sh3-core 0.6.0

package/dist/app/admin/SystemView.svelte

@@ -0,0 +1,73 @@
+<script lang="ts">
+  /**
+   * Admin System view — server status and restart.
+   */
+
+  let version = $state('...');
+  let restarting = $state(false);
+  let restartError = $state<string | null>(null);
+
+  async function fetchVersion() {
+    try {
+      const res = await fetch('/api/version');
+      if (res.ok) {
+        const body = await res.json();
+        version = body.version;
+      }
+    } catch { /* ignore */ }
+  }
+
+  async function restart() {
+    restarting = true;
+    restartError = null;
+    try {
+      const res = await fetch('/api/admin/restart', {
+        method: 'POST',
+        credentials: 'include',
+      });
+      if (!res.ok) {
+        const body = await res.json().catch(() => ({}));
+        restartError = body.error || 'Restart failed';
+        restarting = false;
+      }
+      // If 202, server will restart — page will reconnect
+    } catch {
+      restartError = 'Network error';
+      restarting = false;
+    }
+  }
+
+  fetchVersion();
+</script>
+
+<div class="admin-system">
+  <h2>System</h2>
+
+  <div class="admin-system-info">
+    <div class="admin-system-row">
+      <span class="admin-system-label">Server version</span>
+      <span>{version}</span>
+    </div>
+  </div>
+
+  <div class="admin-system-actions">
+    <button type="button" class="admin-btn-danger" onclick={restart} disabled={restarting}>
+      {restarting ? 'Restarting...' : 'Restart server'}
+    </button>
+    {#if restartError}
+      <div class="admin-error">{restartError}</div>
+    {/if}
+  </div>
+</div>
+
+<style>
+  .admin-system { padding: 24px; font-family: system-ui, sans-serif; color: var(--shell-fg); }
+  .admin-system h2 { margin: 0 0 16px; font-size: 18px; }
+  .admin-system-info { margin-bottom: 24px; }
+  .admin-system-row { display: flex; gap: 12px; padding: 8px 0; border-bottom: 1px solid var(--shell-border, #3a3a5c); font-size: 13px; }
+  .admin-system-label { color: var(--shell-fg-subtle); min-width: 140px; }
+  .admin-system-actions { display: flex; flex-direction: column; gap: 8px; align-items: flex-start; }
+  .admin-btn-danger { padding: 8px 16px; background: transparent; color: var(--shell-error, #d32f2f); border: 1px solid var(--shell-error, #d32f2f); font-weight: 600; }
+  .admin-btn-danger:disabled { opacity: 0.6; cursor: not-allowed; }
+  .admin-error { color: var(--shell-error, #d32f2f); font-size: 13px; }
+</style>

package/dist/app/admin/SystemView.svelte.d.ts

@@ -0,0 +1,3 @@
+declare const SystemView: import("svelte").Component<Record<string, never>, {}, "">;
+type SystemView = ReturnType<typeof SystemView>;
+export default SystemView;

package/dist/app/admin/UsersView.svelte

@@ -0,0 +1,188 @@
+<script lang="ts">
+  /**
+   * Admin Users view — list, create, edit, delete users.
+   */
+
+  import type { AuthUser } from '../../auth/types';
+
+  let users = $state<AuthUser[]>([]);
+  let loading = $state(true);
+  let error = $state<string | null>(null);
+
+  // Create form
+  let showCreate = $state(false);
+  let newUsername = $state('');
+  let newDisplayName = $state('');
+  let newPassword = $state('');
+  let newRole = $state<'admin' | 'user'>('user');
+  let createError = $state<string | null>(null);
+
+  // Edit state
+  let editingId = $state<string | null>(null);
+  let editDisplayName = $state('');
+  let editRole = $state<'admin' | 'user'>('user');
+  let editPassword = $state('');
+
+  async function fetchUsers() {
+    loading = true;
+    error = null;
+    try {
+      const res = await fetch('/api/admin/users', { credentials: 'include' });
+      if (!res.ok) throw new Error('Failed to fetch users');
+      users = await res.json();
+    } catch (err) {
+      error = err instanceof Error ? err.message : 'Failed to load users';
+    } finally {
+      loading = false;
+    }
+  }
+
+  async function createUser() {
+    createError = null;
+    try {
+      const res = await fetch('/api/admin/users', {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        credentials: 'include',
+        body: JSON.stringify({
+          username: newUsername,
+          displayName: newDisplayName || newUsername,
+          password: newPassword,
+          role: newRole,
+        }),
+      });
+      if (!res.ok) {
+        const body = await res.json().catch(() => ({}));
+        createError = body.error || 'Failed to create user';
+        return;
+      }
+      newUsername = '';
+      newDisplayName = '';
+      newPassword = '';
+      newRole = 'user';
+      showCreate = false;
+      await fetchUsers();
+    } catch {
+      createError = 'Network error';
+    }
+  }
+
+  function startEdit(user: AuthUser) {
+    editingId = user.id;
+    editDisplayName = user.displayName;
+    editRole = user.role;
+    editPassword = '';
+  }
+
+  async function saveEdit() {
+    if (!editingId) return;
+    const patch: Record<string, unknown> = {
+      displayName: editDisplayName,
+      role: editRole,
+    };
+    if (editPassword.trim()) patch.password = editPassword;
+    try {
+      const res = await fetch(`/api/admin/users/${editingId}`, {
+        method: 'PUT',
+        headers: { 'Content-Type': 'application/json' },
+        credentials: 'include',
+        body: JSON.stringify(patch),
+      });
+      if (!res.ok) return;
+      editingId = null;
+      await fetchUsers();
+    } catch { /* ignore */ }
+  }
+
+  async function deleteUser(id: string) {
+    try {
+      await fetch(`/api/admin/users/${id}`, {
+        method: 'DELETE',
+        credentials: 'include',
+      });
+      await fetchUsers();
+    } catch { /* ignore */ }
+  }
+
+  fetchUsers();
+</script>
+
+<div class="admin-users">
+  <div class="admin-users-header">
+    <h2>Users</h2>
+    <button type="button" class="admin-btn" onclick={() => { showCreate = !showCreate; }}>
+      {showCreate ? 'Cancel' : 'New user'}
+    </button>
+  </div>
+
+  {#if showCreate}
+    <form class="admin-create-form" onsubmit={(e) => { e.preventDefault(); createUser(); }}>
+      <input class="admin-input" type="text" placeholder="Username" bind:value={newUsername} />
+      <input class="admin-input" type="text" placeholder="Display name" bind:value={newDisplayName} />
+      <input class="admin-input" type="password" placeholder="Password" bind:value={newPassword} />
+      <select class="admin-input" bind:value={newRole}>
+        <option value="user">User</option>
+        <option value="admin">Admin</option>
+      </select>
+      <button type="submit" class="admin-btn" disabled={!newUsername.trim() || !newPassword.trim()}>Create</button>
+      {#if createError}<div class="admin-error">{createError}</div>{/if}
+    </form>
+  {/if}
+
+  {#if loading}
+    <p class="admin-muted">Loading...</p>
+  {:else if error}
+    <p class="admin-error">{error}</p>
+  {:else}
+    <ul class="admin-user-list">
+      {#each users as user (user.id)}
+        <li class="admin-user-item">
+          {#if editingId === user.id}
+            <form class="admin-edit-form" onsubmit={(e) => { e.preventDefault(); saveEdit(); }}>
+              <input class="admin-input" type="text" bind:value={editDisplayName} />
+              <input class="admin-input" type="password" placeholder="New password (leave empty to keep)" bind:value={editPassword} />
+              <select class="admin-input" bind:value={editRole}>
+                <option value="user">User</option>
+                <option value="admin">Admin</option>
+              </select>
+              <div class="admin-edit-actions">
+                <button type="submit" class="admin-btn">Save</button>
+                <button type="button" class="admin-btn-secondary" onclick={() => { editingId = null; }}>Cancel</button>
+              </div>
+            </form>
+          {:else}
+            <div class="admin-user-info">
+              <span class="admin-user-name">{user.displayName}</span>
+              <span class="admin-user-meta">{user.username} · {user.role}</span>
+            </div>
+            <div class="admin-user-actions">
+              <button type="button" class="admin-btn-secondary" onclick={() => startEdit(user)}>Edit</button>
+              <button type="button" class="admin-btn-danger" onclick={() => deleteUser(user.id)}>Delete</button>
+            </div>
+          {/if}
+        </li>
+      {/each}
+    </ul>
+  {/if}
+</div>
+
+<style>
+  .admin-users { padding: 24px; font-family: system-ui, sans-serif; color: var(--shell-fg); }
+  .admin-users-header { display: flex; justify-content: space-between; align-items: center; margin-bottom: 16px; }
+  .admin-users-header h2 { margin: 0; font-size: 18px; }
+  .admin-create-form, .admin-edit-form { display: flex; flex-direction: column; gap: 8px; margin-bottom: 16px; max-width: 400px; }
+  .admin-input { padding: 8px 12px; background: var(--shell-bg, #1a1a2e); color: var(--shell-fg); border: 1px solid var(--shell-border, #3a3a5c); border-radius: var(--shell-radius, 6px); font-size: 13px; }
+  .admin-btn { font-weight: 600; font-size: 13px; }
+  .admin-btn:disabled { opacity: 0.6; cursor: not-allowed; }
+  .admin-btn-secondary { background: transparent; color: var(--shell-fg-subtle); border: 1px solid var(--shell-border); font-size: 12px; }
+  .admin-btn-danger { background: transparent; color: var(--shell-error, #d32f2f); border: 1px solid var(--shell-error, #d32f2f); font-size: 12px; }
+  .admin-user-list { list-style: none; margin: 0; padding: 0; display: flex; flex-direction: column; gap: 8px; }
+  .admin-user-item { display: flex; justify-content: space-between; align-items: center; padding: 12px 16px; background: var(--shell-bg-elevated, #252540); border: 1px solid var(--shell-border, #3a3a5c); border-radius: var(--shell-radius, 6px); }
+  .admin-user-info { display: flex; flex-direction: column; gap: 2px; }
+  .admin-user-name { font-weight: 600; }
+  .admin-user-meta { font-size: 11px; color: var(--shell-fg-subtle); }
+  .admin-user-actions { display: flex; gap: 6px; }
+  .admin-edit-actions { display: flex; gap: 6px; }
+  .admin-error { color: var(--shell-error, #d32f2f); font-size: 13px; }
+  .admin-muted { color: var(--shell-fg-muted); font-style: italic; }
+</style>

package/dist/app/admin/UsersView.svelte.d.ts

@@ -0,0 +1,3 @@
+declare const UsersView: import("svelte").Component<Record<string, never>, {}, "">;
+type UsersView = ReturnType<typeof UsersView>;
+export default UsersView;

package/dist/app/admin/adminApp.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Built-in Admin app — user management, auth settings, and system controls.
+ * Framework-shipped: registered in host.ts during bootstrap.
+ * Admin-gated via manifest flag (ADR-011).
+ */
+import type { App } from '../../apps/types';
+export declare const adminApp: App;

package/dist/app/admin/adminApp.js

@@ -0,0 +1,25 @@
+/**
+ * Built-in Admin app — user management, auth settings, and system controls.
+ * Framework-shipped: registered in host.ts during bootstrap.
+ * Admin-gated via manifest flag (ADR-011).
+ */
+export const adminApp = {
+    manifest: {
+        id: 'sh3-admin-app',
+        label: 'Admin',
+        version: '0.1.0',
+        requiredShards: ['sh3-admin'],
+        layoutVersion: 1,
+        admin: true,
+    },
+    initialLayout: {
+        type: 'tabs',
+        activeTab: 0,
+        tabs: [
+            { slotId: 'admin.users', viewId: 'sh3-admin:users', label: 'Users' },
+            { slotId: 'admin.auth', viewId: 'sh3-admin:auth', label: 'Auth' },
+            { slotId: 'admin.system', viewId: 'sh3-admin:system', label: 'System' },
+            { slotId: 'admin.keys', viewId: 'sh3-admin:keys', label: 'Keys' },
+        ],
+    },
+};

package/dist/app/admin/adminShard.svelte.d.ts

@@ -0,0 +1,4 @@
+import type { Shard } from '../../shards/types';
+/** Module-level server URL, set during activate. */
+export declare let adminServerUrl: string;
+export declare const adminShard: Shard;

package/dist/app/admin/adminShard.svelte.js

@@ -0,0 +1,62 @@
+/*
+ * Admin shard — framework-shipped shard for user management,
+ * auth settings, system controls, and API key management.
+ *
+ * Contributes four views:
+ *   - `sh3-admin:users`  — user CRUD
+ *   - `sh3-admin:auth`   — auth settings toggles
+ *   - `sh3-admin:system` — restart + status
+ *   - `sh3-admin:keys`   — API key lifecycle
+ *
+ * `.svelte.ts` because mounting Svelte components requires rune access.
+ */
+import { mount, unmount } from 'svelte';
+import UsersView from './UsersView.svelte';
+import AuthSettingsView from './AuthSettingsView.svelte';
+import SystemView from './SystemView.svelte';
+import ApiKeysView from './ApiKeysView.svelte';
+/** Module-level server URL, set during activate. */
+export let adminServerUrl = '';
+export const adminShard = {
+    manifest: {
+        id: 'sh3-admin',
+        label: 'Admin',
+        version: '0.1.0',
+        views: [
+            { id: 'sh3-admin:users', label: 'Users' },
+            { id: 'sh3-admin:auth', label: 'Auth Settings' },
+            { id: 'sh3-admin:system', label: 'System' },
+            { id: 'sh3-admin:keys', label: 'API Keys' },
+        ],
+    },
+    activate(ctx) {
+        const usersFactory = {
+            mount(container, _context) {
+                const instance = mount(UsersView, { target: container });
+                return { unmount() { unmount(instance); } };
+            },
+        };
+        const authFactory = {
+            mount(container, _context) {
+                const instance = mount(AuthSettingsView, { target: container });
+                return { unmount() { unmount(instance); } };
+            },
+        };
+        const systemFactory = {
+            mount(container, _context) {
+                const instance = mount(SystemView, { target: container });
+                return { unmount() { unmount(instance); } };
+            },
+        };
+        const keysFactory = {
+            mount(container, _context) {
+                const instance = mount(ApiKeysView, { target: container });
+                return { unmount() { unmount(instance); } };
+            },
+        };
+        ctx.registerView('sh3-admin:users', usersFactory);
+        ctx.registerView('sh3-admin:auth', authFactory);
+        ctx.registerView('sh3-admin:system', systemFactory);
+        ctx.registerView('sh3-admin:keys', keysFactory);
+    },
+};

package/dist/app/store/InstalledView.svelte

@@ -0,0 +1,246 @@
+<script lang="ts">
+  /*
+   * InstalledView — lists installed packages with uninstall capability.
+   *
+   * Simpler than the browse view: a flat list of installed packages with
+   * metadata (type, version, contract version, source registry, install date)
+   * and an uninstall button per entry.
+   */
+
+  import { storeContext } from './storeShard.svelte';
+  import { uninstallPackage } from '../../registry/installer';
+  import { serverUninstallPackage } from '../../env/client';
+
+  const ctx = storeContext;
+
+  let uninstallingIds = $state<Set<string>>(new Set());
+  let updatingIds = $state<Set<string>>(new Set());
+  let updateError = $state<string | null>(null);
+
+  async function handleUninstall(id: string) {
+    if (uninstallingIds.has(id)) return;
+
+    uninstallingIds = new Set([...uninstallingIds, id]);
+    try {
+      await serverUninstallPackage(id);
+      await uninstallPackage(id);
+      await ctx.refreshInstalled();
+    } catch (err) {
+      console.warn('[sh3-store] Uninstall failed:', err instanceof Error ? err.message : err);
+    } finally {
+      const next = new Set(uninstallingIds);
+      next.delete(id);
+      uninstallingIds = next;
+    }
+  }
+
+  async function handleUpdate(id: string) {
+    if (updatingIds.has(id)) return;
+
+    updatingIds = new Set([...updatingIds, id]);
+    updateError = null;
+
+    try {
+      await ctx.updatePackage(id);
+    } catch (err) {
+      updateError = err instanceof Error ? err.message : String(err);
+    } finally {
+      const next = new Set(updatingIds);
+      next.delete(id);
+      updatingIds = next;
+    }
+  }
+
+  function handleRefresh() {
+    ctx.refreshInstalled();
+  }
+
+  function formatDate(iso: string): string {
+    try {
+      return new Date(iso).toLocaleDateString(undefined, {
+        year: 'numeric',
+        month: 'short',
+        day: 'numeric',
+      });
+    } catch {
+      return iso;
+    }
+  }
+</script>
+
+<div class="installed-view">
+  <header class="installed-header">
+    <h2>Installed Packages</h2>
+    <button onclick={handleRefresh}>Refresh</button>
+  </header>
+
+  {#if updateError}
+    <div class="installed-error">{updateError}</div>
+  {/if}
+
+  {#if ctx.state.ephemeral.installed.length === 0}
+    <div class="installed-empty">No packages installed.</div>
+  {:else}
+    <ul class="installed-list">
+      {#each ctx.state.ephemeral.installed as pkg (pkg.id)}
+        {@const uninstalling = uninstallingIds.has(pkg.id)}
+        <li class="installed-item">
+          <div class="installed-item-main">
+            <span class="installed-item-id">{pkg.id}</span>
+            <span class="installed-item-badge" class:badge-shard={pkg.type === 'shard'} class:badge-app={pkg.type === 'app'}>
+              {pkg.type}
+            </span>
+            <span class="installed-item-version">{pkg.version}</span>
+          </div>
+          <div class="installed-item-meta">
+            <span>Contract: v{pkg.contractVersion}</span>
+            <span>Source: {pkg.sourceRegistry}</span>
+            <span>Installed: {formatDate(pkg.installedAt)}</span>
+          </div>
+          <div class="installed-item-actions">
+            {#if pkg.id in ctx.state.ephemeral.updatable}
+              {@const target = ctx.state.ephemeral.updatable[pkg.id]}
+              {@const updating = updatingIds.has(pkg.id)}
+              <button
+                class="installed-update-btn"
+                onclick={() => handleUpdate(pkg.id)}
+                disabled={updating || uninstalling}
+              >
+                {updating ? 'Updating...' : `Update -> ${target.latest.version}`}
+              </button>
+            {/if}
+            <button
+              class="installed-uninstall-btn"
+              onclick={() => handleUninstall(pkg.id)}
+              disabled={uninstalling}
+            >
+              {uninstalling ? 'Removing...' : 'Uninstall'}
+            </button>
+          </div>
+        </li>
+      {/each}
+    </ul>
+  {/if}
+</div>
+
+<style>
+  .installed-view {
+    font-family: var(--shell-font-ui);
+    color: var(--shell-fg, #e0e0e0);
+    background: var(--shell-bg, #1e1e1e);
+    padding: 16px;
+    height: 100%;
+    overflow-y: auto;
+    box-sizing: border-box;
+  }
+  .installed-header {
+    display: flex;
+    align-items: center;
+    justify-content: space-between;
+    margin-bottom: 16px;
+  }
+  .installed-header h2 {
+    margin: 0;
+    font-size: 1.25rem;
+    font-weight: 600;
+  }
+  .installed-empty {
+    text-align: center;
+    padding: 32px 16px;
+    color: var(--shell-fg-muted, #888);
+    font-size: 0.875rem;
+  }
+  .installed-list {
+    list-style: none;
+    margin: 0;
+    padding: 0;
+    display: flex;
+    flex-direction: column;
+    gap: 8px;
+  }
+  .installed-item {
+    background: var(--shell-input-bg, #2a2a2a);
+    border: 1px solid var(--shell-border, #444);
+    border-radius: var(--shell-radius-md);
+    padding: 12px 14px;
+    display: flex;
+    flex-direction: column;
+    gap: 6px;
+  }
+  .installed-item-main {
+    display: flex;
+    align-items: center;
+    gap: 8px;
+  }
+  .installed-item-id {
+    font-weight: 600;
+    font-size: 0.9375rem;
+  }
+  .installed-item-badge {
+    font-size: 0.6875rem;
+    padding: 1px 6px;
+    border-radius: var(--shell-radius-sm);
+    text-transform: uppercase;
+    font-weight: 600;
+    letter-spacing: 0.04em;
+  }
+  .badge-shard {
+    background: color-mix(in srgb, var(--shell-accent, #007acc) 25%, transparent);
+    color: var(--shell-accent, #007acc);
+  }
+  .badge-app {
+    background: color-mix(in srgb, var(--shell-success, #4caf50) 25%, transparent);
+    color: var(--shell-success, #4caf50);
+  }
+  .installed-item-version {
+    font-size: 0.75rem;
+    color: var(--shell-fg-muted, #888);
+  }
+  .installed-item-meta {
+    display: flex;
+    gap: 16px;
+    flex-wrap: wrap;
+    font-size: 0.75rem;
+    color: var(--shell-fg-muted, #888);
+  }
+  .installed-item-actions {
+    display: flex;
+    justify-content: flex-end;
+    gap: 8px;
+  }
+  .installed-uninstall-btn {
+    padding: 4px 12px;
+    background: transparent;
+    color: var(--shell-error, #d32f2f);
+    border: 1px solid var(--shell-error, #d32f2f);
+    font-size: 0.8125rem;
+  }
+  .installed-uninstall-btn:hover:not(:disabled) {
+    background: color-mix(in srgb, var(--shell-error, #d32f2f) 15%, transparent);
+  }
+  .installed-uninstall-btn:disabled {
+    opacity: 0.6;
+    cursor: not-allowed;
+  }
+  .installed-update-btn {
+    padding: 4px 12px;
+    background: var(--shell-warning, #ff9800);
+    font-size: 0.8125rem;
+  }
+  .installed-update-btn:hover:not(:disabled) {
+    filter: brightness(1.1);
+  }
+  .installed-update-btn:disabled {
+    opacity: 0.6;
+    cursor: not-allowed;
+  }
+  .installed-error {
+    padding: 8px 12px;
+    margin-bottom: 12px;
+    background: color-mix(in srgb, var(--shell-error, #d32f2f) 15%, transparent);
+    color: var(--shell-error, #d32f2f);
+    border: 1px solid var(--shell-error, #d32f2f);
+    border-radius: var(--shell-radius);
+    font-size: 0.8125rem;
+  }
+</style>

package/dist/app/store/InstalledView.svelte.d.ts

@@ -0,0 +1,3 @@
+declare const InstalledView: import("svelte").Component<Record<string, never>, {}, "">;
+type InstalledView = ReturnType<typeof InstalledView>;
+export default InstalledView;