@north-light/api 0.3.592 → 0.3.593

package/dist/api/contract.d.ts

@@ -1,5 +1,5 @@
 /** The contract level this build serves and requires. Written by `scripts/contract.mjs release`; never edit by hand. */
-export declare const CONTRACT_LEVEL = "1.44";
+export declare const CONTRACT_LEVEL = "1.45";
 /** Request header naming the one contract level the caller needs, e.g. `1.3`. Optional: absent means no check. */
 export declare const REQUIRED_CONTRACT_HEADER = "Crouter-Required-Contract";
 /** Response header listing the contract levels the server serves, comma-separated, one per major, e.g. `1.3`. */

package/dist/api/contract.js

@@ -12,7 +12,7 @@
 //
 // PURITY (spec §3.1): Node built-ins + `src/api/*` only.
 /** The contract level this build serves and requires. Written by `scripts/contract.mjs release`; never edit by hand. */
-export const CONTRACT_LEVEL = '1.44';
+export const CONTRACT_LEVEL = '1.45';
 /** Request header naming the one contract level the caller needs, e.g. `1.3`. Optional: absent means no check. */
 export const REQUIRED_CONTRACT_HEADER = 'Crouter-Required-Contract';
 /** Response header listing the contract levels the server serves, comma-separated, one per major, e.g. `1.3`. */

package/dist/api/dto/imports.d.ts

@@ -61,6 +61,12 @@ export interface ImportRunDTO {
     verify: ImportVerifyDTO | null;
     failure: ImportFailureDTO | null;
     unresolved_plugins: string[];
+    /** Plugins whose marketplace source the directory would not publish: the install is imported, its documents become the person's own copies. `holder` names the source that holds a `name_taken` name. */
+    refused_plugins?: Array<{
+        plugin: string;
+        reason: 'name_taken' | 'not_public' | 'not_found';
+        holder?: string;
+    }>;
     created: string;
     loaded: string | null;
     finished: string | null;

package/dist/commands/pkg/market-inspect.js

@@ -3,7 +3,7 @@ import { notFound } from '../../core/errors.js';
 import { paginate } from '../../core/pagination.js';
 import { listInstalledPlugins, listInstalledMarketplaces, listAllMarketplaces, findMarketplaceByName, } from '../../core/resolver.js';
 import { resolveScopeArg, projectScopeRoot } from '../../core/scope.js';
-import { isSandboxedNode } from '../../shared/env.js';
+import { installsLiveInAppBlock } from '../../shared/env.js';
 import { listAppMarketplaces } from './app-installs.js';
 export const marketList = defineLeaf({
     name: 'list',
@@ -26,7 +26,7 @@ export const marketList = defineLeaf({
         effects: ['None. Read-only.'],
     },
     run: async (input) => {
-        if (isSandboxedNode())
+        if (installsLiveInAppBlock())
             return listAppMarketplaces();
         const scopeInput = input['scope'];
         const limitRaw = input['limit'];

package/dist/commands/pkg/market-manage.js

@@ -4,7 +4,7 @@ import { defineLeaf } from '../../core/command.js';
 import { general, notFound } from '../../core/errors.js';
 import { listAllMarketplaces, listAllPlugins, findMarketplaceByName } from '../../core/resolver.js';
 import { resolveScopeArg, requireScopeRoot, marketplacesDir, pluginsDir } from '../../core/scope.js';
-import { isSandboxedNode } from '../../shared/env.js';
+import { installsLiveInAppBlock } from '../../shared/env.js';
 import { addAppMarketplace, removeAppMarketplace } from './app-installs.js';
 import { updateConfig, updateState, ensureScopeInitialized, readConfig } from '../../core/config.js';
 import { pathExists, ensureDir, removePath, isSymlink, nowIso, readSymlinkTarget } from '../../core/fs-utils.js';
@@ -41,13 +41,20 @@ export async function addMarketplace(opts) {
         renameSync(tempDest, finalDest);
     }
     const effectiveRef = ref !== undefined ? ref : 'main';
-    await updateConfig(scope, (cfg) => {
-        cfg.marketplaces[finalName] = {
-            url,
-            ref: effectiveRef,
-            installed_at: nowIso(),
-        };
-    });
+    // A refused registration leaves no clone behind: a directory without its config row would list as a marketplace with no url.
+    try {
+        await updateConfig(scope, (cfg) => {
+            cfg.marketplaces[finalName] = {
+                url,
+                ref: effectiveRef,
+                installed_at: nowIso(),
+            };
+        });
+    }
+    catch (error) {
+        removePath(finalDest);
+        throw error;
+    }
     return { name: finalName, scope, path: finalDest };
 }
 export const marketAdd = defineLeaf({
@@ -74,7 +81,7 @@ export const marketAdd = defineLeaf({
         const url = input['url'];
         const ref = input['ref'];
         const scopeInput = input['scope'];
-        if (isSandboxedNode())
+        if (installsLiveInAppBlock())
             return await addAppMarketplace(url, ref);
         return addMarketplace({ url, ref, scope: resolveInstallScope(scopeInput) });
     },
@@ -96,7 +103,7 @@ export const marketRemove = defineLeaf({
     },
     run: async (input) => {
         const name = input['name'];
-        if (isSandboxedNode())
+        if (installsLiveInAppBlock())
             return await removeAppMarketplace(name);
         const scopeInput = input['scope'];
         let targetScope;

package/dist/commands/pkg/plugin-inspect.js

@@ -1,6 +1,6 @@
 import { defineLeaf } from '../../core/command.js';
 import { notFound } from '../../core/errors.js';
-import { isSandboxedNode } from '../../shared/env.js';
+import { installsLiveInAppBlock } from '../../shared/env.js';
 import { listAppPlugins } from './app-installs.js';
 import { paginate } from '../../core/pagination.js';
 import { listInstalledPlugins, findPluginByName, } from '../../core/resolver.js';
@@ -46,7 +46,7 @@ export const pluginList = defineLeaf({
     run: async (input) => {
         const scopeInput = input['scope'];
         const includeDisabled = input['includeDisabled'] ?? false;
-        if (isSandboxedNode())
+        if (installsLiveInAppBlock())
             return await listAppPlugins(includeDisabled);
         const limitRaw = input['limit'];
         const limit = limitRaw !== undefined ? Math.min(Math.max(1, limitRaw), 200) : 50;

package/dist/commands/pkg/plugin-manage.js

@@ -5,7 +5,7 @@ import { dirname, join, resolve, isAbsolute, relative } from 'node:path';
 import { renameSync } from 'node:fs';
 import { defineLeaf } from '../../core/command.js';
 import { cliClient, rethrowAsCliError } from '../api-client.js';
-import { isSandboxedNode } from '../../shared/env.js';
+import { installsLiveInAppBlock } from '../../shared/env.js';
 import { installAppPlugin, removeAppPlugin, setAppPluginEnabled, updateAppPlugins } from './app-installs.js';
 import { notFound, usage, general, network, CrtrError } from '../../core/errors.js';
 import { findMarketplaceByName, findPluginByName, listAllPlugins } from '../../core/resolver.js';
@@ -812,7 +812,7 @@ export const pluginInstall = defineLeaf({
         const authEnv = input['authEnv'];
         const scopeInput = input['scope'];
         const gitRef = input['ref'];
-        if (isSandboxedNode()) {
+        if (installsLiveInAppBlock()) {
             if (rawRef === undefined || endpoint !== undefined || name !== undefined || authEnv !== undefined || gitRef !== undefined || scopeInput !== undefined)
                 throw usage('a sandboxed node installs only INSTALL-REF as marketplace/plugin');
             return await installAppPlugin(rawRef);
@@ -874,7 +874,7 @@ export const pluginRemove = defineLeaf({
         if (name === 'crtr') {
             throw usage('cannot remove builtin plugin "crtr" — it ships with the binary');
         }
-        if (isSandboxedNode())
+        if (installsLiveInAppBlock())
             return await removeAppPlugin(name);
         let scopes;
         if (scopeInput !== undefined) {
@@ -939,7 +939,7 @@ export const pluginEnable = defineLeaf({
     },
     run: async (input) => {
         const name = input['name'];
-        if (isSandboxedNode())
+        if (installsLiveInAppBlock())
             return await setAppPluginEnabled(name, true);
         const target = resolvePluginConfigTarget(name, input['scope']);
         if (target === null)
@@ -972,7 +972,7 @@ export const pluginDisable = defineLeaf({
         effects: ['Sets plugin enabled=false in config.json.'],
     },
     run: async (input) => {
-        if (isSandboxedNode())
+        if (installsLiveInAppBlock())
             return await setAppPluginEnabled(input['name'], false);
         const result = await setPluginEnabled(input, false);
         await reconcilePluginDocuments();
@@ -1002,7 +1002,7 @@ export const pluginUpdate = defineLeaf({
     },
     run: async (input) => {
         const name = input['name'];
-        if (isSandboxedNode())
+        if (installsLiveInAppBlock())
             return await updateAppPlugins(name);
         const scopeInput = input['scope'];
         const scope = scopeInput === undefined ? undefined : resolveScopeArg(scopeInput);

package/dist/shared/env.d.ts

@@ -16,6 +16,10 @@ export declare function isSandboxedNode(): boolean;
  *  descriptions (`GET /v1/providers/tools` through that relay); the relay's node token stays the authority. It is not `isSandboxedNode()`,
  *  which gates owner-only commands and launch-snapshot reads on a Linux launcher mount. */
 export declare function providerProjectionOverBrokerRelay(): boolean;
+/** True when this CLI's plugin and marketplace installs are its app's install block on the control plane (`app-plugins.replace` over `/v1`), not
+ *  directories in a scope: a Linux launcher sandbox (`isSandboxedNode()`) or a fleet node reaching `/v1` through its broker relay
+ *  (`providerProjectionOverBrokerRelay()`, which has no launcher mount). The `pkg plugin` and `pkg market` leaves choose their path with it. */
+export declare function installsLiveInAppBlock(): boolean;
 /** The app that owns the current node, supplied in its broker launch identity. */
 export declare function envGrantee(): string | undefined;
 /** Set to '1' by `nodeEnv` for an app-started run's brokers, which admit inbox

package/dist/shared/env.js

@@ -71,6 +71,12 @@ export function isSandboxedNode() {
 export function providerProjectionOverBrokerRelay() {
     return /^https?:\/\//.test(process.env['CRTR_API_URL'] ?? '') && (process.env['CRTR_API_SOCKET'] ?? '') !== '';
 }
+/** True when this CLI's plugin and marketplace installs are its app's install block on the control plane (`app-plugins.replace` over `/v1`), not
+ *  directories in a scope: a Linux launcher sandbox (`isSandboxedNode()`) or a fleet node reaching `/v1` through its broker relay
+ *  (`providerProjectionOverBrokerRelay()`, which has no launcher mount). The `pkg plugin` and `pkg market` leaves choose their path with it. */
+export function installsLiveInAppBlock() {
+    return isSandboxedNode() || providerProjectionOverBrokerRelay();
+}
 /** The app that owns the current node, supplied in its broker launch identity. */
 export function envGrantee() {
     return process.env['CRTR_GRANTEE'];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@north-light/api",
-  "version": "0.3.592",
+  "version": "0.3.593",
   "description": "Typed crtrd /v1 API contract — DTOs, route builders, the error contract, the CrtrClient, and the command-plugin manifest format. Zero runtime dependencies.",
   "type": "module",
   "main": "./dist/api/index.js",