[lukasoppermann]

Why

Finish checking the canvas's authored Node implementation with strict TypeScript while keeping the installed plugin independent of a compiler or package installation. This final migration layer includes the runtime work landed in #56.

What changes

Convert canvas registration, asset checking, the shared test-context helper and the remaining Pick & polish implementation to authored TypeScript with committed JavaScript output. This includes note storage, conversation validation, batch projection, author profiles and setup-page rendering; shared identity patterns are inherited from the earlier migration layers. Registration and action declarations use the real SDK types from an exact, locked Hub development dependency; the host still supplies the runtime SDK.

Saved connection fields and URLs are checked before restoration, and explicit URL input still overrides saved state. Pick & polish validates stored notes and batches, action inputs and remote responses before using their fields. The guide describes the completed inventory: 65 authored TypeScript modules, two JavaScript entry shims, generated browser assets and validators, and 55 Node runtime test files that exercise the distributed output.

Browser assets and installer behavior remain unchanged from the landed parent. The project provider reload, discovery and invalid-input rejection were verified in the real host; a final installation and connected-action smoke check in the separate prototype consumer session remains pending.

[Copilot]

🔵 Needs a closer look

Installed-plugin registration and connected actions still need the pending consumer-session smoke check.

1 open issue

• Clarify recovery from invalid saved connection state · New

1 file not reviewed

• hub/package-lock.json: Generated file

What changed in this PR

Completes the canvas extension’s strict TypeScript migration while keeping installed plugins independent of a compiler or package installation.

Changes:

• Migrates remaining Node implementation modules to TypeScript with committed JavaScript output.
• Checks canvas and action contracts against locked SDK types.
• Validates saved connections, preserves explicit URL overrides, and updates tests and documentation.

File	Description
hub/​package.json	Adds the SDK development dependency.
hub/​package-lock.json	Locks SDK and transitive dependencies.
hub/​docs/​prototype-canvas.md	Documents the completed migration and runtime boundaries.
.github/​extensions/​replica-prototype/​tsconfig.json	Maps SDK types for compilation.
.github/​extensions/​replica-prototype/​test-support/​with-context/​index.mts	Adds the typed test-context helper.
.github/​extensions/​replica-prototype/​test-support/​with-context/​index.mjs	Regenerates the JavaScript helper.
.github/​extensions/​replica-prototype/​register-prototype-canvas/​index.test.mjs	Tests invalid saved connections and explicit overrides.
.github/​extensions/​replica-prototype/​register-prototype-canvas/​index.mts	Adds typed registration and connection validation.
.github/​extensions/​replica-prototype/​register-prototype-canvas/​index.mjs	Updates distributed registration output.
.github/​extensions/​replica-prototype/​comment-actions/​index.mts	Uses SDK action and schema types.
.github/​extensions/​replica-prototype/​check-prototype-server/​index.mts	Defines explicit server-status variants.
.github/​extensions/​replica-prototype/​check-assets/​index.mts	Adds typed asset verification.
.github/​extensions/​replica-prototype/​check-assets/​index.mjs	Regenerates asset-checking output.

_{Review effort: Max}