@objectstack/runtime 7.2.1 → 7.3.0

package/dist/index.js

@@ -702,6 +702,52 @@ var init_seed_loader = __esm({
   }
 });
 
+// src/package-state-store.ts
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
+import { dirname as dirname2, join } from "path";
+function sanitizeEnvironmentId(environmentId) {
+  const raw = (environmentId ?? process.env.OS_ENVIRONMENT_ID ?? DEFAULT_ENVIRONMENT_ID).trim();
+  const safe = raw.replace(/[^a-zA-Z0-9._-]/g, "_");
+  return safe.length > 0 ? safe : DEFAULT_ENVIRONMENT_ID;
+}
+function stateFilePath(environmentId) {
+  return join(resolveObjectStackHome(), "package-state", `${sanitizeEnvironmentId(environmentId)}.json`);
+}
+function readState(environmentId) {
+  const file = stateFilePath(environmentId);
+  if (!existsSync(file)) return {};
+  try {
+    const parsed = JSON.parse(readFileSync(file, "utf8"));
+    return parsed && typeof parsed === "object" ? parsed : {};
+  } catch {
+    return {};
+  }
+}
+function writeState(environmentId, state) {
+  const file = stateFilePath(environmentId);
+  mkdirSync(dirname2(file), { recursive: true });
+  writeFileSync(file, `${JSON.stringify(state, null, 2)}
+`, "utf8");
+}
+function loadDisabledPackageIds(environmentId) {
+  const disabled = readState(environmentId).disabled;
+  return new Set(Array.isArray(disabled) ? disabled.filter((id) => typeof id === "string") : []);
+}
+function setPackageDisabled(environmentId, packageId, disabled) {
+  const ids = loadDisabledPackageIds(environmentId);
+  if (disabled) ids.add(packageId);
+  else ids.delete(packageId);
+  writeState(environmentId, { disabled: Array.from(ids).sort() });
+}
+var DEFAULT_ENVIRONMENT_ID;
+var init_package_state_store = __esm({
+  "src/package-state-store.ts"() {
+    "use strict";
+    init_standalone_stack();
+    DEFAULT_ENVIRONMENT_ID = "default";
+  }
+});
+
 // src/sandbox/quickjs-runner.ts
 import {
   newAsyncContext
@@ -1267,6 +1313,7 @@ var init_app_plugin = __esm({
   "src/app-plugin.ts"() {
     "use strict";
     init_seed_loader();
+    init_package_state_store();
     init_quickjs_runner();
     init_body_runner();
     AppPlugin = class {
@@ -1292,6 +1339,24 @@ var init_app_plugin = __esm({
           console.warn(
             `[AppPlugin:init] appId=${appId} keys=${Object.keys(servicePayload).join(",")} flows=${Array.isArray(servicePayload.flows) ? servicePayload.flows.length : "n/a"}`
           );
+          try {
+            const ql = ctx.getService("objectql");
+            const setter = ql?.registry?.setInitialDisabledPackageIds;
+            if (typeof setter === "function") {
+              const disabled = loadDisabledPackageIds(this.projectContext?.environmentId);
+              if (disabled.size > 0) {
+                setter.call(ql.registry, disabled);
+                ctx.logger.info("[AppPlugin] seeded persisted disabled packages", {
+                  environmentId: this.projectContext?.environmentId,
+                  disabled: Array.from(disabled)
+                });
+              }
+            }
+          } catch (err) {
+            ctx.logger.warn("[AppPlugin] failed to seed persisted package state", {
+              error: err?.message ?? String(err)
+            });
+          }
           ctx.getService("manifest").register(servicePayload);
         };
         this.start = async (ctx) => {
@@ -1836,6 +1901,170 @@ var init_app_plugin = __esm({
   }
 });
 
+// src/standalone-stack.ts
+import { resolve as resolvePath2 } from "path";
+import { mkdirSync as mkdirSync2 } from "fs";
+import { homedir } from "os";
+import { z } from "zod";
+import { readEnvWithDeprecation as readEnvWithDeprecation2 } from "@objectstack/types";
+function resolveObjectStackHome() {
+  const raw = process.env.OS_HOME?.trim();
+  if (raw && raw.length > 0) {
+    if (raw.startsWith("~")) return resolvePath2(homedir(), raw.slice(1).replace(/^[/\\]/, ""));
+    return resolvePath2(raw);
+  }
+  return resolvePath2(homedir(), ".objectstack");
+}
+function detectDriverFromUrl(dbUrl) {
+  if (/^memory:\/\//i.test(dbUrl)) return "memory";
+  if (/^(postgres(ql)?|pg):\/\//i.test(dbUrl)) return "postgres";
+  if (/^mongodb(\+srv)?:\/\//i.test(dbUrl)) return "mongodb";
+  if (/^wasm-sqlite:\/\//i.test(dbUrl)) return "sqlite-wasm";
+  if (/\.wasm\.db$/i.test(dbUrl)) return "sqlite-wasm";
+  if (/^file:/i.test(dbUrl)) return "sqlite";
+  if (!/^[a-z][a-z0-9+.-]*:\/\//i.test(dbUrl)) return "sqlite";
+  throw new Error(
+    `[StandaloneStack] Unsupported database URL scheme: ${dbUrl}. Supported schemes: memory://, postgres://, pg://, mongodb://, mongodb+srv://, file:`
+  );
+}
+async function createStandaloneStack(config) {
+  const cfg = StandaloneStackConfigSchema.parse(config ?? {});
+  const { ObjectQLPlugin } = await import("@objectstack/objectql");
+  const { MetadataPlugin } = await import("@objectstack/metadata");
+  const { DriverPlugin: DriverPlugin2 } = await Promise.resolve().then(() => (init_driver_plugin(), driver_plugin_exports));
+  const { AppPlugin: AppPlugin2 } = await Promise.resolve().then(() => (init_app_plugin(), app_plugin_exports));
+  const cwd = process.cwd();
+  const environmentId = cfg.environmentId ?? process.env.OS_ENVIRONMENT_ID ?? "proj_local";
+  const artifactPathInput = cfg.artifactPath ?? process.env.OS_ARTIFACT_PATH ?? resolvePath2(cwd, "dist/objectstack.json");
+  const artifactPath = isHttpUrl(artifactPathInput) ? artifactPathInput : artifactPathInput.startsWith("/") ? artifactPathInput : resolvePath2(cwd, artifactPathInput);
+  const dbUrl = cfg.databaseUrl ?? readEnvWithDeprecation2("OS_DATABASE_URL", "DATABASE_URL")?.trim() ?? process.env.TURSO_DATABASE_URL?.trim() ?? (process.env.OS_HOME?.trim() ? `file:${resolvePath2(resolveObjectStackHome(), "data/standalone.db")}` : cfg.projectRoot ? `file:${resolvePath2(cfg.projectRoot, ".objectstack/data/standalone.db")}` : `file:${resolvePath2(resolveObjectStackHome(), "data/standalone.db")}`);
+  const explicitDriver = cfg.databaseDriver ?? process.env.OS_DATABASE_DRIVER?.trim();
+  const dbDriver = explicitDriver ?? detectDriverFromUrl(dbUrl);
+  let driverPlugin;
+  if (dbDriver === "memory") {
+    const { InMemoryDriver } = await import("@objectstack/driver-memory");
+    driverPlugin = new DriverPlugin2(new InMemoryDriver());
+  } else if (dbDriver === "postgres") {
+    const { SqlDriver } = await import("@objectstack/driver-sql");
+    driverPlugin = new DriverPlugin2(
+      new SqlDriver({
+        client: "pg",
+        connection: dbUrl,
+        pool: { min: 0, max: 5 }
+      })
+    );
+  } else if (dbDriver === "mongodb") {
+    let MongoDBDriver;
+    try {
+      ({ MongoDBDriver } = await import("@objectstack/driver-mongodb"));
+    } catch (err) {
+      throw new Error(
+        `[StandaloneStack] mongodb URL detected but @objectstack/driver-mongodb is not installed. Add it as a dependency or pass an explicit driverPlugin. (${err?.message ?? err})`
+      );
+    }
+    driverPlugin = new DriverPlugin2(new MongoDBDriver({ url: dbUrl }));
+  } else if (dbDriver === "sqlite-wasm") {
+    const { SqliteWasmDriver } = await import("@objectstack/driver-sqlite-wasm");
+    const filename = dbUrl.replace(/^wasm-sqlite:(\/\/)?/i, "").replace(/^file:(\/\/)?/i, "");
+    if (filename && filename !== ":memory:") {
+      mkdirSync2(resolvePath2(filename, ".."), { recursive: true });
+    }
+    driverPlugin = new DriverPlugin2(
+      new SqliteWasmDriver({
+        filename: filename || ":memory:",
+        persist: filename && filename !== ":memory:" ? "on-write" : void 0
+      })
+    );
+  } else {
+    const { SqlDriver } = await import("@objectstack/driver-sql");
+    const filename = dbUrl.replace(/^file:(\/\/)?/, "");
+    if (!filename || /^[a-z][a-z0-9+.-]*:\/\//i.test(filename)) {
+      throw new Error(
+        `[StandaloneStack] sqlite driver was selected but the URL does not look like a file path: "${dbUrl}". Use file:/path/to/db.sqlite, or set OS_DATABASE_DRIVER explicitly.`
+      );
+    }
+    mkdirSync2(resolvePath2(filename, ".."), { recursive: true });
+    driverPlugin = new DriverPlugin2(
+      new SqlDriver({
+        client: "better-sqlite3",
+        connection: { filename },
+        useNullAsDefault: true
+      })
+    );
+  }
+  const artifactBundle = await loadArtifactBundle(artifactPath, {
+    tag: "[StandaloneStack]",
+    unwrapEnvelope: true
+  });
+  if (artifactBundle) {
+    const flowsCount = Array.isArray(artifactBundle?.flows) ? artifactBundle.flows.length : "n/a";
+    console.warn(
+      `[StandaloneStack] artifact loaded: path=${artifactPath} keys=${Object.keys(artifactBundle).join(",")} flows=${flowsCount}`
+    );
+  }
+  const plugins = [
+    driverPlugin,
+    new MetadataPlugin({
+      // Source-file scanner OFF — declarative metadata is loaded
+      // from the compiled artifact, not from yaml/json files on
+      // disk. Scanning would also recursively watch the project
+      // root (incl. node_modules), which is expensive and prone
+      // to EMFILE.
+      watch: false,
+      // Artifact-file HMR ON in non-production so edits to
+      // `*.view.ts` / `*.flow.ts` (which the CLI dev-mode watcher
+      // recompiles into `dist/objectstack.json`) are picked up by
+      // the running server WITHOUT requiring a manual restart.
+      // Uses polling under the hood (see plugin.ts) to avoid
+      // `fs.watch` EMFILE on macOS / busy dev hosts.
+      artifactWatch: process.env.NODE_ENV !== "production",
+      environmentId,
+      artifactSource: { mode: "local-file", path: artifactPath }
+    }),
+    new ObjectQLPlugin({ environmentId })
+  ];
+  if (artifactBundle) plugins.push(new AppPlugin2(artifactBundle));
+  const requires = Array.isArray(artifactBundle?.requires) ? artifactBundle.requires.filter((c) => typeof c === "string") : void 0;
+  const objects = Array.isArray(artifactBundle?.objects) ? artifactBundle.objects : void 0;
+  const manifest = artifactBundle?.manifest;
+  return {
+    plugins,
+    api: {
+      enableProjectScoping: false,
+      projectResolution: "none"
+    },
+    ...requires ? { requires } : {},
+    ...objects ? { objects } : {},
+    ...manifest ? { manifest } : {}
+  };
+}
+var StandaloneStackConfigSchema;
+var init_standalone_stack = __esm({
+  "src/standalone-stack.ts"() {
+    "use strict";
+    init_load_artifact_bundle();
+    StandaloneStackConfigSchema = z.object({
+      databaseUrl: z.string().optional(),
+      databaseAuthToken: z.string().optional(),
+      databaseDriver: z.enum(["sqlite", "sqlite-wasm", "memory", "postgres", "mongodb"]).optional(),
+      environmentId: z.string().optional(),
+      artifactPath: z.string().optional(),
+      /**
+       * Project root directory. When set (typically by the CLI after locating
+       * `objectstack.config.ts`), the default sqlite database is placed under
+       * `<projectRoot>/.objectstack/data/standalone.db` instead of the global
+       * `~/.objectstack/data/standalone.db`. This keeps per-project data
+       * scoped to the project folder so different examples / apps don't
+       * share a single database by accident.
+       *
+       * Explicit `databaseUrl` / `OS_DATABASE_URL` / `OS_HOME` still take
+       * precedence over this default.
+       */
+      projectRoot: z.string().optional()
+    });
+  }
+});
+
 // src/cloud/platform-sso.ts
 var platform_sso_exports = {};
 __export(platform_sso_exports, {
@@ -2240,173 +2469,19 @@ var Runtime = class {
   }
 };
 
-// src/standalone-stack.ts
-init_load_artifact_bundle();
-import { resolve as resolvePath2 } from "path";
-import { mkdirSync } from "fs";
-import { homedir } from "os";
-import { z } from "zod";
-import { readEnvWithDeprecation as readEnvWithDeprecation2 } from "@objectstack/types";
-function resolveObjectStackHome() {
-  const raw = process.env.OS_HOME?.trim();
-  if (raw && raw.length > 0) {
-    if (raw.startsWith("~")) return resolvePath2(homedir(), raw.slice(1).replace(/^[/\\]/, ""));
-    return resolvePath2(raw);
-  }
-  return resolvePath2(homedir(), ".objectstack");
-}
-var StandaloneStackConfigSchema = z.object({
-  databaseUrl: z.string().optional(),
-  databaseAuthToken: z.string().optional(),
-  databaseDriver: z.enum(["sqlite", "sqlite-wasm", "memory", "postgres", "mongodb"]).optional(),
-  environmentId: z.string().optional(),
-  artifactPath: z.string().optional(),
-  /**
-   * Project root directory. When set (typically by the CLI after locating
-   * `objectstack.config.ts`), the default sqlite database is placed under
-   * `<projectRoot>/.objectstack/data/standalone.db` instead of the global
-   * `~/.objectstack/data/standalone.db`. This keeps per-project data
-   * scoped to the project folder so different examples / apps don't
-   * share a single database by accident.
-   *
-   * Explicit `databaseUrl` / `OS_DATABASE_URL` / `OS_HOME` still take
-   * precedence over this default.
-   */
-  projectRoot: z.string().optional()
-});
-function detectDriverFromUrl(dbUrl) {
-  if (/^memory:\/\//i.test(dbUrl)) return "memory";
-  if (/^(postgres(ql)?|pg):\/\//i.test(dbUrl)) return "postgres";
-  if (/^mongodb(\+srv)?:\/\//i.test(dbUrl)) return "mongodb";
-  if (/^wasm-sqlite:\/\//i.test(dbUrl)) return "sqlite-wasm";
-  if (/\.wasm\.db$/i.test(dbUrl)) return "sqlite-wasm";
-  if (/^file:/i.test(dbUrl)) return "sqlite";
-  if (!/^[a-z][a-z0-9+.-]*:\/\//i.test(dbUrl)) return "sqlite";
-  throw new Error(
-    `[StandaloneStack] Unsupported database URL scheme: ${dbUrl}. Supported schemes: memory://, postgres://, pg://, mongodb://, mongodb+srv://, file:`
-  );
-}
-async function createStandaloneStack(config) {
-  const cfg = StandaloneStackConfigSchema.parse(config ?? {});
-  const { ObjectQLPlugin } = await import("@objectstack/objectql");
-  const { MetadataPlugin } = await import("@objectstack/metadata");
-  const { DriverPlugin: DriverPlugin2 } = await Promise.resolve().then(() => (init_driver_plugin(), driver_plugin_exports));
-  const { AppPlugin: AppPlugin2 } = await Promise.resolve().then(() => (init_app_plugin(), app_plugin_exports));
-  const cwd = process.cwd();
-  const environmentId = cfg.environmentId ?? process.env.OS_ENVIRONMENT_ID ?? "proj_local";
-  const artifactPathInput = cfg.artifactPath ?? process.env.OS_ARTIFACT_PATH ?? resolvePath2(cwd, "dist/objectstack.json");
-  const artifactPath = isHttpUrl(artifactPathInput) ? artifactPathInput : artifactPathInput.startsWith("/") ? artifactPathInput : resolvePath2(cwd, artifactPathInput);
-  const dbUrl = cfg.databaseUrl ?? readEnvWithDeprecation2("OS_DATABASE_URL", "DATABASE_URL")?.trim() ?? process.env.TURSO_DATABASE_URL?.trim() ?? (process.env.OS_HOME?.trim() ? `file:${resolvePath2(resolveObjectStackHome(), "data/standalone.db")}` : cfg.projectRoot ? `file:${resolvePath2(cfg.projectRoot, ".objectstack/data/standalone.db")}` : `file:${resolvePath2(resolveObjectStackHome(), "data/standalone.db")}`);
-  const explicitDriver = cfg.databaseDriver ?? process.env.OS_DATABASE_DRIVER?.trim();
-  const dbDriver = explicitDriver ?? detectDriverFromUrl(dbUrl);
-  let driverPlugin;
-  if (dbDriver === "memory") {
-    const { InMemoryDriver } = await import("@objectstack/driver-memory");
-    driverPlugin = new DriverPlugin2(new InMemoryDriver());
-  } else if (dbDriver === "postgres") {
-    const { SqlDriver } = await import("@objectstack/driver-sql");
-    driverPlugin = new DriverPlugin2(
-      new SqlDriver({
-        client: "pg",
-        connection: dbUrl,
-        pool: { min: 0, max: 5 }
-      })
-    );
-  } else if (dbDriver === "mongodb") {
-    let MongoDBDriver;
-    try {
-      ({ MongoDBDriver } = await import("@objectstack/driver-mongodb"));
-    } catch (err) {
-      throw new Error(
-        `[StandaloneStack] mongodb URL detected but @objectstack/driver-mongodb is not installed. Add it as a dependency or pass an explicit driverPlugin. (${err?.message ?? err})`
-      );
-    }
-    driverPlugin = new DriverPlugin2(new MongoDBDriver({ url: dbUrl }));
-  } else if (dbDriver === "sqlite-wasm") {
-    const { SqliteWasmDriver } = await import("@objectstack/driver-sqlite-wasm");
-    const filename = dbUrl.replace(/^wasm-sqlite:(\/\/)?/i, "").replace(/^file:(\/\/)?/i, "");
-    if (filename && filename !== ":memory:") {
-      mkdirSync(resolvePath2(filename, ".."), { recursive: true });
-    }
-    driverPlugin = new DriverPlugin2(
-      new SqliteWasmDriver({
-        filename: filename || ":memory:",
-        persist: filename && filename !== ":memory:" ? "on-write" : void 0
-      })
-    );
-  } else {
-    const { SqlDriver } = await import("@objectstack/driver-sql");
-    const filename = dbUrl.replace(/^file:(\/\/)?/, "");
-    if (!filename || /^[a-z][a-z0-9+.-]*:\/\//i.test(filename)) {
-      throw new Error(
-        `[StandaloneStack] sqlite driver was selected but the URL does not look like a file path: "${dbUrl}". Use file:/path/to/db.sqlite, or set OS_DATABASE_DRIVER explicitly.`
-      );
-    }
-    mkdirSync(resolvePath2(filename, ".."), { recursive: true });
-    driverPlugin = new DriverPlugin2(
-      new SqlDriver({
-        client: "better-sqlite3",
-        connection: { filename },
-        useNullAsDefault: true
-      })
-    );
-  }
-  const artifactBundle = await loadArtifactBundle(artifactPath, {
-    tag: "[StandaloneStack]",
-    unwrapEnvelope: true
-  });
-  if (artifactBundle) {
-    const flowsCount = Array.isArray(artifactBundle?.flows) ? artifactBundle.flows.length : "n/a";
-    console.warn(
-      `[StandaloneStack] artifact loaded: path=${artifactPath} keys=${Object.keys(artifactBundle).join(",")} flows=${flowsCount}`
-    );
-  }
-  const plugins = [
-    driverPlugin,
-    new MetadataPlugin({
-      // Source-file scanner OFF — declarative metadata is loaded
-      // from the compiled artifact, not from yaml/json files on
-      // disk. Scanning would also recursively watch the project
-      // root (incl. node_modules), which is expensive and prone
-      // to EMFILE.
-      watch: false,
-      // Artifact-file HMR ON in non-production so edits to
-      // `*.view.ts` / `*.flow.ts` (which the CLI dev-mode watcher
-      // recompiles into `dist/objectstack.json`) are picked up by
-      // the running server WITHOUT requiring a manual restart.
-      // Uses polling under the hood (see plugin.ts) to avoid
-      // `fs.watch` EMFILE on macOS / busy dev hosts.
-      artifactWatch: process.env.NODE_ENV !== "production",
-      environmentId,
-      artifactSource: { mode: "local-file", path: artifactPath }
-    }),
-    new ObjectQLPlugin({ environmentId })
-  ];
-  if (artifactBundle) plugins.push(new AppPlugin2(artifactBundle));
-  const requires = Array.isArray(artifactBundle?.requires) ? artifactBundle.requires.filter((c) => typeof c === "string") : void 0;
-  const objects = Array.isArray(artifactBundle?.objects) ? artifactBundle.objects : void 0;
-  const manifest = artifactBundle?.manifest;
-  return {
-    plugins,
-    api: {
-      enableProjectScoping: false,
-      projectResolution: "none"
-    },
-    ...requires ? { requires } : {},
-    ...objects ? { objects } : {},
-    ...manifest ? { manifest } : {}
-  };
-}
+// src/index.ts
+init_standalone_stack();
 
 // src/default-host.ts
-import { resolve as resolvePath3 } from "path";
-import { existsSync, mkdirSync as mkdirSync2, writeFileSync } from "fs";
+init_standalone_stack();
 init_load_artifact_bundle();
+import { resolve as resolvePath3 } from "path";
+import { existsSync as existsSync2, mkdirSync as mkdirSync3, writeFileSync as writeFileSync2 } from "fs";
 function resolveDefaultArtifactPath(explicitPath, cwd = process.cwd()) {
   const candidate = explicitPath ?? process.env.OS_ARTIFACT_PATH ?? resolvePath3(cwd, "dist/objectstack.json");
   if (isHttpUrl(candidate)) return candidate;
   if (explicitPath || process.env.OS_ARTIFACT_PATH) return candidate;
-  return existsSync(candidate) ? candidate : void 0;
+  return existsSync2(candidate) ? candidate : void 0;
 }
 async function createDefaultHostConfig(options = {}) {
   const { requireArtifact = true, ...standaloneOpts } = options;
@@ -2419,9 +2494,9 @@ async function createDefaultHostConfig(options = {}) {
   if (!resolvedArtifact && !requireArtifact) {
     const home = resolveObjectStackHome();
     const stubPath = resolvePath3(home, "dist/objectstack.json");
-    if (!existsSync(stubPath)) {
-      mkdirSync2(resolvePath3(stubPath, ".."), { recursive: true });
-      writeFileSync(
+    if (!existsSync2(stubPath)) {
+      mkdirSync3(resolvePath3(stubPath, ".."), { recursive: true });
+      writeFileSync2(
         stubPath,
         JSON.stringify(
           {
@@ -2458,10 +2533,11 @@ init_app_plugin();
 init_seed_loader();
 
 // src/http-dispatcher.ts
+init_package_state_store();
 import { getEnv, resolveLocale } from "@objectstack/core";
 import { readEnvWithDeprecation as readEnvWithDeprecation3 } from "@objectstack/types";
 import { CoreServiceName } from "@objectstack/spec/system";
-import { pluralToSingular } from "@objectstack/spec/shared";
+import { pluralToSingular, PLURAL_TO_SINGULAR } from "@objectstack/spec/shared";
 
 // src/security/resolve-execution-context.ts
 function readHeader(headers, name) {
@@ -3316,7 +3392,7 @@ var _HttpDispatcher = class _HttpDispatcher {
         if (protocol && typeof protocol.saveMetaItem === "function") {
           try {
             const organizationId = await this.resolveActiveOrganizationId(_context);
-            const result = await protocol.saveMetaItem({ type, name, item: body, organizationId });
+            const result = await protocol.saveMetaItem({ type, name, item: body, organizationId, ...packageId ? { packageId } : {} });
             return { handled: true, response: this.success(result) };
           } catch (e) {
             return { handled: true, response: this.error(e.message, 400) };
@@ -3656,12 +3732,22 @@ var _HttpDispatcher = class _HttpDispatcher {
         const id = decodeURIComponent(parts[0]);
         const pkg = registry.enablePackage(id);
         if (!pkg) return { handled: true, response: this.error(`Package '${id}' not found`, 404) };
+        try {
+          setPackageDisabled(_context?.environmentId, id, false);
+        } catch (err) {
+          console.warn("[handlePackages] failed to persist enable state", { id, error: err?.message });
+        }
         return { handled: true, response: this.success(pkg) };
       }
       if (parts.length === 2 && parts[1] === "disable" && m === "PATCH") {
         const id = decodeURIComponent(parts[0]);
         const pkg = registry.disablePackage(id);
         if (!pkg) return { handled: true, response: this.error(`Package '${id}' not found`, 404) };
+        try {
+          setPackageDisabled(_context?.environmentId, id, true);
+        } catch (err) {
+          console.warn("[handlePackages] failed to persist disable state", { id, error: err?.message });
+        }
         return { handled: true, response: this.success(pkg) };
       }
       if (parts.length === 2 && parts[1] === "publish" && m === "POST") {
@@ -3682,6 +3768,14 @@ var _HttpDispatcher = class _HttpDispatcher {
         }
         return { handled: true, response: this.error("Metadata service not available", 503) };
       }
+      if (parts.length === 2 && parts[1] === "export" && m === "GET") {
+        const id = decodeURIComponent(parts[0]);
+        const manifest = await this.assemblePackageManifest(id, registry, _context);
+        if (!manifest) {
+          return { handled: true, response: this.error(`Package '${id}' not found`, 404) };
+        }
+        return { handled: true, response: this.success(manifest) };
+      }
       if (parts.length === 1 && m === "GET") {
         const id = decodeURIComponent(parts[0]);
         const pkg = registry.getPackage(id);
@@ -3699,6 +3793,83 @@ var _HttpDispatcher = class _HttpDispatcher {
     }
     return { handled: false };
   }
+  /**
+   * Assemble a portable, offline-installable package manifest from the
+   * `sys_metadata` overlay rows bound to `packageId`.
+   *
+   * The resulting shape mirrors what `marketplace-install-local` →
+   * `manifestService.register()` → `engine.registerApp()` consumes:
+   *   `{ id, name, version, objects:[…], views:[…], flows:[…], … }`
+   * where each category key is the PLURAL manifest name and its value is
+   * an array of clean metadata bodies (provenance decorations stripped).
+   *
+   * Only the metadata categories that `registerApp` can actually consume
+   * are exported. `datasources` and `emailTemplates` are intentionally
+   * excluded (not registered by the import path). `tools` / `skills` ARE
+   * round-tripped: they are registered by `registerApp` on import and
+   * surfaced by `getMetaItems('tool' | 'skill')` on export.
+   *
+   * @returns the manifest object, or `null` if the package id is unknown
+   *          AND has no overlay-authored metadata.
+   */
+  async assemblePackageManifest(packageId, registry, context) {
+    const protocol = await this.resolveService("protocol");
+    if (!protocol || typeof protocol.getMetaItems !== "function") return null;
+    const organizationId = await this.resolveActiveOrganizationId(context);
+    const PROVENANCE_KEYS = /* @__PURE__ */ new Set([
+      "_packageId",
+      "_packageVersionId",
+      "_provenance",
+      "_state",
+      "_version",
+      "_organizationId",
+      "_source",
+      "_id",
+      "_rowId"
+    ]);
+    const clean = (item) => {
+      if (!item || typeof item !== "object") return item;
+      const out = {};
+      for (const [k, v] of Object.entries(item)) {
+        if (k.startsWith("_") || PROVENANCE_KEYS.has(k)) continue;
+        out[k] = v;
+      }
+      return out;
+    };
+    const exportPluralKeys = Object.keys(PLURAL_TO_SINGULAR).filter(
+      (k) => k !== "datasources" && k !== "emailTemplates"
+    );
+    const manifest = {};
+    let total = 0;
+    for (const plural of exportPluralKeys) {
+      const singular = PLURAL_TO_SINGULAR[plural];
+      let items = [];
+      try {
+        const res = await protocol.getMetaItems({ type: singular, packageId, organizationId });
+        items = Array.isArray(res?.items) ? res.items : [];
+      } catch {
+        continue;
+      }
+      if (items.length === 0) continue;
+      manifest[plural] = items.map(clean);
+      total += items.length;
+    }
+    const pkg = (() => {
+      try {
+        return registry?.getPackage?.(packageId);
+      } catch {
+        return void 0;
+      }
+    })();
+    if (total === 0 && !pkg) return null;
+    manifest.id = packageId;
+    manifest.name = pkg?.manifest?.name ?? pkg?.name ?? packageId;
+    manifest.version = pkg?.manifest?.version ?? pkg?.version ?? "1.0.0";
+    if (pkg?.manifest?.label ?? pkg?.label) {
+      manifest.label = pkg?.manifest?.label ?? pkg?.label;
+    }
+    return manifest;
+  }
   /**
    * Cloud / Environment Control-Plane routes.
    *
@@ -6291,6 +6462,14 @@ function createDispatcherPlugin(config = {}) {
           errorResponse(err, res);
         }
       });
+      server.get(`${prefix}/packages/:id/export`, async (req, res) => {
+        try {
+          const result = await dispatcher.handlePackages(`/${req.params.id}/export`, "GET", {}, req.query, { request: req });
+          sendResult(result, res);
+        } catch (err) {
+          errorResponse(err, res);
+        }
+      });
       server.get(`${prefix}/packages/:id`, async (req, res) => {
         try {
           const result = await dispatcher.handlePackages(`/${req.params.id}`, "GET", {}, req.query, { request: req });
@@ -8387,7 +8566,7 @@ var AuthProxyPlugin = class {
 };
 
 // src/cloud/cloud-url.ts
-var DEFAULT_CLOUD_URL = "https://cloud.objectos.app";
+var DEFAULT_CLOUD_URL = "https://cloud.objectos.ai";
 function resolveCloudUrl(explicit) {
   const raw = (explicit ?? process.env.OS_CLOUD_URL ?? "").trim();
   const lower = raw.toLowerCase();
@@ -9062,8 +9241,8 @@ async function createObjectOSStack(config) {
 }
 
 // src/cloud/marketplace-install-local-plugin.ts
-import { existsSync as existsSync2, mkdirSync as mkdirSync3, readFileSync, readdirSync, unlinkSync, writeFileSync as writeFileSync2 } from "fs";
-import { join, resolve } from "path";
+import { existsSync as existsSync3, mkdirSync as mkdirSync4, readFileSync as readFileSync2, readdirSync, unlinkSync, writeFileSync as writeFileSync3 } from "fs";
+import { join as join2, resolve } from "path";
 import { readEnvWithDeprecation as readEnvWithDeprecation5 } from "@objectstack/types";
 var ROUTE_BASE = "/api/v1/marketplace/install-local";
 var DEFAULT_DIR = ".objectstack/installed-packages";
@@ -9139,9 +9318,6 @@ var MarketplaceInstallLocalPlugin = class {
       }
     };
     this.handleInstall = async (c, ctx) => {
-      if (!this.cloudUrl) {
-        return c.json({ success: false, error: { code: "marketplace_unavailable", message: "OS_CLOUD_URL not configured." } }, 503);
-      }
       const userId = await this.requireAuthenticatedUser(c, ctx);
       if (!userId) {
         return c.json({ success: false, error: { code: "unauthorized", message: "Authentication required to install packages." } }, 401);
@@ -9151,69 +9327,87 @@ var MarketplaceInstallLocalPlugin = class {
         body = await c.req.json();
       } catch {
       }
-      const packageId = String(body?.packageId ?? "").trim();
-      const versionId = String(body?.versionId ?? "latest").trim() || "latest";
-      if (!packageId) {
-        return c.json({ success: false, error: { code: "bad_request", message: "packageId is required." } }, 400);
-      }
-      let payload;
-      const publicBase = resolveMarketplacePublicBaseUrl();
-      const fetchAttempts = [];
-      if (publicBase) {
+      const inlineManifest = body?.manifest && typeof body.manifest === "object" ? body.manifest : null;
+      let manifest;
+      let resolvedVersionId;
+      let version;
+      let packageId;
+      if (inlineManifest) {
+        manifest = inlineManifest;
+        packageId = String(manifest.id ?? manifest.name ?? "").trim();
+        version = String(manifest.version ?? "unknown");
+        resolvedVersionId = String(body?.versionId ?? version);
+        if (!packageId) {
+          return c.json({ success: false, error: { code: "invalid_manifest", message: 'Inline manifest must have an "id" or "name".' } }, 400);
+        }
+      } else {
+        if (!this.cloudUrl) {
+          return c.json({ success: false, error: { code: "marketplace_unavailable", message: "OS_CLOUD_URL not configured." } }, 503);
+        }
+        packageId = String(body?.packageId ?? "").trim();
+        const versionId = String(body?.versionId ?? "latest").trim() || "latest";
+        if (!packageId) {
+          return c.json({ success: false, error: { code: "bad_request", message: "packageId is required." } }, 400);
+        }
+        let payload;
+        const publicBase = resolveMarketplacePublicBaseUrl();
+        const fetchAttempts = [];
+        if (publicBase) {
+          fetchAttempts.push({
+            label: "public-r2",
+            url: `${publicBase}/packages/${encodeURIComponent(packageId)}/versions/${encodeURIComponent(versionId)}/manifest.json`
+          });
+        }
         fetchAttempts.push({
-          label: "public-r2",
-          url: `${publicBase}/packages/${encodeURIComponent(packageId)}/versions/${encodeURIComponent(versionId)}/manifest.json`
+          label: "cloud",
+          url: `${this.cloudUrl}/api/v1/marketplace/packages/${encodeURIComponent(packageId)}/versions/${encodeURIComponent(versionId)}/manifest`
         });
-      }
-      fetchAttempts.push({
-        label: "cloud",
-        url: `${this.cloudUrl}/api/v1/marketplace/packages/${encodeURIComponent(packageId)}/versions/${encodeURIComponent(versionId)}/manifest`
-      });
-      let lastErrStatus = 0;
-      let lastErrText = "";
-      for (const attempt of fetchAttempts) {
-        try {
-          const resp = await fetch(attempt.url, { headers: { "Accept": "application/json" } });
-          if (!resp.ok) {
-            lastErrStatus = resp.status;
-            lastErrText = (await resp.text().catch(() => "")).slice(0, 200);
-            if (attempt.label === "public-r2" && resp.status === 404) {
-              ctx.logger?.info?.(`[MarketplaceInstallLocal] public-r2 miss for ${packageId}@${versionId}, falling back to cloud`);
-              continue;
+        let lastErrStatus = 0;
+        let lastErrText = "";
+        for (const attempt of fetchAttempts) {
+          try {
+            const resp = await fetch(attempt.url, { headers: { "Accept": "application/json" } });
+            if (!resp.ok) {
+              lastErrStatus = resp.status;
+              lastErrText = (await resp.text().catch(() => "")).slice(0, 200);
+              if (attempt.label === "public-r2" && resp.status === 404) {
+                ctx.logger?.info?.(`[MarketplaceInstallLocal] public-r2 miss for ${packageId}@${versionId}, falling back to cloud`);
+                continue;
+              }
+              if (attempt.label === "public-r2" && resp.status >= 500) {
+                ctx.logger?.warn?.(`[MarketplaceInstallLocal] public-r2 ${resp.status}, falling back to cloud`);
+                continue;
+              }
+              break;
             }
-            if (attempt.label === "public-r2" && resp.status >= 500) {
-              ctx.logger?.warn?.(`[MarketplaceInstallLocal] public-r2 ${resp.status}, falling back to cloud`);
+            payload = await resp.json();
+            lastErrStatus = 0;
+            break;
+          } catch (err) {
+            if (attempt.label === "public-r2") {
+              ctx.logger?.warn?.(`[MarketplaceInstallLocal] public-r2 fetch error: ${err?.message ?? err}, falling back to cloud`);
               continue;
             }
-            break;
-          }
-          payload = await resp.json();
-          lastErrStatus = 0;
-          break;
-        } catch (err) {
-          if (attempt.label === "public-r2") {
-            ctx.logger?.warn?.(`[MarketplaceInstallLocal] public-r2 fetch error: ${err?.message ?? err}, falling back to cloud`);
-            continue;
+            return c.json({
+              success: false,
+              error: { code: "cloud_fetch_failed", message: err?.message ?? String(err) }
+            }, 502);
           }
+        }
+        if (!payload) {
           return c.json({
             success: false,
-            error: { code: "cloud_fetch_failed", message: err?.message ?? String(err) }
-          }, 502);
+            error: { code: "cloud_fetch_failed", message: `Cloud returned ${lastErrStatus}: ${lastErrText}` }
+          }, lastErrStatus === 404 ? 404 : 502);
         }
+        const data = payload?.data ?? payload;
+        manifest = data?.manifest;
+        resolvedVersionId = String(data?.version_id ?? versionId);
+        version = String(data?.version ?? "unknown");
       }
-      if (!payload) {
-        return c.json({
-          success: false,
-          error: { code: "cloud_fetch_failed", message: `Cloud returned ${lastErrStatus}: ${lastErrText}` }
-        }, lastErrStatus === 404 ? 404 : 502);
-      }
-      const data = payload?.data ?? payload;
-      const manifest = data?.manifest;
-      const resolvedVersionId = String(data?.version_id ?? versionId);
-      const version = String(data?.version ?? "unknown");
       const manifestId = String(manifest?.id ?? manifest?.name ?? "");
       if (!manifest || !manifestId) {
-        return c.json({ success: false, error: { code: "invalid_manifest", message: "Cloud returned an invalid manifest payload." } }, 502);
+        return c.json({ success: false, error: { code: "invalid_manifest", message: "Invalid manifest payload." } }, inlineManifest ? 400 : 502);
       }
       const conflict = this.findConflict(ctx, manifestId);
       if (conflict === "user-code") {
@@ -9225,6 +9419,18 @@ var MarketplaceInstallLocalPlugin = class {
           }
         }, 409);
       }
+      try {
+        const manifestService = ctx.getService("manifest");
+        manifestService.register(manifest);
+      } catch (err) {
+        if (inlineManifest) {
+          return c.json({
+            success: false,
+            error: { code: "register_failed", message: `Failed to register imported manifest: ${err?.message ?? err}` }
+          }, 422);
+        }
+        ctx.logger?.warn?.(`[MarketplaceInstallLocal] hot-register failed for ${manifestId} (will load on next restart): ${err?.message ?? err}`);
+      }
       const entry = {
         packageId,
         versionId: resolvedVersionId,
@@ -9236,20 +9442,14 @@ var MarketplaceInstallLocalPlugin = class {
         withSampleData: false
       };
       try {
-        mkdirSync3(this.storageDir, { recursive: true });
-        writeFileSync2(join(this.storageDir, safeFilename(manifestId)), JSON.stringify(entry, null, 2), "utf8");
+        mkdirSync4(this.storageDir, { recursive: true });
+        writeFileSync3(join2(this.storageDir, safeFilename(manifestId)), JSON.stringify(entry, null, 2), "utf8");
       } catch (err) {
         return c.json({
           success: false,
           error: { code: "storage_failed", message: `Failed to persist manifest: ${err?.message ?? err}` }
         }, 500);
       }
-      try {
-        const manifestService = ctx.getService("manifest");
-        manifestService.register(manifest);
-      } catch (err) {
-        ctx.logger?.warn?.(`[MarketplaceInstallLocal] hot-register failed for ${manifestId} (will load on next restart): ${err?.message ?? err}`);
-      }
       try {
         const ql = ctx.getService("objectql");
         if (ql && typeof ql.syncSchemas === "function") {
@@ -9263,7 +9463,7 @@ var MarketplaceInstallLocalPlugin = class {
       if (seededSummary.seeded.mode === "inline" && (seededSummary.seeded.inserted ?? 0) + (seededSummary.seeded.updated ?? 0) > 0) {
         entry.withSampleData = true;
         try {
-          writeFileSync2(join(this.storageDir, safeFilename(manifestId)), JSON.stringify(entry, null, 2), "utf8");
+          writeFileSync3(join2(this.storageDir, safeFilename(manifestId)), JSON.stringify(entry, null, 2), "utf8");
         } catch {
         }
       }
@@ -9310,8 +9510,8 @@ var MarketplaceInstallLocalPlugin = class {
       if (!manifestId) {
         return c.json({ success: false, error: { code: "bad_request", message: "manifestId path param required." } }, 400);
       }
-      const file = join(this.storageDir, safeFilename(manifestId));
-      if (!existsSync2(file)) {
+      const file = join2(this.storageDir, safeFilename(manifestId));
+      if (!existsSync3(file)) {
         return c.json({ success: false, error: { code: "not_found", message: `No marketplace install for ${manifestId}.` } }, 404);
       }
       try {
@@ -9338,7 +9538,7 @@ var MarketplaceInstallLocalPlugin = class {
      *                    (refuse to avoid silently overwriting authored code)
      */
     this.findConflict = (ctx, manifestId) => {
-      if (existsSync2(join(this.storageDir, safeFilename(manifestId)))) {
+      if (existsSync3(join2(this.storageDir, safeFilename(manifestId)))) {
         return "marketplace";
       }
       try {
@@ -9380,13 +9580,13 @@ var MarketplaceInstallLocalPlugin = class {
       if (!manifestId) {
         return c.json({ success: false, error: { code: "bad_request", message: "manifestId path param required." } }, 400);
       }
-      const file = join(this.storageDir, safeFilename(manifestId));
-      if (!existsSync2(file)) {
+      const file = join2(this.storageDir, safeFilename(manifestId));
+      if (!existsSync3(file)) {
         return c.json({ success: false, error: { code: "not_found", message: `No marketplace install for ${manifestId}.` } }, 404);
       }
       let entry;
       try {
-        entry = JSON.parse(readFileSync(file, "utf8"));
+        entry = JSON.parse(readFileSync2(file, "utf8"));
       } catch (err) {
         return c.json({ success: false, error: { code: "storage_failed", message: `Failed to read manifest cache: ${err?.message ?? err}` } }, 500);
       }
@@ -9402,7 +9602,7 @@ var MarketplaceInstallLocalPlugin = class {
       }
       try {
         entry.withSampleData = true;
-        writeFileSync2(file, JSON.stringify(entry, null, 2), "utf8");
+        writeFileSync3(file, JSON.stringify(entry, null, 2), "utf8");
       } catch {
       }
       return c.json({
@@ -9434,13 +9634,13 @@ var MarketplaceInstallLocalPlugin = class {
       if (!manifestId) {
         return c.json({ success: false, error: { code: "bad_request", message: "manifestId path param required." } }, 400);
       }
-      const file = join(this.storageDir, safeFilename(manifestId));
-      if (!existsSync2(file)) {
+      const file = join2(this.storageDir, safeFilename(manifestId));
+      if (!existsSync3(file)) {
         return c.json({ success: false, error: { code: "not_found", message: `No marketplace install for ${manifestId}.` } }, 404);
       }
       let entry;
       try {
-        entry = JSON.parse(readFileSync(file, "utf8"));
+        entry = JSON.parse(readFileSync2(file, "utf8"));
       } catch (err) {
         return c.json({ success: false, error: { code: "storage_failed", message: `Failed to read manifest cache: ${err?.message ?? err}` } }, 500);
       }
@@ -9489,7 +9689,7 @@ var MarketplaceInstallLocalPlugin = class {
       }
       try {
         entry.withSampleData = false;
-        writeFileSync2(file, JSON.stringify(entry, null, 2), "utf8");
+        writeFileSync3(file, JSON.stringify(entry, null, 2), "utf8");
       } catch {
       }
       ctx.logger?.info?.(`[MarketplaceInstallLocal] purged ${manifestId}: deleted=${deleted} skipped=${skipped} errors=${errors}`);
@@ -9688,12 +9888,12 @@ var MarketplaceInstallLocalPlugin = class {
       return null;
     };
     this.readAll = () => {
-      if (!existsSync2(this.storageDir)) return [];
+      if (!existsSync3(this.storageDir)) return [];
       const out = [];
       for (const name of readdirSync(this.storageDir)) {
         if (!name.endsWith(".json")) continue;
         try {
-          const raw = readFileSync(join(this.storageDir, name), "utf8");
+          const raw = readFileSync2(join2(this.storageDir, name), "utf8");
           out.push(JSON.parse(raw));
         } catch {
         }