@yugoo-design/dsh-design-studio 0.1.0 → 0.2.0

package/README.md

@@ -1,91 +1,95 @@
 # Design Studio domain library
 
-`dsh-design-studio` is the host-neutral Studio domain layer. Its installed-content inspection remains read-only: compiled Kit/Bundle catalogs, exact Kit workspaces and real Bundle files with loader-compiled summaries. Optional Panel drafts use separately injected snapshot and persistence ports, never installed-content mutation. The library does not depend on DSH, Codex, Claude Code, Cordis or a browser UI.
-
-## Catalog composition
-
-`buildStudioCompositionCatalog` derives one flat, immutable Bundle-version catalog from the Core-compiled installed snapshot. Identical `{name, version}` Bundle pins are coalesced without copying source, while different declared versions of the same Bundle name remain distinct. Each entry lists the exact published Kit versions that use it, so reverse dependencies are derived rather than maintained as a second authority. `searchStudioBundles` searches names and descriptions in deterministic catalog order.
-
-Hosts may supply the independent `snapshot.bundles` catalog, including unmounted
-versions. Kit bindings contribute reverse references only. Source inspection uses
-an exact host-resolved Bundle root, not a path inferred from an owning Kit.
-Catalog identity (`catalogName ?? name`) is distinct from a fork's preserved
-runtime name. File-backed retained closures preserve methods, resources and
-version pins after editable sources disappear; mutable discovery cannot replace
-a retained resource root for the same pin.
-
-## Management service
-
-`StudioManagementService` is the host-neutral read API for the Studio browser surface. `workspace` derives a JSON-only view from a `StudioCatalogSnapshotPort`: published Kit pins plus searched Bundle entries with exact reverse Kit pins. `readKitWorkspace` resolves one exact installed `name@version` and returns the complete raw `mindset.md` source byte-identically, the mounted Bundles with reverse Kit references, the loader-compiled resource paths, and a browser-safe read-only projection of the optional Core-validated `relations.yaml`; a missing Kit or version diagnoses explicitly. Executable Core definitions and filesystem authority never enter the view model.
-
-## Bundle source inspection
-
-`StudioBundleSourceService` reads real Bundle source files through the read-only `StudioBundleSourcePort`. `readBundleWorkspace` returns the complete readable UTF-8 file tree with byte sizes plus the loader-compiled `skill.yaml` manifest, parsed schema, validation rule/driver summary, and Panel classification (`native` Panels are provider-owned code; `declarative` Panels are Bundle-authored data). `readBundleFile` returns one file byte-exactly. Identity is reconciled against the compiled catalog by exact Kit and Bundle `name+version`; an ambiguous physical source (`studio.duplicate_source`) or a catalog/source disagreement (`studio.source_catalog_mismatch`) fails loud instead of guessing. Traversal, `.git`, directories, and binary content are rejected with explicit diagnostics.
-
-## Validation
-
-`validateKit` and `validateBundle` capture the Design Core loader's content errors
-as bounded, locatable diagnostics. `valid` means the definition actually loads
-without errors, not that the diagnostic list is empty. An omitted diagnostic
-severity retains its existing error meaning; `severity: "warning"` is advisory.
-
-These entries and Kit-draft validation reuse Core's read-only knowledge-declaration
-analysis. A direct single-target record selector is compared with the owning
-schema's reference role and target. Warnings identify the Bundle, schema pointer,
-Panel section, field and expected collection. Explicit metadata, multi-target
-selectors, free-form/external references and unresolvable declarations do not
-acquire guessed semantics. No field-name or Kit-name heuristics, schema rewriting,
-Design File changes, new approval state or runtime loading gate are introduced.
-Kit-draft confirmation still gates on `valid`, so warnings remain visible without
-blocking a loadable working copy. Other error-only preview/read result contracts
-are unchanged. A passing definition is not proof that its KAG relationships have
-been indexed or accepted.
-
-## Authoring and remaining boundaries
-
-The first authoring primitive, `prepareStudioPanelPreview`, compiles an in-memory `panel.yaml` edit against a host-resolved immutable Kit snapshot. It verifies the exact Kit and Bundle pins, uses the runtime loader (including translation and schema-binding checks), validates an isolated JSON sample, and returns runtime-interpreter input tagged with the editor revision. It writes no files, invokes no model or validation drivers, and grants no runtime/artifact/publication capabilities. Hosts must resolve the source snapshot themselves; arbitrary browser-supplied filesystem paths are not an API.
-
-`StudioPanelDraftService` implements a bounded Panel authoring slice: exact installed Kit/Bundle → retained immutable source snapshot → editable Panel/sample draft → preview → save/reopen → confirm/lock → new editable fork. Hosts own snapshot storage and atomic compare-and-swap. Incomplete drafts may be saved for recovery; confirmation reruns compilation against the retained source and rejects conflicts. Confirmed drafts cannot be overwritten. Companion supplies content-addressed complete-source snapshots and an atomic local repository under its trusted `stateRoot`, with size/count limits and no fallback to live project files. Preview does not run Bundle validation drivers or a model. Full Kit copy/create, import/export, actual Bundle trial execution and catalog publication are not yet implemented by this slice.
-
-`StudioKitDraftService` adds a Kit-owned authoring service over the same snapshot and
-atomic-repository ports. It retains the exact base Kit and mounted Bundle pins;
-only `mindset.md` and optional `relations.yaml` are editable in this slice. Shared
-Bundle source cannot be changed through this API. The Mindset catalog may reorder
-its entries but cannot add/remove/change mounted identities without a future
-explicit mount operation. Changing the candidate Kit identity does not publish it
-or retarget any installed Kit/session. Definition validation uses the full Core
-loader, and declarative Panel preview uses the retained mounted Bundle and an
-isolated sample through the existing preview implementation.
-
-Companion supplies durable Kit draft storage separately from Panel draft records,
-reusing the same locking, snapshot and confinement implementation. Authenticated
-`studioKitDraft*` RPC operations expose create/list/read/save/validate/preview/
-confirm/fork. Confirmation locks a successfully compiled working copy only; it is
-not a catalog publication or a runtime Bundle test. The optional shared Kit draft
-editor is exposed by `studio-ui` and wired to these RPC operations in Companion;
-it reuses the sample-only runtime renderer and protects pending navigation and
-confirmation. New-Kit scaffolding, independent Bundle working-copy adoption and
-release flow remain subsequent work, not claimed capabilities of these endpoints.
-
-The content archive functions described in [the archive contract](docs/content-archive.md)
-are exported from this library. Companion adds bounded private envelope storage
-and authenticated export/import/read/list/adopt routes. `studioContentImportAdopt`
-accepts a retained Kit or independent Bundle import ID, rechecks the archive and
-its definition, and passes the prepared units to the host's shared
-`contentLibrary.adoptPrepared` adapter. It retains the exact content closure in
-the local content library, rejecting different bytes at an existing pin and
-reusing identical bytes. Kit adoption additionally creates a new unconfirmed
-working copy through the existing snapshot/CAS service; repeated adoption creates
-separate Kit working-copy identities. Bundle adoption returns its independent
-pin without inventing a Kit, creating a Kit draft or mounting it into a project.
-Source/license/trust declarations remain in the import record. This operation
-does not overwrite installed sources, publish a new version, retarget project
-pins, register trusted providers or execute content. The shared archive browser
-is wired through `contentClient`: adopted Kits open their exact working copy;
-adopted Bundles open their exact source workspace after refreshing the catalog.
-
-Focused source-plane checks: `pnpm --filter dsh-design-studio test:kit-drafts`.
-The checked-in test configuration resolves Core source explicitly. Companion's
-`test/studio-panel-drafts.test.mjs` additionally exercises actual temporary storage,
-fresh service instances and retained declarative preview. These are not installed
-package or browser-interaction claims.
+`dsh-design-studio` supplies host-neutral Kit/Bundle inspection, source authoring,
+validation, archives and isolated Panel previews. Hosts provide storage and trusted
+source readers; the library does not create native sessions or depend on a browser.
+Core owns definition loading, schema validation and declarative Panel compilation.
+
+## Edit current content
+
+The optional `dsh-design-studio/node` entry exposes `createStudioInstances` and its
+Core-backed composition adapters. `editCurrent({kind, kit?, bundle?})` opens the
+same catalog identity for editing. The first call materializes its complete source;
+subsequent calls return that same record with `current: true`. Ordinary saves keep
+its identity. `copy` explicitly creates a new independent identity while preserving
+Bundle runtime names and data paths. Created and imported sources use the same editor.
+
+Kit membership belongs to `kit.yaml`; its Mindset catalog is the generated readable
+projection. Mounts select stable Bundle identities. A mounted local Bundle reads its
+current saved source, including overlays, rather than locking an earlier revision.
+Unfinished methods, missing dependencies and empty Kit membership can be saved;
+loading or previewing reports the actual missing/invalid definition. A missing
+installed catalog does not prevent reopening and editing retained local files.
+
+`prepareChanges` returns a bounded multi-file source diff, candidate digest and
+validation/preview diagnostics without saving. `saveChanges` defaults to `draft`:
+it saves incomplete authoring source using the repository lock and atomic record
+CAS. The internal revision and reviewed digest detect conflicting edits; they are
+not release versions. Explicit `validated` saves remain an optional caller check,
+not a prerequisite for ordinary editing. Source version metadata is retained as
+provenance and does not require a version bump or remount to use saved changes.
+
+`captureKit` captures the current complete Kit and all mounted Bundle bytes under
+the same storage lock. `loadKit` compiles this captured closure through Core. Hosts
+can supply it directly to Core's `ensureProjectKit(projectRoot, {loadSource})`:
+a project receives its own complete editable `design_kit/kit` and
+`design_kit/bundles/<identity>` trees, including binary resources. Methods, schema,
+validation, Panel, summaries and runtime resources then come from that project.
+Library edits affect future projects. Requested comparison/adaptation/synchronization
+uses ordinary Agent source edits and existing validation, saving and Git.
+There is no separate local publication, confirmation, upgrade or synchronization
+workflow. Trusted native providers still own executable contributions.
+
+## Import, export and removal
+
+`importSources({kind, files, title?})` accepts decoded ZIP/folder entries or a single
+`SKILL.md`. A Bundle needs `SKILL.md`; a Kit needs `mindset.md` and `kit.yaml`.
+Other incomplete or malformed definitions remain editable with locatable readiness
+diagnostics. Imports get independent catalog identities and retain original bytes,
+methods, runtime names and resources. Repeated display names receive numeric suffixes.
+Kit imports preserve supplied Bundle trees; absent dependencies remain explicit.
+
+`exportArchive({id, expectedRevision})` exports the current complete saved source
+and mounted Bundle resources through the existing source-archive format. It supports
+unfinished definitions, checks the source revision, and does not replace edits with
+an installed base. Source/license metadata is optional and stays covered by archive
+hashes. `exportStudioContentArchive` additionally validates complete definitions;
+`exportStudioSourceArchive` preserves incomplete authoring material.
+
+Removal moves the selected instance record to the operating system trash using
+`trash`, or a trusted Host's `moveToTrash(file)` adapter. Revision checks and Bundle
+reference protection apply. Failure never falls back to permanent deletion.
+Restoring the record restores its source; shared snapshots remain available to other
+copies. There is no separate Studio recycle-bin API.
+
+## Inspection and preview
+
+`StudioManagementService` and `StudioBundleSourceService` expose JSON-only catalog
+and source views. They inspect real UTF-8 source, resources, compiled manifests,
+schemas, validation and optional relation declarations. Native Panels are provider
+code; declarative Panels are source data. Identity ambiguity, traversal, binary text
+reads and catalog/source disagreement produce explicit diagnostics. Runtime names
+remain distinct from catalog identities.
+
+Validation uses Core's real loader. Warnings are advisory and include locations;
+`valid` means the definition loads, not that its diagnostic list is empty. Optional
+knowledge-declaration analysis uses actual schema and reference declarations without
+field-name heuristics, guessed relationships or source rewriting.
+
+Panel preview uses the same loader and interpreter with isolated sample data:
+explicit input, then `reference/preview.json`, then existing `initial_values`.
+Invalid samples diagnose instead of silently falling back. Bounded synthetic artifact
+mappings may support sample HTML/SVG resources. Preview grants no project file access,
+does not run native validation drivers, and proves neither durable save/reopen nor
+native Agent consumption. Hosts supply the actual installed component vocabulary.
+
+## Verification
+
+Build Core and Studio before checks that consume `lib`. `test:source-import`,
+`test:instance-changes` and `test:current-sources` exercise real Core definitions over
+isolated source storage. Their checked-in configuration explicitly aliases Core
+source. `test:node` checks the built Node entry and public types separately from
+browser and native Host acceptance. Historical Panel-trial records expose read/list and retained-source reads. Installed
+Bundle trials still use the bounded current-source capture. The former Kit/Panel
+confirmation services, archive adoption, and cumulative draft/snapshot quotas have
+been removed. Current records have no confirmation state; revisions protect writes.

package/THIRD_PARTY_NOTICES.md

@@ -9,6 +9,7 @@ or a substitute for license texts, source provision, or other obligations.
 
 | Component | License / location | Release requirement to verify |
 | --- | --- | --- |
+| `trash@10.1.1` | MIT; upstream `sindresorhus/trash`, npm package `license` | Keep the external package, platform executables and its license together. Install the declared dependency; do not bundle its executable-relative paths into standalone JavaScript. |
 | Official Ladybug WASM dependency `@ladybugdb/wasm-core@0.21.1` | Package declares MIT; original text and public source locator in `third-party/native/ladybug-wasm-core-0.21.1/` | Current `packages/knowledge-ladybug` dependency route. Preserve Kùzu Inc./Ladybug Memory Inc. notices and verify actual release inclusion. The installed package has no separate third-party inventory or precise build-provenance file; embedded components and source/build correspondence remain unresolved. Package MIT is not a blanket license for the complete WASM. |
 | Historical vendored Ladybug WASM runtime | MIT; `vendor/ladybug/runtime/LICENSE` | Separate legacy route: preserve its own copyright/license, provenance and patch if distributed. Do not use its patch/source evidence as the build provenance of the official npm dependency. Compiled-in component checks remain separate. |
 | DSH code and reused utilities | MIT; `deepseek-harness/LICENSE` | Retain original notices; distinguish external host from copied/bundled utilities. |

package/lib/index.d.ts

@@ -1,74 +1,5 @@
-import { DesignKit, DesignSkill, KitResourceContent } from "@yugoo-design/dsh-design-core";
-//#region src/types.d.ts
-/**
- * Host-neutral Design Studio ports and read-model vocabulary.
- *
- * The Studio is a pure domain library: every filesystem operation goes through
- * an injected port so each Agent Host adapter (DSH, Codex, Claude Code, SDK
- * Pilot) supplies its own native file operations. Nothing here imports an
- * Agent Host runtime, Cordis, or `node:fs`. Installed content remains read-only;
- * editable drafts use separate injected snapshot and persistence ports.
- */
-/**
- * Read-only filesystem surface the Studio needs to enumerate and validate
- * Kits. Structurally compatible with the Design Core `KitFsLike` loader port.
- */
-interface StudioReadFs {
-  /** Read one UTF-8 text file; `undefined` when absent. */
-  readText(path: string): Promise<string | undefined>;
-  /** Optional attached-resource text/opaque projection; never used for definition slots. */
-  readResource?(path: string): Promise<KitResourceContent | undefined>;
-  /** List one directory's entry names. */
-  listDir(path: string): Promise<string[]>;
-  /** Whether a path is a directory; adapters without it fall back to read probes. */
-  isDirectory?(path: string): Promise<boolean>;
-  /** Resolve symlinks for confinement checks. */
-  realPath?(path: string): Promise<string>;
-}
-/** One explicit Studio diagnostic (a stable code plus a locatable message). */
-interface StudioDiagnostic {
-  /** Stable diagnostic code, e.g. `kit.load`. */
-  readonly code: string;
-  /** Human-readable, locatable message. */
-  readonly message: string;
-  /** The Kit or Bundle the diagnostic is about, when known. */
-  readonly subject?: string;
-  /** Omitted means error, preserving existing error-only consumers. */
-  readonly severity?: 'warning';
-}
-/** The outcome of validating one Kit or Bundle definition. */
-interface StudioValidationReport {
-  /** True when the definition loads without errors; warnings do not block use. */
-  readonly valid: boolean;
-  /** Definition errors or non-blocking authoring warnings. */
-  readonly diagnostics: readonly StudioDiagnostic[];
-}
-/** Exact identity of one published Kit version. */
-interface DesignKitVersionPin {
-  /** Published Kit name. */
-  readonly name: string;
-  /** Exact declared Kit version (`major.minor`). */
-  readonly version: string;
-}
-/** Exact identity of one published Bundle version. */
-interface DesignBundleVersionPin {
-  /** Published Bundle name. */
-  readonly name: string;
-  /** Explicit declared Bundle version (`major.minor`). */
-  readonly version: string;
-}
-/**
- * Thrown by a Bundle source port when a file exists but is not decodable
- * UTF-8 text. The Studio surfaces binary content as an explicit diagnostic
- * instead of lossy-decoding it into a text viewer.
- */
-declare class StudioBinaryContentError extends Error {
-  /** The path whose content is not UTF-8 text. */
-  readonly path: string;
-  /** @param path - absolute path of the non-text file. */
-  constructor(path: string);
-}
-//#endregion
+import { A as StudioDiagnostic, C as StudioPanelPreviewRequest, D as DesignBundleVersionPin, E as loadStudioKit, M as StudioValidationReport, O as DesignKitVersionPin, S as StudioPanelPreview, T as prepareStudioPanelPreview, _ as StudioArchiveSource, a as StudioInstanceFileChange, b as exportStudioSourceArchive, c as normalizeStudioInstanceChanges, d as StudioPanelDraftRecord, f as StudioPanelDraftRepository, g as StudioArchivePin, h as StudioArchiveFile, i as StudioInstanceChangeRequest, j as StudioReadFs, k as StudioBinaryContentError, l as StudioDraftSources, m as StudioSourceSnapshot, n as StudioInstanceCandidate, o as StudioInstanceFileDiff, p as StudioPanelDraftSummary, r as StudioInstanceChangeReceipt, s as StudioInstanceSaveChanges, t as STUDIO_INSTANCE_CHANGE_LIMITS, u as StudioPanelDraftContent, v as StudioContentArchive, w as StudioPanelPreviewResult, x as readStudioContentArchive, y as exportStudioContentArchive } from "./instance-changes-CFLBPBdi.js";
+import { DesignKit, DesignSkill } from "@yugoo-design/dsh-design-core";
 //#region src/snapshot.d.ts
 /** One Bundle addressed by its declared version. */
 interface DesignBundleSnapshot {
@@ -124,24 +55,6 @@ interface StudioCatalogSnapshotPort {
  */
 declare function snapshotKit(kit: DesignKit): DesignKitSnapshot;
 //#endregion
-//#region src/load.d.ts
-/**
- * Load a Kit with authority derived from the Studio-controlled directory.
- * @param fs - Studio file-ops port.
- * @param kitRoot - absolute Kit directory.
- * @returns the assembled Kit.
- */
-interface StudioKitLoadOptions {
-  readonly sourceId?: string;
-  readonly bundles?: readonly {
-    name: string;
-    version: string;
-    rootDir: string;
-    sourceId: string;
-  }[];
-}
-declare function loadStudioKit(fs: StudioReadFs, kitRoot: string, options?: StudioKitLoadOptions): Promise<DesignKit>;
-//#endregion
 //#region src/validate.d.ts
 /**
  * Validate one Kit definition at `kitRoot`.
@@ -162,265 +75,6 @@ declare function validateKit(fs: StudioReadFs, kitRoot: string): Promise<StudioV
  */
 declare function validateBundle(fs: StudioReadFs, kitRoot: string, name: string): Promise<StudioValidationReport>;
 //#endregion
-//#region src/panel-preview.d.ts
-/** One editor revision and its isolated sample, not a runtime publication. */
-interface StudioPanelPreviewRequest {
-  readonly kit: DesignKitVersionPin;
-  readonly bundle: DesignBundleVersionPin;
-  readonly revision: number;
-  readonly panelSource: string;
-  readonly sampleSource: string;
-}
-/** Runtime-interpreter input derived from a validated draft revision. */
-interface StudioPanelPreview {
-  readonly revision: number;
-  /** Absent only for a real independently loaded Bundle preview. */
-  readonly kit?: DesignKitVersionPin;
-  readonly bundle: DesignBundleVersionPin;
-  /** Loader-resolved YAML, including the installed Bundle's translations. */
-  readonly panelYaml: string;
-  readonly sample: Readonly<Record<string, unknown>>;
-}
-interface StudioPanelPreviewResult {
-  readonly preview?: StudioPanelPreview;
-  readonly diagnostics: readonly StudioDiagnostic[];
-}
-/**
- * Compile one Panel edit against an exact, host-resolved Kit snapshot.
- *
- * The host must supply an immutable/read-confined source port and root for the
- * selected pin, not arbitrary browser paths or a mutable production project.
- * Only panel.yaml is overlaid. All schemas, methods, locales and renderer
- * contracts still come from that snapshot and pass through the runtime loader.
- * The returned sample is fresh JSON and can be edited in a sandboxed preview;
- * this function grants no artifact, filesystem, model or publication authority.
- * A preview consumer must discard a result if its editor revision has changed.
- */
-declare function prepareStudioPanelPreview(source: StudioReadFs, kitRoot: string, request: StudioPanelPreviewRequest, loadOptions?: StudioKitLoadOptions): Promise<StudioPanelPreviewResult>;
-//#endregion
-//#region src/panel-drafts.d.ts
-interface StudioPanelDraftContent {
-  readonly kit: DesignKitVersionPin;
-  readonly bundle: DesignBundleVersionPin;
-  readonly baseSnapshot: string;
-  readonly panelSource: string;
-  readonly sampleSource: string;
-  /** A confirmed snapshot is locked, but is NOT published into the Kit catalog. */
-  readonly confirmed: boolean;
-}
-interface StudioPanelDraftRecord extends StudioPanelDraftContent {
-  readonly id: string;
-  readonly revision: number;
-}
-type StudioPanelDraftSummary = Pick<StudioPanelDraftRecord, 'id' | 'revision' | 'kit' | 'bundle' | 'confirmed'>;
-interface StudioPanelDraftRepository {
-  create(content: StudioPanelDraftContent): Promise<StudioPanelDraftRecord>;
-  read(id: string): Promise<StudioPanelDraftRecord>;
-  list(): Promise<readonly StudioPanelDraftRecord[]>;
-  /** Atomic, cross-process CAS: must fail without writing if revision differs. */
-  replace(id: string, expectedRevision: number, content: StudioPanelDraftContent): Promise<StudioPanelDraftRecord>;
-}
-interface StudioSourceSnapshot {
-  readonly id: string;
-  readonly fs: StudioReadFs;
-  readonly root: string;
-  /** Bounded closure root; the Kit and independently retained Bundles may be siblings. */
-  readonly storageRoot?: string;
-  readonly loadOptions?: StudioKitLoadOptions;
-}
-interface StudioDraftSources {
-  /** Host resolves exact installed pin, captures all source bytes and retains them. */
-  capture(kit: DesignKitVersionPin): Promise<StudioSourceSnapshot>;
-  open(id: string): Promise<StudioSourceSnapshot>;
-}
-interface StudioPanelDraftEdit {
-  readonly id: string;
-  readonly expectedRevision: number;
-  readonly panelSource: string;
-  readonly sampleSource: string;
-}
-/** Shared semantics used by host adapters; no filesystem or runtime tool access. */
-declare class StudioPanelDraftService {
-  private readonly repository;
-  private readonly sources;
-  constructor(repository: StudioPanelDraftRepository, sources: StudioDraftSources);
-  list(): Promise<readonly StudioPanelDraftSummary[]>;
-  read(id: string): Promise<StudioPanelDraftRecord>;
-  create(input: {
-    kit: DesignKitVersionPin;
-    bundle: DesignBundleVersionPin;
-    sampleSource?: string;
-  }): Promise<StudioPanelDraftRecord>;
-  /** Open only the retained snapshot; imported/template pins need not be installed. */
-  createFromSnapshot(input: {
-    snapshotId: string;
-    kit: DesignKitVersionPin;
-    bundle: DesignBundleVersionPin;
-    sampleSource?: string;
-  }): Promise<StudioPanelDraftRecord>;
-  private createRetained;
-  /** Saving incomplete source is allowed; confirmation requires successful compilation. */
-  save(input: StudioPanelDraftEdit): Promise<StudioPanelDraftRecord>;
-  /** Compile an unsaved editor revision without persisting or touching any project. */
-  preview(input: StudioPanelDraftEdit & {
-    revision: number;
-  }): Promise<StudioPanelPreviewResult>;
-  confirm(input: {
-    id: string;
-    expectedRevision: number;
-  }): Promise<{
-    draft?: StudioPanelDraftRecord;
-  } & StudioPanelPreviewResult>;
-  /** Start another editable revision, sharing the immutable base bytes. */
-  fork(id: string): Promise<StudioPanelDraftRecord>;
-}
-//#endregion
-//#region src/kit-drafts.d.ts
-interface StudioKitDraftContent {
-  readonly baseKit: DesignKitVersionPin;
-  readonly baseSnapshot: string;
-  /** Exact immutable mounts. Bundle working copies are edited independently. */
-  readonly mounts: readonly DesignBundleVersionPin[];
-  readonly mindsetSource: string;
-  /** null removes the optional Kit-owned relation vocabulary. */
-  readonly relationsSource: string | null;
-  readonly confirmed: boolean;
-}
-interface StudioKitDraftRecord extends StudioKitDraftContent {
-  readonly id: string;
-  readonly revision: number;
-}
-interface StudioKitDraftRepository {
-  create(content: StudioKitDraftContent): Promise<StudioKitDraftRecord>;
-  read(id: string): Promise<StudioKitDraftRecord>;
-  list(): Promise<readonly StudioKitDraftRecord[]>;
-  /** Atomic CAS across writers; conflicts and confirmed records must not be overwritten. */
-  replace(id: string, expectedRevision: number, content: StudioKitDraftContent): Promise<StudioKitDraftRecord>;
-}
-interface StudioKitDraftEdit {
-  readonly id: string;
-  readonly expectedRevision: number;
-  readonly mindsetSource: string;
-  readonly relationsSource: string | null;
-}
-interface StudioKitDraftValidation extends StudioValidationReport {
-  readonly revision: number;
-  /** A candidate identity, not a published/catalog-resolvable version. */
-  readonly candidateKit?: DesignKitVersionPin;
-}
-declare class StudioKitDraftService {
-  private readonly repository;
-  private readonly sources;
-  constructor(repository: StudioKitDraftRepository, sources: StudioDraftSources);
-  list(): Promise<readonly Pick<StudioKitDraftRecord, 'id' | 'revision' | 'baseKit' | 'confirmed'>[]>;
-  read(id: string): Promise<StudioKitDraftRecord>;
-  create(input: {
-    kit: DesignKitVersionPin;
-  }): Promise<StudioKitDraftRecord>;
-  /** Adopt retained, independently validated content; never resolve an installed pin. */
-  createFromSnapshot(input: {
-    snapshotId: string;
-    kit: DesignKitVersionPin;
-  }): Promise<StudioKitDraftRecord>;
-  private createRetained;
-  /** Invalid intermediate edits can be retained, but cannot be confirmed. */
-  save(input: StudioKitDraftEdit): Promise<StudioKitDraftRecord>;
-  private compile;
-  validate(input: {
-    id: string;
-    expectedRevision: number;
-  }): Promise<StudioKitDraftValidation>;
-  preview(input: {
-    id: string;
-    expectedRevision: number;
-    bundle: DesignBundleVersionPin;
-    sampleSource: string;
-  }): Promise<StudioPanelPreviewResult>;
-  confirm(input: {
-    id: string;
-    expectedRevision: number;
-  }): Promise<StudioKitDraftValidation & {
-    draft?: StudioKitDraftRecord;
-  }>;
-  fork(id: string): Promise<StudioKitDraftRecord>;
-}
-//#endregion
-//#region src/content-archive.d.ts
-interface StudioArchivePin {
-  readonly name: string;
-  readonly version: string;
-}
-interface StudioArchiveFile {
-  readonly path: string;
-  readonly base64: string;
-  readonly bytes: number;
-  readonly sha256: string;
-}
-interface StudioContentArchive {
-  readonly format: 'studio-content-archive/v1';
-  readonly kind: 'kit' | 'bundle';
-  readonly pin: StudioArchivePin;
-  /** Declared provenance, not verified authorship or redistribution permission. */
-  readonly provenance: {
-    readonly source: string;
-    readonly license: string;
-  };
-  /** Kit membership pins in catalog order; Bundle explicitly declared requirements. */
-  readonly dependencies: readonly DesignBundleVersionPin[];
-  readonly files: readonly StudioArchiveFile[];
-  /** SHA-256 of the canonical envelope excluding this field; not a signature. */
-  readonly sha256: string;
-}
-interface StudioArchiveBundleSource extends StudioArchivePin {
-  readonly sourceId: string;
-  readonly snapshot: StudioArchiveSource;
-}
-interface StudioArchiveSource {
-  readonly sourceId?: string;
-  /** Trusted immutable Bundle snapshots, never paths supplied by an archive. */
-  readonly bundles?: readonly StudioArchiveBundleSource[];
-  readonly root: string;
-  readonly fs: StudioReadFs;
-  /** Host supplies a complete, immutable regular-file snapshot; no live fallback. */
-  listFiles(): Promise<readonly string[]>;
-  /** Byte-preserving read. Host rejects links and non-regular files before reading. */
-  readBytes(path: string): Promise<Uint8Array>;
-}
-interface StudioPreparedContentImport {
-  readonly archive: StudioContentArchive;
-  /** Files relative to Kit root, or standalone Bundle root, respectively. */
-  readonly files: readonly StudioArchiveFile[];
-  /** Independently retainable content, only populated after definition validation. */
-  readonly contents: readonly {
-    readonly kind: 'kit' | 'bundle';
-    readonly pin: StudioArchivePin;
-    readonly files: readonly StudioArchiveFile[];
-  }[];
-  readonly executionGranted: false;
-  /** Includes scripts and provider/driver references; host approval is separate. */
-  readonly requiresTrustReview: boolean;
-  readonly validation: {
-    readonly valid: boolean;
-    readonly diagnostics: readonly StudioDiagnostic[];
-  };
-}
-/** Parse a bounded JSON envelope; hashes include metadata and every original byte. */
-declare function readStudioContentArchive(source: string): StudioContentArchive;
-/** No writes, extraction, permission restoration, script execution, installation or publication. */
-declare function prepareStudioContentImport(source: string, options?: {
-  validationContext?: StudioArchiveSource | {
-    root: string;
-    fs: StudioReadFs;
-  };
-}): Promise<StudioPreparedContentImport>;
-/** Capture only immutable host snapshots, preserving full exact referenced trees. */
-declare function exportStudioContentArchive(snapshot: StudioArchiveSource, input: {
-  kind: 'kit' | 'bundle';
-  pin: StudioArchivePin;
-  provenance: StudioContentArchive['provenance'];
-  dependencies?: readonly DesignBundleVersionPin[];
-}): Promise<string>;
-//#endregion
 //#region src/management.d.ts
 /** One browser-safe published Kit pin. */
 interface StudioKitView {
@@ -737,4 +391,4 @@ declare class StudioBundleSourceService {
   }): Promise<StudioBundleFileResult>;
 }
 //#endregion
-export { type DesignBundleSnapshot, type DesignBundleVersionPin, type DesignCatalogSnapshot, type DesignKitSnapshot, type DesignKitVersionPin, type StudioArchiveFile, type StudioArchivePin, type StudioArchiveSource, StudioBinaryContentError, type StudioBundleFileRefView, type StudioBundleFileResult, type StudioBundleFileView, type StudioBundleMountView, type StudioBundlePanelView, type StudioBundleSourcePort, StudioBundleSourceService, type StudioBundleValidationSummary, type StudioBundleVersionEntry, type StudioBundleView, type StudioBundleWorkspaceResult, type StudioBundleWorkspaceView, type StudioCatalogSnapshotPort, type StudioCompositionCatalog, type StudioContentArchive, type StudioDiagnostic, type StudioDraftSources, type StudioKitDraftContent, type StudioKitDraftEdit, type StudioKitDraftRecord, type StudioKitDraftRepository, StudioKitDraftService, type StudioKitDraftValidation, type StudioKitView, type StudioKitWorkspaceResult, type StudioKitWorkspaceView, type StudioManagementFailure, StudioManagementService, type StudioPanelDraftContent, type StudioPanelDraftEdit, type StudioPanelDraftRecord, type StudioPanelDraftRepository, StudioPanelDraftService, type StudioPanelDraftSummary, type StudioPanelPreview, type StudioPanelPreviewRequest, type StudioPanelPreviewResult, type StudioPreparedContentImport, type StudioReadFs, type StudioRelationView, type StudioRelationVocabularyView, type StudioResourceRefView, type StudioSourceSnapshot, type StudioValidationReport, type StudioWorkspaceView, buildStudioCompositionCatalog, exportStudioContentArchive, loadStudioKit, prepareStudioContentImport, prepareStudioPanelPreview, readStudioContentArchive, searchStudioBundles, snapshotKit, validateBundle, validateKit };
+export { type DesignBundleSnapshot, type DesignBundleVersionPin, type DesignCatalogSnapshot, type DesignKitSnapshot, type DesignKitVersionPin, STUDIO_INSTANCE_CHANGE_LIMITS, type StudioArchiveFile, type StudioArchivePin, type StudioArchiveSource, StudioBinaryContentError, type StudioBundleFileRefView, type StudioBundleFileResult, type StudioBundleFileView, type StudioBundleMountView, type StudioBundlePanelView, type StudioBundleSourcePort, StudioBundleSourceService, type StudioBundleValidationSummary, type StudioBundleVersionEntry, type StudioBundleView, type StudioBundleWorkspaceResult, type StudioBundleWorkspaceView, type StudioCatalogSnapshotPort, type StudioCompositionCatalog, type StudioContentArchive, type StudioDiagnostic, type StudioDraftSources, type StudioInstanceCandidate, type StudioInstanceChangeReceipt, type StudioInstanceChangeRequest, type StudioInstanceFileChange, type StudioInstanceFileDiff, type StudioInstanceSaveChanges, type StudioKitView, type StudioKitWorkspaceResult, type StudioKitWorkspaceView, type StudioManagementFailure, StudioManagementService, type StudioPanelDraftContent, type StudioPanelDraftRecord, type StudioPanelDraftRepository, type StudioPanelDraftSummary, type StudioPanelPreview, type StudioPanelPreviewRequest, type StudioPanelPreviewResult, type StudioReadFs, type StudioRelationView, type StudioRelationVocabularyView, type StudioResourceRefView, type StudioSourceSnapshot, type StudioValidationReport, type StudioWorkspaceView, buildStudioCompositionCatalog, exportStudioContentArchive, exportStudioSourceArchive, loadStudioKit, normalizeStudioInstanceChanges, prepareStudioPanelPreview, readStudioContentArchive, searchStudioBundles, snapshotKit, validateBundle, validateKit };