@fluid-app/fluid-cli-portal 0.1.52 → 0.1.54

package/dist/index.d.mts

@@ -1,5 +1,6 @@
 import { Command } from "commander";
-import { CliError, FetchClient, FluidPlugin, Result } from "@fluid-app/fluid-cli";
+import { CliError, FluidPlugin, Result } from "@fluid-app/fluid-cli";
+import { Plugin } from "vite";
 
 //#region src/types.d.ts
 /**
@@ -339,6 +340,35 @@ interface GitAutoCommitOptions {
 * `node_modules/`, `dist/`, `.portal-sync/`, logs, `*.tsbuildinfo`), so
 * generated output and local secrets stay out of the commit.
 *
+* That boundary is not enough on its own for tool-local state written
+* INTO the project directory by whatever opened it — most importantly
+* Mist Desktop's `.mist-desktop/` (private chats, attachments,
+* screenshots) and the `.mist` clone marker. A `.gitignore`-only fix
+* can't reach clones that already exist, so this applies belt AND
+* suspenders, all anchored to the repository root (see
+* {@link resolveRepoRoot}):
+*
+*   1. {@link excludeLocalStateFromGit} — idempotent `.git/info/exclude`
+*      write, so `git add` never picks the paths up in the first place.
+*      Heals pre-existing clones on their next push.
+*   2. `git reset -- ':(top).mist' .mist` after staging — unstages the
+*      marker if step 1 silently failed. We deliberately do NOT pass a
+*      `:(exclude)` pathspec to `git add`: when the path is *also*
+*      listed in `.git/info/exclude`, git exits 1 with "paths are
+*      ignored by one of your .gitignore files", turning the normal
+*      (already-healed) case into a hard failure. Add-then-reset is a
+*      no-op when there's nothing staged.
+*   3. `git rm --cached -r --ignore-unmatch .mist-desktop` — untracks
+*      chat history that an older, unhardened push already committed.
+*      Ignore rules alone cannot untrack an existing path. `--cached`
+*      keeps every file on disk; only the index entry goes away. This
+*      runs even under `ignoreRemovals`, where suppressing deletions
+*      protects remote-only *portal* files — private chats are never
+*      that, and leaving them tracked would keep republishing them.
+*
+* Steps 2 and 3 are best-effort and never fail the publish; the commit
+* itself is what must succeed.
+*
 * Uses the repo's configured identity, else a synthetic Fluid bot
 * identity so the commit isn't rejected. "nothing to commit" is treated
 * as a no-op, not an error.
@@ -352,35 +382,28 @@ declare function gitAutoCommit(cwd: string, message: string, options?: GitAutoCo
 declare function gitPush(cwd: string, remoteUrl: string, branch?: string): Promise<void>;
 //#endregion
 //#region src/api/git-credential.d.ts
-/**
-* Portal git-credential adapter (the "invisible git" seam).
-*
-* Mints a short-lived (~1h) remote URL with an embedded installation
-* token for the portal's provisioned GitHub repo. The URL is used
-* immediately for one git op and discarded — NEVER persisted or logged.
-*
-* The backend endpoint (GitSync phase 006, portal adapter) mirrors the
-* widget contract exactly:
-*
-*   POST <endpoint>  ->  201 { git_credential: { remote_url, expires_at }, status, meta }
-*   errors: 409 not_provisioned/not_connected, 502 vendor_error, 422 else
-*           { error: { message, details: { type } }, status, meta }
-*
-* The exact path is still being finalized as 006 lands, so it lives in
-* one constant here. Until the endpoint ships to prod a request 404s —
-* which we surface as `unavailable` so callers degrade gracefully
-* (warn + skip the git sync, proceed with the normal content push).
-*/
-/** Minted credential — token embedded in `remote_url`. Treat as secret. */
 interface PortalGitCredential {
   readonly remote_url: string;
   readonly expires_at: string;
 }
 /**
 * Outcome of a credential request. `unavailable` means "no repo to sync"
-* (endpoint missing / not provisioned / not connected) — the caller
-* should warn and skip, never abort. `error` is an unexpected transport
-* failure the caller may log but still shouldn't hard-fail push on.
+* (endpoint missing / not provisioned / not connected). Its `retryable`
+* flag distinguishes backend states that resolve on their own from ones
+* that never will.
+*
+* Both `not_provisioned` and `not_connected` are retryable. The first
+* self-heals because the credential request itself triggers provisioning;
+* the second is the state a brand-new definition sits in for its first
+* few seconds, while the Sidekiq job that creates the GitHub repo runs.
+* (An earlier revision read `not_connected` as a durable "this company's
+* Git integration isn't connected" — that was a misdiagnosis, and it made
+* every newly created portal give up before its repo was ready.)
+*
+* `repoStatus` carries the underlying GitSync repo status when the API
+* reports one; `disconnected` is the one value a retry can never fix.
+* `conflictType` carries the raw 409 conflict type so callers can tailor
+* messaging. `error` is an unexpected transport or provider failure.
 */
 type GitCredentialOutcome = {
   readonly status: "ok";
@@ -388,6 +411,9 @@ type GitCredentialOutcome = {
 } | {
   readonly status: "unavailable";
   readonly reason: string;
+  readonly retryable: boolean;
+  readonly conflictType?: string;
+  readonly repoStatus?: string;
 } | {
   readonly status: "error";
   readonly reason: string;
@@ -406,6 +432,8 @@ interface CreatePortalGitCredentialOptions {
   readonly definitionId: number;
   /** Injectable for tests; defaults to global fetch. */
   readonly fetchImpl?: typeof fetch;
+  /** Deadline for one API request; defaults to 15 seconds. */
+  readonly requestTimeoutMs?: number;
 }
 /**
 * Request a git credential for the portal definition's provisioned repo.
@@ -458,23 +486,406 @@ declare function createPortalProject(appName: string, options: CreateOptions, co
 //#region src/commands/pull.d.ts
 declare const pullCommand: Command;
 //#endregion
-//#region src/commands/push.d.ts
-declare const pushCommand: Command;
+//#region ../../api-clients/hey-api-fetch-runtime/src/generated/core/auth.gen.d.ts
+type AuthToken = string | undefined;
+interface Auth {
+  /**
+  * Which part of the request do we use to send the auth?
+  *
+  * @default 'header'
+  */
+  in?: "header" | "query" | "cookie";
+  /**
+  * A unique identifier for the security scheme.
+  *
+  * Defined only when there are multiple security schemes whose `Auth`
+  * shape would otherwise be identical.
+  */
+  key?: string;
+  /**
+  * Header or query parameter name.
+  *
+  * @default 'Authorization'
+  */
+  name?: string;
+  scheme?: "basic" | "bearer";
+  type: "apiKey" | "http";
+}
 //#endregion
-//#region src/commands/widget-create.d.ts
-declare const widgetCommand: Command;
+//#region ../../api-clients/hey-api-fetch-runtime/src/generated/core/pathSerializer.gen.d.ts
+interface SerializerOptions<T> {
+  /**
+  * @default true
+  */
+  explode: boolean;
+  style: T;
+}
+type ArrayStyle = "form" | "spaceDelimited" | "pipeDelimited";
+type ObjectStyle = "form" | "deepObject";
 //#endregion
-//#region src/commands/widget-publish.d.ts
-declare const topLevelWidgetCommand: Command;
+//#region ../../api-clients/hey-api-fetch-runtime/src/generated/core/bodySerializer.gen.d.ts
+type QuerySerializer = (query: Record<string, unknown>) => string;
+type BodySerializer = (body: unknown) => unknown;
+type QuerySerializerOptionsObject = {
+  allowReserved?: boolean;
+  array?: Partial<SerializerOptions<ArrayStyle>>;
+  object?: Partial<SerializerOptions<ObjectStyle>>;
+};
+type QuerySerializerOptions = QuerySerializerOptionsObject & {
+  /**
+  * Per-parameter serialization overrides. When provided, these settings
+  * override the global array/object settings for specific parameter names.
+  */
+  parameters?: Record<string, QuerySerializerOptionsObject>;
+};
 //#endregion
-//#region src/commands/deploy.d.ts
-declare const deployCommand: Command;
+//#region ../../api-clients/hey-api-fetch-runtime/src/generated/core/types.gen.d.ts
+type HttpMethod = "connect" | "delete" | "get" | "head" | "options" | "patch" | "post" | "put" | "trace";
+type Client$1<RequestFn = never, Config = unknown, MethodFn = never, BuildUrlFn = never, SseFn = never> = {
+  /**
+  * Returns the final request URL.
+  */
+  buildUrl: BuildUrlFn;
+  getConfig: () => Config;
+  request: RequestFn;
+  setConfig: (config: Config) => Config;
+} & { [K in HttpMethod]: MethodFn } & ([SseFn] extends [never] ? {
+  sse?: never;
+} : {
+  sse: { [K in HttpMethod]: SseFn };
+});
+interface Config$1 {
+  /**
+  * Auth token or a function returning auth token. The resolved value will be
+  * added to the request payload as defined by its `security` array.
+  */
+  auth?: ((auth: Auth) => Promise<AuthToken> | AuthToken) | AuthToken;
+  /**
+  * A function for serializing request body parameter. By default,
+  * {@link JSON.stringify()} will be used.
+  */
+  bodySerializer?: BodySerializer | null;
+  /**
+  * An object containing any HTTP headers that you want to pre-populate your
+  * `Headers` object with.
+  *
+  * {@link https://developer.mozilla.org/docs/Web/API/Headers/Headers#init See more}
+  */
+  headers?: RequestInit["headers"] | Record<string, string | number | boolean | (string | number | boolean)[] | null | undefined | unknown>;
+  /**
+  * The request method.
+  *
+  * {@link https://developer.mozilla.org/docs/Web/API/fetch#method See more}
+  */
+  method?: Uppercase<HttpMethod>;
+  /**
+  * A function for serializing request query parameters. By default, arrays
+  * will be exploded in form style, objects will be exploded in deepObject
+  * style, and reserved characters are percent-encoded.
+  *
+  * This method will have no effect if the native `paramsSerializer()` Axios
+  * API function is used.
+  *
+  * {@link https://swagger.io/docs/specification/serialization/#query View examples}
+  */
+  querySerializer?: QuerySerializer | QuerySerializerOptions;
+  /**
+  * A function validating request data. This is useful if you want to ensure
+  * the request conforms to the desired shape, so it can be safely sent to
+  * the server.
+  */
+  requestValidator?: (data: unknown) => Promise<unknown>;
+  /**
+  * A function transforming response data before it's returned. This is useful
+  * for post-processing data, e.g., converting ISO strings into Date objects.
+  */
+  responseTransformer?: (data: unknown) => Promise<unknown>;
+  /**
+  * A function validating response data. This is useful if you want to ensure
+  * the response conforms to the desired shape, so it can be safely passed to
+  * the transformers and returned to the user.
+  */
+  responseValidator?: (data: unknown) => Promise<unknown>;
+}
 //#endregion
-//#region src/commands/version.d.ts
-declare const versionCommand: Command;
+//#region ../../api-clients/hey-api-fetch-runtime/src/generated/core/serverSentEvents.gen.d.ts
+type ServerSentEventsOptions<TData = unknown> = Omit<RequestInit, "method"> & Pick<Config$1, "method" | "responseTransformer" | "responseValidator"> & {
+  /**
+  * Fetch API implementation. You can use this option to provide a custom
+  * fetch instance.
+  *
+  * @default globalThis.fetch
+  */
+  fetch?: typeof fetch;
+  /**
+  * Implementing clients can call request interceptors inside this hook.
+  */
+  onRequest?: (url: string, init: RequestInit) => Promise<Request>;
+  /**
+  * Callback invoked when a network or parsing error occurs during streaming.
+  *
+  * This option applies only if the endpoint returns a stream of events.
+  *
+  * @param error The error that occurred.
+  */
+  onSseError?: (error: unknown) => void;
+  /**
+  * Callback invoked when an event is streamed from the server.
+  *
+  * This option applies only if the endpoint returns a stream of events.
+  *
+  * @param event Event streamed from the server.
+  * @returns Nothing (void).
+  */
+  onSseEvent?: (event: StreamEvent<TData>) => void;
+  serializedBody?: RequestInit["body"];
+  /**
+  * Default retry delay in milliseconds.
+  *
+  * This option applies only if the endpoint returns a stream of events.
+  *
+  * @default 3000
+  */
+  sseDefaultRetryDelay?: number;
+  /**
+  * Maximum number of retry attempts before giving up.
+  */
+  sseMaxRetryAttempts?: number;
+  /**
+  * Maximum retry delay in milliseconds.
+  *
+  * Applies only when exponential backoff is used.
+  *
+  * This option applies only if the endpoint returns a stream of events.
+  *
+  * @default 30000
+  */
+  sseMaxRetryDelay?: number;
+  /**
+  * Optional sleep function for retry backoff.
+  *
+  * Defaults to using `setTimeout`.
+  */
+  sseSleepFn?: (ms: number) => Promise<void>;
+  url: string;
+};
+interface StreamEvent<TData = unknown> {
+  data: TData;
+  event?: string;
+  id?: string;
+  retry?: number;
+}
+type ServerSentEventsResult<TData = unknown, TReturn = void, TNext = unknown> = {
+  stream: AsyncGenerator<TData extends Record<string, unknown> ? TData[keyof TData] : TData, TReturn, TNext>;
+};
 //#endregion
-//#region src/commands/doctor.d.ts
-declare const doctorCommand: Command;
+//#region ../../api-clients/hey-api-fetch-runtime/src/generated/client/utils.gen.d.ts
+type ErrInterceptor<Err, Res, Req, Options> = (error: Err, response: Res | undefined, request: Req | undefined, options: Options) => Err | Promise<Err>;
+type ReqInterceptor<Req, Options> = (request: Req, options: Options) => Req | Promise<Req>;
+type ResInterceptor<Res, Req, Options> = (response: Res, request: Req, options: Options) => Res | Promise<Res>;
+declare class Interceptors<Interceptor> {
+  fns: Array<Interceptor | null>;
+  clear(): void;
+  eject(id: number | Interceptor): void;
+  exists(id: number | Interceptor): boolean;
+  getInterceptorIndex(id: number | Interceptor): number;
+  update(id: number | Interceptor, fn: Interceptor): number | Interceptor | false;
+  use(fn: Interceptor): number;
+}
+interface Middleware<Req, Res, Err, Options> {
+  error: Interceptors<ErrInterceptor<Err, Res, Req, Options>>;
+  request: Interceptors<ReqInterceptor<Req, Options>>;
+  response: Interceptors<ResInterceptor<Res, Req, Options>>;
+}
+//#endregion
+//#region ../../api-clients/hey-api-fetch-runtime/src/generated/client/types.gen.d.ts
+type ResponseStyle = "data" | "fields";
+interface Config<T extends ClientOptions = ClientOptions> extends Omit<RequestInit, "body" | "headers" | "method">, Config$1 {
+  /**
+  * Base URL for all requests made by this client.
+  */
+  baseUrl?: T["baseUrl"];
+  /**
+  * Fetch API implementation. You can use this option to provide a custom
+  * fetch instance.
+  *
+  * @default globalThis.fetch
+  */
+  fetch?: typeof fetch;
+  /**
+  * Please don't use the Fetch client for Next.js applications. The `next`
+  * options won't have any effect.
+  *
+  * Install {@link https://www.npmjs.com/package/@hey-api/client-next `@hey-api/client-next`} instead.
+  */
+  next?: never;
+  /**
+  * Return the response data parsed in a specified format. By default, `auto`
+  * will infer the appropriate method from the `Content-Type` response header.
+  * You can override this behavior with any of the {@link Body} methods.
+  * Select `stream` if you don't want to parse response data at all.
+  *
+  * @default 'auto'
+  */
+  parseAs?: "arrayBuffer" | "auto" | "blob" | "formData" | "json" | "stream" | "text";
+  /**
+  * Should we return only data or multiple fields (data, error, response, etc.)?
+  *
+  * @default 'fields'
+  */
+  responseStyle?: ResponseStyle;
+  /**
+  * Throw an error instead of returning it in the response?
+  *
+  * @default false
+  */
+  throwOnError?: T["throwOnError"];
+}
+interface RequestOptions<TData = unknown, TResponseStyle extends ResponseStyle = "fields", ThrowOnError extends boolean = boolean, Url extends string = string> extends Config<{
+  responseStyle: TResponseStyle;
+  throwOnError: ThrowOnError;
+}>, Pick<ServerSentEventsOptions<TData>, "onRequest" | "onSseError" | "onSseEvent" | "sseDefaultRetryDelay" | "sseMaxRetryAttempts" | "sseMaxRetryDelay"> {
+  /**
+  * Any body that you want to add to your request.
+  *
+  * {@link https://developer.mozilla.org/docs/Web/API/fetch#body}
+  */
+  body?: unknown;
+  path?: Record<string, unknown>;
+  query?: Record<string, unknown>;
+  /**
+  * Security mechanism(s) to use for the request.
+  */
+  security?: ReadonlyArray<Auth>;
+  url: Url;
+}
+interface ResolvedRequestOptions<TResponseStyle extends ResponseStyle = "fields", ThrowOnError extends boolean = boolean, Url extends string = string> extends RequestOptions<unknown, TResponseStyle, ThrowOnError, Url> {
+  headers: Headers;
+  serializedBody?: string;
+}
+type RequestResult<TData = unknown, TError = unknown, ThrowOnError extends boolean = boolean, TResponseStyle extends ResponseStyle = "fields"> = ThrowOnError extends true ? Promise<TResponseStyle extends "data" ? TData extends Record<string, unknown> ? TData[keyof TData] : TData : {
+  data: TData extends Record<string, unknown> ? TData[keyof TData] : TData;
+  request: Request;
+  response: Response;
+}> : Promise<TResponseStyle extends "data" ? (TData extends Record<string, unknown> ? TData[keyof TData] : TData) | undefined : ({
+  data: TData extends Record<string, unknown> ? TData[keyof TData] : TData;
+  error: undefined;
+} | {
+  data: undefined;
+  error: TError extends Record<string, unknown> ? TError[keyof TError] : TError;
+}) & {
+  /** request may be undefined, because error may be from building the request object itself */request?: Request; /** response may be undefined, because error may be from building the request object itself or from a network error */
+  response?: Response;
+}>;
+interface ClientOptions {
+  baseUrl?: string;
+  responseStyle?: ResponseStyle;
+  throwOnError?: boolean;
+}
+type MethodFn = <TData = unknown, TError = unknown, ThrowOnError extends boolean = false, TResponseStyle extends ResponseStyle = "fields">(options: Omit<RequestOptions<TData, TResponseStyle, ThrowOnError>, "method">) => RequestResult<TData, TError, ThrowOnError, TResponseStyle>;
+type SseFn = <TData = unknown, _TError = unknown, ThrowOnError extends boolean = false, TResponseStyle extends ResponseStyle = "fields">(options: Omit<RequestOptions<never, TResponseStyle, ThrowOnError>, "method">) => Promise<ServerSentEventsResult<TData>>;
+type RequestFn = <TData = unknown, TError = unknown, ThrowOnError extends boolean = false, TResponseStyle extends ResponseStyle = "fields">(options: Omit<RequestOptions<TData, TResponseStyle, ThrowOnError>, "method"> & Pick<Required<RequestOptions<TData, TResponseStyle, ThrowOnError>>, "method">) => RequestResult<TData, TError, ThrowOnError, TResponseStyle>;
+type BuildUrlFn = <TData extends {
+  body?: unknown;
+  path?: Record<string, unknown>;
+  query?: Record<string, unknown>;
+  url: string;
+}>(options: TData & Options<TData>) => string;
+type Client = Client$1<RequestFn, Config, MethodFn, BuildUrlFn, SseFn> & {
+  interceptors: Middleware<Request, Response, unknown, ResolvedRequestOptions>;
+};
+interface TDataShape {
+  body?: unknown;
+  headers?: unknown;
+  path?: unknown;
+  query?: unknown;
+  url: string;
+}
+type OmitKeys<T, K> = Pick<T, Exclude<keyof T, K>>;
+type Options<TData extends TDataShape = TDataShape, ThrowOnError extends boolean = boolean, TResponse = unknown, TResponseStyle extends ResponseStyle = "fields"> = OmitKeys<RequestOptions<TResponse, TResponseStyle, ThrowOnError>, "body" | "path" | "query" | "url"> & ([TData] extends [never] ? unknown : Omit<TData, "url">);
+//#endregion
+//#region ../../api-clients/fluidos/src/hey-api-client.d.ts
+type FluidOsHeyApiClient = Client;
+//#endregion
+//#region ../../api-clients/fluidos/src/hey-api/types.gen.d.ts
+/**
+* Any valid JSON value for provider, integration, theme, metadata, or other dynamic payloads whose keys are not fixed by the API contract.
+*/
+type JsonValue = string | number | boolean | null | Array<JsonValue> | {
+  [key: string]: JsonValue;
+};
+/**
+* FluidOS::NavigationItem
+*/
+type FluidOsNavigationItem = {
+  id: number;
+  icon?: string | null;
+  label?: string | null;
+  parent_id?: number | null;
+  position?: number | null;
+  screen_id?: number | null;
+  slug?: string | null;
+  source?: "user" | "system" | "code";
+  children?: Array<FluidOsNavigationItem>;
+};
+/**
+* FluidOS::Screen
+*/
+type FluidOsScreen = {
+  id: number;
+  name?: string | null;
+  slug?: string | null;
+  definition_id: number;
+  component_tree?: FluidOsDynamicPayload;
+};
+/**
+* FluidOS::Theme
+*/
+type FluidOsTheme = {
+  id: number;
+  config?: FluidOsDynamicPayload;
+  active?: boolean | null;
+  name?: string | null;
+  definition_id: number;
+};
+/**
+* FluidOS::Navigation
+*/
+type FluidOsNavigationBasic = {
+  id: number;
+  name?: string | null;
+  definition_id: number;
+  platform: "web" | "mobile";
+};
+/**
+* FluidOS::Navigation
+*/
+type FluidOsNavigationWithItems = {
+  id: number;
+  name?: string | null;
+  definition_id: number;
+  platform: "web" | "mobile";
+  navigation_items?: Array<FluidOsNavigationItem>;
+};
+/**
+* FluidOS::Profile
+*/
+type FluidOsProfile = {
+  id: number;
+  name?: string | null;
+  default?: boolean | null;
+  permissions?: FluidOsDynamicPayload;
+  definition_id: number;
+  navigation?: FluidOsNavigationWithItems | null;
+  mobile_navigation?: FluidOsNavigationWithItems;
+  themes?: Array<FluidOsTheme>;
+};
+/**
+* Dynamic Fluid OS JSON payload whose keys are defined by the app builder configuration.
+*/
+type FluidOsDynamicPayload = {
+  [key: string]: JsonValue;
+} | null;
 //#endregion
 //#region src/utils/mappings.d.ts
 /** Definition metadata stored at the top level of the mappings file. */
@@ -595,480 +1006,6 @@ declare function diffAgainstSnapshot(portalDir: string, snapshot: Snapshot): Pro
 */
 declare function buildSnapshot(portalDir: string, definitionName: string, definitionId: number): Promise<Snapshot>;
 //#endregion
-//#region ../../api-clients/fluidos/src/generated/fluid-os-v0.d.ts
-interface components {
-  schemas: {
-    Meta: {
-      request_id?: string; /** Format: date-time */
-      timestamp?: string;
-    };
-    PaginatedMeta: {
-      current_page: number;
-      request_id: string; /** Format: date-time */
-      timestamp: string;
-      total_count: number;
-      total_pages: number;
-    };
-    ErrorResponse: {
-      error_message: string;
-      errors: components["schemas"]["ErrorBag"];
-      meta: components["schemas"]["Meta"];
-    };
-    UnauthorizedResponse: {
-      message: string;
-    }; /** @description Any valid JSON value for provider, integration, theme, metadata, or other dynamic payloads whose keys are not fixed by the API contract. */
-    JsonValue: string | number | boolean | null | components["schemas"]["JsonValue"][] | {
-      [key: string]: components["schemas"]["JsonValue"];
-    }; /** @description A validation or API error value. */
-    ErrorValue: string | string[] | components["schemas"]["JsonValue"]; /** @description Validation errors keyed by field, a list of errors, a single error message, or null when no structured error details are available. */
-    ErrorBag: string | components["schemas"]["ErrorValue"][] | {
-      [key: string]: components["schemas"]["ErrorValue"];
-    } | null; /** @description An API error message represented as text or structured JSON. */
-    ErrorMessage: string | components["schemas"]["ErrorBag"] | null; /** @description Common legacy error response envelope. Older endpoints may return one or more of these fields depending on the controller path. */
-    StandardErrorResponse: {
-      message?: string;
-      error?: components["schemas"]["ErrorMessage"];
-      error_message?: components["schemas"]["ErrorMessage"];
-      errors?: components["schemas"]["ErrorBag"];
-      meta?: components["schemas"]["Meta"];
-    } & {
-      [key: string]: components["schemas"]["JsonValue"];
-    }; /** @description Common legacy unauthorized response envelope. */
-    StandardUnauthorizedResponse: components["schemas"]["StandardErrorResponse"];
-    FluidOSDefinitionListResponse: {
-      definitions: components["schemas"]["FluidOSDefinitionBasic"][];
-      meta: components["schemas"]["PaginatedMeta"];
-    };
-    FluidOSDefinitionRequest: {
-      definition?: {
-        name: string;
-        active?: boolean;
-      } | null;
-    };
-    FluidOSDefinitionUpdateRequest: {
-      definition?: {
-        name?: string;
-        active?: boolean;
-      } | null;
-    };
-    FluidOSNavigationItemCreateRequest: {
-      navigation_item?: {
-        icon?: string;
-        label: string;
-        position: number;
-        parent_id?: number | null;
-        screen_id?: number | null;
-        slug?: string | null;
-        source?: "user" | "system" | "code" | null;
-      } | null;
-    };
-    FluidOSNavigationCreateRequest: {
-      navigation?: {
-        name: string;
-        platform: string;
-      } | null;
-    };
-    FluidOSProfileCreateRequest: {
-      profile?: {
-        name: string;
-        default?: boolean;
-        navigation_id?: number;
-        mobile_navigation_id?: number;
-        navigation_attributes?: {
-          name: string;
-          navigation_items_attributes?: Partial<NonNullable<components["schemas"]["FluidOSNavigationItemCreateRequest"]["navigation_item"]>>[];
-        };
-        mobile_navigation_attributes?: {
-          name: string;
-          navigation_items_attributes?: Partial<NonNullable<components["schemas"]["FluidOSNavigationItemCreateRequest"]["navigation_item"]>>[];
-        };
-        theme_ids?: number[];
-        permissions?: components["schemas"]["FluidOSDynamicPayload"];
-      } | null;
-    };
-    FluidOSScreenCreateRequest: {
-      screen?: {
-        name: string;
-        slug: string;
-        component_tree?: components["schemas"]["FluidOSDynamicPayload"] | null;
-      } | null;
-    };
-    FluidOSThemeCreateRequest: {
-      theme?: {
-        config: components["schemas"]["FluidOSDynamicPayload"];
-        name: string;
-        active?: boolean;
-      } | null;
-    };
-    FluidOSNavigationItemUpdateRequest: {
-      navigation_item?: Partial<NonNullable<components["schemas"]["FluidOSNavigationItemCreateRequest"]["navigation_item"]>> | null;
-    };
-    FluidOSNavigationUpdateRequest: {
-      navigation?: {
-        name?: string;
-        platform?: "web" | "mobile";
-      } | null;
-    };
-    FluidOSProfileUpdateRequest: {
-      profile?: {
-        name?: string;
-        default?: boolean;
-        navigation_id?: number;
-        mobile_navigation_id?: number;
-        theme_ids?: number[];
-        permissions?: components["schemas"]["FluidOSDynamicPayload"];
-      } | null;
-    };
-    FluidOSScreenUpdateRequest: {
-      screen?: {
-        name?: string;
-        slug?: string;
-        component_tree?: components["schemas"]["FluidOSDynamicPayload"] | null;
-      } | null;
-    };
-    FluidOSThemeUpdateRequest: {
-      theme?: {
-        name?: string;
-        active?: boolean;
-        config?: components["schemas"]["FluidOSDynamicPayload"];
-      } | null;
-    };
-    FluidOSVersionUpdateRequest: {
-      version?: {
-        active?: boolean;
-      } | null;
-    }; /** FluidOS::NavigationItem */
-    FluidOSNavigationItem: {
-      id: number;
-      icon?: string | null;
-      label?: string | null;
-      parent_id?: number | null;
-      position?: number | null;
-      screen_id?: number | null;
-      slug?: string | null; /** @enum {string} */
-      source?: "user" | "system" | "code";
-      children?: components["schemas"]["FluidOSNavigationItem"][];
-    }; /** FluidOS::Screen */
-    FluidOSScreenBasic: {
-      id: number;
-      name?: string | null;
-      slug?: string | null;
-      definition_id: number;
-    }; /** FluidOS::Screen */
-    FluidOSScreen: {
-      id: number;
-      name?: string | null;
-      slug?: string | null;
-      definition_id: number;
-      component_tree?: components["schemas"]["FluidOSDynamicPayload"];
-    }; /** FluidOS::Theme */
-    FluidOSTheme: {
-      id: number;
-      config?: components["schemas"]["FluidOSDynamicPayload"];
-      active?: boolean | null;
-      name?: string | null;
-      definition_id: number;
-    }; /** FluidOS::Navigation */
-    FluidOSNavigationBasic: {
-      id: number;
-      name?: string | null;
-      definition_id: number; /** @enum {string} */
-      platform: "web" | "mobile";
-    }; /** FluidOS::Navigation */
-    FluidOSNavigation: {
-      id: number;
-      name?: string | null;
-      definition_id: number; /** @enum {string} */
-      platform: "web" | "mobile";
-      screens?: components["schemas"]["FluidOSScreen"][];
-    }; /** FluidOS::Navigation */
-    FluidOSNavigationWithItems: {
-      id: number;
-      name?: string | null;
-      definition_id: number; /** @enum {string} */
-      platform: "web" | "mobile";
-      navigation_items?: components["schemas"]["FluidOSNavigationItem"][];
-    }; /** FluidOS::Profile */
-    FluidOSProfile: {
-      id: number;
-      name?: string | null;
-      default?: boolean | null;
-      permissions?: components["schemas"]["FluidOSDynamicPayload"];
-      definition_id: number;
-      navigation?: components["schemas"]["FluidOSNavigationWithItems"] | null;
-      mobile_navigation?: components["schemas"]["FluidOSNavigationWithItems"];
-      themes?: components["schemas"]["FluidOSTheme"][];
-    }; /** FluidOS::Profile */
-    FluidOSProfileWithScreens: {
-      id: number;
-      name?: string | null;
-      default?: boolean | null;
-      permissions?: components["schemas"]["FluidOSDynamicPayload"];
-      definition_id: number;
-      navigation?: components["schemas"]["FluidOSNavigationWithItems"] | null;
-      mobile_navigation?: components["schemas"]["FluidOSNavigationWithItems"];
-      themes?: components["schemas"]["FluidOSTheme"][];
-      screens?: components["schemas"]["FluidOSScreen"][];
-    }; /** FluidOS::Definition */
-    FluidOSDefinitionBasic: {
-      id: number;
-      name?: string | null;
-      active?: boolean | null;
-    }; /** FluidOS::Definition */
-    FluidOSDefinition: {
-      id: number;
-      name?: string | null;
-      active?: boolean | null;
-      profiles?: components["schemas"]["FluidOSProfile"][];
-      screens?: components["schemas"]["FluidOSScreenBasic"][];
-      navigations?: components["schemas"]["FluidOSNavigationBasic"][];
-      themes?: components["schemas"]["FluidOSTheme"][];
-    }; /** FluidOS::Version */
-    FluidOSVersion: {
-      id: number;
-      active?: boolean | null;
-      manifest?: components["schemas"]["FluidOSDynamicPayload"]; /** Format: date-time */
-      published_at?: string | null;
-      definition_id: number;
-    }; /** @description Couples each widget package artifact path class with the only accepted contentType value. */
-    FluidOSWidgetPackageVersionArtifactContentTypeConstraint: {
-      /** @constant */path: "widget.js"; /** @constant */
-      contentType: "application/javascript";
-    } | {
-      /** @constant */path: "manifest.json"; /** @constant */
-      contentType: "application/json";
-    } | {
-      path: string; /** @constant */
-      contentType: "text/css";
-    } | {
-      path: string; /** @constant */
-      contentType: "application/json";
-    }; /** @description Couples each widget package artifact path class with the only accepted contentType/content_type alias values when supplied. */
-    FluidOSWidgetPackageVersionCompletionArtifactContentTypeConstraint: {
-      /** @constant */path: "widget.js"; /** @constant */
-      contentType?: "application/javascript"; /** @constant */
-      content_type?: "application/javascript";
-    } | {
-      /** @constant */path: "manifest.json"; /** @constant */
-      contentType?: "application/json"; /** @constant */
-      content_type?: "application/json";
-    } | {
-      path: string; /** @constant */
-      contentType?: "text/css"; /** @constant */
-      content_type?: "text/css";
-    } | {
-      path: string; /** @constant */
-      contentType?: "application/json"; /** @constant */
-      content_type?: "application/json";
-    }; /** @description Artifact metadata required before Fluid OS widget package upload URLs can be issued. Artifact paths must be unique within the request, and the artifact list must include widget.js and manifest.json before upload URLs are issued. Artifact paths are top-level package artifact filenames only; accepted names are widget.js, manifest.json, *.css, and *.js.map with no slash paths. Accepted content types are application/javascript for widget.js, application/json for manifest.json and *.js.map, and text/css for *.css. Byte sizes are non-negative and checked against configured per-artifact and bundle limits; defaults are 5 MiB per artifact and 10 MiB per bundle unless environment config changes them. */
-    FluidOSWidgetPackageVersionArtifactInput: {
-      /** @description Top-level package artifact filename. Accepted names are widget.js, manifest.json, *.css, or *.js.map; slash paths are not accepted. */path: string; /** @description Expected SHA256 checksum for the artifact content. */
-      sha256: string; /** @description Expected artifact size in bytes. Checked against configured per-artifact and bundle limits; defaults are 5 MiB per artifact and 10 MiB per bundle unless environment config changes them. */
-      bytes: number;
-      /**
-       * @description MIME content type used when uploading the artifact. Accepted values are application/javascript for widget.js, application/json for manifest.json and *.js.map, and text/css for *.css.
-       * @enum {string}
-       */
-      contentType: "application/javascript" | "application/json" | "text/css";
-    } & components["schemas"]["FluidOSWidgetPackageVersionArtifactContentTypeConstraint"]; /** @description Request payload for starting a company-owned Fluid OS widget package version publish flow. Artifact paths must be unique top-level package artifact filenames. The artifacts list must include widget.js and manifest.json so the API can issue upload URLs and later verify the completed upload. */
-    FluidOSWidgetPackageVersionCreateRequest: {
-      /** @description Non-empty, object-path-safe company-owned widget package key. Use URL-safe characters only; . and .. are not accepted. */package_key: string; /** @description Non-empty, object-path-safe widget package version identifier accepted in the URL and upload path. Dotted versions such as 1.0.0 are accepted; only exact . or .. path segments and characters outside [A-Za-z0-9._~-] are rejected. */
-      version: string; /** @description Fluid OS builder version that produced this package. */
-      builder_version: string; /** @description Fluid OS CLI version that published this package. */
-      cli_version: string; /** @description Fluid OS runtime version targeted by this package. */
-      runtime_version: string; /** @description SHA256 checksum of the serialized manifest JSON. */
-      manifest_hash: string; /** @description Widget package manifest JSON. It must use the supported widget manifest structure, contain at least one extractable widget type, and every widget type in that structure must use the company-owned prefix `company.<package_key>.`. */
-      manifest: {
-        [key: string]: components["schemas"]["JsonValue"];
-      }; /** @description Top-level package artifacts to upload. The list must include widget.js and manifest.json. */
-      artifacts: components["schemas"]["FluidOSWidgetPackageVersionArtifactInput"][] & (unknown & unknown); /** @description Optional publisher metadata stored with the package version. */
-      build_metadata?: {
-        [key: string]: components["schemas"]["JsonValue"];
-      };
-    }; /** @description Upload instructions for a widget package artifact. */
-    FluidOSWidgetPackageVersionUpload: {
-      /** @description Top-level package artifact filename. */path: string; /** Format: uri */
-      upload_url: string; /** Format: uri */
-      public_url: string;
-    }; /** @description Upload session details for a pending Fluid OS widget package version. */
-    FluidOSWidgetPackageVersionCreateResponse: {
-      version_id: number; /** Format: uri */
-      artifact_base_url: string;
-      uploads: components["schemas"]["FluidOSWidgetPackageVersionUpload"][];
-    }; /** @description Optional artifact metadata supplied when completing a widget package upload. Artifact paths must be unique top-level package artifact filenames within the request; accepted names are widget.js, manifest.json, *.css, and *.js.map with no slash paths. Accepted content types are application/javascript for widget.js, application/json for manifest.json and *.js.map, and text/css for *.css. Byte sizes are non-negative and checked against configured per-artifact and bundle limits; defaults are 5 MiB per artifact and 10 MiB per bundle unless environment config changes them. sha256/checksum, bytes/size, and contentType/content_type are accepted aliases and must match when both aliases are present; supplied artifact metadata is compared with the stored upload-session/package version artifact metadata during verification. If artifacts are supplied, they must include exactly the stored upload-session artifact paths. Manifest verification is separate and happens against uploaded artifact content. */
-    FluidOSWidgetPackageVersionCompletionArtifactInput: {
-      /** @description Top-level package artifact filename. Accepted names are widget.js, manifest.json, *.css, or *.js.map; slash paths are not accepted. */path: string; /** @description Expected SHA256 checksum for the artifact content. */
-      sha256?: string; /** @description Alias for sha256. */
-      checksum?: string; /** @description Expected artifact size in bytes. Checked against configured per-artifact and bundle limits; defaults are 5 MiB per artifact and 10 MiB per bundle unless environment config changes them. */
-      bytes?: number; /** @description Alias for bytes; checked against the same configured per-artifact and bundle limits. */
-      size?: number;
-      /**
-       * @description MIME content type for the artifact. Accepted values are application/javascript for widget.js, application/json for manifest.json and *.js.map, and text/css for *.css.
-       * @enum {string}
-       */
-      contentType?: "application/javascript" | "application/json" | "text/css";
-      /**
-       * @description Alias for contentType.
-       * @enum {string}
-       */
-      content_type?: "application/javascript" | "application/json" | "text/css";
-    } & components["schemas"]["FluidOSWidgetPackageVersionCompletionArtifactContentTypeConstraint"]; /** @description Request payload for verifying uploaded company-owned Fluid OS widget package artifacts. The version path parameter, optional package_key, and any supplied artifact metadata must match the stored upload-session/package version artifact metadata before the package version is approved. If artifacts are supplied, they must include exactly the stored upload-session artifact paths. Uploaded manifest.json is verified for matching packageId, matching version, and valid company-owned `company.<package_key>.` widget type prefixes. */
-    FluidOSWidgetPackageVersionCompleteUploadRequest: {
-      /** @description Optional non-empty, object-path-safe widget package key. When omitted, the company's widget package is used; . and .. are not accepted. */package_key?: string | null; /** @description Optional artifact metadata to compare with the stored upload session. When supplied, the list must include exactly the stored upload-session artifact paths; omissions and extras are rejected. */
-      artifacts?: components["schemas"]["FluidOSWidgetPackageVersionCompletionArtifactInput"][];
-    }; /** @description Approved Fluid OS widget package version details. */
-    FluidOSWidgetPackageVersionCompleteUploadResponse: {
-      status: string;
-      packageId: string; /** @description Non-empty, object-path-safe widget package version identifier. Dotted versions such as 1.0.0 are accepted; only exact . or .. path segments and characters outside [A-Za-z0-9._~-] are rejected. */
-      version: string; /** Format: uri */
-      scriptUrl: string;
-      cssUrls: string[]; /** Format: uri */
-      manifestUrl: string;
-    }; /** @description Flat verification failure response returned when uploaded artifacts do not match the package manifest or expected metadata. */
-    FluidOSWidgetPackageVersionVerificationErrorResponse: {
-      /** @enum {string} */status: "error";
-      error_message: string;
-      details: {
-        [key: string]: components["schemas"]["JsonValue"];
-      };
-    }; /** @description Dynamic Fluid OS JSON payload whose keys are defined by the app builder configuration. */
-    FluidOSDynamicPayload: {
-      [key: string]: components["schemas"]["JsonValue"];
-    } | null;
-    FluidOSWidgetPackageCatalogEntry: {
-      /**
-       * @description Package ownership source for the shared widget loading path.
-       * @enum {string}
-       */
-      source: "company" | "droplet";
-      /**
-       * @description Runtime package identifier prefixed by source.
-       * @example company.portal-home
-       * @example droplet.reviews
-       */
-      packageId: string; /** @description Approved package version currently active for this owner. */
-      version: string; /** @description Public module script URL for the package runtime artifact. */
-      scriptUrl: string | null; /** @description Public stylesheet URLs for the package runtime artifacts. */
-      cssUrls: string[]; /** @description Public URL for the package manifest artifact. */
-      manifestUrl: string | null; /** @description Approved package manifest JSON used by the runtime loader. */
-      manifest: {
-        [key: string]: components["schemas"]["JsonValue"];
-      };
-    };
-    FluidOSWidgetPackageCatalogResponse: {
-      packages: components["schemas"]["FluidOSWidgetPackageCatalogEntry"][];
-    };
-    FluidOSWidgetPackageDropletForbiddenResponse: {
-      error: {
-        message: string;
-        details?: {
-          [key: string]: components["schemas"]["JsonValue"];
-        };
-      }; /** @enum {integer} */
-      status: 403;
-      meta?: components["schemas"]["Meta"];
-    };
-    FluidOSWidgetPackageRoleForbiddenResponse: {
-      message: string;
-    };
-    FluidOSWidgetPackagePermissionForbiddenResponse: {
-      error: string;
-    };
-    FluidOSWidgetPackageForbiddenResponse: components["schemas"]["FluidOSWidgetPackageDropletForbiddenResponse"] | components["schemas"]["FluidOSWidgetPackageRoleForbiddenResponse"] | components["schemas"]["FluidOSWidgetPackagePermissionForbiddenResponse"];
-  };
-  responses: never;
-  parameters: never;
-  requestBodies: never;
-  headers: never;
-  pathItems: never;
-}
-//#endregion
-//#region src/utils/transform.d.ts
-type ApiScreen = components["schemas"]["FluidOSScreen"];
-type ApiTheme = components["schemas"]["FluidOSTheme"];
-type ApiNavigationBasic = components["schemas"]["FluidOSNavigationBasic"];
-type ApiNavigationItem = components["schemas"]["FluidOSNavigationItem"];
-type ApiProfile = components["schemas"]["FluidOSProfile"];
-interface LocalScreen {
-  readonly name: string;
-  readonly component_tree: Record<string, unknown>[];
-}
-interface LocalTheme {
-  readonly name: string;
-  readonly config: Record<string, unknown>;
-  readonly active: boolean;
-}
-interface LocalNavigationItem {
-  readonly id: number;
-  readonly icon: string | null;
-  readonly label: string | null;
-  readonly screen: string | null;
-  readonly slug: string | null;
-  readonly source: string;
-  readonly position: number | null;
-  readonly parent_id: number | null;
-  readonly children: LocalNavigationItem[];
-}
-interface LocalNavigation {
-  readonly name: string;
-  readonly platform: string;
-  readonly navigation_items: LocalNavigationItem[];
-}
-interface LocalProfile {
-  readonly name: string;
-  readonly default: boolean;
-  readonly navigation: string | null;
-  readonly mobile_navigation: string | null;
-  readonly themes: string[];
-  readonly permissions: {
-    readonly ranks: number[];
-    readonly roles: string[];
-    readonly platform: string[];
-    readonly countries: number[];
-  };
-}
-/**
-* Transform an API screen response into the local file format.
-* Strips server-only fields and normalizes `component_tree` to always be an array.
-*/
-declare function transformScreen(screen: ApiScreen): LocalScreen;
-/**
-* Derive a slug for a screen. Screens use the existing `slug` field from the API.
-* Falls back to slugifying the name if no slug exists.
-*/
-declare function deriveScreenSlug(screen: ApiScreen, existingSlugs: Set<string>): string;
-/**
-* Transform an API theme response into the local file format.
-* Passes theme config through as-is (hex conversion is a separate ticket).
-*/
-declare function transformTheme(theme: ApiTheme): LocalTheme;
-/**
-* Build an ID → slug lookup map by inverting a slug → id mapping.
-*/
-declare function buildIdToSlugMap(mappings: Record<string, number>): Map<number, string>;
-/**
-* Transform API navigation items into local format.
-* Converts `screen_id` to `screen` slug reference. Keeps `id` for sync.
-*/
-declare function transformNavigationItems(items: ApiNavigationItem[], screenIdToSlug: Map<number, string>): LocalNavigationItem[];
-/**
-* Transform an API navigation with its items into the local file format.
-*/
-declare function transformNavigation(nav: ApiNavigationBasic, items: ApiNavigationItem[], screenIdToSlug: Map<number, string>): LocalNavigation;
-/** Typed alias for call-site clarity. */
-declare const buildNavigationIdToSlugMap: (mappings: Record<string, number>) => Map<number, string>;
-/** Typed alias for call-site clarity. */
-declare const buildThemeIdToSlugMap: (mappings: Record<string, number>) => Map<number, string>;
-/**
-* Transform an API profile response into the local file format.
-* Converts navigation_id, mobile_navigation_id, and theme_ids to slug references.
-*
-* TODO (REP-842): Country/rank IDs in profile permissions need to be translated
-* to human-readable names via the main Fluid API. For now, the permission arrays
-* are written as-is with integer IDs.
-*/
-declare function transformProfile(profile: ApiProfile, navIdToSlug: Map<number, string>, themeIdToSlug: Map<number, string>): LocalProfile;
-//#endregion
 //#region src/utils/push-validation.d.ts
 /** Categorize changed files by resource type. */
 interface CategorizedChanges {
@@ -1110,141 +1047,31 @@ declare function categorizeChanges(diff: SnapshotDiff): CategorizedChanges;
 * Validate that all cross-references between local portal files are valid.
 *
 * Checks:
+* - New and changed resources contain the required local-file fields
+* - Every widget node in a changed screen has a string "id" and "type"
+* - New and changed themes include the required config object
 * - Navigation items' "screen" slugs reference existing screen files or mappings
 * - Profile "navigation" and "mobile_navigation" slugs reference existing nav files or mappings
 * - Profile "themes" slugs reference existing theme files or mappings
 */
 declare function validateCrossReferences(portalDir: string, mappings: PortalMappings, changes: CategorizedChanges): Promise<ValidationError[]>;
 //#endregion
-//#region ../../portal/core/src/remote-dom-widget-package.d.ts
-declare const REMOTE_DOM_WIDGET_MANIFEST_VERSION: 1;
-declare const REMOTE_DOM_WIDGET_RUNTIME: "remote-dom";
-type JsonPrimitive = string | number | boolean | null;
-type JsonValue = JsonPrimitive | readonly JsonValue[] | JsonObject;
-interface JsonObject {
-  readonly [key: string]: JsonValue;
-}
-interface RemoteDomWidgetCapabilityDeclaration {
-  readonly name: string;
-  readonly version: string;
-}
-interface RemoteDomWidgetDefinition {
-  readonly type: string;
-  readonly displayName: string;
-  readonly description: string;
-  readonly icon: string;
-  readonly category: string;
-  readonly propertySchema: JsonObject;
-  readonly defaultProps: JsonObject;
-  readonly container: "inline" | "block" | "card" | "fullscreen";
-  readonly resizable: boolean | "horizontal" | "vertical" | "both";
-  readonly minSdkVersion: string;
-  readonly capabilities: readonly RemoteDomWidgetCapabilityDeclaration[];
-}
-/**
-* Canonical package contract shared by the CLI, catalog APIs, and portal hosts.
-* Catalog producers resolve every artifact to its public URL before returning
-* this descriptor; consumers do not translate legacy manifest shapes.
-*/
-interface RemoteDomWidgetPackageDescriptor {
-  readonly manifestVersion: typeof REMOTE_DOM_WIDGET_MANIFEST_VERSION;
-  readonly runtime: typeof REMOTE_DOM_WIDGET_RUNTIME;
-  readonly packageId: string;
-  readonly source: "company" | "droplet";
-  readonly version: string;
-  readonly workerEntryUrl: string;
-  readonly cssUrls: readonly string[];
-  readonly assetUrls: readonly string[];
-  readonly widgets: readonly RemoteDomWidgetDefinition[];
-}
+//#region src/commands/push.d.ts
+declare const pushCommand: Command;
+//#endregion
+//#region src/commands/widget-create.d.ts
+declare const widgetCommand: Command;
+//#endregion
+//#region src/commands/widget-publish.d.ts
+declare const topLevelWidgetCommand: Command;
 //#endregion
-//#region src/utils/widget-package-validation.d.ts
+//#region src/commands/deploy.d.ts
+declare const deployCommand: Command;
+//#endregion
+//#region ../widget-tooling/src/internal/widget-package-validation.d.ts
 type WidgetPackageOwnerKind = "company" | "droplet";
-interface WidgetCapabilityMetadata {
-  readonly name: string;
-  readonly version?: string;
-}
-interface SourceWidgetMetadata {
-  readonly name: string;
-  readonly displayName?: string;
-  readonly description?: string;
-  readonly icon?: string;
-  readonly category?: string;
-  readonly propertySchema?: JsonObject;
-  readonly defaultProps?: JsonObject;
-  readonly container?: unknown;
-  readonly minSdkVersion?: string;
-  readonly resizable?: unknown;
-  readonly capabilities?: readonly WidgetCapabilityMetadata[];
-}
-interface SourceWidgetPackageMetadata {
-  readonly manifestVersion?: number;
-  readonly scope?: string;
-  readonly packageStableId?: string;
-  readonly packageId: string;
-  readonly packageType?: string;
-  readonly version: string;
-  readonly widgets: readonly SourceWidgetMetadata[];
-  readonly cssUrls?: readonly string[];
-}
-interface WidgetDescriptorMetadata extends RemoteDomWidgetDefinition {
-  readonly name: string;
-}
-declare const WIDGET_PACKAGE_ARTIFACT_PATH: unique symbol;
-/** A package-local artifact path written into the uploaded manifest. */
-type WidgetPackageArtifactPath = string & {
-  readonly [WIDGET_PACKAGE_ARTIFACT_PATH]: true;
-};
-/**
-* Upload-time manifest whose artifact references are package-local paths.
-*
-* This is deliberately distinct from RemoteDomWidgetPackageDescriptor, whose
-* catalog-facing artifact fields must already be resolved to absolute URLs.
-*/
-interface WidgetPackagePublishManifest {
-  readonly manifestVersion: 1;
-  readonly runtime: "remote-dom";
-  readonly packageId: string;
-  readonly source: WidgetPackageOwnerKind;
-  readonly version: string;
-  readonly workerEntryUrl: WidgetPackageArtifactPath;
-  readonly cssUrls: readonly WidgetPackageArtifactPath[];
-  readonly assetUrls: readonly WidgetPackageArtifactPath[];
-  readonly widgets: readonly RemoteDomWidgetDefinition[];
-}
-interface ValidatedWidgetPackageBuild {
-  readonly sourcePackage: SourceWidgetPackageMetadata;
-  readonly packageKey: string;
-  readonly packageId: string;
-  readonly owner: WidgetPackageOwnerKind;
-  readonly version: string;
-  readonly widgets: readonly WidgetDescriptorMetadata[];
-}
-type WidgetPackageValidationErrorCode = "NO_SOURCE_PACKAGE" | "MULTIPLE_SOURCE_PACKAGES" | "INVALID_SOURCE_PACKAGE" | "INVALID_WIDGET_METADATA" | "UNSUPPORTED_OWNER" | "INVALID_PACKAGE_KEY" | "INVALID_VERSION" | "NO_WIDGETS" | "INVALID_WIDGET_NAME" | "INVALID_WIDGET_TYPE" | "DUPLICATE_WIDGET";
-interface WidgetPackageValidationError {
-  readonly code: WidgetPackageValidationErrorCode;
-  readonly message: string;
-  readonly path?: string;
-}
-interface WidgetPackageValidationResult {
-  readonly success: boolean;
-  readonly value?: ValidatedWidgetPackageBuild;
-  readonly errors: readonly WidgetPackageValidationError[];
-}
-interface ValidateSourceWidgetPackageOptions {
-  readonly owner?: WidgetPackageOwnerKind;
-}
-declare function validateSingleSourceWidgetPackage(sourcePackages: readonly unknown[], options?: ValidateSourceWidgetPackageOptions): WidgetPackageValidationResult;
-declare function buildWidgetPackagePublishManifest(validated: ValidatedWidgetPackageBuild, options?: {
-  readonly cssUrls?: readonly string[];
-}): WidgetPackagePublishManifest;
 //#endregion
-//#region src/utils/widget-package-builder.d.ts
-interface BuildSharedWidgetPackageOptions {
-  readonly projectDir: string;
-  readonly publishDir?: string;
-  readonly owner?: WidgetPackageOwnerKind;
-}
+//#region ../widget-tooling/src/internal/widget-package-builder.d.ts
 interface SharedWidgetPackageBuildResult {
   readonly publishDir: string;
   readonly packageId: string;
@@ -1253,63 +1080,16 @@ interface SharedWidgetPackageBuildResult {
   readonly publishManifestPath: string;
   readonly widgetScriptPath: string;
 }
-interface SharedWidgetPackageBuildError {
-  readonly code: "CONFIG_LOAD_FAILED" | "VALIDATION_FAILED" | "INVALID_PUBLISH_DIR" | "WRITE_FAILED";
-  readonly message: string;
-  readonly details?: string;
-}
-declare function buildSharedWidgetPackage(options: BuildSharedWidgetPackageOptions): Promise<Result<SharedWidgetPackageBuildResult, SharedWidgetPackageBuildError>>;
-declare function createWidgetPackageEntrySource(options: {
-  readonly configImportPath: string;
-  readonly cssImportPath?: string;
-  readonly validated: ValidatedWidgetPackageBuild;
-}): string;
 //#endregion
-//#region src/utils/widget-package-config.d.ts
-interface WidgetSourceConfig {
-  readonly path: string;
-  readonly relativePath: string;
-}
-interface WidgetSourceConfigLoadError {
-  readonly code: "CONFIG_LOAD_FAILED" | "INVALID_FORMAT";
-  readonly message: string;
-  readonly details?: string;
-}
-declare function resolvePortalWidgetSourceConfig(projectDir: string): Promise<WidgetSourceConfig | undefined>;
-declare function loadSourceWidgetPackages(projectDir: string): Promise<Result<unknown[], WidgetSourceConfigLoadError>>;
-//#endregion
-//#region src/utils/widget-package-artifacts.d.ts
-declare const WIDGET_PACKAGE_BUILDER_VERSION = "1";
+//#region ../widget-tooling/src/internal/widget-package-artifacts.d.ts
 interface ArtifactMetadata {
   readonly path: string;
   readonly sha256: string;
   readonly bytes: number;
   readonly contentType: string;
 }
-interface PublishManifestMetadata {
-  readonly packageId: string;
-  readonly version: string;
-  readonly builderVersion: string;
-  readonly cliVersion: string;
-  readonly runtimeVersion: string;
-  readonly manifestHash: string;
-  readonly artifacts: readonly ArtifactMetadata[];
-}
-declare function computeArtifactMetadata(filePath: string, baseDir: string): Promise<ArtifactMetadata>;
-declare function collectWidgetPackageArtifacts(publishDir: string): Promise<ArtifactMetadata[]>;
-declare function createPublishManifestMetadata(options: {
-  readonly packageId: string;
-  readonly version: string;
-  readonly cliVersion: string;
-  readonly runtimeVersion: string;
-  readonly manifestContent: string | Buffer;
-  readonly artifacts: readonly ArtifactMetadata[];
-  readonly builderVersion?: string;
-}): PublishManifestMetadata;
-declare function getArtifactContentType(filePath: string): string;
-declare function sha256(content: string | Buffer): string;
 //#endregion
-//#region src/utils/widget-package-upload.d.ts
+//#region ../widget-tooling/src/internal/widget-package-upload.d.ts
 type WidgetPackageUploadOwner = {
   readonly kind: "droplet";
   readonly uuid: string;
@@ -1344,10 +1124,6 @@ interface WidgetPackageUploadSessionPayload {
   readonly manifest: Record<string, unknown>;
   readonly artifacts: readonly WidgetPackageArtifactPayload[];
 }
-interface WidgetPackageCompleteUploadPayload {
-  readonly package_key: string;
-  readonly artifacts: readonly WidgetPackageArtifactPayload[];
-}
 interface WidgetPackageSignedUpload {
   readonly path: string;
   readonly url: string;
@@ -1377,75 +1153,215 @@ interface WidgetPackagePublishResult {
   readonly uploadedArtifacts?: readonly WidgetPackageArtifactUploadResult[];
   readonly complete?: WidgetPackageCompleteResult;
 }
-interface BasePublishWidgetPackageVersionOptions {
-  readonly owner: WidgetPackageUploadOwner;
+//#endregion
+//#region ../widget-tooling/src/workflows.d.ts
+type WidgetPackageOwner = WidgetPackageUploadOwner;
+type WidgetPackageBuildResult = SharedWidgetPackageBuildResult;
+interface PublishedWidgetPackage {
+  readonly build: WidgetPackageBuildResult;
   readonly request: WidgetPackagePublishRequest;
-  readonly fetchImpl?: WidgetPackageUploadFetch;
+  readonly publish: WidgetPackagePublishResult;
 }
-interface DryRunPublishWidgetPackageVersionOptions extends BasePublishWidgetPackageVersionOptions {
-  readonly client?: FetchClient;
-  readonly dryRun: true;
+//#endregion
+//#region ../widget-tooling/src/company-widget-package.d.ts
+interface CompanyWidgetPackage {
+  /** Bare key, comparable to `packageStableId` (no `company.` prefix). */
+  readonly key: string;
+  readonly version: string;
+  /**
+  * Fully-qualified widget types this package publishes — `company.<key>.<Name>`,
+  * the same strings screen JSON stores. Empty when the response carried no
+  * usable manifest, which is a "cannot tell", not "publishes nothing".
+  */
+  readonly widgetTypes: readonly string[];
 }
-interface PublishWidgetPackageVersionUploadOptions extends BasePublishWidgetPackageVersionOptions {
-  readonly client: FetchClient;
-  readonly dryRun?: boolean;
+/**
+* The company's widget package, or `null` when it has never published.
+*
+* A company is expected to have exactly one. This returns the first, and exists
+* for callers that only need "what is this company's key" — a preflight must use
+* {@link readCompanyWidgetPackages} and reconcile against the configured key
+* instead, or a second package would make it report a confident, wrong answer.
+*/
+declare function readCompanyWidgetPackage(client: FluidOsHeyApiClient): Promise<CompanyWidgetPackage | null>;
+/**
+* The message shown when the project's key disagrees with the company's.
+*
+* Names the actual key and the exact edit, because the failure it replaces gave
+* neither — and because the fix is one line the author can apply immediately.
+*/
+declare function formatPackageKeyMismatch(options: {
+  readonly configuredKey: string;
+  readonly companyKey: string;
+  readonly companyVersion: string;
+}): string;
+/** What the project's own `src/widgets.config.ts` declares. */
+interface ConfiguredWidgetPackage {
+  readonly packageId: string;
+  readonly version: string;
 }
-type PublishWidgetPackageVersionOptions = DryRunPublishWidgetPackageVersionOptions | PublishWidgetPackageVersionUploadOptions;
-type WidgetPackageUploadFetch = (input: string | URL, init: RequestInit) => Promise<Response>;
-declare class WidgetPackageUploadError extends Error {
-  readonly code: string;
-  constructor(code: string, message: string);
+interface CompanyPackagePreflight {
+  /** Set when the deploy must not proceed; the text explains the one-line fix. */
+  readonly mismatch?: string;
+  /** Set when the configured version would collide; publish as this instead. */
+  readonly versionOverride?: string;
+  /** The version that would have collided, for reporting the substitution. */
+  readonly configuredVersion?: string;
 }
-declare function buildWidgetPackageUploadSessionPayload(request: WidgetPackageSessionRequest): WidgetPackageUploadSessionPayload;
-declare function buildWidgetPackageCompleteUploadPayload(packageKey: string, artifacts: readonly WidgetPackageArtifactMetadata[]): WidgetPackageCompleteUploadPayload;
-declare function getWidgetPackageUploadSessionRoute(owner: WidgetPackageUploadOwner): string;
-declare function getWidgetPackageCompleteUploadRoute(owner: WidgetPackageUploadOwner, version: string): string;
-declare function requestWidgetPackageUploadSession(client: FetchClient, owner: WidgetPackageUploadOwner, request: WidgetPackageSessionRequest): Promise<WidgetPackageUploadSession>;
-declare function uploadWidgetPackageArtifacts(session: WidgetPackageUploadSession, artifacts: readonly WidgetPackageUploadArtifact[], fetchImpl?: WidgetPackageUploadFetch): Promise<WidgetPackageArtifactUploadResult[]>;
-declare function completeWidgetPackageUpload(client: FetchClient, owner: WidgetPackageUploadOwner, version: string, packageKey: string, artifacts: readonly WidgetPackageArtifactMetadata[]): Promise<WidgetPackageCompleteResult>;
-declare function publishWidgetPackageVersion(options: PublishWidgetPackageVersionOptions): Promise<WidgetPackagePublishResult>;
-declare function normalizeWidgetPackageUploadSession(response: unknown, requestedVersion: string, requestedArtifacts: readonly WidgetPackageArtifactMetadata[]): WidgetPackageUploadSession;
-declare function normalizeWidgetPackageCompleteResponse(response: unknown, requestedVersion: string): WidgetPackageCompleteResult;
+/**
+* One round trip against the company's widget package, answering both questions
+* a publish has to settle before it builds anything: is this the right package,
+* and is this version free?
+*
+* Shared so `fluid portal deploy` and any host that drives it reach the same
+* verdict for the same reason.
+*
+* Proceeds on every uncertainty — the company has never published (its first
+* publish defines both key and version), the lookup failed, or the local config
+* could not be read. A preflight exists to replace a confusing failure with a
+* clear one, not to invent new reasons to stop; when it cannot tell, the server
+* still decides.
+*/
+declare function preflightCompanyPackage(options: {
+  readonly projectDir: string;
+  readonly client: FluidOsHeyApiClient; /** Injected so callers bundle their own loader; avoids a cycle back into the build path. */
+  readonly readConfiguredPackage: (projectDir: string) => Promise<ConfiguredWidgetPackage | null>;
+}): Promise<CompanyPackagePreflight>;
+/**
+* Returns the version to publish as, or `null` to publish the configured one.
+*
+* A company has ONE widget package and several projects publish into it, so the
+* version belongs to that shared package rather than to any project's source
+* file. Nothing tells a project what the others have already released, so two
+* of them declaring `0.5.0` is inevitable — and republishing a version that
+* exists is refused with `422 Package version already exists`, whose only fix
+* is editing a SemVer string in a TypeScript file. For an author who never
+* opens a terminal that is the end of the road, and it happens on EVERY publish
+* after the first, not in some corner case.
+*
+* So a configured version at or below what is published becomes the next patch
+* after the published one. A configured version ABOVE it is honoured exactly —
+* that is a deliberate minor or major bump and the whole reason to keep the
+* field.
+*
+* Returns `null` on any version this cannot reason about — a prerelease, build
+* metadata, anything not a plain numeric triple. Guessing a successor for those
+* would be worse than letting the server answer.
+*/
+declare function resolvePublishVersion(options: {
+  readonly configuredVersion: string;
+  readonly publishedVersion: string;
+}): string | null;
 //#endregion
 //#region src/commands/widget-package-publish.d.ts
 interface PublishWidgetRuntimeArtifactsOptions {
   readonly projectDir: string;
   readonly outDir: string;
   readonly buildOwner: WidgetPackageOwnerKind;
-  readonly uploadOwner: WidgetPackageUploadOwner;
+  readonly uploadOwner: WidgetPackageOwner;
   readonly dryRun?: boolean;
-  readonly client?: FetchClient;
+  readonly client?: FluidOsHeyApiClient;
+  /** Publish as this version rather than the config's. */
+  readonly version?: string;
 }
-interface PublishWidgetRuntimeArtifactsResult {
-  readonly build: SharedWidgetPackageBuildResult;
-  readonly request: WidgetPackagePublishRequest;
-  readonly publish: WidgetPackagePublishResult;
+type PublishWidgetRuntimeArtifactsResult = PublishedWidgetPackage;
+declare function publishWidgetRuntimeArtifacts(options: PublishWidgetRuntimeArtifactsOptions): Promise<PublishWidgetRuntimeArtifactsResult>;
+//#endregion
+//#region src/commands/version.d.ts
+declare const versionCommand: Command;
+//#endregion
+//#region src/commands/doctor.d.ts
+declare const doctorCommand: Command;
+//#endregion
+//#region src/utils/transform.d.ts
+type ApiScreen = FluidOsScreen;
+type ApiTheme = FluidOsTheme;
+type ApiNavigationBasic = FluidOsNavigationBasic;
+type ApiNavigationItem = FluidOsNavigationItem;
+type ApiProfile = FluidOsProfile;
+interface LocalScreen {
+  readonly name: string;
+  readonly component_tree: Record<string, unknown>[];
 }
-interface PublishWidgetRuntimeArtifactsDependencies {
-  readonly buildSharedWidgetPackage?: typeof buildSharedWidgetPackage;
-  readonly publishWidgetPackageVersion?: typeof publishWidgetPackageVersion;
+interface LocalTheme {
+  readonly name: string;
+  readonly config: Record<string, unknown>;
+  readonly active: boolean;
 }
-declare function publishWidgetRuntimeArtifacts(options: PublishWidgetRuntimeArtifactsOptions, dependencies?: PublishWidgetRuntimeArtifactsDependencies): Promise<PublishWidgetRuntimeArtifactsResult>;
-declare function createWidgetPackagePublishRequest(options: {
-  readonly publishDir: string;
-  readonly manifestPath: string;
-  readonly publishManifestPath: string;
-  readonly owner: WidgetPackageOwnerKind;
-}): Promise<WidgetPackagePublishRequest>;
-declare function createAuthenticatedWidgetPackageClient(): FetchClient;
-declare function printWidgetPublishSummary(options: {
-  readonly title: string;
-  readonly ownerLabel: string;
-  readonly environment?: string;
-  readonly outDir: string;
-  readonly result: PublishWidgetRuntimeArtifactsResult;
-}): void;
-declare function printRuntimeOnlyNotice(): void;
-declare function printDryRunSessionPayload(result: PublishWidgetRuntimeArtifactsResult): void;
-declare function validateWidgetPublishOutDir(projectDir: string, outDir: string): string;
+interface LocalNavigationItem {
+  /** Server-owned sync identity. New draft items omit it until push. */
+  readonly id?: number;
+  readonly icon: string | null;
+  readonly label: string | null;
+  readonly screen: string | null;
+  readonly slug: string | null;
+  readonly source: string;
+  readonly position: number | null;
+  readonly parent_id: number | null;
+  readonly children: LocalNavigationItem[];
+}
+interface LocalNavigation {
+  readonly name: string;
+  readonly platform: string;
+  readonly navigation_items: LocalNavigationItem[];
+}
+interface LocalProfile {
+  readonly name: string;
+  readonly default: boolean;
+  readonly navigation: string | null;
+  readonly mobile_navigation: string | null;
+  readonly themes: string[];
+  readonly permissions: {
+    readonly ranks: number[];
+    readonly roles: string[];
+    readonly platform: string[];
+    readonly countries: number[];
+  };
+}
+/**
+* Transform an API screen response into the local file format.
+* Strips server-only fields and normalizes `component_tree` to always be an array.
+*/
+declare function transformScreen(screen: ApiScreen): LocalScreen;
+/**
+* Derive a slug for a screen. Screens use the existing `slug` field from the API.
+* Falls back to slugifying the name if no slug exists.
+*/
+declare function deriveScreenSlug(screen: ApiScreen, existingSlugs: Set<string>): string;
+/**
+* Transform an API theme response into the local file format.
+* Passes theme config through as-is (hex conversion is a separate ticket).
+*/
+declare function transformTheme(theme: ApiTheme): LocalTheme;
+/**
+* Build an ID → slug lookup map by inverting a slug → id mapping.
+*/
+declare function buildIdToSlugMap(mappings: Record<string, number>): Map<number, string>;
+/**
+* Transform API navigation items into local format.
+* Converts `screen_id` to `screen` slug reference. Keeps `id` for sync.
+*/
+declare function transformNavigationItems(items: ApiNavigationItem[], screenIdToSlug: Map<number, string>): LocalNavigationItem[];
+/**
+* Transform an API navigation with its items into the local file format.
+*/
+declare function transformNavigation(nav: ApiNavigationBasic, items: ApiNavigationItem[], screenIdToSlug: Map<number, string>): LocalNavigation;
+/** Typed alias for call-site clarity. */
+declare const buildNavigationIdToSlugMap: (mappings: Record<string, number>) => Map<number, string>;
+/** Typed alias for call-site clarity. */
+declare const buildThemeIdToSlugMap: (mappings: Record<string, number>) => Map<number, string>;
+/**
+* Transform an API profile response into the local file format.
+* Converts navigation_id, mobile_navigation_id, and theme_ids to slug references.
+*
+* TODO (REP-842): Country/rank IDs in profile permissions need to be translated
+* to human-readable names via the main Fluid API. For now, the permission arrays
+* are written as-is with integer IDs.
+*/
+declare function transformProfile(profile: ApiProfile, navIdToSlug: Map<number, string>, themeIdToSlug: Map<number, string>): LocalProfile;
 //#endregion
 //#region src/index.d.ts
 declare const plugin: FluidPlugin;
 //#endregion
-export { type ArtifactMetadata, type BuildOptions, type BuildSharedWidgetPackageOptions, CANONICAL_PROJECT_NAME, type CategorizedChanges, type CreateOptions, type CreatePortalGitCredentialOptions, type CreatePortalProjectDependencies, type DefinitionMapping, type DevOptions, FILE_SYSTEM_ERRORS, type FileHash, type FileHashMap, type FileSystemError, type FileSystemErrorCode, type GitCredentialOutcome, GitError, type LocalNavigation, type LocalNavigationItem, type LocalProfile, type LocalScreen, type LocalTheme, type MappedResourceType, type PortalDeployOptions, type PortalGitCredential, type PortalGitSyncOptions, type PortalGitSyncResult, type PortalMappings, type ProjectConfig, type PublishManifestMetadata, type PublishWidgetPackageVersionOptions, type PublishWidgetRuntimeArtifactsDependencies, type PublishWidgetRuntimeArtifactsOptions, type PublishWidgetRuntimeArtifactsResult, type RemoteDomWidgetPackageDescriptor, type ScaffoldFromGitHubOptions, type SelectedPageTemplate, type SharedWidgetPackageBuildError, type SharedWidgetPackageBuildResult, type Snapshot, type SnapshotDiff, type SourceWidgetMetadata, type SourceWidgetPackageMetadata, TEMPLATES, TEMPLATE_REPO_URL, type TemplateName, type TemplatePaths, type TemplateVariables, type ValidateSourceWidgetPackageOptions, type ValidatedWidgetPackageBuild, type ValidationError, WIDGET_PACKAGE_BUILDER_VERSION, type WidgetCreateOptions, type WidgetDescriptorMetadata, type WidgetPackageArtifactMetadata, type WidgetPackageArtifactPath, type WidgetPackageArtifactPayload, type WidgetPackageArtifactUploadResult, type WidgetPackageCompleteResult, type WidgetPackageCompleteUploadPayload, type WidgetPackageOwnerKind, type WidgetPackagePublishManifest, type WidgetPackagePublishRequest, type WidgetPackagePublishResult, type WidgetPackageSessionRequest, type WidgetPackageSignedUpload, type WidgetPackageUploadArtifact, WidgetPackageUploadError, type WidgetPackageUploadFetch, type WidgetPackageUploadOwner, type WidgetPackageUploadSession, type WidgetPackageUploadSessionPayload, type WidgetPackageValidationError, type WidgetPackageValidationErrorCode, type WidgetPackageValidationResult, type WidgetPublishOptions, type WidgetSourceConfig, type WidgetSourceConfigLoadError, buildIdToSlugMap, buildNavigationIdToSlugMap, buildSharedWidgetPackage, buildSnapshot, buildThemeIdToSlugMap, buildWidgetPackageCompleteUploadPayload, buildWidgetPackagePublishManifest, buildWidgetPackageUploadSessionPayload, categorizeChanges, cloneCommand, collectWidgetPackageArtifacts, completeWidgetPackageUpload, computeArtifactMetadata, computeFileHash, copyTemplate, copyTemplateSafe, createAuthenticatedWidgetPackageClient, createCommand, createDirectory, createDirectorySafe, createPortalGitCredential, createPortalProject, createPublishManifestMetadata, createWidgetPackageEntrySource, createWidgetPackagePublishRequest, plugin as default, deployCommand, deriveScreenSlug, deriveSlug, diffAgainstSnapshot, directoryExists, doctorCommand, ensureGitAvailable, fileExists, getArtifactContentType, getInstallCommand, getOriginUrl, getRunCommand, getSdkVersion, getSdkVersionSafe, getTemplatePaths, getWidgetPackageCompleteUploadRoute, getWidgetPackageUploadSessionRoute, gitAheadBehindVsFetchHead, gitAutoCommit, gitClone, gitFetch, gitInit, gitMergeFastForward, gitMissingError, gitPush, hasUncommittedChanges, installDependencies, isGitAvailable, isGitRepo, loadSourceWidgetPackages, normalizeWidgetPackageCompleteResponse, normalizeWidgetPackageUploadSession, pathExists, portalGitCredentialPath, printDryRunSessionPayload, printRuntimeOnlyNotice, printWidgetPublishSummary, promptProjectConfig, publishWidgetPackageVersion, publishWidgetRuntimeArtifacts, pullCommand, pushCommand, readFileSafe, readMappings, readSnapshot, removeMapping, requestWidgetPackageUploadSession, resolveIdToSlug, resolvePortalWidgetSourceConfig, resolveSlugToId, rewriteProjectName, runPackageManager, runPortalGitSync, scaffoldFromGitHub, sha256, slugFromPath, topLevelWidgetCommand, transformNavigation, transformNavigationItems, transformProfile, transformScreen, transformTheme, updateMapping, uploadWidgetPackageArtifacts, validateCrossReferences, validateSingleSourceWidgetPackage, validateWidgetPublishOutDir, versionCommand, widgetCommand, writeFileSafe, writeFluidrcProfile, writeMappings, writeSnapshot };
+export { type BuildOptions, CANONICAL_PROJECT_NAME, type CategorizedChanges, type CompanyPackagePreflight, type CompanyWidgetPackage, type ConfiguredWidgetPackage, type CreateOptions, type CreatePortalGitCredentialOptions, type CreatePortalProjectDependencies, type DefinitionMapping, type DevOptions, FILE_SYSTEM_ERRORS, type FileHash, type FileHashMap, type FileSystemError, type FileSystemErrorCode, type GitCredentialOutcome, GitError, type LocalNavigation, type LocalNavigationItem, type LocalProfile, type LocalScreen, type LocalTheme, type MappedResourceType, type PortalDeployOptions, type PortalGitCredential, type PortalGitSyncOptions, type PortalGitSyncResult, type PortalMappings, type ProjectConfig, type PublishWidgetRuntimeArtifactsOptions, type ScaffoldFromGitHubOptions, type SelectedPageTemplate, type Snapshot, type SnapshotDiff, TEMPLATES, TEMPLATE_REPO_URL, type TemplateName, type TemplatePaths, type TemplateVariables, type ValidationError, type WidgetCreateOptions, type WidgetPublishOptions, buildIdToSlugMap, buildNavigationIdToSlugMap, buildSnapshot, buildThemeIdToSlugMap, categorizeChanges, cloneCommand, computeFileHash, copyTemplate, copyTemplateSafe, createCommand, createDirectory, createDirectorySafe, createPortalGitCredential, createPortalProject, plugin as default, deployCommand, deriveScreenSlug, deriveSlug, diffAgainstSnapshot, directoryExists, doctorCommand, ensureGitAvailable, fileExists, formatPackageKeyMismatch, getInstallCommand, getOriginUrl, getRunCommand, getSdkVersion, getSdkVersionSafe, getTemplatePaths, gitAheadBehindVsFetchHead, gitAutoCommit, gitClone, gitFetch, gitInit, gitMergeFastForward, gitMissingError, gitPush, hasUncommittedChanges, installDependencies, isGitAvailable, isGitRepo, pathExists, portalGitCredentialPath, preflightCompanyPackage, promptProjectConfig, publishWidgetRuntimeArtifacts, pullCommand, pushCommand, readCompanyWidgetPackage, readFileSafe, readMappings, readSnapshot, removeMapping, resolveIdToSlug, resolvePublishVersion, resolveSlugToId, rewriteProjectName, runPackageManager, runPortalGitSync, scaffoldFromGitHub, slugFromPath, topLevelWidgetCommand, transformNavigation, transformNavigationItems, transformProfile, transformScreen, transformTheme, updateMapping, validateCrossReferences, versionCommand, widgetCommand, writeFileSafe, writeFluidrcProfile, writeMappings, writeSnapshot };
 //# sourceMappingURL=index.d.mts.map