@ai-dossier/cli 0.8.3 → 0.8.5

package/README.md

@@ -4,11 +4,13 @@
 [![npm downloads](https://img.shields.io/npm/dm/@ai-dossier/cli)](https://www.npmjs.com/package/@ai-dossier/cli)
 [![License: AGPL-3.0](https://img.shields.io/badge/License-AGPL--3.0-blue.svg)](https://github.com/imboard-ai/ai-dossier/blob/main/LICENSE)
 
-**Enforce cryptographic verification before executing dossiers.**
+**Install, verify, and publish dossiers — portable, signed, versioned skills — for any LLM tool.**
+
+A dossier is a skill with trust built in. This CLI is how you author them, verify their signatures, publish them to a registry, and install them as Claude Code skills (`install-skill` / `skill-export`).
 
 ## The Problem This Solves
 
-**Reality**: LLMs cannot be relied upon to enforce security checks automatically.
+A plain skill is unsigned, unversioned, and locked to one tool — and **LLMs cannot be relied upon to enforce security checks automatically.**
 
 Even with MCP server installed and protocol documentation:
 - ❌ LLMs may skip verification
@@ -225,7 +227,7 @@ ai-dossier pull org/dossier-a org/dossier-b
 ai-dossier pull org/my-dossier --force
 ```
 
-Pulled dossiers are cached locally with checksum verification. Subsequent `pull` calls skip the download if the version is already cached (use `--force` to override).
+Pulled dossiers are cached locally with checksum verification. Subsequent `pull` calls skip the download if the version is already cached (use `--force` to override). See [Cache and Version Resolution](#cache-and-version-resolution) for how versionless names are resolved and how to control freshness.
 
 ### Export
 
@@ -244,6 +246,112 @@ ai-dossier export org/my-dossier --stdout
 
 ---
 
+## Skills
+
+A dossier is a skill with trust, versioning, and registry distribution added. These commands bridge the registry and Claude Code skills (`~/.claude/skills/`).
+
+A **trigger skill** is a thin `SKILL.md` that fires on a phrase and invokes a versioned, signed dossier via `ai-dossier run <registry-path>`. You author and trigger it like any skill, but it gains signing, version pinning, and registry distribution.
+
+### `install-skill` — registry dossier → Claude Code skill
+
+```bash
+# Install a published skill into ~/.claude/skills/
+ai-dossier install-skill org/skills/my-skill
+
+# List installed skills / force a fresh re-pull / remove one
+ai-dossier install-skill --list
+ai-dossier install-skill org/skills/my-skill --fresh --force
+ai-dossier install-skill --remove my-skill
+```
+
+Restart Claude Code (or start a new session) to pick up a newly installed skill. At run time the skill calls `ai-dossier run <registry-path>`, which fetches and verifies the dossier on demand — so you don't need to install the dossier separately.
+
+### `skill-export` — local skill → registry dossier
+
+Publish a locally installed skill to the registry as a versioned, signed dossier so others can `install-skill` it:
+
+```bash
+# Publish ~/.claude/skills/my-skill to the registry (minor version bump)
+ai-dossier skill-export my-skill --namespace org/skills
+
+# Pin an explicit version, add a changelog, verify the roundtrip
+ai-dossier skill-export my-skill --version 2.0.0 --changelog "Add range support" --verify
+```
+
+| Option | Effect |
+|--------|--------|
+| `--namespace <ns>` | Registry namespace (default: first org or username) |
+| `--version <v>` / `--major` / `--no-bump` | Control the published version |
+| `--changelog <msg>` | Changelog message for the release |
+| `--verify` | Re-install after publish to confirm the roundtrip |
+
+---
+
+## Cache and Version Resolution
+
+The CLI maintains a local cache at `~/.dossier/cache/`:
+
+- **Content cache** — `~/.dossier/cache/<name>/<version>.ds.md` (the dossier bytes, content-addressable by version).
+- **Resolution cache** — `~/.dossier/cache/.resolution/<name>.json` (which version a versionless name resolves to, with TTL).
+
+### How versionless names resolve
+
+Pinned references (`org/my-dossier@1.2.3`) are content-addressable and never expire — they bypass the resolver entirely.
+
+Versionless references (`org/my-dossier`) are resolved through a **TTL'd resolution cache**:
+
+1. If a recent resolution exists (within TTL) → reuse it (no registry call).
+2. Otherwise → call the registry, write the resolved version to the resolution cache, return it.
+3. If the registry is unreachable → fall back to the highest-semver cached version and print a loud stderr warning. If nothing is cached, fail with a clear error.
+
+This applies to `ai-dossier run`, `ai-dossier create`, and `ai-dossier install-skill`.
+
+### Controlling freshness
+
+| Flag | Effect |
+|------|--------|
+| (none) | Use cached resolution if newer than `cache.resolutionTtlSeconds` (default 300s). |
+| `--max-age <seconds>` | Override TTL for this call. `0` forces a registry check. |
+| `--fresh` | Skip the resolution cache and the content cache; fetch fresh from the registry. |
+| `--pull` (`run` only) | Refresh the content cache (re-download) but still resolve via the resolver. |
+
+```bash
+# Default: use cached resolution if within 300s
+ai-dossier run org/my-dossier
+
+# Force a registry re-check
+ai-dossier run org/my-dossier --max-age 0
+
+# Skip the entire cache for this call
+ai-dossier run org/my-dossier --fresh
+```
+
+Configure the default TTL:
+
+```bash
+dossier config cache.resolutionTtlSeconds 600
+```
+
+### `cache` subcommand
+
+```bash
+# Show all cached dossiers (content cache)
+ai-dossier cache list
+ai-dossier cache list --size --json
+
+# Show cached versionless → version resolutions (with timestamps)
+ai-dossier cache resolutions
+ai-dossier cache resolutions --json
+
+# Remove cached entries
+ai-dossier cache clean <name>             # all versions of a dossier
+ai-dossier cache clean <name> --ver 1.2.0 # specific version
+ai-dossier cache clean --older-than 30    # entries older than N days
+ai-dossier cache clean --all              # everything (prompts; use -y to skip)
+```
+
+---
+
 ## Multi-Registry Resolution
 
 The CLI queries all configured registries in parallel when resolving dossiers (e.g., `dossier get`, `dossier run`, `dossier pull`). This uses `Promise.allSettled()` so a single registry failure does not block results from other registries.
@@ -641,34 +749,20 @@ Exit 0 (safe) or 1 (unsafe)
 
 ---
 
-## Limitations
-
-### Current Limitations
-
-1. **Signature Verification**: Basic implementation
-   - Detects test signatures (invalid/fake)
-   - Full minisign verification requires external tool
-   - Future: Native minisign support
-
-2. **Trusted Keys**: Not yet implemented
-   - Future: Check against ~/.dossier/trusted-keys.txt
-   - Future: Key management commands
+## Capabilities & Limitations
 
-3. **Execution**: --run flag not implemented
-   - Currently just verifies
-   - Future: Execute if verification passes
+### What's implemented
 
-### Why These Limitations Exist
+- ✅ **Checksum verification** (SHA256) — catches any tampering with the dossier body
+- ✅ **Signature verification** — Ed25519 (Minisign-compatible) and AWS KMS; signatures are validated, not just detected
+- ✅ **Trusted keys** — verified against `~/.dossier/trusted-keys.txt`; manage with `ai-dossier keys`
+- ✅ **Risk assessment** — declared risk level + destructive-operation analysis gate execution
+- ✅ **Execution** — `ai-dossier run` verifies, then executes if checks pass
 
-**Current status**: MVP for verification enforcement
-**Focus**: Get checksum verification working reliably
-**Future**: Full signature verification, trust management, execution
+### Current limitations
 
-**But even with limitations**:
-- ✅ Checksum verification catches tampering
-- ✅ Signature presence detection works
-- ✅ Exit codes enable integration
-- ✅ Enforces security before LLM involvement
+- Verification is a single integrity stage (checksum + signature) plus risk assessment — there is no multi-stage sandbox; the executing agent enforces runtime permissions.
+- Trust is local: you decide which keys to trust. A valid signature from an untrusted key is reported as such, not auto-trusted.
 
 ---
 
@@ -682,7 +776,7 @@ Exit 0 (safe) or 1 (unsafe)
 
 ### v0.2.0
 - ✅ Multi-command CLI structure (`ai-dossier <command>`)
-- ✅ `dossier run` command with 5-stage verification pipeline
+- ✅ `ai-dossier run` command with integrity verification (checksum + signature)
 - ✅ LLM auto-detection and execution integration
 
 ### v0.3.0
@@ -715,18 +809,18 @@ Exit 0 (safe) or 1 (unsafe)
 - ✅ Coverage thresholds enforcement
 - ✅ Documentation consistency fixes
 
-### v0.8.0 (Current)
+### v0.8.x (Current)
 - ✅ Zod validation on MCP prompt handlers
 - ✅ Complete doc link audit and fix (30+ broken links)
-- ✅ Remove all "coming soon" stubs
-- ✅ Purge stale GitHub Packages / Node 18 references
-- ✅ Improved getting-started learning path
+- ✅ Ed25519 + AWS KMS signature verification with trusted-keys
+- ✅ `install-skill` / `skill-export` (Claude Code skill bridge)
+- ✅ Execution tracing with verified checksum + signer metadata
+- ✅ TTL-based version resolution for the content cache
 
 ### v1.0.0 (Stable)
-- ⏳ Complete signature verification
-- ⏳ Trust management UI
-- ⏳ Integration with major LLM tools
-- ⏳ Comprehensive documentation
+- ⏳ Stable, frozen CLI surface and exit-code contract
+- ⏳ Deeper integration with major LLM tools
+- ⏳ Expanded registry/discovery features
 
 ---
 

package/dist/cache-resolver.d.ts

@@ -0,0 +1,91 @@
+/**
+ * Versionless dossier name → resolved version mapping with TTL.
+ *
+ * Pinned versions (name@1.2.3) are content-addressable and never go stale.
+ * Versionless names (name) are the only thing that ages, so the TTL belongs
+ * on resolution, not on cached content bytes.
+ *
+ * Resolution cache lives at ~/.dossier/cache/.resolution/<name>.json, one
+ * tiny file per dossier with { resolved_version, resolved_at, source_registry }.
+ *
+ * On registry failure, falls back to the highest-semver version already in
+ * ~/.dossier/cache/<name>/ and prints a loud stderr warning so the staleness
+ * is never silent.
+ */
+export declare const DEFAULT_RESOLUTION_TTL_SECONDS = 300;
+export declare const CACHE_DIR: string;
+export declare const RESOLUTION_DIR: string;
+export interface ResolutionRecord {
+    resolved_version: string;
+    resolved_at: string;
+    source_registry?: string;
+}
+export type ResolutionSource = 'cache' | 'registry' | 'stale-cache';
+export interface ResolvedVersion {
+    version: string;
+    source: ResolutionSource;
+    registry?: string;
+    /** Present only when source === 'stale-cache' — explains why we did not reach the registry. */
+    warning?: string;
+}
+export interface ResolveOptions {
+    /** Skip the resolution cache and force a registry call. */
+    fresh?: boolean;
+    /** Override the TTL for this call. 0 forces a registry call. */
+    maxAgeSeconds?: number;
+}
+/** Highest-semver version currently cached on disk for this name, or null. */
+export declare function highestCachedSemver(dossierName: string): string | null;
+/**
+ * Resolve a versionless dossier name to a concrete version.
+ *
+ * Flow:
+ *   1. If !fresh and a resolution file exists and is within TTL → return cached resolution.
+ *   2. Otherwise call the registry. On success → write resolution file → return.
+ *   3. On registry failure → fall back to highest-semver cached version with a
+ *      loud stderr warning. If nothing is cached, rethrow.
+ *
+ * Callers should pass an already-stripped name (without @version suffix). For
+ * pinned versions, skip this resolver entirely.
+ */
+export declare function resolveCachedVersion(dossierName: string, opts?: ResolveOptions): Promise<ResolvedVersion>;
+/** Exposed for the `cache resolutions` subcommand. */
+export declare function listResolutions(): Array<{
+    name: string;
+    record: ResolutionRecord;
+}>;
+/** Exposed for tests and the `cache clean` flow — remove all resolution files. */
+export declare function clearResolutions(): void;
+/**
+ * Path to a cached dossier's content file (without checking existence).
+ * Centralises the `<cache>/<name>/<version>.ds.md` layout used by
+ * run/create/install-skill/pull so layout changes happen in one place.
+ */
+export declare function cachedContentPath(dossierName: string, version: string): string;
+/**
+ * Return cached dossier content as a string, or null if not cached.
+ * Single source of truth for the `existsSync(contentFile) ? read : miss`
+ * block that previously lived in run.ts, create.ts, and install-skill.ts.
+ */
+export declare function readCachedContent(dossierName: string, version: string): string | null;
+/**
+ * Write a dossier's content + .meta.json to the cache.
+ *
+ * The .meta.json shape (`cached_at` + `version` + `source_registry`) is the
+ * one read by `cache list` / `cache clean` and was previously duplicated
+ * verbatim in run.ts, create.ts, install-skill.ts, and pull.ts.
+ *
+ * Best-effort by default (errors swallowed, matching create.ts/install-skill.ts).
+ * Pass `throwOnError: true` for callers that want to surface write failures
+ * (pull.ts wants this — a failed download cache write is a hard failure).
+ */
+export declare function writeCachedContent(dossierName: string, version: string, content: string, sourceRegistry: string | undefined, opts?: {
+    throwOnError?: boolean;
+}): void;
+/**
+ * Parse a `--max-age <seconds>` CLI option into a number, or return undefined
+ * when unset. Throws when the value is provided but not a valid number.
+ * Used by run/create/install-skill which all expose the same flag.
+ */
+export declare function parseMaxAgeOption(raw: string | undefined): number | undefined;
+//# sourceMappingURL=cache-resolver.d.ts.map

package/dist/cache-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache-resolver.d.ts","sourceRoot":"","sources":["../src/cache-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AASH,eAAO,MAAM,8BAA8B,MAAM,CAAC;AAClD,eAAO,MAAM,SAAS,QAA+C,CAAC;AACtE,eAAO,MAAM,cAAc,QAAsC,CAAC;AAElE,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,UAAU,GAAG,aAAa,CAAC;AAEpE,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,gBAAgB,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+FAA+F;IAC/F,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,2DAA2D;IAC3D,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,gEAAgE;IAChE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAwED,8EAA8E;AAC9E,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CActE;AAmBD;;;;;;;;;;;GAWG;AACH,wBAAsB,oBAAoB,CACxC,WAAW,EAAE,MAAM,EACnB,IAAI,GAAE,cAAmB,GACxB,OAAO,CAAC,eAAe,CAAC,CAwF1B;AAED,sDAAsD;AACtD,wBAAgB,eAAe,IAAI,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAA;CAAE,CAAC,CA2BnF;AAED,kFAAkF;AAClF,wBAAgB,gBAAgB,IAAI,IAAI,CAIvC;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAE9E;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQrF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,IAAI,GAAE;IAAE,YAAY,CAAC,EAAE,OAAO,CAAA;CAAO,GACpC,IAAI,CAsBN;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAO7E"}

package/dist/cache-resolver.js

@@ -0,0 +1,331 @@
+"use strict";
+/**
+ * Versionless dossier name → resolved version mapping with TTL.
+ *
+ * Pinned versions (name@1.2.3) are content-addressable and never go stale.
+ * Versionless names (name) are the only thing that ages, so the TTL belongs
+ * on resolution, not on cached content bytes.
+ *
+ * Resolution cache lives at ~/.dossier/cache/.resolution/<name>.json, one
+ * tiny file per dossier with { resolved_version, resolved_at, source_registry }.
+ *
+ * On registry failure, falls back to the highest-semver version already in
+ * ~/.dossier/cache/<name>/ and prints a loud stderr warning so the staleness
+ * is never silent.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RESOLUTION_DIR = exports.CACHE_DIR = exports.DEFAULT_RESOLUTION_TTL_SECONDS = void 0;
+exports.highestCachedSemver = highestCachedSemver;
+exports.resolveCachedVersion = resolveCachedVersion;
+exports.listResolutions = listResolutions;
+exports.clearResolutions = clearResolutions;
+exports.cachedContentPath = cachedContentPath;
+exports.readCachedContent = readCachedContent;
+exports.writeCachedContent = writeCachedContent;
+exports.parseMaxAgeOption = parseMaxAgeOption;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_os_1 = __importDefault(require("node:os"));
+const node_path_1 = __importDefault(require("node:path"));
+const config_1 = require("./config");
+const helpers_1 = require("./helpers");
+const multi_registry_1 = require("./multi-registry");
+exports.DEFAULT_RESOLUTION_TTL_SECONDS = 300;
+exports.CACHE_DIR = node_path_1.default.join(node_os_1.default.homedir(), '.dossier', 'cache');
+exports.RESOLUTION_DIR = node_path_1.default.join(exports.CACHE_DIR, '.resolution');
+function resolutionFilePath(dossierName) {
+    const safeDir = (0, helpers_1.safeDossierPath)(exports.RESOLUTION_DIR, dossierName);
+    return `${safeDir}.json`;
+}
+function readResolution(dossierName) {
+    const file = resolutionFilePath(dossierName);
+    try {
+        if (!node_fs_1.default.existsSync(file))
+            return null;
+        const raw = node_fs_1.default.readFileSync(file, 'utf8');
+        const parsed = JSON.parse(raw);
+        if (!parsed.resolved_version || !parsed.resolved_at) {
+            if (process.env.DOSSIER_DEBUG) {
+                process.stderr.write(`[cache-resolver] resolution file ${file} missing required fields; ignoring\n`);
+            }
+            return null;
+        }
+        return parsed;
+    }
+    catch (err) {
+        // Corrupted resolution file — warn (always) and fall through to re-resolve.
+        // Silent fallback would hide a real corruption issue from operators.
+        process.stderr.write(`⚠️  Resolution cache file unreadable (${file}): ${err.message}. Re-resolving from registry.\n`);
+        return null;
+    }
+}
+function writeResolution(dossierName, record) {
+    const file = resolutionFilePath(dossierName);
+    const targetDir = node_path_1.default.dirname(file);
+    // Node's mkdir({recursive:true,mode}) only applies `mode` to the leaf directory it creates.
+    // For org-scoped names (org/sub/name) we must chmod each intermediate dir under
+    // RESOLUTION_DIR to 0o700 so resolution metadata never becomes world-readable.
+    node_fs_1.default.mkdirSync(targetDir, { recursive: true, mode: 0o700 });
+    let cursor = targetDir;
+    while (cursor.startsWith(exports.RESOLUTION_DIR) && cursor !== node_path_1.default.dirname(exports.RESOLUTION_DIR)) {
+        try {
+            node_fs_1.default.chmodSync(cursor, 0o700);
+        }
+        catch {
+            // best-effort; if chmod fails (e.g. not owner) we still proceed
+        }
+        if (cursor === exports.RESOLUTION_DIR)
+            break;
+        cursor = node_path_1.default.dirname(cursor);
+    }
+    // Defend against symlink swap: if a non-regular file (symlink, fifo, etc.) sits at
+    // the target path, refuse to write through it. lstat does not follow symlinks.
+    try {
+        const st = node_fs_1.default.lstatSync(file);
+        if (!st.isFile()) {
+            node_fs_1.default.unlinkSync(file);
+        }
+    }
+    catch {
+        // ENOENT — fine, fresh write
+    }
+    node_fs_1.default.writeFileSync(file, JSON.stringify(record, null, 2), { encoding: 'utf8', mode: 0o600 });
+}
+function compareSemver(a, b) {
+    const pa = a.split('.').map(Number);
+    const pb = b.split('.').map(Number);
+    for (let i = 0; i < 3; i++) {
+        const diff = (pa[i] || 0) - (pb[i] || 0);
+        if (diff !== 0)
+            return diff;
+    }
+    return 0;
+}
+/** Highest-semver version currently cached on disk for this name, or null. */
+function highestCachedSemver(dossierName) {
+    try {
+        const dir = (0, helpers_1.safeDossierPath)(exports.CACHE_DIR, dossierName);
+        if (!node_fs_1.default.existsSync(dir))
+            return null;
+        const versions = node_fs_1.default
+            .readdirSync(dir)
+            .filter((f) => f.endsWith('.meta.json'))
+            .map((f) => f.replace('.meta.json', ''))
+            .filter((v) => node_fs_1.default.existsSync(node_path_1.default.join(dir, `${v}.ds.md`)))
+            .sort(compareSemver);
+        return versions.length > 0 ? versions[versions.length - 1] : null;
+    }
+    catch {
+        return null;
+    }
+}
+function getConfiguredTtlSeconds() {
+    const raw = (0, config_1.getConfig)('cache.resolutionTtlSeconds');
+    if (typeof raw === 'number' && Number.isFinite(raw) && raw >= 0)
+        return raw;
+    return exports.DEFAULT_RESOLUTION_TTL_SECONDS;
+}
+function formatAge(ageMs) {
+    const seconds = Math.round(ageMs / 1000);
+    if (seconds < 60)
+        return `${seconds}s ago`;
+    const minutes = Math.round(seconds / 60);
+    if (minutes < 60)
+        return `${minutes}m ago`;
+    const hours = Math.round(minutes / 60);
+    if (hours < 24)
+        return `${hours}h ago`;
+    const days = Math.round(hours / 24);
+    return `${days}d ago`;
+}
+/**
+ * Resolve a versionless dossier name to a concrete version.
+ *
+ * Flow:
+ *   1. If !fresh and a resolution file exists and is within TTL → return cached resolution.
+ *   2. Otherwise call the registry. On success → write resolution file → return.
+ *   3. On registry failure → fall back to highest-semver cached version with a
+ *      loud stderr warning. If nothing is cached, rethrow.
+ *
+ * Callers should pass an already-stripped name (without @version suffix). For
+ * pinned versions, skip this resolver entirely.
+ */
+async function resolveCachedVersion(dossierName, opts = {}) {
+    const ttl = opts.maxAgeSeconds ?? getConfiguredTtlSeconds();
+    if (!opts.fresh && ttl > 0) {
+        const cached = readResolution(dossierName);
+        if (cached) {
+            const ageMs = Date.now() - new Date(cached.resolved_at).getTime();
+            if (ageMs >= 0 && ageMs < ttl * 1000) {
+                if (process.env.DOSSIER_DEBUG) {
+                    process.stderr.write(`[cache-resolver] '${dossierName}' served from resolution cache: ` +
+                        `version=${cached.resolved_version}, age=${formatAge(ageMs)}, ttl=${ttl}s, registry=${cached.source_registry ?? 'unknown'}\n`);
+                }
+                return {
+                    version: cached.resolved_version,
+                    source: 'cache',
+                    registry: cached.source_registry,
+                };
+            }
+            if (process.env.DOSSIER_DEBUG) {
+                process.stderr.write(`[cache-resolver] '${dossierName}' resolution cache expired (age=${formatAge(ageMs)}, ttl=${ttl}s); re-resolving\n`);
+            }
+        }
+        else if (process.env.DOSSIER_DEBUG) {
+            process.stderr.write(`[cache-resolver] '${dossierName}' has no resolution cache; calling registry\n`);
+        }
+    }
+    else if (process.env.DOSSIER_DEBUG) {
+        process.stderr.write(`[cache-resolver] '${dossierName}' bypassing resolution cache (fresh=${opts.fresh ?? false}, ttl=${ttl}s)\n`);
+    }
+    let registryError = null;
+    try {
+        const { result, errors } = await (0, multi_registry_1.multiRegistryGetDossier)(dossierName);
+        if (result?.version) {
+            writeResolution(dossierName, {
+                resolved_version: result.version,
+                resolved_at: new Date().toISOString(),
+                source_registry: result._registry,
+            });
+            if (process.env.DOSSIER_DEBUG) {
+                process.stderr.write(`[cache-resolver] '${dossierName}' resolved from registry '${result._registry}' to version ${result.version}\n`);
+            }
+            return { version: result.version, source: 'registry', registry: result._registry };
+        }
+        const message = errors.length > 0 ? errors.map((e) => e.error).join('; ') : 'no result';
+        registryError = new Error(message);
+    }
+    catch (err) {
+        registryError = err;
+    }
+    // Registry unreachable — try stale fallback.
+    const fallback = highestCachedSemver(dossierName);
+    const lastKnown = readResolution(dossierName);
+    if (fallback) {
+        const ageHint = lastKnown
+            ? ` (last successful check: ${formatAge(Date.now() - new Date(lastKnown.resolved_at).getTime())})`
+            : ' (no record of last successful check)';
+        const warning = `Registry unreachable — falling back to cached ${dossierName}@${fallback}${ageHint}.\n` +
+            `   Cause: ${registryError?.message ?? 'unknown'}\n` +
+            `   This may be stale. To force a fresh check once registry is reachable, re-run with --fresh ` +
+            `(or --max-age 0).`;
+        process.stderr.write(`⚠️  ${warning}\n`);
+        return {
+            version: fallback,
+            source: 'stale-cache',
+            registry: lastKnown?.source_registry,
+            warning,
+        };
+    }
+    throw new Error(`Failed to resolve ${dossierName}: registry unreachable and no cached version available.\n` +
+        `   Underlying error: ${registryError?.message ?? 'unknown'}\n` +
+        `   Try:\n` +
+        `     1. Check network connectivity\n` +
+        `     2. Verify registry is configured:  dossier config --list-registries\n` +
+        `     3. Pin a known-good version:       dossier run ${dossierName}@<version>\n` +
+        `     4. Re-run with --fresh once the registry is reachable.`);
+}
+/** Exposed for the `cache resolutions` subcommand. */
+function listResolutions() {
+    if (!node_fs_1.default.existsSync(exports.RESOLUTION_DIR))
+        return [];
+    const entries = [];
+    function walk(dir, prefix) {
+        for (const entry of node_fs_1.default.readdirSync(dir, { withFileTypes: true })) {
+            const full = node_path_1.default.join(dir, entry.name);
+            if (entry.isDirectory()) {
+                walk(full, prefix ? `${prefix}/${entry.name}` : entry.name);
+            }
+            else if (entry.name.endsWith('.json')) {
+                try {
+                    const record = JSON.parse(node_fs_1.default.readFileSync(full, 'utf8'));
+                    if (record.resolved_version && record.resolved_at) {
+                        const name = entry.name.replace(/\.json$/, '');
+                        entries.push({ name: prefix ? `${prefix}/${name}` : name, record });
+                    }
+                }
+                catch {
+                    // skip invalid entries
+                }
+            }
+        }
+    }
+    walk(exports.RESOLUTION_DIR, '');
+    entries.sort((a, b) => a.name.localeCompare(b.name));
+    return entries;
+}
+/** Exposed for tests and the `cache clean` flow — remove all resolution files. */
+function clearResolutions() {
+    if (node_fs_1.default.existsSync(exports.RESOLUTION_DIR)) {
+        node_fs_1.default.rmSync(exports.RESOLUTION_DIR, { recursive: true, force: true });
+    }
+}
+/**
+ * Path to a cached dossier's content file (without checking existence).
+ * Centralises the `<cache>/<name>/<version>.ds.md` layout used by
+ * run/create/install-skill/pull so layout changes happen in one place.
+ */
+function cachedContentPath(dossierName, version) {
+    return node_path_1.default.join((0, helpers_1.safeDossierPath)(exports.CACHE_DIR, dossierName), `${version}.ds.md`);
+}
+/**
+ * Return cached dossier content as a string, or null if not cached.
+ * Single source of truth for the `existsSync(contentFile) ? read : miss`
+ * block that previously lived in run.ts, create.ts, and install-skill.ts.
+ */
+function readCachedContent(dossierName, version) {
+    const file = cachedContentPath(dossierName, version);
+    if (!node_fs_1.default.existsSync(file))
+        return null;
+    try {
+        return node_fs_1.default.readFileSync(file, 'utf8');
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Write a dossier's content + .meta.json to the cache.
+ *
+ * The .meta.json shape (`cached_at` + `version` + `source_registry`) is the
+ * one read by `cache list` / `cache clean` and was previously duplicated
+ * verbatim in run.ts, create.ts, install-skill.ts, and pull.ts.
+ *
+ * Best-effort by default (errors swallowed, matching create.ts/install-skill.ts).
+ * Pass `throwOnError: true` for callers that want to surface write failures
+ * (pull.ts wants this — a failed download cache write is a hard failure).
+ */
+function writeCachedContent(dossierName, version, content, sourceRegistry, opts = {}) {
+    const dir = (0, helpers_1.safeDossierPath)(exports.CACHE_DIR, dossierName);
+    try {
+        node_fs_1.default.mkdirSync(dir, { recursive: true, mode: 0o700 });
+        node_fs_1.default.writeFileSync(node_path_1.default.join(dir, `${version}.ds.md`), content, 'utf8');
+        node_fs_1.default.writeFileSync(node_path_1.default.join(dir, `${version}.meta.json`), JSON.stringify({
+            cached_at: new Date().toISOString(),
+            version,
+            source_registry: sourceRegistry,
+        }, null, 2), 'utf8');
+    }
+    catch (err) {
+        if (opts.throwOnError)
+            throw err;
+        // best-effort: swallow (matches prior create.ts / install-skill.ts behaviour)
+    }
+}
+/**
+ * Parse a `--max-age <seconds>` CLI option into a number, or return undefined
+ * when unset. Throws when the value is provided but not a valid number.
+ * Used by run/create/install-skill which all expose the same flag.
+ */
+function parseMaxAgeOption(raw) {
+    if (raw === undefined)
+        return undefined;
+    const n = Number(raw);
+    if (Number.isNaN(n)) {
+        throw new Error(`--max-age must be a number (got "${raw}")`);
+    }
+    return n;
+}
+//# sourceMappingURL=cache-resolver.js.map

package/dist/cache-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache-resolver.js","sourceRoot":"","sources":["../src/cache-resolver.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;;;;AA2GH,kDAcC;AA+BD,oDA2FC;AAGD,0CA2BC;AAGD,4CAIC;AAOD,8CAEC;AAOD,8CAQC;AAaD,gDA4BC;AAOD,8CAOC;AArWD,sDAAyB;AACzB,sDAAyB;AACzB,0DAA6B;AAC7B,qCAAqC;AACrC,uCAA4C;AAC5C,qDAA2D;AAE9C,QAAA,8BAA8B,GAAG,GAAG,CAAC;AACrC,QAAA,SAAS,GAAG,mBAAI,CAAC,IAAI,CAAC,iBAAE,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;AACzD,QAAA,cAAc,GAAG,mBAAI,CAAC,IAAI,CAAC,iBAAS,EAAE,aAAa,CAAC,CAAC;AAyBlE,SAAS,kBAAkB,CAAC,WAAmB;IAC7C,MAAM,OAAO,GAAG,IAAA,yBAAe,EAAC,sBAAc,EAAE,WAAW,CAAC,CAAC;IAC7D,OAAO,GAAG,OAAO,OAAO,CAAC;AAC3B,CAAC;AAED,SAAS,cAAc,CAAC,WAAmB;IACzC,MAAM,IAAI,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,IAAI,CAAC,iBAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACtC,MAAM,GAAG,GAAG,iBAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACpD,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;gBAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,oCAAoC,IAAI,sCAAsC,CAC/E,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,4EAA4E;QAC5E,qEAAqE;QACrE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yCAAyC,IAAI,MAAO,GAAa,CAAC,OAAO,iCAAiC,CAC3G,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,WAAmB,EAAE,MAAwB;IACpE,MAAM,IAAI,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,mBAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,4FAA4F;IAC5F,gFAAgF;IAChF,+EAA+E;IAC/E,iBAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,IAAI,MAAM,GAAG,SAAS,CAAC;IACvB,OAAO,MAAM,CAAC,UAAU,CAAC,sBAAc,CAAC,IAAI,MAAM,KAAK,mBAAI,CAAC,OAAO,CAAC,sBAAc,CAAC,EAAE,CAAC;QACpF,IAAI,CAAC;YACH,iBAAE,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,gEAAgE;QAClE,CAAC;QACD,IAAI,MAAM,KAAK,sBAAc;YAAE,MAAM;QACrC,MAAM,GAAG,mBAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IACD,mFAAmF;IACnF,+EAA+E;IAC/E,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,iBAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;YACjB,iBAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,6BAA6B;IAC/B,CAAC;IACD,iBAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC7F,CAAC;AAED,SAAS,aAAa,CAAC,CAAS,EAAE,CAAS;IACzC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,IAAI,IAAI,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;IAC9B,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,8EAA8E;AAC9E,SAAgB,mBAAmB,CAAC,WAAmB;IACrD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAA,yBAAe,EAAC,iBAAS,EAAE,WAAW,CAAC,CAAC;QACpD,IAAI,CAAC,iBAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACrC,MAAM,QAAQ,GAAG,iBAAE;aAChB,WAAW,CAAC,GAAG,CAAC;aAChB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;aACvC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;aACvC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAE,CAAC,UAAU,CAAC,mBAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;aAC1D,IAAI,CAAC,aAAa,CAAC,CAAC;QACvB,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB;IAC9B,MAAM,GAAG,GAAG,IAAA,kBAAS,EAAC,4BAA4B,CAAC,CAAC;IACpD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC;IAC5E,OAAO,sCAA8B,CAAC;AACxC,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IACzC,IAAI,OAAO,GAAG,EAAE;QAAE,OAAO,GAAG,OAAO,OAAO,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IACzC,IAAI,OAAO,GAAG,EAAE;QAAE,OAAO,GAAG,OAAO,OAAO,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IACvC,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,GAAG,KAAK,OAAO,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;IACpC,OAAO,GAAG,IAAI,OAAO,CAAC;AACxB,CAAC;AAED;;;;;;;;;;;GAWG;AACI,KAAK,UAAU,oBAAoB,CACxC,WAAmB,EACnB,OAAuB,EAAE;IAEzB,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,IAAI,uBAAuB,EAAE,CAAC;IAE5D,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;QAC3C,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC;YAClE,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,GAAG,GAAG,GAAG,IAAI,EAAE,CAAC;gBACrC,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;oBAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qBAAqB,WAAW,kCAAkC;wBAChE,WAAW,MAAM,CAAC,gBAAgB,SAAS,SAAS,CAAC,KAAK,CAAC,SAAS,GAAG,eAAe,MAAM,CAAC,eAAe,IAAI,SAAS,IAAI,CAChI,CAAC;gBACJ,CAAC;gBACD,OAAO;oBACL,OAAO,EAAE,MAAM,CAAC,gBAAgB;oBAChC,MAAM,EAAE,OAAO;oBACf,QAAQ,EAAE,MAAM,CAAC,eAAe;iBACjC,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;gBAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qBAAqB,WAAW,mCAAmC,SAAS,CAAC,KAAK,CAAC,SAAS,GAAG,oBAAoB,CACpH,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YACrC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qBAAqB,WAAW,+CAA+C,CAChF,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;QACrC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qBAAqB,WAAW,uCAAuC,IAAI,CAAC,KAAK,IAAI,KAAK,SAAS,GAAG,MAAM,CAC7G,CAAC;IACJ,CAAC;IAED,IAAI,aAAa,GAAiB,IAAI,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAA,wCAAuB,EAAC,WAAW,CAAC,CAAC;QACtE,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,eAAe,CAAC,WAAW,EAAE;gBAC3B,gBAAgB,EAAE,MAAM,CAAC,OAAO;gBAChC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACrC,eAAe,EAAE,MAAM,CAAC,SAAS;aAClC,CAAC,CAAC;YACH,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;gBAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qBAAqB,WAAW,6BAA6B,MAAM,CAAC,SAAS,gBAAgB,MAAM,CAAC,OAAO,IAAI,CAChH,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;QACrF,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;QACxF,aAAa,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,aAAa,GAAG,GAAY,CAAC;IAC/B,CAAC;IAED,6CAA6C;IAC7C,MAAM,QAAQ,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;IAC9C,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,SAAS;YACvB,CAAC,CAAC,4BAA4B,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG;YAClG,CAAC,CAAC,uCAAuC,CAAC;QAC5C,MAAM,OAAO,GACX,iDAAiD,WAAW,IAAI,QAAQ,GAAG,OAAO,KAAK;YACvF,aAAa,aAAa,EAAE,OAAO,IAAI,SAAS,IAAI;YACpD,+FAA+F;YAC/F,mBAAmB,CAAC;QACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,OAAO,IAAI,CAAC,CAAC;QACzC,OAAO;YACL,OAAO,EAAE,QAAQ;YACjB,MAAM,EAAE,aAAa;YACrB,QAAQ,EAAE,SAAS,EAAE,eAAe;YACpC,OAAO;SACR,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,KAAK,CACb,qBAAqB,WAAW,2DAA2D;QACzF,wBAAwB,aAAa,EAAE,OAAO,IAAI,SAAS,IAAI;QAC/D,WAAW;QACX,sCAAsC;QACtC,4EAA4E;QAC5E,uDAAuD,WAAW,cAAc;QAChF,6DAA6D,CAChE,CAAC;AACJ,CAAC;AAED,sDAAsD;AACtD,SAAgB,eAAe;IAC7B,IAAI,CAAC,iBAAE,CAAC,UAAU,CAAC,sBAAc,CAAC;QAAE,OAAO,EAAE,CAAC;IAE9C,MAAM,OAAO,GAAsD,EAAE,CAAC;IAEtE,SAAS,IAAI,CAAC,GAAW,EAAE,MAAc;QACvC,KAAK,MAAM,KAAK,IAAI,iBAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,GAAG,mBAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC9D,CAAC;iBAAM,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxC,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAqB,CAAC;oBAC7E,IAAI,MAAM,CAAC,gBAAgB,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;wBAClD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;wBAC/C,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;oBACtE,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,uBAAuB;gBACzB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,sBAAc,EAAE,EAAE,CAAC,CAAC;IACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACrD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,kFAAkF;AAClF,SAAgB,gBAAgB;IAC9B,IAAI,iBAAE,CAAC,UAAU,CAAC,sBAAc,CAAC,EAAE,CAAC;QAClC,iBAAE,CAAC,MAAM,CAAC,sBAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,iBAAiB,CAAC,WAAmB,EAAE,OAAe;IACpE,OAAO,mBAAI,CAAC,IAAI,CAAC,IAAA,yBAAe,EAAC,iBAAS,EAAE,WAAW,CAAC,EAAE,GAAG,OAAO,QAAQ,CAAC,CAAC;AAChF,CAAC;AAED;;;;GAIG;AACH,SAAgB,iBAAiB,CAAC,WAAmB,EAAE,OAAe;IACpE,MAAM,IAAI,GAAG,iBAAiB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACrD,IAAI,CAAC,iBAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,iBAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,kBAAkB,CAChC,WAAmB,EACnB,OAAe,EACf,OAAe,EACf,cAAkC,EAClC,OAAmC,EAAE;IAErC,MAAM,GAAG,GAAG,IAAA,yBAAe,EAAC,iBAAS,EAAE,WAAW,CAAC,CAAC;IACpD,IAAI,CAAC;QACH,iBAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,iBAAE,CAAC,aAAa,CAAC,mBAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,QAAQ,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACtE,iBAAE,CAAC,aAAa,CACd,mBAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,YAAY,CAAC,EACtC,IAAI,CAAC,SAAS,CACZ;YACE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,OAAO;YACP,eAAe,EAAE,cAAc;SAChC,EACD,IAAI,EACJ,CAAC,CACF,EACD,MAAM,CACP,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,IAAI,CAAC,YAAY;YAAE,MAAM,GAAG,CAAC;QACjC,8EAA8E;IAChF,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,iBAAiB,CAAC,GAAuB;IACvD,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,oCAAoC,GAAG,IAAI,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/commands/cache.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../src/commands/cache.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGzC,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAwP3D"}
+{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../src/commands/cache.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAgBzC,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAgU3D"}