@hanzo/ui 8.0.27 → 8.0.31

package/dist/oss/catalog.cjs

@@ -0,0 +1,174 @@
+'use client';"use strict";
+/**
+ * The OSS App Store catalog — the shared client for the 1000+-app one-click
+ * open-source catalog served as a flat JSON array at `<base>/meta.json`, with per-app
+ * blueprint assets under `<base>/blueprints/<id>/`.
+ *
+ * One catalog, several surfaces: the console App Store, platform.hanzo.ai, and the
+ * public gallery at oss.hanzo.ai. They previously each carried their own copy of the
+ * shape, the normalizer and the URL builders, which is how three surfaces come to
+ * disagree about the same catalog row. This is the one implementation.
+ *
+ * The catalog is a PUBLIC CDN with open CORS, so a browser fetches it DIRECTLY — no
+ * BFF, no `/v1` proxy — which is why this works in the go:embed console where the
+ * Next reverse-proxies are pruned. The base URL is INJECTED by the caller, so this
+ * module holds no config import and its normalizers + URL builders stay pure.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.normalizeOssApp = normalizeOssApp;
+exports.normalizeOssApps = normalizeOssApps;
+exports.blueprintBase = blueprintBase;
+exports.logoUrl = logoUrl;
+exports.ownerRepo = ownerRepo;
+exports.hasDeploySource = hasDeploySource;
+exports.fetchOssApps = fetchOssApps;
+exports.fetchCompose = fetchCompose;
+const str = (v) => (typeof v === 'string' ? v : '');
+const strTrim = (v) => {
+    const s = str(v).trim();
+    return s ? s : undefined;
+};
+const strList = (v) => Array.isArray(v) ? v.map((x) => (typeof x === 'string' ? x.trim() : '')).filter((x) => x !== '') : [];
+const asRecord = (v) => v && typeof v === 'object' && !Array.isArray(v) ? v : {};
+/** Normalize one catalog record to an `OssApp` (drops a record with no id + name). */
+function normalizeOssApp(raw) {
+    const r = asRecord(raw);
+    const id = str(r.id).trim();
+    const name = str(r.name).trim() || id;
+    if (!id || !name)
+        return null;
+    const links = asRecord(r.links);
+    return {
+        id,
+        name,
+        description: str(r.description).trim(),
+        version: str(r.version).trim() || 'latest',
+        logo: str(r.logo).trim(),
+        tags: strList(r.tags),
+        links: {
+            github: strTrim(links.github),
+            website: strTrim(links.website),
+            docs: strTrim(links.docs),
+        },
+    };
+}
+/** Normalize the catalog payload to the app list (bare array OR a `{data|apps|…}` wrap). */
+function normalizeOssApps(payload) {
+    let arr = [];
+    if (Array.isArray(payload))
+        arr = payload;
+    else if (payload && typeof payload === 'object') {
+        for (const k of ['data', 'apps', 'templates', 'items', 'rows']) {
+            const v = payload[k];
+            if (Array.isArray(v)) {
+                arr = v;
+                break;
+            }
+        }
+    }
+    const out = [];
+    const seen = new Set();
+    for (const raw of arr) {
+        const app = normalizeOssApp(raw);
+        if (app && !seen.has(app.id)) {
+            seen.add(app.id);
+            out.push(app);
+        }
+    }
+    return out;
+}
+/** The per-app blueprint asset base: `<base>/blueprints/<id>`. */
+function blueprintBase(base, id) {
+    return `${base.replace(/\/+$/, '')}/blueprints/${encodeURIComponent(id)}`;
+}
+/**
+ * The app's logo URL, or null when the entry carries no logo filename — a surface then
+ * renders its monogram fallback rather than a broken image.
+ */
+function logoUrl(base, app) {
+    if (!app.logo)
+        return null;
+    return `${blueprintBase(base, app.id)}/${app.logo}`;
+}
+/**
+ * Derive `owner/repo` from a GitHub URL — the maker identity, since the catalog
+ * carries no author field. Returns null for a non-GitHub / malformed URL.
+ */
+function ownerRepo(githubUrl) {
+    if (!githubUrl)
+        return null;
+    const m = githubUrl.match(/github\.com\/([^/\s]+)\/([^/\s#?]+)/i);
+    if (!m)
+        return null;
+    const owner = m[1];
+    const repo = m[2].replace(/\.git$/i, '');
+    if (!owner || !repo)
+        return null;
+    return `${owner}/${repo}`;
+}
+/** An app is one-click deployable when it carries a buildable source (its repo). */
+function hasDeploySource(app) {
+    return Boolean(app.links.github);
+}
+// ── Live fetch (the one impure surface) ──────────────────────────────────────
+//
+// Cached per base URL so several mounts share ONE ~500 KB fetch. An in-flight fetch is
+// de-duped (concurrent callers await the same promise); a failure is not cached.
+const cache = new Map();
+const inflight = new Map();
+/**
+ * Fetch + normalize the catalog from `<base>/meta.json`. Cross-origin and
+ * unauthenticated (public CDN); throws on a non-2xx or parse failure so the caller can
+ * show an honest error state. Cached on success; `force` bypasses for a manual refresh.
+ */
+async function fetchOssApps(base, force = false) {
+    const key = base.replace(/\/+$/, '');
+    if (!force) {
+        const hit = cache.get(key);
+        if (hit)
+            return hit;
+        const pending = inflight.get(key);
+        if (pending)
+            return pending;
+    }
+    const run = (async () => {
+        const res = await fetch(`${key}/meta.json`, {
+            headers: { Accept: 'application/json' },
+            // Public catalog — no credentials, so a session cookie never leaks cross-origin.
+            credentials: 'omit',
+        });
+        if (!res.ok)
+            throw new Error(`Catalog unavailable (HTTP ${res.status})`);
+        const apps = normalizeOssApps(await res.json());
+        cache.set(key, apps);
+        return apps;
+    })();
+    inflight.set(key, run);
+    try {
+        return await run;
+    }
+    finally {
+        inflight.delete(key);
+    }
+}
+/**
+ * Fetch one app's `docker-compose.yml` as raw text, or null when the entry publishes
+ * none. A 404 is a NORMAL answer for a large community catalog — not every blueprint
+ * ships compose — so this never throws: a detail view treats an absent blueprint as
+ * "nothing to show", and an optional asset must not fail a whole page.
+ */
+async function fetchCompose(base, id) {
+    try {
+        const res = await fetch(`${blueprintBase(base, id)}/docker-compose.yml`, {
+            headers: { Accept: 'text/plain' },
+            credentials: 'omit',
+        });
+        if (!res.ok)
+            return null;
+        const text = await res.text();
+        return text.trim() ? text : null;
+    }
+    catch {
+        return null;
+    }
+}

package/dist/oss/catalog.d.ts

@@ -65,3 +65,4 @@ export declare function fetchOssApps(base: string, force?: boolean): Promise<Oss
  * "nothing to show", and an optional asset must not fail a whole page.
  */
 export declare function fetchCompose(base: string, id: string): Promise<string | null>;
+//# sourceMappingURL=catalog.d.ts.map

package/dist/oss/catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../src/oss/catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,0FAA0F;AAC1F,MAAM,MAAM,MAAM,GAAG;IACnB,oFAAoF;IACpF,EAAE,EAAE,MAAM,CAAA;IACV,mCAAmC;IACnC,IAAI,EAAE,MAAM,CAAA;IACZ,4BAA4B;IAC5B,WAAW,EAAE,MAAM,CAAA;IACnB,yEAAyE;IACzE,OAAO,EAAE,MAAM,CAAA;IACf,iFAAiF;IACjF,IAAI,EAAE,MAAM,CAAA;IACZ,iFAAiF;IACjF,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,6DAA6D;IAC7D,KAAK,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAC5D,CAAA;AAYD,sFAAsF;AACtF,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAmB3D;AAED,4FAA4F;AAC5F,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,EAAE,CAsB3D;AAED,kEAAkE;AAClE,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED;;;GAGG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGhE;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQ3D;AAED,oFAAoF;AACpF,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEpD;AASD;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,UAAQ,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAyBjF;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAYnF"}

package/dist/oss/catalog.js

@@ -0,0 +1,165 @@
+'use client';/**
+ * The OSS App Store catalog — the shared client for the 1000+-app one-click
+ * open-source catalog served as a flat JSON array at `<base>/meta.json`, with per-app
+ * blueprint assets under `<base>/blueprints/<id>/`.
+ *
+ * One catalog, several surfaces: the console App Store, platform.hanzo.ai, and the
+ * public gallery at oss.hanzo.ai. They previously each carried their own copy of the
+ * shape, the normalizer and the URL builders, which is how three surfaces come to
+ * disagree about the same catalog row. This is the one implementation.
+ *
+ * The catalog is a PUBLIC CDN with open CORS, so a browser fetches it DIRECTLY — no
+ * BFF, no `/v1` proxy — which is why this works in the go:embed console where the
+ * Next reverse-proxies are pruned. The base URL is INJECTED by the caller, so this
+ * module holds no config import and its normalizers + URL builders stay pure.
+ */
+const str = (v) => (typeof v === 'string' ? v : '');
+const strTrim = (v) => {
+    const s = str(v).trim();
+    return s ? s : undefined;
+};
+const strList = (v) => Array.isArray(v) ? v.map((x) => (typeof x === 'string' ? x.trim() : '')).filter((x) => x !== '') : [];
+const asRecord = (v) => v && typeof v === 'object' && !Array.isArray(v) ? v : {};
+/** Normalize one catalog record to an `OssApp` (drops a record with no id + name). */
+export function normalizeOssApp(raw) {
+    const r = asRecord(raw);
+    const id = str(r.id).trim();
+    const name = str(r.name).trim() || id;
+    if (!id || !name)
+        return null;
+    const links = asRecord(r.links);
+    return {
+        id,
+        name,
+        description: str(r.description).trim(),
+        version: str(r.version).trim() || 'latest',
+        logo: str(r.logo).trim(),
+        tags: strList(r.tags),
+        links: {
+            github: strTrim(links.github),
+            website: strTrim(links.website),
+            docs: strTrim(links.docs),
+        },
+    };
+}
+/** Normalize the catalog payload to the app list (bare array OR a `{data|apps|…}` wrap). */
+export function normalizeOssApps(payload) {
+    let arr = [];
+    if (Array.isArray(payload))
+        arr = payload;
+    else if (payload && typeof payload === 'object') {
+        for (const k of ['data', 'apps', 'templates', 'items', 'rows']) {
+            const v = payload[k];
+            if (Array.isArray(v)) {
+                arr = v;
+                break;
+            }
+        }
+    }
+    const out = [];
+    const seen = new Set();
+    for (const raw of arr) {
+        const app = normalizeOssApp(raw);
+        if (app && !seen.has(app.id)) {
+            seen.add(app.id);
+            out.push(app);
+        }
+    }
+    return out;
+}
+/** The per-app blueprint asset base: `<base>/blueprints/<id>`. */
+export function blueprintBase(base, id) {
+    return `${base.replace(/\/+$/, '')}/blueprints/${encodeURIComponent(id)}`;
+}
+/**
+ * The app's logo URL, or null when the entry carries no logo filename — a surface then
+ * renders its monogram fallback rather than a broken image.
+ */
+export function logoUrl(base, app) {
+    if (!app.logo)
+        return null;
+    return `${blueprintBase(base, app.id)}/${app.logo}`;
+}
+/**
+ * Derive `owner/repo` from a GitHub URL — the maker identity, since the catalog
+ * carries no author field. Returns null for a non-GitHub / malformed URL.
+ */
+export function ownerRepo(githubUrl) {
+    if (!githubUrl)
+        return null;
+    const m = githubUrl.match(/github\.com\/([^/\s]+)\/([^/\s#?]+)/i);
+    if (!m)
+        return null;
+    const owner = m[1];
+    const repo = m[2].replace(/\.git$/i, '');
+    if (!owner || !repo)
+        return null;
+    return `${owner}/${repo}`;
+}
+/** An app is one-click deployable when it carries a buildable source (its repo). */
+export function hasDeploySource(app) {
+    return Boolean(app.links.github);
+}
+// ── Live fetch (the one impure surface) ──────────────────────────────────────
+//
+// Cached per base URL so several mounts share ONE ~500 KB fetch. An in-flight fetch is
+// de-duped (concurrent callers await the same promise); a failure is not cached.
+const cache = new Map();
+const inflight = new Map();
+/**
+ * Fetch + normalize the catalog from `<base>/meta.json`. Cross-origin and
+ * unauthenticated (public CDN); throws on a non-2xx or parse failure so the caller can
+ * show an honest error state. Cached on success; `force` bypasses for a manual refresh.
+ */
+export async function fetchOssApps(base, force = false) {
+    const key = base.replace(/\/+$/, '');
+    if (!force) {
+        const hit = cache.get(key);
+        if (hit)
+            return hit;
+        const pending = inflight.get(key);
+        if (pending)
+            return pending;
+    }
+    const run = (async () => {
+        const res = await fetch(`${key}/meta.json`, {
+            headers: { Accept: 'application/json' },
+            // Public catalog — no credentials, so a session cookie never leaks cross-origin.
+            credentials: 'omit',
+        });
+        if (!res.ok)
+            throw new Error(`Catalog unavailable (HTTP ${res.status})`);
+        const apps = normalizeOssApps(await res.json());
+        cache.set(key, apps);
+        return apps;
+    })();
+    inflight.set(key, run);
+    try {
+        return await run;
+    }
+    finally {
+        inflight.delete(key);
+    }
+}
+/**
+ * Fetch one app's `docker-compose.yml` as raw text, or null when the entry publishes
+ * none. A 404 is a NORMAL answer for a large community catalog — not every blueprint
+ * ships compose — so this never throws: a detail view treats an absent blueprint as
+ * "nothing to show", and an optional asset must not fail a whole page.
+ */
+export async function fetchCompose(base, id) {
+    try {
+        const res = await fetch(`${blueprintBase(base, id)}/docker-compose.yml`, {
+            headers: { Accept: 'text/plain' },
+            credentials: 'omit',
+        });
+        if (!res.ok)
+            return null;
+        const text = await res.text();
+        return text.trim() ? text : null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=catalog.js.map

package/dist/oss/catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../src/oss/catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAoBH,MAAM,GAAG,GAAG,CAAC,CAAU,EAAU,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;AACpE,MAAM,OAAO,GAAG,CAAC,CAAU,EAAsB,EAAE;IACjD,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACvB,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AAC1B,CAAC,CAAA;AACD,MAAM,OAAO,GAAG,CAAC,CAAU,EAAY,EAAE,CACvC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AACvG,MAAM,QAAQ,GAAG,CAAC,CAAU,EAA2B,EAAE,CACvD,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAA6B,CAAC,CAAC,CAAC,EAAE,CAAA;AAEvF,sFAAsF;AACtF,MAAM,UAAU,eAAe,CAAC,GAAY;IAC1C,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAA;IACvB,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IAC3B,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAA;IACrC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IAC7B,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;IAC/B,OAAO;QACL,EAAE;QACF,IAAI;QACJ,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE;QACtC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,IAAI,QAAQ;QAC1C,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE;QACxB,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;QACrB,KAAK,EAAE;YACL,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;YAC7B,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;YAC/B,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;SAC1B;KACF,CAAA;AACH,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAC/C,IAAI,GAAG,GAAc,EAAE,CAAA;IACvB,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,GAAG,GAAG,OAAO,CAAA;SACpC,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChD,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;YAC/D,MAAM,CAAC,GAAI,OAAmC,CAAC,CAAC,CAAC,CAAA;YACjD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrB,GAAG,GAAG,CAAC,CAAA;gBACP,MAAK;YACP,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,CAAA;QAChC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YAChB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACf,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,EAAU;IACpD,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAA;AAC3E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,GAAW;IAC/C,IAAI,CAAC,GAAG,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IAC1B,OAAO,GAAG,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,CAAA;AACrD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,SAAkB;IAC1C,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAA;IAC3B,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAA;IACjE,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IACnB,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAClB,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;IACxC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IAChC,OAAO,GAAG,KAAK,IAAI,IAAI,EAAE,CAAA;AAC3B,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;AAClC,CAAC;AAED,gFAAgF;AAChF,EAAE;AACF,uFAAuF;AACvF,iFAAiF;AACjF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoB,CAAA;AACzC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA6B,CAAA;AAErD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,KAAK,GAAG,KAAK;IAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACpC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC1B,IAAI,GAAG;YAAE,OAAO,GAAG,CAAA;QACnB,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACjC,IAAI,OAAO;YAAE,OAAO,OAAO,CAAA;IAC7B,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE;QACtB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,YAAY,EAAE;YAC1C,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;YACvC,iFAAiF;YACjF,WAAW,EAAE,MAAM;SACpB,CAAC,CAAA;QACF,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,CAAC,MAAM,GAAG,CAAC,CAAA;QACxE,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;QAC/C,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QACpB,OAAO,IAAI,CAAA;IACb,CAAC,CAAC,EAAE,CAAA;IACJ,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACtB,IAAI,CAAC;QACH,OAAO,MAAM,GAAG,CAAA;IAClB,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IACtB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,EAAU;IACzD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC,qBAAqB,EAAE;YACvE,OAAO,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE;YACjC,WAAW,EAAE,MAAM;SACpB,CAAC,CAAA;QACF,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAA;QACxB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QAC7B,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC"}

package/dist/oss.cjs

@@ -1,190 +1,28 @@
-'use client';
-'use strict';
-
-// src/oss/catalog.ts
-var str = (v) => typeof v === "string" ? v : "";
-var strTrim = (v) => {
-  const s = str(v).trim();
-  return s ? s : void 0;
+'use client';"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
-var strList = (v) => Array.isArray(v) ? v.map((x) => typeof x === "string" ? x.trim() : "").filter((x) => x !== "") : [];
-var asRecord = (v) => v && typeof v === "object" && !Array.isArray(v) ? v : {};
-function normalizeOssApp(raw) {
-  const r = asRecord(raw);
-  const id = str(r.id).trim();
-  const name = str(r.name).trim() || id;
-  if (!id || !name) return null;
-  const links = asRecord(r.links);
-  return {
-    id,
-    name,
-    description: str(r.description).trim(),
-    version: str(r.version).trim() || "latest",
-    logo: str(r.logo).trim(),
-    tags: strList(r.tags),
-    links: {
-      github: strTrim(links.github),
-      website: strTrim(links.website),
-      docs: strTrim(links.docs)
-    }
-  };
-}
-function normalizeOssApps(payload) {
-  let arr = [];
-  if (Array.isArray(payload)) arr = payload;
-  else if (payload && typeof payload === "object") {
-    for (const k of ["data", "apps", "templates", "items", "rows"]) {
-      const v = payload[k];
-      if (Array.isArray(v)) {
-        arr = v;
-        break;
-      }
-    }
-  }
-  const out = [];
-  const seen = /* @__PURE__ */ new Set();
-  for (const raw of arr) {
-    const app = normalizeOssApp(raw);
-    if (app && !seen.has(app.id)) {
-      seen.add(app.id);
-      out.push(app);
-    }
-  }
-  return out;
-}
-function blueprintBase(base, id) {
-  return `${base.replace(/\/+$/, "")}/blueprints/${encodeURIComponent(id)}`;
-}
-function logoUrl(base, app) {
-  if (!app.logo) return null;
-  return `${blueprintBase(base, app.id)}/${app.logo}`;
-}
-function ownerRepo(githubUrl) {
-  if (!githubUrl) return null;
-  const m = githubUrl.match(/github\.com\/([^/\s]+)\/([^/\s#?]+)/i);
-  if (!m) return null;
-  const owner = m[1];
-  const repo = m[2].replace(/\.git$/i, "");
-  if (!owner || !repo) return null;
-  return `${owner}/${repo}`;
-}
-function hasDeploySource(app) {
-  return Boolean(app.links.github);
-}
-var cache = /* @__PURE__ */ new Map();
-var inflight = /* @__PURE__ */ new Map();
-async function fetchOssApps(base, force = false) {
-  const key = base.replace(/\/+$/, "");
-  if (!force) {
-    const hit = cache.get(key);
-    if (hit) return hit;
-    const pending = inflight.get(key);
-    if (pending) return pending;
-  }
-  const run = (async () => {
-    const res = await fetch(`${key}/meta.json`, {
-      headers: { Accept: "application/json" },
-      // Public catalog — no credentials, so a session cookie never leaks cross-origin.
-      credentials: "omit"
-    });
-    if (!res.ok) throw new Error(`Catalog unavailable (HTTP ${res.status})`);
-    const apps = normalizeOssApps(await res.json());
-    cache.set(key, apps);
-    return apps;
-  })();
-  inflight.set(key, run);
-  try {
-    return await run;
-  } finally {
-    inflight.delete(key);
-  }
-}
-async function fetchCompose(base, id) {
-  try {
-    const res = await fetch(`${blueprintBase(base, id)}/docker-compose.yml`, {
-      headers: { Accept: "text/plain" },
-      credentials: "omit"
-    });
-    if (!res.ok) return null;
-    const text = await res.text();
-    return text.trim() ? text : null;
-  } catch {
-    return null;
-  }
-}
-
-// src/oss/blueprint.ts
-var indent = (line) => line.length - line.trimStart().length;
-function parseBlueprint(yaml) {
-  const lines = String(yaml ?? "").split(/\r?\n/);
-  const services = [];
-  const env = /* @__PURE__ */ new Set();
-  let servicesAt = -1;
-  let current = null;
-  let currentAt = -1;
-  let listKey = null;
-  let listAt = -1;
-  for (const raw of lines) {
-    const line = raw.replace(/\t/g, " ");
-    const trimmed = line.trim();
-    if (!trimmed || trimmed.startsWith("#")) continue;
-    const col = indent(line);
-    if (servicesAt < 0) {
-      if (/^services\s*:/.test(trimmed)) servicesAt = col;
-      continue;
-    }
-    if (col <= servicesAt) {
-      if (!/^services\s*:/.test(trimmed)) break;
-      continue;
-    }
-    if (current === null || col <= currentAt) {
-      const m = trimmed.match(/^([A-Za-z0-9._-]+)\s*:\s*$/);
-      if (m) {
-        current = { name: m[1], ports: [] };
-        currentAt = col;
-        services.push(current);
-        listKey = null;
-        continue;
-      }
-    }
-    if (!current) continue;
-    if (listKey && col > listAt && trimmed.startsWith("-")) {
-      const item = trimmed.replace(/^-\s*/, "").replace(/^["']|["']$/g, "");
-      if (listKey === "ports") current.ports.push(item);
-      else {
-        const key = item.split(/[=:]/)[0]?.trim();
-        if (key) env.add(key);
-      }
-      continue;
-    }
-    listKey = null;
-    const img = trimmed.match(/^image\s*:\s*(.+)$/);
-    if (img) {
-      current.image = img[1].trim().replace(/^["']|["']$/g, "");
-      continue;
-    }
-    if (/^ports\s*:/.test(trimmed)) {
-      listKey = "ports";
-      listAt = col;
-      continue;
-    }
-    if (/^environment\s*:/.test(trimmed)) {
-      listKey = "environment";
-      listAt = col;
-      continue;
-    }
-  }
-  return { services, env: [...env].sort((a, b) => a.localeCompare(b)) };
-}
-
-exports.blueprintBase = blueprintBase;
-exports.fetchCompose = fetchCompose;
-exports.fetchOssApps = fetchOssApps;
-exports.hasDeploySource = hasDeploySource;
-exports.logoUrl = logoUrl;
-exports.normalizeOssApp = normalizeOssApp;
-exports.normalizeOssApps = normalizeOssApps;
-exports.ownerRepo = ownerRepo;
-exports.parseBlueprint = parseBlueprint;
-//# sourceMappingURL=oss.cjs.map
-//# sourceMappingURL=oss.cjs.map
+Object.defineProperty(exports, "__esModule", { value: true });
+// @hanzo/ui/oss — the OSS App Store domain: the catalog client and the blueprint
+// reader shared by every surface that shows the same 1000+-app open-source catalog
+// (the console App Store, platform.hanzo.ai, and the public gallery at oss.hanzo.ai).
+//
+// It lives here because it was written three times before it lived anywhere: three
+// copies of one catalog's shape, normalizer, URL builders and compose reader, free to
+// drift until two surfaces disagreed about what a deploy would start.
+//
+// Pure and framework-free — no React, no config import — so it is usable from a React
+// console, a Next app, and a plain static page alike, and testable without a DOM.
+__exportStar(require("./oss/catalog.cjs"), exports);
+__exportStar(require("./oss/blueprint.cjs"), exports);

package/dist/oss.d.ts

@@ -1,2 +1,3 @@
-export * from './oss/catalog';
-export * from './oss/blueprint';
+export * from './oss/catalog.js';
+export * from './oss/blueprint.js';
+//# sourceMappingURL=oss.d.ts.map

package/dist/oss.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oss.d.ts","sourceRoot":"","sources":["../src/oss.ts"],"names":[],"mappings":"AAUA,cAAc,eAAe,CAAA;AAC7B,cAAc,iBAAiB,CAAA"}