@zveltio/cli 3.0.0-beta.3 → 3.0.0-beta.5

package/dist/index.js

@@ -1886,45 +1886,10 @@ var require_commander = __commonJS((exports) => {
   exports.InvalidOptionArgumentError = InvalidArgumentError;
 });
 
-// src/lib/publisher-tier.ts
-function tierAllowsInline(tier) {
-  return tier === "first-party" || tier === "verified";
-}
-async function resolvePublisherTier(opts = {}) {
-  if (opts.firstParty) {
-    return { tier: "first-party", allowsInline: true, source: "flag" };
-  }
-  const token = opts.token ?? process.env.ZVELTIO_REGISTRY_TOKEN;
-  const registryUrl = opts.registryUrl ?? process.env.ZVELTIO_REGISTRY_URL ?? "https://registry.zveltio.com";
-  if (token) {
-    try {
-      const base = registryUrl.replace(/\/$/, "");
-      const url = new URL(`${base}/api/dev/publisher/self`);
-      if (opts.keyId)
-        url.searchParams.set("keyId", opts.keyId);
-      const res = await fetch(url.toString(), {
-        headers: { Authorization: `Bearer ${token}` },
-        signal: AbortSignal.timeout(5000)
-      });
-      if (res.ok) {
-        const data = await res.json();
-        const tier = normalizeTier(data.tier);
-        if (tier) {
-          return { tier, allowsInline: tierAllowsInline(tier), source: "registry" };
-        }
-      }
-    } catch {}
-  }
-  return { tier: "community", allowsInline: false, source: "default" };
-}
-function normalizeTier(v) {
-  return v === "first-party" || v === "verified" || v === "community" ? v : null;
-}
-
 // ../sdk/dist/build/index.js
 import { createRequire } from "module";
-import { existsSync as existsSync8, readFileSync as readFileSync3 } from "fs";
-import { dirname, join as join8 } from "path";
+import { existsSync as existsSync5, readFileSync } from "fs";
+import { dirname, join as join5 } from "path";
 function escapeRegExp(s) {
   return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
@@ -1948,7 +1913,7 @@ function resolveSearchPaths(resolveFromDir) {
   for (let i = 0;i < 6; i++) {
     cur = dirname(cur);
     paths.push(cur);
-    if (existsSync8(join8(cur, "node_modules")))
+    if (existsSync5(join5(cur, "node_modules")))
       break;
   }
   return [...new Set(paths)];
@@ -1961,9 +1926,9 @@ function resolvePackageRoot(pkg, searchPaths) {
     throw new Error(`Cannot find package "${pkg}" from ${searchPaths[0]}. ` + `Run \`bun install\` in the extension directory or monorepo root.`);
   }
   for (;; ) {
-    const pkgJsonPath = join8(candidate, "package.json");
-    if (existsSync8(pkgJsonPath)) {
-      const manifest = JSON.parse(readFileSync3(pkgJsonPath, "utf8"));
+    const pkgJsonPath = join5(candidate, "package.json");
+    if (existsSync5(pkgJsonPath)) {
+      const manifest = JSON.parse(readFileSync(pkgJsonPath, "utf8"));
       if (manifest.name === pkg)
         return candidate;
     }
@@ -1977,16 +1942,16 @@ function resolvePackageRoot(pkg, searchPaths) {
 function resolvePackageEsmEntry(pkg, resolveFromDir) {
   const searchPaths = resolveSearchPaths(resolveFromDir);
   const root = resolvePackageRoot(pkg, searchPaths);
-  const pkgJsonPath = join8(root, "package.json");
-  const manifest = JSON.parse(readFileSync3(pkgJsonPath, "utf8"));
+  const pkgJsonPath = join5(root, "package.json");
+  const manifest = JSON.parse(readFileSync(pkgJsonPath, "utf8"));
   const dot = manifest.exports?.["."];
   let rel = pickExportTarget(dot);
   rel ??= manifest.module ?? manifest.main;
   if (!rel || typeof rel !== "string") {
     throw new Error(`Cannot determine ESM entry for package "${pkg}"`);
   }
-  const abs = join8(root, rel.replace(/^\.\//, ""));
-  if (!existsSync8(abs)) {
+  const abs = join5(root, rel.replace(/^\.\//, ""));
+  if (!existsSync5(abs)) {
     throw new Error(`ESM entry missing for "${pkg}": ${abs}`);
   }
   if (abs.endsWith(".d.ts")) {
@@ -2032,12 +1997,12 @@ var init_build = __esm(() => {
 });
 
 // src/lib/extension-bundle.ts
-import { existsSync as existsSync9, renameSync } from "fs";
-import { basename, dirname as dirname2, join as join9 } from "path";
+import { existsSync as existsSync6, renameSync } from "fs";
+import { basename, dirname as dirname2, join as join6 } from "path";
 async function bundleExtensionEngine(opts) {
   const outdir = dirname2(opts.outfile);
   const entryBase = basename(opts.entry).replace(/\.[^.]+$/, "");
-  const builtPath = join9(outdir, `${entryBase}.js`);
+  const builtPath = join6(outdir, `${entryBase}.js`);
   const result = await Bun.build({
     ...createExtensionBuildConfig({
       entry: opts.entry,
@@ -2053,7 +2018,7 @@ async function bundleExtensionEngine(opts) {
 `);
     throw new Error(messages || "Bun.build failed");
   }
-  if (!existsSync9(builtPath)) {
+  if (!existsSync6(builtPath)) {
     throw new Error(`Bun.build succeeded but ${builtPath} was not produced`);
   }
   if (builtPath !== opts.outfile) {
@@ -2066,23 +2031,58 @@ var init_extension_bundle = __esm(() => {
   EXTENSION_BUNDLE_CORE_DEPS2 = EXTENSION_BUNDLE_CORE_DEPS;
 });
 
+// src/lib/publisher-tier.ts
+function tierAllowsInline(tier) {
+  return tier === "first-party" || tier === "verified";
+}
+async function resolvePublisherTier(opts = {}) {
+  if (opts.firstParty) {
+    return { tier: "first-party", allowsInline: true, source: "flag" };
+  }
+  const token = opts.token ?? process.env.ZVELTIO_REGISTRY_TOKEN;
+  const registryUrl = opts.registryUrl ?? process.env.ZVELTIO_REGISTRY_URL ?? "https://registry.zveltio.com";
+  if (token) {
+    try {
+      const base = registryUrl.replace(/\/$/, "");
+      const url = new URL(`${base}/api/dev/publisher/self`);
+      if (opts.keyId)
+        url.searchParams.set("keyId", opts.keyId);
+      const res = await fetch(url.toString(), {
+        headers: { Authorization: `Bearer ${token}` },
+        signal: AbortSignal.timeout(5000)
+      });
+      if (res.ok) {
+        const data = await res.json();
+        const tier = normalizeTier(data.tier);
+        if (tier) {
+          return { tier, allowsInline: tierAllowsInline(tier), source: "registry" };
+        }
+      }
+    } catch {}
+  }
+  return { tier: "community", allowsInline: false, source: "default" };
+}
+function normalizeTier(v) {
+  return v === "first-party" || v === "verified" || v === "community" ? v : null;
+}
+
 // src/commands/extension-pack.ts
 var exports_extension_pack = {};
 __export(exports_extension_pack, {
   extensionPackCommand: () => extensionPackCommand
 });
 import { createHash } from "crypto";
-import { existsSync as existsSync10, readFileSync as readFileSync4, writeFileSync as writeFileSync2 } from "fs";
-import { join as join10, resolve } from "path";
+import { existsSync as existsSync7, readFileSync as readFileSync2, writeFileSync } from "fs";
+import { join as join7, resolve } from "path";
 function readManifest(dir) {
-  const path = join10(dir, "manifest.json");
-  if (!existsSync10(path)) {
+  const path = join7(dir, "manifest.json");
+  if (!existsSync7(path)) {
     throw new Error(`No manifest.json at ${path}.`);
   }
-  return JSON.parse(readFileSync4(path, "utf8"));
+  return JSON.parse(readFileSync2(path, "utf8"));
 }
 function writeManifest(dir, m) {
-  writeFileSync2(join10(dir, "manifest.json"), `${JSON.stringify(m, null, 2)}
+  writeFileSync(join7(dir, "manifest.json"), `${JSON.stringify(m, null, 2)}
 `, "utf8");
 }
 function validatePeerDeps(m) {
@@ -2097,13 +2097,13 @@ function validatePeerDeps(m) {
 }
 async function extensionPackCommand(opts) {
   const dir = resolve(opts.dir ?? process.cwd());
-  const entry = join10(dir, "engine", "index.ts");
-  const outfile = join10(dir, "engine", "index.js");
-  if (!existsSync10(entry)) {
+  const entry = join7(dir, "engine", "index.ts");
+  const outfile = join7(dir, "engine", "index.js");
+  if (!existsSync7(entry)) {
     throw new Error(`No engine/index.ts at ${entry}. ` + `Run from the extension root or pass --dir. Extensions without an engine entry don't need pack.`);
   }
   const manifest = readManifest(dir);
-  console.log(`\uD83D\uDCE6 Packing ${c7.bold(manifest.name)} v${manifest.version}`);
+  console.log(`\uD83D\uDCE6 Packing ${c5.bold(manifest.name)} v${manifest.version}`);
   const violations = validatePeerDeps(manifest);
   if (violations.length > 0) {
     throw new Error(`peerDependencies declared without engine.bundlePeers=true:
@@ -2113,7 +2113,7 @@ async function extensionPackCommand(opts) {
 ` + `Bun compiled binary cannot resolve bare specifiers from a ` + `dynamically-imported extension bundle, so external peer deps don't ` + `work in production. Either set engine.bundlePeers=true in ` + `manifest.json (and install the deps locally so Bun.build can ` + `inline them), or drop the peerDependencies entry if the import ` + `is dead code.`);
   }
   const externals = [];
-  console.log(`  ${c7.dim(`$ bun build ${entry} (zveltio extension-bundle plugin)`)}` + (externals.length > 0 ? c7.dim(` external:${externals.join(",")}`) : ""));
+  console.log(`  ${c5.dim(`$ bun build ${entry} (zveltio extension-bundle plugin)`)}` + (externals.length > 0 ? c5.dim(` external:${externals.join(",")}`) : ""));
   try {
     await bundleExtensionEngine({
       entry,
@@ -2122,10 +2122,10 @@ async function extensionPackCommand(opts) {
       sourcemap: opts.sourcemap,
       resolveDir: dir
     });
-  } catch (err2) {
-    throw new Error(`Bun bundle failed: ${err2.message}`);
+  } catch (err) {
+    throw new Error(`Bun bundle failed: ${err.message}`);
   }
-  const bundleBytes = readFileSync4(outfile);
+  const bundleBytes = readFileSync2(outfile);
   const engineSha256 = createHash("sha256").update(bundleBytes).digest("hex");
   const bundleText = bundleBytes.toString("utf8").replace(/\/\*[\s\S]*?\*\//g, "").replace(/(^|\s)\/\/[^\n]*/g, "$1");
   for (const dep of CORE_DEPS) {
@@ -2135,7 +2135,7 @@ async function extensionPackCommand(opts) {
     }
   }
   const sizeKb = Math.round(bundleBytes.byteLength / 1024);
-  console.log(`  ${c7.green("\u2713")} ${c7.bold(`engine/index.js`)} ${c7.dim(`(${sizeKb} KB, sha256=${engineSha256.slice(0, 12)}\u2026)`)}`);
+  console.log(`  ${c5.green("\u2713")} ${c5.bold(`engine/index.js`)} ${c5.dim(`(${sizeKb} KB, sha256=${engineSha256.slice(0, 12)}\u2026)`)}`);
   let resolvedIsolation = manifest.engine?.isolation;
   if (!resolvedIsolation) {
     const resolved = await resolvePublisherTier({
@@ -2145,9 +2145,9 @@ async function extensionPackCommand(opts) {
     });
     if (!resolved.allowsInline) {
       resolvedIsolation = "worker";
-      console.log(`  ${c7.yellow("\u26A0")} ${resolved.tier} publisher \u2014 auto-set ${c7.bold('engine.isolation: "worker"')} ` + `(community extensions can't run inline).`);
+      console.log(`  ${c5.yellow("\u26A0")} ${resolved.tier} publisher \u2014 auto-set ${c5.bold('engine.isolation: "worker"')} ` + `(community extensions can't run inline).`);
       if (resolved.source === "default") {
-        console.log(c7.dim("    Tier defaulted to community (no --first-party flag, no registry token). " + "If you are verified/first-party, pass --first-party or set ZVELTIO_REGISTRY_TOKEN."));
+        console.log(c5.dim("    Tier defaulted to community (no --first-party flag, no registry token). " + "If you are verified/first-party, pass --first-party or set ZVELTIO_REGISTRY_TOKEN."));
       }
     }
   }
@@ -2165,16 +2165,16 @@ async function extensionPackCommand(opts) {
       ...manifest.integrity?.archiveSha256 ? { archiveSha256: manifest.integrity.archiveSha256 } : {}
     };
     writeManifest(dir, manifest);
-    console.log(`  ${c7.green("\u2713")} manifest.json updated with engine + integrity blocks`);
+    console.log(`  ${c5.green("\u2713")} manifest.json updated with engine + integrity blocks`);
   }
-  console.log(`${c7.green("\u2713")} pack complete`);
+  console.log(`${c5.green("\u2713")} pack complete`);
 }
-var PEER_DEP_ALLOWLIST, CORE_DEPS, c7;
+var PEER_DEP_ALLOWLIST, CORE_DEPS, c5;
 var init_extension_pack = __esm(() => {
   init_extension_bundle();
   PEER_DEP_ALLOWLIST = new Set;
   CORE_DEPS = [...EXTENSION_BUNDLE_CORE_DEPS2];
-  c7 = {
+  c5 = {
     bold: (s) => `\x1B[1m${s}\x1B[0m`,
     green: (s) => `\x1B[32m${s}\x1B[0m`,
     red: (s) => `\x1B[31m${s}\x1B[0m`,
@@ -3229,39 +3229,36 @@ async function runMigrationsViaAPI(opts) {
 }
 
 // src/commands/extension.ts
-import { existsSync as existsSync5 } from "fs";
-import { mkdir, readFile, writeFile } from "fs/promises";
-import { join as join5 } from "path";
+import { existsSync as existsSync8 } from "fs";
+import { mkdir, writeFile } from "fs/promises";
+import { join as join8 } from "path";
 async function extensionCommand(action, name, opts) {
   switch (action) {
     case "create":
       await createExtension(name, opts.category || "custom");
       break;
     case "build":
-      await buildExtension();
+      await buildExtension(opts);
       break;
     case "dev":
       await devExtension();
       break;
-    case "publish":
-      await publishExtension(opts.token);
-      break;
   }
 }
 async function createExtension(name, category) {
   const safeName = name.toLowerCase().replace(/[^a-z0-9-]/g, "-");
-  const targetDir = join5(process.cwd(), "extensions", category, safeName);
-  if (existsSync5(targetDir)) {
+  const targetDir = join8(process.cwd(), "extensions", category, safeName);
+  if (existsSync8(targetDir)) {
     console.error(`Extension already exists: ${targetDir}`);
     process.exit(1);
   }
   console.log(`
 Creating extension: ${category}/${safeName}
 `);
-  await mkdir(join5(targetDir, "engine"), { recursive: true });
-  await mkdir(join5(targetDir, "studio", "src", "pages"), { recursive: true });
-  await mkdir(join5(targetDir, "engine", "migrations"), { recursive: true });
-  await writeFile(join5(targetDir, "manifest.json"), JSON.stringify({
+  await mkdir(join8(targetDir, "engine"), { recursive: true });
+  await mkdir(join8(targetDir, "studio", "src", "pages"), { recursive: true });
+  await mkdir(join8(targetDir, "engine", "migrations"), { recursive: true });
+  await writeFile(join8(targetDir, "manifest.json"), JSON.stringify({
     name: safeName,
     package: `@zveltio/ext-${safeName}`,
     category,
@@ -3273,7 +3270,7 @@ Creating extension: ${category}/${safeName}
     permissions: ["database"],
     contributes: { engine: true, studio: true, fieldTypes: [] }
   }, null, 2));
-  await writeFile(join5(targetDir, "engine", "index.ts"), `import type { ZveltioExtension } from '@zveltio/sdk/extension';
+  await writeFile(join8(targetDir, "engine", "index.ts"), `import type { ZveltioExtension } from '@zveltio/sdk/extension';
 import { join } from 'path';
 
 const extension: ZveltioExtension = {
@@ -3294,7 +3291,7 @@ const extension: ZveltioExtension = {
 
 export default extension;
 `);
-  await writeFile(join5(targetDir, "engine", "migrations", "001_init.sql"), `-- ${name} extension initial schema
+  await writeFile(join8(targetDir, "engine", "migrations", "001_init.sql"), `-- ${name} extension initial schema
 -- Add your tables here
 
 -- Example:
@@ -3304,7 +3301,7 @@ export default extension;
 --   created_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
 -- );
 `);
-  await writeFile(join5(targetDir, "studio", "src", "index.ts"), `import MainPage from './pages/MainPage.svelte';
+  await writeFile(join8(targetDir, "studio", "src", "index.ts"), `import MainPage from './pages/MainPage.svelte';
 
 export default function register() {
   const zveltio = (window as any).__zveltio;
@@ -3322,7 +3319,7 @@ export default function register() {
   });
 }
 `);
-  await writeFile(join5(targetDir, "studio", "src", "pages", "MainPage.svelte"), `<script lang="ts">
+  await writeFile(join8(targetDir, "studio", "src", "pages", "MainPage.svelte"), `<script lang="ts">
   const engineUrl = (window as any).__ZVELTIO_ENGINE_URL__;
 </script>
 
@@ -3331,7 +3328,7 @@ export default function register() {
   <p class="text-base-content/60">Welcome to the ${name} extension.</p>
 </div>
 `);
-  await writeFile(join5(targetDir, "studio", "vite.config.ts"), `import { svelte } from '@sveltejs/vite-plugin-svelte';
+  await writeFile(join8(targetDir, "studio", "vite.config.ts"), `import { svelte } from '@sveltejs/vite-plugin-svelte';
 import { defineConfig } from 'vite';
 
 export default defineConfig({
@@ -3355,7 +3352,7 @@ export default defineConfig({
   },
 });
 `);
-  await writeFile(join5(targetDir, "studio", "package.json"), JSON.stringify({
+  await writeFile(join8(targetDir, "studio", "package.json"), JSON.stringify({
     name: `@zveltio/ext-${safeName}-studio`,
     version: "1.0.0",
     type: "module",
@@ -3369,15 +3366,15 @@ export default defineConfig({
       vite: "^6.0.0"
     }
   }, null, 2));
-  await writeFile(join5(targetDir, ".gitattributes"), `* text=auto eol=lf
+  await writeFile(join8(targetDir, ".gitattributes"), `* text=auto eol=lf
 
 # Packed engine bundle: byte-identical across OSes. Manifest
 # integrity.engineSha256 is computed over these exact bytes.
 engine/index.js binary
 engine/index.js.map binary
 `);
-  await mkdir(join5(targetDir, ".github", "workflows"), { recursive: true });
-  await writeFile(join5(targetDir, ".github", "workflows", "ci.yml"), `name: Extension CI
+  await mkdir(join8(targetDir, ".github", "workflows"), { recursive: true });
+  await writeFile(join8(targetDir, ".github", "workflows", "ci.yml"), `name: Extension CI
 
 on:
   push:
@@ -3447,33 +3444,11 @@ Isolation (MARKETPLACE-POLICY \xA72):
   --first-party. See https://github.com/zveltio-devs/zveltio/blob/master/docs/EXTENSION-DEVELOPER-GUIDE.md#135-isolation-tiers-be-honest-about-what-you-ship
 `);
 }
-async function buildExtension() {
-  console.log(`
-Building extension...
-`);
-  if (!existsSync5("manifest.json")) {
-    console.error("No manifest.json found. Run this command from an extension directory.");
-    process.exit(1);
-  }
-  const manifest = JSON.parse(await readFile("manifest.json", "utf-8"));
-  if (existsSync5("studio")) {
-    const studioProc = Bun.spawn(["bun", "run", "build"], {
-      cwd: "studio",
-      stdout: "inherit",
-      stderr: "inherit"
-    });
-    const code = await studioProc.exited;
-    if (code !== 0)
-      throw new Error(`Studio build failed with exit code ${code}`);
-    console.log("  Studio bundle built");
-  }
-  const engineProc = Bun.spawn(["bun", "build", "engine/index.ts", "--outdir", "engine/dist", "--target", "bun"], { stdout: "inherit", stderr: "inherit" });
-  const engineCode = await engineProc.exited;
-  if (engineCode !== 0)
-    throw new Error(`Engine build failed with exit code ${engineCode}`);
-  console.log("  Engine built");
-  console.log(`
-Extension built: ${manifest.name} v${manifest.version}`);
+async function buildExtension(opts) {
+  console.warn("\x1B[33m`zveltio extension build` is deprecated \u2014 use `zveltio extension pack`.\x1B[0m");
+  console.warn("\x1B[2m  Running pack for you (produces the v2 engine/index.js + integrity).\x1B[0m");
+  const { extensionPackCommand: extensionPackCommand2 } = await Promise.resolve().then(() => (init_extension_pack(), exports_extension_pack));
+  await extensionPackCommand2({ dir: opts.dir });
 }
 async function devExtension() {
   console.log(`
@@ -3491,19 +3466,10 @@ Starting extension dev mode...
   });
   await studioProc.exited;
 }
-async function publishExtension(token) {
-  if (!token) {
-    console.error("Marketplace token required. Use --token <token>");
-    process.exit(1);
-  }
-  console.log(`
-Publishing to Zveltio marketplace...`);
-  console.log("  (Marketplace coming soon!)");
-}
 
 // src/commands/extension-types.ts
-import { existsSync as existsSync6, readdirSync, readFileSync, mkdirSync as mkdirSync2, writeFileSync } from "fs";
-import { join as join6, relative } from "path";
+import { existsSync as existsSync9, readdirSync, readFileSync as readFileSync3, mkdirSync as mkdirSync2, writeFileSync as writeFileSync2 } from "fs";
+import { join as join9, relative } from "path";
 
 // ../sdk/dist/schema-codegen.js
 var NUMERIC_TYPES = new Set([
@@ -3763,8 +3729,8 @@ function parseSchema(sqlChunks) {
     const body = allSql.substring(openIdx + 1, closeIdx);
     const columns = parseColumnList(body);
     const tableCols = ensureTable(tableName);
-    for (const c5 of columns)
-      tableCols.set(c5.name, c5);
+    for (const c6 of columns)
+      tableCols.set(c6.name, c6);
     createRe.lastIndex = closeIdx + 1;
   }
   const alterRe = /ALTER\s+TABLE\s+(?:"([^"]+)"|([a-zA-Z_][a-zA-Z0-9_]*))\s+ADD\s+COLUMN\s+(?:IF\s+NOT\s+EXISTS\s+)?(?:"([^"]+)"|([a-zA-Z_][a-zA-Z0-9_]*))\s+([^;]+?)(?=;|$)/gi;
@@ -3798,8 +3764,8 @@ function emitTypeScript(schema, opts = {}) {
   }
   for (const t of schema.tables) {
     lines.push(`  ${quoteIdentifierIfNeeded(t.name)}: {`);
-    for (const c5 of t.columns) {
-      lines.push(`    ${quoteIdentifierIfNeeded(c5.name)}: ${c5.tsType}; // ${c5.pgType}`);
+    for (const c6 of t.columns) {
+      lines.push(`    ${quoteIdentifierIfNeeded(c6.name)}: ${c6.tsType}; // ${c6.pgType}`);
     }
     lines.push("  };");
   }
@@ -3813,7 +3779,7 @@ function quoteIdentifierIfNeeded(name) {
 }
 
 // src/commands/extension-types.ts
-var c5 = {
+var c6 = {
   bold: (s) => `\x1B[1m${s}\x1B[0m`,
   green: (s) => `\x1B[32m${s}\x1B[0m`,
   dim: (s) => `\x1B[2m${s}\x1B[0m`,
@@ -3823,57 +3789,57 @@ var c5 = {
 async function extensionTypesCommand(opts = {}) {
   const dir = opts.dir ?? process.cwd();
   console.log(`
-${c5.bold("Extension types")}
+${c6.bold("Extension types")}
 `);
-  console.log(`  Extension dir: ${c5.dim(dir)}`);
-  const manifestPath = join6(dir, "manifest.json");
-  if (!existsSync6(manifestPath)) {
-    console.error(c5.red(`No manifest.json found in ${dir}`));
-    console.error(c5.dim("  Run this command from your extension's root folder, or pass --dir."));
+  console.log(`  Extension dir: ${c6.dim(dir)}`);
+  const manifestPath = join9(dir, "manifest.json");
+  if (!existsSync9(manifestPath)) {
+    console.error(c6.red(`No manifest.json found in ${dir}`));
+    console.error(c6.dim("  Run this command from your extension's root folder, or pass --dir."));
     process.exit(1);
   }
-  const migrationsDir = join6(dir, "engine", "migrations");
-  if (!existsSync6(migrationsDir)) {
-    console.error(c5.yellow(`No engine/migrations directory found at ${migrationsDir}`));
-    console.error(c5.dim("  Nothing to generate. Add SQL migrations first."));
+  const migrationsDir = join9(dir, "engine", "migrations");
+  if (!existsSync9(migrationsDir)) {
+    console.error(c6.yellow(`No engine/migrations directory found at ${migrationsDir}`));
+    console.error(c6.dim("  Nothing to generate. Add SQL migrations first."));
     process.exit(0);
   }
   const sqlFiles = readdirSync(migrationsDir).filter((f) => f.endsWith(".sql")).sort();
   if (sqlFiles.length === 0) {
-    console.error(c5.yellow(`No .sql files in ${migrationsDir}`));
+    console.error(c6.yellow(`No .sql files in ${migrationsDir}`));
     process.exit(0);
   }
-  console.log(`  Migrations:    ${c5.dim(`${sqlFiles.length} file(s)`)}`);
-  const chunks = sqlFiles.map((f) => readFileSync(join6(migrationsDir, f), "utf8"));
+  console.log(`  Migrations:    ${c6.dim(`${sqlFiles.length} file(s)`)}`);
+  const chunks = sqlFiles.map((f) => readFileSync3(join9(migrationsDir, f), "utf8"));
   const schema = parseSchema(chunks);
   if (schema.tables.length === 0) {
-    console.log(c5.yellow("  No tables parsed. Check that CREATE TABLE statements are well-formed."));
+    console.log(c6.yellow("  No tables parsed. Check that CREATE TABLE statements are well-formed."));
   } else {
-    console.log(`  Tables parsed: ${c5.dim(`${schema.tables.length}`)}`);
+    console.log(`  Tables parsed: ${c6.dim(`${schema.tables.length}`)}`);
     for (const t of schema.tables) {
       console.log(`    - ${t.name} (${t.columns.length} cols)`);
     }
   }
   let extName = "<unknown>";
   try {
-    const m = JSON.parse(readFileSync(manifestPath, "utf8"));
+    const m = JSON.parse(readFileSync3(manifestPath, "utf8"));
     if (typeof m.name === "string")
       extName = m.name;
   } catch {}
   const banner = `Generated from ${extName} migrations: ${sqlFiles.join(", ")}`;
   const tsBody = emitTypeScript(schema, { banner });
-  const outputPath = opts.output ?? join6(dir, ".zveltio", "db.d.ts");
-  mkdirSync2(join6(outputPath, ".."), { recursive: true });
-  writeFileSync(outputPath, tsBody, "utf8");
+  const outputPath = opts.output ?? join9(dir, ".zveltio", "db.d.ts");
+  mkdirSync2(join9(outputPath, ".."), { recursive: true });
+  writeFileSync2(outputPath, tsBody, "utf8");
   console.log(`
-${c5.green("Written:")} ${relative(process.cwd(), outputPath) || outputPath}`);
-  console.log(c5.dim("  Add `.zveltio/` to your .gitignore. Regenerate with this command after every migration."));
+${c6.green("Written:")} ${relative(process.cwd(), outputPath) || outputPath}`);
+  console.log(c6.dim("  Add `.zveltio/` to your .gitignore. Regenerate with this command after every migration."));
   console.log("");
 }
 
 // src/commands/extension-validate.ts
-import { existsSync as existsSync7, readdirSync as readdirSync2, readFileSync as readFileSync2, statSync } from "fs";
-import { join as join7 } from "path";
+import { existsSync as existsSync10, readdirSync as readdirSync2, readFileSync as readFileSync4, statSync } from "fs";
+import { join as join10 } from "path";
 
 // ../sdk/dist/validate/migration-parse.js
 function parseMigrationSql(raw) {
@@ -4051,7 +4017,7 @@ function validateExtension(input) {
 }
 
 // src/commands/extension-validate.ts
-var c6 = {
+var c7 = {
   bold: (s) => `\x1B[1m${s}\x1B[0m`,
   green: (s) => `\x1B[32m${s}\x1B[0m`,
   red: (s) => `\x1B[31m${s}\x1B[0m`,
@@ -4073,10 +4039,10 @@ var PEER_DEPS_ALLOWLIST = new Set([
 ]);
 function recursiveSize(dir) {
   let total = 0;
-  if (!existsSync7(dir))
+  if (!existsSync10(dir))
     return 0;
   for (const name of readdirSync2(dir)) {
-    const full = join7(dir, name);
+    const full = join10(dir, name);
     if (name === "node_modules" || name === ".zveltio" || name === "dist")
       continue;
     let st;
@@ -4103,26 +4069,27 @@ function inferExpectedName(dir) {
 async function extensionValidateCommand(opts = {}) {
   const dir = opts.dir ?? process.cwd();
   console.log(`
-${c6.bold("Extension validate")}
+${c7.bold("Extension validate")}
 `);
-  console.log(`  Extension dir: ${c6.dim(dir)}`);
-  const manifestPath = join7(dir, "manifest.json");
+  console.log(`  Extension dir: ${c7.dim(dir)}`);
+  const manifestPath = join10(dir, "manifest.json");
   let manifest = null;
-  if (existsSync7(manifestPath)) {
+  if (existsSync10(manifestPath)) {
     try {
-      manifest = JSON.parse(readFileSync2(manifestPath, "utf8"));
+      manifest = JSON.parse(readFileSync4(manifestPath, "utf8"));
     } catch (e) {
-      console.error(c6.red(`  manifest.json is not valid JSON: ${e.message}`));
+      console.error(c7.red(`  manifest.json is not valid JSON: ${e.message}`));
       manifest = null;
     }
   }
-  const migrationsDir = join7(dir, "engine", "migrations");
+  const isStudioOnly = manifest != null && typeof manifest === "object" && manifest?.contributes?.engine === false && !manifest?.engine;
+  const migrationsDir = join10(dir, "engine", "migrations");
   let sqlFiles = [];
   let parsedTableCount = 0;
-  if (existsSync7(migrationsDir)) {
+  if (existsSync10(migrationsDir)) {
     sqlFiles = readdirSync2(migrationsDir).filter((f) => f.endsWith(".sql")).sort().map((filename) => ({
       filename,
-      sql: readFileSync2(join7(migrationsDir, filename), "utf8")
+      sql: readFileSync4(join10(migrationsDir, filename), "utf8")
     }));
     try {
       parsedTableCount = parseSchema(sqlFiles.map((f) => f.sql)).tables.length;
@@ -4132,10 +4099,10 @@ ${c6.bold("Extension validate")}
   }
   const paths = {};
   for (const rel of ["manifest.json", "engine/index.ts", "engine/index.js"]) {
-    paths[rel] = existsSync7(join7(dir, rel));
+    paths[rel] = existsSync10(join10(dir, rel));
   }
   const required = ["manifest.json"];
-  if (!(paths["engine/index.ts"] || paths["engine/index.js"])) {
+  if (!isStudioOnly && !(paths["engine/index.ts"] || paths["engine/index.js"])) {
     required.push("engine/index.ts");
   }
   const bundleBytes = recursiveSize(dir);
@@ -4160,9 +4127,12 @@ ${c6.bold("Extension validate")}
     stats: { tables: parsedTableCount, migrations: sqlFiles.length }
   });
   const m = manifest;
+  const studioOnly = isStudioOnly;
   const v2Status = (() => {
     if (!m)
       return "unknown";
+    if (studioOnly)
+      return "studio-only";
     if (!m.engine)
       return "v1-legacy";
     if (m.engine.bundled !== true)
@@ -4173,56 +4143,61 @@ ${c6.bold("Extension validate")}
       return "missing-engine-sha";
     return "v2-ok";
   })();
-  console.log(`  Manifest:      ${manifest ? c6.green("OK") : c6.red("missing or invalid")}`);
-  console.log(`  Migrations:    ${c6.dim(`${result.stats.migrations} file(s), ${result.stats.tables} table(s) parsed`)}`);
-  console.log(`  Peer deps:     ${c6.dim(`${result.stats.peerDeps} declared`)}`);
-  console.log(`  Bundle size:   ${c6.dim(`${Math.ceil(bundleBytes / 1024)} KB`)}`);
-  const v2Label = v2Status === "v2-ok" ? c6.green("v2 (bundled)") : v2Status === "v1-legacy" ? c6.yellow("v1 (no engine block \u2014 run `zveltio extension pack`)") : v2Status === "engine-not-bundled" ? c6.red("engine.bundled !== true \u2014 re-pack required") : v2Status === "missing-engine-entry" ? c6.red("engine.entry missing") : v2Status === "missing-engine-sha" ? c6.red("integrity.engineSha256 missing \u2014 re-pack required") : c6.dim("unknown");
+  console.log(`  Manifest:      ${manifest ? c7.green("OK") : c7.red("missing or invalid")}`);
+  console.log(`  Migrations:    ${c7.dim(`${result.stats.migrations} file(s), ${result.stats.tables} table(s) parsed`)}`);
+  console.log(`  Peer deps:     ${c7.dim(`${result.stats.peerDeps} declared`)}`);
+  console.log(`  Bundle size:   ${c7.dim(`${Math.ceil(bundleBytes / 1024)} KB`)}`);
+  const v2Label = v2Status === "v2-ok" ? c7.green("v2 (bundled)") : v2Status === "studio-only" ? c7.green("studio/client-only (no engine)") : v2Status === "v1-legacy" ? c7.yellow("v1 (no engine block \u2014 run `zveltio extension pack`)") : v2Status === "engine-not-bundled" ? c7.red("engine.bundled !== true \u2014 re-pack required") : v2Status === "missing-engine-entry" ? c7.red("engine.entry missing") : v2Status === "missing-engine-sha" ? c7.red("integrity.engineSha256 missing \u2014 re-pack required") : c7.dim("unknown");
   console.log(`  Manifest v2:   ${v2Label}`);
-  const isolation = m?.engine?.isolation ?? "inline";
-  const resolved = await resolvePublisherTier({
-    firstParty: opts.firstParty,
-    token: opts.token,
-    registryUrl: opts.registryUrl
-  });
-  const inlineOk = tierAllowsInline(resolved.tier);
-  const tierSrc = resolved.source === "flag" ? "--first-party" : resolved.source === "registry" ? "registry" : "default";
-  if (isolation === "worker") {
-    console.log(`  Isolation:     ${c6.green("worker (runs in any tier)")}`);
-  } else if (inlineOk) {
-    console.log(`  Isolation:     ${c6.dim(`inline (${resolved.tier} \u2014 allowed, via ${tierSrc})`)}`);
+  if (studioOnly) {
+    console.log(`  Isolation:     ${c7.dim("n/a (no engine)")}`);
+    console.log("");
   } else {
-    console.log(`  Isolation:     ${c6.red(`inline \u2014 ${resolved.tier} publishers MUST use 'worker'`)}`);
-  }
-  console.log("");
-  if (isolation !== "worker" && !inlineOk) {
-    console.error(c6.red(`Validation failed: ${resolved.tier} publishers must declare ` + `engine.isolation: "worker" (MARKETPLACE-POLICY \xA72).`));
-    console.error(c6.dim('  Add `"isolation": "worker"` to the engine block in manifest.json, ' + "then re-pack. If you are a verified/first-party publisher, pass " + "--first-party or set ZVELTIO_REGISTRY_TOKEN so the tier can be confirmed. " + "See docs/MARKETPLACE-POLICY.md \xA72."));
-    if (opts.silentExit)
-      throw new Error("Validation failed: community inline isolation");
-    process.exit(1);
+    const isolation = m?.engine?.isolation ?? "inline";
+    const resolved = await resolvePublisherTier({
+      firstParty: opts.firstParty,
+      token: opts.token,
+      registryUrl: opts.registryUrl
+    });
+    const inlineOk = tierAllowsInline(resolved.tier);
+    const tierSrc = resolved.source === "flag" ? "--first-party" : resolved.source === "registry" ? "registry" : "default";
+    if (isolation === "worker") {
+      console.log(`  Isolation:     ${c7.green("worker (runs in any tier)")}`);
+    } else if (inlineOk) {
+      console.log(`  Isolation:     ${c7.dim(`inline (${resolved.tier} \u2014 allowed, via ${tierSrc})`)}`);
+    } else {
+      console.log(`  Isolation:     ${c7.red(`inline \u2014 ${resolved.tier} publishers MUST use 'worker'`)}`);
+    }
+    console.log("");
+    if (isolation !== "worker" && !inlineOk) {
+      console.error(c7.red(`Validation failed: ${resolved.tier} publishers must declare ` + `engine.isolation: "worker" (MARKETPLACE-POLICY \xA72).`));
+      console.error(c7.dim('  Add `"isolation": "worker"` to the engine block in manifest.json, ' + "then re-pack. If you are a verified/first-party publisher, pass " + "--first-party or set ZVELTIO_REGISTRY_TOKEN so the tier can be confirmed. " + "See docs/MARKETPLACE-POLICY.md \xA72."));
+      if (opts.silentExit)
+        throw new Error("Validation failed: community inline isolation");
+      process.exit(1);
+    }
   }
   if (v2Status === "v1-legacy") {
-    console.error(c6.red("Validation failed: manifest is v1 (no engine.bundled block)."));
-    console.error(c6.dim("  v1 manifests are unsupported since 1.0.0-beta.1. Run `zveltio extension pack` to " + "generate the v2 engine + integrity blocks. See docs/EXTENSION-DEVELOPER-GUIDE.md \xA74."));
+    console.error(c7.red("Validation failed: manifest is v1 (no engine.bundled block)."));
+    console.error(c7.dim("  v1 manifests are unsupported since 1.0.0-beta.1. Run `zveltio extension pack` to " + "generate the v2 engine + integrity blocks. See docs/EXTENSION-DEVELOPER-GUIDE.md \xA74."));
     if (opts.silentExit)
       throw new Error("Validation failed: v1 manifest unsupported");
     process.exit(1);
   }
   if (v2Status === "engine-not-bundled" || v2Status === "missing-engine-entry" || v2Status === "missing-engine-sha") {
-    console.error(c6.red("Validation failed: manifest declares v2 engine block but is incomplete."));
-    console.error(c6.dim("  Run `zveltio extension pack --dir <ext>` to regenerate engine + integrity blocks."));
+    console.error(c7.red("Validation failed: manifest declares v2 engine block but is incomplete."));
+    console.error(c7.dim("  Run `zveltio extension pack --dir <ext>` to regenerate engine + integrity blocks."));
     if (opts.silentExit)
       throw new Error("Validation failed: incomplete v2 manifest");
     process.exit(1);
   }
   if (result.ok) {
-    console.log(c6.green("Validation passed."));
-    console.log(c6.dim("  Run `zveltio extension types` to refresh generated types, then `zveltio extension publish` when ready."));
+    console.log(c7.green("Validation passed."));
+    console.log(c7.dim("  Run `zveltio extension types` to refresh generated types, then `zveltio extension publish` when ready."));
     console.log("");
     return;
   }
-  console.log(c6.red(`Validation failed with ${result.errors.length} error(s):`));
+  console.log(c7.red(`Validation failed with ${result.errors.length} error(s):`));
   console.log("");
   for (const e of result.errors) {
     printError(e);
@@ -4232,8 +4207,8 @@ ${c6.bold("Extension validate")}
     process.exit(1);
 }
 function printError(e) {
-  const loc = e.file ? c6.dim(` (${e.file})`) : "";
-  console.log(`  ${c6.red(e.code)}  ${e.message}${loc}`);
+  const loc = e.file ? c7.dim(` (${e.file})`) : "";
+  console.log(`  ${c7.red(e.code)}  ${e.message}${loc}`);
 }
 
 // src/commands/extension-publish.ts
@@ -4925,7 +4900,7 @@ ${c11.bold("Generate Types")}
 
 // src/commands/install.ts
 import { existsSync as existsSync14 } from "fs";
-import { readFile as readFile2, mkdir as mkdir2, cp } from "fs/promises";
+import { readFile, mkdir as mkdir2, cp } from "fs/promises";
 import { join as join14 } from "path";
 async function installCommand(name, opts) {
   const engineUrl = opts.url || process.env.ENGINE_URL || "http://localhost:3000";
@@ -4945,7 +4920,7 @@ async function installFromPath(name, sourcePath, engineUrl, force) {
   }
   let manifest;
   try {
-    manifest = JSON.parse(await readFile2(join14(sourcePath, "manifest.json"), "utf-8"));
+    manifest = JSON.parse(await readFile(join14(sourcePath, "manifest.json"), "utf-8"));
   } catch {
     console.error("\u274C Failed to read manifest.json");
     process.exit(1);
@@ -4971,8 +4946,8 @@ async function installFromPath(name, sourcePath, engineUrl, force) {
   console.log(`  Category: ${category}`);
   const enginePkgPath = join14(process.cwd(), "packages/engine/package.json");
   if (existsSync14(enginePkgPath)) {
-    const enginePkg = JSON.parse(await readFile2(enginePkgPath, "utf-8"));
-    const engineVersion = enginePkg.version || "2.0.0";
+    const enginePkg = JSON.parse(await readFile(enginePkgPath, "utf-8"));
+    const engineVersion = enginePkg.version || "unknown";
     if (manifest.zveltioMinVersion) {
       console.log(`  Engine required: >= ${manifest.zveltioMinVersion} (current: ${engineVersion})`);
     }
@@ -5817,7 +5792,7 @@ async function getLocalVersion() {
 // package.json
 var package_default = {
   name: "@zveltio/cli",
-  version: "3.0.0-beta.3",
+  version: "3.0.0-beta.5",
   type: "module",
   bin: {
     zveltio: "./dist/index.js"
@@ -5832,7 +5807,7 @@ var package_default = {
     dev: "bun run --watch src/index.ts"
   },
   dependencies: {
-    "@zveltio/sdk": "3.0.0-beta.3",
+    "@zveltio/sdk": "3.0.0-beta.5",
     commander: "^12.0.0"
   },
   devDependencies: {
@@ -5886,7 +5861,7 @@ extensions.command("disable <name>").description("Disable an active extension").
 });
 var ext = program2.command("extension").description('Manage Zveltio extensions (use "extensions" for new commands)');
 ext.command("create <name>").description("Scaffold a new extension").option("--category <category>", "Extension category", "custom").action((name, opts) => extensionCommand("create", name, opts));
-ext.command("build").description("Build the current extension (.zvext bundle)").action(() => extensionCommand("build", "", {}));
+ext.command("build").description("[deprecated] Alias for `extension pack` \u2014 produces the v2 engine bundle").option("--dir <dir>", "Extension root directory (defaults to cwd)").action((opts) => extensionCommand("build", "", opts));
 ext.command("dev").description("Watch engine/ + studio/, hot-reload the running engine on changes (S4-03)").option("--dir <dir>", "Extension root directory (defaults to cwd)").option("--url <url>", "Engine URL (env: ZVELTIO_ENGINE_URL)", "http://localhost:3000").option("--name <name>", "Extension name (default: read from manifest.json)").option("--no-studio", "Skip the Studio dev process (engine watch only)").action((opts) => extensionDevCommand(opts));
 ext.command("pack").description("Bundle engine/index.ts \u2192 engine/index.js (target=bun, ESM) and write engine + integrity blocks into manifest.json. Required before publish on v2 channels.").option("--dir <dir>", "Extension root directory (defaults to cwd)").option("--sourcemap", "Emit engine/index.js.map alongside the bundle").option("--no-manifest-update", "Build the bundle but do not patch manifest.json").option("--first-party", "Vendor / monorepo build \u2014 keep inline isolation, skip worker auto-inject").option("--token <token>", "Registry token for the publisher-tier lookup (env: ZVELTIO_REGISTRY_TOKEN)").option("--registry-url <url>", "Registry base URL (env: ZVELTIO_REGISTRY_URL)").action(async (opts) => {
   const { extensionPackCommand: extensionPackCommand2 } = await Promise.resolve().then(() => (init_extension_pack(), exports_extension_pack));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zveltio/cli",
-  "version": "3.0.0-beta.3",
+  "version": "3.0.0-beta.5",
   "type": "module",
   "bin": {
     "zveltio": "./dist/index.js"
@@ -15,7 +15,7 @@
     "dev": "bun run --watch src/index.ts"
   },
   "dependencies": {
-    "@zveltio/sdk": "3.0.0-beta.3",
+    "@zveltio/sdk": "3.0.0-beta.5",
     "commander": "^12.0.0"
   },
   "devDependencies": {