@monoes/monomindcli 2.15.7 → 2.16.1

package/dist/src/catalog/digest.js

@@ -0,0 +1,62 @@
+import { createHash } from 'node:crypto';
+import { lstatSync, readdirSync, readFileSync, realpathSync } from 'node:fs';
+import { join, relative, sep } from 'node:path';
+export const catalogDir = (root) => join(root, '.monomind', 'catalog');
+export const packagesDir = (root) => join(catalogDir(root), 'packages');
+function files(dir, prefix = '') {
+    const out = [];
+    for (const e of readdirSync(join(dir, prefix), { withFileTypes: true })) {
+        const rel = prefix ? `${prefix}/${e.name}` : e.name;
+        if (e.isSymbolicLink())
+            throw new Error(`symlink in package: ${rel}`);
+        if (e.isDirectory())
+            out.push(...files(dir, rel));
+        else if (e.isFile())
+            out.push(rel);
+    }
+    return out;
+}
+/** sha256 over (u32 pathLen, path, u64 byteLen, bytes) for every file, paths sorted by code unit. */
+export function packageDigest(dir) {
+    const h = createHash('sha256');
+    for (const rel of files(dir).sort()) {
+        const bytes = readFileSync(join(dir, rel));
+        const p = Buffer.from(rel, 'utf8');
+        const lens = Buffer.alloc(12);
+        lens.writeUInt32BE(p.length, 0);
+        lens.writeBigUInt64BE(BigInt(bytes.length), 4);
+        h.update(lens.subarray(0, 4)).update(p).update(lens.subarray(4)).update(bytes);
+    }
+    return h.digest('hex');
+}
+/** `<packages>/<name>/<sha12>`, proven to stay inside the store after realpath. */
+export function resolvePackageDir(root, entry) {
+    const store = realpathSync(packagesDir(root));
+    const name = entry.id.split(':')[1] ?? '';
+    const dir = realpathSync(join(store, name, entry.sha256.slice(0, 12)));
+    const rel = relative(store, dir);
+    if (rel.startsWith('..') || rel.includes(`..${sep}`) || lstatSync(dir).isSymbolicLink())
+        throw new Error(`package path escapes the store: ${entry.id}`);
+    return dir;
+}
+export function verifyEntry(root, entry) {
+    let dir;
+    try {
+        dir = resolvePackageDir(root, entry);
+    }
+    catch (e) {
+        return {
+            ok: false,
+            reason: String(e).includes('escapes') ? 'escaping-path' : 'missing-package',
+        };
+    }
+    try {
+        return packageDigest(dir) === entry.sha256
+            ? { ok: true, dir }
+            : { ok: false, reason: 'digest-mismatch' };
+    }
+    catch {
+        return { ok: false, reason: 'digest-mismatch' };
+    }
+}
+//# sourceMappingURL=digest.js.map

package/dist/src/catalog/digest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"digest.js","sourceRoot":"","sources":["../../../src/catalog/digest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAGhD,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;AACvF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC;AAExF,SAAS,KAAK,CAAC,GAAW,EAAE,MAAM,GAAG,EAAE;IACrC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACxE,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACpD,IAAI,CAAC,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;QACtE,IAAI,CAAC,CAAC,WAAW,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;aAC7C,IAAI,CAAC,CAAC,MAAM,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/C,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,iBAAiB,CAC/B,IAAY,EACZ,KAA0C;IAE1C,MAAM,KAAK,GAAG,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACvE,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACjC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE;QACrF,MAAM,IAAI,KAAK,CAAC,mCAAmC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IACjE,OAAO,GAAG,CAAC;AACb,CAAC;AAMD,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,KAA0C;IAClF,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,iBAAiB;SAC5E,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,OAAO,aAAa,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,MAAM;YACxC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE;YACnB,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAClD,CAAC;AACH,CAAC"}

package/dist/src/catalog/frontmatter.d.ts

@@ -0,0 +1,23 @@
+/** The only top-level frontmatter keys a catalog SKILL.md may carry. */
+export declare const ALLOWED_FRONTMATTER_KEYS: readonly ['name', 'description', 'tags', 'tools', 'license'];
+/**
+ * Problems that keep `text` from being a canonical catalog SKILL.md: no
+ * frontmatter, a key outside the allow-list, any line that is not a
+ * single-line `key: value` (indented, flow-mapping, anchor, alias, tag or
+ * block-scalar forms, or a value holding a U+2028/U+2029), or a `---`
+ * anywhere in a line — Claude Code ends the frontmatter at the first `---`,
+ * even mid-value, and would read the rest as body. Staging refuses what
+ * `sanitizeFrontmatter` produces unless this is empty.
+ */
+export declare function frontmatterViolations(text: string): string[];
+/**
+ * Rewrites the frontmatter of `text` to the allow-listed keys, one line each
+ * (strings JSON-quoted, lists as JSON arrays of plain tokens), keeping the
+ * body byte-for-byte. `removed` names the dropped keys. Text without
+ * frontmatter is returned unchanged (inspection then refuses it).
+ */
+export declare function sanitizeFrontmatter(text: string): {
+    text: string;
+    removed: string[];
+};
+//# sourceMappingURL=frontmatter.d.ts.map

package/dist/src/catalog/frontmatter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"frontmatter.d.ts","sourceRoot":"","sources":["../../../src/catalog/frontmatter.ts"],"names":[],"mappings":"AAQA,wEAAwE;AACxE,eAAO,MAAM,wBAAwB,YACnC,MAAM,EACN,aAAa,EACb,MAAM,EACN,OAAO,EACP,SAAS,CACD,CAAC;AAOX;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAc5D;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAqBrF"}

package/dist/src/catalog/frontmatter.js

@@ -0,0 +1,80 @@
+/**
+ * SKILL.md frontmatter allow-list. Platforms read execution config from the
+ * frontmatter (`hooks`, `allowed-tools`, `model`, `context`, `agent`, …), so
+ * staging rewrites it to the keys below before the package is hashed, and
+ * projection re-checks the stored bytes with `frontmatterViolations`.
+ */
+import { parseFrontmatter } from '../orgrt/skill-library.js';
+/** The only top-level frontmatter keys a catalog SKILL.md may carry. */
+export const ALLOWED_FRONTMATTER_KEYS = [
+    'name',
+    'description',
+    'tags',
+    'tools',
+    'license',
+];
+const FRONTMATTER_RE = /^---\r?\n([\s\S]*?)\r?\n---\r?\n?/;
+const LIST_ITEM_RE = /^[A-Za-z0-9_.:/-]+$/;
+const PLAIN_NAME_RE = /^[a-z0-9][a-z0-9-]*$/;
+const ALLOWED = ALLOWED_FRONTMATTER_KEYS;
+/**
+ * Problems that keep `text` from being a canonical catalog SKILL.md: no
+ * frontmatter, a key outside the allow-list, any line that is not a
+ * single-line `key: value` (indented, flow-mapping, anchor, alias, tag or
+ * block-scalar forms, or a value holding a U+2028/U+2029), or a `---`
+ * anywhere in a line — Claude Code ends the frontmatter at the first `---`,
+ * even mid-value, and would read the rest as body. Staging refuses what
+ * `sanitizeFrontmatter` produces unless this is empty.
+ */
+export function frontmatterViolations(text) {
+    const m = FRONTMATTER_RE.exec(text);
+    if (!m)
+        return ['SKILL.md has no frontmatter'];
+    const out = [];
+    m[1].split(/\r?\n/).forEach((line, i) => {
+        if (line.trim() === '')
+            return;
+        if (line.includes('---'))
+            return void out.push(`frontmatter line ${i + 1} contains "---"`);
+        const kv = /^([A-Za-z_][\w-]*):(?: (.*))?$/.exec(line);
+        if (!kv)
+            out.push(`frontmatter line ${i + 1} is not a single-line key: value`);
+        else if (!ALLOWED.includes(kv[1]))
+            out.push(`frontmatter key "${kv[1]}" is not allowed`);
+        else if (/^[{&*!|>]/.test(kv[2] ?? ''))
+            out.push(`frontmatter key "${kv[1]}" has a non-scalar value`);
+    });
+    return out;
+}
+/**
+ * Rewrites the frontmatter of `text` to the allow-listed keys, one line each
+ * (strings JSON-quoted, lists as JSON arrays of plain tokens), keeping the
+ * body byte-for-byte. `removed` names the dropped keys. Text without
+ * frontmatter is returned unchanged (inspection then refuses it).
+ */
+export function sanitizeFrontmatter(text) {
+    const m = FRONTMATTER_RE.exec(text);
+    if (!m)
+        return { text, removed: [] };
+    const { data, body } = parseFrontmatter(text);
+    const topLevel = m[1].split(/\r?\n/).filter((l) => /^[^\s#]/.test(l));
+    const keys = topLevel.map((l) => l.split(':')[0].trim().slice(0, 40));
+    const removed = [...new Set(keys.filter((k) => !ALLOWED.includes(k)))];
+    const q = JSON.stringify;
+    const str = (v) => (Array.isArray(v) ? v.join(' ') : v);
+    const list = (v) => (Array.isArray(v) ? v : v.split(/[,\s]+/)).filter((s) => LIST_ITEM_RE.test(s));
+    const lines = [];
+    for (const key of ALLOWED_FRONTMATTER_KEYS) {
+        const v = data[key];
+        if (v === undefined)
+            continue;
+        if (key === 'tags' || key === 'tools')
+            lines.push(`${key}: ${q(list(v))}`);
+        else if (key === 'name' && typeof v === 'string' && PLAIN_NAME_RE.test(v))
+            lines.push(`name: ${v}`);
+        else
+            lines.push(`${key}: ${q(str(v))}`);
+    }
+    return { text: ['---', ...lines, '---', ''].join('\n') + body, removed };
+}
+//# sourceMappingURL=frontmatter.js.map

package/dist/src/catalog/frontmatter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frontmatter.js","sourceRoot":"","sources":["../../../src/catalog/frontmatter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAE7D,wEAAwE;AACxE,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,MAAM;IACN,aAAa;IACb,MAAM;IACN,OAAO;IACP,SAAS;CACD,CAAC;AAEX,MAAM,cAAc,GAAG,mCAAmC,CAAC;AAC3D,MAAM,YAAY,GAAG,qBAAqB,CAAC;AAC3C,MAAM,aAAa,GAAG,sBAAsB,CAAC;AAC7C,MAAM,OAAO,GAAsB,wBAAwB,CAAC;AAE5D;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,CAAC;QAAE,OAAO,CAAC,6BAA6B,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QACtC,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO;QAC/B,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC3F,MAAM,EAAE,GAAG,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,CAAC,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;aAC1E,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;aACpF,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACpC,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACrC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;IACzB,MAAM,GAAG,GAAG,CAAC,CAAoB,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,IAAI,GAAG,CAAC,CAAoB,EAAE,EAAE,CACpC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACjF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,wBAAwB,EAAE,CAAC;QAC3C,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACpB,IAAI,CAAC,KAAK,SAAS;YAAE,SAAS;QAC9B,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;aACtE,IAAI,GAAG,KAAK,MAAM,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;YACvE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;;YACtB,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3E,CAAC"}

package/dist/src/catalog/lifecycle.d.ts

@@ -0,0 +1,31 @@
+import { type CatalogEntry, type CatalogStatus } from './types.js';
+export interface LifecycleOptions {
+    /** Self-asserted provenance, recorded in history. */
+    actor: string;
+    reason?: string;
+    now?: string;
+}
+export interface ApproveOptions extends LifecycleOptions {
+    targets: string[];
+    /** Tools to grant; must be requested by the skill and in CATALOG_GRANTABLE_TOOLS. */
+    grant?: string[];
+    replacesLegacy?: boolean;
+}
+export interface LifecycleResult {
+    id: string;
+    before: CatalogStatus;
+    after: CatalogStatus;
+    entry: CatalogEntry;
+}
+/** staged → approved, recording targets, grants and legacy replacement. */
+export declare function approve(root: string, id: string, opts: ApproveOptions): LifecycleResult;
+/** approved or disabled → active; the package digest must verify. */
+export declare const activate: (root: string, id: string, opts: LifecycleOptions) => LifecycleResult;
+export declare const disable: (root: string, id: string, opts: LifecycleOptions) => LifecycleResult;
+/** staged, active or disabled → quarantined; needs a reason. */
+export declare const quarantine: (root: string, id: string, opts: LifecycleOptions) => LifecycleResult;
+/** quarantined → staged; needs a reason and records `inspection.override`. */
+export declare const release: (root: string, id: string, opts: LifecycleOptions) => LifecycleResult;
+/** Any status but revoked → revoked (terminal); needs a reason. */
+export declare const revoke: (root: string, id: string, opts: LifecycleOptions) => LifecycleResult;
+//# sourceMappingURL=lifecycle.d.ts.map

package/dist/src/catalog/lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle.d.ts","sourceRoot":"","sources":["../../../src/catalog/lifecycle.ts"],"names":[],"mappings":"AAMA,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,aAAa,EAGnB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,gBAAgB;IAC/B,qDAAqD;IACrD,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,cAAe,SAAQ,gBAAgB;IACtD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,qFAAqF;IACrF,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,aAAa,CAAC;IACtB,KAAK,EAAE,aAAa,CAAC;IACrB,KAAK,EAAE,YAAY,CAAC;CACrB;AA4DD,2EAA2E;AAC3E,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,eAAe,CAcvF;AAED,qEAAqE;AACrE,eAAO,MAAM,QAAQ,SAAU,MAAM,MAAM,MAAM,QAAQ,gBAAgB,KAAG,eAC5C,CAAC;AAEjC,eAAO,MAAM,OAAO,SAAU,MAAM,MAAM,MAAM,QAAQ,gBAAgB,KAAG,eACzC,CAAC;AAEnC,gEAAgE;AAChE,eAAO,MAAM,UAAU,SAAU,MAAM,MAAM,MAAM,QAAQ,gBAAgB,KAAG,eACzC,CAAC;AAEtC,8EAA8E;AAC9E,eAAO,MAAM,OAAO,SAAU,MAAM,MAAM,MAAM,QAAQ,gBAAgB,KAAG,eAC3C,CAAC;AAEjC,mEAAmE;AACnE,eAAO,MAAM,MAAM,SAAU,MAAM,MAAM,MAAM,QAAQ,gBAAgB,KAAG,eACzC,CAAC"}

package/dist/src/catalog/lifecycle.js

@@ -0,0 +1,78 @@
+/**
+ * The mutating lifecycle verbs behind `monomind catalog approve|activate|
+ * disable|quarantine|release|revoke`. Each runs one `transition` under the
+ * catalog lock; `approve` also records targets and tool grants.
+ */
+import { CatalogStateError, mutateCatalogState, transition } from './state.js';
+import { CATALOG_GRANTABLE_TOOLS, CatalogTargetSchema, } from './types.js';
+const GRANTABLE = CATALOG_GRANTABLE_TOOLS;
+function move(root, id, to, opts, prepare) {
+    let before;
+    let entry;
+    const now = opts.now ?? new Date().toISOString();
+    mutateCatalogState(root, (state) => {
+        const cur = state.entries.find((e) => e.id === id);
+        if (!cur)
+            throw new CatalogStateError(`no catalog entry ${id}`);
+        before = cur.status;
+        const prepared = prepare ? prepare(cur) : cur;
+        const staged = { ...state, entries: state.entries.map((e) => (e.id === id ? prepared : e)) };
+        const next = transition(staged, id, to, { actor: opts.actor, now, reason: opts.reason, root });
+        entry = next.entries.find((e) => e.id === id);
+        return next;
+    });
+    return { id, before: before, after: to, entry: entry };
+}
+function checkTargets(raw, kind) {
+    if (raw.length === 0)
+        throw new CatalogStateError('approve needs at least one --target');
+    const targets = raw.map((t) => {
+        const p = CatalogTargetSchema.safeParse(t);
+        if (!p.success)
+            throw new CatalogStateError(`unknown target "${t}" — use ${CatalogTargetSchema.options.join(', ')}`);
+        return p.data;
+    });
+    if (new Set(targets).size !== targets.length)
+        throw new CatalogStateError('duplicate --target');
+    if (targets.includes('jev') && !targets.includes('org'))
+        throw new CatalogStateError('the jev target requires the org target');
+    const platform = targets.find((t) => t.startsWith('platform:'));
+    if (platform && kind !== 'skill')
+        throw new CatalogStateError(`only skills can be projected; ${kind} cannot target ${platform}`);
+    return targets;
+}
+function checkGrants(e, grant) {
+    if (grant.length && e.kind !== 'skill')
+        throw new CatalogStateError('only skills take tool grants');
+    for (const t of grant) {
+        if (!GRANTABLE.includes(t))
+            throw new CatalogStateError(`"${t}" is not grantable — grantable tools: ${CATALOG_GRANTABLE_TOOLS.join(', ')}`);
+        if (!e.inspection.requestedTools.includes(t))
+            throw new CatalogStateError(`"${t}" is not requested by ${e.id}`);
+    }
+    return [...new Set(grant)].sort();
+}
+/** staged → approved, recording targets, grants and legacy replacement. */
+export function approve(root, id, opts) {
+    return move(root, id, 'approved', opts, (e) => {
+        const targets = checkTargets(opts.targets, e.kind);
+        if (e.inspection.verdict === 'quarantine' && !e.inspection.override)
+            throw new CatalogStateError(`${id} has a quarantine inspection verdict; release it first (catalog release)`);
+        return {
+            ...e,
+            targets,
+            grantedTools: checkGrants(e, opts.grant ?? []),
+            replacesLegacy: opts.replacesLegacy === true,
+        };
+    });
+}
+/** approved or disabled → active; the package digest must verify. */
+export const activate = (root, id, opts) => move(root, id, 'active', opts);
+export const disable = (root, id, opts) => move(root, id, 'disabled', opts);
+/** staged, active or disabled → quarantined; needs a reason. */
+export const quarantine = (root, id, opts) => move(root, id, 'quarantined', opts);
+/** quarantined → staged; needs a reason and records `inspection.override`. */
+export const release = (root, id, opts) => move(root, id, 'staged', opts);
+/** Any status but revoked → revoked (terminal); needs a reason. */
+export const revoke = (root, id, opts) => move(root, id, 'revoked', opts);
+//# sourceMappingURL=lifecycle.js.map

package/dist/src/catalog/lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle.js","sourceRoot":"","sources":["../../../src/catalog/lifecycle.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC/E,OAAO,EACL,uBAAuB,EAIvB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AAuBpB,MAAM,SAAS,GAAsB,uBAAuB,CAAC;AAE7D,SAAS,IAAI,CACX,IAAY,EACZ,EAAU,EACV,EAAiB,EACjB,IAAsB,EACtB,OAA2C;IAE3C,IAAI,MAAiC,CAAC;IACtC,IAAI,KAA+B,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACjD,kBAAkB,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;QACjC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,iBAAiB,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;QAChE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QACpB,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC9C,MAAM,MAAM,GAAG,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/F,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,MAAuB,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,KAAqB,EAAE,CAAC;AAC1F,CAAC;AAED,SAAS,YAAY,CAAC,GAAa,EAAE,IAA0B;IAC7D,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,iBAAiB,CAAC,qCAAqC,CAAC,CAAC;IACzF,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC5B,MAAM,CAAC,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,CAAC,CAAC,OAAO;YACZ,MAAM,IAAI,iBAAiB,CACzB,mBAAmB,CAAC,WAAW,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACxE,CAAC;QACJ,OAAO,CAAC,CAAC,IAAI,CAAC;IAChB,CAAC,CAAC,CAAC;IACH,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM;QAAE,MAAM,IAAI,iBAAiB,CAAC,oBAAoB,CAAC,CAAC;IAChG,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;QACrD,MAAM,IAAI,iBAAiB,CAAC,wCAAwC,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC;IAChE,IAAI,QAAQ,IAAI,IAAI,KAAK,OAAO;QAC9B,MAAM,IAAI,iBAAiB,CAAC,iCAAiC,IAAI,kBAAkB,QAAQ,EAAE,CAAC,CAAC;IACjG,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,WAAW,CAAC,CAAe,EAAE,KAAe;IACnD,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;QACpC,MAAM,IAAI,iBAAiB,CAAC,8BAA8B,CAAC,CAAC;IAC9D,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;YACxB,MAAM,IAAI,iBAAiB,CACzB,IAAI,CAAC,yCAAyC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACnF,CAAC;QACJ,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC1C,MAAM,IAAI,iBAAiB,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAkC,CAAC;AACpE,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,EAAU,EAAE,IAAoB;IACpE,OAAO,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE;QAC5C,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,CAAC,UAAU,CAAC,OAAO,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ;YACjE,MAAM,IAAI,iBAAiB,CACzB,GAAG,EAAE,0EAA0E,CAChF,CAAC;QACJ,OAAO;YACL,GAAG,CAAC;YACJ,OAAO;YACP,YAAY,EAAE,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9C,cAAc,EAAE,IAAI,CAAC,cAAc,KAAK,IAAI;SAC7C,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,qEAAqE;AACrE,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,EAAU,EAAE,IAAsB,EAAmB,EAAE,CAC5F,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;AAEjC,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,EAAU,EAAE,IAAsB,EAAmB,EAAE,CAC3F,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;AAEnC,gEAAgE;AAChE,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,EAAU,EAAE,IAAsB,EAAmB,EAAE,CAC9F,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC;AAEtC,8EAA8E;AAC9E,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,EAAU,EAAE,IAAsB,EAAmB,EAAE,CAC3F,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;AAEjC,mEAAmE;AACnE,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAU,EAAE,IAAsB,EAAmB,EAAE,CAC1F,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC"}

package/dist/src/catalog/projection.d.ts

@@ -0,0 +1,57 @@
+import type { ArtifactIntent } from '../platform-adapters/types.js';
+import { type CatalogAsset } from './snapshot.js';
+export type ProjectionSurface = 'platform:claude' | 'platform:agents';
+export declare const PROJECTION_SURFACES: readonly ProjectionSurface[];
+export interface ProjectedPackage {
+    id: string;
+    sha256: string;
+    paths: string[];
+}
+export interface ProjectionRemoval {
+    id: string;
+    /** Package directory relative to the surface's skill root. */
+    dir: string;
+    marker: string;
+    /** Files of a re-projected package to leave alone; only the rest are removed. */
+    keep?: string[];
+}
+export interface ProjectionPlan {
+    surface: ProjectionSurface;
+    intents: ArtifactIntent[];
+    packages: ProjectedPackage[];
+    removals: ProjectionRemoval[];
+    diagnostics: string[];
+}
+export interface ProjectionResult extends ProjectionPlan {
+    dryRun: boolean;
+    changed: string[];
+    skipped: string[];
+    /** Where each changed file's previous content was backed up. */
+    backupDir: string;
+    /** The skill registry rebuilt after the apply, when there was one to rebuild. */
+    registry?: string;
+}
+export interface ProjectionOptions {
+    /** Plan only the removal of this id's package; project nothing. */
+    unproject?: string;
+}
+export declare const catalogMarker: (name: string) => string;
+/** The first body line of a projected SKILL.md; `jev:` is read by build-skill-registry.cjs. */
+export declare const catalogMarkerLine: (a: Pick<CatalogAsset, 'id' | 'sha256' | 'targets'>) => string;
+/**
+ * Surfaces that still hold a projected copy of catalog skill `id` (a marked
+ * package dir reached without following a link). Read-only; disable/revoke use
+ * it to point at the `project --apply` that removes the copy.
+ */
+export declare function projectedSurfaces(root: string, id: string): ProjectionSurface[];
+/** Read-only plan: what `applyProjection` would write and remove. */
+export declare function planProjection(root: string, surface: ProjectionSurface, opts?: ProjectionOptions): Promise<ProjectionPlan>;
+/**
+ * Plans and applies in one transaction under the platform mutation lock. A dry
+ * run takes the same path with `dryRun` set (no lock, no writes), so its
+ * `changed` list is the prediction.
+ */
+export declare function applyProjection(root: string, surface: ProjectionSurface, opts: ProjectionOptions & {
+    dryRun: boolean;
+}): Promise<ProjectionResult>;
+//# sourceMappingURL=projection.d.ts.map

package/dist/src/catalog/projection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection.d.ts","sourceRoot":"","sources":["../../../src/catalog/projection.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,cAAc,EAA8B,MAAM,+BAA+B,CAAC;AAIhG,OAAO,EAAiB,KAAK,YAAY,EAAY,MAAM,eAAe,CAAC;AAG3E,MAAM,MAAM,iBAAiB,GAAG,iBAAiB,GAAG,iBAAiB,CAAC;AACtE,eAAO,MAAM,mBAAmB,EAAE,SAAS,iBAAiB,EAG3D,CAAC;AAQF,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,8DAA8D;IAC9D,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,iFAAiF;IACjF,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,iBAAiB,CAAC;IAC3B,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAC9B,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,gBAAiB,SAAQ,cAAc;IACtD,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,gEAAgE;IAChE,SAAS,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,eAAO,MAAM,aAAa,SAAU,MAAM,KAAG,MAAiC,CAAC;AAE/E,+FAA+F;AAC/F,eAAO,MAAM,iBAAiB,MAAO,IAAI,CAAC,YAAY,EAAE,IAAI,GAAG,QAAQ,GAAG,SAAS,CAAC,KAAG,MACQ,CAAC;AA4KhG;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAU/E;AAED,qEAAqE;AACrE,wBAAsB,cAAc,CAClC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,iBAAiB,EAC1B,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,cAAc,CAAC,CAEzB;AA0BD;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,iBAAiB,EAC1B,IAAI,EAAE,iBAAiB,GAAG;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,GAC5C,OAAO,CAAC,gBAAgB,CAAC,CA4B3B"}

package/dist/src/catalog/projection.js

@@ -0,0 +1,272 @@
+/**
+ * Explicit, reversible projection of active catalog skills into the two real
+ * platform surfaces: `.claude/skills` (platform:claude) and the shared
+ * `.agents/skills` (platform:agents). Every projected file carries the stable
+ * managed marker `catalog:skill:<name>`; a destination without it is foreign
+ * and never written, and no write or removal passes through a symbolic link.
+ */
+import { existsSync, lstatSync, readdirSync, readFileSync } from 'node:fs';
+import { createRequire } from 'node:module';
+import { dirname, join, relative } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { atomicWrite, removeManagedSkillPackage, symlinkedComponent, withMutationLock, } from '../platform-adapters/mutation.js';
+import { applyIntents, resolveArtifactLocation } from '../platform-adapters/operations.js';
+import { PLATFORM_REGISTRY } from '../platform-adapters/registry.js';
+import { verifyEntry } from './digest.js';
+import { frontmatterViolations } from './frontmatter.js';
+import { shellExecSyntax } from './scan.js';
+import { buildSnapshot, eligible } from './snapshot.js';
+import { CatalogIdSchema } from './types.js';
+export const PROJECTION_SURFACES = [
+    'platform:claude',
+    'platform:agents',
+];
+/** Any `.agents` adapter resolves the same `.agents/skills` directory. */
+const ADAPTER = {
+    'platform:claude': 'claude',
+    'platform:agents': 'codex',
+};
+export const catalogMarker = (name) => `catalog:skill:${name}`;
+/** The first body line of a projected SKILL.md; `jev:` is read by build-skill-registry.cjs. */
+export const catalogMarkerLine = (a) => `<!-- catalog ${a.id} sha256:${a.sha256} jev:${a.targets.includes('jev') ? 'yes' : 'no'} -->`;
+/** Refusals of the package content itself (not drift or digest problems). */
+const SECURITY_REFUSAL = /^(?:frontmatter-not-allowed|body-exec):/;
+const FRONTMATTER = /^---\r?\n[\s\S]*?\r?\n---\r?\n/;
+const isOurs = (content, name) => content.includes(`monomind:start ${catalogMarker(name)}`);
+function requestFor(root, surface, dryRun) {
+    return { platform: ADAPTER[surface], scope: 'project', path: root, dryRun };
+}
+function listFiles(dir, prefix = '') {
+    const out = [];
+    for (const e of readdirSync(join(dir, prefix), { withFileTypes: true })) {
+        const rel = prefix ? `${prefix}/${e.name}` : e.name;
+        if (e.isDirectory())
+            out.push(...listFiles(dir, rel));
+        else if (e.isFile())
+            out.push(rel);
+    }
+    return out.sort();
+}
+function withMarkerLine(skillMd, line) {
+    const header = FRONTMATTER.exec(skillMd)?.[0];
+    if (!header)
+        return skillMd;
+    return `${header}\n${line}\n${skillMd.slice(header.length).replace(/^\r?\n/, '')}`;
+}
+/** Intents for one verified package, or the reason it is refused. */
+function packageIntents(root, skillRoot, asset) {
+    const check = verifyEntry(root, asset);
+    if (!check.ok)
+        return { refused: check.reason };
+    const intents = [];
+    const paths = [];
+    const files = listFiles(check.dir);
+    // The same checks staging applies: stored bytes may predate them.
+    for (const file of files.filter((f) => f.endsWith('.md'))) {
+        const text = readFileSync(join(check.dir, file), 'utf8');
+        const nested = file !== 'SKILL.md' && file.endsWith('/SKILL.md');
+        if (file === 'SKILL.md' || (nested && FRONTMATTER.test(text))) {
+            const bad = frontmatterViolations(text);
+            if (bad.length)
+                return { refused: `frontmatter-not-allowed: ${file}: ${bad.join(', ')}` };
+        }
+        if (shellExecSyntax(text))
+            return { refused: `body-exec: ${file} carries shell execution syntax` };
+    }
+    for (const file of files) {
+        const dest = join(skillRoot, asset.name, file);
+        const display = relative(root, dest);
+        const link = symlinkedComponent(root, dest);
+        if (link)
+            return { refused: `symlinked-destination: ${relative(root, link) || link}` };
+        let content = readFileSync(join(check.dir, file), 'utf8');
+        if (file === 'SKILL.md')
+            content = withMarkerLine(content, catalogMarkerLine(asset));
+        const st = lstatSync(dest, { throwIfNoEntry: false });
+        if (st) {
+            const existing = st.isFile() ? readFileSync(dest, 'utf8') : '';
+            if (!isOurs(existing, asset.name))
+                return { refused: `not catalog-managed: ${display}` };
+            if (file === 'SKILL.md' && FRONTMATTER.exec(existing)?.[0] !== FRONTMATTER.exec(content)?.[0])
+                return {
+                    refused: `frontmatter-drift: run catalog unproject ${asset.id} then catalog project`,
+                };
+        }
+        paths.push(display);
+        intents.push({
+            kind: 'skill',
+            locationKey: 'skill',
+            scope: 'project',
+            replace: 'managed_block',
+            format: 'md',
+            marker: catalogMarker(asset.name),
+            relativePath: `${asset.name}/${file}`,
+            content,
+        });
+    }
+    return { intents, paths, files };
+}
+/** Files below `dir` (not following links) that carry `name`'s marker. */
+function markedFiles(dir, name) {
+    try {
+        return listFiles(dir).filter((f) => isOurs(readFileSync(join(dir, f), 'utf8'), name));
+    }
+    catch {
+        return [];
+    }
+}
+function buildPlan(root, surface, opts) {
+    const plan = {
+        surface,
+        intents: [],
+        packages: [],
+        removals: [],
+        diagnostics: [],
+    };
+    const adapter = PLATFORM_REGISTRY[ADAPTER[surface]];
+    const location = resolveArtifactLocation(adapter, 'skill', 'project', { root });
+    if (!location)
+        throw new Error(`no project skill location for ${surface}`);
+    const skillRoot = location.path;
+    const unprojectName = opts.unproject ? parseId(opts.unproject) : undefined;
+    const snapshot = buildSnapshot(root);
+    const wanted = unprojectName ? [] : eligible(snapshot, surface);
+    if (!unprojectName)
+        for (const d of snapshot.diagnostics) {
+            const a = snapshot.assets.find((x) => x.id === d.id);
+            if (!a || (a.status === 'active' && a.targets.includes(surface)))
+                plan.diagnostics.push(`${d.id}: ${d.reason}`);
+        }
+    const rootLink = symlinkedComponent(root, skillRoot);
+    if (rootLink) {
+        if (wanted.length || unprojectName || existsSync(skillRoot))
+            plan.diagnostics.push(`symlinked-destination: ${relative(root, rootLink)}`);
+        return plan;
+    }
+    const unsafe = new Set();
+    for (const asset of wanted) {
+        if (asset.kind !== 'skill') {
+            plan.diagnostics.push(`${asset.id}: only skills are projected`);
+            continue;
+        }
+        const r = packageIntents(root, skillRoot, asset);
+        if ('refused' in r) {
+            plan.diagnostics.push(`${asset.id}: ${r.refused}`);
+            if (SECURITY_REFUSAL.test(r.refused))
+                unsafe.add(asset.name);
+        }
+        else {
+            plan.intents.push(...r.intents);
+            plan.packages.push({ id: asset.id, sha256: asset.sha256, paths: r.paths });
+            const stale = markedFiles(join(skillRoot, asset.name), asset.name).filter((f) => !r.files.includes(f));
+            if (stale.length)
+                plan.removals.push({
+                    id: asset.id,
+                    dir: asset.name,
+                    marker: catalogMarker(asset.name),
+                    keep: r.files,
+                });
+        }
+    }
+    // Only skills own a projection. A refused skill keeps its earlier copy, unless
+    // the refusal is a security one: that copy may carry what is now refused.
+    const keep = new Set(wanted.filter((a) => a.kind === 'skill' && !unsafe.has(a.name)).map((a) => a.name));
+    const entries = existsSync(skillRoot) ? readdirSync(skillRoot, { withFileTypes: true }) : [];
+    for (const e of entries.sort((a, b) => (a.name < b.name ? -1 : 1))) {
+        if (unprojectName ? e.name !== unprojectName : keep.has(e.name))
+            continue;
+        if (e.isSymbolicLink()) {
+            if (unprojectName)
+                plan.diagnostics.push(`symlinked-destination: ${relative(root, join(skillRoot, e.name))}`);
+            continue;
+        }
+        if (e.isDirectory() && markedFiles(join(skillRoot, e.name), e.name).length)
+            plan.removals.push({ id: `skill:${e.name}`, dir: e.name, marker: catalogMarker(e.name) });
+    }
+    return plan;
+}
+function parseId(id) {
+    const parsed = CatalogIdSchema.safeParse(id);
+    if (!parsed.success || !parsed.data.startsWith('skill:'))
+        throw new Error(`not a skill catalog id: ${id}`);
+    return parsed.data.slice('skill:'.length);
+}
+/**
+ * Surfaces that still hold a projected copy of catalog skill `id` (a marked
+ * package dir reached without following a link). Read-only; disable/revoke use
+ * it to point at the `project --apply` that removes the copy.
+ */
+export function projectedSurfaces(root, id) {
+    if (!id.startsWith('skill:'))
+        return [];
+    const name = id.slice('skill:'.length);
+    return PROJECTION_SURFACES.filter((surface) => {
+        const adapter = PLATFORM_REGISTRY[ADAPTER[surface]];
+        const location = resolveArtifactLocation(adapter, 'skill', 'project', { root });
+        if (!location)
+            return false;
+        const dir = join(location.path, name);
+        return !symlinkedComponent(root, dir) && markedFiles(dir, name).length > 0;
+    });
+}
+/** Read-only plan: what `applyProjection` would write and remove. */
+export async function planProjection(root, surface, opts = {}) {
+    return buildPlan(root, surface, opts);
+}
+const HERE = dirname(fileURLToPath(import.meta.url));
+/** src/catalog → ../.. is the package root; dist/src/catalog → ../../.. */
+const BUILDER_CANDIDATES = [
+    join(HERE, '..', '..', '.claude', 'helpers', 'build-skill-registry.cjs'),
+    join(HERE, '..', '..', '..', '.claude', 'helpers', 'build-skill-registry.cjs'),
+];
+/**
+ * Regenerates `<root>/.claude/helpers/skill-registry.json` with the bundled
+ * builder (which knows the catalog `jev:` flag) — only when the project
+ * already has one, so a project without the per-prompt router gains nothing.
+ */
+function rebuildSkillRegistry(root) {
+    const file = join(root, '.claude', 'helpers', 'skill-registry.json');
+    if (!existsSync(file) || symlinkedComponent(root, file))
+        return undefined;
+    const builder = BUILDER_CANDIDATES.find((p) => existsSync(p));
+    if (!builder)
+        return undefined;
+    const { build } = createRequire(import.meta.url)(builder);
+    atomicWrite(file, `${JSON.stringify(build(root), null, 2)}\n`);
+    return relative(root, file);
+}
+/**
+ * Plans and applies in one transaction under the platform mutation lock. A dry
+ * run takes the same path with `dryRun` set (no lock, no writes), so its
+ * `changed` list is the prediction.
+ */
+export async function applyProjection(root, surface, opts) {
+    const request = requestFor(root, surface, opts.dryRun);
+    const adapter = PLATFORM_REGISTRY[request.platform];
+    const run = (plan) => {
+        const applied = applyIntents(adapter, plan.intents, request);
+        const result = {
+            ...plan,
+            dryRun: opts.dryRun,
+            changed: applied.changed,
+            skipped: applied.skipped,
+            diagnostics: [...plan.diagnostics, ...applied.diagnostics],
+            backupDir: '.monomind/backups/',
+        };
+        for (const r of plan.removals) {
+            const removed = removeManagedSkillPackage(adapter, request, r.dir, r.marker, r.keep);
+            result.changed.push(...removed.changed);
+            result.skipped.push(...removed.skipped);
+            result.diagnostics.push(...removed.diagnostics.map((d) => `${r.id}: ${d}`));
+        }
+        if (!opts.dryRun && surface === 'platform:claude' && result.changed.length)
+            result.registry = rebuildSkillRegistry(root);
+        return result;
+    };
+    const preview = buildPlan(root, surface, opts);
+    // Nothing to do: return without taking the lock, so an empty apply creates nothing.
+    if (opts.dryRun || (preview.intents.length === 0 && preview.removals.length === 0))
+        return run(preview);
+    return withMutationLock(request, () => run(buildPlan(root, surface, opts)));
+}
+//# sourceMappingURL=projection.js.map