@vibesdotdev/storage 0.0.1

package/dist/schemas/sync-bridge-descriptor.js

@@ -0,0 +1,67 @@
+/**
+ * Storage Sync-Bridge Descriptor Schema
+ *
+ * Declares a bidirectional sync bridge between a runtime kind (local descriptors)
+ * and a cloud CRUD API. Replaces hand-rolled per-module sync services with a
+ * declarative descriptor that the generic sync executor can process.
+ *
+ * The bridge maps local runtime descriptors ↔ remote API records, handling
+ * ID transformation, ownership filtering, secret stripping, and conflict resolution.
+ */
+import * as z from 'zod/v4';
+import { RuntimeDescriptorSchema } from '@vibesdotdev/runtime/schemas/descriptor';
+export const SyncDirectionSchema = z.enum(['bidirectional', 'push-only', 'pull-only']);
+export const ConflictStrategySchema = z.enum(['local-wins', 'remote-wins', 'manual', 'newest']);
+export const OwnershipFilterSchema = z.enum(['all', 'user-only', 'system-only']);
+/**
+ * Schema for a sync-bridge descriptor.
+ *
+ * Extends RuntimeDescriptor with source/target/sync configuration.
+ */
+export const SyncBridgeDescriptorSchema = RuntimeDescriptorSchema.extend({
+    kind: z.literal('storage/sync-bridge'),
+    /** Source: where descriptors live locally */
+    source: z.object({
+        /** The runtime kind ID to collect descriptors from (e.g. 'dev/benchmark-suite') */
+        runtimeKind: z.string().min(1),
+        /** Optional: field on the descriptor that holds the version number */
+        versionField: z.string().optional(),
+        /** Optional: field on the descriptor that holds the source type ('system' | 'user') */
+        sourceTypeField: z.string().optional()
+    }),
+    /** Target: the cloud CRUD API to sync against */
+    target: z.object({
+        /** API path for the collection endpoint (e.g. '/api/dev/benchmarks') */
+        apiPath: z.string().min(1),
+        /** API path for a single entity, with :id placeholder (e.g. '/api/dev/benchmarks/:id') */
+        entityPath: z.string().optional(),
+        /** The field name in API responses that contains the list of items */
+        listField: z.string().optional(),
+        /** The field name for the total count in list responses */
+        totalField: z.string().optional(),
+        /** Request soft-deleted rows when the remote API supports it */
+        includeDeleted: z.boolean().optional()
+    }),
+    /** Sync behavior configuration */
+    sync: z
+        .object({
+        /** Sync direction */
+        direction: SyncDirectionSchema.default('bidirectional'),
+        /** Which entities to sync based on ownership */
+        ownershipFilter: OwnershipFilterSchema.default('all'),
+        /** How to handle conflicts when both sides changed */
+        conflictStrategy: ConflictStrategySchema.default('local-wins'),
+        /** Fields to strip before pushing to cloud (e.g. secrets) */
+        sensitiveFields: z.array(z.string()).default([]),
+        /** The field that uniquely identifies an entity */
+        idField: z.string().default('id')
+    })
+        .default({
+        direction: 'bidirectional',
+        ownershipFilter: 'all',
+        conflictStrategy: 'local-wins',
+        sensitiveFields: [],
+        idField: 'id'
+    })
+}).passthrough();
+//# sourceMappingURL=sync-bridge-descriptor.js.map

package/dist/schemas/sync-bridge-descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-bridge-descriptor.js","sourceRoot":"","sources":["../../src/schemas/sync-bridge-descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAElF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;AAGvF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAGhG,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;AAGjF;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,uBAAuB,CAAC,MAAM,CAAC;IACxE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;IAEtC,6CAA6C;IAC7C,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,mFAAmF;QACnF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAE9B,sEAAsE;QACtE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAEnC,uFAAuF;QACvF,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACtC,CAAC;IAEF,iDAAiD;IACjD,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,wEAAwE;QACxE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAE1B,0FAA0F;QAC1F,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAEjC,sEAAsE;QACtE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAEhC,2DAA2D;QAC3D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAEjC,gEAAgE;QAChE,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KACtC,CAAC;IAEF,kCAAkC;IAClC,IAAI,EAAE,CAAC;SACL,MAAM,CAAC;QACP,qBAAqB;QACrB,SAAS,EAAE,mBAAmB,CAAC,OAAO,CAAC,eAAe,CAAC;QAEvD,gDAAgD;QAChD,eAAe,EAAE,qBAAqB,CAAC,OAAO,CAAC,KAAK,CAAC;QAErD,sDAAsD;QACtD,gBAAgB,EAAE,sBAAsB,CAAC,OAAO,CAAC,YAAY,CAAC;QAE9D,6DAA6D;QAC7D,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QAEhD,mDAAmD;QACnD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;KACjC,CAAC;SACD,OAAO,CAAC;QACR,SAAS,EAAE,eAAe;QAC1B,eAAe,EAAE,KAAK;QACtB,gBAAgB,EAAE,YAAY;QAC9B,eAAe,EAAE,EAAE;QACnB,OAAO,EAAE,IAAI;KACb,CAAC;CACH,CAAC,CAAC,WAAW,EAAE,CAAC"}

package/dist/server/manifest-route.d.ts

@@ -0,0 +1,92 @@
+/**
+ * Generic Storage Manifest Route Handler
+ *
+ * SvelteKit-friendly handler that serves the canonical HTTP surface
+ * for `storage/manifest` descriptors via `/api/storage/[id]`.
+ *
+ * The owning app mounts a single `[id]/+server.ts` that calls
+ * `createManifestRouteHandler({ appId, loaders })`. The handler:
+ *
+ *   1. Looks up the descriptor at `params.id` via the runtime
+ *      (`runtime.query('storage/manifest').withId(params.id)`).
+ *   2. Verifies the descriptor declares the running app as its owner
+ *      via `adapterConfig['storage.cloud-api'].ownerApp === appId`.
+ *      Cross-app callers get a 403, which keeps the contract clean
+ *      and prevents accidental data leaks from a borrower app being
+ *      asked to serve data it doesn't own.
+ *   3. Dispatches to a per-descriptor loader the app provides — one
+ *      function per descriptor for `load` / `save` / `delete`.
+ *      Loaders are the bridge between the owning app's local data
+ *      surface (D1 table, libsql, file, etc.) and the manifest's
+ *      wire shape that other apps consume via the `storage.cloud-api`
+ *      adapter.
+ *
+ * Loaders are registered explicitly per descriptor (not auto-discovered)
+ * so the owning app stays in control of validation, authorization, and
+ * the local data path. A descriptor without a loader returns 404.
+ *
+ * Framework-agnostic by design: the handler accepts a structural
+ * `ManifestRouteEvent` matching SvelteKit's `RequestEvent` shape but
+ * doesn't import `@sveltejs/kit`. Apps re-export the produced GET/PUT/
+ * DELETE/HEAD from a `+server.ts` file.
+ */
+import type { StorageManifestDescriptor } from '../schemas/manifest-descriptor.ts';
+/**
+ * Structural type matching SvelteKit's `RequestEvent`. Keeps this
+ * module framework-agnostic. `locals` stays `unknown` because each
+ * app types its own `App.Locals` interface without an index signature —
+ * loaders cast it as needed.
+ */
+export interface ManifestRouteEvent {
+    params: Partial<Record<string, string>>;
+    request: Request;
+    url: URL;
+    locals: unknown;
+}
+export type ManifestOperation = 'read' | 'write' | 'delete';
+export interface ManifestLoader<T = unknown> {
+    /** Load the full manifest payload (typically a `Record<id, descriptor>`). */
+    load: (event: ManifestRouteEvent) => Promise<T | null>;
+    /** Optional write path; omit to make the descriptor read-only over HTTP. */
+    save?: (event: ManifestRouteEvent, data: T) => Promise<void>;
+    /** Optional delete path; omit to make the descriptor non-deletable over HTTP. */
+    delete?: (event: ManifestRouteEvent) => Promise<void>;
+    /**
+     * Optional per-request authorization. Return `false` to send 403.
+     * Default: allow all (the SvelteKit auth hooks have already gated
+     * unauthenticated traffic before this handler runs).
+     */
+    authorize?: (event: ManifestRouteEvent, op: ManifestOperation) => boolean | Promise<boolean>;
+    /** Optional zod schema for validating PUT bodies before the loader sees them. */
+    validate?: (data: unknown) => unknown;
+}
+export interface ManifestRouteOptions {
+    /** This app's id; must match `descriptor.adapterConfig['storage.cloud-api'].ownerApp`. */
+    appId: string;
+    /** Map of descriptor id → loader. Missing entries return 404. */
+    loaders: Record<string, ManifestLoader>;
+    /**
+     * Resolver for the runtime descriptor lookup. Defaults to
+     * `(id) => getVibesRuntime().query('storage/manifest').withId(id).firstDescriptor()`.
+     * Override for tests.
+     */
+    resolveDescriptor?: (id: string) => Promise<StorageManifestDescriptor | null>;
+    /**
+     * Returns the expected `Authorization: Bearer <token>` for internal
+     * cross-app calls. When the inbound request's bearer matches, loader
+     * `authorize` hooks are bypassed and `event.locals.user` is augmented
+     * with `{ id: 'system', isSuperuser: true, internal: true }` so loaders see
+     * a system-admin actor. Lets one cloud worker fetch the manifests it
+     * doesn't own from the owning worker's `[id]/+server.ts` without
+     * forwarding the end-user's session cookie cross-origin.
+     */
+    internalServiceToken?: () => string | null | undefined;
+}
+export type ManifestRouteHandlers = {
+    GET: (event: ManifestRouteEvent) => Promise<Response>;
+    PUT: (event: ManifestRouteEvent) => Promise<Response>;
+    DELETE: (event: ManifestRouteEvent) => Promise<Response>;
+    HEAD: (event: ManifestRouteEvent) => Promise<Response>;
+};
+export declare function createManifestRouteHandler(opts: ManifestRouteOptions): ManifestRouteHandlers;
+//# sourceMappingURL=manifest-route.d.ts.map

package/dist/server/manifest-route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-route.d.ts","sourceRoot":"","sources":["../../src/server/manifest-route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAGH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAInF;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IAClC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACxC,OAAO,EAAE,OAAO,CAAC;IACjB,GAAG,EAAE,GAAG,CAAC;IACT,MAAM,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE5D,MAAM,WAAW,cAAc,CAAC,CAAC,GAAG,OAAO;IAC1C,6EAA6E;IAC7E,IAAI,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACvD,4EAA4E;IAC5E,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7D,iFAAiF;IACjF,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD;;;;OAIG;IACH,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,EAAE,EAAE,EAAE,iBAAiB,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7F,iFAAiF;IACjF,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC;CACtC;AAED,MAAM,WAAW,oBAAoB;IACpC,0FAA0F;IAC1F,KAAK,EAAE,MAAM,CAAC;IACd,iEAAiE;IACjE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACxC;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,yBAAyB,GAAG,IAAI,CAAC,CAAC;IAC9E;;;;;;;;OAQG;IACH,oBAAoB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;CACvD;AAuBD,MAAM,MAAM,qBAAqB,GAAG;IACnC,GAAG,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IACtD,GAAG,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzD,IAAI,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;CACvD,CAAC;AAyEF,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,oBAAoB,GAAG,qBAAqB,CA8H5F"}

package/dist/server/manifest-route.js

@@ -0,0 +1,226 @@
+/**
+ * Generic Storage Manifest Route Handler
+ *
+ * SvelteKit-friendly handler that serves the canonical HTTP surface
+ * for `storage/manifest` descriptors via `/api/storage/[id]`.
+ *
+ * The owning app mounts a single `[id]/+server.ts` that calls
+ * `createManifestRouteHandler({ appId, loaders })`. The handler:
+ *
+ *   1. Looks up the descriptor at `params.id` via the runtime
+ *      (`runtime.query('storage/manifest').withId(params.id)`).
+ *   2. Verifies the descriptor declares the running app as its owner
+ *      via `adapterConfig['storage.cloud-api'].ownerApp === appId`.
+ *      Cross-app callers get a 403, which keeps the contract clean
+ *      and prevents accidental data leaks from a borrower app being
+ *      asked to serve data it doesn't own.
+ *   3. Dispatches to a per-descriptor loader the app provides — one
+ *      function per descriptor for `load` / `save` / `delete`.
+ *      Loaders are the bridge between the owning app's local data
+ *      surface (D1 table, libsql, file, etc.) and the manifest's
+ *      wire shape that other apps consume via the `storage.cloud-api`
+ *      adapter.
+ *
+ * Loaders are registered explicitly per descriptor (not auto-discovered)
+ * so the owning app stays in control of validation, authorization, and
+ * the local data path. A descriptor without a loader returns 404.
+ *
+ * Framework-agnostic by design: the handler accepts a structural
+ * `ManifestRouteEvent` matching SvelteKit's `RequestEvent` shape but
+ * doesn't import `@sveltejs/kit`. Apps re-export the produced GET/PUT/
+ * DELETE/HEAD from a `+server.ts` file.
+ */
+import { getLogger } from '@vibesdotdev/logging';
+const logger = getLogger('storage.manifest-route');
+function tryAuthorizeInternal(event, opts) {
+    const expected = opts.internalServiceToken?.()?.trim();
+    if (!expected)
+        return false;
+    const header = event.request.headers.get('authorization');
+    if (!header || !header.toLowerCase().startsWith('bearer '))
+        return false;
+    const presented = header.slice(7).trim();
+    if (!presented || presented !== expected)
+        return false;
+    const augmented = {
+        user: { id: 'system', email: 'system@vibes.internal', isSuperuser: true, internal: true }
+    };
+    event.locals = augmented;
+    return true;
+}
+function jsonResponse(status, body) {
+    return new Response(JSON.stringify(body), {
+        status,
+        headers: { 'content-type': 'application/json' }
+    });
+}
+async function defaultResolveDescriptor(id) {
+    const { getVibesRuntime } = await import('@vibesdotdev/runtime');
+    const runtime = getVibesRuntime();
+    const scoped = runtime.query('storage/manifest').withId(id);
+    if (typeof scoped.firstDescriptor !== 'function')
+        return null;
+    return scoped.firstDescriptor() ?? null;
+}
+function getOwnerApp(descriptor) {
+    const raw = descriptor.adapterConfig?.['storage.cloud-api'];
+    if (!raw || typeof raw !== 'object')
+        return null;
+    const value = raw.ownerApp;
+    return typeof value === 'string' && value.length > 0 ? value : null;
+}
+async function resolveAndGate(event, opts) {
+    const id = event.params.id;
+    if (!id)
+        return { ok: false, response: jsonResponse(400, { error: 'Missing descriptor id' }) };
+    const resolveDescriptor = opts.resolveDescriptor ?? defaultResolveDescriptor;
+    const descriptor = await resolveDescriptor(id);
+    if (!descriptor) {
+        return { ok: false, response: jsonResponse(404, { error: `Unknown storage descriptor: ${id}` }) };
+    }
+    const owner = getOwnerApp(descriptor);
+    if (!owner) {
+        return {
+            ok: false,
+            response: jsonResponse(403, {
+                error: `Descriptor '${id}' does not declare ownerApp. Cross-app HTTP access requires adapterConfig['storage.cloud-api'].ownerApp.`
+            })
+        };
+    }
+    if (owner !== opts.appId) {
+        return {
+            ok: false,
+            response: jsonResponse(403, {
+                error: `Descriptor '${id}' is owned by '${owner}', not '${opts.appId}'. Request the owning app's origin.`
+            })
+        };
+    }
+    const loader = opts.loaders[id];
+    if (!loader) {
+        return {
+            ok: false,
+            response: jsonResponse(404, {
+                error: `App '${opts.appId}' owns descriptor '${id}' but has not registered a loader for it.`
+            })
+        };
+    }
+    return { ok: true, descriptor, loader };
+}
+export function createManifestRouteHandler(opts) {
+    if (!opts.appId)
+        throw new Error('createManifestRouteHandler: appId is required');
+    const authorize = async (event, loader, op, internal) => {
+        if (internal)
+            return true;
+        if (!loader.authorize)
+            return true;
+        try {
+            return await loader.authorize(event, op);
+        }
+        catch (error) {
+            logger.warn(`authorize threw for ${event.params.id}`, {
+                error: error instanceof Error ? error.message : String(error)
+            });
+            return false;
+        }
+    };
+    const GET = async (event) => {
+        const gated = await resolveAndGate(event, opts);
+        if (!gated.ok)
+            return gated.response;
+        const internal = tryAuthorizeInternal(event, opts);
+        if (!(await authorize(event, gated.loader, 'read', internal))) {
+            return jsonResponse(403, { error: 'Forbidden' });
+        }
+        try {
+            const value = await gated.loader.load(event);
+            // `{ value }` matches the wire shape consumed by the cloud-api
+            // adapter's fetch client (see `cloud-api.fetch-client.ts:131`,
+            // `data.value` lookup). Keeping this in lockstep with the adapter
+            // means borrower apps get descriptor records back without bespoke
+            // translation per app.
+            return jsonResponse(200, { value });
+        }
+        catch (error) {
+            logger.error(`load failed for ${event.params.id}`, {
+                error: error instanceof Error ? error.message : String(error)
+            });
+            return jsonResponse(500, { error: 'Failed to load manifest data' });
+        }
+    };
+    const HEAD = async (event) => {
+        const gated = await resolveAndGate(event, opts);
+        if (!gated.ok) {
+            return new Response(null, { status: gated.response.status });
+        }
+        const internal = tryAuthorizeInternal(event, opts);
+        if (!(await authorize(event, gated.loader, 'read', internal))) {
+            return new Response(null, { status: 403 });
+        }
+        try {
+            const data = await gated.loader.load(event);
+            return new Response(null, { status: data == null ? 404 : 200 });
+        }
+        catch {
+            return new Response(null, { status: 500 });
+        }
+    };
+    const PUT = async (event) => {
+        const gated = await resolveAndGate(event, opts);
+        if (!gated.ok)
+            return gated.response;
+        if (!gated.loader.save) {
+            return jsonResponse(405, { error: 'Descriptor is read-only over HTTP' });
+        }
+        const internal = tryAuthorizeInternal(event, opts);
+        if (!(await authorize(event, gated.loader, 'write', internal))) {
+            return jsonResponse(403, { error: 'Forbidden' });
+        }
+        let body;
+        try {
+            body = await event.request.json();
+        }
+        catch {
+            return jsonResponse(400, { error: 'Body must be valid JSON' });
+        }
+        // Cloud-api fetch client wraps the payload as `{ value: data }`
+        // (see `cloud-api.fetch-client.ts:144`). Unwrap once on the server
+        // so loaders see the raw manifest record.
+        const unwrappedBody = body && typeof body === 'object' && 'value' in body
+            ? body.value
+            : body;
+        try {
+            const validated = gated.loader.validate ? gated.loader.validate(unwrappedBody) : unwrappedBody;
+            await gated.loader.save(event, validated);
+            return jsonResponse(200, { ok: true });
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            logger.error(`save failed for ${event.params.id}`, { error: message });
+            return jsonResponse(500, { error: 'Failed to save manifest data', detail: message });
+        }
+    };
+    const DELETE = async (event) => {
+        const gated = await resolveAndGate(event, opts);
+        if (!gated.ok)
+            return gated.response;
+        if (!gated.loader.delete) {
+            return jsonResponse(405, { error: 'Descriptor is not deletable over HTTP' });
+        }
+        const internal = tryAuthorizeInternal(event, opts);
+        if (!(await authorize(event, gated.loader, 'delete', internal))) {
+            return jsonResponse(403, { error: 'Forbidden' });
+        }
+        try {
+            await gated.loader.delete(event);
+            return jsonResponse(200, { ok: true });
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            logger.error(`delete failed for ${event.params.id}`, { error: message });
+            return jsonResponse(500, { error: 'Failed to delete manifest data', detail: message });
+        }
+    };
+    return { GET, PUT, DELETE, HEAD };
+}
+//# sourceMappingURL=manifest-route.js.map

package/dist/server/manifest-route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-route.js","sourceRoot":"","sources":["../../src/server/manifest-route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAGjD,MAAM,MAAM,GAAG,SAAS,CAAC,wBAAwB,CAAC,CAAC;AA6DnD,SAAS,oBAAoB,CAC5B,KAAyB,EACzB,IAA0B;IAE1B,MAAM,QAAQ,GAAG,IAAI,CAAC,oBAAoB,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACvD,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IACzE,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACvD,MAAM,SAAS,GAAmB;QACjC,IAAI,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,uBAAuB,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;KACzF,CAAC;IACD,KAA6B,CAAC,MAAM,GAAG,SAAS,CAAC;IAClD,OAAO,IAAI,CAAC;AACb,CAAC;AASD,SAAS,YAAY,CAAC,MAAc,EAAE,IAAa;IAClD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACzC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAC/C,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,EAAU;IACjD,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC,EAAE,CAEzD,CAAC;IACF,IAAI,OAAO,MAAM,CAAC,eAAe,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IAC9D,OAAO,MAAM,CAAC,eAAe,EAAE,IAAI,IAAI,CAAC;AACzC,CAAC;AAED,SAAS,WAAW,CAAC,UAAqC;IACzD,MAAM,GAAG,GAAG,UAAU,CAAC,aAAa,EAAE,CAAC,mBAAmB,CAAC,CAAC;IAC5D,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,KAAK,GAAI,GAA+B,CAAC,QAAQ,CAAC;IACxD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACrE,CAAC;AAED,KAAK,UAAU,cAAc,CAC5B,KAAyB,EACzB,IAA0B;IAK1B,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;IAC3B,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,EAAE,CAAC;IAE/F,MAAM,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,IAAI,wBAAwB,CAAC;IAC7E,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,EAAE,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,EAAE,CAAC;QACjB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,+BAA+B,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;IACnG,CAAC;IAED,MAAM,KAAK,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO;YACN,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,YAAY,CAAC,GAAG,EAAE;gBAC3B,KAAK,EAAE,eAAe,EAAE,0GAA0G;aAClI,CAAC;SACF,CAAC;IACH,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;QAC1B,OAAO;YACN,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,YAAY,CAAC,GAAG,EAAE;gBAC3B,KAAK,EAAE,eAAe,EAAE,kBAAkB,KAAK,WAAW,IAAI,CAAC,KAAK,qCAAqC;aACzG,CAAC;SACF,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO;YACN,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,YAAY,CAAC,GAAG,EAAE;gBAC3B,KAAK,EAAE,QAAQ,IAAI,CAAC,KAAK,sBAAsB,EAAE,2CAA2C;aAC5F,CAAC;SACF,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,IAA0B;IACpE,IAAI,CAAC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAElF,MAAM,SAAS,GAAG,KAAK,EACtB,KAAyB,EACzB,MAAsB,EACtB,EAAqB,EACrB,QAAiB,EACE,EAAE;QACrB,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QACnC,IAAI,CAAC;YACJ,OAAO,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,uBAAuB,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE;gBACrD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC7D,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACd,CAAC;IACF,CAAC,CAAC;IAEF,MAAM,GAAG,GAAG,KAAK,EAAE,KAAyB,EAAqB,EAAE;QAClE,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC,QAAQ,CAAC;QAErC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;YAC/D,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7C,+DAA+D;YAC/D,+DAA+D;YAC/D,kEAAkE;YAClE,kEAAkE;YAClE,uBAAuB;YACvB,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,KAAK,CAAC,mBAAmB,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE;gBAClD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC7D,CAAC,CAAC;YACH,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;QACrE,CAAC;IACF,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,KAAK,EAAE,KAAyB,EAAqB,EAAE;QACnE,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;YAC/D,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC5C,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5C,CAAC;IACF,CAAC,CAAC;IAEF,MAAM,GAAG,GAAG,KAAK,EAAE,KAAyB,EAAqB,EAAE;QAClE,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC,QAAQ,CAAC;QAErC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACxB,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;YAChE,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACJ,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,gEAAgE;QAChE,mEAAmE;QACnE,0CAA0C;QAC1C,MAAM,aAAa,GAClB,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAK,IAAgC;YAC/E,CAAC,CAAE,IAAgC,CAAC,KAAK;YACzC,CAAC,CAAC,IAAI,CAAC;QAET,IAAI,CAAC;YACJ,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;YAC/F,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAC1C,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,MAAM,CAAC,KAAK,CAAC,mBAAmB,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YACvE,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACtF,CAAC;IACF,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,KAAK,EAAE,KAAyB,EAAqB,EAAE;QACrE,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC,QAAQ,CAAC;QAErC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAC1B,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;YACjE,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACjC,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,MAAM,CAAC,KAAK,CAAC,qBAAqB,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YACzE,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,gCAAgC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACxF,CAAC;IACF,CAAC,CAAC;IAEF,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACnC,CAAC"}

package/dist/storage-policy.context.descriptor.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Storage Policy Context Descriptor
+ *
+ * Registers the storage/policy context kind with the runtime.
+ * This context provides storage policy resolution and overrides.
+ */
+declare const _default: {
+    id: string;
+    kind: "context";
+    name: string;
+    description: string;
+    tags: string[];
+    enabled: true;
+};
+export default _default;
+//# sourceMappingURL=storage-policy.context.descriptor.d.ts.map

package/dist/storage-policy.context.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-policy.context.descriptor.d.ts","sourceRoot":"","sources":["../src/storage-policy.context.descriptor.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;;;;;;;;;AACH,wBAQG"}

package/dist/storage-policy.context.descriptor.js

@@ -0,0 +1,16 @@
+import { createRuntimeAsset } from "@vibesdotdev/runtime/factory/asset";
+/**
+ * Storage Policy Context Descriptor
+ *
+ * Registers the storage/policy context kind with the runtime.
+ * This context provides storage policy resolution and overrides.
+ */
+export default createRuntimeAsset({
+    id: "storage/policy",
+    kind: "context",
+    name: "Storage Policy Context",
+    description: "Provides storage policy resolution and runtime overrides for storage adapters",
+    tags: ["storage", "policy", "context"],
+    enabled: true,
+});
+//# sourceMappingURL=storage-policy.context.descriptor.js.map

package/dist/storage-policy.context.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-policy.context.descriptor.js","sourceRoot":"","sources":["../src/storage-policy.context.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAExE;;;;;GAKG;AACH,eAAe,kBAAkB,CAAC;IAChC,EAAE,EAAE,gBAAgB;IACpB,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,wBAAwB;IAC9B,WAAW,EACT,+EAA+E;IACjF,IAAI,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC;IACtC,OAAO,EAAE,IAAI;CACd,CAAC,CAAC"}

package/dist/storage-policy.context.server.d.ts

@@ -0,0 +1,14 @@
+import type { StoragePolicyContext } from './policy/types';
+/**
+ * Load Storage Policy Context
+ *
+ * Provides the default storage policy context for consumer environments.
+ * The runtime resolves the active adapter through scope-based selection;
+ * this context provides the fallback policy when no manifest-specific
+ * policy is registered.
+ *
+ * Apps can register a custom policy context through the runtime's context
+ * kind to override these defaults (e.g. cloud apps using API adapters).
+ */
+export declare function loadStoragePolicyContext(): Promise<StoragePolicyContext>;
+//# sourceMappingURL=storage-policy.context.server.d.ts.map

package/dist/storage-policy.context.server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-policy.context.server.d.ts","sourceRoot":"","sources":["../src/storage-policy.context.server.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAwC,MAAM,gBAAgB,CAAC;AAEjG;;;;;;;;;;GAUG;AACH,wBAAsB,wBAAwB,IAAI,OAAO,CAAC,oBAAoB,CAAC,CAoB9E"}

package/dist/storage-policy.context.server.js

@@ -0,0 +1,27 @@
+/**
+ * Load Storage Policy Context
+ *
+ * Provides the default storage policy context for consumer environments.
+ * The runtime resolves the active adapter through scope-based selection;
+ * this context provides the fallback policy when no manifest-specific
+ * policy is registered.
+ *
+ * Apps can register a custom policy context through the runtime's context
+ * kind to override these defaults (e.g. cloud apps using API adapters).
+ */
+export async function loadStoragePolicyContext() {
+    return {
+        resolveStoragePolicy: async (namespace, options) => {
+            return {
+                mode: 'persistent',
+                adapter: 'localdb',
+                namespace,
+                ...options
+            };
+        },
+        resolveStoragePolicyOverrides: async (_context) => {
+            return {};
+        }
+    };
+}
+//# sourceMappingURL=storage-policy.context.server.js.map

package/dist/storage-policy.context.server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-policy.context.server.js","sourceRoot":"","sources":["../src/storage-policy.context.server.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB;IAC7C,OAAO;QACN,oBAAoB,EAAE,KAAK,EAC1B,SAAiB,EACjB,OAAiC,EACR,EAAE;YAC3B,OAAO;gBACN,IAAI,EAAE,YAAY;gBAClB,OAAO,EAAE,SAAS;gBAClB,SAAS;gBACT,GAAG,OAAO;aACV,CAAC;QACH,CAAC;QAED,6BAA6B,EAAE,KAAK,EACnC,QAAiC,EACA,EAAE;YACnC,OAAO,EAAE,CAAC;QACX,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/storage.plugin.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Storage Plugin
+ *
+ * Registers storage/adapter, storage/manifest, and storage/record kinds with the runtime.
+ * This is the entry point for the storage module's runtime integration.
+ *
+ * Also registers storage-owned TUI surfaces during activation:
+ * - `storage.explorer` (tui/app)  — interactive storage browser
+ * - `storage.open`     (tui/command) — opens the explorer via `/storage`
+ */
+/**
+ * Storage plugin - registers storage kinds with the runtime.
+ *
+ * Kinds registered:
+ * - `storage/adapter` - Storage backends. Adapter implementations live in sibling
+ *   packages (`storage-adapter-{memory,json,localdb,cloud-api,drizzle}`) and register
+ *   themselves via their own plugins. The storage core does not import them.
+ * - `storage/manifest` - Storable data type definitions
+ * - `storage/record` - Single-table CRUD operations with relations
+ * - `storage/sync-bridge` - Declarative runtime kind ↔ cloud CRUD sync
+ *
+ * @example
+ * ```ts
+ * import { getVibesRuntime } from '@vibesdotdev/runtime/factory/plugin';
+ * import storagePlugin from './storage.plugin';
+ *
+ * const runtime = getVibesRuntime();
+ * await runtime.registerPlugin(storagePlugin);
+ *
+ * // Now you can query storage adapters
+ * const adapter = await runtime.query('storage/adapter')
+ *   .forHardware('consumer')
+ *   .resolve();
+ * ```
+ */
+declare const _default: import("@vibesdotdev/runtime").RuntimePlugin;
+export default _default;
+//# sourceMappingURL=storage.plugin.d.ts.map

package/dist/storage.plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.plugin.d.ts","sourceRoot":"","sources":["../src/storage.plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAoJH;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;;AACH,wBAiFG"}