@moonan_ai/sdk 0.0.4-alpha2 → 0.0.5-alpha1

package/README.md

@@ -59,10 +59,21 @@ export default defineFacet((api) => {
 ## 约定
 
 - 契约在两端**各写一份**：Chord 认指纹（名字、版本、成员、类型住在哪个宿主），不认模块实例。
-- 注册表贡献（`Routes`、`Panels`）必须来自 `{ lifetime: "host" }` 的对象。
+- 注册表贡献（`Routes`、`Panels`、`DataCodecs`、`ModelProviders`）必须来自 `{ lifetime: "host" }` 的对象。
+- 需要统一导出/导入的数据放 `DataStore`，并注册 `DataCodecs`；需要给其他插件用模型时注册 `ModelProviders`。
 - 服务端宿主名固定为 `"moonan"`；写别的名字，`api.serve` 会当场拒绝。
 - 浏览器切面是**单个 ESM 文件**：浏览器没有模块 hook，重载只换入口。
 
+## 统一数据与模型
+
+```js
+import { DataCodecs, DataStore, ModelProviders } from "@moonan_ai/sdk";
+```
+
+- `DataStore` 是平台唯一的统一数据文件（local、host-lifetime）；`read` 返回 `{ value, version }`，`update` 是串行读改写，`exportAll`/`importAll` 由平台 HTTP 表面调用。
+- `DataCodecs` 是插件贡献的导出/导入 codec 注册表；没有 codec 的 namespace 不会进入统一导出。
+- `ModelProviders` 是服务端模型提供商注册表；`list()` 是 key-free 目录，`runtime()` 是 server-only 运行时，不能给浏览器。
+
 完整写法：<https://github.com/Pheobe-Southwood/Moonan/blob/main/docs/plugins.md> ·
 词汇表：<https://github.com/Pheobe-Southwood/Moonan/blob/main/CONTEXT.md>
 

package/dist/data.js

@@ -0,0 +1,90 @@
+import { defineRegistry, local, method } from "@earendil-works/chord";
+import { Type } from "typebox";
+/**
+ * One value in the platform's unified data store.
+ *
+ * `version` belongs to the dataset, not to the file and not to the contract. A plugin
+ * raises it when the stored shape or meaning changes and supplies a migration through its
+ * {@link DatasetCodec}; the platform never interprets the value.
+ */
+export const StoredDatasetSchema = Type.Object({
+    value: Type.Any(),
+    version: Type.Number(),
+}, { additionalProperties: false });
+/** Identity helper; keeps the codec's type while documenting intent. */
+export function defineDataset(codec) {
+    return codec;
+}
+/**
+ * The registry of dataset codecs.
+ *
+ * A contribution must come from an object of `lifetime: "host"`, like every other Chord
+ * registry. The platform reads the table for the code version of the root that asks.
+ */
+export const DataCodecs = defineRegistry("moonan.data-codecs", {
+    conflict: "error",
+});
+/**
+ * What the data store reports about its file. This is a state member, so a plugin can read
+ * it synchronously once the store is live; the platform also exposes it over HTTP.
+ */
+export const DataStoreStorageInfoSchema = Type.Object({
+    file: Type.String(),
+    backup: Type.String(),
+    exists: Type.Boolean(),
+    mode: Type.Optional(Type.String()),
+    writable: Type.Boolean(),
+    revision: Type.Number(),
+    datasets: Type.Number(),
+    lastSavedAt: Type.Optional(Type.String()),
+    notice: Type.Optional(Type.String()),
+}, { additionalProperties: false });
+/**
+ * The wire/JSON envelope for a complete export. The file itself has a different, richer
+ * shape (it also keeps per-dataset timestamps); this is the portable subset.
+ */
+export const DataBundleSchema = Type.Object({
+    format: Type.Literal("moonan.data"),
+    formatVersion: Type.Literal(1),
+    createdAt: Type.String(),
+    revision: Type.Number(),
+    datasets: Type.Array(Type.Object({
+        namespace: Type.String(),
+        version: Type.Number(),
+        value: Type.Any(),
+    }, { additionalProperties: false })),
+    skipped: Type.Optional(Type.Array(Type.String())),
+}, { additionalProperties: false });
+export const DataImportReportSchema = Type.Object({
+    imported: Type.Array(Type.String()),
+    revision: Type.Number(),
+    skipped: Type.Optional(Type.Array(Type.String())),
+}, { additionalProperties: false });
+/**
+ * The platform's unified data service.
+ *
+ * It is local and host-lifetime: exactly one object exists for the server host, it owns
+ * the only data file, and every plugin reads/writes through it. It is not a remote type;
+ * browsers get data through plugin methods or the platform's export/import HTTP surface.
+ *
+ * `read` returns the raw `{ value, version }` and deliberately does not consult a codec:
+ * a plugin's `config` cell may initialize before its codec registration is published, so
+ * the plugin validates/migrates its own first value. `write` replaces a whole dataset;
+ * `update` is the read-modify-write form that runs inside the store's serial queue.
+ */
+export const DataStore = local("moonan.data", {
+    version: 1,
+    input: Type.Object({}),
+    members: {
+        revision: Type.Number(),
+        storage: DataStoreStorageInfoSchema,
+        read: method(Type.Object({ namespace: Type.String() }), Type.Any()),
+        write: method(Type.Object({ namespace: Type.String(), version: Type.Number(), value: Type.Any() }), StoredDatasetSchema),
+        update: method(Type.Object({ namespace: Type.String(), version: Type.Number(), update: Type.Any() }), StoredDatasetSchema),
+        remove: method(Type.Object({ namespace: Type.String() })),
+        reload: method(undefined, DataStoreStorageInfoSchema),
+        exportAll: method(Type.Object({ includeSecrets: Type.Optional(Type.Boolean()) }), DataBundleSchema),
+        importAll: method(Type.Object({ bundle: DataBundleSchema }), DataImportReportSchema),
+    },
+});
+//# sourceMappingURL=data.js.map

package/dist/data.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"data.js","sourceRoot":"","sources":["../src/data.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAkB,MAAM,uBAAuB,CAAC;AACtF,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAE/B;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC,MAAM,CAC7C;IACC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE;IACjB,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE;CACtB,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B,CAAC;AAqCF,wEAAwE;AACxE,MAAM,UAAU,aAAa,CAAI,KAAsB;IACtD,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,cAAc,CAAe,oBAAoB,EAAE;IAC5E,QAAQ,EAAE,OAAO;CACjB,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,IAAI,CAAC,MAAM,CACpD;IACC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;IACnB,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;IACrB,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE;IACtB,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAClC,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE;IACxB,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE;IACvB,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE;IACvB,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACzC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;CACpC,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B,CAAC;AAcF;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAC1C;IACC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC;IACnC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9B,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE;IACxB,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE;IACvB,QAAQ,EAAE,IAAI,CAAC,KAAK,CACnB,IAAI,CAAC,MAAM,CACV;QACC,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE;QACxB,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE;QACtB,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE;KACjB,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B,CACD;IACD,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;CACjD,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B,CAAC;AAWF,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC,MAAM,CAChD;IACC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACnC,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE;IACvB,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;CACjD,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B,CAAC;AAQF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,KAAK,CAAC,aAAa,EAAE;IAC7C,OAAO,EAAE,CAAC;IACV,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IACtB,OAAO,EAAE;QACR,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE;QACvB,OAAO,EAAE,0BAA0B;QACnC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;QACnE,KAAK,EAAE,MAAM,CACZ,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,EACpF,mBAAmB,CACnB;QACD,MAAM,EAAE,MAAM,CACb,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,EACrF,mBAAmB,CACnB;QACD,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACzD,MAAM,EAAE,MAAM,CAAC,SAAS,EAAE,0BAA0B,CAAC;QACrD,SAAS,EAAE,MAAM,CAChB,IAAI,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,EAC9D,gBAAgB,CAChB;QACD,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,EAAE,sBAAsB,CAAC;KACpF;CACD,CAAC,CAAC"}

package/dist/index.js

@@ -2,11 +2,14 @@
  * `@moonan_ai/sdk` — everything a plugin needs on either side of the wire.
  *
  * The root entry is shared by the server facet and the browser facet: contracts,
- * registries and the Chord primitives they are built from. Browser-only surface (the
- * `Panels` registry and the React hooks) lives in `@moonan_ai/sdk/web`, because it needs
- * React and the root entry must stay importable from a Node facet.
+ * registries (including `DataCodecs` and `ModelProviders`) and the Chord primitives they
+ * are built from. Browser-only surface (the `Panels` registry and the React hooks) lives
+ * in `@moonan_ai/sdk/web`, because it needs React and the root entry must stay importable
+ * from a Node facet.
  */
-export { Manifest, FacetSetSchema, WebFacetSchema, } from "./manifest.js";
+export { WebFacetCatalog, FacetSetSchema, WebFacetSchema, } from "./web-facet-catalog.js";
+export { DataStore, DataCodecs, DataBundleSchema, DataImportReportSchema, DataStoreStorageInfoSchema, StoredDatasetSchema, defineDataset, } from "./data.js";
+export { ModelProviders, } from "./model-provider.js";
 export { Routes } from "./routes.js";
 /** Chord primitives, re-exported so a plugin needs two dependencies instead of three. */
 export { ChordError, defineFacet, defineRegistry, forbidden, hostFamily, hostNamed, invalid, isChordError, local, method, opaque, remote, } from "@earendil-works/chord";

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EACN,QAAQ,EACR,cAAc,EACd,cAAc,GAGd,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,MAAM,EAAqB,MAAM,aAAa,CAAC;AAExD,yFAAyF;AACzF,OAAO,EACN,UAAU,EACV,WAAW,EACX,cAAc,EACd,SAAS,EACT,UAAU,EACV,SAAS,EACT,OAAO,EACP,YAAY,EACZ,KAAK,EACL,MAAM,EACN,MAAM,EACN,MAAM,GAiBN,MAAM,uBAAuB,CAAC;AAE/B,uFAAuF;AACvF,OAAO,EACN,kBAAkB,EAClB,gBAAgB,EAChB,OAAO,EACP,eAAe,EACf,UAAU,EACV,kBAAkB,GAElB,MAAM,+BAA+B,CAAC;AAEvC,yDAAyD;AACzD,OAAO,EAAE,IAAI,EAA6B,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EACN,eAAe,EACf,cAAc,EACd,cAAc,GAGd,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACN,SAAS,EACT,UAAU,EACV,gBAAgB,EAChB,sBAAsB,EACtB,0BAA0B,EAC1B,mBAAmB,EACnB,aAAa,GAOb,MAAM,WAAW,CAAC;AACnB,OAAO,EACN,cAAc,GAGd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAqB,MAAM,aAAa,CAAC;AAExD,yFAAyF;AACzF,OAAO,EACN,UAAU,EACV,WAAW,EACX,cAAc,EACd,SAAS,EACT,UAAU,EACV,SAAS,EACT,OAAO,EACP,YAAY,EACZ,KAAK,EACL,MAAM,EACN,MAAM,EACN,MAAM,GAiBN,MAAM,uBAAuB,CAAC;AAE/B,uFAAuF;AACvF,OAAO,EACN,kBAAkB,EAClB,gBAAgB,EAChB,OAAO,EACP,eAAe,EACf,UAAU,EACV,kBAAkB,GAElB,MAAM,+BAA+B,CAAC;AAEvC,yDAAyD;AACzD,OAAO,EAAE,IAAI,EAA6B,MAAM,SAAS,CAAC"}

package/dist/model-provider.js

@@ -0,0 +1,5 @@
+import { defineRegistry } from "@earendil-works/chord";
+export const ModelProviders = defineRegistry("moonan.model-providers", {
+    conflict: "error",
+});
+//# sourceMappingURL=model-provider.js.map

package/dist/model-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-provider.js","sourceRoot":"","sources":["../src/model-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AA0CvD,MAAM,CAAC,MAAM,cAAc,GAAG,cAAc,CAAgB,wBAAwB,EAAE;IACrF,QAAQ,EAAE,OAAO;CACjB,CAAC,CAAC"}

package/dist/{manifest.js → web-facet-catalog.js}

@@ -30,20 +30,20 @@ export const FacetSetSchema = Type.Object({
     error: Type.Optional(Type.String()),
 });
 /**
- * The only object the platform publishes: which browser facets the browser host must load.
+ * The only object the platform publishes: the catalog of browser facets the browser host
+ * must load.
  *
  * This is the seam that keeps the platform free of feature state. The loader knows which
  * modules exist; the browser cannot find that out alone (it has no filesystem and no
- * registry to ask), so exactly one read-only object carries it across. Chord names a
- * server `Manifest` object as how browsers learn of changes (spec §6); the particular
- * fields here are Moonan application state, not protocol fields.
+ * registry to ask), so exactly one read-only object carries it across.
  *
- * Contract version 3 changed `web` from a bare URL string to `{ url, hash }`. There is no
- * compatibility adapter: a browser is mapped to `upgrade_required` and must load the new
- * shell (a non-client consumer gets `contract_mismatch`).
+ * The name is deliberately about what it carries: a catalog of web facets. It is not a
+ * package manifest and it is not a general application manifest. This is a fresh contract
+ * (version 1) with no compatibility adapter: an old shell gets `upgrade_required` and
+ * reloads the page.
  */
-export const Manifest = remote("moonan.manifest", {
-    version: 3,
+export const WebFacetCatalog = remote("moonan.web-facets", {
+    version: 1,
     input: Type.Object({}),
     host: hostNamed("moonan"),
     variants: {
@@ -63,4 +63,4 @@ export const Manifest = remote("moonan.manifest", {
         },
     },
 });
-//# sourceMappingURL=manifest.js.map
+//# sourceMappingURL=web-facet-catalog.js.map

package/dist/web-facet-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-facet-catalog.js","sourceRoot":"","sources":["../src/web-facet-catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAe,MAAM,SAAS,CAAC;AAE5C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC;IACzC,6DAA6D;IAC7D,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE;IAClB,2DAA2D;IAC3D,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;CACnB,CAAC,CAAC;AAGH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;IACnB,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE;IACtB,gFAAgF;IAChF,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;IACxE,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;IAClC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;CACnC,CAAC,CAAC;AAGH;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,mBAAmB,EAAE;IAC1D,OAAO,EAAE,CAAC;IACV,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IACtB,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC;IACzB,QAAQ,EAAE;QACT,EAAE,EAAE;YACH,KAAK,EAAE;gBACN,qFAAqF;gBACrF,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE;gBACtB,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;gBAClC;;;;;mBAKG;gBACH,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE;aACvB;SACD;KACD;CACD,CAAC,CAAC"}

package/dist/web.js

@@ -3,9 +3,9 @@ import { useEffect, useLayoutEffect, useRef, useState } from "react";
 export { isChordError } from "@earendil-works/chord";
 /**
  * A `gone` error that no new reference can fix: the consumer was built against a contract the
- * provider no longer covers. For the shell's own contracts (the platform `Manifest`, or a
+ * provider no longer covers. For the shell's own contracts (the platform `WebFacetCatalog`, or a
  * protocol mismatch) the page needs the new build. For a plugin's contract, chord's remedy is
- * to reload the web facets; the shell does that when the manifest reports changed facets.
+ * to reload the web facets; the shell does that when the WebFacetCatalog reports changed facets.
  */
 export function isFatalContractError(error) {
     return isChordError(error, "contract_mismatch") || isChordError(error, "upgrade_required");
@@ -99,7 +99,7 @@ export function useRemote(host, contract, input, options = {}) {
                 return;
             // A contract that the provider no longer covers cannot be fixed by taking another
             // reference. The shell owns the official remedy (reload the web facets when the
-            // manifest reports changed facets); a panel only reports it upward, and without an
+            // WebFacetCatalog reports changed facets); a panel only reports it upward, and without an
             // `onFatal` handler it says once what the developer can do.
             if (isFatalContractError(error)) {
                 const handler = onFatal.current;
@@ -112,7 +112,7 @@ export function useRemote(host, contract, input, options = {}) {
                 }
                 if (!warned.current) {
                     warned.current = true;
-                    console.warn("[chord] a reference is gone because its contract no longer binds. The shell reloads web facets when the Manifest reports changed facets; if this persists, the plugin's web code and contract are out of sync.", error);
+                    console.warn("[chord] a reference is gone because its contract no longer binds. The shell reloads web facets when the WebFacetCatalog reports changed facets; if this persists, the plugin's web code and contract are out of sync.", error);
                 }
                 return;
             }

package/dist/web.js.map

@@ -1 +1 @@
-{"version":3,"file":"web.js","sourceRoot":"","sources":["../src/web.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,cAAc,EACd,YAAY,GAOZ,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,EAAkB,MAAM,OAAO,CAAC;AAGrF,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAc;IAClD,OAAO,YAAY,CAAC,KAAK,EAAE,mBAAmB,CAAC,IAAI,YAAY,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;AAC5F,CAAC;AAgCD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,cAAc,CAAoB,eAAe,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;AAEhG;;;;;;;GAOG;AACH,SAAS,MAAM,CAAI,QAAiC,EAAE,QAAW;IAChE,IAAI,CAAC,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC/B,IAAI,CAAC;QACJ,OAAO,QAAQ,CAAC,KAAK,CAAC;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,YAAY,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,YAAY,CAAC,KAAK,EAAE,gBAAgB,CAAC;YAAE,OAAO,QAAQ,CAAC;QAC/F,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;QACrD,OAAO,QAAQ,CAAC;IACjB,CAAC;AACF,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,SAAS,CACxB,IAAsC,EACtC,QAAW,EACX,KAAiB,EACjB,UAA4B,EAAE;IAE9B,mFAAmF;IACnF,kFAAkF;IAClF,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACpD,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACxC,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAElC,eAAe,CAAC,GAAG,EAAE;QACpB,IAAI,CAAC,IAAI,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,CAAC;YACb,OAAO;QACR,CAAC;QACD,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACJ,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAe,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,mFAAmF;YACnF,OAAO,CAAC,KAAK,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;YAC5C,MAAM,CAAC,IAAI,CAAC,CAAC;YACb,OAAO;QACR,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,CAAC;QACb,OAAO,GAAG,EAAE;YACX,MAAM,CAAC,IAAI,CAAC,CAAC;YACb,IAAI,CAAC,OAAO,EAAE,CAAC;QAChB,CAAC,CAAC;IACH,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IAEnC,SAAS,CAAC,GAAG,EAAE;QACd,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,OAAO,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAiB,EAAE,KAAc,EAAE,EAAE;YACzD,qFAAqF;YACrF,kFAAkF;YAClF,kFAAkF;YAClF,+CAA+C;YAC/C,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACvB,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC;gBACpB,aAAa,CAAC,OAAO,GAAG,KAAK,CAAC;gBAC9B,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;gBACvB,OAAO;YACR,CAAC;YACD,IAAI,MAAM,KAAK,MAAM;gBAAE,OAAO;YAE9B,kFAAkF;YAClF,gFAAgF;YAChF,mFAAmF;YACnF,4DAA4D;YAC5D,IAAI,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;gBAChC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC3B,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;wBAC5B,aAAa,CAAC,OAAO,GAAG,IAAI,CAAC;wBAC7B,OAAO,CAAC,KAAK,CAAC,CAAC;oBAChB,CAAC;oBACD,OAAO;gBACR,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACrB,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;oBACtB,OAAO,CAAC,IAAI,CACX,gNAAgN,EAChN,KAAK,CACL,CAAC;gBACH,CAAC;gBACD,OAAO;YACR,CAAC;YAED,IAAI,OAAO,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;gBACzB,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;gBACrB,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;gBACjC,OAAO;YACR,CAAC;YACD,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;gBAC5B,aAAa,CAAC,OAAO,GAAG,IAAI,CAAC;gBAC7B,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;YAC1B,CAAC;QACF,CAAC,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAEV,OAAO,GAAG,CAAC;AACZ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAwB,GAAkB;IACrE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAmB,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,IAAI,IAAI,CAAC,CAAC;IAElF,sFAAsF;IACtF,uFAAuF;IACvF,eAAe,CAAC,GAAG,EAAE;QACpB,IAAI,CAAC,GAAG,EAAE,CAAC;YACV,SAAS,CAAC,IAAI,CAAC,CAAC;YAChB,OAAO;QACR,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtB,OAAO,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAe,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAEV,OAAO,MAAM,CAAC;AACf,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,WAAW,CAAI,QAAiC,EAAE,QAAW;IAC5E,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAI,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IAExE,eAAe,CAAC,GAAG,EAAE;QACpB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACnB,OAAO;QACR,CAAC;QACD,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAO,EAAE,EAAE;YAC3C,IAAI,CAAC,SAAS;gBAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;QACH,OAAO,GAAG,EAAE;YACX,SAAS,GAAG,IAAI,CAAC;YACjB,IAAI,EAAE,CAAC;QACR,CAAC,CAAC;IACH,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf,OAAO,KAAK,CAAC;AACd,CAAC"}
+{"version":3,"file":"web.js","sourceRoot":"","sources":["../src/web.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,cAAc,EACd,YAAY,GAOZ,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,EAAkB,MAAM,OAAO,CAAC;AAGrF,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAc;IAClD,OAAO,YAAY,CAAC,KAAK,EAAE,mBAAmB,CAAC,IAAI,YAAY,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;AAC5F,CAAC;AAgCD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,cAAc,CAAoB,eAAe,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;AAEhG;;;;;;;GAOG;AACH,SAAS,MAAM,CAAI,QAAiC,EAAE,QAAW;IAChE,IAAI,CAAC,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC/B,IAAI,CAAC;QACJ,OAAO,QAAQ,CAAC,KAAK,CAAC;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,YAAY,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,YAAY,CAAC,KAAK,EAAE,gBAAgB,CAAC;YAAE,OAAO,QAAQ,CAAC;QAC/F,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;QACrD,OAAO,QAAQ,CAAC;IACjB,CAAC;AACF,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,SAAS,CACxB,IAAsC,EACtC,QAAW,EACX,KAAiB,EACjB,UAA4B,EAAE;IAE9B,mFAAmF;IACnF,kFAAkF;IAClF,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACpD,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACxC,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAElC,eAAe,CAAC,GAAG,EAAE;QACpB,IAAI,CAAC,IAAI,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,CAAC;YACb,OAAO;QACR,CAAC;QACD,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACJ,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAe,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,mFAAmF;YACnF,OAAO,CAAC,KAAK,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;YAC5C,MAAM,CAAC,IAAI,CAAC,CAAC;YACb,OAAO;QACR,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,CAAC;QACb,OAAO,GAAG,EAAE;YACX,MAAM,CAAC,IAAI,CAAC,CAAC;YACb,IAAI,CAAC,OAAO,EAAE,CAAC;QAChB,CAAC,CAAC;IACH,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IAEnC,SAAS,CAAC,GAAG,EAAE;QACd,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,OAAO,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAiB,EAAE,KAAc,EAAE,EAAE;YACzD,qFAAqF;YACrF,kFAAkF;YAClF,kFAAkF;YAClF,+CAA+C;YAC/C,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACvB,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC;gBACpB,aAAa,CAAC,OAAO,GAAG,KAAK,CAAC;gBAC9B,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;gBACvB,OAAO;YACR,CAAC;YACD,IAAI,MAAM,KAAK,MAAM;gBAAE,OAAO;YAE9B,kFAAkF;YAClF,gFAAgF;YAChF,0FAA0F;YAC1F,4DAA4D;YAC5D,IAAI,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;gBAChC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC3B,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;wBAC5B,aAAa,CAAC,OAAO,GAAG,IAAI,CAAC;wBAC7B,OAAO,CAAC,KAAK,CAAC,CAAC;oBAChB,CAAC;oBACD,OAAO;gBACR,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACrB,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;oBACtB,OAAO,CAAC,IAAI,CACX,uNAAuN,EACvN,KAAK,CACL,CAAC;gBACH,CAAC;gBACD,OAAO;YACR,CAAC;YAED,IAAI,OAAO,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;gBACzB,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;gBACrB,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;gBACjC,OAAO;YACR,CAAC;YACD,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;gBAC5B,aAAa,CAAC,OAAO,GAAG,IAAI,CAAC;gBAC7B,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;YAC1B,CAAC;QACF,CAAC,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAEV,OAAO,GAAG,CAAC;AACZ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAwB,GAAkB;IACrE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAmB,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,IAAI,IAAI,CAAC,CAAC;IAElF,sFAAsF;IACtF,uFAAuF;IACvF,eAAe,CAAC,GAAG,EAAE;QACpB,IAAI,CAAC,GAAG,EAAE,CAAC;YACV,SAAS,CAAC,IAAI,CAAC,CAAC;YAChB,OAAO;QACR,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtB,OAAO,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAe,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAEV,OAAO,MAAM,CAAC;AACf,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,WAAW,CAAI,QAAiC,EAAE,QAAW;IAC5E,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAI,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IAExE,eAAe,CAAC,GAAG,EAAE;QACpB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACnB,OAAO;QACR,CAAC;QACD,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAO,EAAE,EAAE;YAC3C,IAAI,CAAC,SAAS;gBAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;QACH,OAAO,GAAG,EAAE;YACX,SAAS,GAAG,IAAI,CAAC;YACjB,IAAI,EAAE,CAAC;QACR,CAAC,CAAC;IACH,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf,OAAO,KAAK,CAAC;AACd,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moonan_ai/sdk",
-  "version": "0.0.4-alpha2",
+  "version": "0.0.5-alpha1",
   "description": "Moonan plugin SDK: contracts, registries and browser hooks for plugin authors.",
   "type": "module",
   "license": "MIT",

package/src/data.ts

@@ -0,0 +1,184 @@
+import { defineRegistry, local, method, type JsonValue } from "@earendil-works/chord";
+import { Type } from "typebox";
+
+/**
+ * One value in the platform's unified data store.
+ *
+ * `version` belongs to the dataset, not to the file and not to the contract. A plugin
+ * raises it when the stored shape or meaning changes and supplies a migration through its
+ * {@link DatasetCodec}; the platform never interprets the value.
+ */
+export const StoredDatasetSchema = Type.Object(
+	{
+		value: Type.Any(),
+		version: Type.Number(),
+	},
+	{ additionalProperties: false },
+);
+
+export type StoredDataset = {
+	value: JsonValue;
+	version: number;
+};
+
+/**
+ * What every plugin must contribute to make its dataset exportable and importable.
+ *
+ * The codec is a registry value, not a Chord contract: it lives in the server host, can
+ * carry functions, and never crosses a link. The platform calls it when an administrator
+ * exports or imports the unified data file.
+ */
+export interface DatasetCodec<T = unknown> {
+	/** Stable dataset key, conventionally `"<package>/<dataset>"`. */
+	readonly namespace: string;
+	/** Current stored shape version; see {@link StoredDataset.version}. */
+	readonly version: number;
+	/** Convert an older stored value to the current stored value. */
+	migrate(value: JsonValue, fromVersion: number): T;
+	/** Convert the current stored value to a portable export value (redact secrets here). */
+	export(value: T, options: DatasetExportOptions): JsonValue;
+	/**
+	 * Convert an imported export value to the current stored value.
+	 *
+	 * `current` is the value already stored at this namespace, if any. A codec may use it
+	 * to preserve secrets that a redacted export deliberately omitted.
+	 */
+	import(value: JsonValue, fromVersion: number, current: JsonValue | undefined): T;
+}
+
+export interface DatasetExportOptions {
+	/** False by default on the HTTP surface; a codec must redact secrets when false. */
+	readonly includeSecrets: boolean;
+}
+
+/** Identity helper; keeps the codec's type while documenting intent. */
+export function defineDataset<T>(codec: DatasetCodec<T>): DatasetCodec<T> {
+	return codec;
+}
+
+/**
+ * The registry of dataset codecs.
+ *
+ * A contribution must come from an object of `lifetime: "host"`, like every other Chord
+ * registry. The platform reads the table for the code version of the root that asks.
+ */
+export const DataCodecs = defineRegistry<DatasetCodec>("moonan.data-codecs", {
+	conflict: "error",
+});
+
+/**
+ * What the data store reports about its file. This is a state member, so a plugin can read
+ * it synchronously once the store is live; the platform also exposes it over HTTP.
+ */
+export const DataStoreStorageInfoSchema = Type.Object(
+	{
+		file: Type.String(),
+		backup: Type.String(),
+		exists: Type.Boolean(),
+		mode: Type.Optional(Type.String()),
+		writable: Type.Boolean(),
+		revision: Type.Number(),
+		datasets: Type.Number(),
+		lastSavedAt: Type.Optional(Type.String()),
+		notice: Type.Optional(Type.String()),
+	},
+	{ additionalProperties: false },
+);
+
+export type DataStoreStorageInfo = {
+	file: string;
+	backup: string;
+	exists: boolean;
+	mode?: string;
+	writable: boolean;
+	revision: number;
+	datasets: number;
+	lastSavedAt?: string;
+	notice?: string;
+};
+
+/**
+ * The wire/JSON envelope for a complete export. The file itself has a different, richer
+ * shape (it also keeps per-dataset timestamps); this is the portable subset.
+ */
+export const DataBundleSchema = Type.Object(
+	{
+		format: Type.Literal("moonan.data"),
+		formatVersion: Type.Literal(1),
+		createdAt: Type.String(),
+		revision: Type.Number(),
+		datasets: Type.Array(
+			Type.Object(
+				{
+					namespace: Type.String(),
+					version: Type.Number(),
+					value: Type.Any(),
+				},
+				{ additionalProperties: false },
+			),
+		),
+		skipped: Type.Optional(Type.Array(Type.String())),
+	},
+	{ additionalProperties: false },
+);
+
+export type DataBundle = {
+	format: "moonan.data";
+	formatVersion: 1;
+	createdAt: string;
+	revision: number;
+	datasets: { namespace: string; version: number; value: JsonValue }[];
+	skipped?: string[];
+};
+
+export const DataImportReportSchema = Type.Object(
+	{
+		imported: Type.Array(Type.String()),
+		revision: Type.Number(),
+		skipped: Type.Optional(Type.Array(Type.String())),
+	},
+	{ additionalProperties: false },
+);
+
+export type DataImportReport = {
+	imported: string[];
+	revision: number;
+	skipped?: string[];
+};
+
+/**
+ * The platform's unified data service.
+ *
+ * It is local and host-lifetime: exactly one object exists for the server host, it owns
+ * the only data file, and every plugin reads/writes through it. It is not a remote type;
+ * browsers get data through plugin methods or the platform's export/import HTTP surface.
+ *
+ * `read` returns the raw `{ value, version }` and deliberately does not consult a codec:
+ * a plugin's `config` cell may initialize before its codec registration is published, so
+ * the plugin validates/migrates its own first value. `write` replaces a whole dataset;
+ * `update` is the read-modify-write form that runs inside the store's serial queue.
+ */
+export const DataStore = local("moonan.data", {
+	version: 1,
+	input: Type.Object({}),
+	members: {
+		revision: Type.Number(),
+		storage: DataStoreStorageInfoSchema,
+		read: method(Type.Object({ namespace: Type.String() }), Type.Any()),
+		write: method(
+			Type.Object({ namespace: Type.String(), version: Type.Number(), value: Type.Any() }),
+			StoredDatasetSchema,
+		),
+		update: method(
+			Type.Object({ namespace: Type.String(), version: Type.Number(), update: Type.Any() }),
+			StoredDatasetSchema,
+		),
+		remove: method(Type.Object({ namespace: Type.String() })),
+		reload: method(undefined, DataStoreStorageInfoSchema),
+		exportAll: method(
+			Type.Object({ includeSecrets: Type.Optional(Type.Boolean()) }),
+			DataBundleSchema,
+		),
+		importAll: method(Type.Object({ bundle: DataBundleSchema }), DataImportReportSchema),
+	},
+});

package/src/index.ts

@@ -2,17 +2,38 @@
  * `@moonan_ai/sdk` — everything a plugin needs on either side of the wire.
  *
  * The root entry is shared by the server facet and the browser facet: contracts,
- * registries and the Chord primitives they are built from. Browser-only surface (the
- * `Panels` registry and the React hooks) lives in `@moonan_ai/sdk/web`, because it needs
- * React and the root entry must stay importable from a Node facet.
+ * registries (including `DataCodecs` and `ModelProviders`) and the Chord primitives they
+ * are built from. Browser-only surface (the `Panels` registry and the React hooks) lives
+ * in `@moonan_ai/sdk/web`, because it needs React and the root entry must stay importable
+ * from a Node facet.
  */
 export {
-	Manifest,
+	WebFacetCatalog,
 	FacetSetSchema,
 	WebFacetSchema,
 	type FacetSetEntry,
 	type WebFacet,
-} from "./manifest.js";
+} from "./web-facet-catalog.js";
+export {
+	DataStore,
+	DataCodecs,
+	DataBundleSchema,
+	DataImportReportSchema,
+	DataStoreStorageInfoSchema,
+	StoredDatasetSchema,
+	defineDataset,
+	type DataBundle,
+	type DataImportReport,
+	type DataStoreStorageInfo,
+	type DatasetCodec,
+	type DatasetExportOptions,
+	type StoredDataset,
+} from "./data.js";
+export {
+	ModelProviders,
+	type ModelInfo,
+	type ModelProvider,
+} from "./model-provider.js";
 export { Routes, type RouteHandler } from "./routes.js";
 
 /** Chord primitives, re-exported so a plugin needs two dependencies instead of three. */

package/src/model-provider.ts

@@ -0,0 +1,45 @@
+import { defineRegistry } from "@earendil-works/chord";
+
+/**
+ * Provider-neutral metadata for one configured chat model.
+ *
+ * This is plain JSON: the registry value never crosses a link, but keeping the catalog
+ * serializable lets a plugin expose it over HTTP or in a panel without a second shape.
+ */
+export interface ModelInfo {
+	readonly providerId: string;
+	readonly modelId: string;
+	readonly name: string;
+	readonly contextWindow?: number;
+	readonly maxTokens?: number;
+	readonly input: readonly ("text" | "image")[];
+	readonly reasoning: boolean;
+}
+
+/**
+ * A model provider contribution.
+ *
+ * `list()` is the key-free catalog. `runtime()` is a server-only handle whose concrete
+ * shape belongs to the provider package; ai-gateway returns its pi-ai `MutableModels`
+ * there. The SDK stays free of pi-ai so a generic plugin does not inherit an AI dependency.
+ *
+ * A consumer looks the provider up with the code version of its root:
+ *
+ * ```ts
+ * const providers = api.registry(ModelProviders);
+ * const provider = providers.get("ai-gateway", ctx);
+ * ```
+ *
+ * The registry value is not a Chord contract: there is no `uses` entry and no wire
+ * compatibility rule. Its table is replaced with each code version like every registry.
+ */
+export interface ModelProvider {
+	readonly id: string;
+	readonly title: string;
+	list(): readonly ModelInfo[];
+	runtime(): unknown;
+}
+
+export const ModelProviders = defineRegistry<ModelProvider>("moonan.model-providers", {
+	conflict: "error",
+});

package/src/{manifest.ts → web-facet-catalog.ts}

@@ -35,20 +35,20 @@ export const FacetSetSchema = Type.Object({
 export type FacetSetEntry = Static<typeof FacetSetSchema>;
 
 /**
- * The only object the platform publishes: which browser facets the browser host must load.
+ * The only object the platform publishes: the catalog of browser facets the browser host
+ * must load.
  *
  * This is the seam that keeps the platform free of feature state. The loader knows which
  * modules exist; the browser cannot find that out alone (it has no filesystem and no
- * registry to ask), so exactly one read-only object carries it across. Chord names a
- * server `Manifest` object as how browsers learn of changes (spec §6); the particular
- * fields here are Moonan application state, not protocol fields.
+ * registry to ask), so exactly one read-only object carries it across.
  *
- * Contract version 3 changed `web` from a bare URL string to `{ url, hash }`. There is no
- * compatibility adapter: a browser is mapped to `upgrade_required` and must load the new
- * shell (a non-client consumer gets `contract_mismatch`).
+ * The name is deliberately about what it carries: a catalog of web facets. It is not a
+ * package manifest and it is not a general application manifest. This is a fresh contract
+ * (version 1) with no compatibility adapter: an old shell gets `upgrade_required` and
+ * reloads the page.
  */
-export const Manifest = remote("moonan.manifest", {
-	version: 3,
+export const WebFacetCatalog = remote("moonan.web-facets", {
+	version: 1,
 	input: Type.Object({}),
 	host: hostNamed("moonan"),
 	variants: {

package/src/web.ts

@@ -15,9 +15,9 @@ export { isChordError } from "@earendil-works/chord";
 
 /**
  * A `gone` error that no new reference can fix: the consumer was built against a contract the
- * provider no longer covers. For the shell's own contracts (the platform `Manifest`, or a
+ * provider no longer covers. For the shell's own contracts (the platform `WebFacetCatalog`, or a
  * protocol mismatch) the page needs the new build. For a plugin's contract, chord's remedy is
- * to reload the web facets; the shell does that when the manifest reports changed facets.
+ * to reload the web facets; the shell does that when the WebFacetCatalog reports changed facets.
  */
 export function isFatalContractError(error: unknown): boolean {
 	return isChordError(error, "contract_mismatch") || isChordError(error, "upgrade_required");
@@ -146,7 +146,7 @@ export function useRemote<C extends AnyContract>(
 
 			// A contract that the provider no longer covers cannot be fixed by taking another
 			// reference. The shell owns the official remedy (reload the web facets when the
-			// manifest reports changed facets); a panel only reports it upward, and without an
+			// WebFacetCatalog reports changed facets); a panel only reports it upward, and without an
 			// `onFatal` handler it says once what the developer can do.
 			if (isFatalContractError(error)) {
 				const handler = onFatal.current;
@@ -160,7 +160,7 @@ export function useRemote<C extends AnyContract>(
 				if (!warned.current) {
 					warned.current = true;
 					console.warn(
-						"[chord] a reference is gone because its contract no longer binds. The shell reloads web facets when the Manifest reports changed facets; if this persists, the plugin's web code and contract are out of sync.",
+						"[chord] a reference is gone because its contract no longer binds. The shell reloads web facets when the WebFacetCatalog reports changed facets; if this persists, the plugin's web code and contract are out of sync.",
 						error,
 					);
 				}

package/dist/manifest.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAe,MAAM,SAAS,CAAC;AAE5C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC;IACzC,6DAA6D;IAC7D,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE;IAClB,2DAA2D;IAC3D,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;CACnB,CAAC,CAAC;AAGH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;IACnB,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE;IACtB,gFAAgF;IAChF,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;IACxE,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;IAClC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;CACnC,CAAC,CAAC;AAGH;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,iBAAiB,EAAE;IACjD,OAAO,EAAE,CAAC;IACV,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IACtB,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC;IACzB,QAAQ,EAAE;QACT,EAAE,EAAE;YACH,KAAK,EAAE;gBACN,qFAAqF;gBACrF,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE;gBACtB,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;gBAClC;;;;;mBAKG;gBACH,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE;aACvB;SACD;KACD;CACD,CAAC,CAAC"}