@skaile/workspaces 0.22.0-beta.1 → 0.22.0

package/CHANGELOG.md

@@ -1,5 +1,385 @@
 # Changelog
 
+## 0.22.0
+
+### Minor Changes
+
+- [#70](https://github.com/skaile-ai/workspaces/pull/70) [`f44674b`](https://github.com/skaile-ai/workspaces/commit/f44674bd72f9231f1d429152ba683ae1e4dc20df) Thanks [@Frozen666](https://github.com/Frozen666)! - Add `network: NetworkPolicy` field on `AgentPermissions` (modes `open` /
+  `off` / `allowlist`). Consumed by the platform's per-session egress
+  firewall; the codec is permissive (round-trips unknown shapes) and emits
+  warning diagnostics for unrecognized `mode` values and for `allowlist`
+  entries set under non-`allowlist` modes.
+
+- [`cd5b3b3`](https://github.com/skaile-ai/workspaces/commit/cd5b3b39ed6e65f0124d5cda81fc791ddd1c25e5) Thanks [@mortegro](https://github.com/mortegro)! - Asset display: regroup the `skaile manage` TUI as **publisher → repo → asset**.
+
+  The derived `domain` axis (first-level directory of a scanned repo) is replaced
+  by `repo` — the real `"<org>/<repo>"` GitHub coordinate. `category` is demoted
+  out of the tree to a row badge.
+
+  - `plugins` — `CatalogAsset` gains optional `repo?`.
+  - `core` — `CatalogEntry` drops `domain`, gains `repo?` and `category?`.
+    `entryFromRaw` reads `repo` with a one-release legacy-`domain` read-fallback
+    (stale `catalog.yaml` caches self-heal on next write). `scanRepo` derives
+    `repo` once from the scanned root's git remote (`repoSlugFromGitRemote`) and
+    stamps it onto every entry; `scanDirectory` no longer emits a per-asset
+    `domain`.
+  - `library` — `RemoteCatalogSource` threads the store's `repo` through.
+  - `cli` — `manage` regroups to publisher → repo → asset with category badges;
+    the `asset-feeds` store mapping now carries `publisher`/`repo`/`category`
+    (fixing the bug that mis-shelved every remote asset under `other`).
+
+  Local libraries with no git remote (and non-GitHub sources) have no `repo`;
+  their assets group directly under the publisher.
+
+- [#71](https://github.com/skaile-ai/workspaces/pull/71) [`fb32a60`](https://github.com/skaile-ai/workspaces/commit/fb32a6028ce1c0639c3339e8561ba72dcd24388f) Thanks [@mortegro](https://github.com/mortegro)! - Deploy contract: add a generic per-session injection channel and a built-in
+  `nix` target, so a host (e.g. skaile-platform) can drive every deploy target
+  uniformly without forking the decision in its own code.
+
+  - `DeployContext` gains optional `mounts` / `labels` / `resources`
+    (`@skaile/workspaces/plugin-registry`, with new `DeployMount` / `DeployResources`
+    types). Container built-ins (`docker` / `podman`) map them to `-v` / `--label`
+    / `--cpus` / `--memory` / `--pids-limit`; the process built-ins ignore mounts.
+    Target-specific policy (apparmor, FUSE, fleet binds, …) stays in each target's
+    own `configSchema` — it never enters this shared context.
+  - `local` now also merges `ctx.env` into the spawned process env (`config.env`
+    still wins).
+  - New built-in `nixDeployTarget` (id `nix`) runs `skaile serve` inside a
+    `nix shell` over `ws://127.0.0.1:<port>`; registered by
+    `registerBuiltinDeployTargets()`. Exports `nixDeployTarget` + the pure
+    `buildNixArgs()` from `@skaile/workspaces/deploy`. Generic on purpose
+    (`flakeRef` + `stackAttr` only).
+
+- [`ce3f33f`](https://github.com/skaile-ai/workspaces/commit/ce3f33f5b85f81d1c80689a99a8e63cf0c2afc07) Thanks [@mortegro](https://github.com/mortegro)! - Fix deploy-handle readiness timeout + dedupe deploy-target helpers.
+
+  - **Fix:** `DeployHandle.waitReady(timeoutMs)` silently ignored its `timeoutMs`
+    argument in the fly / k8s / vercel-sandbox targets, always using a hard-coded
+    internal deadline. The caller's timeout is now honored.
+  - **Fix (`@skaile/provider-fly`):** `deleteMachine` swallowed _all_ errors while
+    only intending to ignore a 404, so `stop()` could falsely report success on a
+    still-running (still-billing) machine. Non-404 errors now propagate.
+  - **Added (`@skaile/workspaces/plugin-registry`):** shared deploy helpers —
+    `buildStrategySchema` / `BuildStrategy`, abort-aware `sleep`, generic
+    `pollUntil`, and the `makeDeployHandle` factory — replacing the per-provider
+    copies of the sleep loop, handle wrapper, and build-strategy enum.
+
+- [#65](https://github.com/skaile-ai/workspaces/pull/65) [`2af2e52`](https://github.com/skaile-ai/workspaces/commit/2af2e525588648e45a14fb8acdfde72f1ebb57e8) Thanks [@mortegro](https://github.com/mortegro)! - Add `listDeployTargets()` / `getDeployTarget()` to
+  `@skaile/workspaces/plugin-registry`, the symmetric counterparts to
+  `listDrivers()` / `listConnectors()` so UIs can enumerate all three plugin kinds
+  uniformly. Both default to the process-wide `pluginRegistry`;
+  `listDeployTargets()` returns lightweight `{ id, displayName }` rows and
+  `getDeployTarget(id)` returns the full target without the override/yaml/default
+  precedence `resolveDeployTarget` applies.
+
+  Docs (`docs/deploy/`): documented the container-target image lifecycle — that
+  `buildStrategy: "local"` is bring-your-own-image (`create()` never builds), how
+  `pullPolicy` interacts with a locally-built vs. registry-published image, that
+  `workspace.container.{packages,agent_clis,stack,nix}` are image-build inputs
+  distinct from the deploy `config.image` (with skaile-platform's
+  `skaile-vm-agent:thin` / Nix-stack model as the reference), and that the
+  in-process runtime is deliberately out of scope for the deploy abstraction
+  (no `wsUrl`).
+
+- [#67](https://github.com/skaile-ai/workspaces/pull/67) [`c67a381`](https://github.com/skaile-ai/workspaces/commit/c67a381f1029bec547531e238d235636eef16740) Thanks [@mortegro](https://github.com/mortegro)! - Canonical-identity manifest architecture (BREAKING).
+
+  Schema:
+
+  - `skaile.yaml` top-level keys `repositories:` and `ai_resources:` are removed
+    and now throw a parse error pointing at `docs/concepts/manifest-schema.md` and
+    the `migrate-skaile-manifest` skill.
+  - New publication half: `publisher`, `version`, `assets[]`.
+  - New consumption half: collapsed `sources:[{url, pin?}]` (no `name`),
+    `stores:[{url}]`, `dependencies:[<kind>:<name>@<publisher>[#pin]]`,
+    `overrides:[{ref, source, reason}]` with required `reason:`.
+
+  Dep ref grammar:
+
+  - Canonical form `kind:name@<publisher>[#pin]`. `publisher` is required and
+    GitHub-shaped. Pins accept SemVer constraints (^, ~, x), exact SemVer, a
+    40-char SHA, or absent. Floating refs (main/latest/HEAD) throw.
+
+  Resolution:
+
+  - The resolver collects candidates from every source clone (via the new
+    provenance-index walker) and optionally every store. Divergent sha256 at the
+    same (publisher, kind, name, version) is a hard error
+    (`CanonicalRefConflictError`) with a dep-chain walk. `overrides[]` pin a
+    chosen source and flag `override_applied: true` on the lock entry. A cheap
+    `catalog.getCanonicalDigest` probe cross-checks source vs store at the same
+    version. `resolveAll` is now async.
+
+  Lock file:
+
+  - Schema v2. Keys are canonical refs `<publisher>/<kind>:<name>@<version>`;
+    values carry `sha256`, `source.{url, commit}`, `files[]`, `override_applied`.
+    Top-level `sources:` records every contributing URL+commit. Old v1 lockfiles
+    must be deleted and regenerated; the reader emits a clear error.
+
+  Types:
+
+  - `AssetRef.repository` → `AssetRef.publisher` (and `CatalogEntry.publisher`).
+  - `RepositoryDeclaration` → `SourceDeclaration`.
+  - `LockEntry` reshaped; new `LockSourceEntry`, `LockFileEntry`,
+    `StoreEntry`, `AssetEntry`, `OverrideEntry`.
+  - `RemoteCatalogSource.getCanonicalDigest(ref)` added.
+
+  Migration:
+
+  - No `skaile manifest migrate` CLI command. The transform is performed by the
+    `migrate-skaile-manifest` skill (lives in `ai-assets`).
+
+- [#53](https://github.com/skaile-ai/workspaces/pull/53) [`4e3c2b2`](https://github.com/skaile-ai/workspaces/commit/4e3c2b27ed6a004e7b9c3d60b0ae3754a8192eb5) Thanks [@peteralbert](https://github.com/peteralbert)! - Support the BYO-flake recipe form on `AssetRecipe`.
+
+  - `AssetRecipe` gains optional `flake` (the asset's own flake: `"."` or a flake URL) and
+    `publisher` fields; `attr` is now optional and defaults to `"default"` for the flake form
+    (the legacy `{ attr }` platform-flake form is unchanged and still requires `attr`).
+  - New `validateAssetRecipeFlake` validates the flake source shape (`"."`, `github:`,
+    `git+https://`, `git+ssh://`, `path:`; rejects bare paths, traversal, unknown schemes, and
+    shell metacharacters). Exported alongside `DEFAULT_RECIPE_ATTR`.
+  - `mcpDeclFromCatalogEntry` carries `flake`/`publisher` onto the decl; an invalid flake drops
+    the whole recipe (no silent fall back to a platform-flake attr).
+  - The runner resolves a flake-sourced recipe by `mcps.<id>` (the recipe id) rather than `attr`,
+    since BYO-flake recipes all build `#default` and `attr` is not a unique map key.
+
+- [`edaca8f`](https://github.com/skaile-ai/workspaces/commit/edaca8f351dd4d044bc2034c8f10b394a8ab9f43) Thanks [@mortegro](https://github.com/mortegro)! - Restore transitive bundle-member expansion in the canonical-identity resolver.
+
+  The resolver rewrite dropped the requires/dependencies recursion, so adding a
+  bundle resolved only the bundle marker and deployed **zero** members. The
+  provenance walker now populates `ProvenanceCandidate.deps` for bundle
+  candidates (parsed from the `.bundle.yaml` / `BUNDLE.md` `requires` +
+  `dependencies`), and `resolveAll` recurses into them — so a tier bundle pulls
+  its full inheritance chain and every leaf skill (arbitrary depth, deduped via
+  the existing `seen` set). Bare transitive refs inherit the parent bundle's
+  publisher.
+
+  - `core/manifest` — new `bundleDepRefs(filePath)` returns a bundle's raw
+    canonical dep refs (publisher/pin preserved; unlike `parseRequires`).
+  - `core/walker` — `ProvenanceCandidate` gains `deps?: string[]`, populated for
+    bundles in both the manifest and filename-convention walk paths.
+  - `core/repo-manager` — `resolveAll.visit` recurses into `chosen.deps`,
+    qualifying bare refs with the parent publisher.
+
+  Non-bundle candidates are unaffected (no `deps`), so legacy skill frontmatter
+  `requires` are not auto-expanded.
+
+- [`e219bf1`](https://github.com/skaile-ai/workspaces/commit/e219bf1a483538b2e6a8538ab87bda8c5063ad21) Thanks [@mortegro](https://github.com/mortegro)! - CLI: `skaile source add` now accepts GitHub shorthand — a bare `<name>`
+  resolves to `git@github.com:skaile-ai/<name>.git` and `<owner>/<repo>` to
+  `git@github.com:<owner>/<repo>.git`; full URLs and scp-style specs pass through
+  unchanged.
+
+  CLI: fixed `skaile npx skills add <url> --skill <name>` (the npx compatibility
+  shim) under the canonical-identity model. It now clones into the canonical
+  sources cache (`~/.skaile/sources/<slug>`), registers the source in the
+  project's `skaile.yaml` `sources[]`, builds a publisher-qualified ref
+  (`skill:<name>@<publisher>`, publisher from the source's `skaile.yaml` or its
+  GitHub org), and maps a requested SKILL.md `name:` to the directory the
+  canonical resolver keys by.
+
+- [#54](https://github.com/skaile-ai/workspaces/pull/54) [`7bdaf11`](https://github.com/skaile-ai/workspaces/commit/7bdaf115c251136288a94a7f880b3a0f52145be8) Thanks [@mortegro](https://github.com/mortegro)! - Unified plugin registry + deploy providers.
+
+  **Breaking**
+
+  - Removed the external `registerDriver` / `registerConnector` APIs. Register a
+    typed target via `pluginRegistry.register(kind, target)` instead
+    (`@skaile/workspaces/plugin-registry`). `createDriver` / `getConnector` /
+    `listConnectors` survive as resolve-only wrappers.
+  - Dropped `ioredis` and `yjs` runtime deps and the bundled `redis` / `yjs`
+    connectors. Install `@skaile/connector-redis` / `@skaile/connector-yjs` via
+    `skaile plugin install`.
+  - Renamed the coding-agent adapter command `skaile plugin` →
+    `skaile integration` (install/uninstall/enable/disable/status/hook). The
+    `skaile plugin` name now manages registry plugins.
+
+  **Added**
+
+  - `@skaile/workspaces/plugin-registry` — one process-wide `pluginRegistry` with
+    three kinds (driver / connector / deployTarget), the Target contracts,
+    `DeployHandle` / `DeployContext`, and `resolveDeployTarget` (override > yaml >
+    default precedence).
+  - `@skaile/workspaces/deploy` — built-in `local` / `docker` / `podman` deploy
+    targets (loopback-only), `registerBuiltinDeployTargets()`, and the
+    `.skaile/deploy/handle.json` store.
+  - `@skaile/workspaces/connectors-shared` — minimal public connector API for
+    extracted connector plugins.
+  - `skaile.yaml` gains `plugins:` (project-local plugin store) and `deploy:`
+    blocks; `skaile.lock.yaml` gains a `plugins:` slice.
+  - CLI: `skaile deploy [up|down|status|logs]` and `skaile plugin
+[install|remove|list]`.
+  - `DRIVER_CATALOG` → `BUILTIN_DRIVER_CATALOG` (old name kept as an alias); new
+    `BUILTIN_CONNECTOR_CATALOG`.
+
+  See `docs/migration-v2-to-v3.md`.
+  </content>
+
+- [#71](https://github.com/skaile-ai/workspaces/pull/71) [`fb32a60`](https://github.com/skaile-ai/workspaces/commit/fb32a6028ce1c0639c3339e8561ba72dcd24388f) Thanks [@mortegro](https://github.com/mortegro)! - WebSocket transport: enforce a bearer auth token end-to-end so a deploy target's
+  issued `wsAuth` actually gates the socket.
+
+  - `WebSocketServerTransport` accepts `authToken`. When set, every upgrade must
+    present the matching token via the `skaile-bearer.<base64url>` subprotocol or
+    the handshake is rejected with HTTP 401 (before any command handler runs).
+    When unset, behaviour is unchanged (back-compatible).
+  - `WebSocketClientTransport` accepts `auth`; sends it as the WS subprotocol
+    (the one handshake field a browser client can populate).
+  - `startAgentServer` threads `opts.authToken ?? SKAILE_WS_AUTH_TOKEN` into the
+    default server, so `skaile serve` enforces the token from the environment.
+  - New `@skaile/workspaces/transport` exports: `encodeBearerSubprotocol`,
+    `decodeBearerFromHeader`, `tokensEqual`, `BEARER_SUBPROTOCOL_PREFIX`.
+  - Robustness fix: `WebSocketClientTransport.connect()` now rejects when the
+    socket closes or errors before opening (a rejected auth upgrade, or a refused
+    port) instead of hanging until the connect timeout.
+
+### Patch Changes
+
+- [#60](https://github.com/skaile-ai/workspaces/pull/60) [`69f9924`](https://github.com/skaile-ai/workspaces/commit/69f99243cff137da1f835777e298e0779dec45e2) Thanks [@peteralbert](https://github.com/peteralbert)! - Emit sidecar `.d.ts` files next to each tsup `.js` output so consumers and
+  tools that look for a declaration file adjacent to the `.js` (classic node
+  resolution, some bundlers, IDE quick-lookups, ad-hoc `grep` audits) find one.
+
+  Previously, tsup emitted JS at `dist/<entry>.js` (e.g.
+  `dist/core/workspace-config.js`) while `tsc` emitted `.d.ts` at the
+  source-preserving path `dist/<src>/<entry>.d.ts` (e.g.
+  `dist/core/src/workspace-config.d.ts`). The package.json `exports` map
+  bridged these with separate `types` and `import` conditions — correct for
+  node16/nodenext/bundler resolvers, but invisible to anything looking
+  adjacent to the `.js`. A new post-build step (`build:dts-sidecars`) writes a
+  thin re-export shim at the tsup output path that points at the canonical
+  tsc-emitted declaration, eliminating the apparent stale-types mismatch
+  reported on `@skaile/workspaces/core/workspace-config`.
+
+- [#66](https://github.com/skaile-ai/workspaces/pull/66) [`90a2c61`](https://github.com/skaile-ai/workspaces/commit/90a2c61564b4dd91ff54a96d3dcff213c35e465f) Thanks [@mortegro](https://github.com/mortegro)! - deploy(container): make `isRunning()` async so the docker/podman `inspect` round-trip stays off the event loop. Previously `health()`/`restore()` called a synchronous `portableSpawnSync` inspect, freezing log pumps and other connections on each status poll.
+
+- [#73](https://github.com/skaile-ai/workspaces/pull/73) [`6aaac33`](https://github.com/skaile-ai/workspaces/commit/6aaac33e1ccf98c846c51b6ae57b305ebb558cf8) Thanks [@mortegro](https://github.com/mortegro)! - Fix `skaile manage` TUI row overflow when assets carry a `category`.
+
+  The category badge (`[category] `) sits between the asset name and the
+  description but its visible width was never subtracted from the description's
+  truncation budget, so categorized rows ran past the terminal width and wrapped.
+  The desc budget now accounts for the badge width.
+
+- [#68](https://github.com/skaile-ai/workspaces/pull/68) [`4073406`](https://github.com/skaile-ai/workspaces/commit/407340687ce038c9ae8a71cc8b80e237545a4db9) Thanks [@Frozen666](https://github.com/Frozen666)! - fix(base-assets/git): recurse into submodules on clone and pull. Git mounts cloned without `--recurse-submodules` and never ran `submodule update`, leaving submodule directories empty or stale on upstream pointer bumps. A `syncSubmodules()` helper now runs after every ref-changing operation (clone, bootstrap, session-branch checkout, sync pull, merge-on-close, periodic auto-pull/rebase); it no-ops when `.gitmodules` is absent and swallows submodule failures so a broken submodule remote can't abort the parent mount.
+
+- [#64](https://github.com/skaile-ai/workspaces/pull/64) [`f1b14f3`](https://github.com/skaile-ai/workspaces/commit/f1b14f3f9bed870efe6f8c7de2819cfbeeb444a2) Thanks [@mortegro](https://github.com/mortegro)! - fix(sdk): InProcessTransport now tracks real readiness and never drops commands
+
+  `InProcessTransport.connected` previously returned a hard-coded `true`, so
+  `LocalRuntime.isRunning` reported `true` even before `start()`. It now reflects
+  whether a command handler is actually registered.
+
+  `inject()` also silently dropped commands sent before the runner wired its
+  `onCommand` handler (e.g. a `debug`/`prompt` issued during the ~50ms `start()`
+  window, or against a lazily-started runtime), which made debug queries hang
+  until their own timeout. Such commands are now buffered and flushed to the
+  first handler, so none are lost.
+
+  `LocalRuntime` gains `whenReady()`, a promise resolved once `startAgentServer`
+  returns, so consumers can await wiring before issuing reply-expecting commands.
+
+- [`03d1b69`](https://github.com/skaile-ai/workspaces/commit/03d1b6986fed2b586aede659c702575040cecfa3) Thanks [@mortegro](https://github.com/mortegro)! - Fix `skaile manage` TUI emitting publisher-less asset refs that crash on apply.
+
+  `assetRefOf` built `kind:name`, dropping the entry's publisher. Under the
+  canonical-identity schema `parseAssetRef` requires a publisher, so applying a
+  selection called `AssetManager.add("bundle:complex-app")` and threw
+  _"publisher required in asset ref"_. It now emits the canonical
+  `kind:name@<publisher>` via `assetRefToStr`. Entries with no publisher have no
+  canonical identity and are no longer selectable (returns `null`) instead of
+  producing a ref that throws; `repoAssetRefs`/`sourceAssetRefs` filter those out.
+
+- [#60](https://github.com/skaile-ai/workspaces/pull/60) [`69f9924`](https://github.com/skaile-ai/workspaces/commit/69f99243cff137da1f835777e298e0779dec45e2) Thanks [@peteralbert](https://github.com/peteralbert)! - Add `unregister(kind, id)` to `PluginRegistry` so tests can swap a built-in
+  target (e.g. the real `local` / `git` connector) for a fake within the
+  process-wide singleton. Production callers should rarely reach for it —
+  built-ins and loaded plugins register once at startup and live for the
+  process — but the hook is needed for test isolation across describe blocks
+  that share the registry.
+
+- [`cd3bee2`](https://github.com/skaile-ai/workspaces/commit/cd3bee27bd6e182b4d8f8d08f1816820edd2b0a7) Thanks [@mortegro](https://github.com/mortegro)! - Auto-clone url-backed source caches on miss. `ensureRepo` now clones a remote
+  source into its managed `~/.skaile/sources/<slug>` cache dir when the clone is
+  absent, instead of throwing `Local repository path not found` — so `skaile
+install` works without a pre-populated clone. The source pin is no longer
+  mis-encoded as a clone `--branch` (tag/SHA pins now reach `checkoutPin`), and a
+  clone/auth failure surfaces as `missing: ["source:<slug> (<reason>)"]` rather
+  than a bare slug.
+
+## 0.22.0-beta.2
+
+### Minor Changes
+
+- [`cd5b3b3`](https://github.com/skaile-ai/workspaces/commit/cd5b3b39ed6e65f0124d5cda81fc791ddd1c25e5) Thanks [@mortegro](https://github.com/mortegro)! - Asset display: regroup the `skaile manage` TUI as **publisher → repo → asset**.
+
+  The derived `domain` axis (first-level directory of a scanned repo) is replaced
+  by `repo` — the real `"<org>/<repo>"` GitHub coordinate. `category` is demoted
+  out of the tree to a row badge.
+
+  - `plugins` — `CatalogAsset` gains optional `repo?`.
+  - `core` — `CatalogEntry` drops `domain`, gains `repo?` and `category?`.
+    `entryFromRaw` reads `repo` with a one-release legacy-`domain` read-fallback
+    (stale `catalog.yaml` caches self-heal on next write). `scanRepo` derives
+    `repo` once from the scanned root's git remote (`repoSlugFromGitRemote`) and
+    stamps it onto every entry; `scanDirectory` no longer emits a per-asset
+    `domain`.
+  - `library` — `RemoteCatalogSource` threads the store's `repo` through.
+  - `cli` — `manage` regroups to publisher → repo → asset with category badges;
+    the `asset-feeds` store mapping now carries `publisher`/`repo`/`category`
+    (fixing the bug that mis-shelved every remote asset under `other`).
+
+  Local libraries with no git remote (and non-GitHub sources) have no `repo`;
+  their assets group directly under the publisher.
+
+- [#71](https://github.com/skaile-ai/workspaces/pull/71) [`fb32a60`](https://github.com/skaile-ai/workspaces/commit/fb32a6028ce1c0639c3339e8561ba72dcd24388f) Thanks [@mortegro](https://github.com/mortegro)! - Deploy contract: add a generic per-session injection channel and a built-in
+  `nix` target, so a host (e.g. skaile-platform) can drive every deploy target
+  uniformly without forking the decision in its own code.
+
+  - `DeployContext` gains optional `mounts` / `labels` / `resources`
+    (`@skaile/workspaces/plugin-registry`, with new `DeployMount` / `DeployResources`
+    types). Container built-ins (`docker` / `podman`) map them to `-v` / `--label`
+    / `--cpus` / `--memory` / `--pids-limit`; the process built-ins ignore mounts.
+    Target-specific policy (apparmor, FUSE, fleet binds, …) stays in each target's
+    own `configSchema` — it never enters this shared context.
+  - `local` now also merges `ctx.env` into the spawned process env (`config.env`
+    still wins).
+  - New built-in `nixDeployTarget` (id `nix`) runs `skaile serve` inside a
+    `nix shell` over `ws://127.0.0.1:<port>`; registered by
+    `registerBuiltinDeployTargets()`. Exports `nixDeployTarget` + the pure
+    `buildNixArgs()` from `@skaile/workspaces/deploy`. Generic on purpose
+    (`flakeRef` + `stackAttr` only).
+
+- [`e219bf1`](https://github.com/skaile-ai/workspaces/commit/e219bf1a483538b2e6a8538ab87bda8c5063ad21) Thanks [@mortegro](https://github.com/mortegro)! - CLI: `skaile source add` now accepts GitHub shorthand — a bare `<name>`
+  resolves to `git@github.com:skaile-ai/<name>.git` and `<owner>/<repo>` to
+  `git@github.com:<owner>/<repo>.git`; full URLs and scp-style specs pass through
+  unchanged.
+
+  CLI: fixed `skaile npx skills add <url> --skill <name>` (the npx compatibility
+  shim) under the canonical-identity model. It now clones into the canonical
+  sources cache (`~/.skaile/sources/<slug>`), registers the source in the
+  project's `skaile.yaml` `sources[]`, builds a publisher-qualified ref
+  (`skill:<name>@<publisher>`, publisher from the source's `skaile.yaml` or its
+  GitHub org), and maps a requested SKILL.md `name:` to the directory the
+  canonical resolver keys by.
+
+- [#71](https://github.com/skaile-ai/workspaces/pull/71) [`fb32a60`](https://github.com/skaile-ai/workspaces/commit/fb32a6028ce1c0639c3339e8561ba72dcd24388f) Thanks [@mortegro](https://github.com/mortegro)! - WebSocket transport: enforce a bearer auth token end-to-end so a deploy target's
+  issued `wsAuth` actually gates the socket.
+
+  - `WebSocketServerTransport` accepts `authToken`. When set, every upgrade must
+    present the matching token via the `skaile-bearer.<base64url>` subprotocol or
+    the handshake is rejected with HTTP 401 (before any command handler runs).
+    When unset, behaviour is unchanged (back-compatible).
+  - `WebSocketClientTransport` accepts `auth`; sends it as the WS subprotocol
+    (the one handshake field a browser client can populate).
+  - `startAgentServer` threads `opts.authToken ?? SKAILE_WS_AUTH_TOKEN` into the
+    default server, so `skaile serve` enforces the token from the environment.
+  - New `@skaile/workspaces/transport` exports: `encodeBearerSubprotocol`,
+    `decodeBearerFromHeader`, `tokensEqual`, `BEARER_SUBPROTOCOL_PREFIX`.
+  - Robustness fix: `WebSocketClientTransport.connect()` now rejects when the
+    socket closes or errors before opening (a rejected auth upgrade, or a refused
+    port) instead of hanging until the connect timeout.
+
+### Patch Changes
+
+- [#68](https://github.com/skaile-ai/workspaces/pull/68) [`4073406`](https://github.com/skaile-ai/workspaces/commit/407340687ce038c9ae8a71cc8b80e237545a4db9) Thanks [@Frozen666](https://github.com/Frozen666)! - fix(base-assets/git): recurse into submodules on clone and pull. Git mounts cloned without `--recurse-submodules` and never ran `submodule update`, leaving submodule directories empty or stale on upstream pointer bumps. A `syncSubmodules()` helper now runs after every ref-changing operation (clone, bootstrap, session-branch checkout, sync pull, merge-on-close, periodic auto-pull/rebase); it no-ops when `.gitmodules` is absent and swallows submodule failures so a broken submodule remote can't abort the parent mount.
+
+- [`cd3bee2`](https://github.com/skaile-ai/workspaces/commit/cd3bee27bd6e182b4d8f8d08f1816820edd2b0a7) Thanks [@mortegro](https://github.com/mortegro)! - Auto-clone url-backed source caches on miss. `ensureRepo` now clones a remote
+  source into its managed `~/.skaile/sources/<slug>` cache dir when the clone is
+  absent, instead of throwing `Local repository path not found` — so `skaile
+install` works without a pre-populated clone. The source pin is no longer
+  mis-encoded as a clone `--branch` (tag/SHA pins now reach `checkoutPin`), and a
+  clone/auth failure surfaces as `missing: ["source:<slug> (<reason>)"]` rather
+  than a bare slug.
+
 ## 0.22.0-beta.1
 
 ### Minor Changes

package/dist/{asset-feeds-QXCSAJRN.js → asset-feeds-Y2CDCM3W.js}

@@ -1,10 +1,10 @@
-import './chunk-UMOENHVH.js';
+import './chunk-ETMUGBHF.js';
 import './chunk-K5GBV4SA.js';
 import './chunk-KLNL7QHN.js';
-import './chunk-GFNW72LW.js';
-import { scanRepo } from './chunk-J3VKAEQP.js';
-import './chunk-4AZKT2BU.js';
-import './chunk-I3UEM3FX.js';
+import './chunk-PFOXL4SH.js';
+import { scanRepo } from './chunk-V5TBKO5Q.js';
+import './chunk-K7WPR77X.js';
+import './chunk-VUCPJBAG.js';
 import './chunk-JKNWJ64A.js';
 import './chunk-O4JH3KUE.js';
 import './chunk-24UIWON4.js';
@@ -16,15 +16,13 @@ async function libraryAssets() {
   const notes = [];
   try {
     const [{ openLibraryManager }, { skaileHomeDir }] = await Promise.all([
-      import('./open-library-M4DB3D3J.js'),
+      import('./open-library-CT4VVESU.js'),
       import('./library/index.js')
     ]);
     const { manager, close } = await openLibraryManager();
     try {
       const sourcesDir = path.join(skaileHomeDir(), "sources");
-      const libs = (await manager.listLibraries()).filter(
-        (l) => !l.path.startsWith(sourcesDir)
-      );
+      const libs = (await manager.listLibraries()).filter((l) => !l.path.startsWith(sourcesDir));
       const entries = [];
       for (const lib of libs) {
         if (!existsSync(lib.path)) continue;
@@ -47,7 +45,7 @@ async function libraryAssets() {
 async function storeAssets(projectDir) {
   const notes = [];
   try {
-    const { resolveCatalogSource } = await import('./open-library-M4DB3D3J.js');
+    const { resolveCatalogSource } = await import('./open-library-CT4VVESU.js');
     const { source, close } = await resolveCatalogSource({ projectDir });
     try {
       const assets = await source.listAssets();
@@ -56,8 +54,9 @@ async function storeAssets(projectDir) {
         kind: a.kind ?? "skill",
         description: a.description ?? "",
         source: `store://${a.id}`,
-        repository: "store",
-        domain: a.publisher,
+        publisher: a.publisher,
+        repo: a.repo,
+        category: a.category,
         version: a.version,
         requires: [],
         dependencies: []
@@ -86,5 +85,5 @@ async function gatherAssetFeeds(am, projectDir) {
 }
 
 export { gatherAssetFeeds, sourceAssets };
-//# sourceMappingURL=asset-feeds-QXCSAJRN.js.map
-//# sourceMappingURL=asset-feeds-QXCSAJRN.js.map
+//# sourceMappingURL=asset-feeds-Y2CDCM3W.js.map
+//# sourceMappingURL=asset-feeds-Y2CDCM3W.js.map

package/dist/asset-feeds-Y2CDCM3W.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../cli/src/asset-feeds.ts"],"names":[],"mappings":";;;;;;;;;;;;;;AAoCA,eAAe,aAAA,GAAyE;AACtF,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AACF,IAAA,MAAM,CAAC,EAAE,kBAAA,EAAmB,EAAG,EAAE,eAAe,CAAA,GAAI,MAAM,OAAA,CAAQ,GAAA,CAAI;AAAA,MACpE,OAAO,4BAAmB,CAAA;AAAA,MAC1B,OAAO,oBAA4B;AAAA,KACpC,CAAA;AACD,IAAA,MAAM,EAAE,OAAA,EAAS,KAAA,EAAM,GAAI,MAAM,kBAAA,EAAmB;AACpD,IAAA,IAAI;AACF,MAAA,MAAM,UAAA,GAAkB,IAAA,CAAA,IAAA,CAAK,aAAA,EAAc,EAAG,SAAS,CAAA;AACvD,MAAA,MAAM,IAAA,GAAA,CAAQ,MAAM,OAAA,CAAQ,aAAA,EAAc,EAAG,MAAA,CAAO,CAAC,CAAA,KAAM,CAAC,CAAA,CAAE,IAAA,CAAK,UAAA,CAAW,UAAU,CAAC,CAAA;AACzF,MAAA,MAAM,UAA0B,EAAC;AACjC,MAAA,KAAA,MAAW,OAAO,IAAA,EAAM;AACtB,QAAA,IAAI,CAAC,UAAA,CAAW,GAAA,CAAI,IAAI,CAAA,EAAG;AAC3B,QAAA,KAAA,MAAW,CAAA,IAAK,SAAS,GAAA,CAAI,IAAA,EAAM,WAAW,GAAA,CAAI,IAAI,EAAE,CAAA,EAAG;AACzD,UAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,QAChB;AAAA,MACF;AACA,MAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,IAC1B,CAAA,SAAE;AACA,MAAA,KAAA,EAAM;AAAA,IACR;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,IAAA,EAAM,WAAA;AAAA,MACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACzD,CAAA;AACD,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAYA,eAAe,YAAY,UAAA,EAGxB;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AACF,IAAA,MAAM,EAAE,oBAAA,EAAqB,GAAI,MAAM,OAAO,4BAAmB,CAAA;AACjE,IAAA,MAAM,EAAE,QAAQ,KAAA,EAAM,GAAI,MAAM,oBAAA,CAAqB,EAAE,YAAY,CAAA;AACnE,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,UAAA,EAAW;AACvC,MAAA,MAAM,OAAA,GAA0B,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,QACjD,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,IAAA,EAAO,EAAE,IAAA,IAAsB,OAAA;AAAA,QAC/B,WAAA,EAAa,EAAE,WAAA,IAAe,EAAA;AAAA,QAC9B,MAAA,EAAQ,CAAA,QAAA,EAAW,CAAA,CAAE,EAAE,CAAA,CAAA;AAAA,QACvB,WAAW,CAAA,CAAE,SAAA;AAAA,QACb,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,UAAU,CAAA,CAAE,QAAA;AAAA,QACZ,SAAS,CAAA,CAAE,OAAA;AAAA,QACX,UAAU,EAAC;AAAA,QACX,cAAc;AAAC,OACjB,CAAE,CAAA;AACF,MAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,IAC1B,CAAA,SAAE;AACA,MAAA,KAAA,EAAM;AAAA,IACR;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,MAAM,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAG3D,IAAA,IAAI,CAAC,QAAA,CAAS,IAAA,CAAK,GAAG,CAAA,EAAG;AACvB,MAAA,KAAA,CAAM,KAAK,EAAE,IAAA,EAAM,OAAA,EAAS,OAAA,EAAS,KAAK,CAAA;AAAA,IAC5C;AACA,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAQO,SAAS,aAAa,EAAA,EAAsD;AACjF,EAAA,OAAO,GAAG,MAAA,EAAO;AACnB;AAQA,eAAsB,gBAAA,CACpB,IACA,UAAA,EAC0B;AAC1B,EAAA,MAAM,CAAC,IAAA,EAAM,KAAK,CAAA,GAAI,MAAM,OAAA,CAAQ,GAAA,CAAI,CAAC,aAAA,EAAc,EAAG,WAAA,CAAY,UAAU,CAAC,CAAC,CAAA;AAClF,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,CAAC,GAAG,YAAA,CAAa,EAAE,CAAA,EAAG,GAAG,IAAA,CAAK,OAAA,EAAS,GAAG,KAAA,CAAM,OAAO,CAAA;AAAA,IAChE,OAAO,CAAC,GAAG,KAAK,KAAA,EAAO,GAAG,MAAM,KAAK;AAAA,GACvC;AACF","file":"asset-feeds-Y2CDCM3W.js","sourcesContent":["/**\n * asset-feeds.ts — gather installable assets from every feed the manage TUI\n * surfaces.\n *\n * Three feeds, normalized into `CatalogEntry`:\n * - **Project sources** — `skaile.yaml` `sources:` entries (scanned via\n *   `AssetManager.search()`; the new `sources:` field is merged into the\n *   legacy repositories map in `AssetManager.loadConfig`).\n * - **Local libraries** — user authoring places from `LocalIndex` (filesystem\n *   scan of each library's `path`).\n * - **Remote store** — the configured catalog source when `catalog.url` is\n *   not `local`. Failures are non-fatal — they surface as notes.\n */\n\nimport { existsSync } from \"node:fs\";\nimport * as path from \"node:path\";\nimport { type AssetKind, type CatalogEntry, scanRepo } from \"@skaile/workspaces/core\";\n\n/** One non-fatal note returned to the caller for surfacing in the UI. */\nexport interface FeedNote {\n  feed: \"sources\" | \"libraries\" | \"store\";\n  message: string;\n}\n\nexport interface AssetFeedResult {\n  entries: CatalogEntry[];\n  notes: FeedNote[];\n}\n\n/**\n * Pull assets from local libraries (the authoring places under\n * `~/.skaile/libraries/<name>/`, not the `~/.skaile/sources/` cache). Each\n * library's `path` is scanned with `scanRepo` and tagged with\n * `repository = \"library:<name>\"` so the manage TUI groups them into their\n * own headers.\n */\nasync function libraryAssets(): Promise<{ entries: CatalogEntry[]; notes: FeedNote[] }> {\n  const notes: FeedNote[] = [];\n  try {\n    const [{ openLibraryManager }, { skaileHomeDir }] = await Promise.all([\n      import(\"./open-library.ts\"),\n      import(\"@skaile/workspaces/library\"),\n    ]);\n    const { manager, close } = await openLibraryManager();\n    try {\n      const sourcesDir = path.join(skaileHomeDir(), \"sources\");\n      const libs = (await manager.listLibraries()).filter((l) => !l.path.startsWith(sourcesDir));\n      const entries: CatalogEntry[] = [];\n      for (const lib of libs) {\n        if (!existsSync(lib.path)) continue;\n        for (const e of scanRepo(lib.path, `library:${lib.name}`)) {\n          entries.push(e);\n        }\n      }\n      return { entries, notes };\n    } finally {\n      close();\n    }\n  } catch (err) {\n    notes.push({\n      feed: \"libraries\",\n      message: err instanceof Error ? err.message : String(err),\n    });\n    return { entries: [], notes };\n  }\n}\n\n/**\n * Pull a (best-effort) snapshot of the connected remote store catalog.\n *\n * - Returns no entries when the resolved catalog is local-only or the host\n *   is unreachable (the failure becomes a note, not an exception).\n * - Maps `CatalogAsset` → `CatalogEntry`, carrying `publisher`, `repo`, and\n *   `category` straight through and using `source = \"store://<id>\"`; per-file\n *   `source` paths are not available for remote assets so the canonical ref is\n *   a stable placeholder.\n */\nasync function storeAssets(projectDir: string): Promise<{\n  entries: CatalogEntry[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    const { resolveCatalogSource } = await import(\"./open-library.ts\");\n    const { source, close } = await resolveCatalogSource({ projectDir });\n    try {\n      const assets = await source.listAssets();\n      const entries: CatalogEntry[] = assets.map((a) => ({\n        name: a.name,\n        kind: (a.kind as AssetKind) ?? \"skill\",\n        description: a.description ?? \"\",\n        source: `store://${a.id}`,\n        publisher: a.publisher,\n        repo: a.repo,\n        category: a.category,\n        version: a.version,\n        requires: [],\n        dependencies: [],\n      }));\n      return { entries, notes };\n    } finally {\n      close();\n    }\n  } catch (err) {\n    const msg = err instanceof Error ? err.message : String(err);\n    // Local-only catalog throws a recognizable message — silence it; absence\n    // is the user's choice, not an error.\n    if (!/local/i.test(msg)) {\n      notes.push({ feed: \"store\", message: msg });\n    }\n    return { entries: [], notes };\n  }\n}\n\n/**\n * Project-source feed: leans on `AssetManager.search()`, which now merges\n * `skaile.yaml`'s `sources:` field into the repositories map. Provided as a\n * function rather than an inline call so the caller can supply a fresh\n * `AssetManager` instance.\n */\nexport function sourceAssets(am: { search: () => CatalogEntry[] }): CatalogEntry[] {\n  return am.search();\n}\n\n/**\n * Run all three feeds and return a single normalized result.\n *\n * Feeds run in parallel where possible — the store fetch is the slow one\n * (one HTTP call) and is fired alongside the local library walk.\n */\nexport async function gatherAssetFeeds(\n  am: { search: () => CatalogEntry[] },\n  projectDir: string,\n): Promise<AssetFeedResult> {\n  const [libs, store] = await Promise.all([libraryAssets(), storeAssets(projectDir)]);\n  return {\n    entries: [...sourceAssets(am), ...libs.entries, ...store.entries],\n    notes: [...libs.notes, ...store.notes],\n  };\n}\n"]}

package/dist/asset-manager/index.js

@@ -1,12 +1,12 @@
-export { AssetManager } from '../chunk-VCYXVP2S.js';
-export { createScaffold, deployAll, installAgent, removeAsset } from '../chunk-PTIHB2TV.js';
-import '../chunk-UMOENHVH.js';
+export { AssetManager } from '../chunk-7HSXUKNB.js';
+export { createScaffold, deployAll, installAgent, removeAsset } from '../chunk-2RYQERIT.js';
+import '../chunk-ETMUGBHF.js';
 import '../chunk-K5GBV4SA.js';
 import '../chunk-KLNL7QHN.js';
-import '../chunk-GFNW72LW.js';
-import '../chunk-J3VKAEQP.js';
-import '../chunk-4AZKT2BU.js';
-import '../chunk-I3UEM3FX.js';
+import '../chunk-PFOXL4SH.js';
+import '../chunk-V5TBKO5Q.js';
+import '../chunk-K7WPR77X.js';
+import '../chunk-VUCPJBAG.js';
 import '../chunk-JKNWJ64A.js';
 import '../chunk-O4JH3KUE.js';
 import '../chunk-24UIWON4.js';

package/dist/asset-manager/installer.js

@@ -1,11 +1,11 @@
-export { createScaffold, deployAll, deployAsset, removeAsset } from '../chunk-PTIHB2TV.js';
-import '../chunk-UMOENHVH.js';
+export { createScaffold, deployAll, deployAsset, removeAsset } from '../chunk-2RYQERIT.js';
+import '../chunk-ETMUGBHF.js';
 import '../chunk-K5GBV4SA.js';
 import '../chunk-KLNL7QHN.js';
-import '../chunk-GFNW72LW.js';
-import '../chunk-J3VKAEQP.js';
-import '../chunk-4AZKT2BU.js';
-import '../chunk-I3UEM3FX.js';
+import '../chunk-PFOXL4SH.js';
+import '../chunk-V5TBKO5Q.js';
+import '../chunk-K7WPR77X.js';
+import '../chunk-VUCPJBAG.js';
 import '../chunk-JKNWJ64A.js';
 import '../chunk-O4JH3KUE.js';
 import '../chunk-24UIWON4.js';

package/dist/asset-manager/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../asset-manager/src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAeH,OAAO,KAAK,EAEV,YAAY,EACZ,QAAQ,EAST,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AA6B5D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAsCjD,YAAY,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACpD,YAAY,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AAC1C,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EACL,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,WAAW,GACZ,MAAM,cAAc,CAAC;AAOtB;;;;GAIG;AACH,MAAM,WAAW,QAAQ;IACvB,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,kHAAkH;IAClH,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACpC,qDAAqD;IACrD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,gFAAgF;IAChF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,MAAM,EAAE,OAAO,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,+BAA+B;IAC/B,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACpC,8DAA8D;IAC9D,MAAM,EAAE,MAAM,CAAC;IACf,2DAA2D;IAC3D,QAAQ,EAAE,OAAO,CAAC;IAClB,8CAA8C;IAC9C,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,kEAAkE;IAClE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,uFAAuF;IACvF,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,0EAA0E;IAC1E,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,yDAAyD;IACzD,WAAW,EAAE,OAAO,CAAC;IACrB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,gEAAgE;IAChE,cAAc,EAAE,MAAM,CAAC;IACvB,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,gEAAgE;IAChE,GAAG,EAAE,MAAM,CAAC;IACZ,qDAAqD;IACrD,QAAQ,EAAE,cAAc,EAAE,CAAC;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,QAAQ;IACvB,8DAA8D;IAC9D,SAAS,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,SAAS,EAAE,MAAM,CAAC;IAClB,sCAAsC;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,sCAAsC;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,uGAAuG;IACvG,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAC;IACb,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,uFAAuF;IACvF,MAAM,EAAE,MAAM,CAAC;IACf,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,yCAAyC;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;;;OAOG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,gGAAgG;IAChG,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IACvC,uCAAuC;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,kDAAkD;IAClD,KAAK,EAAE,cAAc,EAAE,CAAC;CACzB;AAID;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,oFAAoF;IACpF,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,qBAAa,YAAY;IACvB,oDAAoD;IACpD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,oEAAoE;IACpE,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,6DAA6D;IAC7D,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;gBAEb,IAAI,EAAE,mBAAmB;IAMrC,OAAO,KAAK,QAAQ,GAEnB;IAED,OAAO,KAAK,QAAQ,GAEnB;IAED,OAAO,KAAK,QAAQ,GAEnB;IAED,OAAO,KAAK,UAAU,GAErB;IAED,OAAO,CAAC,UAAU;IAkClB,2EAA2E;IAC3E,OAAO,CAAC,WAAW;IAgBnB;;;;;OAKG;IACH,OAAO,CAAC,uBAAuB;IAoD/B;;;;;;;;;;OAUG;IACG,OAAO,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,CAAC;IA+ElE,6EAA6E;IAC7E,OAAO,CAAC,WAAW;IAQnB,gFAAgF;IAChF,OAAO,CAAC,iBAAiB;IA6BzB;;;;;;;;OAQG;YACW,uBAAuB;IAiCrC,OAAO,CAAC,aAAa;IA8DrB;;;;;;;;;OASG;IACG,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IA6CzC;;;;;OAKG;IACH,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAmB5B;;;;;;;;OAQG;IACH,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,YAAY,EAAE;IAoBrD;;;;;OAKG;IACH,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI;IAetC;;;;;;;;OAQG;IACH,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,YAAY,EAAE;IA6C3C;;;;;;;OAOG;IACH,QAAQ,IAAI,cAAc;IAkF1B;;;;;;OAMG;IACH,IAAI,IAAI,cAAc;IAYtB;;;;;;OAMG;IACH,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE;IAS1B;;;;;;;OAOG;IACH,QAAQ,IAAI,aAAa,EAAE;IA4B3B;;;;;;;;;OASG;IACH,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAiBhC;;;;;;;OAOG;IACG,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC;IA0B/B;;;;;;;;;OASG;IACH,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;IAM1B;;;;;;;;;OASG;IACH,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;IAmBhC;;;;;;;;OAQG;IACH,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAoB9B;;;;OAIG;IACH,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAc9B;;;;;;;;OAQG;IACH,MAAM,IAAI,QAAQ,EAAE;IAmCpB;;;;;;;;OAQG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE;IAalF;;;;;OAKG;IACH,OAAO,CAAC,KAAK,SAAK,GAAG,YAAY,EAAE;IAInC;;OAEG;IACH,YAAY,IAAI,IAAI;IAMpB;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,IAAI,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG;QAC/B,OAAO,EAAE,MAAM,EAAE,CAAC;QAClB,OAAO,EAAE,KAAK,CAAC;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAChD,SAAS,EAAE,MAAM,EAAE,CAAC;KACrB;IA4ED,kEAAkE;IAClE,OAAO,CAAC,qBAAqB;IAY7B,gDAAgD;IAChD,OAAO,CAAC,0BAA0B;IAalC,OAAO,CAAC,cAAc;CAqBvB;AAID,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAIlD,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,aAAa,EACb,0BAA0B,EAC1B,WAAW,GACZ,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,aAAa,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAIzF,YAAY,EACV,UAAU,EACV,YAAY,EACZ,WAAW,EACX,eAAe,EACf,UAAU,GACX,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../asset-manager/src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAeH,OAAO,KAAK,EAEV,YAAY,EACZ,QAAQ,EAST,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AA6B5D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAsCjD,YAAY,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACpD,YAAY,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AAC1C,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EACL,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,WAAW,GACZ,MAAM,cAAc,CAAC;AAOtB;;;;GAIG;AACH,MAAM,WAAW,QAAQ;IACvB,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,kHAAkH;IAClH,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACpC,qDAAqD;IACrD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,gFAAgF;IAChF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,MAAM,EAAE,OAAO,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,+BAA+B;IAC/B,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACpC,8DAA8D;IAC9D,MAAM,EAAE,MAAM,CAAC;IACf,2DAA2D;IAC3D,QAAQ,EAAE,OAAO,CAAC;IAClB,8CAA8C;IAC9C,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,kEAAkE;IAClE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,uFAAuF;IACvF,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,0EAA0E;IAC1E,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,yDAAyD;IACzD,WAAW,EAAE,OAAO,CAAC;IACrB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,gEAAgE;IAChE,cAAc,EAAE,MAAM,CAAC;IACvB,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,gEAAgE;IAChE,GAAG,EAAE,MAAM,CAAC;IACZ,qDAAqD;IACrD,QAAQ,EAAE,cAAc,EAAE,CAAC;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,QAAQ;IACvB,8DAA8D;IAC9D,SAAS,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,SAAS,EAAE,MAAM,CAAC;IAClB,sCAAsC;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,sCAAsC;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,uGAAuG;IACvG,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAC;IACb,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,uFAAuF;IACvF,MAAM,EAAE,MAAM,CAAC;IACf,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,yCAAyC;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;;;OAOG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,gGAAgG;IAChG,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IACvC,uCAAuC;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,kDAAkD;IAClD,KAAK,EAAE,cAAc,EAAE,CAAC;CACzB;AAID;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,oFAAoF;IACpF,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,qBAAa,YAAY;IACvB,oDAAoD;IACpD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,oEAAoE;IACpE,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,6DAA6D;IAC7D,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;gBAEb,IAAI,EAAE,mBAAmB;IAMrC,OAAO,KAAK,QAAQ,GAEnB;IAED,OAAO,KAAK,QAAQ,GAEnB;IAED,OAAO,KAAK,QAAQ,GAEnB;IAED,OAAO,KAAK,UAAU,GAErB;IAED,OAAO,CAAC,UAAU;IAkClB,2EAA2E;IAC3E,OAAO,CAAC,WAAW;IAgBnB;;;;;OAKG;IACH,OAAO,CAAC,uBAAuB;IAoD/B;;;;;;;;;;OAUG;IACG,OAAO,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,CAAC;IAwFlE,6EAA6E;IAC7E,OAAO,CAAC,WAAW;IAQnB,gFAAgF;IAChF,OAAO,CAAC,iBAAiB;IA6BzB;;;;;;;;OAQG;YACW,uBAAuB;IAiCrC,OAAO,CAAC,aAAa;IA8DrB;;;;;;;;;OASG;IACG,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IA+CzC;;;;;OAKG;IACH,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAmB5B;;;;;;;;OAQG;IACH,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,YAAY,EAAE;IAoBrD;;;;;OAKG;IACH,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI;IAetC;;;;;;;;OAQG;IACH,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,YAAY,EAAE;IA6C3C;;;;;;;OAOG;IACH,QAAQ,IAAI,cAAc;IA+E1B;;;;;;OAMG;IACH,IAAI,IAAI,cAAc;IAYtB;;;;;;OAMG;IACH,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE;IAS1B;;;;;;;OAOG;IACH,QAAQ,IAAI,aAAa,EAAE;IA4B3B;;;;;;;;;OASG;IACH,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAiBhC;;;;;;;OAOG;IACG,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC;IA0B/B;;;;;;;;;OASG;IACH,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;IAM1B;;;;;;;;;OASG;IACH,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;IAmBhC;;;;;;;;OAQG;IACH,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAoB9B;;;;OAIG;IACH,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAc9B;;;;;;;;OAQG;IACH,MAAM,IAAI,QAAQ,EAAE;IAmCpB;;;;;;;;OAQG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE;IAalF;;;;;OAKG;IACH,OAAO,CAAC,KAAK,SAAK,GAAG,YAAY,EAAE;IAInC;;OAEG;IACH,YAAY,IAAI,IAAI;IAMpB;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,IAAI,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG;QAC/B,OAAO,EAAE,MAAM,EAAE,CAAC;QAClB,OAAO,EAAE,KAAK,CAAC;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAChD,SAAS,EAAE,MAAM,EAAE,CAAC;KACrB;IA4ED,kEAAkE;IAClE,OAAO,CAAC,qBAAqB;IAY7B,gDAAgD;IAChD,OAAO,CAAC,0BAA0B;IAalC,OAAO,CAAC,cAAc;CAqBvB;AAID,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAIlD,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,aAAa,EACb,0BAA0B,EAC1B,WAAW,GACZ,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,aAAa,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAIzF,YAAY,EACV,UAAU,EACV,YAAY,EACZ,WAAW,EACX,eAAe,EACf,UAAU,GACX,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/base-assets/connectors/deploy.js

@@ -1,18 +1,18 @@
-export { DeployConnector, createConnector19 as createConnector } from '../../chunk-LT4DLEYE.js';
-import '../../chunk-APAOQLPT.js';
+export { DeployConnector, createConnector19 as createConnector } from '../../chunk-OJN25VJO.js';
+import '../../chunk-NBJ5TOEC.js';
 import '../../chunk-6MB7CRME.js';
 import '../../chunk-QAVZOJCV.js';
 import '../../chunk-6E6PKKAD.js';
 import '../../chunk-ICS76R4T.js';
 import '../../chunk-GZWJGNNN.js';
 import '../../chunk-FVTV7M76.js';
-import '../../chunk-UMOENHVH.js';
+import '../../chunk-ETMUGBHF.js';
 import '../../chunk-K5GBV4SA.js';
 import '../../chunk-KLNL7QHN.js';
-import '../../chunk-GFNW72LW.js';
-import '../../chunk-J3VKAEQP.js';
-import '../../chunk-4AZKT2BU.js';
-import '../../chunk-I3UEM3FX.js';
+import '../../chunk-PFOXL4SH.js';
+import '../../chunk-V5TBKO5Q.js';
+import '../../chunk-K7WPR77X.js';
+import '../../chunk-VUCPJBAG.js';
 import '../../chunk-JKNWJ64A.js';
 import '../../chunk-O4JH3KUE.js';
 import '../../chunk-24UIWON4.js';

package/dist/base-assets/connectors/devserver.js

@@ -1,18 +1,18 @@
-export { DevServerConnector, createConnector16 as createConnector } from '../../chunk-LT4DLEYE.js';
-import '../../chunk-APAOQLPT.js';
+export { DevServerConnector, createConnector16 as createConnector } from '../../chunk-OJN25VJO.js';
+import '../../chunk-NBJ5TOEC.js';
 import '../../chunk-6MB7CRME.js';
 import '../../chunk-QAVZOJCV.js';
 import '../../chunk-6E6PKKAD.js';
 import '../../chunk-ICS76R4T.js';
 import '../../chunk-GZWJGNNN.js';
 import '../../chunk-FVTV7M76.js';
-import '../../chunk-UMOENHVH.js';
+import '../../chunk-ETMUGBHF.js';
 import '../../chunk-K5GBV4SA.js';
 import '../../chunk-KLNL7QHN.js';
-import '../../chunk-GFNW72LW.js';
-import '../../chunk-J3VKAEQP.js';
-import '../../chunk-4AZKT2BU.js';
-import '../../chunk-I3UEM3FX.js';
+import '../../chunk-PFOXL4SH.js';
+import '../../chunk-V5TBKO5Q.js';
+import '../../chunk-K7WPR77X.js';
+import '../../chunk-VUCPJBAG.js';
 import '../../chunk-JKNWJ64A.js';
 import '../../chunk-O4JH3KUE.js';
 import '../../chunk-24UIWON4.js';

package/dist/base-assets/connectors/flow/adapter.js

@@ -1,18 +1,18 @@
-export { FlowAdapter, createConnector } from '../../../chunk-LT4DLEYE.js';
-import '../../../chunk-APAOQLPT.js';
+export { FlowAdapter, createConnector } from '../../../chunk-OJN25VJO.js';
+import '../../../chunk-NBJ5TOEC.js';
 import '../../../chunk-6MB7CRME.js';
 import '../../../chunk-QAVZOJCV.js';
 import '../../../chunk-6E6PKKAD.js';
 export { isBlocking } from '../../../chunk-ICS76R4T.js';
 import '../../../chunk-GZWJGNNN.js';
 import '../../../chunk-FVTV7M76.js';
-import '../../../chunk-UMOENHVH.js';
+import '../../../chunk-ETMUGBHF.js';
 import '../../../chunk-K5GBV4SA.js';
 import '../../../chunk-KLNL7QHN.js';
-import '../../../chunk-GFNW72LW.js';
-import '../../../chunk-J3VKAEQP.js';
-import '../../../chunk-4AZKT2BU.js';
-import '../../../chunk-I3UEM3FX.js';
+import '../../../chunk-PFOXL4SH.js';
+import '../../../chunk-V5TBKO5Q.js';
+import '../../../chunk-K7WPR77X.js';
+import '../../../chunk-VUCPJBAG.js';
 import '../../../chunk-JKNWJ64A.js';
 import '../../../chunk-O4JH3KUE.js';
 import '../../../chunk-24UIWON4.js';