@skaile/workspaces 0.50.0 → 0.53.0

package/CHANGELOG.md

@@ -1,5 +1,237 @@
 # Changelog
 
+## 0.53.0
+
+### Minor Changes
+
+- [#277](https://github.com/skaile-ai/workspaces/pull/277) [`6a914a2`](https://github.com/skaile-ai/workspaces/commit/6a914a2ae40fb7be4463334e3e5dbb3faaf97738) Thanks [@peteralbert](https://github.com/peteralbert)! - Enable in-container OAuth token refresh for per-session SharePoint and WebDAV mounts. `connectorRefreshKind` now maps `sharepoint`→`sharepoint-mount` and `webdav`→`webdav-mount` (in addition to `git`), so the connector token mediator routes their proactive/reactive refreshes to the platform's `host.refresh_credential` handler instead of refusing them. The rclone drivers already carried the apply path (re-render INI + stop/respawn), so these mounts no longer go stale (`invalid_client`) ~1h after wake. `googledrive` remains excluded until its driver gains a refresh controller.
+
+## 0.52.0
+
+### Minor Changes
+
+- [#271](https://github.com/skaile-ai/workspaces/pull/271) [`4e1c9bf`](https://github.com/skaile-ai/workspaces/commit/4e1c9bf836b4f403b8bcd6115a910419fb44afc2) Thanks [@mortegro](https://github.com/mortegro)! - `skaile update` now offers to sync sources from upstream before re-deploying
+  (default yes). Re-deploy resolves against the local source cache, which is frozen
+  at the commit captured when each source was first cloned — so without a sync,
+  `update` could never see newer GitHub commits on an unpinned source and always
+  reported "Nothing to update" (the catalog-refresh stage misled users into
+  thinking it had checked).
+
+  `update` now runs a Stage 2a source sync behind a confirmation prompt before the
+  asset re-deploy. The prompt defaults to yes; `--no-sync` skips it, `-y`/`--yes`
+  syncs without asking, and a non-interactive shell syncs by default. The sync
+  clones missing sources and advances existing clones with `git pull --ff-only`
+  (no `--depth=1`, so it fast-forwards instead of tripping the installer's
+  shallow-divergence path), then refreshes the manifest cache.
+
+  New export from the CLI: `syncProjectSources(projectDir, { dev? })`, factored out
+  of `autoSyncForSearch` and shared by both call sites.
+
+### Patch Changes
+
+- [#273](https://github.com/skaile-ai/workspaces/pull/273) [`f689c55`](https://github.com/skaile-ai/workspaces/commit/f689c55cb21a5e52a8a8d00d9ee53738fe15547b) Thanks [@mortegro](https://github.com/mortegro)! - Fix flow installs not pulling their dependencies. Installing a `flow:` asset
+  (e.g. `skaile install` of a flow declared in `skaile.yaml`) deployed only the
+  bare `.flow.yaml` and none of the contracts / skills / sub-flows the flow
+  declares under `requires:`. The provenance walker only read a `requires`/
+  `dependencies` list for `bundle` kinds (`bundleDeps`), so a flow's transitive
+  closure was always empty. `manifestDeps` now also reads a flow's `.flow.yaml` /
+  `.flow.json` `requires:`, and `bundleDepRefs` whole-document-parses those flow
+  files. Sub-flow requires expand recursively, so installing a top-level flow now
+  deploys its full dependency tree.
+
+- [#268](https://github.com/skaile-ai/workspaces/pull/268) [`1739497`](https://github.com/skaile-ai/workspaces/commit/1739497dd081f07868e4aee2231b9586d0afd80c) Thanks [@peteralbert](https://github.com/peteralbert)! - Fix a resumed session's workspace being unreadable (`readResource` → 503
+  "runtime not reachable") on the tier-1 native-resume / subagents-recreate path.
+  `recreateSessionForInit` disposed and recreated the agent session but never
+  reassigned the outer `resourceManager` (so the resource-capability getters and
+  reads kept hitting the disposed manager) and never re-announced resources, so
+  the gateway never learned the recreated session's live resources. The recreate
+  now mirrors the first-build wiring: it repoints `resourceManager` at the live
+  session, resumes watching, and re-emits `resources_available` /
+  `commands_available`. The connect-time emitter is renamed
+  `emitAvailabilityOnConnect` → `emitAvailability` (it is now also invoked after a
+  recreate, not only on client connect).
+
+## 0.51.0
+
+### Minor Changes
+
+- [#252](https://github.com/skaile-ai/workspaces/pull/252) [`3b0c1bd`](https://github.com/skaile-ai/workspaces/commit/3b0c1bd5dedfdcc41a4a5633c0678d4e79d30b39) Thanks [@mortegro](https://github.com/mortegro)! - Reference-aware asset atomization in discovery. The structural file filters that
+  decide which files belong to one skill/agent/etc. were purely path-based and
+  silently dropped helper files an asset referenced from non-conventional
+  locations (e.g. a skill linking `modes/*.md` or `scripts/*.ts`).
+
+  Four layered mechanisms, none of which use an LLM:
+
+  1. **Reference lint (always on)** — discovery scans each asset's text for
+     path-like references and reports any that resolve to a real in-dir file the
+     filter dropped, via the new `DiscoveryResult.warnings`.
+  2. **Convention companion dirs** — the skill/agent filters now capture a broader
+     allowlist of well-known helper subdirs (`scripts/`, `modes/`, `templates/`,
+     …), mirrored in the virtual-tree path so store/local SHA256 parity holds.
+  3. **Reference closure (`atomization: "closure"`)** — transitively pulls in
+     referenced in-dir files. Opt-in.
+  4. **Full-dir fallback (`atomization: "full-dir"`)** — captures the whole asset
+     directory minus nested sub-assets. Opt-in.
+
+  Plus a dependency post-pass that turns cross-asset prose references into soft
+  `body-link` requires edges. The `atomization` option is honored on **both** the
+  local-FS (`discoverAssetsInTree`) and virtual-tree (`discoverAssetsInTreeEntries`)
+  paths at exact SHA256 parity — both share the scan/closure logic via a new
+  `AssetFs` abstraction.
+
+  New `atomization` option on `DiscoveryOptions` + `DiscoverAssetsInTreeEntriesOptions`
+  (default `"strict"`). New exports: `AtomizationPolicy`,
+  `DEFAULT_ATOMIZATION_POLICY`, `scanAssetReferences`, `lintUncoveredReferences`,
+  `extractPathCandidates`, `closeOverReferences`, `createNodeAssetFs`,
+  `SKILL_COMPANION_DIRS`, `AGENT_COMPANION_DIRS`, and the `AssetFs` /
+  `ReferenceWarning` / `AssetReference` / `ClosureResult` / `ReferenceClass` types.
+  `DiscoveryResult` gains a required `warnings: ReferenceWarning[]` field.
+
+- [#256](https://github.com/skaile-ai/workspaces/pull/256) [`3609659`](https://github.com/skaile-ai/workspaces/commit/36096594d71275940bbdcb219ec5da7b46d9a3c4) Thanks [@mortegro](https://github.com/mortegro)! - Global cross-backend install path ([#206](https://github.com/skaile-ai/workspaces/issues/206)). `skaile install --global` now fans the
+  deps declared in the user-scope SSOT (`~/.skaile/skaile.yaml`) out to **every**
+  global backend the user runs (`claude-code` / `omp` / `codex`), each landing in
+  its `DRIVER_TARGETS[target].global` dir, instead of being bolted onto a single
+  project-scoped target.
+
+  In global mode the manager's state — config SSOT, lock, cache, and history —
+  roots at `~/.skaile`: a global lock is written to `~/.skaile/skaile.lock.yaml`
+  (not the project lock), and staging/fetch goes through `globalCacheRoot()`
+  (`~/.skaile/cache`) so a global asset is not re-fetched per project. The old
+  `if (this.global) return;` suppression in `AssetManager`'s manifest writers is
+  lifted: `skaile add --global <ref>` / `skaile remove --global <ref>` now record
+  into `~/.skaile/skaile.yaml` (bootstrapping it on a fresh machine), routing the
+  edit to the SSOT rather than `<projectDir>/skaile.yaml`.
+
+  The backend set is resolvable: an explicit `global_backends:` key in
+  `~/.skaile/skaile.yaml`, else auto-detected from existing `~/.<backend>` dirs. A
+  `--backend <ids>` filter (comma-separated, on `install` / `add` / `remove` /
+  `list`) narrows the fan-out to a subset and implies `--global`.
+
+  `skaile list --global` reports reconciliation state **per backend** —
+  `declared` / `installed` / `drift` (the [#205](https://github.com/skaile-ai/workspaces/issues/205) vocabulary, now backend-aware), so
+  an asset deployed to `claude-code` but not `codex` reads `installed` for the
+  former and `drift`/`declared` for the latter. `--json` emits
+  `{ ref, kind, name, backend, state }`. Project and global scopes stay isolated:
+  a project `skaile.yaml` dep deploys into `.claude/` and never touches the global
+  `~/.claude/` deploy.
+
+  New exports:
+
+  - `@skaile/workspaces/core`: `globalSkaileDir`, `globalBackendRoot`,
+    `resolveGlobalBackends`, `resolveGlobalSkWorkspaceConfig`; `SkWorkspaceConfig`
+    gains an optional `global_backends?: DriverTarget[]` field.
+  - `@skaile/workspaces/asset-manager`: `AssetManager.globalState(opts?)` returning
+    `BackendDeclaredAsset[]`; new `AssetManagerOptions.backends`.
+
+  Additive — no breaking changes to existing surfaces.
+
+- [#255](https://github.com/skaile-ai/workspaces/pull/255) [`4a3e756`](https://github.com/skaile-ai/workspaces/commit/4a3e7565f00cb00e86f7d6bb00d3b07e60827b69) Thanks [@mortegro](https://github.com/mortegro)! - `skaile manage`: group on-disk assets by domain. The source / library / factory
+  feeds scan with `scanRepo`, which never read the `DOMAIN.md` sidecars, so their
+  entries arrived with no `domainSlug` and rendered flat under one publisher band
+  (e.g. every `@skaile-ai/*` asset stuffed under `skaile-ai` with no subgroups) —
+  only the remote store feed carried domains. The feed layer (`asset-feeds.ts`)
+  now parses each root's `DOMAIN.md` files and stamps `domainSlug` per entry
+  (reusing `@skaile/workspaces/discovery`'s `parseDomainMd` / `assignDomain` /
+  `buildDomainIndex`), falling back to the source's short repo name for entries no
+  domain claims. Adds `AssetManager.searchRepoRoots()` so the feed can relate a
+  scanned entry back to its source root.
+
+- [#266](https://github.com/skaile-ai/workspaces/pull/266) [`94dec67`](https://github.com/skaile-ai/workspaces/commit/94dec67b595c1f998ec0ce8140da33879495fd16) Thanks [@mortegro](https://github.com/mortegro)! - `skaile manage`: the **Sources** tab is now a collapsible tree instead of a flat
+  list. Registered github sources render as `Sources → org → repo → domain → asset`
+  — the source-origin slice of the Assets feed with an added github-**org** band
+  (e.g. `Sources → skaile-ai → ai-assets-skaileup → <domains>`). Domains default
+  **collapsed** (collapse-at-domain), so you land on the org/repo/domain skeleton
+  and drill in as needed.
+
+  The tab supports the same install/remove flow as Assets: `←/→` collapse/expand,
+  `space/+/-` to stage (org and repo headers bulk-select their subtree; a domain
+  header is navigational), `a/Enter` to apply, `i` for info, `d` for the domain
+  info region. Source CRUD stays in the shell (`skaile source …`). Sources with no
+  discoverable assets still appear as an empty org/repo band so a freshly-added
+  source is visible. The Assets-tab tree is unchanged.
+
+- [#254](https://github.com/skaile-ai/workspaces/pull/254) [`3034e45`](https://github.com/skaile-ai/workspaces/commit/3034e45f1c299bfe2693c1967a81000f515e6b95) Thanks [@mortegro](https://github.com/mortegro)! - Remove the deprecated `resolveAuth` shim from the `@skaile/workspaces/connectors`
+  public surface. Connectors now resolve credentials through
+  `SecretProviderChain.resolve()` directly — `ctx.secrets?.resolve(declaration.auth ?? "")`
+  in place of `resolveAuth(declaration.auth, ctx.secrets)`. All built-in connectors
+  (s3, minio, sqlite, postgres, gmail, mattermost) and the internal
+  `resolveMountCredential` path are migrated; the external `@skaile/connector-redis`
+  plugin is migrated in lockstep.
+
+  Behaviour is **identical whenever a `SecretProvider` is wired** (the production
+  path — the runner always builds a chain via `createCliSecretProviderChain` /
+  `createForgeSecretProviderChain`): `resolveAuth(x, secrets)` already delegated to
+  `secrets.resolve(x)` in that case, so `env:` lookups and the CLI chain's inline
+  passthrough are unchanged. The only contract change is the removed shim's
+  no-provider fallback — when `secrets` was `undefined`, `resolveAuth` did a direct
+  `process.env` lookup for `env:` refs and returned any other value as a raw
+  literal; `secrets?.resolve(...)` now yields `undefined` in that case. See
+  `MIGRATION.md`.
+
+### Patch Changes
+
+- [#265](https://github.com/skaile-ai/workspaces/pull/265) [`e30e31f`](https://github.com/skaile-ai/workspaces/commit/e30e31fc00f678fb2f9f8e796a8e8687b84153f1) Thanks [@mortegro](https://github.com/mortegro)! - Fix `ERR_FS_EISDIR` crash on `skaile add` / `install` when a catalog entry
+  resolved to a clone directory instead of a manifest file. `candidateToCatalogEntry`
+  now resolves a concrete manifest path via the suffix-aware `matchManifestPath`
+  (covering `prompt`/`flow`), falling back to the candidate's first file rather than
+  the whole clone dir. As a backstop, `copyFromManifest` / `symlinkFromManifest`
+  now copy a directory source recursively instead of throwing.
+
+- [#270](https://github.com/skaile-ai/workspaces/pull/270) [`79e7211`](https://github.com/skaile-ai/workspaces/commit/79e7211a40db89de4e507d39dedfd400d1ed9aed) Thanks [@mortegro](https://github.com/mortegro)! - Fix flow dependency extraction reading the wrong node field. The flow
+  requires-graph extractor (`discovery` + the flow kind provider) read the
+  skill ref from the top-level `nodes[].skill`, but real flows nest it under
+  `nodes[].data.skill` (the shape the engine executes via
+  `node.data?.skill ?? node.id`). The mismatch meant installing a flow pulled
+  zero skills. Extraction now reads `nodes[].data.skill` (falling back to the
+  legacy top-level `nodes[].skill`) and also picks up sub-flow refs from
+  `nodes[].data.flow`.
+
+- [#269](https://github.com/skaile-ai/workspaces/pull/269) [`b4daa33`](https://github.com/skaile-ai/workspaces/commit/b4daa3357ca151d6bfa7f3b428d3689d831563ff) Thanks [@mortegro](https://github.com/mortegro)! - `skaile manage` Assets tab domains now collapse by default on first open. Previously all domain sections were expanded, resulting in an overwhelming list for sources with many domains (e.g. 15 domains / 105 assets). A user expand within the session is preserved across background data refreshes.
+
+- [#264](https://github.com/skaile-ai/workspaces/pull/264) [`f770d53`](https://github.com/skaile-ai/workspaces/commit/f770d534c2022f82fd832a114bee0e852738d6e9) Thanks [@mortegro](https://github.com/mortegro)! - `skaile manage`: group the Sources band by source, and stop listing factory
+  skills twice. Two fixes to the Assets-tab tree:
+
+  - **Group by source under Sources.** The second-level node under the 🔗 Sources
+    band was the asset-intrinsic `publisher` (every `@skaile-ai/*` source stuffed
+    under one `skaile-ai` band). It is now the source's short repo name — "which
+    repo did this come from" — which is what the Sources band is about. Other
+    origins (library / factory / store) still group by publisher. Carried on a new
+    optional `OriginEntry.group` and threaded onto both header and asset rows so
+    collapse/selection keys stay consistent; the canonical install ref still uses
+    `publisher`.
+  - **No duplicate factory.** The bundled factory tree is injected into the
+    repositories map as an implicit source, so `am.search()` returned it too and
+    the first-party skills appeared under **both** the Sources band and the
+    dedicated 🏭 Skaile Factory Assets band. The source feed now drops entries
+    whose path is under `factoryAssetRoots()`, leaving them only in the factory
+    band. An explicitly `source add`ed factory-URL clone is unaffected.
+
+  Source-feed entries that match no `DOMAIN.md` now hang directly under the source
+  node instead of a synthetic same-named fallback domain (avoids `source → ◈ same
+source` self-nesting). `stampDomains` gains a `synthesizeFallback` flag for this.
+
+- [#257](https://github.com/skaile-ai/workspaces/pull/257) [`e4314d6`](https://github.com/skaile-ai/workspaces/commit/e4314d670e9d960a7f774e2bb6b9f586bfa0e25f) Thanks [@mortegro](https://github.com/mortegro)! - `skaile search` robustness ([#208](https://github.com/skaile-ai/workspaces/issues/208)). The store-unavailable case is no longer
+  silently swallowed on a default search — it degrades to local results but prints
+  a one-line `store unavailable …` notice (explicit `--store` still surfaces the
+  real error). `search` now honours air-gapped mode (`catalog.cache_ttl: 0`): it
+  makes no store network call and says so, and `--store` errors clearly instead of
+  fetching. On an unsynced workspace, a default `search` auto-syncs the project's
+  sources and re-queries (with a `sources not synced — syncing now…` message)
+  instead of just telling the user to run `skaile source sync`; auto-sync is
+  skipped when air-gapped and falls back to the old hint on failure.
+
+- [#250](https://github.com/skaile-ai/workspaces/pull/250) [`53d2e48`](https://github.com/skaile-ai/workspaces/commit/53d2e48347ef0a9daf304106e97ba4948eabac3b) Thanks [@Frozen666](https://github.com/Frozen666)! - Promote `listen()` / `close()` onto the `ServerTransport` interface so any
+  transport (WebSocket today, broker-relayed later) can be started/stopped
+  polymorphically. The runner's `serve()` no longer `instanceof`-gates the
+  WebSocket transport for listen/close/onConnect; in-process and in-memory
+  transports implement the two methods as no-ops. WebSocket behavior is
+  unchanged. Prerequisite for the platform session-network-isolation transport.
+
+  Behavior note: dropping the `onConnect` instanceof guard means a `serve()` run
+  driven over the in-memory test transport now emits `commands_available` /
+  `resources_available` on client connect (it mirrors the WebSocket path). The
+  in-process transport's `onConnect` still never fires, so it is unaffected.
+
 ## 0.50.0
 
 ### Minor Changes

package/dist/asset-feeds-OEGJ6NOF.js

@@ -0,0 +1,205 @@
+import { assignDomain, buildDomainIndex, DOMAIN_MD_FILENAME, parseDomainMd } from './chunk-UTHEIPEY.js';
+import './chunk-JXT46QFC.js';
+import './chunk-3KPNDTMR.js';
+import './chunk-ZAP2BDHG.js';
+import { factoryAssetRoots } from './chunk-W53D5Q52.js';
+import { scanRepo } from './chunk-NXC6IEL4.js';
+import './chunk-DZCK7GRW.js';
+import { walkDir, parseFrontmatter } from './chunk-BQCGFPHW.js';
+import './chunk-GEEW6SY2.js';
+import './chunk-F3HNW354.js';
+import './chunk-MENCWIHW.js';
+import './chunk-K5GBV4SA.js';
+import './chunk-JB35MVBN.js';
+import './chunk-CU5Z7GH3.js';
+import './chunk-NSBPE2FW.js';
+import { existsSync, readFileSync } from 'fs';
+import * as path from 'path';
+
+function toPosix(p) {
+  return p.split(path.sep).join("/");
+}
+function loadDomainMds(root) {
+  const out = [];
+  for (const { path: filePath, name } of walkDir(root)) {
+    if (name !== DOMAIN_MD_FILENAME) continue;
+    try {
+      const { data } = parseFrontmatter(readFileSync(filePath, "utf8"));
+      out.push(parseDomainMd(toPosix(path.relative(root, filePath)), data));
+    } catch {
+    }
+  }
+  return out;
+}
+function stampDomains(root, fallbackSlug, entries, synthesizeFallback = true) {
+  const domainMds = loadDomainMds(root);
+  const assignables = entries.map((entry) => ({
+    entry,
+    ref: `${entry.kind}:${entry.name}`,
+    relativePath: toPosix(path.relative(root, entry.source))
+  }));
+  let usedFallback = false;
+  for (const a of assignables) {
+    const slug = assignDomain(a.relativePath, domainMds);
+    if (slug) a.entry.domainSlug = slug;
+    else if (synthesizeFallback) {
+      a.entry.domainSlug = fallbackSlug;
+      usedFallback = true;
+    } else a.entry.domainSlug = "";
+  }
+  const { index } = buildDomainIndex(assignables, domainMds);
+  const catalog = Object.values(index).map((d) => ({
+    slug: d.slug,
+    title: d.title,
+    ...d.description ? { description: d.description } : {},
+    ...d.relation ? { relation: d.relation } : {},
+    ...d.order !== void 0 ? { order: d.order } : {},
+    ...d.recommended[0] ? { recommendedRef: d.recommended[0] } : {}
+  }));
+  if (usedFallback) catalog.push({ slug: fallbackSlug, title: fallbackSlug });
+  return catalog;
+}
+async function libraryAssets() {
+  const notes = [];
+  const domains = [];
+  try {
+    const [{ openLibraryManager }, { skaileHomeDir }, { getGlobalCacheDir }] = await Promise.all([
+      import('./open-library-ERKRGH4B.js'),
+      import('./library/index.js'),
+      import('./core/index.js')
+    ]);
+    const { manager, close } = await openLibraryManager();
+    try {
+      const newRoot = getGlobalCacheDir();
+      const legacyRoot = path.join(skaileHomeDir(), "sources");
+      const libs = (await manager.listLibraries()).filter(
+        (l) => !l.path.startsWith(newRoot) && !l.path.startsWith(legacyRoot)
+      );
+      const entries = [];
+      for (const lib of libs) {
+        if (!existsSync(lib.path)) continue;
+        const libEntries = [...scanRepo(lib.path, `library:${lib.name}`)];
+        domains.push(...stampDomains(lib.path, `library:${lib.name}`, libEntries));
+        entries.push(...libEntries);
+      }
+      return { entries, domains, notes };
+    } finally {
+      close();
+    }
+  } catch (err) {
+    notes.push({
+      feed: "libraries",
+      message: err instanceof Error ? err.message : String(err)
+    });
+    return { entries: [], domains, notes };
+  }
+}
+async function storeAssets(projectDir) {
+  const notes = [];
+  try {
+    const { resolveCatalogSource } = await import('./open-library-ERKRGH4B.js');
+    const { source, close } = await resolveCatalogSource({ projectDir });
+    try {
+      const assets = await source.listAssets();
+      const entries = assets.map((a) => ({
+        name: a.name,
+        kind: a.kind ?? "skill",
+        description: a.description ?? "",
+        source: `store://${a.id}`,
+        publisher: a.publisher,
+        repo: a.repo,
+        domainSlug: a.domainSlug,
+        category: a.category,
+        version: a.version,
+        requires: [],
+        dependencies: []
+      }));
+      const domains = await loadDomains(source);
+      return { entries, domains, notes };
+    } finally {
+      close();
+    }
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    if (!/local/i.test(msg)) {
+      notes.push({ feed: "store", message: msg });
+    }
+    return { entries: [], domains: [], notes };
+  }
+}
+async function loadDomains(source) {
+  const fn = source.listDomains;
+  if (typeof fn !== "function") return [];
+  const domains = await fn.call(source);
+  return Array.isArray(domains) ? domains : [];
+}
+function sourceAssets(am) {
+  const factoryPrefixes = factoryAssetRoots().map((r) => r.endsWith(path.sep) ? r : r + path.sep);
+  const isFactoryPath = (p) => factoryPrefixes.some((fp) => p === fp.slice(0, -1) || p.startsWith(fp));
+  const all = am.search().filter((e) => !isFactoryPath(e.source));
+  const entries = [];
+  const domains = [];
+  for (const { repoName, root } of am.searchRepoRoots()) {
+    if (isFactoryPath(root)) continue;
+    const prefix = root.endsWith(path.sep) ? root : root + path.sep;
+    const owned = all.filter((e) => e.source === root || e.source.startsWith(prefix));
+    if (owned.length === 0) continue;
+    const sourceName = repoName.split("/").pop() || repoName;
+    domains.push(...stampDomains(root, sourceName, owned, false));
+    for (const entry of owned) entries.push({ origin: "source", entry, group: sourceName });
+  }
+  return { entries, domains };
+}
+function factoryAssets() {
+  const notes = [];
+  const domains = [];
+  try {
+    const entries = [];
+    for (const root of factoryAssetRoots()) {
+      const rootEntries = [...scanRepo(root, "skaile-factory")];
+      domains.push(...stampDomains(root, "skaile-factory", rootEntries));
+      entries.push(...rootEntries);
+    }
+    return { entries, domains, notes };
+  } catch (err) {
+    notes.push({
+      feed: "factory",
+      message: err instanceof Error ? err.message : String(err)
+    });
+    return { entries: [], domains, notes };
+  }
+}
+function tag(origin, entries) {
+  return entries.map((entry) => ({ origin, entry }));
+}
+async function gatherAssetFeeds(am, projectDir) {
+  const [libs, store] = await Promise.all([libraryAssets(), storeAssets(projectDir)]);
+  const factory = factoryAssets();
+  const src = sourceAssets(am);
+  return {
+    entries: [
+      ...src.entries,
+      ...tag("library", libs.entries),
+      ...tag("factory", factory.entries),
+      ...tag("store", store.entries)
+    ],
+    // Store domains first (server-curated), then the on-disk feeds; dedupe by
+    // slug, first-wins, so a store-served domain shadows a same-slug local one.
+    domains: dedupeBySlug([...store.domains, ...src.domains, ...libs.domains, ...factory.domains]),
+    notes: [...libs.notes, ...store.notes, ...factory.notes]
+  };
+}
+function dedupeBySlug(domains) {
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  for (const d of domains) {
+    if (seen.has(d.slug)) continue;
+    seen.add(d.slug);
+    out.push(d);
+  }
+  return out;
+}
+
+export { gatherAssetFeeds };
+//# sourceMappingURL=asset-feeds-OEGJ6NOF.js.map
+//# sourceMappingURL=asset-feeds-OEGJ6NOF.js.map

package/dist/asset-feeds-OEGJ6NOF.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../cli/src/asset-feeds.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAqFA,SAAS,QAAQ,CAAA,EAAmB;AAClC,EAAA,OAAO,CAAA,CAAE,KAAA,CAAW,IAAA,CAAA,GAAG,CAAA,CAAE,KAAK,GAAG,CAAA;AACnC;AAGA,SAAS,cAAc,IAAA,EAA0B;AAC/C,EAAA,MAAM,MAAkB,EAAC;AACzB,EAAA,KAAA,MAAW,EAAE,IAAA,EAAM,QAAA,EAAU,MAAK,IAAK,OAAA,CAAQ,IAAI,CAAA,EAAG;AACpD,IAAA,IAAI,SAAS,kBAAA,EAAoB;AACjC,IAAA,IAAI;AACF,MAAA,MAAM,EAAE,IAAA,EAAK,GAAI,iBAAiB,YAAA,CAAa,QAAA,EAAU,MAAM,CAAC,CAAA;AAChE,MAAA,GAAA,CAAI,IAAA,CAAK,cAAc,OAAA,CAAa,IAAA,CAAA,QAAA,CAAS,MAAM,QAAQ,CAAC,CAAA,EAAG,IAAI,CAAC,CAAA;AAAA,IACtE,CAAA,CAAA,MAAQ;AAAA,IAAC;AAAA,EACX;AACA,EAAA,OAAO,GAAA;AACT;AAcA,SAAS,YAAA,CACP,IAAA,EACA,YAAA,EACA,OAAA,EACA,qBAAqB,IAAA,EACJ;AACjB,EAAA,MAAM,SAAA,GAAY,cAAc,IAAI,CAAA;AACpC,EAAA,MAAM,WAAA,GAAc,OAAA,CAAQ,GAAA,CAAI,CAAC,KAAA,MAAW;AAAA,IAC1C,KAAA;AAAA,IACA,KAAK,CAAA,EAAG,KAAA,CAAM,IAAI,CAAA,CAAA,EAAI,MAAM,IAAI,CAAA,CAAA;AAAA,IAChC,cAAc,OAAA,CAAa,IAAA,CAAA,QAAA,CAAS,IAAA,EAAM,KAAA,CAAM,MAAM,CAAC;AAAA,GACzD,CAAE,CAAA;AAEF,EAAA,IAAI,YAAA,GAAe,KAAA;AACnB,EAAA,KAAA,MAAW,KAAK,WAAA,EAAa;AAC3B,IAAA,MAAM,IAAA,GAAO,YAAA,CAAa,CAAA,CAAE,YAAA,EAAc,SAAS,CAAA;AACnD,IAAA,IAAI,IAAA,EAAM,CAAA,CAAE,KAAA,CAAM,UAAA,GAAa,IAAA;AAAA,SAAA,IACtB,kBAAA,EAAoB;AAC3B,MAAA,CAAA,CAAE,MAAM,UAAA,GAAa,YAAA;AACrB,MAAA,YAAA,GAAe,IAAA;AAAA,IACjB,CAAA,MAAO,CAAA,CAAE,KAAA,CAAM,UAAA,GAAa,EAAA;AAAA,EAC9B;AAEA,EAAA,MAAM,EAAE,KAAA,EAAM,GAAI,gBAAA,CAAiB,aAAa,SAAS,CAAA;AACzD,EAAA,MAAM,UAA2B,MAAA,CAAO,MAAA,CAAO,KAAK,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,IAChE,MAAM,CAAA,CAAE,IAAA;AAAA,IACR,OAAO,CAAA,CAAE,KAAA;AAAA,IACT,GAAI,EAAE,WAAA,GAAc,EAAE,aAAa,CAAA,CAAE,WAAA,KAAgB,EAAC;AAAA,IACtD,GAAI,EAAE,QAAA,GAAW,EAAE,UAAU,CAAA,CAAE,QAAA,KAAa,EAAC;AAAA,IAC7C,GAAI,EAAE,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,CAAA,CAAE,KAAA,EAAM,GAAI,EAAC;AAAA,IAClD,GAAI,CAAA,CAAE,WAAA,CAAY,CAAC,CAAA,GAAI,EAAE,cAAA,EAAgB,CAAA,CAAE,WAAA,CAAY,CAAC,CAAA,EAAE,GAAI;AAAC,GACjE,CAAE,CAAA;AACF,EAAA,IAAI,YAAA,UAAsB,IAAA,CAAK,EAAE,MAAM,YAAA,EAAc,KAAA,EAAO,cAAc,CAAA;AAC1E,EAAA,OAAO,OAAA;AACT;AASA,eAAe,aAAA,GAIZ;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,MAAM,UAA2B,EAAC;AAClC,EAAA,IAAI;AACF,IAAA,MAAM,CAAC,EAAE,kBAAA,EAAmB,EAAG,EAAE,aAAA,EAAc,EAAG,EAAE,iBAAA,EAAmB,CAAA,GAAI,MAAM,QAAQ,GAAA,CAAI;AAAA,MAC3F,OAAO,4BAAmB,CAAA;AAAA,MAC1B,OAAO,oBAA4B,CAAA;AAAA,MACnC,OAAO,iBAAyB;AAAA,KACjC,CAAA;AACD,IAAA,MAAM,EAAE,OAAA,EAAS,KAAA,EAAM,GAAI,MAAM,kBAAA,EAAmB;AACpD,IAAA,IAAI;AAIF,MAAA,MAAM,UAAU,iBAAA,EAAkB;AAClC,MAAA,MAAM,UAAA,GAAkB,IAAA,CAAA,IAAA,CAAK,aAAA,EAAc,EAAG,SAAS,CAAA;AACvD,MAAA,MAAM,IAAA,GAAA,CAAQ,MAAM,OAAA,CAAQ,aAAA,EAAc,EAAG,MAAA;AAAA,QAC3C,CAAC,CAAA,KAAM,CAAC,CAAA,CAAE,IAAA,CAAK,UAAA,CAAW,OAAO,CAAA,IAAK,CAAC,CAAA,CAAE,IAAA,CAAK,UAAA,CAAW,UAAU;AAAA,OACrE;AACA,MAAA,MAAM,UAA0B,EAAC;AACjC,MAAA,KAAA,MAAW,OAAO,IAAA,EAAM;AACtB,QAAA,IAAI,CAAC,UAAA,CAAW,GAAA,CAAI,IAAI,CAAA,EAAG;AAC3B,QAAA,MAAM,UAAA,GAAa,CAAC,GAAG,QAAA,CAAS,GAAA,CAAI,MAAM,CAAA,QAAA,EAAW,GAAA,CAAI,IAAI,CAAA,CAAE,CAAC,CAAA;AAChE,QAAA,OAAA,CAAQ,IAAA,CAAK,GAAG,YAAA,CAAa,GAAA,CAAI,IAAA,EAAM,WAAW,GAAA,CAAI,IAAI,CAAA,CAAA,EAAI,UAAU,CAAC,CAAA;AACzE,QAAA,OAAA,CAAQ,IAAA,CAAK,GAAG,UAAU,CAAA;AAAA,MAC5B;AACA,MAAA,OAAO,EAAE,OAAA,EAAS,OAAA,EAAS,KAAA,EAAM;AAAA,IACnC,CAAA,SAAE;AACA,MAAA,KAAA,EAAM;AAAA,IACR;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,IAAA,EAAM,WAAA;AAAA,MACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACzD,CAAA;AACD,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,SAAS,KAAA,EAAM;AAAA,EACvC;AACF;AAYA,eAAe,YAAY,UAAA,EAIxB;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AACF,IAAA,MAAM,EAAE,oBAAA,EAAqB,GAAI,MAAM,OAAO,4BAAmB,CAAA;AACjE,IAAA,MAAM,EAAE,QAAQ,KAAA,EAAM,GAAI,MAAM,oBAAA,CAAqB,EAAE,YAAY,CAAA;AACnE,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,UAAA,EAAW;AACvC,MAAA,MAAM,OAAA,GAA0B,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,QACjD,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,IAAA,EAAO,EAAE,IAAA,IAAsB,OAAA;AAAA,QAC/B,WAAA,EAAa,EAAE,WAAA,IAAe,EAAA;AAAA,QAC9B,MAAA,EAAQ,CAAA,QAAA,EAAW,CAAA,CAAE,EAAE,CAAA,CAAA;AAAA,QACvB,WAAW,CAAA,CAAE,SAAA;AAAA,QACb,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,YAAY,CAAA,CAAE,UAAA;AAAA,QACd,UAAU,CAAA,CAAE,QAAA;AAAA,QACZ,SAAS,CAAA,CAAE,OAAA;AAAA,QACX,UAAU,EAAC;AAAA,QACX,cAAc;AAAC,OACjB,CAAE,CAAA;AAIF,MAAA,MAAM,OAAA,GAAU,MAAM,WAAA,CAAY,MAAM,CAAA;AACxC,MAAA,OAAO,EAAE,OAAA,EAAS,OAAA,EAAS,KAAA,EAAM;AAAA,IACnC,CAAA,SAAE;AACA,MAAA,KAAA,EAAM;AAAA,IACR;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,MAAM,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAG3D,IAAA,IAAI,CAAC,QAAA,CAAS,IAAA,CAAK,GAAG,CAAA,EAAG;AACvB,MAAA,KAAA,CAAM,KAAK,EAAE,IAAA,EAAM,OAAA,EAAS,OAAA,EAAS,KAAK,CAAA;AAAA,IAC5C;AACA,IAAA,OAAO,EAAE,OAAA,EAAS,IAAI,OAAA,EAAS,IAAI,KAAA,EAAM;AAAA,EAC3C;AACF;AAGA,eAAe,YAAY,MAAA,EAA2C;AACpE,EAAA,MAAM,KAAM,MAAA,CAA4D,WAAA;AACxE,EAAA,IAAI,OAAO,EAAA,KAAO,UAAA,EAAY,OAAO,EAAC;AACtC,EAAA,MAAM,OAAA,GAAU,MAAM,EAAA,CAAG,IAAA,CAAK,MAAM,CAAA;AACpC,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,OAAO,CAAA,GAAI,UAAU,EAAC;AAC7C;AAcA,SAAS,aAAa,EAAA,EAA4E;AAIhG,EAAA,MAAM,eAAA,GAAkB,iBAAA,EAAkB,CAAE,GAAA,CAAI,CAAC,CAAA,KAAO,CAAA,CAAE,QAAA,CAAc,IAAA,CAAA,GAAG,CAAA,GAAI,CAAA,GAAI,CAAA,GAAS,IAAA,CAAA,GAAI,CAAA;AAChG,EAAA,MAAM,gBAAgB,CAAC,CAAA,KACrB,eAAA,CAAgB,IAAA,CAAK,CAAC,EAAA,KAAO,CAAA,KAAM,EAAA,CAAG,KAAA,CAAM,GAAG,EAAE,CAAA,IAAK,CAAA,CAAE,UAAA,CAAW,EAAE,CAAC,CAAA;AAExE,EAAA,MAAM,GAAA,GAAM,EAAA,CAAG,MAAA,EAAO,CAAE,MAAA,CAAO,CAAC,CAAA,KAAM,CAAC,aAAA,CAAc,CAAA,CAAE,MAAM,CAAC,CAAA;AAC9D,EAAA,MAAM,UAAyB,EAAC;AAChC,EAAA,MAAM,UAA2B,EAAC;AAMlC,EAAA,KAAA,MAAW,EAAE,QAAA,EAAU,IAAA,EAAK,IAAK,EAAA,CAAG,iBAAgB,EAAG;AACrD,IAAA,IAAI,aAAA,CAAc,IAAI,CAAA,EAAG;AACzB,IAAA,MAAM,SAAS,IAAA,CAAK,QAAA,CAAc,IAAA,CAAA,GAAG,CAAA,GAAI,OAAO,IAAA,GAAY,IAAA,CAAA,GAAA;AAC5D,IAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,MAAA,KAAW,IAAA,IAAQ,CAAA,CAAE,MAAA,CAAO,UAAA,CAAW,MAAM,CAAC,CAAA;AAChF,IAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG;AACxB,IAAA,MAAM,aAAa,QAAA,CAAS,KAAA,CAAM,GAAG,CAAA,CAAE,KAAI,IAAK,QAAA;AAGhD,IAAA,OAAA,CAAQ,KAAK,GAAG,YAAA,CAAa,MAAM,UAAA,EAAY,KAAA,EAAO,KAAK,CAAC,CAAA;AAC5D,IAAA,KAAA,MAAW,KAAA,IAAS,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,EAAE,QAAQ,QAAA,EAAU,KAAA,EAAO,KAAA,EAAO,UAAA,EAAY,CAAA;AAAA,EACxF;AACA,EAAA,OAAO,EAAE,SAAS,OAAA,EAAQ;AAC5B;AAUA,SAAS,aAAA,GAA0F;AACjG,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,MAAM,UAA2B,EAAC;AAClC,EAAA,IAAI;AACF,IAAA,MAAM,UAA0B,EAAC;AACjC,IAAA,KAAA,MAAW,IAAA,IAAQ,mBAAkB,EAAG;AACtC,MAAA,MAAM,cAAc,CAAC,GAAG,QAAA,CAAS,IAAA,EAAM,gBAAgB,CAAC,CAAA;AACxD,MAAA,OAAA,CAAQ,KAAK,GAAG,YAAA,CAAa,IAAA,EAAM,gBAAA,EAAkB,WAAW,CAAC,CAAA;AACjE,MAAA,OAAA,CAAQ,IAAA,CAAK,GAAG,WAAW,CAAA;AAAA,IAC7B;AACA,IAAA,OAAO,EAAE,OAAA,EAAS,OAAA,EAAS,KAAA,EAAM;AAAA,EACnC,SAAS,GAAA,EAAK;AACZ,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,IAAA,EAAM,SAAA;AAAA,MACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACzD,CAAA;AACD,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,SAAS,KAAA,EAAM;AAAA,EACvC;AACF;AAGA,SAAS,GAAA,CAAI,QAAqB,OAAA,EAAwC;AACxE,EAAA,OAAO,QAAQ,GAAA,CAAI,CAAC,WAAW,EAAE,MAAA,EAAQ,OAAM,CAAE,CAAA;AACnD;AASA,eAAsB,gBAAA,CACpB,IACA,UAAA,EAC0B;AAC1B,EAAA,MAAM,CAAC,IAAA,EAAM,KAAK,CAAA,GAAI,MAAM,OAAA,CAAQ,GAAA,CAAI,CAAC,aAAA,EAAc,EAAG,WAAA,CAAY,UAAU,CAAC,CAAC,CAAA;AAClF,EAAA,MAAM,UAAU,aAAA,EAAc;AAC9B,EAAA,MAAM,GAAA,GAAM,aAAa,EAAE,CAAA;AAC3B,EAAA,OAAO;AAAA,IACL,OAAA,EAAS;AAAA,MACP,GAAG,GAAA,CAAI,OAAA;AAAA,MACP,GAAG,GAAA,CAAI,SAAA,EAAW,IAAA,CAAK,OAAO,CAAA;AAAA,MAC9B,GAAG,GAAA,CAAI,SAAA,EAAW,OAAA,CAAQ,OAAO,CAAA;AAAA,MACjC,GAAG,GAAA,CAAI,OAAA,EAAS,KAAA,CAAM,OAAO;AAAA,KAC/B;AAAA;AAAA;AAAA,IAGA,OAAA,EAAS,YAAA,CAAa,CAAC,GAAG,MAAM,OAAA,EAAS,GAAG,GAAA,CAAI,OAAA,EAAS,GAAG,IAAA,CAAK,OAAA,EAAS,GAAG,OAAA,CAAQ,OAAO,CAAC,CAAA;AAAA,IAC7F,KAAA,EAAO,CAAC,GAAG,IAAA,CAAK,KAAA,EAAO,GAAG,KAAA,CAAM,KAAA,EAAO,GAAG,OAAA,CAAQ,KAAK;AAAA,GACzD;AACF;AAGA,SAAS,aAAa,OAAA,EAA2C;AAC/D,EAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAC7B,EAAA,MAAM,MAAuB,EAAC;AAC9B,EAAA,KAAA,MAAW,KAAK,OAAA,EAAS;AACvB,IAAA,IAAI,IAAA,CAAK,GAAA,CAAI,CAAA,CAAE,IAAI,CAAA,EAAG;AACtB,IAAA,IAAA,CAAK,GAAA,CAAI,EAAE,IAAI,CAAA;AACf,IAAA,GAAA,CAAI,KAAK,CAAC,CAAA;AAAA,EACZ;AACA,EAAA,OAAO,GAAA;AACT","file":"asset-feeds-OEGJ6NOF.js","sourcesContent":["/**\n * asset-feeds.ts — gather installable assets from every feed the manage TUI\n * surfaces.\n *\n * Four feeds, normalized into `CatalogEntry`:\n * - **Project sources** — `skaile.yaml` `sources:` entries (scanned via\n *   `AssetManager.search()`; the new `sources:` field is merged into the\n *   legacy repositories map in `AssetManager.loadConfig`).\n * - **Local libraries** — user authoring places from `LocalIndex` (filesystem\n *   scan of each library's `path`).\n * - **Factory assets** — the bundled first-party `factory-assets` tree\n *   (`factoryAssetRoots()`), scanned from disk. Always present; no network.\n * - **Remote store** — the configured catalog source when `catalog.url` is\n *   not `local`. Failures are non-fatal — they surface as notes.\n */\n\nimport { existsSync, readFileSync } from \"node:fs\";\nimport * as path from \"node:path\";\nimport {\n  type AssetKind,\n  type CatalogDomain,\n  type CatalogEntry,\n  factoryAssetRoots,\n  parseFrontmatter,\n  scanRepo,\n  walkDir,\n} from \"@skaile/workspaces/core\";\nimport {\n  assignDomain,\n  buildDomainIndex,\n  DOMAIN_MD_FILENAME,\n  type DomainMd,\n  parseDomainMd,\n} from \"@skaile/workspaces/discovery\";\n\n/** One non-fatal note returned to the caller for surfacing in the UI. */\nexport interface FeedNote {\n  feed: \"sources\" | \"libraries\" | \"store\" | \"factory\";\n  message: string;\n}\n\n/**\n * Which feed an asset came from. This is the top-level grouping axis in the\n * manage TUI (\"where is this skill coming from?\") and is intentionally distinct\n * from `publisher` (asset-intrinsic identity): the same publisher can legitimately\n * appear under more than one origin (e.g. a github repo you added as a `source`\n * that is also listed in the remote `store`).\n */\nexport type AssetOrigin = \"source\" | \"library\" | \"factory\" | \"store\";\n\n/** A catalog entry tagged with the feed it was gathered from. */\nexport interface OriginEntry {\n  origin: AssetOrigin;\n  entry: CatalogEntry;\n  /**\n   * Second-level grouping label for the manage tree. Defaults (when unset) to the\n   * entry's `publisher`; the source feed sets it to the source's short repo name\n   * so the Sources band groups by source — \"which repo did this come from\" — not\n   * by the asset-intrinsic publisher.\n   */\n  group?: string;\n}\n\nexport interface AssetFeedResult {\n  entries: OriginEntry[];\n  /**\n   * Display-only domain metadata, keyed (by the consumer) on `slug`. Populated\n   * from the store's `catalog.listDomains` when the connected catalog source\n   * exposes it; empty otherwise. The manage TUI joins `entry.domainSlug` → a\n   * domain for grouping headers, descriptions, and relation badges.\n   */\n  domains: CatalogDomain[];\n  notes: FeedNote[];\n}\n\n// ── Domain stamping (on-disk feeds) ──────────────────────────────────────────\n//\n// `scanRepo` (the source / library / factory scan path) does not read the\n// `DOMAIN.md` sidecars, so its entries arrive with no `domainSlug` and render\n// flat under their publisher band. We re-derive the grouping here from the\n// root's `DOMAIN.md` files (the same sidecars the remote store computes\n// server-side), and fall back to the repo/source name for any entry no domain\n// claims so it still groups instead of landing in the synthetic \"no domain\" pile.\n\n/** Repo-relative POSIX path (DOMAIN.md slugs are matched whole-segment, `/`-joined). */\nfunction toPosix(p: string): string {\n  return p.split(path.sep).join(\"/\");\n}\n\n/** Parse every `DOMAIN.md` sidecar under `root` into a {@link DomainMd}. */\nfunction loadDomainMds(root: string): DomainMd[] {\n  const out: DomainMd[] = [];\n  for (const { path: filePath, name } of walkDir(root)) {\n    if (name !== DOMAIN_MD_FILENAME) continue;\n    try {\n      const { data } = parseFrontmatter(readFileSync(filePath, \"utf8\"));\n      out.push(parseDomainMd(toPosix(path.relative(root, filePath)), data));\n    } catch {}\n  }\n  return out;\n}\n\n/**\n * Stamp `domainSlug` onto every entry scanned from `root` using the root's\n * `DOMAIN.md` sidecars. Returns the `CatalogDomain` registry for the real\n * domains, plus a synthetic fallback domain when any entry used the fallback.\n * Mutates `entries` in place (sets `entry.domainSlug`).\n *\n * `synthesizeFallback` (default true): entries no domain claims fall back to\n * `fallbackSlug` (the repo/source name). Pass `false` when the caller already\n * groups these entries one level up (e.g. the source feed groups by source\n * node) — unmatched entries then get no domain (`\"\"`) and hang directly under\n * that parent, instead of nesting under a same-named fallback domain.\n */\nfunction stampDomains(\n  root: string,\n  fallbackSlug: string,\n  entries: CatalogEntry[],\n  synthesizeFallback = true,\n): CatalogDomain[] {\n  const domainMds = loadDomainMds(root);\n  const assignables = entries.map((entry) => ({\n    entry,\n    ref: `${entry.kind}:${entry.name}`,\n    relativePath: toPosix(path.relative(root, entry.source)),\n  }));\n\n  let usedFallback = false;\n  for (const a of assignables) {\n    const slug = assignDomain(a.relativePath, domainMds);\n    if (slug) a.entry.domainSlug = slug;\n    else if (synthesizeFallback) {\n      a.entry.domainSlug = fallbackSlug;\n      usedFallback = true;\n    } else a.entry.domainSlug = \"\";\n  }\n\n  const { index } = buildDomainIndex(assignables, domainMds);\n  const catalog: CatalogDomain[] = Object.values(index).map((d) => ({\n    slug: d.slug,\n    title: d.title,\n    ...(d.description ? { description: d.description } : {}),\n    ...(d.relation ? { relation: d.relation } : {}),\n    ...(d.order !== undefined ? { order: d.order } : {}),\n    ...(d.recommended[0] ? { recommendedRef: d.recommended[0] } : {}),\n  }));\n  if (usedFallback) catalog.push({ slug: fallbackSlug, title: fallbackSlug });\n  return catalog;\n}\n\n/**\n * Pull assets from local libraries (the authoring places under\n * `~/.skaile/libraries/<name>/`, not the `~/.skaile/cache/sources/` cache). Each\n * library's `path` is scanned with `scanRepo` and tagged with\n * `repository = \"library:<name>\"` so the manage TUI groups them into their\n * own headers.\n */\nasync function libraryAssets(): Promise<{\n  entries: CatalogEntry[];\n  domains: CatalogDomain[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  const domains: CatalogDomain[] = [];\n  try {\n    const [{ openLibraryManager }, { skaileHomeDir }, { getGlobalCacheDir }] = await Promise.all([\n      import(\"./open-library.ts\"),\n      import(\"@skaile/workspaces/library\"),\n      import(\"@skaile/workspaces/core\"),\n    ]);\n    const { manager, close } = await openLibraryManager();\n    try {\n      // Authoring libraries are the rows that are NOT source clones. index.db\n      // rows predating the cache migration still carry the legacy\n      // ~/.skaile/sources path, so exclude both roots.\n      const newRoot = getGlobalCacheDir();\n      const legacyRoot = path.join(skaileHomeDir(), \"sources\");\n      const libs = (await manager.listLibraries()).filter(\n        (l) => !l.path.startsWith(newRoot) && !l.path.startsWith(legacyRoot),\n      );\n      const entries: CatalogEntry[] = [];\n      for (const lib of libs) {\n        if (!existsSync(lib.path)) continue;\n        const libEntries = [...scanRepo(lib.path, `library:${lib.name}`)];\n        domains.push(...stampDomains(lib.path, `library:${lib.name}`, libEntries));\n        entries.push(...libEntries);\n      }\n      return { entries, domains, notes };\n    } finally {\n      close();\n    }\n  } catch (err) {\n    notes.push({\n      feed: \"libraries\",\n      message: err instanceof Error ? err.message : String(err),\n    });\n    return { entries: [], domains, notes };\n  }\n}\n\n/**\n * Pull a (best-effort) snapshot of the connected remote store catalog.\n *\n * - Returns no entries when the resolved catalog is local-only or the host\n *   is unreachable (the failure becomes a note, not an exception).\n * - Maps `CatalogAsset` → `CatalogEntry`, carrying `publisher`, `repo`, and\n *   `category` straight through and using `source = \"store://<id>\"`; per-file\n *   `source` paths are not available for remote assets so the canonical ref is\n *   a stable placeholder.\n */\nasync function storeAssets(projectDir: string): Promise<{\n  entries: CatalogEntry[];\n  domains: CatalogDomain[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    const { resolveCatalogSource } = await import(\"./open-library.ts\");\n    const { source, close } = await resolveCatalogSource({ projectDir });\n    try {\n      const assets = await source.listAssets();\n      const entries: CatalogEntry[] = assets.map((a) => ({\n        name: a.name,\n        kind: (a.kind as AssetKind) ?? \"skill\",\n        description: a.description ?? \"\",\n        source: `store://${a.id}`,\n        publisher: a.publisher,\n        repo: a.repo,\n        domainSlug: a.domainSlug,\n        category: a.category,\n        version: a.version,\n        requires: [],\n        dependencies: [],\n      }));\n      // Domains are optional on the catalog source — only the store backend\n      // (post Part 4 `catalog.listDomains`) exposes them. Duck-type the call so\n      // older sources and the local catalog degrade to no domains, not an error.\n      const domains = await loadDomains(source);\n      return { entries, domains, notes };\n    } finally {\n      close();\n    }\n  } catch (err) {\n    const msg = err instanceof Error ? err.message : String(err);\n    // Local-only catalog throws a recognizable message — silence it; absence\n    // is the user's choice, not an error.\n    if (!/local/i.test(msg)) {\n      notes.push({ feed: \"store\", message: msg });\n    }\n    return { entries: [], domains: [], notes };\n  }\n}\n\n/** Optional `listDomains` capability — returns `[]` when the source lacks it. */\nasync function loadDomains(source: unknown): Promise<CatalogDomain[]> {\n  const fn = (source as { listDomains?: () => Promise<CatalogDomain[]> }).listDomains;\n  if (typeof fn !== \"function\") return [];\n  const domains = await fn.call(source);\n  return Array.isArray(domains) ? domains : [];\n}\n\n/** The slice of `AssetManager` the source feed needs (kept narrow for tests). */\ninterface AssetManagerLike {\n  search: () => CatalogEntry[];\n  searchRepoRoots: () => { repoName: string; root: string }[];\n}\n\n/**\n * Project-source feed: leans on `AssetManager.search()`, which now merges\n * `skaile.yaml`'s `sources:` field into the repositories map, then stamps\n * `DOMAIN.md`-derived domain grouping onto the scanned entries via\n * `searchRepoRoots()`.\n */\nfunction sourceAssets(am: AssetManagerLike): { entries: OriginEntry[]; domains: CatalogDomain[] } {\n  // The bundled factory tree is injected into the repositories map as an implicit\n  // source, so `am.search()` returns it too. It has its own `factory` origin band,\n  // so drop it here — otherwise the same first-party skills list twice under Sources.\n  const factoryPrefixes = factoryAssetRoots().map((r) => (r.endsWith(path.sep) ? r : r + path.sep));\n  const isFactoryPath = (p: string) =>\n    factoryPrefixes.some((fp) => p === fp.slice(0, -1) || p.startsWith(fp));\n\n  const all = am.search().filter((e) => !isFactoryPath(e.source));\n  const entries: OriginEntry[] = [];\n  const domains: CatalogDomain[] = [];\n  // Group each source's entries under the source node (its short repo name), not\n  // the publisher: under Sources the navigational question is \"which repo did\n  // this come from\". Each entry's `source` (absolute manifest path) lives under\n  // exactly one declared root, so group + stamp by prefix. The cache slug is\n  // URL-keyed `github.com/<org>/<repo>` — take the trailing segment.\n  for (const { repoName, root } of am.searchRepoRoots()) {\n    if (isFactoryPath(root)) continue;\n    const prefix = root.endsWith(path.sep) ? root : root + path.sep;\n    const owned = all.filter((e) => e.source === root || e.source.startsWith(prefix));\n    if (owned.length === 0) continue;\n    const sourceName = repoName.split(\"/\").pop() || repoName;\n    // No synthetic fallback domain — the source node already groups these, so a\n    // same-named fallback would just nest the source under itself.\n    domains.push(...stampDomains(root, sourceName, owned, false));\n    for (const entry of owned) entries.push({ origin: \"source\", entry, group: sourceName });\n  }\n  return { entries, domains };\n}\n\n/**\n * Factory-asset feed: scan the bundled first-party `factory-assets` tree(s)\n * resolved by `factoryAssetRoots()` (the `SKAILE_FACTORY_ASSETS_DIR` override\n * layer ahead of the bundled tree). Synchronous, no network — the entries are\n * the built-in skills / connectors / bundles that ship with `@skaile/workspaces`.\n * `factoryAssetRoots()` already dedupes, so the env override pointing at the\n * bundled dir collapses to one root.\n */\nfunction factoryAssets(): { entries: CatalogEntry[]; domains: CatalogDomain[]; notes: FeedNote[] } {\n  const notes: FeedNote[] = [];\n  const domains: CatalogDomain[] = [];\n  try {\n    const entries: CatalogEntry[] = [];\n    for (const root of factoryAssetRoots()) {\n      const rootEntries = [...scanRepo(root, \"skaile-factory\")];\n      domains.push(...stampDomains(root, \"skaile-factory\", rootEntries));\n      entries.push(...rootEntries);\n    }\n    return { entries, domains, notes };\n  } catch (err) {\n    notes.push({\n      feed: \"factory\",\n      message: err instanceof Error ? err.message : String(err),\n    });\n    return { entries: [], domains, notes };\n  }\n}\n\n/** Tag a flat entry list with a single origin. */\nfunction tag(origin: AssetOrigin, entries: CatalogEntry[]): OriginEntry[] {\n  return entries.map((entry) => ({ origin, entry }));\n}\n\n/**\n * Run all feeds and return a single normalized result.\n *\n * Feeds run in parallel where possible — the store fetch is the slow one\n * (one HTTP call) and is fired alongside the local library walk. The factory\n * scan is local + synchronous, so it runs inline.\n */\nexport async function gatherAssetFeeds(\n  am: AssetManagerLike,\n  projectDir: string,\n): Promise<AssetFeedResult> {\n  const [libs, store] = await Promise.all([libraryAssets(), storeAssets(projectDir)]);\n  const factory = factoryAssets();\n  const src = sourceAssets(am);\n  return {\n    entries: [\n      ...src.entries,\n      ...tag(\"library\", libs.entries),\n      ...tag(\"factory\", factory.entries),\n      ...tag(\"store\", store.entries),\n    ],\n    // Store domains first (server-curated), then the on-disk feeds; dedupe by\n    // slug, first-wins, so a store-served domain shadows a same-slug local one.\n    domains: dedupeBySlug([...store.domains, ...src.domains, ...libs.domains, ...factory.domains]),\n    notes: [...libs.notes, ...store.notes, ...factory.notes],\n  };\n}\n\n/** First-wins dedupe of a domain list by `slug`. */\nfunction dedupeBySlug(domains: CatalogDomain[]): CatalogDomain[] {\n  const seen = new Set<string>();\n  const out: CatalogDomain[] = [];\n  for (const d of domains) {\n    if (seen.has(d.slug)) continue;\n    seen.add(d.slug);\n    out.push(d);\n  }\n  return out;\n}\n"]}

package/dist/asset-manager/index.js

@@ -1,14 +1,14 @@
-export { AssetManager, MissingManifestError, NON_DEPLOYABLE_KINDS, parseCanonicalLockKey } from '../chunk-C5RYGUF4.js';
-export { createScaffold, deployAll, installAgent, removeAsset } from '../chunk-2Y4HIITD.js';
-import '../chunk-SDAKQCOB.js';
+export { AssetManager, MissingManifestError, NON_DEPLOYABLE_KINDS, parseCanonicalLockKey } from '../chunk-TCNYSHPM.js';
+export { createScaffold, deployAll, installAgent, removeAsset } from '../chunk-7ZWLZ5H3.js';
+import '../chunk-3KPNDTMR.js';
 import '../chunk-ZAP2BDHG.js';
-import '../chunk-WBF7JLTY.js';
-import '../chunk-PBO6SCT2.js';
+import '../chunk-W53D5Q52.js';
+import '../chunk-NXC6IEL4.js';
 import '../chunk-DZCK7GRW.js';
-import '../chunk-6IDBWPK2.js';
+import '../chunk-BQCGFPHW.js';
 import '../chunk-GEEW6SY2.js';
-import '../chunk-XGCXFX7X.js';
-import '../chunk-O4JH3KUE.js';
+import '../chunk-F3HNW354.js';
+import '../chunk-MENCWIHW.js';
 import '../chunk-K5GBV4SA.js';
 import '../chunk-JB35MVBN.js';
 export { appendHistory, clearHistory, getRecentHistory, loadHistory } from '../chunk-KTBKW2FI.js';

package/dist/asset-manager/installer.js

@@ -1,13 +1,13 @@
-export { createScaffold, deployAll, deployAsset, removeAsset } from '../chunk-2Y4HIITD.js';
-import '../chunk-SDAKQCOB.js';
+export { createScaffold, deployAll, deployAsset, removeAsset } from '../chunk-7ZWLZ5H3.js';
+import '../chunk-3KPNDTMR.js';
 import '../chunk-ZAP2BDHG.js';
-import '../chunk-WBF7JLTY.js';
-import '../chunk-PBO6SCT2.js';
+import '../chunk-W53D5Q52.js';
+import '../chunk-NXC6IEL4.js';
 import '../chunk-DZCK7GRW.js';
-import '../chunk-6IDBWPK2.js';
+import '../chunk-BQCGFPHW.js';
 import '../chunk-GEEW6SY2.js';
-import '../chunk-XGCXFX7X.js';
-import '../chunk-O4JH3KUE.js';
+import '../chunk-F3HNW354.js';
+import '../chunk-MENCWIHW.js';
 import '../chunk-K5GBV4SA.js';
 import '../chunk-JB35MVBN.js';
 import '../chunk-WRBF34YE.js';