@microwiseai/snapshot 0.9.0 → 0.9.2

package/dist/lib/prerequisites.js.map

@@ -1 +1 @@
-{"version":3,"file":"prerequisites.js","sourceRoot":"","sources":["../../src/lib/prerequisites.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AAC9B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAqBzC;;GAEG;AACH,SAAS,cAAc;IACrB,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;IACtB,IAAI,EAAE,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAC;IACzC,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;QACnB,oBAAoB;QACpB,IAAI,CAAC;YACH,QAAQ,CAAC,eAAe,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC/C,OAAO,WAAW,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC;gBACH,QAAQ,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAC3C,OAAO,WAAW,CAAC;YACrB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,eAAe,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,CAAC;QACH,QAAQ,CAAC,SAAS,GAAG,cAAc,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAmB;IACnD;QACE,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,2CAA2C;QACxD,UAAU,EAAE,CAAC,WAAW,CAAC;QACzB,KAAK,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAC/B,OAAO,EAAE;YACP,WAAW,EAAE,yDAAyD;YACtE,WAAW,EAAE,0BAA0B;YACvC,YAAY,EAAE,mBAAmB;SAClC;QACD,WAAW,EAAE,IAAI;KAClB;IACD;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,sDAAsD;QACnE,UAAU,EAAE,CAAC,kCAAkC,CAAC;QAChD,+EAA+E;QAC/E,gFAAgF;QAChF,8DAA8D;QAC9D,KAAK,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,UAAU,EAAE;QAC9C,OAAO,EAAE;YACP,WAAW,EAAE,sCAAsC;YACnD,WAAW,EAAE,sCAAsC;YACnD,YAAY,EAAE,sCAAsC;SACrD;QACD,WAAW,EAAE,IAAI;KAClB;IACD;QACE,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,6BAA6B;QAC1C,UAAU,EAAE,CAAC,WAAW,CAAC;QACzB,KAAK,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QACjC,OAAO,EAAE;YACP,WAAW,EAAE,0CAA0C;YACvD,WAAW,EAAE,0CAA0C;YACvD,YAAY,EAAE,0CAA0C;SACzD;QACD,WAAW,EAAE,IAAI;KAClB;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,sCAAsC;QACnD,UAAU,EAAE,CAAC,kCAAkC,CAAC;QAChD,yEAAyE;QACzE,0EAA0E;QAC1E,+DAA+D;QAC/D,KAAK,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;QACzB,WAAW,EAAE,KAAK;QAClB,KAAK,EAAE,uCAAuC;KAC/C;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,gBAAgC,qBAAqB;IACtF,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IAErC,OAAO,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,SAAS,EAAE,MAAM,CAAC,KAAK,EAAE;QACzB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,cAAc,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC;KAC/E,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAmB;IACrD,IAAI,MAAM,CAAC,SAAS;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,cAAc;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,gCAAgC,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;IAEtH,IAAI,CAAC;QACH,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACtD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;IAChD,CAAC;AACH,CAAC"}
+{"version":3,"file":"prerequisites.js","sourceRoot":"","sources":["../../src/lib/prerequisites.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AAC9B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAqBzC;;GAEG;AACH,SAAS,cAAc;IACrB,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;IACtB,IAAI,EAAE,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAC;IACzC,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;QACnB,oBAAoB;QACpB,IAAI,CAAC;YACH,QAAQ,CAAC,eAAe,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC/C,OAAO,WAAW,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC;gBACH,QAAQ,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAC3C,OAAO,WAAW,CAAC;YACrB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,eAAe,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;QAC/D,QAAQ,CAAC,GAAG,KAAK,IAAI,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAmB;IACnD;QACE,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,2CAA2C;QACxD,UAAU,EAAE,CAAC,WAAW,CAAC;QACzB,KAAK,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAC/B,OAAO,EAAE;YACP,WAAW,EAAE,yDAAyD;YACtE,WAAW,EAAE,0BAA0B;YACvC,YAAY,EAAE,mBAAmB;SAClC;QACD,WAAW,EAAE,IAAI;KAClB;IACD;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,sDAAsD;QACnE,UAAU,EAAE,CAAC,kCAAkC,CAAC;QAChD,+EAA+E;QAC/E,gFAAgF;QAChF,8DAA8D;QAC9D,KAAK,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,UAAU,EAAE;QAC9C,OAAO,EAAE;YACP,WAAW,EAAE,sCAAsC;YACnD,WAAW,EAAE,sCAAsC;YACnD,YAAY,EAAE,sCAAsC;SACrD;QACD,WAAW,EAAE,IAAI;KAClB;IACD;QACE,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,6BAA6B;QAC1C,UAAU,EAAE,CAAC,WAAW,CAAC;QACzB,KAAK,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QACjC,OAAO,EAAE;YACP,WAAW,EAAE,0CAA0C;YACvD,WAAW,EAAE,0CAA0C;YACvD,YAAY,EAAE,0CAA0C;SACzD;QACD,WAAW,EAAE,IAAI;KAClB;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,sCAAsC;QACnD,UAAU,EAAE,CAAC,kCAAkC,CAAC;QAChD,yEAAyE;QACzE,0EAA0E;QAC1E,+DAA+D;QAC/D,KAAK,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;QACzB,WAAW,EAAE,KAAK;QAClB,KAAK,EAAE,uCAAuC;KAC/C;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,gBAAgC,qBAAqB;IACtF,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IAErC,OAAO,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,SAAS,EAAE,MAAM,CAAC,KAAK,EAAE;QACzB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,cAAc,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC;KAC/E,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAmB;IACrD,IAAI,MAAM,CAAC,SAAS;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,cAAc;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,gCAAgC,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;IAEtH,IAAI,CAAC;QACH,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACtD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;IAChD,CAAC;AACH,CAAC"}

package/dist/lib/proxy-index-refresh.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Ask registry-proxy to rebuild its snapshot index right after a publish
+ * (POST {proxy}/snapshot-index/refresh {snapshot, version}), so a new public
+ * snapshot version is installable immediately instead of after the next
+ * 10-minute cron. Best effort: never throws; the cron remains the backstop.
+ *
+ * The endpoint needs no credentials: the proxy re-reads access-index.json from
+ * GitLab with its own token, so the request only names the version.
+ * Opt out with SNAPSHOT_PUBLISH_REFRESH=0.
+ */
+export type IndexRefreshOutcome = {
+    kind: 'refreshed';
+    status: 'indexed' | 'already-indexed';
+} | {
+    kind: 'not-indexed';
+} | {
+    kind: 'unsupported';
+} | {
+    kind: 'throttled';
+} | {
+    kind: 'no-endpoint';
+} | {
+    kind: 'skipped';
+} | {
+    kind: 'error';
+    reason: string;
+};
+export interface IndexRefreshOptions {
+    proxyUrl: string;
+    fetchFn?: typeof fetch;
+    timeoutMs?: number;
+    env?: NodeJS.ProcessEnv;
+}
+export declare function requestProxyIndexRefresh(snapshot: string, version: string, opts: IndexRefreshOptions): Promise<IndexRefreshOutcome>;
+/** One console line per outcome (no secrets involved). */
+export declare function describeIndexRefresh(o: IndexRefreshOutcome, label: string): {
+    level: 'ok' | 'warn' | 'info';
+    text: string;
+};
+//# sourceMappingURL=proxy-index-refresh.d.ts.map

package/dist/lib/proxy-index-refresh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-index-refresh.d.ts","sourceRoot":"","sources":["../../src/lib/proxy-index-refresh.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,MAAM,mBAAmB,GAC3B;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,SAAS,GAAG,iBAAiB,CAAA;CAAE,GAC5D;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,GACvB;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,GACvB;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,GACrB;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,GACvB;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtC,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB;AAED,wBAAsB,wBAAwB,CAC5C,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,mBAAmB,CAAC,CA2B9B;AAED,0DAA0D;AAC1D,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAiB3H"}

package/dist/lib/proxy-index-refresh.js

@@ -0,0 +1,66 @@
+/**
+ * Ask registry-proxy to rebuild its snapshot index right after a publish
+ * (POST {proxy}/snapshot-index/refresh {snapshot, version}), so a new public
+ * snapshot version is installable immediately instead of after the next
+ * 10-minute cron. Best effort: never throws; the cron remains the backstop.
+ *
+ * The endpoint needs no credentials: the proxy re-reads access-index.json from
+ * GitLab with its own token, so the request only names the version.
+ * Opt out with SNAPSHOT_PUBLISH_REFRESH=0.
+ */
+export async function requestProxyIndexRefresh(snapshot, version, opts) {
+    const env = opts.env ?? process.env;
+    if ((env.SNAPSHOT_PUBLISH_REFRESH ?? '').trim() === '0')
+        return { kind: 'skipped' };
+    const fetchFn = opts.fetchFn ?? fetch;
+    const url = `${opts.proxyUrl.replace(/\/+$/, '')}/snapshot-index/refresh`;
+    try {
+        const res = await fetchFn(url, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ snapshot, version }),
+            signal: AbortSignal.timeout(opts.timeoutMs ?? 30_000),
+        });
+        let status;
+        try {
+            status = (await res.json())?.status;
+        }
+        catch {
+            status = undefined;
+        }
+        if (status === 'indexed' || status === 'already-indexed')
+            return { kind: 'refreshed', status };
+        if (status === 'not-indexed')
+            return { kind: 'not-indexed' };
+        if (status === 'unsupported')
+            return { kind: 'unsupported' };
+        if (status === 'throttled')
+            return { kind: 'throttled' };
+        if (res.status === 404 || res.status === 405)
+            return { kind: 'no-endpoint' };
+        return { kind: 'error', reason: `HTTP ${res.status}` };
+    }
+    catch (error) {
+        return { kind: 'error', reason: error instanceof Error ? error.message : String(error) };
+    }
+}
+/** One console line per outcome (no secrets involved). */
+export function describeIndexRefresh(o, label) {
+    switch (o.kind) {
+        case 'refreshed':
+            return { level: 'ok', text: `registry-proxy index refreshed for ${label} (${o.status}) — installable now` };
+        case 'not-indexed':
+            return { level: 'warn', text: `registry-proxy could not index ${label} yet (access-index not readable); the 10-min cron will retry` };
+        case 'unsupported':
+            return { level: 'warn', text: `${label}: snapshot not in the proxy's SUPPORTED_SNAPSHOTS — its access-index grants nothing` };
+        case 'throttled':
+            return { level: 'info', text: `registry-proxy refresh for ${label} already requested within the last minute` };
+        case 'no-endpoint':
+            return { level: 'info', text: `registry-proxy has no refresh endpoint yet; ${label} becomes installable after the next index rebuild (≤10 min)` };
+        case 'skipped':
+            return { level: 'info', text: 'registry-proxy index refresh skipped (SNAPSHOT_PUBLISH_REFRESH=0)' };
+        case 'error':
+            return { level: 'warn', text: `registry-proxy index refresh failed (${o.reason}); ${label} becomes installable after the next index rebuild (≤10 min)` };
+    }
+}
+//# sourceMappingURL=proxy-index-refresh.js.map

package/dist/lib/proxy-index-refresh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-index-refresh.js","sourceRoot":"","sources":["../../src/lib/proxy-index-refresh.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAkBH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,QAAgB,EAChB,OAAe,EACf,IAAyB;IAEzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,IAAI,CAAC,GAAG,CAAC,wBAAwB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,GAAG;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACpF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;IACtC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,yBAAyB,CAAC;IAC1E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;YAC7B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;YAC3C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;SACtD,CAAC,CAAC;QACH,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAI,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA0B,EAAE,MAAM,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,SAAS,CAAC;QACrB,CAAC;QACD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,iBAAiB;YAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;QAC/F,IAAI,MAAM,KAAK,aAAa;YAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;QAC7D,IAAI,MAAM,KAAK,aAAa;YAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;QAC7D,IAAI,MAAM,KAAK,WAAW;YAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QACzD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;QAC7E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAC3F,CAAC;AACH,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,oBAAoB,CAAC,CAAsB,EAAE,KAAa;IACxE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QACf,KAAK,WAAW;YACd,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,sCAAsC,KAAK,KAAK,CAAC,CAAC,MAAM,qBAAqB,EAAE,CAAC;QAC9G,KAAK,aAAa;YAChB,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,kCAAkC,KAAK,8DAA8D,EAAE,CAAC;QACxI,KAAK,aAAa;YAChB,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,qFAAqF,EAAE,CAAC;QAChI,KAAK,WAAW;YACd,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,8BAA8B,KAAK,2CAA2C,EAAE,CAAC;QACjH,KAAK,aAAa;YAChB,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,+CAA+C,KAAK,6DAA6D,EAAE,CAAC;QACpJ,KAAK,SAAS;YACZ,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,mEAAmE,EAAE,CAAC;QACtG,KAAK,OAAO;YACV,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,wCAAwC,CAAC,CAAC,MAAM,MAAM,KAAK,6DAA6D,EAAE,CAAC;IAC7J,CAAC;AACH,CAAC"}

package/dist/lib/proxy-userconfig.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Temp npm USERCONFIG for registry-proxy installs (replaces ~/.npmrc writes).
+ *
+ * Before 0.9.1, `snapshot install` rewrote ~/.npmrc (proxy scope lines + an
+ * env-referenced auth line) and restored it afterwards. A crash, a kill -9 or a
+ * concurrent npm process could observe or keep the rewritten file.
+ *
+ * Now: the user's current userconfig is only READ. A temp copy (minus our scope
+ * and proxy-auth lines) plus the proxy lines is written to a private temp dir
+ * (dir 0700, file 0600), and NPM_CONFIG_USERCONFIG / npm_config_userconfig in
+ * process.env point at it, so every npm child (spawn/execSync inherit env) and
+ * skit read it. The auth line is an env REFERENCE (`${IST_SESSION_TOKEN}`),
+ * never a token value. cleanup() restores the previous env values and removes
+ * the temp dir; ~/.npmrc is never written.
+ */
+/** Env keys this carrier sets (both spellings — npm reads either). */
+export declare const USERCONFIG_ENV_KEYS: readonly ["NPM_CONFIG_USERCONFIG", "npm_config_userconfig"];
+export interface ProxyUserconfigOptions {
+    /** Scopes routed to the proxy, e.g. ['@ist', '@microwiseai']. */
+    scopes: string[];
+    /** Registry-proxy base URL (e.g. https://registry-proxy.example.dev). */
+    proxyUrl: string;
+    /** Add `//<proxy>/:_authToken=${IST_SESSION_TOKEN}` (authenticated / grant mode). */
+    withAuth: boolean;
+    /** Env to read the prior userconfig from and to set (default process.env). */
+    env?: NodeJS.ProcessEnv;
+    /** Home dir for the default ~/.npmrc (default os.homedir()). */
+    home?: string;
+}
+export interface ProxyUserconfig {
+    /** Temp userconfig path. */
+    path: string;
+    /** Restore the previous env values and remove the temp dir. Idempotent, never throws. */
+    cleanup: () => void;
+}
+/** The userconfig npm would read right now: explicit env override, else ~/.npmrc. */
+export declare function resolveCurrentUserconfigPath(env?: NodeJS.ProcessEnv, home?: string): string;
+/**
+ * Prior userconfig lines (minus our scopes' registry lines and any line for the
+ * proxy host) + one `<scope>:registry=<proxy>/` per scope + optional auth line.
+ */
+export declare function buildProxyUserconfigContent(existing: string | null, scopes: string[], proxyUrl: string, withAuth: boolean): string;
+/** Write the temp userconfig and point the env at it. */
+export declare function activateProxyUserconfig(opts: ProxyUserconfigOptions): ProxyUserconfig;
+//# sourceMappingURL=proxy-userconfig.d.ts.map

package/dist/lib/proxy-userconfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-userconfig.d.ts","sourceRoot":"","sources":["../../src/lib/proxy-userconfig.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAOH,sEAAsE;AACtE,eAAO,MAAM,mBAAmB,6DAA8D,CAAC;AAE/F,MAAM,WAAW,sBAAsB;IACrC,iEAAiE;IACjE,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,yEAAyE;IACzE,QAAQ,EAAE,MAAM,CAAC;IACjB,qFAAqF;IACrF,QAAQ,EAAE,OAAO,CAAC;IAClB,8EAA8E;IAC9E,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,gEAAgE;IAChE,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,4BAA4B;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,yFAAyF;IACzF,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAED,qFAAqF;AACrF,wBAAgB,4BAA4B,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,EAAE,IAAI,GAAE,MAAkB,GAAG,MAAM,CAEnH;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,MAAM,GAAG,IAAI,EACvB,MAAM,EAAE,MAAM,EAAE,EAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,OAAO,GAChB,MAAM,CAeR;AAED,yDAAyD;AACzD,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,sBAAsB,GAAG,eAAe,CAqCrF"}

package/dist/lib/proxy-userconfig.js

@@ -0,0 +1,94 @@
+/**
+ * Temp npm USERCONFIG for registry-proxy installs (replaces ~/.npmrc writes).
+ *
+ * Before 0.9.1, `snapshot install` rewrote ~/.npmrc (proxy scope lines + an
+ * env-referenced auth line) and restored it afterwards. A crash, a kill -9 or a
+ * concurrent npm process could observe or keep the rewritten file.
+ *
+ * Now: the user's current userconfig is only READ. A temp copy (minus our scope
+ * and proxy-auth lines) plus the proxy lines is written to a private temp dir
+ * (dir 0700, file 0600), and NPM_CONFIG_USERCONFIG / npm_config_userconfig in
+ * process.env point at it, so every npm child (spawn/execSync inherit env) and
+ * skit read it. The auth line is an env REFERENCE (`${IST_SESSION_TOKEN}`),
+ * never a token value. cleanup() restores the previous env values and removes
+ * the temp dir; ~/.npmrc is never written.
+ */
+import { existsSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'fs';
+import { homedir, tmpdir } from 'os';
+import { join } from 'path';
+import { SESSION_TOKEN_ENV, proxyAuthKey } from './proxy-auth-globalconfig.js';
+/** Env keys this carrier sets (both spellings — npm reads either). */
+export const USERCONFIG_ENV_KEYS = ['NPM_CONFIG_USERCONFIG', 'npm_config_userconfig'];
+/** The userconfig npm would read right now: explicit env override, else ~/.npmrc. */
+export function resolveCurrentUserconfigPath(env = process.env, home = homedir()) {
+    return env.NPM_CONFIG_USERCONFIG || env.npm_config_userconfig || join(home, '.npmrc');
+}
+/**
+ * Prior userconfig lines (minus our scopes' registry lines and any line for the
+ * proxy host) + one `<scope>:registry=<proxy>/` per scope + optional auth line.
+ */
+export function buildProxyUserconfigContent(existing, scopes, proxyUrl, withAuth) {
+    const base = proxyUrl.trim().replace(/\/+$/, '');
+    const proxyHost = base.replace(/^https?:\/\//i, '');
+    const lines = [];
+    if (existing) {
+        for (const line of existing.split(/\r?\n/)) {
+            if (!line.trim())
+                continue;
+            if (scopes.some((s) => line.includes(`${s}:registry`)))
+                continue;
+            if (line.includes(proxyHost))
+                continue;
+            lines.push(line);
+        }
+    }
+    for (const scope of scopes)
+        lines.push(`${scope}:registry=${base}/`);
+    if (withAuth)
+        lines.push(`${proxyAuthKey(base)}:_authToken=\${${SESSION_TOKEN_ENV}}`);
+    return lines.join('\n') + '\n';
+}
+/** Write the temp userconfig and point the env at it. */
+export function activateProxyUserconfig(opts) {
+    const env = opts.env ?? process.env;
+    const priorPath = resolveCurrentUserconfigPath(env, opts.home ?? homedir());
+    let existing = null;
+    try {
+        if (existsSync(priorPath))
+            existing = readFileSync(priorPath, 'utf-8');
+    }
+    catch {
+        existing = null;
+    }
+    const dir = mkdtempSync(join(tmpdir(), 'snapshot-npmrc-'));
+    const path = join(dir, 'npmrc');
+    writeFileSync(path, buildProxyUserconfigContent(existing, opts.scopes, opts.proxyUrl, opts.withAuth), {
+        encoding: 'utf-8',
+        mode: 0o600,
+    });
+    const previous = USERCONFIG_ENV_KEYS.map((k) => [k, env[k]]);
+    for (const k of USERCONFIG_ENV_KEYS)
+        env[k] = path;
+    let done = false;
+    return {
+        path,
+        cleanup: () => {
+            if (done)
+                return;
+            done = true;
+            for (const [k, v] of previous) {
+                if (v === undefined)
+                    delete env[k];
+                else
+                    env[k] = v;
+            }
+            try {
+                rmSync(dir, { recursive: true, force: true });
+            }
+            catch {
+                /* best effort */
+            }
+        },
+    };
+}
+//# sourceMappingURL=proxy-userconfig.js.map

package/dist/lib/proxy-userconfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-userconfig.js","sourceRoot":"","sources":["../../src/lib/proxy-userconfig.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AAClF,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAE/E,sEAAsE;AACtE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,uBAAuB,EAAE,uBAAuB,CAAU,CAAC;AAsB/F,qFAAqF;AACrF,MAAM,UAAU,4BAA4B,CAAC,MAAyB,OAAO,CAAC,GAAG,EAAE,OAAe,OAAO,EAAE;IACzG,OAAO,GAAG,CAAC,qBAAqB,IAAI,GAAG,CAAC,qBAAqB,IAAI,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACxF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CACzC,QAAuB,EACvB,MAAgB,EAChB,QAAgB,EAChB,QAAiB;IAEjB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IACpD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,QAAQ,EAAE,CAAC;QACb,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,SAAS;YAC3B,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBAAE,SAAS;YACjE,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAAE,SAAS;YACvC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,aAAa,IAAI,GAAG,CAAC,CAAC;IACrE,IAAI,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,kBAAkB,iBAAiB,GAAG,CAAC,CAAC;IACtF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACjC,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,uBAAuB,CAAC,IAA4B;IAClE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,SAAS,GAAG,4BAA4B,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC;IAC5E,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,QAAQ,GAAG,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;IAED,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAChC,aAAa,CAAC,IAAI,EAAE,2BAA2B,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;QACpG,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAU,CAAC,CAAC;IACtE,KAAK,MAAM,CAAC,IAAI,mBAAmB;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAEnD,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,OAAO;QACL,IAAI;QACJ,OAAO,EAAE,GAAG,EAAE;YACZ,IAAI,IAAI;gBAAE,OAAO;YACjB,IAAI,GAAG,IAAI,CAAC;YACZ,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC;gBAC9B,IAAI,CAAC,KAAK,SAAS;oBAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;;oBAC9B,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAClB,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,CAAC;YAAC,MAAM,CAAC;gBACP,iBAAiB;YACnB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/node_modules/@microwiseai/skit/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 주식회사 마이크로아틱 / Microartic Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/node_modules/@microwiseai/skit/README.md

@@ -1,119 +1,152 @@
-# @ist/skit
+# @microwiseai/skit
 
-Session Kit (skit) 패키지를 관리하기 위한 CLI 도구입니다. Claude Code 세션에서 사용할 profiles, prompts, packs 등을 설치하고 관리합니다.
+skit (Session Kit) is a vendor-neutral format and package manager for session kits: it defines the profiles, prompts, permission packs, state, hooks and CLI tools an AI agent session needs for a role, and installs and distributes them as one kit. Adapters apply kits to each agent, so any vendor can use them by providing an adapter; IST is one such adapter, connecting kits to Claude Code, Codex, Cursor and more.
 
-## 설치
+Canonical definition: [docs/DEFINITION.md](docs/DEFINITION.md).
+
+> The CLI command is `skit`; the npm package name is `@microwiseai/skit`.
+
+## Installation
 
 ```bash
-npm install -g @ist/skit
+npm install -g @microwiseai/skit
 ```
 
-**요구 사항**: Node.js >= 18.0.0
+**Requirements**: Node.js >= 18.0.0
+
+## Usage
+
+Run `skit --help` to see the full command list.
 
-## 사용법
+| Command | Alias | Description |
+|---------|-------|-------------|
+| `skit install <pkg>` | `i` | Install a skit package |
+| `skit uninstall <pkg>` | `rm` | Uninstall a skit package |
+| `skit list` | `ls` | List installed skit packages |
+| `skit browse <org>` | | Browse an organization's skit packages |
+| `skit info` | | Show info from the current skit.json |
+| `skit pack` | | Pack the current directory into a .tgz |
+| `skit publish` | `p` | Publish to the GitLab registry |
+| `skit prompt` | | Kit-aware prompt management |
+| `skit orphans` | | Find prompts/profiles not managed by any skit |
+| `skit gitignore` | | Create/update a skit-default .gitignore |
 
-### 패키지 설치
+### Installing packages
 
 ```bash
-# GitLab 레지스트리에서 설치
+# Install from the GitLab registry
 skit install @ist/qa-kit
 
-# 특정 버전 설치
+# Install a specific version
 skit install @ist/qa-kit@1.0.0
 
-# 로컬 .tgz 파일에서 설치
+# Install from a local .tgz file
 skit install ./my-kit-1.0.0.tgz
 
-# 로컬 디렉토리에서 설치 (개발용)
+# Install from a local directory (development)
 skit install .
 
-# 상세 출력
+# Verbose output / dry run
 skit install @ist/qa-kit -v
-
-# 드라이 런 (실제 설치 없이 확인)
 skit install @ist/qa-kit --dry-run
 ```
 
-### 패키지 삭제
+### Global dependencies (`--deps`)
 
-```bash
-skit uninstall @ist/qa-kit
-# 또는
-skit rm @ist/qa-kit
-```
+A kit's `dependencies.npm` and `components.clis` are installed globally. Before
+installing, `skit install` prints a plan, and `--deps` controls what it does:
 
-### 설치된 패키지 목록
+| Mode | Behavior |
+|------|----------|
+| `satisfied` (default) | Keep an installed global version that satisfies the declared range (semver, prereleases count). Install deps that are missing or out of range. |
+| `missing` | Keep **any** installed version, even a prerelease or one outside the range. Install only absent deps (useful on a dev machine). |
+| `all` | Reinstall every dep regardless of what is installed (the behavior up to 0.1.43). |
+| `none` | Install no global deps; only profiles, prompts, states, packs and hooks are installed. Same as `--no-deps`. |
 
 ```bash
-skit list
-# 또는
-skit ls
-
-# JSON 형식 출력
-skit list --json
+skit install @ist/tda-kit                        # default: --deps satisfied
+skit install @ist/tda-kit --deps missing         # keep my dev builds
+skit install @ist/tda-kit --skip-dep @ist/sesh   # never touch sesh (repeatable; CLI names work too)
+skit install @ist/tda-kit --no-deps              # components only
+skit install @ist/tda-kit --dry-run              # components + dep plan, nothing installed
 ```
 
-### 패키지 탐색
-
-```bash
-# 특정 조직의 skit 패키지 목록 조회
-skit browse @ist
+Example plan:
 
-# JSON 형식 출력
-skit browse @ist --json
+```
+global deps (mode: satisfied):
+  = @ist/tda            0.1.8                    ^0.1.8   keep (satisfies) (newer in range: 0.1.9 — use --deps all)
+  ~ @ist/sesh           0.9.0-dev.1790427711543  ^0.8.2   CHANGE 0.9.0-dev.1790427711543 → ^0.8.2  ⚠ downgrade, prerelease → stable
+  + @ist/loggable-cli   (absent)                 ^0.1.17  install
+  - @ist/messenger-cli  0.4.0                    ^0.5.0   skip (--skip-dep)
+  ⚠ @ist/sesh: 0.9.0-dev.1790427711543 would be replaced by ^0.8.2 — use --deps missing or --skip-dep @ist/sesh to keep it
 ```
 
-### 패키지 정보
+- To detect installed versions, skit runs `npm root -g` once and reads `<root>/<name>/package.json`. It does not spawn npm once per dependency.
+- When a change is a **downgrade** or replaces a **prerelease with a stable** version, an interactive terminal asks y/N for each such dep. The default N keeps the installed version. Non-TTY runs and `--yes` only print the warning.
+- `--dry-run` fetches a remote kit into a temporary staging directory to read its `skit.json`. Dry-run is the only time skit queries the registry for the `newer in range` hint.
 
-```bash
-# 현재 디렉토리의 skit.json 정보 표시
-skit info
+### Uninstall / list / browse / info
 
-# JSON 형식 출력
+```bash
+skit uninstall @ist/qa-kit        # or: skit rm @ist/qa-kit
+skit list                         # or: skit ls
+skit list --json
+skit browse @ist                  # list an org's skit packages
+skit browse @ist --json
+skit info                         # show the current skit.json info
 skit info --json
 ```
 
-### 패키지 패킹
-
-```bash
-# 현재 디렉토리를 .tgz 파일로 패킹
-skit pack
+### Prompt management
 
-# 출력 디렉토리 지정
-skit pack -o ./dist
+Browse and print the prompts provided by installed kits directly with `skit` (no need to go through `sesh`).
 
-# 포함될 파일 확인 (드라이 런)
-skit pack --dry-run
+```bash
+# List prompts (grouped by kit)
+skit prompt list                  # or: skit prompt ls
+skit prompt list --json
+skit prompt list -a               # all scopes (global + profile) + unmanaged
+skit prompt list -p <profile>     # a specific profile scope
+
+# Print prompt content
+skit prompt show <name>
+skit prompt show <name> --raw        # raw content without the kit header
+skit prompt show <name> -p <profile> # from a specific profile scope
 ```
 
-### 패키지 배포
+### Orphans (cleaning up unmanaged files)
 
 ```bash
-# GitLab에 배포
-skit publish
-# 또는
-skit p
+skit orphans                      # find unmanaged prompts/profiles
+skit orphans --json
+skit orphans --dry-run            # show what would be deleted
+skit orphans -i                   # interactively select files to delete
+skit orphans --clean --force      # delete all without confirmation
+```
 
-# 버전 범프와 함께 배포
-skit publish --bump patch   # 0.1.0 → 0.1.1
-skit publish --bump minor   # 0.1.0 → 0.2.0
-skit publish --bump major   # 0.1.0 → 1.0.0
+### Pack / publish
 
-# 드라이 런
+```bash
+skit pack                         # pack into a .tgz
+skit pack -o ./dist               # set output directory
+skit pack --dry-run               # preview included files
+
+skit publish                      # publish to GitLab (alias: skit p)
+skit publish --bump patch         # 0.1.0 -> 0.1.1
+skit publish --bump minor         # 0.1.0 -> 0.2.0
+skit publish --bump major         # 0.1.0 -> 1.0.0
 skit publish --dry-run
 ```
 
-### .gitignore 생성
+### Generating .gitignore
 
 ```bash
-# skit 기본 .gitignore 생성/업데이트
-skit gitignore
-
-# 기존 파일 덮어쓰기
-skit gitignore -f
+skit gitignore                    # create/update a skit-default .gitignore
+skit gitignore -f                 # overwrite the existing file
 ```
 
-## skit.json 구조
+## skit.json structure
 
 ```json
 {
@@ -127,7 +160,7 @@ skit gitignore -f
     "cli": [
       {
         "name": "git-nested",
-        "install": "gitlab-install add @microature/git-nested -g",
+        "install": "glpkg install @microature/git-nested -g",
         "check": "git-nested --version",
         "optional": true
       }
@@ -159,46 +192,57 @@ skit gitignore -f
 }
 ```
 
-### dependencies 필드
+### `dependencies` field
 
-| 필드 | 설명 |
-|------|------|
-| `cli` | CLI 도구 의존성 (gitlab-install, npm, pip 등 어떤 패키지 매니저든 가능) |
-| `cli[].name` | 도구 이름 (표시용) |
-| `cli[].install` | 설치 명령어 |
-| `cli[].check` | (선택) 설치 확인 명령어 - 성공하면 설치 스킵 |
-| `cli[].optional` | (선택) true면 설치 실패해도 계속 진행 |
-| `skit` | 다른 skit 패키지 의존성
-```
+| Field | Description |
+|-------|-------------|
+| `cli` | CLI tool dependencies (any package manager: glpkg, npm, pip, etc.) |
+| `cli[].name` | Tool name (for display) |
+| `cli[].install` | Install command |
+| `cli[].check` | (optional) Check command — skips install if it succeeds |
+| `cli[].optional` | (optional) If true, continue even if install fails |
+| `skit` | Other skit package dependencies |
 
-## 기본 설치 경로
+## Default install paths
 
-| 컴포넌트 타입 | 기본 경로 |
-|--------------|----------|
+| Component type | Default path |
+|----------------|--------------|
 | profiles | `~/.ist/profiles/` |
 | prompts | `~/.ist/prompts/global/` |
 | states | `~/.ist/state/profiles/` |
-| packs | `~/.sesh/permission-packs.json` (병합) |
+| packs | `~/.sesh/permission-packs.json` (merged) |
 
-## 개발
+## Using as a library
 
-```bash
-# 의존성 설치
-npm install
+```ts
+import { /* ... */ } from "@microwiseai/skit/lib";
+```
 
-# TypeScript 컴파일
-npm run build
+```ts
+import { installSkit } from "@microwiseai/skit/lib";
 
-# 개발 모드 (watch)
-npm run dev
+const result = await installSkit("@ist/tda-kit", {
+  deps: "missing",            // 'satisfied' (default) | 'missing' | 'all' | 'none'
+  skipDeps: ["@ist/sesh"],
+  // skipDependencies: true   // deprecated alias for deps: 'none'
+  confirmChange: (entry) => false, // optional: decline risky (downgrade / prerelease→stable) changes
+});
+result.depPlan; // [{ name, range, installed?, action: 'keep'|'install'|'change'|'skip', reason, kind, warnings? }]
+```
+
+- `main`: `./dist/lib.js`
+- `exports`: `.` (CLI entry), `./lib` (library entry)
 
-# 테스트 실행
-npm test
+## Development
 
-# 테스트 단일 실행
-npm run test:run
+```bash
+npm install        # install dependencies
+npm run build      # compile TypeScript
+npm run dev        # watch mode
+npm test           # run tests (vitest)
+npm run test:run   # run tests once
 ```
 
-## 라이선스
+## License
 
 MIT

package/node_modules/@microwiseai/skit/dist/__tests__/setup/hermetic-config.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=hermetic-config.d.ts.map

package/node_modules/@microwiseai/skit/dist/__tests__/setup/hermetic-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hermetic-config.d.ts","sourceRoot":"","sources":["../../../src/__tests__/setup/hermetic-config.ts"],"names":[],"mappings":""}