@vmz/plugin 0.0.3 → 0.1.0

package/README.md

@@ -14,19 +14,19 @@ assets without forcing every project to adopt a bespoke compiler fork.
 
 ## The promise to application authors
 
-An extension must not make the application opaque. A VMZ plugin is not an unrestricted `transform(code)` escape hatch
-and not an invitation to mutate the compiler's program graph in place. Contributions are versioned and declared so VMZ
-can continue to reason about ownership, execution placement, SSR, resume, testing, diagnostics, and deployment.
+Extensions stay transparent to the application model. A VMZ plugin is a versioned contribution surface — not an
+unrestricted `transform(code)` escape hatch or an in-place rewrite of the program graph. Declared contributions keep
+ownership, execution placement, SSR, resume, testing, diagnostics, and deployment explainable.
 
 This is the tradeoff: plugin authors gain a stable way to participate in VMZ, while users retain a coherent application
 model after installing the plugin. If an integration requires arbitrary runtime injection or hidden semantic rewrites,
 it belongs outside the core VMZ plugin contract.
 
-| A plugin should contribute...                      | A plugin should not become...                            |
-|----------------------------------------------------|----------------------------------------------------------|
-| A declared capability with known inputs and output | A hidden second application runtime                      |
-| Versioned integration behavior                     | An unrestricted semantic rewrite                         |
-| Assets or adapters VMZ can place and test          | A way around server, lifecycle, or deployment boundaries |
+| A plugin contributes...                            | So that VMZ can still...                           |
+|----------------------------------------------------|----------------------------------------------------|
+| A declared capability with known inputs and output | Keep one application runtime and Program Graph     |
+| Versioned integration behavior                     | Explain ownership, placement, and diagnostics      |
+| Assets or adapters VMZ can place and test          | Honor server, lifecycle, and deployment boundaries |
 
 ## Who should use it
 

package/index.d.ts

@@ -97,8 +97,75 @@ export interface VmzEngines {
 export interface VmzUserConfig {
     plugins?: Array<string | VmzPlugin | Promise<VmzPlugin>>;
     engines?: VmzEngines;
+    /** Application identity (optional authoring). */
+    application?: { id?: string; [key: string]: unknown };
+    /**
+     * Delivery: named profiles (`default` + `profiles`) or legacy site sugar.
+     * Pure data only; never a parallel `vmz.site.ts` entry.
+     */
+    delivery?: DeliveryAuthoring;
 }
 
+/** Site resource sources (embedded | filesystem | remote) — orthogonal to assembly. */
+export interface SiteDeliveryAuthoring {
+    artifact: string;
+    siteId?: string;
+    sources: Array<{
+        id: string;
+        kind: 'embedded' | 'filesystem' | 'remote';
+        directory?: string;
+        baseUrl?: string;
+        artifact?: string;
+        trust?: string;
+        timeoutMs?: number;
+        priority?: number;
+        integrity?: unknown;
+        signaturePolicy?: string;
+    }>;
+    resolution?: {
+        mode?: 'release';
+        fallback?: string[];
+    };
+    activation?: 'atomic';
+    expectedCompatibility?: unknown;
+    failure?: unknown;
+    failurePolicy?: unknown;
+    update?: unknown;
+    updatePolicy?: unknown;
+    rollback?: unknown;
+    rollbackPolicy?: unknown;
+    security?: unknown;
+    securityPolicy?: unknown;
+}
+
+export type DeliveryAssembly = 'local-static' | 'static-cdn' | 'server-host' | 'cdn+server' | 'rust-embedded';
+
+export type DeliveryServerRuntime = 'node' | 'worker' | 'deno' | 'bun' | 'rust-host';
+
+export interface DeliveryProfileAuthoring {
+    host?: 'browser';
+    assembly: DeliveryAssembly;
+    serverRuntime?: DeliveryServerRuntime;
+    /** Inline site sources or `defineSite({...})`. */
+    sources?: SiteDeliveryAuthoring | SiteDeliveryAuthoring['sources'];
+    artifact?: string;
+    resolution?: SiteDeliveryAuthoring['resolution'];
+    activation?: SiteDeliveryAuthoring['activation'];
+}
+
+/** Named profiles (preferred) or legacy site-only sugar. */
+export type DeliveryAuthoring =
+    | {
+          default?: string;
+          profiles: Record<string, DeliveryProfileAuthoring>;
+      }
+    | (SiteDeliveryAuthoring & {
+          default?: string;
+          assembly?: DeliveryAssembly;
+          host?: 'browser';
+          serverRuntime?: DeliveryServerRuntime;
+      });
+
 export type DefinePluginInput = PluginManifest & {
     contribute?: VmzPlugin['contribute'];
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vmz/plugin",
-  "version": "0.0.3",
+  "version": "0.1.0",
   "type": "module",
   "description": "VMZ plugin protocol types and definePlugin / defineConfig helpers (no N-API)",
   "license": "MIT",
@@ -18,7 +18,7 @@
     "README.md"
   ],
   "dependencies": {
-    "@vmz/protocol": "0.0.3"
+    "@vmz/protocol": "0.1.0"
   },
   "keywords": [
     "vmz",