@kanonak-protocol/cli 2.1.0 → 2.2.0

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2024-2026 Genval LLC
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/dist/index.js

@@ -1,99 +1,98 @@
 #!/usr/bin/env node
-import{Command as Ys}from"commander";import{readFileSync as Zs}from"fs";import{fileURLToPath as Qs}from"url";import{dirname as ei,join as ni}from"path";import{KanonakParser as ti,PublisherIndex as oi,CredentialStore as ri,createAuthenticatedFetch as ai}from"@kanonak-protocol/sdk";import{readFileSync as eo,statSync as no}from"fs";import{resolve as to,dirname as oo}from"path";import{KanonakParser as ro,KanonakObjectValidator as ao,ValidationSeverity as fn}from"@kanonak-protocol/sdk";import{readFileSync as qt,readdirSync as Gt}from"fs";import{join as Wt,dirname as Xt,basename as pn}from"path";import{InMemoryKanonakDocumentRepository as Jt,FileSystemKanonakDocumentRepository as Yt,HttpKanonakDocumentRepository as Zt,getGlobalCachePath as Qt}from"@kanonak-protocol/sdk";import{mkdirSync as Ft,readFileSync as dn,writeFileSync as mn,existsSync as Be,appendFileSync as Mt}from"fs";import{join as Bt,dirname as Vt,isAbsolute as Ht}from"path";import{getGlobalCachePath as zt}from"@kanonak-protocol/sdk";var T=class{constructor(e=zt()){this.cacheDir=e;this.isProjectLocal=!Ht(e)}cacheDir;gitignoreChecked=!1;isProjectLocal;get(e,t,o){let r=this.getPath(e,t,o);return Be(r)?dn(r,"utf-8"):null}put(e,t,o,r){let a=this.getPath(e,t,o);Ft(Vt(a),{recursive:!0}),mn(a,r,"utf-8"),this.isProjectLocal&&this.ensureGitignore()}has(e,t,o){return Be(this.getPath(e,t,o))}ensureGitignore(){if(this.gitignoreChecked)return;this.gitignoreChecked=!0;let e=".gitignore",t=this.cacheDir;if(Be(e)){if(dn(e,"utf-8").split(`
-`).some(r=>r.trim()===t||r.trim()===t+"/"))return;Mt(e,`
+import{Command as Js}from"commander";import{readFileSync as Ys}from"fs";import{fileURLToPath as Zs}from"url";import{dirname as Qs,join as ei}from"path";import{KanonakParser as ni,PublisherIndex as ti,CredentialStore as oi,createAuthenticatedFetch as ri}from"@kanonak-protocol/sdk";import{readFileSync as Qt,statSync as eo}from"fs";import{resolve as no,dirname as to}from"path";import{KanonakParser as oo,KanonakObjectValidator as ro,ValidationSeverity as fn}from"@kanonak-protocol/sdk";import{readFileSync as zt,readdirSync as qt}from"fs";import{join as Gt,dirname as Wt,basename as pn}from"path";import{InMemoryKanonakDocumentRepository as Xt,FileSystemKanonakDocumentRepository as Jt,HttpKanonakDocumentRepository as Yt,getGlobalCachePath as Zt}from"@kanonak-protocol/sdk";import{mkdirSync as Lt,readFileSync as dn,writeFileSync as mn,existsSync as Me,appendFileSync as Ft}from"fs";import{join as Mt,dirname as Bt,isAbsolute as Vt}from"path";import{getGlobalCachePath as Ht}from"@kanonak-protocol/sdk";var T=class{constructor(e=Ht()){this.cacheDir=e;this.isProjectLocal=!Vt(e)}cacheDir;gitignoreChecked=!1;isProjectLocal;get(e,t,o){let r=this.getPath(e,t,o);return Me(r)?dn(r,"utf-8"):null}put(e,t,o,r){let a=this.getPath(e,t,o);Lt(Bt(a),{recursive:!0}),mn(a,r,"utf-8"),this.isProjectLocal&&this.ensureGitignore()}has(e,t,o){return Me(this.getPath(e,t,o))}ensureGitignore(){if(this.gitignoreChecked)return;this.gitignoreChecked=!0;let e=".gitignore",t=this.cacheDir;if(Me(e)){if(dn(e,"utf-8").split(`
+`).some(r=>r.trim()===t||r.trim()===t+"/"))return;Ft(e,`
 ${t}/
 `)}else mn(e,`${t}/
-`)}getPath(e,t,o){return Bt(this.cacheDir,e,`${t}@${o}.kan.yml`)}};function ie(n){let e=n;for(;;){let t=Xt(e);if(t===e)break;if(pn(e).includes(".")||pn(t).includes(".")){e=t;continue}break}return e}function he(n,e){for(let t of Gt(n,{withFileTypes:!0})){let o=Wt(n,t.name);t.isDirectory()&&t.name!=="node_modules"&&t.name!==".kanonak"?he(o,e):t.name.endsWith(".kan.yml")&&e.push(o)}}var Ve=class{repos;constructor(...e){this.repos=e}async getHighestCompatibleVersionAsync(e,t){for(let o of this.repos)try{let r=await o.getHighestCompatibleVersionAsync(e,t);if(r)return r}catch{}return null}async getAllDocumentsAsync(){let e=[];for(let t of this.repos)try{e.push(...await t.getAllDocumentsAsync())}catch{}return e}async getDocumentAsync(e){for(let t of this.repos)try{let o=await t.getDocumentAsync(e);if(o)return o}catch{}return null}async getDocumentsByNamespaceAsync(e,t){for(let o of this.repos)try{let r=await o.getDocumentsByNamespaceAsync(e,t);if(r.length>0)return r}catch{}return[]}async saveDocumentAsync(e,t){await this.repos[0].saveDocumentAsync(e,t)}async deleteDocumentAsync(e){await this.repos[0].deleteDocumentAsync(e)}async clearNamespaceAsync(e,t){await this.repos[0].clearNamespaceAsync(e,t)}async getAllDocumentReferencesAsync(){return this.repos[0].getAllDocumentReferencesAsync()}async getDocumentContentAsync(e){for(let t of this.repos)try{let o=await t.getDocumentContentAsync(e);if(o)return o}catch{}return null}async getDocumentUriAsync(e){for(let t of this.repos)try{let o=await t.getDocumentUriAsync(e);if(o)return o}catch{}return null}};async function j(n,e){let t=[];he(n,t);let o=new Jt(e);for(let c of t)try{let i=qt(c,"utf-8"),l=e.parse(i),u=l.metadata.namespace_;if(u){let d=`${u.publisher}/${u.package_}@${u.version}`;await o.saveDocumentAsync(l,d)}}catch{}let r=new Yt(Qt(),!0,e),a=new T,s=new Zt({getFromCache:(c,i,l)=>a.get(c,i,l),onFetch:(c,i,l,u)=>a.put(c,i,l,u)});return new Ve(o,r,s)}async function gn(n){let e=to(n),t=no(e),o=t.isDirectory()?ie(e):ie(oo(e)),r=new ro,a=new ao(r),s=await j(o,r),c=[];if(t.isDirectory()?he(e,c):c.push(e),c.length===0){console.log("No .kan.yml files found.");return}let i=0,l=0;for(let u of c){let d=eo(u,"utf-8"),p=r.parseWithErrors(d);if(p.errors&&p.errors.length>0){console.log(`
-${u}:`);for(let h of p.errors)console.log(`  ERROR (parse): ${h.message} [line ${h.line}:${h.column}]`),i++;continue}let y=p.document;if(!y){console.log(`
-${u}:`),console.log("  ERROR: Failed to parse document"),i++;continue}let b=await a.validateAsync(y,s),f=b.errors.filter(h=>h.severity===fn.Error),k=b.errors.filter(h=>h.severity===fn.Warning);if(f.length>0||k.length>0){let h=y.metadata.namespace_,$=h?`${h.publisher}/${h.package_}@${h.version}`:u;console.log(`
-${$}:`);for(let w of f)console.log(`  ERROR: ${w.message}`),w.suggestion&&console.log(`    -> ${w.suggestion}`);for(let w of k)console.log(`  WARN: ${w.message}`)}i+=f.length,l+=k.length}console.log(`
-${c.length} file(s) validated. ${i} error(s), ${l} warning(s).`),i>0&&process.exit(1)}import{KanonakParser as mo,PublisherIndex as po,CredentialStore as fo,createAuthenticatedFetch as go}from"@kanonak-protocol/sdk";import{readFileSync as so,writeFileSync as io,existsSync as co}from"fs";import{createHash as lo}from"crypto";import hn from"js-yaml";var He="kanonak.lock",uo=`# This file is generated by Kanonak CLI. Do not edit manually.
-`;function kn(){if(!co(He))return null;let n=so(He,"utf-8"),e=hn.load(n);return!e||typeof e!="object"||e.version!=="1"?null:{version:"1",lastUpdated:e.lastUpdated??new Date().toISOString(),packages:e.packages??{}}}function yn(n){n.lastUpdated=new Date().toISOString();let e={};for(let o of Object.keys(n.packages).sort())e[o]=n.packages[o];n.packages=e;let t=hn.dump(n,{lineWidth:-1,sortKeys:!1,quotingType:'"'});io(He,uo+t,"utf-8")}function L(n){return`sha256:${lo("sha256").update(n).digest("hex")}`}function W(n){if(!n)return null;let e=n.indexOf("/");if(e===-1)return null;let t=n.substring(0,e),o=n.substring(e+1);if(!t||!o)return null;let r,a=null,s=null,c=o.indexOf("@");if(c!==-1){r=o.substring(0,c);let i=o.substring(c+1),l=i.indexOf("/");l===-1?a=i||null:(a=i.substring(0,l)||null,s=i.substring(l+1)||null)}else{let i=o.indexOf("/");i===-1?r=o:(r=o.substring(0,i),s=o.substring(i+1)||null)}return!r||s&&s.includes("/")||a&&a.includes("@")?null:{publisher:t,packageName:r,version:a,instanceName:s}}async function bn(n){let e=new T,t=new mo,o=new fo,r=go(o),a=new po({fetchFn:r}),s=kn()??{version:"1",lastUpdated:new Date().toISOString(),packages:{}};if(!n){Object.keys(s.packages).length===0&&(console.error("No kanonak.lock file found or lock file is empty."),console.error("Usage: kanonak install {publisher}/{package}[@{version}]"),process.exit(1)),console.log(`Installing ${Object.keys(s.packages).length} package(s) from kanonak.lock...`);for(let[b,f]of Object.entries(s.packages)){let k=b.indexOf("/"),h=b.substring(0,k),$=b.substring(k+1),w=e.get(h,$,f.version);if(w)console.log(`  ${b}@${f.version} (cached)`);else{let v=f.resolved,D=await r(v,h);if(!D.ok)throw new Error(`Failed to fetch ${v} (${D.status} ${D.statusText})`);w=await D.text(),e.put(h,$,f.version,w),console.log(`  ${b}@${f.version}`)}}console.log(`
-Installed ${Object.keys(s.packages).length} package(s) from lock file.`);return}let c=W(n);c||(console.error(`Invalid package reference: "${n}"`),console.error("Expected format: {publisher}/{package}[@{version}]"),process.exit(1));let{publisher:i,packageName:l,version:u,instanceName:d}=c;d&&(console.error(`\`kanonak install\` works on whole packages \u2014 got an instance suffix "/${d}".`),console.error(`Try: kanonak install ${i}/${l}${u?"@"+u:""}`),console.error("(Use `kanonak <capability> add` if you want to install one named instance.)"),process.exit(1));let p=u??await a.getHighestVersion(i,l);p||(console.error(`Could not resolve version for "${i}/${l}".`),console.error("Check the spelling, or run a search to see what the publisher offers."),process.exit(1)),console.log(`Installing ${i}/${l}@${p}...`);let y=new Set;await wn(i,l,p,e,t,a,r,y,s),yn(s),console.log(`
-Installed ${y.size} package(s).`)}async function wn(n,e,t,o,r,a,s,c,i){let l=`${n}/${e}@${t}`;if(c.has(l))return;c.add(l);let u=`${n}/${e}`,d=o.get(n,e,t),p;if(d)console.log(`  ${l} (cached)`),p=await a.getPackageUrl(n,e,t);else{p=await a.getPackageUrl(n,e,t);let f=await s(p,n);if(!f.ok)throw new Error(`Failed to fetch ${p} (${f.status} ${f.statusText})`);d=await f.text(),o.put(n,e,t,d),console.log(`  ${l}`)}let y={},b=r.parse(d);if(b.metadata.imports)for(let[f,k]of Object.entries(b.metadata.imports))for(let h of k){let $=await a.resolveVersion(f,h);$?(y[`${f}/${h.packageName}`]=$,await wn(f,h.packageName,$,o,r,a,s,c,i)):console.error(`  WARNING: Could not resolve ${f}/${h.packageName} ${h.package_}`)}i.packages[u]={version:t,resolved:p,integrity:L(d),dependencies:y}}import{readFileSync as ho}from"fs";import{resolve as ko,dirname as yo}from"path";import{KanonakParser as bo}from"@kanonak-protocol/sdk";async function $n(n){let e=ko(n),t=ho(e,"utf-8"),o=new bo,r=o.parse(t),a=r.metadata.namespace_,s=a?`${a.publisher}/${a.package_}@${a.version}`:n;if(console.log(s),!r.metadata.imports){console.log("  (no imports)");return}let c=ie(yo(e)),i=await j(c,o),l=new Set;for(let[u,d]of Object.entries(r.metadata.imports))for(let p of d)await Sn(u,p,i,l,"  ")}async function Sn(n,e,t,o,r){let a=`${n}/${e.packageName}`;if(o.has(a)){console.log(`${r}${a} (${e.package_}) [circular]`);return}o.add(a);let s;try{s=await t.getHighestCompatibleVersionAsync(n,e)}catch{console.log(`${r}${a} (${e.package_}) [fetch failed]`);return}if(!s){console.log(`${r}${a} (${e.package_}) [not found]`);return}let c=s.metadata.namespace_?.version?.toString()??"?";if(console.log(`${r}${n}/${e.packageName}@${c}`),s.metadata.imports)for(let[i,l]of Object.entries(s.metadata.imports))for(let u of l)await Sn(i,u,t,o,r+"  ")}import{createHash as $o,randomBytes as An}from"crypto";import{createServer as So}from"http";import{execFile as ze}from"child_process";import{CredentialStore as vo,generateDPoPKeyPair as Do,createDPoPProof as vn,serverSupportsDPoP as Ao}from"@kanonak-protocol/sdk";import{normalizeHost as wo}from"@kanonak-protocol/sdk";var F=class{cache=new Map;async discover(e){let t=wo(e);if(this.cache.has(t))return this.cache.get(t);let o=`https://${t}/.well-known/oauth-authorization-server`,r=await this.tryEndpoint(o);if(!r){let a=`https://${t}/.well-known/openid-configuration`;r=await this.tryEndpoint(a)}return this.cache.set(t,r),r}async supportsOAuth(e){return await this.discover(e)!==null}static supportsPkceS256(e){return e.codeChallengeMethodsSupported?.some(t=>t.toUpperCase()==="S256")??!1}static supportsDynamicRegistration(e){return!!e.registrationEndpoint}static supportsAuthorizationCode(e){return e.responseTypesSupported?.some(t=>t.toLowerCase()==="code")??!1}async tryEndpoint(e){let t;try{t=await fetch(e)}catch(r){let a=r instanceof Error?r.message:String(r);return a.includes("ENOTFOUND")||a.includes("ECONNREFUSED")?(console.error(`  OAuth discovery: ${e} \u2014 host unreachable (${a})`),console.error("    If the server is behind a VPN, ensure you are connected.")):a.includes("CERT")||a.includes("SSL")||a.includes("TLS")?(console.error(`  OAuth discovery: ${e} \u2014 TLS error (${a})`),console.error("    If using a custom CA certificate, set NODE_EXTRA_CA_CERTS=/path/to/ca.pem")):console.error(`  OAuth discovery: ${e} \u2014 network error: ${a}`),null}if(!t.ok)return t.status===404||(t.status===403?(console.error(`  OAuth discovery: ${e} \u2014 HTTP 403 Forbidden`),console.error("    Access may be blocked by a firewall, proxy, or WAF.")):t.status>=500&&(console.error(`  OAuth discovery: ${e} \u2014 HTTP ${t.status} server error`),console.error("    The authorization server returned an internal error. Contact your IDP administrator."))),null;let o;try{o=await t.json()}catch{return console.error(`  OAuth discovery: ${e} \u2014 response is not valid JSON`),console.error("    The endpoint may be returning HTML instead of JSON. Check IDP configuration."),null}return{issuer:ce(o.issuer),authorizationEndpoint:ce(o.authorization_endpoint),tokenEndpoint:ce(o.token_endpoint),registrationEndpoint:ce(o.registration_endpoint),revocationEndpoint:ce(o.revocation_endpoint),scopesSupported:X(o.scopes_supported),responseTypesSupported:X(o.response_types_supported),grantTypesSupported:X(o.grant_types_supported),codeChallengeMethodsSupported:X(o.code_challenge_methods_supported),tokenEndpointAuthMethodsSupported:X(o.token_endpoint_auth_methods_supported),dpopSigningAlgValuesSupported:X(o.dpop_signing_alg_values_supported)}}};function ce(n){return typeof n=="string"?n:null}function X(n){return Array.isArray(n)?n.filter(e=>typeof e=="string"):null}var Y=class{discovery;credentialStore;constructor(e,t){this.discovery=e??new F,this.credentialStore=t??new vo}async authorize(e,t=[]){console.log(`Starting OAuth flow for ${e}...`);let o=await this.discovery.discover(e);if(!o)return R(`No OAuth discovery endpoint found for '${e}'.
+`)}getPath(e,t,o){return Mt(this.cacheDir,e,`${t}@${o}.kan.yml`)}};function se(n){let e=n;for(;;){let t=Wt(e);if(t===e)break;if(pn(e).includes(".")||pn(t).includes(".")){e=t;continue}break}return e}function fe(n,e){for(let t of qt(n,{withFileTypes:!0})){let o=Gt(n,t.name);t.isDirectory()&&t.name!=="node_modules"&&t.name!==".kanonak"?fe(o,e):t.name.endsWith(".kan.yml")&&e.push(o)}}var Be=class{repos;constructor(...e){this.repos=e}async getHighestCompatibleVersionAsync(e,t){for(let o of this.repos)try{let r=await o.getHighestCompatibleVersionAsync(e,t);if(r)return r}catch{}return null}async getAllDocumentsAsync(){let e=[];for(let t of this.repos)try{e.push(...await t.getAllDocumentsAsync())}catch{}return e}async getDocumentAsync(e){for(let t of this.repos)try{let o=await t.getDocumentAsync(e);if(o)return o}catch{}return null}async getDocumentsByNamespaceAsync(e,t){for(let o of this.repos)try{let r=await o.getDocumentsByNamespaceAsync(e,t);if(r.length>0)return r}catch{}return[]}async saveDocumentAsync(e,t){await this.repos[0].saveDocumentAsync(e,t)}async deleteDocumentAsync(e){await this.repos[0].deleteDocumentAsync(e)}async clearNamespaceAsync(e,t){await this.repos[0].clearNamespaceAsync(e,t)}async getAllDocumentReferencesAsync(){return this.repos[0].getAllDocumentReferencesAsync()}async getDocumentContentAsync(e){for(let t of this.repos)try{let o=await t.getDocumentContentAsync(e);if(o)return o}catch{}return null}async getDocumentUriAsync(e){for(let t of this.repos)try{let o=await t.getDocumentUriAsync(e);if(o)return o}catch{}return null}};async function x(n,e){let t=[];fe(n,t);let o=new Xt(e);for(let c of t)try{let i=zt(c,"utf-8"),l=e.parse(i),u=l.metadata.namespace_;if(u){let d=`${u.publisher}/${u.package_}@${u.version}`;await o.saveDocumentAsync(l,d)}}catch{}let r=new Jt(Zt(),!0,e),a=new T,s=new Yt({getFromCache:(c,i,l)=>a.get(c,i,l),onFetch:(c,i,l,u)=>a.put(c,i,l,u)});return new Be(o,r,s)}async function gn(n){let e=no(n),t=eo(e),o=t.isDirectory()?se(e):se(to(e)),r=new oo,a=new ro(r),s=await x(o,r),c=[];if(t.isDirectory()?fe(e,c):c.push(e),c.length===0){console.log("No .kan.yml files found.");return}let i=0,l=0;for(let u of c){let d=Qt(u,"utf-8"),m=r.parseWithErrors(d);if(m.errors&&m.errors.length>0){console.log(`
+${u}:`);for(let g of m.errors)console.log(`  ERROR (parse): ${g.message} [line ${g.line}:${g.column}]`),i++;continue}let k=m.document;if(!k){console.log(`
+${u}:`),console.log("  ERROR: Failed to parse document"),i++;continue}let b=await a.validateAsync(k,s),f=b.errors.filter(g=>g.severity===fn.Error),h=b.errors.filter(g=>g.severity===fn.Warning);if(f.length>0||h.length>0){let g=k.metadata.namespace_,w=g?`${g.publisher}/${g.package_}@${g.version}`:u;console.log(`
+${w}:`);for(let $ of f)console.log(`  ERROR: ${$.message}`),$.suggestion&&console.log(`    -> ${$.suggestion}`);for(let $ of h)console.log(`  WARN: ${$.message}`)}i+=f.length,l+=h.length}console.log(`
+${c.length} file(s) validated. ${i} error(s), ${l} warning(s).`),i>0&&process.exit(1)}import{KanonakParser as ao,PublisherIndex as so,CredentialStore as io,createAuthenticatedFetch as co}from"@kanonak-protocol/sdk";import{loadLockFile as lo,saveLockFile as uo,computeIntegrity as mo}from"@kanonak-protocol/sdk";function G(n){if(!n)return null;let e=n.indexOf("/");if(e===-1)return null;let t=n.substring(0,e),o=n.substring(e+1);if(!t||!o)return null;let r,a=null,s=null,c=o.indexOf("@");if(c!==-1){r=o.substring(0,c);let i=o.substring(c+1),l=i.indexOf("/");l===-1?a=i||null:(a=i.substring(0,l)||null,s=i.substring(l+1)||null)}else{let i=o.indexOf("/");i===-1?r=o:(r=o.substring(0,i),s=o.substring(i+1)||null)}return!r||s&&s.includes("/")||a&&a.includes("@")?null:{publisher:t,packageName:r,version:a,instanceName:s}}async function hn(n){let e=new T,t=new ao,o=new io,r=co(o),a=new so({fetchFn:r}),s=lo()??{version:"1",lastUpdated:new Date().toISOString(),packages:{}};if(!n){Object.keys(s.packages).length===0&&(console.error("No kanonak.lock file found or lock file is empty."),console.error("Usage: kanonak install {publisher}/{package}[@{version}]"),process.exit(1)),console.log(`Installing ${Object.keys(s.packages).length} package(s) from kanonak.lock...`);for(let[b,f]of Object.entries(s.packages)){let h=b.indexOf("/"),g=b.substring(0,h),w=b.substring(h+1),$=e.get(g,w,f.version);if($)console.log(`  ${b}@${f.version} (cached)`);else{let v=f.resolved,D=await r(v,g);if(!D.ok)throw new Error(`Failed to fetch ${v} (${D.status} ${D.statusText})`);$=await D.text(),e.put(g,w,f.version,$),console.log(`  ${b}@${f.version}`)}}console.log(`
+Installed ${Object.keys(s.packages).length} package(s) from lock file.`);return}let c=G(n);c||(console.error(`Invalid package reference: "${n}"`),console.error("Expected format: {publisher}/{package}[@{version}]"),process.exit(1));let{publisher:i,packageName:l,version:u,instanceName:d}=c;d&&(console.error(`\`kanonak install\` works on whole packages \u2014 got an instance suffix "/${d}".`),console.error(`Try: kanonak install ${i}/${l}${u?"@"+u:""}`),console.error("(Use `kanonak <capability> add` if you want to install one named instance.)"),process.exit(1));let m=u??await a.getHighestVersion(i,l);m||(console.error(`Could not resolve version for "${i}/${l}".`),console.error("Check the spelling, or run a search to see what the publisher offers."),process.exit(1)),console.log(`Installing ${i}/${l}@${m}...`);let k=new Set;await kn(i,l,m,e,t,a,r,k,s),uo(s),console.log(`
+Installed ${k.size} package(s).`)}async function kn(n,e,t,o,r,a,s,c,i){let l=`${n}/${e}@${t}`;if(c.has(l))return;c.add(l);let u=`${n}/${e}`,d=o.get(n,e,t),m;if(d)console.log(`  ${l} (cached)`),m=await a.getPackageUrl(n,e,t);else{m=await a.getPackageUrl(n,e,t);let f=await s(m,n);if(!f.ok)throw new Error(`Failed to fetch ${m} (${f.status} ${f.statusText})`);d=await f.text(),o.put(n,e,t,d),console.log(`  ${l}`)}let k={},b=r.parse(d);if(b.metadata.imports)for(let[f,h]of Object.entries(b.metadata.imports))for(let g of h){let w=await a.resolveVersion(f,g);w?(k[`${f}/${g.packageName}`]=w,await kn(f,g.packageName,w,o,r,a,s,c,i)):console.error(`  WARNING: Could not resolve ${f}/${g.packageName} ${g.package_}`)}i.packages[u]={version:t,resolved:m,integrity:mo(d),dependencies:k}}import{readFileSync as po}from"fs";import{resolve as fo,dirname as go}from"path";import{KanonakParser as ho}from"@kanonak-protocol/sdk";async function yn(n){let e=fo(n),t=po(e,"utf-8"),o=new ho,r=o.parse(t),a=r.metadata.namespace_,s=a?`${a.publisher}/${a.package_}@${a.version}`:n;if(console.log(s),!r.metadata.imports){console.log("  (no imports)");return}let c=se(go(e)),i=await x(c,o),l=new Set;for(let[u,d]of Object.entries(r.metadata.imports))for(let m of d)await bn(u,m,i,l,"  ")}async function bn(n,e,t,o,r){let a=`${n}/${e.packageName}`;if(o.has(a)){console.log(`${r}${a} (${e.package_}) [circular]`);return}o.add(a);let s;try{s=await t.getHighestCompatibleVersionAsync(n,e)}catch{console.log(`${r}${a} (${e.package_}) [fetch failed]`);return}if(!s){console.log(`${r}${a} (${e.package_}) [not found]`);return}let c=s.metadata.namespace_?.version?.toString()??"?";if(console.log(`${r}${n}/${e.packageName}@${c}`),s.metadata.imports)for(let[i,l]of Object.entries(s.metadata.imports))for(let u of l)await bn(i,u,t,o,r+"  ")}import{createHash as yo,randomBytes as Sn}from"crypto";import{createServer as bo}from"http";import{execFile as Ve}from"child_process";import{CredentialStore as wo,generateDPoPKeyPair as $o,createDPoPProof as wn,serverSupportsDPoP as So}from"@kanonak-protocol/sdk";import{normalizeHost as ko}from"@kanonak-protocol/sdk";var L=class{cache=new Map;async discover(e){let t=ko(e);if(this.cache.has(t))return this.cache.get(t);let o=`https://${t}/.well-known/oauth-authorization-server`,r=await this.tryEndpoint(o);if(!r){let a=`https://${t}/.well-known/openid-configuration`;r=await this.tryEndpoint(a)}return this.cache.set(t,r),r}async supportsOAuth(e){return await this.discover(e)!==null}static supportsPkceS256(e){return e.codeChallengeMethodsSupported?.some(t=>t.toUpperCase()==="S256")??!1}static supportsDynamicRegistration(e){return!!e.registrationEndpoint}static supportsAuthorizationCode(e){return e.responseTypesSupported?.some(t=>t.toLowerCase()==="code")??!1}async tryEndpoint(e){let t;try{t=await fetch(e)}catch(r){let a=r instanceof Error?r.message:String(r);return a.includes("ENOTFOUND")||a.includes("ECONNREFUSED")?(console.error(`  OAuth discovery: ${e} \u2014 host unreachable (${a})`),console.error("    If the server is behind a VPN, ensure you are connected.")):a.includes("CERT")||a.includes("SSL")||a.includes("TLS")?(console.error(`  OAuth discovery: ${e} \u2014 TLS error (${a})`),console.error("    If using a custom CA certificate, set NODE_EXTRA_CA_CERTS=/path/to/ca.pem")):console.error(`  OAuth discovery: ${e} \u2014 network error: ${a}`),null}if(!t.ok)return t.status===404||(t.status===403?(console.error(`  OAuth discovery: ${e} \u2014 HTTP 403 Forbidden`),console.error("    Access may be blocked by a firewall, proxy, or WAF.")):t.status>=500&&(console.error(`  OAuth discovery: ${e} \u2014 HTTP ${t.status} server error`),console.error("    The authorization server returned an internal error. Contact your IDP administrator."))),null;let o;try{o=await t.json()}catch{return console.error(`  OAuth discovery: ${e} \u2014 response is not valid JSON`),console.error("    The endpoint may be returning HTML instead of JSON. Check IDP configuration."),null}return{issuer:ie(o.issuer),authorizationEndpoint:ie(o.authorization_endpoint),tokenEndpoint:ie(o.token_endpoint),registrationEndpoint:ie(o.registration_endpoint),revocationEndpoint:ie(o.revocation_endpoint),scopesSupported:W(o.scopes_supported),responseTypesSupported:W(o.response_types_supported),grantTypesSupported:W(o.grant_types_supported),codeChallengeMethodsSupported:W(o.code_challenge_methods_supported),tokenEndpointAuthMethodsSupported:W(o.token_endpoint_auth_methods_supported),dpopSigningAlgValuesSupported:W(o.dpop_signing_alg_values_supported)}}};function ie(n){return typeof n=="string"?n:null}function W(n){return Array.isArray(n)?n.filter(e=>typeof e=="string"):null}var J=class{discovery;credentialStore;constructor(e,t){this.discovery=e??new L,this.credentialStore=t??new wo}async authorize(e,t=[]){console.log(`Starting OAuth flow for ${e}...`);let o=await this.discovery.discover(e);if(!o)return R(`No OAuth discovery endpoint found for '${e}'.
   The server must expose one of:
     - https://${e}/.well-known/oauth-authorization-server (RFC 8414)
     - https://${e}/.well-known/openid-configuration (OpenID Connect)
   Verify the hostname is correct and HTTPS is configured.
   If using a corporate proxy, ensure it is not blocking the discovery request.`);let r=[];if(o.authorizationEndpoint||r.push("authorization_endpoint"),o.tokenEndpoint||r.push("token_endpoint"),r.length>0)return R(`OAuth metadata for '${e}' is missing required fields: ${r.join(", ")}.
-  Contact the IDP administrator to ensure these are included in the discovery document.`);let a=Ao(o.dpopSigningAlgValuesSupported),s=null;if(a){console.log("  Server supports DPoP (RFC 9449) \u2014 generating key pair...");try{s=Do()}catch(D){return R(`Failed to generate DPoP key pair: ${J(D)}
-  Ensure your Node.js installation supports EC P-256 curves.`)}}let{redirectUri:c,port:i,waitForCallback:l,close:u}=await Ro(),d=await this.credentialStore.getCredential(e),p=d?.clientId??null,y=d?.clientSecret??null;if(!p&&o.registrationEndpoint){console.log("  Registering dynamic OAuth client (RFC 7591)...");let D=await this.registerClient(o.registrationEndpoint,c);if(!D.success)return u(),R(D.error);p=D.clientId,y=D.clientSecret??null}if(!p)return u(),R(`No OAuth client credentials for '${e}' and the server does not support dynamic client registration (no registration_endpoint in metadata).
+  Contact the IDP administrator to ensure these are included in the discovery document.`);let a=So(o.dpopSigningAlgValuesSupported),s=null;if(a){console.log("  Server supports DPoP (RFC 9449) \u2014 generating key pair...");try{s=$o()}catch(D){return R(`Failed to generate DPoP key pair: ${X(D)}
+  Ensure your Node.js installation supports EC P-256 curves.`)}}let{redirectUri:c,port:i,waitForCallback:l,close:u}=await Eo(),d=await this.credentialStore.getCredential(e),m=d?.clientId??null,k=d?.clientSecret??null;if(!m&&o.registrationEndpoint){console.log("  Registering dynamic OAuth client (RFC 7591)...");let D=await this.registerClient(o.registrationEndpoint,c);if(!D.success)return u(),R(D.error);m=D.clientId,k=D.clientSecret??null}if(!m)return u(),R(`No OAuth client credentials for '${e}' and the server does not support dynamic client registration (no registration_endpoint in metadata).
   You must pre-register a client with your IDP and configure the client_id.
   Ask your IDP administrator to enable dynamic client registration (RFC 7591),
-  or add a registration_endpoint to the OAuth metadata.`);let b=Co(),f=Po(b),k=Eo(),h=_o(o.authorizationEndpoint,p,c,t,k,f);console.log(`  Opening browser for authorization on port ${i}...`),console.log("  If the browser doesn't open, navigate to:"),console.log(`  ${h}`),jo(h);let $=await l();if(u(),!$)return R(`Authorization timed out after 5 minutes.
+  or add a registration_endpoint to the OAuth metadata.`);let b=Do(),f=Ko(b),h=Ao(),g=Co(o.authorizationEndpoint,m,c,t,h,f);console.log(`  Opening browser for authorization on port ${i}...`),console.log("  If the browser doesn't open, navigate to:"),console.log(`  ${g}`),Io(g);let w=await l();if(u(),!w)return R(`Authorization timed out after 5 minutes.
   The browser authorization was not completed in time.
-  Re-run 'kanonak login ${e}' and complete the browser authorization promptly.`);if(!$.code){let D=$.error?`: ${$.error}`:"";return R(`No authorization code received${D}.
+  Re-run 'kanonak login ${e}' and complete the browser authorization promptly.`);if(!w.code){let D=w.error?`: ${w.error}`:"";return R(`No authorization code received${D}.
   The IDP may have rejected the authorization request.
-  Check the IDP admin console for error details.`)}if($.state!==k)return R(`Authorization state mismatch \u2014 possible CSRF attack.
+  Check the IDP admin console for error details.`)}if(w.state!==h)return R(`Authorization state mismatch \u2014 possible CSRF attack.
   The response did not match the expected session.
-  Re-run 'kanonak login ${e}' to start a fresh authorization flow.`);console.log("  Exchanging authorization code for tokens...");let w=await this.exchangeCode(o.tokenEndpoint,p,y,$.code,c,b,s);if(!w.success)return R(w.error);let v={clientId:p,clientSecret:y,accessToken:w.tokens.accessToken,refreshToken:w.tokens.refreshToken,expiresAt:w.tokens.expiresIn?new Date(Date.now()+w.tokens.expiresIn*1e3).toISOString():null,tokenEndpoint:o.tokenEndpoint,dpopKeyPair:s};return await this.credentialStore.store(e,v),console.log(`  Successfully authenticated with ${e}`),a&&console.log("  DPoP proof-of-possession is active"),{success:!0,host:e}}async refresh(e){let t=await this.credentialStore.getCredential(e);if(!t)return R(`No stored credentials for '${e}'. Run 'kanonak login ${e}' to authenticate first.`);if(!t.refreshToken)return R(`No refresh token available for '${e}'.
+  Re-run 'kanonak login ${e}' to start a fresh authorization flow.`);console.log("  Exchanging authorization code for tokens...");let $=await this.exchangeCode(o.tokenEndpoint,m,k,w.code,c,b,s);if(!$.success)return R($.error);let v={clientId:m,clientSecret:k,accessToken:$.tokens.accessToken,refreshToken:$.tokens.refreshToken,expiresAt:$.tokens.expiresIn?new Date(Date.now()+$.tokens.expiresIn*1e3).toISOString():null,tokenEndpoint:o.tokenEndpoint,dpopKeyPair:s};return await this.credentialStore.store(e,v),console.log(`  Successfully authenticated with ${e}`),a&&console.log("  DPoP proof-of-possession is active"),{success:!0,host:e}}async refresh(e){let t=await this.credentialStore.getCredential(e);if(!t)return R(`No stored credentials for '${e}'. Run 'kanonak login ${e}' to authenticate first.`);if(!t.refreshToken)return R(`No refresh token available for '${e}'.
   The authorization server may not issue refresh tokens for this client.
   Run 'kanonak login ${e}' to re-authenticate.`);if(!t.clientId)return R(`No client ID in stored credentials for '${e}'.
   The stored credential may be corrupted. Run 'kanonak logout ${e}' then 'kanonak login ${e}'.`);let o=t.tokenEndpoint;if(!o){let a=await this.discovery.discover(e);if(!a?.tokenEndpoint)return R(`Cannot find token endpoint for '${e}'.
   The OAuth discovery endpoint may be unreachable.
   Check network connectivity and run 'kanonak login ${e}' to re-authenticate.`);o=a.tokenEndpoint}let r=await this.refreshTokenRequest(o,t.clientId,t.clientSecret,t.refreshToken,t.dpopKeyPair);return r.success?(t.accessToken=r.tokens.accessToken,r.tokens.refreshToken&&(t.refreshToken=r.tokens.refreshToken),t.expiresAt=r.tokens.expiresIn?new Date(Date.now()+r.tokens.expiresIn*1e3).toISOString():null,t.tokenEndpoint=o,await this.credentialStore.store(e,t),{success:!0,host:e}):R(`${r.error}
   The refresh token may have expired. Run 'kanonak login ${e}' to re-authenticate.`)}async logout(e){let t=await this.credentialStore.getCredential(e);if(!t)return R(`No stored credentials for '${e}'.
-  You may not be logged in, or credentials may be stored in a different backend.`);let o=await this.discovery.discover(e);if(o?.revocationEndpoint&&t.accessToken&&t.clientId)try{await this.revokeToken(o.revocationEndpoint,t.accessToken,t.clientId)}catch{console.warn(`  Warning: Token revocation failed for '${e}'. The token has been removed locally but may still be valid on the server until it expires.`)}return await this.credentialStore.remove(e),{success:!0,host:e}}async registerClient(e,t){let o;try{o=await fetch(e,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({client_name:"Kanonak CLI",redirect_uris:[t],grant_types:["authorization_code","refresh_token"],response_types:["code"],token_endpoint_auth_method:"none"})})}catch(s){return{success:!1,error:`Dynamic client registration request to ${e} failed: ${J(s)}
+  You may not be logged in, or credentials may be stored in a different backend.`);let o=await this.discovery.discover(e);if(o?.revocationEndpoint&&t.accessToken&&t.clientId)try{await this.revokeToken(o.revocationEndpoint,t.accessToken,t.clientId)}catch{console.warn(`  Warning: Token revocation failed for '${e}'. The token has been removed locally but may still be valid on the server until it expires.`)}return await this.credentialStore.remove(e),{success:!0,host:e}}async registerClient(e,t){let o;try{o=await fetch(e,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({client_name:"Kanonak CLI",redirect_uris:[t],grant_types:["authorization_code","refresh_token"],response_types:["code"],token_endpoint_auth_method:"none"})})}catch(s){return{success:!1,error:`Dynamic client registration request to ${e} failed: ${X(s)}
   Ensure the IDP is reachable and HTTPS is properly configured.
-  If using a corporate proxy or custom CA, set NODE_EXTRA_CA_CERTS.`}}if(!o.ok){let s=await qe(o);return{success:!1,error:`Dynamic client registration (RFC 7591) failed.
+  If using a corporate proxy or custom CA, set NODE_EXTRA_CA_CERTS.`}}if(!o.ok){let s=await He(o);return{success:!1,error:`Dynamic client registration (RFC 7591) failed.
   Endpoint: ${e}
   HTTP ${o.status}: ${s}
   The IDP may not support dynamic registration for public clients.
   Ask your IDP administrator to enable RFC 7591 support, or pre-register a client manually.`}}let r=await o.json(),a=r.client_id;return a?{success:!0,clientId:a,clientSecret:r.client_secret}:{success:!1,error:`Dynamic client registration response from ${e} did not contain a client_id.
-  The IDP response may be malformed. Contact your IDP administrator.`}}async exchangeCode(e,t,o,r,a,s,c){let i=new URLSearchParams({grant_type:"authorization_code",client_id:t,code:r,redirect_uri:a,code_verifier:s});o&&i.set("client_secret",o);let l={"Content-Type":"application/x-www-form-urlencoded"};if(c)try{l.DPoP=vn(c.privateKey,c.publicKey,"POST",e)}catch(d){return{success:!1,error:`Failed to create DPoP proof for token exchange: ${J(d)}
-  The stored key pair may be corrupted. Run 'kanonak login' to re-authenticate.`}}let u;try{u=await fetch(e,{method:"POST",headers:l,body:i.toString()})}catch(d){return{success:!1,error:`Token exchange request to ${e} failed: ${J(d)}
-  Ensure the token endpoint is reachable.`}}if(!u.ok){let d=await qe(u),p=Ko(d);return{success:!1,error:`Token exchange failed.
+  The IDP response may be malformed. Contact your IDP administrator.`}}async exchangeCode(e,t,o,r,a,s,c){let i=new URLSearchParams({grant_type:"authorization_code",client_id:t,code:r,redirect_uri:a,code_verifier:s});o&&i.set("client_secret",o);let l={"Content-Type":"application/x-www-form-urlencoded"};if(c)try{l.DPoP=wn(c.privateKey,c.publicKey,"POST",e)}catch(d){return{success:!1,error:`Failed to create DPoP proof for token exchange: ${X(d)}
+  The stored key pair may be corrupted. Run 'kanonak login' to re-authenticate.`}}let u;try{u=await fetch(e,{method:"POST",headers:l,body:i.toString()})}catch(d){return{success:!1,error:`Token exchange request to ${e} failed: ${X(d)}
+  Ensure the token endpoint is reachable.`}}if(!u.ok){let d=await He(u),m=vo(d);return{success:!1,error:`Token exchange failed.
   Endpoint: ${e}
-  HTTP ${u.status}: ${d}`+(p?`
-  ${p}`:"")}}return{success:!0,tokens:Dn(await u.json())}}async refreshTokenRequest(e,t,o,r,a){let s=new URLSearchParams({grant_type:"refresh_token",client_id:t,refresh_token:r});o&&s.set("client_secret",o);let c={"Content-Type":"application/x-www-form-urlencoded"};if(a)try{c.DPoP=vn(a.privateKey,a.publicKey,"POST",e)}catch(l){return{success:!1,error:`Failed to create DPoP proof for token refresh: ${J(l)}`}}let i;try{i=await fetch(e,{method:"POST",headers:c,body:s.toString()})}catch(l){return{success:!1,error:`Token refresh request to ${e} failed: ${J(l)}`}}if(!i.ok){let l=await qe(i);return{success:!1,error:`Token refresh failed \u2014 HTTP ${i.status}: ${l}`}}return{success:!0,tokens:Dn(await i.json())}}async revokeToken(e,t,o){await fetch(e,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({token:t,client_id:o}).toString()})}};function R(n){return{success:!1,error:n}}function Dn(n){return{accessToken:n.access_token,refreshToken:n.refresh_token,expiresIn:typeof n.expires_in=="number"?n.expires_in:void 0}}function J(n){return n instanceof Error?n.message:String(n)}async function qe(n){try{return await n.text()}catch{return"(could not read response body)"}}function Ko(n){try{let e=JSON.parse(n);switch(e.error){case"invalid_grant":return"Hint: The authorization code may have expired or already been used. Re-run the login flow.";case"invalid_client":return"Hint: The client credentials were rejected. The client_id may be invalid or the client_secret may be wrong.";case"redirect_uri_mismatch":return"Hint: The redirect_uri does not match what was registered with the IDP.";case"unsupported_grant_type":return"Hint: The IDP does not support authorization_code grants. Contact your IDP administrator.";case"invalid_scope":return"Hint: One or more requested scopes are not allowed. Check the scopes configured on the IDP.";case"use_dpop_nonce":return"Hint: The server requires a DPoP nonce. This should be handled automatically \u2014 please report this as a bug.";default:return e.error_description?`IDP says: ${e.error_description}`:null}}catch{return null}}function Co(){return An(32).toString("base64url")}function Po(n){return $o("sha256").update(n).digest("base64url")}function Eo(){return An(16).toString("base64url")}function _o(n,e,t,o,r,a){let s=new URLSearchParams({client_id:e,response_type:"code",redirect_uri:t,scope:o.join(" "),state:r,code_challenge:a,code_challenge_method:"S256"});return`${n}?${s}`}var Io=300*1e3;async function Ro(){return new Promise(n=>{let e=So((r,a)=>{let s=new URL(r.url,"http://localhost"),c=s.searchParams.get("code")??void 0,i=s.searchParams.get("state")??void 0,l=s.searchParams.get("error")??s.searchParams.get("error_description")??void 0,u=l?To(l):null,d=u?`<html><body><h1>Authorization failed</h1><p>${u}</p></body></html>`:"<html><body><h1>Authorization successful!</h1><p>You can close this window.</p></body></html>";a.writeHead(200,{"Content-Type":"text/html"}),a.end(d),t({code:c,state:i,error:l})}),t,o=new Promise(r=>{t=r,setTimeout(()=>{r(null),e.close()},Io)});e.listen(0,"127.0.0.1",()=>{let r=e.address();n({redirectUri:`http://localhost:${r.port}/callback`,port:r.port,waitForCallback:()=>o,close:()=>e.close()})})})}function To(n){return n.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;")}function jo(n){try{process.platform==="win32"?ze("cmd",["/c","start","",n]):process.platform==="darwin"?ze("open",[n]):ze("xdg-open",[n])}catch{console.log("  Could not open browser automatically. Please navigate to the URL above manually.")}}import{CredentialStore as xo}from"@kanonak-protocol/sdk";async function Kn(n){try{let e=new F,t=new xo,r=await new Y(e,t).authorize(n);r.success?console.log(`
+  HTTP ${u.status}: ${d}`+(m?`
+  ${m}`:"")}}return{success:!0,tokens:$n(await u.json())}}async refreshTokenRequest(e,t,o,r,a){let s=new URLSearchParams({grant_type:"refresh_token",client_id:t,refresh_token:r});o&&s.set("client_secret",o);let c={"Content-Type":"application/x-www-form-urlencoded"};if(a)try{c.DPoP=wn(a.privateKey,a.publicKey,"POST",e)}catch(l){return{success:!1,error:`Failed to create DPoP proof for token refresh: ${X(l)}`}}let i;try{i=await fetch(e,{method:"POST",headers:c,body:s.toString()})}catch(l){return{success:!1,error:`Token refresh request to ${e} failed: ${X(l)}`}}if(!i.ok){let l=await He(i);return{success:!1,error:`Token refresh failed \u2014 HTTP ${i.status}: ${l}`}}return{success:!0,tokens:$n(await i.json())}}async revokeToken(e,t,o){await fetch(e,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({token:t,client_id:o}).toString()})}};function R(n){return{success:!1,error:n}}function $n(n){return{accessToken:n.access_token,refreshToken:n.refresh_token,expiresIn:typeof n.expires_in=="number"?n.expires_in:void 0}}function X(n){return n instanceof Error?n.message:String(n)}async function He(n){try{return await n.text()}catch{return"(could not read response body)"}}function vo(n){try{let e=JSON.parse(n);switch(e.error){case"invalid_grant":return"Hint: The authorization code may have expired or already been used. Re-run the login flow.";case"invalid_client":return"Hint: The client credentials were rejected. The client_id may be invalid or the client_secret may be wrong.";case"redirect_uri_mismatch":return"Hint: The redirect_uri does not match what was registered with the IDP.";case"unsupported_grant_type":return"Hint: The IDP does not support authorization_code grants. Contact your IDP administrator.";case"invalid_scope":return"Hint: One or more requested scopes are not allowed. Check the scopes configured on the IDP.";case"use_dpop_nonce":return"Hint: The server requires a DPoP nonce. This should be handled automatically \u2014 please report this as a bug.";default:return e.error_description?`IDP says: ${e.error_description}`:null}}catch{return null}}function Do(){return Sn(32).toString("base64url")}function Ko(n){return yo("sha256").update(n).digest("base64url")}function Ao(){return Sn(16).toString("base64url")}function Co(n,e,t,o,r,a){let s=new URLSearchParams({client_id:e,response_type:"code",redirect_uri:t,scope:o.join(" "),state:r,code_challenge:a,code_challenge_method:"S256"});return`${n}?${s}`}var Po=300*1e3;async function Eo(){return new Promise(n=>{let e=bo((r,a)=>{let s=new URL(r.url,"http://localhost"),c=s.searchParams.get("code")??void 0,i=s.searchParams.get("state")??void 0,l=s.searchParams.get("error")??s.searchParams.get("error_description")??void 0,u=l?_o(l):null,d=u?`<html><body><h1>Authorization failed</h1><p>${u}</p></body></html>`:"<html><body><h1>Authorization successful!</h1><p>You can close this window.</p></body></html>";a.writeHead(200,{"Content-Type":"text/html"}),a.end(d),t({code:c,state:i,error:l})}),t,o=new Promise(r=>{t=r,setTimeout(()=>{r(null),e.close()},Po)});e.listen(0,"127.0.0.1",()=>{let r=e.address();n({redirectUri:`http://localhost:${r.port}/callback`,port:r.port,waitForCallback:()=>o,close:()=>e.close()})})})}function _o(n){return n.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;")}function Io(n){try{process.platform==="win32"?Ve("cmd",["/c","start","",n]):process.platform==="darwin"?Ve("open",[n]):Ve("xdg-open",[n])}catch{console.log("  Could not open browser automatically. Please navigate to the URL above manually.")}}import{CredentialStore as Ro}from"@kanonak-protocol/sdk";async function vn(n){try{let e=new L,t=new Ro,r=await new J(e,t).authorize(n);r.success?console.log(`
 Authenticated with ${n}.`):(console.error(`
 Authentication failed:
   ${r.error}`),process.exit(1))}catch(e){let t=e instanceof Error?e.message:String(e);console.error(`
 Authentication failed unexpectedly:
   ${t}`),console.error(`
-If this persists, file an issue at https://github.com/kanonak-protocol/typescript/issues`),process.exit(1)}}import{CredentialStore as Uo}from"@kanonak-protocol/sdk";async function Cn(n){try{let e=new F,t=new Uo,r=await new Y(e,t).logout(n);r.success?console.log(`Logged out from ${n}.`):(console.error(`
+If this persists, see https://github.com/kanonak-protocol for support channels.`),process.exit(1)}}import{CredentialStore as To}from"@kanonak-protocol/sdk";async function Dn(n){try{let e=new L,t=new To,r=await new J(e,t).logout(n);r.success?console.log(`Logged out from ${n}.`):(console.error(`
 Logout failed:
   ${r.error}`),process.exit(1))}catch(e){let t=e instanceof Error?e.message:String(e);console.error(`
 Logout failed unexpectedly:
-  ${t}`),process.exit(1)}}import{Command as lr}from"commander";import{KanonakParser as ur,KanonakObjectParser as dr,PublisherIndex as mr,CredentialStore as pr,createAuthenticatedFetch as fr}from"@kanonak-protocol/sdk";import{readFileSync as No,writeFileSync as Oo,existsSync as Lo}from"fs";import{join as Fo}from"path";import Pn from"js-yaml";import{getGlobalCachePath as Mo}from"@kanonak-protocol/sdk";var Bo=`# This file is generated by Kanonak CLI. Do not edit manually.
-`;function En(){let n=Mo();return Fo(n,"..","capabilities.lock")}function Z(){let n=En();if(!Lo(n))return{version:"1",lastUpdated:new Date().toISOString(),capabilities:{}};let e=No(n,"utf-8"),t=Pn.load(e);return!t||typeof t!="object"||t.version!=="1"?{version:"1",lastUpdated:new Date().toISOString(),capabilities:{}}:{version:"1",lastUpdated:t.lastUpdated??new Date().toISOString(),capabilities:t.capabilities??{}}}function Ge(n){n.lastUpdated=new Date().toISOString();let e={};for(let o of Object.keys(n.capabilities).sort())e[o]=n.capabilities[o];n.capabilities=e;let t=Pn.dump(n,{lineWidth:-1,sortKeys:!1,quotingType:'"'});Oo(En(),Bo+t,"utf-8")}var K=class{constructor(e,t){this.doc=e;this.broader=t}doc;broader;async getAllDocumentsAsync(){return[this.doc]}async getDocumentAsync(e){return this.broader.getDocumentAsync(e)}async getDocumentsByNamespaceAsync(e,t){return this.broader.getDocumentsByNamespaceAsync(e,t)}async getHighestCompatibleVersionAsync(e,t){return this.broader.getHighestCompatibleVersionAsync(e,t)}async saveDocumentAsync(){throw new Error("SingleDocumentRepository is read-only")}async deleteDocumentAsync(){throw new Error("SingleDocumentRepository is read-only")}async clearNamespaceAsync(){throw new Error("SingleDocumentRepository is read-only")}async getAllDocumentReferencesAsync(){return[]}async getDocumentContentAsync(e){return this.broader.getDocumentContentAsync(e)}async getDocumentUriAsync(e){return this.broader.getDocumentUriAsync(e)}};import{KanonakObjectParser as Jo,EmbeddedKanonak as xn,ReferenceKanonak as Un}from"@kanonak-protocol/sdk";import{SubjectKanonak as _n,DefinedKanonak as Vo,StringStatement as Ho,NumberStatement as zo,BooleanStatement as qo,ReferenceStatement as In,EmbeddedStatement as Go,ListStatement as Wo}from"@kanonak-protocol/sdk";function N(n){return`${n.publisher}/${n.package_}/${n.name}`}function M(n,e){return n.publisher===e.publisher&&n.package_===e.package_&&n.name===e.name}function Xo(n,e){if(!(n instanceof Vo))return!1;for(let t of n.statement)if(t.predicate?.subject?.name==="type"&&t instanceof In){let r=t.object;if(M(r.subject,e))return!0}return!1}function C(n,e){let t=[];for(let o of n)o instanceof _n&&Xo(o,e)&&t.push(o);return t}function ke(n,e){for(let t of n){if(!(t instanceof _n)||t.name!==e.name)continue;if((t.namespace||"").startsWith(`${e.publisher}/${e.package_}@`))return t}}function ye(n,e){for(let t of n.statement){let o=t.predicate;if(o?.subject&&M(o.subject,e))return t}}function le(n,e){let t=ye(n,e);if(t&&(t instanceof Ho||t instanceof zo||t instanceof qo))return t.object}function P(n,e){let t=le(n,e);return typeof t=="string"?t:void 0}function B(n,e){let t=ye(n,e);if(t instanceof In)return t.object.subject}function H(n,e){let t=ye(n,e);if(t instanceof Go)return t.object}function Q(n,e){let t=ye(n,e);return t instanceof Wo?t.object??[]:[]}var E="kanonak.org",_="capabilities",We={publisher:E,package_:_,name:"Capability"},Yo={publisher:E,package_:_,name:"commandName"},Nn={publisher:E,package_:_,name:"description"},Zo={publisher:E,package_:_,name:"managesType"},Qo={publisher:E,package_:_,name:"deploymentTarget"},er={publisher:E,package_:_,name:"hasCommand"},nr={publisher:E,package_:_,name:"subcommandName"},tr={publisher:E,package_:_,name:"performs"},or={publisher:E,package_:_,name:"hasArgument"},rr={publisher:E,package_:_,name:"argumentName"},Rn={publisher:E,package_:_,name:"isRequired"},Tn={publisher:E,package_:_,name:"isOption"},ar={publisher:E,package_:_,name:"defaultValue"};async function On(n,e,t){let o=Z(),r=new Jo,a=[];for(let[s,c]of Object.entries(o.capabilities)){let i=n.get(c.publisher,c.package_,c.version);if(!i){console.error(`  WARNING: Cached content missing for capability "${s}" (${c.publisher}/${c.package_}@${c.version})`);continue}try{let l=e.parse(i),u=new K(l,t),d=await r.parseKanonaks(u),p=sr(d,c.publisher,c.package_,c.version);p?a.push(p):console.error(`  WARNING: No Capability instance found in "${s}" (${c.publisher}/${c.package_}@${c.version})`)}catch(l){console.error(`  WARNING: Failed to parse capability "${s}": ${l}`)}}return a}function sr(n,e,t,o){let r=C(n,We);if(r.length===0)return;let a=r[0],s=P(a,Yo)??"",c=P(a,Nn)??"",i=B(a,Zo),l=B(a,Qo),u=[];for(let d of Q(a,er)){let p=ir(d,n);p&&u.push(p)}return{commandName:s,description:c,managesTypeKey:i?N(i):"",deploymentTargetKey:l?N(l):"",commands:u,publisher:e,package_:t,version:o}}function ir(n,e){let t;if(n instanceof xn)t=n;else if(n instanceof Un){let i=Ln(e,n.subject.publisher,n.subject.package_,n.subject.name);i&&(t=i)}if(!t)return;let o=P(t,nr)??"",r=P(t,Nn)??"",a=B(t,tr),s=Q(t,or),c=[];for(let i of s){let l=cr(i,e);l&&c.push(l)}return{subcommandName:o,description:r,arguments:c,actionKey:a?N(a):""}}function cr(n,e){let t;if(n instanceof xn)t=n;else if(n instanceof Un){let i=Ln(e,n.subject.publisher,n.subject.package_,n.subject.name);i&&(t=i)}if(!t)return;let o=P(t,rr)??"",r=P(t,Rn)==="true"||jn(t,Rn)===!0,a=P(t,Tn)==="true"||jn(t,Tn)===!0,s=P(t,ar),c={argumentName:o,required:r,isOption:a};return s!==void 0&&(c.defaultValue=s),c}function jn(n,e){for(let t of n.statement){let o=t,r=o.predicate;if(r?.subject&&r.subject.publisher===e.publisher&&r.subject.package_===e.package_&&r.subject.name===e.name)return typeof o.object=="boolean"?o.object:void 0}}function Ln(n,e,t,o){for(let r of n){if(!("name"in r)||!("namespace"in r))continue;let a=r;if(a.name===o&&!(!a.namespace||typeof a.namespace!="string")&&a.namespace.startsWith(`${e}/${t}@`))return r}}var gr={publisher:E,package_:_,name:"commandName"};function Fn(){let n=new lr("capability").description("Manage Kanonak CLI capabilities (pluggable command groups)");return n.command("add <package>").description("Install a capability from a Kanonak publisher").action(async e=>{await hr(e)}),n.command("remove <name>").description("Remove an installed capability").action(async e=>{await kr(e)}),n.command("list").description("List installed capabilities").action(async()=>{await yr()}),n}async function hr(n){let e=W(n);e||(console.error(`Invalid package reference: "${n}"`),console.error("Expected format: {publisher}/{package}[@{version}]"),process.exit(1));let{publisher:t,packageName:o,version:r,instanceName:a}=e;a&&(console.error(`\`kanonak capability add\` installs whole packages \u2014 got an instance suffix "/${a}".`),console.error(`Try: kanonak capability add ${t}/${o}${r?"@"+r:""}`),process.exit(1));let s=new T,c=new ur,i=new dr,l=new pr,u=fr(l),d=new mr({fetchFn:u}),p=r??await d.getHighestVersion(t,o);p||(console.error(`Could not resolve version for "${t}/${o}".`),process.exit(1)),console.log(`Installing capability ${t}/${o}@${p}...`);let y=s.get(t,o,p);if(!y){let G=await d.getPackageUrl(t,o,p),ge=await u(G,t);if(!ge.ok)throw new Error(`Failed to fetch ${G} (${ge.status} ${ge.statusText})`);y=await ge.text(),s.put(t,o,p,y)}let b=c.parse(y),f=await j(process.cwd(),c),k=new K(b,f),h=await i.parseKanonaks(k),$=C(h,We);$.length===0&&(console.error(`Package ${t}/${o}@${p} does not contain a ${E}/${_}/Capability instance.`),process.exit(1));let w=$[0],v=P(w,gr);v||(console.error(`Capability instance in ${t}/${o}@${p} has no commandName property.`),process.exit(1));let D=Z();D.capabilities[v]={publisher:t,package_:o,version:p,resolved:await d.getPackageUrl(t,o,p),integrity:L(y)},Ge(D),console.log(`
-Installed capability "${v}".`),console.log(`Run "kanonak ${v} --help" to get started.`)}async function kr(n){let e=Z();e.capabilities[n]||(console.error(`Capability "${n}" is not installed.`),process.exit(1));let t=e.capabilities[n];delete e.capabilities[n],Ge(e),console.log(`Removed capability "${n}" (${t.publisher}/${t.package_}@${t.version}).`)}async function yr(){let n=Z(),e=Object.entries(n.capabilities);if(e.length===0){console.log("No capabilities installed."),console.log("Install one with: kanonak capability add {publisher}/{package}");return}console.log(`Installed capabilities:
-`);for(let[t,o]of e)console.log(`  ${t}  ${o.publisher}/${o.package_}@${o.version}`)}import{Command as pe}from"commander";import{readFileSync as Sa,writeFileSync as va,mkdirSync as Da,existsSync as it,statSync as Aa}from"fs";import{join as Ka,resolve as Ca}from"path";import{KanonakParser as nn,KanonakObjectParser as tn,SubjectKanonak as Pa,Reasoner as Ea,KanonakVocabulary as _a,makeUriKey as ct}from"@kanonak-protocol/sdk";var br="kanonak.org",wr="document-ast",S=n=>({publisher:br,package_:wr,name:n}),x={Document:S("Document"),Block:S("Block"),Inline:S("Inline"),StructuredValue:S("StructuredValue"),Heading:S("Heading"),Paragraph:S("Paragraph"),RawBlock:S("RawBlock"),Text:S("Text"),StructuredMap:S("StructuredMap"),StructuredEntry:S("StructuredEntry"),StructuredList:S("StructuredList"),StringScalar:S("StringScalar"),IntegerScalar:S("IntegerScalar"),EscapeHint:S("EscapeHint"),MediaType:S("MediaType"),metadata:S("metadata"),children:S("children"),level:S("level"),inlines:S("inlines"),text:S("text"),entries:S("entries"),key:S("key"),value:S("value"),escapeHint:S("escapeHint"),items:S("items"),stringValue:S("stringValue"),integerValue:S("integerValue"),rawContent:S("rawContent"),mediaType:S("mediaType"),mimeType:S("mimeType"),ESC_RAW:S("esc-raw"),ESC_YAML_SAFE:S("esc-yaml-safe"),ESC_TOML_STRING:S("esc-toml-string"),ESC_TOML_MULTILINE:S("esc-toml-multiline"),ESC_JSON:S("esc-json"),TEXT_PLAIN:S("text-plain"),TEXT_MARKDOWN:S("text-markdown"),TEXT_HTML:S("text-html"),APPLICATION_JSON:S("application-json"),TEXT_YAML:S("text-yaml"),IMAGE_SVG_XML:S("image-svg-xml")},$r="kanonak.org",Sr="transformations",m=n=>({publisher:$r,package_:Sr,name:n}),g={Transformation:m("Transformation"),InputPattern:m("InputPattern"),Expression:m("Expression"),ExpressionKind:m("ExpressionKind"),ExpressionFragment:m("ExpressionFragment"),AstFieldBinding:m("AstFieldBinding"),OutputFormat:m("OutputFormat"),FormatOverride:m("FormatOverride"),RenameEntry:m("RenameEntry"),Artifact:m("Artifact"),NormalizeKind:m("NormalizeKind"),inputPattern:m("inputPattern"),rule:m("rule"),artifactName:m("artifactName"),outputs:m("outputs"),formatOverrides:m("formatOverrides"),matchesClass:m("matchesClass"),requires:m("requires"),kind:m("kind"),astClass:m("astClass"),set:m("set"),iterate:m("iterate"),loopVar:m("loopVar"),emit:m("emit"),condition:m("condition"),thenBuild:m("thenBuild"),elseBuild:m("elseBuild"),parts:m("parts"),stringLiteral:m("stringLiteral"),integerLiteral:m("integerLiteral"),booleanLiteral:m("booleanLiteral"),varName:m("varName"),readSource:m("readSource"),readProp:m("readProp"),traverseSource:m("traverseSource"),through:m("through"),step:m("step"),primary:m("primary"),alternate:m("alternate"),uriNameOf:m("uriNameOf"),listMapSource:m("listMapSource"),mapBody:m("mapBody"),separator:m("separator"),items:m("items"),normSource:m("normSource"),normKind:m("normKind"),checkExpr:m("checkExpr"),refTo:m("refTo"),fragmentRef:m("fragmentRef"),expr:m("expr"),labelTarget:m("labelTarget"),labelSource:m("labelSource"),resolveSource:m("resolveSource"),field:m("field"),bindValue:m("bindValue"),backendUri:m("backendUri"),formatTarget:m("formatTarget"),metadataKeys:m("metadataKeys"),metadataRenames:m("metadataRenames"),trailingNewline:m("trailingNewline"),fromKey:m("fromKey"),toKey:m("toKey"),KIND_BUILD_AST_NODE:m("build-ast-node"),KIND_FOR_EACH:m("for-each"),KIND_WHEN:m("when"),KIND_CONCAT:m("concat"),KIND_STRING_LITERAL:m("string-literal"),KIND_INTEGER_LITERAL:m("integer-literal"),KIND_BOOLEAN_LITERAL:m("boolean-literal"),KIND_VAR_REF:m("var-ref"),KIND_PROPERTY_READ:m("property-read"),KIND_TRAVERSE:m("traverse"),KIND_FALLBACK:m("fallback"),KIND_URI_NAME:m("uri-name"),KIND_LIST_MAP:m("list-map"),KIND_JOIN:m("join"),KIND_NORMALIZE:m("normalize"),KIND_IS_SET:m("is-set"),KIND_URI_LITERAL:m("uri-literal"),KIND_CALL_FRAGMENT:m("call-fragment"),KIND_DISPLAY_LABEL:m("display-label"),KIND_RESOLVE_REF:m("resolve-ref"),NORM_TRIM_END:m("trim-end"),FMT_MARKDOWN_FRONTMATTER:m("markdown-with-frontmatter"),FMT_TOML:m("toml"),FMT_JSON:m("json"),FMT_PLAIN_MARKDOWN:m("plain-markdown")};import{SubjectKanonak as Mn}from"@kanonak-protocol/sdk";var be=class{constructor(e,t,o){this.repository=e;this.parser=t;this.objectParser=o}repository;parser;objectParser;cache=new Map;async resolveSubject(e,t){let o=ke(t,e);if(o)return o;let r=`${e.publisher}/${e.package_}`,a=this.cache.get(r);if(!a){let s=await this.repository.getDocumentsByNamespaceAsync(e.publisher,e.package_);if(s.length===0)return;let c=s[0],i=new K(c,this.repository);a=await this.objectParser.parseKanonaks(i),this.cache.set(r,a)}for(let s of a)if(s instanceof Mn&&s.name===e.name&&s.namespace&&s.namespace.startsWith(`${e.publisher}/${e.package_}@`))return s;for(let s of a)if(s instanceof Mn&&s.name===e.name)return s}};import{DefinedKanonak as Bn,LiteralKanonak as vr,ReferenceKanonak as we,StringStatement as Dr,NumberStatement as Ar,BooleanStatement as Kr,ReferenceStatement as Cr,EmbeddedStatement as Pr,ListStatement as Er}from"@kanonak-protocol/sdk";var $e=class extends Error{constructor(e){super(e)}},Se=class{constructor(e,t){this.resolver=e;this.allKanonaks=t}resolver;allKanonaks;async evaluate(e,t){switch(e.kind){case"var-ref":{if(!t.has(e.varName))throw new $e(`Unbound variable "${e.varName}"`);return t.get(e.varName)}case"string-literal":return e.value;case"integer-literal":return e.value;case"boolean-literal":return e.value;case"uri-literal":return{...e.refTo};case"property-read":{let o=await this.evaluate(e.source,t);return o instanceof Bn?Xe(o,e.readProp):void 0}case"traverse":{let o=await this.evaluate(e.source,t);if(!(o instanceof Bn))return;let r=Xe(o,e.through),a;if(r instanceof we?a=r.subject:Array.isArray(r)&&r.length>0&&r[0]instanceof we&&(a=r[0].subject),!a)return;let s=await this.resolver.resolveSubject(a,this.allKanonaks);if(!s)return;let c=new Map(t);return c.set("input",s),this.evaluate(e.step,c)}case"fallback":{let o=await this.evaluate(e.primary,t);return Hn(o)?o:this.evaluate(e.alternate,t)}case"uri-name":{let o=await this.evaluate(e.of,t);return o instanceof we?o.subject.name:zn(o)?o.name:void 0}case"list-map":{let o=await this.evaluate(e.source,t),r=Je(o),a=[];for(let s of r){let c=new Map(t);c.set(e.loopVar,s),a.push(await this.evaluate(e.mapBody,c))}return a}case"join":{let o=await this.evaluate(e.items,t),r=Je(o),a=[];for(let s of r)s!=null&&a.push(String(s));return a.join(e.separator)}case"normalize":{let o=await this.evaluate(e.source,t);return typeof o!="string"?o:e.normKind==="trim-end"?o.trimEnd():o}case"is-set":{let o=await this.evaluate(e.check,t);return Hn(o)}case"when":{let o=await this.evaluate(e.condition,t);return Tr(o)?this.evaluate(e.thenBuild,t):e.elseBuild?this.evaluate(e.elseBuild,t):void 0}case"concat":{let o=[];for(let r of e.parts){let a=await this.evaluate(r,t);if(a!=null)if(Array.isArray(a))for(let s of a)o.push(s);else o.push(a)}return o}case"for-each":{let o=await this.evaluate(e.iterate,t),r=Je(o),a=[];for(let s of r){let c=new Map(t);c.set(e.loopVar,s);let i=await this.evaluate(e.emit,c);if(i!=null)if(Array.isArray(i))for(let l of i)a.push(l);else a.push(i)}return a}case"build-ast-node":return this.buildAstNode(e,t);case"resolve-ref":{let o=await this.evaluate(e.source,t),r;return o instanceof we?r=o.subject:zn(o)&&(r=o),r?this.resolver.resolveSubject(r,this.allKanonaks):void 0}case"display-label":{let o={publisher:e.labelTarget.publisher,package_:e.labelTarget.package_,name:e.labelTarget.name},r=await this.resolver.resolveSubject(o,this.allKanonaks);if(r){let a=Xe(r,e.labelSource);if(typeof a=="string"&&a.length>0)return a}return e.labelTarget.name}default:{let o=e;throw new $e(`Unhandled expression kind: ${JSON.stringify(o)}`)}}}async buildAstNode(e,t){let o={kind:e.astClass.name};for(let r of e.set){let a=await this.evaluate(r.value,t);if(a==null||Array.isArray(a)&&a.length===0)continue;let s=r.field.name;Array.isArray(a)&&_r.has(s)&&a.every(c=>Ir(c))&&(a=a.map(c=>String(c)).join("")),o[s]=a}return o}},_r=new Set(["stringValue","text","rawContent","key"]);function Ir(n){return typeof n=="string"||typeof n=="number"||typeof n=="boolean"}function Xe(n,e){let t=[];for(let r of n.statement){let a=r.predicate;a?.subject&&M(a.subject,e)&&t.push(r)}if(t.length===0)return;if(t.length===1&&t[0]instanceof Er)return Rr(t[0].object);if(t.length===1)return Vn(t[0]);let o=[];for(let r of t){let a=Vn(r);a!==void 0&&o.push(a)}return o}function Rr(n){let e=[];for(let t of n)t instanceof vr?e.push(t.value):e.push(t);return e}function Vn(n){if(n instanceof Dr||n instanceof Ar||n instanceof Kr||n instanceof Cr||n instanceof Pr)return n.object}function Hn(n){return n==null?!1:typeof n=="string"||Array.isArray(n)?n.length>0:!0}function Tr(n){return n==null?!1:typeof n=="boolean"?n:typeof n=="string"?n.length>0:typeof n=="number"?n!==0:Array.isArray(n)?n.length>0:!0}function Je(n){return n==null?[]:Array.isArray(n)?n:[n]}function zn(n){return n!==null&&typeof n=="object"&&"publisher"in n&&"package_"in n&&"name"in n}import{EmbeddedKanonak as jr,ReferenceKanonak as Ye,SubjectKanonak as xr,ListStatement as Gn,StringStatement as Ur,ReferenceStatement as Ze}from"@kanonak-protocol/sdk";var A=class extends Error{constructor(t,o){super(`${t} (at ${o})`);this.path=o}path},qn=16;function Nr(n){return n.predicate?.subject}function Wn(n,e){let t=[];for(let o of n.statement){let r=Nr(o);r&&M(r,e)&&t.push(o)}return t}function U(n,e){let t=B(n,e);if(t)return t;let o=Q(n,e);if(o.length===1&&o[0]instanceof Ye)return o[0].subject}function ve(n,e){let t=Q(n,e),o=[];for(let r of t)r instanceof jr&&o.push(r);return o}function Xn(n,e){let t=[];for(let o of Wn(n,e))if(o instanceof Ur)t.push(o.object);else if(o instanceof Gn)for(let r of o.object)typeof r=="string"?t.push(r):r instanceof Ye&&t.push(r.subject.name);else o instanceof Ze&&t.push(o.object.subject.name);return t}function Or(n,e){let t=n.split("/");if(t.length<3)throw new A(`Invalid property URI "${n}" \u2014 expected publisher/package/name`,e);let[o,r,...a]=t;return{publisher:o,package_:r,name:a.join("/")}}function ne(n,e){let t=n.name,o=`transformation[${t}]`,r={catalog:e,depth:0},a=H(n,g.inputPattern);if(!a)throw new A("Transformation has no inputPattern",o);let s=Lr(a,r,`${o}.inputPattern`),c=H(n,g.rule);if(!c)throw new A("Transformation has no rule",o);let i=ee(c,r,`${o}.rule`),l=H(n,g.artifactName);if(!l)throw new A("Transformation has no artifactName",o);let u=ee(l,r,`${o}.artifactName`),d=new Set;for(let y of Wn(n,g.outputs))if(y instanceof Ze)d.add(y.object.subject.name);else if(y instanceof Gn)for(let b of y.object)b instanceof Ye&&d.add(b.subject.name);if(d.size===0)throw new A("Transformation has no outputs",o);let p=new Map;for(let y of ve(n,g.formatOverrides)){let b=`${o}.formatOverrides[]`,f=U(y,g.formatTarget);if(!f)throw new A("FormatOverride missing formatTarget",b);p.set(f.name,Fr(y,b))}return{name:t,inputPattern:s,rule:i,artifactName:u,outputs:d,overrides:p}}function Lr(n,e,t){let o=U(n,g.matchesClass);if(!o)throw new A("InputPattern has no matchesClass",t);let r={publisher:o.publisher,package_:o.package_,name:o.name},s=Xn(n,g.requires).map((c,i)=>Or(c,`${t}.requires[${i}]`));return{matchesClass:r,requires:s}}function Fr(n,e){let t=Xn(n,g.metadataKeys),o=t.length>0?t:void 0,r=new Map;for(let c of ve(n,g.metadataRenames)){let i=P(c,g.fromKey),l=P(c,g.toKey);i&&l&&r.set(i,l)}let a=le(n,g.trailingNewline);return{metadataKeys:o,metadataRenames:r,trailingNewline:typeof a=="boolean"?a:void 0}}function ee(n,e,t){let o=U(n,g.kind);if(!o)throw new A("Expression has no kind",t);let r=o.name;switch(r){case"build-ast-node":return Vr(n,e,t);case"for-each":return Hr(n,e,t);case"when":return zr(n,e,t);case"concat":return qr(n,e,t);case"string-literal":return{kind:"string-literal",value:ue(n,g.stringLiteral,t)};case"integer-literal":return{kind:"integer-literal",value:Zr(n,g.integerLiteral,t)};case"boolean-literal":return{kind:"boolean-literal",value:Qr(n,g.booleanLiteral,t)};case"var-ref":return{kind:"var-ref",varName:ue(n,g.varName,t)};case"property-read":return Gr(n,e,t);case"traverse":return Wr(n,e,t);case"fallback":return Xr(n,e,t);case"uri-name":return{kind:"uri-name",of:I(n,g.uriNameOf,e,`${t}.uriNameOf`)};case"list-map":return Jr(n,e,t);case"join":return{kind:"join",separator:ue(n,g.separator,t),items:I(n,g.items,e,`${t}.items`)};case"normalize":return Yr(n,e,t);case"is-set":return{kind:"is-set",check:I(n,g.checkExpr,e,`${t}.checkExpr`)};case"uri-literal":{let a=U(n,g.refTo);if(!a)throw new A("uri-literal has no refTo",t);return{kind:"uri-literal",refTo:{publisher:a.publisher,package_:a.package_,name:a.name}}}case"display-label":{let a=U(n,g.labelTarget);if(!a)throw new A("display-label has no labelTarget",t);let s=U(n,g.labelSource);if(!s)throw new A("display-label has no labelSource",t);return{kind:"display-label",labelTarget:{publisher:a.publisher,package_:a.package_,name:a.name},labelSource:{publisher:s.publisher,package_:s.package_,name:s.name}}}case"resolve-ref":return{kind:"resolve-ref",source:I(n,g.resolveSource,e,`${t}.resolveSource`)};case"call-fragment":{if(e.depth>=qn)throw new A(`call-fragment recursion exceeded ${qn} levels (cycle?)`,t);let a=U(n,g.fragmentRef);if(!a)throw new A("call-fragment has no fragmentRef",t);let s=Mr(e.catalog,a);if(!s)throw new A(`call-fragment: no ExpressionFragment found matching ${a.publisher}/${a.package_}/${a.name} \u2014 either the fragment is missing or its package is not in the compilation catalog`,t);let c=H(s,g.expr);if(!c)throw new A(`ExpressionFragment "${s.name}" has no expr`,t);let i={catalog:e.catalog,depth:e.depth+1};return ee(c,i,`${t}\u2192fragment[${s.name}]`)}default:throw new A(`Unknown ExpressionKind "${r}"`,t)}}function Mr(n,e){for(let t of n)if(t instanceof xr&&t.name===e.name&&t.namespace&&t.namespace.startsWith(`${e.publisher}/${e.package_}@`)&&Br(t))return t}function Br(n){for(let e of n.statement){let t=e.predicate;if(!(!t||t.subject?.name!=="type")&&e instanceof Ze){let o=e.object.subject;if(o.publisher===g.ExpressionFragment.publisher&&o.package_===g.ExpressionFragment.package_&&o.name===g.ExpressionFragment.name)return!0}}return!1}function Vr(n,e,t){let o=U(n,g.astClass);if(!o)throw new A("build-ast-node has no astClass",t);let r={publisher:o.publisher,package_:o.package_,name:o.name},a=[];return ve(n,g.set).forEach((c,i)=>{let l=`${t}.set[${i}]`,u=U(c,g.field);if(!u)throw new A("AstFieldBinding has no field",l);let d=I(c,g.bindValue,e,`${l}.bindValue`);a.push({field:{publisher:u.publisher,package_:u.package_,name:u.name},value:d})}),{kind:"build-ast-node",astClass:r,set:a}}function Hr(n,e,t){return{kind:"for-each",iterate:I(n,g.iterate,e,`${t}.iterate`),loopVar:ue(n,g.loopVar,t),emit:I(n,g.emit,e,`${t}.emit`)}}function zr(n,e,t){let o=H(n,g.elseBuild);return{kind:"when",condition:I(n,g.condition,e,`${t}.condition`),thenBuild:I(n,g.thenBuild,e,`${t}.thenBuild`),elseBuild:o?ee(o,e,`${t}.elseBuild`):void 0}}function qr(n,e,t){return{kind:"concat",parts:ve(n,g.parts).map((r,a)=>ee(r,e,`${t}.parts[${a}]`))}}function Gr(n,e,t){let o=U(n,g.readProp);if(!o)throw new A("property-read has no readProp",t);return{kind:"property-read",source:I(n,g.readSource,e,`${t}.readSource`),readProp:{publisher:o.publisher,package_:o.package_,name:o.name}}}function Wr(n,e,t){let o=U(n,g.through);if(!o)throw new A("traverse has no through",t);return{kind:"traverse",source:I(n,g.traverseSource,e,`${t}.traverseSource`),through:{publisher:o.publisher,package_:o.package_,name:o.name},step:I(n,g.step,e,`${t}.step`)}}function Xr(n,e,t){return{kind:"fallback",primary:I(n,g.primary,e,`${t}.primary`),alternate:I(n,g.alternate,e,`${t}.alternate`)}}function Jr(n,e,t){return{kind:"list-map",source:I(n,g.listMapSource,e,`${t}.listMapSource`),loopVar:ue(n,g.loopVar,t),mapBody:I(n,g.mapBody,e,`${t}.mapBody`)}}function Yr(n,e,t){let o=U(n,g.normKind);if(!o)throw new A("normalize has no normKind",t);let r=o.name;if(r!=="trim-end")throw new A(`Unknown NormalizeKind "${r}"`,t);return{kind:"normalize",source:I(n,g.normSource,e,`${t}.normSource`),normKind:r}}function I(n,e,t,o){let r=H(n,e);if(!r){let a=`${e.publisher}/${e.package_}/${e.name}`,s=n.statement.length,c=n.statement.some(u=>{let d=u.predicate?.subject;return d&&d.publisher==="kanonak.org"&&d.package_==="transformations"&&d.name==="kind"}),i=`${e.publisher}/${e.package_}`,l;throw s===0?l=" (parent Expression has no statements at all \u2014 the parser produced an empty node, which usually means the containing YAML block did not resolve to an Expression-typed embedded)":c&&s<3?l=` \u2014 expected property ${a} but the parent Expression only has ${s} statement(s) including its 'kind'. The most likely cause is a STALE local copy of the Kanonak package ${i} that declares the expression kind but not the '${e.name}' property. Refresh your workspace copy of ${i} and re-resolve imports so the runner picks up the current property definitions.`:l=` \u2014 expected property ${a}. Parent Expression has ${s} statement(s) but none match that predicate URI. Either the YAML is missing the '${e.name}' key for this expression kind, or your local copy of the Kanonak package ${i} is out of date.`,new A(`missing child expression${l}`,o)}return ee(r,t,o)}function ue(n,e,t){let o=P(n,e);if(typeof o!="string")throw new A(`missing required string property "${e.name}"`,t);return o}function Zr(n,e,t){let o=le(n,e);if(typeof o!="number")throw new A(`missing required integer property "${e.name}"`,t);return o}function Qr(n,e,t){let o=le(n,e);if(typeof o!="boolean")throw new A(`missing required boolean property "${e.name}"`,t);return o}function Jn(n,e){return n.publisher===e.publisher&&n.package_===e.package_&&n.name===e.name}var De=class{backendUri="kanonak.org/transformations/markdown-with-frontmatter";render(e,t){let o=ea(e.metadata,t),r=oa(e.children),s=["---",...o,"---","",r].join(`
+  ${t}`),process.exit(1)}}import{Command as sr}from"commander";import{KanonakParser as ir,KanonakObjectParser as cr,PublisherIndex as lr,CredentialStore as ur,createAuthenticatedFetch as dr,computeIntegrity as mr}from"@kanonak-protocol/sdk";import{readFileSync as xo,writeFileSync as jo,existsSync as Uo}from"fs";import{join as No}from"path";import Kn from"js-yaml";import{getGlobalCachePath as Oo}from"@kanonak-protocol/sdk";var Lo=`# This file is generated by Kanonak CLI. Do not edit manually.
+`;function An(){let n=Oo();return No(n,"..","capabilities.lock")}function Y(){let n=An();if(!Uo(n))return{version:"1",lastUpdated:new Date().toISOString(),capabilities:{}};let e=xo(n,"utf-8"),t=Kn.load(e);return!t||typeof t!="object"||t.version!=="1"?{version:"1",lastUpdated:new Date().toISOString(),capabilities:{}}:{version:"1",lastUpdated:t.lastUpdated??new Date().toISOString(),capabilities:t.capabilities??{}}}function ze(n){n.lastUpdated=new Date().toISOString();let e={};for(let o of Object.keys(n.capabilities).sort())e[o]=n.capabilities[o];n.capabilities=e;let t=Kn.dump(n,{lineWidth:-1,sortKeys:!1,quotingType:'"'});jo(An(),Lo+t,"utf-8")}var A=class{constructor(e,t){this.doc=e;this.broader=t}doc;broader;async getAllDocumentsAsync(){return[this.doc]}async getDocumentAsync(e){return this.broader.getDocumentAsync(e)}async getDocumentsByNamespaceAsync(e,t){return this.broader.getDocumentsByNamespaceAsync(e,t)}async getHighestCompatibleVersionAsync(e,t){return this.broader.getHighestCompatibleVersionAsync(e,t)}async saveDocumentAsync(){throw new Error("SingleDocumentRepository is read-only")}async deleteDocumentAsync(){throw new Error("SingleDocumentRepository is read-only")}async clearNamespaceAsync(){throw new Error("SingleDocumentRepository is read-only")}async getAllDocumentReferencesAsync(){return[]}async getDocumentContentAsync(e){return this.broader.getDocumentContentAsync(e)}async getDocumentUriAsync(e){return this.broader.getDocumentUriAsync(e)}};import{KanonakObjectParser as Go,EmbeddedKanonak as Rn,ReferenceKanonak as Tn}from"@kanonak-protocol/sdk";import{SubjectKanonak as Cn,DefinedKanonak as Fo,StringStatement as Mo,NumberStatement as Bo,BooleanStatement as Vo,ReferenceStatement as Pn,EmbeddedStatement as Ho,ListStatement as zo}from"@kanonak-protocol/sdk";function N(n){return`${n.publisher}/${n.package_}/${n.name}`}function F(n,e){return n.publisher===e.publisher&&n.package_===e.package_&&n.name===e.name}function qo(n,e){if(!(n instanceof Fo))return!1;for(let t of n.statement)if(t.predicate?.subject?.name==="type"&&t instanceof Pn){let r=t.object;if(F(r.subject,e))return!0}return!1}function C(n,e){let t=[];for(let o of n)o instanceof Cn&&qo(o,e)&&t.push(o);return t}function ge(n,e){for(let t of n){if(!(t instanceof Cn)||t.name!==e.name)continue;if((t.namespace||"").startsWith(`${e.publisher}/${e.package_}@`))return t}}function he(n,e){for(let t of n.statement){let o=t.predicate;if(o?.subject&&F(o.subject,e))return t}}function ce(n,e){let t=he(n,e);if(t&&(t instanceof Mo||t instanceof Bo||t instanceof Vo))return t.object}function P(n,e){let t=ce(n,e);return typeof t=="string"?t:void 0}function M(n,e){let t=he(n,e);if(t instanceof Pn)return t.object.subject}function V(n,e){let t=he(n,e);if(t instanceof Ho)return t.object}function Z(n,e){let t=he(n,e);return t instanceof zo?t.object??[]:[]}var E="kanonak.org",_="capabilities",qe={publisher:E,package_:_,name:"Capability"},Wo={publisher:E,package_:_,name:"commandName"},xn={publisher:E,package_:_,name:"description"},Xo={publisher:E,package_:_,name:"managesType"},Jo={publisher:E,package_:_,name:"deploymentTarget"},Yo={publisher:E,package_:_,name:"hasCommand"},Zo={publisher:E,package_:_,name:"subcommandName"},Qo={publisher:E,package_:_,name:"performs"},er={publisher:E,package_:_,name:"hasArgument"},nr={publisher:E,package_:_,name:"argumentName"},En={publisher:E,package_:_,name:"isRequired"},_n={publisher:E,package_:_,name:"isOption"},tr={publisher:E,package_:_,name:"defaultValue"};async function jn(n,e,t){let o=Y(),r=new Go,a=[];for(let[s,c]of Object.entries(o.capabilities)){let i=n.get(c.publisher,c.package_,c.version);if(!i){console.error(`  WARNING: Cached content missing for capability "${s}" (${c.publisher}/${c.package_}@${c.version})`);continue}try{let l=e.parse(i),u=new A(l,t),d=await r.parseKanonaks(u),m=or(d,c.publisher,c.package_,c.version);m?a.push(m):console.error(`  WARNING: No Capability instance found in "${s}" (${c.publisher}/${c.package_}@${c.version})`)}catch(l){console.error(`  WARNING: Failed to parse capability "${s}": ${l}`)}}return a}function or(n,e,t,o){let r=C(n,qe);if(r.length===0)return;let a=r[0],s=P(a,Wo)??"",c=P(a,xn)??"",i=M(a,Xo),l=M(a,Jo),u=[];for(let d of Z(a,Yo)){let m=rr(d,n);m&&u.push(m)}return{commandName:s,description:c,managesTypeKey:i?N(i):"",deploymentTargetKey:l?N(l):"",commands:u,publisher:e,package_:t,version:o}}function rr(n,e){let t;if(n instanceof Rn)t=n;else if(n instanceof Tn){let i=Un(e,n.subject.publisher,n.subject.package_,n.subject.name);i&&(t=i)}if(!t)return;let o=P(t,Zo)??"",r=P(t,xn)??"",a=M(t,Qo),s=Z(t,er),c=[];for(let i of s){let l=ar(i,e);l&&c.push(l)}return{subcommandName:o,description:r,arguments:c,actionKey:a?N(a):""}}function ar(n,e){let t;if(n instanceof Rn)t=n;else if(n instanceof Tn){let i=Un(e,n.subject.publisher,n.subject.package_,n.subject.name);i&&(t=i)}if(!t)return;let o=P(t,nr)??"",r=P(t,En)==="true"||In(t,En)===!0,a=P(t,_n)==="true"||In(t,_n)===!0,s=P(t,tr),c={argumentName:o,required:r,isOption:a};return s!==void 0&&(c.defaultValue=s),c}function In(n,e){for(let t of n.statement){let o=t,r=o.predicate;if(r?.subject&&r.subject.publisher===e.publisher&&r.subject.package_===e.package_&&r.subject.name===e.name)return typeof o.object=="boolean"?o.object:void 0}}function Un(n,e,t,o){for(let r of n){if(!("name"in r)||!("namespace"in r))continue;let a=r;if(a.name===o&&!(!a.namespace||typeof a.namespace!="string")&&a.namespace.startsWith(`${e}/${t}@`))return r}}var pr={publisher:E,package_:_,name:"commandName"};function Nn(){let n=new sr("capability").description("Manage Kanonak CLI capabilities (pluggable command groups)");return n.command("add <package>").description("Install a capability from a Kanonak publisher").action(async e=>{await fr(e)}),n.command("remove <name>").description("Remove an installed capability").action(async e=>{await gr(e)}),n.command("list").description("List installed capabilities").action(async()=>{await hr()}),n}async function fr(n){let e=G(n);e||(console.error(`Invalid package reference: "${n}"`),console.error("Expected format: {publisher}/{package}[@{version}]"),process.exit(1));let{publisher:t,packageName:o,version:r,instanceName:a}=e;a&&(console.error(`\`kanonak capability add\` installs whole packages \u2014 got an instance suffix "/${a}".`),console.error(`Try: kanonak capability add ${t}/${o}${r?"@"+r:""}`),process.exit(1));let s=new T,c=new ir,i=new cr,l=new ur,u=dr(l),d=new lr({fetchFn:u}),m=r??await d.getHighestVersion(t,o);m||(console.error(`Could not resolve version for "${t}/${o}".`),process.exit(1)),console.log(`Installing capability ${t}/${o}@${m}...`);let k=s.get(t,o,m);if(!k){let q=await d.getPackageUrl(t,o,m),pe=await u(q,t);if(!pe.ok)throw new Error(`Failed to fetch ${q} (${pe.status} ${pe.statusText})`);k=await pe.text(),s.put(t,o,m,k)}let b=c.parse(k),f=await x(process.cwd(),c),h=new A(b,f),g=await i.parseKanonaks(h),w=C(g,qe);w.length===0&&(console.error(`Package ${t}/${o}@${m} does not contain a ${E}/${_}/Capability instance.`),process.exit(1));let $=w[0],v=P($,pr);v||(console.error(`Capability instance in ${t}/${o}@${m} has no commandName property.`),process.exit(1));let D=Y();D.capabilities[v]={publisher:t,package_:o,version:m,resolved:await d.getPackageUrl(t,o,m),integrity:mr(k)},ze(D),console.log(`
+Installed capability "${v}".`),console.log(`Run "kanonak ${v} --help" to get started.`)}async function gr(n){let e=Y();e.capabilities[n]||(console.error(`Capability "${n}" is not installed.`),process.exit(1));let t=e.capabilities[n];delete e.capabilities[n],ze(e),console.log(`Removed capability "${n}" (${t.publisher}/${t.package_}@${t.version}).`)}async function hr(){let n=Y(),e=Object.entries(n.capabilities);if(e.length===0){console.log("No capabilities installed."),console.log("Install one with: kanonak capability add {publisher}/{package}");return}console.log(`Installed capabilities:
+`);for(let[t,o]of e)console.log(`  ${t}  ${o.publisher}/${o.package_}@${o.version}`)}import{Command as de}from"commander";import{readFileSync as $a,writeFileSync as Sa,mkdirSync as va,existsSync as rt,statSync as Da}from"fs";import{join as Ka,resolve as Aa}from"path";import{KanonakParser as Qe,KanonakObjectParser as en,SubjectKanonak as Ca,Reasoner as Pa,KanonakVocabulary as Ea,makeUriKey as st,pickHighestDocument as nn,formatVersion as it}from"@kanonak-protocol/sdk";var kr="kanonak.org",yr="document-ast",S=n=>({publisher:kr,package_:yr,name:n}),j={Document:S("Document"),Block:S("Block"),Inline:S("Inline"),StructuredValue:S("StructuredValue"),Heading:S("Heading"),Paragraph:S("Paragraph"),RawBlock:S("RawBlock"),Text:S("Text"),StructuredMap:S("StructuredMap"),StructuredEntry:S("StructuredEntry"),StructuredList:S("StructuredList"),StringScalar:S("StringScalar"),IntegerScalar:S("IntegerScalar"),EscapeHint:S("EscapeHint"),MediaType:S("MediaType"),metadata:S("metadata"),children:S("children"),level:S("level"),inlines:S("inlines"),text:S("text"),entries:S("entries"),key:S("key"),value:S("value"),escapeHint:S("escapeHint"),items:S("items"),stringValue:S("stringValue"),integerValue:S("integerValue"),rawContent:S("rawContent"),mediaType:S("mediaType"),mimeType:S("mimeType"),ESC_RAW:S("esc-raw"),ESC_YAML_SAFE:S("esc-yaml-safe"),ESC_TOML_STRING:S("esc-toml-string"),ESC_TOML_MULTILINE:S("esc-toml-multiline"),ESC_JSON:S("esc-json"),TEXT_PLAIN:S("text-plain"),TEXT_MARKDOWN:S("text-markdown"),TEXT_HTML:S("text-html"),APPLICATION_JSON:S("application-json"),TEXT_YAML:S("text-yaml"),IMAGE_SVG_XML:S("image-svg-xml")},br="kanonak.org",wr="transformations",p=n=>({publisher:br,package_:wr,name:n}),y={Transformation:p("Transformation"),InputPattern:p("InputPattern"),Expression:p("Expression"),ExpressionKind:p("ExpressionKind"),ExpressionFragment:p("ExpressionFragment"),AstFieldBinding:p("AstFieldBinding"),OutputFormat:p("OutputFormat"),FormatOverride:p("FormatOverride"),RenameEntry:p("RenameEntry"),Artifact:p("Artifact"),NormalizeKind:p("NormalizeKind"),inputPattern:p("inputPattern"),rule:p("rule"),artifactName:p("artifactName"),outputs:p("outputs"),formatOverrides:p("formatOverrides"),matchesClass:p("matchesClass"),requires:p("requires"),kind:p("kind"),astClass:p("astClass"),set:p("set"),iterate:p("iterate"),loopVar:p("loopVar"),emit:p("emit"),condition:p("condition"),thenBuild:p("thenBuild"),elseBuild:p("elseBuild"),parts:p("parts"),stringLiteral:p("stringLiteral"),integerLiteral:p("integerLiteral"),booleanLiteral:p("booleanLiteral"),varName:p("varName"),readSource:p("readSource"),readProp:p("readProp"),traverseSource:p("traverseSource"),through:p("through"),step:p("step"),primary:p("primary"),alternate:p("alternate"),uriNameOf:p("uriNameOf"),listMapSource:p("listMapSource"),mapBody:p("mapBody"),separator:p("separator"),items:p("items"),normSource:p("normSource"),normKind:p("normKind"),checkExpr:p("checkExpr"),refTo:p("refTo"),fragmentRef:p("fragmentRef"),expr:p("expr"),labelTarget:p("labelTarget"),labelSource:p("labelSource"),resolveSource:p("resolveSource"),field:p("field"),bindValue:p("bindValue"),backendUri:p("backendUri"),formatTarget:p("formatTarget"),metadataKeys:p("metadataKeys"),metadataRenames:p("metadataRenames"),trailingNewline:p("trailingNewline"),fromKey:p("fromKey"),toKey:p("toKey"),KIND_BUILD_AST_NODE:p("build-ast-node"),KIND_FOR_EACH:p("for-each"),KIND_WHEN:p("when"),KIND_CONCAT:p("concat"),KIND_STRING_LITERAL:p("string-literal"),KIND_INTEGER_LITERAL:p("integer-literal"),KIND_BOOLEAN_LITERAL:p("boolean-literal"),KIND_VAR_REF:p("var-ref"),KIND_PROPERTY_READ:p("property-read"),KIND_TRAVERSE:p("traverse"),KIND_FALLBACK:p("fallback"),KIND_URI_NAME:p("uri-name"),KIND_LIST_MAP:p("list-map"),KIND_JOIN:p("join"),KIND_NORMALIZE:p("normalize"),KIND_IS_SET:p("is-set"),KIND_URI_LITERAL:p("uri-literal"),KIND_CALL_FRAGMENT:p("call-fragment"),KIND_DISPLAY_LABEL:p("display-label"),KIND_RESOLVE_REF:p("resolve-ref"),NORM_TRIM_END:p("trim-end"),FMT_MARKDOWN_FRONTMATTER:p("markdown-with-frontmatter"),FMT_TOML:p("toml"),FMT_JSON:p("json"),FMT_PLAIN_MARKDOWN:p("plain-markdown")};import{SubjectKanonak as On}from"@kanonak-protocol/sdk";var ke=class{constructor(e,t,o){this.repository=e;this.parser=t;this.objectParser=o}repository;parser;objectParser;cache=new Map;async resolveSubject(e,t){let o=ge(t,e);if(o)return o;let r=`${e.publisher}/${e.package_}`,a=this.cache.get(r);if(!a){let s=await this.repository.getDocumentsByNamespaceAsync(e.publisher,e.package_);if(s.length===0)return;let c=s[0],i=new A(c,this.repository);a=await this.objectParser.parseKanonaks(i),this.cache.set(r,a)}for(let s of a)if(s instanceof On&&s.name===e.name&&s.namespace&&s.namespace.startsWith(`${e.publisher}/${e.package_}@`))return s;for(let s of a)if(s instanceof On&&s.name===e.name)return s}};import{DefinedKanonak as Ln,LiteralKanonak as $r,ReferenceKanonak as ye,StringStatement as Sr,NumberStatement as vr,BooleanStatement as Dr,ReferenceStatement as Kr,EmbeddedStatement as Ar,ListStatement as Cr}from"@kanonak-protocol/sdk";var be=class extends Error{constructor(e){super(e)}},we=class{constructor(e,t){this.resolver=e;this.allKanonaks=t}resolver;allKanonaks;async evaluate(e,t){switch(e.kind){case"var-ref":{if(!t.has(e.varName))throw new be(`Unbound variable "${e.varName}"`);return t.get(e.varName)}case"string-literal":return e.value;case"integer-literal":return e.value;case"boolean-literal":return e.value;case"uri-literal":return{...e.refTo};case"property-read":{let o=await this.evaluate(e.source,t);return o instanceof Ln?Ge(o,e.readProp):void 0}case"traverse":{let o=await this.evaluate(e.source,t);if(!(o instanceof Ln))return;let r=Ge(o,e.through),a;if(r instanceof ye?a=r.subject:Array.isArray(r)&&r.length>0&&r[0]instanceof ye&&(a=r[0].subject),!a)return;let s=await this.resolver.resolveSubject(a,this.allKanonaks);if(!s)return;let c=new Map(t);return c.set("input",s),this.evaluate(e.step,c)}case"fallback":{let o=await this.evaluate(e.primary,t);return Mn(o)?o:this.evaluate(e.alternate,t)}case"uri-name":{let o=await this.evaluate(e.of,t);return o instanceof ye?o.subject.name:Bn(o)?o.name:void 0}case"list-map":{let o=await this.evaluate(e.source,t),r=We(o),a=[];for(let s of r){let c=new Map(t);c.set(e.loopVar,s),a.push(await this.evaluate(e.mapBody,c))}return a}case"join":{let o=await this.evaluate(e.items,t),r=We(o),a=[];for(let s of r)s!=null&&a.push(String(s));return a.join(e.separator)}case"normalize":{let o=await this.evaluate(e.source,t);return typeof o!="string"?o:e.normKind==="trim-end"?o.trimEnd():o}case"is-set":{let o=await this.evaluate(e.check,t);return Mn(o)}case"when":{let o=await this.evaluate(e.condition,t);return Ir(o)?this.evaluate(e.thenBuild,t):e.elseBuild?this.evaluate(e.elseBuild,t):void 0}case"concat":{let o=[];for(let r of e.parts){let a=await this.evaluate(r,t);if(a!=null)if(Array.isArray(a))for(let s of a)o.push(s);else o.push(a)}return o}case"for-each":{let o=await this.evaluate(e.iterate,t),r=We(o),a=[];for(let s of r){let c=new Map(t);c.set(e.loopVar,s);let i=await this.evaluate(e.emit,c);if(i!=null)if(Array.isArray(i))for(let l of i)a.push(l);else a.push(i)}return a}case"build-ast-node":return this.buildAstNode(e,t);case"resolve-ref":{let o=await this.evaluate(e.source,t),r;return o instanceof ye?r=o.subject:Bn(o)&&(r=o),r?this.resolver.resolveSubject(r,this.allKanonaks):void 0}case"display-label":{let o={publisher:e.labelTarget.publisher,package_:e.labelTarget.package_,name:e.labelTarget.name},r=await this.resolver.resolveSubject(o,this.allKanonaks);if(r){let a=Ge(r,e.labelSource);if(typeof a=="string"&&a.length>0)return a}return e.labelTarget.name}default:{let o=e;throw new be(`Unhandled expression kind: ${JSON.stringify(o)}`)}}}async buildAstNode(e,t){let o={kind:e.astClass.name};for(let r of e.set){let a=await this.evaluate(r.value,t);if(a==null||Array.isArray(a)&&a.length===0)continue;let s=r.field.name;Array.isArray(a)&&Pr.has(s)&&a.every(c=>Er(c))&&(a=a.map(c=>String(c)).join("")),o[s]=a}return o}},Pr=new Set(["stringValue","text","rawContent","key"]);function Er(n){return typeof n=="string"||typeof n=="number"||typeof n=="boolean"}function Ge(n,e){let t=[];for(let r of n.statement){let a=r.predicate;a?.subject&&F(a.subject,e)&&t.push(r)}if(t.length===0)return;if(t.length===1&&t[0]instanceof Cr)return _r(t[0].object);if(t.length===1)return Fn(t[0]);let o=[];for(let r of t){let a=Fn(r);a!==void 0&&o.push(a)}return o}function _r(n){let e=[];for(let t of n)t instanceof $r?e.push(t.value):e.push(t);return e}function Fn(n){if(n instanceof Sr||n instanceof vr||n instanceof Dr||n instanceof Kr||n instanceof Ar)return n.object}function Mn(n){return n==null?!1:typeof n=="string"||Array.isArray(n)?n.length>0:!0}function Ir(n){return n==null?!1:typeof n=="boolean"?n:typeof n=="string"?n.length>0:typeof n=="number"?n!==0:Array.isArray(n)?n.length>0:!0}function We(n){return n==null?[]:Array.isArray(n)?n:[n]}function Bn(n){return n!==null&&typeof n=="object"&&"publisher"in n&&"package_"in n&&"name"in n}import{EmbeddedKanonak as Rr,LiteralKanonak as Tr,ReferenceKanonak as Xe,SubjectKanonak as xr,ListStatement as Hn,StringStatement as jr,ReferenceStatement as Je}from"@kanonak-protocol/sdk";var K=class extends Error{constructor(t,o){super(`${t} (at ${o})`);this.path=o}path},Vn=16;function Ur(n){return n.predicate?.subject}function zn(n,e){let t=[];for(let o of n.statement){let r=Ur(o);r&&F(r,e)&&t.push(o)}return t}function U(n,e){let t=M(n,e);if(t)return t;let o=Z(n,e);if(o.length===1&&o[0]instanceof Xe)return o[0].subject}function $e(n,e){let t=Z(n,e),o=[];for(let r of t)r instanceof Rr&&o.push(r);return o}function qn(n,e){let t=[];for(let o of zn(n,e))if(o instanceof jr)t.push(o.object);else if(o instanceof Hn)for(let r of o.object)typeof r=="string"?t.push(r):r instanceof Tr?typeof r.value=="string"&&t.push(r.value):r instanceof Xe&&t.push(r.subject.name);else o instanceof Je&&t.push(o.object.subject.name);return t}function Nr(n,e){let t=n.split("/");if(t.length<3)throw new K(`Invalid property URI "${n}" \u2014 expected publisher/package/name`,e);let[o,r,...a]=t;return{publisher:o,package_:r,name:a.join("/")}}function ee(n,e){let t=n.name,o=`transformation[${t}]`,r={catalog:e,depth:0},a=V(n,y.inputPattern);if(!a)throw new K("Transformation has no inputPattern",o);let s=Or(a,r,`${o}.inputPattern`),c=V(n,y.rule);if(!c)throw new K("Transformation has no rule",o);let i=Q(c,r,`${o}.rule`),l=V(n,y.artifactName);if(!l)throw new K("Transformation has no artifactName",o);let u=Q(l,r,`${o}.artifactName`),d=new Set;for(let k of zn(n,y.outputs))if(k instanceof Je)d.add(k.object.subject.name);else if(k instanceof Hn)for(let b of k.object)b instanceof Xe&&d.add(b.subject.name);if(d.size===0)throw new K("Transformation has no outputs",o);let m=new Map;for(let k of $e(n,y.formatOverrides)){let b=`${o}.formatOverrides[]`,f=U(k,y.formatTarget);if(!f)throw new K("FormatOverride missing formatTarget",b);m.set(f.name,Lr(k,b))}return{name:t,inputPattern:s,rule:i,artifactName:u,outputs:d,overrides:m}}function Or(n,e,t){let o=U(n,y.matchesClass);if(!o)throw new K("InputPattern has no matchesClass",t);let r={publisher:o.publisher,package_:o.package_,name:o.name},s=qn(n,y.requires).map((c,i)=>Nr(c,`${t}.requires[${i}]`));return{matchesClass:r,requires:s}}function Lr(n,e){let t=qn(n,y.metadataKeys),o=t.length>0?t:void 0,r=new Map;for(let c of $e(n,y.metadataRenames)){let i=P(c,y.fromKey),l=P(c,y.toKey);i&&l&&r.set(i,l)}let a=ce(n,y.trailingNewline);return{metadataKeys:o,metadataRenames:r,trailingNewline:typeof a=="boolean"?a:void 0}}function Q(n,e,t){let o=U(n,y.kind);if(!o)throw new K("Expression has no kind",t);let r=o.name;switch(r){case"build-ast-node":return Br(n,e,t);case"for-each":return Vr(n,e,t);case"when":return Hr(n,e,t);case"concat":return zr(n,e,t);case"string-literal":return{kind:"string-literal",value:le(n,y.stringLiteral,t)};case"integer-literal":return{kind:"integer-literal",value:Yr(n,y.integerLiteral,t)};case"boolean-literal":return{kind:"boolean-literal",value:Zr(n,y.booleanLiteral,t)};case"var-ref":return{kind:"var-ref",varName:le(n,y.varName,t)};case"property-read":return qr(n,e,t);case"traverse":return Gr(n,e,t);case"fallback":return Wr(n,e,t);case"uri-name":return{kind:"uri-name",of:I(n,y.uriNameOf,e,`${t}.uriNameOf`)};case"list-map":return Xr(n,e,t);case"join":return{kind:"join",separator:le(n,y.separator,t),items:I(n,y.items,e,`${t}.items`)};case"normalize":return Jr(n,e,t);case"is-set":return{kind:"is-set",check:I(n,y.checkExpr,e,`${t}.checkExpr`)};case"uri-literal":{let a=U(n,y.refTo);if(!a)throw new K("uri-literal has no refTo",t);return{kind:"uri-literal",refTo:{publisher:a.publisher,package_:a.package_,name:a.name}}}case"display-label":{let a=U(n,y.labelTarget);if(!a)throw new K("display-label has no labelTarget",t);let s=U(n,y.labelSource);if(!s)throw new K("display-label has no labelSource",t);return{kind:"display-label",labelTarget:{publisher:a.publisher,package_:a.package_,name:a.name},labelSource:{publisher:s.publisher,package_:s.package_,name:s.name}}}case"resolve-ref":return{kind:"resolve-ref",source:I(n,y.resolveSource,e,`${t}.resolveSource`)};case"call-fragment":{if(e.depth>=Vn)throw new K(`call-fragment recursion exceeded ${Vn} levels (cycle?)`,t);let a=U(n,y.fragmentRef);if(!a)throw new K("call-fragment has no fragmentRef",t);let s=Fr(e.catalog,a);if(!s)throw new K(`call-fragment: no ExpressionFragment found matching ${a.publisher}/${a.package_}/${a.name} \u2014 either the fragment is missing or its package is not in the compilation catalog`,t);let c=V(s,y.expr);if(!c)throw new K(`ExpressionFragment "${s.name}" has no expr`,t);let i={catalog:e.catalog,depth:e.depth+1};return Q(c,i,`${t}\u2192fragment[${s.name}]`)}default:throw new K(`Unknown ExpressionKind "${r}"`,t)}}function Fr(n,e){for(let t of n)if(t instanceof xr&&t.name===e.name&&t.namespace&&t.namespace.startsWith(`${e.publisher}/${e.package_}@`)&&Mr(t))return t}function Mr(n){for(let e of n.statement){let t=e.predicate;if(!(!t||t.subject?.name!=="type")&&e instanceof Je){let o=e.object.subject;if(o.publisher===y.ExpressionFragment.publisher&&o.package_===y.ExpressionFragment.package_&&o.name===y.ExpressionFragment.name)return!0}}return!1}function Br(n,e,t){let o=U(n,y.astClass);if(!o)throw new K("build-ast-node has no astClass",t);let r={publisher:o.publisher,package_:o.package_,name:o.name},a=[];return $e(n,y.set).forEach((c,i)=>{let l=`${t}.set[${i}]`,u=U(c,y.field);if(!u)throw new K("AstFieldBinding has no field",l);let d=I(c,y.bindValue,e,`${l}.bindValue`);a.push({field:{publisher:u.publisher,package_:u.package_,name:u.name},value:d})}),{kind:"build-ast-node",astClass:r,set:a}}function Vr(n,e,t){return{kind:"for-each",iterate:I(n,y.iterate,e,`${t}.iterate`),loopVar:le(n,y.loopVar,t),emit:I(n,y.emit,e,`${t}.emit`)}}function Hr(n,e,t){let o=V(n,y.elseBuild);return{kind:"when",condition:I(n,y.condition,e,`${t}.condition`),thenBuild:I(n,y.thenBuild,e,`${t}.thenBuild`),elseBuild:o?Q(o,e,`${t}.elseBuild`):void 0}}function zr(n,e,t){return{kind:"concat",parts:$e(n,y.parts).map((r,a)=>Q(r,e,`${t}.parts[${a}]`))}}function qr(n,e,t){let o=U(n,y.readProp);if(!o)throw new K("property-read has no readProp",t);return{kind:"property-read",source:I(n,y.readSource,e,`${t}.readSource`),readProp:{publisher:o.publisher,package_:o.package_,name:o.name}}}function Gr(n,e,t){let o=U(n,y.through);if(!o)throw new K("traverse has no through",t);return{kind:"traverse",source:I(n,y.traverseSource,e,`${t}.traverseSource`),through:{publisher:o.publisher,package_:o.package_,name:o.name},step:I(n,y.step,e,`${t}.step`)}}function Wr(n,e,t){return{kind:"fallback",primary:I(n,y.primary,e,`${t}.primary`),alternate:I(n,y.alternate,e,`${t}.alternate`)}}function Xr(n,e,t){return{kind:"list-map",source:I(n,y.listMapSource,e,`${t}.listMapSource`),loopVar:le(n,y.loopVar,t),mapBody:I(n,y.mapBody,e,`${t}.mapBody`)}}function Jr(n,e,t){let o=U(n,y.normKind);if(!o)throw new K("normalize has no normKind",t);let r=o.name;if(r!=="trim-end")throw new K(`Unknown NormalizeKind "${r}"`,t);return{kind:"normalize",source:I(n,y.normSource,e,`${t}.normSource`),normKind:r}}function I(n,e,t,o){let r=V(n,e);if(!r){let a=`${e.publisher}/${e.package_}/${e.name}`,s=n.statement.length,c=n.statement.some(u=>{let d=u.predicate?.subject;return d&&d.publisher==="kanonak.org"&&d.package_==="transformations"&&d.name==="kind"}),i=`${e.publisher}/${e.package_}`,l;throw s===0?l=" (parent Expression has no statements at all \u2014 the parser produced an empty node, which usually means the containing YAML block did not resolve to an Expression-typed embedded)":c&&s<3?l=` \u2014 expected property ${a} but the parent Expression only has ${s} statement(s) including its 'kind'. The most likely cause is a STALE local copy of the Kanonak package ${i} that declares the expression kind but not the '${e.name}' property. Refresh your workspace copy of ${i} and re-resolve imports so the runner picks up the current property definitions.`:l=` \u2014 expected property ${a}. Parent Expression has ${s} statement(s) but none match that predicate URI. Either the YAML is missing the '${e.name}' key for this expression kind, or your local copy of the Kanonak package ${i} is out of date.`,new K(`missing child expression${l}`,o)}return Q(r,t,o)}function le(n,e,t){let o=P(n,e);if(typeof o!="string")throw new K(`missing required string property "${e.name}"`,t);return o}function Yr(n,e,t){let o=ce(n,e);if(typeof o!="number")throw new K(`missing required integer property "${e.name}"`,t);return o}function Zr(n,e,t){let o=ce(n,e);if(typeof o!="boolean")throw new K(`missing required boolean property "${e.name}"`,t);return o}function Gn(n,e){return n.publisher===e.publisher&&n.package_===e.package_&&n.name===e.name}var Se=class{backendUri="kanonak.org/transformations/markdown-with-frontmatter";render(e,t){let o=Qr(e.metadata,t),r=ta(e.children),s=["---",...o,"---","",r].join(`
 `);return t?.trailingNewline&&(s.endsWith(`
 `)||(s+=`
-`)),s}};function ea(n,e){if(!n)return[];let t=new Map;for(let a of n.entries)t.set(a.key,a);let o=e?.metadataKeys??n.entries.map(a=>a.key),r=[];for(let a of o){let s=t.get(a);if(!s)continue;let c=e?.metadataRenames.get(a)??a,i=Zn(s.value,s.escapeHint);i!==void 0&&r.push(`${c}: ${i}`)}return r}function Zn(n,e){switch(n.kind){case"StringScalar":return na(n.stringValue,e);case"IntegerScalar":return String(n.integerValue);case"StructuredList":{let t=[];for(let o of n.items){let r=Zn(o,e);r!==void 0&&t.push(r)}return t.join(", ")}case"StructuredMap":return;default:return}}function na(n,e){return!e||Jn(e,x.ESC_RAW)?n:Jn(e,x.ESC_YAML_SAFE)?ta(n):n}function ta(n){return n.includes(`
+`)),s}};function Qr(n,e){if(!n)return[];let t=new Map;for(let a of n.entries)t.set(a.key,a);let o=e?.metadataKeys??n.entries.map(a=>a.key),r=[];for(let a of o){let s=t.get(a);if(!s)continue;let c=e?.metadataRenames.get(a)??a,i=Xn(s.value,s.escapeHint);i!==void 0&&r.push(`${c}: ${i}`)}return r}function Xn(n,e){switch(n.kind){case"StringScalar":return ea(n.stringValue,e);case"IntegerScalar":return String(n.integerValue);case"StructuredList":{let t=[];for(let o of n.items){let r=Xn(o,e);r!==void 0&&t.push(r)}return t.join(", ")}case"StructuredMap":return;default:return}}function ea(n,e){return!e||Gn(e,j.ESC_RAW)?n:Gn(e,j.ESC_YAML_SAFE)?na(n):n}function na(n){return n.includes(`
 `)?`|-
   ${n.replace(/\n/g,`
-  `).trimEnd()}`:/[:#\[\]{}&*!|>'"%@`,]/.test(n)?`"${n.replace(/\\/g,"\\\\").replace(/"/g,'\\"')}"`:n}function oa(n){let e=[];for(let t of n){let o=ra(t);o&&e.push(o)}return e.join(`
+  `).trimEnd()}`:/[:#\[\]{}&*!|>'"%@`,]/.test(n)?`"${n.replace(/\\/g,"\\\\").replace(/"/g,'\\"')}"`:n}function ta(n){let e=[];for(let t of n){let o=oa(t);o&&e.push(o)}return e.join(`
 
-`)}function ra(n){switch(n.kind){case"Heading":return`${"#".repeat(n.level)} ${Yn(n.inlines)}`;case"Paragraph":return Yn(n.inlines);case"RawBlock":return n.rawContent;default:return""}}function Yn(n){let e=[];for(let t of n)t.kind==="Text"&&e.push(t.text);return e.join("")}function aa(n,e){return n.publisher===e.publisher&&n.package_===e.package_&&n.name===e.name}var Ae=class{backendUri="kanonak.org/transformations/toml";render(e,t){let r=sa(e.metadata,t).join(`
+`)}function oa(n){switch(n.kind){case"Heading":return`${"#".repeat(n.level)} ${Wn(n.inlines)}`;case"Paragraph":return Wn(n.inlines);case"RawBlock":return n.rawContent;default:return""}}function Wn(n){let e=[];for(let t of n)t.kind==="Text"&&e.push(t.text);return e.join("")}function ra(n,e){return n.publisher===e.publisher&&n.package_===e.package_&&n.name===e.name}var ve=class{backendUri="kanonak.org/transformations/toml";render(e,t){let r=aa(e.metadata,t).join(`
 `);return t?.trailingNewline&&(r.endsWith(`
 `)||(r+=`
-`)),r}};function sa(n,e){if(!n)return[];let t=new Map;for(let a of n.entries)t.set(a.key,a);let o=e?.metadataKeys??n.entries.map(a=>a.key),r=[];for(let a of o){let s=t.get(a);if(!s)continue;let c=e?.metadataRenames.get(a)??a,i=Qn(s.value,s.escapeHint);i!==void 0&&r.push(`${c} = ${i}`)}return r}function Qn(n,e){switch(n.kind){case"StringScalar":return ia(n.stringValue,e);case"IntegerScalar":return String(n.integerValue);case"StructuredList":{let t=[];for(let o of n.items){let r=Qn(o,e);r!==void 0&&t.push(r)}return`[${t.join(", ")}]`}case"StructuredMap":return;default:return}}function ia(n,e){return e&&aa(e,x.ESC_TOML_MULTILINE)?la(n):ca(n)}function ca(n){return`"${n.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\n/g,"\\n")}"`}function la(n){return`"""
+`)),r}};function aa(n,e){if(!n)return[];let t=new Map;for(let a of n.entries)t.set(a.key,a);let o=e?.metadataKeys??n.entries.map(a=>a.key),r=[];for(let a of o){let s=t.get(a);if(!s)continue;let c=e?.metadataRenames.get(a)??a,i=Jn(s.value,s.escapeHint);i!==void 0&&r.push(`${c} = ${i}`)}return r}function Jn(n,e){switch(n.kind){case"StringScalar":return sa(n.stringValue,e);case"IntegerScalar":return String(n.integerValue);case"StructuredList":{let t=[];for(let o of n.items){let r=Jn(o,e);r!==void 0&&t.push(r)}return`[${t.join(", ")}]`}case"StructuredMap":return;default:return}}function sa(n,e){return e&&ra(e,j.ESC_TOML_MULTILINE)?ca(n):ia(n)}function ia(n){return`"${n.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\n/g,"\\n")}"`}function ca(n){return`"""
 ${n.replace(/"""/g,'\\"\\"\\"')}
-"""`}var Ke=class{backendUri="kanonak.org/transformations/json";render(e,t){let o=JSON.stringify(e,null,2);return t?.trailingNewline&&!o.endsWith(`
+"""`}var De=class{backendUri="kanonak.org/transformations/json";render(e,t){let o=JSON.stringify(e,null,2);return t?.trailingNewline&&!o.endsWith(`
 `)?o+`
-`:o}};function nt(n){let e=n.replace(/\r\n/g,`
+`:o}};function Zn(n){let e=n.replace(/\r\n/g,`
 `).split(`
-`),t=[],o=0;for(;o<e.length;){let r=e[o];if(r.trim()===""){o++;continue}let a=/^(\s*)```(\S*)\s*$/.exec(r);if(a){let i=a[2],l=[];for(o++;o<e.length&&!/^(\s*)```\s*$/.test(e[o]);)l.push(e[o]),o++;o++;let u=tt(l.join(`
-`)),d=i?` class="language-${ot(i)}"`:"";t.push(`<pre><code${d}>${u}</code></pre>`);continue}let s=/^(#{1,6})\s+(.*)$/.exec(r);if(s){let i=s[1].length,l=te(s[2].trim());t.push(`<h${i}>${l}</h${i}>`),o++;continue}if(r.includes("|")&&o+1<e.length&&et(e[o+1])){let i=Qe(r),l=ua(e[o+1]);o+=2;let u=[];for(;o<e.length&&e[o].trim()!==""&&e[o].includes("|");)u.push(Qe(e[o])),o++;t.push(da(i,l,u));continue}if(/^\s*[-*]\s+/.test(r)){let i=[];for(;o<e.length&&/^\s*[-*]\s+/.test(e[o]);){let l=[e[o].replace(/^\s*[-*]\s+/,"")];for(o++;o<e.length&&e[o].trim()!==""&&!/^\s*[-*]\s+/.test(e[o])&&!/^\s*\d+\.\s+/.test(e[o]);)l.push(e[o]),o++;o<e.length&&e[o].trim()===""&&o++,i.push(`<li>${te(l.join(" ").trim())}</li>`)}t.push(`<ul>
+`),t=[],o=0;for(;o<e.length;){let r=e[o];if(r.trim()===""){o++;continue}let a=/^(\s*)```(\S*)\s*$/.exec(r);if(a){let i=a[2],l=[];for(o++;o<e.length&&!/^(\s*)```\s*$/.test(e[o]);)l.push(e[o]),o++;o++;let u=Qn(l.join(`
+`)),d=i?` class="language-${et(i)}"`:"";t.push(`<pre><code${d}>${u}</code></pre>`);continue}let s=/^(#{1,6})\s+(.*)$/.exec(r);if(s){let i=s[1].length,l=ne(s[2].trim());t.push(`<h${i}>${l}</h${i}>`),o++;continue}if(r.includes("|")&&o+1<e.length&&Yn(e[o+1])){let i=Ye(r),l=la(e[o+1]);o+=2;let u=[];for(;o<e.length&&e[o].trim()!==""&&e[o].includes("|");)u.push(Ye(e[o])),o++;t.push(ua(i,l,u));continue}if(/^\s*[-*]\s+/.test(r)){let i=[];for(;o<e.length&&/^\s*[-*]\s+/.test(e[o]);){let l=[e[o].replace(/^\s*[-*]\s+/,"")];for(o++;o<e.length&&e[o].trim()!==""&&!/^\s*[-*]\s+/.test(e[o])&&!/^\s*\d+\.\s+/.test(e[o]);)l.push(e[o]),o++;o<e.length&&e[o].trim()===""&&o++,i.push(`<li>${ne(l.join(" ").trim())}</li>`)}t.push(`<ul>
 ${i.join(`
 `)}
-</ul>`);continue}if(/^\s*\d+\.\s+/.test(r)){let i=[];for(;o<e.length&&/^\s*\d+\.\s+/.test(e[o]);){let l=[e[o].replace(/^\s*\d+\.\s+/,"")];for(o++;o<e.length&&e[o].trim()!==""&&!/^\s*\d+\.\s+/.test(e[o])&&!/^\s*[-*]\s+/.test(e[o]);)l.push(e[o]),o++;o<e.length&&e[o].trim()===""&&o++,i.push(`<li>${te(l.join(" ").trim())}</li>`)}t.push(`<ol>
+</ul>`);continue}if(/^\s*\d+\.\s+/.test(r)){let i=[];for(;o<e.length&&/^\s*\d+\.\s+/.test(e[o]);){let l=[e[o].replace(/^\s*\d+\.\s+/,"")];for(o++;o<e.length&&e[o].trim()!==""&&!/^\s*\d+\.\s+/.test(e[o])&&!/^\s*[-*]\s+/.test(e[o]);)l.push(e[o]),o++;o<e.length&&e[o].trim()===""&&o++,i.push(`<li>${ne(l.join(" ").trim())}</li>`)}t.push(`<ol>
 ${i.join(`
 `)}
-</ol>`);continue}let c=[r];for(o++;o<e.length&&e[o].trim()!==""&&!/^(#{1,6})\s+/.test(e[o])&&!/^(\s*)```/.test(e[o])&&!/^\s*[-*]\s+/.test(e[o])&&!/^\s*\d+\.\s+/.test(e[o])&&!(e[o].includes("|")&&o+1<e.length&&et(e[o+1]));)c.push(e[o]),o++;t.push(`<p>${te(c.join(" "))}</p>`)}return t.join(`
-`)}function et(n){return n.includes("-")?/^[\s|:-]+$/.test(n):!1}function Qe(n){let e=n.trim();return e.startsWith("|")&&(e=e.slice(1)),e.endsWith("|")&&(e=e.slice(0,-1)),e.split("|").map(t=>t.trim())}function ua(n){return Qe(n).map(e=>{let t=e.startsWith(":"),o=e.endsWith(":");return t&&o?"center":o?"right":t?"left":null})}function da(n,e,t){let o=s=>{let c=e[s];return c?` style="text-align:${c}"`:""},r=n.map((s,c)=>`<th${o(c)}>${te(s)}</th>`).join(""),a=t.map(s=>`<tr>${s.map((i,l)=>`<td${o(l)}>${te(i)}</td>`).join("")}</tr>`).join(`
+</ol>`);continue}let c=[r];for(o++;o<e.length&&e[o].trim()!==""&&!/^(#{1,6})\s+/.test(e[o])&&!/^(\s*)```/.test(e[o])&&!/^\s*[-*]\s+/.test(e[o])&&!/^\s*\d+\.\s+/.test(e[o])&&!(e[o].includes("|")&&o+1<e.length&&Yn(e[o+1]));)c.push(e[o]),o++;t.push(`<p>${ne(c.join(" "))}</p>`)}return t.join(`
+`)}function Yn(n){return n.includes("-")?/^[\s|:-]+$/.test(n):!1}function Ye(n){let e=n.trim();return e.startsWith("|")&&(e=e.slice(1)),e.endsWith("|")&&(e=e.slice(0,-1)),e.split("|").map(t=>t.trim())}function la(n){return Ye(n).map(e=>{let t=e.startsWith(":"),o=e.endsWith(":");return t&&o?"center":o?"right":t?"left":null})}function ua(n,e,t){let o=s=>{let c=e[s];return c?` style="text-align:${c}"`:""},r=n.map((s,c)=>`<th${o(c)}>${ne(s)}</th>`).join(""),a=t.map(s=>`<tr>${s.map((i,l)=>`<td${o(l)}>${ne(i)}</td>`).join("")}</tr>`).join(`
 `);return`<table>
 <thead><tr>${r}</tr></thead>
 <tbody>
 ${a}
 </tbody>
-</table>`}function te(n){let e=tt(n);return e=e.replace(/`([^`\n]+)`/g,(t,o)=>`<code>${o}</code>`),e=e.replace(/\[([^\]]+)\]\(([^)\s]+)\)/g,(t,o,r)=>`<a href="${ot(r)}">${o}</a>`),e=e.replace(/\*\*([^*\n]+)\*\*/g,(t,o)=>`<strong>${o}</strong>`),e=e.replace(/(^|[^*])\*([^*\n]+)\*(?!\*)/g,(t,o,r)=>`${o}<em>${r}</em>`),e=e.replace(/(^|[\s(])_([^_\n]+)_(?=[\s).,;:!?]|$)/g,(t,o,r)=>`${o}<em>${r}</em>`),e}function tt(n){return n.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&#39;")}function ot(n){return n.replace(/"/g,"&quot;").replace(/&/g,"&amp;")}function en(n,e){return n.publisher===e.publisher&&n.package_===e.package_&&n.name===e.name}var Ce=class{backendUri="kanonak.org/transformations/html";render(e,t){let o=ma(e.metadata)??"Untitled",r=pa(e.metadata,t),a=fa(e.children),s=`<!DOCTYPE html>
+</table>`}function ne(n){let e=Qn(n);return e=e.replace(/`([^`\n]+)`/g,(t,o)=>`<code>${o}</code>`),e=e.replace(/\[([^\]]+)\]\(([^)\s]+)\)/g,(t,o,r)=>`<a href="${et(r)}">${o}</a>`),e=e.replace(/\*\*([^*\n]+)\*\*/g,(t,o)=>`<strong>${o}</strong>`),e=e.replace(/(^|[^*])\*([^*\n]+)\*(?!\*)/g,(t,o,r)=>`${o}<em>${r}</em>`),e=e.replace(/(^|[\s(])_([^_\n]+)_(?=[\s).,;:!?]|$)/g,(t,o,r)=>`${o}<em>${r}</em>`),e}function Qn(n){return n.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&#39;")}function et(n){return n.replace(/"/g,"&quot;").replace(/&/g,"&amp;")}function Ze(n,e){return n.publisher===e.publisher&&n.package_===e.package_&&n.name===e.name}var Ke=class{backendUri="kanonak.org/transformations/html";render(e,t){let o=da(e.metadata)??"Untitled",r=ma(e.metadata,t),a=pa(e.children),s=`<!DOCTYPE html>
 <html lang="en">
 <head>
 <meta charset="utf-8">
-<title>${de(o)}</title>
+<title>${ue(o)}</title>
 <style>
 body { font-family: -apple-system, Segoe UI, Helvetica, Arial, sans-serif; max-width: 860px; margin: 2rem auto; padding: 0 1rem; color: #222; line-height: 1.55; }
 h1, h2, h3, h4 { line-height: 1.2; }
@@ -119,17 +118,17 @@ ${r}${a}
 </body>
 </html>
 `;return t?.trailingNewline===!1&&s.endsWith(`
-`)?s.slice(0,-1):s}};function ma(n){if(n){for(let e of n.entries)if((e.key==="title"||e.key==="name")&&e.value.kind==="StringScalar")return e.value.stringValue}}function pa(n,e){if(!n||n.entries.length===0)return"";let t=e?.metadataKeys??n.entries.map(a=>a.key),o=new Map(n.entries.map(a=>[a.key,a])),r=[];for(let a of t){let s=o.get(a);if(!s)continue;let c=e?.metadataRenames.get(a)??a,i=at(s.value);i!==void 0&&r.push(`  <dt>${de(c)}</dt>
+`)?s.slice(0,-1):s}};function da(n){if(n){for(let e of n.entries)if((e.key==="title"||e.key==="name")&&e.value.kind==="StringScalar")return e.value.stringValue}}function ma(n,e){if(!n||n.entries.length===0)return"";let t=e?.metadataKeys??n.entries.map(a=>a.key),o=new Map(n.entries.map(a=>[a.key,a])),r=[];for(let a of t){let s=o.get(a);if(!s)continue;let c=e?.metadataRenames.get(a)??a,i=tt(s.value);i!==void 0&&r.push(`  <dt>${ue(c)}</dt>
   <dd>${i}</dd>`)}return r.length===0?"":`<dl class="metadata">
 ${r.join(`
 `)}
 </dl>
-`}function at(n){switch(n.kind){case"StringScalar":return de(n.stringValue);case"IntegerScalar":return String(n.integerValue);case"StructuredList":{let e=[];for(let t of n.items){let o=at(t);o!==void 0&&e.push(`<code>${o}</code>`)}return e.join(", ")}case"StructuredMap":return;default:return}}function fa(n){let e=[];for(let t of n){let o=ga(t);o&&e.push(o)}return e.join(`
-`)}function ga(n){switch(n.kind){case"Heading":{let e=Math.max(1,Math.min(6,n.level));return`<h${e}>${rt(n.inlines)}</h${e}>`}case"Paragraph":return`<p>${rt(n.inlines)}</p>`;case"RawBlock":return ha(n);default:return""}}function ha(n){let e=n.mediaType;return e&&en(e,x.TEXT_MARKDOWN)?nt(n.rawContent):e&&en(e,x.TEXT_HTML)?n.rawContent:e&&en(e,x.IMAGE_SVG_XML)?`<figure class="svg-figure">
+`}function tt(n){switch(n.kind){case"StringScalar":return ue(n.stringValue);case"IntegerScalar":return String(n.integerValue);case"StructuredList":{let e=[];for(let t of n.items){let o=tt(t);o!==void 0&&e.push(`<code>${o}</code>`)}return e.join(", ")}case"StructuredMap":return;default:return}}function pa(n){let e=[];for(let t of n){let o=fa(t);o&&e.push(o)}return e.join(`
+`)}function fa(n){switch(n.kind){case"Heading":{let e=Math.max(1,Math.min(6,n.level));return`<h${e}>${nt(n.inlines)}</h${e}>`}case"Paragraph":return`<p>${nt(n.inlines)}</p>`;case"RawBlock":return ga(n);default:return""}}function ga(n){let e=n.mediaType;return e&&Ze(e,j.TEXT_MARKDOWN)?Zn(n.rawContent):e&&Ze(e,j.TEXT_HTML)?n.rawContent:e&&Ze(e,j.IMAGE_SVG_XML)?`<figure class="svg-figure">
 ${n.rawContent}
-</figure>`:`<pre${e?` class="media-${ka(e.name)}"`:""}><code>${de(n.rawContent)}</code></pre>`}function rt(n){let e=[];for(let t of n)t.kind==="Text"&&e.push(de(t.text));return e.join("")}function de(n){return n.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&#39;")}function ka(n){return n.replace(/"/g,"&quot;").replace(/&/g,"&amp;")}function ya(n,e){return n.publisher===e.publisher&&n.package_===e.package_&&n.name===e.name}var Pe=class{backendUri="kanonak.org/transformations/svg";render(e,t){for(let o of e.children)if(o.kind==="RawBlock"&&o.mediaType&&ya(o.mediaType,x.IMAGE_SVG_XML)){let r=o.rawContent;return t?.trailingNewline&&!r.endsWith(`
+</figure>`:`<pre${e?` class="media-${ha(e.name)}"`:""}><code>${ue(n.rawContent)}</code></pre>`}function nt(n){let e=[];for(let t of n)t.kind==="Text"&&e.push(ue(t.text));return e.join("")}function ue(n){return n.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&#39;")}function ha(n){return n.replace(/"/g,"&quot;").replace(/&/g,"&amp;")}function ka(n,e){return n.publisher===e.publisher&&n.package_===e.package_&&n.name===e.name}var Ae=class{backendUri="kanonak.org/transformations/svg";render(e,t){for(let o of e.children)if(o.kind==="RawBlock"&&o.mediaType&&ka(o.mediaType,j.IMAGE_SVG_XML)){let r=o.rawContent;return t?.trailingNewline&&!r.endsWith(`
 `)&&(r+=`
-`),r}return'<svg xmlns="http://www.w3.org/2000/svg" width="1" height="1"/>'}};var Ee={"markdown-with-frontmatter":{formatUri:"kanonak.org/transformations/markdown-with-frontmatter",extension:".md"},toml:{formatUri:"kanonak.org/transformations/toml",extension:".toml"},json:{formatUri:"kanonak.org/transformations/json",extension:".json"},"plain-markdown":{formatUri:"kanonak.org/transformations/plain-markdown",extension:".md"},html:{formatUri:"kanonak.org/transformations/html",extension:".html"},svg:{formatUri:"kanonak.org/transformations/svg",extension:".svg"}},oe=class extends Error{},V=class{backends=new Map;constructor(){this.register(new De),this.register(new Ae),this.register(new Ke),this.register(new Ce),this.register(new Pe)}register(e){this.backends.set(e.backendUri,e)}async run(e){let t=e.transformationKanonaks??e.allKanonaks,o=ne(e.transformation,t);if(!o.outputs.has(e.outputFormat))throw new oe(`Transformation "${o.name}" does not support output format "${e.outputFormat}". Declared outputs: ${Array.from(o.outputs).join(", ")}`);let r=new be(e.repository,e.parser,e.objectParser),a=new Se(r,e.allKanonaks),s=e.instances.filter(u=>ba(u,o)),c=this.findBackendForFormat(e.outputFormat);if(!c)throw new oe(`No backend registered for OutputFormat "${e.outputFormat}".`);let i=o.overrides.get(e.outputFormat),l=[];for(let u of s){let d=new Map;d.set("input",u);let p=await a.evaluate(o.rule,d);if(!$a(p))throw new oe(`Transformation "${o.name}" rule did not yield a Document for input "${u.name}". Got: ${st(p)}`);let y=await a.evaluate(o.artifactName,d);if(typeof y!="string")throw new oe(`Transformation "${o.name}" artifactName did not yield a string for input "${u.name}". Got: ${st(y)}`);let b=c.render(p,i);l.push({fileName:y,format:e.outputFormat,content:b,sourceName:u.name})}return l}findBackendForFormat(e){let t=Ee[e];if(t)return this.backends.get(t.formatUri)}};function ba(n,e){for(let t of e.inputPattern.requires)if(!wa(n,t))return!1;return!0}function wa(n,e){for(let t of n.statement){let o=t.predicate?.subject;if(o&&M(o,e)){let r=t.object;if(r==null||typeof r=="string"&&r.length===0||Array.isArray(r)&&r.length===0)continue;return!0}}return!1}function $a(n){return typeof n=="object"&&n!==null&&n.kind==="Document"&&Array.isArray(n.children)}function st(n){if(n===void 0)return"undefined";if(n===null)return"null";if(Array.isArray(n))return`array(${n.length})`;if(typeof n=="object"){let e=n.kind;return e?`object(kind=${e})`:"object"}return typeof n}function lt(){let n=new pe("transform").description("Run ontology-driven transformations against Kanonak packages. Transformations are declarative YAML rules (instances of `kanonak.org/transformations/Transformation`) that convert ontology instances into output files. The runner produces one or more Artifacts per matched input; format backends serialize them to Markdown, HTML, SVG, TOML, JSON, or (with post-processing) PDF.").addHelpText("after",`
+`),r}return'<svg xmlns="http://www.w3.org/2000/svg" width="1" height="1"/>'}};var Ce={"markdown-with-frontmatter":{formatUri:"kanonak.org/transformations/markdown-with-frontmatter",extension:".md"},toml:{formatUri:"kanonak.org/transformations/toml",extension:".toml"},json:{formatUri:"kanonak.org/transformations/json",extension:".json"},"plain-markdown":{formatUri:"kanonak.org/transformations/plain-markdown",extension:".md"},html:{formatUri:"kanonak.org/transformations/html",extension:".html"},svg:{formatUri:"kanonak.org/transformations/svg",extension:".svg"}},te=class extends Error{},B=class{backends=new Map;constructor(){this.register(new Se),this.register(new ve),this.register(new De),this.register(new Ke),this.register(new Ae)}register(e){this.backends.set(e.backendUri,e)}async run(e){let t=e.transformationKanonaks??e.allKanonaks,o=ee(e.transformation,t);if(!o.outputs.has(e.outputFormat))throw new te(`Transformation "${o.name}" does not support output format "${e.outputFormat}". Declared outputs: ${Array.from(o.outputs).join(", ")}`);let r=new ke(e.repository,e.parser,e.objectParser),a=new we(r,e.allKanonaks),s=e.instances.filter(u=>ya(u,o)),c=this.findBackendForFormat(e.outputFormat);if(!c)throw new te(`No backend registered for OutputFormat "${e.outputFormat}".`);let i=o.overrides.get(e.outputFormat),l=[];for(let u of s){let d=new Map;d.set("input",u);let m=await a.evaluate(o.rule,d);if(!wa(m))throw new te(`Transformation "${o.name}" rule did not yield a Document for input "${u.name}". Got: ${ot(m)}`);let k=await a.evaluate(o.artifactName,d);if(typeof k!="string")throw new te(`Transformation "${o.name}" artifactName did not yield a string for input "${u.name}". Got: ${ot(k)}`);let b=c.render(m,i);l.push({fileName:k,format:e.outputFormat,content:b,sourceName:u.name})}return l}findBackendForFormat(e){let t=Ce[e];if(t)return this.backends.get(t.formatUri)}};function ya(n,e){for(let t of e.inputPattern.requires)if(!ba(n,t))return!1;return!0}function ba(n,e){for(let t of n.statement){let o=t.predicate?.subject;if(o&&F(o,e)){let r=t.object;if(r==null||typeof r=="string"&&r.length===0||Array.isArray(r)&&r.length===0)continue;return!0}}return!1}function wa(n){return typeof n=="object"&&n!==null&&n.kind==="Document"&&Array.isArray(n.children)}function ot(n){if(n===void 0)return"undefined";if(n===null)return"null";if(Array.isArray(n))return`array(${n.length})`;if(typeof n=="object"){let e=n.kind;return e?`object(kind=${e})`:"object"}return typeof n}function ct(){let n=new de("transform").description("Run ontology-driven transformations against Kanonak packages. Transformations are declarative YAML rules (instances of `kanonak.org/transformations/Transformation`) that convert ontology instances into output files. The runner produces one or more Artifacts per matched input; format backends serialize them to Markdown, HTML, SVG, TOML, JSON, or (with post-processing) PDF.").addHelpText("after",`
 Examples:
 
   # List every Transformation available in the local workspace
@@ -158,14 +157,14 @@ Examples:
 
   # List the registered format backends
   $ kanonak transform formats
-`);return n.addCommand(Ia()),n.addCommand(ja()),n.addCommand(Ua()),n.addCommand(Oa()),n}function Ia(){return new pe("run").description("Run a transformation against an input scope and write the resulting Artifacts to disk.").argument("<transformation>","Transformation URI (`publisher/package/name`, optional `@version`) or just the local name if unique in the workspace.").requiredOption("--scope <scope>","Input source \u2014 either a package URI `publisher/package[@version]` (resolved via the local workspace + cache + HTTP tiers) or a file path to a `.kan.yml` document.").option("--format <name>","OutputFormat name to target (e.g. `markdown-with-frontmatter`, `html`, `svg`, `json`). If omitted and the transformation declares exactly one output, that single format is used.").option("--out <dir>","Directory to write artifacts into.",".").action(async(n,e)=>{try{await Ra(n,e)}catch(t){console.error(`Error: ${t.message}`),process.exit(1)}})}async function Ra(n,e){let t=new nn,o=new tn,r=await j(process.cwd(),t),a=await ut(n,r,o),{transformation:s,transformationKanonaks:c}=a;console.log(`Transformation: ${me(s)}`);let i=ne(s,c),l=await La(e.scope,r,t,o),u=await Va(l,i.inputPattern.matchesClass,r);console.log(`Scope: ${e.scope} \u2014 found ${u.length} instance(s) of ${i.inputPattern.matchesClass.publisher}/${i.inputPattern.matchesClass.package_}/${i.inputPattern.matchesClass.name}`),u.length===0&&(console.error("No matching input instances in scope. Check the transformation's inputPattern.matchesClass vs. the scope package."),process.exit(1));let d=Ta(i.outputs,e.format);console.log(`Output format: ${d}`);let p=Ee[d];if(!p)throw new Error(`Unknown format "${d}". Run \`kanonak transform formats\` to see what the runner supports.`);let b=await new V().run({transformation:s,instances:u,allKanonaks:l,transformationKanonaks:c,repository:r,parser:t,objectParser:o,outputFormat:d}),f=Ca(e.out);Da(f,{recursive:!0});for(let k of b){let h=Ba(k.fileName),$=Ka(f,`${h}${p.extension}`);va($,k.content,"utf-8"),console.log(`  wrote ${$}`)}console.log(`Done. ${b.length} artifact(s) written to ${f}`)}function Ta(n,e){if(e){if(!n.has(e))throw new Error(`Transformation does not declare --format "${e}" in its outputs. Declared outputs: ${Array.from(n).sort().join(", ")}`);return e}if(n.size===1)return Array.from(n)[0];throw new Error(`Transformation supports multiple output formats (${Array.from(n).sort().join(", ")}); pass --format <name> to select one.`)}function ja(){return new pe("list").description("Scan the local workspace + cache for every Transformation instance and print a one-line summary per hit.").action(async()=>{try{await xa()}catch(n){console.error(`Error: ${n.message}`),process.exit(1)}})}async function xa(){let n=new nn,e=new tn,t=await j(process.cwd(),n),o=await t.getAllDocumentsAsync(),r=[];for(let a of o)try{let s=new K(a,t),c=await e.parseKanonaks(s),i=C(c,g.Transformation);for(let l of i)r.push(Ma(l,c))}catch{}if(r.length===0){console.log("No Transformation instances found in the current workspace.");return}r.sort((a,s)=>a.uri.localeCompare(s.uri));for(let a of r)console.log(`${a.uri}`),console.log(`    matches: ${a.matchesClass}`),console.log(`    outputs: ${a.outputs.join(", ")}`)}function Ua(){return new pe("show").description("Compile a transformation and print a human-readable summary (input pattern, outputs, format overrides, rule shape).").argument("<transformation>","Transformation URI or local name").action(async n=>{try{await Na(n)}catch(e){console.error(`Error: ${e.message}`),process.exit(1)}})}async function Na(n){let e=new nn,t=new tn,o=await j(process.cwd(),e),{transformation:r,transformationKanonaks:a}=await ut(n,o,t),s=ne(r,a);if(console.log(`Transformation: ${me(r)}`),console.log(),console.log("Input pattern:"),console.log(`  Matches class: ${_e(s.inputPattern.matchesClass)}`),s.inputPattern.requires.length>0){console.log("  Required properties:");for(let c of s.inputPattern.requires)console.log(`    - ${_e(c)}`)}else console.log("  Required properties: (none)");if(console.log(),console.log(`Outputs: ${Array.from(s.outputs).sort().join(", ")}`),console.log(),s.overrides.size>0){console.log("Format overrides:");for(let[c,i]of s.overrides){if(console.log(`  ${c}:`),i.metadataKeys&&console.log(`    metadata keys: ${i.metadataKeys.join(", ")}`),i.metadataRenames.size>0){let l=[];for(let[u,d]of i.metadataRenames)l.push(`${u} \u2192 ${d}`);console.log(`    metadata renames: ${l.join(", ")}`)}i.trailingNewline!==void 0&&console.log(`    trailing newline: ${i.trailingNewline}`)}console.log()}console.log(`Rule root kind: ${s.rule.kind}`),s.rule.kind==="build-ast-node"&&(console.log(`Rule root AST class: ${_e(s.rule.astClass)}`),console.log(`Rule root bindings: ${s.rule.set.length} field(s)`)),console.log(`Artifact name root kind: ${s.artifactName.kind}`)}function Oa(){return new pe("formats").description("List the OutputFormat names the runner can serialize to.").action(()=>{console.log("Registered format backends:");let n=Object.entries(Ee).sort(([e],[t])=>e.localeCompare(t));for(let[e,t]of n)console.log(`  ${e.padEnd(28)} ${t.extension.padEnd(6)} ${t.formatUri}`)})}async function ut(n,e,t){let o,r,a;if(n.includes("/")){let i=n.indexOf("@"),l=n;if(i!==-1){let d=n.indexOf("/",i);if(d===-1)throw new Error(`Transformation URI "${n}" has @version but no trailing /<name>`);l=n.substring(0,i)+n.substring(d)}let u=l.split("/");if(u.length<3)throw new Error(`Invalid transformation URI "${n}" \u2014 expected publisher/package/name or publisher/package@version/name`);o=u[0],r=u[1],a=u.slice(2).join("/")}else a=n;if(o&&r){let i=await e.getDocumentsByNamespaceAsync(o,r);if(i.length===0)throw new Error(`Package ${o}/${r} not found in the local workspace or cache.`);let l=Fa(n),u=dt(i,l,`${o}/${r}`),d=new K(u,e),p=await t.parseKanonaks(d),y=ke(p,{publisher:o,package_:r,name:a,version:""});if(!y){let b=C(p,g.Transformation),f=b.find(k=>k.name===a);if(!f)throw new Error(`Transformation "${a}" not found in package ${o}/${r}. Package contains ${b.length} Transformation(s): ${b.map(k=>k.name).join(", ")||"(none)"}`);return{transformation:f,transformationKanonaks:p}}return{transformation:y,transformationKanonaks:p}}let s=await e.getAllDocumentsAsync(),c=[];for(let i of s)try{let l=new K(i,e),u=await t.parseKanonaks(l),d=C(u,g.Transformation);for(let p of d)p.name===a&&c.push({tx:p,kanonaks:u})}catch{}if(c.length===0)throw new Error(`No Transformation named "${a}" found in the workspace. Try \`kanonak transform list\` to see available transformations.`);if(c.length>1){let i=c.map(l=>me(l.tx)).join(`
+`);return n.addCommand(_a()),n.addCommand(Ta()),n.addCommand(ja()),n.addCommand(Na()),n}function _a(){return new de("run").description("Run a transformation against an input scope and write the resulting Artifacts to disk.").argument("<transformation>","Transformation URI (`publisher/package/name`, optional `@version`) or just the local name if unique in the workspace.").requiredOption("--scope <scope>","Input source \u2014 either a package URI `publisher/package[@version]` (resolved via the local workspace + cache + HTTP tiers) or a file path to a `.kan.yml` document.").option("--format <name>","OutputFormat name to target (e.g. `markdown-with-frontmatter`, `html`, `svg`, `json`). If omitted and the transformation declares exactly one output, that single format is used.").option("--out <dir>","Directory to write artifacts into.",".").action(async(n,e)=>{try{await Ia(n,e)}catch(t){console.error(`Error: ${t.message}`),process.exit(1)}})}async function Ia(n,e){let t=new Qe,o=new en,r=await x(process.cwd(),t),a=await lt(n,r,o),{transformation:s,transformationKanonaks:c}=a;console.log(`Transformation: ${Ee(s)}`);let i=ee(s,c),l=await Oa(e.scope,r,t,o),u=await Ma(l,i.inputPattern.matchesClass,r);console.log(`Scope: ${e.scope} \u2014 found ${u.length} instance(s) of ${i.inputPattern.matchesClass.publisher}/${i.inputPattern.matchesClass.package_}/${i.inputPattern.matchesClass.name}`),u.length===0&&(console.error("No matching input instances in scope. Check the transformation's inputPattern.matchesClass vs. the scope package."),process.exit(1));let d=Ra(i.outputs,e.format);console.log(`Output format: ${d}`);let m=Ce[d];if(!m)throw new Error(`Unknown format "${d}". Run \`kanonak transform formats\` to see what the runner supports.`);let b=await new B().run({transformation:s,instances:u,allKanonaks:l,transformationKanonaks:c,repository:r,parser:t,objectParser:o,outputFormat:d}),f=Aa(e.out);va(f,{recursive:!0});for(let h of b){let g=Fa(h.fileName),w=Ka(f,`${g}${m.extension}`);Sa(w,h.content,"utf-8"),console.log(`  wrote ${w}`)}console.log(`Done. ${b.length} artifact(s) written to ${f}`)}function Ra(n,e){if(e){if(!n.has(e))throw new Error(`Transformation does not declare --format "${e}" in its outputs. Declared outputs: ${Array.from(n).sort().join(", ")}`);return e}if(n.size===1)return Array.from(n)[0];throw new Error(`Transformation supports multiple output formats (${Array.from(n).sort().join(", ")}); pass --format <name> to select one.`)}function Ta(){return new de("list").description("Scan the local workspace + cache for every Transformation instance and print a one-line summary per hit.").action(async()=>{try{await xa()}catch(n){console.error(`Error: ${n.message}`),process.exit(1)}})}async function xa(){let n=new Qe,e=new en,t=await x(process.cwd(),n),o=await t.getAllDocumentsAsync(),r=new Map;for(let s of o)try{let c=new A(s,t),i=await e.parseKanonaks(c),l=C(i,y.Transformation);for(let u of l){let d=tn(u);if(!d)continue;let m=r.get(d)??[];m.push({tx:u,kanonaks:i,doc:s}),r.set(d,m)}}catch{}let a=[];for(let s of r.values()){if(s.length===1){a.push(at(s[0].tx,s[0].kanonaks));continue}let c=nn(s.map(l=>l.doc));if(!c.chosen)continue;let i=s.find(l=>l.doc===c.chosen);i&&a.push(at(i.tx,i.kanonaks))}if(a.length===0){console.log("No Transformation instances found in the current workspace.");return}a.sort((s,c)=>s.uri.localeCompare(c.uri));for(let s of a)console.log(`${s.uri}`),console.log(`    matches: ${s.matchesClass}`),console.log(`    outputs: ${s.outputs.join(", ")}`)}function ja(){return new de("show").description("Compile a transformation and print a human-readable summary (input pattern, outputs, format overrides, rule shape).").argument("<transformation>","Transformation URI or local name").action(async n=>{try{await Ua(n)}catch(e){console.error(`Error: ${e.message}`),process.exit(1)}})}async function Ua(n){let e=new Qe,t=new en,o=await x(process.cwd(),e),{transformation:r,transformationKanonaks:a}=await lt(n,o,t),s=ee(r,a);if(console.log(`Transformation: ${Ee(r)}`),console.log(),console.log("Input pattern:"),console.log(`  Matches class: ${Pe(s.inputPattern.matchesClass)}`),s.inputPattern.requires.length>0){console.log("  Required properties:");for(let c of s.inputPattern.requires)console.log(`    - ${Pe(c)}`)}else console.log("  Required properties: (none)");if(console.log(),console.log(`Outputs: ${Array.from(s.outputs).sort().join(", ")}`),console.log(),s.overrides.size>0){console.log("Format overrides:");for(let[c,i]of s.overrides){if(console.log(`  ${c}:`),i.metadataKeys&&console.log(`    metadata keys: ${i.metadataKeys.join(", ")}`),i.metadataRenames.size>0){let l=[];for(let[u,d]of i.metadataRenames)l.push(`${u} \u2192 ${d}`);console.log(`    metadata renames: ${l.join(", ")}`)}i.trailingNewline!==void 0&&console.log(`    trailing newline: ${i.trailingNewline}`)}console.log()}console.log(`Rule root kind: ${s.rule.kind}`),s.rule.kind==="build-ast-node"&&(console.log(`Rule root AST class: ${Pe(s.rule.astClass)}`),console.log(`Rule root bindings: ${s.rule.set.length} field(s)`)),console.log(`Artifact name root kind: ${s.artifactName.kind}`)}function Na(){return new de("formats").description("List the OutputFormat names the runner can serialize to.").action(()=>{console.log("Registered format backends:");let n=Object.entries(Ce).sort(([e],[t])=>e.localeCompare(t));for(let[e,t]of n)console.log(`  ${e.padEnd(28)} ${t.extension.padEnd(6)} ${t.formatUri}`)})}async function lt(n,e,t){let o,r,a;if(n.includes("/")){let m=n.indexOf("@"),k=n;if(m!==-1){let f=n.indexOf("/",m);if(f===-1)throw new Error(`Transformation URI "${n}" has @version but no trailing /<name>`);k=n.substring(0,m)+n.substring(f)}let b=k.split("/");if(b.length<3)throw new Error(`Invalid transformation URI "${n}" \u2014 expected publisher/package/name or publisher/package@version/name`);o=b[0],r=b[1],a=b.slice(2).join("/")}else a=n;if(o&&r){let m=await e.getDocumentsByNamespaceAsync(o,r);if(m.length===0)throw new Error(`Package ${o}/${r} not found in the local workspace or cache.`);let k=La(n),b=ut(m,k,`${o}/${r}`),f=new A(b,e),h=await t.parseKanonaks(f),g=ge(h,{publisher:o,package_:r,name:a,version:""});if(!g){let w=C(h,y.Transformation),$=w.find(v=>v.name===a);if(!$)throw new Error(`Transformation "${a}" not found in package ${o}/${r}. Package contains ${w.length} Transformation(s): ${w.map(v=>v.name).join(", ")||"(none)"}`);return{transformation:$,transformationKanonaks:h}}return{transformation:g,transformationKanonaks:h}}let s=await e.getAllDocumentsAsync(),c=new Map;for(let m of s)try{let k=new A(m,e),b=await t.parseKanonaks(k),f=C(b,y.Transformation);for(let h of f){if(h.name!==a)continue;let g=tn(h);if(!g)continue;let w=c.get(g)??[];w.push({tx:h,kanonaks:b,doc:m}),c.set(g,w)}}catch{}if(c.size===0)throw new Error(`No Transformation named "${a}" found in the workspace. Try \`kanonak transform list\` to see available transformations.`);if(c.size>1){let m=Array.from(c.keys()).sort().join(`
   `);throw new Error(`Multiple Transformations named "${a}" in the workspace \u2014 disambiguate with a full publisher/package/name URI:
-  ${i}`)}return{transformation:c[0].tx,transformationKanonaks:c[0].kanonaks}}async function La(n,e,t,o){if(/^[.\/\\]/.test(n)||/^[A-Za-z]:/.test(n)||n.endsWith(".kan.yml")||it(n)&&Aa(n).isFile()){if(!it(n))throw new Error(`Scope file not found: ${n}`);let b=Sa(n,"utf-8"),f=t.parse(b),k=new K(f,e);return o.parseKanonaks(k)}let a=n.indexOf("@"),s=a===-1?n:n.substring(0,a),c=a===-1?void 0:n.substring(a+1),i=s.indexOf("/");if(i===-1)throw new Error(`Invalid scope "${n}" \u2014 expected a file path or publisher/package[@version] URI`);let l=s.substring(0,i),u=s.substring(i+1),d=await e.getDocumentsByNamespaceAsync(l,u);if(d.length===0)throw new Error(`Scope package ${l}/${u} not found in the local workspace or cache.`);let p=dt(d,c,`${l}/${u}`),y=new K(p,e);return o.parseKanonaks(y)}function Fa(n){let e=n.indexOf("@");if(e===-1)return;let t=n.substring(e+1),o=t.indexOf("/");return o===-1?t:t.substring(0,o)}function dt(n,e,t){function o(s){let c=s.metadata.namespace_?.version;return c?`${c.major}.${c.minor}.${c.patch}`:""}if(e){let s=n.find(i=>o(i)===e);if(s)return s;let c=n.map(o).filter(Boolean).sort().join(", ");throw new Error(`${t}@${e} not found in the local workspace or cache. Available versions: ${c||"(none with parseable namespace)"}`)}if(n.length===1)return n[0];let a=[...n].sort((s,c)=>{let i=s.metadata.namespace_?.version,l=c.metadata.namespace_?.version;return!i||!l?0:i.major!==l.major?l.major-i.major:i.minor!==l.minor?l.minor-i.minor:l.patch-i.patch})[0];return console.warn(`Warning: ${t} has ${n.length} versions present (${n.map(o).filter(Boolean).join(", ")}); using @${o(a)}. Pin with ${t}@<version> to suppress this warning.`),a}function Ma(n,e){try{let t=ne(n,e);return{uri:me(n),matchesClass:_e(t.inputPattern.matchesClass),outputs:Array.from(t.outputs).sort()}}catch(t){return{uri:me(n),matchesClass:`(compile error: ${t.message})`,outputs:[]}}}function me(n){let e=n.namespace||"",t=e.indexOf("@");return`${t===-1?e:e.substring(0,t)}/${n.name}`}function _e(n){return`${n.publisher}/${n.package_}/${n.name}`}function Ba(n){return n.replace(/[\\/:*?"<>|\s]+/g,"_").replace(/^_+|_+$/g,"")}async function Va(n,e,t){let o=new Map;for(let s of n){if(!(s instanceof Pa))continue;let c=Ha(s);c&&o.set(c,s)}let r=[];try{r=(await new Ea({vocabulary:new _a}).reason(t)).getInstancesOfClass(ct(e.publisher,e.package_,e.name))}catch{}let a=[];for(let s of r){let c=o.get(s);c&&a.push(c)}return a.length>0?a:C(n,e)}function Ha(n){let e=n.namespace??"",t=e.indexOf("@"),o=t===-1?e:e.substring(0,t),r=o.indexOf("/");return r===-1||!n.name?null:ct(o.substring(0,r),o.substring(r+1),n.name)}import{Command as za}from"commander";import{KanonakParser as qa,PublisherIndex as mt,CredentialStore as pt,createAuthenticatedFetch as ft,FileSystemKanonakDocumentRepository as Ga,Reasoner as Wa,KanonakVocabulary as Xa,getGlobalCachePath as Ja,makeUriKey as Ya}from"@kanonak-protocol/sdk";function Za(n){let e=n.split("/");if(e.length!==3)return null;let[t,o,r]=e;return!t||!o||!r?null:{publisher:t,package_:o,name:r}}function gt(){return new za("search").description("Browse a publisher's catalogue or find instances of a class via the SDK reasoner").argument("<publisher>","Publisher domain (e.g. kanonak.org)").option("--type <uri>","Class URI to search for, in publisher/package/Name form").action(async(n,e)=>{e.type?await es(n,e.type):await Qa(n)})}async function Qa(n){let e=new pt,t=ft(e),o=new mt({fetchFn:t}),r;try{r=await o.listLatestPackages(n)}catch(s){console.error(`Failed to fetch publisher index for ${n}: ${s.message}`),process.exit(1)}if(r.length===0){console.log(`No packages found at ${n}.`);return}console.log(`Packages published by ${n}:
-`);let a=r.reduce((s,c)=>Math.max(s,c.packageName.length),0);for(let{packageName:s,version:c}of r)console.log(`  ${s.padEnd(a)}  @${c}`)}async function es(n,e){let t=Za(e);t||(console.error(`Invalid --type value: ${e}`),console.error("Expected: publisher/package/Name (e.g. kanonak.org/capabilities/Capability)"),process.exit(1));let o=new qa,r=new pt,a=ft(r),s=new mt({fetchFn:a}),c=new T,i=new Set,l=[];try{l=await s.listLatestPackages(n)}catch(k){console.error(`Failed to fetch publisher index for ${n}: ${k.message}`),process.exit(1)}for(let{packageName:k,version:h}of l)i.add(`${n}|${k}|${h}`);await on(s,c,a,"kanonak.org","core-rdf",i),await on(s,c,a,"kanonak.org","core-owl",i),await on(s,c,a,t.publisher,t.package_,i);for(let k of i){let[h,$,w]=k.split("|");if(!c.has(h,$,w))try{let v=await s.getPackageUrl(h,$,w),D=await a(v,h);if(!D.ok){console.error(`Warning: failed to fetch ${h}/${$}@${w}: ${D.status} ${D.statusText}`);continue}let G=await D.text();c.put(h,$,w,G)}catch(v){console.error(`Warning: failed to fetch ${h}/${$}@${w}: ${v.message}`)}}let u=new Ga(Ja(),!0,o),p=await new Wa({vocabulary:new Xa}).reason(u),y=Ya(t.publisher,t.package_,t.name),f=p.getInstancesOfClass(y).filter(k=>k!==y);if(f.length===0){console.log(`No instances of ${y} found in ${n}'s catalogue.`);return}console.log(`Instances of ${y} in ${n}'s catalogue:
-`),f.sort();for(let k of f)console.log(`  ${k}`)}async function on(n,e,t,o,r,a){try{let s=await n.getHighestVersion(o,r);if(!s)return;a.add(`${o}|${r}|${s}`)}catch{}}import{Command as ht}from"commander";function re(n){return`${E}/${_}/${n}`}var rn={[re("fetch-and-deploy")]:(n,e,t,o)=>n.add(e,t[0],o),[re("remove-deployed")]:(n,e,t,o)=>n.remove(e,t[0],o),[re("list-deployed")]:(n,e,t,o)=>n.list(e,o),[re("update-deployed")]:(n,e,t,o)=>n.update(e,t[0],o),[re("search-available")]:(n,e,t,o)=>n.search(e,o),[re("show-info")]:(n,e,t,o)=>n.info(e,t[0],o)};function kt(n,e,t){for(let o of e){let r=new ht(o.commandName).description(o.description.trim());for(let a of o.commands){let s=r.command(ns(a));s.description(a.description);for(let c of a.arguments)if(c.isOption){let i=c.defaultValue!=null?`--${c.argumentName} [value]`:`--${c.argumentName} <value>`;s.option(i,"",c.defaultValue)}s.action(async(...c)=>{let i=ts(c);await os(t,o,a,c,i)})}n.addCommand(r)}}function ns(n){let e=n.arguments.filter(t=>!t.isOption).map(t=>t.required?`<${t.argumentName}>`:`[${t.argumentName}]`);return[n.subcommandName,...e].join(" ")}function ts(n){for(let e=n.length-1;e>=0;e--)if(n[e]&&typeof n[e]=="object"&&!(n[e]instanceof ht))return n[e];return{}}async function os(n,e,t,o,r){let a=[];for(let c of o)if(typeof c=="string")a.push(c);else break;t.actionKey||(console.error(`Capability subcommand '${t.subcommandName}' has no resolved \`performs:\` Action. Every CapabilityCommand must declare a performs value pointing at a named Action instance from the capabilities ontology. Known actions: ${Object.keys(rn).join(", ")}.`),process.exit(1));let s=rn[t.actionKey];s||(console.error(`Capability subcommand '${t.subcommandName}' references unknown Action '${t.actionKey}'. Known actions: ${Object.keys(rn).join(", ")}.`),process.exit(1)),await s(n,e,a,r)}import{KanonakObjectParser as rs,PublisherIndex as an,PublisherConfigResolver as as}from"@kanonak-protocol/sdk";var Ie=class{constructor(e,t,o,r,a,s){this.fileCache=e;this.parser=t;this.publisherIndex=o;this.fetchFn=r;this.handlerRegistry=a;this.repository=s}fileCache;parser;publisherIndex;fetchFn;handlerRegistry;repository;objectParser=new rs;async add(e,t,o){let r=W(t);r||(console.error(`Invalid package reference: "${t}"`),console.error(""),console.error("Accepted forms:"),console.error("  publisher/package                       (install all instances, latest version)"),console.error("  publisher/package@version               (install all instances, pinned)"),console.error("  publisher/package/instance              (install one instance, latest version)"),console.error("  publisher/package@version/instance      (install one instance, pinned)"),console.error(""),console.error("Tip: copy a URI directly from `kanonak "+e.commandName+" search`."),process.exit(1));let{publisher:a,packageName:s,version:c,instanceName:i}=r,l=c??await this.publisherIndex.getHighestVersion(a,s);l||(console.error(`Could not resolve version for "${a}/${s}".`),await this.printPackageSuggestions(a,s,e.commandName),process.exit(1));let u=this.fileCache.get(a,s,l);if(!u){let w=await this.publisherIndex.getPackageUrl(a,s,l),v=await this.fetchFn(w,a);v.ok||(v.status===404?(console.error(`Package ${a}/${s}@${l} not found at ${w}.`),console.error(`The publisher index lists this version but the file is missing \u2014 it may have been unpublished. Try \`kanonak ${e.commandName} search\` to see the current catalogue.`)):console.error(`Failed to fetch ${w} (${v.status} ${v.statusText}).`),process.exit(1)),u=await v.text(),this.fileCache.put(a,s,l,u)}let d=this.parser.parse(u),p=new K(d,this.repository),y=await this.objectParser.parseKanonaks(p),b=yt(e.managesTypeKey);b||(console.error(`Capability "${e.commandName}" has no resolved managesType.`),process.exit(1));let f=C(y,b);f.length===0&&(console.error(`Package ${a}/${s}@${l} does not contain any ${N(b)} instances.`),process.exit(1));let k=f;if(i&&(k=f.filter(w=>w.name===i),k.length===0)){console.error(`Instance "${i}" not found in ${a}/${s}@${l}.`),console.error(""),console.error(`This package contains ${f.length} ${N(b)} instance(s):`);for(let w of f)console.error(`  - ${w.name}`);console.error(""),console.error("To install all of them, drop the instance suffix:"),console.error(`  kanonak ${e.commandName} add ${a}/${s}`),process.exit(1)}let h=i?`${i} from ${a}/${s}@${l}`:`${k.length} ${N(b)} instance(s) from ${a}/${s}@${l}`;console.log(`Installing ${h}...`);let $=this.handlerRegistry.get(e.deploymentTargetKey);$?await $.deploy({instances:k,allKanonaks:y,repository:this.repository,options:o}):console.log(`Cached ${a}/${s}@${l} (no deployment handler for "${e.deploymentTargetKey}")`)}async printPackageSuggestions(e,t,o){let r;try{r=await this.publisherIndex.listLatestPackages(e)}catch{return}let a=r.map(s=>({name:s.packageName,version:s.version,score:ss(t,s.packageName)})).filter(s=>s.score>0).sort((s,c)=>c.score-s.score).slice(0,5);if(a.length!==0){console.error(""),console.error("Did you mean one of:");for(let s of a)console.error(`  kanonak ${o} add ${e}/${s.name}`)}}async remove(e,t,o){await this.requireHandler(e).undeploy(t,{repository:this.repository,options:o})}async list(e,t){let r=await this.requireHandler(e).list({repository:this.repository,options:t}),a=e.managesTypeKey||"managed";if(r.length===0){console.log(`No ${a} instances installed.`);return}console.log(`Installed ${a} instances:
+  ${m}`)}let i=Array.from(c.values())[0];if(i.length===1)return{transformation:i[0].tx,transformationKanonaks:i[0].kanonaks};let l=new Map(i.map(m=>[m.doc,m])),u=nn(i.map(m=>m.doc));if(!u.chosen)throw new Error(`Could not select a Transformation version for "${a}".`);let d=l.get(u.chosen);if(u.multipleVersionsPresent){let m=f=>{let h=f.metadata.namespace_?.version;return h?it(h):""},k=d.tx.namespace??"",b=k.includes("@")?k.substring(0,k.indexOf("@")):k;console.warn(`Warning: Transformation "${a}" has ${i.length} versions present (${i.map(f=>m(f.doc)).filter(Boolean).join(", ")}); using @${m(u.chosen)}. Pin with ${b}@<version>/${a} to suppress this warning.`)}return{transformation:d.tx,transformationKanonaks:d.kanonaks}}async function Oa(n,e,t,o){if(/^[.\/\\]/.test(n)||/^[A-Za-z]:/.test(n)||n.endsWith(".kan.yml")||rt(n)&&Da(n).isFile()){if(!rt(n))throw new Error(`Scope file not found: ${n}`);let b=$a(n,"utf-8"),f=t.parse(b),h=new A(f,e);return o.parseKanonaks(h)}let a=n.indexOf("@"),s=a===-1?n:n.substring(0,a),c=a===-1?void 0:n.substring(a+1),i=s.indexOf("/");if(i===-1)throw new Error(`Invalid scope "${n}" \u2014 expected a file path or publisher/package[@version] URI`);let l=s.substring(0,i),u=s.substring(i+1),d=await e.getDocumentsByNamespaceAsync(l,u);if(d.length===0)throw new Error(`Scope package ${l}/${u} not found in the local workspace or cache.`);let m=ut(d,c,`${l}/${u}`),k=new A(m,e);return o.parseKanonaks(k)}function La(n){let e=n.indexOf("@");if(e===-1)return;let t=n.substring(e+1),o=t.indexOf("/");return o===-1?t:t.substring(0,o)}function ut(n,e,t){let o=a=>{let s=a.metadata.namespace_?.version;return s?it(s):""},r=nn(n,{requestedVersion:e});if(r.exactRequestedVersionMissing){let a=n.map(o).filter(Boolean).sort().join(", ");throw new Error(`${t}@${e} not found in the local workspace or cache. Available versions: ${a||"(none with parseable namespace)"}`)}if(!r.chosen)throw new Error(`${t} not found in the local workspace or cache.`);return!e&&r.multipleVersionsPresent&&console.warn(`Warning: ${t} has ${n.length} versions present (${n.map(o).filter(Boolean).join(", ")}); using @${o(r.chosen)}. Pin with ${t}@<version> to suppress this warning.`),r.chosen}function at(n,e){try{let t=ee(n,e);return{uri:Ee(n),matchesClass:Pe(t.inputPattern.matchesClass),outputs:Array.from(t.outputs).sort()}}catch(t){return{uri:Ee(n),matchesClass:`(compile error: ${t.message})`,outputs:[]}}}function Ee(n){let e=n.namespace||"",t=e.indexOf("@");return`${t===-1?e:e.substring(0,t)}/${n.name}`}function Pe(n){return`${n.publisher}/${n.package_}/${n.name}`}function Fa(n){return n.replace(/[\\/:*?"<>|\s]+/g,"_").replace(/^_+|_+$/g,"")}async function Ma(n,e,t){let o=new Map;for(let s of n){if(!(s instanceof Ca))continue;let c=tn(s);c&&o.set(c,s)}let r=[];try{r=(await new Pa({vocabulary:new Ea}).reason(t)).getInstancesOfClass(st(e.publisher,e.package_,e.name))}catch{}let a=[];for(let s of r){let c=o.get(s);c&&a.push(c)}return a.length>0?a:C(n,e)}function tn(n){let e=n.namespace??"",t=e.indexOf("@"),o=t===-1?e:e.substring(0,t),r=o.indexOf("/");return r===-1||!n.name?null:st(o.substring(0,r),o.substring(r+1),n.name)}import{Command as Ba}from"commander";import{KanonakParser as Va,PublisherIndex as dt,CredentialStore as mt,createAuthenticatedFetch as pt,FileSystemKanonakDocumentRepository as Ha,Reasoner as za,KanonakVocabulary as qa,getGlobalCachePath as Ga,makeUriKey as Wa}from"@kanonak-protocol/sdk";function Xa(n){let e=n.split("/");if(e.length!==3)return null;let[t,o,r]=e;return!t||!o||!r?null:{publisher:t,package_:o,name:r}}function ft(){return new Ba("search").description("Browse a publisher's catalogue or find instances of a class via the SDK reasoner").argument("<publisher>","Publisher domain (e.g. kanonak.org)").option("--type <uri>","Class URI to search for, in publisher/package/Name form").action(async(n,e)=>{e.type?await Ya(n,e.type):await Ja(n)})}async function Ja(n){let e=new mt,t=pt(e),o=new dt({fetchFn:t}),r;try{r=await o.listLatestPackages(n)}catch(s){console.error(`Failed to fetch publisher index for ${n}: ${s.message}`),process.exit(1)}if(r.length===0){console.log(`No packages found at ${n}.`);return}console.log(`Packages published by ${n}:
+`);let a=r.reduce((s,c)=>Math.max(s,c.packageName.length),0);for(let{packageName:s,version:c}of r)console.log(`  ${s.padEnd(a)}  @${c}`)}async function Ya(n,e){let t=Xa(e);t||(console.error(`Invalid --type value: ${e}`),console.error("Expected: publisher/package/Name (e.g. kanonak.org/capabilities/Capability)"),process.exit(1));let o=new Va,r=new mt,a=pt(r),s=new dt({fetchFn:a}),c=new T,i=new Set,l=[];try{l=await s.listLatestPackages(n)}catch(h){console.error(`Failed to fetch publisher index for ${n}: ${h.message}`),process.exit(1)}for(let{packageName:h,version:g}of l)i.add(`${n}|${h}|${g}`);await on(s,c,a,"kanonak.org","core-rdf",i),await on(s,c,a,"kanonak.org","core-owl",i),await on(s,c,a,t.publisher,t.package_,i);for(let h of i){let[g,w,$]=h.split("|");if(!c.has(g,w,$))try{let v=await s.getPackageUrl(g,w,$),D=await a(v,g);if(!D.ok){console.error(`Warning: failed to fetch ${g}/${w}@${$}: ${D.status} ${D.statusText}`);continue}let q=await D.text();c.put(g,w,$,q)}catch(v){console.error(`Warning: failed to fetch ${g}/${w}@${$}: ${v.message}`)}}let u=new Ha(Ga(),!0,o),m=await new za({vocabulary:new qa}).reason(u),k=Wa(t.publisher,t.package_,t.name),f=m.getInstancesOfClass(k).filter(h=>h!==k);if(f.length===0){console.log(`No instances of ${k} found in ${n}'s catalogue.`);return}console.log(`Instances of ${k} in ${n}'s catalogue:
+`),f.sort();for(let h of f)console.log(`  ${h}`)}async function on(n,e,t,o,r,a){try{let s=await n.getHighestVersion(o,r);if(!s)return;a.add(`${o}|${r}|${s}`)}catch{}}import{Command as gt}from"commander";function oe(n){return`${E}/${_}/${n}`}var rn={[oe("fetch-and-deploy")]:(n,e,t,o)=>n.add(e,t[0],o),[oe("remove-deployed")]:(n,e,t,o)=>n.remove(e,t[0],o),[oe("list-deployed")]:(n,e,t,o)=>n.list(e,o),[oe("update-deployed")]:(n,e,t,o)=>n.update(e,t[0],o),[oe("search-available")]:(n,e,t,o)=>n.search(e,o),[oe("show-info")]:(n,e,t,o)=>n.info(e,t[0],o)};function ht(n,e,t){for(let o of e){let r=new gt(o.commandName).description(o.description.trim());for(let a of o.commands){let s=r.command(Za(a));s.description(a.description);for(let c of a.arguments)if(c.isOption){let i=c.defaultValue!=null?`--${c.argumentName} [value]`:`--${c.argumentName} <value>`;s.option(i,"",c.defaultValue)}s.action(async(...c)=>{let i=Qa(c);await es(t,o,a,c,i)})}n.addCommand(r)}}function Za(n){let e=n.arguments.filter(t=>!t.isOption).map(t=>t.required?`<${t.argumentName}>`:`[${t.argumentName}]`);return[n.subcommandName,...e].join(" ")}function Qa(n){for(let e=n.length-1;e>=0;e--)if(n[e]&&typeof n[e]=="object"&&!(n[e]instanceof gt))return n[e];return{}}async function es(n,e,t,o,r){let a=[];for(let c of o)if(typeof c=="string")a.push(c);else break;t.actionKey||(console.error(`Capability subcommand '${t.subcommandName}' has no resolved \`performs:\` Action. Every CapabilityCommand must declare a performs value pointing at a named Action instance from the capabilities ontology. Known actions: ${Object.keys(rn).join(", ")}.`),process.exit(1));let s=rn[t.actionKey];s||(console.error(`Capability subcommand '${t.subcommandName}' references unknown Action '${t.actionKey}'. Known actions: ${Object.keys(rn).join(", ")}.`),process.exit(1)),await s(n,e,a,r)}import{KanonakObjectParser as ns,PublisherIndex as an,PublisherConfigResolver as ts}from"@kanonak-protocol/sdk";var _e=class{constructor(e,t,o,r,a,s){this.fileCache=e;this.parser=t;this.publisherIndex=o;this.fetchFn=r;this.handlerRegistry=a;this.repository=s}fileCache;parser;publisherIndex;fetchFn;handlerRegistry;repository;objectParser=new ns;async add(e,t,o){let r=G(t);r||(console.error(`Invalid package reference: "${t}"`),console.error(""),console.error("Accepted forms:"),console.error("  publisher/package                       (install all instances, latest version)"),console.error("  publisher/package@version               (install all instances, pinned)"),console.error("  publisher/package/instance              (install one instance, latest version)"),console.error("  publisher/package@version/instance      (install one instance, pinned)"),console.error(""),console.error("Tip: copy a URI directly from `kanonak "+e.commandName+" search`."),process.exit(1));let{publisher:a,packageName:s,version:c,instanceName:i}=r,l=c??await this.publisherIndex.getHighestVersion(a,s);l||(console.error(`Could not resolve version for "${a}/${s}".`),await this.printPackageSuggestions(a,s,e.commandName),process.exit(1));let u=this.fileCache.get(a,s,l);if(!u){let $=await this.publisherIndex.getPackageUrl(a,s,l),v=await this.fetchFn($,a);v.ok||(v.status===404?(console.error(`Package ${a}/${s}@${l} not found at ${$}.`),console.error(`The publisher index lists this version but the file is missing \u2014 it may have been unpublished. Try \`kanonak ${e.commandName} search\` to see the current catalogue.`)):console.error(`Failed to fetch ${$} (${v.status} ${v.statusText}).`),process.exit(1)),u=await v.text(),this.fileCache.put(a,s,l,u)}let d=this.parser.parse(u),m=new A(d,this.repository),k=await this.objectParser.parseKanonaks(m),b=kt(e.managesTypeKey);b||(console.error(`Capability "${e.commandName}" has no resolved managesType.`),process.exit(1));let f=C(k,b);f.length===0&&(console.error(`Package ${a}/${s}@${l} does not contain any ${N(b)} instances.`),process.exit(1));let h=f;if(i&&(h=f.filter($=>$.name===i),h.length===0)){console.error(`Instance "${i}" not found in ${a}/${s}@${l}.`),console.error(""),console.error(`This package contains ${f.length} ${N(b)} instance(s):`);for(let $ of f)console.error(`  - ${$.name}`);console.error(""),console.error("To install all of them, drop the instance suffix:"),console.error(`  kanonak ${e.commandName} add ${a}/${s}`),process.exit(1)}let g=i?`${i} from ${a}/${s}@${l}`:`${h.length} ${N(b)} instance(s) from ${a}/${s}@${l}`;console.log(`Installing ${g}...`);let w=this.handlerRegistry.get(e.deploymentTargetKey);w?await w.deploy({instances:h,allKanonaks:k,repository:this.repository,options:o}):console.log(`Cached ${a}/${s}@${l} (no deployment handler for "${e.deploymentTargetKey}")`)}async printPackageSuggestions(e,t,o){let r;try{r=await this.publisherIndex.listLatestPackages(e)}catch{return}let a=r.map(s=>({name:s.packageName,version:s.version,score:os(t,s.packageName)})).filter(s=>s.score>0).sort((s,c)=>c.score-s.score).slice(0,5);if(a.length!==0){console.error(""),console.error("Did you mean one of:");for(let s of a)console.error(`  kanonak ${o} add ${e}/${s.name}`)}}async remove(e,t,o){await this.requireHandler(e).undeploy(t,{repository:this.repository,options:o})}async list(e,t){let r=await this.requireHandler(e).list({repository:this.repository,options:t}),a=e.managesTypeKey||"managed";if(r.length===0){console.log(`No ${a} instances installed.`);return}console.log(`Installed ${a} instances:
 `);for(let s of r){let c=s.publisher?`${s.publisher}/${s.package_}@${s.version}`:"unmanaged";console.log(`  ${s.name}  (${c})  ${s.path}`)}}async update(e,t,o){let a=await this.requireHandler(e).list({repository:this.repository,options:o}),s=t?a.filter(i=>i.name===t):a.filter(i=>i.publisher);if(s.length===0){console.log(t?`"${t}" not found.`:"No managed instances to update.");return}let c=0;for(let i of s){let l=await this.publisherIndex.getHighestVersion(i.publisher,i.package_);!l||l===i.version||(console.log(`Updating ${i.name}: ${i.version} \u2192 ${l}`),await this.add(e,`${i.publisher}/${i.package_}@${l}`,o),c++)}console.log(c===0?"All instances are up to date.":`
-Updated ${c} instance(s).`)}async search(e,t){let o=t.publisher??"kanonak.org",r=yt(e.managesTypeKey);if(!r){console.error("Capability has no resolved managesType; nothing to search for.");return}console.log(`Searching ${o} for ${N(r)} instances...
-`);let a=new as,s=await a.getConfig(o),c=a.resolveIndexUrl(o,s),i=await this.fetchFn(c,o);if(!i.ok){console.error(`Failed to fetch package index from ${o}.`);return}let l=await i.text(),u=an.parseIndex(l);if(u.size===0){console.error(`No packages found for publisher "${o}".`);return}let d=new Map;for(let[f,k]of u){let h=[...k].sort(($,w)=>{let v=an.parseVersion($),D=an.parseVersion(w);return!v||!D?0:v.major!==D.major?D.major-v.major:v.minor!==D.minor?D.minor-v.minor:D.patch-v.patch});d.set(f,h[0])}let p=[],y=0;for(let[f,k]of d){let h=this.fileCache.get(o,f,k);if(!h)try{let $=await this.publisherIndex.getPackageUrl(o,f,k),w=await this.fetchFn($,o);if(!w.ok)continue;h=await w.text(),this.fileCache.put(o,f,k,h)}catch{continue}try{let $=this.parser.parse(h),w=new K($,this.repository),v=await this.objectParser.parseKanonaks(w),D=C(v,r);for(let G of D)p.push({publisher:o,package_:f,version:k,subject:G});y++}catch{continue}}if(p.length===0){console.log(`No ${N(r)} instances found across ${y} package(s).`);return}console.log(`Found ${p.length} ${N(r)} instance(s) in ${y} package(s):
-`);let b=new Map;for(let f of p){let k=`${f.publisher}/${f.package_}@${f.version}`,h=b.get(k);h?h.push(f):b.set(k,[f])}for(let[f,k]of b){let h=k[0],$=`${h.publisher}/${h.package_}`,w=k.length===1;console.log(`  ${f}`),console.log(`    ${k.length} skill${w?"":"s"}:`);for(let v of k)console.log(`      - ${v.subject.name}`);if(console.log(""),w)console.log("    install:"),console.log(`      kanonak ${e.commandName} add ${$}/${h.subject.name}`);else{console.log("    install one of them:");for(let v of k)console.log(`      kanonak ${e.commandName} add ${$}/${v.subject.name}`);console.log("    install all of them:"),console.log(`      kanonak ${e.commandName} add ${$}`)}console.log("")}}async info(e,t,o){let s=(await this.requireHandler(e).list({repository:this.repository,options:o})).find(c=>c.name===t);s||(console.error(`"${t}" is not installed.`),process.exit(1)),console.log(`Name:      ${s.name}`),console.log(`Type:      ${e.managesTypeKey||"n/a"}`),console.log(`Publisher: ${s.publisher||"unmanaged"}`),console.log(`Package:   ${s.package_||"n/a"}`),console.log(`Version:   ${s.version||"n/a"}`),console.log(`Path:      ${s.path}`)}requireHandler(e){let t=this.handlerRegistry.get(e.deploymentTargetKey);return t||(console.error(`No deployment handler registered for "${e.deploymentTargetKey}". Ensure the capability's deploymentTarget resolves to a DeploymentTarget instance whose URI is registered in the CLI at startup.`),process.exit(1)),t}};function yt(n){if(!n)return;let e=n.split("/");if(e.length===3)return{publisher:e[0],package_:e[1],name:e[2]}}function ss(n,e){let t=n.toLowerCase(),o=e.toLowerCase();if(t===o)return 100;if(o.includes(t)||t.includes(o))return 50;let r=new Set(t.split("-").filter(Boolean)),a=new Set(o.split("-").filter(Boolean)),s=0;for(let i of r)a.has(i)&&s++;if(s>0)return s*10;let c=is(t,o);return c===0?100:c<=2?Math.max(1,20-c*5):0}function is(n,e){if(n===e)return 0;if(n.length===0)return e.length;if(e.length===0)return n.length;let t=new Array(e.length+1),o=new Array(e.length+1);for(let r=0;r<=e.length;r++)t[r]=r;for(let r=0;r<n.length;r++){o[0]=r+1;for(let a=0;a<e.length;a++){let s=n[r]===e[a]?0:1;o[a+1]=Math.min(o[a]+1,t[a+1]+1,t[a]+s)}for(let a=0;a<=e.length;a++)t[a]=o[a]}return t[e.length]}var Re=class{handlers=new Map;register(e,t){this.handlers.set(e,t)}get(e){return this.handlers.get(e)??null}};import{mkdirSync as ws,rmSync as $s,existsSync as xe,readdirSync as Ss,writeFileSync as vs}from"fs";import{join as Ue}from"path";import{KanonakObjectParser as Ds,KanonakParser as As}from"@kanonak-protocol/sdk";import{join as sn}from"path";import{homedir as bt}from"os";import{KanonakObjectParser as cs}from"@kanonak-protocol/sdk";var ae="kanonak.org",se="agent-skills",$t={publisher:ae,package_:se,name:"Client"},St={publisher:ae,package_:se,name:"clientId"},ls={publisher:ae,package_:se,name:"projectSkillDir"},us={publisher:ae,package_:se,name:"userSkillDir"},ds="agents";async function fe(n,e){let t=(n.client??ms()??ds).toLowerCase(),o=n.scope??"project",r=await ps(t,e);if(!r){let c=await fs(e);throw new Error(`Unknown client "${t}". Known clients: ${c.join(", ")||"(none)"}. Add a Client instance to a package that imports kanonak.org/agent-skills and install that package to make it available.`)}let s=P(r,o==="user"?us:ls);if(!s)throw new Error(`Client "${t}" has no ${o==="user"?"userSkillDir":"projectSkillDir"} declared.`);return gs(s)}async function Te(n,e,t){let o=await fe(e,t);return sn(o,n)}function ms(){if(process.env.CLAUDE_CODE||process.env.CLAUDE_PROJECT_DIR)return"claude-code"}var wt=new WeakMap;async function vt(n){let e=wt.get(n);if(e)return e;let t=await n.getDocumentsByNamespaceAsync(ae,se);if(t.length===0)throw new Error(`Could not find ${ae}/${se} in the repository. Install a skill capability (which transitively imports agent-skills) or fetch agent-skills directly to populate the cache.`);let r=[...t].sort((i,l)=>{let u=i.metadata.namespace_?.version,d=l.metadata.namespace_?.version;return!u||!d?0:u.major!==d.major?d.major-u.major:u.minor!==d.minor?d.minor-u.minor:d.patch-u.patch})[0],a=new cs,s=new K(r,n),c=await a.parseKanonaks(s);return wt.set(n,c),c}async function ps(n,e){let t=await vt(e),o=C(t,$t);for(let r of o)if(P(r,St)===n)return r}async function fs(n){let e=await vt(n),t=C(e,$t),o=[];for(let r of t){let a=P(r,St);a&&o.push(a)}return o}function gs(n){return n.startsWith("~/")?sn(bt(),n.slice(2)):n==="~"?bt():n.startsWith("/")||/^[A-Za-z]:[\\/]/.test(n)?n:sn(process.cwd(),n)}import{readFileSync as hs,writeFileSync as ks,existsSync as ys}from"fs";import{join as Dt}from"path";import At from"js-yaml";var Kt="skills.lock",bs=`# This file is generated by Kanonak CLI. Do not edit manually.
-`;function je(n){let e=Dt(n,Kt);if(!ys(e))return{version:"1",lastUpdated:new Date().toISOString(),skills:{}};let t=hs(e,"utf-8"),o=At.load(t);return!o||typeof o!="object"||o.version!=="1"?{version:"1",lastUpdated:new Date().toISOString(),skills:{}}:{version:"1",lastUpdated:o.lastUpdated??new Date().toISOString(),skills:o.skills??{}}}function cn(n,e){e.lastUpdated=new Date().toISOString();let t={};for(let a of Object.keys(e.skills).sort())t[a]=e.skills[a];e.skills=t;let o=Dt(n,Kt),r=At.dump(e,{lineWidth:-1,sortKeys:!1,quotingType:'"'});ks(o,bs+r,"utf-8")}var Ct="kanonak.org",Pt="skill-to-skill-md",Ne=class{parser=new As;objectParser=new Ds;runner=new V;async deploy(e){let{instances:t,allKanonaks:o,repository:r,options:a}=e;if(t.length===0){console.error("No Skill instances to deploy.");return}let s=await Ks(r,this.objectParser);if(!s){console.error(`Cannot deploy: ${Ct}/${Pt}@1.0.0 is not installed in the workspace or cache.`);return}let c=await this.runner.run({transformation:s,instances:t,allKanonaks:o,repository:r,parser:this.parser,objectParser:this.objectParser,outputFormat:"markdown-with-frontmatter"});if(c.length===0){console.error("No skills could be transformed from the package.");return}let i=await fe(a,r),l=je(i),u=t[0].namespace,{publisher:d,package_:p,version:y}=Cs(u);for(let b of c){let f=await Te(b.fileName,a,r),k=xe(Ue(f,"SKILL.md"));ws(f,{recursive:!0}),vs(Ue(f,"SKILL.md"),b.content,"utf-8"),l.skills[b.fileName]={publisher:d,package_:p,version:y,resolved:d?`kanonak://${d}/${p}@${y}`:"",integrity:L(b.content)},console.log(`  ${k?"Updated":"Installed"} skill "${b.fileName}" \u2192 ${f}`)}cn(i,l)}async undeploy(e,t){let{repository:o,options:r}=t,a=await Te(e,r,o);xe(a)||(console.error(`Skill "${e}" is not installed at ${a}`),process.exit(1)),$s(a,{recursive:!0,force:!0});let s=await fe(r,o),c=je(s);delete c.skills[e],cn(s,c),console.log(`Removed skill "${e}" from ${a}`)}async list(e){let{repository:t,options:o}=e,r=await fe(o,t),a=je(r),s=[];for(let[c,i]of Object.entries(a.skills))s.push({name:c,publisher:i.publisher,package_:i.package_,version:i.version,path:await Te(c,o,t)});if(xe(r))try{let c=Ss(r,{withFileTypes:!0});for(let i of c){if(!i.isDirectory()||a.skills[i.name])continue;let l=Ue(r,i.name,"SKILL.md");xe(l)&&s.push({name:i.name,publisher:"",package_:"",version:"",path:Ue(r,i.name)})}}catch{}return s}};async function Ks(n,e){let t=await n.getDocumentsByNamespaceAsync(Ct,Pt);if(t.length===0)return;let o=new K(t[0],n),r=await e.parseKanonaks(o);return C(r,g.Transformation)[0]}function Cs(n){if(!n)return{publisher:"",package_:"",version:""};let e=n.indexOf("@");if(e===-1)return{publisher:"",package_:"",version:""};let t=n.substring(0,e),o=n.substring(e+1),r=t.indexOf("/");return r===-1?{publisher:"",package_:"",version:""}:{publisher:t.substring(0,r),package_:t.substring(r+1),version:o}}import{mkdirSync as Ms,rmSync as Bs,existsSync as un,readdirSync as Vs,writeFileSync as Hs,statSync as zs}from"fs";import{join as Fe}from"path";import{KanonakObjectParser as qs,KanonakParser as Gs}from"@kanonak-protocol/sdk";import{join as Et}from"path";import{homedir as _t}from"os";import{KanonakObjectParser as Ps}from"@kanonak-protocol/sdk";var z="kanonak.org",q="agent-skills",Rt={publisher:z,package_:q,name:"Client"},Tt={publisher:z,package_:q,name:"clientId"},Es={publisher:z,package_:q,name:"projectAgentDir"},_s={publisher:z,package_:q,name:"userAgentDir"},Is={publisher:z,package_:q,name:"agentFileFormat"},Rs="agents";function Ts(){if(process.env.CLAUDE_CODE||process.env.CLAUDE_PROJECT_DIR)return"claude-code"}async function Oe(n,e){let t=(n.client??Ts()??Rs).toLowerCase(),o=n.scope??"project",r=await js(t,e);if(!r){let u=await xs(e);throw new Error(`Unknown client "${t}". Known clients: ${u.join(", ")||"(none)"}. Add a Client instance to a package that imports kanonak.org/agent-skills and install that package to make it available.`)}let s=P(r,o==="user"?_s:Es);if(!s)throw new Error(`Client "${t}" has no ${o==="user"?"userAgentDir":"projectAgentDir"} declared.`);let i=B(r,Is)?.name==="toml"?"toml":"markdown-frontmatter",l=i==="toml"?".toml":".md";return{agentsDir:Us(s),format:i,fileExtension:l}}var It=new WeakMap;async function jt(n){let e=It.get(n);if(e)return e;let t=await n.getDocumentsByNamespaceAsync(z,q);if(t.length===0)throw new Error(`Could not find ${z}/${q} in the repository. Install a capability that imports agent-skills to populate the cache.`);let r=[...t].sort((i,l)=>{let u=i.metadata.namespace_?.version,d=l.metadata.namespace_?.version;return!u||!d?0:u.major!==d.major?d.major-u.major:u.minor!==d.minor?d.minor-u.minor:d.patch-u.patch})[0],a=new Ps,s=new K(r,n),c=await a.parseKanonaks(s);return It.set(n,c),c}async function js(n,e){let t=await jt(e),o=C(t,Rt);for(let r of o)if(P(r,Tt)===n)return r}async function xs(n){let e=await jt(n),t=C(e,Rt),o=[];for(let r of t){let a=P(r,Tt);a&&o.push(a)}return o}function Us(n){return n.startsWith("~/")?Et(_t(),n.slice(2)):n==="~"?_t():n.startsWith("/")||/^[A-Za-z]:[\\/]/.test(n)?n:Et(process.cwd(),n)}import{readFileSync as Ns,writeFileSync as Os,existsSync as Ls}from"fs";import{join as xt}from"path";import Ut from"js-yaml";var Nt="agents.lock",Fs=`# This file is generated by Kanonak CLI. Do not edit manually.
-`;function Le(n){let e=xt(n,Nt);if(!Ls(e))return{version:"1",lastUpdated:new Date().toISOString(),agents:{}};let t=Ns(e,"utf-8"),o=Ut.load(t);return!o||typeof o!="object"||o.version!=="1"?{version:"1",lastUpdated:new Date().toISOString(),agents:{}}:{version:"1",lastUpdated:o.lastUpdated??new Date().toISOString(),agents:o.agents??{}}}function ln(n,e){e.lastUpdated=new Date().toISOString();let t={};for(let a of Object.keys(e.agents).sort())t[a]=e.agents[a];e.agents=t;let o=xt(n,Nt),r=Ut.dump(e,{lineWidth:-1,sortKeys:!1,quotingType:'"'});Os(o,Fs+r,"utf-8")}var Ot="kanonak.org",Lt="agent-to-agent-file",Me=class{parser=new Gs;objectParser=new qs;runner=new V;async deploy(e){let{instances:t,allKanonaks:o,repository:r,options:a}=e;if(t.length===0){console.error("No Agent instances to deploy.");return}let{agentsDir:s,format:c,fileExtension:i}=await Oe(a,r),l=await Ws(r,this.objectParser);if(!l){console.error(`Cannot deploy: ${Ot}/${Lt}@1.0.0 is not installed in the workspace or cache.`);return}let u=c==="toml"?"toml":"markdown-with-frontmatter",d=await this.runner.run({transformation:l,instances:t,allKanonaks:o,repository:r,parser:this.parser,objectParser:this.objectParser,outputFormat:u});if(d.length===0){console.error("No agents could be transformed from the package.");return}Ms(s,{recursive:!0});let p=Le(s),y=t[0].namespace,{publisher:b,package_:f,version:k}=Js(y);for(let h of d){let $=`${h.fileName}${i}`,w=Fe(s,$),v=un(w);Hs(w,h.content,"utf-8"),p.agents[h.fileName]={publisher:b,package_:f,version:k,resolved:b?`kanonak://${b}/${f}@${k}`:"",integrity:L(h.content),fileName:$},console.log(`  ${v?"Updated":"Installed"} agent "${h.fileName}" \u2192 ${w}`)}ln(s,p)}async undeploy(e,t){let{repository:o,options:r}=t,{agentsDir:a}=await Oe(r,o),s=Le(a),c=s.agents[e];c||(console.error(`Agent "${e}" is not installed at ${a}`),process.exit(1));let i=Fe(a,c.fileName);un(i)&&Bs(i,{force:!0}),delete s.agents[e],ln(a,s),console.log(`Removed agent "${e}" from ${i}`)}async list(e){let{repository:t,options:o}=e,{agentsDir:r}=await Oe(o,t),a=Le(r),s=[];for(let[c,i]of Object.entries(a.agents))s.push({name:c,publisher:i.publisher,package_:i.package_,version:i.version,path:Fe(r,i.fileName)});if(un(r))try{let c=Vs(r,{withFileTypes:!0});for(let i of c){if(!i.isFile()||i.name==="agents.lock")continue;let l=Fe(r,i.name),u=Xs(i.name);if(!a.agents[u]){try{if(!zs(l).isFile())continue}catch{continue}s.push({name:u,publisher:"",package_:"",version:"",path:l})}}}catch{}return s}};async function Ws(n,e){let t=await n.getDocumentsByNamespaceAsync(Ot,Lt);if(t.length===0)return;let o=new K(t[0],n),r=await e.parseKanonaks(o);return C(r,g.Transformation)[0]}function Xs(n){let e=n.lastIndexOf(".");return e===-1?n:n.substring(0,e)}function Js(n){if(!n)return{publisher:"",package_:"",version:""};let e=n.indexOf("@");if(e===-1)return{publisher:"",package_:"",version:""};let t=n.substring(0,e),o=n.substring(e+1),r=t.indexOf("/");return r===-1?{publisher:"",package_:"",version:""}:{publisher:t.substring(0,r),package_:t.substring(r+1),version:o}}var si=ei(Qs(import.meta.url)),ii=JSON.parse(Zs(ni(si,"..","package.json"),"utf-8")),O=new Ys;O.name("kanonak").description("Kanonak Protocol CLI - Validate and resolve Kanonak ontology packages").version(ii.version);O.command("validate <path>").description("Validate .kan.yml file(s). Resolves imports via HTTP from publisher domains.").action(async n=>{await gn(n)});O.command("install [package]").description("Install a package and its dependencies, or install all from kanonak.lock.").action(async n=>{await bn(n)});O.command("deps <path>").description("Show resolved dependency tree for a .kan.yml file.").action(async n=>{await $n(n)});O.command("login <publisher>").description("Authenticate with a package publisher using OAuth 2.0.").action(async n=>{await Kn(n)});O.command("logout <publisher>").description("Revoke tokens and remove stored credentials for a publisher.").action(async n=>{await Cn(n)});O.addCommand(Fn());O.addCommand(lt());O.addCommand(gt());async function ci(){try{let n=new T,e=new ti,t=new ri,o=ai(t),r=new oi({fetchFn:o}),a=await j(process.cwd(),e),s=new Re;s.register("kanonak.org/capabilities/agent-skill-deployment",new Ne),s.register("kanonak.org/agent-capabilities/agent-instance-deployment",new Me);let c=await On(n,e,a),i=new Ie(n,e,r,o,s,a);kt(O,c,i)}catch{}}await ci();O.parse();
+Updated ${c} instance(s).`)}async search(e,t){let o=t.publisher??"kanonak.org",r=kt(e.managesTypeKey);if(!r){console.error("Capability has no resolved managesType; nothing to search for.");return}console.log(`Searching ${o} for ${N(r)} instances...
+`);let a=new ts,s=await a.getConfig(o),c=a.resolveIndexUrl(o,s),i=await this.fetchFn(c,o);if(!i.ok){console.error(`Failed to fetch package index from ${o}.`);return}let l=await i.text(),u=an.parseIndex(l);if(u.size===0){console.error(`No packages found for publisher "${o}".`);return}let d=new Map;for(let[f,h]of u){let g=[...h].sort((w,$)=>{let v=an.parseVersion(w),D=an.parseVersion($);return!v||!D?0:v.major!==D.major?D.major-v.major:v.minor!==D.minor?D.minor-v.minor:D.patch-v.patch});d.set(f,g[0])}let m=[],k=0;for(let[f,h]of d){let g=this.fileCache.get(o,f,h);if(!g)try{let w=await this.publisherIndex.getPackageUrl(o,f,h),$=await this.fetchFn(w,o);if(!$.ok)continue;g=await $.text(),this.fileCache.put(o,f,h,g)}catch{continue}try{let w=this.parser.parse(g),$=new A(w,this.repository),v=await this.objectParser.parseKanonaks($),D=C(v,r);for(let q of D)m.push({publisher:o,package_:f,version:h,subject:q});k++}catch{continue}}if(m.length===0){console.log(`No ${N(r)} instances found across ${k} package(s).`);return}console.log(`Found ${m.length} ${N(r)} instance(s) in ${k} package(s):
+`);let b=new Map;for(let f of m){let h=`${f.publisher}/${f.package_}@${f.version}`,g=b.get(h);g?g.push(f):b.set(h,[f])}for(let[f,h]of b){let g=h[0],w=`${g.publisher}/${g.package_}`,$=h.length===1;console.log(`  ${f}`),console.log(`    ${h.length} skill${$?"":"s"}:`);for(let v of h)console.log(`      - ${v.subject.name}`);if(console.log(""),$)console.log("    install:"),console.log(`      kanonak ${e.commandName} add ${w}/${g.subject.name}`);else{console.log("    install one of them:");for(let v of h)console.log(`      kanonak ${e.commandName} add ${w}/${v.subject.name}`);console.log("    install all of them:"),console.log(`      kanonak ${e.commandName} add ${w}`)}console.log("")}}async info(e,t,o){let s=(await this.requireHandler(e).list({repository:this.repository,options:o})).find(c=>c.name===t);s||(console.error(`"${t}" is not installed.`),process.exit(1)),console.log(`Name:      ${s.name}`),console.log(`Type:      ${e.managesTypeKey||"n/a"}`),console.log(`Publisher: ${s.publisher||"unmanaged"}`),console.log(`Package:   ${s.package_||"n/a"}`),console.log(`Version:   ${s.version||"n/a"}`),console.log(`Path:      ${s.path}`)}requireHandler(e){let t=this.handlerRegistry.get(e.deploymentTargetKey);return t||(console.error(`No deployment handler registered for "${e.deploymentTargetKey}". Ensure the capability's deploymentTarget resolves to a DeploymentTarget instance whose URI is registered in the CLI at startup.`),process.exit(1)),t}};function kt(n){if(!n)return;let e=n.split("/");if(e.length===3)return{publisher:e[0],package_:e[1],name:e[2]}}function os(n,e){let t=n.toLowerCase(),o=e.toLowerCase();if(t===o)return 100;if(o.includes(t)||t.includes(o))return 50;let r=new Set(t.split("-").filter(Boolean)),a=new Set(o.split("-").filter(Boolean)),s=0;for(let i of r)a.has(i)&&s++;if(s>0)return s*10;let c=rs(t,o);return c===0?100:c<=2?Math.max(1,20-c*5):0}function rs(n,e){if(n===e)return 0;if(n.length===0)return e.length;if(e.length===0)return n.length;let t=new Array(e.length+1),o=new Array(e.length+1);for(let r=0;r<=e.length;r++)t[r]=r;for(let r=0;r<n.length;r++){o[0]=r+1;for(let a=0;a<e.length;a++){let s=n[r]===e[a]?0:1;o[a+1]=Math.min(o[a]+1,t[a+1]+1,t[a]+s)}for(let a=0;a<=e.length;a++)t[a]=o[a]}return t[e.length]}var Ie=class{handlers=new Map;register(e,t){this.handlers.set(e,t)}get(e){return this.handlers.get(e)??null}};import{mkdirSync as ks,rmSync as ys,existsSync as xe,readdirSync as bs,writeFileSync as ws}from"fs";import{join as je}from"path";import{KanonakObjectParser as $s,KanonakParser as Ss,computeIntegrity as vs}from"@kanonak-protocol/sdk";import{join as sn}from"path";import{homedir as yt}from"os";import{KanonakObjectParser as as}from"@kanonak-protocol/sdk";var re="kanonak.org",ae="agent-skills",wt={publisher:re,package_:ae,name:"Client"},$t={publisher:re,package_:ae,name:"clientId"},ss={publisher:re,package_:ae,name:"projectSkillDir"},is={publisher:re,package_:ae,name:"userSkillDir"},cs="agents";async function me(n,e){let t=(n.client??ls()??cs).toLowerCase(),o=n.scope??"project",r=await us(t,e);if(!r){let c=await ds(e);throw new Error(`Unknown client "${t}". Known clients: ${c.join(", ")||"(none)"}. Add a Client instance to a package that imports kanonak.org/agent-skills and install that package to make it available.`)}let s=P(r,o==="user"?is:ss);if(!s)throw new Error(`Client "${t}" has no ${o==="user"?"userSkillDir":"projectSkillDir"} declared.`);return ms(s)}async function Re(n,e,t){let o=await me(e,t);return sn(o,n)}function ls(){if(process.env.CLAUDE_CODE||process.env.CLAUDE_PROJECT_DIR)return"claude-code"}var bt=new WeakMap;async function St(n){let e=bt.get(n);if(e)return e;let t=await n.getDocumentsByNamespaceAsync(re,ae);if(t.length===0)throw new Error(`Could not find ${re}/${ae} in the repository. Install a skill capability (which transitively imports agent-skills) or fetch agent-skills directly to populate the cache.`);let r=[...t].sort((i,l)=>{let u=i.metadata.namespace_?.version,d=l.metadata.namespace_?.version;return!u||!d?0:u.major!==d.major?d.major-u.major:u.minor!==d.minor?d.minor-u.minor:d.patch-u.patch})[0],a=new as,s=new A(r,n),c=await a.parseKanonaks(s);return bt.set(n,c),c}async function us(n,e){let t=await St(e),o=C(t,wt);for(let r of o)if(P(r,$t)===n)return r}async function ds(n){let e=await St(n),t=C(e,wt),o=[];for(let r of t){let a=P(r,$t);a&&o.push(a)}return o}function ms(n){return n.startsWith("~/")?sn(yt(),n.slice(2)):n==="~"?yt():n.startsWith("/")||/^[A-Za-z]:[\\/]/.test(n)?n:sn(process.cwd(),n)}import{readFileSync as ps,writeFileSync as fs,existsSync as gs}from"fs";import{join as vt}from"path";import Dt from"js-yaml";var Kt="skills.lock",hs=`# This file is generated by Kanonak CLI. Do not edit manually.
+`;function Te(n){let e=vt(n,Kt);if(!gs(e))return{version:"1",lastUpdated:new Date().toISOString(),skills:{}};let t=ps(e,"utf-8"),o=Dt.load(t);return!o||typeof o!="object"||o.version!=="1"?{version:"1",lastUpdated:new Date().toISOString(),skills:{}}:{version:"1",lastUpdated:o.lastUpdated??new Date().toISOString(),skills:o.skills??{}}}function cn(n,e){e.lastUpdated=new Date().toISOString();let t={};for(let a of Object.keys(e.skills).sort())t[a]=e.skills[a];e.skills=t;let o=vt(n,Kt),r=Dt.dump(e,{lineWidth:-1,sortKeys:!1,quotingType:'"'});fs(o,hs+r,"utf-8")}var At="kanonak.org",Ct="skill-to-skill-md",Ue=class{parser=new Ss;objectParser=new $s;runner=new B;async deploy(e){let{instances:t,allKanonaks:o,repository:r,options:a}=e;if(t.length===0){console.error("No Skill instances to deploy.");return}let s=await Ds(r,this.objectParser);if(!s){console.error(`Cannot deploy: ${At}/${Ct}@1.0.0 is not installed in the workspace or cache.`);return}let c=await this.runner.run({transformation:s,instances:t,allKanonaks:o,repository:r,parser:this.parser,objectParser:this.objectParser,outputFormat:"markdown-with-frontmatter"});if(c.length===0){console.error("No skills could be transformed from the package.");return}let i=await me(a,r),l=Te(i),u=t[0].namespace,{publisher:d,package_:m,version:k}=Ks(u);for(let b of c){let f=await Re(b.fileName,a,r),h=xe(je(f,"SKILL.md"));ks(f,{recursive:!0}),ws(je(f,"SKILL.md"),b.content,"utf-8"),l.skills[b.fileName]={publisher:d,package_:m,version:k,resolved:d?`kanonak://${d}/${m}@${k}`:"",integrity:vs(b.content)},console.log(`  ${h?"Updated":"Installed"} skill "${b.fileName}" \u2192 ${f}`)}cn(i,l)}async undeploy(e,t){let{repository:o,options:r}=t,a=await Re(e,r,o);xe(a)||(console.error(`Skill "${e}" is not installed at ${a}`),process.exit(1)),ys(a,{recursive:!0,force:!0});let s=await me(r,o),c=Te(s);delete c.skills[e],cn(s,c),console.log(`Removed skill "${e}" from ${a}`)}async list(e){let{repository:t,options:o}=e,r=await me(o,t),a=Te(r),s=[];for(let[c,i]of Object.entries(a.skills))s.push({name:c,publisher:i.publisher,package_:i.package_,version:i.version,path:await Re(c,o,t)});if(xe(r))try{let c=bs(r,{withFileTypes:!0});for(let i of c){if(!i.isDirectory()||a.skills[i.name])continue;let l=je(r,i.name,"SKILL.md");xe(l)&&s.push({name:i.name,publisher:"",package_:"",version:"",path:je(r,i.name)})}}catch{}return s}};async function Ds(n,e){let t=await n.getDocumentsByNamespaceAsync(At,Ct);if(t.length===0)return;let o=new A(t[0],n),r=await e.parseKanonaks(o);return C(r,y.Transformation)[0]}function Ks(n){if(!n)return{publisher:"",package_:"",version:""};let e=n.indexOf("@");if(e===-1)return{publisher:"",package_:"",version:""};let t=n.substring(0,e),o=n.substring(e+1),r=t.indexOf("/");return r===-1?{publisher:"",package_:"",version:""}:{publisher:t.substring(0,r),package_:t.substring(r+1),version:o}}import{mkdirSync as Ls,rmSync as Fs,existsSync as un,readdirSync as Ms,writeFileSync as Bs,statSync as Vs}from"fs";import{join as Le}from"path";import{KanonakObjectParser as Hs,KanonakParser as zs,computeIntegrity as qs}from"@kanonak-protocol/sdk";import{join as Pt}from"path";import{homedir as Et}from"os";import{KanonakObjectParser as As}from"@kanonak-protocol/sdk";var H="kanonak.org",z="agent-skills",It={publisher:H,package_:z,name:"Client"},Rt={publisher:H,package_:z,name:"clientId"},Cs={publisher:H,package_:z,name:"projectAgentDir"},Ps={publisher:H,package_:z,name:"userAgentDir"},Es={publisher:H,package_:z,name:"agentFileFormat"},_s="agents";function Is(){if(process.env.CLAUDE_CODE||process.env.CLAUDE_PROJECT_DIR)return"claude-code"}async function Ne(n,e){let t=(n.client??Is()??_s).toLowerCase(),o=n.scope??"project",r=await Rs(t,e);if(!r){let u=await Ts(e);throw new Error(`Unknown client "${t}". Known clients: ${u.join(", ")||"(none)"}. Add a Client instance to a package that imports kanonak.org/agent-skills and install that package to make it available.`)}let s=P(r,o==="user"?Ps:Cs);if(!s)throw new Error(`Client "${t}" has no ${o==="user"?"userAgentDir":"projectAgentDir"} declared.`);let i=M(r,Es)?.name==="toml"?"toml":"markdown-frontmatter",l=i==="toml"?".toml":".md";return{agentsDir:xs(s),format:i,fileExtension:l}}var _t=new WeakMap;async function Tt(n){let e=_t.get(n);if(e)return e;let t=await n.getDocumentsByNamespaceAsync(H,z);if(t.length===0)throw new Error(`Could not find ${H}/${z} in the repository. Install a capability that imports agent-skills to populate the cache.`);let r=[...t].sort((i,l)=>{let u=i.metadata.namespace_?.version,d=l.metadata.namespace_?.version;return!u||!d?0:u.major!==d.major?d.major-u.major:u.minor!==d.minor?d.minor-u.minor:d.patch-u.patch})[0],a=new As,s=new A(r,n),c=await a.parseKanonaks(s);return _t.set(n,c),c}async function Rs(n,e){let t=await Tt(e),o=C(t,It);for(let r of o)if(P(r,Rt)===n)return r}async function Ts(n){let e=await Tt(n),t=C(e,It),o=[];for(let r of t){let a=P(r,Rt);a&&o.push(a)}return o}function xs(n){return n.startsWith("~/")?Pt(Et(),n.slice(2)):n==="~"?Et():n.startsWith("/")||/^[A-Za-z]:[\\/]/.test(n)?n:Pt(process.cwd(),n)}import{readFileSync as js,writeFileSync as Us,existsSync as Ns}from"fs";import{join as xt}from"path";import jt from"js-yaml";var Ut="agents.lock",Os=`# This file is generated by Kanonak CLI. Do not edit manually.
+`;function Oe(n){let e=xt(n,Ut);if(!Ns(e))return{version:"1",lastUpdated:new Date().toISOString(),agents:{}};let t=js(e,"utf-8"),o=jt.load(t);return!o||typeof o!="object"||o.version!=="1"?{version:"1",lastUpdated:new Date().toISOString(),agents:{}}:{version:"1",lastUpdated:o.lastUpdated??new Date().toISOString(),agents:o.agents??{}}}function ln(n,e){e.lastUpdated=new Date().toISOString();let t={};for(let a of Object.keys(e.agents).sort())t[a]=e.agents[a];e.agents=t;let o=xt(n,Ut),r=jt.dump(e,{lineWidth:-1,sortKeys:!1,quotingType:'"'});Us(o,Os+r,"utf-8")}var Nt="kanonak.org",Ot="agent-to-agent-file",Fe=class{parser=new zs;objectParser=new Hs;runner=new B;async deploy(e){let{instances:t,allKanonaks:o,repository:r,options:a}=e;if(t.length===0){console.error("No Agent instances to deploy.");return}let{agentsDir:s,format:c,fileExtension:i}=await Ne(a,r),l=await Gs(r,this.objectParser);if(!l){console.error(`Cannot deploy: ${Nt}/${Ot}@1.0.0 is not installed in the workspace or cache.`);return}let u=c==="toml"?"toml":"markdown-with-frontmatter",d=await this.runner.run({transformation:l,instances:t,allKanonaks:o,repository:r,parser:this.parser,objectParser:this.objectParser,outputFormat:u});if(d.length===0){console.error("No agents could be transformed from the package.");return}Ls(s,{recursive:!0});let m=Oe(s),k=t[0].namespace,{publisher:b,package_:f,version:h}=Xs(k);for(let g of d){let w=`${g.fileName}${i}`,$=Le(s,w),v=un($);Bs($,g.content,"utf-8"),m.agents[g.fileName]={publisher:b,package_:f,version:h,resolved:b?`kanonak://${b}/${f}@${h}`:"",integrity:qs(g.content),fileName:w},console.log(`  ${v?"Updated":"Installed"} agent "${g.fileName}" \u2192 ${$}`)}ln(s,m)}async undeploy(e,t){let{repository:o,options:r}=t,{agentsDir:a}=await Ne(r,o),s=Oe(a),c=s.agents[e];c||(console.error(`Agent "${e}" is not installed at ${a}`),process.exit(1));let i=Le(a,c.fileName);un(i)&&Fs(i,{force:!0}),delete s.agents[e],ln(a,s),console.log(`Removed agent "${e}" from ${i}`)}async list(e){let{repository:t,options:o}=e,{agentsDir:r}=await Ne(o,t),a=Oe(r),s=[];for(let[c,i]of Object.entries(a.agents))s.push({name:c,publisher:i.publisher,package_:i.package_,version:i.version,path:Le(r,i.fileName)});if(un(r))try{let c=Ms(r,{withFileTypes:!0});for(let i of c){if(!i.isFile()||i.name==="agents.lock")continue;let l=Le(r,i.name),u=Ws(i.name);if(!a.agents[u]){try{if(!Vs(l).isFile())continue}catch{continue}s.push({name:u,publisher:"",package_:"",version:"",path:l})}}}catch{}return s}};async function Gs(n,e){let t=await n.getDocumentsByNamespaceAsync(Nt,Ot);if(t.length===0)return;let o=new A(t[0],n),r=await e.parseKanonaks(o);return C(r,y.Transformation)[0]}function Ws(n){let e=n.lastIndexOf(".");return e===-1?n:n.substring(0,e)}function Xs(n){if(!n)return{publisher:"",package_:"",version:""};let e=n.indexOf("@");if(e===-1)return{publisher:"",package_:"",version:""};let t=n.substring(0,e),o=n.substring(e+1),r=t.indexOf("/");return r===-1?{publisher:"",package_:"",version:""}:{publisher:t.substring(0,r),package_:t.substring(r+1),version:o}}var ai=Qs(Zs(import.meta.url)),si=JSON.parse(Ys(ei(ai,"..","package.json"),"utf-8")),O=new Js;O.name("kanonak").description("Kanonak Protocol CLI - Validate and resolve Kanonak ontology packages").version(si.version);O.command("validate <path>").description("Validate .kan.yml file(s). Resolves imports via HTTP from publisher domains.").action(async n=>{await gn(n)});O.command("install [package]").description("Install a package and its dependencies, or install all from kanonak.lock.").action(async n=>{await hn(n)});O.command("deps <path>").description("Show resolved dependency tree for a .kan.yml file.").action(async n=>{await yn(n)});O.command("login <publisher>").description("Authenticate with a package publisher using OAuth 2.0.").action(async n=>{await vn(n)});O.command("logout <publisher>").description("Revoke tokens and remove stored credentials for a publisher.").action(async n=>{await Dn(n)});O.addCommand(Nn());O.addCommand(ct());O.addCommand(ft());async function ii(){try{let n=new T,e=new ni,t=new oi,o=ri(t),r=new ti({fetchFn:o}),a=await x(process.cwd(),e),s=new Ie;s.register("kanonak.org/capabilities/agent-skill-deployment",new Ue),s.register("kanonak.org/agent-capabilities/agent-instance-deployment",new Fe);let c=await jn(n,e,a),i=new _e(n,e,r,o,s,a);ht(O,c,i)}catch{}}await ii();O.parse();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kanonak-protocol/cli",
-  "version": "2.1.0",
+  "version": "2.2.0",
   "description": "Kanonak Protocol CLI - Validate and resolve Kanonak ontology packages",
   "type": "module",
   "main": "./dist/index.js",
@@ -24,8 +24,7 @@
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/kanonak-protocol/typescript.git",
-    "directory": "cli"
+    "url": "https://github.com/kanonak-protocol"
   },
   "keywords": [
     "kanonak",
@@ -35,8 +34,8 @@
     "semantic-web"
   ],
   "dependencies": {
-    "@kanonak-protocol/sdk": "^2.1.0",
-    "@kanonak-protocol/types": "^2.1.0",
+    "@kanonak-protocol/sdk": "^2.2.0",
+    "@kanonak-protocol/types": "^2.2.0",
     "commander": "^13.0.0",
     "js-yaml": "^4.1.1"
   },

package/dist/lock/LockFile.d.ts

@@ -1,14 +0,0 @@
-export interface LockEntry {
-    version: string;
-    resolved: string;
-    integrity: string;
-    dependencies: Record<string, string>;
-}
-export interface LockFile {
-    version: string;
-    lastUpdated: string;
-    packages: Record<string, LockEntry>;
-}
-export declare function loadLockFile(): LockFile | null;
-export declare function saveLockFile(lock: LockFile): void;
-export declare function computeIntegrity(content: string): string;