@hanzo/ui 8.0.26 → 8.0.28

package/dist/oss/catalog.d.ts

@@ -65,3 +65,4 @@ export declare function fetchOssApps(base: string, force?: boolean): Promise<Oss
  * "nothing to show", and an optional asset must not fail a whole page.
  */
 export declare function fetchCompose(base: string, id: string): Promise<string | null>;
+//# sourceMappingURL=catalog.d.ts.map

package/dist/oss/catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../src/oss/catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,0FAA0F;AAC1F,MAAM,MAAM,MAAM,GAAG;IACnB,oFAAoF;IACpF,EAAE,EAAE,MAAM,CAAA;IACV,mCAAmC;IACnC,IAAI,EAAE,MAAM,CAAA;IACZ,4BAA4B;IAC5B,WAAW,EAAE,MAAM,CAAA;IACnB,yEAAyE;IACzE,OAAO,EAAE,MAAM,CAAA;IACf,iFAAiF;IACjF,IAAI,EAAE,MAAM,CAAA;IACZ,iFAAiF;IACjF,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,6DAA6D;IAC7D,KAAK,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAC5D,CAAA;AAYD,sFAAsF;AACtF,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAmB3D;AAED,4FAA4F;AAC5F,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,EAAE,CAsB3D;AAED,kEAAkE;AAClE,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED;;;GAGG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGhE;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQ3D;AAED,oFAAoF;AACpF,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEpD;AASD;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,UAAQ,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAyBjF;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAYnF"}

package/dist/oss/catalog.js

@@ -0,0 +1,165 @@
+'use client';/**
+ * The OSS App Store catalog — the shared client for the 1000+-app one-click
+ * open-source catalog served as a flat JSON array at `<base>/meta.json`, with per-app
+ * blueprint assets under `<base>/blueprints/<id>/`.
+ *
+ * One catalog, several surfaces: the console App Store, platform.hanzo.ai, and the
+ * public gallery at oss.hanzo.ai. They previously each carried their own copy of the
+ * shape, the normalizer and the URL builders, which is how three surfaces come to
+ * disagree about the same catalog row. This is the one implementation.
+ *
+ * The catalog is a PUBLIC CDN with open CORS, so a browser fetches it DIRECTLY — no
+ * BFF, no `/v1` proxy — which is why this works in the go:embed console where the
+ * Next reverse-proxies are pruned. The base URL is INJECTED by the caller, so this
+ * module holds no config import and its normalizers + URL builders stay pure.
+ */
+const str = (v) => (typeof v === 'string' ? v : '');
+const strTrim = (v) => {
+    const s = str(v).trim();
+    return s ? s : undefined;
+};
+const strList = (v) => Array.isArray(v) ? v.map((x) => (typeof x === 'string' ? x.trim() : '')).filter((x) => x !== '') : [];
+const asRecord = (v) => v && typeof v === 'object' && !Array.isArray(v) ? v : {};
+/** Normalize one catalog record to an `OssApp` (drops a record with no id + name). */
+export function normalizeOssApp(raw) {
+    const r = asRecord(raw);
+    const id = str(r.id).trim();
+    const name = str(r.name).trim() || id;
+    if (!id || !name)
+        return null;
+    const links = asRecord(r.links);
+    return {
+        id,
+        name,
+        description: str(r.description).trim(),
+        version: str(r.version).trim() || 'latest',
+        logo: str(r.logo).trim(),
+        tags: strList(r.tags),
+        links: {
+            github: strTrim(links.github),
+            website: strTrim(links.website),
+            docs: strTrim(links.docs),
+        },
+    };
+}
+/** Normalize the catalog payload to the app list (bare array OR a `{data|apps|…}` wrap). */
+export function normalizeOssApps(payload) {
+    let arr = [];
+    if (Array.isArray(payload))
+        arr = payload;
+    else if (payload && typeof payload === 'object') {
+        for (const k of ['data', 'apps', 'templates', 'items', 'rows']) {
+            const v = payload[k];
+            if (Array.isArray(v)) {
+                arr = v;
+                break;
+            }
+        }
+    }
+    const out = [];
+    const seen = new Set();
+    for (const raw of arr) {
+        const app = normalizeOssApp(raw);
+        if (app && !seen.has(app.id)) {
+            seen.add(app.id);
+            out.push(app);
+        }
+    }
+    return out;
+}
+/** The per-app blueprint asset base: `<base>/blueprints/<id>`. */
+export function blueprintBase(base, id) {
+    return `${base.replace(/\/+$/, '')}/blueprints/${encodeURIComponent(id)}`;
+}
+/**
+ * The app's logo URL, or null when the entry carries no logo filename — a surface then
+ * renders its monogram fallback rather than a broken image.
+ */
+export function logoUrl(base, app) {
+    if (!app.logo)
+        return null;
+    return `${blueprintBase(base, app.id)}/${app.logo}`;
+}
+/**
+ * Derive `owner/repo` from a GitHub URL — the maker identity, since the catalog
+ * carries no author field. Returns null for a non-GitHub / malformed URL.
+ */
+export function ownerRepo(githubUrl) {
+    if (!githubUrl)
+        return null;
+    const m = githubUrl.match(/github\.com\/([^/\s]+)\/([^/\s#?]+)/i);
+    if (!m)
+        return null;
+    const owner = m[1];
+    const repo = m[2].replace(/\.git$/i, '');
+    if (!owner || !repo)
+        return null;
+    return `${owner}/${repo}`;
+}
+/** An app is one-click deployable when it carries a buildable source (its repo). */
+export function hasDeploySource(app) {
+    return Boolean(app.links.github);
+}
+// ── Live fetch (the one impure surface) ──────────────────────────────────────
+//
+// Cached per base URL so several mounts share ONE ~500 KB fetch. An in-flight fetch is
+// de-duped (concurrent callers await the same promise); a failure is not cached.
+const cache = new Map();
+const inflight = new Map();
+/**
+ * Fetch + normalize the catalog from `<base>/meta.json`. Cross-origin and
+ * unauthenticated (public CDN); throws on a non-2xx or parse failure so the caller can
+ * show an honest error state. Cached on success; `force` bypasses for a manual refresh.
+ */
+export async function fetchOssApps(base, force = false) {
+    const key = base.replace(/\/+$/, '');
+    if (!force) {
+        const hit = cache.get(key);
+        if (hit)
+            return hit;
+        const pending = inflight.get(key);
+        if (pending)
+            return pending;
+    }
+    const run = (async () => {
+        const res = await fetch(`${key}/meta.json`, {
+            headers: { Accept: 'application/json' },
+            // Public catalog — no credentials, so a session cookie never leaks cross-origin.
+            credentials: 'omit',
+        });
+        if (!res.ok)
+            throw new Error(`Catalog unavailable (HTTP ${res.status})`);
+        const apps = normalizeOssApps(await res.json());
+        cache.set(key, apps);
+        return apps;
+    })();
+    inflight.set(key, run);
+    try {
+        return await run;
+    }
+    finally {
+        inflight.delete(key);
+    }
+}
+/**
+ * Fetch one app's `docker-compose.yml` as raw text, or null when the entry publishes
+ * none. A 404 is a NORMAL answer for a large community catalog — not every blueprint
+ * ships compose — so this never throws: a detail view treats an absent blueprint as
+ * "nothing to show", and an optional asset must not fail a whole page.
+ */
+export async function fetchCompose(base, id) {
+    try {
+        const res = await fetch(`${blueprintBase(base, id)}/docker-compose.yml`, {
+            headers: { Accept: 'text/plain' },
+            credentials: 'omit',
+        });
+        if (!res.ok)
+            return null;
+        const text = await res.text();
+        return text.trim() ? text : null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=catalog.js.map

package/dist/oss/catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../src/oss/catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAoBH,MAAM,GAAG,GAAG,CAAC,CAAU,EAAU,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;AACpE,MAAM,OAAO,GAAG,CAAC,CAAU,EAAsB,EAAE;IACjD,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACvB,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AAC1B,CAAC,CAAA;AACD,MAAM,OAAO,GAAG,CAAC,CAAU,EAAY,EAAE,CACvC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AACvG,MAAM,QAAQ,GAAG,CAAC,CAAU,EAA2B,EAAE,CACvD,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAA6B,CAAC,CAAC,CAAC,EAAE,CAAA;AAEvF,sFAAsF;AACtF,MAAM,UAAU,eAAe,CAAC,GAAY;IAC1C,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAA;IACvB,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IAC3B,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAA;IACrC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IAC7B,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;IAC/B,OAAO;QACL,EAAE;QACF,IAAI;QACJ,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE;QACtC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,IAAI,QAAQ;QAC1C,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE;QACxB,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;QACrB,KAAK,EAAE;YACL,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;YAC7B,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;YAC/B,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;SAC1B;KACF,CAAA;AACH,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAC/C,IAAI,GAAG,GAAc,EAAE,CAAA;IACvB,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,GAAG,GAAG,OAAO,CAAA;SACpC,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChD,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;YAC/D,MAAM,CAAC,GAAI,OAAmC,CAAC,CAAC,CAAC,CAAA;YACjD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrB,GAAG,GAAG,CAAC,CAAA;gBACP,MAAK;YACP,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,CAAA;QAChC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YAChB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACf,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,EAAU;IACpD,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAA;AAC3E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,GAAW;IAC/C,IAAI,CAAC,GAAG,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IAC1B,OAAO,GAAG,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,CAAA;AACrD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,SAAkB;IAC1C,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAA;IAC3B,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAA;IACjE,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IACnB,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAClB,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;IACxC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IAChC,OAAO,GAAG,KAAK,IAAI,IAAI,EAAE,CAAA;AAC3B,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;AAClC,CAAC;AAED,gFAAgF;AAChF,EAAE;AACF,uFAAuF;AACvF,iFAAiF;AACjF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoB,CAAA;AACzC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA6B,CAAA;AAErD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,KAAK,GAAG,KAAK;IAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACpC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC1B,IAAI,GAAG;YAAE,OAAO,GAAG,CAAA;QACnB,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACjC,IAAI,OAAO;YAAE,OAAO,OAAO,CAAA;IAC7B,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE;QACtB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,YAAY,EAAE;YAC1C,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;YACvC,iFAAiF;YACjF,WAAW,EAAE,MAAM;SACpB,CAAC,CAAA;QACF,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,CAAC,MAAM,GAAG,CAAC,CAAA;QACxE,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;QAC/C,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QACpB,OAAO,IAAI,CAAA;IACb,CAAC,CAAC,EAAE,CAAA;IACJ,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACtB,IAAI,CAAC;QACH,OAAO,MAAM,GAAG,CAAA;IAClB,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IACtB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,EAAU;IACzD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC,qBAAqB,EAAE;YACvE,OAAO,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE;YACjC,WAAW,EAAE,MAAM;SACpB,CAAC,CAAA;QACF,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAA;QACxB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QAC7B,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC"}

package/dist/oss.cjs

@@ -1,189 +1,28 @@
-'use strict';
-
-// src/oss/catalog.ts
-var str = (v) => typeof v === "string" ? v : "";
-var strTrim = (v) => {
-  const s = str(v).trim();
-  return s ? s : void 0;
+'use client';"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
-var strList = (v) => Array.isArray(v) ? v.map((x) => typeof x === "string" ? x.trim() : "").filter((x) => x !== "") : [];
-var asRecord = (v) => v && typeof v === "object" && !Array.isArray(v) ? v : {};
-function normalizeOssApp(raw) {
-  const r = asRecord(raw);
-  const id = str(r.id).trim();
-  const name = str(r.name).trim() || id;
-  if (!id || !name) return null;
-  const links = asRecord(r.links);
-  return {
-    id,
-    name,
-    description: str(r.description).trim(),
-    version: str(r.version).trim() || "latest",
-    logo: str(r.logo).trim(),
-    tags: strList(r.tags),
-    links: {
-      github: strTrim(links.github),
-      website: strTrim(links.website),
-      docs: strTrim(links.docs)
-    }
-  };
-}
-function normalizeOssApps(payload) {
-  let arr = [];
-  if (Array.isArray(payload)) arr = payload;
-  else if (payload && typeof payload === "object") {
-    for (const k of ["data", "apps", "templates", "items", "rows"]) {
-      const v = payload[k];
-      if (Array.isArray(v)) {
-        arr = v;
-        break;
-      }
-    }
-  }
-  const out = [];
-  const seen = /* @__PURE__ */ new Set();
-  for (const raw of arr) {
-    const app = normalizeOssApp(raw);
-    if (app && !seen.has(app.id)) {
-      seen.add(app.id);
-      out.push(app);
-    }
-  }
-  return out;
-}
-function blueprintBase(base, id) {
-  return `${base.replace(/\/+$/, "")}/blueprints/${encodeURIComponent(id)}`;
-}
-function logoUrl(base, app) {
-  if (!app.logo) return null;
-  return `${blueprintBase(base, app.id)}/${app.logo}`;
-}
-function ownerRepo(githubUrl) {
-  if (!githubUrl) return null;
-  const m = githubUrl.match(/github\.com\/([^/\s]+)\/([^/\s#?]+)/i);
-  if (!m) return null;
-  const owner = m[1];
-  const repo = m[2].replace(/\.git$/i, "");
-  if (!owner || !repo) return null;
-  return `${owner}/${repo}`;
-}
-function hasDeploySource(app) {
-  return Boolean(app.links.github);
-}
-var cache = /* @__PURE__ */ new Map();
-var inflight = /* @__PURE__ */ new Map();
-async function fetchOssApps(base, force = false) {
-  const key = base.replace(/\/+$/, "");
-  if (!force) {
-    const hit = cache.get(key);
-    if (hit) return hit;
-    const pending = inflight.get(key);
-    if (pending) return pending;
-  }
-  const run = (async () => {
-    const res = await fetch(`${key}/meta.json`, {
-      headers: { Accept: "application/json" },
-      // Public catalog — no credentials, so a session cookie never leaks cross-origin.
-      credentials: "omit"
-    });
-    if (!res.ok) throw new Error(`Catalog unavailable (HTTP ${res.status})`);
-    const apps = normalizeOssApps(await res.json());
-    cache.set(key, apps);
-    return apps;
-  })();
-  inflight.set(key, run);
-  try {
-    return await run;
-  } finally {
-    inflight.delete(key);
-  }
-}
-async function fetchCompose(base, id) {
-  try {
-    const res = await fetch(`${blueprintBase(base, id)}/docker-compose.yml`, {
-      headers: { Accept: "text/plain" },
-      credentials: "omit"
-    });
-    if (!res.ok) return null;
-    const text = await res.text();
-    return text.trim() ? text : null;
-  } catch {
-    return null;
-  }
-}
-
-// src/oss/blueprint.ts
-var indent = (line) => line.length - line.trimStart().length;
-function parseBlueprint(yaml) {
-  const lines = String(yaml ?? "").split(/\r?\n/);
-  const services = [];
-  const env = /* @__PURE__ */ new Set();
-  let servicesAt = -1;
-  let current = null;
-  let currentAt = -1;
-  let listKey = null;
-  let listAt = -1;
-  for (const raw of lines) {
-    const line = raw.replace(/\t/g, " ");
-    const trimmed = line.trim();
-    if (!trimmed || trimmed.startsWith("#")) continue;
-    const col = indent(line);
-    if (servicesAt < 0) {
-      if (/^services\s*:/.test(trimmed)) servicesAt = col;
-      continue;
-    }
-    if (col <= servicesAt) {
-      if (!/^services\s*:/.test(trimmed)) break;
-      continue;
-    }
-    if (current === null || col <= currentAt) {
-      const m = trimmed.match(/^([A-Za-z0-9._-]+)\s*:\s*$/);
-      if (m) {
-        current = { name: m[1], ports: [] };
-        currentAt = col;
-        services.push(current);
-        listKey = null;
-        continue;
-      }
-    }
-    if (!current) continue;
-    if (listKey && col > listAt && trimmed.startsWith("-")) {
-      const item = trimmed.replace(/^-\s*/, "").replace(/^["']|["']$/g, "");
-      if (listKey === "ports") current.ports.push(item);
-      else {
-        const key = item.split(/[=:]/)[0]?.trim();
-        if (key) env.add(key);
-      }
-      continue;
-    }
-    listKey = null;
-    const img = trimmed.match(/^image\s*:\s*(.+)$/);
-    if (img) {
-      current.image = img[1].trim().replace(/^["']|["']$/g, "");
-      continue;
-    }
-    if (/^ports\s*:/.test(trimmed)) {
-      listKey = "ports";
-      listAt = col;
-      continue;
-    }
-    if (/^environment\s*:/.test(trimmed)) {
-      listKey = "environment";
-      listAt = col;
-      continue;
-    }
-  }
-  return { services, env: [...env].sort((a, b) => a.localeCompare(b)) };
-}
-
-exports.blueprintBase = blueprintBase;
-exports.fetchCompose = fetchCompose;
-exports.fetchOssApps = fetchOssApps;
-exports.hasDeploySource = hasDeploySource;
-exports.logoUrl = logoUrl;
-exports.normalizeOssApp = normalizeOssApp;
-exports.normalizeOssApps = normalizeOssApps;
-exports.ownerRepo = ownerRepo;
-exports.parseBlueprint = parseBlueprint;
-//# sourceMappingURL=oss.cjs.map
-//# sourceMappingURL=oss.cjs.map
+Object.defineProperty(exports, "__esModule", { value: true });
+// @hanzo/ui/oss — the OSS App Store domain: the catalog client and the blueprint
+// reader shared by every surface that shows the same 1000+-app open-source catalog
+// (the console App Store, platform.hanzo.ai, and the public gallery at oss.hanzo.ai).
+//
+// It lives here because it was written three times before it lived anywhere: three
+// copies of one catalog's shape, normalizer, URL builders and compose reader, free to
+// drift until two surfaces disagreed about what a deploy would start.
+//
+// Pure and framework-free — no React, no config import — so it is usable from a React
+// console, a Next app, and a plain static page alike, and testable without a DOM.
+__exportStar(require("./oss/catalog.cjs"), exports);
+__exportStar(require("./oss/blueprint.cjs"), exports);

package/dist/oss.d.ts

@@ -1,2 +1,3 @@
-export * from './oss/catalog';
-export * from './oss/blueprint';
+export * from './oss/catalog.js';
+export * from './oss/blueprint.js';
+//# sourceMappingURL=oss.d.ts.map

package/dist/oss.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oss.d.ts","sourceRoot":"","sources":["../src/oss.ts"],"names":[],"mappings":"AAUA,cAAc,eAAe,CAAA;AAC7B,cAAc,iBAAiB,CAAA"}

package/dist/oss.js

@@ -1,179 +1,13 @@
-// src/oss/catalog.ts
-var str = (v) => typeof v === "string" ? v : "";
-var strTrim = (v) => {
-  const s = str(v).trim();
-  return s ? s : void 0;
-};
-var strList = (v) => Array.isArray(v) ? v.map((x) => typeof x === "string" ? x.trim() : "").filter((x) => x !== "") : [];
-var asRecord = (v) => v && typeof v === "object" && !Array.isArray(v) ? v : {};
-function normalizeOssApp(raw) {
-  const r = asRecord(raw);
-  const id = str(r.id).trim();
-  const name = str(r.name).trim() || id;
-  if (!id || !name) return null;
-  const links = asRecord(r.links);
-  return {
-    id,
-    name,
-    description: str(r.description).trim(),
-    version: str(r.version).trim() || "latest",
-    logo: str(r.logo).trim(),
-    tags: strList(r.tags),
-    links: {
-      github: strTrim(links.github),
-      website: strTrim(links.website),
-      docs: strTrim(links.docs)
-    }
-  };
-}
-function normalizeOssApps(payload) {
-  let arr = [];
-  if (Array.isArray(payload)) arr = payload;
-  else if (payload && typeof payload === "object") {
-    for (const k of ["data", "apps", "templates", "items", "rows"]) {
-      const v = payload[k];
-      if (Array.isArray(v)) {
-        arr = v;
-        break;
-      }
-    }
-  }
-  const out = [];
-  const seen = /* @__PURE__ */ new Set();
-  for (const raw of arr) {
-    const app = normalizeOssApp(raw);
-    if (app && !seen.has(app.id)) {
-      seen.add(app.id);
-      out.push(app);
-    }
-  }
-  return out;
-}
-function blueprintBase(base, id) {
-  return `${base.replace(/\/+$/, "")}/blueprints/${encodeURIComponent(id)}`;
-}
-function logoUrl(base, app) {
-  if (!app.logo) return null;
-  return `${blueprintBase(base, app.id)}/${app.logo}`;
-}
-function ownerRepo(githubUrl) {
-  if (!githubUrl) return null;
-  const m = githubUrl.match(/github\.com\/([^/\s]+)\/([^/\s#?]+)/i);
-  if (!m) return null;
-  const owner = m[1];
-  const repo = m[2].replace(/\.git$/i, "");
-  if (!owner || !repo) return null;
-  return `${owner}/${repo}`;
-}
-function hasDeploySource(app) {
-  return Boolean(app.links.github);
-}
-var cache = /* @__PURE__ */ new Map();
-var inflight = /* @__PURE__ */ new Map();
-async function fetchOssApps(base, force = false) {
-  const key = base.replace(/\/+$/, "");
-  if (!force) {
-    const hit = cache.get(key);
-    if (hit) return hit;
-    const pending = inflight.get(key);
-    if (pending) return pending;
-  }
-  const run = (async () => {
-    const res = await fetch(`${key}/meta.json`, {
-      headers: { Accept: "application/json" },
-      // Public catalog — no credentials, so a session cookie never leaks cross-origin.
-      credentials: "omit"
-    });
-    if (!res.ok) throw new Error(`Catalog unavailable (HTTP ${res.status})`);
-    const apps = normalizeOssApps(await res.json());
-    cache.set(key, apps);
-    return apps;
-  })();
-  inflight.set(key, run);
-  try {
-    return await run;
-  } finally {
-    inflight.delete(key);
-  }
-}
-async function fetchCompose(base, id) {
-  try {
-    const res = await fetch(`${blueprintBase(base, id)}/docker-compose.yml`, {
-      headers: { Accept: "text/plain" },
-      credentials: "omit"
-    });
-    if (!res.ok) return null;
-    const text = await res.text();
-    return text.trim() ? text : null;
-  } catch {
-    return null;
-  }
-}
-
-// src/oss/blueprint.ts
-var indent = (line) => line.length - line.trimStart().length;
-function parseBlueprint(yaml) {
-  const lines = String(yaml ?? "").split(/\r?\n/);
-  const services = [];
-  const env = /* @__PURE__ */ new Set();
-  let servicesAt = -1;
-  let current = null;
-  let currentAt = -1;
-  let listKey = null;
-  let listAt = -1;
-  for (const raw of lines) {
-    const line = raw.replace(/\t/g, " ");
-    const trimmed = line.trim();
-    if (!trimmed || trimmed.startsWith("#")) continue;
-    const col = indent(line);
-    if (servicesAt < 0) {
-      if (/^services\s*:/.test(trimmed)) servicesAt = col;
-      continue;
-    }
-    if (col <= servicesAt) {
-      if (!/^services\s*:/.test(trimmed)) break;
-      continue;
-    }
-    if (current === null || col <= currentAt) {
-      const m = trimmed.match(/^([A-Za-z0-9._-]+)\s*:\s*$/);
-      if (m) {
-        current = { name: m[1], ports: [] };
-        currentAt = col;
-        services.push(current);
-        listKey = null;
-        continue;
-      }
-    }
-    if (!current) continue;
-    if (listKey && col > listAt && trimmed.startsWith("-")) {
-      const item = trimmed.replace(/^-\s*/, "").replace(/^["']|["']$/g, "");
-      if (listKey === "ports") current.ports.push(item);
-      else {
-        const key = item.split(/[=:]/)[0]?.trim();
-        if (key) env.add(key);
-      }
-      continue;
-    }
-    listKey = null;
-    const img = trimmed.match(/^image\s*:\s*(.+)$/);
-    if (img) {
-      current.image = img[1].trim().replace(/^["']|["']$/g, "");
-      continue;
-    }
-    if (/^ports\s*:/.test(trimmed)) {
-      listKey = "ports";
-      listAt = col;
-      continue;
-    }
-    if (/^environment\s*:/.test(trimmed)) {
-      listKey = "environment";
-      listAt = col;
-      continue;
-    }
-  }
-  return { services, env: [...env].sort((a, b) => a.localeCompare(b)) };
-}
-
-export { blueprintBase, fetchCompose, fetchOssApps, hasDeploySource, logoUrl, normalizeOssApp, normalizeOssApps, ownerRepo, parseBlueprint };
-//# sourceMappingURL=oss.js.map
+'use client';// @hanzo/ui/oss — the OSS App Store domain: the catalog client and the blueprint
+// reader shared by every surface that shows the same 1000+-app open-source catalog
+// (the console App Store, platform.hanzo.ai, and the public gallery at oss.hanzo.ai).
+//
+// It lives here because it was written three times before it lived anywhere: three
+// copies of one catalog's shape, normalizer, URL builders and compose reader, free to
+// drift until two surfaces disagreed about what a deploy would start.
+//
+// Pure and framework-free — no React, no config import — so it is usable from a React
+// console, a Next app, and a plain static page alike, and testable without a DOM.
+export * from './oss/catalog.js';
+export * from './oss/blueprint.js';
 //# sourceMappingURL=oss.js.map

package/dist/oss.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/oss/catalog.ts","../src/oss/blueprint.ts"],"names":[],"mappings":";AAkCA,IAAM,MAAM,CAAC,CAAA,KAAwB,OAAO,CAAA,KAAM,WAAW,CAAA,GAAI,EAAA;AACjE,IAAM,OAAA,GAAU,CAAC,CAAA,KAAmC;AAClD,EAAA,MAAM,CAAA,GAAI,GAAA,CAAI,CAAC,CAAA,CAAE,IAAA,EAAK;AACtB,EAAA,OAAO,IAAI,CAAA,GAAI,MAAA;AACjB,CAAA;AACA,IAAM,OAAA,GAAU,CAAC,CAAA,KACf,KAAA,CAAM,OAAA,CAAQ,CAAC,CAAA,GAAI,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,KAAO,OAAO,MAAM,QAAA,GAAW,CAAA,CAAE,IAAA,EAAK,GAAI,EAAG,CAAA,CAAE,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,KAAM,EAAE,CAAA,GAAI,EAAC;AACtG,IAAM,QAAA,GAAW,CAAC,CAAA,KAChB,CAAA,IAAK,OAAO,CAAA,KAAM,QAAA,IAAY,CAAC,KAAA,CAAM,OAAA,CAAQ,CAAC,CAAA,GAAK,IAAgC,EAAC;AAG/E,SAAS,gBAAgB,GAAA,EAA6B;AAC3D,EAAA,MAAM,CAAA,GAAI,SAAS,GAAG,CAAA;AACtB,EAAA,MAAM,EAAA,GAAK,GAAA,CAAI,CAAA,CAAE,EAAE,EAAE,IAAA,EAAK;AAC1B,EAAA,MAAM,OAAO,GAAA,CAAI,CAAA,CAAE,IAAI,CAAA,CAAE,MAAK,IAAK,EAAA;AACnC,EAAA,IAAI,CAAC,EAAA,IAAM,CAAC,IAAA,EAAM,OAAO,IAAA;AACzB,EAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,CAAA,CAAE,KAAK,CAAA;AAC9B,EAAA,OAAO;AAAA,IACL,EAAA;AAAA,IACA,IAAA;AAAA,IACA,WAAA,EAAa,GAAA,CAAI,CAAA,CAAE,WAAW,EAAE,IAAA,EAAK;AAAA,IACrC,SAAS,GAAA,CAAI,CAAA,CAAE,OAAO,CAAA,CAAE,MAAK,IAAK,QAAA;AAAA,IAClC,IAAA,EAAM,GAAA,CAAI,CAAA,CAAE,IAAI,EAAE,IAAA,EAAK;AAAA,IACvB,IAAA,EAAM,OAAA,CAAQ,CAAA,CAAE,IAAI,CAAA;AAAA,IACpB,KAAA,EAAO;AAAA,MACL,MAAA,EAAQ,OAAA,CAAQ,KAAA,CAAM,MAAM,CAAA;AAAA,MAC5B,OAAA,EAAS,OAAA,CAAQ,KAAA,CAAM,OAAO,CAAA;AAAA,MAC9B,IAAA,EAAM,OAAA,CAAQ,KAAA,CAAM,IAAI;AAAA;AAC1B,GACF;AACF;AAGO,SAAS,iBAAiB,OAAA,EAA4B;AAC3D,EAAA,IAAI,MAAiB,EAAC;AACtB,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,OAAO,CAAA,EAAG,GAAA,GAAM,OAAA;AAAA,OAAA,IACzB,OAAA,IAAW,OAAO,OAAA,KAAY,QAAA,EAAU;AAC/C,IAAA,KAAA,MAAW,KAAK,CAAC,MAAA,EAAQ,QAAQ,WAAA,EAAa,OAAA,EAAS,MAAM,CAAA,EAAG;AAC9D,MAAA,MAAM,CAAA,GAAK,QAAoC,CAAC,CAAA;AAChD,MAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,CAAC,CAAA,EAAG;AACpB,QAAA,GAAA,GAAM,CAAA;AACN,QAAA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,EAAA,MAAM,MAAgB,EAAC;AACvB,EAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAC7B,EAAA,KAAA,MAAW,OAAO,GAAA,EAAK;AACrB,IAAA,MAAM,GAAA,GAAM,gBAAgB,GAAG,CAAA;AAC/B,IAAA,IAAI,OAAO,CAAC,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,EAAE,CAAA,EAAG;AAC5B,MAAA,IAAA,CAAK,GAAA,CAAI,IAAI,EAAE,CAAA;AACf,MAAA,GAAA,CAAI,KAAK,GAAG,CAAA;AAAA,IACd;AAAA,EACF;AACA,EAAA,OAAO,GAAA;AACT;AAGO,SAAS,aAAA,CAAc,MAAc,EAAA,EAAoB;AAC9D,EAAA,OAAO,CAAA,EAAG,KAAK,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAC,CAAA,YAAA,EAAe,kBAAA,CAAmB,EAAE,CAAC,CAAA,CAAA;AACzE;AAMO,SAAS,OAAA,CAAQ,MAAc,GAAA,EAA4B;AAChE,EAAA,IAAI,CAAC,GAAA,CAAI,IAAA,EAAM,OAAO,IAAA;AACtB,EAAA,OAAO,CAAA,EAAG,cAAc,IAAA,EAAM,GAAA,CAAI,EAAE,CAAC,CAAA,CAAA,EAAI,IAAI,IAAI,CAAA,CAAA;AACnD;AAMO,SAAS,UAAU,SAAA,EAAmC;AAC3D,EAAA,IAAI,CAAC,WAAW,OAAO,IAAA;AACvB,EAAA,MAAM,CAAA,GAAI,SAAA,CAAU,KAAA,CAAM,sCAAsC,CAAA;AAChE,EAAA,IAAI,CAAC,GAAG,OAAO,IAAA;AACf,EAAA,MAAM,KAAA,GAAQ,EAAE,CAAC,CAAA;AACjB,EAAA,MAAM,OAAO,CAAA,CAAE,CAAC,CAAA,CAAE,OAAA,CAAQ,WAAW,EAAE,CAAA;AACvC,EAAA,IAAI,CAAC,KAAA,IAAS,CAAC,IAAA,EAAM,OAAO,IAAA;AAC5B,EAAA,OAAO,CAAA,EAAG,KAAK,CAAA,CAAA,EAAI,IAAI,CAAA,CAAA;AACzB;AAGO,SAAS,gBAAgB,GAAA,EAAsB;AACpD,EAAA,OAAO,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,MAAM,CAAA;AACjC;AAMA,IAAM,KAAA,uBAAY,GAAA,EAAsB;AACxC,IAAM,QAAA,uBAAe,GAAA,EAA+B;AAOpD,eAAsB,YAAA,CAAa,IAAA,EAAc,KAAA,GAAQ,KAAA,EAA0B;AACjF,EAAA,MAAM,GAAA,GAAM,IAAA,CAAK,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AACnC,EAAA,IAAI,CAAC,KAAA,EAAO;AACV,IAAA,MAAM,GAAA,GAAM,KAAA,CAAM,GAAA,CAAI,GAAG,CAAA;AACzB,IAAA,IAAI,KAAK,OAAO,GAAA;AAChB,IAAA,MAAM,OAAA,GAAU,QAAA,CAAS,GAAA,CAAI,GAAG,CAAA;AAChC,IAAA,IAAI,SAAS,OAAO,OAAA;AAAA,EACtB;AACA,EAAA,MAAM,OAAO,YAAY;AACvB,IAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,CAAA,EAAG,GAAG,CAAA,UAAA,CAAA,EAAc;AAAA,MAC1C,OAAA,EAAS,EAAE,MAAA,EAAQ,kBAAA,EAAmB;AAAA;AAAA,MAEtC,WAAA,EAAa;AAAA,KACd,CAAA;AACD,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI,MAAM,IAAI,KAAA,CAAM,CAAA,0BAAA,EAA6B,GAAA,CAAI,MAAM,CAAA,CAAA,CAAG,CAAA;AACvE,IAAA,MAAM,IAAA,GAAO,gBAAA,CAAiB,MAAM,GAAA,CAAI,MAAM,CAAA;AAC9C,IAAA,KAAA,CAAM,GAAA,CAAI,KAAK,IAAI,CAAA;AACnB,IAAA,OAAO,IAAA;AAAA,EACT,CAAA,GAAG;AACH,EAAA,QAAA,CAAS,GAAA,CAAI,KAAK,GAAG,CAAA;AACrB,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,GAAA;AAAA,EACf,CAAA,SAAE;AACA,IAAA,QAAA,CAAS,OAAO,GAAG,CAAA;AAAA,EACrB;AACF;AAQA,eAAsB,YAAA,CAAa,MAAc,EAAA,EAAoC;AACnF,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,CAAA,EAAG,cAAc,IAAA,EAAM,EAAE,CAAC,CAAA,mBAAA,CAAA,EAAuB;AAAA,MACvE,OAAA,EAAS,EAAE,MAAA,EAAQ,YAAA,EAAa;AAAA,MAChC,WAAA,EAAa;AAAA,KACd,CAAA;AACD,IAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,OAAO,IAAA;AACpB,IAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,IAAA,OAAO,IAAA,CAAK,IAAA,EAAK,GAAI,IAAA,GAAO,IAAA;AAAA,EAC9B,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;;;AC1JA,IAAM,SAAS,CAAC,IAAA,KAAyB,KAAK,MAAA,GAAS,IAAA,CAAK,WAAU,CAAE,MAAA;AAQjE,SAAS,eAAe,IAAA,EAAyB;AACtD,EAAA,MAAM,QAAQ,MAAA,CAAO,IAAA,IAAQ,EAAE,CAAA,CAAE,MAAM,OAAO,CAAA;AAC9C,EAAA,MAAM,WAAsB,EAAC;AAC7B,EAAA,MAAM,GAAA,uBAAU,GAAA,EAAY;AAE5B,EAAA,IAAI,UAAA,GAAa,EAAA;AACjB,EAAA,IAAI,OAAA,GAA0B,IAAA;AAC9B,EAAA,IAAI,SAAA,GAAY,EAAA;AAChB,EAAA,IAAI,OAAA,GAA0C,IAAA;AAC9C,EAAA,IAAI,MAAA,GAAS,EAAA;AAEb,EAAA,KAAA,MAAW,OAAO,KAAA,EAAO;AACvB,IAAA,MAAM,IAAA,GAAO,GAAA,CAAI,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA;AACnC,IAAA,MAAM,OAAA,GAAU,KAAK,IAAA,EAAK;AAC1B,IAAA,IAAI,CAAC,OAAA,IAAW,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,EAAG;AACzC,IAAA,MAAM,GAAA,GAAM,OAAO,IAAI,CAAA;AAEvB,IAAA,IAAI,aAAa,CAAA,EAAG;AAClB,MAAA,IAAI,eAAA,CAAgB,IAAA,CAAK,OAAO,CAAA,EAAG,UAAA,GAAa,GAAA;AAChD,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,OAAO,UAAA,EAAY;AACrB,MAAA,IAAI,CAAC,eAAA,CAAgB,IAAA,CAAK,OAAO,CAAA,EAAG;AACpC,MAAA;AAAA,IACF;AAGA,IAAA,IAAI,OAAA,KAAY,IAAA,IAAQ,GAAA,IAAO,SAAA,EAAW;AACxC,MAAA,MAAM,CAAA,GAAI,OAAA,CAAQ,KAAA,CAAM,4BAA4B,CAAA;AACpD,MAAA,IAAI,CAAA,EAAG;AACL,QAAA,OAAA,GAAU,EAAE,IAAA,EAAM,CAAA,CAAE,CAAC,CAAA,EAAG,KAAA,EAAO,EAAC,EAAE;AAClC,QAAA,SAAA,GAAY,GAAA;AACZ,QAAA,QAAA,CAAS,KAAK,OAAO,CAAA;AACrB,QAAA,OAAA,GAAU,IAAA;AACV,QAAA;AAAA,MACF;AAAA,IACF;AACA,IAAA,IAAI,CAAC,OAAA,EAAS;AAEd,IAAA,IAAI,WAAW,GAAA,GAAM,MAAA,IAAU,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,EAAG;AACtD,MAAA,MAAM,IAAA,GAAO,QAAQ,OAAA,CAAQ,OAAA,EAAS,EAAE,CAAA,CAAE,OAAA,CAAQ,gBAAgB,EAAE,CAAA;AACpE,MAAA,IAAI,OAAA,KAAY,OAAA,EAAS,OAAA,CAAQ,KAAA,CAAM,KAAK,IAAI,CAAA;AAAA,WAC3C;AACH,QAAA,MAAM,MAAM,IAAA,CAAK,KAAA,CAAM,MAAM,CAAA,CAAE,CAAC,GAAG,IAAA,EAAK;AACxC,QAAA,IAAI,GAAA,EAAK,GAAA,CAAI,GAAA,CAAI,GAAG,CAAA;AAAA,MACtB;AACA,MAAA;AAAA,IACF;AACA,IAAA,OAAA,GAAU,IAAA;AAEV,IAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,KAAA,CAAM,oBAAoB,CAAA;AAC9C,IAAA,IAAI,GAAA,EAAK;AACP,MAAA,OAAA,CAAQ,KAAA,GAAQ,IAAI,CAAC,CAAA,CAAE,MAAK,CAAE,OAAA,CAAQ,gBAAgB,EAAE,CAAA;AACxD,MAAA;AAAA,IACF;AACA,IAAA,IAAI,YAAA,CAAa,IAAA,CAAK,OAAO,CAAA,EAAG;AAC9B,MAAA,OAAA,GAAU,OAAA;AACV,MAAA,MAAA,GAAS,GAAA;AACT,MAAA;AAAA,IACF;AACA,IAAA,IAAI,kBAAA,CAAmB,IAAA,CAAK,OAAO,CAAA,EAAG;AACpC,MAAA,OAAA,GAAU,aAAA;AACV,MAAA,MAAA,GAAS,GAAA;AACT,MAAA;AAAA,IACF;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,QAAA,EAAU,GAAA,EAAK,CAAC,GAAG,GAAG,CAAA,CAAE,IAAA,CAAK,CAAC,GAAG,CAAA,KAAM,CAAA,CAAE,aAAA,CAAc,CAAC,CAAC,CAAA,EAAE;AACtE","file":"oss.js","sourcesContent":["/**\n * The OSS App Store catalog — the shared client for the 1000+-app one-click\n * open-source catalog served as a flat JSON array at `<base>/meta.json`, with per-app\n * blueprint assets under `<base>/blueprints/<id>/`.\n *\n * One catalog, several surfaces: the console App Store, platform.hanzo.ai, and the\n * public gallery at oss.hanzo.ai. They previously each carried their own copy of the\n * shape, the normalizer and the URL builders, which is how three surfaces come to\n * disagree about the same catalog row. This is the one implementation.\n *\n * The catalog is a PUBLIC CDN with open CORS, so a browser fetches it DIRECTLY — no\n * BFF, no `/v1` proxy — which is why this works in the go:embed console where the\n * Next reverse-proxies are pruned. The base URL is INJECTED by the caller, so this\n * module holds no config import and its normalizers + URL builders stay pure.\n */\n\n/** One open-source app in the catalog (the meta.json entry, load-bearing fields only). */\nexport type OssApp = {\n  /** Stable catalog id + blueprint path segment, e.g. `2fauth`, `n8n`, `postgres`. */\n  id: string\n  /** Display name, e.g. \"2FAuth\". */\n  name: string\n  /** One-line description. */\n  description: string\n  /** Version label — often the literal string `\"latest\"`, rendered raw. */\n  version: string\n  /** Bare logo filename (e.g. `logo.svg`), resolved against the blueprint path. */\n  logo: string\n  /** Category/provenance tags (e.g. `productivity`, `self-hosted`, `caprover`). */\n  tags: string[]\n  /** External links; only github/website/docs are surfaced. */\n  links: { github?: string; website?: string; docs?: string }\n}\n\nconst str = (v: unknown): string => (typeof v === 'string' ? v : '')\nconst strTrim = (v: unknown): string | undefined => {\n  const s = str(v).trim()\n  return s ? s : undefined\n}\nconst strList = (v: unknown): string[] =>\n  Array.isArray(v) ? v.map((x) => (typeof x === 'string' ? x.trim() : '')).filter((x) => x !== '') : []\nconst asRecord = (v: unknown): Record<string, unknown> =>\n  v && typeof v === 'object' && !Array.isArray(v) ? (v as Record<string, unknown>) : {}\n\n/** Normalize one catalog record to an `OssApp` (drops a record with no id + name). */\nexport function normalizeOssApp(raw: unknown): OssApp | null {\n  const r = asRecord(raw)\n  const id = str(r.id).trim()\n  const name = str(r.name).trim() || id\n  if (!id || !name) return null\n  const links = asRecord(r.links)\n  return {\n    id,\n    name,\n    description: str(r.description).trim(),\n    version: str(r.version).trim() || 'latest',\n    logo: str(r.logo).trim(),\n    tags: strList(r.tags),\n    links: {\n      github: strTrim(links.github),\n      website: strTrim(links.website),\n      docs: strTrim(links.docs),\n    },\n  }\n}\n\n/** Normalize the catalog payload to the app list (bare array OR a `{data|apps|…}` wrap). */\nexport function normalizeOssApps(payload: unknown): OssApp[] {\n  let arr: unknown[] = []\n  if (Array.isArray(payload)) arr = payload\n  else if (payload && typeof payload === 'object') {\n    for (const k of ['data', 'apps', 'templates', 'items', 'rows']) {\n      const v = (payload as Record<string, unknown>)[k]\n      if (Array.isArray(v)) {\n        arr = v\n        break\n      }\n    }\n  }\n  const out: OssApp[] = []\n  const seen = new Set<string>()\n  for (const raw of arr) {\n    const app = normalizeOssApp(raw)\n    if (app && !seen.has(app.id)) {\n      seen.add(app.id)\n      out.push(app)\n    }\n  }\n  return out\n}\n\n/** The per-app blueprint asset base: `<base>/blueprints/<id>`. */\nexport function blueprintBase(base: string, id: string): string {\n  return `${base.replace(/\\/+$/, '')}/blueprints/${encodeURIComponent(id)}`\n}\n\n/**\n * The app's logo URL, or null when the entry carries no logo filename — a surface then\n * renders its monogram fallback rather than a broken image.\n */\nexport function logoUrl(base: string, app: OssApp): string | null {\n  if (!app.logo) return null\n  return `${blueprintBase(base, app.id)}/${app.logo}`\n}\n\n/**\n * Derive `owner/repo` from a GitHub URL — the maker identity, since the catalog\n * carries no author field. Returns null for a non-GitHub / malformed URL.\n */\nexport function ownerRepo(githubUrl?: string): string | null {\n  if (!githubUrl) return null\n  const m = githubUrl.match(/github\\.com\\/([^/\\s]+)\\/([^/\\s#?]+)/i)\n  if (!m) return null\n  const owner = m[1]\n  const repo = m[2].replace(/\\.git$/i, '')\n  if (!owner || !repo) return null\n  return `${owner}/${repo}`\n}\n\n/** An app is one-click deployable when it carries a buildable source (its repo). */\nexport function hasDeploySource(app: OssApp): boolean {\n  return Boolean(app.links.github)\n}\n\n// ── Live fetch (the one impure surface) ──────────────────────────────────────\n//\n// Cached per base URL so several mounts share ONE ~500 KB fetch. An in-flight fetch is\n// de-duped (concurrent callers await the same promise); a failure is not cached.\nconst cache = new Map<string, OssApp[]>()\nconst inflight = new Map<string, Promise<OssApp[]>>()\n\n/**\n * Fetch + normalize the catalog from `<base>/meta.json`. Cross-origin and\n * unauthenticated (public CDN); throws on a non-2xx or parse failure so the caller can\n * show an honest error state. Cached on success; `force` bypasses for a manual refresh.\n */\nexport async function fetchOssApps(base: string, force = false): Promise<OssApp[]> {\n  const key = base.replace(/\\/+$/, '')\n  if (!force) {\n    const hit = cache.get(key)\n    if (hit) return hit\n    const pending = inflight.get(key)\n    if (pending) return pending\n  }\n  const run = (async () => {\n    const res = await fetch(`${key}/meta.json`, {\n      headers: { Accept: 'application/json' },\n      // Public catalog — no credentials, so a session cookie never leaks cross-origin.\n      credentials: 'omit',\n    })\n    if (!res.ok) throw new Error(`Catalog unavailable (HTTP ${res.status})`)\n    const apps = normalizeOssApps(await res.json())\n    cache.set(key, apps)\n    return apps\n  })()\n  inflight.set(key, run)\n  try {\n    return await run\n  } finally {\n    inflight.delete(key)\n  }\n}\n\n/**\n * Fetch one app's `docker-compose.yml` as raw text, or null when the entry publishes\n * none. A 404 is a NORMAL answer for a large community catalog — not every blueprint\n * ships compose — so this never throws: a detail view treats an absent blueprint as\n * \"nothing to show\", and an optional asset must not fail a whole page.\n */\nexport async function fetchCompose(base: string, id: string): Promise<string | null> {\n  try {\n    const res = await fetch(`${blueprintBase(base, id)}/docker-compose.yml`, {\n      headers: { Accept: 'text/plain' },\n      credentials: 'omit',\n    })\n    if (!res.ok) return null\n    const text = await res.text()\n    return text.trim() ? text : null\n  } catch {\n    return null\n  }\n}\n","/**\n * What an OSS blueprint actually provisions, read from its own `docker-compose.yml`.\n *\n * This is the one implementation. It was written twice before it lived here — once in\n * TypeScript for the console's App Store and once in vanilla JS for oss.hanzo.ai — and\n * two readers of the same file format drift, which means two surfaces can disagree\n * about what a deploy will start.\n *\n * Deliberately a SMALL structural reader, not a YAML implementation: it walks the\n * `services:` block by indentation and pulls only the keys a detail view shows.\n * Anything it cannot read is absent, never guessed, so a surface degrades to \"no\n * blueprint detail\" instead of asserting something false about what will run.\n *\n * Pure and total — it never throws on malformed or hostile input — so it is safe to\n * run on untrusted CDN content and testable without a DOM or a network.\n */\n\n/**\n * One service a blueprint provisions. `image` is absent for a service built from\n * source (`build:` rather than `image:`).\n */\nexport type Service = { name: string; image?: string; ports: string[] }\n\n/** What a blueprint provisions: the containers it starts and the config it expects. */\nexport type Blueprint = { services: Service[]; env: string[] }\n\n/** Indent width of a line, tabs counted as one column (compose files are space-indented). */\nconst indent = (line: string): number => line.length - line.trimStart().length\n\n/**\n * Parse the load-bearing facts out of a `docker-compose.yml`: the services it starts\n * (with image + published ports) and the environment keys it expects.\n *\n * Environment KEYS only — never the values, which are routinely secrets.\n */\nexport function parseBlueprint(yaml: string): Blueprint {\n  const lines = String(yaml ?? '').split(/\\r?\\n/)\n  const services: Service[] = []\n  const env = new Set<string>()\n\n  let servicesAt = -1 // indent of the `services:` key, -1 until seen\n  let current: Service | null = null\n  let currentAt = -1 // indent of the current service's name (bookkeeping, not a field)\n  let listKey: 'ports' | 'environment' | null = null\n  let listAt = -1\n\n  for (const raw of lines) {\n    const line = raw.replace(/\\t/g, ' ')\n    const trimmed = line.trim()\n    if (!trimmed || trimmed.startsWith('#')) continue\n    const col = indent(line)\n\n    if (servicesAt < 0) {\n      if (/^services\\s*:/.test(trimmed)) servicesAt = col\n      continue\n    }\n    // Dedent back to or past `services:` ends the block (e.g. a following `volumes:`).\n    if (col <= servicesAt) {\n      if (!/^services\\s*:/.test(trimmed)) break\n      continue\n    }\n\n    // A service name sits exactly one level inside `services:`.\n    if (current === null || col <= currentAt) {\n      const m = trimmed.match(/^([A-Za-z0-9._-]+)\\s*:\\s*$/)\n      if (m) {\n        current = { name: m[1], ports: [] }\n        currentAt = col\n        services.push(current)\n        listKey = null\n        continue\n      }\n    }\n    if (!current) continue\n\n    if (listKey && col > listAt && trimmed.startsWith('-')) {\n      const item = trimmed.replace(/^-\\s*/, '').replace(/^[\"']|[\"']$/g, '')\n      if (listKey === 'ports') current.ports.push(item)\n      else {\n        const key = item.split(/[=:]/)[0]?.trim()\n        if (key) env.add(key)\n      }\n      continue\n    }\n    listKey = null\n\n    const img = trimmed.match(/^image\\s*:\\s*(.+)$/)\n    if (img) {\n      current.image = img[1].trim().replace(/^[\"']|[\"']$/g, '')\n      continue\n    }\n    if (/^ports\\s*:/.test(trimmed)) {\n      listKey = 'ports'\n      listAt = col\n      continue\n    }\n    if (/^environment\\s*:/.test(trimmed)) {\n      listKey = 'environment'\n      listAt = col\n      continue\n    }\n  }\n\n  return { services, env: [...env].sort((a, b) => a.localeCompare(b)) }\n}\n"]}
+{"version":3,"file":"oss.js","sourceRoot":"","sources":["../src/oss.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,mFAAmF;AACnF,sFAAsF;AACtF,EAAE;AACF,mFAAmF;AACnF,sFAAsF;AACtF,sEAAsE;AACtE,EAAE;AACF,sFAAsF;AACtF,kFAAkF;AAClF,cAAc,eAAe,CAAA;AAC7B,cAAc,iBAAiB,CAAA"}

package/dist/primitives/AspectRatio.cjs

@@ -0,0 +1,8 @@
+'use client';"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AspectRatio = void 0;
+// GENERATED by scripts/gen-primitives.mjs — do not edit. Per-member entrypoint
+// for hosts that modularize `@hanzo/ui` imports. Source of truth:
+// src/backends/gui/index.ts. Re-run: node scripts/gen-primitives.mjs
+var aspect_ratio_1 = require("../backends/gui/aspect-ratio.cjs");
+Object.defineProperty(exports, "AspectRatio", { enumerable: true, get: function () { return aspect_ratio_1.AspectRatio; } });

package/dist/primitives/AspectRatio.d.ts

@@ -1 +1,2 @@
-export { AspectRatio } from '../backends/shadcn';
+export { AspectRatio } from '../backends/gui/aspect-ratio.js';
+//# sourceMappingURL=AspectRatio.d.ts.map