@skaile/workspaces 1.15.1 → 2.0.0

package/CHANGELOG.md

@@ -1,5 +1,276 @@
 # Changelog
 
+## 2.0.0
+
+### Major Changes
+
+- [#470](https://github.com/skaile-ai/workspaces/pull/470) [`208af20`](https://github.com/skaile-ai/workspaces/commit/208af209fb59c18e483e7c3662d1a672d55aa465) Thanks [@peteralbert](https://github.com/peteralbert)! - Never touch the workspace mount synchronously ([#454](https://github.com/skaile-ai/workspaces/issues/454))
+
+  Inside the agent container `/skaile/workspace` **is** the rclone FUSE mount
+  (SharePoint / OneDrive / WebDAV), and the long-lived `skaile serve` process was
+  reaching it with **synchronous** `fs` and `child_process` calls on per-user-click
+  request paths. When the host rclone process wedges, such a call parks the single
+  threaded event loop in an uninterruptible kernel wait: the whole runtime stops
+  serving and the platform reads the session as dead or idle. **A hang is not an
+  error, so the `try/catch` around those calls never fired** — which is why this
+  class survived normal review. The same defect caused two total platform outages
+  on 2026-08-07 (65 min and 5.5 min); the platform side was fixed in
+  skaile-ai/platform#2018, [#2023](https://github.com/skaile-ai/workspaces/issues/2023) and [#2046](https://github.com/skaile-ai/workspaces/issues/2046), and this package carried the remaining
+  live CRITICALs.
+
+  Every such call site is now async (`node:fs/promises`, promisified `execFile`)
+  and bounded by a deadline, so a wedged mount degrades to **one failed request**
+  instead of a dead session. Async-ness is the actual fix — the deadline only
+  converts an unbounded wait into a bounded, reportable failure. Node cannot abort
+  a syscall already in the kernel, so a losing operation stays pending; that costs
+  one handle rather than the event loop.
+
+  New shared primitive `withFsDeadline` / `tryWithFsDeadline` / `FsDeadlineError`
+  in `@skaile/workspaces/core`, modelled on the existing `ensureFleetMounted`.
+
+  Also fixed along the way:
+
+  - **Unbounded recursive walks** — the mount resource listing and `walkDir`
+    followed symlinks with no depth, entry, time or cycle bound. Both are now
+    bounded on every axis, and truncation is always surfaced rather than passed
+    off as a complete result. The two differ in _how_, deliberately:
+    - The **mount listing throws**. It feeds the platform's folder rename, which
+      is list-recursive + copy + delete, so a silently short listing would have
+      deleted the un-copied remainder.
+    - **`walkDir` / `scanDirectory` report** a structured `WalkTruncation` (default
+      sink: a `warn` naming the bound that was hit) and return what they found. A
+      catalog scan is advisory — failing the whole scan because one repo is
+      pathologically deep would be worse than listing what is there. Callers that
+      need certainty should inspect the reported truncations; today `scanRepo`,
+      `resolveLibraryEntries` and the catalog/connector listings do not.
+  - **`SIGTERM` never lands on a `D`-state process.** Every git/nix/docker
+    subprocess timeout now uses `killSignal: "SIGKILL"`, and the call sites that
+    had _no_ timeout at all (`connectors/src/worktree.ts`, the deploy connector's
+    `rev-parse`) have explicit ones. The pre-existing timeouts bounded the
+    healthy-but-slow case only.
+  - **Overlapping timer ticks.** The git connector's 60 s fetch, 120 s submodule
+    sync and idle auto-commit could stack once each tick began awaiting; ticks now
+    skip while the previous is in flight, catch their own rejections (a `void`-called
+    async tick would otherwise take the process down), and cannot outlive `disconnect()`.
+  - **A live substitution bug**: `resolveRecipePath` became async and its result
+    was placed into the MCP recipe map un-awaited, substituting into config as the
+    string `[object Promise]`.
+  - **`deployAll` now honours its documented contract** — a filesystem failure
+    returns `{ success: false, error }` per entry instead of throwing and aborting
+    the batch.
+  - The git connector's shell-interpolated command strings are replaced by argv
+    arrays, removing an argument-injection/quoting class (paths and commit
+    messages containing spaces or quotes were previously mis-split).
+
+  This is a **major** release: several exported symbols became async. See
+  `MIGRATION.md` for the full `from → to` list and migration steps.
+
+### Minor Changes
+
+- [#467](https://github.com/skaile-ai/workspaces/pull/467) [`be5a346`](https://github.com/skaile-ai/workspaces/commit/be5a346fd03ea621947ddbf3515e66d7494384c6) Thanks [@peteralbert](https://github.com/peteralbert)! - `skaile manage`: lossless, non-blocking arrow-key navigation (coalesced key chunks are split, the soft-dep preview is debounced instead of awaited, and each frame is a single batched write), plus PgUp/PgDn/Home/End paging and an incremental `/` search on the Assets tab that combines with the origin filter.
+
+- [#469](https://github.com/skaile-ai/workspaces/pull/469) [`e4d96bc`](https://github.com/skaile-ai/workspaces/commit/e4d96bced7fde9ac473ec4494f5d13087f6d4d09) Thanks [@peteralbert](https://github.com/peteralbert)! - fix(store): fetch, stage, and wire store-sourced `mcp-server` assets
+
+  `skaile add mcp-server:<store-ref>` was a silent no-op: the dep landed in
+  `skaile.yaml`, `skaile list` / `skaile check` reported it installed/satisfied, but
+  the bytes were never fetched and the server was never wired into a session.
+
+  `NON_DEPLOYABLE_KINDS` was doing double duty — gating both the `deployAll` copy
+  (correct: an MCP is wired at session start, not copied to a driver target dir) and
+  the `stageStoreAssets` fetch (wrong: the wiring reads a real `MCP.md` off disk).
+  Three changes:
+
+  - `stageStoreAssets` now fetches + SHA-verifies `mcp-server` bytes into
+    `.skaile/cache/store/<publisher>/mcp-server/<name>/<version>/`. `persona` /
+    `ruleset` / `knowledge` stay unfetched — their resolver only reads clone-derived
+    repo maps. Nothing is copied into `.claude/`, so `add()` / `install()` still
+    return `[]` for the kind.
+  - `loadMcpServerDeclarations()` gained the store cache as a discovery source,
+    between catalog-dep refs and platform-materialized assets. Precedence is now
+    catalog-dep < store-staged < materialized < explicit `mcp_servers:`; undeclared
+    staged dirs are still dropped (canonical-contract invariant).
+  - `skaile list` reports a locked `mcp-server` with no resolvable declaration as
+    `drift` instead of `installed`, and `skaile check` now fails on any declared-but-
+    unmaterialized dep instead of printing "All dependencies satisfied."
+
+  Note: an `MCP.md` whose `command` uses `${recipe:...}` markers still only starts
+  inside a platform-deployed session (the Nix out-paths are built there). Staging
+  makes the server visible and declared; resolving recipes locally is a separate gap.
+
+### Patch Changes
+
+- [#477](https://github.com/skaile-ai/workspaces/pull/477) [`e253db1`](https://github.com/skaile-ai/workspaces/commit/e253db1ac165767a84aa854db7e28cef456e29e7) Thanks [@peteralbert](https://github.com/peteralbert)! - Enable Biome's `noFloatingPromises` and handle the floating promises it found ([#476](https://github.com/skaile-ai/workspaces/issues/476))
+
+  The repo had **no** lint rule for unhandled promises, so a missing `await` was
+  caught only by `tsc` — and only in the cases where the `Promise` was then used
+  as something it isn't (`.map`/`.flatMap`). A promise left floating in statement
+  position was invisible.
+
+  Nine call sites were floating. Two were latent process-killers and seven were
+  harmless-but-unmarked:
+
+  - `bridge/drivers/claude-sdk.ts` — the long-lived message loop now carries a
+    terminal handler. Its body is wrapped in `try/catch`, but that catch itself
+    emits, which can throw; an unhandled rejection there would take the process
+    down. The sibling background fetch is marked `void` instead, since its own
+    catch only logs and cannot reject.
+  - `factory-assets/connectors/devserver/adapter.ts` — the two stdout/stderr log
+    pumps are marked `void`; they run for the process's lifetime and swallow their
+    own stream errors.
+  - Four test helpers awaited nothing while reading the emitted event
+    synchronously. That only worked because `handleMountResourceRequest` happened
+    to run synchronously up to its first `await` — a real latent break, not a
+    style nit.
+  - One e2e test dropped the promise from `unwatchAll()`.
+
+  Scope note: Biome's rule only sees **statement-position** floats. It does not
+  catch a promise that is assigned and then misused in a conditional, a
+  comparison, or a template — and Biome has no equivalent of ESLint's
+  `no-misused-promises` / `no-unnecessary-condition`. This raises the floor; it
+  does not close the class. See [#476](https://github.com/skaile-ai/workspaces/issues/476) for the measurements.
+
+- [#468](https://github.com/skaile-ai/workspaces/pull/468) [`74d4e60`](https://github.com/skaile-ai/workspaces/commit/74d4e6060e496137ccf8585f00371eb44b537100) Thanks [@peteralbert](https://github.com/peteralbert)! - `skaile info` now resolves store-sourced assets: the lookup falls back from source clones
+  and factory assets to this project's deployed assets (offline) and then to the configured
+  catalog source, and the not-found hint no longer tells you to run `skaile source sync` for
+  an asset that only exists in the store.
+
+- [#465](https://github.com/skaile-ai/workspaces/pull/465) [`a05f2f2`](https://github.com/skaile-ai/workspaces/commit/a05f2f20702a15167a7c8012d6ea8b8e3fc2d656) Thanks [@peteralbert](https://github.com/peteralbert)! - Fix unpinned store-only assets failing to install with `Asset not found`. The store
+  fetcher built by `AssetManager` now implements the optional `listVersions` member of
+  the resolver's `StoreFetcher` contract, delegating to `RemoteCatalogSource#listVersions`
+  (degrading to `[]` on a store/transport failure, with a warning so an outage is not
+  silently reported as a missing asset). Without it a store-published asset
+  with no source clone and a bare/ranged ref (`skaile add skill:@admin/xls`) produced no
+  candidate versions and landed in `missing`; only an exact pin resolved.
+
+- [#474](https://github.com/skaile-ai/workspaces/pull/474) [`88ee95e`](https://github.com/skaile-ai/workspaces/commit/88ee95e07610e0270a18b18761997b28a7a0dec8) Thanks [@peteralbert](https://github.com/peteralbert)! - Stop `AgentStore._handleEvent` from notifying subscribers on the four remaining structural
+  no-ops. `_notify()` invalidates the cached snapshot, so each of these handed every
+  `useSyncExternalStore` / Vue `shallowRef` consumer a brand-new snapshot identity for state that
+  had not changed.
+
+  The largest was a missing `default:` arm. The switch names 22 of `AgentEvent`'s 54 members; the
+  other 32 — `log_entry` above all, one per line of container output — fell through to the trailing
+  `_notify()` having mutated nothing. Unlike the cases fixed in the two preceding patches this was
+  not a replay artifact: it fired on every single occurrence. Those 32 types are now ignored
+  outright. The arm is deliberately not an `assertNever` exhaustiveness check — that is a compile
+  error while 32 members are unnamed, and naming all 54 would enumerate events the store holds no
+  state for just to satisfy it.
+
+  `state_changed` rebuilt the `sharedState` Map unconditionally, and unchanged re-emits are routine:
+  the runner replays every namespace on connect, on a seeded execution, on re-registering an
+  already-registered store, and immediately after registration — and the `xstate-store` adapter is
+  equality-free, so writing a key its current value emits too. It now compares against the value the
+  namespace already holds, reusing the capability comparison generalized into one shared
+  `isSameJsonValue` helper: `JSON.stringify` equality with a fail-open `try/catch`, deliberately
+  conservative so a genuine state update can never be mistaken for a no-op.
+
+  `protocol_info` reassigned unconditionally, and the runner announces on every attach — tab mount,
+  StrictMode remount, SSE reconnect — almost always with the version already held. `ProtocolInfoEvent`
+  carries nothing but `version` and `ProtocolVersion` is exactly three numbers, so the field
+  comparison is complete, not conservative. When the version is unchanged the held event object is
+  kept, so `snapshot.protocolInfo` does not change identity either.
+
+  `user_message` is flush-only, and the flush is internally conditional — a peer message arriving
+  while nothing is streaming finalized nothing. `_flushStreaming()` now reports whether it flushed
+  and the case notifies only when it did.
+
+  Three behaviour changes consumers can notice, beyond the reduced re-renders. **`protocol_info` now
+  clears `incompatibleProtocol`.** Nothing ever cleared it, so the platform's "session restarting on
+  incompatible protocol" banner was sticky for the life of the store even though the debug pane
+  documents the replacement container's `protocol_info` as the thing that dismisses it; the guard had
+  to land together with the clear, or a repeat announcement would never have reached the clearing
+  code and the bug would have been cemented permanently. **32 event types no longer notify at
+  all**, so a consumer that treated "any event arrived" as a liveness signal must now emit its own —
+  hosts that need those events already read them off the transport upstream of the store. And an
+  **optimistic `updateState()` write is no longer corrected by the runner's echo** when the two are
+  `JSON.stringify`-equal: `updateState()` stores the caller's object verbatim, so a caller passing a
+  `Date`, `NaN`, or an `undefined`-valued key now keeps that local form where the echo previously
+  overwrote it with the serialized one. Such a caller was already desynchronised from the agent,
+  which only ever sees the serialized form; both platform call sites pass plain JSON and are
+  unaffected. Normalizing the optimistic write is tracked separately.
+
+- [#457](https://github.com/skaile-ai/workspaces/pull/457) [`d7cfdac`](https://github.com/skaile-ai/workspaces/commit/d7cfdac0550fcb9f5919280617b729a7e8ba8317) Thanks [@peteralbert](https://github.com/peteralbert)! - Stop `AgentStore` from notifying subscribers on structural no-ops. `setStatus` wrote and
+  notified unconditionally, and `capability_register` rebuilt the capabilities Map on every
+  replay — so a byte-identical re-registration produced a fresh Map identity and a fresh
+  snapshot. Because `_notify()` invalidates the cached snapshot, each no-op handed every
+  `useSyncExternalStore` / Vue `shallowRef` consumer a brand-new snapshot identity for no
+  reason. Under a stale-token SSE reconnect storm the gateway replays the whole capability set
+  on every reattach, and combined with a per-frame status write that churn compounded into
+  React error [#185](https://github.com/skaile-ai/workspaces/issues/185) ("Maximum update depth exceeded") in the platform frontend, crashing
+  sessions.
+
+  Three paths now short-circuit: a `setStatus` call carrying the status the store already
+  holds (which also covers the `onStatusChange` transport callback, now routed through the
+  guarded setter), a `capability_register` whose every capability is already registered with a
+  structurally equal value, and a `capability_deregister` naming only capabilities that are
+  absent. Capability comparison is serialized (`JSON.stringify`) equality with a fail-open
+  `try/catch` — deliberately conservative, so a reordered-but-equal pair still notifies
+  (harmless) but a genuine capability update can never be mistaken for a no-op.
+
+  Consumers see fewer redundant re-renders and no behavioural change for real state
+  transitions. The one semantics change: duplicate `setStatus` writes no longer notify, so a
+  consumer that relied on a redundant status write as a de-facto "a reconnect happened" signal
+  must now emit its own explicit signal.
+
+- [#466](https://github.com/skaile-ai/workspaces/pull/466) [`63bf337`](https://github.com/skaile-ai/workspaces/commit/63bf33720d1effc9d98dd43cd83efe62ff5c648f) Thanks [@peteralbert](https://github.com/peteralbert)! - Stop `AgentStore` from notifying subscribers on a redundant `status` event. `case "status"`
+  wrote `phase` and fell through to `_notify()` with no equality check, and because `_notify()`
+  invalidates the cached snapshot, a status event carrying the phase the store already held
+  handed every `useSyncExternalStore` / Vue `shallowRef` consumer a brand-new snapshot identity
+  for nothing. This was the highest-volume instance of the churn fixed for `setStatus` and the
+  capability registry: the bridge normalizer re-emits `phase: "working"` from three sites, two of
+  which fire on every tool call, so in a turn with N tool calls N-1 of those events were full
+  consumer fanouts for an unchanged phase.
+
+  A `status` event whose `phase` equals the phase the store already holds now short-circuits
+  before `_notify()`. `StatusEvent` carries nothing but `phase`, so the comparison is a primitive
+  `===` — complete, not conservative: when the phase is unchanged, every field of the snapshot is
+  unchanged. Flush semantics are untouched — `status` did not flush streaming text before and
+  still does not; `finished` remains the canonical end-of-turn flush.
+
+  Consumers see fewer redundant re-renders and no behavioural change for real phase transitions.
+  The one semantics change: a repeated identical phase no longer notifies, so a consumer that
+  treated a redundant status emit as a de-facto "the agent is still alive" heartbeat must now
+  emit its own explicit signal. Status events remain individually observable upstream —
+  `sdk/agent-session.ts` turns them into its own output lines, on its own dedupe rules — which is
+  why the guard is store-local rather than applied at the emit site.
+
+- [#481](https://github.com/skaile-ai/workspaces/pull/481) [`1657e15`](https://github.com/skaile-ai/workspaces/commit/1657e15b591b1078af73d699e07a4a1680bcb79d) Thanks [@peteralbert](https://github.com/peteralbert)! - Prevent structurally unchanged `AgentStore.updateState()` writes from replacing the shared-state
+  Map, rotating framework snapshots, or notifying subscribers. The `state_update` transport command
+  is still sent for every call, and unsupported, aliased, proxied, or caller-shared values retain the
+  prior optimistic update-and-notify behavior.
+
+- [#464](https://github.com/skaile-ai/workspaces/pull/464) [`00e22e6`](https://github.com/skaile-ai/workspaces/commit/00e22e6cca16210a75046e0dba8cfc9065078f4c) Thanks [@peteralbert](https://github.com/peteralbert)! - fix(runner): hot-plugged MCP servers reach the running claude-sdk driver, and survive
+
+  `runner.attach_instance` / `runner.add_mcp_server` connected the server and registered its
+  tools, but the `claude-sdk` driver composes its SDK `mcpServers` option once inside
+  `startQuery` and keeps that query alive across turns — so the agent had no `mcp__<id>__*`
+  tools until a full session restart. The runner now queues a driver rebuild (resuming the
+  conversation) when the driver bakes its tool set, so the tools are callable on the **next
+  turn**, not immediately mid-turn. The rebuild runs in the background: a synchronous one
+  would wait out the in-flight turn and blow the platform's 30s runner-capability timeout.
+  Concurrent attaches are serialized so two rebuilds can never overlap.
+
+  Serve now also keeps a per-session registry of live-attached MCP declarations and replays it
+  into every session build. The platform never folds a live attach into `skaile.yaml`, and a
+  rebuild reads `skaile.yaml` only — so before this, any later recreate (a skill attach, a
+  reconnect, a skill restage) silently dropped the hot-plugged server and its tools for the
+  rest of the session.
+
+  Because the declarations now take part in the session build, the system prompt's new
+  `## MCP servers` section lists hot-plugged servers alongside declared ones, with their tool
+  counts, next to the existing per-server MCP.md guidance.
+
+  `live: true` from `runner.attach_instance` / `runner.add_mcp_server` therefore now means
+  "live from the next turn", and `claude-sdk` sessions return it where they previously
+  returned `false`. See MIGRATION.md.
+
+- [#480](https://github.com/skaile-ai/workspaces/pull/480) [`9a55d68`](https://github.com/skaile-ai/workspaces/commit/9a55d68e4889a7ebdf775499413fe11de8f50ed5) Thanks [@peteralbert](https://github.com/peteralbert)! - Treat session `status` events as live-only state: active subscribers still receive them, but the dispatcher no longer persists them or assigns them sequence numbers.
+
+## 1.16.0
+
+### Minor Changes
+
+- [#452](https://github.com/skaile-ai/workspaces/pull/452) [`24a95f7`](https://github.com/skaile-ai/workspaces/commit/24a95f7f235782e644be3754085bf63f916d52c6) Thanks [@peteralbert](https://github.com/peteralbert)! - Expose flow globals at runtime: render a "Flow globals" section in the orchestrator prompt and add a read-only get_globals flow-connector operation, so agents can read run_input on params-bound runs (fixes [#451](https://github.com/skaile-ai/workspaces/issues/451), upstream of skaile-ai/platform#2039).
+
 ## 1.15.1
 
 ### Patch Changes

package/dist/{asset-feeds-MWEMXMZA.js → asset-feeds-7VQVISDI.js}

@@ -1,16 +1,17 @@
-import { assignDomain, buildDomainIndex, DOMAIN_MD_FILENAME, parseDomainMd } from './chunk-MZV6WCF3.js';
+import { assignDomain, buildDomainIndex, DOMAIN_MD_FILENAME, parseDomainMd } from './chunk-MAN7AGQJ.js';
 import './chunk-JXT46QFC.js';
-import './chunk-5NZ56R63.js';
+import './chunk-ST3DLLNZ.js';
 import './chunk-K5GBV4SA.js';
 import './chunk-ZAP2BDHG.js';
-import { factoryAssetRoots } from './chunk-7J7LQP6T.js';
-import { scanRepo } from './chunk-ISA7R7PK.js';
+import { factoryAssetRoots } from './chunk-MMD2KQ3A.js';
+import { scanRepo } from './chunk-72EOJJOM.js';
 import './chunk-P4VHQA4N.js';
-import { walkDir, parseFrontmatter } from './chunk-BQCGFPHW.js';
+import { walkDir, parseFrontmatter } from './chunk-DYMWJAL4.js';
 import './chunk-GEEW6SY2.js';
 import './chunk-F3HNW354.js';
 import './chunk-MENCWIHW.js';
-import './chunk-JB35MVBN.js';
+import './chunk-U5POE4BA.js';
+import './chunk-7GOCNYUV.js';
 import './chunk-IRORTHGA.js';
 import './chunk-NSBPE2FW.js';
 import { existsSync, readFileSync } from 'fs';
@@ -19,9 +20,9 @@ import * as path from 'path';
 function toPosix(p) {
   return p.split(path.sep).join("/");
 }
-function loadDomainMds(root) {
+async function loadDomainMds(root) {
   const out = [];
-  for (const { path: filePath, name } of walkDir(root)) {
+  for await (const { path: filePath, name } of walkDir(root)) {
     if (name !== DOMAIN_MD_FILENAME) continue;
     try {
       const { data } = parseFrontmatter(readFileSync(filePath, "utf8"));
@@ -31,8 +32,8 @@ function loadDomainMds(root) {
   }
   return out;
 }
-function stampDomains(root, fallbackSlug, entries, synthesizeFallback = true) {
-  const domainMds = loadDomainMds(root);
+async function stampDomains(root, fallbackSlug, entries, synthesizeFallback = true) {
+  const domainMds = await loadDomainMds(root);
   const assignables = entries.map((entry) => ({
     entry,
     ref: `${entry.kind}:${entry.name}`,
@@ -64,7 +65,7 @@ async function libraryAssets() {
   const domains = [];
   try {
     const [{ openLibraryManager }, { skaileHomeDir }, { getGlobalCacheDir }] = await Promise.all([
-      import('./open-library-O6T3ELPK.js'),
+      import('./open-library-RMI2FTQ4.js'),
       import('./library/index.js'),
       import('./core/index.js')
     ]);
@@ -78,8 +79,8 @@ async function libraryAssets() {
       const entries = [];
       for (const lib of libs) {
         if (!existsSync(lib.path)) continue;
-        const libEntries = [...scanRepo(lib.path, lib.name)];
-        domains.push(...stampDomains(lib.path, lib.name, libEntries, false));
+        const libEntries = [...await scanRepo(lib.path, lib.name)];
+        domains.push(...await stampDomains(lib.path, lib.name, libEntries, false));
         for (const entry of libEntries) entries.push({ origin: "library", entry, group: lib.name });
       }
       return { entries, domains, notes };
@@ -97,7 +98,7 @@ async function libraryAssets() {
 async function storeAssets(projectDir) {
   const notes = [];
   try {
-    const { resolveCatalogSource } = await import('./open-library-O6T3ELPK.js');
+    const { resolveCatalogSource } = await import('./open-library-RMI2FTQ4.js');
     const { source, close } = await resolveCatalogSource({ projectDir });
     try {
       const assets = await source.listAssets();
@@ -133,10 +134,10 @@ async function loadDomains(source) {
   const domains = await fn.call(source);
   return Array.isArray(domains) ? domains : [];
 }
-function sourceAssets(am) {
+async function sourceAssets(am) {
   const factoryPrefixes = factoryAssetRoots().map((r) => r.endsWith(path.sep) ? r : r + path.sep);
   const isFactoryPath = (p) => factoryPrefixes.some((fp) => p === fp.slice(0, -1) || p.startsWith(fp));
-  const all = am.search().filter((e) => !isFactoryPath(e.source));
+  const all = (await am.search()).filter((e) => !isFactoryPath(e.source));
   const entries = [];
   const domains = [];
   for (const { repoName, root } of am.searchRepoRoots()) {
@@ -145,19 +146,19 @@ function sourceAssets(am) {
     const owned = all.filter((e) => e.source === root || e.source.startsWith(prefix));
     if (owned.length === 0) continue;
     const sourceName = repoName.split("/").pop() || repoName;
-    domains.push(...stampDomains(root, sourceName, owned, false));
+    domains.push(...await stampDomains(root, sourceName, owned, false));
     for (const entry of owned) entries.push({ origin: "source", entry, group: sourceName });
   }
   return { entries, domains };
 }
-function factoryAssets() {
+async function factoryAssets() {
   const notes = [];
   const domains = [];
   try {
     const entries = [];
     for (const root of factoryAssetRoots()) {
-      const rootEntries = [...scanRepo(root, "skaile-factory")];
-      domains.push(...stampDomains(root, "skaile-factory", rootEntries));
+      const rootEntries = [...await scanRepo(root, "skaile-factory")];
+      domains.push(...await stampDomains(root, "skaile-factory", rootEntries));
       entries.push(...rootEntries);
     }
     return { entries, domains, notes };
@@ -174,8 +175,8 @@ function tag(origin, entries) {
 }
 async function gatherAssetFeeds(am, projectDir) {
   const [libs, store] = await Promise.all([libraryAssets(), storeAssets(projectDir)]);
-  const factory = factoryAssets();
-  const src = sourceAssets(am);
+  const factory = await factoryAssets();
+  const src = await sourceAssets(am);
   return {
     entries: [
       ...src.entries,
@@ -201,5 +202,5 @@ function dedupeBySlug(domains) {
 }
 
 export { gatherAssetFeeds };
-//# sourceMappingURL=asset-feeds-MWEMXMZA.js.map
-//# sourceMappingURL=asset-feeds-MWEMXMZA.js.map
+//# sourceMappingURL=asset-feeds-7VQVISDI.js.map
+//# sourceMappingURL=asset-feeds-7VQVISDI.js.map

package/dist/asset-feeds-7VQVISDI.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../cli/src/asset-feeds.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAqFA,SAAS,QAAQ,CAAA,EAAmB;AAClC,EAAA,OAAO,CAAA,CAAE,KAAA,CAAW,IAAA,CAAA,GAAG,CAAA,CAAE,KAAK,GAAG,CAAA;AACnC;AAGA,eAAe,cAAc,IAAA,EAAmC;AAC9D,EAAA,MAAM,MAAkB,EAAC;AACzB,EAAA,WAAA,MAAiB,EAAE,IAAA,EAAM,QAAA,EAAU,MAAK,IAAK,OAAA,CAAQ,IAAI,CAAA,EAAG;AAC1D,IAAA,IAAI,SAAS,kBAAA,EAAoB;AACjC,IAAA,IAAI;AACF,MAAA,MAAM,EAAE,IAAA,EAAK,GAAI,iBAAiB,YAAA,CAAa,QAAA,EAAU,MAAM,CAAC,CAAA;AAChE,MAAA,GAAA,CAAI,IAAA,CAAK,cAAc,OAAA,CAAa,IAAA,CAAA,QAAA,CAAS,MAAM,QAAQ,CAAC,CAAA,EAAG,IAAI,CAAC,CAAA;AAAA,IACtE,CAAA,CAAA,MAAQ;AAAA,IAAC;AAAA,EACX;AACA,EAAA,OAAO,GAAA;AACT;AAcA,eAAe,YAAA,CACb,IAAA,EACA,YAAA,EACA,OAAA,EACA,qBAAqB,IAAA,EACK;AAC1B,EAAA,MAAM,SAAA,GAAY,MAAM,aAAA,CAAc,IAAI,CAAA;AAC1C,EAAA,MAAM,WAAA,GAAc,OAAA,CAAQ,GAAA,CAAI,CAAC,KAAA,MAAW;AAAA,IAC1C,KAAA;AAAA,IACA,KAAK,CAAA,EAAG,KAAA,CAAM,IAAI,CAAA,CAAA,EAAI,MAAM,IAAI,CAAA,CAAA;AAAA,IAChC,cAAc,OAAA,CAAa,IAAA,CAAA,QAAA,CAAS,IAAA,EAAM,KAAA,CAAM,MAAM,CAAC;AAAA,GACzD,CAAE,CAAA;AAEF,EAAA,IAAI,YAAA,GAAe,KAAA;AACnB,EAAA,KAAA,MAAW,KAAK,WAAA,EAAa;AAC3B,IAAA,MAAM,IAAA,GAAO,YAAA,CAAa,CAAA,CAAE,YAAA,EAAc,SAAS,CAAA;AACnD,IAAA,IAAI,IAAA,EAAM,CAAA,CAAE,KAAA,CAAM,UAAA,GAAa,IAAA;AAAA,SAAA,IACtB,kBAAA,EAAoB;AAC3B,MAAA,CAAA,CAAE,MAAM,UAAA,GAAa,YAAA;AACrB,MAAA,YAAA,GAAe,IAAA;AAAA,IACjB,CAAA,MAAO,CAAA,CAAE,KAAA,CAAM,UAAA,GAAa,EAAA;AAAA,EAC9B;AAEA,EAAA,MAAM,EAAE,KAAA,EAAM,GAAI,gBAAA,CAAiB,aAAa,SAAS,CAAA;AACzD,EAAA,MAAM,UAA2B,MAAA,CAAO,MAAA,CAAO,KAAK,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,IAChE,MAAM,CAAA,CAAE,IAAA;AAAA,IACR,OAAO,CAAA,CAAE,KAAA;AAAA,IACT,GAAI,EAAE,WAAA,GAAc,EAAE,aAAa,CAAA,CAAE,WAAA,KAAgB,EAAC;AAAA,IACtD,GAAI,EAAE,QAAA,GAAW,EAAE,UAAU,CAAA,CAAE,QAAA,KAAa,EAAC;AAAA,IAC7C,GAAI,EAAE,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,CAAA,CAAE,KAAA,EAAM,GAAI,EAAC;AAAA,IAClD,GAAI,CAAA,CAAE,WAAA,CAAY,CAAC,CAAA,GAAI,EAAE,cAAA,EAAgB,CAAA,CAAE,WAAA,CAAY,CAAC,CAAA,EAAE,GAAI;AAAC,GACjE,CAAE,CAAA;AACF,EAAA,IAAI,YAAA,UAAsB,IAAA,CAAK,EAAE,MAAM,YAAA,EAAc,KAAA,EAAO,cAAc,CAAA;AAC1E,EAAA,OAAO,OAAA;AACT;AAUA,eAAe,aAAA,GAIZ;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,MAAM,UAA2B,EAAC;AAClC,EAAA,IAAI;AACF,IAAA,MAAM,CAAC,EAAE,kBAAA,EAAmB,EAAG,EAAE,aAAA,EAAc,EAAG,EAAE,iBAAA,EAAmB,CAAA,GAAI,MAAM,QAAQ,GAAA,CAAI;AAAA,MAC3F,OAAO,4BAAmB,CAAA;AAAA,MAC1B,OAAO,oBAA4B,CAAA;AAAA,MACnC,OAAO,iBAAyB;AAAA,KACjC,CAAA;AACD,IAAA,MAAM,EAAE,OAAA,EAAS,KAAA,EAAM,GAAI,MAAM,kBAAA,EAAmB;AACpD,IAAA,IAAI;AAIF,MAAA,MAAM,UAAU,iBAAA,EAAkB;AAClC,MAAA,MAAM,UAAA,GAAkB,IAAA,CAAA,IAAA,CAAK,aAAA,EAAc,EAAG,SAAS,CAAA;AACvD,MAAA,MAAM,IAAA,GAAA,CAAQ,MAAM,OAAA,CAAQ,aAAA,EAAc,EAAG,MAAA;AAAA,QAC3C,CAAC,CAAA,KAAM,CAAC,CAAA,CAAE,IAAA,CAAK,UAAA,CAAW,OAAO,CAAA,IAAK,CAAC,CAAA,CAAE,IAAA,CAAK,UAAA,CAAW,UAAU;AAAA,OACrE;AACA,MAAA,MAAM,UAAyB,EAAC;AAChC,MAAA,KAAA,MAAW,OAAO,IAAA,EAAM;AACtB,QAAA,IAAI,CAAC,UAAA,CAAW,GAAA,CAAI,IAAI,CAAA,EAAG;AAI3B,QAAA,MAAM,UAAA,GAAa,CAAC,GAAI,MAAM,SAAS,GAAA,CAAI,IAAA,EAAM,GAAA,CAAI,IAAI,CAAE,CAAA;AAC3D,QAAA,OAAA,CAAQ,IAAA,CAAK,GAAI,MAAM,YAAA,CAAa,GAAA,CAAI,MAAM,GAAA,CAAI,IAAA,EAAM,UAAA,EAAY,KAAK,CAAE,CAAA;AAC3E,QAAA,KAAA,MAAW,KAAA,IAAS,UAAA,EAAY,OAAA,CAAQ,IAAA,CAAK,EAAE,MAAA,EAAQ,SAAA,EAAW,KAAA,EAAO,KAAA,EAAO,GAAA,CAAI,IAAA,EAAM,CAAA;AAAA,MAC5F;AACA,MAAA,OAAO,EAAE,OAAA,EAAS,OAAA,EAAS,KAAA,EAAM;AAAA,IACnC,CAAA,SAAE;AACA,MAAA,KAAA,EAAM;AAAA,IACR;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,IAAA,EAAM,WAAA;AAAA,MACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACzD,CAAA;AACD,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,SAAS,KAAA,EAAM;AAAA,EACvC;AACF;AAYA,eAAe,YAAY,UAAA,EAIxB;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AACF,IAAA,MAAM,EAAE,oBAAA,EAAqB,GAAI,MAAM,OAAO,4BAAmB,CAAA;AACjE,IAAA,MAAM,EAAE,QAAQ,KAAA,EAAM,GAAI,MAAM,oBAAA,CAAqB,EAAE,YAAY,CAAA;AACnE,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,UAAA,EAAW;AACvC,MAAA,MAAM,OAAA,GAA0B,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,QACjD,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,IAAA,EAAO,EAAE,IAAA,IAAsB,OAAA;AAAA,QAC/B,WAAA,EAAa,EAAE,WAAA,IAAe,EAAA;AAAA,QAC9B,MAAA,EAAQ,CAAA,QAAA,EAAW,CAAA,CAAE,EAAE,CAAA,CAAA;AAAA,QACvB,WAAW,CAAA,CAAE,SAAA;AAAA,QACb,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,YAAY,CAAA,CAAE,UAAA;AAAA,QACd,UAAU,CAAA,CAAE,QAAA;AAAA,QACZ,SAAS,CAAA,CAAE,OAAA;AAAA,QACX,UAAU,EAAC;AAAA,QACX,cAAc;AAAC,OACjB,CAAE,CAAA;AAIF,MAAA,MAAM,OAAA,GAAU,MAAM,WAAA,CAAY,MAAM,CAAA;AACxC,MAAA,OAAO,EAAE,OAAA,EAAS,OAAA,EAAS,KAAA,EAAM;AAAA,IACnC,CAAA,SAAE;AACA,MAAA,KAAA,EAAM;AAAA,IACR;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,MAAM,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAG3D,IAAA,IAAI,CAAC,QAAA,CAAS,IAAA,CAAK,GAAG,CAAA,EAAG;AACvB,MAAA,KAAA,CAAM,KAAK,EAAE,IAAA,EAAM,OAAA,EAAS,OAAA,EAAS,KAAK,CAAA;AAAA,IAC5C;AACA,IAAA,OAAO,EAAE,OAAA,EAAS,IAAI,OAAA,EAAS,IAAI,KAAA,EAAM;AAAA,EAC3C;AACF;AAGA,eAAe,YAAY,MAAA,EAA2C;AACpE,EAAA,MAAM,KAAM,MAAA,CAA4D,WAAA;AACxE,EAAA,IAAI,OAAO,EAAA,KAAO,UAAA,EAAY,OAAO,EAAC;AACtC,EAAA,MAAM,OAAA,GAAU,MAAM,EAAA,CAAG,IAAA,CAAK,MAAM,CAAA;AACpC,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,OAAO,CAAA,GAAI,UAAU,EAAC;AAC7C;AAcA,eAAe,aACb,EAAA,EAC+D;AAI/D,EAAA,MAAM,eAAA,GAAkB,iBAAA,EAAkB,CAAE,GAAA,CAAI,CAAC,CAAA,KAAO,CAAA,CAAE,QAAA,CAAc,IAAA,CAAA,GAAG,CAAA,GAAI,CAAA,GAAI,CAAA,GAAS,IAAA,CAAA,GAAI,CAAA;AAChG,EAAA,MAAM,gBAAgB,CAAC,CAAA,KACrB,eAAA,CAAgB,IAAA,CAAK,CAAC,EAAA,KAAO,CAAA,KAAM,EAAA,CAAG,KAAA,CAAM,GAAG,EAAE,CAAA,IAAK,CAAA,CAAE,UAAA,CAAW,EAAE,CAAC,CAAA;AAExE,EAAA,MAAM,GAAA,GAAA,CAAO,MAAM,EAAA,CAAG,MAAA,EAAO,EAAG,MAAA,CAAO,CAAC,CAAA,KAAM,CAAC,aAAA,CAAc,CAAA,CAAE,MAAM,CAAC,CAAA;AACtE,EAAA,MAAM,UAAyB,EAAC;AAChC,EAAA,MAAM,UAA2B,EAAC;AAMlC,EAAA,KAAA,MAAW,EAAE,QAAA,EAAU,IAAA,EAAK,IAAK,EAAA,CAAG,iBAAgB,EAAG;AACrD,IAAA,IAAI,aAAA,CAAc,IAAI,CAAA,EAAG;AACzB,IAAA,MAAM,SAAS,IAAA,CAAK,QAAA,CAAc,IAAA,CAAA,GAAG,CAAA,GAAI,OAAO,IAAA,GAAY,IAAA,CAAA,GAAA;AAC5D,IAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,MAAA,KAAW,IAAA,IAAQ,CAAA,CAAE,MAAA,CAAO,UAAA,CAAW,MAAM,CAAC,CAAA;AAChF,IAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG;AACxB,IAAA,MAAM,aAAa,QAAA,CAAS,KAAA,CAAM,GAAG,CAAA,CAAE,KAAI,IAAK,QAAA;AAGhD,IAAA,OAAA,CAAQ,IAAA,CAAK,GAAI,MAAM,YAAA,CAAa,MAAM,UAAA,EAAY,KAAA,EAAO,KAAK,CAAE,CAAA;AACpE,IAAA,KAAA,MAAW,KAAA,IAAS,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,EAAE,QAAQ,QAAA,EAAU,KAAA,EAAO,KAAA,EAAO,UAAA,EAAY,CAAA;AAAA,EACxF;AACA,EAAA,OAAO,EAAE,SAAS,OAAA,EAAQ;AAC5B;AAUA,eAAe,aAAA,GAIZ;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,MAAM,UAA2B,EAAC;AAClC,EAAA,IAAI;AACF,IAAA,MAAM,UAA0B,EAAC;AACjC,IAAA,KAAA,MAAW,IAAA,IAAQ,mBAAkB,EAAG;AACtC,MAAA,MAAM,cAAc,CAAC,GAAI,MAAM,QAAA,CAAS,IAAA,EAAM,gBAAgB,CAAE,CAAA;AAChE,MAAA,OAAA,CAAQ,KAAK,GAAI,MAAM,aAAa,IAAA,EAAM,gBAAA,EAAkB,WAAW,CAAE,CAAA;AACzE,MAAA,OAAA,CAAQ,IAAA,CAAK,GAAG,WAAW,CAAA;AAAA,IAC7B;AACA,IAAA,OAAO,EAAE,OAAA,EAAS,OAAA,EAAS,KAAA,EAAM;AAAA,EACnC,SAAS,GAAA,EAAK;AACZ,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,IAAA,EAAM,SAAA;AAAA,MACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACzD,CAAA;AACD,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,SAAS,KAAA,EAAM;AAAA,EACvC;AACF;AAGA,SAAS,GAAA,CAAI,QAAqB,OAAA,EAAwC;AACxE,EAAA,OAAO,QAAQ,GAAA,CAAI,CAAC,WAAW,EAAE,MAAA,EAAQ,OAAM,CAAE,CAAA;AACnD;AASA,eAAsB,gBAAA,CACpB,IACA,UAAA,EAC0B;AAC1B,EAAA,MAAM,CAAC,IAAA,EAAM,KAAK,CAAA,GAAI,MAAM,OAAA,CAAQ,GAAA,CAAI,CAAC,aAAA,EAAc,EAAG,WAAA,CAAY,UAAU,CAAC,CAAC,CAAA;AAClF,EAAA,MAAM,OAAA,GAAU,MAAM,aAAA,EAAc;AACpC,EAAA,MAAM,GAAA,GAAM,MAAM,YAAA,CAAa,EAAE,CAAA;AACjC,EAAA,OAAO;AAAA,IACL,OAAA,EAAS;AAAA,MACP,GAAG,GAAA,CAAI,OAAA;AAAA,MACP,GAAG,IAAA,CAAK,OAAA;AAAA,MACR,GAAG,GAAA,CAAI,SAAA,EAAW,OAAA,CAAQ,OAAO,CAAA;AAAA,MACjC,GAAG,GAAA,CAAI,OAAA,EAAS,KAAA,CAAM,OAAO;AAAA,KAC/B;AAAA;AAAA;AAAA,IAGA,OAAA,EAAS,YAAA,CAAa,CAAC,GAAG,MAAM,OAAA,EAAS,GAAG,GAAA,CAAI,OAAA,EAAS,GAAG,IAAA,CAAK,OAAA,EAAS,GAAG,OAAA,CAAQ,OAAO,CAAC,CAAA;AAAA,IAC7F,KAAA,EAAO,CAAC,GAAG,IAAA,CAAK,KAAA,EAAO,GAAG,KAAA,CAAM,KAAA,EAAO,GAAG,OAAA,CAAQ,KAAK;AAAA,GACzD;AACF;AAGA,SAAS,aAAa,OAAA,EAA2C;AAC/D,EAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAC7B,EAAA,MAAM,MAAuB,EAAC;AAC9B,EAAA,KAAA,MAAW,KAAK,OAAA,EAAS;AACvB,IAAA,IAAI,IAAA,CAAK,GAAA,CAAI,CAAA,CAAE,IAAI,CAAA,EAAG;AACtB,IAAA,IAAA,CAAK,GAAA,CAAI,EAAE,IAAI,CAAA;AACf,IAAA,GAAA,CAAI,KAAK,CAAC,CAAA;AAAA,EACZ;AACA,EAAA,OAAO,GAAA;AACT","file":"asset-feeds-7VQVISDI.js","sourcesContent":["/**\n * asset-feeds.ts — gather installable assets from every feed the manage TUI\n * surfaces.\n *\n * Four feeds, normalized into `CatalogEntry`:\n * - **Project sources** — `skaile.yaml` `sources:` entries (scanned via\n *   `AssetManager.search()`; the new `sources:` field is merged into the\n *   legacy repositories map in `AssetManager.loadConfig`).\n * - **Local libraries** — user authoring places from `LocalIndex` (filesystem\n *   scan of each library's `path`).\n * - **Factory assets** — the bundled first-party `factory-assets` tree\n *   (`factoryAssetRoots()`), scanned from disk. Always present; no network.\n * - **Remote store** — the configured catalog source when `catalog.url` is\n *   not `local`. Failures are non-fatal — they surface as notes.\n */\n\nimport { existsSync, readFileSync } from \"node:fs\";\nimport * as path from \"node:path\";\nimport {\n  type AssetKind,\n  type CatalogDomain,\n  type CatalogEntry,\n  factoryAssetRoots,\n  parseFrontmatter,\n  scanRepo,\n  walkDir,\n} from \"@skaile/workspaces/core\";\nimport {\n  assignDomain,\n  buildDomainIndex,\n  DOMAIN_MD_FILENAME,\n  type DomainMd,\n  parseDomainMd,\n} from \"@skaile/workspaces/discovery\";\n\n/** One non-fatal note returned to the caller for surfacing in the UI. */\nexport interface FeedNote {\n  feed: \"sources\" | \"libraries\" | \"store\" | \"factory\";\n  message: string;\n}\n\n/**\n * Which feed an asset came from. This is the top-level grouping axis in the\n * manage TUI (\"where is this skill coming from?\") and is intentionally distinct\n * from `publisher` (asset-intrinsic identity): the same publisher can legitimately\n * appear under more than one origin (e.g. a github repo you added as a `source`\n * that is also listed in the remote `store`).\n */\nexport type AssetOrigin = \"source\" | \"library\" | \"factory\" | \"store\";\n\n/** A catalog entry tagged with the feed it was gathered from. */\nexport interface OriginEntry {\n  origin: AssetOrigin;\n  entry: CatalogEntry;\n  /**\n   * Second-level grouping label for the manage tree. Defaults (when unset) to the\n   * entry's `publisher`; the source feed sets it to the source's short repo name\n   * so the Sources band groups by source — \"which repo did this come from\" — not\n   * by the asset-intrinsic publisher.\n   */\n  group?: string;\n}\n\nexport interface AssetFeedResult {\n  entries: OriginEntry[];\n  /**\n   * Display-only domain metadata, keyed (by the consumer) on `slug`. Populated\n   * from the store's `catalog.listDomains` when the connected catalog source\n   * exposes it; empty otherwise. The manage TUI joins `entry.domainSlug` → a\n   * domain for grouping headers, descriptions, and relation badges.\n   */\n  domains: CatalogDomain[];\n  notes: FeedNote[];\n}\n\n// ── Domain stamping (on-disk feeds) ──────────────────────────────────────────\n//\n// `scanRepo` (the source / library / factory scan path) does not read the\n// `DOMAIN.md` sidecars, so its entries arrive with no `domainSlug` and render\n// flat under their publisher band. We re-derive the grouping here from the\n// root's `DOMAIN.md` files (the same sidecars the remote store computes\n// server-side), and fall back to the repo/source name for any entry no domain\n// claims so it still groups instead of landing in the synthetic \"no domain\" pile.\n\n/** Repo-relative POSIX path (DOMAIN.md slugs are matched whole-segment, `/`-joined). */\nfunction toPosix(p: string): string {\n  return p.split(path.sep).join(\"/\");\n}\n\n/** Parse every `DOMAIN.md` sidecar under `root` into a {@link DomainMd}. */\nasync function loadDomainMds(root: string): Promise<DomainMd[]> {\n  const out: DomainMd[] = [];\n  for await (const { path: filePath, name } of walkDir(root)) {\n    if (name !== DOMAIN_MD_FILENAME) continue;\n    try {\n      const { data } = parseFrontmatter(readFileSync(filePath, \"utf8\"));\n      out.push(parseDomainMd(toPosix(path.relative(root, filePath)), data));\n    } catch {}\n  }\n  return out;\n}\n\n/**\n * Stamp `domainSlug` onto every entry scanned from `root` using the root's\n * `DOMAIN.md` sidecars. Returns the `CatalogDomain` registry for the real\n * domains, plus a synthetic fallback domain when any entry used the fallback.\n * Mutates `entries` in place (sets `entry.domainSlug`).\n *\n * `synthesizeFallback` (default true): entries no domain claims fall back to\n * `fallbackSlug` (the repo/source name). Pass `false` when the caller already\n * groups these entries one level up (e.g. the source feed groups by source\n * node) — unmatched entries then get no domain (`\"\"`) and hang directly under\n * that parent, instead of nesting under a same-named fallback domain.\n */\nasync function stampDomains(\n  root: string,\n  fallbackSlug: string,\n  entries: CatalogEntry[],\n  synthesizeFallback = true,\n): Promise<CatalogDomain[]> {\n  const domainMds = await loadDomainMds(root);\n  const assignables = entries.map((entry) => ({\n    entry,\n    ref: `${entry.kind}:${entry.name}`,\n    relativePath: toPosix(path.relative(root, entry.source)),\n  }));\n\n  let usedFallback = false;\n  for (const a of assignables) {\n    const slug = assignDomain(a.relativePath, domainMds);\n    if (slug) a.entry.domainSlug = slug;\n    else if (synthesizeFallback) {\n      a.entry.domainSlug = fallbackSlug;\n      usedFallback = true;\n    } else a.entry.domainSlug = \"\";\n  }\n\n  const { index } = buildDomainIndex(assignables, domainMds);\n  const catalog: CatalogDomain[] = Object.values(index).map((d) => ({\n    slug: d.slug,\n    title: d.title,\n    ...(d.description ? { description: d.description } : {}),\n    ...(d.relation ? { relation: d.relation } : {}),\n    ...(d.order !== undefined ? { order: d.order } : {}),\n    ...(d.recommended[0] ? { recommendedRef: d.recommended[0] } : {}),\n  }));\n  if (usedFallback) catalog.push({ slug: fallbackSlug, title: fallbackSlug });\n  return catalog;\n}\n\n/**\n * Pull assets from local libraries (the authoring places under\n * `~/.skaile/libraries/<name>/`, not the `~/.skaile/cache/sources/` cache). Each\n * library's `path` is scanned with `scanRepo` and grouped under the bare library\n * name (`group: <name>`) so the manage TUI shows a clean `<name>` band — no\n * `library:` prefix and no redundant same-named fallback domain (mirrors the\n * source feed).\n */\nasync function libraryAssets(): Promise<{\n  entries: OriginEntry[];\n  domains: CatalogDomain[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  const domains: CatalogDomain[] = [];\n  try {\n    const [{ openLibraryManager }, { skaileHomeDir }, { getGlobalCacheDir }] = await Promise.all([\n      import(\"./open-library.ts\"),\n      import(\"@skaile/workspaces/library\"),\n      import(\"@skaile/workspaces/core\"),\n    ]);\n    const { manager, close } = await openLibraryManager();\n    try {\n      // Authoring libraries are the rows that are NOT source clones. index.db\n      // rows predating the cache migration still carry the legacy\n      // ~/.skaile/sources path, so exclude both roots.\n      const newRoot = getGlobalCacheDir();\n      const legacyRoot = path.join(skaileHomeDir(), \"sources\");\n      const libs = (await manager.listLibraries()).filter(\n        (l) => !l.path.startsWith(newRoot) && !l.path.startsWith(legacyRoot),\n      );\n      const entries: OriginEntry[] = [];\n      for (const lib of libs) {\n        if (!existsSync(lib.path)) continue;\n        // Scan + group under the bare library name. `synthesizeFallback: false`\n        // (as the source feed does) keeps domainless assets directly under the\n        // library band instead of a redundant same-named fallback domain.\n        const libEntries = [...(await scanRepo(lib.path, lib.name))];\n        domains.push(...(await stampDomains(lib.path, lib.name, libEntries, false)));\n        for (const entry of libEntries) entries.push({ origin: \"library\", entry, group: lib.name });\n      }\n      return { entries, domains, notes };\n    } finally {\n      close();\n    }\n  } catch (err) {\n    notes.push({\n      feed: \"libraries\",\n      message: err instanceof Error ? err.message : String(err),\n    });\n    return { entries: [], domains, notes };\n  }\n}\n\n/**\n * Pull a (best-effort) snapshot of the connected remote store catalog.\n *\n * - Returns no entries when the resolved catalog is local-only or the host\n *   is unreachable (the failure becomes a note, not an exception).\n * - Maps `CatalogAsset` → `CatalogEntry`, carrying `publisher`, `repo`, and\n *   `category` straight through and using `source = \"store://<id>\"`; per-file\n *   `source` paths are not available for remote assets so the canonical ref is\n *   a stable placeholder.\n */\nasync function storeAssets(projectDir: string): Promise<{\n  entries: CatalogEntry[];\n  domains: CatalogDomain[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    const { resolveCatalogSource } = await import(\"./open-library.ts\");\n    const { source, close } = await resolveCatalogSource({ projectDir });\n    try {\n      const assets = await source.listAssets();\n      const entries: CatalogEntry[] = assets.map((a) => ({\n        name: a.name,\n        kind: (a.kind as AssetKind) ?? \"skill\",\n        description: a.description ?? \"\",\n        source: `store://${a.id}`,\n        publisher: a.publisher,\n        repo: a.repo,\n        domainSlug: a.domainSlug,\n        category: a.category,\n        version: a.version,\n        requires: [],\n        dependencies: [],\n      }));\n      // Domains are optional on the catalog source — only the store backend\n      // (post Part 4 `catalog.listDomains`) exposes them. Duck-type the call so\n      // older sources and the local catalog degrade to no domains, not an error.\n      const domains = await loadDomains(source);\n      return { entries, domains, notes };\n    } finally {\n      close();\n    }\n  } catch (err) {\n    const msg = err instanceof Error ? err.message : String(err);\n    // Local-only catalog throws a recognizable message — silence it; absence\n    // is the user's choice, not an error.\n    if (!/local/i.test(msg)) {\n      notes.push({ feed: \"store\", message: msg });\n    }\n    return { entries: [], domains: [], notes };\n  }\n}\n\n/** Optional `listDomains` capability — returns `[]` when the source lacks it. */\nasync function loadDomains(source: unknown): Promise<CatalogDomain[]> {\n  const fn = (source as { listDomains?: () => Promise<CatalogDomain[]> }).listDomains;\n  if (typeof fn !== \"function\") return [];\n  const domains = await fn.call(source);\n  return Array.isArray(domains) ? domains : [];\n}\n\n/** The slice of `AssetManager` the source feed needs (kept narrow for tests). */\ninterface AssetManagerLike {\n  search: () => Promise<CatalogEntry[]>;\n  searchRepoRoots: () => { repoName: string; root: string }[];\n}\n\n/**\n * Project-source feed: leans on `AssetManager.search()`, which now merges\n * `skaile.yaml`'s `sources:` field into the repositories map, then stamps\n * `DOMAIN.md`-derived domain grouping onto the scanned entries via\n * `searchRepoRoots()`.\n */\nasync function sourceAssets(\n  am: AssetManagerLike,\n): Promise<{ entries: OriginEntry[]; domains: CatalogDomain[] }> {\n  // The bundled factory tree is injected into the repositories map as an implicit\n  // source, so `am.search()` returns it too. It has its own `factory` origin band,\n  // so drop it here — otherwise the same first-party skills list twice under Sources.\n  const factoryPrefixes = factoryAssetRoots().map((r) => (r.endsWith(path.sep) ? r : r + path.sep));\n  const isFactoryPath = (p: string) =>\n    factoryPrefixes.some((fp) => p === fp.slice(0, -1) || p.startsWith(fp));\n\n  const all = (await am.search()).filter((e) => !isFactoryPath(e.source));\n  const entries: OriginEntry[] = [];\n  const domains: CatalogDomain[] = [];\n  // Group each source's entries under the source node (its short repo name), not\n  // the publisher: under Sources the navigational question is \"which repo did\n  // this come from\". Each entry's `source` (absolute manifest path) lives under\n  // exactly one declared root, so group + stamp by prefix. The cache slug is\n  // URL-keyed `github.com/<org>/<repo>` — take the trailing segment.\n  for (const { repoName, root } of am.searchRepoRoots()) {\n    if (isFactoryPath(root)) continue;\n    const prefix = root.endsWith(path.sep) ? root : root + path.sep;\n    const owned = all.filter((e) => e.source === root || e.source.startsWith(prefix));\n    if (owned.length === 0) continue;\n    const sourceName = repoName.split(\"/\").pop() || repoName;\n    // No synthetic fallback domain — the source node already groups these, so a\n    // same-named fallback would just nest the source under itself.\n    domains.push(...(await stampDomains(root, sourceName, owned, false)));\n    for (const entry of owned) entries.push({ origin: \"source\", entry, group: sourceName });\n  }\n  return { entries, domains };\n}\n\n/**\n * Factory-asset feed: scan the bundled first-party `factory-assets` tree(s)\n * resolved by `factoryAssetRoots()` (the `SKAILE_FACTORY_ASSETS_DIR` override\n * layer ahead of the bundled tree). Local disk only, no network — the entries are\n * the built-in skills / connectors / bundles that ship with `@skaile/workspaces`.\n * `factoryAssetRoots()` already dedupes, so the env override pointing at the\n * bundled dir collapses to one root.\n */\nasync function factoryAssets(): Promise<{\n  entries: CatalogEntry[];\n  domains: CatalogDomain[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  const domains: CatalogDomain[] = [];\n  try {\n    const entries: CatalogEntry[] = [];\n    for (const root of factoryAssetRoots()) {\n      const rootEntries = [...(await scanRepo(root, \"skaile-factory\"))];\n      domains.push(...(await stampDomains(root, \"skaile-factory\", rootEntries)));\n      entries.push(...rootEntries);\n    }\n    return { entries, domains, notes };\n  } catch (err) {\n    notes.push({\n      feed: \"factory\",\n      message: err instanceof Error ? err.message : String(err),\n    });\n    return { entries: [], domains, notes };\n  }\n}\n\n/** Tag a flat entry list with a single origin. */\nfunction tag(origin: AssetOrigin, entries: CatalogEntry[]): OriginEntry[] {\n  return entries.map((entry) => ({ origin, entry }));\n}\n\n/**\n * Run all feeds and return a single normalized result.\n *\n * Feeds run in parallel where possible — the store fetch is the slow one\n * (one HTTP call) and is fired alongside the local library walk. The factory\n * scan is local disk only, so it runs inline.\n */\nexport async function gatherAssetFeeds(\n  am: AssetManagerLike,\n  projectDir: string,\n): Promise<AssetFeedResult> {\n  const [libs, store] = await Promise.all([libraryAssets(), storeAssets(projectDir)]);\n  const factory = await factoryAssets();\n  const src = await sourceAssets(am);\n  return {\n    entries: [\n      ...src.entries,\n      ...libs.entries,\n      ...tag(\"factory\", factory.entries),\n      ...tag(\"store\", store.entries),\n    ],\n    // Store domains first (server-curated), then the on-disk feeds; dedupe by\n    // slug, first-wins, so a store-served domain shadows a same-slug local one.\n    domains: dedupeBySlug([...store.domains, ...src.domains, ...libs.domains, ...factory.domains]),\n    notes: [...libs.notes, ...store.notes, ...factory.notes],\n  };\n}\n\n/** First-wins dedupe of a domain list by `slug`. */\nfunction dedupeBySlug(domains: CatalogDomain[]): CatalogDomain[] {\n  const seen = new Set<string>();\n  const out: CatalogDomain[] = [];\n  for (const d of domains) {\n    if (seen.has(d.slug)) continue;\n    seen.add(d.slug);\n    out.push(d);\n  }\n  return out;\n}\n"]}

package/dist/asset-manager/catalog-deployer.js

@@ -1,4 +1,16 @@
-export { deployAll, deployCatalogEntry, resolveFlowSkills, undeployCatalogEntry } from '../chunk-LV2HPH3C.js';
+export { WORKSPACE_MOUNT_ENV_VAR, deployAll, deployCatalogEntry, findAiAssetsRoot, isUnderWorkspaceMount, resolveFlowSkills, undeployCatalogEntry, workspaceMountDirs } from '../chunk-BEAIJRVF.js';
+import '../chunk-ST3DLLNZ.js';
+import '../chunk-K5GBV4SA.js';
+import '../chunk-ZAP2BDHG.js';
+import '../chunk-MMD2KQ3A.js';
+import '../chunk-72EOJJOM.js';
+import '../chunk-P4VHQA4N.js';
+import '../chunk-DYMWJAL4.js';
+import '../chunk-GEEW6SY2.js';
+import '../chunk-F3HNW354.js';
+import '../chunk-MENCWIHW.js';
+import '../chunk-U5POE4BA.js';
+import '../chunk-7GOCNYUV.js';
 import '../chunk-NSBPE2FW.js';
 //# sourceMappingURL=catalog-deployer.js.map
 //# sourceMappingURL=catalog-deployer.js.map

package/dist/asset-manager/index.js

@@ -1,22 +1,23 @@
-export { AssetManager, FACTORY_SOURCE_URL, MissingManifestError, NON_DEPLOYABLE_KINDS, normalizeRepoUrl, parseCanonicalLockKey, parseRefTolerant, softDepName } from '../chunk-DPUZJI45.js';
-import '../chunk-344DEXZS.js';
+export { AssetManager, FACTORY_SOURCE_URL, MissingManifestError, NON_DEPLOYABLE_KINDS, normalizeRepoUrl, parseCanonicalLockKey, parseRefTolerant, softDepName } from '../chunk-UVW3R6S7.js';
+import '../chunk-35ELAMQ5.js';
 import '../chunk-UKJMQZV6.js';
 import '../chunk-R7FOF242.js';
-import '../chunk-MZV6WCF3.js';
+import '../chunk-MAN7AGQJ.js';
 import '../chunk-JXT46QFC.js';
-export { createScaffold, deployAll, installAgent, removeAsset } from '../chunk-STQOPWPS.js';
+export { createScaffold, deployAll, installAgent, removeAsset } from '../chunk-VCU4NPUS.js';
 export { BUILT_IN_FRAGMENTS, loadPromptExtensions, resolveFragments } from '../chunk-CGYEHQOX.js';
-import '../chunk-5NZ56R63.js';
+import '../chunk-ST3DLLNZ.js';
 import '../chunk-K5GBV4SA.js';
 import '../chunk-ZAP2BDHG.js';
-import '../chunk-7J7LQP6T.js';
-import '../chunk-ISA7R7PK.js';
+import '../chunk-MMD2KQ3A.js';
+import '../chunk-72EOJJOM.js';
 import '../chunk-P4VHQA4N.js';
-import '../chunk-BQCGFPHW.js';
+import '../chunk-DYMWJAL4.js';
 import '../chunk-GEEW6SY2.js';
 import '../chunk-F3HNW354.js';
 import '../chunk-MENCWIHW.js';
-import '../chunk-JB35MVBN.js';
+import '../chunk-U5POE4BA.js';
+import '../chunk-7GOCNYUV.js';
 export { appendHistory, clearHistory, getRecentHistory, loadHistory } from '../chunk-KTBKW2FI.js';
 import '../chunk-UQ6LFBPZ.js';
 export { AGENT_RENDERERS, claudeCodeRenderer, codexRenderer, driverTargetSupportsAgents, ompRenderer, renderAgentToFramework } from '../chunk-IEX5YV4R.js';

package/dist/asset-manager/installer.js

@@ -1,16 +1,17 @@
-export { createScaffold, deployAll, deployAsset, removeAsset } from '../chunk-STQOPWPS.js';
+export { createScaffold, deployAll, deployAsset, removeAsset } from '../chunk-VCU4NPUS.js';
 import '../chunk-CGYEHQOX.js';
-import '../chunk-5NZ56R63.js';
+import '../chunk-ST3DLLNZ.js';
 import '../chunk-K5GBV4SA.js';
 import '../chunk-ZAP2BDHG.js';
-import '../chunk-7J7LQP6T.js';
-import '../chunk-ISA7R7PK.js';
+import '../chunk-MMD2KQ3A.js';
+import '../chunk-72EOJJOM.js';
 import '../chunk-P4VHQA4N.js';
-import '../chunk-BQCGFPHW.js';
+import '../chunk-DYMWJAL4.js';
 import '../chunk-GEEW6SY2.js';
 import '../chunk-F3HNW354.js';
 import '../chunk-MENCWIHW.js';
-import '../chunk-JB35MVBN.js';
+import '../chunk-U5POE4BA.js';
+import '../chunk-7GOCNYUV.js';
 import '../chunk-IEX5YV4R.js';
 import '../chunk-IRORTHGA.js';
 import '../chunk-NSBPE2FW.js';