@serviceme/devtools-core 2.0.2 → 2.0.4

package/dist/skill-linker.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_rolldown_runtime = require("./rolldown-runtime-VH7oDXx4.js");
-const require_userHome = require("./userHome-BquDeFVE.js");
+const require_userHome = require("./userHome-Baz205B7.js");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_rolldown_runtime.__toESM(node_fs_promises);
 let node_path = require("node:path");

package/dist/skill-linker.mjs

@@ -1,4 +1,4 @@
-import { R as getRepoDir, j as getHomeDir } from "./userHome-CcnAQPG1.mjs";
+import { A as getHomeDir, L as getRepoDir } from "./userHome-B97jBm5O.mjs";
 import * as fs from "node:fs/promises";
 import * as path from "node:path";
 //#region src/skill-linker/index.ts

package/dist/{submit-Cg7wSa3x.mjs → submit-6zQPPrOJ.mjs}

@@ -1,4 +1,4 @@
-import { R as getRepoDir } from "./userHome-CcnAQPG1.mjs";
+import { L as getRepoDir } from "./userHome-DOMLiHy7.mjs";
 import * as fs from "node:fs/promises";
 import * as path from "node:path";
 //#region src/submit/types.ts
@@ -81,4 +81,4 @@ var SubmitClient = class {
 //#endregion
 export { SubmitError as n, SubmitClient as t };
 
-//# sourceMappingURL=submit-Cg7wSa3x.mjs.map
+//# sourceMappingURL=submit-6zQPPrOJ.mjs.map

package/dist/{submit-Cg7wSa3x.mjs.map → submit-6zQPPrOJ.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"submit-Cg7wSa3x.mjs","names":[],"sources":["../src/submit/types.ts","../src/submit/index.ts"],"sourcesContent":["/**\n * Skill & Agent v2 — SubmitClient Types (M4)\n *\n * Mirrors the server's POST /api/v1/skills/validate contract (M2\n * SubmitApi). Defined here as a separate types file so the test\n * fixtures + the client can both import without circular deps.\n */\n\n/** Reasons the server may deny a submission. */\nexport type DenyReason =\n\t| \"repo_not_writable\"\n\t| \"file_too_large\"\n\t| \"path_traversal\"\n\t| \"invalid_frontmatter\"\n\t| \"name_conflict\"\n\t/** Local-client-side errors that don't come from the server. */\n\t| \"network_error\"\n\t| \"write_error\"\n\t| \"commit_error\"\n\t| \"push_error\"\n\t| \"unknown\";\n\n/** Request payload. Identical to the server's SubmitValidationRequest. */\nexport interface SubmitValidationRequest {\n\trepoId: string;\n\tskillName: string;\n\tfiles: Array<{ path: string; content: string }>;\n}\n\n/** Response payload. Identical to the server's SubmitValidationResponse. */\nexport interface SubmitValidationResponse {\n\tallow: boolean;\n\treason?: DenyReason;\n\tdetail?: string;\n}\n\n/** Sentinel error thrown by SubmitClient.submit() / validate(). */\nexport class SubmitError extends Error {\n\treadonly reason: DenyReason;\n\treadonly detail: string;\n\treadonly status?: number;\n\n\tconstructor(reason: DenyReason, detail: string, options?: { status?: number }) {\n\t\tsuper(`submit failed (${reason}): ${detail}`);\n\t\tthis.name = \"SubmitError\";\n\t\tthis.reason = reason;\n\t\tthis.detail = detail;\n\t\tthis.status = options?.status;\n\t}\n}\n","import * as fs from \"node:fs/promises\";\nimport * as path from \"node:path\";\nimport type { GitClient } from \"../git-client\";\nimport { getRepoDir } from \"../paths/userHome\";\nimport type { SkillFile } from \"../skill-store/types\";\nimport type { SubmitValidationRequest, SubmitValidationResponse } from \"./types\";\nimport { SubmitError } from \"./types\";\n\n// Re-export so consumers (bridge handlers, CLI commands) can detect\n// SubmitError via `instanceof` without reaching into the internal\n// `./types` module.\nexport { SubmitError } from \"./types\";\n\n/**\n * Skill & Agent v2 — SubmitClient (M4)\n *\n * SubmitClient orchestrates the \"validate then push\" flow described\n * in docs/architecture/skill-agent-v2-repo.md §5.7:\n *\n *   1. **validate** — POST the candidate files to the server's\n *      `/api/v1/skills/validate` endpoint (5 deny reasons: repo_not_\n *      writable, file_too_large, path_traversal, invalid_frontmatter,\n *      name_conflict).\n *   2. **write** — materialize the files into the local repo clone at\n *      `~/.serviceme/repos/<repoId>/skills/<name>/` (or `agents/`).\n *   3. **commit** — `git add . && git commit -m \"feat(skills): add <name>\"`.\n *   4. **push** — `git push origin <branch>` via the server proxy.\n *\n * The client is intentionally thin: it does NOT do its own validation\n * (the server is the gate), and it does NOT cache anything across\n * calls. The single source of truth for \"is this submission allowed?\"\n * is the server's validate endpoint.\n *\n * @see docs/architecture/skill-agent-v2-repo.md §5.7 SubmitClient\n */\n\nexport interface SubmitOptions {\n\t/** Override the server's validate URL. Defaults to `http://localhost:3000/api/v1`. */\n\tserverBaseUrl?: string;\n\t/** Override the branch to push. Defaults to the repo's `branch` field. */\n\tbranch?: string;\n\t/** Skip the actual push (for tests + dry-runs). When true, step 4 returns a synthetic PushResult. */\n\tskipPush?: boolean;\n}\n\nexport interface SubmitResult {\n\trepoId: string;\n\tskillName: string;\n\tcommitSha: string;\n\tpushedRef?: string;\n\tpushedSha?: string;\n}\n\nexport interface SubmitClientOptions {\n\tgitClient: GitClient;\n\t/** Lookup the default branch for a repo (config-driven). */\n\tgetRepoBranch?: (repoId: string) => string | undefined;\n\t/** HTTP fetch impl (defaults to the global `fetch`). */\n\tfetcher?: typeof fetch;\n\t/** Default server base URL when no override is supplied. */\n\tdefaultServerBaseUrl?: string;\n}\n\nexport class SubmitClient {\n\tprivate readonly git: GitClient;\n\tprivate readonly getRepoBranch: (repoId: string) => string | undefined;\n\tprivate readonly fetcher: typeof fetch;\n\tprivate readonly defaultServerBaseUrl: string;\n\n\tconstructor(opts: SubmitClientOptions) {\n\t\tthis.git = opts.gitClient;\n\t\tthis.getRepoBranch = opts.getRepoBranch ?? (() => undefined);\n\t\tthis.fetcher = opts.fetcher ?? (globalThis.fetch as typeof fetch);\n\t\tthis.defaultServerBaseUrl = opts.defaultServerBaseUrl ?? \"http://localhost:3000\";\n\t}\n\n\t/**\n\t * Validate-only path. Useful for the UI's \"Save Draft\" flow which\n\t * wants to surface validation errors without committing or pushing.\n\t */\n\tasync validate(req: SubmitValidationRequest): Promise<SubmitValidationResponse> {\n\t\tconst url = `${this.defaultServerBaseUrl}/api/v1/skills/validate`;\n\t\tconst res = await this.fetcher(url, {\n\t\t\tmethod: \"POST\",\n\t\t\theaders: { \"content-type\": \"application/json\" },\n\t\t\tbody: JSON.stringify(req),\n\t\t});\n\t\tif (!res.ok) {\n\t\t\tthrow new SubmitError(\"network_error\", `validate request failed: HTTP ${res.status}`);\n\t\t}\n\t\treturn (await res.json()) as SubmitValidationResponse;\n\t}\n\n\t/**\n\t * Full submit pipeline. Throws `SubmitError` on:\n\t *   - validate deny (reason echoed)\n\t *   - network failure (network_error)\n\t *   - local write failure\n\t *   - commit/push failure\n\t */\n\tasync submit(\n\t\trepoId: string,\n\t\tskillName: string,\n\t\tfiles: SkillFile[],\n\t\topts: SubmitOptions = {}\n\t): Promise<SubmitResult> {\n\t\t// (1) Validate\n\t\tconst v = await this.validate({ repoId, skillName, files });\n\t\tif (!v.allow) {\n\t\t\tthrow new SubmitError(v.reason ?? \"unknown\", v.detail ?? \"validation denied\");\n\t\t}\n\n\t\t// (2) Write files into the local repo clone\n\t\tconst localRepoPath = getRepoDir(repoId);\n\t\tconst targetDir = path.join(localRepoPath, \"skills\", skillName);\n\t\tawait fs.mkdir(targetDir, { recursive: true });\n\t\tfor (const f of files) {\n\t\t\tconst full = path.join(targetDir, f.path);\n\t\t\tawait fs.mkdir(path.dirname(full), { recursive: true });\n\t\t\tconst tmp = `${full}.${process.pid}.${Date.now()}.tmp`;\n\t\t\tawait fs.writeFile(tmp, f.content, \"utf8\");\n\t\t\tawait fs.rename(tmp, full);\n\t\t}\n\n\t\t// (3) Commit (convention: `feat(skills): add <name>`)\n\t\tconst commitMessage = `feat(skills): add ${skillName}`;\n\t\tconst { commitSha } = await this.git.commit(localRepoPath, commitMessage);\n\n\t\t// (4) Push\n\t\tlet pushedRef: string | undefined;\n\t\tlet pushedSha: string | undefined;\n\t\tif (!opts.skipPush) {\n\t\t\tconst branch = opts.branch ?? this.getRepoBranch(repoId) ?? \"main\";\n\t\t\tconst pushResult = await this.git.push(repoId, localRepoPath, branch);\n\t\t\tpushedRef = pushResult.ref;\n\t\t\tpushedSha = pushResult.commitSha;\n\t\t}\n\n\t\treturn {\n\t\t\trepoId,\n\t\t\tskillName,\n\t\t\tcommitSha,\n\t\t\tpushedRef,\n\t\t\tpushedSha,\n\t\t};\n\t}\n}\n"],"mappings":";;;;;AAqCA,IAAa,cAAb,cAAiC,MAAM;CAKtC,YAAY,QAAoB,QAAgB,SAA+B;EAC9E,MAAM,kBAAkB,OAAO,KAAK,QAAQ;EAC5C,KAAK,OAAO;EACZ,KAAK,SAAS;EACd,KAAK,SAAS;EACd,KAAK,SAAS,SAAS;CACxB;AACD;;;ACcA,IAAa,eAAb,MAA0B;CAMzB,YAAY,MAA2B;EACtC,KAAK,MAAM,KAAK;EAChB,KAAK,gBAAgB,KAAK,wBAAwB,KAAA;EAClD,KAAK,UAAU,KAAK,WAAY,WAAW;EAC3C,KAAK,uBAAuB,KAAK,wBAAwB;CAC1D;;;;;CAMA,MAAM,SAAS,KAAiE;EAC/E,MAAM,MAAM,GAAG,KAAK,qBAAqB;EACzC,MAAM,MAAM,MAAM,KAAK,QAAQ,KAAK;GACnC,QAAQ;GACR,SAAS,EAAE,gBAAgB,mBAAmB;GAC9C,MAAM,KAAK,UAAU,GAAG;EACzB,CAAC;EACD,IAAI,CAAC,IAAI,IACR,MAAM,IAAI,YAAY,iBAAiB,iCAAiC,IAAI,QAAQ;EAErF,OAAQ,MAAM,IAAI,KAAK;CACxB;;;;;;;;CASA,MAAM,OACL,QACA,WACA,OACA,OAAsB,CAAC,GACC;EAExB,MAAM,IAAI,MAAM,KAAK,SAAS;GAAE;GAAQ;GAAW;EAAM,CAAC;EAC1D,IAAI,CAAC,EAAE,OACN,MAAM,IAAI,YAAY,EAAE,UAAU,WAAW,EAAE,UAAU,mBAAmB;EAI7E,MAAM,gBAAgB,WAAW,MAAM;EACvC,MAAM,YAAY,KAAK,KAAK,eAAe,UAAU,SAAS;EAC9D,MAAM,GAAG,MAAM,WAAW,EAAE,WAAW,KAAK,CAAC;EAC7C,KAAK,MAAM,KAAK,OAAO;GACtB,MAAM,OAAO,KAAK,KAAK,WAAW,EAAE,IAAI;GACxC,MAAM,GAAG,MAAM,KAAK,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;GACtD,MAAM,MAAM,GAAG,KAAK,GAAG,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE;GACjD,MAAM,GAAG,UAAU,KAAK,EAAE,SAAS,MAAM;GACzC,MAAM,GAAG,OAAO,KAAK,IAAI;EAC1B;EAGA,MAAM,gBAAgB,qBAAqB;EAC3C,MAAM,EAAE,cAAc,MAAM,KAAK,IAAI,OAAO,eAAe,aAAa;EAGxE,IAAI;EACJ,IAAI;EACJ,IAAI,CAAC,KAAK,UAAU;GACnB,MAAM,SAAS,KAAK,UAAU,KAAK,cAAc,MAAM,KAAK;GAC5D,MAAM,aAAa,MAAM,KAAK,IAAI,KAAK,QAAQ,eAAe,MAAM;GACpE,YAAY,WAAW;GACvB,YAAY,WAAW;EACxB;EAEA,OAAO;GACN;GACA;GACA;GACA;GACA;EACD;CACD;AACD"}
+{"version":3,"file":"submit-6zQPPrOJ.mjs","names":[],"sources":["../src/submit/types.ts","../src/submit/index.ts"],"sourcesContent":["/**\n * Skill & Agent v2 — SubmitClient Types (M4)\n *\n * Mirrors the server's POST /api/v1/skills/validate contract (M2\n * SubmitApi). Defined here as a separate types file so the test\n * fixtures + the client can both import without circular deps.\n */\n\n/** Reasons the server may deny a submission. */\nexport type DenyReason =\n\t| \"repo_not_writable\"\n\t| \"file_too_large\"\n\t| \"path_traversal\"\n\t| \"invalid_frontmatter\"\n\t| \"name_conflict\"\n\t/** Local-client-side errors that don't come from the server. */\n\t| \"network_error\"\n\t| \"write_error\"\n\t| \"commit_error\"\n\t| \"push_error\"\n\t| \"unknown\";\n\n/** Request payload. Identical to the server's SubmitValidationRequest. */\nexport interface SubmitValidationRequest {\n\trepoId: string;\n\tskillName: string;\n\tfiles: Array<{ path: string; content: string }>;\n}\n\n/** Response payload. Identical to the server's SubmitValidationResponse. */\nexport interface SubmitValidationResponse {\n\tallow: boolean;\n\treason?: DenyReason;\n\tdetail?: string;\n}\n\n/** Sentinel error thrown by SubmitClient.submit() / validate(). */\nexport class SubmitError extends Error {\n\treadonly reason: DenyReason;\n\treadonly detail: string;\n\treadonly status?: number;\n\n\tconstructor(reason: DenyReason, detail: string, options?: { status?: number }) {\n\t\tsuper(`submit failed (${reason}): ${detail}`);\n\t\tthis.name = \"SubmitError\";\n\t\tthis.reason = reason;\n\t\tthis.detail = detail;\n\t\tthis.status = options?.status;\n\t}\n}\n","import * as fs from \"node:fs/promises\";\nimport * as path from \"node:path\";\nimport type { GitClient } from \"../git-client\";\nimport { getRepoDir } from \"../paths/userHome\";\nimport type { SkillFile } from \"../skill-store/types\";\nimport type { SubmitValidationRequest, SubmitValidationResponse } from \"./types\";\nimport { SubmitError } from \"./types\";\n\n// Re-export so consumers (bridge handlers, CLI commands) can detect\n// SubmitError via `instanceof` without reaching into the internal\n// `./types` module.\nexport { SubmitError } from \"./types\";\n\n/**\n * Skill & Agent v2 — SubmitClient (M4)\n *\n * SubmitClient orchestrates the \"validate then push\" flow described\n * in docs/architecture/skill-agent-v2-repo.md §5.7:\n *\n *   1. **validate** — POST the candidate files to the server's\n *      `/api/v1/skills/validate` endpoint (5 deny reasons: repo_not_\n *      writable, file_too_large, path_traversal, invalid_frontmatter,\n *      name_conflict).\n *   2. **write** — materialize the files into the local repo clone at\n *      `~/.serviceme/repos/<repoId>/skills/<name>/` (or `agents/`).\n *   3. **commit** — `git add . && git commit -m \"feat(skills): add <name>\"`.\n *   4. **push** — `git push origin <branch>` via the server proxy.\n *\n * The client is intentionally thin: it does NOT do its own validation\n * (the server is the gate), and it does NOT cache anything across\n * calls. The single source of truth for \"is this submission allowed?\"\n * is the server's validate endpoint.\n *\n * @see docs/architecture/skill-agent-v2-repo.md §5.7 SubmitClient\n */\n\nexport interface SubmitOptions {\n\t/** Override the server's validate URL. Defaults to `http://localhost:3000/api/v1`. */\n\tserverBaseUrl?: string;\n\t/** Override the branch to push. Defaults to the repo's `branch` field. */\n\tbranch?: string;\n\t/** Skip the actual push (for tests + dry-runs). When true, step 4 returns a synthetic PushResult. */\n\tskipPush?: boolean;\n}\n\nexport interface SubmitResult {\n\trepoId: string;\n\tskillName: string;\n\tcommitSha: string;\n\tpushedRef?: string;\n\tpushedSha?: string;\n}\n\nexport interface SubmitClientOptions {\n\tgitClient: GitClient;\n\t/** Lookup the default branch for a repo (config-driven). */\n\tgetRepoBranch?: (repoId: string) => string | undefined;\n\t/** HTTP fetch impl (defaults to the global `fetch`). */\n\tfetcher?: typeof fetch;\n\t/** Default server base URL when no override is supplied. */\n\tdefaultServerBaseUrl?: string;\n}\n\nexport class SubmitClient {\n\tprivate readonly git: GitClient;\n\tprivate readonly getRepoBranch: (repoId: string) => string | undefined;\n\tprivate readonly fetcher: typeof fetch;\n\tprivate readonly defaultServerBaseUrl: string;\n\n\tconstructor(opts: SubmitClientOptions) {\n\t\tthis.git = opts.gitClient;\n\t\tthis.getRepoBranch = opts.getRepoBranch ?? (() => undefined);\n\t\tthis.fetcher = opts.fetcher ?? (globalThis.fetch as typeof fetch);\n\t\tthis.defaultServerBaseUrl = opts.defaultServerBaseUrl ?? \"http://localhost:3000\";\n\t}\n\n\t/**\n\t * Validate-only path. Useful for the UI's \"Save Draft\" flow which\n\t * wants to surface validation errors without committing or pushing.\n\t */\n\tasync validate(req: SubmitValidationRequest): Promise<SubmitValidationResponse> {\n\t\tconst url = `${this.defaultServerBaseUrl}/api/v1/skills/validate`;\n\t\tconst res = await this.fetcher(url, {\n\t\t\tmethod: \"POST\",\n\t\t\theaders: { \"content-type\": \"application/json\" },\n\t\t\tbody: JSON.stringify(req),\n\t\t});\n\t\tif (!res.ok) {\n\t\t\tthrow new SubmitError(\"network_error\", `validate request failed: HTTP ${res.status}`);\n\t\t}\n\t\treturn (await res.json()) as SubmitValidationResponse;\n\t}\n\n\t/**\n\t * Full submit pipeline. Throws `SubmitError` on:\n\t *   - validate deny (reason echoed)\n\t *   - network failure (network_error)\n\t *   - local write failure\n\t *   - commit/push failure\n\t */\n\tasync submit(\n\t\trepoId: string,\n\t\tskillName: string,\n\t\tfiles: SkillFile[],\n\t\topts: SubmitOptions = {}\n\t): Promise<SubmitResult> {\n\t\t// (1) Validate\n\t\tconst v = await this.validate({ repoId, skillName, files });\n\t\tif (!v.allow) {\n\t\t\tthrow new SubmitError(v.reason ?? \"unknown\", v.detail ?? \"validation denied\");\n\t\t}\n\n\t\t// (2) Write files into the local repo clone\n\t\tconst localRepoPath = getRepoDir(repoId);\n\t\tconst targetDir = path.join(localRepoPath, \"skills\", skillName);\n\t\tawait fs.mkdir(targetDir, { recursive: true });\n\t\tfor (const f of files) {\n\t\t\tconst full = path.join(targetDir, f.path);\n\t\t\tawait fs.mkdir(path.dirname(full), { recursive: true });\n\t\t\tconst tmp = `${full}.${process.pid}.${Date.now()}.tmp`;\n\t\t\tawait fs.writeFile(tmp, f.content, \"utf8\");\n\t\t\tawait fs.rename(tmp, full);\n\t\t}\n\n\t\t// (3) Commit (convention: `feat(skills): add <name>`)\n\t\tconst commitMessage = `feat(skills): add ${skillName}`;\n\t\tconst { commitSha } = await this.git.commit(localRepoPath, commitMessage);\n\n\t\t// (4) Push\n\t\tlet pushedRef: string | undefined;\n\t\tlet pushedSha: string | undefined;\n\t\tif (!opts.skipPush) {\n\t\t\tconst branch = opts.branch ?? this.getRepoBranch(repoId) ?? \"main\";\n\t\t\tconst pushResult = await this.git.push(repoId, localRepoPath, branch);\n\t\t\tpushedRef = pushResult.ref;\n\t\t\tpushedSha = pushResult.commitSha;\n\t\t}\n\n\t\treturn {\n\t\t\trepoId,\n\t\t\tskillName,\n\t\t\tcommitSha,\n\t\t\tpushedRef,\n\t\t\tpushedSha,\n\t\t};\n\t}\n}\n"],"mappings":";;;;;AAqCA,IAAa,cAAb,cAAiC,MAAM;CAKtC,YAAY,QAAoB,QAAgB,SAA+B;EAC9E,MAAM,kBAAkB,OAAO,KAAK,QAAQ;EAC5C,KAAK,OAAO;EACZ,KAAK,SAAS;EACd,KAAK,SAAS;EACd,KAAK,SAAS,SAAS;CACxB;AACD;;;ACcA,IAAa,eAAb,MAA0B;CAMzB,YAAY,MAA2B;EACtC,KAAK,MAAM,KAAK;EAChB,KAAK,gBAAgB,KAAK,wBAAwB,KAAA;EAClD,KAAK,UAAU,KAAK,WAAY,WAAW;EAC3C,KAAK,uBAAuB,KAAK,wBAAwB;CAC1D;;;;;CAMA,MAAM,SAAS,KAAiE;EAC/E,MAAM,MAAM,GAAG,KAAK,qBAAqB;EACzC,MAAM,MAAM,MAAM,KAAK,QAAQ,KAAK;GACnC,QAAQ;GACR,SAAS,EAAE,gBAAgB,mBAAmB;GAC9C,MAAM,KAAK,UAAU,GAAG;EACzB,CAAC;EACD,IAAI,CAAC,IAAI,IACR,MAAM,IAAI,YAAY,iBAAiB,iCAAiC,IAAI,QAAQ;EAErF,OAAQ,MAAM,IAAI,KAAK;CACxB;;;;;;;;CASA,MAAM,OACL,QACA,WACA,OACA,OAAsB,CAAC,GACC;EAExB,MAAM,IAAI,MAAM,KAAK,SAAS;GAAE;GAAQ;GAAW;EAAM,CAAC;EAC1D,IAAI,CAAC,EAAE,OACN,MAAM,IAAI,YAAY,EAAE,UAAU,WAAW,EAAE,UAAU,mBAAmB;EAI7E,MAAM,gBAAgB,WAAW,MAAM;EACvC,MAAM,YAAY,KAAK,KAAK,eAAe,UAAU,SAAS;EAC9D,MAAM,GAAG,MAAM,WAAW,EAAE,WAAW,KAAK,CAAC;EAC7C,KAAK,MAAM,KAAK,OAAO;GACtB,MAAM,OAAO,KAAK,KAAK,WAAW,EAAE,IAAI;GACxC,MAAM,GAAG,MAAM,KAAK,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;GACtD,MAAM,MAAM,GAAG,KAAK,GAAG,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE;GACjD,MAAM,GAAG,UAAU,KAAK,EAAE,SAAS,MAAM;GACzC,MAAM,GAAG,OAAO,KAAK,IAAI;EAC1B;EAGA,MAAM,gBAAgB,qBAAqB;EAC3C,MAAM,EAAE,cAAc,MAAM,KAAK,IAAI,OAAO,eAAe,aAAa;EAGxE,IAAI;EACJ,IAAI;EACJ,IAAI,CAAC,KAAK,UAAU;GACnB,MAAM,SAAS,KAAK,UAAU,KAAK,cAAc,MAAM,KAAK;GAC5D,MAAM,aAAa,MAAM,KAAK,IAAI,KAAK,QAAQ,eAAe,MAAM;GACpE,YAAY,WAAW;GACvB,YAAY,WAAW;EACxB;EAEA,OAAO;GACN;GACA;GACA;GACA;GACA;EACD;CACD;AACD"}

package/dist/submit-BTdbGEAd.mjs

@@ -0,0 +1,84 @@
+import { L as getRepoDir } from "./userHome-B97jBm5O.mjs";
+import * as fs from "node:fs/promises";
+import * as path from "node:path";
+//#region src/submit/types.ts
+/** Sentinel error thrown by SubmitClient.submit() / validate(). */
+var SubmitError = class extends Error {
+	constructor(reason, detail, options) {
+		super(`submit failed (${reason}): ${detail}`);
+		this.name = "SubmitError";
+		this.reason = reason;
+		this.detail = detail;
+		this.status = options?.status;
+	}
+};
+//#endregion
+//#region src/submit/index.ts
+var SubmitClient = class {
+	constructor(opts) {
+		this.git = opts.gitClient;
+		this.getRepoBranch = opts.getRepoBranch ?? (() => void 0);
+		this.fetcher = opts.fetcher ?? globalThis.fetch;
+		this.defaultServerBaseUrl = opts.defaultServerBaseUrl ?? "http://localhost:3000";
+	}
+	/**
+	* Validate-only path. Useful for the UI's "Save Draft" flow which
+	* wants to surface validation errors without committing or pushing.
+	*/
+	async validate(req) {
+		const url = `${this.defaultServerBaseUrl}/api/v1/skills/validate`;
+		const res = await this.fetcher(url, {
+			method: "POST",
+			headers: { "content-type": "application/json" },
+			body: JSON.stringify(req)
+		});
+		if (!res.ok) throw new SubmitError("network_error", `validate request failed: HTTP ${res.status}`);
+		return await res.json();
+	}
+	/**
+	* Full submit pipeline. Throws `SubmitError` on:
+	*   - validate deny (reason echoed)
+	*   - network failure (network_error)
+	*   - local write failure
+	*   - commit/push failure
+	*/
+	async submit(repoId, skillName, files, opts = {}) {
+		const v = await this.validate({
+			repoId,
+			skillName,
+			files
+		});
+		if (!v.allow) throw new SubmitError(v.reason ?? "unknown", v.detail ?? "validation denied");
+		const localRepoPath = getRepoDir(repoId);
+		const targetDir = path.join(localRepoPath, "skills", skillName);
+		await fs.mkdir(targetDir, { recursive: true });
+		for (const f of files) {
+			const full = path.join(targetDir, f.path);
+			await fs.mkdir(path.dirname(full), { recursive: true });
+			const tmp = `${full}.${process.pid}.${Date.now()}.tmp`;
+			await fs.writeFile(tmp, f.content, "utf8");
+			await fs.rename(tmp, full);
+		}
+		const commitMessage = `feat(skills): add ${skillName}`;
+		const { commitSha } = await this.git.commit(localRepoPath, commitMessage);
+		let pushedRef;
+		let pushedSha;
+		if (!opts.skipPush) {
+			const branch = opts.branch ?? this.getRepoBranch(repoId) ?? "main";
+			const pushResult = await this.git.push(repoId, localRepoPath, branch);
+			pushedRef = pushResult.ref;
+			pushedSha = pushResult.commitSha;
+		}
+		return {
+			repoId,
+			skillName,
+			commitSha,
+			pushedRef,
+			pushedSha
+		};
+	}
+};
+//#endregion
+export { SubmitError as n, SubmitClient as t };
+
+//# sourceMappingURL=submit-BTdbGEAd.mjs.map

package/dist/submit-BTdbGEAd.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"submit-BTdbGEAd.mjs","names":[],"sources":["../src/submit/types.ts","../src/submit/index.ts"],"sourcesContent":["/**\n * Skill & Agent v2 — SubmitClient Types (M4)\n *\n * Mirrors the server's POST /api/v1/skills/validate contract (M2\n * SubmitApi). Defined here as a separate types file so the test\n * fixtures + the client can both import without circular deps.\n */\n\n/** Reasons the server may deny a submission. */\nexport type DenyReason =\n\t| \"repo_not_writable\"\n\t| \"file_too_large\"\n\t| \"path_traversal\"\n\t| \"invalid_frontmatter\"\n\t| \"name_conflict\"\n\t/** Local-client-side errors that don't come from the server. */\n\t| \"network_error\"\n\t| \"write_error\"\n\t| \"commit_error\"\n\t| \"push_error\"\n\t| \"unknown\";\n\n/** Request payload. Identical to the server's SubmitValidationRequest. */\nexport interface SubmitValidationRequest {\n\trepoId: string;\n\tskillName: string;\n\tfiles: Array<{ path: string; content: string }>;\n}\n\n/** Response payload. Identical to the server's SubmitValidationResponse. */\nexport interface SubmitValidationResponse {\n\tallow: boolean;\n\treason?: DenyReason;\n\tdetail?: string;\n}\n\n/** Sentinel error thrown by SubmitClient.submit() / validate(). */\nexport class SubmitError extends Error {\n\treadonly reason: DenyReason;\n\treadonly detail: string;\n\treadonly status?: number;\n\n\tconstructor(reason: DenyReason, detail: string, options?: { status?: number }) {\n\t\tsuper(`submit failed (${reason}): ${detail}`);\n\t\tthis.name = \"SubmitError\";\n\t\tthis.reason = reason;\n\t\tthis.detail = detail;\n\t\tthis.status = options?.status;\n\t}\n}\n","import * as fs from \"node:fs/promises\";\nimport * as path from \"node:path\";\nimport type { GitClient } from \"../git-client\";\nimport { getRepoDir } from \"../paths/userHome\";\nimport type { SkillFile } from \"../skill-store/types\";\nimport type { SubmitValidationRequest, SubmitValidationResponse } from \"./types\";\nimport { SubmitError } from \"./types\";\n\n// Re-export so consumers (bridge handlers, CLI commands) can detect\n// SubmitError via `instanceof` without reaching into the internal\n// `./types` module.\nexport { SubmitError } from \"./types\";\n\n/**\n * Skill & Agent v2 — SubmitClient (M4)\n *\n * SubmitClient orchestrates the \"validate then push\" flow described\n * in docs/architecture/skill-agent-v2-repo.md §5.7:\n *\n *   1. **validate** — POST the candidate files to the server's\n *      `/api/v1/skills/validate` endpoint (5 deny reasons: repo_not_\n *      writable, file_too_large, path_traversal, invalid_frontmatter,\n *      name_conflict).\n *   2. **write** — materialize the files into the local repo clone at\n *      `~/.serviceme/repos/<repoId>/skills/<name>/` (or `agents/`).\n *   3. **commit** — `git add . && git commit -m \"feat(skills): add <name>\"`.\n *   4. **push** — `git push origin <branch>` via the server proxy.\n *\n * The client is intentionally thin: it does NOT do its own validation\n * (the server is the gate), and it does NOT cache anything across\n * calls. The single source of truth for \"is this submission allowed?\"\n * is the server's validate endpoint.\n *\n * @see docs/architecture/skill-agent-v2-repo.md §5.7 SubmitClient\n */\n\nexport interface SubmitOptions {\n\t/** Override the server's validate URL. Defaults to `http://localhost:3000/api/v1`. */\n\tserverBaseUrl?: string;\n\t/** Override the branch to push. Defaults to the repo's `branch` field. */\n\tbranch?: string;\n\t/** Skip the actual push (for tests + dry-runs). When true, step 4 returns a synthetic PushResult. */\n\tskipPush?: boolean;\n}\n\nexport interface SubmitResult {\n\trepoId: string;\n\tskillName: string;\n\tcommitSha: string;\n\tpushedRef?: string;\n\tpushedSha?: string;\n}\n\nexport interface SubmitClientOptions {\n\tgitClient: GitClient;\n\t/** Lookup the default branch for a repo (config-driven). */\n\tgetRepoBranch?: (repoId: string) => string | undefined;\n\t/** HTTP fetch impl (defaults to the global `fetch`). */\n\tfetcher?: typeof fetch;\n\t/** Default server base URL when no override is supplied. */\n\tdefaultServerBaseUrl?: string;\n}\n\nexport class SubmitClient {\n\tprivate readonly git: GitClient;\n\tprivate readonly getRepoBranch: (repoId: string) => string | undefined;\n\tprivate readonly fetcher: typeof fetch;\n\tprivate readonly defaultServerBaseUrl: string;\n\n\tconstructor(opts: SubmitClientOptions) {\n\t\tthis.git = opts.gitClient;\n\t\tthis.getRepoBranch = opts.getRepoBranch ?? (() => undefined);\n\t\tthis.fetcher = opts.fetcher ?? (globalThis.fetch as typeof fetch);\n\t\tthis.defaultServerBaseUrl = opts.defaultServerBaseUrl ?? \"http://localhost:3000\";\n\t}\n\n\t/**\n\t * Validate-only path. Useful for the UI's \"Save Draft\" flow which\n\t * wants to surface validation errors without committing or pushing.\n\t */\n\tasync validate(req: SubmitValidationRequest): Promise<SubmitValidationResponse> {\n\t\tconst url = `${this.defaultServerBaseUrl}/api/v1/skills/validate`;\n\t\tconst res = await this.fetcher(url, {\n\t\t\tmethod: \"POST\",\n\t\t\theaders: { \"content-type\": \"application/json\" },\n\t\t\tbody: JSON.stringify(req),\n\t\t});\n\t\tif (!res.ok) {\n\t\t\tthrow new SubmitError(\"network_error\", `validate request failed: HTTP ${res.status}`);\n\t\t}\n\t\treturn (await res.json()) as SubmitValidationResponse;\n\t}\n\n\t/**\n\t * Full submit pipeline. Throws `SubmitError` on:\n\t *   - validate deny (reason echoed)\n\t *   - network failure (network_error)\n\t *   - local write failure\n\t *   - commit/push failure\n\t */\n\tasync submit(\n\t\trepoId: string,\n\t\tskillName: string,\n\t\tfiles: SkillFile[],\n\t\topts: SubmitOptions = {}\n\t): Promise<SubmitResult> {\n\t\t// (1) Validate\n\t\tconst v = await this.validate({ repoId, skillName, files });\n\t\tif (!v.allow) {\n\t\t\tthrow new SubmitError(v.reason ?? \"unknown\", v.detail ?? \"validation denied\");\n\t\t}\n\n\t\t// (2) Write files into the local repo clone\n\t\tconst localRepoPath = getRepoDir(repoId);\n\t\tconst targetDir = path.join(localRepoPath, \"skills\", skillName);\n\t\tawait fs.mkdir(targetDir, { recursive: true });\n\t\tfor (const f of files) {\n\t\t\tconst full = path.join(targetDir, f.path);\n\t\t\tawait fs.mkdir(path.dirname(full), { recursive: true });\n\t\t\tconst tmp = `${full}.${process.pid}.${Date.now()}.tmp`;\n\t\t\tawait fs.writeFile(tmp, f.content, \"utf8\");\n\t\t\tawait fs.rename(tmp, full);\n\t\t}\n\n\t\t// (3) Commit (convention: `feat(skills): add <name>`)\n\t\tconst commitMessage = `feat(skills): add ${skillName}`;\n\t\tconst { commitSha } = await this.git.commit(localRepoPath, commitMessage);\n\n\t\t// (4) Push\n\t\tlet pushedRef: string | undefined;\n\t\tlet pushedSha: string | undefined;\n\t\tif (!opts.skipPush) {\n\t\t\tconst branch = opts.branch ?? this.getRepoBranch(repoId) ?? \"main\";\n\t\t\tconst pushResult = await this.git.push(repoId, localRepoPath, branch);\n\t\t\tpushedRef = pushResult.ref;\n\t\t\tpushedSha = pushResult.commitSha;\n\t\t}\n\n\t\treturn {\n\t\t\trepoId,\n\t\t\tskillName,\n\t\t\tcommitSha,\n\t\t\tpushedRef,\n\t\t\tpushedSha,\n\t\t};\n\t}\n}\n"],"mappings":";;;;;AAqCA,IAAa,cAAb,cAAiC,MAAM;CAKtC,YAAY,QAAoB,QAAgB,SAA+B;EAC9E,MAAM,kBAAkB,OAAO,KAAK,QAAQ;EAC5C,KAAK,OAAO;EACZ,KAAK,SAAS;EACd,KAAK,SAAS;EACd,KAAK,SAAS,SAAS;CACxB;AACD;;;ACcA,IAAa,eAAb,MAA0B;CAMzB,YAAY,MAA2B;EACtC,KAAK,MAAM,KAAK;EAChB,KAAK,gBAAgB,KAAK,wBAAwB,KAAA;EAClD,KAAK,UAAU,KAAK,WAAY,WAAW;EAC3C,KAAK,uBAAuB,KAAK,wBAAwB;CAC1D;;;;;CAMA,MAAM,SAAS,KAAiE;EAC/E,MAAM,MAAM,GAAG,KAAK,qBAAqB;EACzC,MAAM,MAAM,MAAM,KAAK,QAAQ,KAAK;GACnC,QAAQ;GACR,SAAS,EAAE,gBAAgB,mBAAmB;GAC9C,MAAM,KAAK,UAAU,GAAG;EACzB,CAAC;EACD,IAAI,CAAC,IAAI,IACR,MAAM,IAAI,YAAY,iBAAiB,iCAAiC,IAAI,QAAQ;EAErF,OAAQ,MAAM,IAAI,KAAK;CACxB;;;;;;;;CASA,MAAM,OACL,QACA,WACA,OACA,OAAsB,CAAC,GACC;EAExB,MAAM,IAAI,MAAM,KAAK,SAAS;GAAE;GAAQ;GAAW;EAAM,CAAC;EAC1D,IAAI,CAAC,EAAE,OACN,MAAM,IAAI,YAAY,EAAE,UAAU,WAAW,EAAE,UAAU,mBAAmB;EAI7E,MAAM,gBAAgB,WAAW,MAAM;EACvC,MAAM,YAAY,KAAK,KAAK,eAAe,UAAU,SAAS;EAC9D,MAAM,GAAG,MAAM,WAAW,EAAE,WAAW,KAAK,CAAC;EAC7C,KAAK,MAAM,KAAK,OAAO;GACtB,MAAM,OAAO,KAAK,KAAK,WAAW,EAAE,IAAI;GACxC,MAAM,GAAG,MAAM,KAAK,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;GACtD,MAAM,MAAM,GAAG,KAAK,GAAG,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE;GACjD,MAAM,GAAG,UAAU,KAAK,EAAE,SAAS,MAAM;GACzC,MAAM,GAAG,OAAO,KAAK,IAAI;EAC1B;EAGA,MAAM,gBAAgB,qBAAqB;EAC3C,MAAM,EAAE,cAAc,MAAM,KAAK,IAAI,OAAO,eAAe,aAAa;EAGxE,IAAI;EACJ,IAAI;EACJ,IAAI,CAAC,KAAK,UAAU;GACnB,MAAM,SAAS,KAAK,UAAU,KAAK,cAAc,MAAM,KAAK;GAC5D,MAAM,aAAa,MAAM,KAAK,IAAI,KAAK,QAAQ,eAAe,MAAM;GACpE,YAAY,WAAW;GACvB,YAAY,WAAW;EACxB;EAEA,OAAO;GACN;GACA;GACA;GACA;GACA;EACD;CACD;AACD"}

package/dist/submit-CW9schoc.js

@@ -0,0 +1,98 @@
+const require_rolldown_runtime = require("./rolldown-runtime-VH7oDXx4.js");
+const require_userHome = require("./userHome-Baz205B7.js");
+let node_fs_promises = require("node:fs/promises");
+node_fs_promises = require_rolldown_runtime.__toESM(node_fs_promises);
+let node_path = require("node:path");
+node_path = require_rolldown_runtime.__toESM(node_path);
+//#region src/submit/types.ts
+/** Sentinel error thrown by SubmitClient.submit() / validate(). */
+var SubmitError = class extends Error {
+	constructor(reason, detail, options) {
+		super(`submit failed (${reason}): ${detail}`);
+		this.name = "SubmitError";
+		this.reason = reason;
+		this.detail = detail;
+		this.status = options?.status;
+	}
+};
+//#endregion
+//#region src/submit/index.ts
+var SubmitClient = class {
+	constructor(opts) {
+		this.git = opts.gitClient;
+		this.getRepoBranch = opts.getRepoBranch ?? (() => void 0);
+		this.fetcher = opts.fetcher ?? globalThis.fetch;
+		this.defaultServerBaseUrl = opts.defaultServerBaseUrl ?? "http://localhost:3000";
+	}
+	/**
+	* Validate-only path. Useful for the UI's "Save Draft" flow which
+	* wants to surface validation errors without committing or pushing.
+	*/
+	async validate(req) {
+		const url = `${this.defaultServerBaseUrl}/api/v1/skills/validate`;
+		const res = await this.fetcher(url, {
+			method: "POST",
+			headers: { "content-type": "application/json" },
+			body: JSON.stringify(req)
+		});
+		if (!res.ok) throw new SubmitError("network_error", `validate request failed: HTTP ${res.status}`);
+		return await res.json();
+	}
+	/**
+	* Full submit pipeline. Throws `SubmitError` on:
+	*   - validate deny (reason echoed)
+	*   - network failure (network_error)
+	*   - local write failure
+	*   - commit/push failure
+	*/
+	async submit(repoId, skillName, files, opts = {}) {
+		const v = await this.validate({
+			repoId,
+			skillName,
+			files
+		});
+		if (!v.allow) throw new SubmitError(v.reason ?? "unknown", v.detail ?? "validation denied");
+		const localRepoPath = require_userHome.getRepoDir(repoId);
+		const targetDir = node_path.join(localRepoPath, "skills", skillName);
+		await node_fs_promises.mkdir(targetDir, { recursive: true });
+		for (const f of files) {
+			const full = node_path.join(targetDir, f.path);
+			await node_fs_promises.mkdir(node_path.dirname(full), { recursive: true });
+			const tmp = `${full}.${process.pid}.${Date.now()}.tmp`;
+			await node_fs_promises.writeFile(tmp, f.content, "utf8");
+			await node_fs_promises.rename(tmp, full);
+		}
+		const commitMessage = `feat(skills): add ${skillName}`;
+		const { commitSha } = await this.git.commit(localRepoPath, commitMessage);
+		let pushedRef;
+		let pushedSha;
+		if (!opts.skipPush) {
+			const branch = opts.branch ?? this.getRepoBranch(repoId) ?? "main";
+			const pushResult = await this.git.push(repoId, localRepoPath, branch);
+			pushedRef = pushResult.ref;
+			pushedSha = pushResult.commitSha;
+		}
+		return {
+			repoId,
+			skillName,
+			commitSha,
+			pushedRef,
+			pushedSha
+		};
+	}
+};
+//#endregion
+Object.defineProperty(exports, "SubmitClient", {
+	enumerable: true,
+	get: function() {
+		return SubmitClient;
+	}
+});
+Object.defineProperty(exports, "SubmitError", {
+	enumerable: true,
+	get: function() {
+		return SubmitError;
+	}
+});
+
+//# sourceMappingURL=submit-CW9schoc.js.map

package/dist/submit-CW9schoc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"submit-CW9schoc.js","names":["getRepoDir","path","fs"],"sources":["../src/submit/types.ts","../src/submit/index.ts"],"sourcesContent":["/**\n * Skill & Agent v2 — SubmitClient Types (M4)\n *\n * Mirrors the server's POST /api/v1/skills/validate contract (M2\n * SubmitApi). Defined here as a separate types file so the test\n * fixtures + the client can both import without circular deps.\n */\n\n/** Reasons the server may deny a submission. */\nexport type DenyReason =\n\t| \"repo_not_writable\"\n\t| \"file_too_large\"\n\t| \"path_traversal\"\n\t| \"invalid_frontmatter\"\n\t| \"name_conflict\"\n\t/** Local-client-side errors that don't come from the server. */\n\t| \"network_error\"\n\t| \"write_error\"\n\t| \"commit_error\"\n\t| \"push_error\"\n\t| \"unknown\";\n\n/** Request payload. Identical to the server's SubmitValidationRequest. */\nexport interface SubmitValidationRequest {\n\trepoId: string;\n\tskillName: string;\n\tfiles: Array<{ path: string; content: string }>;\n}\n\n/** Response payload. Identical to the server's SubmitValidationResponse. */\nexport interface SubmitValidationResponse {\n\tallow: boolean;\n\treason?: DenyReason;\n\tdetail?: string;\n}\n\n/** Sentinel error thrown by SubmitClient.submit() / validate(). */\nexport class SubmitError extends Error {\n\treadonly reason: DenyReason;\n\treadonly detail: string;\n\treadonly status?: number;\n\n\tconstructor(reason: DenyReason, detail: string, options?: { status?: number }) {\n\t\tsuper(`submit failed (${reason}): ${detail}`);\n\t\tthis.name = \"SubmitError\";\n\t\tthis.reason = reason;\n\t\tthis.detail = detail;\n\t\tthis.status = options?.status;\n\t}\n}\n","import * as fs from \"node:fs/promises\";\nimport * as path from \"node:path\";\nimport type { GitClient } from \"../git-client\";\nimport { getRepoDir } from \"../paths/userHome\";\nimport type { SkillFile } from \"../skill-store/types\";\nimport type { SubmitValidationRequest, SubmitValidationResponse } from \"./types\";\nimport { SubmitError } from \"./types\";\n\n// Re-export so consumers (bridge handlers, CLI commands) can detect\n// SubmitError via `instanceof` without reaching into the internal\n// `./types` module.\nexport { SubmitError } from \"./types\";\n\n/**\n * Skill & Agent v2 — SubmitClient (M4)\n *\n * SubmitClient orchestrates the \"validate then push\" flow described\n * in docs/architecture/skill-agent-v2-repo.md §5.7:\n *\n *   1. **validate** — POST the candidate files to the server's\n *      `/api/v1/skills/validate` endpoint (5 deny reasons: repo_not_\n *      writable, file_too_large, path_traversal, invalid_frontmatter,\n *      name_conflict).\n *   2. **write** — materialize the files into the local repo clone at\n *      `~/.serviceme/repos/<repoId>/skills/<name>/` (or `agents/`).\n *   3. **commit** — `git add . && git commit -m \"feat(skills): add <name>\"`.\n *   4. **push** — `git push origin <branch>` via the server proxy.\n *\n * The client is intentionally thin: it does NOT do its own validation\n * (the server is the gate), and it does NOT cache anything across\n * calls. The single source of truth for \"is this submission allowed?\"\n * is the server's validate endpoint.\n *\n * @see docs/architecture/skill-agent-v2-repo.md §5.7 SubmitClient\n */\n\nexport interface SubmitOptions {\n\t/** Override the server's validate URL. Defaults to `http://localhost:3000/api/v1`. */\n\tserverBaseUrl?: string;\n\t/** Override the branch to push. Defaults to the repo's `branch` field. */\n\tbranch?: string;\n\t/** Skip the actual push (for tests + dry-runs). When true, step 4 returns a synthetic PushResult. */\n\tskipPush?: boolean;\n}\n\nexport interface SubmitResult {\n\trepoId: string;\n\tskillName: string;\n\tcommitSha: string;\n\tpushedRef?: string;\n\tpushedSha?: string;\n}\n\nexport interface SubmitClientOptions {\n\tgitClient: GitClient;\n\t/** Lookup the default branch for a repo (config-driven). */\n\tgetRepoBranch?: (repoId: string) => string | undefined;\n\t/** HTTP fetch impl (defaults to the global `fetch`). */\n\tfetcher?: typeof fetch;\n\t/** Default server base URL when no override is supplied. */\n\tdefaultServerBaseUrl?: string;\n}\n\nexport class SubmitClient {\n\tprivate readonly git: GitClient;\n\tprivate readonly getRepoBranch: (repoId: string) => string | undefined;\n\tprivate readonly fetcher: typeof fetch;\n\tprivate readonly defaultServerBaseUrl: string;\n\n\tconstructor(opts: SubmitClientOptions) {\n\t\tthis.git = opts.gitClient;\n\t\tthis.getRepoBranch = opts.getRepoBranch ?? (() => undefined);\n\t\tthis.fetcher = opts.fetcher ?? (globalThis.fetch as typeof fetch);\n\t\tthis.defaultServerBaseUrl = opts.defaultServerBaseUrl ?? \"http://localhost:3000\";\n\t}\n\n\t/**\n\t * Validate-only path. Useful for the UI's \"Save Draft\" flow which\n\t * wants to surface validation errors without committing or pushing.\n\t */\n\tasync validate(req: SubmitValidationRequest): Promise<SubmitValidationResponse> {\n\t\tconst url = `${this.defaultServerBaseUrl}/api/v1/skills/validate`;\n\t\tconst res = await this.fetcher(url, {\n\t\t\tmethod: \"POST\",\n\t\t\theaders: { \"content-type\": \"application/json\" },\n\t\t\tbody: JSON.stringify(req),\n\t\t});\n\t\tif (!res.ok) {\n\t\t\tthrow new SubmitError(\"network_error\", `validate request failed: HTTP ${res.status}`);\n\t\t}\n\t\treturn (await res.json()) as SubmitValidationResponse;\n\t}\n\n\t/**\n\t * Full submit pipeline. Throws `SubmitError` on:\n\t *   - validate deny (reason echoed)\n\t *   - network failure (network_error)\n\t *   - local write failure\n\t *   - commit/push failure\n\t */\n\tasync submit(\n\t\trepoId: string,\n\t\tskillName: string,\n\t\tfiles: SkillFile[],\n\t\topts: SubmitOptions = {}\n\t): Promise<SubmitResult> {\n\t\t// (1) Validate\n\t\tconst v = await this.validate({ repoId, skillName, files });\n\t\tif (!v.allow) {\n\t\t\tthrow new SubmitError(v.reason ?? \"unknown\", v.detail ?? \"validation denied\");\n\t\t}\n\n\t\t// (2) Write files into the local repo clone\n\t\tconst localRepoPath = getRepoDir(repoId);\n\t\tconst targetDir = path.join(localRepoPath, \"skills\", skillName);\n\t\tawait fs.mkdir(targetDir, { recursive: true });\n\t\tfor (const f of files) {\n\t\t\tconst full = path.join(targetDir, f.path);\n\t\t\tawait fs.mkdir(path.dirname(full), { recursive: true });\n\t\t\tconst tmp = `${full}.${process.pid}.${Date.now()}.tmp`;\n\t\t\tawait fs.writeFile(tmp, f.content, \"utf8\");\n\t\t\tawait fs.rename(tmp, full);\n\t\t}\n\n\t\t// (3) Commit (convention: `feat(skills): add <name>`)\n\t\tconst commitMessage = `feat(skills): add ${skillName}`;\n\t\tconst { commitSha } = await this.git.commit(localRepoPath, commitMessage);\n\n\t\t// (4) Push\n\t\tlet pushedRef: string | undefined;\n\t\tlet pushedSha: string | undefined;\n\t\tif (!opts.skipPush) {\n\t\t\tconst branch = opts.branch ?? this.getRepoBranch(repoId) ?? \"main\";\n\t\t\tconst pushResult = await this.git.push(repoId, localRepoPath, branch);\n\t\t\tpushedRef = pushResult.ref;\n\t\t\tpushedSha = pushResult.commitSha;\n\t\t}\n\n\t\treturn {\n\t\t\trepoId,\n\t\t\tskillName,\n\t\t\tcommitSha,\n\t\t\tpushedRef,\n\t\t\tpushedSha,\n\t\t};\n\t}\n}\n"],"mappings":";;;;;;;;AAqCA,IAAa,cAAb,cAAiC,MAAM;CAKtC,YAAY,QAAoB,QAAgB,SAA+B;EAC9E,MAAM,kBAAkB,OAAO,KAAK,QAAQ;EAC5C,KAAK,OAAO;EACZ,KAAK,SAAS;EACd,KAAK,SAAS;EACd,KAAK,SAAS,SAAS;CACxB;AACD;;;ACcA,IAAa,eAAb,MAA0B;CAMzB,YAAY,MAA2B;EACtC,KAAK,MAAM,KAAK;EAChB,KAAK,gBAAgB,KAAK,wBAAwB,KAAA;EAClD,KAAK,UAAU,KAAK,WAAY,WAAW;EAC3C,KAAK,uBAAuB,KAAK,wBAAwB;CAC1D;;;;;CAMA,MAAM,SAAS,KAAiE;EAC/E,MAAM,MAAM,GAAG,KAAK,qBAAqB;EACzC,MAAM,MAAM,MAAM,KAAK,QAAQ,KAAK;GACnC,QAAQ;GACR,SAAS,EAAE,gBAAgB,mBAAmB;GAC9C,MAAM,KAAK,UAAU,GAAG;EACzB,CAAC;EACD,IAAI,CAAC,IAAI,IACR,MAAM,IAAI,YAAY,iBAAiB,iCAAiC,IAAI,QAAQ;EAErF,OAAQ,MAAM,IAAI,KAAK;CACxB;;;;;;;;CASA,MAAM,OACL,QACA,WACA,OACA,OAAsB,CAAC,GACC;EAExB,MAAM,IAAI,MAAM,KAAK,SAAS;GAAE;GAAQ;GAAW;EAAM,CAAC;EAC1D,IAAI,CAAC,EAAE,OACN,MAAM,IAAI,YAAY,EAAE,UAAU,WAAW,EAAE,UAAU,mBAAmB;EAI7E,MAAM,gBAAgBA,iBAAAA,WAAW,MAAM;EACvC,MAAM,YAAYC,UAAK,KAAK,eAAe,UAAU,SAAS;EAC9D,MAAMC,iBAAG,MAAM,WAAW,EAAE,WAAW,KAAK,CAAC;EAC7C,KAAK,MAAM,KAAK,OAAO;GACtB,MAAM,OAAOD,UAAK,KAAK,WAAW,EAAE,IAAI;GACxC,MAAMC,iBAAG,MAAMD,UAAK,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;GACtD,MAAM,MAAM,GAAG,KAAK,GAAG,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE;GACjD,MAAMC,iBAAG,UAAU,KAAK,EAAE,SAAS,MAAM;GACzC,MAAMA,iBAAG,OAAO,KAAK,IAAI;EAC1B;EAGA,MAAM,gBAAgB,qBAAqB;EAC3C,MAAM,EAAE,cAAc,MAAM,KAAK,IAAI,OAAO,eAAe,aAAa;EAGxE,IAAI;EACJ,IAAI;EACJ,IAAI,CAAC,KAAK,UAAU;GACnB,MAAM,SAAS,KAAK,UAAU,KAAK,cAAc,MAAM,KAAK;GAC5D,MAAM,aAAa,MAAM,KAAK,IAAI,KAAK,QAAQ,eAAe,MAAM;GACpE,YAAY,WAAW;GACvB,YAAY,WAAW;EACxB;EAEA,OAAO;GACN;GACA;GACA;GACA;GACA;EACD;CACD;AACD"}

package/dist/submit-Dy0KTHzm.js

@@ -0,0 +1,98 @@
+const require_rolldown_runtime = require("./rolldown-runtime-VH7oDXx4.js");
+const require_userHome = require("./userHome-CLlsXCvW.js");
+let node_fs_promises = require("node:fs/promises");
+node_fs_promises = require_rolldown_runtime.__toESM(node_fs_promises);
+let node_path = require("node:path");
+node_path = require_rolldown_runtime.__toESM(node_path);
+//#region src/submit/types.ts
+/** Sentinel error thrown by SubmitClient.submit() / validate(). */
+var SubmitError = class extends Error {
+	constructor(reason, detail, options) {
+		super(`submit failed (${reason}): ${detail}`);
+		this.name = "SubmitError";
+		this.reason = reason;
+		this.detail = detail;
+		this.status = options?.status;
+	}
+};
+//#endregion
+//#region src/submit/index.ts
+var SubmitClient = class {
+	constructor(opts) {
+		this.git = opts.gitClient;
+		this.getRepoBranch = opts.getRepoBranch ?? (() => void 0);
+		this.fetcher = opts.fetcher ?? globalThis.fetch;
+		this.defaultServerBaseUrl = opts.defaultServerBaseUrl ?? "http://localhost:3000";
+	}
+	/**
+	* Validate-only path. Useful for the UI's "Save Draft" flow which
+	* wants to surface validation errors without committing or pushing.
+	*/
+	async validate(req) {
+		const url = `${this.defaultServerBaseUrl}/api/v1/skills/validate`;
+		const res = await this.fetcher(url, {
+			method: "POST",
+			headers: { "content-type": "application/json" },
+			body: JSON.stringify(req)
+		});
+		if (!res.ok) throw new SubmitError("network_error", `validate request failed: HTTP ${res.status}`);
+		return await res.json();
+	}
+	/**
+	* Full submit pipeline. Throws `SubmitError` on:
+	*   - validate deny (reason echoed)
+	*   - network failure (network_error)
+	*   - local write failure
+	*   - commit/push failure
+	*/
+	async submit(repoId, skillName, files, opts = {}) {
+		const v = await this.validate({
+			repoId,
+			skillName,
+			files
+		});
+		if (!v.allow) throw new SubmitError(v.reason ?? "unknown", v.detail ?? "validation denied");
+		const localRepoPath = require_userHome.getRepoDir(repoId);
+		const targetDir = node_path.join(localRepoPath, "skills", skillName);
+		await node_fs_promises.mkdir(targetDir, { recursive: true });
+		for (const f of files) {
+			const full = node_path.join(targetDir, f.path);
+			await node_fs_promises.mkdir(node_path.dirname(full), { recursive: true });
+			const tmp = `${full}.${process.pid}.${Date.now()}.tmp`;
+			await node_fs_promises.writeFile(tmp, f.content, "utf8");
+			await node_fs_promises.rename(tmp, full);
+		}
+		const commitMessage = `feat(skills): add ${skillName}`;
+		const { commitSha } = await this.git.commit(localRepoPath, commitMessage);
+		let pushedRef;
+		let pushedSha;
+		if (!opts.skipPush) {
+			const branch = opts.branch ?? this.getRepoBranch(repoId) ?? "main";
+			const pushResult = await this.git.push(repoId, localRepoPath, branch);
+			pushedRef = pushResult.ref;
+			pushedSha = pushResult.commitSha;
+		}
+		return {
+			repoId,
+			skillName,
+			commitSha,
+			pushedRef,
+			pushedSha
+		};
+	}
+};
+//#endregion
+Object.defineProperty(exports, "SubmitClient", {
+	enumerable: true,
+	get: function() {
+		return SubmitClient;
+	}
+});
+Object.defineProperty(exports, "SubmitError", {
+	enumerable: true,
+	get: function() {
+		return SubmitError;
+	}
+});
+
+//# sourceMappingURL=submit-Dy0KTHzm.js.map

package/dist/submit-Dy0KTHzm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"submit-Dy0KTHzm.js","names":["getRepoDir","path","fs"],"sources":["../src/submit/types.ts","../src/submit/index.ts"],"sourcesContent":["/**\n * Skill & Agent v2 — SubmitClient Types (M4)\n *\n * Mirrors the server's POST /api/v1/skills/validate contract (M2\n * SubmitApi). Defined here as a separate types file so the test\n * fixtures + the client can both import without circular deps.\n */\n\n/** Reasons the server may deny a submission. */\nexport type DenyReason =\n\t| \"repo_not_writable\"\n\t| \"file_too_large\"\n\t| \"path_traversal\"\n\t| \"invalid_frontmatter\"\n\t| \"name_conflict\"\n\t/** Local-client-side errors that don't come from the server. */\n\t| \"network_error\"\n\t| \"write_error\"\n\t| \"commit_error\"\n\t| \"push_error\"\n\t| \"unknown\";\n\n/** Request payload. Identical to the server's SubmitValidationRequest. */\nexport interface SubmitValidationRequest {\n\trepoId: string;\n\tskillName: string;\n\tfiles: Array<{ path: string; content: string }>;\n}\n\n/** Response payload. Identical to the server's SubmitValidationResponse. */\nexport interface SubmitValidationResponse {\n\tallow: boolean;\n\treason?: DenyReason;\n\tdetail?: string;\n}\n\n/** Sentinel error thrown by SubmitClient.submit() / validate(). */\nexport class SubmitError extends Error {\n\treadonly reason: DenyReason;\n\treadonly detail: string;\n\treadonly status?: number;\n\n\tconstructor(reason: DenyReason, detail: string, options?: { status?: number }) {\n\t\tsuper(`submit failed (${reason}): ${detail}`);\n\t\tthis.name = \"SubmitError\";\n\t\tthis.reason = reason;\n\t\tthis.detail = detail;\n\t\tthis.status = options?.status;\n\t}\n}\n","import * as fs from \"node:fs/promises\";\nimport * as path from \"node:path\";\nimport type { GitClient } from \"../git-client\";\nimport { getRepoDir } from \"../paths/userHome\";\nimport type { SkillFile } from \"../skill-store/types\";\nimport type { SubmitValidationRequest, SubmitValidationResponse } from \"./types\";\nimport { SubmitError } from \"./types\";\n\n// Re-export so consumers (bridge handlers, CLI commands) can detect\n// SubmitError via `instanceof` without reaching into the internal\n// `./types` module.\nexport { SubmitError } from \"./types\";\n\n/**\n * Skill & Agent v2 — SubmitClient (M4)\n *\n * SubmitClient orchestrates the \"validate then push\" flow described\n * in docs/architecture/skill-agent-v2-repo.md §5.7:\n *\n *   1. **validate** — POST the candidate files to the server's\n *      `/api/v1/skills/validate` endpoint (5 deny reasons: repo_not_\n *      writable, file_too_large, path_traversal, invalid_frontmatter,\n *      name_conflict).\n *   2. **write** — materialize the files into the local repo clone at\n *      `~/.serviceme/repos/<repoId>/skills/<name>/` (or `agents/`).\n *   3. **commit** — `git add . && git commit -m \"feat(skills): add <name>\"`.\n *   4. **push** — `git push origin <branch>` via the server proxy.\n *\n * The client is intentionally thin: it does NOT do its own validation\n * (the server is the gate), and it does NOT cache anything across\n * calls. The single source of truth for \"is this submission allowed?\"\n * is the server's validate endpoint.\n *\n * @see docs/architecture/skill-agent-v2-repo.md §5.7 SubmitClient\n */\n\nexport interface SubmitOptions {\n\t/** Override the server's validate URL. Defaults to `http://localhost:3000/api/v1`. */\n\tserverBaseUrl?: string;\n\t/** Override the branch to push. Defaults to the repo's `branch` field. */\n\tbranch?: string;\n\t/** Skip the actual push (for tests + dry-runs). When true, step 4 returns a synthetic PushResult. */\n\tskipPush?: boolean;\n}\n\nexport interface SubmitResult {\n\trepoId: string;\n\tskillName: string;\n\tcommitSha: string;\n\tpushedRef?: string;\n\tpushedSha?: string;\n}\n\nexport interface SubmitClientOptions {\n\tgitClient: GitClient;\n\t/** Lookup the default branch for a repo (config-driven). */\n\tgetRepoBranch?: (repoId: string) => string | undefined;\n\t/** HTTP fetch impl (defaults to the global `fetch`). */\n\tfetcher?: typeof fetch;\n\t/** Default server base URL when no override is supplied. */\n\tdefaultServerBaseUrl?: string;\n}\n\nexport class SubmitClient {\n\tprivate readonly git: GitClient;\n\tprivate readonly getRepoBranch: (repoId: string) => string | undefined;\n\tprivate readonly fetcher: typeof fetch;\n\tprivate readonly defaultServerBaseUrl: string;\n\n\tconstructor(opts: SubmitClientOptions) {\n\t\tthis.git = opts.gitClient;\n\t\tthis.getRepoBranch = opts.getRepoBranch ?? (() => undefined);\n\t\tthis.fetcher = opts.fetcher ?? (globalThis.fetch as typeof fetch);\n\t\tthis.defaultServerBaseUrl = opts.defaultServerBaseUrl ?? \"http://localhost:3000\";\n\t}\n\n\t/**\n\t * Validate-only path. Useful for the UI's \"Save Draft\" flow which\n\t * wants to surface validation errors without committing or pushing.\n\t */\n\tasync validate(req: SubmitValidationRequest): Promise<SubmitValidationResponse> {\n\t\tconst url = `${this.defaultServerBaseUrl}/api/v1/skills/validate`;\n\t\tconst res = await this.fetcher(url, {\n\t\t\tmethod: \"POST\",\n\t\t\theaders: { \"content-type\": \"application/json\" },\n\t\t\tbody: JSON.stringify(req),\n\t\t});\n\t\tif (!res.ok) {\n\t\t\tthrow new SubmitError(\"network_error\", `validate request failed: HTTP ${res.status}`);\n\t\t}\n\t\treturn (await res.json()) as SubmitValidationResponse;\n\t}\n\n\t/**\n\t * Full submit pipeline. Throws `SubmitError` on:\n\t *   - validate deny (reason echoed)\n\t *   - network failure (network_error)\n\t *   - local write failure\n\t *   - commit/push failure\n\t */\n\tasync submit(\n\t\trepoId: string,\n\t\tskillName: string,\n\t\tfiles: SkillFile[],\n\t\topts: SubmitOptions = {}\n\t): Promise<SubmitResult> {\n\t\t// (1) Validate\n\t\tconst v = await this.validate({ repoId, skillName, files });\n\t\tif (!v.allow) {\n\t\t\tthrow new SubmitError(v.reason ?? \"unknown\", v.detail ?? \"validation denied\");\n\t\t}\n\n\t\t// (2) Write files into the local repo clone\n\t\tconst localRepoPath = getRepoDir(repoId);\n\t\tconst targetDir = path.join(localRepoPath, \"skills\", skillName);\n\t\tawait fs.mkdir(targetDir, { recursive: true });\n\t\tfor (const f of files) {\n\t\t\tconst full = path.join(targetDir, f.path);\n\t\t\tawait fs.mkdir(path.dirname(full), { recursive: true });\n\t\t\tconst tmp = `${full}.${process.pid}.${Date.now()}.tmp`;\n\t\t\tawait fs.writeFile(tmp, f.content, \"utf8\");\n\t\t\tawait fs.rename(tmp, full);\n\t\t}\n\n\t\t// (3) Commit (convention: `feat(skills): add <name>`)\n\t\tconst commitMessage = `feat(skills): add ${skillName}`;\n\t\tconst { commitSha } = await this.git.commit(localRepoPath, commitMessage);\n\n\t\t// (4) Push\n\t\tlet pushedRef: string | undefined;\n\t\tlet pushedSha: string | undefined;\n\t\tif (!opts.skipPush) {\n\t\t\tconst branch = opts.branch ?? this.getRepoBranch(repoId) ?? \"main\";\n\t\t\tconst pushResult = await this.git.push(repoId, localRepoPath, branch);\n\t\t\tpushedRef = pushResult.ref;\n\t\t\tpushedSha = pushResult.commitSha;\n\t\t}\n\n\t\treturn {\n\t\t\trepoId,\n\t\t\tskillName,\n\t\t\tcommitSha,\n\t\t\tpushedRef,\n\t\t\tpushedSha,\n\t\t};\n\t}\n}\n"],"mappings":";;;;;;;;AAqCA,IAAa,cAAb,cAAiC,MAAM;CAKtC,YAAY,QAAoB,QAAgB,SAA+B;EAC9E,MAAM,kBAAkB,OAAO,KAAK,QAAQ;EAC5C,KAAK,OAAO;EACZ,KAAK,SAAS;EACd,KAAK,SAAS;EACd,KAAK,SAAS,SAAS;CACxB;AACD;;;ACcA,IAAa,eAAb,MAA0B;CAMzB,YAAY,MAA2B;EACtC,KAAK,MAAM,KAAK;EAChB,KAAK,gBAAgB,KAAK,wBAAwB,KAAA;EAClD,KAAK,UAAU,KAAK,WAAY,WAAW;EAC3C,KAAK,uBAAuB,KAAK,wBAAwB;CAC1D;;;;;CAMA,MAAM,SAAS,KAAiE;EAC/E,MAAM,MAAM,GAAG,KAAK,qBAAqB;EACzC,MAAM,MAAM,MAAM,KAAK,QAAQ,KAAK;GACnC,QAAQ;GACR,SAAS,EAAE,gBAAgB,mBAAmB;GAC9C,MAAM,KAAK,UAAU,GAAG;EACzB,CAAC;EACD,IAAI,CAAC,IAAI,IACR,MAAM,IAAI,YAAY,iBAAiB,iCAAiC,IAAI,QAAQ;EAErF,OAAQ,MAAM,IAAI,KAAK;CACxB;;;;;;;;CASA,MAAM,OACL,QACA,WACA,OACA,OAAsB,CAAC,GACC;EAExB,MAAM,IAAI,MAAM,KAAK,SAAS;GAAE;GAAQ;GAAW;EAAM,CAAC;EAC1D,IAAI,CAAC,EAAE,OACN,MAAM,IAAI,YAAY,EAAE,UAAU,WAAW,EAAE,UAAU,mBAAmB;EAI7E,MAAM,gBAAgBA,iBAAAA,WAAW,MAAM;EACvC,MAAM,YAAYC,UAAK,KAAK,eAAe,UAAU,SAAS;EAC9D,MAAMC,iBAAG,MAAM,WAAW,EAAE,WAAW,KAAK,CAAC;EAC7C,KAAK,MAAM,KAAK,OAAO;GACtB,MAAM,OAAOD,UAAK,KAAK,WAAW,EAAE,IAAI;GACxC,MAAMC,iBAAG,MAAMD,UAAK,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;GACtD,MAAM,MAAM,GAAG,KAAK,GAAG,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE;GACjD,MAAMC,iBAAG,UAAU,KAAK,EAAE,SAAS,MAAM;GACzC,MAAMA,iBAAG,OAAO,KAAK,IAAI;EAC1B;EAGA,MAAM,gBAAgB,qBAAqB;EAC3C,MAAM,EAAE,cAAc,MAAM,KAAK,IAAI,OAAO,eAAe,aAAa;EAGxE,IAAI;EACJ,IAAI;EACJ,IAAI,CAAC,KAAK,UAAU;GACnB,MAAM,SAAS,KAAK,UAAU,KAAK,cAAc,MAAM,KAAK;GAC5D,MAAM,aAAa,MAAM,KAAK,IAAI,KAAK,QAAQ,eAAe,MAAM;GACpE,YAAY,WAAW;GACvB,YAAY,WAAW;EACxB;EAEA,OAAO;GACN;GACA;GACA;GACA;GACA;EACD;CACD;AACD"}

package/dist/submit.js

@@ -1,4 +1,4 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_submit = require("./submit-CltE6YOZ.js");
+const require_submit = require("./submit-CW9schoc.js");
 exports.SubmitClient = require_submit.SubmitClient;
 exports.SubmitError = require_submit.SubmitError;

package/dist/submit.mjs

@@ -1,2 +1,2 @@
-import { n as SubmitError, t as SubmitClient } from "./submit-Cg7wSa3x.mjs";
+import { n as SubmitError, t as SubmitClient } from "./submit-BTdbGEAd.mjs";
 export { SubmitClient, SubmitError };