@objectstack/runtime 7.2.0 → 7.3.0

package/dist/index.cjs

@@ -726,6 +726,52 @@ var init_seed_loader = __esm({
   }
 });
 
+// src/package-state-store.ts
+function sanitizeEnvironmentId(environmentId) {
+  const raw = (environmentId ?? process.env.OS_ENVIRONMENT_ID ?? DEFAULT_ENVIRONMENT_ID).trim();
+  const safe = raw.replace(/[^a-zA-Z0-9._-]/g, "_");
+  return safe.length > 0 ? safe : DEFAULT_ENVIRONMENT_ID;
+}
+function stateFilePath(environmentId) {
+  return (0, import_node_path2.join)(resolveObjectStackHome(), "package-state", `${sanitizeEnvironmentId(environmentId)}.json`);
+}
+function readState(environmentId) {
+  const file = stateFilePath(environmentId);
+  if (!(0, import_node_fs.existsSync)(file)) return {};
+  try {
+    const parsed = JSON.parse((0, import_node_fs.readFileSync)(file, "utf8"));
+    return parsed && typeof parsed === "object" ? parsed : {};
+  } catch {
+    return {};
+  }
+}
+function writeState(environmentId, state) {
+  const file = stateFilePath(environmentId);
+  (0, import_node_fs.mkdirSync)((0, import_node_path2.dirname)(file), { recursive: true });
+  (0, import_node_fs.writeFileSync)(file, `${JSON.stringify(state, null, 2)}
+`, "utf8");
+}
+function loadDisabledPackageIds(environmentId) {
+  const disabled = readState(environmentId).disabled;
+  return new Set(Array.isArray(disabled) ? disabled.filter((id) => typeof id === "string") : []);
+}
+function setPackageDisabled(environmentId, packageId, disabled) {
+  const ids = loadDisabledPackageIds(environmentId);
+  if (disabled) ids.add(packageId);
+  else ids.delete(packageId);
+  writeState(environmentId, { disabled: Array.from(ids).sort() });
+}
+var import_node_fs, import_node_path2, DEFAULT_ENVIRONMENT_ID;
+var init_package_state_store = __esm({
+  "src/package-state-store.ts"() {
+    "use strict";
+    import_node_fs = require("fs");
+    import_node_path2 = require("path");
+    init_standalone_stack();
+    DEFAULT_ENVIRONMENT_ID = "default";
+  }
+});
+
 // src/sandbox/quickjs-runner.ts
 function installApiMethod(vm, parent, method, objectName, ctx, caps, required, origin) {
   const fn = vm.newAsyncifiedFunction(method, async (...argHandles) => {
@@ -1284,11 +1330,13 @@ function collectBundleFunctions(bundle) {
   merge(bundle?.manifest?.functions);
   return out;
 }
-var AppPlugin;
+var import_types, AppPlugin;
 var init_app_plugin = __esm({
   "src/app-plugin.ts"() {
     "use strict";
+    import_types = require("@objectstack/types");
     init_seed_loader();
+    init_package_state_store();
     init_quickjs_runner();
     init_body_runner();
     AppPlugin = class {
@@ -1314,6 +1362,24 @@ var init_app_plugin = __esm({
           console.warn(
             `[AppPlugin:init] appId=${appId} keys=${Object.keys(servicePayload).join(",")} flows=${Array.isArray(servicePayload.flows) ? servicePayload.flows.length : "n/a"}`
           );
+          try {
+            const ql = ctx.getService("objectql");
+            const setter = ql?.registry?.setInitialDisabledPackageIds;
+            if (typeof setter === "function") {
+              const disabled = loadDisabledPackageIds(this.projectContext?.environmentId);
+              if (disabled.size > 0) {
+                setter.call(ql.registry, disabled);
+                ctx.logger.info("[AppPlugin] seeded persisted disabled packages", {
+                  environmentId: this.projectContext?.environmentId,
+                  disabled: Array.from(disabled)
+                });
+              }
+            }
+          } catch (err) {
+            ctx.logger.warn("[AppPlugin] failed to seed persisted package state", {
+              error: err?.message ?? String(err)
+            });
+          }
           ctx.getService("manifest").register(servicePayload);
         };
         this.start = async (ctx) => {
@@ -1614,7 +1680,7 @@ var init_app_plugin = __esm({
             } catch (e) {
               ctx.logger.warn("[Seeder] Failed to register seed-datasets/seed-replayer service", { error: e?.message });
             }
-            const multiTenant = String(process.env.OS_MULTI_TENANT ?? "false").toLowerCase() !== "false";
+            const multiTenant = String((0, import_types.readEnvWithDeprecation)("OS_MULTI_ORG_ENABLED", "OS_MULTI_TENANT") ?? "false").toLowerCase() !== "false";
             if (multiTenant) {
               ctx.logger.info("[Seeder] multi-tenant mode \u2014 skipping inline seed; per-org replay will run on sys_organization insert");
             } else {
@@ -1858,6 +1924,170 @@ var init_app_plugin = __esm({
   }
 });
 
+// src/standalone-stack.ts
+function resolveObjectStackHome() {
+  const raw = process.env.OS_HOME?.trim();
+  if (raw && raw.length > 0) {
+    if (raw.startsWith("~")) return (0, import_node_path3.resolve)((0, import_node_os.homedir)(), raw.slice(1).replace(/^[/\\]/, ""));
+    return (0, import_node_path3.resolve)(raw);
+  }
+  return (0, import_node_path3.resolve)((0, import_node_os.homedir)(), ".objectstack");
+}
+function detectDriverFromUrl(dbUrl) {
+  if (/^memory:\/\//i.test(dbUrl)) return "memory";
+  if (/^(postgres(ql)?|pg):\/\//i.test(dbUrl)) return "postgres";
+  if (/^mongodb(\+srv)?:\/\//i.test(dbUrl)) return "mongodb";
+  if (/^wasm-sqlite:\/\//i.test(dbUrl)) return "sqlite-wasm";
+  if (/\.wasm\.db$/i.test(dbUrl)) return "sqlite-wasm";
+  if (/^file:/i.test(dbUrl)) return "sqlite";
+  if (!/^[a-z][a-z0-9+.-]*:\/\//i.test(dbUrl)) return "sqlite";
+  throw new Error(
+    `[StandaloneStack] Unsupported database URL scheme: ${dbUrl}. Supported schemes: memory://, postgres://, pg://, mongodb://, mongodb+srv://, file:`
+  );
+}
+async function createStandaloneStack(config) {
+  const cfg = StandaloneStackConfigSchema.parse(config ?? {});
+  const { ObjectQLPlugin } = await import("@objectstack/objectql");
+  const { MetadataPlugin } = await import("@objectstack/metadata");
+  const { DriverPlugin: DriverPlugin2 } = await Promise.resolve().then(() => (init_driver_plugin(), driver_plugin_exports));
+  const { AppPlugin: AppPlugin2 } = await Promise.resolve().then(() => (init_app_plugin(), app_plugin_exports));
+  const cwd = process.cwd();
+  const environmentId = cfg.environmentId ?? process.env.OS_ENVIRONMENT_ID ?? "proj_local";
+  const artifactPathInput = cfg.artifactPath ?? process.env.OS_ARTIFACT_PATH ?? (0, import_node_path3.resolve)(cwd, "dist/objectstack.json");
+  const artifactPath = isHttpUrl(artifactPathInput) ? artifactPathInput : artifactPathInput.startsWith("/") ? artifactPathInput : (0, import_node_path3.resolve)(cwd, artifactPathInput);
+  const dbUrl = cfg.databaseUrl ?? (0, import_types2.readEnvWithDeprecation)("OS_DATABASE_URL", "DATABASE_URL")?.trim() ?? process.env.TURSO_DATABASE_URL?.trim() ?? (process.env.OS_HOME?.trim() ? `file:${(0, import_node_path3.resolve)(resolveObjectStackHome(), "data/standalone.db")}` : cfg.projectRoot ? `file:${(0, import_node_path3.resolve)(cfg.projectRoot, ".objectstack/data/standalone.db")}` : `file:${(0, import_node_path3.resolve)(resolveObjectStackHome(), "data/standalone.db")}`);
+  const explicitDriver = cfg.databaseDriver ?? process.env.OS_DATABASE_DRIVER?.trim();
+  const dbDriver = explicitDriver ?? detectDriverFromUrl(dbUrl);
+  let driverPlugin;
+  if (dbDriver === "memory") {
+    const { InMemoryDriver } = await import("@objectstack/driver-memory");
+    driverPlugin = new DriverPlugin2(new InMemoryDriver());
+  } else if (dbDriver === "postgres") {
+    const { SqlDriver } = await import("@objectstack/driver-sql");
+    driverPlugin = new DriverPlugin2(
+      new SqlDriver({
+        client: "pg",
+        connection: dbUrl,
+        pool: { min: 0, max: 5 }
+      })
+    );
+  } else if (dbDriver === "mongodb") {
+    let MongoDBDriver;
+    try {
+      ({ MongoDBDriver } = await import("@objectstack/driver-mongodb"));
+    } catch (err) {
+      throw new Error(
+        `[StandaloneStack] mongodb URL detected but @objectstack/driver-mongodb is not installed. Add it as a dependency or pass an explicit driverPlugin. (${err?.message ?? err})`
+      );
+    }
+    driverPlugin = new DriverPlugin2(new MongoDBDriver({ url: dbUrl }));
+  } else if (dbDriver === "sqlite-wasm") {
+    const { SqliteWasmDriver } = await import("@objectstack/driver-sqlite-wasm");
+    const filename = dbUrl.replace(/^wasm-sqlite:(\/\/)?/i, "").replace(/^file:(\/\/)?/i, "");
+    if (filename && filename !== ":memory:") {
+      (0, import_node_fs2.mkdirSync)((0, import_node_path3.resolve)(filename, ".."), { recursive: true });
+    }
+    driverPlugin = new DriverPlugin2(
+      new SqliteWasmDriver({
+        filename: filename || ":memory:",
+        persist: filename && filename !== ":memory:" ? "on-write" : void 0
+      })
+    );
+  } else {
+    const { SqlDriver } = await import("@objectstack/driver-sql");
+    const filename = dbUrl.replace(/^file:(\/\/)?/, "");
+    if (!filename || /^[a-z][a-z0-9+.-]*:\/\//i.test(filename)) {
+      throw new Error(
+        `[StandaloneStack] sqlite driver was selected but the URL does not look like a file path: "${dbUrl}". Use file:/path/to/db.sqlite, or set OS_DATABASE_DRIVER explicitly.`
+      );
+    }
+    (0, import_node_fs2.mkdirSync)((0, import_node_path3.resolve)(filename, ".."), { recursive: true });
+    driverPlugin = new DriverPlugin2(
+      new SqlDriver({
+        client: "better-sqlite3",
+        connection: { filename },
+        useNullAsDefault: true
+      })
+    );
+  }
+  const artifactBundle = await loadArtifactBundle(artifactPath, {
+    tag: "[StandaloneStack]",
+    unwrapEnvelope: true
+  });
+  if (artifactBundle) {
+    const flowsCount = Array.isArray(artifactBundle?.flows) ? artifactBundle.flows.length : "n/a";
+    console.warn(
+      `[StandaloneStack] artifact loaded: path=${artifactPath} keys=${Object.keys(artifactBundle).join(",")} flows=${flowsCount}`
+    );
+  }
+  const plugins = [
+    driverPlugin,
+    new MetadataPlugin({
+      // Source-file scanner OFF — declarative metadata is loaded
+      // from the compiled artifact, not from yaml/json files on
+      // disk. Scanning would also recursively watch the project
+      // root (incl. node_modules), which is expensive and prone
+      // to EMFILE.
+      watch: false,
+      // Artifact-file HMR ON in non-production so edits to
+      // `*.view.ts` / `*.flow.ts` (which the CLI dev-mode watcher
+      // recompiles into `dist/objectstack.json`) are picked up by
+      // the running server WITHOUT requiring a manual restart.
+      // Uses polling under the hood (see plugin.ts) to avoid
+      // `fs.watch` EMFILE on macOS / busy dev hosts.
+      artifactWatch: process.env.NODE_ENV !== "production",
+      environmentId,
+      artifactSource: { mode: "local-file", path: artifactPath }
+    }),
+    new ObjectQLPlugin({ environmentId })
+  ];
+  if (artifactBundle) plugins.push(new AppPlugin2(artifactBundle));
+  const requires = Array.isArray(artifactBundle?.requires) ? artifactBundle.requires.filter((c) => typeof c === "string") : void 0;
+  const objects = Array.isArray(artifactBundle?.objects) ? artifactBundle.objects : void 0;
+  const manifest = artifactBundle?.manifest;
+  return {
+    plugins,
+    api: {
+      enableProjectScoping: false,
+      projectResolution: "none"
+    },
+    ...requires ? { requires } : {},
+    ...objects ? { objects } : {},
+    ...manifest ? { manifest } : {}
+  };
+}
+var import_node_path3, import_node_fs2, import_node_os, import_zod, import_types2, StandaloneStackConfigSchema;
+var init_standalone_stack = __esm({
+  "src/standalone-stack.ts"() {
+    "use strict";
+    import_node_path3 = require("path");
+    import_node_fs2 = require("fs");
+    import_node_os = require("os");
+    import_zod = require("zod");
+    import_types2 = require("@objectstack/types");
+    init_load_artifact_bundle();
+    StandaloneStackConfigSchema = import_zod.z.object({
+      databaseUrl: import_zod.z.string().optional(),
+      databaseAuthToken: import_zod.z.string().optional(),
+      databaseDriver: import_zod.z.enum(["sqlite", "sqlite-wasm", "memory", "postgres", "mongodb"]).optional(),
+      environmentId: import_zod.z.string().optional(),
+      artifactPath: import_zod.z.string().optional(),
+      /**
+       * Project root directory. When set (typically by the CLI after locating
+       * `objectstack.config.ts`), the default sqlite database is placed under
+       * `<projectRoot>/.objectstack/data/standalone.db` instead of the global
+       * `~/.objectstack/data/standalone.db`. This keeps per-project data
+       * scoped to the project folder so different examples / apps don't
+       * share a single database by accident.
+       *
+       * Explicit `databaseUrl` / `OS_DATABASE_URL` / `OS_HOME` still take
+       * precedence over this default.
+       */
+      projectRoot: import_zod.z.string().optional()
+    });
+  }
+});
+
 // src/cloud/platform-sso.ts
 var platform_sso_exports = {};
 __export(platform_sso_exports, {
@@ -2249,6 +2479,7 @@ __export(index_exports, {
   SandboxError: () => SandboxError,
   SeedLoaderService: () => SeedLoaderService,
   UnimplementedScriptRunner: () => UnimplementedScriptRunner,
+  _resetEnvDeprecationWarnings: () => import_types6._resetEnvDeprecationWarnings,
   actionBodyRunnerFactory: () => actionBodyRunnerFactory,
   backfillPlatformSsoClients: () => backfillPlatformSsoClients,
   buildPlatformSsoRedirectUri: () => buildPlatformSsoRedirectUri,
@@ -2273,6 +2504,7 @@ __export(index_exports, {
   mergeRuntimeModule: () => mergeRuntimeModule,
   parseTraceparent: () => parseTraceparent,
   readArtifactSource: () => readArtifactSource,
+  readEnvWithDeprecation: () => import_types6.readEnvWithDeprecation,
   resolveCloudUrl: () => resolveCloudUrl,
   resolveDefaultArtifactPath: () => resolveDefaultArtifactPath,
   resolveErrorReporter: () => resolveErrorReporter,
@@ -2330,172 +2562,19 @@ var Runtime = class {
   }
 };
 
-// src/standalone-stack.ts
-var import_node_path2 = require("path");
-var import_node_fs = require("fs");
-var import_node_os = require("os");
-var import_zod = require("zod");
-init_load_artifact_bundle();
-function resolveObjectStackHome() {
-  const raw = process.env.OS_HOME?.trim();
-  if (raw && raw.length > 0) {
-    if (raw.startsWith("~")) return (0, import_node_path2.resolve)((0, import_node_os.homedir)(), raw.slice(1).replace(/^[/\\]/, ""));
-    return (0, import_node_path2.resolve)(raw);
-  }
-  return (0, import_node_path2.resolve)((0, import_node_os.homedir)(), ".objectstack");
-}
-var StandaloneStackConfigSchema = import_zod.z.object({
-  databaseUrl: import_zod.z.string().optional(),
-  databaseAuthToken: import_zod.z.string().optional(),
-  databaseDriver: import_zod.z.enum(["sqlite", "sqlite-wasm", "memory", "postgres", "mongodb"]).optional(),
-  environmentId: import_zod.z.string().optional(),
-  artifactPath: import_zod.z.string().optional(),
-  /**
-   * Project root directory. When set (typically by the CLI after locating
-   * `objectstack.config.ts`), the default sqlite database is placed under
-   * `<projectRoot>/.objectstack/data/standalone.db` instead of the global
-   * `~/.objectstack/data/standalone.db`. This keeps per-project data
-   * scoped to the project folder so different examples / apps don't
-   * share a single database by accident.
-   *
-   * Explicit `databaseUrl` / `OS_DATABASE_URL` / `OS_HOME` still take
-   * precedence over this default.
-   */
-  projectRoot: import_zod.z.string().optional()
-});
-function detectDriverFromUrl(dbUrl) {
-  if (/^memory:\/\//i.test(dbUrl)) return "memory";
-  if (/^(postgres(ql)?|pg):\/\//i.test(dbUrl)) return "postgres";
-  if (/^mongodb(\+srv)?:\/\//i.test(dbUrl)) return "mongodb";
-  if (/^wasm-sqlite:\/\//i.test(dbUrl)) return "sqlite-wasm";
-  if (/\.wasm\.db$/i.test(dbUrl)) return "sqlite-wasm";
-  if (/^file:/i.test(dbUrl)) return "sqlite";
-  if (!/^[a-z][a-z0-9+.-]*:\/\//i.test(dbUrl)) return "sqlite";
-  throw new Error(
-    `[StandaloneStack] Unsupported database URL scheme: ${dbUrl}. Supported schemes: memory://, postgres://, pg://, mongodb://, mongodb+srv://, file:`
-  );
-}
-async function createStandaloneStack(config) {
-  const cfg = StandaloneStackConfigSchema.parse(config ?? {});
-  const { ObjectQLPlugin } = await import("@objectstack/objectql");
-  const { MetadataPlugin } = await import("@objectstack/metadata");
-  const { DriverPlugin: DriverPlugin2 } = await Promise.resolve().then(() => (init_driver_plugin(), driver_plugin_exports));
-  const { AppPlugin: AppPlugin2 } = await Promise.resolve().then(() => (init_app_plugin(), app_plugin_exports));
-  const cwd = process.cwd();
-  const environmentId = cfg.environmentId ?? process.env.OS_ENVIRONMENT_ID ?? "proj_local";
-  const artifactPathInput = cfg.artifactPath ?? process.env.OS_ARTIFACT_PATH ?? (0, import_node_path2.resolve)(cwd, "dist/objectstack.json");
-  const artifactPath = isHttpUrl(artifactPathInput) ? artifactPathInput : artifactPathInput.startsWith("/") ? artifactPathInput : (0, import_node_path2.resolve)(cwd, artifactPathInput);
-  const dbUrl = cfg.databaseUrl ?? process.env.OS_DATABASE_URL?.trim() ?? process.env.TURSO_DATABASE_URL?.trim() ?? (process.env.OS_HOME?.trim() ? `file:${(0, import_node_path2.resolve)(resolveObjectStackHome(), "data/standalone.db")}` : cfg.projectRoot ? `file:${(0, import_node_path2.resolve)(cfg.projectRoot, ".objectstack/data/standalone.db")}` : `file:${(0, import_node_path2.resolve)(resolveObjectStackHome(), "data/standalone.db")}`);
-  const explicitDriver = cfg.databaseDriver ?? process.env.OS_DATABASE_DRIVER?.trim();
-  const dbDriver = explicitDriver ?? detectDriverFromUrl(dbUrl);
-  let driverPlugin;
-  if (dbDriver === "memory") {
-    const { InMemoryDriver } = await import("@objectstack/driver-memory");
-    driverPlugin = new DriverPlugin2(new InMemoryDriver());
-  } else if (dbDriver === "postgres") {
-    const { SqlDriver } = await import("@objectstack/driver-sql");
-    driverPlugin = new DriverPlugin2(
-      new SqlDriver({
-        client: "pg",
-        connection: dbUrl,
-        pool: { min: 0, max: 5 }
-      })
-    );
-  } else if (dbDriver === "mongodb") {
-    let MongoDBDriver;
-    try {
-      ({ MongoDBDriver } = await import("@objectstack/driver-mongodb"));
-    } catch (err) {
-      throw new Error(
-        `[StandaloneStack] mongodb URL detected but @objectstack/driver-mongodb is not installed. Add it as a dependency or pass an explicit driverPlugin. (${err?.message ?? err})`
-      );
-    }
-    driverPlugin = new DriverPlugin2(new MongoDBDriver({ url: dbUrl }));
-  } else if (dbDriver === "sqlite-wasm") {
-    const { SqliteWasmDriver } = await import("@objectstack/driver-sqlite-wasm");
-    const filename = dbUrl.replace(/^wasm-sqlite:(\/\/)?/i, "").replace(/^file:(\/\/)?/i, "");
-    if (filename && filename !== ":memory:") {
-      (0, import_node_fs.mkdirSync)((0, import_node_path2.resolve)(filename, ".."), { recursive: true });
-    }
-    driverPlugin = new DriverPlugin2(
-      new SqliteWasmDriver({
-        filename: filename || ":memory:",
-        persist: filename && filename !== ":memory:" ? "on-write" : void 0
-      })
-    );
-  } else {
-    const { SqlDriver } = await import("@objectstack/driver-sql");
-    const filename = dbUrl.replace(/^file:(\/\/)?/, "");
-    if (!filename || /^[a-z][a-z0-9+.-]*:\/\//i.test(filename)) {
-      throw new Error(
-        `[StandaloneStack] sqlite driver was selected but the URL does not look like a file path: "${dbUrl}". Use file:/path/to/db.sqlite, or set OS_DATABASE_DRIVER explicitly.`
-      );
-    }
-    (0, import_node_fs.mkdirSync)((0, import_node_path2.resolve)(filename, ".."), { recursive: true });
-    driverPlugin = new DriverPlugin2(
-      new SqlDriver({
-        client: "better-sqlite3",
-        connection: { filename },
-        useNullAsDefault: true
-      })
-    );
-  }
-  const artifactBundle = await loadArtifactBundle(artifactPath, {
-    tag: "[StandaloneStack]",
-    unwrapEnvelope: true
-  });
-  if (artifactBundle) {
-    const flowsCount = Array.isArray(artifactBundle?.flows) ? artifactBundle.flows.length : "n/a";
-    console.warn(
-      `[StandaloneStack] artifact loaded: path=${artifactPath} keys=${Object.keys(artifactBundle).join(",")} flows=${flowsCount}`
-    );
-  }
-  const plugins = [
-    driverPlugin,
-    new MetadataPlugin({
-      // Source-file scanner OFF — declarative metadata is loaded
-      // from the compiled artifact, not from yaml/json files on
-      // disk. Scanning would also recursively watch the project
-      // root (incl. node_modules), which is expensive and prone
-      // to EMFILE.
-      watch: false,
-      // Artifact-file HMR ON in non-production so edits to
-      // `*.view.ts` / `*.flow.ts` (which the CLI dev-mode watcher
-      // recompiles into `dist/objectstack.json`) are picked up by
-      // the running server WITHOUT requiring a manual restart.
-      // Uses polling under the hood (see plugin.ts) to avoid
-      // `fs.watch` EMFILE on macOS / busy dev hosts.
-      artifactWatch: process.env.NODE_ENV !== "production",
-      environmentId,
-      artifactSource: { mode: "local-file", path: artifactPath }
-    }),
-    new ObjectQLPlugin({ environmentId })
-  ];
-  if (artifactBundle) plugins.push(new AppPlugin2(artifactBundle));
-  const requires = Array.isArray(artifactBundle?.requires) ? artifactBundle.requires.filter((c) => typeof c === "string") : void 0;
-  const objects = Array.isArray(artifactBundle?.objects) ? artifactBundle.objects : void 0;
-  const manifest = artifactBundle?.manifest;
-  return {
-    plugins,
-    api: {
-      enableProjectScoping: false,
-      projectResolution: "none"
-    },
-    ...requires ? { requires } : {},
-    ...objects ? { objects } : {},
-    ...manifest ? { manifest } : {}
-  };
-}
+// src/index.ts
+init_standalone_stack();
 
 // src/default-host.ts
-var import_node_path3 = require("path");
-var import_node_fs2 = require("fs");
+var import_node_path4 = require("path");
+var import_node_fs3 = require("fs");
+init_standalone_stack();
 init_load_artifact_bundle();
 function resolveDefaultArtifactPath(explicitPath, cwd = process.cwd()) {
-  const candidate = explicitPath ?? process.env.OS_ARTIFACT_PATH ?? (0, import_node_path3.resolve)(cwd, "dist/objectstack.json");
+  const candidate = explicitPath ?? process.env.OS_ARTIFACT_PATH ?? (0, import_node_path4.resolve)(cwd, "dist/objectstack.json");
   if (isHttpUrl(candidate)) return candidate;
   if (explicitPath || process.env.OS_ARTIFACT_PATH) return candidate;
-  return (0, import_node_fs2.existsSync)(candidate) ? candidate : void 0;
+  return (0, import_node_fs3.existsSync)(candidate) ? candidate : void 0;
 }
 async function createDefaultHostConfig(options = {}) {
   const { requireArtifact = true, ...standaloneOpts } = options;
@@ -2507,10 +2586,10 @@ async function createDefaultHostConfig(options = {}) {
   }
   if (!resolvedArtifact && !requireArtifact) {
     const home = resolveObjectStackHome();
-    const stubPath = (0, import_node_path3.resolve)(home, "dist/objectstack.json");
-    if (!(0, import_node_fs2.existsSync)(stubPath)) {
-      (0, import_node_fs2.mkdirSync)((0, import_node_path3.resolve)(stubPath, ".."), { recursive: true });
-      (0, import_node_fs2.writeFileSync)(
+    const stubPath = (0, import_node_path4.resolve)(home, "dist/objectstack.json");
+    if (!(0, import_node_fs3.existsSync)(stubPath)) {
+      (0, import_node_fs3.mkdirSync)((0, import_node_path4.resolve)(stubPath, ".."), { recursive: true });
+      (0, import_node_fs3.writeFileSync)(
         stubPath,
         JSON.stringify(
           {
@@ -2548,8 +2627,10 @@ init_seed_loader();
 
 // src/http-dispatcher.ts
 var import_core2 = require("@objectstack/core");
+var import_types3 = require("@objectstack/types");
 var import_system = require("@objectstack/spec/system");
 var import_shared = require("@objectstack/spec/shared");
+init_package_state_store();
 
 // src/security/resolve-execution-context.ts
 function readHeader(headers, name) {
@@ -3404,7 +3485,7 @@ var _HttpDispatcher = class _HttpDispatcher {
         if (protocol && typeof protocol.saveMetaItem === "function") {
           try {
             const organizationId = await this.resolveActiveOrganizationId(_context);
-            const result = await protocol.saveMetaItem({ type, name, item: body, organizationId });
+            const result = await protocol.saveMetaItem({ type, name, item: body, organizationId, ...packageId ? { packageId } : {} });
             return { handled: true, response: this.success(result) };
           } catch (e) {
             return { handled: true, response: this.error(e.message, 400) };
@@ -3744,12 +3825,22 @@ var _HttpDispatcher = class _HttpDispatcher {
         const id = decodeURIComponent(parts[0]);
         const pkg = registry.enablePackage(id);
         if (!pkg) return { handled: true, response: this.error(`Package '${id}' not found`, 404) };
+        try {
+          setPackageDisabled(_context?.environmentId, id, false);
+        } catch (err) {
+          console.warn("[handlePackages] failed to persist enable state", { id, error: err?.message });
+        }
         return { handled: true, response: this.success(pkg) };
       }
       if (parts.length === 2 && parts[1] === "disable" && m === "PATCH") {
         const id = decodeURIComponent(parts[0]);
         const pkg = registry.disablePackage(id);
         if (!pkg) return { handled: true, response: this.error(`Package '${id}' not found`, 404) };
+        try {
+          setPackageDisabled(_context?.environmentId, id, true);
+        } catch (err) {
+          console.warn("[handlePackages] failed to persist disable state", { id, error: err?.message });
+        }
         return { handled: true, response: this.success(pkg) };
       }
       if (parts.length === 2 && parts[1] === "publish" && m === "POST") {
@@ -3770,6 +3861,14 @@ var _HttpDispatcher = class _HttpDispatcher {
         }
         return { handled: true, response: this.error("Metadata service not available", 503) };
       }
+      if (parts.length === 2 && parts[1] === "export" && m === "GET") {
+        const id = decodeURIComponent(parts[0]);
+        const manifest = await this.assemblePackageManifest(id, registry, _context);
+        if (!manifest) {
+          return { handled: true, response: this.error(`Package '${id}' not found`, 404) };
+        }
+        return { handled: true, response: this.success(manifest) };
+      }
       if (parts.length === 1 && m === "GET") {
         const id = decodeURIComponent(parts[0]);
         const pkg = registry.getPackage(id);
@@ -3787,6 +3886,83 @@ var _HttpDispatcher = class _HttpDispatcher {
     }
     return { handled: false };
   }
+  /**
+   * Assemble a portable, offline-installable package manifest from the
+   * `sys_metadata` overlay rows bound to `packageId`.
+   *
+   * The resulting shape mirrors what `marketplace-install-local` →
+   * `manifestService.register()` → `engine.registerApp()` consumes:
+   *   `{ id, name, version, objects:[…], views:[…], flows:[…], … }`
+   * where each category key is the PLURAL manifest name and its value is
+   * an array of clean metadata bodies (provenance decorations stripped).
+   *
+   * Only the metadata categories that `registerApp` can actually consume
+   * are exported. `datasources` and `emailTemplates` are intentionally
+   * excluded (not registered by the import path). `tools` / `skills` ARE
+   * round-tripped: they are registered by `registerApp` on import and
+   * surfaced by `getMetaItems('tool' | 'skill')` on export.
+   *
+   * @returns the manifest object, or `null` if the package id is unknown
+   *          AND has no overlay-authored metadata.
+   */
+  async assemblePackageManifest(packageId, registry, context) {
+    const protocol = await this.resolveService("protocol");
+    if (!protocol || typeof protocol.getMetaItems !== "function") return null;
+    const organizationId = await this.resolveActiveOrganizationId(context);
+    const PROVENANCE_KEYS = /* @__PURE__ */ new Set([
+      "_packageId",
+      "_packageVersionId",
+      "_provenance",
+      "_state",
+      "_version",
+      "_organizationId",
+      "_source",
+      "_id",
+      "_rowId"
+    ]);
+    const clean = (item) => {
+      if (!item || typeof item !== "object") return item;
+      const out = {};
+      for (const [k, v] of Object.entries(item)) {
+        if (k.startsWith("_") || PROVENANCE_KEYS.has(k)) continue;
+        out[k] = v;
+      }
+      return out;
+    };
+    const exportPluralKeys = Object.keys(import_shared.PLURAL_TO_SINGULAR).filter(
+      (k) => k !== "datasources" && k !== "emailTemplates"
+    );
+    const manifest = {};
+    let total = 0;
+    for (const plural of exportPluralKeys) {
+      const singular = import_shared.PLURAL_TO_SINGULAR[plural];
+      let items = [];
+      try {
+        const res = await protocol.getMetaItems({ type: singular, packageId, organizationId });
+        items = Array.isArray(res?.items) ? res.items : [];
+      } catch {
+        continue;
+      }
+      if (items.length === 0) continue;
+      manifest[plural] = items.map(clean);
+      total += items.length;
+    }
+    const pkg = (() => {
+      try {
+        return registry?.getPackage?.(packageId);
+      } catch {
+        return void 0;
+      }
+    })();
+    if (total === 0 && !pkg) return null;
+    manifest.id = packageId;
+    manifest.name = pkg?.manifest?.name ?? pkg?.name ?? packageId;
+    manifest.version = pkg?.manifest?.version ?? pkg?.version ?? "1.0.0";
+    if (pkg?.manifest?.label ?? pkg?.label) {
+      manifest.label = pkg?.manifest?.label ?? pkg?.label;
+    }
+    return manifest;
+  }
   /**
    * Cloud / Environment Control-Plane routes.
    *
@@ -4038,7 +4214,7 @@ var _HttpDispatcher = class _HttpDispatcher {
         }
       }
       if (parts.length === 3 && parts[0] === "admin" && parts[1] === "platform-sso" && parts[2] === "backfill" && m === "POST") {
-        const baseSecret = (process.env.OS_AUTH_SECRET ?? process.env.AUTH_SECRET ?? "").trim();
+        const baseSecret = ((0, import_types3.readEnvWithDeprecation)("OS_AUTH_SECRET", ["AUTH_SECRET", "BETTER_AUTH_SECRET"]) ?? "").trim();
         if (!baseSecret) {
           return { handled: true, response: this.error("OS_AUTH_SECRET not configured on this worker", 503) };
         }
@@ -4228,7 +4404,7 @@ var _HttpDispatcher = class _HttpDispatcher {
         });
         try {
           const { seedPlatformSsoClient: seedPlatformSsoClient2 } = await Promise.resolve().then(() => (init_platform_sso(), platform_sso_exports));
-          const baseSecret = (process.env.OS_AUTH_SECRET ?? process.env.AUTH_SECRET ?? "").trim();
+          const baseSecret = ((0, import_types3.readEnvWithDeprecation)("OS_AUTH_SECRET", ["AUTH_SECRET", "BETTER_AUTH_SECRET"]) ?? "").trim();
           if (baseSecret) {
             await seedPlatformSsoClient2({
               ql,
@@ -6369,6 +6545,14 @@ function createDispatcherPlugin(config = {}) {
           errorResponse(err, res);
         }
       });
+      server.get(`${prefix}/packages/:id/export`, async (req, res) => {
+        try {
+          const result = await dispatcher.handlePackages(`/${req.params.id}/export`, "GET", {}, req.query, { request: req });
+          sendResult(result, res);
+        } catch (err) {
+          errorResponse(err, res);
+        }
+      });
       server.get(`${prefix}/packages/:id`, async (req, res) => {
         try {
           const result = await dispatcher.handlePackages(`/${req.params.id}`, "GET", {}, req.query, { request: req });
@@ -7476,7 +7660,7 @@ var ArtifactApiClient = class {
 };
 
 // src/cloud/artifact-environment-registry.ts
-var import_node_path4 = require("path");
+var import_node_path5 = require("path");
 var ArtifactEnvironmentRegistry = class {
   constructor(config) {
     this.hostnameCache = /* @__PURE__ */ new Map();
@@ -7648,7 +7832,7 @@ async function createDriver(driverType, databaseUrl, authToken) {
     case "memory": {
       const { InMemoryDriver } = await import("@objectstack/driver-memory");
       const dbName = databaseUrl.replace(/^memory:\/\//, "").trim();
-      const filePath = dbName ? (0, import_node_path4.resolve)(process.cwd(), ".objectstack/data/projects", `${dbName}.json`) : void 0;
+      const filePath = dbName ? (0, import_node_path5.resolve)(process.cwd(), ".objectstack/data/projects", `${dbName}.json`) : void 0;
       return new InMemoryDriver({
         persistence: filePath ? { type: "file", path: filePath } : "file"
       });
@@ -7686,6 +7870,7 @@ async function createDriver(driverType, databaseUrl, authToken) {
 // src/cloud/artifact-kernel-factory.ts
 var import_node_crypto2 = require("crypto");
 var import_core3 = require("@objectstack/core");
+var import_types4 = require("@objectstack/types");
 init_driver_plugin();
 init_app_plugin();
 
@@ -7825,7 +8010,7 @@ var ArtifactKernelFactory = class {
     this.envRegistry = config.envRegistry;
     this.logger = config.logger ?? console;
     this.kernelConfig = config.kernelConfig;
-    this.authBaseSecret = (config.authBaseSecret ?? process.env.OS_AUTH_SECRET ?? process.env.AUTH_SECRET ?? "").trim();
+    this.authBaseSecret = (config.authBaseSecret ?? (0, import_types4.readEnvWithDeprecation)("OS_AUTH_SECRET", ["AUTH_SECRET", "BETTER_AUTH_SECRET"]) ?? "").trim();
   }
   async create(environmentId) {
     let cached = this.envRegistry.peekById(environmentId);
@@ -7938,7 +8123,7 @@ var ArtifactKernelFactory = class {
       this.logger.warn?.("[ArtifactKernelFactory] OS_AUTH_SECRET not set \u2014 per-project AuthPlugin skipped (auth endpoints will return 404)", { environmentId });
     }
     try {
-      const multiTenant = String(process.env.OS_MULTI_TENANT ?? "false").toLowerCase() !== "false";
+      const multiTenant = String((0, import_types4.readEnvWithDeprecation)("OS_MULTI_ORG_ENABLED", "OS_MULTI_TENANT") ?? "false").toLowerCase() !== "false";
       if (multiTenant) {
         try {
           const { OrgScopingPlugin } = await import("@objectstack/plugin-org-scoping");
@@ -8464,7 +8649,7 @@ var AuthProxyPlugin = class {
 };
 
 // src/cloud/cloud-url.ts
-var DEFAULT_CLOUD_URL = "https://cloud.objectos.app";
+var DEFAULT_CLOUD_URL = "https://cloud.objectos.ai";
 function resolveCloudUrl(explicit) {
   const raw = (explicit ?? process.env.OS_CLOUD_URL ?? "").trim();
   const lower = raw.toLowerCase();
@@ -8886,11 +9071,11 @@ var RuntimeConfigPlugin = class {
 
 // src/cloud/file-artifact-api-client.ts
 var import_promises2 = require("fs/promises");
-var import_node_path5 = require("path");
+var import_node_path6 = require("path");
 var FileArtifactApiClient = class {
   constructor(config = {}) {
     const cwd = process.cwd();
-    this.artifactPath = (0, import_node_path5.resolve)(
+    this.artifactPath = (0, import_node_path6.resolve)(
       cwd,
       config.artifactPath ?? process.env.OS_ARTIFACT_PATH ?? "dist/objectstack.json"
     );
@@ -8986,7 +9171,7 @@ var FileArtifactApiClient = class {
   }
   defaultLocalSqliteRuntime() {
     const cwd = process.cwd();
-    const dbPath = (0, import_node_path5.resolve)(cwd, ".objectstack/data", `${this.environmentId}.db`);
+    const dbPath = (0, import_node_path6.resolve)(cwd, ".objectstack/data", `${this.environmentId}.db`);
     return {
       databaseDriver: "sqlite",
       databaseUrl: `file:${dbPath}`
@@ -9139,8 +9324,9 @@ async function createObjectOSStack(config) {
 }
 
 // src/cloud/marketplace-install-local-plugin.ts
-var import_node_fs3 = require("fs");
-var import_node_path6 = require("path");
+var import_node_fs4 = require("fs");
+var import_node_path7 = require("path");
+var import_types5 = require("@objectstack/types");
 var ROUTE_BASE = "/api/v1/marketplace/install-local";
 var DEFAULT_DIR = ".objectstack/installed-packages";
 function safeFilename(manifestId) {
@@ -9215,9 +9401,6 @@ var MarketplaceInstallLocalPlugin = class {
       }
     };
     this.handleInstall = async (c, ctx) => {
-      if (!this.cloudUrl) {
-        return c.json({ success: false, error: { code: "marketplace_unavailable", message: "OS_CLOUD_URL not configured." } }, 503);
-      }
       const userId = await this.requireAuthenticatedUser(c, ctx);
       if (!userId) {
         return c.json({ success: false, error: { code: "unauthorized", message: "Authentication required to install packages." } }, 401);
@@ -9227,69 +9410,87 @@ var MarketplaceInstallLocalPlugin = class {
         body = await c.req.json();
       } catch {
       }
-      const packageId = String(body?.packageId ?? "").trim();
-      const versionId = String(body?.versionId ?? "latest").trim() || "latest";
-      if (!packageId) {
-        return c.json({ success: false, error: { code: "bad_request", message: "packageId is required." } }, 400);
-      }
-      let payload;
-      const publicBase = resolveMarketplacePublicBaseUrl();
-      const fetchAttempts = [];
-      if (publicBase) {
+      const inlineManifest = body?.manifest && typeof body.manifest === "object" ? body.manifest : null;
+      let manifest;
+      let resolvedVersionId;
+      let version;
+      let packageId;
+      if (inlineManifest) {
+        manifest = inlineManifest;
+        packageId = String(manifest.id ?? manifest.name ?? "").trim();
+        version = String(manifest.version ?? "unknown");
+        resolvedVersionId = String(body?.versionId ?? version);
+        if (!packageId) {
+          return c.json({ success: false, error: { code: "invalid_manifest", message: 'Inline manifest must have an "id" or "name".' } }, 400);
+        }
+      } else {
+        if (!this.cloudUrl) {
+          return c.json({ success: false, error: { code: "marketplace_unavailable", message: "OS_CLOUD_URL not configured." } }, 503);
+        }
+        packageId = String(body?.packageId ?? "").trim();
+        const versionId = String(body?.versionId ?? "latest").trim() || "latest";
+        if (!packageId) {
+          return c.json({ success: false, error: { code: "bad_request", message: "packageId is required." } }, 400);
+        }
+        let payload;
+        const publicBase = resolveMarketplacePublicBaseUrl();
+        const fetchAttempts = [];
+        if (publicBase) {
+          fetchAttempts.push({
+            label: "public-r2",
+            url: `${publicBase}/packages/${encodeURIComponent(packageId)}/versions/${encodeURIComponent(versionId)}/manifest.json`
+          });
+        }
         fetchAttempts.push({
-          label: "public-r2",
-          url: `${publicBase}/packages/${encodeURIComponent(packageId)}/versions/${encodeURIComponent(versionId)}/manifest.json`
+          label: "cloud",
+          url: `${this.cloudUrl}/api/v1/marketplace/packages/${encodeURIComponent(packageId)}/versions/${encodeURIComponent(versionId)}/manifest`
         });
-      }
-      fetchAttempts.push({
-        label: "cloud",
-        url: `${this.cloudUrl}/api/v1/marketplace/packages/${encodeURIComponent(packageId)}/versions/${encodeURIComponent(versionId)}/manifest`
-      });
-      let lastErrStatus = 0;
-      let lastErrText = "";
-      for (const attempt of fetchAttempts) {
-        try {
-          const resp = await fetch(attempt.url, { headers: { "Accept": "application/json" } });
-          if (!resp.ok) {
-            lastErrStatus = resp.status;
-            lastErrText = (await resp.text().catch(() => "")).slice(0, 200);
-            if (attempt.label === "public-r2" && resp.status === 404) {
-              ctx.logger?.info?.(`[MarketplaceInstallLocal] public-r2 miss for ${packageId}@${versionId}, falling back to cloud`);
-              continue;
+        let lastErrStatus = 0;
+        let lastErrText = "";
+        for (const attempt of fetchAttempts) {
+          try {
+            const resp = await fetch(attempt.url, { headers: { "Accept": "application/json" } });
+            if (!resp.ok) {
+              lastErrStatus = resp.status;
+              lastErrText = (await resp.text().catch(() => "")).slice(0, 200);
+              if (attempt.label === "public-r2" && resp.status === 404) {
+                ctx.logger?.info?.(`[MarketplaceInstallLocal] public-r2 miss for ${packageId}@${versionId}, falling back to cloud`);
+                continue;
+              }
+              if (attempt.label === "public-r2" && resp.status >= 500) {
+                ctx.logger?.warn?.(`[MarketplaceInstallLocal] public-r2 ${resp.status}, falling back to cloud`);
+                continue;
+              }
+              break;
             }
-            if (attempt.label === "public-r2" && resp.status >= 500) {
-              ctx.logger?.warn?.(`[MarketplaceInstallLocal] public-r2 ${resp.status}, falling back to cloud`);
+            payload = await resp.json();
+            lastErrStatus = 0;
+            break;
+          } catch (err) {
+            if (attempt.label === "public-r2") {
+              ctx.logger?.warn?.(`[MarketplaceInstallLocal] public-r2 fetch error: ${err?.message ?? err}, falling back to cloud`);
               continue;
             }
-            break;
-          }
-          payload = await resp.json();
-          lastErrStatus = 0;
-          break;
-        } catch (err) {
-          if (attempt.label === "public-r2") {
-            ctx.logger?.warn?.(`[MarketplaceInstallLocal] public-r2 fetch error: ${err?.message ?? err}, falling back to cloud`);
-            continue;
+            return c.json({
+              success: false,
+              error: { code: "cloud_fetch_failed", message: err?.message ?? String(err) }
+            }, 502);
           }
+        }
+        if (!payload) {
           return c.json({
             success: false,
-            error: { code: "cloud_fetch_failed", message: err?.message ?? String(err) }
-          }, 502);
+            error: { code: "cloud_fetch_failed", message: `Cloud returned ${lastErrStatus}: ${lastErrText}` }
+          }, lastErrStatus === 404 ? 404 : 502);
         }
+        const data = payload?.data ?? payload;
+        manifest = data?.manifest;
+        resolvedVersionId = String(data?.version_id ?? versionId);
+        version = String(data?.version ?? "unknown");
       }
-      if (!payload) {
-        return c.json({
-          success: false,
-          error: { code: "cloud_fetch_failed", message: `Cloud returned ${lastErrStatus}: ${lastErrText}` }
-        }, lastErrStatus === 404 ? 404 : 502);
-      }
-      const data = payload?.data ?? payload;
-      const manifest = data?.manifest;
-      const resolvedVersionId = String(data?.version_id ?? versionId);
-      const version = String(data?.version ?? "unknown");
       const manifestId = String(manifest?.id ?? manifest?.name ?? "");
       if (!manifest || !manifestId) {
-        return c.json({ success: false, error: { code: "invalid_manifest", message: "Cloud returned an invalid manifest payload." } }, 502);
+        return c.json({ success: false, error: { code: "invalid_manifest", message: "Invalid manifest payload." } }, inlineManifest ? 400 : 502);
       }
       const conflict = this.findConflict(ctx, manifestId);
       if (conflict === "user-code") {
@@ -9301,6 +9502,18 @@ var MarketplaceInstallLocalPlugin = class {
           }
         }, 409);
       }
+      try {
+        const manifestService = ctx.getService("manifest");
+        manifestService.register(manifest);
+      } catch (err) {
+        if (inlineManifest) {
+          return c.json({
+            success: false,
+            error: { code: "register_failed", message: `Failed to register imported manifest: ${err?.message ?? err}` }
+          }, 422);
+        }
+        ctx.logger?.warn?.(`[MarketplaceInstallLocal] hot-register failed for ${manifestId} (will load on next restart): ${err?.message ?? err}`);
+      }
       const entry = {
         packageId,
         versionId: resolvedVersionId,
@@ -9312,20 +9525,14 @@ var MarketplaceInstallLocalPlugin = class {
         withSampleData: false
       };
       try {
-        (0, import_node_fs3.mkdirSync)(this.storageDir, { recursive: true });
-        (0, import_node_fs3.writeFileSync)((0, import_node_path6.join)(this.storageDir, safeFilename(manifestId)), JSON.stringify(entry, null, 2), "utf8");
+        (0, import_node_fs4.mkdirSync)(this.storageDir, { recursive: true });
+        (0, import_node_fs4.writeFileSync)((0, import_node_path7.join)(this.storageDir, safeFilename(manifestId)), JSON.stringify(entry, null, 2), "utf8");
       } catch (err) {
         return c.json({
           success: false,
           error: { code: "storage_failed", message: `Failed to persist manifest: ${err?.message ?? err}` }
         }, 500);
       }
-      try {
-        const manifestService = ctx.getService("manifest");
-        manifestService.register(manifest);
-      } catch (err) {
-        ctx.logger?.warn?.(`[MarketplaceInstallLocal] hot-register failed for ${manifestId} (will load on next restart): ${err?.message ?? err}`);
-      }
       try {
         const ql = ctx.getService("objectql");
         if (ql && typeof ql.syncSchemas === "function") {
@@ -9339,7 +9546,7 @@ var MarketplaceInstallLocalPlugin = class {
       if (seededSummary.seeded.mode === "inline" && (seededSummary.seeded.inserted ?? 0) + (seededSummary.seeded.updated ?? 0) > 0) {
         entry.withSampleData = true;
         try {
-          (0, import_node_fs3.writeFileSync)((0, import_node_path6.join)(this.storageDir, safeFilename(manifestId)), JSON.stringify(entry, null, 2), "utf8");
+          (0, import_node_fs4.writeFileSync)((0, import_node_path7.join)(this.storageDir, safeFilename(manifestId)), JSON.stringify(entry, null, 2), "utf8");
         } catch {
         }
       }
@@ -9386,12 +9593,12 @@ var MarketplaceInstallLocalPlugin = class {
       if (!manifestId) {
         return c.json({ success: false, error: { code: "bad_request", message: "manifestId path param required." } }, 400);
       }
-      const file = (0, import_node_path6.join)(this.storageDir, safeFilename(manifestId));
-      if (!(0, import_node_fs3.existsSync)(file)) {
+      const file = (0, import_node_path7.join)(this.storageDir, safeFilename(manifestId));
+      if (!(0, import_node_fs4.existsSync)(file)) {
         return c.json({ success: false, error: { code: "not_found", message: `No marketplace install for ${manifestId}.` } }, 404);
       }
       try {
-        (0, import_node_fs3.unlinkSync)(file);
+        (0, import_node_fs4.unlinkSync)(file);
       } catch (err) {
         return c.json({ success: false, error: { code: "storage_failed", message: err?.message ?? String(err) } }, 500);
       }
@@ -9414,7 +9621,7 @@ var MarketplaceInstallLocalPlugin = class {
      *                    (refuse to avoid silently overwriting authored code)
      */
     this.findConflict = (ctx, manifestId) => {
-      if ((0, import_node_fs3.existsSync)((0, import_node_path6.join)(this.storageDir, safeFilename(manifestId)))) {
+      if ((0, import_node_fs4.existsSync)((0, import_node_path7.join)(this.storageDir, safeFilename(manifestId)))) {
         return "marketplace";
       }
       try {
@@ -9456,13 +9663,13 @@ var MarketplaceInstallLocalPlugin = class {
       if (!manifestId) {
         return c.json({ success: false, error: { code: "bad_request", message: "manifestId path param required." } }, 400);
       }
-      const file = (0, import_node_path6.join)(this.storageDir, safeFilename(manifestId));
-      if (!(0, import_node_fs3.existsSync)(file)) {
+      const file = (0, import_node_path7.join)(this.storageDir, safeFilename(manifestId));
+      if (!(0, import_node_fs4.existsSync)(file)) {
         return c.json({ success: false, error: { code: "not_found", message: `No marketplace install for ${manifestId}.` } }, 404);
       }
       let entry;
       try {
-        entry = JSON.parse((0, import_node_fs3.readFileSync)(file, "utf8"));
+        entry = JSON.parse((0, import_node_fs4.readFileSync)(file, "utf8"));
       } catch (err) {
         return c.json({ success: false, error: { code: "storage_failed", message: `Failed to read manifest cache: ${err?.message ?? err}` } }, 500);
       }
@@ -9478,7 +9685,7 @@ var MarketplaceInstallLocalPlugin = class {
       }
       try {
         entry.withSampleData = true;
-        (0, import_node_fs3.writeFileSync)(file, JSON.stringify(entry, null, 2), "utf8");
+        (0, import_node_fs4.writeFileSync)(file, JSON.stringify(entry, null, 2), "utf8");
       } catch {
       }
       return c.json({
@@ -9510,13 +9717,13 @@ var MarketplaceInstallLocalPlugin = class {
       if (!manifestId) {
         return c.json({ success: false, error: { code: "bad_request", message: "manifestId path param required." } }, 400);
       }
-      const file = (0, import_node_path6.join)(this.storageDir, safeFilename(manifestId));
-      if (!(0, import_node_fs3.existsSync)(file)) {
+      const file = (0, import_node_path7.join)(this.storageDir, safeFilename(manifestId));
+      if (!(0, import_node_fs4.existsSync)(file)) {
         return c.json({ success: false, error: { code: "not_found", message: `No marketplace install for ${manifestId}.` } }, 404);
       }
       let entry;
       try {
-        entry = JSON.parse((0, import_node_fs3.readFileSync)(file, "utf8"));
+        entry = JSON.parse((0, import_node_fs4.readFileSync)(file, "utf8"));
       } catch (err) {
         return c.json({ success: false, error: { code: "storage_failed", message: `Failed to read manifest cache: ${err?.message ?? err}` } }, 500);
       }
@@ -9565,7 +9772,7 @@ var MarketplaceInstallLocalPlugin = class {
       }
       try {
         entry.withSampleData = false;
-        (0, import_node_fs3.writeFileSync)(file, JSON.stringify(entry, null, 2), "utf8");
+        (0, import_node_fs4.writeFileSync)(file, JSON.stringify(entry, null, 2), "utf8");
       } catch {
       }
       ctx.logger?.info?.(`[MarketplaceInstallLocal] purged ${manifestId}: deleted=${deleted} skipped=${skipped} errors=${errors}`);
@@ -9663,7 +9870,7 @@ var MarketplaceInstallLocalPlugin = class {
         }
       }
       if (opts.seedNow && datasets.length > 0) {
-        const multiTenant = String(process.env.OS_MULTI_TENANT ?? "false").toLowerCase() !== "false";
+        const multiTenant = String((0, import_types5.readEnvWithDeprecation)("OS_MULTI_ORG_ENABLED", "OS_MULTI_TENANT") ?? "false").toLowerCase() !== "false";
         try {
           const ql = ctx.getService("objectql");
           let metadata;
@@ -9764,12 +9971,12 @@ var MarketplaceInstallLocalPlugin = class {
       return null;
     };
     this.readAll = () => {
-      if (!(0, import_node_fs3.existsSync)(this.storageDir)) return [];
+      if (!(0, import_node_fs4.existsSync)(this.storageDir)) return [];
       const out = [];
-      for (const name of (0, import_node_fs3.readdirSync)(this.storageDir)) {
+      for (const name of (0, import_node_fs4.readdirSync)(this.storageDir)) {
         if (!name.endsWith(".json")) continue;
         try {
-          const raw = (0, import_node_fs3.readFileSync)((0, import_node_path6.join)(this.storageDir, name), "utf8");
+          const raw = (0, import_node_fs4.readFileSync)((0, import_node_path7.join)(this.storageDir, name), "utf8");
           out.push(JSON.parse(raw));
         } catch {
         }
@@ -9777,7 +9984,7 @@ var MarketplaceInstallLocalPlugin = class {
       return out;
     };
     this.cloudUrl = resolveCloudUrl(config.controlPlaneUrl);
-    this.storageDir = config.storageDir ? (0, import_node_path6.resolve)(config.storageDir) : (0, import_node_path6.resolve)(process.cwd(), DEFAULT_DIR);
+    this.storageDir = config.storageDir ? (0, import_node_path7.resolve)(config.storageDir) : (0, import_node_path7.resolve)(process.cwd(), DEFAULT_DIR);
   }
 };
 
@@ -9809,6 +10016,7 @@ init_body_runner();
 // src/index.ts
 var import_rest = require("@objectstack/rest");
 __reExport(index_exports, require("@objectstack/core"), module.exports);
+var import_types6 = require("@objectstack/types");
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   AppPlugin,
@@ -9847,6 +10055,7 @@ __reExport(index_exports, require("@objectstack/core"), module.exports);
   SandboxError,
   SeedLoaderService,
   UnimplementedScriptRunner,
+  _resetEnvDeprecationWarnings,
   actionBodyRunnerFactory,
   backfillPlatformSsoClients,
   buildPlatformSsoRedirectUri,
@@ -9871,6 +10080,7 @@ __reExport(index_exports, require("@objectstack/core"), module.exports);
   mergeRuntimeModule,
   parseTraceparent,
   readArtifactSource,
+  readEnvWithDeprecation,
   resolveCloudUrl,
   resolveDefaultArtifactPath,
   resolveErrorReporter,