@dxos/protocols 0.8.4-staging.ac66bdf99f → 0.9.1-main.c7dcc2e112

package/dist/src/edge/registry.d.ts

@@ -1,127 +1,299 @@
 import * as Schema from 'effect/Schema';
 /**
- * Hydrated plugin metadata, mirroring the @dxos/app-framework `Plugin.Meta` shape.
+ * A snapshot of a plugin's declared dependencies resolved to concrete installed versions at build
+ * time (`{ "@dxos/app-framework": "0.8.3", "react": "19.2.0", … }`). The host derives SDK
+ * compatibility from the subset it shares with the plugin (the externalized `@dxos/*` packages).
+ */
+export declare const DependencyMapSchema: Schema.Record$<typeof Schema.String, typeof Schema.String>;
+export type DependencyMap = Schema.Schema.Type<typeof DependencyMapSchema>;
+/**
+ * Filename of the entry module every plugin must publish at the root of its bundle.
+ * The host dynamic-imports `<manifest URL base>/index.mjs` directly — no per-plugin
+ * configuration. `composerPlugin` outputs the bundle under this name so plugin authors
+ * never have to think about it.
+ */
+export declare const PLUGIN_ENTRY_FILENAME = "index.mjs";
+/**
+ * Shape of the manifest-asset JSON the registry service fetches from each plugin's latest release.
  *
- * Defined locally rather than imported from @dxos/app-framework to keep the protocols
- * package free of UI/runtime dependencies. Consumers can treat decoded values as
- * `Plugin.Meta` directly.
+ * Emitted by `@dxos/app-framework/vite-plugin`'s `composerPlugin` (see
+ * `MANIFEST_ASSET_NAME`). Lists every file the plugin needs at runtime — the entry
+ * module ({@link PLUGIN_ENTRY_FILENAME}) plus any sibling CSS, code-split chunks,
+ * fonts, etc. — so the host can eagerly precache the whole bundle for offline use.
+ * Paths in `assets` are relative to the manifest's URL.
  */
-export declare const PluginMetaSchema: Schema.Struct<{
-    id: Schema.filter<typeof Schema.String>;
+export declare const PluginManifestSchema: Schema.Struct<{
+    key: Schema.filter<typeof Schema.String>;
     name: Schema.filter<typeof Schema.String>;
     description: Schema.optional<typeof Schema.String>;
+    author: Schema.optional<typeof Schema.String>;
     homePage: Schema.optional<typeof Schema.String>;
     source: Schema.optional<typeof Schema.String>;
-    screenshots: Schema.optional<Schema.Array$<typeof Schema.String>>;
+    screenshots: Schema.optional<Schema.Array$<Schema.Struct<{
+        light: Schema.optional<typeof Schema.String>;
+        dark: Schema.optional<typeof Schema.String>;
+    }>>>;
     tags: Schema.optional<Schema.Array$<typeof Schema.String>>;
-    icon: Schema.optional<typeof Schema.String>;
-    iconHue: Schema.optional<typeof Schema.String>;
+    icon: Schema.optional<Schema.Struct<{
+        key: Schema.filter<typeof Schema.String>;
+        hue: Schema.optional<typeof Schema.String>;
+    }>>;
+    spec: Schema.optional<typeof Schema.String>;
+    dependsOn: Schema.optional<Schema.Array$<typeof Schema.String>>;
+    /** Plugin version (semver). Sourced from the publishing project's `package.json`. */
+    version: Schema.filter<typeof Schema.String>;
+    /**
+     * Relative paths of every file the plugin needs at runtime, including the entry.
+     * Must include {@link PLUGIN_ENTRY_FILENAME}; consumers verify on parse.
+     */
+    assets: Schema.filter<Schema.Array$<typeof Schema.String>>;
+    /** Declared dependencies resolved to installed versions at build time (SDK-compat source). */
+    dependencies: Schema.optional<Schema.Record$<typeof Schema.String, typeof Schema.String>>;
 }>;
-export type PluginMeta = Schema.Schema.Type<typeof PluginMetaSchema>;
+export type PluginManifest = Schema.Schema.Type<typeof PluginManifestSchema>;
 /**
- * Health signal the registry service attaches to a hydrated entry when a refresh fails.
- * Clients surface the appropriate badge or filter entries based on this field.
+ * A single installable release of a plugin, projected from a `package.release`
+ * ATProto record.
  */
-export declare const PluginHealthSchema: Schema.Literal<["ok", "release-missing", "manifest-invalid", "repo-unavailable"]>;
-export type PluginHealth = Schema.Schema.Type<typeof PluginHealthSchema>;
+export declare const PluginReleaseSchema: Schema.Struct<{
+    /** Semver version string, e.g. `0.8.3`. */
+    version: Schema.filter<typeof Schema.String>;
+    /** URL the host dynamic-imports to install this specific version. */
+    moduleUrl: Schema.filter<typeof Schema.String>;
+    /**
+     * Dependencies this release was built against, resolved to installed versions. The host derives
+     * SDK compatibility from the `@dxos/*` subset to decide whether to offer this release.
+     */
+    dependencies: Schema.optional<Schema.Record$<typeof Schema.String, typeof Schema.String>>;
+}>;
+export type PluginRelease = Schema.Schema.Type<typeof PluginReleaseSchema>;
 /**
- * Shape of the manifest-asset JSON the registry service fetches from each plugin's latest release.
- * Extends {@link PluginMetaSchema} with an optional override for the module bundle filename
- * (defaults to `plugin.mjs`).
+ * Verbatim content of a `package.profile` ATProto record. `key` is the record's rkey (a reverse-domain
+ * NSID), denormalized into the body. Version-independent identity + display metadata; provenance
+ * (`author`) is resolved separately from the publisher DID/handle.
  */
-export declare const PluginManifestSchema: Schema.Struct<{
-    moduleFile: Schema.optional<typeof Schema.String>;
-    id: Schema.filter<typeof Schema.String>;
+export declare const PluginProfileSchema: Schema.Struct<{
+    /** Reverse-domain NSID — the plugin's globally-unique key and the `package.profile` rkey (e.g. `org.dxos.plugin.excalidraw`). */
+    key: Schema.filter<typeof Schema.String>;
+    /** Plugin display name. */
     name: Schema.filter<typeof Schema.String>;
+    /** Short description of plugin functionality. */
     description: Schema.optional<typeof Schema.String>;
+    /** Publisher's homepage or plugin documentation URL. */
     homePage: Schema.optional<typeof Schema.String>;
+    /** Source repository URL. */
     source: Schema.optional<typeof Schema.String>;
-    screenshots: Schema.optional<Schema.Array$<typeof Schema.String>>;
+    /** Tags to help categorize the plugin. */
     tags: Schema.optional<Schema.Array$<typeof Schema.String>>;
-    icon: Schema.optional<typeof Schema.String>;
-    iconHue: Schema.optional<typeof Schema.String>;
+    /** Preview images — theme-keyed screenshot URLs shown on the plugin's card. */
+    screenshots: Schema.optional<Schema.Array$<Schema.Struct<{
+        light: Schema.optional<typeof Schema.String>;
+        dark: Schema.optional<typeof Schema.String>;
+    }>>>;
+    /** Icon identifier resolvable by `@ch-ui/icons` (e.g. `ph--sparkle--regular`), with an optional palette hue. */
+    icon: Schema.optional<Schema.Struct<{
+        key: Schema.filter<typeof Schema.String>;
+        hue: Schema.optional<typeof Schema.String>;
+    }>>;
+    /** Composer plugin ids this plugin depends on at runtime (NSIDs). Author-declared, version-independent. */
+    dependsOn: Schema.optional<Schema.Array$<typeof Schema.String>>;
+    /** Relative path inside the package to a bundled MDL spec (consumed by plugin-code). */
+    spec: Schema.optional<typeof Schema.String>;
 }>;
-export type PluginManifest = Schema.Schema.Type<typeof PluginManifestSchema>;
+export type PluginProfile = Schema.Schema.Type<typeof PluginProfileSchema>;
 /**
- * Single hydrated plugin entry returned by the registry service.
+ * A single hydrated plugin entry returned by `GET /registry/plugins`.
+ *
+ * This is an indexer-assembled *view* — analogous to emdash's `PackageView` — projected
+ * from four ATProto record types: `package.profile`, `package.release`,
+ * `publisher.profile`, and `publisher.verification`. It is NOT a direct serialization
+ * of any single ATProto record.
+ *
+ * Design notes:
+ * - `profile.key` is required to be a valid NSID (e.g. `org.dxos.plugin.excalidraw`), making it
+ *   the single identifier for both PDS addressing and the composer runtime plugin id.
+ *   `DXN.make(profile.key, latestVersion)` reconstructs the canonical plugin DXN.
+ * - `releases` inlines all known versions, eliminating a separate versions round-trip for
+ *   the version picker. Ordered newest-first.
+ * - `latestVersion` is a convenience pointer into `releases` indicating the recommended
+ *   install target.
  */
-export declare const PluginEntrySchema: Schema.Struct<{
-    /** GitHub repository in `owner/name` form. */
-    repo: Schema.filter<typeof Schema.String>;
-    /** Plugin metadata from the repo's latest-release `manifest.json`. */
-    meta: Schema.Struct<{
-        id: Schema.filter<typeof Schema.String>;
+export declare const PluginViewSchema: Schema.Struct<{
+    /**
+     * `at://` URI of the source `package.profile` record.
+     * Globally unique and stable — never changes after the record is published.
+     */
+    uri: Schema.filter<typeof Schema.String>;
+    /** Publisher DID, e.g. `did:plc:abc…`. Cryptographic identity; never changes. */
+    did: Schema.filter<typeof Schema.String>;
+    /**
+     * Publisher AT Protocol handle at index time, e.g. `alice.bsky.social`.
+     * Display-only — handles can be reassigned; never use as a stable key.
+     */
+    handle: Schema.optional<typeof Schema.String>;
+    /** Unix ms when the indexer last assembled this entry. */
+    indexedAt: typeof Schema.Number;
+    /**
+     * Trust labels derived from curator `publisher.verification` records.
+     * An empty array means the entry has no verification signal.
+     */
+    labels: Schema.Array$<typeof Schema.String>;
+    profile: Schema.Struct<{
+        /** Reverse-domain NSID — the plugin's globally-unique key and the `package.profile` rkey (e.g. `org.dxos.plugin.excalidraw`). */
+        key: Schema.filter<typeof Schema.String>;
+        /** Plugin display name. */
         name: Schema.filter<typeof Schema.String>;
+        /** Short description of plugin functionality. */
         description: Schema.optional<typeof Schema.String>;
+        /** Publisher's homepage or plugin documentation URL. */
         homePage: Schema.optional<typeof Schema.String>;
+        /** Source repository URL. */
         source: Schema.optional<typeof Schema.String>;
-        screenshots: Schema.optional<Schema.Array$<typeof Schema.String>>;
+        /** Tags to help categorize the plugin. */
         tags: Schema.optional<Schema.Array$<typeof Schema.String>>;
-        icon: Schema.optional<typeof Schema.String>;
-        iconHue: Schema.optional<typeof Schema.String>;
+        /** Preview images — theme-keyed screenshot URLs shown on the plugin's card. */
+        screenshots: Schema.optional<Schema.Array$<Schema.Struct<{
+            light: Schema.optional<typeof Schema.String>;
+            dark: Schema.optional<typeof Schema.String>;
+        }>>>;
+        /** Icon identifier resolvable by `@ch-ui/icons` (e.g. `ph--sparkle--regular`), with an optional palette hue. */
+        icon: Schema.optional<Schema.Struct<{
+            key: Schema.filter<typeof Schema.String>;
+            hue: Schema.optional<typeof Schema.String>;
+        }>>;
+        /** Composer plugin ids this plugin depends on at runtime (NSIDs). Author-declared, version-independent. */
+        dependsOn: Schema.optional<Schema.Array$<typeof Schema.String>>;
+        /** Relative path inside the package to a bundled MDL spec (consumed by plugin-code). */
+        spec: Schema.optional<typeof Schema.String>;
     }>;
     /**
-     * URL from which Composer can dynamic-import the plugin module. The registry service is
-     * responsible for returning a URL that is CORS-safe for browser `import()` (e.g. served or
-     * proxied by the service itself); clients pass this value directly to the URL loader.
+     * All known releases for this package, ordered newest-first.
+     * Powers the version picker directly — no separate endpoint needed.
      */
-    moduleUrl: typeof Schema.String;
-    /** Release tag the entry was resolved from (e.g. `v0.1.0`). */
-    releaseTag: typeof Schema.String;
-    /** Health signal set by the service when an entry fails to refresh. */
-    health: Schema.Literal<["ok", "release-missing", "manifest-invalid", "repo-unavailable"]>;
-    /** Unix ms when this entry was last successfully hydrated. */
-    hydratedAt: typeof Schema.Number;
+    releases: Schema.Array$<Schema.Struct<{
+        /** Semver version string, e.g. `0.8.3`. */
+        version: Schema.filter<typeof Schema.String>;
+        /** URL the host dynamic-imports to install this specific version. */
+        moduleUrl: Schema.filter<typeof Schema.String>;
+        /**
+         * Dependencies this release was built against, resolved to installed versions. The host derives
+         * SDK compatibility from the `@dxos/*` subset to decide whether to offer this release.
+         */
+        dependencies: Schema.optional<Schema.Record$<typeof Schema.String, typeof Schema.String>>;
+    }>>;
+    /**
+     * The latest (recommended) release version. Always references an entry in `releases`.
+     * Used by the host to determine whether an update is available.
+     */
+    latestVersion: Schema.filter<typeof Schema.String>;
 }>;
-export type PluginEntry = Schema.Schema.Type<typeof PluginEntrySchema>;
+export type PluginView = Schema.Schema.Type<typeof PluginViewSchema>;
 /**
  * Response body of `GET /registry/plugins`.
  */
 export declare const GetPluginsResponseBodySchema: Schema.Struct<{
-    /** Wire-format schema version, pinned to 1. */
-    version: Schema.Literal<[1]>;
-    /** Hydrated entries. Order matches the order in the upstream catalog manifest. */
+    /** Wire-format schema version, pinned to 2. */
+    version: Schema.Literal<[2]>;
+    /** Hydrated entries. */
     plugins: Schema.Array$<Schema.Struct<{
-        /** GitHub repository in `owner/name` form. */
-        repo: Schema.filter<typeof Schema.String>;
-        /** Plugin metadata from the repo's latest-release `manifest.json`. */
-        meta: Schema.Struct<{
-            id: Schema.filter<typeof Schema.String>;
+        /**
+         * `at://` URI of the source `package.profile` record.
+         * Globally unique and stable — never changes after the record is published.
+         */
+        uri: Schema.filter<typeof Schema.String>;
+        /** Publisher DID, e.g. `did:plc:abc…`. Cryptographic identity; never changes. */
+        did: Schema.filter<typeof Schema.String>;
+        /**
+         * Publisher AT Protocol handle at index time, e.g. `alice.bsky.social`.
+         * Display-only — handles can be reassigned; never use as a stable key.
+         */
+        handle: Schema.optional<typeof Schema.String>;
+        /** Unix ms when the indexer last assembled this entry. */
+        indexedAt: typeof Schema.Number;
+        /**
+         * Trust labels derived from curator `publisher.verification` records.
+         * An empty array means the entry has no verification signal.
+         */
+        labels: Schema.Array$<typeof Schema.String>;
+        profile: Schema.Struct<{
+            /** Reverse-domain NSID — the plugin's globally-unique key and the `package.profile` rkey (e.g. `org.dxos.plugin.excalidraw`). */
+            key: Schema.filter<typeof Schema.String>;
+            /** Plugin display name. */
             name: Schema.filter<typeof Schema.String>;
+            /** Short description of plugin functionality. */
             description: Schema.optional<typeof Schema.String>;
+            /** Publisher's homepage or plugin documentation URL. */
             homePage: Schema.optional<typeof Schema.String>;
+            /** Source repository URL. */
             source: Schema.optional<typeof Schema.String>;
-            screenshots: Schema.optional<Schema.Array$<typeof Schema.String>>;
+            /** Tags to help categorize the plugin. */
             tags: Schema.optional<Schema.Array$<typeof Schema.String>>;
-            icon: Schema.optional<typeof Schema.String>;
-            iconHue: Schema.optional<typeof Schema.String>;
+            /** Preview images — theme-keyed screenshot URLs shown on the plugin's card. */
+            screenshots: Schema.optional<Schema.Array$<Schema.Struct<{
+                light: Schema.optional<typeof Schema.String>;
+                dark: Schema.optional<typeof Schema.String>;
+            }>>>;
+            /** Icon identifier resolvable by `@ch-ui/icons` (e.g. `ph--sparkle--regular`), with an optional palette hue. */
+            icon: Schema.optional<Schema.Struct<{
+                key: Schema.filter<typeof Schema.String>;
+                hue: Schema.optional<typeof Schema.String>;
+            }>>;
+            /** Composer plugin ids this plugin depends on at runtime (NSIDs). Author-declared, version-independent. */
+            dependsOn: Schema.optional<Schema.Array$<typeof Schema.String>>;
+            /** Relative path inside the package to a bundled MDL spec (consumed by plugin-code). */
+            spec: Schema.optional<typeof Schema.String>;
         }>;
         /**
-         * URL from which Composer can dynamic-import the plugin module. The registry service is
-         * responsible for returning a URL that is CORS-safe for browser `import()` (e.g. served or
-         * proxied by the service itself); clients pass this value directly to the URL loader.
+         * All known releases for this package, ordered newest-first.
+         * Powers the version picker directly — no separate endpoint needed.
+         */
+        releases: Schema.Array$<Schema.Struct<{
+            /** Semver version string, e.g. `0.8.3`. */
+            version: Schema.filter<typeof Schema.String>;
+            /** URL the host dynamic-imports to install this specific version. */
+            moduleUrl: Schema.filter<typeof Schema.String>;
+            /**
+             * Dependencies this release was built against, resolved to installed versions. The host derives
+             * SDK compatibility from the `@dxos/*` subset to decide whether to offer this release.
+             */
+            dependencies: Schema.optional<Schema.Record$<typeof Schema.String, typeof Schema.String>>;
+        }>>;
+        /**
+         * The latest (recommended) release version. Always references an entry in `releases`.
+         * Used by the host to determine whether an update is available.
          */
-        moduleUrl: typeof Schema.String;
-        /** Release tag the entry was resolved from (e.g. `v0.1.0`). */
-        releaseTag: typeof Schema.String;
-        /** Health signal set by the service when an entry fails to refresh. */
-        health: Schema.Literal<["ok", "release-missing", "manifest-invalid", "repo-unavailable"]>;
-        /** Unix ms when this entry was last successfully hydrated. */
-        hydratedAt: typeof Schema.Number;
+        latestVersion: Schema.filter<typeof Schema.String>;
     }>>;
-    /** Unix ms timestamp of the most recent successful refresh cycle. */
+    /** Unix ms timestamp of the most recent successful index cycle. */
     refreshedAt: typeof Schema.Number;
 }>;
 export type GetPluginsResponseBody = Schema.Schema.Type<typeof GetPluginsResponseBodySchema>;
+/** Content of a `publisher.profile` ATProto record. Display metadata for a publisher DID. */
+export declare const PublisherProfileSchema: Schema.Struct<{
+    displayName: Schema.filter<typeof Schema.String>;
+    bio: Schema.optional<typeof Schema.String>;
+    homepageUrl: Schema.optional<typeof Schema.String>;
+    contact: Schema.optional<typeof Schema.String>;
+}>;
+export type PublisherProfile = Schema.Schema.Type<typeof PublisherProfileSchema>;
 /**
- * Shape of the catalog manifest published in the upstream community-plugins repo.
- * Extra keys (e.g. `$schema`) are permitted.
+ * Content of a `publisher.verification` record written by the curator DID.
+ * Links a publisher DID to a trusted AT Protocol handle.
  */
-export declare const RegistryManifestSchema: Schema.TypeLiteral<{
-    version: Schema.Literal<[1]>;
-    plugins: Schema.Array$<Schema.Struct<{
-        repo: typeof Schema.String;
-    }>>;
-}, readonly [Schema.Record$<typeof Schema.String, typeof Schema.Unknown>]>;
-export type RegistryManifest = Schema.Schema.Type<typeof RegistryManifestSchema>;
+export declare const PublisherVerificationSchema: Schema.Struct<{
+    subject: Schema.filter<typeof Schema.String>;
+    handle: Schema.filter<typeof Schema.String>;
+    displayName: Schema.filter<typeof Schema.String>;
+    createdAt: Schema.filter<typeof Schema.String>;
+}>;
+export type PublisherVerification = Schema.Schema.Type<typeof PublisherVerificationSchema>;
+/** NSID constants for the four `org.dxos.experimental.*` record collections. */
+export declare const NSID: {
+    readonly PackageProfile: 'org.dxos.experimental.package.profile';
+    readonly PackageRelease: 'org.dxos.experimental.package.release';
+    readonly PublisherProfile: 'org.dxos.experimental.publisher.profile';
+    readonly PublisherVerification: 'org.dxos.experimental.publisher.verification';
+};
+export type RegistryNsid = (typeof NSID)[keyof typeof NSID];
+export declare const ALL_NSIDS: readonly RegistryNsid[];
 //# sourceMappingURL=registry.d.ts.map

package/dist/src/edge/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/edge/registry.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;EAU3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAErE;;;GAGG;AACH,eAAO,MAAM,kBAAkB,mFAAkF,CAAC;AAClH,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEzE;;;;GAIG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;EAG/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAE7E;;GAEG;AACH,eAAO,MAAM,iBAAiB;IAC5B,8CAA8C;;IAE9C,sEAAsE;;;;;;;;;;;;IAEtE;;;;OAIG;;IAEH,+DAA+D;;IAE/D,uEAAuE;;IAEvE,8DAA8D;;EAE9D,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAEvE;;GAEG;AACH,eAAO,MAAM,4BAA4B;IACvC,+CAA+C;;IAE/C,kFAAkF;;QAzBlF,8CAA8C;;QAE9C,sEAAsE;;;;;;;;;;;;QAEtE;;;;WAIG;;QAEH,+DAA+D;;QAE/D,uEAAuE;;QAEvE,8DAA8D;;;IAa9D,qEAAqE;;EAErE,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAE7F;;;GAGG;AACH,eAAO,MAAM,sBAAsB;;;;;0EAUlC,CAAC;AACF,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,sBAAsB,CAAC,CAAC"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/edge/registry.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAIxC;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,4DAA8D,CAAC;AAC/F,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAE3E;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,cAAc,CAAC;AAEjD;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;IAE/B,qFAAqF;;IAErF;;;OAGG;;IAEH,8FAA8F;;EAE9F,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAI7E;;;GAGG;AACH,eAAO,MAAM,mBAAmB;IAC9B,2CAA2C;;IAE3C,qEAAqE;;IAErE;;;OAGG;;EAEH,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAE3E;;;;GAIG;AACH,eAAO,MAAM,mBAAmB;IAC9B,iIAAiI;;IAEjI,2BAA2B;;IAE3B,iDAAiD;;IAEjD,wDAAwD;;IAExD,6BAA6B;;IAE7B,0CAA0C;;IAE1C,+EAA+E;;;;;IAE/E,gHAAgH;;;;;IAEhH,2GAA2G;;IAE3G,wFAAwF;;EAExF,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAE3E;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,gBAAgB;IAE3B;;;OAGG;;IAEH,iFAAiF;;IAEjF;;;OAGG;;IAEH,0DAA0D;;IAE1D;;;OAGG;;;QA3DH,iIAAiI;;QAEjI,2BAA2B;;QAE3B,iDAAiD;;QAEjD,wDAAwD;;QAExD,6BAA6B;;QAE7B,0CAA0C;;QAE1C,+EAA+E;;;;;QAE/E,gHAAgH;;;;;QAEhH,2GAA2G;;QAE3G,wFAAwF;;;IAgDxF;;;OAGG;;QAvFH,2CAA2C;;QAE3C,qEAAqE;;QAErE;;;WAGG;;;IAkFH;;;OAGG;;EAEH,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAErE;;GAEG;AACH,eAAO,MAAM,4BAA4B;IACvC,+CAA+C;;IAE/C,wBAAwB;;QA3CxB;;;WAGG;;QAEH,iFAAiF;;QAEjF;;;WAGG;;QAEH,0DAA0D;;QAE1D;;;WAGG;;;YA3DH,iIAAiI;;YAEjI,2BAA2B;;YAE3B,iDAAiD;;YAEjD,wDAAwD;;YAExD,6BAA6B;;YAE7B,0CAA0C;;YAE1C,+EAA+E;;;;;YAE/E,gHAAgH;;;;;YAEhH,2GAA2G;;YAE3G,wFAAwF;;;QAgDxF;;;WAGG;;YAvFH,2CAA2C;;YAE3C,qEAAqE;;YAErE;;;eAGG;;;QAkFH;;;WAGG;;;IAaH,mEAAmE;;EAEnE,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAI7F,6FAA6F;AAC7F,eAAO,MAAM,sBAAsB;;;;;EAKjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEjF;;;GAGG;AACH,eAAO,MAAM,2BAA2B;;;;;EAKtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAI3F,gFAAgF;AAChF,eAAO,MAAM,IAAI;aACf,cAAc,EAAE,uCAAuC;aACvD,cAAc,EAAE,uCAAuC;aACvD,gBAAgB,EAAE,yCAAyC;aAC3D,qBAAqB,EAAE,8CAA8C;CAC7D,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,OAAO,IAAI,CAAC,CAAC;AAE5D,eAAO,MAAM,SAAS,EAAE,SAAS,YAAY,EAK5C,CAAC"}

package/dist/src/edge/registry.js

@@ -2,78 +2,177 @@
 // Copyright 2026 DXOS.org
 //
 import * as Schema from 'effect/Schema';
+import * as Config2 from '../Config2.js';
 /**
- * Hydrated plugin metadata, mirroring the @dxos/app-framework `Plugin.Meta` shape.
- *
- * Defined locally rather than imported from @dxos/app-framework to keep the protocols
- * package free of UI/runtime dependencies. Consumers can treat decoded values as
- * `Plugin.Meta` directly.
+ * A snapshot of a plugin's declared dependencies resolved to concrete installed versions at build
+ * time (`{ "@dxos/app-framework": "0.8.3", "react": "19.2.0", … }`). The host derives SDK
+ * compatibility from the subset it shares with the plugin (the externalized `@dxos/*` packages).
  */
-export const PluginMetaSchema = Schema.Struct({
-    id: Schema.String.pipe(Schema.nonEmptyString()),
-    name: Schema.String.pipe(Schema.nonEmptyString()),
-    description: Schema.optional(Schema.String),
-    homePage: Schema.optional(Schema.String),
-    source: Schema.optional(Schema.String),
-    screenshots: Schema.optional(Schema.Array(Schema.String)),
-    tags: Schema.optional(Schema.Array(Schema.String)),
-    icon: Schema.optional(Schema.String),
-    iconHue: Schema.optional(Schema.String),
-});
+export const DependencyMapSchema = Schema.Record({ key: Schema.String, value: Schema.String });
 /**
- * Health signal the registry service attaches to a hydrated entry when a refresh fails.
- * Clients surface the appropriate badge or filter entries based on this field.
+ * Filename of the entry module every plugin must publish at the root of its bundle.
+ * The host dynamic-imports `<manifest URL base>/index.mjs` directly — no per-plugin
+ * configuration. `composerPlugin` outputs the bundle under this name so plugin authors
+ * never have to think about it.
  */
-export const PluginHealthSchema = Schema.Literal('ok', 'release-missing', 'manifest-invalid', 'repo-unavailable');
+export const PLUGIN_ENTRY_FILENAME = 'index.mjs';
 /**
  * Shape of the manifest-asset JSON the registry service fetches from each plugin's latest release.
- * Extends {@link PluginMetaSchema} with an optional override for the module bundle filename
- * (defaults to `plugin.mjs`).
+ *
+ * Emitted by `@dxos/app-framework/vite-plugin`'s `composerPlugin` (see
+ * `MANIFEST_ASSET_NAME`). Lists every file the plugin needs at runtime — the entry
+ * module ({@link PLUGIN_ENTRY_FILENAME}) plus any sibling CSS, code-split chunks,
+ * fonts, etc. — so the host can eagerly precache the whole bundle for offline use.
+ * Paths in `assets` are relative to the manifest's URL.
  */
 export const PluginManifestSchema = Schema.Struct({
-    ...PluginMetaSchema.fields,
-    moduleFile: Schema.optional(Schema.String),
+    ...Config2.Plugin.fields,
+    /** Plugin version (semver). Sourced from the publishing project's `package.json`. */
+    version: Schema.String.pipe(Schema.nonEmptyString()),
+    /**
+     * Relative paths of every file the plugin needs at runtime, including the entry.
+     * Must include {@link PLUGIN_ENTRY_FILENAME}; consumers verify on parse.
+     */
+    assets: Schema.Array(Schema.String).pipe(Schema.minItems(1)),
+    /** Declared dependencies resolved to installed versions at build time (SDK-compat source). */
+    dependencies: Schema.optional(DependencyMapSchema),
 });
+// ─── ATProto-native registry view ────────────────────────────────────────────
 /**
- * Single hydrated plugin entry returned by the registry service.
+ * A single installable release of a plugin, projected from a `package.release`
+ * ATProto record.
  */
-export const PluginEntrySchema = Schema.Struct({
-    /** GitHub repository in `owner/name` form. */
-    repo: Schema.String.pipe(Schema.nonEmptyString()),
-    /** Plugin metadata from the repo's latest-release `manifest.json`. */
-    meta: PluginMetaSchema,
+export const PluginReleaseSchema = Schema.Struct({
+    /** Semver version string, e.g. `0.8.3`. */
+    version: Schema.String.pipe(Schema.nonEmptyString()),
+    /** URL the host dynamic-imports to install this specific version. */
+    moduleUrl: Schema.String.pipe(Schema.nonEmptyString()),
     /**
-     * URL from which Composer can dynamic-import the plugin module. The registry service is
-     * responsible for returning a URL that is CORS-safe for browser `import()` (e.g. served or
-     * proxied by the service itself); clients pass this value directly to the URL loader.
+     * Dependencies this release was built against, resolved to installed versions. The host derives
+     * SDK compatibility from the `@dxos/*` subset to decide whether to offer this release.
      */
-    moduleUrl: Schema.String,
-    /** Release tag the entry was resolved from (e.g. `v0.1.0`). */
-    releaseTag: Schema.String,
-    /** Health signal set by the service when an entry fails to refresh. */
-    health: PluginHealthSchema,
-    /** Unix ms when this entry was last successfully hydrated. */
-    hydratedAt: Schema.Number,
+    dependencies: Schema.optional(DependencyMapSchema),
+});
+/**
+ * Verbatim content of a `package.profile` ATProto record. `key` is the record's rkey (a reverse-domain
+ * NSID), denormalized into the body. Version-independent identity + display metadata; provenance
+ * (`author`) is resolved separately from the publisher DID/handle.
+ */
+export const PluginProfileSchema = Schema.Struct({
+    /** Reverse-domain NSID — the plugin's globally-unique key and the `package.profile` rkey (e.g. `org.dxos.plugin.excalidraw`). */
+    key: Schema.String.pipe(Schema.nonEmptyString()),
+    /** Plugin display name. */
+    name: Schema.String.pipe(Schema.nonEmptyString()),
+    /** Short description of plugin functionality. */
+    description: Schema.optional(Schema.String),
+    /** Publisher's homepage or plugin documentation URL. */
+    homePage: Schema.optional(Schema.String),
+    /** Source repository URL. */
+    source: Schema.optional(Schema.String),
+    /** Tags to help categorize the plugin. */
+    tags: Schema.optional(Schema.Array(Schema.String)),
+    /** Preview images — theme-keyed screenshot URLs shown on the plugin's card. */
+    screenshots: Schema.optional(Schema.Array(Config2.Screenshot)),
+    /** Icon identifier resolvable by `@ch-ui/icons` (e.g. `ph--sparkle--regular`), with an optional palette hue. */
+    icon: Schema.optional(Config2.Icon),
+    /** Composer plugin ids this plugin depends on at runtime (NSIDs). Author-declared, version-independent. */
+    dependsOn: Schema.optional(Schema.Array(Schema.String)),
+    /** Relative path inside the package to a bundled MDL spec (consumed by plugin-code). */
+    spec: Schema.optional(Schema.String),
+});
+/**
+ * A single hydrated plugin entry returned by `GET /registry/plugins`.
+ *
+ * This is an indexer-assembled *view* — analogous to emdash's `PackageView` — projected
+ * from four ATProto record types: `package.profile`, `package.release`,
+ * `publisher.profile`, and `publisher.verification`. It is NOT a direct serialization
+ * of any single ATProto record.
+ *
+ * Design notes:
+ * - `profile.key` is required to be a valid NSID (e.g. `org.dxos.plugin.excalidraw`), making it
+ *   the single identifier for both PDS addressing and the composer runtime plugin id.
+ *   `DXN.make(profile.key, latestVersion)` reconstructs the canonical plugin DXN.
+ * - `releases` inlines all known versions, eliminating a separate versions round-trip for
+ *   the version picker. Ordered newest-first.
+ * - `latestVersion` is a convenience pointer into `releases` indicating the recommended
+ *   install target.
+ */
+export const PluginViewSchema = Schema.Struct({
+    // ── Addressing / provenance (indexer-derived) ────────────────────────────
+    /**
+     * `at://` URI of the source `package.profile` record.
+     * Globally unique and stable — never changes after the record is published.
+     */
+    uri: Schema.String.pipe(Schema.nonEmptyString()),
+    /** Publisher DID, e.g. `did:plc:abc…`. Cryptographic identity; never changes. */
+    did: Schema.String.pipe(Schema.nonEmptyString()),
+    /**
+     * Publisher AT Protocol handle at index time, e.g. `alice.bsky.social`.
+     * Display-only — handles can be reassigned; never use as a stable key.
+     */
+    handle: Schema.optional(Schema.String),
+    /** Unix ms when the indexer last assembled this entry. */
+    indexedAt: Schema.Number,
+    /**
+     * Trust labels derived from curator `publisher.verification` records.
+     * An empty array means the entry has no verification signal.
+     */
+    labels: Schema.Array(Schema.String),
+    // ── Verbatim profile record content ─────────────────────────────────────
+    profile: PluginProfileSchema,
+    // ── Releases (projected from package.release records) ───────────────────
+    /**
+     * All known releases for this package, ordered newest-first.
+     * Powers the version picker directly — no separate endpoint needed.
+     */
+    releases: Schema.Array(PluginReleaseSchema),
+    /**
+     * The latest (recommended) release version. Always references an entry in `releases`.
+     * Used by the host to determine whether an update is available.
+     */
+    latestVersion: Schema.String.pipe(Schema.nonEmptyString()),
 });
 /**
  * Response body of `GET /registry/plugins`.
  */
 export const GetPluginsResponseBodySchema = Schema.Struct({
-    /** Wire-format schema version, pinned to 1. */
-    version: Schema.Literal(1),
-    /** Hydrated entries. Order matches the order in the upstream catalog manifest. */
-    plugins: Schema.Array(PluginEntrySchema),
-    /** Unix ms timestamp of the most recent successful refresh cycle. */
+    /** Wire-format schema version, pinned to 2. */
+    version: Schema.Literal(2),
+    /** Hydrated entries. */
+    plugins: Schema.Array(PluginViewSchema),
+    /** Unix ms timestamp of the most recent successful index cycle. */
     refreshedAt: Schema.Number,
 });
+// ─── Publisher records ────────────────────────────────────────────────────────
+/** Content of a `publisher.profile` ATProto record. Display metadata for a publisher DID. */
+export const PublisherProfileSchema = Schema.Struct({
+    displayName: Schema.String.pipe(Schema.nonEmptyString()),
+    bio: Schema.optional(Schema.String),
+    homepageUrl: Schema.optional(Schema.String),
+    contact: Schema.optional(Schema.String),
+});
 /**
- * Shape of the catalog manifest published in the upstream community-plugins repo.
- * Extra keys (e.g. `$schema`) are permitted.
+ * Content of a `publisher.verification` record written by the curator DID.
+ * Links a publisher DID to a trusted AT Protocol handle.
  */
-export const RegistryManifestSchema = Schema.Struct({
-    version: Schema.Literal(1),
-    plugins: Schema.Array(Schema.Struct({
-        repo: Schema.String,
-    })),
-}, Schema.Record({ key: Schema.String, value: Schema.Unknown }));
+export const PublisherVerificationSchema = Schema.Struct({
+    subject: Schema.String.pipe(Schema.nonEmptyString()),
+    handle: Schema.String.pipe(Schema.nonEmptyString()),
+    displayName: Schema.String.pipe(Schema.nonEmptyString()),
+    createdAt: Schema.String.pipe(Schema.nonEmptyString()),
+});
+// ─── NSID constants ───────────────────────────────────────────────────────────
+/** NSID constants for the four `org.dxos.experimental.*` record collections. */
+export const NSID = {
+    PackageProfile: 'org.dxos.experimental.package.profile',
+    PackageRelease: 'org.dxos.experimental.package.release',
+    PublisherProfile: 'org.dxos.experimental.publisher.profile',
+    PublisherVerification: 'org.dxos.experimental.publisher.verification',
+};
+export const ALL_NSIDS = [
+    NSID.PackageProfile,
+    NSID.PackageRelease,
+    NSID.PublisherProfile,
+    NSID.PublisherVerification,
+];
 //# sourceMappingURL=registry.js.map