@skaile/workspaces 0.24.0 → 0.25.0

package/dist/cli/index.js

@@ -1,18 +1,18 @@
 #!/usr/bin/env node
-import { openCatalogSource, openLibraryManager, createFullRegistry, openLibrary } from '../chunk-46COM7M5.js';
+import { openCatalogSource, openLibraryManager, createFullRegistry, openLibrary } from '../chunk-4FADEVBN.js';
 import { logErr, S, logOk, colorRef, logInfo, logWarn, kindColorPad, kindColor, formatRelativeTime, fitWidth } from '../chunk-WSZAFRQL.js';
-import { getStoreConfig, storeFetch, saveStoreTokens, clearStoreTokens, isStoreAuthenticated } from '../chunk-AFLH7B64.js';
+import { getStoreConfig, storeFetch, saveStoreTokens, clearStoreTokens, isStoreAuthenticated } from '../chunk-4FJE6BI6.js';
 import { AI_RESOURCES } from '../chunk-2M3XTMOL.js';
 import { LocalSecretsProvider } from '../chunk-JDX54X4Y.js';
-import { resolveLibraryDir, LocalCatalogSource, skaileHomeDir } from '../chunk-2F3RUZXC.js';
+import { resolveLibraryDir, LocalCatalogSource, skaileHomeDir } from '../chunk-DCAWIRD6.js';
 import '../chunk-R7FOF242.js';
-import '../chunk-LJ52ZKIU.js';
+import '../chunk-KT3CK26V.js';
 import '../chunk-OKRUTSG7.js';
-import { runFlow, resumeFlow } from '../chunk-OYRW5RCM.js';
+import { runFlow, resumeFlow } from '../chunk-FJFHJBGS.js';
 import '../chunk-GCJXPUHG.js';
 import { validateFlowVersions, parseSkillFrontmatter } from '../chunk-IPUYL6TD.js';
-import { runAgentChat, loadSessionById, loadSession, listSessions, setCurrentSession, deleteSession, clearSession, loadAgentManifest, compileComposition, MarkdownStreamer, resolveMixin } from '../chunk-JQBHCJ6N.js';
-import { buildClaudePluginFiles } from '../chunk-J2TITSXF.js';
+import { runAgentChat, loadSessionById, loadSession, listSessions, setCurrentSession, deleteSession, clearSession, loadAgentManifest, compileComposition, MarkdownStreamer, resolveMixin } from '../chunk-BJWUSHC4.js';
+import { buildClaudePluginFiles } from '../chunk-4QVFQEY2.js';
 import '../chunk-X5YPJV4N.js';
 import '../chunk-O7SG5PC2.js';
 import '../chunk-7QBNJTTQ.js';
@@ -27,23 +27,23 @@ import '../chunk-KOVLSBXK.js';
 import '../chunk-RRVQAE5D.js';
 import '../chunk-6VTG73UY.js';
 import '../chunk-LV2HPH3C.js';
-import '../chunk-HIIARTRZ.js';
-import '../chunk-ODPII24X.js';
+import '../chunk-XMP6XTMF.js';
+import '../chunk-SETTLPBD.js';
 import '../chunk-QMONOHXT.js';
 import '../chunk-QAVZOJCV.js';
 import '../chunk-6E6PKKAD.js';
 import { loadAllFlows } from '../chunk-ICS76R4T.js';
 import '../chunk-GZWJGNNN.js';
 import '../chunk-FVTV7M76.js';
-import { AssetManager } from '../chunk-N6TA6RSH.js';
-import '../chunk-2RFOFHSM.js';
-import { readLock, resolveSettings, globalSettingsPath, projectSettingsPath, loadSettings, saveSettings, portableSpawn, portableSpawnSync, WorkspaceYamlEditor } from '../chunk-Z3M5K67G.js';
+import { AssetManager } from '../chunk-B4ZXBH57.js';
+import '../chunk-QXC62DOF.js';
+import { readLock, resolveSettings, globalSettingsPath, projectSettingsPath, loadSettings, saveSettings, portableSpawn, portableSpawnSync, WorkspaceYamlEditor } from '../chunk-XVL22AWE.js';
 import { DRIVER_DEFAULTS } from '../chunk-K5GBV4SA.js';
 import '../chunk-KLNL7QHN.js';
-import '../chunk-5ESCS2OS.js';
-import { resolveSkWorkspaceConfig, resolveAgentDir, decodeSkaileYaml, findWorkspaceRoot, workspaceConfigFilename } from '../chunk-542K7SR6.js';
-import { parseFrontmatter } from '../chunk-DH4N5AW4.js';
-import { ASSET_KINDS, assetRefToStr } from '../chunk-YX3UWPJ5.js';
+import '../chunk-UD4ZLXGS.js';
+import { resolveSkWorkspaceConfig, resolveAgentDir, decodeSkaileYaml, findWorkspaceRoot, workspaceConfigFilename } from '../chunk-3QTZWPGH.js';
+import { parseFrontmatter } from '../chunk-GL45UNVS.js';
+import { ASSET_KINDS, parseAssetRef, isValidAssetName, ASSET_NAME_HINT, assetRefToStr } from '../chunk-WIAHJOMG.js';
 import '../chunk-JKNWJ64A.js';
 import { SUPPORTED_DRIVER_TARGETS } from '../chunk-O4JH3KUE.js';
 import { openSqlite } from '../chunk-24UIWON4.js';
@@ -310,7 +310,7 @@ function makeSearchCommand() {
     }
     if (showStore) {
       try {
-        const { getStoreConfig: getStoreConfig2, storeFetch: storeFetch2 } = await import('../store-client-AEI6Y3KD.js');
+        const { getStoreConfig: getStoreConfig2, storeFetch: storeFetch2 } = await import('../store-client-INZD2RYD.js');
         const config = getStoreConfig2();
         const params = {};
         if (query) params.q = query;
@@ -472,7 +472,7 @@ function makeCatalogCommand() {
     const cfg = resolveConfig({ projectDir });
     const baseUrl = opts.url ?? cfg.catalog.url;
     if (isLocalCatalogUrl(baseUrl)) {
-      const { resolveCatalogSource } = await import('../open-library-67FSSQWE.js');
+      const { resolveCatalogSource } = await import('../open-library-GW7DWWNZ.js');
       let resolved;
       try {
         resolved = await resolveCatalogSource({ projectDir: opts.projectDir });
@@ -1433,7 +1433,7 @@ async function ensureTargetsRegistered(projectDir) {
   const { resolveSkWorkspaceConfig: resolveSkWorkspaceConfig2 } = await import('../core/index.js');
   const config = resolveSkWorkspaceConfig2(projectDir);
   if (config.plugins && config.plugins.length > 0) {
-    const { ensurePluginsLoaded } = await import('../plugin-store-IZ5SCRAV.js');
+    const { ensurePluginsLoaded } = await import('../plugin-store-R32NH7JE.js');
     const result = await ensurePluginsLoaded(projectDir, config.plugins, pluginRegistry);
     for (const f of result.failed) logWarn(f.error);
   }
@@ -2292,7 +2292,7 @@ function actOnHeader(row, action3) {
   return false;
 }
 async function loadAssets() {
-  const { gatherAssetFeeds } = await import('../asset-feeds-WKIKSZ6Z.js');
+  const { gatherAssetFeeds } = await import('../asset-feeds-77KLWCBP.js');
   const { entries, notes } = await gatherAssetFeeds(am, am.projectDir);
   if (notes.length > 0) {
     state.message = notes.map((n) => `[${n.feed}] ${n.message}`).join(" \u2022 ");
@@ -2347,7 +2347,7 @@ async function loadAssets() {
 async function loadSourcesAndLibraries() {
   try {
     const [{ openLibraryManager: openLibraryManager2 }, { skaileHomeDir: skaileHomeDir2 }] = await Promise.all([
-      import('../open-library-67FSSQWE.js'),
+      import('../open-library-GW7DWWNZ.js'),
       import('../library/index.js')
     ]);
     const { manager, library, close } = await openLibraryManager2();
@@ -3679,7 +3679,7 @@ function action2(fn) {
   };
 }
 async function reconcileAndReport(projectDir, plugins) {
-  const { reconcilePlugins } = await import('../plugin-store-IZ5SCRAV.js');
+  const { reconcilePlugins } = await import('../plugin-store-R32NH7JE.js');
   if (plugins.length === 0) {
     logInfo("No plugins declared \u2014 nothing to reconcile.");
     return;
@@ -3695,7 +3695,7 @@ async function reconcileAndReport(projectDir, plugins) {
 async function runInstall2(spec, opts) {
   const projectDir = path14__default.resolve(opts.projectDir);
   const { WorkspaceYamlEditor: WorkspaceYamlEditor2 } = await import('../core/index.js');
-  const { specName } = await import('../plugin-store-IZ5SCRAV.js');
+  const { specName } = await import('../plugin-store-R32NH7JE.js');
   const yamlPath = path14__default.join(projectDir, "skaile.yaml");
   const editor = WorkspaceYamlEditor2.load(yamlPath);
   const replaced = editor.addPlugin(spec, specName);
@@ -3707,7 +3707,7 @@ async function runInstall2(spec, opts) {
 async function runRemove(name, opts) {
   const projectDir = path14__default.resolve(opts.projectDir);
   const { WorkspaceYamlEditor: WorkspaceYamlEditor2 } = await import('../core/index.js');
-  const { specName } = await import('../plugin-store-IZ5SCRAV.js');
+  const { specName } = await import('../plugin-store-R32NH7JE.js');
   const yamlPath = path14__default.join(projectDir, "skaile.yaml");
   const editor = WorkspaceYamlEditor2.load(yamlPath);
   const removed = editor.removePlugin(name, specName);
@@ -3735,7 +3735,7 @@ async function runList(opts) {
   const registry = createPluginRegistry();
   if (declared.length > 0) {
     try {
-      const { loadPlugins } = await import('../plugin-store-IZ5SCRAV.js');
+      const { loadPlugins } = await import('../plugin-store-R32NH7JE.js');
       const result = await loadPlugins(projectDir, declared, registry);
       for (const f of result.failed) logWarn(f.error);
     } catch (err) {
@@ -3899,20 +3899,30 @@ items:
     # credential_ref: "\${SECRET:EXAMPLE_KEY}"  # for secret placeholders
 `;
 }
-var ASSET_REF_RE = /^@?([^/@\s]+)\/([^/@\s]+)@([^/@\s]+)$/;
+var REF_HINT = "kind:@<publisher>/<name>#<version> (e.g. skill:@skaile/use-exa#1.0.0)";
+function isValidAssetRef(ref) {
+  try {
+    parseAssetRef(ref);
+    return true;
+  } catch {
+    return false;
+  }
+}
 function supportsInstallManifest(source) {
   return typeof source?.getInstallManifest === "function";
 }
 async function runPointerOnlyInstall(ref, deps) {
-  const m = ref.match(ASSET_REF_RE);
-  if (!m) {
+  let requested;
+  try {
+    requested = parseAssetRef(ref);
+  } catch (e) {
     throw new Error(
-      `malformed asset ref '${ref}' \u2014 expected <publisher>/<name>@<version> (e.g. skaile/use-exa@1.0.0)`
+      `malformed asset ref '${ref}' \u2014 expected ${REF_HINT}: ${e instanceof Error ? e.message : String(e)}`
     );
   }
   const manifest = await deps.catalog.getInstallManifest(ref);
-  const normalizeRef = (r) => r.replace(/^@/, "");
-  if (normalizeRef(manifest.ref) !== normalizeRef(ref)) {
+  const got = parseAssetRef(manifest.ref);
+  if (got.kind !== requested.kind || got.publisher !== requested.publisher || got.name !== requested.name || got.pin !== requested.pin) {
     throw new Error(
       `catalog identity mismatch: requested '${ref}' but the catalog returned a manifest for '${manifest.ref}'`
     );
@@ -3926,19 +3936,17 @@ async function runPointerOnlyInstall(ref, deps) {
 }
 function makeInstallCommand() {
   return new Command("install").description(
-    "Install dependencies from skaile.yaml, or a single asset by ref (<publisher>/<name>@<version>)"
-  ).argument("[ref]", "Asset ref to install from the Catalog (<publisher>/<name>@<version>)").option("--locked", "Install from lock file (CI mode \u2014 fails on drift)").option("--project-dir <path>", "Project directory", process.cwd()).option("--target <agent>", "Agent framework", "claude-code").action(async (ref, opts) => {
+    `Install dependencies from skaile.yaml, or a single asset by ref (${REF_HINT})`
+  ).argument("[ref]", `Asset ref to install from the Catalog (${REF_HINT})`).option("--locked", "Install from lock file (CI mode \u2014 fails on drift)").option("--project-dir <path>", "Project directory", process.cwd()).option("--target <agent>", "Agent framework", "claude-code").action(async (ref, opts) => {
     if (ref !== void 0) {
-      if (!ASSET_REF_RE.test(ref)) {
-        logErr(
-          `malformed asset ref '${ref}' \u2014 expected <publisher>/<name>@<version> (e.g. skaile/use-exa@1.0.0)`
-        );
+      if (!isValidAssetRef(ref)) {
+        logErr(`malformed asset ref '${ref}' \u2014 expected ${REF_HINT}`);
         process.exit(1);
       }
       const spinner6 = p5.spinner();
       spinner6.start(`Installing ${ref}`);
       try {
-        const { openCatalogSource: openCatalogSource2, openLibrary: openLibrary2 } = await import('../open-library-67FSSQWE.js');
+        const { openCatalogSource: openCatalogSource2, openLibrary: openLibrary2 } = await import('../open-library-GW7DWWNZ.js');
         const catalog = await openCatalogSource2({ projectDir: path14__default.resolve(opts.projectDir) });
         if (!supportsInstallManifest(catalog)) {
           throw new Error(
@@ -3970,7 +3978,7 @@ function makeInstallCommand() {
     }
     const projectDir = path14__default.resolve(opts.projectDir);
     try {
-      const { ensureSourcesCloned } = await import('../ensure-sources-OJUBGX6Z.js');
+      const { ensureSourcesCloned } = await import('../ensure-sources-7MOOKY3K.js');
       const hydrate = ensureSourcesCloned(projectDir, { quiet: true });
       if (hydrate.cloned.length > 0) {
         logOk(`Cloned source(s): ${hydrate.cloned.join(", ")}`);
@@ -4428,7 +4436,7 @@ async function ensurePluginsLoadedForServe(projectDir) {
     const { resolveSkWorkspaceConfig: resolveSkWorkspaceConfig2 } = await import('../core/index.js');
     const config = resolveSkWorkspaceConfig2(projectDir);
     if (!config.plugins || config.plugins.length === 0) return;
-    const { ensurePluginsLoaded } = await import('../plugin-store-IZ5SCRAV.js');
+    const { ensurePluginsLoaded } = await import('../plugin-store-R32NH7JE.js');
     const { pluginRegistry } = await import('../plugin-registry/index.js');
     const result = await ensurePluginsLoaded(projectDir, config.plugins, pluginRegistry);
     if (result.loaded.length > 0) {
@@ -5755,6 +5763,25 @@ function parseMdFrontmatter(content) {
   if (!fmMatch) return null;
   return parse(fmMatch[1]);
 }
+function checkManifestIdentity(kind, parsed) {
+  if (parsed === null || typeof parsed !== "object") return null;
+  const obj = parsed;
+  const identity = kind === "flow" ? obj.id : obj.name;
+  if (typeof identity !== "string" || identity.length === 0) return null;
+  const publisher = typeof obj.publisher === "string" ? obj.publisher : void 0;
+  if (publisher !== void 0) {
+    try {
+      parseAssetRef(`${kind}:@${publisher}/${identity}`);
+      return null;
+    } catch (e) {
+      return e instanceof Error ? e.message : String(e);
+    }
+  }
+  if (!isValidAssetName(identity)) {
+    return `invalid asset ${kind === "flow" ? "id" : "name"} "${identity}" \u2014 ${ASSET_NAME_HINT}`;
+  }
+  return null;
+}
 function validateManifests(rootPath) {
   const absRoot = path14__default.resolve(rootPath);
   if (!fs10__default.existsSync(absRoot)) {
@@ -5783,8 +5810,13 @@ function validateManifests(rootPath) {
         continue;
       }
     }
-    const provider = registry.getProvider(c.kind);
     const relPath = path14__default.relative(absRoot, c.filePath);
+    const identityError = checkManifestIdentity(c.kind, parsed);
+    if (identityError) {
+      logErr(`${relPath} [${c.kind}] \u2014 ${identityError}`);
+      errors++;
+    }
+    const provider = registry.getProvider(c.kind);
     if (!provider) {
       logWarn(`${relPath} [${c.kind}] \u2014 kind "${c.kind}" is not registered, skipping validation`);
       warnings++;
@@ -5800,6 +5832,85 @@ function validateManifests(rootPath) {
   }
   return { total: candidates.length, errors, warnings };
 }
+function findWorkspaceManifests(rootPath) {
+  const out = [];
+  function walk(dir) {
+    let entries;
+    try {
+      entries = fs10__default.readdirSync(dir, { withFileTypes: true });
+    } catch {
+      return;
+    }
+    for (const entry of entries) {
+      const full = path14__default.join(dir, entry.name);
+      if (entry.isDirectory()) {
+        if (!SKIP_DIRS.has(entry.name)) walk(full);
+      } else if (entry.isFile() && /(^|\.)skaile\.yaml$/.test(entry.name)) {
+        out.push(full);
+      }
+    }
+  }
+  walk(rootPath);
+  return out;
+}
+function validateWorkspaceManifests(rootPath) {
+  const absRoot = path14__default.resolve(rootPath);
+  const files = findWorkspaceManifests(absRoot);
+  let errors = 0;
+  for (const file of files) {
+    const relPath = path14__default.relative(absRoot, file);
+    let parsed;
+    try {
+      parsed = parse(fs10__default.readFileSync(file, "utf-8")) ?? {};
+    } catch (e) {
+      logErr(`${relPath} \u2014 parse error: ${e instanceof Error ? e.message : String(e)}`);
+      errors++;
+      continue;
+    }
+    const refFields = [];
+    if (Array.isArray(parsed.dependencies)) {
+      for (const d of parsed.dependencies) {
+        if (typeof d === "string") refFields.push(["dependencies", d]);
+      }
+    }
+    if (Array.isArray(parsed.overrides)) {
+      for (const o of parsed.overrides) {
+        const ref = o?.ref;
+        if (typeof ref === "string") refFields.push(["overrides.ref", ref]);
+      }
+    }
+    for (const [field, ref] of refFields) {
+      try {
+        parseAssetRef(ref);
+      } catch (e) {
+        logErr(`${relPath} [${field}] \u2014 ${e instanceof Error ? e.message : String(e)}`);
+        errors++;
+      }
+    }
+    if (Array.isArray(parsed.assets)) {
+      const topPublisher = typeof parsed.publisher === "string" ? parsed.publisher : void 0;
+      for (const a of parsed.assets) {
+        const asset = a;
+        const name = asset?.name;
+        const kind = typeof asset?.kind === "string" ? asset.kind : "skill";
+        if (typeof name !== "string" || name.length === 0) continue;
+        const publisher = typeof asset?.publisher === "string" ? asset.publisher : topPublisher;
+        if (publisher !== void 0) {
+          try {
+            parseAssetRef(`${kind}:@${publisher}/${name}`);
+          } catch (e) {
+            logErr(`${relPath} [assets] \u2014 ${e instanceof Error ? e.message : String(e)}`);
+            errors++;
+          }
+        } else if (!isValidAssetName(name)) {
+          logErr(`${relPath} [assets] \u2014 invalid asset name "${name}" \u2014 ${ASSET_NAME_HINT}`);
+          errors++;
+        }
+      }
+    }
+  }
+  return { total: files.length, errors };
+}
 var EXCLUDED_DOMAINS = /* @__PURE__ */ new Set(["skaileup-shared", "external", "docs"]);
 function collectAssetVersions() {
   const assets = [];
@@ -5907,12 +6018,14 @@ function makeValidateCommand() {
     const absPath = path14__default.resolve(targetPath);
     logInfo(`Validating manifests in ${absPath}`);
     const { total, errors } = validateManifests(absPath);
+    const ws = validateWorkspaceManifests(absPath);
+    const totalErrors = errors + ws.errors;
     console.log();
-    logInfo(`Scanned ${total} manifest files`);
-    if (errors === 0) {
+    logInfo(`Scanned ${total} asset manifest(s) and ${ws.total} skaile.yaml file(s)`);
+    if (totalErrors === 0) {
       logOk("All manifests valid");
     } else {
-      logErr(`${errors} validation error(s)`);
+      logErr(`${totalErrors} validation error(s)`);
       process.exit(1);
     }
   });
@@ -6198,6 +6311,7 @@ Execution:
   clear                        Unset current session
 
 Validation:
+  validate [path]              Check manifest schemas + canonical asset names/refs
   validate versions            Check asset version fields and flow pins
   validate changelog           Check changelogs for modified domains
 
@@ -6337,7 +6451,7 @@ program.command("init [project-dir]").description("Initialize a project director
     );
   }
   try {
-    const { ensureSourcesCloned } = await import('../ensure-sources-OJUBGX6Z.js');
+    const { ensureSourcesCloned } = await import('../ensure-sources-7MOOKY3K.js');
     const hydrate = ensureSourcesCloned(resolved, { quiet: true });
     for (const n of hydrate.cloned) created.push(`~/.skaile/sources/${n}/`);
     if (hydrate.failed.length > 0) {
@@ -6363,7 +6477,7 @@ program.command("init [project-dir]").description("Initialize a project director
   console.log();
 });
 program.command("setup").description("Interactive provider setup wizard").action(async () => {
-  const { cmdSetup } = await import('../setup-J7CYEQOF.js');
+  const { cmdSetup } = await import('../setup-SRPBQOHY.js');
   await cmdSetup([], { projectDir: process.cwd() });
 });
 program.addCommand(makeInstallCommand());