@skaile/workspaces 1.4.0 → 1.6.0

package/dist/cli/index.js

@@ -1,20 +1,15 @@
 #!/usr/bin/env node
-import { AI_RESOURCES, aiResourceRoots } from '../chunk-XBG2YDQQ.js';
-import { makeSourceCommand, syncProjectSources } from '../chunk-QM2TT2PJ.js';
-import { openCatalogSource, openLibraryManager, createFullRegistry, openLibrary } from '../chunk-77OXU44H.js';
-import { logErr, S, logOk, logInfo, colorRef, logWarn, kindColorPad, kindColor, formatSoftDepSection, bareSoftDepName, formatSoftDepHint, formatRelativeTime, fitWidth, formatSoftDepRemovePreview, formatSoftDepAddPreview } from '../chunk-DNFIKRO6.js';
-import { getStoreConfig, storeFetch, saveStoreTokens, clearStoreTokens, isStoreAuthenticated } from '../chunk-BJHZHNKR.js';
+import { AI_RESOURCES, aiResourceRoots } from '../chunk-2ZMO4CFG.js';
+import { getStoreConfig, storeFetch, deviceLogin, loadStoreAuthConfig, logout, hasStoredAuth, isStoreAuthenticated, getStoreToken } from '../chunk-J5TI55E7.js';
+import { makeSourceCommand, syncProjectSources } from '../chunk-WYGXYGJH.js';
+import { openCatalogSource, openLibraryManager, createFullRegistry, openLibrary } from '../chunk-RSYV7XEN.js';
+import { logErr, S, logOk, logInfo, colorRef, logWarn, kindColorPad, kindColor, formatSoftDepSection, bareSoftDepName, formatSoftDepHint, formatRelativeTime, fitWidth, formatSoftDepRemovePreview, formatSoftDepAddPreview } from '../chunk-KMY7HVQ6.js';
 import { LocalSecretsProvider } from '../chunk-6BEGKO2Q.js';
-import { resolveLibraryDir, getDefaultValue, isSecretPlaceholder } from '../chunk-HWTQ6HPO.js';
-import '../chunk-B6SSXVF2.js';
-import '../chunk-JXT46QFC.js';
-import '../chunk-UKJMQZV6.js';
-import '../chunk-R7FOF242.js';
-import { runFlow, resumeFlow } from '../chunk-JZPEEMIM.js';
+import { runFlow, resumeFlow } from '../chunk-BEO6KN7P.js';
 import '../chunk-4R6DROGN.js';
 import { validateFlowVersions, parseSkillFrontmatter } from '../chunk-GXC3TYMQ.js';
-import { runAgentChat, loadSessionById, loadSession, listSessions, setCurrentSession, deleteSession, clearSession, loadAgentManifest, compileComposition, MarkdownStreamer, resolveMixin } from '../chunk-AAGD2J4H.js';
-import { buildClaudePluginFiles } from '../chunk-OSCJRUKM.js';
+import { runAgentChat, loadSessionById, loadSession, listSessions, setCurrentSession, deleteSession, clearSession, loadAgentManifest, compileComposition, MarkdownStreamer, resolveMixin } from '../chunk-CBA2XIBF.js';
+import { buildClaudePluginFiles } from '../chunk-RDYOU6N6.js';
 import '../chunk-X5YPJV4N.js';
 import '../chunk-O7SG5PC2.js';
 import '../chunk-7QBNJTTQ.js';
@@ -29,21 +24,26 @@ import '../chunk-BMQKMOQY.js';
 import '../chunk-GAH4YRCI.js';
 import '../chunk-TNSCHS4I.js';
 import '../chunk-LV2HPH3C.js';
-import '../chunk-GWDZW44L.js';
-import '../chunk-BDUANIAR.js';
+import '../chunk-DMG6NJH7.js';
+import '../chunk-KEQ4GLVM.js';
 import '../chunk-6E6PKKAD.js';
 import { loadFlow, loadAllFlows } from '../chunk-4N5XR5DQ.js';
 import '../chunk-DEYYRFQU.js';
 import '../chunk-IFGTRL2I.js';
 import '../chunk-PK7Q7MC7.js';
-import { AssetManager, NON_DEPLOYABLE_KINDS, MissingManifestError, normalizeRepoUrl, FACTORY_SOURCE_URL } from '../chunk-X57AMTAH.js';
-import '../chunk-LCTRCWBK.js';
+import { AssetManager, NON_DEPLOYABLE_KINDS, MissingManifestError, normalizeRepoUrl, FACTORY_SOURCE_URL } from '../chunk-3CHARYD4.js';
+import { resolveLibraryDir, getStoreManifestsDir, getDefaultValue, isSecretPlaceholder } from '../chunk-FDE7XRQA.js';
+import '../chunk-MZV6WCF3.js';
+import '../chunk-JXT46QFC.js';
+import '../chunk-UKJMQZV6.js';
+import '../chunk-R7FOF242.js';
+import '../chunk-6NR2BEIY.js';
 import '../chunk-CGYEHQOX.js';
-import { readLock, resolveSettings, globalSettingsPath, projectSettingsPath, loadSettings, saveSettings, portableSpawn, portableSpawnSync, WorkspaceYamlEditor, checkAgentSkillConformance } from '../chunk-26YCXWCU.js';
+import { readLock, resolveSettings, globalSettingsPath, projectSettingsPath, loadSettings, saveSettings, portableSpawn, portableSpawnSync, WorkspaceYamlEditor, checkAgentSkillConformance } from '../chunk-HY33RMEA.js';
 import { assetSearchDirs, detectDomains } from '../chunk-ZAP2BDHG.js';
-import '../chunk-TJRWGMD2.js';
-import { globalCacheRoot, sourceCacheKey, getGlobalCacheDir, resolveAgentDir, loadSkWorkspaceConfig, resolveSkWorkspaceConfig } from '../chunk-OUWNTFDG.js';
-import { SKAILE_MANIFEST_FILENAME, decodeSkaileManifest, loadSkPublishManifest, saveSkPublishManifest } from '../chunk-DZCK7GRW.js';
+import { factoryAssetRoots } from '../chunk-ZBZQC5R7.js';
+import { globalCacheRoot, sourceCacheKey, getGlobalCacheDir, resolveAgentDir, loadSkWorkspaceConfig, resolveSkWorkspaceConfig, storeManifestSlug } from '../chunk-UQKYT4V6.js';
+import { SKAILE_MANIFEST_FILENAME, decodeSkaileManifest, loadSkPublishManifest, saveSkPublishManifest } from '../chunk-P4VHQA4N.js';
 import { parseFrontmatter } from '../chunk-BQCGFPHW.js';
 import { parseAssetRef, ASSET_KINDS, isValidAssetName, slugifyAssetName, ASSET_NAME_HINT, assetRefToStr } from '../chunk-GEEW6SY2.js';
 import '../chunk-F3HNW354.js';
@@ -74,6 +74,19 @@ import { execSync } from 'child_process';
 import * as readline2 from 'readline/promises';
 import { createTRPCUntypedClient, httpLink, httpSubscriptionLink } from '@trpc/client';
 
+function catalogAssetRef(a) {
+  return `${a.kind}:@${a.publisher}/${a.name}#${a.version}`;
+}
+function localEntryRef(e) {
+  return e.publisher ? `${e.kind}:@${e.publisher}/${e.name}` : e.name;
+}
+function filterCatalogAssets(assets, query) {
+  if (!query) return assets;
+  const q = query.toLowerCase();
+  return assets.filter(
+    (a) => a.name.toLowerCase().includes(q) || (a.description?.toLowerCase().includes(q) ?? false) || a.publisher.toLowerCase().includes(q)
+  );
+}
 async function runSearch(kind, query, opts) {
   if (kind?.includes(":")) {
     query = kind;
@@ -90,19 +103,68 @@ async function runSearch(kind, query, opts) {
     await searchStore(query, kind, opts, airGapped);
   }
 }
+async function searchIndex(query, kind) {
+  const { openLibrary: openLibrary2 } = await import('../open-library-4HMIDK3N.js');
+  const library = await openLibrary2();
+  try {
+    const defs = await library.listAssetDefs(kind ? { kind } : {});
+    let entries = defs.map(
+      (d) => ({
+        name: d.name,
+        kind: d.kind,
+        description: d.description ?? "",
+        source: d.id,
+        // Stored publishers may carry the `@` scope sigil (manifest-mode rows);
+        // `localEntryRef` re-adds it, so strip here to avoid `@@`.
+        publisher: d.publisher ? d.publisher.replace(/^@/, "") : void 0,
+        version: d.version,
+        requires: [],
+        dependencies: [],
+        license: d.license,
+        category: d.category
+      })
+    );
+    if (query) {
+      const q = query.toLowerCase();
+      entries = entries.filter(
+        (e) => e.name.toLowerCase().includes(q) || e.description.toLowerCase().includes(q)
+      );
+    }
+    return entries;
+  } finally {
+    library.close();
+  }
+}
+function searchFactory(projectDir, query, kind) {
+  const prefixes = factoryAssetRoots().map((r) => r.endsWith(path14__default.sep) ? r : r + path14__default.sep);
+  const isFactoryPath = (p8) => prefixes.some((fp) => p8 === fp.slice(0, -1) || p8.startsWith(fp));
+  try {
+    return new AssetManager({ projectDir }).search(query, kind).filter((e) => isFactoryPath(e.source));
+  } catch {
+    return [];
+  }
+}
+function entryDedupKey(e) {
+  return `${e.kind}:${e.publisher ? `@${e.publisher}/` : ""}${e.name}`;
+}
+function unionEntries(indexed, factory) {
+  const seen = new Set(indexed.map(entryDedupKey));
+  return [...indexed, ...factory.filter((e) => !seen.has(entryDedupKey(e)))];
+}
 async function searchLocal(query, kind, opts, showStore, airGapped) {
   const projectDir = path14__default.resolve(opts.projectDir);
-  let entries = new AssetManager({ projectDir }).search(query, kind);
+  const factory = searchFactory(projectDir, query, kind);
+  let entries = unionEntries(await searchIndex(query, kind), factory);
   if (entries.length === 0 && !query && !kind && !airGapped) {
-    const { autoSyncForSearch } = await import('../source-RXAHIGMD.js');
+    const { autoSyncForSearch } = await import('../source-LOAM7IIQ.js');
     if (await autoSyncForSearch(projectDir)) {
-      entries = new AssetManager({ projectDir }).search(query, kind);
+      entries = unionEntries(await searchIndex(query, kind), factory);
     }
   }
   if (entries.length === 0) {
     if (!showStore) {
       logInfo(
-        query ? `No entries matching "${query}".` : "No assets found. Run `skaile source sync` first."
+        query ? `No entries matching "${query}".` : kind ? `No "${kind}" assets found in this project's sources.` : "No assets found. Run `skaile source sync` first."
       );
     }
     return;
@@ -120,7 +182,7 @@ function printLocalEntries(entries) {
     byKind.get(e.kind).push(e);
   }
   for (const [k, items] of byKind) {
-    const nameW = Math.max(4, ...items.map((e) => e.name.length));
+    const nameW = Math.max(4, ...items.map((e) => localEntryRef(e).length));
     console.log();
     console.log(
       `  ${kindColor(k)} ${S.heading(`${k.toUpperCase()}S`)} ${S.dim(`(${items.length})`)}`
@@ -128,7 +190,9 @@ function printLocalEntries(entries) {
     console.log(`  ${S.rule(nameW + 62)}`);
     for (const e of items) {
       const ver = e.version ? S.dim(` v${e.version}`) : "";
-      console.log(`  ${S.cmd(e.name.padEnd(nameW))}  ${e.description.slice(0, 60)}${ver}`);
+      console.log(
+        `  ${S.cmd(localEntryRef(e).padEnd(nameW))}  ${e.description.slice(0, 60)}${ver}`
+      );
     }
   }
   console.log(`
@@ -146,30 +210,33 @@ async function searchStore(query, kind, opts, airGapped) {
     logInfo("air-gapped (cache_ttl: 0) \u2014 local sources only");
     return;
   }
+  const { openCatalogSource: openCatalogSource2, LocalCatalogDisabledError } = await import('../open-library-4HMIDK3N.js');
   try {
-    const { getStoreConfig: getStoreConfig2, storeFetch: storeFetch2 } = await import('../store-client-T3F663YG.js');
-    const config = getStoreConfig2();
-    const params = {};
-    if (query) params.q = query;
-    if (kind) params.kind = kind;
-    const storeRes = await storeFetch2(config, "/api/assets", { params });
-    if (storeRes.results.length > 0) {
+    const remote = await openCatalogSource2({ projectDir: path14__default.resolve(opts.projectDir) });
+    const assets = await remote.listAssets(kind ? { kind } : {});
+    const results = filterCatalogAssets(assets, query);
+    if (results.length > 0) {
       console.log(`
   ${S.heading("Store:")}`);
-      for (const asset of storeRes.results) {
-        const ref = `${asset.kind}:@${asset.publisher}/${asset.slug}`;
+      for (const asset of results) {
+        const ref = catalogAssetRef(asset);
         console.log(
-          `    \u2B21 ${kindColorPad(asset.kind)}  ${colorRef(ref).padEnd(40)}  ${S.dim(asset.description?.slice(0, 50) || "")}  ${S.dim(`\u2193${asset.downloads}`)}`
+          `    \u2B21 ${kindColorPad(asset.kind)}  ${colorRef(ref).padEnd(48)}  ${S.dim(asset.description?.slice(0, 50) || "")}`
         );
       }
     } else if (opts.store) {
       logInfo("No results in store");
     }
   } catch (e) {
+    const local = e instanceof LocalCatalogDisabledError;
     if (opts.store) {
-      logErr(`Store search failed: ${e.message}`);
+      logErr(
+        local ? "remote catalog disabled (catalog.url: local) \u2014 set catalog.url: https://skaile.store to search the store" : `Store search failed: ${e.message}`
+      );
     } else {
-      logInfo("store unavailable \u2014 showing local results only (run with --store to see the error)");
+      logInfo(
+        local ? "remote catalog disabled (catalog.url: local) \u2014 showing local results only" : "store unavailable \u2014 showing local results only (run with --store to see the error)"
+      );
     }
   }
 }
@@ -1007,7 +1074,7 @@ function makeCatalogCommand() {
   return catalog;
 }
 async function runLocalCatalogTest(projectDir) {
-  const { resolveCatalogSource } = await import('../open-library-37PXN6MK.js');
+  const { resolveCatalogSource } = await import('../open-library-4HMIDK3N.js');
   let resolved;
   try {
     resolved = await resolveCatalogSource({ projectDir });
@@ -1626,8 +1693,8 @@ async function promptField(field) {
 function makeConnectorCommand() {
   const cmd = new Command("connector").description("Operate on connectors in a workspace");
   cmd.command("catalog").description("List all available connector drivers and their dependencies").action(async () => {
-    const { scanDirectory, factoryAssetRoots } = await import('../core/index.js');
-    const entries = scanFactoryConnectors(scanDirectory, factoryAssetRoots());
+    const { scanDirectory, factoryAssetRoots: factoryAssetRoots2 } = await import('../core/index.js');
+    const entries = scanFactoryConnectors(scanDirectory, factoryAssetRoots2());
     if (entries.length === 0) {
       console.log("No connector descriptors found.");
       return;
@@ -1651,14 +1718,14 @@ function makeConnectorCommand() {
   cmd.command("add <driver>").option("--id <id>", "Connector instance ID (defaults to driver name)").option("--access <level>", "Access level: read-only | read-write", "read-only").option("--no-install", "Skip npm dependency installation").option("--project-dir <path>", "Workspace directory", process.cwd()).description("Add a connector to skaile.yaml and install its npm deps").action(
     async (driver, opts) => {
       const { installNpmPackages } = await import('../connectors/index.js');
-      const { scanDirectory, factoryAssetRoots, WorkspaceYamlEditor: WorkspaceYamlEditor2 } = await import('../core/index.js');
+      const { scanDirectory, factoryAssetRoots: factoryAssetRoots2, WorkspaceYamlEditor: WorkspaceYamlEditor2 } = await import('../core/index.js');
       const projectDir = path14__default.resolve(opts.projectDir);
       const yamlPath = path14__default.join(projectDir, "skaile.yaml");
       if (!existsSync(yamlPath)) {
         logErr("No skaile.yaml found in current directory. Run 'skaile init' first.");
         process.exit(1);
       }
-      const entries = scanFactoryConnectors(scanDirectory, factoryAssetRoots());
+      const entries = scanFactoryConnectors(scanDirectory, factoryAssetRoots2());
       const entry = entries.find((e) => e.name === driver);
       if (!entry) {
         logErr(
@@ -1997,7 +2064,7 @@ async function ensureTargetsRegistered(projectDir) {
   const { resolveSkWorkspaceConfig: resolveSkWorkspaceConfig2 } = await import('../core/index.js');
   const config = resolveSkWorkspaceConfig2(projectDir);
   if (config.plugins && config.plugins.length > 0) {
-    const { ensurePluginsLoaded } = await import('../plugin-store-EIMVEH3O.js');
+    const { ensurePluginsLoaded } = await import('../plugin-store-S7OMGI7N.js');
     const result = await ensurePluginsLoaded(projectDir, config.plugins, pluginRegistry);
     for (const f of result.failed) logWarn(f.error);
   }
@@ -2802,11 +2869,6 @@ function makeIntegrationCommand() {
   cmd.action(() => cmd.help());
   return cmd;
 }
-var NOT_WIRED_MSG_PUBLISH = "`skaile library publish` is scaffolded but not yet wired. Server endpoint `POST /sources/<id>/manifest` lands in a follow-up PR.";
-function notWired(verb, msg) {
-  logErr(`${msg} (verb: library ${verb})`);
-  process.exit(2);
-}
 function makeLibraryCommand() {
   const cmd = new Command("library").description("Manage user authoring libraries (local / git)");
   cmd.command("list").description("List all registered libraries").option("--json", "Output as JSON").action(async (opts) => {
@@ -3182,9 +3244,20 @@ function makeLibraryCommand() {
       close();
     }
   });
-  cmd.command("publish <ref>").description("Push + register manifest atomically (needs git backend)").action((_ref) => notWired("publish", NOT_WIRED_MSG_PUBLISH));
-  cmd.command("register <ref>").description("Register manifest in store without pushing (bytes already on github)").action((_ref) => notWired("register", NOT_WIRED_MSG_PUBLISH));
-  cmd.command("yank <ref>").description("Retract a catalog entry").option("--version <v>", "Version to yank").action((_ref) => notWired("yank", NOT_WIRED_MSG_PUBLISH));
+  cmd.command("publish <lib>").description("Push + register the library's manifest atomically (needs git backend)").option("--asset <ref>", "Publish only the single asset matching this ref/name").option("--create-repo", "Provision + link a public github repo if the library has no remote").option("--ref <gitref>", "Git ref to ingest (default: the library branch or main)").option("--dry-run", "Print the plan; push nothing and call no store endpoint").action(
+    async (lib, opts) => {
+      const { runLibraryPublish } = await import('../library-publish-K5IBE44D.js');
+      await runLibraryPublish(lib, opts);
+    }
+  );
+  cmd.command("register <lib>").description("Register the library's manifest without pushing (bytes already on github)").option("--asset <ref>", "Publish only the single asset matching this ref/name").option("--ref <gitref>", "Git ref to ingest (default: the library branch or main)").option("--dry-run", "Print the plan; call no store endpoint").action(async (lib, opts) => {
+    const { runLibraryRegister } = await import('../library-publish-K5IBE44D.js');
+    await runLibraryRegister(lib, opts);
+  });
+  cmd.command("yank <lib>").description("Retract the library's published assets from the store").option("--asset <ref>", "Yank only the single asset matching this ref/name").action(async (lib, opts) => {
+    const { runLibraryYank } = await import('../library-publish-K5IBE44D.js');
+    await runLibraryYank(lib, opts);
+  });
   return cmd;
 }
 async function printPerLibraryStatus(name, asJson) {
@@ -3713,7 +3786,7 @@ async function previewSoftDepsUnderCursor() {
 }
 async function loadAssets() {
   softDepPreviewCache.clear();
-  const { gatherAssetFeeds } = await import('../asset-feeds-NG5TKB3V.js');
+  const { gatherAssetFeeds } = await import('../asset-feeds-T35ELX2O.js');
   const { entries, domains, notes } = await gatherAssetFeeds(am, am.projectDir);
   if (notes.length > 0) {
     state.message = notes.map((n) => `[${n.feed}] ${n.message}`).join(" \u2022 ");
@@ -3880,7 +3953,7 @@ function reconcileCollapsedSets(rows) {
 async function loadSourcesAndLibraries() {
   try {
     const [{ openLibraryManager: openLibraryManager2 }, { skaileHomeDir }, { getGlobalCacheDir: getGlobalCacheDir2 }] = await Promise.all([
-      import('../open-library-37PXN6MK.js'),
+      import('../open-library-4HMIDK3N.js'),
       import('../library/index.js'),
       import('../core/index.js')
     ]);
@@ -4749,8 +4822,8 @@ function makeManageCommand() {
 }
 function makeMcpServerCommand() {
   return new Command("mcp-server").description("Start skaile workspace MCP server (stdio transport)").option("--project-dir <path>", "Project directory (default: cwd)", process.cwd()).action(async (opts) => {
-    const path36 = await import('path');
-    const projectDir = path36.default.resolve(opts.projectDir);
+    const path37 = await import('path');
+    const projectDir = path37.default.resolve(opts.projectDir);
     const { LogStore, StdoutSink, registerLogStore } = await import('../core/logging.js');
     registerLogStore(
       new LogStore({
@@ -4966,7 +5039,7 @@ function action2(fn) {
   };
 }
 async function reconcileAndReport(projectDir, plugins) {
-  const { reconcilePlugins } = await import('../plugin-store-EIMVEH3O.js');
+  const { reconcilePlugins } = await import('../plugin-store-S7OMGI7N.js');
   if (plugins.length === 0) {
     logInfo("No plugins declared \u2014 nothing to reconcile.");
     return;
@@ -4982,7 +5055,7 @@ async function reconcileAndReport(projectDir, plugins) {
 async function runInstall2(spec, opts) {
   const projectDir = path14__default.resolve(opts.projectDir);
   const { WorkspaceYamlEditor: WorkspaceYamlEditor2 } = await import('../core/index.js');
-  const { specName } = await import('../plugin-store-EIMVEH3O.js');
+  const { specName } = await import('../plugin-store-S7OMGI7N.js');
   const yamlPath = path14__default.join(projectDir, "skaile.yaml");
   const editor = WorkspaceYamlEditor2.load(yamlPath);
   const replaced = editor.addPlugin(spec, specName);
@@ -4994,7 +5067,7 @@ async function runInstall2(spec, opts) {
 async function runRemove(name, opts) {
   const projectDir = path14__default.resolve(opts.projectDir);
   const { WorkspaceYamlEditor: WorkspaceYamlEditor2 } = await import('../core/index.js');
-  const { specName } = await import('../plugin-store-EIMVEH3O.js');
+  const { specName } = await import('../plugin-store-S7OMGI7N.js');
   const yamlPath = path14__default.join(projectDir, "skaile.yaml");
   const editor = WorkspaceYamlEditor2.load(yamlPath);
   const removed = editor.removePlugin(name, specName);
@@ -5022,7 +5095,7 @@ async function runList(opts) {
   const registry = createPluginRegistry();
   if (declared.length > 0) {
     try {
-      const { loadPlugins } = await import('../plugin-store-EIMVEH3O.js');
+      const { loadPlugins } = await import('../plugin-store-S7OMGI7N.js');
       const result = await loadPlugins(projectDir, declared, registry);
       for (const f of result.failed) logWarn(f.error);
     } catch (err) {
@@ -5219,7 +5292,7 @@ async function runRefInstall(ref, opts) {
   const spinner5 = p6.spinner();
   spinner5.start(`Installing ${ref}`);
   try {
-    const { openCatalogSource: openCatalogSource2, openLibrary: openLibrary2 } = await import('../open-library-37PXN6MK.js');
+    const { openCatalogSource: openCatalogSource2, openLibrary: openLibrary2 } = await import('../open-library-4HMIDK3N.js');
     const catalog = await openCatalogSource2({ projectDir: path14__default.resolve(opts.projectDir) });
     if (!supportsInstallManifest(catalog)) {
       throw new Error(
@@ -5234,6 +5307,9 @@ async function runRefInstall(ref, opts) {
       logInfo(`Path: ${S.dim(result.installPath)}`);
       logInfo(`Commit: ${S.dim(result.commitSha)}`);
       logInfo(`Files: ${S.dim(String(result.fileCount))}`);
+      logInfo(
+        S.dim(`Installed globally (see Path above) \u2014 use \`skaile add ${ref}\` to deploy into this project.`)
+      );
     } finally {
       library.close();
     }
@@ -5256,7 +5332,7 @@ async function runYamlInstall(opts) {
     return;
   }
   try {
-    const { ensureSourcesCloned } = await import('../ensure-sources-CHC7X7AJ.js');
+    const { ensureSourcesCloned } = await import('../ensure-sources-QDVFUIUP.js');
     const hydrate = ensureSourcesCloned(projectDir, { quiet: true });
     if (hydrate.cloned.length > 0) {
       logOk(`Cloned source(s): ${hydrate.cloned.join(", ")}`);
@@ -5412,8 +5488,6 @@ function makeCleanCommand() {
     }
   });
 }
-
-// cli/src/commands/preset-export.ts
 function buildPresetFromWorkspace(config, name, sources = []) {
   const items = [];
   for (const ref of config.dependencies ?? []) {
@@ -5465,6 +5539,10 @@ function neededSources(config, lock) {
   const inClosure = new Set(lock.sources.map((s) => normalizeRepoUrl(s.url)));
   return nonFactory.filter((s) => inClosure.has(normalizeRepoUrl(s.url)));
 }
+function sourcesWithSidecar(sources) {
+  const dir = getStoreManifestsDir();
+  return sources.filter((s) => existsSync(path14.join(dir, `${storeManifestSlug(s.url)}.yaml`))).map((s) => s.url);
+}
 function compact(obj) {
   const out = {};
   for (const [k, v] of Object.entries(obj)) {
@@ -5555,8 +5633,8 @@ function redactSecrets(preset, findings) {
   }
   return { preset: next, keys };
 }
-function placeholderKey(itemId, path36) {
-  return `${itemId}_${path36}`.replace(/[^a-zA-Z0-9]+/g, "_").replace(/^_+|_+$/g, "").toUpperCase();
+function placeholderKey(itemId, path37) {
+  return `${itemId}_${path37}`.replace(/[^a-zA-Z0-9]+/g, "_").replace(/^_+|_+$/g, "").toUpperCase();
 }
 function setAtPath(root, segments, value) {
   let node = root;
@@ -5632,7 +5710,15 @@ async function runPresetExport(name, opts) {
   }
   const strippedCreds = sources.filter((s) => urlHasCredentials(s.url)).length;
   if (strippedCreds > 0) {
-    logWarn(`Stripped credentials from ${strippedCreds} source URL(s) \u2014 resolved via git auth on apply.`);
+    logWarn(
+      `Stripped credentials from ${strippedCreds} source URL(s) \u2014 resolved via git auth on apply.`
+    );
+  }
+  const sidecarSources = sourcesWithSidecar(sources);
+  if (sidecarSources.length > 0) {
+    logWarn(
+      `${sidecarSources.length} captured source(s) rely on a MACHINE-LOCAL sidecar overlay (\`~/.skaile/store/manifests/*\`) \u2014 assets may not resolve on other machines or when this preset is shared, until the sidecar manifest is published: ${sidecarSources.join(", ")}`
+    );
   }
   let preset = buildPresetFromWorkspace(file.config, presetName, sources);
   if (preset.items.length === 0) {
@@ -5877,9 +5963,13 @@ function printApplySummary(summary, envVarsToSet) {
   ];
   for (const line of skipped) logWarn(`Skipped ${line}`);
   const unchanged = summary.unchangedConnectors.length + summary.unchangedMcp.length + summary.unchangedSources.length;
-  if (unchanged > 0) logInfo(`${unchanged} source/connector/mcp entry(ies) already matched \u2014 left as-is.`);
+  if (unchanged > 0)
+    logInfo(`${unchanged} source/connector/mcp entry(ies) already matched \u2014 left as-is.`);
   if (envVarsToSet.length > 0) {
-    logWarn(`Set these env vars before running: ${envVarsToSet.join(", ")}`);
+    logWarn(
+      `This preset references secrets by env var \u2014 provide them before running: ${envVarsToSet.join(", ")}`
+    );
+    logInfo("Add them to .env (gitignored) or export in your shell, e.g. export <VAR>=\u2026");
   }
 }
 async function runPresetInstall(projectDir) {
@@ -5948,6 +6038,7 @@ async function checkPresetPlaceholders(allPlaceholders) {
   const { validatePlaceholder } = await import('../library/index.js');
   const invalidEntries = [];
   for (const ph of allPlaceholders) {
+    if (ph.default === void 0) continue;
     const result = validatePlaceholder(ph, ph.default);
     if (!result.valid) {
       invalidEntries.push({ key: ph.key, errors: result.errors });
@@ -6073,6 +6164,21 @@ function makeRebuildCommand() {
     logInfo(`Written: ${result.manifestPath}`);
   });
 }
+
+// cli/src/driver-error.ts
+function friendlyDriverError(err) {
+  const e = err;
+  if (!e) return null;
+  const isSpawnEnoent = e.code === "ENOENT" && (e.syscall?.startsWith("spawn") === true || /^spawn .*ENOENT/.test(e.message ?? ""));
+  const isConfig = e.category === "config" || e.detail?.category === "config";
+  if (!isSpawnEnoent && !isConfig) return null;
+  const hint = e.hint ?? e.detail?.hint;
+  const base = hint ?? "The configured agent binary is not installed or not on your PATH.";
+  return `${base}
+Try a different backend with \`--driver claude-sdk\`.`;
+}
+
+// cli/src/commands/run.ts
 function makeFlowEventHandler() {
   const md = new MarkdownStreamer();
   const displayed = /* @__PURE__ */ new Set();
@@ -6158,14 +6264,24 @@ function makeRunCommand() {
         }
         process.exit(1);
       }
-      await runAgentChat({
-        projectDir,
-        driver: config.driver,
-        model: config.model,
-        provider: config.provider,
-        message: textPrompt,
-        skill: opts.skill
-      });
+      try {
+        await runAgentChat({
+          projectDir,
+          driver: config.driver,
+          model: config.model,
+          provider: config.provider,
+          message: textPrompt,
+          skill: opts.skill
+        });
+      } catch (err) {
+        const friendly = friendlyDriverError(err);
+        if (friendly) {
+          logErr(friendly);
+        } else {
+          logErr(err instanceof Error ? err.message : String(err));
+        }
+        process.exit(1);
+      }
       return;
     }
     let flow;
@@ -6184,17 +6300,23 @@ function makeRunCommand() {
     if (opts.label) console.log(`  ${S.label("Label:")}       ${opts.label}`);
     if (dryRun) console.log(`  ${S.warn("(dry run \u2014 no agent will be started)")}`);
     console.log();
-    await runFlow({
-      projectDir,
-      flowPath,
-      driver,
-      model,
-      provider,
-      sessionLabel: opts.label,
-      dryRun,
-      onEvent: makeFlowEventHandler(),
-      onLog: (line) => console.log(line)
-    });
+    try {
+      await runFlow({
+        projectDir,
+        flowPath,
+        driver,
+        model,
+        provider,
+        sessionLabel: opts.label,
+        dryRun,
+        onEvent: makeFlowEventHandler(),
+        onLog: (line) => console.log(line)
+      });
+    } catch (err) {
+      const friendly = friendlyDriverError(err);
+      logErr(friendly ?? (err instanceof Error ? err.message : String(err)));
+      process.exit(1);
+    }
   });
   return cmd;
 }
@@ -6336,12 +6458,12 @@ function makeServeCommand() {
   );
 }
 async function ensurePluginsLoadedForServe(projectDir) {
-  const { logInfo: logInfo2, logWarn: logWarn2 } = await import('../helpers-GWG4CYYC.js');
+  const { logInfo: logInfo2, logWarn: logWarn2 } = await import('../helpers-TF7GCBRQ.js');
   try {
     const { resolveSkWorkspaceConfig: resolveSkWorkspaceConfig2 } = await import('../core/index.js');
     const config = resolveSkWorkspaceConfig2(projectDir);
     if (!config.plugins || config.plugins.length === 0) return;
-    const { ensurePluginsLoaded } = await import('../plugin-store-EIMVEH3O.js');
+    const { ensurePluginsLoaded } = await import('../plugin-store-S7OMGI7N.js');
     const { pluginRegistry } = await import('../plugin-registry/index.js');
     const result = await ensurePluginsLoaded(projectDir, config.plugins, pluginRegistry);
     if (result.loaded.length > 0) {
@@ -6355,21 +6477,21 @@ async function ensurePluginsLoadedForServe(projectDir) {
   }
 }
 async function runCompileTest(opts) {
-  const { logOk: logOk2, logErr: logErr2, logInfo: logInfo2, S: S2 } = await import('../helpers-GWG4CYYC.js');
+  const { logOk: logOk2, logErr: logErr2, logInfo: logInfo2, S: S2 } = await import('../helpers-TF7GCBRQ.js');
   const { tmpdir } = await import('os');
-  const { dirname: dirname4, join: join5, resolve: resolve5 } = await import('path');
+  const { dirname: dirname4, join: join6, resolve: resolve5 } = await import('path');
   const { fileURLToPath: fileURLToPath2 } = await import('url');
-  const { unlinkSync, existsSync: existsSync13 } = await import('fs');
+  const { unlinkSync, existsSync: existsSync14 } = await import('fs');
   const { spawn } = await import('child_process');
   const { portableSpawnSync: portableSpawnSync2 } = await import('../core/index.js');
-  const { MONOREPO_ROOT } = await import('../paths-UVOHWUPY.js');
+  const { MONOREPO_ROOT } = await import('../paths-P3DWFUPS.js');
   if (MONOREPO_ROOT === null) {
     logErr2("--compile-test is only available inside the skaile-dev workspace.");
     logInfo2("Run it from a checkout of skaile-ai/skaile-dev (the monorepo shell).");
     process.exitCode = 2;
     return;
   }
-  const outfile = join5(tmpdir(), `skaile-compile-test-${Date.now()}`);
+  const outfile = join6(tmpdir(), `skaile-compile-test-${Date.now()}`);
   const __thisFile = fileURLToPath2(import.meta.url);
   const entryPoint = resolve5(dirname4(__thisFile), "..", "index.ts");
   logInfo2(`Building compiled binary...`);
@@ -6421,7 +6543,7 @@ async function runCompileTest(opts) {
     } catch {
     }
     try {
-      if (existsSync13(outfile)) unlinkSync(outfile);
+      if (existsSync14(outfile)) unlinkSync(outfile);
     } catch {
     }
   }
@@ -7175,96 +7297,37 @@ function makeShowCommand() {
     }
   });
 }
+async function fetchIdentity() {
+  const jwt = await getStoreToken();
+  return storeFetch({ ...getStoreConfig(), jwt }, "/api/v1/me");
+}
 function makeStoreCommand() {
   const store = new Command("store").description("Manage the AI Asset Store");
-  store.command("login").description("Authenticate with the store").option("--email <email>", "Login with email instead of GitHub").action(async (opts) => {
-    const config = getStoreConfig();
-    if (opts.email) {
-      const readline3 = await import('readline');
-      const rl = readline3.createInterface({ input: process.stdin, output: process.stdout });
-      const password = await new Promise((resolve5) => {
-        rl.question("Password: ", (answer) => {
-          rl.close();
-          resolve5(answer);
-        });
-      });
-      try {
-        const res = await storeFetch(
-          config,
-          "/api/auth/login",
-          { method: "POST", body: { email: opts.email, password } }
-        );
-        saveStoreTokens(res.jwt, res.refreshToken);
-        logOk(`Logged in as ${S.brand(`@${res.publisher.slug}`)}`);
-      } catch (e) {
-        logErr(e.message);
-        process.exit(1);
-      }
-    } else {
-      const loginUrl = `${config.url}/api/auth/login/github`;
-      console.log(`
-  Opening browser to authenticate...
-  ${S.dim(loginUrl)}
-`);
-      const http = await import('http');
-      const { URL: URL2 } = await import('url');
-      const server = http.createServer((req, res) => {
-        const url = new URL2(req.url ?? "/", "http://localhost");
-        const jwt = url.searchParams.get("token");
-        const refresh = url.searchParams.get("refresh");
-        if (jwt && refresh) {
-          saveStoreTokens(jwt, refresh);
-          res.writeHead(200, { "Content-Type": "text/html" });
-          res.end("<h2>Authenticated! You can close this tab.</h2>");
-          logOk("Authenticated with the store");
-          server.close();
-        } else {
-          res.writeHead(400);
-          res.end("Missing tokens");
-        }
-      });
-      server.listen(0, () => {
-        const port = server.address()?.port;
-        const open = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open";
-        import('child_process').then(({ exec }) => {
-          exec(`${open} "${loginUrl}"`);
-        });
-        console.log(`  ${S.dim(`Listening on http://localhost:${port} for callback...`)}`);
-      });
-      setTimeout(() => {
-        logErr("Login timed out");
-        server.close();
-        process.exit(1);
-      }, 12e4);
+  store.command("login").description("Sign in to the store (Keycloak device flow \u2014 approve in your browser)").action(async () => {
+    try {
+      await deviceLogin(loadStoreAuthConfig());
+      const me = await fetchIdentity().catch(() => ({}));
+      logOk(`Signed in${me.username ? ` as ${S.brand(`@${me.username}`)}` : "."}`);
+    } catch (e) {
+      logErr(e.message);
+      process.exit(1);
     }
   });
-  store.command("logout").description("Sign out of the store").action(async () => {
-    const config = getStoreConfig();
-    if (config.refreshToken) {
-      try {
-        await storeFetch(config, "/api/auth/logout", {
-          method: "POST",
-          body: { refreshToken: config.refreshToken }
-        });
-      } catch {
-      }
-    }
-    clearStoreTokens();
-    logOk("Logged out");
+  store.command("logout").description("Sign out of the store").action(() => {
+    logout(loadStoreAuthConfig());
+    logOk("Signed out.");
   });
   store.command("whoami").description("Show current store identity").action(async () => {
-    const config = getStoreConfig();
-    if (!isStoreAuthenticated(config)) {
-      logErr("Not authenticated. Run: skaile store login");
+    if (!hasStoredAuth(loadStoreAuthConfig())) {
+      logErr("Not signed in. Run: skaile store login");
       process.exit(1);
     }
     try {
-      const me = await storeFetch(config, "/api/auth/me");
+      const me = await fetchIdentity();
       console.log();
-      console.log(`  ${S.heading("Publisher")}  ${S.brand(`@${me.slug}`)}`);
-      console.log(`  ${S.label("Name")}       ${me.displayName}`);
-      console.log(`  ${S.label("Email")}      ${me.email}`);
-      console.log(`  ${S.label("Verified")}   ${me.verified ? S.ok("yes") : S.dim("no")}`);
+      console.log(`  ${S.heading("Publisher")}  ${S.brand(`@${me.username ?? "?"}`)}`);
+      if (me.githubLogin) console.log(`  ${S.label("GitHub")}     ${me.githubLogin}`);
+      if (me.roles?.length) console.log(`  ${S.label("Roles")}      ${me.roles.join(", ")}`);
       console.log();
     } catch (e) {
       logErr(e.message);
@@ -7302,9 +7365,8 @@ function makeStoreCommand() {
     process.exit(2);
   });
   store.command("yank <version>").description("Yank (soft-delete) a published version").option("--asset <ref>", "Asset reference (@publisher/slug)").action(async (version, opts) => {
-    const config = getStoreConfig();
-    if (!isStoreAuthenticated(config)) {
-      logErr("Not authenticated. Run: skaile store login");
+    if (!isStoreAuthenticated()) {
+      logErr("Not signed in. Run: skaile store login");
       process.exit(1);
     }
     if (!opts.asset) {
@@ -7318,7 +7380,8 @@ function makeStoreCommand() {
       process.exit(1);
     }
     try {
-      await storeFetch(config, `/api/assets/${publisher}/${slug}/${version}/yank`, {
+      const jwt = await getStoreToken();
+      await storeFetch({ ...getStoreConfig(), jwt }, `/api/assets/${publisher}/${slug}/${version}/yank`, {
         method: "PATCH"
       });
       logOk(`Yanked v${version} of @${publisher}/${slug}`);
@@ -8191,29 +8254,29 @@ async function runInit(projectDir, opts) {
   const resolved = path14__default.resolve(projectDir ?? ".");
   const projectName = path14__default.basename(resolved);
   const created = [];
-  const { existsSync: existsSync13 } = await import('fs');
-  if (!existsSync13(resolved)) {
+  const { existsSync: existsSync14 } = await import('fs');
+  if (!existsSync14(resolved)) {
     mkdirSync5(resolved, { recursive: true });
     created.push(".");
   }
   const skaileDir = path14__default.join(resolved, ".skaile");
-  if (!existsSync13(skaileDir)) {
+  if (!existsSync14(skaileDir)) {
     mkdirSync5(path14__default.join(skaileDir, "sessions"), { recursive: true });
     created.push(".skaile/");
   }
   const settingsPath = path14__default.join(skaileDir, "settings.json");
-  if (!existsSync13(settingsPath)) {
+  if (!existsSync14(settingsPath)) {
     writeFileSync4(settingsPath, "{}\n");
     created.push(".skaile/settings.json");
   }
   const wsConfigPath = path14__default.join(resolved, "skaile.yaml");
-  if (!existsSync13(wsConfigPath)) {
+  if (!existsSync14(wsConfigPath)) {
     writeFileSync4(wsConfigPath, stringify2(buildInitWorkspaceConfig(projectName, backend)));
     created.push("skaile.yaml");
   }
   for (const dir of new Set(Object.values(DRIVER_TARGETS[backend].local))) {
     const full = path14__default.join(resolved, dir);
-    if (!existsSync13(full)) {
+    if (!existsSync14(full)) {
       mkdirSync5(full, { recursive: true });
       created.push(`${dir}/`);
     }
@@ -8244,7 +8307,7 @@ function buildInitWorkspaceConfig(projectName, backend) {
 }
 async function initGitScaffold(resolved, created) {
   const { execSync: execSync3 } = await import('child_process');
-  const { existsSync: existsSync13, readFileSync: readFileSync8, writeFileSync: writeFileSync4 } = await import('fs');
+  const { existsSync: existsSync14, readFileSync: readFileSync8, writeFileSync: writeFileSync4 } = await import('fs');
   const gitignorePath = path14__default.join(resolved, ".gitignore");
   const entries = [
     "node_modules/",
@@ -8260,7 +8323,7 @@ async function initGitScaffold(resolved, created) {
     ".env",
     ".env.local"
   ];
-  const existing = existsSync13(gitignorePath) ? readFileSync8(gitignorePath, "utf-8") : "";
+  const existing = existsSync14(gitignorePath) ? readFileSync8(gitignorePath, "utf-8") : "";
   const have = new Set(existing.split("\n").map((l) => l.trim()));
   const append = entries.filter((e) => !have.has(e));
   if (append.length > 0) {
@@ -8269,7 +8332,7 @@ async function initGitScaffold(resolved, created) {
 `);
     if (!existing) created.push(".gitignore");
   }
-  if (!existsSync13(path14__default.join(resolved, ".git"))) {
+  if (!existsSync14(path14__default.join(resolved, ".git"))) {
     try {
       execSync3("git init", { cwd: resolved, stdio: "pipe" });
       created.push(".git/");
@@ -8299,7 +8362,7 @@ async function bootstrapUserConfig() {
 }
 async function hydrateInitSources(resolved, created) {
   try {
-    const { ensureSourcesCloned } = await import('../ensure-sources-CHC7X7AJ.js');
+    const { ensureSourcesCloned } = await import('../ensure-sources-QDVFUIUP.js');
     const hydrate = ensureSourcesCloned(resolved, { quiet: true });
     for (const n of hydrate.cloned) created.push(`~/.skaile/cache/sources/${n}/`);
     if (hydrate.failed.length > 0) {
@@ -8332,10 +8395,14 @@ function printInitSummary(resolved, projectDir, created) {
   console.log(
     `  ${S.dim(`${step}.`)} ${S.cmd("skaile search <query>")} ${S.dim("\u2014 find assets to add")}`
   );
+  step++;
+  console.log(
+    `  ${S.dim(`${step}.`)} ${S.cmd("skaile preset apply <file>")} ${S.dim("\u2014 apply a saved preset (assets + config) at once")}`
+  );
   console.log();
 }
 program.command("setup").description("Interactive provider setup wizard").action(async () => {
-  const { cmdSetup } = await import('../setup-DINVR6ZQ.js');
+  const { cmdSetup } = await import('../setup-2CCS63L6.js');
   await cmdSetup([], { projectDir: process.cwd() });
 });
 program.addCommand(makeInstallCommand());