@bendyline/gezel-catalog 0.1.0 → 1.0.1

package/dist/index.d.ts

@@ -79,10 +79,16 @@ interface BundledSourceOptions {
      */
     noIndex?: boolean;
     /**
-     * The running app's version, compared against content `minGezelVersion`
-     * floors. Defaults to `GEZEL_VERSION`; injectable so tests can exercise
-     * gating against a stamped version (`GEZEL_VERSION` is `0.0.0` in dev
-     * checkouts, which bypasses all filtering).
+     * The calendar line this build sits on, compared against content
+     * `minGezelVersion` floors. Defaults to `GEZEL_CONTENT_COMPAT`; injectable so
+     * tests can exercise gating against a stamped build (both constants are
+     * `0.0.0` in dev checkouts, which bypasses all filtering).
+     *
+     * Deliberately **not** `GEZEL_VERSION`. Floors are authored as `1.YYDDD`, and
+     * npm releases are semver: `0.1.0` and `1.0.0` fall below every floor while a
+     * later `2.0.0` clears all of them, so gating on the published version made
+     * npm builds hide floored content and would eventually have made them accept
+     * content they cannot run.
      */
     gezelVersion?: string;
 }
@@ -186,10 +192,12 @@ declare class CatalogService {
      *   bundled + community tiers, re-read on every disk access. The live
      *   gilde update mechanism flips it without reconstructing this service
      *   (which is built once at boot and held by many subsystems).
-     * @param opts.gezelVersion the running app's version, compared against
-     *   content `minGezelVersion` floors. Defaults to `GEZEL_VERSION`
-     *   inside each source; injectable so tests can exercise gating (dev
-     *   checkouts report `0.0.0`, which bypasses all filtering).
+     * @param opts.gezelVersion the calendar line this build sits on, compared
+     *   against content `minGezelVersion` floors. Defaults to
+     *   `GEZEL_CONTENT_COMPAT` inside each source — *not* `GEZEL_VERSION`, which
+     *   is semver on the npm channel and not on the axis floors are authored
+     *   against. Injectable so tests can exercise gating (dev checkouts report
+     *   `0.0.0`, which bypasses all filtering).
      */
     constructor(sources?: CatalogSource[], opts?: {
         localRoot?: string;

package/dist/index.js

@@ -1,6 +1,9 @@
 // src/service.ts
 import { join as join4 } from "path";
 
+// src/builtin-toolsets.ts
+import { sanitizePresentationSvg } from "@bendyline/gezel/svg";
+
 // src/builtin-toolset-icons.ts
 var SVG_ATTRS = 'xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"';
 var BUILTIN_TOOLSET_ICONS = {
@@ -50,6 +53,10 @@ var BUILTIN_TOOLSET_ICONS = {
 // src/builtin-toolsets.ts
 var BUILTIN_VERSION = "1.0.0";
 var BUILTIN_RELEASED_AT = "2026-04-25T00:00:00Z";
+function builtinIconSvg(id) {
+  const raw = BUILTIN_TOOLSET_ICONS[id];
+  return raw ? sanitizePresentationSvg(raw) ?? void 0 : void 0;
+}
 var BUILTIN_TOOLSETS = [
   {
     id: "memory",
@@ -60,7 +67,7 @@ var BUILTIN_TOOLSETS = [
   {
     id: "workspace-fs-read",
     name: "Workspace File Reading",
-    description: "Read, list, search, and diff files in the project workspace. Mirrors Node's `fs` reads plus content/glob search. Diagnose-only \u2014 pair with `workspace-fs-write` to actually mutate.",
+    description: "Read, list, search, and diff files in the project workspace, and retrieve a referenced Boekwachter issue's durable metadata. Mirrors Node's `fs` reads plus content/glob search. Diagnose-only \u2014 pair with `workspace-fs-write` to actually mutate.",
     tools: [
       "list_dir",
       "read_file",
@@ -69,7 +76,8 @@ var BUILTIN_TOOLSETS = [
       "validate",
       "grep_files",
       "find_files",
-      "diff_files"
+      "diff_files",
+      "get_file_issue"
     ]
   },
   {
@@ -84,7 +92,8 @@ var BUILTIN_TOOLSETS = [
       "map_repo",
       "search_code",
       "file_review",
-      "list_file_issues"
+      "list_file_issues",
+      "set_file_issue_status"
     ]
   },
   {
@@ -401,11 +410,12 @@ var BuiltinToolsetsSource = class {
     if (kind !== "toolset") return [];
     return BUILTIN_TOOLSETS.map((g) => {
       const manifest = manifestForGroup(g);
+      const iconSvg = builtinIconSvg(g.id);
       return {
         sourceId: this.id,
         kind,
         manifest,
-        ...BUILTIN_TOOLSET_ICONS[g.id] ? { iconSvg: BUILTIN_TOOLSET_ICONS[g.id] } : {}
+        ...iconSvg ? { iconSvg } : {}
       };
     });
   }
@@ -417,11 +427,12 @@ var BuiltinToolsetsSource = class {
     const g = BUILTIN_BY_ID.get(groupId);
     if (!g) return null;
     const manifest = manifestForGroup(g);
+    const iconSvg = builtinIconSvg(g.id);
     return {
       sourceId: this.id,
       kind,
       manifest,
-      ...BUILTIN_TOOLSET_ICONS[g.id] ? { iconSvg: BUILTIN_TOOLSET_ICONS[g.id] } : {}
+      ...iconSvg ? { iconSvg } : {}
     };
   }
   async listVersions(kind, id) {
@@ -465,7 +476,7 @@ import {
   ChatModelVersionManifestSchema,
   ConnectorTypeVersionManifestSchema,
   CraftbookTemplateVersionManifestSchema,
-  GEZEL_VERSION,
+  GEZEL_CONTENT_COMPAT,
   GezelTemplateVersionManifestSchema,
   ImageModelVersionManifestSchema,
   ProjectTypeVersionManifestSchema,
@@ -480,6 +491,7 @@ import {
   parseCraftbookTestSpec,
   satisfiesMinGezelVersion
 } from "@bendyline/gezel";
+import { sanitizePresentationSvg as sanitizePresentationSvg2 } from "@bendyline/gezel/svg";
 var KINDS = [
   "toolset",
   "gezel-template",
@@ -528,7 +540,7 @@ var BundledSource = class {
     this.id = opts.id ?? "bundled";
     this.label = opts.label ?? "Bundled";
     this.useIndex = !opts.noIndex;
-    this.gezelVersion = opts.gezelVersion ?? GEZEL_VERSION;
+    this.gezelVersion = opts.gezelVersion ?? GEZEL_CONTENT_COMPAT;
   }
   get root() {
     return this.rootProvider();
@@ -587,11 +599,12 @@ var BundledSource = class {
         if (!reResolved) continue;
         manifest = reResolved;
       }
+      const iconSvg = typeof e.iconSvg === "string" ? sanitizePresentationSvg2(e.iconSvg) : null;
       const item = {
         sourceId: this.id,
         kind,
         manifest,
-        ...typeof e.iconSvg === "string" ? { iconSvg: e.iconSvg } : {}
+        ...iconSvg ? { iconSvg } : {}
       };
       const logo = this.logoUrlFor(kind, manifest.id, manifest);
       if (logo) item.logoUrl = logo;
@@ -1402,10 +1415,12 @@ var CatalogService = class {
    *   bundled + community tiers, re-read on every disk access. The live
    *   gilde update mechanism flips it without reconstructing this service
    *   (which is built once at boot and held by many subsystems).
-   * @param opts.gezelVersion the running app's version, compared against
-   *   content `minGezelVersion` floors. Defaults to `GEZEL_VERSION`
-   *   inside each source; injectable so tests can exercise gating (dev
-   *   checkouts report `0.0.0`, which bypasses all filtering).
+   * @param opts.gezelVersion the calendar line this build sits on, compared
+   *   against content `minGezelVersion` floors. Defaults to
+   *   `GEZEL_CONTENT_COMPAT` inside each source — *not* `GEZEL_VERSION`, which
+   *   is semver on the npm channel and not on the axis floors are authored
+   *   against. Injectable so tests can exercise gating (dev checkouts report
+   *   `0.0.0`, which bypasses all filtering).
    */
   constructor(sources, opts) {
     this.contentRootProvider = opts?.contentRoot ?? null;
@@ -1826,6 +1841,7 @@ import {
   resolvePnpmInvocation,
   retryTransient
 } from "@bendyline/gezel";
+import { windowsHeadlessSpawnOptions } from "@bendyline/gezel/native";
 import * as tar from "tar";
 var DEFAULT_NPM_REGISTRY = "https://registry.npmjs.org";
 var MAX_PACKUMENT_BYTES = 5 * 1024 * 1024;
@@ -2147,12 +2163,11 @@ function runAndWait(command, args, cwd, shell) {
     const child = spawn(command, args, {
       cwd,
       stdio: ["ignore", "pipe", "pipe"],
-      // DETACHED_PROCESS on Windows / a new process group on POSIX. The
-      // Windows half is load-bearing: the machine service's restricted SID
-      // cannot allocate a console, so a console-subsystem child started any
-      // other way dies as `spawn EPERM`. `windowsHide` (CREATE_NO_WINDOW)
-      // does not help — it still allocates one.
-      detached: true,
+      // Keep the process-group boundary used by POSIX timeout cleanup. On
+      // Windows, taskkill follows parent PIDs, so the owned installer stays
+      // attached and its console window stays hidden.
+      detached: process.platform !== "win32",
+      ...windowsHeadlessSpawnOptions(),
       shell
     });
     let output = "";
@@ -2186,8 +2201,8 @@ function runAndWait(command, args, cwd, shell) {
 function killProcessTree(child) {
   if (process.platform === "win32" && child.pid) {
     const killer = spawn("taskkill.exe", ["/PID", String(child.pid), "/T", "/F"], {
-      detached: true,
-      stdio: "ignore"
+      stdio: "ignore",
+      ...windowsHeadlessSpawnOptions()
     });
     killer.once("error", () => child.kill("SIGKILL"));
     killer.unref();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bendyline/gezel-catalog",
-  "version": "0.1.0",
+  "version": "1.0.1",
   "description": "Gezel catalog loader: sources, install pipeline, and authoring scripts over the external @bendyline/gilde content package.",
   "license": "MIT",
   "keywords": [
@@ -47,10 +47,10 @@
     "!dist/**/*.map"
   ],
   "dependencies": {
-    "@bendyline/gilde": "0.1.20",
+    "@bendyline/gilde": "0.1.23",
     "tar": "7.5.21",
     "zod": "^4.4.3",
-    "@bendyline/gezel": "0.1.0"
+    "@bendyline/gezel": "1.0.0"
   },
   "devDependencies": {
     "esbuild": "^0.28.1",