@s2script/sdk 0.14.0 → 0.15.0

package/dist/cli.js

@@ -668,8 +668,8 @@ var require_major = __commonJS({
   "../../node_modules/semver/functions/major.js"(exports, module) {
     "use strict";
     var SemVer = require_semver();
-    var major = (a2, loose) => new SemVer(a2, loose).major;
-    module.exports = major;
+    var major2 = (a2, loose) => new SemVer(a2, loose).major;
+    module.exports = major2;
   }
 });
 
@@ -915,12 +915,12 @@ var require_coerce = __commonJS({
       if (match === null) {
         return null;
       }
-      const major = match[2];
+      const major2 = match[2];
       const minor = match[3] || "0";
       const patch = match[4] || "0";
       const prerelease = options.includePrerelease && match[5] ? `-${match[5]}` : "";
-      const build2 = options.includePrerelease && match[6] ? `+${match[6]}` : "";
-      return parse(`${major}.${minor}.${patch}${prerelease}${build2}`, options);
+      const build3 = options.includePrerelease && match[6] ? `+${match[6]}` : "";
+      return parse(`${major2}.${minor}.${patch}${prerelease}${build3}`, options);
     };
     module.exports = coerce;
   }
@@ -1991,7 +1991,7 @@ var require_semver2 = __commonJS({
     var clean = require_clean();
     var inc = require_inc();
     var diff = require_diff();
-    var major = require_major();
+    var major2 = require_major();
     var minor = require_minor();
     var patch = require_patch();
     var prerelease = require_prerelease();
@@ -2030,7 +2030,7 @@ var require_semver2 = __commonJS({
       clean,
       inc,
       diff,
-      major,
+      major: major2,
       minor,
       patch,
       prerelease,
@@ -2076,10 +2076,10 @@ var require_semver2 = __commonJS({
 });
 
 // src/commands/build.ts
-import { resolve as resolve8 } from "node:path";
+import { resolve as resolve11 } from "node:path";
 
 // src/build.ts
-import * as esbuild from "esbuild";
+import * as esbuild2 from "esbuild";
 
 // ../../node_modules/fflate/esm/index.mjs
 import { createRequire } from "module";
@@ -3068,13 +3068,13 @@ function unzipSync(data, opts) {
 }
 
 // src/build.ts
-import { readFileSync as readFileSync6, writeFileSync as writeFileSync2, mkdirSync, rmSync as rmSync2 } from "node:fs";
-import { resolve as resolve7, join as join8, sep, basename } from "node:path";
+import { readFileSync as readFileSync8, writeFileSync as writeFileSync3, mkdirSync as mkdirSync2, rmSync as rmSync2 } from "node:fs";
+import { resolve as resolve10, join as join11, sep as sep2, basename } from "node:path";
 
 // src/typecheck/typecheck.ts
 import ts from "typescript";
-import { existsSync as existsSync5, readdirSync as readdirSync2, readFileSync as readFileSync5, writeFileSync, rmSync, mkdtempSync } from "node:fs";
-import { join as join6, resolve as resolve5 } from "node:path";
+import { existsSync as existsSync6, readdirSync as readdirSync2, readFileSync as readFileSync6, writeFileSync, rmSync, mkdtempSync } from "node:fs";
+import { join as join7, resolve as resolve6 } from "node:path";
 import { tmpdir } from "node:os";
 
 // src/packages-resolve.ts
@@ -3414,6 +3414,11 @@ function readWorkspace(root) {
   }
   return { workspace: { root: absRoot, pkg, plugins, libs }, problems };
 }
+function memberForDir(ws, dir) {
+  const abs = toPosix(resolve2(dir));
+  for (const m of [...ws.plugins, ...ws.libs]) if (toPosix(m.dir) === abs) return m;
+  return null;
+}
 
 // src/publishes.ts
 import { createHash } from "node:crypto";
@@ -3630,32 +3635,156 @@ function resolveSiblingContracts(pluginDir, deps) {
   return { siblings, shadowedCopies };
 }
 
+// src/libraries.ts
+import { existsSync as existsSync5, readFileSync as readFileSync5 } from "node:fs";
+import { join as join6, resolve as resolve5 } from "node:path";
+function packageKind(pkg) {
+  const k = pkg.s2script?.kind ?? "plugin";
+  if (k !== "plugin" && k !== "library") {
+    throw new Error(`unknown s2script.kind ${JSON.stringify(k)} \u2014 expected "plugin" or "library"`);
+  }
+  return k;
+}
+function librariesRoot(pluginDir) {
+  return join6(pluginDir, ".s2script", "libs");
+}
+function localLibraryDir(pluginDir, name) {
+  const segs = name.split("/");
+  if (segs.some((s) => s === "" || s === "." || s === "..")) return null;
+  const p = join6(librariesRoot(pluginDir), ...segs);
+  return existsSync5(join6(p, "index.d.ts")) ? p : null;
+}
+function resolveLibrarySibling(pluginDir, name) {
+  const absDir = resolve5(pluginDir);
+  const root = findWorkspaceRoot(absDir);
+  if (root === null) return null;
+  const scan = scanWorkspace(root);
+  const ws = scan.workspace;
+  if (memberForDir(ws, absDir) === null) return null;
+  const named2 = [...ws.libs, ...ws.plugins].filter((m) => m.name === name);
+  let lib;
+  for (const m of named2) {
+    let kind;
+    try {
+      kind = packageKind(m.pkg);
+    } catch (e) {
+      throw new Error(`library ${name} (workspace member at ${m.relDir}): ${e.message}`);
+    }
+    if (kind === "library") {
+      lib = m;
+      break;
+    }
+  }
+  if (lib === void 0) {
+    if (scan.problems.length > 0) {
+      console.warn(
+        `WARN: ${name}: no workspace sibling found, but ${scan.problems.length} workspace member${scan.problems.length === 1 ? "" : "s"} could not be read \u2014 one of them may be this library, in which case it will be reported as missing instead. Fix:
+  ` + scan.problems.join("\n  ")
+      );
+    }
+    return null;
+  }
+  const typesRel = lib.pkg.types;
+  if (typeof typesRel !== "string" || typesRel === "") {
+    throw new Error(
+      `library ${name} (workspace sibling at ${lib.relDir}) has no "types" in its package.json`
+    );
+  }
+  const typesPath = resolve5(lib.dir, typesRel);
+  if (!existsSync5(typesPath)) {
+    throw new Error(
+      `library ${name} (workspace sibling at ${lib.relDir}) types file not found: ${typesRel}`
+    );
+  }
+  return { dir: lib.dir, typesPath, version: lib.version };
+}
+function resolveLibraries(pluginDir, declared) {
+  const paths = {};
+  const manifests = {};
+  const missing = [];
+  const siblingDirs = {};
+  for (const name of Object.keys(declared)) {
+    const dir = localLibraryDir(pluginDir, name);
+    if (dir !== null) {
+      paths[name] = [join6(dir, "index.d.ts")];
+      let version = "0.0.0";
+      let apiVersion = "1.x";
+      try {
+        const m = JSON.parse(readFileSync5(join6(dir, "package.json"), "utf8"));
+        if (typeof m.version === "string") version = m.version;
+        if (typeof m.s2script?.apiVersion === "string") apiVersion = m.s2script.apiVersion;
+      } catch {
+      }
+      manifests[name] = { version, apiVersion, source: "vendored" };
+      continue;
+    }
+    const sib = resolveLibrarySibling(pluginDir, name);
+    if (sib !== null) {
+      paths[name] = [sib.typesPath];
+      manifests[name] = { version: sib.version, apiVersion: "", source: "workspace" };
+      siblingDirs[name] = sib.dir;
+      continue;
+    }
+    missing.push(name);
+  }
+  return { paths, missing, manifests, siblingDirs };
+}
+function major(apiVersion) {
+  const n3 = Number.parseInt(apiVersion.split(".")[0] ?? "1", 10);
+  return Number.isNaN(n3) ? 1 : n3;
+}
+function assertLibrariesResolved(pluginDir, declared, sdkApiVersion) {
+  const reserved = Object.keys(declared).filter((n3) => n3 === "@s2script" || n3.startsWith("@s2script/"));
+  if (reserved.length > 0) {
+    throw new Error(
+      `s2script.libraries declares ${reserved.map((n3) => JSON.stringify(n3)).join(", ")} \u2014 the @s2script/* scope is reserved and always resolved as a runtime builtin, so it can never be a bundled library`
+    );
+  }
+  const resolved = resolveLibraries(pluginDir, declared);
+  if (resolved.missing.length) {
+    throw new Error(
+      `declared in s2script.libraries but not vendored under .s2script/libs and no workspace sibling found:
+` + resolved.missing.map((n3) => `  ${n3} \u2014 run \`s2s add ${n3}\``).join("\n")
+    );
+  }
+  const sdkMajor = major(sdkApiVersion);
+  for (const [name, m] of Object.entries(resolved.manifests)) {
+    if (m.source === "workspace") continue;
+    if (major(m.apiVersion) > sdkMajor) {
+      throw new Error(
+        `library ${name}@${m.version} was built against apiVersion ${m.apiVersion}, newer than this SDK's ${sdkApiVersion} \u2014 upgrade @s2script/sdk`
+      );
+    }
+  }
+  return resolved;
+}
+
 // src/typecheck/typecheck.ts
 function localDeclarationFiles(pluginDir) {
-  const srcDir = join6(pluginDir, "src");
-  if (!existsSync5(srcDir)) return [];
-  return readdirSync2(srcDir).filter((f) => f.endsWith(".d.ts")).map((f) => join6(srcDir, f));
+  const srcDir = join7(pluginDir, "src");
+  if (!existsSync6(srcDir)) return [];
+  return readdirSync2(srcDir).filter((f) => f.endsWith(".d.ts")).map((f) => join7(srcDir, f));
 }
 function generatedDeclarationFiles(pluginDir) {
-  const gd = join6(pluginDir, ".s2script", "gamedata.d.ts");
-  return existsSync5(gd) ? [gd] : [];
+  const gd = join7(pluginDir, ".s2script", "gamedata.d.ts");
+  return existsSync6(gd) ? [gd] : [];
 }
 function declaredModules(dtsFiles) {
   const out = /* @__PURE__ */ new Set();
   for (const f of dtsFiles) {
-    const body = readFileSync5(f, "utf8");
+    const body = readFileSync6(f, "utf8");
     for (const m of body.matchAll(/declare\s+module\s+["']([^"']+)["']/g)) out.add(m[1]);
   }
   return out;
 }
 function typecheckPlugin(pluginDir, opts) {
-  const absDir = resolve5(pluginDir);
-  const packagesDir = opts?.packagesDir ? resolve5(opts.packagesDir) : resolvePackagesDir({ pluginDir: absDir });
-  const pkg = JSON.parse(readFileSync5(join6(absDir, "package.json"), "utf8"));
+  const absDir = resolve6(pluginDir);
+  const packagesDir = opts?.packagesDir ? resolve6(opts.packagesDir) : resolvePackagesDir({ pluginDir: absDir });
+  const pkg = JSON.parse(readFileSync6(join7(absDir, "package.json"), "utf8"));
   const s2 = pkg.s2script ?? {};
   const entryRel = s2.main ?? pkg.main;
-  if (!entryRel) throw new Error(`typecheckPlugin: no entry point in ${join6(absDir, "package.json")}`);
-  const entry = resolve5(absDir, entryRel);
+  if (!entryRel) throw new Error(`typecheckPlugin: no entry point in ${join7(absDir, "package.json")}`);
+  const entry = resolve6(absDir, entryRel);
   const isAlwaysResolved = (d) => d.startsWith("@s2script/sdk/") || d === "@s2script/cs2" || d.startsWith("@s2script/cs2/");
   const localDts = localDeclarationFiles(absDir);
   const locallyDeclared = declaredModules(localDts);
@@ -3674,13 +3803,15 @@ function typecheckPlugin(pluginDir, opts) {
     const p = localContractPath(absDir, d);
     if (p !== null) contractPaths[d] = [p];
   }
+  const libraryPaths = resolveLibraries(absDir, s2.libraries ?? {}).paths;
+  const libraryNames = new Set(Object.keys(s2.libraries ?? {}));
   const deps = [
     ...Object.keys(s2.pluginDependencies ?? {}),
     ...Object.keys(s2.optionalPluginDependencies ?? {})
     // Never stub a module the plugin declares itself — a shorthand `declare module "X";` and a
     // full `declare module "X" { … }` for the same X collide.
   ].filter(
-    (d) => !isAlwaysResolved(d) && !locallyDeclared.has(d) && contractPaths[d] === void 0 && !siblings.has(d)
+    (d) => !isAlwaysResolved(d) && !locallyDeclared.has(d) && contractPaths[d] === void 0 && !siblings.has(d) && !libraryNames.has(d)
   );
   const options = {
     // Accept explicit `.ts` import extensions (node type-stripping requires them for source-to-source
@@ -3698,19 +3829,20 @@ function typecheckPlugin(pluginDir, opts) {
       // subpath. tsc picks the longest matching prefix, so this wins for cs2 subpath imports.
       "@s2script/cs2/*": ["cs2/*.d.ts"],
       "@s2script/*": ["*/index.d.ts"],
-      ...contractPaths
+      ...contractPaths,
+      ...libraryPaths
     }
   };
   const rootNames = [
     entry,
-    join6(packagesDir, "sdk", "globals.d.ts"),
+    join7(packagesDir, "sdk", "globals.d.ts"),
     ...localDts,
     ...generatedDeclarationFiles(absDir)
   ];
-  const tmp = mkdtempSync(join6(tmpdir(), "s2tc-"));
+  const tmp = mkdtempSync(join7(tmpdir(), "s2tc-"));
   try {
     if (deps.length) {
-      const stub = join6(tmp, "ambient.d.ts");
+      const stub = join7(tmp, "ambient.d.ts");
       writeFileSync(stub, deps.map((d) => `declare module ${JSON.stringify(d)};`).join("\n") + "\n");
       rootNames.push(stub);
     }
@@ -3840,61 +3972,70 @@ function validateDecl(full, decl, typeStr, errs) {
 var HOST_API_VERSION_MAJOR = 2;
 var STAMPED_API_VERSION = `${HOST_API_VERSION_MAJOR}.x`;
 
-// src/publish-scan.ts
-import ts2 from "typescript";
-function isPluginContext(type) {
-  const sym = type.getSymbol() ?? type.aliasSymbol;
-  return sym?.getName() === "PluginContext";
+// src/npm-deps-gate.ts
+import { lstatSync, realpathSync } from "node:fs";
+import { dirname as dirname3, join as join8, resolve as resolve7, sep } from "node:path";
+function findInNodeModules(startDir, dep) {
+  const segs = dep.split("/");
+  let dir = resolve7(startDir);
+  for (; ; ) {
+    const candidate = join8(dir, "node_modules", ...segs);
+    try {
+      lstatSync(candidate);
+      return candidate;
+    } catch {
+    }
+    const parent = dirname3(dir);
+    if (parent === dir) return null;
+    dir = parent;
+  }
 }
-function scanPluginProgram(program, pluginDir) {
-  const checker = program.getTypeChecker();
-  const out = { publishNames: [], dynamicPublishSites: [], useNames: [] };
-  const dirPrefix = pluginDir.replace(/\\/g, "/").replace(/\/+$/, "") + "/";
-  for (const sf of program.getSourceFiles()) {
-    if (sf.isDeclarationFile) continue;
-    if (!sf.fileName.replace(/\\/g, "/").startsWith(dirPrefix)) continue;
-    const visit = (node) => {
-      if (ts2.isCallExpression(node) && ts2.isPropertyAccessExpression(node.expression)) {
-        const method = node.expression.name.text;
-        if (method === "publish" || method === "use" || method === "tryUse") {
-          const recv = checker.getTypeAtLocation(node.expression.expression);
-          if (isPluginContext(recv)) {
-            const arg0 = node.arguments[0];
-            if (method === "publish") {
-              if (arg0 !== void 0 && ts2.isStringLiteralLike(arg0)) {
-                out.publishNames.push(arg0.text);
-              } else {
-                const { line } = sf.getLineAndCharacterOfPosition(node.getStart());
-                out.dynamicPublishSites.push(`${sf.fileName}:${line + 1}`);
-              }
-            } else if (arg0 !== void 0 && ts2.isStringLiteralLike(arg0)) {
-              out.useNames.push(arg0.text);
-            }
-          }
-        }
-      }
-      ts2.forEachChild(node, visit);
-    };
-    visit(sf);
+function isWorkspaceLinked(pluginDir, dep) {
+  const found = findInNodeModules(pluginDir, dep);
+  if (found === null) return false;
+  let real;
+  try {
+    real = realpathSync(found);
+  } catch {
+    return false;
   }
-  out.publishNames = [...new Set(out.publishNames)];
-  out.useNames = [...new Set(out.useNames)];
-  return out;
+  return !real.split(sep).includes("node_modules");
 }
+function assertNoNpmRuntimeDeps(pkg, pluginDir) {
+  const offenders = [];
+  for (const [dep, range] of Object.entries(pkg.dependencies ?? {})) {
+    if (dep.startsWith("@s2script/")) continue;
+    if (typeof range === "string" && (range.startsWith("file:") || range.startsWith("workspace:"))) continue;
+    if (isWorkspaceLinked(pluginDir, dep)) continue;
+    offenders.push(dep);
+  }
+  if (!offenders.length) return;
+  throw new Error(
+    `runtime dependenc${offenders.length === 1 ? "y" : "ies"} ` + offenders.map((d) => JSON.stringify(d)).join(", ") + ` ${offenders.length === 1 ? "is" : "are"} not s2script librar${offenders.length === 1 ? "y" : "ies"}.
+  Plugins run in bare V8 \u2014 no Node APIs, no npm runtime. A package that touches
+  fs/net/process builds green and fails on a live server.
+  Use s2script.libraries (\`s2s add <pkg>\`), or vendor it as a workspace package.`
+  );
+}
+
+// src/build-library.ts
+import * as esbuild from "esbuild";
+import { readFileSync as readFileSync7, writeFileSync as writeFileSync2, mkdirSync, existsSync as existsSync8, statSync as statSync3 } from "node:fs";
+import { resolve as resolve9, join as join10 } from "node:path";
 
 // src/lint/lint.ts
 import { ESLint } from "eslint";
-import { existsSync as existsSync6, readdirSync as readdirSync3 } from "node:fs";
-import { dirname as dirname3, join as join7, resolve as resolve6 } from "node:path";
+import { existsSync as existsSync7, readdirSync as readdirSync3 } from "node:fs";
+import { dirname as dirname4, join as join9, resolve as resolve8 } from "node:path";
 import s2lint from "@s2script/eslint-plugin";
 var CONFIG_FILES = ["eslint.config.js", "eslint.config.mjs", "eslint.config.cjs", "eslint.config.ts"];
 function ownConfigDir(pluginDir) {
   const stopAt = findWorkspaceRoot(pluginDir);
   let dir = pluginDir;
   for (; ; ) {
-    if (CONFIG_FILES.some((f) => existsSync6(join7(dir, f)))) return dir;
+    if (CONFIG_FILES.some((f) => existsSync7(join9(dir, f)))) return dir;
     if (stopAt === null || dir === stopAt) return null;
-    const parent = dirname3(dir);
+    const parent = dirname4(dir);
     if (parent === dir) return null;
     dir = parent;
   }
@@ -3909,14 +4050,14 @@ function collectTsFiles(dir) {
   const out = [];
   for (const e of entries) {
     if (e.name === "node_modules" || e.name.startsWith(".")) continue;
-    const full = join7(dir, e.name);
+    const full = join9(dir, e.name);
     if (e.isDirectory()) out.push(...collectTsFiles(full));
-    else if (e.isFile() && e.name.endsWith(".ts")) out.push(full);
+    else if (e.isFile() && e.name.endsWith(".ts") && !e.name.endsWith(".d.ts")) out.push(full);
   }
   return out;
 }
 async function lintPlugin(pluginDir, program) {
-  const absDir = resolve6(pluginDir);
+  const absDir = resolve8(pluginDir);
   const configDir = ownConfigDir(absDir);
   const hasOwnConfig = configDir !== null;
   const eslint = hasOwnConfig ? new ESLint({ cwd: configDir, errorOnUnmatchedPattern: false, warnIgnored: false }) : new ESLint({
@@ -3935,6 +4076,126 @@ async function lintPlugin(pluginDir, program) {
   return { ok: errorCount === 0, output, errorCount };
 }
 
+// src/build-library.ts
+async function buildLibrary(dir, packagesDir) {
+  const absDir = resolve9(dir);
+  const pkgPath = join10(absDir, "package.json");
+  const pkg = JSON.parse(readFileSync7(pkgPath, "utf8"));
+  const s2 = pkg.s2script ?? {};
+  if (s2.pluginDependencies || s2.optionalPluginDependencies) {
+    throw new Error(
+      "a library may not declare pluginDependencies/optionalPluginDependencies \u2014 an inter-plugin proxy belongs to a loaded plugin's ledger, not to build-time code"
+    );
+  }
+  if (s2.publishes) {
+    throw new Error("a library may not declare publishes \u2014 publishes is a plugin's runtime contract");
+  }
+  const typesRel = pkg.types ?? pkg.typings;
+  if (typeof typesRel !== "string" || !typesRel.endsWith(".d.ts")) {
+    throw new Error('a library must set "types" to a .d.ts \u2014 consumers vendor it to typecheck against');
+  }
+  const typesPath = resolve9(absDir, typesRel);
+  if (!existsSync8(typesPath) || !statSync3(typesPath).isFile() || statSync3(typesPath).size === 0) {
+    throw new Error(`types file is missing or empty: ${typesRel}`);
+  }
+  assertNoNpmRuntimeDeps(pkg, absDir);
+  const librariesResolved = assertLibrariesResolved(absDir, s2.libraries ?? {}, STAMPED_API_VERSION);
+  const tc = typecheckPlugin(absDir, packagesDir !== void 0 ? { packagesDir } : void 0);
+  if (!tc.ok) {
+    throw new Error(`typecheck failed (${tc.diagnostics.length} error(s)):
+${formatDiagnostics(tc.diagnostics)}`);
+  }
+  const lint = await lintPlugin(absDir, tc.program);
+  if (!lint.ok) {
+    throw new Error(`lint failed (${lint.errorCount} error(s)):
+${lint.output}`);
+  }
+  if (lint.output.trim().length > 0) console.warn(lint.output);
+  const entryRelative = s2.main ?? pkg.main;
+  if (!entryRelative) throw new Error(`buildLibrary: no entry point in ${pkgPath} (set s2script.main or main)`);
+  const result = await esbuild.build({
+    entryPoints: [join10(absDir, entryRelative)],
+    bundle: true,
+    platform: "neutral",
+    format: "cjs",
+    // Builtins resolve in the CONSUMER's context at runtime, so they stay external
+    // through both bundles. Everything else — including this library's own libraries
+    // — is inlined, which is what makes a .s2lib self-contained.
+    external: ["@s2script/*"],
+    target: "es2020",
+    mainFields: ["module", "main"],
+    // A vendored library's directory is already named for its package, so `nodePaths` alone
+    // resolves it. A WORKSPACE-sibling library (librariesResolved.siblingDirs) is not, hence the
+    // alias — same reasoning `build.ts` applies to a plugin's own library imports.
+    nodePaths: [librariesRoot(absDir)],
+    alias: librariesResolved.siblingDirs,
+    write: false
+  });
+  const manifest = {
+    kind: "library",
+    id: pkg.name,
+    version: pkg.version,
+    apiVersion: STAMPED_API_VERSION,
+    main: "index.js",
+    types: "index.d.ts"
+  };
+  const sanitized = String(pkg.name).replace(/[^a-zA-Z0-9._-]/g, "_");
+  const outDir = join10(absDir, "dist");
+  mkdirSync(outDir, { recursive: true });
+  const outPath = join10(outDir, `${sanitized}.s2lib`);
+  writeFileSync2(
+    outPath,
+    zipSync({
+      "manifest.json": Buffer.from(JSON.stringify(manifest, null, 2)),
+      "index.js": Buffer.from(result.outputFiles[0].text),
+      "index.d.ts": readFileSync7(typesPath)
+    })
+  );
+  return outPath;
+}
+
+// src/publish-scan.ts
+import ts2 from "typescript";
+function isPluginContext(type) {
+  const sym = type.getSymbol() ?? type.aliasSymbol;
+  return sym?.getName() === "PluginContext";
+}
+function scanPluginProgram(program, pluginDir) {
+  const checker = program.getTypeChecker();
+  const out = { publishNames: [], dynamicPublishSites: [], useNames: [] };
+  const dirPrefix = pluginDir.replace(/\\/g, "/").replace(/\/+$/, "") + "/";
+  for (const sf of program.getSourceFiles()) {
+    if (sf.isDeclarationFile) continue;
+    if (!sf.fileName.replace(/\\/g, "/").startsWith(dirPrefix)) continue;
+    const visit = (node) => {
+      if (ts2.isCallExpression(node) && ts2.isPropertyAccessExpression(node.expression)) {
+        const method = node.expression.name.text;
+        if (method === "publish" || method === "use" || method === "tryUse") {
+          const recv = checker.getTypeAtLocation(node.expression.expression);
+          if (isPluginContext(recv)) {
+            const arg0 = node.arguments[0];
+            if (method === "publish") {
+              if (arg0 !== void 0 && ts2.isStringLiteralLike(arg0)) {
+                out.publishNames.push(arg0.text);
+              } else {
+                const { line } = sf.getLineAndCharacterOfPosition(node.getStart());
+                out.dynamicPublishSites.push(`${sf.fileName}:${line + 1}`);
+              }
+            } else if (arg0 !== void 0 && ts2.isStringLiteralLike(arg0)) {
+              out.useNames.push(arg0.text);
+            }
+          }
+        }
+      }
+      ts2.forEachChild(node, visit);
+    };
+    visit(sf);
+  }
+  out.publishNames = [...new Set(out.publishNames)];
+  out.useNames = [...new Set(out.useNames)];
+  return out;
+}
+
 // src/gamedata/types.ts
 var PLATFORM = "linuxsteamrt64";
 var ARG_KINDS = ["bool", "int", "float", "string", "vector", "entity"];
@@ -4189,9 +4450,12 @@ function stripJsonComments(src) {
 
 // src/build.ts
 async function buildPlugin(dir, packagesDir) {
-  const absDir = resolve7(dir);
-  const pkgPath = join8(absDir, "package.json");
-  const pkg = JSON.parse(readFileSync6(pkgPath, "utf8"));
+  const absDir = resolve10(dir);
+  const pkgPath = join11(absDir, "package.json");
+  const pkg = JSON.parse(readFileSync8(pkgPath, "utf8"));
+  if (packageKind(pkg) === "library") {
+    throw new Error(`${pkgPath} is s2script.kind="library" \u2014 build it with buildLibrary/buildPackage`);
+  }
   const s2 = pkg.s2script ?? {};
   const config = s2.config ?? void 0;
   if (config !== void 0) {
@@ -4199,11 +4463,25 @@ async function buildPlugin(dir, packagesDir) {
     if (cfgErrs.length) throw new Error(`invalid s2script.config:
   ${cfgErrs.join("\n  ")}`);
   }
+  assertNoNpmRuntimeDeps(pkg, absDir);
+  const libraries = s2.libraries ?? {};
+  const pluginDepNames = /* @__PURE__ */ new Set([
+    ...Object.keys(s2.pluginDependencies ?? {}),
+    ...Object.keys(s2.optionalPluginDependencies ?? {})
+  ]);
+  for (const name2 of Object.keys(libraries)) {
+    if (pluginDepNames.has(name2)) {
+      throw new Error(
+        `${JSON.stringify(name2)} is declared in BOTH s2script.libraries and s2script.pluginDependencies/optionalPluginDependencies \u2014 pick one: a library is build-time code bundled into this .s2sp, an inter-plugin dependency is a runtime proxy resolved by the host at load; the two cannot share a name`
+      );
+    }
+  }
+  const librariesResolved = assertLibrariesResolved(absDir, libraries, STAMPED_API_VERSION);
   const permissions = Array.isArray(s2.permissions) ? s2.permissions : [];
   let gamedata;
   if (typeof s2.gamedata === "string") {
-    const gdPath = resolve7(absDir, s2.gamedata);
-    const dirPrefix = absDir.endsWith(sep) ? absDir : absDir + sep;
+    const gdPath = resolve10(absDir, s2.gamedata);
+    const dirPrefix = absDir.endsWith(sep2) ? absDir : absDir + sep2;
     if (gdPath !== absDir && !gdPath.startsWith(dirPrefix)) {
       throw new Error(
         `s2script.gamedata escapes the plugin directory: ${JSON.stringify(s2.gamedata)} resolves to ${gdPath}`
@@ -4217,7 +4495,7 @@ async function buildPlugin(dir, packagesDir) {
         `s2script.gamedata must be named '${unscoped}.gamedata.jsonc' (after the plugin name without its scope, like the framework's own core.gamedata.jsonc), but is '${actualBase}'`
       );
     }
-    const raw = stripJsonComments(readFileSync6(gdPath, "utf8"));
+    const raw = stripJsonComments(readFileSync8(gdPath, "utf8"));
     try {
       gamedata = JSON.parse(raw);
     } catch (e) {
@@ -4226,11 +4504,11 @@ async function buildPlugin(dir, packagesDir) {
     const gdErrs = validatePluginGamedata(gamedata, { permissions });
     if (gdErrs.length) throw new Error(`invalid gamedata:
   ${gdErrs.join("\n  ")}`);
-    const genDir = join8(absDir, ".s2script");
-    mkdirSync(genDir, { recursive: true });
-    writeFileSync2(join8(genDir, "gamedata.d.ts"), generateGamedataTypes(gamedata));
+    const genDir = join11(absDir, ".s2script");
+    mkdirSync2(genDir, { recursive: true });
+    writeFileSync3(join11(genDir, "gamedata.d.ts"), generateGamedataTypes(gamedata));
   } else {
-    rmSync2(join8(absDir, ".s2script", "gamedata.d.ts"), { force: true });
+    rmSync2(join11(absDir, ".s2script", "gamedata.d.ts"), { force: true });
   }
   const declaredDepNames = [
     ...Object.keys(s2.pluginDependencies ?? {}),
@@ -4320,8 +4598,8 @@ ${lint.output}`);
       `buildPlugin: no entry point found in ${pkgPath} (set s2script.main or main)`
     );
   }
-  const entryPoint = join8(absDir, entryRelative);
-  const result = await esbuild.build({
+  const entryPoint = join11(absDir, entryRelative);
+  const result = await esbuild2.build({
     entryPoints: [entryPoint],
     bundle: true,
     platform: "neutral",
@@ -4332,7 +4610,15 @@ ${lint.output}`);
     // declares `main` (rather than `exports`) fails to resolve with an undiagnosable error.
     // Set it explicitly so a monorepo plugin bundles whichever field the author wrote.
     mainFields: ["module", "main"],
-    write: false
+    write: false,
+    // NODE_PATH semantics: `@edge/base64` resolves to .s2script/libs/@edge/base64 with no
+    // per-package alias and no change to `external`. Libraries are BUNDLED IN by design.
+    nodePaths: [librariesRoot(absDir)],
+    // A WORKSPACE-sibling library (librariesResolved.siblingDirs) is not vendored under a
+    // directory named for its package, so nodePaths alone cannot find it — alias each declared
+    // name straight at the sibling's own directory instead, same "bundle the real source, no
+    // copy" reasoning `resolveSiblingContracts` applies to contracts. Empty outside a workspace.
+    alias: librariesResolved.siblingDirs
   });
   const pluginJs = result.outputFiles[0].text;
   const manifest = {
@@ -4368,19 +4654,23 @@ ${lint.output}`);
   };
   if (gamedata) zipFiles["gamedata.json"] = Buffer.from(JSON.stringify(gamedata, null, 2));
   if (gate.typesPath !== null && Object.keys(derivedPublishes).length > 0) {
-    const contract = readFileSync6(gate.typesPath);
+    const contract = readFileSync8(gate.typesPath);
     for (const iface of Object.keys(derivedPublishes)) {
       const safe = iface.replace(/[^a-zA-Z0-9._-]/g, "_");
       zipFiles[`types/${safe}.d.ts`] = contract;
     }
   }
   const sanitizedId = name.replace(/[^a-zA-Z0-9._-]/g, "_");
-  const outDir = join8(absDir, "dist");
-  mkdirSync(outDir, { recursive: true });
-  const outPath = join8(outDir, `${sanitizedId}.s2sp`);
-  writeFileSync2(outPath, zipSync(zipFiles));
+  const outDir = join11(absDir, "dist");
+  mkdirSync2(outDir, { recursive: true });
+  const outPath = join11(outDir, `${sanitizedId}.s2sp`);
+  writeFileSync3(outPath, zipSync(zipFiles));
   return outPath;
 }
+async function buildPackage(dir, packagesDir) {
+  const pkg = JSON.parse(readFileSync8(join11(resolve10(dir), "package.json"), "utf8"));
+  return packageKind(pkg) === "library" ? buildLibrary(dir, packagesDir) : buildPlugin(dir, packagesDir);
+}
 
 // src/cli/args.ts
 function parseFlag(args, name) {
@@ -4409,8 +4699,8 @@ function positionals(args, flagsWithValue) {
 }
 
 // src/workspace/build-all.ts
-import { writeFileSync as writeFileSync3 } from "node:fs";
-import { join as join9 } from "node:path";
+import { writeFileSync as writeFileSync4 } from "node:fs";
+import { join as join12 } from "node:path";
 
 // src/workspace/graph.ts
 function topoOrder(batch, warn = console.warn) {
@@ -4532,6 +4822,16 @@ function preflightWorkspace(ws) {
 }
 
 // src/workspace/build-all.ts
+function declaredLibraries(ws) {
+  return ws.libs.filter((m) => packageKind(m.pkg) === "library");
+}
+function matchHits(pattern, members) {
+  let hits = members.filter((m) => matchGlob(pattern, m.name));
+  if (hits.length === 0 && pattern.includes("/")) {
+    hits = members.filter((m) => matchGlob(pattern, m.relDir));
+  }
+  return hits;
+}
 function collectFilters(argv2) {
   const out = [];
   for (let i2 = 0; i2 < argv2.length; i2++) {
@@ -4554,14 +4854,12 @@ function collectFilters(argv2) {
 }
 function selectPlugins(ws, filters) {
   if (filters.length === 0) return ws.plugins;
+  const libs = declaredLibraries(ws);
   const chosen = /* @__PURE__ */ new Set();
   const unmatched = [];
   for (const pattern of filters) {
-    let hits = ws.plugins.filter((p) => matchGlob(pattern, p.name));
-    if (hits.length === 0 && pattern.includes("/")) {
-      hits = ws.plugins.filter((p) => matchGlob(pattern, p.relDir));
-    }
-    if (hits.length === 0) {
+    const hits = matchHits(pattern, ws.plugins);
+    if (hits.length === 0 && matchHits(pattern, libs).length === 0) {
       unmatched.push(pattern);
       continue;
     }
@@ -4577,6 +4875,15 @@ function selectPlugins(ws, filters) {
   }
   return ws.plugins.filter((p) => chosen.has(p.name));
 }
+function selectLibraries(ws, filters) {
+  const libs = declaredLibraries(ws);
+  if (filters.length === 0) return libs;
+  const chosen = /* @__PURE__ */ new Set();
+  for (const pattern of filters) {
+    for (const m of matchHits(pattern, libs)) chosen.add(m.name);
+  }
+  return libs.filter((m) => chosen.has(m.name));
+}
 function restampRange(range, version) {
   const m = /^\s*(\^|~|>=|=)?\s*(\d+\.\d+\.\d+[0-9A-Za-z.+-]*)\s*$/.exec(range);
   const rewritten = m ? `${m[1] ?? ""}${version}` : `^${version}`;
@@ -4614,7 +4921,7 @@ function stampWorkspaceVersion(ws, version) {
         dirty = true;
       }
     }
-    if (dirty) writeFileSync3(join9(p.dir, "package.json"), `${JSON.stringify(next, null, 2)}
+    if (dirty) writeFileSync4(join12(p.dir, "package.json"), `${JSON.stringify(next, null, 2)}
 `);
   }
   return result;
@@ -4643,16 +4950,30 @@ async function buildWorkspace(opts) {
     );
   }
   const selected = selectPlugins(ws, opts.filters ?? []);
+  const selectedLibraries = selectLibraries(ws, opts.filters ?? []);
   preflightWorkspace(ws);
   const ordered = orderPlugins(selected, warn);
   opts.onPlan?.(ordered, stamp);
   const outcomes = [];
+  for (const lib of selectedLibraries) {
+    const base = { name: lib.name, version: lib.version, relDir: lib.relDir };
+    try {
+      const outPath = await step(
+        `Building ${lib.name}`,
+        () => buildPackage(lib.dir, opts.packagesDir),
+        (out) => `Built ${out}`
+      );
+      outcomes.push({ ...base, outPath });
+    } catch (e) {
+      outcomes.push({ ...base, error: e instanceof Error ? e.message : String(e) });
+    }
+  }
   for (const p of ordered) {
     const base = { name: p.name, version: p.version, relDir: p.relDir };
     try {
       const outPath = await step(
         `Building ${p.name}`,
-        () => buildPlugin(p.dir, opts.packagesDir),
+        () => buildPackage(p.dir, opts.packagesDir),
         (out) => `Built ${out}`
       );
       outcomes.push({ ...base, outPath });
@@ -5995,12 +6316,12 @@ async function run(argv2) {
     const filters = collectFilters(argv2);
     const stampVersion = parseFlag(argv2, "--stamp-version");
     let dir = positionals(argv2, VALUE_FLAGS)[0];
-    const wsRoot = findWorkspaceRoot(dir === void 0 ? process.cwd() : resolve8(dir));
-    const workspaceMode = wsRoot !== null && (dir === void 0 || resolve8(dir) === wsRoot);
+    const wsRoot = findWorkspaceRoot(dir === void 0 ? process.cwd() : resolve11(dir));
+    const workspaceMode = wsRoot !== null && (dir === void 0 || resolve11(dir) === wsRoot);
     if (!workspaceMode && (filters.length > 0 || stampVersion !== void 0)) {
       const flag = filters.length > 0 ? "--filter" : "--stamp-version";
       throw new Error(
-        wsRoot === null ? `${flag} is a workspace flag, but no workspace root was found above ${dir === void 0 ? process.cwd() : resolve8(dir)} \u2014 a workspace root is a package.json carrying an "s2script": { "workspace": { "plugins": [...] } } block` : `${flag} narrows a WORKSPACE build, but ${dir} names a single plugin \u2014 drop the argument (or pass ${wsRoot}) to build the workspace`
+        wsRoot === null ? `${flag} is a workspace flag, but no workspace root was found above ${dir === void 0 ? process.cwd() : resolve11(dir)} \u2014 a workspace root is a package.json carrying an "s2script": { "workspace": { "plugins": [...] } } block` : `${flag} narrows a WORKSPACE build, but ${dir} names a single plugin \u2014 drop the argument (or pass ${wsRoot}) to build the workspace`
       );
     }
     if (wsRoot !== null && workspaceMode) {
@@ -6018,10 +6339,10 @@ async function run(argv2) {
     }
     const packagesDir = resolvePackagesDir({
       explicit: parseFlag(argv2, "--packages-dir"),
-      pluginDir: resolve8(dir),
+      pluginDir: resolve11(dir),
       fromCliUrl: import.meta.url
     });
-    const out = await task(`Building ${dir}`, () => buildPlugin(dir, packagesDir), {
+    const out = await task(`Building ${dir}`, () => buildPackage(dir, packagesDir), {
       interactive,
       done: (p) => `Built ${p}`
     });
@@ -6078,14 +6399,14 @@ async function runWorkspace(argv2, root, interactive, filters, stampVersion) {
 }
 
 // src/commands/deploy.ts
-import { resolve as resolve10 } from "node:path";
+import { resolve as resolve13 } from "node:path";
 
 // src/registry/deploy.ts
-import { readFileSync as readFileSync9 } from "node:fs";
-import { resolve as resolve9 } from "node:path";
+import { readFileSync as readFileSync11 } from "node:fs";
+import { resolve as resolve12 } from "node:path";
 
 // src/types-pack.ts
-import { readFileSync as readFileSync7 } from "node:fs";
+import { readFileSync as readFileSync9 } from "node:fs";
 import { gzipSync } from "node:zlib";
 function pad(buf, size) {
   if (buf.length > size) throw new Error(`tar field overflow (${buf.length}>${size})`);
@@ -6119,7 +6440,7 @@ function tarFile(name, content) {
   return Buffer.concat([header, content, Buffer.alloc(padLen, 0)]);
 }
 function packTypesTarball(input) {
-  const dts = readFileSync7(input.typesPath);
+  const dts = readFileSync9(input.typesPath);
   const pkgJson = Buffer.from(
     JSON.stringify(
       {
@@ -6146,11 +6467,11 @@ function packTypesTarball(input) {
 }
 
 // src/registry/credentials.ts
-import { existsSync as existsSync7, mkdirSync as mkdirSync2, readFileSync as readFileSync8, writeFileSync as writeFileSync4 } from "node:fs";
+import { existsSync as existsSync9, mkdirSync as mkdirSync3, readFileSync as readFileSync10, writeFileSync as writeFileSync5 } from "node:fs";
 import { homedir } from "node:os";
-import { join as join10 } from "node:path";
+import { join as join13 } from "node:path";
 function credentialsPath() {
-  return join10(homedir(), ".s2script", "credentials.json");
+  return join13(homedir(), ".s2script", "credentials.json");
 }
 function normalizeRegistryUrl(url) {
   const trimmed = url.replace(/\/$/, "");
@@ -6168,9 +6489,9 @@ function loadCredentials() {
     return { registryUrl: defaultRegistryUrl(), token: fromEnv };
   }
   const p = credentialsPath();
-  if (!existsSync7(p)) return null;
+  if (!existsSync9(p)) return null;
   try {
-    const j = JSON.parse(readFileSync8(p, "utf8"));
+    const j = JSON.parse(readFileSync10(p, "utf8"));
     if (!j.token) return null;
     return {
       registryUrl: normalizeRegistryUrl(j.registryUrl || defaultRegistryUrl()),
@@ -6181,9 +6502,9 @@ function loadCredentials() {
   }
 }
 function saveCredentials(creds) {
-  const dir = join10(homedir(), ".s2script");
-  mkdirSync2(dir, { recursive: true });
-  writeFileSync4(
+  const dir = join13(homedir(), ".s2script");
+  mkdirSync3(dir, { recursive: true });
+  writeFileSync5(
     credentialsPath(),
     JSON.stringify(
       { registryUrl: normalizeRegistryUrl(creds.registryUrl), token: creds.token },
@@ -6213,7 +6534,8 @@ var TIMEOUTS_MS = {
   meta: 3e4,
   plan: 3e4,
   "types download": 12e4,
-  "s2sp download": 12e4
+  "s2sp download": 12e4,
+  "library download": 12e4
 };
 function rootCause(err2) {
   let cur = err2;
@@ -6306,9 +6628,10 @@ var RegistryClient = class {
   }
   async deploy(opts) {
     const entries = {
-      "manifest.json": new TextEncoder().encode(JSON.stringify(opts.manifest)),
-      "plugin.s2sp": new Uint8Array(opts.s2sp)
+      "manifest.json": new TextEncoder().encode(JSON.stringify(opts.manifest))
     };
+    if (opts.s2sp && opts.s2sp.length) entries["plugin.s2sp"] = new Uint8Array(opts.s2sp);
+    if (opts.lib && opts.lib.length) entries["library.s2lib"] = new Uint8Array(opts.lib);
     if (opts.types && opts.types.length) {
       entries["types.tgz"] = new Uint8Array(opts.types);
     }
@@ -6334,6 +6657,14 @@ var RegistryClient = class {
     const res = await this.request("types download", u4);
     return Buffer.from(await res.arrayBuffer());
   }
+  /** A library's own artifact — a .s2lib, never the plugin .s2sp shape. */
+  async downloadLib(name, version) {
+    const u4 = new URL(`${this.baseUrl}/api/v1/download/lib`);
+    u4.searchParams.set("name", name);
+    u4.searchParams.set("version", version);
+    const res = await this.request("library download", u4);
+    return Buffer.from(await res.arrayBuffer());
+  }
   async meta(name) {
     const u4 = new URL(`${this.baseUrl}/api/v1/meta`);
     u4.searchParams.set("name", name);
@@ -6365,10 +6696,19 @@ function assertDeployable(pkg, label) {
   }
 }
 function assembleDeployArchive(pluginDir, pkg, outPath) {
-  const absDir = resolve9(pluginDir);
+  const absDir = resolve12(pluginDir);
+  if (packageKind(pkg) === "library") {
+    const lib = readFileSync11(outPath);
+    const manifestEntry2 = unzipSync(lib)["manifest.json"];
+    if (!manifestEntry2) {
+      throw new Error(`built archive missing manifest.json: ${outPath}`);
+    }
+    const manifest2 = JSON.parse(Buffer.from(manifestEntry2).toString("utf8"));
+    return { manifest: manifest2, s2sp: null, lib, types: null };
+  }
   const gate = assertPublishesTypes(pkg, absDir);
   if (!gate.ok) throw new Error(`publish gate failed: ${gate.error}`);
-  const s2sp = readFileSync9(outPath);
+  const s2sp = readFileSync11(outPath);
   const manifestEntry = unzipSync(s2sp)["manifest.json"];
   if (!manifestEntry) {
     throw new Error(`built archive missing manifest.json: ${outPath}`);
@@ -6383,11 +6723,11 @@ function assembleDeployArchive(pluginDir, pkg, outPath) {
       publishes: hasPublishes(manifest.publishes) ? manifest.publishes : void 0
     });
   }
-  return { manifest, s2sp, types };
+  return { manifest, s2sp, lib: null, types };
 }
 async function deployPlugin(opts) {
-  const absDir = resolve9(opts.dir);
-  const pkg = JSON.parse(readFileSync9(resolve9(absDir, "package.json"), "utf8"));
+  const absDir = resolve12(opts.dir);
+  const pkg = JSON.parse(readFileSync11(resolve12(absDir, "package.json"), "utf8"));
   assertDeployable(pkg, absDir);
   const creds = loadCredentials();
   if (!creds?.token) {
@@ -6395,13 +6735,14 @@ async function deployPlugin(opts) {
       opts.ci ? "S2SCRIPT_TOKEN required in CI" : "not logged in \u2014 run `s2s login` or set S2SCRIPT_TOKEN"
     );
   }
-  const outPath = await buildPlugin(absDir, opts.packagesDir);
-  const { manifest, s2sp, types } = assembleDeployArchive(absDir, pkg, outPath);
+  const outPath = packageKind(pkg) === "library" ? await buildLibrary(absDir, opts.packagesDir) : await buildPlugin(absDir, opts.packagesDir);
+  const { manifest, s2sp, lib, types } = assembleDeployArchive(absDir, pkg, outPath);
   const client = new RegistryClient({
     baseUrl: opts.registryUrl || creds.registryUrl || defaultRegistryUrl(),
-    token: creds.token
+    token: creds.token,
+    fetch: opts.fetch
   });
-  return client.deploy({ manifest, s2sp, types });
+  return client.deploy({ manifest, s2sp, lib, types });
 }
 
 // src/workspace/deploy-all.ts
@@ -6409,13 +6750,22 @@ function builtPluginsFromOutcomes(ws, outcomes) {
   const byName = new Map(ws.plugins.map((p) => [p.name, p]));
   const ordered = [];
   const built = /* @__PURE__ */ new Map();
+  const unpublishableLibraries = [];
   for (const o of outcomes) {
     const plugin = byName.get(o.name);
-    if (!plugin) continue;
+    if (!plugin) {
+      unpublishableLibraries.push(o);
+      continue;
+    }
     ordered.push(plugin);
     if (o.outPath !== void 0) built.set(o.name, { plugin, outPath: o.outPath });
   }
-  return { ordered, built };
+  return { ordered, built, unpublishableLibraries };
+}
+function formatUnpublishableLibraries(outcomes) {
+  return outcomes.map(
+    (o) => `    skip ${o.name} (library outside s2script.workspace.plugins \u2014 publish with \`s2s deploy ${o.relDir}\`)`
+  ).join("\n");
 }
 async function isAlreadyPublished(client, name, version) {
   try {
@@ -6497,9 +6847,9 @@ async function run2(argv2) {
         "--stamp-version is a build-only flag (design spec 2026-07-27 \xA75.4) \u2014 s2s deploy never rewrites versions; run `s2s build --stamp-version <v>` first, then `s2s deploy`"
       );
     }
-    const absDir = resolve10(dir);
+    const absDir = resolve13(dir);
     const root = findWorkspaceRoot(absDir);
-    if (root !== null && resolve10(root) === absDir) {
+    if (root !== null && resolve13(root) === absDir) {
       await runWorkspaceDeploy({ root: absDir, argv: argv2, interactive, filters, dryRun, yes, ci });
       return;
     }
@@ -6560,7 +6910,7 @@ async function runWorkspaceDeploy(opts) {
     console.log(out);
     return out;
   };
-  const build2 = await buildWorkspace({
+  const build3 = await buildWorkspace({
     workspace: ws,
     packagesDir,
     filters,
@@ -6570,13 +6920,16 @@ async function runWorkspaceDeploy(opts) {
       label(`building ${plugins.length} plugin${plugins.length === 1 ? "" : "s"} (dependency order)`);
     }
   });
-  if (build2.failed.length > 0) {
-    throw new Error(formatBuildFailures(build2.failed, build2.outcomes.length));
+  if (build3.failed.length > 0) {
+    throw new Error(formatBuildFailures(build3.failed, build3.outcomes.length));
   }
-  const { ordered, built } = builtPluginsFromOutcomes(ws, build2.outcomes);
+  const { ordered, built, unpublishableLibraries } = builtPluginsFromOutcomes(ws, build3.outcomes);
   const plan = await computePlan(ordered, (name, version) => isAlreadyPublished(client, name, version));
   label("plan:");
   console.log(formatPlan(plan));
+  if (unpublishableLibraries.length > 0) {
+    console.log(formatUnpublishableLibraries(unpublishableLibraries));
+  }
   const toPublish = publishCount(plan);
   if (toPublish === 0) {
     label("nothing to publish");
@@ -6623,17 +6976,17 @@ async function runWorkspaceDeploy(opts) {
 }
 
 // src/commands/version.ts
-import { resolve as resolve11 } from "node:path";
+import { resolve as resolve14 } from "node:path";
 
 // src/version/version.ts
-import { existsSync as existsSync8 } from "node:fs";
-import { join as join13 } from "node:path";
+import { existsSync as existsSync10 } from "node:fs";
+import { join as join16 } from "node:path";
 
 // src/version/changesets.ts
 var import_semver = __toESM(require_semver2(), 1);
-import { readFileSync as readFileSync10 } from "node:fs";
+import { readFileSync as readFileSync12 } from "node:fs";
 import { createRequire as createRequire2 } from "node:module";
-import { join as join11 } from "node:path";
+import { join as join14 } from "node:path";
 import { pathToFileURL } from "node:url";
 var SUPPORTED = {
   "@changesets/assemble-release-plan": ">=6.0.0 <7.0.0",
@@ -6653,7 +7006,7 @@ function named(mod, key) {
   return outer?.[key];
 }
 async function loadChangesets(workspaceRoot) {
-  const require3 = createRequire2(join11(workspaceRoot, "package.json"));
+  const require3 = createRequire2(join14(workspaceRoot, "package.json"));
   const missing = [];
   const wrongVersion = [];
   const resolved = /* @__PURE__ */ new Map();
@@ -6668,7 +7021,7 @@ async function loadChangesets(workspaceRoot) {
       missing.push(name);
       continue;
     }
-    const version = String(JSON.parse(readFileSync10(manifest, "utf8")).version ?? "");
+    const version = String(JSON.parse(readFileSync12(manifest, "utf8")).version ?? "");
     if (!(0, import_semver.satisfies)(version, range, { includePrerelease: true })) {
       wrongVersion.push(`${name}@${version} (supported: ${range})`);
       continue;
@@ -6768,8 +7121,8 @@ function mirrorPackages(ws) {
 
 // src/version/ranges.ts
 var import_semver2 = __toESM(require_semver2(), 1);
-import { readFileSync as readFileSync11, writeFileSync as writeFileSync5 } from "node:fs";
-import { join as join12 } from "node:path";
+import { readFileSync as readFileSync13, writeFileSync as writeFileSync6 } from "node:fs";
+import { join as join15 } from "node:path";
 var BUMP_LEVEL = { none: 0, patch: 1, minor: 2, major: 3 };
 function rangePrefix(range) {
   if (range.startsWith(">=")) return ">=";
@@ -6788,7 +7141,7 @@ function shouldUpdate(release, range, config) {
   return BUMP_LEVEL[release.type] >= minLevel;
 }
 function readJsonFile(path) {
-  const raw = readFileSync11(path, "utf8");
+  const raw = readFileSync13(path, "utf8");
   const match = /^[ \t]*[{[]\s*\n([ \t]+)/.exec(raw);
   return {
     json: JSON.parse(raw),
@@ -6829,12 +7182,12 @@ function rewriteSiblingRanges(ws, releases, config) {
   for (const [consumerName, ifaceRanges] of edits) {
     const plugin = ws.plugins.find((p) => p.name === consumerName);
     if (plugin === void 0) continue;
-    const path = join12(plugin.dir, "package.json");
+    const path = join15(plugin.dir, "package.json");
     const { json, indent, eol } = readJsonFile(path);
     const s2 = json.s2script;
     if (s2?.pluginDependencies === void 0) continue;
     for (const [iface, range] of ifaceRanges) s2.pluginDependencies[iface] = range;
-    writeFileSync5(path, JSON.stringify(json, null, indent) + eol);
+    writeFileSync6(path, JSON.stringify(json, null, indent) + eol);
     touchedFiles.push(path);
   }
   return { rewrites, skips, touchedFiles };
@@ -6843,8 +7196,8 @@ function rewriteSiblingRanges(ws, releases, config) {
 // src/version/version.ts
 async function versionWorkspace(root, opts = {}) {
   const ws = loadWorkspace(root);
-  const configPath = join13(ws.root, ".changeset", "config.json");
-  if (!existsSync8(configPath)) {
+  const configPath = join16(ws.root, ".changeset", "config.json");
+  if (!existsSync10(configPath)) {
     throw new Error(
       `s2s version: ${configPath} does not exist \u2014 this workspace is not set up for changesets. Run \`npx changeset init\` at ${ws.root}.`
     );
@@ -6882,7 +7235,7 @@ function resolveVersionRoot(from) {
 async function run3(argv2) {
   const interactive = isInteractive();
   const [dirArg] = positionals(argv2, ["--since"]);
-  const from = resolve11(dirArg ?? ".");
+  const from = resolve14(dirArg ?? ".");
   try {
     const root = resolveVersionRoot(from);
     const result = await task(
@@ -6919,21 +7272,21 @@ async function run3(argv2) {
 }
 
 // src/commands/add.ts
-import { resolve as resolve13 } from "node:path";
+import { resolve as resolve16 } from "node:path";
 
 // src/registry/add.ts
 import {
-  mkdirSync as mkdirSync3,
-  writeFileSync as writeFileSync7,
-  readFileSync as readFileSync13,
-  existsSync as existsSync10
+  mkdirSync as mkdirSync5,
+  writeFileSync as writeFileSync9,
+  readFileSync as readFileSync15,
+  existsSync as existsSync12
 } from "node:fs";
-import { join as join15, resolve as resolve12 } from "node:path";
+import { join as join19, resolve as resolve15 } from "node:path";
 import { gunzipSync } from "node:zlib";
 
 // src/registry/npmrc.ts
-import { existsSync as existsSync9, readFileSync as readFileSync12, writeFileSync as writeFileSync6 } from "node:fs";
-import { join as join14 } from "node:path";
+import { existsSync as existsSync11, readFileSync as readFileSync14, writeFileSync as writeFileSync7 } from "node:fs";
+import { join as join17 } from "node:path";
 function npmCompatRegistryUrl(registryUrl) {
   return `${registryUrl.replace(/\/$/, "")}/npm/`;
 }
@@ -6949,8 +7302,8 @@ function ensureScopeNpmrc(projectDir, packageName, registryUrl) {
   const compat = npmCompatRegistryUrl(registryUrl);
   const key = `@${scope}:registry`;
   const line = `${key}=${compat}`;
-  const npmrcPath = join14(projectDir, ".npmrc");
-  let existing = existsSync9(npmrcPath) ? readFileSync12(npmrcPath, "utf8") : "";
+  const npmrcPath = join17(projectDir, ".npmrc");
+  let existing = existsSync11(npmrcPath) ? readFileSync14(npmrcPath, "utf8") : "";
   const lines = existing.split(/\r?\n/);
   const idx = lines.findIndex((l2) => l2.trimStart().startsWith(`${key}=`) || l2.trimStart().startsWith(`${key} =`));
   if (idx >= 0) {
@@ -6960,10 +7313,39 @@ function ensureScopeNpmrc(projectDir, packageName, registryUrl) {
     lines.push(line);
   }
   const out = lines.filter((l2, i2, a2) => !(l2 === "" && a2[i2 - 1] === "")).join("\n");
-  writeFileSync6(npmrcPath, out.endsWith("\n") ? out : out + "\n");
+  writeFileSync7(npmrcPath, out.endsWith("\n") ? out : out + "\n");
   return line;
 }
 
+// src/registry/lib-extract.ts
+import { mkdirSync as mkdirSync4, writeFileSync as writeFileSync8 } from "node:fs";
+import { join as join18 } from "node:path";
+var WANTED = /* @__PURE__ */ new Set(["index.js", "index.d.ts"]);
+function extractLibArchive(s2lib, outDir, meta) {
+  const entries = unzipSync(new Uint8Array(s2lib));
+  if (!entries["index.js"]?.length) throw new Error("library archive missing index.js");
+  if (!entries["index.d.ts"]?.length) throw new Error("library archive missing index.d.ts");
+  mkdirSync4(outDir, { recursive: true });
+  for (const [name, bytes] of Object.entries(entries)) {
+    if (!WANTED.has(name)) continue;
+    writeFileSync8(join18(outDir, name), Buffer.from(bytes));
+  }
+  let apiVersion = "1.x";
+  try {
+    const m = JSON.parse(Buffer.from(entries["manifest.json"] ?? new Uint8Array()).toString("utf8"));
+    if (typeof m.apiVersion === "string") apiVersion = m.apiVersion;
+  } catch {
+  }
+  writeFileSync8(
+    join18(outDir, "package.json"),
+    JSON.stringify(
+      { name: meta.name, version: meta.version, main: "index.js", types: "index.d.ts", s2script: { kind: "library", apiVersion } },
+      null,
+      2
+    ) + "\n"
+  );
+}
+
 // src/registry/add.ts
 function parseSpec(spec) {
   if (spec.startsWith("@")) {
@@ -6977,7 +7359,7 @@ function parseSpec(spec) {
 }
 function extractTypesTarball(tgz, outDir) {
   const tar = gunzipSync(tgz);
-  mkdirSync3(outDir, { recursive: true });
+  mkdirSync5(outDir, { recursive: true });
   let offset = 0;
   let wroteContract = false;
   while (offset + 512 <= tar.length) {
@@ -6992,45 +7374,73 @@ function extractTypesTarball(tgz, outDir) {
     if (!name || name.endsWith("/")) continue;
     const base = name.replace(/^package\//, "");
     if (base === "package.json") {
-      writeFileSync7(join15(outDir, "package.json"), content);
+      writeFileSync9(join19(outDir, "package.json"), content);
     } else if (base === "api.d.ts" || base === "index.d.ts") {
-      writeFileSync7(join15(outDir, "index.d.ts"), content);
+      writeFileSync9(join19(outDir, "index.d.ts"), content);
       wroteContract = true;
     }
   }
-  if (!wroteContract && !existsSync10(join15(outDir, "index.d.ts"))) {
+  if (!wroteContract && !existsSync12(join19(outDir, "index.d.ts"))) {
     throw new Error("types tarball missing package/api.d.ts (or index.d.ts)");
   }
 }
+function rangeForResolved(range, version) {
+  const major2 = version.split(".")[0] ?? "0";
+  return range.startsWith("^") || range === "*" ? `^${major2}.0.0` : range.includes(".") ? range : `^${version}`;
+}
 async function addPackage(opts) {
-  const absDir = resolve12(opts.pluginDir);
+  const absDir = resolve15(opts.pluginDir);
   const { name, range } = parseSpec(opts.spec);
   const creds = loadCredentials();
   const client = new RegistryClient({
     baseUrl: opts.registryUrl || creds?.registryUrl || defaultRegistryUrl(),
-    token: creds?.token
+    token: creds?.token,
+    fetch: opts.fetch
   });
   const resolved = await client.resolve(name, range);
+  if (resolved.kind === "library") {
+    const s2lib = await client.downloadLib(name, resolved.version);
+    const libDir = join19(absDir, ".s2script", "libs", ...name.split("/"));
+    extractLibArchive(s2lib, libDir, { name, version: resolved.version });
+    const pkgPath2 = join19(absDir, "package.json");
+    const pkg2 = JSON.parse(readFileSync15(pkgPath2, "utf8"));
+    pkg2.s2script = pkg2.s2script ?? {};
+    pkg2.s2script.libraries = pkg2.s2script.libraries ?? {};
+    pkg2.s2script.libraries[name] = rangeForResolved(range, resolved.version);
+    writeFileSync9(pkgPath2, JSON.stringify(pkg2, null, 2) + "\n");
+    return {
+      kind: "library",
+      name: resolved.name,
+      version: resolved.version,
+      reviewState: resolved.reviewState,
+      typesDir: null,
+      libDir,
+      // Deliberately NO .npmrc line: nothing about a library may look like an npm
+      // package — that is the exact confusion this feature exists to prevent.
+      npmrcLine: null
+    };
+  }
   if (!resolved.hasTypes) {
     throw new Error(`${name}@${resolved.version} has no types artifact (runtime-only package?)`);
   }
   const tgz = await client.downloadTypes(name, resolved.version);
-  const typesDir = join15(absDir, ".s2script", "types", ...name.split("/"));
+  const typesDir = join19(absDir, ".s2script", "types", ...name.split("/"));
   extractTypesTarball(tgz, typesDir);
-  const pkgPath = join15(absDir, "package.json");
-  const pkg = JSON.parse(readFileSync13(pkgPath, "utf8"));
+  const pkgPath = join19(absDir, "package.json");
+  const pkg = JSON.parse(readFileSync15(pkgPath, "utf8"));
   pkg.s2script = pkg.s2script ?? {};
   pkg.s2script.pluginDependencies = pkg.s2script.pluginDependencies ?? {};
-  const major = resolved.version.split(".")[0] ?? "0";
-  pkg.s2script.pluginDependencies[name] = range.startsWith("^") || range === "*" ? `^${major}.0.0` : range.includes(".") ? range : `^${resolved.version}`;
-  writeFileSync7(pkgPath, JSON.stringify(pkg, null, 2) + "\n");
+  pkg.s2script.pluginDependencies[name] = rangeForResolved(range, resolved.version);
+  writeFileSync9(pkgPath, JSON.stringify(pkg, null, 2) + "\n");
   const registryUrl = opts.registryUrl || creds?.registryUrl || defaultRegistryUrl();
   const npmrcLine = ensureScopeNpmrc(absDir, name, registryUrl);
   return {
+    kind: "plugin",
     name: resolved.name,
     version: resolved.version,
     reviewState: resolved.reviewState,
     typesDir,
+    libDir: null,
     npmrcLine
   };
 }
@@ -7049,9 +7459,9 @@ async function run4(argv2) {
   }
   try {
     const pluginDir = parseFlag(argv2, "--dir") || ".";
-    const absDir = resolve13(pluginDir);
+    const absDir = resolve16(pluginDir);
     const root = findWorkspaceRoot(absDir);
-    if (root !== null && resolve13(root) === absDir) {
+    if (root !== null && resolve16(root) === absDir) {
       throw new Error(
         `${absDir} is a workspace root (design spec 2026-07-27 \xA74.1), not a plugin \u2014 \`s2s add\` needs a plugin directory: pass --dir <plugin> (e.g. --dir plugins/shop)`
       );
@@ -7063,14 +7473,24 @@ async function run4(argv2) {
         spec,
         registryUrl: parseFlag(argv2, "--registry")
       }),
-      { interactive, done: (r2) => `Added ${r2.name}@${r2.version} \u2192 ${r2.typesDir}` }
+      {
+        interactive,
+        done: (r2) => r2.kind === "library" ? `Added library ${r2.name}@${r2.version} \u2192 ${r2.libDir} (commit this directory)` : `Added ${r2.name}@${r2.version} \u2192 ${r2.typesDir}`
+      }
     );
     if (interactive) {
       if (result.npmrcLine) {
         log2.info(`npmrc: ${result.npmrcLine}  (types-only; npm install ${result.name} also works)`);
       }
       if (result.reviewState === "unreviewed") {
-        log2.warn("Not reviewed by s2script \u2014 types pulled; use at your own risk.");
+        log2.warn(
+          result.kind === "library" ? "Not reviewed by s2script \u2014 library pulled; use at your own risk." : "Not reviewed by s2script \u2014 types pulled; use at your own risk."
+        );
+      }
+    } else if (result.kind === "library") {
+      console.log(`added library ${result.name}@${result.version} \u2192 ${result.libDir}`);
+      if (result.reviewState === "unreviewed") {
+        console.log("note: Not reviewed by s2script \u2014 library pulled; use at your own risk.");
       }
     } else {
       console.log(`added ${result.name}@${result.version} \u2192 ${result.typesDir}`);
@@ -7088,13 +7508,13 @@ async function run4(argv2) {
 }
 
 // src/commands/install.ts
-import { resolve as resolve15 } from "node:path";
-import { existsSync as existsSync12 } from "node:fs";
+import { resolve as resolve18 } from "node:path";
+import { existsSync as existsSync14 } from "node:fs";
 
 // src/registry/install.ts
 import { createHash as createHash2 } from "node:crypto";
-import { mkdirSync as mkdirSync4, readFileSync as readFileSync14, writeFileSync as writeFileSync8, renameSync, existsSync as existsSync11 } from "node:fs";
-import { basename as basename2, join as join16, resolve as resolve14, sep as sep2 } from "node:path";
+import { mkdirSync as mkdirSync6, readFileSync as readFileSync16, writeFileSync as writeFileSync10, renameSync, existsSync as existsSync13 } from "node:fs";
+import { basename as basename2, join as join20, resolve as resolve17, sep as sep3 } from "node:path";
 function parseManifest(input) {
   if (!input || typeof input !== "object" || Array.isArray(input)) {
     throw new Error("manifest must be a JSON object");
@@ -7177,14 +7597,14 @@ async function installPlan(opts) {
       );
     }
   }
-  const dirResolved = resolve14(opts.dir);
+  const dirResolved = resolve17(opts.dir);
   const targets = install.map((e) => {
     if (!e.sha256) {
       throw new Error(`refusing ${e.name}@${e.version}: registry did not provide a sha256 to verify against`);
     }
     const filename = safeFilename(e);
-    const dest = resolve14(join16(opts.dir, filename));
-    if (dest !== dirResolved && !dest.startsWith(dirResolved + sep2)) {
+    const dest = resolve17(join20(opts.dir, filename));
+    if (dest !== dirResolved && !dest.startsWith(dirResolved + sep3)) {
       throw new Error(`refusing ${e.name}@${e.version}: destination "${dest}" escapes plugins dir "${dirResolved}"`);
     }
     return { entry: e, filename, dest };
@@ -7194,12 +7614,12 @@ async function installPlan(opts) {
     for (const e of install) log3(`would install ${e.name}@${e.version} -> ${e.filename}`);
     return { written: [], skipped: [], warnings };
   }
-  mkdirSync4(opts.dir, { recursive: true });
+  mkdirSync6(opts.dir, { recursive: true });
   const written = [];
   const skipped = [];
   for (const { entry: e, filename, dest } of targets) {
-    if (existsSync11(dest)) {
-      const have = sha256Hex(readFileSync14(dest));
+    if (existsSync13(dest)) {
+      const have = sha256Hex(readFileSync16(dest));
       if (have === e.sha256) {
         skipped.push(filename);
         log3(`up to date ${filename}`);
@@ -7212,7 +7632,7 @@ async function installPlan(opts) {
       throw new Error(`sha256 mismatch for ${e.name}@${e.version}: expected ${e.sha256}, got ${got}`);
     }
     const tmp = `${dest}.${process.pid}.tmp`;
-    writeFileSync8(tmp, bytes);
+    writeFileSync10(tmp, bytes);
     renameSync(tmp, dest);
     written.push(filename);
     log3(`installed ${e.name}@${e.version} -> ${filename}`);
@@ -7220,8 +7640,8 @@ async function installPlan(opts) {
   return { written, skipped, warnings };
 }
 function loadManifestFile(path) {
-  if (!existsSync11(path)) return { plugins: {} };
-  return parseManifest(JSON.parse(readFileSync14(path, "utf8")));
+  if (!existsSync13(path)) return { plugins: {} };
+  return parseManifest(JSON.parse(readFileSync16(path, "utf8")));
 }
 
 // src/commands/install.ts
@@ -7234,7 +7654,7 @@ async function run5(argv2) {
   const reviewedOnly = hasFlag(argv2, "--reviewed-only");
   let dir = parseFlag(argv2, "--dir");
   if (!dir) {
-    if (existsSync12(resolve15(AUTODETECT))) dir = resolve15(AUTODETECT);
+    if (existsSync14(resolve18(AUTODETECT))) dir = resolve18(AUTODETECT);
     else {
       console.error(
         `Usage: s2s install [name[@range]...] --dir <plugins dir>
@@ -7245,7 +7665,7 @@ async function run5(argv2) {
   }
   const client = new RegistryClient({ baseUrl: registry });
   try {
-    const manifest = loadManifestFile(resolve15(file));
+    const manifest = loadManifestFile(resolve18(file));
     const specs = mergeSpecs(manifest, args);
     if (Object.keys(specs).length === 0) {
       console.error(
@@ -7275,32 +7695,32 @@ async function run5(argv2) {
 }
 
 // src/commands/create.ts
-import { resolve as resolve18 } from "node:path";
+import { resolve as resolve21 } from "node:path";
 
 // src/create/create.ts
 import {
-  mkdirSync as mkdirSync5,
-  writeFileSync as writeFileSync9,
-  existsSync as existsSync13,
+  mkdirSync as mkdirSync7,
+  writeFileSync as writeFileSync11,
+  existsSync as existsSync15,
   readdirSync as readdirSync4,
-  readFileSync as readFileSync15,
+  readFileSync as readFileSync17,
   symlinkSync
 } from "node:fs";
-import { dirname as dirname4, isAbsolute, join as join17, relative as relative2, resolve as resolve16, basename as basename3 } from "node:path";
+import { dirname as dirname5, isAbsolute, join as join21, relative as relative2, resolve as resolve19, basename as basename3 } from "node:path";
 import { spawnSync } from "node:child_process";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 function readCliVersion() {
-  const here = dirname4(fileURLToPath2(import.meta.url));
+  const here = dirname5(fileURLToPath2(import.meta.url));
   const candidates = [
-    join17(here, "..", "package.json"),
+    join21(here, "..", "package.json"),
     // dist/cli.js → packages/sdk/package.json
-    join17(here, "..", "..", "package.json")
+    join21(here, "..", "..", "package.json")
     // src/create → packages/sdk/package.json
   ];
   for (const p of candidates) {
-    if (!existsSync13(p)) continue;
+    if (!existsSync15(p)) continue;
     try {
-      const pkg = JSON.parse(readFileSync15(p, "utf8"));
+      const pkg = JSON.parse(readFileSync17(p, "utf8"));
       if (pkg.name === "@s2script/sdk" && pkg.version) return pkg.version;
     } catch {
     }
@@ -7308,27 +7728,27 @@ function readCliVersion() {
   return "0.1.0";
 }
 function findLocalPackagesDir() {
-  const here = dirname4(fileURLToPath2(import.meta.url));
+  const here = dirname5(fileURLToPath2(import.meta.url));
   const candidates = [
-    join17(here, "..", ".."),
+    join21(here, "..", ".."),
     // dist/cli.js → packages
-    join17(here, "..", "..", "..")
+    join21(here, "..", "..", "..")
     // src/create → packages
   ];
   for (const c2 of candidates) {
-    if (isPackagesDir(c2)) return resolve16(c2);
+    if (isPackagesDir(c2)) return resolve19(c2);
   }
   return void 0;
 }
 function slugifyBasename(dir, fallback = "plugin") {
-  const base = basename3(resolve16(dir));
+  const base = basename3(resolve19(dir));
   return base.replace(/[^a-zA-Z0-9._-]+/g, "-").replace(/^-+|-+$/g, "").toLowerCase() || fallback;
 }
-function defaultNameFromPath(dir) {
-  return `@plugin/${slugifyBasename(dir)}`;
+function defaultNameFromPath(dir, kind = "plugin") {
+  return `@${kind}/${slugifyBasename(dir)}`;
 }
 function assertEmptyTarget(targetPath) {
-  if (!existsSync13(targetPath)) return;
+  if (!existsSync15(targetPath)) return;
   const kids = readdirSync4(targetPath);
   const meaningful = kids.filter((k) => k !== ".git");
   if (meaningful.length) {
@@ -7367,18 +7787,18 @@ function versionSpecFrom(status, stdout2) {
   const v = (stdout2 ?? "").trim();
   return status === 0 && /^\d+\.\d+\.\d+/.test(v) ? `^${v}` : "latest";
 }
-function registryDevDeps(game, sdkVersion, resolve19 = resolvePublishedVersion) {
+function registryDevDeps(game, sdkVersion, resolve22 = resolvePublishedVersion) {
   const deps = {};
   for (const n3 of createPackageNames(game)) {
-    deps[`@s2script/${n3}`] = n3 === "sdk" ? `^${sdkVersion}` : resolve19(`@s2script/${n3}`);
+    deps[`@s2script/${n3}`] = n3 === "sdk" ? `^${sdkVersion}` : resolve22(`@s2script/${n3}`);
   }
   return deps;
 }
 function fileDevDeps(packagesDir, game) {
   const deps = {};
   for (const n3 of createPackageNames(game)) {
-    const abs = join17(packagesDir, n3);
-    if (!existsSync13(join17(abs, "package.json"))) return void 0;
+    const abs = join21(packagesDir, n3);
+    if (!existsSync15(join21(abs, "package.json"))) return void 0;
     deps[`@s2script/${n3}`] = `file:${abs}`;
   }
   return deps;
@@ -7410,6 +7830,13 @@ export default plugin((ctx) => {
 });
 `;
 }
+var LIBRARY_ENTRY = `/** Encode a string. Replace this with the library's real surface. */
+export function encode(input: string): string {
+  return input;
+}
+`;
+var LIBRARY_TYPES = `export declare function encode(input: string): string;
+`;
 var ESLINT_RANGE = "^10.7.0";
 function eslintConfig() {
   return `import s2script from "@s2script/eslint-plugin";
@@ -7435,7 +7862,7 @@ function tsconfigJson() {
   ) + "\n";
 }
 function workspaceTsconfigJson(targetPath, workspaceRoot) {
-  const rel = relative2(targetPath, join17(workspaceRoot, "tsconfig.base.json")).replace(/\\/g, "/");
+  const rel = relative2(targetPath, join21(workspaceRoot, "tsconfig.base.json")).replace(/\\/g, "/");
   return JSON.stringify(
     {
       extends: rel.startsWith(".") ? rel : `./${rel}`,
@@ -7481,6 +7908,28 @@ function packageJsonContent(name, game, version, localPackagesDir) {
     2
   ) + "\n";
 }
+function libraryPackageJsonContent(name, game, version, localPackagesDir) {
+  const fileDeps = localPackagesDir ? fileDevDeps(localPackagesDir, game) : void 0;
+  const devDependencies = {
+    ...fileDeps ?? registryDevDeps(game, version),
+    eslint: ESLINT_RANGE
+  };
+  return JSON.stringify(
+    {
+      name,
+      version: "0.1.0",
+      main: "src/index.ts",
+      types: "src/index.d.ts",
+      scripts: {
+        build: "s2s build ."
+      },
+      s2script: { kind: "library" },
+      devDependencies
+    },
+    null,
+    2
+  ) + "\n";
+}
 function gitignore() {
   return `node_modules/
 dist/
@@ -7489,10 +7938,10 @@ dist/
 `;
 }
 function linkLocalPackagesForNoInstall(targetPath, localPackagesDir) {
-  const nm = join17(targetPath, "node_modules");
-  mkdirSync5(nm, { recursive: true });
-  const dest = join17(nm, "@s2script");
-  if (!existsSync13(dest)) symlinkSync(localPackagesDir, dest);
+  const nm = join21(targetPath, "node_modules");
+  mkdirSync7(nm, { recursive: true });
+  const dest = join21(nm, "@s2script");
+  if (!existsSync15(dest)) symlinkSync(localPackagesDir, dest);
 }
 function runInstall(dir, pm) {
   if (pm === "none") return;
@@ -7508,14 +7957,20 @@ async function createPlugin(opts = {}) {
   const interactive = isInteractive({ yes: opts.yes });
   let game = assertGame(opts.game);
   let name = opts.name;
+  let kind = opts.kind ?? "plugin";
   let install = opts.noInstall ? "none" : assertInstall(opts.install);
   const template = opts.template ?? "minimal";
   if (template !== "minimal") {
     throw new Error(`unknown template ${JSON.stringify(template)} (v1 supports: minimal)`);
   }
   const workspaceRoot = opts.workspaceRoot;
+  if (kind === "library" && workspaceRoot !== void 0) {
+    throw new Error(
+      `s2s create --library does not support workspace mode yet (workspace detected at ${workspaceRoot}) \u2014 a workspace library needs to sit outside the plugins/ glob (e.g. a sibling directory like libs/<name>, matched by npm's own "workspaces" field but not by s2script.workspace.plugins \u2014 see examples/workspace-library for a worked one); add it by hand for now`
+    );
+  }
   let slug = workspaceRoot !== void 0 && opts.path !== void 0 ? assertBareSlug(opts.path) : opts.path;
-  let targetPath = workspaceRoot === void 0 ? resolve16(opts.path ?? ".") : slug === void 0 ? void 0 : join17(workspaceRoot, "plugins", slug);
+  let targetPath = workspaceRoot === void 0 ? resolve19(opts.path ?? ".") : slug === void 0 ? void 0 : join21(workspaceRoot, "plugins", slug);
   if (targetPath !== void 0) assertEmptyTarget(targetPath);
   if (interactive) {
     intro2("Create an s2script plugin");
@@ -7525,10 +7980,20 @@ async function createPlugin(opts = {}) {
         slug = assertBareSlug(
           await text2({ message: "Plugin name (directory under plugins/)", placeholder: "myplugin" })
         );
-        targetPath = join17(workspaceRoot, "plugins", slug);
+        targetPath = join21(workspaceRoot, "plugins", slug);
         assertEmptyTarget(targetPath);
       }
     }
+    if (opts.kind === void 0 && workspaceRoot === void 0) {
+      kind = await select2({
+        message: "What are you creating?",
+        options: [
+          { value: "plugin", label: "Plugin \u2014 loads on a server" },
+          { value: "library", label: "Library \u2014 build-time code other plugins bundle" }
+        ],
+        initialValue: "plugin"
+      });
+    }
     if (!game) {
       game = await select2({
         message: "Which game?",
@@ -7542,9 +8007,9 @@ async function createPlugin(opts = {}) {
     if (!name) {
       const known = targetPath;
       name = await text2({
-        message: "Plugin package name",
-        defaultValue: defaultNameFromPath(known),
-        placeholder: defaultNameFromPath(known)
+        message: kind === "library" ? "Library package name" : "Plugin package name",
+        defaultValue: defaultNameFromPath(known, kind),
+        placeholder: defaultNameFromPath(known, kind)
       });
     }
     if (workspaceRoot === void 0 && !install) {
@@ -7561,7 +8026,7 @@ async function createPlugin(opts = {}) {
       });
     }
     const proceed = await confirm2({
-      message: workspaceRoot !== void 0 ? `Add ${name} to the workspace at ${workspaceRoot}?` : `Create ${name} (${game}) in ${targetPath}?`,
+      message: workspaceRoot !== void 0 ? `Add ${name} to the workspace at ${workspaceRoot}?` : kind === "library" ? `Create library ${name} in ${targetPath}?` : `Create ${name} (${game}) in ${targetPath}?`,
       initialValue: true
     });
     if (!proceed) {
@@ -7574,28 +8039,41 @@ async function createPlugin(opts = {}) {
     );
   }
   game = game ?? "cs2";
-  name = name ?? defaultNameFromPath(targetPath);
+  name = name ?? defaultNameFromPath(targetPath, kind);
   install = workspaceRoot !== void 0 ? "none" : install ?? (opts.noInstall ? "none" : "npm");
   const finalTargetPath = targetPath;
   const localPackagesDir = workspaceRoot === void 0 ? findLocalPackagesDir() : void 0;
-  mkdirSync5(join17(finalTargetPath, "src"), { recursive: true });
+  mkdirSync7(join21(finalTargetPath, "src"), { recursive: true });
   if (workspaceRoot !== void 0) {
-    writeFileSync9(join17(finalTargetPath, "package.json"), minimalPackageJsonContent(name));
-    writeFileSync9(
-      join17(finalTargetPath, "tsconfig.json"),
+    writeFileSync11(join21(finalTargetPath, "package.json"), minimalPackageJsonContent(name));
+    writeFileSync11(
+      join21(finalTargetPath, "tsconfig.json"),
       workspaceTsconfigJson(finalTargetPath, workspaceRoot)
     );
+  } else if (kind === "library") {
+    const version = readCliVersion();
+    writeFileSync11(
+      join21(finalTargetPath, "package.json"),
+      libraryPackageJsonContent(name, game, version, localPackagesDir)
+    );
+    writeFileSync11(join21(finalTargetPath, "tsconfig.json"), tsconfigJson());
+    writeFileSync11(join21(finalTargetPath, "eslint.config.mjs"), eslintConfig());
   } else {
     const version = readCliVersion();
-    writeFileSync9(
-      join17(finalTargetPath, "package.json"),
+    writeFileSync11(
+      join21(finalTargetPath, "package.json"),
       packageJsonContent(name, game, version, localPackagesDir)
     );
-    writeFileSync9(join17(finalTargetPath, "tsconfig.json"), tsconfigJson());
-    writeFileSync9(join17(finalTargetPath, "eslint.config.mjs"), eslintConfig());
+    writeFileSync11(join21(finalTargetPath, "tsconfig.json"), tsconfigJson());
+    writeFileSync11(join21(finalTargetPath, "eslint.config.mjs"), eslintConfig());
+  }
+  if (kind === "library") {
+    writeFileSync11(join21(finalTargetPath, "src", "index.ts"), LIBRARY_ENTRY);
+    writeFileSync11(join21(finalTargetPath, "src", "index.d.ts"), LIBRARY_TYPES);
+  } else {
+    writeFileSync11(join21(finalTargetPath, "src", "plugin.ts"), pluginSource(game));
   }
-  writeFileSync9(join17(finalTargetPath, "src", "plugin.ts"), pluginSource(game));
-  writeFileSync9(join17(finalTargetPath, ".gitignore"), gitignore());
+  writeFileSync11(join21(finalTargetPath, ".gitignore"), gitignore());
   let installed = false;
   if (workspaceRoot === void 0) {
     if (install !== "none") {
@@ -7613,6 +8091,7 @@ async function createPlugin(opts = {}) {
     dir: finalTargetPath,
     name,
     game,
+    kind,
     installed,
     skippedInstall: install === "none",
     packageManager: install,
@@ -7621,8 +8100,8 @@ async function createPlugin(opts = {}) {
 }
 
 // src/create/workspace.ts
-import { mkdirSync as mkdirSync6, writeFileSync as writeFileSync10 } from "node:fs";
-import { join as join18, resolve as resolve17 } from "node:path";
+import { mkdirSync as mkdirSync8, writeFileSync as writeFileSync12 } from "node:fs";
+import { join as join22, resolve as resolve20 } from "node:path";
 var ROOT_DEFAULT_GAME = "cs2";
 var CHANGESETS_CLI_RANGE = "^2.29.5";
 function defaultWorkspaceName(dir) {
@@ -7675,7 +8154,7 @@ function changesetConfigJson() {
   ) + "\n";
 }
 async function createWorkspace(opts = {}) {
-  const targetPath = resolve17(opts.path ?? ".");
+  const targetPath = resolve20(opts.path ?? ".");
   const interactive = isInteractive({ yes: opts.yes });
   let name = opts.name;
   assertEmptyTarget(targetPath);
@@ -7706,14 +8185,14 @@ async function createWorkspace(opts = {}) {
   name = name ?? defaultWorkspaceName(targetPath);
   const version = readCliVersion();
   const localPackagesDir = findLocalPackagesDir();
-  mkdirSync6(join18(targetPath, "plugins"), { recursive: true });
-  mkdirSync6(join18(targetPath, "packages"), { recursive: true });
-  mkdirSync6(join18(targetPath, ".changeset"), { recursive: true });
-  writeFileSync10(join18(targetPath, "package.json"), rootPackageJsonContent(name, version, localPackagesDir));
-  writeFileSync10(join18(targetPath, "tsconfig.base.json"), tsconfigBaseJson());
-  writeFileSync10(join18(targetPath, "eslint.config.mjs"), eslintConfig());
-  writeFileSync10(join18(targetPath, ".changeset", "config.json"), changesetConfigJson());
-  writeFileSync10(join18(targetPath, ".gitignore"), gitignore());
+  mkdirSync8(join22(targetPath, "plugins"), { recursive: true });
+  mkdirSync8(join22(targetPath, "packages"), { recursive: true });
+  mkdirSync8(join22(targetPath, ".changeset"), { recursive: true });
+  writeFileSync12(join22(targetPath, "package.json"), rootPackageJsonContent(name, version, localPackagesDir));
+  writeFileSync12(join22(targetPath, "tsconfig.base.json"), tsconfigBaseJson());
+  writeFileSync12(join22(targetPath, "eslint.config.mjs"), eslintConfig());
+  writeFileSync12(join22(targetPath, ".changeset", "config.json"), changesetConfigJson());
+  writeFileSync12(join22(targetPath, ".gitignore"), gitignore());
   return { dir: targetPath, name };
 }
 
@@ -7741,7 +8220,7 @@ async function run6(argv2) {
       return;
     }
     const pathArg = positionals(argv2, VALUE_FLAGS2)[0];
-    const workspaceRoot = findWorkspaceRoot(pathArg === void 0 ? process.cwd() : resolve18(pathArg));
+    const workspaceRoot = findWorkspaceRoot(pathArg === void 0 ? process.cwd() : resolve21(pathArg));
     const result = await createPlugin({
       path: pathArg,
       name: parseFlag(argv2, "--name"),
@@ -7749,16 +8228,18 @@ async function run6(argv2) {
       template: parseFlag(argv2, "--template"),
       install: parseFlag(argv2, "--install"),
       noInstall: hasFlag(argv2, "--no-install"),
+      kind: hasFlag(argv2, "--library") ? "library" : void 0,
       workspaceRoot: workspaceRoot ?? void 0,
       yes
     });
     const next = result.workspaceRoot ? `next: npm install at the workspace root (${result.workspaceRoot}), then cd ${result.dir} && npm run build` : result.installed ? `dependencies installed (${result.packageManager})` : result.skippedInstall ? `next: cd ${result.dir} && npm run build` : `next: cd ${result.dir} && npm install && npm run build`;
+    const libraryHint = result.kind === "library" ? " (publish with `s2s deploy`; consumers get it with `s2s add`)" : "";
     if (interactive) {
       log2.success(`created ${result.dir}`);
-      outro2(next);
+      outro2(next + libraryHint);
     } else {
       console.log(`created ${result.dir}`);
-      console.log(next);
+      console.log(next + libraryHint);
     }
   } catch (e) {
     console.error(String(e instanceof Error ? e.message : e));
@@ -7947,8 +8428,8 @@ async function run7(argv2) {
 }
 
 // src/config/gen.ts
-import { readFileSync as readFileSync16, writeFileSync as writeFileSync11, mkdirSync as mkdirSync7 } from "node:fs";
-import { join as join19 } from "node:path";
+import { readFileSync as readFileSync18, writeFileSync as writeFileSync13, mkdirSync as mkdirSync9 } from "node:fs";
+import { join as join23 } from "node:path";
 
 // src/config/config-path.ts
 function configFileName(id) {
@@ -7994,13 +8475,13 @@ function genConfigFromManifest(manifest, outDir) {
   }
   const id = typeof manifest.id === "string" ? manifest.id : "";
   if (!id) throw new Error("config gen: manifest declares config but has no id");
-  mkdirSync7(outDir, { recursive: true });
-  const path = join19(outDir, configFileName(id));
-  writeFileSync11(path, generateDefaultJsonc(config));
+  mkdirSync9(outDir, { recursive: true });
+  const path = join23(outDir, configFileName(id));
+  writeFileSync13(path, generateDefaultJsonc(config));
   return path;
 }
 function genConfigForS2sp(s2spPath, outDir) {
-  const entry = unzipSync(readFileSync16(s2spPath))["manifest.json"];
+  const entry = unzipSync(readFileSync18(s2spPath))["manifest.json"];
   if (!entry) throw new Error(`config gen: ${s2spPath} has no manifest.json`);
   const manifest = JSON.parse(Buffer.from(entry).toString("utf8"));
   return genConfigFromManifest(manifest, outDir);
@@ -8047,12 +8528,12 @@ async function run8(argv2) {
 }
 
 // src/commands/codegen.ts
-import { dirname as dirname5, join as join23 } from "node:path";
+import { dirname as dirname6, join as join27 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 
 // src/schemagen/gen.ts
-import { readFileSync as readFileSync17, writeFileSync as writeFileSync12 } from "node:fs";
-import { join as join20 } from "node:path";
+import { readFileSync as readFileSync19, writeFileSync as writeFileSync14 } from "node:fs";
+import { join as join24 } from "node:path";
 
 // src/schemagen/model.ts
 function enumMemberNames(enumName, members) {
@@ -8066,8 +8547,8 @@ function enumMemberNames(enumName, members) {
   for (const m of members) {
     const up = m.toUpperCase();
     let rest = null;
-    for (const sep3 of ["_", ""]) {
-      const pfx = stem + sep3;
+    for (const sep4 of ["_", ""]) {
+      const pfx = stem + sep4;
       if (up.startsWith(pfx) && m.length > pfx.length) {
         rest = m.slice(pfx.length);
         break;
@@ -8431,23 +8912,23 @@ function resolveExpr(f) {
   const base = `off(${S(f.declaringClass)},${S(f.rawName)})`;
   return f.addOffset ? `${base} + ${f.addOffset}` : base;
 }
-function accessorEntry(f, resolve19, guard2) {
+function accessorEntry(f, resolve22, guard2) {
   const g = guard2 === "" ? "" : `${guard2} `;
   const gs = guard2 === "" ? "" : `${guard2.replace("return null;", "return;")} `;
   let entry;
   if (f.accessorKind === "str") {
-    entry = `get: function () { ${g}return this.ref.readString(${resolve19}, ${f.strLen}); }`;
+    entry = `get: function () { ${g}return this.ref.readString(${resolve22}, ${f.strLen}); }`;
   } else if (f.accessorKind === "u64" || f.accessorKind === "i64") {
-    entry = `get: function () { ${g}var v = this.ref.${READ[f.accessorKind]}(${resolve19}); return v === null ? null : v.toString(); }`;
+    entry = `get: function () { ${g}var v = this.ref.${READ[f.accessorKind]}(${resolve22}); return v === null ? null : v.toString(); }`;
   } else if (VEC_INFO[f.accessorKind]) {
     const vi = VEC_INFO[f.accessorKind];
-    entry = `get: function () { ${g}var a = this.ref.readFloats(${resolve19}, ${vi.count}); return a === null ? null : new ${vi.cls}(a[0], a[1], a[2]); }`;
+    entry = `get: function () { ${g}var a = this.ref.readFloats(${resolve22}, ${vi.count}); return a === null ? null : new ${vi.cls}(a[0], a[1], a[2]); }`;
   } else {
-    entry = `get: function () { ${g}return this.ref.${READ[f.accessorKind]}(${resolve19}); }`;
+    entry = `get: function () { ${g}return this.ref.${READ[f.accessorKind]}(${resolve22}); }`;
   }
   if (f.writable) {
     const wm = WRITE[f.accessorKind];
-    entry += `, set: function (v) { ${gs}var o = ${resolve19}; if (this.ref.${wm}(o, v)) this.ref.notifyStateChanged(o); }`;
+    entry += `, set: function (v) { ${gs}var o = ${resolve22}; if (this.ref.${wm}(o, v)) this.ref.notifyStateChanged(o); }`;
   }
   return entry;
 }
@@ -8476,9 +8957,9 @@ function emitJs(model) {
     out.push(`  E[${S(e.className)}] = {`);
     for (const f of e.fields) {
       const sub = `off(${S(f.declaringClass)},${S(f.rawName)})`;
-      const resolve19 = f.addOffset ? `this.base + ${sub} + ${f.addOffset}` : `this.base + ${sub}`;
+      const resolve22 = f.addOffset ? `this.base + ${sub} + ${f.addOffset}` : `this.base + ${sub}`;
       const guard2 = `if (this.base < 0 || ${sub} < 0) return null;`;
-      out.push(`    ${S(f.propName)}: { ${accessorEntry(f, resolve19, guard2)} },`);
+      out.push(`    ${S(f.propName)}: { ${accessorEntry(f, resolve22, guard2)} },`);
     }
     for (const f of e.embeddedFields) {
       const sub = `off(${S(f.declaringClass)},${S(f.rawName)})`;
@@ -8535,16 +9016,16 @@ var EMBED_PATH = "games/cs2/codegen-embedded.json";
 var JS_OUT = "games/cs2/js/schema.generated.js";
 var DTS_OUT = "packages/cs2/schema.generated.d.ts";
 function runGenSchema(repoRoot2, opts) {
-  const catalog = JSON.parse(readFileSync17(join20(repoRoot2, CATALOG_PATH), "utf8"));
-  const list = JSON.parse(readFileSync17(join20(repoRoot2, LIST_PATH), "utf8"));
+  const catalog = JSON.parse(readFileSync19(join24(repoRoot2, CATALOG_PATH), "utf8"));
+  const list = JSON.parse(readFileSync19(join24(repoRoot2, LIST_PATH), "utf8"));
   let embed = [];
   try {
-    embed = JSON.parse(readFileSync17(join20(repoRoot2, EMBED_PATH), "utf8"));
+    embed = JSON.parse(readFileSync19(join24(repoRoot2, EMBED_PATH), "utf8"));
   } catch {
   }
   let enumCatalog = {};
   try {
-    enumCatalog = JSON.parse(readFileSync17(join20(repoRoot2, ENUMS_PATH), "utf8"));
+    enumCatalog = JSON.parse(readFileSync19(join24(repoRoot2, ENUMS_PATH), "utf8"));
   } catch {
   }
   const model = buildModel(catalog, list, embed, enumCatalog);
@@ -8555,16 +9036,16 @@ function runGenSchema(repoRoot2, opts) {
   const drift = [];
   const files = [[JS_OUT, js], [DTS_OUT, dts]];
   for (const [rel, content] of files) {
-    const abs = join20(repoRoot2, rel);
+    const abs = join24(repoRoot2, rel);
     if (opts.check) {
       let cur = "";
       try {
-        cur = readFileSync17(abs, "utf8");
+        cur = readFileSync19(abs, "utf8");
       } catch {
       }
       if (cur !== content) drift.push(rel);
     } else {
-      writeFileSync12(abs, content);
+      writeFileSync14(abs, content);
     }
   }
   if (model.collisions.length) console.error(`gen-schema: ${model.collisions.length} name collision(s) \u2192 raw fallback:
@@ -8574,8 +9055,8 @@ function runGenSchema(repoRoot2, opts) {
 }
 
 // src/eventgen/gen.ts
-import { readFileSync as readFileSync18, writeFileSync as writeFileSync13 } from "node:fs";
-import { join as join21 } from "node:path";
+import { readFileSync as readFileSync20, writeFileSync as writeFileSync15 } from "node:fs";
+import { join as join25 } from "node:path";
 
 // src/eventgen/model.ts
 var TYPE_TO_GETTER = {
@@ -8660,27 +9141,27 @@ function emitEventDts(model) {
 var CATALOG_PATH2 = "games/cs2/gamedata/event-catalog.json";
 var DTS_OUT2 = "packages/cs2/events.generated.d.ts";
 function runGenEvents(repoRoot2, opts) {
-  const catalog = JSON.parse(readFileSync18(join21(repoRoot2, CATALOG_PATH2), "utf8"));
+  const catalog = JSON.parse(readFileSync20(join25(repoRoot2, CATALOG_PATH2), "utf8"));
   const model = buildEventModel(catalog);
   const dts = emitEventDts(model);
   const drift = [];
-  const abs = join21(repoRoot2, DTS_OUT2);
+  const abs = join25(repoRoot2, DTS_OUT2);
   if (opts.check) {
     let cur = "";
     try {
-      cur = readFileSync18(abs, "utf8");
+      cur = readFileSync20(abs, "utf8");
     } catch {
     }
     if (cur !== dts) drift.push(DTS_OUT2);
   } else {
-    writeFileSync13(abs, dts);
+    writeFileSync15(abs, dts);
   }
   return { events: model.length, drift };
 }
 
 // src/navgen/gen.ts
-import { readFileSync as readFileSync19, writeFileSync as writeFileSync14 } from "node:fs";
-import { join as join22 } from "node:path";
+import { readFileSync as readFileSync21, writeFileSync as writeFileSync16 } from "node:fs";
+import { join as join26 } from "node:path";
 
 // src/navgen/model.ts
 var SUPPORTED_NAV_KINDS = /* @__PURE__ */ new Set([
@@ -8782,25 +9263,25 @@ function emitNavJs(model) {
     for (const f of w.fields) {
       const own = `off(${S2(f.declaringClass)},${S2(f.rawName)})`;
       const withDelta = f.addOffset ? `${own} + ${f.addOffset}` : own;
-      const resolve19 = `${withDelta} + this.base`;
+      const resolve22 = `${withDelta} + this.base`;
       let getter;
       const kind = f.accessorKind;
       if (kind === "u64") {
-        getter = `get: function () { var v = this.root.readUInt64Via(this.path, ${resolve19}); return v === null ? null : v.toString(); }`;
+        getter = `get: function () { var v = this.root.readUInt64Via(this.path, ${resolve22}); return v === null ? null : v.toString(); }`;
       } else if (kind === "i64") {
-        getter = `get: function () { var v = this.root.readInt64Via(this.path, ${resolve19}); return v === null ? null : v.toString(); }`;
+        getter = `get: function () { var v = this.root.readInt64Via(this.path, ${resolve22}); return v === null ? null : v.toString(); }`;
       } else if (VEC_INFO[kind]) {
         const vi = VEC_INFO[kind];
-        getter = `get: function () { var a = this.root.readFloatsChain(this.path, ${resolve19}, ${vi.count}); return a === null ? null : new ${vi.cls}(a[0], a[1], a[2]); }`;
+        getter = `get: function () { var a = this.root.readFloatsChain(this.path, ${resolve22}, ${vi.count}); return a === null ? null : new ${vi.cls}(a[0], a[1], a[2]); }`;
       } else if (kind === "handle") {
-        getter = `get: function () { return this.root.readHandleVia(this.path, ${resolve19}); }`;
+        getter = `get: function () { return this.root.readHandleVia(this.path, ${resolve22}); }`;
       } else {
         const method = READ_VIA[kind];
         if (!method) continue;
-        getter = `get: function () { return this.root.${method}(this.path, ${resolve19}); }`;
+        getter = `get: function () { return this.root.${method}(this.path, ${resolve22}); }`;
       }
       const wmethod = f.navWritable ? WRITE_VIA[kind] : void 0;
-      const setter = wmethod ? `, set: function (v) { this.root.${wmethod}(this.path, ${resolve19}, v); }` : "";
+      const setter = wmethod ? `, set: function (v) { this.root.${wmethod}(this.path, ${resolve22}, v); }` : "";
       out.push(`    ${S2(f.propName)}: { ${getter}${setter} },`);
     }
     out.push("  });");
@@ -8901,8 +9382,8 @@ var CATALOG_PATH3 = "games/cs2/gamedata/schema-catalog.json";
 var JS_OUT2 = "games/cs2/js/nav.generated.js";
 var DTS_OUT3 = "packages/cs2/nav.generated.d.ts";
 function runGenNav(repoRoot2, opts) {
-  const config = JSON.parse(readFileSync19(join22(repoRoot2, TARGETS_PATH), "utf8"));
-  const catalog = JSON.parse(readFileSync19(join22(repoRoot2, CATALOG_PATH3), "utf8"));
+  const config = JSON.parse(readFileSync21(join26(repoRoot2, TARGETS_PATH), "utf8"));
+  const catalog = JSON.parse(readFileSync21(join26(repoRoot2, CATALOG_PATH3), "utf8"));
   const model = buildNavModel(config, catalog);
   const js = emitNavJs(model);
   const dts = emitNavDts(model);
@@ -8910,16 +9391,16 @@ function runGenNav(repoRoot2, opts) {
   const drift = [];
   const files = [[JS_OUT2, js], [DTS_OUT3, dts]];
   for (const [rel, content] of files) {
-    const abs = join22(repoRoot2, rel);
+    const abs = join26(repoRoot2, rel);
     if (opts.check) {
       let cur = "";
       try {
-        cur = readFileSync19(abs, "utf8");
+        cur = readFileSync21(abs, "utf8");
       } catch {
       }
       if (cur !== content) drift.push(rel);
     } else {
-      writeFileSync14(abs, content);
+      writeFileSync16(abs, content);
     }
   }
   return { wrappers: model.wrappers.length, fields, drift };
@@ -8927,7 +9408,7 @@ function runGenNav(repoRoot2, opts) {
 
 // src/commands/codegen.ts
 function repoRoot() {
-  return join23(dirname5(fileURLToPath3(import.meta.url)), "..", "..", "..");
+  return join27(dirname6(fileURLToPath3(import.meta.url)), "..", "..", "..");
 }
 async function run9(kind, argv2) {
   const root = repoRoot();
@@ -9006,7 +9487,7 @@ var argv = process.argv.slice(2);
 var command = argv[0];
 function usage() {
   console.error(
-    "Usage:\n  s2s create [path] [--game cs2|none] [--name <pkg>] [--template minimal]\n             [--install npm|pnpm|yarn|bun|none] [--no-install] [-y]\n  s2s create --workspace <dir>\n  s2s build [dir|workspace root] [--filter <pattern>]... [--stamp-version <v>]\n            [--packages-dir <path>]\n  s2s login [--token s2s_\u2026] [--registry <url>]\n  s2s deploy [dir|workspace root] [--filter <pattern>]... [--dry-run] [--yes|--ci]\n             [--registry <url>] [--packages-dir <path>]\n  s2s version [dir] [--since <ref>]\n  s2s add <pkg>[@range] [--dir <plugin>] [--registry <url>]\n  s2s install [name[@range]...] [--file <path>] [--dir <plugins dir>] [--registry <url>]\n  s2s config gen <plugin.s2sp...> --out <dir>\n  s2s gen-schema [--check]\n  s2s gen-events [--check]\n  s2s gen-nav [--check]\n\nEnv: S2SCRIPT_REGISTRY_URL  S2SCRIPT_TOKEN (CI deploy)"
+    "Usage:\n  s2s create [path] [--game cs2|none] [--name <pkg>] [--template minimal] [--library]\n             [--install npm|pnpm|yarn|bun|none] [--no-install] [-y]\n  s2s create --workspace <dir>\n  s2s build [dir|workspace root] [--filter <pattern>]... [--stamp-version <v>]\n            [--packages-dir <path>]\n  s2s login [--token s2s_\u2026] [--registry <url>]\n  s2s deploy [dir|workspace root] [--filter <pattern>]... [--dry-run] [--yes|--ci]\n             [--registry <url>] [--packages-dir <path>]\n  s2s version [dir] [--since <ref>]\n  s2s add <pkg>[@range] [--dir <plugin>] [--registry <url>]\n  s2s install [name[@range]...] [--file <path>] [--dir <plugins dir>] [--registry <url>]\n  s2s config gen <plugin.s2sp...> --out <dir>\n  s2s gen-schema [--check]\n  s2s gen-events [--check]\n  s2s gen-nav [--check]\n\nEnv: S2SCRIPT_REGISTRY_URL  S2SCRIPT_TOKEN (CI deploy)"
   );
 }
 if (!command) {