@vibesdotdev/platform 0.0.0-stage → 1.0.0-rc.2

package/dist/svelte/fleets/helpers.js

@@ -0,0 +1,113 @@
+/**
+ * @vibesdotdev/platform/fleets/svelte — shared display helpers
+ *
+ * Pure functions shared by MachineCard and AddMachineDialog. No DOM, no $state,
+ * no Svelte imports — safe to import from any context.
+ */
+/** Tailwind class for the status dot. */
+export function statusDotClass(status) {
+    switch (status) {
+        case 'online':
+            return 'bg-emerald-500';
+        case 'active':
+            return 'bg-emerald-400';
+        case 'degraded':
+            return 'bg-amber-400';
+        case 'pending':
+            return 'bg-sky-400';
+        case 'offline':
+            return 'bg-muted-foreground/40';
+        default:
+            return 'bg-muted-foreground/25';
+    }
+}
+/** Human-readable status label. */
+export function statusLabel(status) {
+    switch (status) {
+        case 'online':
+            return 'Online';
+        case 'active':
+            return 'Active';
+        case 'degraded':
+            return 'Not responding';
+        case 'pending':
+            return 'Waiting for first connection';
+        case 'offline':
+            return 'Removed';
+        default:
+            return 'Checking...';
+    }
+}
+/** Badge class for status badges. */
+export function statusBadgeClass(status) {
+    switch (status) {
+        case 'online':
+        case 'active':
+            return 'border-emerald-500/40 bg-emerald-50 text-emerald-700 dark:bg-emerald-950/30 dark:text-emerald-300';
+        case 'degraded':
+            return 'border-amber-500/40 bg-amber-50 text-amber-700 dark:bg-amber-950/30 dark:text-amber-300';
+        case 'pending':
+            return 'border-sky-500/40 bg-sky-50 text-sky-700 dark:bg-sky-950/30 dark:text-sky-300';
+        default:
+            return '';
+    }
+}
+/** Tooltip for inline status indicators. */
+export function statusTooltip(status) {
+    if (status === 'active')
+        return 'Reporting in — connect remote access to open a terminal';
+    if (status === 'online')
+        return 'Online — terminal available';
+    return undefined;
+}
+/** Relative time string from an ISO timestamp or null. */
+export function formatLastSeen(value) {
+    if (!value)
+        return 'Never connected';
+    const date = new Date(value);
+    if (isNaN(date.getTime()))
+        return 'Unknown';
+    const ageMs = Date.now() - date.getTime();
+    const minutes = Math.floor(ageMs / 60000);
+    if (minutes < 1)
+        return 'Just now';
+    if (minutes < 60)
+        return `${minutes}m ago`;
+    const hours = Math.floor(minutes / 60);
+    if (hours < 24)
+        return `${hours}h ago`;
+    return `${Math.floor(hours / 24)}d ago`;
+}
+/** Slugify a human name to a valid machine ID. */
+export function slugify(input) {
+    return input
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, '-')
+        .replace(/^-+|-+$/g, '')
+        .slice(0, 64);
+}
+/**
+ * The canonical enroll command.
+ * The `sandbox:code-execution` label lets chat and code sessions run commands
+ * on this machine. Omit it to monitor only.
+ */
+export function daemonCommand(hostId, token) {
+    return `vibes fleet daemon --host-id ${hostId} --enroll-token ${token} --labels sandbox:code-execution`;
+}
+/**
+ * The ordered set of options the Add Machine "choose" step shows for a given
+ * capability set. Single source of truth — AddMachineDialog renders exactly
+ * this list, so gating is testable without mounting the component.
+ */
+export function addMachineOptions(caps) {
+    const options = [];
+    if (caps.canEnroll)
+        options.push('install');
+    if (caps.canAddDirect)
+        options.push('direct');
+    if (caps.canPair)
+        options.push('pairing');
+    if (caps.platformHostsUrl)
+        options.push('provision');
+    return options;
+}

package/dist/svelte/fleets/index.d.ts

@@ -0,0 +1,15 @@
+/**
+ * @vibesdotdev/platform/fleets/svelte
+ *
+ * Shared vibeskit-compliant Machines UI for the fleet/Machines surface.
+ * Consumed by hq-web (cloud) and consumer-apps/hq (local-first).
+ *
+ * All @vibesdotdev/kit imports are via SUBPATHS — never the root barrel
+ * (avoids the $state rune trap). Components are import-safe on the server.
+ */
+export { default as MachinesPanel } from './MachinesPanel.svelte';
+export { default as MachineCard } from './MachineCard.svelte';
+export { default as AddMachineDialog } from './AddMachineDialog.svelte';
+export { statusDotClass, statusLabel, statusBadgeClass, statusTooltip, formatLastSeen, slugify, daemonCommand, addMachineOptions } from './helpers.ts';
+export type { MergedFleetHost, MachinesPanelProps, AddMachineDialogProps, MachineCardProps, AddMachineCapabilities, AddMachineOption, RegisterMachine, AddDirectMachine, PairMachineByCode, RetireMachine } from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/svelte/fleets/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/svelte/fleets/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AACxE,OAAO,EACN,cAAc,EACd,WAAW,EACX,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,OAAO,EACP,aAAa,EACb,iBAAiB,EACjB,MAAM,cAAc,CAAC;AACtB,YAAY,EACX,eAAe,EACf,kBAAkB,EAClB,qBAAqB,EACrB,gBAAgB,EAChB,sBAAsB,EACtB,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,MAAM,YAAY,CAAC"}

package/dist/svelte/fleets/index.js

@@ -0,0 +1,13 @@
+/**
+ * @vibesdotdev/platform/fleets/svelte
+ *
+ * Shared vibeskit-compliant Machines UI for the fleet/Machines surface.
+ * Consumed by hq-web (cloud) and consumer-apps/hq (local-first).
+ *
+ * All @vibesdotdev/kit imports are via SUBPATHS — never the root barrel
+ * (avoids the $state rune trap). Components are import-safe on the server.
+ */
+export { default as MachinesPanel } from './MachinesPanel.svelte';
+export { default as MachineCard } from './MachineCard.svelte';
+export { default as AddMachineDialog } from './AddMachineDialog.svelte';
+export { statusDotClass, statusLabel, statusBadgeClass, statusTooltip, formatLastSeen, slugify, daemonCommand, addMachineOptions } from "./helpers.js";

package/dist/svelte/fleets/styles.css

@@ -0,0 +1,8 @@
+/*
+ * Tailwind v4 source declaration for consumers — mirrors @vibesdotdev/kit's
+ * styles.css pattern. Apps that @import this file get this package's
+ * components scanned by their Tailwind build, so utility classes used only
+ * inside these components are emitted in the app's CSS bundle (Tailwind
+ * never scans node_modules). Paths resolve relative to this file.
+ */
+@source "./";

package/dist/svelte/fleets/types.d.ts

@@ -0,0 +1,139 @@
+/**
+ * @vibesdotdev/platform/fleets/svelte — shared type definitions
+ *
+ * Re-exports `MergedFleetHost` from `@vibesdotdev/platform/fleets` so consumers
+ * only need one import. The component prop interfaces live here (and the
+ * components type their `$props()` from them) so the published API can't
+ * drift from the implementation.
+ */
+import type { MergedFleetHost } from '@vibesdotdev/platform/fleets';
+export type { MergedFleetHost } from '@vibesdotdev/platform/fleets';
+export type { AddMachineCapabilities, AddMachineOption, DisplayStatus } from './helpers.ts';
+/** Register (enrollment-token) callback contract. */
+export type RegisterMachine = (input: {
+    name: string;
+    hostId: string;
+}) => Promise<{
+    hostId: string;
+    token: string;
+}>;
+/** Direct-address callback contract. */
+export type AddDirectMachine = (input: {
+    name: string;
+    address: string;
+    id: string;
+}) => Promise<void>;
+/** Pairing-code callback contract. */
+export type PairMachineByCode = (code: string, address?: string) => Promise<{
+    hostId: string;
+}>;
+/**
+ * Retire/remove callback contract. The panel owns the ConfirmDialog; the
+ * caller owns the actual removal (SvelteKit action, fetch, ...). Throw to
+ * surface an error in the panel.
+ */
+export type RetireMachine = (host: MergedFleetHost) => Promise<void>;
+/**
+ * Props for `<MachinesPanel>` — the full fleet grid with header, error banner,
+ * empty state, machine cards, details dialog, remove confirmation, and the
+ * Add Machine dialog.
+ */
+export interface MachinesPanelProps {
+    /** All hosts to render (panel filters `offline` internally). */
+    hosts?: MergedFleetHost[];
+    /** If set, shows an error banner above the grid. */
+    error?: string | null;
+    /** Build a deep-link URL to the terminal for a given hostId. Optional — cards
+     *  omit the "Open terminal" action when undefined. */
+    terminalHref?: (hostId: string) => string;
+    /** Build a deep-link URL to the editor for a given hostId. Optional — cards
+     *  omit the "Open editor" action when undefined. */
+    editorHref?: (hostId: string) => string;
+    /** Build a deep-link URL to the desktop for a given hostId. Optional — cards
+     *  omit the "Open desktop" action when undefined. */
+    desktopHref?: (hostId: string) => string;
+    /** Full URL to platform.vibes.dev/hosts for "Provision a cloud VM". Null hides the option. */
+    platformHostsUrl?: string | null;
+    /** Whether to offer "Install on a machine" (enrollment token flow). */
+    canEnroll?: boolean;
+    /** Whether to offer "Connect by address" (direct address flow). */
+    canAddDirect?: boolean;
+    /** Whether to offer "Pairing code" (local-network daemon code flow). */
+    canPair?: boolean;
+    /** Bridges the enroll form to the host app's backend. */
+    register?: RegisterMachine;
+    /** Bridges the direct-address form to the host app's backend. */
+    addDirect?: AddDirectMachine;
+    /** Bridges the pairing-code form to the host app's backend. */
+    pairByCode?: PairMachineByCode;
+    /** Performs the removal. When set, cards/details show a Remove action that
+     *  opens the panel's ConfirmDialog. */
+    retire?: RetireMachine;
+    /** Per-host gate for the Remove action (e.g. consumer only removes
+     *  direct-address hosts). Defaults to allowing every host when `retire` is set. */
+    canRemoveHost?: (host: MergedFleetHost) => boolean;
+    /** Bullet lines shown in the remove confirmation. Defaults to the standard set. */
+    removalNotes?: string[];
+    /** Called after a machine is successfully connected (add flow completed). */
+    onHostAdded?: () => void;
+    /** Called after a machine is successfully removed. */
+    onHostRemoved?: () => void;
+}
+/**
+ * Props for `<AddMachineDialog>` — the multi-step "Add a machine" modal.
+ */
+export interface AddMachineDialogProps {
+    /** Whether the dialog is visible (bindable). */
+    open?: boolean;
+    /** Close the dialog (caller sets open=false). */
+    onClose: () => void;
+    /**
+     * The caller's live host list (MachinesPanel already polls this on an
+     * interval). When present, the "waiting" step watches it and flips to
+     * "success" automatically once the just-enrolled host reports online/active
+     * — instead of requiring the user to self-assert the connection.
+     */
+    hosts?: MergedFleetHost[];
+    /** Show "Install on a machine" (enrollment token) option. */
+    canEnroll?: boolean;
+    /** Show "Connect by address" option. */
+    canAddDirect?: boolean;
+    /** Show "Pairing code" option. */
+    canPair?: boolean;
+    /** Platform hosts URL for "Provision a cloud VM" deep-link. */
+    platformHostsUrl?: string | null;
+    /**
+     * Called when the user submits the enroll form.
+     * Returns the enrolled hostId and the one-time enrollment token.
+     * Caller bridges to a SvelteKit action or fetch.
+     */
+    register?: RegisterMachine;
+    /**
+     * Called when the user submits a direct address.
+     * Caller bridges to the SvelteKit action or fetch.
+     */
+    addDirect?: AddDirectMachine;
+    /**
+     * Called when the user submits a pairing code.
+     * Returns the connected hostId on success, throws on error.
+     */
+    pairByCode?: PairMachineByCode;
+    /** Called when a machine is successfully connected. */
+    onDone?: () => void;
+}
+/**
+ * Props for `<MachineCard>` — a single machine in the grid.
+ */
+export interface MachineCardProps {
+    host: MergedFleetHost;
+    terminalHref?: (hostId: string) => string;
+    /** Build a deep-link URL to the editor for a given hostId. Optional — cards
+     *  omit the "Open editor" action when undefined. */
+    editorHref?: (hostId: string) => string;
+    /** Build a deep-link URL to the desktop for a given hostId. Optional — cards
+     *  omit the "Open desktop" action when undefined. */
+    desktopHref?: (hostId: string) => string;
+    onRetire?: (host: MergedFleetHost) => void;
+    onDetails?: (host: MergedFleetHost) => void;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/svelte/fleets/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/svelte/fleets/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAEpE,YAAY,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACpE,YAAY,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE5F,qDAAqD;AACrD,MAAM,MAAM,eAAe,GAAG,CAAC,KAAK,EAAE;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CACf,KAAK,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAEjD,wCAAwC;AACxC,MAAM,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;CACX,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAEpB,sCAAsC;AACtC,MAAM,MAAM,iBAAiB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAEhG;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,IAAI,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAErE;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IAClC,gEAAgE;IAChE,KAAK,CAAC,EAAE,eAAe,EAAE,CAAC;IAC1B,oDAAoD;IACpD,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB;0DACsD;IACtD,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC;IAC1C;wDACoD;IACpD,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC;IACxC;yDACqD;IACrD,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC;IACzC,8FAA8F;IAC9F,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,uEAAuE;IACvE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,mEAAmE;IACnE,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,wEAAwE;IACxE,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,yDAAyD;IACzD,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,iEAAiE;IACjE,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,+DAA+D;IAC/D,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B;2CACuC;IACvC,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;uFACmF;IACnF,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,eAAe,KAAK,OAAO,CAAC;IACnD,mFAAmF;IACnF,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,6EAA6E;IAC7E,WAAW,CAAC,EAAE,MAAM,IAAI,CAAC;IACzB,sDAAsD;IACtD,aAAa,CAAC,EAAE,MAAM,IAAI,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACrC,gDAAgD;IAChD,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,iDAAiD;IACjD,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB;;;;;OAKG;IACH,KAAK,CAAC,EAAE,eAAe,EAAE,CAAC;IAC1B,6DAA6D;IAC7D,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,wCAAwC;IACxC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,kCAAkC;IAClC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,+DAA+D;IAC/D,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B;;;OAGG;IACH,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B;;;OAGG;IACH,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,uDAAuD;IACvD,MAAM,CAAC,EAAE,MAAM,IAAI,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAChC,IAAI,EAAE,eAAe,CAAC;IACtB,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC;IAC1C;wDACoD;IACpD,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC;IACxC;yDACqD;IACrD,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC;IACzC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,eAAe,KAAK,IAAI,CAAC;IAC3C,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,eAAe,KAAK,IAAI,CAAC;CAC5C"}

package/dist/svelte/fleets/types.js

@@ -0,0 +1,9 @@
+/**
+ * @vibesdotdev/platform/fleets/svelte — shared type definitions
+ *
+ * Re-exports `MergedFleetHost` from `@vibesdotdev/platform/fleets` so consumers
+ * only need one import. The component prop interfaces live here (and the
+ * components type their `$props()` from them) so the published API can't
+ * drift from the implementation.
+ */
+export {};

package/dist/svelte/index.d.ts

@@ -0,0 +1,15 @@
+/**
+ * @vibesdotdev/platform/svelte
+ *
+ * Svelte stores and components for platform host selection/provisioning UI.
+ * Runtime primitives stay in @vibesdotdev/platform; this package binds them
+ * to Svelte stores, preload helpers, and reusable components.
+ */
+export * from './runtime.ts';
+export * from './loaders.ts';
+export * from './stores/index.ts';
+export * from './components/index.ts';
+export { platformState, providePlatformState, PlatformState } from './state.svelte.ts';
+export type { PlatformStateSeed, PlatformOverallStatus, PlatformServiceStatus, PlatformService, PlatformDeployment, PlatformStatusSnapshot, PlatformStateInitOptions } from './state.svelte.ts';
+export { platformStateSeedSchema, platformStatusSnapshotSchema, platformDeploymentSchema, platformServiceSchema } from '../schemas/platform-state.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/svelte/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/svelte/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AAEtC,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACvF,YAAY,EACX,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,EACrB,eAAe,EACf,kBAAkB,EAClB,sBAAsB,EACtB,wBAAwB,EACxB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,uBAAuB,EAAE,4BAA4B,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC"}

package/dist/svelte/index.js

@@ -0,0 +1,13 @@
+/**
+ * @vibesdotdev/platform/svelte
+ *
+ * Svelte stores and components for platform host selection/provisioning UI.
+ * Runtime primitives stay in @vibesdotdev/platform; this package binds them
+ * to Svelte stores, preload helpers, and reusable components.
+ */
+export * from "./runtime.js";
+export * from "./loaders.js";
+export * from "./stores/index.js";
+export * from "./components/index.js";
+export { platformState, providePlatformState, PlatformState } from "./state.svelte.js";
+export { platformStateSeedSchema, platformStatusSnapshotSchema, platformDeploymentSchema, platformServiceSchema } from "../schemas/platform-state.js";

package/dist/svelte/integration-catalog.load.d.ts

@@ -0,0 +1,108 @@
+/**
+ * Server `load` helper for the integration-catalog surface.
+ *
+ * `hq.vibes.dev/integrations` (and any other thin consumer org app) calls
+ * this from its `+page.server.ts` to render the catalog of user-connectable
+ * integration providers with a REAL per-provider connection verdict —
+ * without owning any integration domain logic itself. Mirrors
+ * `loadIntegrationConnectEnvironment`'s origin-resolution pattern (see
+ * `./integration-connect.load.ts`) and additionally resolves each catalog
+ * provider's live connection status via the platform internal API
+ * (`(await getVibesPlatformInternalClient(runtime)).integrations.status(...)`, generalized
+ * over every `integration/provider` descriptor — see
+ * `apps/platform-web/src/lib/server/integration-connection-status.ts`).
+ *
+ * The provider list is discovered through the canonical Integrations runtime
+ * client. Provider packages own their descriptor identity and copy; this
+ * Svelte projection only enriches those declarations with platform-owned
+ * OAuth route support and scoped connection status. See
+ * SURFACE-PACKAGE-CONVENTIONS §2.5.2.
+ *
+ * ⭐ SECURITY: every status lookup is scoped to the `scope` the CALLER
+ * supplies (its own resolved acting user/org — e.g. via
+ * `actingScopeFromLocals(locals)` in the app's own `+page.server.ts`). This
+ * helper never infers identity itself, so it can only ever ask "is MY
+ * caller's scope connected", never a different tenant's. The underlying
+ * `/api/internal/integrations/[id]/status` route re-derives that same scope
+ * server-side from the authenticated internal-service headers
+ * (`X-Vibes-User-Id` / `X-Vibes-Organization-Id`) rather than trusting
+ * anything passed in the request body, so a bug here still cannot leak a
+ * different tenant's connection state. When in doubt (missing token,
+ * network failure, unrecognized provider) a provider degrades to a local
+ * `{ kind: 'error' }` / `{ kind: 'unsupported' }` state — NEVER a fabricated
+ * connected badge.
+ *
+ * Every provider is resolved independently (`Promise.all` + per-provider
+ * `.catch`) so one failing status call never blanks the page or any other
+ * provider's card.
+ */
+import type { RuntimeRef } from '@vibesdotdev/kernel';
+/** Minimal structural shape — any SvelteKit server `RequestEvent`/`ServerLoadEvent` satisfies it. */
+interface RuntimeEvent {
+    locals: {
+        runtime: RuntimeRef;
+    };
+}
+/**
+ * The acting identity a catalog load is scoped to. Supplied by the CALLING
+ * app (it owns auth/locals resolution) — this helper never infers identity
+ * itself, so it can never be tricked into answering for the wrong tenant.
+ */
+export interface IntegrationCatalogScope {
+    userId: string;
+    /** Present when the caller is acting in an organization; omit for a personal/user scope. */
+    organizationId?: string | null;
+}
+/** One entry in the catalog of user-connectable integration providers. */
+export interface IntegrationCatalogProvider {
+    /** Short slug, e.g. `'quickbooks'`. */
+    id: string;
+    /** Descriptor id, e.g. `'integration.quickbooks'`. */
+    integrationId: string;
+    name: string;
+    description: string;
+    /** Whether platform-web exposes a `/auth/{provider}/connect` route for this provider today. */
+    connectSupported: boolean;
+}
+/** Real, non-fabricated per-provider connection verdict for the calling scope. */
+export type IntegrationCatalogProviderState = {
+    kind: 'connected';
+    connectionCount: number;
+    providerAdminLabel: string | null;
+} | {
+    kind: 'not-connected';
+    providerAdminLabel: string | null;
+} | {
+    kind: 'unsupported';
+} | {
+    kind: 'error';
+    message: string;
+};
+export interface IntegrationCatalogEntry extends IntegrationCatalogProvider {
+    state: IntegrationCatalogProviderState;
+}
+export interface IntegrationCatalogEnvironment {
+    /** Platform-web origin — hosts the canonical `/auth/{provider}/connect` routes and the manage/disconnect UI. */
+    platformOrigin: string;
+    providers: IntegrationCatalogEntry[];
+}
+interface CatalogProviderDescriptor {
+    id: string;
+    provider: string;
+    name: string;
+    description?: string;
+}
+/** Project owner-declared integration descriptors into platform catalog cards. */
+export declare function projectIntegrationCatalogProviders(descriptors: readonly CatalogProviderDescriptor[], runtime: RuntimeRef): IntegrationCatalogProvider[];
+/**
+ * Resolve the integration-catalog surface's environment-derived mount data:
+ * the platform origin (for connect/manage links) plus the catalog of
+ * connectable providers, each with a REAL per-provider connection verdict
+ * for `scope`. A single provider's status call failing (network blip,
+ * unsupported id, missing internal token) never blanks the page or any
+ * other provider's card — see the module docstring for the security
+ * contract on `scope`.
+ */
+export declare function loadIntegrationCatalogEnvironment(event: RuntimeEvent, scope: IntegrationCatalogScope): Promise<IntegrationCatalogEnvironment>;
+export {};
+//# sourceMappingURL=integration-catalog.load.d.ts.map

package/dist/svelte/integration-catalog.load.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration-catalog.load.d.ts","sourceRoot":"","sources":["../../src/svelte/integration-catalog.load.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AActD,qGAAqG;AACrG,UAAU,YAAY;IACrB,MAAM,EAAE;QAAE,OAAO,EAAE,UAAU,CAAA;KAAE,CAAC;CAChC;AAED;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,4FAA4F;IAC5F,cAAc,CAAC,EAAE,MAAM,GAAC,IAAI,CAAC;CAC7B;AAED,0EAA0E;AAC1E,MAAM,WAAW,0BAA0B;IAC1C,uCAAuC;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,sDAAsD;IACtD,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,+FAA+F;IAC/F,gBAAgB,EAAE,OAAO,CAAC;CAC1B;AAED,kFAAkF;AAClF,MAAM,MAAM,+BAA+B,GACzC;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,MAAM,GAAC,IAAI,CAAA;CAAE,GAC/E;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,kBAAkB,EAAE,MAAM,GAAC,IAAI,CAAA;CAAE,GAC1D;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,GACvB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAErC,MAAM,WAAW,uBAAwB,SAAQ,0BAA0B;IAC1E,KAAK,EAAE,+BAA+B,CAAC;CACvC;AAED,MAAM,WAAW,6BAA6B;IAC7C,gHAAgH;IAChH,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,uBAAuB,EAAE,CAAC;CACrC;AAOD,UAAU,yBAAyB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAQD,kFAAkF;AAClF,wBAAgB,kCAAkC,CACjD,WAAW,EAAE,SAAS,yBAAyB,EAAE,EACjD,OAAO,EAAE,UAAU,GACjB,0BAA0B,EAAE,CAQ9B;AAkED;;;;;;;;GAQG;AACH,wBAAsB,iCAAiC,CACtD,KAAK,EAAE,YAAY,EACnB,KAAK,EAAE,uBAAuB,GAC5B,OAAO,CAAC,6BAA6B,CAAC,CAiBxC"}

package/dist/svelte/integration-catalog.load.js

@@ -0,0 +1,132 @@
+/**
+ * Server `load` helper for the integration-catalog surface.
+ *
+ * `hq.vibes.dev/integrations` (and any other thin consumer org app) calls
+ * this from its `+page.server.ts` to render the catalog of user-connectable
+ * integration providers with a REAL per-provider connection verdict —
+ * without owning any integration domain logic itself. Mirrors
+ * `loadIntegrationConnectEnvironment`'s origin-resolution pattern (see
+ * `./integration-connect.load.ts`) and additionally resolves each catalog
+ * provider's live connection status via the platform internal API
+ * (`(await getVibesPlatformInternalClient(runtime)).integrations.status(...)`, generalized
+ * over every `integration/provider` descriptor — see
+ * `apps/platform-web/src/lib/server/integration-connection-status.ts`).
+ *
+ * The provider list is discovered through the canonical Integrations runtime
+ * client. Provider packages own their descriptor identity and copy; this
+ * Svelte projection only enriches those declarations with platform-owned
+ * OAuth route support and scoped connection status. See
+ * SURFACE-PACKAGE-CONVENTIONS §2.5.2.
+ *
+ * ⭐ SECURITY: every status lookup is scoped to the `scope` the CALLER
+ * supplies (its own resolved acting user/org — e.g. via
+ * `actingScopeFromLocals(locals)` in the app's own `+page.server.ts`). This
+ * helper never infers identity itself, so it can only ever ask "is MY
+ * caller's scope connected", never a different tenant's. The underlying
+ * `/api/internal/integrations/[id]/status` route re-derives that same scope
+ * server-side from the authenticated internal-service headers
+ * (`X-Vibes-User-Id` / `X-Vibes-Organization-Id`) rather than trusting
+ * anything passed in the request body, so a bug here still cannot leak a
+ * different tenant's connection state. When in doubt (missing token,
+ * network failure, unrecognized provider) a provider degrades to a local
+ * `{ kind: 'error' }` / `{ kind: 'unsupported' }` state — NEVER a fabricated
+ * connected badge.
+ *
+ * Every provider is resolved independently (`Promise.all` + per-provider
+ * `.catch`) so one failing status call never blanks the page or any other
+ * provider's card.
+ */
+import { settle } from '@vibesdotdev/kernel';
+import { originOf, serviceEnvironment } from '@vibesdotdev/infra-core/service';
+import { getVibesClient } from '@vibesdotdev/kernel/client';
+import { getVibesPlatformInternalClient, PlatformInternalError } from '@vibesdotdev/platform/internal-api';
+import { isPlatformIntegrationConnectable } from "../integration-connect.js";
+/** True when the runtime declares a user-driven OAuth connect route for this provider. */
+function hasConnectRoute(integrationId, runtime) {
+    return isPlatformIntegrationConnectable(runtime, integrationId);
+}
+/** Project owner-declared integration descriptors into platform catalog cards. */
+export function projectIntegrationCatalogProviders(descriptors, runtime) {
+    return descriptors.map((descriptor) => ({
+        id: descriptor.provider,
+        integrationId: descriptor.id,
+        name: descriptor.name,
+        description: descriptor.description ?? '',
+        connectSupported: hasConnectRoute(descriptor.id, runtime)
+    }));
+}
+const STATUS_UNAVAILABLE_MESSAGE = 'Connection status is unavailable right now.';
+// A clean platform error arrives as the JSON `{ error: { message } }`
+// envelope — a short, human-readable sentence. A failed/transient hop
+// instead surfaces a raw upstream body (most often an HTML error page),
+// which must never reach the UI.
+const HTML_TAG = /<\/?[a-z!][a-z0-9]*[\s>/]/i;
+const SERVER_SIGNATURE = /\bnginx\b|\bcloudflare\b|bad gateway|gateway time-?out/i;
+function isCleanStatusMessage(message) {
+    const trimmed = message.trim();
+    if (!trimmed || trimmed.length > 200)
+        return false;
+    if (HTML_TAG.test(trimmed) || SERVER_SIGNATURE.test(trimmed))
+        return false;
+    return true;
+}
+function toUserFacingStatusError(error) {
+    const message = error instanceof Error ? error.message : '';
+    if (isCleanStatusMessage(message))
+        return message;
+    if (error instanceof PlatformInternalError) {
+        return `Couldn't reach the connection status service (HTTP ${error.status}). Try again shortly.`;
+    }
+    return STATUS_UNAVAILABLE_MESSAGE;
+}
+async function loadProviderState(runtime, provider, scope) {
+    const outcome = await settle(async () => {
+        const platform = await getVibesPlatformInternalClient(runtime);
+        const status = await platform.integrations.status({
+            userId: scope.userId,
+            organizationId: scope.organizationId ?? undefined,
+            integrationId: provider.integrationId
+        });
+        return status.connected
+            ? {
+                kind: 'connected',
+                connectionCount: status.connectionCount,
+                providerAdminLabel: status.providerAdminLabel || null
+            }
+            : { kind: 'not-connected', providerAdminLabel: status.providerAdminLabel || null };
+    });
+    if (outcome.ok)
+        return outcome.value;
+    {
+        const err = outcome.cause;
+        if (err instanceof PlatformInternalError && err.reason === 'unsupported-integration') {
+            return { kind: 'unsupported' };
+        }
+        return { kind: 'error', message: toUserFacingStatusError(err) };
+    }
+}
+/** The declared `platform` service origin in the request runtime's service environment; undeclared fails `NOT_FOUND`. */
+async function resolveDeclaredPlatformOrigin(runtime) {
+    return originOf(await runtime.query('infra/service').withId('platform').resolve(), await serviceEnvironment(runtime), 'primary');
+}
+/**
+ * Resolve the integration-catalog surface's environment-derived mount data:
+ * the platform origin (for connect/manage links) plus the catalog of
+ * connectable providers, each with a REAL per-provider connection verdict
+ * for `scope`. A single provider's status call failing (network blip,
+ * unsupported id, missing internal token) never blanks the page or any
+ * other provider's card — see the module docstring for the security
+ * contract on `scope`.
+ */
+export async function loadIntegrationCatalogEnvironment(event, scope) {
+    const integrations = await getVibesClient('integrations', event.locals.runtime);
+    const catalog = projectIntegrationCatalogProviders(await integrations.providers.list(), event.locals.runtime);
+    const [platformOrigin, providers] = await Promise.all([
+        resolveDeclaredPlatformOrigin(event.locals.runtime),
+        Promise.all(catalog.map(async (provider) => ({
+            ...provider,
+            state: await loadProviderState(event.locals.runtime, provider, scope)
+        })))
+    ]);
+    return { platformOrigin, providers };
+}

package/dist/svelte/integration-connect.d.ts

@@ -0,0 +1,3 @@
+/** Compatibility facade: the framework-neutral owner is @vibesdotdev/platform. */
+export * from '@vibesdotdev/platform/integration-connect';
+//# sourceMappingURL=integration-connect.d.ts.map

package/dist/svelte/integration-connect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration-connect.d.ts","sourceRoot":"","sources":["../../src/svelte/integration-connect.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,cAAc,2CAA2C,CAAC"}

package/dist/svelte/integration-connect.js

@@ -0,0 +1,2 @@
+/** Compatibility facade: the framework-neutral owner is @vibesdotdev/platform. */
+export * from '@vibesdotdev/platform/integration-connect';

package/dist/svelte/integration-connect.load.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Server `load` helper for the integration-connect surface.
+ *
+ * An org app's `+page.server.ts` calls this to get the environment-derived mount
+ * data its integration-connect UI needs: the platform-web origin that hosts the
+ * canonical OAuth connect routes. It is the declared `platform` `infra/service`
+ * primary origin in the request runtime's configured service environment
+ * (`event.locals.runtime`, set by the SvelteKit surface's `prepareHandle`); an
+ * undeclared service fails `NOT_FOUND` rather than redirecting to a wrong or
+ * relative origin. The app passes `platformOrigin` to
+ * `startPlatformIntegrationConnection` and supplies only ITS org context
+ * (integration status, which buttons to render) — no origin or connect-route
+ * logic in the app. See SURFACE-PACKAGE-CONVENTIONS §2.5.2.
+ */
+import type { RuntimeRef } from '@vibesdotdev/kernel';
+export interface IntegrationConnectEnvironment {
+    /** Platform-web origin — hosts the canonical `/auth/{provider}/connect` routes. */
+    platformOrigin: string;
+}
+/** Minimal structural shape — any SvelteKit server `RequestEvent` satisfies it. */
+interface RuntimeEvent {
+    locals: {
+        runtime: RuntimeRef;
+    };
+}
+/** Resolve the integration-connect surface's environment-derived mount data from the request runtime. */
+export declare function loadIntegrationConnectEnvironment(event: RuntimeEvent): Promise<IntegrationConnectEnvironment>;
+export {};
+//# sourceMappingURL=integration-connect.load.d.ts.map

package/dist/svelte/integration-connect.load.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration-connect.load.d.ts","sourceRoot":"","sources":["../../src/svelte/integration-connect.load.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAQtD,MAAM,WAAW,6BAA6B;IAC7C,mFAAmF;IACnF,cAAc,EAAE,MAAM,CAAC;CACvB;AAED,mFAAmF;AACnF,UAAU,YAAY;IACrB,MAAM,EAAE;QAAE,OAAO,EAAE,UAAU,CAAA;KAAE,CAAC;CAChC;AAED,yGAAyG;AACzG,wBAAsB,iCAAiC,CACtD,KAAK,EAAE,YAAY,GACjB,OAAO,CAAC,6BAA6B,CAAC,CASxC"}