@yugoo-design/dsh-design-studio 0.1.2 → 0.2.2

package/lib/index.js

@@ -1,6 +1,6 @@
-import { basename, extname, isAbsolute, join, relative, resolve, sep } from "node:path";
-import { DesignBundleVersion, DesignKitVersion, compileSchema, diagnoseKnowledgeDeclarations, loadDesignBundle, loadDesignKit } from "@yugoo-design/dsh-design-core";
-import { createHash } from "node:crypto";
+import { c as prepareStudioPanelPreview, i as exportStudioSourceArchive, l as loadStudioKit, n as normalizeStudioInstanceChanges, o as readStudioContentArchive, r as exportStudioContentArchive, t as STUDIO_INSTANCE_CHANGE_LIMITS } from "./instance-changes-RvOGeBaE.js";
+import { basename, join, resolve } from "node:path";
+import { diagnoseKnowledgeDeclarations } from "@yugoo-design/dsh-design-core";
 //#region src/types.ts
 /**
 * Thrown by a Bundle source port when a file exists but is not decodable
@@ -37,19 +37,6 @@ function snapshotKit(kit) {
 	});
 }
 //#endregion
-//#region src/load.ts
-/** Studio-owned loading of a Kit from its directory source. */
-async function loadStudioKit(fs, kitRoot, options = {}) {
-	const root = resolve(kitRoot);
-	return await loadDesignKit(fs, root, {
-		sourceId: options.sourceId ?? `directory:${root}`,
-		...options.bundles ? { resolveBundle: async (pin) => {
-			const location = options.bundles.find((entry) => entry.name === pin.name && entry.version === pin.version);
-			return location ? loadDesignBundle(fs, location, pin) : void 0;
-		} } : {}
-	});
-}
-//#endregion
 //#region src/validate.ts
 /**
 * Explicit Kit/Bundle definition validation for the Studio editing experience.
@@ -153,875 +140,6 @@ async function validateBundle(fs, kitRoot, name) {
 	}
 }
 //#endregion
-//#region src/panel-preview.ts
-/** Definition-only Panel preview preparation; never writes or runs a Bundle. */
-function failure(code, message) {
-	return { diagnostics: [{
-		code,
-		message
-	}] };
-}
-/** Shared finalization over a real Core-compiled Bundle, with optional real Kit context. */
-function finalizeStudioPanelPreview(input) {
-	const { compiled, revision, sampleSource } = input;
-	const bundle = { ...input.bundle }, kit = input.kit === void 0 ? void 0 : { ...input.kit };
-	if (!Number.isSafeInteger(revision) || revision < 0 || typeof sampleSource !== "string") return failure("preview.request", "Select an exact Bundle, text sample JSON and a non-negative editor revision.");
-	if ((compiled.catalogName ?? compiled.name) !== bundle.name || String(compiled.version) !== bundle.version) return failure("preview.bundle_pin", "The source does not match the selected Bundle version.");
-	const panelYaml = compiled.metadata?.panelYaml;
-	if (typeof panelYaml !== "string") return failure("preview.not_declarative", "Only an existing declarative Panel can be previewed.");
-	const schema = compiled.metadata?.schemaDocument;
-	if (schema === void 0) return failure("preview.definition", "The loader did not produce a declarative Panel and schema.");
-	if (new TextEncoder().encode(sampleSource).length > 262144) return failure("preview.size", "Sample JSON is limited to 256 KiB.");
-	let sample;
-	try {
-		sample = JSON.parse(sampleSource);
-	} catch {
-		return failure("preview.sample_json", "The preview sample must be valid JSON.");
-	}
-	if (sample === null || typeof sample !== "object" || Array.isArray(sample)) return failure("preview.sample_json", "The preview sample must be a JSON object.");
-	try {
-		const errors = compileSchema(schema)(sample);
-		if (errors.length > 0) return { diagnostics: errors.map((message) => ({
-			code: "preview.sample_schema",
-			message
-		})) };
-		return {
-			preview: {
-				revision,
-				...kit === void 0 ? {} : { kit },
-				bundle,
-				panelYaml,
-				sample
-			},
-			diagnostics: []
-		};
-	} catch (error) {
-		return failure("preview.definition", error instanceof Error ? error.message : String(error));
-	}
-}
-/**
-* Compile one Panel edit against an exact, host-resolved Kit snapshot.
-*
-* The host must supply an immutable/read-confined source port and root for the
-* selected pin, not arbitrary browser paths or a mutable production project.
-* Only panel.yaml is overlaid. All schemas, methods, locales and renderer
-* contracts still come from that snapshot and pass through the runtime loader.
-* The returned sample is fresh JSON and can be edited in a sandboxed preview;
-* this function grants no artifact, filesystem, model or publication authority.
-* A preview consumer must discard a result if its editor revision has changed.
-*/
-async function prepareStudioPanelPreview(source, kitRoot, request, loadOptions = {}) {
-	const { panelSource, sampleSource, revision } = request;
-	const kitPin = { ...request.kit };
-	const bundlePin = { ...request.bundle };
-	if (!isAbsolute(kitRoot) || !/^[a-z][a-z0-9_]*$/.test(bundlePin.name) || !Number.isSafeInteger(revision) || revision < 0 || typeof panelSource !== "string" || typeof sampleSource !== "string") return failure("preview.request", "Select an exact Bundle and a non-negative editor revision.");
-	if (new TextEncoder().encode(panelSource).length > 1048576 || new TextEncoder().encode(sampleSource).length > 262144) return failure("preview.size", "Panel source is limited to 1 MiB and sample JSON to 256 KiB.");
-	let sample;
-	try {
-		sample = JSON.parse(sampleSource);
-	} catch {
-		return failure("preview.sample_json", "The preview sample must be valid JSON.");
-	}
-	if (sample === null || typeof sample !== "object" || Array.isArray(sample)) return failure("preview.sample_json", "The preview sample must be a JSON object.");
-	try {
-		const base = await loadStudioKit(source, kitRoot, loadOptions);
-		if (base.name !== kitPin.name || String(base.version) !== kitPin.version) return failure("preview.kit_pin", "The source does not match the selected Kit version.");
-		const bundle = base.skills.find((skill) => (skill.catalogName ?? skill.name) === bundlePin.name);
-		if (bundle === void 0 || String(bundle.version) !== bundlePin.version) return failure("preview.bundle_pin", "The source does not match the selected Bundle version.");
-		if (typeof bundle.metadata?.panelYaml !== "string") return failure("preview.not_declarative", "Only an existing declarative Panel can be edited in this preview.");
-		const panelPath = resolve(bundle.resourceRoot ?? resolve(kitRoot, "skills", bundle.name), "panel.yaml");
-		const compiled = (await loadStudioKit({
-			readText: (path) => resolve(path) === panelPath ? Promise.resolve(panelSource) : source.readText(path),
-			...source.readResource ? { readResource: (path) => resolve(path) === panelPath ? Promise.resolve({
-				kind: "text",
-				content: panelSource
-			}) : source.readResource(path) } : {},
-			listDir: (path) => source.listDir(path),
-			...source.isDirectory ? { isDirectory: (path) => source.isDirectory(path) } : {},
-			...source.realPath ? { realPath: (path) => source.realPath(path) } : {}
-		}, kitRoot, loadOptions)).skills.find((skill) => (skill.catalogName ?? skill.name) === bundlePin.name);
-		if (compiled === void 0) return failure("preview.bundle_pin", "The source does not match the selected Bundle version.");
-		return finalizeStudioPanelPreview({
-			compiled,
-			revision,
-			kit: kitPin,
-			bundle: bundlePin,
-			sampleSource
-		});
-	} catch (error) {
-		return failure("preview.definition", error instanceof Error ? error.message : String(error));
-	}
-}
-//#endregion
-//#region src/panel-drafts.ts
-/** Host-neutral, versioned Panel working copies; not Kit publication. */
-function checkText$1(panelSource, sampleSource) {
-	if (typeof panelSource !== "string" || typeof sampleSource !== "string" || new TextEncoder().encode(panelSource).length > 1048576 || new TextEncoder().encode(sampleSource).length > 262144) throw new Error("Panel source must be text ≤1 MiB; sample JSON text ≤256 KiB.");
-}
-function checkRevision$1(record, expected) {
-	if (!Number.isSafeInteger(expected) || record.revision !== expected) throw new Error("Draft changed elsewhere. Reopen the latest revision before saving.");
-}
-function content$1(record) {
-	const { id: _id, revision: _revision, ...value } = record;
-	return value;
-}
-/** Shared semantics used by host adapters; no filesystem or runtime tool access. */
-var StudioPanelDraftService = class {
-	repository;
-	sources;
-	constructor(repository, sources) {
-		this.repository = repository;
-		this.sources = sources;
-	}
-	async list() {
-		return (await this.repository.list()).map(({ id, revision, kit, bundle, confirmed }) => ({
-			id,
-			revision,
-			kit,
-			bundle,
-			confirmed
-		}));
-	}
-	read(id) {
-		return this.repository.read(id);
-	}
-	async create(input) {
-		const kitPin = { ...input.kit }, bundlePin = { ...input.bundle };
-		if (!/^[a-z][a-z0-9_]*$/.test(bundlePin.name)) throw new Error("Select an exact Bundle identity.");
-		const sampleSource = input.sampleSource;
-		const snapshot = await this.sources.capture(kitPin);
-		return this.createRetained(snapshot, kitPin, bundlePin, sampleSource);
-	}
-	/** Open only the retained snapshot; imported/template pins need not be installed. */
-	async createFromSnapshot(input) {
-		const kit = { ...input.kit }, bundle = { ...input.bundle }, sampleSource = input.sampleSource;
-		if (!/^[a-z][a-z0-9_]*$/.test(bundle.name)) throw new Error("Select an exact Bundle identity.");
-		return this.createRetained(await this.sources.open(input.snapshotId), kit, bundle, sampleSource);
-	}
-	async createRetained(snapshot, kitPin, bundlePin, sampleSource) {
-		const kit = await loadStudioKit(snapshot.fs, snapshot.root, snapshot.loadOptions);
-		if (kit.name !== kitPin.name || String(kit.version) !== kitPin.version) throw new Error("Source does not match selected Kit pin.");
-		const bundle = kit.skills.find((entry) => entry.name === bundlePin.name && String(entry.version) === bundlePin.version);
-		if (!bundle || typeof bundle.metadata?.panelYaml !== "string") throw new Error("Select an installed declarative Bundle version.");
-		const panelSource = await snapshot.fs.readText(join(bundle.resourceRoot ?? join(snapshot.root, "skills", bundlePin.name), "panel.yaml"));
-		if (panelSource === void 0) throw new Error("Panel source is missing.");
-		const panel = bundle.metadata.panelManifest;
-		const sample = sampleSource ?? JSON.stringify(panel.initial_values ?? {}, null, 2);
-		checkText$1(panelSource, sample);
-		return this.repository.create({
-			kit: kitPin,
-			bundle: bundlePin,
-			baseSnapshot: snapshot.id,
-			panelSource,
-			sampleSource: sample,
-			confirmed: false
-		});
-	}
-	/** Saving incomplete source is allowed; confirmation requires successful compilation. */
-	async save(input) {
-		const { id, expectedRevision, panelSource, sampleSource } = input;
-		checkText$1(panelSource, sampleSource);
-		const current = await this.repository.read(id);
-		checkRevision$1(current, expectedRevision);
-		if (current.confirmed) throw new Error("Confirmed snapshot is locked. Create a new draft to edit it.");
-		return this.repository.replace(id, expectedRevision, {
-			...content$1(current),
-			panelSource,
-			sampleSource
-		});
-	}
-	/** Compile an unsaved editor revision without persisting or touching any project. */
-	async preview(input) {
-		const { id, expectedRevision, panelSource, sampleSource, revision } = input;
-		checkText$1(panelSource, sampleSource);
-		const current = await this.repository.read(id);
-		checkRevision$1(current, expectedRevision);
-		const snapshot = await this.sources.open(current.baseSnapshot);
-		return prepareStudioPanelPreview(snapshot.fs, snapshot.root, {
-			kit: current.kit,
-			bundle: current.bundle,
-			revision,
-			panelSource,
-			sampleSource
-		}, snapshot.loadOptions);
-	}
-	async confirm(input) {
-		const { id, expectedRevision } = input;
-		const current = await this.repository.read(id);
-		checkRevision$1(current, expectedRevision);
-		const result = await this.preview({
-			...current,
-			expectedRevision
-		});
-		if (!result.preview || result.diagnostics.length) return result;
-		const draft = current.confirmed ? current : await this.repository.replace(id, expectedRevision, {
-			...content$1(current),
-			confirmed: true
-		});
-		return {
-			...result,
-			draft
-		};
-	}
-	/** Start another editable revision, sharing the immutable base bytes. */
-	async fork(id) {
-		const current = await this.repository.read(id);
-		return this.repository.create({
-			...content$1(current),
-			confirmed: false
-		});
-	}
-};
-//#endregion
-//#region src/kit-drafts.ts
-/** Kit-owned working-copy edits over retained source; never catalog publication. */
-function checkText(mindset, relations) {
-	if (typeof mindset !== "string" || relations !== null && typeof relations !== "string" || new TextEncoder().encode(mindset).length > 1048576 || relations !== null && new TextEncoder().encode(relations).length > 1048576) throw new Error("Kit-owned sources must be UTF-8 text of at most 1 MiB each.");
-}
-function checkRevision(current, expected) {
-	if (!Number.isSafeInteger(expected) || current.revision !== expected) throw new Error("Draft changed elsewhere. Reopen the latest revision.");
-}
-function content(record) {
-	const { id: _id, revision: _revision, ...value } = record;
-	return structuredClone(value);
-}
-function samePins(a, b) {
-	const keys = (pins) => pins.map((pin) => `${pin.name}@${pin.version}`).sort();
-	return JSON.stringify(keys(a)) === JSON.stringify(keys(b));
-}
-/** Only two Kit-owned files are overlaid; no user-supplied paths or live FS fallback. */
-function overlay(snapshot, record) {
-	const root = resolve(snapshot.root);
-	const replacements = /* @__PURE__ */ new Map([[resolve(root, "mindset.md"), record.mindsetSource], [resolve(root, "relations.yaml"), record.relationsSource]]);
-	return {
-		readText: (path) => replacements.has(resolve(path)) ? Promise.resolve(replacements.get(resolve(path)) ?? void 0) : snapshot.fs.readText(path),
-		...snapshot.fs.readResource ? { readResource: async (path) => {
-			if (!replacements.has(resolve(path))) return snapshot.fs.readResource(path);
-			const content = replacements.get(resolve(path));
-			return content == null ? void 0 : {
-				kind: "text",
-				content
-			};
-		} } : {},
-		async listDir(path) {
-			if (resolve(path) !== root) return snapshot.fs.listDir(path);
-			const entries = new Set(await snapshot.fs.listDir(path));
-			entries.add("mindset.md");
-			if (record.relationsSource === null) entries.delete("relations.yaml");
-			else entries.add("relations.yaml");
-			return [...entries].sort();
-		},
-		...snapshot.fs.isDirectory ? { isDirectory: (path) => replacements.has(resolve(path)) ? Promise.resolve(false) : snapshot.fs.isDirectory(path) } : {},
-		...snapshot.fs.realPath ? { realPath: (path) => replacements.has(resolve(path)) ? Promise.resolve(resolve(path)) : snapshot.fs.realPath(path) } : {}
-	};
-}
-var StudioKitDraftService = class {
-	repository;
-	sources;
-	constructor(repository, sources) {
-		this.repository = repository;
-		this.sources = sources;
-	}
-	async list() {
-		return (await this.repository.list()).map(({ id, revision, baseKit, confirmed }) => ({
-			id,
-			revision,
-			baseKit: { ...baseKit },
-			confirmed
-		}));
-	}
-	async read(id) {
-		return structuredClone(await this.repository.read(id));
-	}
-	async create(input) {
-		const pin = { ...input.kit };
-		const snapshot = await this.sources.capture(pin);
-		return this.createRetained(snapshot, pin);
-	}
-	/** Adopt retained, independently validated content; never resolve an installed pin. */
-	async createFromSnapshot(input) {
-		const pin = { ...input.kit }, snapshotId = input.snapshotId;
-		return this.createRetained(await this.sources.open(snapshotId), pin);
-	}
-	async createRetained(snapshot, pin) {
-		const kit = await loadStudioKit(snapshot.fs, snapshot.root, snapshot.loadOptions);
-		if (kit.name !== pin.name || String(kit.version) !== pin.version) throw new Error("Source does not match the selected Kit pin.");
-		const mindsetSource = await snapshot.fs.readText(resolve(snapshot.root, "mindset.md"));
-		if (mindsetSource === void 0) throw new Error("Kit Mindset source is missing.");
-		const relationsSource = await snapshot.fs.readText(resolve(snapshot.root, "relations.yaml")) ?? null;
-		checkText(mindsetSource, relationsSource);
-		return this.repository.create({
-			baseKit: pin,
-			baseSnapshot: snapshot.id,
-			mounts: kit.skills.map((bundle) => ({
-				name: bundle.name,
-				version: String(bundle.version)
-			})),
-			mindsetSource,
-			relationsSource,
-			confirmed: false
-		});
-	}
-	/** Invalid intermediate edits can be retained, but cannot be confirmed. */
-	async save(input) {
-		const { id, expectedRevision, mindsetSource, relationsSource } = input;
-		checkText(mindsetSource, relationsSource);
-		const current = await this.read(id);
-		checkRevision(current, expectedRevision);
-		if (current.confirmed) throw new Error("Confirmed Kit draft is locked. Fork it to continue editing.");
-		return this.repository.replace(id, expectedRevision, {
-			...content(current),
-			mindsetSource,
-			relationsSource
-		});
-	}
-	async compile(current) {
-		checkText(current.mindsetSource, current.relationsSource);
-		const snapshot = await this.sources.open(current.baseSnapshot);
-		const base = await loadStudioKit(snapshot.fs, snapshot.root, snapshot.loadOptions);
-		if (base.name !== current.baseKit.name || String(base.version) !== current.baseKit.version || !samePins(current.mounts, base.skills.map((bundle) => ({
-			name: bundle.name,
-			version: String(bundle.version)
-		})))) throw new Error("Retained source does not match the working-copy base and mount pins.");
-		const fs = overlay(snapshot, current);
-		const candidate = await loadStudioKit(fs, snapshot.root, snapshot.loadOptions);
-		if (!samePins(current.mounts, candidate.skills.map((bundle) => ({
-			name: bundle.name,
-			version: String(bundle.version)
-		})))) throw new Error("Bundle mounts are read-only in this editor. Use an explicit catalog mount operation.");
-		return {
-			snapshot,
-			fs,
-			candidate
-		};
-	}
-	async validate(input) {
-		const { id, expectedRevision } = input;
-		const current = await this.read(id);
-		checkRevision(current, expectedRevision);
-		try {
-			const { candidate } = await this.compile(current);
-			return {
-				valid: true,
-				diagnostics: knowledgeDeclarationWarnings(candidate.skills),
-				revision: current.revision,
-				candidateKit: {
-					name: candidate.name,
-					version: String(candidate.version)
-				}
-			};
-		} catch (error) {
-			return {
-				valid: false,
-				revision: current.revision,
-				diagnostics: [{
-					code: "kit_draft.definition",
-					message: error instanceof Error ? error.message : String(error)
-				}]
-			};
-		}
-	}
-	async preview(input) {
-		const { id, expectedRevision, sampleSource } = input;
-		const bundle = { ...input.bundle };
-		const current = await this.read(id);
-		checkRevision(current, expectedRevision);
-		try {
-			const { fs, snapshot, candidate } = await this.compile(current);
-			if (!current.mounts.some((pin) => pin.name === bundle.name && pin.version === bundle.version)) throw new Error("Select an exact mounted Bundle.");
-			const mounted = candidate.skills.find((skill) => skill.name === bundle.name && String(skill.version) === bundle.version);
-			const panelSource = await fs.readText(resolve(mounted?.resourceRoot ?? resolve(snapshot.root, "skills", bundle.name), "panel.yaml"));
-			if (panelSource === void 0) throw new Error("This Bundle has no declarative Panel preview.");
-			return prepareStudioPanelPreview(fs, snapshot.root, {
-				kit: {
-					name: candidate.name,
-					version: String(candidate.version)
-				},
-				bundle,
-				revision: current.revision,
-				panelSource,
-				sampleSource
-			}, snapshot.loadOptions);
-		} catch (error) {
-			return { diagnostics: [{
-				code: "kit_draft.preview",
-				message: error instanceof Error ? error.message : String(error)
-			}] };
-		}
-	}
-	async confirm(input) {
-		const { id, expectedRevision } = input;
-		const current = await this.read(id);
-		checkRevision(current, expectedRevision);
-		const result = await this.validate({
-			id,
-			expectedRevision
-		});
-		if (!result.valid) return result;
-		const draft = current.confirmed ? current : await this.repository.replace(id, expectedRevision, {
-			...content(current),
-			confirmed: true
-		});
-		return {
-			...result,
-			draft
-		};
-	}
-	async fork(id) {
-		return this.repository.create({
-			...content(await this.read(id)),
-			confirmed: false
-		});
-	}
-};
-//#endregion
-//#region src/content-archive.ts
-/** Portable regular-file content, not a plugin installer or publication format. */
-const MAX_BYTES = 16777216;
-const MAX_JSON = 33554432;
-const MAX_FILES = 4096;
-const HASH = /^[0-9a-f]{64}$/;
-const sha = (value) => createHash("sha256").update(value).digest("hex");
-const OPAQUE_RESOURCE_EXTENSIONS = /* @__PURE__ */ new Set([
-	".bin",
-	".png",
-	".jpg",
-	".jpeg",
-	".gif",
-	".webp",
-	".avif",
-	".ico",
-	".bmp",
-	".pdf",
-	".woff",
-	".woff2",
-	".ttf",
-	".otf",
-	".eot",
-	".wasm"
-]);
-/** Shared by archive capture and virtual import; full bytes and directory entries remain intact. */
-function readStudioArchiveResource(path, bytes) {
-	return OPAQUE_RESOURCE_EXTENSIONS.has(extname(path).toLowerCase()) ? {
-		kind: "opaque",
-		byteLength: bytes.byteLength
-	} : {
-		kind: "text",
-		content: new TextDecoder("utf-8", { fatal: true }).decode(bytes)
-	};
-}
-function object(value) {
-	if (!value || typeof value !== "object" || Array.isArray(value)) throw Error("Invalid archive object.");
-	return value;
-}
-function keys(value, allowed) {
-	if (Object.keys(value).length !== allowed.length || allowed.some((key) => !Object.hasOwn(value, key))) throw Error("Unknown or missing archive fields.");
-}
-function text(value, limit) {
-	if (typeof value !== "string" || !value.trim() || Buffer.byteLength(value) > limit || /[\u0000-\u001f\u007f]/u.test(value)) throw Error("Invalid archive metadata text.");
-	return value;
-}
-function pin(value, kind) {
-	const data = object(value);
-	keys(data, ["name", "version"]);
-	const name = text(data.name, 128), version = text(data.version, 32);
-	if (!/^[a-z][a-z0-9_]*$/.test(name)) throw Error("Unsupported archive content identity.");
-	safePath(name);
-	safePath(version);
-	if (kind === "kit") DesignKitVersion(version);
-	else DesignBundleVersion(version);
-	return Object.freeze({
-		name,
-		version
-	});
-}
-function safePath(value) {
-	const path = text(value, 1024);
-	if (path !== path.normalize("NFC") || /[\\:*?"<>|]/u.test(path)) throw Error("Unsafe archive path.");
-	if (/\.(exe|dll|node|so|dylib|com|msi|sys)$/iu.test(path)) throw Error("Native executable payload propagation is unsupported.");
-	for (const part of path.split("/")) if (!part || part === "." || part === ".." || [".git", "node_modules"].includes(part.toLowerCase()) || /[. ]$/u.test(part) || /^(con|prn|aux|nul|com[1-9¹²³]|lpt[1-9¹²³])(?:\.|$)/iu.test(part)) throw Error("Unsafe archive path.");
-	return path;
-}
-function canonical(data) {
-	return JSON.stringify(data);
-}
-/** Parse a bounded JSON envelope; hashes include metadata and every original byte. */
-function readStudioContentArchive(source) {
-	if (typeof source !== "string" || Buffer.byteLength(source) > MAX_JSON) throw Error("Archive JSON exceeds 32 MiB.");
-	const raw = object(JSON.parse(source));
-	keys(raw, [
-		"format",
-		"kind",
-		"pin",
-		"provenance",
-		"dependencies",
-		"files",
-		"sha256"
-	]);
-	if (raw.format !== "studio-content-archive/v1" || raw.kind !== "kit" && raw.kind !== "bundle") throw Error("Unsupported archive format.");
-	const identity = pin(raw.pin, raw.kind), provenance = object(raw.provenance);
-	keys(provenance, ["source", "license"]);
-	const origin = Object.freeze({
-		source: text(provenance.source, 2048),
-		license: text(provenance.license, 2048)
-	});
-	if (!Array.isArray(raw.dependencies) || raw.dependencies.length > MAX_FILES) throw Error("Invalid archive dependencies.");
-	const dependencies = raw.dependencies.map((value) => pin(value, "bundle"));
-	const names = /* @__PURE__ */ new Set();
-	for (const dependency of dependencies) {
-		if (names.has(dependency.name) || raw.kind === "bundle" && dependency.name === identity.name) throw Error("Duplicate or self archive dependency.");
-		names.add(dependency.name);
-	}
-	if (!Array.isArray(raw.files) || !raw.files.length || raw.files.length > MAX_FILES) throw Error("Invalid archive file count.");
-	let total = 0;
-	const paths = /* @__PURE__ */ new Map();
-	const prefixes = /* @__PURE__ */ new Map();
-	const directories = /* @__PURE__ */ new Set();
-	const files = raw.files.map((value) => {
-		const entry = object(value);
-		keys(entry, [
-			"path",
-			"base64",
-			"bytes",
-			"sha256"
-		]);
-		const path = safePath(entry.path), folded = path.toLowerCase();
-		const segments = path.split("/");
-		for (let index = 1; index <= segments.length; index++) {
-			const prefix = segments.slice(0, index).join("/"), foldedPrefix = prefix.toLowerCase();
-			if (prefixes.has(foldedPrefix) && prefixes.get(foldedPrefix) !== prefix) throw Error("Case-conflicting archive path segments.");
-			prefixes.set(foldedPrefix, prefix);
-		}
-		if (paths.has(folded)) throw Error("Duplicate or case-conflicting archive paths.");
-		paths.set(folded, path);
-		const parts = folded.split("/");
-		parts.pop();
-		while (parts.length) {
-			directories.add(parts.join("/"));
-			parts.pop();
-		}
-		if (!Number.isSafeInteger(entry.bytes) || entry.bytes < 0 || entry.bytes > MAX_BYTES - total) throw Error("Archive content exceeds 16 MiB or has an invalid byte count.");
-		if (typeof entry.base64 !== "string" || entry.base64.length > Math.ceil(MAX_BYTES / 3) * 4 || entry.base64.length % 4 || !/^[A-Za-z0-9+/]*={0,2}$/u.test(entry.base64)) throw Error("Invalid archive base64.");
-		const bytes = Buffer.from(entry.base64, "base64");
-		if (bytes.toString("base64") !== entry.base64 || entry.bytes !== bytes.length || typeof entry.sha256 !== "string" || !HASH.test(entry.sha256) || sha(bytes) !== entry.sha256) throw Error("Archive file integrity mismatch.");
-		total += bytes.length;
-		if (total > MAX_BYTES) throw Error("Archive content exceeds 16 MiB.");
-		return Object.freeze({
-			path,
-			base64: entry.base64,
-			bytes: bytes.length,
-			sha256: entry.sha256
-		});
-	}).sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0);
-	if ([...directories].some((path) => paths.has(path))) throw Error("Archive file/directory collision.");
-	const data = {
-		format: raw.format,
-		kind: raw.kind,
-		pin: identity,
-		provenance: origin,
-		dependencies: Object.freeze(dependencies),
-		files: Object.freeze(files)
-	};
-	if (typeof raw.sha256 !== "string" || !HASH.test(raw.sha256) || sha(canonical(data)) !== raw.sha256) throw Error("Archive envelope integrity mismatch.");
-	return Object.freeze({
-		...data,
-		sha256: raw.sha256
-	});
-}
-/** Pure virtual source: explicit text reads stay strict; attached byte assets remain opaque. */
-function virtualSource(files, root) {
-	const map = new Map(files.map((file) => [file.path, file.base64]));
-	const key = (path) => {
-		const result = relative(root, resolve(path));
-		if (isAbsolute(result) || result === ".." || result.startsWith(`..${sep}`)) throw Error("Archive validation path escapes source.");
-		return result.split(sep).join("/");
-	};
-	const children = (path) => {
-		const prefix = key(path);
-		const head = prefix ? `${prefix}/` : "";
-		return [...new Set([...map.keys()].filter((file) => file.startsWith(head)).map((file) => file.slice(head.length).split("/")[0]))].sort();
-	};
-	return {
-		async readText(path) {
-			const content = map.get(key(path));
-			return content === void 0 ? void 0 : new TextDecoder("utf-8", { fatal: true }).decode(Buffer.from(content, "base64"));
-		},
-		async readResource(path) {
-			const content = map.get(key(path));
-			return content === void 0 ? void 0 : readStudioArchiveResource(path, Buffer.from(content, "base64"));
-		},
-		async listDir(path) {
-			return children(path);
-		},
-		async isDirectory(path) {
-			return children(path).length > 0;
-		},
-		async realPath(path) {
-			key(path);
-			return resolve(path);
-		}
-	};
-}
-const bundlePin = (skill) => ({
-	name: skill.catalogName ?? skill.name,
-	version: String(skill.version)
-});
-const samePin = (left, right) => left.name === right.name && left.version === right.version;
-const bundlePrefix = (identity) => `bundles/${identity.name}/${identity.version}/`;
-const within = (root, path) => {
-	const rel = relative(root, resolve(path));
-	return !isAbsolute(rel) && rel !== ".." && !rel.startsWith(`..${sep}`);
-};
-/** All reads dispatch to captured bytes; there is no live filesystem fallback. */
-function sourceView(snapshot) {
-	const bundles = snapshot.bundles ?? [];
-	const sources = [...bundles.map((bundle) => bundle.snapshot), snapshot].sort((a, b) => b.root.length - a.root.length);
-	const owner = (path) => {
-		const source = sources.find((source) => within(source.root, path));
-		if (!source) throw Error("Archive validation path escapes captured sources.");
-		return source;
-	};
-	return {
-		fs: {
-			readText: (path) => owner(path).fs.readText(path),
-			async readResource(path) {
-				const source = owner(path);
-				if (typeof source.readBytes === "function") return readStudioArchiveResource(path, await source.readBytes(path));
-				if (source.fs.readResource) return source.fs.readResource(path);
-				const content = await source.fs.readText(path);
-				return content === void 0 ? void 0 : {
-					kind: "text",
-					content
-				};
-			},
-			listDir: (path) => owner(path).fs.listDir(path),
-			async isDirectory(path) {
-				const source = owner(path);
-				return source.fs.isDirectory ? source.fs.isDirectory(path) : (await source.fs.listDir(path)).length > 0;
-			},
-			async realPath(path) {
-				const source = owner(path);
-				return source.fs.realPath ? source.fs.realPath(path) : resolve(path);
-			}
-		},
-		options: {
-			sourceId: snapshot.sourceId,
-			bundles: bundles.map((bundle) => ({
-				name: bundle.name,
-				version: bundle.version,
-				rootDir: bundle.snapshot.root,
-				sourceId: bundle.sourceId
-			}))
-		}
-	};
-}
-function archiveSnapshot(archive) {
-	const root = resolve("/studio-content-archive-virtual");
-	const sourceId = `archive:untrusted:${archive.sha256}`;
-	const independent = archive.kind === "kit" && archive.files.some((file) => file.path === "kit.yaml");
-	const filesAt = (files, root) => {
-		const fs = virtualSource(files, root);
-		return {
-			root,
-			sourceId,
-			fs,
-			async listFiles() {
-				return files.map((file) => file.path);
-			},
-			async readBytes(path) {
-				const file = files.find((file) => resolve(root, file.path) === resolve(path));
-				if (!file) throw Error("Missing archive source file.");
-				return Buffer.from(file.base64, "base64");
-			}
-		};
-	};
-	if (!independent) return filesAt(archive.files, root);
-	const bundleFiles = /* @__PURE__ */ new Set();
-	const bundles = archive.dependencies.map((identity) => {
-		const prefix = bundlePrefix(identity);
-		const files = archive.files.filter((file) => file.path.startsWith(prefix)).map((file) => {
-			bundleFiles.add(file.path);
-			return Object.freeze({
-				...file,
-				path: file.path.slice(prefix.length)
-			});
-		});
-		if (!files.length) throw Error(`Archive is missing exact Bundle content: ${identity.name}@${identity.version}`);
-		return {
-			...identity,
-			sourceId,
-			snapshot: filesAt(files, resolve(root, prefix))
-		};
-	});
-	if (archive.files.some((file) => file.path.startsWith("bundles/") && !bundleFiles.has(file.path))) throw Error("Archive contains unreferenced Bundle content.");
-	return {
-		...filesAt(archive.files.filter((file) => !bundleFiles.has(file.path)), root),
-		bundles
-	};
-}
-/** No writes, extraction, permission restoration, script execution, installation or publication. */
-async function prepareStudioContentImport(source, options = {}) {
-	const archive = readStudioContentArchive(source);
-	let validation;
-	let contents = Object.freeze([]);
-	let requiresTrustReview = archive.files.some((file) => /\.(m?js|cjs|[cm]?tsx?|sh|ps1|cmd|bat|py|wasm)$/iu.test(file.path));
-	try {
-		const snapshot = archiveSnapshot(archive), view = sourceView(snapshot);
-		const selected = [];
-		if (archive.kind === "kit") {
-			const kit = await loadStudioKit(view.fs, snapshot.root, view.options);
-			selected.push(...kit.skills);
-			if (kit.name !== archive.pin.name || String(kit.version) !== archive.pin.version) throw Error("Archive Kit identity disagrees with source.");
-			if (JSON.stringify(kit.skills.map(bundlePin)) !== JSON.stringify(archive.dependencies)) throw Error("Archive Kit member pins disagree with source.");
-			if (snapshot.bundles) {
-				const kitFiles = archive.files.filter((file) => !file.path.startsWith("bundles/"));
-				contents = Object.freeze([Object.freeze({
-					kind: "kit",
-					pin: archive.pin,
-					files: Object.freeze(kitFiles)
-				}), ...snapshot.bundles.map((bundle) => Object.freeze({
-					kind: "bundle",
-					pin: Object.freeze({
-						name: bundle.name,
-						version: bundle.version
-					}),
-					files: Object.freeze(archive.files.filter((file) => file.path.startsWith(bundlePrefix(bundle))).map((file) => Object.freeze({
-						...file,
-						path: file.path.slice(bundlePrefix(bundle).length)
-					})))
-				}))]);
-			} else contents = Object.freeze([Object.freeze({
-				kind: "kit",
-				pin: archive.pin,
-				files: archive.files
-			})]);
-		} else {
-			const bundle = await loadDesignBundle(snapshot.fs, {
-				rootDir: snapshot.root,
-				sourceId: snapshot.sourceId
-			}, archive.pin);
-			selected.push(bundle.skill);
-			const context = options.validationContext;
-			if (archive.dependencies.length && (!context || !isAbsolute(context.root))) throw Error("Independent Bundle dependency validation requires a host-resolved immutable Kit context.");
-			if (context) {
-				if (!isAbsolute(context.root)) throw Error("Archive context must have a host-resolved absolute root.");
-				const contextView = sourceView(context);
-				const kit = await loadStudioKit(contextView.fs, context.root, contextView.options);
-				if (archive.dependencies.some((dependency) => !kit.skills.some((skill) => samePin(bundlePin(skill), dependency)))) throw Error("Archive Bundle dependency is unresolved in context.");
-				const existing = kit.skills.find((skill) => samePin(bundlePin(skill), archive.pin));
-				if (existing?.resourceRoot) {
-					const local = virtualSource(archive.files, existing.resourceRoot);
-					const owns = (path) => within(existing.resourceRoot, path);
-					await loadStudioKit({
-						readText: (path) => owns(path) ? local.readText(path) : contextView.fs.readText(path),
-						readResource: (path) => owns(path) ? local.readResource(path) : contextView.fs.readResource(path),
-						listDir: (path) => owns(path) ? local.listDir(path) : contextView.fs.listDir(path),
-						async isDirectory(path) {
-							return owns(path) ? local.isDirectory(path) : contextView.fs.isDirectory(path);
-						},
-						async realPath(path) {
-							return owns(path) ? resolve(path) : contextView.fs.realPath(path);
-						}
-					}, context.root, contextView.options);
-				}
-			}
-			contents = Object.freeze([Object.freeze({
-				kind: "bundle",
-				pin: archive.pin,
-				files: archive.files
-			})]);
-		}
-		requiresTrustReview ||= selected.some((skill) => {
-			const manifest = skill.metadata?.skillManifest;
-			const rules = skill.metadata?.validationDocument;
-			return manifest?.presentation?.mode === "native" || !!rules?.rules?.some((rule) => typeof rule.check?.driver === "string");
-		});
-		validation = Object.freeze({
-			valid: true,
-			diagnostics: Object.freeze([])
-		});
-	} catch (error) {
-		contents = Object.freeze([]);
-		validation = Object.freeze({
-			valid: false,
-			diagnostics: Object.freeze([Object.freeze({
-				code: "archive.definition",
-				message: error instanceof Error ? error.message : String(error),
-				subject: archive.pin.name
-			})])
-		});
-	}
-	return Object.freeze({
-		archive,
-		files: archive.files,
-		contents,
-		executionGranted: false,
-		requiresTrustReview,
-		validation
-	});
-}
-/** Capture only immutable host snapshots, preserving full exact referenced trees. */
-async function exportStudioContentArchive(snapshot, input) {
-	const request = JSON.parse(JSON.stringify(input));
-	if (!isAbsolute(snapshot.root)) throw Error("Archive source root must be host-resolved absolute.");
-	const view = sourceView(snapshot), kit = await loadStudioKit(view.fs, snapshot.root, view.options);
-	const selected = request.kind === "kit" ? kit : kit.skills.find((skill) => samePin(bundlePin(skill), request.pin));
-	if (!selected || !samePin(request.kind === "kit" ? {
-		name: selected.name,
-		version: String(selected.version)
-	} : bundlePin(selected), request.pin)) throw Error("Export pin disagrees with snapshot.");
-	const files = [];
-	let total = 0;
-	const append = async (source, prefix, selectPrefix = "") => {
-		const all = await source.listFiles();
-		if (all.length > MAX_FILES) throw Error("Snapshot file count exceeds 4096.");
-		for (const path of [...all].sort()) {
-			safePath(path);
-			if (selectPrefix && !path.startsWith(selectPrefix)) continue;
-			const target = prefix + path.slice(selectPrefix.length);
-			safePath(target);
-			const bytes = await source.readBytes(resolve(source.root, path));
-			total += bytes.byteLength;
-			if (total > MAX_BYTES || files.length >= MAX_FILES) throw Error("Archive content exceeds 16 MiB or 4096 files.");
-			files.push({
-				path: target,
-				base64: Buffer.from(bytes).toString("base64"),
-				bytes: bytes.byteLength,
-				sha256: sha(bytes)
-			});
-		}
-	};
-	if (snapshot.bundles) {
-		const referenced = kit.skills.map((skill) => {
-			const identity = bundlePin(skill), matches = snapshot.bundles.filter((bundle) => samePin(bundle, identity));
-			if (matches.length !== 1) throw Error("Missing or ambiguous exact Bundle snapshot.");
-			return matches[0];
-		});
-		if (request.kind === "kit") {
-			if ((await snapshot.listFiles()).some((path) => path === "bundles" || path.startsWith("bundles/"))) throw Error("Kit-owned files collide with archive Bundle transport paths.");
-			await append(snapshot, "");
-			for (const bundle of referenced) await append(bundle.snapshot, bundlePrefix(bundle));
-		} else await append(referenced.find((bundle) => samePin(bundle, request.pin)).snapshot, "");
-	} else await append(snapshot, "", request.kind === "bundle" ? `skills/${selected.name}/` : "");
-	files.sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0);
-	const data = {
-		format: "studio-content-archive/v1",
-		kind: request.kind,
-		pin: request.pin,
-		provenance: request.provenance,
-		dependencies: request.kind === "kit" ? kit.skills.map(bundlePin) : request.dependencies ?? [],
-		files
-	};
-	if (request.kind === "kit" && request.dependencies !== void 0 && JSON.stringify(request.dependencies) !== JSON.stringify(data.dependencies)) throw Error("Explicit Kit pins disagree with source membership.");
-	const serialized = JSON.stringify({
-		...data,
-		sha256: sha(canonical(data))
-	});
-	const prepared = await prepareStudioContentImport(serialized, { validationContext: snapshot });
-	if (!prepared.validation.valid) throw Error(prepared.validation.diagnostics[0].message);
-	return serialized;
-}
-//#endregion
 //#region src/composition.ts
 function pinKey(name, version) {
 	return `${name}\u0000${version}`;
@@ -1429,4 +547,4 @@ var StudioBundleSourceService = class {
 	}
 };
 //#endregion
-export { StudioBinaryContentError, StudioBundleSourceService, StudioKitDraftService, StudioManagementService, StudioPanelDraftService, buildStudioCompositionCatalog, exportStudioContentArchive, loadStudioKit, prepareStudioContentImport, prepareStudioPanelPreview, readStudioContentArchive, searchStudioBundles, snapshotKit, validateBundle, validateKit };
+export { STUDIO_INSTANCE_CHANGE_LIMITS, StudioBinaryContentError, StudioBundleSourceService, StudioManagementService, buildStudioCompositionCatalog, exportStudioContentArchive, exportStudioSourceArchive, loadStudioKit, normalizeStudioInstanceChanges, prepareStudioPanelPreview, readStudioContentArchive, searchStudioBundles, snapshotKit, validateBundle, validateKit };