@adminiumjs/manifest 0.3.5 → 0.3.7

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,oBAAoB,CAAC;AAEjD,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,mBAAmB,EACnB,qBAAqB,EACrB,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,YAAY,EACZ,cAAc,EACd,wBAAwB,EACxB,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,WAAW,EACX,eAAe,EACf,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,UAAU,EACV,UAAU,EACV,aAAa,EACb,UAAU,EACV,cAAc,EACd,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,YAAY,EACZ,eAAe,EACf,cAAc,EACd,SAAS,EACT,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,EACd,kBAAkB,EAClB,qBAAqB,EACrB,eAAe,EACf,qBAAqB,EACrB,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,GAeb,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAkB,MAAM,YAAY,CAAC;AAE/E,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,gBAAgB,GAIjB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAoB,MAAM,cAAc,CAAC;AAEjF,OAAO,EACL,cAAc,EACd,YAAY,EACZ,WAAW,EACX,mBAAmB,EACnB,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,YAAY,GAIb,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,eAAe,EAAE,gBAAgB,EAA8B,MAAM,oBAAoB,CAAC;AAEzI,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,eAAe,EACf,cAAc,EACd,sBAAsB,EACtB,YAAY,EACZ,iBAAiB,EACjB,YAAY,EACZ,KAAK,IAAI,YAAY,EACrB,aAAa,EACb,QAAQ,EACR,SAAS,EACT,OAAO,GAGR,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,YAAY,GAKb,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAmB,MAAM,cAAc,CAAC;AAEzF,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAsC,MAAM,gBAAgB,CAAC;AAE1G,OAAO,EACL,sBAAsB,EACtB,QAAQ,GAKT,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAsB,MAAM,WAAW,CAAC;AAE3F,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAErE,OAAO,EACL,WAAW,GASZ,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EACtB,eAAe,EACf,YAAY,GAQb,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,aAAa,EACb,cAAc,EACd,aAAa,EACb,aAAa,EACb,kBAAkB,EAClB,kBAAkB,EAClB,eAAe,EACf,eAAe,EACf,iBAAiB,GAKlB,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,oBAAoB,CAAC;AAEjD,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,mBAAmB,EACnB,qBAAqB,EACrB,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,YAAY,EACZ,cAAc,EACd,wBAAwB,EACxB,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,WAAW,EACX,eAAe,EACf,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,UAAU,EACV,UAAU,EACV,aAAa,EACb,UAAU,EACV,cAAc,EACd,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,YAAY,EACZ,eAAe,EACf,cAAc,EACd,SAAS,EACT,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,EACd,kBAAkB,EAClB,qBAAqB,EACrB,eAAe,EACf,qBAAqB,EACrB,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,GAeb,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAkB,MAAM,YAAY,CAAC;AAE/E,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,gBAAgB,GAIjB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAoB,MAAM,cAAc,CAAC;AAEjF,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,gBAAgB,EAChB,MAAM,IAAI,cAAc,EACxB,OAAO,IAAI,eAAe,GAO3B,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,WAAW,EACX,mBAAmB,EACnB,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,YAAY,GAKb,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,eAAe,EAAE,gBAAgB,EAAE,cAAc,EAAE,eAAe,EAAE,gBAAgB,EAAkD,MAAM,oBAAoB,CAAC;AAChN,OAAO,EAAE,eAAe,EAA6D,MAAM,oBAAoB,CAAC;AAEhH,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,eAAe,EACf,cAAc,EACd,sBAAsB,EACtB,YAAY,EACZ,iBAAiB,EACjB,YAAY,EACZ,KAAK,IAAI,YAAY,EACrB,aAAa,EACb,QAAQ,EACR,UAAU,EACV,WAAW,EACX,YAAY,EACZ,iBAAiB,EACjB,QAAQ,EACR,YAAY,EACZ,qBAAqB,EACrB,aAAa,EACb,UAAU,EACV,SAAS,EACT,WAAW,EACX,WAAW,EACX,OAAO,GAKR,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,UAAU,EACV,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,YAAY,GAMb,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,oBAAoB,EACpB,cAAc,EACd,qBAAqB,EACrB,sBAAsB,EACtB,kBAAkB,EAClB,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,eAAe,GAUhB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAmB,MAAM,cAAc,CAAC;AAEzF,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAsC,MAAM,gBAAgB,CAAC;AAE1G,OAAO,EACL,sBAAsB,EACtB,QAAQ,GAKT,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAsB,MAAM,WAAW,CAAC;AAE3F,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,gBAAgB,EAAE,YAAY,EAAwB,MAAM,mBAAmB,CAAC;AAEpH,OAAO,EACL,aAAa,EACb,eAAe,EACf,eAAe,EACf,YAAY,EACZ,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,EACjB,aAAa,EACb,cAAc,GASf,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAErE,OAAO,EACL,WAAW,GASZ,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EACtB,eAAe,EACf,YAAY,EACZ,aAAa,EACb,cAAc,EACd,cAAc,GAUf,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,aAAa,EACb,cAAc,EACd,eAAe,EACf,aAAa,EACb,YAAY,EACZ,aAAa,EACb,kBAAkB,EAClB,kBAAkB,EAClB,eAAe,EACf,eAAe,EACf,iBAAiB,GAMlB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,2BAA2B,EAC3B,mBAAmB,EACnB,sBAAsB,EACtB,iBAAiB,EACjB,oBAAoB,EACpB,sBAAsB,EACtB,UAAU,GAMX,MAAM,uBAAuB,CAAC"}

package/dist/marketplace-wire.d.ts

@@ -0,0 +1,230 @@
+/**
+ * The marketplace API's wire format, `adminium-marketplace/1` — what
+ * `https://adminium.dev/api/v1/marketplace/apps` and `/add-ons` answer, as an
+ * Adminium server reads it.
+ *
+ * ── TWO POSTURES IN ONE DOCUMENT ────────────────────────────────────────────
+ *
+ * THE ITEM IS LENIENT. Names, art, links and dates are display facts, and a
+ * field this server does not know is dropped (zod's default strip). That is
+ * what lets the site grow a display field without breaking every server
+ * already in service — the reason the static feeds before this had to move to
+ * a new address each time they changed (v1, v2, v3).
+ *
+ * THE RELEASE IS STRICT. `release` is the install contract: the exact version,
+ * the fingerprint the downloaded bytes are checked against, the floor, and
+ * what the verified file's manifest says. A field here that this server does
+ * not know is a refusal of that ITEM, never a warning — which is how "no price
+ * reaches an install" holds by construction rather than by nobody sending one.
+ * A pricing block at ITEM level is simply stripped: pricing is not shown in
+ * this round, and no DTO carries it.
+ *
+ * ONE ITEM, ONE VERDICT. Items are parsed one at a time: an item whose release
+ * this server cannot read is skipped and counted, and the rest of the shelf is
+ * still offered. Only a document that is not this format at all is refused.
+ *
+ * `?adminium=<version>`: the site offers each item's newest release this
+ * version can install, and names the newest one in `newerRelease` when that
+ * is a different one. An item whose every release is too new comes back with
+ * `release: null` and a `newerRelease`.
+ */
+import { z } from 'zod';
+export declare const MARKETPLACE_FORMAT = "adminium-marketplace/1";
+/** An item key: the grammar the stores, the payloads and the download paths share. */
+export declare const MARKETPLACE_KEY_PATTERN: RegExp;
+/** An exact version — never a range, never `latest`. One optional tail group (see the add-on catalog client). */
+export declare const MARKETPLACE_VERSION_PATTERN: RegExp;
+/** An add-on release's install facts, strict. */
+export declare const addOnReleaseWireSchema: z.ZodObject<{
+    version: z.ZodString;
+    integrity: z.ZodString;
+    categories: z.ZodArray<z.ZodString>;
+    capabilities: z.ZodArray<z.ZodString>;
+    connect: z.ZodObject<{
+        kind: z.ZodEnum<{
+            none: "none";
+            "api-key": "api-key";
+            oauth2: "oauth2";
+        }>;
+    }, z.core.$strict>;
+    provides: z.ZodArray<z.ZodObject<{
+        contract: z.ZodString;
+        version: z.ZodNumber;
+    }, z.core.$strict>>;
+    attaches: z.ZodArray<z.ZodObject<{
+        app: z.ZodString;
+        range: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    network: z.ZodObject<{
+        allow: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>;
+    minAdminiumVersion: z.ZodString;
+    publisher: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+/** An app release's install facts, strict. */
+export declare const appReleaseWireSchema: z.ZodObject<{
+    version: z.ZodString;
+    integrity: z.ZodString;
+    categories: z.ZodArray<z.ZodString>;
+    capabilities: z.ZodArray<z.ZodString>;
+    publisher: z.ZodString;
+    sides: z.ZodArray<z.ZodEnum<{
+        customer: "customer";
+        staff: "staff";
+    }>>;
+    minAdminiumVersion: z.ZodString;
+    addOns: z.ZodObject<{
+        requires: z.ZodArray<z.ZodObject<{
+            key: z.ZodString;
+        }, z.core.$loose>>;
+        suggests: z.ZodArray<z.ZodObject<{
+            key: z.ZodString;
+        }, z.core.$loose>>;
+        features: z.ZodArray<z.ZodObject<{
+            requires: z.ZodArray<z.ZodString>;
+        }, z.core.$loose>>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export declare const addOnItemWireSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"add-on">;
+    categoryKey: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    release: z.ZodNullable<z.ZodObject<{
+        version: z.ZodString;
+        integrity: z.ZodString;
+        categories: z.ZodArray<z.ZodString>;
+        capabilities: z.ZodArray<z.ZodString>;
+        connect: z.ZodObject<{
+            kind: z.ZodEnum<{
+                none: "none";
+                "api-key": "api-key";
+                oauth2: "oauth2";
+            }>;
+        }, z.core.$strict>;
+        provides: z.ZodArray<z.ZodObject<{
+            contract: z.ZodString;
+            version: z.ZodNumber;
+        }, z.core.$strict>>;
+        attaches: z.ZodArray<z.ZodObject<{
+            app: z.ZodString;
+            range: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+        network: z.ZodObject<{
+            allow: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>;
+        minAdminiumVersion: z.ZodString;
+        publisher: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    key: z.ZodString;
+    availability: z.ZodEnum<{
+        installable: "installable";
+        "coming-soon": "coming-soon";
+        "source-only": "source-only";
+    }>;
+    name: z.ZodRecord<z.ZodString, z.ZodString>;
+    tagline: z.ZodRecord<z.ZodString, z.ZodString>;
+    author: z.ZodObject<{
+        name: z.ZodString;
+        url: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    capabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    art: z.ZodDefault<z.ZodObject<{
+        tint: z.ZodOptional<z.ZodString>;
+        iconPaths: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        monogram: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    links: z.ZodObject<{
+        page: z.ZodString;
+    }, z.core.$strip>;
+    lastUpdatedAt: z.ZodString;
+    file: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+        size: z.ZodNumber;
+        publishedAt: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>>;
+    newerRelease: z.ZodOptional<z.ZodObject<{
+        version: z.ZodString;
+        minAdminiumVersion: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const appItemWireSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"app">;
+    release: z.ZodNullable<z.ZodObject<{
+        version: z.ZodString;
+        integrity: z.ZodString;
+        categories: z.ZodArray<z.ZodString>;
+        capabilities: z.ZodArray<z.ZodString>;
+        publisher: z.ZodString;
+        sides: z.ZodArray<z.ZodEnum<{
+            customer: "customer";
+            staff: "staff";
+        }>>;
+        minAdminiumVersion: z.ZodString;
+        addOns: z.ZodObject<{
+            requires: z.ZodArray<z.ZodObject<{
+                key: z.ZodString;
+            }, z.core.$loose>>;
+            suggests: z.ZodArray<z.ZodObject<{
+                key: z.ZodString;
+            }, z.core.$loose>>;
+            features: z.ZodArray<z.ZodObject<{
+                requires: z.ZodArray<z.ZodString>;
+            }, z.core.$loose>>;
+        }, z.core.$strict>;
+    }, z.core.$strict>>;
+    key: z.ZodString;
+    availability: z.ZodEnum<{
+        installable: "installable";
+        "coming-soon": "coming-soon";
+        "source-only": "source-only";
+    }>;
+    name: z.ZodRecord<z.ZodString, z.ZodString>;
+    tagline: z.ZodRecord<z.ZodString, z.ZodString>;
+    author: z.ZodObject<{
+        name: z.ZodString;
+        url: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    capabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    art: z.ZodDefault<z.ZodObject<{
+        tint: z.ZodOptional<z.ZodString>;
+        iconPaths: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        monogram: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    links: z.ZodObject<{
+        page: z.ZodString;
+    }, z.core.$strip>;
+    lastUpdatedAt: z.ZodString;
+    file: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+        size: z.ZodNumber;
+        publishedAt: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>>;
+    newerRelease: z.ZodOptional<z.ZodObject<{
+        version: z.ZodString;
+        minAdminiumVersion: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+/** The shelf document around the items: the items themselves are parsed one by one. */
+export declare const marketplaceShelfSchema: z.ZodObject<{
+    format: z.ZodLiteral<"adminium-marketplace/1">;
+    generatedAt: z.ZodString;
+    items: z.ZodArray<z.ZodUnknown>;
+}, z.core.$strip>;
+export type AddOnReleaseWire = z.infer<typeof addOnReleaseWireSchema>;
+export type AppReleaseWire = z.infer<typeof appReleaseWireSchema>;
+export type AddOnItemWire = z.infer<typeof addOnItemWireSchema>;
+export type AppItemWire = z.infer<typeof appItemWireSchema>;
+export interface ParsedShelf<T> {
+    generatedAt: string;
+    items: T[];
+    /** Items skipped because this server could not read them, with why. */
+    skipped: {
+        key: string | null;
+        reason: string;
+    }[];
+}
+/**
+ * One shelf, item by item. Null when the document is not this format at all.
+ *
+ * An `installable` item must carry a release, and the release must be one
+ * this reader can read; anything else is skipped with its reason.
+ */
+export declare function parseShelf<S extends typeof addOnItemWireSchema | typeof appItemWireSchema>(schema: S, document: unknown): ParsedShelf<z.infer<S>> | null;
+//# sourceMappingURL=marketplace-wire.d.ts.map

package/dist/marketplace-wire.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"marketplace-wire.d.ts","sourceRoot":"","sources":["../src/marketplace-wire.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,kBAAkB,2BAA2B,CAAC;AAE3D,sFAAsF;AACtF,eAAO,MAAM,uBAAuB,QAA2B,CAAC;AAChE,iHAAiH;AACjH,eAAO,MAAM,2BAA2B,QAAuE,CAAC;AAMhH,iDAAiD;AACjD,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;kBAaxB,CAAC;AAKZ,8CAA8C;AAC9C,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;kBAkBtB,CAAC;AAuBZ,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAK9B,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAI5B,CAAC;AAEH,uFAAuF;AACvF,eAAO,MAAM,sBAAsB;;;;iBAIjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,MAAM,WAAW,WAAW,CAAC,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,CAAC,EAAE,CAAC;IACX,uEAAuE;IACvE,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACnD;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,CAAC,SAAS,OAAO,mBAAmB,GAAG,OAAO,iBAAiB,EACxF,MAAM,EAAE,CAAC,EACT,QAAQ,EAAE,OAAO,GAChB,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAehC"}

package/dist/marketplace-wire.js

@@ -0,0 +1,138 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+/**
+ * The marketplace API's wire format, `adminium-marketplace/1` — what
+ * `https://adminium.dev/api/v1/marketplace/apps` and `/add-ons` answer, as an
+ * Adminium server reads it.
+ *
+ * ── TWO POSTURES IN ONE DOCUMENT ────────────────────────────────────────────
+ *
+ * THE ITEM IS LENIENT. Names, art, links and dates are display facts, and a
+ * field this server does not know is dropped (zod's default strip). That is
+ * what lets the site grow a display field without breaking every server
+ * already in service — the reason the static feeds before this had to move to
+ * a new address each time they changed (v1, v2, v3).
+ *
+ * THE RELEASE IS STRICT. `release` is the install contract: the exact version,
+ * the fingerprint the downloaded bytes are checked against, the floor, and
+ * what the verified file's manifest says. A field here that this server does
+ * not know is a refusal of that ITEM, never a warning — which is how "no price
+ * reaches an install" holds by construction rather than by nobody sending one.
+ * A pricing block at ITEM level is simply stripped: pricing is not shown in
+ * this round, and no DTO carries it.
+ *
+ * ONE ITEM, ONE VERDICT. Items are parsed one at a time: an item whose release
+ * this server cannot read is skipped and counted, and the rest of the shelf is
+ * still offered. Only a document that is not this format at all is refused.
+ *
+ * `?adminium=<version>`: the site offers each item's newest release this
+ * version can install, and names the newest one in `newerRelease` when that
+ * is a different one. An item whose every release is too new comes back with
+ * `release: null` and a `newerRelease`.
+ */
+import { z } from 'zod';
+export const MARKETPLACE_FORMAT = 'adminium-marketplace/1';
+/** An item key: the grammar the stores, the payloads and the download paths share. */
+export const MARKETPLACE_KEY_PATTERN = /^[a-z][a-z0-9-]{1,79}$/;
+/** An exact version — never a range, never `latest`. One optional tail group (see the add-on catalog client). */
+export const MARKETPLACE_VERSION_PATTERN = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:[-+][0-9A-Za-z.+-]+)?$/;
+const INTEGRITY_PATTERN = /^sha512-[A-Za-z0-9+/]+={0,2}$/;
+const localized = z.record(z.string(), z.string());
+const version = z.string().regex(MARKETPLACE_VERSION_PATTERN);
+/** An add-on release's install facts, strict. */
+export const addOnReleaseWireSchema = z
+    .object({
+    version,
+    integrity: z.string().regex(INTEGRITY_PATTERN),
+    categories: z.array(z.string()),
+    capabilities: z.array(z.string()),
+    connect: z.object({ kind: z.enum(['none', 'api-key', 'oauth2']) }).strict(),
+    provides: z.array(z.object({ contract: z.string(), version: z.number().int().positive() }).strict()),
+    attaches: z.array(z.object({ app: z.string(), range: z.string().optional() }).strict()),
+    network: z.object({ allow: z.array(z.string()) }).strict(),
+    minAdminiumVersion: version,
+    publisher: z.string().min(1).optional(),
+})
+    .strict();
+/** A need as the manifest declares it; read for display, the staged manifest decides the install. */
+const needWire = z.object({ key: z.string().regex(MARKETPLACE_KEY_PATTERN) }).passthrough();
+/** An app release's install facts, strict. */
+export const appReleaseWireSchema = z
+    .object({
+    version,
+    integrity: z.string().regex(INTEGRITY_PATTERN),
+    categories: z.array(z.string()),
+    capabilities: z.array(z.string()),
+    publisher: z.string().min(1),
+    sides: z.array(z.enum(['staff', 'customer'])).min(1),
+    minAdminiumVersion: version,
+    /** Which add-ons the app needs or can use (the "Needs Invoices" line). */
+    addOns: z
+        .object({
+        requires: z.array(needWire),
+        suggests: z.array(needWire),
+        features: z.array(z.object({ requires: z.array(z.string()) }).passthrough()),
+    })
+        .strict(),
+})
+    .strict();
+const itemBase = {
+    key: z.string().regex(MARKETPLACE_KEY_PATTERN),
+    /** `installable` offers a release; `coming-soon` is listed and cannot be downloaded; `source-only` has none to offer. */
+    availability: z.enum(['installable', 'coming-soon', 'source-only']),
+    name: localized.refine((map) => typeof map['en'] === 'string' && map['en'] !== '', 'an English name'),
+    tagline: localized,
+    author: z.object({ name: z.string(), url: z.string().optional() }),
+    capabilities: z.array(z.string()).default([]),
+    art: z
+        .object({
+        tint: z.string().optional(),
+        iconPaths: z.array(z.string()).optional(),
+        monogram: z.string().optional(),
+    })
+        .default({}),
+    links: z.object({ page: z.string() }),
+    lastUpdatedAt: z.string(),
+    file: z.object({ size: z.number().int().nonnegative(), publishedAt: z.string().nullable() }).nullable().default(null),
+    newerRelease: z.object({ version, minAdminiumVersion: version }).optional(),
+};
+export const addOnItemWireSchema = z.object({
+    ...itemBase,
+    kind: z.literal('add-on'),
+    categoryKey: z.string().nullable().default(null),
+    release: addOnReleaseWireSchema.nullable(),
+});
+export const appItemWireSchema = z.object({
+    ...itemBase,
+    kind: z.literal('app'),
+    release: appReleaseWireSchema.nullable(),
+});
+/** The shelf document around the items: the items themselves are parsed one by one. */
+export const marketplaceShelfSchema = z.object({
+    format: z.literal(MARKETPLACE_FORMAT),
+    generatedAt: z.string().min(1),
+    items: z.array(z.unknown()),
+});
+/**
+ * One shelf, item by item. Null when the document is not this format at all.
+ *
+ * An `installable` item must carry a release, and the release must be one
+ * this reader can read; anything else is skipped with its reason.
+ */
+export function parseShelf(schema, document) {
+    const shelf = marketplaceShelfSchema.safeParse(document);
+    if (!shelf.success)
+        return null;
+    const items = [];
+    const skipped = [];
+    for (const raw of shelf.data.items) {
+        const key = typeof raw === 'object' && raw !== null && typeof raw.key === 'string' ? raw.key : null;
+        const parsed = schema.safeParse(raw);
+        if (!parsed.success) {
+            skipped.push({ key, reason: parsed.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`).join('; ') });
+            continue;
+        }
+        items.push(parsed.data);
+    }
+    return { generatedAt: shelf.data.generatedAt, items, skipped };
+}
+//# sourceMappingURL=marketplace-wire.js.map

package/dist/marketplace-wire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"marketplace-wire.js","sourceRoot":"","sources":["../src/marketplace-wire.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,kBAAkB,GAAG,wBAAwB,CAAC;AAE3D,sFAAsF;AACtF,MAAM,CAAC,MAAM,uBAAuB,GAAG,wBAAwB,CAAC;AAChE,iHAAiH;AACjH,MAAM,CAAC,MAAM,2BAA2B,GAAG,oEAAoE,CAAC;AAChH,MAAM,iBAAiB,GAAG,+BAA+B,CAAC;AAE1D,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AACnD,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;AAE9D,iDAAiD;AACjD,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,OAAO;IACP,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC;IAC9C,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC/B,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACjC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3E,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IACpG,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IACvF,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1D,kBAAkB,EAAE,OAAO;IAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACxC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,qGAAqG;AACrG,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAE5F,8CAA8C;AAC9C,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,OAAO;IACP,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC;IAC9C,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC/B,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpD,kBAAkB,EAAE,OAAO;IAC3B,0EAA0E;IAC1E,MAAM,EAAE,CAAC;SACN,MAAM,CAAC;QACN,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC3B,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC3B,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;KAC7E,CAAC;SACD,MAAM,EAAE;CACZ,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,QAAQ,GAAG;IACf,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC;IAC9C,yHAAyH;IACzH,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;IACnE,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,iBAAiB,CAAC;IACrG,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;IAClE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7C,GAAG,EAAE,CAAC;SACH,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACzC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAChC,CAAC;SACD,OAAO,CAAC,EAAE,CAAC;IACd,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACrC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACrH,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC5E,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,GAAG,QAAQ;IACX,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAChD,OAAO,EAAE,sBAAsB,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,GAAG,QAAQ;IACX,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACtB,OAAO,EAAE,oBAAoB,CAAC,QAAQ,EAAE;CACzC,CAAC,CAAC;AAEH,uFAAuF;AACvF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC;IACrC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;CAC5B,CAAC,CAAC;AAcH;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CACxB,MAAS,EACT,QAAiB;IAEjB,MAAM,KAAK,GAAG,sBAAsB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACzD,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,MAAM,OAAO,GAA6C,EAAE,CAAC;IAC7D,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,OAAQ,GAAyB,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAE,GAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAChJ,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC9G,SAAS;QACX,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAkB,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AACjE,CAAC"}