@kanonak-protocol/sdk 3.70.0 → 3.72.0

package/dist/producer/Entitlement.d.ts

@@ -0,0 +1,75 @@
+import type { Version } from '@kanonak-protocol/types/document/models/types';
+import type { IPackageProducer, ProduceResult, VersionRange } from './IPackageProducer.js';
+/**
+ * The entitlement + metering seam for package producers. The SDK ships the
+ * *wrapper* and these *interfaces* with no-op defaults; the platform supplies
+ * the *policy* (e.g. Cedar/IAM), the *meter* (billing), and the credential /
+ * egress layer — none of which appear in the SDK. Composing
+ * {@link EntitlementProducer} around an {@link IPackageProducer} gates access
+ * to a produced package without changing the bare producer contract, so an
+ * in-process producer needs none of this.
+ *
+ * Invariant the wrapper preserves: it gates *access to* a deterministic
+ * artifact — it never parameterizes the artifact. The produced body stays a
+ * pure function of the address; the principal must not leak into the body or
+ * its content hash.
+ */
+/**
+ * The authenticated caller, resolved by the host from the inbound request's
+ * credential. Opaque to the SDK — the platform resolves it to its own
+ * principal model. `null` is an anonymous / unauthenticated caller.
+ */
+export type RequestPrincipal = Record<string, unknown>;
+/** The request context threaded to the entitlement layer. */
+export interface ProduceContext {
+    readonly principal: RequestPrincipal | null;
+}
+/** The address an entitlement decision is made about. `version` is absent at version-resolution time. */
+export interface PackageAddress {
+    readonly publisher: string;
+    readonly package_: string;
+    readonly version?: Version;
+}
+/** A policy's verdict. A deny is fail-closed; `reason` is for diagnostics/audit. */
+export interface EntitlementDecision {
+    readonly allowed: boolean;
+    readonly reason?: string;
+}
+/** Authorizes a caller for an address. The platform implements this (Cedar/IAM/…). */
+export interface IEntitlementPolicy {
+    authorize(ctx: ProduceContext, address: PackageAddress): Promise<EntitlementDecision>;
+}
+/** Records a usage event for a produced package. The platform implements this (billing). */
+export interface IMeter {
+    record(ctx: ProduceContext, address: PackageAddress, result: ProduceResult): Promise<void>;
+}
+/** Allow-all policy — the default when a host wires no entitlement. */
+export declare const allowAllPolicy: IEntitlementPolicy;
+/** No-op meter — the default when a host wires no metering. */
+export declare const noopMeter: IMeter;
+/** Thrown when a policy denies a caller. The origin maps this to 403 (or 404 to avoid disclosure). */
+export declare class EntitlementDeniedError extends Error {
+    readonly address: PackageAddress;
+    readonly reason?: string | undefined;
+    constructor(address: PackageAddress, reason?: string | undefined);
+}
+/**
+ * Decorates an {@link IPackageProducer} so each `resolveVersion` / `produce`
+ * is authorized for the bound caller before the inner producer runs, and each
+ * `produce` is metered after. A denied call throws {@link EntitlementDeniedError}
+ * and never invokes the inner producer (fail-closed). One instance is bound to
+ * one request's {@link ProduceContext} — the host constructs it per request
+ * after resolving the caller's principal — so the principal stays out of the
+ * producer signature and out of the produced bytes.
+ */
+export declare class EntitlementProducer implements IPackageProducer {
+    private readonly inner;
+    private readonly ctx;
+    private readonly policy;
+    private readonly meter;
+    constructor(inner: IPackageProducer, ctx: ProduceContext, policy?: IEntitlementPolicy, meter?: IMeter);
+    canProduce(publisher: string, package_: string): boolean;
+    resolveVersion(publisher: string, package_: string, range: VersionRange): Promise<Version | null>;
+    produce(publisher: string, package_: string, version: Version): Promise<ProduceResult>;
+    private assertAllowed;
+}

package/dist/producer/IPackageProducer.d.ts

@@ -0,0 +1,59 @@
+import type { KanonakDocument } from '@kanonak-protocol/types/document/models/types';
+import type { Version } from '@kanonak-protocol/types/document/models/types';
+import type { VersionOperator } from '@kanonak-protocol/types/document/models/enums';
+/**
+ * A version request a producer resolves: an operator and the version it
+ * qualifies (`= 1.2.0`, `^ 1.0.0`, `~ 1.1.0`, or `*` where the version is
+ * ignored). Deliberately minimal — decoupled from the parser's full `Import`
+ * — so a producer interprets only what it needs.
+ */
+export interface VersionRange {
+    operator: VersionOperator;
+    version: Version;
+}
+/**
+ * What a producer hands back for one produced package: the parsed document,
+ * its canonical `.kan.yml` source text, and the source's UTF-8 byte size.
+ * `source` is what an HTTP origin serves verbatim (so a consumer that fetches
+ * raw YAML gets byte-identical content); `document` is what the resolution
+ * layer consumes; `byteCount` is captured here so a meter bills per-byte
+ * without re-serializing.
+ */
+export interface ProduceResult {
+    document: KanonakDocument;
+    source: string;
+    byteCount: number;
+}
+/**
+ * A package producer generates a valid Kanonak Package on demand for a URI it
+ * is authoritative for, instead of serving an authored, on-disk `.kan.yml`.
+ * It is the seam a data adapter (market data, DynamoDB, a SQL warehouse)
+ * implements: the SDK resolves a package through {@link IPackageProducer}
+ * exactly as it would through any repository, and the producer projects its
+ * external store into Kanonak form.
+ *
+ * Resolution is two steps so a range never forces enumeration of every
+ * version: {@link resolveVersion} answers "which concrete version does this
+ * range mean" (consulting the backend — e.g. the latest `updated_at` ordinal
+ * for `*`), and {@link produce} generates only that one. A producer typically
+ * builds its document with `PackageBuilder`.
+ *
+ * The contract carries no auth: entitlement and metering are layered as an
+ * injected decorator around a producer (see the package-producer design),
+ * so an in-process producer needs none. The produced body MUST be a pure
+ * function of `(publisher, package, version)` — the requesting principal may
+ * gate access and may appear in the address, but must never shape the bytes,
+ * or content-addressing, lockfiles, and caching break.
+ */
+export interface IPackageProducer {
+    /** Whether this producer is authoritative for `publisher/package`. */
+    canProduce(publisher: string, package_: string): boolean;
+    /**
+     * Resolve a version range to the concrete version this producer would serve
+     * — the latest snapshot ordinal for `*`, an exact pin verbatim, the highest
+     * in range for `^`/`~`. Returns `null` when nothing satisfies the range.
+     */
+    resolveVersion(publisher: string, package_: string, range: VersionRange): Promise<Version | null>;
+    /** Generate the package for a concrete, already-resolved version. */
+    produce(publisher: string, package_: string, version: Version): Promise<ProduceResult>;
+}

package/dist/producer/PackageBuilder.d.ts

@@ -0,0 +1,130 @@
+import type { IKanonakDocumentRepository } from '@kanonak-protocol/types/document/models';
+import { KanonakParser } from '../parsing/KanonakParser.js';
+import { KanonakObjectParser } from '../parsing/KanonakObjectParser.js';
+import type { KanonakUri } from '../resolution/KanonakUri.js';
+/**
+ * The producer-side toolkit for constructing a valid, canonical Kanonak
+ * Package document from data — the surface a package producer (an in-graph
+ * materializer, or an external data adapter) builds on instead of hand-
+ * rolling YAML and re-implementing the object model.
+ *
+ * It owns the four pieces every producer needs and must get right
+ * identically: import/alias bookkeeping ({@link ImportBook}), value
+ * serialization (literals vs. `alias.name` references, fail-loud on the
+ * unrepresentable), content-hash identity over the canonical (parsed) body,
+ * and a deterministic YAML dump. `ViewMaterializer` is its first client.
+ *
+ * Two assembly modes:
+ *  - {@link buildContentAddressed} — a versionless, content-hashed package
+ *    whose name is derived from the hash (`q-<hex16>`). For per-invocation /
+ *    deterministic-query output.
+ *  - {@link buildNamed} — an ordinary named, versioned package (e.g. a data
+ *    adapter's `quotes-aapl@<epoch>.0.0` snapshot), optionally recording a
+ *    `contentHash` for dedup.
+ *
+ * The SDK never reads the clock or invents identity; the caller supplies any
+ * provenance (`resolvedAt`, `id`) via `header`, and it lives outside the
+ * hashed body so two identical productions share a content hash.
+ */
+export declare class PackageBuilder {
+    private readonly repository;
+    private readonly parser;
+    private readonly objectParser;
+    /**
+     * @param repository resolution context for the body's import closure —
+     *   the same role it plays for any parse; used to canonicalize the body
+     *   when content-hashing.
+     * @param parser     the shared Kanonak parser.
+     * @param objectParser optional reuse of an existing object parser.
+     */
+    constructor(repository: IKanonakDocumentRepository, parser?: KanonakParser, objectParser?: KanonakObjectParser);
+    /** A fresh import/alias ledger to allocate references against while building the body. */
+    imports(): ImportBook;
+    /**
+     * Serialize one body value: primitives pass through; a `ReferenceKanonak`
+     * becomes an `alias.name` string (allocating the import via `book`); a list
+     * recurses. An embedded object or a bare unversioned URI is unrepresentable
+     * here and throws rather than silently dropping or guessing.
+     */
+    serializeValue(value: unknown, book: ImportBook): unknown;
+    /**
+     * Assemble a versionless, content-addressed package. The body is hashed in
+     * canonical form (name-independent), the package name is derived from the
+     * hash, and `header` carries any out-of-body provenance.
+     */
+    buildContentAddressed(args: {
+        publisher: string;
+        book: ImportBook;
+        body: Record<string, unknown>;
+        /** Extra header fields (e.g. `ck.contentHash`, `ck.resolvedAt`, `ck.id`). */
+        header?: Record<string, unknown>;
+        /** Property key under which to record the content hash (e.g. `ck.contentHash`). */
+        contentHashProperty?: string;
+    }): Promise<BuiltPackage>;
+    /**
+     * Assemble an ordinary named, versioned package — the mode a data adapter
+     * uses for a stable or snapshot-versioned artifact (`quotes-aapl@<epoch>.0.0`).
+     * Optionally records a `contentHash` for dedup; the package's identity is
+     * its `name@version`, not the hash.
+     */
+    buildNamed(args: {
+        publisher: string;
+        name: string;
+        /** Version string, e.g. `1.0.0` or an epoch ordinal `1717000000000.0.0`. */
+        version: string;
+        book: ImportBook;
+        body: Record<string, unknown>;
+        type?: string;
+        header?: Record<string, unknown>;
+        /** Property key under which to record the content hash, if any. */
+        contentHashProperty?: string;
+    }): Promise<BuiltPackage>;
+    /** Deterministic YAML serialization of an assembled document. */
+    dump(doc: Record<string, unknown>): string;
+    /**
+     * Content hash of the body, independent of the package's own (possibly
+     * not-yet-assigned) name. Parses the body under a fixed probe header,
+     * neutralizes each body subject's namespace to a constant, and hashes the
+     * canonical form — so the same projected data always yields the same
+     * `sha256:` regardless of which package name it ends up under.
+     */
+    hashBody(publisher: string, imports: unknown[], body: Record<string, unknown>): Promise<string>;
+}
+/** The result of assembling a package: the `.kan.yml` text plus its identity. */
+export interface BuiltPackage {
+    /** The package as `.kan.yml` text. */
+    yaml: string;
+    /** UTF-8 byte length of `yaml` — the on-the-wire size, for metering. */
+    byteCount: number;
+    /** `sha256:` content hash of the body, when one was computed. */
+    contentHash?: string;
+    /** The package name (content-addressed `q-<hex16>` or the caller's name). */
+    packageName: string;
+    /** Publisher the package is minted under. */
+    publisher: string;
+    /** Number of body resources produced. */
+    resourceCount: number;
+}
+/** Address-safe package name (`q-<hex16>`) derived from a `sha256:` content hash. */
+export declare function contentAddressedName(contentHash: string): string;
+export interface ImportEntry {
+    publisher: string;
+    package_: string;
+    version: string;
+    alias: string;
+}
+/**
+ * Allocates import aliases and emits the package's `imports` block. Aliases
+ * are unique within the package; the same `publisher/package@version` reuses
+ * its alias. Holding this while building the body lets value serialization
+ * mint `alias.name` references that the emitted `imports` exactly covers.
+ */
+export declare class ImportBook {
+    private readonly byKey;
+    private readonly aliases;
+    ensure(publisher: string, package_: string, version: string, preferred: string): string;
+    ref(uri: KanonakUri): string;
+    toImports(): unknown[];
+    private uniqueAlias;
+}
+export declare function sanitizeName(raw: string): string;

package/dist/producer/ProducerRepository.d.ts

@@ -0,0 +1,44 @@
+import type { IKanonakDocumentRepository } from '@kanonak-protocol/types/document/models';
+import type { KanonakDocument, Import, DocumentReference } from '@kanonak-protocol/types/document/models/types';
+import type { IPackageProducer } from './IPackageProducer.js';
+/**
+ * Composes one or more {@link IPackageProducer}s into the resolution chain as
+ * an ordinary read-only `IKanonakDocumentRepository` — the same shape
+ * `HttpKanonakDocumentRepository` realizes, so a producer drops into a
+ * `CompositeKanonakDocumentRepository`, `kanonak serve`, or any consumer
+ * without special-casing. `getHighestCompatibleVersionAsync` is
+ * `resolveVersion` then `produce`; writes throw (a producer is a source, not
+ * a store).
+ *
+ * Producers are tried in registration order; the first whose `canProduce`
+ * matches wins (explicit registration — a host wires its producers up front).
+ * Produced documents are deterministic per `(publisher, package, version)`,
+ * so they are cached by that key and never re-produced. The repository never
+ * enumerates a producer's version history (it would be unbounded for a
+ * snapshot feed): namespace/all-document queries return only what has already
+ * been produced this session.
+ */
+export declare class ProducerRepository implements IKanonakDocumentRepository {
+    private readonly producers;
+    private readonly produced;
+    constructor(producers: IPackageProducer[]);
+    private producerFor;
+    private produceCached;
+    getHighestCompatibleVersionAsync(publisher: string, import_: Import): Promise<KanonakDocument | null>;
+    /**
+     * Produce a specific package by identifier. A producer must be told which
+     * snapshot to make, so the identifier must carry a version
+     * (`publisher/package@version`); a versionless or non-package identifier
+     * returns `null` — callers resolve ranges through
+     * {@link getHighestCompatibleVersionAsync}, not here.
+     */
+    getDocumentAsync(identifier: string): Promise<KanonakDocument | null>;
+    getDocumentsByNamespaceAsync(publisher: string, package_: string): Promise<KanonakDocument[]>;
+    getAllDocumentsAsync(): Promise<KanonakDocument[]>;
+    saveDocumentAsync(_document: KanonakDocument, _identifier: string): Promise<void>;
+    deleteDocumentAsync(_identifier: string): Promise<void>;
+    clearNamespaceAsync(_publisher: string, _package: string): Promise<void>;
+    getAllDocumentReferencesAsync(): Promise<DocumentReference[]>;
+    getDocumentContentAsync(_identifier: string): Promise<string | null>;
+    getDocumentUriAsync(_identifier: string): Promise<string | null>;
+}

package/dist/producer/index.d.ts

@@ -0,0 +1,6 @@
+export { PackageBuilder, ImportBook, contentAddressedName, sanitizeName } from './PackageBuilder.js';
+export type { BuiltPackage, ImportEntry } from './PackageBuilder.js';
+export { ProducerRepository } from './ProducerRepository.js';
+export type { IPackageProducer, ProduceResult, VersionRange } from './IPackageProducer.js';
+export { EntitlementProducer, EntitlementDeniedError, allowAllPolicy, noopMeter, } from './Entitlement.js';
+export type { IEntitlementPolicy, IMeter, ProduceContext, PackageAddress, EntitlementDecision, RequestPrincipal, } from './Entitlement.js';

package/dist/reasoning/index.js

@@ -1 +1 @@
-import{a as g,b as h,c as i,d as j,e as k}from"../chunk-2OXZDBHX.js";import"../chunk-PODBS4IU.js";import"../chunk-ORFSMEMM.js";import{d as a,e as b,f as c,h as d,i as e,j as f}from"../chunk-64TVBQFR.js";import"../chunk-W6T7MOKY.js";import"../chunk-FUUTGGJS.js";import"../chunk-2ACBWC7K.js";export{f as KanonakVocabulary,i as OWL_RL_CLASSIFICATION_RULES,h as RDFS_RULES,k as Reasoner,j as ReasoningResult,g as TripleStore,e as canonicalizeBuiltinUri,b as makeUriKey,c as tripleKey,a as uriKey,d as uriTriple};
+import{a as g,b as h,c as i,d as j,e as k}from"../chunk-FX7JDGL6.js";import"../chunk-G2DKKSZ4.js";import"../chunk-TJPQETHV.js";import{d as a,e as b,f as c,h as d,i as e,j as f}from"../chunk-IOMNZBK4.js";import"../chunk-W6T7MOKY.js";import"../chunk-FUUTGGJS.js";import"../chunk-2ACBWC7K.js";export{f as KanonakVocabulary,i as OWL_RL_CLASSIFICATION_RULES,h as RDFS_RULES,k as Reasoner,j as ReasoningResult,g as TripleStore,e as canonicalizeBuiltinUri,b as makeUriKey,c as tripleKey,a as uriKey,d as uriTriple};

package/dist/repositories/HttpKanonakDocumentRepository.d.ts

@@ -15,6 +15,26 @@ export declare class HttpKanonakDocumentRepository implements IKanonakDocumentRe
         fetchFn?: AuthenticatedFetchFn;
     });
     getHighestCompatibleVersionAsync(publisher: string, import_: Import): Promise<KanonakDocument | null>;
+    /**
+     * Resolve against a live producer origin (`config.resolveByRedirect`): fetch
+     * the package source and follow the latest→pinned redirect, instead of
+     * downloading and filtering an index. An exact pin fetches the pinned URL;
+     * any range fetches the bare-name "latest" pointer (`/{package}.kan.yml`),
+     * which the origin 302s to the resolved pinned source. The resolved version
+     * is read from the returned document.
+     *
+     * A range resolves to the origin's LATEST — correct for a snapshot feed,
+     * where `^`/`~` are inert on the time axis; range-constrained resolution
+     * over redirect would need the range encoded in the request (future work).
+     */
+    private resolveByRedirect;
+    /**
+     * Fetch a URL following 301/302 redirects explicitly — so an authenticated
+     * `fetchFn` re-signs each hop (and plain fetch doesn't transparently swallow
+     * the redirect). Returns null on 404; throws on other non-OK statuses or a
+     * redirect loop.
+     */
+    private fetchFollowing;
     getAllDocumentsAsync(): Promise<KanonakDocument[]>;
     getDocumentAsync(identifier: string): Promise<KanonakDocument | null>;
     getDocumentsByNamespaceAsync(publisher: string, package_: string): Promise<KanonakDocument[]>;

package/dist/repositories/PublisherConfig.d.ts

@@ -14,6 +14,16 @@ export interface PublisherConfig {
      * through `parseKanonakAddress`, not string-matched.
      */
     render?: string[];
+    /**
+     * When true, this is a LIVE producer origin: it resolves version ranges
+     * server-side and 302-redirects a "latest" request to the pinned source,
+     * rather than publishing an enumerable `index.txt`. A consumer then resolves
+     * by fetching the package URL and following the redirect, instead of
+     * downloading and filtering the index — essential for a snapshot feed whose
+     * version history is unbounded. ABSENT/false means an ordinary static
+     * publisher (resolve via `index.txt`), which is the unchanged default.
+     */
+    resolveByRedirect?: boolean;
 }
 /**
  * The explicit, self-describing config a publisher advertises at

package/dist/repositories/PublisherIndex.d.ts

@@ -1,5 +1,5 @@
 import type { Import } from '@kanonak-protocol/types/document/models/types';
-import { PublisherConfigResolver } from './PublisherConfig.js';
+import { PublisherConfigResolver, type PublisherConfig } from './PublisherConfig.js';
 import type { AuthenticatedFetchFn } from '../auth/index.js';
 export declare class PublisherIndex {
     private readonly indexCache;
@@ -24,6 +24,8 @@ export declare class PublisherIndex {
         version: string;
     }[]>;
     getPackageUrl(publisher: string, packageName: string, version: string): Promise<string>;
+    /** The publisher's `.well-known` config — e.g. to check `resolveByRedirect`. */
+    getConfig(publisher: string): Promise<PublisherConfig>;
     private getPackageVersions;
     /**
      * Resolve the publisher's index, de-duplicating concurrent fetches by

package/dist/repositories/browser.js

@@ -1 +1 @@
-import{b as e,c as r,d as n}from"../chunk-U75VPNYW.js";import{a as o}from"../chunk-4NO7MHS7.js";import"../chunk-SC5M74NM.js";import"../chunk-ORFSMEMM.js";import"../chunk-2ACBWC7K.js";export{n as HttpKanonakDocumentRepository,o as InMemoryKanonakDocumentRepository,e as PublisherConfigResolver,r as PublisherIndex};
+import{b as e,c as r,d as n}from"../chunk-LKBG2MK6.js";import{a as o}from"../chunk-4NO7MHS7.js";import"../chunk-SC5M74NM.js";import"../chunk-TJPQETHV.js";import"../chunk-2ACBWC7K.js";export{n as HttpKanonakDocumentRepository,o as InMemoryKanonakDocumentRepository,e as PublisherConfigResolver,r as PublisherIndex};

package/dist/repositories/index.js

@@ -1 +1 @@
-import{a as b,b as c,c as d,d as e,e as f,f as k,g as l,h as m}from"../chunk-EOMKFFKU.js";import{a as g,b as h,c as i,d as j}from"../chunk-U75VPNYW.js";import{a}from"../chunk-4NO7MHS7.js";import"../chunk-SC5M74NM.js";import"../chunk-ORFSMEMM.js";import"../chunk-2ACBWC7K.js";export{d as CompositeKanonakDocumentRepository,c as DocumentLocation,b as FileSystemKanonakDocumentRepository,j as HttpKanonakDocumentRepository,a as InMemoryKanonakDocumentRepository,k as LocalFirstRepository,h as PublisherConfigResolver,i as PublisherIndex,f as RepositoryFactory,m as buildLocalFirstRepository,l as collectKanonakFiles,g as defaultPublisherConfig,e as getGlobalCachePath};
+import{a as b,b as c,c as d,d as e,e as f,f as k,g as l,h as m}from"../chunk-ATH6636H.js";import{a as g,b as h,c as i,d as j}from"../chunk-LKBG2MK6.js";import{a}from"../chunk-4NO7MHS7.js";import"../chunk-SC5M74NM.js";import"../chunk-TJPQETHV.js";import"../chunk-2ACBWC7K.js";export{d as CompositeKanonakDocumentRepository,c as DocumentLocation,b as FileSystemKanonakDocumentRepository,j as HttpKanonakDocumentRepository,a as InMemoryKanonakDocumentRepository,k as LocalFirstRepository,h as PublisherConfigResolver,i as PublisherIndex,f as RepositoryFactory,m as buildLocalFirstRepository,l as collectKanonakFiles,g as defaultPublisherConfig,e as getGlobalCachePath};

package/dist/resolution/index.js

@@ -1 +1 @@
-import{a as p,b as x}from"../chunk-PEUTCG3B.js";import{a as s}from"../chunk-PEJALHXK.js";import{a as k}from"../chunk-SC5M74NM.js";import{a as o,b as q,c as r,d as t,e as u,f as v,g as w}from"../chunk-N224PFBI.js";import"../chunk-Q4DKP5DO.js";import{b as m,c as n}from"../chunk-64TVBQFR.js";import"../chunk-W6T7MOKY.js";import{a as l}from"../chunk-FUUTGGJS.js";import{a,b,c,d,e,f,g,h,i,j}from"../chunk-2ACBWC7K.js";export{l as KanonakUri,p as KanonakUriBuilder,s as KanonakUrlResolver,m as ResourceResolver,o as ResourceTypeClassifier,n as TypeResolver,k as assertPackageIdentity,c as compareVersions,w as contextTypesOf,f as createVersion,x as findInstancesByType,r as formatKanonakAddress,e as formatVersion,h as isCompatibleVersion,i as isMajorCompatible,q as parseKanonakAddress,g as parseVersionString,j as pickHighestDocument,u as propertiesInScope,v as resolvePropertyStep,t as subjectUri,a as versionOperatorFromChar,b as versionOperatorToChar,d as versionsEqual};
+import{a as p,b as x}from"../chunk-PEUTCG3B.js";import{a as s}from"../chunk-PEJALHXK.js";import{a as k}from"../chunk-SC5M74NM.js";import{a as o,b as q,c as r,d as t,e as u,f as v,g as w}from"../chunk-BGQKZBNE.js";import"../chunk-CRKSKIAL.js";import{b as m,c as n}from"../chunk-IOMNZBK4.js";import"../chunk-W6T7MOKY.js";import{a as l}from"../chunk-FUUTGGJS.js";import{a,b,c,d,e,f,g,h,i,j}from"../chunk-2ACBWC7K.js";export{l as KanonakUri,p as KanonakUriBuilder,s as KanonakUrlResolver,m as ResourceResolver,o as ResourceTypeClassifier,n as TypeResolver,k as assertPackageIdentity,c as compareVersions,w as contextTypesOf,f as createVersion,x as findInstancesByType,r as formatKanonakAddress,e as formatVersion,h as isCompatibleVersion,i as isMajorCompatible,q as parseKanonakAddress,g as parseVersionString,j as pickHighestDocument,u as propertiesInScope,v as resolvePropertyStep,t as subjectUri,a as versionOperatorFromChar,b as versionOperatorToChar,d as versionsEqual};

package/dist/search/index.js

@@ -1,4 +1,4 @@
-import{a as g}from"../chunk-C5NKFT7W.js";import"../chunk-QHABFCRC.js";import"../chunk-4NO7MHS7.js";import"../chunk-PEUTCG3B.js";import"../chunk-PEJALHXK.js";import"../chunk-SC5M74NM.js";import"../chunk-SHDHMKMJ.js";import"../chunk-PODBS4IU.js";import"../chunk-ORFSMEMM.js";import{d as m,g as S}from"../chunk-N224PFBI.js";import{a as p,f as E}from"../chunk-Q4DKP5DO.js";import"../chunk-64TVBQFR.js";import{c as v}from"../chunk-W6T7MOKY.js";import"../chunk-FUUTGGJS.js";import{c as x}from"../chunk-2ACBWC7K.js";import{homedir as P}from"os";import{join as d}from"path";import{existsSync as M,mkdirSync as D,readFileSync as j,writeFileSync as O}from"fs";import{createHash as C}from"crypto";import{pathToFileURL as B}from"url";var h="Xenova/all-MiniLM-L6-v2",w="q8",b=32;async function F(r){let{pipeline:e,env:t}=r.transformers;t.cacheDir=r.modelCacheDir??d(P(),".kanonak","models");let n=await e("feature-extraction",h,{dtype:w});return async s=>(await n(s,{pooling:"mean",normalize:!0})).tolist()}async function z(r){let e=d(r,"node_modules","@huggingface","transformers"),t=JSON.parse(j(d(e,"package.json"),"utf-8")),n=I(t);if(!n)throw new Error(`@huggingface/transformers at ${e} exposes no resolvable ESM entry.`);let s=await import(B(d(e,n)).href);return typeof s.pipeline=="function"?s:s.default}function I(r){let e=r.exports,t=n=>typeof n=="string"?n:n?.default;return typeof e=="string"?e:t(e?.node?.import)??t(e?.import)??t(e?.default)??r.module??r.main}var y=null;async function U(){return y||(y=(async()=>{let r;try{r=await import("@huggingface/transformers")}catch(e){throw new Error(`Semantic search requires the embedding runtime, which is an optional dependency.
+import{a as g}from"../chunk-MCU5IAMS.js";import"../chunk-QHABFCRC.js";import"../chunk-4NO7MHS7.js";import"../chunk-PEUTCG3B.js";import"../chunk-PEJALHXK.js";import"../chunk-SC5M74NM.js";import"../chunk-SHDHMKMJ.js";import"../chunk-G2DKKSZ4.js";import"../chunk-TJPQETHV.js";import{d as m,g as S}from"../chunk-BGQKZBNE.js";import{a as p,f as E}from"../chunk-CRKSKIAL.js";import"../chunk-IOMNZBK4.js";import{c as v}from"../chunk-W6T7MOKY.js";import"../chunk-FUUTGGJS.js";import{c as x}from"../chunk-2ACBWC7K.js";import{homedir as P}from"os";import{join as d}from"path";import{existsSync as M,mkdirSync as D,readFileSync as j,writeFileSync as O}from"fs";import{createHash as C}from"crypto";import{pathToFileURL as B}from"url";var h="Xenova/all-MiniLM-L6-v2",w="q8",b=32;async function F(r){let{pipeline:e,env:t}=r.transformers;t.cacheDir=r.modelCacheDir??d(P(),".kanonak","models");let n=await e("feature-extraction",h,{dtype:w});return async s=>(await n(s,{pooling:"mean",normalize:!0})).tolist()}async function z(r){let e=d(r,"node_modules","@huggingface","transformers"),t=JSON.parse(j(d(e,"package.json"),"utf-8")),n=I(t);if(!n)throw new Error(`@huggingface/transformers at ${e} exposes no resolvable ESM entry.`);let s=await import(B(d(e,n)).href);return typeof s.pipeline=="function"?s:s.default}function I(r){let e=r.exports,t=n=>typeof n=="string"?n:n?.default;return typeof e=="string"?e:t(e?.node?.import)??t(e?.import)??t(e?.default)??r.module??r.main}var y=null;async function U(){return y||(y=(async()=>{let r;try{r=await import("@huggingface/transformers")}catch(e){throw new Error(`Semantic search requires the embedding runtime, which is an optional dependency.
 Install it with:
   npm install @huggingface/transformers
 (underlying import error: ${e.message})`)}return F({transformers:r})})()),y}function H(r,e){let t=0;for(let n=0;n<r.length;n++)t+=r[n]*e[n];return t}function R(r,e){return e?r.version?e.version?x(r.version,e.version)>0:!0:!1:!0}function K(r,e){let t=g(r,e),n=[t.label],s=S(e);if(s.length>0){let i=E(r,s[0]),a=i?g(r,i).label:s[0].name;a&&n.push(`\u2014 a ${a}.`)}return t.summary&&n.push(t.summary),n.join(" ")}function q(r){let e=new Map;for(let t of r){if(!(t instanceof v))continue;let n=m(t);if(!n)continue;let s=p(n),i=e.get(s);(!i||R(n,m(i)))&&e.set(s,t)}return[...e.values()].sort((t,n)=>{let s=m(t)?p(m(t)):t.name,i=m(n)?p(m(n)):n.name;return s.localeCompare(i)})}var k=class{entries=[];embedder;constructor(e={}){this.embedder=e.embedder}resolveEmbedder(){return this.embedder?Promise.resolve(this.embedder):U()}get size(){return this.entries.length}async build(e,t={}){let n=q(e);if(t.include&&(n=n.filter(t.include)),n.length===0)return this.entries=[],{size:0,cached:!1};let s=n.map(o=>K(e,o)),i=t.cacheDir,a;if(i){let o=C("sha256").update(h+"|"+w+`

package/dist/server/assembleModel.d.ts

@@ -1,5 +1,6 @@
 import type { Kanonak } from '../kanonaks/index.js';
 import type { LookRenderer } from '../look/index.js';
+import type { IPackageProducer } from '../producer/index.js';
 import type { ServerModel } from './types.js';
 /**
  * Build the route-facing indexes for a {@link ServerModel} from an already-built
@@ -18,4 +19,5 @@ export declare function assembleServerModel(params: {
     lookRenderer: LookRenderer;
     localNamespaces: Set<string>;
     rawByNsKey: Map<string, string>;
+    producers?: readonly IPackageProducer[];
 }): ServerModel;

package/dist/server/index.js

@@ -1,3 +1,3 @@
-import{j as O}from"../chunk-C5NKFT7W.js";import"../chunk-QHABFCRC.js";import{a as z,d as j,f as Z,g as V}from"../chunk-EOMKFFKU.js";import{a as Q,b as X,c as F,d as I}from"../chunk-U75VPNYW.js";import{a as J}from"../chunk-4NO7MHS7.js";import"../chunk-PEUTCG3B.js";import{a as te}from"../chunk-PEJALHXK.js";import"../chunk-SC5M74NM.js";import"../chunk-SHDHMKMJ.js";import{f as N}from"../chunk-PODBS4IU.js";import{a as K}from"../chunk-ORFSMEMM.js";import{b as L}from"../chunk-N224PFBI.js";import"../chunk-Q4DKP5DO.js";import"../chunk-64TVBQFR.js";import{c as ee}from"../chunk-W6T7MOKY.js";import"../chunk-FUUTGGJS.js";import{c as C,g as Y}from"../chunk-2ACBWC7K.js";import{readFileSync as ce,existsSync as le,readdirSync as pe,writeFileSync as ue,mkdirSync as de}from"fs";import{join as W}from"path";function re(a){let e=a.metadata?.namespace_;return e?`${e.publisher}/${e.package_}`:void 0}async function A(a,e){let r=new Set,t=[...a];for(;t.length>0;){let n=t.shift(),u=re(n);if(!u||r.has(u))continue;r.add(u);let d=n.metadata?.imports;if(d)for(let[i,g]of Object.entries(d))for(let f of g)try{let p=await e.getHighestCompatibleVersionAsync(i,f);p&&t.push(p)}catch{}}return r}var D=class{constructor(e,r){this.inner=e;this.scope=r}inner;scope;async getAllDocumentsAsync(){return(await this.inner.getAllDocumentsAsync()).filter(r=>{let t=re(r);return t!==void 0&&this.scope.has(t)})}getDocumentAsync(e){return this.inner.getDocumentAsync(e)}getDocumentsByNamespaceAsync(e,r){return this.inner.getDocumentsByNamespaceAsync(e,r)}getHighestCompatibleVersionAsync(e,r){return this.inner.getHighestCompatibleVersionAsync(e,r)}saveDocumentAsync(e,r){return this.inner.saveDocumentAsync(e,r)}deleteDocumentAsync(e){return this.inner.deleteDocumentAsync(e)}clearNamespaceAsync(e,r){return this.inner.clearNamespaceAsync(e,r)}getAllDocumentReferencesAsync(){return this.inner.getAllDocumentReferencesAsync()}getDocumentContentAsync(e){return this.inner.getDocumentContentAsync(e)}getDocumentUriAsync(e){return this.inner.getDocumentUriAsync(e)}};var ne=[{publisher:"kanonak.org",package_:"core-kanonak"},{publisher:"kanonak.org",package_:"site"},{publisher:"kanonak.org",package_:"link"},{publisher:"kanonak.org",package_:"look-tokens"},{publisher:"kanonak.org",package_:"look-styles"},{publisher:"kanonak.org",package_:"look"},{publisher:"kanonak.org",package_:"universal-look"}];function M(a){let e=a?.render;if(e&&e.length>0){let r=[];for(let t of e)try{let n=L(t);n.kind==="package"?r.push({publisher:n.publisher,package_:n.package_}):n.kind==="resource"&&r.push({publisher:n.uri.publisher,package_:n.uri.package_})}catch{}if(r.length>0)return r}return ne}function B(a){return`${a.publisher}/${a.package_}`}function E(a){let{publisher:e,availablePublishers:r,catalog:t,lookRenderer:n,localNamespaces:u,rawByNsKey:d}=a,i=new Map,g=new Map,f=new Map,p=new Set;for(let o of t){if(!(o instanceof ee))continue;let m=o.namespace||"";if(!u.has(m))continue;i.set(`${m}/${o.name}`,o);let k=m.split("/")[1]??"",[v,$]=k.split("@");if(!v||!$)continue;let c=Y($);c&&(p.has(k)||(p.add(k),g.has(v)||g.set(v,[]),g.get(v).push({verStr:$,version:c})),o.name===v&&f.set(k,o))}for(let o of g.values())o.sort((m,k)=>C(k.version,m.version));return{publisher:e,availablePublishers:r,catalog:t,lookRenderer:n,localNamespaces:u,rawByNsKey:d,bySubject:i,pkgVersions:g,pkgSelfByVer:f}}async function H(a,e={}){let r=new K,t=new J(r),n=[],u=[];for(let c of V(a)){let R;try{R=ce(c,"utf-8")}catch{continue}let b;try{b=r.parse(R).metadata?.namespace_}catch{continue}if(!b?.version)continue;let x=b.version;u.push({publisher:b.publisher,package_:b.package_,verStr:`${x.major}.${x.minor}.${x.patch}`,version:x,source:R})}u.sort((c,R)=>C(R.version,c.version));for(let c of u)await t.saveDocumentAsync(r.parse(c.source),`${c.publisher}/${c.package_}@${c.verStr}`),n.push({publisher:c.publisher,package_:c.package_,verStr:c.verStr,source:c.source});let d=[...new Set(n.map(c=>c.publisher))].sort(),i=e.publisher;if(i){if(!d.includes(i))throw new Error(`Publisher "${i}" not found in workspace. Available: ${d.join(", ")||"(none)"}`)}else if(d.length===1)i=d[0];else throw d.length===0?new Error(`No Kanonak packages found under ${a}`):new Error(`Workspace has multiple publishers (${d.join(", ")}). Pass --publisher <domain> to choose which one to serve.`);let g=new Set,f=new Map;for(let c of n)c.publisher===i&&(g.add(`${c.publisher}/${c.package_}@${c.verStr}`),f.set(`${c.package_}@${c.verStr}`,c.source));let p=new z(j(),!0,r),o=e.repository??new Z(t,p,new I(e.httpCache?{getFromCache:e.httpCache.getFromCache,onFetch:e.httpCache.onFetch}:void 0)),m=M(void 0);if(!e.repository){let c=j(),R=s=>{let h=W(c,s);return le(h)?new Set(pe(h).filter(y=>y.endsWith(".kan.yml")).map(y=>y.split("@")[0])):new Set},b=(s,h)=>n.some(y=>y.publisher===s&&y.package_===h),x=new F,l=new Map;for(let s of m)if(l.has(s.publisher)||l.set(s.publisher,R(s.publisher)),!(l.get(s.publisher).has(s.package_)||b(s.publisher,s.package_)))try{let h=await x.getHighestVersion(s.publisher,s.package_);if(!h)continue;let y=await x.getPackageUrl(s.publisher,s.package_,h),P=await fetch(y);if(!P.ok)continue;let ie=await P.text(),G=W(c,s.publisher);de(G,{recursive:!0}),ue(W(G,`${s.package_}@${h}.kan.yml`),ie,"utf-8")}catch{}}let k=o;if(!e.repository){let c=(await t.getAllDocumentsAsync()).filter(b=>b.metadata.namespace_?.publisher===i),R=await A(c,o);for(let b of m)R.add(B(b));k=new D(o,R)}let v=await new N(r).parseKanonaks(k),$=new O(v);return E({publisher:i,availablePublishers:d,catalog:v,lookRenderer:$,localNamespaces:g,rawByNsKey:f})}import{existsSync as me,readFileSync as ge,writeFileSync as fe,mkdirSync as he}from"fs";import{join as oe}from"path";async function q(a,e={}){let r=new K,t=L(a),n=t.kind==="resource"?t.uri.publisher:t.publisher,u=e.cacheRoot??j(),d=(l,s,h)=>oe(u,l,`${s}@${h}.kan.yml`),i=new I({getFromCache:(l,s,h)=>{let y=d(l,s,h);return me(y)?ge(y,"utf-8"):null},onFetch:(l,s,h,y)=>{let P=oe(u,l);he(P,{recursive:!0}),fe(d(l,s,h),y,"utf-8")},...e.fetchFn?{fetchFn:e.fetchFn}:{}}),g=new F(e.fetchFn?{fetchFn:e.fetchFn}:void 0),f;if(t.kind==="resource"){let l=t.uri.version;f=[l?{package_:t.uri.package_,version:`${l.major}.${l.minor}.${l.patch}`}:{package_:t.uri.package_}]}else if(t.kind==="package"){let l=t.version;f=[l?{package_:t.package_,version:`${l.major}.${l.minor}.${l.patch}`}:{package_:t.package_}]}else f=(await g.listLatestPackages(n)).map(s=>({package_:s.packageName}));let p=async(l,s,h)=>{try{let y=h?r.buildImport(s,"=",h,l):r.buildImport(s,"*","0.0.0",l);return await i.getHighestCompatibleVersionAsync(l,y)}catch{return null}},o=[];for(let l of f){let s=await p(n,l.package_,l.version);s&&o.push(s)}if(o.length===0)throw new Error(`Could not fetch any package for address "${a}" from publisher "${n}".`);let m=await new X().getConfig(n).catch(()=>{}),k=[];for(let l of M(m)){let s=await p(l.publisher,l.package_,void 0);s&&k.push(s)}let v=await A([...o,...k],i),$=new D(i,v),c=await new N(r).parseKanonaks($),R=new O(c),b=new Set,x=new Map;for(let l of await i.getAllDocumentsAsync()){let s=l.metadata.namespace_;if(!s||s.publisher!==n)continue;let h=`${s.version.major}.${s.version.minor}.${s.version.patch}`,y=`${s.publisher}/${s.package_}@${h}`;b.add(y);let P=await i.getDocumentContentAsync(y);P!==null&&x.set(`${s.package_}@${h}`,P)}return E({publisher:n,availablePublishers:[n],catalog:c,lookRenderer:R,localNamespaces:b,rawByNsKey:x})}var w={".html":"text/html; charset=utf-8",".css":"text/css; charset=utf-8",".svg":"image/svg+xml",".md":"text/markdown; charset=utf-8",".kan.yml":"application/yaml; charset=utf-8",".txt":"text/plain; charset=utf-8",".json":"application/json; charset=utf-8"},S=(a,e,r,t)=>({status:a,headers:{"Content-Type":e,...t||{}},body:r}),_=a=>S(404,w[".html"],`<!doctype html><meta charset=utf-8><title>404</title><h1>404</h1><p>Not found: ${a}</p>`),ke=a=>({status:301,headers:{Location:a},body:""});function se(a,e,r){let t=a.pkgVersions.get(e);if(!t||t.length===0)return null;switch(r.kind){case"any":return t[0].verStr;case"major-pin":return t.find(n=>n.version.major===r.major)?.verStr??null;case"minor-pin":return t.find(n=>n.version.major===r.major&&n.version.minor===r.minor)?.verStr??null;case"exact":return t.find(n=>n.version.major===r.major&&n.version.minor===r.minor&&n.version.patch===r.patch)?.verStr??null;default:return null}}async function T(a,e,r=""){let{lookRenderer:t,publisher:n}=a;if(e==="/.well-known/kanonak.json")return S(200,w[".json"],JSON.stringify(Q(n),null,2));if(e==="/index.txt"){let o=[...a.localNamespaces].map(m=>m.split("/")[1].replace("@","/")).sort();return S(200,w[".txt"],o.join(`
+import{j as E}from"../chunk-MCU5IAMS.js";import"../chunk-QHABFCRC.js";import{a as Z,d as A,f as te,g as N}from"../chunk-ATH6636H.js";import{a as ee,b as re,c as V,d as I}from"../chunk-LKBG2MK6.js";import{a as X}from"../chunk-4NO7MHS7.js";import"../chunk-PEUTCG3B.js";import{a as oe}from"../chunk-PEJALHXK.js";import"../chunk-SC5M74NM.js";import"../chunk-SHDHMKMJ.js";import{f as L}from"../chunk-G2DKKSZ4.js";import{a as D}from"../chunk-TJPQETHV.js";import{b as O}from"../chunk-BGQKZBNE.js";import"../chunk-CRKSKIAL.js";import"../chunk-IOMNZBK4.js";import{c as ne}from"../chunk-W6T7MOKY.js";import"../chunk-FUUTGGJS.js";import{c as F,e as z,f as K,g as Q}from"../chunk-2ACBWC7K.js";import{readFileSync as ue,existsSync as de,readdirSync as me,writeFileSync as ge,mkdirSync as fe}from"fs";import{join as q}from"path";function se(n){let e=n.metadata?.namespace_;return e?`${e.publisher}/${e.package_}`:void 0}async function M(n,e){let t=new Set,r=[...n];for(;r.length>0;){let o=r.shift(),a=se(o);if(!a||t.has(a))continue;t.add(a);let d=o.metadata?.imports;if(d)for(let[c,f]of Object.entries(d))for(let g of f)try{let l=await e.getHighestCompatibleVersionAsync(c,g);l&&r.push(l)}catch{}}return t}var j=class{constructor(e,t){this.inner=e;this.scope=t}inner;scope;async getAllDocumentsAsync(){return(await this.inner.getAllDocumentsAsync()).filter(t=>{let r=se(t);return r!==void 0&&this.scope.has(r)})}getDocumentAsync(e){return this.inner.getDocumentAsync(e)}getDocumentsByNamespaceAsync(e,t){return this.inner.getDocumentsByNamespaceAsync(e,t)}getHighestCompatibleVersionAsync(e,t){return this.inner.getHighestCompatibleVersionAsync(e,t)}saveDocumentAsync(e,t){return this.inner.saveDocumentAsync(e,t)}deleteDocumentAsync(e){return this.inner.deleteDocumentAsync(e)}clearNamespaceAsync(e,t){return this.inner.clearNamespaceAsync(e,t)}getAllDocumentReferencesAsync(){return this.inner.getAllDocumentReferencesAsync()}getDocumentContentAsync(e){return this.inner.getDocumentContentAsync(e)}getDocumentUriAsync(e){return this.inner.getDocumentUriAsync(e)}};var ie=[{publisher:"kanonak.org",package_:"core-kanonak"},{publisher:"kanonak.org",package_:"site"},{publisher:"kanonak.org",package_:"link"},{publisher:"kanonak.org",package_:"look-tokens"},{publisher:"kanonak.org",package_:"look-styles"},{publisher:"kanonak.org",package_:"look"},{publisher:"kanonak.org",package_:"universal-look"}];function C(n){let e=n?.render;if(e&&e.length>0){let t=[];for(let r of e)try{let o=O(r);o.kind==="package"?t.push({publisher:o.publisher,package_:o.package_}):o.kind==="resource"&&t.push({publisher:o.uri.publisher,package_:o.uri.package_})}catch{}if(t.length>0)return t}return ie}function H(n){return`${n.publisher}/${n.package_}`}function B(n){let{publisher:e,availablePublishers:t,catalog:r,lookRenderer:o,localNamespaces:a,rawByNsKey:d,producers:c}=n,f=new Map,g=new Map,l=new Map,i=new Set;for(let m of r){if(!(m instanceof ne))continue;let y=m.namespace||"";if(!a.has(y))continue;f.set(`${y}/${m.name}`,m);let v=y.split("/")[1]??"",[x,p]=v.split("@");if(!x||!p)continue;let b=Q(p);b&&(i.has(v)||(i.add(v),g.has(x)||g.set(x,[]),g.get(x).push({verStr:p,version:b})),m.name===x&&l.set(v,m))}for(let m of g.values())m.sort((y,v)=>F(v.version,y.version));return{publisher:e,availablePublishers:t,catalog:r,lookRenderer:o,localNamespaces:a,rawByNsKey:d,bySubject:f,pkgVersions:g,pkgSelfByVer:l,...c?{producers:c}:{}}}async function T(n,e={}){let t=new D,r=new X(t),o=[],a=[];for(let p of N(n)){let b;try{b=ue(p,"utf-8")}catch{continue}let S;try{S=t.parse(b).metadata?.namespace_}catch{continue}if(!S?.version)continue;let $=S.version;a.push({publisher:S.publisher,package_:S.package_,verStr:`${$.major}.${$.minor}.${$.patch}`,version:$,source:b})}a.sort((p,b)=>F(b.version,p.version));for(let p of a)await r.saveDocumentAsync(t.parse(p.source),`${p.publisher}/${p.package_}@${p.verStr}`),o.push({publisher:p.publisher,package_:p.package_,verStr:p.verStr,source:p.source});let d=[...new Set(o.map(p=>p.publisher))].sort(),c=e.publisher;if(c){if(!d.includes(c))throw new Error(`Publisher "${c}" not found in workspace. Available: ${d.join(", ")||"(none)"}`)}else if(d.length===1)c=d[0];else throw d.length===0?new Error(`No Kanonak packages found under ${n}`):new Error(`Workspace has multiple publishers (${d.join(", ")}). Pass --publisher <domain> to choose which one to serve.`);let f=new Set,g=new Map;for(let p of o)p.publisher===c&&(f.add(`${p.publisher}/${p.package_}@${p.verStr}`),g.set(`${p.package_}@${p.verStr}`,p.source));let l=new Z(A(),!0,t),i=e.repository??new te(r,l,new I(e.httpCache?{getFromCache:e.httpCache.getFromCache,onFetch:e.httpCache.onFetch}:void 0)),m=C(void 0);if(!e.repository){let p=A(),b=s=>{let h=q(p,s);return de(h)?new Set(me(h).filter(k=>k.endsWith(".kan.yml")).map(k=>k.split("@")[0])):new Set},S=(s,h)=>o.some(k=>k.publisher===s&&k.package_===h),$=new V,u=new Map;for(let s of m)if(u.has(s.publisher)||u.set(s.publisher,b(s.publisher)),!(u.get(s.publisher).has(s.package_)||S(s.publisher,s.package_)))try{let h=await $.getHighestVersion(s.publisher,s.package_);if(!h)continue;let k=await $.getPackageUrl(s.publisher,s.package_,h),_=await fetch(k);if(!_.ok)continue;let le=await _.text(),J=q(p,s.publisher);fe(J,{recursive:!0}),ge(q(J,`${s.package_}@${h}.kan.yml`),le,"utf-8")}catch{}}let y=i;if(!e.repository){let p=(await r.getAllDocumentsAsync()).filter(S=>S.metadata.namespace_?.publisher===c),b=await M(p,i);for(let S of m)b.add(H(S));y=new j(i,b)}let v=await new L(t).parseKanonaks(y),x=new E(v);return B({publisher:c,availablePublishers:d,catalog:v,lookRenderer:x,localNamespaces:f,rawByNsKey:g})}import{existsSync as he,readFileSync as ke,writeFileSync as ye,mkdirSync as ve}from"fs";import{join as ae}from"path";async function U(n,e={}){let t=new D,r=O(n),o=r.kind==="resource"?r.uri.publisher:r.publisher,a=e.cacheRoot??A(),d=(u,s,h)=>ae(a,u,`${s}@${h}.kan.yml`),c=new I({getFromCache:(u,s,h)=>{let k=d(u,s,h);return he(k)?ke(k,"utf-8"):null},onFetch:(u,s,h,k)=>{let _=ae(a,u);ve(_,{recursive:!0}),ye(d(u,s,h),k,"utf-8")},...e.fetchFn?{fetchFn:e.fetchFn}:{}}),f=new V(e.fetchFn?{fetchFn:e.fetchFn}:void 0),g;if(r.kind==="resource"){let u=r.uri.version;g=[u?{package_:r.uri.package_,version:`${u.major}.${u.minor}.${u.patch}`}:{package_:r.uri.package_}]}else if(r.kind==="package"){let u=r.version;g=[u?{package_:r.package_,version:`${u.major}.${u.minor}.${u.patch}`}:{package_:r.package_}]}else g=(await f.listLatestPackages(o)).map(s=>({package_:s.packageName}));let l=async(u,s,h)=>{try{let k=h?t.buildImport(s,"=",h,u):t.buildImport(s,"*","0.0.0",u);return await c.getHighestCompatibleVersionAsync(u,k)}catch{return null}},i=[];for(let u of g){let s=await l(o,u.package_,u.version);s&&i.push(s)}if(i.length===0)throw new Error(`Could not fetch any package for address "${n}" from publisher "${o}".`);let m=await new re().getConfig(o).catch(()=>{}),y=[];for(let u of C(m)){let s=await l(u.publisher,u.package_,void 0);s&&y.push(s)}let v=await M([...i,...y],c),x=new j(c,v),p=await new L(t).parseKanonaks(x),b=new E(p),S=new Set,$=new Map;for(let u of await c.getAllDocumentsAsync()){let s=u.metadata.namespace_;if(!s||s.publisher!==o)continue;let h=`${s.version.major}.${s.version.minor}.${s.version.patch}`,k=`${s.publisher}/${s.package_}@${h}`;S.add(k);let _=await c.getDocumentContentAsync(k);_!==null&&$.set(`${s.package_}@${h}`,_)}return B({publisher:o,availablePublishers:[o],catalog:p,lookRenderer:b,localNamespaces:S,rawByNsKey:$})}import{VersionOperator as W}from"@kanonak-protocol/types/document/models/enums";var w={".html":"text/html; charset=utf-8",".css":"text/css; charset=utf-8",".svg":"image/svg+xml",".md":"text/markdown; charset=utf-8",".kan.yml":"application/yaml; charset=utf-8",".txt":"text/plain; charset=utf-8",".json":"application/json; charset=utf-8"},R=(n,e,t,r)=>({status:n,headers:{"Content-Type":e,...r||{}},body:t}),P=n=>R(404,w[".html"],`<!doctype html><meta charset=utf-8><title>404</title><h1>404</h1><p>Not found: ${n}</p>`),be=n=>({status:301,headers:{Location:n},body:""}),Se=n=>({status:302,headers:{Location:n},body:""});function we(n){switch(n.kind){case"exact":return{operator:W.Exact,version:K(n.major,n.minor,n.patch)};case"minor-pin":return{operator:W.Compatible,version:K(n.major,n.minor,0)};case"major-pin":return{operator:W.Major,version:K(n.major,0,0)};default:return{operator:W.Any,version:K(0,0,0)}}}async function Re(n,e,t,r){if(!r)return null;let o=n.producers?.find(f=>f.canProduce(n.publisher,e));if(!o)return null;let a=await o.resolveVersion(n.publisher,e,we(t));if(!a)return null;let d=z(a);if(t.kind!=="exact")return Se(`/${e}/${d}.kan.yml`);let{source:c}=await o.produce(n.publisher,e,a);return R(200,w[".kan.yml"],c)}function ce(n,e,t){let r=n.pkgVersions.get(e);if(!r||r.length===0)return null;switch(t.kind){case"any":return r[0].verStr;case"major-pin":return r.find(o=>o.version.major===t.major)?.verStr??null;case"minor-pin":return r.find(o=>o.version.major===t.major&&o.version.minor===t.minor)?.verStr??null;case"exact":return r.find(o=>o.version.major===t.major&&o.version.minor===t.minor&&o.version.patch===t.patch)?.verStr??null;default:return null}}async function G(n,e,t=""){let{lookRenderer:r,publisher:o}=n;if(e==="/.well-known/kanonak.json"){let i=ee(o);return n.producers&&n.producers.length>0&&(i.resolveByRedirect=!0),R(200,w[".json"],JSON.stringify(i,null,2))}if(e==="/index.txt"){let i=[...n.localNamespaces].map(m=>m.split("/")[1].replace("@","/")).sort();return R(200,w[".txt"],i.join(`
 `)+`
-`)}if(e==="/"||e==="/index.html"||e==="/index.css"){let o=t.publisherSubject(n);return e==="/index.css"?S(200,w[".css"],t.renderStylesheet(o)):S(200,w[".html"],t.renderDocument(o,{rootIndex:!0}))}let u=".html",d=!1,i=e;for(let o of[".kan.yml",".css",".svg",".md",".html"])if(e.endsWith(o)){u=o,d=!0,i=e.slice(0,-o.length);break}let g=!d&&/application\/yaml|text\/yaml/i.test(r),f=i.endsWith("/");f&&i!=="/"&&(i=i.slice(0,-1));let p=te.parse(i,n);if(!p)return _(e);if(p.kind==="package"){let o=se(a,p.package_,p.versionSpec);if(!o)return _(e);if(u===".kan.yml"||g){let v=a.rawByNsKey.get(`${p.package_}@${o}`);return v!==void 0?S(200,w[".kan.yml"],v):_(e)}let m=a.pkgSelfByVer.get(`${p.package_}@${o}`);if(!m)return _(e);if(u===".css")return S(200,w[".css"],t.renderStylesheet(m));if(!f)return ke(i+"/");let k=p.versionSpec.kind==="any";if(k&&!t.hasDeclaredView(m)){let v=(a.pkgVersions.get(p.package_)||[]).map($=>$.verStr);return S(200,w[".html"],t.renderPackageVersionList(p.package_,v,m))}return S(200,w[".html"],t.renderDocument(m,k?{bareOverview:!0}:void 0))}if(p.kind==="resource"){let o=se(a,p.package_,p.versionSpec);if(!o)return _(e);let m=a.bySubject.get(`${n}/${p.package_}@${o}/${p.name}`);if(!m)return _(e);switch(u){case".css":return S(200,w[".css"],t.renderStylesheet(m));case".svg":return S(200,w[".svg"],await t.renderSvg(m));case".md":{let k=t.renderRawMarkdown(m);return k===void 0?_(e):S(200,w[".md"],k)}default:return S(200,w[".html"],t.renderDocument(m))}}return _(e)}import{readFileSync as ye}from"fs";var U=class{constructor(e={}){this.options=e}options;models=new Map;workspaceIndex;clearCache(){this.models.clear(),this.workspaceIndex=void 0}getWorkspaceIndex(){if(this.workspaceIndex)return this.workspaceIndex;let e=new Set,r=new Set;if(this.options.root!==void 0){let t=new K;for(let n of V(this.options.root))try{let u=t.parse(ye(n,"utf-8")).metadata?.namespace_;if(!u?.version)continue;let d=u.version;e.add(`${u.publisher}/${u.package_}@${d.major}.${d.minor}.${d.patch}`),r.add(`${u.publisher}/${u.package_}`)}catch{}}return this.workspaceIndex={exact:e,pkgs:r},this.workspaceIndex}async modelFor(e,r,t){let n=this.getWorkspaceIndex(),u=this.options.fetchFn?{fetchFn:this.options.fetchFn}:{},d=r?t?n.exact.has(`${e}/${r}@${t}`):n.pkgs.has(`${e}/${r}`):[...n.pkgs].some(o=>o.startsWith(`${e}/`)),i,g;if(d&&this.options.root!==void 0){let o=this.options.root;i=`ws:${e}`,g=()=>H(o,{publisher:e})}else{let o=r?t?`${e}/${r}@${t}`:`${e}/${r}`:e;i=`rm:${o}`,g=()=>q(o,u)}let f=this.models.get(i);if(f)return f;let p=await g();return p.lookRenderer.setLinkMode("open-world"),this.models.set(i,p),p}async handle(e,r=""){let t=e.split("/").filter(Boolean);if(t.length===0)return{status:200,headers:{"Content-Type":"text/html; charset=utf-8"},body:ae()};let n=t[0];if(!n.includes("."))return{status:404,headers:{"Content-Type":"text/html; charset=utf-8"},body:"<!doctype html><meta charset=utf-8><title>404</title><h1>404</h1><p>Expected a publisher domain as the first path segment: <code>/{publisher}/{package}/{version}/{resource}</code></p>"};let u=t.length>=2&&(t[1]==="index.html"||t[1]==="index.css"||t[1]==="index.txt"||t[1]===".well-known"),d=!u&&t.length>=2?t[1]:void 0,i=!u&&t.length>=3&&/^\d+\.\d+\.\d+$/.test(t[2])?t[2]:void 0,g=await this.modelFor(n,d,i),f=e.endsWith("/")&&t.length>1?"/":"",p="/"+t.slice(1).join("/")+f,o=await T(g,p,r);return o.headers.Location?{...o,headers:{...o.headers,Location:`/${n}${o.headers.Location}`}}:o}};function ae(){return'<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Kanonak origin</title></head><body style="font-family:system-ui;max-width:40rem;margin:4rem auto;padding:0 1rem"><h1>Kanonak request-driven origin</h1><p>Open a resource by its address:</p><p><code>/{publisher}/{package}/{version}/{resource}</code></p><p>e.g. <code>/kanonak.org/capabilities/2.0.0/Capability</code></p></body></html>'}export{D as ClosureScopedRepository,U as RequestRouter,ne as UNIVERSAL_RENDER_BASE,A as deriveImportClosure,ae as landingPage,q as loadResourceModel,H as loadServerModel,B as renderRefKey,M as resolveRenderContract,T as route};
+`)}if(e==="/"||e==="/index.html"||e==="/index.css"){let i=r.publisherSubject(o);return e==="/index.css"?R(200,w[".css"],r.renderStylesheet(i)):R(200,w[".html"],r.renderDocument(i,{rootIndex:!0}))}let a=".html",d=!1,c=e;for(let i of[".kan.yml",".css",".svg",".md",".html"])if(e.endsWith(i)){a=i,d=!0,c=e.slice(0,-i.length);break}let f=!d&&/application\/yaml|text\/yaml/i.test(t),g=c.endsWith("/");g&&c!=="/"&&(c=c.slice(0,-1));let l=oe.parse(c,o);if(!l)return P(e);if(l.kind==="package"){let i=ce(n,l.package_,l.versionSpec);if(!i)return await Re(n,l.package_,l.versionSpec,a===".kan.yml"||f)??P(e);if(a===".kan.yml"||f){let v=n.rawByNsKey.get(`${l.package_}@${i}`);return v!==void 0?R(200,w[".kan.yml"],v):P(e)}let m=n.pkgSelfByVer.get(`${l.package_}@${i}`);if(!m)return P(e);if(a===".css")return R(200,w[".css"],r.renderStylesheet(m));if(!g)return be(c+"/");let y=l.versionSpec.kind==="any";if(y&&!r.hasDeclaredView(m)){let v=(n.pkgVersions.get(l.package_)||[]).map(x=>x.verStr);return R(200,w[".html"],r.renderPackageVersionList(l.package_,v,m))}return R(200,w[".html"],r.renderDocument(m,y?{bareOverview:!0}:void 0))}if(l.kind==="resource"){let i=ce(n,l.package_,l.versionSpec);if(!i)return P(e);let m=n.bySubject.get(`${o}/${l.package_}@${i}/${l.name}`);if(!m)return P(e);switch(a){case".css":return R(200,w[".css"],r.renderStylesheet(m));case".svg":return R(200,w[".svg"],await r.renderSvg(m));case".md":{let y=r.renderRawMarkdown(m);return y===void 0?P(e):R(200,w[".md"],y)}default:return R(200,w[".html"],r.renderDocument(m))}}return P(e)}import{readFileSync as xe}from"fs";var Y=class{constructor(e={}){this.options=e}options;models=new Map;workspaceIndex;clearCache(){this.models.clear(),this.workspaceIndex=void 0}getWorkspaceIndex(){if(this.workspaceIndex)return this.workspaceIndex;let e=new Set,t=new Set;if(this.options.root!==void 0){let r=new D;for(let o of N(this.options.root))try{let a=r.parse(xe(o,"utf-8")).metadata?.namespace_;if(!a?.version)continue;let d=a.version;e.add(`${a.publisher}/${a.package_}@${d.major}.${d.minor}.${d.patch}`),t.add(`${a.publisher}/${a.package_}`)}catch{}}return this.workspaceIndex={exact:e,pkgs:t},this.workspaceIndex}async modelFor(e,t,r){let o=this.getWorkspaceIndex(),a=this.options.fetchFn?{fetchFn:this.options.fetchFn}:{},d=t?r?o.exact.has(`${e}/${t}@${r}`):o.pkgs.has(`${e}/${t}`):[...o.pkgs].some(i=>i.startsWith(`${e}/`)),c,f;if(d&&this.options.root!==void 0){let i=this.options.root;c=`ws:${e}`,f=()=>T(i,{publisher:e})}else{let i=t?r?`${e}/${t}@${r}`:`${e}/${t}`:e;c=`rm:${i}`,f=()=>U(i,a)}let g=this.models.get(c);if(g)return g;let l=await f();return l.lookRenderer.setLinkMode("open-world"),this.models.set(c,l),l}async handle(e,t=""){let r=e.split("/").filter(Boolean);if(r.length===0)return{status:200,headers:{"Content-Type":"text/html; charset=utf-8"},body:pe()};let o=r[0];if(!o.includes("."))return{status:404,headers:{"Content-Type":"text/html; charset=utf-8"},body:"<!doctype html><meta charset=utf-8><title>404</title><h1>404</h1><p>Expected a publisher domain as the first path segment: <code>/{publisher}/{package}/{version}/{resource}</code></p>"};let a=r.length>=2&&(r[1]==="index.html"||r[1]==="index.css"||r[1]==="index.txt"||r[1]===".well-known"),d=!a&&r.length>=2?r[1]:void 0,c=!a&&r.length>=3&&/^\d+\.\d+\.\d+$/.test(r[2])?r[2]:void 0,f=await this.modelFor(o,d,c),g=e.endsWith("/")&&r.length>1?"/":"",l="/"+r.slice(1).join("/")+g,i=await G(f,l,t);return i.headers.Location?{...i,headers:{...i.headers,Location:`/${o}${i.headers.Location}`}}:i}};function pe(){return'<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Kanonak origin</title></head><body style="font-family:system-ui;max-width:40rem;margin:4rem auto;padding:0 1rem"><h1>Kanonak request-driven origin</h1><p>Open a resource by its address:</p><p><code>/{publisher}/{package}/{version}/{resource}</code></p><p>e.g. <code>/kanonak.org/capabilities/2.0.0/Capability</code></p></body></html>'}export{j as ClosureScopedRepository,Y as RequestRouter,ie as UNIVERSAL_RENDER_BASE,M as deriveImportClosure,pe as landingPage,U as loadResourceModel,T as loadServerModel,H as renderRefKey,C as resolveRenderContract,G as route};

package/dist/server/types.d.ts

@@ -4,6 +4,7 @@ import type { Kanonak } from '../kanonaks/index.js';
 import { SubjectKanonak } from '../kanonaks/index.js';
 import type { LookRenderer } from '../look/index.js';
 import type { HttpCacheHooks } from '../repositories/index.js';
+import type { IPackageProducer } from '../producer/index.js';
 /** A package version present in the served workspace. */
 export interface PackageVersion {
     /** "major.minor.patch" string form. */
@@ -36,6 +37,14 @@ export interface ServerModel {
     readonly pkgVersions: Map<string, PackageVersion[]>;
     /** `pkg@ver` → the package self-resource subject. */
     readonly pkgSelfByVer: Map<string, SubjectKanonak>;
+    /**
+     * Package producers this origin hosts (optional). When a requested package
+     * is not preloaded but a producer claims it, `route` generates the package
+     * on demand: a range request 302-redirects to the resolved pinned source,
+     * an exact `.kan.yml` request is produced and served. Compose
+     * `EntitlementProducer` here for a gated origin.
+     */
+    readonly producers?: readonly IPackageProducer[];
 }
 /** A routed response. `body` is always a string (HTML/CSS/SVG/MD/YAML/JSON). */
 export interface RouteResponse {

package/dist/transformations/index.js

@@ -1,4 +1,4 @@
-import{b as Y,c as An,d as Sn,e as ce,f as Te,g as O,h as wn,i as X,j as q}from"../chunk-C5NKFT7W.js";import{a as se}from"../chunk-W4LPC6VM.js";import"../chunk-QHABFCRC.js";import"../chunk-4NO7MHS7.js";import"../chunk-6T2XFOMU.js";import"../chunk-PEJALHXK.js";import{a as kn,b as bn,c as hn,d as Dn}from"../chunk-SHDHMKMJ.js";import{f as ie}from"../chunk-PODBS4IU.js";import{a as ae}from"../chunk-ORFSMEMM.js";import{b as L,c as A,f as S}from"../chunk-Q4DKP5DO.js";import"../chunk-64TVBQFR.js";import{b as N,c as D,d as K,g as M,h as P,i as F,j as W,l as H}from"../chunk-W6T7MOKY.js";import"../chunk-FUUTGGJS.js";import{g as oe}from"../chunk-2ACBWC7K.js";var $e="kanonak.org",Ue="document-ast",i=e=>({publisher:$e,package_:Ue,name:e}),m={Document:i("Document"),Block:i("Block"),Inline:i("Inline"),StructuredValue:i("StructuredValue"),Heading:i("Heading"),Paragraph:i("Paragraph"),RawBlock:i("RawBlock"),Text:i("Text"),StructuredMap:i("StructuredMap"),StructuredEntry:i("StructuredEntry"),StructuredList:i("StructuredList"),StringScalar:i("StringScalar"),IntegerScalar:i("IntegerScalar"),EscapeHint:i("EscapeHint"),MediaType:i("MediaType"),metadata:i("metadata"),children:i("children"),level:i("level"),inlines:i("inlines"),text:i("text"),entries:i("entries"),key:i("key"),value:i("value"),escapeHint:i("escapeHint"),items:i("items"),stringValue:i("stringValue"),integerValue:i("integerValue"),rawContent:i("rawContent"),mediaType:i("mediaType"),mimeType:i("mimeType"),ESC_RAW:i("esc-raw"),ESC_YAML_SAFE:i("esc-yaml-safe"),ESC_TOML_STRING:i("esc-toml-string"),ESC_TOML_MULTILINE:i("esc-toml-multiline"),ESC_JSON:i("esc-json"),ESC_DYNAMODB_BOOL:i("esc-dynamodb-bool"),ESC_DYNAMODB_NUMBER:i("esc-dynamodb-number"),ESC_DYNAMODB_NULL:i("esc-dynamodb-null"),TEXT_PLAIN:i("text-plain"),TEXT_MARKDOWN:i("text-markdown"),TEXT_HTML:i("text-html"),TEXT_CSS:i("text-css"),APPLICATION_JSON:i("application-json"),TEXT_YAML:i("text-yaml"),IMAGE_SVG_XML:i("image-svg-xml"),ResourceLink:i("ResourceLink"),target:i("target"),linkLabel:i("linkLabel"),PropertyList:i("PropertyList"),propertyEntries:i("propertyEntries"),PropertyEntry:i("PropertyEntry"),propertyKey:i("propertyKey"),propertyValue:i("propertyValue"),Table:i("Table"),tableColumnLabels:i("tableColumnLabels"),tableRows:i("tableRows"),TableRow:i("TableRow"),tableCells:i("tableCells")};function ue(e,n){return e.publisher===n.publisher&&e.package_===n.package_&&e.name===n.name}var j=class{backendUri="kanonak.org/transformations/markdown-with-frontmatter";render(n,t){let r=xe(n.metadata,t),o=Le(n.children),s=["---",...r,"---","",o].join(`
+import{b as Y,c as An,d as Sn,e as ce,f as Te,g as O,h as wn,i as X,j as q}from"../chunk-MCU5IAMS.js";import{a as se}from"../chunk-F5ANO7MJ.js";import"../chunk-QHABFCRC.js";import"../chunk-4NO7MHS7.js";import"../chunk-GN2XODVC.js";import"../chunk-PEJALHXK.js";import{a as kn,b as bn,c as hn,d as Dn}from"../chunk-SHDHMKMJ.js";import{f as ie}from"../chunk-G2DKKSZ4.js";import{a as ae}from"../chunk-TJPQETHV.js";import{b as L,c as A,f as S}from"../chunk-CRKSKIAL.js";import"../chunk-IOMNZBK4.js";import{b as N,c as D,d as K,g as M,h as P,i as F,j as W,l as H}from"../chunk-W6T7MOKY.js";import"../chunk-FUUTGGJS.js";import{g as oe}from"../chunk-2ACBWC7K.js";var $e="kanonak.org",Ue="document-ast",i=e=>({publisher:$e,package_:Ue,name:e}),m={Document:i("Document"),Block:i("Block"),Inline:i("Inline"),StructuredValue:i("StructuredValue"),Heading:i("Heading"),Paragraph:i("Paragraph"),RawBlock:i("RawBlock"),Text:i("Text"),StructuredMap:i("StructuredMap"),StructuredEntry:i("StructuredEntry"),StructuredList:i("StructuredList"),StringScalar:i("StringScalar"),IntegerScalar:i("IntegerScalar"),EscapeHint:i("EscapeHint"),MediaType:i("MediaType"),metadata:i("metadata"),children:i("children"),level:i("level"),inlines:i("inlines"),text:i("text"),entries:i("entries"),key:i("key"),value:i("value"),escapeHint:i("escapeHint"),items:i("items"),stringValue:i("stringValue"),integerValue:i("integerValue"),rawContent:i("rawContent"),mediaType:i("mediaType"),mimeType:i("mimeType"),ESC_RAW:i("esc-raw"),ESC_YAML_SAFE:i("esc-yaml-safe"),ESC_TOML_STRING:i("esc-toml-string"),ESC_TOML_MULTILINE:i("esc-toml-multiline"),ESC_JSON:i("esc-json"),ESC_DYNAMODB_BOOL:i("esc-dynamodb-bool"),ESC_DYNAMODB_NUMBER:i("esc-dynamodb-number"),ESC_DYNAMODB_NULL:i("esc-dynamodb-null"),TEXT_PLAIN:i("text-plain"),TEXT_MARKDOWN:i("text-markdown"),TEXT_HTML:i("text-html"),TEXT_CSS:i("text-css"),APPLICATION_JSON:i("application-json"),TEXT_YAML:i("text-yaml"),IMAGE_SVG_XML:i("image-svg-xml"),ResourceLink:i("ResourceLink"),target:i("target"),linkLabel:i("linkLabel"),PropertyList:i("PropertyList"),propertyEntries:i("propertyEntries"),PropertyEntry:i("PropertyEntry"),propertyKey:i("propertyKey"),propertyValue:i("propertyValue"),Table:i("Table"),tableColumnLabels:i("tableColumnLabels"),tableRows:i("tableRows"),TableRow:i("TableRow"),tableCells:i("tableCells")};function ue(e,n){return e.publisher===n.publisher&&e.package_===n.package_&&e.name===n.name}var j=class{backendUri="kanonak.org/transformations/markdown-with-frontmatter";render(n,t){let r=xe(n.metadata,t),o=Le(n.children),s=["---",...r,"---","",o].join(`
 `);return t?.trailingNewline&&(s.endsWith(`
 `)||(s+=`
 `)),s}};function xe(e,n){if(!e)return[];let t=new Map;for(let c of e.entries)t.set(I(c.key),c);let r=new Map;if(n?.metadataRenames)for(let[c,u]of n.metadataRenames)r.set(I(c),u);let a=(n?.metadataKeys??e.entries.map(c=>c.key)).map(I),s=[];for(let c of a){let u=t.get(c);if(!u)continue;let f=r.get(c),l=I(f??c),d=me(u.value,u.escapeHint);d!==void 0&&s.push(`${l}: ${d}`)}return s}function I(e){let n=e.lastIndexOf(".");return n===-1?e:e.substring(n+1)||e}function me(e,n){switch(e.kind){case"StringScalar":return Ve(e.stringValue,n);case"IntegerScalar":return String(e.integerValue);case"StructuredList":{let t=[];for(let r of e.items){let o=me(r,n);o!==void 0&&t.push(o)}return t.join(", ")}case"StructuredMap":return;default:return}}function Ve(e,n){return!n||ue(n,m.ESC_RAW)?e:ue(n,m.ESC_YAML_SAFE)?ve(e):e}function ve(e){return e.includes(`

package/dist/uri-helpers/UriHelpers.d.ts

@@ -86,6 +86,24 @@ export declare function findSubjectsByType(kanonaks: Kanonak[], target: EntityUr
  *     bare-name references in single-version workspaces, etc).
  */
 export declare function findSubjectByUri(kanonaks: Kanonak[], uri: KanonakUri): SubjectKanonak | undefined;
+/**
+ * Every version of a subject present in the catalog, matched by canonical
+ * URI (publisher/package/name, version-agnostic), HIGHEST VERSION FIRST.
+ *
+ * This is THE single place the "newest wins" multi-version rule lives, so
+ * every cascade that takes the first match (semanticSvg, tokens, the type
+ * chain, path/traversal resolution) resolves to the newest version's
+ * open-world augmentation — an archived older version can never shadow the
+ * current one — and all environments (serve, publish, validate, the VS Code
+ * server, the transformation engine) render identically without each
+ * reimplementing (or forgetting) the load-order sort. Do not duplicate this:
+ * import it.
+ */
+export declare function findAllResourcesByCanonicalUri(catalog: Kanonak[], uri: {
+    publisher: string;
+    package_: string;
+    name: string;
+}): SubjectKanonak[];
 /**
  * Read a datatype property value (string, number, boolean) off a defined
  * kanonak, by property URI. Returns `undefined` when the property is not