@skaile/workspaces 1.2.0 → 1.4.0

package/dist/cli/index.js

@@ -1,20 +1,20 @@
 #!/usr/bin/env node
-import { makeSourceCommand, syncProjectSources } from '../chunk-XWLVIEWD.js';
-import { openCatalogSource, openLibraryManager, createFullRegistry, openLibrary } from '../chunk-CLUJLV7Z.js';
-import { logErr, S, logOk, logInfo, colorRef, logWarn, kindColorPad, kindColor, formatSoftDepSection, bareSoftDepName, formatSoftDepHint, formatRelativeTime, fitWidth, formatSoftDepRemovePreview, formatSoftDepAddPreview } from '../chunk-MQEZE6TU.js';
-import { getStoreConfig, storeFetch, saveStoreTokens, clearStoreTokens, isStoreAuthenticated } from '../chunk-ZUE2PIJ5.js';
-import { AI_RESOURCES, aiResourceRoots } from '../chunk-OIGYDVCM.js';
+import { AI_RESOURCES, aiResourceRoots } from '../chunk-XBG2YDQQ.js';
+import { makeSourceCommand, syncProjectSources } from '../chunk-QM2TT2PJ.js';
+import { openCatalogSource, openLibraryManager, createFullRegistry, openLibrary } from '../chunk-77OXU44H.js';
+import { logErr, S, logOk, logInfo, colorRef, logWarn, kindColorPad, kindColor, formatSoftDepSection, bareSoftDepName, formatSoftDepHint, formatRelativeTime, fitWidth, formatSoftDepRemovePreview, formatSoftDepAddPreview } from '../chunk-DNFIKRO6.js';
+import { getStoreConfig, storeFetch, saveStoreTokens, clearStoreTokens, isStoreAuthenticated } from '../chunk-BJHZHNKR.js';
 import { LocalSecretsProvider } from '../chunk-6BEGKO2Q.js';
-import { resolveLibraryDir } from '../chunk-NUS5L5ZJ.js';
-import '../chunk-KVZ6XKVN.js';
+import { resolveLibraryDir, getDefaultValue, isSecretPlaceholder } from '../chunk-HWTQ6HPO.js';
+import '../chunk-B6SSXVF2.js';
+import '../chunk-JXT46QFC.js';
 import '../chunk-UKJMQZV6.js';
 import '../chunk-R7FOF242.js';
-import '../chunk-JXT46QFC.js';
-import { runFlow, resumeFlow } from '../chunk-W65IK4MH.js';
+import { runFlow, resumeFlow } from '../chunk-JZPEEMIM.js';
 import '../chunk-4R6DROGN.js';
 import { validateFlowVersions, parseSkillFrontmatter } from '../chunk-GXC3TYMQ.js';
-import { runAgentChat, loadSessionById, loadSession, listSessions, setCurrentSession, deleteSession, clearSession, loadAgentManifest, compileComposition, MarkdownStreamer, resolveMixin } from '../chunk-TTTLCSEQ.js';
-import { buildClaudePluginFiles } from '../chunk-EPLYVB3L.js';
+import { runAgentChat, loadSessionById, loadSession, listSessions, setCurrentSession, deleteSession, clearSession, loadAgentManifest, compileComposition, MarkdownStreamer, resolveMixin } from '../chunk-AAGD2J4H.js';
+import { buildClaudePluginFiles } from '../chunk-OSCJRUKM.js';
 import '../chunk-X5YPJV4N.js';
 import '../chunk-O7SG5PC2.js';
 import '../chunk-7QBNJTTQ.js';
@@ -22,37 +22,38 @@ import '../chunk-GTS2FODO.js';
 import '../chunk-WQ7DE5UC.js';
 import '../chunk-32NA4TVC.js';
 import '../chunk-W3UDISS2.js';
-import '../chunk-EVZKWY5J.js';
-import '../chunk-UY5Q2NZH.js';
+import '../chunk-HKX5VSWQ.js';
+import '../chunk-ISQWMBKD.js';
+import '../chunk-RRVQAE5D.js';
 import '../chunk-BMQKMOQY.js';
 import '../chunk-GAH4YRCI.js';
-import '../chunk-RRVQAE5D.js';
-import '../chunk-QVE3ILCY.js';
+import '../chunk-TNSCHS4I.js';
 import '../chunk-LV2HPH3C.js';
-import '../chunk-VCBLXF7D.js';
-import '../chunk-BCJL2UNH.js';
+import '../chunk-GWDZW44L.js';
+import '../chunk-BDUANIAR.js';
 import '../chunk-6E6PKKAD.js';
-import { loadFlow, loadAllFlows } from '../chunk-SKADPHAM.js';
+import { loadFlow, loadAllFlows } from '../chunk-4N5XR5DQ.js';
 import '../chunk-DEYYRFQU.js';
 import '../chunk-IFGTRL2I.js';
-import { AssetManager, NON_DEPLOYABLE_KINDS, MissingManifestError } from '../chunk-KAWKKMU4.js';
-import '../chunk-35TLBMHX.js';
-import { readLock, resolveSettings, globalSettingsPath, projectSettingsPath, loadSettings, saveSettings, portableSpawn, portableSpawnSync, WorkspaceYamlEditor, checkAgentSkillConformance } from '../chunk-MG6UIS7G.js';
-import '../chunk-BM37QD6U.js';
-import { globalCacheRoot, sourceCacheKey, getGlobalCacheDir, resolveAgentDir, resolveSkWorkspaceConfig } from '../chunk-5AGARSQT.js';
+import '../chunk-PK7Q7MC7.js';
+import { AssetManager, NON_DEPLOYABLE_KINDS, MissingManifestError, normalizeRepoUrl, FACTORY_SOURCE_URL } from '../chunk-X57AMTAH.js';
+import '../chunk-LCTRCWBK.js';
+import '../chunk-CGYEHQOX.js';
+import { readLock, resolveSettings, globalSettingsPath, projectSettingsPath, loadSettings, saveSettings, portableSpawn, portableSpawnSync, WorkspaceYamlEditor, checkAgentSkillConformance } from '../chunk-26YCXWCU.js';
+import { assetSearchDirs, detectDomains } from '../chunk-ZAP2BDHG.js';
+import '../chunk-TJRWGMD2.js';
+import { globalCacheRoot, sourceCacheKey, getGlobalCacheDir, resolveAgentDir, loadSkWorkspaceConfig, resolveSkWorkspaceConfig } from '../chunk-OUWNTFDG.js';
 import { SKAILE_MANIFEST_FILENAME, decodeSkaileManifest, loadSkPublishManifest, saveSkPublishManifest } from '../chunk-DZCK7GRW.js';
 import { parseFrontmatter } from '../chunk-BQCGFPHW.js';
 import { parseAssetRef, ASSET_KINDS, isValidAssetName, slugifyAssetName, ASSET_NAME_HINT, assetRefToStr } from '../chunk-GEEW6SY2.js';
 import '../chunk-F3HNW354.js';
 import { SUPPORTED_DRIVER_TARGETS } from '../chunk-MENCWIHW.js';
 import { DRIVER_DEFAULTS } from '../chunk-K5GBV4SA.js';
-import { assetSearchDirs, detectDomains } from '../chunk-ZAP2BDHG.js';
 import { openSqlite } from '../chunk-JB35MVBN.js';
 import '../chunk-KTBKW2FI.js';
 import '../chunk-UQ6LFBPZ.js';
-import '../chunk-WRBF34YE.js';
-import '../chunk-CU5Z7GH3.js';
-import '../chunk-CGYEHQOX.js';
+import '../chunk-IEX5YV4R.js';
+import { validatePreset } from '../chunk-IRORTHGA.js';
 import '../chunk-NSBPE2FW.js';
 import * as fs12 from 'fs';
 import fs12__default, { readFileSync, existsSync, mkdirSync, writeFileSync, lstatSync, rmSync, readdirSync, statSync } from 'fs';
@@ -70,6 +71,7 @@ import { createInterface } from 'readline';
 import fs6 from 'fs/promises';
 import { parse as parse$1, stringify as stringify$1 } from 'smol-toml';
 import { execSync } from 'child_process';
+import * as readline2 from 'readline/promises';
 import { createTRPCUntypedClient, httpLink, httpSubscriptionLink } from '@trpc/client';
 
 async function runSearch(kind, query, opts) {
@@ -92,7 +94,7 @@ async function searchLocal(query, kind, opts, showStore, airGapped) {
   const projectDir = path14__default.resolve(opts.projectDir);
   let entries = new AssetManager({ projectDir }).search(query, kind);
   if (entries.length === 0 && !query && !kind && !airGapped) {
-    const { autoSyncForSearch } = await import('../source-SBFVULTG.js');
+    const { autoSyncForSearch } = await import('../source-RXAHIGMD.js');
     if (await autoSyncForSearch(projectDir)) {
       entries = new AssetManager({ projectDir }).search(query, kind);
     }
@@ -145,7 +147,7 @@ async function searchStore(query, kind, opts, airGapped) {
     return;
   }
   try {
-    const { getStoreConfig: getStoreConfig2, storeFetch: storeFetch2 } = await import('../store-client-YGDN4L2G.js');
+    const { getStoreConfig: getStoreConfig2, storeFetch: storeFetch2 } = await import('../store-client-T3F663YG.js');
     const config = getStoreConfig2();
     const params = {};
     if (query) params.q = query;
@@ -1005,7 +1007,7 @@ function makeCatalogCommand() {
   return catalog;
 }
 async function runLocalCatalogTest(projectDir) {
-  const { resolveCatalogSource } = await import('../open-library-ZNYIND7N.js');
+  const { resolveCatalogSource } = await import('../open-library-37PXN6MK.js');
   let resolved;
   try {
     resolved = await resolveCatalogSource({ projectDir });
@@ -1995,7 +1997,7 @@ async function ensureTargetsRegistered(projectDir) {
   const { resolveSkWorkspaceConfig: resolveSkWorkspaceConfig2 } = await import('../core/index.js');
   const config = resolveSkWorkspaceConfig2(projectDir);
   if (config.plugins && config.plugins.length > 0) {
-    const { ensurePluginsLoaded } = await import('../plugin-store-3DAVGKHN.js');
+    const { ensurePluginsLoaded } = await import('../plugin-store-EIMVEH3O.js');
     const result = await ensurePluginsLoaded(projectDir, config.plugins, pluginRegistry);
     for (const f of result.failed) logWarn(f.error);
   }
@@ -3711,7 +3713,7 @@ async function previewSoftDepsUnderCursor() {
 }
 async function loadAssets() {
   softDepPreviewCache.clear();
-  const { gatherAssetFeeds } = await import('../asset-feeds-OBPWVUDL.js');
+  const { gatherAssetFeeds } = await import('../asset-feeds-NG5TKB3V.js');
   const { entries, domains, notes } = await gatherAssetFeeds(am, am.projectDir);
   if (notes.length > 0) {
     state.message = notes.map((n) => `[${n.feed}] ${n.message}`).join(" \u2022 ");
@@ -3878,7 +3880,7 @@ function reconcileCollapsedSets(rows) {
 async function loadSourcesAndLibraries() {
   try {
     const [{ openLibraryManager: openLibraryManager2 }, { skaileHomeDir }, { getGlobalCacheDir: getGlobalCacheDir2 }] = await Promise.all([
-      import('../open-library-ZNYIND7N.js'),
+      import('../open-library-37PXN6MK.js'),
       import('../library/index.js'),
       import('../core/index.js')
     ]);
@@ -4964,7 +4966,7 @@ function action2(fn) {
   };
 }
 async function reconcileAndReport(projectDir, plugins) {
-  const { reconcilePlugins } = await import('../plugin-store-3DAVGKHN.js');
+  const { reconcilePlugins } = await import('../plugin-store-EIMVEH3O.js');
   if (plugins.length === 0) {
     logInfo("No plugins declared \u2014 nothing to reconcile.");
     return;
@@ -4980,7 +4982,7 @@ async function reconcileAndReport(projectDir, plugins) {
 async function runInstall2(spec, opts) {
   const projectDir = path14__default.resolve(opts.projectDir);
   const { WorkspaceYamlEditor: WorkspaceYamlEditor2 } = await import('../core/index.js');
-  const { specName } = await import('../plugin-store-3DAVGKHN.js');
+  const { specName } = await import('../plugin-store-EIMVEH3O.js');
   const yamlPath = path14__default.join(projectDir, "skaile.yaml");
   const editor = WorkspaceYamlEditor2.load(yamlPath);
   const replaced = editor.addPlugin(spec, specName);
@@ -4992,7 +4994,7 @@ async function runInstall2(spec, opts) {
 async function runRemove(name, opts) {
   const projectDir = path14__default.resolve(opts.projectDir);
   const { WorkspaceYamlEditor: WorkspaceYamlEditor2 } = await import('../core/index.js');
-  const { specName } = await import('../plugin-store-3DAVGKHN.js');
+  const { specName } = await import('../plugin-store-EIMVEH3O.js');
   const yamlPath = path14__default.join(projectDir, "skaile.yaml");
   const editor = WorkspaceYamlEditor2.load(yamlPath);
   const removed = editor.removePlugin(name, specName);
@@ -5020,7 +5022,7 @@ async function runList(opts) {
   const registry = createPluginRegistry();
   if (declared.length > 0) {
     try {
-      const { loadPlugins } = await import('../plugin-store-3DAVGKHN.js');
+      const { loadPlugins } = await import('../plugin-store-EIMVEH3O.js');
       const result = await loadPlugins(projectDir, declared, registry);
       for (const f of result.failed) logWarn(f.error);
     } catch (err) {
@@ -5054,150 +5056,93 @@ function makePluginCommand() {
   cmd.action(() => cmd.help());
   return cmd;
 }
-function makePresetCommand() {
-  const cmd = new Command("preset").description("Scaffold and validate preset YAML files");
-  cmd.command("init [name]").description("Scaffold a new .preset.yaml file").option("--dir <path>", "Output directory", process.cwd()).action(async (name, opts) => {
-    const presetName = name ?? "my-preset";
-    const filename = `${presetName}.preset.yaml`;
-    const outPath = path14__default.join(path14__default.resolve(opts.dir), filename);
-    if (existsSync(outPath)) {
-      logErr(`File already exists: ${outPath}`);
-      logInfo("Choose a different name or remove the existing file.");
-      process.exit(1);
-    }
-    const template = generatePresetTemplate(presetName);
-    writeFileSync(outPath, template, "utf-8");
-    logOk(`Created ${S.brand(filename)}`);
-    logInfo(`Path: ${outPath}`);
-    logInfo("Edit the file to define your preset items, then validate with:");
-    logInfo(`  skaile preset validate ${filename}`);
-  });
-  cmd.command("validate <path>").description("Validate a preset YAML file (schema + cycles + nesting depth)").action(async (filePath) => {
-    await runPresetValidate(filePath);
-  });
-  return cmd;
-}
-async function loadPresetForValidation(resolved) {
-  if (!existsSync(resolved)) {
-    logErr(`File not found: ${resolved}`);
-    process.exit(1);
-  }
-  const content = readFileSync(resolved, "utf-8");
-  const { parsePresetYaml } = await import('../library/index.js');
-  const parseResult = parsePresetYaml(content);
-  if (!parseResult.ok) {
-    logErr("Preset validation failed (parse errors):");
-    for (const err of parseResult.errors) {
-      console.log(`  ${S.err("\u2717")} ${err}`);
-    }
-    process.exit(1);
-  }
-  if (!parseResult.preset) {
-    logErr("Preset validation failed: parser returned no manifest");
-    process.exit(1);
-  }
-  return parseResult.preset;
-}
-async function reportNestedPresetRefs(preset) {
-  const { detectNestedPresetRefs } = await import('../library/index.js');
-  const nestedRefs = detectNestedPresetRefs(preset);
-  if (nestedRefs.length > 0) {
-    logInfo(`Nested preset refs: ${nestedRefs.length} (depth validated at apply-time)`);
-  }
-}
-async function checkPresetCycles(preset, resolved) {
-  const { detectCycles } = await import('../discovery/index.js');
-  const presetRef = path14__default.basename(resolved, ".preset.yaml");
-  const edges = [];
+
+// cli/src/commands/preset-apply.ts
+var TOKEN_RE = /\$\{(INPUT|SECRET):([^}]+)\}/g;
+var NESTED_PRESET_UNSUPPORTED = "nested presets are not supported by `preset apply` yet";
+function resolvePlaceholderValue(placeholder, providedValue) {
+  if (isSecretPlaceholder(placeholder)) {
+    return { envRef: `env:${placeholder.key}` };
+  }
+  const fallback = getDefaultValue(placeholder);
+  const resolved = providedValue ?? (fallback !== void 0 ? String(fallback) : void 0);
+  if (resolved === void 0) {
+    if (placeholder.required !== false) {
+      throw new Error(`Placeholder "${placeholder.key}" is required but no value was provided`);
+    }
+    return { value: "" };
+  }
+  return { value: resolved };
+}
+function presetItemsToWorkspace(preset, values) {
+  const dependencies = [];
+  const connectors = [];
+  const mcpServers = [];
+  const envVarsToSet = /* @__PURE__ */ new Set();
   for (const item of preset.items) {
-    if (item.ref) {
-      edges.push({ from: presetRef, to: item.ref, field: "items[].ref" });
-    }
-  }
-  if (edges.length === 0) return;
-  const cycleResult = detectCycles(edges);
-  if (!cycleResult.acyclic) {
-    logErr("Cycle detected in preset references:");
-    if (cycleResult.cyclePath) {
-      console.log(`  ${S.err("\u2717")} ${cycleResult.cyclePath.join(" \u2192 ")}`);
+    const ref = item.ref;
+    if (ref.startsWith("preset:")) throw new Error(NESTED_PRESET_UNSUPPORTED);
+    if (item.id && ref.startsWith("connector:")) {
+      const config = resolveItemConfig(item, preset, values, envVarsToSet);
+      connectors.push({
+        id: item.id,
+        driver: ref.slice("connector:".length),
+        ...config
+      });
+    } else if (item.id && ref.startsWith("mcp:")) {
+      const config = resolveItemConfig(item, preset, values, envVarsToSet);
+      mcpServers.push({ id: item.id, ...config });
+    } else {
+      dependencies.push(ref);
     }
-    process.exit(1);
   }
+  const sources = (preset.sources ?? []).map(
+    (s) => s.pin ? { url: s.url, pin: s.pin } : { url: s.url }
+  );
+  return { dependencies, connectors, mcpServers, sources, envVarsToSet: [...envVarsToSet] };
 }
-async function checkPresetPlaceholders(allPlaceholders) {
-  if (allPlaceholders.length === 0) return false;
-  const { validatePlaceholder } = await import('../library/index.js');
-  const invalidEntries = [];
-  for (const ph of allPlaceholders) {
-    const result = validatePlaceholder(ph, ph.default);
-    if (!result.valid) {
-      invalidEntries.push({ key: ph.key, errors: result.errors });
+function resolveItemConfig(item, preset, values, envVarsToSet) {
+  const byKey = placeholderIndex(item, preset);
+  const resolve5 = (key) => {
+    const ph = byKey.get(key) ?? { key, type: "text", required: true };
+    return resolvePlaceholderValue(ph, values[key]);
+  };
+  return substituteNode(item.config ?? {}, resolve5, envVarsToSet);
+}
+function placeholderIndex(item, preset) {
+  const map = /* @__PURE__ */ new Map();
+  for (const input of preset.inputs ?? []) map.set(input.key, input);
+  for (const ph of item.placeholders ?? []) map.set(ph.key, ph);
+  return map;
+}
+function substituteNode(node, resolve5, envVarsToSet) {
+  if (typeof node === "string") return substituteString(node, resolve5, envVarsToSet);
+  if (Array.isArray(node)) return node.map((el) => substituteNode(el, resolve5, envVarsToSet));
+  if (node && typeof node === "object") {
+    const out = {};
+    for (const [k, v] of Object.entries(node)) out[k] = substituteNode(v, resolve5, envVarsToSet);
+    return out;
+  }
+  return node;
+}
+function substituteString(value, resolve5, envVarsToSet) {
+  const tokens = [...value.matchAll(TOKEN_RE)];
+  if (tokens.length === 0) return value;
+  const secret = tokens.find(([, ns]) => ns === "SECRET") ?? tokens.find(([, , key]) => "envRef" in resolve5(key));
+  if (secret) {
+    const [full, , key] = secret;
+    if (tokens.length > 1 || full !== value) {
+      throw new Error(
+        `Secret "${key}" must be the only token in its value \u2014 remove the surrounding tokens/text`
+      );
     }
+    envVarsToSet.add(key);
+    return `env:${key}`;
   }
-  if (invalidEntries.length === 0) return false;
-  logWarn("Placeholder issues:");
-  for (const r of invalidEntries) {
-    console.log(`  ${S.warn("!")} ${r.key}: ${r.errors.join(", ")}`);
-  }
-  return true;
-}
-function printPresetSummary(preset, placeholderCount, hasWarnings) {
-  console.log();
-  console.log(S.heading("  Preset Validation"));
-  console.log(`  ${S.rule(40)}`);
-  console.log(`  ${S.label("Name")}          ${preset.name}`);
-  console.log(`  ${S.label("Version")}       ${preset.version ?? "unversioned"}`);
-  console.log(`  ${S.label("Items")}         ${preset.items.length}`);
-  console.log(`  ${S.label("Inputs")}         ${preset.inputs?.length ?? 0}`);
-  console.log(`  ${S.label("Placeholders")}  ${placeholderCount}`);
-  console.log();
-  if (hasWarnings) {
-    logWarn("Validation passed with warnings");
-  } else {
-    logOk("Preset is valid");
-  }
-}
-async function runPresetValidate(filePath) {
-  const resolved = path14__default.resolve(filePath);
-  const preset = await loadPresetForValidation(resolved);
-  await reportNestedPresetRefs(preset);
-  await checkPresetCycles(preset, resolved);
-  const allPlaceholders = preset.items.flatMap((item) => item.placeholders ?? []);
-  const hasWarnings = await checkPresetPlaceholders(allPlaceholders);
-  printPresetSummary(preset, allPlaceholders.length, hasWarnings);
-}
-function generatePresetTemplate(name) {
-  return `# ${name}.preset.yaml
-# Polymorphic Preset \u2014 composition + configuration primitive for the asset store.
-# See: _devlog/specs/2026-05-03-ai-asset-store-v2-design.md \xA7 Presets
-
-name: "${name}"
-version: "1.0.0"
-description: "TODO: describe what this preset configures"
-
-# Placeholders \u2014 values the user provides at apply-time.
-# Types: text, multiline, secret, number, boolean, enum, oauth, instance-picker
-placeholders:
-  - key: EXAMPLE_KEY
-    type: text
-    label: "Example placeholder"
-    required: true
-    # default: "some-value"
-    # hint: "Help text shown to the user"
-
-# Items \u2014 each becomes a Library Instance when the preset is applied.
-# Ref types:
-#   - Asset ref (kind:publisher/name@pin) \u2192 creates new Instance
-#   - Library Instance ref (#uuid) \u2192 reuses existing Instance
-#   - Nested Preset ref (preset:path.preset.yaml) \u2192 recursive apply (max depth 3)
-items:
-  - id: example-item
-    ref: "skill:@skaile/example-skill@^1.0"
-    config:
-      # Use \${INPUT:EXAMPLE_KEY} for placeholder interpolation
-      setting: "\${INPUT:EXAMPLE_KEY}"
-    # credential_ref: "\${SECRET:EXAMPLE_KEY}"  # for secret placeholders
-`;
+  return value.replace(TOKEN_RE, (_m, _ns, key) => {
+    const resolved = resolve5(key);
+    return "envRef" in resolved ? resolved.envRef : resolved.value;
+  });
 }
 var REF_HINT = "kind:@<publisher>/<name>#<version> (e.g. skill:@skaile/use-exa#1.0.0)";
 function isValidAssetRef(ref) {
@@ -5274,7 +5219,7 @@ async function runRefInstall(ref, opts) {
   const spinner5 = p6.spinner();
   spinner5.start(`Installing ${ref}`);
   try {
-    const { openCatalogSource: openCatalogSource2, openLibrary: openLibrary2 } = await import('../open-library-ZNYIND7N.js');
+    const { openCatalogSource: openCatalogSource2, openLibrary: openLibrary2 } = await import('../open-library-37PXN6MK.js');
     const catalog = await openCatalogSource2({ projectDir: path14__default.resolve(opts.projectDir) });
     if (!supportsInstallManifest(catalog)) {
       throw new Error(
@@ -5311,7 +5256,7 @@ async function runYamlInstall(opts) {
     return;
   }
   try {
-    const { ensureSourcesCloned } = await import('../ensure-sources-BQI2TOZZ.js');
+    const { ensureSourcesCloned } = await import('../ensure-sources-CHC7X7AJ.js');
     const hydrate = ensureSourcesCloned(projectDir, { quiet: true });
     if (hydrate.cloned.length > 0) {
       logOk(`Cloned source(s): ${hydrate.cloned.join(", ")}`);
@@ -5467,6 +5412,612 @@ function makeCleanCommand() {
     }
   });
 }
+
+// cli/src/commands/preset-export.ts
+function buildPresetFromWorkspace(config, name, sources = []) {
+  const items = [];
+  for (const ref of config.dependencies ?? []) {
+    items.push({ ref });
+  }
+  for (const connector of config.connectors ?? []) {
+    const config_ = compact({
+      access: connector.access,
+      auth: connector.auth,
+      options: connector.options,
+      version: connector.version,
+      tags: connector.tags
+    });
+    items.push({
+      id: connector.id,
+      ref: `connector:${connector.driver}`,
+      ...config_ ? { config: config_ } : {}
+    });
+  }
+  for (const mcp of config.mcp_servers ?? []) {
+    const config_ = compact({
+      transport: mcp.transport,
+      command: mcp.command,
+      args: mcp.args,
+      env: mcp.env,
+      url: mcp.url,
+      headers: mcp.headers
+    });
+    items.push({
+      id: mcp.id,
+      ref: `mcp:${mcp.id}`,
+      ...config_ ? { config: config_ } : {}
+    });
+  }
+  const project = config.name ?? name;
+  return {
+    name,
+    version: "1.0.0",
+    description: `Exported from ${project} workspace`,
+    items,
+    // Never let a credential-bearing source URL reach a shareable preset.
+    ...sources.length > 0 ? { sources: sources.map((s) => ({ ...s, url: stripUrlCredentials(s.url) })) } : {}
+  };
+}
+function neededSources(config, lock) {
+  const factoryUrl = normalizeRepoUrl(FACTORY_SOURCE_URL);
+  const nonFactory = (config.sources ?? []).filter((s) => normalizeRepoUrl(s.url) !== factoryUrl);
+  if (!lock) return nonFactory;
+  const inClosure = new Set(lock.sources.map((s) => normalizeRepoUrl(s.url)));
+  return nonFactory.filter((s) => inClosure.has(normalizeRepoUrl(s.url)));
+}
+function compact(obj) {
+  const out = {};
+  for (const [k, v] of Object.entries(obj)) {
+    if (v !== void 0 && v !== null) out[k] = v;
+  }
+  return Object.keys(out).length > 0 ? out : void 0;
+}
+var SECRET_REFERENCE_PREFIXES = ["env", "forge", "secret", "op", "kp", "oauth", "pat"];
+var SECRET_REFERENCE_RE = new RegExp(`^(${SECRET_REFERENCE_PREFIXES.join("|")}):`);
+function isSecretReference(value) {
+  return SECRET_REFERENCE_RE.test(value);
+}
+var PLACEHOLDER_RE = /^\$\{(INPUT|SECRET):[^}]+\}$/;
+var SUSPICIOUS_KEY_RE = /(?:^|[_-])(?:token|password|passwd|secret|apikey|key|dsn|credential|auth|authorization|bearer)(?:[_-]|$)/i;
+var PROTO_CREDENTIAL_URL_RE = /\w+:\/\/[^/@\s]+:[^/@\s]+@/;
+function urlHasCredentials(url) {
+  return PROTO_CREDENTIAL_URL_RE.test(url);
+}
+function stripUrlCredentials(url) {
+  return url.replace(/^(\w+:\/\/)[^/@]*:[^/@]*@/, "$1");
+}
+function isLongEntropic(value) {
+  if (value.length < 20) return false;
+  if (/^\w+:\/\//.test(value) || value.startsWith("/")) return false;
+  const classes = [/[a-z]/, /[A-Z]/, /[0-9]/].filter((re) => re.test(value)).length;
+  return classes >= 2;
+}
+function scanInlineSecrets(preset) {
+  const findings = [];
+  for (const item of preset.items) {
+    const itemId = typeof item.id === "string" ? item.id : "";
+    if (item.config) scanNode(item.config, [], false, itemId, findings);
+  }
+  return findings;
+}
+function scanNode(node, segments, inCredentialField, itemId, findings) {
+  if (typeof node === "string") {
+    if (isInlineSecret(node, segments.at(-1) ?? "", inCredentialField)) {
+      findings.push({ itemId, path: segments.join("."), maskedValue: maskSecret(node) });
+    }
+    return;
+  }
+  if (Array.isArray(node)) {
+    node.forEach(
+      (el, i) => scanNode(el, [...segments, String(i)], inCredentialField, itemId, findings)
+    );
+    return;
+  }
+  if (node && typeof node === "object") {
+    for (const [k, v] of Object.entries(node)) {
+      const credField = inCredentialField || k === "auth";
+      scanNode(v, [...segments, k], credField, itemId, findings);
+    }
+  }
+}
+function isInlineSecret(value, key, inCredentialField) {
+  if (isSecretReference(value) || PLACEHOLDER_RE.test(value)) return false;
+  if (inCredentialField) return true;
+  if (SUSPICIOUS_KEY_RE.test(key)) return true;
+  if (PROTO_CREDENTIAL_URL_RE.test(value)) return true;
+  return isLongEntropic(value);
+}
+function maskSecret(value) {
+  const proto = value.match(/^(\w+):\/\/[^/@\s]+:[^/@\s]+@/);
+  if (proto) return `${proto[1]}://\u2026:****@\u2026`;
+  return "****";
+}
+function redactSecrets(preset, findings) {
+  const next = structuredClone(preset);
+  const keys = [];
+  const used = /* @__PURE__ */ new Set();
+  for (const finding of findings) {
+    const item = next.items.find((it) => it.id === finding.itemId);
+    if (!item?.config) continue;
+    const base = placeholderKey(finding.itemId, finding.path);
+    let key = base;
+    for (let n = 2; used.has(key); n++) key = `${base}_${n}`;
+    if (!setAtPath(item.config, finding.path.split("."), `\${INPUT:${key}}`)) continue;
+    used.add(key);
+    const placeholder = {
+      key,
+      type: "secret",
+      required: true,
+      prompt: `Secret value for ${finding.itemId}.${finding.path}`
+    };
+    item.placeholders = [...item.placeholders ?? [], placeholder];
+    keys.push(key);
+  }
+  return { preset: next, keys };
+}
+function placeholderKey(itemId, path36) {
+  return `${itemId}_${path36}`.replace(/[^a-zA-Z0-9]+/g, "_").replace(/^_+|_+$/g, "").toUpperCase();
+}
+function setAtPath(root, segments, value) {
+  let node = root;
+  for (let i = 0; i < segments.length - 1; i++) {
+    if (!node || typeof node !== "object") return false;
+    node = node[segments[i]];
+  }
+  if (!node || typeof node !== "object") return false;
+  node[segments.at(-1)] = value;
+  return true;
+}
+var INLINE_SECRETS_HEADER = "# \u26A0\uFE0F CONTAINS INLINE SECRETS \u2014 replace with placeholders before sharing or publishing";
+function secretHeaderComment(findings) {
+  return findings.length > 0 ? INLINE_SECRETS_HEADER : null;
+}
+
+// cli/src/commands/preset-cmd.ts
+function makePresetCommand() {
+  const cmd = new Command("preset").description("Scaffold and validate preset YAML files");
+  cmd.command("init [name]").description("Scaffold a new .preset.yaml file").option("--dir <path>", "Output directory", process.cwd()).action(async (name, opts) => {
+    const presetName = name ?? "my-preset";
+    const filename = `${presetName}.preset.yaml`;
+    const outPath = path14__default.join(path14__default.resolve(opts.dir), filename);
+    if (existsSync(outPath)) {
+      logErr(`File already exists: ${outPath}`);
+      logInfo("Choose a different name or remove the existing file.");
+      process.exit(1);
+    }
+    const template = generatePresetTemplate(presetName);
+    writeFileSync(outPath, template, "utf-8");
+    logOk(`Created ${S.brand(filename)}`);
+    logInfo(`Path: ${outPath}`);
+    logInfo("Edit the file to define your preset items, then validate with:");
+    logInfo(`  skaile preset validate ${filename}`);
+  });
+  cmd.command("validate <path>").description("Validate a preset YAML file (schema + cycles + nesting depth)").action(async (filePath) => {
+    await runPresetValidate(filePath);
+  });
+  cmd.command("export [name]").description("Snapshot the workspace's skaile.yaml into a shareable .preset.yaml").option("--project-dir <path>", "Project directory to read skaile.yaml from", process.cwd()).option("--out <file>", "Explicit output file path").option("--dir <path>", "Output directory (default: cwd)", process.cwd()).option("--redact", "Replace every detected inline secret with a placeholder").option(
+    "--allow-inline-secrets",
+    "Exit 0 even when inline secrets remain unredacted (opt-in; unsafe for CI)"
+  ).option("--force", "Overwrite the output file if it already exists").action(async (name, opts) => {
+    await runPresetExport(name, opts);
+  });
+  cmd.command("apply <path>").description("Apply a .preset.yaml additively into the workspace's skaile.yaml").option("--project-dir <path>", "Project directory holding skaile.yaml", process.cwd()).option(
+    "--input <KEY=VAL>",
+    "Provide a placeholder value (repeatable)",
+    collectInput,
+    []
+  ).option("--yes", "Skip interactive prompts; use defaults where available").option("--no-deploy", "Skip the final `skaile install` step").action(async (filePath, opts) => {
+    await runPresetApply(filePath, opts);
+  });
+  return cmd;
+}
+async function runPresetExport(name, opts) {
+  const projectDir = path14__default.resolve(opts.projectDir);
+  const file = loadSkWorkspaceConfig(projectDir);
+  if (!file) {
+    logErr(`No skaile.yaml found in ${projectDir}`);
+    logInfo("Run this from a project directory or pass --project-dir <path>.");
+    process.exit(1);
+  }
+  const presetName = name ?? file.config.name ?? "my-preset";
+  let lock = null;
+  try {
+    lock = readLock(path14__default.join(projectDir, "skaile.lock.yaml"));
+  } catch {
+    lock = null;
+  }
+  const sources = neededSources(file.config, lock);
+  if (lock === null && sources.length > 0) {
+    logInfo("No lock file \u2014 exporting all non-factory sources conservatively.");
+  }
+  const strippedCreds = sources.filter((s) => urlHasCredentials(s.url)).length;
+  if (strippedCreds > 0) {
+    logWarn(`Stripped credentials from ${strippedCreds} source URL(s) \u2014 resolved via git auth on apply.`);
+  }
+  let preset = buildPresetFromWorkspace(file.config, presetName, sources);
+  if (preset.items.length === 0) {
+    logErr("Nothing to export \u2014 skaile.yaml has no dependencies, connectors, or mcp_servers.");
+    process.exit(1);
+  }
+  const result = validatePreset(preset);
+  if (!result.ok) {
+    logErr("Internal error: generated preset failed validation:");
+    for (const err of result.errors) console.error(`  ${S.err("\u2717")} ${err.path}: ${err.message}`);
+    process.exit(1);
+  }
+  const findings = scanInlineSecrets(preset);
+  reportFindings(findings);
+  const toRedact = await resolveRedactions(findings, opts.redact === true);
+  if (toRedact.length > 0) preset = redactSecrets(preset, toRedact).preset;
+  const unresolved = scanInlineSecrets(preset);
+  const header = secretHeaderComment(unresolved);
+  const body = stringify(preset);
+  const contents = header ? `${header}
+${body}` : body;
+  if (opts.out && opts.dir !== process.cwd()) logWarn("--dir is ignored when --out is set.");
+  const outPath = opts.out ? path14__default.resolve(opts.out) : path14__default.join(path14__default.resolve(opts.dir), `${presetName}.preset.yaml`);
+  if (existsSync(outPath) && !opts.force) {
+    logErr(`File already exists: ${outPath}`);
+    logInfo("Pass --force to overwrite, or choose a different --out/--dir.");
+    process.exit(1);
+  }
+  try {
+    writeFileSync(outPath, contents, "utf-8");
+  } catch (e) {
+    logErr(`Failed to write ${outPath}: ${e.message}`);
+    process.exit(1);
+  }
+  logOk(`Exported ${S.brand(path14__default.basename(outPath))}`);
+  logInfo(`Path: ${outPath}`);
+  if (unresolved.length > 0) {
+    console.error(S.err("This file is NOT safe to share."));
+    if (!opts.allowInlineSecrets) {
+      logErr(`${unresolved.length} inline secret(s) left unredacted.`);
+      logInfo(
+        "Re-run with --redact to placeholder them, or --allow-inline-secrets to accept the risk."
+      );
+      process.exit(1);
+    }
+  }
+}
+function reportFindings(findings) {
+  if (findings.length === 0) return;
+  console.error(S.err(`\u26A0\uFE0F ${findings.length} potential INLINE secret(s) found`));
+  for (const f of findings) {
+    console.error(`  ${S.err("\u2022")} ${f.itemId}  ${S.dim(f.path)}  ${f.maskedValue}`);
+  }
+}
+async function resolveRedactions(findings, redactAll) {
+  if (findings.length === 0) return [];
+  if (redactAll) return findings;
+  if (!process.stdin.isTTY) return [];
+  const rl = readline2.createInterface({ input: process.stdin, output: process.stderr });
+  try {
+    const chosen = [];
+    for (const f of findings) {
+      const answer = await rl.question(`Redact ${f.itemId}.${f.path}? [y/N] `);
+      if (/^y(es)?$/i.test(answer.trim())) chosen.push(f);
+    }
+    return chosen;
+  } finally {
+    rl.close();
+  }
+}
+function collectInput(value, acc) {
+  acc.push(value);
+  return acc;
+}
+async function runPresetApply(filePath, opts) {
+  const projectDir = path14__default.resolve(opts.projectDir);
+  const file = loadSkWorkspaceConfig(projectDir);
+  if (!file) {
+    logErr("No skaile.yaml \u2014 run `skaile init` first");
+    process.exit(1);
+  }
+  const resolved = path14__default.resolve(filePath);
+  if (!existsSync(resolved)) {
+    logErr(`File not found: ${resolved}`);
+    process.exit(1);
+  }
+  const { parsePresetYaml } = await import('../library/index.js');
+  const parseResult = parsePresetYaml(readFileSync(resolved, "utf-8"));
+  if (!parseResult.ok || !parseResult.preset) {
+    logErr("Preset validation failed:");
+    for (const err of parseResult.errors) console.error(`  ${S.err("\u2717")} ${err}`);
+    process.exit(1);
+  }
+  const preset = parseResult.preset;
+  if (preset.items.some((it) => it.ref.startsWith("preset:"))) {
+    logErr(NESTED_PRESET_UNSUPPORTED);
+    logInfo("Remove the nested `preset:` item(s) and re-run.");
+    process.exit(1);
+  }
+  const values = parseInputs(opts.input);
+  await promptMissingInputs(preset.items, preset.inputs, values, opts.yes === true);
+  let items;
+  try {
+    items = presetItemsToWorkspace(preset, values);
+  } catch (err) {
+    logErr(err.message);
+    process.exit(1);
+  }
+  const editor = WorkspaceYamlEditor.load(file.path);
+  const summary = applyItems(editor, file.config, items);
+  const changed = summary.addedSources.length + summary.addedDeps.length + summary.addedConnectors.length + summary.addedMcp.length;
+  if (changed > 0) editor.save();
+  printApplySummary(summary, items.envVarsToSet);
+  if (opts.deploy) {
+    await runPresetInstall(projectDir);
+  } else {
+    logInfo("Skipped deploy (--no-deploy). Run `skaile install` to deploy the new dependencies.");
+  }
+}
+function parseInputs(pairs) {
+  const out = {};
+  for (const pair of pairs) {
+    const eq = pair.indexOf("=");
+    if (eq <= 0) {
+      logErr(`Invalid --input "${pair}" \u2014 expected KEY=VALUE.`);
+      process.exit(1);
+    }
+    out[pair.slice(0, eq)] = pair.slice(eq + 1);
+  }
+  return out;
+}
+async function promptMissingInputs(presetItems, presetInputs, values, yes) {
+  const seen = /* @__PURE__ */ new Set();
+  const toPrompt = [];
+  const collect = (ph) => {
+    if (seen.has(ph.key) || isSecretPlaceholder(ph)) return;
+    seen.add(ph.key);
+    if (values[ph.key] === void 0) toPrompt.push(ph);
+  };
+  for (const input of presetInputs ?? []) collect(input);
+  for (const item of presetItems) for (const ph of item.placeholders ?? []) collect(ph);
+  if (toPrompt.length === 0 || yes || !process.stdin.isTTY) return;
+  const rl = readline2.createInterface({ input: process.stdin, output: process.stderr });
+  try {
+    for (const ph of toPrompt) {
+      const def = getDefaultValue(ph);
+      const suffix = def !== void 0 ? ` [${String(def)}]` : "";
+      const answer = (await rl.question(`${ph.prompt ?? ph.key}${suffix}: `)).trim();
+      if (answer) values[ph.key] = answer;
+      else if (def !== void 0) values[ph.key] = String(def);
+    }
+  } finally {
+    rl.close();
+  }
+}
+function applyItems(editor, config, items) {
+  const s = {
+    addedDeps: [],
+    skippedDeps: [],
+    addedConnectors: [],
+    skippedConnectors: [],
+    unchangedConnectors: [],
+    addedMcp: [],
+    skippedMcp: [],
+    unchangedMcp: [],
+    addedSources: [],
+    skippedSources: [],
+    unchangedSources: []
+  };
+  const existingSourceUrls = new Map(
+    editor.getSources().map((src) => [normalizeRepoUrl(src.url), src])
+  );
+  for (const src of items.sources) {
+    const key = normalizeRepoUrl(src.url);
+    const existing = existingSourceUrls.get(key);
+    if (!existing) {
+      editor.setSource(src);
+      existingSourceUrls.set(key, src);
+      s.addedSources.push(src.url);
+    } else if ((existing.pin ?? void 0) !== (src.pin ?? void 0)) {
+      s.skippedSources.push({ url: src.url, keptPin: existing.pin, presetPin: src.pin });
+    } else {
+      s.unchangedSources.push(src.url);
+    }
+  }
+  for (const ref of items.dependencies) {
+    if (editor.addDependency(ref)) s.addedDeps.push(ref);
+    else s.skippedDeps.push(ref);
+  }
+  const existingConnectors = new Map((config.connectors ?? []).map((c) => [c.id, c]));
+  for (const conn of items.connectors) {
+    const existing = existingConnectors.get(conn.id);
+    if (existing) {
+      (stableEqual(existing, conn) ? s.unchangedConnectors : s.skippedConnectors).push(conn.id);
+      continue;
+    }
+    editor.setConnector(conn);
+    s.addedConnectors.push(conn.id);
+  }
+  const existingMcp = new Map((config.mcp_servers ?? []).map((m) => [m.id, m]));
+  for (const mcp of items.mcpServers) {
+    const existing = existingMcp.get(mcp.id);
+    if (existing) {
+      (stableEqual(existing, mcp) ? s.unchangedMcp : s.skippedMcp).push(mcp.id);
+      continue;
+    }
+    editor.setMcpServer(mcp);
+    s.addedMcp.push(mcp.id);
+  }
+  return s;
+}
+function stableEqual(a, b) {
+  return canonicalJson(a) === canonicalJson(b);
+}
+function canonicalJson(value) {
+  return JSON.stringify(
+    value,
+    (_k, v) => v && typeof v === "object" && !Array.isArray(v) ? Object.fromEntries(
+      Object.entries(v).sort(([x], [y]) => x.localeCompare(y))
+    ) : v
+  );
+}
+function printApplySummary(summary, envVarsToSet) {
+  const added = summary.addedSources.length + summary.addedDeps.length + summary.addedConnectors.length + summary.addedMcp.length;
+  if (added === 0) {
+    logInfo("Nothing to apply \u2014 everything was already present.");
+  } else {
+    if (summary.addedSources.length > 0) {
+      logOk(`Registered ${summary.addedSources.length} source(s).`);
+    }
+    logOk(
+      `Applied ${summary.addedDeps.length} dependency(ies), ${summary.addedConnectors.length} connector(s), ${summary.addedMcp.length} mcp server(s).`
+    );
+  }
+  const skipped = [
+    ...summary.skippedSources.map(
+      (s) => `source ${s.url} (kept pin '${s.keptPin ?? "none"}', preset had '${s.presetPin ?? "none"}')`
+    ),
+    ...summary.skippedDeps.map((d) => `dependency ${d} (already present)`),
+    ...summary.skippedConnectors.map((c) => `connector ${c} (id exists, differs)`),
+    ...summary.skippedMcp.map((m) => `mcp ${m} (id exists, differs)`)
+  ];
+  for (const line of skipped) logWarn(`Skipped ${line}`);
+  const unchanged = summary.unchangedConnectors.length + summary.unchangedMcp.length + summary.unchangedSources.length;
+  if (unchanged > 0) logInfo(`${unchanged} source/connector/mcp entry(ies) already matched \u2014 left as-is.`);
+  if (envVarsToSet.length > 0) {
+    logWarn(`Set these env vars before running: ${envVarsToSet.join(", ")}`);
+  }
+}
+async function runPresetInstall(projectDir) {
+  try {
+    const { AssetManager: AssetManager2 } = await import('../asset-manager/index.js');
+    const am2 = new AssetManager2({ projectDir });
+    logInfo("Installing new dependencies\u2026");
+    const result = await am2.install({});
+    for (const d of result.deployed) logOk(d);
+    for (const m of result.missing) logErr(`Missing: ${m}`);
+    await reportInstalledSoftDeps(am2);
+  } catch (err) {
+    logErr(`Install failed: ${err instanceof Error ? err.message : String(err)}`);
+    logInfo("Run `skaile install` to deploy the new dependencies.");
+  }
+}
+async function loadPresetForValidation(resolved) {
+  if (!existsSync(resolved)) {
+    logErr(`File not found: ${resolved}`);
+    process.exit(1);
+  }
+  const content = readFileSync(resolved, "utf-8");
+  const { parsePresetYaml } = await import('../library/index.js');
+  const parseResult = parsePresetYaml(content);
+  if (!parseResult.ok) {
+    logErr("Preset validation failed (parse errors):");
+    for (const err of parseResult.errors) {
+      console.log(`  ${S.err("\u2717")} ${err}`);
+    }
+    process.exit(1);
+  }
+  if (!parseResult.preset) {
+    logErr("Preset validation failed: parser returned no manifest");
+    process.exit(1);
+  }
+  return parseResult.preset;
+}
+async function reportNestedPresetRefs(preset) {
+  const { detectNestedPresetRefs } = await import('../library/index.js');
+  const nestedRefs = detectNestedPresetRefs(preset);
+  if (nestedRefs.length > 0) {
+    logInfo(`Nested preset refs: ${nestedRefs.length} (depth validated at apply-time)`);
+  }
+}
+async function checkPresetCycles(preset, resolved) {
+  const { detectCycles } = await import('../discovery/index.js');
+  const presetRef = path14__default.basename(resolved, ".preset.yaml");
+  const edges = [];
+  for (const item of preset.items) {
+    if (item.ref) {
+      edges.push({ from: presetRef, to: item.ref, field: "items[].ref" });
+    }
+  }
+  if (edges.length === 0) return;
+  const cycleResult = detectCycles(edges);
+  if (!cycleResult.acyclic) {
+    logErr("Cycle detected in preset references:");
+    if (cycleResult.cyclePath) {
+      console.log(`  ${S.err("\u2717")} ${cycleResult.cyclePath.join(" \u2192 ")}`);
+    }
+    process.exit(1);
+  }
+}
+async function checkPresetPlaceholders(allPlaceholders) {
+  if (allPlaceholders.length === 0) return false;
+  const { validatePlaceholder } = await import('../library/index.js');
+  const invalidEntries = [];
+  for (const ph of allPlaceholders) {
+    const result = validatePlaceholder(ph, ph.default);
+    if (!result.valid) {
+      invalidEntries.push({ key: ph.key, errors: result.errors });
+    }
+  }
+  if (invalidEntries.length === 0) return false;
+  logWarn("Placeholder issues:");
+  for (const r of invalidEntries) {
+    console.log(`  ${S.warn("!")} ${r.key}: ${r.errors.join(", ")}`);
+  }
+  return true;
+}
+function printPresetSummary(preset, placeholderCount, hasWarnings) {
+  console.log();
+  console.log(S.heading("  Preset Validation"));
+  console.log(`  ${S.rule(40)}`);
+  console.log(`  ${S.label("Name")}          ${preset.name}`);
+  console.log(`  ${S.label("Version")}       ${preset.version ?? "unversioned"}`);
+  console.log(`  ${S.label("Items")}         ${preset.items.length}`);
+  console.log(`  ${S.label("Inputs")}         ${preset.inputs?.length ?? 0}`);
+  console.log(`  ${S.label("Placeholders")}  ${placeholderCount}`);
+  console.log();
+  if (hasWarnings) {
+    logWarn("Validation passed with warnings");
+  } else {
+    logOk("Preset is valid");
+  }
+}
+async function runPresetValidate(filePath) {
+  const resolved = path14__default.resolve(filePath);
+  const preset = await loadPresetForValidation(resolved);
+  await reportNestedPresetRefs(preset);
+  await checkPresetCycles(preset, resolved);
+  const allPlaceholders = preset.items.flatMap((item) => item.placeholders ?? []);
+  const hasWarnings = await checkPresetPlaceholders(allPlaceholders);
+  printPresetSummary(preset, allPlaceholders.length, hasWarnings);
+}
+function generatePresetTemplate(name) {
+  return `# ${name}.preset.yaml
+# Polymorphic Preset \u2014 composition + configuration primitive for the asset store.
+# See: _devlog/specs/2026-05-03-ai-asset-store-v2-design.md \xA7 Presets
+
+name: "${name}"
+version: "1.0.0"
+description: "TODO: describe what this preset configures"
+
+# Placeholders \u2014 values the user provides at apply-time.
+# Types: text, multiline, secret, number, boolean, enum, oauth, instance-picker
+placeholders:
+  - key: EXAMPLE_KEY
+    type: text
+    label: "Example placeholder"
+    required: true
+    # default: "some-value"
+    # hint: "Help text shown to the user"
+
+# Items \u2014 each becomes a Library Instance when the preset is applied.
+# Ref types:
+#   - Asset ref (kind:publisher/name@pin) \u2192 creates new Instance
+#   - Library Instance ref (#uuid) \u2192 reuses existing Instance
+#   - Nested Preset ref (preset:path.preset.yaml) \u2192 recursive apply (max depth 3)
+items:
+  - id: example-item
+    ref: "skill:@skaile/example-skill@^1.0"
+    config:
+      # Use \${INPUT:EXAMPLE_KEY} for placeholder interpolation
+      setting: "\${INPUT:EXAMPLE_KEY}"
+    # credential_ref: "\${SECRET:EXAMPLE_KEY}"  # for secret placeholders
+`;
+}
 function makeRebuildCommand() {
   return new Command("rebuild").description("Re-snapshot inline-snapshot composition items and bump prompt version").argument("[agent]", "Agent name or path (defaults to current project agent)").option("--project-dir <dir>", "Project directory", process.cwd()).action(async (agentArg, opts) => {
     const projectDir = path14__default.resolve(opts.projectDir);
@@ -5785,12 +6336,12 @@ function makeServeCommand() {
   );
 }
 async function ensurePluginsLoadedForServe(projectDir) {
-  const { logInfo: logInfo2, logWarn: logWarn2 } = await import('../helpers-SC4PWN2F.js');
+  const { logInfo: logInfo2, logWarn: logWarn2 } = await import('../helpers-GWG4CYYC.js');
   try {
     const { resolveSkWorkspaceConfig: resolveSkWorkspaceConfig2 } = await import('../core/index.js');
     const config = resolveSkWorkspaceConfig2(projectDir);
     if (!config.plugins || config.plugins.length === 0) return;
-    const { ensurePluginsLoaded } = await import('../plugin-store-3DAVGKHN.js');
+    const { ensurePluginsLoaded } = await import('../plugin-store-EIMVEH3O.js');
     const { pluginRegistry } = await import('../plugin-registry/index.js');
     const result = await ensurePluginsLoaded(projectDir, config.plugins, pluginRegistry);
     if (result.loaded.length > 0) {
@@ -5804,14 +6355,14 @@ async function ensurePluginsLoadedForServe(projectDir) {
   }
 }
 async function runCompileTest(opts) {
-  const { logOk: logOk2, logErr: logErr2, logInfo: logInfo2, S: S2 } = await import('../helpers-SC4PWN2F.js');
+  const { logOk: logOk2, logErr: logErr2, logInfo: logInfo2, S: S2 } = await import('../helpers-GWG4CYYC.js');
   const { tmpdir } = await import('os');
   const { dirname: dirname4, join: join5, resolve: resolve5 } = await import('path');
   const { fileURLToPath: fileURLToPath2 } = await import('url');
   const { unlinkSync, existsSync: existsSync13 } = await import('fs');
   const { spawn } = await import('child_process');
   const { portableSpawnSync: portableSpawnSync2 } = await import('../core/index.js');
-  const { MONOREPO_ROOT } = await import('../paths-S7QNXYMB.js');
+  const { MONOREPO_ROOT } = await import('../paths-UVOHWUPY.js');
   if (MONOREPO_ROOT === null) {
     logErr2("--compile-test is only available inside the skaile-dev workspace.");
     logInfo2("Run it from a checkout of skaile-ai/skaile-dev (the monorepo shell).");
@@ -6629,8 +7180,8 @@ function makeStoreCommand() {
   store.command("login").description("Authenticate with the store").option("--email <email>", "Login with email instead of GitHub").action(async (opts) => {
     const config = getStoreConfig();
     if (opts.email) {
-      const readline2 = await import('readline');
-      const rl = readline2.createInterface({ input: process.stdin, output: process.stdout });
+      const readline3 = await import('readline');
+      const rl = readline3.createInterface({ input: process.stdin, output: process.stdout });
       const password = await new Promise((resolve5) => {
         rl.question("Password: ", (answer) => {
           rl.close();
@@ -7447,12 +7998,43 @@ function makeVerifyCommand() {
     }
   });
 }
+function refKindName(ref) {
+  const trimmed = ref.trim();
+  const colon = trimmed.indexOf(":");
+  let kind = colon === -1 ? void 0 : trimmed.slice(0, colon);
+  if (kind === "mcp") kind = "mcp-server";
+  let rest = colon === -1 ? trimmed : trimmed.slice(colon + 1);
+  const hash = rest.indexOf("#");
+  if (hash !== -1) rest = rest.slice(0, hash);
+  if (rest.startsWith("@")) {
+    const slash = rest.indexOf("/");
+    if (slash !== -1) rest = rest.slice(slash + 1);
+  }
+  return { kind, name: rest };
+}
+function whyEmptyMessage(ref, declared) {
+  const { kind, name } = refKindName(ref);
+  const isDeclared = declared.some(
+    (d) => d.name === name && (kind === void 0 || d.kind === kind)
+  );
+  if (isDeclared) {
+    return `${ref} not found in lock file. Run \`skaile install\` first.`;
+  }
+  return `${ref} is not a dependency of this project \u2014 nothing in skaile.yaml requires it. Run \`skaile list\` to see declared dependencies.`;
+}
 function makeWhyCommand() {
   return new Command("why").description("Show why an asset is installed (dependency chain)").argument("<ref>", "Asset reference (kind:name)").option("--project-dir <path>", "Project directory", process.cwd()).action(async (ref, opts) => {
     const am2 = new AssetManager({ projectDir: path14__default.resolve(opts.projectDir) });
     const chain = am2.why(ref);
     if (chain.length === 0) {
-      logErr(`${ref} not found in lock file. Run \`skaile install\` first.`);
+      let declared;
+      try {
+        declared = am2.listDeclared();
+      } catch {
+        logErr(`${ref} not found in lock file. Run \`skaile install\` first.`);
+        return;
+      }
+      logErr(whyEmptyMessage(ref, declared));
       return;
     }
     console.log();
@@ -7598,7 +8180,7 @@ program.command("init [project-dir]").description("Initialize a project director
 );
 async function runInit(projectDir, opts) {
   const { mkdirSync: mkdirSync5, writeFileSync: writeFileSync4 } = await import('fs');
-  const { stringify } = await import('yaml');
+  const { stringify: stringify2 } = await import('yaml');
   const { DRIVER_TARGETS, SUPPORTED_DRIVER_TARGETS: SUPPORTED_DRIVER_TARGETS2 } = await import('../core/index.js');
   const backend = opts.backend;
   if (!SUPPORTED_DRIVER_TARGETS2.includes(backend)) {
@@ -7626,7 +8208,7 @@ async function runInit(projectDir, opts) {
   }
   const wsConfigPath = path14__default.join(resolved, "skaile.yaml");
   if (!existsSync13(wsConfigPath)) {
-    writeFileSync4(wsConfigPath, stringify(buildInitWorkspaceConfig(projectName, backend)));
+    writeFileSync4(wsConfigPath, stringify2(buildInitWorkspaceConfig(projectName, backend)));
     created.push("skaile.yaml");
   }
   for (const dir of new Set(Object.values(DRIVER_TARGETS[backend].local))) {
@@ -7717,7 +8299,7 @@ async function bootstrapUserConfig() {
 }
 async function hydrateInitSources(resolved, created) {
   try {
-    const { ensureSourcesCloned } = await import('../ensure-sources-BQI2TOZZ.js');
+    const { ensureSourcesCloned } = await import('../ensure-sources-CHC7X7AJ.js');
     const hydrate = ensureSourcesCloned(resolved, { quiet: true });
     for (const n of hydrate.cloned) created.push(`~/.skaile/cache/sources/${n}/`);
     if (hydrate.failed.length > 0) {
@@ -7753,7 +8335,7 @@ function printInitSummary(resolved, projectDir, created) {
   console.log();
 }
 program.command("setup").description("Interactive provider setup wizard").action(async () => {
-  const { cmdSetup } = await import('../setup-WBGDT2WY.js');
+  const { cmdSetup } = await import('../setup-DINVR6ZQ.js');
   await cmdSetup([], { projectDir: process.cwd() });
 });
 program.addCommand(makeInstallCommand());