@powerhousedao/shared 6.2.3-dev.6 → 6.2.3-dev.60

package/dist/registry/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["fs"],"sources":["../../clis/constants.ts","../../clis/file-system/get-config.ts","../../clis/file-system/spawn-async.ts","../../registry/registry.ts"],"sourcesContent":["import { homedir } from \"node:os\";\nimport { join } from \"node:path\";\nimport type { Manifest } from \"../document-model/types.js\";\nimport type { PowerhouseConfig } from \"./types.js\";\n\nexport const SERVICE_ACTIONS = [\n  \"start\",\n  \"stop\",\n  \"status\",\n  \"setup\",\n  \"restart\",\n] as const;\n\nexport const SECONDS_IN_DAY = 24 * 60 * 60;\nexport const DEFAULT_EXPIRY_DAYS = 7;\nexport const DEFAULT_EXPIRY_SECONDS = DEFAULT_EXPIRY_DAYS * SECONDS_IN_DAY;\n\nexport const DRIVES_PRESERVE_STRATEGIES = [\n  \"preserve-all\",\n  \"preserve-by-url-and-detach\",\n] as const;\n\nexport const LOG_LEVELS = [\n  \"debug\",\n  \"info\",\n  \"warn\",\n  \"error\",\n  \"verbose\",\n] as const;\n\nexport const DEFAULT_TIMEOUT = 300 as const;\n\nexport const DEFAULT_CONNECT_STUDIO_PORT = 3000 as const;\n\nexport const DEFAULT_VETRA_CONNECT_PORT = 3001 as const;\n\nexport const DEFAULT_CONNECT_PREVIEW_PORT = 4173 as const;\n\nexport const DEFAULT_CONNECT_OUTDIR = \".ph/connect-build/dist/\" as const;\n\nexport const DEFAULT_RENOWN_URL = \"https://www.renown.id\" as const;\n\nexport const DEFAULT_REGISTRY_URL = \"https://registry.vetra.io\" as const;\n\nexport const DEFAULT_SWITCHBOARD_PORT = 4001 as const;\n\n// Per-project dev-server port bands. `ph init` assigns each project a port\n// triple derived from its name, so two projects never collide and an agent's\n// MCP URL can be baked into .mcp.json before a session starts.\n//\n// Two hard constraints picked these bands, both below 10000:\n//\n//   1. Below the OS ephemeral range. Linux allocates outbound source ports\n//      from 32768-60999 (`/proc/sys/net/ipv4/ip_local_port_range`); macOS and\n//      Windows start at 49152. A listener parked in that window can lose a\n//      race to a transient outbound socket, which would surface as a\n//      `--strictPort` failure blaming a project conflict that does not exist.\n//   2. Below 10000, which is where ph-clint starts. ph-clint derives its own\n//      per-CLI ports by hashing into 10000-59900, so staying under 10000\n//      keeps the two schemes from ever contending.\n//\n// Within those limits the blocks were chosen by measuring which ports the\n// Powerhouse repos actually reference: 2000-2999 has none, 7000-7999 has one,\n// 6000-6999 has five. See PROJECT_PORT_DENYLIST in project-ports.ts for the\n// individual ports skipped inside them.\nexport const PROJECT_PORT_BAND_SIZE = 1000 as const;\nexport const PROJECT_PORT_BAND_SWITCHBOARD = 7000 as const;\nexport const PROJECT_PORT_BAND_STUDIO = 6000 as const;\nexport const PROJECT_PORT_BAND_VETRA_CONNECT = 2000 as const;\n\nexport const DEFAULT_VETRA_DRIVE_ID = \"vetra\" as const;\n\nexport const MINIMUM_NODE_VERSION = \"24.0.0\" as const;\nexport const PH_BIN = \"ph-cli-legacy\" as const;\nexport const POWERHOUSE_CONFIG_FILE = \"powerhouse.config.json\" as const;\nexport const PH_GLOBAL_DIR_NAME = \".ph\" as const;\n// Keep PH_GLOBAL_PROJECT_NAME for backwards compatibility\nexport const PH_GLOBAL_PROJECT_NAME = PH_GLOBAL_DIR_NAME;\n\nexport const HOME_DIR = homedir();\n\nexport const POWERHOUSE_GLOBAL_DIR = join(HOME_DIR, PH_GLOBAL_DIR_NAME);\n\n// Workspace packages that go in peerDependencies of every generated project.\nexport const VERSIONED_PEER_DEPENDENCIES = [\n  \"document-model\",\n  \"@powerhousedao/reactor-browser\",\n];\n\ntype PeerSpec = { peer: string; dev: string };\n\nexport const REACTOR_API_PACKAGE = \"@powerhousedao/reactor-api\";\nexport const ANALYTICS_ENGINE_CORE_PACKAGE =\n  \"@powerhousedao/analytics-engine-core\";\nexport const GRAPHQL_PACKAGE = \"graphql\";\nexport const GRAPHQL_TAG_PACKAGE = \"graphql-tag\";\n\n// External peerDependencies of every generated project.\n// `peer` is the consumer-facing range; `dev` is the exact build-tested pin.\n// graphql / graphql-tag are always-on because the workspace packages pulled\n// in by every `ph init` project (codegen, reactor-api, reactor-browser,\n// vetra-packages) declare them as peers — even projects without subgraphs\n// need them in scope so pnpm hoists a single graphql instance.\nexport const PEER_EXTERNAL_DEPENDENCIES = {\n  [GRAPHQL_PACKAGE]: { peer: \"^16\", dev: \"16.12.0\" },\n  [GRAPHQL_TAG_PACKAGE]: { peer: \"^2\", dev: \"2.12.6\" },\n  react: { peer: \"^19\", dev: \"19.2.6\" },\n  \"react-dom\": { peer: \"^19\", dev: \"19.2.6\" },\n  zod: { peer: \"^4\", dev: \"4.3.6\" },\n} as const satisfies Record<string, PeerSpec>;\n\n// Per-feature deps added dynamically by codegen when required.\nexport const FEATURE_DEPENDENCIES = {\n  analyticsProcessor: {\n    peerVersioned: [ANALYTICS_ENGINE_CORE_PACKAGE],\n    peerExternal: {},\n  },\n} as const satisfies Record<\n  string,\n  { peerVersioned: readonly string[]; peerExternal: Record<string, PeerSpec> }\n>;\n\nexport const VERSIONED_DEPENDENCIES = [\n  ...VERSIONED_PEER_DEPENDENCIES,\n  ...FEATURE_DEPENDENCIES.analyticsProcessor.peerVersioned,\n];\n\n// Transitive dependencies whose postinstall scripts the generated project\n// trusts. Mirrors the `allowBuilds` map in the boilerplate's\n// pnpm-workspace.yaml and is also passed as `--allow-build` flags to\n// `pnpm dlx @powerhousedao/ph-cli init` so pnpm 11's strict-dep-builds\n// default doesn't prompt during the outer dlx download.\nexport const BOILERPLATE_ALLOWED_BUILDS = [\n  \"@apollo/protobufjs\",\n  \"@datadog/pprof\",\n  \"@parcel/watcher\",\n  \"@reown/appkit\",\n  \"bufferutil\",\n  \"esbuild\",\n  \"keccak\",\n  \"protobufjs\",\n  \"utf-8-validate\",\n] as const;\n\n// Single-version pins the boilerplate enforces on generated projects,\n// avoiding duplicates from coexisting version ranges. Rendered as pnpm\n// `overrides` (pnpm-workspace.yaml) and as yarn v1 `resolutions`\n// (package.json). Generated-project only — never change the monorepo\n// catalog for this (a re-resolution there pulls a tsc-crashing TS6 beta).\nexport const BOILERPLATE_DEPENDENCY_OVERRIDES = {\n  \"date-fns\": \"4.3.0\",\n  vite: \"8.0.14\",\n  rolldown: \"1.0.2\",\n} as const satisfies Record<string, string>;\n\nexport const VERSIONED_DEV_DEPENDENCIES = [\n  \"@powerhousedao/ph-cli\",\n  \"@powerhousedao/reactor\",\n  \"@powerhousedao/shared\",\n  \"@powerhousedao/connect\",\n  \"@powerhousedao/design-system\",\n];\n\nexport const packageJsonExports = {\n  \".\": {\n    types: \"./dist/types/index.d.ts\",\n    browser: \"./dist/browser/index.js\",\n    node: \"./dist/node/index.mjs\",\n  },\n  \"./reactor\": {\n    types: \"./dist/types/reactor/index.d.ts\",\n    browser: \"./dist/browser/reactor/index.js\",\n  },\n  \"./document-models\": {\n    types: \"./dist/types/document-models/index.d.ts\",\n    browser: \"./dist/browser/document-models/index.js\",\n    node: \"./dist/node/document-models/index.mjs\",\n  },\n  \"./document-models/*\": {\n    types: \"./dist/types/document-models/*/index.d.ts\",\n    browser: \"./dist/browser/document-models/*/index.js\",\n    node: \"./dist/node/document-models/*/index.mjs\",\n  },\n  \"./editors\": {\n    types: \"./dist/types/editors/index.d.ts\",\n    browser: \"./dist/browser/editors/index.js\",\n    node: \"./dist/node/editors/index.mjs\",\n  },\n  \"./editors/*\": {\n    types: \"./dist/types/editors/*/editor.d.ts\",\n    browser: \"./dist/browser/editors/*/editor.js\",\n    node: \"./dist/node/editors/*/editor.mjs\",\n  },\n  \"./subgraphs\": {\n    types: \"./dist/types/subgraphs/index.d.ts\",\n    browser: \"./dist/browser/subgraphs/index.js\",\n    node: \"./dist/node/subgraphs/index.mjs\",\n  },\n  \"./processors\": {\n    types: \"./dist/types/processors/index.d.ts\",\n    browser: \"./dist/browser/processors/index.js\",\n    node: \"./dist/node/processors/index.mjs\",\n  },\n  \"./manifest\": \"./dist/powerhouse.manifest.json\",\n  \"./style.css\": \"./dist/style.css\",\n} as const;\n\nexport const packageScripts = {\n  \"test:watch\": \"vitest\",\n  lint: \"oxlint --type-aware --type-check\",\n  \"lint:fix\": \"oxlint --type-aware --type-check --fix\",\n  format: \"oxfmt\",\n  \"format:check\": \"oxfmt --check\",\n  tsc: \"tsc\",\n  \"tsc:watch\": \"tsc --watch\",\n  generate: \"ph-cli generate\",\n  connect: \"ph-cli connect\",\n  build: \"ph-cli build\",\n  reactor: \"ph-cli reactor\",\n  service: \"ph-cli service\",\n  vetra: \"ph-cli vetra\",\n  \"service-startup\":\n    \"bash ./node_modules/@powerhousedao/ph-cli/dist/scripts/service-startup.sh\",\n  \"service-unstartup\":\n    \"bash ./node_modules/@powerhousedao/ph-cli/dist/scripts/service-unstartup.sh\",\n} as const;\n\nexport const externalDependencies = {} as const;\n\n// eslint/prettier devDependencies present in projects scaffolded before the oxc migration.\n// Stripped from package.json during `ph migrate`.\nexport const LEGACY_LINT_FORMAT_DEPENDENCIES = [\n  \"@eslint/js\",\n  \"eslint\",\n  \"eslint-config-prettier\",\n  \"eslint-plugin-prettier\",\n  \"eslint-plugin-react\",\n  \"eslint-plugin-react-hooks\",\n  \"globals\",\n  \"prettier\",\n  \"typescript-eslint\",\n] as const;\n\n// Legacy lint/format config files written by eslint/prettier boilerplate.\n// Removed from the project root during `ph migrate`.\nexport const LEGACY_LINT_FORMAT_FILES = [\n  \"eslint.config.js\",\n  \"eslint.config.mjs\",\n  \"eslint.config.cjs\",\n  \"eslint.config.ts\",\n  \".eslintrc\",\n  \".eslintrc.js\",\n  \".eslintrc.cjs\",\n  \".eslintrc.json\",\n  \".eslintrc.yml\",\n  \".eslintrc.yaml\",\n  \".eslintignore\",\n  \".prettierrc\",\n  \".prettierrc.js\",\n  \".prettierrc.cjs\",\n  \".prettierrc.json\",\n  \".prettierrc.yml\",\n  \".prettierrc.yaml\",\n  \"prettier.config.js\",\n  \"prettier.config.cjs\",\n  \"prettier.config.mjs\",\n  \".prettierignore\",\n] as const;\n\nexport const externalDevDependencies = {\n  \"@electric-sql/pglite\": \"0.3.15\",\n  \"@electric-sql/pglite-tools\": \"0.2.20\",\n  \"@powerhousedao/document-engineering\": \"1.40.5\",\n  \"@tailwindcss/cli\": \"^4.1.18\",\n  \"@tailwindcss/vite\": \"^4.1.18\",\n  \"@types/node\": \"^24.9.2\",\n  \"@types/react\": \"^19.2.3\",\n  \"@types/react-dom\": \"^19.2.3\",\n  \"@vitejs/plugin-react\": \"^6.0.1\",\n  \"@vitest/coverage-v8\": \"4.1.1\",\n  oxfmt: \"0.55.0\",\n  oxlint: \"1.70.0\",\n  \"oxlint-tsgolint\": \"0.23.0\",\n  tailwindcss: \"^4.1.16\",\n  typescript: \"^5.9.3\",\n  vite: \"^8.0.10\",\n  \"vite-tsconfig-paths\": \"6.1.1\",\n  vitest: \"4.1.1\",\n} as const;\n\nexport const defaultManifest: Manifest = {\n  name: \"\",\n  description: \"\",\n  category: \"\",\n  publisher: {\n    name: \"\",\n    url: \"\",\n  },\n  documentModels: [],\n  editors: [],\n  apps: [],\n  subgraphs: [],\n  processors: [],\n};\n\nconst DEFAULT_DOCUMENT_MODELS_DIR = \"./document-models\";\nconst DEFAULT_EDITORS_DIR = \"./editors\";\nconst DEFAULT_PROCESSORS_DIR = \"./processors\";\nconst DEFAULT_SUBGRAPHS_DIR = \"./subgraphs\";\nconst DEFAULT_IMPORT_SCRIPTS_DIR = \"./scripts\";\nconst DEFAULT_SKIP_FORMAT = false;\nconst DEFAULT_LOG_LEVEL = \"info\";\n\nexport const DEFAULT_CONFIG: PowerhouseConfig = {\n  documentModelsDir: DEFAULT_DOCUMENT_MODELS_DIR,\n  editorsDir: DEFAULT_EDITORS_DIR,\n  processorsDir: DEFAULT_PROCESSORS_DIR,\n  subgraphsDir: DEFAULT_SUBGRAPHS_DIR,\n  importScriptsDir: DEFAULT_IMPORT_SCRIPTS_DIR,\n  skipFormat: DEFAULT_SKIP_FORMAT,\n  logLevel: DEFAULT_LOG_LEVEL,\n  auth: {\n    enabled: false,\n    admins: [],\n  },\n};\n","import { readFileSync } from \"node:fs\";\nimport { DEFAULT_CONFIG } from \"../constants.js\";\nimport type { PowerhouseConfig } from \"../types.js\";\n\nexport function getConfig(path = \"./powerhouse.config.json\") {\n  let config: PowerhouseConfig = { ...DEFAULT_CONFIG };\n  try {\n    const configStr = readFileSync(path, \"utf-8\");\n    const userConfig = JSON.parse(configStr) as PowerhouseConfig;\n    config = { ...config, ...userConfig };\n  } catch {\n    // console.warn(\"No powerhouse.config.json found, using defaults\");\n  }\n\n  return config;\n}\n","import spawn from \"cross-spawn\";\n\nexport function spawnAsync(\n  command: string,\n  args: string[],\n  options: {\n    cwd?: string;\n    env?: NodeJS.ProcessEnv;\n  } = {},\n): Promise<string> {\n  return new Promise((resolve, reject) => {\n    // cross-spawn rather than node:child_process.spawn. On Windows npm, pnpm\n    // and yarn are all `.cmd` shims, and since the fix for CVE-2024-27980\n    // (Node 18.20.2 / 20.12.2 / 21.7.3 and later) `spawn` refuses to execute\n    // `.bat`/`.cmd` unless `shell: true` -- it throws `spawn EINVAL`, and\n    // synchronously, so an `error` listener never sees it. Passing\n    // `shell: true` instead would hand the arguments to cmd.exe, which strips\n    // quotes and splits on shell metacharacters. cross-spawn resolves the shim\n    // and escapes the arguments itself, so the call keeps shell-less argument\n    // semantics on every platform.\n    const child = spawn(command, args, {\n      cwd: options.cwd,\n      env: options.env,\n      stdio: [\"ignore\", \"pipe\", \"pipe\"],\n    });\n\n    let stdout = \"\";\n    let stderr = \"\";\n\n    child.stdout?.on(\"data\", (d: Buffer) => {\n      stdout += d.toString();\n    });\n\n    child.stderr?.on(\"data\", (d: Buffer) => {\n      stderr += d.toString();\n    });\n\n    child.on(\"error\", reject);\n\n    child.on(\"close\", (code) => {\n      if (code === 0) {\n        resolve(stdout.trim());\n      } else {\n        reject(\n          new Error(stderr.trim() || `${command} exited with code ${code}`),\n        );\n      }\n    });\n  });\n}\n","import { promises as fs } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { join } from \"node:path\";\nimport {\n  DEFAULT_REGISTRY_URL,\n  POWERHOUSE_CONFIG_FILE,\n} from \"../clis/constants.js\";\nimport { getConfig } from \"../clis/file-system/get-config.js\";\nimport { spawnAsync } from \"../clis/file-system/spawn-async.js\";\n\nexport { DEFAULT_REGISTRY_URL } from \"../clis/constants.js\";\n\n/**\n * Extract the host portion of a registry URL — what npm uses as the key in\n * `~/.npmrc` for per-registry tokens (e.g. `//registry.vetra.io/`).\n */\nexport function registryAuthKey(registryUrl: string): string {\n  const url = new URL(registryUrl);\n  // Always trailing slash; npm's lookup is exact-match against the leading\n  // path of the registry URL, with `//` prefix and trailing `/`.\n  const path = url.pathname.endsWith(\"/\") ? url.pathname : `${url.pathname}/`;\n  return `//${url.host}${path}:_authToken`;\n}\n\nexport interface ResolveRegistryUrlOptions {\n  /** Explicit registry URL (e.g. from --registry flag). Highest priority. */\n  registry?: string;\n  /** Project path to read powerhouse.config.json from. */\n  projectPath: string;\n  /** Environment variables. Defaults to process.env. */\n  env?: Record<string, string | undefined>;\n}\n\n/**\n * Resolve the registry URL with priority: flag > env > config > default.\n */\nexport function resolveRegistryUrl(options: ResolveRegistryUrlOptions): string {\n  const { registry, projectPath, env = process.env } = options;\n  const configPath = join(projectPath, POWERHOUSE_CONFIG_FILE);\n  const config = getConfig(configPath);\n\n  return (\n    registry ??\n    env.PH_REGISTRY_URL ??\n    config.packageRegistryUrl ??\n    DEFAULT_REGISTRY_URL\n  );\n}\n\n/**\n * Check if the user is authenticated with the given npm registry.\n * Returns the username on success, throws on failure.\n */\nexport async function checkNpmAuth(registryUrl: string): Promise<string> {\n  return spawnAsync(\"npm\", [\"whoami\", \"--registry\", registryUrl]);\n}\n\nexport interface NpmPublishOptions {\n  /** Registry URL to publish to. */\n  registryUrl: string;\n  /** Working directory (project root). */\n  cwd: string;\n  /** Additional arguments forwarded to npm publish. */\n  args?: string[];\n  /** Bearer token for the registry. When set, passed via a registry-scoped\n   *  `_authToken` config flag rather than read from the user's `.npmrc`. */\n  authToken?: string;\n}\n\nexport interface NpmPublishResult {\n  /** stdout from npm publish. */\n  stdout: string;\n}\n\n/**\n * Run `npm publish` against the given registry.\n * Uses spawn with args array to avoid shell injection.\n *\n * When `authToken` is provided, the token is passed via a registry-scoped\n * `--//host/:_authToken=<token>` flag (npm's standard form for per-registry\n * tokens) so we never have to write to `~/.npmrc`.\n */\nexport async function npmPublish(\n  options: NpmPublishOptions,\n): Promise<NpmPublishResult> {\n  const { registryUrl, cwd, args = [], authToken } = options;\n  const tokenArg = authToken\n    ? [`--${registryAuthKey(registryUrl)}=${authToken}`]\n    : [];\n  const npmArgs = [\"publish\", \"--registry\", registryUrl, ...tokenArg, ...args];\n  const stdout = await spawnAsync(\"npm\", npmArgs, { cwd });\n  return { stdout };\n}\n\n/**\n * Write `_authToken=<token>` for the given registry host into `~/.npmrc`,\n * preserving any other lines. Replaces the existing entry for the same key\n * if present. Returns the absolute path to the npmrc that was written.\n */\nexport async function writeRegistryAuthToken(\n  registryUrl: string,\n  token: string,\n): Promise<string> {\n  const npmrcPath = join(homedir(), \".npmrc\");\n  const key = registryAuthKey(registryUrl);\n  let existing = \"\";\n  try {\n    existing = await fs.readFile(npmrcPath, \"utf8\");\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code !== \"ENOENT\") throw err;\n  }\n  const lines = existing.split(\"\\n\");\n  const filtered = lines.filter((line) => !line.startsWith(`${key}=`));\n  // Also drop any trailing empties to avoid stacking blank lines on rewrite.\n  while (filtered.length && filtered[filtered.length - 1] === \"\")\n    filtered.pop();\n  filtered.push(`${key}=${token}`);\n  await fs.writeFile(npmrcPath, `${filtered.join(\"\\n\")}\\n`, \"utf8\");\n  return npmrcPath;\n}\n\nexport interface NpmUnpublishOptions {\n  /** Registry URL to unpublish from. */\n  registryUrl: string;\n  /** Working directory (project root). */\n  cwd: string;\n  /** Package spec: `<name>` (whole package) or `<name>@<version>` (single version). */\n  spec: string;\n  /** Additional arguments forwarded to npm unpublish. */\n  args?: string[];\n  /** Bearer token for the registry (same semantics as `NpmPublishOptions.authToken`). */\n  authToken?: string;\n}\n\nexport interface NpmUnpublishResult {\n  /** stdout from npm unpublish. */\n  stdout: string;\n}\n\n/**\n * Run `npm unpublish` against the given registry.\n * Always passes `--force` because npm otherwise refuses to unpublish packages\n * older than 72h (a public-npmjs safeguard that doesn't apply to private registries).\n */\nexport async function npmUnpublish(\n  options: NpmUnpublishOptions,\n): Promise<NpmUnpublishResult> {\n  const { registryUrl, cwd, spec, args = [], authToken } = options;\n  const tokenArg = authToken\n    ? [`--${registryAuthKey(registryUrl)}=${authToken}`]\n    : [];\n  const npmArgs = [\n    \"unpublish\",\n    spec,\n    \"--registry\",\n    registryUrl,\n    \"--force\",\n    ...tokenArg,\n    ...args,\n  ];\n  const stdout = await spawnAsync(\"npm\", npmArgs, { cwd });\n  return { stdout };\n}\n"],"mappings":";;;;;;;AA0CA,MAAa,uBAAuB;AAgCpC,MAAa,yBAAyB;AAOD,KAFb,SAAS,EAES,MAA6B;AAGvE,MAAa,8BAA8B,CACzC,kBACA,iCACD;AAyBD,MAAa,uBAAuB,EAClC,oBAAoB;CAClB,eAAe,CArBjB,uCAqBgD;CAC9C,cAAc,EAAE;CACjB,EACF;AAKqC,CACpC,GAAG,6BACH,GAAG,qBAAqB,mBAAmB,cAC5C;AA4LD,MAAa,iBAAmC;CAC9C,mBATkC;CAUlC,YAT0B;CAU1B,eAT6B;CAU7B,cAT4B;CAU5B,kBATiC;CAUjC,YAT0B;CAU1B,UATwB;CAUxB,MAAM;EACJ,SAAS;EACT,QAAQ,EAAE;EACX;CACF;;;ACjUD,SAAgB,UAAU,OAAO,4BAA4B;CAC3D,IAAI,SAA2B,EAAE,GAAG,gBAAgB;AACpD,KAAI;EACF,MAAM,YAAY,aAAa,MAAM,QAAQ;EAC7C,MAAM,aAAa,KAAK,MAAM,UAAU;AACxC,WAAS;GAAE,GAAG;GAAQ,GAAG;GAAY;SAC/B;AAIR,QAAO;;;;ACZT,SAAgB,WACd,SACA,MACA,UAGI,EAAE,EACW;AACjB,QAAO,IAAI,SAAS,SAAS,WAAW;EAUtC,MAAM,QAAQ,MAAM,SAAS,MAAM;GACjC,KAAK,QAAQ;GACb,KAAK,QAAQ;GACb,OAAO;IAAC;IAAU;IAAQ;IAAO;GAClC,CAAC;EAEF,IAAI,SAAS;EACb,IAAI,SAAS;AAEb,QAAM,QAAQ,GAAG,SAAS,MAAc;AACtC,aAAU,EAAE,UAAU;IACtB;AAEF,QAAM,QAAQ,GAAG,SAAS,MAAc;AACtC,aAAU,EAAE,UAAU;IACtB;AAEF,QAAM,GAAG,SAAS,OAAO;AAEzB,QAAM,GAAG,UAAU,SAAS;AAC1B,OAAI,SAAS,EACX,SAAQ,OAAO,MAAM,CAAC;OAEtB,QACE,IAAI,MAAM,OAAO,MAAM,IAAI,GAAG,QAAQ,oBAAoB,OAAO,CAClE;IAEH;GACF;;;;;;;;AChCJ,SAAgB,gBAAgB,aAA6B;CAC3D,MAAM,MAAM,IAAI,IAAI,YAAY;CAGhC,MAAM,OAAO,IAAI,SAAS,SAAS,IAAI,GAAG,IAAI,WAAW,GAAG,IAAI,SAAS;AACzE,QAAO,KAAK,IAAI,OAAO,KAAK;;;;;AAe9B,SAAgB,mBAAmB,SAA4C;CAC7E,MAAM,EAAE,UAAU,aAAa,MAAM,QAAQ,QAAQ;CAErD,MAAM,SAAS,UADI,KAAK,aAAa,uBAAuB,CACxB;AAEpC,QACE,YACA,IAAI,mBACJ,OAAO,sBAAA;;;;;;AASX,eAAsB,aAAa,aAAsC;AACvE,QAAO,WAAW,OAAO;EAAC;EAAU;EAAc;EAAY,CAAC;;;;;;;;;;AA4BjE,eAAsB,WACpB,SAC2B;CAC3B,MAAM,EAAE,aAAa,KAAK,OAAO,EAAE,EAAE,cAAc;AAMnD,QAAO,EAAE,QADM,MAAM,WAAW,OADhB;EAAC;EAAW;EAAc;EAAa,GAHtC,YACb,CAAC,KAAK,gBAAgB,YAAY,CAAC,GAAG,YAAY,GAClD,EAAE;EAC8D,GAAG;EAAK,EAC5B,EAAE,KAAK,CAAC,EACvC;;;;;;;AAQnB,eAAsB,uBACpB,aACA,OACiB;CACjB,MAAM,YAAY,KAAK,SAAS,EAAE,SAAS;CAC3C,MAAM,MAAM,gBAAgB,YAAY;CACxC,IAAI,WAAW;AACf,KAAI;AACF,aAAW,MAAMA,SAAG,SAAS,WAAW,OAAO;UACxC,KAAK;AACZ,MAAK,IAA8B,SAAS,SAAU,OAAM;;CAG9D,MAAM,WADQ,SAAS,MAAM,KAAK,CACX,QAAQ,SAAS,CAAC,KAAK,WAAW,GAAG,IAAI,GAAG,CAAC;AAEpE,QAAO,SAAS,UAAU,SAAS,SAAS,SAAS,OAAO,GAC1D,UAAS,KAAK;AAChB,UAAS,KAAK,GAAG,IAAI,GAAG,QAAQ;AAChC,OAAMA,SAAG,UAAU,WAAW,GAAG,SAAS,KAAK,KAAK,CAAC,KAAK,OAAO;AACjE,QAAO;;;;;;;AA0BT,eAAsB,aACpB,SAC6B;CAC7B,MAAM,EAAE,aAAa,KAAK,MAAM,OAAO,EAAE,EAAE,cAAc;AAczD,QAAO,EAAE,QADM,MAAM,WAAW,OAThB;EACd;EACA;EACA;EACA;EACA;EACA,GATe,YACb,CAAC,KAAK,gBAAgB,YAAY,CAAC,GAAG,YAAY,GAClD,EAAE;EAQJ,GAAG;EACJ,EAC+C,EAAE,KAAK,CAAC,EACvC"}
+{"version":3,"file":"index.js","names":["fs"],"sources":["../../registry/types.ts","../../clis/constants.ts","../../clis/file-system/get-config.ts","../../clis/file-system/spawn-async.ts","../../registry/registry.ts"],"sourcesContent":["import type { Manifest } from \"types\";\nexport interface PackageInfo {\n  name: string;\n  path: string;\n  manifest: Manifest | null;\n  documentTypes: string[];\n  version?: string;\n  /** Install spec the user requested (name, name@tag, or name@version); present\n   *  on installed packages, used to pick the update stream. Absent for legacy\n   *  entries. */\n  spec?: string;\n  /** Mapping of dist-tag → version (e.g. {latest: \"1.0.0\", dev: \"1.1.0-dev.3\"}). */\n  distTags?: Record<string, string>;\n  /** All published versions of the package, sorted ascending by semver. */\n  versions?: string[];\n  /**\n   * The newest version the registry currently reports for this package (the\n   * `version` field of list items / single-package responses). Distinct from\n   * {@link version}, which holds the installed version on installed rows.\n   * Every registry reports it, even ones without dist-tag support, so it is\n   * the fallback target for the `latest` update stream.\n   */\n  latestVersion?: string;\n  /** Accounts that own the name (publish/unpublish rights). Present only on\n   *  registries with the Postgres-backed auth; omitted when untracked. */\n  owners?: string[];\n}\n\n/**\n * Item shape of `GET /packages` pages: only what a listing card renders. Pass\n * `detail=full` for {@link PackageInfo} items.\n */\nexport interface PackageListItem {\n  name: string;\n  path: string;\n  version?: string;\n  description?: string;\n  category?: string;\n  publisher?: { name?: string; url?: string };\n}\n\n/** Envelope of `GET /packages` and `GET /pieces`. */\nexport interface Page<T> {\n  items: T[];\n  total: number;\n  limit: number;\n  offset: number;\n  hasMore: boolean;\n}\n\n/** Filter options over the `name`-restricted set, sent with `facets=true`. */\nexport interface PackageFacets {\n  categories: string[];\n  publishers: string[];\n}\n\n/** `GET /packages`; items are {@link PackageInfo} with `detail=full`. */\nexport interface PackagePage<T = PackageListItem> extends Page<T> {\n  facets?: PackageFacets;\n}\n\n/** Manifest module lists accepted by the `moduleType` filter. */\nexport const PACKAGE_MODULE_TYPES = [\n  \"documentModels\",\n  \"editors\",\n  \"apps\",\n  \"subgraphs\",\n  \"processors\",\n] as const;\nexport type PackageModuleType = (typeof PACKAGE_MODULE_TYPES)[number];\n\nexport type RegistryPackageStatus =\n  | \"available\"\n  | \"local-install\"\n  | \"registry-install\"\n  | \"dismissed\";\n\nexport type RegistryPackageSource =\n  | \"available\"\n  | \"local-install\"\n  | \"registry-install\"\n  | \"common\"\n  | \"project\";\n\nexport type RegistryPackage = PackageInfo & {\n  status: RegistryPackageStatus;\n  /**\n   * Shared-dependency version mismatches against the Connect build's version\n   * table, pre-formatted (see `formatSharedDepWarnings`). Absent when the\n   * host has no shared-deps table (vendor-off / dev) or none were found.\n   */\n  sharedDepWarnings?: string[];\n};\nexport type RegistryPackageMap = Record<string, RegistryPackage | undefined>;\nexport type RegistryPackageList = RegistryPackage[];\n","import { homedir } from \"node:os\";\nimport { join } from \"node:path\";\nimport type { Manifest } from \"../document-model/types.js\";\nimport type { PowerhouseConfig } from \"./types.js\";\n\nexport const SERVICE_ACTIONS = [\n  \"start\",\n  \"stop\",\n  \"status\",\n  \"setup\",\n  \"restart\",\n] as const;\n\nexport const SECONDS_IN_DAY = 24 * 60 * 60;\nexport const DEFAULT_EXPIRY_DAYS = 7;\nexport const DEFAULT_EXPIRY_SECONDS = DEFAULT_EXPIRY_DAYS * SECONDS_IN_DAY;\n\nexport const DRIVES_PRESERVE_STRATEGIES = [\n  \"preserve-all\",\n  \"preserve-by-url-and-detach\",\n] as const;\n\nexport const LOG_LEVELS = [\n  \"debug\",\n  \"info\",\n  \"warn\",\n  \"error\",\n  \"verbose\",\n] as const;\n\nexport const DEFAULT_TIMEOUT = 300 as const;\n\nexport const DEFAULT_CONNECT_STUDIO_PORT = 3000 as const;\n\nexport const DEFAULT_VETRA_CONNECT_PORT = 3001 as const;\n\nexport const DEFAULT_CONNECT_PREVIEW_PORT = 4173 as const;\n\nexport const DEFAULT_CONNECT_OUTDIR = \".ph/connect-build/dist/\" as const;\n\nexport const DEFAULT_RENOWN_URL = \"https://www.renown.id\" as const;\n\nexport const DEFAULT_REGISTRY_URL = \"https://registry.vetra.io\" as const;\n\nexport const DEFAULT_SWITCHBOARD_PORT = 4001 as const;\n\n// Per-project dev-server port bands. `ph init` assigns each project a port\n// triple derived from its name, so two projects never collide and an agent's\n// MCP URL can be baked into .mcp.json before a session starts.\n//\n// Two hard constraints picked these bands, both below 10000:\n//\n//   1. Below the OS ephemeral range. Linux allocates outbound source ports\n//      from 32768-60999 (`/proc/sys/net/ipv4/ip_local_port_range`); macOS and\n//      Windows start at 49152. A listener parked in that window can lose a\n//      race to a transient outbound socket, which would surface as a\n//      `--strictPort` failure blaming a project conflict that does not exist.\n//   2. Below 10000, which is where ph-clint starts. ph-clint derives its own\n//      per-CLI ports by hashing into 10000-59900, so staying under 10000\n//      keeps the two schemes from ever contending.\n//\n// Within those limits the blocks were chosen by measuring which ports the\n// Powerhouse repos actually reference: 2000-2999 has none, 7000-7999 has one,\n// 6000-6999 has five. See PROJECT_PORT_DENYLIST in project-ports.ts for the\n// individual ports skipped inside them.\nexport const PROJECT_PORT_BAND_SIZE = 1000 as const;\nexport const PROJECT_PORT_BAND_SWITCHBOARD = 7000 as const;\nexport const PROJECT_PORT_BAND_STUDIO = 6000 as const;\nexport const PROJECT_PORT_BAND_VETRA_CONNECT = 2000 as const;\n\n/**\n * Icon for the drives switchboard creates by default, inlined as a data URI.\n *\n * A remote URL is the wrong shape for this: the value is baked into the drive\n * document and rendered by every Connect that opens it, so the icon only\n * appears when that client can reach that host. A desktop or air-gapped install\n * cannot, and the ipfs.io gateway this previously pointed at now answers 403\n * regardless.\n *\n * The mark is drawn dark-on-light so it stays legible against either theme.\n */\nexport const DEFAULT_DRIVE_ICON =\n  \"data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%2016%2016'%3E%3Crect%20width='16'%20height='16'%20rx='3'%20fill='%23F3F5F7'/%3E%3Cpath%20fill='%23343839'%20fill-rule='evenodd'%20clip-rule='evenodd'%20d='M10.0059%200L3.41636%205.45646C2.44979%206.25682%202.3795%207.71452%203.26456%208.60418L5.54425%2010.8957C6.21311%2011.568%206.35783%2012.6012%205.89944%2013.4314L4.48126%2016H2.13333C0.955126%2016%200%2015.0449%200%2013.8667V2.13333C0%200.955126%200.955126%200%202.13333%200H10.0059ZM11.2436%200L10.0128%202.24221C9.55899%203.06891%209.70183%204.09549%2010.3641%204.7669L12.7825%207.21868C13.6656%208.11402%2013.5866%209.57512%2012.612%2010.37L5.70922%2016H13.8667C15.0449%2016%2016%2015.0449%2016%2013.8667V2.13333C16%200.955126%2015.0449%200%2013.8667%200H11.2436Z'/%3E%3C/svg%3E\" as const;\n\nexport const DEFAULT_VETRA_DRIVE_ID = \"vetra\" as const;\n\nexport const MINIMUM_NODE_VERSION = \"24.0.0\" as const;\nexport const PH_BIN = \"ph-cli-legacy\" as const;\nexport const POWERHOUSE_CONFIG_FILE = \"powerhouse.config.json\" as const;\nexport const PH_GLOBAL_DIR_NAME = \".ph\" as const;\n// Keep PH_GLOBAL_PROJECT_NAME for backwards compatibility\nexport const PH_GLOBAL_PROJECT_NAME = PH_GLOBAL_DIR_NAME;\n\nexport const HOME_DIR = homedir();\n\nexport const POWERHOUSE_GLOBAL_DIR = join(HOME_DIR, PH_GLOBAL_DIR_NAME);\n\n// Workspace packages that go in peerDependencies of every generated project.\nexport const VERSIONED_PEER_DEPENDENCIES = [\n  \"document-model\",\n  \"@powerhousedao/reactor-browser\",\n];\n\ntype PeerSpec = { peer: string; dev: string };\n\nexport const REACTOR_API_PACKAGE = \"@powerhousedao/reactor-api\";\nexport const ANALYTICS_ENGINE_CORE_PACKAGE =\n  \"@powerhousedao/analytics-engine-core\";\nexport const GRAPHQL_PACKAGE = \"graphql\";\nexport const GRAPHQL_TAG_PACKAGE = \"graphql-tag\";\nexport const PIECES_FRAMEWORK_PACKAGE = \"@powerhousedao/pieces-framework\";\n\n// External peerDependencies of every generated project.\n// `peer` is the consumer-facing range; `dev` is the exact build-tested pin.\n// graphql / graphql-tag are always-on because the workspace packages pulled\n// in by every `ph init` project (codegen, reactor-api, reactor-browser,\n// vetra-packages) declare them as peers — even projects without subgraphs\n// need them in scope so pnpm hoists a single graphql instance.\nexport const PEER_EXTERNAL_DEPENDENCIES = {\n  [GRAPHQL_PACKAGE]: { peer: \"^16\", dev: \"16.12.0\" },\n  [GRAPHQL_TAG_PACKAGE]: { peer: \"^2\", dev: \"2.12.6\" },\n  react: { peer: \"^19\", dev: \"19.2.6\" },\n  \"react-dom\": { peer: \"^19\", dev: \"19.2.6\" },\n  zod: { peer: \"^4\", dev: \"4.3.6\" },\n} as const satisfies Record<string, PeerSpec>;\n\n// Per-feature deps added dynamically by codegen when required. `devVersioned`\n// is for a workspace package the build inlines, which no consumer provides.\nexport const FEATURE_DEPENDENCIES = {\n  analyticsProcessor: {\n    peerVersioned: [ANALYTICS_ENGINE_CORE_PACKAGE],\n    peerExternal: {},\n    devVersioned: [],\n  },\n  // Each piece is bundled whole (build-pieces.mts), framework included, so the\n  // framework is only ever needed to compile the piece's own source.\n  piece: {\n    peerVersioned: [],\n    peerExternal: {},\n    devVersioned: [PIECES_FRAMEWORK_PACKAGE],\n  },\n} as const satisfies Record<\n  string,\n  {\n    peerVersioned: readonly string[];\n    peerExternal: Record<string, PeerSpec>;\n    devVersioned: readonly string[];\n  }\n>;\n\nexport const VERSIONED_DEPENDENCIES = [\n  ...VERSIONED_PEER_DEPENDENCIES,\n  ...FEATURE_DEPENDENCIES.analyticsProcessor.peerVersioned,\n];\n\n// Transitive dependencies whose postinstall scripts the generated project\n// trusts. Mirrors the `allowBuilds` map in the boilerplate's\n// pnpm-workspace.yaml and is also passed as `--allow-build` flags to\n// `pnpm dlx @powerhousedao/ph-cli init` so pnpm 11's strict-dep-builds\n// default doesn't prompt during the outer dlx download.\nexport const BOILERPLATE_ALLOWED_BUILDS = [\n  \"@apollo/protobufjs\",\n  \"@datadog/pprof\",\n  \"@parcel/watcher\",\n  \"@reown/appkit\",\n  \"bufferutil\",\n  \"esbuild\",\n  \"keccak\",\n  \"protobufjs\",\n  \"utf-8-validate\",\n] as const;\n\n// Single-version pins the boilerplate enforces on generated projects,\n// avoiding duplicates from coexisting version ranges. Rendered as pnpm\n// `overrides` (pnpm-workspace.yaml) and as yarn v1 `resolutions`\n// (package.json). Generated-project only — never change the monorepo\n// catalog for this (a re-resolution there pulls a tsc-crashing TS6 beta).\nexport const BOILERPLATE_DEPENDENCY_OVERRIDES = {\n  \"date-fns\": \"4.3.0\",\n  vite: \"8.0.14\",\n  rolldown: \"1.0.2\",\n} as const satisfies Record<string, string>;\n\nexport const VERSIONED_DEV_DEPENDENCIES = [\n  \"@powerhousedao/ph-cli\",\n  \"@powerhousedao/reactor\",\n  \"@powerhousedao/shared\",\n  \"@powerhousedao/connect\",\n  \"@powerhousedao/design-system\",\n  // uniform-runners: the runner modules the scaffolded hosts/*/host.js\n  // files name (desktop runner, clint-runner/mastra-runner, and the generic\n  // compound they build on); dormant in classic projects until the feature\n  // flag defaults on.\n  \"@powerhousedao/host-core\",\n  \"@powerhousedao/clint\",\n  \"@powerhousedao/desktop\",\n];\n\nexport const packageJsonExports = {\n  \".\": {\n    types: \"./dist/types/index.d.ts\",\n    browser: \"./dist/browser/index.js\",\n    node: \"./dist/node/index.mjs\",\n  },\n  \"./reactor\": {\n    types: \"./dist/types/reactor/index.d.ts\",\n    browser: \"./dist/browser/reactor/index.js\",\n  },\n  \"./document-models\": {\n    types: \"./dist/types/document-models/index.d.ts\",\n    browser: \"./dist/browser/document-models/index.js\",\n    node: \"./dist/node/document-models/index.mjs\",\n  },\n  \"./document-models/*\": {\n    types: \"./dist/types/document-models/*/index.d.ts\",\n    browser: \"./dist/browser/document-models/*/index.js\",\n    node: \"./dist/node/document-models/*/index.mjs\",\n  },\n  \"./editors\": {\n    types: \"./dist/types/editors/index.d.ts\",\n    browser: \"./dist/browser/editors/index.js\",\n    node: \"./dist/node/editors/index.mjs\",\n  },\n  \"./editors/*\": {\n    types: \"./dist/types/editors/*/editor.d.ts\",\n    browser: \"./dist/browser/editors/*/editor.js\",\n    node: \"./dist/node/editors/*/editor.mjs\",\n  },\n  \"./subgraphs\": {\n    types: \"./dist/types/subgraphs/index.d.ts\",\n    node: \"./dist/node/subgraphs/index.mjs\",\n  },\n  \"./processors\": {\n    types: \"./dist/types/processors/index.d.ts\",\n    browser: \"./dist/browser/processors/index.js\",\n    node: \"./dist/node/processors/index.mjs\",\n  },\n  // Node only, as the build is: a piece is loaded by a host process, never by\n  // the browser. Without these a package can build a piece and still fail the\n  // `packageName/pieces` import a host resolves it through.\n  \"./pieces\": {\n    types: \"./dist/types/pieces/index.d.ts\",\n    node: \"./dist/node/pieces/index.mjs\",\n  },\n  \"./pieces/*\": {\n    types: \"./dist/types/pieces/*/index.d.ts\",\n    node: \"./dist/node/pieces/*/index.mjs\",\n  },\n  \"./manifest\": \"./dist/powerhouse.manifest.json\",\n  \"./style.css\": \"./dist/style.css\",\n} as const;\n\nexport const packageScripts = {\n  \"test:watch\": \"vitest\",\n  lint: \"oxlint --type-aware --type-check\",\n  \"lint:fix\": \"oxlint --type-aware --type-check --fix\",\n  format: \"oxfmt\",\n  \"format:check\": \"oxfmt --check\",\n  tsc: \"tsc\",\n  \"tsc:watch\": \"tsc --watch\",\n  generate: \"ph-cli generate\",\n  connect: \"ph-cli connect\",\n  build: \"ph-cli build\",\n  reactor: \"ph-cli reactor\",\n  service: \"ph-cli service\",\n  vetra: \"ph-cli vetra\",\n  \"service-startup\":\n    \"bash ./node_modules/@powerhousedao/ph-cli/dist/scripts/service-startup.sh\",\n  \"service-unstartup\":\n    \"bash ./node_modules/@powerhousedao/ph-cli/dist/scripts/service-unstartup.sh\",\n} as const;\n\nexport const externalDependencies = {} as const;\n\n// eslint/prettier devDependencies present in projects scaffolded before the oxc migration.\n// Stripped from package.json during `ph migrate`.\nexport const LEGACY_LINT_FORMAT_DEPENDENCIES = [\n  \"@eslint/js\",\n  \"eslint\",\n  \"eslint-config-prettier\",\n  \"eslint-plugin-prettier\",\n  \"eslint-plugin-react\",\n  \"eslint-plugin-react-hooks\",\n  \"globals\",\n  \"prettier\",\n  \"typescript-eslint\",\n] as const;\n\n// Legacy lint/format config files written by eslint/prettier boilerplate.\n// Removed from the project root during `ph migrate`.\nexport const LEGACY_LINT_FORMAT_FILES = [\n  \"eslint.config.js\",\n  \"eslint.config.mjs\",\n  \"eslint.config.cjs\",\n  \"eslint.config.ts\",\n  \".eslintrc\",\n  \".eslintrc.js\",\n  \".eslintrc.cjs\",\n  \".eslintrc.json\",\n  \".eslintrc.yml\",\n  \".eslintrc.yaml\",\n  \".eslintignore\",\n  \".prettierrc\",\n  \".prettierrc.js\",\n  \".prettierrc.cjs\",\n  \".prettierrc.json\",\n  \".prettierrc.yml\",\n  \".prettierrc.yaml\",\n  \"prettier.config.js\",\n  \"prettier.config.cjs\",\n  \"prettier.config.mjs\",\n  \".prettierignore\",\n] as const;\n\nexport const externalDevDependencies = {\n  \"@electric-sql/pglite\": \"0.3.15\",\n  \"@electric-sql/pglite-tools\": \"0.2.20\",\n  \"@powerhousedao/document-engineering\": \"1.40.5\",\n  \"@tailwindcss/cli\": \"^4.1.18\",\n  \"@tailwindcss/vite\": \"^4.1.18\",\n  \"@types/node\": \"^24.9.2\",\n  \"@types/react\": \"^19.2.3\",\n  \"@types/react-dom\": \"^19.2.3\",\n  \"@vitejs/plugin-react\": \"^6.0.1\",\n  \"@vitest/coverage-v8\": \"5.0.3\",\n  oxfmt: \"0.68.0\",\n  oxlint: \"1.70.0\",\n  \"oxlint-tsgolint\": \"0.23.0\",\n  tailwindcss: \"^4.1.16\",\n  typescript: \"~7.0.2\",\n  vite: \"^8.0.10\",\n  \"vite-tsconfig-paths\": \"6.1.1\",\n  vitest: \"5.0.3\",\n} as const;\n\nexport const defaultManifest: Manifest = {\n  name: \"\",\n  description: \"\",\n  category: \"\",\n  publisher: {\n    name: \"\",\n    url: \"\",\n  },\n  documentModels: [],\n  editors: [],\n  apps: [],\n  subgraphs: [],\n  processors: [],\n};\n\nconst DEFAULT_DOCUMENT_MODELS_DIR = \"./document-models\";\nconst DEFAULT_EDITORS_DIR = \"./editors\";\nconst DEFAULT_PROCESSORS_DIR = \"./processors\";\nconst DEFAULT_SUBGRAPHS_DIR = \"./subgraphs\";\nconst DEFAULT_IMPORT_SCRIPTS_DIR = \"./scripts\";\nconst DEFAULT_SKIP_FORMAT = false;\nconst DEFAULT_LOG_LEVEL = \"info\";\n\nexport const DEFAULT_CONFIG: PowerhouseConfig = {\n  documentModelsDir: DEFAULT_DOCUMENT_MODELS_DIR,\n  editorsDir: DEFAULT_EDITORS_DIR,\n  processorsDir: DEFAULT_PROCESSORS_DIR,\n  subgraphsDir: DEFAULT_SUBGRAPHS_DIR,\n  importScriptsDir: DEFAULT_IMPORT_SCRIPTS_DIR,\n  skipFormat: DEFAULT_SKIP_FORMAT,\n  logLevel: DEFAULT_LOG_LEVEL,\n  auth: {\n    enabled: false,\n    admins: [],\n  },\n};\n","import { readFileSync } from \"node:fs\";\nimport { DEFAULT_CONFIG } from \"../constants.js\";\nimport type { PowerhouseConfig } from \"../types.js\";\n\nexport function getConfig(path = \"./powerhouse.config.json\") {\n  let config: PowerhouseConfig = { ...DEFAULT_CONFIG };\n  try {\n    const configStr = readFileSync(path, \"utf-8\");\n    const userConfig = JSON.parse(configStr) as PowerhouseConfig;\n    config = { ...config, ...userConfig };\n  } catch {\n    // console.warn(\"No powerhouse.config.json found, using defaults\");\n  }\n\n  return config;\n}\n","import spawn from \"cross-spawn\";\n\nexport function spawnAsync(\n  command: string,\n  args: string[],\n  options: {\n    cwd?: string;\n    env?: NodeJS.ProcessEnv;\n  } = {},\n): Promise<string> {\n  return new Promise((resolve, reject) => {\n    // cross-spawn rather than node:child_process.spawn. On Windows npm, pnpm\n    // and yarn are all `.cmd` shims, and since the fix for CVE-2024-27980\n    // (Node 18.20.2 / 20.12.2 / 21.7.3 and later) `spawn` refuses to execute\n    // `.bat`/`.cmd` unless `shell: true` -- it throws `spawn EINVAL`, and\n    // synchronously, so an `error` listener never sees it. Passing\n    // `shell: true` instead would hand the arguments to cmd.exe, which strips\n    // quotes and splits on shell metacharacters. cross-spawn resolves the shim\n    // and escapes the arguments itself, so the call keeps shell-less argument\n    // semantics on every platform.\n    const child = spawn(command, args, {\n      cwd: options.cwd,\n      env: options.env,\n      stdio: [\"ignore\", \"pipe\", \"pipe\"],\n    });\n\n    let stdout = \"\";\n    let stderr = \"\";\n\n    child.stdout?.on(\"data\", (d: Buffer) => {\n      stdout += d.toString();\n    });\n\n    child.stderr?.on(\"data\", (d: Buffer) => {\n      stderr += d.toString();\n    });\n\n    child.on(\"error\", reject);\n\n    child.on(\"close\", (code) => {\n      if (code === 0) {\n        resolve(stdout.trim());\n      } else {\n        reject(\n          new Error(stderr.trim() || `${command} exited with code ${code}`),\n        );\n      }\n    });\n  });\n}\n","import { promises as fs } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { join } from \"node:path\";\nimport {\n  DEFAULT_REGISTRY_URL,\n  POWERHOUSE_CONFIG_FILE,\n} from \"../clis/constants.js\";\nimport { getConfig } from \"../clis/file-system/get-config.js\";\nimport { spawnAsync } from \"../clis/file-system/spawn-async.js\";\n\nexport { DEFAULT_REGISTRY_URL } from \"../clis/constants.js\";\n\n/**\n * Extract the host portion of a registry URL — what npm uses as the key in\n * `~/.npmrc` for per-registry tokens (e.g. `//registry.vetra.io/`).\n */\nexport function registryAuthKey(registryUrl: string): string {\n  const url = new URL(registryUrl);\n  // Always trailing slash; npm's lookup is exact-match against the leading\n  // path of the registry URL, with `//` prefix and trailing `/`.\n  const path = url.pathname.endsWith(\"/\") ? url.pathname : `${url.pathname}/`;\n  return `//${url.host}${path}:_authToken`;\n}\n\nexport interface ResolveRegistryUrlOptions {\n  /** Explicit registry URL (e.g. from --registry flag). Highest priority. */\n  registry?: string;\n  /** Project path to read powerhouse.config.json from. */\n  projectPath: string;\n  /** Environment variables. Defaults to process.env. */\n  env?: Record<string, string | undefined>;\n}\n\n/**\n * Resolve the registry URL with priority: flag > env > config > default.\n */\nexport function resolveRegistryUrl(options: ResolveRegistryUrlOptions): string {\n  const { registry, projectPath, env = process.env } = options;\n  const configPath = join(projectPath, POWERHOUSE_CONFIG_FILE);\n  const config = getConfig(configPath);\n\n  return (\n    registry ??\n    env.PH_REGISTRY_URL ??\n    config.packageRegistryUrl ??\n    DEFAULT_REGISTRY_URL\n  );\n}\n\n/**\n * Check if the user is authenticated with the given npm registry.\n * Returns the username on success, throws on failure.\n */\nexport async function checkNpmAuth(registryUrl: string): Promise<string> {\n  return spawnAsync(\"npm\", [\"whoami\", \"--registry\", registryUrl]);\n}\n\nexport interface NpmPublishOptions {\n  /** Registry URL to publish to. */\n  registryUrl: string;\n  /** Working directory (project root). */\n  cwd: string;\n  /** Additional arguments forwarded to npm publish. */\n  args?: string[];\n  /** Bearer token for the registry. When set, passed via a registry-scoped\n   *  `_authToken` config flag rather than read from the user's `.npmrc`. */\n  authToken?: string;\n}\n\nexport interface NpmPublishResult {\n  /** stdout from npm publish. */\n  stdout: string;\n}\n\n/**\n * Run `npm publish` against the given registry.\n * Uses spawn with args array to avoid shell injection.\n *\n * When `authToken` is provided, the token is passed via a registry-scoped\n * `--//host/:_authToken=<token>` flag (npm's standard form for per-registry\n * tokens) so we never have to write to `~/.npmrc`.\n */\nexport async function npmPublish(\n  options: NpmPublishOptions,\n): Promise<NpmPublishResult> {\n  const { registryUrl, cwd, args = [], authToken } = options;\n  const tokenArg = authToken\n    ? [`--${registryAuthKey(registryUrl)}=${authToken}`]\n    : [];\n  const npmArgs = [\"publish\", \"--registry\", registryUrl, ...tokenArg, ...args];\n  const stdout = await spawnAsync(\"npm\", npmArgs, { cwd });\n  return { stdout };\n}\n\n/**\n * Write `_authToken=<token>` for the given registry host into `~/.npmrc`,\n * preserving any other lines. Replaces the existing entry for the same key\n * if present. Returns the absolute path to the npmrc that was written.\n */\nexport async function writeRegistryAuthToken(\n  registryUrl: string,\n  token: string,\n): Promise<string> {\n  const npmrcPath = join(homedir(), \".npmrc\");\n  const key = registryAuthKey(registryUrl);\n  let existing = \"\";\n  try {\n    existing = await fs.readFile(npmrcPath, \"utf8\");\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code !== \"ENOENT\") throw err;\n  }\n  const lines = existing.split(\"\\n\");\n  const filtered = lines.filter((line) => !line.startsWith(`${key}=`));\n  // Also drop any trailing empties to avoid stacking blank lines on rewrite.\n  while (filtered.length && filtered[filtered.length - 1] === \"\")\n    filtered.pop();\n  filtered.push(`${key}=${token}`);\n  await fs.writeFile(npmrcPath, `${filtered.join(\"\\n\")}\\n`, \"utf8\");\n  return npmrcPath;\n}\n\nexport interface NpmUnpublishOptions {\n  /** Registry URL to unpublish from. */\n  registryUrl: string;\n  /** Working directory (project root). */\n  cwd: string;\n  /** Package spec: `<name>` (whole package) or `<name>@<version>` (single version). */\n  spec: string;\n  /** Additional arguments forwarded to npm unpublish. */\n  args?: string[];\n  /** Bearer token for the registry (same semantics as `NpmPublishOptions.authToken`). */\n  authToken?: string;\n}\n\nexport interface NpmUnpublishResult {\n  /** stdout from npm unpublish. */\n  stdout: string;\n}\n\n/**\n * Run `npm unpublish` against the given registry.\n * Always passes `--force` because npm otherwise refuses to unpublish packages\n * older than 72h (a public-npmjs safeguard that doesn't apply to private registries).\n */\nexport async function npmUnpublish(\n  options: NpmUnpublishOptions,\n): Promise<NpmUnpublishResult> {\n  const { registryUrl, cwd, spec, args = [], authToken } = options;\n  const tokenArg = authToken\n    ? [`--${registryAuthKey(registryUrl)}=${authToken}`]\n    : [];\n  const npmArgs = [\n    \"unpublish\",\n    spec,\n    \"--registry\",\n    registryUrl,\n    \"--force\",\n    ...tokenArg,\n    ...args,\n  ];\n  const stdout = await spawnAsync(\"npm\", npmArgs, { cwd });\n  return { stdout };\n}\n"],"mappings":";;;;;;;;;AA8DA,MAAa,uBAAuB;CAClC;CACA;CACA;CACA;CACA;AACF;AC1BA,MAAa,uBAAuB;AA8CpC,MAAa,yBAAyB;AAKtC,MAAa,WAAW,QAAQ;AAEK,KAAK,UAAA,KAA4B;AAGtE,MAAa,8BAA8B,CACzC,kBACA,gCACF;AA2BA,MAAa,uBAAuB;CAClC,oBAAoB;EAClB,eAAe,CAAC,sCAA6B;EAC7C,cAAc,CAAC;EACf,cAAc,CAAC;CACjB;CAGA,OAAO;EACL,eAAe,CAAC;EAChB,cAAc,CAAC;EACf,cAAc,CAAC,iCAAwB;CACzC;AACF;AASsC,CACpC,GAAG,6BACH,GAAG,qBAAqB,mBAAmB,aAC7C;AA6MA,MAAa,iBAAmC;CAC9C,mBAAmB;CACnB,YAAY;CACZ,eAAe;CACf,cAAc;CACd,kBAAkB;CAClB,YAAY;CACZ,UAAU;CACV,MAAM;EACJ,SAAS;EACT,QAAQ,CAAC;CACX;AACF;;;AC9WA,SAAgB,UAAU,OAAO,4BAA4B;CAC3D,IAAI,SAA2B,EAAE,GAAG,eAAe;CACnD,IAAI;EACF,MAAM,YAAY,aAAa,MAAM,OAAO;EAC5C,MAAM,aAAa,KAAK,MAAM,SAAS;EACvC,SAAS;GAAE,GAAG;GAAQ,GAAG;EAAW;CACtC,QAAQ,CAER;CAEA,OAAO;AACT;;;ACbA,SAAgB,WACd,SACA,MACA,UAGI,CAAC,GACY;CACjB,OAAO,IAAI,SAAS,SAAS,WAAW;EAUtC,MAAM,QAAQ,MAAM,SAAS,MAAM;GACjC,KAAK,QAAQ;GACb,KAAK,QAAQ;GACb,OAAO;IAAC;IAAU;IAAQ;GAAM;EAClC,CAAC;EAED,IAAI,SAAS;EACb,IAAI,SAAS;EAEb,MAAM,QAAQ,GAAG,SAAS,MAAc;GACtC,UAAU,EAAE,SAAS;EACvB,CAAC;EAED,MAAM,QAAQ,GAAG,SAAS,MAAc;GACtC,UAAU,EAAE,SAAS;EACvB,CAAC;EAED,MAAM,GAAG,SAAS,MAAM;EAExB,MAAM,GAAG,UAAU,SAAS;GAC1B,IAAI,SAAS,GACX,QAAQ,OAAO,KAAK,CAAC;QAErB,OACE,IAAI,MAAM,OAAO,KAAK,KAAK,GAAG,QAAQ,oBAAoB,MAAM,CAClE;EAEJ,CAAC;CACH,CAAC;AACH;;;;;;;ACjCA,SAAgB,gBAAgB,aAA6B;CAC3D,MAAM,MAAM,IAAI,IAAI,WAAW;CAG/B,MAAM,OAAO,IAAI,SAAS,SAAS,GAAG,IAAI,IAAI,WAAW,GAAG,IAAI,SAAS;CACzE,OAAO,KAAK,IAAI,OAAO,KAAK;AAC9B;;;;AAcA,SAAgB,mBAAmB,SAA4C;CAC7E,MAAM,EAAE,UAAU,aAAa,MAAM,QAAQ,QAAQ;CAErD,MAAM,SAAS,UADI,KAAK,aAAa,sBACZ,CAAU;CAEnC,OACE,YACA,IAAI,mBACJ,OAAO,sBAAA;AAGX;;;;;AAMA,eAAsB,aAAa,aAAsC;CACvE,OAAO,WAAW,OAAO;EAAC;EAAU;EAAc;CAAW,CAAC;AAChE;;;;;;;;;AA2BA,eAAsB,WACpB,SAC2B;CAC3B,MAAM,EAAE,aAAa,KAAK,OAAO,CAAC,GAAG,cAAc;CAMnD,OAAO,EAAE,QAAA,MADY,WAAW,OAAO;EADtB;EAAW;EAAc;EAAa,GAHtC,YACb,CAAC,KAAK,gBAAgB,WAAW,EAAE,GAAG,WAAW,IACjD,CAAC;EAC+D,GAAG;CAChC,GAAS,EAAE,IAAI,CAAC,EACvC;AAClB;;;;;;AAOA,eAAsB,uBACpB,aACA,OACiB;CACjB,MAAM,YAAY,KAAK,QAAQ,GAAG,QAAQ;CAC1C,MAAM,MAAM,gBAAgB,WAAW;CACvC,IAAI,WAAW;CACf,IAAI;EACF,WAAW,MAAMA,SAAG,SAAS,WAAW,MAAM;CAChD,SAAS,KAAK;EACZ,IAAK,IAA8B,SAAS,UAAU,MAAM;CAC9D;CAEA,MAAM,WADQ,SAAS,MAAM,IACR,CAAC,CAAC,QAAQ,SAAS,CAAC,KAAK,WAAW,GAAG,IAAI,EAAE,CAAC;CAEnE,OAAO,SAAS,UAAU,SAAS,SAAS,SAAS,OAAO,IAC1D,SAAS,IAAI;CACf,SAAS,KAAK,GAAG,IAAI,GAAG,OAAO;CAC/B,MAAMA,SAAG,UAAU,WAAW,GAAG,SAAS,KAAK,IAAI,EAAE,KAAK,MAAM;CAChE,OAAO;AACT;;;;;;AAyBA,eAAsB,aACpB,SAC6B;CAC7B,MAAM,EAAE,aAAa,KAAK,MAAM,OAAO,CAAC,GAAG,cAAc;CAczD,OAAO,EAAE,QAAA,MADY,WAAW,OAAO;EARrC;EACA;EACA;EACA;EACA;EACA,GATe,YACb,CAAC,KAAK,gBAAgB,WAAW,EAAE,GAAG,WAAW,IACjD,CAAC;EAQH,GAAG;CAEkC,GAAS,EAAE,IAAI,CAAC,EACvC;AAClB"}

package/dist/registry/manifest-slim.d.ts

@@ -1,4 +1,5 @@
-import { In as Manifest } from "../types-CpnWmiFY.js";
+import { Fn as Manifest } from "../types-DzleLgA8.js";
+import "../types-CfU91XFU.js";
 //#region registry/manifest-slim.d.ts
 /**
  * Reduce a manifest to the summary fields the package-listing surfaces
@@ -11,7 +12,7 @@ import { In as Manifest } from "../types-CpnWmiFY.js";
  * blew the localStorage quota in Connect's package manager. Whitelisting
  * the known fields keeps listings small and drops any such junk.
  */
-declare function slimManifest(manifest: Manifest | null | undefined): Manifest | null;
+export declare function slimManifest(manifest: Manifest | null | undefined): Manifest | null;
 //#endregion
-export { slimManifest };
+export {};
 //# sourceMappingURL=manifest-slim.d.ts.map

package/dist/registry/manifest-slim.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manifest-slim.d.ts","names":[],"sources":["../../registry/manifest-slim.ts"],"mappings":";;;;;;;AAiDA;;;;;;iBAAgB,YAAA,CACd,QAAA,EAAU,QAAA,sBACT,QAAA"}
+{"version":3,"file":"manifest-slim.d.ts","names":[],"sources":["../../registry/manifest-slim.ts"],"mappings":";;;;;;;;;;;;;;wBAsDgB,aACd,UAAU,8BACT"}

package/dist/registry/manifest-slim.js

@@ -6,6 +6,12 @@ const MODULE_KEYS = [
 	"processors",
 	"subgraphs"
 ];
+const PIECE_KEYS = [
+	"version",
+	"description",
+	"bundle",
+	"descriptor"
+];
 function slimModules(modules) {
 	if (!Array.isArray(modules)) return void 0;
 	const out = [];
@@ -49,8 +55,23 @@ function slimManifest(manifest) {
 		const slimmed = slimModules(raw[key]);
 		if (slimmed) out[key] = slimmed;
 	}
+	const pieces = slimPieces(raw.pieces);
+	if (pieces) out.pieces = pieces;
 	return out;
 }
+function slimPieces(modules) {
+	const slimmed = slimModules(modules);
+	if (!slimmed || !Array.isArray(modules)) return slimmed;
+	const entries = modules.filter((entry) => entry !== null && typeof entry === "object");
+	return slimmed.map((module, index) => {
+		const piece = { ...module };
+		for (const key of PIECE_KEYS) {
+			const value = entries[index]?.[key];
+			if (typeof value === "string") piece[key] = value;
+		}
+		return piece;
+	});
+}
 //#endregion
 export { slimManifest };
 

package/dist/registry/manifest-slim.js.map

@@ -1 +1 @@
-{"version":3,"file":"manifest-slim.js","names":[],"sources":["../../registry/manifest-slim.ts"],"sourcesContent":["// Browser-safe (no node imports): Connect's package-manager hook deep-imports\n// this module, so it must not pull in the node:fs helpers that live behind\n// the registry barrel.\nimport type { Manifest } from \"types\";\n\ntype ModuleLike = { id?: unknown; name?: unknown; documentTypes?: unknown };\n\nconst MODULE_KEYS = [\n  \"documentModels\",\n  \"apps\",\n  \"editors\",\n  \"processors\",\n  \"subgraphs\",\n] as const;\n\nfunction slimModules(\n  modules: unknown,\n): { id: string; name: string; documentTypes?: string[] }[] | undefined {\n  if (!Array.isArray(modules)) return undefined;\n  const out: { id: string; name: string; documentTypes?: string[] }[] = [];\n  for (const entry of modules) {\n    if (entry === null || typeof entry !== \"object\") continue;\n    const { id, name, documentTypes } = entry as ModuleLike;\n    out.push({\n      id: typeof id === \"string\" ? id : \"\",\n      name: typeof name === \"string\" ? name : \"\",\n      ...(Array.isArray(documentTypes)\n        ? {\n            documentTypes: documentTypes.filter(\n              (d): d is string => typeof d === \"string\",\n            ),\n          }\n        : {}),\n    });\n  }\n  return out;\n}\n\n/**\n * Reduce a manifest to the summary fields the package-listing surfaces\n * actually consume: name, description, category, publisher, and the\n * id/name/documentTypes of each module.\n *\n * Manifests arrive from the registry as unvalidated JSON, and real-world\n * publishes have carried multi-megabyte unknown fields (e.g. an agent\n * manifest's `features` blob) that made `/packages` an 8 MB response and\n * blew the localStorage quota in Connect's package manager. Whitelisting\n * the known fields keeps listings small and drops any such junk.\n */\nexport function slimManifest(\n  manifest: Manifest | null | undefined,\n): Manifest | null {\n  if (manifest === null || manifest === undefined) return null;\n  if (typeof manifest !== \"object\") return null;\n  const raw = manifest as Record<string, unknown>;\n\n  const out: Manifest = {\n    name: typeof raw.name === \"string\" ? raw.name : \"\",\n  };\n  if (typeof raw.description === \"string\") out.description = raw.description;\n  if (typeof raw.category === \"string\") out.category = raw.category;\n  if (raw.publisher !== null && typeof raw.publisher === \"object\") {\n    const publisher = raw.publisher as { name?: unknown; url?: unknown };\n    out.publisher = {\n      ...(typeof publisher.name === \"string\" ? { name: publisher.name } : {}),\n      ...(typeof publisher.url === \"string\" ? { url: publisher.url } : {}),\n    };\n  }\n  for (const key of MODULE_KEYS) {\n    const slimmed = slimModules(raw[key]);\n    if (slimmed) out[key] = slimmed;\n  }\n  return out;\n}\n"],"mappings":";AAOA,MAAM,cAAc;CAClB;CACA;CACA;CACA;CACA;CACD;AAED,SAAS,YACP,SACsE;AACtE,KAAI,CAAC,MAAM,QAAQ,QAAQ,CAAE,QAAO,KAAA;CACpC,MAAM,MAAgE,EAAE;AACxE,MAAK,MAAM,SAAS,SAAS;AAC3B,MAAI,UAAU,QAAQ,OAAO,UAAU,SAAU;EACjD,MAAM,EAAE,IAAI,MAAM,kBAAkB;AACpC,MAAI,KAAK;GACP,IAAI,OAAO,OAAO,WAAW,KAAK;GAClC,MAAM,OAAO,SAAS,WAAW,OAAO;GACxC,GAAI,MAAM,QAAQ,cAAc,GAC5B,EACE,eAAe,cAAc,QAC1B,MAAmB,OAAO,MAAM,SAClC,EACF,GACD,EAAE;GACP,CAAC;;AAEJ,QAAO;;;;;;;;;;;;;AAcT,SAAgB,aACd,UACiB;AACjB,KAAI,aAAa,QAAQ,aAAa,KAAA,EAAW,QAAO;AACxD,KAAI,OAAO,aAAa,SAAU,QAAO;CACzC,MAAM,MAAM;CAEZ,MAAM,MAAgB,EACpB,MAAM,OAAO,IAAI,SAAS,WAAW,IAAI,OAAO,IACjD;AACD,KAAI,OAAO,IAAI,gBAAgB,SAAU,KAAI,cAAc,IAAI;AAC/D,KAAI,OAAO,IAAI,aAAa,SAAU,KAAI,WAAW,IAAI;AACzD,KAAI,IAAI,cAAc,QAAQ,OAAO,IAAI,cAAc,UAAU;EAC/D,MAAM,YAAY,IAAI;AACtB,MAAI,YAAY;GACd,GAAI,OAAO,UAAU,SAAS,WAAW,EAAE,MAAM,UAAU,MAAM,GAAG,EAAE;GACtE,GAAI,OAAO,UAAU,QAAQ,WAAW,EAAE,KAAK,UAAU,KAAK,GAAG,EAAE;GACpE;;AAEH,MAAK,MAAM,OAAO,aAAa;EAC7B,MAAM,UAAU,YAAY,IAAI,KAAK;AACrC,MAAI,QAAS,KAAI,OAAO;;AAE1B,QAAO"}
+{"version":3,"file":"manifest-slim.js","names":[],"sources":["../../registry/manifest-slim.ts"],"sourcesContent":["// Browser-safe (no node imports): Connect's package-manager hook deep-imports\n// this module, so it must not pull in the node:fs helpers that live behind\n// the registry barrel.\nimport type { Manifest, PieceModule } from \"types\";\n\ntype ModuleLike = { id?: unknown; name?: unknown; documentTypes?: unknown };\n\nconst MODULE_KEYS = [\n  \"documentModels\",\n  \"apps\",\n  \"editors\",\n  \"processors\",\n  \"subgraphs\",\n] as const;\n\n// What `ph build` adds to a piece entry, kept because a listing is how a piece\n// is found before anyone installs its package. The logo and the property\n// schemas live in the descriptor the entry points at, not here.\nconst PIECE_KEYS = [\"version\", \"description\", \"bundle\", \"descriptor\"] as const;\n\nfunction slimModules(\n  modules: unknown,\n): { id: string; name: string; documentTypes?: string[] }[] | undefined {\n  if (!Array.isArray(modules)) return undefined;\n  const out: { id: string; name: string; documentTypes?: string[] }[] = [];\n  for (const entry of modules) {\n    if (entry === null || typeof entry !== \"object\") continue;\n    const { id, name, documentTypes } = entry as ModuleLike;\n    out.push({\n      id: typeof id === \"string\" ? id : \"\",\n      name: typeof name === \"string\" ? name : \"\",\n      ...(Array.isArray(documentTypes)\n        ? {\n            documentTypes: documentTypes.filter(\n              (d): d is string => typeof d === \"string\",\n            ),\n          }\n        : {}),\n    });\n  }\n  return out;\n}\n\n/**\n * Reduce a manifest to the summary fields the package-listing surfaces\n * actually consume: name, description, category, publisher, and the\n * id/name/documentTypes of each module.\n *\n * Manifests arrive from the registry as unvalidated JSON, and real-world\n * publishes have carried multi-megabyte unknown fields (e.g. an agent\n * manifest's `features` blob) that made `/packages` an 8 MB response and\n * blew the localStorage quota in Connect's package manager. Whitelisting\n * the known fields keeps listings small and drops any such junk.\n */\nexport function slimManifest(\n  manifest: Manifest | null | undefined,\n): Manifest | null {\n  if (manifest === null || manifest === undefined) return null;\n  if (typeof manifest !== \"object\") return null;\n  const raw = manifest as Record<string, unknown>;\n\n  const out: Manifest = {\n    name: typeof raw.name === \"string\" ? raw.name : \"\",\n  };\n  if (typeof raw.description === \"string\") out.description = raw.description;\n  if (typeof raw.category === \"string\") out.category = raw.category;\n  if (raw.publisher !== null && typeof raw.publisher === \"object\") {\n    const publisher = raw.publisher as { name?: unknown; url?: unknown };\n    out.publisher = {\n      ...(typeof publisher.name === \"string\" ? { name: publisher.name } : {}),\n      ...(typeof publisher.url === \"string\" ? { url: publisher.url } : {}),\n    };\n  }\n  for (const key of MODULE_KEYS) {\n    const slimmed = slimModules(raw[key]);\n    if (slimmed) out[key] = slimmed;\n  }\n  const pieces = slimPieces(raw.pieces);\n  if (pieces) out.pieces = pieces;\n  return out;\n}\n\nfunction slimPieces(modules: unknown): PieceModule[] | undefined {\n  const slimmed = slimModules(modules);\n  if (!slimmed || !Array.isArray(modules)) return slimmed;\n  const entries = modules.filter(\n    (entry): entry is Record<string, unknown> =>\n      entry !== null && typeof entry === \"object\",\n  );\n  return slimmed.map((module, index) => {\n    const piece: PieceModule = { ...module };\n    for (const key of PIECE_KEYS) {\n      const value = entries[index]?.[key];\n      if (typeof value === \"string\") piece[key] = value;\n    }\n    return piece;\n  });\n}\n"],"mappings":";AAOA,MAAM,cAAc;CAClB;CACA;CACA;CACA;CACA;AACF;AAKA,MAAM,aAAa;CAAC;CAAW;CAAe;CAAU;AAAY;AAEpE,SAAS,YACP,SACsE;CACtE,IAAI,CAAC,MAAM,QAAQ,OAAO,GAAG,OAAO,KAAA;CACpC,MAAM,MAAgE,CAAC;CACvE,KAAK,MAAM,SAAS,SAAS;EAC3B,IAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;EACjD,MAAM,EAAE,IAAI,MAAM,kBAAkB;EACpC,IAAI,KAAK;GACP,IAAI,OAAO,OAAO,WAAW,KAAK;GAClC,MAAM,OAAO,SAAS,WAAW,OAAO;GACxC,GAAI,MAAM,QAAQ,aAAa,IAC3B,EACE,eAAe,cAAc,QAC1B,MAAmB,OAAO,MAAM,QACnC,EACF,IACA,CAAC;EACP,CAAC;CACH;CACA,OAAO;AACT;;;;;;;;;;;;AAaA,SAAgB,aACd,UACiB;CACjB,IAAI,aAAa,QAAQ,aAAa,KAAA,GAAW,OAAO;CACxD,IAAI,OAAO,aAAa,UAAU,OAAO;CACzC,MAAM,MAAM;CAEZ,MAAM,MAAgB,EACpB,MAAM,OAAO,IAAI,SAAS,WAAW,IAAI,OAAO,GAClD;CACA,IAAI,OAAO,IAAI,gBAAgB,UAAU,IAAI,cAAc,IAAI;CAC/D,IAAI,OAAO,IAAI,aAAa,UAAU,IAAI,WAAW,IAAI;CACzD,IAAI,IAAI,cAAc,QAAQ,OAAO,IAAI,cAAc,UAAU;EAC/D,MAAM,YAAY,IAAI;EACtB,IAAI,YAAY;GACd,GAAI,OAAO,UAAU,SAAS,WAAW,EAAE,MAAM,UAAU,KAAK,IAAI,CAAC;GACrE,GAAI,OAAO,UAAU,QAAQ,WAAW,EAAE,KAAK,UAAU,IAAI,IAAI,CAAC;EACpE;CACF;CACA,KAAK,MAAM,OAAO,aAAa;EAC7B,MAAM,UAAU,YAAY,IAAI,IAAI;EACpC,IAAI,SAAS,IAAI,OAAO;CAC1B;CACA,MAAM,SAAS,WAAW,IAAI,MAAM;CACpC,IAAI,QAAQ,IAAI,SAAS;CACzB,OAAO;AACT;AAEA,SAAS,WAAW,SAA6C;CAC/D,MAAM,UAAU,YAAY,OAAO;CACnC,IAAI,CAAC,WAAW,CAAC,MAAM,QAAQ,OAAO,GAAG,OAAO;CAChD,MAAM,UAAU,QAAQ,QACrB,UACC,UAAU,QAAQ,OAAO,UAAU,QACvC;CACA,OAAO,QAAQ,KAAK,QAAQ,UAAU;EACpC,MAAM,QAAqB,EAAE,GAAG,OAAO;EACvC,KAAK,MAAM,OAAO,YAAY;GAC5B,MAAM,QAAQ,QAAQ,MAAM,GAAG;GAC/B,IAAI,OAAO,UAAU,UAAU,MAAM,OAAO;EAC9C;EACA,OAAO;CACT,CAAC;AACH"}

package/dist/registry/updates.d.ts

@@ -5,7 +5,7 @@
  * of a scoped name (`@scope/pkg`) — means `latest`. Otherwise the suffix is
  * a version when it is valid semver, a dist tag otherwise.
  */
-declare function parseInstallSpec(spec?: string): {
+export declare function parseInstallSpec(spec?: string): {
   kind: "tag";
   value: string;
 } | {
@@ -24,7 +24,7 @@ declare function parseInstallSpec(spec?: string): {
  * semver and the target is strictly newer — equal, older, invalid, or
  * missing data all yield `undefined` (no downgrade, no guess).
  */
-declare function getUpdateTarget(installed: {
+export declare function getUpdateTarget(installed: {
   version?: string | null;
   spec?: string | null;
 }, info: {
@@ -32,5 +32,5 @@ declare function getUpdateTarget(installed: {
   latestVersion?: string | null;
 }): string | undefined;
 //#endregion
-export { getUpdateTarget, parseInstallSpec };
+export {};
 //# sourceMappingURL=updates.d.ts.map

package/dist/registry/updates.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"updates.d.ts","names":[],"sources":["../../registry/updates.ts"],"mappings":";;AAQA;;;;;iBAAgB,gBAAA,CACd,IAAA;EACG,IAAA;EAAa,KAAA;AAAA;EAAoB,IAAA;EAAiB,KAAA;AAAA;;;;;;;;;;;;;iBAoBvC,eAAA,CACd,SAAA;EAAa,OAAA;EAAyB,IAAA;AAAA,GACtC,IAAA;EACE,QAAA,GAAW,MAAA;EACX,aAAA;AAAA"}
+{"version":3,"file":"updates.d.ts","names":[],"sources":["../../registry/updates.ts"],"mappings":";;;;;;;wBAQgB,iBACd;EACG;EAAa;;EAAoB;EAAiB;;;;;;;;;;;;;;wBAoBvC,gBACd;EAAa;EAAyB;GACtC;EACE,WAAW;EACX"}

package/dist/registry/updates.js.map

@@ -1 +1 @@
-{"version":3,"file":"updates.js","names":[],"sources":["../../registry/updates.ts"],"sourcesContent":["import { gt, valid } from \"semver\";\n\n/**\n * Split an install spec (`name`, `name@tag`, or `name@version`) into the\n * stream it points at. A missing `@` — or one that is only the scope marker\n * of a scoped name (`@scope/pkg`) — means `latest`. Otherwise the suffix is\n * a version when it is valid semver, a dist tag otherwise.\n */\nexport function parseInstallSpec(\n  spec?: string,\n): { kind: \"tag\"; value: string } | { kind: \"version\"; value: string } {\n  if (!spec) return { kind: \"tag\", value: \"latest\" };\n  const at = spec.lastIndexOf(\"@\");\n  if (at <= 0) return { kind: \"tag\", value: \"latest\" };\n  const value = spec.slice(at + 1);\n  return valid(value) ? { kind: \"version\", value } : { kind: \"tag\", value };\n}\n\n/**\n * Resolve the update target for an installed package: the current value of\n * the user's stream (the dist tag named by the install spec, or `latest`\n * for pinned/bare installs). The `latest` stream is reported by every\n * registry as the package's newest version (`latestVersion`), so it falls\n * back to that when the full dist-tag map is absent; any other stream is\n * only known from the dist-tag map and is never guessed.\n *\n * Returns the target only when it and the installed version are valid\n * semver and the target is strictly newer — equal, older, invalid, or\n * missing data all yield `undefined` (no downgrade, no guess).\n */\nexport function getUpdateTarget(\n  installed: { version?: string | null; spec?: string | null },\n  info: {\n    distTags?: Record<string, string> | null;\n    latestVersion?: string | null;\n  },\n): string | undefined {\n  const parsed = parseInstallSpec(installed.spec ?? undefined);\n  const stream = parsed.kind === \"tag\" ? parsed.value : \"latest\";\n  const target =\n    stream === \"latest\"\n      ? (info.distTags?.latest ?? info.latestVersion ?? undefined)\n      : info.distTags?.[stream];\n  if (!target || !valid(target)) return undefined;\n  const installedVersion = installed.version;\n  if (!installedVersion || !valid(installedVersion)) return undefined;\n  return gt(target, installedVersion) ? target : undefined;\n}\n"],"mappings":";;;;;;;;AAQA,SAAgB,iBACd,MACqE;AACrE,KAAI,CAAC,KAAM,QAAO;EAAE,MAAM;EAAO,OAAO;EAAU;CAClD,MAAM,KAAK,KAAK,YAAY,IAAI;AAChC,KAAI,MAAM,EAAG,QAAO;EAAE,MAAM;EAAO,OAAO;EAAU;CACpD,MAAM,QAAQ,KAAK,MAAM,KAAK,EAAE;AAChC,QAAO,MAAM,MAAM,GAAG;EAAE,MAAM;EAAW;EAAO,GAAG;EAAE,MAAM;EAAO;EAAO;;;;;;;;;;;;;;AAe3E,SAAgB,gBACd,WACA,MAIoB;CACpB,MAAM,SAAS,iBAAiB,UAAU,QAAQ,KAAA,EAAU;CAC5D,MAAM,SAAS,OAAO,SAAS,QAAQ,OAAO,QAAQ;CACtD,MAAM,SACJ,WAAW,WACN,KAAK,UAAU,UAAU,KAAK,iBAAiB,KAAA,IAChD,KAAK,WAAW;AACtB,KAAI,CAAC,UAAU,CAAC,MAAM,OAAO,CAAE,QAAO,KAAA;CACtC,MAAM,mBAAmB,UAAU;AACnC,KAAI,CAAC,oBAAoB,CAAC,MAAM,iBAAiB,CAAE,QAAO,KAAA;AAC1D,QAAO,GAAG,QAAQ,iBAAiB,GAAG,SAAS,KAAA"}
+{"version":3,"file":"updates.js","names":[],"sources":["../../registry/updates.ts"],"sourcesContent":["import { gt, valid } from \"semver\";\n\n/**\n * Split an install spec (`name`, `name@tag`, or `name@version`) into the\n * stream it points at. A missing `@` — or one that is only the scope marker\n * of a scoped name (`@scope/pkg`) — means `latest`. Otherwise the suffix is\n * a version when it is valid semver, a dist tag otherwise.\n */\nexport function parseInstallSpec(\n  spec?: string,\n): { kind: \"tag\"; value: string } | { kind: \"version\"; value: string } {\n  if (!spec) return { kind: \"tag\", value: \"latest\" };\n  const at = spec.lastIndexOf(\"@\");\n  if (at <= 0) return { kind: \"tag\", value: \"latest\" };\n  const value = spec.slice(at + 1);\n  return valid(value) ? { kind: \"version\", value } : { kind: \"tag\", value };\n}\n\n/**\n * Resolve the update target for an installed package: the current value of\n * the user's stream (the dist tag named by the install spec, or `latest`\n * for pinned/bare installs). The `latest` stream is reported by every\n * registry as the package's newest version (`latestVersion`), so it falls\n * back to that when the full dist-tag map is absent; any other stream is\n * only known from the dist-tag map and is never guessed.\n *\n * Returns the target only when it and the installed version are valid\n * semver and the target is strictly newer — equal, older, invalid, or\n * missing data all yield `undefined` (no downgrade, no guess).\n */\nexport function getUpdateTarget(\n  installed: { version?: string | null; spec?: string | null },\n  info: {\n    distTags?: Record<string, string> | null;\n    latestVersion?: string | null;\n  },\n): string | undefined {\n  const parsed = parseInstallSpec(installed.spec ?? undefined);\n  const stream = parsed.kind === \"tag\" ? parsed.value : \"latest\";\n  const target =\n    stream === \"latest\"\n      ? (info.distTags?.latest ?? info.latestVersion ?? undefined)\n      : info.distTags?.[stream];\n  if (!target || !valid(target)) return undefined;\n  const installedVersion = installed.version;\n  if (!installedVersion || !valid(installedVersion)) return undefined;\n  return gt(target, installedVersion) ? target : undefined;\n}\n"],"mappings":";;;;;;;;AAQA,SAAgB,iBACd,MACqE;CACrE,IAAI,CAAC,MAAM,OAAO;EAAE,MAAM;EAAO,OAAO;CAAS;CACjD,MAAM,KAAK,KAAK,YAAY,GAAG;CAC/B,IAAI,MAAM,GAAG,OAAO;EAAE,MAAM;EAAO,OAAO;CAAS;CACnD,MAAM,QAAQ,KAAK,MAAM,KAAK,CAAC;CAC/B,OAAO,MAAM,KAAK,IAAI;EAAE,MAAM;EAAW;CAAM,IAAI;EAAE,MAAM;EAAO;CAAM;AAC1E;;;;;;;;;;;;;AAcA,SAAgB,gBACd,WACA,MAIoB;CACpB,MAAM,SAAS,iBAAiB,UAAU,QAAQ,KAAA,CAAS;CAC3D,MAAM,SAAS,OAAO,SAAS,QAAQ,OAAO,QAAQ;CACtD,MAAM,SACJ,WAAW,WACN,KAAK,UAAU,UAAU,KAAK,iBAAiB,KAAA,IAChD,KAAK,WAAW;CACtB,IAAI,CAAC,UAAU,CAAC,MAAM,MAAM,GAAG,OAAO,KAAA;CACtC,MAAM,mBAAmB,UAAU;CACnC,IAAI,CAAC,oBAAoB,CAAC,MAAM,gBAAgB,GAAG,OAAO,KAAA;CAC1D,OAAO,GAAG,QAAQ,gBAAgB,IAAI,SAAS,KAAA;AACjD"}

package/dist/registry/urls.d.ts

@@ -5,7 +5,7 @@
  * `<cdn>/<name[@version]>/...` — both Connect's runtime package manager and
  * the Connect build's PWA-fragment collection resolve packages this way.
  */
-declare function toCdnUrl(registryUrl: string): string;
+export declare function toCdnUrl(registryUrl: string): string;
 //#endregion
-export { toCdnUrl };
+export {};
 //# sourceMappingURL=urls.d.ts.map

package/dist/registry/urls.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"urls.d.ts","names":[],"sources":["../../registry/urls.ts"],"mappings":";;AASA;;;;;iBAAgB,QAAA,CAAS,WAAA"}
+{"version":3,"file":"urls.d.ts","names":[],"sources":["../../registry/urls.ts"],"mappings":";;;;;;;wBASgB,SAAS"}

package/dist/registry/urls.js.map

@@ -1 +1 @@
-{"version":3,"file":"urls.js","names":[],"sources":["../../registry/urls.ts"],"sourcesContent":["// Pure URL helpers, kept free of Node imports so the browser SPA can import\n// them directly (like ./manifest-slim.js) without pulling in ./registry.js.\n\n/**\n * Derive the package-CDN base from a registry URL: `/-/cdn` is appended\n * unless the URL already points at the CDN. Packages are then served at\n * `<cdn>/<name[@version]>/...` — both Connect's runtime package manager and\n * the Connect build's PWA-fragment collection resolve packages this way.\n */\nexport function toCdnUrl(registryUrl: string): string {\n  if (registryUrl.includes(\"/-/cdn\")) return registryUrl;\n  const base = registryUrl.endsWith(\"/\")\n    ? registryUrl.slice(0, -1)\n    : registryUrl;\n  return `${base}/-/cdn`;\n}\n"],"mappings":";;;;;;;AASA,SAAgB,SAAS,aAA6B;AACpD,KAAI,YAAY,SAAS,SAAS,CAAE,QAAO;AAI3C,QAAO,GAHM,YAAY,SAAS,IAAI,GAClC,YAAY,MAAM,GAAG,GAAG,GACxB,YACW"}
+{"version":3,"file":"urls.js","names":[],"sources":["../../registry/urls.ts"],"sourcesContent":["// Pure URL helpers, kept free of Node imports so the browser SPA can import\n// them directly (like ./manifest-slim.js) without pulling in ./registry.js.\n\n/**\n * Derive the package-CDN base from a registry URL: `/-/cdn` is appended\n * unless the URL already points at the CDN. Packages are then served at\n * `<cdn>/<name[@version]>/...` — both Connect's runtime package manager and\n * the Connect build's PWA-fragment collection resolve packages this way.\n */\nexport function toCdnUrl(registryUrl: string): string {\n  if (registryUrl.includes(\"/-/cdn\")) return registryUrl;\n  const base = registryUrl.endsWith(\"/\")\n    ? registryUrl.slice(0, -1)\n    : registryUrl;\n  return `${base}/-/cdn`;\n}\n"],"mappings":";;;;;;;AASA,SAAgB,SAAS,aAA6B;CACpD,IAAI,YAAY,SAAS,QAAQ,GAAG,OAAO;CAI3C,OAAO,GAHM,YAAY,SAAS,GAAG,IACjC,YAAY,MAAM,GAAG,EAAE,IACvB,YACW;AACjB"}

package/dist/{types-C1in4fl3.d.ts → types-Bsp8VL2y.d.ts}

@@ -1,5 +1,4 @@
 import { DateTime } from "luxon";
-
 //#region analytics/constants.d.ts
 declare enum AnalyticsSerializerTypes {
   AnalyticsPath = 0,
@@ -155,4 +154,5 @@ interface IAnalyticsStore {
 }
 //#endregion
 export { AnalyticsMetric as _, AnalyticsSeriesInput as a, CompoundOperator as b, CompoundAnalyticsExpression as c, ConversionMetric as d, IAnalyticsStore as f, AnalyticsGranularity as g, AnalyticsPathSegment as h, AnalyticsSeries as i, CompoundAnalyticsInputs as l, AnalyticsPath as m, AnalyticsOperand as n, AnalyticsSeriesQuery as o, MultiCurrencyConversion as p, AnalyticsQuery as r, AnalyticsUpdateCallback as s, AnalyticsDimension as t, CompoundAnalyticsQuery as u, AnalyticsPeriodType as v, AnalyticsSerializerTypes as y };
-//# sourceMappingURL=types-C1in4fl3.d.ts.map
+export {};
+//# sourceMappingURL=types-Bsp8VL2y.d.ts.map

package/dist/types-Bsp8VL2y.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types-Bsp8VL2y.d.ts","names":[],"sources":["../analytics/constants.ts","../analytics/analytics-path.ts","../analytics/types.ts"],"mappings":";;aAAY;EACV;EACA;EACA;;aAGU;EACV;EACA;EACA;;aAGU;EACV;EACA;EACA;EACA;EACA;EACA;;aAEU;EACV;EACA;EACA;EACA;;aAEU;EACV;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;;;cC5BW;MACP,YAAY;UAIR;SAEM,WAAW,eAAe;SAQ1B,gBAAgB,qBAAqB;SAMrC,UAAU,UAAU,yBAAyB;SAI7C,SAAS,YAAY;EAOnC,YAAY,UAAU;EAIf;;;;EAOA,SAAS;EAIT,gBAAgB;EAMhB,UAAU;EAUV,SAAS,wBAAwB;;cAW7B;MACP,WAAW;MAGX,UAAU;UAIN;UACA;SAEM,WAAW,kBAAkB;SA0B7B,OAAO;SAKP,SAAS;EAKvB,YAAY,UAAS,iBAAwB,SAAQ;EAK9C;;;;EAOA;;KAsBJ;;;KC7JO;EACV,OAAO;EACP,KAAK;EACL;EACA,WAAW;EACX,QAAQ,eAAe;;KAEb,iBAAiB;EAC3B,aAAa;EACb,KAAK;;KAEK,gBAAgB,aAAa;EACvC,QAAQ;EACR,OAAO;EACP,KAAK;EACL;EACA;EACA;EACA;EACA,QAAQ;EACR,YAAY,eAAe;;KAEjB;EACV,MAAM;EACN;EACA;EACA;;KAEU;EACV,OAAO;EACP,KAAK;EACL,aAAa;EACb,KAAK;EACL,QAAQ,eAAe;EACvB,YAAY;;KAEF;EACV,QAAQ;EACR,UAAU;EACV,SAAS;EACT,iBAAiB;;KAEP;EACV;EACA,WAAW;;KAED;EACV;EACA,WAAW;EACX;;KAEU;EACV,iBAAiB;EACjB,aAAa;;KAEH;EACV;EACA,WAAW;;KAGD;EACV,OAAO;EACP,MAAM;EACN,QAAQ;EACR;EACA;EACA;EACA;EACA,SAAS;EACT,YAAY,eAAe;EAC3B,oBAAoB;;KAGV,2BAA2B,QAAQ;UAE9B;EACf,sBACE,QAAQ,eACR,gCACG;EACL,qCAAqC;EACrC,oBACE,OAAO,yBACJ,QAAQ;EACb,iBAAiB,OAAO,yBAAyB;EACjD,kBAAkB,QAAQ,2BAA2B;EACrD,qBAAqB;EAErB,oBACE,QAAQ,eACR,UAAU"}

package/dist/{types-YqLqb0Zb.d.ts → types-CfU91XFU.d.ts}

@@ -1,6 +1,5 @@
-import { In as Manifest, Kt as DocumentModelModule, Nc as Action, Qu as PHBaseState, Rn as Maybe, Ta as SignalDispatch, ql as PHDocument, wn as InputMaybe, xi as Scalars } from "./types-CpnWmiFY.js";
-import { DocumentDriveLocalState, Node } from "@powerhousedao/shared/document-drive";
-
+import "./types-Bsp8VL2y.js";
+import { Cf as Action, Dn as InputMaybe, Fn as Manifest, Fp as PHDocument, Ln as Maybe, Yt as DocumentModelModule, ba as SignalDispatch, km as PHBaseState, vi as Scalars } from "./types-DzleLgA8.js";
 //#region document-drive/gen/drive/actions.d.ts
 type SetDriveNameAction = Action & {
   type: "SET_DRIVE_NAME";
@@ -38,12 +37,12 @@ type DocumentDriveDriveAction = SetDriveNameAction | SetDriveIconAction | SetSha
 interface DocumentDriveDriveOperations {
   setDriveNameOperation: (state: DocumentDriveGlobalState, action: SetDriveNameAction, dispatch?: SignalDispatch) => void;
   setDriveIconOperation: (state: DocumentDriveGlobalState, action: SetDriveIconAction, dispatch?: SignalDispatch) => void;
-  setSharingTypeOperation: (state: DocumentDriveLocalState$1, action: SetSharingTypeAction, dispatch?: SignalDispatch) => void;
-  setAvailableOfflineOperation: (state: DocumentDriveLocalState$1, action: SetAvailableOfflineAction, dispatch?: SignalDispatch) => void;
-  addListenerOperation: (state: DocumentDriveLocalState$1, action: AddListenerAction, dispatch?: SignalDispatch) => void;
-  removeListenerOperation: (state: DocumentDriveLocalState$1, action: RemoveListenerAction, dispatch?: SignalDispatch) => void;
-  addTriggerOperation: (state: DocumentDriveLocalState$1, action: AddTriggerAction, dispatch?: SignalDispatch) => void;
-  removeTriggerOperation: (state: DocumentDriveLocalState$1, action: RemoveTriggerAction, dispatch?: SignalDispatch) => void;
+  setSharingTypeOperation: (state: DocumentDriveLocalState, action: SetSharingTypeAction, dispatch?: SignalDispatch) => void;
+  setAvailableOfflineOperation: (state: DocumentDriveLocalState, action: SetAvailableOfflineAction, dispatch?: SignalDispatch) => void;
+  addListenerOperation: (state: DocumentDriveLocalState, action: AddListenerAction, dispatch?: SignalDispatch) => void;
+  removeListenerOperation: (state: DocumentDriveLocalState, action: RemoveListenerAction, dispatch?: SignalDispatch) => void;
+  addTriggerOperation: (state: DocumentDriveLocalState, action: AddTriggerAction, dispatch?: SignalDispatch) => void;
+  removeTriggerOperation: (state: DocumentDriveLocalState, action: RemoveTriggerAction, dispatch?: SignalDispatch) => void;
 }
 //#endregion
 //#region document-drive/gen/node/actions.d.ts
@@ -103,29 +102,10 @@ type LegacyAddFileAction = Action & {
   input: LegacyAddFileInput;
 };
 //#endregion
-//#region document-drive/src/types.d.ts
-type GenerateNodesCopySrc = {
-  srcId: Node["id"];
-  targetName?: Node["name"];
-  targetParentFolder?: Node["parentFolder"];
-};
-type GenerateNodesCopyIdGenerator = (nodeToCopy: Node) => Node["id"];
-type DriveInput = {
-  global: {
-    name: string;
-    icon?: string | null;
-  };
-  id?: string;
-  slug?: string;
-  preferredEditor?: string;
-  local?: Partial<DocumentDriveLocalState>;
-};
-type SharingType = "LOCAL" | "CLOUD" | "PUBLIC";
-//#endregion
 //#region document-drive/types.d.ts
 type DocumentDrivePHState$1 = PHBaseState & {
   global: DocumentDriveGlobalState;
-  local: DocumentDriveLocalState$1;
+  local: DocumentDriveLocalState;
 };
 type DriveDocumentModelModule = DocumentModelModule<DocumentDrivePHState$1>;
 //#endregion
@@ -157,11 +137,8 @@ interface PackageInfo {
   owners?: string[];
 }
 /**
- * Trimmed per-item shape returned by the paginated `GET /packages?limit=…`
- * mode. Carries only the fields the package-listing card renders; version
- * metadata (distTags/versions) and documentTypes are fetched on demand via
- * the single-package endpoint. The legacy no-param and `?documentType=` modes
- * still return full {@link PackageInfo} objects.
+ * Item shape of `GET /packages` pages: only what a listing card renders. Pass
+ * `detail=full` for {@link PackageInfo} items.
  */
 interface PackageListItem {
   name: string;
@@ -174,18 +151,36 @@ interface PackageListItem {
     url?: string;
   };
 }
-/** Envelope returned by the paginated `GET /packages?limit=…` mode. */
-interface PackagePage {
-  items: PackageListItem[];
+/** Envelope of `GET /packages` and `GET /pieces`. */
+interface Page<T> {
+  items: T[];
   total: number;
   limit: number;
   offset: number;
   hasMore: boolean;
 }
+/** Filter options over the `name`-restricted set, sent with `facets=true`. */
+interface PackageFacets {
+  categories: string[];
+  publishers: string[];
+}
+/** `GET /packages`; items are {@link PackageInfo} with `detail=full`. */
+interface PackagePage<T = PackageListItem> extends Page<T> {
+  facets?: PackageFacets;
+}
+/** Manifest module lists accepted by the `moduleType` filter. */
+declare const PACKAGE_MODULE_TYPES: readonly ["documentModels", "editors", "apps", "subgraphs", "processors"];
+type PackageModuleType = (typeof PACKAGE_MODULE_TYPES)[number];
 type RegistryPackageStatus = "available" | "local-install" | "registry-install" | "dismissed";
 type RegistryPackageSource = "available" | "local-install" | "registry-install" | "common" | "project";
 type RegistryPackage = PackageInfo & {
   status: RegistryPackageStatus;
+  /**
+   * Shared-dependency version mismatches against the Connect build's version
+   * table, pre-formatted (see `formatSharedDepWarnings`). Absent when the
+   * host has no shared-deps table (vendor-off / dev) or none were found.
+   */
+  sharedDepWarnings?: string[];
 };
 type RegistryPackageMap = Record<string, RegistryPackage | undefined>;
 type RegistryPackageList = RegistryPackage[];
@@ -217,7 +212,7 @@ type CopyNodeInput = {
 type DeleteNodeInput = {
   id: Scalars["ID"]["input"];
 };
-type DocumentDriveLocalState$1 = {
+type DocumentDriveLocalState = {
   availableOffline: Scalars["Boolean"]["output"];
   listeners: Array<Listener>;
   sharingType: Maybe<Scalars["String"]["output"]>;
@@ -226,11 +221,11 @@ type DocumentDriveLocalState$1 = {
 type DocumentDriveGlobalState = {
   icon: Maybe<Scalars["String"]["output"]>;
   name: Scalars["String"]["output"];
-  nodes: Array<Node$1>;
+  nodes: Array<Node>;
 };
 type DocumentDrivePHState = PHBaseState & {
   global: DocumentDriveGlobalState;
-  local: DocumentDriveLocalState$1;
+  local: DocumentDriveLocalState;
 };
 type FileNode = {
   documentType: Scalars["String"]["output"];
@@ -287,7 +282,7 @@ type MoveNodeInput = {
   srcFolder: Scalars["ID"]["input"];
   targetParentFolder?: InputMaybe<Scalars["ID"]["input"]>;
 };
-type Node$1 = FileNode | FolderNode;
+type Node = FileNode | FolderNode;
 type PullResponderTriggerData = {
   interval: Scalars["String"]["output"];
   listenerId: Scalars["ID"]["output"];
@@ -341,5 +336,6 @@ type UpdateNodeInput = {
   parentFolder?: InputMaybe<Scalars["ID"]["input"]>;
 };
 //#endregion
-export { LegacySynchronizationUnit as $, TriggerData as A, RegistryPackageMap as B, RemoveTriggerInput as C, SetSharingTypeInput as D, SetDriveNameInput as E, PackageInfo as F, DriveInput as G, RegistryPackageStatus as H, PackageListItem as I, SharingType as J, GenerateNodesCopyIdGenerator as K, PackagePage as L, TriggerType as M, UpdateFileInput as N, TransmitterType as O, UpdateNodeInput as P, LegacyAddFileInput as Q, RegistryPackage as R, RemoveListenerInput as S, SetDriveIconInput as T, DocumentDrivePHState$1 as U, RegistryPackageSource as V, DriveDocumentModelModule as W, DocumentDriveDocument as X, DocumentDriveAction as Y, LegacyAddFileAction as Z, ListenerInput as _, SetDriveNameAction as _t, CopyNodeInput as a, DocumentDriveNodeOperations as at, PullResponderTriggerData as b, DocumentDriveLocalState$1 as c, UpdateNodeAction as ct, FolderNode as d, DocumentDriveDriveAction as dt, AddFileAction as et, Listener as f, DocumentDriveDriveOperations as ft, ListenerFilterInput as g, SetDriveIconAction as gt, ListenerFilter as h, SetAvailableOfflineAction as ht, AddTriggerInput as i, DocumentDriveNodeAction as it, TriggerInput as j, Trigger as k, DocumentDrivePHState as l, AddListenerAction as lt, ListenerCallInfoInput as m, RemoveTriggerAction as mt, AddFolderInput as n, CopyNodeAction as nt, DeleteNodeInput as o, MoveNodeAction as ot, ListenerCallInfo as p, RemoveListenerAction as pt, GenerateNodesCopySrc as q, AddListenerInput as r, DeleteNodeAction as rt, DocumentDriveGlobalState as s, UpdateFileAction as st, AddFileInput as t, AddFolderAction as tt, FileNode as u, AddTriggerAction as ut, MoveNodeInput as v, SetSharingTypeAction as vt, SetAvailableOfflineInput as w, PullResponderTriggerDataInput as x, Node$1 as y, RegistryPackageList as z };
-//# sourceMappingURL=types-YqLqb0Zb.d.ts.map
+export { LegacySynchronizationUnit as $, TriggerData as A, PackagePage as B, RemoveTriggerInput as C, SetSharingTypeInput as D, SetDriveNameInput as E, PACKAGE_MODULE_TYPES as F, RegistryPackageSource as G, RegistryPackage as H, PackageFacets as I, DriveDocumentModelModule as J, RegistryPackageStatus as K, PackageInfo as L, TriggerType as M, UpdateFileInput as N, TransmitterType as O, UpdateNodeInput as P, LegacyAddFileInput as Q, PackageListItem as R, RemoveListenerInput as S, SetDriveIconInput as T, RegistryPackageList as U, Page as V, RegistryPackageMap as W, DocumentDriveDocument as X, DocumentDriveAction as Y, LegacyAddFileAction as Z, ListenerInput as _, SetDriveNameAction as _t, CopyNodeInput as a, DocumentDriveNodeOperations as at, PullResponderTriggerData as b, DocumentDriveLocalState as c, UpdateNodeAction as ct, FolderNode as d, DocumentDriveDriveAction as dt, AddFileAction as et, Listener as f, DocumentDriveDriveOperations as ft, ListenerFilterInput as g, SetDriveIconAction as gt, ListenerFilter as h, SetAvailableOfflineAction as ht, AddTriggerInput as i, DocumentDriveNodeAction as it, TriggerInput as j, Trigger as k, DocumentDrivePHState as l, AddListenerAction as lt, ListenerCallInfoInput as m, RemoveTriggerAction as mt, AddFolderInput as n, CopyNodeAction as nt, DeleteNodeInput as o, MoveNodeAction as ot, ListenerCallInfo as p, RemoveListenerAction as pt, DocumentDrivePHState$1 as q, AddListenerInput as r, DeleteNodeAction as rt, DocumentDriveGlobalState as s, UpdateFileAction as st, AddFileInput as t, AddFolderAction as tt, FileNode as u, AddTriggerAction as ut, MoveNodeInput as v, SetSharingTypeAction as vt, SetAvailableOfflineInput as w, PullResponderTriggerDataInput as x, Node as y, PackageModuleType as z };
+export {};
+//# sourceMappingURL=types-CfU91XFU.d.ts.map

package/dist/types-CfU91XFU.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types-CfU91XFU.d.ts","names":[],"sources":["../document-drive/gen/drive/actions.ts","../document-drive/gen/node/actions.ts","../document-drive/gen/types.ts","../document-drive/types.ts","../registry/types.ts","../document-drive/gen/schema/types.ts"],"mappings":";;;KAcY,qBAAqB;EAC/B;EACA,OAAO;;KAEG,qBAAqB;EAC/B;EACA,OAAO;;KAEG,uBAAuB;EACjC;EACA,OAAO;;KAEG,4BAA4B;EACtC;EACA,OAAO;;KAEG,oBAAoB;EAC9B;EACA,OAAO;;KAEG,uBAAuB;EACjC;EACA,OAAO;;KAEG,mBAAmB;EAC7B;EACA,OAAO;;KAEG,sBAAsB;EAChC;EACA,OAAO;;KAGG,2BACR,qBACA,qBACA,uBACA,4BACA,oBACA,uBACA,mBACA;UAEa;EACf,wBACE,OAAO,0BACP,QAAQ,oBACR,WAAW;EAEb,wBACE,OAAO,0BACP,QAAQ,oBACR,WAAW;EAEb,0BACE,OAAO,yBACP,QAAQ,sBACR,WAAW;EAEb,+BACE,OAAO,yBACP,QAAQ,2BACR,WAAW;EAEb,uBACE,OAAO,yBACP,QAAQ,mBACR,WAAW;EAEb,0BACE,OAAO,yBACP,QAAQ,sBACR,WAAW;EAEb,sBACE,OAAO,yBACP,QAAQ,kBACR,WAAW;EAEb,yBACE,OAAO,yBACP,QAAQ,qBACR,WAAW;;;;KCnFH,gBAAgB;EAAW;EAAkB,OAAO;;KACpD,kBAAkB;EAC5B;EACA,OAAO;;KAEG,mBAAmB;EAC7B;EACA,OAAO;;KAEG,mBAAmB;EAC7B;EACA,OAAO;;KAEG,mBAAmB;EAC7B;EACA,OAAO;;KAEG,iBAAiB;EAC3B;EACA,OAAO;;KAEG,iBAAiB;EAC3B;EACA,OAAO;;KAGG,0BACR,gBACA,kBACA,mBACA,mBACA,mBACA,iBACA;UAEa;EACf,mBACE,OAAO,0BACP,QAAQ,eACR,WAAW;EAEb,qBACE,OAAO,0BACP,QAAQ,iBACR,WAAW;EAEb,sBACE,OAAO,0BACP,QAAQ,kBACR,WAAW;EAEb,sBACE,OAAO,0BACP,QAAQ,kBACR,WAAW;EAEb,sBACE,OAAO,0BACP,QAAQ,kBACR,WAAW;EAEb,oBACE,OAAO,0BACP,QAAQ,gBACR,WAAW;EAEb,oBACE,OAAO,0BACP,QAAQ,gBACR,WAAW;;;;KCnEH,sBACR,0BACA;KAEQ,wBAAwB,WAAW;KAEnC;EACV,QAAQ;EACR,OAAO;EACP,QAAQ;;KAGE,qBAAqB;EAC/B,WAAW,WAAW;EACtB,sBAAsB,MAAM;;KAGlB,sBAAsB;EAChC;EACA,OAAO;;;;KC1BG,yBAAuB;EACjC,QAAQ;EACR,OAAO;;KAGG,2BACV,oBAAoB;;;UCbL;EACf;EACA;EACA,UAAU;EACV;EACA;;;;EAIA;;EAEA,WAAW;;EAEX;;;;;;;;EAQA;;;EAGA;;;;;;UAOe;EACf;EACA;EACA;EACA;EACA;EACA;IAAc;IAAe;;;;UAId,KAAK;EACpB,OAAO;EACP;EACA;EACA;EACA;;;UAIe;EACf;EACA;;;UAIe,YAAY,IAAI,yBAAyB,KAAK;EAC7D,SAAS;;;cAIE;KAOD,4BAA4B;KAE5B;KAMA;KAOA,kBAAkB;EAC5B,QAAQ;;;;;;EAMR;;KAEU,qBAAqB,eAAe;KACpC,sBAAsB;;;KC3FtB;EACV,cAAc;EACd,IAAI;EACJ,MAAM;EACN,eAAe,WAAW;;KAGhB;EACV,IAAI;EACJ,MAAM;EACN,eAAe,WAAW;;KAGhB;EACV,UAAU;;KAGA;EACV,SAAS;;KAGC;EACV,OAAO;EACP,UAAU;EACV,aAAa,WAAW;EACxB,qBAAqB,WAAW;;KAGtB;EACV,IAAI;;KAGM;EACV,kBAAkB;EAClB,WAAW,MAAM;EACjB,aAAa,MAAM;EACnB,UAAU,MAAM;;KAGN;EACV,MAAM,MAAM;EACZ,MAAM;EACN,OAAO,MAAM;;KAGH,uBAAuB;EACjC,QAAQ;EACR,OAAO;;KAGG;EACV,cAAc;EACd,IAAI;EACJ,MAAM;EACN,MAAM;EACN,cAAc,MAAM;;KAGV;EACV,IAAI;EACJ,MAAM;EACN,MAAM;EACN,cAAc,MAAM;;KAGV;EACV,OAAO;EACP,UAAU,MAAM;EAChB,QAAQ;EACR,OAAO,MAAM;EACb,YAAY;EACZ,QAAQ;;KAGE;EACV,OAAO;EACP,WAAW,WAAW;EACtB,QAAQ;EACR,QAAQ,WAAW;EACnB,YAAY;EACZ,QAAQ;;KAGE;EACV,MAAM,MAAM;EACZ,MAAM,MAAM;EACZ,iBAAiB,MAAM;;KAGb;EACV,OAAO,WAAW;EAClB,OAAO,WAAW;EAClB,kBAAkB,WAAW;;KAGnB;EACV,QAAQ,MAAM,MAAM;EACpB,YAAY,MAAM,MAAM;EACxB,cAAc,MAAM,MAAM;EAC1B,OAAO,MAAM,MAAM;;KAGT;EACV,SAAS,WAAW,MAAM;EAC1B,aAAa,WAAW,MAAM;EAC9B,eAAe,WAAW,MAAM;EAChC,QAAQ,WAAW,MAAM;;KAGf;EACV,WAAW;EACX,qBAAqB,WAAW;;KAGtB,OAAO,WAAW;KAElB;EACV,UAAU;EACV,YAAY;EACZ,KAAK;;KAGK;EACV,UAAU;EACV,YAAY;EACZ,KAAK;;KAGK;EACV,YAAY;;KAGF;EACV,WAAW;;KAGD;EACV,kBAAkB;;KAGR;EACV,OAAO,WAAW;;KAGR;EACV,MAAM;;KAGI;EACV,MAAM;;KAGI;KAQA;EACV,MAAM,MAAM;EACZ,IAAI;EACJ,MAAM;;KAGI;EACV,OAAO,WAAW;EAClB,IAAI;EACJ,MAAM;;KAGI,cAAc;KAEd;KAEA;EACV,eAAe,WAAW;EAC1B,IAAI;EACJ,OAAO,WAAW;EAClB,eAAe,WAAW;;KAGhB;EACV,IAAI;EACJ,OAAO,WAAW;EAClB,eAAe,WAAW"}