@open-mercato/cli 0.10.1-develop.7990.1.82d0a183c5 → 0.10.1-develop.8004.1.a8a79ee43f

package/dist/lib/__integration__/TC-INT-009.spec.js

@@ -0,0 +1,267 @@
+import { expect, test } from "@playwright/test";
+import { execFileSync, spawnSync } from "node:child_process";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+const repoRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..", "..", "..", "..", "..");
+const cliBin = path.join(repoRoot, "packages", "cli", "dist", "bin.js");
+function writeFile(filePath, content) {
+  fs.mkdirSync(path.dirname(filePath), { recursive: true });
+  fs.writeFileSync(filePath, content);
+}
+function createPackage(packageRoot, packageName, moduleIds) {
+  writeFile(path.join(packageRoot, "package.json"), JSON.stringify({ name: packageName, version: "0.4.7", type: "module" }));
+  for (const moduleId of moduleIds) {
+    writeFile(path.join(packageRoot, "src", "modules", moduleId, "index.ts"), `export const metadata = { id: '${moduleId}', title: '${moduleId}', ejectable: true }
+`);
+    writeFile(path.join(packageRoot, "dist", "modules", moduleId, "index.js"), `export const metadata = { id: '${moduleId}', title: '${moduleId}', ejectable: true }
+`);
+    writeFile(path.join(packageRoot, "src", "modules", moduleId, "di.ts"), "export function register() {}\n");
+    writeFile(path.join(packageRoot, "dist", "modules", moduleId, "di.js"), "export function register() {}\n");
+  }
+}
+function createApp(appDir, dependencies = {}) {
+  writeFile(path.join(appDir, "package.json"), JSON.stringify({ name: "module-collision-integration", private: true, dependencies: { "@open-mercato/core": "0.4.7", ...dependencies } }));
+  writeFile(path.join(appDir, "yarn.lock"), "");
+  writeFile(path.join(appDir, "src", "modules.ts"), "export const enabledModules = []\n");
+  createPackage(path.join(appDir, "node_modules", "@open-mercato", "core"), "@open-mercato/core", []);
+}
+function runMercato(args, appDir, environment = {}) {
+  const result = spawnSync(process.execPath, [cliBin, ...args], {
+    cwd: appDir,
+    encoding: "utf8",
+    env: { ...process.env, FORCE_COLOR: "0", NODE_NO_WARNINGS: "1", ...environment }
+  });
+  if (result.error) throw result.error;
+  return { status: result.status, output: `${result.stdout}
+${result.stderr}` };
+}
+function installCommandStubs(appDir, candidateName, candidateModuleId) {
+  const executableDir = path.join(appDir, "bin");
+  const marker = path.join(appDir, "yarn-invoked");
+  const yarnPath = path.join(executableDir, process.platform === "win32" ? "yarn.cmd" : "yarn");
+  const yarnScript = `require('node:fs').writeFileSync(${JSON.stringify(marker)}, 'invoked'); process.exit(1)
+`;
+  writeFile(yarnPath, process.platform === "win32" ? `@"${process.execPath}" "%~dp0yarn-stub.cjs" %*\r
+` : `#!${process.execPath}
+${yarnScript}`);
+  writeFile(path.join(executableDir, "yarn-stub.cjs"), yarnScript);
+  fs.chmodSync(yarnPath, 493);
+  if (candidateName && candidateModuleId) {
+    const manifest = Buffer.from(JSON.stringify({ name: candidateName })).toString("base64");
+    const ghScript = `const endpoint = process.argv[3] || ''
+const value = endpoint === 'user' ? { login: 'candidate' }
+  : endpoint.includes('/commits/') ? { sha: 'a'.repeat(40) }
+  : endpoint.includes('/contents/') ? { encoding: 'base64', content: ${JSON.stringify(manifest)} }
+  : endpoint.includes('/git/trees/') ? { tree: [{ path: 'src/modules/${candidateModuleId}/index.ts' }, { path: 'dist/modules/${candidateModuleId}/index.js' }] }
+  : { default_branch: 'main' }
+process.stdout.write(JSON.stringify(value))
+`;
+    const ghPath = path.join(executableDir, process.platform === "win32" ? "gh.cmd" : "gh");
+    writeFile(ghPath, process.platform === "win32" ? `@"${process.execPath}" "%~dp0gh-stub.cjs" %*\r
+` : `#!${process.execPath}
+${ghScript}`);
+    writeFile(path.join(executableDir, "gh-stub.cjs"), ghScript);
+    fs.chmodSync(ghPath, 493);
+  }
+  return { PATH: executableDir + path.delimiter + process.env.PATH };
+}
+function snapshotDirectory(directory) {
+  if (!fs.existsSync(directory)) return {};
+  const files = {};
+  for (const entry of fs.readdirSync(directory, { withFileTypes: true })) {
+    const fullPath = path.join(directory, entry.name);
+    if (entry.isDirectory()) {
+      for (const [relativePath, content] of Object.entries(snapshotDirectory(fullPath))) files[path.join(entry.name, relativePath)] = content;
+    } else {
+      files[entry.name] = fs.readFileSync(fullPath).toString("base64");
+    }
+  }
+  return files;
+}
+test.describe("TC-INT-009: CLI source collision lifecycle safeguards", () => {
+  for (const kind of ["directory", "archive"]) {
+    test(`rejects a local ${kind} with unknown provenance before replacing an active npm binding`, () => {
+      const root = fs.mkdtempSync(path.join(os.tmpdir(), "mercato-file-origin-"));
+      const appDir = path.join(root, "app");
+      try {
+        const binding = "@publisher/consents";
+        createApp(appDir, { [binding]: "0.4.7" });
+        createPackage(path.join(appDir, "node_modules", binding), binding, ["consents"]);
+        const packageRoot = path.join(root, "package");
+        createPackage(packageRoot, binding, ["consents"]);
+        if (kind === "archive") execFileSync("tar", ["-czf", path.join(root, "candidate.tgz"), "-C", root, "package"]);
+        const modulesSource = `export const enabledModules = [{ id: 'consents', from: '${binding}', locator: 'npm:${binding}' }]
+`;
+        writeFile(path.join(appDir, "src", "modules.ts"), modulesSource);
+        const manifestBefore = fs.readFileSync(path.join(appDir, "package.json"), "utf8");
+        const installedBefore = snapshotDirectory(path.join(appDir, "node_modules"));
+        const environment = installCommandStubs(appDir);
+        const locator = kind === "archive" ? "file:../candidate.tgz" : "file:../package";
+        const result = runMercato(["module", "add", `${binding}@${locator}`, "--eject", "--allow-third-party"], appDir, environment);
+        expect(result.status, result.output).not.toBe(0);
+        expect(result.output).toContain("Package binding collision");
+        expect(result.output).toContain("unknown origin");
+        expect(result.output).toContain("consents");
+        expect(fs.existsSync(path.join(appDir, "yarn-invoked"))).toBe(false);
+        expect(fs.readFileSync(path.join(appDir, "src", "modules.ts"), "utf8")).toBe(modulesSource);
+        expect(fs.readFileSync(path.join(appDir, "package.json"), "utf8")).toBe(manifestBefore);
+        expect(snapshotDirectory(path.join(appDir, "node_modules"))).toEqual(installedBefore);
+        expect(fs.existsSync(path.join(appDir, "src", "modules", "consents"))).toBe(false);
+        expect(fs.existsSync(path.join(appDir, ".mercato", "generated"))).toBe(false);
+      } finally {
+        fs.rmSync(root, { recursive: true, force: true });
+      }
+    });
+  }
+  test("rejects a GitHub replacement of an active binding even when the selected module ID differs", () => {
+    const appDir = fs.mkdtempSync(path.join(os.tmpdir(), "mercato-binding-collision-"));
+    try {
+      const binding = "@publisher/shared-package";
+      createApp(appDir, { [binding]: "github:existing/provider#main" });
+      createPackage(path.join(appDir, "node_modules", binding), binding, ["active_module"]);
+      const modulesSource = `export const enabledModules = [{ id: 'active_module', from: '${binding}', locator: 'github:existing/provider', packageName: '${binding}' }]
+`;
+      writeFile(path.join(appDir, "src", "modules.ts"), modulesSource);
+      const manifestBefore = fs.readFileSync(path.join(appDir, "package.json"), "utf8");
+      const environment = installCommandStubs(appDir, binding, "candidate_module");
+      const result = runMercato(["module", "add", "github:candidate/provider", "--allow-third-party"], appDir, environment);
+      expect(result.status, result.output).not.toBe(0);
+      expect(result.output).toContain("active_module");
+      expect(result.output).toContain(binding);
+      expect(result.output).toContain("github:existing/provider");
+      expect(result.output).toContain("github:candidate/provider");
+      expect(fs.existsSync(path.join(appDir, "yarn-invoked"))).toBe(false);
+      expect(fs.readFileSync(path.join(appDir, "src", "modules.ts"), "utf8")).toBe(modulesSource);
+      expect(fs.readFileSync(path.join(appDir, "package.json"), "utf8")).toBe(manifestBefore);
+      expect(fs.existsSync(path.join(appDir, "src", "modules", "candidate_module"))).toBe(false);
+    } finally {
+      fs.rmSync(appDir, { recursive: true, force: true });
+    }
+  });
+  test("rejects an npm file package runtime ID collision before invoking Yarn or copying sources", () => {
+    const appDir = fs.mkdtempSync(path.join(os.tmpdir(), "mercato-file-collision-"));
+    try {
+      createApp(appDir);
+      const candidateDir = path.join(appDir, "candidate");
+      createPackage(candidateDir, "@publisher/candidate", ["consents"]);
+      const modulesSource = "export const enabledModules = [{ id: 'consents', from: '@app', locator: 'github:existing/consents' }]\n";
+      writeFile(path.join(appDir, "src", "modules.ts"), modulesSource);
+      writeFile(path.join(appDir, "src", "modules", "consents", "index.ts"), "export const metadata = { ejectable: true }\n");
+      const sourceBefore = snapshotDirectory(path.join(appDir, "src"));
+      const manifestBefore = fs.readFileSync(path.join(appDir, "package.json"), "utf8");
+      const result = runMercato(["module", "add", "@publisher/candidate@file:./candidate", "--allow-third-party", "--eject"], appDir, installCommandStubs(appDir));
+      expect(result.status, result.output).not.toBe(0);
+      expect(result.output).toContain("consents");
+      expect(result.output).toMatch(/collision|already registered|conflict/i);
+      expect(fs.existsSync(path.join(appDir, "yarn-invoked"))).toBe(false);
+      expect(snapshotDirectory(path.join(appDir, "src"))).toEqual(sourceBefore);
+      expect(fs.readFileSync(path.join(appDir, "package.json"), "utf8")).toBe(manifestBefore);
+    } finally {
+      fs.rmSync(appDir, { recursive: true, force: true });
+    }
+  });
+  test("every generate command rejects duplicate effective registrations before changing existing output", () => {
+    const appDir = fs.mkdtempSync(path.join(os.tmpdir(), "mercato-generate-duplicates-"));
+    try {
+      createApp(appDir);
+      writeFile(path.join(appDir, "src", "modules.ts"), "export const enabledModules = [{ id: 'consents', from: '@app' }]\nif (process.env.COLLISION_DUPLICATE_ENABLED === 'true') enabledModules.push({ id: 'consents', from: '@app' })\n");
+      writeFile(path.join(appDir, "src", "modules", "consents", "index.ts"), "export const metadata = {}\n");
+      const outputDir = path.join(appDir, ".mercato", "generated");
+      for (const file of ["entities.ids.generated.ts", "modules.generated.ts", "entities.generated.ts", "di.generated.ts", "module-package-sources.css"]) writeFile(path.join(outputDir, file), "preserved output\n");
+      const before = snapshotDirectory(outputDir);
+      for (const command of ["all", "entity-ids", "registry", "entities", "di"]) {
+        const result = runMercato(["generate", command, "--quiet"], appDir, { COLLISION_DUPLICATE_ENABLED: "true" });
+        expect(result.status, `${command}: ${result.output}`).not.toBe(0);
+        expect(result.output).toContain("Duplicate enabled module ID 'consents'");
+        expect(snapshotDirectory(outputDir), command).toEqual(before);
+      }
+      const singleProvider = runMercato(["generate", "all", "--quiet"], appDir, { COLLISION_DUPLICATE_ENABLED: "false" });
+      expect(singleProvider.status, singleProvider.output).toBe(0);
+    } finally {
+      fs.rmSync(appDir, { recursive: true, force: true });
+    }
+  });
+  test("an installed alias generates binding imports, ejects with canonical provenance, and disables cleanly", () => {
+    const appDir = fs.mkdtempSync(path.join(os.tmpdir(), "mercato-alias-lifecycle-"));
+    try {
+      const binding = "consents_candidate";
+      const canonicalName = "@publisher/consents";
+      createApp(appDir, { [binding]: `npm:${canonicalName}@0.4.7` });
+      const packageRoot = path.join(appDir, "node_modules", binding);
+      createPackage(packageRoot, canonicalName, ["consents", "sibling"]);
+      writeFile(path.join(packageRoot, "src", "modules", "consents", "sibling.ts"), "export { metadata } from '../sibling'\n");
+      const enabled = runMercato(["module", "enable", binding, "--module", "consents", "--allow-third-party"], appDir);
+      expect(enabled.status, enabled.output).toBe(0);
+      const outputDir = path.join(appDir, ".mercato", "generated");
+      const modulesSource = fs.readFileSync(path.join(appDir, "src", "modules.ts"), "utf8");
+      expect(modulesSource).toContain(`from: '${binding}'`);
+      expect(modulesSource).toContain(`packageName: '${canonicalName}'`);
+      expect(fs.readFileSync(path.join(outputDir, "di.generated.ts"), "utf8")).toContain(`${binding}/modules/consents/di`);
+      expect(fs.readFileSync(path.join(outputDir, "module-package-sources.css"), "utf8")).toContain(`node_modules/${binding}/src/`);
+      const ejected = runMercato(["module", "eject", "consents"], appDir);
+      expect(ejected.status, ejected.output).toBe(0);
+      const ejectedSource = fs.readFileSync(path.join(appDir, "src", "modules.ts"), "utf8");
+      expect(ejectedSource).toContain("from: '@app'");
+      expect(ejectedSource).toContain(`packageName: '${canonicalName}'`);
+      expect(ejectedSource).toContain(`locator: 'npm:${canonicalName}'`);
+      expect(fs.readFileSync(path.join(appDir, "src", "modules", "consents", "sibling.ts"), "utf8")).toContain(`${binding}/modules/sibling`);
+      writeFile(path.join(appDir, "src", "modules.ts"), "export const enabledModules = []\n");
+      const disabled = runMercato(["generate", "all", "--quiet"], appDir);
+      expect(disabled.status, disabled.output).toBe(0);
+      expect(fs.readFileSync(path.join(outputDir, "di.generated.ts"), "utf8")).not.toContain("consents");
+      expect(fs.readFileSync(path.join(outputDir, "module-package-sources.css"), "utf8")).toBe("");
+      expect(fs.existsSync(path.join(packageRoot, "package.json"))).toBe(true);
+      expect(fs.existsSync(path.join(appDir, "src", "modules", "consents", "index.ts"))).toBe(true);
+    } finally {
+      fs.rmSync(appDir, { recursive: true, force: true });
+    }
+  });
+  test("missing alias exports fail enable and direct eject before source or config changes", () => {
+    const appDir = fs.mkdtempSync(path.join(os.tmpdir(), "mercato-alias-exports-"));
+    try {
+      const binding = "consents_candidate";
+      createApp(appDir, { [binding]: "npm:@publisher/consents@0.4.7" });
+      const packageRoot = path.join(appDir, "node_modules", binding);
+      createPackage(packageRoot, "@publisher/consents", ["consents"]);
+      writeFile(path.join(packageRoot, "package.json"), JSON.stringify({ name: "@publisher/consents", exports: { ".": "./dist/modules/consents/index.js" } }));
+      const configPath = path.join(appDir, "src", "modules.ts");
+      const emptyConfig = fs.readFileSync(configPath, "utf8");
+      const enabled = runMercato(["module", "enable", binding, "--module", "consents", "--eject", "--allow-third-party"], appDir);
+      expect(enabled.status, enabled.output).not.toBe(0);
+      expect(enabled.output).toContain(`${binding}/modules/consents/`);
+      expect(fs.readFileSync(configPath, "utf8")).toBe(emptyConfig);
+      expect(fs.existsSync(path.join(appDir, "src", "modules", "consents"))).toBe(false);
+      const registeredConfig = `export const enabledModules = [{ id: 'consents', from: '${binding}' }]
+`;
+      writeFile(configPath, registeredConfig);
+      const ejected = runMercato(["module", "eject", "consents"], appDir);
+      expect(ejected.status, ejected.output).not.toBe(0);
+      expect(ejected.output).toContain(`${binding}/modules/consents/`);
+      expect(fs.readFileSync(configPath, "utf8")).toBe(registeredConfig);
+      expect(fs.existsSync(path.join(appDir, "src", "modules", "consents"))).toBe(false);
+    } finally {
+      fs.rmSync(appDir, { recursive: true, force: true });
+    }
+  });
+  test("a single package registration with a local overlay remains valid", () => {
+    const appDir = fs.mkdtempSync(path.join(os.tmpdir(), "mercato-single-overlay-"));
+    try {
+      const binding = "@publisher/consents";
+      createApp(appDir, { [binding]: "0.4.7" });
+      createPackage(path.join(appDir, "node_modules", binding), binding, ["consents"]);
+      writeFile(path.join(appDir, "src", "modules.ts"), `export const enabledModules = [{ id: 'consents', from: '${binding}' }]
+`);
+      writeFile(path.join(appDir, "src", "modules", "consents", "index.ts"), "export const metadata = { title: 'Local overlay' }\n");
+      const before = snapshotDirectory(path.join(appDir, "src"));
+      const result = runMercato(["generate", "all", "--quiet"], appDir);
+      expect(result.status, result.output).toBe(0);
+      expect(snapshotDirectory(path.join(appDir, "src"))).toEqual(before);
+      expect(fs.readFileSync(path.join(appDir, ".mercato", "generated", "di.generated.ts"), "utf8")).toContain(`${binding}/modules/consents/di`);
+    } finally {
+      fs.rmSync(appDir, { recursive: true, force: true });
+    }
+  });
+});
+//# sourceMappingURL=TC-INT-009.spec.js.map

package/dist/lib/__integration__/TC-INT-009.spec.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/lib/__integration__/TC-INT-009.spec.ts"],
+  "sourcesContent": ["import { expect, test } from '@playwright/test'\nimport { execFileSync, spawnSync } from 'node:child_process'\nimport fs from 'node:fs'\nimport os from 'node:os'\nimport path from 'node:path'\nimport { fileURLToPath } from 'node:url'\n\nconst repoRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..', '..', '..', '..', '..')\nconst cliBin = path.join(repoRoot, 'packages', 'cli', 'dist', 'bin.js')\n\nfunction writeFile(filePath: string, content: string): void {\n  fs.mkdirSync(path.dirname(filePath), { recursive: true })\n  fs.writeFileSync(filePath, content)\n}\n\nfunction createPackage(packageRoot: string, packageName: string, moduleIds: string[]): void {\n  writeFile(path.join(packageRoot, 'package.json'), JSON.stringify({ name: packageName, version: '0.4.7', type: 'module' }))\n  for (const moduleId of moduleIds) {\n    writeFile(path.join(packageRoot, 'src', 'modules', moduleId, 'index.ts'), `export const metadata = { id: '${moduleId}', title: '${moduleId}', ejectable: true }\\n`)\n    writeFile(path.join(packageRoot, 'dist', 'modules', moduleId, 'index.js'), `export const metadata = { id: '${moduleId}', title: '${moduleId}', ejectable: true }\\n`)\n    writeFile(path.join(packageRoot, 'src', 'modules', moduleId, 'di.ts'), 'export function register() {}\\n')\n    writeFile(path.join(packageRoot, 'dist', 'modules', moduleId, 'di.js'), 'export function register() {}\\n')\n  }\n}\n\nfunction createApp(appDir: string, dependencies: Record<string, string> = {}): void {\n  writeFile(path.join(appDir, 'package.json'), JSON.stringify({ name: 'module-collision-integration', private: true, dependencies: { '@open-mercato/core': '0.4.7', ...dependencies } }))\n  writeFile(path.join(appDir, 'yarn.lock'), '')\n  writeFile(path.join(appDir, 'src', 'modules.ts'), 'export const enabledModules = []\\n')\n  createPackage(path.join(appDir, 'node_modules', '@open-mercato', 'core'), '@open-mercato/core', [])\n}\n\nfunction runMercato(args: string[], appDir: string, environment: NodeJS.ProcessEnv = {}): { status: number | null; output: string } {\n  const result = spawnSync(process.execPath, [cliBin, ...args], {\n    cwd: appDir,\n    encoding: 'utf8',\n    env: { ...process.env, FORCE_COLOR: '0', NODE_NO_WARNINGS: '1', ...environment },\n  })\n  if (result.error) throw result.error\n  return { status: result.status, output: `${result.stdout}\\n${result.stderr}` }\n}\n\nfunction installCommandStubs(appDir: string, candidateName?: string, candidateModuleId?: string): NodeJS.ProcessEnv {\n  const executableDir = path.join(appDir, 'bin')\n  const marker = path.join(appDir, 'yarn-invoked')\n  const yarnPath = path.join(executableDir, process.platform === 'win32' ? 'yarn.cmd' : 'yarn')\n  const yarnScript = `require('node:fs').writeFileSync(${JSON.stringify(marker)}, 'invoked'); process.exit(1)\\n`\n  writeFile(yarnPath, process.platform === 'win32'\n    ? `@\"${process.execPath}\" \"%~dp0yarn-stub.cjs\" %*\\r\\n`\n    : `#!${process.execPath}\\n${yarnScript}`)\n  writeFile(path.join(executableDir, 'yarn-stub.cjs'), yarnScript)\n  fs.chmodSync(yarnPath, 0o755)\n  if (candidateName && candidateModuleId) {\n    const manifest = Buffer.from(JSON.stringify({ name: candidateName })).toString('base64')\n    const ghScript = `const endpoint = process.argv[3] || ''\nconst value = endpoint === 'user' ? { login: 'candidate' }\n  : endpoint.includes('/commits/') ? { sha: 'a'.repeat(40) }\n  : endpoint.includes('/contents/') ? { encoding: 'base64', content: ${JSON.stringify(manifest)} }\n  : endpoint.includes('/git/trees/') ? { tree: [{ path: 'src/modules/${candidateModuleId}/index.ts' }, { path: 'dist/modules/${candidateModuleId}/index.js' }] }\n  : { default_branch: 'main' }\nprocess.stdout.write(JSON.stringify(value))\\n`\n    const ghPath = path.join(executableDir, process.platform === 'win32' ? 'gh.cmd' : 'gh')\n    writeFile(ghPath, process.platform === 'win32'\n      ? `@\"${process.execPath}\" \"%~dp0gh-stub.cjs\" %*\\r\\n`\n      : `#!${process.execPath}\\n${ghScript}`)\n    writeFile(path.join(executableDir, 'gh-stub.cjs'), ghScript)\n    fs.chmodSync(ghPath, 0o755)\n  }\n  return { PATH: executableDir + path.delimiter + process.env.PATH }\n}\n\nfunction snapshotDirectory(directory: string): Record<string, string> {\n  if (!fs.existsSync(directory)) return {}\n  const files: Record<string, string> = {}\n  for (const entry of fs.readdirSync(directory, { withFileTypes: true })) {\n    const fullPath = path.join(directory, entry.name)\n    if (entry.isDirectory()) {\n      for (const [relativePath, content] of Object.entries(snapshotDirectory(fullPath))) files[path.join(entry.name, relativePath)] = content\n    } else {\n      files[entry.name] = fs.readFileSync(fullPath).toString('base64')\n    }\n  }\n  return files\n}\n\ntest.describe('TC-INT-009: CLI source collision lifecycle safeguards', () => {\n  for (const kind of ['directory', 'archive']) {\n    test(`rejects a local ${kind} with unknown provenance before replacing an active npm binding`, () => {\n      const root = fs.mkdtempSync(path.join(os.tmpdir(), 'mercato-file-origin-'))\n      const appDir = path.join(root, 'app')\n      try {\n        const binding = '@publisher/consents'\n        createApp(appDir, { [binding]: '0.4.7' })\n        createPackage(path.join(appDir, 'node_modules', binding), binding, ['consents'])\n        const packageRoot = path.join(root, 'package')\n        createPackage(packageRoot, binding, ['consents'])\n        if (kind === 'archive') execFileSync('tar', ['-czf', path.join(root, 'candidate.tgz'), '-C', root, 'package'])\n        const modulesSource = `export const enabledModules = [{ id: 'consents', from: '${binding}', locator: 'npm:${binding}' }]\\n`\n        writeFile(path.join(appDir, 'src', 'modules.ts'), modulesSource)\n        const manifestBefore = fs.readFileSync(path.join(appDir, 'package.json'), 'utf8')\n        const installedBefore = snapshotDirectory(path.join(appDir, 'node_modules'))\n        const environment = installCommandStubs(appDir)\n        const locator = kind === 'archive' ? 'file:../candidate.tgz' : 'file:../package'\n        const result = runMercato(['module', 'add', `${binding}@${locator}`, '--eject', '--allow-third-party'], appDir, environment)\n\n        expect(result.status, result.output).not.toBe(0)\n        expect(result.output).toContain('Package binding collision')\n        expect(result.output).toContain('unknown origin')\n        expect(result.output).toContain('consents')\n        expect(fs.existsSync(path.join(appDir, 'yarn-invoked'))).toBe(false)\n        expect(fs.readFileSync(path.join(appDir, 'src', 'modules.ts'), 'utf8')).toBe(modulesSource)\n        expect(fs.readFileSync(path.join(appDir, 'package.json'), 'utf8')).toBe(manifestBefore)\n        expect(snapshotDirectory(path.join(appDir, 'node_modules'))).toEqual(installedBefore)\n        expect(fs.existsSync(path.join(appDir, 'src', 'modules', 'consents'))).toBe(false)\n        expect(fs.existsSync(path.join(appDir, '.mercato', 'generated'))).toBe(false)\n      } finally { fs.rmSync(root, { recursive: true, force: true }) }\n    })\n  }\n\n  test('rejects a GitHub replacement of an active binding even when the selected module ID differs', () => {\n    const appDir = fs.mkdtempSync(path.join(os.tmpdir(), 'mercato-binding-collision-'))\n    try {\n      const binding = '@publisher/shared-package'\n      createApp(appDir, { [binding]: 'github:existing/provider#main' })\n      createPackage(path.join(appDir, 'node_modules', binding), binding, ['active_module'])\n      const modulesSource = `export const enabledModules = [{ id: 'active_module', from: '${binding}', locator: 'github:existing/provider', packageName: '${binding}' }]\\n`\n      writeFile(path.join(appDir, 'src', 'modules.ts'), modulesSource)\n      const manifestBefore = fs.readFileSync(path.join(appDir, 'package.json'), 'utf8')\n      const environment = installCommandStubs(appDir, binding, 'candidate_module')\n      const result = runMercato(['module', 'add', 'github:candidate/provider', '--allow-third-party'], appDir, environment)\n\n      expect(result.status, result.output).not.toBe(0)\n      expect(result.output).toContain('active_module')\n      expect(result.output).toContain(binding)\n      expect(result.output).toContain('github:existing/provider')\n      expect(result.output).toContain('github:candidate/provider')\n      expect(fs.existsSync(path.join(appDir, 'yarn-invoked'))).toBe(false)\n      expect(fs.readFileSync(path.join(appDir, 'src', 'modules.ts'), 'utf8')).toBe(modulesSource)\n      expect(fs.readFileSync(path.join(appDir, 'package.json'), 'utf8')).toBe(manifestBefore)\n      expect(fs.existsSync(path.join(appDir, 'src', 'modules', 'candidate_module'))).toBe(false)\n    } finally {\n      fs.rmSync(appDir, { recursive: true, force: true })\n    }\n  })\n\n  test('rejects an npm file package runtime ID collision before invoking Yarn or copying sources', () => {\n    const appDir = fs.mkdtempSync(path.join(os.tmpdir(), 'mercato-file-collision-'))\n    try {\n      createApp(appDir)\n      const candidateDir = path.join(appDir, 'candidate')\n      createPackage(candidateDir, '@publisher/candidate', ['consents'])\n      const modulesSource = \"export const enabledModules = [{ id: 'consents', from: '@app', locator: 'github:existing/consents' }]\\n\"\n      writeFile(path.join(appDir, 'src', 'modules.ts'), modulesSource)\n      writeFile(path.join(appDir, 'src', 'modules', 'consents', 'index.ts'), 'export const metadata = { ejectable: true }\\n')\n      const sourceBefore = snapshotDirectory(path.join(appDir, 'src'))\n      const manifestBefore = fs.readFileSync(path.join(appDir, 'package.json'), 'utf8')\n      const result = runMercato(['module', 'add', '@publisher/candidate@file:./candidate', '--allow-third-party', '--eject'], appDir, installCommandStubs(appDir))\n\n      expect(result.status, result.output).not.toBe(0)\n      expect(result.output).toContain('consents')\n      expect(result.output).toMatch(/collision|already registered|conflict/i)\n      expect(fs.existsSync(path.join(appDir, 'yarn-invoked'))).toBe(false)\n      expect(snapshotDirectory(path.join(appDir, 'src'))).toEqual(sourceBefore)\n      expect(fs.readFileSync(path.join(appDir, 'package.json'), 'utf8')).toBe(manifestBefore)\n    } finally {\n      fs.rmSync(appDir, { recursive: true, force: true })\n    }\n  })\n\n  test('every generate command rejects duplicate effective registrations before changing existing output', () => {\n    const appDir = fs.mkdtempSync(path.join(os.tmpdir(), 'mercato-generate-duplicates-'))\n    try {\n      createApp(appDir)\n      writeFile(path.join(appDir, 'src', 'modules.ts'), \"export const enabledModules = [{ id: 'consents', from: '@app' }]\\nif (process.env.COLLISION_DUPLICATE_ENABLED === 'true') enabledModules.push({ id: 'consents', from: '@app' })\\n\")\n      writeFile(path.join(appDir, 'src', 'modules', 'consents', 'index.ts'), 'export const metadata = {}\\n')\n      const outputDir = path.join(appDir, '.mercato', 'generated')\n      for (const file of ['entities.ids.generated.ts', 'modules.generated.ts', 'entities.generated.ts', 'di.generated.ts', 'module-package-sources.css']) writeFile(path.join(outputDir, file), 'preserved output\\n')\n      const before = snapshotDirectory(outputDir)\n\n      for (const command of ['all', 'entity-ids', 'registry', 'entities', 'di']) {\n        const result = runMercato(['generate', command, '--quiet'], appDir, { COLLISION_DUPLICATE_ENABLED: 'true' })\n        expect(result.status, `${command}: ${result.output}`).not.toBe(0)\n        expect(result.output).toContain(\"Duplicate enabled module ID 'consents'\")\n        expect(snapshotDirectory(outputDir), command).toEqual(before)\n      }\n      const singleProvider = runMercato(['generate', 'all', '--quiet'], appDir, { COLLISION_DUPLICATE_ENABLED: 'false' })\n      expect(singleProvider.status, singleProvider.output).toBe(0)\n    } finally {\n      fs.rmSync(appDir, { recursive: true, force: true })\n    }\n  })\n\n  test('an installed alias generates binding imports, ejects with canonical provenance, and disables cleanly', () => {\n    const appDir = fs.mkdtempSync(path.join(os.tmpdir(), 'mercato-alias-lifecycle-'))\n    try {\n      const binding = 'consents_candidate'\n      const canonicalName = '@publisher/consents'\n      createApp(appDir, { [binding]: `npm:${canonicalName}@0.4.7` })\n      const packageRoot = path.join(appDir, 'node_modules', binding)\n      createPackage(packageRoot, canonicalName, ['consents', 'sibling'])\n      writeFile(path.join(packageRoot, 'src', 'modules', 'consents', 'sibling.ts'), \"export { metadata } from '../sibling'\\n\")\n      const enabled = runMercato(['module', 'enable', binding, '--module', 'consents', '--allow-third-party'], appDir)\n      expect(enabled.status, enabled.output).toBe(0)\n      const outputDir = path.join(appDir, '.mercato', 'generated')\n      const modulesSource = fs.readFileSync(path.join(appDir, 'src', 'modules.ts'), 'utf8')\n      expect(modulesSource).toContain(`from: '${binding}'`)\n      expect(modulesSource).toContain(`packageName: '${canonicalName}'`)\n      expect(fs.readFileSync(path.join(outputDir, 'di.generated.ts'), 'utf8')).toContain(`${binding}/modules/consents/di`)\n      expect(fs.readFileSync(path.join(outputDir, 'module-package-sources.css'), 'utf8')).toContain(`node_modules/${binding}/src/`)\n\n      const ejected = runMercato(['module', 'eject', 'consents'], appDir)\n      expect(ejected.status, ejected.output).toBe(0)\n      const ejectedSource = fs.readFileSync(path.join(appDir, 'src', 'modules.ts'), 'utf8')\n      expect(ejectedSource).toContain(\"from: '@app'\")\n      expect(ejectedSource).toContain(`packageName: '${canonicalName}'`)\n      expect(ejectedSource).toContain(`locator: 'npm:${canonicalName}'`)\n      expect(fs.readFileSync(path.join(appDir, 'src', 'modules', 'consents', 'sibling.ts'), 'utf8')).toContain(`${binding}/modules/sibling`)\n\n      writeFile(path.join(appDir, 'src', 'modules.ts'), 'export const enabledModules = []\\n')\n      const disabled = runMercato(['generate', 'all', '--quiet'], appDir)\n      expect(disabled.status, disabled.output).toBe(0)\n      expect(fs.readFileSync(path.join(outputDir, 'di.generated.ts'), 'utf8')).not.toContain('consents')\n      expect(fs.readFileSync(path.join(outputDir, 'module-package-sources.css'), 'utf8')).toBe('')\n      expect(fs.existsSync(path.join(packageRoot, 'package.json'))).toBe(true)\n      expect(fs.existsSync(path.join(appDir, 'src', 'modules', 'consents', 'index.ts'))).toBe(true)\n    } finally {\n      fs.rmSync(appDir, { recursive: true, force: true })\n    }\n  })\n\n  test('missing alias exports fail enable and direct eject before source or config changes', () => {\n    const appDir = fs.mkdtempSync(path.join(os.tmpdir(), 'mercato-alias-exports-'))\n    try {\n      const binding = 'consents_candidate'\n      createApp(appDir, { [binding]: 'npm:@publisher/consents@0.4.7' })\n      const packageRoot = path.join(appDir, 'node_modules', binding)\n      createPackage(packageRoot, '@publisher/consents', ['consents'])\n      writeFile(path.join(packageRoot, 'package.json'), JSON.stringify({ name: '@publisher/consents', exports: { '.': './dist/modules/consents/index.js' } }))\n      const configPath = path.join(appDir, 'src', 'modules.ts')\n      const emptyConfig = fs.readFileSync(configPath, 'utf8')\n\n      const enabled = runMercato(['module', 'enable', binding, '--module', 'consents', '--eject', '--allow-third-party'], appDir)\n      expect(enabled.status, enabled.output).not.toBe(0)\n      expect(enabled.output).toContain(`${binding}/modules/consents/`)\n      expect(fs.readFileSync(configPath, 'utf8')).toBe(emptyConfig)\n      expect(fs.existsSync(path.join(appDir, 'src', 'modules', 'consents'))).toBe(false)\n\n      const registeredConfig = `export const enabledModules = [{ id: 'consents', from: '${binding}' }]\\n`\n      writeFile(configPath, registeredConfig)\n      const ejected = runMercato(['module', 'eject', 'consents'], appDir)\n      expect(ejected.status, ejected.output).not.toBe(0)\n      expect(ejected.output).toContain(`${binding}/modules/consents/`)\n      expect(fs.readFileSync(configPath, 'utf8')).toBe(registeredConfig)\n      expect(fs.existsSync(path.join(appDir, 'src', 'modules', 'consents'))).toBe(false)\n    } finally {\n      fs.rmSync(appDir, { recursive: true, force: true })\n    }\n  })\n\n  test('a single package registration with a local overlay remains valid', () => {\n    const appDir = fs.mkdtempSync(path.join(os.tmpdir(), 'mercato-single-overlay-'))\n    try {\n      const binding = '@publisher/consents'\n      createApp(appDir, { [binding]: '0.4.7' })\n      createPackage(path.join(appDir, 'node_modules', binding), binding, ['consents'])\n      writeFile(path.join(appDir, 'src', 'modules.ts'), `export const enabledModules = [{ id: 'consents', from: '${binding}' }]\\n`)\n      writeFile(path.join(appDir, 'src', 'modules', 'consents', 'index.ts'), \"export const metadata = { title: 'Local overlay' }\\n\")\n      const before = snapshotDirectory(path.join(appDir, 'src'))\n\n      const result = runMercato(['generate', 'all', '--quiet'], appDir)\n\n      expect(result.status, result.output).toBe(0)\n      expect(snapshotDirectory(path.join(appDir, 'src'))).toEqual(before)\n      expect(fs.readFileSync(path.join(appDir, '.mercato', 'generated', 'di.generated.ts'), 'utf8')).toContain(`${binding}/modules/consents/di`)\n    } finally {\n      fs.rmSync(appDir, { recursive: true, force: true })\n    }\n  })\n})\n"],
+  "mappings": "AAAA,SAAS,QAAQ,YAAY;AAC7B,SAAS,cAAc,iBAAiB;AACxC,OAAO,QAAQ;AACf,OAAO,QAAQ;AACf,OAAO,UAAU;AACjB,SAAS,qBAAqB;AAE9B,MAAM,WAAW,KAAK,QAAQ,KAAK,QAAQ,cAAc,YAAY,GAAG,CAAC,GAAG,MAAM,MAAM,MAAM,MAAM,IAAI;AACxG,MAAM,SAAS,KAAK,KAAK,UAAU,YAAY,OAAO,QAAQ,QAAQ;AAEtE,SAAS,UAAU,UAAkB,SAAuB;AAC1D,KAAG,UAAU,KAAK,QAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;AACxD,KAAG,cAAc,UAAU,OAAO;AACpC;AAEA,SAAS,cAAc,aAAqB,aAAqB,WAA2B;AAC1F,YAAU,KAAK,KAAK,aAAa,cAAc,GAAG,KAAK,UAAU,EAAE,MAAM,aAAa,SAAS,SAAS,MAAM,SAAS,CAAC,CAAC;AACzH,aAAW,YAAY,WAAW;AAChC,cAAU,KAAK,KAAK,aAAa,OAAO,WAAW,UAAU,UAAU,GAAG,kCAAkC,QAAQ,cAAc,QAAQ;AAAA,CAAwB;AAClK,cAAU,KAAK,KAAK,aAAa,QAAQ,WAAW,UAAU,UAAU,GAAG,kCAAkC,QAAQ,cAAc,QAAQ;AAAA,CAAwB;AACnK,cAAU,KAAK,KAAK,aAAa,OAAO,WAAW,UAAU,OAAO,GAAG,iCAAiC;AACxG,cAAU,KAAK,KAAK,aAAa,QAAQ,WAAW,UAAU,OAAO,GAAG,iCAAiC;AAAA,EAC3G;AACF;AAEA,SAAS,UAAU,QAAgB,eAAuC,CAAC,GAAS;AAClF,YAAU,KAAK,KAAK,QAAQ,cAAc,GAAG,KAAK,UAAU,EAAE,MAAM,gCAAgC,SAAS,MAAM,cAAc,EAAE,sBAAsB,SAAS,GAAG,aAAa,EAAE,CAAC,CAAC;AACtL,YAAU,KAAK,KAAK,QAAQ,WAAW,GAAG,EAAE;AAC5C,YAAU,KAAK,KAAK,QAAQ,OAAO,YAAY,GAAG,oCAAoC;AACtF,gBAAc,KAAK,KAAK,QAAQ,gBAAgB,iBAAiB,MAAM,GAAG,sBAAsB,CAAC,CAAC;AACpG;AAEA,SAAS,WAAW,MAAgB,QAAgB,cAAiC,CAAC,GAA8C;AAClI,QAAM,SAAS,UAAU,QAAQ,UAAU,CAAC,QAAQ,GAAG,IAAI,GAAG;AAAA,IAC5D,KAAK;AAAA,IACL,UAAU;AAAA,IACV,KAAK,EAAE,GAAG,QAAQ,KAAK,aAAa,KAAK,kBAAkB,KAAK,GAAG,YAAY;AAAA,EACjF,CAAC;AACD,MAAI,OAAO,MAAO,OAAM,OAAO;AAC/B,SAAO,EAAE,QAAQ,OAAO,QAAQ,QAAQ,GAAG,OAAO,MAAM;AAAA,EAAK,OAAO,MAAM,GAAG;AAC/E;AAEA,SAAS,oBAAoB,QAAgB,eAAwB,mBAA+C;AAClH,QAAM,gBAAgB,KAAK,KAAK,QAAQ,KAAK;AAC7C,QAAM,SAAS,KAAK,KAAK,QAAQ,cAAc;AAC/C,QAAM,WAAW,KAAK,KAAK,eAAe,QAAQ,aAAa,UAAU,aAAa,MAAM;AAC5F,QAAM,aAAa,oCAAoC,KAAK,UAAU,MAAM,CAAC;AAAA;AAC7E,YAAU,UAAU,QAAQ,aAAa,UACrC,KAAK,QAAQ,QAAQ;AAAA,IACrB,KAAK,QAAQ,QAAQ;AAAA,EAAK,UAAU,EAAE;AAC1C,YAAU,KAAK,KAAK,eAAe,eAAe,GAAG,UAAU;AAC/D,KAAG,UAAU,UAAU,GAAK;AAC5B,MAAI,iBAAiB,mBAAmB;AACtC,UAAM,WAAW,OAAO,KAAK,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC,CAAC,EAAE,SAAS,QAAQ;AACvF,UAAM,WAAW;AAAA;AAAA;AAAA,uEAGkD,KAAK,UAAU,QAAQ,CAAC;AAAA,uEACxB,iBAAiB,uCAAuC,iBAAiB;AAAA;AAAA;AAAA;AAG5I,UAAM,SAAS,KAAK,KAAK,eAAe,QAAQ,aAAa,UAAU,WAAW,IAAI;AACtF,cAAU,QAAQ,QAAQ,aAAa,UACnC,KAAK,QAAQ,QAAQ;AAAA,IACrB,KAAK,QAAQ,QAAQ;AAAA,EAAK,QAAQ,EAAE;AACxC,cAAU,KAAK,KAAK,eAAe,aAAa,GAAG,QAAQ;AAC3D,OAAG,UAAU,QAAQ,GAAK;AAAA,EAC5B;AACA,SAAO,EAAE,MAAM,gBAAgB,KAAK,YAAY,QAAQ,IAAI,KAAK;AACnE;AAEA,SAAS,kBAAkB,WAA2C;AACpE,MAAI,CAAC,GAAG,WAAW,SAAS,EAAG,QAAO,CAAC;AACvC,QAAM,QAAgC,CAAC;AACvC,aAAW,SAAS,GAAG,YAAY,WAAW,EAAE,eAAe,KAAK,CAAC,GAAG;AACtE,UAAM,WAAW,KAAK,KAAK,WAAW,MAAM,IAAI;AAChD,QAAI,MAAM,YAAY,GAAG;AACvB,iBAAW,CAAC,cAAc,OAAO,KAAK,OAAO,QAAQ,kBAAkB,QAAQ,CAAC,EAAG,OAAM,KAAK,KAAK,MAAM,MAAM,YAAY,CAAC,IAAI;AAAA,IAClI,OAAO;AACL,YAAM,MAAM,IAAI,IAAI,GAAG,aAAa,QAAQ,EAAE,SAAS,QAAQ;AAAA,IACjE;AAAA,EACF;AACA,SAAO;AACT;AAEA,KAAK,SAAS,yDAAyD,MAAM;AAC3E,aAAW,QAAQ,CAAC,aAAa,SAAS,GAAG;AAC3C,SAAK,mBAAmB,IAAI,mEAAmE,MAAM;AACnG,YAAM,OAAO,GAAG,YAAY,KAAK,KAAK,GAAG,OAAO,GAAG,sBAAsB,CAAC;AAC1E,YAAM,SAAS,KAAK,KAAK,MAAM,KAAK;AACpC,UAAI;AACF,cAAM,UAAU;AAChB,kBAAU,QAAQ,EAAE,CAAC,OAAO,GAAG,QAAQ,CAAC;AACxC,sBAAc,KAAK,KAAK,QAAQ,gBAAgB,OAAO,GAAG,SAAS,CAAC,UAAU,CAAC;AAC/E,cAAM,cAAc,KAAK,KAAK,MAAM,SAAS;AAC7C,sBAAc,aAAa,SAAS,CAAC,UAAU,CAAC;AAChD,YAAI,SAAS,UAAW,cAAa,OAAO,CAAC,QAAQ,KAAK,KAAK,MAAM,eAAe,GAAG,MAAM,MAAM,SAAS,CAAC;AAC7G,cAAM,gBAAgB,2DAA2D,OAAO,oBAAoB,OAAO;AAAA;AACnH,kBAAU,KAAK,KAAK,QAAQ,OAAO,YAAY,GAAG,aAAa;AAC/D,cAAM,iBAAiB,GAAG,aAAa,KAAK,KAAK,QAAQ,cAAc,GAAG,MAAM;AAChF,cAAM,kBAAkB,kBAAkB,KAAK,KAAK,QAAQ,cAAc,CAAC;AAC3E,cAAM,cAAc,oBAAoB,MAAM;AAC9C,cAAM,UAAU,SAAS,YAAY,0BAA0B;AAC/D,cAAM,SAAS,WAAW,CAAC,UAAU,OAAO,GAAG,OAAO,IAAI,OAAO,IAAI,WAAW,qBAAqB,GAAG,QAAQ,WAAW;AAE3H,eAAO,OAAO,QAAQ,OAAO,MAAM,EAAE,IAAI,KAAK,CAAC;AAC/C,eAAO,OAAO,MAAM,EAAE,UAAU,2BAA2B;AAC3D,eAAO,OAAO,MAAM,EAAE,UAAU,gBAAgB;AAChD,eAAO,OAAO,MAAM,EAAE,UAAU,UAAU;AAC1C,eAAO,GAAG,WAAW,KAAK,KAAK,QAAQ,cAAc,CAAC,CAAC,EAAE,KAAK,KAAK;AACnE,eAAO,GAAG,aAAa,KAAK,KAAK,QAAQ,OAAO,YAAY,GAAG,MAAM,CAAC,EAAE,KAAK,aAAa;AAC1F,eAAO,GAAG,aAAa,KAAK,KAAK,QAAQ,cAAc,GAAG,MAAM,CAAC,EAAE,KAAK,cAAc;AACtF,eAAO,kBAAkB,KAAK,KAAK,QAAQ,cAAc,CAAC,CAAC,EAAE,QAAQ,eAAe;AACpF,eAAO,GAAG,WAAW,KAAK,KAAK,QAAQ,OAAO,WAAW,UAAU,CAAC,CAAC,EAAE,KAAK,KAAK;AACjF,eAAO,GAAG,WAAW,KAAK,KAAK,QAAQ,YAAY,WAAW,CAAC,CAAC,EAAE,KAAK,KAAK;AAAA,MAC9E,UAAE;AAAU,WAAG,OAAO,MAAM,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,MAAE;AAAA,IAChE,CAAC;AAAA,EACH;AAEA,OAAK,8FAA8F,MAAM;AACvG,UAAM,SAAS,GAAG,YAAY,KAAK,KAAK,GAAG,OAAO,GAAG,4BAA4B,CAAC;AAClF,QAAI;AACF,YAAM,UAAU;AAChB,gBAAU,QAAQ,EAAE,CAAC,OAAO,GAAG,gCAAgC,CAAC;AAChE,oBAAc,KAAK,KAAK,QAAQ,gBAAgB,OAAO,GAAG,SAAS,CAAC,eAAe,CAAC;AACpF,YAAM,gBAAgB,gEAAgE,OAAO,yDAAyD,OAAO;AAAA;AAC7J,gBAAU,KAAK,KAAK,QAAQ,OAAO,YAAY,GAAG,aAAa;AAC/D,YAAM,iBAAiB,GAAG,aAAa,KAAK,KAAK,QAAQ,cAAc,GAAG,MAAM;AAChF,YAAM,cAAc,oBAAoB,QAAQ,SAAS,kBAAkB;AAC3E,YAAM,SAAS,WAAW,CAAC,UAAU,OAAO,6BAA6B,qBAAqB,GAAG,QAAQ,WAAW;AAEpH,aAAO,OAAO,QAAQ,OAAO,MAAM,EAAE,IAAI,KAAK,CAAC;AAC/C,aAAO,OAAO,MAAM,EAAE,UAAU,eAAe;AAC/C,aAAO,OAAO,MAAM,EAAE,UAAU,OAAO;AACvC,aAAO,OAAO,MAAM,EAAE,UAAU,0BAA0B;AAC1D,aAAO,OAAO,MAAM,EAAE,UAAU,2BAA2B;AAC3D,aAAO,GAAG,WAAW,KAAK,KAAK,QAAQ,cAAc,CAAC,CAAC,EAAE,KAAK,KAAK;AACnE,aAAO,GAAG,aAAa,KAAK,KAAK,QAAQ,OAAO,YAAY,GAAG,MAAM,CAAC,EAAE,KAAK,aAAa;AAC1F,aAAO,GAAG,aAAa,KAAK,KAAK,QAAQ,cAAc,GAAG,MAAM,CAAC,EAAE,KAAK,cAAc;AACtF,aAAO,GAAG,WAAW,KAAK,KAAK,QAAQ,OAAO,WAAW,kBAAkB,CAAC,CAAC,EAAE,KAAK,KAAK;AAAA,IAC3F,UAAE;AACA,SAAG,OAAO,QAAQ,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,IACpD;AAAA,EACF,CAAC;AAED,OAAK,4FAA4F,MAAM;AACrG,UAAM,SAAS,GAAG,YAAY,KAAK,KAAK,GAAG,OAAO,GAAG,yBAAyB,CAAC;AAC/E,QAAI;AACF,gBAAU,MAAM;AAChB,YAAM,eAAe,KAAK,KAAK,QAAQ,WAAW;AAClD,oBAAc,cAAc,wBAAwB,CAAC,UAAU,CAAC;AAChE,YAAM,gBAAgB;AACtB,gBAAU,KAAK,KAAK,QAAQ,OAAO,YAAY,GAAG,aAAa;AAC/D,gBAAU,KAAK,KAAK,QAAQ,OAAO,WAAW,YAAY,UAAU,GAAG,+CAA+C;AACtH,YAAM,eAAe,kBAAkB,KAAK,KAAK,QAAQ,KAAK,CAAC;AAC/D,YAAM,iBAAiB,GAAG,aAAa,KAAK,KAAK,QAAQ,cAAc,GAAG,MAAM;AAChF,YAAM,SAAS,WAAW,CAAC,UAAU,OAAO,yCAAyC,uBAAuB,SAAS,GAAG,QAAQ,oBAAoB,MAAM,CAAC;AAE3J,aAAO,OAAO,QAAQ,OAAO,MAAM,EAAE,IAAI,KAAK,CAAC;AAC/C,aAAO,OAAO,MAAM,EAAE,UAAU,UAAU;AAC1C,aAAO,OAAO,MAAM,EAAE,QAAQ,wCAAwC;AACtE,aAAO,GAAG,WAAW,KAAK,KAAK,QAAQ,cAAc,CAAC,CAAC,EAAE,KAAK,KAAK;AACnE,aAAO,kBAAkB,KAAK,KAAK,QAAQ,KAAK,CAAC,CAAC,EAAE,QAAQ,YAAY;AACxE,aAAO,GAAG,aAAa,KAAK,KAAK,QAAQ,cAAc,GAAG,MAAM,CAAC,EAAE,KAAK,cAAc;AAAA,IACxF,UAAE;AACA,SAAG,OAAO,QAAQ,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,IACpD;AAAA,EACF,CAAC;AAED,OAAK,oGAAoG,MAAM;AAC7G,UAAM,SAAS,GAAG,YAAY,KAAK,KAAK,GAAG,OAAO,GAAG,8BAA8B,CAAC;AACpF,QAAI;AACF,gBAAU,MAAM;AAChB,gBAAU,KAAK,KAAK,QAAQ,OAAO,YAAY,GAAG,mLAAmL;AACrO,gBAAU,KAAK,KAAK,QAAQ,OAAO,WAAW,YAAY,UAAU,GAAG,8BAA8B;AACrG,YAAM,YAAY,KAAK,KAAK,QAAQ,YAAY,WAAW;AAC3D,iBAAW,QAAQ,CAAC,6BAA6B,wBAAwB,yBAAyB,mBAAmB,4BAA4B,EAAG,WAAU,KAAK,KAAK,WAAW,IAAI,GAAG,oBAAoB;AAC9M,YAAM,SAAS,kBAAkB,SAAS;AAE1C,iBAAW,WAAW,CAAC,OAAO,cAAc,YAAY,YAAY,IAAI,GAAG;AACzE,cAAM,SAAS,WAAW,CAAC,YAAY,SAAS,SAAS,GAAG,QAAQ,EAAE,6BAA6B,OAAO,CAAC;AAC3G,eAAO,OAAO,QAAQ,GAAG,OAAO,KAAK,OAAO,MAAM,EAAE,EAAE,IAAI,KAAK,CAAC;AAChE,eAAO,OAAO,MAAM,EAAE,UAAU,wCAAwC;AACxE,eAAO,kBAAkB,SAAS,GAAG,OAAO,EAAE,QAAQ,MAAM;AAAA,MAC9D;AACA,YAAM,iBAAiB,WAAW,CAAC,YAAY,OAAO,SAAS,GAAG,QAAQ,EAAE,6BAA6B,QAAQ,CAAC;AAClH,aAAO,eAAe,QAAQ,eAAe,MAAM,EAAE,KAAK,CAAC;AAAA,IAC7D,UAAE;AACA,SAAG,OAAO,QAAQ,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,IACpD;AAAA,EACF,CAAC;AAED,OAAK,wGAAwG,MAAM;AACjH,UAAM,SAAS,GAAG,YAAY,KAAK,KAAK,GAAG,OAAO,GAAG,0BAA0B,CAAC;AAChF,QAAI;AACF,YAAM,UAAU;AAChB,YAAM,gBAAgB;AACtB,gBAAU,QAAQ,EAAE,CAAC,OAAO,GAAG,OAAO,aAAa,SAAS,CAAC;AAC7D,YAAM,cAAc,KAAK,KAAK,QAAQ,gBAAgB,OAAO;AAC7D,oBAAc,aAAa,eAAe,CAAC,YAAY,SAAS,CAAC;AACjE,gBAAU,KAAK,KAAK,aAAa,OAAO,WAAW,YAAY,YAAY,GAAG,yCAAyC;AACvH,YAAM,UAAU,WAAW,CAAC,UAAU,UAAU,SAAS,YAAY,YAAY,qBAAqB,GAAG,MAAM;AAC/G,aAAO,QAAQ,QAAQ,QAAQ,MAAM,EAAE,KAAK,CAAC;AAC7C,YAAM,YAAY,KAAK,KAAK,QAAQ,YAAY,WAAW;AAC3D,YAAM,gBAAgB,GAAG,aAAa,KAAK,KAAK,QAAQ,OAAO,YAAY,GAAG,MAAM;AACpF,aAAO,aAAa,EAAE,UAAU,UAAU,OAAO,GAAG;AACpD,aAAO,aAAa,EAAE,UAAU,iBAAiB,aAAa,GAAG;AACjE,aAAO,GAAG,aAAa,KAAK,KAAK,WAAW,iBAAiB,GAAG,MAAM,CAAC,EAAE,UAAU,GAAG,OAAO,sBAAsB;AACnH,aAAO,GAAG,aAAa,KAAK,KAAK,WAAW,4BAA4B,GAAG,MAAM,CAAC,EAAE,UAAU,gBAAgB,OAAO,OAAO;AAE5H,YAAM,UAAU,WAAW,CAAC,UAAU,SAAS,UAAU,GAAG,MAAM;AAClE,aAAO,QAAQ,QAAQ,QAAQ,MAAM,EAAE,KAAK,CAAC;AAC7C,YAAM,gBAAgB,GAAG,aAAa,KAAK,KAAK,QAAQ,OAAO,YAAY,GAAG,MAAM;AACpF,aAAO,aAAa,EAAE,UAAU,cAAc;AAC9C,aAAO,aAAa,EAAE,UAAU,iBAAiB,aAAa,GAAG;AACjE,aAAO,aAAa,EAAE,UAAU,iBAAiB,aAAa,GAAG;AACjE,aAAO,GAAG,aAAa,KAAK,KAAK,QAAQ,OAAO,WAAW,YAAY,YAAY,GAAG,MAAM,CAAC,EAAE,UAAU,GAAG,OAAO,kBAAkB;AAErI,gBAAU,KAAK,KAAK,QAAQ,OAAO,YAAY,GAAG,oCAAoC;AACtF,YAAM,WAAW,WAAW,CAAC,YAAY,OAAO,SAAS,GAAG,MAAM;AAClE,aAAO,SAAS,QAAQ,SAAS,MAAM,EAAE,KAAK,CAAC;AAC/C,aAAO,GAAG,aAAa,KAAK,KAAK,WAAW,iBAAiB,GAAG,MAAM,CAAC,EAAE,IAAI,UAAU,UAAU;AACjG,aAAO,GAAG,aAAa,KAAK,KAAK,WAAW,4BAA4B,GAAG,MAAM,CAAC,EAAE,KAAK,EAAE;AAC3F,aAAO,GAAG,WAAW,KAAK,KAAK,aAAa,cAAc,CAAC,CAAC,EAAE,KAAK,IAAI;AACvE,aAAO,GAAG,WAAW,KAAK,KAAK,QAAQ,OAAO,WAAW,YAAY,UAAU,CAAC,CAAC,EAAE,KAAK,IAAI;AAAA,IAC9F,UAAE;AACA,SAAG,OAAO,QAAQ,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,IACpD;AAAA,EACF,CAAC;AAED,OAAK,sFAAsF,MAAM;AAC/F,UAAM,SAAS,GAAG,YAAY,KAAK,KAAK,GAAG,OAAO,GAAG,wBAAwB,CAAC;AAC9E,QAAI;AACF,YAAM,UAAU;AAChB,gBAAU,QAAQ,EAAE,CAAC,OAAO,GAAG,gCAAgC,CAAC;AAChE,YAAM,cAAc,KAAK,KAAK,QAAQ,gBAAgB,OAAO;AAC7D,oBAAc,aAAa,uBAAuB,CAAC,UAAU,CAAC;AAC9D,gBAAU,KAAK,KAAK,aAAa,cAAc,GAAG,KAAK,UAAU,EAAE,MAAM,uBAAuB,SAAS,EAAE,KAAK,mCAAmC,EAAE,CAAC,CAAC;AACvJ,YAAM,aAAa,KAAK,KAAK,QAAQ,OAAO,YAAY;AACxD,YAAM,cAAc,GAAG,aAAa,YAAY,MAAM;AAEtD,YAAM,UAAU,WAAW,CAAC,UAAU,UAAU,SAAS,YAAY,YAAY,WAAW,qBAAqB,GAAG,MAAM;AAC1H,aAAO,QAAQ,QAAQ,QAAQ,MAAM,EAAE,IAAI,KAAK,CAAC;AACjD,aAAO,QAAQ,MAAM,EAAE,UAAU,GAAG,OAAO,oBAAoB;AAC/D,aAAO,GAAG,aAAa,YAAY,MAAM,CAAC,EAAE,KAAK,WAAW;AAC5D,aAAO,GAAG,WAAW,KAAK,KAAK,QAAQ,OAAO,WAAW,UAAU,CAAC,CAAC,EAAE,KAAK,KAAK;AAEjF,YAAM,mBAAmB,2DAA2D,OAAO;AAAA;AAC3F,gBAAU,YAAY,gBAAgB;AACtC,YAAM,UAAU,WAAW,CAAC,UAAU,SAAS,UAAU,GAAG,MAAM;AAClE,aAAO,QAAQ,QAAQ,QAAQ,MAAM,EAAE,IAAI,KAAK,CAAC;AACjD,aAAO,QAAQ,MAAM,EAAE,UAAU,GAAG,OAAO,oBAAoB;AAC/D,aAAO,GAAG,aAAa,YAAY,MAAM,CAAC,EAAE,KAAK,gBAAgB;AACjE,aAAO,GAAG,WAAW,KAAK,KAAK,QAAQ,OAAO,WAAW,UAAU,CAAC,CAAC,EAAE,KAAK,KAAK;AAAA,IACnF,UAAE;AACA,SAAG,OAAO,QAAQ,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,IACpD;AAAA,EACF,CAAC;AAED,OAAK,oEAAoE,MAAM;AAC7E,UAAM,SAAS,GAAG,YAAY,KAAK,KAAK,GAAG,OAAO,GAAG,yBAAyB,CAAC;AAC/E,QAAI;AACF,YAAM,UAAU;AAChB,gBAAU,QAAQ,EAAE,CAAC,OAAO,GAAG,QAAQ,CAAC;AACxC,oBAAc,KAAK,KAAK,QAAQ,gBAAgB,OAAO,GAAG,SAAS,CAAC,UAAU,CAAC;AAC/E,gBAAU,KAAK,KAAK,QAAQ,OAAO,YAAY,GAAG,2DAA2D,OAAO;AAAA,CAAQ;AAC5H,gBAAU,KAAK,KAAK,QAAQ,OAAO,WAAW,YAAY,UAAU,GAAG,sDAAsD;AAC7H,YAAM,SAAS,kBAAkB,KAAK,KAAK,QAAQ,KAAK,CAAC;AAEzD,YAAM,SAAS,WAAW,CAAC,YAAY,OAAO,SAAS,GAAG,MAAM;AAEhE,aAAO,OAAO,QAAQ,OAAO,MAAM,EAAE,KAAK,CAAC;AAC3C,aAAO,kBAAkB,KAAK,KAAK,QAAQ,KAAK,CAAC,CAAC,EAAE,QAAQ,MAAM;AAClE,aAAO,GAAG,aAAa,KAAK,KAAK,QAAQ,YAAY,aAAa,iBAAiB,GAAG,MAAM,CAAC,EAAE,UAAU,GAAG,OAAO,sBAAsB;AAAA,IAC3I,UAAE;AACA,SAAG,OAAO,QAAQ,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,IACpD;AAAA,EACF,CAAC;AACH,CAAC;",
+  "names": []
+}

package/dist/lib/eject.js

@@ -1,7 +1,9 @@
 import path from "node:path";
 import fs from "node:fs";
-import { setModuleRegistrationSource } from "./modules-config.js";
-import { resolveInstalledOfficialModulePackage } from "./module-package.js";
+import { prepareModuleRegistrationSource, setModuleRegistrationSource } from "./modules-config.js";
+import { isModulePackageExportError, resolveInstalledOfficialModulePackage, resolveInstalledPackageRoot } from "./module-package.js";
+import { normalizeModuleLocator } from "@open-mercato/shared/modules/module-locators";
+import { getEnabledModuleIdentities } from "./module-identity.js";
 const SKIP_DIRS = /* @__PURE__ */ new Set(["__tests__", "__mocks__", "node_modules"]);
 const SOURCE_FILE_EXTENSIONS = [".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs"];
 function shouldSkipEntryName(name) {
@@ -129,8 +131,8 @@ function copyDirRecursive(src, dest) {
     }
   }
 }
-function updateModulesTs(modulesPath, moduleId) {
-  setModuleRegistrationSource(modulesPath, moduleId, "@app");
+function updateModulesTs(modulesPath, moduleId, provenance) {
+  setModuleRegistrationSource(modulesPath, moduleId, "@app", provenance);
 }
 function resolveModuleSourceBase(resolver, entry) {
   const { pkgBase } = resolver.getModulePaths(entry);
@@ -164,7 +166,8 @@ function resolveModuleSource(resolver, entry) {
         description: modulePackage.moduleInfo.description
       }
     };
-  } catch {
+  } catch (error) {
+    if (isModulePackageExportError(error)) throw error;
     return { pkgBase, metadata: fallbackMetadata };
   }
 }
@@ -187,7 +190,9 @@ function listEjectableModules(resolver) {
 }
 function ejectModule(resolver, moduleId) {
   const modules = resolver.loadEnabledModules();
-  const entry = modules.find((m) => m.id === moduleId);
+  const identities = getEnabledModuleIdentities(resolver, modules);
+  const matches = modules.filter((module) => module.id === moduleId);
+  const entry = matches[0];
   if (!entry) {
     throw new Error(
       `Module "${moduleId}" is not listed in src/modules.ts. Available modules: ${modules.map((m) => m.id).join(", ")}`
@@ -212,13 +217,24 @@ function ejectModule(resolver, moduleId) {
   }
   if (fs.existsSync(appBase)) {
     throw new Error(
-      `Destination directory already exists: ${appBase}. Remove it first or resolve the conflict manually.`
+      `Destination directory already exists: ${appBase}. Keep the existing local source and review the destination conflict before ejecting.`
     );
   }
+  const locators = identities.find((identity) => identity.id === moduleId)?.locators ?? [];
+  const packageRoot = resolveInstalledPackageRoot(resolver, entry.from || "@open-mercato/core");
+  const manifest = JSON.parse(fs.readFileSync(path.join(packageRoot, "package.json"), "utf8"));
+  const packageName = manifest && typeof manifest === "object" && "name" in manifest && typeof manifest.name === "string" ? manifest.name : void 0;
+  if (!packageName || normalizeModuleLocator(`npm:${packageName}`) !== `npm:${packageName}`) {
+    throw new Error(`Cannot retain source provenance for module "${moduleId}": the installed package manifest has no valid name.`);
+  }
+  const locator = locators.find((identity) => identity.startsWith("github:")) ?? locators.find((identity) => identity.startsWith("npm:"));
+  const provenance = { ...packageName ? { packageName } : {}, ...locator ? { locator } : {} };
+  const modulesPath = resolver.getModulesConfigPath();
+  const originalConfig = fs.readFileSync(modulesPath, "utf8");
+  const updatedConfig = prepareModuleRegistrationSource(originalConfig, moduleId, "@app", provenance);
   copyDirRecursive(pkgBase, appBase);
   rewriteCrossModuleImports(pkgBase, appBase, moduleId, entry.from || "@open-mercato/core");
-  const modulesPath = resolver.getModulesConfigPath();
-  updateModulesTs(modulesPath, moduleId);
+  fs.writeFileSync(modulesPath, updatedConfig);
 }
 export {
   copyDirRecursive,

package/dist/lib/eject.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/lib/eject.ts"],
-  "sourcesContent": ["import path from 'node:path'\nimport fs from 'node:fs'\nimport { setModuleRegistrationSource } from './modules-config'\nimport type { PackageResolver, ModuleEntry } from './resolver'\nimport { resolveInstalledOfficialModulePackage } from './module-package'\n\ntype ModuleMetadata = {\n  ejectable?: boolean\n  title?: string\n  description?: string\n}\n\nconst SKIP_DIRS = new Set(['__tests__', '__mocks__', 'node_modules'])\nconst SOURCE_FILE_EXTENSIONS = ['.ts', '.tsx', '.js', '.jsx', '.mjs', '.cjs']\n\nfunction shouldSkipEntryName(name: string): boolean {\n  return SKIP_DIRS.has(name) || name === '.DS_Store' || name.startsWith('._')\n}\n\nfunction collectSourceFiles(dir: string): string[] {\n  const files: string[] = []\n  const entries = fs.readdirSync(dir, { withFileTypes: true })\n  for (const entry of entries) {\n    if (shouldSkipEntryName(entry.name)) continue\n    const fullPath = path.join(dir, entry.name)\n    if (entry.isDirectory()) {\n      files.push(...collectSourceFiles(fullPath))\n      continue\n    }\n    const ext = path.extname(entry.name)\n    if (!SOURCE_FILE_EXTENSIONS.includes(ext)) continue\n    files.push(fullPath)\n  }\n  return files\n}\n\nfunction resolveRelativeImportTarget(sourceFile: string, importPath: string): string | null {\n  if (!importPath.startsWith('.')) return null\n\n  const basePath = path.resolve(path.dirname(sourceFile), importPath)\n  const candidates = [basePath]\n\n  for (const ext of SOURCE_FILE_EXTENSIONS) {\n    candidates.push(`${basePath}${ext}`)\n    candidates.push(path.join(basePath, `index${ext}`))\n  }\n\n  for (const candidate of candidates) {\n    if (fs.existsSync(candidate)) {\n      return candidate\n    }\n  }\n\n  return null\n}\n\nfunction rewriteRelativeSpecifier(\n  sourceFile: string,\n  specifier: string,\n  modulesRoot: string,\n  moduleId: string,\n  packageName: string,\n): string {\n  const resolvedTarget = resolveRelativeImportTarget(sourceFile, specifier)\n  if (!resolvedTarget) return specifier\n\n  const modulesRootPrefix = `${modulesRoot}${path.sep}`\n  if (!resolvedTarget.startsWith(modulesRootPrefix)) return specifier\n\n  const relativeFromModules = path.relative(modulesRoot, resolvedTarget)\n  let normalizedRelative = relativeFromModules.split(path.sep).join('/')\n  const matchedExt = SOURCE_FILE_EXTENSIONS.find((ext) => normalizedRelative.endsWith(ext))\n  if (matchedExt) {\n    normalizedRelative = normalizedRelative.slice(0, -matchedExt.length)\n  }\n  if (normalizedRelative.endsWith('/index')) {\n    normalizedRelative = normalizedRelative.slice(0, -'/index'.length)\n  }\n  const segments = normalizedRelative.split('/')\n  const targetModuleId = segments[0]\n\n  if (!targetModuleId || targetModuleId === moduleId) return specifier\n\n  return `${packageName}/modules/${normalizedRelative}`\n}\n\nexport function rewriteCrossModuleImports(\n  pkgBase: string,\n  appBase: string,\n  moduleId: string,\n  packageName: string,\n): void {\n  const modulesRoot = path.resolve(pkgBase, '..')\n  const appFiles = collectSourceFiles(appBase)\n\n  for (const appFile of appFiles) {\n    const relativePath = path.relative(appBase, appFile)\n    const sourceFile = path.join(pkgBase, relativePath)\n\n    if (!fs.existsSync(sourceFile)) continue\n\n    const content = fs.readFileSync(appFile, 'utf8')\n    let updated = content\n\n    updated = updated.replace(\n      /(\\bfrom\\s*['\"])([^'\"]+)(['\"])/g,\n      (_match, prefix: string, specifier: string, suffix: string) => {\n        const rewritten = rewriteRelativeSpecifier(\n          sourceFile,\n          specifier,\n          modulesRoot,\n          moduleId,\n          packageName,\n        )\n        return `${prefix}${rewritten}${suffix}`\n      },\n    )\n\n    updated = updated.replace(\n      /(\\bimport\\s*\\(\\s*['\"])([^'\"]+)(['\"]\\s*\\))/g,\n      (_match, prefix: string, specifier: string, suffix: string) => {\n        const rewritten = rewriteRelativeSpecifier(\n          sourceFile,\n          specifier,\n          modulesRoot,\n          moduleId,\n          packageName,\n        )\n        return `${prefix}${rewritten}${suffix}`\n      },\n    )\n\n    if (updated !== content) {\n      fs.writeFileSync(appFile, updated)\n    }\n  }\n}\n\nexport function parseModuleMetadata(indexPath: string): ModuleMetadata {\n  if (!fs.existsSync(indexPath)) return {}\n\n  const source = fs.readFileSync(indexPath, 'utf8')\n  const result: ModuleMetadata = {}\n\n  const ejectableMatch = source.match(/ejectable\\s*:\\s*(true|false)/)\n  if (ejectableMatch) {\n    result.ejectable = ejectableMatch[1] === 'true'\n  }\n\n  const titleMatch = source.match(/title\\s*:\\s*['\"]([^'\"]+)['\"]/)\n  if (titleMatch) {\n    result.title = titleMatch[1]\n  }\n\n  const descMatch = source.match(/description\\s*:\\s*['\"]([^'\"]+)['\"]/)\n  if (descMatch) {\n    result.description = descMatch[1]\n  }\n\n  return result\n}\n\nexport function copyDirRecursive(src: string, dest: string): void {\n  fs.mkdirSync(dest, { recursive: true })\n\n  const entries = fs.readdirSync(src, { withFileTypes: true })\n  for (const entry of entries) {\n    if (shouldSkipEntryName(entry.name)) continue\n\n    const srcPath = path.join(src, entry.name)\n    const destPath = path.join(dest, entry.name)\n\n    if (entry.isDirectory()) {\n      copyDirRecursive(srcPath, destPath)\n    } else {\n      fs.copyFileSync(srcPath, destPath)\n    }\n  }\n}\n\nexport function updateModulesTs(modulesPath: string, moduleId: string): void {\n  setModuleRegistrationSource(modulesPath, moduleId, '@app')\n}\n\nexport type EjectableModule = {\n  id: string\n  title?: string\n  description?: string\n  from: string\n}\n\ntype ResolvedModuleSource = {\n  pkgBase: string\n  metadata: ModuleMetadata\n}\n\n// Standalone installs resolve getModulePaths' pkgBase to the package's\n// dist/modules tree when it exists (compiled JS, no index.ts), which made every\n// ejectable module read as \"not ejectable\" and eject copies of compiled output\n// (#4272). Prefer the shipped TypeScript sources under src/modules; fall back\n// to the resolved base for packages that ship dist only.\nfunction resolveModuleSourceBase(resolver: PackageResolver, entry: ModuleEntry): string {\n  const { pkgBase } = resolver.getModulePaths(entry)\n  const from = entry.from || '@open-mercato/core'\n  if (from === '@app') return pkgBase\n  const sourceBase = path.join(resolver.getPackageRoot(from), 'src', 'modules', entry.id)\n  if (path.resolve(sourceBase) !== path.resolve(pkgBase) && fs.existsSync(sourceBase)) {\n    return sourceBase\n  }\n  return pkgBase\n}\n\nfunction readModuleMetadata(moduleDir: string): ModuleMetadata {\n  const tsIndex = path.join(moduleDir, 'index.ts')\n  if (fs.existsSync(tsIndex)) return parseModuleMetadata(tsIndex)\n  return parseModuleMetadata(path.join(moduleDir, 'index.js'))\n}\n\nfunction resolveModuleSource(\n  resolver: PackageResolver,\n  entry: ModuleEntry,\n): ResolvedModuleSource {\n  const pkgBase = resolveModuleSourceBase(resolver, entry)\n  const fallbackMetadata = readModuleMetadata(pkgBase)\n  const from = entry.from || '@open-mercato/core'\n\n  if (from === '@app' || from === '@open-mercato/core') {\n    return { pkgBase, metadata: fallbackMetadata }\n  }\n\n  try {\n    const modulePackage = resolveInstalledOfficialModulePackage(resolver, from, entry.id)\n\n    return {\n      pkgBase: modulePackage.sourceModuleDir,\n      metadata: {\n        ejectable: modulePackage.metadata.ejectable,\n        title: modulePackage.moduleInfo.title ?? modulePackage.metadata.moduleId,\n        description: modulePackage.moduleInfo.description,\n      },\n    }\n  } catch {\n    return { pkgBase, metadata: fallbackMetadata }\n  }\n}\n\nexport function listEjectableModules(resolver: PackageResolver): EjectableModule[] {\n  const modules = resolver.loadEnabledModules()\n  const ejectable: EjectableModule[] = []\n\n  for (const entry of modules) {\n    if (entry.from === '@app') continue\n\n    const { metadata } = resolveModuleSource(resolver, entry)\n\n    if (metadata.ejectable) {\n      ejectable.push({\n        id: entry.id,\n        title: metadata.title,\n        description: metadata.description,\n        from: entry.from || '@open-mercato/core',\n      })\n    }\n  }\n\n  return ejectable\n}\n\nexport function ejectModule(resolver: PackageResolver, moduleId: string): void {\n  const modules = resolver.loadEnabledModules()\n  const entry = modules.find((m: ModuleEntry) => m.id === moduleId)\n\n  if (!entry) {\n    throw new Error(\n      `Module \"${moduleId}\" is not listed in src/modules.ts. ` +\n      `Available modules: ${modules.map((m: ModuleEntry) => m.id).join(', ')}`,\n    )\n  }\n\n  if (entry.from === '@app') {\n    throw new Error(\n      `Module \"${moduleId}\" is already local (from: '@app'). Nothing to eject.`,\n    )\n  }\n\n  const { appBase } = resolver.getModulePaths(entry)\n  const { pkgBase, metadata } = resolveModuleSource(resolver, entry)\n\n  if (!fs.existsSync(pkgBase)) {\n    throw new Error(\n      `Package source directory not found: ${pkgBase}. ` +\n      `Make sure the package is installed.`,\n    )\n  }\n\n  if (!metadata.ejectable) {\n    throw new Error(\n      `Module \"${moduleId}\" is not marked as ejectable. Only modules with \\`ejectable: true\\` in their metadata can be ejected.`,\n    )\n  }\n\n  if (fs.existsSync(appBase)) {\n    throw new Error(\n      `Destination directory already exists: ${appBase}. ` +\n      `Remove it first or resolve the conflict manually.`,\n    )\n  }\n\n  copyDirRecursive(pkgBase, appBase)\n  rewriteCrossModuleImports(pkgBase, appBase, moduleId, entry.from || '@open-mercato/core')\n\n  const modulesPath = resolver.getModulesConfigPath()\n  updateModulesTs(modulesPath, moduleId)\n}\n"],
-  "mappings": "AAAA,OAAO,UAAU;AACjB,OAAO,QAAQ;AACf,SAAS,mCAAmC;AAE5C,SAAS,6CAA6C;AAQtD,MAAM,YAAY,oBAAI,IAAI,CAAC,aAAa,aAAa,cAAc,CAAC;AACpE,MAAM,yBAAyB,CAAC,OAAO,QAAQ,OAAO,QAAQ,QAAQ,MAAM;AAE5E,SAAS,oBAAoB,MAAuB;AAClD,SAAO,UAAU,IAAI,IAAI,KAAK,SAAS,eAAe,KAAK,WAAW,IAAI;AAC5E;AAEA,SAAS,mBAAmB,KAAuB;AACjD,QAAM,QAAkB,CAAC;AACzB,QAAM,UAAU,GAAG,YAAY,KAAK,EAAE,eAAe,KAAK,CAAC;AAC3D,aAAW,SAAS,SAAS;AAC3B,QAAI,oBAAoB,MAAM,IAAI,EAAG;AACrC,UAAM,WAAW,KAAK,KAAK,KAAK,MAAM,IAAI;AAC1C,QAAI,MAAM,YAAY,GAAG;AACvB,YAAM,KAAK,GAAG,mBAAmB,QAAQ,CAAC;AAC1C;AAAA,IACF;AACA,UAAM,MAAM,KAAK,QAAQ,MAAM,IAAI;AACnC,QAAI,CAAC,uBAAuB,SAAS,GAAG,EAAG;AAC3C,UAAM,KAAK,QAAQ;AAAA,EACrB;AACA,SAAO;AACT;AAEA,SAAS,4BAA4B,YAAoB,YAAmC;AAC1F,MAAI,CAAC,WAAW,WAAW,GAAG,EAAG,QAAO;AAExC,QAAM,WAAW,KAAK,QAAQ,KAAK,QAAQ,UAAU,GAAG,UAAU;AAClE,QAAM,aAAa,CAAC,QAAQ;AAE5B,aAAW,OAAO,wBAAwB;AACxC,eAAW,KAAK,GAAG,QAAQ,GAAG,GAAG,EAAE;AACnC,eAAW,KAAK,KAAK,KAAK,UAAU,QAAQ,GAAG,EAAE,CAAC;AAAA,EACpD;AAEA,aAAW,aAAa,YAAY;AAClC,QAAI,GAAG,WAAW,SAAS,GAAG;AAC5B,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,yBACP,YACA,WACA,aACA,UACA,aACQ;AACR,QAAM,iBAAiB,4BAA4B,YAAY,SAAS;AACxE,MAAI,CAAC,eAAgB,QAAO;AAE5B,QAAM,oBAAoB,GAAG,WAAW,GAAG,KAAK,GAAG;AACnD,MAAI,CAAC,eAAe,WAAW,iBAAiB,EAAG,QAAO;AAE1D,QAAM,sBAAsB,KAAK,SAAS,aAAa,cAAc;AACrE,MAAI,qBAAqB,oBAAoB,MAAM,KAAK,GAAG,EAAE,KAAK,GAAG;AACrE,QAAM,aAAa,uBAAuB,KAAK,CAAC,QAAQ,mBAAmB,SAAS,GAAG,CAAC;AACxF,MAAI,YAAY;AACd,yBAAqB,mBAAmB,MAAM,GAAG,CAAC,WAAW,MAAM;AAAA,EACrE;AACA,MAAI,mBAAmB,SAAS,QAAQ,GAAG;AACzC,yBAAqB,mBAAmB,MAAM,GAAG,CAAC,SAAS,MAAM;AAAA,EACnE;AACA,QAAM,WAAW,mBAAmB,MAAM,GAAG;AAC7C,QAAM,iBAAiB,SAAS,CAAC;AAEjC,MAAI,CAAC,kBAAkB,mBAAmB,SAAU,QAAO;AAE3D,SAAO,GAAG,WAAW,YAAY,kBAAkB;AACrD;AAEO,SAAS,0BACd,SACA,SACA,UACA,aACM;AACN,QAAM,cAAc,KAAK,QAAQ,SAAS,IAAI;AAC9C,QAAM,WAAW,mBAAmB,OAAO;AAE3C,aAAW,WAAW,UAAU;AAC9B,UAAM,eAAe,KAAK,SAAS,SAAS,OAAO;AACnD,UAAM,aAAa,KAAK,KAAK,SAAS,YAAY;AAElD,QAAI,CAAC,GAAG,WAAW,UAAU,EAAG;AAEhC,UAAM,UAAU,GAAG,aAAa,SAAS,MAAM;AAC/C,QAAI,UAAU;AAEd,cAAU,QAAQ;AAAA,MAChB;AAAA,MACA,CAAC,QAAQ,QAAgB,WAAmB,WAAmB;AAC7D,cAAM,YAAY;AAAA,UAChB;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AACA,eAAO,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM;AAAA,MACvC;AAAA,IACF;AAEA,cAAU,QAAQ;AAAA,MAChB;AAAA,MACA,CAAC,QAAQ,QAAgB,WAAmB,WAAmB;AAC7D,cAAM,YAAY;AAAA,UAChB;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AACA,eAAO,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM;AAAA,MACvC;AAAA,IACF;AAEA,QAAI,YAAY,SAAS;AACvB,SAAG,cAAc,SAAS,OAAO;AAAA,IACnC;AAAA,EACF;AACF;AAEO,SAAS,oBAAoB,WAAmC;AACrE,MAAI,CAAC,GAAG,WAAW,SAAS,EAAG,QAAO,CAAC;AAEvC,QAAM,SAAS,GAAG,aAAa,WAAW,MAAM;AAChD,QAAM,SAAyB,CAAC;AAEhC,QAAM,iBAAiB,OAAO,MAAM,8BAA8B;AAClE,MAAI,gBAAgB;AAClB,WAAO,YAAY,eAAe,CAAC,MAAM;AAAA,EAC3C;AAEA,QAAM,aAAa,OAAO,MAAM,8BAA8B;AAC9D,MAAI,YAAY;AACd,WAAO,QAAQ,WAAW,CAAC;AAAA,EAC7B;AAEA,QAAM,YAAY,OAAO,MAAM,oCAAoC;AACnE,MAAI,WAAW;AACb,WAAO,cAAc,UAAU,CAAC;AAAA,EAClC;AAEA,SAAO;AACT;AAEO,SAAS,iBAAiB,KAAa,MAAoB;AAChE,KAAG,UAAU,MAAM,EAAE,WAAW,KAAK,CAAC;AAEtC,QAAM,UAAU,GAAG,YAAY,KAAK,EAAE,eAAe,KAAK,CAAC;AAC3D,aAAW,SAAS,SAAS;AAC3B,QAAI,oBAAoB,MAAM,IAAI,EAAG;AAErC,UAAM,UAAU,KAAK,KAAK,KAAK,MAAM,IAAI;AACzC,UAAM,WAAW,KAAK,KAAK,MAAM,MAAM,IAAI;AAE3C,QAAI,MAAM,YAAY,GAAG;AACvB,uBAAiB,SAAS,QAAQ;AAAA,IACpC,OAAO;AACL,SAAG,aAAa,SAAS,QAAQ;AAAA,IACnC;AAAA,EACF;AACF;AAEO,SAAS,gBAAgB,aAAqB,UAAwB;AAC3E,8BAA4B,aAAa,UAAU,MAAM;AAC3D;AAmBA,SAAS,wBAAwB,UAA2B,OAA4B;AACtF,QAAM,EAAE,QAAQ,IAAI,SAAS,eAAe,KAAK;AACjD,QAAM,OAAO,MAAM,QAAQ;AAC3B,MAAI,SAAS,OAAQ,QAAO;AAC5B,QAAM,aAAa,KAAK,KAAK,SAAS,eAAe,IAAI,GAAG,OAAO,WAAW,MAAM,EAAE;AACtF,MAAI,KAAK,QAAQ,UAAU,MAAM,KAAK,QAAQ,OAAO,KAAK,GAAG,WAAW,UAAU,GAAG;AACnF,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,mBAAmB,WAAmC;AAC7D,QAAM,UAAU,KAAK,KAAK,WAAW,UAAU;AAC/C,MAAI,GAAG,WAAW,OAAO,EAAG,QAAO,oBAAoB,OAAO;AAC9D,SAAO,oBAAoB,KAAK,KAAK,WAAW,UAAU,CAAC;AAC7D;AAEA,SAAS,oBACP,UACA,OACsB;AACtB,QAAM,UAAU,wBAAwB,UAAU,KAAK;AACvD,QAAM,mBAAmB,mBAAmB,OAAO;AACnD,QAAM,OAAO,MAAM,QAAQ;AAE3B,MAAI,SAAS,UAAU,SAAS,sBAAsB;AACpD,WAAO,EAAE,SAAS,UAAU,iBAAiB;AAAA,EAC/C;AAEA,MAAI;AACF,UAAM,gBAAgB,sCAAsC,UAAU,MAAM,MAAM,EAAE;AAEpF,WAAO;AAAA,MACL,SAAS,cAAc;AAAA,MACvB,UAAU;AAAA,QACR,WAAW,cAAc,SAAS;AAAA,QAClC,OAAO,cAAc,WAAW,SAAS,cAAc,SAAS;AAAA,QAChE,aAAa,cAAc,WAAW;AAAA,MACxC;AAAA,IACF;AAAA,EACF,QAAQ;AACN,WAAO,EAAE,SAAS,UAAU,iBAAiB;AAAA,EAC/C;AACF;AAEO,SAAS,qBAAqB,UAA8C;AACjF,QAAM,UAAU,SAAS,mBAAmB;AAC5C,QAAM,YAA+B,CAAC;AAEtC,aAAW,SAAS,SAAS;AAC3B,QAAI,MAAM,SAAS,OAAQ;AAE3B,UAAM,EAAE,SAAS,IAAI,oBAAoB,UAAU,KAAK;AAExD,QAAI,SAAS,WAAW;AACtB,gBAAU,KAAK;AAAA,QACb,IAAI,MAAM;AAAA,QACV,OAAO,SAAS;AAAA,QAChB,aAAa,SAAS;AAAA,QACtB,MAAM,MAAM,QAAQ;AAAA,MACtB,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO;AACT;AAEO,SAAS,YAAY,UAA2B,UAAwB;AAC7E,QAAM,UAAU,SAAS,mBAAmB;AAC5C,QAAM,QAAQ,QAAQ,KAAK,CAAC,MAAmB,EAAE,OAAO,QAAQ;AAEhE,MAAI,CAAC,OAAO;AACV,UAAM,IAAI;AAAA,MACR,WAAW,QAAQ,yDACG,QAAQ,IAAI,CAAC,MAAmB,EAAE,EAAE,EAAE,KAAK,IAAI,CAAC;AAAA,IACxE;AAAA,EACF;AAEA,MAAI,MAAM,SAAS,QAAQ;AACzB,UAAM,IAAI;AAAA,MACR,WAAW,QAAQ;AAAA,IACrB;AAAA,EACF;AAEA,QAAM,EAAE,QAAQ,IAAI,SAAS,eAAe,KAAK;AACjD,QAAM,EAAE,SAAS,SAAS,IAAI,oBAAoB,UAAU,KAAK;AAEjE,MAAI,CAAC,GAAG,WAAW,OAAO,GAAG;AAC3B,UAAM,IAAI;AAAA,MACR,uCAAuC,OAAO;AAAA,IAEhD;AAAA,EACF;AAEA,MAAI,CAAC,SAAS,WAAW;AACvB,UAAM,IAAI;AAAA,MACR,WAAW,QAAQ;AAAA,IACrB;AAAA,EACF;AAEA,MAAI,GAAG,WAAW,OAAO,GAAG;AAC1B,UAAM,IAAI;AAAA,MACR,yCAAyC,OAAO;AAAA,IAElD;AAAA,EACF;AAEA,mBAAiB,SAAS,OAAO;AACjC,4BAA0B,SAAS,SAAS,UAAU,MAAM,QAAQ,oBAAoB;AAExF,QAAM,cAAc,SAAS,qBAAqB;AAClD,kBAAgB,aAAa,QAAQ;AACvC;",
+  "sourcesContent": ["import path from 'node:path'\nimport fs from 'node:fs'\nimport { prepareModuleRegistrationSource, setModuleRegistrationSource } from './modules-config'\nimport type { PackageResolver, ModuleEntry } from './resolver'\nimport { isModulePackageExportError, resolveInstalledOfficialModulePackage, resolveInstalledPackageRoot } from './module-package'\nimport { normalizeModuleLocator } from '@open-mercato/shared/modules/module-locators'\nimport { getEnabledModuleIdentities } from './module-identity'\n\ntype ModuleMetadata = {\n  ejectable?: boolean\n  title?: string\n  description?: string\n}\n\nconst SKIP_DIRS = new Set(['__tests__', '__mocks__', 'node_modules'])\nconst SOURCE_FILE_EXTENSIONS = ['.ts', '.tsx', '.js', '.jsx', '.mjs', '.cjs']\n\nfunction shouldSkipEntryName(name: string): boolean {\n  return SKIP_DIRS.has(name) || name === '.DS_Store' || name.startsWith('._')\n}\n\nfunction collectSourceFiles(dir: string): string[] {\n  const files: string[] = []\n  const entries = fs.readdirSync(dir, { withFileTypes: true })\n  for (const entry of entries) {\n    if (shouldSkipEntryName(entry.name)) continue\n    const fullPath = path.join(dir, entry.name)\n    if (entry.isDirectory()) {\n      files.push(...collectSourceFiles(fullPath))\n      continue\n    }\n    const ext = path.extname(entry.name)\n    if (!SOURCE_FILE_EXTENSIONS.includes(ext)) continue\n    files.push(fullPath)\n  }\n  return files\n}\n\nfunction resolveRelativeImportTarget(sourceFile: string, importPath: string): string | null {\n  if (!importPath.startsWith('.')) return null\n\n  const basePath = path.resolve(path.dirname(sourceFile), importPath)\n  const candidates = [basePath]\n\n  for (const ext of SOURCE_FILE_EXTENSIONS) {\n    candidates.push(`${basePath}${ext}`)\n    candidates.push(path.join(basePath, `index${ext}`))\n  }\n\n  for (const candidate of candidates) {\n    if (fs.existsSync(candidate)) {\n      return candidate\n    }\n  }\n\n  return null\n}\n\nfunction rewriteRelativeSpecifier(\n  sourceFile: string,\n  specifier: string,\n  modulesRoot: string,\n  moduleId: string,\n  packageName: string,\n): string {\n  const resolvedTarget = resolveRelativeImportTarget(sourceFile, specifier)\n  if (!resolvedTarget) return specifier\n\n  const modulesRootPrefix = `${modulesRoot}${path.sep}`\n  if (!resolvedTarget.startsWith(modulesRootPrefix)) return specifier\n\n  const relativeFromModules = path.relative(modulesRoot, resolvedTarget)\n  let normalizedRelative = relativeFromModules.split(path.sep).join('/')\n  const matchedExt = SOURCE_FILE_EXTENSIONS.find((ext) => normalizedRelative.endsWith(ext))\n  if (matchedExt) {\n    normalizedRelative = normalizedRelative.slice(0, -matchedExt.length)\n  }\n  if (normalizedRelative.endsWith('/index')) {\n    normalizedRelative = normalizedRelative.slice(0, -'/index'.length)\n  }\n  const segments = normalizedRelative.split('/')\n  const targetModuleId = segments[0]\n\n  if (!targetModuleId || targetModuleId === moduleId) return specifier\n\n  return `${packageName}/modules/${normalizedRelative}`\n}\n\nexport function rewriteCrossModuleImports(\n  pkgBase: string,\n  appBase: string,\n  moduleId: string,\n  packageName: string,\n): void {\n  const modulesRoot = path.resolve(pkgBase, '..')\n  const appFiles = collectSourceFiles(appBase)\n\n  for (const appFile of appFiles) {\n    const relativePath = path.relative(appBase, appFile)\n    const sourceFile = path.join(pkgBase, relativePath)\n\n    if (!fs.existsSync(sourceFile)) continue\n\n    const content = fs.readFileSync(appFile, 'utf8')\n    let updated = content\n\n    updated = updated.replace(\n      /(\\bfrom\\s*['\"])([^'\"]+)(['\"])/g,\n      (_match, prefix: string, specifier: string, suffix: string) => {\n        const rewritten = rewriteRelativeSpecifier(\n          sourceFile,\n          specifier,\n          modulesRoot,\n          moduleId,\n          packageName,\n        )\n        return `${prefix}${rewritten}${suffix}`\n      },\n    )\n\n    updated = updated.replace(\n      /(\\bimport\\s*\\(\\s*['\"])([^'\"]+)(['\"]\\s*\\))/g,\n      (_match, prefix: string, specifier: string, suffix: string) => {\n        const rewritten = rewriteRelativeSpecifier(\n          sourceFile,\n          specifier,\n          modulesRoot,\n          moduleId,\n          packageName,\n        )\n        return `${prefix}${rewritten}${suffix}`\n      },\n    )\n\n    if (updated !== content) {\n      fs.writeFileSync(appFile, updated)\n    }\n  }\n}\n\nexport function parseModuleMetadata(indexPath: string): ModuleMetadata {\n  if (!fs.existsSync(indexPath)) return {}\n\n  const source = fs.readFileSync(indexPath, 'utf8')\n  const result: ModuleMetadata = {}\n\n  const ejectableMatch = source.match(/ejectable\\s*:\\s*(true|false)/)\n  if (ejectableMatch) {\n    result.ejectable = ejectableMatch[1] === 'true'\n  }\n\n  const titleMatch = source.match(/title\\s*:\\s*['\"]([^'\"]+)['\"]/)\n  if (titleMatch) {\n    result.title = titleMatch[1]\n  }\n\n  const descMatch = source.match(/description\\s*:\\s*['\"]([^'\"]+)['\"]/)\n  if (descMatch) {\n    result.description = descMatch[1]\n  }\n\n  return result\n}\n\nexport function copyDirRecursive(src: string, dest: string): void {\n  fs.mkdirSync(dest, { recursive: true })\n\n  const entries = fs.readdirSync(src, { withFileTypes: true })\n  for (const entry of entries) {\n    if (shouldSkipEntryName(entry.name)) continue\n\n    const srcPath = path.join(src, entry.name)\n    const destPath = path.join(dest, entry.name)\n\n    if (entry.isDirectory()) {\n      copyDirRecursive(srcPath, destPath)\n    } else {\n      fs.copyFileSync(srcPath, destPath)\n    }\n  }\n}\n\nexport function updateModulesTs(modulesPath: string, moduleId: string, provenance?: Pick<ModuleEntry, 'locator' | 'packageName'>): void {\n  setModuleRegistrationSource(modulesPath, moduleId, '@app', provenance)\n}\n\nexport type EjectableModule = {\n  id: string\n  title?: string\n  description?: string\n  from: string\n}\n\ntype ResolvedModuleSource = {\n  pkgBase: string\n  metadata: ModuleMetadata\n}\n\n// Standalone installs resolve getModulePaths' pkgBase to the package's\n// dist/modules tree when it exists (compiled JS, no index.ts), which made every\n// ejectable module read as \"not ejectable\" and eject copies of compiled output\n// (#4272). Prefer the shipped TypeScript sources under src/modules; fall back\n// to the resolved base for packages that ship dist only.\nfunction resolveModuleSourceBase(resolver: PackageResolver, entry: ModuleEntry): string {\n  const { pkgBase } = resolver.getModulePaths(entry)\n  const from = entry.from || '@open-mercato/core'\n  if (from === '@app') return pkgBase\n  const sourceBase = path.join(resolver.getPackageRoot(from), 'src', 'modules', entry.id)\n  if (path.resolve(sourceBase) !== path.resolve(pkgBase) && fs.existsSync(sourceBase)) {\n    return sourceBase\n  }\n  return pkgBase\n}\n\nfunction readModuleMetadata(moduleDir: string): ModuleMetadata {\n  const tsIndex = path.join(moduleDir, 'index.ts')\n  if (fs.existsSync(tsIndex)) return parseModuleMetadata(tsIndex)\n  return parseModuleMetadata(path.join(moduleDir, 'index.js'))\n}\n\nfunction resolveModuleSource(\n  resolver: PackageResolver,\n  entry: ModuleEntry,\n): ResolvedModuleSource {\n  const pkgBase = resolveModuleSourceBase(resolver, entry)\n  const fallbackMetadata = readModuleMetadata(pkgBase)\n  const from = entry.from || '@open-mercato/core'\n\n  if (from === '@app' || from === '@open-mercato/core') {\n    return { pkgBase, metadata: fallbackMetadata }\n  }\n\n  try {\n    const modulePackage = resolveInstalledOfficialModulePackage(resolver, from, entry.id)\n\n    return {\n      pkgBase: modulePackage.sourceModuleDir,\n      metadata: {\n        ejectable: modulePackage.metadata.ejectable,\n        title: modulePackage.moduleInfo.title ?? modulePackage.metadata.moduleId,\n        description: modulePackage.moduleInfo.description,\n      },\n    }\n  } catch (error) {\n    if (isModulePackageExportError(error)) throw error\n    return { pkgBase, metadata: fallbackMetadata }\n  }\n}\n\nexport function listEjectableModules(resolver: PackageResolver): EjectableModule[] {\n  const modules = resolver.loadEnabledModules()\n  const ejectable: EjectableModule[] = []\n\n  for (const entry of modules) {\n    if (entry.from === '@app') continue\n\n    const { metadata } = resolveModuleSource(resolver, entry)\n\n    if (metadata.ejectable) {\n      ejectable.push({\n        id: entry.id,\n        title: metadata.title,\n        description: metadata.description,\n        from: entry.from || '@open-mercato/core',\n      })\n    }\n  }\n\n  return ejectable\n}\n\nexport function ejectModule(resolver: PackageResolver, moduleId: string): void {\n  const modules = resolver.loadEnabledModules()\n  const identities = getEnabledModuleIdentities(resolver, modules)\n  const matches = modules.filter((module: ModuleEntry) => module.id === moduleId)\n  const entry = matches[0]\n\n  if (!entry) {\n    throw new Error(\n      `Module \"${moduleId}\" is not listed in src/modules.ts. ` +\n      `Available modules: ${modules.map((m: ModuleEntry) => m.id).join(', ')}`,\n    )\n  }\n\n  if (entry.from === '@app') {\n    throw new Error(\n      `Module \"${moduleId}\" is already local (from: '@app'). Nothing to eject.`,\n    )\n  }\n\n  const { appBase } = resolver.getModulePaths(entry)\n  const { pkgBase, metadata } = resolveModuleSource(resolver, entry)\n\n  if (!fs.existsSync(pkgBase)) {\n    throw new Error(\n      `Package source directory not found: ${pkgBase}. ` +\n      `Make sure the package is installed.`,\n    )\n  }\n\n  if (!metadata.ejectable) {\n    throw new Error(\n      `Module \"${moduleId}\" is not marked as ejectable. Only modules with \\`ejectable: true\\` in their metadata can be ejected.`,\n    )\n  }\n\n  if (fs.existsSync(appBase)) {\n    throw new Error(\n      `Destination directory already exists: ${appBase}. ` +\n      `Keep the existing local source and review the destination conflict before ejecting.`,\n    )\n  }\n\n  const locators = identities.find((identity) => identity.id === moduleId)?.locators ?? []\n  const packageRoot = resolveInstalledPackageRoot(resolver, entry.from || '@open-mercato/core')\n  const manifest: unknown = JSON.parse(fs.readFileSync(path.join(packageRoot, 'package.json'), 'utf8'))\n  const packageName = manifest && typeof manifest === 'object' && 'name' in manifest && typeof manifest.name === 'string'\n    ? manifest.name\n    : undefined\n  if (!packageName || normalizeModuleLocator(`npm:${packageName}`) !== `npm:${packageName}`) {\n    throw new Error(`Cannot retain source provenance for module \"${moduleId}\": the installed package manifest has no valid name.`)\n  }\n  const locator = locators.find((identity) => identity.startsWith('github:')) ?? locators.find((identity) => identity.startsWith('npm:'))\n  const provenance = { ...(packageName ? { packageName } : {}), ...(locator ? { locator } : {}) }\n  const modulesPath = resolver.getModulesConfigPath()\n  const originalConfig = fs.readFileSync(modulesPath, 'utf8')\n  const updatedConfig = prepareModuleRegistrationSource(originalConfig, moduleId, '@app', provenance)\n\n  copyDirRecursive(pkgBase, appBase)\n  rewriteCrossModuleImports(pkgBase, appBase, moduleId, entry.from || '@open-mercato/core')\n  fs.writeFileSync(modulesPath, updatedConfig)\n}\n"],
+  "mappings": "AAAA,OAAO,UAAU;AACjB,OAAO,QAAQ;AACf,SAAS,iCAAiC,mCAAmC;AAE7E,SAAS,4BAA4B,uCAAuC,mCAAmC;AAC/G,SAAS,8BAA8B;AACvC,SAAS,kCAAkC;AAQ3C,MAAM,YAAY,oBAAI,IAAI,CAAC,aAAa,aAAa,cAAc,CAAC;AACpE,MAAM,yBAAyB,CAAC,OAAO,QAAQ,OAAO,QAAQ,QAAQ,MAAM;AAE5E,SAAS,oBAAoB,MAAuB;AAClD,SAAO,UAAU,IAAI,IAAI,KAAK,SAAS,eAAe,KAAK,WAAW,IAAI;AAC5E;AAEA,SAAS,mBAAmB,KAAuB;AACjD,QAAM,QAAkB,CAAC;AACzB,QAAM,UAAU,GAAG,YAAY,KAAK,EAAE,eAAe,KAAK,CAAC;AAC3D,aAAW,SAAS,SAAS;AAC3B,QAAI,oBAAoB,MAAM,IAAI,EAAG;AACrC,UAAM,WAAW,KAAK,KAAK,KAAK,MAAM,IAAI;AAC1C,QAAI,MAAM,YAAY,GAAG;AACvB,YAAM,KAAK,GAAG,mBAAmB,QAAQ,CAAC;AAC1C;AAAA,IACF;AACA,UAAM,MAAM,KAAK,QAAQ,MAAM,IAAI;AACnC,QAAI,CAAC,uBAAuB,SAAS,GAAG,EAAG;AAC3C,UAAM,KAAK,QAAQ;AAAA,EACrB;AACA,SAAO;AACT;AAEA,SAAS,4BAA4B,YAAoB,YAAmC;AAC1F,MAAI,CAAC,WAAW,WAAW,GAAG,EAAG,QAAO;AAExC,QAAM,WAAW,KAAK,QAAQ,KAAK,QAAQ,UAAU,GAAG,UAAU;AAClE,QAAM,aAAa,CAAC,QAAQ;AAE5B,aAAW,OAAO,wBAAwB;AACxC,eAAW,KAAK,GAAG,QAAQ,GAAG,GAAG,EAAE;AACnC,eAAW,KAAK,KAAK,KAAK,UAAU,QAAQ,GAAG,EAAE,CAAC;AAAA,EACpD;AAEA,aAAW,aAAa,YAAY;AAClC,QAAI,GAAG,WAAW,SAAS,GAAG;AAC5B,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,yBACP,YACA,WACA,aACA,UACA,aACQ;AACR,QAAM,iBAAiB,4BAA4B,YAAY,SAAS;AACxE,MAAI,CAAC,eAAgB,QAAO;AAE5B,QAAM,oBAAoB,GAAG,WAAW,GAAG,KAAK,GAAG;AACnD,MAAI,CAAC,eAAe,WAAW,iBAAiB,EAAG,QAAO;AAE1D,QAAM,sBAAsB,KAAK,SAAS,aAAa,cAAc;AACrE,MAAI,qBAAqB,oBAAoB,MAAM,KAAK,GAAG,EAAE,KAAK,GAAG;AACrE,QAAM,aAAa,uBAAuB,KAAK,CAAC,QAAQ,mBAAmB,SAAS,GAAG,CAAC;AACxF,MAAI,YAAY;AACd,yBAAqB,mBAAmB,MAAM,GAAG,CAAC,WAAW,MAAM;AAAA,EACrE;AACA,MAAI,mBAAmB,SAAS,QAAQ,GAAG;AACzC,yBAAqB,mBAAmB,MAAM,GAAG,CAAC,SAAS,MAAM;AAAA,EACnE;AACA,QAAM,WAAW,mBAAmB,MAAM,GAAG;AAC7C,QAAM,iBAAiB,SAAS,CAAC;AAEjC,MAAI,CAAC,kBAAkB,mBAAmB,SAAU,QAAO;AAE3D,SAAO,GAAG,WAAW,YAAY,kBAAkB;AACrD;AAEO,SAAS,0BACd,SACA,SACA,UACA,aACM;AACN,QAAM,cAAc,KAAK,QAAQ,SAAS,IAAI;AAC9C,QAAM,WAAW,mBAAmB,OAAO;AAE3C,aAAW,WAAW,UAAU;AAC9B,UAAM,eAAe,KAAK,SAAS,SAAS,OAAO;AACnD,UAAM,aAAa,KAAK,KAAK,SAAS,YAAY;AAElD,QAAI,CAAC,GAAG,WAAW,UAAU,EAAG;AAEhC,UAAM,UAAU,GAAG,aAAa,SAAS,MAAM;AAC/C,QAAI,UAAU;AAEd,cAAU,QAAQ;AAAA,MAChB;AAAA,MACA,CAAC,QAAQ,QAAgB,WAAmB,WAAmB;AAC7D,cAAM,YAAY;AAAA,UAChB;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AACA,eAAO,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM;AAAA,MACvC;AAAA,IACF;AAEA,cAAU,QAAQ;AAAA,MAChB;AAAA,MACA,CAAC,QAAQ,QAAgB,WAAmB,WAAmB;AAC7D,cAAM,YAAY;AAAA,UAChB;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AACA,eAAO,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM;AAAA,MACvC;AAAA,IACF;AAEA,QAAI,YAAY,SAAS;AACvB,SAAG,cAAc,SAAS,OAAO;AAAA,IACnC;AAAA,EACF;AACF;AAEO,SAAS,oBAAoB,WAAmC;AACrE,MAAI,CAAC,GAAG,WAAW,SAAS,EAAG,QAAO,CAAC;AAEvC,QAAM,SAAS,GAAG,aAAa,WAAW,MAAM;AAChD,QAAM,SAAyB,CAAC;AAEhC,QAAM,iBAAiB,OAAO,MAAM,8BAA8B;AAClE,MAAI,gBAAgB;AAClB,WAAO,YAAY,eAAe,CAAC,MAAM;AAAA,EAC3C;AAEA,QAAM,aAAa,OAAO,MAAM,8BAA8B;AAC9D,MAAI,YAAY;AACd,WAAO,QAAQ,WAAW,CAAC;AAAA,EAC7B;AAEA,QAAM,YAAY,OAAO,MAAM,oCAAoC;AACnE,MAAI,WAAW;AACb,WAAO,cAAc,UAAU,CAAC;AAAA,EAClC;AAEA,SAAO;AACT;AAEO,SAAS,iBAAiB,KAAa,MAAoB;AAChE,KAAG,UAAU,MAAM,EAAE,WAAW,KAAK,CAAC;AAEtC,QAAM,UAAU,GAAG,YAAY,KAAK,EAAE,eAAe,KAAK,CAAC;AAC3D,aAAW,SAAS,SAAS;AAC3B,QAAI,oBAAoB,MAAM,IAAI,EAAG;AAErC,UAAM,UAAU,KAAK,KAAK,KAAK,MAAM,IAAI;AACzC,UAAM,WAAW,KAAK,KAAK,MAAM,MAAM,IAAI;AAE3C,QAAI,MAAM,YAAY,GAAG;AACvB,uBAAiB,SAAS,QAAQ;AAAA,IACpC,OAAO;AACL,SAAG,aAAa,SAAS,QAAQ;AAAA,IACnC;AAAA,EACF;AACF;AAEO,SAAS,gBAAgB,aAAqB,UAAkB,YAAiE;AACtI,8BAA4B,aAAa,UAAU,QAAQ,UAAU;AACvE;AAmBA,SAAS,wBAAwB,UAA2B,OAA4B;AACtF,QAAM,EAAE,QAAQ,IAAI,SAAS,eAAe,KAAK;AACjD,QAAM,OAAO,MAAM,QAAQ;AAC3B,MAAI,SAAS,OAAQ,QAAO;AAC5B,QAAM,aAAa,KAAK,KAAK,SAAS,eAAe,IAAI,GAAG,OAAO,WAAW,MAAM,EAAE;AACtF,MAAI,KAAK,QAAQ,UAAU,MAAM,KAAK,QAAQ,OAAO,KAAK,GAAG,WAAW,UAAU,GAAG;AACnF,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,mBAAmB,WAAmC;AAC7D,QAAM,UAAU,KAAK,KAAK,WAAW,UAAU;AAC/C,MAAI,GAAG,WAAW,OAAO,EAAG,QAAO,oBAAoB,OAAO;AAC9D,SAAO,oBAAoB,KAAK,KAAK,WAAW,UAAU,CAAC;AAC7D;AAEA,SAAS,oBACP,UACA,OACsB;AACtB,QAAM,UAAU,wBAAwB,UAAU,KAAK;AACvD,QAAM,mBAAmB,mBAAmB,OAAO;AACnD,QAAM,OAAO,MAAM,QAAQ;AAE3B,MAAI,SAAS,UAAU,SAAS,sBAAsB;AACpD,WAAO,EAAE,SAAS,UAAU,iBAAiB;AAAA,EAC/C;AAEA,MAAI;AACF,UAAM,gBAAgB,sCAAsC,UAAU,MAAM,MAAM,EAAE;AAEpF,WAAO;AAAA,MACL,SAAS,cAAc;AAAA,MACvB,UAAU;AAAA,QACR,WAAW,cAAc,SAAS;AAAA,QAClC,OAAO,cAAc,WAAW,SAAS,cAAc,SAAS;AAAA,QAChE,aAAa,cAAc,WAAW;AAAA,MACxC;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,QAAI,2BAA2B,KAAK,EAAG,OAAM;AAC7C,WAAO,EAAE,SAAS,UAAU,iBAAiB;AAAA,EAC/C;AACF;AAEO,SAAS,qBAAqB,UAA8C;AACjF,QAAM,UAAU,SAAS,mBAAmB;AAC5C,QAAM,YAA+B,CAAC;AAEtC,aAAW,SAAS,SAAS;AAC3B,QAAI,MAAM,SAAS,OAAQ;AAE3B,UAAM,EAAE,SAAS,IAAI,oBAAoB,UAAU,KAAK;AAExD,QAAI,SAAS,WAAW;AACtB,gBAAU,KAAK;AAAA,QACb,IAAI,MAAM;AAAA,QACV,OAAO,SAAS;AAAA,QAChB,aAAa,SAAS;AAAA,QACtB,MAAM,MAAM,QAAQ;AAAA,MACtB,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO;AACT;AAEO,SAAS,YAAY,UAA2B,UAAwB;AAC7E,QAAM,UAAU,SAAS,mBAAmB;AAC5C,QAAM,aAAa,2BAA2B,UAAU,OAAO;AAC/D,QAAM,UAAU,QAAQ,OAAO,CAAC,WAAwB,OAAO,OAAO,QAAQ;AAC9E,QAAM,QAAQ,QAAQ,CAAC;AAEvB,MAAI,CAAC,OAAO;AACV,UAAM,IAAI;AAAA,MACR,WAAW,QAAQ,yDACG,QAAQ,IAAI,CAAC,MAAmB,EAAE,EAAE,EAAE,KAAK,IAAI,CAAC;AAAA,IACxE;AAAA,EACF;AAEA,MAAI,MAAM,SAAS,QAAQ;AACzB,UAAM,IAAI;AAAA,MACR,WAAW,QAAQ;AAAA,IACrB;AAAA,EACF;AAEA,QAAM,EAAE,QAAQ,IAAI,SAAS,eAAe,KAAK;AACjD,QAAM,EAAE,SAAS,SAAS,IAAI,oBAAoB,UAAU,KAAK;AAEjE,MAAI,CAAC,GAAG,WAAW,OAAO,GAAG;AAC3B,UAAM,IAAI;AAAA,MACR,uCAAuC,OAAO;AAAA,IAEhD;AAAA,EACF;AAEA,MAAI,CAAC,SAAS,WAAW;AACvB,UAAM,IAAI;AAAA,MACR,WAAW,QAAQ;AAAA,IACrB;AAAA,EACF;AAEA,MAAI,GAAG,WAAW,OAAO,GAAG;AAC1B,UAAM,IAAI;AAAA,MACR,yCAAyC,OAAO;AAAA,IAElD;AAAA,EACF;AAEA,QAAM,WAAW,WAAW,KAAK,CAAC,aAAa,SAAS,OAAO,QAAQ,GAAG,YAAY,CAAC;AACvF,QAAM,cAAc,4BAA4B,UAAU,MAAM,QAAQ,oBAAoB;AAC5F,QAAM,WAAoB,KAAK,MAAM,GAAG,aAAa,KAAK,KAAK,aAAa,cAAc,GAAG,MAAM,CAAC;AACpG,QAAM,cAAc,YAAY,OAAO,aAAa,YAAY,UAAU,YAAY,OAAO,SAAS,SAAS,WAC3G,SAAS,OACT;AACJ,MAAI,CAAC,eAAe,uBAAuB,OAAO,WAAW,EAAE,MAAM,OAAO,WAAW,IAAI;AACzF,UAAM,IAAI,MAAM,+CAA+C,QAAQ,sDAAsD;AAAA,EAC/H;AACA,QAAM,UAAU,SAAS,KAAK,CAAC,aAAa,SAAS,WAAW,SAAS,CAAC,KAAK,SAAS,KAAK,CAAC,aAAa,SAAS,WAAW,MAAM,CAAC;AACtI,QAAM,aAAa,EAAE,GAAI,cAAc,EAAE,YAAY,IAAI,CAAC,GAAI,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC,EAAG;AAC9F,QAAM,cAAc,SAAS,qBAAqB;AAClD,QAAM,iBAAiB,GAAG,aAAa,aAAa,MAAM;AAC1D,QAAM,gBAAgB,gCAAgC,gBAAgB,UAAU,QAAQ,UAAU;AAElG,mBAAiB,SAAS,OAAO;AACjC,4BAA0B,SAAS,SAAS,UAAU,MAAM,QAAQ,oBAAoB;AACxF,KAAG,cAAc,aAAa,aAAa;AAC7C;",
   "names": []
 }

package/dist/lib/generators/entity-ids.js

@@ -1,3 +1,4 @@
+import { getEnabledModuleIdentities } from "../module-identity.js";
 import fs from "node:fs";
 import path from "node:path";
 import ts from "typescript-js";
@@ -242,6 +243,7 @@ async function generateEntityIds(options) {
   const outFile = path.join(outputDir, "entities.ids.generated.ts");
   const checksumFile = path.join(outputDir, "entities.ids.generated.checksum");
   const entries = resolver.loadEnabledModules();
+  getEnabledModuleIdentities(resolver, entries);
   const consolidated = {};
   const grouped = {};
   const modulesDict = {};