acrylblends 1.1.0 → 1.3.0

package/legacy/agent/24c681a00fca/src/routes.ts

@@ -0,0 +1,83 @@
+import type { Context } from '@deepseek-ai/cordis'
+import { Acryl } from '../plugins/acryl-router/src/index.ts'
+import { bodyLimit } from '../plugins/acryl-router/src/middleware/index.ts'
+import type {} from '../plugins/agent/index.ts'
+import type {} from '../plugins/extensions/index.ts'
+import type {} from '../plugins/tasks/index.ts'
+
+export const APP_NAME = '__APP_NAME__'
+
+/** The door's page script (`.acryl/bin/acryl look` and `act`), in development only: `src/app.ts` leaves the door out in production and with ACRYL_DOOR=off. */
+const DOOR_TAG =
+  process.env.NODE_ENV !== 'production' && process.env.ACRYL_DOOR !== 'off'
+    ? '<script type="module" src="/api/acryl-door/page.js"></script>'
+    : ''
+
+/**
+ * The app's own routes on the router. Always: the page and `GET /health`. While the agent, the extensions and the task recorder run: `POST /ask` for the agent; `GET /extensions`
+ * (and `POST /extensions/approve` and `/deny`) and `GET /tasks` to observe and steer what it did (every run is a durable task owning one task per tool call); `POST /tasks/cancel`.
+ * What changes is also streamed: `GET /api/state/tasks/events` and `GET /api/state/extensions/events`. In production `src/app.ts` leaves the agent, builder and extensions rows
+ * out (unless `ACRYL_PRODUCTION_KEEP` names them), and then those routes are not mounted at all. The mounts are removed when the plugin is disposed.
+ */
+export const routes = {
+  name: 'routes',
+  inject: ['router'],
+  apply(ctx: Context) {
+    // A body here is a name, an id or a question; anything bigger is refused before it is read.
+    const json = async (c: {
+      req: { json(): Promise<unknown> }
+    }): Promise<Record<string, unknown>> => {
+      const body = await c.req.json().catch(() => undefined)
+      return typeof body === 'object' && body !== null ? (body as Record<string, unknown>) : {}
+    }
+    const limit = bodyLimit({ maxSize: 64 * 1024 })
+    const base = new Acryl()
+      .use(limit)
+      // A browser gets a page (the door's and the agent panel's script tags are added where they are mounted); everything else gets the JSON.
+      .get('/', (c) =>
+        (c.req.header('accept') ?? '').includes('text/html')
+          ? c.html(
+              `<!doctype html><html lang="en"><head><meta charset="utf-8"><title>${APP_NAME}</title></head><body><h1>${APP_NAME}</h1><p>This app runs an agent unless it is switched off (production switches it off, see ACRYL_PRODUCTION_KEEP in AGENTS.md). Ask it for a feature in the agent panel on this page (or with <code>POST /ask</code>).</p>${DOOR_TAG}</body></html>`,
+            )
+          : c.json({ app: APP_NAME, ok: true }),
+      )
+      .get('/health', (c) => c.json({ ok: true }))
+    ctx.router.route('/', base)
+    // The routes that give a visitor the agent: mounted only while the agent, the extensions and the tasks run (see the header).
+    ctx.inject(['agent', 'extensions', 'tasks'], (inner) => {
+      const app = new Acryl().use(limit).get('/extensions', (c) =>
+        c.json({
+          installed: inner.extensions.list(),
+          notInstalled: inner.extensions.pending(),
+          waitingForApproval: inner.extensions.approvals(),
+        }),
+      )
+      // The owner's decision on an install that is waiting (the `approval` parameter in blend.yaml).
+      for (const [path, decide] of [
+        ['/extensions/approve', (name: string) => inner.extensions.approve(name)],
+        ['/extensions/deny', (name: string) => inner.extensions.deny(name)],
+      ] as const) {
+        app.post(path, async (c) => {
+          const { name } = await json(c)
+          if (typeof name !== 'string') return c.json({ error: 'name must be a string' }, 400)
+          return c.json(await decide(name))
+        })
+      }
+      app
+        .get('/tasks', (c) => c.json(inner.tasks.list().slice(0, 100)))
+        .post('/tasks/cancel', async (c) => {
+          const { id } = await json(c)
+          if (typeof id !== 'string' || !inner.tasks.get(id))
+            return c.json({ error: 'no such task' }, 404)
+          return c.json({ cancelled: inner.tasks.cancel(id) })
+        })
+        .post('/ask', async (c) => {
+          const { question } = await json(c)
+          if (typeof question !== 'string')
+            return c.json({ error: 'question must be a string' }, 400)
+          return c.json(await inner.agent.run(question))
+        })
+      inner.router.route('/', app)
+    })
+  },
+}

package/legacy/agent/2e790da977b2/src/app.ts

@@ -0,0 +1,98 @@
+import { join } from 'node:path'
+import { fileURLToPath } from 'node:url'
+import { Context, type Fiber } from '@deepseek-ai/cordis'
+import * as nodeServer from './plugins/acryl-node-server/src/index.ts'
+import * as router from './plugins/acryl-router/src/index.ts'
+import * as state from './plugins/acryl-state/src/index.ts'
+import { agent, memory, model, tools } from './plugins/agent/index.ts'
+import { builder } from './plugins/builder/index.ts'
+import { extensions } from './plugins/extensions/index.ts'
+import { type AppInstance, instance } from './plugins/instance/index.ts'
+import {
+  blueprintsIn,
+  compose,
+  loadManifest,
+  type ParameterValue,
+} from './plugins/manifest/index.ts'
+import { type OpenAIConfig, openai } from './plugins/openai/index.ts'
+import { sandboxPlugin } from './plugins/sandbox/index.ts'
+import { save } from './plugins/save/index.ts'
+import { tasks } from './plugins/tasks/index.ts'
+import { routes } from './routes.ts'
+
+/** The plugins this app's code provides. `blend.yaml` chooses, orders and configures them. */
+export const registry = {
+  tasks,
+  model,
+  tools,
+  memory,
+  agent,
+  'acryl-router': router,
+  'acryl-state': state,
+  extensions,
+  builder,
+  save,
+  sandbox: sandboxPlugin,
+  routes,
+  'acryl-node-server': nodeServer,
+}
+
+/** The manifest next to this app's source. */
+export const MANIFEST = join(fileURLToPath(new URL('..', import.meta.url)), 'blend.yaml')
+
+/**
+ * The app's manifest, resolved. A Blend finds its Blueprint in `blueprints/<id>.yaml`; an app that is itself a Blueprint never looks.
+ * `createApp` and the tests read it the same way.
+ */
+export function readManifest(values?: Readonly<Record<string, ParameterValue>>) {
+  return loadManifest(MANIFEST, {
+    known: Object.keys(registry),
+    getBlueprint: blueprintsIn(join(fileURLToPath(new URL('..', import.meta.url)), 'blueprints')),
+    ...(values ? { values } : {}),
+  })
+}
+
+export interface App {
+  readonly root: Context
+  readonly url: string
+  stop(): Promise<void>
+}
+
+/**
+ * The app: `instance` first (where it lives, chosen at run time), then the manifest's rows in order. The app's own `extensions/`
+ * folder is trusted to install at start, and is where the builder writes.
+ */
+export async function createApp(
+  chosen: AppInstance,
+  options: {
+    values?: Readonly<Record<string, ParameterValue>>
+    /** A real model (any OpenAI-compatible API) in place of the offline scripted one. */
+    model?: OpenAIConfig
+  } = {},
+): Promise<App> {
+  const manifest = readManifest(options.values)
+  const extensionsDir = join(chosen.root, 'extensions')
+  const root = new Context()
+  const first = root.plugin(instance, chosen)
+  await first.await()
+  const fibers: Fiber[] = [
+    first,
+    // The `model` row mounts the scripted model, or the real one when a model is configured.
+    ...(await compose(root, manifest, options.model ? { ...registry, model: openai } : registry, {
+      ...(options.model ? { model: { ...options.model } } : {}),
+      // Runtime values the manifest cannot hold: the manifest's own digest (every task records it), and who may install.
+      tasks: { manifest: `sha256:${manifest.digest}` },
+      // The `approval` parameter in blend.yaml (the extensions row) turns this source into one that asks.
+      extensions: { sources: [{ dir: extensionsDir, trust: 'install' }] },
+      builder: { dir: extensionsDir },
+      server: { port: chosen.port.start, scan: chosen.port.scan ? 20 : 0, hostname: chosen.host },
+    })),
+  ]
+  return {
+    root,
+    url: root.nodeServer.url,
+    async stop() {
+      for (const fiber of [...fibers].reverse()) await fiber.dispose()
+    },
+  }
+}

package/legacy/agent/2e790da977b2/src/routes.ts

@@ -0,0 +1,63 @@
+import type { Context } from '@deepseek-ai/cordis'
+import { App } from './plugins/acryl-router/src/index.ts'
+import { bodyLimit } from './plugins/acryl-router/src/middleware/index.ts'
+import type {} from './plugins/agent/index.ts'
+import type {} from './plugins/extensions/index.ts'
+import type {} from './plugins/tasks/index.ts'
+
+export const APP_NAME = '__APP_NAME__'
+
+/**
+ * The app's own routes on the router: `POST /ask` for the agent; `GET /extensions` and `GET /tasks` to observe what it did (every run is a
+ * durable task owning one task per tool call); `POST /tasks/cancel`. What changes is also streamed: `GET /api/state/tasks/events` and
+ * `GET /api/state/extensions/events`. The mount is removed when the plugin is disposed.
+ */
+export const routes = {
+  name: 'routes',
+  inject: ['router', 'agent', 'extensions', 'tasks'],
+  apply(ctx: Context) {
+    // A body here is a name, an id or a question; anything bigger is refused before it is read.
+    const json = async (c: {
+      req: { json(): Promise<unknown> }
+    }): Promise<Record<string, unknown>> => {
+      const body = await c.req.json().catch(() => undefined)
+      return typeof body === 'object' && body !== null ? (body as Record<string, unknown>) : {}
+    }
+    const app = new App()
+      .use(bodyLimit({ maxSize: 64 * 1024 }))
+      .get('/', (c) => c.json({ app: APP_NAME, ok: true }))
+      .get('/health', (c) => c.json({ ok: true }))
+      .get('/extensions', (c) =>
+        c.json({
+          installed: ctx.extensions.list(),
+          notInstalled: ctx.extensions.pending(),
+          waitingForApproval: ctx.extensions.approvals(),
+        }),
+      )
+    // The owner's decision on an install that is waiting (the `approval` parameter in blend.yaml).
+    for (const [path, decide] of [
+      ['/extensions/approve', (name: string) => ctx.extensions.approve(name)],
+      ['/extensions/deny', (name: string) => ctx.extensions.deny(name)],
+    ] as const) {
+      app.post(path, async (c) => {
+        const { name } = await json(c)
+        if (typeof name !== 'string') return c.json({ error: 'name must be a string' }, 400)
+        return c.json(await decide(name))
+      })
+    }
+    app
+      .get('/tasks', (c) => c.json(ctx.tasks.list().slice(0, 100)))
+      .post('/tasks/cancel', async (c) => {
+        const { id } = await json(c)
+        if (typeof id !== 'string' || !ctx.tasks.get(id))
+          return c.json({ error: 'no such task' }, 404)
+        return c.json({ cancelled: ctx.tasks.cancel(id) })
+      })
+      .post('/ask', async (c) => {
+        const { question } = await json(c)
+        if (typeof question !== 'string') return c.json({ error: 'question must be a string' }, 400)
+        return c.json(await ctx.agent.run(question))
+      })
+    ctx.router.route('/', app)
+  },
+}

package/legacy/agent/6307045545dc/src/app.ts

@@ -0,0 +1,168 @@
+import { existsSync } from 'node:fs'
+import { join } from 'node:path'
+import { fileURLToPath } from 'node:url'
+import { Context, type Fiber } from '@deepseek-ai/cordis'
+import * as door from '../plugins/acryl-door/src/index.ts'
+import * as nodeServer from '../plugins/acryl-node-server/src/index.ts'
+import * as router from '../plugins/acryl-router/src/index.ts'
+import * as state from '../plugins/acryl-state/src/index.ts'
+import { agent, memory, model, tools } from '../plugins/agent/index.ts'
+import * as panel from '../plugins/agent-panel/index.ts'
+import { builder } from '../plugins/builder/index.ts'
+import { extensions } from '../plugins/extensions/index.ts'
+import { type AppInstance, instance } from '../plugins/instance/index.ts'
+import {
+  blueprintsIn,
+  compose,
+  loadManifest,
+  type ParameterValue,
+} from '../plugins/manifest/index.ts'
+import { type OpenAIConfig, openai } from '../plugins/openai/index.ts'
+import { sandboxPlugin } from '../plugins/sandbox/index.ts'
+import { save } from '../plugins/save/index.ts'
+import { tasks } from '../plugins/tasks/index.ts'
+import { routes } from './routes.ts'
+
+/** The plugins this app's code provides. `blend.yaml` chooses, orders and configures them. */
+export const registry = {
+  tasks,
+  model,
+  tools,
+  memory,
+  agent,
+  'acryl-router': router,
+  'acryl-state': state,
+  extensions,
+  builder,
+  save,
+  sandbox: sandboxPlugin,
+  routes,
+  'acryl-node-server': nodeServer,
+  'agent-panel': panel,
+  'acryl-door': door,
+}
+
+/** The manifest next to this app's source. */
+export const MANIFEST = join(fileURLToPath(new URL('..', import.meta.url)), 'blend.yaml')
+
+/**
+ * The app's manifest, resolved. A Blend finds its Blueprint in `blueprints/<id>.yaml`; an app that is itself a Blueprint never looks.
+ * `createApp` and the tests read it the same way.
+ */
+export function readManifest(values?: Readonly<Record<string, ParameterValue>>) {
+  return loadManifest(MANIFEST, {
+    known: Object.keys(registry),
+    getBlueprint: blueprintsIn(join(fileURLToPath(new URL('..', import.meta.url)), 'blueprints')),
+    ...(values ? { values } : {}),
+  })
+}
+
+export interface App {
+  readonly root: Context
+  /** The address the server listens on; empty when the app was made with `listen: false`. */
+  readonly url: string
+  stop(): Promise<void>
+}
+
+/**
+ * The development rows, and what each one gives a visitor. Production leaves the agent and the builder out. The extensions row is not left out: it starts again, read-only,
+ * the extensions in the app's `plugins/` folder (what the agent built and installed in development, committed with the app), so a deployed app has its own features; nothing
+ * can be installed, updated or approved while it runs, and `/ask`, `/extensions*` and `/tasks*` stay unmounted (they need the agent). `ACRYL_PRODUCTION_KEEP=extensions` keeps the
+ * live install itself.
+ */
+const DEVELOPMENT_ROWS: Record<string, string> = {
+  agent: 'POST /ask runs the agent, which spends the model key and calls its tools',
+  builder: 'the agent can write plugin source into plugins/',
+  extensions:
+    'a plugin installed live runs in this process, and POST /extensions/approve decides installs',
+}
+
+/**
+ * The app: `instance` first (where it lives, chosen at run time), then the manifest's rows in order. The app's `plugins/`
+ * folder is trusted to install at start, and is where the builder writes.
+ */
+export async function createApp(
+  chosen: AppInstance,
+  options: {
+    values?: Readonly<Record<string, ParameterValue>>
+    /** A real model (any OpenAI-compatible API) in place of the offline scripted one. */
+    model?: OpenAIConfig
+    /** Start the HTTP server (default). Tests pass `false` and call `app.root.router.request(path)`: it needs no port, so it also runs where a sandbox forbids listening. */
+    listen?: boolean
+  } = {},
+): Promise<App> {
+  const read = readManifest(options.values)
+  // Rows left out: the server (and so the door, which needs it) when the app is reached in process; the door in production and with ACRYL_DOOR=off (one process at a time
+  // serves a folder's door, so the tests that start several apps set it).
+  const listen = options.listen !== false
+  const leaveOut = new Set<string>()
+  let extensionsReadOnly = false
+  if (!listen) leaveOut.add('acryl-node-server').add('acryl-door')
+  if (process.env.NODE_ENV === 'production' || process.env.ACRYL_DOOR === 'off')
+    leaveOut.add('acryl-door')
+  // Production: the rows that give a visitor power over the running app or the owner's model key are left out too. The agent (`POST /ask` spends the model key and runs tools),
+  // the builder and the extensions (live plugin install runs code in this process, and `POST /extensions/approve` decides it) are development tools. `ACRYL_PRODUCTION_KEEP`
+  // names the ones to keep (`agent,builder,extensions`); each one kept is announced at start, because none of them is behind a login.
+  if (process.env.NODE_ENV === 'production') {
+    const keep = new Set(
+      (process.env.ACRYL_PRODUCTION_KEEP ?? '')
+        .split(',')
+        .map((name) => name.trim())
+        .filter((name) => name !== ''),
+    )
+    for (const name of keep)
+      if (!(name in DEVELOPMENT_ROWS))
+        console.warn(
+          `WARNING: ACRYL_PRODUCTION_KEEP names "${name}", which is not one of ${Object.keys(DEVELOPMENT_ROWS).join(', ')}`,
+        )
+    for (const [row, danger] of Object.entries(DEVELOPMENT_ROWS)) {
+      if (keep.has(row))
+        console.warn(
+          `WARNING: the "${row}" row runs in production because ACRYL_PRODUCTION_KEEP names it: ${danger}. Nothing here is behind a login; put the app behind your own.`,
+        )
+      else if (row === 'extensions') extensionsReadOnly = true
+      else leaveOut.add(row)
+    }
+  }
+  const manifest = {
+    ...read,
+    plugins: read.plugins.map((row) => (leaveOut.has(row.use) ? { ...row, disabled: true } : row)),
+  }
+  const extensionsDir = join(chosen.root, 'plugins')
+  // One release of grace: an app made before 0.7.8 kept what the agent wrote in `extensions/`. It is still installed, with a warning.
+  const legacyDir = join(chosen.root, 'extensions')
+  const legacy = existsSync(legacyDir)
+  if (legacy)
+    console.warn(
+      'warning: extensions/ is the old folder for plugins the agent writes; move them to plugins/ ("git mv extensions/<name> plugins/<name>"). extensions/ is read for this release only.',
+    )
+  const root = new Context()
+  const first = root.plugin(instance, chosen)
+  await first.await()
+  const fibers: Fiber[] = [
+    first,
+    // The `model` row mounts the scripted model, or the real one when a model is configured.
+    ...(await compose(root, manifest, options.model ? { ...registry, model: openai } : registry, {
+      ...(options.model ? { model: { ...options.model } } : {}),
+      // Runtime values the manifest cannot hold: the manifest's own digest (every task records it), and who may install.
+      tasks: { manifest: `sha256:${manifest.digest}` },
+      // The `approval` parameter in blend.yaml (the extensions row) turns this source into one that asks.
+      extensions: {
+        ...(extensionsReadOnly ? { readOnly: true } : {}),
+        sources: [
+          { dir: extensionsDir, trust: 'install' },
+          ...(legacy ? [{ dir: legacyDir, trust: 'install' as const }] : []),
+        ],
+      },
+      builder: { dir: extensionsDir },
+      server: { port: chosen.port.start, scan: chosen.port.scan ? 20 : 0, hostname: chosen.host },
+    })),
+  ]
+  return {
+    root,
+    url: listen ? root.nodeServer.url : '',
+    async stop() {
+      for (const fiber of [...fibers].reverse()) await fiber.dispose()
+    },
+  }
+}

package/legacy/agent/6307045545dc/src/routes.ts

@@ -0,0 +1,83 @@
+import type { Context } from '@deepseek-ai/cordis'
+import { Acryl } from '../plugins/acryl-router/src/index.ts'
+import { bodyLimit } from '../plugins/acryl-router/src/middleware/index.ts'
+import type {} from '../plugins/agent/index.ts'
+import type {} from '../plugins/extensions/index.ts'
+import type {} from '../plugins/tasks/index.ts'
+
+export const APP_NAME = '__APP_NAME__'
+
+/** The door's page script (`.acryl/bin/acryl look` and `act`), in development only: `src/app.ts` leaves the door out in production and with ACRYL_DOOR=off. */
+const DOOR_TAG =
+  process.env.NODE_ENV !== 'production' && process.env.ACRYL_DOOR !== 'off'
+    ? '<script type="module" src="/api/acryl-door/page.js"></script>'
+    : ''
+
+/**
+ * The app's own routes on the router. Always: the page and `GET /health`. While the agent, the extensions and the task recorder run: `POST /ask` for the agent; `GET /extensions`
+ * (and `POST /extensions/approve` and `/deny`) and `GET /tasks` to observe and steer what it did (every run is a durable task owning one task per tool call); `POST /tasks/cancel`.
+ * What changes is also streamed: `GET /api/state/tasks/events` and `GET /api/state/extensions/events`. In production `src/app.ts` leaves the agent and builder rows out
+ * and starts the extensions read-only (unless `ACRYL_PRODUCTION_KEEP` names them), and then those routes are not mounted at all. The mounts are removed when the plugin is disposed.
+ */
+export const routes = {
+  name: 'routes',
+  inject: ['router'],
+  apply(ctx: Context) {
+    // A body here is a name, an id or a question; anything bigger is refused before it is read.
+    const json = async (c: {
+      req: { json(): Promise<unknown> }
+    }): Promise<Record<string, unknown>> => {
+      const body = await c.req.json().catch(() => undefined)
+      return typeof body === 'object' && body !== null ? (body as Record<string, unknown>) : {}
+    }
+    const limit = bodyLimit({ maxSize: 64 * 1024 })
+    const base = new Acryl()
+      .use(limit)
+      // A browser gets a page (the door's and the agent panel's script tags are added where they are mounted); everything else gets the JSON.
+      .get('/', (c) =>
+        (c.req.header('accept') ?? '').includes('text/html')
+          ? c.html(
+              `<!doctype html><html lang="en"><head><meta charset="utf-8"><title>${APP_NAME}</title></head><body><h1>${APP_NAME}</h1><p>This app runs an agent unless it is switched off (production switches it off, see ACRYL_PRODUCTION_KEEP in AGENTS.md). Ask it for a feature in the agent panel on this page (or with <code>POST /ask</code>).</p>${DOOR_TAG}</body></html>`,
+            )
+          : c.json({ app: APP_NAME, ok: true }),
+      )
+      .get('/health', (c) => c.json({ ok: true }))
+    ctx.router.route('/', base)
+    // The routes that give a visitor the agent: mounted only while the agent, the extensions and the tasks run (see the header).
+    ctx.inject(['agent', 'extensions', 'tasks'], (inner) => {
+      const app = new Acryl().use(limit).get('/extensions', (c) =>
+        c.json({
+          installed: inner.extensions.list(),
+          notInstalled: inner.extensions.pending(),
+          waitingForApproval: inner.extensions.approvals(),
+        }),
+      )
+      // The owner's decision on an install that is waiting (the `approval` parameter in blend.yaml).
+      for (const [path, decide] of [
+        ['/extensions/approve', (name: string) => inner.extensions.approve(name)],
+        ['/extensions/deny', (name: string) => inner.extensions.deny(name)],
+      ] as const) {
+        app.post(path, async (c) => {
+          const { name } = await json(c)
+          if (typeof name !== 'string') return c.json({ error: 'name must be a string' }, 400)
+          return c.json(await decide(name))
+        })
+      }
+      app
+        .get('/tasks', (c) => c.json(inner.tasks.list().slice(0, 100)))
+        .post('/tasks/cancel', async (c) => {
+          const { id } = await json(c)
+          if (typeof id !== 'string' || !inner.tasks.get(id))
+            return c.json({ error: 'no such task' }, 404)
+          return c.json({ cancelled: inner.tasks.cancel(id) })
+        })
+        .post('/ask', async (c) => {
+          const { question } = await json(c)
+          if (typeof question !== 'string')
+            return c.json({ error: 'question must be a string' }, 400)
+          return c.json(await inner.agent.run(question))
+        })
+      inner.router.route('/', app)
+    })
+  },
+}

package/legacy/agent/6a5fb9c15c53/src/app.ts

@@ -0,0 +1,158 @@
+import { existsSync } from 'node:fs'
+import { join } from 'node:path'
+import { fileURLToPath } from 'node:url'
+import { Context, type Fiber } from '@deepseek-ai/cordis'
+import * as door from '../plugins/acryl-door/src/index.ts'
+import * as nodeServer from '../plugins/acryl-node-server/src/index.ts'
+import * as router from '../plugins/acryl-router/src/index.ts'
+import * as state from '../plugins/acryl-state/src/index.ts'
+import { agent, memory, model, tools } from '../plugins/agent/index.ts'
+import { builder } from '../plugins/builder/index.ts'
+import { extensions } from '../plugins/extensions/index.ts'
+import { type AppInstance, instance } from '../plugins/instance/index.ts'
+import {
+  blueprintsIn,
+  compose,
+  loadManifest,
+  type ParameterValue,
+} from '../plugins/manifest/index.ts'
+import { type OpenAIConfig, openai } from '../plugins/openai/index.ts'
+import { sandboxPlugin } from '../plugins/sandbox/index.ts'
+import { save } from '../plugins/save/index.ts'
+import { tasks } from '../plugins/tasks/index.ts'
+import { routes } from './routes.ts'
+
+/** The plugins this app's code provides. `blend.yaml` chooses, orders and configures them. */
+export const registry = {
+  tasks,
+  model,
+  tools,
+  memory,
+  agent,
+  'acryl-router': router,
+  'acryl-state': state,
+  extensions,
+  builder,
+  save,
+  sandbox: sandboxPlugin,
+  routes,
+  'acryl-node-server': nodeServer,
+  'acryl-door': door,
+}
+
+/** The manifest next to this app's source. */
+export const MANIFEST = join(fileURLToPath(new URL('..', import.meta.url)), 'blend.yaml')
+
+/**
+ * The app's manifest, resolved. A Blend finds its Blueprint in `blueprints/<id>.yaml`; an app that is itself a Blueprint never looks.
+ * `createApp` and the tests read it the same way.
+ */
+export function readManifest(values?: Readonly<Record<string, ParameterValue>>) {
+  return loadManifest(MANIFEST, {
+    known: Object.keys(registry),
+    getBlueprint: blueprintsIn(join(fileURLToPath(new URL('..', import.meta.url)), 'blueprints')),
+    ...(values ? { values } : {}),
+  })
+}
+
+export interface App {
+  readonly root: Context
+  /** The address the server listens on; empty when the app was made with `listen: false`. */
+  readonly url: string
+  stop(): Promise<void>
+}
+
+/** The development rows production leaves out, and what each one gives a visitor. */
+const DEVELOPMENT_ROWS: Record<string, string> = {
+  agent: 'POST /ask runs the agent, which spends the model key and calls its tools',
+  builder: 'the agent can write plugin source into plugins/',
+  extensions:
+    'a plugin installed live runs in this process, and POST /extensions/approve decides installs',
+}
+
+/**
+ * The app: `instance` first (where it lives, chosen at run time), then the manifest's rows in order. The app's `plugins/`
+ * folder is trusted to install at start, and is where the builder writes.
+ */
+export async function createApp(
+  chosen: AppInstance,
+  options: {
+    values?: Readonly<Record<string, ParameterValue>>
+    /** A real model (any OpenAI-compatible API) in place of the offline scripted one. */
+    model?: OpenAIConfig
+    /** Start the HTTP server (default). Tests pass `false` and call `app.root.router.request(path)`: it needs no port, so it also runs where a sandbox forbids listening. */
+    listen?: boolean
+  } = {},
+): Promise<App> {
+  const read = readManifest(options.values)
+  // Rows left out: the server (and so the door, which needs it) when the app is reached in process; the door in production and with ACRYL_DOOR=off (one process at a time
+  // serves a folder's door, so the tests that start several apps set it).
+  const listen = options.listen !== false
+  const leaveOut = new Set<string>()
+  if (!listen) leaveOut.add('acryl-node-server').add('acryl-door')
+  if (process.env.NODE_ENV === 'production' || process.env.ACRYL_DOOR === 'off')
+    leaveOut.add('acryl-door')
+  // Production: the rows that give a visitor power over the running app or the owner's model key are left out too. The agent (`POST /ask` spends the model key and runs tools),
+  // the builder and the extensions (live plugin install runs code in this process, and `POST /extensions/approve` decides it) are development tools. `ACRYL_PRODUCTION_KEEP`
+  // names the ones to keep (`agent,builder,extensions`); each one kept is announced at start, because none of them is behind a login.
+  if (process.env.NODE_ENV === 'production') {
+    const keep = new Set(
+      (process.env.ACRYL_PRODUCTION_KEEP ?? '')
+        .split(',')
+        .map((name) => name.trim())
+        .filter((name) => name !== ''),
+    )
+    for (const name of keep)
+      if (!(name in DEVELOPMENT_ROWS))
+        console.warn(
+          `WARNING: ACRYL_PRODUCTION_KEEP names "${name}", which is not one of ${Object.keys(DEVELOPMENT_ROWS).join(', ')}`,
+        )
+    for (const [row, danger] of Object.entries(DEVELOPMENT_ROWS)) {
+      if (keep.has(row))
+        console.warn(
+          `WARNING: the "${row}" row runs in production because ACRYL_PRODUCTION_KEEP names it: ${danger}. Nothing here is behind a login; put the app behind your own.`,
+        )
+      else leaveOut.add(row)
+    }
+  }
+  const manifest = {
+    ...read,
+    plugins: read.plugins.map((row) => (leaveOut.has(row.use) ? { ...row, disabled: true } : row)),
+  }
+  const extensionsDir = join(chosen.root, 'plugins')
+  // One release of grace: an app made before 0.7.8 kept what the agent wrote in `extensions/`. It is still installed, with a warning.
+  const legacyDir = join(chosen.root, 'extensions')
+  const legacy = existsSync(legacyDir)
+  if (legacy)
+    console.warn(
+      'warning: extensions/ is the old folder for plugins the agent writes; move them to plugins/ ("git mv extensions/<name> plugins/<name>"). extensions/ is read for this release only.',
+    )
+  const root = new Context()
+  const first = root.plugin(instance, chosen)
+  await first.await()
+  const fibers: Fiber[] = [
+    first,
+    // The `model` row mounts the scripted model, or the real one when a model is configured.
+    ...(await compose(root, manifest, options.model ? { ...registry, model: openai } : registry, {
+      ...(options.model ? { model: { ...options.model } } : {}),
+      // Runtime values the manifest cannot hold: the manifest's own digest (every task records it), and who may install.
+      tasks: { manifest: `sha256:${manifest.digest}` },
+      // The `approval` parameter in blend.yaml (the extensions row) turns this source into one that asks.
+      extensions: {
+        sources: [
+          { dir: extensionsDir, trust: 'install' },
+          ...(legacy ? [{ dir: legacyDir, trust: 'install' as const }] : []),
+        ],
+      },
+      builder: { dir: extensionsDir },
+      server: { port: chosen.port.start, scan: chosen.port.scan ? 20 : 0, hostname: chosen.host },
+    })),
+  ]
+  return {
+    root,
+    url: listen ? root.nodeServer.url : '',
+    async stop() {
+      for (const fiber of [...fibers].reverse()) await fiber.dispose()
+    },
+  }
+}