@skaile/workspaces 0.8.5 → 0.9.1

package/dist/discovery/src/source-config.d.ts

@@ -8,35 +8,16 @@ import * as z from "zod";
  */
 export declare const SEMVER_RE: RegExp;
 declare const PublisherOverrideSchema: z.ZodObject<{
-    /** Relative path within the repo (trailing slash convention). */
     path: z.ZodString;
-    /** Publisher namespace override for assets under this path. */
     publisher: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    path: string;
-    publisher: string;
-}, {
-    path: string;
-    publisher: string;
-}>;
-declare const SyncConfigSchema: z.ZodEffects<z.ZodObject<{
-    /** How the catalog backend learns about repo changes. */
-    trigger: z.ZodDefault<z.ZodEnum<["webhook", "poll"]>>;
-    /** Seconds between polls. Required when trigger=poll. */
+}, z.core.$strip>;
+declare const SyncConfigSchema: z.ZodObject<{
+    trigger: z.ZodDefault<z.ZodEnum<{
+        poll: "poll";
+        webhook: "webhook";
+    }>>;
     poll_interval: z.ZodOptional<z.ZodNumber>;
-}, "strip", z.ZodTypeAny, {
-    trigger: "poll" | "webhook";
-    poll_interval?: number | undefined;
-}, {
-    trigger?: "poll" | "webhook" | undefined;
-    poll_interval?: number | undefined;
-}>, {
-    trigger: "poll" | "webhook";
-    poll_interval?: number | undefined;
-}, {
-    trigger?: "poll" | "webhook" | undefined;
-    poll_interval?: number | undefined;
-}>;
+}, z.core.$strip>;
 /**
  * Single entry in the author-shipped inventory (the `assets:` block of a
  * `.skaile-source.yaml` with `version: 2`).
@@ -48,48 +29,16 @@ declare const SyncConfigSchema: z.ZodEffects<z.ZodObject<{
  * @docLink packages/discovery/concepts#author-manifest-asset-entry
  */
 declare const AssetEntrySchema: z.ZodObject<{
-    /** Relative path within the repo (directory or file). */
     path: z.ZodString;
-    /** Asset kind — validated against `IAssetKindRegistry` at discovery time. */
     kind: z.ZodString;
-    /** Publisher namespace. Required per entry; overrides publisher_default / _overrides. */
     publisher: z.ZodString;
-    /** Asset name. Identity tuple is `<publisher>/<name>@<version>`. */
     name: z.ZodString;
-    /** Semver version string. */
     version: z.ZodString;
-    /**
-     * Hex-encoded SHA256 hash of the deterministic tarball contents.
-     * Optional on write, REQUIRED on Catalog publish (Phase 4).
-     */
     sha256: z.ZodOptional<z.ZodString>;
-    /** Curated file filter (paths relative to `path:`). At least one entry. */
-    files: z.ZodArray<z.ZodString, "many">;
-    /** Author-declared requires-graph entries. */
-    requires: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
-    /** Optional passthrough to `AssetDefinition.manifest`. */
+    files: z.ZodArray<z.ZodString>;
+    requires: z.ZodDefault<z.ZodArray<z.ZodString>>;
     metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-}, "strip", z.ZodTypeAny, {
-    name: string;
-    kind: string;
-    version: string;
-    requires: string[];
-    path: string;
-    publisher: string;
-    files: string[];
-    metadata?: Record<string, unknown> | undefined;
-    sha256?: string | undefined;
-}, {
-    name: string;
-    kind: string;
-    version: string;
-    path: string;
-    publisher: string;
-    files: string[];
-    requires?: string[] | undefined;
-    metadata?: Record<string, unknown> | undefined;
-    sha256?: string | undefined;
-}>;
+}, z.core.$strip>;
 /**
  * Root schema for `.skaile-source.yaml`.
  *
@@ -104,191 +53,33 @@ declare const AssetEntrySchema: z.ZodObject<{
  *
  * @docLink packages/discovery/concepts#source-config-schema
  */
-export declare const SourceConfigSchema: z.ZodEffects<z.ZodObject<{
-    /** Schema version. `1` (glob mode) or `2` (allows `assets:` block). */
-    version: z.ZodUnion<[z.ZodLiteral<1>, z.ZodLiteral<2>]>;
-    /**
-     * Default publisher namespace template.
-     * Use `@<domain>` to derive from first-level directory name.
-     * Use a literal like `@skaile` if the entire repo maps to one publisher.
-     */
-    publisher_default: z.ZodEffects<z.ZodString, string, string>;
-    /** Default git ref for version resolution. */
+export declare const SourceConfigSchema: z.ZodObject<{
+    version: z.ZodUnion<readonly [z.ZodLiteral<1>, z.ZodLiteral<2>]>;
+    publisher_default: z.ZodString;
     default_ref: z.ZodDefault<z.ZodString>;
-    /** Per-path publisher overrides. Evaluated in order; first match wins. */
     publisher_overrides: z.ZodDefault<z.ZodArray<z.ZodObject<{
-        /** Relative path within the repo (trailing slash convention). */
         path: z.ZodString;
-        /** Publisher namespace override for assets under this path. */
         publisher: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        path: string;
-        publisher: string;
-    }, {
-        path: string;
-        publisher: string;
-    }>, "many">>;
-    /** Optional sync configuration for the catalog backend. */
-    sync: z.ZodOptional<z.ZodEffects<z.ZodObject<{
-        /** How the catalog backend learns about repo changes. */
-        trigger: z.ZodDefault<z.ZodEnum<["webhook", "poll"]>>;
-        /** Seconds between polls. Required when trigger=poll. */
+    }, z.core.$strip>>>;
+    sync: z.ZodOptional<z.ZodObject<{
+        trigger: z.ZodDefault<z.ZodEnum<{
+            poll: "poll";
+            webhook: "webhook";
+        }>>;
         poll_interval: z.ZodOptional<z.ZodNumber>;
-    }, "strip", z.ZodTypeAny, {
-        trigger: "poll" | "webhook";
-        poll_interval?: number | undefined;
-    }, {
-        trigger?: "poll" | "webhook" | undefined;
-        poll_interval?: number | undefined;
-    }>, {
-        trigger: "poll" | "webhook";
-        poll_interval?: number | undefined;
-    }, {
-        trigger?: "poll" | "webhook" | undefined;
-        poll_interval?: number | undefined;
-    }>>;
-    /**
-     * Optional author-shipped asset inventory. When present, discovery uses
-     * these entries verbatim and skips glob walk + AI enrichment.
-     *
-     * Requires `version: 2`.
-     */
+    }, z.core.$strip>>;
     assets: z.ZodOptional<z.ZodArray<z.ZodObject<{
-        /** Relative path within the repo (directory or file). */
         path: z.ZodString;
-        /** Asset kind — validated against `IAssetKindRegistry` at discovery time. */
         kind: z.ZodString;
-        /** Publisher namespace. Required per entry; overrides publisher_default / _overrides. */
         publisher: z.ZodString;
-        /** Asset name. Identity tuple is `<publisher>/<name>@<version>`. */
         name: z.ZodString;
-        /** Semver version string. */
         version: z.ZodString;
-        /**
-         * Hex-encoded SHA256 hash of the deterministic tarball contents.
-         * Optional on write, REQUIRED on Catalog publish (Phase 4).
-         */
         sha256: z.ZodOptional<z.ZodString>;
-        /** Curated file filter (paths relative to `path:`). At least one entry. */
-        files: z.ZodArray<z.ZodString, "many">;
-        /** Author-declared requires-graph entries. */
-        requires: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
-        /** Optional passthrough to `AssetDefinition.manifest`. */
+        files: z.ZodArray<z.ZodString>;
+        requires: z.ZodDefault<z.ZodArray<z.ZodString>>;
         metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-    }, "strip", z.ZodTypeAny, {
-        name: string;
-        kind: string;
-        version: string;
-        requires: string[];
-        path: string;
-        publisher: string;
-        files: string[];
-        metadata?: Record<string, unknown> | undefined;
-        sha256?: string | undefined;
-    }, {
-        name: string;
-        kind: string;
-        version: string;
-        path: string;
-        publisher: string;
-        files: string[];
-        requires?: string[] | undefined;
-        metadata?: Record<string, unknown> | undefined;
-        sha256?: string | undefined;
-    }>, "many">>;
-}, "strip", z.ZodTypeAny, {
-    version: 1 | 2;
-    publisher_default: string;
-    default_ref: string;
-    publisher_overrides: {
-        path: string;
-        publisher: string;
-    }[];
-    sync?: {
-        trigger: "poll" | "webhook";
-        poll_interval?: number | undefined;
-    } | undefined;
-    assets?: {
-        name: string;
-        kind: string;
-        version: string;
-        requires: string[];
-        path: string;
-        publisher: string;
-        files: string[];
-        metadata?: Record<string, unknown> | undefined;
-        sha256?: string | undefined;
-    }[] | undefined;
-}, {
-    version: 1 | 2;
-    publisher_default: string;
-    sync?: {
-        trigger?: "poll" | "webhook" | undefined;
-        poll_interval?: number | undefined;
-    } | undefined;
-    default_ref?: string | undefined;
-    publisher_overrides?: {
-        path: string;
-        publisher: string;
-    }[] | undefined;
-    assets?: {
-        name: string;
-        kind: string;
-        version: string;
-        path: string;
-        publisher: string;
-        files: string[];
-        requires?: string[] | undefined;
-        metadata?: Record<string, unknown> | undefined;
-        sha256?: string | undefined;
-    }[] | undefined;
-}>, {
-    version: 1 | 2;
-    publisher_default: string;
-    default_ref: string;
-    publisher_overrides: {
-        path: string;
-        publisher: string;
-    }[];
-    sync?: {
-        trigger: "poll" | "webhook";
-        poll_interval?: number | undefined;
-    } | undefined;
-    assets?: {
-        name: string;
-        kind: string;
-        version: string;
-        requires: string[];
-        path: string;
-        publisher: string;
-        files: string[];
-        metadata?: Record<string, unknown> | undefined;
-        sha256?: string | undefined;
-    }[] | undefined;
-}, {
-    version: 1 | 2;
-    publisher_default: string;
-    sync?: {
-        trigger?: "poll" | "webhook" | undefined;
-        poll_interval?: number | undefined;
-    } | undefined;
-    default_ref?: string | undefined;
-    publisher_overrides?: {
-        path: string;
-        publisher: string;
-    }[] | undefined;
-    assets?: {
-        name: string;
-        kind: string;
-        version: string;
-        path: string;
-        publisher: string;
-        files: string[];
-        requires?: string[] | undefined;
-        metadata?: Record<string, unknown> | undefined;
-        sha256?: string | undefined;
-    }[] | undefined;
-}>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
 /**
  * Validated configuration derived from `.skaile-source.yaml`.
  *

package/dist/discovery/src/source-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"source-config.d.ts","sourceRoot":"","sources":["../../../discovery/src/source-config.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAOzB;;;;;;GAMG;AACH,eAAO,MAAM,SAAS,QAA6D,CAAC;AAMpF,QAAA,MAAM,uBAAuB;IAC3B,iEAAiE;;IAEjE,+DAA+D;;;;;;;;EAI/D,CAAC;AAEH,QAAA,MAAM,gBAAgB;IAElB,yDAAyD;;IAEzD,yDAAyD;;;;;;;;;;;;;;EAMzD,CAAC;AAEL;;;;;;;;;GASG;AACH,QAAA,MAAM,gBAAgB;IACpB,yDAAyD;;IAEzD,6EAA6E;;IAE7E,yFAAyF;;IAIzF,oEAAoE;;IAEpE,6BAA6B;;IAE7B;;;OAGG;;IAKH,2EAA2E;;IAE3E,8CAA8C;;IAE9C,0DAA0D;;;;;;;;;;;;;;;;;;;;;;EAE1D,CAAC;AAEH;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,kBAAkB;IAE3B,uEAAuE;;IAGvE;;;;OAIG;;IAMH,8CAA8C;;IAG9C,0EAA0E;;QA3F5E,iEAAiE;;QAEjE,+DAA+D;;;;;;;;;IA4F7D,2DAA2D;;QApF3D,yDAAyD;;QAEzD,yDAAyD;;;;;;;;;;;;;;;IAqFzD;;;;;OAKG;;QAvEL,yDAAyD;;QAEzD,6EAA6E;;QAE7E,yFAAyF;;QAIzF,oEAAoE;;QAEpE,6BAA6B;;QAE7B;;;WAGG;;QAKH,2EAA2E;;QAE3E,8CAA8C;;QAE9C,0DAA0D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAqDxD,CAAC;AAML;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG;IAAE,OAAO,EAAE,CAAC,CAAC;IAAC,MAAM,EAAE,UAAU,EAAE,CAAA;CAAE,CAAC;AAEjF;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D;;;;;;GAMG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAM1D;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,YAAY,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAClD;AAED;;;;;;GAMG;AACH,MAAM,MAAM,gBAAgB,GAAG,iBAAiB,GAAG,iBAAiB,CAAC;AAErE;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,OAAO,GAAG,gBAAgB,CAetE;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,gBAAgB,CAGnE;AAMD;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,IAAI,cAAc,CAE7E;AAgBD;;;;;;GAMG;AACH,MAAM,MAAM,kBAAkB,GAAG,YAAY,CAAC;AAE9C;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,YAAY,GAAG,SAAS,EAC9B,OAAO,EAAE,YAAY,GAAG,SAAS,GAChC,kBAAkB,GAAG,SAAS,CAuChC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,gBAAgB,CAoC/F"}
+{"version":3,"file":"source-config.d.ts","sourceRoot":"","sources":["../../../discovery/src/source-config.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAOzB;;;;;;GAMG;AACH,eAAO,MAAM,SAAS,QAA6D,CAAC;AAMpF,QAAA,MAAM,uBAAuB;;;iBAO3B,CAAC;AAEH,QAAA,MAAM,gBAAgB;;;;;;iBAUlB,CAAC;AAEL;;;;;;;;;GASG;AACH,QAAA,MAAM,gBAAgB;;;;;;;;;;iBA2BpB,CAAC;AAEH;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;iBAmC3B,CAAC;AAML;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG;IAAE,OAAO,EAAE,CAAC,CAAC;IAAC,MAAM,EAAE,UAAU,EAAE,CAAA;CAAE,CAAC;AAEjF;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D;;;;;;GAMG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAM1D;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,YAAY,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAClD;AAED;;;;;;GAMG;AACH,MAAM,MAAM,gBAAgB,GAAG,iBAAiB,GAAG,iBAAiB,CAAC;AAErE;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,OAAO,GAAG,gBAAgB,CAetE;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,gBAAgB,CAGnE;AAMD;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,IAAI,cAAc,CAE7E;AAgBD;;;;;;GAMG;AACH,MAAM,MAAM,kBAAkB,GAAG,YAAY,CAAC;AAE9C;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,YAAY,GAAG,SAAS,EAC9B,OAAO,EAAE,YAAY,GAAG,SAAS,GAChC,kBAAkB,GAAG,SAAS,CAuChC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,gBAAgB,CAoC/F"}

package/dist/{flows-ZULSVHX5.js → flows-6BNO4GKK.js}

@@ -1,7 +1,7 @@
-export { flowFindFlowForSession, flowGetSession, flowList, flowListSessions, flowShow } from './chunk-6UQ66R46.js';
+export { flowFindFlowForSession, flowGetSession, flowList, flowListSessions, flowShow } from './chunk-ZWIG55ZX.js';
 import './chunk-XCBG2KDC.js';
 import './chunk-HK5FRWG6.js';
 import './chunk-X5YPJV4N.js';
 import './chunk-NSBPE2FW.js';
-//# sourceMappingURL=flows-ZULSVHX5.js.map
-//# sourceMappingURL=flows-ZULSVHX5.js.map
+//# sourceMappingURL=flows-6BNO4GKK.js.map
+//# sourceMappingURL=flows-6BNO4GKK.js.map

package/dist/{flows-ZULSVHX5.js.map → flows-6BNO4GKK.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"flows-ZULSVHX5.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"flows-6BNO4GKK.js"}

package/dist/library/index.js

@@ -1,9 +1,10 @@
-export { CatalogCache, CatalogConfigSchema, CatalogHttpError, DuplicateLibraryNameError, DuplicateSubscriptionError, GitSyncDriver, InstanceHasConsumersError, InstanceNotFoundError, InterpolationError, KNOWN_ASSET_KINDS, KnowledgeManifestSchema, LIBRARY_BACKENDS, LIBRARY_OWNERSHIPS, LIBRARY_STRUCTURES, LOCAL_CATALOG_URL, LibraryConfigSchema, LibraryError, LibraryInstanceRefSchema, LibrarySectionSchema, LibrarySyncError, LocalCatalogSource, LocalLibrary, LocalSyncDriver, LockFileSchema, LockSubscriptionSchema, OfflineError, OperationNotPermittedError, PIN_POLICIES, PinPolicySchema, PresetAppliedSchema, PresetExpandedSchema, RemoteCatalogSource, RequiresEdgeSchema, RestCatalogSource, SidecarGit, SkaileConfigSchema, SourceNotFoundError, StoreSyncDriver, SubscriptionNotFoundError, TarballHashMismatchError, UserLibraryManager, UserLibraryNotFoundError, WorkspaceConfigV2Schema, applyNonStructuralUpgrade, applyPreset, applyPresetFromData, classifyRef, createEmptyLockFile, deriveSlug, detectChanges, detectNestedPresetRefs, detectWorkspaceVersion, evaluateUpgrade, extractLibraryInstanceId, extractReferencedKeys, filterKey, getConfigDefaults, getDefaultValue, getSidecarRoot, hasInterpolationTokens, interpolate, isLocalCatalogUrl, isSecretPlaceholder, knowledgeKindProvider, listSidecarSlugsOnDisk, loadLockFile, loadWorkspaceV2, migrateWorkspaceConfig, parsePreset, parsePresetYaml, parseWorkspaceV2, projectConfigPath, queryInstancePickerChoices, resolveAllItems, resolveConfig, resolveItem, resolveLibraryDir, resolvePin, resolveSidecarPaths, saveConfig, saveLockFile, saveWorkspaceV2, sha256Hex, storeSecrets, trpcGetUrl, userConfigPath, validateAllPlaceholders, validateKnowledge, validateNestingDepth, validatePlaceholder, writeManifestIfMissing } from '../chunk-DOMCYP7D.js';
-import '../chunk-46T37EBP.js';
+export { CatalogCache, CatalogConfigSchema, CatalogHttpError, DuplicateLibraryNameError, DuplicateSubscriptionError, GitSyncDriver, InstanceHasConsumersError, InstanceNotFoundError, InterpolationError, KNOWN_ASSET_KINDS, KnowledgeManifestSchema, LIBRARY_BACKENDS, LIBRARY_OWNERSHIPS, LIBRARY_STRUCTURES, LOCAL_CATALOG_URL, LibraryConfigSchema, LibraryError, LibraryInstanceRefSchema, LibrarySectionSchema, LibrarySyncError, LocalCatalogSource, LocalLibrary, LocalSyncDriver, LockFileSchema, LockSubscriptionSchema, OfflineError, OperationNotPermittedError, PIN_POLICIES, PinPolicySchema, PresetAppliedSchema, PresetExpandedSchema, RemoteCatalogSource, RequiresEdgeSchema, RestCatalogSource, SidecarGit, SkaileConfigSchema, SourceNotFoundError, StoreSyncDriver, SubscriptionNotFoundError, TarballHashMismatchError, UserLibraryManager, UserLibraryNotFoundError, WorkspaceConfigV2Schema, applyNonStructuralUpgrade, applyPreset, applyPresetFromData, classifyRef, createEmptyLockFile, deriveSlug, detectChanges, detectNestedPresetRefs, detectWorkspaceVersion, evaluateUpgrade, extractLibraryInstanceId, extractReferencedKeys, filterKey, getConfigDefaults, getDefaultValue, getSidecarRoot, hasInterpolationTokens, installFromManifest, interpolate, isLocalCatalogUrl, isSecretPlaceholder, knowledgeKindProvider, listSidecarSlugsOnDisk, loadLockFile, loadWorkspaceV2, migrateWorkspaceConfig, parsePreset, parsePresetYaml, parseWorkspaceV2, projectConfigPath, queryInstancePickerChoices, resolveAllItems, resolveConfig, resolveItem, resolveLibraryDir, resolvePin, resolveSidecarPaths, saveConfig, saveLockFile, saveWorkspaceV2, sha256Hex, storeSecrets, trpcGetUrl, userConfigPath, validateAllPlaceholders, validateKnowledge, validateNestingDepth, validatePlaceholder, writeManifestIfMissing } from '../chunk-42OQF7UU.js';
+export { GITHUB_PAT_ENV, fetchAssetFilesFromGitHub } from '../chunk-R7FOF242.js';
+import '../chunk-GKIA2PU5.js';
 import '../chunk-OKRUTSG7.js';
-import '../chunk-BVHFSUFM.js';
-import '../chunk-JLPC4YWT.js';
-import '../chunk-Z3RER6YZ.js';
+import '../chunk-ZHLRRT5D.js';
+import '../chunk-37JKX6D7.js';
+import '../chunk-NELZIQ2E.js';
 import '../chunk-NSBPE2FW.js';
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/library/src/config.d.ts

@@ -48,42 +48,26 @@ export declare function isLocalCatalogUrl(url: string): url is typeof LOCAL_CATA
  * @docLink packages/library/api-reference#config
  */
 export declare const CatalogConfigSchema: z.ZodObject<{
-    /** Catalog base URL, or `"local"` (case-insensitive) to disable the remote catalog. Default: https://skaile.store */
-    url: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, "local", string>]>>;
-    /** Cache TTL in seconds. 0 = air-gapped (manual `skaile update` only). */
+    url: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodPipe<z.ZodString, z.ZodTransform<"local", string>>]>>;
     cache_ttl: z.ZodOptional<z.ZodNumber>;
-    /**
-     * Wire framing to use when talking to a remote catalog.
-     * `"trpc"` — skaile.store tRPC backend (default for `https://skaile.store`).
-     * `"rest"` — forge-store REST backend (default for any other URL).
-     */
-    framing: z.ZodOptional<z.ZodEnum<["trpc", "rest"]>>;
-}, "strip", z.ZodTypeAny, {
-    url?: string | undefined;
-    cache_ttl?: number | undefined;
-    framing?: "trpc" | "rest" | undefined;
-}, {
-    url?: string | undefined;
-    cache_ttl?: number | undefined;
-    framing?: "trpc" | "rest" | undefined;
-}>;
+    framing: z.ZodOptional<z.ZodEnum<{
+        trpc: "trpc";
+        rest: "rest";
+    }>>;
+}, z.core.$strip>;
 /**
  * Zod schema for the `library:` section of config.yaml.
  *
  * @docLink packages/library/api-reference#config
  */
 export declare const LibraryConfigSchema: z.ZodObject<{
-    /** Library storage directory. Default: ~/.skaile/libraries */
     dir: z.ZodOptional<z.ZodString>;
-    /** Default pin policy for new instances/subscriptions. */
-    pin_policy: z.ZodOptional<z.ZodEnum<["exact", "minor-track", "latest"]>>;
-}, "strip", z.ZodTypeAny, {
-    dir?: string | undefined;
-    pin_policy?: "exact" | "minor-track" | "latest" | undefined;
-}, {
-    dir?: string | undefined;
-    pin_policy?: "exact" | "minor-track" | "latest" | undefined;
-}>;
+    pin_policy: z.ZodOptional<z.ZodEnum<{
+        exact: "exact";
+        "minor-track": "minor-track";
+        latest: "latest";
+    }>>;
+}, z.core.$strip>;
 /**
  * Zod schema for the full config.yaml document.
  *
@@ -91,58 +75,22 @@ export declare const LibraryConfigSchema: z.ZodObject<{
  */
 export declare const SkaileConfigSchema: z.ZodObject<{
     catalog: z.ZodOptional<z.ZodObject<{
-        /** Catalog base URL, or `"local"` (case-insensitive) to disable the remote catalog. Default: https://skaile.store */
-        url: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, "local", string>]>>;
-        /** Cache TTL in seconds. 0 = air-gapped (manual `skaile update` only). */
+        url: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodPipe<z.ZodString, z.ZodTransform<"local", string>>]>>;
         cache_ttl: z.ZodOptional<z.ZodNumber>;
-        /**
-         * Wire framing to use when talking to a remote catalog.
-         * `"trpc"` — skaile.store tRPC backend (default for `https://skaile.store`).
-         * `"rest"` — forge-store REST backend (default for any other URL).
-         */
-        framing: z.ZodOptional<z.ZodEnum<["trpc", "rest"]>>;
-    }, "strip", z.ZodTypeAny, {
-        url?: string | undefined;
-        cache_ttl?: number | undefined;
-        framing?: "trpc" | "rest" | undefined;
-    }, {
-        url?: string | undefined;
-        cache_ttl?: number | undefined;
-        framing?: "trpc" | "rest" | undefined;
-    }>>;
+        framing: z.ZodOptional<z.ZodEnum<{
+            trpc: "trpc";
+            rest: "rest";
+        }>>;
+    }, z.core.$strip>>;
     library: z.ZodOptional<z.ZodObject<{
-        /** Library storage directory. Default: ~/.skaile/libraries */
         dir: z.ZodOptional<z.ZodString>;
-        /** Default pin policy for new instances/subscriptions. */
-        pin_policy: z.ZodOptional<z.ZodEnum<["exact", "minor-track", "latest"]>>;
-    }, "strip", z.ZodTypeAny, {
-        dir?: string | undefined;
-        pin_policy?: "exact" | "minor-track" | "latest" | undefined;
-    }, {
-        dir?: string | undefined;
-        pin_policy?: "exact" | "minor-track" | "latest" | undefined;
-    }>>;
-}, "strip", z.ZodTypeAny, {
-    catalog?: {
-        url?: string | undefined;
-        cache_ttl?: number | undefined;
-        framing?: "trpc" | "rest" | undefined;
-    } | undefined;
-    library?: {
-        dir?: string | undefined;
-        pin_policy?: "exact" | "minor-track" | "latest" | undefined;
-    } | undefined;
-}, {
-    catalog?: {
-        url?: string | undefined;
-        cache_ttl?: number | undefined;
-        framing?: "trpc" | "rest" | undefined;
-    } | undefined;
-    library?: {
-        dir?: string | undefined;
-        pin_policy?: "exact" | "minor-track" | "latest" | undefined;
-    } | undefined;
-}>;
+        pin_policy: z.ZodOptional<z.ZodEnum<{
+            exact: "exact";
+            "minor-track": "minor-track";
+            latest: "latest";
+        }>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
 /**
  * Catalog configuration parsed from `catalog:` in config.yaml.
  *

package/dist/library/src/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../library/src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAWzB;;;;;;;;;;GAUG;AACH,eAAO,MAAM,iBAAiB,EAAG,OAAgB,CAAC;AAElD;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,IAAI,OAAO,iBAAiB,CAE9E;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,mBAAmB;IAC9B,qHAAqH;;IAarH,0EAA0E;;IAE1E;;;;OAIG;;;;;;;;;;EAEH,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,mBAAmB;IAC9B,8DAA8D;;IAE9D,0DAA0D;;;;;;;;EAE1D,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,kBAAkB;;QAxC7B,qHAAqH;;QAarH,0EAA0E;;QAE1E;;;;WAIG;;;;;;;;;;;;QAUH,8DAA8D;;QAE9D,0DAA0D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAY1D,CAAC;AAMH;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;IACtE,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,OAAO,GAAG,aAAa,GAAG,QAAQ,CAAA;KAAE,CAAC;CAC1E;AAUD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAS1C;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,IAAI,oBAAoB,CAKxD;AAQD;;;;GAIG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAE5D;AAgDD;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,+DAA+D;IAC/D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6CAA6C;IAC7C,SAAS,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAClC,oDAAoD;IACpD,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,IAAI,CAAC,EAAE,oBAAoB,GAAG,oBAAoB,CAiC/E;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI,CAMhF"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../library/src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAWzB;;;;;;;;;;GAUG;AACH,eAAO,MAAM,iBAAiB,EAAG,OAAgB,CAAC;AAElD;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,IAAI,OAAO,iBAAiB,CAE9E;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,mBAAmB;;;;;;;iBAsB9B,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,mBAAmB;;;;;;;iBAK9B,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;iBAG7B,CAAC;AAMH;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;IACtE,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,OAAO,GAAG,aAAa,GAAG,QAAQ,CAAA;KAAE,CAAC;CAC1E;AAUD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAS1C;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,IAAI,oBAAoB,CAKxD;AAQD;;;;GAIG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAE5D;AAgDD;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,+DAA+D;IAC/D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6CAA6C;IAC7C,SAAS,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAClC,oDAAoD;IACpD,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,IAAI,CAAC,EAAE,oBAAoB,GAAG,oBAAoB,CAiC/E;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI,CAMhF"}

package/dist/library/src/index.d.ts

@@ -19,6 +19,8 @@ export type { WriteManifestInput, WriteManifestResult } from "./sync/manifest-wr
 export { migrateWorkspaceConfig, type MigrationResult } from "./migration.js";
 export { resolvePin } from "./pin-resolver.js";
 export type { PinExpression, ResolveResult } from "./pin-resolver.js";
+export { installFromManifest, type AssetFetcher, type InstallOpts, type InstallResult, } from "./install/install-from-manifest.js";
+export { fetchAssetFilesFromGitHub, GITHUB_PAT_ENV, type FetchOpts, } from "./install/source-fetch-github.js";
 export { LocalCatalogSource } from "./local/local-catalog-source.js";
 export type { ICatalogSource, CatalogAsset, CatalogAssetFilter, CatalogSourceInfo, } from "@skaile/workspaces/plugins";
 export { RemoteCatalogSource, TarballHashMismatchError, OfflineError, CatalogHttpError, trpcGetUrl, CatalogCache, sha256Hex, filterKey, } from "./remote/index.js";

package/dist/library/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../library/src/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,QAAQ,EAAE,mBAAmB;AAClC,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,iBAAiB,EACjB,KAAK,SAAS,EACd,YAAY,EACZ,KAAK,UAAU,EACf,KAAK,MAAM,EACX,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,QAAQ,EACb,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,YAAY,EACZ,mBAAmB,EACnB,qBAAqB,EACrB,yBAAyB,EACzB,0BAA0B,EAC1B,yBAAyB,GAC1B,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,YAAY,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAG9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,YAAY,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAG1D,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,QAAQ,EACb,KAAK,QAAQ,EACb,KAAK,QAAQ,EACb,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,gBAAgB,EAChB,0BAA0B,EAC1B,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,UAAU,EACV,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,YAAY,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAGxF,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,wBAAwB,EACxB,mBAAmB,EACnB,uBAAuB,EACvB,cAAc,EACd,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,EACpB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,QAAQ,EACb,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,aAAa,EACb,iBAAiB,EACjB,UAAU,GACX,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,YAAY,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAG5F,OAAO,EAAE,sBAAsB,EAAE,KAAK,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAG9E,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAIrE,YAAY,EACV,cAAc,EACd,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,YAAY,EACZ,gBAAgB,EAChB,UAAU,EACV,YAAY,EACZ,SAAS,EACT,SAAS,GACV,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,0BAA0B,EAC1B,UAAU,EACV,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,GACf,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,YAAY,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAGhF,OAAO,EACL,uBAAuB,EACvB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,iBAAiB,EACjB,iCAAiC,GAClC,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAEL,WAAW,EACX,eAAe,EACf,sBAAsB,EACtB,oBAAoB,EAEpB,WAAW,EACX,wBAAwB,EACxB,WAAW,EACX,eAAe,EAEf,mBAAmB,EACnB,uBAAuB,EACvB,0BAA0B,EAC1B,eAAe,EACf,mBAAmB,EAEnB,WAAW,EACX,YAAY,EACZ,sBAAsB,EACtB,qBAAqB,EACrB,kBAAkB,EAElB,WAAW,EACX,mBAAmB,EAEnB,aAAa,EACb,eAAe,EACf,yBAAyB,GAC1B,MAAM,mBAAmB,CAAC;AAE3B,YAAY,EACV,WAAW,EACX,WAAW,EACX,iBAAiB,EACjB,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,EACpB,YAAY,EACZ,2BAA2B,EAC3B,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,SAAS,EACT,WAAW,EACX,eAAe,EACf,UAAU,EACV,UAAU,EACV,aAAa,GACd,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../library/src/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,QAAQ,EAAE,mBAAmB;AAClC,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,iBAAiB,EACjB,KAAK,SAAS,EACd,YAAY,EACZ,KAAK,UAAU,EACf,KAAK,MAAM,EACX,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,QAAQ,EACb,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,YAAY,EACZ,mBAAmB,EACnB,qBAAqB,EACrB,yBAAyB,EACzB,0BAA0B,EAC1B,yBAAyB,GAC1B,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,YAAY,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAG9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,YAAY,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAG1D,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,QAAQ,EACb,KAAK,QAAQ,EACb,KAAK,QAAQ,EACb,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,gBAAgB,EAChB,0BAA0B,EAC1B,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,UAAU,EACV,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,YAAY,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAGxF,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,wBAAwB,EACxB,mBAAmB,EACnB,uBAAuB,EACvB,cAAc,EACd,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,EACpB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,QAAQ,EACb,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,aAAa,EACb,iBAAiB,EACjB,UAAU,GACX,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,YAAY,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAG5F,OAAO,EAAE,sBAAsB,EAAE,KAAK,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAG9E,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGtE,OAAO,EACL,mBAAmB,EACnB,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,aAAa,GACnB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,yBAAyB,EACzB,cAAc,EACd,KAAK,SAAS,GACf,MAAM,kCAAkC,CAAC;AAG1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAIrE,YAAY,EACV,cAAc,EACd,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,YAAY,EACZ,gBAAgB,EAChB,UAAU,EACV,YAAY,EACZ,SAAS,EACT,SAAS,GACV,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,0BAA0B,EAC1B,UAAU,EACV,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,GACf,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,YAAY,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAGhF,OAAO,EACL,uBAAuB,EACvB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,iBAAiB,EACjB,iCAAiC,GAClC,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAEL,WAAW,EACX,eAAe,EACf,sBAAsB,EACtB,oBAAoB,EAEpB,WAAW,EACX,wBAAwB,EACxB,WAAW,EACX,eAAe,EAEf,mBAAmB,EACnB,uBAAuB,EACvB,0BAA0B,EAC1B,eAAe,EACf,mBAAmB,EAEnB,WAAW,EACX,YAAY,EACZ,sBAAsB,EACtB,qBAAqB,EACrB,kBAAkB,EAElB,WAAW,EACX,mBAAmB,EAEnB,aAAa,EACb,eAAe,EACf,yBAAyB,GAC1B,MAAM,mBAAmB,CAAC;AAE3B,YAAY,EACV,WAAW,EACX,WAAW,EACX,iBAAiB,EACjB,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,EACpB,YAAY,EACZ,2BAA2B,EAC3B,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,SAAS,EACT,WAAW,EACX,eAAe,EACf,UAAU,EACV,UAAU,EACV,aAAa,GACd,MAAM,mBAAmB,CAAC"}

package/dist/library/src/install/install-from-manifest.d.ts

@@ -0,0 +1,80 @@
+/**
+ * Pointer-only install path.
+ *
+ * Given an {@link InstallManifest} (the Pointer Triple the Catalog hands
+ * clients), this:
+ *
+ *   1. fetches the asset bytes directly from the upstream repo at the pinned
+ *      commit (via an injectable fetcher, default {@link fetchAssetFilesFromGitHub});
+ *   2. verifies EVERY per-file SHA256 against `manifest.files[].sha256`;
+ *   3. verifies the composite SHA256 rollup over the sorted
+ *      `<path>:<sha256>\n` lines against `manifest.sha256`;
+ *   4. writes the verified bytes under `<libraryRoot>/@<publisher>/<name>/<version>`.
+ *
+ * Any hash mismatch is a hard failure — bytes are not written if per-file
+ * verification fails, and the composite check is the second gate.
+ *
+ * @docLink packages/library/concepts#install
+ */
+import type { InstallManifest } from "@skaile/workspaces/types";
+/**
+ * Validate a single manifest-supplied file path against path traversal.
+ *
+ * `manifest.files[].path` comes off the network — the attacker controls the
+ * entire manifest (and therefore every hash in it), so hash verification can
+ * NEVER mitigate a malicious *destination*. A path like
+ * `../../../../home/user/.bashrc` or an absolute path would escape
+ * `installPath` and yield an arbitrary file write. Every path is checked
+ * BEFORE any fetch or write happens; the first bad path aborts the entire
+ * install with a hard throw.
+ *
+ * A path is rejected if ANY of:
+ *   - it is empty;
+ *   - it is absolute (`path.isAbsolute`) or has a leading slash;
+ *   - it contains a `..` segment;
+ *   - `path.resolve(installPath, p)` is not `installPath` itself and does not
+ *     start with `installPath + path.sep` (escapes the install dir).
+ *
+ * @throws An error matching `/unsafe path in manifest/` on the first bad path.
+ */
+export declare function assertSafeManifestPath(installPath: string, p: string): void;
+/**
+ * Fetcher signature — fetches `{ path → Buffer }` for the requested paths at
+ * a pinned upstream commit. {@link fetchAssetFilesFromGitHub} is the default
+ * production implementation; tests inject a mock.
+ */
+export type AssetFetcher = (opts: {
+    url: string;
+    commitSha: string;
+    paths: string[];
+}) => Promise<Record<string, Buffer>>;
+/**
+ * Options for {@link installFromManifest}.
+ */
+export interface InstallOpts {
+    /** The pointer-only install manifest from the Catalog. */
+    manifest: InstallManifest;
+    /** Filesystem root the asset is installed under. */
+    libraryRoot: string;
+    /**
+     * Pluggable fetcher so tests can inject mock data. Defaults to
+     * {@link fetchAssetFilesFromGitHub} in production.
+     */
+    fetcher?: AssetFetcher;
+}
+/**
+ * Result of a successful {@link installFromManifest} call.
+ */
+export interface InstallResult {
+    /** Absolute path the asset files were written to. */
+    installPath: string;
+}
+/**
+ * Fetch, verify, and write an asset's files per its {@link InstallManifest}.
+ *
+ * @throws An error matching `/hash mismatch/i` if any per-file SHA256 differs.
+ * @throws An error matching `/composite hash mismatch/i` if the rollup differs.
+ * @throws An error if the ref is malformed or the fetcher omits a file.
+ */
+export declare function installFromManifest(opts: InstallOpts): Promise<InstallResult>;
+//# sourceMappingURL=install-from-manifest.d.ts.map

package/dist/library/src/install/install-from-manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-from-manifest.d.ts","sourceRoot":"","sources":["../../../../library/src/install/install-from-manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAKH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAEhE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAU3E;AA0BD;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,IAAI,EAAE;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAEtC;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,0DAA0D;IAC1D,QAAQ,EAAE,eAAe,CAAC;IAC1B,oDAAoD;IACpD,WAAW,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,OAAO,CAAC,EAAE,YAAY,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,qDAAqD;IACrD,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,CAiFnF"}

package/dist/library/src/install/source-fetch-github.d.ts

@@ -0,0 +1,43 @@
+/**
+ * GitHub asset-byte fetcher for the pointer-only install path.
+ *
+ * Given an upstream repo URL and a pinned commit SHA, walks the recursive
+ * git tree at that commit and fetches the blob bytes for each requested path.
+ * The Catalog never serves asset bytes — it only hands clients the Pointer
+ * Triple (`source.url` + `source.commitSha` + per-file `{path, sha256}`),
+ * and `installFromManifest` verifies every byte against those hashes.
+ *
+ * Authentication: an optional GitHub PAT is read from the `SKAILE_GITHUB_PAT`
+ * environment variable when no `octokit` instance is injected. Public repos
+ * work unauthenticated (subject to GitHub's anonymous rate limit).
+ *
+ * @docLink packages/library/concepts#install
+ */
+import { Octokit } from "@octokit/rest";
+/** GitHub PAT environment variable used when no Octokit is injected. */
+export declare const GITHUB_PAT_ENV = "SKAILE_GITHUB_PAT";
+/**
+ * Options for {@link fetchAssetFilesFromGitHub}.
+ */
+export interface FetchOpts {
+    /** Upstream repo URL (e.g. `https://github.com/skaile-ai/skaile-ai-assets`). */
+    url: string;
+    /** Immutable 40-char git commit SHA the asset version was pinned at. */
+    commitSha: string;
+    /** Repo-relative paths to fetch. */
+    paths: string[];
+    /** Optional Octokit instance — injectable for tests. */
+    octokit?: Octokit;
+}
+/**
+ * Fetch the bytes of each requested path from a GitHub repo at a pinned commit.
+ *
+ * Reads the recursive git tree at `commitSha`, maps each blob path to its blob
+ * SHA, then fetches each requested path's blob and base64-decodes it.
+ *
+ * @returns A `{ path → Buffer }` map covering every requested path.
+ * @throws An error whose message matches `/unreachable/i` if the tree cannot
+ *   be read or any requested path is absent from the tree.
+ */
+export declare function fetchAssetFilesFromGitHub(opts: FetchOpts): Promise<Record<string, Buffer>>;
+//# sourceMappingURL=source-fetch-github.d.ts.map

package/dist/library/src/install/source-fetch-github.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-fetch-github.d.ts","sourceRoot":"","sources":["../../../../library/src/install/source-fetch-github.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC,wEAAwE;AACxE,eAAO,MAAM,cAAc,sBAAsB,CAAC;AAElD;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,gFAAgF;IAChF,GAAG,EAAE,MAAM,CAAC;IACZ,wEAAwE;IACxE,SAAS,EAAE,MAAM,CAAC;IAClB,oCAAoC;IACpC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,wDAAwD;IACxD,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAiBD;;;;;;;;;GASG;AACH,wBAAsB,yBAAyB,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CA6DhG"}