@hypersoniclabs/helix-cli 0.1.7 → 0.1.23

package/dist/lib.js

@@ -34,11 +34,62 @@ var __importStar = (this && this.__importStar) || (function () {
         return result;
     };
 })();
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.TOOLCHAIN_PACKAGES = exports.initAbilityTemplate = exports.initTemplate = exports.defaultClientTokenName = exports.browserLogin = exports.jwtExpiresAtIso = exports.clearCredentials = exports.saveCredentials = exports.loadCredentials = exports.HELIX_SCOPE = exports.HELIX_ENV = exports.DEFAULT_WEB_URL = exports.DEFAULT_API_URL = exports.credsEnvMismatchWarning = exports.apiUrlMatchesEnv = exports.MODULES_DIR = exports.LOCKFILE = exports.INSTALLED_INDEX = exports.installWorld = exports.resolvePins = exports.normalizePinRange = exports.loadInstalledIndexValidator = exports.loadVendoredValidator = exports.installLocalAbility = exports.checkAbilityBundle = exports.checkPackageBundle = exports.MULTIPLAYER_CONFIG_FILENAME = exports.multiplayerConfigBundleFile = exports.checkBundle = exports.uploadToTicket = exports.HelixApi = exports.ApiError = void 0;
+exports.compileSceneElements = exports.cs2 = exports.terrain = exports.labelModuleValidationErrors = exports.updateInteractable = exports.subtractInteractableContribution = exports.parseInteractablePosition = exports.namespaceInteractableFragment = exports.moduleInteractableFragment = exports.instanceOrdinalOf = exports.interactableModuleId = exports.composeInteractableManifest = exports.composeInteractableModuleManifest = exports.addInteractable = exports.frozenBuildArtifactKey = exports.freezeBuildDraft = exports.createPrivateBuildDraft = exports.PRIVATE_BUILD_DRAFT_SCHEMA = exports.checkPackageBundle = exports.MULTIPLAYER_CONFIG_FILENAME = exports.multiplayerConfigBundleFile = exports.PLATFORM_THREE_VERSION = exports.tiledTerrainBakedLightingWarning = exports.checkBundle = exports.validateDeviceProject = exports.testDeviceProject = exports.readDeviceGlbNodeNames = exports.createDeviceProject = exports.DEVICE_FILENAME = exports.placementsContinuum = exports.placementsBundle = exports.inspectPlacementsBake = exports.readPlacementsBake = exports.attachTreeImpostors = exports.bakeTreeImpostors = exports.bakePlacements = exports.publicRequester = exports.formatPublishedVerdict = exports.formatHostAddOns = exports.checkPublishedAddOn = exports.checkHostAddOns = exports.uploadToTicket = exports.HelixApi = exports.ApiError = exports.PLACEMENT_REQUEST_FILENAME = exports.writePlacementRequest = exports.placementRequestBundleFile = exports.validatePlacementRequest = exports.createPlacementRequest = exports.WORLD_THUMBNAIL_PUBLICATION_VERSION = void 0;
+exports.buildItemDistribution = exports.ITEM_EDITION_MODES = exports.ITEM_DISTRIBUTION_CHANNELS = exports.DISTRIBUTION_KEY_PATTERN = exports.renderCcSlotTable = exports.renderCcGenderList = exports.parseTags = exports.parseGenders = exports.parseJsonOrFile = exports.parseJsonObjectOrFile = exports.parseJsonArrayOrFile = exports.normalizeItemKind = exports.meshContentTypeFromExtension = exports.CLIP_SET_SLOT_TYPES = exports.isCcWearableSlot = exports.isCcGender = exports.ccSlotIsRequiredForKind = exports.ccSlotIsAllowedForKind = exports.ccGendersAreRequiredForKind = exports.ccGendersAreAllowedForKind = exports.CC_WEARABLE_SLOT_GROUPS = exports.CC_WEARABLE_SLOTS = exports.CC_GENDERS = exports.assertLooksLikeGlb = exports.assertCcSlot = exports.assertCcGenders = exports.SOURCE_MAX_BYTES = exports.SOURCE_HARD_EXCLUDES = exports.SOURCE_CONTENT_TYPE = exports.SOURCE_ARCHIVE_FILENAME = exports.parseGitignore = exports.isSourceExcluded = exports.formatArchiveSize = exports.createSourceArchive = exports.collectSourceFiles = exports.formatScenePerformanceReport = exports.analyzeScenePerformance = exports.importSourceSceneMap = exports.SOURCE_SCENE_IMPORT_BUDGETS = exports.NATIVE_SCENE_CONVERSION_CONFIDENCE = exports.matchCanonicalMaterial = exports.createSharedMaterialBinding = exports.buildMaterialPackageRecipe = exports.buildMaterialBulkRecipe = exports.MATERIAL_REVIEW_CONFIDENCE = exports.MATERIAL_AUTO_REPLACE_CONFIDENCE = exports.HELIX_OFFICIAL_MATERIAL_SUBSET = exports.compileContinuumScenePackage = exports.CONTINUUM_SCENE_DOCUMENT_MEDIA_TYPE = exports.compileSceneElementsBundle = void 0;
+exports.assessThreeCurrency = exports.assessPlatformDelivery = exports.assessInteractables = exports.enginePinOverrideLogPath = exports.detectExactEnginePins = exports.ALLOW_EXACT_ENGINE_PIN_FLAG = exports.WORLD_MANIFEST_LOCATIONS = exports.MODULES_DIR = exports.LOCKFILE = exports.INSTALLED_INDEX = exports.installWorld = exports.resolvePins = exports.validateAssetPackConstraints = exports.normalizePinRange = exports.loadInstalledIndexValidator = exports.loadVendoredValidator = exports.installLocalAbility = exports.checkAbilityBundle = exports.productTypeGrantsItem = exports.isProductKey = exports.buildProductUpdate = exports.buildProductRegistration = exports.WORLD_PRODUCT_TYPES = exports.PRODUCT_TITLE_MAX = exports.PRODUCT_KEY_PATTERN = exports.PRODUCT_KEY_MAX = exports.PRODUCT_DESCRIPTION_MAX = exports.MAX_PASS_DURATION_SECONDS = exports.MAX_GRANT_ITEM_QUANTITY = exports.MAX_GRANT_EFFECTS = exports.MAX_GRANT_CURRENCY_AMOUNT = exports.GRANT_CODE_PATTERN = exports.GRANT_CODE_MAX = exports.resolveUnlockMode = exports.isAchievementKey = exports.iconContentTypeFromExtension = exports.formatAchievementCriteria = exports.buildAchievementUpdate = exports.buildAchievementRegistration = exports.buildAchievementCriteria = exports.DATA_STORE_CRITERIA_KEY_TEMPLATES = exports.ACHIEVEMENT_UNLOCK_MODES = exports.ACHIEVEMENT_TROPHY_MAX_BYTES = exports.ACHIEVEMENT_KEY_PATTERN = exports.ACHIEVEMENT_ICON_MAX_BYTES = exports.ACHIEVEMENT_CRITERIA_SIGNALS = exports.ACHIEVEMENT_CRITERIA_OPS = exports.ACHIEVEMENT_CRITERIA_METRICS = exports.editionFields = exports.buildItemDistributionUpdate = void 0;
+exports.getVaultAsset = exports.getStandaloneAssetGenerationJob = exports.getDreamerAssetGenerationJob = exports.generateStandaloneAsset = exports.generateImage = exports.generateAudio = exports.generateAndPublishAssetFromReference = exports.generateAndPublishAsset = exports.formatStrandedJob = exports.extensionFor = exports.describeGateAdvance = exports.approveDreamerGate = exports.DEFAULT_MOUNT_PREFIX = exports.formatSubPathResult = exports.verifySubPath = exports.roundLix = exports.receiptLix = exports.formatWaitState = exports.formatReceipt = exports.formatLix = exports.formatQuote = exports.formatBalance = exports.normalizeQuote = exports.quoteGeneration = exports.formatJobs = exports.listJobs = exports.getLixBalance = exports.TICK_NODE_CEILING = exports.renderRealizabilityRefusal = exports.registryRealizabilityDeps = exports.checkRealizability = exports.initAbilityTemplate = exports.slugify = exports.initTemplate = exports.defaultClientTokenName = exports.browserLogin = exports.jwtExpiresAtIso = exports.clearCredentials = exports.saveCredentials = exports.loadCredentials = exports.HELIX_SCOPE = exports.HELIX_ENV = exports.DEFAULT_WEB_URL = exports.DEFAULT_API_URL = exports.credsEnvMismatchWarning = exports.apiUrlMatchesEnv = exports.ADVISORY_SYSTEMS = exports.assessWorldCurrency = exports.assessWeaponPins = exports.assessVaultAssets = void 0;
+exports.formatWorldInspection = exports.sortFindings = exports.analyzeWorld = exports.validateUnrealProject = exports.packageUnrealProject = exports.initUnrealManifest = exports.HELIX_UNREAL_ENGINE_VERSION = exports.HELIX_UNREAL_CONTRACT_VERSION = exports.formatUnrealValidationReport = exports.uploadArtifact = exports.resolveWorldId = exports.renderPublishFailure = exports.publishUnrealBuild = exports.assertReceipt = exports.assertCreateResponseMatchesPlan = exports.assertClientDeliveryMatchesPlan = exports.verifyUnrealCandidate = exports.UnrealCandidateError = exports.planSharedRuntimePublish = exports.defaultIdempotencyKey = exports.candidateArtifactDigest = exports.auditCookScope = exports.clearMaterialPinCache = exports.platformMaterialTag = exports.parseVaultMaterialSearch = exports.parseContinuumCurrentVersion = exports.materialContinuumIdentity = exports.matchMaterialResolution = exports.materialResolutionOptions = exports.materialDefaultResolutionKey = exports.DEFAULT_RESOLUTION_KEY = exports.VAULT_ASSET_KINDS = exports.UnavailableCapabilityError = exports.updateVaultAssetMetadata = exports.startStandaloneAssetGeneration = exports.startDreamerAssetGenerationFromReference = exports.startDreamerAssetGeneration = exports.searchVaultAssets = exports.StrandedJobError = exports.saveGeneratedAsset = exports.reviseDreamerGate = exports.retryDreamerJob = exports.resumeAndPublishAsset = exports.resolveMaterial = exports.MATERIAL_RENDITION_SELECTIONS = exports.listMaterials = exports.listDreamerVoices = exports.installVaultAsset = exports.getVaultAssetVersions = exports.getVaultAssetUsage = void 0;
+exports.bakeSharedHlodAtlas = exports.planSharedHlodAtlas = exports.approximateHlodGeometry = exports.bakeHlodSurface = exports.HLOD_BAKER_VERSION = exports.DEFAULT_HLOD_LAYER = exports.planSceneHlod = exports.tagSceneHlod = exports.inspectSceneHlod = exports.bakeSceneHlod = exports.attachFoliageLods = exports.bakeFoliageLods = exports.MAX_ITEM_THUMBNAIL_BYTES = exports.renderItemThumbnailResult = exports.describeThumbnailError = exports.setItemThumbnail = exports.refreshItemThumbnail = exports.DOCTOR_REPORT_SCHEMA = exports.findUProject = exports.locateEditorCmd = exports.runUnrealDoctor = exports.TOOLCHAIN_PACKAGES = exports.productsWorldPath = exports.CREATOR_WORLDS_PATH = exports.PRODUCTS_PATH = exports.ITEM_DISTRIBUTIONS_CREATOR_PATH = exports.ITEM_DISTRIBUTIONS_PATH = exports.achievementsWorldPath = exports.ITEMS_FROM_PACKAGE_PATH = exports.PUBLICATIONS_UPLOAD_PATH = exports.publishOwnedItemFromPackage = exports.makeItemFromPackage = exports.publishGlb = exports.SERVER_CREATION_PERMISSIONS = exports.WORLD_DESCRIPTION_MAX = exports.WORLD_METRICS_UNSUPPORTED = exports.BASELINE_FILENAME = exports.anchorOf = exports.parseBaseline = exports.buildBaseline = exports.applyBaseline = exports.canonicalizeSnapshot = exports.detectNpcWiring = exports.detectInspectWiring = exports.resolveFocus = exports.formatWorldFocus = exports.analyzeZones = exports.formatWorldDiff = exports.diffWorldSnapshots = exports.DEFAULT_REPORT = void 0;
+exports.DEFAULT_HLOD_REFINEMENT_SETTINGS = exports.bakeSceneHlodRefinements = exports.DEFAULT_COMPLETE_HLOD_SETTINGS = exports.bakeCompleteSceneHlod = exports.writeSharedHlodMaterialGlb = exports.writeHlodCellGlb = void 0;
 exports.importCharacter = importCharacter;
+exports.captureScreenshots = captureScreenshots;
+exports.encodeImagePreview = encodeImagePreview;
+exports.inspectGesture = inspectGesture;
+exports.formatGestureInspection = formatGestureInspection;
+exports.captureGesture = captureGesture;
+exports.snapshotWorld = snapshotWorld;
+exports.inspectNpc = inspectNpc;
+exports.formatNpcInspection = formatNpcInspection;
+exports.captureNpc = captureNpc;
+exports.readWorldMetrics = readWorldMetrics;
+exports.renderWorldMetricsText = renderWorldMetricsText;
+exports.readAxisTable = readAxisTable;
 exports.publishWorld = publishWorld;
+exports.createWorld = createWorld;
+exports.uploadWorldSource = uploadWorldSource;
+exports.describeSourceFailure = describeSourceFailure;
+exports.editSiteHost = editSiteHost;
+exports.sourceOutcomeLine = sourceOutcomeLine;
+exports.mediaContentTypeFromExtension = mediaContentTypeFromExtension;
+exports.findBundleThumbnail = findBundleThumbnail;
+exports.assertMediaSizeOk = assertMediaSizeOk;
+exports.assertMediaSlotWritable = assertMediaSlotWritable;
+exports.setWorldMedia = setWorldMedia;
+exports.clearWorldMedia = clearWorldMedia;
+exports.delistItem = delistItem;
+exports.planAchievementRegistration = planAchievementRegistration;
+exports.registerAchievement = registerAchievement;
+exports.listAchievements = listAchievements;
+exports.updateAchievement = updateAchievement;
+exports.setAchievementIcon = setAchievementIcon;
+exports.isClaimRoute = isClaimRoute;
+exports.distributionCreatedHeadline = distributionCreatedHeadline;
+exports.createItemDistribution = createItemDistribution;
+exports.listItemDistributions = listItemDistributions;
+exports.updateItemDistribution = updateItemDistribution;
+exports.disableItemDistribution = disableItemDistribution;
+exports.planProductRegistration = planProductRegistration;
+exports.registerProduct = registerProduct;
+exports.listProducts = listProducts;
+exports.listProductWorlds = listProductWorlds;
+exports.updateProduct = updateProduct;
+exports.setProductActive = setProductActive;
 exports.publishPackage = publishPackage;
+exports.publishInteractable = publishInteractable;
 exports.listPackages = listPackages;
 exports.getPackageManifest = getPackageManifest;
 exports.authStatus = authStatus;
@@ -51,23 +102,214 @@ exports.cliVersion = cliVersion;
 exports.latestOnNpm = latestOnNpm;
 exports.installHint = installHint;
 exports.checkForUpdates = checkForUpdates;
+const helix_manifest_1 = require("@hypersoniclabs/helix-manifest");
+const publishThumbnail_1 = require("./screenshot/publishThumbnail");
+var publishThumbnail_2 = require("./screenshot/publishThumbnail");
+Object.defineProperty(exports, "WORLD_THUMBNAIL_PUBLICATION_VERSION", { enumerable: true, get: function () { return publishThumbnail_2.WORLD_THUMBNAIL_PUBLICATION_VERSION; } });
 const node_fs_1 = require("node:fs");
+const node_crypto_1 = require("node:crypto");
+const node_os_1 = require("node:os");
 const node_path_1 = require("node:path");
 const api_1 = require("./api");
+const placementRequest_1 = require("./placementRequest");
+var placementRequest_2 = require("./placementRequest");
+Object.defineProperty(exports, "createPlacementRequest", { enumerable: true, get: function () { return placementRequest_2.createPlacementRequest; } });
+Object.defineProperty(exports, "validatePlacementRequest", { enumerable: true, get: function () { return placementRequest_2.validatePlacementRequest; } });
+Object.defineProperty(exports, "placementRequestBundleFile", { enumerable: true, get: function () { return placementRequest_2.placementRequestBundleFile; } });
+Object.defineProperty(exports, "writePlacementRequest", { enumerable: true, get: function () { return placementRequest_2.writePlacementRequest; } });
+Object.defineProperty(exports, "PLACEMENT_REQUEST_FILENAME", { enumerable: true, get: function () { return placementRequest_2.PLACEMENT_REQUEST_FILENAME; } });
 const bundle_1 = require("./bundle");
 const package_1 = require("./package");
+/**
+ * The item kinds this process can judge before the upload.
+ *
+ * A kind absent here is not unchecked — the server checks every kind. It is
+ * only unchecked EARLY, which costs a round trip. Adding a kind here means
+ * mirroring its server ceilings in `avatarPreflight.ts`, and a mirror that
+ * guesses LOOSER numbers than the server is worse than no mirror at all: it
+ * prints confident green for a file that will be refused.
+ */
+const PREFLIGHT_KINDS = new Set([
+    'avatar',
+    'wearable',
+    'add_on',
+    'home_item',
+    'vehicle',
+    'weapon',
+]);
 const ability_1 = require("./ability");
+const item_1 = require("./item");
+const achievement_1 = require("./achievement");
+const product_1 = require("./product");
+const distribution_1 = require("./distribution");
 const config_1 = require("./config");
+const realizability_1 = require("./realizability");
+const browserLogin_1 = require("./browserLogin");
+const enginePins_1 = require("./enginePins");
+const source_archive_1 = require("./source-archive");
 var api_2 = require("./api");
 Object.defineProperty(exports, "ApiError", { enumerable: true, get: function () { return api_2.ApiError; } });
 Object.defineProperty(exports, "HelixApi", { enumerable: true, get: function () { return api_2.HelixApi; } });
 Object.defineProperty(exports, "uploadToTicket", { enumerable: true, get: function () { return api_2.uploadToTicket; } });
+var addonPublished_1 = require("./vehicle/addonPublished");
+Object.defineProperty(exports, "checkHostAddOns", { enumerable: true, get: function () { return addonPublished_1.checkHostAddOns; } });
+Object.defineProperty(exports, "checkPublishedAddOn", { enumerable: true, get: function () { return addonPublished_1.checkPublishedAddOn; } });
+Object.defineProperty(exports, "formatHostAddOns", { enumerable: true, get: function () { return addonPublished_1.formatHostAddOns; } });
+Object.defineProperty(exports, "formatPublishedVerdict", { enumerable: true, get: function () { return addonPublished_1.formatPublishedVerdict; } });
+Object.defineProperty(exports, "publicRequester", { enumerable: true, get: function () { return addonPublished_1.publicRequester; } });
+var bake_1 = require("./placements/bake");
+Object.defineProperty(exports, "bakePlacements", { enumerable: true, get: function () { return bake_1.bakePlacements; } });
+var impostors_1 = require("./placements/impostors");
+Object.defineProperty(exports, "bakeTreeImpostors", { enumerable: true, get: function () { return impostors_1.bakeTreeImpostors; } });
+var attachImpostors_1 = require("./placements/attachImpostors");
+Object.defineProperty(exports, "attachTreeImpostors", { enumerable: true, get: function () { return attachImpostors_1.attachTreeImpostors; } });
+var source_1 = require("./placements/source");
+Object.defineProperty(exports, "readPlacementsBake", { enumerable: true, get: function () { return source_1.readPlacementsBake; } });
+Object.defineProperty(exports, "inspectPlacementsBake", { enumerable: true, get: function () { return source_1.inspectPlacementsBake; } });
+Object.defineProperty(exports, "placementsBundle", { enumerable: true, get: function () { return source_1.placementsBundle; } });
+Object.defineProperty(exports, "placementsContinuum", { enumerable: true, get: function () { return source_1.placementsContinuum; } });
+var device_1 = require("./device");
+Object.defineProperty(exports, "DEVICE_FILENAME", { enumerable: true, get: function () { return device_1.DEVICE_FILENAME; } });
+Object.defineProperty(exports, "createDeviceProject", { enumerable: true, get: function () { return device_1.createDeviceProject; } });
+Object.defineProperty(exports, "readDeviceGlbNodeNames", { enumerable: true, get: function () { return device_1.readDeviceGlbNodeNames; } });
+Object.defineProperty(exports, "testDeviceProject", { enumerable: true, get: function () { return device_1.testDeviceProject; } });
+Object.defineProperty(exports, "validateDeviceProject", { enumerable: true, get: function () { return device_1.validateDeviceProject; } });
 var bundle_2 = require("./bundle");
 Object.defineProperty(exports, "checkBundle", { enumerable: true, get: function () { return bundle_2.checkBundle; } });
+Object.defineProperty(exports, "tiledTerrainBakedLightingWarning", { enumerable: true, get: function () { return bundle_2.tiledTerrainBakedLightingWarning; } });
+Object.defineProperty(exports, "PLATFORM_THREE_VERSION", { enumerable: true, get: function () { return bundle_2.PLATFORM_THREE_VERSION; } });
 Object.defineProperty(exports, "multiplayerConfigBundleFile", { enumerable: true, get: function () { return bundle_2.multiplayerConfigBundleFile; } });
 Object.defineProperty(exports, "MULTIPLAYER_CONFIG_FILENAME", { enumerable: true, get: function () { return bundle_2.MULTIPLAYER_CONFIG_FILENAME; } });
 var package_2 = require("./package");
 Object.defineProperty(exports, "checkPackageBundle", { enumerable: true, get: function () { return package_2.checkPackageBundle; } });
+var builds_1 = require("./builds");
+Object.defineProperty(exports, "PRIVATE_BUILD_DRAFT_SCHEMA", { enumerable: true, get: function () { return builds_1.PRIVATE_BUILD_DRAFT_SCHEMA; } });
+Object.defineProperty(exports, "createPrivateBuildDraft", { enumerable: true, get: function () { return builds_1.createPrivateBuildDraft; } });
+Object.defineProperty(exports, "freezeBuildDraft", { enumerable: true, get: function () { return builds_1.freezeBuildDraft; } });
+Object.defineProperty(exports, "frozenBuildArtifactKey", { enumerable: true, get: function () { return builds_1.frozenBuildArtifactKey; } });
+var interactable_1 = require("./interactable");
+Object.defineProperty(exports, "addInteractable", { enumerable: true, get: function () { return interactable_1.addInteractable; } });
+Object.defineProperty(exports, "composeInteractableModuleManifest", { enumerable: true, get: function () { return interactable_1.composeInteractableModuleManifest; } });
+Object.defineProperty(exports, "composeInteractableManifest", { enumerable: true, get: function () { return interactable_1.composeInteractableManifest; } });
+Object.defineProperty(exports, "interactableModuleId", { enumerable: true, get: function () { return interactable_1.interactableModuleId; } });
+Object.defineProperty(exports, "instanceOrdinalOf", { enumerable: true, get: function () { return interactable_1.instanceOrdinalOf; } });
+Object.defineProperty(exports, "moduleInteractableFragment", { enumerable: true, get: function () { return interactable_1.moduleInteractableFragment; } });
+Object.defineProperty(exports, "namespaceInteractableFragment", { enumerable: true, get: function () { return interactable_1.namespaceInteractableFragment; } });
+Object.defineProperty(exports, "parseInteractablePosition", { enumerable: true, get: function () { return interactable_1.parseInteractablePosition; } });
+Object.defineProperty(exports, "subtractInteractableContribution", { enumerable: true, get: function () { return interactable_1.subtractInteractableContribution; } });
+Object.defineProperty(exports, "updateInteractable", { enumerable: true, get: function () { return interactable_1.updateInteractable; } });
+var module_validation_1 = require("./module-validation");
+Object.defineProperty(exports, "labelModuleValidationErrors", { enumerable: true, get: function () { return module_validation_1.labelModuleValidationErrors; } });
+// Namespaced: the terrain authoring library shares plain names (`generate`, `import`, `bake`) with the rest of this surface.
+exports.terrain = __importStar(require("./terrain/index"));
+// Namespaced for the same reason: the CS2 bundle readers and their converters carry plain names of their own.
+exports.cs2 = __importStar(require("./cs2/index"));
+var compiler_1 = require("./sceneElements/compiler");
+Object.defineProperty(exports, "compileSceneElements", { enumerable: true, get: function () { return compiler_1.compileSceneElements; } });
+Object.defineProperty(exports, "compileSceneElementsBundle", { enumerable: true, get: function () { return compiler_1.compileSceneElementsBundle; } });
+var continuum_1 = require("./sceneElements/continuum");
+Object.defineProperty(exports, "CONTINUUM_SCENE_DOCUMENT_MEDIA_TYPE", { enumerable: true, get: function () { return continuum_1.CONTINUUM_SCENE_DOCUMENT_MEDIA_TYPE; } });
+Object.defineProperty(exports, "compileContinuumScenePackage", { enumerable: true, get: function () { return continuum_1.compileContinuumScenePackage; } });
+var materials_1 = require("./sceneImport/materials");
+Object.defineProperty(exports, "HELIX_OFFICIAL_MATERIAL_SUBSET", { enumerable: true, get: function () { return materials_1.HELIX_OFFICIAL_MATERIAL_SUBSET; } });
+Object.defineProperty(exports, "MATERIAL_AUTO_REPLACE_CONFIDENCE", { enumerable: true, get: function () { return materials_1.MATERIAL_AUTO_REPLACE_CONFIDENCE; } });
+Object.defineProperty(exports, "MATERIAL_REVIEW_CONFIDENCE", { enumerable: true, get: function () { return materials_1.MATERIAL_REVIEW_CONFIDENCE; } });
+Object.defineProperty(exports, "buildMaterialBulkRecipe", { enumerable: true, get: function () { return materials_1.buildMaterialBulkRecipe; } });
+Object.defineProperty(exports, "buildMaterialPackageRecipe", { enumerable: true, get: function () { return materials_1.buildMaterialPackageRecipe; } });
+Object.defineProperty(exports, "createSharedMaterialBinding", { enumerable: true, get: function () { return materials_1.createSharedMaterialBinding; } });
+Object.defineProperty(exports, "matchCanonicalMaterial", { enumerable: true, get: function () { return materials_1.matchCanonicalMaterial; } });
+var semantic_1 = require("./sceneImport/semantic");
+Object.defineProperty(exports, "NATIVE_SCENE_CONVERSION_CONFIDENCE", { enumerable: true, get: function () { return semantic_1.NATIVE_SCENE_CONVERSION_CONFIDENCE; } });
+Object.defineProperty(exports, "SOURCE_SCENE_IMPORT_BUDGETS", { enumerable: true, get: function () { return semantic_1.SOURCE_SCENE_IMPORT_BUDGETS; } });
+Object.defineProperty(exports, "importSourceSceneMap", { enumerable: true, get: function () { return semantic_1.importSourceSceneMap; } });
+__exportStar(require("./continuum"), exports);
+__exportStar(require("./canary"), exports);
+var scenePerformance_1 = require("./scenePerformance");
+Object.defineProperty(exports, "analyzeScenePerformance", { enumerable: true, get: function () { return scenePerformance_1.analyzeScenePerformance; } });
+Object.defineProperty(exports, "formatScenePerformanceReport", { enumerable: true, get: function () { return scenePerformance_1.formatScenePerformanceReport; } });
+// The opt-in source archive (CH-1457 §9). Exported so the MCP server and any
+// other in-process caller build the archive through the same selection policy
+// the CLI uses — a second implementation is a second exclude list.
+var source_archive_2 = require("./source-archive");
+Object.defineProperty(exports, "collectSourceFiles", { enumerable: true, get: function () { return source_archive_2.collectSourceFiles; } });
+Object.defineProperty(exports, "createSourceArchive", { enumerable: true, get: function () { return source_archive_2.createSourceArchive; } });
+Object.defineProperty(exports, "formatArchiveSize", { enumerable: true, get: function () { return source_archive_2.formatArchiveSize; } });
+Object.defineProperty(exports, "isSourceExcluded", { enumerable: true, get: function () { return source_archive_2.isSourceExcluded; } });
+Object.defineProperty(exports, "parseGitignore", { enumerable: true, get: function () { return source_archive_2.parseGitignore; } });
+Object.defineProperty(exports, "SOURCE_ARCHIVE_FILENAME", { enumerable: true, get: function () { return source_archive_2.SOURCE_ARCHIVE_FILENAME; } });
+Object.defineProperty(exports, "SOURCE_CONTENT_TYPE", { enumerable: true, get: function () { return source_archive_2.SOURCE_CONTENT_TYPE; } });
+Object.defineProperty(exports, "SOURCE_HARD_EXCLUDES", { enumerable: true, get: function () { return source_archive_2.SOURCE_HARD_EXCLUDES; } });
+Object.defineProperty(exports, "SOURCE_MAX_BYTES", { enumerable: true, get: function () { return source_archive_2.SOURCE_MAX_BYTES; } });
+// Existing Item reads and validation. MCP imports this library directly;
+// new Item creation uses the sealed-Package publication exports above.
+var item_2 = require("./item");
+Object.defineProperty(exports, "assertCcGenders", { enumerable: true, get: function () { return item_2.assertCcGenders; } });
+Object.defineProperty(exports, "assertCcSlot", { enumerable: true, get: function () { return item_2.assertCcSlot; } });
+Object.defineProperty(exports, "assertLooksLikeGlb", { enumerable: true, get: function () { return item_2.assertLooksLikeGlb; } });
+Object.defineProperty(exports, "CC_GENDERS", { enumerable: true, get: function () { return item_2.CC_GENDERS; } });
+Object.defineProperty(exports, "CC_WEARABLE_SLOTS", { enumerable: true, get: function () { return item_2.CC_WEARABLE_SLOTS; } });
+Object.defineProperty(exports, "CC_WEARABLE_SLOT_GROUPS", { enumerable: true, get: function () { return item_2.CC_WEARABLE_SLOT_GROUPS; } });
+Object.defineProperty(exports, "ccGendersAreAllowedForKind", { enumerable: true, get: function () { return item_2.ccGendersAreAllowedForKind; } });
+Object.defineProperty(exports, "ccGendersAreRequiredForKind", { enumerable: true, get: function () { return item_2.ccGendersAreRequiredForKind; } });
+Object.defineProperty(exports, "ccSlotIsAllowedForKind", { enumerable: true, get: function () { return item_2.ccSlotIsAllowedForKind; } });
+Object.defineProperty(exports, "ccSlotIsRequiredForKind", { enumerable: true, get: function () { return item_2.ccSlotIsRequiredForKind; } });
+Object.defineProperty(exports, "isCcGender", { enumerable: true, get: function () { return item_2.isCcGender; } });
+Object.defineProperty(exports, "isCcWearableSlot", { enumerable: true, get: function () { return item_2.isCcWearableSlot; } });
+Object.defineProperty(exports, "CLIP_SET_SLOT_TYPES", { enumerable: true, get: function () { return item_2.CLIP_SET_SLOT_TYPES; } });
+Object.defineProperty(exports, "meshContentTypeFromExtension", { enumerable: true, get: function () { return item_2.meshContentTypeFromExtension; } });
+Object.defineProperty(exports, "normalizeItemKind", { enumerable: true, get: function () { return item_2.normalizeItemKind; } });
+Object.defineProperty(exports, "parseJsonArrayOrFile", { enumerable: true, get: function () { return item_2.parseJsonArrayOrFile; } });
+Object.defineProperty(exports, "parseJsonObjectOrFile", { enumerable: true, get: function () { return item_2.parseJsonObjectOrFile; } });
+Object.defineProperty(exports, "parseJsonOrFile", { enumerable: true, get: function () { return item_2.parseJsonOrFile; } });
+Object.defineProperty(exports, "parseGenders", { enumerable: true, get: function () { return item_2.parseGenders; } });
+Object.defineProperty(exports, "parseTags", { enumerable: true, get: function () { return item_2.parseTags; } });
+Object.defineProperty(exports, "renderCcGenderList", { enumerable: true, get: function () { return item_2.renderCcGenderList; } });
+Object.defineProperty(exports, "renderCcSlotTable", { enumerable: true, get: function () { return item_2.renderCcSlotTable; } });
+var distribution_2 = require("./distribution");
+Object.defineProperty(exports, "DISTRIBUTION_KEY_PATTERN", { enumerable: true, get: function () { return distribution_2.DISTRIBUTION_KEY_PATTERN; } });
+Object.defineProperty(exports, "ITEM_DISTRIBUTION_CHANNELS", { enumerable: true, get: function () { return distribution_2.ITEM_DISTRIBUTION_CHANNELS; } });
+Object.defineProperty(exports, "ITEM_EDITION_MODES", { enumerable: true, get: function () { return distribution_2.ITEM_EDITION_MODES; } });
+Object.defineProperty(exports, "buildItemDistribution", { enumerable: true, get: function () { return distribution_2.buildItemDistribution; } });
+Object.defineProperty(exports, "buildItemDistributionUpdate", { enumerable: true, get: function () { return distribution_2.buildItemDistributionUpdate; } });
+Object.defineProperty(exports, "editionFields", { enumerable: true, get: function () { return distribution_2.editionFields; } });
+// Achievements. Same rule as the item exports above: the MCP server reaches the
+// registration surface ONLY through these, so an un-exported helper is
+// unreachable to an agent.
+var achievement_2 = require("./achievement");
+Object.defineProperty(exports, "ACHIEVEMENT_CRITERIA_METRICS", { enumerable: true, get: function () { return achievement_2.ACHIEVEMENT_CRITERIA_METRICS; } });
+Object.defineProperty(exports, "ACHIEVEMENT_CRITERIA_OPS", { enumerable: true, get: function () { return achievement_2.ACHIEVEMENT_CRITERIA_OPS; } });
+Object.defineProperty(exports, "ACHIEVEMENT_CRITERIA_SIGNALS", { enumerable: true, get: function () { return achievement_2.ACHIEVEMENT_CRITERIA_SIGNALS; } });
+Object.defineProperty(exports, "ACHIEVEMENT_ICON_MAX_BYTES", { enumerable: true, get: function () { return achievement_2.ACHIEVEMENT_ICON_MAX_BYTES; } });
+Object.defineProperty(exports, "ACHIEVEMENT_KEY_PATTERN", { enumerable: true, get: function () { return achievement_2.ACHIEVEMENT_KEY_PATTERN; } });
+Object.defineProperty(exports, "ACHIEVEMENT_TROPHY_MAX_BYTES", { enumerable: true, get: function () { return achievement_2.ACHIEVEMENT_TROPHY_MAX_BYTES; } });
+Object.defineProperty(exports, "ACHIEVEMENT_UNLOCK_MODES", { enumerable: true, get: function () { return achievement_2.ACHIEVEMENT_UNLOCK_MODES; } });
+Object.defineProperty(exports, "DATA_STORE_CRITERIA_KEY_TEMPLATES", { enumerable: true, get: function () { return achievement_2.DATA_STORE_CRITERIA_KEY_TEMPLATES; } });
+Object.defineProperty(exports, "buildAchievementCriteria", { enumerable: true, get: function () { return achievement_2.buildAchievementCriteria; } });
+Object.defineProperty(exports, "buildAchievementRegistration", { enumerable: true, get: function () { return achievement_2.buildAchievementRegistration; } });
+Object.defineProperty(exports, "buildAchievementUpdate", { enumerable: true, get: function () { return achievement_2.buildAchievementUpdate; } });
+Object.defineProperty(exports, "formatAchievementCriteria", { enumerable: true, get: function () { return achievement_2.formatAchievementCriteria; } });
+Object.defineProperty(exports, "iconContentTypeFromExtension", { enumerable: true, get: function () { return achievement_2.iconContentTypeFromExtension; } });
+Object.defineProperty(exports, "isAchievementKey", { enumerable: true, get: function () { return achievement_2.isAchievementKey; } });
+Object.defineProperty(exports, "resolveUnlockMode", { enumerable: true, get: function () { return achievement_2.resolveUnlockMode; } });
+// In-world products. Same rule as the exports above: the MCP server reaches the
+// product registry ONLY through these, so an un-exported helper is unreachable
+// to an agent.
+var product_2 = require("./product");
+Object.defineProperty(exports, "GRANT_CODE_MAX", { enumerable: true, get: function () { return product_2.GRANT_CODE_MAX; } });
+Object.defineProperty(exports, "GRANT_CODE_PATTERN", { enumerable: true, get: function () { return product_2.GRANT_CODE_PATTERN; } });
+Object.defineProperty(exports, "MAX_GRANT_CURRENCY_AMOUNT", { enumerable: true, get: function () { return product_2.MAX_GRANT_CURRENCY_AMOUNT; } });
+Object.defineProperty(exports, "MAX_GRANT_EFFECTS", { enumerable: true, get: function () { return product_2.MAX_GRANT_EFFECTS; } });
+Object.defineProperty(exports, "MAX_GRANT_ITEM_QUANTITY", { enumerable: true, get: function () { return product_2.MAX_GRANT_ITEM_QUANTITY; } });
+Object.defineProperty(exports, "MAX_PASS_DURATION_SECONDS", { enumerable: true, get: function () { return product_2.MAX_PASS_DURATION_SECONDS; } });
+Object.defineProperty(exports, "PRODUCT_DESCRIPTION_MAX", { enumerable: true, get: function () { return product_2.PRODUCT_DESCRIPTION_MAX; } });
+Object.defineProperty(exports, "PRODUCT_KEY_MAX", { enumerable: true, get: function () { return product_2.PRODUCT_KEY_MAX; } });
+Object.defineProperty(exports, "PRODUCT_KEY_PATTERN", { enumerable: true, get: function () { return product_2.PRODUCT_KEY_PATTERN; } });
+Object.defineProperty(exports, "PRODUCT_TITLE_MAX", { enumerable: true, get: function () { return product_2.PRODUCT_TITLE_MAX; } });
+Object.defineProperty(exports, "WORLD_PRODUCT_TYPES", { enumerable: true, get: function () { return product_2.WORLD_PRODUCT_TYPES; } });
+Object.defineProperty(exports, "buildProductRegistration", { enumerable: true, get: function () { return product_2.buildProductRegistration; } });
+Object.defineProperty(exports, "buildProductUpdate", { enumerable: true, get: function () { return product_2.buildProductUpdate; } });
+Object.defineProperty(exports, "isProductKey", { enumerable: true, get: function () { return product_2.isProductKey; } });
+Object.defineProperty(exports, "productTypeGrantsItem", { enumerable: true, get: function () { return product_2.productTypeGrantsItem; } });
 var ability_2 = require("./ability");
 Object.defineProperty(exports, "checkAbilityBundle", { enumerable: true, get: function () { return ability_2.checkAbilityBundle; } });
 Object.defineProperty(exports, "installLocalAbility", { enumerable: true, get: function () { return ability_2.installLocalAbility; } });
@@ -75,12 +317,26 @@ Object.defineProperty(exports, "loadVendoredValidator", { enumerable: true, get:
 Object.defineProperty(exports, "loadInstalledIndexValidator", { enumerable: true, get: function () { return ability_2.loadInstalledIndexValidator; } });
 var resolve_1 = require("./resolve");
 Object.defineProperty(exports, "normalizePinRange", { enumerable: true, get: function () { return resolve_1.normalizePinRange; } });
+Object.defineProperty(exports, "validateAssetPackConstraints", { enumerable: true, get: function () { return resolve_1.validateAssetPackConstraints; } });
 Object.defineProperty(exports, "resolvePins", { enumerable: true, get: function () { return resolve_1.resolvePins; } });
 var install_1 = require("./install");
 Object.defineProperty(exports, "installWorld", { enumerable: true, get: function () { return install_1.installWorld; } });
 Object.defineProperty(exports, "INSTALLED_INDEX", { enumerable: true, get: function () { return install_1.INSTALLED_INDEX; } });
 Object.defineProperty(exports, "LOCKFILE", { enumerable: true, get: function () { return install_1.LOCKFILE; } });
 Object.defineProperty(exports, "MODULES_DIR", { enumerable: true, get: function () { return install_1.MODULES_DIR; } });
+Object.defineProperty(exports, "WORLD_MANIFEST_LOCATIONS", { enumerable: true, get: function () { return install_1.WORLD_MANIFEST_LOCATIONS; } });
+var enginePins_2 = require("./enginePins");
+Object.defineProperty(exports, "ALLOW_EXACT_ENGINE_PIN_FLAG", { enumerable: true, get: function () { return enginePins_2.ALLOW_EXACT_ENGINE_PIN_FLAG; } });
+Object.defineProperty(exports, "detectExactEnginePins", { enumerable: true, get: function () { return enginePins_2.detectExactEnginePins; } });
+Object.defineProperty(exports, "enginePinOverrideLogPath", { enumerable: true, get: function () { return enginePins_2.enginePinOverrideLogPath; } });
+var currency_1 = require("./currency");
+Object.defineProperty(exports, "assessInteractables", { enumerable: true, get: function () { return currency_1.assessInteractables; } });
+Object.defineProperty(exports, "assessPlatformDelivery", { enumerable: true, get: function () { return currency_1.assessPlatformDelivery; } });
+Object.defineProperty(exports, "assessThreeCurrency", { enumerable: true, get: function () { return currency_1.assessThreeCurrency; } });
+Object.defineProperty(exports, "assessVaultAssets", { enumerable: true, get: function () { return currency_1.assessVaultAssets; } });
+Object.defineProperty(exports, "assessWeaponPins", { enumerable: true, get: function () { return currency_1.assessWeaponPins; } });
+Object.defineProperty(exports, "assessWorldCurrency", { enumerable: true, get: function () { return currency_1.assessWorldCurrency; } });
+Object.defineProperty(exports, "ADVISORY_SYSTEMS", { enumerable: true, get: function () { return currency_1.ADVISORY_SYSTEMS; } });
 var config_2 = require("./config");
 Object.defineProperty(exports, "apiUrlMatchesEnv", { enumerable: true, get: function () { return config_2.apiUrlMatchesEnv; } });
 Object.defineProperty(exports, "credsEnvMismatchWarning", { enumerable: true, get: function () { return config_2.credsEnvMismatchWarning; } });
@@ -92,13 +348,102 @@ Object.defineProperty(exports, "loadCredentials", { enumerable: true, get: funct
 Object.defineProperty(exports, "saveCredentials", { enumerable: true, get: function () { return config_2.saveCredentials; } });
 Object.defineProperty(exports, "clearCredentials", { enumerable: true, get: function () { return config_2.clearCredentials; } });
 Object.defineProperty(exports, "jwtExpiresAtIso", { enumerable: true, get: function () { return config_2.jwtExpiresAtIso; } });
-var browserLogin_1 = require("./browserLogin");
-Object.defineProperty(exports, "browserLogin", { enumerable: true, get: function () { return browserLogin_1.browserLogin; } });
-Object.defineProperty(exports, "defaultClientTokenName", { enumerable: true, get: function () { return browserLogin_1.defaultClientTokenName; } });
+var browserLogin_2 = require("./browserLogin");
+Object.defineProperty(exports, "browserLogin", { enumerable: true, get: function () { return browserLogin_2.browserLogin; } });
+Object.defineProperty(exports, "defaultClientTokenName", { enumerable: true, get: function () { return browserLogin_2.defaultClientTokenName; } });
 var init_1 = require("./init");
 Object.defineProperty(exports, "initTemplate", { enumerable: true, get: function () { return init_1.initTemplate; } });
+Object.defineProperty(exports, "slugify", { enumerable: true, get: function () { return init_1.slugify; } });
 var initAbility_1 = require("./initAbility");
 Object.defineProperty(exports, "initAbilityTemplate", { enumerable: true, get: function () { return initAbility_1.initAbilityTemplate; } });
+var realizability_2 = require("./realizability");
+Object.defineProperty(exports, "checkRealizability", { enumerable: true, get: function () { return realizability_2.checkRealizability; } });
+Object.defineProperty(exports, "registryRealizabilityDeps", { enumerable: true, get: function () { return realizability_2.registryRealizabilityDeps; } });
+Object.defineProperty(exports, "renderRealizabilityRefusal", { enumerable: true, get: function () { return realizability_2.renderRealizabilityRefusal; } });
+Object.defineProperty(exports, "TICK_NODE_CEILING", { enumerable: true, get: function () { return realizability_2.TICK_NODE_CEILING; } });
+var money_1 = require("./money");
+Object.defineProperty(exports, "getLixBalance", { enumerable: true, get: function () { return money_1.getLixBalance; } });
+Object.defineProperty(exports, "listJobs", { enumerable: true, get: function () { return money_1.listJobs; } });
+Object.defineProperty(exports, "formatJobs", { enumerable: true, get: function () { return money_1.formatJobs; } });
+Object.defineProperty(exports, "quoteGeneration", { enumerable: true, get: function () { return money_1.quoteGeneration; } });
+Object.defineProperty(exports, "normalizeQuote", { enumerable: true, get: function () { return money_1.normalizeQuote; } });
+Object.defineProperty(exports, "formatBalance", { enumerable: true, get: function () { return money_1.formatBalance; } });
+Object.defineProperty(exports, "formatQuote", { enumerable: true, get: function () { return money_1.formatQuote; } });
+Object.defineProperty(exports, "formatLix", { enumerable: true, get: function () { return money_1.formatLix; } });
+Object.defineProperty(exports, "formatReceipt", { enumerable: true, get: function () { return money_1.formatReceipt; } });
+Object.defineProperty(exports, "formatWaitState", { enumerable: true, get: function () { return money_1.formatWaitState; } });
+Object.defineProperty(exports, "receiptLix", { enumerable: true, get: function () { return money_1.receiptLix; } });
+Object.defineProperty(exports, "roundLix", { enumerable: true, get: function () { return money_1.roundLix; } });
+var verifySubPath_1 = require("./verifySubPath");
+Object.defineProperty(exports, "verifySubPath", { enumerable: true, get: function () { return verifySubPath_1.verifySubPath; } });
+Object.defineProperty(exports, "formatSubPathResult", { enumerable: true, get: function () { return verifySubPath_1.formatSubPathResult; } });
+Object.defineProperty(exports, "DEFAULT_MOUNT_PREFIX", { enumerable: true, get: function () { return verifySubPath_1.DEFAULT_MOUNT_PREFIX; } });
+var assets_1 = require("./assets");
+Object.defineProperty(exports, "approveDreamerGate", { enumerable: true, get: function () { return assets_1.approveDreamerGate; } });
+Object.defineProperty(exports, "describeGateAdvance", { enumerable: true, get: function () { return assets_1.describeGateAdvance; } });
+Object.defineProperty(exports, "extensionFor", { enumerable: true, get: function () { return assets_1.extensionFor; } });
+Object.defineProperty(exports, "formatStrandedJob", { enumerable: true, get: function () { return assets_1.formatStrandedJob; } });
+Object.defineProperty(exports, "generateAndPublishAsset", { enumerable: true, get: function () { return assets_1.generateAndPublishAsset; } });
+Object.defineProperty(exports, "generateAndPublishAssetFromReference", { enumerable: true, get: function () { return assets_1.generateAndPublishAssetFromReference; } });
+Object.defineProperty(exports, "generateAudio", { enumerable: true, get: function () { return assets_1.generateAudio; } });
+Object.defineProperty(exports, "generateImage", { enumerable: true, get: function () { return assets_1.generateImage; } });
+Object.defineProperty(exports, "generateStandaloneAsset", { enumerable: true, get: function () { return assets_1.generateStandaloneAsset; } });
+Object.defineProperty(exports, "getDreamerAssetGenerationJob", { enumerable: true, get: function () { return assets_1.getDreamerAssetGenerationJob; } });
+Object.defineProperty(exports, "getStandaloneAssetGenerationJob", { enumerable: true, get: function () { return assets_1.getStandaloneAssetGenerationJob; } });
+Object.defineProperty(exports, "getVaultAsset", { enumerable: true, get: function () { return assets_1.getVaultAsset; } });
+Object.defineProperty(exports, "getVaultAssetUsage", { enumerable: true, get: function () { return assets_1.getVaultAssetUsage; } });
+Object.defineProperty(exports, "getVaultAssetVersions", { enumerable: true, get: function () { return assets_1.getVaultAssetVersions; } });
+Object.defineProperty(exports, "installVaultAsset", { enumerable: true, get: function () { return assets_1.installVaultAsset; } });
+Object.defineProperty(exports, "listDreamerVoices", { enumerable: true, get: function () { return assets_1.listDreamerVoices; } });
+Object.defineProperty(exports, "listMaterials", { enumerable: true, get: function () { return assets_1.listMaterials; } });
+Object.defineProperty(exports, "MATERIAL_RENDITION_SELECTIONS", { enumerable: true, get: function () { return assets_1.MATERIAL_RENDITION_SELECTIONS; } });
+Object.defineProperty(exports, "resolveMaterial", { enumerable: true, get: function () { return assets_1.resolveMaterial; } });
+Object.defineProperty(exports, "resumeAndPublishAsset", { enumerable: true, get: function () { return assets_1.resumeAndPublishAsset; } });
+Object.defineProperty(exports, "retryDreamerJob", { enumerable: true, get: function () { return assets_1.retryDreamerJob; } });
+Object.defineProperty(exports, "reviseDreamerGate", { enumerable: true, get: function () { return assets_1.reviseDreamerGate; } });
+Object.defineProperty(exports, "saveGeneratedAsset", { enumerable: true, get: function () { return assets_1.saveGeneratedAsset; } });
+Object.defineProperty(exports, "StrandedJobError", { enumerable: true, get: function () { return assets_1.StrandedJobError; } });
+Object.defineProperty(exports, "searchVaultAssets", { enumerable: true, get: function () { return assets_1.searchVaultAssets; } });
+Object.defineProperty(exports, "startDreamerAssetGeneration", { enumerable: true, get: function () { return assets_1.startDreamerAssetGeneration; } });
+Object.defineProperty(exports, "startDreamerAssetGenerationFromReference", { enumerable: true, get: function () { return assets_1.startDreamerAssetGenerationFromReference; } });
+Object.defineProperty(exports, "startStandaloneAssetGeneration", { enumerable: true, get: function () { return assets_1.startStandaloneAssetGeneration; } });
+Object.defineProperty(exports, "updateVaultAssetMetadata", { enumerable: true, get: function () { return assets_1.updateVaultAssetMetadata; } });
+Object.defineProperty(exports, "UnavailableCapabilityError", { enumerable: true, get: function () { return assets_1.UnavailableCapabilityError; } });
+Object.defineProperty(exports, "VAULT_ASSET_KINDS", { enumerable: true, get: function () { return assets_1.VAULT_ASSET_KINDS; } });
+Object.defineProperty(exports, "DEFAULT_RESOLUTION_KEY", { enumerable: true, get: function () { return assets_1.DEFAULT_RESOLUTION_KEY; } });
+Object.defineProperty(exports, "materialDefaultResolutionKey", { enumerable: true, get: function () { return assets_1.materialDefaultResolutionKey; } });
+Object.defineProperty(exports, "materialResolutionOptions", { enumerable: true, get: function () { return assets_1.materialResolutionOptions; } });
+Object.defineProperty(exports, "matchMaterialResolution", { enumerable: true, get: function () { return assets_1.matchMaterialResolution; } });
+var identity_1 = require("./materials/identity");
+Object.defineProperty(exports, "materialContinuumIdentity", { enumerable: true, get: function () { return identity_1.materialContinuumIdentity; } });
+Object.defineProperty(exports, "parseContinuumCurrentVersion", { enumerable: true, get: function () { return identity_1.parseContinuumCurrentVersion; } });
+Object.defineProperty(exports, "parseVaultMaterialSearch", { enumerable: true, get: function () { return identity_1.parseVaultMaterialSearch; } });
+Object.defineProperty(exports, "platformMaterialTag", { enumerable: true, get: function () { return identity_1.platformMaterialTag; } });
+var pins_1 = require("./materials/pins");
+Object.defineProperty(exports, "clearMaterialPinCache", { enumerable: true, get: function () { return pins_1.clearMaterialPinCache; } });
+// --- Unreal: cook candidate → HELIX World Build -----------------------------
+var unrealCandidate_1 = require("./unrealCandidate");
+Object.defineProperty(exports, "auditCookScope", { enumerable: true, get: function () { return unrealCandidate_1.auditCookScope; } });
+Object.defineProperty(exports, "candidateArtifactDigest", { enumerable: true, get: function () { return unrealCandidate_1.candidateArtifactDigest; } });
+Object.defineProperty(exports, "defaultIdempotencyKey", { enumerable: true, get: function () { return unrealCandidate_1.defaultIdempotencyKey; } });
+Object.defineProperty(exports, "planSharedRuntimePublish", { enumerable: true, get: function () { return unrealCandidate_1.planSharedRuntimePublish; } });
+Object.defineProperty(exports, "UnrealCandidateError", { enumerable: true, get: function () { return unrealCandidate_1.UnrealCandidateError; } });
+Object.defineProperty(exports, "verifyUnrealCandidate", { enumerable: true, get: function () { return unrealCandidate_1.verifyUnrealCandidate; } });
+var unrealPublish_1 = require("./unrealPublish");
+Object.defineProperty(exports, "assertClientDeliveryMatchesPlan", { enumerable: true, get: function () { return unrealPublish_1.assertClientDeliveryMatchesPlan; } });
+Object.defineProperty(exports, "assertCreateResponseMatchesPlan", { enumerable: true, get: function () { return unrealPublish_1.assertCreateResponseMatchesPlan; } });
+Object.defineProperty(exports, "assertReceipt", { enumerable: true, get: function () { return unrealPublish_1.assertReceipt; } });
+Object.defineProperty(exports, "publishUnrealBuild", { enumerable: true, get: function () { return unrealPublish_1.publishUnrealBuild; } });
+Object.defineProperty(exports, "renderPublishFailure", { enumerable: true, get: function () { return unrealPublish_1.renderPublishFailure; } });
+Object.defineProperty(exports, "resolveWorldId", { enumerable: true, get: function () { return unrealPublish_1.resolveWorldId; } });
+Object.defineProperty(exports, "uploadArtifact", { enumerable: true, get: function () { return unrealPublish_1.uploadArtifact; } });
+var unreal_1 = require("./unreal");
+Object.defineProperty(exports, "formatUnrealValidationReport", { enumerable: true, get: function () { return unreal_1.formatUnrealValidationReport; } });
+Object.defineProperty(exports, "HELIX_UNREAL_CONTRACT_VERSION", { enumerable: true, get: function () { return unreal_1.HELIX_UNREAL_CONTRACT_VERSION; } });
+Object.defineProperty(exports, "HELIX_UNREAL_ENGINE_VERSION", { enumerable: true, get: function () { return unreal_1.HELIX_UNREAL_ENGINE_VERSION; } });
+Object.defineProperty(exports, "initUnrealManifest", { enumerable: true, get: function () { return unreal_1.initUnrealManifest; } });
+Object.defineProperty(exports, "packageUnrealProject", { enumerable: true, get: function () { return unreal_1.packageUnrealProject; } });
+Object.defineProperty(exports, "validateUnrealProject", { enumerable: true, get: function () { return unreal_1.validateUnrealProject; } });
 // Character import (`helix character import`) as a programmatic API. The implementation pulls in
 // gltf-transform + meshoptimizer (~165ms of require time), so it is loaded lazily at call time —
 // requiring lib.js (and therefore `helix --help`) stays fast.
@@ -106,15 +451,148 @@ async function importCharacter(opts) {
     const mod = await Promise.resolve().then(() => __importStar(require('./character/importCharacter')));
     return mod.importCharacter(opts);
 }
+// Headless screenshot capture (`helix screenshot`) as a programmatic API. Pulls in Playwright, so it
+// is loaded lazily at call time — requiring lib.js stays fast.
+async function captureScreenshots(opts) {
+    const mod = await Promise.resolve().then(() => __importStar(require('./screenshot/captureScreenshots')));
+    return mod.captureScreenshots(opts);
+}
+// Downscaled JPEG preview of a captured image (base64) — a compact stand-in for shipping a full-size
+// PNG, e.g. as an MCP image content block. Pulls in sharp, so it is loaded lazily at call time.
+async function encodeImagePreview(file, maxWidth) {
+    const mod = await Promise.resolve().then(() => __importStar(require('./screenshot/encodeImagePreview')));
+    return mod.encodeImagePreview(file, maxWidth);
+}
+// Gesture inspection (`helix gesture inspect`) as a programmatic API. Loads the WORLD's installed
+// character system + its three at call time, so it is lazy for the same reason as the others.
+async function inspectGesture(opts) {
+    const mod = await Promise.resolve().then(() => __importStar(require('./gesture/inspect')));
+    return mod.inspectGesture(opts);
+}
+async function formatGestureInspection(result, opts) {
+    const mod = await Promise.resolve().then(() => __importStar(require('./gesture/inspect')));
+    return mod.formatInspect(result, opts);
+}
+// Gesture contact sheet (`helix gesture shot`) as a programmatic API. Pulls in Playwright, so it is loaded
+// lazily at call time — requiring lib.js stays fast.
+async function captureGesture(opts) {
+    const mod = await Promise.resolve().then(() => __importStar(require('./gesture/capture')));
+    return mod.captureGesture(opts);
+}
+// World layout inspection (`helix world inspect`) as a programmatic API. The analyzer, formatter,
+// and differ are pure over snapshot JSON and load directly; the transport pulls in Playwright, so
+// it is loaded lazily at call time — requiring lib.js stays fast.
+var analyze_1 = require("./world/analyze");
+Object.defineProperty(exports, "analyzeWorld", { enumerable: true, get: function () { return analyze_1.analyzeWorld; } });
+Object.defineProperty(exports, "sortFindings", { enumerable: true, get: function () { return analyze_1.sortFindings; } });
+var format_1 = require("./world/format");
+Object.defineProperty(exports, "formatWorldInspection", { enumerable: true, get: function () { return format_1.formatWorldInspection; } });
+Object.defineProperty(exports, "DEFAULT_REPORT", { enumerable: true, get: function () { return format_1.DEFAULT_REPORT; } });
+var diff_1 = require("./world/diff");
+Object.defineProperty(exports, "diffWorldSnapshots", { enumerable: true, get: function () { return diff_1.diffWorldSnapshots; } });
+Object.defineProperty(exports, "formatWorldDiff", { enumerable: true, get: function () { return diff_1.formatWorldDiff; } });
+var zones_1 = require("./world/zones");
+Object.defineProperty(exports, "analyzeZones", { enumerable: true, get: function () { return zones_1.analyzeZones; } });
+var focus_1 = require("./world/focus");
+Object.defineProperty(exports, "formatWorldFocus", { enumerable: true, get: function () { return focus_1.formatWorldFocus; } });
+Object.defineProperty(exports, "resolveFocus", { enumerable: true, get: function () { return focus_1.resolveFocus; } });
+var wiring_1 = require("./world/wiring");
+Object.defineProperty(exports, "detectInspectWiring", { enumerable: true, get: function () { return wiring_1.detectInspectWiring; } });
+Object.defineProperty(exports, "detectNpcWiring", { enumerable: true, get: function () { return wiring_1.detectNpcWiring; } });
+var canonicalize_1 = require("./world/canonicalize");
+Object.defineProperty(exports, "canonicalizeSnapshot", { enumerable: true, get: function () { return canonicalize_1.canonicalizeSnapshot; } });
+var baseline_1 = require("./world/baseline");
+Object.defineProperty(exports, "applyBaseline", { enumerable: true, get: function () { return baseline_1.applyBaseline; } });
+Object.defineProperty(exports, "buildBaseline", { enumerable: true, get: function () { return baseline_1.buildBaseline; } });
+Object.defineProperty(exports, "parseBaseline", { enumerable: true, get: function () { return baseline_1.parseBaseline; } });
+Object.defineProperty(exports, "anchorOf", { enumerable: true, get: function () { return baseline_1.anchorOf; } });
+Object.defineProperty(exports, "BASELINE_FILENAME", { enumerable: true, get: function () { return baseline_1.BASELINE_FILENAME; } });
+async function snapshotWorld(opts) {
+    const mod = await Promise.resolve().then(() => __importStar(require('./world/snapshotWorld')));
+    return mod.snapshotWorld(opts);
+}
+// NPC simulation measurement + filmstrip over the same headless inspect lane. Both pull in Playwright,
+// so they load lazily at call time — requiring lib.js stays fast. The metric math itself is pure and
+// lives in ./npc/metrics; the formatter is pure too, but stays lazy so one import path covers both.
+async function inspectNpc(opts) {
+    const mod = await Promise.resolve().then(() => __importStar(require('./npc/inspect')));
+    return mod.inspectNpc(opts);
+}
+async function formatNpcInspection(result) {
+    const mod = await Promise.resolve().then(() => __importStar(require('./npc/format')));
+    return mod.formatNpcInspection(result);
+}
+async function captureNpc(opts) {
+    const mod = await Promise.resolve().then(() => __importStar(require('./npc/capture')));
+    return mod.captureNpc(opts);
+}
+// Reads WORLD_METRICS from the world's installed system — loads real ESM, so lazy like the others.
+async function readWorldMetrics(worldDir) {
+    const mod = await Promise.resolve().then(() => __importStar(require('./world/readWorldMetrics')));
+    return mod.readWorldMetrics(worldDir);
+}
+async function renderWorldMetricsText(metrics) {
+    const mod = await Promise.resolve().then(() => __importStar(require('./world/readWorldMetrics')));
+    return mod.renderWorldMetrics(metrics);
+}
+exports.WORLD_METRICS_UNSUPPORTED = 'the installed humanoid-character does not export WORLD_METRICS — it predates the table (added in 0.2.13). ' +
+    'Any existing ^0.2 pin already allows it — rerun the install (MCP: install_world_packages · CLI: helix install) and rebuild.';
+/** The bone axis table, read from a world's OWN pinned system — the engine holds the only authored copy. */
+async function readAxisTable(worldDir) {
+    const [{ loadGestureRuntime }, { renderAxisTableMarkdown, renderAxisTableJson }] = await Promise.all([
+        Promise.resolve().then(() => __importStar(require('./gesture/worldRuntime'))),
+        Promise.resolve().then(() => __importStar(require('./gesture/axisReference'))),
+    ]);
+    const runtime = await loadGestureRuntime(worldDir);
+    if (runtime.axisTable === null)
+        return null;
+    return { markdown: renderAxisTableMarkdown(runtime.axisTable), json: renderAxisTableJson(runtime.axisTable) };
+}
 const UPLOAD_CONCURRENCY = 6;
+exports.WORLD_DESCRIPTION_MAX = 1000;
 // Validate + resolve-or-create world + upload + finalize. Throws ApiError /
 // Error with human-readable messages on any failure.
-async function publishWorld(root, creds, onProgress = () => undefined) {
-    const bundle = (0, bundle_1.checkBundle)(root);
+async function publishWorld(root, creds, onProgress = () => undefined, options = {}) {
+    const enginePinReason = options.allowExactEnginePin === undefined ? undefined : (0, enginePins_1.requireOverrideReason)(options.allowExactEnginePin);
+    const bundle = (0, bundle_1.checkBundle)(root, {
+        compatibleResolverOrigin: creds.apiUrl,
+        allowExactEnginePin: enginePinReason,
+    });
     if (bundle.errors.length) {
         throw new Error(`Bundle is invalid:\n${bundle.errors.map((e) => `  - ${e}`).join('\n')}`);
     }
+    if (enginePinReason && bundle.exactEnginePins?.length) {
+        // Audit BEFORE any network write: an override that cannot be logged is refused (recordEnginePinOverride throws).
+        const logPath = (0, enginePins_1.recordEnginePinOverride)({
+            at: new Date().toISOString(),
+            slug: bundle.manifest.slug,
+            reason: enginePinReason,
+            command: 'publish',
+            pins: bundle.exactEnginePins.map((pin) => ({ slug: pin.slug, range: pin.range, sources: pin.sources })),
+            apiUrl: creds.apiUrl,
+        });
+        onProgress(`⚠ ${(0, enginePins_1.exactEnginePinOverrideWarning)(bundle.exactEnginePins, enginePinReason)}`);
+        onProgress(`  override recorded in ${logPath}`);
+    }
+    if (bundle.excluded.length) {
+        onProgress(`excluded ${bundle.excluded.length} path(s) via .helixignore`);
+    }
     const manifest = bundle.manifest;
+    // Refuse a world the server cannot realize BEFORE anything touches the network. Publishing first
+    // and discovering it afterwards would leave a live world that no player can start, which is the
+    // failure this gate exists for. flat-v0 and pre-module multiplayer worlds are untouched by this
+    // and never reach the registry.
+    if (!options.skipRealizabilityCheck) {
+        const failures = await (0, realizability_1.checkRealizability)(manifest, options.realizabilityDeps ?? (0, realizability_1.registryRealizabilityDeps)(creds.apiUrl));
+        if (failures.length)
+            throw new Error((0, realizability_1.renderRealizabilityRefusal)(failures));
+    }
+    // Build the source archive BEFORE anything touches the network. An over-cap
+    // or unreadable source directory must refuse while nothing has happened yet —
+    // failing after the build is live would leave the creator with a published
+    // world and an error, which reads as a failed publish.
+    const sourceDir = options.sourceDir ?? (0, node_path_1.resolve)(root, '..');
+    const archive = options.uploadSource ? (0, source_archive_1.createSourceArchive)(sourceDir) : null;
     // Emit the runtime multiplayer config (multiplayer.json) into the bundle for multiplayer worlds. It's
     // generated in-memory from the validated manifest — the authoritative copy — so drop any hand-placed
     // one first, keeping exactly one entry. The backend signs its URL into the room credential (configUrl).
@@ -123,28 +601,115 @@ async function publishWorld(root, creds, onProgress = () => undefined) {
         bundle.files = bundle.files.filter((f) => f.path !== bundle_1.MULTIPLAYER_CONFIG_FILENAME);
         bundle.files.push(multiplayerFile);
     }
+    const placement = (0, placementRequest_1.placementRequestBundleFile)(root, bundle.files, multiplayerFile, options.placementBindings ? (0, node_fs_1.readFileSync)(options.placementBindings) : undefined);
+    if (placement) {
+        bundle.files = bundle.files.filter(f => f.path !== placementRequest_1.PLACEMENT_REQUEST_FILENAME);
+        bundle.files.push(placement.file);
+    }
     const api = api_1.HelixApi.forCredentials(creds);
     const mine = await api.request('GET', '/api/v1/instant-worlds/me');
     let world = mine.data.find((w) => w.slug === manifest.slug);
+    if (placement && (!world || world.id !== placement.request.worldId)) {
+        throw new Error('Placement request must target the existing owned world; nothing was published');
+    }
+    // Resolve before capture, but capture/validate BEFORE any World/Build write.
+    const existingDetail = world ? await api.requestItem('GET', `/api/v1/instant-worlds/${manifest.slug}`) : null;
+    const requestedThumbnail = options.thumbnail ?? findBundleThumbnail(root);
+    bundle.files = bundle.files.filter(f => !/^helix\.thumbnail\.(auto|custom|required)\./.test(f.path));
+    let thumbnailSource = 'existing';
+    if (!existingDetail?.hasCustomThumbnail) {
+        let bytes;
+        let path;
+        if (requestedThumbnail) {
+            mediaContentTypeFromExtension(requestedThumbnail);
+            bytes = (0, node_fs_1.readFileSync)(requestedThumbnail);
+            // Consume the dedicated conventional cover once. Explicit selections may be
+            // runtime assets whose original paths must remain available to the World.
+            if (!options.thumbnail)
+                bundle.files = bundle.files.filter(f => (0, node_path_1.resolve)(f.absolutePath) !== (0, node_path_1.resolve)(requestedThumbnail));
+            path = `helix.thumbnail.custom${(0, node_path_1.extname)(requestedThumbnail).toLowerCase()}`;
+            thumbnailSource = options.thumbnail ? 'option' : 'bundle';
+        }
+        else {
+            onProgress('Capturing publication thumbnail from the ready world');
+            const snapshot = (0, node_fs_1.mkdtempSync)((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'helix-publish-bundle-'));
+            try {
+                // Capture precisely the filtered/generated bundle, and upload those same immutable bytes.
+                for (const file of bundle.files) {
+                    file.content = file.content ?? (0, node_fs_1.readFileSync)(file.absolutePath);
+                    file.size = file.content.byteLength;
+                    const staged = (0, node_path_1.join)(snapshot, file.path);
+                    (0, node_fs_1.mkdirSync)((0, node_path_1.dirname)(staged), { recursive: true });
+                    (0, node_fs_1.writeFileSync)(staged, file.content);
+                }
+                bytes = await (options.captureThumbnail ?? publishThumbnail_1.capturePublishThumbnail)(snapshot, manifest.entry, onProgress);
+            }
+            catch (err) {
+                throw new Error(`Automatic thumbnail capture failed; nothing was published: ${describeSourceFailure(err)}`);
+            }
+            finally {
+                (0, node_fs_1.rmSync)(snapshot, { recursive: true, force: true });
+            }
+            path = publishThumbnail_1.AUTO_THUMBNAIL_PATH;
+            thumbnailSource = 'capture';
+        }
+        assertMediaSizeOk(bytes.byteLength, 'thumbnail');
+        if (!bytes.byteLength)
+            throw new Error('Publication thumbnail is empty; nothing was published');
+        // Keep generated bytes in memory: source and bundle directories remain untouched.
+        bundle.files = bundle.files.filter(f => !/^helix\.thumbnail\.(auto|custom)\./.test(f.path));
+        bundle.files.push({ path, size: bytes.byteLength, absolutePath: '', content: bytes });
+    }
+    if (bundle.files.length > helix_manifest_1.BUNDLE_MAX_FILES || bundle.files.reduce((sum, f) => sum + f.size, 0) > helix_manifest_1.BUNDLE_MAX_TOTAL_BYTES) {
+        throw new Error('Bundle including publication thumbnail exceeds the file count or byte budget; nothing was published');
+    }
     if (!world) {
         onProgress(`Creating world "${manifest.title}" (${manifest.slug})`);
         world = await api.requestItem('POST', '/api/v1/instant-worlds', {
             title: manifest.title,
             slug: manifest.slug,
+            ...(options.description !== undefined ? { description: options.description } : {}),
+        });
+    }
+    else if (options.description !== undefined) {
+        // Existing world: the create body never runs again, so the description needs its own write.
+        // An empty string deliberately CLEARS it — that is how you remove a description.
+        onProgress(options.description ? 'Updating the world description' : 'Clearing the world description');
+        await api.request('PATCH', `/api/v1/instant-worlds/${world.id}`, {
+            description: options.description,
         });
     }
     onProgress(`Requesting upload for ${bundle.files.length} files`);
+    const buildFiles = bundle.files.map((file) => {
+        const body = file.content ?? (0, node_fs_1.readFileSync)(file.absolutePath);
+        return {
+            path: file.path,
+            size: file.size,
+            contentSha256: (0, node_crypto_1.createHash)('sha256').update(body).digest('hex'),
+        };
+    });
     const build = await api.requestItem('POST', `/api/v1/instant-worlds/${world.id}/builds`, {
         manifest,
-        files: bundle.files.map((f) => ({ path: f.path, size: f.size })),
+        files: buildFiles,
     });
+    if (build.thumbnailAssignmentVersion !== 1)
+        throw new Error('Backend does not support atomic publication thumbnails. Build remains inactive; activate the backend fix before retrying.');
+    const declaredByPath = new Map(buildFiles.map((file) => [file.path, file]));
     let done = 0;
     const queue = [...build.uploads];
     await Promise.all(Array.from({ length: UPLOAD_CONCURRENCY }, async () => {
         for (let ticket = queue.shift(); ticket; ticket = queue.shift()) {
             const file = bundle.files.find((f) => f.path === ticket.path);
+            const declared = declaredByPath.get(ticket.path);
+            if (ticket.contentSha256 !== declared.contentSha256) {
+                throw new Error(`upload ticket digest changed for ${ticket.path}; refusing to upload different bytes`);
+            }
             // Generated files (multiplayer.json) carry in-memory content; on-disk files are read by path.
-            await (0, api_1.uploadToTicket)(ticket.url, file.content ?? (0, node_fs_1.readFileSync)(file.absolutePath), ticket.contentType, ticket.cacheControl);
+            const body = file.content ?? (0, node_fs_1.readFileSync)(file.absolutePath);
+            if ((0, node_crypto_1.createHash)('sha256').update(body).digest('hex') !== declared.contentSha256) {
+                throw new Error(`bundle bytes changed after upload intent for ${ticket.path}; rebuild before publishing`);
+            }
+            await (0, api_1.uploadToTicket)(ticket.url, body, ticket.contentType, ticket.cacheControl, { contentSha256: ticket.contentSha256, writeOnce: true });
             done += 1;
             onProgress(`Uploaded ${done}/${build.uploads.length}`);
         }
@@ -152,6 +717,32 @@ async function publishWorld(root, creds, onProgress = () => undefined) {
     onProgress('Finalizing');
     await api.request('POST', `/api/v1/instant-worlds/${world.id}/builds/${build.buildId}/finalize`);
     const detail = await api.requestItem('GET', `/api/v1/instant-worlds/${manifest.slug}`);
+    if (detail.id !== world.id || detail.activeBuildId !== build.buildId)
+        throw new Error(`Build ${build.buildId} finalized, but another Build is now active; publication result is superseded. Inspect the World before retrying.`);
+    if (!detail.thumbnailUrl || detail.thumbnailUrl.startsWith('data:image/svg')) {
+        throw new Error(`Build ${build.buildId} was activated but its thumbnail is missing; publication is incomplete. Inspect this Build before retrying.`);
+    }
+    if (detail.hasCustomThumbnail && thumbnailSource === 'capture')
+        thumbnailSource = 'existing';
+    const settledDetail = detail;
+    const thumbnailWarning = null;
+    let source = { state: 'skipped' };
+    if (archive) {
+        onProgress(`Uploading source (${archive.files.length} files, ${(0, source_archive_1.formatArchiveSize)(archive.bytes.byteLength)})`);
+        try {
+            const recorded = await uploadWorldSource(api, detail.id, archive.bytes);
+            source = {
+                state: 'uploaded',
+                sizeBytes: archive.bytes.byteLength,
+                fileCount: archive.files.length,
+                version: recorded.version,
+                projectId: recorded.projectId,
+            };
+        }
+        catch (err) {
+            source = { state: 'failed', message: describeSourceFailure(err) };
+        }
+    }
     return {
         slug: manifest.slug,
         title: manifest.title,
@@ -159,30 +750,552 @@ async function publishWorld(root, creds, onProgress = () => undefined) {
         buildNumber: build.buildNumber,
         playUrl: detail.playUrl,
         worldUrl: `${creds.apiUrl}/api/v1/instant-worlds/${manifest.slug}`,
+        worldId: detail.id,
+        hasCustomThumbnail: settledDetail.hasCustomThumbnail,
+        thumbnailUrl: settledDetail.thumbnailUrl ?? null,
+        thumbnailSource,
+        thumbnailWarning,
+        source,
+    };
+}
+// --- World identity, without a build ----------------------------------------
+/** Who may stand up a persistent server for a world (backend `ServerCreationPermission`). */
+exports.SERVER_CREATION_PERMISSIONS = ['creator', 'collaborators', 'anyone'];
+/**
+ * Mint a world ROW without publishing a build — the identity products and
+ * achievements register against.
+ *
+ * Idempotency is CLIENT-side and lookup-first, exactly as publishWorld resolves
+ * a world: the backend 409s a duplicate slug even for its owner (its only
+ * server-side idempotency is keyed on projectId, which the public route's
+ * whitelisting ValidationPipe strips), so a bare re-POST is not an option. A
+ * slug owned by someone else surfaces the backend's 409 verbatim.
+ */
+async function createWorld(api, options) {
+    // The server trims + lowercases the slug before it stores one, so match on the
+    // same normalization or a stray "My-World" misses its own row and re-POSTs.
+    const slug = options.slug.trim().toLowerCase();
+    const mine = await api.request('GET', '/api/v1/instant-worlds/me');
+    const existing = mine.data.find((w) => w.slug === slug);
+    if (existing) {
+        return { id: existing.id, slug: existing.slug, status: existing.status, created: false };
+    }
+    // SingleResponseDto ({ item: T }), same envelope api.requestItem unwraps.
+    const response = await api.request('POST', '/api/v1/instant-worlds', {
+        title: options.title,
+        slug,
+        ...(options.description !== undefined ? { description: options.description } : {}),
+        ...(options.serverCreationPermission !== undefined
+            ? { serverCreationPermission: options.serverCreationPermission }
+            : {}),
+    });
+    const created = response.item;
+    return { id: created.id, slug: created.slug, status: created.status, created: true };
+}
+/**
+ * Upload one source archive against an already-published world.
+ *
+ * ONE byte length is computed once and sent to BOTH calls. Finalize asserts that
+ * the stored object's size equals the declared size — the presign binds
+ * ContentLength into the signature, so a mismatch means a different object was
+ * finalized than was declared. Reading the length twice from two places is
+ * exactly how that assertion starts failing for no reason.
+ */
+async function uploadWorldSource(api, worldId, bytes) {
+    const size = bytes.byteLength;
+    const ticket = await api.requestItem('POST', `/api/v1/instant-worlds/${worldId}/source`, { contentType: source_archive_1.SOURCE_CONTENT_TYPE, size });
+    // contentType and cacheControl come back from the ticket, not from our
+    // constants: both are bound into the presigned signature, so the PUT has to
+    // echo the server's values rather than assert its own.
+    await (0, api_1.uploadToTicket)(ticket.url, bytes, ticket.contentType, ticket.cacheControl);
+    return api.requestItem('POST', `/api/v1/instant-worlds/${worldId}/source/finalize`, { key: ticket.key, size });
+}
+/**
+ * One plain sentence for a source-channel failure — never a stack trace.
+ *
+ * The case this exists for: a deployment with no source bucket answers 503 with
+ * a message naming the missing variable. That is operational information, and a
+ * creator should read it as a sentence, not as an `✖ Service Unavailable (503)`
+ * block stapled onto an otherwise successful publish. Pure, so every shape can
+ * be asserted without a server.
+ */
+function describeSourceFailure(err) {
+    // ApiError's `message` is already the server's own message list, joined, and
+    // it falls back to `HTTP <status>` when the body carried none — so there is no
+    // empty case to guard and no reason to special-case ApiError at all.
+    return err instanceof Error ? err.message : String(err);
+}
+/**
+ * The website host a creator would edit this world on, for the environment the
+ * credentials point at. Production reads `helixgame.com`, which is the string
+ * spec §9.3 writes out; staging and helix3 read their own hosts instead of
+ * pointing a staging creator at production. Same idiom `helix login` uses.
+ */
+function editSiteHost(apiUrl) {
+    const webUrl = apiUrl === config_1.DEFAULT_API_URL ? config_1.DEFAULT_WEB_URL : (0, browserLogin_1.deriveWebUrl)(apiUrl);
+    try {
+        return new URL(webUrl).host;
+    }
+    catch {
+        return webUrl;
+    }
+}
+/**
+ * The single creator-facing line about source, per spec §9.3. A FACT, printed
+ * once — not a warning, not repeated.
+ *
+ * Lives here rather than in the CLI's command layer because MCP renders the
+ * same outcome to an agent and the two must not drift; `howToEnable` is the
+ * only part that differs (a CLI flag vs a tool argument).
+ */
+function sourceOutcomeLine(outcome, apiUrl, howToEnable = '--upload-source') {
+    const site = editSiteHost(apiUrl);
+    if (outcome.state === 'uploaded') {
+        return `Source uploaded (${(0, source_archive_1.formatArchiveSize)(outcome.sizeBytes)}). Editable at ${site}/create.`;
+    }
+    if (outcome.state === 'failed') {
+        return `Source was NOT uploaded: ${outcome.message} The world published fine; it is not editable on ${site} until source uploads.`;
+    }
+    return `Source not uploaded. Pass ${howToEnable} to enable editing this world on ${site}.`;
+}
+const MEDIA_CONTENT_TYPES = {
+    '.png': 'image/png',
+    '.jpg': 'image/jpeg',
+    '.jpeg': 'image/jpeg',
+    '.webp': 'image/webp',
+    '.avif': 'image/avif',
+    '.gif': 'image/gif',
+};
+const THUMBNAIL_MAX_BYTES = 8 * 1024 * 1024;
+const PREVIEW_MAX_BYTES = 32 * 1024 * 1024;
+// Content type from file extension — png/jpg/jpeg/webp only. Pure/testable without touching disk.
+function mediaContentTypeFromExtension(file) {
+    const ext = (0, node_path_1.extname)(file).toLowerCase();
+    const contentType = MEDIA_CONTENT_TYPES[ext];
+    if (!contentType)
+        throw new Error(`unsupported media file type "${ext || file}" — use png, jpg/jpeg, webp, avif, or gif`);
+    return contentType;
+}
+function findBundleThumbnail(root) {
+    for (const ext of Object.keys(MEDIA_CONTENT_TYPES)) {
+        const candidate = (0, node_path_1.join)(root, `thumbnail${ext}`);
+        if ((0, node_fs_1.existsSync)(candidate))
+            return candidate;
+    }
+    return undefined;
+}
+// Client-side size cap check — a friendlier failure than the server's 400 (world-media.ts:35-36).
+function assertMediaSizeOk(size, kind) {
+    const max = kind === 'preview' ? PREVIEW_MAX_BYTES : THUMBNAIL_MAX_BYTES;
+    if (size > max) {
+        throw new Error(`file is ${(size / 1024 / 1024).toFixed(1)} MiB — the ${kind} limit is ${(max / 1024 / 1024).toFixed(0)} MiB`);
+    }
+}
+// Anti-churn gate: an occupied slot refuses without an explicit --overwrite. Pure/testable —
+// no HTTP — so every slot/overwrite combination is covered without mocking the API.
+function assertMediaSlotWritable(world, kind, overwrite) {
+    const occupied = kind === 'thumbnail' ? world.hasCustomThumbnail : world.previewMediaUrl !== null;
+    if (!occupied || overwrite)
+        return;
+    const current = kind === 'thumbnail' ? world.thumbnailUrl : world.previewMediaUrl;
+    throw new Error(`The ${kind} slot is already set (${current}) — pass --overwrite to replace it (an explicit human decision, never automatic).`);
+}
+// Resolve the world (gate on the occupied-slot check) -> presign -> PUT -> finalize. Throws a clear
+// Error on a refused slot, unsupported file type, oversize file, or any ApiError from the server.
+async function setWorldMedia(slug, file, opts = {}) {
+    const creds = (0, config_1.loadCredentials)();
+    if (!creds)
+        throw new Error('Not logged in (or token expired). Run: helix login');
+    const api = api_1.HelixApi.forCredentials(creds);
+    return setWorldMediaWithApi(slug, file, api, opts);
+}
+async function setWorldMediaWithApi(slug, file, api, opts = {}) {
+    const kind = opts.kind ?? 'thumbnail';
+    const world = await api.requestItem('GET', `/api/v1/instant-worlds/${slug}`);
+    assertMediaSlotWritable(world, kind, opts.overwrite ?? false);
+    const contentType = mediaContentTypeFromExtension(file);
+    const bytes = (0, node_fs_1.readFileSync)(file);
+    assertMediaSizeOk(bytes.byteLength, kind);
+    const ticket = await api.requestItem('POST', `/api/v1/instant-worlds/${world.id}/media/upload`, {
+        contentType,
+        size: bytes.byteLength,
+        kind,
+    });
+    await (0, api_1.uploadToTicket)(ticket.url, bytes, ticket.contentType, ticket.cacheControl);
+    return api.requestItem('POST', `/api/v1/instant-worlds/${world.id}/media/finalize`, {
+        key: ticket.key,
+        kind,
+    });
+}
+// Clear a media slot back to the generated placeholder.
+async function clearWorldMedia(slug, kind) {
+    const creds = (0, config_1.loadCredentials)();
+    if (!creds)
+        throw new Error('Not logged in (or token expired). Run: helix login');
+    const api = api_1.HelixApi.forCredentials(creds);
+    const world = await api.requestItem('GET', `/api/v1/instant-worlds/${slug}`);
+    return api.requestItem('DELETE', `/api/v1/instant-worlds/${world.id}/media?kind=${kind}`);
+}
+// New asset publication uses the sealed Package-first API in publications.ts.
+var publications_1 = require("./publications");
+Object.defineProperty(exports, "publishGlb", { enumerable: true, get: function () { return publications_1.publishGlb; } });
+Object.defineProperty(exports, "makeItemFromPackage", { enumerable: true, get: function () { return publications_1.makeItemFromPackage; } });
+Object.defineProperty(exports, "publishOwnedItemFromPackage", { enumerable: true, get: function () { return publications_1.publishOwnedItemFromPackage; } });
+Object.defineProperty(exports, "PUBLICATIONS_UPLOAD_PATH", { enumerable: true, get: function () { return publications_1.PUBLICATIONS_UPLOAD_PATH; } });
+Object.defineProperty(exports, "ITEMS_FROM_PACKAGE_PATH", { enumerable: true, get: function () { return publications_1.ITEMS_FROM_PACKAGE_PATH; } });
+/**
+ * Delist a published universal item you own (CH-1671). Existing owners keep
+ * what they own; the item stops appearing on browse/marketplace and can no
+ * longer be newly acquired. This does NOT delete anything — `helix item
+ * publish` never made a delete path safe once anyone (including your own
+ * auto-granted copy) owns an instance, and delist is the actual way out.
+ * Only legal from a currently-published item; the server rejects a draft or
+ * an already-delisted one with a clear error (surfaced as ApiError).
+ */
+async function delistItem(itemId, creds, opts = {}, deps = {}) {
+    const api = deps.api ?? api_1.HelixApi.forCredentials(creds);
+    const body = opts.reason !== undefined ? { reason: opts.reason } : undefined;
+    const item = await api.requestItem('POST', `/api/v1/universal-items/${itemId}/delist`, body);
+    return item;
+}
+// --- Achievements -----------------------------------------------------------
+//
+// A world's achievement registry lives OUTSIDE the bundle: `helix.json` cannot
+// declare one, and `helix publish` cannot check that a key exists — so a rule
+// awarding an unregistered key publishes clean and no-ops at runtime. That is
+// why these commands exist at all: registration was API/website-only, which put
+// it out of reach of an agent building the world.
+//
+// Registration is ONE multipart round trip (text fields + a required 2D icon +
+// an optional GLB trophy) and mints the soulbound item behind the badge. The
+// world is addressed by SLUG here — the API is keyed by uuid, but a creator (and
+// an agent that just published) knows the slug.
+const achievementsWorldPath = (worldId) => `/api/v1/achievements/worlds/${worldId}`;
+exports.achievementsWorldPath = achievementsWorldPath;
+/**
+ * Everything `--dry-run` checks: the field rules, both files read and sniffed,
+ * and the icon proven to be a real, non-blank graphic. No network and no login,
+ * so an agent can verify a registration before asking a human to sign in.
+ */
+async function planAchievementRegistration(opts) {
+    const { fields, warnings } = (0, achievement_1.buildAchievementRegistration)(opts);
+    if (!opts.icon)
+        throw new Error('an achievement needs its 2D graphic — pass --icon <file>');
+    if (!(0, node_fs_1.existsSync)(opts.icon))
+        throw new Error(`icon file not found: ${opts.icon}`);
+    const iconContentType = (0, achievement_1.iconContentTypeFromExtension)(opts.icon);
+    const iconBytes = (0, node_fs_1.readFileSync)(opts.icon);
+    await (0, achievement_1.assertIconLooksReal)(iconBytes, opts.icon);
+    if (iconBytes.byteLength > achievement_1.ACHIEVEMENT_ICON_MAX_BYTES) {
+        throw new Error(`icon is ${(iconBytes.byteLength / 1024 / 1024).toFixed(1)} MiB — the limit is ${achievement_1.ACHIEVEMENT_ICON_MAX_BYTES / 1024 / 1024} MiB`);
+    }
+    let trophy = null;
+    let trophyBytes = null;
+    if (opts.trophy) {
+        if (!(0, node_fs_1.existsSync)(opts.trophy))
+            throw new Error(`trophy file not found: ${opts.trophy}`);
+        const trophyContentType = (0, item_1.meshContentTypeFromExtension)(opts.trophy);
+        trophyBytes = (0, node_fs_1.readFileSync)(opts.trophy);
+        (0, item_1.assertLooksLikeGlb)(trophyBytes, opts.trophy);
+        if (trophyBytes.byteLength > achievement_1.ACHIEVEMENT_TROPHY_MAX_BYTES) {
+            throw new Error(`trophy is ${(trophyBytes.byteLength / 1024 / 1024).toFixed(1)} MiB — the limit is ${achievement_1.ACHIEVEMENT_TROPHY_MAX_BYTES / 1024 / 1024} MiB`);
+        }
+        trophy = { file: opts.trophy, contentType: trophyContentType, sizeBytes: trophyBytes.byteLength };
+    }
+    else {
+        warnings.push('no --trophy given; the backend bakes your icon onto the default plaque so the badge is still placeable in a home.');
+    }
+    return {
+        worldSlug: opts.worldSlug,
+        fields,
+        icon: { file: opts.icon, contentType: iconContentType, sizeBytes: iconBytes.byteLength },
+        trophy,
+        warnings,
+        iconBytes,
+        trophyBytes,
     };
 }
+const filePart = (bytes, part) => [
+    new Blob([new Uint8Array(bytes)], { type: part.contentType }),
+    (0, node_path_1.basename)(part.file),
+];
+/**
+ * Register (and mint the soulbound item for) a world achievement. Validate
+ * locally → resolve the slug → one multipart POST. Throws ApiError
+ * (render()-able) on any server rejection — a duplicate key included.
+ */
+async function registerAchievement(opts, creds, deps = {}) {
+    const plan = await planAchievementRegistration(opts);
+    const onProgress = deps.onProgress ?? (() => undefined);
+    const api = deps.api ?? api_1.HelixApi.forCredentials(creds);
+    const world = await ownedWorldBySlug(api, opts.worldSlug);
+    const form = new FormData();
+    form.append('key', plan.fields.key);
+    form.append('name', plan.fields.name);
+    if (plan.fields.description !== undefined)
+        form.append('description', plan.fields.description);
+    if (plan.fields.points !== undefined)
+        form.append('points', String(plan.fields.points));
+    if (plan.fields.hidden !== undefined)
+        form.append('hidden', String(plan.fields.hidden));
+    form.append('unlockMode', plan.fields.unlockMode);
+    // The nested criteria rides as a JSON STRING: multipart has no object field,
+    // and the backend's DTO re-instantiates it from exactly this shape.
+    if (plan.fields.criteria)
+        form.append('criteria', JSON.stringify(plan.fields.criteria));
+    form.append('image', ...filePart(plan.iconBytes, plan.icon));
+    if (plan.trophy && plan.trophyBytes)
+        form.append('mesh', ...filePart(plan.trophyBytes, plan.trophy));
+    onProgress(`Registering "${plan.fields.key}" on ${world.slug} (${(plan.icon.sizeBytes / 1024).toFixed(1)} KiB icon)`);
+    const achievement = await api.sendMultipart('POST', (0, exports.achievementsWorldPath)(world.id), form);
+    return { achievement, warnings: plan.warnings };
+}
+/** Every achievement registered to a world, newest rollup data included. */
+async function listAchievements(worldSlug, creds, deps = {}) {
+    const api = deps.api ?? api_1.HelixApi.forCredentials(creds);
+    const world = await ownedWorldBySlug(api, worldSlug);
+    return api.request('GET', (0, exports.achievementsWorldPath)(world.id));
+}
+/**
+ * Resolve a world-scoped `key` to the item id every mutation route is keyed by.
+ * A creator (and every rule in their manifest) names the key; the uuid is an
+ * implementation detail they should never have to carry.
+ */
+async function achievementByKey(api, worldSlug, key) {
+    const world = await ownedWorldBySlug(api, worldSlug);
+    const rows = await api.request('GET', (0, exports.achievementsWorldPath)(world.id));
+    const wanted = key.trim().toLowerCase();
+    const found = rows.find((a) => a.key === wanted);
+    if (!found) {
+        const known = rows.map((a) => a.key).join(', ') || '(none registered yet)';
+        throw new Error(`No achievement with key "${wanted}" on world "${worldSlug}". Registered keys: ${known}`);
+    }
+    return found;
+}
+/**
+ * Patch a registered achievement. `key`, `unlockMode` and `criteria` are NOT
+ * patchable by design — a key is the identifier rules name, and re-declaring
+ * how a badge is earned would silently re-label every copy already granted.
+ */
+async function updateAchievement(worldSlug, key, patch, creds, deps = {}) {
+    const body = (0, achievement_1.buildAchievementUpdate)(patch);
+    const api = deps.api ?? api_1.HelixApi.forCredentials(creds);
+    const target = await achievementByKey(api, worldSlug, key);
+    return api.request('PATCH', `/api/v1/achievements/${target.id}`, body);
+}
+/**
+ * Replace the 2D graphic. This endpoint exists because creators were driving the
+ * generic universal-items presign route instead, which SUSPENDS the achievement;
+ * it also re-bakes the default plaque, so the change reaches the 3D badge too.
+ */
+async function setAchievementIcon(worldSlug, key, file, creds, deps = {}) {
+    if (!(0, node_fs_1.existsSync)(file))
+        throw new Error(`icon file not found: ${file}`);
+    const contentType = (0, achievement_1.iconContentTypeFromExtension)(file);
+    const bytes = (0, node_fs_1.readFileSync)(file);
+    await (0, achievement_1.assertIconLooksReal)(bytes, file);
+    if (bytes.byteLength > achievement_1.ACHIEVEMENT_ICON_MAX_BYTES) {
+        throw new Error(`icon is ${(bytes.byteLength / 1024 / 1024).toFixed(1)} MiB — the limit is ${achievement_1.ACHIEVEMENT_ICON_MAX_BYTES / 1024 / 1024} MiB`);
+    }
+    const api = deps.api ?? api_1.HelixApi.forCredentials(creds);
+    const target = await achievementByKey(api, worldSlug, key);
+    const form = new FormData();
+    form.append('image', ...filePart(bytes, { file, contentType, sizeBytes: bytes.byteLength }));
+    return api.sendMultipart('PUT', `/api/v1/achievements/${target.id}/icon`, form);
+}
+// --- Universal-item distributions ------------------------------------------
+exports.ITEM_DISTRIBUTIONS_PATH = '/api/v1/item-distributions';
+exports.ITEM_DISTRIBUTIONS_CREATOR_PATH = `${exports.ITEM_DISTRIBUTIONS_PATH}/creator`;
+/** A route is a Claim (free) when the server says so or its price is 0; the price may arrive as a number or a decimal
+ *  string, so `=== 0` alone mislabels a free route "Buy". */
+function isClaimRoute(d) {
+    if (d.isFree === true)
+        return true;
+    if (d.priceLix === null || d.priceLix === undefined || d.priceLix === '')
+        return false;
+    return Number(d.priceLix) === 0;
+}
+/** First line of `helix item distribution create`. `requestedPriceLix` backs up a response that omits the price. */
+function distributionCreatedHeadline(created, requestedPriceLix) {
+    const claim = isClaimRoute(created) || ((created.priceLix === undefined || created.priceLix === null) && requestedPriceLix === 0);
+    return claim ? '✔ Created Claim route (free).' : '✔ Created Buy route.';
+}
+const unwrapDistribution = (response) => 'item' in response ? response.item : response;
+/** Resolve an optional creator world slug, then create one canonical route. */
+async function createItemDistribution(options, creds, deps = {}) {
+    const api = deps.api ?? api_1.HelixApi.forCredentials(creds);
+    let fields = (0, distribution_1.buildItemDistribution)(options);
+    if (fields.worldSlug) {
+        const world = await ownedWorldBySlug(api, fields.worldSlug);
+        const { worldSlug: _worldSlug, ...withoutSlug } = fields;
+        fields = { ...withoutSlug, worldId: world.id };
+    }
+    // Derived AFTER slug resolution so the idempotency key covers the worldId
+    // the server will actually store, not the slug the caller typed.
+    const body = {
+        intentId: options.intentId ?? (0, distribution_1.distributionIntentId)(fields),
+        ...fields,
+    };
+    deps.onProgress?.(`${fields.priceLix === 0 ? 'Creating Claim' : 'Creating Buy'} distribution for ${options.itemId}`);
+    const response = await api.request('POST', exports.ITEM_DISTRIBUTIONS_PATH, body);
+    return unwrapDistribution(response);
+}
+async function listItemDistributions(itemId, creds, deps = {}) {
+    const api = deps.api ?? api_1.HelixApi.forCredentials(creds);
+    const response = await api.request('GET', `${exports.ITEM_DISTRIBUTIONS_CREATOR_PATH}?itemId=${encodeURIComponent(itemId)}`);
+    if (Array.isArray(response))
+        return response;
+    return response.distributions ?? response.data ?? [];
+}
+async function updateItemDistribution(distributionId, input, creds, deps = {}) {
+    const api = deps.api ?? api_1.HelixApi.forCredentials(creds);
+    const patch = (0, distribution_1.buildItemDistributionUpdate)(input);
+    const response = await api.request('PATCH', `${exports.ITEM_DISTRIBUTIONS_PATH}/${distributionId}`, patch);
+    return unwrapDistribution(response);
+}
+async function disableItemDistribution(distributionId, creds, deps = {}) {
+    const api = deps.api ?? api_1.HelixApi.forCredentials(creds);
+    const owned = await api.request('GET', exports.ITEM_DISTRIBUTIONS_CREATOR_PATH);
+    const rows = Array.isArray(owned) ? owned : owned.distributions ?? owned.data ?? [];
+    const current = rows.find((entry) => entry.id === distributionId);
+    if (!current || !current.updatedAt || !Number.isFinite(Date.parse(current.updatedAt))) {
+        throw new Error('Cannot disable distribution without its current creator-owned revision');
+    }
+    // One optimistic write: a conflict must reach the caller, never trigger a
+    // blind retry against a newer policy another editor just saved.
+    const response = await api.request('POST', `${exports.ITEM_DISTRIBUTIONS_PATH}/${distributionId}/disable`, { expectedUpdatedAt: current.updatedAt });
+    return unwrapDistribution(response);
+}
+// --- In-world products ------------------------------------------------------
+//
+// A world's product registry is what `Helix.purchase` sells: the shell holds the
+// player's session, renders the confirm popup and settles server-side, so a
+// world can only sell what a CREATOR registered here first. Registration was
+// API/website-only, which put monetizing a world out of reach of the agent that
+// built it — that is the gap these commands close.
+//
+// ORDERING: registration needs the world ROW to exist and be owned, NOT a
+// Published status — `helix world create` mints that row before any build, and
+// `helix product list <slug>` reads a Draft world's registry. Only the no-slug
+// creator listing (`GET creator/worlds`) filters to Published.
+//
+// The world is addressed by SLUG here — the API is keyed by uuid, but a creator
+// (and an agent that just published) knows the slug.
+exports.PRODUCTS_PATH = '/api/v1/iwp/products';
+exports.CREATOR_WORLDS_PATH = '/api/v1/iwp/creator/worlds';
+const productsWorldPath = (worldId) => `${exports.CREATOR_WORLDS_PATH}/${worldId}/products`;
+exports.productsWorldPath = productsWorldPath;
+/**
+ * Everything `--dry-run` checks: the field rules and the type/item coherence.
+ * No network and no login, so an agent can verify a registration before asking
+ * a human to sign in.
+ */
+function planProductRegistration(opts) {
+    const { fields, warnings } = (0, product_1.buildProductRegistration)(opts);
+    return { worldSlug: opts.worldSlug, fields, warnings };
+}
+/**
+ * Register a purchasable product on a world: validate locally → resolve the slug
+ * → one JSON POST. Throws ApiError (render()-able) on any server rejection — a
+ * duplicate key, an unpublished linked item, or a non-owned world included.
+ */
+async function registerProduct(opts, creds, deps = {}) {
+    const plan = planProductRegistration(opts);
+    const onProgress = deps.onProgress ?? (() => undefined);
+    const api = deps.api ?? api_1.HelixApi.forCredentials(creds);
+    const world = await ownedWorldBySlug(api, opts.worldSlug);
+    onProgress(`Registering "${plan.fields.title}" on ${world.slug} at ${plan.fields.priceLix} LIX`);
+    const product = await api.request('POST', exports.PRODUCTS_PATH, { worldId: world.id, ...plan.fields });
+    return { product, warnings: plan.warnings };
+}
+/** Every product registered to a world, active or not. */
+async function listProducts(worldSlug, creds, deps = {}) {
+    const api = deps.api ?? api_1.HelixApi.forCredentials(creds);
+    const world = await ownedWorldBySlug(api, worldSlug);
+    const res = await api.request('GET', (0, exports.productsWorldPath)(world.id));
+    return res.products ?? [];
+}
+/** Every PUBLISHED world of the caller's with its registry — the "where can I sell?" view. */
+async function listProductWorlds(creds, deps = {}) {
+    const api = deps.api ?? api_1.HelixApi.forCredentials(creds);
+    const res = await api.request('GET', exports.CREATOR_WORLDS_PATH);
+    return res.worlds ?? [];
+}
+/**
+ * Resolve a product within a world to the uuid every mutation route is keyed by.
+ * `ref` is the creator's `key` — or the uuid itself, because a key is optional
+ * and a keyless product has nothing else to name it by.
+ */
+async function productByRef(api, worldSlug, ref) {
+    const world = await ownedWorldBySlug(api, worldSlug);
+    const res = await api.request('GET', (0, exports.productsWorldPath)(world.id));
+    const rows = res.products ?? [];
+    const wanted = ref.trim().toLowerCase();
+    const found = rows.find((p) => p.id === ref.trim() || (p.key !== null && p.key === wanted));
+    if (!found) {
+        const known = rows.map((p) => p.key ?? `${p.title} (${p.id})`).join(', ') || '(none registered yet)';
+        throw new Error(`No product with key or id "${ref}" on world "${worldSlug}". Registered products: ${known}`);
+    }
+    return found;
+}
+/**
+ * Patch a registered product. `key` and `type` are NOT patchable by design — a
+ * key is what world code buys (`pkey:<key>`), and changing what a purchase
+ * hands over would re-label every copy already sold.
+ */
+async function updateProduct(worldSlug, ref, patch, creds, deps = {}) {
+    const body = (0, product_1.buildProductUpdate)(patch);
+    const api = deps.api ?? api_1.HelixApi.forCredentials(creds);
+    const target = await productByRef(api, worldSlug, ref);
+    return api.request('PATCH', `${exports.PRODUCTS_PATH}/${target.id}`, body);
+}
+/**
+ * Take a product off sale (or put it back). Deactivating is the only way to
+ * retire one: the row stays, so past purchases and their grants still resolve.
+ */
+async function setProductActive(worldSlug, ref, active, creds, deps = {}) {
+    const api = deps.api ?? api_1.HelixApi.forCredentials(creds);
+    const target = await productByRef(api, worldSlug, ref);
+    return api.request('POST', `${exports.PRODUCTS_PATH}/${target.id}/active`, { active });
+}
 // Validate the bundle → create the version (presigned tickets per code/asset
 // channel) → upload → finalize. Admin-only on the server.
-async function publishPackage(root, creds, onProgress = () => undefined) {
-    const validator = await (0, ability_1.loadVendoredValidator)();
+async function publishPackage(root, creds, onProgress = () => undefined, deps = {}) {
+    const validator = deps.validator ?? (await (0, ability_1.loadVendoredValidator)());
     const check = (0, package_1.checkPackageBundle)(root, validator);
     if (check.errors.length || !check.envelope) {
         throw new Error(`Bundle is invalid:\n${check.errors.map((e) => `  - ${e}`).join('\n')}`);
     }
     const envelope = check.envelope;
-    const api = api_1.HelixApi.forCredentials(creds);
+    const api = deps.api ?? api_1.HelixApi.forCredentials(creds);
+    const files = check.files.map((file) => {
+        const body = (0, node_fs_1.readFileSync)(file.absolutePath);
+        return {
+            ...file,
+            body,
+            checksumSha256: (0, node_crypto_1.createHash)('sha256').update(body).digest('hex'),
+        };
+    });
     onProgress(`Publishing ${envelope.kind} "${envelope.title}" (${envelope.slug}@${envelope.version}) — ${check.files.length} files`);
     const created = await api.requestItem('POST', `/api/v1/instant-packages/${envelope.slug}/versions`, {
         manifest: envelope,
         payload: check.payload ?? undefined,
-        files: check.files.map((f) => ({ path: f.path, size: f.size })),
+        files: files.map((f) => ({
+            path: f.path,
+            size: f.size,
+            checksumSha256: f.checksumSha256,
+        })),
     });
+    if (created.status === 'active' && created.uploads.length === 0) {
+        onProgress('Already active with the same verified checksum — no-op');
+        return api.requestItem('GET', `/api/v1/instant-packages/${envelope.slug}/versions/${encodeURIComponent(envelope.version)}`);
+    }
     let done = 0;
     const queue = [...created.uploads];
     await Promise.all(Array.from({ length: UPLOAD_CONCURRENCY }, async () => {
         for (let ticket = queue.shift(); ticket; ticket = queue.shift()) {
-            const file = check.files.find((f) => f.path === ticket.path);
-            await (0, api_1.uploadToTicket)(ticket.url, (0, node_fs_1.readFileSync)(file.absolutePath), ticket.contentType, ticket.cacheControl);
+            const file = files.find((f) => f.path === ticket.path);
+            await (deps.upload ?? api_1.uploadToTicket)(ticket.url, file.body, ticket.contentType, ticket.cacheControl);
             done += 1;
             onProgress(`Uploaded ${done}/${created.uploads.length}`);
         }
@@ -196,8 +1309,19 @@ async function publishPackage(root, creds, onProgress = () => undefined) {
         revision: final.revision,
         codeBaseUrl: final.codeBaseUrl,
         assetBaseUrl: final.assetBaseUrl,
+        checksumSha256: final.checksumSha256,
     };
 }
+async function publishInteractable(root, creds, onProgress = () => undefined, deps = {}) {
+    const published = await (deps.publishPackage ?? publishPackage)(root, creds, onProgress, deps);
+    if (published.kind !== 'interactable' || !published.checksumSha256) {
+        throw new Error(`publish-interactable requires an interactable bundle with a verified checksum; got ${published.kind}`);
+    }
+    const api = deps.api ?? api_1.HelixApi.forCredentials(creds);
+    onProgress('Linking the official free Marketplace item');
+    const linked = await api.request('POST', `/api/v1/instant-packages/${published.slug}/versions/${encodeURIComponent(published.version)}/product`);
+    return { ...published, ...linked };
+}
 // Public discovery — no auth. List published systems/abilities/asset-packs.
 function listPackages(apiUrl, kind, system) {
     const api = new api_1.HelixApi(apiUrl);
@@ -244,7 +1368,8 @@ async function ownedWorldBySlug(api, slug) {
     const world = mine.data.find((w) => w.slug === slug);
     if (!world) {
         const known = mine.data.map((w) => w.slug).join(', ') || '(none)';
-        throw new Error(`No world of yours has the slug "${slug}". Your worlds: ${known}`);
+        throw new Error(`No world of yours has the slug "${slug}". Your worlds: ${known}. ` +
+            `Run 'helix world create --slug ${slug} --title <title>' first.`);
     }
     return world;
 }
@@ -407,4 +1532,42 @@ async function checkForUpdates(opts = {}) {
         return { name: registryName, installed, latest, status, updateHint };
     }));
 }
+var doctor_1 = require("./unreal/doctor");
+Object.defineProperty(exports, "runUnrealDoctor", { enumerable: true, get: function () { return doctor_1.runUnrealDoctor; } });
+Object.defineProperty(exports, "locateEditorCmd", { enumerable: true, get: function () { return doctor_1.locateEditorCmd; } });
+Object.defineProperty(exports, "findUProject", { enumerable: true, get: function () { return doctor_1.findUProject; } });
+Object.defineProperty(exports, "DOCTOR_REPORT_SCHEMA", { enumerable: true, get: function () { return doctor_1.DOCTOR_REPORT_SCHEMA; } });
+var itemThumbnail_1 = require("./itemThumbnail");
+Object.defineProperty(exports, "refreshItemThumbnail", { enumerable: true, get: function () { return itemThumbnail_1.refreshItemThumbnail; } });
+Object.defineProperty(exports, "setItemThumbnail", { enumerable: true, get: function () { return itemThumbnail_1.setItemThumbnail; } });
+Object.defineProperty(exports, "describeThumbnailError", { enumerable: true, get: function () { return itemThumbnail_1.describeThumbnailError; } });
+Object.defineProperty(exports, "renderItemThumbnailResult", { enumerable: true, get: function () { return itemThumbnail_1.renderItemThumbnailResult; } });
+Object.defineProperty(exports, "MAX_ITEM_THUMBNAIL_BYTES", { enumerable: true, get: function () { return itemThumbnail_1.MAX_ITEM_THUMBNAIL_BYTES; } });
+var foliageLods_1 = require("./placements/foliageLods");
+Object.defineProperty(exports, "bakeFoliageLods", { enumerable: true, get: function () { return foliageLods_1.bakeFoliageLods; } });
+var attachFoliageLods_1 = require("./placements/attachFoliageLods");
+Object.defineProperty(exports, "attachFoliageLods", { enumerable: true, get: function () { return attachFoliageLods_1.attachFoliageLods; } });
+var scene_1 = require("./sceneHlod/scene");
+Object.defineProperty(exports, "bakeSceneHlod", { enumerable: true, get: function () { return scene_1.bakeSceneHlod; } });
+Object.defineProperty(exports, "inspectSceneHlod", { enumerable: true, get: function () { return scene_1.inspectSceneHlod; } });
+Object.defineProperty(exports, "tagSceneHlod", { enumerable: true, get: function () { return scene_1.tagSceneHlod; } });
+Object.defineProperty(exports, "planSceneHlod", { enumerable: true, get: function () { return scene_1.planSceneHlod; } });
+Object.defineProperty(exports, "DEFAULT_HLOD_LAYER", { enumerable: true, get: function () { return scene_1.DEFAULT_HLOD_LAYER; } });
+Object.defineProperty(exports, "HLOD_BAKER_VERSION", { enumerable: true, get: function () { return scene_1.HLOD_BAKER_VERSION; } });
+var bakeSurface_1 = require("./sceneHlod/bakeSurface");
+Object.defineProperty(exports, "bakeHlodSurface", { enumerable: true, get: function () { return bakeSurface_1.bakeHlodSurface; } });
+var approximate_1 = require("./sceneHlod/approximate");
+Object.defineProperty(exports, "approximateHlodGeometry", { enumerable: true, get: function () { return approximate_1.approximateHlodGeometry; } });
+var sharedAtlas_1 = require("./sceneHlod/sharedAtlas");
+Object.defineProperty(exports, "planSharedHlodAtlas", { enumerable: true, get: function () { return sharedAtlas_1.planSharedHlodAtlas; } });
+Object.defineProperty(exports, "bakeSharedHlodAtlas", { enumerable: true, get: function () { return sharedAtlas_1.bakeSharedHlodAtlas; } });
+var cellArtifact_1 = require("./sceneHlod/cellArtifact");
+Object.defineProperty(exports, "writeHlodCellGlb", { enumerable: true, get: function () { return cellArtifact_1.writeHlodCellGlb; } });
+Object.defineProperty(exports, "writeSharedHlodMaterialGlb", { enumerable: true, get: function () { return cellArtifact_1.writeSharedHlodMaterialGlb; } });
+var complete_1 = require("./sceneHlod/complete");
+Object.defineProperty(exports, "bakeCompleteSceneHlod", { enumerable: true, get: function () { return complete_1.bakeCompleteSceneHlod; } });
+Object.defineProperty(exports, "DEFAULT_COMPLETE_HLOD_SETTINGS", { enumerable: true, get: function () { return complete_1.DEFAULT_COMPLETE_HLOD_SETTINGS; } });
+var refinement_1 = require("./sceneHlod/refinement");
+Object.defineProperty(exports, "bakeSceneHlodRefinements", { enumerable: true, get: function () { return refinement_1.bakeSceneHlodRefinements; } });
+Object.defineProperty(exports, "DEFAULT_HLOD_REFINEMENT_SETTINGS", { enumerable: true, get: function () { return refinement_1.DEFAULT_HLOD_REFINEMENT_SETTINGS; } });
 //# sourceMappingURL=lib.js.map