everything-dev 1.53.2 → 2.0.0-rc.1

package/dist/utils/theme.cjs

@@ -1,21 +1,39 @@
 const require_runtime = require('../_virtual/_rolldown/runtime.cjs');
 let chalk = require("chalk");
 chalk = require_runtime.__toESM(chalk, 1);
-let gradient_string = require("gradient-string");
-gradient_string = require_runtime.__toESM(gradient_string, 1);
 
 //#region src/utils/theme.ts
-const gradients = { cyber: (0, gradient_string.default)(["#00ffff", "#ff00ff"]) };
+const hex = (code) => (text) => chalk.default.hex(code)(text);
+const truecolorRamp = (from, to) => (text) => {
+	const rgb = (code) => [
+		1,
+		3,
+		5
+	].map((i) => parseInt(code.slice(i, i + 2), 16));
+	const [r1, g1, b1] = rgb(from);
+	const [r2, g2, b2] = rgb(to);
+	const chars = Array.from(text);
+	const total = chars.filter((ch) => ch !== "\n").length;
+	let seen = 0;
+	return chars.map((ch) => {
+		if (ch === "\n") return ch;
+		const t = total > 1 ? seen / (total - 1) : 0;
+		seen += 1;
+		return chalk.default.rgb(Math.round(r1 + (r2 - r1) * t), Math.round(g1 + (g2 - g1) * t), Math.round(b1 + (b2 - b1) * t))(ch);
+	}).join("");
+};
+const gradients = { cyber: truecolorRamp("#00ffff", "#ff00ff") };
 const colors = {
-	cyan: chalk.default.hex("#00ffff"),
-	magenta: chalk.default.hex("#ff00ff"),
-	green: chalk.default.hex("#00ff41"),
-	blue: chalk.default.hex("#0080ff"),
-	yellow: chalk.default.hex("#ffcc00"),
-	white: chalk.default.hex("#f0f0f0"),
-	gray: chalk.default.hex("#555555"),
+	cyan: hex("#00ffff"),
+	magenta: hex("#ff00ff"),
+	green: hex("#00ff41"),
+	blue: hex("#0080ff"),
+	yellow: hex("#ffcc00"),
+	orange: hex("#ffaa00"),
+	white: hex("#f0f0f0"),
+	gray: hex("#555555"),
 	dim: chalk.default.dim,
-	error: chalk.default.hex("#ff3366")
+	error: hex("#ff3366")
 };
 const icons = {
 	scan: "○",
@@ -33,7 +51,7 @@ const frames = {
 	bottom: (width) => `└${"─".repeat(width - 2)}┘`
 };
 function divider(width = 48) {
-	return colors.dim("─".repeat(width));
+	return chalk.default.dim("─".repeat(width));
 }
 
 //#endregion

package/dist/utils/theme.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"theme.cjs","names":[],"sources":["../../src/utils/theme.ts"],"sourcesContent":["import chalk from \"chalk\";\nimport gradient from \"gradient-string\";\n\nexport const gradients: Record<string, (text: string) => string> = {\n  cyber: gradient([\"#00ffff\", \"#ff00ff\"]),\n};\n\nexport const colors = {\n  cyan: chalk.hex(\"#00ffff\"),\n  magenta: chalk.hex(\"#ff00ff\"),\n  green: chalk.hex(\"#00ff41\"),\n  blue: chalk.hex(\"#0080ff\"),\n  yellow: chalk.hex(\"#ffcc00\"),\n  white: chalk.hex(\"#f0f0f0\"),\n  gray: chalk.hex(\"#555555\"),\n  dim: chalk.dim,\n  error: chalk.hex(\"#ff3366\"),\n};\n\nexport const icons = {\n  scan: \"○\",\n  run: \"▶\",\n  ok: \"✓\",\n  err: \"✗\",\n  pending: \"○\",\n  arrow: \"→\",\n  dot: \"·\",\n  app: \"◉\",\n  config: \"⚙\",\n};\n\nexport const frames = {\n  top: (width: number) => `┌${\"─\".repeat(width - 2)}┐`,\n  bottom: (width: number) => `└${\"─\".repeat(width - 2)}┘`,\n};\n\nexport function divider(width = 48): string {\n  return colors.dim(\"─\".repeat(width));\n}\n"],"mappings":";;;;;;;AAGA,MAAa,YAAsD,EACjE,oCAAgB,CAAC,WAAW,SAAS,CAAC,EACxC;AAEA,MAAa,SAAS;CACpB,MAAM,cAAM,IAAI,SAAS;CACzB,SAAS,cAAM,IAAI,SAAS;CAC5B,OAAO,cAAM,IAAI,SAAS;CAC1B,MAAM,cAAM,IAAI,SAAS;CACzB,QAAQ,cAAM,IAAI,SAAS;CAC3B,OAAO,cAAM,IAAI,SAAS;CAC1B,MAAM,cAAM,IAAI,SAAS;CACzB,KAAK,cAAM;CACX,OAAO,cAAM,IAAI,SAAS;AAC5B;AAEA,MAAa,QAAQ;CACnB,MAAM;CACN,KAAK;CACL,IAAI;CACJ,KAAK;CACL,SAAS;CACT,OAAO;CACP,KAAK;CACL,KAAK;CACL,QAAQ;AACV;AAEA,MAAa,SAAS;CACpB,MAAM,UAAkB,IAAI,IAAI,OAAO,QAAQ,CAAC,EAAE;CAClD,SAAS,UAAkB,IAAI,IAAI,OAAO,QAAQ,CAAC,EAAE;AACvD;AAEA,SAAgB,QAAQ,QAAQ,IAAY;CAC1C,OAAO,OAAO,IAAI,IAAI,OAAO,KAAK,CAAC;AACrC"}
+{"version":3,"file":"theme.cjs","names":[],"sources":["../../src/utils/theme.ts"],"sourcesContent":["import chalk from \"chalk\";\n\nconst hex =\n  (code: string) =>\n  (text: string): string =>\n    chalk.hex(code)(text);\n\nconst truecolorRamp =\n  (from: string, to: string) =>\n  (text: string): string => {\n    const rgb = (code: string) => [1, 3, 5].map((i) => parseInt(code.slice(i, i + 2), 16));\n    const [r1, g1, b1] = rgb(from);\n    const [r2, g2, b2] = rgb(to);\n    const chars = Array.from(text);\n    const total = chars.filter((ch) => ch !== \"\\n\").length;\n    let seen = 0;\n    return chars\n      .map((ch) => {\n        if (ch === \"\\n\") return ch;\n        const t = total > 1 ? seen / (total - 1) : 0;\n        seen += 1;\n        return chalk.rgb(\n          Math.round(r1 + (r2 - r1) * t),\n          Math.round(g1 + (g2 - g1) * t),\n          Math.round(b1 + (b2 - b1) * t),\n        )(ch);\n      })\n      .join(\"\");\n  };\n\nexport const gradients: Record<string, (text: string) => string> = {\n  cyber: truecolorRamp(\"#00ffff\", \"#ff00ff\"),\n};\n\nexport const colors = {\n  cyan: hex(\"#00ffff\"),\n  magenta: hex(\"#ff00ff\"),\n  green: hex(\"#00ff41\"),\n  blue: hex(\"#0080ff\"),\n  yellow: hex(\"#ffcc00\"),\n  orange: hex(\"#ffaa00\"),\n  white: hex(\"#f0f0f0\"),\n  gray: hex(\"#555555\"),\n  dim: chalk.dim,\n  error: hex(\"#ff3366\"),\n};\n\nexport const icons = {\n  scan: \"○\",\n  run: \"▶\",\n  ok: \"✓\",\n  err: \"✗\",\n  pending: \"○\",\n  arrow: \"→\",\n  dot: \"·\",\n  app: \"◉\",\n  config: \"⚙\",\n};\n\nexport const frames = {\n  top: (width: number) => `┌${\"─\".repeat(width - 2)}┐`,\n  bottom: (width: number) => `└${\"─\".repeat(width - 2)}┘`,\n};\n\nexport function divider(width = 48): string {\n  return chalk.dim(\"─\".repeat(width));\n}\n"],"mappings":";;;;;AAEA,MAAM,OACH,UACA,SACC,cAAM,IAAI,IAAI,CAAC,CAAC,IAAI;AAExB,MAAM,iBACH,MAAc,QACd,SAAyB;CACxB,MAAM,OAAO,SAAiB;EAAC;EAAG;EAAG;CAAC,CAAC,CAAC,KAAK,MAAM,SAAS,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;CACrF,MAAM,CAAC,IAAI,IAAI,MAAM,IAAI,IAAI;CAC7B,MAAM,CAAC,IAAI,IAAI,MAAM,IAAI,EAAE;CAC3B,MAAM,QAAQ,MAAM,KAAK,IAAI;CAC7B,MAAM,QAAQ,MAAM,QAAQ,OAAO,OAAO,IAAI,CAAC,CAAC;CAChD,IAAI,OAAO;CACX,OAAO,MACJ,KAAK,OAAO;EACX,IAAI,OAAO,MAAM,OAAO;EACxB,MAAM,IAAI,QAAQ,IAAI,QAAQ,QAAQ,KAAK;EAC3C,QAAQ;EACR,OAAO,cAAM,IACX,KAAK,MAAM,MAAM,KAAK,MAAM,CAAC,GAC7B,KAAK,MAAM,MAAM,KAAK,MAAM,CAAC,GAC7B,KAAK,MAAM,MAAM,KAAK,MAAM,CAAC,CAC/B,CAAC,CAAC,EAAE;CACN,CAAC,CAAC,CACD,KAAK,EAAE;AACZ;AAEF,MAAa,YAAsD,EACjE,OAAO,cAAc,WAAW,SAAS,EAC3C;AAEA,MAAa,SAAS;CACpB,MAAM,IAAI,SAAS;CACnB,SAAS,IAAI,SAAS;CACtB,OAAO,IAAI,SAAS;CACpB,MAAM,IAAI,SAAS;CACnB,QAAQ,IAAI,SAAS;CACrB,QAAQ,IAAI,SAAS;CACrB,OAAO,IAAI,SAAS;CACpB,MAAM,IAAI,SAAS;CACnB,KAAK,cAAM;CACX,OAAO,IAAI,SAAS;AACtB;AAEA,MAAa,QAAQ;CACnB,MAAM;CACN,KAAK;CACL,IAAI;CACJ,KAAK;CACL,SAAS;CACT,OAAO;CACP,KAAK;CACL,KAAK;CACL,QAAQ;AACV;AAEA,MAAa,SAAS;CACpB,MAAM,UAAkB,IAAI,IAAI,OAAO,QAAQ,CAAC,EAAE;CAClD,SAAS,UAAkB,IAAI,IAAI,OAAO,QAAQ,CAAC,EAAE;AACvD;AAEA,SAAgB,QAAQ,QAAQ,IAAY;CAC1C,OAAO,cAAM,IAAI,IAAI,OAAO,KAAK,CAAC;AACpC"}

package/dist/utils/theme.mjs

@@ -1,18 +1,37 @@
 import chalk from "chalk";
-import gradient from "gradient-string";
 
 //#region src/utils/theme.ts
-const gradients = { cyber: gradient(["#00ffff", "#ff00ff"]) };
+const hex = (code) => (text) => chalk.hex(code)(text);
+const truecolorRamp = (from, to) => (text) => {
+	const rgb = (code) => [
+		1,
+		3,
+		5
+	].map((i) => parseInt(code.slice(i, i + 2), 16));
+	const [r1, g1, b1] = rgb(from);
+	const [r2, g2, b2] = rgb(to);
+	const chars = Array.from(text);
+	const total = chars.filter((ch) => ch !== "\n").length;
+	let seen = 0;
+	return chars.map((ch) => {
+		if (ch === "\n") return ch;
+		const t = total > 1 ? seen / (total - 1) : 0;
+		seen += 1;
+		return chalk.rgb(Math.round(r1 + (r2 - r1) * t), Math.round(g1 + (g2 - g1) * t), Math.round(b1 + (b2 - b1) * t))(ch);
+	}).join("");
+};
+const gradients = { cyber: truecolorRamp("#00ffff", "#ff00ff") };
 const colors = {
-	cyan: chalk.hex("#00ffff"),
-	magenta: chalk.hex("#ff00ff"),
-	green: chalk.hex("#00ff41"),
-	blue: chalk.hex("#0080ff"),
-	yellow: chalk.hex("#ffcc00"),
-	white: chalk.hex("#f0f0f0"),
-	gray: chalk.hex("#555555"),
+	cyan: hex("#00ffff"),
+	magenta: hex("#ff00ff"),
+	green: hex("#00ff41"),
+	blue: hex("#0080ff"),
+	yellow: hex("#ffcc00"),
+	orange: hex("#ffaa00"),
+	white: hex("#f0f0f0"),
+	gray: hex("#555555"),
 	dim: chalk.dim,
-	error: chalk.hex("#ff3366")
+	error: hex("#ff3366")
 };
 const icons = {
 	scan: "○",
@@ -30,7 +49,7 @@ const frames = {
 	bottom: (width) => `└${"─".repeat(width - 2)}┘`
 };
 function divider(width = 48) {
-	return colors.dim("─".repeat(width));
+	return chalk.dim("─".repeat(width));
 }
 
 //#endregion

package/dist/utils/theme.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"theme.mjs","names":[],"sources":["../../src/utils/theme.ts"],"sourcesContent":["import chalk from \"chalk\";\nimport gradient from \"gradient-string\";\n\nexport const gradients: Record<string, (text: string) => string> = {\n  cyber: gradient([\"#00ffff\", \"#ff00ff\"]),\n};\n\nexport const colors = {\n  cyan: chalk.hex(\"#00ffff\"),\n  magenta: chalk.hex(\"#ff00ff\"),\n  green: chalk.hex(\"#00ff41\"),\n  blue: chalk.hex(\"#0080ff\"),\n  yellow: chalk.hex(\"#ffcc00\"),\n  white: chalk.hex(\"#f0f0f0\"),\n  gray: chalk.hex(\"#555555\"),\n  dim: chalk.dim,\n  error: chalk.hex(\"#ff3366\"),\n};\n\nexport const icons = {\n  scan: \"○\",\n  run: \"▶\",\n  ok: \"✓\",\n  err: \"✗\",\n  pending: \"○\",\n  arrow: \"→\",\n  dot: \"·\",\n  app: \"◉\",\n  config: \"⚙\",\n};\n\nexport const frames = {\n  top: (width: number) => `┌${\"─\".repeat(width - 2)}┐`,\n  bottom: (width: number) => `└${\"─\".repeat(width - 2)}┘`,\n};\n\nexport function divider(width = 48): string {\n  return colors.dim(\"─\".repeat(width));\n}\n"],"mappings":";;;;AAGA,MAAa,YAAsD,EACjE,OAAO,SAAS,CAAC,WAAW,SAAS,CAAC,EACxC;AAEA,MAAa,SAAS;CACpB,MAAM,MAAM,IAAI,SAAS;CACzB,SAAS,MAAM,IAAI,SAAS;CAC5B,OAAO,MAAM,IAAI,SAAS;CAC1B,MAAM,MAAM,IAAI,SAAS;CACzB,QAAQ,MAAM,IAAI,SAAS;CAC3B,OAAO,MAAM,IAAI,SAAS;CAC1B,MAAM,MAAM,IAAI,SAAS;CACzB,KAAK,MAAM;CACX,OAAO,MAAM,IAAI,SAAS;AAC5B;AAEA,MAAa,QAAQ;CACnB,MAAM;CACN,KAAK;CACL,IAAI;CACJ,KAAK;CACL,SAAS;CACT,OAAO;CACP,KAAK;CACL,KAAK;CACL,QAAQ;AACV;AAEA,MAAa,SAAS;CACpB,MAAM,UAAkB,IAAI,IAAI,OAAO,QAAQ,CAAC,EAAE;CAClD,SAAS,UAAkB,IAAI,IAAI,OAAO,QAAQ,CAAC,EAAE;AACvD;AAEA,SAAgB,QAAQ,QAAQ,IAAY;CAC1C,OAAO,OAAO,IAAI,IAAI,OAAO,KAAK,CAAC;AACrC"}
+{"version":3,"file":"theme.mjs","names":[],"sources":["../../src/utils/theme.ts"],"sourcesContent":["import chalk from \"chalk\";\n\nconst hex =\n  (code: string) =>\n  (text: string): string =>\n    chalk.hex(code)(text);\n\nconst truecolorRamp =\n  (from: string, to: string) =>\n  (text: string): string => {\n    const rgb = (code: string) => [1, 3, 5].map((i) => parseInt(code.slice(i, i + 2), 16));\n    const [r1, g1, b1] = rgb(from);\n    const [r2, g2, b2] = rgb(to);\n    const chars = Array.from(text);\n    const total = chars.filter((ch) => ch !== \"\\n\").length;\n    let seen = 0;\n    return chars\n      .map((ch) => {\n        if (ch === \"\\n\") return ch;\n        const t = total > 1 ? seen / (total - 1) : 0;\n        seen += 1;\n        return chalk.rgb(\n          Math.round(r1 + (r2 - r1) * t),\n          Math.round(g1 + (g2 - g1) * t),\n          Math.round(b1 + (b2 - b1) * t),\n        )(ch);\n      })\n      .join(\"\");\n  };\n\nexport const gradients: Record<string, (text: string) => string> = {\n  cyber: truecolorRamp(\"#00ffff\", \"#ff00ff\"),\n};\n\nexport const colors = {\n  cyan: hex(\"#00ffff\"),\n  magenta: hex(\"#ff00ff\"),\n  green: hex(\"#00ff41\"),\n  blue: hex(\"#0080ff\"),\n  yellow: hex(\"#ffcc00\"),\n  orange: hex(\"#ffaa00\"),\n  white: hex(\"#f0f0f0\"),\n  gray: hex(\"#555555\"),\n  dim: chalk.dim,\n  error: hex(\"#ff3366\"),\n};\n\nexport const icons = {\n  scan: \"○\",\n  run: \"▶\",\n  ok: \"✓\",\n  err: \"✗\",\n  pending: \"○\",\n  arrow: \"→\",\n  dot: \"·\",\n  app: \"◉\",\n  config: \"⚙\",\n};\n\nexport const frames = {\n  top: (width: number) => `┌${\"─\".repeat(width - 2)}┐`,\n  bottom: (width: number) => `└${\"─\".repeat(width - 2)}┘`,\n};\n\nexport function divider(width = 48): string {\n  return chalk.dim(\"─\".repeat(width));\n}\n"],"mappings":";;;AAEA,MAAM,OACH,UACA,SACC,MAAM,IAAI,IAAI,CAAC,CAAC,IAAI;AAExB,MAAM,iBACH,MAAc,QACd,SAAyB;CACxB,MAAM,OAAO,SAAiB;EAAC;EAAG;EAAG;CAAC,CAAC,CAAC,KAAK,MAAM,SAAS,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;CACrF,MAAM,CAAC,IAAI,IAAI,MAAM,IAAI,IAAI;CAC7B,MAAM,CAAC,IAAI,IAAI,MAAM,IAAI,EAAE;CAC3B,MAAM,QAAQ,MAAM,KAAK,IAAI;CAC7B,MAAM,QAAQ,MAAM,QAAQ,OAAO,OAAO,IAAI,CAAC,CAAC;CAChD,IAAI,OAAO;CACX,OAAO,MACJ,KAAK,OAAO;EACX,IAAI,OAAO,MAAM,OAAO;EACxB,MAAM,IAAI,QAAQ,IAAI,QAAQ,QAAQ,KAAK;EAC3C,QAAQ;EACR,OAAO,MAAM,IACX,KAAK,MAAM,MAAM,KAAK,MAAM,CAAC,GAC7B,KAAK,MAAM,MAAM,KAAK,MAAM,CAAC,GAC7B,KAAK,MAAM,MAAM,KAAK,MAAM,CAAC,CAC/B,CAAC,CAAC,EAAE;CACN,CAAC,CAAC,CACD,KAAK,EAAE;AACZ;AAEF,MAAa,YAAsD,EACjE,OAAO,cAAc,WAAW,SAAS,EAC3C;AAEA,MAAa,SAAS;CACpB,MAAM,IAAI,SAAS;CACnB,SAAS,IAAI,SAAS;CACtB,OAAO,IAAI,SAAS;CACpB,MAAM,IAAI,SAAS;CACnB,QAAQ,IAAI,SAAS;CACrB,QAAQ,IAAI,SAAS;CACrB,OAAO,IAAI,SAAS;CACpB,MAAM,IAAI,SAAS;CACnB,KAAK,MAAM;CACX,OAAO,IAAI,SAAS;AACtB;AAEA,MAAa,QAAQ;CACnB,MAAM;CACN,KAAK;CACL,IAAI;CACJ,KAAK;CACL,SAAS;CACT,OAAO;CACP,KAAK;CACL,KAAK;CACL,QAAQ;AACV;AAEA,MAAa,SAAS;CACpB,MAAM,UAAkB,IAAI,IAAI,OAAO,QAAQ,CAAC,EAAE;CAClD,SAAS,UAAkB,IAAI,IAAI,OAAO,QAAQ,CAAC,EAAE;AACvD;AAEA,SAAgB,QAAQ,QAAQ,IAAY;CAC1C,OAAO,MAAM,IAAI,IAAI,OAAO,KAAK,CAAC;AACpC"}

package/dist/version-manifest-deploy.cjs

@@ -0,0 +1,50 @@
+let node_fs = require("node:fs");
+let node_path = require("node:path");
+let every_plugin_version_manifest = require("every-plugin/version-manifest");
+let every_plugin_build_artifact_names = require("every-plugin/build/artifact-names");
+
+//#region src/version-manifest-deploy.ts
+/** Read a workspace dist's build-report.json (ticket 01's entry-name report). */
+function readBuildReport(distRoot) {
+	const reportPath = (0, node_path.join)(distRoot, "build-report.json");
+	if (!(0, node_fs.existsSync)(reportPath)) return null;
+	try {
+		return every_plugin_build_artifact_names.BuildEntryReportSchema.parse(JSON.parse((0, node_fs.readFileSync)(reportPath, "utf8")));
+	} catch {
+		return null;
+	}
+}
+/**
+* Compose the workspace's version manifest from the dist build reports and
+* the **server-computed** SRI map of the upload response (MAP decision 6 —
+* SRI is authoritative from the storage boundary, never computed
+* client-side). Returns null when the dist predates hashed entry names
+* (no report, or the SRI map lacks the entry) — the deploy leg then aborts:
+* uploaded workspaces must pin.
+*/
+function composeWorkspaceVersionManifest(input) {
+	const { report, ssrReport, integrityMap, files } = input;
+	const entryIntegrity = integrityMap[report.entry];
+	if (!entryIntegrity) return null;
+	const ssrEntry = ssrReport?.entry;
+	const ssrIntegrity = ssrEntry ? integrityMap[`ssr/${ssrEntry}`] : void 0;
+	return (0, every_plugin_version_manifest.composeVersionManifest)({
+		entry: report.entry,
+		entryIntegrity,
+		...ssrEntry && ssrIntegrity ? { ssr: {
+			entry: `ssr/${ssrEntry}`,
+			integrity: ssrIntegrity
+		} } : {},
+		...report.browserManifest && integrityMap[report.browserManifest] ? { browserManifest: {
+			file: report.browserManifest,
+			integrity: integrityMap[report.browserManifest]
+		} } : {},
+		...report.css && integrityMap[report.css] ? { assets: { css: integrityMap[report.css] } } : {},
+		...files ? { files } : {}
+	});
+}
+
+//#endregion
+exports.composeWorkspaceVersionManifest = composeWorkspaceVersionManifest;
+exports.readBuildReport = readBuildReport;
+//# sourceMappingURL=version-manifest-deploy.cjs.map

package/dist/version-manifest-deploy.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-manifest-deploy.cjs","names":["join","existsSync","BuildEntryReportSchema","readFileSync","composeVersionManifest"],"sources":["../src/version-manifest-deploy.ts"],"sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { type BuildEntryReport, BuildEntryReportSchema } from \"every-plugin/build/artifact-names\";\nimport {\n  composeVersionManifest,\n  type WorkspaceVersionManifest,\n} from \"every-plugin/version-manifest\";\n\n/** Read a workspace dist's build-report.json (ticket 01's entry-name report). */\nexport function readBuildReport(distRoot: string): BuildEntryReport | null {\n  const reportPath = join(distRoot, \"build-report.json\");\n  if (!existsSync(reportPath)) return null;\n  try {\n    return BuildEntryReportSchema.parse(JSON.parse(readFileSync(reportPath, \"utf8\")));\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Compose the workspace's version manifest from the dist build reports and\n * the **server-computed** SRI map of the upload response (MAP decision 6 —\n * SRI is authoritative from the storage boundary, never computed\n * client-side). Returns null when the dist predates hashed entry names\n * (no report, or the SRI map lacks the entry) — the deploy leg then aborts:\n * uploaded workspaces must pin.\n */\nexport function composeWorkspaceVersionManifest(input: {\n  report: BuildEntryReport;\n  ssrReport?: BuildEntryReport | null;\n  integrityMap: Record<string, string>;\n  /** full per-file SRI map of the dist — recorded for the next deploy's diff */\n  files?: Record<string, string>;\n}): WorkspaceVersionManifest | null {\n  const { report, ssrReport, integrityMap, files } = input;\n\n  const entryIntegrity = integrityMap[report.entry];\n  if (!entryIntegrity) return null;\n\n  const ssrEntry = ssrReport?.entry;\n  const ssrIntegrity = ssrEntry ? integrityMap[`ssr/${ssrEntry}`] : undefined;\n\n  return composeVersionManifest({\n    entry: report.entry,\n    entryIntegrity,\n    ...(ssrEntry && ssrIntegrity\n      ? { ssr: { entry: `ssr/${ssrEntry}`, integrity: ssrIntegrity } }\n      : {}),\n    ...(report.browserManifest && integrityMap[report.browserManifest]\n      ? {\n          browserManifest: {\n            file: report.browserManifest,\n            integrity: integrityMap[report.browserManifest]!,\n          },\n        }\n      : {}),\n    ...(report.css && integrityMap[report.css]\n      ? { assets: { css: integrityMap[report.css]! } }\n      : {}),\n    ...(files ? { files } : {}),\n  });\n}\n"],"mappings":";;;;;;;AASA,SAAgB,gBAAgB,UAA2C;CACzE,MAAM,iBAAaA,gBAAK,UAAU,mBAAmB;CACrD,IAAI,KAACC,oBAAW,UAAU,GAAG,OAAO;CACpC,IAAI;EACF,OAAOC,yDAAuB,MAAM,KAAK,UAAMC,sBAAa,YAAY,MAAM,CAAC,CAAC;CAClF,QAAQ;EACN,OAAO;CACT;AACF;;;;;;;;;AAUA,SAAgB,gCAAgC,OAMZ;CAClC,MAAM,EAAE,QAAQ,WAAW,cAAc,UAAU;CAEnD,MAAM,iBAAiB,aAAa,OAAO;CAC3C,IAAI,CAAC,gBAAgB,OAAO;CAE5B,MAAM,WAAW,WAAW;CAC5B,MAAM,eAAe,WAAW,aAAa,OAAO,cAAc;CAElE,WAAOC,sDAAuB;EAC5B,OAAO,OAAO;EACd;EACA,GAAI,YAAY,eACZ,EAAE,KAAK;GAAE,OAAO,OAAO;GAAY,WAAW;EAAa,EAAE,IAC7D,CAAC;EACL,GAAI,OAAO,mBAAmB,aAAa,OAAO,mBAC9C,EACE,iBAAiB;GACf,MAAM,OAAO;GACb,WAAW,aAAa,OAAO;EACjC,EACF,IACA,CAAC;EACL,GAAI,OAAO,OAAO,aAAa,OAAO,OAClC,EAAE,QAAQ,EAAE,KAAK,aAAa,OAAO,KAAM,EAAE,IAC7C,CAAC;EACL,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;CAC3B,CAAC;AACH"}

package/dist/version-manifest-deploy.mjs

@@ -0,0 +1,49 @@
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { composeVersionManifest } from "every-plugin/version-manifest";
+import { BuildEntryReportSchema } from "every-plugin/build/artifact-names";
+
+//#region src/version-manifest-deploy.ts
+/** Read a workspace dist's build-report.json (ticket 01's entry-name report). */
+function readBuildReport(distRoot) {
+	const reportPath = join(distRoot, "build-report.json");
+	if (!existsSync(reportPath)) return null;
+	try {
+		return BuildEntryReportSchema.parse(JSON.parse(readFileSync(reportPath, "utf8")));
+	} catch {
+		return null;
+	}
+}
+/**
+* Compose the workspace's version manifest from the dist build reports and
+* the **server-computed** SRI map of the upload response (MAP decision 6 —
+* SRI is authoritative from the storage boundary, never computed
+* client-side). Returns null when the dist predates hashed entry names
+* (no report, or the SRI map lacks the entry) — the deploy leg then aborts:
+* uploaded workspaces must pin.
+*/
+function composeWorkspaceVersionManifest(input) {
+	const { report, ssrReport, integrityMap, files } = input;
+	const entryIntegrity = integrityMap[report.entry];
+	if (!entryIntegrity) return null;
+	const ssrEntry = ssrReport?.entry;
+	const ssrIntegrity = ssrEntry ? integrityMap[`ssr/${ssrEntry}`] : void 0;
+	return composeVersionManifest({
+		entry: report.entry,
+		entryIntegrity,
+		...ssrEntry && ssrIntegrity ? { ssr: {
+			entry: `ssr/${ssrEntry}`,
+			integrity: ssrIntegrity
+		} } : {},
+		...report.browserManifest && integrityMap[report.browserManifest] ? { browserManifest: {
+			file: report.browserManifest,
+			integrity: integrityMap[report.browserManifest]
+		} } : {},
+		...report.css && integrityMap[report.css] ? { assets: { css: integrityMap[report.css] } } : {},
+		...files ? { files } : {}
+	});
+}
+
+//#endregion
+export { composeWorkspaceVersionManifest, readBuildReport };
+//# sourceMappingURL=version-manifest-deploy.mjs.map

package/dist/version-manifest-deploy.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-manifest-deploy.mjs","names":[],"sources":["../src/version-manifest-deploy.ts"],"sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { type BuildEntryReport, BuildEntryReportSchema } from \"every-plugin/build/artifact-names\";\nimport {\n  composeVersionManifest,\n  type WorkspaceVersionManifest,\n} from \"every-plugin/version-manifest\";\n\n/** Read a workspace dist's build-report.json (ticket 01's entry-name report). */\nexport function readBuildReport(distRoot: string): BuildEntryReport | null {\n  const reportPath = join(distRoot, \"build-report.json\");\n  if (!existsSync(reportPath)) return null;\n  try {\n    return BuildEntryReportSchema.parse(JSON.parse(readFileSync(reportPath, \"utf8\")));\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Compose the workspace's version manifest from the dist build reports and\n * the **server-computed** SRI map of the upload response (MAP decision 6 —\n * SRI is authoritative from the storage boundary, never computed\n * client-side). Returns null when the dist predates hashed entry names\n * (no report, or the SRI map lacks the entry) — the deploy leg then aborts:\n * uploaded workspaces must pin.\n */\nexport function composeWorkspaceVersionManifest(input: {\n  report: BuildEntryReport;\n  ssrReport?: BuildEntryReport | null;\n  integrityMap: Record<string, string>;\n  /** full per-file SRI map of the dist — recorded for the next deploy's diff */\n  files?: Record<string, string>;\n}): WorkspaceVersionManifest | null {\n  const { report, ssrReport, integrityMap, files } = input;\n\n  const entryIntegrity = integrityMap[report.entry];\n  if (!entryIntegrity) return null;\n\n  const ssrEntry = ssrReport?.entry;\n  const ssrIntegrity = ssrEntry ? integrityMap[`ssr/${ssrEntry}`] : undefined;\n\n  return composeVersionManifest({\n    entry: report.entry,\n    entryIntegrity,\n    ...(ssrEntry && ssrIntegrity\n      ? { ssr: { entry: `ssr/${ssrEntry}`, integrity: ssrIntegrity } }\n      : {}),\n    ...(report.browserManifest && integrityMap[report.browserManifest]\n      ? {\n          browserManifest: {\n            file: report.browserManifest,\n            integrity: integrityMap[report.browserManifest]!,\n          },\n        }\n      : {}),\n    ...(report.css && integrityMap[report.css]\n      ? { assets: { css: integrityMap[report.css]! } }\n      : {}),\n    ...(files ? { files } : {}),\n  });\n}\n"],"mappings":";;;;;;;AASA,SAAgB,gBAAgB,UAA2C;CACzE,MAAM,aAAa,KAAK,UAAU,mBAAmB;CACrD,IAAI,CAAC,WAAW,UAAU,GAAG,OAAO;CACpC,IAAI;EACF,OAAO,uBAAuB,MAAM,KAAK,MAAM,aAAa,YAAY,MAAM,CAAC,CAAC;CAClF,QAAQ;EACN,OAAO;CACT;AACF;;;;;;;;;AAUA,SAAgB,gCAAgC,OAMZ;CAClC,MAAM,EAAE,QAAQ,WAAW,cAAc,UAAU;CAEnD,MAAM,iBAAiB,aAAa,OAAO;CAC3C,IAAI,CAAC,gBAAgB,OAAO;CAE5B,MAAM,WAAW,WAAW;CAC5B,MAAM,eAAe,WAAW,aAAa,OAAO,cAAc;CAElE,OAAO,uBAAuB;EAC5B,OAAO,OAAO;EACd;EACA,GAAI,YAAY,eACZ,EAAE,KAAK;GAAE,OAAO,OAAO;GAAY,WAAW;EAAa,EAAE,IAC7D,CAAC;EACL,GAAI,OAAO,mBAAmB,aAAa,OAAO,mBAC9C,EACE,iBAAiB;GACf,MAAM,OAAO;GACb,WAAW,aAAa,OAAO;EACjC,EACF,IACA,CAAC;EACL,GAAI,OAAO,OAAO,aAAa,OAAO,OAClC,EAAE,QAAQ,EAAE,KAAK,aAAa,OAAO,KAAM,EAAE,IAC7C,CAAC;EACL,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;CAC3B,CAAC;AACH"}

package/dist/version-manifest-resolve.cjs

@@ -0,0 +1,42 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+let node_crypto = require("node:crypto");
+let every_plugin_version_manifest = require("every-plugin/version-manifest");
+
+//#region src/version-manifest-resolve.ts
+const cache = /* @__PURE__ */ new Map();
+function clearSlotVersionCache() {
+	cache.clear();
+}
+function fetchText(url, fetchImpl) {
+	return fetchImpl(url).then((response) => {
+		if (!response.ok) throw new Error(`version manifest fetch failed: ${response.status}`);
+		return response.text();
+	});
+}
+async function resolveSlotVersion(input) {
+	const key = `${input.base}::${input.pin.manifest}::${input.pin.integrity}`;
+	const cached = cache.get(key);
+	if (cached) return cached;
+	const manifestUrl = `${input.base.replace(/\/$/, "")}/${input.pin.manifest.replace(/^\//, "")}`;
+	const body = await fetchText(manifestUrl, input.fetchImpl ?? fetch);
+	const computed = `sha384-${(0, node_crypto.createHash)("sha384").update(body).digest("base64")}`;
+	if (computed !== input.pin.integrity) throw new Error(`[SRI] version manifest integrity mismatch for ${manifestUrl}\n  Expected: ${input.pin.integrity}\n  Computed: ${computed}`);
+	const manifest = every_plugin_version_manifest.WorkspaceVersionManifestSchema.parse(JSON.parse(body));
+	const resolved = {
+		entryUrl: `${input.base.replace(/\/$/, "")}/${manifest.entry}`,
+		entryIntegrity: manifest.entryIntegrity,
+		...manifest.browserManifest ? { browserManifestUrl: `${input.base.replace(/\/$/, "")}/${manifest.browserManifest.file}` } : {},
+		...manifest.ssr ? {
+			ssrEntryUrl: `${input.base.replace(/\/$/, "")}/${manifest.ssr.entry}`,
+			ssrIntegrity: manifest.ssr.integrity
+		} : {},
+		...manifest.files ? { files: manifest.files } : {}
+	};
+	cache.set(key, resolved);
+	return resolved;
+}
+
+//#endregion
+exports.clearSlotVersionCache = clearSlotVersionCache;
+exports.resolveSlotVersion = resolveSlotVersion;
+//# sourceMappingURL=version-manifest-resolve.cjs.map

package/dist/version-manifest-resolve.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-manifest-resolve.cjs","names":["createHash","WorkspaceVersionManifestSchema"],"sources":["../src/version-manifest-resolve.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport {\n  type WorkspaceVersionManifest,\n  WorkspaceVersionManifestSchema,\n} from \"every-plugin/version-manifest\";\n\n/**\n * Version-manifest slot resolution (atomic-deploys 04): a config slot's\n * `pin` ({ manifest, integrity }) resolves to the derived entry-level fields\n * every consumer needs. The cache is keyed by the full pin — the pinned\n * bytes are immutable, so a verified entry is cached for the process\n * lifetime and serves as last-known-good if the origin later fails; a fetch\n * or SRI failure with nothing cached propagates (a boot-time resolution\n * failure fails the deploy, which is the platform's rollback).\n */\n\nexport interface ResolvedSlotVersion {\n  /** Absolute URL of the content-hashed container entry. */\n  entryUrl: string;\n  entryIntegrity: string;\n  /** Absolute URL of the hashed browser manifest (mf-manifest), when present. */\n  browserManifestUrl?: string;\n  /** Absolute URL of the content-hashed SSR entry, when present. */\n  ssrEntryUrl?: string;\n  ssrIntegrity?: string;\n  /** Full per-file digest map of the dist (object path → SRI), when the\n   * pinned manifest carries one — the diff base for skip-unchanged uploads. */\n  files?: Record<string, string>;\n}\n\nexport interface SlotPin {\n  /** versioned manifest filename, relative to the slot's production base */\n  manifest: string;\n  /** the manifest document's own SRI */\n  integrity: string;\n}\n\nconst cache = new Map<string, ResolvedSlotVersion>();\n\nexport function clearSlotVersionCache(): void {\n  cache.clear();\n}\n\nfunction fetchText(url: string, fetchImpl: typeof fetch): Promise<string> {\n  return fetchImpl(url).then((response) => {\n    if (!response.ok) throw new Error(`version manifest fetch failed: ${response.status}`);\n    return response.text();\n  });\n}\n\nexport async function resolveSlotVersion(input: {\n  base: string;\n  pin: SlotPin;\n  fetchImpl?: typeof fetch;\n}): Promise<ResolvedSlotVersion> {\n  const key = `${input.base}::${input.pin.manifest}::${input.pin.integrity}`;\n  // content-addressed: a verified pin is cached for the process lifetime and\n  // never refetched — the cache IS the last-known-good\n  const cached = cache.get(key);\n  if (cached) return cached;\n\n  const manifestUrl = `${input.base.replace(/\\/$/, \"\")}/${input.pin.manifest.replace(/^\\//, \"\")}`;\n  const body = await fetchText(manifestUrl, input.fetchImpl ?? fetch);\n  const computed = `sha384-${createHash(\"sha384\").update(body).digest(\"base64\")}`;\n  if (computed !== input.pin.integrity) {\n    throw new Error(\n      `[SRI] version manifest integrity mismatch for ${manifestUrl}\\n  Expected: ${input.pin.integrity}\\n  Computed: ${computed}`,\n    );\n  }\n  const manifest: WorkspaceVersionManifest = WorkspaceVersionManifestSchema.parse(JSON.parse(body));\n\n  const resolved: ResolvedSlotVersion = {\n    entryUrl: `${input.base.replace(/\\/$/, \"\")}/${manifest.entry}`,\n    entryIntegrity: manifest.entryIntegrity,\n    ...(manifest.browserManifest\n      ? {\n          browserManifestUrl: `${input.base.replace(/\\/$/, \"\")}/${manifest.browserManifest.file}`,\n        }\n      : {}),\n    ...(manifest.ssr\n      ? {\n          ssrEntryUrl: `${input.base.replace(/\\/$/, \"\")}/${manifest.ssr.entry}`,\n          ssrIntegrity: manifest.ssr.integrity,\n        }\n      : {}),\n    ...(manifest.files ? { files: manifest.files } : {}),\n  };\n  cache.set(key, resolved);\n  return resolved;\n}\n"],"mappings":";;;;;AAqCA,MAAM,wBAAQ,IAAI,IAAiC;AAEnD,SAAgB,wBAA8B;CAC5C,MAAM,MAAM;AACd;AAEA,SAAS,UAAU,KAAa,WAA0C;CACxE,OAAO,UAAU,GAAG,CAAC,CAAC,MAAM,aAAa;EACvC,IAAI,CAAC,SAAS,IAAI,MAAM,IAAI,MAAM,kCAAkC,SAAS,QAAQ;EACrF,OAAO,SAAS,KAAK;CACvB,CAAC;AACH;AAEA,eAAsB,mBAAmB,OAIR;CAC/B,MAAM,MAAM,GAAG,MAAM,KAAK,IAAI,MAAM,IAAI,SAAS,IAAI,MAAM,IAAI;CAG/D,MAAM,SAAS,MAAM,IAAI,GAAG;CAC5B,IAAI,QAAQ,OAAO;CAEnB,MAAM,cAAc,GAAG,MAAM,KAAK,QAAQ,OAAO,EAAE,EAAE,GAAG,MAAM,IAAI,SAAS,QAAQ,OAAO,EAAE;CAC5F,MAAM,OAAO,MAAM,UAAU,aAAa,MAAM,aAAa,KAAK;CAClE,MAAM,WAAW,cAAUA,wBAAW,QAAQ,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,QAAQ;CAC5E,IAAI,aAAa,MAAM,IAAI,WACzB,MAAM,IAAI,MACR,iDAAiD,YAAY,gBAAgB,MAAM,IAAI,UAAU,gBAAgB,UACnH;CAEF,MAAM,WAAqCC,6DAA+B,MAAM,KAAK,MAAM,IAAI,CAAC;CAEhG,MAAM,WAAgC;EACpC,UAAU,GAAG,MAAM,KAAK,QAAQ,OAAO,EAAE,EAAE,GAAG,SAAS;EACvD,gBAAgB,SAAS;EACzB,GAAI,SAAS,kBACT,EACE,oBAAoB,GAAG,MAAM,KAAK,QAAQ,OAAO,EAAE,EAAE,GAAG,SAAS,gBAAgB,OACnF,IACA,CAAC;EACL,GAAI,SAAS,MACT;GACE,aAAa,GAAG,MAAM,KAAK,QAAQ,OAAO,EAAE,EAAE,GAAG,SAAS,IAAI;GAC9D,cAAc,SAAS,IAAI;EAC7B,IACA,CAAC;EACL,GAAI,SAAS,QAAQ,EAAE,OAAO,SAAS,MAAM,IAAI,CAAC;CACpD;CACA,MAAM,IAAI,KAAK,QAAQ;CACvB,OAAO;AACT"}

package/dist/version-manifest-resolve.d.cts

@@ -0,0 +1,38 @@
+//#region src/version-manifest-resolve.d.ts
+/**
+ * Version-manifest slot resolution (atomic-deploys 04): a config slot's
+ * `pin` ({ manifest, integrity }) resolves to the derived entry-level fields
+ * every consumer needs. The cache is keyed by the full pin — the pinned
+ * bytes are immutable, so a verified entry is cached for the process
+ * lifetime and serves as last-known-good if the origin later fails; a fetch
+ * or SRI failure with nothing cached propagates (a boot-time resolution
+ * failure fails the deploy, which is the platform's rollback).
+ */
+interface ResolvedSlotVersion {
+  /** Absolute URL of the content-hashed container entry. */
+  entryUrl: string;
+  entryIntegrity: string;
+  /** Absolute URL of the hashed browser manifest (mf-manifest), when present. */
+  browserManifestUrl?: string;
+  /** Absolute URL of the content-hashed SSR entry, when present. */
+  ssrEntryUrl?: string;
+  ssrIntegrity?: string;
+  /** Full per-file digest map of the dist (object path → SRI), when the
+   * pinned manifest carries one — the diff base for skip-unchanged uploads. */
+  files?: Record<string, string>;
+}
+interface SlotPin {
+  /** versioned manifest filename, relative to the slot's production base */
+  manifest: string;
+  /** the manifest document's own SRI */
+  integrity: string;
+}
+declare function clearSlotVersionCache(): void;
+declare function resolveSlotVersion(input: {
+  base: string;
+  pin: SlotPin;
+  fetchImpl?: typeof fetch;
+}): Promise<ResolvedSlotVersion>;
+//#endregion
+export { ResolvedSlotVersion, SlotPin, clearSlotVersionCache, resolveSlotVersion };
+//# sourceMappingURL=version-manifest-resolve.d.cts.map

package/dist/version-manifest-resolve.d.mts

@@ -0,0 +1,38 @@
+//#region src/version-manifest-resolve.d.ts
+/**
+ * Version-manifest slot resolution (atomic-deploys 04): a config slot's
+ * `pin` ({ manifest, integrity }) resolves to the derived entry-level fields
+ * every consumer needs. The cache is keyed by the full pin — the pinned
+ * bytes are immutable, so a verified entry is cached for the process
+ * lifetime and serves as last-known-good if the origin later fails; a fetch
+ * or SRI failure with nothing cached propagates (a boot-time resolution
+ * failure fails the deploy, which is the platform's rollback).
+ */
+interface ResolvedSlotVersion {
+  /** Absolute URL of the content-hashed container entry. */
+  entryUrl: string;
+  entryIntegrity: string;
+  /** Absolute URL of the hashed browser manifest (mf-manifest), when present. */
+  browserManifestUrl?: string;
+  /** Absolute URL of the content-hashed SSR entry, when present. */
+  ssrEntryUrl?: string;
+  ssrIntegrity?: string;
+  /** Full per-file digest map of the dist (object path → SRI), when the
+   * pinned manifest carries one — the diff base for skip-unchanged uploads. */
+  files?: Record<string, string>;
+}
+interface SlotPin {
+  /** versioned manifest filename, relative to the slot's production base */
+  manifest: string;
+  /** the manifest document's own SRI */
+  integrity: string;
+}
+declare function clearSlotVersionCache(): void;
+declare function resolveSlotVersion(input: {
+  base: string;
+  pin: SlotPin;
+  fetchImpl?: typeof fetch;
+}): Promise<ResolvedSlotVersion>;
+//#endregion
+export { ResolvedSlotVersion, SlotPin, clearSlotVersionCache, resolveSlotVersion };
+//# sourceMappingURL=version-manifest-resolve.d.mts.map

package/dist/version-manifest-resolve.mjs

@@ -0,0 +1,40 @@
+import { createHash } from "node:crypto";
+import { WorkspaceVersionManifestSchema } from "every-plugin/version-manifest";
+
+//#region src/version-manifest-resolve.ts
+const cache = /* @__PURE__ */ new Map();
+function clearSlotVersionCache() {
+	cache.clear();
+}
+function fetchText(url, fetchImpl) {
+	return fetchImpl(url).then((response) => {
+		if (!response.ok) throw new Error(`version manifest fetch failed: ${response.status}`);
+		return response.text();
+	});
+}
+async function resolveSlotVersion(input) {
+	const key = `${input.base}::${input.pin.manifest}::${input.pin.integrity}`;
+	const cached = cache.get(key);
+	if (cached) return cached;
+	const manifestUrl = `${input.base.replace(/\/$/, "")}/${input.pin.manifest.replace(/^\//, "")}`;
+	const body = await fetchText(manifestUrl, input.fetchImpl ?? fetch);
+	const computed = `sha384-${createHash("sha384").update(body).digest("base64")}`;
+	if (computed !== input.pin.integrity) throw new Error(`[SRI] version manifest integrity mismatch for ${manifestUrl}\n  Expected: ${input.pin.integrity}\n  Computed: ${computed}`);
+	const manifest = WorkspaceVersionManifestSchema.parse(JSON.parse(body));
+	const resolved = {
+		entryUrl: `${input.base.replace(/\/$/, "")}/${manifest.entry}`,
+		entryIntegrity: manifest.entryIntegrity,
+		...manifest.browserManifest ? { browserManifestUrl: `${input.base.replace(/\/$/, "")}/${manifest.browserManifest.file}` } : {},
+		...manifest.ssr ? {
+			ssrEntryUrl: `${input.base.replace(/\/$/, "")}/${manifest.ssr.entry}`,
+			ssrIntegrity: manifest.ssr.integrity
+		} : {},
+		...manifest.files ? { files: manifest.files } : {}
+	};
+	cache.set(key, resolved);
+	return resolved;
+}
+
+//#endregion
+export { clearSlotVersionCache, resolveSlotVersion };
+//# sourceMappingURL=version-manifest-resolve.mjs.map

package/dist/version-manifest-resolve.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-manifest-resolve.mjs","names":[],"sources":["../src/version-manifest-resolve.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport {\n  type WorkspaceVersionManifest,\n  WorkspaceVersionManifestSchema,\n} from \"every-plugin/version-manifest\";\n\n/**\n * Version-manifest slot resolution (atomic-deploys 04): a config slot's\n * `pin` ({ manifest, integrity }) resolves to the derived entry-level fields\n * every consumer needs. The cache is keyed by the full pin — the pinned\n * bytes are immutable, so a verified entry is cached for the process\n * lifetime and serves as last-known-good if the origin later fails; a fetch\n * or SRI failure with nothing cached propagates (a boot-time resolution\n * failure fails the deploy, which is the platform's rollback).\n */\n\nexport interface ResolvedSlotVersion {\n  /** Absolute URL of the content-hashed container entry. */\n  entryUrl: string;\n  entryIntegrity: string;\n  /** Absolute URL of the hashed browser manifest (mf-manifest), when present. */\n  browserManifestUrl?: string;\n  /** Absolute URL of the content-hashed SSR entry, when present. */\n  ssrEntryUrl?: string;\n  ssrIntegrity?: string;\n  /** Full per-file digest map of the dist (object path → SRI), when the\n   * pinned manifest carries one — the diff base for skip-unchanged uploads. */\n  files?: Record<string, string>;\n}\n\nexport interface SlotPin {\n  /** versioned manifest filename, relative to the slot's production base */\n  manifest: string;\n  /** the manifest document's own SRI */\n  integrity: string;\n}\n\nconst cache = new Map<string, ResolvedSlotVersion>();\n\nexport function clearSlotVersionCache(): void {\n  cache.clear();\n}\n\nfunction fetchText(url: string, fetchImpl: typeof fetch): Promise<string> {\n  return fetchImpl(url).then((response) => {\n    if (!response.ok) throw new Error(`version manifest fetch failed: ${response.status}`);\n    return response.text();\n  });\n}\n\nexport async function resolveSlotVersion(input: {\n  base: string;\n  pin: SlotPin;\n  fetchImpl?: typeof fetch;\n}): Promise<ResolvedSlotVersion> {\n  const key = `${input.base}::${input.pin.manifest}::${input.pin.integrity}`;\n  // content-addressed: a verified pin is cached for the process lifetime and\n  // never refetched — the cache IS the last-known-good\n  const cached = cache.get(key);\n  if (cached) return cached;\n\n  const manifestUrl = `${input.base.replace(/\\/$/, \"\")}/${input.pin.manifest.replace(/^\\//, \"\")}`;\n  const body = await fetchText(manifestUrl, input.fetchImpl ?? fetch);\n  const computed = `sha384-${createHash(\"sha384\").update(body).digest(\"base64\")}`;\n  if (computed !== input.pin.integrity) {\n    throw new Error(\n      `[SRI] version manifest integrity mismatch for ${manifestUrl}\\n  Expected: ${input.pin.integrity}\\n  Computed: ${computed}`,\n    );\n  }\n  const manifest: WorkspaceVersionManifest = WorkspaceVersionManifestSchema.parse(JSON.parse(body));\n\n  const resolved: ResolvedSlotVersion = {\n    entryUrl: `${input.base.replace(/\\/$/, \"\")}/${manifest.entry}`,\n    entryIntegrity: manifest.entryIntegrity,\n    ...(manifest.browserManifest\n      ? {\n          browserManifestUrl: `${input.base.replace(/\\/$/, \"\")}/${manifest.browserManifest.file}`,\n        }\n      : {}),\n    ...(manifest.ssr\n      ? {\n          ssrEntryUrl: `${input.base.replace(/\\/$/, \"\")}/${manifest.ssr.entry}`,\n          ssrIntegrity: manifest.ssr.integrity,\n        }\n      : {}),\n    ...(manifest.files ? { files: manifest.files } : {}),\n  };\n  cache.set(key, resolved);\n  return resolved;\n}\n"],"mappings":";;;;AAqCA,MAAM,wBAAQ,IAAI,IAAiC;AAEnD,SAAgB,wBAA8B;CAC5C,MAAM,MAAM;AACd;AAEA,SAAS,UAAU,KAAa,WAA0C;CACxE,OAAO,UAAU,GAAG,CAAC,CAAC,MAAM,aAAa;EACvC,IAAI,CAAC,SAAS,IAAI,MAAM,IAAI,MAAM,kCAAkC,SAAS,QAAQ;EACrF,OAAO,SAAS,KAAK;CACvB,CAAC;AACH;AAEA,eAAsB,mBAAmB,OAIR;CAC/B,MAAM,MAAM,GAAG,MAAM,KAAK,IAAI,MAAM,IAAI,SAAS,IAAI,MAAM,IAAI;CAG/D,MAAM,SAAS,MAAM,IAAI,GAAG;CAC5B,IAAI,QAAQ,OAAO;CAEnB,MAAM,cAAc,GAAG,MAAM,KAAK,QAAQ,OAAO,EAAE,EAAE,GAAG,MAAM,IAAI,SAAS,QAAQ,OAAO,EAAE;CAC5F,MAAM,OAAO,MAAM,UAAU,aAAa,MAAM,aAAa,KAAK;CAClE,MAAM,WAAW,UAAU,WAAW,QAAQ,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,QAAQ;CAC5E,IAAI,aAAa,MAAM,IAAI,WACzB,MAAM,IAAI,MACR,iDAAiD,YAAY,gBAAgB,MAAM,IAAI,UAAU,gBAAgB,UACnH;CAEF,MAAM,WAAqC,+BAA+B,MAAM,KAAK,MAAM,IAAI,CAAC;CAEhG,MAAM,WAAgC;EACpC,UAAU,GAAG,MAAM,KAAK,QAAQ,OAAO,EAAE,EAAE,GAAG,SAAS;EACvD,gBAAgB,SAAS;EACzB,GAAI,SAAS,kBACT,EACE,oBAAoB,GAAG,MAAM,KAAK,QAAQ,OAAO,EAAE,EAAE,GAAG,SAAS,gBAAgB,OACnF,IACA,CAAC;EACL,GAAI,SAAS,MACT;GACE,aAAa,GAAG,MAAM,KAAK,QAAQ,OAAO,EAAE,EAAE,GAAG,SAAS,IAAI;GAC9D,cAAc,SAAS,IAAI;EAC7B,IACA,CAAC;EACL,GAAI,SAAS,QAAQ,EAAE,OAAO,SAAS,MAAM,IAAI,CAAC;CACpD;CACA,MAAM,IAAI,KAAK,QAAQ;CACvB,OAAO;AACT"}

package/dist/version-status.cjs

@@ -0,0 +1,18 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+//#region src/version-status.ts
+function computeDeployedVersionStatus(input) {
+	if (input.servedFingerprint === null || input.servedFingerprint === void 0) return {
+		publishedFingerprint: input.publishedFingerprint,
+		inSync: false,
+		...input.servedError ? { error: input.servedError } : {}
+	};
+	return {
+		publishedFingerprint: input.publishedFingerprint,
+		servedFingerprint: input.servedFingerprint,
+		inSync: input.publishedFingerprint === input.servedFingerprint
+	};
+}
+
+//#endregion
+exports.computeDeployedVersionStatus = computeDeployedVersionStatus;
+//# sourceMappingURL=version-status.cjs.map

package/dist/version-status.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-status.cjs","names":[],"sources":["../src/version-status.ts"],"sourcesContent":["/**\n * Deployed-vs-served version delta (atomic-deploys 12): the split-brain\n * detector — the published pointer's fingerprint vs the fingerprint the host\n * actually serves. A mismatch means the host has not adopted the latest\n * publish (or is pinned to stale bytes), which is exactly what the\n * 2026-09-30 incident looked like from the outside.\n */\n\nexport interface DeployedVersionStatus {\n  publishedFingerprint: string;\n  servedFingerprint?: string;\n  inSync: boolean;\n  error?: string;\n}\n\nexport function computeDeployedVersionStatus(input: {\n  publishedFingerprint: string;\n  servedFingerprint?: string | null;\n  servedError?: string;\n}): DeployedVersionStatus {\n  if (input.servedFingerprint === null || input.servedFingerprint === undefined) {\n    return {\n      publishedFingerprint: input.publishedFingerprint,\n      inSync: false,\n      ...(input.servedError ? { error: input.servedError } : {}),\n    };\n  }\n  return {\n    publishedFingerprint: input.publishedFingerprint,\n    servedFingerprint: input.servedFingerprint,\n    inSync: input.publishedFingerprint === input.servedFingerprint,\n  };\n}\n"],"mappings":";;AAeA,SAAgB,6BAA6B,OAInB;CACxB,IAAI,MAAM,sBAAsB,QAAQ,MAAM,sBAAsB,QAClE,OAAO;EACL,sBAAsB,MAAM;EAC5B,QAAQ;EACR,GAAI,MAAM,cAAc,EAAE,OAAO,MAAM,YAAY,IAAI,CAAC;CAC1D;CAEF,OAAO;EACL,sBAAsB,MAAM;EAC5B,mBAAmB,MAAM;EACzB,QAAQ,MAAM,yBAAyB,MAAM;CAC/C;AACF"}

package/dist/version-status.d.cts

@@ -0,0 +1,22 @@
+//#region src/version-status.d.ts
+/**
+ * Deployed-vs-served version delta (atomic-deploys 12): the split-brain
+ * detector — the published pointer's fingerprint vs the fingerprint the host
+ * actually serves. A mismatch means the host has not adopted the latest
+ * publish (or is pinned to stale bytes), which is exactly what the
+ * 2026-09-30 incident looked like from the outside.
+ */
+interface DeployedVersionStatus {
+  publishedFingerprint: string;
+  servedFingerprint?: string;
+  inSync: boolean;
+  error?: string;
+}
+declare function computeDeployedVersionStatus(input: {
+  publishedFingerprint: string;
+  servedFingerprint?: string | null;
+  servedError?: string;
+}): DeployedVersionStatus;
+//#endregion
+export { DeployedVersionStatus, computeDeployedVersionStatus };
+//# sourceMappingURL=version-status.d.cts.map

package/dist/version-status.d.mts

@@ -0,0 +1,22 @@
+//#region src/version-status.d.ts
+/**
+ * Deployed-vs-served version delta (atomic-deploys 12): the split-brain
+ * detector — the published pointer's fingerprint vs the fingerprint the host
+ * actually serves. A mismatch means the host has not adopted the latest
+ * publish (or is pinned to stale bytes), which is exactly what the
+ * 2026-09-30 incident looked like from the outside.
+ */
+interface DeployedVersionStatus {
+  publishedFingerprint: string;
+  servedFingerprint?: string;
+  inSync: boolean;
+  error?: string;
+}
+declare function computeDeployedVersionStatus(input: {
+  publishedFingerprint: string;
+  servedFingerprint?: string | null;
+  servedError?: string;
+}): DeployedVersionStatus;
+//#endregion
+export { DeployedVersionStatus, computeDeployedVersionStatus };
+//# sourceMappingURL=version-status.d.mts.map

package/dist/version-status.mjs

@@ -0,0 +1,17 @@
+//#region src/version-status.ts
+function computeDeployedVersionStatus(input) {
+	if (input.servedFingerprint === null || input.servedFingerprint === void 0) return {
+		publishedFingerprint: input.publishedFingerprint,
+		inSync: false,
+		...input.servedError ? { error: input.servedError } : {}
+	};
+	return {
+		publishedFingerprint: input.publishedFingerprint,
+		servedFingerprint: input.servedFingerprint,
+		inSync: input.publishedFingerprint === input.servedFingerprint
+	};
+}
+
+//#endregion
+export { computeDeployedVersionStatus };
+//# sourceMappingURL=version-status.mjs.map

package/dist/version-status.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-status.mjs","names":[],"sources":["../src/version-status.ts"],"sourcesContent":["/**\n * Deployed-vs-served version delta (atomic-deploys 12): the split-brain\n * detector — the published pointer's fingerprint vs the fingerprint the host\n * actually serves. A mismatch means the host has not adopted the latest\n * publish (or is pinned to stale bytes), which is exactly what the\n * 2026-09-30 incident looked like from the outside.\n */\n\nexport interface DeployedVersionStatus {\n  publishedFingerprint: string;\n  servedFingerprint?: string;\n  inSync: boolean;\n  error?: string;\n}\n\nexport function computeDeployedVersionStatus(input: {\n  publishedFingerprint: string;\n  servedFingerprint?: string | null;\n  servedError?: string;\n}): DeployedVersionStatus {\n  if (input.servedFingerprint === null || input.servedFingerprint === undefined) {\n    return {\n      publishedFingerprint: input.publishedFingerprint,\n      inSync: false,\n      ...(input.servedError ? { error: input.servedError } : {}),\n    };\n  }\n  return {\n    publishedFingerprint: input.publishedFingerprint,\n    servedFingerprint: input.servedFingerprint,\n    inSync: input.publishedFingerprint === input.servedFingerprint,\n  };\n}\n"],"mappings":";AAeA,SAAgB,6BAA6B,OAInB;CACxB,IAAI,MAAM,sBAAsB,QAAQ,MAAM,sBAAsB,QAClE,OAAO;EACL,sBAAsB,MAAM;EAC5B,QAAQ;EACR,GAAI,MAAM,cAAc,EAAE,OAAO,MAAM,YAAY,IAAI,CAAC;CAC1D;CAEF,OAAO;EACL,sBAAsB,MAAM;EAC5B,mBAAmB,MAAM;EACzB,QAAQ,MAAM,yBAAyB,MAAM;CAC/C;AACF"}

package/dist/workspace-catalog.cjs

@@ -0,0 +1,53 @@
+let node_fs = require("node:fs");
+let node_path = require("node:path");
+let yaml = require("yaml");
+
+//#region src/workspace-catalog.ts
+const WORKSPACE_YAML = "pnpm-workspace.yaml";
+function catalogFromPackageJson(pkgJson) {
+	const catalog = pkgJson.workspaces?.catalog;
+	return catalog && typeof catalog === "object" ? { ...catalog } : {};
+}
+function readWorkspaceCatalog(root) {
+	const yamlPath = (0, node_path.join)(root, WORKSPACE_YAML);
+	if ((0, node_fs.existsSync)(yamlPath)) {
+		const catalog = (0, yaml.parse)((0, node_fs.readFileSync)(yamlPath, "utf8"))?.catalog;
+		return catalog && typeof catalog === "object" ? { ...catalog } : {};
+	}
+	const pkgPath = (0, node_path.join)(root, "package.json");
+	if ((0, node_fs.existsSync)(pkgPath)) try {
+		return catalogFromPackageJson(JSON.parse((0, node_fs.readFileSync)(pkgPath, "utf8")));
+	} catch {
+		return {};
+	}
+	return {};
+}
+function writeWorkspaceCatalog(root, catalog) {
+	const yamlPath = (0, node_path.join)(root, WORKSPACE_YAML);
+	const pkgPath = (0, node_path.join)(root, "package.json");
+	const usesYaml = (0, node_fs.existsSync)(yamlPath);
+	const sorted = Object.fromEntries(Object.entries(catalog).sort(([a], [b]) => a.localeCompare(b)));
+	if (usesYaml) {
+		const parsed = (0, yaml.parse)((0, node_fs.readFileSync)(yamlPath, "utf8"));
+		const doc = parsed && typeof parsed === "object" ? parsed : {};
+		doc.catalog = sorted;
+		const body = (0, yaml.stringify)(doc, { lineWidth: 0 }).trimEnd();
+		(0, node_fs.writeFileSync)(yamlPath, `${body}\n`);
+		return;
+	}
+	let pkg = {};
+	if ((0, node_fs.existsSync)(pkgPath)) try {
+		pkg = JSON.parse((0, node_fs.readFileSync)(pkgPath, "utf8"));
+	} catch {
+		pkg = {};
+	}
+	if (!pkg.workspaces) pkg.workspaces = {};
+	pkg.workspaces.catalog = sorted;
+	(0, node_fs.writeFileSync)(pkgPath, `${JSON.stringify(pkg, null, 2)}\n`);
+}
+
+//#endregion
+exports.catalogFromPackageJson = catalogFromPackageJson;
+exports.readWorkspaceCatalog = readWorkspaceCatalog;
+exports.writeWorkspaceCatalog = writeWorkspaceCatalog;
+//# sourceMappingURL=workspace-catalog.cjs.map

package/dist/workspace-catalog.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-catalog.cjs","names":["join","existsSync","parse","readFileSync","stringify"],"sources":["../src/workspace-catalog.ts"],"sourcesContent":["import { existsSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { parse, stringify } from \"yaml\";\n\ninterface PkgJsonLike {\n  workspaces?: { packages?: string[]; catalog?: Record<string, string> };\n}\n\ninterface WorkspaceYaml {\n  packages?: string[];\n  catalog?: Record<string, string>;\n  [key: string]: unknown;\n}\n\nconst WORKSPACE_YAML = \"pnpm-workspace.yaml\";\n\nexport function catalogFromPackageJson(pkgJson: PkgJsonLike): Record<string, string> {\n  const catalog = pkgJson.workspaces?.catalog;\n  return catalog && typeof catalog === \"object\" ? { ...catalog } : {};\n}\n\nexport function readWorkspaceCatalog(root: string): Record<string, string> {\n  const yamlPath = join(root, WORKSPACE_YAML);\n  if (existsSync(yamlPath)) {\n    const doc = parse(readFileSync(yamlPath, \"utf8\")) as WorkspaceYaml | null;\n    const catalog = doc?.catalog;\n    return catalog && typeof catalog === \"object\" ? { ...catalog } : {};\n  }\n\n  const pkgPath = join(root, \"package.json\");\n  if (existsSync(pkgPath)) {\n    try {\n      const pkg = JSON.parse(readFileSync(pkgPath, \"utf8\")) as PkgJsonLike;\n      return catalogFromPackageJson(pkg);\n    } catch {\n      return {};\n    }\n  }\n\n  return {};\n}\n\nexport function writeWorkspaceCatalog(root: string, catalog: Record<string, string>): void {\n  const yamlPath = join(root, WORKSPACE_YAML);\n  const pkgPath = join(root, \"package.json\");\n  const usesYaml = existsSync(yamlPath);\n  const sorted = Object.fromEntries(Object.entries(catalog).sort(([a], [b]) => a.localeCompare(b)));\n\n  if (usesYaml) {\n    const parsed = parse(readFileSync(yamlPath, \"utf8\")) as WorkspaceYaml | null;\n    const doc: WorkspaceYaml = parsed && typeof parsed === \"object\" ? parsed : {};\n    doc.catalog = sorted;\n    const body = stringify(doc, { lineWidth: 0 }).trimEnd();\n    writeFileSync(yamlPath, `${body}\\n`);\n    return;\n  }\n\n  let pkg: PkgJsonLike = {};\n  if (existsSync(pkgPath)) {\n    try {\n      pkg = JSON.parse(readFileSync(pkgPath, \"utf8\")) as PkgJsonLike;\n    } catch {\n      pkg = {};\n    }\n  }\n  if (!pkg.workspaces) {\n    pkg.workspaces = {};\n  }\n  pkg.workspaces.catalog = sorted;\n  writeFileSync(pkgPath, `${JSON.stringify(pkg, null, 2)}\\n`);\n}\n"],"mappings":";;;;;AAcA,MAAM,iBAAiB;AAEvB,SAAgB,uBAAuB,SAA8C;CACnF,MAAM,UAAU,QAAQ,YAAY;CACpC,OAAO,WAAW,OAAO,YAAY,WAAW,EAAE,GAAG,QAAQ,IAAI,CAAC;AACpE;AAEA,SAAgB,qBAAqB,MAAsC;CACzE,MAAM,eAAWA,gBAAK,MAAM,cAAc;CAC1C,QAAIC,oBAAW,QAAQ,GAAG;EAExB,MAAM,cADMC,gBAAMC,sBAAa,UAAU,MAAM,CAC7B,CAAC,EAAE;EACrB,OAAO,WAAW,OAAO,YAAY,WAAW,EAAE,GAAG,QAAQ,IAAI,CAAC;CACpE;CAEA,MAAM,cAAUH,gBAAK,MAAM,cAAc;CACzC,QAAIC,oBAAW,OAAO,GACpB,IAAI;EAEF,OAAO,uBADK,KAAK,UAAME,sBAAa,SAAS,MAAM,CACnB,CAAC;CACnC,QAAQ;EACN,OAAO,CAAC;CACV;CAGF,OAAO,CAAC;AACV;AAEA,SAAgB,sBAAsB,MAAc,SAAuC;CACzF,MAAM,eAAWH,gBAAK,MAAM,cAAc;CAC1C,MAAM,cAAUA,gBAAK,MAAM,cAAc;CACzC,MAAM,eAAWC,oBAAW,QAAQ;CACpC,MAAM,SAAS,OAAO,YAAY,OAAO,QAAQ,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;CAEhG,IAAI,UAAU;EACZ,MAAM,aAASC,gBAAMC,sBAAa,UAAU,MAAM,CAAC;EACnD,MAAM,MAAqB,UAAU,OAAO,WAAW,WAAW,SAAS,CAAC;EAC5E,IAAI,UAAU;EACd,MAAM,WAAOC,gBAAU,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,QAAQ;EACtD,2BAAc,UAAU,GAAG,KAAK,GAAG;EACnC;CACF;CAEA,IAAI,MAAmB,CAAC;CACxB,QAAIH,oBAAW,OAAO,GACpB,IAAI;EACF,MAAM,KAAK,UAAME,sBAAa,SAAS,MAAM,CAAC;CAChD,QAAQ;EACN,MAAM,CAAC;CACT;CAEF,IAAI,CAAC,IAAI,YACP,IAAI,aAAa,CAAC;CAEpB,IAAI,WAAW,UAAU;CACzB,2BAAc,SAAS,GAAG,KAAK,UAAU,KAAK,MAAM,CAAC,EAAE,GAAG;AAC5D"}