@vibesdotdev/applets 0.0.0-stage → 1.0.0-rc.2

package/dist/tools/applet.schemas.d.ts

@@ -0,0 +1,198 @@
+/**
+ * `applet` tool schemas — owned by applets.
+ *
+ * The agent-facing writer for Applets. The current implementation persists a
+ * compatibility surface-notification projection while canonical Applet
+ * instances converge on exact releases and friendly URLs.
+ */
+import * as z from 'zod/v4';
+declare const SurfaceArtifactSchema: z.ZodObject<{}, z.core.$loose>;
+export declare const AppletSourceFormatSchema: z.ZodEnum<{
+    json: "json";
+    html: "html";
+    "svelte-single-file-component": "svelte-single-file-component";
+    markdown: "markdown";
+}>;
+export declare const AppletOwnerSchema: z.ZodObject<{
+    ownerType: z.ZodEnum<{
+        user: "user";
+        organization: "organization";
+        system: "system";
+    }>;
+    ownerId: z.ZodString;
+}, z.core.$strip>;
+export declare const AppletStoreSchema: z.ZodEnum<{
+    local: "local";
+    "owner-app": "owner-app";
+}>;
+export declare const AppletAdoptionSchema: z.ZodObject<{
+    sourceAppletId: z.ZodString;
+    adoptedAppletId: z.ZodString;
+    url: z.ZodString;
+}, z.core.$strip>;
+export type AppletOwner = z.infer<typeof AppletOwnerSchema>;
+export type AppletStore = z.infer<typeof AppletStoreSchema>;
+export type AppletAdoption = z.infer<typeof AppletAdoptionSchema>;
+export declare const AppletActionInputSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    action: z.ZodLiteral<"create">;
+    title: z.ZodString;
+    detail: z.ZodOptional<z.ZodString>;
+    source: z.ZodOptional<z.ZodString>;
+    sourceFormat: z.ZodOptional<z.ZodEnum<{
+        json: "json";
+        html: "html";
+        "svelte-single-file-component": "svelte-single-file-component";
+        markdown: "markdown";
+    }>>;
+    componentRef: z.ZodOptional<z.ZodString>;
+    templateId: z.ZodOptional<z.ZodString>;
+    content: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>, z.ZodObject<{
+    action: z.ZodLiteral<"list">;
+    status: z.ZodOptional<z.ZodEnum<{
+        pending: "pending";
+        approved: "approved";
+        discarded: "discarded";
+    }>>;
+    limit: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+}, z.core.$strip>, z.ZodObject<{
+    action: z.ZodLiteral<"get">;
+    appletId: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    action: z.ZodLiteral<"update-source">;
+    appletId: z.ZodString;
+    source: z.ZodString;
+    sourceFormat: z.ZodOptional<z.ZodEnum<{
+        json: "json";
+        html: "html";
+        "svelte-single-file-component": "svelte-single-file-component";
+        markdown: "markdown";
+    }>>;
+    detail: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    action: z.ZodLiteral<"templates">;
+}, z.core.$strip>, z.ZodObject<{
+    action: z.ZodLiteral<"adopt">;
+    appletId: z.ZodOptional<z.ZodString>;
+    all: z.ZodOptional<z.ZodLiteral<true>>;
+}, z.core.$strip>], "action">;
+export declare const AppletSummarySchema: z.ZodObject<{
+    id: z.ZodString;
+    summary: z.ZodString;
+    status: z.ZodString;
+    createdAt: z.ZodString;
+    artifactType: z.ZodString;
+    sourceFormat: z.ZodNullable<z.ZodString>;
+    componentRef: z.ZodNullable<z.ZodString>;
+    owner: z.ZodNullable<z.ZodObject<{
+        ownerType: z.ZodEnum<{
+            user: "user";
+            organization: "organization";
+            system: "system";
+        }>;
+        ownerId: z.ZodString;
+    }, z.core.$strip>>;
+    store: z.ZodEnum<{
+        local: "local";
+        "owner-app": "owner-app";
+    }>;
+    url: z.ZodNullable<z.ZodString>;
+    visibility: z.ZodString;
+}, z.core.$strip>;
+export declare const AppletTemplateSummarySchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodString;
+    componentRef: z.ZodString;
+    release: z.ZodObject<{
+        componentId: z.ZodUUID;
+        version: z.ZodString;
+        bundleHash: z.ZodString;
+        manifestHash: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    propsDoc: z.ZodString;
+    requiredProps: z.ZodArray<z.ZodString>;
+    exampleProps: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    tags: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+/** Wire-envelope: no top-level ok; failures throw. */
+export declare const AppletActionOutputSchema: z.ZodObject<{
+    applet: z.ZodOptional<z.ZodObject<{
+        id: z.ZodString;
+        summary: z.ZodString;
+        status: z.ZodString;
+        createdAt: z.ZodString;
+        artifactType: z.ZodString;
+        sourceFormat: z.ZodNullable<z.ZodString>;
+        componentRef: z.ZodNullable<z.ZodString>;
+        owner: z.ZodNullable<z.ZodObject<{
+            ownerType: z.ZodEnum<{
+                user: "user";
+                organization: "organization";
+                system: "system";
+            }>;
+            ownerId: z.ZodString;
+        }, z.core.$strip>>;
+        store: z.ZodEnum<{
+            local: "local";
+            "owner-app": "owner-app";
+        }>;
+        url: z.ZodNullable<z.ZodString>;
+        visibility: z.ZodString;
+    }, z.core.$strip>>;
+    instanceId: z.ZodOptional<z.ZodString>;
+    instanceWarning: z.ZodOptional<z.ZodString>;
+    applets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        summary: z.ZodString;
+        status: z.ZodString;
+        createdAt: z.ZodString;
+        artifactType: z.ZodString;
+        sourceFormat: z.ZodNullable<z.ZodString>;
+        componentRef: z.ZodNullable<z.ZodString>;
+        owner: z.ZodNullable<z.ZodObject<{
+            ownerType: z.ZodEnum<{
+                user: "user";
+                organization: "organization";
+                system: "system";
+            }>;
+            ownerId: z.ZodString;
+        }, z.core.$strip>>;
+        store: z.ZodEnum<{
+            local: "local";
+            "owner-app": "owner-app";
+        }>;
+        url: z.ZodNullable<z.ZodString>;
+        visibility: z.ZodString;
+    }, z.core.$strip>>>;
+    adoptions: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        sourceAppletId: z.ZodString;
+        adoptedAppletId: z.ZodString;
+        url: z.ZodString;
+    }, z.core.$strip>>>;
+    notification: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
+    message: z.ZodOptional<z.ZodString>;
+    templates: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodString;
+        description: z.ZodString;
+        componentRef: z.ZodString;
+        release: z.ZodObject<{
+            componentId: z.ZodUUID;
+            version: z.ZodString;
+            bundleHash: z.ZodString;
+            manifestHash: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        propsDoc: z.ZodString;
+        requiredProps: z.ZodArray<z.ZodString>;
+        exampleProps: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        tags: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export type AppletActionInput = z.infer<typeof AppletActionInputSchema>;
+export type AppletActionOutput = z.infer<typeof AppletActionOutputSchema>;
+export type AppletSummary = z.infer<typeof AppletSummarySchema>;
+export type AppletTemplateSummary = z.infer<typeof AppletTemplateSummarySchema>;
+export type SurfaceArtifactInput = z.infer<typeof SurfaceArtifactSchema>;
+export {};
+//# sourceMappingURL=applet.schemas.d.ts.map

package/dist/tools/applet.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"applet.schemas.d.ts","sourceRoot":"","sources":["../../src/tools/applet.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,QAAA,MAAM,qBAAqB,gCAAoB,CAAC;AAKhD,eAAO,MAAM,wBAAwB;;;;;EAKnC,CAAC;AAgEH,eAAO,MAAM,iBAAiB;;;;;;;iBAG5B,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;EAAiC,CAAC;AAEhE,eAAO,MAAM,oBAAoB;;;;iBAI/B,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BAOlC,CAAC;AAEH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;iBAc9B,CAAC;AAEH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;iBAUtC,CAAC;AAEH,sDAAsD;AACtD,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAmBnC,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAChF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC"}

package/dist/tools/applet.schemas.js

@@ -0,0 +1,136 @@
+/**
+ * `applet` tool schemas — owned by applets.
+ *
+ * The agent-facing writer for Applets. The current implementation persists a
+ * compatibility surface-notification projection while canonical Applet
+ * instances converge on exact releases and friendly URLs.
+ */
+import * as z from 'zod/v4';
+// Local schema wall: applets must not package-depend on system (system→applets cycle).
+// Wire shapes owned by system/os; applets re-validates loosely for tool I/O.
+const SurfaceArtifactSchema = z.looseObject({});
+const SurfaceNotificationSchema = z.looseObject({});
+import { AppletComponentRefSchema } from "../component-ref.js";
+import { componentReleaseRefSchema } from "../schemas/component-release-ref.js";
+export const AppletSourceFormatSchema = z.enum([
+    'svelte-single-file-component',
+    'html',
+    'markdown',
+    'json'
+]);
+const INLINE_SFC_DESCRIPTION = 'COMPATIBILITY-ONLY: inline source for a simple HTML/JS surface. "svelte-single-file-component" is regex-extracted HTML plus inline script evaluated as plain JavaScript, not compiled Svelte: no {expr}, {#if}, export let, or runes. For real Svelte, create a public Component with the components tool and pass its componentRef.';
+const AppletCreateSchema = z.object({
+    action: z.literal('create'),
+    title: z.string().min(1).describe('One-line Applet name shown in HQ and sharing chrome'),
+    detail: z.string().optional().describe('Longer explanation of what the applet is / does'),
+    source: z.string().optional().describe(INLINE_SFC_DESCRIPTION),
+    sourceFormat: AppletSourceFormatSchema.optional().describe('COMPATIBILITY-ONLY: inline source format. Prefer componentRef for real Svelte.'),
+    componentRef: AppletComponentRefSchema.optional().describe('Published public platform Component reference for a component-backed applet. Create and publish it with the components tool.'),
+    templateId: z
+        .string()
+        .min(1)
+        .optional()
+        .describe('Registered hq/applet-template id. See action "templates" for available templates.'),
+    content: z
+        .record(z.string(), z.unknown())
+        .optional()
+        .describe('Structured payload passed to the applet (component props, seed data)')
+});
+const AppletListSchema = z.object({
+    action: z.literal('list'),
+    status: z.enum(['pending', 'approved', 'discarded']).optional(),
+    limit: z.number().int().min(1).max(200).optional().default(50)
+});
+const AppletGetSchema = z.object({
+    action: z.literal('get'),
+    appletId: z.string().min(1).describe('Surface notification id (the artifact id shown in HQ)')
+});
+const AppletTemplatesSchema = z.object({
+    action: z.literal('templates')
+});
+const AppletUpdateSourceSchema = z.object({
+    action: z.literal('update-source'),
+    appletId: z.string().min(1).describe('Surface notification id of the applet to edit'),
+    source: z.string().min(1).describe('Replacement inline source'),
+    sourceFormat: AppletSourceFormatSchema.optional(),
+    detail: z.string().optional().describe('Optionally update the artifact description too')
+});
+const AppletAdoptSchema = z
+    .object({
+    action: z.literal('adopt'),
+    appletId: z
+        .string()
+        .min(1)
+        .optional()
+        .describe('Local system-owned applet notification id to adopt'),
+    all: z.literal(true).optional().describe('Adopt every local system-owned applet notification')
+})
+    .refine((input) => Boolean(input.appletId) !== Boolean(input.all), {
+    message: 'applet adopt requires exactly one of `appletId` or `all: true`.'
+});
+export const AppletOwnerSchema = z.object({
+    ownerType: z.enum(['user', 'organization', 'system']),
+    ownerId: z.string().min(1)
+});
+export const AppletStoreSchema = z.enum(['owner-app', 'local']);
+export const AppletAdoptionSchema = z.object({
+    sourceAppletId: z.string(),
+    adoptedAppletId: z.string(),
+    url: z.string()
+});
+export const AppletActionInputSchema = z.discriminatedUnion('action', [
+    AppletCreateSchema,
+    AppletListSchema,
+    AppletGetSchema,
+    AppletUpdateSourceSchema,
+    AppletTemplatesSchema,
+    AppletAdoptSchema
+]);
+export const AppletSummarySchema = z.object({
+    id: z.string(),
+    summary: z.string(),
+    status: z.string(),
+    createdAt: z.string(),
+    artifactType: z.string(),
+    sourceFormat: z.string().nullable(),
+    componentRef: z.string().nullable(),
+    owner: AppletOwnerSchema.nullable(),
+    store: AppletStoreSchema,
+    /** Canonical or compatibility URL where a human can open this Applet. */
+    url: z.string().nullable(),
+    /** Explains the row's storage location and any HQ visibility limitation. */
+    visibility: z.string()
+});
+export const AppletTemplateSummarySchema = z.object({
+    id: z.string(),
+    name: z.string(),
+    description: z.string(),
+    componentRef: z.string(),
+    release: componentReleaseRefSchema,
+    propsDoc: z.string(),
+    requiredProps: z.array(z.string()),
+    exampleProps: z.record(z.string(), z.unknown()),
+    tags: z.array(z.string())
+});
+/** Wire-envelope: no top-level ok; failures throw. */
+export const AppletActionOutputSchema = z.object({
+    applet: AppletSummarySchema.optional(),
+    /**
+     * The Applet INSTANCE created alongside the surface record, when the caller
+     * pinned an exact Component release.
+     *
+     * Storage declarations, capability grants, subscriptions, and contributions
+     * all hang off an instance; a surface record alone can carry none of them. So
+     * an agent that gets an id back has created something that can grow, and one
+     * that does not has created a notification.
+     */
+    instanceId: z.string().optional(),
+    /** Why no instance was created, when a release was pinned but the lookup failed. */
+    instanceWarning: z.string().optional(),
+    applets: z.array(AppletSummarySchema).optional(),
+    adoptions: z.array(AppletAdoptionSchema).optional(),
+    notification: SurfaceNotificationSchema.optional(),
+    message: z.string().optional(),
+    templates: z.array(AppletTemplateSummarySchema).optional()
+});
+//# sourceMappingURL=applet.schemas.js.map

package/dist/tools/applet.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"applet.schemas.js","sourceRoot":"","sources":["../../src/tools/applet.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,uFAAuF;AACvF,6EAA6E;AAC7E,MAAM,qBAAqB,GAAG,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;AAChD,MAAM,yBAAyB,GAAG,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAEhF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC9C,8BAA8B;IAC9B,MAAM;IACN,UAAU;IACV,MAAM;CACN,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAC3B,sUAAsU,CAAC;AAExU,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,qDAAqD,CAAC;IACxF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;IACzF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IAC9D,YAAY,EAAE,wBAAwB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CACzD,gFAAgF,CAChF;IACD,YAAY,EAAE,wBAAwB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CACzD,8HAA8H,CAC9H;IACD,UAAU,EAAE,CAAC;SACX,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CAAC,mFAAmF,CAAC;IAC/F,OAAO,EAAE,CAAC;SACR,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;SAC/B,QAAQ,EAAE;SACV,QAAQ,CAAC,sEAAsE,CAAC;CAClF,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACzB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CAC9D,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACxB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,uDAAuD,CAAC;CAC7F,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;CAC9B,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,+CAA+C,CAAC;IACrF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IAC/D,YAAY,EAAE,wBAAwB,CAAC,QAAQ,EAAE;IACjD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;CACxF,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC;KACzB,MAAM,CAAC;IACP,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IAC1B,QAAQ,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CAAC,oDAAoD,CAAC;IAChE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oDAAoD,CAAC;CAC9F,CAAC;KACD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;IAClE,OAAO,EAAE,iEAAiE;CAC1E,CAAC,CAAC;AAEJ,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;IACrD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC1B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;AAEhE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;CACf,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE;IACrE,kBAAkB;IAClB,gBAAgB;IAChB,eAAe;IACf,wBAAwB;IACxB,qBAAqB;IACrB,iBAAiB;CACjB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,KAAK,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACnC,KAAK,EAAE,iBAAiB;IACxB,yEAAyE;IACzE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,4EAA4E;IAC5E,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,OAAO,EAAE,yBAAyB;IAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAClC,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAC/C,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CACzB,CAAC,CAAC;AAEH,sDAAsD;AACtD,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,MAAM,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IACtC;;;;;;;;OAQG;IACH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,oFAAoF;IACpF,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,QAAQ,EAAE;IAChD,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IACnD,YAAY,EAAE,yBAAyB,CAAC,QAAQ,EAAE;IAClD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,QAAQ,EAAE;CAC1D,CAAC,CAAC"}

package/dist/tools/index.d.ts

@@ -0,0 +1,3 @@
+export { default as appletDescriptor } from './applet.descriptor.ts';
+export { AppletActionInputSchema, AppletActionOutputSchema, AppletSourceFormatSchema, AppletSummarySchema, AppletTemplateSummarySchema, AppletOwnerSchema, AppletStoreSchema, AppletAdoptionSchema, type AppletActionInput, type AppletActionOutput, type AppletSummary, type AppletTemplateSummary, type AppletOwner, type AppletStore, type AppletAdoption, type SurfaceArtifactInput } from './applet.schemas.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/tools/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EACN,uBAAuB,EACvB,wBAAwB,EACxB,wBAAwB,EACxB,mBAAmB,EACnB,2BAA2B,EAC3B,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,EACpB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,aAAa,EAClB,KAAK,qBAAqB,EAC1B,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,MAAM,qBAAqB,CAAC"}

package/dist/tools/index.js

@@ -0,0 +1,3 @@
+export { default as appletDescriptor } from "./applet.descriptor.js";
+export { AppletActionInputSchema, AppletActionOutputSchema, AppletSourceFormatSchema, AppletSummarySchema, AppletTemplateSummarySchema, AppletOwnerSchema, AppletStoreSchema, AppletAdoptionSchema } from "./applet.schemas.js";
+//# sourceMappingURL=index.js.map

package/dist/tools/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EACN,uBAAuB,EACvB,wBAAwB,EACxB,wBAAwB,EACxB,mBAAmB,EACnB,2BAA2B,EAC3B,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,EASpB,MAAM,qBAAqB,CAAC"}

package/dist/upgrade.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Upgrade evaluation — may a new release inherit prior consent?
+ *
+ * The failure this exists to stop: comparing capability sets and contribution
+ * SHAPES is not enough. Implementation files can be swapped wholesale while
+ * every tag, name, and schema stays byte-identical, which is a total behaviour
+ * replacement running under consent the human gave to different code.
+ *
+ * So the comparison includes the content digest of the immutable file
+ * inventory, which is exactly why `appletCapabilityGrant` pins an exact release.
+ *
+ * The deliberate trade, stated rather than hidden: requiring consent on every
+ * byte change would re-prompt for a typo fix, and a prompt that fires constantly
+ * gets click-throughed — which is worse than not prompting. So a content change
+ * re-prompts only when the release actually holds authority: it requests
+ * capabilities, or it contributes something. A release with neither is a UI
+ * update and upgrades silently.
+ */
+import type { AppletDefinitionManifest } from './schemas/definition.ts';
+import type { AppletSubscription } from './schemas/subscription.ts';
+import type { ComponentReleaseRef } from './schemas/component-release-ref.ts';
+export type AppletUpgradeReason = 'capabilities-widened' | 'contributions-added' | 'config-demanded' | 'contribution-authority-widened' | 'implementation-changed' | 'content-changed' | 'storage-widened' | 'consent-reason-changed' | 'consent-base-unverifiable';
+export interface AppletUpgradeEvaluation {
+    /** `needs-consent` maps to `AppletSubscription['state']`. */
+    decision: 'auto' | 'needs-consent';
+    reasons: AppletUpgradeReason[];
+    /** Digest to persist as `consentedContentDigest` once a human consents. */
+    nextContentDigest: string;
+}
+export declare function computeAppletContentDigest(manifest: Pick<AppletDefinitionManifest, 'files' | 'entrypoint'>): string;
+/**
+ * Compare a candidate release against what the subscriber actually consented to.
+ *
+ * Narrowing is always safe: removing a capability or a contribution needs no new
+ * consent. Only widening, and behaviour replacement, re-prompt.
+ */
+export declare function evaluateAppletUpgrade(input: {
+    subscription: AppletSubscription;
+    /** Capabilities on the live grant — what the human actually approved. */
+    grantedCapabilities: readonly string[];
+    currentManifest: AppletDefinitionManifest;
+    nextManifest: AppletDefinitionManifest;
+    nextRelease: ComponentReleaseRef;
+}): AppletUpgradeEvaluation;
+//# sourceMappingURL=upgrade.d.ts.map

package/dist/upgrade.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade.d.ts","sourceRoot":"","sources":["../src/upgrade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAE9E,MAAM,MAAM,mBAAmB,GAC5B,sBAAsB,GACtB,qBAAqB,GACrB,iBAAiB,GACjB,gCAAgC,GAChC,wBAAwB,GACxB,iBAAiB,GACjB,iBAAiB,GACjB,wBAAwB,GACxB,2BAA2B,CAAC;AAE/B,MAAM,WAAW,uBAAuB;IACvC,6DAA6D;IAC7D,QAAQ,EAAE,MAAM,GAAG,eAAe,CAAC;IACnC,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC/B,2EAA2E;IAC3E,iBAAiB,EAAE,MAAM,CAAC;CAC1B;AAqBD,wBAAgB,0BAA0B,CACzC,QAAQ,EAAE,IAAI,CAAC,wBAAwB,EAAE,OAAO,GAAG,YAAY,CAAC,GAC9D,MAAM,CAWR;AAsCD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC5C,YAAY,EAAE,kBAAkB,CAAC;IACjC,yEAAyE;IACzE,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,eAAe,EAAE,wBAAwB,CAAC;IAC1C,YAAY,EAAE,wBAAwB,CAAC;IACvC,WAAW,EAAE,mBAAmB,CAAC;CACjC,GAAG,uBAAuB,CAqI1B"}

package/dist/upgrade.js

@@ -0,0 +1,179 @@
+/**
+ * Stable comparison key over everything consent depends on.
+ *
+ * Sorted so inventory ORDER cannot change the key. Each field is length-prefixed
+ * rather than delimiter-joined, because a delimiter-joined key collides on
+ * crafted input: `[{path:'a',digest:'x\u0000y'}]` and
+ * `[{path:'a\u0000x',digest:'y'}]` produced the same string.
+ *
+ * Covers more than `files[]`. An earlier version hashed the inventory alone, so
+ * repointing `entrypoint` from `index.html` to `admin.html` inside an identical
+ * inventory yielded an identical key and upgraded silently.
+ *
+ * Not a cryptographic commitment on its own — the per-file SHA-256 digests it
+ * composes are — so this is a comparison key, and named like one.
+ */
+function field(value) {
+    return `${value.length}:${value}`;
+}
+export function computeAppletContentDigest(manifest) {
+    const entries = manifest.files
+        .map((file) => field(file.path) + field(file.digest.toLowerCase().replace(/^sha256:/, '')))
+        .sort();
+    return [
+        `v2`,
+        field(manifest.entrypoint.kind),
+        field(manifest.entrypoint.path),
+        `files:${entries.length}`,
+        ...entries
+    ].join('|');
+}
+function contributionAuthority(manifest) {
+    const out = new Map();
+    const contributes = manifest.contributes;
+    if (!contributes)
+        return out;
+    const add = (kind, name, requires, impl) => {
+        out.set(`${kind}:${name}`, {
+            requires: new Set(requires),
+            entry: impl.entry,
+            export: impl.export
+        });
+    };
+    for (const tool of contributes.tools)
+        add('tools', tool.name, tool.requires, tool.impl);
+    for (const command of contributes.cli)
+        add('cli', command.command, command.requires, command.impl);
+    for (const handler of contributes.events)
+        add('events', handler.name, handler.requires, handler.impl);
+    return out;
+}
+/** Bytes, not the version string. See the same note in `authorization.ts`. */
+function sameRelease(left, right) {
+    return (left.componentId === right.componentId &&
+        left.version === right.version &&
+        left.bundleHash === right.bundleHash &&
+        (left.manifestHash ?? null) === (right.manifestHash ?? null));
+}
+/**
+ * Compare a candidate release against what the subscriber actually consented to.
+ *
+ * Narrowing is always safe: removing a capability or a contribution needs no new
+ * consent. Only widening, and behaviour replacement, re-prompt.
+ */
+export function evaluateAppletUpgrade(input) {
+    const { subscription, grantedCapabilities, currentManifest, nextManifest, nextRelease } = input;
+    const reasons = new Set();
+    const nextContentDigest = computeAppletContentDigest(nextManifest);
+    // `currentManifest` is a caller-supplied comparison base. If it is not the
+    // manifest the subscriber actually consented to, every shape comparison below
+    // is meaningless — a caller passing the definition's LATEST manifest would
+    // silently void `contributions-added` and `implementation-changed`. Refuse to
+    // pretend, and re-prompt.
+    if (computeAppletContentDigest(currentManifest) !== subscription.consentedContentDigest) {
+        reasons.add('consent-base-unverifiable');
+    }
+    // "Widened" means this RELEASE asks for more than the previous release did.
+    //
+    // An earlier version compared against the GRANT, so any capability the human
+    // had declined counted as widening — which meant an applet with one declined
+    // optional capability could NEVER auto-upgrade: every release, unchanged or
+    // not, re-prompted. That trains people to click through prompts, which is the
+    // failure this whole mechanism exists to avoid, and it is the exact argument
+    // made against re-prompting on every byte change a few lines below.
+    //
+    // Whether a capability is currently granted is separate state, checked at
+    // invoke time by `authorizeAppletContribution` and never inferred from the
+    // release comparison.
+    const previouslyRequested = new Set(currentManifest.capabilities.map((capability) => capability.tag));
+    for (const capability of nextManifest.capabilities) {
+        if (!previouslyRequested.has(capability.tag))
+            reasons.add('capabilities-widened');
+    }
+    // A capability going from optional to REQUIRED is a new demand even though
+    // the tag is not new: declining it is no longer possible.
+    const previouslyOptional = new Set(currentManifest.capabilities.filter((c) => !c.required).map((c) => c.tag));
+    for (const capability of nextManifest.capabilities) {
+        if (capability.required && previouslyOptional.has(capability.tag)) {
+            reasons.add('capabilities-widened');
+        }
+    }
+    void grantedCapabilities;
+    // A config key is a demand on the human ("paste your token"), so a NEW key is
+    // authority even when not a byte of code changed. Comparing only tools/cli/
+    // events meant a release could start demanding `api-token` and upgrade
+    // silently on an identical inventory.
+    const configBefore = new Set((currentManifest.contributes?.config ?? []).map((entry) => entry.key));
+    for (const entry of nextManifest.contributes?.config ?? []) {
+        if (!configBefore.has(entry.key))
+            reasons.add('config-demanded');
+    }
+    // The REASON is the text a human actually read when they consented. Same tag,
+    // different stated purpose, is a different request — and comparing tags alone
+    // let a release rewrite the justification silently.
+    const reasonsBefore = new Map(currentManifest.capabilities.map((capability) => [capability.tag, capability.reason]));
+    for (const capability of nextManifest.capabilities) {
+        const previous = reasonsBefore.get(capability.tag);
+        if (previous !== undefined && previous !== capability.reason) {
+            reasons.add('consent-reason-changed');
+        }
+    }
+    // Storage declarations were never compared. A release could add a store, or
+    // escalate an existing one from `applet-owned` to `viewer-owned` — reaching
+    // the END USER's own data — and upgrade silently, because the content digest
+    // covers files and entrypoint only.
+    const storageBefore = new Map(currentManifest.storage.map((store) => [store.id, store]));
+    for (const store of nextManifest.storage) {
+        const previous = storageBefore.get(store.id);
+        if (!previous) {
+            reasons.add('storage-widened');
+            continue;
+        }
+        if (previous.authority !== store.authority ||
+            previous.scope !== store.scope ||
+            (previous.quotaBytes ?? 0) < (store.quotaBytes ?? 0)) {
+            reasons.add('storage-widened');
+        }
+    }
+    const before = contributionAuthority(currentManifest);
+    const after = contributionAuthority(nextManifest);
+    for (const [identity, next] of after) {
+        const previous = before.get(identity);
+        if (!previous) {
+            reasons.add('contributions-added');
+            continue;
+        }
+        for (const capability of next.requires) {
+            if (!previous.requires.has(capability))
+                reasons.add('contribution-authority-widened');
+        }
+        // Same name, same schemas, different code is the bypass this catches.
+        if (next.entry !== previous.entry || next.export !== previous.export) {
+            reasons.add('implementation-changed');
+        }
+    }
+    // Bytes changed. Only material when the release actually holds authority —
+    // but "authority" is far more than capabilities and contributions.
+    //
+    // An earlier version checked only those two and therefore auto-upgraded a
+    // total code replacement over `viewer-owned` storage (the END USER's own
+    // data), a `composition` edge repointed at a different base release, an Asset
+    // swapped to different bytes, and a release newly demanding a config key
+    // named `api-token`. Each of those is authority a human should re-see.
+    const holdsAuthority = nextManifest.capabilities.length > 0 ||
+        after.size > 0 ||
+        nextManifest.storage.length > 0 ||
+        nextManifest.assets.length > 0 ||
+        nextManifest.composition.length > 0 ||
+        (nextManifest.contributes?.config.length ?? 0) > 0;
+    const contentChanged = nextContentDigest !== subscription.consentedContentDigest ||
+        !sameRelease(subscription.release, nextRelease);
+    if (contentChanged && holdsAuthority)
+        reasons.add('content-changed');
+    return {
+        decision: reasons.size > 0 ? 'needs-consent' : 'auto',
+        reasons: [...reasons],
+        nextContentDigest
+    };
+}
+//# sourceMappingURL=upgrade.js.map

package/dist/upgrade.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade.js","sourceRoot":"","sources":["../src/upgrade.ts"],"names":[],"mappings":"AAyCA;;;;;;;;;;;;;;GAcG;AACH,SAAS,KAAK,CAAC,KAAa;IAC3B,OAAO,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,0BAA0B,CACzC,QAAgE;IAEhE,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK;SAC5B,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC;SAC1F,IAAI,EAAE,CAAC;IACT,OAAO;QACN,IAAI;QACJ,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC;QAC/B,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC;QAC/B,SAAS,OAAO,CAAC,MAAM,EAAE;QACzB,GAAG,OAAO;KACV,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACb,CAAC;AAED,SAAS,qBAAqB,CAC7B,QAAkC;IAElC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAoE,CAAC;IACxF,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;IACzC,IAAI,CAAC,WAAW;QAAE,OAAO,GAAG,CAAC;IAC7B,MAAM,GAAG,GAAG,CACX,IAAY,EACZ,IAAY,EACZ,QAA2B,EAC3B,IAAuC,EAChC,EAAE;QACT,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,EAAE;YAC1B,QAAQ,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC;YAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,IAAI,CAAC,MAAM;SACnB,CAAC,CAAC;IACJ,CAAC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,KAAK;QAAE,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACxF,KAAK,MAAM,OAAO,IAAI,WAAW,CAAC,GAAG;QACpC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7D,KAAK,MAAM,OAAO,IAAI,WAAW,CAAC,MAAM;QACvC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7D,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,8EAA8E;AAC9E,SAAS,WAAW,CAAC,IAAyB,EAAE,KAA0B;IACzE,OAAO,CACN,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;QACtC,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAC9B,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;QACpC,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,IAAI,IAAI,CAAC,CAC5D,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAOrC;IACA,MAAM,EAAE,YAAY,EAAE,mBAAmB,EAAE,eAAe,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC;IAChG,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC/C,MAAM,iBAAiB,GAAG,0BAA0B,CAAC,YAAY,CAAC,CAAC;IAEnE,2EAA2E;IAC3E,8EAA8E;IAC9E,2EAA2E;IAC3E,8EAA8E;IAC9E,0BAA0B;IAC1B,IAAI,0BAA0B,CAAC,eAAe,CAAC,KAAK,YAAY,CAAC,sBAAsB,EAAE,CAAC;QACzF,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAC1C,CAAC;IAED,4EAA4E;IAC5E,EAAE;IACF,6EAA6E;IAC7E,6EAA6E;IAC7E,4EAA4E;IAC5E,8EAA8E;IAC9E,6EAA6E;IAC7E,oEAAoE;IACpE,EAAE;IACF,0EAA0E;IAC1E,2EAA2E;IAC3E,sBAAsB;IACtB,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAClC,eAAe,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAChE,CAAC;IACF,KAAK,MAAM,UAAU,IAAI,YAAY,CAAC,YAAY,EAAE,CAAC;QACpD,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACnF,CAAC;IAED,2EAA2E;IAC3E,0DAA0D;IAC1D,MAAM,kBAAkB,GAAG,IAAI,GAAG,CACjC,eAAe,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CACzE,CAAC;IACF,KAAK,MAAM,UAAU,IAAI,YAAY,CAAC,YAAY,EAAE,CAAC;QACpD,IAAI,UAAU,CAAC,QAAQ,IAAI,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACnE,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QACrC,CAAC;IACF,CAAC;IACD,KAAK,mBAAmB,CAAC;IAEzB,8EAA8E;IAC9E,4EAA4E;IAC5E,uEAAuE;IACvE,sCAAsC;IACtC,MAAM,YAAY,GAAG,IAAI,GAAG,CAC3B,CAAC,eAAe,CAAC,WAAW,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CACrE,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,WAAW,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC;QAC5D,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAClE,CAAC;IAED,8EAA8E;IAC9E,8EAA8E;IAC9E,oDAAoD;IACpD,MAAM,aAAa,GAAG,IAAI,GAAG,CAC5B,eAAe,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CACrF,CAAC;IACF,KAAK,MAAM,UAAU,IAAI,YAAY,CAAC,YAAY,EAAE,CAAC;QACpD,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACnD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;YAC9D,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QACvC,CAAC;IACF,CAAC;IAED,4EAA4E;IAC5E,4EAA4E;IAC5E,6EAA6E;IAC7E,oCAAoC;IACpC,MAAM,aAAa,GAAG,IAAI,GAAG,CAC5B,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CACzD,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;YAC/B,SAAS;QACV,CAAC;QACD,IACC,QAAQ,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;YACtC,QAAQ,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;YAC9B,CAAC,QAAQ,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC,EACnD,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAChC,CAAC;IACF,CAAC;IAED,MAAM,MAAM,GAAG,qBAAqB,CAAC,eAAe,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;IAClD,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;YACnC,SAAS;QACV,CAAC;QACD,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACxC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;QACvF,CAAC;QACD,sEAAsE;QACtE,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;YACtE,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QACvC,CAAC;IACF,CAAC;IAED,2EAA2E;IAC3E,mEAAmE;IACnE,EAAE;IACF,0EAA0E;IAC1E,yEAAyE;IACzE,8EAA8E;IAC9E,yEAAyE;IACzE,uEAAuE;IACvE,MAAM,cAAc,GACnB,YAAY,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;QACpC,KAAK,CAAC,IAAI,GAAG,CAAC;QACd,YAAY,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QAC/B,YAAY,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QAC9B,YAAY,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;QACnC,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACpD,MAAM,cAAc,GACnB,iBAAiB,KAAK,YAAY,CAAC,sBAAsB;QACzD,CAAC,WAAW,CAAC,YAAY,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACjD,IAAI,cAAc,IAAI,cAAc;QAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAErE,OAAO;QACN,QAAQ,EAAE,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM;QACrD,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC;QACrB,iBAAiB;KACjB,CAAC;AACH,CAAC"}

package/dist/vite.d.ts

@@ -0,0 +1,26 @@
+import type { VibesRuntime } from '@vibesdotdev/kernel';
+/** Normal Vite aliases; the kernel supplies the consumer's actual workspace. */
+export declare function createAppletViteConfig(runtime: VibesRuntime, options: {
+    stylesheets: readonly string[];
+}): Promise<{
+    resolve: {
+        alias: {
+            $applets: string;
+        };
+    };
+    define: {
+        __VIBES_APPLET_WORKSPACE_ROOT__: string;
+    };
+    plugins: {
+        name: string;
+        enforce: "pre";
+        configResolved(config: {
+            root: string;
+        }): void;
+        transform: {
+            order: "pre";
+            handler(source: string, id: string): string | null;
+        };
+    }[];
+}>;
+//# sourceMappingURL=vite.d.ts.map

package/dist/vite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vite.d.ts","sourceRoot":"","sources":["../src/vite.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAIxD,gFAAgF;AAChF,wBAAsB,sBAAsB,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE;IAAE,WAAW,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE;;;;;;;;;;;;+BAWrF;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE;;;4BAKtB,MAAM,MAAM,MAAM;;;GAMrC"}