robodev 0.29.0 → 0.30.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "robodev",
-  "version": "0.29.0",
+  "version": "0.30.0",
   "description": "CLI for Robodev Starbase — create, auth, link, and deploy hosted apps",
   "type": "module",
   "license": "MIT",

package/src/collect-files.test.ts

@@ -57,6 +57,22 @@ test("collectFiles includes hosted sources and skips denied paths", async () =>
   }
 });
 
+test("collectFiles includes public SPA binaries as base64", async () => {
+  const root = await mkdtemp(join(tmpdir(), "rd-cli-bin-"));
+  try {
+    await writeFile(join(root, "database.ts"), "export default {}");
+    await mkdir(join(root, "public/assets"), { recursive: true });
+    await writeFile(join(root, "public/assets/font.woff2"), Buffer.from("woff2-bytes"));
+    await writeFile(join(root, "public/icon.png"), Buffer.from("png-bytes"));
+    const files = await collectFiles(root);
+    const byPath = Object.fromEntries(files.map((file) => [file.path, file.content]));
+    assert.equal(byPath["public/assets/font.woff2"], Buffer.from("woff2-bytes").toString("base64"));
+    assert.equal(byPath["public/icon.png"], Buffer.from("png-bytes").toString("base64"));
+  } finally {
+    await rm(root, { recursive: true, force: true });
+  }
+});
+
 test("collectFiles still accepts a legacy root database.ts tree", async () => {
   const root = await mkdtemp(join(tmpdir(), "rd-cli-"));
   try {

package/src/collect-files.ts

@@ -1,11 +1,11 @@
 import { readdir, readFile, stat } from "node:fs/promises";
 import { join, relative } from "node:path";
 
-export const MAX_FILE_COUNT = 200;
+export const MAX_FILE_COUNT = 400;
 export const MAX_FILE_BYTES = 1024 * 1024;
-/** Hashed Vite JS from Tiny can exceed 1MB; keep API/source at 1MB. */
-export const MAX_STATIC_FILE_BYTES = 4 * 1024 * 1024;
-export const MAX_TREE_BYTES = 15 * 1024 * 1024;
+/** Hashed Vite JS and SPA fonts from Tiny can exceed 1MB; keep API/source at 1MB. */
+export const MAX_STATIC_FILE_BYTES = 8 * 1024 * 1024;
+export const MAX_TREE_BYTES = 25 * 1024 * 1024;
 export const MAX_PATH_LENGTH = 240;
 export const MAX_PATH_DEPTH = 12;
 
@@ -33,6 +33,18 @@ const BINARY_EXTENSIONS = new Set([
   ".webm",
   ".mp3",
 ]);
+const PUBLIC_BINARY_EXTENSIONS = new Set([
+  ".woff",
+  ".woff2",
+  ".ttf",
+  ".otf",
+  ".png",
+  ".jpg",
+  ".jpeg",
+  ".gif",
+  ".webp",
+  ".ico",
+]);
 const SRC_EXTENSIONS = new Set([
   ".ts",
   ".tsx",
@@ -102,10 +114,15 @@ function isDenied(path: string): boolean {
   if (isRobodevLockfile(path)) return true;
   const name = basename(path);
   if (name.startsWith(".") && name !== ".gitignore") return true;
-  if (BINARY_EXTENSIONS.has(extname(path))) return true;
+  if (BINARY_EXTENSIONS.has(extname(path)) && !isPublicBinaryCollectedPath(path)) return true;
   return false;
 }
 
+export function isPublicBinaryCollectedPath(path: string): boolean {
+  const normalized = normalize(path);
+  return normalized.startsWith("public/") && PUBLIC_BINARY_EXTENSIONS.has(extname(normalized));
+}
+
 function isBackendPath(path: string): boolean {
   const inner = path.startsWith("robodev/") ? path.slice("robodev/".length) : path;
   if (inner === "database.ts" && (path === "database.ts" || path === "robodev/database.ts")) {
@@ -127,7 +144,9 @@ function isAllowed(path: string): boolean {
   if (path.startsWith("robodev/")) return false;
   if (path === "index.html") return true;
   if (path.startsWith("src/")) return SRC_EXTENSIONS.has(extname(path));
-  if (path.startsWith("public/")) return PUBLIC_EXTENSIONS.has(extname(path));
+  if (path.startsWith("public/")) {
+    return PUBLIC_EXTENSIONS.has(extname(path)) || PUBLIC_BINARY_EXTENSIONS.has(extname(path));
+  }
   if (CONFIG_FILES.has(path) || CONFIG_FILES.has(basename(path))) return true;
   if (/^tsconfig\..+\.json$/.test(basename(path)) && !path.includes("/")) return true;
   if (!path.includes("/") && ROOT_STATIC_EXTENSIONS.has(extname(path))) return true;
@@ -177,6 +196,20 @@ function formatMaxBytes(bytes: number): string {
   return `${Math.round(bytes / (1024 * 1024))}MB`;
 }
 
+export function collectedFileStoredBytes(file: CollectedFile): number {
+  if (isPublicBinaryCollectedPath(file.path)) {
+    return Buffer.from(file.content, "base64").byteLength;
+  }
+  return Buffer.byteLength(file.content, "utf8");
+}
+
+export async function readCollectedContent(abs: string, deployPath: string): Promise<string> {
+  if (isPublicBinaryCollectedPath(deployPath)) {
+    return (await readFile(abs)).toString("base64");
+  }
+  return readFile(abs, "utf8");
+}
+
 export function assertCollectedFile(file: CollectedFile): void {
   const path = normalize(file.path);
   if (
@@ -187,7 +220,7 @@ export function assertCollectedFile(file: CollectedFile): void {
   ) {
     throw new Error(`Invalid file path: ${path}`);
   }
-  const bytes = Buffer.byteLength(file.content, "utf8");
+  const bytes = collectedFileStoredBytes(file);
   const max = maxBytesForCollectedPath(path);
   if (bytes > max) {
     throw new Error(`File must be under ${formatMaxBytes(max)}: ${path}`);
@@ -203,7 +236,7 @@ export function assertCollectedLimits(files: CollectedFile[]): void {
     assertCollectedFile(file);
     totalBytes += Buffer.byteLength(file.content, "utf8");
     if (totalBytes > MAX_TREE_BYTES) {
-      throw new Error("Deploy tree must be under 15MB");
+      throw new Error(`Deploy tree must be under ${formatMaxBytes(MAX_TREE_BYTES)}`);
     }
   }
 }
@@ -251,15 +284,15 @@ export async function collectFiles(root: string): Promise<CollectedFile[]> {
       if (path.length > MAX_PATH_LENGTH || path.split("/").length > MAX_PATH_DEPTH) {
         throw new Error(`Invalid file path: ${path}`);
       }
-      const content = await readFile(abs, "utf8");
-      const bytes = Buffer.byteLength(content, "utf8");
+      const content = await readCollectedContent(abs, path);
+      const bytes = collectedFileStoredBytes({ path, content });
       const max = maxBytesForCollectedPath(path);
       if (bytes > max) {
         throw new Error(`File must be under ${formatMaxBytes(max)}: ${path}`);
       }
-      totalBytes += bytes;
+      totalBytes += Buffer.byteLength(content, "utf8");
       if (totalBytes > MAX_TREE_BYTES) {
-        throw new Error("Deploy tree must be under 15MB");
+        throw new Error(`Deploy tree must be under ${formatMaxBytes(MAX_TREE_BYTES)}`);
       }
       files.push({ path, content });
       if (files.length > MAX_FILE_COUNT) {

package/src/frontend-build.test.ts

@@ -32,27 +32,54 @@ test("resolveFrontendPaths keeps outDir inside the project", () => {
   );
 });
 
-test("mapFrontendOutDir remaps text files and skips binaries", async () => {
+test("mapFrontendOutDir remaps text files and includes public binaries", async () => {
   const out = await mkdtemp(join(tmpdir(), "rd-out-"));
   try {
     await writeFile(join(out, "index.html"), "<html><body>app</body></html>");
     await mkdir(join(out, "assets"), { recursive: true });
     await writeFile(join(out, "assets/index-abc.js"), "console.log(1)");
     await writeFile(join(out, "assets/index-abc.css"), "body{color:red}");
-    await writeFile(join(out, "assets/font.woff2"), "binary-font");
-    await writeFile(join(out, "icon.png"), "binary-png");
-    const { files, skippedBinaries } = await mapFrontendOutDir(out);
+    await writeFile(join(out, "assets/font.woff2"), Buffer.from("binary-font"));
+    await writeFile(join(out, "icon.png"), Buffer.from("binary-png"));
+    const files = await mapFrontendOutDir(out);
     const paths = new Set(files.map((file) => file.path));
     assert.ok(paths.has("index.html"));
     assert.ok(paths.has("public/assets/index-abc.js"));
     assert.ok(paths.has("public/assets/index-abc.css"));
-    assert.ok(!paths.has("public/assets/font.woff2"));
-    assert.ok(!paths.has("public/icon.png"));
-    assert.equal(skippedBinaries, true);
+    assert.ok(paths.has("public/assets/font.woff2"));
+    assert.ok(paths.has("public/icon.png"));
     assert.equal(
       files.find((file) => file.path === "index.html")?.content,
       "<html><body>app</body></html>",
     );
+    assert.equal(
+      files.find((file) => file.path === "public/assets/font.woff2")?.content,
+      Buffer.from("binary-font").toString("base64"),
+    );
+    assert.equal(
+      files.find((file) => file.path === "public/icon.png")?.content,
+      Buffer.from("binary-png").toString("base64"),
+    );
+  } finally {
+    await rm(out, { recursive: true, force: true });
+  }
+});
+
+test("mapFrontendOutDir throws when dist still has denied files", async () => {
+  const out = await mkdtemp(join(tmpdir(), "rd-out-skip-"));
+  try {
+    await writeFile(join(out, "index.html"), "<html></html>");
+    await mkdir(join(out, "assets"), { recursive: true });
+    await writeFile(join(out, "assets/app.wasm"), Buffer.from("wasm"));
+    await writeFile(join(out, "clip.mp4"), Buffer.from("mp4"));
+    await assert.rejects(
+      () => mapFrontendOutDir(out),
+      (err: unknown) =>
+        err instanceof Error &&
+        /cannot be uploaded/.test(err.message) &&
+        err.message.includes("public/assets/app.wasm") &&
+        err.message.includes("public/clip.mp4"),
+    );
   } finally {
     await rm(out, { recursive: true, force: true });
   }

package/src/frontend-build.ts

@@ -2,7 +2,12 @@ import { execFile, spawn } from "node:child_process";
 import { readdir, readFile, stat } from "node:fs/promises";
 import { isAbsolute, join, relative, resolve } from "node:path";
 import { promisify } from "node:util";
-import { assertCollectedFile, type CollectedFile, shouldCollectPath } from "./collect-files.js";
+import {
+  assertCollectedFile,
+  type CollectedFile,
+  readCollectedContent,
+  shouldCollectPath,
+} from "./collect-files.js";
 import { isFrontendConfig, normalizeFrontendConfig, type FrontendConfig } from "./config.js";
 
 const execFileAsync = promisify(execFile);
@@ -132,12 +137,9 @@ function mappedDeployPath(relFromOutDir: string): string {
   return `public/${rel}`;
 }
 
-export async function mapFrontendOutDir(outDirAbs: string): Promise<{
-  files: CollectedFile[];
-  skippedBinaries: boolean;
-}> {
+export async function mapFrontendOutDir(outDirAbs: string): Promise<CollectedFile[]> {
   const files: CollectedFile[] = [];
-  let skippedBinaries = false;
+  const skipped: string[] = [];
 
   async function walk(dir: string): Promise<void> {
     let entries;
@@ -156,10 +158,10 @@ export async function mapFrontendOutDir(outDirAbs: string): Promise<{
       const rel = relative(outDirAbs, abs).replaceAll("\\", "/");
       const deployPath = mappedDeployPath(rel);
       if (!shouldCollectPath(deployPath)) {
-        skippedBinaries = true;
+        skipped.push(deployPath);
         continue;
       }
-      const content = await readFile(abs, "utf8");
+      const content = await readCollectedContent(abs, deployPath);
       const file = { path: deployPath, content };
       assertCollectedFile(file);
       files.push(file);
@@ -167,7 +169,24 @@ export async function mapFrontendOutDir(outDirAbs: string): Promise<{
   }
 
   await walk(outDirAbs);
-  return { files, skippedBinaries };
+  if (skipped.length > 0) {
+    throw new Error(
+      `Frontend build produced files that cannot be uploaded: ${skipped.sort().join(", ")}`,
+    );
+  }
+  return files;
+}
+
+export async function frontendOutIndexExists(
+  projectRoot: string,
+  frontend: FrontendConfig,
+): Promise<boolean> {
+  try {
+    const { outAbs } = resolveFrontendPaths(projectRoot, frontend);
+    return (await stat(join(outAbs, "index.html"))).isFile();
+  } catch {
+    return false;
+  }
 }
 
 export async function buildAndCollectFrontend(
@@ -199,14 +218,9 @@ export async function buildAndCollectFrontend(
     throw new Error(`Frontend build did not produce ${join(outAbs, "index.html")}`);
   }
 
-  const { files, skippedBinaries } = await mapFrontendOutDir(outAbs);
+  const files = await mapFrontendOutDir(outAbs);
   if (!files.some((file) => file.path === "index.html")) {
     throw new Error(`Frontend build did not produce ${join(outAbs, "index.html")}`);
   }
-  if (skippedBinaries) {
-    console.log(
-      "Skipped binary frontend assets (fonts/images). Hosted UI may use system font fallback.",
-    );
-  }
   return files;
 }

package/src/index.ts

@@ -23,7 +23,11 @@ import {
 } from "./config.js";
 import { waitUntilLive } from "./wait-until-live.js";
 import { collectFiles, mergeCollectedFiles, type CollectedFile } from "./collect-files.js";
-import { buildAndCollectFrontend, commandAvailable } from "./frontend-build.js";
+import {
+  buildAndCollectFrontend,
+  commandAvailable,
+  frontendOutIndexExists,
+} from "./frontend-build.js";
 import {
   emitStarter,
   loadCatalog,
@@ -538,6 +542,9 @@ async function runCreate(args: string[]): Promise<void> {
       });
       feHosted = true;
     } catch (error) {
+      if (await frontendOutIndexExists(root, defaultFrontendConfig())) {
+        throw error;
+      }
       console.log(error instanceof Error ? error.message : error);
       console.log("Frontend build failed. Deploying schema and APIs only.");
       skipFrontendBuild = true;

package/templates/auth-chat/.rulesync/rules/project-overview.md

@@ -13,7 +13,7 @@ cursor:
 
 This project is a Vite React frontend in `apps/fe` plus a Robodev backend under **`robodev/`** (`robodev/database.ts` + `robodev/api/**/*.ts` + `robodev/hooks/auth.ts` using `@robodev-ai/sdk`). There is no Expo / mobile app in this starter. End-user auth is reserved on the project host at `/api/user/*`. There is no in-browser fake backend.
 
-`robodev deploy` from this root uploads schema and APIs. It does not host the Povio SPA. Run the UI with bun in `apps/fe`.
+`robodev deploy` from this root uploads schema, APIs, and (when `.robodev` has a `frontend` block) the local Vite build as a hosted static SPA. Use bun in `apps/fe` to iterate locally.
 
 Shared AI rules and skills are authored in `.rulesync/`. Generated files for Codex, Claude Code, and Cursor are local outputs and should be regenerated with `bun rules:gen`.
 

package/templates/auth-chat/apps/fe/package.json

@@ -5,7 +5,7 @@
   "description": "Auth chat starter frontend",
   "type": "module",
   "scripts": {
-    "dev": "bunx --bun vite",
+    "dev": "vite --host",
     "build": "bun run openapi:gen && bunx --bun vite build",
     "clean": "rimraf dist src/openapi",
     "lint": "oxlint --type-aware . ../../robodev/api ../../robodev/database.ts --fix",

package/templates/auth-chat/package.json

@@ -8,10 +8,10 @@
     "rules:gen": "rulesync generate"
   },
   "dependencies": {
-    "@robodev-ai/sdk": "^0.8.0"
+    "@robodev-ai/sdk": "^0.10.0"
   },
   "devDependencies": {
-    "robodev": "^0.29.0",
+    "robodev": "^0.30.0",
     "rulesync": "^8.18.0",
     "typescript": "^5.9.2"
   }

package/templates/backend/package.json

@@ -7,10 +7,10 @@
     "deploy": "robodev deploy"
   },
   "dependencies": {
-    "@robodev-ai/sdk": "^0.8.0"
+    "@robodev-ai/sdk": "^0.10.0"
   },
   "devDependencies": {
-    "robodev": "^0.29.0",
+    "robodev": "^0.30.0",
     "typescript": "^5.9.2"
   }
 }

package/templates/empty/package.json

@@ -7,10 +7,10 @@
     "deploy": "robodev deploy"
   },
   "dependencies": {
-    "@robodev-ai/sdk": "^0.8.0"
+    "@robodev-ai/sdk": "^0.10.0"
   },
   "devDependencies": {
-    "robodev": "^0.29.0",
+    "robodev": "^0.30.0",
     "typescript": "^5.9.2"
   }
 }

package/templates/marketplace/.rulesync/rules/project-overview.md

@@ -13,7 +13,7 @@ cursor:
 
 This project is a Vite React frontend in `apps/fe` plus a Robodev backend under **`robodev/`** (`robodev/database.ts` + `robodev/api/**/*.ts` using `@robodev-ai/sdk`). There is no Expo / mobile app in this starter. End-user auth is reserved on the project host at `/api/user/*`. There is no in-browser fake backend.
 
-`robodev deploy` from this root uploads schema and APIs. It does not host the Povio SPA. Run the UI with bun in `apps/fe`.
+`robodev deploy` from this root uploads schema, APIs, and (when `.robodev` has a `frontend` block) the local Vite build as a hosted static SPA. Use bun in `apps/fe` to iterate locally.
 
 Shared AI rules and skills are authored in `.rulesync/`. Generated files for Codex, Claude Code, and Cursor are local outputs and should be regenerated with `bun rules:gen`.
 

package/templates/marketplace/apps/fe/package.json

@@ -5,7 +5,7 @@
   "description": "Marketplace starter frontend",
   "type": "module",
   "scripts": {
-    "dev": "bunx --bun vite",
+    "dev": "vite --host",
     "build": "bun run openapi:gen && bunx --bun vite build",
     "clean": "rimraf dist src/openapi",
     "lint": "oxlint --type-aware . ../../robodev/api ../../robodev/database.ts --fix",

package/templates/marketplace/package.json

@@ -8,10 +8,10 @@
     "rules:gen": "rulesync generate"
   },
   "dependencies": {
-    "@robodev-ai/sdk": "^0.8.0"
+    "@robodev-ai/sdk": "^0.10.0"
   },
   "devDependencies": {
-    "robodev": "^0.29.0",
+    "robodev": "^0.30.0",
     "rulesync": "^8.18.0",
     "typescript": "^5.9.2"
   }

package/templates/space/.rulesync/rules/project-overview.md

@@ -13,7 +13,7 @@ cursor:
 
 This project is a Vite React frontend in `apps/fe` plus a Robodev backend under **`robodev/`** (`robodev/database.ts` + `robodev/api/**/*.ts` using `@robodev-ai/sdk`). There is no Expo / mobile app in this starter. End-user auth is reserved on the project host at `/api/user/*`. There is no in-browser fake backend.
 
-`robodev deploy` from this root uploads schema and APIs. It does not host the Povio SPA. Run the UI with bun in `apps/fe`.
+`robodev deploy` from this root uploads schema, APIs, and (when `.robodev` has a `frontend` block) the local Vite build as a hosted static SPA. Use bun in `apps/fe` to iterate locally.
 
 Shared AI rules and skills are authored in `.rulesync/`. Generated files for Codex, Claude Code, and Cursor are local outputs and should be regenerated with `bun rules:gen`.
 

package/templates/space/apps/fe/package.json

@@ -5,7 +5,7 @@
   "description": "Space starter frontend",
   "type": "module",
   "scripts": {
-    "dev": "bunx --bun vite",
+    "dev": "vite --host",
     "build": "bun run openapi:gen && bunx --bun vite build",
     "clean": "rimraf dist src/openapi",
     "lint": "oxlint --type-aware . ../../robodev/api ../../robodev/database.ts --fix",

package/templates/space/package.json

@@ -8,10 +8,10 @@
     "rules:gen": "rulesync generate"
   },
   "dependencies": {
-    "@robodev-ai/sdk": "^0.8.0"
+    "@robodev-ai/sdk": "^0.10.0"
   },
   "devDependencies": {
-    "robodev": "^0.29.0",
+    "robodev": "^0.30.0",
     "rulesync": "^8.18.0",
     "typescript": "^5.9.2"
   }