@bridgething/catalog 0.1.0 → 0.12.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Joey Eamigh
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,42 @@
+# @bridgething/catalog
+
+The `catalog.v1` schema, its validator, and the rules for resolving what to
+install. A catalog is the document a [bridgething](https://github.com/JoeyEamigh/bridgething)
+app source publishes; the companion apps, the desktop app, and bridgething.com
+all read one through this package.
+
+```sh
+bun add @bridgething/catalog
+```
+
+```ts
+import { newestCompatible, validate } from '@bridgething/catalog';
+
+const catalog = validate(await (await fetch(url)).json());
+const version = newestCompatible(catalog.apps[0], deviceLibVersion);
+```
+
+`validate` checks the JSON Schema and then the cross-reference rules the schema
+cannot express: app ids are unique uuidv7, a version appears once per app,
+`versions[]` is newest-first by `released_at`, extension permissions are real
+Deno descriptors, and an app shipping a native extension names a `github.com`
+repo as its source. It throws `CatalogValidationError` listing every failure,
+not the first. `validateSchema` and `validateInvariants` are exported separately.
+
+`newestCompatible` sorts by `released_at` itself and compares
+`min_libbridgething_version` against the version the device reports, leading `v`
+and all. Do not pre-sort or pre-strip.
+
+An installed app takes updates only from the source it came from. A different
+source offering the same app id is a cross-grade the user picks deliberately,
+never a silent update.
+
+Publishing a source: `bun create bridgething` scaffolds one, and
+[`@bridgething/source`](https://www.npmjs.com/package/@bridgething/source) is the toolkit it wires
+up, which builds, hosts and validates for you. Hosting your own means
+serving `Access-Control-Allow-Origin: *` on the catalog and every
+`download.url`, and never changing the bytes behind a published version. The
+schema ships here as `@bridgething/catalog/schema.v1.json`.
+
+- Docs: <https://bridgething.com/docs/publishing-apps>
+- Source: <https://github.com/JoeyEamigh/bridgething>

package/dist/blend.d.ts

@@ -1,4 +1,4 @@
-import { type CatalogAppListing, type InstalledWebapp } from './resolve.ts';
+import { type CatalogAppListing, type ExtensionOffering, type InstalledWebapp } from './resolve.ts';
 import type { MergedCatalog } from './sources.ts';
 import type { InstallCount, SourceCatalog } from './types.ts';
 export type StoreListings = {
@@ -13,5 +13,6 @@ export declare function blendStoreListings(args: {
     deviceLibVersion: string | null;
     installs: InstallCount[];
     subscribed: string[];
+    extensions: ExtensionOffering;
 }): StoreListings;
 //# sourceMappingURL=blend.d.ts.map

package/dist/blend.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"blend.d.ts","sourceRoot":"","sources":["../src/blend.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,KAAK,iBAAiB,EAAE,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC;AACvF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE9D,MAAM,MAAM,aAAa,GAAG;IAC1B,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,SAAS,EAAE,iBAAiB,EAAE,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC,CAAC;AAEF,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IACvC,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,SAAS,EAAE,eAAe,EAAE,CAAC;IAC7B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB,GAAG,aAAa,CA2BhB"}
+{"version":3,"file":"blend.d.ts","sourceRoot":"","sources":["../src/blend.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,KAAK,iBAAiB,EAAE,KAAK,iBAAiB,EAAE,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/G,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE9D,MAAM,MAAM,aAAa,GAAG;IAC1B,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,SAAS,EAAE,iBAAiB,EAAE,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC,CAAC;AAEF,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IACvC,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,SAAS,EAAE,eAAe,EAAE,CAAC;IAC7B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,UAAU,EAAE,iBAAiB,CAAC;CAC/B,GAAG,aAAa,CA4BhB"}

package/dist/blend.js

@@ -14,6 +14,7 @@ export function blendStoreListings(args) {
         installed: args.installed,
         deviceLibVersion: args.deviceLibVersion,
         installs: args.installs,
+        extensions: args.extensions,
     });
     const sourceNames = {};
     for (const { url, catalog } of orderedCatalogs)

package/dist/blend.js.map

@@ -1 +1 @@
-{"version":3,"file":"blend.js","sourceRoot":"","sources":["../src/blend.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAgD,MAAM,cAAc,CAAC;AAUvF,MAAM,UAAU,kBAAkB,CAAC,IAOlC;IACC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACvE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAClH,MAAM,QAAQ,GAAG,CAAC,KAAoB,EAAiB,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAEvG,MAAM,eAAe,GAAoB;QACvC,GAAG,IAAI,CAAC,QAAQ;QAChB,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;QACtE,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;KACtE,CAAC;IAEF,MAAM,QAAQ,GAAG,SAAS,CAAC;QACzB,eAAe;QACf,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC,CAAC;IAEH,MAAM,WAAW,GAA2B,EAAE,CAAC;IAC/C,KAAK,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,eAAe;QAAE,WAAW,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;IAErF,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC1E,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC3E,WAAW;KACZ,CAAC;AACJ,CAAC"}
+{"version":3,"file":"blend.js","sourceRoot":"","sources":["../src/blend.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAwE,MAAM,cAAc,CAAC;AAU/G,MAAM,UAAU,kBAAkB,CAAC,IAQlC;IACC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACvE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAClH,MAAM,QAAQ,GAAG,CAAC,KAAoB,EAAiB,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAEvG,MAAM,eAAe,GAAoB;QACvC,GAAG,IAAI,CAAC,QAAQ;QAChB,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;QACtE,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;KACtE,CAAC;IAEF,MAAM,QAAQ,GAAG,SAAS,CAAC;QACzB,eAAe;QACf,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC,CAAC;IAEH,MAAM,WAAW,GAA2B,EAAE,CAAC;IAC/C,KAAK,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,eAAe;QAAE,WAAW,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;IAErF,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC1E,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC3E,WAAW;KACZ,CAAC;AACJ,CAAC"}

package/dist/extension.d.ts

@@ -0,0 +1,10 @@
+import type { AppEntry, AppExtension, AppVersion } from './types.ts';
+export declare const EXTENSION_PERMISSION_PATTERN: RegExp;
+export declare const EXTENSION_SOURCE_PATTERN: RegExp;
+export declare function isExtensionPermission(permission: string): boolean;
+export declare function extensionOf(version: AppVersion | null | undefined): AppExtension | null;
+export declare function declaresExtension(app: AppEntry): boolean;
+export declare function describeExtensionPermission(permission: string): string;
+export declare function extensionRepoLabel(source: string | null | undefined): string | null;
+export declare function describeExtensionPermissions(extension: AppExtension): string[];
+//# sourceMappingURL=extension.d.ts.map

package/dist/extension.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension.d.ts","sourceRoot":"","sources":["../src/extension.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAErE,eAAO,MAAM,4BAA4B,QAA4D,CAAC;AAEtG,eAAO,MAAM,wBAAwB,QAA6C,CAAC;AAEnF,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAEjE;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,GAAG,SAAS,GAAG,YAAY,GAAG,IAAI,CAEvF;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAExD;AAED,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAyBtE;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAInF;AAED,wBAAgB,4BAA4B,CAAC,SAAS,EAAE,YAAY,GAAG,MAAM,EAAE,CAG9E"}

package/dist/extension.js

@@ -0,0 +1,49 @@
+export const EXTENSION_PERMISSION_PATTERN = /^(?:all|(?:net|read|write|run|env|sys|ffi)(?::[^,]+)?)$/;
+export const EXTENSION_SOURCE_PATTERN = /^https:\/\/github\.com\/[^/]+\/[^/]+\/?$/;
+export function isExtensionPermission(permission) {
+    return EXTENSION_PERMISSION_PATTERN.test(permission);
+}
+export function extensionOf(version) {
+    return version?.extension ?? null;
+}
+export function declaresExtension(app) {
+    return app.versions.some(version => extensionOf(version) !== null);
+}
+export function describeExtensionPermission(permission) {
+    const cut = permission.indexOf(':');
+    const verb = cut === -1 ? permission : permission.slice(0, cut);
+    const scope = cut === -1 ? null : permission.slice(cut + 1);
+    switch (verb) {
+        case 'all':
+            return scope === null ? 'full host access' : permission;
+        case 'net':
+            return scope === null ? 'reach any network host' : `reach ${scope}`;
+        case 'read':
+            return scope === null ? 'read any file' : `read ${scope}`;
+        case 'write':
+            return scope === null ? 'write any file' : `write ${scope}`;
+        case 'run':
+            return scope === null ? 'run any program' : `run ${scope}`;
+        case 'env':
+            return scope === null ? 'read every environment variable' : `read the ${scope} environment variable`;
+        case 'sys':
+            return scope === null ? 'read system information' : `read system ${scope}`;
+        case 'ffi':
+            return scope === null ? 'load any native library' : `load the native library ${scope}`;
+        default:
+            return permission;
+    }
+}
+export function extensionRepoLabel(source) {
+    if (!source)
+        return null;
+    if (!EXTENSION_SOURCE_PATTERN.test(source))
+        return source;
+    return source.replace(/^https:\/\/github\.com\//, '').replace(/\/$/, '');
+}
+export function describeExtensionPermissions(extension) {
+    if (extension.permissions.length === 0)
+        return ['nothing beyond talking to your Car Thing'];
+    return extension.permissions.map(describeExtensionPermission);
+}
+//# sourceMappingURL=extension.js.map

package/dist/extension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension.js","sourceRoot":"","sources":["../src/extension.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,4BAA4B,GAAG,yDAAyD,CAAC;AAEtG,MAAM,CAAC,MAAM,wBAAwB,GAAG,0CAA0C,CAAC;AAEnF,MAAM,UAAU,qBAAqB,CAAC,UAAkB;IACtD,OAAO,4BAA4B,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAsC;IAChE,OAAO,OAAO,EAAE,SAAS,IAAI,IAAI,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAa;IAC7C,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,UAAkB;IAC5D,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IAE5D,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,KAAK;YACR,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,UAAU,CAAC;QAC1D,KAAK,KAAK;YACR,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,KAAK,EAAE,CAAC;QACtE,KAAK,MAAM;YACT,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,KAAK,EAAE,CAAC;QAC5D,KAAK,OAAO;YACV,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,KAAK,EAAE,CAAC;QAC9D,KAAK,KAAK;YACR,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC;QAC7D,KAAK,KAAK;YACR,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,YAAY,KAAK,uBAAuB,CAAC;QACvG,KAAK,KAAK;YACR,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,eAAe,KAAK,EAAE,CAAC;QAC7E,KAAK,KAAK;YACR,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,2BAA2B,KAAK,EAAE,CAAC;QACzF;YACE,OAAO,UAAU,CAAC;IACtB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAiC;IAClE,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAC1D,OAAO,MAAM,CAAC,OAAO,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,SAAuB;IAClE,IAAI,SAAS,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,0CAA0C,CAAC,CAAC;IAC5F,OAAO,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;AAChE,CAAC"}