@powerhousedao/shared 6.0.0-dev.216 → 6.0.0-dev.218

package/dist/registry/index.d.ts

@@ -1,6 +1,11 @@
 import { B as RegistryPackageStatus, F as PackageInfo, I as RegistryPackage, L as RegistryPackageList, R as RegistryPackageMap, kt as DEFAULT_REGISTRY_URL, z as RegistryPackageSource } from "../types-1E8sqdB9.js";
 
 //#region registry/registry.d.ts
+/**
+ * Extract the host portion of a registry URL — what npm uses as the key in
+ * `~/.npmrc` for per-registry tokens (e.g. `//registry.dev.vetra.io/`).
+ */
+declare function registryAuthKey(registryUrl: string): string;
 interface ResolveRegistryUrlOptions {
   /** Explicit registry URL (e.g. from --registry flag). Highest priority. */
   registry?: string;
@@ -25,6 +30,9 @@ interface NpmPublishOptions {
   cwd: string;
   /** Additional arguments forwarded to npm publish. */
   args?: string[];
+  /** Bearer token for the registry. When set, passed via a registry-scoped
+   *  `_authToken` config flag rather than read from the user's `.npmrc`. */
+  authToken?: string;
 }
 interface NpmPublishResult {
   /** stdout from npm publish. */
@@ -33,8 +41,18 @@ interface NpmPublishResult {
 /**
  * Run `npm publish` against the given registry.
  * Uses spawn with args array to avoid shell injection.
+ *
+ * When `authToken` is provided, the token is passed via a registry-scoped
+ * `--//host/:_authToken=<token>` flag (npm's standard form for per-registry
+ * tokens) so we never have to write to `~/.npmrc`.
  */
 declare function npmPublish(options: NpmPublishOptions): Promise<NpmPublishResult>;
+/**
+ * Write `_authToken=<token>` for the given registry host into `~/.npmrc`,
+ * preserving any other lines. Replaces the existing entry for the same key
+ * if present. Returns the absolute path to the npmrc that was written.
+ */
+declare function writeRegistryAuthToken(registryUrl: string, token: string): Promise<string>;
 interface NpmUnpublishOptions {
   /** Registry URL to unpublish from. */
   registryUrl: string;
@@ -44,6 +62,8 @@ interface NpmUnpublishOptions {
   spec: string;
   /** Additional arguments forwarded to npm unpublish. */
   args?: string[];
+  /** Bearer token for the registry (same semantics as `NpmPublishOptions.authToken`). */
+  authToken?: string;
 }
 interface NpmUnpublishResult {
   /** stdout from npm unpublish. */
@@ -56,5 +76,5 @@ interface NpmUnpublishResult {
  */
 declare function npmUnpublish(options: NpmUnpublishOptions): Promise<NpmUnpublishResult>;
 //#endregion
-export { DEFAULT_REGISTRY_URL, NpmPublishOptions, NpmPublishResult, NpmUnpublishOptions, NpmUnpublishResult, PackageInfo, RegistryPackage, RegistryPackageList, RegistryPackageMap, RegistryPackageSource, RegistryPackageStatus, ResolveRegistryUrlOptions, checkNpmAuth, npmPublish, npmUnpublish, resolveRegistryUrl };
+export { DEFAULT_REGISTRY_URL, NpmPublishOptions, NpmPublishResult, NpmUnpublishOptions, NpmUnpublishResult, PackageInfo, RegistryPackage, RegistryPackageList, RegistryPackageMap, RegistryPackageSource, RegistryPackageStatus, ResolveRegistryUrlOptions, checkNpmAuth, npmPublish, npmUnpublish, registryAuthKey, resolveRegistryUrl, writeRegistryAuthToken };
 //# sourceMappingURL=index.d.ts.map

package/dist/registry/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../../registry/registry.ts"],"mappings":";;;UAUiB,yBAAA;;EAEf,QAAA;;EAEA,WAAA;EAJwC;EAMxC,GAAA,GAAM,MAAA;AAAA;;;;iBAMQ,kBAAA,CAAmB,OAAA,EAAS,yBAAA;;;AAA5C;;iBAiBsB,YAAA,CAAa,WAAA,WAAsB,OAAA;AAAA,UAIxC,iBAAA;EArBoD;EAuBnE,WAAA;EANgC;EAQhC,GAAA;EARiC;EAUjC,IAAA;AAAA;AAAA,UAGe,gBAAA;;EAEf,MAAA;AAAA;;;;;iBAOoB,UAAA,CACpB,OAAA,EAAS,iBAAA,GACR,OAAA,CAAQ,gBAAA;AAAA,UAOM,mBAAA;;EAEf,WAAA;EAlBM;EAoBN,GAAA;EAb8B;EAe9B,IAAA;EAdS;EAgBT,IAAA;AAAA;AAAA,UAGe,kBAAA;EAlBP;EAoBR,MAAA;AAAA;;;;;AAbF;iBAqBsB,YAAA,CACpB,OAAA,EAAS,mBAAA,GACR,OAAA,CAAQ,kBAAA"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../registry/registry.ts"],"mappings":";;;;;;;iBAgBgB,eAAA,CAAgB,WAAA;AAAA,UAQf,yBAAA;;EAEf,QAAA;EAViD;EAYjD,WAAA;EAJwC;EAMxC,GAAA,GAAM,MAAA;AAAA;;;;iBAMQ,kBAAA,CAAmB,OAAA,EAAS,yBAAA;;;AAA5C;;iBAiBsB,YAAA,CAAa,WAAA,WAAsB,OAAA;AAAA,UAIxC,iBAAA;EArBoD;EAuBnE,WAAA;EANgC;EAQhC,GAAA;EARiC;EAUjC,IAAA;EANe;;EASf,SAAA;AAAA;AAAA,UAGe,gBAAA;EARf;EAUA,MAAA;AAAA;;;AAFF;;;;;AAaA;iBAAsB,UAAA,CACpB,OAAA,EAAS,iBAAA,GACR,OAAA,CAAQ,gBAAA;;;;;;iBAeW,sBAAA,CACpB,WAAA,UACA,KAAA,WACC,OAAA;AAAA,UAmBc,mBAAA;EAtCf;EAwCA,WAAA;EAvCS;EAyCT,GAAA;EAzCyB;EA2CzB,IAAA;EA5B0C;EA8B1C,IAAA;EA3BQ;EA6BR,SAAA;AAAA;AAAA,UAGe,kBAAA;EAhCP;EAkCR,MAAA;AAAA;;;;;;iBAQoB,YAAA,CACpB,OAAA,EAAS,mBAAA,GACR,OAAA,CAAQ,kBAAA"}

package/dist/registry/index.js

@@ -1,6 +1,6 @@
-import { join } from "node:path";
+import { promises, readFileSync } from "node:fs";
 import { homedir } from "node:os";
-import { readFileSync } from "node:fs";
+import { join } from "node:path";
 import { spawn } from "node:child_process";
 const DEFAULT_REGISTRY_URL = "https://registry.dev.vetra.io";
 const POWERHOUSE_CONFIG_FILE = "powerhouse.config.json";
@@ -63,6 +63,15 @@ function spawnAsync(command, args, options = {}) {
 //#endregion
 //#region registry/registry.ts
 /**
+* Extract the host portion of a registry URL — what npm uses as the key in
+* `~/.npmrc` for per-registry tokens (e.g. `//registry.dev.vetra.io/`).
+*/
+function registryAuthKey(registryUrl) {
+	const url = new URL(registryUrl);
+	const path = url.pathname.endsWith("/") ? url.pathname : `${url.pathname}/`;
+	return `//${url.host}${path}:_authToken`;
+}
+/**
 * Resolve the registry URL with priority: flag > env > config > default.
 */
 function resolveRegistryUrl(options) {
@@ -84,33 +93,59 @@ async function checkNpmAuth(registryUrl) {
 /**
 * Run `npm publish` against the given registry.
 * Uses spawn with args array to avoid shell injection.
+*
+* When `authToken` is provided, the token is passed via a registry-scoped
+* `--//host/:_authToken=<token>` flag (npm's standard form for per-registry
+* tokens) so we never have to write to `~/.npmrc`.
 */
 async function npmPublish(options) {
-	const { registryUrl, cwd, args = [] } = options;
+	const { registryUrl, cwd, args = [], authToken } = options;
 	return { stdout: await spawnAsync("npm", [
 		"publish",
 		"--registry",
 		registryUrl,
+		...authToken ? [`--${registryAuthKey(registryUrl)}=${authToken}`] : [],
 		...args
 	], { cwd }) };
 }
 /**
+* Write `_authToken=<token>` for the given registry host into `~/.npmrc`,
+* preserving any other lines. Replaces the existing entry for the same key
+* if present. Returns the absolute path to the npmrc that was written.
+*/
+async function writeRegistryAuthToken(registryUrl, token) {
+	const npmrcPath = join(homedir(), ".npmrc");
+	const key = registryAuthKey(registryUrl);
+	let existing = "";
+	try {
+		existing = await promises.readFile(npmrcPath, "utf8");
+	} catch (err) {
+		if (err.code !== "ENOENT") throw err;
+	}
+	const filtered = existing.split("\n").filter((line) => !line.startsWith(`${key}=`));
+	while (filtered.length && filtered[filtered.length - 1] === "") filtered.pop();
+	filtered.push(`${key}=${token}`);
+	await promises.writeFile(npmrcPath, `${filtered.join("\n")}\n`, "utf8");
+	return npmrcPath;
+}
+/**
 * Run `npm unpublish` against the given registry.
 * Always passes `--force` because npm otherwise refuses to unpublish packages
 * older than 72h (a public-npmjs safeguard that doesn't apply to private registries).
 */
 async function npmUnpublish(options) {
-	const { registryUrl, cwd, spec, args = [] } = options;
+	const { registryUrl, cwd, spec, args = [], authToken } = options;
 	return { stdout: await spawnAsync("npm", [
 		"unpublish",
 		spec,
 		"--registry",
 		registryUrl,
 		"--force",
+		...authToken ? [`--${registryAuthKey(registryUrl)}=${authToken}`] : [],
 		...args
 	], { cwd }) };
 }
 //#endregion
-export { DEFAULT_REGISTRY_URL, checkNpmAuth, npmPublish, npmUnpublish, resolveRegistryUrl };
+export { DEFAULT_REGISTRY_URL, checkNpmAuth, npmPublish, npmUnpublish, registryAuthKey, resolveRegistryUrl, writeRegistryAuthToken };
 
 //# sourceMappingURL=index.js.map

package/dist/registry/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../clis/constants.ts","../../clis/file-system/get-config.ts","../../clis/file-system/spawn-async.ts","../../registry/registry.ts"],"sourcesContent":["import { homedir } from \"node:os\";\nimport { join } from \"node:path\";\nimport type { PowerhouseConfig } from \"./types.js\";\n\nexport const SERVICE_ACTIONS = [\n  \"start\",\n  \"stop\",\n  \"status\",\n  \"setup\",\n  \"restart\",\n] as const;\n\nexport const SECONDS_IN_DAY = 24 * 60 * 60;\nexport const DEFAULT_EXPIRY_DAYS = 7;\nexport const DEFAULT_EXPIRY_SECONDS = DEFAULT_EXPIRY_DAYS * SECONDS_IN_DAY;\n\nexport const DRIVES_PRESERVE_STRATEGIES = [\n  \"preserve-all\",\n  \"preserve-by-url-and-detach\",\n] as const;\n\nexport const LOG_LEVELS = [\n  \"debug\",\n  \"info\",\n  \"warn\",\n  \"error\",\n  \"verbose\",\n] as const;\n\nexport const DEFAULT_TIMEOUT = 300 as const;\n\nexport const DEFAULT_CONNECT_STUDIO_PORT = 3000 as const;\n\nexport const DEFAULT_VETRA_CONNECT_PORT = 3001 as const;\n\nexport const DEFAULT_CONNECT_PREVIEW_PORT = 4173 as const;\n\nexport const DEFAULT_CONNECT_OUTDIR = \".ph/connect-build/dist/\" as const;\n\nexport const DEFAULT_RENOWN_URL = \"https://www.renown.id\" as const;\n\nexport const DEFAULT_REGISTRY_URL = \"https://registry.dev.vetra.io\" as const;\n\nexport const DEFAULT_SWITCHBOARD_PORT = 4001 as const;\n\nexport const DEFAULT_VETRA_DRIVE_ID = \"vetra\" as const;\n\nexport const MINIMUM_NODE_VERSION = \"24.0.0\" as const;\nexport const PH_BIN = \"ph-cli-legacy\" as const;\nexport const POWERHOUSE_CONFIG_FILE = \"powerhouse.config.json\" as const;\nexport const PH_GLOBAL_DIR_NAME = \".ph\" as const;\n// Keep PH_GLOBAL_PROJECT_NAME for backwards compatibility\nexport const PH_GLOBAL_PROJECT_NAME = PH_GLOBAL_DIR_NAME;\n\nexport const HOME_DIR = homedir();\n\nexport const POWERHOUSE_GLOBAL_DIR = join(HOME_DIR, PH_GLOBAL_DIR_NAME);\n\nexport const VERSIONED_DEPENDENCIES = [\n  \"document-model\",\n  \"@powerhousedao/design-system\",\n  \"@powerhousedao/reactor-api\",\n  \"@powerhousedao/reactor-browser\",\n  \"@powerhousedao/connect\",\n  \"@powerhousedao/shared\",\n  \"@powerhousedao/analytics-engine-core\",\n];\n\nexport const VERSIONED_DEV_DEPENDENCIES = [\n  \"@powerhousedao/ph-cli\",\n  \"@powerhousedao/reactor\",\n];\n\nconst DEFAULT_DOCUMENT_MODELS_DIR = \"./document-models\";\nconst DEFAULT_EDITORS_DIR = \"./editors\";\nconst DEFAULT_PROCESSORS_DIR = \"./processors\";\nconst DEFAULT_SUBGRAPHS_DIR = \"./subgraphs\";\nconst DEFAULT_IMPORT_SCRIPTS_DIR = \"./scripts\";\nconst DEFAULT_SKIP_FORMAT = false;\nconst DEFAULT_LOG_LEVEL = \"info\";\n\nexport const DEFAULT_CONFIG: PowerhouseConfig = {\n  documentModelsDir: DEFAULT_DOCUMENT_MODELS_DIR,\n  editorsDir: DEFAULT_EDITORS_DIR,\n  processorsDir: DEFAULT_PROCESSORS_DIR,\n  subgraphsDir: DEFAULT_SUBGRAPHS_DIR,\n  importScriptsDir: DEFAULT_IMPORT_SCRIPTS_DIR,\n  skipFormat: DEFAULT_SKIP_FORMAT,\n  logLevel: DEFAULT_LOG_LEVEL,\n  auth: {\n    enabled: false,\n    admins: [],\n  },\n};\n","import { readFileSync } from \"node:fs\";\nimport { DEFAULT_CONFIG } from \"../constants.js\";\nimport type { PowerhouseConfig } from \"../types.js\";\n\nexport function getConfig(path = \"./powerhouse.config.json\") {\n  let config: PowerhouseConfig = { ...DEFAULT_CONFIG };\n  try {\n    const configStr = readFileSync(path, \"utf-8\");\n    const userConfig = JSON.parse(configStr) as PowerhouseConfig;\n    config = { ...config, ...userConfig };\n  } catch {\n    // console.warn(\"No powerhouse.config.json found, using defaults\");\n  }\n\n  return config;\n}\n","import { spawn } from \"node:child_process\";\n\nexport function spawnAsync(\n  command: string,\n  args: string[],\n  options: {\n    cwd?: string;\n    env?: NodeJS.ProcessEnv;\n  } = {},\n): Promise<string> {\n  return new Promise((resolve, reject) => {\n    const cmd =\n      process.platform === \"win32\" && command === \"npm\" ? \"npm.cmd\" : command;\n\n    const child = spawn(cmd, args, {\n      cwd: options.cwd,\n      env: options.env,\n      stdio: [\"ignore\", \"pipe\", \"pipe\"],\n    });\n\n    let stdout = \"\";\n    let stderr = \"\";\n\n    child.stdout.on(\"data\", (d: Buffer) => {\n      stdout += d.toString();\n    });\n\n    child.stderr.on(\"data\", (d: Buffer) => {\n      stderr += d.toString();\n    });\n\n    child.on(\"error\", reject);\n\n    child.on(\"close\", (code) => {\n      if (code === 0) {\n        resolve(stdout.trim());\n      } else {\n        reject(\n          new Error(stderr.trim() || `${command} exited with code ${code}`),\n        );\n      }\n    });\n  });\n}\n","import { join } from \"node:path\";\nimport {\n  DEFAULT_REGISTRY_URL,\n  POWERHOUSE_CONFIG_FILE,\n} from \"../clis/constants.js\";\nimport { getConfig } from \"../clis/file-system/get-config.js\";\nimport { spawnAsync } from \"../clis/file-system/spawn-async.js\";\n\nexport { DEFAULT_REGISTRY_URL } from \"../clis/constants.js\";\n\nexport interface ResolveRegistryUrlOptions {\n  /** Explicit registry URL (e.g. from --registry flag). Highest priority. */\n  registry?: string;\n  /** Project path to read powerhouse.config.json from. */\n  projectPath: string;\n  /** Environment variables. Defaults to process.env. */\n  env?: Record<string, string | undefined>;\n}\n\n/**\n * Resolve the registry URL with priority: flag > env > config > default.\n */\nexport function resolveRegistryUrl(options: ResolveRegistryUrlOptions): string {\n  const { registry, projectPath, env = process.env } = options;\n  const configPath = join(projectPath, POWERHOUSE_CONFIG_FILE);\n  const config = getConfig(configPath);\n\n  return (\n    registry ??\n    env.PH_REGISTRY_URL ??\n    config.packageRegistryUrl ??\n    DEFAULT_REGISTRY_URL\n  );\n}\n\n/**\n * Check if the user is authenticated with the given npm registry.\n * Returns the username on success, throws on failure.\n */\nexport async function checkNpmAuth(registryUrl: string): Promise<string> {\n  return spawnAsync(\"npm\", [\"whoami\", \"--registry\", registryUrl]);\n}\n\nexport interface NpmPublishOptions {\n  /** Registry URL to publish to. */\n  registryUrl: string;\n  /** Working directory (project root). */\n  cwd: string;\n  /** Additional arguments forwarded to npm publish. */\n  args?: string[];\n}\n\nexport interface NpmPublishResult {\n  /** stdout from npm publish. */\n  stdout: string;\n}\n\n/**\n * Run `npm publish` against the given registry.\n * Uses spawn with args array to avoid shell injection.\n */\nexport async function npmPublish(\n  options: NpmPublishOptions,\n): Promise<NpmPublishResult> {\n  const { registryUrl, cwd, args = [] } = options;\n  const npmArgs = [\"publish\", \"--registry\", registryUrl, ...args];\n  const stdout = await spawnAsync(\"npm\", npmArgs, { cwd });\n  return { stdout };\n}\n\nexport interface NpmUnpublishOptions {\n  /** Registry URL to unpublish from. */\n  registryUrl: string;\n  /** Working directory (project root). */\n  cwd: string;\n  /** Package spec: `<name>` (whole package) or `<name>@<version>` (single version). */\n  spec: string;\n  /** Additional arguments forwarded to npm unpublish. */\n  args?: string[];\n}\n\nexport interface NpmUnpublishResult {\n  /** stdout from npm unpublish. */\n  stdout: string;\n}\n\n/**\n * Run `npm unpublish` against the given registry.\n * Always passes `--force` because npm otherwise refuses to unpublish packages\n * older than 72h (a public-npmjs safeguard that doesn't apply to private registries).\n */\nexport async function npmUnpublish(\n  options: NpmUnpublishOptions,\n): Promise<NpmUnpublishResult> {\n  const { registryUrl, cwd, spec, args = [] } = options;\n  const npmArgs = [\n    \"unpublish\",\n    spec,\n    \"--registry\",\n    registryUrl,\n    \"--force\",\n    ...args,\n  ];\n  const stdout = await spawnAsync(\"npm\", npmArgs, { cwd });\n  return { stdout };\n}\n"],"mappings":";;;;AAyCA,MAAa,uBAAuB;AAQpC,MAAa,yBAAyB;AAOD,KAFb,SAAS,EAES,MAA6B;AAyBvE,MAAa,iBAAmC;CAC9C,mBATkC;CAUlC,YAT0B;CAU1B,eAT6B;CAU7B,cAT4B;CAU5B,kBATiC;CAUjC,YAT0B;CAU1B,UATwB;CAUxB,MAAM;EACJ,SAAS;EACT,QAAQ,EAAE;EACX;CACF;;;ACzFD,SAAgB,UAAU,OAAO,4BAA4B;CAC3D,IAAI,SAA2B,EAAE,GAAG,gBAAgB;AACpD,KAAI;EACF,MAAM,YAAY,aAAa,MAAM,QAAQ;EAC7C,MAAM,aAAa,KAAK,MAAM,UAAU;AACxC,WAAS;GAAE,GAAG;GAAQ,GAAG;GAAY;SAC/B;AAIR,QAAO;;;;ACZT,SAAgB,WACd,SACA,MACA,UAGI,EAAE,EACW;AACjB,QAAO,IAAI,SAAS,SAAS,WAAW;EAItC,MAAM,QAAQ,MAFZ,QAAQ,aAAa,WAAW,YAAY,QAAQ,YAAY,SAEzC,MAAM;GAC7B,KAAK,QAAQ;GACb,KAAK,QAAQ;GACb,OAAO;IAAC;IAAU;IAAQ;IAAO;GAClC,CAAC;EAEF,IAAI,SAAS;EACb,IAAI,SAAS;AAEb,QAAM,OAAO,GAAG,SAAS,MAAc;AACrC,aAAU,EAAE,UAAU;IACtB;AAEF,QAAM,OAAO,GAAG,SAAS,MAAc;AACrC,aAAU,EAAE,UAAU;IACtB;AAEF,QAAM,GAAG,SAAS,OAAO;AAEzB,QAAM,GAAG,UAAU,SAAS;AAC1B,OAAI,SAAS,EACX,SAAQ,OAAO,MAAM,CAAC;OAEtB,QACE,IAAI,MAAM,OAAO,MAAM,IAAI,GAAG,QAAQ,oBAAoB,OAAO,CAClE;IAEH;GACF;;;;;;;ACpBJ,SAAgB,mBAAmB,SAA4C;CAC7E,MAAM,EAAE,UAAU,aAAa,MAAM,QAAQ,QAAQ;CAErD,MAAM,SAAS,UADI,KAAK,aAAa,uBAAuB,CACxB;AAEpC,QACE,YACA,IAAI,mBACJ,OAAO,sBAAA;;;;;;AASX,eAAsB,aAAa,aAAsC;AACvE,QAAO,WAAW,OAAO;EAAC;EAAU;EAAc;EAAY,CAAC;;;;;;AAqBjE,eAAsB,WACpB,SAC2B;CAC3B,MAAM,EAAE,aAAa,KAAK,OAAO,EAAE,KAAK;AAGxC,QAAO,EAAE,QADM,MAAM,WAAW,OADhB;EAAC;EAAW;EAAc;EAAa,GAAG;EAAK,EACf,EAAE,KAAK,CAAC,EACvC;;;;;;;AAwBnB,eAAsB,aACpB,SAC6B;CAC7B,MAAM,EAAE,aAAa,KAAK,MAAM,OAAO,EAAE,KAAK;AAU9C,QAAO,EAAE,QADM,MAAM,WAAW,OARhB;EACd;EACA;EACA;EACA;EACA;EACA,GAAG;EACJ,EAC+C,EAAE,KAAK,CAAC,EACvC"}
+{"version":3,"file":"index.js","names":["fs"],"sources":["../../clis/constants.ts","../../clis/file-system/get-config.ts","../../clis/file-system/spawn-async.ts","../../registry/registry.ts"],"sourcesContent":["import { homedir } from \"node:os\";\nimport { join } from \"node:path\";\nimport type { PowerhouseConfig } from \"./types.js\";\n\nexport const SERVICE_ACTIONS = [\n  \"start\",\n  \"stop\",\n  \"status\",\n  \"setup\",\n  \"restart\",\n] as const;\n\nexport const SECONDS_IN_DAY = 24 * 60 * 60;\nexport const DEFAULT_EXPIRY_DAYS = 7;\nexport const DEFAULT_EXPIRY_SECONDS = DEFAULT_EXPIRY_DAYS * SECONDS_IN_DAY;\n\nexport const DRIVES_PRESERVE_STRATEGIES = [\n  \"preserve-all\",\n  \"preserve-by-url-and-detach\",\n] as const;\n\nexport const LOG_LEVELS = [\n  \"debug\",\n  \"info\",\n  \"warn\",\n  \"error\",\n  \"verbose\",\n] as const;\n\nexport const DEFAULT_TIMEOUT = 300 as const;\n\nexport const DEFAULT_CONNECT_STUDIO_PORT = 3000 as const;\n\nexport const DEFAULT_VETRA_CONNECT_PORT = 3001 as const;\n\nexport const DEFAULT_CONNECT_PREVIEW_PORT = 4173 as const;\n\nexport const DEFAULT_CONNECT_OUTDIR = \".ph/connect-build/dist/\" as const;\n\nexport const DEFAULT_RENOWN_URL = \"https://www.renown.id\" as const;\n\nexport const DEFAULT_REGISTRY_URL = \"https://registry.dev.vetra.io\" as const;\n\nexport const DEFAULT_SWITCHBOARD_PORT = 4001 as const;\n\nexport const DEFAULT_VETRA_DRIVE_ID = \"vetra\" as const;\n\nexport const MINIMUM_NODE_VERSION = \"24.0.0\" as const;\nexport const PH_BIN = \"ph-cli-legacy\" as const;\nexport const POWERHOUSE_CONFIG_FILE = \"powerhouse.config.json\" as const;\nexport const PH_GLOBAL_DIR_NAME = \".ph\" as const;\n// Keep PH_GLOBAL_PROJECT_NAME for backwards compatibility\nexport const PH_GLOBAL_PROJECT_NAME = PH_GLOBAL_DIR_NAME;\n\nexport const HOME_DIR = homedir();\n\nexport const POWERHOUSE_GLOBAL_DIR = join(HOME_DIR, PH_GLOBAL_DIR_NAME);\n\nexport const VERSIONED_DEPENDENCIES = [\n  \"document-model\",\n  \"@powerhousedao/design-system\",\n  \"@powerhousedao/reactor-api\",\n  \"@powerhousedao/reactor-browser\",\n  \"@powerhousedao/connect\",\n  \"@powerhousedao/shared\",\n  \"@powerhousedao/analytics-engine-core\",\n];\n\nexport const VERSIONED_DEV_DEPENDENCIES = [\n  \"@powerhousedao/ph-cli\",\n  \"@powerhousedao/reactor\",\n];\n\nconst DEFAULT_DOCUMENT_MODELS_DIR = \"./document-models\";\nconst DEFAULT_EDITORS_DIR = \"./editors\";\nconst DEFAULT_PROCESSORS_DIR = \"./processors\";\nconst DEFAULT_SUBGRAPHS_DIR = \"./subgraphs\";\nconst DEFAULT_IMPORT_SCRIPTS_DIR = \"./scripts\";\nconst DEFAULT_SKIP_FORMAT = false;\nconst DEFAULT_LOG_LEVEL = \"info\";\n\nexport const DEFAULT_CONFIG: PowerhouseConfig = {\n  documentModelsDir: DEFAULT_DOCUMENT_MODELS_DIR,\n  editorsDir: DEFAULT_EDITORS_DIR,\n  processorsDir: DEFAULT_PROCESSORS_DIR,\n  subgraphsDir: DEFAULT_SUBGRAPHS_DIR,\n  importScriptsDir: DEFAULT_IMPORT_SCRIPTS_DIR,\n  skipFormat: DEFAULT_SKIP_FORMAT,\n  logLevel: DEFAULT_LOG_LEVEL,\n  auth: {\n    enabled: false,\n    admins: [],\n  },\n};\n","import { readFileSync } from \"node:fs\";\nimport { DEFAULT_CONFIG } from \"../constants.js\";\nimport type { PowerhouseConfig } from \"../types.js\";\n\nexport function getConfig(path = \"./powerhouse.config.json\") {\n  let config: PowerhouseConfig = { ...DEFAULT_CONFIG };\n  try {\n    const configStr = readFileSync(path, \"utf-8\");\n    const userConfig = JSON.parse(configStr) as PowerhouseConfig;\n    config = { ...config, ...userConfig };\n  } catch {\n    // console.warn(\"No powerhouse.config.json found, using defaults\");\n  }\n\n  return config;\n}\n","import { spawn } from \"node:child_process\";\n\nexport function spawnAsync(\n  command: string,\n  args: string[],\n  options: {\n    cwd?: string;\n    env?: NodeJS.ProcessEnv;\n  } = {},\n): Promise<string> {\n  return new Promise((resolve, reject) => {\n    const cmd =\n      process.platform === \"win32\" && command === \"npm\" ? \"npm.cmd\" : command;\n\n    const child = spawn(cmd, args, {\n      cwd: options.cwd,\n      env: options.env,\n      stdio: [\"ignore\", \"pipe\", \"pipe\"],\n    });\n\n    let stdout = \"\";\n    let stderr = \"\";\n\n    child.stdout.on(\"data\", (d: Buffer) => {\n      stdout += d.toString();\n    });\n\n    child.stderr.on(\"data\", (d: Buffer) => {\n      stderr += d.toString();\n    });\n\n    child.on(\"error\", reject);\n\n    child.on(\"close\", (code) => {\n      if (code === 0) {\n        resolve(stdout.trim());\n      } else {\n        reject(\n          new Error(stderr.trim() || `${command} exited with code ${code}`),\n        );\n      }\n    });\n  });\n}\n","import { promises as fs } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { join } from \"node:path\";\nimport {\n  DEFAULT_REGISTRY_URL,\n  POWERHOUSE_CONFIG_FILE,\n} from \"../clis/constants.js\";\nimport { getConfig } from \"../clis/file-system/get-config.js\";\nimport { spawnAsync } from \"../clis/file-system/spawn-async.js\";\n\nexport { DEFAULT_REGISTRY_URL } from \"../clis/constants.js\";\n\n/**\n * Extract the host portion of a registry URL — what npm uses as the key in\n * `~/.npmrc` for per-registry tokens (e.g. `//registry.dev.vetra.io/`).\n */\nexport function registryAuthKey(registryUrl: string): string {\n  const url = new URL(registryUrl);\n  // Always trailing slash; npm's lookup is exact-match against the leading\n  // path of the registry URL, with `//` prefix and trailing `/`.\n  const path = url.pathname.endsWith(\"/\") ? url.pathname : `${url.pathname}/`;\n  return `//${url.host}${path}:_authToken`;\n}\n\nexport interface ResolveRegistryUrlOptions {\n  /** Explicit registry URL (e.g. from --registry flag). Highest priority. */\n  registry?: string;\n  /** Project path to read powerhouse.config.json from. */\n  projectPath: string;\n  /** Environment variables. Defaults to process.env. */\n  env?: Record<string, string | undefined>;\n}\n\n/**\n * Resolve the registry URL with priority: flag > env > config > default.\n */\nexport function resolveRegistryUrl(options: ResolveRegistryUrlOptions): string {\n  const { registry, projectPath, env = process.env } = options;\n  const configPath = join(projectPath, POWERHOUSE_CONFIG_FILE);\n  const config = getConfig(configPath);\n\n  return (\n    registry ??\n    env.PH_REGISTRY_URL ??\n    config.packageRegistryUrl ??\n    DEFAULT_REGISTRY_URL\n  );\n}\n\n/**\n * Check if the user is authenticated with the given npm registry.\n * Returns the username on success, throws on failure.\n */\nexport async function checkNpmAuth(registryUrl: string): Promise<string> {\n  return spawnAsync(\"npm\", [\"whoami\", \"--registry\", registryUrl]);\n}\n\nexport interface NpmPublishOptions {\n  /** Registry URL to publish to. */\n  registryUrl: string;\n  /** Working directory (project root). */\n  cwd: string;\n  /** Additional arguments forwarded to npm publish. */\n  args?: string[];\n  /** Bearer token for the registry. When set, passed via a registry-scoped\n   *  `_authToken` config flag rather than read from the user's `.npmrc`. */\n  authToken?: string;\n}\n\nexport interface NpmPublishResult {\n  /** stdout from npm publish. */\n  stdout: string;\n}\n\n/**\n * Run `npm publish` against the given registry.\n * Uses spawn with args array to avoid shell injection.\n *\n * When `authToken` is provided, the token is passed via a registry-scoped\n * `--//host/:_authToken=<token>` flag (npm's standard form for per-registry\n * tokens) so we never have to write to `~/.npmrc`.\n */\nexport async function npmPublish(\n  options: NpmPublishOptions,\n): Promise<NpmPublishResult> {\n  const { registryUrl, cwd, args = [], authToken } = options;\n  const tokenArg = authToken\n    ? [`--${registryAuthKey(registryUrl)}=${authToken}`]\n    : [];\n  const npmArgs = [\"publish\", \"--registry\", registryUrl, ...tokenArg, ...args];\n  const stdout = await spawnAsync(\"npm\", npmArgs, { cwd });\n  return { stdout };\n}\n\n/**\n * Write `_authToken=<token>` for the given registry host into `~/.npmrc`,\n * preserving any other lines. Replaces the existing entry for the same key\n * if present. Returns the absolute path to the npmrc that was written.\n */\nexport async function writeRegistryAuthToken(\n  registryUrl: string,\n  token: string,\n): Promise<string> {\n  const npmrcPath = join(homedir(), \".npmrc\");\n  const key = registryAuthKey(registryUrl);\n  let existing = \"\";\n  try {\n    existing = await fs.readFile(npmrcPath, \"utf8\");\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code !== \"ENOENT\") throw err;\n  }\n  const lines = existing.split(\"\\n\");\n  const filtered = lines.filter((line) => !line.startsWith(`${key}=`));\n  // Also drop any trailing empties to avoid stacking blank lines on rewrite.\n  while (filtered.length && filtered[filtered.length - 1] === \"\")\n    filtered.pop();\n  filtered.push(`${key}=${token}`);\n  await fs.writeFile(npmrcPath, `${filtered.join(\"\\n\")}\\n`, \"utf8\");\n  return npmrcPath;\n}\n\nexport interface NpmUnpublishOptions {\n  /** Registry URL to unpublish from. */\n  registryUrl: string;\n  /** Working directory (project root). */\n  cwd: string;\n  /** Package spec: `<name>` (whole package) or `<name>@<version>` (single version). */\n  spec: string;\n  /** Additional arguments forwarded to npm unpublish. */\n  args?: string[];\n  /** Bearer token for the registry (same semantics as `NpmPublishOptions.authToken`). */\n  authToken?: string;\n}\n\nexport interface NpmUnpublishResult {\n  /** stdout from npm unpublish. */\n  stdout: string;\n}\n\n/**\n * Run `npm unpublish` against the given registry.\n * Always passes `--force` because npm otherwise refuses to unpublish packages\n * older than 72h (a public-npmjs safeguard that doesn't apply to private registries).\n */\nexport async function npmUnpublish(\n  options: NpmUnpublishOptions,\n): Promise<NpmUnpublishResult> {\n  const { registryUrl, cwd, spec, args = [], authToken } = options;\n  const tokenArg = authToken\n    ? [`--${registryAuthKey(registryUrl)}=${authToken}`]\n    : [];\n  const npmArgs = [\n    \"unpublish\",\n    spec,\n    \"--registry\",\n    registryUrl,\n    \"--force\",\n    ...tokenArg,\n    ...args,\n  ];\n  const stdout = await spawnAsync(\"npm\", npmArgs, { cwd });\n  return { stdout };\n}\n"],"mappings":";;;;AAyCA,MAAa,uBAAuB;AAQpC,MAAa,yBAAyB;AAOD,KAFb,SAAS,EAES,MAA6B;AAyBvE,MAAa,iBAAmC;CAC9C,mBATkC;CAUlC,YAT0B;CAU1B,eAT6B;CAU7B,cAT4B;CAU5B,kBATiC;CAUjC,YAT0B;CAU1B,UATwB;CAUxB,MAAM;EACJ,SAAS;EACT,QAAQ,EAAE;EACX;CACF;;;ACzFD,SAAgB,UAAU,OAAO,4BAA4B;CAC3D,IAAI,SAA2B,EAAE,GAAG,gBAAgB;AACpD,KAAI;EACF,MAAM,YAAY,aAAa,MAAM,QAAQ;EAC7C,MAAM,aAAa,KAAK,MAAM,UAAU;AACxC,WAAS;GAAE,GAAG;GAAQ,GAAG;GAAY;SAC/B;AAIR,QAAO;;;;ACZT,SAAgB,WACd,SACA,MACA,UAGI,EAAE,EACW;AACjB,QAAO,IAAI,SAAS,SAAS,WAAW;EAItC,MAAM,QAAQ,MAFZ,QAAQ,aAAa,WAAW,YAAY,QAAQ,YAAY,SAEzC,MAAM;GAC7B,KAAK,QAAQ;GACb,KAAK,QAAQ;GACb,OAAO;IAAC;IAAU;IAAQ;IAAO;GAClC,CAAC;EAEF,IAAI,SAAS;EACb,IAAI,SAAS;AAEb,QAAM,OAAO,GAAG,SAAS,MAAc;AACrC,aAAU,EAAE,UAAU;IACtB;AAEF,QAAM,OAAO,GAAG,SAAS,MAAc;AACrC,aAAU,EAAE,UAAU;IACtB;AAEF,QAAM,GAAG,SAAS,OAAO;AAEzB,QAAM,GAAG,UAAU,SAAS;AAC1B,OAAI,SAAS,EACX,SAAQ,OAAO,MAAM,CAAC;OAEtB,QACE,IAAI,MAAM,OAAO,MAAM,IAAI,GAAG,QAAQ,oBAAoB,OAAO,CAClE;IAEH;GACF;;;;;;;;AC1BJ,SAAgB,gBAAgB,aAA6B;CAC3D,MAAM,MAAM,IAAI,IAAI,YAAY;CAGhC,MAAM,OAAO,IAAI,SAAS,SAAS,IAAI,GAAG,IAAI,WAAW,GAAG,IAAI,SAAS;AACzE,QAAO,KAAK,IAAI,OAAO,KAAK;;;;;AAe9B,SAAgB,mBAAmB,SAA4C;CAC7E,MAAM,EAAE,UAAU,aAAa,MAAM,QAAQ,QAAQ;CAErD,MAAM,SAAS,UADI,KAAK,aAAa,uBAAuB,CACxB;AAEpC,QACE,YACA,IAAI,mBACJ,OAAO,sBAAA;;;;;;AASX,eAAsB,aAAa,aAAsC;AACvE,QAAO,WAAW,OAAO;EAAC;EAAU;EAAc;EAAY,CAAC;;;;;;;;;;AA4BjE,eAAsB,WACpB,SAC2B;CAC3B,MAAM,EAAE,aAAa,KAAK,OAAO,EAAE,EAAE,cAAc;AAMnD,QAAO,EAAE,QADM,MAAM,WAAW,OADhB;EAAC;EAAW;EAAc;EAAa,GAHtC,YACb,CAAC,KAAK,gBAAgB,YAAY,CAAC,GAAG,YAAY,GAClD,EAAE;EAC8D,GAAG;EAAK,EAC5B,EAAE,KAAK,CAAC,EACvC;;;;;;;AAQnB,eAAsB,uBACpB,aACA,OACiB;CACjB,MAAM,YAAY,KAAK,SAAS,EAAE,SAAS;CAC3C,MAAM,MAAM,gBAAgB,YAAY;CACxC,IAAI,WAAW;AACf,KAAI;AACF,aAAW,MAAMA,SAAG,SAAS,WAAW,OAAO;UACxC,KAAK;AACZ,MAAK,IAA8B,SAAS,SAAU,OAAM;;CAG9D,MAAM,WADQ,SAAS,MAAM,KAAK,CACX,QAAQ,SAAS,CAAC,KAAK,WAAW,GAAG,IAAI,GAAG,CAAC;AAEpE,QAAO,SAAS,UAAU,SAAS,SAAS,SAAS,OAAO,GAC1D,UAAS,KAAK;AAChB,UAAS,KAAK,GAAG,IAAI,GAAG,QAAQ;AAChC,OAAMA,SAAG,UAAU,WAAW,GAAG,SAAS,KAAK,KAAK,CAAC,KAAK,OAAO;AACjE,QAAO;;;;;;;AA0BT,eAAsB,aACpB,SAC6B;CAC7B,MAAM,EAAE,aAAa,KAAK,MAAM,OAAO,EAAE,EAAE,cAAc;AAczD,QAAO,EAAE,QADM,MAAM,WAAW,OAThB;EACd;EACA;EACA;EACA;EACA;EACA,GATe,YACb,CAAC,KAAK,gBAAgB,YAAY,CAAC,GAAG,YAAY,GAClD,EAAE;EAQJ,GAAG;EACJ,EAC+C,EAAE,KAAK,CAAC,EACvC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@powerhousedao/shared",
-  "version": "6.0.0-dev.216",
+  "version": "6.0.0-dev.218",
   "type": "module",
   "sideEffects": false,
   "publishConfig": {