@vibesdotdev/chat 0.0.0-stage → 1.0.0-rc.0

package/dist/uploads/chat-upload-store.context.descriptor.d.ts

@@ -0,0 +1,30 @@
+declare const _default: {
+    id: string;
+    kind: "context";
+    name?: string | undefined;
+    description?: string | undefined;
+    tags?: string[] | undefined;
+    hardware?: string[] | undefined;
+    enabled?: boolean | undefined;
+    priority?: number | undefined;
+    capabilityId?: string | undefined;
+    requiredContext?: string[] | undefined;
+    optionalContext?: string[] | undefined;
+    retention?: string | {
+        reason: string;
+        maxAgeDays?: number | undefined;
+        maxEntries?: number | undefined;
+        maxBytes?: number | undefined;
+        cascadeFrom?: string | undefined;
+        ageField?: string | undefined;
+        enforcedBy?: string | undefined;
+    } | undefined;
+    valueKind?: "data" | "service" | undefined;
+    valueSchema?: unknown;
+    config?: {
+        sources: ("literal" | "workspace" | "floor")[];
+        subset?: true | undefined;
+    } | undefined;
+};
+export default _default;
+//# sourceMappingURL=chat-upload-store.context.descriptor.d.ts.map

package/dist/uploads/chat-upload-store.context.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-upload-store.context.descriptor.d.ts","sourceRoot":"","sources":["../../src/uploads/chat-upload-store.context.descriptor.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAGA,wBAIG"}

package/dist/uploads/chat-upload-store.context.descriptor.js

@@ -0,0 +1,7 @@
+import { createContextDescriptor } from '@vibesdotdev/kernel/factory/context';
+import { CHAT_UPLOAD_STORE_CONTEXT_ID } from "./contract.js";
+export default createContextDescriptor({
+    id: CHAT_UPLOAD_STORE_CONTEXT_ID,
+    description: 'Chat-owned upload store resolver, selected by runtime scope (consumer filesystem vs cloud R2).'
+});
+//# sourceMappingURL=chat-upload-store.context.descriptor.js.map

package/dist/uploads/chat-upload-store.context.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-upload-store.context.descriptor.js","sourceRoot":"","sources":["../../src/uploads/chat-upload-store.context.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAE7D,eAAe,uBAAuB,CAAC;IACtC,EAAE,EAAE,4BAA4B;IAChC,WAAW,EACV,gGAAgG;CACjG,CAAC,CAAC"}

package/dist/uploads/contract.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Upload store contract — the scope-agnostic surface for chat file uploads.
+ *
+ * Production runs on Cloudflare R2 via the platform binding `UPLOADS`
+ * (see apps/chat-web/wrangler.jsonc). Local/consumer dev has no R2 binding
+ * and falls back to a filesystem store under `.vibes/data/chat-uploads/`.
+ *
+ * This module knows nothing about `chatMessageAttachments` — it only deals
+ * in raw bytes + keys. The persistence/metadata layer sits on top
+ * (see the chat-web upload endpoints).
+ *
+ * Variant selection is declarative: the consumer impl (node:fs) and the
+ * cloud impl (R2) register against the `context` kind with hardware-scope
+ * constraints, and the runtime picks the right one. No file branches on
+ * environment.
+ */
+/** Metadata returned by a successful R2 write. */
+interface R2PutResult {
+    key: string;
+    size: number;
+}
+/** Minimal Cloudflare R2 bucket surface used by the cloud upload store. */
+export interface R2BucketLike {
+    put(key: string, value: ReadableStream | ArrayBuffer | ArrayBufferView | string, options?: {
+        httpMetadata?: {
+            contentType?: string;
+        };
+    }): Promise<R2PutResult>;
+    get(key: string): Promise<R2ObjectLike | null>;
+    delete(key: string | string[]): Promise<void>;
+}
+export interface R2ObjectLike {
+    body: ReadableStream;
+    httpMetadata?: {
+        contentType?: string;
+    };
+    size?: number;
+}
+/** Request-scoped platform shape carrying the optional R2 binding. */
+export interface UploadsPlatform {
+    env?: {
+        UPLOADS?: R2BucketLike;
+    };
+}
+export interface UploadStoreResult {
+    storageKey: string;
+    size: number;
+}
+export interface UploadStoreReadResult {
+    body: ReadableStream;
+    contentType: string;
+}
+export interface UploadStore {
+    put(key: string, data: ArrayBuffer, contentType: string): Promise<UploadStoreResult>;
+    get(key: string): Promise<UploadStoreReadResult | null>;
+    delete(key: string): Promise<void>;
+}
+/**
+ * Resolved value of the `chat/upload-store` context.
+ *
+ * The active impl (consumer fs or cloud R2) is selected by the runtime via
+ * hardware scope; the request supplies its (possibly absent) platform
+ * binding when it actually needs a store. The cloud impl uses the runtime host
+ * binding, with a schema-validated legacy platform argument for compatibility;
+ * the consumer impl ignores the argument.
+ */
+export interface UploadStoreResolver {
+    resolve(platform?: UploadsPlatform): UploadStore;
+}
+/** Context id under which the upload-store resolver is registered. */
+export declare const CHAT_UPLOAD_STORE_CONTEXT_ID = "chat/upload-store";
+export declare function buildStorageKey(userId: string, fileId: string, fileName: string): string;
+export {};
+//# sourceMappingURL=contract.d.ts.map

package/dist/uploads/contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../../src/uploads/contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,kDAAkD;AAClD,UAAU,WAAW;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;CACb;AAED,2EAA2E;AAC3E,MAAM,WAAW,YAAY;IAC5B,GAAG,CACF,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,cAAc,GAAG,WAAW,GAAG,eAAe,GAAG,MAAM,EAC9D,OAAO,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE;YAAE,WAAW,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,GACnD,OAAO,CAAC,WAAW,CAAC,CAAC;IACxB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAC/C,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9C;AAED,MAAM,WAAW,YAAY;IAC5B,IAAI,EAAE,cAAc,CAAC;IACrB,YAAY,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACxC,IAAI,CAAC,EAAE,MAAM,CAAC;CACd;AAED,sEAAsE;AACtE,MAAM,WAAW,eAAe;IAC/B,GAAG,CAAC,EAAE;QACL,OAAO,CAAC,EAAE,YAAY,CAAC;KACvB,CAAC;CACF;AAED,MAAM,WAAW,iBAAiB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,qBAAqB;IACrC,IAAI,EAAE,cAAc,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC3B,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACrF,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IACnC,OAAO,CAAC,QAAQ,CAAC,EAAE,eAAe,GAAG,WAAW,CAAC;CACjD;AAED,sEAAsE;AACtE,eAAO,MAAM,4BAA4B,sBAAsB,CAAC;AAEhE,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAgBxF"}

package/dist/uploads/contract.js

@@ -0,0 +1,36 @@
+/**
+ * Upload store contract — the scope-agnostic surface for chat file uploads.
+ *
+ * Production runs on Cloudflare R2 via the platform binding `UPLOADS`
+ * (see apps/chat-web/wrangler.jsonc). Local/consumer dev has no R2 binding
+ * and falls back to a filesystem store under `.vibes/data/chat-uploads/`.
+ *
+ * This module knows nothing about `chatMessageAttachments` — it only deals
+ * in raw bytes + keys. The persistence/metadata layer sits on top
+ * (see the chat-web upload endpoints).
+ *
+ * Variant selection is declarative: the consumer impl (node:fs) and the
+ * cloud impl (R2) register against the `context` kind with hardware-scope
+ * constraints, and the runtime picks the right one. No file branches on
+ * environment.
+ */
+/** Context id under which the upload-store resolver is registered. */
+export const CHAT_UPLOAD_STORE_CONTEXT_ID = 'chat/upload-store';
+export function buildStorageKey(userId, fileId, fileName) {
+    const safeName = fileName
+        // Collapse any run of non-safe characters to a single underscore.
+        .replace(/[^a-zA-Z0-9._-]+/g, '_')
+        // Strip path traversal sequences and any leading dots so we can
+        // never resolve to a parent directory on a filesystem backend.
+        .replace(/\.{2,}/g, '.')
+        .replace(/^\.+/, '')
+        .slice(0, 64);
+    // Safety net: if sanitization produced nothing usable, fall back.
+    const finalName = safeName.length > 0 ? safeName : 'file';
+    // `user/{id}/...` namespace is the billing-attribution prefix consumed
+    // by the storage-monthly-gb sampler in account-web. Org-owned chat
+    // uploads don't exist yet; if added, route them through an `org/`
+    // branch here.
+    return `user/${userId}/${fileId}-${finalName}`;
+}
+//# sourceMappingURL=contract.js.map

package/dist/uploads/contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.js","sourceRoot":"","sources":["../../src/uploads/contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AA6DH,sEAAsE;AACtE,MAAM,CAAC,MAAM,4BAA4B,GAAG,mBAAmB,CAAC;AAEhE,MAAM,UAAU,eAAe,CAAC,MAAc,EAAE,MAAc,EAAE,QAAgB;IAC/E,MAAM,QAAQ,GAAG,QAAQ;QACxB,kEAAkE;SACjE,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC;QAClC,gEAAgE;QAChE,+DAA+D;SAC9D,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;SACnB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACf,kEAAkE;IAClE,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;IAC1D,uEAAuE;IACvE,mEAAmE;IACnE,kEAAkE;IAClE,eAAe;IACf,OAAO,QAAQ,MAAM,IAAI,MAAM,IAAI,SAAS,EAAE,CAAC;AAChD,CAAC"}

package/dist/uploads/schemas/binding.d.ts

@@ -0,0 +1,12 @@
+import * as z from 'zod/v4';
+import type { R2BucketLike } from '../contract.ts';
+export declare const CHAT_UPLOADS_BINDING = "UPLOADS";
+/** Preserve the native receiver; schema parsing must not clone host objects. */
+export declare const UploadBucketSchema: z.ZodCustom<R2BucketLike, R2BucketLike>;
+/** Compatibility for hosts still supplying request-scoped platform bindings. */
+export declare const UploadPlatformSchema: z.ZodOptional<z.ZodObject<{
+    env: z.ZodOptional<z.ZodObject<{
+        UPLOADS: z.ZodOptional<z.ZodCustom<R2BucketLike, R2BucketLike>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>>;
+//# sourceMappingURL=binding.d.ts.map

package/dist/uploads/schemas/binding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"binding.d.ts","sourceRoot":"","sources":["../../../src/uploads/schemas/binding.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEnD,eAAO,MAAM,oBAAoB,YAAY,CAAC;AAG9C,gFAAgF;AAChF,eAAO,MAAM,kBAAkB,yCAE9B,CAAC;AAEF,gFAAgF;AAChF,eAAO,MAAM,oBAAoB;;;;kBAEpB,CAAC"}

package/dist/uploads/schemas/binding.js

@@ -0,0 +1,10 @@
+import * as z from 'zod/v4';
+export const CHAT_UPLOADS_BINDING = 'UPLOADS';
+const BucketMethodsSchema = z.object({ put: z.function(), get: z.function(), delete: z.function() });
+/** Preserve the native receiver; schema parsing must not clone host objects. */
+export const UploadBucketSchema = z.custom((value) => BucketMethodsSchema.safeParse(value).success);
+/** Compatibility for hosts still supplying request-scoped platform bindings. */
+export const UploadPlatformSchema = z.object({
+    env: z.object({ UPLOADS: UploadBucketSchema.optional() }).optional()
+}).optional();
+//# sourceMappingURL=binding.js.map

package/dist/uploads/schemas/binding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"binding.js","sourceRoot":"","sources":["../../../src/uploads/schemas/binding.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,MAAM,CAAC,MAAM,oBAAoB,GAAG,SAAS,CAAC;AAC9C,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAErG,gFAAgF;AAChF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CACzC,CAAC,KAAK,EAAE,EAAE,CAAC,mBAAmB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CACvD,CAAC;AAEF,gFAAgF;AAChF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,kBAAkB,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;CACpE,CAAC,CAAC,QAAQ,EAAE,CAAC"}

package/dist/uploads/store.impl.cloud.d.ts

@@ -0,0 +1,9 @@
+import { type VibesRuntime } from '@vibesdotdev/kernel';
+import { type R2BucketLike, type UploadStore, type UploadStoreResolver } from './contract.ts';
+/** Cloudflare R2–backed store. Used in production (cloud scope). */
+export declare function createR2UploadStore(bucket: R2BucketLike): UploadStore;
+declare const _default: import("@vibesdotdev/kernel").RuntimeImplementationWrapper<{
+    provide: (runtime: VibesRuntime) => UploadStoreResolver;
+}>;
+export default _default;
+//# sourceMappingURL=store.impl.cloud.d.ts.map

package/dist/uploads/store.impl.cloud.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.impl.cloud.d.ts","sourceRoot":"","sources":["../../src/uploads/store.impl.cloud.ts"],"names":[],"mappings":"AACA,OAAO,EAAmB,KAAK,YAAY,EAA+B,MAAM,qBAAqB,CAAC;AACtG,OAAO,EAEN,KAAK,YAAY,EAEjB,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,MAAM,eAAe,CAAC;AAEvB,oEAAoE;AACpE,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,YAAY,GAAG,WAAW,CAkBrE;;uBA4BoB,YAAY;;AALjC,wBAOG"}

package/dist/uploads/store.impl.cloud.js

@@ -0,0 +1,53 @@
+import { CHAT_UPLOADS_BINDING, UploadBucketSchema, UploadPlatformSchema } from "./schemas/binding.js";
+import { CapabilityError, createRuntimeImplementation } from '@vibesdotdev/kernel';
+import { CHAT_UPLOAD_STORE_CONTEXT_ID } from "./contract.js";
+/** Cloudflare R2–backed store. Used in production (cloud scope). */
+export function createR2UploadStore(bucket) {
+    return {
+        async put(key, data, contentType) {
+            await bucket.put(key, data, { httpMetadata: { contentType } });
+            return { storageKey: key, size: data.byteLength };
+        },
+        async get(key) {
+            const object = await bucket.get(key);
+            if (!object)
+                return null;
+            return {
+                body: object.body,
+                contentType: object.httpMetadata?.contentType ?? 'application/octet-stream'
+            };
+        },
+        async delete(key) {
+            await bucket.delete(key);
+        }
+    };
+}
+function cloudUploadStoreResolver(runtime) {
+    return {
+        resolve(platform) {
+            const legacy = UploadPlatformSchema.safeParse(platform);
+            if (!legacy.success) {
+                throw new CapabilityError('Chat upload binding is invalid.', 'INVALID_INPUT', {
+                    reason: 'chat-upload-binding-invalid'
+                });
+            }
+            const bucket = runtime.getBinding(CHAT_UPLOADS_BINDING, UploadBucketSchema)
+                ?? legacy.data?.env?.UPLOADS;
+            if (!bucket) {
+                throw new CapabilityError('Chat upload binding is unavailable.', 'UNAVAILABLE', {
+                    reason: 'chat-upload-binding-unavailable'
+                });
+            }
+            return createR2UploadStore(bucket);
+        }
+    };
+}
+export default createRuntimeImplementation({
+    kind: 'context',
+    id: CHAT_UPLOAD_STORE_CONTEXT_ID,
+    constraint: { hardware: ['cloud'] },
+    implementation: {
+        provide: (runtime) => cloudUploadStoreResolver(runtime)
+    }
+});
+//# sourceMappingURL=store.impl.cloud.js.map

package/dist/uploads/store.impl.cloud.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.impl.cloud.js","sourceRoot":"","sources":["../../src/uploads/store.impl.cloud.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACtG,OAAO,EAAE,eAAe,EAAqB,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AACtG,OAAO,EACN,4BAA4B,EAK5B,MAAM,eAAe,CAAC;AAEvB,oEAAoE;AACpE,MAAM,UAAU,mBAAmB,CAAC,MAAoB;IACvD,OAAO;QACN,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,WAAW;YAC/B,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;YAC/D,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;QACnD,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,GAAG;YACZ,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YACzB,OAAO;gBACN,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,WAAW,EAAE,MAAM,CAAC,YAAY,EAAE,WAAW,IAAI,0BAA0B;aAC3E,CAAC;QACH,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,GAAG;YACf,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;KACD,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAqB;IACtD,OAAO;QACN,OAAO,CAAC,QAA0B;YACjC,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACrB,MAAM,IAAI,eAAe,CAAC,iCAAiC,EAAE,eAAe,EAAE;oBAC7E,MAAM,EAAE,6BAA6B;iBACrC,CAAC,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,oBAAoB,EAAE,kBAAkB,CAAC;mBACvE,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC;YAC9B,IAAI,CAAC,MAAM,EAAE,CAAC;gBACb,MAAM,IAAI,eAAe,CAAC,qCAAqC,EAAE,aAAa,EAAE;oBAC/E,MAAM,EAAE,iCAAiC;iBACzC,CAAC,CAAC;YACJ,CAAC;YACD,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACpC,CAAC;KACD,CAAC;AACH,CAAC;AAED,eAAe,2BAA2B,CAAC;IAC1C,IAAI,EAAE,SAAS;IACf,EAAE,EAAE,4BAA4B;IAChC,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE;IACnC,cAAc,EAAE;QACf,OAAO,EAAE,CAAC,OAAqB,EAAE,EAAE,CAAC,wBAAwB,CAAC,OAAO,CAAC;KACrE;CACD,CAAC,CAAC"}

package/dist/uploads/store.impl.consumer.d.ts

@@ -0,0 +1,30 @@
+import { type VibesRuntime } from '@vibesdotdev/kernel';
+import { type UploadStore, type UploadStoreResolver } from './contract.ts';
+import { type ChatFileSystem } from '../utils/runtime-files.ts';
+/** The filesystem slice the upload store uses (the runtime's adapter). */
+export type UploadFileSystem = ChatFileSystem;
+/** An upload key: a relative key that can never leave the uploads root. */
+export declare const UploadKeySchema: import("zod").ZodString;
+/**
+ * Filesystem-backed store over a runtime filesystem adapter. Used in consumer
+ * (dev/CLI/TUI) scope where no R2 binding exists.
+ *
+ * The body of every `get()` is a small ReadableStream wrapping the file
+ * bytes so the calling endpoint can treat both backends identically. An
+ * absent upload is `null` (its absence is queried, not caught); any other
+ * failure propagates.
+ */
+export declare function createLocalUploadStore(files: () => Promise<UploadFileSystem>, rootDir: () => Promise<string>): UploadStore;
+/**
+ * The consumer resolver: a filesystem store under the bound workspace root
+ * (`runtime/workspace-path`), read at each operation so a call's own
+ * workspace wins. The request's platform argument is not consulted here. An
+ * unbound host fails the operation with `workspace-unbound`; nothing falls
+ * back to the cwd.
+ */
+export declare function createWorkspaceUploadStoreResolver(runtime: Pick<VibesRuntime, 'context' | 'hasKind' | 'query'>): UploadStoreResolver;
+declare const _default: import("@vibesdotdev/kernel").RuntimeImplementationWrapper<{
+    provide: (runtime: VibesRuntime) => UploadStoreResolver;
+}>;
+export default _default;
+//# sourceMappingURL=store.impl.consumer.d.ts.map

package/dist/uploads/store.impl.consumer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.impl.consumer.d.ts","sourceRoot":"","sources":["../../src/uploads/store.impl.consumer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgD,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACtG,OAAO,EAEN,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAgD,KAAK,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAK9G,0EAA0E;AAC1E,MAAM,MAAM,gBAAgB,GAAG,cAAc,CAAC;AAE9C,2EAA2E;AAC3E,eAAO,MAAM,eAAe,yBAAwB,CAAC;AAQrD;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,OAAO,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,WAAW,CA6B1H;AAED;;;;;;GAMG;AACH,wBAAgB,kCAAkC,CACjD,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC,GAC1D,mBAAmB,CAMrB;;uBAOoB,YAAY;;AALjC,wBAOG"}

package/dist/uploads/store.impl.consumer.js

@@ -0,0 +1,75 @@
+import { CapabilityError, createRuntimeImplementation } from '@vibesdotdev/kernel';
+import { CHAT_UPLOAD_STORE_CONTEXT_ID } from "./contract.js";
+import { ChatRelativeKeySchema, resolveChatFileSystem } from "../utils/runtime-files.js";
+/** Where consumer uploads live, relative to the bound workspace root. */
+const WORKSPACE_UPLOADS_DIR = '.vibes/data/chat-uploads';
+/** An upload key: a relative key that can never leave the uploads root. */
+export const UploadKeySchema = ChatRelativeKeySchema;
+function readKey(key) {
+    const parsed = UploadKeySchema.safeParse(key);
+    if (parsed.success)
+        return parsed.data;
+    throw new CapabilityError('The upload key is not a valid storage key.', 'INVALID_INPUT', { reason: 'chat-upload-key-invalid' });
+}
+/**
+ * Filesystem-backed store over a runtime filesystem adapter. Used in consumer
+ * (dev/CLI/TUI) scope where no R2 binding exists.
+ *
+ * The body of every `get()` is a small ReadableStream wrapping the file
+ * bytes so the calling endpoint can treat both backends identically. An
+ * absent upload is `null` (its absence is queried, not caught); any other
+ * failure propagates.
+ */
+export function createLocalUploadStore(files, rootDir) {
+    return {
+        async put(key, data, _contentType) {
+            const fs = await files();
+            const filePath = fs.join(await rootDir(), readKey(key));
+            await fs.mkdir(fs.dirname(filePath), { recursive: true });
+            await fs.writeFile(filePath, new Uint8Array(data));
+            return { storageKey: key, size: data.byteLength };
+        },
+        async get(key) {
+            const fs = await files();
+            const filePath = fs.join(await rootDir(), readKey(key));
+            if (!(await fs.exists(filePath)))
+                return null;
+            const content = await fs.readFile(filePath);
+            const bytes = content instanceof Uint8Array ? new Uint8Array(content) : new TextEncoder().encode(content);
+            const stream = new ReadableStream({
+                start(controller) {
+                    controller.enqueue(bytes);
+                    controller.close();
+                }
+            });
+            return { body: stream, contentType: 'application/octet-stream' };
+        },
+        async delete(key) {
+            const fs = await files();
+            const filePath = fs.join(await rootDir(), readKey(key));
+            if (await fs.exists(filePath))
+                await fs.remove(filePath);
+        }
+    };
+}
+/**
+ * The consumer resolver: a filesystem store under the bound workspace root
+ * (`runtime/workspace-path`), read at each operation so a call's own
+ * workspace wins. The request's platform argument is not consulted here. An
+ * unbound host fails the operation with `workspace-unbound`; nothing falls
+ * back to the cwd.
+ */
+export function createWorkspaceUploadStoreResolver(runtime) {
+    const files = () => resolveChatFileSystem(runtime);
+    const store = createLocalUploadStore(files, async () => (await files()).join(await runtime.context('runtime/workspace-path'), WORKSPACE_UPLOADS_DIR));
+    return { resolve: () => store };
+}
+export default createRuntimeImplementation({
+    kind: 'context',
+    id: CHAT_UPLOAD_STORE_CONTEXT_ID,
+    constraint: { hardware: ['consumer'] },
+    implementation: {
+        provide: (runtime) => createWorkspaceUploadStoreResolver(runtime)
+    }
+});
+//# sourceMappingURL=store.impl.consumer.js.map

package/dist/uploads/store.impl.consumer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.impl.consumer.js","sourceRoot":"","sources":["../../src/uploads/store.impl.consumer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,2BAA2B,EAAqB,MAAM,qBAAqB,CAAC;AACtG,OAAO,EACN,4BAA4B,EAG5B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAuB,MAAM,2BAA2B,CAAC;AAE9G,yEAAyE;AACzE,MAAM,qBAAqB,GAAG,0BAA0B,CAAC;AAKzD,2EAA2E;AAC3E,MAAM,CAAC,MAAM,eAAe,GAAG,qBAAqB,CAAC;AAErD,SAAS,OAAO,CAAC,GAAW;IAC3B,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC;IACvC,MAAM,IAAI,eAAe,CAAC,4CAA4C,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAAC;AACjI,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAsC,EAAE,OAA8B;IAC5G,OAAO;QACN,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,YAAY;YAChC,MAAM,EAAE,GAAG,MAAM,KAAK,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,OAAO,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YACxD,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;YACnD,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;QACnD,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,GAAG;YACZ,MAAM,EAAE,GAAG,MAAM,KAAK,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,OAAO,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YACxD,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC9C,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC5C,MAAM,KAAK,GAAG,OAAO,YAAY,UAAU,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC1G,MAAM,MAAM,GAAG,IAAI,cAAc,CAAa;gBAC7C,KAAK,CAAC,UAAU;oBACf,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;oBAC1B,UAAU,CAAC,KAAK,EAAE,CAAC;gBACpB,CAAC;aACD,CAAC,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,0BAA0B,EAAE,CAAC;QAClE,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,GAAG;YACf,MAAM,EAAE,GAAG,MAAM,KAAK,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,OAAO,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YACxD,IAAI,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAAE,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1D,CAAC;KACD,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kCAAkC,CACjD,OAA4D;IAE5D,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,sBAAsB,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,CACtD,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,OAAO,CAAS,wBAAwB,CAAC,EAAE,qBAAqB,CAAC,CACpG,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC;AACjC,CAAC;AAED,eAAe,2BAA2B,CAAC;IAC1C,IAAI,EAAE,SAAS;IACf,EAAE,EAAE,4BAA4B;IAChC,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE;IACtC,cAAc,EAAE;QACf,OAAO,EAAE,CAAC,OAAqB,EAAE,EAAE,CAAC,kCAAkC,CAAC,OAAO,CAAC;KAC/E;CACD,CAAC,CAAC"}

package/dist/utils/html-entities.d.ts

@@ -0,0 +1,3 @@
+export declare function decodeHtmlEntities(text: string): string;
+export declare function encodeHtmlEntities(text: string): string;
+//# sourceMappingURL=html-entities.d.ts.map

package/dist/utils/html-entities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"html-entities.d.ts","sourceRoot":"","sources":["../../src/utils/html-entities.ts"],"names":[],"mappings":"AAAA,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAkBvD;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CASvD"}

package/dist/utils/html-entities.js

@@ -0,0 +1,29 @@
+export function decodeHtmlEntities(text) {
+    if (!text)
+        return text;
+    if (globalThis.document !== undefined) {
+        const textarea = globalThis.document.createElement('textarea');
+        textarea.innerHTML = text;
+        return textarea.value;
+    }
+    return text
+        .replace(/&/g, '&')
+        .replace(/&lt;/g, '<')
+        .replace(/&gt;/g, '>')
+        .replace(/&quot;/g, '"')
+        .replace(/&#39;/g, "'")
+        .replace(/&nbsp;/g, ' ')
+        .replace(/&#(\d+);/g, (_match, dec) => String.fromCharCode(dec))
+        .replace(/&#x([a-fA-F0-9]+);/g, (_match, hex) => String.fromCharCode(parseInt(hex, 16)));
+}
+export function encodeHtmlEntities(text) {
+    if (!text)
+        return text;
+    return text
+        .replace(/&/g, '&amp;')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;')
+        .replace(/'/g, '&#39;');
+}
+//# sourceMappingURL=html-entities.js.map

package/dist/utils/html-entities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"html-entities.js","sourceRoot":"","sources":["../../src/utils/html-entities.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC9C,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEvB,IAAI,UAAU,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QAC/D,QAAQ,CAAC,SAAS,GAAG,IAAI,CAAC;QAC1B,OAAO,QAAQ,CAAC,KAAK,CAAC;IACvB,CAAC;IAED,OAAO,IAAI;SACT,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;SAC/D,OAAO,CAAC,qBAAqB,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AAC3F,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC9C,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEvB,OAAO,IAAI;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC1B,CAAC"}

package/dist/utils/owned-task.d.ts

@@ -0,0 +1,27 @@
+import { CapabilityError, type RuntimeRef } from '@vibesdotdev/kernel';
+/** Upper bound for one owned background run; a run past it is reported `TIMEOUT wait-timeout`. */
+export declare const CHAT_OWNED_TASK_TIMEOUT_MS: number;
+export interface ChatOwnedTaskOptions {
+    /** What the work is, carried in the failure report and the wait's details. */
+    readonly reason: string;
+    /** Upper bound for the run; defaults to `CHAT_OWNED_TASK_TIMEOUT_MS`. */
+    readonly timeoutMs?: number;
+    /** Receives a non-cancellation failure, typed, after it is logged once. */
+    readonly onFailure?: (failure: CapabilityError) => void;
+}
+/**
+ * Run Chat background work (a reconcile, a cancel, a restore poll) as work the
+ * runtime owns. The caller never waits on it, and a failure never fails the
+ * caller, but it is never silent and never an unhandled rejection:
+ *
+ * - a runtime whose disposal began (`lifecycle.phase` is not `live`) starts none;
+ * - the run is a `runtime.lifecycle.wait`: disposal aborts its signal, and
+ *   `dispose()` joins work still running within the finalization budget;
+ * - a cancellation is the run's confirmed end, not a failure;
+ * - any other failure is reported once on the runtime's kernel diagnostics
+ *   port (which never throws) and handed to `onFailure` as a `CapabilityError`.
+ *
+ * Returns the settled run so tests and owners can join it; it never rejects.
+ */
+export declare function runChatOwnedTask(runtime: RuntimeRef, task: (signal: AbortSignal) => Promise<void>, options: ChatOwnedTaskOptions): Promise<void>;
+//# sourceMappingURL=owned-task.d.ts.map

package/dist/utils/owned-task.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owned-task.d.ts","sourceRoot":"","sources":["../../src/utils/owned-task.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAoF,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEzJ,kGAAkG;AAClG,eAAO,MAAM,0BAA0B,QAAiB,CAAC;AAEzD,MAAM,WAAW,oBAAoB;IACpC,8EAA8E;IAC9E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,2EAA2E;IAC3E,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,IAAI,CAAC;CACxD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAC/B,OAAO,EAAE,UAAU,EACnB,IAAI,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,EAC5C,OAAO,EAAE,oBAAoB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAYf"}

package/dist/utils/owned-task.js

@@ -0,0 +1,39 @@
+import { CapabilityError, CaughtFailureSchema, isCapabilityError, valueFreeFailure } from '@vibesdotdev/kernel';
+/** Upper bound for one owned background run; a run past it is reported `TIMEOUT wait-timeout`. */
+export const CHAT_OWNED_TASK_TIMEOUT_MS = 10 * 60 * 1000;
+/**
+ * Run Chat background work (a reconcile, a cancel, a restore poll) as work the
+ * runtime owns. The caller never waits on it, and a failure never fails the
+ * caller, but it is never silent and never an unhandled rejection:
+ *
+ * - a runtime whose disposal began (`lifecycle.phase` is not `live`) starts none;
+ * - the run is a `runtime.lifecycle.wait`: disposal aborts its signal, and
+ *   `dispose()` joins work still running within the finalization budget;
+ * - a cancellation is the run's confirmed end, not a failure;
+ * - any other failure is reported once on the runtime's kernel diagnostics
+ *   port (which never throws) and handed to `onFailure` as a `CapabilityError`.
+ *
+ * Returns the settled run so tests and owners can join it; it never rejects.
+ */
+export function runChatOwnedTask(runtime, task, options) {
+    if (runtime.lifecycle.phase !== 'live')
+        return Promise.resolve();
+    return runtime.lifecycle
+        .wait(task, { timeoutMs: options.timeoutMs ?? CHAT_OWNED_TASK_TIMEOUT_MS, reason: options.reason })
+        .then(() => undefined, (error) => {
+        reportOwnedFailure(runtime, error, options);
+        return valueFreeFailure(CaughtFailureSchema.parse(error));
+    })
+        .then(() => undefined);
+}
+function reportOwnedFailure(runtime, error, options) {
+    const failure = CapabilityError.from(CaughtFailureSchema.parse(error));
+    if (isCapabilityError(failure) && failure.code === 'CANCELLED')
+        return;
+    // The kernel diagnostics port never throws (a host without prepared Logging
+    // still records the line), so a report can never become an unhandled rejection.
+    const diagnostics = runtime.diagnostics;
+    diagnostics.error('Chat background work failed', { scope: 'chat', plugin: options.reason, error: failure });
+    options.onFailure?.(failure);
+}
+//# sourceMappingURL=owned-task.js.map

package/dist/utils/owned-task.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"owned-task.js","sourceRoot":"","sources":["../../src/utils/owned-task.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,gBAAgB,EAA2C,MAAM,qBAAqB,CAAC;AAEzJ,kGAAkG;AAClG,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAWzD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gBAAgB,CAC/B,OAAmB,EACnB,IAA4C,EAC5C,OAA6B;IAE7B,IAAI,OAAO,CAAC,SAAS,CAAC,KAAK,KAAK,MAAM;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IACjE,OAAO,OAAO,CAAC,SAAS;SACtB,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,0BAA0B,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;SAClG,IAAI,CACJ,GAAG,EAAE,CAAC,SAAS,EACf,CAAC,KAAY,EAAE,EAAE;QAChB,kBAAkB,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAC5C,OAAO,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3D,CAAC,CACD;SACA,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAmB,EAAE,KAAY,EAAE,OAA6B;IAC3F,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACvE,IAAI,iBAAiB,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO;IACvE,4EAA4E;IAC5E,gFAAgF;IAChF,MAAM,WAAW,GAAsB,OAAO,CAAC,WAAW,CAAC;IAC3D,WAAW,CAAC,KAAK,CAAC,6BAA6B,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAC5G,OAAO,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC"}

package/dist/utils/parse-guard.d.ts

@@ -0,0 +1,24 @@
+import { type ValueFreeFailure } from '@vibesdotdev/kernel';
+import type * as z from 'zod/v4';
+/**
+ * The outcome of reading one untrusted value through a schema: parsed, or
+ * invalid with the failing field paths only (issue text and values are never
+ * carried), or the read threw (a throwing getter, a revoked Proxy).
+ */
+export type ChatUntrustedParse<Output> = {
+    readonly outcome: 'parsed';
+    readonly data: Output;
+} | {
+    readonly outcome: 'invalid';
+    readonly paths: readonly string[];
+} | {
+    readonly outcome: 'threw';
+    readonly cause: ValueFreeFailure;
+};
+/**
+ * Chat's one guard for untrusted input. Zod's `safeParse` does not catch a
+ * throwing getter or Proxy trap; this does, so a hostile value never throws
+ * into the caller.
+ */
+export declare function parseChatUntrusted<Schema extends z.ZodType>(schema: Schema, value: unknown): ChatUntrustedParse<z.output<Schema>>;
+//# sourceMappingURL=parse-guard.d.ts.map

package/dist/utils/parse-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-guard.d.ts","sourceRoot":"","sources":["../../src/utils/parse-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAyC,KAAK,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACnG,OAAO,KAAK,KAAK,CAAC,MAAM,QAAQ,CAAC;AAEjC;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,CAAC,MAAM,IAClC;IAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GAClE;IAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAA;CAAE,CAAC;AAEnE;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,SAAS,CAAC,CAAC,OAAO,EAC1D,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,OAAO,GACZ,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAYtC"}

package/dist/utils/parse-guard.js

@@ -0,0 +1,22 @@
+import { CaughtFailureSchema, valueFreeFailure } from '@vibesdotdev/kernel';
+/**
+ * Chat's one guard for untrusted input. Zod's `safeParse` does not catch a
+ * throwing getter or Proxy trap; this does, so a hostile value never throws
+ * into the caller.
+ */
+export function parseChatUntrusted(schema, value) {
+    try {
+        const result = schema.safeParse(value);
+        if (result.success)
+            return { outcome: 'parsed', data: result.data };
+        return {
+            outcome: 'invalid',
+            paths: result.error.issues.map((issue) => issue.path.map(String).join('.') || '(root)')
+        };
+    }
+    catch (error) {
+        // The value itself threw while being read: carry the failure's value-free facts only.
+        return { outcome: 'threw', cause: valueFreeFailure(CaughtFailureSchema.parse(error)) };
+    }
+}
+//# sourceMappingURL=parse-guard.js.map

package/dist/utils/parse-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-guard.js","sourceRoot":"","sources":["../../src/utils/parse-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAyB,MAAM,qBAAqB,CAAC;AAanG;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CACjC,MAAc,EACd,KAAc;IAEd,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;QACpE,OAAO;YACN,OAAO,EAAE,SAAS;YAClB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC;SACvF,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,sFAAsF;QACtF,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;IACxF,CAAC;AACF,CAAC"}

package/dist/utils/runtime-files.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Chat's one path to files: the runtime's composed `filesystem/adapter` (the
+ * host's bun, node or OPFS adapter owns paths and I/O). No feature code in
+ * Chat touches a host filesystem API.
+ */
+import * as z from 'zod/v4';
+import { type VibesRuntime } from '@vibesdotdev/kernel';
+/** The slice of a `filesystem/adapter` Chat uses. */
+export interface ChatFileSystem {
+    exists(path: string): Promise<boolean>;
+    readFile(path: string): Promise<string | Uint8Array>;
+    writeFile(path: string, data: string | Uint8Array): Promise<void>;
+    mkdir(path: string, options?: {
+        recursive?: boolean;
+    }): Promise<void>;
+    remove(path: string, options?: {
+        recursive?: boolean;
+    }): Promise<void>;
+    join(...segments: string[]): string;
+    dirname(path: string): string;
+}
+/**
+ * The runtime's filesystem adapter. A host that composes none refuses
+ * `UNAVAILABLE chat-filesystem-unavailable` (the fact is queried, not caught);
+ * a resolved value that is not an adapter refuses `INTERNAL`.
+ */
+export declare function resolveChatFileSystem(runtime: Pick<VibesRuntime, 'hasKind' | 'query'>): Promise<ChatFileSystem>;
+/**
+ * A relative file key: slash-separated segments of letters, digits, `.`, `_`
+ * and `-`, never `.` or `..`, never absolute or empty. A key that passes can
+ * never leave the directory it is joined under.
+ */
+export declare const ChatRelativeKeySchema: z.ZodString;
+//# sourceMappingURL=runtime-files.d.ts.map

package/dist/utils/runtime-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-files.d.ts","sourceRoot":"","sources":["../../src/utils/runtime-files.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAmB,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEzE,qDAAqD;AACrD,MAAM,WAAW,cAAc;IAC9B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC;IACrD,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,IAAI,CAAC,GAAG,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IACpC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;CAC9B;AAcD;;;;GAIG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,GAAG,OAAO,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,CAarH;AAED;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,aAM/B,CAAC"}