@skaile/workspaces 0.8.5

package/dist/types/src/lifecycle.d.ts

@@ -0,0 +1,269 @@
+/**
+ * Lifecycle layer — Protocol v3's session-boundary surface.
+ *
+ * The deterministic boot envelope {@link SessionInitCommand} replaces the v2
+ * `configure` + `provision_secrets` + initial `request_access_token` round
+ * trips with one upfront message delivering identity, resolved config,
+ * pre-minted credentials, secrets, capabilities, shared state, active flows,
+ * resume hints, and logging config.
+ *
+ * Spec: `_devlog/specs/2026-05-10-deterministic-session-bootstrap.md`.
+ *
+ * @see {@link ProtocolVersion}
+ * @see {@link Capability}
+ *
+ * @category Lifecycle
+ * @since 3.0.0
+ */
+import type { Capability } from "./capabilities.js";
+import type { ActiveFlowRehydration } from "./flow.js";
+import type { LogStoreConfig } from "./logging.js";
+import type { ResourceDeclaration } from "./protocol.js";
+import type { AiResourceReference, SharedStateConfig, SubagentDefinition } from "./runtime.js";
+import type { ProtocolVersion } from "./version.js";
+/**
+ * Emitted by the runner at session boot to announce its protocol version.
+ * The platform's debug panel surfaces this alongside its own
+ * {@link PROTOCOL_VERSION} so operators can spot version drift.
+ *
+ * @category Lifecycle
+ * @since 2.0.0
+ * @docLink packages/types/protocol-v3#lifecycle-protocol-info-event
+ */
+export type ProtocolInfoEvent = {
+    type: "protocol_info";
+    /** Version the runner speaks. */
+    version: ProtocolVersion;
+};
+/**
+ * Emitted by the runner when {@link SessionInitCommand.protocolVersion.major}
+ * does not match the runner's own {@link PROTOCOL_VERSION}. The runner shuts
+ * down after emitting; the platform is expected to restart the session
+ * against a compatible image.
+ *
+ * @category Lifecycle
+ * @since 2.0.0
+ * @docLink packages/types/protocol-v3#lifecycle-incompatible-protocol-event
+ */
+export type IncompatibleProtocolEvent = {
+    type: "incompatible_protocol";
+    /** Version the runtime speaks. */
+    agentVersion: ProtocolVersion;
+    /** Version the platform announced via `SessionInitCommand.protocolVersion`. */
+    platformVersion: ProtocolVersion;
+};
+/**
+ * Discriminated result of a credential mint dispatch. Carried in
+ * {@link SessionInitCommand.credentials.mounts} / `.connectors` (pre-mint at
+ * boot) and returned as the typed value of the `host.refresh_credential`
+ * capability invocation (refresh on 401).
+ *
+ * Success branch carries the bearer token plus its provenance (`mintedAt`,
+ * `expiresAt`). Failure branch carries a stable `code` so the runner can
+ * choose the right surfacing strategy:
+ *
+ *   - `not-configured`: no credential set up for the target (e.g. no
+ *     provider link bound to the project). Mount/connector stays inactive;
+ *     the runner emits a notice via `host.notify_user`.
+ *   - `revoked`: credential was revoked at the provider; user must
+ *     reconnect. The runner surfaces a deep link via `host.notify_user`.
+ *   - `provider-error`: upstream provider returned a non-success response;
+ *     `message` carries the upstream error text.
+ *   - `backend-error`: internal mediator error; safe to retry.
+ *
+ * Spec: `_devlog/specs/2026-05-10-deterministic-session-bootstrap.md`.
+ *
+ * @category Lifecycle
+ * @since 3.0.0
+ * @docLink packages/types/protocol-v3#credential-mint
+ */
+export type CredentialMint = {
+    ok: true;
+    /** Bearer token. Treated as opaque by the runner. */
+    token: string;
+    /** ISO-8601 expiry, or `null` for indefinite tokens (static PATs). */
+    expiresAt: string | null;
+    /** ISO-8601 mint timestamp (for audit). */
+    mintedAt: string;
+} | {
+    ok: false;
+    code: "not-configured" | "revoked" | "provider-error" | "backend-error";
+    /** Human-readable detail. Never carries the secret itself. */
+    message: string;
+};
+/**
+ * The resolved `skaile.yaml` the platform substituted for this session.
+ *
+ * The runner does NOT re-resolve — it consumes the entries verbatim. Mount
+ * and connector credentials ride separately in
+ * {@link SessionInitCommand.credentials} so the runner never has to call back
+ * into the platform during mount setup.
+ *
+ * @category Lifecycle
+ * @since 3.0.0
+ * @docLink packages/types/protocol-v3#resolved-skaile-config
+ */
+export type ResolvedSkaileConfig = {
+    /** Mount declarations from `skaile.yaml`. */
+    mounts?: Array<ResourceDeclaration & {
+        /** When true the runner exposes the access token to the agent (tier-2 expose). */
+        exposeAccessToken?: boolean;
+        /** Override for the access-token-derivation TTL in seconds. */
+        accessTokenTTL?: number;
+        /** When true the mount enables filesystem watching. */
+        watch?: boolean;
+    }>;
+    /** Connector declarations from `skaile.yaml`. */
+    connectors?: ResourceDeclaration[];
+    /** AI resource (skill / flow / prompt) references from `skaile.yaml`. */
+    aiResources?: AiResourceReference[];
+    /** Subagent definitions from `skaile.yaml`. */
+    subagents?: Record<string, SubagentDefinition>;
+    /**
+     * Platform `AIProviderConfig.id` for the AI credential provisioned into
+     * this session. The runner uses this when invoking
+     * `host.refresh_credential` for `ai-credentials`.
+     */
+    aiProviderConfigId?: string;
+};
+/**
+ * Sent by the platform immediately after the WebSocket connects. Replaces the
+ * v2 `configure` + `provision_secrets` + initial `request_access_token`
+ * round trips with one deterministic envelope.
+ *
+ * The runner gates mount/connector setup on processing this message. No
+ * other commands are accepted until the runner has emitted
+ * {@link SessionInitAckEvent}. The runner enforces identity on every
+ * successive `session_init` (e.g. after a backend restart and gateway
+ * reconnect): mismatch on `identity.containerId` triggers
+ * {@link SessionInitMismatchEvent} + shutdown.
+ *
+ * Spec: `_devlog/specs/2026-05-10-deterministic-session-bootstrap.md`.
+ *
+ * @category Lifecycle
+ * @since 3.0.0
+ * @docLink packages/types/protocol-v3#session-init-command
+ */
+export type SessionInitCommand = {
+    type: "session_init";
+    /** Protocol version the platform speaks. Major-equality enforced by the runner. */
+    protocolVersion: ProtocolVersion;
+    /** Identity context. Available to every capability handler via `HandlerContext`. */
+    identity: {
+        containerId: string;
+        sessionId: string;
+        projectId: string;
+        /** Project owner; used by capability handlers that resolve UserDelegation credentials. */
+        ownerUserId: string;
+        /**
+         * Optional list of users with read access. Populated by the platform's
+         * sharing service for multi-user sessions; absent for single-owner
+         * projects.
+         */
+        members?: {
+            userId: string;
+            role: "Owner" | "Editor" | "Viewer";
+        }[];
+    };
+    /**
+     * Resolved skaile.yaml as the platform substituted it. The runner does
+     * NOT re-resolve.
+     */
+    resolvedConfig: ResolvedSkaileConfig;
+    /**
+     * Pre-minted credentials, keyed by mount id and connector id. Each entry
+     * is either a successful mint (token + expiry) or a structured failure
+     * the runner can surface to the user as a "this mount is unavailable"
+     * notice.
+     *
+     * For mounts/connectors whose `auth: backend` was rendered, the runner
+     * reads from this map instead of calling back to the platform. Refresh on
+     * 401 still goes through the `host.refresh_credential` capability.
+     */
+    credentials: {
+        mounts: Record<string, CredentialMint>;
+        connectors: Record<string, CredentialMint>;
+    };
+    /**
+     * Long-lived secrets pushed at boot. Same shape and isolation rules as
+     * the legacy v2 `provision_secrets` command.
+     */
+    secrets?: Record<string, string>;
+    /**
+     * Initial capability set (both directions). Replaces
+     * `ConfigureCommandV2.capabilities`. Includes:
+     *   - host capabilities the runner can invoke (audience: `['runtime']`).
+     *   - client-side capabilities the platform exposes to the LLM
+     *     (audience: `['llm', 'user']` etc.).
+     *
+     * Runtime-audience entries are re-pushed on every `session_init` (e.g.
+     * on every wake / reconnect) — the runner does NOT persist them across
+     * hibernation.
+     */
+    capabilities?: Capability[];
+    /** Initial shared state stores. Replaces `AgentReconfigureOptions.sharedState`. */
+    sharedState?: SharedStateConfig[];
+    /**
+     * Active flows to rehydrate. Replaces the post-configure
+     * `connector_mutate { hydrate }` fan-out — flows ride in the envelope
+     * and are hydrated atomically with everything else during init
+     * processing.
+     */
+    activeFlows?: ActiveFlowRehydration[];
+    /**
+     * Resume cascade hints. Replaces `AgentReconfigureOptions.resumeSessionId`
+     * and `expectedCapabilitySignature`.
+     *
+     * When `sessionId` is set, drivers that support native resume (claude-sdk
+     * today) recreate the driver with this id. The runner validates
+     * `expectedCapabilitySignature` against its post-init registry signature;
+     * mismatch causes the hint to be dropped and {@link ResumeFailedEvent}
+     * to fire.
+     */
+    resume?: {
+        sessionId?: string;
+        expectedCapabilitySignature?: string;
+    };
+    /**
+     * Logging configuration (mode, level, retention). Used to bootstrap the
+     * runner's LogStore at boot. The pre-init ring buffer drains into the
+     * LogStore once it is constructed.
+     */
+    logging?: LogStoreConfig;
+};
+/**
+ * Emitted by the runner once {@link SessionInitCommand} has been processed.
+ * Until this event fires the runner is in init-only mode — no prompts, no
+ * capability invocations are dispatched.
+ *
+ * @category Lifecycle
+ * @since 3.0.0
+ * @docLink packages/types/protocol-v3#session-init-ack-event
+ */
+export type SessionInitAckEvent = {
+    type: "session_init_ack";
+    /**
+     * Capability signature the runner has after processing the init.
+     * Computed from the registry's contents via
+     * `computeCapabilitySignature` (in `@skaile/workspaces/runner`). The platform
+     * uses this to verify that tier-1 native resume (when requested) found
+     * a compatible toolset.
+     */
+    capabilitySignature: string;
+};
+/**
+ * Emitted by the runner when a successive {@link SessionInitCommand} arrives
+ * with an `identity.containerId` that does not match the runner's current
+ * containerId. Defence against accidental cross-session reuse and routing
+ * bugs. The runner shuts down after emitting.
+ *
+ * @category Lifecycle
+ * @since 3.0.0
+ * @docLink packages/types/protocol-v3#session-init-mismatch-event
+ */
+export type SessionInitMismatchEvent = {
+    type: "session_init_mismatch";
+    expectedContainerId: string;
+    receivedContainerId: string;
+};
+//# sourceMappingURL=lifecycle.d.ts.map

package/dist/types/src/lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle.d.ts","sourceRoot":"","sources":["../../../types/src/lifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,KAAK,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAC/F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAEpD;;;;;;;;GAQG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,eAAe,CAAC;IACtB,iCAAiC;IACjC,OAAO,EAAE,eAAe,CAAC;CAC1B,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,MAAM,yBAAyB,GAAG;IACtC,IAAI,EAAE,uBAAuB,CAAC;IAC9B,kCAAkC;IAClC,YAAY,EAAE,eAAe,CAAC;IAC9B,+EAA+E;IAC/E,eAAe,EAAE,eAAe,CAAC;CAClC,CAAC;AAMF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,MAAM,cAAc,GACtB;IACE,EAAE,EAAE,IAAI,CAAC;IACT,qDAAqD;IACrD,KAAK,EAAE,MAAM,CAAC;IACd,sEAAsE;IACtE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,2CAA2C;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,IAAI,EAAE,gBAAgB,GAAG,SAAS,GAAG,gBAAgB,GAAG,eAAe,CAAC;IACxE,8DAA8D;IAC9D,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAMN;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,6CAA6C;IAC7C,MAAM,CAAC,EAAE,KAAK,CACZ,mBAAmB,GAAG;QACpB,kFAAkF;QAClF,iBAAiB,CAAC,EAAE,OAAO,CAAC;QAC5B,+DAA+D;QAC/D,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,uDAAuD;QACvD,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB,CACF,CAAC;IACF,iDAAiD;IACjD,UAAU,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACnC,yEAAyE;IACzE,WAAW,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACpC,+CAA+C;IAC/C,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAC/C;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B,CAAC;AAMF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,IAAI,EAAE,cAAc,CAAC;IAErB,mFAAmF;IACnF,eAAe,EAAE,eAAe,CAAC;IAEjC,oFAAoF;IACpF,QAAQ,EAAE;QACR,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,0FAA0F;QAC1F,WAAW,EAAE,MAAM,CAAC;QACpB;;;;WAIG;QACH,OAAO,CAAC,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAA;SAAE,EAAE,CAAC;KACrE,CAAC;IAEF;;;OAGG;IACH,cAAc,EAAE,oBAAoB,CAAC;IAErC;;;;;;;;;OASG;IACH,WAAW,EAAE;QACX,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QACvC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;KAC5C,CAAC;IAEF;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEjC;;;;;;;;;;OAUG;IACH,YAAY,CAAC,EAAE,UAAU,EAAE,CAAC;IAE5B,mFAAmF;IACnF,WAAW,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAElC;;;;;OAKG;IACH,WAAW,CAAC,EAAE,qBAAqB,EAAE,CAAC;IAEtC;;;;;;;;;OASG;IACH,MAAM,CAAC,EAAE;QACP,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,2BAA2B,CAAC,EAAE,MAAM,CAAC;KACtC,CAAC;IAEF;;;;OAIG;IACH,OAAO,CAAC,EAAE,cAAc,CAAC;CAC1B,CAAC;AAMF;;;;;;;;GAQG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,kBAAkB,CAAC;IACzB;;;;;;OAMG;IACH,mBAAmB,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,MAAM,wBAAwB,GAAG;IACrC,IAAI,EAAE,uBAAuB,CAAC;IAC9B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,mBAAmB,EAAE,MAAM,CAAC;CAC7B,CAAC"}

package/dist/types/src/logging.d.ts

@@ -0,0 +1,161 @@
+/**
+ * Structured logging contract.
+ * Type-only — runtime lives in @skaile/workspaces/core/logging.
+ */
+/**
+ * Top-level emitter family for a {@link LogSource}.
+ *
+ * `capability` was added in protocol v2.0.0 as part of the unified capability
+ * registry. See `_devlog/specs/2026-04-30-protocol-v2-capability-protocol.md`
+ * for the full taxonomy and `_devlog/specs/2026-05-01-debug-logging-design.md`
+ * for the source-taxonomy table.
+ *
+ * @since 1.0.0 (`capability` since 2.0.0)
+ * @docLink packages/types/logging#log-kind
+ */
+export type LogKind = "mount" | "connector" | "mcp" | "runner" | "bridge" | "agent" | "gateway" | "capability" | "flow-connector";
+/**
+ * Severity level for a log entry.
+ *
+ * @docLink packages/types/logging#log-entry
+ */
+export type LogLevel = "debug" | "info" | "warn" | "error";
+/**
+ * Source taxonomy for a log entry. The triple
+ * (`kind`, `subkind`, `instance`) lets the debug panel and the
+ * `skaile session logs` CLI filter by emitter family, driver, and
+ * concrete instance.
+ *
+ * @see {@link LogKind} for the allowed top-level kinds
+ *
+ * For the `capability` kind (added in protocol v2.0.0):
+ * - `subkind` is the origin kind: one of
+ *   `framework | client | agent | flow | skill | mcp | connector | mount`
+ *   (matches `CapabilityOrigin.kind` in `capabilities.ts`).
+ * - `instance` is the capability name (e.g. `platform.react`, `ui.gif`).
+ *
+ * Capability handlers receive a per-handler {@link Logger} via
+ * `HandlerContext.log` (wired by the runner's capability registry); using
+ * that logger ensures invocations land under the
+ * `capability:<origin>:<name>` slice and stay queryable from the debug panel
+ * and the CLI.
+ *
+ * @since 1.0.0
+ * @docLink packages/types/logging#log-source
+ */
+export interface LogSource {
+    kind: LogKind;
+    subkind: string;
+    instance?: string;
+}
+/**
+ * Serializable representation of a thrown error, stored in `LogEntry.error`.
+ *
+ * @docLink packages/types/logging#log-entry
+ */
+export interface NormalizedError {
+    name: string;
+    message: string;
+    stack?: string;
+}
+/**
+ * A single structured log record written to the `LogStore`.
+ *
+ * Assigned a monotonic ULID id. The `source` triple identifies the emitter;
+ * `data` and `error` carry structured context.
+ *
+ * @docLink packages/types/logging#log-entry
+ */
+export interface LogEntry {
+    id: string;
+    timestamp: string;
+    sessionId: string;
+    source: LogSource;
+    level: LogLevel;
+    message: string;
+    data?: Record<string, unknown>;
+    error?: NormalizedError;
+}
+/**
+ * Per-source logging interface. Obtain an instance from `core`'s `createLogger()`.
+ *
+ * Call `child()` to create a derived logger with merged source fields for sub-components.
+ *
+ * @docLink packages/types/logging#logger
+ */
+export interface Logger {
+    debug(msg: string, data?: object): void;
+    info(msg: string, data?: object): void;
+    warn(msg: string, data?: object): void;
+    error(msg: string, err?: unknown, data?: object): void;
+    /** Returns a new Logger with merged source. */
+    child(partial: Partial<LogSource>): Logger;
+}
+/**
+ * Storage mode for the `LogStore`. `persistent` writes to SQLite; `ephemeral` holds
+ * entries in memory only; `off` disables logging entirely.
+ *
+ * @docLink packages/types/logging#log-store-config
+ */
+export type LogStoreMode = "persistent" | "ephemeral" | "off";
+/**
+ * Retention policy for the `LogStore`. When both fields are set, both limits apply.
+ *
+ * @docLink packages/types/logging#log-store-config
+ */
+export interface LogStoreRetention {
+    maxEntries?: number;
+    maxAgeDays?: number;
+}
+/**
+ * Configuration for initializing a `LogStore` instance.
+ *
+ * @docLink packages/types/logging#log-store-config
+ */
+export interface LogStoreConfig {
+    mode: LogStoreMode;
+    level: LogLevel;
+    sessionId: string;
+    /** Workspace root; required when mode === 'persistent'. */
+    workspacePath?: string;
+    retention?: LogStoreRetention;
+}
+/**
+ * Filter input for querying the `LogStore`. All fields except `sessionId` are optional.
+ *
+ * @docLink packages/types/logging#log-query
+ */
+export interface LogQuery {
+    sessionId: string;
+    source?: Partial<LogSource>;
+    levels?: LogLevel[];
+    since?: string;
+    until?: string;
+    search?: string;
+    limit?: number;
+    cursor?: string;
+}
+/**
+ * Result of a `LogStore.query()` call. Carries a page of entries and an optional cursor
+ * for pagination.
+ *
+ * @docLink packages/types/logging#log-query
+ */
+export interface LogQueryResult {
+    entries: LogEntry[];
+    nextCursor?: string;
+}
+/**
+ * Sink contract for writing log entries. Runtime implementations live in
+ * `@skaile/workspaces/core/logging`. Defined here so consumers can type-check sink
+ * instances without depending on `core`.
+ *
+ * @docLink packages/types/logging#log-sink
+ */
+export interface LogSink {
+    write(entry: LogEntry): void;
+    writeBatch(entries: LogEntry[]): void;
+    query?(q: LogQuery): LogQueryResult;
+    close(): void;
+}
+//# sourceMappingURL=logging.d.ts.map

package/dist/types/src/logging.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logging.d.ts","sourceRoot":"","sources":["../../../types/src/logging.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;;;;GAUG;AACH,MAAM,MAAM,OAAO,GACf,OAAO,GACP,WAAW,GACX,KAAK,GACL,QAAQ,GACR,QAAQ,GACR,OAAO,GACP,SAAS,GACT,YAAY,GACZ,gBAAgB,CAAC;AAErB;;;;GAIG;AACH,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAE3D;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,SAAS,CAAC;IAClB,KAAK,EAAE,QAAQ,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,KAAK,CAAC,EAAE,eAAe,CAAC;CACzB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,MAAM;IACrB,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvD,+CAA+C;IAC/C,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC;CAC5C;AAED;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GAAG,YAAY,GAAG,WAAW,GAAG,KAAK,CAAC;AAE9D;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,YAAY,CAAC;IACnB,KAAK,EAAE,QAAQ,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,iBAAiB,CAAC;CAC/B;AAED;;;;GAIG;AACH,MAAM,WAAW,QAAQ;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAC5B,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,QAAQ,EAAE,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,OAAO;IACtB,KAAK,CAAC,KAAK,EAAE,QAAQ,GAAG,IAAI,CAAC;IAC7B,UAAU,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IACtC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,GAAG,cAAc,CAAC;IACpC,KAAK,IAAI,IAAI,CAAC;CACf"}

package/dist/types/src/manifests/_shared.d.ts

@@ -0,0 +1,162 @@
+/**
+ * Shared manifest frontmatter schemas and types.
+ * Common across all 11 asset kinds + Preset.
+ */
+import * as z from "zod";
+export declare const AssetKindValues: readonly ["skill", "agent", "connector", "mount", "flow", "contract", "prompt", "mcp-server", "knowledge", "persona", "ruleset"];
+export declare const AssetKindSchema: z.ZodEnum<["skill", "agent", "connector", "mount", "flow", "contract", "prompt", "mcp-server", "knowledge", "persona", "ruleset"]>;
+export type AssetKind = z.infer<typeof AssetKindSchema>;
+/** Artifact dependency (requires/produces/consumes in skill metadata). */
+export declare const ArtifactRefSchema: z.ZodObject<{
+    id: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    gate: z.ZodOptional<z.ZodEnum<["hard", "soft"]>>;
+    path: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    description?: string | undefined;
+    path?: string | undefined;
+    gate?: "hard" | "soft" | undefined;
+}, {
+    id: string;
+    description?: string | undefined;
+    path?: string | undefined;
+    gate?: "hard" | "soft" | undefined;
+}>;
+/** File prerequisite for a skill. */
+export declare const FilePrerequisiteSchema: z.ZodObject<{
+    path: z.ZodString;
+    gate: z.ZodOptional<z.ZodEnum<["hard", "soft"]>>;
+    description: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    path: string;
+    description?: string | undefined;
+    gate?: "hard" | "soft" | undefined;
+}, {
+    path: string;
+    description?: string | undefined;
+    gate?: "hard" | "soft" | undefined;
+}>;
+/** User input definition (for skill user_inputs or metadata.prerequisites.inputs_*). */
+export declare const UserInputSchema: z.ZodObject<{
+    key: z.ZodOptional<z.ZodString>;
+    id: z.ZodOptional<z.ZodString>;
+    label: z.ZodOptional<z.ZodString>;
+    prompt: z.ZodOptional<z.ZodString>;
+    type: z.ZodOptional<z.ZodString>;
+    required: z.ZodOptional<z.ZodBoolean>;
+    options: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    values: z.ZodOptional<z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodNumber]>, "many">>;
+    default: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodNumber]>, "many">]>>;
+    hint: z.ZodOptional<z.ZodString>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    key: z.ZodOptional<z.ZodString>;
+    id: z.ZodOptional<z.ZodString>;
+    label: z.ZodOptional<z.ZodString>;
+    prompt: z.ZodOptional<z.ZodString>;
+    type: z.ZodOptional<z.ZodString>;
+    required: z.ZodOptional<z.ZodBoolean>;
+    options: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    values: z.ZodOptional<z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodNumber]>, "many">>;
+    default: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodNumber]>, "many">]>>;
+    hint: z.ZodOptional<z.ZodString>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    key: z.ZodOptional<z.ZodString>;
+    id: z.ZodOptional<z.ZodString>;
+    label: z.ZodOptional<z.ZodString>;
+    prompt: z.ZodOptional<z.ZodString>;
+    type: z.ZodOptional<z.ZodString>;
+    required: z.ZodOptional<z.ZodBoolean>;
+    options: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    values: z.ZodOptional<z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodNumber]>, "many">>;
+    default: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodNumber]>, "many">]>>;
+    hint: z.ZodOptional<z.ZodString>;
+}, z.ZodTypeAny, "passthrough">>;
+/** Field definition for connectors/mounts. */
+export declare const FieldSchema: z.ZodObject<{
+    key: z.ZodString;
+    label: z.ZodOptional<z.ZodString>;
+    required: z.ZodOptional<z.ZodBoolean>;
+    sensitive: z.ZodOptional<z.ZodBoolean>;
+    type: z.ZodOptional<z.ZodString>;
+    default: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
+}, "strip", z.ZodTypeAny, {
+    key: string;
+    type?: string | undefined;
+    default?: string | number | boolean | undefined;
+    label?: string | undefined;
+    required?: boolean | undefined;
+    sensitive?: boolean | undefined;
+}, {
+    key: string;
+    type?: string | undefined;
+    default?: string | number | boolean | undefined;
+    label?: string | undefined;
+    required?: boolean | undefined;
+    sensitive?: boolean | undefined;
+}>;
+export declare const CommonMetadataSchema: z.ZodObject<{
+    version: z.ZodOptional<z.ZodString>;
+    author: z.ZodOptional<z.ZodString>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    stage: z.ZodOptional<z.ZodEnum<["alpha", "beta", "stable", "deprecated"]>>;
+    source: z.ZodOptional<z.ZodString>;
+    do_not_invoke: z.ZodOptional<z.ZodBoolean>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    version: z.ZodOptional<z.ZodString>;
+    author: z.ZodOptional<z.ZodString>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    stage: z.ZodOptional<z.ZodEnum<["alpha", "beta", "stable", "deprecated"]>>;
+    source: z.ZodOptional<z.ZodString>;
+    do_not_invoke: z.ZodOptional<z.ZodBoolean>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    version: z.ZodOptional<z.ZodString>;
+    author: z.ZodOptional<z.ZodString>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    stage: z.ZodOptional<z.ZodEnum<["alpha", "beta", "stable", "deprecated"]>>;
+    source: z.ZodOptional<z.ZodString>;
+    do_not_invoke: z.ZodOptional<z.ZodBoolean>;
+}, z.ZodTypeAny, "passthrough">>;
+/**
+ * Fields that can appear at the top level of any manifest's frontmatter.
+ * Not all are required -- each kind schema intersects with its own specifics.
+ */
+export declare const BaseFrontmatterSchema: z.ZodObject<{
+    name: z.ZodString;
+    description: z.ZodString;
+    version: z.ZodOptional<z.ZodString>;
+    publisher: z.ZodOptional<z.ZodString>;
+    category: z.ZodOptional<z.ZodString>;
+    license: z.ZodOptional<z.ZodString>;
+    keywords: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    description: string;
+    version?: string | undefined;
+    publisher?: string | undefined;
+    category?: string | undefined;
+    license?: string | undefined;
+    keywords?: string[] | undefined;
+}, {
+    name: string;
+    description: string;
+    version?: string | undefined;
+    publisher?: string | undefined;
+    category?: string | undefined;
+    license?: string | undefined;
+    keywords?: string[] | undefined;
+}>;
+export interface ManifestValidationSuccess<T> {
+    ok: true;
+    data: T;
+}
+export interface ManifestValidationFailure {
+    ok: false;
+    errors: Array<{
+        path: string;
+        message: string;
+    }>;
+}
+export type ManifestValidationResult<T> = ManifestValidationSuccess<T> | ManifestValidationFailure;
+export declare function validateManifest<T>(schema: z.ZodType<T>, data: unknown): ManifestValidationResult<T>;
+//# sourceMappingURL=_shared.d.ts.map

package/dist/types/src/manifests/_shared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_shared.d.ts","sourceRoot":"","sources":["../../../../types/src/manifests/_shared.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAMzB,eAAO,MAAM,eAAe,kIAYlB,CAAC;AAEX,eAAO,MAAM,eAAe,oIAA0B,CAAC;AACvD,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAMxD,0EAA0E;AAC1E,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;EAK5B,CAAC;AAEH,qCAAqC;AACrC,eAAO,MAAM,sBAAsB;;;;;;;;;;;;EAIjC,CAAC;AAEH,wFAAwF;AACxF,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAeZ,CAAC;AAEjB,8CAA8C;AAC9C,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;EAOtB,CAAC;AAMH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;gCASjB,CAAC;AAMjB;;;GAGG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;EAUhC,CAAC;AAMH,MAAM,WAAW,yBAAyB,CAAC,CAAC;IAC1C,EAAE,EAAE,IAAI,CAAC;IACT,IAAI,EAAE,CAAC,CAAC;CACT;AAED,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAClD;AAED,MAAM,MAAM,wBAAwB,CAAC,CAAC,IAAI,yBAAyB,CAAC,CAAC,CAAC,GAAG,yBAAyB,CAAC;AAEnG,wBAAgB,gBAAgB,CAAC,CAAC,EAChC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EACpB,IAAI,EAAE,OAAO,GACZ,wBAAwB,CAAC,CAAC,CAAC,CAY7B"}