@skaile/workspaces 1.4.0 → 1.6.0

package/dist/cli/src/commands/catalog.d.ts

@@ -3,7 +3,25 @@
  * All delegate to @skaile/workspaces/asset-manager's AssetManager class.
  */
 import { AssetManager } from "@skaile/workspaces/asset-manager";
+import { type CatalogEntry } from "@skaile/workspaces/core";
+import type { CatalogAsset } from "@skaile/workspaces/plugins";
 import { Command } from "commander";
+/**
+ * Copyable install ref for a store catalog asset — `kind:@<publisher>/<name>#<version>`,
+ * the exact shape `skaile add` accepts.
+ */
+export declare function catalogAssetRef(a: CatalogAsset): string;
+/**
+ * Copyable ref for a local index entry. Uses `kind:@<publisher>/<name>` when a
+ * publisher is known; local assets without one fall back to the bare name.
+ */
+export declare function localEntryRef(e: Pick<CatalogEntry, "kind" | "name" | "publisher">): string;
+/**
+ * Client-side text filter over catalog assets — the store's `listAssets` has no
+ * server-side query. Case-insensitive match across name, description, publisher;
+ * an empty query returns every asset.
+ */
+export declare function filterCatalogAssets(assets: CatalogAsset[], query: string | undefined): CatalogAsset[];
 /**
  * Create the `skaile search` command.
  *

package/dist/cli/src/commands/catalog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../../../cli/src/commands/catalog.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,EACL,YAAY,EAMb,MAAM,kCAAkC,CAAC;AAO1C,OAAO,EAAE,OAAO,EAAU,MAAM,WAAW,CAAC;AAqK5C;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CAW3C;AAwBD;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CACrC,EAAE,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,GAAG,KAAK,CAAC,EAChD,GAAG,EAAE,MAAM,EACX,EAAE,EAAE;IACF,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,4EAA4E;IAC5E,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,8EAA8E;IAC9E,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,CAAC;IACxD,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;IACtC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC,GACA,OAAO,CAAC,IAAI,CAAC,CAuCf;AAED;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,IAAI,CAAC,YAAY,EAAE,+BAA+B,GAAG,QAAQ,CAAC,EAClE,GAAG,EAAE,MAAM,EACX,EAAE,EAAE;IACF,KAAK,EAAE,OAAO,CAAC;IACf,4EAA4E;IAC5E,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,CAAC;IACxD,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;IACtC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC,GACA,OAAO,CAAC,IAAI,CAAC,CAsBf;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,IAAI,OAAO,CAmExC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CAsC3C;AAUD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,eAAe,IAAI,OAAO,CAkEzC;AA0DD;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,IAAI,OAAO,CAsCzC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CAkB3C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CA2B3C"}
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../../../cli/src/commands/catalog.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,EACL,YAAY,EAMb,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAEL,KAAK,YAAY,EAKlB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAU,MAAM,WAAW,CAAC;AAe5C;;;GAGG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,YAAY,GAAG,MAAM,CAEvD;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,WAAW,CAAC,GAAG,MAAM,CAE1F;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,YAAY,EAAE,EACtB,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,YAAY,EAAE,CAShB;AA0PD;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CAW3C;AAwBD;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CACrC,EAAE,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,GAAG,KAAK,CAAC,EAChD,GAAG,EAAE,MAAM,EACX,EAAE,EAAE;IACF,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,4EAA4E;IAC5E,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,8EAA8E;IAC9E,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,CAAC;IACxD,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;IACtC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC,GACA,OAAO,CAAC,IAAI,CAAC,CAuCf;AAED;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,IAAI,CAAC,YAAY,EAAE,+BAA+B,GAAG,QAAQ,CAAC,EAClE,GAAG,EAAE,MAAM,EACX,EAAE,EAAE;IACF,KAAK,EAAE,OAAO,CAAC;IACf,4EAA4E;IAC5E,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,CAAC;IACxD,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;IACtC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC,GACA,OAAO,CAAC,IAAI,CAAC,CAsBf;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,IAAI,OAAO,CAmExC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CAsC3C;AAUD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,eAAe,IAAI,OAAO,CAkEzC;AA0DD;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,IAAI,OAAO,CAsCzC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CAkB3C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CA2B3C"}

package/dist/cli/src/commands/library-cmd.d.ts

@@ -4,8 +4,8 @@
  *
  * Lifecycle subcommands: list, status, show, init, link, create, default,
  * rename, set, remove. Git verbs (commit, pull, push, propose, git, sync)
- * apply to git-backed libraries. Publish/register/yank are scaffolded stubs
- * that will land when the store publish endpoint is finalised.
+ * apply to git-backed libraries. Publish/register/yank (in `library-publish.ts`)
+ * push + register the library repo and publish its manifest to the store.
  *
  * @docLink cli/commands/library
  */

package/dist/cli/src/commands/library-cmd.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"library-cmd.d.ts","sourceRoot":"","sources":["../../../../cli/src/commands/library-cmd.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AASH,OAAO,EAAE,OAAO,EAAU,MAAM,WAAW,CAAC;AAgB5C,wBAAgB,kBAAkB,IAAI,OAAO,CAgiB5C"}
+{"version":3,"file":"library-cmd.d.ts","sourceRoot":"","sources":["../../../../cli/src/commands/library-cmd.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AASH,OAAO,EAAE,OAAO,EAAU,MAAM,WAAW,CAAC;AAO5C,wBAAgB,kBAAkB,IAAI,OAAO,CAqjB5C"}

package/dist/cli/src/commands/library-publish.d.ts

@@ -0,0 +1,53 @@
+/**
+ * `skaile library publish / register / yank` — the first-party publish flow.
+ * A git-backed library you own carries an in-repo `skaile.manifest.yaml`; this
+ * commits + pushes the library repo (publish), or takes the current remote HEAD
+ * as-is (register), then registers + syncs it as a store source and publishes
+ * the manifest's assets under the manifest's own `publisher` (no namespace
+ * remap — first-party authors intend their declared namespace).
+ *
+ *   - `publish`  = commit (if dirty) + push + register + sync + publish.
+ *   - `register` = same, but skip the commit/push (bytes already on GitHub).
+ *   - `yank`     = unpublish the library's published assets (all, or one).
+ *
+ * The store REST surface is reached through the injectable {@link PublisherClient}
+ * (default HTTP); git side-effects go through an injectable `spawn`. Both seams
+ * keep the flow unit/integration-testable without a live store or a real remote.
+ *
+ * @docLink cli/commands/library
+ */
+import { spawnSync } from "node:child_process";
+import { type PublisherClient } from "../store-publisher.ts";
+/** Injectable spawn contract — the subset of `spawnSync` these helpers use. */
+type SpawnLike = typeof spawnSync;
+/**
+ * `skaile library publish <lib>` — commit + push the library repo, register +
+ * sync it as a store source, and publish its manifest's assets under the
+ * manifest publisher. See the module header for the full flow.
+ */
+export declare function runLibraryPublish(name: string, opts: {
+    asset?: string;
+    createRepo?: boolean;
+    ref?: string;
+    dryRun?: boolean;
+}, client?: PublisherClient, spawn?: SpawnLike): Promise<void>;
+/**
+ * `skaile library register <lib>` — same as publish but skips the commit/push
+ * (the bytes are already on GitHub at the current remote HEAD). Still requires a
+ * git-backed remote.
+ */
+export declare function runLibraryRegister(name: string, opts: {
+    asset?: string;
+    ref?: string;
+    dryRun?: boolean;
+}, client?: PublisherClient, spawn?: SpawnLike): Promise<void>;
+/**
+ * `skaile library yank <lib>` — unpublish the library's published assets from
+ * the store (all, or the single asset matching `opts.asset`'s name).
+ * Auth-gated like publish.
+ */
+export declare function runLibraryYank(name: string, opts: {
+    asset?: string;
+}, client?: PublisherClient): Promise<void>;
+export {};
+//# sourceMappingURL=library-publish.d.ts.map

package/dist/cli/src/commands/library-publish.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"library-publish.d.ts","sourceRoot":"","sources":["../../../../cli/src/commands/library-publish.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAQ/C,OAAO,EAA2B,KAAK,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAGtF,+EAA+E;AAC/E,KAAK,SAAS,GAAG,OAAO,SAAS,CAAC;AA6OlC;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,EAC9E,MAAM,CAAC,EAAE,eAAe,EACxB,KAAK,GAAE,SAAqB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAEf;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,EACxD,MAAM,CAAC,EAAE,eAAe,EACxB,KAAK,GAAE,SAAqB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAEf;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,EACxB,MAAM,CAAC,EAAE,eAAe,GACvB,OAAO,CAAC,IAAI,CAAC,CAkDf"}

package/dist/cli/src/commands/preset-cmd.d.ts

@@ -4,6 +4,7 @@
  * Subcommands: init, validate, export, apply.
  * Delegates to @skaile/library preset module for parsing and validation.
  */
+import { type Placeholder } from "@skaile/workspaces/types/manifests";
 import { Command } from "commander";
 /**
  * Creates the `skaile preset` command group.
@@ -16,4 +17,9 @@ import { Command } from "commander";
  * @docLink cli/commands/misc#preset
  */
 export declare function makePresetCommand(): Command;
+/**
+ * Validate per-item placeholder structure (dry-run with no input values).
+ * Returns true when any placeholder issues were surfaced as warnings.
+ */
+export declare function checkPresetPlaceholders(allPlaceholders: Placeholder[]): Promise<boolean>;
 //# sourceMappingURL=preset-cmd.d.ts.map

package/dist/cli/src/commands/preset-cmd.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"preset-cmd.d.ts","sourceRoot":"","sources":["../../../../cli/src/commands/preset-cmd.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAkBH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAoBpC;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CA0E3C"}
+{"version":3,"file":"preset-cmd.d.ts","sourceRoot":"","sources":["../../../../cli/src/commands/preset-cmd.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAaH,OAAO,EACL,KAAK,WAAW,EAGjB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAqBpC;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CA0E3C;AAwhBD;;;GAGG;AACH,wBAAsB,uBAAuB,CAAC,eAAe,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAqB9F"}

package/dist/cli/src/commands/preset-export.d.ts

@@ -7,7 +7,7 @@
  * unit-tested in isolation; the Commander action in `preset-cmd.ts` owns file
  * reads/writes, the loud stderr summary, and interactive confirmation.
  */
-import type { LockFile, SkWorkspaceConfig, SourceEntry } from "@skaile/workspaces/core";
+import { type LockFile, type SkWorkspaceConfig, type SourceEntry } from "@skaile/workspaces/core";
 import type { PresetManifest } from "@skaile/workspaces/types/manifests";
 /** One inline-secret hit: which item, where in its config, and a safe preview. */
 export interface SecretFinding {
@@ -45,6 +45,15 @@ export declare function buildPresetFromWorkspace(config: SkWorkspaceConfig, name
  * is kept so apply still resolves. Connectors/mcp carry no source.
  */
 export declare function neededSources(config: SkWorkspaceConfig, lock: LockFile | null): SourceEntry[];
+/**
+ * Of the captured `neededSources`, the ones whose assets resolve through a
+ * MACHINE-LOCAL curated store manifest (`~/.skaile/store/manifests/<slug>.yaml`,
+ * written by `source manifest init`). Those overlays are not shared with the
+ * preset, so a recipient on another machine won't reproduce the same resolution
+ * until the sidecar is itself published. Returns the affected source URLs (empty
+ * when none carry a sidecar).
+ */
+export declare function sourcesWithSidecar(sources: SourceEntry[]): string[];
 /**
  * True when `value` is a secret *reference* (indirection) rather than an inline
  * secret — e.g. `env:DATABASE_URL`, `forge:api-key`, `pat:env:GH_TOKEN`. Such

package/dist/cli/src/commands/preset-export.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"preset-export.d.ts","sourceRoot":"","sources":["../../../../cli/src/commands/preset-export.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,QAAQ,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACxF,OAAO,KAAK,EAA2B,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAElG,kFAAkF;AAClF,MAAM,WAAW,aAAa;IAC5B,4DAA4D;IAC5D,MAAM,EAAE,MAAM,CAAC;IACf,+EAA+E;IAC/E,IAAI,EAAE,MAAM,CAAC;IACb,yEAAyE;IACzE,WAAW,EAAE,MAAM,CAAC;CACrB;AAID;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,iBAAiB,EACzB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,WAAW,EAAO,GAC1B,cAAc,CAoDhB;AAID;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,iBAAiB,EAAE,IAAI,EAAE,QAAQ,GAAG,IAAI,GAAG,WAAW,EAAE,CAM7F;AAmBD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAExD;AAkBD,wFAAwF;AACxF,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEtD;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEvD;AAiBD;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,cAAc,GAAG,aAAa,EAAE,CASzE;AAwDD;;;;;;GAMG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,cAAc,EACtB,QAAQ,EAAE,aAAa,EAAE,GACxB;IAAE,MAAM,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CA+B5C;AAwBD,iFAAiF;AACjF,eAAO,MAAM,qBAAqB,yGACuD,CAAC;AAE1F;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,aAAa,EAAE,GAAG,MAAM,GAAG,IAAI,CAE5E"}
+{"version":3,"file":"preset-export.d.ts","sourceRoot":"","sources":["../../../../cli/src/commands/preset-export.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,OAAO,EACL,KAAK,QAAQ,EACb,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAEjB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,KAAK,EAA2B,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAElG,kFAAkF;AAClF,MAAM,WAAW,aAAa;IAC5B,4DAA4D;IAC5D,MAAM,EAAE,MAAM,CAAC;IACf,+EAA+E;IAC/E,IAAI,EAAE,MAAM,CAAC;IACb,yEAAyE;IACzE,WAAW,EAAE,MAAM,CAAC;CACrB;AAID;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,iBAAiB,EACzB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,WAAW,EAAO,GAC1B,cAAc,CAoDhB;AAID;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,iBAAiB,EAAE,IAAI,EAAE,QAAQ,GAAG,IAAI,GAAG,WAAW,EAAE,CAM7F;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,MAAM,EAAE,CAKnE;AAmBD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAExD;AAkBD,wFAAwF;AACxF,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEtD;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEvD;AAiBD;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,cAAc,GAAG,aAAa,EAAE,CASzE;AAwDD;;;;;;GAMG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,cAAc,EACtB,QAAQ,EAAE,aAAa,EAAE,GACxB;IAAE,MAAM,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CA+B5C;AAwBD,iFAAiF;AACjF,eAAO,MAAM,qBAAqB,yGACuD,CAAC;AAE1F;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,aAAa,EAAE,GAAG,MAAM,GAAG,IAAI,CAE5E"}

package/dist/cli/src/commands/project.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"project.d.ts","sourceRoot":"","sources":["../../../../cli/src/commands/project.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAOhE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAqBpC;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;CAC3D;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,IAAI,qBAAqB,CAKxF;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACtE;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,8DAA8D;IAC9D,WAAW,EAAE,MAAM,CAAC;IACpB,+DAA+D;IAC/D,SAAS,EAAE,MAAM,CAAC;IAClB,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,OAAO,EAAE,qBAAqB,CAAC;IAAC,OAAO,EAAE,cAAc,CAAA;CAAE,GAChE,OAAO,CAAC,wBAAwB,CAAC,CA8BnC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,kBAAkB,IAAI,OAAO,CAoB5C;AAkKD;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAC3C,EAAE,EAAE,IAAI,CAAC,YAAY,EAAE,cAAc,GAAG,gBAAgB,CAAC,EACzD,MAAM,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAA+B,GACxD,OAAO,CAAC,IAAI,CAAC,CASf;AA6CD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,IAAI,OAAO,CAkB1C;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,IAAI,OAAO,CAwE1C"}
+{"version":3,"file":"project.d.ts","sourceRoot":"","sources":["../../../../cli/src/commands/project.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAOhE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAqBpC;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;CAC3D;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,IAAI,qBAAqB,CAKxF;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACtE;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,8DAA8D;IAC9D,WAAW,EAAE,MAAM,CAAC;IACpB,+DAA+D;IAC/D,SAAS,EAAE,MAAM,CAAC;IAClB,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,OAAO,EAAE,qBAAqB,CAAC;IAAC,OAAO,EAAE,cAAc,CAAA;CAAE,GAChE,OAAO,CAAC,wBAAwB,CAAC,CA8BnC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,kBAAkB,IAAI,OAAO,CAoB5C;AAqKD;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAC3C,EAAE,EAAE,IAAI,CAAC,YAAY,EAAE,cAAc,GAAG,gBAAgB,CAAC,EACzD,MAAM,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAA+B,GACxD,OAAO,CAAC,IAAI,CAAC,CASf;AA6CD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,IAAI,OAAO,CAkB1C;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,IAAI,OAAO,CAwE1C"}

package/dist/cli/src/commands/publish-core.d.ts

@@ -0,0 +1,75 @@
+/**
+ * Shared store-interaction core for the two publish front-ends — the curator
+ * sidecar flow (`source manifest publish`) and the first-party library flow
+ * (`library publish`). Both differ only in their git side-effects + how they
+ * resolve the source repo; the store orchestration below (register → sync →
+ * candidates → per-asset preview+publish) is identical.
+ *
+ * The store REST surface is reached through the injectable {@link PublisherClient}
+ * so the orchestration stays unit/integration-testable without a live store.
+ *
+ * @docLink cli/commands/source#manifest-publish
+ */
+import type { SkPublishManifest } from "@skaile/workspaces/core";
+import type { PublisherClient } from "../store-publisher.ts";
+/** One candidate row shape the matcher operates on (kind + name are the key). */
+interface CandidateLike {
+    kind: string;
+    name: string;
+}
+/**
+ * Keep only candidates whose `(kind, name)` pair is declared in the manifest.
+ * The backend may merge extra assets from the base repo into the candidate
+ * list; a publish only touches what the manifest curated/declared.
+ */
+export declare function matchCandidatesToManifest<T extends CandidateLike>(candidates: T[], manifest: SkPublishManifest): T[];
+/** A canonical ref string `kind:@publisher/name[#version]` for reporting. */
+export declare function refFor(kind: string, publisher: string, name: string, version?: string): string;
+/** The bare asset name from a `kind:@publisher/name#version` ref or a plain name. */
+export declare function bareName(ref: string): string;
+/**
+ * Poll a job until it leaves `running` or the deadline passes. Returns the last
+ * observed state — the caller MUST treat a still-`running` result as a timeout
+ * (not success), since it means the deadline was hit before the job finished.
+ */
+export declare function pollJob(client: PublisherClient, jobId: string, intervalMs?: number, timeoutMs?: number): Promise<{
+    status: string;
+    items?: Array<{
+        label: string;
+        status: string;
+        error?: string;
+    }>;
+}>;
+/**
+ * True when a `sourcesAdd` rejection is a duplicate-URL conflict (the source is
+ * already registered) — the only error the publish flow recovers from by looking
+ * the existing row up. Every other failure (auth, 5xx, network) must propagate.
+ */
+export declare function isDupSourceError(err: unknown): boolean;
+/**
+ * Register + sync the source, then publish its curated/declared candidates —
+ * the store-side steps shared by both publish front-ends. Git side-effects (the
+ * sidecar push, or the library commit+push) happen in the caller *before* this;
+ * this function is purely store interaction.
+ *
+ * The sidecar front-end passes `sidecar` (so `sourcesAdd` carries the sidecar
+ * pin); the library front-end omits it (the source repo IS the manifest host).
+ * `assetName`, when set, narrows publication to the single candidate of that
+ * name. Fatal store states (`sourcesAdd` non-dup failure) surface; sync failures
+ * and empty candidate sets `process.exit(1)` with the same messages as before.
+ */
+export declare function publishToStore(opts: {
+    sourceUrl: string;
+    ref: string;
+    sidecar?: {
+        url: string;
+        ref: string;
+    };
+    manifest: SkPublishManifest;
+    assetName?: string;
+    client: PublisherClient;
+}): Promise<{
+    published: string[];
+}>;
+export {};
+//# sourceMappingURL=publish-core.d.ts.map

package/dist/cli/src/commands/publish-core.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish-core.d.ts","sourceRoot":"","sources":["../../../../cli/src/commands/publish-core.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D,iFAAiF;AACjF,UAAU,aAAa;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,CAAC,SAAS,aAAa,EAC/D,UAAU,EAAE,CAAC,EAAE,EACf,QAAQ,EAAE,iBAAiB,GAC1B,CAAC,EAAE,CAGL;AAED,6EAA6E;AAC7E,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAG9F;AAED,qFAAqF;AACrF,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAI5C;AAED;;;;GAIG;AACH,wBAAsB,OAAO,CAC3B,MAAM,EAAE,eAAe,EACvB,KAAK,EAAE,MAAM,EACb,UAAU,SAAQ,EAClB,SAAS,SAAS,GACjB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CAAC,CAQ/F;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAGtD;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IACvC,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,eAAe,CAAC;CACzB,GAAG,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAgFnC"}

package/dist/cli/src/commands/run.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../../../cli/src/commands/run.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAgDpC;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,IAAI,OAAO,CAyHxC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CAqC3C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CAoC3C;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,IAAI,OAAO,CAS1C;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,eAAe,IAAI,OAAO,CAyEzC"}
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../../../cli/src/commands/run.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAiDpC;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,IAAI,OAAO,CAyIxC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CAqC3C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CAoC3C;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,IAAI,OAAO,CAS1C;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,eAAe,IAAI,OAAO,CAyEzC"}

package/dist/cli/src/commands/source-manifest-publish.d.ts

@@ -0,0 +1,82 @@
+/**
+ * `skaile source manifest publish` / `yank` — the curator-publish flow. Takes a
+ * locally-curated sidecar manifest (over a foreign public GitHub repo) and:
+ *
+ *   1. Pushes the curated `skaile.manifest.yaml` to the curator's OWN public
+ *      "sidecar" repo (bytes stay in the foreign source; the sidecar holds only
+ *      the manifest pointing at it).
+ *   2. Registers the foreign source + the sidecar (url + pinned commit) with the
+ *      store, syncs it, and publishes each curated asset.
+ *
+ * `yank` is the inverse: unpublish each currently-published asset of the source.
+ *
+ * The store REST surface is reached through the injectable {@link PublisherClient}
+ * (default HTTP client); git side-effects go through an injectable `spawn`. Both
+ * seams keep the pure helpers + orchestration unit/integration-testable without a
+ * live store or a real remote.
+ *
+ * @docLink cli/commands/source#manifest-publish
+ */
+import { spawnSync } from "node:child_process";
+import { type SkPublishManifest } from "@skaile/workspaces/core";
+import { type PublisherClient } from "../store-publisher.ts";
+/** Injectable spawn contract — the subset of `spawnSync` these helpers use. */
+type SpawnLike = typeof spawnSync;
+/**
+ * Return a copy of `manifest` normalized for publication under `namespace`:
+ * the top-level `publisher` is set to `namespace` and every per-asset
+ * `publisher` override is removed so all assets inherit the top-level one.
+ * Pure — the input is not mutated.
+ */
+export declare function normalizePublishedManifest(manifest: SkPublishManifest, namespace: string): SkPublishManifest;
+/**
+ * The sidecar repo URL previously associated with a source `slug`, if any.
+ * Reads `settings.sidecarRepos?.[slug]?.repo`.
+ */
+export declare function getSidecarRepo(slug: string): string | undefined;
+/**
+ * Persist the sidecar repo URL for a source `slug`, preserving every other
+ * settings key. Stored as an object (`{ repo }`) so a `path` (or other fields)
+ * can be added later without a schema migration.
+ */
+export declare function saveSidecarRepo(slug: string, repo: string): void;
+/**
+ * Clone the curator's sidecar repo, write the curated manifest at its root, and
+ * commit + push. Returns the pushed commit sha (used to pin the store source).
+ *
+ * Idempotent re-publish: when the manifest is unchanged `git commit` fails with
+ * "nothing to commit" — we swallow that and return the current HEAD so a no-op
+ * re-run still yields a valid pin. Any push/auth failure surfaces as a thrown
+ * Error carrying git's stderr.
+ */
+export declare function pushSidecarManifest(opts: {
+    sidecarRepoUrl: string;
+    manifestText: string;
+    spawn?: SpawnLike;
+}): {
+    commitSha: string;
+};
+/**
+ * `source manifest publish <src>` — publish a curated sidecar manifest to the
+ * store. See the module header for the full flow. Store calls go through
+ * `client` (default HTTP); git side-effects through `spawn` (default
+ * `spawnSync`). The auth gate is enforced only for the default HTTP client so
+ * injected fakes bypass it.
+ */
+export declare function runPublish(arg: string, opts: {
+    projectDir: string;
+    as?: string;
+    sidecarRepo?: string;
+    ref?: string;
+    dryRun?: boolean;
+}, client?: PublisherClient, spawn?: SpawnLike): Promise<void>;
+/**
+ * `source manifest yank <src>` — unpublish the source's published assets (all,
+ * or the single asset matching `opts.asset`'s name). Auth-gated like publish.
+ */
+export declare function runYank(arg: string, opts: {
+    projectDir: string;
+    asset?: string;
+}, client?: PublisherClient): Promise<void>;
+export {};
+//# sourceMappingURL=source-manifest-publish.d.ts.map

package/dist/cli/src/commands/source-manifest-publish.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-manifest-publish.d.ts","sourceRoot":"","sources":["../../../../cli/src/commands/source-manifest-publish.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAI/C,OAAO,EAGL,KAAK,iBAAiB,EAEvB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAA2B,KAAK,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAStF,+EAA+E;AAC/E,KAAK,SAAS,GAAG,OAAO,SAAS,CAAC;AAElC;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,iBAAiB,EAC3B,SAAS,EAAE,MAAM,GAChB,iBAAiB,CAMnB;AA0BD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAG/D;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAQhE;AAiBD;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB,GAAG;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,CAyDxB;AAID;;;;;;GAMG;AACH,wBAAsB,UAAU,CAC9B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IACJ,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,EACD,MAAM,CAAC,EAAE,eAAe,EACxB,KAAK,GAAE,SAAqB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAwFf;AAED;;;GAGG;AACH,wBAAsB,OAAO,CAC3B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,EAC5C,MAAM,CAAC,EAAE,eAAe,GACvB,OAAO,CAAC,IAAI,CAAC,CA0Cf"}

package/dist/cli/src/commands/source-manifest.d.ts

@@ -1,19 +1,78 @@
 /**
- * `skaile source manifest …` — sidecar manifest lifecycle, refactored under
- * the `source` noun (was `source sidecar …`).
+ * `skaile source manifest …` — curated `skaile.manifest.yaml` lifecycle for a
+ * source you do NOT own. `init` generates a curated manifest from a discovery
+ * run and stores it OUTSIDE the source, under the local store catalog
+ * (`~/.skaile/store/manifests/<slug>.yaml`); `edit` opens it in `$EDITOR` and
+ * re-validates on save. `source add`/`sync` then apply it as a read overlay
+ * (see `source.ts` `refreshManifestCache`).
  *
- * The verbs are stubs for now — the real wiring lands when the publish path
- * through `POST /sources/<id>/manifest` is finalised on the store backend.
- * Each subcommand exits with code 2 plus a clear "not yet wired" hint so
- * smoke tests can verify the surface without depending on the server.
+ * `rebuild` refreshes a curated manifest after an upstream change (merge by
+ * default — curation is sacred; `--overwrite` re-scans). `verify` is a
+ * read-only integrity check (paths, declared hashes, schema, dep refs).
+ * `publish`/`propose`/`yank` remain stubs — they need the store publish
+ * endpoint (`POST /sources/<id>/manifest`), which lands in a follow-up.
  *
  * @docLink cli/commands/source#manifest
  */
 import type { Command } from "commander";
+/**
+ * Resolve a `source manifest` argument into a `{ url, slug, dest }` triple.
+ *
+ * Resolution order:
+ *   1. A key matching an already-registered project source (stored URL, cache
+ *      key, or short slug).
+ *   2. A collision-free **store slug** (`<host>__<owner>__<repo>`) whose
+ *      manifest already exists at `~/.skaile/store/manifests/<arg>.yaml`. This
+ *      MUST be tried before bare-name expansion: a bare name like `cli` would
+ *      otherwise expand (via `normalizeSourceUrl`) to the skaile-ai org and a
+ *      DIFFERENT slug than the one `init` wrote (e.g. `larksuite`). The slug is
+ *      the exact identifier `init`'s next-step hint prints back.
+ *   3. Otherwise a git URL / `owner/repo` / bare name via `normalizeSourceUrl`.
+ *
+ * The clone dir is the same URL-keyed cache `source add` uses.
+ */
+export declare function resolveSourceArg(arg: string, projectDir: string): {
+    url: string;
+    slug: string;
+    dest: string;
+    manifestFile: string;
+};
+/**
+ * Split a `$VISUAL`/`$EDITOR` value into `{ command, args }` and append the file
+ * as the final arg. The env value is a full command line, not a bare binary —
+ * `EDITOR="code --wait"` must spawn `code` with `["--wait", <file>]`, and
+ * `EDITOR=code` (which returns before save) is the user's problem, not ours.
+ * A whitespace split covers the common editors (`code --wait`, `code -w`,
+ * `subl -w`, `vi`); paths with embedded spaces are not supported (rare for an
+ * editor binary and out of scope). Falls back to `vi` when unset/empty.
+ *
+ * @docLink cli/commands/source#manifest-edit
+ */
+export declare function resolveEditorCommand(editorEnv: string | undefined, target: string): {
+    command: string;
+    args: string[];
+};
+/** Minimal spawn contract runEdit needs — lets tests inject a fake. */
+type SpawnLike = (command: string, args: string[], opts: {
+    stdio: "inherit";
+}) => {
+    status: number | null;
+};
+/**
+ * `source manifest edit <src>` — open the curated store manifest in `$EDITOR`
+ * and re-validate on save. Warnings are surfaced but never hard-fail.
+ *
+ * `spawn` is injectable so tests can assert the argv without launching a real
+ * editor; production passes the default `spawnSync`.
+ */
+export declare function runEdit(arg: string, opts: {
+    projectDir: string;
+}, spawn?: SpawnLike): void;
 /**
  * Append the `manifest` sub-tree to a `source` command.
  *
  * Called from `makeSourceCommand()` in `source.ts`.
  */
 export declare function addSourceManifestCommands(src: Command): void;
+export {};
 //# sourceMappingURL=source-manifest.d.ts.map

package/dist/cli/src/commands/source-manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"source-manifest.d.ts","sourceRoot":"","sources":["../../../../cli/src/commands/source-manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAYzC;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAwC5D"}
+{"version":3,"file":"source-manifest.d.ts","sourceRoot":"","sources":["../../../../cli/src/commands/source-manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAqBH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAoBzC;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,GACjB;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAWnE;AAyZD;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,MAAM,EAAE,MAAM,GACb;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAIrC;AAED,uEAAuE;AACvE,KAAK,SAAS,GAAG,CACf,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,EAAE;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,KACvB;IAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAE/B;;;;;;GAMG;AACH,wBAAgB,OAAO,CACrB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,EAC5B,KAAK,GAAE,SAA6C,GACnD,IAAI,CAgCN;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAqE5D"}

package/dist/cli/src/commands/source.d.ts

@@ -58,6 +58,19 @@ export declare function sourceMatchesKey(entry: SourceEntry, key: string): boole
  * (which `setSource` updates in place).
  */
 export declare function findCacheKeyCollision(sources: SourceEntry[], url: string): SourceEntry | undefined;
+export declare function readProjectSources(yamlPath: string): SourceEntry[];
+/**
+ * Clone the source if its clone directory does not yet exist. When `force` is
+ * set, the existing clone is replaced by a fresh checkout. Returns true when a
+ * clone happened. The cache slug is derived from the URL.
+ *
+ * A `--force` re-clone moves the old clone aside first and only deletes it once
+ * the fresh clone succeeds — so a failed re-clone restores the previous clone
+ * rather than leaving the source registered with no cache behind it.
+ */
+export declare function ensureClone(entry: SourceEntry, opts?: {
+    force?: boolean;
+}): boolean;
 /**
  * Auto-sync hook for `skaile search` on an unsynced workspace. Clones/pulls and
  * re-indexes every source declared in the project's `skaile.yaml`, then returns

package/dist/cli/src/commands/source.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"source.d.ts","sourceRoot":"","sources":["../../../../cli/src/commands/source.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,EAGL,KAAK,WAAW,EAKjB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAMpC;;;GAGG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEnD;AAKD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE;IAAE,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,OAAO,CAEzE;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAYvE;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOxD;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAIzE;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,WAAW,EAAE,EACtB,GAAG,EAAE,MAAM,GACV,WAAW,GAAG,SAAS,CAGzB;AA8FD;;;;;;;;;;GAUG;AACH,wBAAsB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAQ5E;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,kBAAkB,CACtC,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE;IAAE,GAAG,CAAC,EAAE,OAAO,CAAA;CAAO,GAC3B,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAsC5D;AAoBD,wBAAgB,iBAAiB,IAAI,OAAO,CAsR3C"}
+{"version":3,"file":"source.d.ts","sourceRoot":"","sources":["../../../../cli/src/commands/source.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,EAGL,KAAK,WAAW,EAMjB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAMpC;;;GAGG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEnD;AAKD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE;IAAE,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,OAAO,CAEzE;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAYvE;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOxD;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAIzE;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,WAAW,EAAE,EACtB,GAAG,EAAE,MAAM,GACV,WAAW,GAAG,SAAS,CAGzB;AAaD,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,EAAE,CAQlE;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAwBvF;AA+CD;;;;;;;;;;GAUG;AACH,wBAAsB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAQ5E;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,kBAAkB,CACtC,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE;IAAE,GAAG,CAAC,EAAE,OAAO,CAAA;CAAO,GAC3B,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAuC5D;AAoBD,wBAAgB,iBAAiB,IAAI,OAAO,CAwR3C"}

package/dist/cli/src/commands/store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../../../cli/src/commands/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAUpC;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,IAAI,OAAO,CAqO1C"}
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../../../cli/src/commands/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAoBpC;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,IAAI,OAAO,CAuJ1C"}

package/dist/cli/src/driver-error.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Turn a driver-start/prompt failure into a friendly, actionable message when the
+ * cause is a missing/unusable agent binary; otherwise return `null` so the caller
+ * surfaces the raw error unchanged.
+ *
+ * The bridge classifies these as `category: "config"` and carries a `hint`, but the
+ * shape reaching the CLI varies: omp's `start()` rejects with the raw spawn error
+ * (`code === "ENOENT"`), while the subprocess CLI drivers reject with the classified
+ * `AgentError` attached under `.detail`. Duck-type across all of them.
+ */
+export declare function friendlyDriverError(err: unknown): string | null;
+//# sourceMappingURL=driver-error.d.ts.map

package/dist/cli/src/driver-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"driver-error.d.ts","sourceRoot":"","sources":["../../../cli/src/driver-error.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAyB/D"}

package/dist/cli/src/open-library.d.ts

@@ -10,6 +10,10 @@
  * `https://skaile.store`) and a {@link LocalCatalogSource} bound to the most
  * recent local library registered via `skaile source add`.
  */
+/** Thrown by {@link openCatalogSource} when `catalog.url` is the `local` sentinel. */
+export declare class LocalCatalogDisabledError extends Error {
+    constructor(message: string);
+}
 /**
  * Open the LocalIndex with the full kind registry. Exits with code 1
  * if the library directory cannot be created.

package/dist/cli/src/open-library.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"open-library.d.ts","sourceRoot":"","sources":["../../../cli/src/open-library.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH;;;;;;GAMG;AACH,wBAAsB,WAAW,6DAQhC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,CAAC,EAAE;IAC7C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+CAA+C;IAC/C,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG,OAAO,CACP,OAAO,4BAA4B,EAAE,mBAAmB,GACxD,OAAO,4BAA4B,EAAE,iBAAiB,CACzD,CAqBA;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,qBAAqB;IACpC,gDAAgD;IAChD,MAAM,EAAE,OAAO,4BAA4B,EAAE,cAAc,CAAC;IAC5D,sEAAsE;IACtE,KAAK,IAAI,IAAI,CAAC;CACf;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,oBAAoB,CAAC,IAAI,CAAC,EAAE;IAChD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+CAA+C;IAC/C,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAmEjC;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC;IAClD,OAAO,EAAE,OAAO,4BAA4B,EAAE,cAAc,CAAC;IAC7D,OAAO,EAAE,OAAO,4BAA4B,EAAE,UAAU,CAAC;IACzD,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB,CAAC,CAKD"}
+{"version":3,"file":"open-library.d.ts","sourceRoot":"","sources":["../../../cli/src/open-library.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,sFAAsF;AACtF,qBAAa,yBAA0B,SAAQ,KAAK;gBACtC,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;;GAMG;AACH,wBAAsB,WAAW,6DAQhC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,CAAC,EAAE;IAC7C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+CAA+C;IAC/C,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG,OAAO,CACP,OAAO,4BAA4B,EAAE,mBAAmB,GACxD,OAAO,4BAA4B,EAAE,iBAAiB,CACzD,CAqBA;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,qBAAqB;IACpC,gDAAgD;IAChD,MAAM,EAAE,OAAO,4BAA4B,EAAE,cAAc,CAAC;IAC5D,sEAAsE;IACtE,KAAK,IAAI,IAAI,CAAC;CACf;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,oBAAoB,CAAC,IAAI,CAAC,EAAE;IAChD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+CAA+C;IAC/C,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAmEjC;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC;IAClD,OAAO,EAAE,OAAO,4BAA4B,EAAE,cAAc,CAAC;IAC7D,OAAO,EAAE,OAAO,4BAA4B,EAAE,UAAU,CAAC;IACzD,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB,CAAC,CAKD"}

package/dist/cli/src/store-auth.d.ts

@@ -0,0 +1,42 @@
+/** Resolved auth targets — every field has a prod default, all env-overridable. */
+export interface StoreAuthConfig {
+    keycloakUrl: string;
+    realm: string;
+    clientId: string;
+    authFile: string;
+}
+/**
+ * Load the auth config. Defaults target the production store
+ * (`auth.skaile.ai`, realm `skaile-store`, public client `skaile-store-cli`);
+ * override with `SKAILE_KEYCLOAK_URL` / `SKAILE_STORE_REALM` /
+ * `SKAILE_STORE_CLI_CLIENT` / `SKAILE_AUTH_FILE` for dev or a preview deploy.
+ */
+export declare function loadStoreAuthConfig(): StoreAuthConfig;
+export interface StoredAuth {
+    access_token: string;
+    refresh_token?: string;
+    /** Epoch ms when the access token expires (with a safety margin already applied). */
+    expires_at: number;
+}
+/** Injectable seams so the poll loop is unit-testable without real time or network. */
+export interface AuthDeps {
+    fetchImpl?: typeof fetch;
+    sleep?: (ms: number) => Promise<void>;
+    /** Called once with the verification URL + user code (default: write to stderr). */
+    onPrompt?: (url: string, userCode: string) => void;
+}
+/** Remove the cached session (sign out). */
+export declare function logout(config: StoreAuthConfig): void;
+/** True when a cached, well-formed session exists (validity/refresh resolved on use). */
+export declare function hasStoredAuth(config: StoreAuthConfig): boolean;
+/**
+ * Run the device flow to completion, persisting tokens on success. Prints the
+ * verification URL + user code for the operator to approve in a browser.
+ */
+export declare function deviceLogin(config: StoreAuthConfig, deps?: AuthDeps): Promise<StoredAuth>;
+/**
+ * Return a valid access token, refreshing if it is expired (or about to). Throws
+ * a clear "run `skaile store login`" error when there is no usable session.
+ */
+export declare function getAccessToken(config: StoreAuthConfig, deps?: AuthDeps): Promise<string>;
+//# sourceMappingURL=store-auth.d.ts.map

package/dist/cli/src/store-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store-auth.d.ts","sourceRoot":"","sources":["../../../cli/src/store-auth.ts"],"names":[],"mappings":"AAaA,mFAAmF;AACnF,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAMD;;;;;GAKG;AACH,wBAAgB,mBAAmB,IAAI,eAAe,CAQrD;AAQD,MAAM,WAAW,UAAU;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,qFAAqF;IACrF,UAAU,EAAE,MAAM,CAAC;CACpB;AAsBD,uFAAuF;AACvF,MAAM,WAAW,QAAQ;IACvB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,oFAAoF;IACpF,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;CACpD;AAmBD,4CAA4C;AAC5C,wBAAgB,MAAM,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAMpD;AAED,yFAAyF;AACzF,wBAAgB,aAAa,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAE9D;AAkBD;;;GAGG;AACH,wBAAsB,WAAW,CAAC,MAAM,EAAE,eAAe,EAAE,IAAI,GAAE,QAAa,GAAG,OAAO,CAAC,UAAU,CAAC,CAkDnG;AA0BD;;;GAGG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,eAAe,EACvB,IAAI,GAAE,QAAa,GAClB,OAAO,CAAC,MAAM,CAAC,CAWjB"}