@skaile/workspaces 0.22.0-beta.0 → 0.22.0-beta.2

package/dist/core/src/models.d.ts

@@ -29,6 +29,8 @@ export interface Dependency {
     kind: string;
     /** Asset name within that kind. */
     name: string;
+    /** Canonical publisher namespace (when known). */
+    publisher?: string;
 }
 /**
  * Parse a `"kind:name"` dependency string, or a bare `"name"` (defaults kind to `"skill"`).
@@ -60,10 +62,14 @@ export interface CatalogEntry {
     description: string;
     /** Absolute path to manifest file */
     source: string;
-    /** Originating repository name */
-    repository?: string;
-    /** Domain this asset belongs to (top-level directory in the repo root). */
-    domain?: string;
+    /** Canonical publisher namespace this asset belongs to (formerly `repository`). */
+    publisher?: string;
+    /**
+     * `"<org>/<repo>"` coordinate the asset came from. Absent → the asset groups
+     * directly under its publisher (local library with no git remote, or a
+     * non-GitHub source). Replaces the former derived `domain` axis.
+     */
+    repo?: string;
     /** Semantic version string (may be empty if not declared in the manifest). */
     version: string;
     /** Skills, agents, or other assets this entry depends on. */
@@ -77,6 +83,8 @@ export interface CatalogEntry {
      * requiring verbose inline config in `skaile.yaml`.
      */
     metadata?: Record<string, unknown>;
+    /** Curated facet, surfaced as a badge in the manage TUI (not a tree axis). */
+    category?: string;
 }
 /**
  * Construct a CatalogEntry from a raw deserialized record (e.g. from catalog.yaml).
@@ -95,31 +103,42 @@ export declare function entryFromRaw(d: Record<string, unknown>): CatalogEntry;
  */
 export declare function entryToRaw(e: CatalogEntry): Record<string, unknown>;
 /**
- * A parsed asset reference: `kind:name[@repository][#pin]`.
+ * A parsed asset reference: `kind:name@<publisher>[#pin]`.
+ *
+ * `publisher` is the canonical, GitHub-shaped publisher namespace (≤39 chars,
+ * alphanumeric+hyphen). `pin` is a SemVer constraint, exact SHA, or absent.
+ * Floating refs (`main`, `latest`, `HEAD`) are rejected at parse time.
+ *
  * Produced by `parseAssetRef`; consumed by `resolveAsset` and `resolveAll`.
  * @docLink packages/core/concepts#asset-ref
  */
 export interface AssetRef {
     kind: string;
     name: string;
-    /** Optional repository qualifier (from skaile.yaml repositories section). */
-    repository?: string;
-    /** Optional pin: git tag, commit SHA, or branch name. */
+    /** Canonical publisher namespace. Optional only for ambiguity-resolution
+     *  during migration; new manifests require it. */
+    publisher?: string;
+    /** SemVer constraint (^1.4.0, ~1.4, 1.x, exact 1.4.0), 40-char SHA, or undefined. */
     pin?: string;
 }
 /**
- * Parse an asset reference string into an `AssetRef` object.
+ * Parse a canonical asset reference string into an `AssetRef` object.
  *
- * Formats:
- *   "skill:overview"                    → { kind: "skill", name: "overview" }
- *   "skill:overview@skaile-ai"          → { kind: "skill", name: "overview", repository: "skaile-ai" }
- *   "skill:overview@skaile-ai#v2.1.0"   → { kind: "skill", name: "overview", repository: "skaile-ai", pin: "v2.1.0" }
- *   "overview"                           → { kind: "skill", name: "overview" }
+ * Grammar: `kind:name@<publisher>[#pin]`
+ *   "skill:audit@skaile-ai"          → { kind: "skill", name: "audit", publisher: "skaile-ai" }
+ *   "skill:audit@skaile-ai#^1.4.0"   → { …, pin: "^1.4.0" }
+ *   "skill:audit@skaile-ai#<40-sha>" → { …, pin: "<40-sha>" }
+ *
+ * `<publisher>` is required and GitHub-shaped (≤39 chars, alphanumeric+hyphen,
+ * no leading/trailing or double hyphen). `pin` accepts a SemVer constraint
+ * (`^`, `~`, `x`, exact), a 40-char SHA, or is absent. Floating refs
+ * (`main`/`latest`/`HEAD`/anything non-canonical) are parse-time errors.
  *
  * The shorthand `mcp:` is normalized to `mcp-server:`.
  *
  * @param s - Asset reference string
  * @returns Parsed `AssetRef`
+ * @throws When the publisher is missing/malformed or the pin is a floating ref.
  * @docLink packages/core/concepts#parse-asset-ref
  */
 export declare function parseAssetRef(s: string): AssetRef;
@@ -139,54 +158,47 @@ export declare function assetRefToStr(ref: AssetRef): string;
  * @docLink packages/core/concepts#asset-ref-to-dep
  */
 export declare function assetRefToDep(ref: AssetRef): Dependency;
-/**
- * Repository entry recorded in the lock file.
- * Captures the source URL or path, branch, and resolved HEAD commit.
- * @docLink packages/core/api-reference#lock-repository
- */
-export interface LockRepository {
-    /** Remote git URL (for cloned repos). */
-    url?: string;
-    /** Local filesystem path (for path repos). */
-    path?: string;
-    /** Branch that was locked. */
-    branch: string;
-    /** HEAD commit SHA at lock time. */
-    commit?: string;
+/** A path/sha256 pair recorded for one file inside a locked asset. */
+export interface LockFileEntry {
+    path: string;
+    sha256: string;
 }
 /**
- * Per-asset entry in the lock file.
- * Records the resolved version, repo source, content integrity hash, and resolution provenance.
+ * Per-asset entry in the lock file (v2 schema).
+ * Keyed in `LockFile.assets` by canonical ref (`<publisher>/<kind>:<name>@<version>`).
  * @docLink packages/core/api-reference#lock-entry
  */
 export interface LockEntry {
-    /** Semver version at lock time. */
-    version: string;
-    /** Name of the repository this asset was resolved from. */
-    repository: string;
-    /** Path to manifest relative to repo root. */
-    source: string;
-    /** Domain this asset belongs to (top-level directory in the repo root). */
-    domain?: string;
-    /** SHA-256 hash of manifest content. */
-    integrity: string;
-    /** What caused this asset to be included: "direct" or "kind:name" of parent. */
-    resolved_by: string;
+    /** Composite sha256 over sorted `<path>:<sha256>\n` rows. */
+    sha256: string;
+    /** Resolved upstream source + commit. */
+    source: {
+        url: string;
+        commit: string;
+    };
+    /** Files that constitute the asset. */
+    files: LockFileEntry[];
+    /** True when an `overrides[]` entry pinned this resolution. */
+    override_applied: boolean;
+}
+/** Per-source-URL entry in `LockFile.sources`. */
+export interface LockSourceEntry {
+    url: string;
+    commit: string;
 }
 /**
- * Full skaile.lock.yaml structure.
- * Captures the complete resolved state of all asset dependencies at install time.
+ * Full skaile.lock.yaml structure (v2 schema).
  * @docLink packages/core/api-reference#lock-file
  */
 export interface LockFile {
-    /** Lock file schema version. */
-    lockfile_version: number;
+    /** Lock file schema version. v2 is canonical. */
+    schema_version: 2;
     /** ISO timestamp of when the lock was generated. */
     locked_at: string;
-    /** Repositories declared in skaile.yaml, with their locked commits. */
-    repositories: Record<string, LockRepository>;
-    /** All resolved assets keyed by "kind:name". */
+    /** Resolved assets keyed by canonical ref `<publisher>/<kind>:<name>@<version>`. */
     assets: Record<string, LockEntry>;
+    /** Every source URL that contributed at least one resolved asset. */
+    sources: LockSourceEntry[];
     /**
      * Resolved plugin packages (from `skaile.yaml` `plugins:`), keyed by package
      * name. The plugin-store reconciler reads this slice into its reconcile-hash

package/dist/core/src/models.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"models.d.ts","sourceRoot":"","sources":["../../../core/src/models.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;;;GAIG;AACH,MAAM,MAAM,SAAS,GACjB,OAAO,GACP,OAAO,GACP,QAAQ,GACR,QAAQ,GACR,MAAM,GACN,UAAU,GACV,YAAY,GACZ,SAAS,GACT,SAAS,GACT,WAAW,GACX,WAAW,CAAC;AAEhB;;;GAGG;AACH,eAAO,MAAM,WAAW,EAAE,SAAS,SAAS,EAY3C,CAAC;AACF;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,gEAOG,CAAC;AAIjC;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,sDAAsD;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,mCAAmC;IACnC,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,CAAC,EAAE,MAAM,GAAG,UAAU,CAQ9C;AAED;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,CAAC,EAAE,UAAU,GAAG,MAAM,CAE9C;AAID;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,gCAAgC;IAChC,IAAI,EAAE,SAAS,CAAC;IAChB,iDAAiD;IACjD,WAAW,EAAE,MAAM,CAAC;IACpB,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,kCAAkC;IAClC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2EAA2E;IAC3E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,OAAO,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,QAAQ,EAAE,UAAU,EAAE,CAAC;IACvB,kEAAkE;IAClE,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,YAAY,CAoBrE;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAcnE;AAID;;;;GAIG;AACH,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yDAAyD;IACzD,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,QAAQ,CA+BjD;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,QAAQ,GAAG,MAAM,CAKnD;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,QAAQ,GAAG,UAAU,CAEvD;AAID;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,yCAAyC;IACzC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,8CAA8C;IAC9C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8BAA8B;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,oCAAoC;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,mCAAmC;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,2DAA2D;IAC3D,UAAU,EAAE,MAAM,CAAC;IACnB,8CAA8C;IAC9C,MAAM,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wCAAwC;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,gFAAgF;IAChF,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,MAAM,WAAW,QAAQ;IACvB,gCAAgC;IAChC,gBAAgB,EAAE,MAAM,CAAC;IACzB,oDAAoD;IACpD,SAAS,EAAE,MAAM,CAAC;IAClB,uEAAuE;IACvE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC7C,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAClC;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;CAC3C;AAED,oEAAoE;AACpE,MAAM,WAAW,eAAe;IAC9B,6CAA6C;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,kGAAkG;IAClG,SAAS,EAAE,MAAM,CAAC;CACnB;AAID;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE;QACN,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,WAAW,CAAC,EAAE;YAAE,WAAW,CAAC,EAAE,MAAM,CAAC;YAAC,UAAU,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KAC7D,CAAC;IACF,KAAK,CAAC,EAAE;QACN,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;QACnB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;KACnB,CAAC;IACF,UAAU,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/B,QAAQ,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpF,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,KAAK,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,GAAG,EAAE,MAAM,CAAC;QACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,cAAc,GAAG,aAAa,GAAG,iBAAiB,CAAC;KAC9D,CAAC,CAAC;IACH,OAAO,CAAC,EAAE;QACR,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;CACH;AAID,KAAK,cAAc,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEzC;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,+BAA+B;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,IAAI,EAAE,cAAc,CAAC;IACrB,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,qBAAqB;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,oDAAoD;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,CAQxE;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAStE"}
+{"version":3,"file":"models.d.ts","sourceRoot":"","sources":["../../../core/src/models.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH;;;;GAIG;AACH,MAAM,MAAM,SAAS,GACjB,OAAO,GACP,OAAO,GACP,QAAQ,GACR,QAAQ,GACR,MAAM,GACN,UAAU,GACV,YAAY,GACZ,SAAS,GACT,SAAS,GACT,WAAW,GACX,WAAW,CAAC;AAEhB;;;GAGG;AACH,eAAO,MAAM,WAAW,EAAE,SAAS,SAAS,EAY3C,CAAC;AACF;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,gEAOG,CAAC;AAIjC;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,sDAAsD;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,mCAAmC;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,kDAAkD;IAClD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,CAAC,EAAE,MAAM,GAAG,UAAU,CAQ9C;AAED;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,CAAC,EAAE,UAAU,GAAG,MAAM,CAE9C;AAID;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,gCAAgC;IAChC,IAAI,EAAE,SAAS,CAAC;IAChB,iDAAiD;IACjD,WAAW,EAAE,MAAM,CAAC;IACpB,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,mFAAmF;IACnF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,OAAO,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,QAAQ,EAAE,UAAU,EAAE,CAAC;IACvB,kEAAkE;IAClE,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,YAAY,CAwBrE;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAenE;AAID;;;;;;;;;GASG;AACH,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb;sDACkD;IAClD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qFAAqF;IACrF,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAeD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,QAAQ,CAgDjD;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,QAAQ,GAAG,MAAM,CAKnD;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,QAAQ,GAAG,UAAU,CAEvD;AAID,sEAAsE;AACtE,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,6DAA6D;IAC7D,MAAM,EAAE,MAAM,CAAC;IACf,yCAAyC;IACzC,MAAM,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACxC,uCAAuC;IACvC,KAAK,EAAE,aAAa,EAAE,CAAC;IACvB,+DAA+D;IAC/D,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED,kDAAkD;AAClD,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACvB,iDAAiD;IACjD,cAAc,EAAE,CAAC,CAAC;IAClB,oDAAoD;IACpD,SAAS,EAAE,MAAM,CAAC;IAClB,oFAAoF;IACpF,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAClC,qEAAqE;IACrE,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;CAC3C;AAED,oEAAoE;AACpE,MAAM,WAAW,eAAe;IAC9B,6CAA6C;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,kGAAkG;IAClG,SAAS,EAAE,MAAM,CAAC;CACnB;AAID;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE;QACN,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,WAAW,CAAC,EAAE;YAAE,WAAW,CAAC,EAAE,MAAM,CAAC;YAAC,UAAU,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KAC7D,CAAC;IACF,KAAK,CAAC,EAAE;QACN,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;QACnB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;KACnB,CAAC;IACF,UAAU,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/B,QAAQ,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpF,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,KAAK,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,GAAG,EAAE,MAAM,CAAC;QACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,cAAc,GAAG,aAAa,GAAG,iBAAiB,CAAC;KAC9D,CAAC,CAAC;IACH,OAAO,CAAC,EAAE;QACR,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;CACH;AAID,KAAK,cAAc,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEzC;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,+BAA+B;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,IAAI,EAAE,cAAc,CAAC;IACrB,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,qBAAqB;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,oDAAoD;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,CAQxE;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAStE"}

package/dist/core/src/repo-manager.d.ts

@@ -8,7 +8,8 @@
  * Supports partial clone + sparse checkout for large repos.
  */
 import type { AssetRef, CatalogEntry } from "./models.js";
-import type { RepositoryDeclaration } from "./workspace-config.js";
+import type { OverrideEntry, SourceDeclaration, StoreEntry } from "./workspace-config.js";
+import type { ProvenanceCandidate, ProvenanceIndex } from "./walker.js";
 /**
  * Return the global shared repo cache directory (`~/.skaile/repos` by default).
  * Override with the `SKAILE_CACHE_DIR` environment variable.
@@ -104,7 +105,8 @@ export declare function unlinkRepo(projectDir: string, repoName: string): boolea
  *
  * Resolution order:
  * 1. Linked override (`.skaile/links.yaml`) — highest priority
- * 2. Local path (`decl.path`) — direct filesystem reference
+ * 2. Local path (`decl.path`) — direct filesystem reference; a bare path must
+ *    already exist, but a url-backed managed cache dir is cloned in-place on miss
  * 3. Remote URL (`decl.url`) — cloned to the shared global cache, symlinked into `.skaile/repos/`
  *
  * Pin support: when `opts.pin` is provided, the tag/commit is checked out after clone.
@@ -117,13 +119,27 @@ export declare function unlinkRepo(projectDir: string, repoName: string): boolea
  * @throws When the repository cannot be resolved or cloned
  * @docLink packages/core/api-reference#ensure-repo
  */
-export declare function ensureRepo(decl: RepositoryDeclaration, name: string, reposDir: string, opts?: {
+export declare function ensureRepo(decl: SourceDeclaration, name: string, reposDir: string, opts?: {
     pin?: string;
     projectDir?: string;
 }): string;
+/**
+ * Derive the `"<org>/<repo>"` slug from a directory's git `origin` remote.
+ * Returns `undefined` when `rootDir` is not a git repo, has no `origin` remote,
+ * or the URL is not a parseable GitHub repo. Mirrors the store's
+ * `repoSlugFromSourceUrl` so local and remote feeds key the grouping tree
+ * identically.
+ *
+ * @param rootDir - Absolute path to the scanned repository root
+ * @returns `"<org>/<repo>"` or `undefined`
+ * @docLink packages/core/api-reference#repo-slug-from-git-remote
+ */
+export declare function repoSlugFromGitRemote(rootDir: string): string | undefined;
 /**
  * Scan a repository directory and return all discovered asset catalog entries.
- * Delegates to `scanDirectory` from `manifest.ts`.
+ * Delegates to `scanDirectory` from `manifest.ts`, then stamps the `repo` slug
+ * derived once from the root's git remote onto every entry (the GitHub
+ * coordinate is a property of the scanned root, not of individual assets).
  *
  * @param repoDir - Absolute path to the repository root
  * @param repoName - Repository name attached to each produced entry
@@ -146,55 +162,82 @@ export declare function scanRepo(repoDir: string, repoName: string): CatalogEntr
  * @returns Matching `CatalogEntry`, or `null` if not found in any repository
  * @docLink packages/core/api-reference#resolve-asset
  */
-export declare function resolveAsset(ref: AssetRef, repositories: Record<string, RepositoryDeclaration>, reposDir: string, opts?: {
+export declare function resolveAsset(ref: AssetRef, repositories: Record<string, SourceDeclaration>, reposDir: string, opts?: {
     projectDir?: string;
     preferRepo?: string;
 }): CatalogEntry | null;
 /**
- * Collision record: the same `kind:name` was found in more than one repository.
- * Produced by `resolveAll` when multiple repos contain the same asset.
- * @docLink packages/core/api-reference#asset-collision
- */
-export interface AssetCollision {
-    /** "kind:name" key. */
-    key: string;
-    /** Repository the asset was resolved from. */
-    resolvedFrom: string;
-    /** Other repositories that also contain this asset. */
-    shadowedIn: string[];
+ * Hard error raised when two or more candidates for the same canonical ref
+ * `<publisher>/<kind>:<name>@<version>` disagree on their content sha256 and no
+ * `overrides[]` entry resolves the conflict. The message walks the dep chain
+ * back to the user-declared root.
+ * @docLink packages/core/api-reference#canonical-ref-conflict-error
+ */
+export declare class CanonicalRefConflictError extends Error {
+    ref: string;
+    candidates: ProvenanceCandidate[];
+    depChain: string[];
+    constructor(ref: string, candidates: ProvenanceCandidate[], depChain: string[]);
 }
 /**
  * Result of a full transitive dependency resolution via `resolveAll`.
  * @docLink packages/core/api-reference#resolve-result
  */
 export interface ResolveResult {
-    /** All resolved assets in leaf-first (dependency) order. */
-    resolved: CatalogEntry[];
-    /** Refs that could not be found in any repo. */
+    /** Resolved candidates in leaf-first order. */
+    resolved: ProvenanceCandidate[];
+    /** Refs that no source / store could provide. */
     missing: string[];
-    /** Maps "kind:name" → resolved_by ("direct" or "kind:name" of parent). */
+    /** "<publisher>/<kind>:<name>" → parent ref ("direct" if user-declared). */
     resolvedBy: Map<string, string>;
-    /** Assets that exist in multiple repos (resolved entry shadows others). */
-    collisions: AssetCollision[];
+    /** Overrides that were applied (lock-side bookkeeping); canonical refs. */
+    overridesApplied: Set<string>;
+}
+/** Minimal store fetcher contract used by the resolver for the catalog branch. */
+export interface StoreFetcher {
+    getInstallManifest(storeUrl: string, ref: string): Promise<{
+        sourceUrl: string;
+        commit: string;
+        sha256: string;
+        files: Array<{
+            path: string;
+            sha256: string;
+        }>;
+    } | null>;
+    getCanonicalDigest(storeUrl: string, ref: string): Promise<{
+        sha256: string;
+    } | null>;
+}
+/** Options for {@link resolveAll}. */
+export interface ResolveOpts {
+    /** Source-side candidate index built by the walker. */
+    provenanceIndex: ProvenanceIndex;
+    /** Conflict-resolution overrides (with required reason). */
+    overrides: OverrideEntry[];
+    /** Trusted store catalogs. */
+    stores: StoreEntry[];
+    /** Lazy store fetcher; only used when `stores[]` is non-empty. */
+    storeFetcher?: StoreFetcher;
+    projectDir?: string;
 }
 /**
- * Resolve all dependencies (including transitive) from a list of asset ref strings.
- * Returns resolved assets in leaf-first order (dependencies before dependents).
+ * Resolve all dependencies against a content-hash-verified candidate set drawn
+ * from every source clone and (optionally) every store.
  *
- * Repo affinity: transitive deps inherit the parent entry's repository as a
- * search preference, so bundled assets are found in their own repo first.
- * Explicit `@repo` qualifiers always take precedence over affinity.
+ * Per dep ref: gather source candidates, optionally extend with store
+ * candidates, filter by the SemVer/SHA pin, pick the highest matching version,
+ * then detect conflicts — divergent sha256 for the same
+ * `(publisher, kind, name, version)` is a hard {@link CanonicalRefConflictError}
+ * unless an `overrides[]` entry pins a source. A cheap `getCanonicalDigest`
+ * cross-check runs when both a source and a store produced a candidate at the
+ * chosen version.
  *
- * @param deps - Top-level asset ref strings to resolve (e.g. `["skill:use-exa", "agent:pi"]`)
- * @param repositories - Repository declarations from `skaile.yaml`
- * @param reposDir - Project-local repos directory
- * @param opts - Optional: `projectDir` for link lookup
- * @returns `ResolveResult` with resolved entries, missing refs, provenance map, and collisions
+ * @param deps - Top-level canonical asset ref strings (`kind:name@<publisher>[#pin]`).
+ * @param opts - Provenance index, overrides, stores, and an optional store fetcher.
+ * @returns `ResolveResult` with resolved candidates, missing refs, provenance map, applied overrides.
  * @docLink packages/core/api-reference#resolve-all
  */
-export declare function resolveAll(deps: string[], repositories: Record<string, RepositoryDeclaration>, reposDir: string, opts?: {
-    projectDir?: string;
-}): ResolveResult;
+export declare function resolveAll(deps: string[], opts: ResolveOpts): Promise<ResolveResult>;
 /**
  * Status summary for a repository — local HEAD, remote HEAD, and how far behind.
  * @docLink packages/core/api-reference#repo-status
@@ -228,5 +271,5 @@ export interface RepoStatus {
  * @returns `RepoStatus` describing the current state
  * @docLink packages/core/api-reference#check-repo-status
  */
-export declare function checkRepoStatus(decl: RepositoryDeclaration, name: string, reposDir: string, projectDir?: string): RepoStatus;
+export declare function checkRepoStatus(decl: SourceDeclaration, name: string, reposDir: string, projectDir?: string): RepoStatus;
 //# sourceMappingURL=repo-manager.d.ts.map

package/dist/core/src/repo-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"repo-manager.d.ts","sourceRoot":"","sources":["../../../core/src/repo-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAeH,OAAO,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE1D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAKnE;;;;GAIG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAaD;;;;;;;;;GASG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAwB5E;AAED;;;;;;;;GAQG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAiB9D;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAM5D;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAcjE;AAID;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;CAC5B;AAOD;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,UAAU,CAQxD;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CAItE;AAED;;;;;;;;;GASG;AACH,wBAAgB,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAQtF;AAED;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAMxE;AAID;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,UAAU,CACxB,IAAI,EAAE,qBAAqB,EAC3B,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3C,MAAM,CAwER;AAID;;;;;;;;GAQG;AACH,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,YAAY,EAAE,CAE1E;AAID;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,YAAY,CAC1B,GAAG,EAAE,QAAQ,EACb,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,EACnD,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAClD,YAAY,GAAG,IAAI,CA0BrB;AAiCD;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,uBAAuB;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,8CAA8C;IAC9C,YAAY,EAAE,MAAM,CAAC;IACrB,uDAAuD;IACvD,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,4DAA4D;IAC5D,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,gDAAgD;IAChD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,0EAA0E;IAC1E,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,2EAA2E;IAC3E,UAAU,EAAE,cAAc,EAAE,CAAC;CAC9B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,UAAU,CACxB,IAAI,EAAE,MAAM,EAAE,EACd,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,EACnD,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7B,aAAa,CAiDf;AA4CD;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,sCAAsC;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACpC,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,4DAA4D;IAC5D,UAAU,EAAE,MAAM,CAAC;IACnB,8DAA8D;IAC9D,MAAM,EAAE,MAAM,CAAC;IACf,kCAAkC;IAClC,QAAQ,EAAE,OAAO,CAAC;IAClB,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gEAAgE;IAChE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,qBAAqB,EAC3B,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,UAAU,CAAC,EAAE,MAAM,GAClB,UAAU,CAqEZ"}
+{"version":3,"file":"repo-manager.d.ts","sourceRoot":"","sources":["../../../core/src/repo-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAgBH,OAAO,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE1D,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAC1F,OAAO,KAAK,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAKxE;;;;GAIG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAaD;;;;;;;;;GASG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAwB5E;AAED;;;;;;;;GAQG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAiB9D;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAM5D;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAcjE;AAID;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;CAC5B;AAOD;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,UAAU,CAQxD;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CAItE;AAED;;;;;;;;;GASG;AACH,wBAAgB,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAQtF;AAED;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAMxE;AAID;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,UAAU,CACxB,IAAI,EAAE,iBAAiB,EACvB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3C,MAAM,CA+ER;AAID;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CASzE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,YAAY,EAAE,CAI1E;AAID;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,YAAY,CAC1B,GAAG,EAAE,QAAQ,EACb,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,EAC/C,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAClD,YAAY,GAAG,IAAI,CA0BrB;AAiCD;;;;;;GAMG;AACH,qBAAa,yBAA0B,SAAQ,KAAK;IAEzC,GAAG,EAAE,MAAM;IACX,UAAU,EAAE,mBAAmB,EAAE;IACjC,QAAQ,EAAE,MAAM,EAAE;gBAFlB,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,mBAAmB,EAAE,EACjC,QAAQ,EAAE,MAAM,EAAE;CAsB5B;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,+CAA+C;IAC/C,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC,iDAAiD;IACjD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,4EAA4E;IAC5E,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,2EAA2E;IAC3E,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CAC/B;AAED,kFAAkF;AAClF,MAAM,WAAW,YAAY;IAC3B,kBAAkB,CAChB,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC;QACT,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KAChD,GAAG,IAAI,CAAC,CAAC;IACV,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;CACvF;AAED,sCAAsC;AACtC,MAAM,WAAW,WAAW;IAC1B,uDAAuD;IACvD,eAAe,EAAE,eAAe,CAAC;IACjC,4DAA4D;IAC5D,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,8BAA8B;IAC9B,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,kEAAkE;IAClE,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAID;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,CAoH1F;AA+BD;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,sCAAsC;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACpC,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,4DAA4D;IAC5D,UAAU,EAAE,MAAM,CAAC;IACnB,8DAA8D;IAC9D,MAAM,EAAE,MAAM,CAAC;IACf,kCAAkC;IAClC,QAAQ,EAAE,OAAO,CAAC;IAClB,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gEAAgE;IAChE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,iBAAiB,EACvB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,UAAU,CAAC,EAAE,MAAM,GAClB,UAAU,CAqEZ"}

package/dist/core/src/runtime-assets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-assets.d.ts","sourceRoot":"","sources":["../../../core/src/runtime-assets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAMH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAQhD;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG,YAAY,CAAC;AAE/C;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,WAAW,CAAC;IAClB,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,gDAAgD;IAChD,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,sDAAsD;IACtD,IAAI,EAAE,gBAAgB,GAAG,kBAAkB,GAAG,mBAAmB,CAAC;IAClE,OAAO,EAAE,MAAM,CAAC;IAChB,sCAAsC;IACtC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gDAAgD;IAChD,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,gBAAgB,CAAC;AAEnD;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,mBAAmB,EAAE,CAAC;IACtC,YAAY,EAAE,eAAe,EAAE,CAAC;IAChC,eAAe,EAAE,cAAc,CAAC;IAChC,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC,0EAA0E;IAC1E,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB;;;OAGG;IACH,SAAS,CAAC,KAAK,EAAE;QAAE,IAAI,CAAC,EAAE,WAAW,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,mBAAmB,GAAG,SAAS,CAAC;CACzF;AAID;;;;;;;;;;;;GAYG;AACH,wBAAsB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAc3F;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,CAsB9C"}
+{"version":3,"file":"runtime-assets.d.ts","sourceRoot":"","sources":["../../../core/src/runtime-assets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAMH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAgChD;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG,YAAY,CAAC;AAE/C;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,WAAW,CAAC;IAClB,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,gDAAgD;IAChD,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,sDAAsD;IACtD,IAAI,EAAE,gBAAgB,GAAG,kBAAkB,GAAG,mBAAmB,CAAC;IAClE,OAAO,EAAE,MAAM,CAAC;IAChB,sCAAsC;IACtC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gDAAgD;IAChD,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,gBAAgB,CAAC;AAEnD;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,mBAAmB,EAAE,CAAC;IACtC,YAAY,EAAE,eAAe,EAAE,CAAC;IAChC,eAAe,EAAE,cAAc,CAAC;IAChC,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC,0EAA0E;IAC1E,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB;;;OAGG;IACH,SAAS,CAAC,KAAK,EAAE;QAAE,IAAI,CAAC,EAAE,WAAW,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,mBAAmB,GAAG,SAAS,CAAC;CACzF;AAID;;;;;;;;;;;;GAYG;AACH,wBAAsB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAc3F;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,CAsB9C"}

package/dist/core/src/walker.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Provenance-index walker.
+ *
+ * Given a list of cloned source paths plus their resolved commits, walk each
+ * clone, read the publication-half `skaile.yaml` (or fall back to the
+ * agentskills.io filename layout), compute per-file and composite sha256s, and
+ * build a {@link ProvenanceIndex} keyed by `<publisher>/<kind>:<name>`.
+ *
+ * This is the source-side half of the canonical-identity resolution model: the
+ * resolver compares these candidates against store-side candidates and detects
+ * divergent content hashes for the same `(publisher, kind, name, version)`.
+ */
+/** One cloned source repo, pinned at a resolved commit. */
+export interface SourceClone {
+    localPath: string;
+    sourceUrl: string;
+    /** 40-char SHA. */
+    commit: string;
+    /** Optional tag context for the version waterfall (step 3). */
+    tag?: string;
+}
+/** One resolved candidate in the provenance index. */
+export interface ProvenanceCandidate {
+    publisher: string;
+    kind: string;
+    name: string;
+    /** Canonical semver string (or `0.0.0-sha.<7char>`). */
+    version: string;
+    sourceUrl: string;
+    commit: string;
+    files: Array<{
+        path: string;
+        sha256: string;
+    }>;
+    /** Composite sha256 over sorted `<path>:<sha256>\n` rows. */
+    sha256: string;
+    /** Parsed content frontmatter (mcp-server defaults etc.). */
+    metadata?: Record<string, unknown>;
+}
+export type ProvenanceIndex = Map<string, ProvenanceCandidate[]>;
+/**
+ * Walk a list of source clones into a provenance index.
+ *
+ * @param clones - Cloned source repos pinned at resolved commits.
+ * @returns Map of `<publisher>/<kind>:<name>` → candidates.
+ * @throws On a SKILL.md name mismatch or a missing publisher for a non-GitHub source.
+ * @docLink packages/core/workspace-config#build-provenance-index
+ */
+export declare function buildProvenanceIndex(clones: SourceClone[], _opts?: {
+    projectDir?: string;
+}): ProvenanceIndex;
+//# sourceMappingURL=walker.d.ts.map

package/dist/core/src/walker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"walker.d.ts","sourceRoot":"","sources":["../../../core/src/walker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAUH,2DAA2D;AAC3D,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,mBAAmB;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,sDAAsD;AACtD,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,6DAA6D;IAC7D,MAAM,EAAE,MAAM,CAAC;IACf,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,MAAM,eAAe,GAAG,GAAG,CAAC,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;AA8CjE;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,WAAW,EAAE,EACrB,KAAK,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9B,eAAe,CAIjB"}