@jwilleke/ngdpbase-types 5.36.0 → 5.38.0

package/lib/packages/ngdpbase-types/index.d.ts

@@ -15,6 +15,7 @@
  * only, so the published entry carries no JavaScript.
  */
 export type { AddonModule, AddonManifest, AddonListing } from '../../src/managers/AddonsManager.js';
+export type { AddonDashboardCard, AddonCardSurface, AddonCardSummary, AddonCardFigure } from '../../src/managers/AddonsManager.js';
 export type { AddonHost, AddonIceDeclaration, PersonSwitchSetter } from '../../src/utils/addonHost.js';
 export type { WikiEngine } from '../../src/types/WikiEngine.js';
 export type { ApiContext } from '../../src/context/ApiContext.js';

package/lib/packages/ngdpbase-types/testing.js

@@ -48,7 +48,7 @@ export function openAddonTestDatabase(owner, options, declaredBy) {
     checkAddonDatabaseRequest(owner, options);
     if (declaredBy) {
         const { slug, defaults } = declaredBy;
-        const layer = addonDatabaseLayer([{ slug, dir: '', source: 'directory', enabled: true, defaults }], {});
+        const layer = addonDatabaseLayer([{ slug, dir: '', enabled: true, defaults }], {});
         const refused = layer.refused.get(slug);
         if (refused)
             throw new Error(`Add-on '${slug}' is not loaded: ${refused}`);

package/lib/src/managers/AddonsManager.d.ts

@@ -289,9 +289,27 @@ export interface AddonStatusDetails {
     message?: string;
     [key: string]: unknown;
 }
+/** The pages an add-on's card can be shown on: `/admin` (the default) and the Executive Hub, `/executive` (#2093). */
+export type AddonCardSurface = 'admin' | 'executive';
+/** One labelled figure on an Executive Hub card (`Funds`, `$12,400.00`). The add-on formats the value. */
+export interface AddonCardFigure {
+    label: string;
+    value: string | number;
+}
+/** What an Executive Hub card shows a viewer: its figures, and an optional line under them. */
+export interface AddonCardSummary {
+    figures?: AddonCardFigure[];
+    message?: string;
+}
 /**
- * Card registered by an add-on for display on the admin dashboard.
- * The card's live stats are sourced from the add-on's existing status() method.
+ * Card registered by an add-on for display on the admin dashboard, or, with
+ * `surface: 'executive'`, on the Executive Hub (#2093). An add-on registers
+ * at most one card per surface.
+ *
+ * An admin card's live stats come from the add-on's existing status() method.
+ * An executive card names the `permission` a viewer must hold to see it, and
+ * its figures come from `summary(ctx)`, called with the viewer's context, so
+ * the add-on's own doors decide what it reads.
  */
 export interface AddonDashboardCard {
     /** Must match the add-on's registered name */
@@ -300,8 +318,25 @@ export interface AddonDashboardCard {
     title: string;
     /** Font Awesome class, e.g. 'fas fa-wpforms' */
     icon: string;
-    /** URL of the add-on's admin page */
+    /** The page the card links to: the add-on's admin page, or for an executive card the page with the detail */
     adminUrl: string;
+    /** Where the card is shown; omitted means `/admin` */
+    surface?: AddonCardSurface;
+    /** Executive cards: the permission a viewer must hold to see the card (the add-on's own read permission). Required there */
+    permission?: string;
+    /** Executive cards: the card's figures for this viewer, read with their context. Throw to say they could not be read */
+    summary?: (ctx: ActorContext) => Promise<AddonCardSummary>;
+}
+/** An executive card as the hub shows it to one viewer: the figures read for them, or that they could not be. */
+export interface ExecutiveCardView {
+    addonName: string;
+    title: string;
+    icon: string;
+    adminUrl: string;
+    figures: AddonCardFigure[];
+    message: string;
+    /** True when the add-on's summary threw; the card says its figures could not be read. */
+    failed: boolean;
 }
 /** #2100: the PDP refused an administrator's add-on Update or Check. */
 export declare class AddonUpdateForbiddenError extends Error {
@@ -342,8 +377,6 @@ declare class AddonsManager extends BaseManager {
     private addonsPaths;
     /** Resolved absolute paths to addons directories */
     private resolvedAddonsPaths;
-    /** #673: npm package globs (from `node_modules:` addons-path entries) to discover from node_modules. */
-    private npmAddonPatterns;
     /** #1830: `<data>/addons`, where installed add-ons live; null when there is no data folder. */
     private installedDir;
     /** #1830: the installed add-ons verified this boot — the only ones loaded from `installedDir`. */
@@ -461,25 +494,10 @@ declare class AddonsManager extends BaseManager {
      * Scan a single addons directory and register any add-ons found.
      */
     private scanAddonsDirectory;
-    /**
-     * #673 (packaged model): discover addons published as npm packages, matching a
-     * `node_modules:<glob>` addons-path entry (e.g. `node_modules:@jwilleke/*-addon`).
-     * Each matching package is loaded through the same slug/module/register()
-     * contract as bundled and drop-in addons — only discovery differs.
-     */
-    private scanNpmAddons;
-    /** Locate the node_modules directory (app root / cwd). */
-    private findNodeModules;
-    /** Expand a `@scope/glob` (or bare `glob`) pattern to package directories. */
-    private resolveNpmAddonDirs;
     /**
      * Load a single addon from its directory (index.js/ts + optional package.json
-     * `ngdpbase` manifest) and register it. Shared by directory scans and npm
-     * (#673) discovery; `sourceLabel` is for logging only. `source` selects the
-     * no-slug identity fallback (#927): a directory addon's folder name is its
-     * identity verbatim, while an npm package strips the conventional `-addon`
-     * suffix. Duplicate ids are skipped — since npm discovery runs last, a
-     * bundled/drop-in addon wins.
+     * `ngdpbase` manifest) and register it. `sourceLabel` is for logging only.
+     * Duplicate ids are skipped, so the first directory scanned wins.
      */
     private registerAddonFromDir;
     /**
@@ -840,10 +858,19 @@ declare class AddonsManager extends BaseManager {
      */
     registerDashboardCard(card: AddonDashboardCard): void;
     /**
-     * Return all registered dashboard cards in registration order.
-     * Called by the admin dashboard route to populate the addon cards row.
+     * Return the registered cards for one surface, in registration order.
+     * The admin dashboard route calls it with no argument for the `/admin` cards.
+     */
+    getDashboardCards(surface?: AddonCardSurface): AddonDashboardCard[];
+    /**
+     * The Executive Hub's cards for one viewer (#2093): each card whose
+     * permission the PDP permits `ctx`, asked with that context, with the
+     * figures its add-on's `summary(ctx)` reads for them. A card the viewer may
+     * not see is left out; a summary that throws shows the card with its
+     * figures marked as not read, and is logged by add-on name only. No
+     * context, or no PDP, shows no cards.
      */
-    getDashboardCards(): AddonDashboardCard[];
+    executiveCardsFor(ctx: ActorContext): Promise<ExecutiveCardView[]>;
     /**
      * Get list of all discovered add-on names
      */

package/lib/src/managers/ConfigurationManager.d.ts

@@ -141,16 +141,15 @@ declare class ConfigurationManager extends BaseManager {
     /**
      * #672: refuse to start if any `ngdpbase.addons.<id>.enabled = true` key
      * references an `<id>` that has no matching addon in any configured
-     * `addons-path` entry — either a directory (bundled/drop-in) or, per
-     * #673/#924, an npm package matched by a `node_modules:<glob>` entry.
+     * `addons-path` directory (bundled/drop-in) and is not named in
+     * `ngdpbase.addons.install`. A retired `node_modules:` entry is ignored (#2102).
      * The discovery logic mirrors what `AddonsManager` does at runtime —
      * directory/package present with `index.js` or `index.ts` — but without
      * importing the modules (boot-time speed; `ConfigurationManager.initialize()`
-     * runs before any managers). The directory-vs-npm-pattern split, npm glob
-     * matching, AND the canonical-identity resolution are all shared with
+     * runs before any managers). The addons-path parsing AND the
+     * canonical-identity resolution are shared with
      * `AddonsManager` via `utils/addonsPathResolver.ts` so the two can no
-     * longer drift out of sync (#924: they had, and packaged addons could
-     * never boot as a result).
+     * longer drift out of sync (#924).
      *
      * Catches the failure mode that caused the 2026-05-10 geohazardwatch.com
      * outage: the deploy configmap had `ngdpbase.addons.ve-geology.enabled =

package/lib/src/security/permissions.generated.d.ts

@@ -22,6 +22,8 @@ export type CorePermission =
  | 'comment-create'
 /** Change any configuration setting, and download a backup (#1525). Admin only by default; asks for a fresh sign-in when listed in ngdpbase.auth.step-up */
  | 'config-manage'
+/** Open the Executive Hub (/executive): the organization's summary cards and the requests waiting for the board (#2093). Held by the executive role; deciding a request still needs that request's own permission */
+ | 'executive-read'
 /** Create, edit, delete and link identity records, of users and contacts alike, and organizations, and an identity's affiliations, through IdentityManager and OrganizationManager (#1930). Reading them is identity-read. Was contact-manage until #2038; a policy naming that is still read as this for one release. Admins by default; an add-on grants it to its own roles in its own policy */
  | 'identity-manage'
 /** List, search and view identity records, of users and contacts alike, and organizations, and their affiliations, through IdentityManager and OrganizationManager, and the /admin/contacts and /admin/organizations views (#1930). Was contact-read until #2038; a policy naming that is still read as this for one release. Admins and demo admins by default; an add-on grants it to its own roles in its own policy */

package/lib/src/utils/addonConfigLayer.d.ts

@@ -18,8 +18,8 @@
  * shipped entry. The operator's file still wins over everything.
  *
  * Discovery follows `ngdpbase.managers.addons-manager.addons-path` exactly as
- * AddonsManager does — directories and `node_modules:` patterns — so bundled
- * and external addons are treated alike. Only an addon whose
+ * AddonsManager does — directory entries — so bundled
+ * and drop-in addons are treated alike. Only an addon whose
  * `ngdpbase.addons.<slug>.enabled` is true in the shipped+custom view
  * contributes; a disabled addon's opinions do not reach the catalog.
  *
@@ -63,7 +63,6 @@ export declare const ADDONS_MANAGER_ENABLED_KEY = "ngdpbase.managers.addons-mana
 export interface AddonDefaults {
     slug: string;
     dir: string;
-    source: 'directory' | 'npm';
     /**
      * Whether the addon is switched on. A turned-off addon's file is read for its
      * system-categories alone (#1559); none of its other keys reach the merge.
@@ -83,7 +82,6 @@ export declare function isAddonEnabled(base: Record<string, unknown>, slug: stri
  */
 export declare function discoverAddonDirs(base: Record<string, unknown>, cwd?: string, dataFolder?: string): Array<{
     dir: string;
-    source: 'directory' | 'npm';
 }>;
 /**
  * The defaults of every installed addon, enabled or not, in discovery order,

package/lib/src/utils/addonConfigLayer.js

@@ -18,8 +18,8 @@
  * shipped entry. The operator's file still wins over everything.
  *
  * Discovery follows `ngdpbase.managers.addons-manager.addons-path` exactly as
- * AddonsManager does — directories and `node_modules:` patterns — so bundled
- * and external addons are treated alike. Only an addon whose
+ * AddonsManager does — directory entries — so bundled
+ * and drop-in addons are treated alike. Only an addon whose
  * `ngdpbase.addons.<slug>.enabled` is true in the shipped+custom view
  * contributes; a disabled addon's opinions do not reach the catalog.
  *
@@ -61,7 +61,7 @@ import fs from 'fs';
 import path from 'path';
 import { isDeepStrictEqual } from 'util';
 import { configFilePaths, deepMergeConfigs, deepMergeObjects, instanceDataFolder, isPlainObject, readConfigFilesSync } from './configFiles.js';
-import { configuredInstallSlugs, findNodeModulesDir, installedAddonsDir, matchNpmPackageDirs, resolveAddonSlug, splitAddonsPath } from './addonsPathResolver.js';
+import { configuredInstallSlugs, installedAddonsDir, resolveAddonSlug, splitAddonsPath } from './addonsPathResolver.js';
 import { lockedAddonDirsSync } from './addonLock.js';
 import { LEGACY_SECRET_KEYS_KEY, SENSITIVE_VALUES_KEY } from './sensitiveValues.js';
 import { parsePrivatestore } from './privateStorePath.js';
@@ -81,7 +81,7 @@ export function isAddonEnabled(base, slug) {
 export function discoverAddonDirs(base, cwd = process.cwd(), dataFolder = instanceDataFolder()) {
     if (base[ADDONS_MANAGER_ENABLED_KEY] === false)
         return [];
-    const { directories, npmPatterns } = splitAddonsPath(base[ADDONS_PATH_KEY] ?? './addons');
+    const { directories } = splitAddonsPath(base[ADDONS_PATH_KEY] ?? './addons');
     const found = [];
     for (const raw of directories) {
         const root = path.resolve(cwd, raw);
@@ -95,20 +95,13 @@ export function discoverAddonDirs(base, cwd = process.cwd(), dataFolder = instan
         for (const entry of entries) {
             if (!entry.isDirectory() || entry.name.startsWith('.') || entry.name === 'shared')
                 continue;
-            found.push({ dir: path.join(root, entry.name), source: 'directory' });
+            found.push({ dir: path.join(root, entry.name) });
         }
     }
     const installed = installedAddonsDir(dataFolder, cwd);
     if (!found.some((f) => path.dirname(f.dir) === installed)) {
         for (const dir of lockedAddonDirsSync(installed, configuredInstallSlugs(base)))
-            found.push({ dir, source: 'directory' });
-    }
-    const nmRoot = npmPatterns.length > 0 ? findNodeModulesDir(cwd) : null;
-    if (nmRoot) {
-        for (const pattern of npmPatterns) {
-            for (const dir of matchNpmPackageDirs(nmRoot, pattern))
-                found.push({ dir, source: 'npm' });
-        }
+            found.push({ dir });
     }
     return found;
 }
@@ -122,8 +115,8 @@ export function discoverAddonDirs(base, cwd = process.cwd(), dataFolder = instan
  */
 export function discoverAddonDefaults(base, cwd = process.cwd(), dataFolder = instanceDataFolder()) {
     const out = [];
-    for (const { dir, source } of discoverAddonDirs(base, cwd, dataFolder)) {
-        const slug = resolveAddonSlug(dir, source);
+    for (const { dir } of discoverAddonDirs(base, cwd, dataFolder)) {
+        const slug = resolveAddonSlug(dir);
         const enabled = isAddonEnabled(base, slug);
         const file = path.join(dir, 'config', 'default-config.json');
         if (!fs.existsSync(file))
@@ -136,10 +129,10 @@ export function discoverAddonDefaults(base, cwd = process.cwd(), dataFolder = in
             for (const [key, value] of Object.entries(raw))
                 if (!key.startsWith('_'))
                     defaults[key] = value;
-            out.push({ slug, dir, source, enabled, defaults });
+            out.push({ slug, dir, enabled, defaults });
         }
         catch (err) {
-            out.push({ slug, dir, source, enabled, defaults: {}, error: err instanceof Error ? err.message : String(err) });
+            out.push({ slug, dir, enabled, defaults: {}, error: err instanceof Error ? err.message : String(err) });
         }
     }
     return out;

package/lib/src/utils/addonsPathResolver.d.ts

@@ -1,30 +1,26 @@
 /**
  * Shared parsing/discovery for the `ngdpbase.managers.addons-manager.addons-path`
- * config value.
+ * config value, used by `AddonsManager` (runtime discovery), `ConfigurationManager`
+ * (the #672 boot-time "does this enabled addon exist" check) and the add-on
+ * config layer, so the three cannot drift (#924).
  *
- * #924: `AddonsManager` (real runtime discovery) and `ConfigurationManager`
- * (the #672 boot-time "does this enabled addon exist" safety check) used to
- * each carry their own copy of this logic. They drifted: `AddonsManager` was
- * updated for #673's `node_modules:<glob>` packaged-addon syntax, but the
- * validator's copy was not, so it resolved a `node_modules:` entry as a
- * literal (non-existent) directory and treated every packaged addon as
- * "unknown" — crashing boot the moment one was enabled. Consolidating the
- * parsing/matching into one module removes the class of bug, not just this
- * instance of it.
+ * #2102: the packaged model (`node_modules:<glob>` entries) is gone. A site
+ * config may still hold such an entry; it is ignored, never treated as a
+ * directory, and never stops the boot.
  */
-/** Prefix marking an addons-path entry as an npm-package glob rather than a directory. */
-export declare const NPM_ADDON_PREFIX = "node_modules:";
 export interface SplitAddonsPath {
     /** Plain directory entries (bundled/drop-in), not yet resolved to absolute. */
     directories: string[];
-    /** npm package name globs (the part after `node_modules:`), e.g. `@jwilleke/*-addon`. */
-    npmPatterns: string[];
+    /** Retired `node_modules:` entries (#2102): ignored; AddonsManager warns about them once at start. */
+    retired: string[];
 }
 /**
  * Coerce the raw config value (string or string[]) and split it into
- * filesystem directory entries vs. `node_modules:<glob>` npm patterns.
+ * filesystem directory entries and retired `node_modules:` entries.
  */
 export declare function splitAddonsPath(raw: unknown): SplitAddonsPath;
+/** The warning for one retired `node_modules:` entry (#2102). */
+export declare function retiredAddonsPathWarning(entry: string): string;
 /** The config key naming the add-ons to install (#1830). */
 export declare const ADDONS_INSTALL_KEY = "ngdpbase.addons.install";
 /**
@@ -35,42 +31,15 @@ export declare const ADDONS_INSTALL_KEY = "ngdpbase.addons.install";
 export declare function installedAddonsDir(dataFolder: string, cwd?: string): string;
 /** The slugs `ngdpbase.addons.install` names, from a merged or shipped+custom view. */
 export declare function configuredInstallSlugs(config: Record<string, unknown>): string[];
-/** Locate the `node_modules` directory to search for packaged addons (resolved from cwd). */
-export declare function findNodeModulesDir(cwd?: string): string | null;
-/**
- * Expand a `@scope/glob` (or bare `glob`) npm pattern to matching package
- * directories under `nmRoot`.
- */
-export declare function matchNpmPackageDirs(nmRoot: string, pattern: string): string[];
-/**
- * Best-effort addon identity for a packaged (npm) addon directory, derived
- * from its package-directory name alone — no module import, matching the
- * same boot-time-speed, no-module-loading design already accepted for the
- * directory-scan case (see `ConfigurationManager.assertConfiguredAddonsExist`).
- *
- * Follows the documented packaged-addon naming convention
- * (`@scope/<slug>-addon`, see docs/platform/deployment/addon-packaged.md):
- * strips a trailing `-addon` suffix if present, else returns the folder name
- * as-is.
- *
- * Caveat (same class as the existing directory-name heuristic): the addon's
- * *real* identity is whatever its module exports as `name` at runtime. A
- * package that doesn't follow the `-addon` naming convention, or whose
- * module exports a different `name`, won't be matched precisely here — this
- * is a validation-time approximation, not the source of truth.
- */
-export declare function deriveAddonSlugFromPackageDirName(dirName: string): string;
 /**
  * Canonical identity for an addon directory (#927), resolved the SAME
  * import-free way in every layer (discovery, `isEnabled`, the boot-time
- * validator) so the four historical identities (folder name, module `name`,
- * config key, manifest slug) can no longer drift:
+ * validator):
  *
- *   canonicalId = package.json `ngdpbase.slug`  ??  deriveAddonSlugFromPackageDirName(folder)
+ *   canonicalId = package.json `ngdpbase.slug`  ??  the folder name verbatim
  *
- * Reads `package.json` statically — never imports the module — which is what
- * lets the boot validator compute the exact id the runtime will register
- * under, instead of guessing. The module's exported `name` is a display
- * label validated against this at load time, not a source of identity.
+ * Reads `package.json` statically — never imports the module. The module's
+ * exported `name` is a display label validated against this at load time,
+ * not a source of identity.
  */
-export declare function resolveAddonSlug(addonDir: string, source: 'directory' | 'npm'): string;
+export declare function resolveAddonSlug(addonDir: string): string;

package/lib/src/utils/addonsPathResolver.js

@@ -1,36 +1,32 @@
 /**
  * Shared parsing/discovery for the `ngdpbase.managers.addons-manager.addons-path`
- * config value.
+ * config value, used by `AddonsManager` (runtime discovery), `ConfigurationManager`
+ * (the #672 boot-time "does this enabled addon exist" check) and the add-on
+ * config layer, so the three cannot drift (#924).
  *
- * #924: `AddonsManager` (real runtime discovery) and `ConfigurationManager`
- * (the #672 boot-time "does this enabled addon exist" safety check) used to
- * each carry their own copy of this logic. They drifted: `AddonsManager` was
- * updated for #673's `node_modules:<glob>` packaged-addon syntax, but the
- * validator's copy was not, so it resolved a `node_modules:` entry as a
- * literal (non-existent) directory and treated every packaged addon as
- * "unknown" — crashing boot the moment one was enabled. Consolidating the
- * parsing/matching into one module removes the class of bug, not just this
- * instance of it.
+ * #2102: the packaged model (`node_modules:<glob>` entries) is gone. A site
+ * config may still hold such an entry; it is ignored, never treated as a
+ * directory, and never stops the boot.
  */
 import * as fs from 'fs';
 import * as path from 'path';
-import { minimatch } from 'minimatch';
-/** Prefix marking an addons-path entry as an npm-package glob rather than a directory. */
-export const NPM_ADDON_PREFIX = 'node_modules:';
+/** The retired packaged-model prefix, recognised only so the entry can be ignored with a warning. */
+const RETIRED_PACKAGED_PREFIX = 'node_modules:';
 /**
  * Coerce the raw config value (string or string[]) and split it into
- * filesystem directory entries vs. `node_modules:<glob>` npm patterns.
+ * filesystem directory entries and retired `node_modules:` entries.
  */
 export function splitAddonsPath(raw) {
     const entries = Array.isArray(raw) ? raw.map(String) : [String(raw)];
     return {
-        directories: entries.filter(p => !p.startsWith(NPM_ADDON_PREFIX)),
-        npmPatterns: entries
-            .filter(p => p.startsWith(NPM_ADDON_PREFIX))
-            .map(p => p.slice(NPM_ADDON_PREFIX.length).trim())
-            .filter(Boolean)
+        directories: entries.filter(p => !p.trim().startsWith(RETIRED_PACKAGED_PREFIX)),
+        retired: entries.filter(p => p.trim().startsWith(RETIRED_PACKAGED_PREFIX))
     };
 }
+/** The warning for one retired `node_modules:` entry (#2102). */
+export function retiredAddonsPathWarning(entry) {
+    return `addons-path entry '${entry}' is no longer supported and is ignored; install add-ons with ngdpbase.addons.install`;
+}
 /** The config key naming the add-ons to install (#1830). */
 export const ADDONS_INSTALL_KEY = 'ngdpbase.addons.install';
 /**
@@ -46,69 +42,18 @@ export function configuredInstallSlugs(config) {
     const map = config[ADDONS_INSTALL_KEY];
     return map && typeof map === 'object' && !Array.isArray(map) ? Object.keys(map) : [];
 }
-/** Locate the `node_modules` directory to search for packaged addons (resolved from cwd). */
-export function findNodeModulesDir(cwd = process.cwd()) {
-    const nm = path.resolve(cwd, 'node_modules');
-    return fs.existsSync(nm) && fs.statSync(nm).isDirectory() ? nm : null;
-}
-/**
- * Expand a `@scope/glob` (or bare `glob`) npm pattern to matching package
- * directories under `nmRoot`.
- */
-export function matchNpmPackageDirs(nmRoot, pattern) {
-    let baseDir = nmRoot;
-    let nameGlob = pattern;
-    if (pattern.startsWith('@')) {
-        const slash = pattern.indexOf('/');
-        const scope = slash > 0 ? pattern.slice(0, slash) : pattern;
-        nameGlob = slash > 0 ? pattern.slice(slash + 1) : '*';
-        baseDir = path.join(nmRoot, scope);
-    }
-    if (!fs.existsSync(baseDir))
-        return [];
-    const out = [];
-    for (const entry of fs.readdirSync(baseDir, { withFileTypes: true })) {
-        if (entry.isDirectory() && !entry.name.startsWith('.') && minimatch(entry.name, nameGlob)) {
-            out.push(path.join(baseDir, entry.name));
-        }
-    }
-    return out;
-}
-/**
- * Best-effort addon identity for a packaged (npm) addon directory, derived
- * from its package-directory name alone — no module import, matching the
- * same boot-time-speed, no-module-loading design already accepted for the
- * directory-scan case (see `ConfigurationManager.assertConfiguredAddonsExist`).
- *
- * Follows the documented packaged-addon naming convention
- * (`@scope/<slug>-addon`, see docs/platform/deployment/addon-packaged.md):
- * strips a trailing `-addon` suffix if present, else returns the folder name
- * as-is.
- *
- * Caveat (same class as the existing directory-name heuristic): the addon's
- * *real* identity is whatever its module exports as `name` at runtime. A
- * package that doesn't follow the `-addon` naming convention, or whose
- * module exports a different `name`, won't be matched precisely here — this
- * is a validation-time approximation, not the source of truth.
- */
-export function deriveAddonSlugFromPackageDirName(dirName) {
-    const suffix = '-addon';
-    return dirName.endsWith(suffix) ? dirName.slice(0, -suffix.length) : dirName;
-}
 /**
  * Canonical identity for an addon directory (#927), resolved the SAME
  * import-free way in every layer (discovery, `isEnabled`, the boot-time
- * validator) so the four historical identities (folder name, module `name`,
- * config key, manifest slug) can no longer drift:
+ * validator):
  *
- *   canonicalId = package.json `ngdpbase.slug`  ??  deriveAddonSlugFromPackageDirName(folder)
+ *   canonicalId = package.json `ngdpbase.slug`  ??  the folder name verbatim
  *
- * Reads `package.json` statically — never imports the module — which is what
- * lets the boot validator compute the exact id the runtime will register
- * under, instead of guessing. The module's exported `name` is a display
- * label validated against this at load time, not a source of identity.
+ * Reads `package.json` statically — never imports the module. The module's
+ * exported `name` is a display label validated against this at load time,
+ * not a source of identity.
  */
-export function resolveAddonSlug(addonDir, source) {
+export function resolveAddonSlug(addonDir) {
     const dirName = path.basename(addonDir);
     const pkgPath = path.join(addonDir, 'package.json');
     try {
@@ -118,12 +63,7 @@ export function resolveAddonSlug(addonDir, source) {
             return slug.trim();
     }
     catch {
-        /* no/invalid package.json — fall back to the folder-derived id */
+        /* no/invalid package.json — fall back to the folder name */
     }
-    // Fallback when no slug is declared. npm packages follow the
-    // `@scope/<slug>-addon` publishing convention, so strip the conventional
-    // trailing `-addon`. A plain directory (bundled/drop-in) addon's folder
-    // name IS its identity verbatim — an addon may legitimately be named
-    // `something-addon` on disk — so never strip there.
-    return source === 'npm' ? deriveAddonSlugFromPackageDirName(dirName) : dirName;
+    return dirName;
 }

package/lib/src/utils/auditEventNames.generated.d.ts

@@ -58,6 +58,8 @@ export declare const AUDIT_EVENT: {
     readonly EMAILCHANGE_CONFIRM: "emailchange-confirm";
     /** A user asked to change their own email: a confirmation link was sent to the new address (#2073). Names only, never an address */
     readonly EMAILCHANGE_REQUEST: "emailchange-request";
+    /** Executive Hub read; not recorded, read volume */
+    readonly EXECUTIVE_READ: "executive-read";
     /** A page's footnote list changed — action add, import, transfer, update or delete; page content written on someone's behalf (#1233) */
     readonly FOOTNOTE_EDIT: "footnote-edit";
     /** Identity record or organization created, changed, deleted or linked to an account (recorded as contact-manage before #2038); metadata names the kind (person or organization), the operation and the fields changed, never their values */

package/lib/src/utils/auditEventNames.generated.js

@@ -65,6 +65,8 @@ export const AUDIT_EVENT = {
     EMAILCHANGE_CONFIRM: 'emailchange-confirm',
     /** A user asked to change their own email: a confirmation link was sent to the new address (#2073). Names only, never an address */
     EMAILCHANGE_REQUEST: 'emailchange-request',
+    /** Executive Hub read; not recorded, read volume */
+    EXECUTIVE_READ: 'executive-read',
     /** A page's footnote list changed — action add, import, transfer, update or delete; page content written on someone's behalf (#1233) */
     FOOTNOTE_EDIT: 'footnote-edit',
     /** Identity record or organization created, changed, deleted or linked to an account (recorded as contact-manage before #2038); metadata names the kind (person or organization), the operation and the fields changed, never their values */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jwilleke/ngdpbase-types",
-  "version": "5.36.0",
+  "version": "5.38.0",
   "description": "TypeScript types for ngdpbase add-ons, and a test kit of core's own values. A dev dependency, versioned with ngdpbase.",
   "license": "Apache-2.0",
   "author": "Jim Willeke",
@@ -41,15 +41,14 @@
     "@types/multer": "^2.3.0",
     "@types/node": "^24.19.2",
     "better-sqlite3-multiple-ciphers": "^13.0.3",
-    "dotenv": "^18.0.8",
+    "dotenv": "^18.0.9",
     "express": "^5.3.0",
     "express-session": "^1.19.0",
     "fs-extra": "^11.4.1",
     "ipaddr.js": "^2.5.0",
-    "jose": "^6.2.12",
-    "linkedom": "^0.18.13",
+    "jose": "^6.2.13",
+    "linkedom": "^0.18.14",
     "markdown-it": "^14.3.3",
-    "minimatch": "^10.2.6",
     "minisearch": "7.2.0",
     "multer": "^2.4.0",
     "rrule-temporal": "2.2.8",