nextclaw 0.44.2 → 0.45.0

package/dist/cli/app/index.js

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
-import { t as createNextclawDistribution } from "../../nextclaw-distribution.utils-BneKclXo.js";
+import { t as createNextclawDistribution } from "../../nextclaw-distribution.utils-Bba2GRvc.js";
 import { NextclawDistributionService } from "@nextclaw/service";
 //#region src/cli/app/index.ts
 NextclawDistributionService.configureRuntime(createNextclawDistribution(import.meta.url));
-const { nextclawCliProgram } = await import("../../nextclaw-cli-app-B_ffeXOD.js");
+const { nextclawCliProgram } = await import("../../nextclaw-cli-app-Bwa2L2Jv.js");
 await nextclawCliProgram.parseAsync(process.argv);
 //#endregion
 export {};

package/dist/cli/launcher/index.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as createNextclawDistribution } from "../../nextclaw-distribution.utils-BneKclXo.js";
+import { t as createNextclawDistribution } from "../../nextclaw-distribution.utils-Bba2GRvc.js";
 import { NextclawDistributionService, runNextclawNpmRuntimeLauncher } from "@nextclaw/service";
 //#region src/cli/launcher/index.ts
 NextclawDistributionService.configure(createNextclawDistribution(import.meta.url));

package/dist/{nextclaw-cli-app-B_ffeXOD.js → nextclaw-cli-app-Bwa2L2Jv.js}

@@ -1,6 +1,6 @@
 import { createRequire } from "node:module";
 import { APP_NAME, APP_TAGLINE, getConfigPath, getDataDir, getRunPath, loadConfig, resolveConfigSecrets } from "@nextclaw/core";
-import { NextclawServiceRuntime, readLearningLoopRuntimeConfig } from "@nextclaw/service";
+import { NextclawDistributionService, NextclawServiceRuntime, readLearningLoopRuntimeConfig } from "@nextclaw/service";
 import { constants, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import path, { join, resolve } from "node:path";
 import { Command, InvalidArgumentError } from "commander";
@@ -9,8 +9,8 @@ import { execFile } from "node:child_process";
 import { tmpdir } from "node:os";
 import "@nextclaw/server";
 import { access, mkdtemp, readFile, rm, stat } from "node:fs/promises";
-import { AppBundleService, AppHomeService, AppInstanceInventoryService, AppInstanceStorageService, AppPlatformTargetService, AppPublishService, AppPublishValidationService } from "@nextclaw/app-runtime";
-import { McpServiceAppRuntimeService, NextclawHarnessError, buildServiceActionId, getServiceAppManifestPath, mergeServiceAppRuntimeActions, readServiceAppManifest } from "@nextclaw/kernel";
+import { AppBundleService, AppHomeService, AppInstanceInventoryService, AppInstanceStorageService, AppManifestService, AppPlatformTargetService, AppPublishService, AppPublishValidationService, isAppComponentManifestBundle } from "@nextclaw/app-runtime";
+import { NextclawHarnessError, ServiceAppRuntimeService, buildServiceActionId, getServiceAppManifestPath, mergeServiceAppRuntimeActions, readServiceAppManifest } from "@nextclaw/kernel";
 import { format, promisify } from "node:util";
 import { formatNextClawAppInstallCommand } from "@nextclaw/shared";
 var __commonJSMin = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
@@ -3648,15 +3648,17 @@ var ServiceAppDevService = class {
 			message: `--reset-data requires --confirm ${loaded.manifest.id}.`
 		});
 		if (this.hasErrors(issues)) return this.buildDevReport(appPath, this.toServiceAppRecord(appPath, loaded.manifest, this.idleRuntimeStatus), [], issues);
+		const portable = await this.loadPortableDevContext(appPath, loaded.manifest, issues);
+		if (this.hasErrors(issues)) return this.buildDevReport(appPath, this.toServiceAppRecord(appPath, loaded.manifest, this.idleRuntimeStatus), [], issues);
 		const runtime = this.createRuntimeService();
 		const storage = await this.createDevStorage(appPath, loaded.manifest.id, options.resetData === true);
 		try {
-			const startRecord = this.toServiceAppRecord(appPath, loaded.manifest, runtime, storage);
+			const startRecord = this.toServiceAppRecord(appPath, loaded.manifest, runtime, storage, portable);
 			const runtimeActions = await runtime.listActions({
 				app: startRecord,
 				manifest: loaded.manifest
 			});
-			const record = this.toServiceAppRecord(appPath, loaded.manifest, runtime, storage);
+			const record = this.toServiceAppRecord(appPath, loaded.manifest, runtime, storage, portable);
 			const actions = mergeServiceAppRuntimeActions({
 				record,
 				manifest: loaded.manifest,
@@ -3684,20 +3686,22 @@ var ServiceAppDevService = class {
 			const record = this.toServiceAppRecord(appPath, loaded.manifest, this.idleRuntimeStatus);
 			return this.buildCallReport(appPath, record, void 0, void 0, issues);
 		}
+		const portable = await this.loadPortableDevContext(appPath, loaded.manifest, issues);
+		if (this.hasErrors(issues)) return this.buildCallReport(appPath, this.toServiceAppRecord(appPath, loaded.manifest, this.idleRuntimeStatus), void 0, void 0, issues);
 		const runtime = this.createRuntimeService();
 		const storage = await this.createDevStorage(appPath, loaded.manifest.id);
 		try {
-			const record = this.toServiceAppRecord(appPath, loaded.manifest, runtime, storage);
+			const record = this.toServiceAppRecord(appPath, loaded.manifest, runtime, storage, portable);
 			const result = await runtime.invokeAction({
 				app: record,
 				manifest: loaded.manifest,
 				actionName: action,
 				input
 			});
-			const nextRecord = this.toServiceAppRecord(appPath, loaded.manifest, runtime, storage);
+			const nextRecord = this.toServiceAppRecord(appPath, loaded.manifest, runtime, storage, portable);
 			return this.buildCallReport(appPath, nextRecord, buildServiceActionId(loaded.manifest.id, action), result, issues);
 		} catch (error) {
-			const record = this.toServiceAppRecord(appPath, loaded.manifest, runtime, storage);
+			const record = this.toServiceAppRecord(appPath, loaded.manifest, runtime, storage, portable);
 			issues.push({
 				severity: "error",
 				code: "service.runtime.callFailed",
@@ -3731,7 +3735,60 @@ var ServiceAppDevService = class {
 			return null;
 		}
 	};
-	createRuntimeService = () => this.params.runtimeService ?? new McpServiceAppRuntimeService({ getConfig: this.params.getConfig ?? this.loadRuntimeConfig });
+	createRuntimeService = () => {
+		if (this.params.runtimeService) return this.params.runtimeService;
+		return new ServiceAppRuntimeService({
+			getConfig: this.params.getConfig ?? this.loadRuntimeConfig,
+			portableServiceRunnerPath: this.params.portableServiceRunnerPath
+		});
+	};
+	loadPortableDevContext = async (appPath, manifest, issues) => {
+		if (manifest.protocol !== "wasi-component") return void 0;
+		const componentPath = path.resolve(appPath, manifest.componentEntry ?? "");
+		if (!await this.pathExists(componentPath)) {
+			issues.push({
+				severity: "error",
+				code: "service.component.notFound",
+				message: `Portable Component does not exist: ${manifest.componentEntry ?? "(missing)"}.`
+			});
+			return;
+		}
+		const packageContext = await this.findOwningPackage(appPath);
+		if (!packageContext) {
+			issues.push({
+				severity: "error",
+				code: "service.package.required",
+				message: "Portable Service App development requires an owning schema v2 Mini App so permissions have one product owner.",
+				fixHint: "Place the service under a manifest.json components entry and run app dev on that service directory."
+			});
+			return;
+		}
+		return {
+			componentPath,
+			permissions: packageContext.permissions
+		};
+	};
+	findOwningPackage = async (appPath) => {
+		let candidate = path.dirname(appPath);
+		while (true) {
+			const permissions = await this.readOwningPackagePermissions(candidate, appPath);
+			if (permissions) return { permissions };
+			const parent = path.dirname(candidate);
+			if (parent === candidate) return void 0;
+			candidate = parent;
+		}
+	};
+	readOwningPackagePermissions = async (candidate, appPath) => {
+		if (!await this.pathExists(path.join(candidate, "manifest.json"))) return void 0;
+		const manifestService = new AppManifestService();
+		try {
+			const bundle = await manifestService.load(candidate);
+			if (!isAppComponentManifestBundle(bundle)) return void 0;
+			return bundle.components.some((component) => path.resolve(component.componentDirectory) === path.resolve(appPath)) ? manifestService.resolvePlatformSecurity(bundle.manifest).permissions : void 0;
+		} catch {
+			return;
+		}
+	};
 	loadRuntimeConfig = () => {
 		const configPath = getConfigPath();
 		return resolveConfigSecrets(loadConfig(configPath), { configPath });
@@ -3767,7 +3824,7 @@ var ServiceAppDevService = class {
 			return false;
 		}
 	};
-	toServiceAppRecord = (dirPath, manifest, runtime, storage) => {
+	toServiceAppRecord = (dirPath, manifest, runtime, storage, portable) => {
 		const runtimeStatus = runtime.getStatus(manifest.id);
 		const record = {
 			id: manifest.id,
@@ -3783,7 +3840,12 @@ var ServiceAppDevService = class {
 			dataDirectory: storage?.dataDirectory,
 			instanceId: storage?.instanceId,
 			storage,
-			isolation: "full-user"
+			isolation: manifest.protocol === "wasi-component" ? "host-mediated" : "full-user",
+			runtimeProfile: manifest.protocol === "wasi-component" ? "wasi" : "native-process",
+			componentPath: portable?.componentPath,
+			permissions: portable?.permissions,
+			providerIds: manifest.providerIds,
+			lifecycle: manifest.lifecycle
 		};
 		if (manifest.description) record.description = manifest.description;
 		if (runtimeStatus.lastError) record.lastError = runtimeStatus.lastError;
@@ -4240,15 +4302,17 @@ var ServiceAppCheckService = class {
 		const manifestResult = await readJsonObject(path.join(appPath, SERVICE_MANIFEST_FILE));
 		this.pushIssue(issues, manifestResult.issue);
 		if (!manifestResult.value) return issues;
-		const serviceId = this.checkManifestFields(appPath, manifestResult.value, issues);
+		const protocol = readOptionalString(manifestResult.value, "protocol") ?? "mcp";
+		const serviceId = this.checkManifestFields(appPath, manifestResult.value, protocol, issues);
 		const command = readOptionalString(manifestResult.value, "command");
 		const args = readStringArray(manifestResult.value.args, "service.args");
 		this.pushIssue(issues, args.issue);
 		this.checkActions(serviceId, manifestResult.value.actions, issues);
-		await this.checkCommand(appPath, command, args.values, issues);
+		if (protocol === "wasi-component") await this.checkPortableComponent(appPath, manifestResult.value, issues);
+		else await this.checkCommand(appPath, command, args.values, issues);
 		return issues;
 	};
-	checkManifestFields = (appPath, manifest, issues) => {
+	checkManifestFields = (appPath, manifest, protocol, issues) => {
 		const id = readRequiredString(manifest, "id", "service");
 		this.pushIssue(issues, id.issue);
 		if (id.value && (!KEBAB_ID_PATTERN.test(id.value) || id.value !== path.basename(appPath))) issues.push({
@@ -4257,14 +4321,42 @@ var ServiceAppCheckService = class {
 			message: `service-app.json id must be kebab-case and equal directory name: ${path.basename(appPath)}.`
 		});
 		this.pushIssue(issues, readRequiredString(manifest, "title", "service").issue);
-		this.pushIssue(issues, readRequiredString(manifest, "command", "service").issue);
-		if ((readOptionalString(manifest, "protocol") ?? "mcp") !== "mcp") issues.push({
+		if (protocol === "mcp") this.pushIssue(issues, readRequiredString(manifest, "command", "service").issue);
+		else if (protocol !== "wasi-component") issues.push({
 			severity: "error",
 			code: "service.protocol.invalid",
-			message: "Service App protocol must be mcp."
+			message: "Service App protocol must be mcp or wasi-component."
 		});
 		return id.value;
 	};
+	checkPortableComponent = async (appPath, manifest, issues) => {
+		if (!isRecord(manifest.component)) {
+			issues.push({
+				severity: "error",
+				code: "service.component.missing",
+				message: "wasi-component Service App must declare component.entry."
+			});
+			return;
+		}
+		const entry = readRequiredString(manifest.component, "entry", "service.component");
+		this.pushIssue(issues, entry.issue);
+		if (!entry.value) return;
+		const normalized = entry.value.replace(/\\/g, "/");
+		if (path.isAbsolute(normalized) || normalized.split("/").includes("..") || !normalized.endsWith(".wasm")) {
+			issues.push({
+				severity: "error",
+				code: "service.component.entryInvalid",
+				message: "service.component.entry must be a package-relative .wasm path."
+			});
+			return;
+		}
+		const componentPath = resolveRelativeFile(appPath, normalized);
+		if (!componentPath || !await fileExists(componentPath)) issues.push({
+			severity: "error",
+			code: "service.component.notFound",
+			message: `Portable Component does not exist: ${entry.value}.`
+		});
+	};
 	checkActions = (serviceId, value, issues) => {
 		if (!isRecord(value) || Object.keys(value).length === 0) {
 			issues.push({
@@ -5049,12 +5141,13 @@ var AppPackageCommandController = class {
 };
 //#endregion
 //#region src/cli/app/register-app-commands.ts
-function registerAppCommands(program) {
+function registerAppCommands(program, options = {}) {
 	const app = program.command("app").description("Develop, validate, and publish NextClaw apps");
 	const appCheck = new AppCheckCommandController();
-	const appDev = new AppDevCommandController();
+	const serviceAppDev = new ServiceAppDevService({ portableServiceRunnerPath: options.portableServiceRunnerPath });
+	const appDev = new AppDevCommandController(serviceAppDev);
 	const appData = new AppDataCommandController();
-	const appCall = new AppCallCommandController();
+	const appCall = new AppCallCommandController(serviceAppDev);
 	const appRestart = new AppRestartCommandController();
 	const appPack = new AppPackCommandController();
 	const appValidatePublish = new AppValidatePublishCommandController();
@@ -5315,7 +5408,7 @@ registerAgentsCommands(program, runtime);
 registerProjectCommands(program, runtime);
 registerSessionCommands(program, runtime);
 registerExecCommand(program, runtime);
-registerAppCommands(program);
+registerAppCommands(program, { portableServiceRunnerPath: NextclawDistributionService.get().portableServiceRunnerPath });
 const config = program.command("config").description("Manage config values");
 config.command("get <path>").description("Get a config value by dot path").option("--json", "Output JSON", false).action((path, opts) => runtime.commands.config.get(path, opts));
 config.command("set <path> <value>").description("Set a config value by dot path").option("--json", "Parse value as JSON", false).action((path, value, opts) => runtime.commands.config.set(path, value, opts));
@@ -5355,4 +5448,4 @@ program.command("usage").description("Show observed LLM usage snapshots, history
 //#endregion
 export { program as nextclawCliProgram };
 
-//# sourceMappingURL=nextclaw-cli-app-B_ffeXOD.js.map
+//# sourceMappingURL=nextclaw-cli-app-Bwa2L2Jv.js.map