aimeat 1.33.2 → 1.35.0

package/dist/src/data/aimeat-marketplace-package.d.ts

@@ -0,0 +1,25 @@
+/**
+ * @file aimeat-marketplace-package.ts
+ * @description Installable package "aimeat-marketplace" — a MULTI-SELLER marketplace. Delivered as
+ *   a package (like aimeat-iam): installing it registers a per-instance scoped extension + app
+ *   (`aimeat-marketplace-{owner}-{shortId}-…`), so each install is an independent storefront.
+ *
+ *   Why a package (not a single-file app): a multi-seller marketplace needs a SHARED, multi-writer,
+ *   anon-readable catalog. On AIMEAT the only anon memory read is getPublic(gaii, key) (no anon
+ *   search), and app-origin apps (role 'app') cannot write to any shared native surface (boards
+ *   need agent/owner role). A sandboxed extension is the one thing app-origin apps CAN invoke
+ *   (POST /v1/ext/:name/:action needs only auth) that writes a shared namespace server-side
+ *   (ext:{name} memory is stored public → anon reads it via getPublic). So:
+ *     - extension `marketplace` — owns the shared listings store; actions post / remove.
+ *         post:   any authed user publishes a listing; seller = ctx.caller.gaii.
+ *         remove: a seller removes their OWN listing (server-enforced by caller match).
+ *     - app `marketplace` — anon browses + searches + opens detail (reads ext:marketplace/listings
+ *         via getPublic); logged-in users post with an uploaded image and remove their own.
+ *   Install rewrites `marketplace` → the scoped name in both /v1/ext/… and "ext:…" refs
+ *   (component-registrar.rewriteComponentRefs).
+ * @version-history
+ *   v1.0.0 — 2026-06-26 — initial: extension (post/remove) + multi-seller storefront app.
+ */
+import type { ExamplePackageDef } from './example-packages.js';
+export declare function aimeatMarketplacePackage(): ExamplePackageDef;
+//# sourceMappingURL=aimeat-marketplace-package.d.ts.map

package/dist/src/data/aimeat-marketplace-package.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aimeat-marketplace-package.d.ts","sourceRoot":"","sources":["../../../src/data/aimeat-marketplace-package.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AA4N/D,wBAAgB,wBAAwB,IAAI,iBAAiB,CAkB5D"}

package/dist/src/data/aimeat-marketplace-package.js

@@ -0,0 +1,231 @@
+// ── Extension `marketplace` — shared multi-writer store (V8 sandbox: export default async (ctx, input)) ──
+// The app generates id + at and passes them in, so the sandbox needs no Date/Math.
+const SCRIPT_POST = `export default async function (ctx, input) {
+  if (!input || !input.title) return { ok: false, error: 'title required' };
+  var listings = (await ctx.memory.get('listings')) || [];
+  var listing = {
+    id: String(input.id || (listings.length + '-' + (input.at || ''))),
+    title: String(input.title).slice(0, 200),
+    price: String(input.price || '').slice(0, 60),
+    desc: String(input.desc || '').slice(0, 4000),
+    imageUrl: String(input.imageUrl || '').slice(0, 500),
+    seller: (ctx.caller && ctx.caller.gaii) || null,
+    at: String(input.at || '')
+  };
+  listings.unshift(listing);
+  if (listings.length > 500) listings = listings.slice(0, 500);   // cap the shared store
+  await ctx.memory.set('listings', listings);
+  return { ok: true, id: listing.id };
+}`;
+const SCRIPT_REMOVE = `export default async function (ctx, input) {
+  var caller = (ctx.caller && ctx.caller.gaii) || null;
+  var id = input && input.id;
+  if (!id) return { ok: false, error: 'id required' };
+  var listings = (await ctx.memory.get('listings')) || [];
+  var before = listings.length;
+  // Server-enforced: only the seller can remove their own listing.
+  listings = listings.filter(function (l) { return !(l.id === id && l.seller === caller); });
+  await ctx.memory.set('listings', listings);
+  return { ok: true, removed: before - listings.length };
+}`;
+const EXTENSION_MARKETPLACE = JSON.stringify({
+    manifest: [
+        'metadata:',
+        '  name: marketplace',
+        '  version: 1.0.0',
+        '  description: Multi-seller marketplace shared store (listings).',
+        '  author: operator',
+        'required_apis:',
+        '  - memory',
+        'actions:',
+        '  - id: post',
+        '    method: POST',
+        '    path: /post',
+        '    description: Publish a listing. Any authenticated user; the seller is the caller.',
+        '    input_schema: { type: object, properties: { title: { type: string }, price: { type: string }, desc: { type: string }, imageUrl: { type: string }, id: { type: string }, at: { type: string } }, required: [title] }',
+        '    output_schema: { type: object, properties: { ok: { type: boolean }, id: { type: string } } }',
+        '    script: post.js',
+        '  - id: remove',
+        '    method: POST',
+        '    path: /remove',
+        '    description: Remove your own listing by id (server-enforced by caller match).',
+        '    input_schema: { type: object, properties: { id: { type: string } }, required: [id] }',
+        '    output_schema: { type: object, properties: { ok: { type: boolean }, removed: { type: number } } }',
+        '    script: remove.js',
+    ].join('\n'),
+    scripts: {
+        'post.js': SCRIPT_POST,
+        'remove.js': SCRIPT_REMOVE,
+    },
+});
+// ── App `marketplace` — multi-seller storefront (calls /v1/ext/marketplace/*, reads ext:marketplace) ──
+const APP_MARKETPLACE = `<!DOCTYPE html>
+<!-- AIMEAT App Manifest
+name: marketplace
+version: 1.0.0
+description: A multi-seller marketplace — browse + search listings, log in to post your own.
+entry: index.html
+-->
+<html lang="en" data-theme="dark">
+<head>
+  <meta charset="UTF-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+  <title>Marketplace</title>
+  <link href="/lib/daisyui@5.css" rel="stylesheet" type="text/css" />
+  <link href="/lib/aimeat-daisyui-bridge.css" rel="stylesheet" type="text/css" />
+  <script src="/lib/tailwindcss@4.js"></script>
+</head>
+<body class="bg-base-100 text-base-content min-h-screen flex flex-col">
+  <nav class="navbar bg-base-200 px-4 shadow-sm sticky top-0 z-50 gap-2">
+    <div class="flex-1 min-w-0"><span class="text-lg font-bold">Marketplace</span></div>
+    <input id="search" class="input input-bordered input-sm w-40 sm:w-64" placeholder="Search…" />
+    <button id="post-btn" class="btn-primary px-4" hidden>+ Post</button>
+    <span id="login"></span>
+  </nav>
+
+  <main class="flex-1 w-full max-w-5xl mx-auto p-4">
+    <div id="grid" class="grid grid-cols-2 md:grid-cols-3 lg:grid-cols-4 gap-4"></div>
+    <div id="empty" class="text-center opacity-60 py-16" hidden>No listings yet.</div>
+  </main>
+
+  <div id="detail" class="fixed inset-0 bg-black/60 z-50 hidden items-center justify-center p-4" style="display:none">
+    <div class="card bg-base-200 max-w-lg w-full max-h-[90vh] overflow-y-auto"><div id="detail-body" class="card-body"></div></div>
+  </div>
+
+  <div id="post" class="fixed inset-0 bg-black/60 z-50 hidden items-center justify-center p-4" style="display:none">
+    <form id="post-form" class="card bg-base-200 max-w-md w-full"><div class="card-body gap-3">
+      <h3 class="text-lg font-bold">Post a listing</h3>
+      <input id="f-title" class="input input-bordered" placeholder="Title" required />
+      <input id="f-price" class="input input-bordered" placeholder="Price (e.g. 20 €)" />
+      <textarea id="f-desc" class="textarea textarea-bordered" placeholder="Description" rows="3"></textarea>
+      <input id="f-image" type="file" accept="image/*" class="file-input file-input-bordered" />
+      <div class="flex gap-2 justify-end">
+        <button type="button" id="post-cancel" class="btn-ghost px-4">Cancel</button>
+        <button type="submit" id="post-submit" class="btn-primary px-6">Publish</button>
+      </div>
+    </div></form>
+  </div>
+
+  <script src="/v1/libs/aimeat-auth.js"></script>
+  <script src="/v1/libs/aimeat-data.js"></script>
+  <script src="/v1/libs/aimeat-storage.js"></script>
+  <script>
+    var EXT = '/v1/ext/marketplace';     // rewritten to the scoped instance name on install
+    var NS = 'ext:marketplace';          // rewritten too — the shared listings namespace
+    var session = null, all = [];
+    var gridEl = document.getElementById('grid'), emptyEl = document.getElementById('empty');
+
+    function esc(s) { var d = document.createElement('div'); d.textContent = s == null ? '' : String(s); return d.innerHTML; }
+    function show(id) { document.getElementById(id).style.display = 'flex'; }
+    function hide(id) { document.getElementById(id).style.display = 'none'; }
+    function extCall(action, body) {
+      return fetch(EXT + '/' + action, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', 'Authorization': 'Bearer ' + (session && session.jwt) },
+        body: JSON.stringify(body || {})
+      }).then(function (r) { return r.json(); });
+    }
+    function filtered() {
+      var q = document.getElementById('search').value.toLowerCase().trim();
+      if (!q) return all;
+      return all.filter(function (it) { return ((it.title || '') + ' ' + (it.desc || '')).toLowerCase().indexOf(q) !== -1; });
+    }
+    function render() {
+      var items = filtered();
+      emptyEl.hidden = items.length > 0;
+      gridEl.innerHTML = '';
+      items.forEach(function (it) {
+        var card = document.createElement('div');
+        card.className = 'card bg-base-200 shadow cursor-pointer hover:ring-2 hover:ring-primary transition';
+        card.innerHTML =
+          (it.imageUrl ? '<figure class="aspect-square overflow-hidden"><img src="' + esc(it.imageUrl) + '" class="w-full h-full object-cover" /></figure>'
+                       : '<figure class="aspect-square bg-base-300 flex items-center justify-center text-4xl opacity-40">🖼️</figure>') +
+          '<div class="card-body p-3 gap-1"><h3 class="font-semibold text-sm truncate">' + esc(it.title) + '</h3>' +
+          '<div class="text-primary font-bold text-sm">' + esc(it.price || '') + '</div></div>';
+        card.onclick = function () { openDetail(it); };
+        gridEl.appendChild(card);
+      });
+    }
+    function openDetail(it) {
+      var mine = session && it.seller && it.seller === session.ghii;
+      document.getElementById('detail-body').innerHTML =
+        (it.imageUrl ? '<img src="' + esc(it.imageUrl) + '" class="rounded-lg w-full object-contain max-h-80 mb-3" />' : '') +
+        '<h2 class="text-xl font-bold">' + esc(it.title) + '</h2>' +
+        '<div class="text-primary font-bold text-lg my-1">' + esc(it.price || '') + '</div>' +
+        '<p class="whitespace-pre-wrap opacity-90">' + esc(it.desc || '') + '</p>' +
+        '<div class="text-xs opacity-60 mt-3">Seller: ' + esc(it.seller || '') + '</div>' +
+        '<div class="flex justify-between mt-4">' +
+        (mine ? '<button class="btn-danger px-4" id="rm-btn">Remove</button>' : '<span></span>') +
+        '<button class="btn-ghost px-4" onclick="document.getElementById(\\'detail\\').style.display=\\'none\\'">Close</button></div>';
+      if (mine) document.getElementById('rm-btn').onclick = function () { removeListing(it.id); };
+      show('detail');
+    }
+
+    async function load() {
+      try { var arr = await AIMEAT.data.getPublic(NS, 'listings'); all = Array.isArray(arr) ? arr.slice() : []; }
+      catch (e) { all = []; }
+      all.sort(function (a, b) { return (b.at || '').localeCompare(a.at || ''); });
+      render();
+    }
+    document.getElementById('search').addEventListener('input', render);
+
+    async function removeListing(id) {
+      try { var r = await extCall('remove', { id: id }); if (r && r.data && r.data.ok) { hide('detail'); await load(); } }
+      catch (e) { alert('Could not remove: ' + (e.message || e)); }
+    }
+
+    document.getElementById('post-btn').onclick = function () { show('post'); };
+    document.getElementById('post-cancel').onclick = function () { hide('post'); };
+    document.getElementById('post-form').addEventListener('submit', async function (ev) {
+      ev.preventDefault();
+      var btn = document.getElementById('post-submit'); btn.disabled = true; btn.textContent = 'Publishing…';
+      try {
+        var imageUrl = '';
+        var fi = document.getElementById('f-image');
+        if (fi.files[0]) { var up = await AIMEAT.storage.upload(fi.files[0], { visibility: 'public' }); imageUrl = '/v1/pub/' + encodeURIComponent(session.ghii) + '/' + encodeURIComponent(up.key); }
+        var r = await extCall('post', {
+          id: Date.now() + '-' + Math.random().toString(36).slice(2, 7),
+          at: new Date().toISOString(),
+          title: document.getElementById('f-title').value.trim(),
+          price: document.getElementById('f-price').value.trim(),
+          desc: document.getElementById('f-desc').value.trim(),
+          imageUrl: imageUrl
+        });
+        var d = (r && r.data) || {};
+        if (!d.ok) throw new Error(d.error || 'post failed');
+        document.getElementById('post-form').reset(); hide('post'); await load();
+      } catch (e) { alert('Could not publish: ' + (e.message || e)); }
+      btn.disabled = false; btn.textContent = 'Publish';
+    });
+
+    var booted = false;
+    function applySession(s) { session = s; document.getElementById('post-btn').hidden = false; }
+    function tryAuth() { if (booted) return; var s = AIMEAT.auth.getSession && AIMEAT.auth.getSession(); if (s && s.jwt) { booted = true; applySession(s); } }
+    AIMEAT.auth.mountLoginButton('#login', { onLogin: function () { tryAuth(); }, onLogout: function () { location.reload(); } });
+    var _iv = setInterval(function () { tryAuth(); if (booted) clearInterval(_iv); }, 300);
+    tryAuth();
+    load();   // everyone browses (anon reads the public shared store)
+  </script>
+</body>
+</html>`;
+// ── Package definition ───────────────────────────────────────────────
+export function aimeatMarketplacePackage() {
+    return {
+        name: 'aimeat-marketplace',
+        description: 'A multi-seller marketplace. Anyone browses + searches listings and opens a detail view; logged-in users post their own listings with an uploaded image and remove them. A sandboxed extension owns the shared, multi-writer listings store (server-enforced ownership); the app reads it publicly so even anonymous visitors see the catalog. Install creates your own independent storefront instance.',
+        category: 'marketplace',
+        tags: ['marketplace', 'listings', 'multi-seller', 'storefront', 'commerce', 'extension'],
+        visibility: 'public',
+        components: [
+            { id: 'extension-marketplace', type: 'extension', label: 'Marketplace Store Extension', content: EXTENSION_MARKETPLACE, dependencies: [] },
+            { id: 'app-marketplace', type: 'app', label: 'Marketplace', content: APP_MARKETPLACE, dependencies: ['extension-marketplace'] },
+        ],
+        templateListing: {
+            title: 'aimeat-marketplace — Multi-seller Marketplace',
+            description: 'A turnkey multi-seller marketplace: anonymous visitors browse, search, and open listings; logged-in users post their own items with photos and remove them. A sandboxed extension owns the shared listings store and enforces that sellers can only remove their own posts — solving the multi-writer + anonymous-read problem a single-file app cannot. Install to get your own independent storefront.',
+            category: 'marketplace',
+            tags: ['marketplace', 'listings', 'multi-seller', 'storefront', 'commerce'],
+        },
+    };
+}
+//# sourceMappingURL=aimeat-marketplace-package.js.map

package/dist/src/data/aimeat-marketplace-package.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aimeat-marketplace-package.js","sourceRoot":"","sources":["../../../src/data/aimeat-marketplace-package.ts"],"names":[],"mappings":"AAwBA,4GAA4G;AAC5G,mFAAmF;AAEnF,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;EAgBlB,CAAC;AAEH,MAAM,aAAa,GAAG;;;;;;;;;;EAUpB,CAAC;AAEH,MAAM,qBAAqB,GAAG,IAAI,CAAC,SAAS,CAAC;IAC3C,QAAQ,EAAE;QACR,WAAW;QACX,qBAAqB;QACrB,kBAAkB;QAClB,kEAAkE;QAClE,oBAAoB;QACpB,gBAAgB;QAChB,YAAY;QACZ,UAAU;QACV,cAAc;QACd,kBAAkB;QAClB,iBAAiB;QACjB,uFAAuF;QACvF,yNAAyN;QACzN,kGAAkG;QAClG,qBAAqB;QACrB,gBAAgB;QAChB,kBAAkB;QAClB,mBAAmB;QACnB,mFAAmF;QACnF,0FAA0F;QAC1F,uGAAuG;QACvG,uBAAuB;KACxB,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ,OAAO,EAAE;QACP,SAAS,EAAE,WAAW;QACtB,WAAW,EAAE,aAAa;KAC3B;CACF,CAAC,CAAC;AAEH,yGAAyG;AAEzG,MAAM,eAAe,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAoJhB,CAAC;AAET,wEAAwE;AAExE,MAAM,UAAU,wBAAwB;IACtC,OAAO;QACL,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,yYAAyY;QACtZ,QAAQ,EAAE,aAAa;QACvB,IAAI,EAAE,CAAC,aAAa,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,CAAC;QACxF,UAAU,EAAE,QAAQ;QACpB,UAAU,EAAE;YACV,EAAE,EAAE,EAAE,uBAAuB,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,6BAA6B,EAAE,OAAO,EAAE,qBAAqB,EAAE,YAAY,EAAE,EAAE,EAAE;YAC1I,EAAE,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,CAAC,uBAAuB,CAAC,EAAE;SAChI;QACD,eAAe,EAAE;YACf,KAAK,EAAE,+CAA+C;YACtD,WAAW,EAAE,0YAA0Y;YACvZ,QAAQ,EAAE,aAAa;YACvB,IAAI,EAAE,CAAC,aAAa,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,CAAC;SAC5E;KACF,CAAC;AACJ,CAAC"}

package/dist/src/data/app-templates.d.ts

@@ -0,0 +1,48 @@
+/**
+ * @file app-templates.ts
+ * @description Authoring-template registry — the "booster kit" data. Curated starting points
+ *   the app-prompt builders (app-catalog + landing) inject so the AI copies from a model instead
+ *   of building from scratch. Templates are DATA: adding one is a new entry here (+ its content),
+ *   no code change. Served as JSON at GET /v1/app-templates and consumed by both prompt surfaces.
+ *
+ *   kinds (layered — see docs/internal/authoring-templates/):
+ *     - app-shell  : a full app skeleton (boot + auth + layout + theme). Tiers T1/T2/T3.
+ *     - component  : a reusable block + its lib deps (future).
+ *     - use-case   : composes an app-shell + components (+ optional package) (future).
+ * @structure AppTemplate · getAppTemplates() · getAppTemplateIndex()
+ * @version-history
+ *   v1.0.0 — 2026-06-26 — initial registry + first app-shell (T1 pure-client).
+ *   v1.1.0 — 2026-06-26 — app-shells T2 (cortex) + T3 (extension).
+ *   v1.2.0 — 2026-06-26 — component library (auth-gated, private-store, shared-feed, ai-action, data-table, settings, dated-archive).
+ *   v1.3.0 — 2026-06-26 — components: image-upload, realtime-room, search, list+detail (for marketplace / realtime-social / homepage use-cases).
+ *   v1.4.0 — 2026-06-26 — use-case templates (full working scaffolds) + composes field; first: realtime-social.
+ *   v1.5.0 — 2026-06-26 — use-case: marketplace (anon browse + search + detail + post with image); fix image-upload URL.
+ *   v1.6.0 — 2026-06-26 — component: markdown (AIMEAT.md.render); use-case: homepage (personal site — profile + markdown blog + images + AI stories).
+ *   v1.7.0 — 2026-06-26 — plain-language app-shell titles (drop T1/T2/T3 jargon): "Standard app",
+ *     "Data app", "Connected app" — what a non-technical user gets, not the architecture.
+ */
+export interface AppTemplate {
+    /** Stable id, e.g. "shell-pure-client". */
+    id: string;
+    kind: 'app-shell' | 'component' | 'use-case';
+    /** Capability tier for app-shells: T1 pure client · T2 +cortex · T3 +extension. */
+    tier?: 'T1' | 'T2' | 'T3';
+    title: string;
+    /** One line shown in the picker and in the prompt index. */
+    description: string;
+    /** Client libs the template loads (for the AI's awareness). */
+    libs: string[];
+    /** For use-cases: the component/shell ids this scaffold builds on (for the index + matching). */
+    composes?: string[];
+    /** The model the AI copies from — a skeleton, not a finished app. */
+    content: string;
+}
+/** All authoring templates. */
+export declare function getAppTemplates(): AppTemplate[];
+/**
+ * Lightweight index (no content) — for injecting a menu into a prompt or rendering
+ * a picker. Pass a `lang` (e.g. 'fi') to get localized title/description where a
+ * translation exists; everything else falls back to the canonical English.
+ */
+export declare function getAppTemplateIndex(lang?: string): Array<Pick<AppTemplate, 'id' | 'kind' | 'tier' | 'title' | 'description' | 'libs'>>;
+//# sourceMappingURL=app-templates.d.ts.map

package/dist/src/data/app-templates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-templates.d.ts","sourceRoot":"","sources":["../../../src/data/app-templates.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,MAAM,WAAW,WAAW;IAC1B,2CAA2C;IAC3C,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,WAAW,GAAG,WAAW,GAAG,UAAU,CAAC;IAC7C,mFAAmF;IACnF,IAAI,CAAC,EAAE,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,4DAA4D;IAC5D,WAAW,EAAE,MAAM,CAAC;IACpB,+DAA+D;IAC/D,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,iGAAiG;IACjG,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,qEAAqE;IACrE,OAAO,EAAE,MAAM,CAAC;CACjB;AA60BD,+BAA+B;AAC/B,wBAAgB,eAAe,IAAI,WAAW,EAAE,CAE/C;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,aAAa,GAAG,MAAM,CAAC,CAAC,CAMtI"}