@unbrained/pm-cli 2026.10.11 → 2026.10.13

package/dist/sdk/compose.d.ts

@@ -43,7 +43,7 @@ export type { ExtensionManifestSchemaFinding, ExtensionManifestSchemaInspection,
  * {@link composeExtension} for the declarative style.
  */
 export interface ExtensionModule {
-    /**
+/**
      * Optional in-module metadata mirror.
      *
      * The authoritative manifest remains on-disk `manifest.json`; this field is
@@ -51,11 +51,11 @@ export interface ExtensionModule {
      * {@link defineExtensionManifest} for full contract checking at the definition
      * site.
      */
-    manifest?: ExtensionManifest;
-    /** Registers this package's commands, actions, and runtime hooks with the host. */
-    activate(api: ExtensionApi): void | Promise<void>;
-    /** Optional teardown lifecycle hook (VS Code-style `deactivate`). Invoked by the host on shutdown/reload to release resources opened during `activate`. */
-    deactivate?(): void | Promise<void>;
+manifest?: ExtensionManifest;
+/** Registers this package's commands, actions, and runtime hooks with the host. */
+activate(api: ExtensionApi): void | Promise<void>;
+/** Optional teardown lifecycle hook (VS Code-style `deactivate`). Invoked by the host on shutdown/reload to release resources opened during `activate`. */
+deactivate?(): void | Promise<void>;
 }
 /**
  * Typed identity helper for extension module exports.
@@ -72,24 +72,24 @@ export declare function defineExtension<TModule extends ExtensionModule>(module:
  * the positional arguments of `api.registerImporter(name, importer, options?)`.
  */
 export interface ExtensionBlueprintImporter {
-    /** Registered importer name; the `<name> import` command path is derived from it. */
-    name: string;
-    /** The importer handler that bridges an external system into the pm context graph. */
-    importer: Importer;
-    /** Optional command metadata (description/flags/intent/examples) for the derived command. */
-    options?: ImportExportRegistrationOptions;
+/** Registered importer name; the `<name> import` command path is derived from it. */
+name: string;
+/** The importer handler that bridges an external system into the pm context graph. */
+importer: Importer;
+/** Optional command metadata (description/flags/intent/examples) for the derived command. */
+options?: ImportExportRegistrationOptions;
 }
 /**
  * A single exporter registration entry for an {@link ExtensionBlueprint}, mirroring
  * the positional arguments of `api.registerExporter(name, exporter, options?)`.
  */
 export interface ExtensionBlueprintExporter {
-    /** Registered exporter name; the `<name> export` command path is derived from it. */
-    name: string;
-    /** The exporter handler that bridges the pm context graph out to an external system. */
-    exporter: Exporter;
-    /** Optional command metadata and artifact-output delivery policy for the derived command. */
-    options?: ExporterRegistrationOptions;
+/** Registered exporter name; the `<name> export` command path is derived from it. */
+name: string;
+/** The exporter handler that bridges the pm context graph out to an external system. */
+exporter: Exporter;
+/** Optional command metadata and artifact-output delivery policy for the derived command. */
+options?: ExporterRegistrationOptions;
 }
 /**
  * The lifecycle hooks an {@link ExtensionBlueprint} can register, one array per
@@ -98,18 +98,18 @@ export interface ExtensionBlueprintExporter {
  * on_index`.
  */
 export interface ExtensionBlueprintHooks {
-    /** Hooks fired before a command runs (`api.hooks.beforeCommand`). */
-    beforeCommand?: BeforeCommandHook[];
-    /** Transactional guards fired before item and history persistence (`api.hooks.beforeMutation`). */
-    beforeMutation?: BeforeMutationHook[];
-    /** Hooks fired after a command runs (`api.hooks.afterCommand`). */
-    afterCommand?: AfterCommandHook[];
-    /** Hooks fired when an item is persisted (`api.hooks.onWrite`). */
-    onWrite?: OnWriteHook[];
-    /** Hooks fired when an item is read (`api.hooks.onRead`). */
-    onRead?: OnReadHook[];
-    /** Hooks fired during index/search refresh (`api.hooks.onIndex`). */
-    onIndex?: OnIndexHook[];
+/** Hooks fired before a command runs (`api.hooks.beforeCommand`). */
+beforeCommand?: BeforeCommandHook[];
+/** Transactional guards fired before item and history persistence (`api.hooks.beforeMutation`). */
+beforeMutation?: BeforeMutationHook[];
+/** Hooks fired after a command runs (`api.hooks.afterCommand`). */
+afterCommand?: AfterCommandHook[];
+/** Hooks fired when an item is persisted (`api.hooks.onWrite`). */
+onWrite?: OnWriteHook[];
+/** Hooks fired when an item is read (`api.hooks.onRead`). */
+onRead?: OnReadHook[];
+/** Hooks fired during index/search refresh (`api.hooks.onIndex`). */
+onIndex?: OnIndexHook[];
 }
 /**
  * A declarative description of everything an extension registers at activation.
@@ -125,48 +125,48 @@ export interface ExtensionBlueprintHooks {
  * name) to its handler, mirroring the two-argument `api.register*` overloads.
  */
 export interface ExtensionBlueprint {
-    /** Optional in-module manifest mirror, copied onto the produced module verbatim. */
-    manifest?: ExtensionManifest;
-    /** Full command definitions registered via `api.registerCommand(definition)`. */
-    commands?: CommandDefinition[];
-    /** Command overrides keyed by command name, registered via `api.registerCommand(command, override)`. */
-    commandOverrides?: Record<string, CommandOverride>;
-    /** Additional flags keyed by target command name, registered via `api.registerFlags(command, flags)`. */
-    flags?: Record<string, FlagDefinition[]>;
-    /** Parser overrides keyed by command name, registered via `api.registerParser(command, override)`. */
-    parsers?: Record<string, ParserOverride>;
-    /** Output renderer overrides keyed by format, registered via `api.registerRenderer(format, renderer)`. */
-    renderers?: Partial<Record<OutputRendererFormat, RendererOverride | ScopedRendererOverrideDefinition>>;
-    /** Service overrides keyed by service name, registered via `api.registerService(service, override)`. */
-    services?: Partial<Record<ExtensionServiceName, ServiceOverride>>;
-    /** Preflight overrides registered via `api.registerPreflight(override)`. */
-    preflights?: Array<PreflightOverride | ScopedPreflightOverrideDefinition>;
-    /** Custom item types registered in a single `api.registerItemTypes(types)` call. */
-    itemTypes?: SchemaItemTypeDefinition[];
-    /** Custom item-metadata fields registered in a single `api.registerItemFields(fields)` call. */
-    itemFields?: SchemaFieldDefinition[];
-    /** Versioned relationship semantics registered in one atomic batch. */
-    relationshipKinds?: RelationshipKindDefinition[];
-    /** Schema migrations registered one at a time via `api.registerMigration(definition)`. */
-    migrations?: SchemaMigrationDefinition[];
-    /** Project profiles registered one at a time via `api.registerProfile(profile)`. */
-    profiles?: ProjectProfileRegistrationInput[];
-    /** Search providers registered via `api.registerSearchProvider(provider)`. */
-    searchProviders?: SearchProviderDefinition[];
-    /** Vector store adapters registered via `api.registerVectorStoreAdapter(adapter)`. */
-    vectorStoreAdapters?: VectorStoreAdapterDefinition[];
-    /** Assurance measurement providers registered via `api.registerAssuranceMeasurementProvider(provider)`. */
-    assuranceProviders?: AssuranceMeasurementProviderDefinition[];
-    /** Importers registered via `api.registerImporter(name, importer, options?)`. */
-    importers?: ExtensionBlueprintImporter[];
-    /** Exporters registered via `api.registerExporter(name, exporter, options?)`. */
-    exporters?: ExtensionBlueprintExporter[];
-    /** Lifecycle hooks registered through `api.hooks.*`. */
-    hooks?: ExtensionBlueprintHooks;
-    /** Optional imperative escape hatch run *after* every declarative registration, for the rare wiring the blueprint cannot express. Receives the same `api`. */
-    activate?: (api: ExtensionApi) => void | Promise<void>;
-    /** Optional teardown hook copied onto the produced module verbatim. */
-    deactivate?: () => void | Promise<void>;
+/** Optional in-module manifest mirror, copied onto the produced module verbatim. */
+manifest?: ExtensionManifest;
+/** Full command definitions registered via `api.registerCommand(definition)`. */
+commands?: CommandDefinition[];
+/** Command overrides keyed by command name, registered via `api.registerCommand(command, override)`. */
+commandOverrides?: Record<string, CommandOverride>;
+/** Additional flags keyed by target command name, registered via `api.registerFlags(command, flags)`. */
+flags?: Record<string, FlagDefinition[]>;
+/** Parser overrides keyed by command name, registered via `api.registerParser(command, override)`. */
+parsers?: Record<string, ParserOverride>;
+/** Output renderer overrides keyed by format, registered via `api.registerRenderer(format, renderer)`. */
+renderers?: Partial<Record<OutputRendererFormat, RendererOverride | ScopedRendererOverrideDefinition>>;
+/** Service overrides keyed by service name, registered via `api.registerService(service, override)`. */
+services?: Partial<Record<ExtensionServiceName, ServiceOverride>>;
+/** Preflight overrides registered via `api.registerPreflight(override)`. */
+preflights?: Array<PreflightOverride | ScopedPreflightOverrideDefinition>;
+/** Custom item types registered in a single `api.registerItemTypes(types)` call. */
+itemTypes?: SchemaItemTypeDefinition[];
+/** Custom item-metadata fields registered in a single `api.registerItemFields(fields)` call. */
+itemFields?: SchemaFieldDefinition[];
+/** Versioned relationship semantics registered in one atomic batch. */
+relationshipKinds?: RelationshipKindDefinition[];
+/** Schema migrations registered one at a time via `api.registerMigration(definition)`. */
+migrations?: SchemaMigrationDefinition[];
+/** Project profiles registered one at a time via `api.registerProfile(profile)`. */
+profiles?: ProjectProfileRegistrationInput[];
+/** Search providers registered via `api.registerSearchProvider(provider)`. */
+searchProviders?: SearchProviderDefinition[];
+/** Vector store adapters registered via `api.registerVectorStoreAdapter(adapter)`. */
+vectorStoreAdapters?: VectorStoreAdapterDefinition[];
+/** Assurance measurement providers registered via `api.registerAssuranceMeasurementProvider(provider)`. */
+assuranceProviders?: AssuranceMeasurementProviderDefinition[];
+/** Importers registered via `api.registerImporter(name, importer, options?)`. */
+importers?: ExtensionBlueprintImporter[];
+/** Exporters registered via `api.registerExporter(name, exporter, options?)`. */
+exporters?: ExtensionBlueprintExporter[];
+/** Lifecycle hooks registered through `api.hooks.*`. */
+hooks?: ExtensionBlueprintHooks;
+/** Optional imperative escape hatch run *after* every declarative registration, for the rare wiring the blueprint cannot express. Receives the same `api`. */
+activate?: (api: ExtensionApi) => void | Promise<void>;
+/** Optional teardown hook copied onto the produced module verbatim. */
+deactivate?: () => void | Promise<void>;
 }
 /**
  * Typed identity helper for a (partial) {@link ExtensionBlueprint} authored as its
@@ -300,38 +300,38 @@ export type ExtensionBlueprintLintCode = "capability_undeclared" | "capability_u
  * A single author-time issue {@link lintExtensionBlueprint} found in a blueprint.
  */
 export interface ExtensionBlueprintLintFinding {
-    /** The machine-readable {@link ExtensionBlueprintLintCode} for programmatic handling. */
-    code: ExtensionBlueprintLintCode;
-    /** Whether the finding blocks activation (`error`) or is advisory (`warning`). */
-    severity: ExtensionBlueprintLintSeverity;
-    /** Human-readable explanation, including the suggested fix. */
-    message: string;
-    /** The capability involved, for capability-drift findings. */
-    capability?: ExtensionCapability;
-    /** The normalized command path involved, for command findings. */
-    command?: string;
-    /** The blueprint field involved, for `empty_surface` findings. */
-    field?: string;
+/** The machine-readable {@link ExtensionBlueprintLintCode} for programmatic handling. */
+code: ExtensionBlueprintLintCode;
+/** Whether the finding blocks activation (`error`) or is advisory (`warning`). */
+severity: ExtensionBlueprintLintSeverity;
+/** Human-readable explanation, including the suggested fix. */
+message: string;
+/** The capability involved, for capability-drift findings. */
+capability?: ExtensionCapability;
+/** The normalized command path involved, for command findings. */
+command?: string;
+/** The blueprint field involved, for `empty_surface` findings. */
+field?: string;
 }
 /**
  * Options for {@link lintExtensionBlueprint} and {@link ../sdk/testing.js#assertExtensionBlueprint}.
  */
 export interface LintExtensionBlueprintOptions {
-    /** The capabilities the package's `manifest.json` declares (or will), used to reconcile against the surfaces the blueprint exercises. Overrides `blueprint.manifest.capabilities` when both are present. Omit both to lint without a capability reconciliation (only the structural checks run). */
-    declaredCapabilities?: readonly string[];
+/** The capabilities the package's `manifest.json` declares (or will), used to reconcile against the surfaces the blueprint exercises. Overrides `blueprint.manifest.capabilities` when both are present. Omit both to lint without a capability reconciliation (only the structural checks run). */
+declaredCapabilities?: readonly string[];
 }
 /**
  * The structured result of {@link lintExtensionBlueprint}.
  */
 export interface ExtensionBlueprintLintResult {
-    /** `true` when no `error`-severity finding is present (warnings still allow activation). */
-    ok: boolean;
-    /** Every finding, in detection order (capability drift, duplicates, conflicts, empty surfaces). */
-    findings: ExtensionBlueprintLintFinding[];
-    /** The least-privilege capability set the blueprint exercises (from {@link deriveExtensionCapabilities}). */
-    used: ExtensionCapability[];
-    /** The normalized declared capability set reconciled against, or `null` when none was provided. */
-    declared: ExtensionCapability[] | null;
+/** `true` when no `error`-severity finding is present (warnings still allow activation). */
+ok: boolean;
+/** Every finding, in detection order (capability drift, duplicates, conflicts, empty surfaces). */
+findings: ExtensionBlueprintLintFinding[];
+/** The least-privilege capability set the blueprint exercises (from {@link deriveExtensionCapabilities}). */
+used: ExtensionCapability[];
+/** The normalized declared capability set reconciled against, or `null` when none was provided. */
+declared: ExtensionCapability[] | null;
 }
 /**
  * Preflight a declarative {@link ExtensionBlueprint} at author time, returning the
@@ -370,8 +370,8 @@ export declare function lintExtensionBlueprint(blueprint: ExtensionBlueprint, op
  * manifest version, activation, legacy aliases) are the author's to supply here.
  */
 export interface SynthesizeExtensionManifestIdentity extends Omit<ExtensionManifest, "capabilities"> {
-    /** Extra capabilities to grant beyond the blueprint's derived set, for surfaces registered through the blueprint's imperative `activate` escape hatch that static derivation cannot see (e.g. a renderer wired in `activate`). Each is legacy-alias resolved and normalized like a declared manifest capability; unknown names are dropped (the synthesized manifest is validated at load). */
-    additionalCapabilities?: readonly string[];
+/** Extra capabilities to grant beyond the blueprint's derived set, for surfaces registered through the blueprint's imperative `activate` escape hatch that static derivation cannot see (e.g. a renderer wired in `activate`). Each is legacy-alias resolved and normalized like a declared manifest capability; unknown names are dropped (the synthesized manifest is validated at load). */
+additionalCapabilities?: readonly string[];
 }
 /**
  * Generate a complete, least-privilege {@link ExtensionManifest} from a
@@ -400,17 +400,17 @@ export declare function synthesizeExtensionManifest(blueprint: ExtensionBlueprin
  * {@link composeExtensionPackage}.
  */
 export interface ExtensionPackage {
-    /**
+/**
      * The runtime {@link ExtensionModule} to export as the package entry's default
      * export. Its `manifest` mirror is set to the same {@link ExtensionPackage.manifest}
      * object, so the in-module metadata and the on-disk manifest never diverge.
      */
-    module: ExtensionModule;
-    /**
+module: ExtensionModule;
+/**
      * The complete least-privilege {@link ExtensionManifest} to write as the
      * package's `manifest.json`, with `capabilities` derived from the blueprint.
      */
-    manifest: ExtensionManifest;
+manifest: ExtensionManifest;
 }
 /**
  * Assemble both halves of a shippable extension package from one declarative
@@ -438,10 +438,10 @@ export declare function composeExtensionPackage(blueprint: ExtensionBlueprint, i
  * manifest's version bounds against.
  */
 export interface ExtensionManifestCompatibilityTarget {
-    /** The pm CLI version to check the manifest against, e.g. the running CLI's `version` or a version floor a package commits to supporting. Plain dotted-numeric (`2026.6.23`) or `v`-prefixed values are compared; anything uninterpretable yields an `unchecked` finding rather than a false verdict. */
-    pmVersion: string;
-    /** How a `pm_max_version` overrun is treated, mirroring the runtime `extensions.policy.pm_max_version_exceeded_mode`. `"block"` (the default) reports an exceeded upper bound as a blocking incompatibility; `"warn"` reports it as a non-blocking advisory, matching an operator who relaxed the gate during a CLI upgrade window. */
-    pmMaxVersionExceededMode?: PmMaxVersionExceededMode;
+/** The pm CLI version to check the manifest against, e.g. the running CLI's `version` or a version floor a package commits to supporting. Plain dotted-numeric (`2026.6.23`) or `v`-prefixed values are compared; anything uninterpretable yields an `unchecked` finding rather than a false verdict. */
+pmVersion: string;
+/** How a `pm_max_version` overrun is treated, mirroring the runtime `extensions.policy.pm_max_version_exceeded_mode`. `"block"` (the default) reports an exceeded upper bound as a blocking incompatibility; `"warn"` reports it as a non-blocking advisory, matching an operator who relaxed the gate during a CLI upgrade window. */
+pmMaxVersionExceededMode?: PmMaxVersionExceededMode;
 }
 /**
  * The manifest fields {@link checkExtensionManifestCompatibility} evaluates.
@@ -451,10 +451,10 @@ export interface ExtensionManifestCompatibilityTarget {
  * manifest) the loader's manifest parser rejects as `extension_manifest_invalid`.
  */
 export interface ExtensionManifestCompatibilityManifest {
-    /** Inclusive lower pm CLI version bound from `manifest.json`. */
-    pm_min_version?: unknown;
-    /** Inclusive upper pm CLI version bound from `manifest.json`. */
-    pm_max_version?: unknown;
+/** Inclusive lower pm CLI version bound from `manifest.json`. */
+pm_min_version?: unknown;
+/** Inclusive upper pm CLI version bound from `manifest.json`. */
+pm_max_version?: unknown;
 }
 /**
  * The machine-readable kind of an {@link ExtensionManifestCompatibilityFinding},
@@ -469,33 +469,33 @@ export type ExtensionManifestCompatibilityCode = "pm_min_version_invalid" | "pm_
  * when evaluating a manifest against a target pm version.
  */
 export interface ExtensionManifestCompatibilityFinding {
-    /** The machine-readable {@link ExtensionManifestCompatibilityCode} for programmatic handling. */
-    code: ExtensionManifestCompatibilityCode;
-    /** `error` when the bound blocks the load against the target version, `warning` when it is advisory. */
-    severity: "error" | "warning";
-    /** Which manifest bound produced the finding. */
-    constraint: PmVersionBoundKind | "manifest";
-    /** The declared bound value, verbatim. */
-    required: string;
-    /** The target pm version the bound was evaluated against. */
-    current: string;
-    /** Human-readable explanation of the outcome and its effect on loading. */
-    message: string;
-    /** JSON-style manifest location responsible for a schema-level finding. */
-    path?: string;
-    /** Canonical manifest key that replaces a recognized legacy or mistaken spelling. */
-    suggested_key?: "pm_min_version" | "pm_max_version";
+/** The machine-readable {@link ExtensionManifestCompatibilityCode} for programmatic handling. */
+code: ExtensionManifestCompatibilityCode;
+/** `error` when the bound blocks the load against the target version, `warning` when it is advisory. */
+severity: "error" | "warning";
+/** Which manifest bound produced the finding. */
+constraint: PmVersionBoundKind | "manifest";
+/** The declared bound value, verbatim. */
+required: string;
+/** The target pm version the bound was evaluated against. */
+current: string;
+/** Human-readable explanation of the outcome and its effect on loading. */
+message: string;
+/** JSON-style manifest location responsible for a schema-level finding. */
+path?: string;
+/** Canonical manifest key that replaces a recognized legacy or mistaken spelling. */
+suggested_key?: "pm_min_version" | "pm_max_version";
 }
 /**
  * The structured result of {@link checkExtensionManifestCompatibility}.
  */
 export interface ExtensionManifestCompatibilityResult {
-    /** `true` when no `error`-severity finding blocks the load against the target version. */
-    compatible: boolean;
-    /** Every schema and bound finding in stable evaluation order. */
-    findings: ExtensionManifestCompatibilityFinding[];
-    /** The target pm version the manifest was checked against, echoed back for messaging. */
-    pmVersion: string;
+/** `true` when no `error`-severity finding blocks the load against the target version. */
+compatible: boolean;
+/** Every schema and bound finding in stable evaluation order. */
+findings: ExtensionManifestCompatibilityFinding[];
+/** The target pm version the manifest was checked against, echoed back for messaging. */
+pmVersion: string;
 }
 /**
  * Check, without loading anything, whether an extension manifest's declared
@@ -527,7 +527,7 @@ export declare function checkExtensionManifestCompatibility(manifest: ExtensionM
  * inputs they can supply.
  */
 export interface PreflightExtensionOptions {
-    /**
+/**
      * The author-supplied identity fields the blueprint cannot determine
      * (`name`/`version`/`entry`/`priority`, version bounds, etc.). Provide them to
      * have preflight {@link synthesizeExtensionManifest | synthesize} the complete
@@ -535,23 +535,23 @@ export interface PreflightExtensionOptions {
      * version bounds then feed the {@link PreflightExtensionOptions.target | target}
      * compatibility check. Omit to skip manifest synthesis.
      */
-    identity?: SynthesizeExtensionManifestIdentity;
-    /**
+identity?: SynthesizeExtensionManifestIdentity;
+/**
      * The pm CLI version (and optional max-version overrun mode) to evaluate the
      * manifest's `pm_min_version`/`pm_max_version` bounds against. Provide it to run
      * {@link checkExtensionManifestCompatibility} against the synthesized manifest
      * (or, absent an `identity`, the blueprint's in-module `manifest` mirror). Omit
      * to skip the version-compatibility check.
      */
-    target?: ExtensionManifestCompatibilityTarget;
-    /**
+target?: ExtensionManifestCompatibilityTarget;
+/**
      * The capabilities the package's `manifest.json` declares, reconciled against
      * the surfaces the blueprint exercises. Passed straight to
      * {@link lintExtensionBlueprint}; when omitted it falls back to
      * `blueprint.manifest.capabilities`, so the blueprint's in-module mirror is
      * linted by default.
      */
-    declaredCapabilities?: readonly string[];
+declaredCapabilities?: readonly string[];
 }
 /** Which preflight stage produced an {@link ExtensionPreflightFinding}. */
 export type ExtensionPreflightFindingSource = "blueprint" | "compatibility";
@@ -561,32 +561,32 @@ export type ExtensionPreflightFindingSource = "blueprint" | "compatibility";
  * so a consolidated report stays traceable to the check that raised it.
  */
 export interface ExtensionPreflightFinding {
-    /** The stage that produced the finding: blueprint lint or version compatibility. */
-    source: ExtensionPreflightFindingSource;
-    /** Whether the finding blocks publish/activation (`error`) or is advisory (`warning`). */
-    severity: ExtensionBlueprintLintSeverity;
-    /** The underlying stage's machine-readable code, for programmatic handling. */
-    code: ExtensionBlueprintLintCode | ExtensionManifestCompatibilityCode;
-    /** The underlying stage's human-readable explanation, verbatim. */
-    message: string;
+/** The stage that produced the finding: blueprint lint or version compatibility. */
+source: ExtensionPreflightFindingSource;
+/** Whether the finding blocks publish/activation (`error`) or is advisory (`warning`). */
+severity: ExtensionBlueprintLintSeverity;
+/** The underlying stage's machine-readable code, for programmatic handling. */
+code: ExtensionBlueprintLintCode | ExtensionManifestCompatibilityCode;
+/** The underlying stage's human-readable explanation, verbatim. */
+message: string;
 }
 /**
  * The consolidated result of {@link preflightExtension}: every author-time stage's
  * structured output plus a flattened, source-tagged finding list.
  */
 export interface ExtensionPreflightReport {
-    /** `true` when no `error`-severity finding appears across any stage (warnings still pass). */
-    ok: boolean;
-    /** The least-privilege capability set the blueprint exercises (from {@link deriveExtensionCapabilities}). */
-    capabilities: ExtensionCapability[];
-    /** The full {@link lintExtensionBlueprint} result (structural + capability-drift findings). */
-    blueprint: ExtensionBlueprintLintResult;
-    /** The manifest synthesized from `options.identity`, or `null` when no identity was supplied. */
-    manifest: ExtensionManifest | null;
-    /** The {@link checkExtensionManifestCompatibility} result, or `null` when no `options.target` was supplied. */
-    compatibility: ExtensionManifestCompatibilityResult | null;
-    /** Every finding from all stages, blueprint-lint findings before compatibility findings, each tagged by `source`. This is the consolidated, curated view: when `options.identity` synthesizes the manifest without an explicit `declaredCapabilities` set, capability-drift findings the lint raised against the blueprint's now-superseded in-module `manifest` mirror are omitted here (the raw `blueprint` result still carries them). */
-    findings: ExtensionPreflightFinding[];
+/** `true` when no `error`-severity finding appears across any stage (warnings still pass). */
+ok: boolean;
+/** The least-privilege capability set the blueprint exercises (from {@link deriveExtensionCapabilities}). */
+capabilities: ExtensionCapability[];
+/** The full {@link lintExtensionBlueprint} result (structural + capability-drift findings). */
+blueprint: ExtensionBlueprintLintResult;
+/** The manifest synthesized from `options.identity`, or `null` when no identity was supplied. */
+manifest: ExtensionManifest | null;
+/** The {@link checkExtensionManifestCompatibility} result, or `null` when no `options.target` was supplied. */
+compatibility: ExtensionManifestCompatibilityResult | null;
+/** Every finding from all stages, blueprint-lint findings before compatibility findings, each tagged by `source`. This is the consolidated, curated view: when `options.identity` synthesizes the manifest without an explicit `declaredCapabilities` set, capability-drift findings the lint raised against the blueprint's now-superseded in-module `manifest` mirror are omitted here (the raw `blueprint` result still carries them). */
+findings: ExtensionPreflightFinding[];
 }
 /**
  * Preflight a declarative {@link ExtensionBlueprint} through every author-time