@skaile/workspaces 0.22.0-beta.1 → 0.22.0

package/dist/{chunk-J3VKAEQP.js → chunk-V5TBKO5Q.js}

@@ -1,5 +1,5 @@
-import { scanDirectory, parseFrontmatter, fromMcpServerMd } from './chunk-4AZKT2BU.js';
-import { parseAssetRef } from './chunk-I3UEM3FX.js';
+import { scanDirectory, parseFrontmatter, bundleDepRefs, fromMcpServerMd } from './chunk-K7WPR77X.js';
+import { parseAssetRef } from './chunk-VUCPJBAG.js';
 import { mkdirSync, existsSync, readFileSync, writeFileSync, lstatSync, symlinkSync, rmSync, readdirSync, statSync } from 'fs';
 import { homedir } from 'os';
 import { join, resolve, relative, parse as parse$1, dirname } from 'path';
@@ -120,9 +120,14 @@ function ensureRepo(decl, name, reposDir, opts) {
   if (decl.path) {
     const projectDir = opts?.projectDir ?? resolve(reposDir, "..");
     const resolved = resolve(projectDir, decl.path);
-    if (!existsSync(resolved)) {
+    if (existsSync(resolved)) return resolved;
+    if (!decl.url) {
       throw new Error(`Local repository path not found: ${decl.path} (resolved: ${resolved})`);
     }
+    if (!cloneRepo(decl.url, decl.branch ?? "main", resolved)) {
+      throw new Error(`Failed to clone ${decl.url} into ${resolved}`);
+    }
+    if (opts?.pin) checkoutPin(resolved, opts.pin);
     return resolved;
   }
   if (decl.url) {
@@ -160,8 +165,20 @@ function ensureRepo(decl, name, reposDir, opts) {
   }
   throw new Error(`Repository "${name}" has neither url nor path`);
 }
+function repoSlugFromGitRemote(rootDir) {
+  const r = spawnSync("git", ["-C", rootDir, "config", "--get", "remote.origin.url"], {
+    encoding: "utf8",
+    stdio: "pipe",
+    env: GIT_ENV
+  });
+  if (r.status !== 0) return void 0;
+  const m = /github\.com[/:]([^/]+)\/([^/]+?)(?:\.git)?\/?$/.exec(r.stdout.trim());
+  return m ? `${m[1]}/${m[2]}` : void 0;
+}
 function scanRepo(repoDir, repoName) {
-  return scanDirectory(repoDir, repoName);
+  const repo = repoSlugFromGitRemote(repoDir);
+  const entries = scanDirectory(repoDir, repoName);
+  return repo ? entries.map((e) => ({ ...e, repo })) : entries;
 }
 function resolveAsset(ref, repositories, reposDir, opts) {
   let repoNames;
@@ -233,6 +250,13 @@ var CanonicalRefConflictError = class extends Error {
   depChain;
 };
 var SHA_PIN_RE = /^[0-9a-f]{40}$/i;
+function qualifyPublisher(ref, fallback) {
+  const hashIdx = ref.indexOf("#");
+  const head = hashIdx === -1 ? ref : ref.slice(0, hashIdx);
+  if (head.includes("@")) return ref;
+  const pin = hashIdx === -1 ? "" : ref.slice(hashIdx);
+  return `${head}@${fallback}${pin}`;
+}
 async function resolveAll(deps, opts) {
   const resolved = [];
   const seen = /* @__PURE__ */ new Set();
@@ -321,6 +345,9 @@ async function resolveAll(deps, opts) {
     }
     resolved.push(chosen);
     resolvedBy.set(key, parent);
+    for (const depRef of chosen.deps ?? []) {
+      await visit(qualifyPublisher(depRef, chosen.publisher), key, [...depChain, refStr]);
+    }
   }
   for (const dep of deps) {
     await visit(dep, "direct", []);
@@ -474,7 +501,8 @@ function walkWithManifest(clone, yamlPath, index) {
       commit: clone.commit,
       files,
       sha256: compositeSha256(files),
-      metadata
+      metadata,
+      deps: bundleDeps(clone.localPath, files, a.kind)
     };
     push(index, `${assetPublisher}/${a.kind}:${a.name}`, candidate);
   }
@@ -532,7 +560,8 @@ function walkFilenameConvention(clone, index, publisherOverride, versionOverride
         commit: clone.commit,
         files,
         sha256: compositeSha256(files),
-        metadata
+        metadata,
+        deps: bundleDeps(clone.localPath, files, kind)
       };
       push(index, `${publisher}/${kind}:${entry.name}`, candidate);
     }
@@ -558,6 +587,11 @@ function readMetadata(repoRoot, files, kind) {
   const { data } = parseFrontmatter(readFileSync(join(repoRoot, mcpMd.path), "utf8"));
   return data;
 }
+function bundleDeps(repoRoot, files, kind) {
+  if (kind !== "bundle") return void 0;
+  const bf = files.find((f) => f.path.endsWith(".bundle.yaml") || f.path.endsWith("BUNDLE.md"));
+  return bf ? bundleDepRefs(join(repoRoot, bf.path)) : void 0;
+}
 function push(index, key, candidate) {
   const arr = index.get(key) ?? [];
   arr.push(candidate);
@@ -598,6 +632,7 @@ function validateAssetRecipeAttr(attr) {
     );
   }
 }
+var KNOWN_NETWORK_MODES = ["open", "off", "allowlist"];
 var COMPACTION_DEFAULTS = {
   enabled: true,
   thresholdPercent: 80,
@@ -898,9 +933,7 @@ function normalizeConfigInternal(raw) {
       const entry = { kind, name };
       if (typeof a.root === "string") entry.root = a.root;
       if (Array.isArray(a.files)) {
-        entry.files = a.files.filter(
-          (f) => typeof f === "string"
-        );
+        entry.files = a.files.filter((f) => typeof f === "string");
       }
       if (typeof a.version === "string") entry.version = a.version;
       if (typeof a.publisher === "string") entry.publisher = a.publisher;
@@ -933,9 +966,7 @@ function normalizeConfigInternal(raw) {
         );
       }
       if (o.reason.trim().length === 0) {
-        throw new Error(
-          `skaile.yaml: overrides[] entry for ${ref}: reason must not be empty.`
-        );
+        throw new Error(`skaile.yaml: overrides[] entry for ${ref}: reason must not be empty.`);
       }
       entries.push({ ref, source, reason: o.reason });
     }
@@ -1073,6 +1104,25 @@ function validateConfigValues(config, diagnostics) {
   };
   for (const c of config.connectors ?? []) checkAccess(c.access, `connectors.${c.id}.access`);
   for (const m of config.mounts ?? []) checkAccess(m.access, `mounts.${m.id}.access`);
+  const network = config.agent?.permissions?.network;
+  if (network) {
+    if (network.mode && !KNOWN_NETWORK_MODES.includes(network.mode)) {
+      diagnostics.push({
+        code: "unknown_network_mode",
+        severity: "warning",
+        message: `Unknown network mode "${network.mode}" \u2014 expected one of: ${KNOWN_NETWORK_MODES.join(", ")}.`,
+        path: "agent.permissions.network.mode"
+      });
+    }
+    if (network.allowlist && network.allowlist.length > 0 && network.mode !== "allowlist") {
+      diagnostics.push({
+        code: "unexpected_network_allowlist",
+        severity: "warning",
+        message: `network.allowlist is set but mode is "${network.mode}" \u2014 the allowlist is ignored unless mode is "allowlist".`,
+        path: "agent.permissions.network.allowlist"
+      });
+    }
+  }
 }
 var CANONICAL_KEY_ORDER = [
   "name",
@@ -1376,5 +1426,5 @@ function resolveAgentDir(projectDir) {
 }
 
 export { COMPACTION_DEFAULTS, CanonicalRefConflictError, DEFAULT_RECIPE_ATTR, SKAILE_YAML_DEFAULT, SKAILE_YAML_SUFFIX, SK_WORKSPACE_DEFAULT_NAME, SK_WORKSPACE_SUFFIX, buildProvenanceIndex, checkRepoStatus, checkoutPin, cloneRepo, decodeSkaileYaml, encodeSkaileYaml, ensureRepo, findWorkspaceRoot, getGlobalCacheDir, getRepoCommit, isWorkspaceConfigFilename, linkRepo, listSkWorkspaceConfigs, loadMcpServerDeclarations, loadSkWorkspaceConfig, mergeSkWorkspaceConfigs, normalizeConfig, pullRepo, readLinks, resolveAgentDir, resolveAll, resolveAsset, resolveSkWorkspaceConfig, saveSkWorkspaceConfig, scanRepo, unlinkRepo, validateAssetRecipeAttr, validateAssetRecipeFlake, workspaceConfigFilename, workspaceNameFromFilename, writeLinks };
-//# sourceMappingURL=chunk-J3VKAEQP.js.map
-//# sourceMappingURL=chunk-J3VKAEQP.js.map
+//# sourceMappingURL=chunk-V5TBKO5Q.js.map
+//# sourceMappingURL=chunk-V5TBKO5Q.js.map