@platforma-sdk/block-tools 2.10.17 → 2.10.19

package/dist/cli.mjs

@@ -1,23 +1,23 @@
-import { H as e, K as t, O as n, U as r, _ as i, _t as a, b as o, et as s, n as c, p as ee, rt as l } from "./config-DpfTzcgG.mjs";
-import { Args as te, Command as u, Flags as d } from "@oclif/core";
-import f from "node:path";
-import p from "node:fs";
-import { BlockPackManifest as ne, StableChannel as re, overrideDescriptionVersion as ie, overrideManifestVersion as ae } from "@milaboratories/pl-model-middle-layer";
-import { OclifLoggerAdapter as m } from "@milaboratories/ts-helpers-oclif";
-import oe, { parse as se, parseDocument as ce, stringify as le } from "yaml";
-import { setTimeout as ue } from "node:timers/promises";
-import { confirm as de, input as fe, select as pe } from "@inquirer/prompts";
+import { H as e, K as t, O as n, U as r, _ as i, _t as a, b as o, et as s, n as c, p as l, rt as ee } from "./config-DpfTzcgG.mjs";
+import { Args as u, Command as d, Flags as f } from "@oclif/core";
+import p from "node:path";
+import m from "node:fs";
+import { BlockPackManifest as te, StableChannel as ne, overrideDescriptionVersion as re, overrideManifestVersion as ie } from "@milaboratories/pl-model-middle-layer";
+import { OclifLoggerAdapter as h } from "@milaboratories/ts-helpers-oclif";
+import ae, { parse as oe, parseDocument as se, stringify as ce } from "yaml";
+import { setTimeout as le } from "node:timers/promises";
+import { confirm as ue, input as de, select as fe } from "@inquirer/prompts";
 //#region src/cmd/build-meta.ts
-var me = class e extends u {
+var pe = class e extends d {
 	static description = "Extracts meta information from blocks package.json and outputs meta.json with embedded binary and textual information linked from the meta section.";
 	static flags = {
-		modulePath: d.string({
+		modulePath: f.string({
 			char: "i",
 			summary: "input module path",
 			helpValue: "<path>",
 			default: "."
 		}),
-		destination: d.string({
+		destination: f.string({
 			char: "o",
 			summary: "output meta.json file",
 			helpValue: "<path>",
@@ -25,36 +25,36 @@ var me = class e extends u {
 		})
 	};
 	async run() {
-		let { flags: t } = await this.parse(e), n = f.resolve(t.modulePath), i = await s(await l((await r(n)).meta, n));
-		await p.promises.writeFile(f.resolve(t.destination), JSON.stringify(i));
+		let { flags: t } = await this.parse(e), n = p.resolve(t.modulePath), i = await s(await ee((await r(n)).meta, n));
+		await m.promises.writeFile(p.resolve(t.destination), JSON.stringify(i));
 	}
 };
 //#endregion
 //#region src/cmd/build-model.ts
-async function he(e) {
+async function me(e) {
 	try {
-		return await p.promises.readFile(e, "utf8");
+		return await m.promises.readFile(e, "utf8");
 	} catch (e) {
 		if (e instanceof Error && "code" in e && e.code === "ENOENT") return;
 		throw e;
 	}
 }
-var ge = class e extends u {
+var he = class e extends d {
 	static description = "Extracts and outputs block model JSON from pre-built block model module";
 	static flags = {
-		modulePath: d.string({
+		modulePath: f.string({
 			char: "i",
 			summary: "input module path",
 			helpValue: "<path>",
 			default: "."
 		}),
-		sourceBundle: d.string({
+		sourceBundle: f.string({
 			char: "b",
 			summary: "bundled model code to embed into the model for callback-based rendering to work",
 			helpValue: "<path>",
 			default: "./dist/bundle.js"
 		}),
-		destination: d.string({
+		destination: f.string({
 			char: "o",
 			summary: "output model file",
 			helpValue: "<path>",
@@ -62,34 +62,34 @@ var ge = class e extends u {
 		})
 	};
 	async run() {
-		let { flags: t } = await this.parse(e), { model: n, platforma: r } = a(f.resolve(t.modulePath));
+		let { flags: t } = await this.parse(e), { model: n, platforma: r } = a(p.resolve(t.modulePath));
 		if (n ||= r, !n) throw Error("\"model\" export not found");
 		let { config: i } = n;
 		if (!i) throw Error("Malformed \"model\" object, check it is created with \"BlockModel\" and \".done()\" is executed as the call in the chain.");
 		if (!("outputs" in i) || !("sections" in i)) throw Error("\"config\" has unexpected structure");
-		let o = await he(t.sourceBundle);
+		let o = await me(t.sourceBundle);
 		o !== void 0 && (i.code = {
 			type: "plain",
 			content: o
-		}), await p.promises.writeFile(f.resolve(t.destination), JSON.stringify(i));
+		}), await m.promises.writeFile(p.resolve(t.destination), JSON.stringify(i));
 	}
-}, _e = class e extends u {
+}, ge = class e extends d {
 	static description = "List all available global overview snapshots in the registry";
 	static flags = {
-		registry: d.string({
+		registry: f.string({
 			char: "r",
 			summary: "full address of the registry",
 			helpValue: "<address>",
 			env: "PL_REGISTRY",
 			required: !0
 		}),
-		json: d.boolean({
+		json: f.boolean({
 			summary: "output in JSON format",
 			default: !1
 		})
 	};
 	async run() {
-		let { flags: t } = await this.parse(e), n = await new o(i(t.registry), new m(this)).listGlobalOverviewSnapshots();
+		let { flags: t } = await this.parse(e), n = await new o(i(t.registry), new h(this)).listGlobalOverviewSnapshots();
 		if (t.json) this.log(JSON.stringify(n, null, 2));
 		else if (n.length === 0) this.log("No snapshots found.");
 		else {
@@ -97,60 +97,60 @@ var ge = class e extends u {
 			for (let e of n) this.log(`  ${e.timestamp}`), this.log(`    Path: ${e.path}`), this.log("");
 		}
 	}
-}, ve = class e extends u {
+}, _e = class e extends d {
 	static description = "Mark target block stable";
 	static flags = {
-		modulePath: d.string({
+		modulePath: f.string({
 			char: "i",
 			summary: "input module path",
 			helpValue: "<path>",
 			default: "."
 		}),
-		channel: d.string({
+		channel: f.string({
 			char: "c",
 			hidden: !0,
 			summary: "custom channel",
 			helpValue: "<channel name>",
-			default: re
+			default: ne
 		}),
-		"version-override": d.file({
+		"version-override": f.file({
 			char: "v",
 			summary: "override package version"
 		}),
-		registry: d.string({
+		registry: f.string({
 			char: "r",
 			summary: "full address of the registry",
 			helpValue: "<address>",
 			env: "PL_REGISTRY",
 			required: !0
 		}),
-		refresh: d.boolean({
+		refresh: f.boolean({
 			summary: "refresh repository after adding the package",
 			default: !0,
 			allowNo: !0,
 			env: "PL_REGISTRY_REFRESH"
 		}),
-		unmark: d.boolean({
+		unmark: f.boolean({
 			summary: "reverses meaning of this command, flag can be used to remove \"stable\" flag from the package",
 			default: !1
 		})
 	};
 	async run() {
-		let { flags: t } = await this.parse(e), n = await r(f.resolve(t.modulePath));
-		t["version-override"] && (n = ie(n, t["version-override"]));
-		let a = new o(i(t.registry), new m(this));
+		let { flags: t } = await this.parse(e), n = await r(p.resolve(t.modulePath));
+		t["version-override"] && (n = re(n, t["version-override"]));
+		let a = new o(i(t.registry), new h(this));
 		t.unmark ? await a.removePackageFromChannel(n.id, t.channel) : await a.addPackageToChannel(n.id, t.channel), t.refresh && await a.updateIfNeeded();
 	}
-}, ye = class n extends u {
+}, ve = class n extends d {
 	static description = "Builds block pack and outputs a block pack manifest consolidating all references assets into a single folder";
 	static flags = {
-		modulePath: d.string({
+		modulePath: f.string({
 			char: "i",
 			summary: "input module path",
 			helpValue: "<path>",
 			default: "."
 		}),
-		destinationPath: d.string({
+		destinationPath: f.string({
 			char: "o",
 			summary: "output folder",
 			helpValue: "<path>",
@@ -159,67 +159,67 @@ var ge = class e extends u {
 	};
 	async run() {
 		let { flags: r } = await this.parse(n);
-		await t(await e(f.resolve(r.modulePath)), f.resolve(r.destinationPath));
+		await t(await e(p.resolve(r.modulePath)), p.resolve(r.destinationPath));
 	}
 };
 //#endregion
 //#region src/cmd/publish.ts
-function be(e, t) {
+function ye(e, t) {
 	let n = { ...e };
-	for (let e in t) t[e] && typeof t[e] == "object" && !Array.isArray(t[e]) && n[e] && typeof n[e] == "object" && !Array.isArray(n[e]) ? n[e] = be(n[e], t[e]) : n[e] = t[e];
+	for (let e in t) t[e] && typeof t[e] == "object" && !Array.isArray(t[e]) && n[e] && typeof n[e] == "object" && !Array.isArray(n[e]) ? n[e] = ye(n[e], t[e]) : n[e] = t[e];
 	return n;
 }
-var xe = class e extends u {
+var be = class e extends d {
 	static description = "Publishes the block package and refreshes the registry (for v2 block-pack schema)";
 	static flags = {
-		registry: d.string({
+		registry: f.string({
 			char: "r",
 			summary: "full address of the registry",
 			helpValue: "<address>",
 			env: "PL_REGISTRY",
 			required: !0
 		}),
-		manifest: d.file({
+		manifest: f.file({
 			char: "m",
 			summary: "manifest file path",
 			exists: !0,
 			default: `./block-pack/${n}`
 		}),
-		"version-override": d.file({
+		"version-override": f.file({
 			char: "v",
 			summary: "override package version"
 		}),
-		refresh: d.boolean({
+		refresh: f.boolean({
 			summary: "refresh repository after adding the package",
 			default: !0,
 			allowNo: !0,
 			env: "PL_REGISTRY_REFRESH"
 		}),
-		unstable: d.boolean({
+		unstable: f.boolean({
 			summary: "do not add the published package to stable channel",
 			default: !1,
 			env: "PL_PUBLISH_UNSTABLE"
 		})
 	};
 	async run() {
-		let { flags: t } = await this.parse(e), n = f.resolve(t.manifest), r = JSON.parse(await p.promises.readFile(n, { encoding: "utf-8" })), a = ne.parse(r);
-		a = be(r, a);
-		let s = f.dirname(n);
-		this.log(`Manifest root = ${s}`), t["version-override"] && (a = ae(a, t["version-override"]));
-		let c = new o(i(t.registry), new m(this));
-		await c.publishPackage(a, async (e) => Buffer.from(await p.promises.readFile(f.resolve(s, e)))), t.unstable || (this.log(`Adding package to ${re} channel...`), await c.addPackageToChannel(a.description.id, re)), t.refresh && await c.updateIfNeeded();
-	}
-}, Se = class e extends u {
+		let { flags: t } = await this.parse(e), n = p.resolve(t.manifest), r = JSON.parse(await m.promises.readFile(n, { encoding: "utf-8" })), a = te.parse(r);
+		a = ye(r, a);
+		let s = p.dirname(n);
+		this.log(`Manifest root = ${s}`), t["version-override"] && (a = ie(a, t["version-override"]));
+		let c = new o(i(t.registry), new h(this));
+		await c.publishPackage(a, async (e) => Buffer.from(await m.promises.readFile(p.resolve(s, e)))), t.unstable || (this.log(`Adding package to ${ne} channel...`), await c.addPackageToChannel(a.description.id, ne)), t.refresh && await c.updateIfNeeded();
+	}
+}, xe = class e extends d {
 	static description = "Refresh overview files based on published but not proecessed artefacts";
 	static flags = {
-		registry: d.string({
+		registry: f.string({
 			char: "r",
 			summary: "full address of the registry",
 			helpValue: "<address>",
 			env: "PL_REGISTRY",
 			required: !0
 		}),
-		mode: d.string({
+		mode: f.string({
 			char: "m",
 			summary: "refresh mode (allowed valiues: \"force\", \"normal\", \"dry-run\")",
 			helpValue: "<mode>",
@@ -234,31 +234,31 @@ var xe = class e extends u {
 	};
 	async run() {
 		let { flags: t } = await this.parse(e);
-		await new o(i(t.registry), new m(this)).updateIfNeeded(t.mode);
+		await new o(i(t.registry), new h(this)).updateIfNeeded(t.mode);
 	}
-}, Ce = class e extends u {
+}, Se = class e extends d {
 	static description = "Restore global overview from a snapshot";
 	static flags = {
-		registry: d.string({
+		registry: f.string({
 			char: "r",
 			summary: "full address of the registry",
 			helpValue: "<address>",
 			env: "PL_REGISTRY",
 			required: !0
 		}),
-		snapshot: d.string({
+		snapshot: f.string({
 			char: "s",
 			summary: "snapshot timestamp ID to restore from",
 			helpValue: "<timestamp>",
 			required: !0
 		}),
-		"skip-confirmation": d.boolean({
+		"skip-confirmation": f.boolean({
 			summary: "skip confirmation prompt (use with caution)",
 			default: !1
 		})
 	};
 	async run() {
-		let { flags: t } = await this.parse(e), n = new o(i(t.registry), new m(this)), r = await n.listGlobalOverviewSnapshots();
+		let { flags: t } = await this.parse(e), n = new o(i(t.registry), new h(this)), r = await n.listGlobalOverviewSnapshots();
 		if (r.find((e) => e.timestamp === t.snapshot) || this.error(`Snapshot '${t.snapshot}' not found. Available snapshots:\n${r.map((e) => `  - ${e.timestamp}`).join("\n") || "  (none)"}`), !t["skip-confirmation"]) {
 			let e = (await import("node:readline")).createInterface({
 				input: process.stdin,
@@ -277,7 +277,7 @@ var xe = class e extends u {
 			this.error(`Failed to restore from snapshot: ${String(e)}`);
 		}
 	}
-}, we = class extends u {
+}, Ce = class extends d {
 	static description = "[DEPRECATED] Use `block-tools structure refresh --update-deps-only`. This alias delegates to it.";
 	static examples = ["<%= config.bin %> <%= command.id %>"];
 	async run() {
@@ -286,7 +286,7 @@ var xe = class e extends u {
 };
 //#endregion
 //#region src/registry_v1/flags.ts
-function Te(e) {
+function we(e) {
 	let t = e.match(/(?<destName>[^/\\]+)=(?<src>.*)/);
 	if (t) {
 		let { src: e, destName: n } = t.groups;
@@ -296,54 +296,54 @@ function Te(e) {
 		};
 	} else return {
 		src: e,
-		destName: f.basename(e)
+		destName: p.basename(e)
 	};
 }
-var Ee = d.custom({
+var Te = f.custom({
 	summary: "target files to upload",
 	helpValue: "file_path | package_name=file_path",
-	parse: async (e) => Te(e)
-}), De = [
+	parse: async (e) => we(e)
+}), Ee = [
 	"registry",
 	"organization",
 	"package",
 	"version"
-], Oe = class e extends u {
+], De = class e extends d {
 	static description = "Uploads V1 package and refreshes the registry";
 	static flags = {
-		registry: d.string({
+		registry: f.string({
 			char: "r",
 			summary: "full address of the registry or alias from .pl.reg",
 			helpValue: "<address|alias>",
 			env: "PL_REGISTRY"
 		}),
-		organization: d.string({
+		organization: f.string({
 			char: "o",
 			summary: "target organisation",
 			env: "PL_PACKAGE_ORGANIZATION"
 		}),
-		package: d.string({
+		package: f.string({
 			char: "p",
 			summary: "target package",
 			env: "PL_PACKAGE_NAME"
 		}),
-		version: d.string({
+		version: f.string({
 			char: "v",
 			summary: "target version",
 			env: "PL_PACKAGE_VERSION"
 		}),
-		meta: d.file({
+		meta: f.file({
 			char: "m",
 			summary: "json file containing meta information to associate with tha package",
 			exists: !0
 		}),
-		file: Ee({
+		file: Te({
 			char: "f",
 			summary: "package files",
 			multiple: !0,
 			default: []
 		}),
-		refresh: d.boolean({
+		refresh: f.boolean({
 			summary: "refresh repository after adding the package",
 			default: !0,
 			allowNo: !0,
@@ -351,41 +351,41 @@ var Ee = d.custom({
 		})
 	};
 	async run() {
-		let { flags: t } = await this.parse(e), n = ee.parse({});
-		for (let e of De) t[e] && (n[e] = t[e]);
-		t.meta && (t.meta.endsWith(".json") ? n.meta = JSON.parse(await p.promises.readFile(t.meta, { encoding: "utf-8" })) : t.meta.endsWith(".yaml") && (n.meta = oe.parse(await p.promises.readFile(t.meta, { encoding: "utf-8" }))));
+		let { flags: t } = await this.parse(e), n = l.parse({});
+		for (let e of Ee) t[e] && (n[e] = t[e]);
+		t.meta && (t.meta.endsWith(".json") ? n.meta = JSON.parse(await m.promises.readFile(t.meta, { encoding: "utf-8" })) : t.meta.endsWith(".yaml") && (n.meta = ae.parse(await m.promises.readFile(t.meta, { encoding: "utf-8" }))));
 		for (let e of t.file) n.files[e.destName] = e.src;
 		let r = await c(n);
-		this.log(oe.stringify(r.conf));
-		let i = r.createRegistry(new m(this)), a = r.fullPackageName, o = i.constructNewPackage(a);
+		this.log(ae.stringify(r.conf));
+		let i = r.createRegistry(new h(this)), a = r.fullPackageName, o = i.constructNewPackage(a);
 		for (let [e, t] of Object.entries(r.conf.files)) {
 			this.log(`Uploading ${t} -> ${e} ...`);
-			let n = await p.promises.readFile(t);
+			let n = await m.promises.readFile(t);
 			await o.addFile(e, n);
 		}
 		this.log("Uploading meta information..."), await o.writeMeta(r.conf.meta), await o.finish(), t.refresh && await i.updateIfNeeded();
 	}
-}, ke = class {
+}, Oe = class {
 	constructor(e) {
 		this.root = e;
 	}
 	abs(e) {
-		return f.resolve(this.root, e);
+		return p.resolve(this.root, e);
 	}
 	read(e) {
-		return p.readFileSync(this.abs(e), "utf-8");
+		return m.readFileSync(this.abs(e), "utf-8");
 	}
 	write(e, t) {
 		let n = this.abs(e);
-		p.mkdirSync(f.dirname(n), { recursive: !0 }), p.writeFileSync(n, t, "utf-8");
+		m.mkdirSync(p.dirname(n), { recursive: !0 }), m.writeFileSync(n, t, "utf-8");
 	}
 	writeBinary(e, t) {
 		let n = this.abs(e);
-		p.mkdirSync(f.dirname(n), { recursive: !0 }), p.writeFileSync(n, t);
+		m.mkdirSync(p.dirname(n), { recursive: !0 }), m.writeFileSync(n, t);
 	}
 	exists(e) {
 		try {
-			return p.statSync(this.abs(e)), !0;
+			return m.statSync(this.abs(e)), !0;
 		} catch {
 			return !1;
 		}
@@ -393,15 +393,15 @@ var Ee = d.custom({
 	list(e) {
 		let t = this.abs(e);
 		try {
-			if (!p.statSync(t).isDirectory()) return [];
+			if (!m.statSync(t).isDirectory()) return [];
 		} catch {
 			return [];
 		}
 		let n = [];
 		function r(e, t) {
-			let i = p.readdirSync(t, { withFileTypes: !0 });
+			let i = m.readdirSync(t, { withFileTypes: !0 });
 			for (let a of i) {
-				let i = e ? `${e}/${a.name}` : a.name, o = f.join(t, a.name);
+				let i = e ? `${e}/${a.name}` : a.name, o = p.join(t, a.name);
 				a.isDirectory() ? r(i, o) : a.isFile() && n.push(i);
 			}
 		}
@@ -410,7 +410,7 @@ var Ee = d.custom({
 	listDir(e) {
 		let t = this.abs(e), n;
 		try {
-			n = p.readdirSync(t, { withFileTypes: !0 });
+			n = m.readdirSync(t, { withFileTypes: !0 });
 		} catch {
 			return [];
 		}
@@ -421,48 +421,48 @@ var Ee = d.custom({
 	}
 	move(e, t) {
 		let n = this.abs(e), r = this.abs(t);
-		p.mkdirSync(f.dirname(r), { recursive: !0 }), p.renameSync(n, r);
+		m.mkdirSync(p.dirname(r), { recursive: !0 }), m.renameSync(n, r);
 	}
 	delete(e) {
-		p.rmSync(this.abs(e), {
+		m.rmSync(this.abs(e), {
 			recursive: !0,
 			force: !0
 		});
 	}
-}, Ae = class {
+}, ke = class {
 	constructor(e) {
 		this.root = e;
 	}
 	staticRead(e) {
-		return p.readFileSync(f.resolve(this.root, "static", e), "utf-8");
+		return m.readFileSync(p.resolve(this.root, "static", e), "utf-8");
 	}
 	staticReadBinary(e) {
-		return p.readFileSync(f.resolve(this.root, "static", e));
+		return m.readFileSync(p.resolve(this.root, "static", e));
 	}
 	textRead(e) {
-		return p.readFileSync(f.resolve(this.root, "text", e), "utf-8");
+		return m.readFileSync(p.resolve(this.root, "text", e), "utf-8");
 	}
 };
-function je(e, t) {
+function Ae(e, t) {
 	return e.replace(/\$\{([A-Za-z_][A-Za-z0-9_]*)\}/g, (e, n) => t[n] ?? `\${${n}}`);
 }
 //#endregion
 //#region src/structure/engine/flatten.ts
-var Me = ["default", "init"];
-function Ne(e, t) {
+var je = ["default", "init"];
+function Me(e, t) {
 	if (!e) return t;
 	if (!t) return e;
 	let n = e.endsWith("/") ? e.slice(0, -1) : e, r = t.startsWith("/") ? t.slice(1) : t;
 	return r ? `${n}/${r}` : n;
 }
-function Pe(e, t) {
+function Ne(e, t) {
 	return e.filter((e) => e.scope === t).slice().sort((e, t) => e.path.localeCompare(t.path));
 }
-function Fe(e, t) {
+function Pe(e, t) {
 	let n = [];
 	function r(e, i, a, o, s) {
 		if (e.kind === "scope") {
-			let n = Pe(t.modules, e.scope);
+			let n = Ne(t.modules, e.scope);
 			for (let t of n) for (let n of e.children) r(n, e.scope, t.path, o, s);
 			return;
 		}
@@ -475,14 +475,14 @@ function Fe(e, t) {
 			for (let t of e.children) r(t, i, a, o, e.modes);
 			return;
 		}
-		if (i === void 0 || a === void 0) throw Error(`flatten: leaf '${Le(e)}' is not inside a scope() frame`);
+		if (i === void 0 || a === void 0) throw Error(`flatten: leaf '${Ie(e)}' is not inside a scope() frame`);
 		if (e.kind === "rename") {
 			n.push({
 				leaf: e,
 				scope: i,
 				modulePath: a,
-				resolvedPath: Ne(a, e.from),
-				resolvedTo: Ne(a, e.to),
+				resolvedPath: Me(a, e.from),
+				resolvedTo: Me(a, e.to),
 				triggers: o,
 				modes: s
 			});
@@ -492,15 +492,15 @@ function Fe(e, t) {
 			leaf: e,
 			scope: i,
 			modulePath: a,
-			resolvedPath: Ne(a, Ie(e)),
+			resolvedPath: Me(a, Fe(e)),
 			triggers: o,
 			modes: s
 		});
 	}
-	for (let t of e.children) r(t, void 0, void 0, [], Me);
+	for (let t of e.children) r(t, void 0, void 0, [], je);
 	return n;
 }
-function Ie(e) {
+function Fe(e) {
 	switch (e.kind) {
 		case "fixed":
 		case "managed":
@@ -510,67 +510,67 @@ function Ie(e) {
 		case "rename": return e.from;
 	}
 }
-function Le(e) {
+function Ie(e) {
 	return e.kind === "rename" ? `rename ${e.from} -> ${e.to}` : `${e.kind} ${e.path}`;
 }
 //#endregion
 //#region src/structure/engine/glob.ts
-var Re = /[.+^${}()|[\]\\]/g;
-function ze(e) {
+var Le = /[.+^${}()|[\]\\]/g;
+function Re(e) {
 	let t = "";
 	for (let n = 0; n < e.length; n++) {
 		let r = e[n];
-		r === "*" ? e[n + 1] === "*" ? (n++, e[n + 1] === "/" ? (n++, t += "(?:.*/)?") : t += ".*") : t += "[^/]*" : r === "?" ? t += "[^/]" : t += r.replace(Re, "\\$&");
+		r === "*" ? e[n + 1] === "*" ? (n++, e[n + 1] === "/" ? (n++, t += "(?:.*/)?") : t += ".*") : t += "[^/]*" : r === "?" ? t += "[^/]" : t += r.replace(Le, "\\$&");
 	}
 	return RegExp(`^${t}$`);
 }
-function Be(e, t) {
-	return ze(e).test(t);
+function ze(e, t) {
+	return Re(e).test(t);
 }
 //#endregion
 //#region src/structure/engine/builders.ts
-var h, g;
-function Ve(e) {
-	if (!h) throw Error(`${e}() called outside defineStructure(). Builders must run inside the lambda passed to defineStructure(...).`);
-	return h;
+var g, _;
+function Be(e) {
+	if (!g) throw Error(`${e}() called outside defineStructure(). Builders must run inside the lambda passed to defineStructure(...).`);
+	return g;
 }
-function _(e, t) {
-	let n = Ve(e);
+function v(e, t) {
+	let n = Be(e);
 	n.stack[n.stack.length - 1].push(t);
 }
-function He(e, t) {
-	let n = g;
-	g = e;
+function Ve(e, t) {
+	let n = _;
+	_ = e;
 	try {
 		return t();
 	} finally {
-		g = n;
+		_ = n;
 	}
 }
-function Ue() {
-	return g;
+function He() {
+	return _;
 }
-function v() {
-	if (!g) throw Error("getActiveRunContext() called outside engine.run(). Generators only see the run context during a run.");
-	return g;
+function y() {
+	if (!_) throw Error("getActiveRunContext() called outside engine.run(). Generators only see the run context during a run.");
+	return _;
 }
-function We(e) {
-	if (h) throw Error("defineStructure() cannot be called from inside another defineStructure().");
+function Ue(e) {
+	if (g) throw Error("defineStructure() cannot be called from inside another defineStructure().");
 	let t = [], n = {
 		root: t,
 		stack: [t],
 		inScope: !1
 	};
-	h = n;
+	g = n;
 	try {
 		if (e(), n.stack.length !== 1) throw Error(`defineStructure: builder body left ${n.stack.length - 1} unclosed group frame(s)`);
 		let r = { children: t };
-		return Ge(r), r;
+		return We(r), r;
 	} finally {
-		h = void 0;
+		g = void 0;
 	}
 }
-function Ge(e) {
+function We(e) {
 	let t = /* @__PURE__ */ new Map();
 	function n(e, r) {
 		if (e.kind === "scope") {
@@ -593,8 +593,8 @@ function Ge(e) {
 		throw Error(`defineStructure validation: path '${t}' under scope '${e}' is declared as both seed and ${n}. Seeds are block-author territory (written once at init, untouched thereafter); engine-managed primitives (fixed/managed/scaffold) rewrite on every refresh. The two contracts cannot coexist on the same path.`);
 	}
 }
-function y(e, t) {
-	let n = Ve("scope");
+function b(e, t) {
+	let n = Be("scope");
 	if (n.inScope) throw Error("scope() cannot nest. Already inside a scope.");
 	let r = {
 		kind: "scope",
@@ -608,22 +608,22 @@ function y(e, t) {
 		n.stack.pop(), n.inScope = !1;
 	}
 }
-var Ke;
-function qe(e) {
-	Ke = e;
+var Ge;
+function Ke(e) {
+	Ge = e;
 }
-function b(e, t, n) {
-	Je(e, t), n && Je((t) => !e(t), n);
+function x(e, t, n) {
+	qe(e, t), n && qe((t) => !e(t), n);
 }
-function Je(e, t) {
-	if (h) {
-		Ye(e, t);
+function qe(e, t) {
+	if (g) {
+		Je(e, t);
 		return;
 	}
-	if (!(Ke?.(e, t) ?? !1)) throw Error("when() called outside defineStructure() and outside any managed(...) body. Place this call inside one of the two.");
+	if (!(Ge?.(e, t) ?? !1)) throw Error("when() called outside defineStructure() and outside any managed(...) body. Place this call inside one of the two.");
 }
-function Ye(e, t) {
-	let n = h, r = {
+function Je(e, t) {
+	let n = g, r = {
 		kind: "when",
 		trigger: e,
 		children: []
@@ -635,11 +635,11 @@ function Ye(e, t) {
 		n.stack.pop();
 	}
 }
-function x(e) {
+function S(e) {
 	return (t) => t.filesMatch(e);
 }
-function Xe(e, t, n) {
-	let r = Ve(e), i = {
+function Ye(e, t, n) {
+	let r = Be(e), i = {
 		kind: "mode",
 		modes: t,
 		children: []
@@ -651,144 +651,144 @@ function Xe(e, t, n) {
 		r.stack.pop();
 	}
 }
-function Ze(e) {
-	Xe("onInitOrUpdate", ["init", "updateDeps"], e);
+function Xe(e) {
+	Ye("onInitOrUpdate", ["init", "updateDeps"], e);
 }
-function S(e, t) {
-	_("fixed", {
+function C(e, t) {
+	v("fixed", {
 		kind: "fixed",
 		path: e,
 		content: t
 	});
 }
-function C(e, t, n) {
-	_("managed", {
+function w(e, t, n) {
+	v("managed", {
 		kind: "managed",
 		path: e,
 		initial: t,
 		body: n
 	});
 }
-function Qe(e, t) {
-	_("scaffold", {
+function Ze(e, t) {
+	v("scaffold", {
 		kind: "scaffold",
 		path: e,
 		initial: t
 	});
 }
-function w(e, t) {
-	_("seed", {
+function T(e, t) {
+	v("seed", {
 		kind: "seed",
 		path: e,
 		initial: t
 	});
 }
-function T(e) {
-	_("remove", {
+function E(e) {
+	v("remove", {
 		kind: "remove",
 		path: e
 	});
 }
-function E(e) {
+function D(e) {
 	return {
 		kind: "file",
 		path: e
 	};
 }
-function $e(e) {
+function Qe(e) {
 	return {
 		kind: "binary",
 		path: e
 	};
 }
-function et(e) {
+function $e(e) {
 	return {
 		kind: "text",
 		value: e
 	};
 }
-function tt(e, t) {
+function et(e, t) {
 	return {
 		kind: "tpl",
 		path: e,
 		vars: t
 	};
 }
-function D(e) {
+function O(e) {
 	return {
 		kind: "generate",
 		fn: e
 	};
 }
-function nt() {
-	if (!g) throw Error("blockVars() called outside engine.run(). Generators and managed bodies only see BlockVars during a run.");
-	return g.blockVars;
+function tt() {
+	if (!_) throw Error("blockVars() called outside engine.run(). Generators and managed bodies only see BlockVars during a run.");
+	return _.blockVars;
 }
 //#endregion
 //#region src/structure/engine/parsers/json.ts
-function rt(e) {
+function nt(e) {
 	return JSON.parse(e);
 }
-var it = 100, at = 2;
-function ot(e) {
-	return e.length === 0 ? "[]" : "[" + e.map(st).join(", ") + "]";
+var rt = 100, it = 2;
+function at(e) {
+	return e.length === 0 ? "[]" : "[" + e.map(ot).join(", ") + "]";
 }
-function st(e) {
-	if (Array.isArray(e)) return ot(e);
-	if (k(e)) {
+function ot(e) {
+	if (Array.isArray(e)) return at(e);
+	if (A(e)) {
 		let t = Object.entries(e);
-		return t.length === 0 ? "{}" : "{ " + t.map(([e, t]) => `${JSON.stringify(e)}: ${st(t)}`).join(", ") + " }";
+		return t.length === 0 ? "{}" : "{ " + t.map(([e, t]) => `${JSON.stringify(e)}: ${ot(t)}`).join(", ") + " }";
 	}
 	return JSON.stringify(e);
 }
-function ct(e, t, n, r) {
-	let i = t + at, a = " ".repeat(i);
+function st(e, t, n, r) {
+	let i = t + it, a = " ".repeat(i);
 	if (Array.isArray(e)) {
-		let o = ot(e);
-		if (n + o.length + r <= it) return o;
+		let o = at(e);
+		if (n + o.length + r <= rt) return o;
 		let s = e.length - 1;
-		return "[\n" + e.map((e, t) => a + ct(e, i, i, t === s ? 0 : 1)).join(",\n") + "\n" + " ".repeat(t) + "]";
+		return "[\n" + e.map((e, t) => a + st(e, i, i, t === s ? 0 : 1)).join(",\n") + "\n" + " ".repeat(t) + "]";
 	}
-	if (k(e)) {
+	if (A(e)) {
 		let n = Object.entries(e);
 		if (n.length === 0) return "{}";
 		let r = n.length - 1;
 		return "{\n" + n.map(([e, t], n) => {
 			let o = `${a}${JSON.stringify(e)}: `;
-			return o + ct(t, i, o.length, n === r ? 0 : 1);
+			return o + st(t, i, o.length, n === r ? 0 : 1);
 		}).join(",\n") + "\n" + " ".repeat(t) + "}";
 	}
 	return JSON.stringify(e);
 }
-function lt(e, t) {
-	return t?.collapse ? ct(JSON.parse(JSON.stringify(e ?? null)), 0, 0, 0) + "\n" : JSON.stringify(e, null, 2) + "\n";
+function ct(e, t) {
+	return t?.collapse ? st(JSON.parse(JSON.stringify(e ?? null)), 0, 0, 0) + "\n" : JSON.stringify(e, null, 2) + "\n";
 }
-function O(e) {
+function k(e) {
 	return e === "" || e === void 0 ? [] : e.split(".");
 }
-function k(e) {
+function A(e) {
 	return typeof e == "object" && !!e && !Array.isArray(e);
 }
-function ut(e, t) {
-	let n = O(t), r = e;
+function lt(e, t) {
+	let n = k(t), r = e;
 	for (let e of n) {
-		if (!k(r)) return;
+		if (!A(r)) return;
 		r = r[e];
 	}
 	return r;
 }
-function dt(e, t) {
-	let n = O(t);
+function ut(e, t) {
+	let n = k(t);
 	if (n.length === 0) return !0;
 	let r = e;
 	for (let e = 0; e < n.length - 1; e++) {
-		if (!k(r)) return !1;
+		if (!A(r)) return !1;
 		r = r[n[e]];
 	}
-	return k(r) ? n[n.length - 1] in r : !1;
+	return A(r) ? n[n.length - 1] in r : !1;
 }
-function ft(e, t, n) {
-	let r = O(t);
+function dt(e, t, n) {
+	let r = k(t);
 	if (r.length === 0) throw Error("setAtPath: jsonPath must be non-empty");
 	let i = e;
 	for (let e = 0; e < r.length - 1; e++) {
@@ -796,22 +796,22 @@ function ft(e, t, n) {
 		if (n === void 0) {
 			let e = {};
 			i[t] = e, i = e;
-		} else if (k(n)) i = n;
+		} else if (A(n)) i = n;
 		else throw Error(`setAtPath: cannot descend into non-object at '${r.slice(0, e + 1).join(".")}'`);
 	}
 	i[r[r.length - 1]] = n;
 }
-function pt(e, t) {
-	let n = O(t);
+function ft(e, t) {
+	let n = k(t);
 	if (n.length === 0) throw Error("deleteAtPath: jsonPath must be non-empty");
 	let r = e;
 	for (let e = 0; e < n.length - 1; e++) {
-		if (!k(r)) return;
+		if (!A(r)) return;
 		r = r[n[e]];
 	}
-	k(r) && delete r[n[n.length - 1]];
+	A(r) && delete r[n[n.length - 1]];
 }
-function mt(e, t) {
+function pt(e, t) {
 	let n = new Set(t), r = Object.keys(e), i = /* @__PURE__ */ new Map();
 	i.set("", []);
 	let a = "";
@@ -826,63 +826,63 @@ function mt(e, t) {
 }
 //#endregion
 //#region src/structure/engine/parsers/lines.ts
-function ht(e) {
+function mt(e) {
 	let t = e.split("\n");
 	return t.length > 0 && t[t.length - 1] === "" && t.pop(), t;
 }
-function gt(e) {
+function ht(e) {
 	return e.join("\n") + "\n";
 }
-function _t(e) {
+function gt(e) {
 	return e.replace(/(^|\s)#.*$/, "$1").trim();
 }
-function vt(e, t) {
-	let n = _t(e);
+function _t(e, t) {
+	let n = gt(e);
 	return n === "" ? !1 : n === t.trim();
 }
-function yt(e, t) {
-	for (let n of e) if (vt(n, t)) return !0;
+function vt(e, t) {
+	for (let n of e) if (_t(n, t)) return !0;
 	return !1;
 }
 //#endregion
 //#region src/structure/engine/content-rules.ts
-function bt(e, t) {
+function yt(e, t) {
 	return e === "sdk:" ? t ? "workspace:*" : "catalog:" : e;
 }
-var xt = [
+var bt = [
 	"dependencies",
 	"devDependencies",
 	"peerDependencies",
 	"optionalDependencies"
 ];
-function St(e, t) {
-	if (P(e)) for (let n of xt) {
+function xt(e, t) {
+	if (P(e)) for (let n of bt) {
 		let r = e[n];
 		if (P(r)) for (let e of Object.keys(r)) r[e] === "sdk:" && (r[e] = t ? "workspace:*" : "catalog:");
 	}
 }
-var A;
-function j(e) {
-	if (!A) throw Error(`${e}() only valid inside a managed(...) body. Move this call inside managed(path, initial, () => {...}).`);
-	return A;
+var j;
+function St(e) {
+	if (!j) throw Error(`${e}() only valid inside a managed(...) body. Move this call inside managed(path, initial, () => {...}).`);
+	return j;
 }
 function M(e) {
-	let t = j(e);
+	let t = St(e);
 	if (t.kind !== "json") throw Error(`${e}() requires a JSON-managed body; got '${t.kind}'.`);
 	return t;
 }
 function N(e) {
-	let t = j(e);
+	let t = St(e);
 	if (t.kind !== "yaml") throw Error(`${e}() requires a YAML-managed body; got '${t.kind}'.`);
 	return t;
 }
 function Ct(e) {
-	let t = j(e);
+	let t = St(e);
 	if (t.kind !== "lines") throw Error(`${e}() requires a lines-managed body; got '${t.kind}'.`);
 	return t;
 }
 function wt(e, t) {
-	let n = e.ctx ?? Ue();
+	let n = e.ctx ?? He();
 	if (!n) throw Error(`${t}() needs a RunContext but none is active. Pass { ctx } via the with-managed-* helper or run inside engine.run(...).`);
 	return n;
 }
@@ -890,8 +890,8 @@ function P(e) {
 	return typeof e == "object" && !!e && !Array.isArray(e);
 }
 function Tt(e, t, n = {}) {
-	if (A) throw Error("Nested managed(...) body — engine bug.");
-	A = {
+	if (j) throw Error("Nested managed(...) body — engine bug.");
+	j = {
 		kind: "json",
 		obj: e,
 		ctx: n.ctx,
@@ -900,27 +900,28 @@ function Tt(e, t, n = {}) {
 	try {
 		return t(), e;
 	} finally {
-		A = void 0;
+		j = void 0;
 	}
 }
 function Et(e, t, n = {}) {
-	if (A) throw Error("Nested managed(...) body — engine bug.");
-	A = {
+	if (j) throw Error("Nested managed(...) body — engine bug.");
+	j = {
 		kind: "yaml",
 		doc: e,
 		ctx: n.ctx,
 		triggerContext: n.triggerContext,
-		getLatestVersion: n.getLatestVersion
+		getLatestVersion: n.getLatestVersion,
+		getDerivedDependencyPin: n.getDerivedDependencyPin
 	};
 	try {
 		return t(), e;
 	} finally {
-		A = void 0;
+		j = void 0;
 	}
 }
 function Dt(e, t, n = {}) {
-	if (A) throw Error("Nested managed(...) body — engine bug.");
-	A = {
+	if (j) throw Error("Nested managed(...) body — engine bug.");
+	j = {
 		kind: "lines",
 		lines: e,
 		ctx: n.ctx,
@@ -929,37 +930,37 @@ function Dt(e, t, n = {}) {
 	try {
 		return t(), e;
 	} finally {
-		A = void 0;
+		j = void 0;
 	}
 }
-qe((e, t) => {
-	if (!A) return !1;
-	let n = A.triggerContext;
+Ke((e, t) => {
+	if (!j) return !1;
+	let n = j.triggerContext;
 	if (!n) throw Error("when() inside a managed(...) body requires a triggerContext. The runner supplies it via the `triggerContext` opt to with-managed-*; ensure your test/test helper passes one.");
 	return e(n) && t(), !0;
 });
 function F(e, t) {
-	ft(M("ensureField").obj, e, t);
+	dt(M("ensureField").obj, e, t);
 }
 function Ot(e, t) {
 	let n = M("removeField").obj;
-	dt(n, e) && (t && !t(ut(n, e)) || pt(n, e));
+	ut(n, e) && (t && !t(lt(n, e)) || ft(n, e));
 }
 function I(e, t) {
 	F(`scripts.${e}`, t);
 }
-function kt(e) {
+function L(e) {
 	Ot(`scripts.${e}`);
 }
-var At = [
+var kt = [
 	"dependencies",
 	"devDependencies",
 	"peerDependencies",
 	"optionalDependencies"
 ];
-function L(e, t, n, r) {
-	let i = M(e), a = i.obj, o = n === "sdk:" ? bt(n, wt(i, e).isSdkInternal) : n;
-	for (let e of At) {
+function R(e, t, n, r) {
+	let i = M(e), a = i.obj, o = n === "sdk:" ? yt(n, wt(i, e).isSdkInternal) : n;
+	for (let e of kt) {
 		if (e === r) continue;
 		let n = a[e];
 		P(n) && t in n && delete n[t];
@@ -967,115 +968,125 @@ function L(e, t, n, r) {
 	let s = a[r], c = P(s) ? s : {};
 	c[t] = o, P(s) || (a[r] = c);
 }
-function R(e, t) {
-	L("ensureDep", e, t, "dependencies");
-}
 function z(e, t) {
-	L("ensureDevDep", e, t, "devDependencies");
+	R("ensureDep", e, t, "dependencies");
+}
+function B(e, t) {
+	R("ensureDevDep", e, t, "devDependencies");
 }
-function jt(e, t) {
-	L("ensurePeerDep", e, t, "peerDependencies");
+function At(e, t) {
+	R("ensurePeerDep", e, t, "peerDependencies");
 }
-function B(e) {
+function V(e) {
 	let t = M("removeDep").obj;
-	for (let n of At) {
+	for (let n of kt) {
 		let r = t[n];
 		P(r) && e in r && delete r[e];
 	}
 }
-function V(e) {
-	for (let [t, n] of Object.entries(e)) z(t, n);
-}
 function H(e) {
-	for (let [t, n] of Object.entries(e)) jt(t, n);
+	for (let [t, n] of Object.entries(e)) B(t, n);
+}
+function U(e) {
+	for (let [t, n] of Object.entries(e)) At(t, n);
 }
-function Mt(e, t, n) {
+function jt(e, t, n) {
 	let r = wt(M(e), e);
-	for (let i of r.modules) i.scope === t && L(e, i.name, "workspace:*", n);
+	for (let i of r.modules) i.scope === t && R(e, i.name, "workspace:*", n);
 }
-function U(e) {
-	Mt("ensureWorkspaceScopeDeps", e, "dependencies");
+function W(e) {
+	jt("ensureWorkspaceScopeDeps", e, "dependencies");
 }
-function Nt(e) {
+function Mt(e) {
 	let t = M("pruneKeysMatching").obj;
 	for (let n of Object.keys(t)) e(n, t[n]) && delete t[n];
 }
-function Pt(e, t) {
-	let n = mt(e, t);
+function Nt(e, t) {
+	let n = pt(e, t);
 	for (let t of Object.keys(e)) delete e[t];
 	for (let t of Object.keys(n)) e[t] = n[t];
 }
-function W(e) {
-	Pt(M("enforceFieldOrder").obj, e);
+function G(e) {
+	Nt(M("enforceFieldOrder").obj, e);
 }
-function Ft(e, t) {
+function Pt(e, t) {
 	let n = Object.keys(e).sort(), r = {};
 	for (let t of n) r[t] = e[t];
 	for (let t of Object.keys(e)) delete e[t];
-	for (let i of n) e[i] = r[i], t && P(e[i]) && Ft(e[i], !0);
+	for (let i of n) e[i] = r[i], t && P(e[i]) && Pt(e[i], !0);
 }
-function G(e = "", t = {}) {
+function K(e = "", t = {}) {
 	let n = t.recursive ?? !1;
 	if (e === "" && !n) return;
 	let r = M("enforceAlphabeticalOrder").obj;
 	if (e === "") {
-		Ft(r, !0);
+		Pt(r, !0);
 		return;
 	}
-	let i = ut(r, e);
-	P(i) && Ft(i, n);
+	let i = lt(r, e);
+	P(i) && Pt(i, n);
 }
-function It() {
+function Ft() {
 	let e = N("ensureWorkspaceModulePaths"), t = wt(e, "ensureWorkspaceModulePaths").modules.filter((e) => e.path !== "").map((e) => e.path).sort(), n = e.doc.toJSON()?.packages;
 	Array.isArray(n) && n.length === t.length && n.every((e, n) => e === t[n]) || e.doc.setIn(["packages"], t);
 }
-function Lt(e, t) {
+function It(e, t) {
 	let n = e.doc.getIn(["catalog", t]);
 	return typeof n == "string" ? n : void 0;
 }
-function Rt(e, t) {
+function Lt(e, t) {
 	let n = N("ensureCatalogVersion");
-	Lt(n, e) === void 0 && n.doc.setIn(["catalog", e], t);
+	It(n, e) === void 0 && n.doc.setIn(["catalog", e], t);
 }
-function zt(e) {
+function Rt(e) {
 	let t = N("ensureCatalogLatest");
 	if (!t.getLatestVersion) return;
 	let n = t.getLatestVersion(e);
-	n !== void 0 && Lt(t, e) !== n && t.doc.setIn(["catalog", e], n);
+	n !== void 0 && It(t, e) !== n && t.doc.setIn(["catalog", e], n);
+}
+function zt(e, t) {
+	let n = N("pinCatalogToDependencyOf");
+	if (!n.getDerivedDependencyPin) return;
+	let r = n.getDerivedDependencyPin(e);
+	r !== void 0 && It(n, e) !== r && n.doc.setIn(["catalog", e], r);
 }
 function Bt(e) {
+	let t = N("ensureCatalogAbsent");
+	t.doc.hasIn(["catalog", e]) && t.doc.deleteIn(["catalog", e]);
+}
+function Vt(e) {
 	let t = Ct("ensureGitignoreEntries");
-	for (let n of e) yt(t.lines, n) || t.lines.push(n);
+	for (let n of e) vt(t.lines, n) || t.lines.push(n);
 }
 //#endregion
 //#region src/structure/engine/parsers/yaml.ts
-function Vt(e) {
-	return ce(e);
-}
 function Ht(e) {
+	return se(e);
+}
+function Ut(e) {
 	return e.toString();
 }
-var Ut = ".structure";
-function Wt(e, t = 0) {
-	if (e < t) throw new Gt(e, t);
+var Wt = ".structure";
+function Gt(e, t = 0) {
+	if (e < t) throw new Kt(e, t);
 }
-var Gt = class extends Error {
+var Kt = class extends Error {
 	constructor(e, t) {
 		super(`Block .structure version is ${e}, below floor ${t}. Bootstrap via the legacy-migration skill, then re-run.`), this.version = e, this.floor = t, this.name = "StructureVersionFloorError";
 	}
 };
-function Kt(e, t = 1) {
+function qt(e, t = 1) {
 	let n = { version: t };
-	e.write(Ut, JSON.stringify(n));
+	e.write(Wt, JSON.stringify(n));
 }
 //#endregion
 //#region src/structure/engine/runner.ts
-var qt = class extends Error {
+var Jt = class extends Error {
 	constructor(e) {
 		super(`Post-run recheck: rule set not idempotent. Failing item: ${e.primitive} '${e.path}' (scope=${e.scope}, action=${e.action}). Engine bug.`), this.failing = e, this.name = "RecheckError";
 	}
 };
-function Jt(e, t, n, r) {
+function Yt(e, t, n, r) {
 	switch (e.kind) {
 		case "text": return e.value;
 		case "file":
@@ -1083,46 +1094,47 @@ function Jt(e, t, n, r) {
 			return n.staticRead(e.path);
 		case "tpl":
 			if (!n) throw Error(`tpl('${e.path}'): no TemplateProvider configured. Pass opts.templates to engine.run(...).`);
-			return je(n.textRead(e.path), typeof e.vars == "function" ? e.vars() : e.vars);
+			return Ae(n.textRead(e.path), typeof e.vars == "function" ? e.vars() : e.vars);
 		case "generate": {
 			let n = e.fn();
-			if (t.endsWith(".json")) return St(n, r), lt(n, { collapse: !t.endsWith("package.json") });
-			if (t.endsWith(".yaml") || t.endsWith(".yml")) return le(n);
+			if (t.endsWith(".json")) return xt(n, r), ct(n, { collapse: !t.endsWith("package.json") });
+			if (t.endsWith(".yaml") || t.endsWith(".yml")) return ce(n);
 			if (typeof n != "string") throw Error(`generate() for '${t}' must return a string for non-JSON/YAML files; got ${typeof n}`);
 			return n;
 		}
 		case "binary": throw Error(`binary('${e.path}') cannot be resolved to a string; it is only valid inside seed()/scaffold(), which copy it verbatim via fs.writeBinary.`);
 	}
 }
-function Yt(e, t, n, r, i) {
+function Xt(e, t, n, r, i) {
 	if (n.kind === "binary") {
 		if (!r) throw Error(`binary('${n.path}'): no TemplateProvider configured. Pass opts.templates to engine.run(...).`);
 		e.writeBinary(t, r.staticReadBinary(n.path));
 		return;
 	}
-	e.write(t, Jt(n, t, r, i));
+	e.write(t, Yt(n, t, r, i));
 }
-function Xt(e, t, n, r, i) {
-	let a = e.split("/").pop() ?? e;
+function Zt(e, t, n, r, i, a) {
+	let o = e.split("/").pop() ?? e;
 	if (e.endsWith(".json")) {
-		let i = rt(t);
+		let i = nt(t);
 		if (typeof i != "object" || !i || Array.isArray(i)) throw Error(`managed: parsed value at '${e}' is not a JSON object`);
-		return Tt(i, n, { triggerContext: r }), lt(i, { collapse: a !== "package.json" });
+		return Tt(i, n, { triggerContext: r }), ct(i, { collapse: o !== "package.json" });
 	}
 	if (e.endsWith(".yaml") || e.endsWith(".yml")) {
-		let e = Vt(t);
+		let e = Ht(t);
 		return Et(e, n, {
 			triggerContext: r,
-			getLatestVersion: i
-		}), Ht(e);
+			getLatestVersion: i,
+			getDerivedDependencyPin: a
+		}), Ut(e);
 	}
-	if (a === ".gitignore" || a.endsWith(".gitignore")) {
-		let e = ht(t);
-		return Dt(e, n, { triggerContext: r }), gt(e);
+	if (o === ".gitignore" || o.endsWith(".gitignore")) {
+		let e = mt(t);
+		return Dt(e, n, { triggerContext: r }), ht(e);
 	}
 	throw Error(`managed('${e}'): unsupported file kind. Only .json, .yaml, .yml, .gitignore are dispatched.`);
 }
-function Zt(e) {
+function Qt(e) {
 	let t = e.list(""), n = /* @__PURE__ */ new Set();
 	for (let e of t) {
 		n.add(e);
@@ -1131,37 +1143,37 @@ function Zt(e) {
 	}
 	return n;
 }
-function Qt(e, t) {
+function $t(e, t) {
 	let n = t === "" ? t : t.endsWith("/") ? t.slice(0, -1) : t;
 	return e.has(n);
 }
-function $t(e, t, n) {
+function en(e, t, n) {
 	return {
 		ctx: t,
 		version: t.version,
-		pathExists: (t) => Qt(e, t),
-		pathMissing: (t) => !Qt(e, t),
+		pathExists: (t) => $t(e, t),
+		pathMissing: (t) => !$t(e, t),
 		filesMatch: (t) => {
 			let r = n ? `${n}/${t}` : t;
-			for (let t of e) if (Be(r, t)) return !0;
+			for (let t of e) if (ze(r, t)) return !0;
 			return !1;
 		}
 	};
 }
-function en(e, t) {
+function tn(e, t) {
 	for (let n of e.triggers) if (!n(t)) return !1;
 	return !0;
 }
-function tn(e, t) {
+function nn(e, t) {
 	return t ? "init" : e.updateDepsOnly ? "updateDeps" : "default";
 }
-function nn(e, t) {
+function rn(e, t) {
 	return e.filter((e) => e.modes.includes(t));
 }
-function rn(e, t, n, r, i, a) {
+function an(e, t, n, r, i, a) {
 	let o = e.leaf;
 	if (o.kind === "fixed") {
-		let i = Jt(o.content, e.resolvedPath, r, a);
+		let i = Yt(o.content, e.resolvedPath, r, a);
 		return t.exists(e.resolvedPath) ? t.read(e.resolvedPath) === i ? void 0 : (n || t.write(e.resolvedPath, i), {
 			scope: e.scope,
 			path: e.resolvedPath,
@@ -1174,13 +1186,13 @@ function rn(e, t, n, r, i, a) {
 			action: "create"
 		});
 	}
-	if (o.kind === "scaffold") return t.exists(e.resolvedPath) ? void 0 : (n || Yt(t, e.resolvedPath, o.initial, r, a), {
+	if (o.kind === "scaffold") return t.exists(e.resolvedPath) ? void 0 : (n || Xt(t, e.resolvedPath, o.initial, r, a), {
 		scope: e.scope,
 		path: e.resolvedPath,
 		primitive: "scaffold",
 		action: "create"
 	});
-	if (o.kind === "seed") return !i || t.exists(e.resolvedPath) ? void 0 : (n || Yt(t, e.resolvedPath, o.initial, r, a), {
+	if (o.kind === "seed") return !i || t.exists(e.resolvedPath) ? void 0 : (n || Xt(t, e.resolvedPath, o.initial, r, a), {
 		scope: e.scope,
 		path: e.resolvedPath,
 		primitive: "seed",
@@ -1203,58 +1215,58 @@ function rn(e, t, n, r, i, a) {
 		});
 	}
 }
-function an(e, t, n, r, i, a, o) {
+function on(e, t, n, r, i, a, o, s) {
 	if (e.leaf.kind !== "managed") return;
-	let s = e.leaf, c = e.resolvedPath, ee = t.exists(c), l, te = !1;
-	ee ? l = t.read(c) : (l = Jt(s.initial, c, i, o), te = !0);
-	let u = Xt(c, l, s.body, r, a);
-	if (te) return n || t.write(c, u), {
+	let c = e.leaf, l = e.resolvedPath, ee = t.exists(l), u, d = !1;
+	ee ? u = t.read(l) : (u = Yt(c.initial, l, i, s), d = !0);
+	let f = Zt(l, u, c.body, r, a, o);
+	if (d) return n || t.write(l, f), {
 		scope: e.scope,
-		path: c,
+		path: l,
 		primitive: "managed",
 		action: "create"
 	};
-	if (u !== l) return n || t.write(c, u), {
+	if (f !== u) return n || t.write(l, f), {
 		scope: e.scope,
-		path: c,
+		path: l,
 		primitive: "managed",
 		action: "update"
 	};
 }
-function on(e, t, n, r, i, a, o) {
-	let s = nn(e, tn(n, a)), c = [], ee = Zt(t);
-	for (let e of s) {
-		if (e.leaf.kind === "managed" || !en(e, $t(ee, n, e.modulePath))) continue;
-		let o = rn(e, t, r, i, a, n.isSdkInternal);
-		o && c.push(o);
+function sn(e, t, n, r, i, a, o, s) {
+	let c = rn(e, nn(n, a)), l = [], ee = Qt(t);
+	for (let e of c) {
+		if (e.leaf.kind === "managed" || !tn(e, en(ee, n, e.modulePath))) continue;
+		let o = an(e, t, r, i, a, n.isSdkInternal);
+		o && l.push(o);
 	}
-	let l = Zt(t);
-	for (let e of s) {
+	let u = Qt(t);
+	for (let e of c) {
 		if (e.leaf.kind !== "managed") continue;
-		let a = $t(l, n, e.modulePath);
-		if (!en(e, a)) continue;
-		let s = an(e, t, r, a, i, o, n.isSdkInternal);
-		s && c.push(s);
+		let a = en(u, n, e.modulePath);
+		if (!tn(e, a)) continue;
+		let c = on(e, t, r, a, i, o, s, n.isSdkInternal);
+		c && l.push(c);
 	}
-	return c;
+	return l;
 }
-function sn(e, t, n, r = {}) {
-	return He(n, () => {
-		let i = Fe(e, n), a = !!r.initMode, o = on(i, t, n, n.dryRun, r.templates, a, r.registryLookup);
+function cn(e, t, n, r = {}) {
+	return Ve(n, () => {
+		let i = Pe(e, n), a = !!r.initMode, o = sn(i, t, n, n.dryRun, r.templates, a, r.registryLookup, r.derivedPinLookup);
 		if (!n.dryRun && !n.updateDepsOnly && !a) {
-			Kt(t);
+			qt(t);
 			let i = {
 				...r.rediscover ? r.rediscover(t) : n,
 				dryRun: !0
-			}, a = on(Fe(e, i), t, i, !0, r.templates, !1, r.registryLookup).filter((e) => e.path !== Ut);
-			if (a.length > 0) throw new qt(a[0]);
+			}, a = sn(Pe(e, i), t, i, !0, r.templates, !1, r.registryLookup, r.derivedPinLookup).filter((e) => e.path !== Wt);
+			if (a.length > 0) throw new Jt(a[0]);
 		}
-		return a && !n.dryRun && Kt(t), { changes: o };
+		return a && !n.dryRun && qt(t), { changes: o };
 	});
 }
 //#endregion
 //#region src/structure/engine/discovery.ts
-var cn = [
+var ln = [
 	"root",
 	"block",
 	"model",
@@ -1262,12 +1274,12 @@ var cn = [
 	"workflow",
 	"test",
 	"software"
-], ln = class extends Error {
+], un = class extends Error {
 	constructor(e, t) {
 		super(e), this.path = t, this.name = "DiscoveryError";
 	}
 };
-function un(e) {
+function dn(e) {
 	let t = /* @__PURE__ */ new Set();
 	for (let n of [
 		e.dependencies,
@@ -1277,17 +1289,17 @@ function un(e) {
 	]) if (n) for (let e of Object.keys(n)) t.add(e);
 	return t;
 }
-function dn(e) {
+function fn(e) {
 	return e === "" || e === ".";
 }
-function fn(e, t) {
+function pn(e, t) {
 	let n = e.pkg["block-scope"];
 	if (typeof n == "string") {
-		if (!cn.includes(n)) throw new ln(`package.json "block-scope" must be one of ${cn.join(", ")}, got '${n}'`, e.path);
+		if (!ln.includes(n)) throw new un(`package.json "block-scope" must be one of ${ln.join(", ")}, got '${n}'`, e.path);
 		return n;
 	}
-	if (dn(e.path)) return "root";
-	let r = un(e.pkg);
+	if (fn(e.path)) return "root";
+	let r = dn(e.pkg);
 	if (e.pkg["block-software"] !== void 0) return "software";
 	if (r.has("@platforma-sdk/package-builder")) {
 		for (let e of r) if (/^@platforma-open\/.*runenv/.test(e)) return "software";
@@ -1302,41 +1314,41 @@ function fn(e, t) {
 	if (r.has("@platforma-sdk/model") && e.pkg.main) return "model";
 	if (r.has("@platforma-sdk/test")) return "test";
 }
-function pn(e) {
+function mn(e) {
 	let t = /* @__PURE__ */ new Set();
 	for (let n of e) typeof n.pkg.name == "string" && t.add(n.pkg.name);
 	let n = [];
 	for (let r of e) {
-		let e = fn(r, t);
-		if (!e) throw new ln(`Unclassified workspace package at '${r.path}'. Add a top-level "block-scope" string to its package.json.`, r.path);
+		let e = pn(r, t);
+		if (!e) throw new un(`Unclassified workspace package at '${r.path}'. Add a top-level "block-scope" string to its package.json.`, r.path);
 		n.push({
 			scope: e,
 			name: r.pkg.name ?? r.path,
-			path: dn(r.path) ? "" : r.path
+			path: fn(r.path) ? "" : r.path
 		});
 	}
 	return n;
 }
 //#endregion
 //#region src/structure/engine/ctx.ts
-function K(e, t) {
+function q(e, t) {
 	return e.modules.filter((e) => e.scope === t);
 }
-function mn(e, t) {
-	let n = K(e, t);
+function hn(e, t) {
+	let n = q(e, t);
 	if (n.length === 0) throw Error(`findModule: expected one '${t}' module, found none`);
 	if (n.length > 1) throw Error(`findModule: expected exactly one '${t}' module, found ${n.length}`);
 	return n[0];
 }
-function q(e, t) {
-	return { [mn(e, t).name]: "workspace:*" };
+function J(e, t) {
+	return { [hn(e, t).name]: "workspace:*" };
 }
-function hn(e, t) {
+function gn(e, t) {
 	let n = {};
-	for (let r of K(e, t)) n[r.name] = "workspace:*";
+	for (let r of q(e, t)) n[r.name] = "workspace:*";
 	return n;
 }
-function gn(e) {
+function _n(e) {
 	let t = e.facadeName, n = [
 		{
 			scope: "root",
@@ -1375,7 +1387,7 @@ function gn(e) {
 		path: "software"
 	}), n;
 }
-function _n(e) {
+function vn(e) {
 	return {
 		isSdkInternal: e.isSdkInternal ?? !1,
 		updateDepsOnly: e.updateDepsOnly ?? !1,
@@ -1387,41 +1399,41 @@ function _n(e) {
 }
 //#endregion
 //#region src/structure/engine/discovery-fs.ts
-var J = class extends Error {
+var Y = class extends Error {
 	constructor(e) {
 		super(e), this.name = "StructureCliError";
 	}
 };
-function vn(e, t) {
+function yn(e, t) {
 	return e === "" ? t : `${e}/${t}`;
 }
-function yn(e, t) {
+function bn(e, t) {
 	try {
 		return JSON.parse(e.read(t));
 	} catch {
 		return;
 	}
 }
-function bn(e) {
-	if (e.includes("*")) throw new J(`pnpm-workspace.yaml 'packages:' entry '${e}' contains a glob. The structurer requires literal package paths — replace the glob with one entry per package directory.`);
+function xn(e) {
+	if (e.includes("*")) throw new Y(`pnpm-workspace.yaml 'packages:' entry '${e}' contains a glob. The structurer requires literal package paths — replace the glob with one entry per package directory.`);
 	let t = e.replace(/^\.\//, "").replace(/\/$/, "");
 	return t === "." ? "" : t;
 }
-function xn(e) {
+function Sn(e) {
 	let t;
 	try {
 		t = e.read("pnpm-workspace.yaml");
 	} catch {
-		throw new J("No pnpm-workspace.yaml found. This directory is empty or unrecognisable as a block — run 'block-tools structure init' instead, or pass --sdk-internal for an in-monorepo block.");
+		throw new Y("No pnpm-workspace.yaml found. This directory is empty or unrecognisable as a block — run 'block-tools structure init' instead, or pass --sdk-internal for an in-monorepo block.");
 	}
-	let n = se(t) ?? {}, r = Array.isArray(n.packages) ? n.packages : [], i = new Set([""]);
+	let n = oe(t) ?? {}, r = Array.isArray(n.packages) ? n.packages : [], i = new Set([""]);
 	for (let t of r) {
-		let n = bn(t);
+		let n = xn(t);
 		(n === "" || e.exists(n)) && i.add(n);
 	}
 	let a = [];
 	for (let t of i) {
-		let n = yn(e, vn(t, "package.json"));
+		let n = bn(e, yn(t, "package.json"));
 		n && a.push({
 			path: t,
 			pkg: n
@@ -1429,7 +1441,7 @@ function xn(e) {
 	}
 	return a;
 }
-function Sn(e) {
+function Cn(e) {
 	let t = [], n = new Set([
 		"node_modules",
 		".turbo",
@@ -1441,7 +1453,7 @@ function Sn(e) {
 		let o = e.listDir(i);
 		for (let s of o) {
 			if (!s.isDirectory || n.has(s.name)) continue;
-			let o = vn(i, s.name), c = yn(e, vn(o, "package.json"));
+			let o = yn(i, s.name), c = bn(e, yn(o, "package.json"));
 			c && t.push({
 				path: o,
 				pkg: c
@@ -1450,11 +1462,11 @@ function Sn(e) {
 	}
 	return r("", 1), t;
 }
-function Cn(e) {
+function wn(e) {
 	let t = e.indexOf("/");
-	if (!e.startsWith("@") || t < 0) throw new J(`Cannot parse block name '${e}': expected '@npm-org/org-scope.short-name'.`);
+	if (!e.startsWith("@") || t < 0) throw new Y(`Cannot parse block name '${e}': expected '@npm-org/org-scope.short-name'.`);
 	let n = e.slice(0, t), r = e.slice(t + 1), i = r.indexOf(".");
-	if (i < 0) throw new J(`Cannot parse block name '${e}': base name '${r}' has no '.' separating org-scope from short-name.`);
+	if (i < 0) throw new Y(`Cannot parse block name '${e}': base name '${r}' has no '.' separating org-scope from short-name.`);
 	return {
 		facadeName: e,
 		baseName: r,
@@ -1463,23 +1475,23 @@ function Cn(e) {
 		shortName: r.slice(i + 1)
 	};
 }
-function wn(e) {
+function Tn(e) {
 	try {
-		let t = JSON.parse(e.read(Ut));
+		let t = JSON.parse(e.read(Wt));
 		return typeof t.version == "number" ? t.version : 0;
 	} catch {
 		return 0;
 	}
 }
-function Tn(e) {
-	let { fs: t, isSdkInternal: n } = e, r = n ? Sn(t) : xn(t);
-	if (r.length === 0) throw new J("No workspace packages found. Run 'block-tools structure init' to scaffold a block.");
-	let i = pn(r), a = wn(t);
-	Wt(a, 0);
+function En(e) {
+	let { fs: t, isSdkInternal: n } = e, r = n ? Cn(t) : Sn(t);
+	if (r.length === 0) throw new Y("No workspace packages found. Run 'block-tools structure init' to scaffold a block.");
+	let i = mn(r), a = Tn(t);
+	Gt(a, 0);
 	let o = i.find((e) => e.scope === "block") ?? i.find((e) => e.scope === "root");
-	if (!o) throw new J("Could not find a 'block' (or root-as-block) package to derive BlockVars from.");
-	let s = Cn(o.name);
-	return _n({
+	if (!o) throw new Y("Could not find a 'block' (or root-as-block) package to derive BlockVars from.");
+	let s = wn(o.name);
+	return vn({
 		isSdkInternal: n,
 		updateDepsOnly: e.updateDepsOnly ?? !1,
 		modules: i,
@@ -1490,7 +1502,7 @@ function Tn(e) {
 }
 //#endregion
 //#region src/structure/rules/shared/key-order.ts
-var Y = [
+var X = [
 	"name",
 	"version",
 	"private",
@@ -1514,7 +1526,7 @@ var Y = [
 ];
 //#endregion
 //#region src/structure/rules/root-package-json.ts
-function En(e) {
+function Dn(e) {
 	return {
 		version: "1.0.0",
 		private: !0,
@@ -1531,7 +1543,7 @@ function En(e) {
 			changeset: "changeset",
 			"version-packages": "changeset version",
 			"update-sdk": "block-tools structure refresh --update-deps-only",
-			update: "block-tools structure refresh --update-deps-only && pnpm i && block-tools structure refresh && pnpm fmt"
+			"upgrade-sdk": "block-tools structure refresh --update-deps-only && pnpm i && block-tools structure refresh && pnpm i && pnpm fmt"
 		},
 		peerDependencies: {
 			oxlint: "*",
@@ -1547,76 +1559,109 @@ function En(e) {
 		packageManager: "pnpm@9.12.0"
 	};
 }
-function Dn() {
-	F("packageManager", "pnpm@9.12.0"), Ot("name"), I("fmt", "turbo run fmt"), I("check", "turbo run check"), I("build", "turbo run build"), I("build:dev", "env PL_PKG_DEV=local turbo run build"), I("test", "env PL_PKG_DEV=local turbo run test --concurrency 1"), I("test:dry-run", "env PL_PKG_DEV=local turbo run test --dry-run=json"), I("mark-stable", "turbo run mark-stable"), I("do-pack", "turbo run do-pack"), I("watch", "turbo watch build"), I("changeset", "changeset"), I("version-packages", "changeset version"), I("update-sdk", "block-tools structure refresh --update-deps-only"), I("update", "block-tools structure refresh --update-deps-only && pnpm i && block-tools structure refresh && pnpm fmt"), V({
+function On() {
+	F("packageManager", "pnpm@9.12.0"), Ot("name"), I("fmt", "turbo run fmt"), I("check", "turbo run check"), I("build", "turbo run build"), I("build:dev", "env PL_PKG_DEV=local turbo run build"), I("test", "env PL_PKG_DEV=local turbo run test --concurrency 1"), I("test:dry-run", "env PL_PKG_DEV=local turbo run test --dry-run=json"), I("mark-stable", "turbo run mark-stable"), I("do-pack", "turbo run do-pack"), I("watch", "turbo watch build"), I("changeset", "changeset"), I("version-packages", "changeset version"), I("update-sdk", "block-tools structure refresh --update-deps-only"), L("update"), I("upgrade-sdk", "block-tools structure refresh --update-deps-only && pnpm i && block-tools structure refresh && pnpm i && pnpm fmt"), H({
 		"@changesets/cli": "catalog:",
 		"@milaboratories/ts-builder": "sdk:",
 		"@platforma-sdk/block-tools": "sdk:",
 		shx: "catalog:",
 		turbo: "catalog:"
-	}), H({
+	}), U({
 		oxlint: "*",
 		oxfmt: "*"
-	}), Nt((e, t) => {
+	}), Mt((e, t) => {
 		if (!/^(\/\/|--)/.test(e) || typeof t != "object" || !t) return !1;
 		let n = t;
 		return n.pnpm !== void 0 || n.overrides !== void 0;
-	}), G("dependencies"), G("devDependencies"), G("peerDependencies"), G("optionalDependencies"), W([...Y]);
+	}), K("dependencies"), K("devDependencies"), K("peerDependencies"), K("optionalDependencies"), G([...X]);
 }
 //#endregion
 //#region src/structure/engine/registry-client.ts
-var On = 2, kn = 500, An = 3e4;
-function jn(e) {
+var kn = 2, An = 500, jn = 3e4;
+function Mn(e) {
 	if (!e) return null;
 	let t = Number(e);
 	if (Number.isFinite(t) && t > 0) return t * 1e3;
 	let n = Date.parse(e);
 	return Number.isNaN(n) ? null : Math.max(0, n - Date.now());
 }
-async function Mn(e) {
+async function Nn(e) {
 	for (let t = 1;; t++) {
 		let n;
 		try {
-			n = await fetch(e, { signal: AbortSignal.timeout(An) });
+			n = await fetch(e, { signal: AbortSignal.timeout(jn) });
 		} catch (e) {
-			if (t > On) throw e;
-			await ue(kn * 2 ** (t - 1) * (.8 + .4 * Math.random()));
+			if (t > kn) throw e;
+			await le(An * 2 ** (t - 1) * (.8 + .4 * Math.random()));
 			continue;
 		}
 		if (n.ok) return n;
-		if (!(n.status === 429 || n.status >= 500) || t > On) throw Error(`registry returned HTTP ${n.status}`);
-		let r = jn(n.headers.get("retry-after"));
+		if (!(n.status === 429 || n.status >= 500) || t > kn) throw Error(`registry returned HTTP ${n.status}`);
+		let r = Mn(n.headers.get("retry-after"));
 		if (r != null) {
-			await ue(r);
+			await le(r);
 			continue;
 		}
-		await ue(kn * 2 ** (t - 1) * (.8 + .4 * Math.random()));
+		await le(An * 2 ** (t - 1) * (.8 + .4 * Math.random()));
 	}
 }
-function Nn() {
-	return { async getLatestVersion(e) {
-		let t = (await (await Mn(`https://registry.npmjs.org/-/package/${e}/dist-tags`)).json()).latest;
-		if (!t) throw Error("no 'latest' dist-tag in registry response");
-		return t;
-	} };
+function Pn() {
+	return {
+		async getLatestVersion(e) {
+			let t = (await (await Nn(`https://registry.npmjs.org/-/package/${e}/dist-tags`)).json()).latest;
+			if (!t) throw Error("no 'latest' dist-tag in registry response");
+			return t;
+		},
+		async getDeclaredDependency(e, t, n) {
+			let r = await (await Nn(`https://registry.npmjs.org/${e}/${t}`)).json();
+			return r.dependencies?.[n] ?? r.peerDependencies?.[n];
+		}
+	};
 }
-async function Pn(e, t) {
+async function Fn(e, t) {
 	let n = await Promise.all(t.map(async (t) => [t, await e.getLatestVersion(t)]));
 	return new Map(n);
 }
-function Fn(e) {
+function In(e) {
 	return (t) => e.get(t);
 }
-var In = [/^@platforma-sdk\//, /^@milaboratories\//];
-function Ln(e) {
-	return In.some((t) => t.test(e));
+var Ln = [/^@platforma-sdk\//, /^@milaboratories\//];
+function Rn(e) {
+	return Ln.some((t) => t.test(e));
 }
-async function Rn(e, t = Nn()) {
-	return e.length === 0 ? () => void 0 : Fn(await Pn(t, e));
+async function zn(e, t = Pn()) {
+	return e.length === 0 ? () => void 0 : In(await Fn(t, e));
+}
+function Bn(e) {
+	return /^\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.-]+)?$/.test(e);
+}
+async function Vn(e, t = Pn()) {
+	if (e.length === 0) return () => void 0;
+	let n = await Promise.all(e.map(async (e) => {
+		let n = await t.getDeclaredDependency(e.of, e.ofVersion ?? "latest", e.entry);
+		if (n === void 0) throw Error(`derived catalog pin '${e.entry}': package '${e.of}'${e.ofVersion ? `@${e.ofVersion}` : " (latest)"} declares no dependency '${e.entry}'. A derived pin requires the source to declare the dep as an exact version.`);
+		if (!Bn(n)) throw Error(`derived catalog pin '${e.entry}': package '${e.of}'${e.ofVersion ? `@${e.ofVersion}` : " (latest)"} declares '${e.entry}: ${n}', which is not an exact version. A derived pin requires an exact ('x.y.z') source dependency so the catalog can pin to it precisely.`);
+		return [e.entry, n];
+	})), r = new Map(n);
+	return (e) => r.get(e);
+}
+//#endregion
+//#region src/structure/rules/shared/retired-deps.ts
+//   @vitejs/plugin-vue   — bundled by ts-builder's internal vite config.
+var Hn = [
+	"vite",
+	"tsup",
+	"vue-tsc",
+	"@vitejs/plugin-vue",
+	"vite-plugin-dts",
+	"@platforma-sdk/eslint-config"
+];
+function Un() {
+	for (let e of Hn) V(e);
 }
 //#endregion
 //#region src/structure/rules/root-pnpm-workspace.ts
-var X = [
+var Z = [
 	"@platforma-sdk/model",
 	"@platforma-sdk/ui-vue",
 	"@platforma-sdk/workflow-tengo",
@@ -1626,29 +1671,32 @@ var X = [
 	"@platforma-sdk/package-builder",
 	"@milaboratories/ts-builder",
 	"@milaboratories/ts-configs"
-], zn = "0.0.0-init-must-fetch";
-for (let e of X) if (!Ln(e)) throw Error(`SDK_CATALOG_PACKAGES entry '${e}' matches no catalog bump pattern; its placeholder would never be resolved to npm latest on init. Add it to CATALOG_BUMP_PATTERNS or move it to the infra floor.`);
-var Bn = {
+], Wn = "0.0.0-init-must-fetch";
+for (let e of Z) if (!Rn(e)) throw Error(`SDK_CATALOG_PACKAGES entry '${e}' matches no catalog bump pattern; its placeholder would never be resolved to npm latest on init. Add it to CATALOG_BUMP_PATTERNS or move it to the infra floor.`);
+var Gn = {
 	turbo: "~2.8.11",
 	shx: "~0.4.0",
 	"@changesets/cli": "~2.29.8",
-	vitest: "~4.0.18",
-	vue: "3.5.24"
-}, Vn = "@platforma-open/milaboratories.runenv-python-3", Hn = "1.8.2";
-function Un(e) {
+	vitest: "~4.0.18"
+}, Kn = [{
+	entry: "vue",
+	of: "@platforma-sdk/ui-vue"
+}], qn = "@platforma-open/milaboratories.runenv-python-3", Jn = "1.8.2";
+function Yn(e) {
 	let t = e.modules.filter((e) => e.path !== "").map((e) => e.path).sort(), n = {};
-	for (let e of X) n[e] = zn;
-	return Object.assign(n, Bn), e.modules.some((e) => e.scope === "software") && (n[Vn] = Hn), {
+	for (let e of Z) n[e] = Wn;
+	return Object.assign(n, Gn), e.modules.some((e) => e.scope === "software") && (n[qn] = Jn), {
 		packages: t,
 		catalog: n
 	};
 }
-function Wn() {
-	It();
+function Xn() {
+	Ft();
+	for (let e of Hn) Bt(e);
 }
 //#endregion
 //#region src/structure/rules/root-gitignore.ts
-var Gn = [
+var Zn = [
 	".test_auth.json",
 	"node_modules/",
 	"dist/",
@@ -1663,34 +1711,34 @@ var Gn = [
 	".vscode/sftp.json",
 	"test-dry-run.json"
 ];
-function Kn() {
-	Bt(Gn);
+function Qn() {
+	Vt(Zn);
 }
 //#endregion
 //#region src/structure/rules/root.ts
-function qn() {
-	y("root", () => {
-		b(({ ctx: e }) => !e.isSdkInternal, () => {
-			S("turbo.json", E("root/turbo.json")), S(".vscode/settings.json", E("root/.vscode/settings.json")), C("package.json", D(() => En(v())), () => {
-				Dn();
-			}), C("pnpm-workspace.yaml", D(() => Un(v())), () => {
-				Wn();
-			}), C(".gitignore", E("root/.gitignore"), () => {
-				Kn();
+function $n() {
+	b("root", () => {
+		x(({ ctx: e }) => !e.isSdkInternal, () => {
+			C("turbo.json", D("root/turbo.json")), C(".vscode/settings.json", D("root/.vscode/settings.json")), w("package.json", O(() => Dn(y())), () => {
+				On();
+			}), w("pnpm-workspace.yaml", O(() => Yn(y())), () => {
+				Xn();
+			}), w(".gitignore", D("root/.gitignore"), () => {
+				Qn();
 			});
 		});
 	});
 }
 //#endregion
 //#region src/structure/rules/block-package-json.ts
-function Jn(e) {
+function er(e) {
 	let t = {};
-	for (let n of K(e, "workflow")) t.workflow = `${n.name}/dist/tengo/tpl/main.plj.gz`;
-	for (let n of K(e, "model")) t.model = `${n.name}/dist/model.json`;
-	for (let n of K(e, "ui")) t.ui = `${n.name}/dist`;
+	for (let n of q(e, "workflow")) t.workflow = `${n.name}/dist/tengo/tpl/main.plj.gz`;
+	for (let n of q(e, "model")) t.model = `${n.name}/dist/model.json`;
+	for (let n of q(e, "ui")) t.ui = `${n.name}/dist`;
 	return t;
 }
-function Yn(e) {
+function tr(e) {
 	if (Object.keys(e.components).length === 0) throw Error("block.components is empty — no workflow/model/ui module was discovered");
 	let t = e.meta, n = [
 		["block.meta.title", t.title],
@@ -1702,13 +1750,13 @@ function Yn(e) {
 	];
 	for (let [e, t] of n) if (typeof t != "string" || t === "") throw Error(`required block field '${e}' is empty`);
 }
-function Xn(e) {
+function nr(e) {
 	let t = e.blockVars, n = {
-		...q(e, "model"),
-		...q(e, "ui"),
-		...q(e, "workflow")
+		...J(e, "model"),
+		...J(e, "ui"),
+		...J(e, "workflow")
 	}, r = {
-		components: Jn(e),
+		components: er(e),
 		meta: {
 			title: t.shortName,
 			description: `${t.shortName} block`,
@@ -1720,7 +1768,7 @@ function Xn(e) {
 			}
 		}
 	};
-	return Yn(r), {
+	return tr(r), {
 		name: `${t.facadeName}.block`,
 		version: "1.0.0",
 		files: ["index.d.ts", "index.js"],
@@ -1738,24 +1786,24 @@ function Xn(e) {
 		block: r
 	};
 }
-function Zn() {
-	F("files", ["index.d.ts", "index.js"]), I("build", "shx rm -rf ./block-pack && block-tools pack"), I("mark-stable", "block-tools mark-stable -r 's3://milab-euce1-prod-pkgs-s3-block-registry/pub/releases/?region=eu-central-1'"), I("prepublishOnly", "block-tools pack && block-tools publish -r 's3://milab-euce1-prod-pkgs-s3-block-registry/pub/releases/?region=eu-central-1'"), I("do-pack", "shx rm -f *.tgz && block-tools pack && pnpm pack && shx mv *.tgz package.tgz"), U("model"), U("ui"), U("workflow"), z("@platforma-sdk/block-tools", "sdk:"), z("shx", "catalog:"), F("block.components", Jn(v())), G("dependencies"), G("devDependencies"), G("peerDependencies"), G("optionalDependencies"), W([...Y]);
+function rr() {
+	F("files", ["index.d.ts", "index.js"]), I("build", "shx rm -rf ./block-pack && block-tools pack"), I("mark-stable", "block-tools mark-stable -r 's3://milab-euce1-prod-pkgs-s3-block-registry/pub/releases/?region=eu-central-1'"), I("prepublishOnly", "block-tools pack && block-tools publish -r 's3://milab-euce1-prod-pkgs-s3-block-registry/pub/releases/?region=eu-central-1'"), I("do-pack", "shx rm -f *.tgz && block-tools pack && pnpm pack && shx mv *.tgz package.tgz"), W("model"), W("ui"), W("workflow"), B("@platforma-sdk/block-tools", "sdk:"), B("shx", "catalog:"), F("block.components", er(y())), K("dependencies"), K("devDependencies"), K("peerDependencies"), K("optionalDependencies"), G([...X]);
 }
 //#endregion
 //#region src/structure/rules/block.ts
-function Qn() {
-	y("block", () => {
-		S("index.js", E("block/index.js")), S("index.d.ts", E("block/index.d.ts")), w("logos/block-logo.png", $e("block/logos/block-logo.png")), w("logos/organization-logo.png", $e("block/logos/organization-logo.png")), C("package.json", D(() => Xn(v())), () => {
-			Zn();
+function ir() {
+	b("block", () => {
+		C("index.js", D("block/index.js")), C("index.d.ts", D("block/index.d.ts")), T("logos/block-logo.png", Qe("block/logos/block-logo.png")), T("logos/organization-logo.png", Qe("block/logos/organization-logo.png")), w("package.json", O(() => nr(y())), () => {
+			rr();
 		});
 	});
 }
 //#endregion
 //#region src/structure/rules/shared/colocated-tests.ts
-var Z = "src/**/*.test.ts";
+var Q = "src/**/*.test.ts";
 //#endregion
 //#region src/structure/rules/model-package-json.ts
-function $n(e) {
+function ar(e) {
 	return {
 		name: `${e.blockVars.facadeName}.model`,
 		version: "1.0.0",
@@ -1781,8 +1829,7 @@ function $n(e) {
 		devDependencies: {
 			"@milaboratories/ts-builder": "sdk:",
 			"@milaboratories/ts-configs": "sdk:",
-			"@platforma-sdk/block-tools": "sdk:",
-			vitest: "catalog:"
+			"@platforma-sdk/block-tools": "sdk:"
 		},
 		peerDependencies: {
 			"@types/node": "*",
@@ -1790,7 +1837,7 @@ function $n(e) {
 		}
 	};
 }
-function er() {
+function or() {
 	F("type", "module"), F("main", "dist/index.cjs"), F("module", "dist/index.js"), F("types", "dist/index.d.ts"), F("exports", {
 		".": {
 			types: "./dist/index.d.ts",
@@ -1798,30 +1845,29 @@ function er() {
 			import: "./dist/index.js"
 		},
 		"./dist/*": "./dist/*"
-	}), I("fmt", "ts-builder format"), I("watch", "ts-builder build --target block-model --watch"), I("build", "ts-builder build --target block-model && block-tools build-model"), I("check", "ts-builder check --target block-model"), R("@platforma-sdk/model", "sdk:"), V({
+	}), I("fmt", "ts-builder format"), I("watch", "ts-builder build --target block-model --watch"), I("build", "ts-builder build --target block-model && block-tools build-model"), I("check", "ts-builder check --target block-model"), z("@platforma-sdk/model", "sdk:"), H({
 		"@milaboratories/ts-builder": "sdk:",
 		"@milaboratories/ts-configs": "sdk:",
-		"@platforma-sdk/block-tools": "sdk:",
-		vitest: "catalog:"
-	}), H({
+		"@platforma-sdk/block-tools": "sdk:"
+	}), U({
 		"@types/node": "*",
 		typescript: "*"
-	}), b(x(Z), () => {
-		I("test", "vitest run --passWithNoTests"), z("@types/node", "*");
-	}), G("dependencies"), G("devDependencies"), G("peerDependencies"), G("optionalDependencies"), W([...Y]);
+	}), x(({ ctx: e }) => !e.isSdkInternal, () => x(S(Q), () => {
+		I("test", "vitest run --passWithNoTests"), B("vitest", "catalog:"), B("@types/node", "*");
+	}, () => V("vitest"))), Un(), Ot("tsup"), L("lint"), K("dependencies"), K("devDependencies"), K("peerDependencies"), K("optionalDependencies"), G([...X]);
 }
 //#endregion
 //#region src/structure/rules/model.ts
-function tr() {
-	y("model", () => {
-		b(x(Z), () => S("tsconfig.json", E("model/tsconfig.node.json")), () => S("tsconfig.json", E("model/tsconfig.json"))), S(".oxlintrc.json", E("model/.oxlintrc.json")), S(".oxfmtrc.json", E("model/.oxfmtrc.json")), w("src/index.ts", E("model/src/index.ts")), C("package.json", D(() => $n(v())), () => {
-			er();
+function sr() {
+	b("model", () => {
+		x(S(Q), () => C("tsconfig.json", D("model/tsconfig.node.json")), () => C("tsconfig.json", D("model/tsconfig.json"))), C(".oxlintrc.json", D("model/.oxlintrc.json")), C(".oxfmtrc.json", D("model/.oxfmtrc.json")), T("src/index.ts", D("model/src/index.ts")), w("package.json", O(() => ar(y())), () => {
+			or();
 		});
 	});
 }
 //#endregion
 //#region src/structure/rules/ui-package-json.ts
-function nr(e) {
+function cr(e) {
 	return {
 		name: `${e.blockVars.facadeName}.ui`,
 		version: "1.0.0",
@@ -1836,37 +1882,41 @@ function nr(e) {
 		dependencies: {
 			"@platforma-sdk/ui-vue": "sdk:",
 			vue: "catalog:",
-			...q(e, "model")
+			...J(e, "model")
 		},
 		devDependencies: {
 			"@milaboratories/ts-builder": "sdk:",
-			"@milaboratories/ts-configs": "sdk:",
-			vitest: "catalog:"
+			"@milaboratories/ts-configs": "sdk:"
 		},
-		peerDependencies: { typescript: "*" }
+		peerDependencies: {
+			"@types/node": "*",
+			typescript: "*"
+		}
 	};
 }
-function rr() {
-	F("type", "module"), I("fmt", "ts-builder format"), I("dev", "ts-builder serve --target block-ui"), I("watch", "ts-builder build --target block-ui --watch"), I("build", "ts-builder build --target block-ui"), I("check", "ts-builder check --target block-ui"), R("@platforma-sdk/ui-vue", "sdk:"), R("vue", "catalog:"), U("model"), V({
+function lr() {
+	F("type", "module"), I("fmt", "ts-builder format"), I("dev", "ts-builder serve --target block-ui"), I("watch", "ts-builder build --target block-ui --watch"), I("build", "ts-builder build --target block-ui"), I("check", "ts-builder check --target block-ui"), z("@platforma-sdk/ui-vue", "sdk:"), z("vue", "catalog:"), W("model"), H({
 		"@milaboratories/ts-builder": "sdk:",
-		"@milaboratories/ts-configs": "sdk:",
-		vitest: "catalog:"
-	}), B("vue-tsc"), H({ typescript: "*" }), B("@types/node"), b(x(Z), () => {
-		I("test", "vitest run --passWithNoTests"), z("@types/node", "*");
-	}), G("dependencies"), G("devDependencies"), G("peerDependencies"), G("optionalDependencies"), W([...Y]);
+		"@milaboratories/ts-configs": "sdk:"
+	}), Un(), L("preview"), L("lint"), U({
+		"@types/node": "*",
+		typescript: "*"
+	}), x(({ ctx: e }) => !e.isSdkInternal, () => x(S(Q), () => {
+		I("test", "vitest run --passWithNoTests"), B("vitest", "catalog:"), B("@types/node", "*");
+	}, () => V("vitest"))), K("dependencies"), K("devDependencies"), K("peerDependencies"), K("optionalDependencies"), G([...X]);
 }
 //#endregion
 //#region src/structure/rules/ui.ts
-function ir() {
-	y("ui", () => {
-		b(x(Z), () => S("tsconfig.json", E("ui/tsconfig.node.json")), () => S("tsconfig.json", E("ui/tsconfig.json"))), S(".oxlintrc.json", E("ui/.oxlintrc.json")), S(".oxfmtrc.json", E("ui/.oxfmtrc.json")), Qe("index.html", E("ui/index.html")), w("src/main.ts", E("ui/src/main.ts")), w("src/app.ts", tt("ui/src/app.tpl.ts", () => ({ modelPkg: `${nt().facadeName}.model` }))), w("src/MainPage.vue", tt("ui/src/MainPage.tpl.vue", () => ({ shortName: nt().shortName }))), C("package.json", D(() => nr(v())), () => {
-			rr();
+function ur() {
+	b("ui", () => {
+		x(S(Q), () => C("tsconfig.json", D("ui/tsconfig.node.json")), () => C("tsconfig.json", D("ui/tsconfig.json"))), C(".oxlintrc.json", D("ui/.oxlintrc.json")), C(".oxfmtrc.json", D("ui/.oxfmtrc.json")), Ze("index.html", D("ui/index.html")), T("src/main.ts", D("ui/src/main.ts")), T("src/app.ts", et("ui/src/app.tpl.ts", () => ({ modelPkg: `${tt().facadeName}.model` }))), T("src/MainPage.vue", et("ui/src/MainPage.tpl.vue", () => ({ shortName: tt().shortName }))), w("package.json", O(() => cr(y())), () => {
+			lr();
 		});
 	});
 }
 //#endregion
 //#region src/structure/rules/workflow-package-json.ts
-function ar(e) {
+function dr(e) {
 	return {
 		name: `${e.blockVars.facadeName}.workflow`,
 		version: "1.0.0",
@@ -1878,45 +1928,48 @@ function ar(e) {
 		},
 		dependencies: {
 			"@platforma-sdk/workflow-tengo": "sdk:",
-			...hn(e, "software")
+			...gn(e, "software")
 		},
 		devDependencies: {
 			"@platforma-sdk/tengo-builder": "sdk:",
 			"@platforma-sdk/test": "sdk:",
-			vitest: "catalog:",
 			shx: "catalog:"
 		}
 	};
 }
-function or() {
-	F("type", "module"), I("build", "shx rm -rf dist && pl-tengo build"), I("check", "pl-tengo check"), I("format", "/usr/bin/env emacs --script ./format.el || echo 'No emacs.'"), b(x(Z), () => {
-		I("test", "vitest run --passWithNoTests");
-	}), R("@platforma-sdk/workflow-tengo", "sdk:"), U("software"), V({
+function fr() {
+	F("type", "module"), I("build", "shx rm -rf dist && pl-tengo build"), I("check", "pl-tengo check"), I("format", "/usr/bin/env emacs --script ./format.el || echo 'No emacs.'"), x(({ ctx: e }) => !e.isSdkInternal, () => x(S(Q), () => {
+		I("test", "vitest run --passWithNoTests"), H({ vitest: "catalog:" });
+	}, () => V("vitest"))), z("@platforma-sdk/workflow-tengo", "sdk:"), W("software"), H({
 		"@platforma-sdk/tengo-builder": "sdk:",
 		"@platforma-sdk/test": "sdk:",
-		vitest: "catalog:",
 		shx: "catalog:"
-	}), G("dependencies"), G("devDependencies"), G("peerDependencies"), G("optionalDependencies"), W([...Y]);
+	}), Un(), K("dependencies"), K("devDependencies"), K("peerDependencies"), K("optionalDependencies"), G([...X]);
 }
 //#endregion
 //#region src/structure/rules/workflow.ts
-function sr() {
-	y("workflow", () => {
-		S("tsconfig.json", E("workflow/tsconfig.json")), S("format.el", E("workflow/format.el")), Qe("vitest.config.mts", E("workflow/vitest.config.mts")), T("index.js"), T("index.d.ts"), w("src/main.tpl.tengo", tt("workflow/src/main.tpl.tengo", () => ({ shortName: nt().shortName }))), C("package.json", D(() => ar(v())), () => {
-			or();
+function pr() {
+	b("workflow", () => {
+		C("format.el", D("workflow/format.el")), x(({ ctx: e }) => !e.isSdkInternal, () => x(S(Q), () => {
+			C("tsconfig.json", D("workflow/tsconfig.json")), Ze("vitest.config.mts", D("workflow/vitest.config.mts"));
+		}, () => {
+			E("tsconfig.json"), E("vitest.config.mts");
+		})), E("index.js"), E("index.d.ts"), T("src/main.tpl.tengo", et("workflow/src/main.tpl.tengo", () => ({ shortName: tt().shortName }))), w("package.json", O(() => dr(y())), () => {
+			fr();
 		});
 	});
 }
 //#endregion
 //#region src/structure/rules/test-package-json.ts
-function cr(e) {
+function mr(e) {
 	return {
 		name: `${e.blockVars.facadeName}.test`,
 		version: "1.0.0",
 		private: !0,
 		type: "module",
 		scripts: {
-			check: "ts-builder type-check --target block-test",
+			fmt: "ts-builder format",
+			check: "ts-builder check --target block-test",
 			test: "vitest run --passWithNoTests"
 		},
 		peerDependencies: { typescript: "*" },
@@ -1928,26 +1981,26 @@ function cr(e) {
 		}
 	};
 }
-function lr() {
-	F("type", "module"), I("check", "ts-builder type-check --target block-test"), I("test", "vitest run --passWithNoTests"), V({
+function hr() {
+	F("type", "module"), I("fmt", "ts-builder format"), I("check", "ts-builder check --target block-test"), I("test", "vitest run --passWithNoTests"), L("lint"), H({
 		"@platforma-sdk/test": "sdk:",
 		"@milaboratories/ts-builder": "sdk:",
 		"@milaboratories/ts-configs": "sdk:",
 		vitest: "catalog:"
-	}), H({ typescript: "*" }), B("@types/node"), G("dependencies"), G("devDependencies"), G("peerDependencies"), G("optionalDependencies"), W([...Y]);
+	}), U({ typescript: "*" }), V("@types/node"), Un(), K("dependencies"), K("devDependencies"), K("peerDependencies"), K("optionalDependencies"), G([...X]);
 }
 //#endregion
 //#region src/structure/rules/test.ts
-function ur() {
-	y("test", () => {
-		S("tsconfig.json", E("test/tsconfig.json")), Qe("vitest.config.mts", E("test/vitest.config.mts")), w("src/demo.test.ts", et("import { expect, test } from \"vitest\";\n\ntest(\"scaffolded block sanity check\", () => {\n  expect(true).toBe(true);\n});\n")), C("package.json", D(() => cr(v())), () => {
-			lr();
+function gr() {
+	b("test", () => {
+		C("tsconfig.json", D("test/tsconfig.json")), C(".oxlintrc.json", D("test/.oxlintrc.json")), C(".oxfmtrc.json", D("test/.oxfmtrc.json")), Ze("vitest.config.mts", D("test/vitest.config.mts")), T("src/demo.test.ts", $e("import { expect, test } from \"vitest\";\n\ntest(\"scaffolded block sanity check\", () => {\n  expect(true).toBe(true);\n});\n")), w("package.json", O(() => mr(y())), () => {
+			hr();
 		});
 	});
 }
 //#endregion
 //#region src/structure/rules/software-package-json.ts
-function dr() {
+function _r() {
 	return { entrypoints: { main: { binary: {
 		artifact: {
 			type: "python",
@@ -1962,7 +2015,7 @@ function dr() {
 		cmd: ["python", "{pkg}/main.py"]
 	} } } };
 }
-function fr(e) {
+function vr(e) {
 	return {
 		name: `${e.blockVars.facadeName}.software`,
 		version: "1.0.0",
@@ -1975,52 +2028,56 @@ function fr(e) {
 			changeset: "changeset",
 			"version-packages": "changeset version"
 		},
-		"block-software": dr(),
+		"block-software": _r(),
 		devDependencies: {
 			"@platforma-open/milaboratories.runenv-python-3": "catalog:",
 			"@platforma-sdk/package-builder": "sdk:"
 		}
 	};
 }
-function pr() {
-	F("type", "module"), F("files", ["./dist/**/*"]), I("build", "pl-pkg build"), I("prepublishOnly", "pl-pkg prepublish"), I("changeset", "changeset"), I("version-packages", "changeset version"), V({
+function yr() {
+	F("type", "module"), F("files", ["./dist/**/*"]), I("build", "pl-pkg build"), I("prepublishOnly", "pl-pkg prepublish"), I("changeset", "changeset"), I("version-packages", "changeset version"), H({
 		"@platforma-open/milaboratories.runenv-python-3": "catalog:",
 		"@platforma-sdk/package-builder": "sdk:"
-	}), G("dependencies"), G("devDependencies"), G("peerDependencies"), G("optionalDependencies"), W([...Y]);
+	}), K("dependencies"), K("devDependencies"), K("peerDependencies"), K("optionalDependencies"), G([...X]);
 }
 //#endregion
 //#region src/structure/rules/software.ts
-var mr = "import sys\n\nprint(\"Hello from Python, \" + sys.argv[1] + \"!\")\n", hr = "# No dependencies specified for this script\n";
-function gr() {
-	y("software", () => {
-		w("src/main.py", et(mr)), w("src/requirements.txt", et(hr)), C("package.json", D(() => fr(v())), () => {
-			pr();
+var br = "import sys\n\nprint(\"Hello from Python, \" + sys.argv[1] + \"!\")\n", xr = "# No dependencies specified for this script\n";
+function Sr() {
+	b("software", () => {
+		T("src/main.py", $e(br)), T("src/requirements.txt", $e(xr)), w("package.json", O(() => vr(y())), () => {
+			yr();
 		});
 	});
 }
-function _r() {
-	y("model", () => {
-		T("eslint.config.mjs"), T("vite.config.mts");
-	}), y("ui", () => {
-		T("eslint.config.mjs"), T("vite.config.ts"), T("tsconfig.app.json"), T("tsconfig.node.json");
-	}), y("test", () => {
-		T("eslint.config.mjs");
-	}), y("root", () => {
-		T(".prettierrc"), C("package.json", D(() => En(v())), () => {
-			kt("pretty"), B("@platforma-sdk/blocks-deps-updater");
+function Cr() {
+	b("model", () => {
+		E("eslint.config.mjs"), E("vite.config.mts");
+	}), b("ui", () => {
+		E("eslint.config.mjs"), E("vite.config.ts"), E("tsconfig.app.json"), E("tsconfig.node.json");
+	}), b("test", () => {
+		E("eslint.config.mjs");
+	}), b("root", () => {
+		E(".prettierrc"), w("package.json", O(() => Dn(y())), () => {
+			L("pretty"), V("@platforma-sdk/blocks-deps-updater");
 		});
 	});
 }
 //#endregion
 //#region src/structure/rules/root-catalog-bump.ts
-function vr() {
-	Ze(() => {
-		y("root", () => {
-			b(({ ctx: e }) => !e.isSdkInternal, () => {
-				C("pnpm-workspace.yaml", D(() => Un(v())), () => {
-					for (let e of X) zt(e);
-					for (let [e, t] of Object.entries(Bn)) Rt(e, t);
-					v().modules.some((e) => e.scope === "software") && Rt(Vn, Hn);
+function wr() {
+	Xe(() => {
+		b("root", () => {
+			x(({ ctx: e }) => !e.isSdkInternal, () => {
+				w("pnpm-workspace.yaml", O(() => Yn(y())), () => {
+					for (let e of Z) Rt(e);
+					for (let e of Kn) zt(e.entry, {
+						of: e.of,
+						ofVersion: e.ofVersion
+					});
+					for (let [e, t] of Object.entries(Gn)) Lt(e, t);
+					y().modules.some((e) => e.scope === "software") && Lt(qn, Jn);
 				});
 			});
 		});
@@ -2028,24 +2085,25 @@ function vr() {
 }
 //#endregion
 //#region src/structure/structure-definition.ts
-var yr = We(() => {
-	qn(), Qn(), tr(), ir(), sr(), ur(), gr(), _r(), vr();
+var Tr = Ue(() => {
+	$n(), ir(), sr(), ur(), pr(), gr(), Sr(), Cr(), wr();
 });
 //#endregion
 //#region src/structure/cli/run-structure.ts
-async function br() {
-	return Rn(X.filter(Ln));
+async function Er() {
+	return zn(Z.filter(Rn));
 }
-async function xr(e) {
-	let t = f.resolve(e.blockPath), n = e.mode === "check", r = new ke(t), i = new Ae(e.templatesRoot), a = sn(yr, r, Tn({
+async function Dr(e) {
+	let t = p.resolve(e.blockPath), n = e.mode === "check", r = new Oe(t), i = new ke(e.templatesRoot), a = cn(Tr, r, En({
 		fs: r,
 		isSdkInternal: e.isSdkInternal,
 		updateDepsOnly: e.updateDepsOnly,
 		dryRun: n
 	}), {
 		templates: i,
-		registryLookup: e.updateDepsOnly ? await br() : void 0,
-		rediscover: () => Tn({
+		registryLookup: e.updateDepsOnly ? await Er() : void 0,
+		derivedPinLookup: e.updateDepsOnly ? await Vn(Kn) : void 0,
+		rediscover: () => En({
 			fs: r,
 			isSdkInternal: e.isSdkInternal,
 			updateDepsOnly: !1,
@@ -2057,22 +2115,22 @@ async function xr(e) {
 		changes: a.changes
 	};
 }
-function Sr(e, t) {
+function Or(e, t) {
 	if (t.length === 0) return `  ${e}: up to date (0 changes)`;
 	let n = t.map((e) => `    ${e.action.padEnd(6)} ${e.primitive.padEnd(8)} ${e.path} [${e.scope}]`);
 	return `  ${e}: ${t.length} change(s)\n${n.join("\n")}`;
 }
 //#endregion
 //#region src/cmd/structure/check.ts
-var Cr = class e extends u {
+var kr = class e extends d {
 	static description = "Check block(s) against the canonical structure (read-only). Exits non-zero if any diff would land — used as the CI gate.";
 	static examples = ["<%= config.bin %> <%= command.id %> ./my-block", "<%= config.bin %> <%= command.id %> --sdk-internal etc/blocks/*"];
 	static strict = !1;
-	static flags = { "sdk-internal": d.boolean({ description: "block(s) live inside the SDK monorepo; skip root-scope rules" }) };
+	static flags = { "sdk-internal": f.boolean({ description: "block(s) live inside the SDK monorepo; skip root-scope rules" }) };
 	async run() {
-		let { argv: t, flags: n } = await this.parse(e), r = t.length > 0 ? t : ["."], i = f.join(this.config.root, "src", "structure", "templates"), a = !1;
+		let { argv: t, flags: n } = await this.parse(e), r = t.length > 0 ? t : ["."], i = p.join(this.config.root, "src", "structure", "templates"), a = !1;
 		for (let e of r) {
-			let t = await xr({
+			let t = await Dr({
 				blockPath: e,
 				isSdkInternal: n["sdk-internal"],
 				updateDepsOnly: !1,
@@ -2080,38 +2138,38 @@ var Cr = class e extends u {
 				templatesRoot: i,
 				log: (e) => this.log(e)
 			});
-			this.log(Sr(e, t.changes)), t.changes.length > 0 && (a = !0);
+			this.log(Or(e, t.changes)), t.changes.length > 0 && (a = !0);
 		}
 		a && this.error("Structure check failed: one or more blocks are out of date. Run `structure refresh`.", { exit: 1 });
 	}
-}, Q = ["python"], wr = class extends Error {
+}, $ = ["python"], Ar = class extends Error {
 	constructor(e) {
 		super(`Missing required flag --${e} in --non-interactive mode. Supply every BlockVars flag, or drop --non-interactive to be prompted.`), this.name = "InitFlagError";
 	}
 };
-async function $(e, t, n, r) {
+async function jr(e, t, n, r) {
 	if (e !== void 0 && e !== "") return e;
-	if (n) throw new wr(t);
+	if (n) throw new Ar(t);
 	return r();
 }
-async function Tr(e) {
-	let t = await $(e.npmOrg, "npm-org", e.nonInteractive, () => fe({
+async function Mr(e) {
+	let t = await jr(e.npmOrg, "npm-org", e.nonInteractive, () => de({
 		message: "npm org (e.g. @platforma-open):",
 		default: "@platforma-open"
-	})), n = await $(e.orgScope, "org-scope", e.nonInteractive, () => fe({ message: "org scope (e.g. my-org):" })), r = await $(e.shortName, "short-name", e.nonInteractive, () => fe({ message: "block short name (e.g. mixcr-clonotyping):" })), i;
-	i = e.withSoftware === void 0 ? e.nonInteractive ? !1 : await de({
+	})), n = await jr(e.orgScope, "org-scope", e.nonInteractive, () => de({ message: "org scope (e.g. my-org):" })), r = await jr(e.shortName, "short-name", e.nonInteractive, () => de({ message: "block short name (e.g. mixcr-clonotyping):" })), i;
+	i = e.withSoftware === void 0 ? e.nonInteractive ? !1 : await ue({
 		message: "Include a software module?",
 		default: !1
 	}) : e.withSoftware;
 	let a;
 	if (i) {
-		if (a = await $(e.platform, "platform", e.nonInteractive, () => pe({
+		if (a = await jr(e.platform, "platform", e.nonInteractive, () => fe({
 			message: "Software platform:",
-			choices: Q.map((e) => ({
+			choices: $.map((e) => ({
 				name: e,
 				value: e
 			}))
-		})), !Q.includes(a)) throw Error(`Unsupported --platform '${a}'. Only ${Q.join(", ")} ${Q.length === 1 ? "is" : "are"} supported at v1.`);
+		})), !$.includes(a)) throw Error(`Unsupported --platform '${a}'. Only ${$.join(", ")} ${$.length === 1 ? "is" : "are"} supported at v1.`);
 	} else if (e.platform) throw Error("--platform was given but software is disabled (--no-software).");
 	return {
 		facadeName: `${t}/${n}.${r}`,
@@ -2122,59 +2180,60 @@ async function Tr(e) {
 		softwarePlatform: a
 	};
 }
-async function Er(e) {
-	let t = e.vars, n = gn(t), r = new ke(e.blockPath), i = new Ae(e.templatesRoot), a = _n({
+async function Nr(e) {
+	let t = e.vars, n = _n(t), r = new Oe(e.blockPath), i = new ke(e.templatesRoot), a = vn({
 		blockVars: t,
 		modules: n,
 		isSdkInternal: !1,
 		version: 1,
 		dryRun: !1
-	}), o = X.filter(Ln), s;
+	}), o = Z.filter(Rn), s, c;
 	try {
-		s = await Rn(o);
+		s = await zn(o), c = await Vn(Kn);
 	} catch (e) {
 		throw Error(`init requires network access to resolve SDK catalog versions from npm, but the registry lookup failed: ${e instanceof Error ? e.message : String(e)}`);
 	}
-	return sn(yr, r, a, {
+	return cn(Tr, r, a, {
 		templates: i,
 		initMode: !0,
-		registryLookup: s
+		registryLookup: s,
+		derivedPinLookup: c
 	}), e.log(`Initialised block '${t.facadeName}'${t.softwarePlatform ? ` (software: ${t.softwarePlatform})` : " (no software)"} at ${e.blockPath}`), t;
 }
 //#endregion
 //#region src/cmd/index.ts
-var Dr = {
-	"build-meta": me,
-	"build-model": ge,
-	"list-overview-snapshots": _e,
-	"mark-stable": ve,
-	pack: ye,
-	publish: xe,
-	"refresh-registry": Se,
-	"restore-overview-from-snapshot": Ce,
-	"update-deps": we,
-	"upload-package-v1": Oe,
-	"structure:check": Cr,
-	"structure:init": class e extends u {
+var Pr = {
+	"build-meta": pe,
+	"build-model": he,
+	"list-overview-snapshots": ge,
+	"mark-stable": _e,
+	pack: ve,
+	publish: be,
+	"refresh-registry": xe,
+	"restore-overview-from-snapshot": Se,
+	"update-deps": Ce,
+	"upload-package-v1": De,
+	"structure:check": kr,
+	"structure:init": class e extends d {
 		static description = "Scaffold a fresh Platforma block from the canonical structure. Missing flags are prompted unless --non-interactive.";
 		static examples = ["<%= config.bin %> <%= command.id %> --npm-org @platforma-open --org-scope my-org --short-name demo --no-software --non-interactive", "<%= config.bin %> <%= command.id %> ./demo --npm-org @platforma-open --org-scope my-org --short-name demo --with-software --platform python --non-interactive"];
-		static args = { path: te.string({ description: "target directory (default: <short-name> under the current directory)" }) };
+		static args = { path: u.string({ description: "target directory (default: <short-name> under the current directory)" }) };
 		static flags = {
-			"npm-org": d.string({ description: "npm org, e.g. @platforma-open" }),
-			"org-scope": d.string({ description: "org scope, e.g. my-org" }),
-			"short-name": d.string({ description: "block short name, e.g. mixcr-clonotyping" }),
-			"with-software": d.boolean({ description: "include a software module" }),
-			"no-software": d.boolean({ description: "omit the software module" }),
-			platform: d.string({
+			"npm-org": f.string({ description: "npm org, e.g. @platforma-open" }),
+			"org-scope": f.string({ description: "org scope, e.g. my-org" }),
+			"short-name": f.string({ description: "block short name, e.g. mixcr-clonotyping" }),
+			"with-software": f.boolean({ description: "include a software module" }),
+			"no-software": f.boolean({ description: "omit the software module" }),
+			platform: f.string({
 				description: "software platform (single-valued)",
-				options: [...Q]
+				options: [...$]
 			}),
-			"non-interactive": d.boolean({ description: "error on any missing flag instead of prompting" })
+			"non-interactive": f.boolean({ description: "error on any missing flag instead of prompting" })
 		};
 		async run() {
 			let { args: t, flags: n } = await this.parse(e);
 			n["with-software"] && n["no-software"] && this.error("--with-software and --no-software are mutually exclusive.");
-			let r = n["with-software"] ? !0 : n["no-software"] ? !1 : void 0, i = await Tr({
+			let r = n["with-software"] ? !0 : n["no-software"] ? !1 : void 0, i = await Mr({
 				npmOrg: n["npm-org"],
 				orgScope: n["org-scope"],
 				shortName: n["short-name"],
@@ -2182,15 +2241,15 @@ var Dr = {
 				platform: n.platform,
 				nonInteractive: n["non-interactive"]
 			});
-			await Er({
+			await Nr({
 				vars: i,
-				blockPath: t.path ? f.resolve(t.path) : f.resolve(process.cwd(), i.shortName),
-				templatesRoot: f.join(this.config.root, "src", "structure", "templates"),
+				blockPath: t.path ? p.resolve(t.path) : p.resolve(process.cwd(), i.shortName),
+				templatesRoot: p.join(this.config.root, "src", "structure", "templates"),
 				log: (e) => this.log(e)
 			});
 		}
 	},
-	"structure:refresh": class e extends u {
+	"structure:refresh": class e extends d {
 		static description = "Bring block(s) up to date with the canonical structure. Applies rules, writes files, bumps .structure version. Default mode is offline; --update-deps-only fires only catalog-bump rules (network).";
 		static examples = [
 			"<%= config.bin %> <%= command.id %> ./my-block",
@@ -2199,13 +2258,13 @@ var Dr = {
 		];
 		static strict = !1;
 		static flags = {
-			"sdk-internal": d.boolean({ description: "block(s) live inside the SDK monorepo; skip root-scope rules" }),
-			"update-deps-only": d.boolean({ description: "fire ONLY catalog-bump rules (npm network). Follow with `pnpm install` then a plain refresh." })
+			"sdk-internal": f.boolean({ description: "block(s) live inside the SDK monorepo; skip root-scope rules" }),
+			"update-deps-only": f.boolean({ description: "fire ONLY catalog-bump rules (npm network). Follow with `pnpm install` then a plain refresh." })
 		};
 		async run() {
-			let { argv: t, flags: n } = await this.parse(e), r = t.length > 0 ? t : ["."], i = f.join(this.config.root, "src", "structure", "templates");
+			let { argv: t, flags: n } = await this.parse(e), r = t.length > 0 ? t : ["."], i = p.join(this.config.root, "src", "structure", "templates");
 			for (let e of r) {
-				let t = await xr({
+				let t = await Dr({
 					blockPath: e,
 					isSdkInternal: n["sdk-internal"],
 					updateDepsOnly: n["update-deps-only"],
@@ -2213,12 +2272,12 @@ var Dr = {
 					templatesRoot: i,
 					log: (e) => this.log(e)
 				});
-				this.log(Sr(e, t.changes));
+				this.log(Or(e, t.changes));
 			}
 		}
 	}
 };
 //#endregion
-export { Dr as COMMANDS };
+export { Pr as COMMANDS };
 
 //# sourceMappingURL=cli.mjs.map