iterate 0.2.7 → 0.3.0

package/menubar/IterateIcon.swift

@@ -0,0 +1,145 @@
+// The 𝑖 menu-bar mark, drawn from the brand logo's own vector paths
+// (packages/ui/src/assets/iterate-logo.svg) so there's no asset catalog and
+// no rasterization step. The glyph is pure polygons (M/L/H/V/Z, absolute), so
+// a tiny path reader turns it straight into an NSBezierPath. Rendered as a
+// template image: white on the dark menu bar, adapting on light.
+
+import AppKit
+
+enum IterateIcon {
+  /// The two `i` paths from iterate-logo.svg (viewBox 0 0 500 500), verbatim.
+  private static let paths = [
+    "M264.649 170.149H289.821L286.092 186.904L276.303 233.444L270.709 259.971L263.717 293.015L258.124 320.008L251.131 352.586L249.267 364.687V371.668L249.733 372.133H253.462L259.522 369.806L266.048 365.617L275.371 357.24L282.829 349.328L286.558 345.14L288.888 346.071L294.948 350.725L308 360.498L307.068 362.36L303.339 367.944L296.813 376.322L291.685 382.837L286.558 388.422L282.363 393.076L275.837 399.592L272.108 402.849L267.446 406.573L262.785 409.83L256.725 413.554L247.869 417.742L238.08 420.535L231.554 421H224.096L216.637 420.069L211.51 418.673L206.382 416.811L201.255 413.088L196.594 408.434L192.865 400.988L191.466 394.938L191 389.818V383.768L193.797 365.152L199.857 335.832L207.315 301.392L224.096 223.205L225.028 216.224V206.916L224.562 205.054L222.231 204.123L219.434 203.193L206.382 203.658L196.127 204.589H193.331V178.526L194.263 175.734L258.59 170.615L264.649 170.149Z",
+    "M264.649 78H268.844L275.836 78.9308L282.362 80.7924L287.49 83.5848L292.151 87.7734L295.414 92.8928L297.278 96.616L299.143 105.924L299.609 113.836L299.143 118.49L298.677 122.213L296.812 128.729L293.549 134.779L290.286 138.502L286.091 141.76L282.362 143.621L278.167 145.018L274.438 145.948L267.912 146.414H260.92L254.394 145.483L249.267 144.087L244.139 141.294L239.944 138.037L236.681 133.383L233.884 127.332L232.486 121.282L232.02 117.559V108.716L232.952 101.735L234.816 95.6852L237.613 90.1004L240.41 86.3772L246.936 82.1886L252.529 79.8616L259.522 78.4654L264.649 78Z",
+  ]
+
+  /// The template 𝑖, sized for the menu bar (~16pt tall, aspect-preserved).
+  static let mark: NSImage = render(height: 16)
+
+  /// The two `i` paths combined, in SVG coordinate space (y-down, 0..500).
+  private static func glyph() -> NSBezierPath {
+    let combined = NSBezierPath()
+    for path in paths { combined.append(parse(path)) }
+    return combined
+  }
+
+  private static func render(height: CGFloat) -> NSImage {
+    let glyph = glyph()
+    let bounds = glyph.bounds
+
+    let scale = height / bounds.height
+    let width = bounds.width * scale
+    // Map SVG space (y-down) into the image (y-up): flip Y, then scale.
+    var transform = AffineTransform()
+    transform.translate(x: -bounds.minX * scale, y: height + bounds.minY * scale)
+    transform.scale(x: scale, y: -scale)
+    glyph.transform(using: transform)
+
+    let image = NSImage(size: NSSize(width: ceil(width), height: height))
+    image.lockFocus()
+    NSColor.black.setFill()
+    glyph.fill()
+    image.unlockFocus()
+    image.isTemplate = true
+    return image
+  }
+
+  /// A square brand tile (black rounded rect, white 𝑖) written to a temp PNG,
+  /// for use as a notification attachment. Cached; nil if writing fails.
+  static let logoPNGURL: URL? = renderLogoPNG(side: 128)
+
+  private static func renderLogoPNG(side: CGFloat) -> URL? {
+    let glyph = glyph()
+    let bounds = glyph.bounds
+    // Fit the 𝑖 to ~62% of the tile height, centered, y-flipped into image space.
+    let target = side * 0.62
+    let scale = target / bounds.height
+    let width = bounds.width * scale
+    let originX = (side - width) / 2
+    let originY = (side - target) / 2
+    var transform = AffineTransform()
+    transform.translate(x: originX - bounds.minX * scale, y: side - originY + bounds.minY * scale)
+    transform.scale(x: scale, y: -scale)
+    glyph.transform(using: transform)
+
+    let image = NSImage(size: NSSize(width: side, height: side))
+    image.lockFocus()
+    NSColor.black.setFill()
+    NSBezierPath(roundedRect: NSRect(x: 0, y: 0, width: side, height: side), xRadius: side * 0.22, yRadius: side * 0.22).fill()
+    NSColor.white.setFill()
+    glyph.fill()
+    image.unlockFocus()
+
+    guard let tiff = image.tiffRepresentation,
+      let png = NSBitmapImageRep(data: tiff)?.representation(using: .png, properties: [:])
+    else { return nil }
+    let url = FileManager.default.temporaryDirectory.appendingPathComponent("iterate-approval-logo.png")
+    do {
+      try png.write(to: url)
+      return url
+    } catch {
+      return nil
+    }
+  }
+
+  /// Minimal SVG path reader: absolute M/L/H/V/Z with implicit-repeat args.
+  private static func parse(_ d: String) -> NSBezierPath {
+    let path = NSBezierPath()
+    var current = NSPoint.zero
+    var command: Character = " "
+    var numbers: [CGFloat] = []
+
+    func flush() {
+      guard command != " " else { return }
+      switch command {
+      case "M":
+        for i in stride(from: 0, to: numbers.count - 1, by: 2) {
+          current = NSPoint(x: numbers[i], y: numbers[i + 1])
+          // First pair moves; subsequent pairs are implicit lineto (SVG rule).
+          if i == 0 { path.move(to: current) } else { path.line(to: current) }
+        }
+      case "L":
+        for i in stride(from: 0, to: numbers.count - 1, by: 2) {
+          current = NSPoint(x: numbers[i], y: numbers[i + 1])
+          path.line(to: current)
+        }
+      case "H":
+        for x in numbers {
+          current = NSPoint(x: x, y: current.y)
+          path.line(to: current)
+        }
+      case "V":
+        for y in numbers {
+          current = NSPoint(x: current.x, y: y)
+          path.line(to: current)
+        }
+      case "Z":
+        path.close()
+      default:
+        break
+      }
+      numbers = []
+    }
+
+    var token = ""
+    func takeNumber() {
+      if !token.isEmpty, let value = Double(token) { numbers.append(CGFloat(value)) }
+      token = ""
+    }
+
+    for char in d {
+      if char.isLetter {
+        takeNumber()
+        flush()
+        command = char
+      } else if char == " " {
+        takeNumber()
+      } else {
+        token.append(char)  // digit or "."
+      }
+    }
+    takeNumber()
+    flush()
+    return path
+  }
+}

package/menubar/README.md

@@ -0,0 +1,28 @@
+# Iterate menu bar
+
+A macOS companion for OS Next sign-in and opt-in computer sharing:
+
+```bash
+iterate menubar --project <id-or-slug>
+```
+
+The launcher compiles the shipped Swift source on first use with `swiftc`, caches
+it by source hash, and writes `menubar.json` next to the CLI config. Relaunching
+with a different project stops the old share and loads the new configuration. Install the
+Xcode command-line tools if needed (`xcode-select --install`).
+
+The app checks authentication with `iterate ping`; **Sign in** starts
+`iterate login`. Switching on **Use my computer** starts
+`iterate use-my-computer --json`. NDJSON reports connection and local call
+activity. Switching off, quitting, or closing the child's stdin releases the
+provision. A disconnected share must be enabled again explicitly.
+
+Approval source, signing helpers and UI are retained for a future OS Next
+implementation. They are dormant: no approval watcher or notification permission
+request starts, and the CLI exposes no `approve` command. The TypeScript approval
+modules still target legacy OS and are not included in the active CLI bundle.
+
+Build manually with `./build-menubar-app.sh`; the icon is drawn from vector
+paths in `IterateIcon.swift`. The launcher normally configures everything, but
+`~/.config/iterate/menubar.json` can also specify `command`, `args`, `config`,
+`project`, and an optional `cwd`.

package/menubar/build-menubar-app.sh

@@ -0,0 +1,59 @@
+#!/usr/bin/env bash
+# Build Iterate.app — a minimal menu-bar bundle from the two Swift files here.
+# No Xcode project: swiftc compiles, then we hand-assemble the .app (LSUIElement
+# so it's menu-bar-only). Run from anywhere.
+#
+#   ./build-menubar-app.sh [output-dir]      (default: ./build)
+#
+# Then: open "<output-dir>/Iterate.app"
+# First launch reads ~/.config/iterate/menubar.json for the CLI + project;
+# see menubar/README.md.
+set -euo pipefail
+
+here="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+out="${1:-$here/build}"
+app="$out/Iterate.app"
+macos="$app/Contents/MacOS"
+
+rm -rf "$app"
+mkdir -p "$macos"
+
+echo "Compiling (swiftc)…"
+swiftc -O -o "$macos/Iterate" "$here/Iterate.swift" "$here/IterateIcon.swift"
+
+cat >"$app/Contents/Info.plist" <<'PLIST'
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>CFBundleName</key><string>Iterate</string>
+  <key>CFBundleDisplayName</key><string>Iterate</string>
+  <key>CFBundleIdentifier</key><string>com.iterate.app</string>
+  <key>CFBundleVersion</key><string>1</string>
+  <key>CFBundleShortVersionString</key><string>0.1</string>
+  <key>CFBundlePackageType</key><string>APPL</string>
+  <key>CFBundleExecutable</key><string>Iterate</string>
+  <key>LSMinimumSystemVersion</key><string>13.0</string>
+  <key>LSUIElement</key><true/>
+</dict>
+</plist>
+PLIST
+
+# Signing. Default: ad-hoc, so LaunchServices gives it a stable identity (Touch
+# ID from the CLI still works — signing lives with the enclave key) and the
+# osascript notification path is used. Set SIGN_IDENTITY to a real Developer ID
+# to unlock UserNotifications' rich, actionable Approve/Reject banners:
+#
+#   SIGN_IDENTITY="Developer ID Application: You (TEAMID)" ./build-menubar-app.sh
+#
+if [ -n "${SIGN_IDENTITY:-}" ]; then
+  codesign --force --deep --options runtime \
+    --entitlements "$here/Iterate.entitlements" \
+    --sign "$SIGN_IDENTITY" "$app"
+  echo "Signed with: $SIGN_IDENTITY (actionable notifications enabled)"
+else
+  codesign --force --deep --sign - "$app" >/dev/null 2>&1 || true
+fi
+
+echo "Built: $app"
+echo "Launch: open \"$app\""

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "iterate",
-  "version": "0.2.7",
-  "description": "CLI for iterate",
+  "version": "0.3.0",
+  "description": "CLI and SDK for iterate",
   "license": "Apache-2.0",
   "type": "module",
   "repository": {
@@ -19,19 +19,211 @@
     "orpc"
   ],
   "engines": {
-    "node": ">=22"
+    "node": ">=22.15"
   },
   "bin": {
     "iterate": "./bin/iterate.js"
   },
   "exports": {
     ".": {
+      "types": "./dist/index.d.mts",
       "import": "./dist/index.mjs",
-      "types": "./dist/index.d.mts"
+      "default": "./dist/index.mjs"
+    },
+    "./client": {
+      "types": "./dist/client.d.ts",
+      "import": "./dist/client.mjs",
+      "default": "./dist/client.mjs"
+    },
+    "./node": {
+      "types": "./dist/node.d.ts",
+      "import": "./dist/node.mjs",
+      "default": "./dist/node.mjs"
+    },
+    "./starter-apps/flake-dashboard": {
+      "types": "./dist/starter-apps/flake-dashboard/index.d.ts",
+      "import": "./dist/starter-apps/flake-dashboard/index.mjs",
+      "default": "./dist/starter-apps/flake-dashboard/index.mjs"
+    },
+    "./starter-apps/flake-dashboard/contract": {
+      "types": "./dist/starter-apps/flake-dashboard/contract.d.ts",
+      "import": "./dist/starter-apps/flake-dashboard/contract.mjs",
+      "default": "./dist/starter-apps/flake-dashboard/contract.mjs"
+    },
+    "./starter-apps/flake-dashboard/configured-worker": {
+      "types": "./dist/starter-apps/flake-dashboard/worker.d.ts",
+      "import": "./dist/starter-apps/flake-dashboard/configured-worker.mjs",
+      "default": "./dist/starter-apps/flake-dashboard/configured-worker.mjs"
+    },
+    "./starter-apps/github-ai-linter": {
+      "types": "./dist/starter-apps/github-ai-linter/index.d.ts",
+      "import": "./dist/starter-apps/github-ai-linter/index.mjs",
+      "default": "./dist/starter-apps/github-ai-linter/index.mjs"
+    },
+    "./starter-apps/github-ai-linter/worker": {
+      "types": "./dist/starter-apps/github-ai-linter/worker.d.ts",
+      "import": "./dist/starter-apps/github-ai-linter/worker.mjs",
+      "default": "./dist/starter-apps/github-ai-linter/worker.mjs"
+    },
+    "./starter-apps/guestbook": {
+      "types": "./dist/starter-apps/guestbook/index.d.ts",
+      "import": "./dist/starter-apps/guestbook/index.mjs",
+      "default": "./dist/starter-apps/guestbook/index.mjs"
+    },
+    "./starter-apps/guestbook/client": {
+      "types": "./dist/starter-apps/guestbook/client.d.ts",
+      "import": "./dist/starter-apps/guestbook/client.mjs",
+      "default": "./dist/starter-apps/guestbook/client.mjs"
+    },
+    "./starter-apps/guestbook/configured-worker": {
+      "types": "./dist/starter-apps/guestbook/worker.d.ts",
+      "import": "./dist/starter-apps/guestbook/configured-worker.mjs",
+      "default": "./dist/starter-apps/guestbook/configured-worker.mjs"
+    },
+    "./starter-apps/media": {
+      "types": "./dist/starter-apps/media/index.d.ts",
+      "import": "./dist/starter-apps/media/index.mjs",
+      "default": "./dist/starter-apps/media/index.mjs"
+    },
+    "./starter-apps/media/configured-worker": {
+      "types": "./dist/starter-apps/media/worker.d.ts",
+      "import": "./dist/starter-apps/media/configured-worker.mjs",
+      "default": "./dist/starter-apps/media/configured-worker.mjs"
+    },
+    "./starter-apps/media/ref": {
+      "types": "./dist/starter-apps/media/ref.d.ts",
+      "import": "./dist/starter-apps/media/ref.mjs",
+      "default": "./dist/starter-apps/media/ref.mjs"
+    },
+    "./starter-apps/notes": {
+      "types": "./dist/starter-apps/notes/index.d.ts",
+      "import": "./dist/starter-apps/notes/index.mjs",
+      "default": "./dist/starter-apps/notes/index.mjs"
+    },
+    "./starter-apps/notes/configured-worker": {
+      "types": "./dist/starter-apps/notes/worker.d.ts",
+      "import": "./dist/starter-apps/notes/configured-worker.mjs",
+      "default": "./dist/starter-apps/notes/configured-worker.mjs"
+    },
+    "./starter-apps/notes/ref": {
+      "types": "./dist/starter-apps/notes/ref.d.ts",
+      "import": "./dist/starter-apps/notes/ref.mjs",
+      "default": "./dist/starter-apps/notes/ref.mjs"
+    },
+    "./starter-apps/todo": {
+      "types": "./dist/starter-apps/todo/index.d.ts",
+      "import": "./dist/starter-apps/todo/index.mjs",
+      "default": "./dist/starter-apps/todo/index.mjs"
+    },
+    "./processors": {
+      "types": "./dist/processors/index.d.ts",
+      "import": "./dist/processors.mjs",
+      "default": "./dist/processors.mjs"
+    },
+    "./processors/cloudflare": {
+      "types": "./dist/processors/cloudflare.d.ts",
+      "import": "./dist/processors-cloudflare.mjs",
+      "default": "./dist/processors-cloudflare.mjs"
+    },
+    "./processors/testing": {
+      "types": "./dist/processors/testing.d.ts",
+      "import": "./dist/processors-testing.mjs",
+      "default": "./dist/processors-testing.mjs"
+    },
+    "./sdk": {
+      "types": "./dist/sdk.d.ts",
+      "import": "./dist/sdk.mjs",
+      "default": "./dist/sdk.mjs"
+    },
+    "./sdk/capnweb": {
+      "types": "./dist/sdk/capnweb/index.d.ts",
+      "import": "./dist/sdk/capnweb.mjs",
+      "default": "./dist/sdk/capnweb.mjs"
+    },
+    "./sdk/capnweb/react": {
+      "types": "./dist/sdk/capnweb/react.d.ts",
+      "import": "./dist/sdk/capnweb/react.mjs",
+      "default": "./dist/sdk/capnweb/react.mjs"
+    },
+    "./sdk/itx/react": {
+      "types": "./dist/sdk/itx/react.d.ts",
+      "import": "./dist/sdk/itx/react.mjs",
+      "default": "./dist/sdk/itx/react.mjs"
     },
     "./worker": {
+      "types": "./dist/worker.d.mts",
       "import": "./dist/worker.mjs",
-      "types": "./dist/worker.d.mts"
+      "default": "./dist/worker.mjs"
+    },
+    "./document-review": {
+      "types": "./dist/document-review/index.d.ts",
+      "import": "./dist/document-review.mjs",
+      "default": "./dist/document-review.mjs"
+    },
+    "./next/sdk": {
+      "types": "./dist/next/sdk/index.d.ts",
+      "import": "./dist/next/sdk.mjs"
+    },
+    "./next/app": {
+      "types": "./dist/next/app.d.ts",
+      "import": "./dist/next/app.mjs"
+    },
+    "./next/app-server": {
+      "types": "./dist/next/app-server.d.ts",
+      "import": "./dist/next/app-server.mjs"
+    },
+    "./next/app-session": {
+      "types": "./dist/next/app-session.d.ts",
+      "import": "./dist/next/app-session.mjs"
+    },
+    "./next/client": {
+      "types": "./dist/next/client/live-state.d.ts",
+      "import": "./dist/next/client.mjs"
+    },
+    "./next/react": {
+      "types": "./dist/next/client/react.d.ts",
+      "import": "./dist/next/react.mjs"
+    },
+    "./next/api": {
+      "types": "./dist/next/api.d.ts",
+      "import": "./dist/next/api.mjs"
+    },
+    "./next/lib": {
+      "types": "./dist/next/lib.d.ts",
+      "import": "./dist/next/lib.mjs"
+    },
+    "./next/expression": {
+      "types": "./dist/next/expression.d.ts",
+      "import": "./dist/next/expression.mjs"
+    },
+    "./next/principal": {
+      "types": "./dist/next/principal.d.ts",
+      "import": "./dist/next/principal.mjs"
+    },
+    "./next/stream/processor": {
+      "types": "./dist/next/stream/processor.d.ts",
+      "import": "./dist/next/stream/processor.mjs"
+    },
+    "./next/oauth-scopes": {
+      "types": "./dist/next/oauth-scopes.d.ts",
+      "import": "./dist/next/oauth-scopes.mjs"
+    },
+    "./next/project-ingress": {
+      "types": "./dist/next/project-ingress.d.ts",
+      "import": "./dist/next/project-ingress.mjs"
+    },
+    "./next/oauth": {
+      "types": "./dist/next/client/oauth.d.ts",
+      "import": "./dist/next/oauth.mjs"
+    },
+    "./next/stream/run": {
+      "types": "./dist/next/stream/run.d.ts",
+      "import": "./dist/next/stream/run.mjs",
+      "default": "./dist/next/stream/run.mjs"
+    },
+    "./next/node": {
+      "types": "./dist/next-node.d.ts",
+      "import": "./dist/next-node.mjs"
     }
   },
   "publishConfig": {
@@ -40,30 +232,55 @@
   "files": [
     "bin",
     "dist",
-    "README.md"
+    "README.md",
+    "THIRD_PARTY_NOTICES.md",
+    "menubar"
   ],
   "dependencies": {
     "@clack/prompts": "^1.0.0",
-    "@opentui/core": "0.1.102",
-    "@opentui/react": "0.1.102",
-    "@orpc/client": "1.13.14",
+    "@cloudflare/workers-types": "^5.20260831.1",
+    "@iterate-com/capnweb": "^0.10.0",
     "@orpc/server": "1.13.14",
-    "capnweb": "^0.8.0",
-    "react": "^19.2.0",
+    "@tanstack/react-query": "^5.101.2",
+    "capnweb": "npm:@iterate-com/capnweb@0.12.2",
+    "json5": "^2.2.3",
+    "oauth4webapi": "^3.8.5",
+    "react": "^19.2.7",
+    "sqlfu": "0.1.1",
     "trpc-cli": "0.15.1",
     "ws": "8.19.0",
-    "zod": "4.1.12"
+    "yaml": "^2.9.0",
+    "zod": "4.5.4"
+  },
+  "peerDependencies": {
+    "@tanstack/react-query": "^5",
+    "octokit": "^5.0.5",
+    "react": "^19.1.0"
+  },
+  "peerDependenciesMeta": {
+    "octokit": {
+      "optional": true
+    }
   },
   "devDependencies": {
     "@types/node": "^22.0.0",
-    "@types/react": "^19.2.14",
+    "@types/react": "^19.2.17",
+    "@types/react-dom": "^19.2.3",
+    "@types/ws": "^8.18.1",
+    "esbuild": "^0.27.4",
+    "fflate": "^0.8.3",
+    "jsdom": "27.4.0",
+    "miniflare": "4.20260701.0",
+    "octokit": "^5.0.5",
+    "react-dom": "^19.2.7",
+    "roughdraft": "0.1.10",
     "tsdown": "0.22.2",
-    "vitest": "4.0.15",
-    "@iterate-com/ui": "0.0.1"
+    "typescript": "^5.9.3",
+    "vitest": "4.0.15"
   },
   "scripts": {
-    "build": "tsdown",
-    "typecheck": "tsgo --noEmit",
-    "test": "vitest run"
+    "build": "node scripts/build.ts",
+    "typecheck": "tsgo --noEmit && tsc --noEmit -p tsconfig.next.json",
+    "test": "vitest run --reporter=default --reporter=../shared/src/test-support/e2e-policy/retry-telemetry-reporter.ts"
   }
 }