npm - tryassay - Versions diffs - 0.21.2 → 0.22.1 - Mend

tryassay 0.21.2 → 0.22.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (132) hide show

package/demo/.claude/.truth_last_prompt +1 -0
package/demo/.claude/truth_status +1 -0
package/demo/css/style.css +840 -0
package/demo/index.html +78 -0
package/demo/js/chat.js +535 -0
package/demo/js/code-panel.js +206 -0
package/demo/js/preview.js +456 -0
package/demo/js/sse-client.js +600 -0
package/demo/js/state.js +172 -0
package/demo/js/timeline.js +80 -0
package/dist/api/server.d.ts +3 -0
package/dist/api/server.js +127 -20
package/dist/api/server.js.map +1 -1
package/dist/cli.js +11 -0
package/dist/cli.js.map +1 -1
package/dist/commands/assess.d.ts +2 -0
package/dist/commands/assess.js +132 -164
package/dist/commands/assess.js.map +1 -1
package/dist/commands/demo.d.ts +5 -0
package/dist/commands/demo.js +357 -0
package/dist/commands/demo.js.map +1 -0
package/dist/lib/__tests__/arithmetic-quick-test.d.ts +6 -0
package/dist/lib/__tests__/arithmetic-quick-test.js +197 -0
package/dist/lib/__tests__/arithmetic-quick-test.js.map +1 -0
package/dist/lib/__tests__/arithmetic-real-llm-test.d.ts +13 -0
package/dist/lib/__tests__/arithmetic-real-llm-test.js +284 -0
package/dist/lib/__tests__/arithmetic-real-llm-test.js.map +1 -0
package/dist/lib/__tests__/arithmetic-value-demo.d.ts +10 -0
package/dist/lib/__tests__/arithmetic-value-demo.js +193 -0
package/dist/lib/__tests__/arithmetic-value-demo.js.map +1 -0
package/dist/lib/__tests__/flow-to-claims.test.d.ts +1 -0
package/dist/lib/__tests__/flow-to-claims.test.js +91 -0
package/dist/lib/__tests__/flow-to-claims.test.js.map +1 -0
package/dist/lib/__tests__/formal-verifier-api-misuse.test.d.ts +9 -0
package/dist/lib/__tests__/formal-verifier-api-misuse.test.js +391 -0
package/dist/lib/__tests__/formal-verifier-api-misuse.test.js.map +1 -0
package/dist/lib/__tests__/formal-verifier-arithmetic.test.d.ts +7 -0
package/dist/lib/__tests__/formal-verifier-arithmetic.test.js +318 -0
package/dist/lib/__tests__/formal-verifier-arithmetic.test.js.map +1 -0
package/dist/lib/__tests__/intent-extractor.test.d.ts +1 -0
package/dist/lib/__tests__/intent-extractor.test.js +97 -0
package/dist/lib/__tests__/intent-extractor.test.js.map +1 -0
package/dist/lib/__tests__/intent-reviewer.test.d.ts +1 -0
package/dist/lib/__tests__/intent-reviewer.test.js +55 -0
package/dist/lib/__tests__/intent-reviewer.test.js.map +1 -0
package/dist/lib/__tests__/mr-gsm8k-benchmark.d.ts +11 -0
package/dist/lib/__tests__/mr-gsm8k-benchmark.js +224 -0
package/dist/lib/__tests__/mr-gsm8k-benchmark.js.map +1 -0
package/dist/lib/anthropic.js +25 -33
package/dist/lib/anthropic.js.map +1 -1
package/dist/lib/assessment-reporter.js +9 -13
package/dist/lib/assessment-reporter.js.map +1 -1
package/dist/lib/claim-extractor.js +10 -19
package/dist/lib/claim-extractor.js.map +1 -1
package/dist/lib/code-verifier.js +16 -36
package/dist/lib/code-verifier.js.map +1 -1
package/dist/lib/constraint-engine.js +10 -19
package/dist/lib/constraint-engine.js.map +1 -1
package/dist/lib/formal-verifier.d.ts +1 -1
package/dist/lib/formal-verifier.js +454 -0
package/dist/lib/formal-verifier.js.map +1 -1
package/dist/lib/guided-generator.js +19 -37
package/dist/lib/guided-generator.js.map +1 -1
package/dist/lib/intent-extractor.d.ts +47 -0
package/dist/lib/intent-extractor.js +427 -0
package/dist/lib/intent-extractor.js.map +1 -0
package/dist/lib/intent-reviewer.d.ts +14 -0
package/dist/lib/intent-reviewer.js +148 -0
package/dist/lib/intent-reviewer.js.map +1 -0
package/dist/lib/intent-types.d.ts +89 -0
package/dist/lib/intent-types.js +5 -0
package/dist/lib/intent-types.js.map +1 -0
package/dist/lib/inventory-extractor.js +9 -22
package/dist/lib/inventory-extractor.js.map +1 -1
package/dist/lib/llm-provider.d.ts +23 -0
package/dist/lib/llm-provider.js +130 -0
package/dist/lib/llm-provider.js.map +1 -0
package/dist/lib/remediator.js +20 -28
package/dist/lib/remediator.js.map +1 -1
package/dist/lib/requirements-generator.js +14 -19
package/dist/lib/requirements-generator.js.map +1 -1
package/dist/lib/spec-synthesizer.js +10 -19
package/dist/lib/spec-synthesizer.js.map +1 -1
package/dist/runtime/agents/planner-agent.d.ts +5 -2
package/dist/runtime/agents/planner-agent.js +232 -1
package/dist/runtime/agents/planner-agent.js.map +1 -1
package/dist/runtime/app-create-orchestrator.d.ts +9 -1
package/dist/runtime/app-create-orchestrator.js +265 -87
package/dist/runtime/app-create-orchestrator.js.map +1 -1
package/dist/runtime/check-catalog.js +5 -3
package/dist/runtime/check-catalog.js.map +1 -1
package/dist/runtime/check-definitions.d.ts +10 -0
package/dist/runtime/check-definitions.js +52 -2
package/dist/runtime/check-definitions.js.map +1 -1
package/dist/runtime/composition-verifier.js +8 -12
package/dist/runtime/composition-verifier.js.map +1 -1
package/dist/runtime/gap-detector.js +8 -10
package/dist/runtime/gap-detector.js.map +1 -1
package/dist/runtime/input-validator.d.ts +7 -0
package/dist/runtime/input-validator.js +162 -0
package/dist/runtime/input-validator.js.map +1 -0
package/dist/runtime/model-router.d.ts +10 -0
package/dist/runtime/model-router.js +42 -0
package/dist/runtime/model-router.js.map +1 -0
package/dist/runtime/pattern-extractor.js +8 -10
package/dist/runtime/pattern-extractor.js.map +1 -1
package/dist/runtime/planner.js +11 -16
package/dist/runtime/planner.js.map +1 -1
package/dist/runtime/prompt-guard.d.ts +2 -0
package/dist/runtime/prompt-guard.js +180 -0
package/dist/runtime/prompt-guard.js.map +1 -0
package/dist/runtime/prompt-safety-analyzer.js +8 -13
package/dist/runtime/prompt-safety-analyzer.js.map +1 -1
package/dist/runtime/reasoner.js +19 -33
package/dist/runtime/reasoner.js.map +1 -1
package/dist/runtime/rule-meta-verifier.js +9 -11
package/dist/runtime/rule-meta-verifier.js.map +1 -1
package/dist/runtime/safe-executor.d.ts +23 -0
package/dist/runtime/safe-executor.js +151 -0
package/dist/runtime/safe-executor.js.map +1 -0
package/dist/runtime/specialized-agent.js +10 -14
package/dist/runtime/specialized-agent.js.map +1 -1
package/dist/runtime/strategy-library.js +8 -10
package/dist/runtime/strategy-library.js.map +1 -1
package/dist/runtime/supabase-experience-store.js.map +1 -1
package/dist/runtime/supabase-provisioner.d.ts +35 -0
package/dist/runtime/supabase-provisioner.js +192 -0
package/dist/runtime/supabase-provisioner.js.map +1 -0
package/dist/runtime/types.d.ts +116 -0
package/dist/sdk/forward-verify.js +16 -33
package/dist/sdk/forward-verify.js.map +1 -1
package/package.json +2 -1

package/demo/index.html ADDED Viewed

@@ -0,0 +1,78 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Assay Verified Agent Runtime</title>
+  <link rel="stylesheet" href="css/style.css">
+  <meta http-equiv="Cross-Origin-Embedder-Policy" content="credentialless">
+  <meta http-equiv="Cross-Origin-Opener-Policy" content="same-origin">
+</head>
+<body>
+  <div id="app">
+    <header id="header">
+      <div id="header-left">
+        <span class="header-title">assay</span>
+      </div>
+      <div id="header-right">
+        <div id="file-badge" class="hidden">
+          <span>files:</span>
+          <span id="file-count">0</span>
+        </div>
+        <div id="global-clock" class="global-clock hidden">
+          <span class="clock-value" id="clock-value">00:00</span>
+        </div>
+      </div>
+    </header>
+    <div id="chat-panel">
+      <div id="chat-messages"></div>
+      <div id="attachment-preview" class="hidden"></div>
+      <div id="chat-input-area">
+        <input type="file" id="file-input" hidden accept=".txt,.md,.markdown,.csv,.json">
+        <button id="attach-btn" title="Attach specification document">&#x1F4CE;</button>
+        <input type="text" id="chat-input" placeholder="Describe an application to build..." autocomplete="off">
+        <button id="chat-send-btn">Send</button>
+      </div>
+    </div>
+    <div id="preview-panel">
+      <div id="preview-overlay">
+        <div id="preview-status" data-state="cold">Setting up environment...</div>
+      </div>
+      <iframe id="preview-iframe"></iframe>
+    </div>
+    <div id="completion-overlay"></div>
+    <div id="status-bar">
+      <span id="status-phase">phase: idle</span>
+      <span id="status-elapsed">elapsed: 00:00</span>
+      <span id="status-tasks">tasks: 0/0</span>
+    </div>
+  </div>
+  <script type="module" src="js/state.js"></script>
+  <script type="module" src="js/chat.js"></script>
+  <script type="module" src="js/sse-client.js"></script>
+  <script type="module" src="js/preview.js"></script>
+  <script type="module" src="js/timeline.js"></script>
+  <script type="module">
+    import './js/state.js';
+    import { initSSEClient } from './js/sse-client.js';
+    import { initChat } from './js/chat.js';
+    import { initPreview } from './js/preview.js';
+    import { initTimeline } from './js/timeline.js';
+    const params = new URLSearchParams(window.location.search);
+    const API_BASE = params.get('api') || 'http://localhost:3800';
+    const API_KEY = params.get('key') || '';
+    initSSEClient(API_BASE, API_KEY);
+    initChat(API_BASE, API_KEY);
+    initTimeline();
+    initPreview();
+  </script>
+</body>
+</html>

package/demo/js/chat.js ADDED Viewed

@@ -0,0 +1,535 @@
+// chat.js — Chat-first interface for requirements gathering + build
+// Renders in #chat-panel (left side of split screen)
+const AppState = window.AppState;
+let chatConfig = { apiBase: '', apiKey: '' };
+let currentSessionId = null;
+let pendingCardAnswers = [];
+let pendingAttachments = [];
+const MAX_FILE_SIZE = 500 * 1024; // 500KB
+const ALLOWED_EXTENSIONS = ['.txt', '.md', '.markdown', '.csv', '.json'];
+// ── Public API ──────────────────────────────────────────────
+export function configureChat(apiBase, apiKey) {
+  chatConfig.apiBase = apiBase || '';
+  chatConfig.apiKey = apiKey || '';
+}
+export function initChat(apiBase, apiKey) {
+  chatConfig.apiBase = apiBase || '';
+  chatConfig.apiKey = apiKey || '';
+  renderWelcomeMessage();
+  wireInputHandlers();
+}
+export function openChat(sessionId) {
+  currentSessionId = sessionId;
+  pendingCardAnswers = [];
+}
+export function addArchitectMessage(data) {
+  const messagesEl = document.getElementById('chat-messages');
+  if (!messagesEl) return;
+  if (!currentSessionId) {
+    openChat(data.sessionId || window.__appId);
+  }
+  const msgDiv = document.createElement('div');
+  msgDiv.className = 'chat-msg chat-msg-architect';
+  const textDiv = document.createElement('div');
+  textDiv.className = 'chat-msg-text';
+  textDiv.textContent = data.content;
+  msgDiv.appendChild(textDiv);
+  if (data.cards && data.cards.length > 0) {
+    const cardsDiv = document.createElement('div');
+    cardsDiv.className = 'chat-cards';
+    for (const card of data.cards) {
+      const cardEl = renderCard(card);
+      cardsDiv.appendChild(cardEl);
+    }
+    msgDiv.appendChild(cardsDiv);
+  }
+  if (data.readiness && data.readiness.ready) {
+    const buildBtn = document.createElement('button');
+    buildBtn.className = 'chat-build-btn';
+    buildBtn.textContent = 'Start Building';
+    buildBtn.addEventListener('click', () => startBuilding());
+    const summaryDiv = document.createElement('div');
+    summaryDiv.className = 'chat-ready-summary';
+    summaryDiv.textContent = data.readiness.summary || '';
+    msgDiv.appendChild(summaryDiv);
+    msgDiv.appendChild(buildBtn);
+  }
+  messagesEl.appendChild(msgDiv);
+  messagesEl.scrollTop = messagesEl.scrollHeight;
+}
+export function closeChat() {
+  currentSessionId = null;
+  pendingCardAnswers = [];
+}
+export function lockChat() {
+  const inputArea = document.getElementById('chat-input-area');
+  if (inputArea) inputArea.classList.add('hidden');
+  const messagesEl = document.getElementById('chat-messages');
+  if (messagesEl) {
+    const separator = document.createElement('div');
+    separator.className = 'activity-separator';
+    separator.innerHTML = '<span>Build started</span>';
+    messagesEl.appendChild(separator);
+    messagesEl.scrollTop = messagesEl.scrollHeight;
+  }
+}
+export function unlockChat() {
+  const inputArea = document.getElementById('chat-input-area');
+  if (inputArea) inputArea.classList.remove('hidden');
+  const chatInput = document.getElementById('chat-input');
+  const sendBtn = document.getElementById('chat-send-btn');
+  const attachBtn = document.getElementById('attach-btn');
+  if (chatInput) {
+    chatInput.disabled = false;
+    chatInput.value = '';
+    chatInput.placeholder = 'Build something else...';
+  }
+  if (sendBtn) sendBtn.disabled = false;
+  if (attachBtn) attachBtn.disabled = false;
+  currentSessionId = null;
+  pendingAttachments = [];
+  clearAttachmentChips();
+}
+// ── Initialization ──────────────────────────────────────────
+function renderWelcomeMessage() {
+  const messagesEl = document.getElementById('chat-messages');
+  if (!messagesEl) return;
+  const msgDiv = document.createElement('div');
+  msgDiv.className = 'chat-msg chat-msg-architect';
+  const textDiv = document.createElement('div');
+  textDiv.className = 'chat-msg-text';
+  textDiv.textContent = "What would you like to build? Describe your app and I'll help design it. You can also attach a specification document.";
+  msgDiv.appendChild(textDiv);
+  messagesEl.appendChild(msgDiv);
+}
+function wireInputHandlers() {
+  const sendBtn = document.getElementById('chat-send-btn');
+  const chatInput = document.getElementById('chat-input');
+  const attachBtn = document.getElementById('attach-btn');
+  const fileInput = document.getElementById('file-input');
+  if (sendBtn) {
+    sendBtn.addEventListener('click', () => handleSend());
+  }
+  if (chatInput) {
+    chatInput.addEventListener('keydown', (e) => {
+      if (e.key === 'Enter') handleSend();
+    });
+  }
+  if (attachBtn && fileInput) {
+    attachBtn.addEventListener('click', () => fileInput.click());
+    fileInput.addEventListener('change', (e) => handleFileSelected(e));
+  }
+}
+// ── Send Routing ────────────────────────────────────────────
+function handleSend() {
+  if (currentSessionId === null) {
+    sendInitialMessage();
+  } else {
+    sendMessage();
+  }
+}
+// ── Initial Message (creates session) ───────────────────────
+function buildAppDescription(prompt) {
+  const name = prompt
+    .replace(/^(build|create|make|generate)\s+(a|an|me|my)?\s*/i, '')
+    .split(/[.,!?\n]/)[0]
+    .trim()
+    .slice(0, 50)
+    .replace(/\s+/g, '-')
+    .toLowerCase() || 'my-app';
+  const features = [];
+  const lower = prompt.toLowerCase();
+  if (/auth|login|signup|sign.?up|register|password/.test(lower)) features.push('User authentication with email/password');
+  if (/todo|task|checklist/.test(lower)) features.push('Todo/task CRUD with completion tracking');
+  if (/blog|post|article|cms/.test(lower)) features.push('Blog post management with markdown');
+  if (/chat|message|real.?time/.test(lower)) features.push('Real-time chat messaging');
+  if (/e.?commerce|shop|cart|product|payment/.test(lower)) features.push('Product catalog with shopping cart');
+  if (/dashboard|admin|analytics/.test(lower)) features.push('Admin dashboard with analytics');
+  if (/api|rest|endpoint/.test(lower)) features.push('REST API endpoints');
+  if (/search|filter/.test(lower)) features.push('Search and filtering');
+  if (/upload|file|image/.test(lower)) features.push('File upload handling');
+  if (/notification|email|alert/.test(lower)) features.push('Notification system');
+  if (features.length === 0) features.push(prompt);
+  let framework = 'next.js';
+  let database = 'supabase';
+  if (/express|node/.test(lower)) framework = 'express';
+  if (/svelte/.test(lower)) framework = 'sveltekit';
+  if (/electron|desktop/.test(lower)) framework = 'electron';
+  if (/postgres(?!.*supa)/.test(lower)) database = 'postgresql';
+  if (/sqlite/.test(lower)) database = 'sqlite';
+  return {
+    name,
+    description: prompt,
+    techStack: { language: 'typescript', framework, database, styling: 'tailwind' },
+    features,
+  };
+}
+async function sendInitialMessage() {
+  const chatInput = document.getElementById('chat-input');
+  if (!chatInput) return;
+  const text = chatInput.value.trim();
+  if (!text && pendingAttachments.length === 0) return;
+  // Render user bubble
+  renderUserBubble(text, pendingAttachments);
+  // Disable input during session creation
+  chatInput.value = '';
+  chatInput.disabled = true;
+  const sendBtn = document.getElementById('chat-send-btn');
+  const attachBtn = document.getElementById('attach-btn');
+  if (sendBtn) sendBtn.disabled = true;
+  if (attachBtn) attachBtn.disabled = true;
+  AppState.reset();
+  const appDesc = buildAppDescription(text);
+  const headers = { 'Content-Type': 'application/json' };
+  if (chatConfig.apiKey) headers['Authorization'] = `Bearer ${chatConfig.apiKey}`;
+  const body = { ...appDesc, autoApprove: false };
+  if (pendingAttachments.length > 0) {
+    body.documents = pendingAttachments.map(a => ({ name: a.name, content: a.content }));
+  }
+  const attachments = [...pendingAttachments];
+  pendingAttachments = [];
+  clearAttachmentChips();
+  try {
+    const res = await fetch(`${chatConfig.apiBase}/api/v1/app/create`, {
+      method: 'POST',
+      headers,
+      body: JSON.stringify(body),
+    });
+    if (!res.ok) {
+      const err = await res.text();
+      throw new Error(`API ${res.status}: ${err}`);
+    }
+    const data = await res.json();
+    window.__appId = data.id || data.sessionId;
+    currentSessionId = window.__appId;
+    window.__connectSSE(window.__appId);
+    AppState.update({ phase: 'initializing' });
+    AppState.addLog({ type: 'system', message: `Session started: ${window.__appId}` });
+    // Re-enable input for chat conversation
+    chatInput.disabled = false;
+    chatInput.placeholder = 'Type a message...';
+    if (sendBtn) sendBtn.disabled = false;
+    if (attachBtn) attachBtn.disabled = false;
+  } catch (err) {
+    console.error('[Chat] Session creation error:', err.message);
+    showErrorInChat(`Failed to start session: ${err.message}`);
+    chatInput.disabled = false;
+    if (sendBtn) sendBtn.disabled = false;
+    if (attachBtn) attachBtn.disabled = false;
+    // Restore attachments on failure
+    pendingAttachments = attachments;
+    if (attachments.length > 0) {
+      for (const a of attachments) renderAttachmentChip(a.name);
+    }
+  }
+}
+// ── Ongoing Chat Messages ───────────────────────────────────
+async function sendMessage() {
+  const input = document.getElementById('chat-input');
+  if (!input) return;
+  const message = input.value.trim();
+  if (!message && pendingCardAnswers.length === 0 && pendingAttachments.length === 0) return;
+  const sessionId = currentSessionId || window.__appId;
+  if (!sessionId) return;
+  renderUserBubble(message, pendingAttachments);
+  input.value = '';
+  const body = { message: message || '' };
+  if (pendingCardAnswers.length > 0) {
+    body.cardAnswers = [...pendingCardAnswers];
+    pendingCardAnswers = [];
+  }
+  if (pendingAttachments.length > 0) {
+    body.documents = pendingAttachments.map(a => ({ name: a.name, content: a.content }));
+    pendingAttachments = [];
+    clearAttachmentChips();
+  }
+  // Disable card options after sending
+  const allCards = document.querySelectorAll('.chat-card');
+  allCards.forEach(card => {
+    card.querySelectorAll('.chat-card-option').forEach(opt => {
+      opt.style.pointerEvents = 'none';
+      opt.style.opacity = '0.6';
+    });
+  });
+  const headers = { 'Content-Type': 'application/json' };
+  if (chatConfig.apiKey) headers['Authorization'] = `Bearer ${chatConfig.apiKey}`;
+  try {
+    const res = await fetch(`${chatConfig.apiBase}/api/v1/app/${sessionId}/chat`, {
+      method: 'POST',
+      headers,
+      body: JSON.stringify(body),
+    });
+    if (!res.ok) {
+      console.error('[Chat] Send failed:', res.status);
+      showErrorInChat(`Message failed to send (${res.status})`);
+    }
+  } catch (err) {
+    console.error('[Chat] Send error:', err);
+    showErrorInChat(`Message failed: ${err.message}`);
+  }
+}
+// ── File Attachment ─────────────────────────────────────────
+function showErrorInChat(message) {
+  const messagesEl = document.getElementById('chat-messages');
+  if (!messagesEl) return;
+  const msgDiv = document.createElement('div');
+  msgDiv.className = 'chat-msg chat-msg-architect';
+  const textDiv = document.createElement('div');
+  textDiv.className = 'chat-msg-text';
+  textDiv.style.color = 'var(--accent-red)';
+  textDiv.textContent = message;
+  msgDiv.appendChild(textDiv);
+  messagesEl.appendChild(msgDiv);
+  messagesEl.scrollTop = messagesEl.scrollHeight;
+}
+function handleFileSelected(event) {
+  const file = event.target.files?.[0];
+  if (!file) return;
+  // Reset input so same file can be re-selected
+  event.target.value = '';
+  const ext = '.' + file.name.split('.').pop().toLowerCase();
+  if (!ALLOWED_EXTENSIONS.includes(ext)) {
+    showErrorInChat(`Unsupported file type: ${ext}. Allowed: ${ALLOWED_EXTENSIONS.join(', ')}`);
+    return;
+  }
+  if (file.size > MAX_FILE_SIZE) {
+    showErrorInChat(`File too large: ${(file.size / 1024).toFixed(0)}KB. Max: ${MAX_FILE_SIZE / 1024}KB`);
+    return;
+  }
+  const reader = new FileReader();
+  reader.onload = () => {
+    pendingAttachments.push({ name: file.name, content: reader.result });
+    renderAttachmentChip(file.name);
+  };
+  reader.readAsText(file);
+}
+function renderAttachmentChip(filename) {
+  const preview = document.getElementById('attachment-preview');
+  if (!preview) return;
+  preview.classList.remove('hidden');
+  const chip = document.createElement('div');
+  chip.className = 'attachment-chip';
+  chip.dataset.filename = filename;
+  const nameSpan = document.createElement('span');
+  nameSpan.textContent = filename;
+  chip.appendChild(nameSpan);
+  const removeBtn = document.createElement('button');
+  removeBtn.className = 'attachment-chip-remove';
+  removeBtn.textContent = '\u00d7';
+  removeBtn.addEventListener('click', () => {
+    pendingAttachments = pendingAttachments.filter(a => a.name !== filename);
+    chip.remove();
+    if (pendingAttachments.length === 0) {
+      preview.classList.add('hidden');
+    }
+  });
+  chip.appendChild(removeBtn);
+  preview.appendChild(chip);
+}
+function clearAttachmentChips() {
+  const preview = document.getElementById('attachment-preview');
+  if (!preview) return;
+  preview.innerHTML = '';
+  preview.classList.add('hidden');
+}
+// ── User Bubble ─────────────────────────────────────────────
+function renderUserBubble(text, attachments) {
+  const messagesEl = document.getElementById('chat-messages');
+  if (!messagesEl) return;
+  if (!text && (!attachments || attachments.length === 0)) return;
+  const msgDiv = document.createElement('div');
+  msgDiv.className = 'chat-msg chat-msg-user';
+  if (text) {
+    const textDiv = document.createElement('div');
+    textDiv.className = 'chat-msg-text';
+    textDiv.textContent = text;
+    msgDiv.appendChild(textDiv);
+  }
+  if (attachments && attachments.length > 0) {
+    for (const att of attachments) {
+      const attDiv = document.createElement('div');
+      attDiv.className = 'chat-msg-text';
+      attDiv.style.fontSize = '12px';
+      attDiv.style.opacity = '0.7';
+      attDiv.textContent = `\uD83D\uDCCE ${att.name}`;
+      msgDiv.appendChild(attDiv);
+    }
+  }
+  messagesEl.appendChild(msgDiv);
+  messagesEl.scrollTop = messagesEl.scrollHeight;
+}
+// ── Cards ───────────────────────────────────────────────────
+function renderCard(card) {
+  const cardEl = document.createElement('div');
+  cardEl.className = 'chat-card';
+  cardEl.dataset.cardId = card.id;
+  const headerEl = document.createElement('div');
+  headerEl.className = 'chat-card-header';
+  headerEl.textContent = card.header || card.question;
+  cardEl.appendChild(headerEl);
+  const questionEl = document.createElement('div');
+  questionEl.className = 'chat-card-question';
+  questionEl.textContent = card.question;
+  cardEl.appendChild(questionEl);
+  const optionsEl = document.createElement('div');
+  optionsEl.className = 'chat-card-options';
+  for (const opt of card.options) {
+    const optEl = document.createElement('div');
+    optEl.className = 'chat-card-option';
+    optEl.dataset.cardId = card.id;
+    optEl.dataset.label = opt.label;
+    optEl.dataset.multi = card.multiSelect ? 'true' : 'false';
+    const labelEl = document.createElement('div');
+    labelEl.className = 'chat-card-option-label';
+    labelEl.textContent = opt.label;
+    optEl.appendChild(labelEl);
+    const descEl = document.createElement('div');
+    descEl.className = 'chat-card-option-desc';
+    descEl.textContent = opt.description;
+    optEl.appendChild(descEl);
+    optEl.addEventListener('click', () => handleCardOptionClick(optEl, card));
+    optionsEl.appendChild(optEl);
+  }
+  cardEl.appendChild(optionsEl);
+  return cardEl;
+}
+function handleCardOptionClick(optEl, card) {
+  const cardId = optEl.dataset.cardId;
+  const isMulti = optEl.dataset.multi === 'true';
+  if (isMulti) {
+    optEl.classList.toggle('selected');
+  } else {
+    const siblings = optEl.parentElement.querySelectorAll('.chat-card-option');
+    siblings.forEach(s => s.classList.remove('selected'));
+    optEl.classList.add('selected');
+  }
+  const existingIdx = pendingCardAnswers.findIndex(a => a.questionId === cardId);
+  if (existingIdx >= 0) pendingCardAnswers.splice(existingIdx, 1);
+  const cardEl = optEl.closest('.chat-card');
+  const selectedOpts = cardEl.querySelectorAll('.chat-card-option.selected');
+  const selectedLabels = Array.from(selectedOpts).map(el => el.dataset.label);
+  if (selectedLabels.length > 0) {
+    pendingCardAnswers.push({ questionId: cardId, selectedOptions: selectedLabels });
+  }
+}
+// ── Build Trigger ───────────────────────────────────────────
+async function startBuilding() {
+  const sessionId = currentSessionId || window.__appId;
+  if (!sessionId) return;
+  const headers = { 'Content-Type': 'application/json' };
+  if (chatConfig.apiKey) headers['Authorization'] = `Bearer ${chatConfig.apiKey}`;
+  try {
+    await fetch(`${chatConfig.apiBase}/api/v1/app/${sessionId}/chat`, {
+      method: 'POST',
+      headers,
+      body: JSON.stringify({ message: '__START_BUILD__' }),
+    });
+  } catch (err) {
+    console.error('[Chat] Start build error:', err);
+  }
+  lockChat();
+  AppState.addLog({ level: 'success', message: 'Requirements confirmed — starting build...' });
+}