@objectstack/types 17.0.0-rc.3 → 17.0.0-rc.5

package/dist/node.js

@@ -20,33 +20,157 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/node.ts
 var node_exports = {};
 __export(node_exports, {
+  HOST_DECLARATION_FIELDS: () => HOST_DECLARATION_FIELDS,
+  HOST_IMPORT_FAILURE_KIND: () => HOST_IMPORT_FAILURE_KIND,
   createHostImporter: () => createHostImporter,
-  createHostRequire: () => createHostRequire
+  createHostRequire: () => createHostRequire,
+  hostImportFailureKind: () => hostImportFailureKind,
+  isDeclaredByHost: () => isDeclaredByHost,
+  packageNameFromSpecifier: () => packageNameFromSpecifier,
+  readHostDeclaration: () => readHostDeclaration
 });
 module.exports = __toCommonJS(node_exports);
+var import_node_fs = require("fs");
 var import_node_module = require("module");
 var import_node_path = require("path");
 var import_node_url = require("url");
+
+// src/module-not-found.ts
+function isModuleNotFoundError(err) {
+  const code = err?.code;
+  if (code === "ERR_MODULE_NOT_FOUND" || code === "MODULE_NOT_FOUND") return true;
+  const msg = err instanceof Error ? err.message : String(err);
+  return msg.includes("Cannot find module") || msg.includes("Cannot find package");
+}
+
+// src/node.ts
 function createHostRequire(hostRoot = process.cwd()) {
   return (0, import_node_module.createRequire)((0, import_node_path.join)(hostRoot, "package.json"));
 }
-function createHostImporter(hostRequire = createHostRequire()) {
+var HOST_DECLARATION_FIELDS = [
+  "dependencies",
+  "devDependencies",
+  "optionalDependencies",
+  "peerDependencies"
+];
+function packageNameFromSpecifier(specifier) {
+  if (!specifier || specifier.startsWith(".") || specifier.startsWith("/")) return void 0;
+  if (/^[a-z][a-z0-9+.-]*:/i.test(specifier)) return void 0;
+  const segments = specifier.split("/");
+  if (specifier.startsWith("@")) {
+    if (segments.length < 2 || !segments[0] || !segments[1]) return void 0;
+    return `${segments[0]}/${segments[1]}`;
+  }
+  return segments[0] || void 0;
+}
+function readHostDeclaration(specifier, hostRoot = process.cwd()) {
+  const packageName = packageNameFromSpecifier(specifier) ?? specifier;
+  const base = { packageName, hostRoot, declared: false };
+  let manifest;
+  try {
+    manifest = JSON.parse((0, import_node_fs.readFileSync)((0, import_node_path.join)(hostRoot, "package.json"), "utf8"));
+  } catch {
+    return { ...base, manifestMissing: true };
+  }
+  for (const field of HOST_DECLARATION_FIELDS) {
+    const entries = manifest[field];
+    if (!entries || typeof entries !== "object") continue;
+    const specifierValue = entries[packageName];
+    if (specifierValue === void 0) continue;
+    return { ...base, declared: true, field, specifier: String(specifierValue) };
+  }
+  return base;
+}
+function isDeclaredByHost(specifier, hostRoot) {
+  return readHostDeclaration(specifier, hostRoot).declared;
+}
+var HOST_IMPORT_FAILURE_KIND = "objectstackHostImportFailureKind";
+function hostImportFailureKind(err) {
+  const kind = err?.[HOST_IMPORT_FAILURE_KIND];
+  return kind === "undeclared" || kind === "declared-unresolvable" ? kind : void 0;
+}
+function hostImportError(kind, message, cause) {
+  const err = new Error(message);
+  return Object.assign(err, {
+    cause,
+    code: "MODULE_NOT_FOUND",
+    [HOST_IMPORT_FAILURE_KIND]: kind
+  });
+}
+function undeclaredMessage(declaration, cause) {
+  const { packageName, hostRoot, manifestMissing } = declaration;
+  const detail = cause instanceof Error ? cause.message : String(cause);
+  return `Cannot find package '${packageName}': the host app does not declare it.
+  host app: ${hostRoot}
+` + (manifestMissing ? "  no readable package.json was found there \u2014 nothing can be declared\n" : `  checked: ${HOST_DECLARATION_FIELDS.join(", ")}
+`) + `
+  Declare it in that app's package.json and install it, e.g.
+      cd ${hostRoot} && pnpm add ${packageName}
+
+  Being merely REACHABLE is not enough and is rejected on purpose (#4719):
+  a package hoisted into a workspace store \u2014 which is what NODE_PATH points
+  at in every pnpm bin shim \u2014 used to resolve here regardless of the app's
+  package.json, so the same app booted or refused depending on how the
+  process was launched. The declaration is the contract.
+  (fallback resolution also failed: ${detail})`;
+}
+function unresolvableMessage(declaration, cause) {
+  const { packageName, hostRoot, field, specifier } = declaration;
+  const detail = cause instanceof Error ? cause.message : String(cause);
+  return `Cannot find module '${packageName}': the host app DECLARES it (${field}: ${JSON.stringify(specifier)}) but it could not be resolved.
+  host app: ${hostRoot}
+
+  This is an INSTALL problem, not a declaration problem \u2014 the declaration is
+  already there, so re-reading the package.json will not help. Check:
+    \u2022 dependencies never installed, or installed before the declaration was added \u2192 run \`pnpm install\` in ${hostRoot}
+    \u2022 a production prune / filtered deploy dropped it (devDependencies and
+      optionalDependencies go first)
+    \u2022 it IS installed but its "main"/"exports" points at a dist that was never built
+  (resolver: ${detail})`;
+}
+function createHostImporter(hostRoot = process.cwd()) {
+  const hostRequire = createHostRequire(hostRoot);
   return async (pkg) => {
-    let resolved;
-    try {
-      resolved = hostRequire.resolve(pkg);
-    } catch {
+    if (packageNameFromSpecifier(pkg) === void 0) {
       return import(
         /* webpackIgnore: true */
         pkg
       );
     }
-    return import((0, import_node_url.pathToFileURL)(resolved).href);
+    const declaration = readHostDeclaration(pkg, hostRoot);
+    if (declaration.declared) {
+      let resolved;
+      try {
+        resolved = hostRequire.resolve(pkg);
+      } catch (cause) {
+        throw hostImportError(
+          "declared-unresolvable",
+          unresolvableMessage(declaration, cause),
+          cause
+        );
+      }
+      return import((0, import_node_url.pathToFileURL)(resolved).href);
+    }
+    try {
+      return await import(
+        /* webpackIgnore: true */
+        pkg
+      );
+    } catch (cause) {
+      if (!isModuleNotFoundError(cause)) throw cause;
+      throw hostImportError("undeclared", undeclaredMessage(declaration, cause), cause);
+    }
   };
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  HOST_DECLARATION_FIELDS,
+  HOST_IMPORT_FAILURE_KIND,
   createHostImporter,
-  createHostRequire
+  createHostRequire,
+  hostImportFailureKind,
+  isDeclaredByHost,
+  packageNameFromSpecifier,
+  readHostDeclaration
 });
 //# sourceMappingURL=node.js.map

package/dist/node.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/node.ts"],"sourcesContent":["// Copyright (c) 2026 ObjectStack. Licensed under the Apache-2.0 license.\n\n/**\n * `@objectstack/types/node` — the **node-only** slice of the shared utilities.\n *\n * WHY A SUBPATH AND NOT THE ROOT EXPORT. `@objectstack/types` is a dependency of\n * `@objectstack/hono`, whose whole reason to exist is \"edge-compatible REST API\n * server for Cloudflare Workers, Deno, Bun, and Node\" — and of the plugin/service\n * layer a `LiteKernel` boots on Workers. The root entry (`src/index.ts`) reaches\n * **zero** `node:` builtins today, and that is a property those consumers depend\n * on: a Workers bundle that pulls in `node:module` fails to build (or dies at\n * first call) even when nothing ever invokes it. Everything here needs\n * `node:module` / `node:url` by definition — it exists to drive Node's own\n * resolver — so it lives behind its own entry point instead.\n *\n * The isolation is structural, not conventional: `tsup` builds `src/index.ts` and\n * `src/node.ts` as separate entries with `splitting: false`, so the root bundle\n * contains no reference to this file, and `node-isolation.test.ts` fails the\n * build if anything reachable from the root ever imports a `node:` builtin. Same\n * arrangement `@objectstack/metadata` already ships for `./node`.\n *\n * ── What lives here ──────────────────────────────────────────────────────────\n *\n * Resolving optional packages from the **host app**, not from the framework\n * package doing the importing.\n *\n * Node ESM resolves a bare `import('pkg')` against the **importer's own\n * realpath**. Framework packages (the CLI, `@objectstack/verify`,\n * `@objectstack/dogfood`) are reached through `link:`/workspace dependencies, so\n * their realpath is inside the *framework* workspace — a bare import from any of\n * them can only ever see packages installed in the framework's own\n * `node_modules`. Every package that lives OUTSIDE that workspace and is supplied\n * by the app being served, verified or tested — a cloud-private package such as\n * `@objectstack/organizations` or `@objectstack/service-ai-studio`, or anything a\n * customer installs into their own project — is therefore invisible to a bare\n * import, no matter what the host app declares in its `package.json`\n * (cloud#1013: `objectstack serve` could never load the enterprise multi-org\n * runtime, so every self-hosted walled-posture deployment hit the ADR-0093 D5\n * fail-fast and exited 1; framework#4700: `bootStack({ multiTenant: true })` told\n * apps to install a package they had already installed, and the dogfood\n * multi-org probes were constant-false).\n *\n * The fix is to resolve from the host app's root and import the resolved\n * absolute path. The importing package's own resolution stays as the fallback,\n * for the framework-owned packages it depends on and the host does not declare.\n *\n * Resolution failure is the ONLY thing that falls back. A package the host\n * resolves but that throws while it evaluates is a genuine crash and propagates\n * unchanged: re-importing it bare would replace the real cause with a\n * `MODULE_NOT_FOUND`, which every caller here classifies as \"not installed\" —\n * turning a broken package into a silent skip (or, on the organizations path,\n * into a fatal message telling the operator to install what is already there).\n */\n\nimport { createRequire } from 'node:module';\nimport { join } from 'node:path';\nimport { pathToFileURL } from 'node:url';\n\n/**\n * Imports a package as the host app would see it.\n *\n * `any` is the module namespace of a package this repo does not compile against\n * (it is not a dependency of the importing package at all) — every call site\n * reads an export off it dynamically, exactly as the bare `import()` it replaces\n * did.\n */\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport type HostImporter = (pkg: string) => Promise<any>;\n\n/**\n * A `require` anchored at the **host app's** `package.json` — i.e. the project\n * `objectstack serve` was invoked in, or the app `bootStack` is verifying, whose\n * `node_modules` carries the packages it declares.\n *\n * @param hostRoot Directory holding the host app's `package.json` (default: the\n * process CWD, which is where the CLI reads `objectstack.config.ts` from too).\n */\nexport function createHostRequire(hostRoot: string = process.cwd()): NodeRequire {\n  return createRequire(join(hostRoot, 'package.json'));\n}\n\n/**\n * Build an importer that resolves from the host app first, then falls back to\n * the importing package's own resolution.\n *\n * @param hostRequire Reuse an existing host `require` (callers usually also need\n * it to read the host `package.json`); defaults to one anchored at the CWD.\n */\nexport function createHostImporter(\n  hostRequire: NodeRequire = createHostRequire(),\n): HostImporter {\n  return async (pkg: string): Promise<any> => {\n    let resolved: string;\n    try {\n      resolved = hostRequire.resolve(pkg);\n    } catch {\n      // Invisible to the host app — try the importing package's own\n      // dependencies. A package neither can see throws MODULE_NOT_FOUND from\n      // here, which is what the callers' \"missing vs crashed\" classification\n      // expects.\n      return import(/* webpackIgnore: true */ pkg);\n    }\n    return import(pathToFileURL(resolved).href);\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAsDA,yBAA8B;AAC9B,uBAAqB;AACrB,sBAA8B;AAqBvB,SAAS,kBAAkB,WAAmB,QAAQ,IAAI,GAAgB;AAC/E,aAAO,sCAAc,uBAAK,UAAU,cAAc,CAAC;AACrD;AASO,SAAS,mBACd,cAA2B,kBAAkB,GAC/B;AACd,SAAO,OAAO,QAA8B;AAC1C,QAAI;AACJ,QAAI;AACF,iBAAW,YAAY,QAAQ,GAAG;AAAA,IACpC,QAAQ;AAKN,aAAO;AAAA;AAAA,QAAiC;AAAA;AAAA,IAC1C;AACA,WAAO,WAAO,+BAAc,QAAQ,EAAE;AAAA,EACxC;AACF;","names":[]}
+{"version":3,"sources":["../src/node.ts","../src/module-not-found.ts"],"sourcesContent":["// Copyright (c) 2026 ObjectStack. Licensed under the Apache-2.0 license.\n\n/**\n * `@objectstack/types/node` — the **node-only** slice of the shared utilities.\n *\n * WHY A SUBPATH AND NOT THE ROOT EXPORT. `@objectstack/types` is a dependency of\n * `@objectstack/hono`, whose whole reason to exist is \"edge-compatible REST API\n * server for Cloudflare Workers, Deno, Bun, and Node\" — and of the plugin/service\n * layer a `LiteKernel` boots on Workers. The root entry (`src/index.ts`) reaches\n * **zero** `node:` builtins today, and that is a property those consumers depend\n * on: a Workers bundle that pulls in `node:module` fails to build (or dies at\n * first call) even when nothing ever invokes it. Everything here needs\n * `node:module` / `node:url` by definition — it exists to drive Node's own\n * resolver — so it lives behind its own entry point instead.\n *\n * The isolation is structural, not conventional: `tsup` builds `src/index.ts` and\n * `src/node.ts` as separate entries with `splitting: false`, so the root bundle\n * contains no reference to this file, and `node-isolation.test.ts` fails the\n * build if anything reachable from the root ever imports a `node:` builtin. Same\n * arrangement `@objectstack/metadata` already ships for `./node`.\n *\n * ── What lives here ──────────────────────────────────────────────────────────\n *\n * Resolving optional packages from the **host app**, not from the framework\n * package doing the importing.\n *\n * Node ESM resolves a bare `import('pkg')` against the **importer's own\n * realpath**. Framework packages (the CLI, `@objectstack/verify`,\n * `@objectstack/dogfood`) are reached through `link:`/workspace dependencies, so\n * their realpath is inside the *framework* workspace — a bare import from any of\n * them can only ever see packages installed in the framework's own\n * `node_modules`. Every package that lives OUTSIDE that workspace and is supplied\n * by the app being served, verified or tested — a cloud-private package such as\n * `@objectstack/organizations` or `@objectstack/service-ai-studio`, or anything a\n * customer installs into their own project — is therefore invisible to a bare\n * import, no matter what the host app declares in its `package.json`\n * (cloud#1013: `objectstack serve` could never load the enterprise multi-org\n * runtime, so every self-hosted walled-posture deployment hit the ADR-0093 D5\n * fail-fast and exited 1; framework#4700: `bootStack({ multiTenant: true })` told\n * apps to install a package they had already installed, and the dogfood\n * multi-org probes were constant-false).\n *\n * The fix is to resolve from the host app's root and import the resolved\n * absolute path. The importing package's own resolution stays as the fallback,\n * for the framework-owned packages it depends on and the host does not declare.\n *\n * Resolution failure is the ONLY thing that falls back. A package the host\n * resolves but that throws while it evaluates is a genuine crash and propagates\n * unchanged: re-importing it bare would replace the real cause with a\n * `MODULE_NOT_FOUND`, which every caller here classifies as \"not installed\" —\n * turning a broken package into a silent skip (or, on the organizations path,\n * into a fatal message telling the operator to install what is already there).\n *\n * ── #4719: the host's DECLARATION gates the lookup, not its resolvability ────\n *\n * \"Resolve from the host app\" was implemented as a CJS `createRequire` anchored\n * at the host's `package.json`, and **CJS resolution honours `NODE_PATH`**\n * (`Module.globalPaths`). The first thing a pnpm-generated bin shim does is\n *\n *     export NODE_PATH=\"<workspace>/node_modules/.pnpm/node_modules\"\n *\n * and every `serve` / `dev` child process inherits it. Everything any package in\n * the workspace transitively depends on lives in that hoisted store, so\n * `hostRequire.resolve(pkg)` succeeded for packages the host app had never\n * declared — the answer depended on HOW THE PROCESS WAS LAUNCHED, not on the\n * app. Measured on cloud's `apps/objectos-ee`, which did not declare\n * `@objectstack/organizations`: `pnpm start` (through the shim) booted with the\n * organizations plugin mounted and ADR-0093 D5 silent, while\n * `node node_modules/@objectstack/cli/bin/run.js serve` (no shim, no NODE_PATH)\n * hit the D5 fail-fast and exited 1. Same app, same `package.json`, same\n * posture. D5's own message told operators to \"declare it in the app's\n * package.json\" — the one thing the CLI never checked.\n *\n * So the host lookup is now gated on the host's **declaration**: a package name\n * is looked up in the host's `node_modules` only when it appears in the host\n * `package.json` (see {@link HOST_DECLARATION_FIELDS}). Reachability through a\n * hoisted store or `NODE_PATH` is deliberately not accepted — it is precisely\n * the accident that made the contract unenforced. This is the \"declared =\n * enforced\" shape the rest of the repo uses (Prime Directive #10): the\n * declaration is a deliberate authoring act, machine-checkable at the moment of\n * boot, and independent of launcher, package manager and hoist layout.\n *\n * The two failures it separates were, until now, one indistinguishable\n * `MODULE_NOT_FOUND`, with opposite remedies:\n *\n *   - **undeclared** — the app never asked for this package. Remedy: declare it\n *     in the app's `package.json` and install.\n *   - **declared but unresolvable** — the app asked for it and the install is\n *     broken/pruned/unbuilt. Remedy: fix the install. Re-reading the\n *     `package.json` is wasted effort; the declaration is right there.\n *\n * {@link hostImportFailureKind} exposes that classification to callers so their\n * fail-fast text can say which one it is (`packages/cli` ADR-0093 D5,\n * `packages/verify` `bootStack`, `packages/qa/dogfood`'s enterprise probe).\n */\n\nimport { readFileSync } from 'node:fs';\nimport { createRequire } from 'node:module';\nimport { join } from 'node:path';\nimport { pathToFileURL } from 'node:url';\nimport { isModuleNotFoundError } from './module-not-found.js';\n\n/**\n * Imports a package as the host app would see it.\n *\n * `any` is the module namespace of a package this repo does not compile against\n * (it is not a dependency of the importing package at all) — every call site\n * reads an export off it dynamically, exactly as the bare `import()` it replaces\n * did.\n */\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport type HostImporter = (pkg: string) => Promise<any>;\n\n/**\n * A `require` anchored at the **host app's** `package.json` — i.e. the project\n * `objectstack serve` was invoked in, or the app `bootStack` is verifying, whose\n * `node_modules` carries the packages it declares.\n *\n * @param hostRoot Directory holding the host app's `package.json` (default: the\n * process CWD, which is where the CLI reads `objectstack.config.ts` from too).\n */\nexport function createHostRequire(hostRoot: string = process.cwd()): NodeRequire {\n  return createRequire(join(hostRoot, 'package.json'));\n}\n\n/**\n * The `package.json` fields whose KEYS count as a host-app declaration (#4719).\n *\n * All four are deliberate authoring acts in the app's own manifest that name the\n * package, which is the signal this gate is built on — not \"is it reachable\".\n * Why each is in:\n *\n * - `dependencies` — the obvious one: the app runs with it.\n * - `devDependencies` — the app being served / verified / dogfooded IS the\n *   project, not a library someone else consumes, so its dev deps are installed\n *   in exactly the environment this resolver runs in.\n * - `optionalDependencies` — npm/pnpm install them and tolerate an install\n *   failure. \"Installed ⇒ declared\" holds; and if it did NOT install, the\n *   declared-but-unresolvable branch says so precisely instead of pretending the\n *   app never asked.\n * - `peerDependencies` — an app is nobody's peer, so this is an unusual place to\n *   put an enterprise add-on; but it still NAMES the package on purpose, and\n *   `packages/cli`'s own edition gate (`serve`'s AI-service opt-in, #1597) has\n *   read all four since it was written. Accepting three here and four there\n *   would fork \"declared\" into two dialects for one question — the shape Prime\n *   Directive #12 exists to prevent. That gate now delegates to this list, so\n *   there is one owner and one answer.\n *\n * `bundleDependencies` is absent on purpose: it is an array of names that must\n * ALSO appear in `dependencies`, so it can never be the only declaration.\n */\nexport const HOST_DECLARATION_FIELDS = [\n  'dependencies',\n  'devDependencies',\n  'optionalDependencies',\n  'peerDependencies',\n] as const;\n\nexport type HostDeclarationField = (typeof HOST_DECLARATION_FIELDS)[number];\n\n/** What the host app's `package.json` says about one package name. */\nexport interface HostDeclaration {\n  /** Bare package name the specifier belongs to (subpath stripped). */\n  packageName: string;\n  /** Directory whose `package.json` was consulted. */\n  hostRoot: string;\n  /** True when {@link packageName} is a key of one of {@link HOST_DECLARATION_FIELDS}. */\n  declared: boolean;\n  /** Which field carried it (first match, in {@link HOST_DECLARATION_FIELDS} order). */\n  field?: HostDeclarationField;\n  /** The version range AS WRITTEN — `^1.2.3`, `workspace:*`, `npm:@acme/x@1`, `link:../x`. */\n  specifier?: string;\n  /** True when `hostRoot` has no readable / parseable `package.json` at all. */\n  manifestMissing?: boolean;\n}\n\n/**\n * The package a bare specifier belongs to, or `undefined` when the specifier is\n * not a bare package name at all (a relative/absolute path, a `file:`/`data:`\n * URL, or a `node:`-prefixed builtin). Those bypass the declaration gate: they\n * are not things a `package.json` can declare.\n *\n * Subpaths are stripped, so `@objectstack/platform-objects/plugin` is declared\n * by `\"@objectstack/platform-objects\"`, which is the only key that can exist.\n * Scoped names keep both segments.\n *\n * Alias dependencies need no special case, and that is the point: with\n * `\"foo\": \"npm:bar@1\"` the importable specifier is `foo` and the manifest key is\n * `foo`, so keying on the KEY (never the value) is exactly right — `import('bar')`\n * correctly reads as undeclared unless `bar` is itself a key. Same for\n * `workspace:` / `link:` / `file:` specifiers: the key is the name, the value is\n * the package manager's business.\n */\nexport function packageNameFromSpecifier(specifier: string): string | undefined {\n  if (!specifier || specifier.startsWith('.') || specifier.startsWith('/')) return undefined;\n  // A URL-ish or protocol-prefixed specifier (`node:fs`, `file:///…`, `data:…`).\n  if (/^[a-z][a-z0-9+.-]*:/i.test(specifier)) return undefined;\n  const segments = specifier.split('/');\n  if (specifier.startsWith('@')) {\n    if (segments.length < 2 || !segments[0] || !segments[1]) return undefined;\n    return `${segments[0]}/${segments[1]}`;\n  }\n  return segments[0] || undefined;\n}\n\n/**\n * Read what the host app's `package.json` declares about `specifier`.\n *\n * Deliberately a plain manifest READ, never a resolution attempt: resolvability\n * is the property #4719 proved unreliable (it moved with `NODE_PATH` and the\n * hoist layout), while the manifest is the same fact in every launcher.\n */\nexport function readHostDeclaration(\n  specifier: string,\n  hostRoot: string = process.cwd(),\n): HostDeclaration {\n  const packageName = packageNameFromSpecifier(specifier) ?? specifier;\n  const base: HostDeclaration = { packageName, hostRoot, declared: false };\n\n  let manifest: Record<string, unknown>;\n  try {\n    manifest = JSON.parse(readFileSync(join(hostRoot, 'package.json'), 'utf8')) as Record<\n      string,\n      unknown\n    >;\n  } catch {\n    // No manifest ⇒ nothing is declared. Recorded rather than swallowed so the\n    // failure text can say \"there is no package.json here\" instead of the\n    // misleading \"you did not declare it\".\n    return { ...base, manifestMissing: true };\n  }\n\n  for (const field of HOST_DECLARATION_FIELDS) {\n    const entries = manifest[field];\n    if (!entries || typeof entries !== 'object') continue;\n    const specifierValue = (entries as Record<string, unknown>)[packageName];\n    if (specifierValue === undefined) continue;\n    return { ...base, declared: true, field, specifier: String(specifierValue) };\n  }\n  return base;\n}\n\n/** Convenience predicate over {@link readHostDeclaration}. */\nexport function isDeclaredByHost(specifier: string, hostRoot?: string): boolean {\n  return readHostDeclaration(specifier, hostRoot).declared;\n}\n\n/**\n * Why a {@link HostImporter} could not produce a module.\n *\n * - `undeclared` — the host app's `package.json` never names the package, and\n *   the importing framework package cannot supply it either. Remedy: DECLARE it\n *   in the app and install.\n * - `declared-unresolvable` — the app declares it and it still would not\n *   resolve. Remedy: fix the INSTALL. Re-reading the manifest is wasted effort.\n *\n * An evaluation crash is neither: it propagates untouched and carries no kind.\n */\nexport type HostImportFailureKind = 'undeclared' | 'declared-unresolvable';\n\n/**\n * Property carrying {@link HostImportFailureKind} on a thrown error.\n *\n * A string property, read by {@link hostImportFailureKind} — never `instanceof`.\n * `serve` loads plugins through this importer, so CLI and package can hold\n * different module instances of anything class-shaped; the #4818 comment in\n * `serve.ts` names that trap explicitly.\n */\nexport const HOST_IMPORT_FAILURE_KIND = 'objectstackHostImportFailureKind';\n\n/** The classification on an error thrown by a {@link HostImporter}, if any. */\nexport function hostImportFailureKind(err: unknown): HostImportFailureKind | undefined {\n  const kind = (err as Record<string, unknown> | null | undefined)?.[HOST_IMPORT_FAILURE_KIND];\n  return kind === 'undeclared' || kind === 'declared-unresolvable' ? kind : undefined;\n}\n\nfunction hostImportError(\n  kind: HostImportFailureKind,\n  message: string,\n  cause: unknown,\n): Error {\n  // `cause` is assigned rather than passed to the constructor: this package\n  // compiles against a lib without the ES2022 `ErrorOptions` overload.\n  const err = new Error(message);\n  // Every caller classifies \"missing vs crashed\" through\n  // `isModuleNotFoundError`; both of these ARE the missing case, just with\n  // different remedies, so they must keep answering true to it.\n  return Object.assign(err, {\n    cause,\n    code: 'MODULE_NOT_FOUND',\n    [HOST_IMPORT_FAILURE_KIND]: kind,\n  });\n}\n\nfunction undeclaredMessage(declaration: HostDeclaration, cause: unknown): string {\n  const { packageName, hostRoot, manifestMissing } = declaration;\n  const detail = cause instanceof Error ? cause.message : String(cause);\n  return (\n    `Cannot find package '${packageName}': the host app does not declare it.\\n` +\n    `  host app: ${hostRoot}\\n` +\n    (manifestMissing\n      ? '  no readable package.json was found there — nothing can be declared\\n'\n      : `  checked: ${HOST_DECLARATION_FIELDS.join(', ')}\\n`) +\n    `\\n  Declare it in that app's package.json and install it, e.g.\\n` +\n    `      cd ${hostRoot} && pnpm add ${packageName}\\n` +\n    '\\n  Being merely REACHABLE is not enough and is rejected on purpose (#4719):\\n' +\n    '  a package hoisted into a workspace store — which is what NODE_PATH points\\n' +\n    \"  at in every pnpm bin shim — used to resolve here regardless of the app's\\n\" +\n    '  package.json, so the same app booted or refused depending on how the\\n' +\n    '  process was launched. The declaration is the contract.\\n' +\n    `  (fallback resolution also failed: ${detail})`\n  );\n}\n\nfunction unresolvableMessage(declaration: HostDeclaration, cause: unknown): string {\n  const { packageName, hostRoot, field, specifier } = declaration;\n  const detail = cause instanceof Error ? cause.message : String(cause);\n  return (\n    `Cannot find module '${packageName}': the host app DECLARES it ` +\n    `(${field}: ${JSON.stringify(specifier)}) but it could not be resolved.\\n` +\n    `  host app: ${hostRoot}\\n` +\n    '\\n  This is an INSTALL problem, not a declaration problem — the declaration is\\n' +\n    '  already there, so re-reading the package.json will not help. Check:\\n' +\n    `    • dependencies never installed, or installed before the declaration was added → run \\`pnpm install\\` in ${hostRoot}\\n` +\n    '    • a production prune / filtered deploy dropped it (devDependencies and\\n' +\n    '      optionalDependencies go first)\\n' +\n    '    • it IS installed but its \"main\"/\"exports\" points at a dist that was never built\\n' +\n    `  (resolver: ${detail})`\n  );\n}\n\n/**\n * Build an importer that loads a package **as the host app declares it**, and\n * otherwise falls back to the importing package's own resolution.\n *\n * Order of operations, and why (#4719):\n *\n * 1. The host `package.json` is READ. Only a declared name is looked up in the\n *    host's `node_modules`. An undeclared name never reaches the host resolver,\n *    so no amount of `NODE_PATH` / hoisting can make it appear to be the app's.\n * 2. Declared but unresolvable is reported AS SUCH — the app asked for it and\n *    the install is broken. It is not retried bare: falling back there would\n *    reintroduce exactly the \"some other package happens to supply it\" accident\n *    this gate closes, and would report an install problem as an absence.\n * 3. Undeclared falls back to the importing package's own resolution, which is\n *    what keeps every framework-owned load working (`serve`'s plugin-auth /\n *    service-i18n path, `bootStack`'s service plugins). Bare `import()` is ESM,\n *    and ESM does not honour `NODE_PATH`, so the fallback cannot re-open the\n *    hole either. Only when that fails as module-not-found does the undeclared\n *    error surface; a package that RESOLVES and then throws while evaluating is\n *    a genuine crash and propagates untouched, as before.\n *\n * @param hostRoot Directory holding the host app's `package.json` (default: the\n * process CWD, which is where the CLI reads `objectstack.config.ts` from too).\n * Note this used to take a pre-built `NodeRequire`; it needs the ROOT now,\n * because a `NodeRequire` cannot be asked where it was anchored and the manifest\n * has to be read from there.\n */\nexport function createHostImporter(hostRoot: string = process.cwd()): HostImporter {\n  const hostRequire = createHostRequire(hostRoot);\n  return async (pkg: string): Promise<any> => {\n    // Not a bare package name (a path, a URL, a `node:` builtin) — nothing a\n    // manifest could declare. Hand it to the normal resolver untouched.\n    if (packageNameFromSpecifier(pkg) === undefined) {\n      return import(/* webpackIgnore: true */ pkg);\n    }\n\n    const declaration = readHostDeclaration(pkg, hostRoot);\n\n    if (declaration.declared) {\n      let resolved: string;\n      try {\n        resolved = hostRequire.resolve(pkg);\n      } catch (cause) {\n        throw hostImportError(\n          'declared-unresolvable',\n          unresolvableMessage(declaration, cause),\n          cause,\n        );\n      }\n      return import(pathToFileURL(resolved).href);\n    }\n\n    try {\n      return await import(/* webpackIgnore: true */ pkg);\n    } catch (cause) {\n      // A package that resolved and then exploded is a crash, not an absence.\n      if (!isModuleNotFoundError(cause)) throw cause;\n      throw hostImportError('undeclared', undeclaredMessage(declaration, cause), cause);\n    }\n  };\n}\n","// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.\n\n/**\n * True when a dynamic `import()` / `require.resolve()` failed because the\n * module is simply NOT INSTALLED — as opposed to the module being present but\n * throwing while it loads (a real crash). Checking `err.code` FIRST matters:\n * ESM reports a missing package as `err.code === 'ERR_MODULE_NOT_FOUND'` with\n * the human message `Cannot find package '...'`; matching only the older\n * `Cannot find module` string mis-classifies that as a crash (framework#1595).\n *\n * Single shared owner for this classification (framework#3265): the CLI's\n * optional-plugin guards and `requires` capability resolver delegate here, and\n * cloud's `objectos-runtime` capability loader is expected to adopt it at its\n * next framework pin bump — so the parallel loaders cannot drift apart and\n * re-introduce the #1595 false-alarm class.\n */\nexport function isModuleNotFoundError(err: unknown): boolean {\n  const code = (err as { code?: string } | null | undefined)?.code;\n  if (code === 'ERR_MODULE_NOT_FOUND' || code === 'MODULE_NOT_FOUND') return true;\n  const msg = err instanceof Error ? err.message : String(err);\n  return msg.includes('Cannot find module') || msg.includes('Cannot find package');\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAgGA,qBAA6B;AAC7B,yBAA8B;AAC9B,uBAAqB;AACrB,sBAA8B;;;ACnFvB,SAAS,sBAAsB,KAAuB;AAC3D,QAAM,OAAQ,KAA8C;AAC5D,MAAI,SAAS,0BAA0B,SAAS,mBAAoB,QAAO;AAC3E,QAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,SAAO,IAAI,SAAS,oBAAoB,KAAK,IAAI,SAAS,qBAAqB;AACjF;;;ADoGO,SAAS,kBAAkB,WAAmB,QAAQ,IAAI,GAAgB;AAC/E,aAAO,sCAAc,uBAAK,UAAU,cAAc,CAAC;AACrD;AA4BO,IAAM,0BAA0B;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAqCO,SAAS,yBAAyB,WAAuC;AAC9E,MAAI,CAAC,aAAa,UAAU,WAAW,GAAG,KAAK,UAAU,WAAW,GAAG,EAAG,QAAO;AAEjF,MAAI,uBAAuB,KAAK,SAAS,EAAG,QAAO;AACnD,QAAM,WAAW,UAAU,MAAM,GAAG;AACpC,MAAI,UAAU,WAAW,GAAG,GAAG;AAC7B,QAAI,SAAS,SAAS,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,EAAG,QAAO;AAChE,WAAO,GAAG,SAAS,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC;AAAA,EACtC;AACA,SAAO,SAAS,CAAC,KAAK;AACxB;AASO,SAAS,oBACd,WACA,WAAmB,QAAQ,IAAI,GACd;AACjB,QAAM,cAAc,yBAAyB,SAAS,KAAK;AAC3D,QAAM,OAAwB,EAAE,aAAa,UAAU,UAAU,MAAM;AAEvE,MAAI;AACJ,MAAI;AACF,eAAW,KAAK,UAAM,iCAAa,uBAAK,UAAU,cAAc,GAAG,MAAM,CAAC;AAAA,EAI5E,QAAQ;AAIN,WAAO,EAAE,GAAG,MAAM,iBAAiB,KAAK;AAAA,EAC1C;AAEA,aAAW,SAAS,yBAAyB;AAC3C,UAAM,UAAU,SAAS,KAAK;AAC9B,QAAI,CAAC,WAAW,OAAO,YAAY,SAAU;AAC7C,UAAM,iBAAkB,QAAoC,WAAW;AACvE,QAAI,mBAAmB,OAAW;AAClC,WAAO,EAAE,GAAG,MAAM,UAAU,MAAM,OAAO,WAAW,OAAO,cAAc,EAAE;AAAA,EAC7E;AACA,SAAO;AACT;AAGO,SAAS,iBAAiB,WAAmB,UAA4B;AAC9E,SAAO,oBAAoB,WAAW,QAAQ,EAAE;AAClD;AAuBO,IAAM,2BAA2B;AAGjC,SAAS,sBAAsB,KAAiD;AACrF,QAAM,OAAQ,MAAqD,wBAAwB;AAC3F,SAAO,SAAS,gBAAgB,SAAS,0BAA0B,OAAO;AAC5E;AAEA,SAAS,gBACP,MACA,SACA,OACO;AAGP,QAAM,MAAM,IAAI,MAAM,OAAO;AAI7B,SAAO,OAAO,OAAO,KAAK;AAAA,IACxB;AAAA,IACA,MAAM;AAAA,IACN,CAAC,wBAAwB,GAAG;AAAA,EAC9B,CAAC;AACH;AAEA,SAAS,kBAAkB,aAA8B,OAAwB;AAC/E,QAAM,EAAE,aAAa,UAAU,gBAAgB,IAAI;AACnD,QAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACpE,SACE,wBAAwB,WAAW;AAAA,cACpB,QAAQ;AAAA,KACtB,kBACG,gFACA,cAAc,wBAAwB,KAAK,IAAI,CAAC;AAAA,KACpD;AAAA;AAAA,WACY,QAAQ,gBAAgB,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,sCAMR,MAAM;AAEjD;AAEA,SAAS,oBAAoB,aAA8B,OAAwB;AACjF,QAAM,EAAE,aAAa,UAAU,OAAO,UAAU,IAAI;AACpD,QAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACpE,SACE,uBAAuB,WAAW,gCAC9B,KAAK,KAAK,KAAK,UAAU,SAAS,CAAC;AAAA,cACxB,QAAQ;AAAA;AAAA;AAAA;AAAA,wHAGwF,QAAQ;AAAA;AAAA;AAAA;AAAA,eAIvG,MAAM;AAE1B;AA6BO,SAAS,mBAAmB,WAAmB,QAAQ,IAAI,GAAiB;AACjF,QAAM,cAAc,kBAAkB,QAAQ;AAC9C,SAAO,OAAO,QAA8B;AAG1C,QAAI,yBAAyB,GAAG,MAAM,QAAW;AAC/C,aAAO;AAAA;AAAA,QAAiC;AAAA;AAAA,IAC1C;AAEA,UAAM,cAAc,oBAAoB,KAAK,QAAQ;AAErD,QAAI,YAAY,UAAU;AACxB,UAAI;AACJ,UAAI;AACF,mBAAW,YAAY,QAAQ,GAAG;AAAA,MACpC,SAAS,OAAO;AACd,cAAM;AAAA,UACJ;AAAA,UACA,oBAAoB,aAAa,KAAK;AAAA,UACtC;AAAA,QACF;AAAA,MACF;AACA,aAAO,WAAO,+BAAc,QAAQ,EAAE;AAAA,IACxC;AAEA,QAAI;AACF,aAAO,MAAM;AAAA;AAAA,QAAiC;AAAA;AAAA,IAChD,SAAS,OAAO;AAEd,UAAI,CAAC,sBAAsB,KAAK,EAAG,OAAM;AACzC,YAAM,gBAAgB,cAAc,kBAAkB,aAAa,KAAK,GAAG,KAAK;AAAA,IAClF;AAAA,EACF;AACF;","names":[]}

package/dist/node.mjs

@@ -1,26 +1,144 @@
 // src/node.ts
+import { readFileSync } from "fs";
 import { createRequire } from "module";
 import { join } from "path";
 import { pathToFileURL } from "url";
+
+// src/module-not-found.ts
+function isModuleNotFoundError(err) {
+  const code = err?.code;
+  if (code === "ERR_MODULE_NOT_FOUND" || code === "MODULE_NOT_FOUND") return true;
+  const msg = err instanceof Error ? err.message : String(err);
+  return msg.includes("Cannot find module") || msg.includes("Cannot find package");
+}
+
+// src/node.ts
 function createHostRequire(hostRoot = process.cwd()) {
   return createRequire(join(hostRoot, "package.json"));
 }
-function createHostImporter(hostRequire = createHostRequire()) {
+var HOST_DECLARATION_FIELDS = [
+  "dependencies",
+  "devDependencies",
+  "optionalDependencies",
+  "peerDependencies"
+];
+function packageNameFromSpecifier(specifier) {
+  if (!specifier || specifier.startsWith(".") || specifier.startsWith("/")) return void 0;
+  if (/^[a-z][a-z0-9+.-]*:/i.test(specifier)) return void 0;
+  const segments = specifier.split("/");
+  if (specifier.startsWith("@")) {
+    if (segments.length < 2 || !segments[0] || !segments[1]) return void 0;
+    return `${segments[0]}/${segments[1]}`;
+  }
+  return segments[0] || void 0;
+}
+function readHostDeclaration(specifier, hostRoot = process.cwd()) {
+  const packageName = packageNameFromSpecifier(specifier) ?? specifier;
+  const base = { packageName, hostRoot, declared: false };
+  let manifest;
+  try {
+    manifest = JSON.parse(readFileSync(join(hostRoot, "package.json"), "utf8"));
+  } catch {
+    return { ...base, manifestMissing: true };
+  }
+  for (const field of HOST_DECLARATION_FIELDS) {
+    const entries = manifest[field];
+    if (!entries || typeof entries !== "object") continue;
+    const specifierValue = entries[packageName];
+    if (specifierValue === void 0) continue;
+    return { ...base, declared: true, field, specifier: String(specifierValue) };
+  }
+  return base;
+}
+function isDeclaredByHost(specifier, hostRoot) {
+  return readHostDeclaration(specifier, hostRoot).declared;
+}
+var HOST_IMPORT_FAILURE_KIND = "objectstackHostImportFailureKind";
+function hostImportFailureKind(err) {
+  const kind = err?.[HOST_IMPORT_FAILURE_KIND];
+  return kind === "undeclared" || kind === "declared-unresolvable" ? kind : void 0;
+}
+function hostImportError(kind, message, cause) {
+  const err = new Error(message);
+  return Object.assign(err, {
+    cause,
+    code: "MODULE_NOT_FOUND",
+    [HOST_IMPORT_FAILURE_KIND]: kind
+  });
+}
+function undeclaredMessage(declaration, cause) {
+  const { packageName, hostRoot, manifestMissing } = declaration;
+  const detail = cause instanceof Error ? cause.message : String(cause);
+  return `Cannot find package '${packageName}': the host app does not declare it.
+  host app: ${hostRoot}
+` + (manifestMissing ? "  no readable package.json was found there \u2014 nothing can be declared\n" : `  checked: ${HOST_DECLARATION_FIELDS.join(", ")}
+`) + `
+  Declare it in that app's package.json and install it, e.g.
+      cd ${hostRoot} && pnpm add ${packageName}
+
+  Being merely REACHABLE is not enough and is rejected on purpose (#4719):
+  a package hoisted into a workspace store \u2014 which is what NODE_PATH points
+  at in every pnpm bin shim \u2014 used to resolve here regardless of the app's
+  package.json, so the same app booted or refused depending on how the
+  process was launched. The declaration is the contract.
+  (fallback resolution also failed: ${detail})`;
+}
+function unresolvableMessage(declaration, cause) {
+  const { packageName, hostRoot, field, specifier } = declaration;
+  const detail = cause instanceof Error ? cause.message : String(cause);
+  return `Cannot find module '${packageName}': the host app DECLARES it (${field}: ${JSON.stringify(specifier)}) but it could not be resolved.
+  host app: ${hostRoot}
+
+  This is an INSTALL problem, not a declaration problem \u2014 the declaration is
+  already there, so re-reading the package.json will not help. Check:
+    \u2022 dependencies never installed, or installed before the declaration was added \u2192 run \`pnpm install\` in ${hostRoot}
+    \u2022 a production prune / filtered deploy dropped it (devDependencies and
+      optionalDependencies go first)
+    \u2022 it IS installed but its "main"/"exports" points at a dist that was never built
+  (resolver: ${detail})`;
+}
+function createHostImporter(hostRoot = process.cwd()) {
+  const hostRequire = createHostRequire(hostRoot);
   return async (pkg) => {
-    let resolved;
-    try {
-      resolved = hostRequire.resolve(pkg);
-    } catch {
+    if (packageNameFromSpecifier(pkg) === void 0) {
       return import(
         /* webpackIgnore: true */
         pkg
       );
     }
-    return import(pathToFileURL(resolved).href);
+    const declaration = readHostDeclaration(pkg, hostRoot);
+    if (declaration.declared) {
+      let resolved;
+      try {
+        resolved = hostRequire.resolve(pkg);
+      } catch (cause) {
+        throw hostImportError(
+          "declared-unresolvable",
+          unresolvableMessage(declaration, cause),
+          cause
+        );
+      }
+      return import(pathToFileURL(resolved).href);
+    }
+    try {
+      return await import(
+        /* webpackIgnore: true */
+        pkg
+      );
+    } catch (cause) {
+      if (!isModuleNotFoundError(cause)) throw cause;
+      throw hostImportError("undeclared", undeclaredMessage(declaration, cause), cause);
+    }
   };
 }
 export {
+  HOST_DECLARATION_FIELDS,
+  HOST_IMPORT_FAILURE_KIND,
   createHostImporter,
-  createHostRequire
+  createHostRequire,
+  hostImportFailureKind,
+  isDeclaredByHost,
+  packageNameFromSpecifier,
+  readHostDeclaration
 };
 //# sourceMappingURL=node.mjs.map

package/dist/node.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/node.ts"],"sourcesContent":["// Copyright (c) 2026 ObjectStack. Licensed under the Apache-2.0 license.\n\n/**\n * `@objectstack/types/node` — the **node-only** slice of the shared utilities.\n *\n * WHY A SUBPATH AND NOT THE ROOT EXPORT. `@objectstack/types` is a dependency of\n * `@objectstack/hono`, whose whole reason to exist is \"edge-compatible REST API\n * server for Cloudflare Workers, Deno, Bun, and Node\" — and of the plugin/service\n * layer a `LiteKernel` boots on Workers. The root entry (`src/index.ts`) reaches\n * **zero** `node:` builtins today, and that is a property those consumers depend\n * on: a Workers bundle that pulls in `node:module` fails to build (or dies at\n * first call) even when nothing ever invokes it. Everything here needs\n * `node:module` / `node:url` by definition — it exists to drive Node's own\n * resolver — so it lives behind its own entry point instead.\n *\n * The isolation is structural, not conventional: `tsup` builds `src/index.ts` and\n * `src/node.ts` as separate entries with `splitting: false`, so the root bundle\n * contains no reference to this file, and `node-isolation.test.ts` fails the\n * build if anything reachable from the root ever imports a `node:` builtin. Same\n * arrangement `@objectstack/metadata` already ships for `./node`.\n *\n * ── What lives here ──────────────────────────────────────────────────────────\n *\n * Resolving optional packages from the **host app**, not from the framework\n * package doing the importing.\n *\n * Node ESM resolves a bare `import('pkg')` against the **importer's own\n * realpath**. Framework packages (the CLI, `@objectstack/verify`,\n * `@objectstack/dogfood`) are reached through `link:`/workspace dependencies, so\n * their realpath is inside the *framework* workspace — a bare import from any of\n * them can only ever see packages installed in the framework's own\n * `node_modules`. Every package that lives OUTSIDE that workspace and is supplied\n * by the app being served, verified or tested — a cloud-private package such as\n * `@objectstack/organizations` or `@objectstack/service-ai-studio`, or anything a\n * customer installs into their own project — is therefore invisible to a bare\n * import, no matter what the host app declares in its `package.json`\n * (cloud#1013: `objectstack serve` could never load the enterprise multi-org\n * runtime, so every self-hosted walled-posture deployment hit the ADR-0093 D5\n * fail-fast and exited 1; framework#4700: `bootStack({ multiTenant: true })` told\n * apps to install a package they had already installed, and the dogfood\n * multi-org probes were constant-false).\n *\n * The fix is to resolve from the host app's root and import the resolved\n * absolute path. The importing package's own resolution stays as the fallback,\n * for the framework-owned packages it depends on and the host does not declare.\n *\n * Resolution failure is the ONLY thing that falls back. A package the host\n * resolves but that throws while it evaluates is a genuine crash and propagates\n * unchanged: re-importing it bare would replace the real cause with a\n * `MODULE_NOT_FOUND`, which every caller here classifies as \"not installed\" —\n * turning a broken package into a silent skip (or, on the organizations path,\n * into a fatal message telling the operator to install what is already there).\n */\n\nimport { createRequire } from 'node:module';\nimport { join } from 'node:path';\nimport { pathToFileURL } from 'node:url';\n\n/**\n * Imports a package as the host app would see it.\n *\n * `any` is the module namespace of a package this repo does not compile against\n * (it is not a dependency of the importing package at all) — every call site\n * reads an export off it dynamically, exactly as the bare `import()` it replaces\n * did.\n */\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport type HostImporter = (pkg: string) => Promise<any>;\n\n/**\n * A `require` anchored at the **host app's** `package.json` — i.e. the project\n * `objectstack serve` was invoked in, or the app `bootStack` is verifying, whose\n * `node_modules` carries the packages it declares.\n *\n * @param hostRoot Directory holding the host app's `package.json` (default: the\n * process CWD, which is where the CLI reads `objectstack.config.ts` from too).\n */\nexport function createHostRequire(hostRoot: string = process.cwd()): NodeRequire {\n  return createRequire(join(hostRoot, 'package.json'));\n}\n\n/**\n * Build an importer that resolves from the host app first, then falls back to\n * the importing package's own resolution.\n *\n * @param hostRequire Reuse an existing host `require` (callers usually also need\n * it to read the host `package.json`); defaults to one anchored at the CWD.\n */\nexport function createHostImporter(\n  hostRequire: NodeRequire = createHostRequire(),\n): HostImporter {\n  return async (pkg: string): Promise<any> => {\n    let resolved: string;\n    try {\n      resolved = hostRequire.resolve(pkg);\n    } catch {\n      // Invisible to the host app — try the importing package's own\n      // dependencies. A package neither can see throws MODULE_NOT_FOUND from\n      // here, which is what the callers' \"missing vs crashed\" classification\n      // expects.\n      return import(/* webpackIgnore: true */ pkg);\n    }\n    return import(pathToFileURL(resolved).href);\n  };\n}\n"],"mappings":";AAsDA,SAAS,qBAAqB;AAC9B,SAAS,YAAY;AACrB,SAAS,qBAAqB;AAqBvB,SAAS,kBAAkB,WAAmB,QAAQ,IAAI,GAAgB;AAC/E,SAAO,cAAc,KAAK,UAAU,cAAc,CAAC;AACrD;AASO,SAAS,mBACd,cAA2B,kBAAkB,GAC/B;AACd,SAAO,OAAO,QAA8B;AAC1C,QAAI;AACJ,QAAI;AACF,iBAAW,YAAY,QAAQ,GAAG;AAAA,IACpC,QAAQ;AAKN,aAAO;AAAA;AAAA,QAAiC;AAAA;AAAA,IAC1C;AACA,WAAO,OAAO,cAAc,QAAQ,EAAE;AAAA,EACxC;AACF;","names":[]}
+{"version":3,"sources":["../src/node.ts","../src/module-not-found.ts"],"sourcesContent":["// Copyright (c) 2026 ObjectStack. Licensed under the Apache-2.0 license.\n\n/**\n * `@objectstack/types/node` — the **node-only** slice of the shared utilities.\n *\n * WHY A SUBPATH AND NOT THE ROOT EXPORT. `@objectstack/types` is a dependency of\n * `@objectstack/hono`, whose whole reason to exist is \"edge-compatible REST API\n * server for Cloudflare Workers, Deno, Bun, and Node\" — and of the plugin/service\n * layer a `LiteKernel` boots on Workers. The root entry (`src/index.ts`) reaches\n * **zero** `node:` builtins today, and that is a property those consumers depend\n * on: a Workers bundle that pulls in `node:module` fails to build (or dies at\n * first call) even when nothing ever invokes it. Everything here needs\n * `node:module` / `node:url` by definition — it exists to drive Node's own\n * resolver — so it lives behind its own entry point instead.\n *\n * The isolation is structural, not conventional: `tsup` builds `src/index.ts` and\n * `src/node.ts` as separate entries with `splitting: false`, so the root bundle\n * contains no reference to this file, and `node-isolation.test.ts` fails the\n * build if anything reachable from the root ever imports a `node:` builtin. Same\n * arrangement `@objectstack/metadata` already ships for `./node`.\n *\n * ── What lives here ──────────────────────────────────────────────────────────\n *\n * Resolving optional packages from the **host app**, not from the framework\n * package doing the importing.\n *\n * Node ESM resolves a bare `import('pkg')` against the **importer's own\n * realpath**. Framework packages (the CLI, `@objectstack/verify`,\n * `@objectstack/dogfood`) are reached through `link:`/workspace dependencies, so\n * their realpath is inside the *framework* workspace — a bare import from any of\n * them can only ever see packages installed in the framework's own\n * `node_modules`. Every package that lives OUTSIDE that workspace and is supplied\n * by the app being served, verified or tested — a cloud-private package such as\n * `@objectstack/organizations` or `@objectstack/service-ai-studio`, or anything a\n * customer installs into their own project — is therefore invisible to a bare\n * import, no matter what the host app declares in its `package.json`\n * (cloud#1013: `objectstack serve` could never load the enterprise multi-org\n * runtime, so every self-hosted walled-posture deployment hit the ADR-0093 D5\n * fail-fast and exited 1; framework#4700: `bootStack({ multiTenant: true })` told\n * apps to install a package they had already installed, and the dogfood\n * multi-org probes were constant-false).\n *\n * The fix is to resolve from the host app's root and import the resolved\n * absolute path. The importing package's own resolution stays as the fallback,\n * for the framework-owned packages it depends on and the host does not declare.\n *\n * Resolution failure is the ONLY thing that falls back. A package the host\n * resolves but that throws while it evaluates is a genuine crash and propagates\n * unchanged: re-importing it bare would replace the real cause with a\n * `MODULE_NOT_FOUND`, which every caller here classifies as \"not installed\" —\n * turning a broken package into a silent skip (or, on the organizations path,\n * into a fatal message telling the operator to install what is already there).\n *\n * ── #4719: the host's DECLARATION gates the lookup, not its resolvability ────\n *\n * \"Resolve from the host app\" was implemented as a CJS `createRequire` anchored\n * at the host's `package.json`, and **CJS resolution honours `NODE_PATH`**\n * (`Module.globalPaths`). The first thing a pnpm-generated bin shim does is\n *\n *     export NODE_PATH=\"<workspace>/node_modules/.pnpm/node_modules\"\n *\n * and every `serve` / `dev` child process inherits it. Everything any package in\n * the workspace transitively depends on lives in that hoisted store, so\n * `hostRequire.resolve(pkg)` succeeded for packages the host app had never\n * declared — the answer depended on HOW THE PROCESS WAS LAUNCHED, not on the\n * app. Measured on cloud's `apps/objectos-ee`, which did not declare\n * `@objectstack/organizations`: `pnpm start` (through the shim) booted with the\n * organizations plugin mounted and ADR-0093 D5 silent, while\n * `node node_modules/@objectstack/cli/bin/run.js serve` (no shim, no NODE_PATH)\n * hit the D5 fail-fast and exited 1. Same app, same `package.json`, same\n * posture. D5's own message told operators to \"declare it in the app's\n * package.json\" — the one thing the CLI never checked.\n *\n * So the host lookup is now gated on the host's **declaration**: a package name\n * is looked up in the host's `node_modules` only when it appears in the host\n * `package.json` (see {@link HOST_DECLARATION_FIELDS}). Reachability through a\n * hoisted store or `NODE_PATH` is deliberately not accepted — it is precisely\n * the accident that made the contract unenforced. This is the \"declared =\n * enforced\" shape the rest of the repo uses (Prime Directive #10): the\n * declaration is a deliberate authoring act, machine-checkable at the moment of\n * boot, and independent of launcher, package manager and hoist layout.\n *\n * The two failures it separates were, until now, one indistinguishable\n * `MODULE_NOT_FOUND`, with opposite remedies:\n *\n *   - **undeclared** — the app never asked for this package. Remedy: declare it\n *     in the app's `package.json` and install.\n *   - **declared but unresolvable** — the app asked for it and the install is\n *     broken/pruned/unbuilt. Remedy: fix the install. Re-reading the\n *     `package.json` is wasted effort; the declaration is right there.\n *\n * {@link hostImportFailureKind} exposes that classification to callers so their\n * fail-fast text can say which one it is (`packages/cli` ADR-0093 D5,\n * `packages/verify` `bootStack`, `packages/qa/dogfood`'s enterprise probe).\n */\n\nimport { readFileSync } from 'node:fs';\nimport { createRequire } from 'node:module';\nimport { join } from 'node:path';\nimport { pathToFileURL } from 'node:url';\nimport { isModuleNotFoundError } from './module-not-found.js';\n\n/**\n * Imports a package as the host app would see it.\n *\n * `any` is the module namespace of a package this repo does not compile against\n * (it is not a dependency of the importing package at all) — every call site\n * reads an export off it dynamically, exactly as the bare `import()` it replaces\n * did.\n */\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport type HostImporter = (pkg: string) => Promise<any>;\n\n/**\n * A `require` anchored at the **host app's** `package.json` — i.e. the project\n * `objectstack serve` was invoked in, or the app `bootStack` is verifying, whose\n * `node_modules` carries the packages it declares.\n *\n * @param hostRoot Directory holding the host app's `package.json` (default: the\n * process CWD, which is where the CLI reads `objectstack.config.ts` from too).\n */\nexport function createHostRequire(hostRoot: string = process.cwd()): NodeRequire {\n  return createRequire(join(hostRoot, 'package.json'));\n}\n\n/**\n * The `package.json` fields whose KEYS count as a host-app declaration (#4719).\n *\n * All four are deliberate authoring acts in the app's own manifest that name the\n * package, which is the signal this gate is built on — not \"is it reachable\".\n * Why each is in:\n *\n * - `dependencies` — the obvious one: the app runs with it.\n * - `devDependencies` — the app being served / verified / dogfooded IS the\n *   project, not a library someone else consumes, so its dev deps are installed\n *   in exactly the environment this resolver runs in.\n * - `optionalDependencies` — npm/pnpm install them and tolerate an install\n *   failure. \"Installed ⇒ declared\" holds; and if it did NOT install, the\n *   declared-but-unresolvable branch says so precisely instead of pretending the\n *   app never asked.\n * - `peerDependencies` — an app is nobody's peer, so this is an unusual place to\n *   put an enterprise add-on; but it still NAMES the package on purpose, and\n *   `packages/cli`'s own edition gate (`serve`'s AI-service opt-in, #1597) has\n *   read all four since it was written. Accepting three here and four there\n *   would fork \"declared\" into two dialects for one question — the shape Prime\n *   Directive #12 exists to prevent. That gate now delegates to this list, so\n *   there is one owner and one answer.\n *\n * `bundleDependencies` is absent on purpose: it is an array of names that must\n * ALSO appear in `dependencies`, so it can never be the only declaration.\n */\nexport const HOST_DECLARATION_FIELDS = [\n  'dependencies',\n  'devDependencies',\n  'optionalDependencies',\n  'peerDependencies',\n] as const;\n\nexport type HostDeclarationField = (typeof HOST_DECLARATION_FIELDS)[number];\n\n/** What the host app's `package.json` says about one package name. */\nexport interface HostDeclaration {\n  /** Bare package name the specifier belongs to (subpath stripped). */\n  packageName: string;\n  /** Directory whose `package.json` was consulted. */\n  hostRoot: string;\n  /** True when {@link packageName} is a key of one of {@link HOST_DECLARATION_FIELDS}. */\n  declared: boolean;\n  /** Which field carried it (first match, in {@link HOST_DECLARATION_FIELDS} order). */\n  field?: HostDeclarationField;\n  /** The version range AS WRITTEN — `^1.2.3`, `workspace:*`, `npm:@acme/x@1`, `link:../x`. */\n  specifier?: string;\n  /** True when `hostRoot` has no readable / parseable `package.json` at all. */\n  manifestMissing?: boolean;\n}\n\n/**\n * The package a bare specifier belongs to, or `undefined` when the specifier is\n * not a bare package name at all (a relative/absolute path, a `file:`/`data:`\n * URL, or a `node:`-prefixed builtin). Those bypass the declaration gate: they\n * are not things a `package.json` can declare.\n *\n * Subpaths are stripped, so `@objectstack/platform-objects/plugin` is declared\n * by `\"@objectstack/platform-objects\"`, which is the only key that can exist.\n * Scoped names keep both segments.\n *\n * Alias dependencies need no special case, and that is the point: with\n * `\"foo\": \"npm:bar@1\"` the importable specifier is `foo` and the manifest key is\n * `foo`, so keying on the KEY (never the value) is exactly right — `import('bar')`\n * correctly reads as undeclared unless `bar` is itself a key. Same for\n * `workspace:` / `link:` / `file:` specifiers: the key is the name, the value is\n * the package manager's business.\n */\nexport function packageNameFromSpecifier(specifier: string): string | undefined {\n  if (!specifier || specifier.startsWith('.') || specifier.startsWith('/')) return undefined;\n  // A URL-ish or protocol-prefixed specifier (`node:fs`, `file:///…`, `data:…`).\n  if (/^[a-z][a-z0-9+.-]*:/i.test(specifier)) return undefined;\n  const segments = specifier.split('/');\n  if (specifier.startsWith('@')) {\n    if (segments.length < 2 || !segments[0] || !segments[1]) return undefined;\n    return `${segments[0]}/${segments[1]}`;\n  }\n  return segments[0] || undefined;\n}\n\n/**\n * Read what the host app's `package.json` declares about `specifier`.\n *\n * Deliberately a plain manifest READ, never a resolution attempt: resolvability\n * is the property #4719 proved unreliable (it moved with `NODE_PATH` and the\n * hoist layout), while the manifest is the same fact in every launcher.\n */\nexport function readHostDeclaration(\n  specifier: string,\n  hostRoot: string = process.cwd(),\n): HostDeclaration {\n  const packageName = packageNameFromSpecifier(specifier) ?? specifier;\n  const base: HostDeclaration = { packageName, hostRoot, declared: false };\n\n  let manifest: Record<string, unknown>;\n  try {\n    manifest = JSON.parse(readFileSync(join(hostRoot, 'package.json'), 'utf8')) as Record<\n      string,\n      unknown\n    >;\n  } catch {\n    // No manifest ⇒ nothing is declared. Recorded rather than swallowed so the\n    // failure text can say \"there is no package.json here\" instead of the\n    // misleading \"you did not declare it\".\n    return { ...base, manifestMissing: true };\n  }\n\n  for (const field of HOST_DECLARATION_FIELDS) {\n    const entries = manifest[field];\n    if (!entries || typeof entries !== 'object') continue;\n    const specifierValue = (entries as Record<string, unknown>)[packageName];\n    if (specifierValue === undefined) continue;\n    return { ...base, declared: true, field, specifier: String(specifierValue) };\n  }\n  return base;\n}\n\n/** Convenience predicate over {@link readHostDeclaration}. */\nexport function isDeclaredByHost(specifier: string, hostRoot?: string): boolean {\n  return readHostDeclaration(specifier, hostRoot).declared;\n}\n\n/**\n * Why a {@link HostImporter} could not produce a module.\n *\n * - `undeclared` — the host app's `package.json` never names the package, and\n *   the importing framework package cannot supply it either. Remedy: DECLARE it\n *   in the app and install.\n * - `declared-unresolvable` — the app declares it and it still would not\n *   resolve. Remedy: fix the INSTALL. Re-reading the manifest is wasted effort.\n *\n * An evaluation crash is neither: it propagates untouched and carries no kind.\n */\nexport type HostImportFailureKind = 'undeclared' | 'declared-unresolvable';\n\n/**\n * Property carrying {@link HostImportFailureKind} on a thrown error.\n *\n * A string property, read by {@link hostImportFailureKind} — never `instanceof`.\n * `serve` loads plugins through this importer, so CLI and package can hold\n * different module instances of anything class-shaped; the #4818 comment in\n * `serve.ts` names that trap explicitly.\n */\nexport const HOST_IMPORT_FAILURE_KIND = 'objectstackHostImportFailureKind';\n\n/** The classification on an error thrown by a {@link HostImporter}, if any. */\nexport function hostImportFailureKind(err: unknown): HostImportFailureKind | undefined {\n  const kind = (err as Record<string, unknown> | null | undefined)?.[HOST_IMPORT_FAILURE_KIND];\n  return kind === 'undeclared' || kind === 'declared-unresolvable' ? kind : undefined;\n}\n\nfunction hostImportError(\n  kind: HostImportFailureKind,\n  message: string,\n  cause: unknown,\n): Error {\n  // `cause` is assigned rather than passed to the constructor: this package\n  // compiles against a lib without the ES2022 `ErrorOptions` overload.\n  const err = new Error(message);\n  // Every caller classifies \"missing vs crashed\" through\n  // `isModuleNotFoundError`; both of these ARE the missing case, just with\n  // different remedies, so they must keep answering true to it.\n  return Object.assign(err, {\n    cause,\n    code: 'MODULE_NOT_FOUND',\n    [HOST_IMPORT_FAILURE_KIND]: kind,\n  });\n}\n\nfunction undeclaredMessage(declaration: HostDeclaration, cause: unknown): string {\n  const { packageName, hostRoot, manifestMissing } = declaration;\n  const detail = cause instanceof Error ? cause.message : String(cause);\n  return (\n    `Cannot find package '${packageName}': the host app does not declare it.\\n` +\n    `  host app: ${hostRoot}\\n` +\n    (manifestMissing\n      ? '  no readable package.json was found there — nothing can be declared\\n'\n      : `  checked: ${HOST_DECLARATION_FIELDS.join(', ')}\\n`) +\n    `\\n  Declare it in that app's package.json and install it, e.g.\\n` +\n    `      cd ${hostRoot} && pnpm add ${packageName}\\n` +\n    '\\n  Being merely REACHABLE is not enough and is rejected on purpose (#4719):\\n' +\n    '  a package hoisted into a workspace store — which is what NODE_PATH points\\n' +\n    \"  at in every pnpm bin shim — used to resolve here regardless of the app's\\n\" +\n    '  package.json, so the same app booted or refused depending on how the\\n' +\n    '  process was launched. The declaration is the contract.\\n' +\n    `  (fallback resolution also failed: ${detail})`\n  );\n}\n\nfunction unresolvableMessage(declaration: HostDeclaration, cause: unknown): string {\n  const { packageName, hostRoot, field, specifier } = declaration;\n  const detail = cause instanceof Error ? cause.message : String(cause);\n  return (\n    `Cannot find module '${packageName}': the host app DECLARES it ` +\n    `(${field}: ${JSON.stringify(specifier)}) but it could not be resolved.\\n` +\n    `  host app: ${hostRoot}\\n` +\n    '\\n  This is an INSTALL problem, not a declaration problem — the declaration is\\n' +\n    '  already there, so re-reading the package.json will not help. Check:\\n' +\n    `    • dependencies never installed, or installed before the declaration was added → run \\`pnpm install\\` in ${hostRoot}\\n` +\n    '    • a production prune / filtered deploy dropped it (devDependencies and\\n' +\n    '      optionalDependencies go first)\\n' +\n    '    • it IS installed but its \"main\"/\"exports\" points at a dist that was never built\\n' +\n    `  (resolver: ${detail})`\n  );\n}\n\n/**\n * Build an importer that loads a package **as the host app declares it**, and\n * otherwise falls back to the importing package's own resolution.\n *\n * Order of operations, and why (#4719):\n *\n * 1. The host `package.json` is READ. Only a declared name is looked up in the\n *    host's `node_modules`. An undeclared name never reaches the host resolver,\n *    so no amount of `NODE_PATH` / hoisting can make it appear to be the app's.\n * 2. Declared but unresolvable is reported AS SUCH — the app asked for it and\n *    the install is broken. It is not retried bare: falling back there would\n *    reintroduce exactly the \"some other package happens to supply it\" accident\n *    this gate closes, and would report an install problem as an absence.\n * 3. Undeclared falls back to the importing package's own resolution, which is\n *    what keeps every framework-owned load working (`serve`'s plugin-auth /\n *    service-i18n path, `bootStack`'s service plugins). Bare `import()` is ESM,\n *    and ESM does not honour `NODE_PATH`, so the fallback cannot re-open the\n *    hole either. Only when that fails as module-not-found does the undeclared\n *    error surface; a package that RESOLVES and then throws while evaluating is\n *    a genuine crash and propagates untouched, as before.\n *\n * @param hostRoot Directory holding the host app's `package.json` (default: the\n * process CWD, which is where the CLI reads `objectstack.config.ts` from too).\n * Note this used to take a pre-built `NodeRequire`; it needs the ROOT now,\n * because a `NodeRequire` cannot be asked where it was anchored and the manifest\n * has to be read from there.\n */\nexport function createHostImporter(hostRoot: string = process.cwd()): HostImporter {\n  const hostRequire = createHostRequire(hostRoot);\n  return async (pkg: string): Promise<any> => {\n    // Not a bare package name (a path, a URL, a `node:` builtin) — nothing a\n    // manifest could declare. Hand it to the normal resolver untouched.\n    if (packageNameFromSpecifier(pkg) === undefined) {\n      return import(/* webpackIgnore: true */ pkg);\n    }\n\n    const declaration = readHostDeclaration(pkg, hostRoot);\n\n    if (declaration.declared) {\n      let resolved: string;\n      try {\n        resolved = hostRequire.resolve(pkg);\n      } catch (cause) {\n        throw hostImportError(\n          'declared-unresolvable',\n          unresolvableMessage(declaration, cause),\n          cause,\n        );\n      }\n      return import(pathToFileURL(resolved).href);\n    }\n\n    try {\n      return await import(/* webpackIgnore: true */ pkg);\n    } catch (cause) {\n      // A package that resolved and then exploded is a crash, not an absence.\n      if (!isModuleNotFoundError(cause)) throw cause;\n      throw hostImportError('undeclared', undeclaredMessage(declaration, cause), cause);\n    }\n  };\n}\n","// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.\n\n/**\n * True when a dynamic `import()` / `require.resolve()` failed because the\n * module is simply NOT INSTALLED — as opposed to the module being present but\n * throwing while it loads (a real crash). Checking `err.code` FIRST matters:\n * ESM reports a missing package as `err.code === 'ERR_MODULE_NOT_FOUND'` with\n * the human message `Cannot find package '...'`; matching only the older\n * `Cannot find module` string mis-classifies that as a crash (framework#1595).\n *\n * Single shared owner for this classification (framework#3265): the CLI's\n * optional-plugin guards and `requires` capability resolver delegate here, and\n * cloud's `objectos-runtime` capability loader is expected to adopt it at its\n * next framework pin bump — so the parallel loaders cannot drift apart and\n * re-introduce the #1595 false-alarm class.\n */\nexport function isModuleNotFoundError(err: unknown): boolean {\n  const code = (err as { code?: string } | null | undefined)?.code;\n  if (code === 'ERR_MODULE_NOT_FOUND' || code === 'MODULE_NOT_FOUND') return true;\n  const msg = err instanceof Error ? err.message : String(err);\n  return msg.includes('Cannot find module') || msg.includes('Cannot find package');\n}\n"],"mappings":";AAgGA,SAAS,oBAAoB;AAC7B,SAAS,qBAAqB;AAC9B,SAAS,YAAY;AACrB,SAAS,qBAAqB;;;ACnFvB,SAAS,sBAAsB,KAAuB;AAC3D,QAAM,OAAQ,KAA8C;AAC5D,MAAI,SAAS,0BAA0B,SAAS,mBAAoB,QAAO;AAC3E,QAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,SAAO,IAAI,SAAS,oBAAoB,KAAK,IAAI,SAAS,qBAAqB;AACjF;;;ADoGO,SAAS,kBAAkB,WAAmB,QAAQ,IAAI,GAAgB;AAC/E,SAAO,cAAc,KAAK,UAAU,cAAc,CAAC;AACrD;AA4BO,IAAM,0BAA0B;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAqCO,SAAS,yBAAyB,WAAuC;AAC9E,MAAI,CAAC,aAAa,UAAU,WAAW,GAAG,KAAK,UAAU,WAAW,GAAG,EAAG,QAAO;AAEjF,MAAI,uBAAuB,KAAK,SAAS,EAAG,QAAO;AACnD,QAAM,WAAW,UAAU,MAAM,GAAG;AACpC,MAAI,UAAU,WAAW,GAAG,GAAG;AAC7B,QAAI,SAAS,SAAS,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,EAAG,QAAO;AAChE,WAAO,GAAG,SAAS,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC;AAAA,EACtC;AACA,SAAO,SAAS,CAAC,KAAK;AACxB;AASO,SAAS,oBACd,WACA,WAAmB,QAAQ,IAAI,GACd;AACjB,QAAM,cAAc,yBAAyB,SAAS,KAAK;AAC3D,QAAM,OAAwB,EAAE,aAAa,UAAU,UAAU,MAAM;AAEvE,MAAI;AACJ,MAAI;AACF,eAAW,KAAK,MAAM,aAAa,KAAK,UAAU,cAAc,GAAG,MAAM,CAAC;AAAA,EAI5E,QAAQ;AAIN,WAAO,EAAE,GAAG,MAAM,iBAAiB,KAAK;AAAA,EAC1C;AAEA,aAAW,SAAS,yBAAyB;AAC3C,UAAM,UAAU,SAAS,KAAK;AAC9B,QAAI,CAAC,WAAW,OAAO,YAAY,SAAU;AAC7C,UAAM,iBAAkB,QAAoC,WAAW;AACvE,QAAI,mBAAmB,OAAW;AAClC,WAAO,EAAE,GAAG,MAAM,UAAU,MAAM,OAAO,WAAW,OAAO,cAAc,EAAE;AAAA,EAC7E;AACA,SAAO;AACT;AAGO,SAAS,iBAAiB,WAAmB,UAA4B;AAC9E,SAAO,oBAAoB,WAAW,QAAQ,EAAE;AAClD;AAuBO,IAAM,2BAA2B;AAGjC,SAAS,sBAAsB,KAAiD;AACrF,QAAM,OAAQ,MAAqD,wBAAwB;AAC3F,SAAO,SAAS,gBAAgB,SAAS,0BAA0B,OAAO;AAC5E;AAEA,SAAS,gBACP,MACA,SACA,OACO;AAGP,QAAM,MAAM,IAAI,MAAM,OAAO;AAI7B,SAAO,OAAO,OAAO,KAAK;AAAA,IACxB;AAAA,IACA,MAAM;AAAA,IACN,CAAC,wBAAwB,GAAG;AAAA,EAC9B,CAAC;AACH;AAEA,SAAS,kBAAkB,aAA8B,OAAwB;AAC/E,QAAM,EAAE,aAAa,UAAU,gBAAgB,IAAI;AACnD,QAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACpE,SACE,wBAAwB,WAAW;AAAA,cACpB,QAAQ;AAAA,KACtB,kBACG,gFACA,cAAc,wBAAwB,KAAK,IAAI,CAAC;AAAA,KACpD;AAAA;AAAA,WACY,QAAQ,gBAAgB,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,sCAMR,MAAM;AAEjD;AAEA,SAAS,oBAAoB,aAA8B,OAAwB;AACjF,QAAM,EAAE,aAAa,UAAU,OAAO,UAAU,IAAI;AACpD,QAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACpE,SACE,uBAAuB,WAAW,gCAC9B,KAAK,KAAK,KAAK,UAAU,SAAS,CAAC;AAAA,cACxB,QAAQ;AAAA;AAAA;AAAA;AAAA,wHAGwF,QAAQ;AAAA;AAAA;AAAA;AAAA,eAIvG,MAAM;AAE1B;AA6BO,SAAS,mBAAmB,WAAmB,QAAQ,IAAI,GAAiB;AACjF,QAAM,cAAc,kBAAkB,QAAQ;AAC9C,SAAO,OAAO,QAA8B;AAG1C,QAAI,yBAAyB,GAAG,MAAM,QAAW;AAC/C,aAAO;AAAA;AAAA,QAAiC;AAAA;AAAA,IAC1C;AAEA,UAAM,cAAc,oBAAoB,KAAK,QAAQ;AAErD,QAAI,YAAY,UAAU;AACxB,UAAI;AACJ,UAAI;AACF,mBAAW,YAAY,QAAQ,GAAG;AAAA,MACpC,SAAS,OAAO;AACd,cAAM;AAAA,UACJ;AAAA,UACA,oBAAoB,aAAa,KAAK;AAAA,UACtC;AAAA,QACF;AAAA,MACF;AACA,aAAO,OAAO,cAAc,QAAQ,EAAE;AAAA,IACxC;AAEA,QAAI;AACF,aAAO,MAAM;AAAA;AAAA,QAAiC;AAAA;AAAA,IAChD,SAAS,OAAO;AAEd,UAAI,CAAC,sBAAsB,KAAK,EAAG,OAAM;AACzC,YAAM,gBAAgB,cAAc,kBAAkB,aAAa,KAAK,GAAG,KAAK;AAAA,IAClF;AAAA,EACF;AACF;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@objectstack/types",
-  "version": "17.0.0-rc.3",
+  "version": "17.0.0-rc.5",
   "license": "Apache-2.0",
   "description": "Shared interfaces describing the ObjectStack Runtime environment",
   "main": "dist/index.js",
@@ -18,7 +18,7 @@
     }
   },
   "dependencies": {
-    "@objectstack/spec": "17.0.0-rc.3"
+    "@objectstack/spec": "17.0.0-rc.5"
   },
   "devDependencies": {
     "typescript": "^6.0.3",