sh3-core 0.2.0 → 0.3.1

package/dist/artifact.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Static manifest file included in every SH3 artifact directory.
+ * Generated at build time from the shard/app manifest in code.
+ * This is the single source of truth for package metadata —
+ * registries, servers, and install tools read this instead of
+ * requiring manual metadata entry.
+ */
+export interface ArtifactManifest {
+    /** Unique package identifier. Matches the shard/app manifest id. */
+    id: string;
+    /** Whether this is a shard or app (or both via combo bundle). */
+    type: 'shard' | 'app' | 'combo';
+    /** Human-readable display name. */
+    label: string;
+    /** Version string (semver). */
+    version: string;
+    /** SH3 contract version this artifact was built against. */
+    contractVersion: number;
+    /** Relative path to the client bundle within the artifact directory. Omit if server-only. */
+    client?: string;
+    /** Relative path to the server bundle within the artifact directory. Omit if client-only. */
+    server?: string;
+    /** Short description (one or two sentences). */
+    description?: string;
+    /** Author name. */
+    author?: string;
+    /** Package dependencies. */
+    requires?: Array<{
+        id: string;
+        versionRange: string;
+    }>;
+}

package/dist/artifact.js

@@ -0,0 +1 @@
+export {};

package/dist/build.d.ts

@@ -17,6 +17,7 @@
  *   });
  */
 import type { Plugin } from 'vite';
+import type { ArtifactManifest } from './artifact';
 /**
  * Vite plugin that inlines extracted CSS into the JS bundle.
  *
@@ -27,3 +28,22 @@ import type { Plugin } from 'vite';
  * as a self-executing `<style>` injector, and delete the CSS files.
  */
 export declare function sh3CssInline(): Plugin;
+/**
+ * Options for the sh3Artifact plugin.
+ */
+export interface Sh3ArtifactOptions {
+    /** Path to pre-built server bundle. If provided, gets copied as server.js. */
+    serverEntry?: string;
+    /** Override manifest fields not extractable from code (description, author, requires). */
+    manifest?: Partial<Pick<ArtifactManifest, 'description' | 'author' | 'requires'>>;
+}
+/**
+ * Vite plugin that produces a distributable artifact directory after build.
+ *
+ * After Vite's lib build completes, this plugin:
+ *   1. Finds the entry chunk and renames it to client.js
+ *   2. Optionally copies a pre-built server bundle as server.js
+ *   3. Extracts manifest fields (id, label, version, type) from the source
+ *   4. Writes manifest.json alongside the bundles
+ */
+export declare function sh3Artifact(options?: Sh3ArtifactOptions): Plugin;

package/dist/build.js

@@ -16,7 +16,7 @@
  *     },
  *   });
  */
-import { readFileSync, writeFileSync, unlinkSync, readdirSync } from 'node:fs';
+import { readFileSync, writeFileSync, unlinkSync, readdirSync, copyFileSync, existsSync } from 'node:fs';
 import { join } from 'node:path';
 /**
  * Vite plugin that inlines extracted CSS into the JS bundle.
@@ -83,3 +83,80 @@ export function sh3CssInline() {
         },
     };
 }
+/**
+ * Vite plugin that produces a distributable artifact directory after build.
+ *
+ * After Vite's lib build completes, this plugin:
+ *   1. Finds the entry chunk and renames it to client.js
+ *   2. Optionally copies a pre-built server bundle as server.js
+ *   3. Extracts manifest fields (id, label, version, type) from the source
+ *   4. Writes manifest.json alongside the bundles
+ */
+export function sh3Artifact(options = {}) {
+    let outDir = '';
+    let entryFileName = '';
+    return {
+        name: 'sh3-artifact',
+        apply: 'build',
+        enforce: 'post',
+        configResolved(config) {
+            outDir = config.build.outDir;
+        },
+        generateBundle(_outputOptions, bundle) {
+            // Find the entry chunk — the one Rollup marks as isEntry.
+            for (const [fileName, chunk] of Object.entries(bundle)) {
+                if (chunk.type === 'chunk' && chunk.isEntry) {
+                    entryFileName = fileName;
+                    break;
+                }
+            }
+        },
+        async closeBundle() {
+            var _a;
+            if (!entryFileName)
+                return;
+            const clientSrc = join(outDir, entryFileName);
+            const clientDest = join(outDir, 'client.js');
+            // Read source before potentially overwriting.
+            let source = '';
+            try {
+                source = readFileSync(clientSrc, 'utf-8');
+            }
+            catch (_b) {
+                console.warn('[sh3-artifact] Could not read entry chunk:', clientSrc);
+                return;
+            }
+            // Rename entry chunk to client.js (only if names differ).
+            if (clientSrc !== clientDest) {
+                writeFileSync(clientDest, source);
+                unlinkSync(clientSrc);
+            }
+            // --- Extract manifest fields via regex ---
+            const extract = (pattern) => {
+                const m = source.match(pattern);
+                return m ? m[1] : '';
+            };
+            const id = extract(/\bid\s*:\s*["']([^"']+)["']/);
+            const label = extract(/\blabel\s*:\s*["']([^"']+)["']/);
+            const version = extract(/\bversion\s*:\s*["']([^"']+)["']/);
+            const hasShard = /\bviews\s*:\s*\[/.test(source);
+            const hasApp = /\brequiredShards\s*:\s*\[/.test(source);
+            const type = hasShard && hasApp ? 'combo' : hasApp ? 'app' : 'shard';
+            // --- Optional server bundle ---
+            let hasServer = false;
+            if (options.serverEntry && existsSync(options.serverEntry)) {
+                copyFileSync(options.serverEntry, join(outDir, 'server.js'));
+                hasServer = true;
+            }
+            // --- Write manifest.json ---
+            const manifest = Object.assign(Object.assign({ id: id || 'unknown', type, label: label || id || 'unknown', version: version || '0.0.0', contractVersion: 1, client: 'client.js' }, (hasServer ? { server: 'server.js' } : {})), ((_a = options.manifest) !== null && _a !== void 0 ? _a : {}));
+            writeFileSync(join(outDir, 'manifest.json'), JSON.stringify(manifest, null, 2) + '\n');
+            // --- Log summary ---
+            const files = ['manifest.json', 'client.js'];
+            if (hasServer)
+                files.push('server.js');
+            console.log(`[sh3-artifact] ${manifest.id}@${manifest.version} (${manifest.type}) → ${outDir}`);
+            console.log(`[sh3-artifact] files: ${files.join(', ')}`);
+        },
+    };
+}

package/dist/createShell.d.ts

@@ -9,21 +9,14 @@ export interface ShellConfig {
     /** Additional apps to register */
     apps?: App[];
     /**
-     * Packages to pre-install at boot if not already present in IndexedDB.
-     * Used for environments that ship certain packages out of the box
-     * (e.g. a registry host pre-includes sh3-registry).
+     * Packages discovered by the server at boot.
+     * The frontend fetches this list from /api/packages and passes it here.
      */
-    preinstall?: Array<{
-        /** Path to the client bundle file (relative to host root or absolute URL). */
-        path: string;
-        /** Path to the server bundle file (optional, for shards with server counterparts). */
-        serverPath?: string;
-        /** Package metadata for the install record. */
-        meta: {
-            id: string;
-            type: 'shard' | 'app';
-            version: string;
-        };
+    discoveredPackages?: Array<{
+        id: string;
+        type: string;
+        version: string;
+        bundleUrl: string;
     }>;
     /** Mount target — CSS selector or element (defaults to '#app') */
     target?: string | HTMLElement;

package/dist/createShell.js

@@ -8,7 +8,7 @@
  */
 import { mount } from 'svelte';
 import { Shell } from './index';
-import { registerShard, registerApp, bootstrap, __setBackend, setLocalOwner, installPackage, listInstalledPackages, } from './host';
+import { registerShard, registerApp, bootstrap, __setBackend, setLocalOwner, } from './host';
 import { resolvePlatform } from './platform/index';
 export async function createShell(config) {
     var _a, _b;
@@ -23,57 +23,26 @@ export async function createShell(config) {
     if (platform.localOwner) {
         setLocalOwner();
     }
-    // 1b. Pre-install packages that this host ships out of the box.
-    if ((_a = config === null || config === void 0 ? void 0 : config.preinstall) === null || _a === void 0 ? void 0 : _a.length) {
-        const installed = await listInstalledPackages();
-        const installedIds = new Set(installed.map((p) => p.id));
-        for (const pkg of config.preinstall) {
-            if (installedIds.has(pkg.meta.id))
-                continue;
+    // 1b. Load server-discovered packages (fetched by frontend from /api/packages).
+    if ((_a = config === null || config === void 0 ? void 0 : config.discoveredPackages) === null || _a === void 0 ? void 0 : _a.length) {
+        const { loadBundleModule } = await import('./registry/loader');
+        for (const pkg of config.discoveredPackages) {
             try {
-                const res = await fetch(pkg.path);
+                const res = await fetch(pkg.bundleUrl);
                 if (!res.ok) {
-                    console.warn(`[sh3] Pre-install fetch failed for "${pkg.meta.id}": HTTP ${res.status}`);
+                    console.warn(`[sh3] Failed to fetch discovered package "${pkg.id}": HTTP ${res.status}`);
                     continue;
                 }
-                const bundle = await res.arrayBuffer();
-                const result = await installPackage(bundle, {
-                    id: pkg.meta.id,
-                    type: pkg.meta.type,
-                    version: pkg.meta.version,
-                    contractVersion: '1',
-                    sourceRegistry: 'local',
-                    integrity: '',
-                    hasServerBundle: !!pkg.serverPath,
-                });
-                if (!result.success) {
-                    console.warn(`[sh3] Pre-install failed for "${pkg.meta.id}":`, result.error);
-                    continue;
-                }
-                // Push server bundle if present
-                if (pkg.serverPath) {
-                    try {
-                        const serverRes = await fetch(pkg.serverPath);
-                        if (serverRes.ok) {
-                            const serverBytes = await serverRes.arrayBuffer();
-                            const form = new FormData();
-                            form.append('shardId', pkg.meta.id);
-                            form.append('bundle', new Blob([serverBytes], { type: 'application/javascript' }), 'bundle.js');
-                            form.append('manifest', JSON.stringify(pkg.meta));
-                            await fetch('/api/server-shards/install', {
-                                method: 'POST',
-                                body: form,
-                            });
-                        }
-                    }
-                    catch (_c) {
-                        console.warn(`[sh3] Server bundle push failed for pre-install "${pkg.meta.id}"`);
-                    }
-                }
-                console.log(`[sh3] Pre-installed: ${pkg.meta.id}`);
+                const bytes = await res.arrayBuffer();
+                const loaded = await loadBundleModule(bytes);
+                for (const s of loaded.shards)
+                    registerShard(s);
+                for (const a of loaded.apps)
+                    registerApp(a);
+                console.log(`[sh3] Loaded discovered package: ${pkg.id}`);
             }
             catch (err) {
-                console.warn(`[sh3] Pre-install error for "${pkg.meta.id}":`, err instanceof Error ? err.message : err);
+                console.warn(`[sh3] Failed to load discovered package "${pkg.id}":`, err);
             }
         }
     }

package/dist/diagnostic/DiagnosticPanel.svelte

@@ -24,6 +24,7 @@
   const layout = $derived(inspectActiveLayout());
   const regShards = $derived(Array.from(registeredShards.values()));
   const actShards = $derived(Array.from(activeShards.keys()));
+
 </script>
 
 <div class="diagnostic">
@@ -68,6 +69,7 @@
       {/each}
     </ul>
   </section>
+
 </div>
 
 <style>

package/dist/diagnostic/DiagnosticRoutes.svelte

@@ -0,0 +1,99 @@
+<script lang="ts">
+  /*
+   * Diagnostic routes view — lists all server API routes.
+   *
+   * Fetches the route table from GET /api/routes. GET routes render
+   * as clickable links for quick testing of parameterless endpoints.
+   */
+
+  interface ApiRoute { method: string; path: string; }
+  let routes: ApiRoute[] = $state([]);
+  let error: string | null = $state(null);
+
+  async function fetchRoutes() {
+    try {
+      const res = await fetch('/api/routes');
+      if (!res.ok) { error = `${res.status}`; return; }
+      routes = await res.json();
+      error = null;
+    } catch {
+      error = 'unavailable';
+    }
+  }
+
+  fetchRoutes();
+</script>
+
+<div class="diagnostic">
+  <h2>API Routes</h2>
+
+  {#if error}
+    <p class="muted">Server not reachable or route introspection unavailable ({error}).</p>
+  {:else}
+    <p class="muted">{routes.length} unique routes</p>
+    <ul>
+      {#each routes as route}
+        <li>
+          <span class="method" class:get={route.method === 'GET'}>{route.method}</span>
+          {#if route.method === 'GET'}
+            <a href={route.path} target="_blank" rel="noopener">{route.path}</a>
+          {:else}
+            <span class="path">{route.path}</span>
+          {/if}
+        </li>
+      {/each}
+    </ul>
+  {/if}
+</div>
+
+<style>
+  .diagnostic {
+    position: absolute;
+    inset: 0;
+    padding: 12px 16px;
+    overflow: auto;
+    background: var(--shell-bg);
+    color: var(--shell-fg);
+    font-family: ui-monospace, SFMono-Regular, Menlo, monospace;
+    font-size: 12px;
+  }
+  h2 {
+    margin: 0 0 12px;
+    color: var(--shell-accent);
+    font-size: 14px;
+  }
+  .muted {
+    color: var(--shell-fg-muted);
+    margin: 0 0 8px;
+  }
+  ul {
+    margin: 0;
+    padding: 0;
+    list-style: none;
+  }
+  li {
+    margin: 0;
+    padding: 2px 0;
+    display: flex;
+    align-items: baseline;
+    gap: 8px;
+  }
+  .method {
+    min-width: 6ch;
+    color: var(--shell-fg-muted);
+    flex-shrink: 0;
+  }
+  .method.get {
+    color: var(--shell-accent);
+  }
+  a {
+    color: var(--shell-accent);
+    text-decoration: none;
+  }
+  a:hover {
+    text-decoration: underline;
+  }
+  .path {
+    color: var(--shell-fg);
+  }
+</style>

package/dist/diagnostic/DiagnosticRoutes.svelte.d.ts

@@ -0,0 +1,3 @@
+declare const DiagnosticRoutes: import("svelte").Component<Record<string, never>, {}, "">;
+type DiagnosticRoutes = ReturnType<typeof DiagnosticRoutes>;
+export default DiagnosticRoutes;

package/dist/diagnostic/diagnosticApp.js

@@ -19,6 +19,7 @@ export const diagnosticApp = {
         activeTab: 0,
         tabs: [
             { slotId: 'diagnostic.main', viewId: 'diagnostic:panel', label: 'Diagnostic' },
+            { slotId: 'diagnostic.routes', viewId: 'diagnostic:routes', label: 'API Routes' },
         ],
     },
 };

package/dist/diagnostic/diagnosticShard.svelte.js

@@ -25,6 +25,7 @@
  */
 import { mount, unmount } from 'svelte';
 import DiagnosticPanel from './DiagnosticPanel.svelte';
+import DiagnosticRoutes from './DiagnosticRoutes.svelte';
 import DiagnosticPromptModal from './DiagnosticPromptModal.svelte';
 import { shell, getActiveApp, spliceIntoActiveLayout, inspectActiveLayout, } from '../api';
 export const diagnosticShard = {
@@ -32,7 +33,10 @@ export const diagnosticShard = {
         id: 'diagnostic',
         label: 'Diagnostic',
         version: '0.1.0',
-        views: [{ id: 'diagnostic:panel', label: 'Diagnostic' }],
+        views: [
+            { id: 'diagnostic:panel', label: 'Diagnostic' },
+            { id: 'diagnostic:routes', label: 'API Routes' },
+        ],
     },
     activate(ctx) {
         const factory = {
@@ -46,6 +50,17 @@ export const diagnosticShard = {
             },
         };
         ctx.registerView('diagnostic:panel', factory);
+        const routesFactory = {
+            mount(container, _context) {
+                const instance = mount(DiagnosticRoutes, { target: container });
+                return {
+                    unmount() {
+                        unmount(instance);
+                    },
+                };
+            },
+        };
+        ctx.registerView('diagnostic:routes', routesFactory);
     },
     autostart(ctx) {
         const state = ctx.state({

package/dist/index.d.ts

@@ -1,2 +1,3 @@
 export * from './api';
 export { default as Shell } from './Shell.svelte';
+export type { ArtifactManifest } from './artifact';

package/dist/server-shard/types.d.ts

@@ -3,7 +3,7 @@
  *
  * A server shard is the optional backend counterpart to a client shard.
  * It runs in Node inside sh3-server and declares routes that are mounted
- * under `/s/<shard-id>/`. Server shards have full Node access — filesystem,
+ * under `/api/<shard-id>/`. Server shards have full Node access — filesystem,
  * child_process, network, etc. — and are trusted by the admin who installed
  * them.
  *
@@ -39,8 +39,8 @@ export interface ServerShard {
     id: string;
     /**
      * Called once at mount time. Register Hono routes on the provided router.
-     * Routes are relative to `/s/<shard-id>/` — e.g. `router.get('/data', ...)`
-     * becomes `GET /s/<shard-id>/data`.
+     * Routes are relative to `/api/<shard-id>/` — e.g. `router.get('/data', ...)`
+     * becomes `GET /api/<shard-id>/data`.
      *
      * May be async if the shard needs to initialise resources before serving.
      */

package/dist/server-shard/types.js

@@ -3,7 +3,7 @@
  *
  * A server shard is the optional backend counterpart to a client shard.
  * It runs in Node inside sh3-server and declares routes that are mounted
- * under `/s/<shard-id>/`. Server shards have full Node access — filesystem,
+ * under `/api/<shard-id>/`. Server shards have full Node access — filesystem,
  * child_process, network, etc. — and are trusted by the admin who installed
  * them.
  *

package/dist/shards/types.d.ts

@@ -98,7 +98,7 @@ export interface ShardManifest {
     /**
      * Optional filename of a server-side bundle for this shard. When present,
      * sh3-server loads the bundle at boot and mounts its routes at
-     * `/s/<shard-id>/`. The server bundle runs in Node with full access.
+     * `/api/<shard-id>/`. The server bundle runs in Node with full access.
      * Only relevant for shards installed via the package store; framework-
      * shipped shards do not use this field.
      */

package/dist/shell-shard/ShellHome.svelte

@@ -97,7 +97,7 @@
     <section class="shell-home-section">
       <h2 class="shell-home-section-title">Admin Mode</h2>
       <p class="shell-home-elevate-hint">
-        Enter an API key to access admin apps like the Package Store.
+        Elevate Permissions
       </p>
       <form class="shell-home-elevate-form" onsubmit={(e) => { e.preventDefault(); handleElevate(); }}>
         <input

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sh3-core",
-  "version": "0.2.0",
+  "version": "0.3.1",
   "type": "module",
   "files": [
     "dist"