription.state}`);
+            continue;
+        }
+        if (grant.id !== subscription.capabilityGrantId) {
+            skip('grant does not belong to this subscription');
+            continue;
+        }
+        if (grant.revokedAt !== null) {
+            skip('capability grant was revoked');
+            continue;
+        }
+        if (grant.release.componentId !== subscription.release.componentId ||
+            grant.release.version !== subscription.release.version ||
+            grant.release.bundleHash !== subscription.release.bundleHash ||
+            // `manifestHash` too: authorization compares it, so omitting it here
+            // registered tools that every dispatch would then deny.
+            (grant.release.manifestHash ?? null) !== (subscription.release.manifestHash ?? null)) {
+            skip('grant was consented for a different release');
+            continue;
+        }
+        if (!definitionManifest) {
+            // An instance created before manifests were stored, or one whose stored
+            // manifest failed to parse and was read as null. Either way there is
+            // nothing to read, and inventing a default would invent authority.
+            skip('instance has no definition manifest');
+            continue;
+        }
+        const contributions = planAppletContributionRegistrations({
+            slug,
+            contributes: definitionManifest.contributes,
+            grantedCapabilities: grant.capabilities
+        });
+        plan.registered.push(...contributions.registered);
+        plan.withheld.push(...contributions.withheld);
+    }
+    return plan;
+}
+//# sourceMappingURL=contribution-registry.js.map

package/dist/contribution-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contribution-registry.js","sourceRoot":"","sources":["../src/contribution-registry.ts"],"names":[],"mappings":"AA2BA,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,eAAe,EAAoF,MAAM,qBAAqB,CAAC;AAGhL,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EACN,gCAAgC,EAChC,gCAAgC,EAChC,yBAAyB,EACzB,gCAAgC,EAGhC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,2BAA2B,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAwB5F;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,IAAY;IACtD,OAAO,UAAU,IAAI,SAAS,IAAI,EAAE,CAAC;AACtC,CAAC;AACD,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,OAAe;IAC/D,OAAO,UAAU,IAAI,QAAQ,OAAO,EAAE,CAAC;AACxC,CAAC;AACD,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,OAAe;IACjE,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AAC3C,CAAC;AACD,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,IAAY;IAC9D,OAAO,UAAU,IAAI,UAAU,IAAI,EAAE,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mCAAmC,CAAC,KAInD;IACA,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,mBAAmB,EAAE,GAAG,KAAK,CAAC;IACzD,MAAM,IAAI,GAA2B,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACtE,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAE9B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,CAChB,IAA4B,EAC5B,EAAU,EACV,QAA2B,EAC3B,IAAmB,EACZ,EAAE;QACT,IAAI,yBAAyB,CAAC,QAAQ,EAAE,mBAAmB,CAAC,EAAE,CAAC;YAC9D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YACnD,OAAO;QACR,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAClB,IAAI;YACJ,EAAE;YACF,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;SAClE,CAAC,CAAC;IACJ,CAAC,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;QACtC,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACjF,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,WAAW,CAAC,GAAG,EAAE,CAAC;QACvC,QAAQ,CACP,aAAa,EACb,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,EACzC,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,IAAI,CACZ,CAAC;IACH,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;QAC1C,QAAQ,CACP,sBAAsB,EACtB,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EACxC,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,IAAI,CACZ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAuC;IAC5E,OAAO,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;AACvC,CAAC;AAED,OAAO,EAAE,gCAAgC,EAAE,MAAM,uBAAuB,CAAC;AAQzE;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC;AASjD,MAAM,OAAO,wBAAyB,SAAQ,eAAe;IAC5D,YAAY,MAAc,EAAE,MAAc;QACzC,KAAK,CAAC,MAAM,EAAE,mBAAmB,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACxC,CAAC;CACD;AAED,8DAA8D;AAC9D,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAM9C,SAAS,aAAa,CAAC,KAA0B;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,OAAO,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACnE,CAAC;AAED,gIAAgI;AAChI,SAAS,yBAAyB,CAAC,IAAY;IAC9C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACtC,GAAG,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAAc;IACzD,MAAM,MAAM,GAAG,gCAAgC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACjE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,+CAA+C,EAAE,EAAE,CAAC;IAC3F,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACpE,MAAM,OAAO,GAAG,CAAC;SACf,MAAM,EAAE;SACR,SAAS,CAAC,gCAAgC,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;IAC9F,OAAO;QACN,EAAE,EAAE,KAAK;QACT,KAAK,EAAE;YACN,OAAO,EACN,OAAO,KAAK,SAAS;gBACpB,CAAC,CAAC,wBAAwB;gBAC1B,CAAC,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,0BAA0B,CAAC;SAC3E;KACD,CAAC;AACH,CAAC;AASD,MAAM,OAAO,mBAAoB,SAAQ,eAAe;IACvD;;;;;;;OAOG;IACM,cAAc,CAAU;IACjC,YAAY,OAAe,EAAE,IAA2B;QACvD,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;IAC3C,CAAC;CACD;AAED;;;;;;;;;;;;GAYG;AACH;;;;;;;GAOG;AACH,SAAS,iBAAiB,CAAC,KAAgC;IAC1D,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE;QACrB,IAAI,CAAC;YACJ,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,KAAK,EAAE,CAAC;QACtC,CAAC;IACF,CAAC,CAAC,EAAE,CAAC;IACL,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,mBAAmB,CAC5B,wOAAwO,EACxO;YACC,IAAI,EAAE,eAAe;YACrB,MAAM,EAAE,8BAA8B;YACtC,cAAc,EAAE,IAAI;YACpB,KAAK,EAAE,mBAAmB,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI;SACxD,CACD,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC;AACvB,CAAC;AAGD,uEAAuE;AACvE,KAAK,UAAU,oBAAoB,CAClC,OAAsC,EACtC,SAAiB,EACjB,IAA8B;IAE9B,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE;QACjC,IAAI,CAAC;YACJ,OAAO;gBACN,EAAE,EAAE,IAAa;gBACjB,QAAQ,EAAE,MAAM,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;aACtF,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,KAAK,EAAE,CAAC;QACtC,CAAC;IACF,CAAC,CAAC,EAAE,CAAC;IACL,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,IAAI,KAAK,YAAY,KAAK,IAAI,iBAAiB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACpF,MAAM,IAAI,mBAAmB,CAAC,4BAA4B,EAAE;gBAC3D,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,yBAAyB;gBACjC,cAAc,EAAE,IAAI;gBACpB,KAAK,EAAE,KAAK;aACZ,CAAC,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACb,CAAC;IACD,OAAO,OAAO,CAAC,QAAQ,CAAC;AACzB,CAAC;AAYD;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAa;IAClD,OAAO,yBAAyB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC3D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAqBxC;IACA,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,GAAG,KAAK,CAAC;IACxF,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,gBAAgB,GAAG,KAAK,CAAC,iBAAiB,IAAI,0BAA0B,CAAC;IAC/E,2EAA2E;IAC3E,+EAA+E;IAC/E,4EAA4E;IAC5E,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,IAAI,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,mBAAmB,CAAC,4DAA4D,EAAE;YAC3F,IAAI,EAAE,eAAe;YACrB,MAAM,EAAE,iCAAiC;YACzC,cAAc,EAAE,IAAI;SACpB,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,iBAAiB,GAAG,gBAAgB,CAAC;IAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,iBAAiB,CAAC;IACzC,wGAAwG;IACxG,MAAM,MAAM,GAAG,SAAS,CAAC,+BAA+B,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACzE,8FAA8F;IAC9F,MAAM,kBAAkB,GAAG,CAAC,KAAoB,EAAQ,EAAE;QACzD,MAAM,CAAC,IAAI,CAAC,wDAAwD,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAClF,CAAC,CAAC;IACF;;;;;;;;OAQG;IACH,MAAM,MAAM,GAA8B,CAAC,WAAW,EAAE,EAAE;QACzD,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,uEAAuE;QACvE,uEAAuE;QACvE,qDAAqD;QACrD,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE;YACrB,IAAI,CAAC;gBACJ,+DAA+D;gBAC/D,qDAAqD;gBACrD,MAAM,QAAQ,GAAwB,QAAQ,CAAC,WAAW,CAAC,CAAC;gBAC5D,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,QAAQ,EAAE,CAAC;YACxC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,KAAK,EAAE,CAAC;YACtC,CAAC;QACF,CAAC,CAAC,EAAE,CAAC;QACL,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YACjB,gEAAgE;YAChE,kBAAkB,CAAC,mBAAmB,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;YACtE,OAAO;QACR,CAAC;QACD,IAAI,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,gEAAgE;YAChE,+DAA+D;YAC/D,4DAA4D;YAC5D,kDAAkD;YAClD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,MAAqB,EAAE,EAAE;gBAChD,MAAM,CAAC,IAAI,CAAC,wDAAwD,EAAE;oBACrE,KAAK,EAAE,MAAM;iBACb,CAAC,CAAC;YACJ,CAAC,CAAC,CAAC;QACJ,CAAC;IACF,CAAC,CAAC;IAEF,OAAO;QACN,cAAc,EAAE,YAAY,CAAC,EAAE;QAC/B,KAAK,CAAC,OAAO,CAAC,OAAkC,EAAE;YACjD,oEAAoE;YACpE,0CAA0C;YAC1C,MAAM,KAAK,GAAG,MAAM,iBAAiB,EAAE,CAAC;YACxC,MAAM,QAAQ,GAAG,2BAA2B,CAAC;gBAC5C,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,oEAAoE;gBACpE,sEAAsE;gBACtE,aAAa,EAAE,IAAI;gBACnB,OAAO;gBACP,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,GAAG,EAAE,GAAG,EAAE;aACV,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,CAChB,OAAwC,EACxC,MAAqB,EACd,EAAE;gBACT,MAAM,CAAC;oBACN,UAAU,EAAE,KAAK,CAAC,YAAY,CAAC,UAAU;oBACzC,cAAc,EAAE,KAAK,CAAC,YAAY,CAAC,EAAE;oBACrC,iBAAiB,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE;oBACjC,OAAO;oBACP,cAAc,EAAE,YAAY,CAAC,EAAE;oBAC/B,YAAY,EAAE,YAAY,CAAC,QAAQ;oBACnC,OAAO;oBACP,6DAA6D;oBAC7D,qDAAqD;oBACrD,MAAM;iBACN,CAAC,CAAC;YACJ,CAAC,CAAC;YAEF,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACvB,4DAA4D;gBAC5D,4DAA4D;gBAC5D,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACpC,MAAM,IAAI,wBAAwB,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YACtE,CAAC;YAED,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;YACzC,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC3C,MAAM,IAAI,mBAAmB,CAAC,+CAA+C,EAAE;oBAC9E,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE,qCAAqC;oBAC7C,cAAc,EAAE,IAAI;iBACpB,CAAC,CAAC;YACJ,CAAC;YAED,qEAAqE;YACrE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;YAC1B,IAAI,CAAC,KAAK,EAAE,CAAC;gBACZ,MAAM,IAAI,mBAAmB,CAAC,uCAAuC,EAAE;oBACtE,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE,+BAA+B;oBACvC,cAAc,EAAE,IAAI;iBACpB,CAAC,CAAC;YACJ,CAAC;YAED,MAAM,QAAQ,GAAG,2BAA2B,CAC3C,MAAM,oBAAoB,CAAC,KAAK,CAAC,OAAO,EAAE,iBAAiB,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC;gBAClF,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,gCAAgC;gBACzC,aAAa;gBACb,UAAU,EAAE,KAAK,CAAC,YAAY,CAAC,UAAU;gBACzC,OAAO;gBACP,cAAc,EAAE,YAAY,CAAC,EAAE;gBAC/B,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,OAAO,EAAE,KAAK,CAAC,EAAE;gBACjB,IAAI,EAAE,YAAY,CAAC,IAAI;gBACvB,uEAAuE;gBACvE,iEAAiE;gBACjE,sDAAsD;gBACtD,IAAI,EAAE,iBAAiB,CAAC,IAAI,CAAC;aAC5B,CAAC,CAAC,CACH,CAAC;YAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAClB,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;gBACtC,MAAM,IAAI,mBAAmB,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE;oBACrD,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE,wBAAwB;oBAChC,cAAc,EAAE,KAAK;iBACrB,CAAC,CAAC;YACJ,CAAC;YACD,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAC1B,OAAO,QAAQ,CAAC,MAAM,CAAC;QACxB,CAAC;KACD,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,8BAA8B,CAAC,KAkB9C;IACA,OAAO,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,wBAAwB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAChE,CAAC;AAQD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,0BAA0B,CACzC,WAA0C;IAE1C,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,CAAC;IAC5B,MAAM,GAAG,GAAgC,EAAE,CAAC;IAC5C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAG,CAAC,IAAmB,EAAQ,EAAE;QACzC,mEAAmE;QACnE,0EAA0E;QAC1E,6CAA6C;QAC7C,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ;YAAE,OAAO;QACtC,MAAM,GAAG,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO;QAC1B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,KAAK;QAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrD,KAAK,MAAM,OAAO,IAAI,WAAW,CAAC,GAAG;QAAE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,KAAK,MAAM,OAAO,IAAI,WAAW,CAAC,MAAM;QAAE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,OAAO,GAAG,CAAC;AACZ,CAAC;AAmBD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,8BAA8B,CAC7C,UAAuC;IAEvC,MAAM,IAAI,GAA+B,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAEvF,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAChC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,KAAK,CAAC;QAChE,MAAM,IAAI,GAAG,CAAC,MAAc,EAAQ,EAAE;YACrC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAChE,CAAC,CAAC;QAEF,IAAI,YAAY,CAAC,SAAS,KAAK,IAAI,IAAI,YAAY,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxE,IAAI,CAAC,mBAAmB,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC;YAC9C,SAAS;QACV,CAAC;QACD,IAAI,KAAK,CAAC,EAAE,KAAK,YAAY,CAAC,iBAAiB,EAAE,CAAC;YACjD,IAAI,CAAC,4CAA4C,CAAC,CAAC;YACnD,SAAS;QACV,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC9B,IAAI,CAAC,8BAA8B,CAAC,CAAC;YACrC,SAAS;QACV,CAAC;QACD,IACC,KAAK,CAAC,OAAO,CAAC,WAAW,KAAK,YAAY,CAAC,OAAO,CAAC,WAAW;YAC9D,KAAK,CAAC,OAAO,CAAC,OAAO,KAAK,YAAY,CAAC,OAAO,CAAC,OAAO;YACtD,KAAK,CAAC,OAAO,CAAC,UAAU,KAAK,YAAY,CAAC,OAAO,CAAC,UAAU;YAC5D,qEAAqE;YACrE,wDAAwD;YACxD,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC,EACnF,CAAC;YACF,IAAI,CAAC,6CAA6C,CAAC,CAAC;YACpD,SAAS;QACV,CAAC;QACD,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACzB,wEAAwE;YACxE,qEAAqE;YACrE,mEAAmE;YACnE,IAAI,CAAC,qCAAqC,CAAC,CAAC;YAC5C,SAAS;QACV,CAAC;QAED,MAAM,aAAa,GAAG,mCAAmC,CAAC;YACzD,IAAI;YACJ,WAAW,EAAE,kBAAkB,CAAC,WAAW;YAC3C,mBAAmB,EAAE,KAAK,CAAC,YAAY;SACvC,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,IAAI,CAAC;AACb,CAAC"}

package/dist/docs/applets.docs.descriptor.d.ts

@@ -0,0 +1,4 @@
+import type { DocsTopicDescriptor } from '@vibesdotdev/docs-contracts';
+declare const descriptor: DocsTopicDescriptor;
+export default descriptor;
+//# sourceMappingURL=applets.docs.descriptor.d.ts.map

package/dist/docs/applets.docs.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"applets.docs.descriptor.d.ts","sourceRoot":"","sources":["../../src/docs/applets.docs.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAqCvE,QAAA,MAAM,UAAU,EAAE,mBAsCjB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/docs/applets.docs.descriptor.js

@@ -0,0 +1,74 @@
+const appletsMarkdown = `# Applets
+
+Applets are installable web applications pinned to one exact Component release.
+Platform owns source, compilation and releases. Applets owns instances, grants,
+leases, state, subscriptions and provenance.
+
+Resolve the semantic client with \`getVibesAppletsClient(runtime)\`, then bind
+the authenticated owner using \`forRequest(scope)\`. Hosts supply persistence
+through the \`applets/repository\` context. The root exports the semantic
+contract; the explicit \`./client\` entrypoint retains RuntimeAppletsClient.
+
+Compose \`./plugin\` for universal registration, \`./cli/plugin\` for local
+authoring, and \`./svelte/plugin\` for browser tool widgets. CLI and browser
+loaders stay in their scoped entrypoints.
+
+Definitions declare one inventory-backed entrypoint. Contributions name files
+as data; every dispatch rechecks subscriber consent, lease and release identity.
+Typed CapabilityError refusals preserve code and reason. Dispatch failures retain
+their original cause and distinguish host failures from applet refusals.
+
+\`vibes applet list/build/serve/templates/init\` operate on the runtime workspace.
+Serve resolves its host through the runtime, serves external workspaces and
+supplies each applet its \`vibes\` root surface. Declared storage enforces record
+shape, write conditions, quotas and bounds. Cross-origin requests, undeclared
+stores and callbacks over local JSON transport are refused explicitly.
+The Assembly Field template persists settings through this surface without
+writing defaults during hydration; reset persists schema defaults.
+
+Check with \`bun run check\`, \`bun test\` and \`bun run build\`.
+Tests dispatch CLI commands in-process using disposable workspaces and homes.
+The production build excludes tests and retains the Svelte surface.
+
+See SPEC.md for the complete entrypoint and refusal contracts.
+`;
+const descriptor = {
+    kind: 'docs/topic',
+    id: 'applets',
+    title: 'Applets',
+    summary: 'Installable web applications pinned to one exact Component release',
+    body: {
+        type: 'markdown',
+        sourceType: 'raw',
+        source: appletsMarkdown
+    },
+    parent: 'runtime',
+    order: 1,
+    tags: ['applets', 'runtime', 'capabilities', 'consent', 'storage', 'contributions'],
+    surfaces: ['cli', 'web', 'in-app'],
+    hardware: ['consumer', 'cloud'],
+    enabled: true,
+    man: {
+        name: 'applets — installable web applications pinned to an exact release',
+        section: 1,
+        synopsis: 'vibes man applets',
+        options: [],
+        examples: [
+            {
+                description: 'Resolve the canonical client',
+                command: 'const applets = await getVibesAppletsClient(runtime);'
+            },
+            {
+                description: 'Create an instance from an exact release',
+                command: "await applets.instances.create({ release: { componentId, version, bundleHash }, title: 'Notes' })"
+            },
+            {
+                description: 'List local applet projects',
+                command: 'vibes applet list'
+            }
+        ],
+        seeAlso: ['platform.components', 'storage', 'runtime']
+    }
+};
+export default descriptor;
+//# sourceMappingURL=applets.docs.descriptor.js.map

package/dist/docs/applets.docs.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"applets.docs.descriptor.js","sourceRoot":"","sources":["../../src/docs/applets.docs.descriptor.ts"],"names":[],"mappings":"AAEA,MAAM,eAAe,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiCvB,CAAC;AAEF,MAAM,UAAU,GAAwB;IACvC,IAAI,EAAE,YAAY;IAClB,EAAE,EAAE,SAAS;IACb,KAAK,EAAE,SAAS;IAChB,OAAO,EAAE,oEAAoE;IAC7E,IAAI,EAAE;QACL,IAAI,EAAE,UAAU;QAChB,UAAU,EAAE,KAAK;QACjB,MAAM,EAAE,eAAe;KACvB;IACD,MAAM,EAAE,SAAS;IACjB,KAAK,EAAE,CAAC;IACR,IAAI,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,eAAe,CAAC;IACnF,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC;IAClC,QAAQ,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;IAC/B,OAAO,EAAE,IAAI;IACb,GAAG,EAAE;QACJ,IAAI,EAAE,mEAAmE;QACzE,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,mBAAmB;QAC7B,OAAO,EAAE,EAAE;QACX,QAAQ,EAAE;YACT;gBACC,WAAW,EAAE,8BAA8B;gBAC3C,OAAO,EAAE,uDAAuD;aAChE;YACD;gBACC,WAAW,EAAE,0CAA0C;gBACvD,OAAO,EACN,mGAAmG;aACpG;YACD;gBACC,WAAW,EAAE,4BAA4B;gBACzC,OAAO,EAAE,mBAAmB;aAC5B;SACD;QACD,OAAO,EAAE,CAAC,qBAAqB,EAAE,SAAS,EAAE,SAAS,CAAC;KACtD;CACD,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/host/local-host.contract.d.ts

@@ -0,0 +1,7 @@
+import type { RuntimeClient } from '@vibesdotdev/kernel/client';
+export declare const LOCAL_APPLET_HOST_ID = "applets.local-host";
+/** Server-only host operations, resolved from the request's handed runtime. */
+export interface LocalAppletHost extends RuntimeClient {
+    handleRpc(projectId: string, request: Request): Promise<Response>;
+}
+//# sourceMappingURL=local-host.contract.d.ts.map

package/dist/host/local-host.contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-host.contract.d.ts","sourceRoot":"","sources":["../../src/host/local-host.contract.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAEhE,eAAO,MAAM,oBAAoB,uBAAuB,CAAC;AAEzD,+EAA+E;AAC/E,MAAM,WAAW,eAAgB,SAAQ,aAAa;IACrD,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CAClE"}

package/dist/host/local-host.contract.js

@@ -0,0 +1,2 @@
+export const LOCAL_APPLET_HOST_ID = 'applets.local-host';
+//# sourceMappingURL=local-host.contract.js.map

package/dist/host/local-host.contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-host.contract.js","sourceRoot":"","sources":["../../src/host/local-host.contract.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,oBAAoB,GAAG,oBAAoB,CAAC"}

package/dist/host/local-host.impl.d.ts

@@ -0,0 +1,9 @@
+import { type VibesRuntime } from '@vibesdotdev/kernel';
+import { BaseRuntimeClient } from '@vibesdotdev/kernel/client';
+import type { LocalAppletHost } from './local-host.contract.ts';
+export default class RuntimeLocalAppletHost extends BaseRuntimeClient<VibesRuntime> implements LocalAppletHost {
+    private readonly peers;
+    handleRpc(projectId: string, request: Request): Promise<Response>;
+    protected onDispose(): Promise<void>;
+}
+//# sourceMappingURL=local-host.impl.d.ts.map

package/dist/host/local-host.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-host.impl.d.ts","sourceRoot":"","sources":["../../src/host/local-host.impl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAK/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAEhE,MAAM,CAAC,OAAO,OAAO,sBAAuB,SAAQ,iBAAiB,CAAC,YAAY,CAAE,YAAW,eAAe;IAC7G,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA+D;IAE/E,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;cAwB9C,SAAS;CAMlC"}