@vibesdotdev/applets 0.0.0-stage → 1.0.0-rc.2

package/dist/cli/commands/served-applet-surface.js

@@ -0,0 +1,99 @@
+/**
+ * The applet's half of the root surface `vibes applet serve` mounts.
+ *
+ * Browser code: the serve host's page imports this module and mounts the applet
+ * with `{ vibes: createServedAppletSurface(...) }`, the delivery contract in
+ * `browser-runtime.ts`. Every method is one POST to the serve host, which
+ * answers through the real `createAppletRootSurface` (see `serve-surface.ts`);
+ * nothing is decided here, so nothing here is a control.
+ *
+ * It imports only the wire schemas and types, so the page loads it without a
+ * runtime. The page hands in its own `fetch`; this module reaches no global.
+ */
+import * as z from 'zod/v4';
+import { JsonValueSchema as jsonValueSchema } from '@vibesdotdev/kernel/schemas/json';
+import { appletRuntimeQueryViewSchema } from "../../applet-root-surface.js";
+import { servedAssetUrlSchema, servedStoragePageSchema, servedSurfaceResponseSchema } from "./serve.schemas.js";
+/**
+ * A refusal, as applet code sees it: an `Error` whose `cause` is the host's
+ * typed `CapabilityError` envelope (`code`, `reason`, `message`, `retryable`).
+ * The class itself lives in the runtime, which this page does not load.
+ */
+function refused(failure) {
+    return new Error(failure.message, { cause: failure });
+}
+/** A function argument: a callback this JSON surface cannot carry back. */
+const callbackSchema = z.custom((value) => value instanceof Function);
+/** A value must be JSON to cross the wire; the host decides everything else about it. */
+function wireValue(parsed) {
+    if (parsed.success)
+        return parsed.data;
+    throw refused({
+        code: 'INVALID_INPUT',
+        reason: 'applet-value-not-json',
+        message: 'Value refused: it is not JSON, so it cannot reach the applet host.',
+        retryable: false
+    });
+}
+export function createServedAppletSurface(input) {
+    const url = `/applet/${encodeURIComponent(input.projectId)}/surface`;
+    async function invoke(call) {
+        const response = await input.fetch(url, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify(call)
+        });
+        const answer = servedSurfaceResponseSchema.parse(await response.json());
+        if (!answer.ok)
+            throw refused(answer.error);
+        return answer.result;
+    }
+    // Every method is `async`, so a refusal is always a rejection, never a throw
+    // at the call site — the same rule the root surface keeps.
+    return {
+        storageGet: async (descriptorId, key) => invoke({ method: 'storageGet', descriptorId, key }),
+        storageList: async (descriptorId, query) => {
+            const call = { method: 'storageList', descriptorId };
+            if (query !== undefined)
+                call.query = query;
+            return servedStoragePageSchema.parse(await invoke(call));
+        },
+        storagePut: async (descriptorId, key, value) => {
+            await invoke({ method: 'storagePut', descriptorId, key, value: wireValue(jsonValueSchema.safeParse(value)) });
+        },
+        storageDelete: async (descriptorId, key) => {
+            await invoke({ method: 'storageDelete', descriptorId, key });
+        },
+        assetUrl: async (assetId) => servedAssetUrlSchema.parse(await invoke({ method: 'assetUrl', assetId })),
+        capabilityInvoke: async (capability, value) => {
+            const call = { method: 'capabilityInvoke', capability };
+            if (value !== undefined)
+                call.input = wireValue(jsonValueSchema.safeParse(value));
+            return invoke(call);
+        },
+        runtimeQuery: async (kind) => appletRuntimeQueryViewSchema.parse(await invoke({ method: 'runtimeQuery', kind })),
+        runtimeCall: async (kind, id, method, ...args) => {
+            // JSON POST has no reverse leg: a callback cannot reach this applet again, so it is refused,
+            // never dropped. (Callbacks reach local applets over runtime-rpc HTTP once it carries them.)
+            if (args.some((arg) => callbackSchema.safeParse(arg).success)) {
+                throw refused({
+                    code: 'UNAVAILABLE',
+                    reason: 'applet-runtime-callback-unsupported',
+                    message: 'This local serve surface carries no callbacks yet: pass JSON arguments, or run the applet in a canvas host.',
+                    retryable: false
+                });
+            }
+            const call = { method: 'runtimeCall', kind, id, targetMethod: method };
+            if (args.length > 0)
+                call.args = args.map((arg) => wireValue(jsonValueSchema.safeParse(arg)));
+            return invoke(call);
+        },
+        runtimeToolCall: async (toolId, input) => {
+            const call = { method: 'runtimeToolCall', toolId };
+            if (input !== undefined)
+                call.input = wireValue(jsonValueSchema.safeParse(input));
+            return invoke(call);
+        }
+    };
+}
+//# sourceMappingURL=served-applet-surface.js.map

package/dist/cli/commands/served-applet-surface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"served-applet-surface.js","sourceRoot":"","sources":["../../../src/cli/commands/served-applet-surface.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,eAAe,IAAI,eAAe,EAAkB,MAAM,kCAAkC,CAAC;AACtG,OAAO,EACN,4BAA4B,EAG5B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACN,oBAAoB,EACpB,uBAAuB,EACvB,2BAA2B,EAG3B,MAAM,oBAAoB,CAAC;AAQ5B;;;;GAIG;AACH,SAAS,OAAO,CAAC,OAAsC;IACtD,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;AACvD,CAAC;AAED,2EAA2E;AAC3E,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAwB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,QAAQ,CAAC,CAAC;AAE7F,yFAAyF;AACzF,SAAS,SAAS,CAAC,MAAoD;IACtE,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC;IACvC,MAAM,OAAO,CAAC;QACb,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,uBAAuB;QAC/B,OAAO,EAAE,oEAAoE;QAC7E,SAAS,EAAE,KAAK;KAChB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAGzC;IACA,MAAM,GAAG,GAAG,WAAW,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC;IAErE,KAAK,UAAU,MAAM,CAAC,IAAyB;QAC9C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE;YACvC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC1B,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,2BAA2B,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5C,OAAO,MAAM,CAAC,MAAM,CAAC;IACtB,CAAC;IAED,6EAA6E;IAC7E,2DAA2D;IAC3D,OAAO;QACN,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC;QAC5F,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE;YAC1C,MAAM,IAAI,GAAwB,EAAE,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;YAC1E,IAAI,KAAK,KAAK,SAAS;gBAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;YAC5C,OAAO,uBAAuB,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,CAAC;QACD,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;YAC9C,MAAM,MAAM,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,CAAC,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/G,CAAC;QACD,aAAa,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,EAAE;YAC1C,MAAM,MAAM,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,oBAAoB,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;QACtG,gBAAgB,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE;YAC7C,MAAM,IAAI,GAAwB,EAAE,MAAM,EAAE,kBAAkB,EAAE,UAAU,EAAE,CAAC;YAC7E,IAAI,KAAK,KAAK,SAAS;gBAAE,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YAClF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;QACD,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,4BAA4B,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QAChH,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,EAAE;YAChD,6FAA6F;YAC7F,6FAA6F;YAC7F,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/D,MAAM,OAAO,CAAC;oBACb,IAAI,EAAE,aAAa;oBACnB,MAAM,EAAE,qCAAqC;oBAC7C,OAAO,EAAE,6GAA6G;oBACtH,SAAS,EAAE,KAAK;iBAChB,CAAC,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAwB,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;YAC5F,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC9F,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;QACD,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE;YACxC,MAAM,IAAI,GAAwB,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC;YACxE,IAAI,KAAK,KAAK,SAAS;gBAAE,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YAClF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/cli/commands/templates.command.descriptor.d.ts

@@ -0,0 +1,22 @@
+/**
+ * `vibes applet templates` — the first-party applet templates shipped in-package.
+ */
+export declare const appletTemplatesCommandDescriptor: {
+    readonly kind: "cli/command";
+    readonly id: "applet.templates";
+    readonly name: "templates";
+    readonly description: "List the first-party Applet templates shipped with @vibesdotdev/applets. Combine with `vibes applet init` to scaffold a local project from one.";
+    readonly group: "applet";
+    readonly arguments: [];
+    readonly options: [];
+    readonly surfaces: ["cli"];
+    readonly hardware: readonly ["consumer", "cloud"];
+    readonly enabled: true;
+    readonly examples: [{
+        readonly command: "vibes applet templates";
+        readonly description: "List shipped templates";
+        readonly expectExit: 0;
+    }];
+};
+export default appletTemplatesCommandDescriptor;
+//# sourceMappingURL=templates.command.descriptor.d.ts.map

package/dist/cli/commands/templates.command.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.command.descriptor.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/templates.command.descriptor.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;CAe3C,CAAC;AAEH,eAAe,gCAAgC,CAAC"}

package/dist/cli/commands/templates.command.descriptor.js

@@ -0,0 +1,21 @@
+/**
+ * `vibes applet templates` — the first-party applet templates shipped in-package.
+ */
+import { createRuntimeAsset } from '@vibesdotdev/kernel';
+export const appletTemplatesCommandDescriptor = createRuntimeAsset({
+    kind: 'cli/command',
+    id: 'applet.templates',
+    name: 'templates',
+    description: 'List the first-party Applet templates shipped with @vibesdotdev/applets. Combine with `vibes applet init` to scaffold a local project from one.',
+    group: 'applet',
+    arguments: [],
+    options: [],
+    surfaces: ['cli'],
+    hardware: ['consumer', 'cloud'],
+    enabled: true,
+    examples: [
+        { command: 'vibes applet templates', description: 'List shipped templates', expectExit: 0 }
+    ]
+});
+export default appletTemplatesCommandDescriptor;
+//# sourceMappingURL=templates.command.descriptor.js.map

package/dist/cli/commands/templates.command.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.command.descriptor.js","sourceRoot":"","sources":["../../../src/cli/commands/templates.command.descriptor.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,MAAM,CAAC,MAAM,gCAAgC,GAAG,kBAAkB,CAAC;IAClE,IAAI,EAAE,aAAa;IACnB,EAAE,EAAE,kBAAkB;IACtB,IAAI,EAAE,WAAW;IACjB,WAAW,EACV,iJAAiJ;IAClJ,KAAK,EAAE,QAAQ;IACf,SAAS,EAAE,EAAE;IACb,OAAO,EAAE,EAAE;IACX,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;IAC/B,OAAO,EAAE,IAAI;IACb,QAAQ,EAAE;QACT,EAAE,OAAO,EAAE,wBAAwB,EAAE,WAAW,EAAE,wBAAwB,EAAE,UAAU,EAAE,CAAC,EAAE;KAC3F;CACD,CAAC,CAAC;AAEH,eAAe,gCAAgC,CAAC"}

package/dist/cli/commands/templates.command.impl.d.ts

@@ -0,0 +1,35 @@
+/**
+ * `vibes applet templates` implementation.
+ */
+import type { CommandContext } from '@vibesdotdev/cli';
+import type { VibesRuntime } from '@vibesdotdev/kernel';
+import * as z from 'zod/v4';
+import { type RuntimePath } from '@vibesdotdev/paths';
+import type { FileSystemAdapterInterface } from '@vibesdotdev/filesystem/interfaces/adapter';
+/**
+ * The two runtime kinds template IO resolves: the filesystem for bytes and the
+ * runtime path service for splitting. The shipped template set lives beside the
+ * package, not in the workspace, so this cannot use the workspace root.
+ */
+export interface AppletTemplateHost {
+    readonly files: FileSystemAdapterInterface;
+    readonly paths: RuntimePath;
+}
+/** Resolve the two kinds once per command. */
+export declare function resolveAppletTemplateHost(runtime: VibesRuntime): Promise<AppletTemplateHost>;
+/** Resolve the shipped templates dir across src and dist layouts. */
+export declare function resolveTemplatesDir(host: AppletTemplateHost): Promise<string>;
+/** Template ids = directory names under applets/templates. */
+export declare function listTemplateIds(host: AppletTemplateHost): Promise<string[]>;
+/**
+ * This command takes no positional arguments and no options; the empty schemas
+ * keep the surface contract schema-derived instead of an open dictionary.
+ */
+declare const TemplatesArgsSchema: z.ZodObject<{}, z.core.$strip>;
+declare const TemplatesOptionsSchema: z.ZodObject<{}, z.core.$strip>;
+export declare function execute(_args: z.input<typeof TemplatesArgsSchema>, _options: z.input<typeof TemplatesOptionsSchema>, context: CommandContext): Promise<void>;
+declare const _default: {
+    execute: typeof execute;
+};
+export default _default;
+//# sourceMappingURL=templates.command.impl.d.ts.map

package/dist/cli/commands/templates.command.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.command.impl.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/templates.command.impl.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAEvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAE7F;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAC;IAC3C,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;CAC5B;AAED,8CAA8C;AAC9C,wBAAsB,yBAAyB,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAElG;AAED,qEAAqE;AACrE,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CAoBnF;AAED,8DAA8D;AAC9D,wBAAsB,eAAe,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAOjF;AAUD;;;GAGG;AACH,QAAA,MAAM,mBAAmB,gCAAe,CAAC;AACzC,QAAA,MAAM,sBAAsB,gCAAe,CAAC;AAE5C,wBAAsB,OAAO,CAC5B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,EAC1C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,EAChD,OAAO,EAAE,cAAc,GACrB,OAAO,CAAC,IAAI,CAAC,CAEf;;;;AAED,wBAA2B"}

package/dist/cli/commands/templates.command.impl.js

@@ -0,0 +1,59 @@
+import { writeStdoutLine } from '@vibesdotdev/cli/output';
+import { CapabilityError } from '@vibesdotdev/kernel';
+import * as z from 'zod/v4';
+import { getRuntimePath } from '@vibesdotdev/paths';
+import { resolveFileSystemAdapter } from '@vibesdotdev/filesystem/client/resolve-adapter';
+/** Resolve the two kinds once per command. */
+export async function resolveAppletTemplateHost(runtime) {
+    return { files: await resolveFileSystemAdapter(runtime), paths: await getRuntimePath(runtime) };
+}
+/** Resolve the shipped templates dir across src and dist layouts. */
+export async function resolveTemplatesDir(host) {
+    const here = host.paths.dirname(host.paths.fileURLToPath(import.meta.url));
+    // The package root (`<pkg>/templates`) is the shipped set. `src/templates`
+    // also exists (the template *kind* schema, no projects) and used to shadow
+    // it, so a candidate only counts when it holds at least one project.
+    for (const candidate of [host.paths.join(here, '../../../templates'), host.paths.join(here, '../../templates')]) {
+        if (!(await host.files.exists(candidate)))
+            continue;
+        if ((await host.files.stat(candidate)).kind !== 'directory')
+            continue;
+        for (const entry of await host.files.list(candidate)) {
+            if (entry.kind !== 'directory')
+                continue;
+            if (await host.files.exists(host.paths.join(candidate, entry.name, 'applet.descriptor.ts'))) {
+                return candidate;
+            }
+        }
+    }
+    throw new CapabilityError('Shipped applet templates directory not found (expected applets/templates).', 'UNAVAILABLE', { reason: 'applet-templates-unavailable', retryable: false });
+}
+/** Template ids = directory names under applets/templates. */
+export async function listTemplateIds(host) {
+    const dir = await resolveTemplatesDir(host);
+    const ids = [];
+    for (const entry of await host.files.list(dir)) {
+        if (entry.kind === 'directory')
+            ids.push(entry.name);
+    }
+    return ids;
+}
+async function run(runtime) {
+    const host = await resolveAppletTemplateHost(runtime);
+    const ids = await listTemplateIds(host);
+    await writeStdoutLine(runtime, 'First-party applet templates:\n');
+    for (const id of ids)
+        await writeStdoutLine(runtime, `  ${id}`);
+    await writeStdoutLine(runtime, '\nScaffold one with: vibes applet init <new-id> --from <template>');
+}
+/**
+ * This command takes no positional arguments and no options; the empty schemas
+ * keep the surface contract schema-derived instead of an open dictionary.
+ */
+const TemplatesArgsSchema = z.object({});
+const TemplatesOptionsSchema = z.object({});
+export async function execute(_args, _options, context) {
+    await run(context.runtime);
+}
+export default { execute };
+//# sourceMappingURL=templates.command.impl.js.map

package/dist/cli/commands/templates.command.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.command.impl.js","sourceRoot":"","sources":["../../../src/cli/commands/templates.command.impl.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE1D,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,cAAc,EAAoB,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,gDAAgD,CAAC;AAa1F,8CAA8C;AAC9C,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,OAAqB;IACpE,OAAO,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;AACjG,CAAC;AAED,qEAAqE;AACrE,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAwB;IACjE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3E,2EAA2E;IAC3E,2EAA2E;IAC3E,qEAAqE;IACrE,KAAK,MAAM,SAAS,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,oBAAoB,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,EAAE,CAAC;QACjH,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAAE,SAAS;QACpD,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW;YAAE,SAAS;QACtE,KAAK,MAAM,KAAK,IAAI,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACtD,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;gBAAE,SAAS;YACzC,IAAI,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC,EAAE,CAAC;gBAC7F,OAAO,SAAS,CAAC;YAClB,CAAC;QACF,CAAC;IACF,CAAC;IACD,MAAM,IAAI,eAAe,CACxB,4EAA4E,EAC5E,aAAa,EACb,EAAE,MAAM,EAAE,8BAA8B,EAAE,SAAS,EAAE,KAAK,EAAE,CAC5D,CAAC;AACH,CAAC;AAED,8DAA8D;AAC9D,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAwB;IAC7D,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;YAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,OAAqB;IACvC,MAAM,IAAI,GAAG,MAAM,yBAAyB,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,eAAe,CAAC,OAAO,EAAE,iCAAiC,CAAC,CAAC;IAClE,KAAK,MAAM,EAAE,IAAI,GAAG;QAAE,MAAM,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IAChE,MAAM,eAAe,CAAC,OAAO,EAAE,mEAAmE,CAAC,CAAC;AACrG,CAAC;AAED;;;GAGG;AACH,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACzC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAE5C,MAAM,CAAC,KAAK,UAAU,OAAO,CAC5B,KAA0C,EAC1C,QAAgD,EAChD,OAAuB;IAEvB,MAAM,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;AAC5B,CAAC;AAED,eAAe,EAAE,OAAO,EAAE,CAAC"}

package/dist/cli/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * CLI surface for Applets. The plugin is the entrypoint; these exports exist so
+ * a test or another surface can reach the filesystem walk without shelling out.
+ */
+export { appletsCliPlugin } from './plugin.ts';
+export { appletProjectsDir, listAppletProjectIds, readAppletProjectEntries, digestContents } from './project-files.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/cli/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EACN,iBAAiB,EACjB,oBAAoB,EACpB,wBAAwB,EACxB,cAAc,EACd,MAAM,oBAAoB,CAAC"}

package/dist/cli/index.js

@@ -0,0 +1,7 @@
+/**
+ * CLI surface for Applets. The plugin is the entrypoint; these exports exist so
+ * a test or another surface can reach the filesystem walk without shelling out.
+ */
+export { appletsCliPlugin } from "./plugin.js";
+export { appletProjectsDir, listAppletProjectIds, readAppletProjectEntries, digestContents } from "./project-files.js";
+//# sourceMappingURL=index.js.map

package/dist/cli/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EACN,iBAAiB,EACjB,oBAAoB,EACpB,wBAAwB,EACxB,cAAc,EACd,MAAM,oBAAoB,CAAC"}

package/dist/cli/local-serve.authz-policy.descriptor.d.ts

@@ -0,0 +1,22 @@
+/** Local authoring exposes the same manifest-bound adapter over JSON and runtime RPC. */
+declare const _default: {
+    id: string;
+    kind: "authz/policy";
+    name: string;
+    precedence: number;
+    rules: {
+        principalClass: "agent" | "owner" | "*" | "peer";
+        kind: string;
+        method: string;
+        origin: "local" | "*" | "remote";
+        effect: "allow" | "deny";
+        reason: string;
+        verifiedSources?: string[] | undefined;
+    }[];
+    description?: string | undefined;
+    enabled?: boolean | undefined;
+    tags?: string[] | undefined;
+    hardware?: ("consumer" | "cloud")[] | undefined;
+};
+export default _default;
+//# sourceMappingURL=local-serve.authz-policy.descriptor.d.ts.map

package/dist/cli/local-serve.authz-policy.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-serve.authz-policy.descriptor.d.ts","sourceRoot":"","sources":["../../src/cli/local-serve.authz-policy.descriptor.ts"],"names":[],"mappings":"AAGA,yFAAyF;;;;;;;;;;;;;;;;;;;;AACzF,wBAQG"}

package/dist/cli/local-serve.authz-policy.descriptor.js

@@ -0,0 +1,13 @@
+import { AuthzPolicyDescriptorSchema } from '@vibesdotdev/kernel/authz';
+import { APPLET_ROOT_SURFACE_METHODS } from "../applet-root-surface.js";
+/** Local authoring exposes the same manifest-bound adapter over JSON and runtime RPC. */
+export default AuthzPolicyDescriptorSchema.parse({
+    id: 'applets.local-serve-root', kind: 'authz/policy', name: 'Local applet authoring surface',
+    description: 'Admit the local serve adapter. Runtime targets retain their own invoke authorization.',
+    enabled: true, precedence: 0,
+    rules: [...APPLET_ROOT_SURFACE_METHODS, 'call'].map(method => ({
+        principalClass: 'peer', kind: 'applets/root', method, origin: 'remote', effect: 'allow',
+        reason: 'The local authoring host exposes its manifest-bound applet adapter.'
+    }))
+});
+//# sourceMappingURL=local-serve.authz-policy.descriptor.js.map

package/dist/cli/local-serve.authz-policy.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-serve.authz-policy.descriptor.js","sourceRoot":"","sources":["../../src/cli/local-serve.authz-policy.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AACxE,OAAO,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AAExE,yFAAyF;AACzF,eAAe,2BAA2B,CAAC,KAAK,CAAC;IAChD,EAAE,EAAE,0BAA0B,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,gCAAgC;IAC5F,WAAW,EAAE,uFAAuF;IACpG,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC5B,KAAK,EAAE,CAAC,GAAG,2BAA2B,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9D,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO;QACvF,MAAM,EAAE,qEAAqE;KAC7E,CAAC,CAAC;CACH,CAAC,CAAC"}

package/dist/cli/plugin.d.ts

@@ -0,0 +1,19 @@
+/**
+ * @vibesdotdev/applets/cli plugin
+ *
+ * Canonical `./cli` isolated subpath of @vibesdotdev/applets. Registers the
+ * `vibes applet` group and its commands against the `cli/group` and `cli/command`
+ * kinds owned by `@vibesdotdev/cli`.
+ *
+ * It composes no feature plugin, and that is deliberate rather than an omission:
+ * these commands read `.vibes/applets` from disk and resolve no runtime client.
+ * Local authoring that needed a session would not be local.
+ *
+ * It does register the `applets.local-store` storage manifest, where `serve`
+ * keeps the stores a local applet declares. A descriptor waits for its kind, so
+ * a host without Storage still registers this plugin; `serve` then refuses store
+ * calls `applet-local-store-unavailable` instead of losing data.
+ */
+export declare const appletsCliPlugin: import("@vibesdotdev/kernel").RuntimePlugin;
+export default appletsCliPlugin;
+//# sourceMappingURL=plugin.d.ts.map

package/dist/cli/plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/cli/plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAiBH,eAAO,MAAM,gBAAgB,6CA0B3B,CAAC;AAEH,eAAe,gBAAgB,CAAC"}

package/dist/cli/plugin.js

@@ -0,0 +1,57 @@
+/**
+ * @vibesdotdev/applets/cli plugin
+ *
+ * Canonical `./cli` isolated subpath of @vibesdotdev/applets. Registers the
+ * `vibes applet` group and its commands against the `cli/group` and `cli/command`
+ * kinds owned by `@vibesdotdev/cli`.
+ *
+ * It composes no feature plugin, and that is deliberate rather than an omission:
+ * these commands read `.vibes/applets` from disk and resolve no runtime client.
+ * Local authoring that needed a session would not be local.
+ *
+ * It does register the `applets.local-store` storage manifest, where `serve`
+ * keeps the stores a local applet declares. A descriptor waits for its kind, so
+ * a host without Storage still registers this plugin; `serve` then refuses store
+ * calls `applet-local-store-unavailable` instead of losing data.
+ */
+import { createRuntimePlugin, loader } from '@vibesdotdev/kernel';
+import appletGroup from "./applet-group.descriptor.js";
+import appletListCommandDescriptor from "./commands/list.command.descriptor.js";
+import appletBuildCommandDescriptor from "./commands/build.command.descriptor.js";
+import appletServeCommandDescriptor from "./commands/serve.command.descriptor.js";
+import appletTemplatesCommandDescriptor from "./commands/templates.command.descriptor.js";
+import appletInitCommandDescriptor from "./commands/init.command.descriptor.js";
+import appletServeProcessDescriptor from "./applet-serve.process.descriptor.js";
+import appletsConfigDescriptor from "../config/applets.config.descriptor.js";
+import appletLocalStoreStorageDescriptor from "./applet-local-store.storage.descriptor.js";
+import localServeAuthzPolicy from "./local-serve.authz-policy.descriptor.js";
+const CLI_COMMAND = { kind: 'cli/command' };
+export const appletsCliPlugin = createRuntimePlugin({
+    id: 'applets-cli',
+    name: 'Applets CLI',
+    description: '`vibes applet list` + `build` + `serve` + `templates` + `init` — local Applet authoring, viewport, and first-party templates',
+    dependencies: ['cli'],
+    descriptors: [
+        appletGroup,
+        appletListCommandDescriptor,
+        appletBuildCommandDescriptor,
+        appletServeCommandDescriptor,
+        appletTemplatesCommandDescriptor,
+        appletInitCommandDescriptor,
+        // `vibes applet serve` as a PM-managed process (rc02-rc03 §2.5 authorship).
+        appletServeProcessDescriptor,
+        appletsConfigDescriptor,
+        // Where `vibes applet serve` keeps each local applet's declared stores.
+        appletLocalStoreStorageDescriptor,
+        localServeAuthzPolicy
+    ],
+    loaders: [
+        loader('applet.list', CLI_COMMAND, () => import("./commands/list.command.impl.js")),
+        loader('applet.build', CLI_COMMAND, () => import("./commands/build.command.impl.js")),
+        loader('applet.serve', CLI_COMMAND, () => import("./commands/serve.command.impl.js")),
+        loader('applet.templates', CLI_COMMAND, () => import("./commands/templates.command.impl.js")),
+        loader('applet.init', CLI_COMMAND, () => import("./commands/init.command.impl.js"))
+    ]
+});
+export default appletsCliPlugin;
+//# sourceMappingURL=plugin.js.map

package/dist/cli/plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../src/cli/plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAElE,OAAO,WAAW,MAAM,8BAA8B,CAAC;AACvD,OAAO,2BAA2B,MAAM,uCAAuC,CAAC;AAChF,OAAO,4BAA4B,MAAM,wCAAwC,CAAC;AAClF,OAAO,4BAA4B,MAAM,wCAAwC,CAAC;AAClF,OAAO,gCAAgC,MAAM,4CAA4C,CAAC;AAC1F,OAAO,2BAA2B,MAAM,uCAAuC,CAAC;AAChF,OAAO,4BAA4B,MAAM,sCAAsC,CAAC;AAChF,OAAO,uBAAuB,MAAM,wCAAwC,CAAC;AAC7E,OAAO,iCAAiC,MAAM,4CAA4C,CAAC;AAC3F,OAAO,qBAAqB,MAAM,0CAA0C,CAAC;AAE7E,MAAM,WAAW,GAAG,EAAE,IAAI,EAAE,aAAa,EAAW,CAAC;AAErD,MAAM,CAAC,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;IACnD,EAAE,EAAE,aAAa;IACjB,IAAI,EAAE,aAAa;IACnB,WAAW,EAAE,8HAA8H;IAC3I,YAAY,EAAE,CAAC,KAAK,CAAC;IACrB,WAAW,EAAE;QACZ,WAAW;QACX,2BAA2B;QAC3B,4BAA4B;QAC5B,4BAA4B;QAC5B,gCAAgC;QAChC,2BAA2B;QAC3B,4EAA4E;QAC5E,4BAA4B;QAC5B,uBAAuB;QACvB,wEAAwE;QACxE,iCAAiC;QACjC,qBAAqB;KACrB;IACD,OAAO,EAAE;QACR,MAAM,CAAC,aAAa,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,iCAAiC,CAAC,CAAC;QACnF,MAAM,CAAC,cAAc,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,kCAAkC,CAAC,CAAC;QACrF,MAAM,CAAC,cAAc,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,kCAAkC,CAAC,CAAC;QACrF,MAAM,CAAC,kBAAkB,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,sCAAsC,CAAC,CAAC;QAC7F,MAAM,CAAC,aAAa,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,iCAAiC,CAAC,CAAC;KACnF;CACD,CAAC,CAAC;AAEH,eAAe,gBAAgB,CAAC"}

package/dist/cli/project-files.d.ts

@@ -0,0 +1,48 @@
+import { type VibesRuntime } from '@vibesdotdev/kernel';
+import { type RuntimePath } from '@vibesdotdev/paths';
+import type { FileSystemAdapterInterface } from '@vibesdotdev/filesystem/interfaces/adapter';
+/** The runtime kinds project IO resolves: the filesystem for bytes, the path service for joins. */
+export interface AppletProjectHost {
+    /** The workspace-rooted view, for reads that belong to the project being served. */
+    readonly files: FileSystemAdapterInterface;
+    /**
+     * The host's own filesystem, with the workspace binding declined. A package
+     * root is host-owned: `node_modules/<name>` walks up from an applet and
+     * routinely lands outside the workspace, which the bound view refuses. Reads
+     * that must reach a package's own files use this one; reads of project
+     * content use `files`.
+     */
+    readonly hostFiles: FileSystemAdapterInterface;
+    readonly paths: RuntimePath;
+}
+/** Resolve the kinds once per command. */
+export declare function resolveAppletProjectHost(runtime: VibesRuntime): Promise<AppletProjectHost>;
+/** One file's contents as the local project reader expects them: text, or base64 for binary media. */
+export interface AppletProjectEntry {
+    path: string;
+    contents: string;
+    encoding?: 'utf8' | 'base64';
+}
+/** Resolve the workspace selected by the CLI host, never the executable host's cwd. */
+export declare function resolveAppletWorkspaceRoot(runtime: Pick<VibesRuntime, 'context'>): Promise<string>;
+/** Where projects live, relative to the workspace root. */
+export declare function appletProjectsDir(workspaceRoot: string, host: AppletProjectHost): string;
+/** Project ids present on disk, or an empty list when the directory is absent. */
+export declare function listAppletProjectIds(workspaceRoot: string, host: AppletProjectHost): Promise<string[]>;
+/** Count files without reading them. `list` reports what is THERE, cheaply. */
+export declare function countAppletProjectFiles(workspaceRoot: string, id: string, host: AppletProjectHost): Promise<{
+    total: number;
+    unsupported: number;
+}>;
+/**
+ * Every file in one project, as paths relative to the project directory.
+ *
+ * Paths are normalised to forward slashes because the manifest is a wire format
+ * and a Windows author must not publish a different inventory than a mac one.
+ * Binary media arrives base64 with an `encoding` marker: bytes cannot survive a
+ * UTF-8 round trip, and the manifest digest is over the real bytes.
+ */
+export declare function readAppletProjectEntries(workspaceRoot: string, id: string, host: AppletProjectHost): Promise<AppletProjectEntry[]>;
+/** SHA-256 over the file's BYTES, in the manifest's own spelling. */
+export declare function digestContents(bytes: Uint8Array): Promise<string>;
+//# sourceMappingURL=project-files.d.ts.map

package/dist/cli/project-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-files.d.ts","sourceRoot":"","sources":["../../src/cli/project-files.ts"],"names":[],"mappings":"AAUA,OAAO,EAAmB,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAE7F,mGAAmG;AACnG,MAAM,WAAW,iBAAiB;IACjC,oFAAoF;IACpF,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAC;IAC3C;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,EAAE,0BAA0B,CAAC;IAC/C,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;CAC5B;AAED,0CAA0C;AAC1C,wBAAsB,wBAAwB,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAMhG;AAED,sGAAsG;AACtG,MAAM,WAAW,kBAAkB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;CAC7B;AAaD,uFAAuF;AACvF,wBAAsB,0BAA0B,CAC/C,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,GACpC,OAAO,CAAC,MAAM,CAAC,CAEjB;AAED,2DAA2D;AAC3D,wBAAgB,iBAAiB,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,GAAG,MAAM,CAExF;AAED,kFAAkF;AAClF,wBAAsB,oBAAoB,CACzC,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,iBAAiB,GACrB,OAAO,CAAC,MAAM,EAAE,CAAC,CAWnB;AAED,+EAA+E;AAC/E,wBAAsB,uBAAuB,CAC5C,aAAa,EAAE,MAAM,EACrB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,iBAAiB,GACrB,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,CAkBjD;AAED;;;;;;;GAOG;AACH,wBAAsB,wBAAwB,CAC7C,aAAa,EAAE,MAAM,EACrB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,iBAAiB,GACrB,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAgC/B;AAED,qEAAqE;AACrE,wBAAsB,cAAc,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAUvE"}

package/dist/cli/project-files.js

@@ -0,0 +1,130 @@
+/**
+ * Reading `.vibes/applets` through the runtime's own kinds.
+ *
+ * `readAppletLocalProject` takes injected entries on purpose — it decides the
+ * RULES, not where bytes come from. This is the one place that reads a real
+ * filesystem, and it resolves that filesystem (`filesystem/adapter`) plus the
+ * host's path mechanics (`paths/runtime-path`) from the handed runtime, so the
+ * package carries no `node:fs`/`node:path` of its own.
+ */
+import { APPLET_PROJECT_ROOT, isBinaryMediaType, mediaTypeFor } from '@vibesdotdev/applets';
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { getRuntimePath } from '@vibesdotdev/paths';
+import { resolveFileSystemAdapter } from '@vibesdotdev/filesystem/client/resolve-adapter';
+/** Resolve the kinds once per command. */
+export async function resolveAppletProjectHost(runtime) {
+    return {
+        files: await resolveFileSystemAdapter(runtime),
+        hostFiles: await resolveFileSystemAdapter(runtime, { binding: false }),
+        paths: await getRuntimePath(runtime)
+    };
+}
+function bytesToBase64(bytes) {
+    let binary = '';
+    for (const byte of bytes)
+        binary += String.fromCharCode(byte);
+    return btoa(binary);
+}
+/** A read without an encoding is bytes; a host that answered text is encoded once. */
+function asBytes(contents) {
+    return contents instanceof Uint8Array ? contents : new TextEncoder().encode(contents);
+}
+/** Resolve the workspace selected by the CLI host, never the executable host's cwd. */
+export async function resolveAppletWorkspaceRoot(runtime) {
+    return runtime.context('runtime/workspace-path');
+}
+/** Where projects live, relative to the workspace root. */
+export function appletProjectsDir(workspaceRoot, host) {
+    return host.paths.join(workspaceRoot, APPLET_PROJECT_ROOT);
+}
+/** Project ids present on disk, or an empty list when the directory is absent. */
+export async function listAppletProjectIds(workspaceRoot, host) {
+    const dir = appletProjectsDir(workspaceRoot, host);
+    // An absent directory is not an error: a workspace with no applets is a
+    // workspace, and `list` should say "none" rather than fail.
+    if (!(await host.files.exists(dir)))
+        return [];
+    const entries = await host.files.list(dir);
+    const ids = [];
+    for (const entry of entries) {
+        if (entry.kind === 'directory')
+            ids.push(entry.name);
+    }
+    return ids.sort((left, right) => (left < right ? -1 : left > right ? 1 : 0));
+}
+/** Count files without reading them. `list` reports what is THERE, cheaply. */
+export async function countAppletProjectFiles(workspaceRoot, id, host) {
+    const root = host.paths.join(appletProjectsDir(workspaceRoot, host), id);
+    let total = 0;
+    let unsupported = 0;
+    const walk = async (dir) => {
+        for (const entry of await host.files.list(dir)) {
+            const full = host.paths.join(dir, entry.name);
+            if (entry.kind === 'directory') {
+                await walk(full);
+                continue;
+            }
+            if (entry.kind !== 'file')
+                continue;
+            total += 1;
+            if (!mediaTypeFor(entry.name))
+                unsupported += 1;
+        }
+    };
+    await walk(root);
+    return { total, unsupported };
+}
+/**
+ * Every file in one project, as paths relative to the project directory.
+ *
+ * Paths are normalised to forward slashes because the manifest is a wire format
+ * and a Windows author must not publish a different inventory than a mac one.
+ * Binary media arrives base64 with an `encoding` marker: bytes cannot survive a
+ * UTF-8 round trip, and the manifest digest is over the real bytes.
+ */
+export async function readAppletProjectEntries(workspaceRoot, id, host) {
+    const root = host.paths.join(appletProjectsDir(workspaceRoot, host), id);
+    // An absent project is a NOT_FOUND the caller can act on, not an errno to decode.
+    if (!(await host.files.exists(root))) {
+        throw new CapabilityError(`No Applet project "${id}".`, 'NOT_FOUND', {
+            reason: 'applet-project-not-found',
+            details: { project: id }
+        });
+    }
+    const found = [];
+    const walk = async (dir) => {
+        for (const entry of await host.files.list(dir)) {
+            const full = host.paths.join(dir, entry.name);
+            if (entry.kind === 'directory') {
+                await walk(full);
+                continue;
+            }
+            if (entry.kind !== 'file')
+                continue;
+            const bytes = asBytes(await host.files.readFile(full));
+            const path = host.paths.relative(root, full).replaceAll('\\', '/');
+            const mediaType = mediaTypeFor(path);
+            if (mediaType !== undefined && isBinaryMediaType(mediaType)) {
+                found.push({ path, contents: bytesToBase64(bytes), encoding: 'base64' });
+            }
+            else {
+                found.push({ path, contents: new TextDecoder().decode(bytes) });
+            }
+        }
+    };
+    await walk(root);
+    return found;
+}
+/** SHA-256 over the file's BYTES, in the manifest's own spelling. */
+export async function digestContents(bytes) {
+    // `subtle.digest` takes an ArrayBuffer-backed view; copy into one so a view
+    // over any buffer kind (a decoded base64 companion included) is accepted.
+    const copy = new Uint8Array(bytes.length);
+    copy.set(bytes);
+    const hash = await crypto.subtle.digest('SHA-256', copy);
+    const hex = Array.from(new Uint8Array(hash))
+        .map((byte) => byte.toString(16).padStart(2, '0'))
+        .join('');
+    return `sha256:${hex}`;
+}
+//# sourceMappingURL=project-files.js.map

package/dist/cli/project-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-files.js","sourceRoot":"","sources":["../../src/cli/project-files.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAC5F,OAAO,EAAE,eAAe,EAAqB,MAAM,qBAAqB,CAAC;AACzE,OAAO,EAAE,cAAc,EAAoB,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,gDAAgD,CAAC;AAkB1F,0CAA0C;AAC1C,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,OAAqB;IACnE,OAAO;QACN,KAAK,EAAE,MAAM,wBAAwB,CAAC,OAAO,CAAC;QAC9C,SAAS,EAAE,MAAM,wBAAwB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACtE,KAAK,EAAE,MAAM,cAAc,CAAC,OAAO,CAAC;KACpC,CAAC;AACH,CAAC;AASD,SAAS,aAAa,CAAC,KAAiB;IACvC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAC9D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;AACrB,CAAC;AAED,sFAAsF;AACtF,SAAS,OAAO,CAAC,QAA6B;IAC7C,OAAO,QAAQ,YAAY,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACvF,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC/C,OAAsC;IAEtC,OAAO,OAAO,CAAC,OAAO,CAAS,wBAAwB,CAAC,CAAC;AAC1D,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,iBAAiB,CAAC,aAAqB,EAAE,IAAuB;IAC/E,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC;AAC5D,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACzC,aAAqB,EACrB,IAAuB;IAEvB,MAAM,GAAG,GAAG,iBAAiB,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IACnD,wEAAwE;IACxE,4DAA4D;IAC5D,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;YAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC5C,aAAqB,EACrB,EAAU,EACV,IAAuB;IAEvB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IACzE,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,MAAM,IAAI,GAAG,KAAK,EAAE,GAAW,EAAiB,EAAE;QACjD,KAAK,MAAM,KAAK,IAAI,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAChC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjB,SAAS;YACV,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;gBAAE,SAAS;YACpC,KAAK,IAAI,CAAC,CAAC;YACX,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,WAAW,IAAI,CAAC,CAAC;QACjD,CAAC;IACF,CAAC,CAAC;IACF,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AAC/B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC7C,aAAqB,EACrB,EAAU,EACV,IAAuB;IAEvB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IACzE,kFAAkF;IAClF,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,eAAe,CAAC,sBAAsB,EAAE,IAAI,EAAE,WAAW,EAAE;YACpE,MAAM,EAAE,0BAA0B;YAClC,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;SACxB,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAyB,EAAE,CAAC;IAEvC,MAAM,IAAI,GAAG,KAAK,EAAE,GAAW,EAAiB,EAAE;QACjD,KAAK,MAAM,KAAK,IAAI,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAChC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjB,SAAS;YACV,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;gBAAE,SAAS;YACpC,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YACvD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACnE,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,SAAS,KAAK,SAAS,IAAI,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC7D,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC1E,CAAC;iBAAM,CAAC;gBACP,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACjE,CAAC;QACF,CAAC;IACF,CAAC,CAAC;IAEF,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,OAAO,KAAK,CAAC;AACd,CAAC;AAED,qEAAqE;AACrE,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAiB;IACrD,4EAA4E;IAC5E,0EAA0E;IAC1E,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;SAC1C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SACjD,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,OAAO,UAAU,GAAG,EAAE,CAAC;AACxB,CAAC"}