@synap-core/cli 1.8.0 → 1.10.0

package/dist/lib/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/lib/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,MAAM,MAAM,GACV,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,wBAAwB,CAAC;AACvD,MAAM,WAAW,GACf,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,oBAAoB,CAAC;AAExD,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AAC1D,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,kBAAkB,CAAC,CAAC;AAaxE,8EAA8E;AAE9E,SAAS,oBAAoB;IAC3B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACpC,EAAE,CAAC,SAAS,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAwB;IAChD,oBAAoB,EAAE,CAAC;IACvB,EAAE,CAAC,aAAa,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;QACjE,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,IAAI,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC;YAAE,OAAO,IAAI,CAAC;QAClD,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,qBAAqB,CAAC,KAAwB;IAC5D,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,MAAM;IACpB,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACpC,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;AACH,CAAC;AAED,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,UAAU;IAK9B,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;IAC/B,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAEpC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,UAAU,EAAE;YAC3C,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,CAAC,KAAK,EAAE,EAAE;YACnD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,6CAA6C;YAC7C,MAAM,EAAE,CAAC;YACT,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAC1B,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAE7B,CAAC;QAEF,yEAAyE;QACzE,yEAAyE;QACzE,gBAAgB,CAAC;YACf,GAAG,KAAK;YACR,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;YACtB,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE;YACpB,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;SACxE,CAAC,CAAC;QAEH,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;QACnE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAa;IAChD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,UAAU,EAAE;QAC3C,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;QAC7C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;KAClC,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAEzB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4C,CAAC;IAC3E,MAAM,KAAK,GAAsB;QAC/B,KAAK;QACL,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;QACtB,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE;QACpB,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;KACxE,CAAC;IACF,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACxB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAE9E,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC;QACH,QAAQ,OAAO,CAAC,QAAQ,EAAE,CAAC;YACzB,KAAK,QAAQ;gBACX,QAAQ,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC;gBAC1B,MAAM;YACR,KAAK,OAAO;gBACV,QAAQ,CAAC,aAAa,GAAG,GAAG,CAAC,CAAC;gBAC9B,MAAM;YACR,KAAK,OAAO;gBACV,QAAQ,CAAC,aAAa,GAAG,GAAG,CAAC,CAAC;gBAC9B,MAAM;YACR;gBACE,+CAA+C;gBAC/C,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,KAAK;IACzB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC5C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;YAExD,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;gBACjC,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC5C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC5C,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAC9C,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBACpD,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;gBAC3D,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC;gBAE7D,IAAI,KAAK,IAAI,KAAK,IAAI,MAAM,EAAE,CAAC;oBAC7B,MAAM,KAAK,GAAsB;wBAC/B,KAAK;wBACL,KAAK;wBACL,MAAM;wBACN,SAAS,EACP,SAAS;4BACT,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;wBAC9D,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACtC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC1C,CAAC;oBACF,gBAAgB,CAAC,KAAK,CAAC,CAAC;oBAExB,oBAAoB;oBACpB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;oBACpD,GAAG,CAAC,GAAG,CAAC;;;;;;;;;QASV,CAAC,CAAC;oBAEA,OAAO,EAAE,CAAC;oBACV,OAAO,CAAC,KAAK,CAAC,CAAC;gBACjB,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;oBACpD,GAAG,CAAC,GAAG,CAAC;;;;;;;;;QASV,CAAC,CAAC;gBACF,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;YACZ,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,wBAAwB;QACxB,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtC,OAAO,EAAE,CAAC;gBACV,OAAO,CAAC,IAAI,CAAC,CAAC;gBACd,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACvB,MAAM,WAAW,GAAG,oBAAoB,IAAI,WAAW,CAAC;YACxD,MAAM,QAAQ,GAAG,GAAG,WAAW,iBAAiB,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC;YAElF,IAAI,CAAC;gBACH,WAAW,CAAC,QAAQ,CAAC,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,wCAAwC;gBACxC,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;gBACpD,OAAO,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC;YACjC,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,4BAA4B;QAC5B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,EAAE,OAAO,CAAC,CAAC;QAEZ,SAAS,OAAO;YACd,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAeD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAAS,GAAG,OAAO,CAAC,kBAAkB;;IAEtC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC5C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;YAExD,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;gBACjC,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAC9C,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,SAAS,CAAC;gBAErE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;gBACpD,GAAG,CAAC,GAAG,CAAC;;;;;;;;;QASR,CAAC,CAAC;gBAEF,OAAO,EAAE,CAAC;gBACV,IAAI,MAAM,EAAE,CAAC;oBACX,OAAO,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;gBACnC,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,IAAI,CAAC,CAAC;gBAChB,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;YACZ,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtC,OAAO,EAAE,CAAC;gBACV,OAAO,CAAC,IAAI,CAAC,CAAC;gBACd,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACvB,MAAM,WAAW,GAAG,oBAAoB,IAAI,WAAW,CAAC;YACxD,MAAM,YAAY,GAAG,GAAG,WAAW,uCAAuC,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC;YAE5G,IAAI,CAAC;gBACH,WAAW,CAAC,YAAY,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;gBAC1E,OAAO,CAAC,GAAG,CAAC,KAAK,YAAY,IAAI,CAAC,CAAC;YACrC,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,SAAS,OAAO;YACd,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAE9E,MAAM,UAAU,QAAQ;IACtB,OAAO,MAAM,CAAC;AAChB,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,KAAa;IAC1C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,OAAO,EAAE;QACxC,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;QAC7C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;KACnC,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAoB,CAAC;IACnD,4DAA4D;IAC5D,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAC7B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,cAAc,IAAI,CAAC,CAAC,MAAM,KAAK,sBAAsB,CACnG,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAAe,EACf,KAAa;IAEb,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,EAAE,0BAA0B,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAAE;YAC1F,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,OAAO,EAAE,EAAE;YAC/C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA6F,CAAC;IACxH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/lib/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,MAAM,MAAM,GACV,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,wBAAwB,CAAC;AACvD,MAAM,WAAW,GACf,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,oBAAoB,CAAC;AAExD,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AAC1D,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,kBAAkB,CAAC,CAAC;AAaxE,8EAA8E;AAE9E,SAAS,oBAAoB;IAC3B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACpC,EAAE,CAAC,SAAS,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAwB;IAChD,oBAAoB,EAAE,CAAC;IACvB,EAAE,CAAC,aAAa,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;QACjE,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,IAAI,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC;YAAE,OAAO,IAAI,CAAC;QAClD,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,qBAAqB,CAAC,KAAwB;IAC5D,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,MAAM;IACpB,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACpC,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;AACH,CAAC;AAED,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,UAAU;IAK9B,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;IAC/B,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAEpC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,UAAU,EAAE;YAC3C,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,CAAC,KAAK,EAAE,EAAE;YACnD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,6CAA6C;YAC7C,MAAM,EAAE,CAAC;YACT,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAC1B,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAE7B,CAAC;QAEF,yEAAyE;QACzE,yEAAyE;QACzE,gBAAgB,CAAC;YACf,GAAG,KAAK;YACR,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;YACtB,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE;YACpB,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;SACxE,CAAC,CAAC;QAEH,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;QACnE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAa;IAChD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,UAAU,EAAE;QAC3C,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;QAC7C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;KAClC,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAEzB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4C,CAAC;IAC3E,MAAM,KAAK,GAAsB;QAC/B,KAAK;QACL,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;QACtB,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE;QACpB,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;KACxE,CAAC;IACF,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACxB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAE9E,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC;QACH,QAAQ,OAAO,CAAC,QAAQ,EAAE,CAAC;YACzB,KAAK,QAAQ;gBACX,QAAQ,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC;gBAC1B,MAAM;YACR,KAAK,OAAO;gBACV,QAAQ,CAAC,aAAa,GAAG,GAAG,CAAC,CAAC;gBAC9B,MAAM;YACR,KAAK,OAAO;gBACV,QAAQ,CAAC,aAAa,GAAG,GAAG,CAAC,CAAC;gBAC9B,MAAM;YACR;gBACE,+CAA+C;gBAC/C,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,KAAK;IACzB,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAE/D,2DAA2D;IAC3D,IAAI,OAAoE,CAAC;IACzE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,mBAAmB,EAAE;YACpD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;SACnC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAmB,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IACpD,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAExD,wEAAwE;IACxE,6EAA6E;IAC7E,6EAA6E;IAC7E,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,CAAC;QACH,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YAC1B,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;QAChD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;IAC3E,CAAC;IAED,8EAA8E;IAC9E,+EAA+E;IAC/E,4EAA4E;IAC5E,sEAAsE;IACtE,MAAM,UAAU,GACd,GAAG,WAAW,gBAAgB,kBAAkB,CAAC,SAAS,CAAC,EAAE;QAC7D,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3D,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;IAC7E,OAAO,CAAC,GAAG,CAAC,SAAS,QAAQ,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC;QACH,WAAW,CAAC,UAAU,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,KAAK,UAAU,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,+DAA+D;IAC/D,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,eAAe,CAAoB;YACrD,GAAG,EAAE,GAAG,MAAM,qBAAqB,SAAS,EAAE;YAC9C,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,UAAU,EAAE,EAAE;YAClD,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAE,CAAyB,CAAC,MAAM,KAAK,UAAU;YACnE,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE;gBAChB,MAAM,CAAC,GAAI,CAAyB,CAAC,MAAM,CAAC;gBAC5C,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,SAAS,CAAC;YAC3C,CAAC;YACD,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE;gBAChB,MAAM,CAAC,GAAG,CAOT,CAAC;gBACF,OAAO;oBACL,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,SAAS,EACP,CAAC,CAAC,SAAS;wBACX,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;oBAC9D,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC1C,CAAC;YACJ,CAAC;SACF,CAAC,CAAC;QACH,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,0DAA0D;QAC1D,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAeD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAAS,GAAG,OAAO,CAAC,kBAAkB;;IAEtC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC5C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;YAExD,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;gBACjC,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAC9C,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,SAAS,CAAC;gBAErE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;gBACpD,GAAG,CAAC,GAAG,CAAC;;;;;;;;;QASR,CAAC,CAAC;gBAEF,OAAO,EAAE,CAAC;gBACV,IAAI,MAAM,EAAE,CAAC;oBACX,OAAO,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;gBACnC,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,IAAI,CAAC,CAAC;gBAChB,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;YACZ,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtC,OAAO,EAAE,CAAC;gBACV,OAAO,CAAC,IAAI,CAAC,CAAC;gBACd,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACvB,MAAM,WAAW,GAAG,oBAAoB,IAAI,WAAW,CAAC;YACxD,MAAM,YAAY,GAAG,GAAG,WAAW,uCAAuC,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC;YAE5G,IAAI,CAAC;gBACH,WAAW,CAAC,YAAY,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;gBAC1E,OAAO,CAAC,GAAG,CAAC,KAAK,YAAY,IAAI,CAAC,CAAC;YACrC,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,SAAS,OAAO;YACd,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAE9E,MAAM,UAAU,QAAQ;IACtB,OAAO,MAAM,CAAC;AAChB,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,KAAa;IAC1C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,OAAO,EAAE;QACxC,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;QAC7C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;KACnC,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAoB,CAAC;IACnD,4DAA4D;IAC5D,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAC7B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,cAAc,IAAI,CAAC,CAAC,MAAM,KAAK,sBAAsB,CACnG,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAAe,EACf,KAAa;IAEb,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,EAAE,0BAA0B,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAAE;YAC1F,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,OAAO,EAAE,EAAE;YAC/C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA6F,CAAC;IACxH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/lib/bundle-version.d.ts

@@ -0,0 +1,11 @@
+/**
+ * The installed `@synap-core/workspace-templates` version — the "is my bundle
+ * stale?" winner signal the catalog merge door compares against each CP row's
+ * `sourcePackage.version`.
+ *
+ * Resolved from the installed package.json. The package subpath is blocked by
+ * `exports`, so we walk up from the resolved entry. On failure we return "" —
+ * unparseable ⇒ the door keeps the bundle (safe default). Shared by `launch`
+ * and `market` so there is ONE copy.
+ */
+export declare function bundledTemplatesVersion(): string;

package/dist/lib/bundle-version.js

@@ -0,0 +1,33 @@
+/**
+ * The installed `@synap-core/workspace-templates` version — the "is my bundle
+ * stale?" winner signal the catalog merge door compares against each CP row's
+ * `sourcePackage.version`.
+ *
+ * Resolved from the installed package.json. The package subpath is blocked by
+ * `exports`, so we walk up from the resolved entry. On failure we return "" —
+ * unparseable ⇒ the door keeps the bundle (safe default). Shared by `launch`
+ * and `market` so there is ONE copy.
+ */
+import { createRequire } from "node:module";
+import path from "node:path";
+import fs from "node:fs";
+export function bundledTemplatesVersion() {
+    try {
+        const require = createRequire(import.meta.url);
+        let dir = path.dirname(require.resolve("@synap-core/workspace-templates"));
+        for (let i = 0; i < 6; i++) {
+            const pj = path.join(dir, "package.json");
+            if (fs.existsSync(pj)) {
+                const parsed = JSON.parse(fs.readFileSync(pj, "utf8"));
+                if (parsed.name === "@synap-core/workspace-templates")
+                    return parsed.version ?? "";
+            }
+            dir = path.dirname(dir);
+        }
+    }
+    catch {
+        /* fall through to the safe default */
+    }
+    return "";
+}
+//# sourceMappingURL=bundle-version.js.map

package/dist/lib/bundle-version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-version.js","sourceRoot":"","sources":["../../src/lib/bundle-version.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,MAAM,UAAU,uBAAuB;IACrC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC,CAAC;QAC3E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;YAC1C,IAAI,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;gBACtB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAGpD,CAAC;gBACF,IAAI,MAAM,CAAC,IAAI,KAAK,iCAAiC;oBAAE,OAAO,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;YACrF,CAAC;YACD,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,sCAAsC;IACxC,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/lib/capture-lane.d.ts

@@ -1,19 +1,20 @@
 /**
- * Capture-lane transparency helpers.
+ * Write-outcome transparency helpers — the glass-box for WRITES.
  *
- * The four-lane capture model routes knowledge by KIND (not by active workspace):
+ * Reads route through one verb (`ask`, which says how it routed). Writes route by
+ * KIND into one of three lanes — and every write must report, honestly and in one
+ * line, WHAT happened so the AI is GUIDED by the response, not guessing:
  *
  *   | Lane     | Destination                          | Governance      |
  *   |----------|--------------------------------------|-----------------|
- *   | ai-self  | shared agent / memory workspace      | auto            |
- *   | user     | pod-wide user_observation            | gated / auto    |
- *   | global   | pod-wide procedural                  | gated           |
- *   | work     | the linked product workspace         | gated           |
+ *   | user     | pod-wide user_observation            | gate inference  |
+ *   | global   | pod-wide procedural (knowledge_keys) | reviewed        |
+ *   | work     | the active product workspace         | proposal-gated  |
  *
- * This module does NOT change WHERE a capture routes — it only makes the
- * destination + governance TRANSPARENT in command output, so an agent always
- * knows where its knowledge landed (which workspace, and whether it was
- * auto-stored or proposed for review).
+ * The cardinal signal is **stored vs proposed**: `stored` = live, recallable now;
+ * `proposed` = gated/refrained — queued for human approval, NOT yet live. Every
+ * write command routes its hub response through `reportWrite` so this signal is
+ * consistent across `capture`, `observe`, `create entity`, `create relation`, `doc`.
  */
 import { type HubConfig } from "./hub-client.js";
 export type CaptureLane = "ai-self" | "user" | "global" | "work";
@@ -31,8 +32,8 @@ export interface LaneReport {
 /**
  * Derive the lane from the workspace-routing `source` returned by
  * `resolveKnowledgeWorkspace`. A domain capture always lands in a real product
- * workspace → the Work lane. (The ai-self / agent-memory lane was removed; the
- * Global lane is set directly, not derived from a workspace source.)
+ * workspace → the Work lane. (The backend routing endpoint P7b is the SSoT for
+ * resolving user/global lanes; the CLI's lane detection is a best-effort hint.)
  *
  *   source                              → lane
  *   "explicit" / "team" / "active …"    → work
@@ -47,3 +48,20 @@ export declare function resolveWorkspaceName(workspaceId: string, cfg: HubConfig
 export declare function formatLaneLine(report: LaneReport): string;
 /** The additive JSON fields that declare lane + destination + governance. */
 export declare function laneJsonFields(report: LaneReport): Record<string, unknown>;
+/** Detect the governance outcome from a hub write response (entity / proposal). */
+export declare function writeGovernance(res: Record<string, unknown>): Governance;
+/**
+ * The ONE honest write reporter. Every write command routes its hub response
+ * through this so the AI gets a consistent, guiding signal:
+ *   • stored   → live now, recallable via `ask`
+ *   • proposed → gated/refrained, awaiting human approval, NOT yet live
+ * One human line + lane line; `--json` adds an `outcome` field while preserving
+ * the original response fields (backward-compatible).
+ */
+export declare function reportWrite(res: Record<string, unknown>, o: {
+    label: string;
+    lane: CaptureLane;
+    workspaceId?: string;
+    cfg: HubConfig;
+    json?: boolean;
+}): Promise<void>;

package/dist/lib/capture-lane.js

@@ -1,27 +1,30 @@
 /**
- * Capture-lane transparency helpers.
+ * Write-outcome transparency helpers — the glass-box for WRITES.
  *
- * The four-lane capture model routes knowledge by KIND (not by active workspace):
+ * Reads route through one verb (`ask`, which says how it routed). Writes route by
+ * KIND into one of three lanes — and every write must report, honestly and in one
+ * line, WHAT happened so the AI is GUIDED by the response, not guessing:
  *
  *   | Lane     | Destination                          | Governance      |
  *   |----------|--------------------------------------|-----------------|
- *   | ai-self  | shared agent / memory workspace      | auto            |
- *   | user     | pod-wide user_observation            | gated / auto    |
- *   | global   | pod-wide procedural                  | gated           |
- *   | work     | the linked product workspace         | gated           |
+ *   | user     | pod-wide user_observation            | gate inference  |
+ *   | global   | pod-wide procedural (knowledge_keys) | reviewed        |
+ *   | work     | the active product workspace         | proposal-gated  |
  *
- * This module does NOT change WHERE a capture routes — it only makes the
- * destination + governance TRANSPARENT in command output, so an agent always
- * knows where its knowledge landed (which workspace, and whether it was
- * auto-stored or proposed for review).
+ * The cardinal signal is **stored vs proposed**: `stored` = live, recallable now;
+ * `proposed` = gated/refrained — queued for human approval, NOT yet live. Every
+ * write command routes its hub response through `reportWrite` so this signal is
+ * consistent across `capture`, `observe`, `create entity`, `create relation`, `doc`.
  */
 import chalk from "chalk";
+import { log } from "../utils/logger.js";
 import { hubGet } from "./hub-client.js";
+import { unwrapList } from "./unwrapList.js";
 /**
  * Derive the lane from the workspace-routing `source` returned by
  * `resolveKnowledgeWorkspace`. A domain capture always lands in a real product
- * workspace → the Work lane. (The ai-self / agent-memory lane was removed; the
- * Global lane is set directly, not derived from a workspace source.)
+ * workspace → the Work lane. (The backend routing endpoint P7b is the SSoT for
+ * resolving user/global lanes; the CLI's lane detection is a best-effort hint.)
  *
  *   source                              → lane
  *   "explicit" / "team" / "active …"    → work
@@ -33,8 +36,7 @@ export function laneFromSource(_source) {
 export async function resolveWorkspaceName(workspaceId, cfg) {
     try {
         const res = (await hubGet("/workspaces", {}, cfg));
-        const list = (res.workspaces ??
-            (Array.isArray(res) ? res : []));
+        const list = unwrapList(res, ["workspaces"]);
         const match = list.find((w) => String(w.id ?? "") === workspaceId);
         return match ? String(match.name ?? match.id ?? "") : undefined;
     }
@@ -76,4 +78,59 @@ export function laneJsonFields(report) {
         governance: report.governance,
     };
 }
+/** Detect the governance outcome from a hub write response (entity / proposal). */
+export function writeGovernance(res) {
+    return res.status === "proposed" ||
+        Boolean(res.proposalId) ||
+        Number(res.proposalsCreated ?? 0) > 0
+        ? "proposed"
+        : "auto";
+}
+/**
+ * The ONE honest write reporter. Every write command routes its hub response
+ * through this so the AI gets a consistent, guiding signal:
+ *   • stored   → live now, recallable via `ask`
+ *   • proposed → gated/refrained, awaiting human approval, NOT yet live
+ * One human line + lane line; `--json` adds an `outcome` field while preserving
+ * the original response fields (backward-compatible).
+ */
+export async function reportWrite(res, o) {
+    const governance = writeGovernance(res);
+    const report = {
+        lane: o.lane,
+        workspaceId: o.workspaceId,
+        workspaceName: o.workspaceId
+            ? await resolveWorkspaceName(o.workspaceId, o.cfg)
+            : o.lane === "global" || o.lane === "user"
+                ? "pod-wide"
+                : undefined,
+        governance,
+    };
+    const id = String(res.id ?? res.entityId ?? "");
+    const proposalId = String(res.proposalId ?? "");
+    if (o.json) {
+        console.log(JSON.stringify({
+            ...res,
+            outcome: governance === "proposed" ? "proposed" : "stored",
+            ...laneJsonFields(report),
+        }, null, 2));
+        return;
+    }
+    if (governance === "proposed") {
+        // A proposal is normal (a PR under review), NOT a failure — neutral tone,
+        // never an alarm. The agent keeps composing; it just goes live on approval.
+        log.info(`${o.label} — proposed (under review)`);
+        if (proposalId)
+            log.dim(`  proposal: ${proposalId.slice(0, 8)}`);
+        // Expose the stable proposed entity ID so the AI can reference this entity
+        // in cross-write proposal graphs (e.g. create entity B linked to entity A).
+        const proposedEntityId = String(res.proposedEntityId ?? "");
+        if (proposedEntityId)
+            log.dim(`  entity: ${proposedEntityId.slice(0, 8)}`);
+    }
+    else {
+        log.success(`${o.label}${id ? "  " + chalk.dim(id.slice(0, 8)) : ""}`);
+    }
+    console.log("  " + formatLaneLine(report));
+}
 //# sourceMappingURL=capture-lane.js.map

package/dist/lib/capture-lane.js.map

@@ -1 +1 @@
-{"version":3,"file":"capture-lane.js","sourceRoot":"","sources":["../../src/lib/capture-lane.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,MAAM,EAAkB,MAAM,iBAAiB,CAAC;AAgBzD;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,WAAmB,EACnB,GAAc;IAEd,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,EAAE,EAAE,EAAE,GAAG,CAAC,CAA4B,CAAC;QAC9E,MAAM,IAAI,GAAG,CAAE,GAAG,CAAC,UAAwB;YACzC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,GAAiB,CAAC,CAAC,CAAC,EAAE,CAAC,CAA8B,CAAC;QAC/E,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,WAAW,CAAC,CAAC;QACnE,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,uDAAuD;AACvD,SAAS,SAAS,CAAC,IAAiB;IAClC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,SAAS;YACZ,OAAO,cAAc,CAAC;QACxB,KAAK,MAAM;YACT,OAAO,mBAAmB,CAAC;QAC7B,KAAK,QAAQ;YACX,OAAO,iBAAiB,CAAC;QAC3B,KAAK,MAAM;YACT,OAAO,WAAW,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAAkB;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,WAAW,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzD,IAAI,MAAM,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC,GAAG,CAAC,iBAAiB,KAAK,uBAAuB,CAAC,GAAG,OAAO,CAAC;IAC5E,CAAC;IACD,OAAO,KAAK,CAAC,GAAG,CAAC,eAAe,KAAK,mBAAmB,CAAC,GAAG,OAAO,CAAC;AACtE,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,cAAc,CAAC,MAAkB;IAC/C,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC;AACJ,CAAC"}
+{"version":3,"file":"capture-lane.js","sourceRoot":"","sources":["../../src/lib/capture-lane.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AACzC,OAAO,EAAE,MAAM,EAAkB,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAmB7C;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,WAAmB,EACnB,GAAc;IAEd,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,EAAE,EAAE,EAAE,GAAG,CAAC,CAA4B,CAAC;QAC9E,MAAM,IAAI,GAAG,UAAU,CAA0B,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;QACtE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,WAAW,CAAC,CAAC;QACnE,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,uDAAuD;AACvD,SAAS,SAAS,CAAC,IAAiB;IAClC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,SAAS;YACZ,OAAO,cAAc,CAAC;QACxB,KAAK,MAAM;YACT,OAAO,mBAAmB,CAAC;QAC7B,KAAK,QAAQ;YACX,OAAO,iBAAiB,CAAC;QAC3B,KAAK,MAAM;YACT,OAAO,WAAW,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAAkB;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,WAAW,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzD,IAAI,MAAM,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC,GAAG,CAAC,iBAAiB,KAAK,uBAAuB,CAAC,GAAG,OAAO,CAAC;IAC5E,CAAC;IACD,OAAO,KAAK,CAAC,GAAG,CAAC,eAAe,KAAK,mBAAmB,CAAC,GAAG,OAAO,CAAC;AACtE,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,cAAc,CAAC,MAAkB;IAC/C,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,eAAe,CAAC,GAA4B;IAC1D,OAAO,GAAG,CAAC,MAAM,KAAK,UAAU;QAC9B,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;QACvB,MAAM,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,CAAC,GAAG,CAAC;QACrC,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,MAAM,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAA4B,EAC5B,CAMC;IAED,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,MAAM,GAAe;QACzB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,aAAa,EAAE,CAAC,CAAC,WAAW;YAC1B,CAAC,CAAC,MAAM,oBAAoB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC;YAClD,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;gBACxC,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,SAAS;QACf,UAAU;KACX,CAAC;IACF,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;IAEhD,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;YACE,GAAG,GAAG;YACN,OAAO,EAAE,UAAU,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ;YAC1D,GAAG,cAAc,CAAC,MAAM,CAAC;SAC1B,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;QACF,OAAO;IACT,CAAC;IAED,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;QAC9B,0EAA0E;QAC1E,4EAA4E;QAC5E,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,4BAA4B,CAAC,CAAC;QACjD,IAAI,UAAU;YAAE,GAAG,CAAC,GAAG,CAAC,eAAe,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QACjE,2EAA2E;QAC3E,4EAA4E;QAC5E,MAAM,gBAAgB,GAAG,MAAM,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;QAC5D,IAAI,gBAAgB;YAAE,GAAG,CAAC,GAAG,CAAC,aAAa,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;AAC7C,CAAC"}

package/dist/lib/cp-packages.d.ts

@@ -0,0 +1,121 @@
+/**
+ * Control-plane package registry client (read-only).
+ * ==================================================
+ *
+ * The ONE authed HTTP client for the CP package registry (`/api/packages`).
+ * Before this file there was NO `/api/packages` client in the CLI — `launch`
+ * read the whole catalog from the bundled `@synap-core/workspace-templates`
+ * package. The ratified architecture is: PUBLIC templates ship in the bundle,
+ * PRIVATE templates live in the CP behind the user's login. This client is the
+ * private half.
+ *
+ * Two list endpoints, one detail endpoint:
+ *   • GET /api/packages            — public browse rows (no auth, `definition` stripped)
+ *   • GET /api/packages/mine       — the caller's own packages (Bearer, incl. private)
+ *   • GET /api/packages/:slug      — full row WITH `definition` (Bearer → private visible to author)
+ *
+ * The row→`RemoteEntry` mapping is NOT here — it is the canonical
+ * `rowToRemoteEntry` in `@synap-core/workspace-templates` (browser + CLI share
+ * the ONE copy; the two hand-copies had already drifted). This file owns only
+ * TRANSPORT: the Bearer token, the base URL (`auth.ts`'s `getCpUrl()`), and the
+ * query params the CP `/api/packages` route supports (`search`/`category`/`tag`/
+ * `verified`).
+ */
+import { type CpPackageRow, type RemoteEntry, type RemoteSourceStatus } from "@synap-core/workspace-templates";
+/**
+ * The server-side filters `GET /api/packages` accepts (CP `routes/packages.ts`).
+ * `category` is a PACKAGE_TYPES value (`workspace`/`capability`/`skill`/…). The
+ * `/mine` route supports none of these — it is the caller's own small set — so
+ * they are applied CLIENT-side there.
+ */
+export interface PackageFilters {
+    search?: string;
+    category?: string;
+    tag?: string;
+    verified?: boolean;
+}
+/** Tier / pricing signal the browse route carries but `RemoteEntry` drops. */
+export interface TierInfo {
+    requiredTier?: string | null;
+    pricingModel?: string | null;
+}
+/**
+ * A public browse row — the canonical `CpPackageRow` PLUS the tier/pricing and
+ * count fields the browse route (`GET /api/packages`) returns but the shared
+ * `RemoteEntry` shape does not carry. Kept local because they are a
+ * discovery-surface concern, not part of the merge door's contract.
+ */
+export interface CpBrowseRow extends CpPackageRow {
+    version?: string;
+    requiredTier?: string | null;
+    pricingModel?: string | null;
+    isVerified?: boolean;
+    installCount?: number;
+}
+/** `/mine` returns `isPublic` (and, like the browse route, `version`) on top of the canonical row shape. */
+export type CpMineRow = CpPackageRow & {
+    isPublic?: boolean;
+    version?: string;
+};
+/**
+ * GET /api/packages — public browse rows, RAW (incl. `requiredTier`/
+ * `pricingModel`/`category`). No auth. Throws on non-2xx / network. This is the
+ * source both the merged launch catalog and the `market` command read from.
+ */
+export declare function fetchPublicBrowseRows(filters?: PackageFilters): Promise<CpBrowseRow[]>;
+/** GET /api/packages — public workspace templates as `RemoteEntry`. No auth. */
+export declare function fetchPublicPackages(filters?: PackageFilters): Promise<RemoteEntry[]>;
+/**
+ * GET /api/packages/mine — the caller's own packages (incl. private). Bearer
+ * required. The route has no `search`/`category` params, so those filters are
+ * applied client-side over this (small) set; `search` is honored, `category`
+ * only when the row actually carries one (the `/mine` select omits it, so a
+ * type filter never silently drops the user's own rows).
+ */
+export declare function fetchMyRows(token: string, filters?: PackageFilters): Promise<CpMineRow[]>;
+export declare function fetchMyPackages(token: string, filters?: PackageFilters): Promise<RemoteEntry[]>;
+/**
+ * GET /api/packages/available — the slugs THIS account's subscription tier can
+ * install (Bearer required; the route reads the user's `subscriptions.tier`).
+ * Used to compute the "locked" set: a public package that declares a
+ * `requiredTier` but is absent here is ungrantable for this account. Only
+ * `category` is a real filter on this route — the others are ignored server-side.
+ */
+export declare function fetchAvailableSlugs(token: string, filters?: PackageFilters): Promise<Set<string>>;
+/**
+ * GET /api/packages/:slug — the full row, INCLUDING `definition` (the install
+ * payload). Authed when a token is given, which is REQUIRED for a private
+ * template (the author-only visibility gate 404s otherwise). Returns `null` if
+ * the package is absent / not visible.
+ */
+export declare function fetchPackageDefinition(slug: string, token?: string): Promise<Record<string, unknown> | null>;
+/** The remote half of the catalog, plus the health `mergeCatalog` needs. */
+export interface RemoteCatalog {
+    rows: RemoteEntry[];
+    status: RemoteSourceStatus;
+    loggedIn: boolean;
+    email?: string;
+    /** How many private rows we actually fetched (meaningful only when status === "ok"). */
+    privateCount: number;
+    /** Tier/pricing per public slug — the browse route carries it, `RemoteEntry` drops it. */
+    tierBySlug: Map<string, TierInfo>;
+    /**
+     * Slugs that declare a `requiredTier` this account CANNOT install (browse ∖
+     * `/available`). Empty when logged out or when `/available` couldn't be read
+     * (older pod / failure) — absence means "unknown", never "locked".
+     */
+    lockedSlugs: Set<string>;
+}
+/**
+ * Assemble the remote catalog for `launch`, degrading HONESTLY rather than
+ * failing open empty:
+ *
+ *   • Logged out → NO network. The bundle already IS the public catalog, and
+ *     private templates are invisible without auth. Status "unauthenticated"
+ *     tells the consumer to render the `synap login` path.
+ *   • Logged in → fetch `/mine` (private + own public) and best-effort `/packages`
+ *     (official / third-party public); merge, private-carrying rows win a tie.
+ *   • `/mine` 401/403 → "unauthenticated" (session expired). Network failure →
+ *     "unreachable". Either way `rows` is empty and the door keeps the bundle.
+ */
+export declare function fetchRemoteCatalog(filters?: PackageFilters): Promise<RemoteCatalog>;

package/dist/lib/cp-packages.js

@@ -0,0 +1,218 @@
+/**
+ * Control-plane package registry client (read-only).
+ * ==================================================
+ *
+ * The ONE authed HTTP client for the CP package registry (`/api/packages`).
+ * Before this file there was NO `/api/packages` client in the CLI — `launch`
+ * read the whole catalog from the bundled `@synap-core/workspace-templates`
+ * package. The ratified architecture is: PUBLIC templates ship in the bundle,
+ * PRIVATE templates live in the CP behind the user's login. This client is the
+ * private half.
+ *
+ * Two list endpoints, one detail endpoint:
+ *   • GET /api/packages            — public browse rows (no auth, `definition` stripped)
+ *   • GET /api/packages/mine       — the caller's own packages (Bearer, incl. private)
+ *   • GET /api/packages/:slug      — full row WITH `definition` (Bearer → private visible to author)
+ *
+ * The row→`RemoteEntry` mapping is NOT here — it is the canonical
+ * `rowToRemoteEntry` in `@synap-core/workspace-templates` (browser + CLI share
+ * the ONE copy; the two hand-copies had already drifted). This file owns only
+ * TRANSPORT: the Bearer token, the base URL (`auth.ts`'s `getCpUrl()`), and the
+ * query params the CP `/api/packages` route supports (`search`/`category`/`tag`/
+ * `verified`).
+ */
+import { rowToRemoteEntry, } from "@synap-core/workspace-templates";
+import { getCpUrl, getStoredToken, isTokenLocallyExpired } from "./auth.js";
+// Packages mount under `/api/packages` (CP `routes/index.ts`), unlike `/auth`
+// and `/pods` which sit at the root — hence the explicit `/api` segment here.
+const packagesBase = () => `${getCpUrl()}/api/packages`;
+const FETCH_TIMEOUT_MS = 10_000;
+/** Build the `/api/packages` query string from filters + any extra params. */
+function buildQuery(filters, extra) {
+    const p = new URLSearchParams(extra);
+    if (filters?.search)
+        p.set("search", filters.search);
+    if (filters?.category)
+        p.set("category", filters.category);
+    if (filters?.tag)
+        p.set("tag", filters.tag);
+    if (filters?.verified)
+        p.set("verified", "true");
+    return p.toString();
+}
+/** An auth failure (401/403) — distinct from an unreachable-network failure. */
+class CpAuthError extends Error {
+    authFailed = true;
+}
+/**
+ * GET /api/packages — public browse rows, RAW (incl. `requiredTier`/
+ * `pricingModel`/`category`). No auth. Throws on non-2xx / network. This is the
+ * source both the merged launch catalog and the `market` command read from.
+ */
+export async function fetchPublicBrowseRows(filters) {
+    const qs = buildQuery(filters, { limit: "100" });
+    const res = await fetch(`${packagesBase()}?${qs}`, {
+        signal: AbortSignal.timeout(FETCH_TIMEOUT_MS),
+    });
+    if (!res.ok)
+        throw new Error(`CP GET /api/packages → HTTP ${res.status}`);
+    const data = (await res.json());
+    return data.packages ?? [];
+}
+/** GET /api/packages — public workspace templates as `RemoteEntry`. No auth. */
+export async function fetchPublicPackages(filters) {
+    const rows = await fetchPublicBrowseRows(filters);
+    // Browse rows are all public by construction — pass `isPrivate` undefined.
+    return rows.map((r) => rowToRemoteEntry(r, undefined));
+}
+/**
+ * GET /api/packages/mine — the caller's own packages (incl. private). Bearer
+ * required. The route has no `search`/`category` params, so those filters are
+ * applied client-side over this (small) set; `search` is honored, `category`
+ * only when the row actually carries one (the `/mine` select omits it, so a
+ * type filter never silently drops the user's own rows).
+ */
+export async function fetchMyRows(token, filters) {
+    const res = await fetch(`${packagesBase()}/mine?limit=100`, {
+        headers: { Authorization: `Bearer ${token}` },
+        signal: AbortSignal.timeout(FETCH_TIMEOUT_MS),
+    });
+    if (res.status === 401 || res.status === 403) {
+        throw new CpAuthError(`CP GET /api/packages/mine → HTTP ${res.status}`);
+    }
+    if (!res.ok)
+        throw new Error(`CP GET /api/packages/mine → HTTP ${res.status}`);
+    const data = (await res.json());
+    let rows = data.packages ?? [];
+    if (filters?.category) {
+        rows = rows.filter((r) => r.category == null || r.category === filters.category);
+    }
+    if (filters?.search) {
+        const q = filters.search.toLowerCase();
+        rows = rows.filter((r) => r.slug.toLowerCase().includes(q) ||
+            r.displayName.toLowerCase().includes(q) ||
+            (r.description ?? "").toLowerCase().includes(q));
+    }
+    return rows;
+}
+export async function fetchMyPackages(token, filters) {
+    const rows = await fetchMyRows(token, filters);
+    return rows.map((r) => rowToRemoteEntry(r, r.isPublic === false ? true : undefined));
+}
+/**
+ * GET /api/packages/available — the slugs THIS account's subscription tier can
+ * install (Bearer required; the route reads the user's `subscriptions.tier`).
+ * Used to compute the "locked" set: a public package that declares a
+ * `requiredTier` but is absent here is ungrantable for this account. Only
+ * `category` is a real filter on this route — the others are ignored server-side.
+ */
+export async function fetchAvailableSlugs(token, filters) {
+    const qs = buildQuery({ category: filters?.category }, { limit: "100" });
+    const res = await fetch(`${packagesBase()}/available?${qs}`, {
+        headers: { Authorization: `Bearer ${token}` },
+        signal: AbortSignal.timeout(FETCH_TIMEOUT_MS),
+    });
+    if (!res.ok)
+        throw new Error(`CP GET /api/packages/available → HTTP ${res.status}`);
+    const data = (await res.json());
+    return new Set((data.packages ?? []).map((p) => p.slug));
+}
+/**
+ * GET /api/packages/:slug — the full row, INCLUDING `definition` (the install
+ * payload). Authed when a token is given, which is REQUIRED for a private
+ * template (the author-only visibility gate 404s otherwise). Returns `null` if
+ * the package is absent / not visible.
+ */
+export async function fetchPackageDefinition(slug, token) {
+    const res = await fetch(`${packagesBase()}/${encodeURIComponent(slug)}`, {
+        headers: token ? { Authorization: `Bearer ${token}` } : {},
+        signal: AbortSignal.timeout(FETCH_TIMEOUT_MS),
+    });
+    if (!res.ok)
+        return null;
+    const data = (await res.json());
+    return data.package?.definition ?? null;
+}
+/**
+ * Assemble the remote catalog for `launch`, degrading HONESTLY rather than
+ * failing open empty:
+ *
+ *   • Logged out → NO network. The bundle already IS the public catalog, and
+ *     private templates are invisible without auth. Status "unauthenticated"
+ *     tells the consumer to render the `synap login` path.
+ *   • Logged in → fetch `/mine` (private + own public) and best-effort `/packages`
+ *     (official / third-party public); merge, private-carrying rows win a tie.
+ *   • `/mine` 401/403 → "unauthenticated" (session expired). Network failure →
+ *     "unreachable". Either way `rows` is empty and the door keeps the bundle.
+ */
+export async function fetchRemoteCatalog(filters) {
+    const creds = getStoredToken();
+    const loggedIn = !!creds && !isTokenLocallyExpired(creds);
+    if (!loggedIn) {
+        return {
+            rows: [],
+            status: "unauthenticated",
+            loggedIn: false,
+            privateCount: 0,
+            tierBySlug: new Map(),
+            lockedSlugs: new Set(),
+        };
+    }
+    let publicRows = [];
+    let mineRows = [];
+    let availableSlugs = null;
+    try {
+        [publicRows, mineRows, availableSlugs] = await Promise.all([
+            // Public is best-effort: a private catalog that resolves is still useful
+            // even if the browse route hiccups.
+            fetchPublicBrowseRows(filters).catch(() => []),
+            fetchMyPackages(creds.token, filters),
+            // Tier gate is best-effort: an older pod without `/available` ⇒ null ⇒
+            // "unknown", never "locked".
+            fetchAvailableSlugs(creds.token, filters).catch(() => null),
+        ]);
+    }
+    catch (e) {
+        const authFailed = e.authFailed === true;
+        return {
+            rows: [],
+            status: authFailed ? "unauthenticated" : "unreachable",
+            loggedIn: true,
+            email: creds.email,
+            privateCount: 0,
+            tierBySlug: new Map(),
+            lockedSlugs: new Set(),
+        };
+    }
+    const tierBySlug = new Map();
+    const lockedSlugs = new Set();
+    for (const r of publicRows) {
+        if (r.requiredTier != null || r.pricingModel != null) {
+            tierBySlug.set(r.slug, {
+                requiredTier: r.requiredTier ?? null,
+                pricingModel: r.pricingModel ?? null,
+            });
+        }
+        // Locked = declares a tier this account's `/available` set doesn't include.
+        if (availableSlugs && r.requiredTier && !availableSlugs.has(r.slug)) {
+            lockedSlugs.add(r.slug);
+        }
+    }
+    // Dedup by slug; `/mine` rows overwrite public ones so the private flag wins.
+    const bySlug = new Map();
+    for (const r of publicRows)
+        bySlug.set(r.slug, rowToRemoteEntry(r, undefined));
+    for (const r of mineRows)
+        bySlug.set(r.slug, r);
+    const rows = [...bySlug.values()];
+    return {
+        rows,
+        status: "ok",
+        loggedIn: true,
+        email: creds.email,
+        privateCount: rows.filter((r) => r.isPrivate).length,
+        tierBySlug,
+        lockedSlugs,
+    };
+}
+//# sourceMappingURL=cp-packages.js.map