@vibesdotdev/applets 0.0.0-stage → 1.0.0-rc.3

package/dist/companion-path.js

@@ -0,0 +1,90 @@
+/**
+ * Companion resolution for an Applet project (A2b).
+ *
+ * An Applet has EXACTLY ONE Svelte entrypoint (`Applet.svelte` at the project
+ * root, the fixed convention every host uses). Everything else is a companion,
+ * resolved RELATIVE to the importing file — `./` and `../`, extensionless
+ * specifiers completed against the extensions the applet contract admits, and
+ * binary media (images) resolved the same way text companions are.
+ *
+ * This is a pure function over the inventory so local serve, the cloud and the
+ * cloud editor answer the same specifier with the same path. Traversal is
+ * refused: a specifier that escapes the project root is `escape`, never a
+ * sanitized guess.
+ */
+import { mediaTypeFor } from "./local-project.js";
+/** Extensions the resolver completes an extensionless specifier with, in order. */
+export const APPLET_COMPANION_EXTENSIONS = Object.freeze([
+    '.svelte',
+    '.svelte.ts',
+    '.svelte.js',
+    '.ts',
+    '.js',
+    '.mjs',
+    '.css',
+    '.md',
+    '.json',
+    '.html',
+    '.txt',
+    '.svg',
+    '.png',
+    '.jpg',
+    '.jpeg',
+    '.gif',
+    '.webp',
+    '.ico'
+]);
+function normalizeSegments(path) {
+    const segments = [];
+    for (const segment of path.split('/')) {
+        if (segment === '' || segment === '.')
+            continue;
+        if (segment === '..') {
+            if (segments.length === 0)
+                return null; // escapes the project root
+            segments.pop();
+            continue;
+        }
+        segments.push(segment);
+    }
+    return segments.length > 0 ? segments : null;
+}
+function isRelative(specifier) {
+    return specifier.startsWith('./') || specifier.startsWith('../');
+}
+/** The directory part of a project-relative path (`''` at the root). */
+function dirnameOf(path) {
+    const slash = path.lastIndexOf('/');
+    return slash === -1 ? '' : path.slice(0, slash);
+}
+/**
+ * Resolve `specifier` against the importing file's directory.
+ *
+ * `files` is the project's file inventory (project-relative POSIX paths). A
+ * resolved path must be one of them and must carry an admitted media type —
+ * anything else is `unresolved` or `unsupported` rather than a disk read
+ * outside the contract. An exact name wins; otherwise each admitted extension
+ * is tried, so `./state.svelte` completes to the rune module `state.svelte.ts`
+ * when there is no component by that name.
+ */
+export function resolveAppletCompanion(input) {
+    const { importer, specifier, files } = input;
+    if (!isRelative(specifier))
+        return { ok: false, reason: 'not-relative' };
+    const joined = `${dirnameOf(importer)}/${specifier}`;
+    const segments = normalizeSegments(joined);
+    if (segments === null)
+        return { ok: false, reason: 'escape' };
+    const base = segments.join('/');
+    const inventory = new Set(files);
+    const candidates = [base, ...APPLET_COMPANION_EXTENSIONS.map((extension) => `${base}${extension}`)];
+    for (const candidate of candidates) {
+        if (!inventory.has(candidate))
+            continue;
+        if (mediaTypeFor(candidate) === undefined)
+            return { ok: false, reason: 'unsupported' };
+        return { ok: true, path: candidate };
+    }
+    return { ok: false, reason: 'unresolved' };
+}
+//# sourceMappingURL=companion-path.js.map

package/dist/companion-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"companion-path.js","sourceRoot":"","sources":["../src/companion-path.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,mFAAmF;AACnF,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC,MAAM,CAAC;IACxD,SAAS;IACT,YAAY;IACZ,YAAY;IACZ,KAAK;IACL,KAAK;IACL,MAAM;IACN,MAAM;IACN,KAAK;IACL,OAAO;IACP,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,OAAO;IACP,MAAM;CACG,CAAC,CAAC;AAMZ,SAAS,iBAAiB,CAAC,IAAY;IACtC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG;YAAE,SAAS;QAChD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACtB,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC,CAAC,2BAA2B;YACnE,QAAQ,CAAC,GAAG,EAAE,CAAC;YACf,SAAS;QACV,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9C,CAAC;AAED,SAAS,UAAU,CAAC,SAAiB;IACpC,OAAO,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AAED,wEAAwE;AACxE,SAAS,SAAS,CAAC,IAAY;IAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACjD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAItC;IACA,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC7C,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IACzE,MAAM,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,SAAS,EAAE,CAAC;IACrD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC9D,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,UAAU,GAAG,CAAC,IAAI,EAAE,GAAG,2BAA2B,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,IAAI,GAAG,SAAS,EAAE,CAAC,CAAC,CAAC;IACpG,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACpC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,SAAS;QACxC,IAAI,YAAY,CAAC,SAAS,CAAC,KAAK,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QACvF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACtC,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;AAC5C,CAAC"}

package/dist/component-ref.d.ts

@@ -0,0 +1,12 @@
+import * as z from 'zod/v4';
+export interface AppletComponentRef {
+    id: string;
+    version: string;
+    raw: string;
+}
+/** Parse a supported platform Component reference into its canonical parts. */
+export declare function parseAppletComponentRef(raw: string | null | undefined): AppletComponentRef | null;
+/** Format canonical Component reference parts for storage. */
+export declare function formatAppletComponentRef(ref: Pick<AppletComponentRef, 'id' | 'version'>): string;
+export declare const AppletComponentRefSchema: z.ZodString;
+//# sourceMappingURL=component-ref.d.ts.map

package/dist/component-ref.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"component-ref.d.ts","sourceRoot":"","sources":["../src/component-ref.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,MAAM,WAAW,kBAAkB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;CACZ;AAOD,+EAA+E;AAC/E,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,kBAAkB,GAAG,IAAI,CA8BjG;AAED,8DAA8D;AAC9D,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,IAAI,CAAC,kBAAkB,EAAE,IAAI,GAAG,SAAS,CAAC,GAAG,MAAM,CAEhG;AAED,eAAO,MAAM,wBAAwB,aAMpC,CAAC"}

package/dist/component-ref.js

@@ -0,0 +1,45 @@
+import * as z from 'zod/v4';
+const UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+const COMPONENT_REF_PREFIX = /^(?:platform\.components\.|component:)/i;
+const COMPONENT_PATH = /^\/components\/([^/]+)(?:\/([^/]+))?\/?$/i;
+const VERSION_PREFIX = /^[vV](\d+)$/;
+/** Parse a supported platform Component reference into its canonical parts. */
+export function parseAppletComponentRef(raw) {
+    const parsed = z.string().safeParse(raw);
+    if (!parsed.success)
+        return null;
+    const trimmed = parsed.data.trim();
+    if (!trimmed)
+        return null;
+    const prefixed = trimmed.replace(COMPONENT_REF_PREFIX, '');
+    const path = prefixed.match(COMPONENT_PATH);
+    let idCandidate;
+    let versionCandidate;
+    if (path) {
+        idCandidate = path[1];
+        versionCandidate = path[2]?.replace(/\.js$/i, '');
+    }
+    else {
+        const separator = prefixed.lastIndexOf('@');
+        idCandidate = separator < 0 ? prefixed : prefixed.slice(0, separator);
+        versionCandidate = separator < 0 ? undefined : prefixed.slice(separator + 1);
+    }
+    const id = idCandidate.trim();
+    if (!UUID_PATTERN.test(id))
+        return null;
+    const requestedVersion = versionCandidate?.trim() || undefined;
+    const versionMatch = requestedVersion?.match(VERSION_PREFIX);
+    return {
+        id: id.toLowerCase(),
+        version: versionMatch?.[1] ?? requestedVersion ?? 'latest',
+        raw: parsed.data
+    };
+}
+/** Format canonical Component reference parts for storage. */
+export function formatAppletComponentRef(ref) {
+    return ref.version === 'latest' ? ref.id : `${ref.id}@${ref.version}`;
+}
+export const AppletComponentRefSchema = z.string().refine((value) => parseAppletComponentRef(value) !== null, {
+    message: 'componentRef must identify a UUID Component, optionally with a version, using a bare UUID, component:<uuid>, platform.components.<uuid>, or /components/<uuid>/<version>.js form.'
+});
+//# sourceMappingURL=component-ref.js.map

package/dist/component-ref.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"component-ref.js","sourceRoot":"","sources":["../src/component-ref.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAQ5B,MAAM,YAAY,GAAG,4EAA4E,CAAC;AAClG,MAAM,oBAAoB,GAAG,yCAAyC,CAAC;AACvE,MAAM,cAAc,GAAG,2CAA2C,CAAC;AACnE,MAAM,cAAc,GAAG,aAAa,CAAC;AAErC,+EAA+E;AAC/E,MAAM,UAAU,uBAAuB,CAAC,GAA8B;IACrE,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAEjC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC5C,IAAI,WAAmB,CAAC;IACxB,IAAI,gBAAoC,CAAC;IACzC,IAAI,IAAI,EAAE,CAAC;QACV,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACtB,gBAAgB,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACnD,CAAC;SAAM,CAAC;QACP,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC5C,WAAW,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACtE,gBAAgB,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAExC,MAAM,gBAAgB,GAAG,gBAAgB,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAC/D,MAAM,YAAY,GAAG,gBAAgB,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IAC7D,OAAO;QACN,EAAE,EAAE,EAAE,CAAC,WAAW,EAAE;QACpB,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,gBAAgB,IAAI,QAAQ;QAC1D,GAAG,EAAE,MAAM,CAAC,IAAI;KAChB,CAAC;AACH,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,wBAAwB,CAAC,GAA+C;IACvF,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;AACvE,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CACxD,CAAC,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,KAAK,CAAC,KAAK,IAAI,EAClD;IACC,OAAO,EACN,mLAAmL;CACpL,CACD,CAAC"}

package/dist/composition-plan.d.ts

@@ -0,0 +1,92 @@
+/**
+ * What a host may actually mount, slot by slot.
+ *
+ * `checkAppletComposition` answers "is this graph legal" — cycles, depth, mount
+ * count. This answers the different question a RENDERER has to ask: for each
+ * declared slot, may this viewer see that child right now, and if not, why not.
+ *
+ * THE CONSENT RULE IS THE WHOLE POINT. A composed child is separate code with
+ * its own capability requests, so it cannot run on the parent's grant. This
+ * branch already closed that exact hole twice — once where any viewer's grant
+ * authorized any subscriber, and once where a grant from another viewer was
+ * handed to whoever opened the page. A renderer that mounted children under the
+ * parent's consent would reopen it a third time, and would be the most natural
+ * thing to write.
+ *
+ * Returning a REASON per slot rather than filtering is deliberate: a subscriber
+ * surface has to be able to say "this part needs your approval" instead of
+ * silently rendering a hole.
+ */
+import type { AppletDefinitionManifest } from './schemas/definition.ts';
+import type { ComponentReleaseRef } from './schemas/component-release-ref.ts';
+export type AppletSlotDecision = {
+    readonly slot: string;
+    readonly status: 'mount';
+    readonly release: ComponentReleaseRef;
+    /**
+     * The child's own applet manifest, when the host could resolve one.
+     *
+     * `null` means the release is not PUBLISHED, so nothing declares its
+     * stores — a host can show it consented but cannot bind a root surface
+     * to a document that does not exist.
+     */
+    readonly manifest: AppletDefinitionManifest | null;
+} | {
+    readonly slot: string;
+    readonly status: 'needs-consent';
+    readonly release: ComponentReleaseRef;
+    readonly capabilities: readonly string[];
+} | {
+    readonly slot: string;
+    readonly status: 'unavailable';
+    readonly release: ComponentReleaseRef;
+    readonly reason: 'unresolvable' | 'self-reference' | 'not-attempted';
+};
+export interface AppletCompositionPlan {
+    readonly slots: readonly AppletSlotDecision[];
+    /**
+     * The base this applet extends, as a DECISION rather than a bare ref.
+     *
+     * It used to be `ComponentReleaseRef | null`, and that type made the safe
+     * thing inexpressible: an unresolvable base, an unconsented base, and the
+     * applet's own root all produced the same value, and the only representable
+     * action was "mount it". A base is exactly as much separate code as a slot.
+     */
+    readonly extends: AppletSlotDecision | null;
+}
+export declare function planAppletComposition(input: {
+    root: ComponentReleaseRef;
+    manifest: AppletDefinitionManifest;
+    /**
+     * The child's REQUESTED CAPABILITY TAGS, or null when the host cannot resolve
+     * that release.
+     *
+     * Tags, not a manifest. An earlier version took an `AppletDefinitionManifest`
+     * and the only production caller had a COMPONENT manifest to give it — a
+     * different document with the same field name, whose `capabilities` is
+     * `string[]` rather than `{tag,reason}[]`. The prompt then rendered a list of
+     * blanks, and two capabilities crashed the keyed `{#each}` outright. Asking
+     * for exactly what is used makes that substitution impossible.
+     */
+    resolve: (release: ComponentReleaseRef) => readonly string[] | null;
+    /**
+     * The child's applet manifest, if the host can resolve one.
+     *
+     * Separate from `resolve` on purpose: capability TAGS come from the component
+     * manifest and are enough to PROMPT, while binding a root surface needs the
+     * applet manifest, which exists only for a published release. Asking for them
+     * separately keeps a host that has one and not the other honest.
+     */
+    manifestFor?: (release: ComponentReleaseRef) => AppletDefinitionManifest | null;
+    /** Does THIS viewer hold consent for THIS exact release? */
+    hasConsent: (release: ComponentReleaseRef) => boolean;
+    /**
+     * Did the host even TRY to resolve this release?
+     *
+     * A host may bound how many children one page load resolves. An edge it
+     * skipped is not one it failed on, and telling a viewer "could not be
+     * resolved" when nobody looked is a small lie that reads like a broken child.
+     */
+    attempted?: (release: ComponentReleaseRef) => boolean;
+}): AppletCompositionPlan;
+//# sourceMappingURL=composition-plan.d.ts.map

package/dist/composition-plan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"composition-plan.d.ts","sourceRoot":"","sources":["../src/composition-plan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,KAAK,EAAqB,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAC3F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAG9E,MAAM,MAAM,kBAAkB,GAC3B;IACA,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC;;;;;;OAMG;IACH,QAAQ,CAAC,QAAQ,EAAE,wBAAwB,GAAG,IAAI,CAAC;CAClD,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,cAAc,GAAG,gBAAgB,GAAG,eAAe,CAAC;CACpE,CAAC;AAEL,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,KAAK,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAC9C;;;;;;;OAOG;IACH,QAAQ,CAAC,OAAO,EAAE,kBAAkB,GAAG,IAAI,CAAC;CAC5C;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC5C,IAAI,EAAE,mBAAmB,CAAC;IAC1B,QAAQ,EAAE,wBAAwB,CAAC;IACnC;;;;;;;;;;OAUG;IACH,OAAO,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,SAAS,MAAM,EAAE,GAAG,IAAI,CAAC;IACpE;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,wBAAwB,GAAG,IAAI,CAAC;IAChF,4DAA4D;IAC5D,UAAU,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,OAAO,CAAC;IACtD;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,OAAO,CAAC;CACtD,GAAG,qBAAqB,CAgDxB"}

package/dist/composition-plan.js

@@ -0,0 +1,44 @@
+import { appletCompositionNodeId } from "./composition.js";
+export function planAppletComposition(input) {
+    const rootId = appletCompositionNodeId(input.root);
+    const slots = [];
+    let extendsDecision = null;
+    /** ONE rule, applied to every edge. A base is not exempt from any of it. */
+    const decide = (edge) => {
+        // An edge naming its own root is refused rather than mounted. The graph
+        // checker calls that a cycle — mode-agnostically — and a renderer that
+        // reached it would recurse.
+        if (appletCompositionNodeId(edge.release) === rootId) {
+            return { slot: edge.slot, status: 'unavailable', release: edge.release, reason: 'self-reference' };
+        }
+        if (input.attempted && !input.attempted(edge.release)) {
+            return { slot: edge.slot, status: 'unavailable', release: edge.release, reason: 'not-attempted' };
+        }
+        const capabilities = input.resolve(edge.release);
+        if (!capabilities) {
+            // UNAVAILABLE, not skipped. A host that silently drops an edge it cannot
+            // resolve renders a different applet than the one that was published.
+            return { slot: edge.slot, status: 'unavailable', release: edge.release, reason: 'unresolvable' };
+        }
+        if (!input.hasConsent(edge.release)) {
+            // The CHILD's own requests, so a prompt can name what it is asking for.
+            // Reading the parent's would be the laundering in prompt form.
+            return { slot: edge.slot, status: 'needs-consent', release: edge.release, capabilities };
+        }
+        return {
+            slot: edge.slot,
+            status: 'mount',
+            release: edge.release,
+            manifest: input.manifestFor?.(edge.release) ?? null
+        };
+    };
+    for (const edge of input.manifest.composition) {
+        if (edge.mode === 'extends') {
+            extendsDecision = decide(edge);
+            continue;
+        }
+        slots.push(decide(edge));
+    }
+    return { slots, extends: extendsDecision };
+}
+//# sourceMappingURL=composition-plan.js.map

package/dist/composition-plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"composition-plan.js","sourceRoot":"","sources":["../src/composition-plan.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AA0C3D,MAAM,UAAU,qBAAqB,CAAC,KAkCrC;IACA,MAAM,MAAM,GAAG,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,KAAK,GAAyB,EAAE,CAAC;IACvC,IAAI,eAAe,GAA8B,IAAI,CAAC;IAEtD,4EAA4E;IAC5E,MAAM,MAAM,GAAG,CAAC,IAAuB,EAAsB,EAAE;QAC9D,wEAAwE;QACxE,uEAAuE;QACvE,4BAA4B;QAC5B,IAAI,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC;YACtD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;QACpG,CAAC;QAED,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACvD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QACnG,CAAC;QAED,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC,YAAY,EAAE,CAAC;YACnB,yEAAyE;YACzE,sEAAsE;YACtE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QAClG,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACrC,wEAAwE;YACxE,+DAA+D;YAC/D,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC;QAC1F,CAAC;QAED,OAAO;YACN,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI;SACnD,CAAC;IACH,CAAC,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC/C,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YAC/B,SAAS;QACV,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1B,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;AAC5C,CAAC"}

package/dist/composition.d.ts

@@ -0,0 +1,97 @@
+/**
+ * Composition safety — cycles, depth, breadth, and render cost.
+ *
+ * The applets SPEC has claimed "cycle rejection" under Composition since before
+ * this branch, and nothing implemented it. A manifest may compose exact child
+ * releases; those children may compose their own. Nothing stopped release A
+ * composing B while B composes A.
+ *
+ * The failure is not abstract. A renderer walking that graph mounts frames until
+ * the tab dies, and a publish-time validator that follows it never returns. The
+ * shape is the same one `check:cycles` guards for the package graph, applied to
+ * a graph an untrusted author controls.
+ *
+ * Three quantities, because an adversarial review showed one of them was being
+ * measured wrongly and another was not being measured at all:
+ *
+ *   DEPTH is the longest chain, computed as a memoized HEIGHT per node. The
+ *   first version tracked the current recursion depth and memoized visited
+ *   nodes, which meant a release first reached by a SHORT path was never
+ *   re-examined when reached by a long one. With `R → [A, B]`, `A → [X]`,
+ *   `B → [A]`, the true chain `R → B → A → X` is four long, and that version
+ *   returned `ok` with `depth: 3` — and flipped to `too-deep` if the author
+ *   merely reordered the array. Author-controlled array order decided whether
+ *   the limit applied.
+ *
+ *   MOUNTS is the number of distinct root-to-leaf PATHS. Unique-release count
+ *   does not bound it: a seven-layer graph of 253 distinct releases can present
+ *   36^7 paths, and the old comment claiming the node budget covered fan-out was
+ *   simply wrong.
+ *
+ *   Paths are not FRAMES, and an earlier version of this paragraph said they
+ *   were. A renderer walking a path of length d instantiates d frames, so the
+ *   real bound is `maxMounts × maxDepth` — 4096 under the shipped limits, not
+ *   512. That is the number to check against before mounting anything.
+ *
+ *   NODES is distinct releases, which bounds the cost of validation itself.
+ *
+ * Pure, and resolution is injected. Whoever calls this owns fetching manifests —
+ * publish-time from the release store, render-time from a cache — and this file
+ * never performs I/O so the policy stays testable without one.
+ */
+import type { ComponentReleaseRef } from './schemas/component-release-ref.ts';
+import type { AppletComposition } from './schemas/definition.ts';
+/** Identity of a node in the composition graph: one exact release. */
+export declare function appletCompositionNodeId(release: ComponentReleaseRef): string;
+export interface AppletCompositionLimits {
+    /** Longest chain of nested releases. */
+    maxDepth: number;
+    /** Distinct releases visited, which bounds validation cost. */
+    maxNodes: number;
+    /** Distinct root-to-leaf paths, which bounds what a renderer mounts. */
+    maxMounts: number;
+}
+export declare const APPLET_COMPOSITION_LIMITS: AppletCompositionLimits;
+export type AppletCompositionVerdict = {
+    ok: true;
+    nodesVisited: number;
+    depth: number;
+    mounts: number;
+} | {
+    ok: false;
+    reason: 'cycle';
+    path: string[];
+} | {
+    ok: false;
+    reason: 'too-deep';
+    depth: number;
+    limit: number;
+} | {
+    ok: false;
+    reason: 'too-many-nodes';
+    limit: number;
+} | {
+    ok: false;
+    reason: 'too-many-mounts';
+    mounts: number;
+    limit: number;
+} | {
+    ok: false;
+    reason: 'unresolvable';
+    path: string[];
+};
+/**
+ * Walk the composition graph from one release and refuse it if it loops, nests
+ * too deeply, spans too many releases, would mount too many frames, or names a
+ * child that cannot be resolved.
+ *
+ * An unresolvable child is a REFUSAL, not a skip. Treating it as a leaf would
+ * mean a manifest could hide a cycle behind a release the validator happens not
+ * to have, and get a clean verdict for it.
+ */
+export declare function checkAppletComposition(input: {
+    root: ComponentReleaseRef;
+    resolve: (release: ComponentReleaseRef) => readonly AppletComposition[] | null;
+    limits?: Partial<AppletCompositionLimits>;
+}): AppletCompositionVerdict;
+//# sourceMappingURL=composition.d.ts.map

package/dist/composition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"composition.d.ts","sourceRoot":"","sources":["../src/composition.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,sEAAsE;AACtE,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,CAI5E;AAED,MAAM,WAAW,uBAAuB;IACvC,wCAAwC;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,+DAA+D;IAC/D,QAAQ,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,eAAO,MAAM,yBAAyB,EAAE,uBAIvC,CAAC;AAEF,MAAM,MAAM,wBAAwB,GACjC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACjE;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,GAC9C;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC/D;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACtD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACvE;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAOzD;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC7C,IAAI,EAAE,mBAAmB,CAAC;IAC1B,OAAO,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,SAAS,iBAAiB,EAAE,GAAG,IAAI,CAAC;IAC/E,MAAM,CAAC,EAAE,OAAO,CAAC,uBAAuB,CAAC,CAAC;CAC1C,GAAG,wBAAwB,CAoF3B"}

package/dist/composition.js

@@ -0,0 +1,99 @@
+/** Identity of a node in the composition graph: one exact release. */
+export function appletCompositionNodeId(release) {
+    // bundleHash included deliberately: two builds of the same component version
+    // are different code and therefore different nodes.
+    return `${release.componentId}@${release.version}#${release.bundleHash}`;
+}
+export const APPLET_COMPOSITION_LIMITS = {
+    maxDepth: 8,
+    maxNodes: 256,
+    maxMounts: 512
+};
+/**
+ * Walk the composition graph from one release and refuse it if it loops, nests
+ * too deeply, spans too many releases, would mount too many frames, or names a
+ * child that cannot be resolved.
+ *
+ * An unresolvable child is a REFUSAL, not a skip. Treating it as a leaf would
+ * mean a manifest could hide a cycle behind a release the validator happens not
+ * to have, and get a clean verdict for it.
+ */
+export function checkAppletComposition(input) {
+    // An explicitly-undefined property must not erase a default. A caller
+    // forwarding an optional config value — `{ maxDepth: config.maxDepth }` —
+    // would otherwise silently disable the cap, and `exactOptionalPropertyTypes`
+    // is not enabled repo-wide, so it typechecks.
+    // SAFETY: entries originate from Partial<AppletCompositionLimits> and only non-undefined entries are kept
+    const overrides = Object.fromEntries(Object.entries(input.limits ?? {}).filter(([, value]) => value !== undefined));
+    const limits = { ...APPLET_COMPOSITION_LIMITS, ...overrides };
+    const measured = new Map();
+    const onPath = new Set();
+    const path = [];
+    let nodesVisited = 0;
+    let failure = null;
+    function walk(release) {
+        const id = appletCompositionNodeId(release);
+        if (onPath.has(id)) {
+            failure = { ok: false, reason: 'cycle', path: [...path, id] };
+            return null;
+        }
+        // A release reachable by two routes is not a cycle, and its HEIGHT is the
+        // same however it was reached — which is exactly why height is safe to
+        // memoize where a running depth was not.
+        const already = measured.get(id);
+        if (already)
+            return already;
+        nodesVisited += 1;
+        if (nodesVisited > limits.maxNodes) {
+            failure = { ok: false, reason: 'too-many-nodes', limit: limits.maxNodes };
+            return null;
+        }
+        const children = input.resolve(release);
+        // Nullish, not `=== null`. The most natural resolver is an index lookup —
+        // `(ref) => index[appletCompositionNodeId(ref)]` — which returns UNDEFINED
+        // for a missing release and typechecks, because `noUncheckedIndexedAccess`
+        // is not enabled repo-wide. A validator whose purpose is refusing hostile
+        // input crashed with a TypeError on the input it exists to refuse.
+        if (children === null || children === undefined) {
+            failure = { ok: false, reason: 'unresolvable', path: [...path, id] };
+            return null;
+        }
+        onPath.add(id);
+        path.push(id);
+        let tallestChild = 0;
+        let mounts = 0;
+        for (const child of children) {
+            const childMeasure = walk(child.release);
+            if (!childMeasure)
+                return null;
+            tallestChild = Math.max(tallestChild, childMeasure.height);
+            mounts += childMeasure.mounts;
+            if (mounts > limits.maxMounts) {
+                failure = { ok: false, reason: 'too-many-mounts', mounts, limit: limits.maxMounts };
+                return null;
+            }
+        }
+        path.pop();
+        onPath.delete(id);
+        // A leaf is one mount: itself.
+        const result = { height: tallestChild + 1, mounts: children.length === 0 ? 1 : mounts };
+        measured.set(id, result);
+        return result;
+    }
+    const root = walk(input.root);
+    // Every `return null` in walk assigns `failure` first, so a non-null failure
+    // here is guaranteed.
+    if (!root) {
+        if (failure)
+            return failure;
+        return { ok: false, reason: 'unresolvable', path: [appletCompositionNodeId(input.root)] };
+    }
+    if (root.height > limits.maxDepth) {
+        return { ok: false, reason: 'too-deep', depth: root.height, limit: limits.maxDepth };
+    }
+    // No post-loop mounts check: the in-loop guard already bounds every partial
+    // sum, and a leaf is fixed at 1, so a root-level re-check cannot fire for any
+    // maxMounts >= 1. It was dead code that looked like a control.
+    return { ok: true, nodesVisited, depth: root.height, mounts: root.mounts };
+}
+//# sourceMappingURL=composition.js.map

package/dist/composition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"composition.js","sourceRoot":"","sources":["../src/composition.ts"],"names":[],"mappings":"AA4CA,sEAAsE;AACtE,MAAM,UAAU,uBAAuB,CAAC,OAA4B;IACnE,6EAA6E;IAC7E,oDAAoD;IACpD,OAAO,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;AAC1E,CAAC;AAWD,MAAM,CAAC,MAAM,yBAAyB,GAA4B;IACjE,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,GAAG;IACb,SAAS,EAAE,GAAG;CACd,CAAC;AAeF;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAItC;IACA,sEAAsE;IACtE,0EAA0E;IAC1E,6EAA6E;IAC7E,8CAA8C;IAC9C,0GAA0G;IAC1G,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CACnC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CACzC,CAAC;IACtC,MAAM,MAAM,GAAG,EAAE,GAAG,yBAAyB,EAAE,GAAG,SAAS,EAAE,CAAC;IAE9D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,OAAO,GAAoC,IAAI,CAAC;IAEpD,SAAS,IAAI,CAAC,OAA4B;QACzC,MAAM,EAAE,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;QAE5C,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACpB,OAAO,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;YAC9D,OAAO,IAAI,CAAC;QACb,CAAC;QACD,0EAA0E;QAC1E,uEAAuE;QACvE,yCAAyC;QACzC,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAE5B,YAAY,IAAI,CAAC,CAAC;QAClB,IAAI,YAAY,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpC,OAAO,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;YAC1E,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACxC,0EAA0E;QAC1E,2EAA2E;QAC3E,2EAA2E;QAC3E,0EAA0E;QAC1E,mEAAmE;QACnE,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACjD,OAAO,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;YACrE,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACd,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC9B,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACzC,IAAI,CAAC,YAAY;gBAAE,OAAO,IAAI,CAAC;YAC/B,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;YAC3D,MAAM,IAAI,YAAY,CAAC,MAAM,CAAC;YAC9B,IAAI,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;gBAC/B,OAAO,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;gBACpF,OAAO,IAAI,CAAC;YACb,CAAC;QACF,CAAC;QACD,IAAI,CAAC,GAAG,EAAE,CAAC;QACX,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAElB,+BAA+B;QAC/B,MAAM,MAAM,GAAa,EAAE,MAAM,EAAE,YAAY,GAAG,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAClG,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACzB,OAAO,MAAM,CAAC;IACf,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,6EAA6E;IAC7E,sBAAsB;IACtB,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;IAC3F,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QACnC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;IACtF,CAAC;IACD,4EAA4E;IAC5E,8EAA8E;IAC9E,+DAA+D;IAC/D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;AAC5E,CAAC"}

package/dist/config/applets.config.descriptor.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Applets settings — config/manifest with useful defaults.
+ *
+ * Previous call-site defaults for `vibes applet serve` (loopback hostname and
+ * port 5190) live here so the serve command runs with nothing declared.
+ */
+import * as z from 'zod/v4';
+export declare const AppletsConfigSchema: z.ZodObject<{
+    serveHostname: z.ZodDefault<z.ZodString>;
+    servePort: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strip>;
+export type AppletsConfig = z.infer<typeof AppletsConfigSchema>;
+export declare const APPLETS_CONFIG_MANIFEST_ID = "applets";
+export declare const appletsConfigDescriptor: {
+    kind: "config/manifest";
+    id: string;
+    name: string;
+    namespace: string;
+    description: string;
+    tier: string;
+    category: string;
+    schema: z.ZodObject<{
+        serveHostname: z.ZodDefault<z.ZodString>;
+        servePort: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>;
+    fields: {
+        serveHostname: {
+            ui: {
+                label: string;
+                component: string;
+                group: string;
+            };
+        };
+        servePort: {
+            ui: {
+                label: string;
+                component: string;
+                group: string;
+            };
+        };
+    };
+    groups: {
+        id: string;
+        label: string;
+    }[];
+    allowedAdapters: string[];
+    defaultAdapter: string;
+    scope: string;
+    customTables: boolean;
+    version: number;
+    internal: boolean;
+    enabled: true;
+};
+export default appletsConfigDescriptor;
+//# sourceMappingURL=applets.config.descriptor.d.ts.map

package/dist/config/applets.config.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"applets.config.descriptor.d.ts","sourceRoot":"","sources":["../../src/config/applets.config.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,eAAO,MAAM,mBAAmB;;;iBAG9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,0BAA0B,YAAY,CAAC;AAEpD,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqBlC,CAAC;AAEH,eAAe,uBAAuB,CAAC"}

package/dist/config/applets.config.descriptor.js

@@ -0,0 +1,37 @@
+/**
+ * Applets settings — config/manifest with useful defaults.
+ *
+ * Previous call-site defaults for `vibes applet serve` (loopback hostname and
+ * port 5190) live here so the serve command runs with nothing declared.
+ */
+import * as z from 'zod/v4';
+import { createRuntimeAsset } from '@vibesdotdev/kernel';
+export const AppletsConfigSchema = z.object({
+    serveHostname: z.string().min(1).default('127.0.0.1'),
+    servePort: z.number().int().min(1).max(65_535).default(5190)
+});
+export const APPLETS_CONFIG_MANIFEST_ID = 'applets';
+export const appletsConfigDescriptor = createRuntimeAsset({
+    kind: 'config/manifest',
+    id: APPLETS_CONFIG_MANIFEST_ID,
+    name: 'Applets',
+    namespace: 'applets',
+    description: 'Local applet serve bind',
+    tier: 'user',
+    category: 'runtime',
+    schema: AppletsConfigSchema,
+    fields: {
+        serveHostname: { ui: { label: 'Serve hostname', component: 'input', group: 'serve' } },
+        servePort: { ui: { label: 'Serve port', component: 'number', group: 'serve' } }
+    },
+    groups: [{ id: 'serve', label: 'Serve' }],
+    allowedAdapters: ['storage.localdb', 'storage.json'],
+    defaultAdapter: 'storage.localdb',
+    scope: 'auto',
+    customTables: false,
+    version: 1,
+    internal: false,
+    enabled: true
+});
+export default appletsConfigDescriptor;
+//# sourceMappingURL=applets.config.descriptor.js.map

package/dist/config/applets.config.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"applets.config.descriptor.js","sourceRoot":"","sources":["../../src/config/applets.config.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IACrD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;CAC5D,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,0BAA0B,GAAG,SAAS,CAAC;AAEpD,MAAM,CAAC,MAAM,uBAAuB,GAAG,kBAAkB,CAAC;IACzD,IAAI,EAAE,iBAAiB;IACvB,EAAE,EAAE,0BAA0B;IAC9B,IAAI,EAAE,SAAS;IACf,SAAS,EAAE,SAAS;IACpB,WAAW,EAAE,yBAAyB;IACtC,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,SAAS;IACnB,MAAM,EAAE,mBAAmB;IAC3B,MAAM,EAAE;QACP,aAAa,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACtF,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;KAC/E;IACD,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACzC,eAAe,EAAE,CAAC,iBAAiB,EAAE,cAAc,CAAC;IACpD,cAAc,EAAE,iBAAiB;IACjC,KAAK,EAAE,MAAM;IACb,YAAY,EAAE,KAAK;IACnB,OAAO,EAAE,CAAC;IACV,QAAQ,EAAE,KAAK;IACf,OAAO,EAAE,IAAI;CACb,CAAC,CAAC;AAEH,eAAe,uBAAuB,CAAC"}

package/dist/config/load.d.ts

@@ -0,0 +1,4 @@
+import type { VibesRuntime } from '@vibesdotdev/kernel';
+import { type AppletsConfig } from './applets.config.descriptor.ts';
+export declare function loadAppletsConfig(runtime: VibesRuntime): Promise<AppletsConfig>;
+//# sourceMappingURL=load.d.ts.map

package/dist/config/load.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"load.d.ts","sourceRoot":"","sources":["../../src/config/load.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAGN,KAAK,aAAa,EAClB,MAAM,gCAAgC,CAAC;AAMxC,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,CAUrF"}

package/dist/config/load.js

@@ -0,0 +1,12 @@
+import { getVibesClient } from '@vibesdotdev/kernel/client';
+import { APPLETS_CONFIG_MANIFEST_ID, AppletsConfigSchema } from "./applets.config.descriptor.js";
+export async function loadAppletsConfig(runtime) {
+    const defaults = AppletsConfigSchema.parse({});
+    if (!runtime.hasKind('config/manifest') ||
+        runtime.query('config/manifest').withId(APPLETS_CONFIG_MANIFEST_ID).descriptors().length === 0) {
+        return defaults;
+    }
+    const config = await getVibesClient('config', runtime);
+    return config.read({ id: APPLETS_CONFIG_MANIFEST_ID, schema: AppletsConfigSchema });
+}
+//# sourceMappingURL=load.js.map