@skaile/workspaces 0.8.5

package/dist/chunk-Q5URN24L.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../connectors/src/secrets.ts","../connectors/src/config.ts"],"names":[],"mappings":";;;;AAUA,IAAM,MAAM,YAAA,CAAa,EAAE,MAAM,WAAA,EAAa,OAAA,EAAS,WAAW,CAAA;AAqD3D,IAAM,yBAAN,MAAoE;AAAA,EACxD,KAAA,uBAAY,GAAA,EAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOjD,UAAU,OAAA,EAAuC;AAC/C,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA,EAAG;AAClD,MAAA,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AAAA,IAC3B;AAAA,EACF;AAAA,EAEA,QAAQ,GAAA,EAAiC;AACvC,IAAA,IAAI,CAAC,KAAK,OAAO,MAAA;AACjB,IAAA,IAAI,GAAA,CAAI,UAAA,CAAW,MAAM,CAAA,EAAG,OAAO,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,GAAA,CAAI,KAAA,CAAM,CAAC,CAAC,CAAA;AAC9D,IAAA,IAAI,GAAA,CAAI,UAAA,CAAW,QAAQ,CAAA,EAAG,OAAO,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,GAAA,CAAI,KAAA,CAAM,CAAC,CAAC,CAAA;AAEhE,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,GAAG,CAAA;AACjC,IAAA,IAAI,MAAA,KAAW,QAAW,OAAO,MAAA;AACjC,IAAA,OAAO,GAAA;AAAA,EACT;AAAA,EAEA,IAAI,GAAA,EAAsB;AACxB,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA,KAAM,MAAA;AAAA,EAC/B;AAAA,EAEA,YAAA,GAAyB;AACvB,IAAA,OAAO,CAAC,GAAG,IAAA,CAAK,KAAA,CAAM,IAAA,EAAM,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,IAAA,EAAO,CAAC,CAAA,CAAE,CAAA;AAAA,EACrD;AACF;AASO,IAAM,oBAAN,MAAkD;AAAA,EACvD,QAAQ,GAAA,EAAiC;AACvC,IAAA,IAAI,CAAC,KAAK,OAAO,MAAA;AACjB,IAAA,IAAI,GAAA,CAAI,UAAA,CAAW,MAAM,CAAA,EAAG,OAAO,QAAQ,GAAA,CAAI,GAAA,CAAI,KAAA,CAAM,CAAC,CAAC,CAAA;AAC3D,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEA,IAAI,GAAA,EAAsB;AACxB,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA,KAAM,MAAA;AAAA,EAC/B;AAAA,EAEA,YAAA,GAAyB;AACvB,IAAA,OAAO,MAAA,CAAO,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA,CAAE,IAAI,CAAC,CAAA,KAAM,CAAA,IAAA,EAAO,CAAC,CAAA,CAAE,CAAA;AAAA,EACvD;AACF;AA0CO,IAAM,0BAAN,MAAwD;AAAA,EAC5C,KAAA,uBAAY,GAAA,EAAiC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAW9D,YAAY,WAAA,EAGT;AACD,IAAA,IAAI,CAAC,WAAA,EAAa;AAClB,IAAA,KAAA,MAAW,CAAC,EAAA,EAAI,IAAI,CAAA,IAAK,MAAA,CAAO,QAAQ,WAAA,CAAY,MAAA,IAAU,EAAE,CAAA,EAAG;AACjE,MAAA,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,CAAA,MAAA,EAAS,EAAE,IAAI,IAAI,CAAA;AAAA,IACpC;AACA,IAAA,KAAA,MAAW,CAAC,EAAA,EAAI,IAAI,CAAA,IAAK,MAAA,CAAO,QAAQ,WAAA,CAAY,UAAA,IAAc,EAAE,CAAA,EAAG;AACrE,MAAA,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,CAAA,UAAA,EAAa,EAAE,IAAI,IAAI,CAAA;AAAA,IACxC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,GAAA,CAAI,IAAA,EAA6B,EAAA,EAAY,IAAA,EAAiC;AAC5E,IAAA,IAAA,CAAK,MAAM,GAAA,CAAI,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,EAAE,IAAI,IAAI,CAAA;AAAA,EACtC;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,KAAA,CAAM,MAA6B,EAAA,EAAqB;AACtD,IAAA,OAAO,KAAK,KAAA,CAAM,MAAA,CAAO,GAAG,IAAI,CAAA,CAAA,EAAI,EAAE,CAAA,CAAE,CAAA;AAAA,EAC1C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,OAAA,CAAQ,MAA6B,EAAA,EAA6C;AAChF,IAAA,OAAO,KAAK,KAAA,CAAM,GAAA,CAAI,GAAG,IAAI,CAAA,CAAA,EAAI,EAAE,CAAA,CAAE,CAAA;AAAA,EACvC;AAAA,EAEA,QAAQ,GAAA,EAAiC;AACvC,IAAA,IAAI,CAAC,KAAK,OAAO,MAAA;AACjB,IAAA,IAAI,EAAE,IAAI,UAAA,CAAW,QAAQ,KAAK,GAAA,CAAI,UAAA,CAAW,YAAY,CAAA,CAAA,EAAI,OAAO,MAAA;AACxE,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,GAAG,CAAA;AAC/B,IAAA,OAAO,IAAA,IAAQ,IAAA,CAAK,EAAA,GAAK,IAAA,CAAK,KAAA,GAAQ,MAAA;AAAA,EACxC;AAAA,EAEA,IAAI,GAAA,EAAsB;AACxB,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA,KAAM,MAAA;AAAA,EAC/B;AAAA,EAEA,YAAA,GAAyB;AACvB,IAAA,OAAO,CAAC,GAAG,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA,CAAE,OAAO,CAAC,GAAG,CAAC,CAAA,KAAM,EAAE,EAAE,CAAA,CAAE,IAAI,CAAC,CAAC,CAAC,CAAA,KAAM,CAAC,CAAA;AAAA,EACzE;AACF;AAQO,IAAM,sBAAN,MAAiE;AAAA,EACrD,KAAA,uBAAY,GAAA,EAAoB;AAAA,EAEjD,UAAU,OAAA,EAAuC;AAC/C,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA,EAAG;AAClD,MAAA,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AAAA,IAC3B;AAAA,EACF;AAAA,EAEA,QAAQ,GAAA,EAAiC;AACvC,IAAA,IAAI,CAAC,KAAK,OAAO,MAAA;AACjB,IAAA,IAAI,GAAA,CAAI,UAAA,CAAW,QAAQ,CAAA,EAAG,OAAO,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,GAAA,CAAI,KAAA,CAAM,CAAC,CAAC,CAAA;AAChE,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEA,IAAI,GAAA,EAAsB;AACxB,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA,KAAM,MAAA;AAAA,EAC/B;AAAA,EAEA,YAAA,GAAyB;AACvB,IAAA,OAAO,CAAC,GAAG,IAAA,CAAK,KAAA,CAAM,IAAA,EAAM,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,MAAA,EAAS,CAAC,CAAA,CAAE,CAAA;AAAA,EACvD;AACF;AAOO,IAAM,kBAAA,GAAN,cAAiC,KAAA,CAAM;AAAA,EACnC,QAAA;AAAA,EACA,OAAA;AAAA,EACA,KAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOT,WAAA,CAAY,QAAA,EAAkB,OAAA,EAAiB,KAAA,EAAe;AAC5D,IAAA,KAAA,CAAM,CAAA,iCAAA,EAAoC,QAAQ,CAAA,CAAE,CAAA;AACpD,IAAA,IAAA,CAAK,IAAA,GAAO,oBAAA;AACZ,IAAA,IAAA,CAAK,QAAA,GAAW,QAAA;AAChB,IAAA,IAAA,CAAK,OAAA,GAAU,OAAA;AACf,IAAA,IAAA,CAAK,KAAA,GAAQ,KAAA;AAAA,EACf;AACF;AA+CO,IAAe,uBAAf,MAA8D;AAAA,EACnE,MAAA,GAAS,IAAA;AAAA,EACU,KAAA,uBAAY,GAAA,EAAoB;AAAA,EAGnD,MAAM,OAAO,UAAA,EAAmC;AAC9C,IAAA,MAAM,IAAA,CAAK,SAAS,UAAU,CAAA;AAC9B,IAAA,IAAA,CAAK,MAAA,GAAS,KAAA;AAAA,EAChB;AAAA,EAIA,QAAQ,GAAA,EAAiC;AACvC,IAAA,IAAI,IAAA,CAAK,QAAQ,OAAO,MAAA;AACxB,IAAA,IAAI,CAAC,GAAA,CAAI,UAAA,CAAW,IAAA,CAAK,MAAM,GAAG,OAAO,MAAA;AACzC,IAAA,OAAO,IAAA,CAAK,MAAM,GAAA,CAAI,GAAA,CAAI,MAAM,IAAA,CAAK,MAAA,CAAO,MAAM,CAAC,CAAA;AAAA,EACrD;AAAA,EAEA,IAAI,GAAA,EAAsB;AACxB,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA,KAAM,MAAA;AAAA,EAC/B;AAAA,EAEA,YAAA,GAAyB;AACvB,IAAA,IAAI,IAAA,CAAK,MAAA,EAAQ,OAAO,EAAC;AACzB,IAAA,OAAO,CAAC,GAAG,IAAA,CAAK,KAAA,CAAM,MAAM,CAAA,CAAE,GAAA,CAAI,CAAC,MAAM,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA,EAAG,CAAC,CAAA,CAAE,CAAA;AAAA,EAC/D;AACF;AAIA,IAAM,cAAA,GAAiB,CAAC,MAAA,EAAQ,QAAA,EAAU,OAAO,KAAA,EAAO,QAAA,EAAU,UAAU,YAAY,CAAA;AAExF,SAAS,UAAU,GAAA,EAAiC;AAClD,EAAA,OAAO,eAAe,IAAA,CAAK,CAAC,MAAM,GAAA,CAAI,UAAA,CAAW,CAAC,CAAC,CAAA;AACrD;AASO,IAAM,sBAAN,MAAoD;AAAA;AAAA;AAAA;AAAA;AAAA,EAKzD,YAA6B,SAAA,EAA6B;AAA7B,IAAA,IAAA,CAAA,SAAA,GAAA,SAAA;AAAA,EAA8B;AAAA,EAA9B,SAAA;AAAA,EAE7B,QAAQ,GAAA,EAAiC;AACvC,IAAA,IAAI,CAAC,KAAK,OAAO,MAAA;AACjB,IAAA,MAAM,MAAA,GAAS,UAAU,GAAG,CAAA;AAC5B,IAAA,GAAA,CAAI,MAAM,gBAAA,EAAkB,EAAE,KAAK,MAAA,EAAQ,MAAA,IAAU,UAAU,CAAA;AAC/D,IAAA,IAAI,MAAA,EAAQ;AACV,MAAA,KAAA,MAAW,CAAA,IAAK,KAAK,SAAA,EAAW;AAC9B,QAAA,MAAM,GAAA,GAAM,CAAA,CAAE,OAAA,CAAQ,GAAG,CAAA;AACzB,QAAA,IAAI,GAAA,KAAQ,QAAW,OAAO,GAAA;AAAA,MAChC;AACA,MAAA,GAAA,CAAI,IAAA,CAAK,uBAAA,EAAyB,EAAE,GAAA,EAAK,CAAA;AACzC,MAAA,OAAO,MAAA;AAAA,IACT;AAEA,IAAA,KAAA,MAAW,CAAA,IAAK,KAAK,SAAA,EAAW;AAC9B,MAAA,MAAM,GAAA,GAAM,CAAA,CAAE,OAAA,CAAQ,GAAG,CAAA;AACzB,MAAA,IAAI,GAAA,KAAQ,QAAW,OAAO,GAAA;AAAA,IAChC;AACA,IAAA,GAAA,CAAI,IAAA,CAAK,uBAAA,EAAyB,EAAE,GAAA,EAAK,CAAA;AACzC,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEA,IAAI,GAAA,EAAsB;AACxB,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA,KAAM,MAAA;AAAA,EAC/B;AAAA,EAEA,YAAA,GAAyB;AACvB,IAAA,MAAM,GAAA,GAAM,KAAK,SAAA,CAAU,OAAA,CAAQ,CAAC,CAAA,KAAM,CAAA,CAAE,cAAc,CAAA;AAC1D,IAAA,OAAO,CAAC,GAAG,IAAI,GAAA,CAAI,GAAG,CAAC,CAAA;AAAA,EACzB;AAAA;AAAA,EAGA,YAAY,GAAA,EAAyC;AACnD,IAAA,KAAA,MAAW,CAAA,IAAK,KAAK,SAAA,EAAW;AAC9B,MAAA,IAAI,CAAA,CAAE,OAAA,CAAQ,GAAG,CAAA,KAAM,QAAW,OAAO,CAAA;AAAA,IAC3C;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,WAAW,GAAA,EAA4B;AAC3C,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,WAAA,CAAY,GAAG,CAAA;AAClC,IAAA,IACE,SACA,aAAA,IAAiB,KAAA,IACjB,OAAQ,KAAA,CAA8B,gBAAgB,UAAA,EACtD;AACA,MAAA,IAAI;AACF,QAAA,MAAO,KAAA,CAA8B,YAAY,GAAG,CAAA;AAAA,MACtD,SAAS,GAAA,EAAK;AACZ,QAAA,GAAA,CAAI,KAAA,CAAM,oCAAA,EAAsC,GAAA,EAAK,EAAE,KAAK,CAAA;AAC5D,QAAA,MAAM,GAAA;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACF;;;ACnaO,SAAS,sBAAsB,UAAA,EAAwC;AAC5E,EAAA,MAAM,MAAA,GAAS,yBAAyB,UAAU,CAAA;AAClD,EAAA,IAAI,CAAC,OAAO,MAAA,IAAU,MAAA,CAAO,OAAO,MAAA,KAAW,CAAA,SAAU,EAAC;AAC1D,EAAA,OAAO,MAAA,CAAO,MAAA,CAAO,GAAA,CAAI,2BAA2B,CAAA;AACtD;AAQO,SAAS,0BAA0B,UAAA,EAA4C;AACpF,EAAA,MAAM,MAAA,GAAS,yBAAyB,UAAU,CAAA;AAClD,EAAA,IAAI,CAAC,OAAO,UAAA,IAAc,MAAA,CAAO,WAAW,MAAA,KAAW,CAAA,SAAU,EAAC;AAClE,EAAA,OAAO,MAAA,CAAO,UAAA,CAAW,GAAA,CAAI,+BAA+B,CAAA;AAC9D;AAEA,SAAS,4BAA4B,CAAA,EAAqC;AACxE,EAAA,OAAO;AAAA,IACL,IAAI,CAAA,CAAE,EAAA;AAAA,IACN,QAAQ,CAAA,CAAE,MAAA;AAAA,IACV,QAAQ,CAAA,CAAE,MAAA;AAAA,IACV,QAAQ,CAAA,CAAE,MAAA;AAAA,IACV,MAAA,EAAQ,EAAE,MAAA,IAAU,WAAA;AAAA,IACpB,MAAM,CAAA,CAAE,IAAA;AAAA,IACR,OAAO,CAAA,CAAE,KAAA;AAAA,IACT,mBAAmB,CAAA,CAAE,iBAAA;AAAA,IACrB,gBAAgB,CAAA,CAAE,cAAA;AAAA,IAClB,SAAS,CAAA,CAAE;AAAA,GACb;AACF;AAEA,SAAS,gCAAgC,CAAA,EAA6C;AACpF,EAAA,OAAO;AAAA,IACL,IAAI,CAAA,CAAE,EAAA;AAAA,IACN,QAAQ,CAAA,CAAE,MAAA;AAAA,IACV,MAAA,EAAQ,EAAE,MAAA,IAAU,WAAA;AAAA,IACpB,MAAM,CAAA,CAAE,IAAA;AAAA,IACR,SAAS,CAAA,CAAE;AAAA,GACb;AACF;AAcO,SAAS,8BAAA,CACd,aAAA,EACA,cAAA,GAAmC,EAAC,EACf;AACrB,EAAA,OAAO,IAAI,oBAAoB,CAAC,GAAG,gBAAgB,aAAA,EAAe,IAAI,iBAAA,EAAmB,CAAC,CAAA;AAC5F;AASO,SAAS,4BAAA,CACd,YAAA,GAAuC,EAAC,EACnB;AACrB,EAAA,MAAM,GAAA,GAAM,IAAI,sBAAA,EAAuB;AACvC,EAAA,IAAI,MAAA,CAAO,IAAA,CAAK,YAAY,CAAA,CAAE,SAAS,CAAA,EAAG;AACxC,IAAA,GAAA,CAAI,UAAU,YAAY,CAAA;AAAA,EAC5B;AACA,EAAA,OAAO,IAAI,mBAAA,CAAoB,CAAC,IAAI,iBAAA,EAAkB,EAAG,GAAG,CAAC,CAAA;AAC/D;AAWO,SAAS,WAAA,CACd,MACA,OAAA,EACoB;AACpB,EAAA,IAAI,CAAC,MAAM,OAAO,MAAA;AAClB,EAAA,IAAI,OAAA,EAAS,OAAO,OAAA,CAAQ,OAAA,CAAQ,IAAI,CAAA;AACxC,EAAA,IAAI,IAAA,CAAK,UAAA,CAAW,MAAM,CAAA,EAAG;AAC3B,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA;AAC3B,IAAA,OAAO,OAAA,CAAQ,IAAI,MAAM,CAAA;AAAA,EAC3B;AACA,EAAA,OAAO,IAAA;AACT;AA0CO,IAAM,sBAAA,GAAN,cAAqC,KAAA,CAAM;AAAA,EACvC,IAAA;AAAA,EACT,WAAA,CAAY,MAAc,OAAA,EAAkB;AAC1C,IAAA,MAAM,KAAA,GAAQ,OAAA,GAAU,CAAA,WAAA,EAAc,OAAO,CAAA,CAAA,CAAA,GAAM,EAAA;AACnD,IAAA,KAAA;AAAA,MACE,CAAA,mCAAA,EAAsC,KAAK,CAAA,GAAA,EAAM,IAAI,CAAA;AAAA;AAAA;AAAA,4DAAA;AAAA,KAKvD;AACA,IAAA,IAAA,CAAK,IAAA,GAAO,wBAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,EACd;AACF;AAmBO,SAAS,qBAAA,CACd,IAAA,EACA,EAAA,EACA,KAAA,EACoB;AACpB,EAAA,IAAI,CAAC,OAAO,OAAO,MAAA;AACnB,EAAA,OAAO,MAAM,OAAA,CAAQ,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,EAAE,CAAA,CAAE,CAAA;AACtC;AAmBO,SAAS,cAAA,CACd,MACA,OAAA,EAC0B;AAC1B,EAAA,IAAI,CAAC,MAAM,OAAO,MAAA;AAElB,EAAA,IAAI,SAAS,SAAA,EAAW;AACtB,IAAA,OAAO,EAAE,IAAA,EAAM,SAAA,EAAW,KAAA,EAAO,EAAA,EAAI,KAAK,IAAA,EAAK;AAAA,EACjD;AACA,EAAA,IAAI,IAAA,CAAK,UAAA,CAAW,MAAM,CAAA,EAAG;AAC3B,IAAA,OAAO,EAAE,IAAA,EAAM,KAAA,EAAO,KAAA,EAAO,IAAA,CAAK,MAAM,MAAA,CAAO,MAAM,CAAA,EAAG,GAAA,EAAK,IAAA,EAAK;AAAA,EACpE;AAIA,EAAA,MAAM,IAAI,sBAAA,CAAuB,IAAA,EAAM,OAAO,CAAA;AAChD","file":"chunk-Q5URN24L.js","sourcesContent":["/**\n * Secret provider abstraction.\n *\n * Decouples credential resolution from process.env so secrets can be\n * provisioned over the transport bridge instead of living in the\n * container's environment.\n */\n\nimport { createLogger } from \"@skaile/workspaces/core/logging\";\n\nconst log = createLogger({ kind: \"connector\", subkind: \"secrets\" });\n\n// ── Interfaces ──────────────────────────────────────────────────────────────\n\n/**\n * Read-only secret resolution. Adapters receive this interface.\n * @docLink packages/connectors/api-reference#secret-provider\n */\nexport interface SecretProvider {\n  /**\n   * Resolve a credential reference.\n   *\n   * @param ref - Credential reference such as \"env:GIT_TOKEN\",\n   *   \"oauth:google:user@example.com\", or an inline literal.\n   * @returns The resolved secret value or undefined if not found.\n   */\n  resolve(ref: string): string | undefined;\n  /**\n   * Check whether a reference can be resolved.\n   *\n   * @param ref - Reference to check.\n   * @returns True if resolve(ref) would return a non-undefined value.\n   */\n  has(ref: string): boolean;\n  /**\n   * Return all ref strings this provider can currently resolve.\n   *\n   * @returns All resolvable refs (used by forge UI and ConnectorFieldMissingError).\n   */\n  capabilities(): string[];\n}\n\n/**\n * Extends `SecretProvider` with the ability to load secrets at runtime via `provision()`.\n * @docLink packages/connectors/api-reference#provisionable-secret-provider\n */\nexport interface ProvisionableSecretProvider extends SecretProvider {\n  /** Store a batch of key-value secrets. Keys are bare names (no prefix). */\n  provision(secrets: Record<string, string>): void;\n}\n\n// ── Implementations ─────────────────────────────────────────────────────────\n\n/**\n * In-memory secret store. Secrets are provisioned over the transport bridge\n * and stored in a private Map — never touching the filesystem or process.env.\n *\n * Supports ref prefixes:\n *   `\"env:KEY\"`   — looks up KEY in the store\n *   `\"vault:KEY\"` — looks up KEY in the store (future vault compat)\n *   (no prefix)   — returned as an inline value (backwards compat for non-chain usages)\n * @docLink packages/connectors/api-reference#in-memory-secret-provider\n */\nexport class InMemorySecretProvider implements ProvisionableSecretProvider {\n  private readonly store = new Map<string, string>();\n\n  /**\n   * Store a batch of key-value secrets.\n   *\n   * @param secrets - Key-value map of secret names to values. Keys are bare names (no prefix).\n   */\n  provision(secrets: Record<string, string>): void {\n    for (const [key, value] of Object.entries(secrets)) {\n      this.store.set(key, value);\n    }\n  }\n\n  resolve(ref: string): string | undefined {\n    if (!ref) return undefined;\n    if (ref.startsWith(\"env:\")) return this.store.get(ref.slice(4));\n    if (ref.startsWith(\"vault:\")) return this.store.get(ref.slice(6));\n    // Bare key: check store first, then fall back to inline literal\n    const stored = this.store.get(ref);\n    if (stored !== undefined) return stored;\n    return ref;\n  }\n\n  has(ref: string): boolean {\n    return this.resolve(ref) !== undefined;\n  }\n\n  capabilities(): string[] {\n    return [...this.store.keys()].map((k) => `env:${k}`);\n  }\n}\n\n/**\n * Delegates to `process.env`. Used in CLI/standalone mode.\n * Does NOT pass through inline literals — returns `undefined` for any ref\n * that does not start with `\"env:\"`. Use `InMemorySecretProvider` for inline\n * literals in non-chain contexts.\n * @docLink packages/connectors/api-reference#env-secret-provider\n */\nexport class EnvSecretProvider implements SecretProvider {\n  resolve(ref: string): string | undefined {\n    if (!ref) return undefined;\n    if (ref.startsWith(\"env:\")) return process.env[ref.slice(4)];\n    return undefined; // no inline passthrough\n  }\n\n  has(ref: string): boolean {\n    return this.resolve(ref) !== undefined;\n  }\n\n  capabilities(): string[] {\n    return Object.keys(process.env).map((k) => `env:${k}`);\n  }\n}\n\n/**\n * Pre-minted credential entry. Mirrors the discriminated `CredentialMint`\n * shape from `@skaile/workspaces/types` but redeclared here to keep this package\n * free of cross-package type dependencies.\n *\n * The failure branch carries the platform-side `code` + `message` so the\n * `MountManager`'s wrapped mediator can surface the real reason instead of\n * a generic \"no pre-mint\" placeholder when a mint comes back as `ok: false`.\n */\nexport type PreMintedCredential =\n  | { ok: true; token: string; expiresAt: string | null; mintedAt?: string }\n  | {\n      ok: false;\n      code?: \"not-configured\" | \"revoked\" | \"provider-error\" | \"backend-error\";\n      message?: string;\n    };\n\n/**\n * Pre-minted credential store. Holds short-lived tokens delivered upfront in\n * the v3 `session_init` envelope so the runner never has to call back to the\n * platform during mount setup.\n *\n * Resolves refs of the form `mount:<id>` and `connector:<id>`. Returns\n * `undefined` for any other ref so the chain falls through to the next\n * provider (`EnvSecretProvider` for `pat:env:NAME`, etc.).\n *\n * Tokens can be added/removed at runtime via {@link set} / {@link unset} so\n * `runner.add_mount` / `runner.add_connector` / `runner.update_credential`\n * capabilities stay strictly in-process — no round trip to the platform to\n * mint while the mount is hot-attached.\n *\n * For callers that need the full mint metadata (expiry timestamp, mintedAt\n * audit fields), use {@link mintFor} instead of the bare `resolve`. The\n * `MountManager` consults this for the `auth: backend` initial-mint path so\n * the driver retains the original expiry semantics.\n *\n * Spec: `_devlog/specs/2026-05-10-deterministic-session-bootstrap.md`.\n *\n * @docLink packages/connectors/api-reference#pre-minted-secret-provider\n */\nexport class PreMintedSecretProvider implements SecretProvider {\n  private readonly mints = new Map<string, PreMintedCredential>();\n\n  /**\n   * Seed pre-minted credentials from the v3 `session_init.credentials` map.\n   *\n   * Failed mints (`ok: false`) are stored too so callers can distinguish\n   * \"not pre-minted\" from \"pre-minted but failed\"; {@link resolve} treats\n   * both as `undefined`.\n   *\n   * @param credentials Optional initial `{ mounts, connectors }` map.\n   */\n  constructor(credentials?: {\n    mounts?: Record<string, PreMintedCredential>;\n    connectors?: Record<string, PreMintedCredential>;\n  }) {\n    if (!credentials) return;\n    for (const [id, mint] of Object.entries(credentials.mounts ?? {})) {\n      this.mints.set(`mount:${id}`, mint);\n    }\n    for (const [id, mint] of Object.entries(credentials.connectors ?? {})) {\n      this.mints.set(`connector:${id}`, mint);\n    }\n  }\n\n  /**\n   * Insert (or replace) a pre-minted credential. Used by\n   * `runner.add_mount` / `runner.add_connector` / `runner.update_credential`\n   * capability handlers when the platform delivers new credentials\n   * mid-session.\n   */\n  set(kind: \"mount\" | \"connector\", id: string, mint: PreMintedCredential): void {\n    this.mints.set(`${kind}:${id}`, mint);\n  }\n\n  /**\n   * Remove a stored pre-minted credential. Used by the\n   * `runner.remove_resource` capability handler.\n   */\n  unset(kind: \"mount\" | \"connector\", id: string): boolean {\n    return this.mints.delete(`${kind}:${id}`);\n  }\n\n  /**\n   * Look up the full {@link PreMintedCredential} for a `mount:` /\n   * `connector:` keyed entry. Callers that only need the token use\n   * {@link resolve} via the chain; callers that need expiry / audit\n   * metadata (e.g. MountManager) use this entry point.\n   */\n  mintFor(kind: \"mount\" | \"connector\", id: string): PreMintedCredential | undefined {\n    return this.mints.get(`${kind}:${id}`);\n  }\n\n  resolve(ref: string): string | undefined {\n    if (!ref) return undefined;\n    if (!(ref.startsWith(\"mount:\") || ref.startsWith(\"connector:\"))) return undefined;\n    const mint = this.mints.get(ref);\n    return mint && mint.ok ? mint.token : undefined;\n  }\n\n  has(ref: string): boolean {\n    return this.resolve(ref) !== undefined;\n  }\n\n  capabilities(): string[] {\n    return [...this.mints.entries()].filter(([, m]) => m.ok).map(([k]) => k);\n  }\n}\n\n/**\n * Forge session secret provider. Secrets are provisioned from the Forge settings\n * panel over the transport bridge. Only handles `\"forge:\"` prefixed refs — returns\n * `undefined` for all others.\n * @docLink packages/connectors/api-reference#forge-secret-provider\n */\nexport class ForgeSecretProvider implements ProvisionableSecretProvider {\n  private readonly store = new Map<string, string>();\n\n  provision(secrets: Record<string, string>): void {\n    for (const [key, value] of Object.entries(secrets)) {\n      this.store.set(key, value);\n    }\n  }\n\n  resolve(ref: string): string | undefined {\n    if (!ref) return undefined;\n    if (ref.startsWith(\"forge:\")) return this.store.get(ref.slice(6));\n    return undefined;\n  }\n\n  has(ref: string): boolean {\n    return this.resolve(ref) !== undefined;\n  }\n\n  capabilities(): string[] {\n    return [...this.store.keys()].map((k) => `forge:${k}`);\n  }\n}\n\n/**\n * Thrown when an OAuth-secured connector field requires user authorization before\n * it can be resolved. Contains the redirect URL to open in the user's browser.\n * @docLink packages/connectors/api-reference#o-auth-required-error\n */\nexport class OAuthRequiredError extends Error {\n  readonly oauthRef: string;\n  readonly authUrl: string;\n  readonly state: string;\n\n  /**\n   * @param oauthRef - The 'oauth:<service>:<account>' ref that triggered the error\n   * @param authUrl - Browser URL to open for OAuth authorization\n   * @param state - OAuth state token for CSRF protection and callback correlation\n   */\n  constructor(oauthRef: string, authUrl: string, state: string) {\n    super(`OAuth authorization required for ${oauthRef}`);\n    this.name = \"OAuthRequiredError\";\n    this.oauthRef = oauthRef;\n    this.authUrl = authUrl;\n    this.state = state;\n  }\n}\n\n/**\n * Shape of an OAuth token bundle stored by `OAuthSecretProvider`.\n * @docLink packages/connectors/api-reference#o-auth-token-bundle\n */\nexport interface OAuthTokenBundle {\n  accessToken: string;\n  refreshToken?: string;\n  /** Unix timestamp in ms */\n  expiry?: number;\n}\n\n/**\n * Return value of `OAuthSecretProvider.initiateFlow()`. Contains the URL and CSRF state token.\n * @docLink packages/connectors/api-reference#o-auth-flow-request\n */\nexport interface OAuthFlowRequest {\n  authUrl: string;\n  state: string;\n}\n\n/**\n * OAuth token provider. Handles `\"oauth:<service>:<account>\"` refs.\n * Callers must call `chain.prepareRef()` before `chain.resolve()` for `oauth:` refs.\n * @docLink packages/connectors/api-reference#o-auth-secret-provider\n */\nexport interface OAuthSecretProvider extends SecretProvider {\n  /**\n   * Ensure the token for this ref is fresh.\n   * Refreshes if expired.\n   * Throws OAuthRequiredError if no token exists and user authorization is needed.\n   */\n  ensureFresh(ref: string): Promise<void>;\n\n  /** Initiate the OAuth authorization flow. Returns URL to open in the user's browser. */\n  initiateFlow(oauthService: string, account: string): Promise<OAuthFlowRequest>;\n\n  /** Exchange authorization code for tokens and store the bundle. */\n  completeFlow(state: string, code: string): Promise<void>;\n}\n\n/**\n * Abstract base for vault-backed secret providers (1Password, KeePass). Subclasses\n * implement `prefix` and `loadKeys()`. Locked until `unlock(credential)` is called.\n * @docLink packages/connectors/api-reference#locked-secret-provider\n */\nexport abstract class LockedSecretProvider implements SecretProvider {\n  locked = true;\n  protected readonly store = new Map<string, string>();\n  abstract readonly prefix: string;\n\n  async unlock(credential: string): Promise<void> {\n    await this.loadKeys(credential);\n    this.locked = false;\n  }\n\n  protected abstract loadKeys(credential: string): Promise<void>;\n\n  resolve(ref: string): string | undefined {\n    if (this.locked) return undefined;\n    if (!ref.startsWith(this.prefix)) return undefined;\n    return this.store.get(ref.slice(this.prefix.length));\n  }\n\n  has(ref: string): boolean {\n    return this.resolve(ref) !== undefined;\n  }\n\n  capabilities(): string[] {\n    if (this.locked) return [];\n    return [...this.store.keys()].map((k) => `${this.prefix}${k}`);\n  }\n}\n\n// ── Known provider prefixes ──────────────────────────────────────────────────\n\nconst KNOWN_PREFIXES = [\"env:\", \"forge:\", \"op:\", \"kp:\", \"oauth:\", \"mount:\", \"connector:\"] as const;\n\nfunction getPrefix(ref: string): string | undefined {\n  return KNOWN_PREFIXES.find((p) => ref.startsWith(p));\n}\n\n/**\n * Chains multiple `SecretProvider` instances into a single resolver.\n * - Prefixed refs (`env:`, `forge:`, `op:`, `kp:`, `oauth:`) are routed to the first provider that can resolve them.\n * - Bare refs waterfall through all providers in order.\n * - Plain literals in `skaile.yaml` options are NOT passed to the chain; `ConnectorManager` handles them before calling `resolve()`.\n * @docLink packages/connectors/api-reference#secret-provider-chain\n */\nexport class SecretProviderChain implements SecretProvider {\n  /**\n   * @param providers - Ordered list of providers. For prefixed refs, the first\n   *   provider that can resolve wins. For bare refs, waterfall through all in order.\n   */\n  constructor(private readonly providers: SecretProvider[]) {}\n\n  resolve(ref: string): string | undefined {\n    if (!ref) return undefined;\n    const prefix = getPrefix(ref);\n    log.debug(\"resolve secret\", { ref, prefix: prefix ?? \"(bare)\" });\n    if (prefix) {\n      for (const p of this.providers) {\n        const val = p.resolve(ref);\n        if (val !== undefined) return val;\n      }\n      log.warn(\"secret not resolvable\", { ref });\n      return undefined;\n    }\n    // Waterfall for bare refs\n    for (const p of this.providers) {\n      const val = p.resolve(ref);\n      if (val !== undefined) return val;\n    }\n    log.warn(\"secret not resolvable\", { ref });\n    return undefined;\n  }\n\n  has(ref: string): boolean {\n    return this.resolve(ref) !== undefined;\n  }\n\n  capabilities(): string[] {\n    const all = this.providers.flatMap((p) => p.capabilities());\n    return [...new Set(all)];\n  }\n\n  /** Returns the first provider that can resolve this ref. */\n  providerFor(ref: string): SecretProvider | undefined {\n    for (const p of this.providers) {\n      if (p.resolve(ref) !== undefined) return p;\n    }\n    return undefined;\n  }\n\n  /**\n   * Calls ensureFresh(ref) on the owning provider if it implements OAuthSecretProvider.\n   * No-op for providers that don't have ensureFresh().\n   *\n   * @param ref - Must be an \"oauth:\" prefixed ref for this to have any effect.\n   *   Calls ensureFresh() on the owning OAuthSecretProvider.\n   */\n  async prepareRef(ref: string): Promise<void> {\n    const owner = this.providerFor(ref);\n    if (\n      owner &&\n      \"ensureFresh\" in owner &&\n      typeof (owner as OAuthSecretProvider).ensureFresh === \"function\"\n    ) {\n      try {\n        await (owner as OAuthSecretProvider).ensureFresh(ref);\n      } catch (err) {\n        log.error(\"secret provider ensureFresh failed\", err, { ref });\n        throw err;\n      }\n    }\n  }\n}\n","/**\n * Load mount and connector declarations from skaile.yaml.\n */\n\nimport type {\n  ConnectorDeclaration as WorkspaceConnector,\n  MountDeclaration as WorkspaceMount,\n} from \"@skaile/workspaces/core\";\nimport { resolveSkWorkspaceConfig } from \"@skaile/workspaces/core\";\nimport type { ConnectorDeclaration } from \"./connector-types.js\";\nimport type { MountDeclaration } from \"./mount-types.js\";\n\n/**\n * Read `skaile.yaml` in `projectDir` and return all declared mounts as `MountDeclaration[]`.\n * @param projectDir - Root of the workspace (directory containing `skaile.yaml`).\n * @returns Array of mount declarations, or an empty array if none are declared.\n * @docLink packages/connectors/api-reference#load-mount-declarations\n */\nexport function loadMountDeclarations(projectDir: string): MountDeclaration[] {\n  const config = resolveSkWorkspaceConfig(projectDir);\n  if (!config.mounts || config.mounts.length === 0) return [];\n  return config.mounts.map(workspaceMountToDeclaration);\n}\n\n/**\n * Read `skaile.yaml` in `projectDir` and return all declared connectors as `ConnectorDeclaration[]`.\n * @param projectDir - Root of the workspace (directory containing `skaile.yaml`).\n * @returns Array of connector declarations, or an empty array if none are declared.\n * @docLink packages/connectors/api-reference#load-connector-declarations\n */\nexport function loadConnectorDeclarations(projectDir: string): ConnectorDeclaration[] {\n  const config = resolveSkWorkspaceConfig(projectDir);\n  if (!config.connectors || config.connectors.length === 0) return [];\n  return config.connectors.map(workspaceConnectorToDeclaration);\n}\n\nfunction workspaceMountToDeclaration(v: WorkspaceMount): MountDeclaration {\n  return {\n    id: v.id,\n    driver: v.driver,\n    source: v.source,\n    target: v.target,\n    access: v.access ?? \"read-only\",\n    auth: v.auth,\n    watch: v.watch,\n    exposeAccessToken: v.exposeAccessToken,\n    accessTokenTTL: v.accessTokenTTL,\n    options: v.options,\n  };\n}\n\nfunction workspaceConnectorToDeclaration(c: WorkspaceConnector): ConnectorDeclaration {\n  return {\n    id: c.id,\n    driver: c.driver,\n    access: c.access ?? \"read-only\",\n    auth: c.auth,\n    options: c.options,\n  };\n}\n\nimport type { ForgeSecretProvider, SecretProvider } from \"./secrets.js\";\nimport { EnvSecretProvider, InMemorySecretProvider, SecretProviderChain } from \"./secrets.js\";\n\n/**\n * Build a `SecretProviderChain` for Forge session context.\n * `OAuthSecretProvider` is not wired here — it must be provided externally\n * (the Forge session manager constructs it and passes it in).\n * @param forgeProvider - The Forge-provisioned secret store.\n * @param extraProviders - Additional providers prepended to the chain (e.g. an OAuth provider).\n * @returns A chain that routes `forge:` refs to the Forge store and `env:` refs to process.env.\n * @docLink packages/connectors/api-reference#create-forge-secret-provider-chain\n */\nexport function createForgeSecretProviderChain(\n  forgeProvider: ForgeSecretProvider,\n  extraProviders: SecretProvider[] = [],\n): SecretProviderChain {\n  return new SecretProviderChain([...extraProviders, forgeProvider, new EnvSecretProvider()]);\n}\n\n/**\n * Build a `SecretProviderChain` for CLI/standalone context.\n * `EnvSecretProvider` takes priority; `extraSecrets` are loaded into an `InMemorySecretProvider`.\n * @param extraSecrets - Inline secrets injected into memory (e.g. tokens passed via CLI flags).\n * @returns A chain that resolves `env:` refs from process.env plus any inline extras.\n * @docLink packages/connectors/api-reference#create-cli-secret-provider-chain\n */\nexport function createCliSecretProviderChain(\n  extraSecrets: Record<string, string> = {},\n): SecretProviderChain {\n  const mem = new InMemorySecretProvider();\n  if (Object.keys(extraSecrets).length > 0) {\n    mem.provision(extraSecrets);\n  }\n  return new SecretProviderChain([new EnvSecretProvider(), mem]);\n}\n\n/**\n * Resolve a credential reference using a `SecretProvider`, or fall back to `env:NAME` lookup.\n * @param auth - Credential reference (e.g. `\"env:GIT_TOKEN\"`).\n * @param secrets - Optional provider; falls back to `process.env` if omitted.\n * @returns Resolved secret value or `undefined`.\n * @deprecated Use `SecretProviderChain.resolve()` instead.\n * @docLink packages/connectors/api-reference#resolve-auth\n */\n// @TODO: Code-Review: deprecated shim kept for backward compat — remove once all callers migrate to SecretProviderChain.resolve()\nexport function resolveAuth(\n  auth: string | undefined,\n  secrets?: import(\"./secrets.js\").SecretProvider,\n): string | undefined {\n  if (!auth) return undefined;\n  if (secrets) return secrets.resolve(auth);\n  if (auth.startsWith(\"env:\")) {\n    const envVar = auth.slice(4);\n    return process.env[envVar];\n  }\n  return auth;\n}\n\n// ── Auth grammar (mount-side, Tier 2 credential tiers) ───────────────────────\n\n/**\n * Provider kind for a mount auth ref.\n *\n * Two values are accepted:\n *   - `pat`     — static personal access token resolved via the secrets chain\n *                 (standalone CLI / non-platform contexts).\n *   - `backend` — token minted by the platform's credential mediator over the\n *                 transport (`request_access_token` round-trip). Provider\n *                 dispatch (OAuth, GitHub App, ...) lives backend-side; the\n *                 runner stays provider-agnostic.\n *\n * @docLink packages/connectors/api-reference#mount-auth-kind\n */\nexport type MountAuthKind = \"pat\" | \"backend\";\n\n/**\n * Parsed mount `auth:` field.\n *\n *   - `pat`     → `value` is the inner secret ref (e.g. `env:NAME`).\n *   - `backend` → `value` is empty (sentinel only); the runner asks the\n *                 backend for tokens via `request_access_token`.\n *\n * @docLink packages/connectors/api-reference#mount-auth-ref\n */\nexport interface MountAuthRef {\n  kind: MountAuthKind;\n  /** Prefix-stripped payload — see kind for shape. Empty for `backend`. */\n  value: string;\n  /** Original auth string from the declaration, kept for diagnostics. */\n  raw: string;\n}\n\n/**\n * Thrown when a mount declaration's `auth:` field uses the legacy bare `env:NAME` grammar\n * or any other unrecognized form. Migrate to `pat:env:NAME` (standalone) or `backend`\n * (platform-mediated).\n * @docLink packages/connectors/api-reference#legacy-auth-grammar-error\n */\nexport class LegacyAuthGrammarError extends Error {\n  readonly auth: string;\n  constructor(auth: string, mountId?: string) {\n    const where = mountId ? ` on mount '${mountId}'` : \"\";\n    super(\n      `Legacy or unrecognized auth grammar${where} ('${auth}'). ` +\n        `Replace with one of:\\n` +\n        `  - backend                  (platform-mediated, recommended)\\n` +\n        `  - pat:env:NAME             (standalone CLI / static token)\\n` +\n        `See _devlog/specs/2026-05-06-tier-2-credential-mediation.md.`,\n    );\n    this.name = \"LegacyAuthGrammarError\";\n    this.auth = auth;\n  }\n}\n\n/**\n * Resolve the `auth: backend` initial mint for a given mount or connector id\n * by querying the secrets chain with a `${kind}:${id}` ref. Returns the\n * resolved bearer token or `undefined` if no pre-minted credential is\n * available.\n *\n * Used by the runner when wiring `MountManager` / `ConnectorManager` to\n * answer initial-mint requests from `PreMintedSecretProvider` without\n * round-tripping to the platform. Drivers continue to receive a\n * `tokenMediator` for refresh + retry-401 paths.\n *\n * @param kind Resource family (`mount` or `connector`).\n * @param id Resource declaration id.\n * @param chain Secrets chain. Pass `undefined` to return `undefined`.\n * @returns The pre-minted token, or `undefined` if not stored on the chain.\n * @docLink packages/connectors/api-reference#resolve-backend-auth-for\n */\nexport function resolveBackendAuthFor(\n  kind: \"mount\" | \"connector\",\n  id: string,\n  chain: import(\"./secrets.js\").SecretProvider | undefined,\n): string | undefined {\n  if (!chain) return undefined;\n  return chain.resolve(`${kind}:${id}`);\n}\n\n/**\n * Parse a mount-side auth ref into a typed `MountAuthRef`.\n *\n * Accepted forms:\n *   - `backend`      — platform-mediated mint via `request_access_token`.\n *   - `pat:env:NAME` — static PAT resolved from the secrets chain.\n *\n * Rejects bare `env:NAME` (legacy) and provider-prefixed grammars (`oauth:`,\n * `github-app:`) — those moved backend-side as part of Tier-2 mediation.\n * Returns `undefined` when `auth` is absent or empty.\n *\n * @param auth - Raw `auth:` value from the mount declaration.\n * @param mountId - Optional mount id included in error messages.\n * @returns Parsed `MountAuthRef` or `undefined`.\n * @throws {LegacyAuthGrammarError} for any unrecognized grammar.\n * @docLink packages/connectors/api-reference#resolve-auth-ref\n */\nexport function resolveAuthRef(\n  auth: string | undefined,\n  mountId?: string,\n): MountAuthRef | undefined {\n  if (!auth) return undefined;\n\n  if (auth === \"backend\") {\n    return { kind: \"backend\", value: \"\", raw: auth };\n  }\n  if (auth.startsWith(\"pat:\")) {\n    return { kind: \"pat\", value: auth.slice(\"pat:\".length), raw: auth };\n  }\n\n  // Legacy bare `env:NAME` and the deprecated provider-prefixed grammars\n  // (`oauth:`, `github-app:`) all land here.\n  throw new LegacyAuthGrammarError(auth, mountId);\n}\n"]}

package/dist/chunk-QT2KQHDT.js

@@ -0,0 +1,49 @@
+import { err, okJson, ok } from './chunk-X5YPJV4N.js';
+import { readFile } from 'fs/promises';
+import { join } from 'path';
+
+async function mountList(mountManager) {
+  if (!mountManager) return err("No mounts configured in skaile.yaml");
+  try {
+    const mounts = mountManager.listMounts();
+    return okJson(mounts);
+  } catch (e) {
+    return err(e instanceof Error ? e.message : String(e));
+  }
+}
+async function mountSync(mountManager, mountId) {
+  if (!mountManager) return err("No mounts configured in skaile.yaml");
+  try {
+    const result = await mountManager.sync(mountId);
+    return okJson(result);
+  } catch (e) {
+    return err(e instanceof Error ? e.message : String(e));
+  }
+}
+async function mountStatus(mountManager, mountId) {
+  if (!mountManager) return err("No mounts configured in skaile.yaml");
+  try {
+    const allMounts = mountManager.listMounts();
+    const mount = allMounts.find((v) => v.id === mountId);
+    if (!mount) return err(`Mount not found: "${mountId}"`);
+    return okJson(mount);
+  } catch (e) {
+    return err(e instanceof Error ? e.message : String(e));
+  }
+}
+async function mountRead(mountManager, mountId, filePath) {
+  if (!mountManager) return err("No mounts configured in skaile.yaml");
+  try {
+    const allMounts = mountManager.listMounts();
+    const mount = allMounts.find((v) => v.id === mountId);
+    if (!mount) return err(`Mount not found: "${mountId}"`);
+    const content = await readFile(join(mount.mountPath, filePath), "utf-8");
+    return ok(content);
+  } catch (e) {
+    return err(e instanceof Error ? e.message : String(e));
+  }
+}
+
+export { mountList, mountRead, mountStatus, mountSync };
+//# sourceMappingURL=chunk-QT2KQHDT.js.map
+//# sourceMappingURL=chunk-QT2KQHDT.js.map

package/dist/chunk-QT2KQHDT.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../workspace-plugin/src/tools/mounts.ts"],"names":[],"mappings":";;;;AAiBA,eAAsB,UAAU,YAAA,EAAwD;AACtF,EAAA,IAAI,CAAC,YAAA,EAAc,OAAO,GAAA,CAAI,qCAAqC,CAAA;AACnE,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,aAAa,UAAA,EAAW;AACvC,IAAA,OAAO,OAAO,MAAM,CAAA;AAAA,EACtB,SAAS,CAAA,EAAY;AACnB,IAAA,OAAO,IAAI,CAAA,YAAa,KAAA,GAAQ,EAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,EACvD;AACF;AAaA,eAAsB,SAAA,CACpB,cACA,OAAA,EACqB;AACrB,EAAA,IAAI,CAAC,YAAA,EAAc,OAAO,GAAA,CAAI,qCAAqC,CAAA;AACnE,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,MAAM,YAAA,CAAa,IAAA,CAAK,OAAO,CAAA;AAC9C,IAAA,OAAO,OAAO,MAAM,CAAA;AAAA,EACtB,SAAS,CAAA,EAAY;AACnB,IAAA,OAAO,IAAI,CAAA,YAAa,KAAA,GAAQ,EAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,EACvD;AACF;AAaA,eAAsB,WAAA,CACpB,cACA,OAAA,EACqB;AACrB,EAAA,IAAI,CAAC,YAAA,EAAc,OAAO,GAAA,CAAI,qCAAqC,CAAA;AACnE,EAAA,IAAI;AACF,IAAA,MAAM,SAAA,GAAY,aAAa,UAAA,EAAW;AAC1C,IAAA,MAAM,QAAQ,SAAA,CAAU,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,OAAO,OAAO,CAAA;AACpD,IAAA,IAAI,CAAC,KAAA,EAAO,OAAO,GAAA,CAAI,CAAA,kBAAA,EAAqB,OAAO,CAAA,CAAA,CAAG,CAAA;AACtD,IAAA,OAAO,OAAO,KAAK,CAAA;AAAA,EACrB,SAAS,CAAA,EAAY;AACnB,IAAA,OAAO,IAAI,CAAA,YAAa,KAAA,GAAQ,EAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,EACvD;AACF;AAcA,eAAsB,SAAA,CACpB,YAAA,EACA,OAAA,EACA,QAAA,EACqB;AACrB,EAAA,IAAI,CAAC,YAAA,EAAc,OAAO,GAAA,CAAI,qCAAqC,CAAA;AACnE,EAAA,IAAI;AACF,IAAA,MAAM,SAAA,GAAY,aAAa,UAAA,EAAW;AAC1C,IAAA,MAAM,QAAQ,SAAA,CAAU,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,OAAO,OAAO,CAAA;AACpD,IAAA,IAAI,CAAC,KAAA,EAAO,OAAO,GAAA,CAAI,CAAA,kBAAA,EAAqB,OAAO,CAAA,CAAA,CAAG,CAAA;AACtD,IAAA,MAAM,OAAA,GAAU,MAAM,QAAA,CAAS,IAAA,CAAK,MAAM,SAAA,EAAW,QAAQ,GAAG,OAAO,CAAA;AACvE,IAAA,OAAO,GAAG,OAAO,CAAA;AAAA,EACnB,SAAS,CAAA,EAAY;AACnB,IAAA,OAAO,IAAI,CAAA,YAAa,KAAA,GAAQ,EAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,EACvD;AACF","file":"chunk-QT2KQHDT.js","sourcesContent":["// src/tools/mounts.ts\nimport { readFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport type { MountManager } from \"@skaile/workspaces/connectors\";\nimport { err, ok, okJson } from \"../types.js\";\nimport type { ToolResult } from \"../types.js\";\n\n/**\n * List all mounts declared in `skaile.yaml` with their current mount status.\n *\n * Returns a JSON array of mount descriptors from `mountManager.listMounts()`.\n * Returns an error result when no manager is configured.\n *\n * @param mountManager - Active `MountManager` or `null` when not configured.\n *\n * @docLink packages/workspace-plugin/concepts#tool-delivery\n */\nexport async function mountList(mountManager: MountManager | null): Promise<ToolResult> {\n  if (!mountManager) return err(\"No mounts configured in skaile.yaml\");\n  try {\n    const mounts = mountManager.listMounts();\n    return okJson(mounts);\n  } catch (e: unknown) {\n    return err(e instanceof Error ? e.message : String(e));\n  }\n}\n\n/**\n * Sync a mount — pull the latest content from its remote source.\n *\n * Delegates to `mountManager.sync(mountId)` and returns the sync result as\n * JSON.  Supported remotes include git, S3, WebDAV, and SharePoint.\n *\n * @param mountManager - Active `MountManager` or `null`.\n * @param mountId      - Mount ID declared in `skaile.yaml`.\n *\n * @docLink packages/workspace-plugin/concepts#tool-delivery\n */\nexport async function mountSync(\n  mountManager: MountManager | null,\n  mountId: string,\n): Promise<ToolResult> {\n  if (!mountManager) return err(\"No mounts configured in skaile.yaml\");\n  try {\n    const result = await mountManager.sync(mountId);\n    return okJson(result);\n  } catch (e: unknown) {\n    return err(e instanceof Error ? e.message : String(e));\n  }\n}\n\n/**\n * Get the current status and mount metadata for a single mount.\n *\n * Finds the mount by ID in `mountManager.listMounts()` and returns its\n * descriptor as JSON.\n *\n * @param mountManager - Active `MountManager` or `null`.\n * @param mountId      - Mount ID declared in `skaile.yaml`.\n *\n * @docLink packages/workspace-plugin/concepts#tool-delivery\n */\nexport async function mountStatus(\n  mountManager: MountManager | null,\n  mountId: string,\n): Promise<ToolResult> {\n  if (!mountManager) return err(\"No mounts configured in skaile.yaml\");\n  try {\n    const allMounts = mountManager.listMounts();\n    const mount = allMounts.find((v) => v.id === mountId);\n    if (!mount) return err(`Mount not found: \"${mountId}\"`);\n    return okJson(mount);\n  } catch (e: unknown) {\n    return err(e instanceof Error ? e.message : String(e));\n  }\n}\n\n/**\n * Read a file from within a mounted mount by its relative path.\n *\n * Resolves `filePath` against the mount's `mountPath` and reads the file as\n * UTF-8 text.\n *\n * @param mountManager - Active `MountManager` or `null`.\n * @param mountId      - Mount ID declared in `skaile.yaml`.\n * @param filePath     - Relative path within the mount directory.\n *\n * @docLink packages/workspace-plugin/concepts#tool-delivery\n */\nexport async function mountRead(\n  mountManager: MountManager | null,\n  mountId: string,\n  filePath: string,\n): Promise<ToolResult> {\n  if (!mountManager) return err(\"No mounts configured in skaile.yaml\");\n  try {\n    const allMounts = mountManager.listMounts();\n    const mount = allMounts.find((v) => v.id === mountId);\n    if (!mount) return err(`Mount not found: \"${mountId}\"`);\n    const content = await readFile(join(mount.mountPath, filePath), \"utf-8\");\n    return ok(content);\n  } catch (e: unknown) {\n    return err(e instanceof Error ? e.message : String(e));\n  }\n}\n"]}

package/dist/chunk-RRVQAE5D.js

@@ -0,0 +1,51 @@
+// bridge/src/capability-dispatch.ts
+async function dispatchCapability(hooks, callId, name, input, onBackgroundError = () => {
+}) {
+  const cap = hooks.resolve(name);
+  if (cap?.render && hooks.emitRender) {
+    hooks.emitRender({
+      type: "render_invoked",
+      capabilityName: name,
+      props: input,
+      callId
+    });
+    if (cap.render.fallback && hooks.emitText) {
+      const fallback = renderFallback(cap.render.fallback, input);
+      hooks.emitText(fallback);
+    }
+  }
+  if (cap?.fireAndForget) {
+    void hooks.invoke(name, input).catch(onBackgroundError);
+    return { result: {}, background: true };
+  }
+  const result = await hooks.invoke(name, input);
+  return { result, background: false };
+}
+function renderFallback(template, input) {
+  if (!input || typeof input !== "object") {
+    return template.replace(/\{\{\s*[\w$.]+\s*\}\}/g, "");
+  }
+  const props = input;
+  return template.replace(/\{\{\s*([\w$.]+)\s*\}\}/g, (_match, path) => {
+    const value = readPath(props, path);
+    return value === void 0 || value === null ? "" : String(value);
+  });
+}
+function readPath(obj, path) {
+  const parts = path.split(".");
+  let current = obj;
+  for (const part of parts) {
+    if (current === null || current === void 0 || typeof current !== "object") {
+      return void 0;
+    }
+    current = current[part];
+  }
+  return current;
+}
+function filterRenderCapabilities(caps) {
+  return caps.filter((c) => c.render !== void 0);
+}
+
+export { dispatchCapability, filterRenderCapabilities, renderFallback };
+//# sourceMappingURL=chunk-RRVQAE5D.js.map
+//# sourceMappingURL=chunk-RRVQAE5D.js.map

package/dist/chunk-RRVQAE5D.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../bridge/src/capability-dispatch.ts"],"names":[],"mappings":";AA+DA,eAAsB,mBACpB,KAAA,EACA,MAAA,EACA,IAAA,EACA,KAAA,EACA,oBAA4C,MAAM;AAAC,CAAA,EAChB;AACnC,EAAA,MAAM,GAAA,GAAM,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA;AAK9B,EAAA,IAAI,GAAA,EAAK,MAAA,IAAU,KAAA,CAAM,UAAA,EAAY;AACnC,IAAA,KAAA,CAAM,UAAA,CAAW;AAAA,MACf,IAAA,EAAM,gBAAA;AAAA,MACN,cAAA,EAAgB,IAAA;AAAA,MAChB,KAAA,EAAO,KAAA;AAAA,MACP;AAAA,KACD,CAAA;AACD,IAAA,IAAI,GAAA,CAAI,MAAA,CAAO,QAAA,IAAY,KAAA,CAAM,QAAA,EAAU;AACzC,MAAA,MAAM,QAAA,GAAW,cAAA,CAAe,GAAA,CAAI,MAAA,CAAO,UAAU,KAAK,CAAA;AAC1D,MAAA,KAAA,CAAM,SAAS,QAAQ,CAAA;AAAA,IACzB;AAAA,EACF;AAEA,EAAA,IAAI,KAAK,aAAA,EAAe;AAEtB,IAAA,KAAK,MAAM,MAAA,CAAO,IAAA,EAAM,KAAK,CAAA,CAAE,MAAM,iBAAiB,CAAA;AACtD,IAAA,OAAO,EAAE,MAAA,EAAQ,EAAC,EAAG,YAAY,IAAA,EAAK;AAAA,EACxC;AAEA,EAAA,MAAM,MAAA,GAAS,MAAM,KAAA,CAAM,MAAA,CAAO,MAAM,KAAK,CAAA;AAC7C,EAAA,OAAO,EAAE,MAAA,EAAQ,UAAA,EAAY,KAAA,EAAM;AACrC;AAqBO,SAAS,cAAA,CAAe,UAAkB,KAAA,EAAwB;AACvE,EAAA,IAAI,CAAC,KAAA,IAAS,OAAO,KAAA,KAAU,QAAA,EAAU;AACvC,IAAA,OAAO,QAAA,CAAS,OAAA,CAAQ,wBAAA,EAA0B,EAAE,CAAA;AAAA,EACtD;AACA,EAAA,MAAM,KAAA,GAAQ,KAAA;AACd,EAAA,OAAO,QAAA,CAAS,OAAA,CAAQ,0BAAA,EAA4B,CAAC,QAAQ,IAAA,KAAiB;AAC5E,IAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,KAAA,EAAO,IAAI,CAAA;AAClC,IAAA,OAAO,UAAU,MAAA,IAAa,KAAA,KAAU,IAAA,GAAO,EAAA,GAAK,OAAO,KAAK,CAAA;AAAA,EAClE,CAAC,CAAA;AACH;AAEA,SAAS,QAAA,CAAS,KAA8B,IAAA,EAAuB;AACrE,EAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAC5B,EAAA,IAAI,OAAA,GAAmB,GAAA;AACvB,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,IAAI,YAAY,IAAA,IAAQ,OAAA,KAAY,MAAA,IAAa,OAAO,YAAY,QAAA,EAAU;AAC5E,MAAA,OAAO,MAAA;AAAA,IACT;AACA,IAAA,OAAA,GAAW,QAAoC,IAAI,CAAA;AAAA,EACrD;AACA,EAAA,OAAO,OAAA;AACT;AAYO,SAAS,yBAAyB,IAAA,EAAkC;AACzE,EAAA,OAAO,KAAK,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,WAAW,MAAS,CAAA;AAClD","file":"chunk-RRVQAE5D.js","sourcesContent":["/**\n * Capability dispatch helpers for bridge drivers.\n *\n * The runner builds a {@link BridgeCapabilityHooks} bundle from its\n * `CapabilityRegistry` and threads it through `AgentConfig.capabilities`.\n * Drivers consume the bundle via these helpers without taking a runtime\n * dependency on `@skaile/workspaces/runner` (which would create a circular dep).\n *\n * Three behaviours are layered into a single dispatch path:\n *\n * 1. **Standard tool call** — the LLM invokes a capability; the bridge calls\n *    `hooks.invoke()`, awaits the result, and returns it to the LLM.\n * 2. **Fire-and-forget** — when the resolved Capability has `fireAndForget`\n *    set, the bridge resolves to `{}` immediately and runs the handler in\n *    the background. Background errors are logged but never surfaced to the\n *    LLM since the call is already settled.\n * 3. **Render capability** — when the resolved Capability has a non-undefined\n *    `render`, the bridge emits `RenderInvokedEvent` to the runner via\n *    `hooks.emitRender` and (when `render.fallback` is set) a parallel text\n *    event via `hooks.emitText` with simple `{{prop}}` substitution. The\n *    placeholder convention follows the v2 spec — top-level keys of `props`\n *    only, with optional dotted-path traversal (`{{user.name}}`). The legacy\n *    AAP `{{props.x}}` form was retired in Phase 6.\n *\n * @category Capabilities\n * @since 2.0.0\n */\nimport type { Capability } from \"@skaile/workspaces/types\";\nimport type { BridgeCapabilityHooks } from \"./types.js\";\n\n/**\n * Result of a capability dispatch returned by {@link dispatchCapability}.\n *\n * The bridge feeds `{ result }` back to the LLM tool-use response. For\n * fire-and-forget capabilities `result` is always `{}` and `background` is `true`.\n *\n * @docLink packages/bridge/concepts#capability-dispatch-result\n */\nexport interface CapabilityDispatchResult {\n  /** Value returned to the LLM. `{}` for fire-and-forget capabilities. */\n  result: unknown;\n  /** True when the handler is still running in the background (fire-and-forget). */\n  background: boolean;\n}\n\n/**\n * Run a capability invocation through the runner-provided hooks, applying\n * render-event emission and fire-and-forget short-circuit.\n *\n * The result is always shaped for direct return to the LLM. For\n * fire-and-forget capabilities the background promise is fired and any error\n * is logged through `onBackgroundError` (defaulting to a no-op). For all\n * other capabilities the handler is awaited; errors propagate as a rejection\n * so the driver can surface them as tool errors.\n *\n * @param hooks - Capability dispatch bundle from `AgentConfig.capabilities`.\n * @param callId - Correlation ID for the tool-use invocation (used in render events).\n * @param name - Registered capability name.\n * @param input - Raw tool input from the LLM.\n * @param onBackgroundError - Optional error handler for fire-and-forget failures.\n * @returns Resolved dispatch result with the LLM-facing value and background flag.\n * @docLink packages/bridge/concepts#dispatch-capability\n */\nexport async function dispatchCapability(\n  hooks: BridgeCapabilityHooks,\n  callId: string,\n  name: string,\n  input: unknown,\n  onBackgroundError: (err: unknown) => void = () => {},\n): Promise<CapabilityDispatchResult> {\n  const cap = hooks.resolve(name);\n\n  // Render emission happens before invocation so clients see the props the\n  // LLM passed in even if the handler errors. The runner's gateway forwards\n  // the event over the transport.\n  if (cap?.render && hooks.emitRender) {\n    hooks.emitRender({\n      type: \"render_invoked\",\n      capabilityName: name,\n      props: input,\n      callId,\n    });\n    if (cap.render.fallback && hooks.emitText) {\n      const fallback = renderFallback(cap.render.fallback, input);\n      hooks.emitText(fallback);\n    }\n  }\n\n  if (cap?.fireAndForget) {\n    // Resolve immediately; run handler in background.\n    void hooks.invoke(name, input).catch(onBackgroundError);\n    return { result: {}, background: true };\n  }\n\n  const result = await hooks.invoke(name, input);\n  return { result, background: false };\n}\n\n/**\n * Substitute `{{prop}}` placeholders inside a fallback template using the\n * input record. Top-level keys of `props` resolve directly\n * (`{{name}}` → `props.name`); dotted paths traverse nested records\n * (`{{user.name}}` → `props.user.name`). Missing keys collapse to an empty\n * string; non-record inputs collapse all placeholders.\n *\n * The convention is fixed by the v2 spec (§1, `RenderSpec.fallback`). The\n * legacy AAP form `{{props.x}}` is no longer accepted — author fallbacks\n * with bare keys.\n *\n * Intentionally minimal — full template engines belong in the platform's\n * render layer, not the bridge.\n *\n * @param template - Fallback string from `RenderSpec.fallback` with `{{key}}` placeholders.\n * @param input - LLM tool input object; non-object values collapse all placeholders.\n * @returns Template with all resolvable placeholders replaced.\n * @docLink packages/bridge/concepts#render-fallback\n */\nexport function renderFallback(template: string, input: unknown): string {\n  if (!input || typeof input !== \"object\") {\n    return template.replace(/\\{\\{\\s*[\\w$.]+\\s*\\}\\}/g, \"\");\n  }\n  const props = input as Record<string, unknown>;\n  return template.replace(/\\{\\{\\s*([\\w$.]+)\\s*\\}\\}/g, (_match, path: string) => {\n    const value = readPath(props, path);\n    return value === undefined || value === null ? \"\" : String(value);\n  });\n}\n\nfunction readPath(obj: Record<string, unknown>, path: string): unknown {\n  const parts = path.split(\".\");\n  let current: unknown = obj;\n  for (const part of parts) {\n    if (current === null || current === undefined || typeof current !== \"object\") {\n      return undefined;\n    }\n    current = (current as Record<string, unknown>)[part];\n  }\n  return current;\n}\n\n/**\n * Filter a capability list to those marked as render-capable (having a `render` spec).\n *\n * Used by drivers that emit a separate render manifest at registration time.\n * Currently unused in production drivers; reserved for future phases.\n *\n * @param caps - Full capability list to filter.\n * @returns Subset of capabilities with a non-undefined `render` property.\n * @docLink packages/bridge/concepts#filter-render-capabilities\n */\nexport function filterRenderCapabilities(caps: Capability[]): Capability[] {\n  return caps.filter((c) => c.render !== undefined);\n}\n"]}

package/dist/chunk-SZ3SIVZQ.js

@@ -0,0 +1,78 @@
+// client/src/client.ts
+var AgentClient = class {
+  transport;
+  handlers = /* @__PURE__ */ new Set();
+  unsubTransport;
+  constructor(transport) {
+    this.transport = transport;
+    this.unsubTransport = transport.onMessage((event) => {
+      for (const handler of this.handlers) {
+        handler(event);
+      }
+    });
+  }
+  /** Connect transport (if needed) and send initial configuration. */
+  async start(config) {
+    if (!this.transport.connected) {
+      await this.transport.connect();
+    }
+    await this.configure(config);
+  }
+  /**
+   * @deprecated v2 reconfigure path. Protocol v3 replaces this with a one-shot
+   * `SessionInitCommand` envelope sent at session start; mid-session reconfig is
+   * routed through the `runner.*` capability surface. Kept for v2 callers; the
+   * cast survives because the wire shape is no longer in the `AgentCommand`
+   * union. Remove once forge apps have migrated to v3.
+   */
+  // @TODO: Code-Review: deprecated v2→v3 migration stub — remove once forge apps no longer call configure(); tracked as pre-publication cleanup
+  async configure(config) {
+    this.transport.send({ type: "configure", config });
+  }
+  /** Send a raw AgentCommand to the server. */
+  send(command) {
+    this.transport.send(command);
+  }
+  /** Send a user message to the agent. */
+  async prompt(message) {
+    this.transport.send({ type: "prompt", prompt: message });
+  }
+  /** Answer an agent question. */
+  async reply(answer) {
+    this.transport.send({ type: "reply", answer });
+  }
+  /** Cancel the current operation. */
+  async abort() {
+    this.transport.send({ type: "cancel" });
+  }
+  /** Shut down the agent and disconnect transport. */
+  async dispose() {
+    this.transport.send({ type: "shutdown" });
+    this.unsubTransport();
+    await this.transport.disconnect();
+  }
+  /**
+   * @deprecated v2 shared-state mutation path. Protocol v3 routes shared-state
+   * writes through the `runner.set_state` capability; this client method stays
+   * as a stop-gap for v2 callers. The cast survives because `state_action` is
+   * no longer in the `AgentCommand` union. Remove once forge apps have
+   * migrated to v3.
+   */
+  // @TODO: Code-Review: deprecated v2 stop-gap with unsafe `as unknown as AgentCommand` cast — remove once forge apps use runner.set_state capability
+  sendStateAction(store, action) {
+    this.transport.send({ type: "state_action", store, action });
+  }
+  onEvent(handler) {
+    this.handlers.add(handler);
+  }
+  offEvent(handler) {
+    this.handlers.delete(handler);
+  }
+  get isRunning() {
+    return this.transport.connected;
+  }
+};
+
+export { AgentClient };
+//# sourceMappingURL=chunk-SZ3SIVZQ.js.map
+//# sourceMappingURL=chunk-SZ3SIVZQ.js.map

package/dist/chunk-SZ3SIVZQ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../client/src/client.ts"],"names":[],"mappings":";AAqCO,IAAM,cAAN,MAA2C;AAAA,EAC/B,SAAA;AAAA,EACA,QAAA,uBAAe,GAAA,EAAiC;AAAA,EAChD,cAAA;AAAA,EAEjB,YAAY,SAAA,EAA4B;AACtC,IAAA,IAAA,CAAK,SAAA,GAAY,SAAA;AACjB,IAAA,IAAA,CAAK,cAAA,GAAiB,SAAA,CAAU,SAAA,CAAU,CAAC,KAAA,KAAU;AACnD,MAAA,KAAA,MAAW,OAAA,IAAW,KAAK,QAAA,EAAU;AACnC,QAAA,OAAA,CAAQ,KAAK,CAAA;AAAA,MACf;AAAA,IACF,CAAC,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,MAAM,MAAA,EAA2C;AACrD,IAAA,IAAI,CAAC,IAAA,CAAK,SAAA,CAAU,SAAA,EAAW;AAC7B,MAAA,MAAM,IAAA,CAAK,UAAU,OAAA,EAAQ;AAAA,IAC/B;AACA,IAAA,MAAM,IAAA,CAAK,UAAU,MAAM,CAAA;AAAA,EAC7B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,UAAU,MAAA,EAAgD;AAC9D,IAAA,IAAA,CAAK,UAAU,IAAA,CAAK,EAAE,IAAA,EAAM,WAAA,EAAa,QAAmC,CAAA;AAAA,EAC9E;AAAA;AAAA,EAGA,KAAK,OAAA,EAA6B;AAChC,IAAA,IAAA,CAAK,SAAA,CAAU,KAAK,OAAO,CAAA;AAAA,EAC7B;AAAA;AAAA,EAGA,MAAM,OAAO,OAAA,EAAgC;AAC3C,IAAA,IAAA,CAAK,UAAU,IAAA,CAAK,EAAE,MAAM,QAAA,EAAU,MAAA,EAAQ,SAAS,CAAA;AAAA,EACzD;AAAA;AAAA,EAGA,MAAM,MAAM,MAAA,EAA+B;AACzC,IAAA,IAAA,CAAK,UAAU,IAAA,CAAK,EAAE,IAAA,EAAM,OAAA,EAAS,QAAQ,CAAA;AAAA,EAC/C;AAAA;AAAA,EAGA,MAAM,KAAA,GAAuB;AAC3B,IAAA,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,EAAE,IAAA,EAAM,UAAU,CAAA;AAAA,EACxC;AAAA;AAAA,EAGA,MAAM,OAAA,GAAyB;AAC7B,IAAA,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,EAAE,IAAA,EAAM,YAAY,CAAA;AACxC,IAAA,IAAA,CAAK,cAAA,EAAe;AACpB,IAAA,MAAM,IAAA,CAAK,UAAU,UAAA,EAAW;AAAA,EAClC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,eAAA,CAAgB,OAAe,MAAA,EAAuC;AACpE,IAAA,IAAA,CAAK,UAAU,IAAA,CAAK,EAAE,MAAM,cAAA,EAAgB,KAAA,EAAO,QAAmC,CAAA;AAAA,EACxF;AAAA,EAEA,QAAQ,OAAA,EAA4C;AAClD,IAAA,IAAA,CAAK,QAAA,CAAS,IAAI,OAAO,CAAA;AAAA,EAC3B;AAAA,EAEA,SAAS,OAAA,EAA4C;AACnD,IAAA,IAAA,CAAK,QAAA,CAAS,OAAO,OAAO,CAAA;AAAA,EAC9B;AAAA,EAEA,IAAI,SAAA,GAAqB;AACvB,IAAA,OAAO,KAAK,SAAA,CAAU,SAAA;AAAA,EACxB;AACF","file":"chunk-SZ3SIVZQ.js","sourcesContent":["import type {\n  AgentCommand,\n  AgentEvent,\n  AgentReconfigureOptions,\n  AgentRuntimeConfig,\n  ClientTransport,\n  IAgentRuntime,\n} from \"@skaile/workspaces/types\";\n\n/**\n * Framework-agnostic protocol client for remote skaile agent servers.\n *\n * Implements `IAgentRuntime` over a pluggable `ClientTransport` (WebSocket, stdio,\n * in-process mock, etc.). Translates each `IAgentRuntime` method call into a typed\n * `AgentCommand` sent through the transport, and fans incoming `AgentEvent` messages\n * out to all handlers registered via `onEvent`. Key methods: `start()` optionally\n * connects the transport and sends initial configuration; `configure()` reconfigures\n * the agent at runtime; `prompt()` sends a user message; `sendStateAction()` pushes\n * an action to a shared state store; `dispose()` sends a shutdown command and\n * disconnects the transport.\n *\n * One `AgentClient` instance represents one connection to one agent server. Mapping\n * multiple session IDs to client instances is the consumer's responsibility (e.g.\n * `WsAgentGatewayService` in the platform backend uses `Map<sessionId, AgentClient>`).\n *\n * @example\n * ```ts\n * const transport = new WebSocketClientTransport({ url: 'ws://localhost:8080' });\n * const client = new AgentClient(transport);\n * await client.start({ projectDir: '/my/project' });\n * client.onEvent((e) => console.log(e));\n * await client.prompt('Hello');\n * await client.dispose();\n * ```\n *\n * @docLink packages/client/dev-guide#agent-client\n */\nexport class AgentClient implements IAgentRuntime {\n  private readonly transport: ClientTransport;\n  private readonly handlers = new Set<(event: AgentEvent) => void>();\n  private readonly unsubTransport: () => void;\n\n  constructor(transport: ClientTransport) {\n    this.transport = transport;\n    this.unsubTransport = transport.onMessage((event) => {\n      for (const handler of this.handlers) {\n        handler(event);\n      }\n    });\n  }\n\n  /** Connect transport (if needed) and send initial configuration. */\n  async start(config: AgentRuntimeConfig): Promise<void> {\n    if (!this.transport.connected) {\n      await this.transport.connect();\n    }\n    await this.configure(config);\n  }\n\n  /**\n   * @deprecated v2 reconfigure path. Protocol v3 replaces this with a one-shot\n   * `SessionInitCommand` envelope sent at session start; mid-session reconfig is\n   * routed through the `runner.*` capability surface. Kept for v2 callers; the\n   * cast survives because the wire shape is no longer in the `AgentCommand`\n   * union. Remove once forge apps have migrated to v3.\n   */\n  // @TODO: Code-Review: deprecated v2→v3 migration stub — remove once forge apps no longer call configure(); tracked as pre-publication cleanup\n  async configure(config: AgentReconfigureOptions): Promise<void> {\n    this.transport.send({ type: \"configure\", config } as unknown as AgentCommand);\n  }\n\n  /** Send a raw AgentCommand to the server. */\n  send(command: AgentCommand): void {\n    this.transport.send(command);\n  }\n\n  /** Send a user message to the agent. */\n  async prompt(message: string): Promise<void> {\n    this.transport.send({ type: \"prompt\", prompt: message });\n  }\n\n  /** Answer an agent question. */\n  async reply(answer: string): Promise<void> {\n    this.transport.send({ type: \"reply\", answer });\n  }\n\n  /** Cancel the current operation. */\n  async abort(): Promise<void> {\n    this.transport.send({ type: \"cancel\" });\n  }\n\n  /** Shut down the agent and disconnect transport. */\n  async dispose(): Promise<void> {\n    this.transport.send({ type: \"shutdown\" });\n    this.unsubTransport();\n    await this.transport.disconnect();\n  }\n\n  /**\n   * @deprecated v2 shared-state mutation path. Protocol v3 routes shared-state\n   * writes through the `runner.set_state` capability; this client method stays\n   * as a stop-gap for v2 callers. The cast survives because `state_action` is\n   * no longer in the `AgentCommand` union. Remove once forge apps have\n   * migrated to v3.\n   */\n  // @TODO: Code-Review: deprecated v2 stop-gap with unsafe `as unknown as AgentCommand` cast — remove once forge apps use runner.set_state capability\n  sendStateAction(store: string, action: Record<string, unknown>): void {\n    this.transport.send({ type: \"state_action\", store, action } as unknown as AgentCommand);\n  }\n\n  onEvent(handler: (event: AgentEvent) => void): void {\n    this.handlers.add(handler);\n  }\n\n  offEvent(handler: (event: AgentEvent) => void): void {\n    this.handlers.delete(handler);\n  }\n\n  get isRunning(): boolean {\n    return this.transport.connected;\n  }\n}\n"]}

package/dist/chunk-TS6VCR4W.js

@@ -0,0 +1,195 @@
+import { DRIVER_TARGETS } from './chunk-O4JH3KUE.js';
+import { renderAgentToFramework } from './chunk-7HLNUSNE.js';
+import { resolveFragments, loadPromptExtensions } from './chunk-CGYEHQOX.js';
+import { existsSync, readFileSync } from 'fs';
+import { resolve, basename, join, relative, isAbsolute } from 'path';
+import { parse } from 'yaml';
+
+function readManifest(agentDir) {
+  const yamlPath = join(agentDir, "agent.yaml");
+  if (!existsSync(yamlPath)) return null;
+  try {
+    return parse(readFileSync(yamlPath, "utf-8"));
+  } catch {
+    return null;
+  }
+}
+function readFile(agentDir, name) {
+  const p = join(agentDir, name);
+  if (!existsSync(p)) return null;
+  try {
+    return readFileSync(p, "utf-8");
+  } catch {
+    return null;
+  }
+}
+function parseFrontmatter(content) {
+  const match = content.match(/^---\n([\s\S]*?)\n---/);
+  if (!match) return {};
+  try {
+    return parse(match[1]) ?? {};
+  } catch {
+    return {};
+  }
+}
+function mergeManifests(parent, child) {
+  const result = { ...parent };
+  for (const [k, val] of Object.entries(child)) {
+    if (val === void 0) continue;
+    const parentVal = result[k];
+    if (Array.isArray(val) && Array.isArray(parentVal)) {
+      result[k] = [.../* @__PURE__ */ new Set([...parentVal, ...val])];
+    } else {
+      result[k] = val;
+    }
+  }
+  return result;
+}
+function installAgent(srcDir, agentDeployDir, workspaceRoot, driverTarget, skillsRelDir, nameOverride, includeSubAgents, visited, wsConfig, log) {
+  const created = [];
+  const warnings = [];
+  const realSrc = resolve(srcDir);
+  if (visited.has(realSrc)) return { created, warnings };
+  visited.add(realSrc);
+  let manifest = readManifest(srcDir);
+  if (!manifest) {
+    warnings.push(`${srcDir} has no agent.yaml \u2014 skipping (not a valid GitAgent package)`);
+    return { created, warnings };
+  }
+  if (manifest.extends) {
+    const parentDir = resolve(srcDir, manifest.extends);
+    const parentManifest = readManifest(parentDir);
+    if (parentManifest) {
+      manifest = mergeManifests(parentManifest, manifest);
+    } else {
+      warnings.push(
+        `extends: parent agent not found at "${manifest.extends}" (from ${srcDir}) \u2014 skipping inheritance`
+      );
+    }
+  }
+  const agentName = nameOverride ?? manifest.name ?? basename(srcDir);
+  log?.(`Installing git-agent: ${agentName} (${driverTarget})`);
+  const abilityRefs = [];
+  for (const name of manifest.abilities ?? []) {
+    const skillMdPath = join(workspaceRoot, skillsRelDir, name, "SKILL.md");
+    if (!existsSync(skillMdPath)) continue;
+    try {
+      const fm = parseFrontmatter(readFileSync(skillMdPath, "utf-8"));
+      const desc = typeof fm.description === "string" ? fm.description : void 0;
+      if (desc) abilityRefs.push({ name, description: desc });
+    } catch {
+    }
+  }
+  const contractRefs = [];
+  for (const name of manifest.contracts ?? []) {
+    const contractAbsPath = join(workspaceRoot, skillsRelDir, name, "CONTRACT.md");
+    if (!existsSync(contractAbsPath)) continue;
+    contractRefs.push({ name, relativePath: relative(workspaceRoot, contractAbsPath) });
+  }
+  const subAgentNames = (manifest.requires ?? []).filter((r) => r.name).map((r) => r.name);
+  const connectors = (wsConfig?.connectors ?? []).map((c) => ({
+    id: c.id,
+    driver: c.driver,
+    access: c.access ?? "read-write"
+  }));
+  const agentsRelDir = DRIVER_TARGETS[driverTarget]?.local.agent ?? "";
+  const fragmentCtx = {
+    framework: driverTarget,
+    skillsDir: skillsRelDir,
+    agentsDir: agentsRelDir,
+    subAgents: subAgentNames,
+    connectors,
+    abilityRefs,
+    contractRefs
+  };
+  const frameworkFragments = resolveFragments(
+    fragmentCtx,
+    wsConfig?.agent?.fragments,
+    workspaceRoot
+  );
+  const promptExtensions = loadPromptExtensions(
+    wsConfig?.agent?.["prompt-extensions"],
+    workspaceRoot
+  );
+  const input = {
+    manifest,
+    soul: readFile(srcDir, "SOUL.md"),
+    rules: readFile(srcDir, "RULES.md"),
+    duties: readFile(srcDir, "DUTIES.md"),
+    agentName,
+    agentDeployDir,
+    workspaceRoot,
+    abilityRefs,
+    contractRefs,
+    frameworkFragments,
+    promptExtensions
+  };
+  const result = renderAgentToFramework(input, driverTarget, log);
+  created.push(...result.created);
+  warnings.push(...result.warnings);
+  if (includeSubAgents) {
+    for (const req of manifest.requires ?? []) {
+      if (!req.source || !req.name) continue;
+      const subSrc = isAbsolute(req.source) ? req.source : resolve(srcDir, req.source);
+      if (!existsSync(subSrc)) {
+        warnings.push(`Sub-agent source not found: ${req.source} (from ${agentName})`);
+        continue;
+      }
+      const sub = installAgent(
+        subSrc,
+        agentDeployDir,
+        workspaceRoot,
+        driverTarget,
+        skillsRelDir,
+        void 0,
+        // use sub-agent's own name from its agent.yaml
+        includeSubAgents,
+        visited,
+        wsConfig,
+        log
+      );
+      created.push(...sub.created);
+      warnings.push(...sub.warnings);
+    }
+  }
+  return { created, warnings };
+}
+async function applyAgentsLayer(dest, config, driverTarget, templateDir, wsConfig, log) {
+  const created = [];
+  const warnings = [];
+  if (!config?.install?.length) return { created, warnings };
+  const targetMap = DRIVER_TARGETS[driverTarget];
+  if (!targetMap) {
+    warnings.push(`Unknown driver target "${driverTarget}" \u2014 skipping agent install`);
+    return { created, warnings };
+  }
+  const agentDeployDir = join(dest, targetMap.local.agent);
+  const skillsRelDir = targetMap.local.skill;
+  const visited = /* @__PURE__ */ new Set();
+  for (const entry of config.install) {
+    const srcDir = isAbsolute(entry.src) ? entry.src : resolve(templateDir, entry.src);
+    if (!existsSync(srcDir)) {
+      warnings.push(`Agent source not found: ${entry.src}`);
+      continue;
+    }
+    const r = installAgent(
+      srcDir,
+      agentDeployDir,
+      dest,
+      driverTarget,
+      skillsRelDir,
+      entry.name,
+      entry.includeSubAgents ?? true,
+      visited,
+      wsConfig,
+      log
+    );
+    created.push(...r.created);
+    warnings.push(...r.warnings);
+  }
+  return { created, warnings };
+}
+
+export { applyAgentsLayer, installAgent };
+//# sourceMappingURL=chunk-TS6VCR4W.js.map
+//# sourceMappingURL=chunk-TS6VCR4W.js.map

package/dist/chunk-TS6VCR4W.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../asset-manager/src/scaffold/layers/agents.ts"],"names":["parseYaml"],"mappings":";;;;;;;AA6CA,SAAS,aAAa,QAAA,EAAwC;AAC5D,EAAA,MAAM,QAAA,GAAW,IAAA,CAAK,QAAA,EAAU,YAAY,CAAA;AAC5C,EAAA,IAAI,CAAC,UAAA,CAAW,QAAQ,CAAA,EAAG,OAAO,IAAA;AAClC,EAAA,IAAI;AACF,IAAA,OAAOA,KAAA,CAAU,YAAA,CAAa,QAAA,EAAU,OAAO,CAAC,CAAA;AAAA,EAClD,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAEA,SAAS,QAAA,CAAS,UAAkB,IAAA,EAA6B;AAC/D,EAAA,MAAM,CAAA,GAAI,IAAA,CAAK,QAAA,EAAU,IAAI,CAAA;AAC7B,EAAA,IAAI,CAAC,UAAA,CAAW,CAAC,CAAA,EAAG,OAAO,IAAA;AAC3B,EAAA,IAAI;AACF,IAAA,OAAO,YAAA,CAAa,GAAG,OAAO,CAAA;AAAA,EAChC,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAGA,SAAS,iBAAiB,OAAA,EAA0C;AAClE,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,KAAA,CAAM,uBAAuB,CAAA;AACnD,EAAA,IAAI,CAAC,KAAA,EAAO,OAAO,EAAC;AACpB,EAAA,IAAI;AACF,IAAA,OAAQA,KAAA,CAAU,KAAA,CAAM,CAAC,CAAE,KAAiC,EAAC;AAAA,EAC/D,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAC;AAAA,EACV;AACF;AAMA,SAAS,cAAA,CAAe,QAAuB,KAAA,EAAqC;AAClF,EAAA,MAAM,MAAA,GAAwB,EAAE,GAAG,MAAA,EAAO;AAC1C,EAAA,KAAA,MAAW,CAAC,CAAA,EAAG,GAAG,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAuC;AAChF,IAAA,IAAI,QAAQ,MAAA,EAAW;AACvB,IAAA,MAAM,SAAA,GAAY,OAAO,CAAwB,CAAA;AACjD,IAAA,IAAI,MAAM,OAAA,CAAQ,GAAG,KAAK,KAAA,CAAM,OAAA,CAAQ,SAAS,CAAA,EAAG;AAClD,MAAC,MAAA,CAAmC,CAAC,CAAA,GAAI,CAAC,mBAAG,IAAI,GAAA,CAAI,CAAC,GAAG,SAAA,EAAW,GAAG,GAAG,CAAC,CAAC,CAAA;AAAA,IAC9E,CAAA,MAAO;AACL,MAAC,MAAA,CAAmC,CAAC,CAAA,GAAI,GAAA;AAAA,IAC3C;AAAA,EACF;AACA,EAAA,OAAO,MAAA;AACT;AAwBO,SAAS,YAAA,CACd,MAAA,EACA,cAAA,EACA,aAAA,EACA,YAAA,EAEA,cACA,YAAA,EACA,gBAAA,EACA,OAAA,EACA,QAAA,EACA,GAAA,EAC2C;AAC3C,EAAA,MAAM,UAAoB,EAAC;AAC3B,EAAA,MAAM,WAAqB,EAAC;AAE5B,EAAA,MAAM,OAAA,GAAU,QAAQ,MAAM,CAAA;AAC9B,EAAA,IAAI,QAAQ,GAAA,CAAI,OAAO,GAAG,OAAO,EAAE,SAAS,QAAA,EAAS;AACrD,EAAA,OAAA,CAAQ,IAAI,OAAO,CAAA;AAEnB,EAAA,IAAI,QAAA,GAAW,aAAa,MAAM,CAAA;AAClC,EAAA,IAAI,CAAC,QAAA,EAAU;AACb,IAAA,QAAA,CAAS,IAAA,CAAK,CAAA,EAAG,MAAM,CAAA,iEAAA,CAA8D,CAAA;AACrF,IAAA,OAAO,EAAE,SAAS,QAAA,EAAS;AAAA,EAC7B;AAGA,EAAA,IAAI,SAAS,OAAA,EAAS;AACpB,IAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,MAAA,EAAQ,QAAA,CAAS,OAAO,CAAA;AAClD,IAAA,MAAM,cAAA,GAAiB,aAAa,SAAS,CAAA;AAC7C,IAAA,IAAI,cAAA,EAAgB;AAClB,MAAA,QAAA,GAAW,cAAA,CAAe,gBAAgB,QAAQ,CAAA;AAAA,IACpD,CAAA,MAAO;AACL,MAAA,QAAA,CAAS,IAAA;AAAA,QACP,CAAA,oCAAA,EAAuC,QAAA,CAAS,OAAO,CAAA,QAAA,EAAW,MAAM,CAAA,6BAAA;AAAA,OAC1E;AAAA,IACF;AAAA,EACF;AAEA,EAAA,MAAM,SAAA,GAAY,YAAA,IAAgB,QAAA,CAAS,IAAA,IAAQ,SAAS,MAAM,CAAA;AAElE,EAAA,GAAA,GAAM,CAAA,sBAAA,EAAyB,SAAS,CAAA,EAAA,EAAK,YAAY,CAAA,CAAA,CAAG,CAAA;AAG5D,EAAA,MAAM,cAA4B,EAAC;AACnC,EAAA,KAAA,MAAW,IAAA,IAAQ,QAAA,CAAS,SAAA,IAAa,EAAC,EAAG;AAC3C,IAAA,MAAM,WAAA,GAAc,IAAA,CAAK,aAAA,EAAe,YAAA,EAAc,MAAM,UAAU,CAAA;AACtE,IAAA,IAAI,CAAC,UAAA,CAAW,WAAW,CAAA,EAAG;AAC9B,IAAA,IAAI;AACF,MAAA,MAAM,EAAA,GAAK,gBAAA,CAAiB,YAAA,CAAa,WAAA,EAAa,OAAO,CAAC,CAAA;AAC9D,MAAA,MAAM,OAAO,OAAO,EAAA,CAAG,WAAA,KAAgB,QAAA,GAAW,GAAG,WAAA,GAAc,KAAA,CAAA;AACnE,MAAA,IAAI,MAAM,WAAA,CAAY,IAAA,CAAK,EAAE,IAAA,EAAM,WAAA,EAAa,MAAM,CAAA;AAAA,IACxD,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AAGA,EAAA,MAAM,eAA8B,EAAC;AACrC,EAAA,KAAA,MAAW,IAAA,IAAQ,QAAA,CAAS,SAAA,IAAa,EAAC,EAAG;AAC3C,IAAA,MAAM,eAAA,GAAkB,IAAA,CAAK,aAAA,EAAe,YAAA,EAAc,MAAM,aAAa,CAAA;AAC7E,IAAA,IAAI,CAAC,UAAA,CAAW,eAAe,CAAA,EAAG;AAClC,IAAA,YAAA,CAAa,IAAA,CAAK,EAAE,IAAA,EAAM,YAAA,EAAc,SAAS,aAAA,EAAe,eAAe,GAAG,CAAA;AAAA,EACpF;AAGA,EAAA,MAAM,aAAA,GAAA,CAAiB,QAAA,CAAS,QAAA,IAAY,IAAI,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,IAAI,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,KAAM,EAAE,IAAI,CAAA;AAEvF,EAAA,MAAM,cAA8B,QAAA,EAAU,UAAA,IAAc,EAAC,EAAG,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,IAC1E,IAAI,CAAA,CAAE,EAAA;AAAA,IACN,QAAQ,CAAA,CAAE,MAAA;AAAA,IACV,MAAA,EAAQ,EAAE,MAAA,IAAU;AAAA,GACtB,CAAE,CAAA;AAEF,EAAA,MAAM,YAAA,GAAe,cAAA,CAAe,YAA4B,CAAA,EAAG,MAAM,KAAA,IAAS,EAAA;AAElF,EAAA,MAAM,WAAA,GAA+B;AAAA,IACnC,SAAA,EAAW,YAAA;AAAA,IACX,SAAA,EAAW,YAAA;AAAA,IACX,SAAA,EAAW,YAAA;AAAA,IACX,SAAA,EAAW,aAAA;AAAA,IACX,UAAA;AAAA,IACA,WAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,MAAM,kBAAA,GAAqB,gBAAA;AAAA,IACzB,WAAA;AAAA,IACA,UAAU,KAAA,EAAO,SAAA;AAAA,IACjB;AAAA,GACF;AACA,EAAA,MAAM,gBAAA,GAAmB,oBAAA;AAAA,IACvB,QAAA,EAAU,QAAQ,mBAAmB,CAAA;AAAA,IACrC;AAAA,GACF;AAEA,EAAA,MAAM,KAAA,GAA0B;AAAA,IAC9B,QAAA;AAAA,IACA,IAAA,EAAM,QAAA,CAAS,MAAA,EAAQ,SAAS,CAAA;AAAA,IAChC,KAAA,EAAO,QAAA,CAAS,MAAA,EAAQ,UAAU,CAAA;AAAA,IAClC,MAAA,EAAQ,QAAA,CAAS,MAAA,EAAQ,WAAW,CAAA;AAAA,IACpC,SAAA;AAAA,IACA,cAAA;AAAA,IACA,aAAA;AAAA,IACA,WAAA;AAAA,IACA,YAAA;AAAA,IACA,kBAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,MAAM,MAAA,GAAS,sBAAA,CAAuB,KAAA,EAAO,YAAA,EAAc,GAAG,CAAA;AAC9D,EAAA,OAAA,CAAQ,IAAA,CAAK,GAAG,MAAA,CAAO,OAAO,CAAA;AAC9B,EAAA,QAAA,CAAS,IAAA,CAAK,GAAG,MAAA,CAAO,QAAQ,CAAA;AAGhC,EAAA,IAAI,gBAAA,EAAkB;AACpB,IAAA,KAAA,MAAW,GAAA,IAAO,QAAA,CAAS,QAAA,IAAY,EAAC,EAAG;AACzC,MAAA,IAAI,CAAC,GAAA,CAAI,MAAA,IAAU,CAAC,IAAI,IAAA,EAAM;AAE9B,MAAA,MAAM,MAAA,GAAS,UAAA,CAAW,GAAA,CAAI,MAAM,CAAA,GAAI,IAAI,MAAA,GAAS,OAAA,CAAQ,MAAA,EAAQ,GAAA,CAAI,MAAM,CAAA;AAE/E,MAAA,IAAI,CAAC,UAAA,CAAW,MAAM,CAAA,EAAG;AACvB,QAAA,QAAA,CAAS,KAAK,CAAA,4BAAA,EAA+B,GAAA,CAAI,MAAM,CAAA,OAAA,EAAU,SAAS,CAAA,CAAA,CAAG,CAAA;AAC7E,QAAA;AAAA,MACF;AAEA,MAAA,MAAM,GAAA,GAAM,YAAA;AAAA,QACV,MAAA;AAAA,QACA,cAAA;AAAA,QACA,aAAA;AAAA,QACA,YAAA;AAAA,QACA,YAAA;AAAA,QACA,MAAA;AAAA;AAAA,QACA,gBAAA;AAAA,QACA,OAAA;AAAA,QACA,QAAA;AAAA,QACA;AAAA,OACF;AACA,MAAA,OAAA,CAAQ,IAAA,CAAK,GAAG,GAAA,CAAI,OAAO,CAAA;AAC3B,MAAA,QAAA,CAAS,IAAA,CAAK,GAAG,GAAA,CAAI,QAAQ,CAAA;AAAA,IAC/B;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,SAAS,QAAA,EAAS;AAC7B;AAgBA,eAAsB,iBACpB,IAAA,EACA,MAAA,EACA,YAAA,EACA,WAAA,EACA,UACA,GAAA,EACoD;AACpD,EAAA,MAAM,UAAoB,EAAC;AAC3B,EAAA,MAAM,WAAqB,EAAC;AAE5B,EAAA,IAAI,CAAC,MAAA,EAAQ,OAAA,EAAS,QAAQ,OAAO,EAAE,SAAS,QAAA,EAAS;AAEzD,EAAA,MAAM,SAAA,GAAY,eAAe,YAAY,CAAA;AAC7C,EAAA,IAAI,CAAC,SAAA,EAAW;AACd,IAAA,QAAA,CAAS,IAAA,CAAK,CAAA,uBAAA,EAA0B,YAAY,CAAA,+BAAA,CAA4B,CAAA;AAChF,IAAA,OAAO,EAAE,SAAS,QAAA,EAAS;AAAA,EAC7B;AAEA,EAAA,MAAM,cAAA,GAAiB,IAAA,CAAK,IAAA,EAAM,SAAA,CAAU,MAAM,KAAK,CAAA;AACvD,EAAA,MAAM,YAAA,GAAe,UAAU,KAAA,CAAM,KAAA;AACrC,EAAA,MAAM,OAAA,uBAAc,GAAA,EAAY;AAEhC,EAAA,KAAA,MAAW,KAAA,IAAS,OAAO,OAAA,EAAS;AAClC,IAAA,MAAM,MAAA,GAAS,UAAA,CAAW,KAAA,CAAM,GAAG,CAAA,GAAI,MAAM,GAAA,GAAM,OAAA,CAAQ,WAAA,EAAa,KAAA,CAAM,GAAG,CAAA;AAEjF,IAAA,IAAI,CAAC,UAAA,CAAW,MAAM,CAAA,EAAG;AACvB,MAAA,QAAA,CAAS,IAAA,CAAK,CAAA,wBAAA,EAA2B,KAAA,CAAM,GAAG,CAAA,CAAE,CAAA;AACpD,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,CAAA,GAAI,YAAA;AAAA,MACR,MAAA;AAAA,MACA,cAAA;AAAA,MACA,IAAA;AAAA,MACA,YAAA;AAAA,MACA,YAAA;AAAA,MACA,KAAA,CAAM,IAAA;AAAA,MACN,MAAM,gBAAA,IAAoB,IAAA;AAAA,MAC1B,OAAA;AAAA,MACA,QAAA;AAAA,MACA;AAAA,KACF;AACA,IAAA,OAAA,CAAQ,IAAA,CAAK,GAAG,CAAA,CAAE,OAAO,CAAA;AACzB,IAAA,QAAA,CAAS,IAAA,CAAK,GAAG,CAAA,CAAE,QAAQ,CAAA;AAAA,EAC7B;AAEA,EAAA,OAAO,EAAE,SAAS,QAAA,EAAS;AAC7B","file":"chunk-TS6VCR4W.js","sourcesContent":["/**\n * Agents layer — installs GitAgent packages into framework-native sub-agent formats.\n *\n * A GitAgent package (agent.yaml + SOUL.md + RULES.md) is transformed by a\n * framework-specific renderer into the file format the target framework natively reads.\n *\n * Supported backends (must have a bridge driver):\n *   claude-code → .claude/agents/<name>.md\n *   omp         → .omp/agents/<name>/ (directory with agent.yaml + SOUL.md)\n *   codex       → .codex/agents/<name>.toml\n *\n * Sub-agents: when includeSubAgents is true (default), requires[] entries in agent.yaml\n * are resolved and installed as separate top-level agents in the same deploy directory.\n * All frameworks flatten sub-agents — there is no nesting.\n *\n * System prompt phases (per agent):\n *   1. extends merge     — inherit from parent agent.yaml if manifest.extends is set\n *   2. ability refs      — read SKILL.md frontmatter from installed skills dir\n *   3. contract refs     — locate CONTRACT.md files in the installed skills dir\n *   4. fragments         — resolve framework fragments (agent-mode, handoff, etc.)\n *   5. prompt-extensions — load per-project markdown extensions from skaile.yaml\n */\n\nimport { existsSync, readFileSync } from \"node:fs\";\nimport { basename, isAbsolute, join, relative, resolve } from \"node:path\";\nimport { DRIVER_TARGETS } from \"@skaile/workspaces/core\";\nimport type { DriverTarget, SkWorkspaceConfig } from \"@skaile/workspaces/core\";\nimport { parse as parseYaml } from \"yaml\";\nimport type { AgentsLayerConfig } from \"../types.js\";\nimport {\n  type AbilityRef,\n  type ConnectorRef,\n  type ContractRef,\n  type FragmentContext,\n  loadPromptExtensions,\n  resolveFragments,\n} from \"../../fragments.js\";\nimport {\n  type AgentManifest,\n  type AgentRenderInput,\n  renderAgentToFramework,\n} from \"../../renderers.js\";\n\n// ── Helpers ───────────────────────────────────────────────────────────────────\n\nfunction readManifest(agentDir: string): AgentManifest | null {\n  const yamlPath = join(agentDir, \"agent.yaml\");\n  if (!existsSync(yamlPath)) return null;\n  try {\n    return parseYaml(readFileSync(yamlPath, \"utf-8\")) as AgentManifest;\n  } catch {\n    return null;\n  }\n}\n\nfunction readFile(agentDir: string, name: string): string | null {\n  const p = join(agentDir, name);\n  if (!existsSync(p)) return null;\n  try {\n    return readFileSync(p, \"utf-8\");\n  } catch {\n    return null;\n  }\n}\n\n/** Extract YAML frontmatter from a markdown file (content between first two --- delimiters). */\nfunction parseFrontmatter(content: string): Record<string, unknown> {\n  const match = content.match(/^---\\n([\\s\\S]*?)\\n---/);\n  if (!match) return {};\n  try {\n    return (parseYaml(match[1]!) as Record<string, unknown>) ?? {};\n  } catch {\n    return {};\n  }\n}\n\n/**\n * Merge parent and child agent manifests.\n * Scalars: child wins. Arrays: parent + child, deduplicated.\n */\nfunction mergeManifests(parent: AgentManifest, child: AgentManifest): AgentManifest {\n  const result: AgentManifest = { ...parent };\n  for (const [k, val] of Object.entries(child) as [keyof AgentManifest, unknown][]) {\n    if (val === undefined) continue;\n    const parentVal = result[k as keyof AgentManifest];\n    if (Array.isArray(val) && Array.isArray(parentVal)) {\n      (result as Record<string, unknown>)[k] = [...new Set([...parentVal, ...val])];\n    } else {\n      (result as Record<string, unknown>)[k] = val;\n    }\n  }\n  return result;\n}\n\n// ── Core installation ─────────────────────────────────────────────────────────\n\n/**\n * Install a single GitAgent source directory using the appropriate renderer.\n *\n * When `includeSubAgents` is `true`, recursively installs `requires[]` entries as\n * separate flat agents in the same deploy directory (no nesting). Tracks visited\n * directories to prevent infinite loops in `requires[]` cycles.\n *\n * @param srcDir - Absolute path to the GitAgent source directory (contains `agent.yaml`).\n * @param agentDeployDir - Absolute path to the framework's agent deploy directory.\n * @param workspaceRoot - Absolute path to the workspace root.\n * @param driverTarget - Agent framework ID used to select the renderer.\n * @param skillsRelDir - Relative path to the installed skills dir (e.g. `\".claude/skills\"`).\n * @param nameOverride - Override name for the installed agent. Defaults to `manifest.name`.\n * @param includeSubAgents - When `true`, recursively install `requires[]` sub-agents.\n * @param visited - Set of resolved source paths already processed (cycle guard).\n * @param wsConfig - Workspace config from `skaile.yaml` (fragments, connectors, extensions).\n * @param log - Optional logger callback for progress messages.\n * @returns Object with `created` file paths and `warnings` list.\n * @docLink packages/asset-manager/concepts#scaffold-layers\n */\nexport function installAgent(\n  srcDir: string,\n  agentDeployDir: string,\n  workspaceRoot: string,\n  driverTarget: string,\n  /** Relative path to the installed skills dir (e.g. \".claude/skills\") */\n  skillsRelDir: string,\n  nameOverride: string | undefined,\n  includeSubAgents: boolean,\n  visited: Set<string>,\n  wsConfig: SkWorkspaceConfig | undefined,\n  log?: (msg: string) => void,\n): { created: string[]; warnings: string[] } {\n  const created: string[] = [];\n  const warnings: string[] = [];\n\n  const realSrc = resolve(srcDir);\n  if (visited.has(realSrc)) return { created, warnings };\n  visited.add(realSrc);\n\n  let manifest = readManifest(srcDir);\n  if (!manifest) {\n    warnings.push(`${srcDir} has no agent.yaml — skipping (not a valid GitAgent package)`);\n    return { created, warnings };\n  }\n\n  // Phase 1: extends merge — inherit scalars/arrays from parent agent\n  if (manifest.extends) {\n    const parentDir = resolve(srcDir, manifest.extends);\n    const parentManifest = readManifest(parentDir);\n    if (parentManifest) {\n      manifest = mergeManifests(parentManifest, manifest);\n    } else {\n      warnings.push(\n        `extends: parent agent not found at \"${manifest.extends}\" (from ${srcDir}) — skipping inheritance`,\n      );\n    }\n  }\n\n  const agentName = nameOverride ?? manifest.name ?? basename(srcDir);\n\n  log?.(`Installing git-agent: ${agentName} (${driverTarget})`);\n\n  // Phase 2: resolve ability refs — read description from installed SKILL.md files\n  const abilityRefs: AbilityRef[] = [];\n  for (const name of manifest.abilities ?? []) {\n    const skillMdPath = join(workspaceRoot, skillsRelDir, name, \"SKILL.md\");\n    if (!existsSync(skillMdPath)) continue;\n    try {\n      const fm = parseFrontmatter(readFileSync(skillMdPath, \"utf-8\"));\n      const desc = typeof fm.description === \"string\" ? fm.description : undefined;\n      if (desc) abilityRefs.push({ name, description: desc });\n    } catch {\n      // skip unreadable SKILL.md\n    }\n  }\n\n  // Phase 3: resolve contract refs — locate CONTRACT.md files in the skills dir\n  const contractRefs: ContractRef[] = [];\n  for (const name of manifest.contracts ?? []) {\n    const contractAbsPath = join(workspaceRoot, skillsRelDir, name, \"CONTRACT.md\");\n    if (!existsSync(contractAbsPath)) continue;\n    contractRefs.push({ name, relativePath: relative(workspaceRoot, contractAbsPath) });\n  }\n\n  // Phase 4: build fragment context and resolve framework fragments + prompt extensions\n  const subAgentNames = (manifest.requires ?? []).filter((r) => r.name).map((r) => r.name);\n\n  const connectors: ConnectorRef[] = (wsConfig?.connectors ?? []).map((c) => ({\n    id: c.id,\n    driver: c.driver,\n    access: c.access ?? \"read-write\",\n  }));\n\n  const agentsRelDir = DRIVER_TARGETS[driverTarget as DriverTarget]?.local.agent ?? \"\";\n\n  const fragmentCtx: FragmentContext = {\n    framework: driverTarget,\n    skillsDir: skillsRelDir,\n    agentsDir: agentsRelDir,\n    subAgents: subAgentNames,\n    connectors,\n    abilityRefs,\n    contractRefs,\n  };\n\n  const frameworkFragments = resolveFragments(\n    fragmentCtx,\n    wsConfig?.agent?.fragments,\n    workspaceRoot,\n  );\n  const promptExtensions = loadPromptExtensions(\n    wsConfig?.agent?.[\"prompt-extensions\"],\n    workspaceRoot,\n  );\n\n  const input: AgentRenderInput = {\n    manifest,\n    soul: readFile(srcDir, \"SOUL.md\"),\n    rules: readFile(srcDir, \"RULES.md\"),\n    duties: readFile(srcDir, \"DUTIES.md\"),\n    agentName,\n    agentDeployDir,\n    workspaceRoot,\n    abilityRefs,\n    contractRefs,\n    frameworkFragments,\n    promptExtensions,\n  };\n\n  const result = renderAgentToFramework(input, driverTarget, log);\n  created.push(...result.created);\n  warnings.push(...result.warnings);\n\n  // Recursively install sub-agents from requires[] as flat top-level agents\n  if (includeSubAgents) {\n    for (const req of manifest.requires ?? []) {\n      if (!req.source || !req.name) continue;\n\n      const subSrc = isAbsolute(req.source) ? req.source : resolve(srcDir, req.source);\n\n      if (!existsSync(subSrc)) {\n        warnings.push(`Sub-agent source not found: ${req.source} (from ${agentName})`);\n        continue;\n      }\n\n      const sub = installAgent(\n        subSrc,\n        agentDeployDir,\n        workspaceRoot,\n        driverTarget,\n        skillsRelDir,\n        undefined, // use sub-agent's own name from its agent.yaml\n        includeSubAgents,\n        visited,\n        wsConfig,\n        log,\n      );\n      created.push(...sub.created);\n      warnings.push(...sub.warnings);\n    }\n  }\n\n  return { created, warnings };\n}\n\n// ── Public layer function ─────────────────────────────────────────────────────\n\n/**\n * Apply the agents scaffold layer — installs all GitAgent entries from `config.install` into the framework deploy directory.\n *\n * @param dest - Absolute path to the workspace root being scaffolded.\n * @param config - Agents layer configuration from the template manifest (or `ScaffoldOptions`).\n * @param driverTarget - Agent framework to render agents for.\n * @param templateDir - Absolute path to the template directory (used to resolve relative `src` paths).\n * @param wsConfig - Workspace config from the scaffolded `skaile.yaml`.\n * @param log - Optional logger callback.\n * @returns Object with `created` file paths and `warnings` list.\n * @docLink packages/asset-manager/concepts#scaffold-layers\n */\nexport async function applyAgentsLayer(\n  dest: string,\n  config: AgentsLayerConfig | undefined,\n  driverTarget: DriverTarget,\n  templateDir: string,\n  wsConfig?: SkWorkspaceConfig,\n  log?: (msg: string) => void,\n): Promise<{ created: string[]; warnings: string[] }> {\n  const created: string[] = [];\n  const warnings: string[] = [];\n\n  if (!config?.install?.length) return { created, warnings };\n\n  const targetMap = DRIVER_TARGETS[driverTarget];\n  if (!targetMap) {\n    warnings.push(`Unknown driver target \"${driverTarget}\" — skipping agent install`);\n    return { created, warnings };\n  }\n\n  const agentDeployDir = join(dest, targetMap.local.agent);\n  const skillsRelDir = targetMap.local.skill;\n  const visited = new Set<string>();\n\n  for (const entry of config.install) {\n    const srcDir = isAbsolute(entry.src) ? entry.src : resolve(templateDir, entry.src);\n\n    if (!existsSync(srcDir)) {\n      warnings.push(`Agent source not found: ${entry.src}`);\n      continue;\n    }\n\n    const r = installAgent(\n      srcDir,\n      agentDeployDir,\n      dest,\n      driverTarget,\n      skillsRelDir,\n      entry.name,\n      entry.includeSubAgents ?? true,\n      visited,\n      wsConfig,\n      log,\n    );\n    created.push(...r.created);\n    warnings.push(...r.warnings);\n  }\n\n  return { created, warnings };\n}\n"]}