@dxos/app-framework 0.8.4-staging.60fe92afc8 → 0.9.1-main.c7dcc2e112

package/dist/lib/node-esm/chunk-LUK3FCTH.mjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/common/capabilities.ts"],
+  "sourcesContent": ["//\n// Copyright 2025 DXOS.org\n//\n\nimport { type Atom, type Registry } from '@effect-atom/atom-react';\nimport type * as Command$ from '@effect/cli/Command';\nimport * as Effect from 'effect/Effect';\nimport type * as Exit$ from 'effect/Exit';\nimport type * as Fiber$ from 'effect/Fiber';\nimport type * as Layer$ from 'effect/Layer';\nimport type * as ManagedRuntime$ from 'effect/ManagedRuntime';\nimport type * as Runtime$ from 'effect/Runtime';\nimport type { FC, PropsWithChildren } from 'react';\n\nimport type {\n  LayerSpec as LayerSpec$,\n  Operation as Operation$,\n  OperationHandlerSet,\n  Process as Process$,\n  ServiceResolver as ServiceResolver$,\n  Trace as Trace$,\n} from '@dxos/compute';\nimport type { ProcessManager as ProcessManager$ } from '@dxos/compute-runtime';\nimport { OperationInvoker as OperationInvoker$ } from '@dxos/operation';\n\nimport { Capability as Capability$, Plugin as Plugin$, type PluginManager as PluginManager$ } from '../core';\nimport type {\n  HistoryTracker as HistoryTracker$,\n  UndoMapping as UndoMapping$,\n  UndoRegistry as UndoRegistry$,\n} from '../plugin-process-manager';\nimport type { Surface } from '../ui';\n\n/**\n * Null capability.\n * @category Capability\n */\nexport const Null = Capability$.make<null>('org.dxos.app-framework.capability.null');\n\n/**\n * @category Capability\n */\nexport const PluginManager = Capability$.make<PluginManager$.PluginManager>(\n  'org.dxos.app-framework.capability.pluginManager',\n);\n\n/**\n * @category Capability\n */\nexport const AtomRegistry = Capability$.make<Registry.Registry>('org.dxos.app-framework.capability.atomRegistry');\n\nexport type ReactContext = Readonly<{\n  id: string;\n  dependsOn?: string[];\n  context: FC<PropsWithChildren>;\n}>;\n\n/**\n * @category Capability\n */\nexport const ReactContext = Capability$.make<ReactContext>('org.dxos.app-framework.capability.reactContext');\n\nexport type ReactRoot = Readonly<{ id: string; root: FC<PropsWithChildren> }>;\n\n/**\n * @category Capability\n */\nexport const ReactRoot = Capability$.make<ReactRoot>('org.dxos.app-framework.capability.reactRoot');\n\n/**\n * Surface definitions that can be either React components or Web Components.\n */\nexport type ReactSurface = Surface.Definition | readonly Surface.Definition[];\n\n/**\n * @category Capability\n */\nexport const ReactSurface = Capability$.make<ReactSurface>('org.dxos.app-framework.capability.reactSurface');\n\nexport type AnyCommand = Command$.Command<any, any, any, any>;\n\n/**\n * @category Capability\n */\nexport const Command = Capability$.make<AnyCommand>('org.dxos.app-framework.capability.command');\n\n/**\n * @category Capability\n */\nexport const Layer = Capability$.make<Layer$.Layer<any, any, any>>('org.dxos.app-framework.capability.layer');\n\n/**\n * Layer specification contributed by plugins.\n *\n * Plugins contribute {@link LayerSpec.LayerSpec} entries that are collected by the\n * process-manager module and composed into a {@link LayerStack} which backs the\n * {@link ProcessManagerRuntime}'s service resolver.\n *\n * @category Capability\n */\nexport const LayerSpec = Capability$.make<LayerSpec$.LayerSpec>('org.dxos.app-framework.capability.layerSpec');\n\n/**\n * Context passed to {@link TraceSinkFactory} implementations when the\n * process-manager capability materialises contributed sinks.\n */\nexport interface TraceSinkFactoryContext {\n  /**\n   * Service resolver backing the shared {@link ProcessManagerRuntime}. Use it\n   * to resolve per-space (or per-process) services like `FeedTraceSink` when\n   * building a routing sink.\n   */\n  readonly resolver: ServiceResolver$.ServiceResolver;\n}\n\n/**\n * Factory that builds a {@link Trace$.Sink} when the process-manager\n * capability is ready. Plugins that only need a static sink can ignore the\n * context (e.g. `() => myConsoleSink`); plugins that need per-space routing\n * can use {@link TraceSinkFactoryContext.resolver} to look up services.\n */\nexport type TraceSinkFactory = (ctx: TraceSinkFactoryContext) => Trace$.Sink;\n\n/**\n * Trace sink contribution.\n *\n * Plugins contribute {@link TraceSinkFactory} functions; the process-manager\n * capability invokes each factory with the runtime's\n * {@link ServiceResolver$.ServiceResolver}, collects the resulting\n * {@link Trace$.Sink}s, merges them via {@link Trace$.mergeSinks}, and\n * installs the merged sink as {@link Trace$.TraceSink} in the runtime layer\n * so every process writes to every contributed sink.\n *\n * @category Capability\n */\nexport const TraceSink = Capability$.make<TraceSinkFactory>('org.dxos.app-framework.capability.traceSink');\n\n/**\n * Service resolver backing the shared {@link ProcessManagerRuntime}.\n *\n * Contributed by the process-manager capability module. Consumers can combine\n * it with {@link ServiceResolver$.provide} to build space-scoped layers without\n * having to go through the process-manager runtime:\n *\n * @example\n * ```ts\n * const resolver = yield* Capability.get(Capabilities.ServiceResolver);\n * yield* effect.pipe(\n *   Effect.provide(\n *     ServiceResolver.provide({ space }, Database.Service, Feed.FeedService).pipe(\n *       Layer.provide(Layer.succeed(ServiceResolver.ServiceResolver, resolver)),\n *     ),\n *   ),\n * );\n * ```\n *\n * @category Capability\n */\nexport const ServiceResolver = Capability$.make<ServiceResolver$.ServiceResolver>(\n  'org.dxos.app-framework.capability.serviceResolver',\n);\n\n/**\n * Process monitor backing the shared {@link ProcessManagerRuntime}. Exposes the\n * live process tree (including inactive/terminated entries) via\n * {@link Process$.Monitor#processTreeAtom}.\n *\n * @category Capability\n */\nexport const ProcessMonitor = Capability$.make<Process$.Monitor>('org.dxos.app-framework.capability.processMonitor');\n\n/**\n * Services that are always available when running effects through a {@link ProcessManagerRuntime}.\n */\nexport type ProcessManagerRuntimeServices =\n  | Capability$.Service\n  | Plugin$.Service\n  | ProcessManager$.ProcessManagerService\n  | Operation$.Service\n  | ProcessManager$.ProcessOperationInvoker.Service\n  | ServiceResolver$.ServiceResolver;\n\n/**\n * Runtime that runs effects requiring a fixed set of capability-manager and\n * process-manager services.\n *\n * The shape mirrors {@link ManagedRuntime$.ManagedRuntime} but deliberately does\n * not expose `dispose` – lifecycle is driven by the host plugin manager.\n */\nexport interface ProcessManagerRuntime {\n  runPromise<A, E>(\n    effect: Effect.Effect<A, E, ProcessManagerRuntimeServices>,\n    options?: { readonly signal?: AbortSignal },\n  ): Promise<A>;\n  runPromiseExit<A, E>(\n    effect: Effect.Effect<A, E, ProcessManagerRuntimeServices>,\n    options?: { readonly signal?: AbortSignal },\n  ): Promise<Exit$.Exit<A, E>>;\n  runFork<A, E>(\n    effect: Effect.Effect<A, E, ProcessManagerRuntimeServices>,\n    options?: Runtime$.RunForkOptions,\n  ): Fiber$.RuntimeFiber<A, E>;\n  runSync<A, E>(effect: Effect.Effect<A, E, ProcessManagerRuntimeServices>): A;\n}\n\n/**\n * @category Capability\n */\nexport const ProcessManagerRuntime = Capability$.make<ProcessManagerRuntime>(\n  'org.dxos.app-framework.capability.processManagerRuntime',\n);\n\nexport type ManagedRuntime = ManagedRuntime$.ManagedRuntime<any, any>;\n\n/**\n * @category Capability\n */\nexport const ManagedRuntime = Capability$.make<ManagedRuntime>('org.dxos.app-framework.capability.managedRuntime');\n\n//\n// Operation System Capabilities\n//\n\nexport const OperationHandler = Capability$.make<OperationHandlerSet.OperationHandlerSet>(\n  'org.dxos.app-framework.capability.operationHandler',\n);\n\nexport type UndoMapping = UndoMapping$.UndoMapping;\n\n/**\n * Undo mapping registration - contributed by plugins.\n * @category Capability\n */\nexport const UndoMapping = Capability$.make<UndoMapping[]>('org.dxos.app-framework.capability.undoMapping');\n\n/**\n * Operation invoker backed by the process manager. Spawns a process per\n * operation invocation; see {@link ProcessManager$.ProcessOperationInvoker}.\n */\nexport type OperationInvoker = OperationInvoker$.OperationInvoker;\n\n/**\n * Operation invoker - provided by the process-manager capability.\n * @category Capability\n */\nexport const OperationInvoker = Capability$.make<OperationInvoker>(\n  'org.dxos.app-framework.capability.operationInvoker',\n);\n\nexport type UndoRegistry = UndoRegistry$.UndoRegistry;\n\n/**\n * Undo registry - provided by ProcessManagerPlugin.\n * @category Capability\n */\nexport const UndoRegistry = Capability$.make<UndoRegistry>('org.dxos.app-framework.capability.undoRegistry');\n\nexport type HistoryTracker = HistoryTracker$.HistoryTracker;\n\n/**\n * History tracker - provided by ProcessManagerPlugin.\n * @category Capability\n */\nexport const HistoryTracker = Capability$.make<HistoryTracker>('org.dxos.app-framework.capability.historyTracker');\n\n//\n// Atom Capability Helpers\n//\n\n/**\n * Get the current value of an atom capability.\n * @example const settings = yield* Capabilities.getAtomValue(CommentCapabilities.Settings);\n */\nexport const getAtomValue = <T>(\n  atomCapability: Capability$.InterfaceDef<Atom.Atom<T>>,\n): Effect.Effect<T, Error, Capability$.Service> =>\n  Effect.gen(function* () {\n    const registry = yield* Capability$.get(AtomRegistry);\n    const atom = yield* Capability$.get(atomCapability);\n    return registry.get(atom);\n  });\n\n/**\n * Update an atom capability value (requires writable atom).\n * @example yield* Capabilities.updateAtomValue(CommentCapabilities.Settings, (s) => ({ ...s, foo: true }));\n */\nexport const updateAtomValue = <T>(\n  atomCapability: Capability$.InterfaceDef<Atom.Writable<T>>,\n  fn: (current: T) => T,\n): Effect.Effect<void, Error, Capability$.Service> =>\n  Effect.gen(function* () {\n    const registry = yield* Capability$.get(AtomRegistry);\n    const atom = yield* Capability$.get(atomCapability);\n    registry.set(atom, fn(registry.get(atom)));\n  });\n\n/**\n * Subscribe to an atom capability.\n * @example const unsubscribe = yield* Capabilities.subscribeAtom(CommentCapabilities.Settings, (value) => ...);\n */\nexport const subscribeAtom = <T>(\n  atomCapability: Capability$.InterfaceDef<Atom.Atom<T>>,\n  callback: (value: T) => void,\n): Effect.Effect<() => void, Error, Capability$.Service> =>\n  Effect.gen(function* () {\n    const registry = yield* Capability$.get(AtomRegistry);\n    const atom = yield* Capability$.get(atomCapability);\n    return registry.subscribe(atom, () => callback(registry.get(atom)));\n  });\n"],
+  "mappings": ";;;;;;;;;AAAA;;;;;;;;;;;;;;;;;;;;;;;;;AAMA,YAAYA,YAAY;AA+BjB,IAAMC,OAAOC,mBAAYC,KAAW,wCAAA;AAKpC,IAAMC,gBAAgBF,mBAAYC,KACvC,iDAAA;AAMK,IAAME,eAAeH,mBAAYC,KAAwB,gDAAA;AAWzD,IAAMG,eAAeJ,mBAAYC,KAAmB,gDAAA;AAOpD,IAAMI,YAAYL,mBAAYC,KAAgB,6CAAA;AAU9C,IAAMK,eAAeN,mBAAYC,KAAmB,gDAAA;AAOpD,IAAMM,UAAUP,mBAAYC,KAAiB,2CAAA;AAK7C,IAAMO,QAAQR,mBAAYC,KAAkC,yCAAA;AAW5D,IAAMQ,YAAYT,mBAAYC,KAA2B,6CAAA;AAmCzD,IAAMS,YAAYV,mBAAYC,KAAuB,6CAAA;AAuBrD,IAAMU,kBAAkBX,mBAAYC,KACzC,mDAAA;AAUK,IAAMW,iBAAiBZ,mBAAYC,KAAuB,kDAAA;AAuC1D,IAAMY,wBAAwBb,mBAAYC,KAC/C,yDAAA;AAQK,IAAMa,iBAAiBd,mBAAYC,KAAqB,kDAAA;AAMxD,IAAMc,mBAAmBf,mBAAYC,KAC1C,oDAAA;AASK,IAAMe,cAAchB,mBAAYC,KAAoB,+CAAA;AAYpD,IAAMgB,mBAAmBjB,mBAAYC,KAC1C,oDAAA;AASK,IAAMiB,eAAelB,mBAAYC,KAAmB,gDAAA;AAQpD,IAAMkB,iBAAiBnB,mBAAYC,KAAqB,kDAAA;AAUxD,IAAMmB,eAAe,CAC1BC,mBAEOC,WAAI,aAAA;AACT,QAAMC,WAAW,OAAOvB,mBAAYwB,IAAIrB,YAAAA;AACxC,QAAMsB,OAAO,OAAOzB,mBAAYwB,IAAIH,cAAAA;AACpC,SAAOE,SAASC,IAAIC,IAAAA;AACtB,CAAA;AAMK,IAAMC,kBAAkB,CAC7BL,gBACAM,OAEOL,WAAI,aAAA;AACT,QAAMC,WAAW,OAAOvB,mBAAYwB,IAAIrB,YAAAA;AACxC,QAAMsB,OAAO,OAAOzB,mBAAYwB,IAAIH,cAAAA;AACpCE,WAASK,IAAIH,MAAME,GAAGJ,SAASC,IAAIC,IAAAA,CAAAA,CAAAA;AACrC,CAAA;AAMK,IAAMI,gBAAgB,CAC3BR,gBACAS,aAEOR,WAAI,aAAA;AACT,QAAMC,WAAW,OAAOvB,mBAAYwB,IAAIrB,YAAAA;AACxC,QAAMsB,OAAO,OAAOzB,mBAAYwB,IAAIH,cAAAA;AACpC,SAAOE,SAASQ,UAAUN,MAAM,MAAMK,SAASP,SAASC,IAAIC,IAAAA,CAAAA,CAAAA;AAC9D,CAAA;",
+  "names": ["Effect", "Null", "Capability$", "make", "PluginManager", "AtomRegistry", "ReactContext", "ReactRoot", "ReactSurface", "Command", "Layer", "LayerSpec", "TraceSink", "ServiceResolver", "ProcessMonitor", "ProcessManagerRuntime", "ManagedRuntime", "OperationHandler", "UndoMapping", "OperationInvoker", "UndoRegistry", "HistoryTracker", "getAtomValue", "atomCapability", "gen", "registry", "get", "atom", "updateAtomValue", "fn", "set", "subscribeAtom", "callback", "subscribe"]
+}

package/dist/lib/node-esm/{chunk-XGBUKRCK.mjs → chunk-TEQSMP2O.mjs}

@@ -1,7 +1,7 @@
 import { createRequire } from 'node:module';const require = createRequire(import.meta.url);
 import {
   isPlugin
-} from "./chunk-XIGPWXCQ.mjs";
+} from "./chunk-WERVO5EK.mjs";
 import {
   __export
 } from "./chunk-HSLMI22Q.mjs";
@@ -56,26 +56,34 @@ import * as HttpClientResponse from "@effect/platform/HttpClientResponse";
 import * as Effect2 from "effect/Effect";
 import * as Schema from "effect/Schema";
 import { BaseError as BaseError2 } from "@dxos/errors";
-import { PLUGIN_ENTRY_FILENAME } from "@dxos/protocols";
+import { PLUGIN_ENTRY_FILENAME, PluginManifestSchema } from "@dxos/protocols";
 var PLUGIN_DEV_SERVER_PORT = 3967;
 var PluginManifestError = class extends BaseError2.extend("PluginManifestError", "Plugin manifest is invalid") {
 };
 var Manifest = Schema.Struct({
-  id: Schema.String,
-  name: Schema.String,
-  version: Schema.String,
+  // Reuse the build manifest field definitions from `@dxos/protocols` (the shape `composerPlugin`
+  // emits), minus `assets` which we relax below, plus the dev-only `devEntry`.
+  ...PluginManifestSchema.omit("assets").fields,
+  /**
+  * Relative asset paths. Relaxed vs the build `PluginManifestSchema` (which requires >= 1) because
+  * dev-server manifests list no assets — chunks/styles flow through the dev server on demand.
+  */
   assets: Schema.Array(Schema.String),
-  devEntry: Schema.String.pipe(Schema.optional)
+  /** Present only for dev-server manifests; points at the unbundled source entry. */
+  devEntry: Schema.optional(Schema.String)
 });
 var resolve = (manifestUrl, manifest) => {
   const dev = manifest.devEntry !== void 0;
   return {
-    id: manifest.id,
+    key: manifest.key,
     name: manifest.name,
     version: manifest.version,
     entryUrl: new URL(dev ? manifest.devEntry : PLUGIN_ENTRY_FILENAME, manifestUrl).toString(),
     assetUrls: manifest.assets.map((asset) => new URL(asset, manifestUrl).toString()),
-    dev
+    dev,
+    ...manifest.dependencies !== void 0 ? {
+      dependencies: manifest.dependencies
+    } : {}
   };
 };
 var parse = (manifestUrl, payload) => {
@@ -136,7 +144,7 @@ var getPersistedRemotePlugins = (storage, key) => {
     if (!Array.isArray(parsed)) {
       return [];
     }
-    return parsed.filter((entry) => typeof entry === "object" && entry !== null && typeof entry.id === "string" && typeof entry.url === "string");
+    return parsed.filter((entry) => typeof entry === "object" && entry !== null && typeof entry.id === "string" && typeof entry.url === "string" && (entry.version === void 0 || typeof entry.version === "string"));
   } catch {
     return [];
   }
@@ -231,14 +239,14 @@ var loadStylesheets = (manifest, cache) => Effect3.gen(function* () {
   }
   const cssUrls = manifest.assetUrls.filter((url) => url.endsWith(".css"));
   for (const url of cssUrls) {
-    const resolved = yield* cache.resolve(manifest.id, url);
-    if (document.querySelector(`link[data-dxos-plugin-id="${manifest.id}"][href="${resolved}"]`)) {
+    const resolved = yield* cache.resolve(manifest.key, url);
+    if (document.querySelector(`link[data-dxos-plugin-id="${manifest.key}"][href="${resolved}"]`)) {
       continue;
     }
     const link = document.createElement("link");
     link.rel = "stylesheet";
     link.href = resolved;
-    link.dataset.dxosPluginId = manifest.id;
+    link.dataset.dxosPluginId = manifest.key;
     document.head.appendChild(link);
   }
 });
@@ -265,9 +273,9 @@ var loadFromManifest = (manifestUrl, cache) => Effect3.gen(function* () {
       manifestUrl,
       ...manifest.assetUrls
     ] : manifest.assetUrls;
-    yield* cache.cache(manifest.id, cachedUrls).pipe(wrapCacheError);
+    yield* cache.cache(manifest.key, cachedUrls).pipe(wrapCacheError);
   }
-  const entryUrl = manifest.dev ? manifest.entryUrl : yield* cache.resolve(manifest.id, manifest.entryUrl).pipe(wrapCacheError);
+  const entryUrl = manifest.dev ? manifest.entryUrl : yield* cache.resolve(manifest.key, manifest.entryUrl).pipe(wrapCacheError);
   const mod = yield* Effect3.tryPromise({
     try: () => import(
       /* @vite-ignore */
@@ -282,7 +290,7 @@ var loadFromManifest = (manifestUrl, cache) => Effect3.gen(function* () {
     })
   });
   const plugin = normalizePluginExport(mod);
-  if (!plugin.meta.id || !plugin.meta.name) {
+  if (!plugin.meta.profile.key || !plugin.meta.profile.name) {
     return yield* Effect3.fail(new RemotePluginLoadError({
       context: {
         locator: manifestUrl,
@@ -290,13 +298,13 @@ var loadFromManifest = (manifestUrl, cache) => Effect3.gen(function* () {
       }
     }));
   }
-  if (plugin.meta.id !== manifest.id) {
+  if (plugin.meta.profile.key !== manifest.key) {
     return yield* Effect3.fail(new RemotePluginLoadError({
       context: {
         locator: manifestUrl,
         reason: "meta-mismatch",
-        metaId: plugin.meta.id,
-        manifestId: manifest.id
+        metaId: plugin.meta.profile.key,
+        manifestId: manifest.key
       }
     }));
   }
@@ -355,7 +363,7 @@ var make = (builtinPlugins, options = {}) => {
   const key = options.key ?? DEFAULT_KEY;
   const cache = options.cache ?? noop();
   return (locator) => Effect3.gen(function* () {
-    const builtin = builtinPlugins.find((plugin2) => plugin2.meta.id === locator);
+    const builtin = builtinPlugins.find((plugin2) => plugin2.meta.profile.key === locator);
     if (builtin) {
       return {
         plugin: builtin
@@ -371,18 +379,18 @@ var make = (builtinPlugins, options = {}) => {
     }
     const { plugin, manifest } = yield* loadFromManifest(locator, cache);
     if (!manifest.dev) {
-      const duplicate = builtinPlugins.find((existing) => existing.meta.id === plugin.meta.id);
+      const duplicate = builtinPlugins.find((existing) => existing.meta.profile.key === plugin.meta.profile.key);
       if (duplicate) {
         return yield* Effect3.fail(new RemotePluginLoadError({
           context: {
             locator,
             reason: "duplicate-id",
-            id: plugin.meta.id
+            id: plugin.meta.profile.key
           }
         }));
       }
       persistRemotePlugin(storage, key, {
-        id: plugin.meta.id,
+        id: plugin.meta.profile.key,
         url: locator
       });
     }
@@ -420,4 +428,4 @@ export {
   uninstall,
   url_loader_exports
 };
-//# sourceMappingURL=chunk-XGBUKRCK.mjs.map
+//# sourceMappingURL=chunk-TEQSMP2O.mjs.map

package/dist/lib/node-esm/chunk-TEQSMP2O.mjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/core/url-loader.ts", "../../../src/core/plugin-asset-cache.ts", "../../../src/core/plugin-manifest.ts"],
+  "sourcesContent": ["//\n// Copyright 2026 DXOS.org\n//\n\nimport * as Effect from 'effect/Effect';\nimport * as Option from 'effect/Option';\n\nimport { BaseError } from '@dxos/errors';\nimport { log } from '@dxos/log';\n\nimport * as Plugin from './plugin';\nimport * as PluginAssetCache from './plugin-asset-cache';\nimport * as PluginManifest from './plugin-manifest';\n\nconst DEFAULT_KEY = 'org.dxos.composer.remote-plugins';\n\n/**\n * Tagged error for any failure during remote plugin loading. Construction sites\n * set `context.locator` and `context.reason` (one of `'invalid-locator' |\n * 'manifest-error' | 'cache-error' | 'import-failed' | 'meta-missing' |\n * 'meta-mismatch' | 'duplicate-id'`) so handlers can route on the failure mode.\n */\nexport class RemotePluginLoadError extends BaseError.extend('RemotePluginLoadError', 'Failed to load remote plugin') {}\n\n/**\n * Abstraction over key-value storage (defaults to localStorage).\n */\nexport type Storage = {\n  get(key: string): string | null;\n  set(key: string, value: string): void;\n};\n\n/**\n * Options for configuring the URL loader.\n */\nexport type Options = {\n  storage?: Storage;\n  key?: string;\n  /**\n   * Per-platform offline asset cache. Defaults to a no-op cache (no offline support).\n   */\n  cache?: PluginAssetCache.Cache;\n};\n\n/**\n * Options for the preload entry point. Adds an optional progress hook so hosts\n * can drive a boot-loader counter (`Loading plugins (3/12)…`) as remote plugin\n * manifests resolve. Resolution order is *not* deterministic — each entry races\n * its own network fetch — so callers should treat `loaded` as a count, not an\n * index. Failures are still swallowed; `loaded` advances on both success and\n * recoverable failure so the counter always reaches `total`.\n */\nexport type PreloadOptions = Options & {\n  onPluginLoaded?: (loaded: number, total: number) => void;\n};\n\n/**\n * Persisted record of a remote plugin that has been loaded previously.\n *\n * `url` is the URL of the plugin manifest (`plugin.json`), not the entry module.\n */\nexport type RemotePluginView = {\n  id: string;\n  url: string;\n  /** Installed version string, e.g. `v1.0.0`. Populated after install from a community catalog entry. */\n  version?: string;\n};\n\nconst defaultStorage = (): Storage => ({\n  get: (key) => localStorage.getItem(key),\n  set: (key, value) => localStorage.setItem(key, value),\n});\n\nconst getPersistedRemotePlugins = (storage: Storage, key: string): RemotePluginView[] => {\n  try {\n    const parsed: unknown = JSON.parse(storage.get(key) ?? '[]');\n    if (!Array.isArray(parsed)) {\n      return [];\n    }\n    return parsed.filter(\n      (entry): entry is RemotePluginView =>\n        typeof entry === 'object' &&\n        entry !== null &&\n        typeof entry.id === 'string' &&\n        typeof entry.url === 'string' &&\n        (entry.version === undefined || typeof entry.version === 'string'),\n    );\n  } catch {\n    return [];\n  }\n};\n\nconst persistRemotePlugin = (storage: Storage, key: string, entry: RemotePluginView): void => {\n  try {\n    const entries = getPersistedRemotePlugins(storage, key).filter((existing) => existing.id !== entry.id);\n    entries.push(entry);\n    storage.set(key, JSON.stringify(entries));\n  } catch (error) {\n    log.warn('failed to persist remote plugin entry', { entry, error });\n  }\n};\n\nconst removePersistedRemotePlugin = (storage: Storage, key: string, pluginId: string): void => {\n  try {\n    const entries = getPersistedRemotePlugins(storage, key).filter((existing) => existing.id !== pluginId);\n    storage.set(key, JSON.stringify(entries));\n  } catch (error) {\n    log.warn('failed to remove remote plugin entry', { pluginId, error });\n  }\n};\n\nconst isUrl = (locator: string): boolean => {\n  try {\n    const url = new URL(locator);\n    return url.protocol === 'http:' || url.protocol === 'https:';\n  } catch {\n    return false;\n  }\n};\n\n/**\n * Returns true when the URL's hostname is the local host (localhost, 127.0.0.1, or ::1).\n */\nexport const isLocalUrl = (locator: string): boolean => {\n  try {\n    const hostname = new URL(locator).hostname.toLowerCase();\n    // WHATWG URL returns '::1' without brackets in Node; some browsers return '[::1]'.\n    return hostname === 'localhost' || hostname === '127.0.0.1' || hostname === '::1' || hostname === '[::1]';\n  } catch {\n    return false;\n  }\n};\n\n/**\n * Returns the list of remote plugin entries previously persisted by {@link make}.\n * Useful for UI code that needs to know which loaded plugins were installed from a URL\n * (e.g. to surface a tag on remote or localhost-hosted plugins).\n */\nexport const getRemoteEntries = (options: Options = {}): readonly RemotePluginView[] => {\n  const storage = options.storage ?? defaultStorage();\n  const key = options.key ?? DEFAULT_KEY;\n  return getPersistedRemotePlugins(storage, key);\n};\n\n/**\n * Updates the persisted installed version for an already-stored remote plugin entry.\n * Does nothing if the plugin has not been persisted yet.\n */\nexport const setInstalledVersion = (id: string, version: string, options: Options = {}): void => {\n  const storage = options.storage ?? defaultStorage();\n  const key = options.key ?? DEFAULT_KEY;\n  const entries = getPersistedRemotePlugins(storage, key);\n  const index = entries.findIndex((entry) => entry.id === id);\n  if (index === -1) {\n    return;\n  }\n  entries[index] = { ...entries[index], version };\n  try {\n    storage.set(key, JSON.stringify(entries));\n  } catch (error) {\n    log.warn('failed to update installed version for remote plugin', { id, version, error });\n  }\n};\n\n/**\n * Returns the installed version string for the given plugin id, or `undefined` if\n * the plugin was installed without version tracking (legacy install) or is not found.\n */\nexport const getInstalledVersion = (id: string, options: Options = {}): string | undefined => {\n  const storage = options.storage ?? defaultStorage();\n  const key = options.key ?? DEFAULT_KEY;\n  return getPersistedRemotePlugins(storage, key).find((entry) => entry.id === id)?.version;\n};\n\nconst normalizePluginExport = (mod: Record<string, unknown>): Plugin.Plugin => {\n  const exported = mod.default;\n  if (Plugin.isPlugin(exported)) {\n    return exported;\n  }\n  if (typeof exported === 'function') {\n    const result = (exported as () => unknown)();\n    if (Plugin.isPlugin(result)) {\n      return result;\n    }\n  }\n  throw new Error('Remote module default export is not a Plugin or a zero-arg plugin factory.');\n};\n\n/**\n * Loads stylesheets declared in the manifest by appending `<link rel=\"stylesheet\">` elements to the host document.\n * Each link is tagged with `data-dxos-plugin-id` so `uninstall` can clean them up.\n */\nconst loadStylesheets = (\n  manifest: PluginManifest.ResolvedManifest,\n  cache: PluginAssetCache.Cache,\n): Effect.Effect<void, PluginAssetCache.PluginAssetCacheError> =>\n  Effect.gen(function* () {\n    if (typeof document === 'undefined') {\n      return;\n    }\n    const cssUrls = manifest.assetUrls.filter((url) => url.endsWith('.css'));\n    for (const url of cssUrls) {\n      const resolved = yield* cache.resolve(manifest.key, url);\n      if (document.querySelector(`link[data-dxos-plugin-id=\"${manifest.key}\"][href=\"${resolved}\"]`)) {\n        continue;\n      }\n      const link = document.createElement('link');\n      link.rel = 'stylesheet';\n      link.href = resolved;\n      link.dataset.dxosPluginId = manifest.key;\n      document.head.appendChild(link);\n    }\n  });\n\nconst loadFromManifest = (\n  manifestUrl: string,\n  cache: PluginAssetCache.Cache,\n): Effect.Effect<{ plugin: Plugin.Plugin; manifest: PluginManifest.ResolvedManifest }, RemotePluginLoadError> =>\n  Effect.gen(function* () {\n    log.info('loading remote plugin', { manifestUrl });\n    const manifest = yield* PluginManifest.fetchManifest(manifestUrl).pipe(\n      Effect.mapError(\n        (cause) => new RemotePluginLoadError({ context: { locator: manifestUrl, reason: 'manifest-error' }, cause }),\n      ),\n    );\n    const wrapCacheError = Effect.mapError(\n      (cause: PluginAssetCache.PluginAssetCacheError) =>\n        new RemotePluginLoadError({ context: { locator: manifestUrl, reason: 'cache-error' }, cause }),\n    );\n    // Dev-mode manifests (served by `vite dev` via composerPlugin) skip the offline\n    // cache: chunks resolve on demand through the dev server, the asset list isn't\n    // enumerable up-front, and CSS arrives via runtime <style> injection rather than\n    // static <link> tags.\n    if (!manifest.dev) {\n      // Cache the manifest URL alongside its declared assets. Without it, `preload` on a\n      // subsequent reload would fetch the manifest from the network — and fail when the\n      // plugin's host is offline, dropping the plugin from the runtime.\n      const cachedUrls =\n        manifest.assetUrls.indexOf(manifestUrl) === -1 ? [manifestUrl, ...manifest.assetUrls] : manifest.assetUrls;\n      yield* cache.cache(manifest.key, cachedUrls).pipe(wrapCacheError);\n    }\n    const entryUrl = manifest.dev\n      ? manifest.entryUrl\n      : yield* cache.resolve(manifest.key, manifest.entryUrl).pipe(wrapCacheError);\n    const mod = yield* Effect.tryPromise({\n      try: () => import(/* @vite-ignore */ entryUrl),\n      catch: (cause) =>\n        new RemotePluginLoadError({ context: { locator: manifestUrl, reason: 'import-failed' }, cause }),\n    });\n    const plugin = normalizePluginExport(mod);\n    if (!plugin.meta.profile.key || !plugin.meta.profile.name) {\n      return yield* Effect.fail(\n        new RemotePluginLoadError({ context: { locator: manifestUrl, reason: 'meta-missing' } }),\n      );\n    }\n    if (plugin.meta.profile.key !== manifest.key) {\n      return yield* Effect.fail(\n        new RemotePluginLoadError({\n          context: {\n            locator: manifestUrl,\n            reason: 'meta-mismatch',\n            metaId: plugin.meta.profile.key,\n            manifestId: manifest.key,\n          },\n        }),\n      );\n    }\n    // Append stylesheets only after the entry imports cleanly and meta validation\n    // passes. If we did this earlier and the import or meta checks failed, the\n    // `<link>` tags would leak into the host DOM with no plugin to own their\n    // teardown — `uninstall` only runs for plugins the manager actually accepted.\n    // In dev mode, Vite injects styles at runtime via the module graph, so static\n    // <link> tags would duplicate (or 404, since CSS chunks aren't pre-built).\n    if (!manifest.dev) {\n      yield* loadStylesheets(manifest, cache).pipe(wrapCacheError);\n    }\n    return { plugin, manifest };\n  });\n\n/**\n * Preloads previously persisted remote plugins from storage. Per-entry failures\n * are logged and swallowed — the returned effect always succeeds with whichever\n * plugins loaded cleanly, so a single bad entry can't block the host's startup.\n */\nexport const preload = (options: PreloadOptions = {}): Effect.Effect<Plugin.Plugin[], never> =>\n  Effect.gen(function* () {\n    const storage = options.storage ?? defaultStorage();\n    const key = options.key ?? DEFAULT_KEY;\n    const cache = options.cache ?? PluginAssetCache.noop();\n    const onPluginLoaded = options.onPluginLoaded;\n\n    const entries = getPersistedRemotePlugins(storage, key);\n    if (entries.length === 0) {\n      return [];\n    }\n    log.info('preloading remote plugins', { count: entries.length });\n    const total = entries.length;\n    let loaded = 0;\n    const results = yield* Effect.all(\n      entries.map((entry) =>\n        loadFromManifest(entry.url, cache).pipe(\n          Effect.tapError((error) => Effect.sync(() => log.warn('failed to preload remote plugin', { entry, error }))),\n          Effect.option,\n          // Tick the progress hook on both success and recoverable failure so\n          // the counter monotonically reaches `total`. The host-supplied\n          // callback is best-effort: any synchronous throw flows through\n          // `Effect.try` and gets logged + ignored so a buggy hook can't\n          // derail the preload.\n          Effect.tap(() =>\n            Effect.sync(() => {\n              loaded += 1;\n            }).pipe(\n              Effect.andThen(Effect.try(() => onPluginLoaded?.(loaded, total))),\n              Effect.tapError((error) => Effect.sync(() => log.warn('onPluginLoaded threw', { loaded, total, error }))),\n              Effect.ignore,\n            ),\n          ),\n        ),\n      ),\n      { concurrency: 'unbounded' },\n    );\n    return results.flatMap((result) =>\n      Option.match(result, {\n        onNone: () => [],\n        onSome: ({ plugin }) => [plugin],\n      }),\n    );\n  });\n\n/**\n * Creates a plugin loader that resolves built-in plugins by ID or loads remote plugins from URLs.\n *\n * Remote URLs must point at a plugin manifest (`plugin.json`). The loader fetches the manifest,\n * eagerly persists every declared asset via the configured `PluginAssetCache`, then dynamic-imports\n * the entry module.\n */\nexport const make = (builtinPlugins: Plugin.Plugin[], options: Options = {}) => {\n  const storage = options.storage ?? defaultStorage();\n  const key = options.key ?? DEFAULT_KEY;\n  const cache = options.cache ?? PluginAssetCache.noop();\n\n  return (locator: string): Effect.Effect<{ plugin: Plugin.Plugin; dev?: boolean }, RemotePluginLoadError> =>\n    Effect.gen(function* () {\n      const builtin = builtinPlugins.find((plugin) => plugin.meta.profile.key === locator);\n      if (builtin) {\n        return { plugin: builtin };\n      }\n      if (!isUrl(locator)) {\n        return yield* Effect.fail(new RemotePluginLoadError({ context: { locator, reason: 'invalid-locator' } }));\n      }\n      const { plugin, manifest } = yield* loadFromManifest(locator, cache);\n      // Production manifests can't collide with a builtin id — that would make\n      // the registered plugin permanently inaccessible. Dev manifests are\n      // allowed to collide because the manager shadow primitive handles the\n      // overlap (dev plugin takes the id slot for the session, original is\n      // restored on uninstall or page reload).\n      if (!manifest.dev) {\n        const duplicate = builtinPlugins.find((existing) => existing.meta.profile.key === plugin.meta.profile.key);\n        if (duplicate) {\n          return yield* Effect.fail(\n            new RemotePluginLoadError({ context: { locator, reason: 'duplicate-id', id: plugin.meta.profile.key } }),\n          );\n        }\n        persistRemotePlugin(storage, key, { id: plugin.meta.profile.key, url: locator });\n      }\n      return { plugin, dev: manifest.dev };\n    });\n};\n\n/**\n * Removes a previously installed remote plugin: drops the persisted entry, evicts cached\n * assets, and removes any stylesheet `<link>` tags that {@link loadFromManifest} appended.\n *\n * Cache eviction failures are logged and swallowed — the persisted entry has already been\n * dropped so the user-visible state is consistent regardless of whether the platform\n * cache cooperated.\n */\nexport const uninstall = (pluginId: string, options: Options = {}): Effect.Effect<void, never> =>\n  Effect.gen(function* () {\n    const storage = options.storage ?? defaultStorage();\n    const key = options.key ?? DEFAULT_KEY;\n    const cache = options.cache ?? PluginAssetCache.noop();\n\n    removePersistedRemotePlugin(storage, key, pluginId);\n    if (typeof document !== 'undefined') {\n      document.querySelectorAll(`link[data-dxos-plugin-id=\"${pluginId}\"]`).forEach((node) => node.remove());\n    }\n    yield* cache.evict(pluginId).pipe(\n      Effect.tapError((error) => Effect.sync(() => log.warn('failed to evict plugin assets', { pluginId, error }))),\n      Effect.ignore,\n    );\n  });\n", "//\n// Copyright 2026 DXOS.org\n//\n\nimport * as Effect from 'effect/Effect';\n\nimport { BaseError } from '@dxos/errors';\n\n/**\n * Tagged error for cache operations. Construction sites supply `context.operation`\n * (one of `'cache' | 'evict' | 'resolve' | 'list'`) and `context.pluginId` so\n * downstream handlers can route on the failed call without scanning the message.\n */\nexport class PluginAssetCacheError extends BaseError.extend(\n  'PluginAssetCacheError',\n  'Plugin asset cache operation failed',\n) {}\n\n/**\n * Per-platform offline cache for third-party plugin assets.\n *\n * Implementations live alongside their platform glue (composer-app's\n * `asset-cache/{tauri,service-worker}.ts`); the no-op default is for tests\n * and unsupported environments.\n */\nexport interface Cache {\n  /**\n   * Persist all listed URLs under the namespace of `pluginId`. Idempotent.\n   * The order of `urls` is significant — the first entry is treated as the entry module.\n   */\n  cache(pluginId: string, urls: readonly string[]): Effect.Effect<void, PluginAssetCacheError>;\n\n  /**\n   * Drop all assets for a plugin (uninstall).\n   */\n  evict(pluginId: string): Effect.Effect<void, PluginAssetCacheError>;\n\n  /**\n   * Resolves a plugin asset URL to a platform-specific cached URL when one is available.\n   * Returns the original URL when no cached copy exists or the platform serves cached\n   * responses transparently (e.g. service worker fetch interception on web).\n   */\n  resolve(pluginId: string, url: string): Effect.Effect<string, PluginAssetCacheError>;\n\n  /**\n   * List currently cached plugin ids (diagnostic).\n   */\n  list(): Effect.Effect<readonly string[], PluginAssetCacheError>;\n}\n\n/**\n * No-op implementation. Used when no platform cache is registered (tests, unsupported environments).\n * Plugins still load — they just have no offline guarantee.\n */\nexport const noop = (): Cache => ({\n  cache: () => Effect.void,\n  evict: () => Effect.void,\n  resolve: (_pluginId, url) => Effect.succeed(url),\n  list: () => Effect.succeed([] as readonly string[]),\n});\n", "//\n// Copyright 2026 DXOS.org\n//\n\nimport * as FetchHttpClient from '@effect/platform/FetchHttpClient';\nimport * as HttpClient from '@effect/platform/HttpClient';\nimport * as HttpClientRequest from '@effect/platform/HttpClientRequest';\nimport * as HttpClientResponse from '@effect/platform/HttpClientResponse';\nimport * as Effect from 'effect/Effect';\nimport * as Schema from 'effect/Schema';\n\nimport { BaseError } from '@dxos/errors';\nimport { PLUGIN_ENTRY_FILENAME, PluginManifestSchema } from '@dxos/protocols';\n\n/**\n * Default port the Vite plugin (`composerPlugin`) binds the dev server to.\n *\n * Shared single source of truth — `composerPlugin` reads it as the default\n * port, and the host's \"Load Dev Plugin\" affordance pre-fills the manifest URL\n * with `http://localhost:${PLUGIN_DEV_SERVER_PORT}/manifest.json`. Lives in\n * app-framework rather than `@dxos/protocols` because the constant is a\n * client-side convention (host loader + Vite plugin) rather than a wire-level\n * protocol.\n */\nexport const PLUGIN_DEV_SERVER_PORT = 3967;\n\n/**\n * Tagged error for manifest fetch / parse failures. Construction sites set\n * `context.manifestUrl` and `context.reason` (one of `'fetch-failed' |\n * 'http-error' | 'parse-failed' | 'invalid'`) so handlers can route on the\n * specific failure mode.\n */\nexport class PluginManifestError extends BaseError.extend('PluginManifestError', 'Plugin manifest is invalid') {}\n\n/**\n * Schema for a third-party plugin manifest.\n *\n * Production manifests are published as a sibling of the plugin's entry module\n * ({@link PLUGIN_ENTRY_FILENAME}) and advertise every file the plugin needs at\n * runtime so the host can eagerly cache them for offline use.\n *\n * Dev manifests (served by `vite dev` via {@link composerPlugin}) set `devEntry`\n * to point at the unbundled source entry. The host's loader treats the presence\n * of `devEntry` as the dev-mode signal: it imports the entry directly from the\n * dev server, skips eager asset caching, and skips static stylesheet injection\n * (Vite handles CSS via runtime `<style>` injection during HMR). `assets` is not\n * required to enumerate every file in dev mode — chunks and styles flow through\n * the dev server on demand.\n */\nexport const Manifest = Schema.Struct({\n  // Reuse the build manifest field definitions from `@dxos/protocols` (the shape `composerPlugin`\n  // emits), minus `assets` which we relax below, plus the dev-only `devEntry`.\n  ...PluginManifestSchema.omit('assets').fields,\n  /**\n   * Relative asset paths. Relaxed vs the build `PluginManifestSchema` (which requires >= 1) because\n   * dev-server manifests list no assets — chunks/styles flow through the dev server on demand.\n   */\n  assets: Schema.Array(Schema.String),\n  /** Present only for dev-server manifests; points at the unbundled source entry. */\n  devEntry: Schema.optional(Schema.String),\n});\n\nexport type Manifest = Schema.Schema.Type<typeof Manifest>;\n\n/**\n * Resolved manifest with all asset paths converted to absolute URLs.\n *\n * `dev` reflects whether the source manifest declared a `devEntry`. Loaders branch\n * on this to skip offline caching and stylesheet injection — both are no-ops (or\n * actively wrong) when the plugin is being served by a Vite dev server.\n */\nexport type ResolvedManifest = Pick<Manifest, 'key' | 'name' | 'version' | 'dependencies'> & {\n  entryUrl: string;\n  assetUrls: readonly string[];\n  dev: boolean;\n};\n\n/**\n * Resolves a parsed manifest's relative asset paths against the manifest's URL.\n * In dev mode the entry comes from `devEntry`; otherwise it's the canonical\n * {@link PLUGIN_ENTRY_FILENAME} sitting next to the manifest.\n */\nconst resolve = (manifestUrl: string, manifest: Manifest): ResolvedManifest => {\n  const dev = manifest.devEntry !== undefined;\n  return {\n    key: manifest.key,\n    name: manifest.name,\n    version: manifest.version,\n    entryUrl: new URL(dev ? manifest.devEntry! : PLUGIN_ENTRY_FILENAME, manifestUrl).toString(),\n    assetUrls: manifest.assets.map((asset) => new URL(asset, manifestUrl).toString()),\n    dev,\n    ...(manifest.dependencies !== undefined ? { dependencies: manifest.dependencies } : {}),\n  };\n};\n\n/**\n * Synchronous decode + validate + resolve for an in-memory manifest payload. Used\n * by tests and tooling that have the manifest body already loaded; the runtime\n * path goes through {@link fetchManifest}.\n */\nexport const parse = (manifestUrl: string, payload: unknown): ResolvedManifest => {\n  const manifest = Schema.decodeUnknownSync(Manifest)(payload);\n  if (manifest.devEntry === undefined && !manifest.assets.includes(PLUGIN_ENTRY_FILENAME)) {\n    throw new Error(`Manifest at ${manifestUrl} does not list ${PLUGIN_ENTRY_FILENAME} in assets.`);\n  }\n  return resolve(manifestUrl, manifest);\n};\n\n/**\n * Fetches and parses a manifest from the given URL via Effect's HTTP client and\n * Schema-driven JSON decoding. All failure modes surface as a single tagged\n * {@link PluginManifestError}; callers route on `error.context.reason`.\n */\nexport const fetchManifest = (manifestUrl: string): Effect.Effect<ResolvedManifest, PluginManifestError> =>\n  Effect.gen(function* () {\n    const response = yield* HttpClientRequest.get(manifestUrl).pipe(\n      HttpClient.execute,\n      Effect.mapError((cause) => new PluginManifestError({ context: { manifestUrl, reason: 'fetch-failed' }, cause })),\n    );\n    if (response.status >= 400) {\n      return yield* Effect.fail(\n        new PluginManifestError({ context: { manifestUrl, reason: 'http-error', status: response.status } }),\n      );\n    }\n    const manifest = yield* HttpClientResponse.schemaBodyJson(Manifest)(response).pipe(\n      Effect.mapError((cause) => new PluginManifestError({ context: { manifestUrl, reason: 'parse-failed' }, cause })),\n    );\n    if (manifest.devEntry === undefined && !manifest.assets.includes(PLUGIN_ENTRY_FILENAME)) {\n      return yield* Effect.fail(\n        new PluginManifestError({\n          context: { manifestUrl, reason: 'invalid' },\n          cause: `assets does not include ${PLUGIN_ENTRY_FILENAME}`,\n        }),\n      );\n    }\n    return resolve(manifestUrl, manifest);\n  }).pipe(Effect.scoped, Effect.provide(FetchHttpClient.layer));\n"],
+  "mappings": ";;;;;;;;;AAAA;;;;;;;;;;;AAIA,YAAYA,aAAY;AACxB,YAAYC,YAAY;AAExB,SAASC,aAAAA,kBAAiB;AAC1B,SAASC,WAAW;;;ACRpB;;;;;AAIA,YAAYC,YAAY;AAExB,SAASC,iBAAiB;AAOnB,IAAMC,wBAAN,cAAoCD,UAAUE,OACnD,yBACA,qCAAA,EAAA;AACC;AAsCI,IAAMC,OAAO,OAAc;EAChCC,OAAO,MAAaC;EACpBC,OAAO,MAAaD;EACpBE,SAAS,CAACC,WAAWC,QAAeC,eAAQD,GAAAA;EAC5CE,MAAM,MAAaD,eAAQ,CAAA,CAAE;AAC/B;;;AC3DA;;;;;;;;AAIA,YAAYE,qBAAqB;AACjC,YAAYC,gBAAgB;AAC5B,YAAYC,uBAAuB;AACnC,YAAYC,wBAAwB;AACpC,YAAYC,aAAY;AACxB,YAAYC,YAAY;AAExB,SAASC,aAAAA,kBAAiB;AAC1B,SAASC,uBAAuBC,4BAA4B;AAYrD,IAAMC,yBAAyB;AAQ/B,IAAMC,sBAAN,cAAkCJ,WAAUK,OAAO,uBAAuB,4BAAA,EAAA;AAA+B;AAiBzG,IAAMC,WAAkBC,cAAO;;;EAGpC,GAAGL,qBAAqBM,KAAK,QAAA,EAAUC;;;;;EAKvCC,QAAeC,aAAaC,aAAM;;EAElCC,UAAiBC,gBAAgBF,aAAM;AACzC,CAAA;AAsBA,IAAMG,UAAU,CAACC,aAAqBC,aAAAA;AACpC,QAAMC,MAAMD,SAASJ,aAAaM;AAClC,SAAO;IACLC,KAAKH,SAASG;IACdC,MAAMJ,SAASI;IACfC,SAASL,SAASK;IAClBC,UAAU,IAAIC,IAAIN,MAAMD,SAASJ,WAAYZ,uBAAuBe,WAAAA,EAAaS,SAAQ;IACzFC,WAAWT,SAASP,OAAOiB,IAAI,CAACC,UAAU,IAAIJ,IAAII,OAAOZ,WAAAA,EAAaS,SAAQ,CAAA;IAC9EP;IACA,GAAID,SAASY,iBAAiBV,SAAY;MAAEU,cAAcZ,SAASY;IAAa,IAAI,CAAC;EACvF;AACF;AAOO,IAAMC,QAAQ,CAACd,aAAqBe,YAAAA;AACzC,QAAMd,WAAkBe,yBAAkB1B,QAAAA,EAAUyB,OAAAA;AACpD,MAAId,SAASJ,aAAaM,UAAa,CAACF,SAASP,OAAOuB,SAAShC,qBAAAA,GAAwB;AACvF,UAAM,IAAIiC,MAAM,eAAelB,WAAAA,kBAA6Bf,qBAAAA,aAAkC;EAChG;AACA,SAAOc,QAAQC,aAAaC,QAAAA;AAC9B;AAOO,IAAMkB,gBAAgB,CAACnB,gBACrBoB,YAAI,aAAA;AACT,QAAMC,WAAW,OAAyBC,sBAAItB,WAAAA,EAAauB,KAC9CC,oBACJC,iBAAS,CAACC,UAAU,IAAItC,oBAAoB;IAAEuC,SAAS;MAAE3B;MAAa4B,QAAQ;IAAe;IAAGF;EAAM,CAAA,CAAA,CAAA;AAE/G,MAAIL,SAASQ,UAAU,KAAK;AAC1B,WAAO,OAAcC,aACnB,IAAI1C,oBAAoB;MAAEuC,SAAS;QAAE3B;QAAa4B,QAAQ;QAAcC,QAAQR,SAASQ;MAAO;IAAE,CAAA,CAAA;EAEtG;AACA,QAAM5B,WAAW,OAA0B8B,kCAAezC,QAAAA,EAAU+B,QAAAA,EAAUE,KACrEE,iBAAS,CAACC,UAAU,IAAItC,oBAAoB;IAAEuC,SAAS;MAAE3B;MAAa4B,QAAQ;IAAe;IAAGF;EAAM,CAAA,CAAA,CAAA;AAE/G,MAAIzB,SAASJ,aAAaM,UAAa,CAACF,SAASP,OAAOuB,SAAShC,qBAAAA,GAAwB;AACvF,WAAO,OAAc6C,aACnB,IAAI1C,oBAAoB;MACtBuC,SAAS;QAAE3B;QAAa4B,QAAQ;MAAU;MAC1CF,OAAO,2BAA2BzC,qBAAAA;IACpC,CAAA,CAAA;EAEJ;AACA,SAAOc,QAAQC,aAAaC,QAAAA;AAC9B,CAAA,EAAGsB,KAAYS,gBAAeC,gBAAwBC,qBAAK,CAAA;;;AF1H7D,IAAA,eAAMC;;AAsDAC,IAAAA,wBAAAA,cAAiCC,WAAA,OAAA,yBAAA,8BAAA,EAAA;;qBAE1BC,OAAUC;EACvB,KAAA,CAAA,QAAA,aAAA,QAAA,GAAA;EAEMC,KAAAA,CAAAA,KAAAA,UAAAA,aAA6BC,QAAkBC,KAAAA,KAAAA;AACnD;gCACqCD,CAAAA,SAAQE,QAAID;MAC/C;UACE,SAAS,KAAA,MAAA,QAAA,IAAA,GAAA,KAAA,IAAA;AACX,QAAA,CAAA,MAAA,QAAA,MAAA,GAAA;AACA,aAAOE,CAAAA;IAQP;AACA,WAAO,OAAE,OAAA,CAAA,UAAA,OAAA,UAAA,YAAA,UAAA,QAAA,OAAA,MAAA,OAAA,YAAA,OAAA,MAAA,QAAA,aAAA,MAAA,YAAA,UAAA,OAAA,MAAA,YAAA,SAAA;EACX,QAAA;AACF,WAAA,CAAA;EAEA;;0BAEoBJ,CAAAA,SAAAA,KAAAA,UAA0BC;MAC1CI;AACAJ,UAAAA,UAAYC,0BAAoBG,SAAAA,GAAAA,EAAAA,OAAAA,CAAAA,aAAAA,SAAAA,OAAAA,MAAAA,EAAAA;AAChC,YAAOC,KAAO,KAAA;AACdC,YAAQ,IAAC,KAAA,KAAA,UAAA,OAAA,CAAA;WAA2CC,OAAAA;QAAOF,KAAAA,yCAAAA;MAAM;MACnE;IACF,GAAA,EAAA,YAAA,YAAA,GAAA,cAAA,GAAA,IAAA,GAAA,OAAA,CAAA;EAEA;;kCAEoBN,CAAAA,SAAAA,KAA0BC,aAASC;MACnDD;AACA,UAAOK,UAAO,0BAAA,SAAA,GAAA,EAAA,OAAA,CAAA,aAAA,SAAA,OAAA,QAAA;AACdC,YAAQ,IAAC,KAAA,KAAA,UAAA,OAAA,CAAA;WAA0CE,OAAAA;QAAUH,KAAAA,wCAAAA;MAAM;MACrE;IACF,GAAA,EAAA,YAAA,YAAA,GAAA,cAAA,GAAA,IAAA,GAAA,OAAA,CAAA;EAEA;;YAEUI,CAAAA,YAAUC;MAChB;AACA,UAAM,MAAA,IAAA,IAAA,OAAA;AACN,WAAO,IAAA,aAAA,WAAA,IAAA,aAAA;EACT,QAAA;AACF,WAAA;EAEA;;AAKI,IAAMC,aAAeD,CAAAA,YAAIE;MACzB;AACA,UAAA,WAAOD,IAAa,IAAA,OAAA,EAAA,SAAeA,YAAa;AAEhD,WAAO,aAAA,eAAA,aAAA,eAAA,aAAA,SAAA,aAAA;EACT,QAAA;AACA,WAAA;EAEF;;AAOQV,IAAMY,mBAAenB,CAAAA,UAAAA,CAAAA,MAAAA;AAC3B,QAAA,UAAOK,QAAAA,WAA0BC,eAASC;AAC1C,QAAA,MAAA,QAAA,OAAA;AAEF,SAAA,0BAAA,SAAA,GAAA;;AAMQA,IAAMY,sBAAenB,CAAAA,IAAAA,SAAAA,UAAAA,CAAAA,MAAAA;AAC3B,QAAMU,UAAUL,QAAAA,WAAAA,eAA0BC;AAC1C,QAAMc,MAAAA,QAAQV,OAAQW;AACtB,QAAID,UAAW,0BAAG,SAAA,GAAA;QAChB,QAAA,QAAA,UAAA,CAAA,UAAA,MAAA,OAAA,EAAA;AACF,MAAA,UAAA,IAAA;AACAV;;UAAsCY,KAAAA,IAAAA;IAAQ,GAAA,QAAA,KAAA;IAC1C;;AAEJ,MAAE;AACAV,YAAQ,IAAC,KAAA,KAAA,UAAA,OAAA,CAAA;WAA0DW,OAAAA;QAAID,KAAAA,wDAAAA;MAASX;MAAM;MACxF;IACA,GAAA,EAAA,YAAA,YAAA,GAAA,cAAA,GAAA,KAAA,GAAA,OAAA,CAAA;EAEF;;AAMQJ,IAAMY,sBAAenB,CAAAA,IAAAA,UAAAA,CAAAA,MAAAA;AAC3B,QAAA,UAAOK,QAAAA,WAA0BC,eAAckB;AAC/C,QAAA,MAAA,QAAA,OAAA;AAEF,SAAMC,0BAAyBC,SAAAA,GAAAA,EAAAA,KAAAA,CAAAA,UAAAA,MAAAA,OAAAA,EAAAA,GAAAA;;IAE7B,wBAAoBC,CAAAA,QAAW;QAC7B,WAAOA,IAAAA;AACT,MAAA,SAAA,QAAA,GAAA;AACI,WAAOA;;MAET,OAAIC,aAAgBC,YAAS;UAC3B,SAAOA,SAAAA;AACT,QAAA,SAAA,MAAA,GAAA;AACF,aAAA;IACA;EACF;AAEA,QAAA,IAAA,MAAA,4EAAA;;sBAUM,CAAA,UAAA,UAAA,YAAA,aAAA;AACF,MAAA,OAAA,aAAA,aAAA;AACA;EACA;QACE,UAAMC,SAAW,UAAaC,OAAQC,CAAAA,QAAAA,IAASzB,SAAKQ,MAAAA,CAAAA;aAChDkB,OAASC,SAAAA;UACX,WAAA,OAAA,MAAA,QAAA,SAAA,KAAA,GAAA;AACF,QAAA,SAAA,cAAA,6BAAA,SAAA,GAAA,YAAA,QAAA,IAAA,GAAA;AACA;IACAC;AACAA,UAAKC,OAAON,SAAAA,cAAAA,MAAAA;AACZK,SAAKE,MAAAA;AACLJ,SAAAA,OAASK;AACX,SAAA,QAAA,eAAA,SAAA;AACF,aAAA,KAAA,YAAA,IAAA;EAEIC;;uBAKkCC,CAAAA,aAAAA,UAAAA,YAAAA,aAAAA;AAAY,MAAA,KAAA,yBAAA;IAChD;mBAE2CC,YAAS,GAAA,cAAA,GAAA,KAAA,GAAA,KAAA,CAAA;mBAAEvB,OAASsB,cAAAA,WAAAA,EAAAA,KAAAA,iBAAAA,CAAAA,UAAAA,IAAAA,sBAAAA;aAAaE;MAAyB,SAAA;MAAGC,QAAAA;IAAM;IAGxGC;;yBAE8CJ,iBAAAA,CAAAA,UAAAA,IAAAA,sBAAAA;aAAaE;MAAsB,SAAA;MAAGC,QAAAA;IAAM;IAEhG;EACA,CAAA,CAAA;MAKE,CAAA,SAAA,KAAA;uBAG6EE,SAAS,UAAA,QAAA,WAAA,MAAA,KAAA;MAAIb;MAC1F,GAAOc,SAAMA;IACf,IAAA,SAAA;AACA,WAAMC,MAAWf,MAAAA,SACbA,KAAAA,UAASe,EAAQ,KACjB,cAAahB;EACjB;QACEiB,WAAW,SAAO,MAAA,SAAmBD,WAAAA,OAAAA,MAAAA,QAAAA,SAAAA,KAAAA,SAAAA,QAAAA,EAAAA,KAAAA,cAAAA;QACrCE,MAAQN,OACFO,mBAAAA;eAAwBT;;MAAS;;sBAAEvB,IAAAA,sBAASsB;eAAaE;QAAwB,SAAA;QAAGC,QAAAA;MAAM;MAClG;IACMQ,CAAAA;EACN,CAAA;QACE,SAAO,sBACDD,GAAAA;cAAwBT,KAAS,QAAA,OAAA,CAAA,OAAA,KAAA,QAAA,MAAA;kBAAWD,aAAAA,IAAAA,sBAAAA;eAAaE;QAAuB,SAAA;QAAE,QAAA;MAE1F;IACIS,CAAAA,CAAAA;;aAGEV,KAAAA,QAAS,QAAA,SAAA,KAAA;kBACED,aAAAA,IAAAA,sBAAAA;eACTE;QACAU,SAAQD;QACRE,QAAAA;QACF,QAAA,OAAA,KAAA,QAAA;QACF,YAAA,SAAA;MAEJ;IACA,CAAA,CAAA;EACA;AAOA,MAAA,CAAA,SAAA,KAAA;AACA,WAAO,gBAAA,UAAA,KAAA,EAAA,KAAA,cAAA;;SAAUrB;IAAS;IAC5B;EAEF;;AAQI,IAAMzB,UAAMY,CAAQZ,UAAOP,CAAAA,MAAAA,YAAAA,aAAAA;AAC3B,QAAM8C,UAAQ3B,QAAQ2B,WAASQ,eAAiBC;AAChD,QAAMC,MAAAA,QAAAA,OAAiBrC;AAEvB,QAAMT,QAAAA,QAAUL,SAA0BC,KAASC;AACnD,QAAIG,iBAAmB,QAAG;QACxB,UAAS,0BAAA,SAAA,GAAA;AACX,MAAA,QAAA,WAAA,GAAA;AACI+C,WAAK,CAAA;;AAAqD,MAAA,KAAA,6BAAA;IAC9D,OAAMC,QAAQhD;EACd,GAAA,EAAA,YAAa,YAAA,GAAA,cAAA,GAAA,KAAA,GAAA,KAAA,CAAA;AACb,QAAMiD,QAAAA,QAAU;;kBAGwFhD,OAAAA,YAAAA,QAAAA,IAAAA,CAAAA,UAAAA,iBAAAA,MAAAA,KAAAA,KAAAA,EAAAA;IAAAA,iBAAAA,CAAAA,UAAAA,aAAAA,MAAAA,IAAAA,KAAAA,mCAAAA;MAAM;MAGxG;IACA,GAAA,EAAA,YAAA,YAAA,GAAA,cAAA,GAAA,KAAA,GAAA,KAAA,CAAA,CAAA,CAA+D;IAAA;;;;;;IAM1DiD,YAAI,MACEC,aAAQC,MAAAA;gBACiEC;YAAQL,gBAAAA,YAAAA,MAAAA,iBAAAA,QAAAA,KAAAA,CAAAA,CAAAA,GAAAA,iBAAAA,CAAAA,UAAAA,aAAAA,MAAAA,IAAAA,KAAAA,wBAAAA;MAAO/C;MAAM;MAM9F;IAAY,GAAA,EAAA,YAAA,YAAA,GAAA,cAAA,GAAA,KAAA,GAAA,KAAA,CAAA,CAAA,CAAA,GAAA,cAAA,CAAA;EAAA,CAAA,GAAA;IAE7B,aAAeqD;;iBAGXC,QAAWd,CAAAA,WAAa,aAAA,QAAA;YAACA,MAAAA,CAAAA;YAAO,CAAA,EAAA,OAAA,MAAA;MAClC;IAED;EAEL,CAAA,CAAA;;AASQ5C,IAAMY,OAAQZ,CAAAA,gBAAOP,UAAAA,CAAAA,MAAAA;AAC3B,QAAM8C,UAAQ3B,QAAQ2B,WAASQ,eAAiBC;AAEhD,QAAA,MAAQrC,QACN4C,OAAOI;gBACCC,QAAAA,SAA+BhB,KAAAA;UACrC,YAAa,YAAA,aAAA;UACX,UAAO,eAAA,KAAA,CAAAA,YAAAA,QAAA,KAAA,QAAA,QAAA,OAAA;iBAAEA;AAAgB,aAAA;QAC3B,QAAA;MACI;;eACoDV,OAAS,GAAA;oBAAEvB,aAAAA,IAAAA,sBAAAA;iBAASwB;UAA0B;UAAE,QAAA;QACxG;MACA,CAAA,CAAM;IACN;AACA,UAAA,EAAA,QAAA,SAAA,IAAA,OAAA,iBAAA,SAAA,KAAA;QAME,CAAA,SAAI0B,KAAW;YACb,YAAcN,eACZ,KAAIZ,CAAAA,aAAAA,SAAsB,KAAA,QAAA,QAAA,OAAA,KAAA,QAAA,GAAA;qBAAET;sBAAWvB,aAAAA,IAAAA,sBAAAA;mBAASwB;YAAwBnB;YAA4B,QAAA;YAAE,IAAA,OAAA,KAAA,QAAA;UAE1G;QACA8C,CAAAA,CAAAA;;0BAAsEnD,SAAAA,KAAAA;QAAQ,IAAA,OAAA,KAAA,QAAA;QAChF,KAAA;MACA,CAAA;;WAAiBoD;MAAkB;MACrC,KAAA,SAAA;IACF;EAEF,CAAA;;AAWI,IAAM/D,YAAcA,CAAAA,UAAOP,UAAAA,CAAAA,MAAAA,YAAAA,aAAAA;AAC3B,QAAM8C,UAAQ3B,QAAQ2B,WAASQ,eAAiBC;AAEhDgB,QAAAA,MAAAA,QAAAA,OAAAA;AACA,QAAI,QAAOtC,QAAAA,SAA0B,KAAA;8BAC1BuC,SAAkB,KAAA,QAAA;AAC7B,MAAA,OAAA,aAAA,aAAA;AACA,aAAaC,iBAAgBb,6BACAE,QAAOY,IAAK,EAAA,QAAUC,CAAAA,SAAK,KAAA,OAAA,CAAA;;eAA6ChE,MAAAA,QAAAA,EAAAA,KAAAA,iBAAAA,CAAAA,UAAAA,aAAAA,MAAAA,IAAAA,KAAAA,iCAAAA;IAAM;IAG1G;;;",
+  "names": ["Effect", "Option", "BaseError", "log", "Effect", "BaseError", "PluginAssetCacheError", "extend", "noop", "cache", "void", "evict", "resolve", "_pluginId", "url", "succeed", "list", "FetchHttpClient", "HttpClient", "HttpClientRequest", "HttpClientResponse", "Effect", "Schema", "BaseError", "PLUGIN_ENTRY_FILENAME", "PluginManifestSchema", "PLUGIN_DEV_SERVER_PORT", "PluginManifestError", "extend", "Manifest", "Struct", "omit", "fields", "assets", "Array", "String", "devEntry", "optional", "resolve", "manifestUrl", "manifest", "dev", "undefined", "key", "name", "version", "entryUrl", "URL", "toString", "assetUrls", "map", "asset", "dependencies", "parse", "payload", "decodeUnknownSync", "includes", "Error", "fetchManifest", "gen", "response", "get", "pipe", "execute", "mapError", "cause", "context", "reason", "status", "fail", "schemaBodyJson", "scoped", "provide", "layer", "DEFAULT_KEY", "defaultStorage", "BaseError", "value", "localStorage", "getPersistedRemotePlugins", "storage", "key", "get", "parsed", "entries", "error", "log", "entry", "pluginId", "url", "URL", "hostname", "locator", "options", "index", "findIndex", "version", "id", "find", "normalizePluginExport", "mod", "exported", "Plugin", "result", "resolved", "resolve", "manifest", "document", "querySelector", "link", "href", "dataset", "head", "loadFromManifest", "manifestUrl", "context", "reason", "cause", "wrapCacheError", "assetUrls", "cache", "entryUrl", "try", "catch", "RemotePluginLoadError", "plugin", "metaId", "manifestId", "PluginAssetCache", "noop", "onPluginLoaded", "info", "total", "results", "pipe", "andThen", "Effect", "loaded", "flatMap", "onSome", "gen", "builtin", "duplicate", "persistRemotePlugin", "dev", "removePersistedRemotePlugin", "querySelectorAll", "evict", "sync", "warn"]
+}

package/dist/lib/node-esm/{chunk-KFZEB6BV.mjs → chunk-TLKYZKPW.mjs}

@@ -1,7 +1,7 @@
 import { createRequire } from 'node:module';const require = createRequire(import.meta.url);
 import {
   activation_event_exports
-} from "./chunk-XOCUANHO.mjs";
+} from "./chunk-BMW6P6QA.mjs";
 import {
   __export
 } from "./chunk-HSLMI22Q.mjs";
@@ -15,9 +15,9 @@ __export(activation_events_exports, {
   Startup: () => Startup
 });
 var Startup = activation_event_exports.make("org.dxos.app-framework.event.startup");
-var SetupReactSurface = activation_event_exports.make("org.dxos.app-framework.event.setup-react-surface");
-var SetupProcessManager = activation_event_exports.make("org.dxos.app-framework.event.setup-process-manager");
-var ProcessManagerReady = activation_event_exports.make("org.dxos.app-framework.event.process-manager-ready");
+var SetupReactSurface = activation_event_exports.make("org.dxos.app-framework.event.setupReactSurface");
+var SetupProcessManager = activation_event_exports.make("org.dxos.app-framework.event.setupProcessManager");
+var ProcessManagerReady = activation_event_exports.make("org.dxos.app-framework.event.processManagerReady");
 
 export {
   Startup,
@@ -26,4 +26,4 @@ export {
   ProcessManagerReady,
   activation_events_exports
 };
-//# sourceMappingURL=chunk-KFZEB6BV.mjs.map
+//# sourceMappingURL=chunk-TLKYZKPW.mjs.map

package/dist/lib/node-esm/chunk-TLKYZKPW.mjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/common/activation-events.ts"],
+  "sourcesContent": ["//\n// Copyright 2025 DXOS.org\n//\n\nimport { ActivationEvent as ActivationEvent$ } from '../core';\n\n/**\n * Fired when the app is started.\n */\nexport const Startup = ActivationEvent$.make('org.dxos.app-framework.event.startup');\n\n//\n// Dependent Events\n//\n\n/**\n * Fired to load any newly available surfaces.\n */\nexport const SetupReactSurface = ActivationEvent$.make('org.dxos.app-framework.event.setupReactSurface');\n\n/**\n * Fired before the process manager is created.\n * Plugins should contribute their {@link Capabilities.LayerSpec} entries and\n * {@link Capabilities.OperationHandler} sets before this event fires so the\n * process manager's {@link ServiceResolver} and {@link OperationInvoker} pick\n * them up at construction time.\n */\nexport const SetupProcessManager = ActivationEvent$.make('org.dxos.app-framework.event.setupProcessManager');\n\n//\n// Triggered Events\n//\n\n/**\n * Fired after the process manager runtime is ready and its derived capabilities\n * (`ProcessManagerRuntime`, `ServiceResolver`, `ProcessMonitor`, `OperationInvoker`)\n * have been contributed.\n */\nexport const ProcessManagerReady = ActivationEvent$.make('org.dxos.app-framework.event.processManagerReady');\n"],
+  "mappings": ";;;;;;;;;AAAA;;;;;;;AASO,IAAMA,UAAUC,yBAAiBC,KAAK,sCAAA;AAStC,IAAMC,oBAAoBF,yBAAiBC,KAAK,gDAAA;AAShD,IAAME,sBAAsBH,yBAAiBC,KAAK,kDAAA;AAWlD,IAAMG,sBAAsBJ,yBAAiBC,KAAK,kDAAA;",
+  "names": ["Startup", "ActivationEvent$", "make", "SetupReactSurface", "SetupProcessManager", "ProcessManagerReady"]
+}

package/dist/lib/node-esm/{chunk-WK7OIQKI.mjs → chunk-VCPGX7WN.mjs}

@@ -4,61 +4,53 @@ import { createRequire } from 'node:module';const require = createRequire(import
 import * as Effect from "effect/Effect";
 import { Context } from "@dxos/context";
 var __dxlog_file = "/__w/dxos/dxos/packages/sdk/app-framework/src/core/edge-registry-plugin-provider.ts";
-var toRegistryPlugin = (entry) => ({
-  id: entry.meta.id,
-  name: entry.meta.name,
-  description: entry.meta.description,
-  homePage: entry.meta.homePage,
-  source: entry.meta.source,
-  screenshots: entry.meta.screenshots ? [
-    ...entry.meta.screenshots
-  ] : void 0,
-  tags: entry.meta.tags ? [
-    ...entry.meta.tags
-  ] : void 0,
-  icon: entry.meta.icon,
-  iconHue: entry.meta.iconHue,
-  moduleUrl: entry.moduleUrl,
-  repo: entry.repo,
-  version: entry.releaseTag
-});
+var toRegistryPlugin = (entry) => {
+  if (!entry.releases?.length) {
+    return null;
+  }
+  const latestRelease = entry.releases.find((release) => release.version === entry.latestVersion) ?? entry.releases[0];
+  return {
+    profile: {
+      ...entry.profile,
+      // Provenance: the verified publisher is the author (handle preferred, DID fallback).
+      author: entry.handle ?? entry.did
+    },
+    release: latestRelease
+  };
+};
 var EdgeRegistryPluginProvider = class {
   _client;
   // Cached on first load so getPlugin/listVersions can resolve without re-fetching.
   #cachedPlugins = [];
+  #cachedEntries = [];
   constructor(_client) {
     this._client = _client;
   }
   listPlugins() {
     return Effect.tryPromise({
-      try: () => this._client.getRegistryPlugins(Context.default(void 0, { "~LogMeta": "~LogMeta", F: __dxlog_file, L: 56 })),
+      try: () => this._client.getRegistryPlugins(Context.default(void 0, { "~LogMeta": "~LogMeta", F: __dxlog_file, L: 48 })),
       catch: (error) => error instanceof Error ? error : new Error(String(error))
     }).pipe(Effect.map((body) => {
-      const plugins = body.plugins.filter((entry) => entry.health === "ok").map(toRegistryPlugin);
+      this.#cachedEntries = body.plugins;
+      const plugins = body.plugins.map(toRegistryPlugin).filter((entry) => entry !== null);
       this.#cachedPlugins = plugins;
       return plugins;
     }));
   }
-  listVersions(repo) {
-    const plugin = this.#cachedPlugins.find((candidate) => candidate.repo === repo);
-    if (!plugin) {
-      return Effect.fail(new Error(`Plugin not found in catalog: ${repo}`));
+  listVersions(id) {
+    const entry = this.#cachedEntries.find((candidate) => candidate.profile.key === id);
+    if (!entry) {
+      return Effect.fail(new Error(`Plugin not found in catalog: ${id}`));
     }
-    const version = {
-      tag: plugin.version,
-      moduleUrl: plugin.moduleUrl
-    };
-    return Effect.succeed([
-      version
-    ]);
+    return Effect.succeed(entry.releases);
   }
-  getPlugin(repo, version) {
-    const plugin = this.#cachedPlugins.find((p) => p.repo === repo);
+  getPlugin(id, version) {
+    const plugin = this.#cachedPlugins.find((candidate) => candidate.profile.key === id);
     if (!plugin) {
-      return Effect.fail(new Error(`Plugin not found in catalog: ${repo}`));
+      return Effect.fail(new Error(`Plugin not found in catalog: ${id}`));
     }
-    if (version && version !== plugin.version) {
-      return Effect.fail(new Error(`Version ${version} not available for ${repo}; only ${plugin.version} is cached`));
+    if (version && version !== plugin.release?.version) {
+      return Effect.fail(new Error(`Version ${version} not available for ${id}; only ${plugin.release?.version} is cached`));
     }
     return Effect.succeed(plugin);
   }
@@ -67,4 +59,4 @@ var EdgeRegistryPluginProvider = class {
 export {
   EdgeRegistryPluginProvider
 };
-//# sourceMappingURL=chunk-WK7OIQKI.mjs.map
+//# sourceMappingURL=chunk-VCPGX7WN.mjs.map

package/dist/lib/node-esm/chunk-VCPGX7WN.mjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/core/edge-registry-plugin-provider.ts"],
+  "sourcesContent": ["//\n// Copyright 2026 DXOS.org\n//\n\nimport * as Effect from 'effect/Effect';\n\nimport { Context } from '@dxos/context';\nimport { type EdgeHttpClient } from '@dxos/edge-client';\nimport { type PluginView } from '@dxos/protocols';\n\nimport type * as Plugin from './plugin';\nimport * as Registry from './registry';\n\n/**\n * Maps a wire-format `PluginView` (from `@dxos/protocols`) to a runtime `Plugin.Meta`: the nested\n * `profile` (the view's profile plus the resolved provenance `author`) and the latest `release`.\n *\n * This is the one translation seam between the nested wire view and the resolved runtime manifest.\n * `profile.key` is the composer plugin id — a valid NSID — so `DXN.make(profile.key, release.version)`\n * reconstructs the canonical plugin DXN.\n */\nconst toRegistryPlugin = (entry: PluginView): Plugin.Meta | null => {\n  if (!entry.releases?.length) {\n    return null;\n  }\n  const latestRelease = entry.releases.find((release) => release.version === entry.latestVersion) ?? entry.releases[0];\n  return {\n    profile: {\n      ...entry.profile,\n      // Provenance: the verified publisher is the author (handle preferred, DID fallback).\n      author: entry.handle ?? entry.did,\n    },\n    release: latestRelease,\n  };\n};\n\n/**\n * Implements `Registry.PluginProvider` against the Edge `/registry` HTTP endpoints.\n *\n * Lives in app-framework (rather than the more obvious home of `@dxos/edge-client`)\n * because edge-client doesn't depend on app-framework; siting the implementation\n * here keeps the dependency arrow `app-framework → edge-client` and avoids a\n * cycle. The class needs only the public `EdgeHttpClient` type, so a one-way\n * type-import is enough.\n *\n * `listVersions` is served directly from the `releases` array inlined on each\n * entry — no separate endpoint is needed.\n */\nexport class EdgeRegistryPluginProvider implements Registry.PluginProvider {\n  // Cached on first load so getPlugin/listVersions can resolve without re-fetching.\n  #cachedPlugins: readonly Plugin.Meta[] = [];\n  #cachedEntries: readonly PluginView[] = [];\n\n  constructor(private readonly _client: EdgeHttpClient) {}\n\n  listPlugins(): Effect.Effect<readonly Plugin.Meta[], Error> {\n    return Effect.tryPromise({\n      try: () => this._client.getRegistryPlugins(Context.default()),\n      catch: (error) => (error instanceof Error ? error : new Error(String(error))),\n    }).pipe(\n      Effect.map((body) => {\n        this.#cachedEntries = body.plugins;\n        const plugins = body.plugins.map(toRegistryPlugin).filter((entry): entry is Plugin.Meta => entry !== null);\n        this.#cachedPlugins = plugins;\n        return plugins;\n      }),\n    );\n  }\n\n  listVersions(id: string): Effect.Effect<readonly Plugin.Release[], Error> {\n    const entry = this.#cachedEntries.find((candidate) => candidate.profile.key === id);\n    if (!entry) {\n      return Effect.fail(new Error(`Plugin not found in catalog: ${id}`));\n    }\n    // Releases are already `PluginRelease`-shaped on the wire view; serve them directly.\n    return Effect.succeed(entry.releases);\n  }\n\n  getPlugin(id: string, version?: string): Effect.Effect<Plugin.Meta, Error> {\n    const plugin = this.#cachedPlugins.find((candidate) => candidate.profile.key === id);\n    if (!plugin) {\n      return Effect.fail(new Error(`Plugin not found in catalog: ${id}`));\n    }\n    if (version && version !== plugin.release?.version) {\n      return Effect.fail(\n        new Error(`Version ${version} not available for ${id}; only ${plugin.release?.version} is cached`),\n      );\n    }\n    return Effect.succeed(plugin);\n  }\n}\n"],
+  "mappings": ";;;AAIA,YAAYA,YAAY;AAExB,SAASC,eAAe;AAOxB,IAAA,eAAA;IAUI,mBAAO,CAAA,UAAA;AACT,MAAA,CAAA,MAAA,UAAA,QAAA;AACA,WAAMC;EACN;QACEC,gBAAS,MAAA,SAAA,KAAA,CAAA,YAAA,QAAA,YAAA,MAAA,aAAA,KAAA,MAAA,SAAA,CAAA;;aAEP;MACAC,GAAAA,MAAQC;;MAEVC,QAASJ,MAAAA,UAAAA,MAAAA;IACX;IACF,SAAA;EAEA;;AAaE,IAAA,6BAAA,MAAA;EACA;;EAGA,iBAA6BK,CAAAA;mBAAAA,CAAAA;EAA0B,YAAA,SAAA;AAEvDC,SAAAA,UAA4D;;gBAEnD;WACGC,kBAAWA;MAClBC,KACDV,MAAAA,KAAU,QAAEW,mBAAAA,QAAAA,QAAAA,QAAAA,EAAAA,YAAAA,YAAAA,GAAAA,cAAAA,GAAAA,GAAAA,CAAAA,CAAAA;MACV,OAAK,CAAA,UAAA,iBAAsBC,QAAO,QAAA,IAAA,MAAA,OAAA,KAAA,CAAA;YAC5BA,WAAAA,CAAUD,SAAKC;AACrB,WAAK,iBAAiBA,KAAAA;AACtB,YAAA,UAAOA,KAAAA,QAAAA,IAAAA,gBAAAA,EAAAA,OAAAA,CAAAA,UAAAA,UAAAA,IAAAA;AACT,WAAA,iBAAA;AAEJ,aAAA;IAEAC,CAAAA,CAAAA;;eAEOR,IAAO;UACV,QAAOL,KAAOc,eAAgB,KAAA,CAAA,cAAA,UAAA,QAAmC,QAAA,EAAA;AACnE,QAAA,CAAA,OAAA;AACA,aAAA,YAAA,IAAA,MAAA,gCAAA,EAAA,EAAA,CAAA;IACA;AAGFC,WAAsBC,eAAqD,MAAA,QAAA;;YAEpEC,IAAAA,SAAQ;UACX,SAAOjB,KAAOc,eAAgB,KAAA,CAAA,cAAA,UAA6B,QAAM,QAAA,EAAA;AACnE,QAAA,CAAA,QAAA;AACIE,aAAWA,YAAAA,IAAYC,MAAAA,gCAAyB,EAAA,EAAA,CAAA;;AAIpD,QAAA,WAAA,YAAA,OAAA,SAAA,SAAA;AACA,aAAcC,YAAQD,IAAAA,MAAAA,WAAAA,OAAAA,sBAAAA,EAAAA,UAAAA,OAAAA,SAAAA,OAAAA,YAAAA,CAAAA;IACxB;AACF,WAAA,eAAA,MAAA;;;",
+  "names": ["Effect", "Context", "latestRelease", "profile", "author", "entry", "release", "_client", "listPlugins", "error", "pipe", "body", "plugins", "listVersions", "fail", "getPlugin", "version", "plugin", "succeed"]
+}

package/dist/lib/node-esm/{chunk-XIGPWXCQ.mjs → chunk-WERVO5EK.mjs}

@@ -1,7 +1,7 @@
 import { createRequire } from 'node:module';const require = createRequire(import.meta.url);
 import {
   getModuleTag
-} from "./chunk-CTKEZHKF.mjs";
+} from "./chunk-AIDZMJ3U.mjs";
 import {
   __export
 } from "./chunk-HSLMI22Q.mjs";
@@ -10,13 +10,18 @@ import {
 var plugin_exports = {};
 __export(plugin_exports, {
   LazyPluginError: () => LazyPluginError,
+  Meta: () => Meta,
   PluginDependencyError: () => PluginDependencyError,
   PluginModuleTypeId: () => PluginModuleTypeId,
   PluginTypeId: () => PluginTypeId,
+  Profile: () => Profile,
+  Release: () => Release,
   Service: () => Service,
   activate: () => activate,
   addModule: () => addModule,
   define: () => define,
+  getMetaFromConfig: () => getMetaFromConfig,
+  getURI: () => getURI,
   isLazy: () => isLazy,
   isPlugin: () => isPlugin,
   isPluginModule: () => isPluginModule,
@@ -31,9 +36,11 @@ import * as Context from "effect/Context";
 import * as Effect from "effect/Effect";
 import * as Option from "effect/Option";
 import * as Pipeable from "effect/Pipeable";
+import * as Schema from "effect/Schema";
 import { BaseError } from "@dxos/errors";
 import { invariant } from "@dxos/invariant";
 import { DXN } from "@dxos/keys";
+import { PluginProfileSchema, PluginReleaseSchema } from "@dxos/protocols";
 var __dxlog_file = "/__w/dxos/dxos/packages/sdk/app-framework/src/core/plugin.ts";
 var Service = class extends Context.Tag("@dxos/app-framework/PluginManager")() {
 };
@@ -62,11 +69,32 @@ var PluginModuleImpl = class {
     this.activate = options.activate;
   }
 };
-var makeMeta = (options) => ({
-  ...options,
-  id: DXN.getName(options.key),
-  version: DXN.getVersion(options.key)
+var Profile = Schema.Struct({
+  ...PluginProfileSchema.fields,
+  author: Schema.optional(Schema.String)
 });
+var Release = PluginReleaseSchema;
+var Meta = Schema.Struct({
+  profile: Profile,
+  release: Schema.optional(Release)
+});
+var makeMeta = (options) => {
+  const { key, ...rest } = options;
+  return {
+    profile: {
+      ...rest,
+      key: DXN.getName(key)
+    }
+  };
+};
+var getURI = (meta) => DXN.make(meta.profile.key, meta.release?.version);
+var getMetaFromConfig = ({ plugin }) => {
+  const { key, ...rest } = plugin;
+  return makeMeta({
+    key: DXN.make(key),
+    ...rest
+  });
+};
 var PluginTypeId = /* @__PURE__ */ Symbol.for("@dxos/app-framework/Plugin");
 var isPlugin = (value) => {
   return typeof value === "object" && value !== null && PluginTypeId in value;
@@ -113,11 +141,11 @@ function addModule(moduleOptionsOrBuilder, moduleOptions) {
 }
 var resolveModule = (meta, module, options) => {
   const moduleOptions = typeof module === "function" ? module(options) : module;
-  const pluginName = meta.id;
+  const pluginName = meta.profile.key;
   const id = Option.fromNullable(moduleOptions.id).pipe(Option.match({
     onNone: () => {
       const exportName = getModuleTag(moduleOptions.activate);
-      invariant(exportName, `Plugin module missing name. Plugin: ${meta.id}`, { "~LogMeta": "~LogMeta", F: __dxlog_file, L: 148, S: void 0, A: ["exportName", "`Plugin module missing name. Plugin: ${meta.id}`"] });
+      invariant(exportName, `Plugin module missing name. Plugin: ${meta.profile.key}`, { "~LogMeta": "~LogMeta", F: __dxlog_file, L: 174, S: void 0, A: ["exportName", "`Plugin module missing name. Plugin: ${meta.profile.key}`"] });
       return computeModuleId(pluginName, exportName);
     },
     onSome: (id2) => computeModuleId(pluginName, id2)
@@ -129,7 +157,7 @@ var resolveModule = (meta, module, options) => {
 };
 function make(builder) {
   const meta = builder.meta;
-  invariant(!meta.dependsOn?.includes(meta.id), `Plugin ${meta.id} declares itself as a dependency.`, { "~LogMeta": "~LogMeta", F: __dxlog_file, L: 161, S: this, A: ["!meta.dependsOn?.includes(meta.id)", "`Plugin ${meta.id} declares itself as a dependency.`"] });
+  invariant(!meta.profile.dependsOn?.includes(meta.profile.key), `Plugin ${meta.profile.key} declares itself as a dependency.`, { "~LogMeta": "~LogMeta", F: __dxlog_file, L: 187, S: this, A: ["!meta.profile.dependsOn?.includes(meta.profile.key)", "`Plugin ${meta.profile.key} declares itself as a dependency.`"] });
   const factory = (options) => {
     const modules = builder.modules.map((module) => resolveModule(meta, module, options));
     return new PluginImpl(meta, modules);
@@ -164,7 +192,7 @@ var resolveLazy = (plugin) => Effect.gen(function* () {
   if (!isLazy(plugin)) {
     return plugin;
   }
-  const id = plugin.meta.id;
+  const id = plugin.meta.profile.key;
   const { loader, options } = plugin[LazyTag];
   const mod = yield* Effect.tryPromise({
     try: loader,
@@ -193,12 +221,12 @@ var resolveLazy = (plugin) => Effect.gen(function* () {
       }
     }));
   }
-  if (result.meta.id !== id) {
+  if (result.meta.profile.key !== id) {
     return yield* Effect.fail(new LazyPluginError({
       context: {
         id,
         reason: "meta-mismatch",
-        returnedId: result.meta.id
+        returnedId: result.meta.profile.key
       }
     }));
   }
@@ -212,7 +240,12 @@ export {
   shutdown,
   PluginModuleTypeId,
   isPluginModule,
+  Profile,
+  Release,
+  Meta,
   makeMeta,
+  getURI,
+  getMetaFromConfig,
   PluginTypeId,
   isPlugin,
   define,
@@ -225,4 +258,4 @@ export {
   resolveLazy,
   plugin_exports
 };
-//# sourceMappingURL=chunk-XIGPWXCQ.mjs.map
+//# sourceMappingURL=chunk-WERVO5EK.mjs.map