@hanamesh/dsh-app-host 0.6.12 → 0.6.14

package/README.md

@@ -1,4 +1,8 @@
+0.6.14 候选：严格读取标准分发目录的精确 npm 三目标与 agentPlugins，保留历史固定 GitHub DTO；目录事实仅展示，不决定兼容或升级。R1-COMBO-01 原始 26 条目响应已纳入回归。
+
 > I51 R1 返修（待复审）：供应商指引跟随宿主中英菜单，默认正文只写用途和结果；实现解释、交接固定规则及具名设置默认值保留在技术详情。交接的保存操作与套件来源选择前置，自有字段按单列排列；设置值、默认值、权限、读写协议均不变。
+
+0.6.13 候选只消费新 npm 三包身份；插件 id、服务与存储不变。新旧 Core/Usage/Brand 均受保护，Recommender 不属于套件。0.6.12 原件保持原行为。
 >
 > 已知限制 / Known limitations：官方 DSH rc.2 设置页在 390 CSS px 下仍保留固定侧栏，插件内容可用宽度受宿主挤压；本插件不改变客户端或全局 CSS，不能保证该宿主窄屏下标题、原生下拉选项及输入值完整可见。完整设置操作建议使用宽窗口。At 390 CSS px, the official DSH rc.2 settings sidebar leaves limited room for plugin content; titles, native select options and input values may remain constrained. Use a wider window for full settings operations. AppHost only controls its own content and does not modify the client or global CSS. 此限制按编排本次裁定披露，不报告整页390通过。Brand M01既有错误可见性限制仍开；静态profile peers check红流不改写为通过。
 

package/dist/client-ui.js

@@ -847,7 +847,7 @@ h('div',{className:'hm-source-add'},h('input',{value:draft,placeholder:'https://
   const KIND_TEXT={application:t('应用'),plugin:t('插件'),listing:t('仅收录')};
   const STATE_TEXT={registered:t('已安装'),installed:t('已安装'),'installed-not-loaded':t('需重启'),'uninstalled-not-unloaded':t('已卸载 · 需重启'),'runtime-missing':t('缺运行时'),invalid:t('包无效')};
   // Mirrors PROTECTED_PACKAGES on the host: the suite is never offered an uninstall button (the host answers 403 anyway).
-  const PROTECTED=new Set(['@hanamesh/dsh-app-host','hanamesh-core','hanamesh-usage','hanamesh-brand','@hanamesh/dsh-core','@hanamesh/dsh-usage']);
+  const PROTECTED=new Set(['@hanamesh/core','@hanamesh/usage','@hanamesh/brand','@hanamesh/dsh-app-host','hanamesh-core','hanamesh-usage','hanamesh-brand','@hanamesh/dsh-core','@hanamesh/dsh-usage']);
   function RestartNotice({reason}){useLocale();
     return h('p',{role:'status',className:'hm-restart-notice','data-hanamesh-restart':'required'},h('strong',null,t('需重新打开客户端')),' ',reason??t('插件更改需要重新打开客户端后生效。'),' ',h('span',{className:'hm-restart-hint'},t('请完全退出 HanaMesh 客户端或 DSH 后重新打开；关闭窗口不等于退出。')));
   }

package/dist/library/catalog.js

@@ -1,3 +1,4 @@
+import semver from 'semver';
 import { readFile } from 'node:fs/promises';
 import { AppHostError, requireCondition } from '../errors.js';
 
@@ -62,26 +63,54 @@ function timestamp(value,utc=false){
   return Number.isFinite(date.getTime())&&date.toISOString().slice(0,10)===value.slice(0,10);
 }
 // Display-only C-INDEXER-CATALOG SuitePresentationDTO; never an install/upgrade decision.
-const suiteComponent=value=>['core','usage','app-host','brand'].includes(value);
-function suitePresentation(value){
-  const packageFact=fact=>fact&&npmName(fact.npmPackageName)&&plain(fact.githubRepo);
-  return own(value,['schemaVersion','id','role','component','canonicalHanaId','installable','installTargets','components','distributionVersion'])&&
+const suiteIdentities={
+  core:{names:['@hanamesh/core','hanamesh-core'],repo:'yzsnstotz/hanamesh-core'},
+  usage:{names:['@hanamesh/usage','hanamesh-usage'],repo:'yzsnstotz/hanamesh-usage'},
+  'app-host':{names:['@hanamesh/dsh-app-host'],repo:'yzsnstotz/hanamesh-plugin-app-host'},
+  brand:{names:['@hanamesh/brand','hanamesh-brand'],repo:'yzsnstotz/hanamesh-brand'},
+};
+const suiteComponent=value=>Object.hasOwn(suiteIdentities,value);
+const exactVersion=value=>textWithin(value,128,true)&&!value.startsWith('v')&&Boolean(semver.valid(value))&&value.trim()===value;
+const packageFact=fact=>fact&&suiteComponent(fact.component)&&suiteIdentities[fact.component].names.includes(fact.npmPackageName)&&suiteIdentities[fact.component].repo===fact.githubRepo;
+const distinctComponents=(facts,count)=>Array.isArray(facts)&&facts.length===count&&new Set(facts.map(fact=>fact?.component)).size===count;
+function suitePresentation(value,item){
+  if(!(own(value,['schemaVersion','id','role','component','canonicalHanaId','installable','installTargets','components','distributionVersion','agentPlugins'])&&
     value.schemaVersion===1&&value.id==='hanamesh'&&['suite','component','client-only'].includes(value.role)&&suiteComponent(value.component)&&
-    (value.canonicalHanaId===null||plain(value.canonicalHanaId))&&typeof value.installable==='boolean'&&
-    (value.distributionVersion===undefined||plain(value.distributionVersion))&&
-    (value.components===undefined||(Array.isArray(value.components)&&value.components.every(fact=>
-      own(fact,['component','npmPackageName','githubRepo','version'])&&suiteComponent(fact.component)&&packageFact(fact)&&plain(fact.version))))&&
-    (value.installTargets===undefined||(Array.isArray(value.installTargets)&&value.installTargets.every(target=>
-      own(target,['component','npmPackageName','githubRepo','version','source'])&&['core','usage','app-host'].includes(target.component)&&packageFact(target)&&
-      (target.version===undefined||plain(target.version))&&own(target.source,['source','repo','ref'])&&target.source.source==='github'&&
-      plain(target.source.repo)&&typeof target.source.ref==='string'&&/^[0-9a-f]{40}$/i.test(target.source.ref))));
+    (value.canonicalHanaId===null||plain(value.canonicalHanaId))&&typeof value.installable==='boolean'))return false;
+  const canonical=value.role==='suite'&&value.component==='usage'&&value.installable&&value.canonicalHanaId===item.id;
+  if(value.role!==(value.component==='usage'?'suite':value.component==='brand'?'client-only':'component')||value.installable!==canonical)return false;
+  if(value.distributionVersion!==undefined&&(!canonical||!exactVersion(value.distributionVersion)))return false;
+  if(value.components!==undefined&&(!canonical||!distinctComponents(value.components,4)||!value.components.every(fact=>
+    own(fact,['component','npmPackageName','githubRepo','version'])&&packageFact(fact)&&exactVersion(fact.version))))return false;
+  if(value.installTargets!==undefined){
+    if(!canonical||!distinctComponents(value.installTargets,3)||!value.installTargets.every(target=>{
+      if(!(own(target,['component','npmPackageName','githubRepo','version','source'])&&target.component!=='brand'&&packageFact(target)&&
+        (target.version===undefined||exactVersion(target.version))))return false;
+      const fact=value.components?.find(fact=>fact.component===target.component),source=target.source;
+      if(fact&&(fact.npmPackageName!==target.npmPackageName||fact.githubRepo!==target.githubRepo||
+        (target.version!==undefined&&fact.version!==target.version)))return false;
+      if(source?.source==='npm')return own(source,['source','name','version'])&&source.name===target.npmPackageName&&
+        exactVersion(source.version)&&source.version===target.version&&fact?.version===target.version;
+      // Approved standard distribution retains immutable historical Git DTOs, without choosing a fallback source.
+      return own(source,['source','repo','ref'])&&source.source==='github'&&source.repo===target.githubRepo&&
+        typeof source.ref==='string'&&/^[0-9a-f]{40}$/i.test(source.ref);
+    }))return false;
+  }
+  if(value.agentPlugins!==undefined){
+    const agents=value.agentPlugins;
+    if(!canonical||!Array.isArray(agents)||agents.length<1||agents.length>2||new Set(agents.map(agent=>agent?.host)).size!==agents.length||
+      !agents.every(agent=>own(agent,['host','pluginName','pluginId','marketplaceUrl','version'])&&['claude','codex'].includes(agent.host)&&
+        agent.pluginName==='hanamesh'&&agent.pluginId==='hanamesh@hanamesh'&&agent.marketplaceUrl==='https://github.com/yzsnstotz/hanamesh-plugins'&&
+        exactVersion(agent.version)&&agent.version===value.distributionVersion))return false;
+  }
+  return true;
 }
 
 function validateHanaItem(item,maxSourceLinks){
   const optionalText={description:5000,latestVersion:64,license:80};
   const source=item?.source;
   requireCondition(own(item,['id','itemId','packageName','name','displayName','summary','catalogKind','source','description','homepage','latestVersion','license','categories','keywords','repository','package','publisher','updatedAt','official','suite'])&&
-    (item.official===undefined||typeof item.official==='boolean')&&(item.suite===undefined||suitePresentation(item.suite))&&
+    (item.official===undefined||typeof item.official==='boolean')&&(item.suite===undefined||suitePresentation(item.suite,item))&&
     plain(item.id)&&item.id===item.itemId&&
     textWithin(item.name,160,true)&&textWithin(item.displayName,120,true)&&textWithin(item.summary,1000)&&
     ['application','plugin','entry'].includes(item.catalogKind)&&

package/dist/library/install.js

@@ -10,7 +10,7 @@ import { profileSnapshot, runtimeSnapshot, profileChecks, runtimeChecks, package
 import {prepareSuiteUpgrade,readSuiteStatus,createCoreSuiteAdapter,SUITE_INSTALL_COMMAND} from './suite.js';
 
 /** The HanaMesh suite itself (real names + the historical scoped spellings) is never installed or removed through the market. */
-export const PROTECTED_PACKAGES=Object.freeze(['@hanamesh/dsh-app-host','hanamesh-core','hanamesh-usage','hanamesh-brand','@hanamesh/dsh-core','@hanamesh/dsh-usage']);
+export const PROTECTED_PACKAGES=Object.freeze(['@hanamesh/core','@hanamesh/usage','@hanamesh/brand','@hanamesh/dsh-app-host','hanamesh-core','hanamesh-usage','hanamesh-brand','@hanamesh/dsh-core','@hanamesh/dsh-usage']);
 const blocked=new Set(PROTECTED_PACKAGES);
 const packageName=value=>typeof value==='string'&&/^(?:@[a-z0-9][a-z0-9._-]*\/)?[a-z0-9][a-z0-9._-]*$/.test(value);
 const versionText=value=>typeof value==='string'&&/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(value);
@@ -161,16 +161,16 @@ export function createLibraryInstaller({profileDir,profileName,dataRoot,nodeBina
       requireCondition(cliAvailable,'DSH_CLI_UNAVAILABLE','套件升级需客户端随附的官方 CLI；请恢复后重试。',{},503);
       const executing=await prepareSuiteUpgrade({coreSuitePlan:suiteProvider});
       requireCondition(identity(executing)===identity(confirmed),'SUITE_PLAN_CHANGED','执行前套件安装包来源或声明已变化，请重新查看并确认。',{},409);
-      emit({type:'library.install-started',itemId:'hanamesh:suite-upgrade',packageName:'hanamesh-core',kind:'suite-upgrade'});
+      emit({type:'library.install-started',itemId:'hanamesh:suite-upgrade',packageName:'@hanamesh/core',kind:'suite-upgrade'});
       try{
         await run(['add','--save-exact','--strict-peer-dependencies',`--registry=${fresh.registry??registry}`,...fresh.components.map(c=>`${c.name}@${c.to}`)]);
         const actual=await readSuiteStatus(profileDir);
         const saved=await json(join(profileDir,'package.json'));
         requireCondition(actual.status==='installed'&&fresh.components.every((c,i)=>actual.components[i]?.version===c.to&&saved.dependencies?.[c.name]===c.to),'INSTALL_READBACK_MISMATCH','套件升级后的版本或启用状态不符，请完全退出后按补齐命令修复。',{},502);
-        return{status:'restart-required',kind:'suite-upgrade',packageName:'hanamesh-core',components:fresh.components,version:actual.version};
+        return{status:'restart-required',kind:'suite-upgrade',packageName:'@hanamesh/core',components:fresh.components,version:actual.version};
       }catch(error){
         error.details={...error.details,stage:'suite-upgrade',actual:await readSuiteStatus(profileDir),command:SUITE_INSTALL_COMMAND};
-        emit({type:'library.install-failed',packageName:'hanamesh-core',code:error.code??'SUITE_UPGRADE_FAILED'});throw error;
+        emit({type:'library.install-failed',packageName:'@hanamesh/core',code:error.code??'SUITE_UPGRADE_FAILED'});throw error;
       }
     });},
     async install(item,context){

package/dist/library/service.js

@@ -62,7 +62,7 @@ export function createLibraryService({domain,host,config={},dataRoot,ledgerReade
       requireCondition(packageName===undefined,'INVALID_INPUT','套件升级不接受包名或任意替换参数。');
       requireCondition(typeof installer?.prepareSuiteUpgrade==='function','SUITE_UPGRADE_UNAVAILABLE','当前客户端还不支持安全套件升级，请使用补齐命令。',{},503);
       const plan=await installer.prepareSuiteUpgrade();
-      return{contractVersion:'1',source:{kind:'suite',manifestUrl:'https://github.com/yzsnstotz'},item:{id:SUITE_TARGET,displayName:'HanaMesh 套件',kind:'suite-upgrade',package:{registry:'npm',name:'hanamesh-core'},latestVersion:plan.components[0].to,installed:{state:'installed',version:suiteStatus.version},upgradeAvailable:plan.available,suiteUpgrade:plan}};
+      return{contractVersion:'1',source:{kind:'suite',manifestUrl:'https://github.com/yzsnstotz'},item:{id:SUITE_TARGET,displayName:'HanaMesh 套件',kind:'suite-upgrade',package:{registry:'npm',name:'@hanamesh/core'},latestVersion:plan.components[0].to,installed:{state:'installed',version:suiteStatus.version},upgradeAvailable:plan.available,suiteUpgrade:plan}};
     }
     requireCondition(itemId!==undefined||packageName!==undefined,'INVALID_INPUT','itemId or packageName is required.');
     requireCondition(itemId===undefined||(text(itemId,160)&&!/[\u0000-\u001f\u007f]/.test(itemId)),'INVALID_INPUT','itemId is invalid.');
@@ -144,7 +144,7 @@ export function createLibraryService({domain,host,config={},dataRoot,ledgerReade
     get live(){return Boolean(installer?.live);},
     async upgradeSuite(input){requireInstaller('Suite upgrade is unavailable.');
       requireCondition(input&&Object.keys(input).length===1&&typeof input.planId==='string','INVALID_INPUT','Only the current planId is accepted.');
-      return await operation('install',async()=>{try{const result=await installer.upgradeSuite(input);suiteStatus={...await suiteFacts(),restartRequired:true};return result;}catch(error){if(error.details?.stage!=='suite-upgrade')throw error;const actual=await readSuiteStatus(config.profileDir);suiteStatus={...await suiteFacts(),restartRequired:true,upgradeError:error.code??'SUITE_UPGRADE_FAILED'};error.details={...error.details,stage:'suite-upgrade',actual,command:SUITE_INSTALL_COMMAND};emit({type:'library.install-failed',packageName:'hanamesh-core',code:error.code??'SUITE_UPGRADE_FAILED',details:{stage:'suite-upgrade',actual,command:SUITE_INSTALL_COMMAND}});throw error;}});
+      return await operation('install',async()=>{try{const result=await installer.upgradeSuite(input);suiteStatus={...await suiteFacts(),restartRequired:true};return result;}catch(error){if(error.details?.stage!=='suite-upgrade')throw error;const actual=await readSuiteStatus(config.profileDir);suiteStatus={...await suiteFacts(),restartRequired:true,upgradeError:error.code??'SUITE_UPGRADE_FAILED'};error.details={...error.details,stage:'suite-upgrade',actual,command:SUITE_INSTALL_COMMAND};emit({type:'library.install-failed',packageName:'@hanamesh/core',code:error.code??'SUITE_UPGRADE_FAILED',details:{stage:'suite-upgrade',actual,command:SUITE_INSTALL_COMMAND}});throw error;}});
     },
     async install(input){requireCondition(input?.itemId!==SUITE_TARGET,'SUITE_CONFIRMATION_REQUIRED','请在客户端确认完整升级计划。',{},403);requireInstaller('Install requires absolute profileDir, nodeBinary, dshBin and profileName.');const{item}=await resolveTarget(input??{});if(present(item.installed)&&!item.upgradeAvailable)return{status:'already-installed',itemId:item.id,packageName:item.package.name};return await installItem(item);},
     async provision(input){requireInstaller('Runtime provision is unavailable.');

package/dist/library/suite.js

@@ -6,11 +6,11 @@ import {requireCondition} from '../errors.js';
 
 export const SUITE_TARGET='hanamesh:suite-upgrade';
 export const SUITE_PACKAGES=Object.freeze([
-  {name:'hanamesh-core',label:'Core',repo:'hanamesh-core'},
-  {name:'hanamesh-usage',label:'使用记录',repo:'hanamesh-usage'},
+  {name:'@hanamesh/core',label:'Core',repo:'hanamesh-core'},
+  {name:'@hanamesh/usage',label:'使用记录',repo:'hanamesh-usage'},
   {name:'@hanamesh/dsh-app-host',label:'应用库',repo:'hanamesh-plugin-app-host'},
 ].map(Object.freeze));
-export const SUITE_INSTALL_COMMAND="env -u GIT_CONFIG_PARAMETERS -u GIT_ASKPASS -u SSH_ASKPASS GIT_CONFIG_NOSYSTEM=1 GIT_TERMINAL_PROMPT=0 GIT_CONFIG_COUNT=2 GIT_CONFIG_KEY_0=credential.helper GIT_CONFIG_VALUE_0= GIT_CONFIG_KEY_1=credential.helper GIT_CONFIG_VALUE_1='!gh auth git-credential' dsh plugin --profile desktop add --save-exact 'github:yzsnstotz/hanamesh-core#main' 'github:yzsnstotz/hanamesh-usage#main' 'github:yzsnstotz/hanamesh-plugin-app-host#main'";
+export const SUITE_INSTALL_COMMAND="dsh plugin --profile desktop add --save-exact '@hanamesh/core@0.3.21' '@hanamesh/usage@0.3.0-rc.6' '@hanamesh/dsh-app-host@0.6.14'";
 const json=async path=>JSON.parse(await readFile(path,'utf8'));
 /** Physical inventory only, never a compatibility declaration or permission to upgrade. */
 export async function readSuiteStatus(profileDir){
@@ -104,7 +104,7 @@ export function createCoreSuiteAdapter({core=()=>undefined,registry,suiteSourceM
   Object.defineProperty(get,'unavailable',{get:()=>current()?null:CORE_SUITE_DECLARATION_MISSING});
   get.readFacts=async()=>{
     const declaration=await read();
-    return{status:declaration.completeness==='complete'?'installed':declaration.completeness,completeness:declaration.completeness,version:declaration.installed.find(row=>row.moduleName==='hanamesh-core').actualVersion,
+    return{status:declaration.completeness==='complete'?'installed':declaration.completeness,completeness:declaration.completeness,version:declaration.installed.find(row=>row.moduleName==='@hanamesh/core').actualVersion,
       components:declaration.installed.map(row=>({...row,name:row.moduleName,label:SUITE_PACKAGES.find(p=>p.name===row.moduleName).label,version:row.actualVersion})),blocked:declaration.blocked};
   };
   return get;

package/docs/CONTRACT.md

@@ -157,7 +157,9 @@ DSH 绑定必须提供同一个 `single` domain 的一次完整镜像 publish
 | `/hanamesh/library/provision` | POST | `{appId, packageName, runtimeItem}` 三者必填 | 202；缺字段/非法 → 400 `INVALID_INPUT`（`LIB-PROVISION-INPUT`） |
 | `/hanamesh/library/uninstall` | POST | `{appId, packageName, runtimeItem?}` | 202；缺字段/非法 → 400 `INVALID_INPUT` |
 
-事件流 `library.install-*` 增加 `kind`；`install-done.result` 对插件为 `{status:'restart-required', kind:'plugin', packageName, version}`。受保护包（`hanamesh-core`、`hanamesh-usage`、`@hanamesh/dsh-app-host` 及旧写法 `@hanamesh/dsh-core`、`@hanamesh/dsh-usage`）任何路径都 `PACKAGE_DENIED`：`plugins/*` 在启动操作前同步答 403，目录条目路径在操作内以 `-failed` 事件给出。「需重启」判定只来自本进程启动时的 profile 依赖快照（钉版本内核不暴露已加载插件集合）；快照不可读时一切已装计为已加载。客户端在壳内（`window.self !== window.top`）给 `hanamesh://restart` 深链，官方 DSH 直开时只提示文字；本包不重启 DSH。
+事件流 `library.install-*` 增加 `kind`；`install-done.result` 对插件为 `{status:'restart-required', kind:'plugin', packageName, version}`。受保护包（`@hanamesh/core`、`@hanamesh/usage`、`@hanamesh/brand`、`hanamesh-brand`、`hanamesh-core`、`hanamesh-usage`、`@hanamesh/dsh-app-host` 及旧写法 `@hanamesh/dsh-core`、`@hanamesh/dsh-usage`）任何路径都 `PACKAGE_DENIED`：`plugins/*` 在启动操作前同步答 403，目录条目路径在操作内以 `-failed` 事件给出。「需重启」判定只来自本进程启动时的 profile 依赖快照（钉版本内核不暴露已加载插件集合）；快照不可读时一切已装计为已加载。客户端在壳内（`window.self !== window.top`）给 `hanamesh://restart` 深链，官方 DSH 直开时只提示文字；本包不重启 DSH。
+
+0.6.13 候选：套件 npm 身份为 `@hanamesh/core`、`@hanamesh/usage`、`@hanamesh/dsh-app-host`；Core 声明的 `core.name`、`moduleName`、升级目标和返回的 `packageName` 按这些新名精确比较，旧名声明不当作新三包。插件 id、`hanameshMarket` 服务、路由与存储键保持；普通 Recommender 不受保护、不加入套件。首装/补齐精确命令见 LIBRARY.md；已发布 0.6.12 原件不包含该适配。
 
 ## 市场席位（rc.32，设计定案 2026-09-22 §4，T5）
 
@@ -246,3 +248,7 @@ B17 review repair（同0.6.8候选）：`AppHost` 未注入 `runtimeLedgerReader
 
 
 0.6.12：目录条目的展示/跳转链接（`sourceLinks.sourceUrl`、`homepage`、`repository.url`、`publisher.url`）接受 fragment 并原样保留；目录自身 attribution 展示链接亦保留 fragment。manifest 来源和 `transport.endpoint` 等请求 URL 校验不变。单条非法仍拒绝整个 provider page，不返回部分结果。
+
+
+0.6.14 / R1-COMBO-01：HanaMesh view 的可选 suite.agentPlugins 接受 claude/codex 唯一渠道、hanamesh / hanamesh@hanamesh、公开 hanamesh-plugins HTTPS 市场及与 distributionVersion 相同的精确 SemVer。npm source 严格为 {source:'npm',name,version}，name=目标 npmPackageName，source.version=目标 version=对应 components.version；三个不同目标限 Core/Usage/AppHost，Brand 仅组件事实。公开组件的新旧 npm 名均绑定原 GitHub 仓库，不猜发布版本。未知字段、范围/tag、缺件、重复件及不一致整页拒绝 INVALID_CATALOG_PAGE。
+历史 GitHub DTO 按已审标准分发提议继续可读：source 只许 source/repo/ref，repo=目标 githubRepo，ref 为40位hex；可缺历史版本事实，不自动转换或选备用源。目录发布事实不作为 Core 兼容声明、安装授权或本机已装观察。随包 catalog/schema/page.json 同时描述默认和 HanaMesh 两视图，跨字段相等性由运行解码器检查。

package/docs/DSH_INTEGRATION.md

@@ -20,7 +20,7 @@ Review fixes. The install-target probe on the handoff listener answers only orig
 plutil timeout); the remaining fixed rules are served as `rules` by `/hanamesh/library/handoff-settings` and listed on
 the settings page. Expiry codes: `HANDOFF_NOT_PICKED_UP` (window never fetched it / fetched but no outcome) and
 `HANDOFF_EXPIRED` (shown or confirmed, no answer); the client reports `failed` with `error.code` when the confirmation
-cannot open (`HANDOFF_OPEN_FAILED`, `cause`). Live install results carry `restartBaseline`. `hanamesh-brand` is protected.
+cannot open (`HANDOFF_OPEN_FAILED`, `cause`). Live install results carry `restartBaseline`. `@hanamesh/brand` and legacy `hanamesh-brand` are protected.
 
 ## 0.6.0 (2026-10-15)
 

package/docs/LIBRARY.md

@@ -59,7 +59,7 @@ Both SOURCE fixture sets and suites ship as `@hanamesh/dsh-app-host/catalog/suit
 DSH 首次安装或缺组件时，完全退出客户端后执行同一行，再重新打开：
 
 ```sh
-dsh plugin --profile desktop add --save-exact 'github:yzsnstotz/hanamesh-core#main' 'github:yzsnstotz/hanamesh-usage#main' 'github:yzsnstotz/hanamesh-plugin-app-host#main'
+dsh plugin --profile desktop add --save-exact '@hanamesh/core@0.3.21' '@hanamesh/usage@0.3.0-rc.6' '@hanamesh/dsh-app-host@0.6.14'
 ```
 
 套件版本范围、是否完整、候选来源及兼容/升级规则唯一属于 Core。App-host 只读物理安装版本，不能用它们推导兼容或安装许可；不自行读取 npm latest、计算组件组合、校验候选宿主 peers 或持有 Core 的版本范围副本。普通安装/卸载接口继续拒绝套件包。

package/docs/LICENSES.json

@@ -1,7 +1,7 @@
 {
   "package": {
     "name": "@hanamesh/dsh-app-host",
-    "version": "0.6.12",
+    "version": "0.6.14",
     "license": "SEE LICENSE IN LICENSE",
     "source": "git+https://github.com/yzsnstotz/hanamesh-plugin-app-host.git",
     "purpose": "Application ownership, view leases, Router forwarding, and application library for official DSH"

package/docs/PROVENANCE.json

@@ -1,6 +1,6 @@
 {
   "currentCandidate": {
-    "version": "0.6.12",
+    "version": "0.6.14",
     "dshTarget": ">=0.2.0-rc.2 <0.3.0-0 || >=0.2.1-0 <0.3.0-0",
     "vendorSha256VerifiedAtBuild": false,
     "libProvisionDistribution": "随包分发、源仓不变; bundleDependencies; original LICENSE retained, no relicensing",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hanamesh/dsh-app-host",
-  "version": "0.6.12",
+  "version": "0.6.14",
   "description": "HanaMesh application ownership, durable view leases, and application library for official DSH 0.2.x",
   "type": "module",
   "license": "SEE LICENSE IN LICENSE",

package/schemas/catalog-provider-page.schema.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "urn:dsh-community-market:schema:catalog-provider-page:1.1.0",
   "title": "DSH Community Market standard provider page",
-  "description": "The untrusted page JSON returned by one standard HTTPS catalog endpoint. Only schemaVersion, items, and page are required. A page may contain at most 200 items and must also respect the effective requested or declared default limit. Host-observed provenance is intentionally absent and is injected only after validation.",
+  "description": "Default catalog-major-1 or explicit HanaMesh view. Both branches reject unknown fields; cross-field suite identity/version checks also run in the consumer.",
   "type": "object",
   "additionalProperties": false,
   "required": [
@@ -13,7 +13,7 @@
   "properties": {
     "schemaVersion": {
       "type": "string",
-      "pattern": "^1\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)(?:-(?:0|[1-9][0-9]*|[0-9]*[A-Za-z-][0-9A-Za-z-]*)(?:\\.(?:0|[1-9][0-9]*|[0-9]*[A-Za-z-][0-9A-Za-z-]*))*)?(?:\\+[0-9A-Za-z-]+(?:\\.[0-9A-Za-z-]+)*)?$(?![\\s\\S])",
+      "pattern": "^(?:hanamesh\\.catalog\\.v1|1\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)(?:-(?:0|[1-9][0-9]*|[0-9]*[A-Za-z-][0-9A-Za-z-]*)(?:\\.(?:0|[1-9][0-9]*|[0-9]*[A-Za-z-][0-9A-Za-z-]*))*)?(?:\\+[0-9A-Za-z-]+(?:\\.[0-9A-Za-z-]+)*)?)$(?![\\s\\S])",
       "description": "Valid SemVer with major 1. Minor and patch additions preserve the validated shape; other majors are refused."
     },
     "generatedAt": {
@@ -28,9 +28,7 @@
     "items": {
       "type": "array",
       "maxItems": 200,
-      "items": {
-        "$ref": "#/$defs/item"
-      }
+      "items": {}
     },
     "page": {
       "$ref": "#/$defs/page"
@@ -373,6 +371,883 @@
           ]
         }
       ]
+    },
+    "legacyPage": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "schemaVersion",
+        "items",
+        "page"
+      ],
+      "properties": {
+        "schemaVersion": {
+          "type": "string",
+          "pattern": "^1\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)(?:-(?:0|[1-9][0-9]*|[0-9]*[A-Za-z-][0-9A-Za-z-]*)(?:\\.(?:0|[1-9][0-9]*|[0-9]*[A-Za-z-][0-9A-Za-z-]*))*)?(?:\\+[0-9A-Za-z-]+(?:\\.[0-9A-Za-z-]+)*)?$(?![\\s\\S])",
+          "description": "Valid SemVer with major 1. Minor and patch additions preserve the validated shape; other majors are refused."
+        },
+        "generatedAt": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "revision": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 160
+        },
+        "items": {
+          "type": "array",
+          "maxItems": 200,
+          "items": {
+            "$ref": "#/$defs/item"
+          }
+        },
+        "page": {
+          "$ref": "#/$defs/page"
+        }
+      }
+    },
+    "hana_identifier": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 160,
+      "pattern": "^[A-Za-z0-9][A-Za-z0-9._:/@+-]*$"
+    },
+    "hana_httpsUri": {
+      "type": "string",
+      "format": "uri",
+      "maxLength": 2048,
+      "pattern": "^https://(?![^/?#]*@)(?![^/?#]*:)[^/?#]+(?:[/?#].*)?$"
+    },
+    "hana_plainText": {
+      "type": "string",
+      "pattern": "^[^\\u0000-\\u001F\\u007F-\\u009F\\u202A-\\u202E\\u2066-\\u2069]*$"
+    },
+    "hana_page": {
+      "oneOf": [
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "maxProperties": 0
+        },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "nextCursor",
+            "total"
+          ],
+          "properties": {
+            "nextCursor": {
+              "type": "string",
+              "minLength": 1,
+              "maxLength": 2048
+            },
+            "total": {
+              "type": "integer",
+              "minimum": 0
+            }
+          }
+        }
+      ]
+    },
+    "hana_repository": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "url"
+      ],
+      "properties": {
+        "url": {
+          "$ref": "#/$defs/hana_httpsUri",
+          "description": "GitHub repository only; runtime validates hostname and owner/repository path."
+        },
+        "subdirectory": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 240,
+          "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))[^\\\\]+$"
+        }
+      }
+    },
+    "hana_package": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "registry",
+        "name"
+      ],
+      "properties": {
+        "registry": {
+          "const": "npm"
+        },
+        "name": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 214,
+          "pattern": "^(?:@[a-z0-9][a-z0-9._-]*/)?[a-z0-9][a-z0-9._-]*$"
+        }
+      }
+    },
+    "hana_publisher": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "name"
+      ],
+      "properties": {
+        "name": {
+          "allOf": [
+            {
+              "$ref": "#/$defs/hana_plainText"
+            },
+            {
+              "type": "string",
+              "minLength": 1,
+              "maxLength": 120
+            }
+          ]
+        },
+        "url": {
+          "$ref": "#/$defs/hana_httpsUri"
+        }
+      }
+    },
+    "hana_categoryId": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 64,
+      "pattern": "^[a-z0-9][a-z0-9._:-]*$"
+    },
+    "hana_item": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "id",
+        "name",
+        "displayName",
+        "summary",
+        "itemId",
+        "packageName",
+        "catalogKind",
+        "source"
+      ],
+      "properties": {
+        "id": {
+          "$ref": "#/$defs/hana_identifier"
+        },
+        "name": {
+          "allOf": [
+            {
+              "$ref": "#/$defs/hana_plainText"
+            },
+            {
+              "type": "string",
+              "minLength": 1,
+              "maxLength": 160
+            }
+          ]
+        },
+        "displayName": {
+          "allOf": [
+            {
+              "$ref": "#/$defs/hana_plainText"
+            },
+            {
+              "type": "string",
+              "minLength": 1,
+              "maxLength": 120
+            }
+          ]
+        },
+        "summary": {
+          "allOf": [
+            {
+              "$ref": "#/$defs/hana_plainText"
+            },
+            {
+              "type": "string",
+              "maxLength": 1000
+            }
+          ]
+        },
+        "description": {
+          "allOf": [
+            {
+              "$ref": "#/$defs/hana_plainText"
+            },
+            {
+              "type": "string",
+              "maxLength": 5000
+            }
+          ]
+        },
+        "homepage": {
+          "$ref": "#/$defs/hana_httpsUri"
+        },
+        "latestVersion": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 64
+        },
+        "license": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 80
+        },
+        "categories": {
+          "type": "array",
+          "maxItems": 32,
+          "uniqueItems": true,
+          "items": {
+            "$ref": "#/$defs/hana_categoryId"
+          }
+        },
+        "keywords": {
+          "type": "array",
+          "maxItems": 64,
+          "uniqueItems": true,
+          "items": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 64
+          }
+        },
+        "repository": {
+          "$ref": "#/$defs/hana_repository"
+        },
+        "package": {
+          "$ref": "#/$defs/hana_package"
+        },
+        "publisher": {
+          "$ref": "#/$defs/hana_publisher"
+        },
+        "updatedAt": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "itemId": {
+          "$ref": "#/$defs/hana_identifier"
+        },
+        "packageName": {
+          "anyOf": [
+            {
+              "type": "null"
+            },
+            {
+              "type": "string",
+              "minLength": 1,
+              "maxLength": 214,
+              "pattern": "^(?:@[a-z0-9][a-z0-9._-]*/)?[a-z0-9][a-z0-9._-]*$"
+            }
+          ]
+        },
+        "catalogKind": {
+          "enum": [
+            "application",
+            "plugin",
+            "entry"
+          ]
+        },
+        "source": {
+          "$ref": "#/$defs/hana_source"
+        },
+        "official": {
+          "type": "boolean",
+          "description": "Mirrored official marker from the source; absent when unknown. Does not grant authorization."
+        },
+        "suite": {
+          "$ref": "#/$defs/hana_suite"
+        }
+      },
+      "allOf": [
+        {
+          "if": {
+            "properties": {
+              "packageName": {
+                "type": "null"
+              }
+            }
+          },
+          "then": {
+            "not": {
+              "required": [
+                "package"
+              ]
+            }
+          },
+          "else": {
+            "required": [
+              "package"
+            ]
+          }
+        }
+      ]
+    },
+    "hana_sourceLink": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "sourceId",
+        "sourceRef",
+        "sourceUrl",
+        "firstSeenAt",
+        "lastSeenAt"
+      ],
+      "properties": {
+        "sourceId": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 120,
+          "pattern": "^[^\\u0000-\\u001F\\u007F-\\u009F\\u202A-\\u202E\\u2066-\\u2069]*$"
+        },
+        "sourceRef": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 512,
+          "pattern": "^[^\\u0000-\\u001F\\u007F-\\u009F\\u202A-\\u202E\\u2066-\\u2069]*$"
+        },
+        "sourceUrl": {
+          "$ref": "#/$defs/hana_httpsUri"
+        },
+        "firstSeenAt": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "lastSeenAt": {
+          "type": "string",
+          "format": "date-time"
+        }
+      }
+    },
+    "hana_source": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "sourceId",
+        "sourceRef",
+        "sourceLinks"
+      ],
+      "properties": {
+        "sourceId": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 120,
+          "pattern": "^[^\\u0000-\\u001F\\u007F-\\u009F\\u202A-\\u202E\\u2066-\\u2069]*$"
+        },
+        "sourceRef": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 512,
+          "pattern": "^[^\\u0000-\\u001F\\u007F-\\u009F\\u202A-\\u202E\\u2066-\\u2069]*$"
+        },
+        "sourceLinks": {
+          "type": "array",
+          "maxItems": 500,
+          "items": {
+            "$ref": "#/$defs/hana_sourceLink"
+          }
+        }
+      }
+    },
+    "hana_suite": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "schemaVersion",
+        "id",
+        "role",
+        "component",
+        "canonicalHanaId",
+        "installable"
+      ],
+      "properties": {
+        "schemaVersion": {
+          "const": 1
+        },
+        "id": {
+          "const": "hanamesh"
+        },
+        "role": {
+          "enum": [
+            "suite",
+            "component",
+            "client-only"
+          ]
+        },
+        "component": {
+          "enum": [
+            "core",
+            "usage",
+            "app-host",
+            "brand"
+          ]
+        },
+        "canonicalHanaId": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "pattern": "^[a-f0-9]{8}-[a-f0-9]{4}-[1-8][a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}$"
+        },
+        "installable": {
+          "type": "boolean"
+        },
+        "installTargets": {
+          "type": "array",
+          "minItems": 3,
+          "maxItems": 3,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "component",
+              "npmPackageName",
+              "githubRepo",
+              "source"
+            ],
+            "properties": {
+              "component": {
+                "enum": [
+                  "core",
+                  "usage",
+                  "app-host"
+                ]
+              },
+              "npmPackageName": {
+                "type": "string",
+                "maxLength": 214,
+                "pattern": "^(?:@[a-z0-9-]+/)?[a-z0-9][a-z0-9._-]*$"
+              },
+              "githubRepo": {
+                "type": "string",
+                "pattern": "^[A-Za-z0-9.-]+/[A-Za-z0-9._-]+$"
+              },
+              "source": {
+                "oneOf": [
+                  {
+                    "type": "object",
+                    "additionalProperties": false,
+                    "required": [
+                      "source",
+                      "repo",
+                      "ref"
+                    ],
+                    "properties": {
+                      "source": {
+                        "const": "github"
+                      },
+                      "repo": {
+                        "type": "string"
+                      },
+                      "ref": {
+                        "type": "string",
+                        "pattern": "^[a-f0-9]{40}$"
+                      }
+                    }
+                  },
+                  {
+                    "type": "object",
+                    "additionalProperties": false,
+                    "required": [
+                      "source",
+                      "name",
+                      "version"
+                    ],
+                    "properties": {
+                      "source": {
+                        "const": "npm"
+                      },
+                      "name": {
+                        "type": "string",
+                        "maxLength": 214,
+                        "pattern": "^(?:@[a-z0-9-]+/)?[a-z0-9][a-z0-9._-]*$"
+                      },
+                      "version": {
+                        "$ref": "#/$defs/hana_semver"
+                      }
+                    }
+                  }
+                ]
+              },
+              "version": {
+                "$ref": "#/$defs/hana_semver"
+              }
+            },
+            "allOf": [
+              {
+                "$ref": "#/$defs/hana_officialSuiteIdentity"
+              },
+              {
+                "if": {
+                  "properties": {
+                    "source": {
+                      "properties": {
+                        "source": {
+                          "const": "npm"
+                        }
+                      },
+                      "type": "object"
+                    }
+                  },
+                  "type": "object"
+                },
+                "then": {
+                  "required": [
+                    "version"
+                  ]
+                }
+              }
+            ]
+          }
+        },
+        "distributionVersion": {
+          "$ref": "#/$defs/hana_semver"
+        },
+        "components": {
+          "type": "array",
+          "minItems": 4,
+          "maxItems": 4,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "component",
+              "npmPackageName",
+              "githubRepo",
+              "version"
+            ],
+            "properties": {
+              "component": {
+                "enum": [
+                  "core",
+                  "usage",
+                  "app-host",
+                  "brand"
+                ]
+              },
+              "npmPackageName": {
+                "type": "string"
+              },
+              "githubRepo": {
+                "type": "string"
+              },
+              "version": {
+                "$ref": "#/$defs/hana_semver"
+              }
+            },
+            "allOf": [
+              {
+                "$ref": "#/$defs/hana_officialSuiteIdentity"
+              }
+            ]
+          },
+          "allOf": [
+            {
+              "contains": {
+                "type": "object",
+                "required": [
+                  "component"
+                ],
+                "properties": {
+                  "component": {
+                    "const": "core"
+                  }
+                }
+              }
+            },
+            {
+              "contains": {
+                "type": "object",
+                "required": [
+                  "component"
+                ],
+                "properties": {
+                  "component": {
+                    "const": "usage"
+                  }
+                }
+              }
+            },
+            {
+              "contains": {
+                "type": "object",
+                "required": [
+                  "component"
+                ],
+                "properties": {
+                  "component": {
+                    "const": "app-host"
+                  }
+                }
+              }
+            },
+            {
+              "contains": {
+                "type": "object",
+                "required": [
+                  "component"
+                ],
+                "properties": {
+                  "component": {
+                    "const": "brand"
+                  }
+                }
+              }
+            }
+          ]
+        },
+        "agentPlugins": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 2,
+          "uniqueItems": true,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "host",
+              "pluginName",
+              "pluginId",
+              "marketplaceUrl",
+              "version"
+            ],
+            "properties": {
+              "host": {
+                "enum": [
+                  "claude",
+                  "codex"
+                ]
+              },
+              "pluginName": {
+                "type": "string",
+                "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{0,119}$"
+              },
+              "pluginId": {
+                "type": "string",
+                "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{0,119}@[A-Za-z0-9][A-Za-z0-9._-]{0,119}$"
+              },
+              "marketplaceUrl": {
+                "type": "string",
+                "format": "uri",
+                "pattern": "^https://"
+              },
+              "version": {
+                "$ref": "#/$defs/hana_semver"
+              }
+            }
+          }
+        }
+      },
+      "description": "Validated Indexer declaration. Optional versions are provider-supplied SemVer, never inferred from another component. Worker enforces role/component relationships, canonical self UUID for installation, distinct official components, source.repo=githubRepo and matching component/target versions when both are supplied. npm targets require source.name=npmPackageName and source.version=target.version=component.version; agent targets bind the distribution version. Cross-field checks also run in the Worker.",
+      "allOf": [
+        {
+          "if": {
+            "anyOf": [
+              {
+                "required": [
+                  "components"
+                ]
+              },
+              {
+                "required": [
+                  "distributionVersion"
+                ]
+              },
+              {
+                "required": [
+                  "agentPlugins"
+                ]
+              }
+            ]
+          },
+          "then": {
+            "properties": {
+              "role": {
+                "const": "suite"
+              },
+              "component": {
+                "const": "usage"
+              },
+              "installable": {
+                "const": true
+              }
+            }
+          }
+        }
+      ]
+    },
+    "hana_officialSuiteIdentity": {
+      "description": "Public Indexer official component identities; shared by Web validation for mirrored rows and install targets. Ref commits remain provider supplied. Scoped identities and their explicit historical npm names share the same component/GitHub binding.",
+      "oneOf": [
+        {
+          "type": "object",
+          "required": [
+            "npmPackageName",
+            "githubRepo"
+          ],
+          "properties": {
+            "component": {
+              "const": "core"
+            },
+            "npmPackageName": {
+              "enum": [
+                "@hanamesh/core",
+                "hanamesh-core"
+              ]
+            },
+            "githubRepo": {
+              "const": "yzsnstotz/hanamesh-core"
+            },
+            "suite": {
+              "type": "object",
+              "properties": {
+                "component": {
+                  "const": "core"
+                }
+              }
+            }
+          }
+        },
+        {
+          "type": "object",
+          "required": [
+            "npmPackageName",
+            "githubRepo"
+          ],
+          "properties": {
+            "component": {
+              "const": "usage"
+            },
+            "npmPackageName": {
+              "enum": [
+                "@hanamesh/usage",
+                "hanamesh-usage"
+              ]
+            },
+            "githubRepo": {
+              "const": "yzsnstotz/hanamesh-usage"
+            },
+            "suite": {
+              "type": "object",
+              "properties": {
+                "component": {
+                  "const": "usage"
+                }
+              }
+            }
+          }
+        },
+        {
+          "type": "object",
+          "required": [
+            "npmPackageName",
+            "githubRepo"
+          ],
+          "properties": {
+            "component": {
+              "const": "app-host"
+            },
+            "npmPackageName": {
+              "enum": [
+                "@hanamesh/dsh-app-host"
+              ]
+            },
+            "githubRepo": {
+              "const": "yzsnstotz/hanamesh-plugin-app-host"
+            },
+            "suite": {
+              "type": "object",
+              "properties": {
+                "component": {
+                  "const": "app-host"
+                }
+              }
+            }
+          }
+        },
+        {
+          "type": "object",
+          "required": [
+            "npmPackageName",
+            "githubRepo"
+          ],
+          "properties": {
+            "component": {
+              "const": "brand"
+            },
+            "npmPackageName": {
+              "enum": [
+                "@hanamesh/brand",
+                "hanamesh-brand"
+              ]
+            },
+            "githubRepo": {
+              "const": "yzsnstotz/hanamesh-brand"
+            },
+            "suite": {
+              "type": "object",
+              "properties": {
+                "component": {
+                  "const": "brand"
+                }
+              }
+            }
+          }
+        }
+      ]
+    },
+    "hana_semver": {
+      "type": "string",
+      "maxLength": 128,
+      "pattern": "^(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)(?:-(?:0|[1-9][0-9]*|[0-9]*[A-Za-z-][0-9A-Za-z-]*)(?:\\.(?:0|[1-9][0-9]*|[0-9]*[A-Za-z-][0-9A-Za-z-]*))*)?(?:\\+[0-9A-Za-z-]+(?:\\.[0-9A-Za-z-]+)*)?$(?![\\s\\S])"
+    },
+    "hanaPage": {
+      "title": "HanaMesh opt-in full catalog page",
+      "description": "C-WEB-CATALOG version 1 public allowlist. Runtime additionally enforces id=itemId, npm package equality, classification, source safety and actual UTF-8 response byte limits.",
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "schemaVersion",
+        "items",
+        "page"
+      ],
+      "properties": {
+        "schemaVersion": {
+          "const": "hanamesh.catalog.v1"
+        },
+        "generatedAt": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "items": {
+          "type": "array",
+          "maxItems": 200,
+          "items": {
+            "$ref": "#/$defs/hana_item"
+          }
+        },
+        "page": {
+          "$ref": "#/$defs/hana_page"
+        }
+      }
+    }
+  },
+  "allOf": [
+    {
+      "if": {
+        "properties": {
+          "schemaVersion": {
+            "const": "hanamesh.catalog.v1"
+          }
+        }
+      },
+      "then": {
+        "$ref": "#/$defs/hanaPage"
+      },
+      "else": {
+        "$ref": "#/$defs/legacyPage"
+      }
     }
-  }
+  ]
 }