@capybara-hq/kernel 0.1.0-rc.14 → 0.1.0-rc.15

package/dist/catalog/catalog-import.module.js

@@ -5,6 +5,7 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
     return c > 3 && r && Object.defineProperty(target, key, r), r;
 };
 import { Module } from "@nestjs/common";
+import { ClientModule } from "../client/client.module.js";
 import { ExtensionsModule } from "../extensions/extensions.module.js";
 import { SuperAdminLockModule } from "../identity/super-admin.js";
 import { QueueModule } from "../infra/queue/queue.module.js";
@@ -34,6 +35,8 @@ CatalogImportModule = __decorate([
             // an org upload re-checks the owner org's admin (`PluginImport`, ruling P3-7)
             OrgLockModule,
             StorageModule,
+            // the client build prefix goes with an expired org upload's package (`PluginImport`)
+            ClientModule,
             // a failed post-import platform sync enqueues the migration job (`PluginImport.syncPlatform`)
             QueueModule.registerQueue(MAINTENANCE_QUEUE_NAME),
         ],

package/dist/catalog/catalog-items.d.ts

@@ -37,6 +37,12 @@ export interface CatalogListing {
     description: string;
     displayName: LocalizedName | null;
 }
+/**
+ * A stored manifest with `suggestedAppearance.replacements` back in plugin.json order: `order` is
+ * the version's `appearance_order` (the jsonb column does not keep key order); keys it does not
+ * name follow in stored order. Anything else is returned as is.
+ */
+export declare function inAuthorOrder(manifest: unknown, order: readonly string[] | null): unknown;
 /** Input of {@link writeCatalogVersion}. */
 export interface CatalogVersionWrite {
     /**
@@ -60,6 +66,11 @@ export interface CatalogVersionWrite {
     contentDigest: string;
     /** The normalized plugin.json. */
     manifest: PluginManifest;
+    /**
+     * The keys of `manifest.suggestedAppearance.replacements` in plugin.json order (the manifest may
+     * have passed through jsonb, which does not keep key order); null without replacements.
+     */
+    appearanceOrder: string[] | null;
     listing: CatalogListing;
     /** The id of the item to create when there is none yet (the one the storage prefix used). */
     newItemId: string;

package/dist/catalog/catalog-items.js

@@ -69,6 +69,26 @@ export function permissionsMismatch(declared, actual) {
     const extra = [...want].filter((k) => !have.has(k)).sort();
     return missing.length > 0 || extra.length > 0 ? { missing, extra } : null;
 }
+/**
+ * A stored manifest with `suggestedAppearance.replacements` back in plugin.json order: `order` is
+ * the version's `appearance_order` (the jsonb column does not keep key order); keys it does not
+ * name follow in stored order. Anything else is returned as is.
+ */
+export function inAuthorOrder(manifest, order) {
+    const m = manifest;
+    const r = m?.suggestedAppearance?.replacements;
+    if (order === null || r === null || typeof r !== "object" || Array.isArray(r))
+        return manifest;
+    const map = r;
+    const keys = new Set([...order.filter((k) => Object.hasOwn(map, k)), ...Object.keys(map)]);
+    return {
+        ...m,
+        suggestedAppearance: {
+            ...m?.suggestedAppearance,
+            replacements: Object.fromEntries([...keys].map((k) => [k, map[k]])),
+        },
+    };
+}
 /**
  * The live item of a name, with the source identity of its latest version
  * ({@link sourceIdentity}; null when there is none).
@@ -274,6 +294,7 @@ export async function writeCatalogVersion(db, w) {
         item_id: id,
         version,
         manifest: JSON.stringify(w.manifest),
+        appearance_order: w.appearanceOrder,
         source: w.source.source,
         source_ref: w.source.ref,
         integrity: w.source.integrity ?? null,

package/dist/catalog/catalog-scope.service.d.ts

@@ -166,6 +166,13 @@ export declare class CatalogScopeService {
     private confirmLocked;
     /** The item is live and its first version confirmed (no longer awaiting). */
     private confirmed;
+    /**
+     * The error a failed confirmation step answers with: 409 `catalog.item_removed` when the item is
+     * gone or soft-deleted by now, whichever step failed (the removal's cleanup job may take the
+     * extension out under the confirmation, so a step answers `extension.not_found`), the original
+     * error logged; else (or when the item cannot be read) the original error.
+     */
+    private removalOr;
     /** Clears the pending state of a version an earlier confirmation applied already. */
     private clearPending;
     /**

package/dist/catalog/catalog-scope.service.js

@@ -335,26 +335,23 @@ let CatalogScopeService = class CatalogScopeService {
             // A new version: applied (unless an earlier confirmation applied it and stopped before the
             // approval), then its permissions approved; an approval that fails puts the pending state
             // back, so the version shows in 待确认 again (ruling P3-37)
-            if (item.platform_synced_version !== version) {
-                try {
+            try {
+                if (item.platform_synced_version !== version) {
                     await this.updater.updateToPendingLocked(actor, itemId, version, opts);
                 }
+                else {
+                    await this.clearPending(itemId, version);
+                }
+                try {
+                    await this.approvePackage(actor, name, sha, reviewHash, opts);
+                }
                 catch (e) {
-                    if (e instanceof ApiError && e.code === "catalog.item_not_found") {
-                        throw itemRemovedError(name);
-                    }
+                    await this.restorePending(itemId, pending);
                     throw e;
                 }
             }
-            else {
-                await this.clearPending(itemId, version);
-            }
-            try {
-                await this.approvePackage(actor, name, sha, reviewHash, opts);
-            }
             catch (e) {
-                await this.restorePending(itemId, pending);
-                throw e;
+                throw await this.removalOr(e, itemId, name);
             }
             return null;
         }
@@ -362,7 +359,10 @@ let CatalogScopeService = class CatalogScopeService {
         let installedHere = false;
         try {
             if (install?.sha256 !== sha) {
-                await this.ops.install(name, sha, actor, opts.actorTokenId, { catalogItemId: itemId });
+                await this.ops.install(name, sha, actor, opts.actorTokenId, {
+                    catalogItemId: itemId,
+                    liveItem: true,
+                });
                 installedHere = install === undefined;
             }
             await this.stillPending(itemId, name, version);
@@ -377,7 +377,7 @@ let CatalogScopeService = class CatalogScopeService {
             if (installedHere && !(await this.confirmed(itemId))) {
                 await this.takeOut(itemId, name, actor, opts);
             }
-            throw e;
+            throw await this.removalOr(e, itemId, name);
         }
         return version;
     }
@@ -390,6 +390,46 @@ let CatalogScopeService = class CatalogScopeService {
             .executeTakeFirst();
         return row !== undefined && row.deleted_at === null && !row.awaiting_confirmation;
     }
+    /**
+     * The error a failed confirmation step answers with: 409 `catalog.item_removed` when the item is
+     * gone or soft-deleted by now, whichever step failed (the removal's cleanup job may take the
+     * extension out under the confirmation, so a step answers `extension.not_found`), the original
+     * error logged; else (or when the item cannot be read) the original error.
+     */
+    async removalOr(e, itemId, name) {
+        if (e instanceof ApiError && e.code === "catalog.item_removed")
+            return e;
+        let removed;
+        try {
+            const row = await this.db
+                .selectFrom("catalog_items")
+                .select("deleted_at")
+                .where("id", "=", itemId)
+                .executeTakeFirst();
+            removed = row === undefined || row.deleted_at !== null;
+        }
+        catch (err) {
+            this.log.warn("cannot read the item of a failed confirmation", { itemId, err });
+            return e;
+        }
+        if (!removed)
+            return e;
+        if (e instanceof ApiError) {
+            this.log.info("a confirmation step failed after its item was removed", {
+                itemId,
+                name,
+                code: e.code,
+            });
+        }
+        else {
+            this.log.warn("a confirmation step failed after its item was removed", {
+                itemId,
+                name,
+                err: e,
+            });
+        }
+        return itemRemovedError(name);
+    }
     /** Clears the pending state of a version an earlier confirmation applied already. */
     async clearPending(itemId, version) {
         await this.db

package/dist/catalog/catalog.service.js

@@ -22,7 +22,7 @@ import { TransactionHost } from "../infra/database/transaction-host.js";
 import { Transactional } from "../infra/database/transactional.decorator.js";
 import { sameRepository } from "../packages/provenance.js";
 import { assertNotPlatformDefault } from "../themes/theme-usage.js";
-import { countInstalls, itemConfirmations, itemScopeFacts, itemView, marketplaceLatest, versionUsable, } from "./catalog-items.js";
+import { countInstalls, inAuthorOrder, itemConfirmations, itemScopeFacts, itemView, marketplaceLatest, versionUsable, } from "./catalog-items.js";
 import { expandGitUrl, GitSourceError, gitErrorDetails, normalGitPath, readGitTreeAndOids, resolveGitCommit, } from "./git-source.js";
 import { fetchMarketplaceArchive, marketplaceNetPolicy, marketplaceUrlProblem, } from "./marketplace-fetch.js";
 import { assertEntryNotDeprecated, entryCompatible, entrySourceHost, HOST_VERSIONS, hostAllowed, loadMarketplaceEntry, MarketplacesService, pluginNameFrom, } from "./marketplaces.service.js";
@@ -448,7 +448,7 @@ let CatalogService = class CatalogService {
                 integrity: v.integrity,
                 contentDigest: v.content_digest,
                 sourceDetail: v.source_detail ?? null,
-                manifest: v.manifest,
+                manifest: inAuthorOrder(v.manifest, v.appearance_order),
                 files: v.files,
                 size: Number(v.size),
                 extensionSha256: v.extension_sha256,
@@ -487,6 +487,14 @@ let CatalogService = class CatalogService {
     }
     async writeRemove(actor, itemId, opts) {
         await this.adminLock.lockAndAuthorize(actor);
+        // The item row before the install lock the check below takes (the global lock order: the
+        // item, then the install lock, ruling P3-50; also the item before its theme rows in removeIn)
+        await this.db
+            .selectFrom("catalog_items")
+            .select("id")
+            .where("id", "=", itemId)
+            .forUpdate()
+            .execute();
         await this.assertExtensionDisabled(this.db, itemId, true);
         if ((await this.removeIn(actor, itemId, opts)) === null)
             throw notFound();

package/dist/catalog/cli.js

@@ -2,6 +2,7 @@ import { mkdtemp, rm } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { OBJECT_STORE_EXTENSION_POINT, } from "@capybara-hq/plugin-sdk";
+import { ClientBuilds } from "../client/client-builds.service.js";
 import { ApiError } from "../errors.js";
 import { planApprovals, snapshotCovers } from "../extensions/approvals.js";
 import { openExtensionCli } from "../extensions/cli.js";
@@ -178,6 +179,8 @@ export async function openCatalogCli(config, log, opts = {}) {
         // inspection (the registry), marketplace imports are not offered by the CLI.
         const imports = cli.app.get(PluginImport);
         imports.useCliStorage(storage);
+        // and so do the client files of a package with client code (stored with the package)
+        cli.app.get(ClientBuilds).useCliStorage(storage);
         const catalog = cli.app.get(CatalogService);
         const db = cli.app.get(KernelDb);
         const redis = cli.app.get(REDIS);

package/dist/catalog/marketplaces.service.d.ts

@@ -188,7 +188,7 @@ export declare function headsToResolve(entries: readonly MarketplaceEntry[], imp
 /** The host versions (an entry's `minKernel` is judged against them). */
 export declare const HOST_VERSIONS: {
     readonly kernel: string;
-    readonly sdk: "0.1.0-rc.10";
+    readonly sdk: "0.1.0-rc.11";
 };
 /** Whether this deployment satisfies the entry's `minKernel`. */
 export declare const entryCompatible: (e: Pick<MarketplaceEntry, "minKernel">) => boolean;

package/dist/catalog/org-extension.controller.d.ts

@@ -1,5 +1,6 @@
-import type { LocalizedName } from "@capybara-hq/plugin-sdk";
+import type { LocalizedName, SuggestedAppearance } from "@capybara-hq/plugin-sdk";
 import { z } from "zod";
+import { type ClientBuildSummary, ClientBuilds } from "../client/client-builds.service.js";
 import { ExtensionDisplayNames } from "../extensions/display-name.js";
 import { OrgExtensionConfigs, type OrgExtensionView } from "../extensions/org-config.js";
 import { OrgOverrides, type OrgOverrideView } from "../extensions/org-overrides.js";
@@ -7,6 +8,8 @@ import { PluginIcons } from "../extensions/plugin-icons.js";
 import { type Principal } from "../identity/principal.js";
 import { type OrgContext } from "../orgs/org.guard.js";
 import { type OrgToolSwitch, OrgToolSwitches, type OrgToolSwitchResult } from "../tools/org-tool-switches.js";
+import { AppearanceApplyBody } from "./appearance.schemas.js";
+import { type AppearanceResult, AppearanceService } from "./appearance.service.js";
 import { OrgExtensionParams as ExtensionParams, OrgExtensionToolParams as ToolParams, OrgToolSwitchPut as ToolSwitchPut } from "./org-extension.schemas.js";
 import { OrgExtensionSwitch } from "./org-extension-switch.js";
 import type { UninstallPreview } from "./plugin-install.js";
@@ -31,20 +34,26 @@ declare const OverridesTake: z.ZodObject<{
 /**
  * One extension of the org list: the org view plus the plugin's display name, the URL of its
  * plugin's icon on the org's catalog route (null without one or when the org may not see the
- * plugin's item) and the extension points it provides (`channel@1`, `web-search@1`, … the names
- * only, also for members).
+ * plugin's item), the extension points it provides (`channel@1`, `web-search@1`, … the names
+ * only, also for members), the plugin's suggested appearance (null without one; the page offers
+ * 应用此插件的外观 to org admins when set, client extensions spec §6.5) and the client build of the
+ * running package (files with sizes, total, client API version; null without one: the permission
+ * review's 客户端代码 group, spec §5.4).
  */
 export type OrgExtensionItem = OrgExtensionView & {
     displayName: LocalizedName | null;
     icon: string | null;
     provides: string[];
+    suggestedAppearance: SuggestedAppearance | null;
+    client: ClientBuildSummary | null;
 };
 /**
  * What a member sees of an extension: its state and the points it provides (names only, what the
- * 扩展 page sorts by), never the org config, the secrets' state, the config schema or the
- * permission list.
+ * 扩展 page sorts by), never the org config, the secrets' state, the config schema, the
+ * permission list, the suggested appearance (members cannot apply it) or the client build (part of
+ * the permission review).
  */
-export type OrgExtensionMemberItem = Omit<OrgExtensionItem, "config" | "secrets" | "orgConfigSchema" | "permissions">;
+export type OrgExtensionMemberItem = Omit<OrgExtensionItem, "config" | "secrets" | "orgConfigSchema" | "permissions" | "suggestedAppearance" | "client">;
 /**
  * Org-level extension enablement and config (`/api/v1/orgs/:orgId/extensions`); responses echo only
  * non-secret config and whether each secret is set.
@@ -54,7 +63,9 @@ export declare class OrgExtensionConfigsController {
     private readonly displayNames;
     private readonly extSwitch;
     private readonly icons;
-    constructor(configs: OrgExtensionConfigs, displayNames: ExtensionDisplayNames, extSwitch: OrgExtensionSwitch, icons: PluginIcons);
+    private readonly appearance;
+    private readonly clientBuilds;
+    constructor(configs: OrgExtensionConfigs, displayNames: ExtensionDisplayNames, extSwitch: OrgExtensionSwitch, icons: PluginIcons, appearance: AppearanceService, clientBuilds: ClientBuilds);
     /**
      * The org's extensions (also the channel plugin options: those providing `channel@1`). Members
      * get the projection {@link OrgExtensionMemberItem}; admins the full view.
@@ -72,6 +83,15 @@ export declare class OrgExtensionConfigsController {
         preview: UninstallPreview;
         confirm: string;
     }>;
+    /**
+     * 应用此插件的外观 (client extensions spec §6.5), for a plugin whose extension is on in the org:
+     * sets the plugin's suggested theme as the org's default theme (keeping `personal`) and each
+     * suggested replacement as the org arrangement's `use` of its slot, in one transaction.
+     * `dryRun: true` answers the same changes and writes nothing. A theme not on in the org -> 400
+     * `theme.not_available` (nothing written); a replacement not available in the org is skipped.
+     * An extension not on in the org, or a plugin without a suggestion -> 404 `extension.not_found`.
+     */
+    applyAppearance(principal: Principal, org: OrgContext, { extension }: z.infer<typeof ExtensionParams>, body: z.infer<typeof AppearanceApplyBody>): Promise<AppearanceResult>;
 }
 /**
  * The org's two-level deployment config of an extension (spec A §5.3 to §5.6): following or a copy,

package/dist/catalog/org-extension.controller.js

@@ -9,6 +9,7 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
 };
 import { Controller, Delete, Get, HttpCode, Inject, Param, Post, Put } from "@nestjs/common";
 import { z } from "zod";
+import { ClientBuilds } from "../client/client-builds.service.js";
 import { ExtensionDisplayNames } from "../extensions/display-name.js";
 import { OrgExtensionConfigs, providesOf, } from "../extensions/org-config.js";
 import { OrgOverrides } from "../extensions/org-overrides.js";
@@ -19,6 +20,8 @@ import { ZBody, ZParam } from "../infra/validation/zod-params.js";
 import { CurrentOrg, OrgAction } from "../orgs/org.guard.js";
 import { roleAtLeast } from "../orgs/roles.js";
 import { OrgToolSwitches, } from "../tools/org-tool-switches.js";
+import { AppearanceApplyBody } from "./appearance.schemas.js";
+import { AppearanceService } from "./appearance.service.js";
 import { OrgExtensionParams as ExtensionParams, OrgExtensionToolParams as ToolParams, OrgToolSwitchPut as ToolSwitchPut, } from "./org-extension.schemas.js";
 import { OrgExtensionSwitch } from "./org-extension-switch.js";
 const PutBody = z
@@ -65,6 +68,8 @@ class OrgExtensionParamsDto extends createZodDto(ExtensionParams, "OrgExtensionP
 }
 class OrgExtensionToolParamsDto extends createZodDto(ToolParams, "OrgExtensionToolParams") {
 }
+class OrgAppearanceApplyBody extends createZodDto(AppearanceApplyBody, "OrgAppearanceApplyBody") {
+}
 class OrgOverridesPutBody extends createZodDto(OverridesPut, "OrgOverridesPutBody") {
 }
 class OrgOverridesTakeBody extends createZodDto(OverridesTake, "OrgOverridesTakeBody") {
@@ -78,11 +83,15 @@ let OrgExtensionConfigsController = class OrgExtensionConfigsController {
     displayNames;
     extSwitch;
     icons;
-    constructor(configs, displayNames, extSwitch, icons) {
+    appearance;
+    clientBuilds;
+    constructor(configs, displayNames, extSwitch, icons, appearance, clientBuilds) {
         this.configs = configs;
         this.displayNames = displayNames;
         this.extSwitch = extSwitch;
         this.icons = icons;
+        this.appearance = appearance;
+        this.clientBuilds = clientBuilds;
     }
     /**
      * The org's extensions (also the channel plugin options: those providing `channel@1`). Members
@@ -91,20 +100,25 @@ let OrgExtensionConfigsController = class OrgExtensionConfigsController {
     async list(org) {
         const views = await this.configs.list(org.orgId);
         const plugins = views.map((v) => v.plugin);
-        const [names, icons] = await Promise.all([
+        const admin = roleAtLeast(org.role, "admin");
+        const [names, icons, suggestions, clients] = await Promise.all([
             this.displayNames.many(plugins),
             this.icons.many(plugins, orgIconScope(org)),
+            admin ? this.appearance.suggestions(plugins) : new Map(),
+            admin ? this.clientBuilds.installedSummaries(plugins) : new Map(),
         ]);
         const items = views.map((v) => ({
             ...v,
             displayName: names.get(v.plugin) ?? null,
             icon: icons.get(v.plugin) ?? null,
             provides: providesOf(v),
+            suggestedAppearance: suggestions.get(v.plugin) ?? null,
+            client: clients.get(v.plugin) ?? null,
         }));
-        if (roleAtLeast(org.role, "admin"))
+        if (admin)
             return { extensions: items };
         return {
-            extensions: items.map(({ config: _c, secrets: _s, orgConfigSchema: _o, permissions: _p, ...rest }) => rest),
+            extensions: items.map(({ config: _c, secrets: _s, orgConfigSchema: _o, permissions: _p, suggestedAppearance: _a, client: _cl, ...rest }) => rest),
         };
     }
     /**
@@ -116,9 +130,11 @@ let OrgExtensionConfigsController = class OrgExtensionConfigsController {
         const r = await this.extSwitch.put(org.orgId, p.account.id, extension, body, patTokenId(p));
         if (r.kind === "preview")
             return { preview: r.preview, confirm: r.confirm };
-        const [displayName, icons] = await Promise.all([
+        const [displayName, icons, suggestions, clients] = await Promise.all([
             this.displayNames.get(r.view.plugin),
             this.icons.many([r.view.plugin], orgIconScope(org)),
+            this.appearance.suggestions([r.view.plugin]),
+            this.clientBuilds.installedSummaries([r.view.plugin]),
         ]);
         return {
             extension: {
@@ -126,9 +142,24 @@ let OrgExtensionConfigsController = class OrgExtensionConfigsController {
                 displayName,
                 icon: icons.get(r.view.plugin) ?? null,
                 provides: providesOf(r.view),
+                suggestedAppearance: suggestions.get(r.view.plugin) ?? null,
+                client: clients.get(r.view.plugin) ?? null,
             },
         };
     }
+    /**
+     * 应用此插件的外观 (client extensions spec §6.5), for a plugin whose extension is on in the org:
+     * sets the plugin's suggested theme as the org's default theme (keeping `personal`) and each
+     * suggested replacement as the org arrangement's `use` of its slot, in one transaction.
+     * `dryRun: true` answers the same changes and writes nothing. A theme not on in the org -> 400
+     * `theme.not_available` (nothing written); a replacement not available in the org is skipped.
+     * An extension not on in the org, or a plugin without a suggestion -> 404 `extension.not_found`.
+     */
+    applyAppearance(principal, org, { extension }, body) {
+        const p = requireUser(principal);
+        const tokenId = patTokenId(p);
+        return this.appearance.apply({ orgId: org.orgId }, extension, { accountId: p.account.id, ...(tokenId !== undefined && { tokenId }) }, body.dryRun === true);
+    }
 };
 __decorate([
     Get(),
@@ -143,12 +174,23 @@ __decorate([
     __param(2, Param("extension")),
     __param(3, ZBody(OrgExtensionPutBody))
 ], OrgExtensionConfigsController.prototype, "put", null);
+__decorate([
+    Post(":extension/appearance"),
+    HttpCode(200),
+    OrgAction("org.update"),
+    __param(0, CurrentPrincipal()),
+    __param(1, CurrentOrg()),
+    __param(2, ZParam(OrgExtensionParamsDto)),
+    __param(3, ZBody(OrgAppearanceApplyBody))
+], OrgExtensionConfigsController.prototype, "applyAppearance", null);
 OrgExtensionConfigsController = __decorate([
     Controller("api/v1/orgs/:orgId/extensions"),
     __param(0, Inject(OrgExtensionConfigs)),
     __param(1, Inject(ExtensionDisplayNames)),
     __param(2, Inject(OrgExtensionSwitch)),
-    __param(3, Inject(PluginIcons))
+    __param(3, Inject(PluginIcons)),
+    __param(4, Inject(AppearanceService)),
+    __param(5, Inject(ClientBuilds))
 ], OrgExtensionConfigsController);
 export { OrgExtensionConfigsController };
 /**

package/dist/catalog/plugin-import.d.ts

@@ -1,5 +1,6 @@
 import { type AgentTemplate, type AgentTemplateTier, type LocalizedName, type PluginManifest, type ThemeScheme } from "@capybara-hq/plugin-sdk";
 import type { Queue } from "bullmq";
+import { ClientBuilds } from "../client/client-builds.service.js";
 import { ApiError } from "../errors.js";
 import { ExtensionAdminOps } from "../extensions/admin-ops.js";
 import { ExtensionAdmin } from "../extensions/admin-view.js";
@@ -103,6 +104,24 @@ export interface PluginReviewExtension {
     reviewHash: string;
     /** Sensitive permissions or migration warnings. */
     sensitive: boolean;
+    /**
+     * The extension's client code (client extensions spec §5.4, §9.1), for the 客户端代码 group of
+     * the review: every file of `extension.client` by its manifest key with its size, checked
+     * against its integrity when the import was prepared. Absent without client code.
+     */
+    client?: PluginReviewClient;
+}
+/** The client code of an extension in a review. */
+export interface PluginReviewClient {
+    /** Entry, styles and assets in that order; `path` is the manifest key (`./dist/client/...`). */
+    files: {
+        path: string;
+        size: number;
+    }[];
+    /** Total bytes. */
+    totalBytes: number;
+    /** The client API version the bundle was built against. */
+    apiVersion: number;
 }
 /** One connector template in a review. */
 export interface PluginReviewTemplate {
@@ -350,9 +369,10 @@ export interface StagedTarget {
 }
 /**
  * The API error of a plugin package that cannot be read in a catalog path: the pre-0.1.0 format ->
- * `catalog.legacy_format`; a failing theme (themes spec §5) -> `theme.invalid` (details
- * `[{ theme, errors }]`) or `theme.unreadable` (details `[{ theme, issues }]`, the failing pairs);
- * anything else -> `catalog.invalid_manifest` (issues as details).
+ * `catalog.legacy_format`; undeclared client code -> `client.undeclared`; a failing theme (themes
+ * spec §5) -> `theme.invalid` (details `[{ theme, errors }]`) or `theme.unreadable` (details
+ * `[{ theme, issues }]`, the failing pairs); anything else -> `catalog.invalid_manifest` (issues as
+ * details).
  */
 export declare function catalogPackageError(e: PluginPackageError | ExtensionPackageError): ApiError;
 export declare class PluginImport {
@@ -378,6 +398,8 @@ export declare class PluginImport {
     private readonly platform;
     /** A failed platform sync enqueues a run of the migration job here (it heals the item). */
     private readonly maintenance;
+    /** The client build of a dropped org upload's package is deleted with it. */
+    private readonly clientBuilds;
     /** Where plugin files go (the kernel's object storage; the CLI's own, see {@link useCliStorage}). */
     private files;
     /**
@@ -398,7 +420,9 @@ export declare class PluginImport {
     /** The platform rows of a new item's components, written after the confirm's commit. */
     platform: PlatformComponents, 
     /** A failed platform sync enqueues a run of the migration job here (it heals the item). */
-    maintenance: Pick<Queue, "add">);
+    maintenance: Pick<Queue, "add">, 
+    /** The client build of a dropped org upload's package is deleted with it. */
+    clientBuilds: ClientBuilds);
     /** The kernel-schema handle of the current context (the transaction, else the pool). */
     private get db();
     /**