@skaile/workspaces 0.25.0 → 0.26.0

package/dist/chunk-IERB3UXJ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../core/src/publish-manifest.ts"],"names":[],"mappings":";;;;;AAmJO,IAAM,wBAAA,GAA2B;AAIxC,SAAS,YAAY,GAAA,EAA0C;AAC7D,EAAA,IAAI,CAAC,OAAO,OAAO,GAAA,KAAQ,YAAY,KAAA,CAAM,OAAA,CAAQ,GAAG,CAAA,EAAG,OAAO,MAAA;AAClE,EAAA,MAAM,CAAA,GAAI,GAAA;AACV,EAAA,IAAI,OAAO,EAAE,GAAA,KAAQ,QAAA,IAAY,EAAE,GAAA,CAAI,MAAA,KAAW,GAAG,OAAO,MAAA;AAC5D,EAAA,MAAM,GAAA,GAAsB,EAAE,GAAA,EAAK,CAAA,CAAE,GAAA,EAAI;AACzC,EAAA,IAAI,OAAO,CAAA,CAAE,MAAA,KAAW,QAAA,IAAY,CAAA,CAAE,OAAO,MAAA,GAAS,CAAA,EAAG,GAAA,CAAI,MAAA,GAAS,CAAA,CAAE,MAAA;AACxE,EAAA,OAAO,GAAA;AACT;AAEA,SAAS,gBAAgB,GAAA,EAA8C;AACrE,EAAA,IAAI,CAAC,OAAO,OAAO,GAAA,KAAQ,YAAY,KAAA,CAAM,OAAA,CAAQ,GAAG,CAAA,EAAG,OAAO,MAAA;AAClE,EAAA,MAAM,CAAA,GAAI,GAAA;AACV,EAAA,IAAI,OAAO,EAAE,OAAA,KAAY,QAAA,IAAY,EAAE,OAAA,CAAQ,MAAA,KAAW,GAAG,OAAO,MAAA;AACpE,EAAA,MAAM,GAAA,GAA0B,EAAE,OAAA,EAAS,CAAA,CAAE,OAAA,EAAQ;AACrD,EAAA,IAAI,OAAO,CAAA,CAAE,SAAA,KAAc,QAAA,IAAY,CAAA,CAAE,UAAU,MAAA,GAAS,CAAA,EAAG,GAAA,CAAI,SAAA,GAAY,CAAA,CAAE,SAAA;AACjF,EAAA,OAAO,GAAA;AACT;AAGA,SAAS,WAAW,GAAA,EAA0D;AAC5E,EAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,GAAG,GAAG,OAAO,MAAA;AAChC,EAAA,MAAM,UAAoB,EAAC;AAC3B,EAAA,MAAM,WAAgC,EAAC;AACvC,EAAA,KAAA,MAAW,QAAQ,GAAA,EAAK;AACtB,IAAA,IAAI,OAAO,SAAS,QAAA,EAAU;AAC5B,MAAA,OAAA,CAAQ,KAAK,IAAI,CAAA;AAAA,IACnB,CAAA,MAAA,IAAW,QAAQ,OAAO,IAAA,KAAS,YAAY,CAAC,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,EAAG;AACnE,MAAA,MAAM,CAAA,GAAI,IAAA;AACV,MAAA,IAAI,OAAO,CAAA,CAAE,IAAA,KAAS,YAAY,OAAO,CAAA,CAAE,WAAW,QAAA,EAAU;AAC9D,QAAA,QAAA,CAAS,IAAA,CAAK,EAAE,IAAA,EAAM,CAAA,CAAE,MAAM,MAAA,EAAQ,CAAA,CAAE,QAAQ,CAAA;AAAA,MAClD;AAAA,IACF;AAAA,EACF;AAGA,EAAA,IAAI,QAAA,CAAS,MAAA,GAAS,CAAA,EAAG,OAAO,QAAA;AAChC,EAAA,IAAI,OAAA,CAAQ,MAAA,GAAS,CAAA,EAAG,OAAO,OAAA;AAC/B,EAAA,OAAO,MAAA;AACT;AAYO,SAAS,qBAAqB,IAAA,EAAoC;AACvE,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,KAAA,CAAM,IAAI,CAAA,IAAK,EAAC;AAAA,EAC3B,SAAS,GAAA,EAAK;AACZ,IAAA,OAAO;AAAA,MACL,UAAU,EAAC;AAAA,MACX,WAAA,EAAa;AAAA,QACX;AAAA,UACE,IAAA,EAAM,aAAA;AAAA,UACN,QAAA,EAAU,OAAA;AAAA,UACV,OAAA,EAAS,iBAAiB,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA;AAC5E;AACF,KACF;AAAA,EACF;AACA,EAAA,IAAI,OAAO,WAAW,QAAA,IAAY,MAAA,KAAW,QAAQ,KAAA,CAAM,OAAA,CAAQ,MAAM,CAAA,EAAG;AAC1E,IAAA,OAAO;AAAA,MACL,UAAU,EAAC;AAAA,MACX,WAAA,EAAa;AAAA,QACX;AAAA,UACE,IAAA,EAAM,iBAAA;AAAA,UACN,QAAA,EAAU,OAAA;AAAA,UACV,OAAA,EAAS;AAAA;AACX;AACF,KACF;AAAA,EACF;AAEA,EAAA,MAAM,GAAA,GAAM,MAAA;AACZ,EAAA,MAAM,WAA8B,EAAC;AACrC,EAAA,MAAM,cAA4B,EAAC;AAEnC,EAAA,IAAI,OAAO,GAAA,CAAI,SAAA,KAAc,YAAY,GAAA,CAAI,SAAA,CAAU,SAAS,CAAA,EAAG;AACjE,IAAA,QAAA,CAAS,YAAY,GAAA,CAAI,SAAA;AAAA,EAC3B;AACA,EAAA,IAAI,OAAO,GAAA,CAAI,OAAA,KAAY,YAAY,GAAA,CAAI,OAAA,CAAQ,SAAS,CAAA,EAAG;AAC7D,IAAA,QAAA,CAAS,UAAU,GAAA,CAAI,OAAA;AAAA,EACzB;AACA,EAAA,IAAI,OAAO,GAAA,CAAI,OAAA,KAAY,YAAY,GAAA,CAAI,OAAA,CAAQ,SAAS,CAAA,EAAG;AAC7D,IAAA,QAAA,CAAS,UAAU,GAAA,CAAI,OAAA;AAAA,EACzB;AACA,EAAA,IAAI,OAAO,GAAA,CAAI,QAAA,KAAa,YAAY,GAAA,CAAI,QAAA,CAAS,SAAS,CAAA,EAAG;AAC/D,IAAA,QAAA,CAAS,WAAW,GAAA,CAAI,QAAA;AAAA,EAC1B;AACA,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,GAAA,CAAI,SAAS,CAAA,EAAG;AAChC,IAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,SAAA,CAAU,MAAA,CAAO,CAAC,CAAA,KAAmB,OAAO,CAAA,KAAM,QAAA,IAAY,CAAA,CAAE,MAAA,GAAS,CAAC,CAAA;AAC5F,IAAA,IAAI,KAAA,CAAM,MAAA,GAAS,CAAA,EAAG,QAAA,CAAS,SAAA,GAAY,KAAA;AAAA,EAC7C;AACA,EAAA,MAAM,MAAA,GAAS,WAAA,CAAY,GAAA,CAAI,MAAM,CAAA;AACrC,EAAA,IAAI,MAAA,WAAiB,MAAA,GAAS,MAAA;AAC9B,EAAA,MAAM,UAAA,GAAa,eAAA,CAAgB,GAAA,CAAI,UAAU,CAAA;AACjD,EAAA,IAAI,UAAA,WAAqB,UAAA,GAAa,UAAA;AAEtC,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,GAAA,CAAI,MAAM,CAAA,EAAG;AAC7B,IAAA,MAAM,UAAwB,EAAC;AAC/B,IAAA,KAAA,MAAW,IAAA,IAAQ,IAAI,MAAA,EAAQ;AAC7B,MAAA,IAAI,CAAC,QAAQ,OAAO,IAAA,KAAS,YAAY,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,EAAG;AAC9D,MAAA,MAAM,CAAA,GAAI,IAAA;AACV,MAAA,MAAM,OAAO,OAAO,CAAA,CAAE,IAAA,KAAS,QAAA,GAAW,EAAE,IAAA,GAAO,EAAA;AACnD,MAAA,MAAM,OAAO,OAAO,CAAA,CAAE,IAAA,KAAS,QAAA,GAAW,EAAE,IAAA,GAAO,EAAA;AACnD,MAAA,IAAI,CAAC,IAAA,IAAQ,CAAC,IAAA,EAAM;AACpB,MAAA,MAAM,KAAA,GAAoB,EAAE,IAAA,EAAM,IAAA,EAAK;AACvC,MAAA,IAAI,OAAO,CAAA,CAAE,IAAA,KAAS,QAAA,EAAU,KAAA,CAAM,OAAO,CAAA,CAAE,IAAA;AAC/C,MAAA,MAAM,KAAA,GAAQ,UAAA,CAAW,CAAA,CAAE,KAAK,CAAA;AAChC,MAAA,IAAI,KAAA,QAAa,KAAA,GAAQ,KAAA;AACzB,MAAA,IAAI,OAAO,CAAA,CAAE,OAAA,KAAY,QAAA,EAAU,KAAA,CAAM,UAAU,CAAA,CAAE,OAAA;AACrD,MAAA,IAAI,OAAO,CAAA,CAAE,SAAA,KAAc,QAAA,EAAU,KAAA,CAAM,YAAY,CAAA,CAAE,SAAA;AACzD,MAAA,IAAI,OAAO,CAAA,CAAE,MAAA,KAAW,QAAA,EAAU,KAAA,CAAM,SAAS,CAAA,CAAE,MAAA;AACnD,MAAA,MAAM,WAAA,GAAc,WAAA,CAAY,CAAA,CAAE,MAAM,CAAA;AACxC,MAAA,IAAI,WAAA,QAAmB,MAAA,GAAS,WAAA;AAEhC,MAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,CAAA,CAAE,YAAY,CAAA,EAAG;AACjC,QAAA,MAAM,OAAiB,EAAC;AACxB,QAAA,KAAA,MAAW,GAAA,IAAO,EAAE,YAAA,EAAc;AAChC,UAAA,IAAI,OAAO,QAAQ,QAAA,EAAU;AAC7B,UAAA,IAAI;AACF,YAAA,aAAA,CAAc,GAAG,CAAA;AACjB,YAAA,IAAA,CAAK,KAAK,GAAG,CAAA;AAAA,UACf,SAAS,GAAA,EAAK;AACZ,YAAA,WAAA,CAAY,IAAA,CAAK;AAAA,cACf,IAAA,EAAM,sBAAA;AAAA,cACN,QAAA,EAAU,SAAA;AAAA,cACV,OAAA,EAAS,CAAA,OAAA,EAAU,IAAI,CAAA,CAAA,EAAI,IAAI,CAAA,gBAAA,EAC7B,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CACjD,CAAA,CAAA;AAAA,cACA,IAAA,EAAM,CAAA,OAAA,EAAU,IAAI,CAAA,CAAA,EAAI,IAAI,CAAA,aAAA;AAAA,aAC7B,CAAA;AAAA,UACH;AAAA,QACF;AACA,QAAA,IAAI,IAAA,CAAK,MAAA,GAAS,CAAA,EAAG,KAAA,CAAM,YAAA,GAAe,IAAA;AAAA,MAC5C;AAEA,MAAA,IAAI,OAAO,CAAA,CAAE,WAAA,KAAgB,QAAA,EAAU,KAAA,CAAM,cAAc,CAAA,CAAE,WAAA;AAC7D,MAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,CAAA,CAAE,QAAQ,CAAA,EAAG;AAC7B,QAAA,MAAM,EAAA,GAAK,EAAE,QAAA,CAAS,MAAA,CAAO,CAAC,CAAA,KAAmB,OAAO,MAAM,QAAQ,CAAA;AACtE,QAAA,IAAI,EAAA,CAAG,MAAA,GAAS,CAAA,EAAG,KAAA,CAAM,QAAA,GAAW,EAAA;AAAA,MACtC;AACA,MAAA,IAAI,OAAO,CAAA,CAAE,QAAA,KAAa,QAAA,EAAU,KAAA,CAAM,WAAW,CAAA,CAAE,QAAA;AACvD,MAAA,IAAI,OAAO,CAAA,CAAE,OAAA,KAAY,QAAA,EAAU,KAAA,CAAM,UAAU,CAAA,CAAE,OAAA;AACrD,MAAA,IAAI,OAAO,CAAA,CAAE,QAAA,KAAa,QAAA,EAAU,KAAA,CAAM,WAAW,CAAA,CAAE,QAAA;AAEvD,MAAA,OAAA,CAAQ,KAAK,KAAK,CAAA;AAAA,IACpB;AACA,IAAA,IAAI,OAAA,CAAQ,MAAA,GAAS,CAAA,EAAG,QAAA,CAAS,MAAA,GAAS,OAAA;AAAA,EAC5C;AAEA,EAAA,OAAO,EAAE,UAAU,WAAA,EAAY;AACjC;AAKA,IAAM,kBAAA,GAAkD;AAAA,EACtD,WAAA;AAAA,EACA,SAAA;AAAA,EACA,SAAA;AAAA,EACA,UAAA;AAAA,EACA,WAAA;AAAA,EACA,QAAA;AAAA,EACA,YAAA;AAAA,EACA;AACF,CAAA;AAGA,IAAM,eAAA,GAAwC;AAAA,EAC5C,MAAA;AAAA,EACA,MAAA;AAAA,EACA,QAAA;AAAA,EACA,MAAA;AAAA,EACA,OAAA;AAAA,EACA,SAAA;AAAA,EACA,WAAA;AAAA,EACA,QAAA;AAAA,EACA,cAAA;AAAA,EACA,aAAA;AAAA,EACA,UAAA;AAAA,EACA,UAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF,CAAA;AAEA,SAAS,aAAa,CAAA,EAAwC;AAC5D,EAAA,MAAM,MAA+B,EAAC;AACtC,EAAA,KAAA,MAAW,OAAO,eAAA,EAAiB;AACjC,IAAA,MAAM,KAAA,GAAQ,EAAE,GAAG,CAAA;AACnB,IAAA,IAAI,KAAA,KAAU,MAAA,EAAW,GAAA,CAAI,GAAG,CAAA,GAAI,KAAA;AAAA,EACtC;AACA,EAAA,OAAO,GAAA;AACT;AAQO,SAAS,qBAAqB,QAAA,EAAqC;AACxE,EAAA,MAAM,MAA+B,EAAC;AACtC,EAAA,KAAA,MAAW,OAAO,kBAAA,EAAoB;AACpC,IAAA,MAAM,KAAA,GAAQ,SAAS,GAAG,CAAA;AAC1B,IAAA,IAAI,UAAU,MAAA,EAAW;AACzB,IAAA,IAAI,GAAA,KAAQ,QAAA,IAAY,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG;AAC5C,MAAA,GAAA,CAAI,MAAA,GAAU,KAAA,CAAuB,GAAA,CAAI,YAAY,CAAA;AAAA,IACvD,CAAA,MAAO;AACL,MAAA,GAAA,CAAI,GAAG,CAAA,GAAI,KAAA;AAAA,IACb;AAAA,EACF;AACA,EAAA,OAAO,SAAA,CAAU,GAAA,EAAK,EAAE,SAAA,EAAW,KAAK,CAAA;AAC1C;AASO,SAAS,sBAAsB,GAAA,EAAuC;AAC3E,EAAA,MAAM,QAAA,GAAW,IAAA,CAAK,OAAA,CAAQ,GAAG,GAAG,wBAAwB,CAAA;AAC5D,EAAA,IAAI,CAAC,UAAA,CAAW,QAAQ,CAAA,EAAG,OAAO,IAAA;AAClC,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAM,YAAA,CAAa,UAAU,OAAO,CAAA;AAAA,EACtC,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,EAAE,QAAA,EAAU,WAAA,EAAY,GAAI,qBAAqB,GAAG,CAAA;AAC1D,EAAA,IAAI,WAAA,CAAY,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,SAAS,aAAA,IAAiB,CAAA,CAAE,IAAA,KAAS,iBAAiB,CAAA,EAAG;AACrF,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,OAAO,QAAA;AACT;AAOO,SAAS,qBAAA,CAAsB,KAAa,QAAA,EAAqC;AACtF,EAAA,MAAM,WAAA,GAAc,QAAQ,GAAG,CAAA;AAC/B,EAAA,MAAM,QAAA,GAAW,IAAA,CAAK,WAAA,EAAa,wBAAwB,CAAA;AAC3D,EAAA,IAAI,CAAC,UAAA,CAAW,WAAW,CAAA,EAAG;AAC5B,IAAA,SAAA,CAAU,WAAA,EAAa,EAAE,SAAA,EAAW,IAAA,EAAM,CAAA;AAAA,EAC5C;AACA,EAAA,aAAA,CAAc,QAAA,EAAU,oBAAA,CAAqB,QAAQ,CAAC,CAAA;AACtD,EAAA,OAAO,QAAA;AACT","file":"chunk-IERB3UXJ.js","sourcesContent":["/**\n * Publish manifest — `skaile.manifest.yaml`\n *\n * What a repo PUBLISHES: the `publisher` / `version` / `assets[]` that used to\n * live in the publication half of `skaile.yaml`, plus a per-asset dependency\n * graph, store-listing metadata, and an optional curator `source:` pointer.\n *\n * ── Two files, two codecs ──────────────────────────────────────────────────\n *\n *   skaile.yaml             → SkWorkspaceConfig   (workspace + consumption)\n *   skaile.manifest.yaml    → SkPublishManifest   (publication)            ← this module\n *\n * A repo can have either file, both, or neither: a pure workspace has only\n * `skaile.yaml`; a pure asset repo (e.g. `ai-assets`) has only\n * `skaile.manifest.yaml`; a repo that is both has both.\n *\n * ── One format, three roles ────────────────────────────────────────────────\n *\n *   First-party    `source:` absent  → bytes live in this repo (`root`/`files`).\n *   Curator/sidecar `source:` present → bytes come from the referenced upstream,\n *                                       verified by `sha256`.\n *\n * `decodeSkaileManifest` mirrors `decodeSkaileYaml`: total (never throws),\n * returns {@link Diagnostic}s. Dep-ref strings are validated with `parseAssetRef`.\n */\n\nimport { existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { join, resolve } from \"node:path\";\nimport { parse, stringify } from \"yaml\";\nimport { parseAssetRef } from \"./models.js\";\nimport type { Diagnostic } from \"./workspace-config.js\";\n\n// ── Types ───────────────────────────────────────────────────────────────────\n\n/** One file inside a curated asset, pinned to an exact upstream blob hash. */\nexport interface ManifestFileEntry {\n  path: string;\n  /** 64-hex sha256 of the upstream blob. */\n  sha256: string;\n}\n\n/**\n * One entry in a manifest's `assets:` list. Either `root:` (recursive walk) or\n * `files:` (explicit list, supports globs for first-party; the granular\n * `{path, sha256}` form for curated upstream verification) declares which paths\n * constitute the asset. `version:` overrides the manifest-level version.\n *\n * @docLink packages/core/publish-manifest#asset-entry\n */\nexport interface AssetEntry {\n  kind: string;\n  name: string;\n  root?: string;\n  /**\n   * Explicit file listing. First-party manifests use bare `string[]` (globs,\n   * fast-glob). Curated entries may use the granular `{path, sha256}` form so\n   * the resolver fetches + verifies exact upstream blobs without a full clone.\n   */\n  files?: string[] | ManifestFileEntry[];\n  version?: string;\n  /** Per-asset publisher override (e.g. for curator/mirror repos). */\n  publisher?: string;\n\n  /**\n   * Canonical dep refs (`kind:@<publisher>/name[#version]`) — same grammar as\n   * `SkWorkspaceConfig.dependencies`. Authoritative for this asset's resolved\n   * deps. (Was `requires` in `.skaile-source.yaml`.)\n   */\n  dependencies?: string[];\n\n  /**\n   * Author-pinned composite sha256 over the asset's `files`/`root` (same\n   * deterministic algorithm as the walker + discovery). Optional locally;\n   * REQUIRED on store publish. (Was `.skaile-source.yaml` `assets[].sha256`.)\n   */\n  sha256?: string;\n\n  /**\n   * Curator override: this single asset's bytes come from a different upstream\n   * than the manifest-level `source`. Absent → inherit manifest `source` (or\n   * first-party when that is also absent).\n   */\n  source?: ManifestSource;\n\n  // ── Store-listing metadata (all optional; fall back to content frontmatter) ──\n  description?: string;\n  keywords?: string[];\n  category?: string;\n  license?: string;\n  homepage?: string;\n}\n\n/**\n * Upstream the bytes come from when a manifest curates a repo it does not own.\n * Absent → first-party (bytes live in the manifest's own repo).\n *\n * @docLink packages/core/publish-manifest#manifest-source\n */\nexport interface ManifestSource {\n  url: string;\n  /** 40-char commit the curated bytes are pinned to. */\n  commit?: string;\n}\n\n/**\n * Signing/attribution recorded when a manifest is published on behalf of others.\n *\n * @docLink packages/core/publish-manifest#manifest-provenance\n */\nexport interface ManifestProvenance {\n  curator: string;\n  signed_by?: string;\n}\n\n/**\n * Parsed `skaile.manifest.yaml` — what a repo publishes.\n *\n * @docLink packages/core/publish-manifest#sk-publish-manifest\n */\nexport interface SkPublishManifest {\n  publisher?: string;\n  version?: string;\n  /** Repo-level store defaults inherited by assets unless overridden per-entry. */\n  license?: string;\n  homepage?: string;\n  /**\n   * Repo-relative path prefixes holding dev-only assets — excluded from\n   * discovery/publish unless `--dev`. (Was `.skaile-source.yaml` `dev_paths`.)\n   */\n  dev_paths?: string[];\n  /**\n   * Curator mode: the single upstream all assets in this file come from. A\n   * per-asset `source` overrides it. Absent → first-party (own repo).\n   */\n  source?: ManifestSource;\n  /** Present when this manifest is curated/published on behalf of another author. */\n  provenance?: ManifestProvenance;\n  assets?: AssetEntry[];\n}\n\n/** Result of {@link decodeSkaileManifest}: the manifest plus any notes. */\nexport interface ManifestDecodeResult {\n  manifest: SkPublishManifest;\n  diagnostics: Diagnostic[];\n}\n\n/** The single fixed filename for a publish manifest. */\nexport const SKAILE_MANIFEST_FILENAME = \"skaile.manifest.yaml\";\n\n// ── Decode ──────────────────────────────────────────────────────────────────\n\nfunction parseSource(raw: unknown): ManifestSource | undefined {\n  if (!raw || typeof raw !== \"object\" || Array.isArray(raw)) return undefined;\n  const s = raw as Record<string, unknown>;\n  if (typeof s.url !== \"string\" || s.url.length === 0) return undefined;\n  const out: ManifestSource = { url: s.url };\n  if (typeof s.commit === \"string\" && s.commit.length > 0) out.commit = s.commit;\n  return out;\n}\n\nfunction parseProvenance(raw: unknown): ManifestProvenance | undefined {\n  if (!raw || typeof raw !== \"object\" || Array.isArray(raw)) return undefined;\n  const p = raw as Record<string, unknown>;\n  if (typeof p.curator !== \"string\" || p.curator.length === 0) return undefined;\n  const out: ManifestProvenance = { curator: p.curator };\n  if (typeof p.signed_by === \"string\" && p.signed_by.length > 0) out.signed_by = p.signed_by;\n  return out;\n}\n\n/** Parse `files:` as either `string[]` (globs) or `{path, sha256}[]` (granular). */\nfunction parseFiles(raw: unknown): string[] | ManifestFileEntry[] | undefined {\n  if (!Array.isArray(raw)) return undefined;\n  const strings: string[] = [];\n  const granular: ManifestFileEntry[] = [];\n  for (const item of raw) {\n    if (typeof item === \"string\") {\n      strings.push(item);\n    } else if (item && typeof item === \"object\" && !Array.isArray(item)) {\n      const f = item as Record<string, unknown>;\n      if (typeof f.path === \"string\" && typeof f.sha256 === \"string\") {\n        granular.push({ path: f.path, sha256: f.sha256 });\n      }\n    }\n  }\n  // A manifest uses one form per entry; if both somehow appear, granular wins\n  // (it is the verifiable form). Empty → undefined.\n  if (granular.length > 0) return granular;\n  if (strings.length > 0) return strings;\n  return undefined;\n}\n\n/**\n * Decode `skaile.manifest.yaml` text into a {@link SkPublishManifest} plus\n * {@link Diagnostic}s. Total — never throws: a YAML syntax error or non-object\n * root is reported as an `error`-severity diagnostic with an empty manifest.\n * Malformed `assets[].dependencies` refs are reported as `warning`s (validated\n * via `parseAssetRef`) rather than silently dropped.\n *\n * Pair with {@link encodeSkaileManifest} for round-tripping.\n * @docLink packages/core/publish-manifest#decode-skaile-manifest\n */\nexport function decodeSkaileManifest(text: string): ManifestDecodeResult {\n  let parsed: unknown;\n  try {\n    parsed = parse(text) ?? {};\n  } catch (err) {\n    return {\n      manifest: {},\n      diagnostics: [\n        {\n          code: \"yaml_syntax\",\n          severity: \"error\",\n          message: `Invalid YAML: ${err instanceof Error ? err.message : String(err)}`,\n        },\n      ],\n    };\n  }\n  if (typeof parsed !== \"object\" || parsed === null || Array.isArray(parsed)) {\n    return {\n      manifest: {},\n      diagnostics: [\n        {\n          code: \"non_object_root\",\n          severity: \"error\",\n          message: \"skaile.manifest.yaml must be a mapping at the top level.\",\n        },\n      ],\n    };\n  }\n\n  const raw = parsed as Record<string, unknown>;\n  const manifest: SkPublishManifest = {};\n  const diagnostics: Diagnostic[] = [];\n\n  if (typeof raw.publisher === \"string\" && raw.publisher.length > 0) {\n    manifest.publisher = raw.publisher;\n  }\n  if (typeof raw.version === \"string\" && raw.version.length > 0) {\n    manifest.version = raw.version;\n  }\n  if (typeof raw.license === \"string\" && raw.license.length > 0) {\n    manifest.license = raw.license;\n  }\n  if (typeof raw.homepage === \"string\" && raw.homepage.length > 0) {\n    manifest.homepage = raw.homepage;\n  }\n  if (Array.isArray(raw.dev_paths)) {\n    const paths = raw.dev_paths.filter((p): p is string => typeof p === \"string\" && p.length > 0);\n    if (paths.length > 0) manifest.dev_paths = paths;\n  }\n  const source = parseSource(raw.source);\n  if (source) manifest.source = source;\n  const provenance = parseProvenance(raw.provenance);\n  if (provenance) manifest.provenance = provenance;\n\n  if (Array.isArray(raw.assets)) {\n    const entries: AssetEntry[] = [];\n    for (const item of raw.assets) {\n      if (!item || typeof item !== \"object\" || Array.isArray(item)) continue;\n      const a = item as Record<string, unknown>;\n      const kind = typeof a.kind === \"string\" ? a.kind : \"\";\n      const name = typeof a.name === \"string\" ? a.name : \"\";\n      if (!kind || !name) continue;\n      const entry: AssetEntry = { kind, name };\n      if (typeof a.root === \"string\") entry.root = a.root;\n      const files = parseFiles(a.files);\n      if (files) entry.files = files;\n      if (typeof a.version === \"string\") entry.version = a.version;\n      if (typeof a.publisher === \"string\") entry.publisher = a.publisher;\n      if (typeof a.sha256 === \"string\") entry.sha256 = a.sha256;\n      const assetSource = parseSource(a.source);\n      if (assetSource) entry.source = assetSource;\n\n      if (Array.isArray(a.dependencies)) {\n        const deps: string[] = [];\n        for (const dep of a.dependencies) {\n          if (typeof dep !== \"string\") continue;\n          try {\n            parseAssetRef(dep);\n            deps.push(dep);\n          } catch (err) {\n            diagnostics.push({\n              code: \"malformed_dependency\",\n              severity: \"warning\",\n              message: `assets[${kind}:${name}].dependencies: ${\n                err instanceof Error ? err.message : String(err)\n              }`,\n              path: `assets.${kind}:${name}.dependencies`,\n            });\n          }\n        }\n        if (deps.length > 0) entry.dependencies = deps;\n      }\n\n      if (typeof a.description === \"string\") entry.description = a.description;\n      if (Array.isArray(a.keywords)) {\n        const kw = a.keywords.filter((k): k is string => typeof k === \"string\");\n        if (kw.length > 0) entry.keywords = kw;\n      }\n      if (typeof a.category === \"string\") entry.category = a.category;\n      if (typeof a.license === \"string\") entry.license = a.license;\n      if (typeof a.homepage === \"string\") entry.homepage = a.homepage;\n\n      entries.push(entry);\n    }\n    if (entries.length > 0) manifest.assets = entries;\n  }\n\n  return { manifest, diagnostics };\n}\n\n// ── Encode ──────────────────────────────────────────────────────────────────\n\n/** Fixed top-level key order for {@link encodeSkaileManifest}. */\nconst MANIFEST_KEY_ORDER: (keyof SkPublishManifest)[] = [\n  \"publisher\",\n  \"version\",\n  \"license\",\n  \"homepage\",\n  \"dev_paths\",\n  \"source\",\n  \"provenance\",\n  \"assets\",\n];\n\n/** Fixed per-asset key order for {@link encodeSkaileManifest}. */\nconst ASSET_KEY_ORDER: (keyof AssetEntry)[] = [\n  \"kind\",\n  \"name\",\n  \"source\",\n  \"root\",\n  \"files\",\n  \"version\",\n  \"publisher\",\n  \"sha256\",\n  \"dependencies\",\n  \"description\",\n  \"keywords\",\n  \"category\",\n  \"license\",\n  \"homepage\",\n];\n\nfunction orderedAsset(a: AssetEntry): Record<string, unknown> {\n  const out: Record<string, unknown> = {};\n  for (const key of ASSET_KEY_ORDER) {\n    const value = a[key];\n    if (value !== undefined) out[key] = value;\n  }\n  return out;\n}\n\n/**\n * Encode a {@link SkPublishManifest} to canonical `skaile.manifest.yaml` text:\n * deterministic key order, only defined fields, `lineWidth: 120` (mirrors\n * `encodeSkaileYaml`).\n * @docLink packages/core/publish-manifest#encode-skaile-manifest\n */\nexport function encodeSkaileManifest(manifest: SkPublishManifest): string {\n  const out: Record<string, unknown> = {};\n  for (const key of MANIFEST_KEY_ORDER) {\n    const value = manifest[key];\n    if (value === undefined) continue;\n    if (key === \"assets\" && Array.isArray(value)) {\n      out.assets = (value as AssetEntry[]).map(orderedAsset);\n    } else {\n      out[key] = value;\n    }\n  }\n  return stringify(out, { lineWidth: 120 });\n}\n\n// ── File I/O ──────────────────────────────────────────────────────────────────\n\n/**\n * Load and decode `<dir>/skaile.manifest.yaml`. Returns `null` when the file is\n * absent or unparseable (mirrors `loadSkWorkspaceConfig`'s tolerant contract).\n * @docLink packages/core/publish-manifest#load-sk-publish-manifest\n */\nexport function loadSkPublishManifest(dir: string): SkPublishManifest | null {\n  const filePath = join(resolve(dir), SKAILE_MANIFEST_FILENAME);\n  if (!existsSync(filePath)) return null;\n  let raw: string;\n  try {\n    raw = readFileSync(filePath, \"utf-8\");\n  } catch {\n    return null;\n  }\n  const { manifest, diagnostics } = decodeSkaileManifest(raw);\n  if (diagnostics.some((d) => d.code === \"yaml_syntax\" || d.code === \"non_object_root\")) {\n    return null;\n  }\n  return manifest;\n}\n\n/**\n * Encode and write a manifest to `<dir>/skaile.manifest.yaml`, creating the\n * directory if needed. Returns the absolute path written.\n * @docLink packages/core/publish-manifest#save-sk-publish-manifest\n */\nexport function saveSkPublishManifest(dir: string, manifest: SkPublishManifest): string {\n  const resolvedDir = resolve(dir);\n  const filePath = join(resolvedDir, SKAILE_MANIFEST_FILENAME);\n  if (!existsSync(resolvedDir)) {\n    mkdirSync(resolvedDir, { recursive: true });\n  }\n  writeFileSync(filePath, encodeSkaileManifest(manifest));\n  return filePath;\n}\n"]}

package/dist/{chunk-FVTV7M76.js → chunk-IFGTRL2I.js}

@@ -1,4 +1,4 @@
-// base-assets/connectors/flow/stimulus-driver.ts
+// factory-assets/connectors/flow/stimulus-driver.ts
 function computeStimulus(oldExec, newExec) {
   if (!oldExec) {
     return { kind: "state_changed" };
@@ -26,5 +26,5 @@ function snapshotsEqual(a, b) {
 }
 
 export { computeStimulus };
-//# sourceMappingURL=chunk-FVTV7M76.js.map
-//# sourceMappingURL=chunk-FVTV7M76.js.map
+//# sourceMappingURL=chunk-IFGTRL2I.js.map
+//# sourceMappingURL=chunk-IFGTRL2I.js.map

package/dist/chunk-IFGTRL2I.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../factory-assets/connectors/flow/stimulus-driver.ts"],"names":[],"mappings":";AA0CO,SAAS,eAAA,CACd,SACA,OAAA,EACqB;AAGrB,EAAA,IAAI,CAAC,OAAA,EAAS;AACZ,IAAA,OAAO,EAAE,MAAM,eAAA,EAAgB;AAAA,EACjC;AAIA,EAAA,IAAI,YAAY,OAAA,EAAS;AACvB,IAAA,OAAO,IAAA;AAAA,EACT;AAKA,EAAA,IAAI,cAAA,CAAe,OAAA,EAAS,OAAO,CAAA,EAAG;AACpC,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,OAAO,EAAE,MAAM,eAAA,EAAgB;AACjC;AASA,SAAS,cAAA,CAAe,GAAkB,CAAA,EAA2B;AACnE,EAAA,IAAI,CAAA,KAAM,GAAG,OAAO,IAAA;AAGpB,EAAA,IAAI,CAAA,CAAE,KAAA,KAAU,CAAA,CAAE,KAAA,EAAO,OAAO,KAAA;AAChC,EAAA,IAAI,CAAA,CAAE,MAAA,KAAW,CAAA,CAAE,MAAA,EAAQ,OAAO,KAAA;AAClC,EAAA,IAAI,CAAA,CAAE,MAAA,KAAW,CAAA,CAAE,MAAA,EAAQ,OAAO,KAAA;AAClC,EAAA,IAAI,CAAA,CAAE,IAAA,KAAS,CAAA,CAAE,IAAA,EAAM,OAAO,KAAA;AAC9B,EAAA,IAAI,CAAA,CAAE,cAAA,KAAmB,CAAA,CAAE,cAAA,EAAgB,OAAO,KAAA;AAElD,EAAA,IAAI;AACF,IAAA,OAAO,KAAK,SAAA,CAAU,CAAC,CAAA,KAAM,IAAA,CAAK,UAAU,CAAC,CAAA;AAAA,EAC/C,CAAA,CAAA,MAAQ;AAGN,IAAA,OAAO,KAAA;AAAA,EACT;AACF","file":"chunk-IFGTRL2I.js","sourcesContent":["/**\n * Pure state-change → stimulus translator for the flow connector.\n *\n * Given the previous and current {@link FlowExecution} snapshots, decides\n * whether the runner should be woken with a fresh turn and (if so) what\n * kind of stimulus to render. Returns `null` when no turn is warranted\n * (e.g. the snapshots are deep-equal).\n *\n * Today's FlowOrchestrator subscribes to `adapter.onStateChange(...)` and\n * forwards the snapshot to the host without kicking a turn — the host\n * issues explicit turn-kicking commands (`approve_flow_node`, etc.). Phase\n * 3 of the flow-connector extraction adds this function as the connector-\n * side decision point so a future direct path (FlowAdapter →\n * SessionStimulusBus → runner) can reproduce today's coalesced \"state\n * changed → maybe a turn\" semantics without going through the orchestrator.\n *\n * Default behaviour mirrors today exactly: any structural change in the\n * FlowExecution snapshot produces a single `{ kind: \"state_changed\" }`\n * stimulus. Phase 4 may refine this with kind discriminators (approval-\n * received, input-received, etc.) once the orchestrator's onStateChange\n * subscription is removed; until then we keep gating purely on equality.\n *\n * @docLink packages/factory-assets/flow#stimulus-driver\n */\n\nimport type { FlowExecution } from \"@skaile/workspaces/types\";\nimport type { TurnStimulus } from \"./prompt-fragments.js\";\n\n/**\n * Decide whether a state transition warrants kicking an agent turn, and\n * which kind of stimulus to render. Returns `null` to suppress turn-kicking\n * when nothing observable changed.\n *\n * Pure — depends only on its inputs.\n *\n * @param oldExec - Previous FlowExecution snapshot (or `undefined` on the\n *   first emission, e.g. immediately after `connect()`).\n * @param newExec - Current FlowExecution snapshot.\n * @returns A {@link TurnStimulus} when a turn should be kicked, or `null`.\n *\n * @docLink packages/factory-assets/flow#compute-stimulus\n */\nexport function computeStimulus(\n  oldExec: FlowExecution | undefined,\n  newExec: FlowExecution,\n): TurnStimulus | null {\n  // First emission (no prior snapshot) — treat as a full state change so\n  // downstream consumers can latch onto the initial state.\n  if (!oldExec) {\n    return { kind: \"state_changed\" };\n  }\n\n  // Identity short-circuit (cheap; mutate() returns a fresh object on every\n  // change so reference inequality is the common case).\n  if (oldExec === newExec) {\n    return null;\n  }\n\n  // Structural compare — JSON.stringify is good enough for FlowExecution\n  // because it has stable key ordering produced by the engine and contains\n  // no functions or class instances. Avoids pulling in a deep-equal dep.\n  if (snapshotsEqual(oldExec, newExec)) {\n    return null;\n  }\n\n  return { kind: \"state_changed\" };\n}\n\n/**\n * Cheap structural equality for two FlowExecution snapshots. Mirrors the\n * comparison the orchestrator's onStateChange subscription would do if it\n * cared (it currently re-fires unconditionally).\n *\n * @internal\n */\nfunction snapshotsEqual(a: FlowExecution, b: FlowExecution): boolean {\n  if (a === b) return true;\n  // Hot-path guard: differing top-level fields short-circuit before the\n  // expensive serialize.\n  if (a.runId !== b.runId) return false;\n  if (a.flowId !== b.flowId) return false;\n  if (a.status !== b.status) return false;\n  if (a.done !== b.done) return false;\n  if (a.autonomousMode !== b.autonomousMode) return false;\n\n  try {\n    return JSON.stringify(a) === JSON.stringify(b);\n  } catch {\n    // Defensive: if a snapshot somehow contains a circular ref the safe\n    // answer is \"treat as different\" so we don't suppress a real change.\n    return false;\n  }\n}\n"]}

package/dist/{chunk-KT3CK26V.js → chunk-JIQLLZ65.js}

@@ -1,6 +1,8 @@
 import { AssetKindRegistryFrozenError, AssetKindConflictError, AssetKindPatternConflictError, AssetKindPathAmbiguityError } from './chunk-OKRUTSG7.js';
-import { parseFrontmatter } from './chunk-GL45UNVS.js';
-import { validatePersona, validateRuleset, validateSkill, validateAgent, validateConnector, validateMcpServer, validateContract, validatePrompt, validatePreset } from './chunk-NELZIQ2E.js';
+import { decodeSkaileManifest, SKAILE_MANIFEST_FILENAME } from './chunk-IERB3UXJ.js';
+import { parseFrontmatter } from './chunk-2FS4FPZ7.js';
+import { isValidAssetName } from './chunk-IEJ5IOC3.js';
+import { validatePersona, validateRuleset, validateSkill, validateAgent, validateConnector, validateMcpServer, validateContract, validatePrompt, validatePreset } from './chunk-QDJKE557.js';
 import * as fs from 'fs';
 import * as path from 'path';
 import * as z from 'zod';
@@ -481,8 +483,14 @@ var SyncConfigSchema = z.object({
   path: ["poll_interval"]
 });
 var AssetEntrySchema = z.object({
-  /** Relative path within the repo (directory or file). */
+  /** Asset root directory, relative to the repo. Files are resolved under it. */
   path: z.string().min(1),
+  /**
+   * Optional recursive root. When set (and `files` absent), the asset spans
+   * every file under `<path>` (walked recursively). Mirrors the
+   * `skaile.manifest.yaml` `root:` form via `manifestToSourceConfig`.
+   */
+  root: z.string().min(1).optional(),
   /** Asset kind — validated against `IAssetKindRegistry` at discovery time. */
   kind: z.string().min(1),
   /** Publisher namespace. Required per entry; overrides publisher_default / _overrides. */
@@ -496,12 +504,19 @@ var AssetEntrySchema = z.object({
    * Optional on write, REQUIRED on Catalog publish (Phase 4).
    */
   sha256: z.string().regex(/^[a-f0-9]{64}$/, "sha256 must be 64-character hex").optional(),
-  /** Curated file filter (paths relative to `path:`). At least one entry. */
-  files: z.array(z.string().min(1)).min(1),
+  /**
+   * Curated file filter (paths relative to `path:`). At least one entry when
+   * present. Optional: a `root`-only entry omits it and is materialised by a
+   * recursive walk at discovery time.
+   */
+  files: z.array(z.string().min(1)).min(1).optional(),
   /** Author-declared requires-graph entries. */
   requires: z.array(z.string().min(1)).default([]),
   /** Optional passthrough to `AssetDefinition.manifest`. */
   metadata: z.record(z.string(), z.unknown()).optional()
+}).refine((a) => a.root !== void 0 || a.files !== void 0, {
+  message: "asset entry must declare either `root` or `files`",
+  path: ["files"]
 });
 var SourceConfigSchema = z.object({
   /** Schema version. `1` (glob mode) or `2` (allows `assets:` block). */
@@ -580,6 +595,91 @@ function collectWarnings(config) {
   }
   return warnings;
 }
+function atPublisher(publisher) {
+  return publisher.startsWith("@") ? publisher : `@${publisher}`;
+}
+function derivePublisherFromPath(p) {
+  const seg = p.split("/").find((s) => s.length > 0 && s !== ".");
+  return seg ? `@${seg}` : "@unknown";
+}
+function manifestFilesToStrings(files) {
+  if (!Array.isArray(files) || files.length === 0) return void 0;
+  const out = files.map((f) => typeof f === "string" ? f : f.path).filter((p) => p.length > 0);
+  return out.length > 0 ? out : void 0;
+}
+function manifestEntryMetadata(a, manifest) {
+  const meta = {};
+  if (a.description !== void 0) meta.description = a.description;
+  if (a.keywords !== void 0) meta.keywords = a.keywords;
+  if (a.category !== void 0) meta.category = a.category;
+  const license = a.license ?? manifest.license;
+  if (license !== void 0) meta.license = license;
+  const homepage = a.homepage ?? manifest.homepage;
+  if (homepage !== void 0) meta.homepage = homepage;
+  return Object.keys(meta).length > 0 ? meta : void 0;
+}
+function adaptManifestAssetEntry(a, manifest) {
+  const root = typeof a.root === "string" && a.root.length > 0 ? a.root : void 0;
+  const assetPath = root ?? ".";
+  const files = root ? void 0 : manifestFilesToStrings(a.files);
+  const publisher = a.publisher ? atPublisher(a.publisher) : manifest.publisher ? atPublisher(manifest.publisher) : derivePublisherFromPath(assetPath);
+  const entry = {
+    path: assetPath,
+    kind: a.kind,
+    publisher,
+    name: a.name,
+    version: a.version ?? manifest.version ?? "0.1.0",
+    requires: a.dependencies ?? []
+  };
+  if (root) entry.root = root;
+  if (files) entry.files = files;
+  if (a.sha256) entry.sha256 = a.sha256;
+  const metadata = manifestEntryMetadata(a, manifest);
+  if (metadata) entry.metadata = metadata;
+  return entry;
+}
+function manifestToSourceConfig(manifest) {
+  const publisherDefault = manifest.publisher ? atPublisher(manifest.publisher) : "@<domain>";
+  const devPaths = manifest.dev_paths ?? [];
+  if (!manifest.assets || manifest.assets.length === 0) {
+    return {
+      version: 1,
+      publisher_default: publisherDefault,
+      default_ref: "main",
+      publisher_overrides: [],
+      dev_paths: devPaths
+    };
+  }
+  return {
+    version: 2,
+    publisher_default: publisherDefault,
+    default_ref: "main",
+    publisher_overrides: [],
+    dev_paths: devPaths,
+    assets: manifest.assets.map((a) => adaptManifestAssetEntry(a, manifest))
+  };
+}
+function decodeManifestSourceConfig(text) {
+  const { manifest, diagnostics } = decodeSkaileManifest(text);
+  const fatal = diagnostics.filter((d) => d.severity === "error");
+  if (fatal.length > 0) {
+    return {
+      ok: false,
+      errors: fatal.map((d) => ({ path: d.path ?? "", message: d.message }))
+    };
+  }
+  return { ok: true, config: manifestToSourceConfig(manifest) };
+}
+function readManifestSourceConfig(dir) {
+  const filePath = path.join(dir, SKAILE_MANIFEST_FILENAME);
+  if (!fs.existsSync(filePath)) return void 0;
+  try {
+    const result = decodeManifestSourceConfig(fs.readFileSync(filePath, "utf-8"));
+    return result.ok ? result.config : void 0;
+  } catch {
+    return void 0;
+  }
+}
 function mergeSourceConfigs(base, overlay) {
   if (!base && !overlay) return void 0;
   if (!overlay) return base;
@@ -638,11 +738,11 @@ function loadMergedSourceConfig(rootPath, sidecarPath) {
   return warnings.length > 0 ? { ok: true, config: merged, warnings } : { ok: true, config: merged };
 }
 function loadSourceConfigFromDir(dir) {
-  const filePath = path.join(dir, ".skaile-source.yaml");
+  const filePath = path.join(dir, SKAILE_MANIFEST_FILENAME);
   if (!fs.existsSync(filePath)) return void 0;
   try {
     const text = fs.readFileSync(filePath, "utf-8");
-    return loadSourceConfig(text);
+    return decodeManifestSourceConfig(text);
   } catch (err) {
     return {
       ok: false,
@@ -718,10 +818,18 @@ function processEntry(rootPath, entry, registry) {
   const errors = [];
   const assetRoot = path.resolve(rootPath, entry.path);
   const assetRootRelative = entry.path;
-  const manifestFileRel = pickManifestFile(entry, registry);
+  const files = entry.files ?? expandRootFiles(assetRoot);
+  if (entry.files === void 0 && files.length === 0) {
+    errors.push({
+      path: assetRootRelative,
+      error: `ManifestFileMissing: root "${entry.root ?? entry.path}" contains no files`
+    });
+    return { asset: null, errors };
+  }
+  const manifestFileRel = pickManifestFile(entry.path, files, entry.kind, registry);
   const manifestAbsPath = path.join(assetRoot, manifestFileRel);
   const missing = [];
-  for (const file of entry.files) {
+  for (const file of files) {
     if (!fs.existsSync(path.join(assetRoot, file))) {
       missing.push(file);
     }
@@ -757,7 +865,7 @@ function processEntry(rootPath, entry, registry) {
   }
   const { sha256: computedHash, missing: hashMissing } = computeDeterministicHashDetailed(
     assetRoot,
-    entry.files
+    files
   );
   if (hashMissing.length > 0) {
     errors.push({
@@ -800,7 +908,7 @@ function processEntry(rootPath, entry, registry) {
     relativePath: path.join(assetRootRelative, manifestFileRel).replace(/\\/g, "/"),
     fileFilter: {
       assetRoot,
-      files: [...entry.files].sort()
+      files: [...files].sort()
     },
     sha256: computedHash,
     requires
@@ -818,26 +926,49 @@ var MANIFEST_FILENAMES = /* @__PURE__ */ new Set([
   "RULESET.md"
 ]);
 var MANIFEST_SUFFIXES = [".flow.yaml", ".flow.json", ".prompt.md", ".preset.yaml"];
-function pickManifestFile(entry, registry) {
-  const provider = registry.getProvider(entry.kind);
+function pickManifestFile(assetPath, files, kind, registry) {
+  const provider = registry.getProvider(kind);
   if (provider) {
-    for (const file of entry.files) {
-      if (provider.matchesPath(path.join(entry.path, file).replace(/\\/g, "/"))) {
+    for (const file of files) {
+      if (provider.matchesPath(path.join(assetPath, file).replace(/\\/g, "/"))) {
         return file;
       }
     }
   }
-  for (const file of entry.files) {
+  for (const file of files) {
     if (MANIFEST_FILENAMES.has(path.basename(file))) return file;
     if (MANIFEST_SUFFIXES.some((s) => file.endsWith(s))) return file;
   }
-  return entry.files[0];
+  return files[0];
+}
+function expandRootFiles(assetRoot) {
+  const out = [];
+  const walk = (absDir, relDir) => {
+    let entries;
+    try {
+      entries = fs.readdirSync(absDir, { withFileTypes: true });
+    } catch {
+      return;
+    }
+    for (const e of entries.sort((a, b) => a.name < b.name ? -1 : 1)) {
+      const rel = relDir ? `${relDir}/${e.name}` : e.name;
+      if (e.isDirectory()) {
+        if (e.name === ".git" || e.name === "node_modules" || e.name === ".skaile") continue;
+        walk(path.join(absDir, e.name), rel);
+      } else if (e.isFile()) {
+        out.push(rel);
+      }
+    }
+  };
+  walk(assetRoot, "");
+  return out;
 }
 function parseManifest(absPath) {
   try {
     const content = fs.readFileSync(absPath, "utf-8");
     if (absPath.endsWith(".md")) {
       const { data } = parseFrontmatter(content);
+      if (!data || Object.keys(data).length === 0) return null;
       return data;
     }
     if (absPath.endsWith(".yaml") || absPath.endsWith(".yml")) {
@@ -927,7 +1058,7 @@ function discoverAssetsInTree(rootPath, optionsOrSourceConfig) {
       }
       const publisher = resolvePublisher(relativePath, sourceConfig);
       const name = deriveName(relativePath, kind, manifest);
-      const version = typeof manifest.version === "string" ? manifest.version : "0.1.0";
+      const version = coerceVersion(manifest.version);
       const ref = `${publisher}/${name}@${version}`;
       const fileFilter = registry.defaultFileFilter(kind, absPath) ?? {
         assetRoot: path.dirname(absPath),
@@ -985,6 +1116,7 @@ function parseManifest2(absPath) {
     const content = fs.readFileSync(absPath, "utf-8");
     if (absPath.endsWith(".md")) {
       const { data } = parseFrontmatter(content);
+      if (!data || Object.keys(data).length === 0) return null;
       return data;
     }
     if (absPath.endsWith(".yaml") || absPath.endsWith(".yml")) {
@@ -1019,8 +1151,13 @@ function resolvePublisher(relativePath, sourceConfig) {
   }
   return template;
 }
+function coerceVersion(version) {
+  if (typeof version === "string") return version;
+  if (typeof version === "number") return String(version);
+  return "0.1.0";
+}
 function deriveName(relativePath, kind, manifest) {
-  if (typeof manifest.name === "string" && manifest.name.length > 0) {
+  if (typeof manifest.name === "string" && manifest.name.length > 0 && isValidAssetName(manifest.name)) {
     return manifest.name;
   }
   const parts = relativePath.split("/");
@@ -1119,7 +1256,7 @@ async function discoverAssetsInTreeEntries(entries, options) {
     }
     const publisher = resolvePublisher2(relativePath, resolvedSourceConfig);
     const name = deriveName2(relativePath, kind, manifest);
-    const version = typeof manifest.version === "string" ? manifest.version : "0.1.0";
+    const version = coerceVersion2(manifest.version);
     const ref = `${publisher}/${name}@${version}`;
     const fileFilter = computeFileFilter(kind, relativePath, blobByPath);
     let sha256;
@@ -1158,6 +1295,7 @@ function parseManifestText(relativePath, text) {
   try {
     if (relativePath.endsWith(".md")) {
       const { data } = parseFrontmatter(text);
+      if (!data || Object.keys(data).length === 0) return null;
       return data;
     }
     if (relativePath.endsWith(".yaml") || relativePath.endsWith(".yml")) {
@@ -1192,8 +1330,13 @@ function resolvePublisher2(relativePath, sourceConfig) {
   }
   return template;
 }
+function coerceVersion2(version) {
+  if (typeof version === "string") return version;
+  if (typeof version === "number") return String(version);
+  return "0.1.0";
+}
 function deriveName2(relativePath, kind, manifest) {
-  if (typeof manifest.name === "string" && manifest.name.length > 0) {
+  if (typeof manifest.name === "string" && manifest.name.length > 0 && isValidAssetName(manifest.name)) {
     return manifest.name;
   }
   const parts = relativePath.split("/");
@@ -1335,11 +1478,11 @@ async function fetchAsBuffer(fetchBlob, sha) {
 }
 async function resolveSourceConfigFromTree(explicit, blobByPath, fetchBlob) {
   if (explicit) return explicit;
-  const entry = blobByPath.get(".skaile-source.yaml");
+  const entry = blobByPath.get(SKAILE_MANIFEST_FILENAME);
   if (!entry) return void 0;
   const bytes = await fetchAsBuffer(fetchBlob, entry.sha);
   if (!bytes) return void 0;
-  const result = loadSourceConfig(bytes.toString("utf-8"));
+  const result = decodeManifestSourceConfig(bytes.toString("utf-8"));
   return result.ok ? result.config : void 0;
 }
 async function discoverFromManifestTree(sourceConfig, blobByPath, fetchBlob, registry, includeDev = false) {
@@ -1366,8 +1509,16 @@ async function discoverFromManifestTree(sourceConfig, blobByPath, fetchBlob, reg
 async function processManifestEntryTree(entry, blobByPath, fetchBlob, registry) {
   const errors = [];
   const assetRootRelative = entry.path;
+  const files = entry.files ?? expandRootFilesTree(entry.path, blobByPath);
+  if (entry.files === void 0 && files.length === 0) {
+    errors.push({
+      path: assetRootRelative,
+      error: `ManifestFileMissing: root "${entry.root ?? entry.path}" contains no files`
+    });
+    return { asset: null, errors };
+  }
   const missing = [];
-  for (const file of entry.files) {
+  for (const file of files) {
     const full = joinPosix(entry.path, file);
     if (!blobByPath.has(full)) missing.push(file);
   }
@@ -1378,7 +1529,7 @@ async function processManifestEntryTree(entry, blobByPath, fetchBlob, registry)
     });
     return { asset: null, errors };
   }
-  const manifestFileRel = pickManifestFileTree(entry, registry);
+  const manifestFileRel = pickManifestFileTree(entry.path, files, entry.kind, registry);
   const manifestFull = joinPosix(entry.path, manifestFileRel);
   const manifestEntry = blobByPath.get(manifestFull);
   let manifestBytes;
@@ -1422,7 +1573,7 @@ async function processManifestEntryTree(entry, blobByPath, fetchBlob, registry)
   }
   let computedHash;
   try {
-    computedHash = await computeManifestHashTree(entry, blobByPath, fetchBlob);
+    computedHash = await computeManifestHashTree(entry.path, files, blobByPath, fetchBlob);
   } catch (err) {
     errors.push({
       path: assetRootRelative,
@@ -1464,7 +1615,7 @@ async function processManifestEntryTree(entry, blobByPath, fetchBlob, registry)
     relativePath: manifestFull,
     fileFilter: {
       assetRoot: entry.path,
-      files: [...entry.files].sort()
+      files: [...files].sort()
     },
     sha256: computedHash,
     requires
@@ -1482,25 +1633,38 @@ var MANIFEST_FILENAMES2 = /* @__PURE__ */ new Set([
   "RULESET.md"
 ]);
 var MANIFEST_SUFFIXES2 = [".flow.yaml", ".flow.json", ".prompt.md", ".preset.yaml"];
-function pickManifestFileTree(entry, registry) {
-  const provider = registry.getProvider(entry.kind);
+function pickManifestFileTree(assetPath, files, kind, registry) {
+  const provider = registry.getProvider(kind);
   if (provider) {
-    for (const file of entry.files) {
-      if (provider.matchesPath(joinPosix(entry.path, file))) return file;
+    for (const file of files) {
+      if (provider.matchesPath(joinPosix(assetPath, file))) return file;
     }
   }
-  for (const file of entry.files) {
+  for (const file of files) {
     const base = file.split("/").pop() ?? file;
     if (MANIFEST_FILENAMES2.has(base)) return file;
     if (MANIFEST_SUFFIXES2.some((s) => file.endsWith(s))) return file;
   }
-  return entry.files[0];
+  return files[0];
 }
-async function computeManifestHashTree(entry, blobByPath, fetchBlob) {
+function expandRootFilesTree(assetPath, blobByPath) {
+  const out = [];
+  const root = assetPath === "." ? "" : assetPath;
+  for (const blobPath of blobByPath.keys()) {
+    if (!isInDir(blobPath, root)) continue;
+    const rel = root === "" ? blobPath : blobPath.slice(root.length + 1);
+    if (rel.startsWith(".git/") || rel.startsWith("node_modules/") || rel.startsWith(".skaile/") || rel.includes("/.git/") || rel.includes("/node_modules/") || rel.includes("/.skaile/")) {
+      continue;
+    }
+    out.push(rel);
+  }
+  return out.sort();
+}
+async function computeManifestHashTree(assetPath, files, blobByPath, fetchBlob) {
   const hash = crypto.createHash("sha256");
-  const sorted = [...entry.files].sort();
+  const sorted = [...files].sort();
   for (const file of sorted) {
-    const full = joinPosix(entry.path, file);
+    const full = joinPosix(assetPath, file);
     const blob = blobByPath.get(full);
     if (!blob) continue;
     hash.update(file);
@@ -1523,6 +1687,6 @@ function validateRequiresSyntax2(requires) {
 // discovery/src/index.ts
 var VERSION = "0.0.0";
 
-export { AssetKindRegistry, BUILTIN_PROVIDERS, SEMVER_RE, SourceConfigSchema, VERSION, agentProvider, buildRequiresGraph, computeDeterministicHash, computeDeterministicHashDetailed, connectorProvider, contractProvider, createDefaultRegistry, detectCycles, discoverAssetsInTree, discoverAssetsInTreeEntries, discoverFromManifest, extractRequires, isExcludedDevPath, isManifestMode, loadMergedSourceConfig, loadSourceConfig, mcpServerProvider, mergeSourceConfigs, parseSourceConfig, personaProvider, presetProvider, promptProvider, rulesetProvider, skillProvider, validateSourceConfig };
-//# sourceMappingURL=chunk-KT3CK26V.js.map
-//# sourceMappingURL=chunk-KT3CK26V.js.map
+export { AssetKindRegistry, BUILTIN_PROVIDERS, SEMVER_RE, SourceConfigSchema, VERSION, agentProvider, buildRequiresGraph, computeDeterministicHash, computeDeterministicHashDetailed, connectorProvider, contractProvider, createDefaultRegistry, decodeManifestSourceConfig, detectCycles, discoverAssetsInTree, discoverAssetsInTreeEntries, discoverFromManifest, extractRequires, isExcludedDevPath, isManifestMode, loadMergedSourceConfig, loadSourceConfig, manifestToSourceConfig, mcpServerProvider, mergeSourceConfigs, parseSourceConfig, personaProvider, presetProvider, promptProvider, readManifestSourceConfig, rulesetProvider, skillProvider, validateSourceConfig };
+//# sourceMappingURL=chunk-JIQLLZ65.js.map
+//# sourceMappingURL=chunk-JIQLLZ65.js.map