@clossys/launcher 0.1.5 → 0.3.0

package/dist/inventory-adoption.js

@@ -0,0 +1,67 @@
+// Adopt an existing repository inventory instead of creating a second one
+// (#1216). An account that already keeps a repository inventory in its own
+// control plane becomes the source of truth when the hub marker declares
+// it. Launcher writes only what that inventory lacks (a later apply step,
+// not this module) and reports drift instead of silently merging.
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/** Reads a foundry-shaped inventory document's repository ids. Malformed or missing is null, never []. */
+function readForeignIds(host, path) {
+    const raw = host.readText(path);
+    if (raw === null)
+        return null;
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+    if (!isRecord(parsed) || parsed.schemaVersion !== 1 || !Array.isArray(parsed.repositories))
+        return null;
+    const ids = [];
+    for (const entry of parsed.repositories) {
+        if (isRecord(entry) && typeof entry.id === "string" && entry.id.trim() !== "")
+            ids.push(entry.id);
+    }
+    return ids;
+}
+/**
+ * Compares the declared external inventory against the launcher-written
+ * inventory at `directory/launcherInventoryRelPath`. Read-only -- callers
+ * decide whether and how to write the reconciled set, as an explicit,
+ * approved apply step (same #1045 pattern as clone-on-approval).
+ */
+export function reportInventoryDrift(host, directory, declaration, launcherInventoryRelPath) {
+    if (declaration === undefined) {
+        return { status: "no-external-source", externalOnly: [], launcherOnly: [], agreeing: [] };
+    }
+    if (declaration.shape === "custom") {
+        return {
+            status: "indeterminate",
+            externalOnly: [],
+            launcherOnly: [],
+            agreeing: [],
+            note: `externalInventory at ${declaration.path} declares shape "custom"; launcher has no mapping for a non-foundry inventory shape yet and will not guess one. Reconcile by hand or file the mapping gap.`,
+        };
+    }
+    const externalIds = readForeignIds(host, declaration.path);
+    if (externalIds === null) {
+        return {
+            status: "indeterminate",
+            externalOnly: [],
+            launcherOnly: [],
+            agreeing: [],
+            note: `externalInventory at ${declaration.path} could not be read as a populated schemaVersion:1 inventory document.`,
+        };
+    }
+    const launcherIds = readForeignIds(host, `${directory}/${launcherInventoryRelPath}`) ?? [];
+    const externalSet = new Set(externalIds);
+    const launcherSet = new Set(launcherIds);
+    const externalOnly = externalIds.filter((id) => !launcherSet.has(id));
+    const launcherOnly = launcherIds.filter((id) => !externalSet.has(id));
+    const agreeing = externalIds.filter((id) => launcherSet.has(id));
+    return { status: "reconciled", externalOnly, launcherOnly, agreeing };
+}
+//# sourceMappingURL=inventory-adoption.js.map

package/dist/inventory-adoption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inventory-adoption.js","sourceRoot":"","sources":["../src/inventory-adoption.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,2EAA2E;AAC3E,yEAAyE;AACzE,0EAA0E;AAC1E,kEAAkE;AAiBlE,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,0GAA0G;AAC1G,SAAS,cAAc,CAAC,IAAmB,EAAE,IAAY;IACvD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IACxG,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACxC,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACpG,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAmB,EACnB,SAAiB,EACjB,WAAqD,EACrD,wBAAgC;IAEhC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,YAAY,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC5F,CAAC;IACD,IAAI,WAAW,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACnC,OAAO;YACL,MAAM,EAAE,eAAe;YACvB,YAAY,EAAE,EAAE;YAChB,YAAY,EAAE,EAAE;YAChB,QAAQ,EAAE,EAAE;YACZ,IAAI,EAAE,wBAAwB,WAAW,CAAC,IAAI,4JAA4J;SAC3M,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;IAC3D,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACzB,OAAO;YACL,MAAM,EAAE,eAAe;YACvB,YAAY,EAAE,EAAE;YAChB,YAAY,EAAE,EAAE;YAChB,QAAQ,EAAE,EAAE;YACZ,IAAI,EAAE,wBAAwB,WAAW,CAAC,IAAI,uEAAuE;SACtH,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,cAAc,CAAC,IAAI,EAAE,GAAG,SAAS,IAAI,wBAAwB,EAAE,CAAC,IAAI,EAAE,CAAC;IAC3F,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACtE,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACjE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;AACxE,CAAC"}

package/dist/manifest.d.ts

@@ -0,0 +1,20 @@
+import type { SkillManifestDocument, SkillsManifestSummary, WorkspaceHost } from "./types.js";
+/** sha256 hex digest of a skill's final composed content (post contract injection). */
+export declare function sha256Hex(content: string): string;
+/** Parses `clossys/.state/skills.json`. An unreadable or malformed document is treated as absent. */
+export declare function parseSkillManifest(raw: string | null): SkillManifestDocument | undefined;
+export declare function serializeSkillManifest(document: SkillManifestDocument): string;
+/**
+ * Freshness summary for the health report: "N skills out of date, M
+ * retired". `stale` counts catalogue-sourced entries whose recorded version
+ * is older than `liveLauncherVersion` (a client running an old launcher
+ * carries a catalogue only as fresh as that release, #1033) — unknown or
+ * unparseable versions are never counted stale. `retiredThisRun` is supplied
+ * by the composition step that just ran; a read-only inspection (no
+ * composition) reports 0 retired, which is correct — retirement is a
+ * this-run event, not a property of the manifest at rest.
+ */
+export declare function summarizeSkillsManifest(manifest: SkillManifestDocument | undefined, liveLauncherVersion: string | undefined, retiredThisRun: readonly string[]): SkillsManifestSummary;
+/** Reads `installed` version from `<composeTargetDirectory>/node_modules/@clossys/<pkg>/package.json`. */
+export declare function readInstalledVersion(host: WorkspaceHost, composeTargetDirectory: string, packageDir: string): string | undefined;
+//# sourceMappingURL=manifest.d.ts.map

package/dist/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,qBAAqB,EAAsB,qBAAqB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAMlH,uFAAuF;AACvF,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEjD;AAoBD,qGAAqG;AACrG,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,qBAAqB,GAAG,SAAS,CA4BxF;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,qBAAqB,GAAG,MAAM,CAE9E;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,qBAAqB,GAAG,SAAS,EAC3C,mBAAmB,EAAE,MAAM,GAAG,SAAS,EACvC,cAAc,EAAE,SAAS,MAAM,EAAE,GAChC,qBAAqB,CASvB;AAED,0GAA0G;AAC1G,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,aAAa,EAAE,sBAAsB,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAUhI"}

package/dist/manifest.js

@@ -0,0 +1,106 @@
+import { createHash } from "node:crypto";
+import { join } from "node:path";
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/** sha256 hex digest of a skill's final composed content (post contract injection). */
+export function sha256Hex(content) {
+    return createHash("sha256").update(content, "utf8").digest("hex");
+}
+/** Tiny semver-ish compare, duplicated from core.ts to keep this module dependency-free within the package. */
+function compareVersions(a, b) {
+    const parse = (version) => {
+        const match = version.trim().match(/^v?(\d+)\.(\d+)\.(\d+)$/);
+        return match ? [Number(match[1]), Number(match[2]), Number(match[3])] : null;
+    };
+    const left = parse(a);
+    const right = parse(b);
+    if (!left || !right)
+        return null;
+    for (let index = 0; index < 3; index += 1) {
+        const l = left[index] ?? 0;
+        const r = right[index] ?? 0;
+        if (l < r)
+            return -1;
+        if (l > r)
+            return 1;
+    }
+    return 0;
+}
+/** Parses `clossys/.state/skills.json`. An unreadable or malformed document is treated as absent. */
+export function parseSkillManifest(raw) {
+    if (raw === null)
+        return undefined;
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return undefined;
+    }
+    if (!isRecord(parsed) || parsed.schemaVersion !== 1 || !Array.isArray(parsed.skills))
+        return undefined;
+    const skills = [];
+    for (const entry of parsed.skills) {
+        if (!isRecord(entry))
+            continue;
+        const { name, source, sha256 } = entry;
+        if (typeof name !== "string" || name.trim() === "")
+            continue;
+        if (source !== "installed" && source !== "catalogue")
+            continue;
+        if (typeof sha256 !== "string" || sha256.trim() === "")
+            continue;
+        skills.push({
+            name,
+            source,
+            sha256,
+            ...(typeof entry.version === "string" && entry.version.trim() !== "" ? { version: entry.version } : {}),
+        });
+    }
+    return {
+        schemaVersion: 1,
+        generatedAt: typeof parsed.generatedAt === "string" ? parsed.generatedAt : "",
+        skills,
+    };
+}
+export function serializeSkillManifest(document) {
+    return `${JSON.stringify(document, null, 2)}\n`;
+}
+/**
+ * Freshness summary for the health report: "N skills out of date, M
+ * retired". `stale` counts catalogue-sourced entries whose recorded version
+ * is older than `liveLauncherVersion` (a client running an old launcher
+ * carries a catalogue only as fresh as that release, #1033) — unknown or
+ * unparseable versions are never counted stale. `retiredThisRun` is supplied
+ * by the composition step that just ran; a read-only inspection (no
+ * composition) reports 0 retired, which is correct — retirement is a
+ * this-run event, not a property of the manifest at rest.
+ */
+export function summarizeSkillsManifest(manifest, liveLauncherVersion, retiredThisRun) {
+    if (manifest === undefined) {
+        return { status: "missing", total: 0, stale: 0, retired: retiredThisRun.length };
+    }
+    const stale = manifest.skills.filter((entry) => {
+        if (entry.source !== "catalogue" || liveLauncherVersion === undefined || entry.version === undefined)
+            return false;
+        return compareVersions(entry.version, liveLauncherVersion) === -1;
+    }).length;
+    return { status: "present", total: manifest.skills.length, stale, retired: retiredThisRun.length };
+}
+/** Reads `installed` version from `<composeTargetDirectory>/node_modules/@clossys/<pkg>/package.json`. */
+export function readInstalledVersion(host, composeTargetDirectory, packageDir) {
+    const raw = host.readText(join(composeTargetDirectory, "node_modules", "@clossys", packageDir, "package.json"));
+    if (raw === null)
+        return undefined;
+    try {
+        const parsed = JSON.parse(raw);
+        if (isRecord(parsed) && typeof parsed.version === "string" && parsed.version.trim() !== "")
+            return parsed.version;
+    }
+    catch {
+        /* unreadable manifest; no version */
+    }
+    return undefined;
+}
+//# sourceMappingURL=manifest.js.map

package/dist/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,SAAS,CAAC,OAAe;IACvC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpE,CAAC;AAED,+GAA+G;AAC/G,SAAS,eAAe,CAAC,CAAS,EAAE,CAAS;IAC3C,MAAM,KAAK,GAAG,CAAC,OAAe,EAA4B,EAAE;QAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC9D,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/E,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACtB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACvB,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACjC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC;QACrB,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,kBAAkB,CAAC,GAAkB;IACnD,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACnC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IACvG,MAAM,MAAM,GAAyB,EAAE,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,SAAS;QAC/B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;QACvC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,SAAS;QAC7D,IAAI,MAAM,KAAK,WAAW,IAAI,MAAM,KAAK,WAAW;YAAE,SAAS;QAC/D,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,SAAS;QACjE,MAAM,CAAC,IAAI,CAAC;YACV,IAAI;YACJ,MAAM;YACN,MAAM;YACN,GAAG,CAAC,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxG,CAAC,CAAC;IACL,CAAC;IACD,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,WAAW,EAAE,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;QAC7E,MAAM;KACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAA+B;IACpE,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAA2C,EAC3C,mBAAuC,EACvC,cAAiC;IAEjC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,cAAc,CAAC,MAAM,EAAE,CAAC;IACnF,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,IAAI,mBAAmB,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACnH,OAAO,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC,MAAM,CAAC;IACV,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,CAAC,MAAM,EAAE,CAAC;AACrG,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,oBAAoB,CAAC,IAAmB,EAAE,sBAA8B,EAAE,UAAkB;IAC1G,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,sBAAsB,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC;IAChH,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,MAAM,CAAC,OAAO,CAAC;IACpH,CAAC;IAAC,MAAM,CAAC;QACP,qCAAqC;IACvC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/model-profile.d.ts

@@ -0,0 +1,46 @@
+export type ReasoningTier = "light" | "standard" | "deep";
+export type BudgetPreference = "cost-conscious" | "balanced" | "max-quality";
+export type SupportedHost = "claude-code" | "codex" | "cursor";
+export interface HostTierMapping {
+    /** The model this host runs for this tier under a "balanced" preference. */
+    readonly balanced: string;
+    /** Cheaper substitute under "cost-conscious", when one exists for this tier. Absent means "balanced" is already the floor. */
+    readonly costConscious?: string;
+    /** Stronger substitute under "max-quality", when one exists for this tier. */
+    readonly maxQuality?: string;
+}
+export interface HostModelProfile {
+    readonly schemaVersion: 1;
+    readonly host: SupportedHost;
+    /** ISO date this mapping was last verified against that host's real current models. */
+    readonly verifiedAt: string;
+    readonly tiers: Readonly<Record<ReasoningTier, HostTierMapping>>;
+}
+export interface PreferencesDocument {
+    readonly schemaVersion: 1;
+    readonly budget: BudgetPreference;
+}
+export interface ModelResolution {
+    readonly tier: ReasoningTier;
+    readonly host: SupportedHost;
+    readonly model: string;
+    /** True when a hard floor tier was requested but this host/preference combination could not clear it -- reported, never silently substituted. */
+    readonly belowFloor: boolean;
+}
+/** Parses clossys/preferences.json. Absent or malformed defaults to "balanced" -- a missing preference is not a floor violation. */
+export declare function parsePreferences(raw: string | null): PreferencesDocument;
+/**
+ * Resolves a step's demanded tier to a real model name for one host, under
+ * one budget preference, respecting an optional hard floor tier.
+ */
+export declare function resolveModelForTier(profile: HostModelProfile, tier: ReasoningTier, budget: BudgetPreference, floorTier?: ReasoningTier): ModelResolution;
+/**
+ * Reads a packed `model-profiles/<host>.json` file from the launcher
+ * package root. Returns undefined -- never throws, never guesses a
+ * fallback profile -- when the file is absent or malformed, matching this
+ * package's read-only, fail-closed pattern for every other packed
+ * artifact (manifest.ts's parseSkillManifest is the sibling to model this
+ * on).
+ */
+export declare function readHostModelProfile(readText: (path: string) => string | null, launcherPackageRoot: string, host: SupportedHost): HostModelProfile | undefined;
+//# sourceMappingURL=model-profile.d.ts.map

package/dist/model-profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-profile.d.ts","sourceRoot":"","sources":["../src/model-profile.ts"],"names":[],"mappings":"AAgBA,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,UAAU,GAAG,MAAM,CAAC;AAC1D,MAAM,MAAM,gBAAgB,GAAG,gBAAgB,GAAG,UAAU,GAAG,aAAa,CAAC;AAC7E,MAAM,MAAM,aAAa,GAAG,aAAa,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE/D,MAAM,WAAW,eAAe;IAC9B,4EAA4E;IAC5E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,8HAA8H;IAC9H,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,8EAA8E;IAC9E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,uFAAuF;IACvF,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC,CAAC;CAClE;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;CACnC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,iJAAiJ;IACjJ,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;CAC9B;AAQD,oIAAoI;AACpI,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,mBAAmB,CAgBxE;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,gBAAgB,EACzB,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,gBAAgB,EACxB,SAAS,CAAC,EAAE,aAAa,GACxB,eAAe,CAUjB;AAYD;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,EACzC,mBAAmB,EAAE,MAAM,EAC3B,IAAI,EAAE,aAAa,GAClB,gBAAgB,GAAG,SAAS,CA6B9B"}

package/dist/model-profile.js

@@ -0,0 +1,98 @@
+// Model guidance (#1219, Launcher side). Owner decision: packages declare
+// WHAT a step demands (a reasoning tier), never model names. Three layers:
+//   1. Step demands -- each package's own loop matrix (#1197, not built here).
+//   2. Tier-to-model profile -- PER HOST, shipped by Launcher, dated and
+//      re-verified, so a model change reaches clients in one launcher
+//      release rather than a bump of every package.
+//   3. User preference -- cost-conscious / balanced / max-quality, asked
+//      once by Advisor, stored in clossys/preferences.json (Advisor's file
+//      to write; this module only reads it to resolve a tier to a model).
+//
+// Floors are hard where the verdict depends on it (Customer's keep):
+// resolveModelForTier never silently drops below a caller-supplied floor;
+// it reports belowFloor so the composed skill can say so plainly.
+import { join } from "node:path";
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+const TIER_ORDER = ["light", "standard", "deep"];
+/** Parses clossys/preferences.json. Absent or malformed defaults to "balanced" -- a missing preference is not a floor violation. */
+export function parsePreferences(raw) {
+    if (raw !== null) {
+        try {
+            const parsed = JSON.parse(raw);
+            if (isRecord(parsed) &&
+                parsed.schemaVersion === 1 &&
+                (parsed.budget === "cost-conscious" || parsed.budget === "balanced" || parsed.budget === "max-quality")) {
+                return { schemaVersion: 1, budget: parsed.budget };
+            }
+        }
+        catch {
+            /* falls through to the default below */
+        }
+    }
+    return { schemaVersion: 1, budget: "balanced" };
+}
+/**
+ * Resolves a step's demanded tier to a real model name for one host, under
+ * one budget preference, respecting an optional hard floor tier.
+ */
+export function resolveModelForTier(profile, tier, budget, floorTier) {
+    const mapping = profile.tiers[tier];
+    const model = budget === "cost-conscious"
+        ? (mapping.costConscious ?? mapping.balanced)
+        : budget === "max-quality"
+            ? (mapping.maxQuality ?? mapping.balanced)
+            : mapping.balanced;
+    const belowFloor = floorTier !== undefined && TIER_ORDER.indexOf(tier) < TIER_ORDER.indexOf(floorTier);
+    return { tier, host: profile.host, model, belowFloor };
+}
+function isTierMapping(value) {
+    if (typeof value !== "object" || value === null || Array.isArray(value))
+        return false;
+    const record = value;
+    return (typeof record.balanced === "string" &&
+        (record.costConscious === undefined || typeof record.costConscious === "string") &&
+        (record.maxQuality === undefined || typeof record.maxQuality === "string"));
+}
+/**
+ * Reads a packed `model-profiles/<host>.json` file from the launcher
+ * package root. Returns undefined -- never throws, never guesses a
+ * fallback profile -- when the file is absent or malformed, matching this
+ * package's read-only, fail-closed pattern for every other packed
+ * artifact (manifest.ts's parseSkillManifest is the sibling to model this
+ * on).
+ */
+export function readHostModelProfile(readText, launcherPackageRoot, host) {
+    const raw = readText(join(launcherPackageRoot, "model-profiles", `${host}.json`));
+    if (raw === null)
+        return undefined;
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return undefined;
+    }
+    if (typeof parsed !== "object" ||
+        parsed === null ||
+        Array.isArray(parsed) ||
+        parsed.schemaVersion !== 1 ||
+        parsed.host !== host ||
+        typeof parsed.verifiedAt !== "string") {
+        return undefined;
+    }
+    const tiersRaw = parsed.tiers;
+    if (typeof tiersRaw !== "object" || tiersRaw === null || Array.isArray(tiersRaw))
+        return undefined;
+    const tiers = tiersRaw;
+    if (!isTierMapping(tiers.light) || !isTierMapping(tiers.standard) || !isTierMapping(tiers.deep))
+        return undefined;
+    return {
+        schemaVersion: 1,
+        host,
+        verifiedAt: parsed.verifiedAt,
+        tiers: { light: tiers.light, standard: tiers.standard, deep: tiers.deep },
+    };
+}
+//# sourceMappingURL=model-profile.js.map

package/dist/model-profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-profile.js","sourceRoot":"","sources":["../src/model-profile.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,2EAA2E;AAC3E,+EAA+E;AAC/E,yEAAyE;AACzE,sEAAsE;AACtE,oDAAoD;AACpD,yEAAyE;AACzE,2EAA2E;AAC3E,0EAA0E;AAC1E,EAAE;AACF,qEAAqE;AACrE,0EAA0E;AAC1E,kEAAkE;AAElE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAoCjC,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,GAA6B,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;AAE3E,oIAAoI;AACpI,MAAM,UAAU,gBAAgB,CAAC,GAAkB;IACjD,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACxC,IACE,QAAQ,CAAC,MAAM,CAAC;gBAChB,MAAM,CAAC,aAAa,KAAK,CAAC;gBAC1B,CAAC,MAAM,CAAC,MAAM,KAAK,gBAAgB,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,IAAI,MAAM,CAAC,MAAM,KAAK,aAAa,CAAC,EACvG,CAAC;gBACD,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YACrD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wCAAwC;QAC1C,CAAC;IACH,CAAC;IACD,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AAClD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAyB,EACzB,IAAmB,EACnB,MAAwB,EACxB,SAAyB;IAEzB,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,KAAK,GACT,MAAM,KAAK,gBAAgB;QACzB,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,QAAQ,CAAC;QAC7C,CAAC,CAAC,MAAM,KAAK,aAAa;YACxB,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,QAAQ,CAAC;YAC1C,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzB,MAAM,UAAU,GAAG,SAAS,KAAK,SAAS,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACvG,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,OAAO,CACL,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;QACnC,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ,CAAC;QAChF,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAC3E,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAAyC,EACzC,mBAA2B,EAC3B,IAAmB;IAEnB,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,mBAAmB,EAAE,gBAAgB,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC;IAClF,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACnC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IACE,OAAO,MAAM,KAAK,QAAQ;QAC1B,MAAM,KAAK,IAAI;QACf,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACpB,MAAkC,CAAC,aAAa,KAAK,CAAC;QACtD,MAAkC,CAAC,IAAI,KAAK,IAAI;QACjD,OAAQ,MAAkC,CAAC,UAAU,KAAK,QAAQ,EAClE,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAI,MAAkC,CAAC,KAAK,CAAC;IAC3D,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IACnG,MAAM,KAAK,GAAG,QAAmC,CAAC;IAClD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAClH,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,IAAI;QACJ,UAAU,EAAG,MAAiC,CAAC,UAAU;QACzD,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;KAC1E,CAAC;AACJ,CAAC"}

package/dist/product-repository.d.ts

@@ -0,0 +1,26 @@
+import type { WorkspaceHost } from "./types.js";
+/**
+ * One check from this repository's own docs/contracts/product-repository-layout.json `cloudSessionBootstrap` list (that contract file does not ship in the published package).
+ * Read-only: verifies a product repository has what a cloud agent session
+ * (browser plus GitHub only, no local setup) needs to install and run the
+ * team, without foundry's own heavy governance gates.
+ */
+export interface CloudBootstrapCheck {
+    readonly id: "package-manifest" | "agents-pointer" | "hub-marker";
+    readonly label: string;
+    readonly satisfied: boolean;
+    readonly note?: string;
+}
+export interface CloudBootstrapReport {
+    readonly schemaVersion: 1;
+    readonly checks: readonly CloudBootstrapCheck[];
+    readonly ready: boolean;
+}
+/**
+ * Runs the three product-repository-layout.json cloudSessionBootstrap checks
+ * against `directory`. Never mutates anything, never runs `npm ci` itself
+ * -- it checks that the manifest and lockfile are BOTH present, which is
+ * the precondition a real `npm ci` needs, not a substitute for running it.
+ */
+export declare function checkCloudSessionBootstrap(host: WorkspaceHost, directory: string): CloudBootstrapReport;
+//# sourceMappingURL=product-repository.d.ts.map

package/dist/product-repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"product-repository.d.ts","sourceRoot":"","sources":["../src/product-repository.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,kBAAkB,GAAG,gBAAgB,GAAG,YAAY,CAAC;IAClE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAChD,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAOD;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,GAAG,oBAAoB,CAuCvG"}

package/dist/product-repository.js

@@ -0,0 +1,49 @@
+import { join } from "node:path";
+const PACKAGE_JSON_REL = "package.json";
+const PACKAGE_LOCK_REL = "package-lock.json";
+const AGENTS_MD_REL = "AGENTS.md";
+const HUB_MARKER_REL = join("clossys", ".state", "workspace.json");
+/**
+ * Runs the three product-repository-layout.json cloudSessionBootstrap checks
+ * against `directory`. Never mutates anything, never runs `npm ci` itself
+ * -- it checks that the manifest and lockfile are BOTH present, which is
+ * the precondition a real `npm ci` needs, not a substitute for running it.
+ */
+export function checkCloudSessionBootstrap(host, directory) {
+    const hasManifest = host.exists(join(directory, PACKAGE_JSON_REL));
+    const hasLock = host.exists(join(directory, PACKAGE_LOCK_REL));
+    const manifestCheck = {
+        id: "package-manifest",
+        label: "package.json and package-lock.json are both present",
+        satisfied: hasManifest && hasLock,
+        ...(hasManifest && hasLock
+            ? {}
+            : {
+                note: !hasManifest && !hasLock
+                    ? "Neither package.json nor package-lock.json exists yet."
+                    : !hasManifest
+                        ? "package-lock.json exists but package.json does not."
+                        : "package.json exists but package-lock.json does not -- npm ci needs both.",
+            }),
+    };
+    const agentsRaw = host.readText(join(directory, AGENTS_MD_REL));
+    const agentsPointsAtClossys = agentsRaw !== null && agentsRaw.includes("clossys/");
+    const agentsCheck = {
+        id: "agents-pointer",
+        label: "AGENTS.md exists at the repository root and points at clossys/",
+        satisfied: agentsPointsAtClossys,
+        ...(agentsPointsAtClossys
+            ? {}
+            : { note: agentsRaw === null ? "AGENTS.md does not exist at the repository root." : "AGENTS.md exists but does not mention clossys/." }),
+    };
+    const hasHubMarker = host.exists(join(directory, HUB_MARKER_REL));
+    const markerCheck = {
+        id: "hub-marker",
+        label: "clossys/.state/workspace.json (the hub marker) is present",
+        satisfied: hasHubMarker,
+        ...(hasHubMarker ? {} : { note: "clossys/.state/workspace.json does not exist yet." }),
+    };
+    const checks = [manifestCheck, agentsCheck, markerCheck];
+    return { schemaVersion: 1, checks, ready: checks.every((check) => check.satisfied) };
+}
+//# sourceMappingURL=product-repository.js.map

package/dist/product-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"product-repository.js","sourceRoot":"","sources":["../src/product-repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAsBjC,MAAM,gBAAgB,GAAG,cAAc,CAAC;AACxC,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AAC7C,MAAM,aAAa,GAAG,WAAW,CAAC;AAClC,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;AAEnE;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAAmB,EAAE,SAAiB;IAC/E,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC/D,MAAM,aAAa,GAAwB;QACzC,EAAE,EAAE,kBAAkB;QACtB,KAAK,EAAE,qDAAqD;QAC5D,SAAS,EAAE,WAAW,IAAI,OAAO;QACjC,GAAG,CAAC,WAAW,IAAI,OAAO;YACxB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,IAAI,EAAE,CAAC,WAAW,IAAI,CAAC,OAAO;oBAC5B,CAAC,CAAC,wDAAwD;oBAC1D,CAAC,CAAC,CAAC,WAAW;wBACZ,CAAC,CAAC,qDAAqD;wBACvD,CAAC,CAAC,0EAA0E;aACjF,CAAC;KACP,CAAC;IAEF,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC;IAChE,MAAM,qBAAqB,GAAG,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACnF,MAAM,WAAW,GAAwB;QACvC,EAAE,EAAE,gBAAgB;QACpB,KAAK,EAAE,gEAAgE;QACvE,SAAS,EAAE,qBAAqB;QAChC,GAAG,CAAC,qBAAqB;YACvB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,kDAAkD,CAAC,CAAC,CAAC,iDAAiD,EAAE,CAAC;KAC3I,CAAC;IAEF,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC;IAClE,MAAM,WAAW,GAAwB;QACvC,EAAE,EAAE,YAAY;QAChB,KAAK,EAAE,2DAA2D;QAClE,SAAS,EAAE,YAAY;QACvB,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,mDAAmD,EAAE,CAAC;KACvF,CAAC;IAEF,MAAM,MAAM,GAAG,CAAC,aAAa,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;IACzD,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;AACvF,CAAC"}

package/dist/skills.d.ts

@@ -5,16 +5,35 @@ export interface SkillCompositionResult {
         readonly packageDir: string;
         readonly note: string;
     }[];
+    readonly rosterTargets?: readonly string[];
+    readonly rosterSkipped?: readonly {
+        readonly inventoryId: string;
+        readonly note: string;
+    }[];
+    /** Skills pruned this run: present in the directory's previous manifest, absent from this run's composed set. */
+    readonly retired: readonly string[];
 }
 export interface ComposeSkillsOptions {
     readonly skillCatalogueRoot?: string;
     readonly launcherPackageRoot: string;
+    /** Overrides where the packed conversation contract is read from (tests). */
+    readonly contractPath?: string;
 }
+export declare const DISCOVERY_PREFIXES: readonly [".cursor/skills", ".claude/skills"];
+export declare const SKILLS_MANIFEST_REL: string;
 /** Package directory names that have a resolvable skill source in the catalogue or monorepo. */
 export declare function listSkillPackageCandidates(host: WorkspaceHost, options: ComposeSkillsOptions): string[];
 /**
  * Writes `.agents/skills/clossys-<pkg>/SKILL.md` and host discovery links for every
- * catalogue package. Missing sources are skipped with notes; the hub apply continues.
+ * catalogue package, with the shared conversation contract (#1182) injected in place
+ * of each skill's own `## How we work together` / `## One question at a time`
+ * sections. Missing sources are skipped with notes; the hub apply continues.
+ *
+ * Also writes `clossys/.state/skills.json` (#1183): source, version, and content
+ * digest per composed skill. A skill named in this directory's *previous* manifest
+ * but not composed this run is retired — its composed output is pruned and it is
+ * dropped from the new manifest. Never touches a skill this directory's manifest
+ * did not itself write.
  */
 export declare function composeSkills(host: WorkspaceHost, directory: string, options: ComposeSkillsOptions): SkillCompositionResult;
 //# sourceMappingURL=skills.d.ts.map

package/dist/skills.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"skills.d.ts","sourceRoot":"","sources":["../src/skills.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,SAAS;QAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACrF;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;CACtC;AAgCD,gGAAgG;AAChG,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,oBAAoB,GAAG,MAAM,EAAE,CAqBvG;AAgCD;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,aAAa,EACnB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,oBAAoB,GAC5B,sBAAsB,CAcxB"}
+{"version":3,"file":"skills.d.ts","sourceRoot":"","sources":["../src/skills.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAsB,aAAa,EAAE,MAAM,YAAY,CAAC;AAEpE,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,SAAS;QAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACpF,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS;QAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC5F,iHAAiH;IACjH,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,6EAA6E;IAC7E,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,eAAO,MAAM,kBAAkB,+CAAgD,CAAC;AAEhF,eAAO,MAAM,mBAAmB,QAA2C,CAAC;AA8E5E,gGAAgG;AAChG,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,oBAAoB,GAAG,MAAM,EAAE,CAqBvG;AA0CD;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,aAAa,EACnB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,oBAAoB,GAC5B,sBAAsB,CA2CxB"}