@danypops/pi-packed 0.19.9 → 0.19.11

package/dist/client.d.ts

@@ -0,0 +1,109 @@
+import type { ExtensionOperationOutputs, PackageInfo, PackageResources, PackageSummary, PiStatus, ResourceField, SecuritySettings, ServiceSpecSummary, SetupApplyResult, SetupPlan, UpdateEntry, UpdateOutcome } from "./protocol.js";
+/** notADaemon: the overwhelmingly common case for install() -- most Pi packages aren't daemons at all. Distinct from a real installService failure (systemctl unavailable, spec resolved but installation itself failed). */
+export declare class InstallServiceError extends Error {
+    readonly notADaemon?: boolean | undefined;
+    constructor(message: string, notADaemon?: boolean | undefined);
+}
+export interface PackedClientPaths {
+    token: string;
+    handle: string;
+    serviceDescriptor: string;
+}
+export interface PackedPathOptions {
+    env?: Record<string, string | undefined>;
+    home?: string;
+    platform?: NodeJS.Platform;
+}
+export interface PackedExtensionClient {
+    search(query: string, limit: number, offline?: boolean): Promise<{
+        query: string;
+        total: number;
+        results: PackageSummary[];
+    }>;
+    info(name: string): Promise<PackageInfo>;
+    installed(): Promise<ExtensionOperationOutputs["package.installed"]>;
+    updates(): Promise<UpdateEntry[]>;
+    security(): Promise<SecuritySettings>;
+    setMutationApproval(value: SecuritySettings["mutationApproval"], approved?: boolean): Promise<SecuritySettings>;
+    install(source: string, approved?: boolean): Promise<string>;
+    installService(source: string, approved?: boolean): Promise<{
+        output: string;
+        spec?: ServiceSpecSummary;
+    }>;
+    remove(name: string, approved?: boolean): Promise<string>;
+    update(source: string, approved?: boolean): Promise<UpdateOutcome>;
+    setupPlan(manifestPath: string, prune?: boolean): Promise<SetupPlan>;
+    setupApply(manifestPath: string, approved?: boolean, prune?: boolean): Promise<SetupApplyResult>;
+    listResources(projectRoot?: string): Promise<{
+        global: PackageResources[];
+        project: PackageResources[];
+    }>;
+    toggleResource(source: string, field: ResourceField, path: string, enabled: boolean, projectRoot?: string, approved?: boolean): Promise<string>;
+    piStatus(): Promise<PiStatus>;
+}
+export declare function resolvePackedClientPaths(options?: PackedPathOptions): PackedClientPaths;
+export type FetchTransport = (request: Request) => Promise<Response>;
+export declare class PackedClient implements PackedExtensionClient {
+    private readonly rpc;
+    constructor(base: string, token: string, transport?: FetchTransport);
+    private call;
+    health(): Promise<unknown>;
+    search(query: string, limit: number, offline?: boolean): Promise<{
+        query: string;
+        total: number;
+        results: PackageSummary[];
+        offline?: boolean;
+    }>;
+    info(name: string): Promise<PackageInfo>;
+    installed(): Promise<import("./protocol.js").InstalledPackage[]>;
+    updates(): Promise<UpdateEntry[]>;
+    security(): Promise<SecuritySettings>;
+    setMutationApproval(mutationApproval: SecuritySettings["mutationApproval"], approved?: boolean): Promise<SecuritySettings>;
+    install(source: string, approved?: boolean): Promise<string>;
+    installService(source: string, approved?: boolean): Promise<{
+        output: string;
+        spec: ServiceSpecSummary | undefined;
+    }>;
+    remove(name: string, approved?: boolean): Promise<string>;
+    update(source: string, approved?: boolean): Promise<UpdateOutcome>;
+    setupPlan(manifestPath: string, prune?: boolean): Promise<SetupPlan>;
+    setupApply(manifestPath: string, approved?: boolean, prune?: boolean): Promise<SetupApplyResult>;
+    listResources(projectRoot?: string): Promise<{
+        global: PackageResources[];
+        project: PackageResources[];
+    }>;
+    toggleResource(source: string, field: ResourceField, path: string, enabled: boolean, projectRoot?: string, approved?: boolean): Promise<string>;
+    piStatus(): Promise<PiStatus>;
+}
+export declare function connectPackedClient(paths?: PackedClientPaths, transport?: FetchTransport): Promise<PackedClient>;
+export interface EnsureClientDeps {
+    connect(): Promise<PackedClient>;
+    /** Real OS check, not a guess -- does this machine have a supervised
+     * service registered for this daemon (systemd --user unit / launchd
+     * plist / Windows Run key)? */
+    isServiceInstalled(): boolean;
+    /** Spawns a detached, self-contained daemon for this session only.
+     * Never called when isServiceInstalled() is true. */
+    spawn(): void;
+    sleep(ms: number): Promise<void>;
+    retryAttempts?: number;
+    retryDelayMs?: number;
+}
+/**
+ * Pure connect-or-provision decision, fully dependency-injected and
+ * unit-testable without a real filesystem, subprocess, or network call.
+ *
+ * A real, confirmed hazard motivates the isServiceInstalled() branch: an
+ * auto-spawned orphan gets vehicle-server's 30-minute idle budget (vs. a
+ * supervised service's own, typically much shorter, policy), so it can
+ * keep winning vehicle-server's single-instance lock race against every
+ * subsequent supervised restart, invisibly, for up to half an hour. When a
+ * service is installed, this never spawns a second, differently-supervised
+ * process -- it retries the connection instead, on the assumption the
+ * supervisor is responsible for the daemon actually being reachable, and
+ * fails with a message pointing at the service rather than silently
+ * creating a competing one.
+ */
+export declare function ensureClient(deps: EnsureClientDeps): Promise<PackedClient>;
+export declare function ensurePackedClient(paths?: PackedClientPaths, transport?: FetchTransport): Promise<PackedClient>;
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../service/src/public/client.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAGX,yBAAyB,EACzB,WAAW,EACX,gBAAgB,EAChB,cAAc,EACd,QAAQ,EACR,aAAa,EACb,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,EAChB,SAAS,EACT,WAAW,EACX,aAAa,EACb,MAAM,eAAe,CAAC;AAEvB,6NAA6N;AAC7N,qBAAa,mBAAoB,SAAQ,KAAK;IAG5C,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO;gBAD7B,OAAO,EAAE,MAAM,EACN,UAAU,CAAC,EAAE,OAAO,YAAA;CAK9B;AAED,MAAM,WAAW,iBAAiB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,MAAM,CAAC;CAC1B;AAGD,MAAM,WAAW,iBAAiB;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;CAC3B;AACD,MAAM,WAAW,qBAAqB;IACrC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,cAAc,EAAE,CAAA;KAAE,CAAC,CAAC;IAC9H,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACzC,SAAS,IAAI,OAAO,CAAC,yBAAyB,CAAC,mBAAmB,CAAC,CAAC,CAAC;IACrE,OAAO,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAClC,QAAQ,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACtC,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,CAAC,kBAAkB,CAAC,EAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAChH,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7D,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,kBAAkB,CAAA;KAAE,CAAC,CAAC;IAC3G,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACnE,SAAS,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACrE,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACjG,aAAa,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;QAAC,OAAO,EAAE,gBAAgB,EAAE,CAAA;KAAE,CAAC,CAAC;IAC1G,cAAc,CACb,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,aAAa,EACpB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,OAAO,EAChB,WAAW,CAAC,EAAE,MAAM,EACpB,QAAQ,CAAC,EAAE,OAAO,GAChB,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC;CAC9B;AAED,wBAAgB,wBAAwB,CAAC,OAAO,GAAE,iBAAsB,GAAG,iBAAiB,CAiB3F;AAmBD,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAMrE,qBAAa,YAAa,YAAW,qBAAqB;IACzD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAsG;gBAC9G,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,GAAE,cAAsB;IAG1E,OAAO,CAAC,IAAI;IAMZ,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC;IAG1B,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,UAAQ;;;;;;IAGpD,IAAI,CAAC,IAAI,EAAE,MAAM;IAGjB,SAAS;IAGH,OAAO;IAGb,QAAQ;IAGR,mBAAmB,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,kBAAkB,CAAC,EAAE,QAAQ,UAAQ;IAGtF,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,UAAQ;IAKxC,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,UAAQ;;;;IAK/C,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,UAAQ;IAKrC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,UAAQ,GAAG,OAAO,CAAC,aAAa,CAAC;IAYtE,SAAS,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,UAAQ;IAG7C,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,UAAQ,EAAE,KAAK,UAAQ;IAGhE,aAAa,CAAC,WAAW,CAAC,EAAE,MAAM;;;;IAG5B,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,QAAQ,UAAQ;IAKjI,QAAQ;CAGR;AAED,wBAAsB,mBAAmB,CAAC,KAAK,oBAA6B,EAAE,SAAS,GAAE,cAAsB,GAAG,OAAO,CAAC,YAAY,CAAC,CAatI;AAED,MAAM,WAAW,gBAAgB;IAChC,OAAO,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC;IACjC;;mCAE+B;IAC/B,kBAAkB,IAAI,OAAO,CAAC;IAC9B;yDACqD;IACrD,KAAK,IAAI,IAAI,CAAC;IACd,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,CAoBhF;AAED,wBAAsB,kBAAkB,CAAC,KAAK,oBAA6B,EAAE,SAAS,GAAE,cAAsB,GAAG,OAAO,CAAC,YAAY,CAAC,CAkBrI"}

package/dist/client.js

@@ -0,0 +1 @@
+import{spawn as N}from"node:child_process";import{existsSync as A,readFileSync as L}from"node:fs";import{dirname as w,join as E,resolve as I}from"node:path";import{fileURLToPath as b}from"node:url";class q{baseUrl;token;opsPath;transport;label;constructor(z,G,J){this.baseUrl=z;this.token=G;this.label=J.label,this.opsPath=J.opsPath??"/api/v1/ops",this.transport=J.transport??fetch}authedRequest(z,G={}){return this.transport(new Request(`${this.baseUrl}${z}`,{...G,headers:{...G.headers,authorization:`Bearer ${this.token}`}}))}async call(z,G){let J=await this.authedRequest(this.opsPath,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({op:z,input:G})}),Z=await J.json();if(!J.ok)throw Error(Z.error??`${this.label} operation failed with HTTP ${J.status}`);return Z.result}async operations(){let z=await this.authedRequest(this.opsPath),G=await z.json();if(!z.ok)throw Error(G.error??`${this.label} discovery failed with HTTP ${z.status}`);return G.operations??[]}async ready(){let z=await this.authedRequest("/ready");if(z.status===503)return!1;if(!z.ok)throw Error(`${this.label} readiness check failed with HTTP ${z.status}`);return!0}async health(){let z=await this.authedRequest("/health"),G=await z.json();if(!z.ok||G.ok!==!0||typeof G.version!=="string")throw Error(G.error??`${this.label} health check failed`);return{ok:!0,version:G.version}}}import{chmodSync as h,existsSync as m,mkdirSync as l,readFileSync as D,renameSync as d,rmSync as c,writeFileSync as i}from"node:fs";import{homedir as g,tmpdir as C}from"node:os";import{dirname as n,join as $,win32 as Q}from"node:path";var x="127.0.0.1";function V(z,G={}){let J=G.platform??process.platform,Z=G.home??g();if(J==="darwin")return _(z,Z);if(J==="win32")return j(z,G.env??process.env,Z);return R(z,G,Z)}function R(z,G,J){let Z=G.env??process.env,K=G.uid??process.getuid?.()??0,W=Z.XDG_DATA_HOME??$(J,".local","share"),Y=Z.XDG_STATE_HOME??$(J,".local","state"),F=Z.XDG_RUNTIME_DIR??$("/run","user",String(K)),O=Z.XDG_CONFIG_HOME??$(J,".config");return{database:$(W,z.stateDirectoryName,z.databaseFilename),token:$(Y,z.stateDirectoryName,z.tokenFilename),handle:$(F,z.stateDirectoryName,z.handleFilename),serviceDescriptor:$(O,"systemd","user",z.systemdUnitName)}}function _(z,G){let J=$(G,"Library"),Z=$(J,"Application Support",z.stateDirectoryName);return{database:$(Z,z.databaseFilename),token:$(Z,z.tokenFilename),handle:$(C(),z.stateDirectoryName,z.handleFilename),serviceDescriptor:$(Z,z.systemdUnitName)}}function j(z,G,J){let Z=G.LOCALAPPDATA??Q.join(J,"AppData","Local"),K=G.APPDATA??Q.join(J,"AppData","Roaming"),W=Q.join(Z,z.stateDirectoryName,"Data");return{database:Q.join(W,z.databaseFilename),token:Q.join(W,z.tokenFilename),handle:Q.join(Z,"Temp",z.stateDirectoryName,z.handleFilename),serviceDescriptor:Q.join(K,z.stateDirectoryName,"Config",z.systemdUnitName)}}function B(z){try{let G=JSON.parse(D(z,"utf8"));if(G.host!==x||!Number.isInteger(G.port)||G.port<1||G.port>65535||!Number.isInteger(G.pid))return null;return G}catch{return null}}function X(z,G){if((G.platform??process.platform)==="win32")return G.runCommand("reg.exe",["query","HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run","/v",z.name]).ok;return G.fileExists(z.descriptorPath)}class U extends Error{notADaemon;constructor(z,G){super(z);this.notADaemon=G;this.name="InstallServiceError"}}var f="pi-packed",H="pi-packed.service";function T(z={}){let G=z.env??process.env;if(G.PI_PACKED_HOME){let Z=I(G.PI_PACKED_HOME);return{token:`${Z}/token`,handle:`${Z}/handle.json`,serviceDescriptor:`${Z}/${H}`}}let J=V({stateDirectoryName:"pi-packed",databaseFilename:"packages.db",tokenFilename:"token",handleFilename:"handle.json",systemdUnitName:H},z);return{token:J.token,handle:J.handle,serviceDescriptor:J.serviceDescriptor}}function S(z){return X({name:f,binPath:"",descriptorPath:z},{fileExists:A,writeFile:()=>{},readFile:()=>null,removeFile:()=>{},mkdirp:()=>{},runCommand:()=>({ok:!1,output:""}),which:()=>!1})}function k(z,G=30000){return(J)=>z(new Request(J,{signal:AbortSignal.any([J.signal,AbortSignal.timeout(G)])}))}class M{rpc;constructor(z,G,J=fetch){this.rpc=new q(z,G,{label:"Packed",transport:k(J)})}call(z,G){return this.rpc.call(z,G)}health(){return this.rpc.health()}search(z,G,J=!1){return this.call("package.search",{query:z,limit:G,offline:J})}info(z){return this.call("package.info",{name:z})}installed(){return this.call("package.installed",{})}async updates(){return(await this.call("package.updates",{})).updates}security(){return this.call("package.security.get",{})}setMutationApproval(z,G=!1){return this.call("package.security.set",{mutationApproval:z,approved:G})}async install(z,G=!1){let J=await this.call("package.install",{source:z,approved:G});if(!J.ok)throw Error(J.output);return J.output}async installService(z,G=!1){let J=await this.call("package.install_service",{source:z,approved:G});if(!J.ok)throw new U(J.output,J.notADaemon);return{output:J.output,spec:J.spec}}async remove(z,G=!1){let J=await this.call("package.remove",{name:z,approved:G});if(!J.ok)throw Error(J.output);return J.output}async update(z,G=!1){let J=await this.call("package.update",{source:z,approved:G});if(!J.ok)throw Error(J.output);return{output:J.output,reloadRequired:J.reloadRequired??!0,alreadyUpToDate:J.alreadyUpToDate??!1,pinned:J.pinned??!1,previousVersion:J.previousVersion,currentVersion:J.currentVersion}}setupPlan(z,G=!1){return this.call("setup.plan",{manifestPath:z,prune:G})}setupApply(z,G=!1,J=!1){return this.call("setup.apply",{manifestPath:z,approved:G,prune:J})}listResources(z){return this.call("resources.list",{projectRoot:z})}async toggleResource(z,G,J,Z,K,W=!1){let Y=await this.call("resources.toggle",{source:z,field:G,path:J,enabled:Z,projectRoot:K,approved:W});if(!Y.ok)throw Error(Y.output);return Y.output}piStatus(){return this.call("pi.status",{})}}async function y(z=T(),G=fetch){let J=B(z.handle);if(!J)throw Error("Packed daemon is not running");let Z;try{Z=L(z.token,"utf8").trim()}catch{throw Error("Packed daemon token is unavailable")}if(!/^[a-f0-9]{64}$/.test(Z))throw Error("Packed daemon token is invalid");let K=new M(`http://${J.host}:${J.port}`,Z,G);return await K.health(),K}async function P(z){try{return await z.connect()}catch{}let G=z.retryAttempts??30,J=z.retryDelayMs??100,Z=z.isServiceInstalled();if(!Z)z.spawn();for(let W=0;W<G;W++){await z.sleep(J);try{return await z.connect()}catch{}}let K=G*J/1000;throw Error(Z?`Packed daemon did not become ready within ${K} seconds, but a supervised service is installed -- check it directly (e.g. systemctl --user status pi-packed.service) rather than auto-spawning a second one`:`Packed daemon did not become ready within ${K} seconds`)}async function $z(z=T(),G=fetch){return P({connect:()=>y(z,G),isServiceInstalled:()=>S(z.serviceDescriptor),spawn:()=>{let J=process.env.PI_PACKED_BIN,Z=J??process.env.PI_PACKED_BUN??"bun",K=J?["serve"]:[E(w(b(import.meta.url)),"../service/src/cli/cli.ts"),"serve"],W=N(Z,K,{detached:!0,stdio:"ignore",env:{...process.env,DAEMON_KIT_LAUNCH_PROVENANCE:"auto-spawn"}});W.once("error",()=>{}),W.unref()},sleep:(J)=>new Promise((Z)=>setTimeout(Z,J))})}export{T as resolvePackedClientPaths,$z as ensurePackedClient,P as ensureClient,y as connectPackedClient,M as PackedClient,U as InstallServiceError};

package/dist/protocol.d.ts

@@ -0,0 +1,221 @@
+export interface PackageEvidence {
+    shape: "keyword-only" | "manifest" | "conventional";
+    verified: boolean;
+    evidence: string[];
+}
+export interface PublicationEvidence {
+    integrity?: string;
+    provenanceUrl?: string;
+    trustedPublisher: "verified" | "not-verified" | "unknown";
+}
+export interface PackageSummary {
+    name: string;
+    version: string;
+    description?: string;
+    date?: string;
+    packageEvidence?: PackageEvidence;
+    publication?: PublicationEvidence;
+}
+export interface PackageInfo extends PackageSummary {
+    homepage?: string;
+    repository?: string;
+    license?: string;
+    keywords?: string[];
+    pi?: Record<string, unknown>;
+    modified?: string;
+    unpackedSize?: number;
+    readme?: string;
+    readmeAvailable?: boolean;
+    bugs?: string;
+    peerDependencies?: Record<string, string>;
+}
+export interface InstalledPackage {
+    name: string;
+    pinned?: string;
+    installed?: string;
+}
+export interface UpdateEntry {
+    name: string;
+    installed: string;
+    latest: string;
+    detectedAt?: string;
+}
+export interface UpdateOutcome {
+    output: string;
+    reloadRequired: boolean;
+    alreadyUpToDate: boolean;
+    pinned: boolean;
+    previousVersion?: string;
+    currentVersion?: string;
+}
+export interface Diagnostic {
+    code: string;
+    severity: "error" | "warning" | "info";
+    path: string;
+    message: string;
+    fix?: string;
+}
+export interface SetupOperation {
+    kind: "install-package" | "update-package" | "remove-package" | "write-profile" | "remove-profile";
+    packageName?: string;
+    name?: string;
+    scope: "global" | "project";
+    source?: string;
+    resolved?: string;
+    fields?: string[];
+}
+export interface SetupPlan {
+    ok: boolean;
+    manifestPath: string;
+    operations: SetupOperation[];
+    manifestSha256?: string;
+    prune?: boolean;
+    diagnostics: Diagnostic[];
+}
+export interface SetupApplyResult {
+    ok: boolean;
+    manifestPath: string;
+    operations: Array<{
+        kind: SetupOperation["kind"];
+        target: string;
+        status: "succeeded" | "failed";
+        output?: string;
+    }>;
+    reloadRequired: boolean;
+    diagnostics: Diagnostic[];
+}
+export interface SecuritySettings {
+    mutationApproval: "always" | "never";
+}
+export type ResourceField = "extensions" | "skills" | "prompts" | "themes";
+export interface ResourceItem {
+    path: string;
+    enabled: boolean;
+}
+export type PackageResources = {
+    source: string;
+    name: string;
+    scope: "global" | "project";
+} & Record<ResourceField, ResourceItem[]>;
+export interface ServiceSpecSummary {
+    name: string;
+    binPath: string;
+    descriptorPath: string;
+}
+/** Mirrors service/src/pi/pi-version.ts's CURRENT_PI_PACKAGE_NAME
+ * literal -- not a shared import, since the public boundary deliberately
+ * stays free of internal runtime-specific modules. Keep the two in sync by hand. */
+export declare const PI_COMMAND_NAME = "@earendil-works/pi-coding-agent";
+/** Mirrors pi/pi-version.ts's PiVersionReport. */
+export interface PiStatus {
+    current?: string;
+    latest?: string;
+    upToDate?: boolean;
+    packageName?: string;
+    note?: string;
+}
+export type ExtensionOperationName = "package.search" | "package.info" | "package.installed" | "package.updates" | "package.security.get" | "package.security.set" | "package.install" | "package.install_service" | "package.remove" | "package.update" | "setup.plan" | "setup.apply" | "resources.list" | "resources.toggle" | "pi.status";
+export interface ExtensionOperationInputs {
+    "package.search": {
+        query: string;
+        limit: number;
+        offline?: boolean;
+    };
+    "package.info": {
+        name: string;
+    };
+    "package.installed": Record<string, never>;
+    "package.updates": Record<string, never>;
+    "pi.status": Record<string, never>;
+    "package.security.get": Record<string, never>;
+    "package.security.set": {
+        mutationApproval: SecuritySettings["mutationApproval"];
+        approved?: boolean;
+    };
+    "package.install": {
+        source: string;
+        approved?: boolean;
+    };
+    "package.install_service": {
+        source: string;
+        approved?: boolean;
+    };
+    "package.remove": {
+        name: string;
+        approved?: boolean;
+    };
+    "package.update": {
+        source: string;
+        approved?: boolean;
+    };
+    "setup.plan": {
+        manifestPath: string;
+        prune?: boolean;
+    };
+    "setup.apply": {
+        manifestPath: string;
+        approved?: boolean;
+        prune?: boolean;
+    };
+    "resources.list": {
+        projectRoot?: string;
+    };
+    "resources.toggle": {
+        source: string;
+        field: ResourceField;
+        path: string;
+        enabled: boolean;
+        projectRoot?: string;
+        approved?: boolean;
+    };
+}
+export interface ExtensionOperationOutputs {
+    "package.search": {
+        query: string;
+        total: number;
+        results: PackageSummary[];
+        offline?: boolean;
+    };
+    "package.info": PackageInfo;
+    "package.installed": InstalledPackage[];
+    "package.updates": {
+        updates: UpdateEntry[];
+    };
+    "package.security.get": SecuritySettings;
+    "package.security.set": SecuritySettings;
+    "package.install": {
+        ok: boolean;
+        output: string;
+    };
+    "package.install_service": {
+        ok: boolean;
+        output: string;
+        spec?: ServiceSpecSummary;
+        notADaemon?: boolean;
+    };
+    "package.remove": {
+        ok: boolean;
+        output: string;
+    };
+    "package.update": {
+        ok: boolean;
+        output: string;
+        reloadRequired?: boolean;
+        alreadyUpToDate?: boolean;
+        pinned?: boolean;
+        previousVersion?: string;
+        currentVersion?: string;
+    };
+    "setup.plan": SetupPlan;
+    "setup.apply": SetupApplyResult;
+    "resources.list": {
+        global: PackageResources[];
+        project: PackageResources[];
+    };
+    "resources.toggle": {
+        ok: boolean;
+        output: string;
+    };
+    "pi.status": PiStatus;
+}
+//# sourceMappingURL=protocol.d.ts.map

package/dist/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../service/src/public/protocol.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,eAAe;IAC/B,KAAK,EAAE,cAAc,GAAG,UAAU,GAAG,cAAc,CAAC;IACpD,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACnB;AACD,MAAM,WAAW,mBAAmB;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,UAAU,GAAG,cAAc,GAAG,SAAS,CAAC;CAC1D;AACD,MAAM,WAAW,cAAc;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,WAAW,CAAC,EAAE,mBAAmB,CAAC;CAClC;AACD,MAAM,WAAW,WAAY,SAAQ,cAAc;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC1C;AACD,MAAM,WAAW,gBAAgB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AACD,MAAM,WAAW,WAAW;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AACD,MAAM,WAAW,aAAa;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,OAAO,CAAC;IACxB,eAAe,EAAE,OAAO,CAAC;IACzB,MAAM,EAAE,OAAO,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;CACxB;AACD,MAAM,WAAW,UAAU;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;CACb;AACD,MAAM,WAAW,cAAc;IAC9B,IAAI,EAAE,iBAAiB,GAAG,gBAAgB,GAAG,gBAAgB,GAAG,eAAe,GAAG,gBAAgB,CAAC;IACnG,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AACD,MAAM,WAAW,SAAS;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,cAAc,EAAE,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,WAAW,EAAE,UAAU,EAAE,CAAC;CAC1B;AACD,MAAM,WAAW,gBAAgB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrH,cAAc,EAAE,OAAO,CAAC;IACxB,WAAW,EAAE,UAAU,EAAE,CAAC;CAC1B;AACD,MAAM,WAAW,gBAAgB;IAChC,gBAAgB,EAAE,QAAQ,GAAG,OAAO,CAAC;CACrC;AACD,MAAM,MAAM,aAAa,GAAG,YAAY,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;AAC3E,MAAM,WAAW,YAAY;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;CACjB;AACD,MAAM,MAAM,gBAAgB,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,QAAQ,GAAG,SAAS,CAAA;CAAE,GAAG,MAAM,CAAC,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC;AAErI,MAAM,WAAW,kBAAkB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;CACvB;AAED;;oFAEoF;AACpF,eAAO,MAAM,eAAe,oCAAoC,CAAC;AAEjE,kDAAkD;AAClD,MAAM,WAAW,QAAQ;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,sBAAsB,GAC/B,gBAAgB,GAChB,cAAc,GACd,mBAAmB,GACnB,iBAAiB,GACjB,sBAAsB,GACtB,sBAAsB,GACtB,iBAAiB,GACjB,yBAAyB,GACzB,gBAAgB,GAChB,gBAAgB,GAChB,YAAY,GACZ,aAAa,GACb,gBAAgB,GAChB,kBAAkB,GAClB,WAAW,CAAC;AACf,MAAM,WAAW,wBAAwB;IACxC,gBAAgB,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACtE,cAAc,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACjC,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC3C,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACzC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACnC,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC9C,sBAAsB,EAAE;QAAE,gBAAgB,EAAE,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACvG,iBAAiB,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAC1D,yBAAyB,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAClE,gBAAgB,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACvD,gBAAgB,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACzD,YAAY,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACxD,aAAa,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAC7E,gBAAgB,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3C,kBAAkB,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,aAAa,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CACvI;AACD,MAAM,WAAW,yBAAyB;IACzC,gBAAgB,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,cAAc,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACjG,cAAc,EAAE,WAAW,CAAC;IAC5B,mBAAmB,EAAE,gBAAgB,EAAE,CAAC;IACxC,iBAAiB,EAAE;QAAE,OAAO,EAAE,WAAW,EAAE,CAAA;KAAE,CAAC;IAC9C,sBAAsB,EAAE,gBAAgB,CAAC;IACzC,sBAAsB,EAAE,gBAAgB,CAAC;IACzC,iBAAiB,EAAE;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,yBAAyB,EAAE;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAC5G,gBAAgB,EAAE;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAClD,gBAAgB,EAAE;QACjB,EAAE,EAAE,OAAO,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC;QACf,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,cAAc,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,YAAY,EAAE,SAAS,CAAC;IACxB,aAAa,EAAE,gBAAgB,CAAC;IAChC,gBAAgB,EAAE;QAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;QAAC,OAAO,EAAE,gBAAgB,EAAE,CAAA;KAAE,CAAC;IAC9E,kBAAkB,EAAE;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACpD,WAAW,EAAE,QAAQ,CAAC;CACtB"}

package/dist/protocol.js

@@ -0,0 +1 @@
+var a="@earendil-works/pi-coding-agent";export{a as PI_COMMAND_NAME};

package/extension/src/approval/permission.ts

@@ -1,4 +1,4 @@
-import type { SecuritySettings } from "@danypops/packed/protocol";
+import type { SecuritySettings } from "@danypops/pi-packed/protocol";
 
 export type PackageOperation = "install" | "update" | "remove" | "toggle";
 

package/extension/src/packed.ts

@@ -17,7 +17,7 @@
  * twice) if the retried call actually reached the daemon the first time.
  */
 
-import { ensurePackedClient, InstallServiceError, type PackedExtensionClient } from "@danypops/packed/client";
+import { ensurePackedClient, InstallServiceError, type PackedExtensionClient } from "@danypops/pi-packed/client";
 import {
 	type InstalledPackage,
 	type PackageInfo,
@@ -32,7 +32,7 @@ import {
 	type SetupPlan,
 	type UpdateEntry,
 	type UpdateOutcome,
-} from "@danypops/packed/protocol";
+} from "@danypops/pi-packed/protocol";
 import { createRetryingClient } from "@danypops/vehicle-client/daemon-client";
 
 export type { PackageInfo, PackageResources, PackageSummary, PiStatus, ResourceField, UpdateEntry, UpdateOutcome };

package/extension/src/tabs/security-tui.ts

@@ -8,7 +8,7 @@
  * different TUI" complaint the other three tabs had.
  */
 
-import type { SecuritySettings } from "@danypops/packed/protocol";
+import type { SecuritySettings } from "@danypops/pi-packed/protocol";
 import { rawKeyHint } from "@earendil-works/pi-coding-agent";
 import { truncateToWidth } from "@earendil-works/pi-tui";
 import type { Component } from "malevich-tui-components";

package/extension/src/tool-output.ts

@@ -1,4 +1,4 @@
-import type { PackageSummary as Pkg, PackageInfo as PkgInfo } from "@danypops/packed/protocol";
+import type { PackageSummary as Pkg, PackageInfo as PkgInfo } from "@danypops/pi-packed/protocol";
 import type { AgentToolResult, Theme } from "@earendil-works/pi-coding-agent";
 import { Text, truncateToWidth } from "@earendil-works/pi-tui";
 import {

package/package.json

@@ -1,31 +1,54 @@
 {
   "name": "@danypops/pi-packed",
-  "version": "0.19.9",
-  "description": "Pi package tools, commands, profiles, and TUI for the Packed daemon",
+  "version": "0.19.11",
+  "description": "Pi package lifecycle, validation, daemon, tools, profiles, and TUI",
   "type": "module",
+  "bin": {
+    "packed": "service/src/cli/cli.ts"
+  },
   "keywords": ["pi-package"],
   "pi": {
     "extensions": ["extension/src/index.ts"]
   },
   "scripts": {
-    "test": "bun test test",
+    "build": "rm -rf dist && bun build service/src/public/client.ts service/src/public/protocol.ts --outdir dist --target node --format esm --minify && bunx tsc -p service/tsconfig.public.json",
+    "test": "bun run build && bun test service/test test",
     "typecheck": "bunx tsc --noEmit"
   },
   "dependencies": {
-    "@danypops/packed": "^0.5.0",
+    "@danypops/packed": "^0.6.0",
+    "@danypops/pi-extension-harness": "^0.2.0",
     "@danypops/vehicle-client": "^0.2.0",
+    "@danypops/vehicle-core": "^0.6.1",
+    "@danypops/vehicle-server": "^0.7.0",
+    "jiti": "2.6.1",
+    "malevich-tui-components": "^0.16.1",
+    "publint": "0.3.22",
+    "semver": "^7.8.5"
+  },
+  "devDependencies": {
     "@danypops/vehicle-client-pi": "^0.1.5",
-    "malevich-tui-components": "^0.16.1"
+    "@types/semver": "^7.7.1"
   },
   "peerDependencies": {
     "@earendil-works/pi-coding-agent": "*",
-    "typebox": "*",
-    "@earendil-works/pi-tui": "*"
+    "@earendil-works/pi-tui": "*",
+    "typebox": "*"
   },
   "repository": {
     "type": "git",
     "url": "git+https://github.com/DanyPops/packed.git",
     "directory": "packages/pi-packed"
   },
-  "files": ["extension", "setup", "README.md"]
+  "exports": {
+    "./client": {
+      "types": "./dist/client.d.ts",
+      "import": "./dist/client.js"
+    },
+    "./protocol": {
+      "types": "./dist/protocol.d.ts",
+      "import": "./dist/protocol.js"
+    }
+  },
+  "files": ["extension", "service", "dist", "README.md"]
 }

package/service/schema/pi-setup-v1.schema.json

@@ -0,0 +1,70 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "Pi setup manifest v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["$schema", "schemaVersion", "packages", "profiles"],
+  "properties": {
+    "$schema": { "const": "./schema/pi-setup-v1.schema.json" },
+    "schemaVersion": { "const": 1 },
+    "packages": {
+      "type": "array",
+      "maxItems": 20,
+      "items": {
+        "oneOf": [
+          {
+            "type": "object", "additionalProperties": false,
+            "required": ["kind", "scope", "source", "resolved", "integrity"],
+            "properties": {
+              "kind": { "const": "npm" }, "scope": { "enum": ["global", "project"] },
+              "source": { "type": "string", "minLength": 5, "maxLength": 512, "pattern": "^npm:" },
+              "resolved": { "type": "string", "minLength": 1, "maxLength": 128 },
+              "integrity": { "type": "string", "minLength": 8, "maxLength": 512, "pattern": "^sha(256|384|512)-[A-Za-z0-9+/=_-]+$" }
+            }
+          },
+          {
+            "type": "object", "additionalProperties": false,
+            "required": ["kind", "scope", "requested", "source", "resolved"],
+            "properties": {
+              "kind": { "enum": ["git", "https"] }, "scope": { "enum": ["global", "project"] },
+              "requested": { "type": "string", "minLength": 8, "maxLength": 1024 },
+              "source": { "type": "string", "minLength": 8, "maxLength": 1024 },
+              "resolved": { "type": "string", "pattern": "^[a-fA-F0-9]{40}$" }
+            }
+          },
+          {
+            "type": "object", "additionalProperties": false,
+            "required": ["kind", "scope", "source", "resolved", "machineLocal"],
+            "properties": {
+              "kind": { "const": "local" }, "scope": { "enum": ["global", "project"] },
+              "source": { "type": "string", "minLength": 1, "maxLength": 1024 },
+              "resolved": { "type": "string", "minLength": 1, "maxLength": 1024 },
+              "machineLocal": { "const": true }
+            }
+          }
+        ]
+      }
+    },
+    "profiles": {
+      "type": "object", "maxProperties": 100,
+      "propertyNames": { "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$" },
+      "additionalProperties": { "$ref": "#/$defs/profile" }
+    },
+    "defaultProfile": { "type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$" }
+  },
+  "$defs": {
+    "profile": {
+      "type": "object", "additionalProperties": false, "required": ["scope"],
+      "properties": {
+        "scope": { "enum": ["global", "project"] },
+        "provider": { "type": "string", "minLength": 1, "maxLength": 128 },
+        "model": { "type": "string", "minLength": 1, "maxLength": 256 },
+        "thinkingLevel": { "enum": ["off", "minimal", "low", "medium", "high", "xhigh", "max"] },
+        "tools": { "type": "array", "maxItems": 100, "uniqueItems": true, "items": { "type": "string", "minLength": 1, "maxLength": 128 } },
+        "instructions": { "type": "string", "minLength": 1, "maxLength": 16384 },
+        "theme": { "type": "string", "minLength": 1, "maxLength": 128 },
+        "allowedModels": { "type": "array", "maxItems": 100, "uniqueItems": true, "items": { "type": "string", "minLength": 1, "maxLength": 256 } }
+      }
+    }
+  }
+}

package/service/setup/danypops-ecosystem.pi-setup.json

@@ -0,0 +1,15 @@
+{
+  "$schema": "./schema/pi-setup-v1.schema.json",
+  "schemaVersion": 1,
+  "packages": [
+    { "kind": "npm", "scope": "global", "source": "npm:@danypops/pi-packed", "resolved": "0.5.3", "integrity": "sha512-n1qLFkEanvODh7QcoFdODCvuuAuKR9G8rMmF9RR9YTOvgqGYSCYL5XhFnECrODewqF+JrNFN9+SfgCJc5DiyAw==" },
+    { "kind": "npm", "scope": "global", "source": "npm:@danypops/pi-papyrus", "resolved": "0.38.0", "integrity": "sha512-M5wV8X6kpKNXCS5kO7XifG+y4i2/6DNe6pYky5fcIbK7CpmAD4NIUVcxQMW2S9/03K5Oe589vKKfGlStvMz6uw==" },
+    { "kind": "npm", "scope": "global", "source": "npm:@danypops/pi-lector", "resolved": "0.3.0", "integrity": "sha512-vis+YRDLUyl1joGDP8pck6zG4EHX1nRw6LLkjKwV7CxMZnvBh+FLVNDBv+0s6hKJU6gal5qP0YEOCU24I7VcxA==" },
+    { "kind": "npm", "scope": "global", "source": "npm:@danypops/pi-pipes", "resolved": "0.8.1", "integrity": "sha512-Niu0DtG/usPdsQrsUGKhTjNrZR8HxAlc43sMMeLz7mzxC+MKlVFD6wmDgnAXPxyWGQtPKI78ZpzSDrkEobHZCQ==" },
+    { "kind": "npm", "scope": "global", "source": "npm:@danypops/pi-tickets", "resolved": "0.5.2", "integrity": "sha512-6ipP4jtcMhQD61CVLWW1PYk6iA2ormUt5t1IGPgUOF4K3yK8xr+M+T3VA0ByXamG4vuE/dZ6b3cLm7qnn3YDOA==" },
+    { "kind": "npm", "scope": "global", "source": "npm:@danypops/pi-jittor", "resolved": "0.1.0", "integrity": "sha512-CMyr1tzeop1OYaLJ6ItzZSShzu+0AGWekigFTLZRHG1sI9gVfYVCVYWYjbuEMYuDjtr8/4wEnj9OI5MvrWO9aw==" },
+    { "kind": "npm", "scope": "global", "source": "npm:@danypops/pi-web-spider", "resolved": "0.13.0", "integrity": "sha512-n6j/7enB4wUCeQVIIeFDUxeyk/SkV9lxJyQA+KYYQGDSCQd6Wr+ZbtVgM73X5quWPZMCB5akzxO0m3ZU92xNfg==" },
+    { "kind": "npm", "scope": "global", "source": "npm:@danypops/enigma", "resolved": "0.22.0", "integrity": "sha512-l/zLpNfaN4MQi5EDTa7IVka8daYk7ScWxDUUqFSUBSoQ2b0AOxtoY5JtdC6JRLcXSNhq9KqXNmJ1VSkf2HAC+w==" }
+  ],
+  "profiles": {}
+}