@vibesdotdev/chat 0.0.0-stage → 1.0.0-rc.0

package/LICENSE

@@ -0,0 +1,18 @@
+MIT License
+
+Copyright (c) 2026 VIBES DEV LLC
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and
+associated documentation files (the "Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the
+following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial
+portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT
+LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO
+EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE
+USE OR OTHER DEALINGS IN THE SOFTWARE.

package/README.md

@@ -1,3 +1,124 @@
-# Temporary Holding Version
+# @vibesdotdev/chat
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Chat domain package — runtime kinds, schemas, descriptors, and clients for chat rooms, messages, participants, agents, presence, and chat modes. Pure TypeScript; safe for browser, SSR, CLI, TUI, desktop, MCP, and agent surfaces.
+
+The SvelteKit app and server-only DB queries live in [`apps/chat-web`](../../../apps/chat-web); reusable Svelte components ship from this package's explicit `./svelte` surface. See [SPEC.md](./SPEC.md) for the contract.
+
+## Install
+
+Registry package — listed under `dependencies` as `"@vibesdotdev/chat": "^0.2.x"` (published range; never `workspace:`).
+
+## Usage
+
+### Get the canonical chat client
+
+```ts
+import { getVibesChatClient } from '@vibesdotdev/chat/client';
+
+const chat = await getVibesChatClient(runtime);
+const room = await chat.rooms.create({ title: 'Hello' });
+await room.send({ content: 'hi there' });
+```
+
+`getVibesChatClient(runtime)` returns a `RuntimeChatClient` registered under `runtime/client` id `chat`. The runtime selects the right `chat/client` variant for the current scope:
+
+| Scope                    | Variant                          | File                              |
+| ------------------------ | -------------------------------- | --------------------------------- |
+| browser, ssr, worker     | api (HTTP to `/api/chat/*`)      | `client/chat-client-api.impl.ts`   |
+| `cli`, `tui`, `bridge`   | local (in-process, no HTTP)      | `client/chat-client-local.impl.cli.tui.bridge.ts` |
+
+### Explicit constructor
+
+When you need to pass an origin, headers, or a specific runtime instance:
+
+```ts
+import { createChatClient } from '@vibesdotdev/chat/client';
+import { serviceOrigin } from '@vibesdotdev/infra-core/service';
+
+const chat = await createChatClient({
+  origin: await serviceOrigin(event.locals.runtime, 'chat'),
+  headers: { authorization: `Bearer ${event.locals.sessionToken}` },
+  runtime: event.locals.runtime
+});
+```
+
+### Register the plugin
+
+The base plugin registers Chat kinds, descriptors, semantic clients, and API/cloud implementations. Consumer hosts also compose `@vibesdotdev/chat/consumer.plugin` for the local client, worker session capability, message-publish job, storage generation executor, contexts, and augments. Runtime scopes select implementations; separate plugin imports keep consumer code out of cloud and browser bundles.
+
+```ts
+// Base registration for server and consumer hosts.
+import chatPlugin from '@vibesdotdev/chat/plugin';
+await runtime.registerPlugin(chatPlugin);
+
+// Add only on consumer hosts (CLI / TUI / desktop / consumer worker).
+import chatConsumerPlugin from '@vibesdotdev/chat/consumer.plugin';
+await runtime.registerPlugin(chatConsumerPlugin);
+
+// Browser-only surfaces that can't load server-side loaders.
+import chatBrowserPlugin from '@vibesdotdev/chat/chat.plugin.browser';
+await runtime.registerPlugin(chatBrowserPlugin);
+```
+
+In Svelte browser apps, import `@vibesdotdev/chat/svelte/runtime` during app bootstrap. That surface package registers the browser bundle; each surface awaits `ensureChatRuntimeRegistered(runtime)` (the runtime from `getRuntimeSvelteContext()`) before it resolves `getVibesChatClient(runtime)`.
+
+## What's in here
+
+| Path                             | Purpose                                                                       |
+| -------------------------------- | ----------------------------------------------------------------------------- |
+| `./src/chat.plugin.ts`           | Base kinds, descriptors, semantic clients, and API/cloud loaders. |
+| `./src/chat.consumer.plugin.ts` | Consumer implementations; compose alongside the base plugin. |
+| `./src/chat.plugin.browser.ts`   | Headless browser-safe plugin slice                                            |
+| `./src/client`                   | `RuntimeChatClient`, `WebChatClient`, `LocalChatClient`, contracts, helpers   |
+| `./src/schemas`                  | Unified room/message/participant/SSE/Kafka/UI schemas + `chat/mode` schema    |
+| `./src/tools`                    | Three chat tools (`chat-room`, `chat-message`, `chat-session-report`)               |
+| `./src/jobs`                     | `chat-message-publish` worker job descriptor + impl                           |
+| `./src/generation`               | `generation.chat-storage` executor (wraps + persists to chat storage)         |
+| `./src/storage`                  | `chat.rooms` storage manifest descriptor + impl                               |
+| `./src/realtime`                 | `chat/realtime-publisher` context (host-composed provider / SSE cloud)        |
+| `./src/context/providers/messages` | `chat-messages` context type, browser and worker provider impls (UI descriptors live in `./svelte`)  |
+| `./src/chat-modes`               | `ChatModeRecord` schema + `chat.modes` config manifest descriptor             |
+
+Chat mode discovery is synchronous through `runtime.query('chat/mode')`. A missing kind returns no modes; discovery failures propagate. Descriptor creation rejects invalid input with a value-free `CapabilityError` (`INVALID_INPUT` / `chat-mode-descriptor-invalid`). See [SPEC.md](./SPEC.md) for normalization and configuration precedence.
+
+## Running checks
+
+```bash
+bun run check   # tsc -p tsconfig.json (all source and tests) + svelte-check
+bun run test    # Bun suite, then Chromium browser suite
+bun run build   # production TypeScript and separate Svelte artifacts
+```
+
+Run tests with `bun run test` (bun test plus the vitest browser config).
+
+## Boundaries
+
+The root surface imports no Svelte, SvelteKit or Drizzle (reusable components live only under `./svelte`). SvelteKit routes, app-local runes stores, and Drizzle tables live in [`apps/chat-web`](../../../apps/chat-web). If you need server-side DB access for chat, write it in the app, not here.
+
+Local Chat storage is owned by `runtime/client` id `chat.storage`, separate
+from Chat client loading. The base and browser plugins register it; direct
+local-client use composes its minimal storage plugin on demand. Consumers in
+one runtime share the resolved `chat.rooms` manifest view or, when no manifest
+is declared, one ephemeral memory history. Independent runtimes remain isolated.
+Configured resolution failures propagate; incompatible manifests refuse with
+`INVALID_INPUT / chat-storage-incompatible` and value-free kind/id details.
+
+Local-first sends persist their original payload before cloud dispatch. A durable
+queued send rejects with `CapabilityError` code `UNAVAILABLE`, reason
+`chat-message-queued`, and value-free acceptance facts. This means saved locally,
+with cloud completion still pending. Causes retain dispatch and persistence
+failures; simultaneous failures use an ordered `AggregateError` cause. Subscriptions
+are always released. Reconnect sync replays the same identity; cancellation
+retires the pending send. If the device outbox read itself fails after delivery,
+the refusal is `UNAVAILABLE / chat-send-retention-failed` with an ordered
+`AggregateError` cause (dispatch first), never a false claim that the send is
+durably retained.
+
+
+Core transports use the selected runtime environment's HTTP port; explicit fetch
+overrides remain available for hosts and tests. Missing transports and failed
+requests refuse with typed, value-free errors. Room listings use `ChatRoomSummary`
+without inventing database ownership for local rooms. Generation persistence uses
+`chat.storage`; partial failed output and cancellation results remain durable.
+
+Svelte widget discovery uses the handed runtime's `tools/ui` inventory. Workspace catalogs are registered with the activated `chat.workspace-catalog` semantic client, preserving nested mount restoration and runtime disposal.

package/dist/api/chat.api-client.descriptor.d.ts

@@ -0,0 +1,40 @@
+/**
+ * chat api-client descriptor — declares the canonical `runtime/client`
+ * surface for cross-origin/cross-process chat data access.
+ *
+ * Per docs/architecture/FEATURE-API-CLIENT-RUNTIME-KIND.md, the FEATURE
+ * PACKAGE (this one) owns the runtime kind exposing rooms/messages/etc. CLI
+ * commands, Svelte loaders, TUI components all resolve via
+ * `getVibesClient<ChatApiClient>('chat', runtime)`.
+ *
+ * The semantic client delegates to the scoped `chat/client` owner. Local
+ * consumers can use their admitted document store; API transports reach
+ * chat-web's owner routes. Capability availability follows that selection.
+ */
+/**
+ * The descriptor used to carry `originEnv` / `defaultOrigin` / `authTokenEnv`
+ * fields enumerating which env vars feed origin and auth. Those were R3.3'd
+ * out — Constitution §`config/manifest` requires env to be resolved ONCE at
+ * bootstrap, not described in the discovery descriptor. The chat origin is
+ * the declared `chat` `infra/service` (`serviceOrigin` in the runtime's
+ * configured service environment, rc04 §2.4). The caller's bearer comes
+ * from auth's `resolveCallerBearer`.
+ */
+export declare const chatApiClientDescriptor: {
+    kind: "runtime/client";
+    id: string;
+    config: {
+        citations: {
+            links: {
+                kind: string;
+                source: string;
+            }[];
+            queryPolicy: string;
+        };
+    };
+    name: string;
+    description: string;
+    surfaces: string[];
+};
+export default chatApiClientDescriptor;
+//# sourceMappingURL=chat.api-client.descriptor.d.ts.map

package/dist/api/chat.api-client.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat.api-client.descriptor.d.ts","sourceRoot":"","sources":["../../src/api/chat.api-client.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH;;;;;;;;GAQG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;CAQlC,CAAC;AAEH,eAAe,uBAAuB,CAAC"}

package/dist/api/chat.api-client.descriptor.js

@@ -0,0 +1,33 @@
+/**
+ * chat api-client descriptor — declares the canonical `runtime/client`
+ * surface for cross-origin/cross-process chat data access.
+ *
+ * Per docs/architecture/FEATURE-API-CLIENT-RUNTIME-KIND.md, the FEATURE
+ * PACKAGE (this one) owns the runtime kind exposing rooms/messages/etc. CLI
+ * commands, Svelte loaders, TUI components all resolve via
+ * `getVibesClient<ChatApiClient>('chat', runtime)`.
+ *
+ * The semantic client delegates to the scoped `chat/client` owner. Local
+ * consumers can use their admitted document store; API transports reach
+ * chat-web's owner routes. Capability availability follows that selection.
+ */
+import { createRuntimeAsset } from '@vibesdotdev/kernel';
+/**
+ * The descriptor used to carry `originEnv` / `defaultOrigin` / `authTokenEnv`
+ * fields enumerating which env vars feed origin and auth. Those were R3.3'd
+ * out — Constitution §`config/manifest` requires env to be resolved ONCE at
+ * bootstrap, not described in the discovery descriptor. The chat origin is
+ * the declared `chat` `infra/service` (`serviceOrigin` in the runtime's
+ * configured service environment, rc04 §2.4). The caller's bearer comes
+ * from auth's `resolveCallerBearer`.
+ */
+export const chatApiClientDescriptor = createRuntimeAsset({
+    kind: 'runtime/client',
+    id: 'chat',
+    config: { citations: { links: [{ kind: 'chat', source: 'chat' }], queryPolicy: 'literal' } },
+    name: 'Chat API Client',
+    description: 'Canonical client for rooms, messages, participants, tool policy and source citations through the selected Chat transport.',
+    surfaces: ['cli', 'browser', 'sveltekit', 'cloud']
+});
+export default chatApiClientDescriptor;
+//# sourceMappingURL=chat.api-client.descriptor.js.map

package/dist/api/chat.api-client.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat.api-client.descriptor.js","sourceRoot":"","sources":["../../src/api/chat.api-client.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,kBAAkB,CAAC;IACzD,IAAI,EAAE,gBAAgB;IACtB,EAAE,EAAE,MAAM;IACV,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE;IAC5F,IAAI,EAAE,iBAAiB;IACvB,WAAW,EACV,2HAA2H;IAC5H,QAAQ,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC;CAClD,CAAC,CAAC;AAEH,eAAe,uBAAuB,CAAC"}

package/dist/api/chat.api-client.types.d.ts

@@ -0,0 +1,122 @@
+import type { RuntimeEnvironmentImplementation } from "@vibesdotdev/kernel/schemas/registry";
+import type { ChatRoomSummary } from '../schemas/room-summary.ts';
+/**
+ * chat api-client types — interface + request/option shapes, plus the typed
+ * Chat refusals (CapabilityError subclasses). Imported by both the consumer impl and downstream
+ * surfaces (cli, svelte loaders).
+ */
+import { CapabilityError } from '@vibesdotdev/kernel';
+import type { RuntimeClient } from '@vibesdotdev/kernel/client';
+import type { JsonObject } from '@vibesdotdev/kernel/schemas/json';
+import type { UnifiedChatRoom, ChatRoomParticipant, UnifiedChatMessage, ChatRoomToolPolicy } from '../schemas/index.ts';
+import type { ChatConsumerExecutionAppendReceipt, ChatConsumerExecutionAppendRequest, ChatConsumerExecutionClaimRequest, ChatConsumerExecutionClaimResponse, ChatConsumerExecutionCompleteRequest, ChatConsumerExecutionFailureRequest, ChatConsumerExecutionLeaseReceipt, ChatConsumerExecutionLeaseRequest, ChatConsumerExecutionPauseRequest } from '../schemas/session-relay.ts';
+export interface ListRoomsOptions {
+    /** Optional orgId filter (applied client-side; the endpoint returns all rooms the caller can see). */
+    orgId?: string;
+}
+export interface ListMessagesOptions {
+    /** Page size; defaults to server-side default when omitted. */
+    limit?: number;
+    /** Cursor-style pagination token; passed straight to the endpoint. */
+    cursor?: string;
+    /** ISO timestamp; applied client-side after the fetch (no server-side filter exists today). */
+    since?: string;
+}
+export interface SendMessageInput {
+    chatRoomId: string;
+    content: string;
+    replyToId?: string;
+    stagedContext?: JsonObject;
+}
+interface SendMessageMessage {
+    id: string;
+    userMessageId: string;
+    content: string;
+}
+export interface SendMessageResult {
+    success?: boolean;
+    roomId?: string;
+    message?: SendMessageMessage;
+    generationTriggered?: boolean;
+}
+export interface ChatServiceRequestAssertion {
+    /** Persisted Chat owner whose authority the first-party job is replaying. */
+    userId: string;
+    /** Persisted acting organization; omission means personal, never ambient org. */
+    organizationId?: string;
+    /** First-party caller id for audit and future allowlists. */
+    callerService?: string;
+}
+export interface ChatApiClient extends RuntimeClient {
+    /** Idempotent init; alias of `load()` matching the BaseRuntimeClient surface. */
+    ensureLoaded(): Promise<void>;
+    /** Fork one SSR/user request without mutating the ambient runtime singleton. */
+    forRequest(overrides: {
+        origin?: string;
+        authOrigin?: string;
+        headers?: HeadersInit;
+        fetch?: NonNullable<RuntimeEnvironmentImplementation['httpFetch']>;
+    }): ChatApiClient;
+    /** Fork one persisted first-party job; never falls back to browser cookies. */
+    forServiceRequest(assertion: ChatServiceRequestAssertion): ChatApiClient;
+    /** GET /api/chat/rooms — list rooms visible to the bearer-token user. */
+    listRooms(options?: ListRoomsOptions): Promise<ChatRoomSummary[]>;
+    /** GET /api/chat/rooms/:id — single-room detail, or null when missing/forbidden. */
+    getRoom(roomId: string): Promise<UnifiedChatRoom | null>;
+    /** GET /api/chat/rooms/:id/users — participants snapshot. */
+    getRoomParticipants(roomId: string): Promise<ChatRoomParticipant[]>;
+    /** POST /api/chat/rooms/tool-policy {action:canUserConfigure,...} — returns the summary tool policy for a room. */
+    getRoomToolPolicy(roomId: string, userId: string): Promise<ChatRoomToolPolicy | null>;
+    /** POST /api/chat/send — send a message to a room. */
+    sendMessage(input: SendMessageInput): Promise<SendMessageResult>;
+    /** GET /api/chat/rooms/:id/messages — message page. */
+    listMessages(roomId: string, options?: ListMessagesOptions): Promise<UnifiedChatMessage[]>;
+    /** Claim one deferred consumer-run Chat session owned by the authenticated user. */
+    claimConsumerExecution(input: ChatConsumerExecutionClaimRequest): Promise<ChatConsumerExecutionClaimResponse>;
+    heartbeatConsumerExecution(roomId: string, input: ChatConsumerExecutionLeaseRequest): Promise<ChatConsumerExecutionLeaseReceipt>;
+    appendConsumerExecutionEvents(roomId: string, input: ChatConsumerExecutionAppendRequest): Promise<ChatConsumerExecutionAppendReceipt>;
+    completeConsumerExecution(roomId: string, input: ChatConsumerExecutionCompleteRequest): Promise<ChatConsumerExecutionLeaseReceipt>;
+    failConsumerExecution(roomId: string, input: ChatConsumerExecutionFailureRequest): Promise<ChatConsumerExecutionLeaseReceipt>;
+    pauseConsumerExecution(roomId: string, input: ChatConsumerExecutionPauseRequest): Promise<ChatConsumerExecutionLeaseReceipt>;
+    /** Client-side timestamp filter helper (since the endpoint has no server-side filter). */
+    sinceFilter(messages: UnifiedChatMessage[], since: string): UnifiedChatMessage[];
+    /**
+     * True when the consumer can issue authenticated requests: a browser cookie,
+     * a service fork, or the caller's bearer (auth's `resolveCallerBearer`).
+     * A signed-out caller is `false`; any other resolution failure rejects.
+     */
+    isAuthenticated(): Promise<boolean>;
+    /** Human-readable hint shown when callers need to authenticate. */
+    noSessionHint(): string;
+}
+/**
+ * The typed refusal code for an HTTP status from a Chat endpoint. One owner:
+ * `ChatApiError` and the web transport's `WebHttpError` both read it, so a
+ * status maps to the same code on every path.
+ */
+export declare function chatCapabilityCodeForStatus(status: number): "NOT_FOUND" | "INVALID_INPUT" | "PERMISSION_DENIED" | "AUTH_REQUIRED" | "CONFLICT" | "RATE_LIMITED" | "TIMEOUT" | "UNAVAILABLE" | "INTERNAL";
+/** The caller is signed out; `vibes auth login` re-authenticates. */
+export declare class ChatNotSignedInError extends CapabilityError {
+    constructor(options?: {
+        cause?: unknown;
+    });
+}
+/**
+ * A Chat endpoint answered with a non-OK status. The message is the caller's
+ * fixed text; the response body is never carried (it may echo credentials or
+ * be a proxy's HTML page).
+ */
+export declare class ChatApiError extends CapabilityError {
+    readonly status: number;
+    constructor(message: string, status: number, options?: {
+        cause?: unknown;
+    });
+}
+/** Hosted Chat work needs a service token resolved through the runtime and an owner identity. */
+export declare class ChatServiceAuthError extends CapabilityError {
+    constructor(message?: string, options?: {
+        cause?: unknown;
+    });
+}
+export {};
+//# sourceMappingURL=chat.api-client.types.d.ts.map

package/dist/api/chat.api-client.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat.api-client.types.d.ts","sourceRoot":"","sources":["../../src/api/chat.api-client.types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,sCAAsC,CAAC;AAC7F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAClE;;;;GAIG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,KAAK,EACX,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EACX,kCAAkC,EAClC,kCAAkC,EAClC,iCAAiC,EACjC,kCAAkC,EAClC,oCAAoC,EACpC,mCAAmC,EACnC,iCAAiC,EACjC,iCAAiC,EACjC,iCAAiC,EACjC,MAAM,6BAA6B,CAAC;AAErC,MAAM,WAAW,gBAAgB;IAChC,sGAAsG;IACtG,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,mBAAmB;IACnC,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+FAA+F;IAC/F,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,gBAAgB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,UAAU,CAAC;CAC3B;AAED,UAAU,kBAAkB;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IACjC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,kBAAkB,CAAC;IAC7B,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,2BAA2B;IAC3C,6EAA6E;IAC7E,MAAM,EAAE,MAAM,CAAC;IACf,iFAAiF;IACjF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,6DAA6D;IAC7D,aAAa,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,aAAc,SAAQ,aAAa;IACnD,iFAAiF;IACjF,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,gFAAgF;IAChF,UAAU,CAAC,SAAS,EAAE;QACrB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,OAAO,CAAC,EAAE,WAAW,CAAC;QACtB,KAAK,CAAC,EAAE,WAAW,CAAC,gCAAgC,CAAC,WAAW,CAAC,CAAC,CAAC;KACnE,GAAG,aAAa,CAAC;IAClB,+EAA+E;IAC/E,iBAAiB,CAAC,SAAS,EAAE,2BAA2B,GAAG,aAAa,CAAC;IAEzE,yEAAyE;IACzE,SAAS,CAAC,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IAElE,oFAAoF;IACpF,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IAEzD,6DAA6D;IAC7D,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC;IAEpE,mHAAmH;IACnH,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IAEtF,sDAAsD;IACtD,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAEjE,uDAAuD;IACvD,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAE3F,oFAAoF;IACpF,sBAAsB,CACrB,KAAK,EAAE,iCAAiC,GACtC,OAAO,CAAC,kCAAkC,CAAC,CAAC;IAC/C,0BAA0B,CACzB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,iCAAiC,GACtC,OAAO,CAAC,iCAAiC,CAAC,CAAC;IAC9C,6BAA6B,CAC5B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,kCAAkC,GACvC,OAAO,CAAC,kCAAkC,CAAC,CAAC;IAC/C,yBAAyB,CACxB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,oCAAoC,GACzC,OAAO,CAAC,iCAAiC,CAAC,CAAC;IAC9C,qBAAqB,CACpB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,mCAAmC,GACxC,OAAO,CAAC,iCAAiC,CAAC,CAAC;IAC9C,sBAAsB,CACrB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,iCAAiC,GACtC,OAAO,CAAC,iCAAiC,CAAC,CAAC;IAE9C,0FAA0F;IAC1F,WAAW,CAAC,QAAQ,EAAE,kBAAkB,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,kBAAkB,EAAE,CAAC;IAEjF;;;;OAIG;IACH,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAEpC,mEAAmE;IACnE,aAAa,IAAI,MAAM,CAAC;CACxB;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,MAAM,gJAUzD;AAED,qEAAqE;AACrE,qBAAa,oBAAqB,SAAQ,eAAe;gBAC5C,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAO;CAQ7C;AAED;;;;GAIG;AACH,qBAAa,YAAa,SAAQ,eAAe;IAChD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBACZ,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAO;CAS9E;AAED,iGAAiG;AACjG,qBAAa,oBAAqB,SAAQ,eAAe;gBAEvD,OAAO,SAAwH,EAC/H,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAO;CASlC"}

package/dist/api/chat.api-client.types.js

@@ -0,0 +1,70 @@
+/**
+ * chat api-client types — interface + request/option shapes, plus the typed
+ * Chat refusals (CapabilityError subclasses). Imported by both the consumer impl and downstream
+ * surfaces (cli, svelte loaders).
+ */
+import { CapabilityError } from '@vibesdotdev/kernel';
+/**
+ * The typed refusal code for an HTTP status from a Chat endpoint. One owner:
+ * `ChatApiError` and the web transport's `WebHttpError` both read it, so a
+ * status maps to the same code on every path.
+ */
+export function chatCapabilityCodeForStatus(status) {
+    if (status === 400 || status === 422)
+        return 'INVALID_INPUT';
+    if (status === 401)
+        return 'AUTH_REQUIRED';
+    if (status === 403)
+        return 'PERMISSION_DENIED';
+    if (status === 404)
+        return 'NOT_FOUND';
+    if (status === 409)
+        return 'CONFLICT';
+    if (status === 429)
+        return 'RATE_LIMITED';
+    if (status === 408 || status === 504)
+        return 'TIMEOUT';
+    if (status >= 500)
+        return 'UNAVAILABLE';
+    return 'INTERNAL';
+}
+/** The caller is signed out; `vibes auth login` re-authenticates. */
+export class ChatNotSignedInError extends CapabilityError {
+    constructor(options = {}) {
+        super('Not signed in. Run `vibes auth login` to authenticate against chat.vibes.dev.', 'AUTH_REQUIRED', {
+            reason: 'chat-not-signed-in',
+            recoveryHint: 'Run `vibes auth login`.',
+            cause: options.cause
+        });
+        this.name = 'ChatNotSignedInError';
+    }
+}
+/**
+ * A Chat endpoint answered with a non-OK status. The message is the caller's
+ * fixed text; the response body is never carried (it may echo credentials or
+ * be a proxy's HTML page).
+ */
+export class ChatApiError extends CapabilityError {
+    status;
+    constructor(message, status, options = {}) {
+        super(message, chatCapabilityCodeForStatus(status), {
+            reason: `chat-api-http-${status}`,
+            details: { status },
+            cause: options.cause
+        });
+        this.name = 'ChatApiError';
+        this.status = status;
+    }
+}
+/** Hosted Chat work needs a service token resolved through the runtime and an owner identity. */
+export class ChatServiceAuthError extends CapabilityError {
+    constructor(message = 'Hosted Chat work requires an internal service token resolved through the runtime secret store and an owner user id.', options = {}) {
+        super(message, 'AUTH_REQUIRED', {
+            reason: 'service-token-unavailable',
+            recoveryHint: 'Provide the internal service token through the runtime secret store, and pass the owner user id.',
+            cause: options.cause
+        });
+        this.name = 'ChatServiceAuthError';
+    }
+}
+//# sourceMappingURL=chat.api-client.types.js.map

package/dist/api/chat.api-client.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat.api-client.types.js","sourceRoot":"","sources":["../../src/api/chat.api-client.types.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAsItD;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CAAC,MAAc;IACzD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,eAAe,CAAC;IAC7D,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,eAAe,CAAC;IAC3C,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,mBAAmB,CAAC;IAC/C,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,WAAW,CAAC;IACvC,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,UAAU,CAAC;IACtC,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,cAAc,CAAC;IAC1C,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,SAAS,CAAC;IACvD,IAAI,MAAM,IAAI,GAAG;QAAE,OAAO,aAAa,CAAC;IACxC,OAAO,UAAU,CAAC;AACnB,CAAC;AAED,qEAAqE;AACrE,MAAM,OAAO,oBAAqB,SAAQ,eAAe;IACxD,YAAY,UAA+B,EAAE;QAC5C,KAAK,CAAC,+EAA+E,EAAE,eAAe,EAAE;YACvG,MAAM,EAAE,oBAAoB;YAC5B,YAAY,EAAE,yBAAyB;YACvC,KAAK,EAAE,OAAO,CAAC,KAAK;SACpB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACpC,CAAC;CACD;AAED;;;;GAIG;AACH,MAAM,OAAO,YAAa,SAAQ,eAAe;IACvC,MAAM,CAAS;IACxB,YAAY,OAAe,EAAE,MAAc,EAAE,UAA+B,EAAE;QAC7E,KAAK,CAAC,OAAO,EAAE,2BAA2B,CAAC,MAAM,CAAC,EAAE;YACnD,MAAM,EAAE,iBAAiB,MAAM,EAAE;YACjC,OAAO,EAAE,EAAE,MAAM,EAAE;YACnB,KAAK,EAAE,OAAO,CAAC,KAAK;SACpB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACtB,CAAC;CACD;AAED,iGAAiG;AACjG,MAAM,OAAO,oBAAqB,SAAQ,eAAe;IACxD,YACC,OAAO,GAAG,qHAAqH,EAC/H,UAA+B,EAAE;QAEjC,KAAK,CAAC,OAAO,EAAE,eAAe,EAAE;YAC/B,MAAM,EAAE,2BAA2B;YACnC,YAAY,EAAE,kGAAkG;YAChH,KAAK,EAAE,OAAO,CAAC,KAAK;SACpB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACpC,CAAC;CACD"}

package/dist/api/index.d.ts

@@ -0,0 +1,11 @@
+/**
+ * @vibesdotdev/chat/api — public surface of the chat api-client runtime kind.
+ *
+ * Consumers (CLI, Svelte loaders, TUI, agent loops) resolve the implementation
+ * via `getVibesClient<ChatApiClient>('chat', runtime)` and import the interface +
+ * error types from here.
+ */
+export { default as chatApiClientDescriptor } from './chat.api-client.descriptor.ts';
+export type { ChatApiClient, ListRoomsOptions, ListMessagesOptions, SendMessageInput, SendMessageResult } from './chat.api-client.types.ts';
+export { ChatApiError, ChatNotSignedInError, ChatServiceAuthError, chatCapabilityCodeForStatus } from './chat.api-client.types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/api/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,OAAO,IAAI,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AACrF,YAAY,EACX,aAAa,EACb,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/api/index.js

@@ -0,0 +1,10 @@
+/**
+ * @vibesdotdev/chat/api — public surface of the chat api-client runtime kind.
+ *
+ * Consumers (CLI, Svelte loaders, TUI, agent loops) resolve the implementation
+ * via `getVibesClient<ChatApiClient>('chat', runtime)` and import the interface +
+ * error types from here.
+ */
+export { default as chatApiClientDescriptor } from "./chat.api-client.descriptor.js";
+export { ChatApiError, ChatNotSignedInError, ChatServiceAuthError, chatCapabilityCodeForStatus } from "./chat.api-client.types.js";
+//# sourceMappingURL=index.js.map

package/dist/api/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,OAAO,IAAI,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAQrF,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/approval/approvals-client.d.ts

@@ -0,0 +1,83 @@
+/**
+ * `chat.approvals` — chat's runtime client for remote tool approvals.
+ *
+ * The ai-web → chat-web hop of the `chat-room` approval channel: it opens a
+ * pending approval on chat-web's internal tool-approvals API
+ * (`REMOTE_APPROVAL_INTERNAL_PATH_PREFIX`, service-token only) and polls for a
+ * terminal decision. A host whose runtime does not own the approval store
+ * (ai-web) supplies this client as its `chat/approval-host` transport; chat-web
+ * supplies its own store-backed host instead.
+ *
+ * Every path that is not an explicit approval resolves to a deny-shaped
+ * decision (fail-closed). Does not execute tools. chat-web exposes no decision
+ * event to this cross-app hop, so the client polls; the whole wait and each
+ * pause between polls run on its runtime's lifecycle (`wait` + `delay`), so
+ * the deadline, the caller's signal and runtime disposal all end it.
+ */
+import * as z from 'zod/v4';
+import type { KindContext, RuntimeRef } from '@vibesdotdev/kernel';
+import { BaseRuntimeClient, type RuntimeClientDescriptor } from '@vibesdotdev/kernel/client';
+import { CapabilityError } from '@vibesdotdev/kernel';
+import type { ToolApprovalDecision } from '@vibesdotdev/ai-schemas/agents/approval/types';
+import { type RemoteApprovalDecisionAwait, type RemoteApprovalOpenRequest, type RemoteApprovalOpenResult } from './remote.ts';
+export declare const CHAT_APPROVALS_CLIENT_ID = "chat.approvals";
+export declare const chatApprovalsClientDescriptor: {
+    kind: "runtime/client";
+    id: string;
+    name: string;
+    description: string;
+};
+/**
+ * Explicit transport overrides for embedders and tests (the origin is pinned
+ * through the descriptor's `baseUrl`). Absent → the runtime resolves them.
+ */
+export declare const ChatApprovalsClientOptionsSchema: z.ZodObject<{
+    serviceToken: z.ZodOptional<z.ZodString>;
+    fetch: z.ZodOptional<z.ZodCustom<(input: string, init?: RequestInit) => Promise<Response>, (input: string, init?: RequestInit) => Promise<Response>>>;
+    defaultTimeoutMs: z.ZodOptional<z.ZodNumber>;
+    defaultPollIntervalMs: z.ZodOptional<z.ZodNumber>;
+}, z.core.$loose>;
+export type ChatApprovalsClientOptions = z.infer<typeof ChatApprovalsClientOptionsSchema>;
+/** The transport overrides handed to the client do not have the documented shape. */
+export declare class ChatApprovalsClientOptionsError extends CapabilityError {
+    readonly issues: z.core.$ZodIssue[];
+    constructor(issues: z.core.$ZodIssue[]);
+}
+export declare class ChatApprovalsClient extends BaseRuntimeClient implements RemoteApprovalDecisionAwait {
+    private readonly options;
+    constructor(descriptor?: RuntimeClientDescriptor, context?: KindContext, runtime?: RuntimeRef);
+    /**
+     * chat-web's origin: the descriptor's pinned `baseUrl`, else the declared
+     * `chat` `infra/service` in this runtime's configured service environment.
+     * An undeclared service throws `NOT_FOUND`, and every call fails closed.
+     */
+    private resolveOrigin;
+    /**
+     * The internal service token, or `''` when none is configured. A resolver
+     * failure rejects typed (`UNAVAILABLE service-token-unresolved`, cause kept
+     * for the caller's report); both `open` and `awaitDecision` fail closed on
+     * either before any network call.
+     */
+    private serviceToken;
+    private fetchImpl;
+    /**
+     * Persist a pending approval on chat-web. `failed` means the pause cannot be
+     * trusted → the caller must deny (fail-closed).
+     */
+    open(request: RemoteApprovalOpenRequest, signal?: AbortSignal): Promise<RemoteApprovalOpenResult>;
+    /**
+     * Wait for a terminal decision. Timeout, abort, not-found, unauthorized and
+     * transport errors resolve to `{ approved: false, ... }` — never throw open.
+     */
+    awaitDecision(keys: {
+        roomId: string;
+        requestId: string;
+    }, options?: {
+        timeoutMs?: number;
+        pollIntervalMs?: number;
+        signal?: AbortSignal;
+    }): Promise<ToolApprovalDecision>;
+}
+/** Resolve chat's approvals client from the runtime (the `chat` plugin registers it). */
+export declare function getVibesChatApprovalsClient(runtime: RuntimeRef): Promise<ChatApprovalsClient>;
+//# sourceMappingURL=approvals-client.d.ts.map

package/dist/approval/approvals-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvals-client.d.ts","sourceRoot":"","sources":["../../src/approval/approvals-client.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAsB,MAAM,qBAAqB,CAAC;AACvF,OAAO,EACN,iBAAiB,EAEjB,KAAK,uBAAuB,EAC5B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACN,eAAe,EAOf,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+CAA+C,CAAC;AAG1F,OAAO,EAGN,KAAK,2BAA2B,EAChC,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,MAAM,aAAa,CAAC;AAErB,eAAO,MAAM,wBAAwB,mBAAmB,CAAC;AAEzD,eAAO,MAAM,6BAA6B;;;;;CAMxC,CAAC;AAQH;;;GAGG;AACH,eAAO,MAAM,gCAAgC;;6CAG3B,MAAM,SAAS,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,UAAhD,MAAM,SAAS,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC;;;iBAMhE,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAuB1F,qFAAqF;AACrF,qBAAa,+BAAgC,SAAQ,eAAe;IACnE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACxB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE;CAStC;AAED,qBAAa,mBAAoB,SAAQ,iBAAkB,YAAW,2BAA2B;IAChG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;gBAGpD,UAAU,GAAE,uBAAkF,EAC9F,OAAO,CAAC,EAAE,WAAW,EACrB,OAAO,CAAC,EAAE,UAAU;IAQrB;;;;OAIG;YACW,aAAa;IAM3B;;;;;OAKG;YACW,YAAY;IAc1B,OAAO,CAAC,SAAS;IAIjB;;;OAGG;IACG,IAAI,CAAC,OAAO,EAAE,yBAAyB,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAiDvG;;;OAGG;IACG,aAAa,CAClB,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,EAC3C,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAC7E,OAAO,CAAC,oBAAoB,CAAC;CA6DhC;AA0DD,yFAAyF;AACzF,wBAAsB,2BAA2B,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAEnG"}