@openpen/module-api 1.1.0 → 1.2.0

package/dist/uikit/primitives.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Reka UI primitive re-exports.
+ *
+ * This module exposes the raw Reka UI headless components for plugin authors
+ * who need full control over markup and styling but still want Reka UI's
+ * a11y / focus / keyboard navigation behaviour.
+ *
+ * Usage (escape hatch from high-level wrappers):
+ *   import { PopoverRoot, PopoverTrigger, ... } from '@openpen/module-api/uikit'
+ *   // or directly:
+ *   import { ... } from '@openpen/module-api/uikit/primitives'  (if re-exported)
+ *
+ * WARNING: Walking this layer means you must manually handle:
+ *   - Modal manager mutual exclusion
+ *   - ControlBar animation auto-close (inject CONTROL_BAR_ANIMATING_KEY)
+ *   - Mouse passthrough guard (usePassthroughGuard)
+ *   - Teleport target (inject WRAPPER_EL_KEY)
+ *
+ * See docs/uikit/index.md for the full trade-off description.
+ *
+ * All v1.0 high-level wrappers are implemented — prefer them over
+ * the corresponding primitive:
+ *   Popover    → AppPopover
+ *   Dialog     → AppDialog
+ *   Slider     → AppSlider
+ *   Switch     → AppToggle
+ *   RadioGroup → AppSegmented
+ *   Select     → AppSelect
+ *   Tooltip    → AppTooltip
+ *   Tabs       → AppTabs
+ */
+export { PopoverRoot, PopoverTrigger, PopoverPortal, PopoverContent, PopoverArrow, PopoverClose, PopoverAnchor, } from 'reka-ui';
+export { DialogRoot, DialogTrigger, DialogPortal, DialogContent, DialogOverlay, DialogClose, DialogTitle, DialogDescription, } from 'reka-ui';
+export { SliderRoot, SliderTrack, SliderRange, SliderThumb, } from 'reka-ui';
+export { SwitchRoot, SwitchThumb, } from 'reka-ui';
+export { RadioGroupRoot, RadioGroupItem, RadioGroupIndicator, } from 'reka-ui';
+export { SelectRoot, SelectTrigger, SelectPortal, SelectContent, SelectViewport, SelectItem, SelectItemText, SelectItemIndicator, SelectLabel, SelectGroup, SelectSeparator, SelectScrollUpButton, SelectScrollDownButton, SelectArrow, SelectValue, SelectIcon, } from 'reka-ui';
+export { TooltipProvider, TooltipRoot, TooltipTrigger, TooltipPortal, TooltipContent, TooltipArrow, } from 'reka-ui';
+export { TabsRoot, TabsList, TabsTrigger, TabsContent, } from 'reka-ui';
+export { NumberFieldRoot, NumberFieldInput, NumberFieldIncrement, NumberFieldDecrement, } from 'reka-ui';
+export { TagsInputRoot, TagsInputInput, TagsInputItem, TagsInputItemText, TagsInputItemDelete, TagsInputClear, } from 'reka-ui';
+export { ComboboxRoot, ComboboxAnchor, ComboboxInput, ComboboxTrigger, ComboboxPortal, ComboboxContent, ComboboxViewport, ComboboxItem, ComboboxItemIndicator, ComboboxGroup, ComboboxLabel, ComboboxSeparator, ComboboxEmpty, ComboboxArrow, ComboboxCancel, } from 'reka-ui';

package/{src/use-module-context.ts → dist/use-module-context.d.ts}

@@ -1,6 +1,4 @@
-import { getModuleContext } from './host/module-context-registry'
-import type { ModuleSetupContext } from './types/module'
-
+import type { ModuleSetupContext } from './types/module';
 /**
  * Returns the `ModuleSetupContext` that was constructed for `moduleId` by
  * the host runtime. Call this inside a Vue component's `<script setup>` (or
@@ -36,15 +34,4 @@ import type { ModuleSetupContext } from './types/module'
  * }
  * ```
  */
-export function useModuleContext(moduleId: string): ModuleSetupContext {
-  const ctx = getModuleContext(moduleId)
-  if (!ctx) {
-    throw new Error(
-      `[module-api] useModuleContext("${moduleId}") was called but no module is currently registered under that id. ` +
-      `This usually means: (a) the moduleId string does not match the id passed to defineModule, or ` +
-      `(b) the composable was called before the module's setup() ran ` +
-      `(do not call useModuleContext at module top-level — call it inside a component's setup() or onMounted()).`
-    )
-  }
-  return ctx
-}
+export declare function useModuleContext(moduleId: string): ModuleSetupContext;

package/{src/validation.ts → dist/validation.d.ts}

@@ -13,9 +13,7 @@
  * `plugin.json`, filesystem paths under `~/.openpen/plugins/@scope/name/`,
  * and registry lookups.
  */
-export const MODULE_ID_RE =
-  /^@([a-z0-9][a-z0-9-]{0,38})\/([a-z0-9][a-z0-9-]{0,38})$/
-
+export declare const MODULE_ID_RE: RegExp;
 /**
  * Returns `true` when `id` is a non-empty string that satisfies
  * {@link MODULE_ID_RE}; acts as a type guard narrowing `unknown` → `string`.
@@ -26,6 +24,4 @@ export const MODULE_ID_RE =
  * isValidModuleId('freehand')          // false — must be scoped @scope/name
  * isValidModuleId('')                  // false — empty string rejected
  */
-export function isValidModuleId(id: unknown): id is string {
-  return typeof id === 'string' && id.length > 0 && MODULE_ID_RE.test(id)
-}
+export declare function isValidModuleId(id: unknown): id is string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openpen/module-api",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "description": "OpenPen Module API — public contract for built-in modules and third-party plugins",
   "author": "navishachiku <navishachiku@gmail.com>",
   "homepage": "https://github.com/openpen-platform/openpen#readme",
@@ -17,27 +17,41 @@
   },
   "license": "MIT",
   "type": "module",
-  "main": "./src/index.ts",
-  "types": "./src/index.ts",
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
   "exports": {
     ".": {
-      "types": "./src/index.ts",
-      "import": "./src/index.ts"
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
     },
     "./uikit": {
-      "types": "./src/uikit/index.ts",
-      "import": "./src/uikit/index.ts"
+      "types": "./dist/uikit/index.d.ts",
+      "import": "./dist/uikit/index.js"
     },
-    "./uikit/tokens.css": "./src/uikit/tokens.css",
+    "./uikit/tokens.css": "./dist/uikit/tokens.css",
     "./uikit/internal": {
-      "types": "./src/uikit/internal.ts",
-      "import": "./src/uikit/internal.ts"
+      "types": "./dist/uikit/internal.d.ts",
+      "import": "./dist/uikit/internal.js"
     },
     "./host": {
-      "types": "./src/host/index.ts",
-      "import": "./src/host/index.ts"
+      "types": "./dist/host/index.d.ts",
+      "import": "./dist/host/index.js"
+    },
+    "./host/registry": {
+      "types": "./dist/host/registry.d.ts",
+      "import": "./dist/host/registry.js"
     }
   },
+  "files": [
+    "dist",
+    "CHANGELOG.md",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "vite build && vue-tsc -p tsconfig.build.json && node scripts/copy-static.mjs",
+    "prepublishOnly": "npm run build"
+  },
   "engines": {
     "node": ">=20",
     "npm": ">=9"

package/packages/module-api/CHANGELOG.md

@@ -1,27 +0,0 @@
-# Changelog
-
-## [1.1.0](https://github.com/openpen-platform/openpen/compare/v1.0.0...v1.1.0) (2026-05-19)
-
-
-### Features
-
-* **cursors:** DOM overlay cursor system + plugin SDK doc gaps ([2f77192](https://github.com/openpen-platform/openpen/commit/2f771927fb94586b0ceef58e07fcb5220ed40c02))
-
-
-### Bug Fixes
-
-* **control-bar:** pause auto-collapse timer while any dialog is open ([#1](https://github.com/openpen-platform/openpen/issues/1)) ([add84ff](https://github.com/openpen-platform/openpen/commit/add84ff89f1ad5135c7371fd7d4bfd64b1ef2395))
-
-## 1.0.0 (2026-05-14)
-
-
-### Features
-
-* initial open source release ([f58abd7](https://github.com/openpen-platform/openpen/commit/f58abd7c4f3e12be9c88cdad23c61c82f9db7a7f))
-
-
-### Bug Fixes
-
-* **settings:** persist single Color Mode change to disk ([db9e6dd](https://github.com/openpen-platform/openpen/commit/db9e6dda0b9e584f349fb31da4349bdfaec0a84a))
-
-## Changelog

package/src/cursors.ts

@@ -1,369 +0,0 @@
-/**
- * Cursor compilation + sanitisation helpers shared by host runtime and
- * plugin SDK.
- *
- * Three closure layers gate every cursor entry before it reaches
- * `v-html`: R1–R12 shape validation here, DOMPurify content sanitisation
- * inside compileCursor, and a deep-clone + freeze in the contribution
- * store. Removing any one of them re-opens an attack surface the others
- * cannot close.
- */
-
-import DOMPurify from 'dompurify'
-import type {
-  CursorContribution,
-  CursorSpec,
-  Hotspot,
-  PngCursorSpec,
-  SvgCursorSpec,
-} from './types/contributions'
-
-export interface CompiledCursor {
-  /** Sanitised SVG / HTML fragment to mount as `innerHTML` on the cursor element. */
-  svgMarkup: string
-  /** Hotspot offset, in CSS pixels relative to the markup's top-left. */
-  hotspot: Hotspot
-  /** CSS keyword fallback retained for legacy callers. */
-  fallbackCssKeyword: string
-}
-
-export interface CursorResolutionContext {
-  /**
-   * Hostname-encoded plugin id (`@acme/x` → `acme.x`) used to assemble
-   * `openpen-plugin://<hostname>/<path>` URLs for relative-path specs.
-   * Undefined for built-in modules — path-form specs without a hostname
-   * resolve to `null` (host falls back to its default cursor).
-   */
-  pluginHostname?: string
-  /** Injection point for tests; defaults to global `fetch`. */
-  fetchImpl?: typeof fetch
-}
-
-/**
- * W3C CSS UI Level 3 cursor keywords. The legacy `cursor: string` form
- * MUST match one of these (case-insensitive after trim); everything else
- * is rejected by R2 / R12.
- */
-export const SAFE_CURSOR_KEYWORDS: ReadonlySet<string> = new Set([
-  'auto', 'default', 'none',
-  'context-menu', 'help', 'pointer', 'progress', 'wait',
-  'cell', 'crosshair', 'text', 'vertical-text',
-  'alias', 'copy', 'move', 'no-drop', 'not-allowed', 'grab', 'grabbing',
-  'e-resize', 'n-resize', 'ne-resize', 'nw-resize',
-  's-resize', 'se-resize', 'sw-resize', 'w-resize',
-  'ew-resize', 'ns-resize', 'nesw-resize', 'nwse-resize',
-  'col-resize', 'row-resize', 'all-scroll',
-  'zoom-in', 'zoom-out',
-])
-
-const FORBIDDEN_CSS_LOAD_PATTERN = /url\s*\(|image-set\s*\(|-webkit-image-set\s*\(/i
-
-const DEFAULT_FALLBACK_KEYWORD = 'crosshair'
-
-export function isSafeRelativePath(p: unknown): p is string {
-  if (typeof p !== 'string' || p.length === 0) return false
-  // Bare `:` catches scheme prefixes without `://` (e.g. `data:`).
-  if (p.includes(':')) return false
-  if (p.startsWith('/')) return false
-  for (const seg of p.split('/')) {
-    if (seg === '' || seg === '..') return false
-  }
-  return true
-}
-
-export function pluginHostname(moduleId: string): string {
-  return moduleId.replace(/^@/, '').replace(/\//g, '.')
-}
-
-export function pluginAssetUrl(moduleId: string, relativePath: string): string {
-  if (!isSafeRelativePath(relativePath)) {
-    throw new Error(`Unsafe asset path: ${relativePath}`)
-  }
-  return `openpen-plugin://${pluginHostname(moduleId)}/${relativePath}`
-}
-
-/**
- * Sanitise SVG markup before it reaches `v-html`. Rationale for each
- * flag: `USE_PROFILES: { svg: true }` covers script tags, on* handlers,
- * and javascript: hrefs; `FORBID_TAGS: ['foreignObject']` closes the
- * mXSS escape hatch the SVG profile alone does not; turning off
- * `ALLOW_UNKNOWN_PROTOCOLS` blocks `<use href="data:...">` and friends.
- */
-export function sanitizeSvgMarkup(raw: string): string {
-  return DOMPurify.sanitize(raw, {
-    USE_PROFILES: { svg: true },
-    FORBID_TAGS: ['foreignObject'],
-    // Cursor SVGs use presentation attributes (fill/stroke/etc.), never
-    // inline `style`. Forbidding it strips legacy `expression()` CSS
-    // smuggling vectors (S7) without touching anything we draw.
-    FORBID_ATTR: ['style'],
-    ALLOW_UNKNOWN_PROTOCOLS: false,
-  })
-}
-
-function resolveHotspot(spec: SvgCursorSpec | PngCursorSpec): Hotspot {
-  const h = spec.hotspot
-  if (!h || typeof h !== 'object') return { x: 0, y: 0 }
-  const x = typeof h.x === 'number' && Number.isFinite(h.x) ? h.x : 0
-  const y = typeof h.y === 'number' && Number.isFinite(h.y) ? h.y : 0
-  return { x, y }
-}
-
-function resolveFallback(spec: SvgCursorSpec | PngCursorSpec): string {
-  return typeof spec.fallback === 'string' && spec.fallback.length > 0
-    ? spec.fallback
-    : DEFAULT_FALLBACK_KEYWORD
-}
-
-function escapeHtmlAttr(s: string): string {
-  return s
-    .replace(/&/g, '&amp;')
-    .replace(/"/g, '&quot;')
-    .replace(/</g, '&lt;')
-    .replace(/>/g, '&gt;')
-}
-
-/**
- * Convert a frozen, shape-validated CursorContribution.cursor into render
- * data ready for `v-html`. Returns `null` for legacy keyword strings
- * (caller falls back to the host default cursor) and for any spec the
- * sanitiser empties out completely.
- *
- * Async because path-form SVG specs are fetched through `openpen-plugin://`
- * at compile time; inline + PNG branches resolve synchronously inside the
- * returned Promise.
- */
-export async function compileCursor(
-  spec: CursorSpec,
-  context: CursorResolutionContext = {},
-): Promise<CompiledCursor | null> {
-  if (typeof spec === 'string') return null
-  if (!spec || typeof spec !== 'object') return null
-
-  if ('svg' in spec && typeof spec.svg === 'string') {
-    const hotspot = resolveHotspot(spec)
-    const fallbackCssKeyword = resolveFallback(spec)
-    const trimmed = spec.svg.trim()
-
-    if (trimmed.startsWith('<')) {
-      const sanitised = sanitizeSvgMarkup(trimmed)
-      if (!sanitised) return null
-      return { svgMarkup: sanitised, hotspot, fallbackCssKeyword }
-    }
-
-    if (!context.pluginHostname || !isSafeRelativePath(trimmed)) return null
-    const url = `openpen-plugin://${context.pluginHostname}/${trimmed}`
-    const fetchImpl = context.fetchImpl
-      ?? (typeof fetch !== 'undefined' ? fetch.bind(globalThis) : undefined)
-    if (!fetchImpl) return null
-
-    try {
-      const resp = await fetchImpl(url)
-      if (!resp.ok) return null
-      const raw = await resp.text()
-      const sanitised = sanitizeSvgMarkup(raw)
-      if (!sanitised) return null
-      return { svgMarkup: sanitised, hotspot, fallbackCssKeyword }
-    } catch {
-      return null
-    }
-  }
-
-  if ('png' in spec && typeof spec.png === 'string') {
-    const hotspot = resolveHotspot(spec)
-    const fallbackCssKeyword = resolveFallback(spec)
-    const trimmed = spec.png.trim()
-    if (!context.pluginHostname || !isSafeRelativePath(trimmed)) return null
-    const url = escapeHtmlAttr(`openpen-plugin://${context.pluginHostname}/${trimmed}`)
-    const svgMarkup =
-      `<img src="${url}" alt="" style="display:block;max-width:64px;max-height:64px;" />`
-    return { svgMarkup, hotspot, fallbackCssKeyword }
-  }
-
-  return null
-}
-
-export type CursorSanitizeRule =
-  | 'R1' | 'R2' | 'R3' | 'R4' | 'R5' | 'R6'
-  | 'R7' | 'R8' | 'R9' | 'R10' | 'R11' | 'R12'
-
-export interface CursorSanitizeDiagnostic {
-  /** Contribution id, or `'<unknown>'` if `id` was missing / invalid. */
-  id: string
-  rule: CursorSanitizeRule
-  reason: string
-}
-
-export interface CursorSanitizeOptions {
-  /**
-   * Built-in modules (host bundle) cannot use path forms because they
-   * have no `openpen-plugin://<hostname>` namespace. R7 / R10 reject
-   * such contributions for built-ins.
-   */
-  isBuiltin?: boolean
-}
-
-export interface CursorSanitizeResult {
-  cleaned: CursorContribution[]
-  diagnostics: CursorSanitizeDiagnostic[]
-}
-
-/**
- * Shape-validate raw cursor contributions before they reach the
- * contribution-store. This is the R1–R12 gate; SVG markup content is
- * sanitised later inside {@link compileCursor} via DOMPurify.
- */
-export function sanitizeCursorContributions(
-  cursors: unknown,
-  options: CursorSanitizeOptions = {},
-): CursorSanitizeResult {
-  const cleaned: CursorContribution[] = []
-  const diagnostics: CursorSanitizeDiagnostic[] = []
-
-  if (!Array.isArray(cursors)) return { cleaned, diagnostics }
-
-  for (const raw of cursors) {
-    if (raw === null || typeof raw !== 'object') {
-      diagnostics.push({ id: '<unknown>', rule: 'R1', reason: 'contribution is not an object' })
-      continue
-    }
-
-    const entry = raw as { id?: unknown; cursor?: unknown }
-    const id = typeof entry.id === 'string' && entry.id.length > 0 ? entry.id : '<unknown>'
-
-    if (id === '<unknown>') {
-      diagnostics.push({ id, rule: 'R1', reason: 'missing or empty `id`' })
-      continue
-    }
-
-    const { cursor } = entry
-
-    if (typeof cursor === 'string') {
-      const trimmedLower = cursor.trim().toLowerCase()
-      if (FORBIDDEN_CSS_LOAD_PATTERN.test(trimmedLower)) {
-        diagnostics.push({
-          id,
-          rule: 'R12',
-          reason: 'string contains url() / image-set() / -webkit-image-set(); loads external resource',
-        })
-        continue
-      }
-      if (!SAFE_CURSOR_KEYWORDS.has(trimmedLower)) {
-        diagnostics.push({
-          id,
-          rule: 'R2',
-          reason: `string '${trimmedLower}' is not in the safe CSS cursor keyword whitelist`,
-        })
-        continue
-      }
-      cleaned.push({ id, cursor: trimmedLower })
-      continue
-    }
-
-    if (cursor === null || typeof cursor !== 'object' || Array.isArray(cursor)) {
-      diagnostics.push({ id, rule: 'R1', reason: 'cursor field is neither string nor plain object' })
-      continue
-    }
-
-    const cursorObj = cursor as Record<string, unknown>
-    const hasSvg = Object.prototype.hasOwnProperty.call(cursorObj, 'svg')
-    const hasPng = Object.prototype.hasOwnProperty.call(cursorObj, 'png')
-
-    if (!hasSvg && !hasPng) {
-      diagnostics.push({ id, rule: 'R3', reason: 'cursor object has neither `svg` nor `png` key' })
-      continue
-    }
-    if (hasSvg && hasPng) {
-      diagnostics.push({ id, rule: 'R4', reason: 'cursor object has both `svg` and `png` keys (ambiguous)' })
-      continue
-    }
-
-    if (hasSvg) {
-      const svg = cursorObj.svg
-      if (typeof svg !== 'string') {
-        diagnostics.push({ id, rule: 'R5', reason: '`svg` value is not a string' })
-        continue
-      }
-      const trimmed = svg.trim()
-      const isInline = trimmed.startsWith('<')
-      if (!isInline) {
-        if (!isSafeRelativePath(trimmed)) {
-          diagnostics.push({
-            id,
-            rule: 'R6',
-            reason: '`svg` value is non-inline and not a safe relative path',
-          })
-          continue
-        }
-        if (options.isBuiltin) {
-          diagnostics.push({
-            id,
-            rule: 'R7',
-            reason: 'built-in modules cannot use path-form `svg` (no openpen-plugin hostname)',
-          })
-          continue
-        }
-      }
-    }
-
-    if (hasPng) {
-      const png = cursorObj.png
-      if (typeof png !== 'string') {
-        diagnostics.push({ id, rule: 'R8', reason: '`png` value is not a string' })
-        continue
-      }
-      if (!isSafeRelativePath(png.trim())) {
-        diagnostics.push({
-          id,
-          rule: 'R9',
-          reason: '`png` value is not a safe relative path',
-        })
-        continue
-      }
-      if (options.isBuiltin) {
-        diagnostics.push({
-          id,
-          rule: 'R10',
-          reason: 'built-in modules cannot use `png` (no openpen-plugin hostname)',
-        })
-        continue
-      }
-    }
-
-    if (cursorObj.hotspot !== undefined) {
-      const h = cursorObj.hotspot as Record<string, unknown> | null
-      const valid =
-        h !== null &&
-        typeof h === 'object' &&
-        typeof h.x === 'number' && Number.isFinite(h.x) && h.x >= 0 &&
-        typeof h.y === 'number' && Number.isFinite(h.y) && h.y >= 0
-      if (!valid) {
-        diagnostics.push({
-          id,
-          rule: 'R11',
-          reason: '`hotspot` must be `{ x: number ≥ 0, y: number ≥ 0 }`',
-        })
-        continue
-      }
-    }
-
-    // Output a strictly-allowlisted clone — only known primitive fields
-    // pass through. Anything else (function / symbol / getter / circular
-    // reference attached as an extra key) is dropped here so the
-    // downstream `structuredClone` in the contribution-store cannot
-    // throw and trigger a module-wide rollback.
-    const cleanedCursor: SvgCursorSpec | PngCursorSpec = hasSvg
-      ? { svg: (cursorObj.svg as string).trim() }
-      : { png: (cursorObj.png as string).trim() }
-    if (cursorObj.hotspot !== undefined) {
-      const h = cursorObj.hotspot as { x: number; y: number }
-      cleanedCursor.hotspot = { x: h.x, y: h.y }
-    }
-    if (typeof cursorObj.fallback === 'string') {
-      cleanedCursor.fallback = cursorObj.fallback
-    }
-    cleaned.push({ id, cursor: cleanedCursor })
-  }
-
-  return { cleaned, diagnostics }
-}

package/src/define-module.ts

@@ -1,55 +0,0 @@
-import { isValidModuleId } from './validation'
-import { CONTRIBUTION_KEY_TO_SLOT_ID } from './slots'
-import type { OpenPenModule } from './types/module'
-
-/**
- * Identity helper for declaring an OpenPen module with full type
- * inference and runtime sanity checks. Throws `Error` (preflight) when:
- *
- *   - `id` is missing or has invalid characters
- *   - `contributes` is missing entirely
- *   - `contributes` has no contribution fields
- *   - `contributes` references a slot key not in the catalogue
- *
- * This is intentionally a small surface — full validation
- * (id collisions across modules, slot quota, settingsSchema parse, etc.)
- * happens later in the host app's `module-validator`. This helper
- * catches the obvious developer mistakes at the module's own boundary
- * so errors surface in the module's repo, not deep inside OpenPen.
- */
-export function defineModule<TModule extends OpenPenModule>(
-  spec: TModule
-): TModule {
-  if (!isValidModuleId(spec.id)) {
-    throw new Error(
-      `[@openpen/module-api] Invalid module id: ${JSON.stringify(spec.id)}. ` +
-        `Module ids must use \`@scope/name\` format with lowercase ASCII alphanumeric + hyphen, ` +
-        `max 39 chars per segment (e.g. \`@alice/my-plugin\`).`
-    )
-  }
-
-  if (!spec.contributes || typeof spec.contributes !== 'object') {
-    throw new Error(
-      `[@openpen/module-api] Module "${spec.id}" must declare a non-empty 'contributes' object.`
-    )
-  }
-
-  const keys = Object.keys(spec.contributes)
-  if (keys.length === 0) {
-    throw new Error(
-      `[@openpen/module-api] Module "${spec.id}" must contribute to at least one slot. ` +
-        `Add at least one field to 'contributes' (e.g. 'tools', 'settingsTabs', 'shortcuts').`
-    )
-  }
-
-  for (const key of keys) {
-    if (!(key in CONTRIBUTION_KEY_TO_SLOT_ID)) {
-      throw new Error(
-        `[@openpen/module-api] Module "${spec.id}" contributes to unknown slot key '${key}'. ` +
-          `Known keys: ${Object.keys(CONTRIBUTION_KEY_TO_SLOT_ID).sort().join(', ')}.`
-      )
-    }
-  }
-
-  return spec
-}

package/src/host/color-utils.ts

@@ -1,18 +0,0 @@
-/**
- * @openpen/module-api/host — Color Utilities
- *
- * Re-exports color helpers that module components need for rendering.
- * The canvas-rendering helper resolveColorStyle and the color manipulation
- * utilities are exposed here so modules don't need cross-layer imports.
- */
-
-export {
-  resolveColorStyle,
-  hexToRgb,
-  rgbToHex,
-  hsvToRgb,
-  rgbToHsv,
-  hexToHsv,
-  hsvToHex,
-  isValidHex,
-} from '../../../../src/services/color-utils'

package/src/host/host-commands.ts

@@ -1,9 +0,0 @@
-/**
- * @openpen/module-api/host — Host Commands
- *
- * Re-exports hostCommands for module components that need to trigger
- * host infrastructure actions (pin toggle, canvas clear, undo/redo,
- * drawing mode toggle).
- */
-
-export { hostCommands } from '../../../../src/services/host-commands'