@vibesdotdev/platform 0.0.0-stage → 1.0.0-rc.1

package/dist/schemas/components/common.d.ts

@@ -0,0 +1,96 @@
+import * as z from 'zod/v4';
+export declare const componentOwnerTypeSchema: z.ZodEnum<{
+    user: "user";
+    organization: "organization";
+    system: "system";
+}>;
+export declare const componentVisibilitySchema: z.ZodEnum<{
+    public: "public";
+    private: "private";
+    org: "org";
+}>;
+export declare const componentTrustSchema: z.ZodEnum<{
+    trusted: "trusted";
+    untrusted: "untrusted";
+}>;
+export declare const componentCapabilitySchema: z.ZodString;
+/**
+ * Author-declared manifest. Free-form metadata + structured declarations for
+ * what the component reads (capabilities), what props it accepts, and how
+ * the host should render it (surface hints, style isolation).
+ */
+export declare const componentManifestSchema: z.ZodObject<{
+    title: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    icon: z.ZodOptional<z.ZodString>;
+    capabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    props: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    surfaces: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    shadowDom: z.ZodDefault<z.ZodBoolean>;
+    extra: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>;
+export declare const componentSchema: z.ZodObject<{
+    id: z.ZodUUID;
+    slug: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodNullable<z.ZodString>;
+    ownerType: z.ZodEnum<{
+        user: "user";
+        organization: "organization";
+        system: "system";
+    }>;
+    ownerId: z.ZodString;
+    source: z.ZodString;
+    manifest: z.ZodObject<{
+        title: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        icon: z.ZodOptional<z.ZodString>;
+        capabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        props: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        surfaces: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        shadowDom: z.ZodDefault<z.ZodBoolean>;
+        extra: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>;
+    publishedVersion: z.ZodNullable<z.ZodString>;
+    publishedAt: z.ZodNullable<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodISODateTime, z.ZodTransform<Date, string>>]>>;
+    visibility: z.ZodEnum<{
+        public: "public";
+        private: "private";
+        org: "org";
+    }>;
+    trust: z.ZodEnum<{
+        trusted: "trusted";
+        untrusted: "untrusted";
+    }>;
+    createdAt: z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodISODateTime, z.ZodTransform<Date, string>>]>;
+    updatedAt: z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodISODateTime, z.ZodTransform<Date, string>>]>;
+}, z.core.$strip>;
+export declare const componentVersionSchema: z.ZodObject<{
+    id: z.ZodUUID;
+    componentId: z.ZodUUID;
+    version: z.ZodString;
+    source: z.ZodString;
+    bundle: z.ZodString;
+    bundleHash: z.ZodString;
+    manifest: z.ZodObject<{
+        title: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        icon: z.ZodOptional<z.ZodString>;
+        capabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        props: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        surfaces: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        shadowDom: z.ZodDefault<z.ZodBoolean>;
+        extra: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>;
+    compilerVersion: z.ZodNullable<z.ZodString>;
+    compileWarnings: z.ZodArray<z.ZodString>;
+    publishedByUserId: z.ZodNullable<z.ZodString>;
+    publishedAt: z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodISODateTime, z.ZodTransform<Date, string>>]>;
+}, z.core.$strip>;
+export type ComponentOwnerType = z.infer<typeof componentOwnerTypeSchema>;
+export type ComponentVisibility = z.infer<typeof componentVisibilitySchema>;
+export type ComponentTrust = z.infer<typeof componentTrustSchema>;
+export type ComponentManifest = z.infer<typeof componentManifestSchema>;
+export type Component = z.infer<typeof componentSchema>;
+export type ComponentVersion = z.infer<typeof componentVersionSchema>;
+//# sourceMappingURL=common.d.ts.map

package/dist/schemas/components/common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../../src/schemas/components/common.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,eAAO,MAAM,wBAAwB;;;;EAA6C,CAAC;AACnF,eAAO,MAAM,yBAAyB;;;;EAAuC,CAAC;AAC9E,eAAO,MAAM,oBAAoB;;;EAAmC,CAAC;AAErE,eAAO,MAAM,yBAAyB,aAIgC,CAAC;AAEvE;;;;GAIG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;iBAclC,CAAC;AAcH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAe1B,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;iBAYjC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AACxD,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}

package/dist/schemas/components/common.js

@@ -0,0 +1,70 @@
+import { platformDateSchema } from "../http-date.js";
+import * as z from 'zod/v4';
+export const componentOwnerTypeSchema = z.enum(['user', 'organization', 'system']);
+export const componentVisibilitySchema = z.enum(['private', 'org', 'public']);
+export const componentTrustSchema = z.enum(['trusted', 'untrusted']);
+export const componentCapabilitySchema = z
+    .string()
+    .min(1)
+    .max(128)
+    .regex(/^[a-z0-9][a-z0-9._/-]*$/, 'Capability tags must be URL-safe');
+/**
+ * Author-declared manifest. Free-form metadata + structured declarations for
+ * what the component reads (capabilities), what props it accepts, and how
+ * the host should render it (surface hints, style isolation).
+ */
+export const componentManifestSchema = z.object({
+    title: z.string().optional(),
+    description: z.string().optional(),
+    icon: z.string().optional(),
+    /** Capability tags the component needs from the host-supplied client. */
+    capabilities: z.array(componentCapabilitySchema).default([]),
+    /** Declared props with optional zod-lite descriptions (free-form for v1). */
+    props: z.record(z.string(), z.unknown()).default({}),
+    /** Where this component prefers to mount (free-form hints). */
+    surfaces: z.array(z.string()).default([]),
+    /** Host should wrap in a shadow root. */
+    shadowDom: z.boolean().default(false),
+    /** Additional arbitrary metadata the author wants to surface. */
+    extra: z.record(z.string(), z.unknown()).default({})
+});
+const slugSchema = z
+    .string()
+    .min(2)
+    .max(80)
+    .regex(/^[a-z0-9][a-z0-9-]*[a-z0-9]$/, 'Slug must be kebab-case');
+const versionSchema = z
+    .string()
+    .min(1)
+    .max(32)
+    .regex(/^[a-zA-Z0-9.+_-]+$/, 'Version must be URL-safe');
+export const componentSchema = z.object({
+    id: z.uuid(),
+    slug: slugSchema,
+    name: z.string(),
+    description: z.string().nullable(),
+    ownerType: componentOwnerTypeSchema,
+    ownerId: z.string(),
+    source: z.string(),
+    manifest: componentManifestSchema,
+    publishedVersion: z.string().nullable(),
+    publishedAt: platformDateSchema.nullable(),
+    visibility: componentVisibilitySchema,
+    trust: componentTrustSchema,
+    createdAt: platformDateSchema,
+    updatedAt: platformDateSchema
+});
+export const componentVersionSchema = z.object({
+    id: z.uuid(),
+    componentId: z.uuid(),
+    version: versionSchema,
+    source: z.string(),
+    bundle: z.string(),
+    bundleHash: z.string(),
+    manifest: componentManifestSchema,
+    compilerVersion: z.string().nullable(),
+    compileWarnings: z.array(z.string()),
+    publishedByUserId: z.string().nullable(),
+    publishedAt: platformDateSchema
+});
+//# sourceMappingURL=common.js.map

package/dist/schemas/components/common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../../../src/schemas/components/common.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC,CAAC;AACnF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC9E,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;AAErE,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACxC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,KAAK,CAAC,yBAAyB,EAAE,kCAAkC,CAAC,CAAC;AAEvE;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,yEAAyE;IACzE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5D,6EAA6E;IAC7E,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACpD,+DAA+D;IAC/D,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACzC,yCAAyC;IACzC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACrC,iEAAiE;IACjE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACpD,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,CAAC;KAClB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CAAC,8BAA8B,EAAE,yBAAyB,CAAC,CAAC;AAEnE,MAAM,aAAa,GAAG,CAAC;KACrB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CAAC,oBAAoB,EAAE,0BAA0B,CAAC,CAAC;AAE1D,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,SAAS,EAAE,wBAAwB;IACnC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,QAAQ,EAAE,uBAAuB;IACjC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,WAAW,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IAC1C,UAAU,EAAE,yBAAyB;IACrC,KAAK,EAAE,oBAAoB;IAC3B,SAAS,EAAE,kBAAkB;IAC7B,SAAS,EAAE,kBAAkB;CAC7B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE;IACrB,OAAO,EAAE,aAAa;IACtB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,QAAQ,EAAE,uBAAuB;IACjC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACpC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,WAAW,EAAE,kBAAkB;CAC/B,CAAC,CAAC"}

package/dist/schemas/components/forms.d.ts

@@ -0,0 +1,97 @@
+import * as z from 'zod/v4';
+export declare const createComponentFormSchema: z.ZodObject<{
+    slug: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    ownerType: z.ZodOptional<z.ZodEnum<{
+        user: "user";
+        organization: "organization";
+        system: "system";
+    }>>;
+    ownerId: z.ZodOptional<z.ZodString>;
+    source: z.ZodDefault<z.ZodString>;
+    manifest: z.ZodOptional<z.ZodObject<{
+        title: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        icon: z.ZodOptional<z.ZodString>;
+        capabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        props: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        surfaces: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        shadowDom: z.ZodDefault<z.ZodBoolean>;
+        extra: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>>;
+    visibility: z.ZodDefault<z.ZodEnum<{
+        public: "public";
+        private: "private";
+        org: "org";
+    }>>;
+}, z.core.$strip>;
+export declare const updateComponentFormSchema: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    source: z.ZodOptional<z.ZodString>;
+    manifest: z.ZodOptional<z.ZodObject<{
+        title: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        icon: z.ZodOptional<z.ZodString>;
+        capabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        props: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        surfaces: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        shadowDom: z.ZodDefault<z.ZodBoolean>;
+        extra: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>>;
+    visibility: z.ZodOptional<z.ZodEnum<{
+        public: "public";
+        private: "private";
+        org: "org";
+    }>>;
+}, z.core.$strip>;
+/**
+ * One named export the compiled bundle must expose on `__contributions`.
+ *
+ * Deliberately Applet-agnostic. Platform owns source, compilation, bundles, and
+ * releases; it exposes "expose these named exports" as a capability and does not
+ * need to know that Applets is the caller giving them meaning.
+ */
+export declare const componentContributionSchema: z.ZodObject<{
+    entry: z.ZodString;
+    exportName: z.ZodString;
+}, z.core.$strip>;
+export declare const publishComponentFormSchema: z.ZodObject<{
+    version: z.ZodOptional<z.ZodString>;
+    manifest: z.ZodOptional<z.ZodObject<{
+        title: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        icon: z.ZodOptional<z.ZodString>;
+        capabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        props: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        surfaces: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        shadowDom: z.ZodDefault<z.ZodBoolean>;
+        extra: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>>;
+    contributions: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        entry: z.ZodString;
+        exportName: z.ZodString;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export declare const componentListQuerySchema: z.ZodObject<{
+    ownerType: z.ZodOptional<z.ZodEnum<{
+        user: "user";
+        organization: "organization";
+        system: "system";
+    }>>;
+    ownerId: z.ZodOptional<z.ZodString>;
+    visibility: z.ZodOptional<z.ZodEnum<{
+        public: "public";
+        private: "private";
+        org: "org";
+    }>>;
+    slug: z.ZodOptional<z.ZodString>;
+    limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+    offset: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+}, z.core.$strip>;
+export type CreateComponentForm = z.infer<typeof createComponentFormSchema>;
+export type UpdateComponentForm = z.infer<typeof updateComponentFormSchema>;
+export type PublishComponentForm = z.infer<typeof publishComponentFormSchema>;
+export type ComponentListQuery = z.infer<typeof componentListQuerySchema>;
+//# sourceMappingURL=forms.d.ts.map

package/dist/schemas/components/forms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forms.d.ts","sourceRoot":"","sources":["../../../src/schemas/components/forms.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAa5B,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;iBAYpC,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;iBAMpC,CAAC;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B;;;iBAgBtC,CAAC;AAEH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;iBAUrC,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;iBAOnC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC9E,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC"}

package/dist/schemas/components/forms.js

@@ -0,0 +1,68 @@
+import * as z from 'zod/v4';
+import { componentManifestSchema, componentOwnerTypeSchema, componentVisibilitySchema } from "./common.js";
+const slugSchema = z
+    .string()
+    .min(2)
+    .max(80)
+    .regex(/^[a-z0-9][a-z0-9-]*[a-z0-9]$/, 'Slug must be kebab-case');
+export const createComponentFormSchema = z.object({
+    slug: slugSchema,
+    name: z.string().min(1).max(120),
+    description: z.string().optional(),
+    // Optional: the server defaults both to the acting scope and 400s on a
+    // mismatch, so headless callers (the `components` tool) can omit identity
+    // entirely instead of guessing it.
+    ownerType: componentOwnerTypeSchema.optional(),
+    ownerId: z.string().min(1).optional(),
+    source: z.string().default(''),
+    manifest: componentManifestSchema.optional(),
+    visibility: componentVisibilitySchema.default('private')
+});
+export const updateComponentFormSchema = z.object({
+    name: z.string().min(1).max(120).optional(),
+    description: z.string().nullable().optional(),
+    source: z.string().optional(),
+    manifest: componentManifestSchema.optional(),
+    visibility: componentVisibilitySchema.optional()
+});
+/**
+ * One named export the compiled bundle must expose on `__contributions`.
+ *
+ * Deliberately Applet-agnostic. Platform owns source, compilation, bundles, and
+ * releases; it exposes "expose these named exports" as a capability and does not
+ * need to know that Applets is the caller giving them meaning.
+ */
+export const componentContributionSchema = z.object({
+    /** Declared file the implementation came from. Identity, not a module path. */
+    entry: z
+        .string()
+        .min(1)
+        .max(512)
+        .regex(/^(?!\/)(?!.*(?:^|\/)\.\.(?:\/|$))(?!.*\\)[a-zA-Z0-9._/-]+$/, 'Contribution entries must be safe, relative POSIX paths'),
+    /** A named export. `default` is the component and is refused at compile time. */
+    exportName: z
+        .string()
+        .min(1)
+        .max(80)
+        .regex(/^[A-Za-z_$][A-Za-z0-9_$]*$/, 'Export must be a JavaScript identifier')
+});
+export const publishComponentFormSchema = z.object({
+    version: z
+        .string()
+        .min(1)
+        .max(32)
+        .regex(/^[a-zA-Z0-9.+_-]+$/)
+        .optional(),
+    manifest: componentManifestSchema.optional(),
+    /** Named exports to expose on the bundle's `__contributions` map. */
+    contributions: z.array(componentContributionSchema).max(128).optional()
+});
+export const componentListQuerySchema = z.object({
+    ownerType: componentOwnerTypeSchema.optional(),
+    ownerId: z.string().optional(),
+    visibility: componentVisibilitySchema.optional(),
+    slug: z.string().optional(),
+    limit: z.coerce.number().int().positive().max(200).default(50),
+    offset: z.coerce.number().int().nonnegative().default(0)
+});
+//# sourceMappingURL=forms.js.map

package/dist/schemas/components/forms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forms.js","sourceRoot":"","sources":["../../../src/schemas/components/forms.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EACN,uBAAuB,EACvB,wBAAwB,EACxB,yBAAyB,EACzB,MAAM,aAAa,CAAC;AAErB,MAAM,UAAU,GAAG,CAAC;KAClB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CAAC,8BAA8B,EAAE,yBAAyB,CAAC,CAAC;AAEnE,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,uEAAuE;IACvE,0EAA0E;IAC1E,mCAAmC;IACnC,SAAS,EAAE,wBAAwB,CAAC,QAAQ,EAAE;IAC9C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9B,QAAQ,EAAE,uBAAuB,CAAC,QAAQ,EAAE;IAC5C,UAAU,EAAE,yBAAyB,CAAC,OAAO,CAAC,SAAS,CAAC;CACxD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,QAAQ,EAAE,uBAAuB,CAAC,QAAQ,EAAE;IAC5C,UAAU,EAAE,yBAAyB,CAAC,QAAQ,EAAE;CAChD,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,+EAA+E;IAC/E,KAAK,EAAE,CAAC;SACN,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,KAAK,CACL,4DAA4D,EAC5D,yDAAyD,CACzD;IACF,iFAAiF;IACjF,UAAU,EAAE,CAAC;SACX,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,EAAE,CAAC;SACP,KAAK,CAAC,4BAA4B,EAAE,wCAAwC,CAAC;CAC/E,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,OAAO,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,EAAE,CAAC;SACP,KAAK,CAAC,oBAAoB,CAAC;SAC3B,QAAQ,EAAE;IACZ,QAAQ,EAAE,uBAAuB,CAAC,QAAQ,EAAE;IAC5C,qEAAqE;IACrE,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACvE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,SAAS,EAAE,wBAAwB,CAAC,QAAQ,EAAE;IAC9C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,UAAU,EAAE,yBAAyB,CAAC,QAAQ,EAAE;IAChD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9D,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;CACxD,CAAC,CAAC"}

package/dist/schemas/components/index.d.ts

@@ -0,0 +1,10 @@
+export { componentOwnerTypeSchema, componentVisibilitySchema, componentTrustSchema, componentCapabilitySchema, componentManifestSchema, componentSchema, componentVersionSchema } from './common.ts';
+export type { ComponentOwnerType, ComponentVisibility, ComponentTrust, ComponentManifest, Component, ComponentVersion } from './common.ts';
+export { createComponentFormSchema, updateComponentFormSchema, publishComponentFormSchema, componentListQuerySchema } from './forms.ts';
+export type { CreateComponentForm, UpdateComponentForm, PublishComponentForm, ComponentListQuery } from './forms.ts';
+export { createComponentRequestSchema, updateComponentRequestSchema, publishComponentRequestSchema, componentListQueryRequestSchema, componentResponseSchema, componentListResponseSchema, componentVersionResponseSchema, componentVersionListResponseSchema, publishComponentResponseSchema, errorResponseSchema } from './api.ts';
+export type { ComponentResponse, ComponentListResponse, ComponentVersionResponse, ComponentVersionListResponse, PublishComponentResponse } from './api.ts';
+export { APPLET_MANIFEST_SCHEMA_VERSION, starterCapabilityKindSchema, STARTER_CONTRACT_VERSION, STARTER_UI_STATES, starterEntrypointSchema, starterStorageDeclarationSchema, starterCapabilityRequestSchema, starterMotionSchema, starterEventDeclarationSchema, starterScenarioSchema, appletStarterSchema, isStarterComplete, validateStarter, starterComponentManifest, starterCompileContributions, starterContributesSchema, starterDefinitionSkeleton, capabilityReasonsMap, hasScenarios, defaultScenario } from './starter.ts';
+export type { StarterUiState, StarterEntrypoint, StarterStorageDeclaration, StarterCapabilityRequest, StarterMotion, StarterEventDeclaration, StarterScenario, StarterDefinitionSkeleton, AppletStarter } from './starter.ts';
+export { FORM_STARTER, CHOICE_STARTER, STARTER_FIXTURES } from './starter-fixtures.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/schemas/components/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/schemas/components/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,wBAAwB,EACxB,yBAAyB,EACzB,oBAAoB,EACpB,yBAAyB,EACzB,uBAAuB,EACvB,eAAe,EACf,sBAAsB,EACtB,MAAM,aAAa,CAAC;AACrB,YAAY,EACX,kBAAkB,EAClB,mBAAmB,EACnB,cAAc,EACd,iBAAiB,EACjB,SAAS,EACT,gBAAgB,EAChB,MAAM,aAAa,CAAC;AACrB,OAAO,EACN,yBAAyB,EACzB,yBAAyB,EACzB,0BAA0B,EAC1B,wBAAwB,EACxB,MAAM,YAAY,CAAC;AACpB,YAAY,EACX,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,EAClB,MAAM,YAAY,CAAC;AACpB,OAAO,EACN,4BAA4B,EAC5B,4BAA4B,EAC5B,6BAA6B,EAC7B,+BAA+B,EAC/B,uBAAuB,EACvB,2BAA2B,EAC3B,8BAA8B,EAC9B,kCAAkC,EAClC,8BAA8B,EAC9B,mBAAmB,EACnB,MAAM,UAAU,CAAC;AAClB,YAAY,EACX,iBAAiB,EACjB,qBAAqB,EACrB,wBAAwB,EACxB,4BAA4B,EAC5B,wBAAwB,EACxB,MAAM,UAAU,CAAC;AAClB,OAAO,EACN,8BAA8B,EAC9B,2BAA2B,EAC3B,wBAAwB,EACxB,iBAAiB,EACjB,uBAAuB,EACvB,+BAA+B,EAC/B,8BAA8B,EAC9B,mBAAmB,EACnB,6BAA6B,EAC7B,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,EACf,wBAAwB,EACxB,2BAA2B,EAC3B,wBAAwB,EACxB,yBAAyB,EACzB,oBAAoB,EACpB,YAAY,EACZ,eAAe,EACf,MAAM,cAAc,CAAC;AACtB,YAAY,EACX,cAAc,EACd,iBAAiB,EACjB,yBAAyB,EACzB,wBAAwB,EACxB,aAAa,EACb,uBAAuB,EACvB,eAAe,EACf,yBAAyB,EACzB,aAAa,EACb,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/schemas/components/index.js

@@ -0,0 +1,6 @@
+export { componentOwnerTypeSchema, componentVisibilitySchema, componentTrustSchema, componentCapabilitySchema, componentManifestSchema, componentSchema, componentVersionSchema } from "./common.js";
+export { createComponentFormSchema, updateComponentFormSchema, publishComponentFormSchema, componentListQuerySchema } from "./forms.js";
+export { createComponentRequestSchema, updateComponentRequestSchema, publishComponentRequestSchema, componentListQueryRequestSchema, componentResponseSchema, componentListResponseSchema, componentVersionResponseSchema, componentVersionListResponseSchema, publishComponentResponseSchema, errorResponseSchema } from "./api.js";
+export { APPLET_MANIFEST_SCHEMA_VERSION, starterCapabilityKindSchema, STARTER_CONTRACT_VERSION, STARTER_UI_STATES, starterEntrypointSchema, starterStorageDeclarationSchema, starterCapabilityRequestSchema, starterMotionSchema, starterEventDeclarationSchema, starterScenarioSchema, appletStarterSchema, isStarterComplete, validateStarter, starterComponentManifest, starterCompileContributions, starterContributesSchema, starterDefinitionSkeleton, capabilityReasonsMap, hasScenarios, defaultScenario } from "./starter.js";
+export { FORM_STARTER, CHOICE_STARTER, STARTER_FIXTURES } from "./starter-fixtures.js";
+//# sourceMappingURL=index.js.map

package/dist/schemas/components/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/schemas/components/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,wBAAwB,EACxB,yBAAyB,EACzB,oBAAoB,EACpB,yBAAyB,EACzB,uBAAuB,EACvB,eAAe,EACf,sBAAsB,EACtB,MAAM,aAAa,CAAC;AASrB,OAAO,EACN,yBAAyB,EACzB,yBAAyB,EACzB,0BAA0B,EAC1B,wBAAwB,EACxB,MAAM,YAAY,CAAC;AAOpB,OAAO,EACN,4BAA4B,EAC5B,4BAA4B,EAC5B,6BAA6B,EAC7B,+BAA+B,EAC/B,uBAAuB,EACvB,2BAA2B,EAC3B,8BAA8B,EAC9B,kCAAkC,EAClC,8BAA8B,EAC9B,mBAAmB,EACnB,MAAM,UAAU,CAAC;AAQlB,OAAO,EACN,8BAA8B,EAC9B,2BAA2B,EAC3B,wBAAwB,EACxB,iBAAiB,EACjB,uBAAuB,EACvB,+BAA+B,EAC/B,8BAA8B,EAC9B,mBAAmB,EACnB,6BAA6B,EAC7B,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,EACf,wBAAwB,EACxB,2BAA2B,EAC3B,wBAAwB,EACxB,yBAAyB,EACzB,oBAAoB,EACpB,YAAY,EACZ,eAAe,EACf,MAAM,cAAc,CAAC;AAYtB,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/schemas/components/starter-fixtures.d.ts

@@ -0,0 +1,154 @@
+/**
+ * Applet starter scenario fixtures — canonical test cases for draft preview.
+ *
+ * These fixtures are used by the component preflight to validate that an
+ * applet renders correctly in each state. They are pure data — no Svelte,
+ * no DOM. FORM uses a Svelte entrypoint (`vibes` prop binding); CHOICE uses
+ * an HTML entrypoint (`window.vibes` binding) so both browser-runtime paths
+ * stay covered. Form/choice persistence is applet-owned storage (no
+ * capability); capability requests carry user-facing reasons and name real
+ * applet capability kinds (locked by the applets package's composition tests).
+ */
+import type { AppletStarter } from './starter.ts';
+/**
+ * A minimal "form" starter — the simplest applet: collects user input.
+ * Svelte entrypoint; applet-owned storage for submissions (instance) and
+ * draft values (viewer); a submit event; one optional capability request
+ * (notification.send) with a user-facing reason.
+ */
+export declare const FORM_STARTER: AppletStarter;
+/**
+ * A "choice" starter — presents options and records a selection.
+ * HTML entrypoint (`window.vibes`); applet-owned storage for selections
+ * (instance); a choose event; one optional capability request
+ * (workboard.create) with a user-facing reason.
+ */
+export declare const CHOICE_STARTER: AppletStarter;
+/** All canonical starter fixtures. */
+export declare const STARTER_FIXTURES: {
+    form: {
+        contractVersion: 1;
+        name: string;
+        description: string;
+        entrypoint: {
+            kind: "svelte";
+            path: string;
+        };
+        props: string | number | boolean | import("@vibesdotdev/kernel/schemas/json").JsonObject | import("@vibesdotdev/kernel/schemas/json").JsonArray | null;
+        storage: {
+            id: string;
+            authority: "applet-owned" | "author-owned" | "viewer-owned";
+            scope: "instance" | "viewer";
+            schemaVersion: number;
+            recordSchema: import("@vibesdotdev/shared/types").JsonObject;
+            quotaBytes?: number | undefined;
+        }[];
+        events: {
+            type: string;
+            payload: Record<string, unknown>;
+        }[];
+        capabilities: {
+            tag: "storage.read" | "storage.write" | "network.fetch" | "clipboard.read" | "clipboard.write" | "geolocation.read" | "notification.send" | "workboard.create" | "workboard.update" | "applet.snapshot.create" | "applet.snapshot.update" | "output.create" | "output.update";
+            reason: string;
+            required: boolean;
+        }[];
+        motion: {
+            duration: number;
+            entrance: boolean;
+            respectReducedMotion: boolean;
+        };
+        scenarios: {
+            name: string;
+            description: string;
+            props: string | number | boolean | import("@vibesdotdev/kernel/schemas/json").JsonObject | import("@vibesdotdev/kernel/schemas/json").JsonArray | null;
+            expectedState?: string | number | boolean | import("@vibesdotdev/kernel/schemas/json").JsonObject | import("@vibesdotdev/kernel/schemas/json").JsonArray | null | undefined;
+        }[];
+        contributes?: {
+            tools: {
+                name: string;
+                description: string;
+                inputSchema: import("@vibesdotdev/shared/types").JsonObject;
+                impl: {
+                    surface: "server" | "client";
+                    entry: string;
+                    export: string;
+                };
+                requires: ("storage.read" | "storage.write" | "network.fetch" | "clipboard.read" | "clipboard.write" | "geolocation.read" | "notification.send" | "workboard.create" | "workboard.update" | "applet.snapshot.create" | "applet.snapshot.update" | "output.create" | "output.update")[];
+                outputSchema?: import("@vibesdotdev/shared/types").JsonObject | undefined;
+            }[];
+            cli: {
+                command: string;
+                description: string;
+                impl: {
+                    surface: "server" | "client";
+                    entry: string;
+                    export: string;
+                };
+                requires: ("storage.read" | "storage.write" | "network.fetch" | "clipboard.read" | "clipboard.write" | "geolocation.read" | "notification.send" | "workboard.create" | "workboard.update" | "applet.snapshot.create" | "applet.snapshot.update" | "output.create" | "output.update")[];
+            }[];
+        } | undefined;
+    };
+    choice: {
+        contractVersion: 1;
+        name: string;
+        description: string;
+        entrypoint: {
+            kind: "svelte";
+            path: string;
+        };
+        props: string | number | boolean | import("@vibesdotdev/kernel/schemas/json").JsonObject | import("@vibesdotdev/kernel/schemas/json").JsonArray | null;
+        storage: {
+            id: string;
+            authority: "applet-owned" | "author-owned" | "viewer-owned";
+            scope: "instance" | "viewer";
+            schemaVersion: number;
+            recordSchema: import("@vibesdotdev/shared/types").JsonObject;
+            quotaBytes?: number | undefined;
+        }[];
+        events: {
+            type: string;
+            payload: Record<string, unknown>;
+        }[];
+        capabilities: {
+            tag: "storage.read" | "storage.write" | "network.fetch" | "clipboard.read" | "clipboard.write" | "geolocation.read" | "notification.send" | "workboard.create" | "workboard.update" | "applet.snapshot.create" | "applet.snapshot.update" | "output.create" | "output.update";
+            reason: string;
+            required: boolean;
+        }[];
+        motion: {
+            duration: number;
+            entrance: boolean;
+            respectReducedMotion: boolean;
+        };
+        scenarios: {
+            name: string;
+            description: string;
+            props: string | number | boolean | import("@vibesdotdev/kernel/schemas/json").JsonObject | import("@vibesdotdev/kernel/schemas/json").JsonArray | null;
+            expectedState?: string | number | boolean | import("@vibesdotdev/kernel/schemas/json").JsonObject | import("@vibesdotdev/kernel/schemas/json").JsonArray | null | undefined;
+        }[];
+        contributes?: {
+            tools: {
+                name: string;
+                description: string;
+                inputSchema: import("@vibesdotdev/shared/types").JsonObject;
+                impl: {
+                    surface: "server" | "client";
+                    entry: string;
+                    export: string;
+                };
+                requires: ("storage.read" | "storage.write" | "network.fetch" | "clipboard.read" | "clipboard.write" | "geolocation.read" | "notification.send" | "workboard.create" | "workboard.update" | "applet.snapshot.create" | "applet.snapshot.update" | "output.create" | "output.update")[];
+                outputSchema?: import("@vibesdotdev/shared/types").JsonObject | undefined;
+            }[];
+            cli: {
+                command: string;
+                description: string;
+                impl: {
+                    surface: "server" | "client";
+                    entry: string;
+                    export: string;
+                };
+                requires: ("storage.read" | "storage.write" | "network.fetch" | "clipboard.read" | "clipboard.write" | "geolocation.read" | "notification.send" | "workboard.create" | "workboard.update" | "applet.snapshot.create" | "applet.snapshot.update" | "output.create" | "output.update")[];
+            }[];
+        } | undefined;
+    };
+};
+//# sourceMappingURL=starter-fixtures.d.ts.map

package/dist/schemas/components/starter-fixtures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"starter-fixtures.d.ts","sourceRoot":"","sources":["../../../src/schemas/components/starter-fixtures.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD;;;;;GAKG;AACH,eAAO,MAAM,YAAY,EAAE,aA2G1B,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,cAAc,EAAE,aAiF5B,CAAC;AAEF,sCAAsC;AACtC,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAGY,CAAC"}