@jchat/addon-sdk 1.0.0-alpha.23 → 1.0.0-alpha.25

package/CHANGELOG.md

@@ -1,5 +1,41 @@
 # @jchat/addon-sdk
 
+## 1.0.0-alpha.25
+
+### Patch Changes
+
+- Update package metadata, documentation, and license links
+
+- Bumped `@jchat/*` dependencies:
+  - [`icon@1.0.0-alpha.23`](https://github.com/jchatcloud/jchat/releases/tag/icon@v1.0.0-alpha.23)
+  - [`ui@1.0.0-alpha.25`](https://github.com/jchatcloud/jchat/releases/tag/ui@v1.0.0-alpha.25)
+
+## 1.0.0-alpha.24
+
+### Minor Changes
+
+- Add required logo property to AddonManifest contract
+
+- Add set operations, atomic rate limiter, and mock testing utilities
+
+- Add distribution property to AddonManifest for commercial and free classification
+
+- Export typed chat message, attachment, runtime log, and signing contracts
+
+### Patch Changes
+
+- Export HOST_LOCALES in contracts module
+
+- Update default service and documentation domains to jchatcloud.com
+
+- Update package repository URLs to jarvistack organization
+
+- Improve code formatting and style consistency
+
+- Bumped `@jchat/*` dependencies:
+  - [`icon@1.0.0-alpha.22`](https://github.com/jchatcloud/jchat/releases/tag/icon@v1.0.0-alpha.22)
+  - [`ui@1.0.0-alpha.24`](https://github.com/jchatcloud/jchat/releases/tag/ui@v1.0.0-alpha.24)
+
 ## 1.0.0-alpha.23
 
 ### Patch Changes
@@ -7,14 +43,14 @@
 - Support newline normalization for addon signing private keys
 
 - Bumped `@jchat/*` dependencies:
-  - [`ui@1.0.0-alpha.23`](https://github.com/mjjabarullah/jchat/releases/tag/ui@v1.0.0-alpha.23)
+  - [`ui@1.0.0-alpha.23`](https://github.com/jchatcloud/jchat/releases/tag/ui@v1.0.0-alpha.23)
 
 ## 1.0.0-alpha.22
 
 ### Minor Changes
 
 - Introduce composer preview slot, active addon coordination, and lifecycle optimizations
-  
+
   - Add CHAT_COMPOSER_PREVIEW mount point for live composer rich card previews
   - Optimize message lifecycle pipeline with active addon caching and AbortSignal cancellation
   - Allow passing verifyEntitlement function directly to verifyAddonEntitlement
@@ -24,7 +60,7 @@
 ### Patch Changes
 
 - Bumped `@jchat/*` dependencies:
-  - [`ui@1.0.0-alpha.22`](https://github.com/mjjabarullah/jchat/releases/tag/ui@v1.0.0-alpha.22)
+  - [`ui@1.0.0-alpha.22`](https://github.com/jchatcloud/jchat/releases/tag/ui@v1.0.0-alpha.22)
 
 ## 1.0.0-alpha.21
 
@@ -43,24 +79,24 @@
 - Enhance add-on CSS compilation to ensure consistent styling across dialogs and portals
 
 - Bumped `@jchat/*` dependencies:
-  - [`icon@1.0.0-alpha.21`](https://github.com/mjjabarullah/jchat/releases/tag/icon@v1.0.0-alpha.21)
-  - [`ui@1.0.0-alpha.21`](https://github.com/mjjabarullah/jchat/releases/tag/ui@v1.0.0-alpha.21)
+  - [`icon@1.0.0-alpha.21`](https://github.com/jchatcloud/jchat/releases/tag/icon@v1.0.0-alpha.21)
+  - [`ui@1.0.0-alpha.21`](https://github.com/jchatcloud/jchat/releases/tag/ui@v1.0.0-alpha.21)
 
 ## 1.0.0-alpha.20
 
 ### Patch Changes
 
 - Bumped `@jchat/*` dependencies:
-  - [`icon@1.0.0-alpha.20`](https://github.com/mjjabarullah/jchat/releases/tag/icon@v1.0.0-alpha.20)
-  - [`ui@1.0.0-alpha.20`](https://github.com/mjjabarullah/jchat/releases/tag/ui@v1.0.0-alpha.20)
+  - [`icon@1.0.0-alpha.20`](https://github.com/jchatcloud/jchat/releases/tag/icon@v1.0.0-alpha.20)
+  - [`ui@1.0.0-alpha.20`](https://github.com/jchatcloud/jchat/releases/tag/ui@v1.0.0-alpha.20)
 
 ## 1.0.0-alpha.19
 
 ### Patch Changes
 
 - Bumped `@jchat/*` dependencies:
-  - [`icon@1.0.0-alpha.19`](https://github.com/mjjabarullah/jchat/releases/tag/icon@v1.0.0-alpha.19)
-  - [`ui@1.0.0-alpha.19`](https://github.com/mjjabarullah/jchat/releases/tag/ui@v1.0.0-alpha.19)
+  - [`icon@1.0.0-alpha.19`](https://github.com/jchatcloud/jchat/releases/tag/icon@v1.0.0-alpha.19)
+  - [`ui@1.0.0-alpha.19`](https://github.com/jchatcloud/jchat/releases/tag/ui@v1.0.0-alpha.19)
 
 ## 1.0.0-alpha.17
 

package/LICENSE

@@ -1,6 +1,6 @@
 CUSTOM COMMERCIAL END USER LICENSE AGREEMENT (EULA)
 
-Copyright (c) 2026 JChat Project. All rights reserved.
+Copyright (c) 2026 Jchat Cloud. All rights reserved.
 
 1. DEFINITIONS
 "Software" refers to this npm package and its source code.

package/README.md

@@ -1,11 +1,11 @@
 # @jchat/addon-sdk
 
-Official TypeScript SDK for developing extensions, UI widgets, and server plugins for the [JChat](https://jchatplatform.com) communication platform.
+Official TypeScript SDK for developing extensions, UI widgets, and server plugins for the [JChat](https://jchatcloud.com) communication platform.
 
 Provides typed interfaces, manifest contracts, Vite bundler plugins, and CLI development tooling for building sandboxed JChat addons.
 
 [![npm version](https://img.shields.io/npm/v/@jchat/addon-sdk.svg)](https://www.npmjs.com/package/@jchat/addon-sdk)
-[![License](https://img.shields.io/badge/license-Proprietary-blue.svg)](https://jchatplatform.com/terms)
+[![License](https://img.shields.io/badge/license-Proprietary-blue.svg)](https://jchatcloud.com/terms)
 
 ---
 
@@ -401,10 +401,10 @@ bun run build
 1. Build your addon package: `bun run build`.
 2. Ensure all 20 translation files pass validation: `bun test`.
 3. Package your addon distribution archive.
-4. Sign in to the **[JChat Store Developer Portal](https://jchatplatform.com/addons)** and submit your addon package for certified distribution.
+4. Sign in to the **[JChat Store Developer Portal](https://jchatcloud.com/addons)** and submit your addon package for certified distribution.
 
 ---
 
 ## License
 
-Proprietary — All rights reserved. See the [Commercial EULA & Licensing Terms](https://jchatplatform.com/terms) for full details.
+Proprietary — All rights reserved. See the [Commercial EULA & Licensing Terms](https://jchatcloud.com/terms) for full details.

package/dist/cli.d.mts

@@ -1,4 +1,4 @@
-import { AddonManifest } from "./contracts.mjs";
+import { l as AddonManifest } from "./contracts2.mjs";
 import { InlineConfig } from "vite";
 //#region src/cli.d.ts
 /** Options for resolving addon build configuration. */

package/dist/cli.mjs

@@ -1,6 +1,6 @@
 import { jchatAddon } from "./vite.mjs";
-import fs from "node:fs";
 import path from "node:path";
+import fs from "node:fs";
 import tailwindcss from "@tailwindcss/vite";
 import { pathToFileURL } from "node:url";
 import { build, loadConfigFromFile, mergeConfig } from "vite";

package/dist/contracts.d.mts

@@ -1,144 +1,2 @@
-//#region src/contracts.d.ts
-/** Definition of a custom permission introduced by an addon. */
-export interface AddonPermissionDefinition {
-  /** Permission identifier (recommended: `addon.<id>.<action>`) */
-  name: string;
-  /** Short, human-readable name for the permission */
-  label: string;
-  /** Detailed description of what the permission grants (shown in Rank editor) */
-  description: string;
-}
-/** Valid locations where an addon can be rendered within the Jchat layout. */
-export declare const MOUNT_POINTS: {
-  /** Top of the main chat column */
-  readonly CHAT_HEADER: "chat-header";
-  /** Below the main chat header, above messages */
-  readonly CHAT_TOOLBAR: "chat-toolbar";
-  /** The persistent right-side sidebar */
-  readonly CHAT_SIDEBAR: "chat-sidebar";
-  /** Top of the left sidebar (room list) */
-  readonly SIDEBAR_TOP: "sidebar-top";
-  /** Bottom of the left sidebar */
-  readonly SIDEBAR_BOTTOM: "sidebar-bottom";
-  /** Action list shown when clicking a user's avatar */
-  readonly USER_POPOVER_ACTIONS: "user-popover-actions";
-  /** Menu shown when right-clicking a message */
-  readonly MESSAGE_CONTEXT_MENU: "message-context-menu";
-  /** Floating overlay rendered on top of the message stream */
-  readonly MESSAGE_FEED_OVERLAY: "message-feed-overlay";
-  /** Main admin dashboard area */
-  readonly ADMIN_PANEL: "admin-panel";
-  /** User or site settings dashboard area */
-  readonly SETTINGS_PANEL: "settings-panel";
-  /** The 'plus' (+) menu in the message composer */
-  readonly CHAT_PLUS_MENU: "chat-plus-menu";
-  /** Custom tab in the emoji/gif selection panel */
-  readonly EMOJI_PICKER_GIF_TAB: "emoji-picker-gif-tab";
-  /** Custom tab in the emoji/sticker selection panel */
-  readonly EMOJI_PICKER_STICKER_TAB: "emoji-picker-sticker-tab";
-  /** Dedicated settings panel rendered in the Owner Dashboard */
-  readonly OWNER_SETTINGS: "owner-settings";
-  /** Dedicated settings panel rendered in the Site Admin Dashboard */
-  readonly ADDON_SETTINGS: "addon-settings";
-  /** Custom interactive card rendered inside an enriched chat message */
-  readonly CHAT_MESSAGE_CARD: "chat-message-card";
-  /** Custom badge, audio equalizer, or particle aura rendered on a chat bubble */
-  readonly CHAT_MESSAGE_FLAIR: "chat-message-flair";
-  /** Custom interactive preview card rendered in the message composer */
-  readonly CHAT_COMPOSER_PREVIEW: "chat-composer-preview";
-};
-/** Union type of all valid addon mount points. */
-export type MountPoint = (typeof MOUNT_POINTS)[keyof typeof MOUNT_POINTS];
-/** Parameter specification for an addon slash command. */
-export interface AddonCommandParameter {
-  name: string;
-  description?: string;
-  required?: boolean;
-}
-/** Declaration of an addon slash command available in the chat composer. */
-export interface AddonCommandDefinition {
-  /** The command keyword without leading slash (e.g. 'yt', 'roll', 'poll') */
-  name: string;
-  /** Short summary of what the command does, displayed in autocomplete */
-  description: string;
-  /** Usage syntax displayed as a hint (e.g. '<query | url>') */
-  syntax?: string;
-  /** Parameters accepted by this command */
-  parameters?: AddonCommandParameter[];
-}
-/**
- * The `manifest.json` schema required for every Jchat addon. This file describes how the addon is
- * identified and mounted.
- */
-export interface AddonManifest {
-  /** Unique kebab-case addon identifier (must match the folder name) */
-  id: string;
-  /** Human-readable addon name */
-  name: string;
-  /** Semver version string (e.g. `1.2.0`) */
-  version: string;
-  /** Brief summary of what the addon does */
-  description?: string;
-  /** Author name, organization, or GitHub handle */
-  author?: string;
-  /** Support or documentation URL */
-  homepage?: string;
-  /** SPDX license identifier (e.g. `MIT`) */
-  license?: string;
-  /**
-   * Supported language codes (e.g. ["ar", "de", "en", "es", "fr", "hi", "kn", "ml", "ta", "te",
-   * "ur"])
-   */
-  locales?: string[];
-  /** Default fallback language code (e.g. "en") */
-  defaultLocale?: string;
-  /** Host and SDK versions this directly executed plugin was built and tested against */
-  compatibility: {
-    /** Supported JChat versions as a semantic-version range, for example `^1.0.0` */
-    jchat: string;
-    /** Supported `@jchat/addon-sdk` versions as a semantic-version range */
-    addonSdk: string;
-  };
-  /** Identity of the trusted publisher that signed this package. Required when migrations exist */
-  publisher?: {
-    id: string;
-  };
-  /** Signature over the canonical archive digest. Required when migrations exist */
-  signature?: {
-    algorithm: "rsa-sha256";
-    digest: string;
-    value: string;
-  };
-  /** Configuration for the React-based frontend bundle */
-  frontend?: {
-    /** Relative path to the pre-compiled ESM bundle (created by Vite) */
-    bundle: string;
-    /** List of UI locations where this addon should be active */
-    mountPoints: MountPoint[];
-    /** Optional path to a specific UI for the settings panel */
-    settings?: string;
-    /** Additional shared packages this addon imports from the host */
-    externals?: string[];
-  };
-  /** Configuration for the server-side API bundle */
-  server?: {
-    /** Relative path to the pre-compiled server bundle */
-    bundle?: string;
-    /** List of SQL files to run (in order) to set up the addon's database tables */
-    migrations?: string[];
-    /** List of declarative JSON master-data files to apply once, in order */
-    seeds?: string[];
-  };
-  /**
-   * The minimum permission required to see or use this addon. If provided, the host gates
-   * visibility in the UI and access to all server routes.
-   */
-  accessPermission?: string;
-  /** Full list of all permissions used by this addon for informational purposes */
-  permissions?: string[];
-  /** Custom permissions that should be registered with the host application on installation */
-  permissionDefinitions?: AddonPermissionDefinition[];
-  /** Interactive slash commands exposed in the chat composer */
-  commands?: AddonCommandDefinition[];
-}
-//#endregion
+import { _ as HOST_LOCALES, a as AddonChatMessage, b as MountPoint, c as AddonDistribution, d as AddonRequestUser, f as AddonRuntimeLog, g as AddonUser, h as AddonRuntimeLogSource, i as AddonAttachment, l as AddonManifest, m as AddonRuntimeLogLevel, n as ActiveAddonFrontend, o as AddonCommandDefinition, p as AddonRuntimeLogFilter, r as AddonArchiveFile, s as AddonCommandParameter, t as ActiveAddon, u as AddonPermissionDefinition, v as HostLocale, y as MOUNT_POINTS } from "./contracts2.mjs";
+export { ActiveAddon, ActiveAddonFrontend, AddonArchiveFile, AddonAttachment, AddonChatMessage, AddonCommandDefinition, AddonCommandParameter, AddonDistribution, AddonManifest, AddonPermissionDefinition, AddonRequestUser, AddonRuntimeLog, AddonRuntimeLogFilter, AddonRuntimeLogLevel, AddonRuntimeLogSource, AddonUser, HOST_LOCALES, HostLocale, MOUNT_POINTS, MountPoint };

package/dist/contracts.mjs

@@ -38,5 +38,27 @@ const MOUNT_POINTS = {
 	/** Custom interactive preview card rendered in the message composer */
 	CHAT_COMPOSER_PREVIEW: "chat-composer-preview"
 };
+const HOST_LOCALES = [
+	"ar",
+	"bg",
+	"hr",
+	"de",
+	"el",
+	"en",
+	"es",
+	"fr",
+	"he",
+	"hi",
+	"kn",
+	"ml",
+	"nl",
+	"pt",
+	"ro",
+	"ru",
+	"ta",
+	"te",
+	"tr",
+	"ur"
+];
 //#endregion
-export { MOUNT_POINTS };
+export { HOST_LOCALES, MOUNT_POINTS };

package/dist/contracts2.d.mts

@@ -0,0 +1,270 @@
+//#region src/contracts.d.ts
+/** Definition of a custom permission introduced by an addon. */
+interface AddonPermissionDefinition {
+  /** Permission identifier (recommended: `addon.<id>.<action>`) */
+  name: string;
+  /** Short, human-readable name for the permission */
+  label: string;
+  /** Detailed description of what the permission grants (shown in Rank editor) */
+  description: string;
+}
+/** Valid locations where an addon can be rendered within the Jchat layout. */
+declare const MOUNT_POINTS: {
+  /** Top of the main chat column */
+  readonly CHAT_HEADER: "chat-header";
+  /** Below the main chat header, above messages */
+  readonly CHAT_TOOLBAR: "chat-toolbar";
+  /** The persistent right-side sidebar */
+  readonly CHAT_SIDEBAR: "chat-sidebar";
+  /** Top of the left sidebar (room list) */
+  readonly SIDEBAR_TOP: "sidebar-top";
+  /** Bottom of the left sidebar */
+  readonly SIDEBAR_BOTTOM: "sidebar-bottom";
+  /** Action list shown when clicking a user's avatar */
+  readonly USER_POPOVER_ACTIONS: "user-popover-actions";
+  /** Menu shown when right-clicking a message */
+  readonly MESSAGE_CONTEXT_MENU: "message-context-menu";
+  /** Floating overlay rendered on top of the message stream */
+  readonly MESSAGE_FEED_OVERLAY: "message-feed-overlay";
+  /** Main admin dashboard area */
+  readonly ADMIN_PANEL: "admin-panel";
+  /** User or site settings dashboard area */
+  readonly SETTINGS_PANEL: "settings-panel";
+  /** The 'plus' (+) menu in the message composer */
+  readonly CHAT_PLUS_MENU: "chat-plus-menu";
+  /** Custom tab in the emoji/gif selection panel */
+  readonly EMOJI_PICKER_GIF_TAB: "emoji-picker-gif-tab";
+  /** Custom tab in the emoji/sticker selection panel */
+  readonly EMOJI_PICKER_STICKER_TAB: "emoji-picker-sticker-tab";
+  /** Dedicated settings panel rendered in the Owner Dashboard */
+  readonly OWNER_SETTINGS: "owner-settings";
+  /** Dedicated settings panel rendered in the Site Admin Dashboard */
+  readonly ADDON_SETTINGS: "addon-settings";
+  /** Custom interactive card rendered inside an enriched chat message */
+  readonly CHAT_MESSAGE_CARD: "chat-message-card";
+  /** Custom badge, audio equalizer, or particle aura rendered on a chat bubble */
+  readonly CHAT_MESSAGE_FLAIR: "chat-message-flair";
+  /** Custom interactive preview card rendered in the message composer */
+  readonly CHAT_COMPOSER_PREVIEW: "chat-composer-preview";
+};
+/** Union type of all valid addon mount points. */
+type MountPoint = (typeof MOUNT_POINTS)[keyof typeof MOUNT_POINTS];
+/** Parameter specification for an addon slash command. */
+interface AddonCommandParameter {
+  name: string;
+  description?: string;
+  required?: boolean;
+}
+/** Declaration of an addon slash command available in the chat composer. */
+interface AddonCommandDefinition {
+  /** The command keyword without leading slash (e.g. 'yt', 'roll', 'poll') */
+  name: string;
+  /** Short summary of what the command does, displayed in autocomplete */
+  description: string;
+  /** Usage syntax displayed as a hint (e.g. '<query | url>') */
+  syntax?: string;
+  /** Parameters accepted by this command */
+  parameters?: AddonCommandParameter[];
+}
+/** Distribution model for an addon package. Defaults to `'free'` if omitted. */
+type AddonDistribution = "free" | "commercial";
+/**
+ * The `manifest.json` schema required for every Jchat addon. This file describes how the addon is
+ * identified and mounted.
+ */
+interface AddonManifest {
+  /** Unique kebab-case addon identifier (must match the folder name) */
+  id: string;
+  /** Human-readable addon name */
+  name: string;
+  /** Semver version string (e.g. `1.2.0`) */
+  version: string;
+  /**
+   * Relative path to the addon's logo image asset (e.g. `./assets/logo.svg`, `./assets/logo.png`,
+   * or `./assets/logo.webp`). Recommended square 1:1 aspect ratio, max 512 KB.
+   */
+  logo: string;
+  /** Brief summary of what the addon does */
+  description?: string;
+  /** Author name, organization, or GitHub handle */
+  author?: string;
+  /** Support or documentation URL */
+  homepage?: string;
+  /** SPDX license identifier (e.g. `MIT`) */
+  license?: string;
+  /**
+   * Distribution model: `'free'` (default) for open/free addons, or `'commercial'` for paid addons
+   * requiring purchase entitlement verification.
+   */
+  distribution?: AddonDistribution;
+  /**
+   * Supported language codes (e.g. ["ar", "de", "en", "es", "fr", "hi", "kn", "ml", "ta", "te",
+   * "ur"])
+   */
+  locales?: string[];
+  /** Default fallback language code (e.g. "en") */
+  defaultLocale?: string;
+  /** Host and SDK versions this directly executed plugin was built and tested against */
+  compatibility: {
+    /** Supported JChat versions as a semantic-version range, for example `^1.0.0` */
+    jchat: string;
+    /** Supported `@jchat/addon-sdk` versions as a semantic-version range */
+    addonSdk: string;
+  };
+  /** Identity of the trusted publisher that signed this package. Required when migrations exist */
+  publisher?: {
+    id: string;
+  };
+  /** Signature over the canonical archive digest. Required when migrations exist */
+  signature?: {
+    algorithm: "rsa-sha256";
+    digest: string;
+    value: string;
+  };
+  /** Configuration for the React-based frontend bundle */
+  frontend?: {
+    /** Relative path to the pre-compiled ESM bundle (created by Vite) */
+    bundle: string;
+    /** List of UI locations where this addon should be active */
+    mountPoints: MountPoint[];
+    /** Optional path to a specific UI for the settings panel */
+    settings?: string;
+    /** Additional shared packages this addon imports from the host */
+    externals?: string[];
+  };
+  /** Configuration for the server-side API bundle */
+  server?: {
+    /** Relative path to the pre-compiled server bundle */
+    bundle?: string;
+    /** List of SQL files to run (in order) to set up the addon's database tables */
+    migrations?: string[];
+    /** List of declarative JSON master-data files to apply once, in order */
+    seeds?: string[];
+  };
+  /**
+   * The minimum permission required to see or use this addon. If provided, the host gates
+   * visibility in the UI and access to all server routes.
+   */
+  accessPermission?: string;
+  /** Full list of all permissions used by this addon for informational purposes */
+  permissions?: string[];
+  /** Custom permissions that should be registered with the host application on installation */
+  permissionDefinitions?: AddonPermissionDefinition[];
+  /** Interactive slash commands exposed in the chat composer */
+  commands?: AddonCommandDefinition[];
+}
+declare const HOST_LOCALES: readonly ["ar", "bg", "hr", "de", "el", "en", "es", "fr", "he", "hi", "kn", "ml", "nl", "pt", "ro", "ru", "ta", "te", "tr", "ur"];
+type HostLocale = (typeof HOST_LOCALES)[number];
+/** Minimal user profile accessible to addon backends and UI slots. */
+interface AddonUser {
+  /** Unique user identifier */
+  id: string;
+  /** Display name */
+  name: string;
+  /** Full display name */
+  displayName: string;
+  /** Full URL to the user's avatar image */
+  avatar: string;
+  /** User's gender identifier */
+  gender: string;
+}
+/** Authenticated request user context passed to addon server routes and message pipeline hooks. */
+interface AddonRequestUser {
+  id: string;
+  permissions?: string[];
+  siteId?: string;
+}
+/** Standard attachment contract for chat messages and addon file attachments. */
+interface AddonAttachment {
+  url: string;
+  name: string;
+  type: string;
+  id?: string;
+  isUploading?: boolean;
+}
+/** Domain-agnostic message contract passed to addon slots (CHAT_MESSAGE_CARD, CHAT_MESSAGE_FLAIR). */
+interface AddonChatMessage {
+  id: string;
+  roomId?: string;
+  senderId?: string;
+  sender?: Partial<AddonUser> & {
+    id: string;
+    name: string;
+    isOwner?: boolean;
+    isBot?: boolean;
+    rankName?: string;
+  };
+  content?: unknown;
+  attachments?: AddonAttachment[] | null;
+  metadata?: Record<string, unknown> | null;
+  createdAt?: string | Date;
+}
+/** Severity level classification for runtime addon logging. */
+type AddonRuntimeLogLevel = "error" | "info" | "warn";
+/** Operational lifecycle origin of a runtime log entry. */
+type AddonRuntimeLogSource = "request" | "startup";
+/** A diagnostic runtime log entry recorded during addon server startup or HTTP request execution. */
+interface AddonRuntimeLog {
+  /** Unique auto-incrementing log entry sequence identifier */
+  id: number;
+  /** ISO-8601 UTC timestamp when the event was recorded */
+  timestamp: string;
+  /** Canonical identifier of the emitting addon */
+  addonId: string;
+  /** Log severity classification */
+  level: AddonRuntimeLogLevel;
+  /** Lifecycle stage where the log originated */
+  source: AddonRuntimeLogSource;
+  /** Descriptive log message or error description */
+  message: string;
+  /** HTTP method if the log was generated during request execution */
+  method?: string;
+  /** Request pathname if the log was generated during request execution */
+  path?: string;
+  /** HTTP response status code if the log was generated during request execution */
+  status?: number;
+}
+/** Query parameters for filtering and bounding addon developer runtime logs. */
+interface AddonRuntimeLogFilter {
+  /** Filter logs by a specific addon identifier */
+  addonId?: string;
+  /** Filter logs by severity level */
+  level?: AddonRuntimeLogLevel;
+  /** Maximum number of recent log records to return */
+  limit?: number;
+}
+/** Frontend mounting and bundle distribution metadata for an active addon. */
+interface ActiveAddonFrontend extends Pick<NonNullable<AddonManifest["frontend"]>, "mountPoints"> {
+  /** Relative web-accessible path to the compiled frontend bundle */
+  bundlePath?: string;
+}
+/** Public host runtime representation of an installed, active addon. */
+interface ActiveAddon extends Pick<AddonManifest, "id" | "name" | "version" | "description" | "author" | "homepage" | "license" | "accessPermission" | "permissions" | "commands"> {
+  /** Whether the addon is globally activated on the host platform */
+  enabled: boolean;
+  /** Relative path to the compiled frontend bundle file */
+  bundlePath?: string;
+  /** Relative path or URL to the addon logo asset */
+  logoPath?: string | null;
+  /** Frontend mounting points and distribution information */
+  frontend?: ActiveAddonFrontend;
+  /** Timestamp when the addon was installed */
+  createdAt?: string | Date;
+  /** Timestamp when the addon configuration or files were last modified */
+  updatedAt?: string | Date;
+}
+/**
+ * In-memory representation of an archive file entry used in canonical digest creation and package
+ * verification.
+ */
+interface AddonArchiveFile {
+  /**
+   * Canonical relative path inside the addon archive (e.g., 'manifest.json',
+   * 'migrations/001_init.sql')
+   */
+  path: string;
+  /** Raw binary contents of the archive file */
+  contents: Buffer;
+}
+//#endregion
+export { HOST_LOCALES as _, AddonChatMessage as a, MountPoint as b, AddonDistribution as c, AddonRequestUser as d, AddonRuntimeLog as f, AddonUser as g, AddonRuntimeLogSource as h, AddonAttachment as i, AddonManifest as l, AddonRuntimeLogLevel as m, ActiveAddonFrontend as n, AddonCommandDefinition as o, AddonRuntimeLogFilter as p, AddonArchiveFile as r, AddonCommandParameter as s, ActiveAddon as t, AddonPermissionDefinition as u, HostLocale as v, MOUNT_POINTS as y };

package/dist/diagnostics.d.mts

@@ -1,4 +1,4 @@
-import { AddonManifest } from "./contracts.mjs";
+import { l as AddonManifest } from "./contracts2.mjs";
 //#region src/diagnostics.d.ts
 /**
  * Diagnostic result status indicator for addon validation checks. - `"pass"`: The diagnostic check

package/dist/diagnostics.mjs

@@ -1,5 +1,5 @@
-import * as fs$1 from "node:fs";
 import * as path$1 from "node:path";
+import * as fs$1 from "node:fs";
 //#region src/diagnostics.ts
 /**
 * Constructs a semantic version compatibility range covering all minor/patch versions of the

package/dist/i18n-validator.mjs

@@ -1,6 +1,7 @@
-import { t as HOST_LANGUAGES } from "./i18n.mjs";
-import * as fs$1 from "node:fs";
+import { HOST_LOCALES } from "./contracts.mjs";
+import "./i18n.mjs";
 import * as path$1 from "node:path";
+import * as fs$1 from "node:fs";
 //#region src/i18n-validator.ts
 function extractNestedKeys(obj, prefix = "") {
 	if (!obj || typeof obj !== "object") return [];
@@ -52,7 +53,7 @@ function validateAddonLocales(dirPath, domainName = "Addon") {
 		};
 	}
 	const enKeys = new Set(extractNestedKeys(enContent));
-	for (const lang of HOST_LANGUAGES) {
+	for (const lang of HOST_LOCALES) {
 		if (lang === "en") continue;
 		const langFileName = `${lang}.json`;
 		const langPath = path$1.join(dirPath, langFileName);

package/dist/i18n.mjs

@@ -15,28 +15,6 @@ function interpolate(text, params) {
 		return key in params ? String(params[key]) : match;
 	});
 }
-const HOST_LANGUAGES = [
-	"ar",
-	"bg",
-	"hr",
-	"de",
-	"el",
-	"en",
-	"es",
-	"fr",
-	"he",
-	"hi",
-	"kn",
-	"ml",
-	"nl",
-	"pt",
-	"ro",
-	"ru",
-	"ta",
-	"te",
-	"tr",
-	"ur"
-];
 const LocaleContext = createContext({
 	locale: "en",
 	dir: "ltr"
@@ -188,4 +166,4 @@ function useTranslation(resourcesOrLoader = {}, fallbackLocale = "en") {
 	};
 }
 //#endregion
-export { useTranslation as a, useLocale as i, LocaleContext as n, createTranslator as r, HOST_LANGUAGES as t };
+export { useTranslation as i, createTranslator as n, useLocale as r, LocaleContext as t };

package/dist/index.mjs

@@ -1,8 +1,10 @@
-import { MOUNT_POINTS } from "./contracts.mjs";
-import { a as useTranslation, i as useLocale, n as LocaleContext, r as createTranslator, t as HOST_LANGUAGES } from "./i18n.mjs";
+import { HOST_LOCALES, MOUNT_POINTS } from "./contracts.mjs";
+import { i as useTranslation, n as createTranslator, r as useLocale, t as LocaleContext } from "./i18n.mjs";
+import { ADDON_ID_PATTERN, COMPATIBILITY_RANGE_PATTERN, MAX_ADDON_ARCHIVE_BYTES, assertSafeRelativePath, canonicalManifest, createCanonicalAddonDigest, isCompatibilityRange, sortValue, validateAddonManifest } from "./signing.mjs";
+import { createMockAddonServerContext } from "./testing.mjs";
 import { useInfiniteQuery, useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
 //#region package.json
-var version = "1.0.0-alpha.22";
+var version = "1.0.0-alpha.24";
 //#endregion
 //#region src/query.ts
 /**
@@ -95,6 +97,24 @@ function useAddonMutation(options) {
 }
 //#endregion
 //#region src/index.ts
+/**
+* @jchat/addon-sdk
+*
+*   Lightweight SDK for Jchat addon developers. Provides TypeScript types for addon props, manifest
+*   schema, and host API access. This package is always EXTERNALISED from addon bundles — the host
+*   app provides the runtime implementation.
+*/
+/** Standard error thrown or handled when an addon message pipeline hook aborts sending. */
+var AddonPipelineAbortError = class extends Error {
+	code;
+	reason;
+	constructor(error) {
+		super(error.reason || error.code);
+		this.name = "AddonPipelineAbortError";
+		this.code = error.code;
+		this.reason = error.reason;
+	}
+};
 /** Define a manifest with full validation-friendly typing while preserving literal values. */
 function defineAddonManifest(manifest) {
 	return manifest;
@@ -173,4 +193,4 @@ function verifyAddonEntitlement(addonId, target) {
 	return true;
 }
 //#endregion
-export { HOST_LANGUAGES, LocaleContext, MOUNT_POINTS, createTranslator, defineAddonManifest, defineAddonServer, getAddonSdkVersion, useAddonInfiniteQuery, useAddonMutation, useAddonQuery, useAddonSDK, useLocale, useQueryClient, useTranslation, verifyAddonEntitlement };
+export { ADDON_ID_PATTERN, AddonPipelineAbortError, COMPATIBILITY_RANGE_PATTERN, HOST_LOCALES, LocaleContext, MAX_ADDON_ARCHIVE_BYTES, MOUNT_POINTS, assertSafeRelativePath, canonicalManifest, createCanonicalAddonDigest, createMockAddonServerContext, createTranslator, defineAddonManifest, defineAddonServer, getAddonSdkVersion, isCompatibilityRange, sortValue, useAddonInfiniteQuery, useAddonMutation, useAddonQuery, useAddonSDK, useLocale, useQueryClient, useTranslation, validateAddonManifest, verifyAddonEntitlement };

package/dist/index2.d.mts

@@ -1,11 +1,11 @@
 import { i as IconPack, n as IconComponent, r as IconName } from "./types.mjs";
-import { AddonCommandDefinition, AddonCommandParameter, AddonManifest, AddonPermissionDefinition, MOUNT_POINTS, MountPoint } from "./contracts.mjs";
+import { _ as HOST_LOCALES, a as AddonChatMessage, b as MountPoint, c as AddonDistribution, d as AddonRequestUser, f as AddonRuntimeLog, g as AddonUser, h as AddonRuntimeLogSource, i as AddonAttachment, l as AddonManifest, m as AddonRuntimeLogLevel, n as ActiveAddonFrontend, o as AddonCommandDefinition, p as AddonRuntimeLogFilter, r as AddonArchiveFile, s as AddonCommandParameter, t as ActiveAddon, u as AddonPermissionDefinition, v as HostLocale, y as MOUNT_POINTS } from "./contracts2.mjs";
+import { a as canonicalManifest, c as sortValue, i as assertSafeRelativePath, l as validateAddonManifest, n as COMPATIBILITY_RANGE_PATTERN, o as createCanonicalAddonDigest, r as MAX_ADDON_ARCHIVE_BYTES, s as isCompatibilityRange, t as ADDON_ID_PATTERN } from "./signing2.mjs";
 import { InfiniteData, MutationFunction, QueryFunction, QueryFunctionContext, QueryKey, UndefinedInitialDataInfiniteOptions, UndefinedInitialDataOptions, UseInfiniteQueryResult, UseMutationOptions, UseMutationResult, UseQueryResult, useQueryClient } from "@tanstack/react-query";
 import { Elysia, t } from "elysia";
 import { ColumnType, Generated, Insertable, JSONColumnType, Kysely, Selectable, Updateable } from "kysely";
 //#region src/i18n.d.ts
-export declare const HOST_LANGUAGES: readonly ["ar", "bg", "hr", "de", "el", "en", "es", "fr", "he", "hi", "kn", "ml", "nl", "pt", "ro", "ru", "ta", "te", "tr", "ur"];
-export type HostLanguage = (typeof HOST_LANGUAGES)[number];
+export type HostLanguage = HostLocale;
 export type AddonTranslationDictionary = Record<string, unknown>;
 export type AddonTranslationResources = Record<string, AddonTranslationDictionary>;
 export type AddonLocaleLoader = (locale: string) => Promise<AddonTranslationDictionary> | AddonTranslationDictionary;
@@ -151,6 +151,30 @@ export declare function useAddonInfiniteQuery<TData = unknown, TError = Error, T
  */
 export declare function useAddonMutation<TData = unknown, TVariables = unknown, TError = Error, TContext = unknown>(options: UseAddonMutationOptions<TData, TVariables, TError, TContext>): UseMutationResult<TData, TError, TVariables, TContext>;
 //#endregion
+//#region src/testing.d.ts
+export interface MockAddonServerContextOptions {
+  siteId?: string;
+  config?: Record<string, unknown>;
+  user?: Partial<AddonUser>;
+  isEntitled?: boolean;
+}
+export interface MockAddonContextResult {
+  context: AddonServerContext;
+  emittedEvents: Array<{
+    event: string;
+    payload: unknown;
+    target?: AddonServerEmitTarget;
+  }>;
+  registeredHooks: AddonPipelineHooks[];
+  cacheEntries: Map<string, unknown>;
+  cacheSets: Map<string, Set<string>>;
+}
+/**
+ * Creates an in-memory, zero-dependency AddonServerContext mock for testing addon server factories
+ * and pipeline hooks offline in CI without requiring live databases or Redis.
+ */
+export declare function createMockAddonServerContext(addonId: string, options?: MockAddonServerContextOptions): MockAddonContextResult;
+//#endregion
 //#region src/index.d.ts
 export type AddonJsonBody = Record<string, unknown> | unknown[] | null;
 /**
@@ -160,23 +184,14 @@ export type AddonJsonBody = Record<string, unknown> | unknown[] | null;
  *   schema, and host API access. This package is always EXTERNALISED from addon bundles — the host
  *   app provides the runtime implementation.
  */
-/** Minimal user profile accessible to addon backends. */
-export interface AddonUser {
-  /** Unique user identifier */
-  id: string;
-  /** Display name */
-  name: string;
-  /** Full display name */
-  displayName: string;
-  /** Full URL to the user's avatar image */
-  avatar: string;
-  /** User's gender identifier */
-  gender: string;
-}
-export interface AddonRequestUser {
-  id: string;
-  permissions?: string[];
-  siteId?: string;
+/** Standard error thrown or handled when an addon message pipeline hook aborts sending. */
+export declare class AddonPipelineAbortError extends Error {
+  readonly code: string;
+  readonly reason?: string;
+  constructor(error: {
+    code: string;
+    reason?: string;
+  });
 }
 /**
  * Typed, schema-scoped database facade for an addon. The host deliberately omits raw execution,
@@ -200,6 +215,32 @@ export interface AddonCacheClient {
   expire: (key: string, ttlSeconds: number) => Promise<boolean>;
   /** Get the remaining time-to-live of a key in seconds (-2 if key does not exist, -1 if no TTL) */
   ttl: (key: string) => Promise<number>;
+  /** Add a member to a set stored at key */
+  setAdd: (key: string, member: string) => Promise<number>;
+  /** Remove a member from a set stored at key */
+  setRemove: (key: string, member: string) => Promise<number>;
+  /** Retrieve all members of a set stored at key */
+  setMembers: (key: string) => Promise<string[]>;
+}
+export interface AddonRateLimitOptions {
+  /** Maximum number of allowed requests within the sliding window */
+  limit: number;
+  /** Time window duration in milliseconds */
+  windowMs: number;
+}
+/**
+ * High-performance sliding-window rate limiter scoped to this addon. Keys are automatically
+ * prefixed by the host as `addon:<addonId>:ratelimit:<key>`.
+ */
+export interface AddonRateLimiter {
+  /**
+   * Consume a rate limit token using an atomic sliding window.
+   *
+   * @param key - Identifier within the addon (e.g. `user:${userId}:audio`, `command:${cmd}`)
+   * @param options - Limit and window duration in milliseconds
+   * @returns `true` if within the rate limit, `false` if limit exceeded
+   */
+  consume: (key: string, options: AddonRateLimitOptions) => Promise<boolean>;
 }
 export interface AddonServerEmitTarget {
   /** Target a specific site (defaults to the request user's siteId) */
@@ -213,7 +254,7 @@ export interface AddonMessageMutableData {
   /** Message content (can be Slate JSON structure or string) */
   content: unknown;
   /** Optional message attachments */
-  attachments?: unknown[] | null;
+  attachments?: AddonAttachment[] | unknown[] | null;
   /**
    * Namespaced metadata bucket for this addon. Keyed as `metadata["addon:<addonId>"]`. Storing data
    * here automatically attaches it to the message broadcast and database record.
@@ -252,7 +293,7 @@ export interface AddonMessageAfterSaveContext {
   message: {
     id: string;
     content: unknown;
-    attachments?: unknown[] | null;
+    attachments?: AddonAttachment[] | unknown[] | null;
     metadata?: Record<string, unknown> | null;
     type: string;
     createdAt: Date | string;
@@ -320,6 +361,8 @@ export interface AddonServerContext<TDatabase = Record<string, Record<string, un
   pipeline?: {
     register: (hooks: AddonPipelineHooks) => void;
   };
+  /** An atomic sliding-window rate limiter scoped to your addon (`addon:<addonId>:ratelimit:<key>`). */
+  rateLimiter?: AddonRateLimiter;
   /**
    * Cryptographically verify that this addon instance holds a valid host license entitlement.
    * Commercial paid addons should invoke this or call `verifyAddonEntitlement(addonId, context)`.
@@ -389,7 +432,7 @@ export interface AddonProps {
   /** Text direction for the current locale */
   dir?: "ltr" | "rtl";
   /** The message object when rendered inside 'chat-message-card' or 'chat-message-flair' */
-  message?: unknown;
+  message?: AddonChatMessage | unknown;
   /** The addon's specific payload extracted from message.metadata */
   addonData?: unknown;
   /** List of active addon IDs enabled on the current site */
@@ -467,7 +510,7 @@ export interface AddonEditorApi {
    * Upload and attach a file to the current message without inserting it inline. Users will see the
    * file in the attachment bar below the editor.
    */
-  addAttachment: (attachment: {
+  addAttachment: (attachment: AddonAttachment | {
     url: string;
     name: string;
     type: string;
@@ -610,4 +653,4 @@ export declare function verifyAddonEntitlement(addonId: string, target?: ((expec
   verifyEntitlement?: (expectedAddonId?: string) => boolean;
 }): boolean;
 //#endregion
-export { type AddonCommandDefinition, type AddonCommandParameter, type AddonManifest, type AddonPermissionDefinition, type ColumnType, type Generated, type IconComponent, type IconName, type IconPack, type InfiniteData, type Insertable, type JSONColumnType, MOUNT_POINTS, type MountPoint, type QueryKey, type Selectable, type Updateable, useQueryClient };
+export { ADDON_ID_PATTERN, type ActiveAddon, type ActiveAddonFrontend, type AddonArchiveFile, type AddonAttachment, type AddonChatMessage, type AddonCommandDefinition, type AddonCommandParameter, type AddonDistribution, type AddonManifest, type AddonPermissionDefinition, type AddonRequestUser, type AddonRuntimeLog, type AddonRuntimeLogFilter, type AddonRuntimeLogLevel, type AddonRuntimeLogSource, type AddonUser, COMPATIBILITY_RANGE_PATTERN, type ColumnType, type Generated, HOST_LOCALES, type IconComponent, type IconName, type IconPack, type InfiniteData, type Insertable, type JSONColumnType, MAX_ADDON_ARCHIVE_BYTES, MOUNT_POINTS, type MountPoint, type QueryKey, type Selectable, type Updateable, assertSafeRelativePath, canonicalManifest, createCanonicalAddonDigest, isCompatibilityRange, sortValue, useQueryClient, validateAddonManifest };

package/dist/signing.d.mts

@@ -0,0 +1,2 @@
+import { a as canonicalManifest, c as sortValue, i as assertSafeRelativePath, l as validateAddonManifest, n as COMPATIBILITY_RANGE_PATTERN, o as createCanonicalAddonDigest, r as MAX_ADDON_ARCHIVE_BYTES, s as isCompatibilityRange, t as ADDON_ID_PATTERN } from "./signing2.mjs";
+export { ADDON_ID_PATTERN, COMPATIBILITY_RANGE_PATTERN, MAX_ADDON_ARCHIVE_BYTES, assertSafeRelativePath, canonicalManifest, createCanonicalAddonDigest, isCompatibilityRange, sortValue, validateAddonManifest };

package/dist/signing.mjs

@@ -0,0 +1,73 @@
+import crypto from "node:crypto";
+import * as path$1 from "node:path";
+//#region src/signing.ts
+const MAX_ADDON_ARCHIVE_BYTES = 26214400;
+const ADDON_ID_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+const COMPATIBILITY_RANGE_PATTERN = /^[0-9A-Za-z*^~<>=|.\-\s]+$/;
+function assertSafeRelativePath(value, label) {
+	if (!value || path$1.isAbsolute(value) || value.includes("\\") || value.split("/").includes("..")) throw new Error(`${label} must be a safe relative path`);
+}
+function isCompatibilityRange(value) {
+	return typeof value === "string" && value.length > 0 && value.length <= 64 && COMPATIBILITY_RANGE_PATTERN.test(value);
+}
+function sortValue(value) {
+	if (Array.isArray(value)) return value.map(sortValue);
+	if (value && typeof value === "object") return Object.fromEntries(Object.entries(value).toSorted(([left], [right]) => left.localeCompare(right)).map(([key, child]) => [key, sortValue(child)]));
+	return value;
+}
+function canonicalManifest(manifest) {
+	const copy = structuredClone(manifest);
+	if (copy.signature) {
+		copy.signature.digest = "";
+		copy.signature.value = "";
+	}
+	return JSON.stringify(sortValue(copy));
+}
+function createCanonicalAddonDigest(manifest, files) {
+	const hash = crypto.createHash("sha256");
+	const sortedFiles = [...files].toSorted((left, right) => left.path.localeCompare(right.path));
+	for (const file of sortedFiles) {
+		hash.update(file.path);
+		hash.update("\0");
+		hash.update(file.path === "manifest.json" ? canonicalManifest(manifest) : file.contents);
+		hash.update("\0");
+	}
+	return hash.digest("hex");
+}
+function validateAddonManifest(manifest) {
+	if (!manifest.id || manifest.id.length > 40 || !ADDON_ID_PATTERN.test(manifest.id)) throw new Error("Manifest id must contain only lowercase letters, numbers, and hyphens");
+	if (!manifest.name || manifest.name.length > 120) throw new Error("Manifest name is invalid");
+	if (!manifest.version || String(manifest.version).length > 64) throw new Error("Manifest version is invalid");
+	if (!isCompatibilityRange(manifest.compatibility?.jchat) || !isCompatibilityRange(manifest.compatibility?.addonSdk)) throw new Error("Manifest must declare valid JChat and addon SDK compatibility ranges");
+	if (manifest.distribution !== void 0 && manifest.distribution !== "free" && manifest.distribution !== "commercial") throw new Error("Manifest distribution must be either 'free' or 'commercial'");
+	if (!manifest.logo || typeof manifest.logo !== "string" || !manifest.logo.trim()) throw new Error("Manifest logo is required");
+	const cleanLogo = manifest.logo.replace(/^\.\//, "");
+	assertSafeRelativePath(cleanLogo, "Logo path");
+	const logoExt = path$1.extname(cleanLogo).toLowerCase();
+	if (![
+		".svg",
+		".png",
+		".webp"
+	].includes(logoExt)) throw new Error("Manifest logo must be an SVG, PNG, or WebP image file");
+	const references = [manifest.frontend?.bundle, manifest.server?.bundle].filter((value) => Boolean(value));
+	for (const reference of references) assertSafeRelativePath(reference, "Bundle path");
+	for (const migration of manifest.server?.migrations ?? []) {
+		assertSafeRelativePath(migration, "Migration path");
+		if (!migration.startsWith("migrations/") || !migration.endsWith(".sql")) throw new Error("Migration paths must point to migrations/*.sql");
+	}
+	for (const seed of manifest.server?.seeds ?? []) {
+		assertSafeRelativePath(seed, "Seed path");
+		if (!seed.startsWith("seeds/") || !seed.endsWith(".json")) throw new Error("Seed paths must point to seeds/*.json");
+	}
+	const databaseFiles = [...manifest.server?.migrations ?? [], ...manifest.server?.seeds ?? []];
+	if (new Set(databaseFiles).size !== databaseFiles.length) throw new Error("Manifest database file paths must be unique");
+	const addonPermPrefix = `addon.${manifest.id}.`;
+	const declaredPerms = [
+		...manifest.accessPermission ? [manifest.accessPermission] : [],
+		...manifest.permissions ?? [],
+		...manifest.permissionDefinitions?.map((d) => d.name) ?? []
+	];
+	for (const perm of declaredPerms) if (!perm.startsWith(addonPermPrefix)) throw new Error(`Addon permission '${perm}' must start with '${addonPermPrefix}' prefix to prevent permission collisions`);
+}
+//#endregion
+export { ADDON_ID_PATTERN, COMPATIBILITY_RANGE_PATTERN, MAX_ADDON_ARCHIVE_BYTES, assertSafeRelativePath, canonicalManifest, createCanonicalAddonDigest, isCompatibilityRange, sortValue, validateAddonManifest };

package/dist/signing2.d.mts

@@ -0,0 +1,13 @@
+import { l as AddonManifest, r as AddonArchiveFile } from "./contracts2.mjs";
+//#region src/signing.d.ts
+declare const MAX_ADDON_ARCHIVE_BYTES: number;
+declare const ADDON_ID_PATTERN: RegExp;
+declare const COMPATIBILITY_RANGE_PATTERN: RegExp;
+declare function assertSafeRelativePath(value: string, label: string): void;
+declare function isCompatibilityRange(value: unknown): value is string;
+declare function sortValue(value: unknown): unknown;
+declare function canonicalManifest(manifest: AddonManifest): string;
+declare function createCanonicalAddonDigest(manifest: AddonManifest, files: readonly AddonArchiveFile[]): string;
+declare function validateAddonManifest(manifest: AddonManifest): void;
+//#endregion
+export { canonicalManifest as a, sortValue as c, assertSafeRelativePath as i, validateAddonManifest as l, COMPATIBILITY_RANGE_PATTERN as n, createCanonicalAddonDigest as o, MAX_ADDON_ARCHIVE_BYTES as r, isCompatibilityRange as s, ADDON_ID_PATTERN as t };

package/dist/testing.d.mts

@@ -0,0 +1,2 @@
+import { MockAddonContextResult, MockAddonServerContextOptions, createMockAddonServerContext } from "./index2.mjs";
+export { MockAddonContextResult, MockAddonServerContextOptions, createMockAddonServerContext };

package/dist/testing.mjs

@@ -0,0 +1,144 @@
+//#region src/testing.ts
+/**
+* Creates an in-memory, zero-dependency AddonServerContext mock for testing addon server factories
+* and pipeline hooks offline in CI without requiring live databases or Redis.
+*/
+function createMockAddonServerContext(addonId, options = {}) {
+	const { config = {}, user = {}, isEntitled = true } = options;
+	const emittedEvents = [];
+	const registeredHooks = [];
+	const cacheEntries = /* @__PURE__ */ new Map();
+	const cacheSets = /* @__PURE__ */ new Map();
+	const cacheTtld = /* @__PURE__ */ new Map();
+	const rateLimitTimestamps = /* @__PURE__ */ new Map();
+	const prefix = `addon:${addonId}:`;
+	const cache = {
+		async get(key) {
+			const fullKey = prefix + key;
+			const exp = cacheTtld.get(fullKey);
+			if (exp && Date.now() > exp) {
+				cacheEntries.delete(fullKey);
+				cacheTtld.delete(fullKey);
+				return null;
+			}
+			const val = cacheEntries.get(fullKey);
+			return val !== void 0 ? val : null;
+		},
+		async set(key, value, ttlSeconds) {
+			const fullKey = prefix + key;
+			cacheEntries.set(fullKey, value);
+			if (ttlSeconds && ttlSeconds > 0) cacheTtld.set(fullKey, Date.now() + ttlSeconds * 1e3);
+			else cacheTtld.delete(fullKey);
+		},
+		async del(...keys) {
+			let count = 0;
+			for (const k of keys) {
+				const fullKey = prefix + k;
+				if (cacheEntries.delete(fullKey)) count++;
+				cacheTtld.delete(fullKey);
+				cacheSets.delete(fullKey);
+			}
+			return count;
+		},
+		async incr(key) {
+			const fullKey = prefix + key;
+			const next = (Number(cacheEntries.get(fullKey)) || 0) + 1;
+			cacheEntries.set(fullKey, next);
+			return next;
+		},
+		async expire(key, ttlSeconds) {
+			const fullKey = prefix + key;
+			if (!cacheEntries.has(fullKey) && !cacheSets.has(fullKey)) return false;
+			cacheTtld.set(fullKey, Date.now() + ttlSeconds * 1e3);
+			return true;
+		},
+		async ttl(key) {
+			const fullKey = prefix + key;
+			if (!cacheEntries.has(fullKey) && !cacheSets.has(fullKey)) return -2;
+			const exp = cacheTtld.get(fullKey);
+			if (!exp) return -1;
+			const remaining = Math.ceil((exp - Date.now()) / 1e3);
+			return remaining > 0 ? remaining : -2;
+		},
+		async setAdd(key, member) {
+			const fullKey = prefix + key;
+			let set = cacheSets.get(fullKey);
+			if (!set) {
+				set = /* @__PURE__ */ new Set();
+				cacheSets.set(fullKey, set);
+			}
+			const initialSize = set.size;
+			set.add(member);
+			return set.size > initialSize ? 1 : 0;
+		},
+		async setRemove(key, member) {
+			const fullKey = prefix + key;
+			const set = cacheSets.get(fullKey);
+			if (!set) return 0;
+			return set.delete(member) ? 1 : 0;
+		},
+		async setMembers(key) {
+			const fullKey = prefix + key;
+			const set = cacheSets.get(fullKey);
+			return set ? Array.from(set) : [];
+		}
+	};
+	const rateLimiter = { async consume(key, opts) {
+		const fullKey = `addon:${addonId}:ratelimit:${key}`;
+		const now = Date.now();
+		const windowStart = now - opts.windowMs;
+		const valid = (rateLimitTimestamps.get(fullKey) ?? []).filter((t) => t > windowStart);
+		if (valid.length >= opts.limit) {
+			rateLimitTimestamps.set(fullKey, valid);
+			return false;
+		}
+		valid.push(now);
+		rateLimitTimestamps.set(fullKey, valid);
+		return true;
+	} };
+	const defaultUser = {
+		id: user.id ?? "mock-user-1",
+		name: user.name ?? "Mock User",
+		displayName: user.displayName ?? "Mock User",
+		avatar: user.avatar ?? "https://example.com/avatar.png",
+		gender: user.gender ?? "neutral"
+	};
+	return {
+		context: {
+			t: {},
+			db: {},
+			cache,
+			rateLimiter,
+			emit: async (event, payload, target) => {
+				emittedEvents.push({
+					event: `addon:${addonId}:${event}`,
+					payload,
+					target
+				});
+			},
+			pipeline: { register: (hooks) => {
+				registeredHooks.push(hooks);
+			} },
+			getConfig: async (_targetSiteId) => config,
+			getUser: async (userId) => userId === defaultUser.id ? defaultUser : null,
+			getUsers: async (userIds) => {
+				const map = /* @__PURE__ */ new Map();
+				for (const id of userIds) if (id === defaultUser.id) map.set(id, defaultUser);
+				return map;
+			},
+			hasPermission: (reqUser, permission) => {
+				return (reqUser?.permissions ?? []).includes(permission);
+			},
+			verifyEntitlement: (expectedAddonId) => {
+				if (expectedAddonId && expectedAddonId !== addonId) return false;
+				return isEntitled;
+			}
+		},
+		emittedEvents,
+		registeredHooks,
+		cacheEntries,
+		cacheSets
+	};
+}
+//#endregion
+export { createMockAddonServerContext };

package/dist/vite.d.mts

@@ -1,4 +1,4 @@
-import { AddonManifest } from "./contracts.mjs";
+import { l as AddonManifest } from "./contracts2.mjs";
 import { Plugin } from "vite";
 //#region src/vite.d.ts
 /**

package/dist/vite.mjs

@@ -1,6 +1,6 @@
-import fs from "node:fs";
-import path from "node:path";
 import crypto from "node:crypto";
+import path from "node:path";
+import fs from "node:fs";
 //#region src/vite.ts
 /**
 * Vite plugin for building JChat sandboxed addon extensions.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jchat/addon-sdk",
-  "version": "1.0.0-alpha.23",
+  "version": "1.0.0-alpha.25",
   "private": false,
   "description": "JChat Addon SDK for building JChat addons.",
   "keywords": [
@@ -12,12 +12,8 @@
     "sdk",
     "vite"
   ],
+  "homepage": "https://jchatcloud.com",
   "license": "SEE LICENSE IN LICENSE",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/mjjabarullah/jchat.git",
-    "directory": "packages/addon-sdk"
-  },
   "bin": {
     "jchat-addon": "./dist/cli.mjs"
   },
@@ -43,6 +39,11 @@
       "import": "./src/contracts.ts",
       "default": "./src/contracts.ts"
     },
+    "./signing": {
+      "types": "./src/signing.ts",
+      "import": "./src/signing.ts",
+      "default": "./src/signing.ts"
+    },
     "./cli": {
       "types": "./src/cli.ts",
       "import": "./src/cli.ts",
@@ -53,6 +54,11 @@
       "import": "./src/diagnostics.ts",
       "default": "./src/diagnostics.ts"
     },
+    "./testing": {
+      "types": "./src/testing.ts",
+      "import": "./src/testing.ts",
+      "default": "./src/testing.ts"
+    },
     "./vite": {
       "types": "./src/vite.ts",
       "import": "./src/vite.ts",
@@ -97,6 +103,10 @@
         "types": "./dist/contracts.d.mts",
         "import": "./dist/contracts.mjs"
       },
+      "./signing": {
+        "types": "./dist/signing.d.mts",
+        "import": "./dist/signing.mjs"
+      },
       "./cli": {
         "types": "./dist/cli.d.mts",
         "import": "./dist/cli.mjs"
@@ -105,6 +115,10 @@
         "types": "./dist/diagnostics.d.mts",
         "import": "./dist/diagnostics.mjs"
       },
+      "./testing": {
+        "types": "./dist/testing.d.mts",
+        "import": "./dist/testing.mjs"
+      },
       "./vite": {
         "types": "./dist/vite.d.mts",
         "import": "./dist/vite.mjs"