@skaile/workspaces 3.27.1 → 4.1.0

package/CHANGELOG.md

@@ -1,5 +1,487 @@
 # Changelog
 
+## 4.1.0
+
+### Minor Changes
+
+- [#739](https://github.com/skaile-ai/workspaces/pull/739) [`390450b`](https://github.com/skaile-ai/workspaces/commit/390450b5432637dee051007faf1d20e7c3bc1b99) Thanks [@peteralbert](https://github.com/peteralbert)! - Pid liveness no longer counts a zombie as alive. The `local` and `nix` deploy targets (`health()`, `restore()`, `stop()`) and the devserver connector (`register`, status refresh) now use a shared `processAlive` from `@skaile/workspaces/core`, which on Linux also reads `/proc/<pid>/stat` and treats an exited-but-unreaped process as gone. A dead deploy or devserver process in a container without an init now reports unhealthy / crashed instead of healthy, and `restore()` refuses it. The devserver connector also rejects a pid <= 0 on `register`, which previously probed a process group.
+
+  `@skaile/workspaces/core` gains `processAlive`, `processGroupAlive` and `processExited`. `CodexAppServerClient.terminationConfirmed` now uses `processGroupAlive`, so a native process group left holding only unreaped zombies confirms termination instead of latching the managed driver's `cleanupUncertain`. An unreadable `/proc` entry (other than a vanished pid) never counts as gone.
+
+## 4.0.0
+
+### Major Changes
+
+- [#736](https://github.com/skaile-ai/workspaces/pull/736) [`194a9c3`](https://github.com/skaile-ai/workspaces/commit/194a9c36cfc6ed6ac028db4aeadaf6d37e32f3cf) Thanks [@mortegro](https://github.com/mortegro)! - The AI provider registry is the only provider surface in the runtime.
+
+  `provider`, `cloud`, `cloudConfig`, `cloudSecrets` and the flat `apiKeys`
+  fan-out are deleted from `AgentConfig` (bridge), `AgentRuntimeConfig` and
+  `ResolvedAgentConfig` (types), and `AgentSessionConfig` / `AgentSession`
+  (runner). A session carries `registry` + `modelRef`; each entry references its
+  credential and the value reaches the child under `SKAILE_AIP_<ID>_KEY`.
+
+  Gone with them: `bridge/src/cloud.ts`'s legacy half (`buildClaudeCloudEnv`,
+  `CloudConfig`, `CloudId`, `SUPPORTED_CLOUDS`, `CLOUD_SECRET_ENV_KEYS`), the
+  vendor endpoint table (`bridge/src/provider-endpoints.ts` — model discovery and
+  key validation resolve through the catalog presets now), the per-driver env
+  allowlists and key fan-out (`OMP_PROVIDER_ENV_KEYS`, `mapApiKeysToEnv`, the
+  codex/gemini/qwen/continue key cascades), the mixed LLM/voice id list
+  (`core` `ALL_PROVIDERS`, with `providerEnvKey`, `resolveApiKey`,
+  `detectEnvApiKeys`, `resolveAllKeys`), the runner's per-session cloud resolver
+  and provider-key secrets lookup (`runner/src/cloud-bundle.ts` deleted), and the
+  session-boundary legacy derivation (`resolveSessionProviderBinding`,
+  `deriveLegacyProviderRegistry`). The one survivor is the user-local
+  `settings.json` `apiKeys` normalizer (`deriveRegistryFromLegacyApiKeys`), which
+  goes one minor later; `skaile migrate providers` keeps its own copy of the
+  `provider` × `cloud` translation because that is what it exists to migrate.
+
+  The runner now resolves each entry's `platform:<configId>` reference against
+  the `session_init` secrets map itself and materializes the values into the
+  child environment. A `session_init` whose `resolvedConfig.agentConfig` still
+  carries `provider`, `cloud` or `cloudConfig` is **rejected** with a fatal error
+  naming the replacement. Wire protocol 3.13.0 → **4.0.0**.
+
+  See `MIGRATION.md` for the full `from → to` table.
+
+- [#736](https://github.com/skaile-ai/workspaces/pull/736) [`194a9c3`](https://github.com/skaile-ai/workspaces/commit/194a9c36cfc6ed6ac028db4aeadaf6d37e32f3cf) Thanks [@mortegro](https://github.com/mortegro)! - `skaile.yaml` selects a model, it no longer defines a provider.
+
+  `agent_config.<profile>.model` is a selector resolved through `parseModelRef`:
+  `"<providerId>/<modelId>"` picks a registry entry, a bare `"<modelId>"`
+  resolves against registry order, and `"@role"` resolves through the new
+  top-level `roles:` table (`SkWorkspaceConfig.roles`, merged per role name
+  across the scope chain, surfaced as `SkaileSettings.roles`). Role resolution is
+  lenient: an undefined role, a role chain, or a role naming a provider this
+  machine lacks falls back to registry order with a warning instead of failing
+  the session.
+
+  **Breaking — hard cutover, no warning period** (repo convention for
+  `skaile.yaml` schema changes). These are parse errors, and every message names
+  `skaile migrate providers`:
+
+  - `agent-config.<profile>.provider`, `.cloud`, `.cloud_config` (and
+    `.cloudConfig`) — including inside a flat, un-profiled `agent-config` block
+  - `providers`, `base_url`, `credential`, `headers`, `query_params`,
+    `transport` — at the top level and inside any profile
+
+  The reserved names are scoped to those two places: `mcp_servers[].transport`
+  and `mcp_servers[].headers` are a different noun and keep working.
+  `encodeSkaileYaml` strips the three legacy profile keys so the writer cannot
+  emit a file its own decoder rejects, and the now-unreachable
+  `unknown_provider` / `unknown_cloud` / `gateway_missing_base_url` diagnostics
+  are gone.
+
+  New `skaile migrate providers [--project-dir] [--workspace] [--dry-run]
+[--force]` performs the one-time rewrite: for every `skaile.yaml` in the
+  project it derives the endpoint the legacy fields addressed (through the same
+  `deriveLegacyProviderRegistry` the runtime uses, so the base URL, surface and
+  credential carrier are identical), writes it to `~/.skaile/providers.yml`
+  through the `skaile providers add` write path, lifts a reserved top-level
+  `providers:` block into the same file, and leaves
+  `model: <providerId>/<modelId>` behind. Comments and formatting survive, an id
+  that already exists with different settings is reported instead of clobbered,
+  and a second run is a no-op.
+
+  `skaile setup` is now a front-end over `skaile providers add`: it picks
+  endpoints from the catalog presets (not `ALL_PROVIDERS`), writes entries whose
+  credential is an `env:` reference, sends typed secrets to a `.env` file or the
+  operator's shell, and saves `driver` plus one selector. It never writes
+  `settings.apiKeys`.
+
+  `skaile config` follows: `set provider|cloud|cloudConfig` is rejected with the
+  commands that replace it, `set apiKey.<provider>` creates the registry entry
+  with an `env:` reference instead of storing the secret, and `config show` gains
+  a "Model selection" section showing which entry, endpoint and credential the
+  selector resolves to.
+
+  A user-local `settings.json` that still carries `apiKeys` keeps working for one
+  more minor: `deriveRegistryFromLegacyApiKeys()` (new, in
+  `@skaile/workspaces/bridge`) normalizes it into registry entries with `env:`
+  references plus one deprecation line, and returns the literal values in a
+  `credentialEnv` map for the child environment.
+
+  Also fixed: `WorkspaceYamlEditor.setAgentConfig` threw when the file had no
+  `agent-config` section (it stored a plain object where a YAML node was
+  required), and `getAgentConfig` returned the AST node instead of the profile.
+
+### Minor Changes
+
+- [#736](https://github.com/skaile-ai/workspaces/pull/736) [`194a9c3`](https://github.com/skaile-ai/workspaces/commit/194a9c36cfc6ed6ac028db4aeadaf6d37e32f3cf) Thanks [@mortegro](https://github.com/mortegro)! - Every session now carries an AI provider `registry` and a `modelRef` beside the
+  fields it carried before. Nothing that works today changes: this is the expand
+  half of the provider-registry cutover, and the legacy `provider` / `cloud` /
+  `cloudConfig` / `cloudSecrets` / `apiKeys` inputs keep driving the drivers.
+
+  `AgentConfig` (bridge), `AgentRuntimeConfig` (types), `AgentSessionConfig` +
+  `AgentSession` (runner) and `SessionSubpromptRunnerOptions` (flow) all gain the
+  optional pair. Every session-assembly boundary fills it — CLI flags, the
+  platform's `session_init` resolved config, `skaile.yaml`, user settings, the
+  in-process `BridgeRuntime`, and isolated sub-prompt sessions. When a boundary
+  has only the legacy axis, `resolveSessionProviderBinding()`
+  (`@skaile/workspaces/bridge`) derives a **one-entry** registry describing
+  exactly the endpoint those fields already addressed — the catalog preset's base
+  URL (or the provider's `*_BASE_URL` override), the same wire surface, and the
+  same credential kind and carrier that `buildClaudeCloudEnv` uses for
+  `bedrock` / `vertex` / `azure` / `gateway` — and returns one deprecation line
+  for that boundary to log. The derivation lives in exactly one place; no
+  boundary re-implements it. Secrets never enter an entry: the derived
+  `credential.ref` names an env var and the value comes back separately as
+  `credentialEnv`.
+
+  **Protocol 3.12.0 → 3.13.0 (additive minor).**
+  `ResolvedAgentConfig` (`session_init.resolvedConfig.agentConfig`) gains optional
+  `registry?` — the bare `id → entry` map or the merged view — and `modelRef?`
+  (`"<providerId>/<modelId>"`, a bare id, or `"@role"`). Control-plane
+  credentials are referenced as `platform:<configId>` against the same sibling
+  `secrets` map that carries `<PROVIDER>_API_KEY` today. A platform that sends
+  only the legacy fields is byte-identical; a 3.12 runner ignores both keys.
+
+  **Breaking for callers of the model-listing API.** `listModelsForDriver()` and
+  `DriverTarget.listModels()` take a registry instead of a flat key map:
+
+  ```ts
+  // before
+  await listModelsForDriver("omp", settings.apiKeys ?? {});
+  // after
+  const { registry, credentialEnv } = deriveLegacyProviderRegistry({
+    provider: settings.provider,
+    apiKeys: settings.apiKeys,
+  });
+  await listModelsForDriver("omp", registry, {
+    env: { ...process.env, ...credentialEnv },
+  });
+  ```
+
+  A legacy-derived registry yields the same results as the flat map did —
+  `registryApiKeys()` is the exact inverse. See `MIGRATION.md`.
+
+  `BUILTIN_DRIVER_CATALOG` now declares, per driver, the `surfaces` it can speak
+  and its `providerPlurality` (`registry` for omp; `credentials-n` for opencode,
+  goose and continue; `single` for claude-sdk, codex, gemini and qwen), so a
+  consumer can filter registry entries by what a backend can actually address
+  instead of matching vendor names. `DriverInfo` is now declared once, in
+  `@skaile/workspaces/types`, and re-exported from `@skaile/workspaces/bridge`
+  (it was duplicated field-for-field in both).
+
+  No driver dispatches through the registry yet — that lands per driver in the
+  following releases.
+
+- [#736](https://github.com/skaile-ai/workspaces/pull/736) [`194a9c3`](https://github.com/skaile-ai/workspaces/commit/194a9c36cfc6ed6ac028db4aeadaf6d37e32f3cf) Thanks [@mortegro](https://github.com/mortegro)! - The `claude-sdk` driver now addresses the endpoint its AI provider registry
+  entry describes — on **every** transport, including the plain `direct` one.
+
+  Until now the Claude Agent SDK child env was assembled only when `cloud` was
+  something other than `default`, so a session whose provider config named a
+  custom `base_url` on the default transport silently talked to
+  `api.anthropic.com` with that endpoint's credential. The gate is gone: the
+  driver resolves its entry through `resolveSessionProviderBinding()` and builds
+  the child env from it with `buildClaudeEndpointEnv()`
+  (`@skaile/workspaces/bridge`, `src/cloud.ts`).
+
+  What the entry now decides:
+
+  - **Endpoint** — `base_url` (or the transport-derived one) becomes
+    `ANTHROPIC_BASE_URL`, except for Anthropic's own host, which needs no
+    redirect.
+  - **Credential** — `credential.kind: api_key_header` rides as
+    `ANTHROPIC_API_KEY` (the SDK sends `x-api-key`), `bearer` as
+    `ANTHROPIC_AUTH_TOKEN` (`Authorization: Bearer`). `sigv4`, `google_adc` and
+    `azure_entra` emit nothing and let the AWS/Google/Azure chain sign, as
+    before. `oauth` keeps the shipped `CLAUDE_CODE_CREDENTIALS_JSON` mechanism
+    (the runner writes the blob to the Claude credentials file; the driver adds
+    no env). `env:` and `cmd:` refs resolve against `process.env` + `config.env`;
+    a `platform:<configId>` ref is resolved by the runner (which holds the
+    `session_init` secrets map) and picked up from the `SKAILE_AIP_<ID>_KEY`
+    carrier it delivers.
+  - **Transport flag** — `bedrock-converse-stream` → `CLAUDE_CODE_USE_BEDROCK`,
+    `google-vertex` → `CLAUDE_CODE_USE_VERTEX`, `transport: foundry` →
+    `CLAUDE_CODE_USE_FOUNDRY`, with the same routing vars the `cloud` axis
+    emitted. A golden test pins Bedrock, Vertex, Foundry (by resource and by
+    base URL) and gateway output against the legacy builder, entry for entry.
+  - **Headers** — an entry's static `headers` reach the wire as
+    `ANTHROPIC_CUSTOM_HEADERS`, minus the ones the SDK owns.
+  - **Model** — the selector's `model_map` result is the model the session runs.
+
+  The child env is the driver's base environment **plus** the endpoint vars, so
+  `PATH`, `HOME` and `SKAILE_SESSION_ID` survive on every path (the OAuth path
+  previously dropped `config.env` entirely).
+
+  Model discovery follows the same entry: `listModels()` asks the entry's own
+  base URL with the entry's credential, reports nothing for Bedrock / Vertex /
+  Foundry (their model catalogs live behind their own control planes) and
+  nothing at all for an entry with no resolvable endpoint, rather than falling
+  back to Anthropic with someone else's key.
+
+  Sessions that still carry only the legacy `cloud` / `cloudConfig` /
+  `cloudSecrets` / `apiKeys` fields are unchanged: they get the one-entry
+  derivation, which now also keeps the Foundry transport when the endpoint is
+  given as a base URL rather than a resource name, and lets an explicitly
+  configured key override an ambient variable of the same name — the precedence
+  the drivers applied before the registry existed.
+
+- [#736](https://github.com/skaile-ai/workspaces/pull/736) [`194a9c3`](https://github.com/skaile-ai/workspaces/commit/194a9c36cfc6ed6ac028db4aeadaf6d37e32f3cf) Thanks [@mortegro](https://github.com/mortegro)! - Codex takes its endpoints from a session-private `config.toml` instead of the
+  ambient `~/.codex`.
+
+  Codex is a file-shaped backend: it reads providers from `$CODEX_HOME/config.toml`
+  and from nowhere else. The standalone driver now renders the session's AI
+  provider registry into one — `[model_providers.<id>]` per entry, with
+  `base_url`, `env_key`, `wire_api`, `query_params` and `http_headers` mapping
+  1:1 onto the entry's `base_url`, `credential`, `surface`, `query_params` and
+  `headers`, plus top-level `model_provider`/`model` naming the selection — and
+  sets `CODEX_HOME` to the directory holding it. A session pointed at a gateway
+  now actually reaches that gateway, and `listModels()` discovers against the
+  same endpoint rather than always asking `api.openai.com`.
+
+  The rendered file never contains a credential. `env_key` names the per-entry
+  variable `SKAILE_AIP_<ID>_KEY` (the programme-wide naming rule, shared with the
+  omp and env-shaped adapters) and the value is delivered in the child
+  environment. An `oauth` entry gets `requires_openai_auth` instead, which routes
+  codex to its own auth manager.
+
+  Two deliberate limits, both from codex-cli itself. `wire_api` accepts only
+  `responses` as of codex-cli 0.154 (`chat` was removed, openai/codex#7782) and
+  an unknown value fails the whole document at load, so entries on a surface
+  codex cannot speak — `openai-completions`, `anthropic-messages`,
+  `bedrock-converse-stream`, `google-*` — are left out of the file and logged
+  rather than rendered into a config codex would reject. A session with no
+  registry entry codex can address writes no file at all and keeps codex's
+  built-in providers, exactly as before.
+
+  Managed codex restates its credential-isolation invariant on the registry: a
+  managed session may carry exactly one enabled `llm` entry, on
+  `openai-codex-responses`, whose credential is a platform-injected `oauth`
+  reference. A second entry, another surface, or an `env:` / `cmd:` / `keyring:`
+  reference fails the session with the existing `AI_PROFILE_INVALID` before the
+  native process starts. The one-entry projection the session boundary derives
+  from the legacy `provider`/`apiKeys`/`cloud` fields (layer `runtime`) is not a
+  configured endpoint and is exempt — those inputs are already covered by the
+  sibling checks on `provider`, `apiKeys.openai` and `env.OPENAI_API_KEY`.
+  Managed mode continues to bind its provider through the app-server login flow
+  and renders no provider table: a config-defined provider authenticates from
+  `env_key`, so redirecting `model_provider` at one would strip a managed session
+  of the very credential the isolation exists to protect.
+
+- [#736](https://github.com/skaile-ai/workspaces/pull/736) [`194a9c3`](https://github.com/skaile-ai/workspaces/commit/194a9c36cfc6ed6ac028db4aeadaf6d37e32f3cf) Thanks [@mortegro](https://github.com/mortegro)! - The env-shaped CLI drivers — `gemini`, `qwen`, `opencode`, `goose` and
+  `continue` — now take their endpoints and credentials from the AI provider
+  registry instead of a hardcoded per-driver key allowlist.
+
+  **Single-provider backends (`gemini`, `qwen`).** The entry the session's model
+  selector names supplies everything: `qwen` sends that entry's `base_url`,
+  credential and mapped model id as `OPENAI_BASE_URL` / `OPENAI_API_KEY` /
+  `OPENAI_MODEL` (plus `-m`), and `gemini` sends `GEMINI_API_KEY` with `-m` from
+  the model ref and `GOOGLE_GEMINI_BASE_URL` for a non-default host. Once an
+  entry is bound it is the only authority: an inherited `OPENAI_*` /
+  `GEMINI_API_KEY` from the host shell no longer leaks into a session pointed
+  somewhere else. Pointing one of them at an entry whose `surface` it cannot
+  speak now fails at `start()` — before the first spawn — with the offending
+  surface and the backend's own surfaces named, rather than surfacing as an
+  opaque HTTP error mid-turn.
+
+  **`credentials-n` backends (`opencode`, `goose`, `continue`).** Every _enabled_
+  entry contributes one credential variable, `SKAILE_AIP_<ID>_KEY`, plus the
+  vendor carrier a stock catalog endpoint is already known by
+  (`ANTHROPIC_API_KEY`, `GEMINI_API_KEY`, …). The active model is the registry
+  selection: `opencode -m <provider>/<model>`, `GOOSE_PROVIDER` +
+  `GOOSE_MODEL`, and — because `cn` has no model flag — a Continue **role
+  binding** for the `chat` role, which is also the shape the generated
+  `config.yaml` will be rendered from. A model selector that the registry
+  resolves is no longer passed to `cn --config`, which only ever named a Hub
+  assistant.
+
+  Model discovery takes the registry throughout: `gemini` and `qwen` query the
+  bound entry's own endpoint with its credential, and the three `credentials-n`
+  backends — which have no discovery endpoint of their own — list what the
+  registry declares, namespaced the way each takes it.
+
+  Two shared pieces come with this:
+  `bridge/src/provider-materialize/credential-env.ts` is the single naming rule
+  for per-entry credential variables (`providerCredentialEnvName`,
+  `registryCredentialEnv`), used by the omp, codex and CLI adapters alike, and
+  `bridge/src/provider-materialize/env-drivers.ts` resolves a session's
+  registry, binds its selector to an entry and enforces the surface.
+
+  `SubprocessCliDriver.baseEnv()` now merges `config.env` **over** the allowlist
+  instead of replacing it: setting one variable used to drop `PATH` and `HOME`
+  and make the spawn fail, which the registry delivery path depends on.
+
+  Sessions carrying only the legacy `provider` / `model` / `apiKeys` fields are
+  unchanged. The one-entry derivation those produce describes a credential, not
+  a chosen endpoint — `provider` defaults to `anthropic` for every session — so
+  the drivers take its credentials but keep their pre-registry model selection,
+  and a single-provider driver handed such an entry with an unusable surface
+  warns and falls back instead of failing.
+
+- [#736](https://github.com/skaile-ai/workspaces/pull/736) [`194a9c3`](https://github.com/skaile-ai/workspaces/commit/194a9c36cfc6ed6ac028db4aeadaf6d37e32f3cf) Thanks [@mortegro](https://github.com/mortegro)! - Model identity is per wire surface, and model tiers resolve through the provider
+  registry.
+
+  An Anthropic-shaped model id is now required for exactly one target: `surface:
+anthropic-messages` on `transport: direct` pointed at `api.anthropic.com`. Every
+  other endpoint names models we cannot enumerate — a Bedrock inference-profile
+  ARN, an Azure deployment name, `accounts/fireworks/models/…`,
+  `meta-llama/Llama-3.3-70B`, an Ollama tag — and those ids are now accepted.
+  New in `@skaile/workspaces/types/manifests`: `ModelIdTarget`,
+  `requiresAnthropicModelId()`, `modelIdSchemaForTarget()`,
+  `isFirstPartyAnthropicEndpoint()`, `ANTHROPIC_FIRST_PARTY_HOSTS`,
+  `FreeFormModelIdSchema` and `ModelSelectorSchema`. `ModelIdSchema` is unchanged
+  but is no longer a universal rule: it is the first-party Anthropic vocabulary,
+  selected by `modelIdSchemaForTarget()`. `modelIdSchemaForCloud()` keeps its
+  signature and is now free-form for every `cloud` other than `default` —
+  `bedrock`, `vertex` and `azure` rename the ids, so validating them against
+  Anthropic's namespace rejected working deployments.
+
+  `AgentManifest.model.preferred` / `.fallback` accept a model **selector**:
+  `@role`, `<providerId>/<modelId>`, a bare id, or an Anthropic alias. A manifest
+  is portable across providers and cannot know which entry will serve it, so the
+  id-vocabulary check moved to where the endpoint is known. Only a value no
+  endpoint could be handed (empty, or containing whitespace) still fails
+  `validateAgent`.
+
+  New in `@skaile/workspaces/bridge` (`bridge/src/models.ts`):
+  `resolveManifestModel()` resolves a manifest preference against the registry —
+  `@role` through `roles`, then `provider/id`, then a bare id, all via
+  `parseModelRef()` — and reports an `error` when the id the entry would receive
+  is not legal for its surface. `modelIdTargetForEntry()` derives that target from
+  an entry (falling back to its catalog preset for `surface` / `base_url`).
+  `resolveModelCapabilities()` reads `capabilities.context_window` /
+  `thinking_max` / `tools` / `images` from the entry serving a model, field by
+  field over a caller-supplied per-model fallback table.
+
+  `resolveModelTier()` takes `{registry, roles, providerId}` and resolves
+  `small`/`default`/`deep` through `roles[tier]` and then the selected entry's
+  `model_map[tier]` — which works for every provider, not just the ten in
+  `PROVIDER_MODEL_TIERS`. That table is now the **no-registry fallback only**:
+  where a registry is configured it is not consulted, and a tier the registry does
+  not define raises `ModelTierResolutionError` instead of substituting a guess.
+  Precedence is unchanged otherwise: a configured override first, and `default`
+  still inherits the session model before any table.
+
+- [#736](https://github.com/skaile-ai/workspaces/pull/736) [`194a9c3`](https://github.com/skaile-ai/workspaces/commit/194a9c36cfc6ed6ac028db4aeadaf6d37e32f3cf) Thanks [@mortegro](https://github.com/mortegro)! - omp sees every configured AI provider, out of a session-private agent directory.
+
+  omp is the one backend whose native config already _is_ the registry shape:
+  `models.yml` is a `providers:` map with `baseUrl`, `api`, `apiKey`, `headers`,
+  `authHeader`, `auth`, `discovery` and `models[]`. So the new adapter
+  (`bridge/src/drivers/omp-models-yml.ts`) is a serializer, not a translator —
+  each enabled `llm` entry becomes one omp provider, `surface` is written
+  verbatim as `api` (the two enums are the same list), `model_map` becomes
+  `models[]` keyed by the provider-side id, and `AgentConfig.roles` becomes
+  `modelRoles` in a sibling `config.yml`. The result: three configured endpoints
+  are three selectable providers in one session, `@smol` and `@default` resolve
+  to different vendors, and a subagent pinned to `@smol` reaches that endpoint —
+  verified against omp 18.2.6 with fake servers logging the requests.
+
+  `apiKey` holds the **name** of `SKAILE_AIP_<ID>_KEY`, never a value: omp
+  resolves a `models.yml` `apiKey` as an environment variable name before it
+  falls back to treating it as a literal token, so the credential can stay in the
+  child environment where a config file cannot leak it. The ~50-name
+  `OMP_PROVIDER_ENV_KEYS` allowlist stops being the mechanism by which
+  credentials reach omp and survives only as an ambient fallback (and as the
+  carrier for the `sigv4` / `google_adc` signing chains an entry delegates to)
+  until the legacy-contract change deletes it.
+
+  `PI_CODING_AGENT_DIR` relocates omp's whole agent base — `config.yml`,
+  `models.yml` _and_ the auth store `agent.db` — so pointing it at a
+  session-private directory is what makes N providers per session possible
+  without ever writing the user's `~/.omp/agent`. The directory sits outside
+  `cwd`, the one tree the agent has write access to, matching the line managed
+  codex already draws for its private directory; `AgentConfig.agentDir`'s
+  identity files are symlinked in so `agent.yaml` / `SOUL.md` / `RULES.md` /
+  `knowledge/` still resolve.
+
+  Relocating that base would also have cost a developer their stored OAuth
+  logins, which was the one risk that could have descoped this to
+  "one active provider". It does not: a machine that has `~/.omp/agent` gets its
+  contents symlinked into the session directory, and an OAuth account stored
+  there still authenticates inside the relocated session (checked with `omp
+token`, omp 18.2.6). `models.yml` is never seeded and `config.yml` is copied
+  rather than linked, so neither of the user's files can be written through the
+  session. A platform container has no such directory, so its session starts
+  empty — which is the correct behaviour there.
+
+  `AgentConfig` gains `roles` (the `skaile.yaml` role table) and
+  `DriverOptions.omp` (`agentHome`, `seedUserAgentDir`, `userAgentDir`); both are
+  additive. A session with no registry keeps the previous behaviour exactly.
+
+- [#736](https://github.com/skaile-ai/workspaces/pull/736) [`194a9c3`](https://github.com/skaile-ai/workspaces/commit/194a9c36cfc6ed6ac028db4aeadaf6d37e32f3cf) Thanks [@mortegro](https://github.com/mortegro)! - A custom endpoint now reaches OpenCode, Goose and Continue, not only the
+  vendors their own tables know.
+
+  The env half of these three backends (`SKAILE_AIP_<ID>_KEY` per entry, plus
+  `-m <provider>/<model>` / `GOOSE_PROVIDER` / a Continue `chat` binding) can
+  name an endpoint the backend already knows. It cannot describe one it has
+  never heard of — a self-hosted gateway, a LiteLLM proxy, an Ollama box — and
+  each of these backends learns such an endpoint only from its own config file.
+  Each driver now renders one:
+
+  - `opencode` — `opencode/opencode.json` with a `provider.<id>` block
+    (`npm` from the entry's `surface`, `options.baseURL`, `options.apiKey`,
+    `models`), reached by pointing `XDG_CONFIG_HOME` at the session's own
+    directory.
+  - `goose` — a declarative provider per entry,
+    `config/custom_providers/<id>.json` (`engine`, `base_url`, `api_key_env`,
+    `models[]`, `headers`), reached through `GOOSE_PATH_ROOT`.
+  - `continue` — `config.yaml` with one `models[]` row per bound model, reached
+    through `CONTINUE_GLOBAL_DIR`. `cn` has no model flag, so the session's
+    `roles:` table is what binds them: each key that is a Continue role
+    (`chat`, `edit`, `apply`, `autocomplete`, `embed`, `rerank`, `summarize`;
+    `default` is read as `chat`) becomes that role's model, and the session's
+    own selector wins `chat`.
+
+  Three invariants hold across all three. The rendered file never contains a
+  credential — it names the per-entry variable (`{env:SKAILE_AIP_<ID>_KEY}`,
+  `api_key_env`, `${{ secrets.… }}`) and the value is delivered in the child
+  environment, the same rule the codex and omp adapters follow. The provider
+  name in the file is `backendProviderName`, the same name the env half puts on
+  the command line, so the two halves cannot drift apart. And the config home is
+  session-private, under `$SKAILE_HOME/<driver>/<sessionId>`: the developer's
+  `~/.config/opencode`, Goose config directory and `~/.continue` are neither
+  read nor written, which also keeps a session's state out of them.
+
+  Nothing is rendered unless something has to be. A session whose endpoints are
+  all stock catalog endpoints, and a session that carries only the legacy
+  `provider`/`model`/`apiKeys` fields, write no file and leave the config-home
+  variable unset — those backends behave exactly as before, including reading
+  the developer's own config.
+
+  Entries a backend genuinely cannot express are left out of the file and
+  logged, never guessed at: Goose's declarative providers are `openai` /
+  `anthropic` / `ollama` engines only, so `google-*` and
+  `bedrock-converse-stream` entries are reported instead; the same applies to
+  any surface with no OpenCode AI SDK package or Continue provider class.
+
+- [#736](https://github.com/skaile-ai/workspaces/pull/736) [`194a9c3`](https://github.com/skaile-ai/workspaces/commit/194a9c36cfc6ed6ac028db4aeadaf6d37e32f3cf) Thanks [@mortegro](https://github.com/mortegro)! - Add the AI provider registry: `providers.yml` defines every LLM and voice
+  endpoint once, and `skaile providers list|add|set|rm|test` manages it.
+
+  New in `@skaile/workspaces/core` (`core/src/provider-registry.ts`, also exported
+  as `@skaile/workspaces/core/provider-registry`): the record types
+  (`kind, label, preset, surface, transport, base_url, params, headers,
+query_params, credential{kind, ref}, model_map, capabilities, discovery,
+enabled, locked`), `validateRegistry()`, `mergeRegistries()`,
+  `resolveCredential()`, `resolveEntryBaseUrl()` and `parseModelRef()`.
+  `surface` is omp's `api` vocabulary verbatim; `params` is a discriminated union
+  keyed on `transport`; `stt`/`tts` entries use a reduced record and reject the
+  llm-only fields. A literal secret in `credential.ref`, `headers`,
+  `query_params` or `base_url` is a validation error naming the offending key —
+  credentials are referenced as `env:NAME`, `cmd:<shell>`, `platform:<configId>`
+  or `keyring:<service>/<account>`.
+
+  `core/src/provider-registry-files.ts` loads `~/.skaile/providers.yml` under
+  `<workspace>/.skaile/providers.yml`; the layers are merged **before** they are
+  gated, so a file may hold a _partial_ entry — one that names only the fields it
+  overrides, `kind` included — and the nearer layer wins per key. An entry no
+  layer completes is the error (`missing_kind`, `missing_surface`, naming the
+  files that fed it), reported by `loadProviderRegistry()`;
+  `validateMergedRegistry()` is that gate for anyone merging layers themselves,
+  and `validateRegistry(raw, { layer })` reads one layer. An entry marked
+  `locked: true` in a higher layer cannot be overridden from a lower one.
+  `bridge/src/provider-catalog.ts` ships presets for the surveyed endpoints
+  (Anthropic, OpenAI, Google, Groq, DeepSeek, OpenRouter, Mistral, xAI, Together,
+  Fireworks, Bedrock, Vertex, Azure OpenAI, Foundry, Ollama, LM Studio, vLLM,
+  LiteLLM, Deepgram, ElevenLabs) so `skaile providers add --preset groq` needs
+  nothing but a credential reference.
+
+  `skaile init` now gitignores `.skaile/providers.yml`. No driver reads the
+  registry yet — this release is the schema, the catalog and the CLI.
+
+### Patch Changes
+
+- [#736](https://github.com/skaile-ai/workspaces/pull/736) [`2de14a6`](https://github.com/skaile-ai/workspaces/commit/2de14a64fdcd77ec8273679bb13f2a0bf149d845) Thanks [@mortegro](https://github.com/mortegro)! - Fix the provider registry dropping entries whose `kind` or transport `params` come from a preset: the catalog layer is now built from the pre-gate merge (`LoadedProviderRegistry.patches`), so `groq: { preset: groq }` plus a workspace `base_url` override resolves to a complete entry instead of a false "no layer supplies it" error, and a session whose entries all fail the gate logs the diagnostics instead of silently running with no endpoint. The completeness gate also re-scans `credential.ref`, `headers`, `query_params` and `base_url` on programmatically injected layers for literal secrets, and every merge-time diagnostic now names the files that contributed the entry.
+
 ## 3.27.1
 
 ### Patch Changes

package/dist/app-sdk/index.js

@@ -1,4 +1,4 @@
-import { PROTOCOL_VERSION_STRING } from '../chunk-72DG6GSB.js';
+import { PROTOCOL_VERSION_STRING } from '../chunk-YS4XBN7O.js';
 import '../chunk-NSBPE2FW.js';
 import * as z from 'zod';
 

package/dist/{asset-feeds-QF7LGRUX.js → asset-feeds-VEPD5ZU7.js}

@@ -1,18 +1,20 @@
-import { assignDomain, buildDomainIndex, DOMAIN_MD_FILENAME, parseDomainMd } from './chunk-DZ4UZOFB.js';
+import { assignDomain, buildDomainIndex, DOMAIN_MD_FILENAME, parseDomainMd } from './chunk-M5H4DWIA.js';
 import './chunk-JXT46QFC.js';
-import './chunk-HSRHO7SK.js';
+import './chunk-3VSRJE3M.js';
+import { factoryAssetRoots } from './chunk-REILIKVM.js';
 import './chunk-F3HNW354.js';
 import './chunk-K5GBV4SA.js';
 import './chunk-QVZA2MDT.js';
-import { factoryAssetRoots } from './chunk-IB4XKQMQ.js';
-import { scanRepo } from './chunk-MBARHWMZ.js';
+import { scanRepo } from './chunk-K27T47OO.js';
 import './chunk-MENCWIHW.js';
 import './chunk-P4VHQA4N.js';
 import { walkDir, parseFrontmatter } from './chunk-MKZOK4JU.js';
 import './chunk-GEEW6SY2.js';
 import './chunk-FTG7CRFD.js';
+import './chunk-KSIRR5PL.js';
+import './chunk-ILG4BXYE.js';
 import './chunk-W4IPN3DD.js';
-import './chunk-AN6NAFRT.js';
+import './chunk-N7B3LZ7V.js';
 import './chunk-NSBPE2FW.js';
 import { existsSync, readFileSync } from 'fs';
 import * as path from 'path';
@@ -65,7 +67,7 @@ async function libraryAssets() {
   const domains = [];
   try {
     const [{ openLibraryManager }, { skaileHomeDir }, { getGlobalCacheDir }] = await Promise.all([
-      import('./open-library-32XAI2LH.js'),
+      import('./open-library-7OIUAGAH.js'),
       import('./library/index.js'),
       import('./core/index.js')
     ]);
@@ -98,7 +100,7 @@ async function libraryAssets() {
 async function storeAssets(projectDir) {
   const notes = [];
   try {
-    const { resolveCatalogSource } = await import('./open-library-32XAI2LH.js');
+    const { resolveCatalogSource } = await import('./open-library-7OIUAGAH.js');
     const { source, close } = await resolveCatalogSource({ projectDir });
     try {
       const assets = await source.listAssets();
@@ -202,5 +204,5 @@ function dedupeBySlug(domains) {
 }
 
 export { gatherAssetFeeds };
-//# sourceMappingURL=asset-feeds-QF7LGRUX.js.map
-//# sourceMappingURL=asset-feeds-QF7LGRUX.js.map
+//# sourceMappingURL=asset-feeds-VEPD5ZU7.js.map
+//# sourceMappingURL=asset-feeds-VEPD5ZU7.js.map

package/dist/asset-feeds-VEPD5ZU7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../cli/src/asset-feeds.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqFA,SAAS,QAAQ,CAAA,EAAmB;AAClC,EAAA,OAAO,CAAA,CAAE,KAAA,CAAW,IAAA,CAAA,GAAG,CAAA,CAAE,KAAK,GAAG,CAAA;AACnC;AAGA,eAAe,cAAc,IAAA,EAAmC;AAC9D,EAAA,MAAM,MAAkB,EAAC;AACzB,EAAA,WAAA,MAAiB,EAAE,IAAA,EAAM,QAAA,EAAU,MAAK,IAAK,OAAA,CAAQ,IAAI,CAAA,EAAG;AAC1D,IAAA,IAAI,SAAS,kBAAA,EAAoB;AACjC,IAAA,IAAI;AACF,MAAA,MAAM,EAAE,IAAA,EAAK,GAAI,iBAAiB,YAAA,CAAa,QAAA,EAAU,MAAM,CAAC,CAAA;AAChE,MAAA,GAAA,CAAI,IAAA,CAAK,cAAc,OAAA,CAAa,IAAA,CAAA,QAAA,CAAS,MAAM,QAAQ,CAAC,CAAA,EAAG,IAAI,CAAC,CAAA;AAAA,IACtE,CAAA,CAAA,MAAQ;AAAA,IAAC;AAAA,EACX;AACA,EAAA,OAAO,GAAA;AACT;AAcA,eAAe,YAAA,CACb,IAAA,EACA,YAAA,EACA,OAAA,EACA,qBAAqB,IAAA,EACK;AAC1B,EAAA,MAAM,SAAA,GAAY,MAAM,aAAA,CAAc,IAAI,CAAA;AAC1C,EAAA,MAAM,WAAA,GAAc,OAAA,CAAQ,GAAA,CAAI,CAAC,KAAA,MAAW;AAAA,IAC1C,KAAA;AAAA,IACA,KAAK,CAAA,EAAG,KAAA,CAAM,IAAI,CAAA,CAAA,EAAI,MAAM,IAAI,CAAA,CAAA;AAAA,IAChC,cAAc,OAAA,CAAa,IAAA,CAAA,QAAA,CAAS,IAAA,EAAM,KAAA,CAAM,MAAM,CAAC;AAAA,GACzD,CAAE,CAAA;AAEF,EAAA,IAAI,YAAA,GAAe,KAAA;AACnB,EAAA,KAAA,MAAW,KAAK,WAAA,EAAa;AAC3B,IAAA,MAAM,IAAA,GAAO,YAAA,CAAa,CAAA,CAAE,YAAA,EAAc,SAAS,CAAA;AACnD,IAAA,IAAI,IAAA,EAAM,CAAA,CAAE,KAAA,CAAM,UAAA,GAAa,IAAA;AAAA,SAAA,IACtB,kBAAA,EAAoB;AAC3B,MAAA,CAAA,CAAE,MAAM,UAAA,GAAa,YAAA;AACrB,MAAA,YAAA,GAAe,IAAA;AAAA,IACjB,CAAA,MAAO,CAAA,CAAE,KAAA,CAAM,UAAA,GAAa,EAAA;AAAA,EAC9B;AAEA,EAAA,MAAM,EAAE,KAAA,EAAM,GAAI,gBAAA,CAAiB,aAAa,SAAS,CAAA;AACzD,EAAA,MAAM,UAA2B,MAAA,CAAO,MAAA,CAAO,KAAK,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,IAChE,MAAM,CAAA,CAAE,IAAA;AAAA,IACR,OAAO,CAAA,CAAE,KAAA;AAAA,IACT,GAAI,EAAE,WAAA,GAAc,EAAE,aAAa,CAAA,CAAE,WAAA,KAAgB,EAAC;AAAA,IACtD,GAAI,EAAE,QAAA,GAAW,EAAE,UAAU,CAAA,CAAE,QAAA,KAAa,EAAC;AAAA,IAC7C,GAAI,EAAE,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,CAAA,CAAE,KAAA,EAAM,GAAI,EAAC;AAAA,IAClD,GAAI,CAAA,CAAE,WAAA,CAAY,CAAC,CAAA,GAAI,EAAE,cAAA,EAAgB,CAAA,CAAE,WAAA,CAAY,CAAC,CAAA,EAAE,GAAI;AAAC,GACjE,CAAE,CAAA;AACF,EAAA,IAAI,YAAA,UAAsB,IAAA,CAAK,EAAE,MAAM,YAAA,EAAc,KAAA,EAAO,cAAc,CAAA;AAC1E,EAAA,OAAO,OAAA;AACT;AAUA,eAAe,aAAA,GAIZ;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,MAAM,UAA2B,EAAC;AAClC,EAAA,IAAI;AACF,IAAA,MAAM,CAAC,EAAE,kBAAA,EAAmB,EAAG,EAAE,aAAA,EAAc,EAAG,EAAE,iBAAA,EAAmB,CAAA,GAAI,MAAM,QAAQ,GAAA,CAAI;AAAA,MAC3F,OAAO,4BAAmB,CAAA;AAAA,MAC1B,OAAO,oBAA4B,CAAA;AAAA,MACnC,OAAO,iBAAyB;AAAA,KACjC,CAAA;AACD,IAAA,MAAM,EAAE,OAAA,EAAS,KAAA,EAAM,GAAI,MAAM,kBAAA,EAAmB;AACpD,IAAA,IAAI;AAIF,MAAA,MAAM,UAAU,iBAAA,EAAkB;AAClC,MAAA,MAAM,UAAA,GAAkB,IAAA,CAAA,IAAA,CAAK,aAAA,EAAc,EAAG,SAAS,CAAA;AACvD,MAAA,MAAM,IAAA,GAAA,CAAQ,MAAM,OAAA,CAAQ,aAAA,EAAc,EAAG,MAAA;AAAA,QAC3C,CAAC,CAAA,KAAM,CAAC,CAAA,CAAE,IAAA,CAAK,UAAA,CAAW,OAAO,CAAA,IAAK,CAAC,CAAA,CAAE,IAAA,CAAK,UAAA,CAAW,UAAU;AAAA,OACrE;AACA,MAAA,MAAM,UAAyB,EAAC;AAChC,MAAA,KAAA,MAAW,OAAO,IAAA,EAAM;AACtB,QAAA,IAAI,CAAC,UAAA,CAAW,GAAA,CAAI,IAAI,CAAA,EAAG;AAI3B,QAAA,MAAM,UAAA,GAAa,CAAC,GAAI,MAAM,SAAS,GAAA,CAAI,IAAA,EAAM,GAAA,CAAI,IAAI,CAAE,CAAA;AAC3D,QAAA,OAAA,CAAQ,IAAA,CAAK,GAAI,MAAM,YAAA,CAAa,GAAA,CAAI,MAAM,GAAA,CAAI,IAAA,EAAM,UAAA,EAAY,KAAK,CAAE,CAAA;AAC3E,QAAA,KAAA,MAAW,KAAA,IAAS,UAAA,EAAY,OAAA,CAAQ,IAAA,CAAK,EAAE,MAAA,EAAQ,SAAA,EAAW,KAAA,EAAO,KAAA,EAAO,GAAA,CAAI,IAAA,EAAM,CAAA;AAAA,MAC5F;AACA,MAAA,OAAO,EAAE,OAAA,EAAS,OAAA,EAAS,KAAA,EAAM;AAAA,IACnC,CAAA,SAAE;AACA,MAAA,KAAA,EAAM;AAAA,IACR;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,IAAA,EAAM,WAAA;AAAA,MACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACzD,CAAA;AACD,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,SAAS,KAAA,EAAM;AAAA,EACvC;AACF;AAYA,eAAe,YAAY,UAAA,EAIxB;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AACF,IAAA,MAAM,EAAE,oBAAA,EAAqB,GAAI,MAAM,OAAO,4BAAmB,CAAA;AACjE,IAAA,MAAM,EAAE,QAAQ,KAAA,EAAM,GAAI,MAAM,oBAAA,CAAqB,EAAE,YAAY,CAAA;AACnE,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,UAAA,EAAW;AACvC,MAAA,MAAM,OAAA,GAA0B,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,QACjD,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,IAAA,EAAO,EAAE,IAAA,IAAsB,OAAA;AAAA,QAC/B,WAAA,EAAa,EAAE,WAAA,IAAe,EAAA;AAAA,QAC9B,MAAA,EAAQ,CAAA,QAAA,EAAW,CAAA,CAAE,EAAE,CAAA,CAAA;AAAA,QACvB,WAAW,CAAA,CAAE,SAAA;AAAA,QACb,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,YAAY,CAAA,CAAE,UAAA;AAAA,QACd,UAAU,CAAA,CAAE,QAAA;AAAA,QACZ,SAAS,CAAA,CAAE,OAAA;AAAA,QACX,UAAU,EAAC;AAAA,QACX,cAAc;AAAC,OACjB,CAAE,CAAA;AAIF,MAAA,MAAM,OAAA,GAAU,MAAM,WAAA,CAAY,MAAM,CAAA;AACxC,MAAA,OAAO,EAAE,OAAA,EAAS,OAAA,EAAS,KAAA,EAAM;AAAA,IACnC,CAAA,SAAE;AACA,MAAA,KAAA,EAAM;AAAA,IACR;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,MAAM,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAG3D,IAAA,IAAI,CAAC,QAAA,CAAS,IAAA,CAAK,GAAG,CAAA,EAAG;AACvB,MAAA,KAAA,CAAM,KAAK,EAAE,IAAA,EAAM,OAAA,EAAS,OAAA,EAAS,KAAK,CAAA;AAAA,IAC5C;AACA,IAAA,OAAO,EAAE,OAAA,EAAS,IAAI,OAAA,EAAS,IAAI,KAAA,EAAM;AAAA,EAC3C;AACF;AAGA,eAAe,YAAY,MAAA,EAA2C;AACpE,EAAA,MAAM,KAAM,MAAA,CAA4D,WAAA;AACxE,EAAA,IAAI,OAAO,EAAA,KAAO,UAAA,EAAY,OAAO,EAAC;AACtC,EAAA,MAAM,OAAA,GAAU,MAAM,EAAA,CAAG,IAAA,CAAK,MAAM,CAAA;AACpC,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,OAAO,CAAA,GAAI,UAAU,EAAC;AAC7C;AAcA,eAAe,aACb,EAAA,EAC+D;AAI/D,EAAA,MAAM,eAAA,GAAkB,iBAAA,EAAkB,CAAE,GAAA,CAAI,CAAC,CAAA,KAAO,CAAA,CAAE,QAAA,CAAc,IAAA,CAAA,GAAG,CAAA,GAAI,CAAA,GAAI,CAAA,GAAS,IAAA,CAAA,GAAI,CAAA;AAChG,EAAA,MAAM,gBAAgB,CAAC,CAAA,KACrB,eAAA,CAAgB,IAAA,CAAK,CAAC,EAAA,KAAO,CAAA,KAAM,EAAA,CAAG,KAAA,CAAM,GAAG,EAAE,CAAA,IAAK,CAAA,CAAE,UAAA,CAAW,EAAE,CAAC,CAAA;AAExE,EAAA,MAAM,GAAA,GAAA,CAAO,MAAM,EAAA,CAAG,MAAA,EAAO,EAAG,MAAA,CAAO,CAAC,CAAA,KAAM,CAAC,aAAA,CAAc,CAAA,CAAE,MAAM,CAAC,CAAA;AACtE,EAAA,MAAM,UAAyB,EAAC;AAChC,EAAA,MAAM,UAA2B,EAAC;AAMlC,EAAA,KAAA,MAAW,EAAE,QAAA,EAAU,IAAA,EAAK,IAAK,EAAA,CAAG,iBAAgB,EAAG;AACrD,IAAA,IAAI,aAAA,CAAc,IAAI,CAAA,EAAG;AACzB,IAAA,MAAM,SAAS,IAAA,CAAK,QAAA,CAAc,IAAA,CAAA,GAAG,CAAA,GAAI,OAAO,IAAA,GAAY,IAAA,CAAA,GAAA;AAC5D,IAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,MAAA,KAAW,IAAA,IAAQ,CAAA,CAAE,MAAA,CAAO,UAAA,CAAW,MAAM,CAAC,CAAA;AAChF,IAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG;AACxB,IAAA,MAAM,aAAa,QAAA,CAAS,KAAA,CAAM,GAAG,CAAA,CAAE,KAAI,IAAK,QAAA;AAGhD,IAAA,OAAA,CAAQ,IAAA,CAAK,GAAI,MAAM,YAAA,CAAa,MAAM,UAAA,EAAY,KAAA,EAAO,KAAK,CAAE,CAAA;AACpE,IAAA,KAAA,MAAW,KAAA,IAAS,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,EAAE,QAAQ,QAAA,EAAU,KAAA,EAAO,KAAA,EAAO,UAAA,EAAY,CAAA;AAAA,EACxF;AACA,EAAA,OAAO,EAAE,SAAS,OAAA,EAAQ;AAC5B;AAUA,eAAe,aAAA,GAIZ;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,MAAM,UAA2B,EAAC;AAClC,EAAA,IAAI;AACF,IAAA,MAAM,UAA0B,EAAC;AACjC,IAAA,KAAA,MAAW,IAAA,IAAQ,mBAAkB,EAAG;AACtC,MAAA,MAAM,cAAc,CAAC,GAAI,MAAM,QAAA,CAAS,IAAA,EAAM,gBAAgB,CAAE,CAAA;AAChE,MAAA,OAAA,CAAQ,KAAK,GAAI,MAAM,aAAa,IAAA,EAAM,gBAAA,EAAkB,WAAW,CAAE,CAAA;AACzE,MAAA,OAAA,CAAQ,IAAA,CAAK,GAAG,WAAW,CAAA;AAAA,IAC7B;AACA,IAAA,OAAO,EAAE,OAAA,EAAS,OAAA,EAAS,KAAA,EAAM;AAAA,EACnC,SAAS,GAAA,EAAK;AACZ,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,IAAA,EAAM,SAAA;AAAA,MACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACzD,CAAA;AACD,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,SAAS,KAAA,EAAM;AAAA,EACvC;AACF;AAGA,SAAS,GAAA,CAAI,QAAqB,OAAA,EAAwC;AACxE,EAAA,OAAO,QAAQ,GAAA,CAAI,CAAC,WAAW,EAAE,MAAA,EAAQ,OAAM,CAAE,CAAA;AACnD;AASA,eAAsB,gBAAA,CACpB,IACA,UAAA,EAC0B;AAC1B,EAAA,MAAM,CAAC,IAAA,EAAM,KAAK,CAAA,GAAI,MAAM,OAAA,CAAQ,GAAA,CAAI,CAAC,aAAA,EAAc,EAAG,WAAA,CAAY,UAAU,CAAC,CAAC,CAAA;AAClF,EAAA,MAAM,OAAA,GAAU,MAAM,aAAA,EAAc;AACpC,EAAA,MAAM,GAAA,GAAM,MAAM,YAAA,CAAa,EAAE,CAAA;AACjC,EAAA,OAAO;AAAA,IACL,OAAA,EAAS;AAAA,MACP,GAAG,GAAA,CAAI,OAAA;AAAA,MACP,GAAG,IAAA,CAAK,OAAA;AAAA,MACR,GAAG,GAAA,CAAI,SAAA,EAAW,OAAA,CAAQ,OAAO,CAAA;AAAA,MACjC,GAAG,GAAA,CAAI,OAAA,EAAS,KAAA,CAAM,OAAO;AAAA,KAC/B;AAAA;AAAA;AAAA,IAGA,OAAA,EAAS,YAAA,CAAa,CAAC,GAAG,MAAM,OAAA,EAAS,GAAG,GAAA,CAAI,OAAA,EAAS,GAAG,IAAA,CAAK,OAAA,EAAS,GAAG,OAAA,CAAQ,OAAO,CAAC,CAAA;AAAA,IAC7F,KAAA,EAAO,CAAC,GAAG,IAAA,CAAK,KAAA,EAAO,GAAG,KAAA,CAAM,KAAA,EAAO,GAAG,OAAA,CAAQ,KAAK;AAAA,GACzD;AACF;AAGA,SAAS,aAAa,OAAA,EAA2C;AAC/D,EAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAC7B,EAAA,MAAM,MAAuB,EAAC;AAC9B,EAAA,KAAA,MAAW,KAAK,OAAA,EAAS;AACvB,IAAA,IAAI,IAAA,CAAK,GAAA,CAAI,CAAA,CAAE,IAAI,CAAA,EAAG;AACtB,IAAA,IAAA,CAAK,GAAA,CAAI,EAAE,IAAI,CAAA;AACf,IAAA,GAAA,CAAI,KAAK,CAAC,CAAA;AAAA,EACZ;AACA,EAAA,OAAO,GAAA;AACT","file":"asset-feeds-VEPD5ZU7.js","sourcesContent":["/**\n * asset-feeds.ts — gather installable assets from every feed the manage TUI\n * surfaces.\n *\n * Four feeds, normalized into `CatalogEntry`:\n * - **Project sources** — `skaile.yaml` `sources:` entries (scanned via\n *   `AssetManager.search()`; the new `sources:` field is merged into the\n *   legacy repositories map in `AssetManager.loadConfig`).\n * - **Local libraries** — user authoring places from `LocalIndex` (filesystem\n *   scan of each library's `path`).\n * - **Factory assets** — the bundled first-party `factory-assets` tree\n *   (`factoryAssetRoots()`), scanned from disk. Always present; no network.\n * - **Remote store** — the configured catalog source when `catalog.url` is\n *   not `local`. Failures are non-fatal — they surface as notes.\n */\n\nimport { existsSync, readFileSync } from \"node:fs\";\nimport * as path from \"node:path\";\nimport {\n  type AssetKind,\n  type CatalogDomain,\n  type CatalogEntry,\n  factoryAssetRoots,\n  parseFrontmatter,\n  scanRepo,\n  walkDir,\n} from \"@skaile/workspaces/core\";\nimport {\n  assignDomain,\n  buildDomainIndex,\n  DOMAIN_MD_FILENAME,\n  type DomainMd,\n  parseDomainMd,\n} from \"@skaile/workspaces/discovery\";\n\n/** One non-fatal note returned to the caller for surfacing in the UI. */\nexport interface FeedNote {\n  feed: \"sources\" | \"libraries\" | \"store\" | \"factory\";\n  message: string;\n}\n\n/**\n * Which feed an asset came from. This is the top-level grouping axis in the\n * manage TUI (\"where is this skill coming from?\") and is intentionally distinct\n * from `publisher` (asset-intrinsic identity): the same publisher can legitimately\n * appear under more than one origin (e.g. a github repo you added as a `source`\n * that is also listed in the remote `store`).\n */\nexport type AssetOrigin = \"source\" | \"library\" | \"factory\" | \"store\";\n\n/** A catalog entry tagged with the feed it was gathered from. */\nexport interface OriginEntry {\n  origin: AssetOrigin;\n  entry: CatalogEntry;\n  /**\n   * Second-level grouping label for the manage tree. Defaults (when unset) to the\n   * entry's `publisher`; the source feed sets it to the source's short repo name\n   * so the Sources band groups by source — \"which repo did this come from\" — not\n   * by the asset-intrinsic publisher.\n   */\n  group?: string;\n}\n\nexport interface AssetFeedResult {\n  entries: OriginEntry[];\n  /**\n   * Display-only domain metadata, keyed (by the consumer) on `slug`. Populated\n   * from the store's `catalog.listDomains` when the connected catalog source\n   * exposes it; empty otherwise. The manage TUI joins `entry.domainSlug` → a\n   * domain for grouping headers, descriptions, and relation badges.\n   */\n  domains: CatalogDomain[];\n  notes: FeedNote[];\n}\n\n// ── Domain stamping (on-disk feeds) ──────────────────────────────────────────\n//\n// `scanRepo` (the source / library / factory scan path) does not read the\n// `DOMAIN.md` sidecars, so its entries arrive with no `domainSlug` and render\n// flat under their publisher band. We re-derive the grouping here from the\n// root's `DOMAIN.md` files (the same sidecars the remote store computes\n// server-side), and fall back to the repo/source name for any entry no domain\n// claims so it still groups instead of landing in the synthetic \"no domain\" pile.\n\n/** Repo-relative POSIX path (DOMAIN.md slugs are matched whole-segment, `/`-joined). */\nfunction toPosix(p: string): string {\n  return p.split(path.sep).join(\"/\");\n}\n\n/** Parse every `DOMAIN.md` sidecar under `root` into a {@link DomainMd}. */\nasync function loadDomainMds(root: string): Promise<DomainMd[]> {\n  const out: DomainMd[] = [];\n  for await (const { path: filePath, name } of walkDir(root)) {\n    if (name !== DOMAIN_MD_FILENAME) continue;\n    try {\n      const { data } = parseFrontmatter(readFileSync(filePath, \"utf8\"));\n      out.push(parseDomainMd(toPosix(path.relative(root, filePath)), data));\n    } catch {}\n  }\n  return out;\n}\n\n/**\n * Stamp `domainSlug` onto every entry scanned from `root` using the root's\n * `DOMAIN.md` sidecars. Returns the `CatalogDomain` registry for the real\n * domains, plus a synthetic fallback domain when any entry used the fallback.\n * Mutates `entries` in place (sets `entry.domainSlug`).\n *\n * `synthesizeFallback` (default true): entries no domain claims fall back to\n * `fallbackSlug` (the repo/source name). Pass `false` when the caller already\n * groups these entries one level up (e.g. the source feed groups by source\n * node) — unmatched entries then get no domain (`\"\"`) and hang directly under\n * that parent, instead of nesting under a same-named fallback domain.\n */\nasync function stampDomains(\n  root: string,\n  fallbackSlug: string,\n  entries: CatalogEntry[],\n  synthesizeFallback = true,\n): Promise<CatalogDomain[]> {\n  const domainMds = await loadDomainMds(root);\n  const assignables = entries.map((entry) => ({\n    entry,\n    ref: `${entry.kind}:${entry.name}`,\n    relativePath: toPosix(path.relative(root, entry.source)),\n  }));\n\n  let usedFallback = false;\n  for (const a of assignables) {\n    const slug = assignDomain(a.relativePath, domainMds);\n    if (slug) a.entry.domainSlug = slug;\n    else if (synthesizeFallback) {\n      a.entry.domainSlug = fallbackSlug;\n      usedFallback = true;\n    } else a.entry.domainSlug = \"\";\n  }\n\n  const { index } = buildDomainIndex(assignables, domainMds);\n  const catalog: CatalogDomain[] = Object.values(index).map((d) => ({\n    slug: d.slug,\n    title: d.title,\n    ...(d.description ? { description: d.description } : {}),\n    ...(d.relation ? { relation: d.relation } : {}),\n    ...(d.order !== undefined ? { order: d.order } : {}),\n    ...(d.recommended[0] ? { recommendedRef: d.recommended[0] } : {}),\n  }));\n  if (usedFallback) catalog.push({ slug: fallbackSlug, title: fallbackSlug });\n  return catalog;\n}\n\n/**\n * Pull assets from local libraries (the authoring places under\n * `~/.skaile/libraries/<name>/`, not the `~/.skaile/cache/sources/` cache). Each\n * library's `path` is scanned with `scanRepo` and grouped under the bare library\n * name (`group: <name>`) so the manage TUI shows a clean `<name>` band — no\n * `library:` prefix and no redundant same-named fallback domain (mirrors the\n * source feed).\n */\nasync function libraryAssets(): Promise<{\n  entries: OriginEntry[];\n  domains: CatalogDomain[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  const domains: CatalogDomain[] = [];\n  try {\n    const [{ openLibraryManager }, { skaileHomeDir }, { getGlobalCacheDir }] = await Promise.all([\n      import(\"./open-library.ts\"),\n      import(\"@skaile/workspaces/library\"),\n      import(\"@skaile/workspaces/core\"),\n    ]);\n    const { manager, close } = await openLibraryManager();\n    try {\n      // Authoring libraries are the rows that are NOT source clones. index.db\n      // rows predating the cache migration still carry the legacy\n      // ~/.skaile/sources path, so exclude both roots.\n      const newRoot = getGlobalCacheDir();\n      const legacyRoot = path.join(skaileHomeDir(), \"sources\");\n      const libs = (await manager.listLibraries()).filter(\n        (l) => !l.path.startsWith(newRoot) && !l.path.startsWith(legacyRoot),\n      );\n      const entries: OriginEntry[] = [];\n      for (const lib of libs) {\n        if (!existsSync(lib.path)) continue;\n        // Scan + group under the bare library name. `synthesizeFallback: false`\n        // (as the source feed does) keeps domainless assets directly under the\n        // library band instead of a redundant same-named fallback domain.\n        const libEntries = [...(await scanRepo(lib.path, lib.name))];\n        domains.push(...(await stampDomains(lib.path, lib.name, libEntries, false)));\n        for (const entry of libEntries) entries.push({ origin: \"library\", entry, group: lib.name });\n      }\n      return { entries, domains, notes };\n    } finally {\n      close();\n    }\n  } catch (err) {\n    notes.push({\n      feed: \"libraries\",\n      message: err instanceof Error ? err.message : String(err),\n    });\n    return { entries: [], domains, notes };\n  }\n}\n\n/**\n * Pull a (best-effort) snapshot of the connected remote store catalog.\n *\n * - Returns no entries when the resolved catalog is local-only or the host\n *   is unreachable (the failure becomes a note, not an exception).\n * - Maps `CatalogAsset` → `CatalogEntry`, carrying `publisher`, `repo`, and\n *   `category` straight through and using `source = \"store://<id>\"`; per-file\n *   `source` paths are not available for remote assets so the canonical ref is\n *   a stable placeholder.\n */\nasync function storeAssets(projectDir: string): Promise<{\n  entries: CatalogEntry[];\n  domains: CatalogDomain[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    const { resolveCatalogSource } = await import(\"./open-library.ts\");\n    const { source, close } = await resolveCatalogSource({ projectDir });\n    try {\n      const assets = await source.listAssets();\n      const entries: CatalogEntry[] = assets.map((a) => ({\n        name: a.name,\n        kind: (a.kind as AssetKind) ?? \"skill\",\n        description: a.description ?? \"\",\n        source: `store://${a.id}`,\n        publisher: a.publisher,\n        repo: a.repo,\n        domainSlug: a.domainSlug,\n        category: a.category,\n        version: a.version,\n        requires: [],\n        dependencies: [],\n      }));\n      // Domains are optional on the catalog source — only the store backend\n      // (post Part 4 `catalog.listDomains`) exposes them. Duck-type the call so\n      // older sources and the local catalog degrade to no domains, not an error.\n      const domains = await loadDomains(source);\n      return { entries, domains, notes };\n    } finally {\n      close();\n    }\n  } catch (err) {\n    const msg = err instanceof Error ? err.message : String(err);\n    // Local-only catalog throws a recognizable message — silence it; absence\n    // is the user's choice, not an error.\n    if (!/local/i.test(msg)) {\n      notes.push({ feed: \"store\", message: msg });\n    }\n    return { entries: [], domains: [], notes };\n  }\n}\n\n/** Optional `listDomains` capability — returns `[]` when the source lacks it. */\nasync function loadDomains(source: unknown): Promise<CatalogDomain[]> {\n  const fn = (source as { listDomains?: () => Promise<CatalogDomain[]> }).listDomains;\n  if (typeof fn !== \"function\") return [];\n  const domains = await fn.call(source);\n  return Array.isArray(domains) ? domains : [];\n}\n\n/** The slice of `AssetManager` the source feed needs (kept narrow for tests). */\ninterface AssetManagerLike {\n  search: () => Promise<CatalogEntry[]>;\n  searchRepoRoots: () => { repoName: string; root: string }[];\n}\n\n/**\n * Project-source feed: leans on `AssetManager.search()`, which now merges\n * `skaile.yaml`'s `sources:` field into the repositories map, then stamps\n * `DOMAIN.md`-derived domain grouping onto the scanned entries via\n * `searchRepoRoots()`.\n */\nasync function sourceAssets(\n  am: AssetManagerLike,\n): Promise<{ entries: OriginEntry[]; domains: CatalogDomain[] }> {\n  // The bundled factory tree is injected into the repositories map as an implicit\n  // source, so `am.search()` returns it too. It has its own `factory` origin band,\n  // so drop it here — otherwise the same first-party skills list twice under Sources.\n  const factoryPrefixes = factoryAssetRoots().map((r) => (r.endsWith(path.sep) ? r : r + path.sep));\n  const isFactoryPath = (p: string) =>\n    factoryPrefixes.some((fp) => p === fp.slice(0, -1) || p.startsWith(fp));\n\n  const all = (await am.search()).filter((e) => !isFactoryPath(e.source));\n  const entries: OriginEntry[] = [];\n  const domains: CatalogDomain[] = [];\n  // Group each source's entries under the source node (its short repo name), not\n  // the publisher: under Sources the navigational question is \"which repo did\n  // this come from\". Each entry's `source` (absolute manifest path) lives under\n  // exactly one declared root, so group + stamp by prefix. The cache slug is\n  // URL-keyed `github.com/<org>/<repo>` — take the trailing segment.\n  for (const { repoName, root } of am.searchRepoRoots()) {\n    if (isFactoryPath(root)) continue;\n    const prefix = root.endsWith(path.sep) ? root : root + path.sep;\n    const owned = all.filter((e) => e.source === root || e.source.startsWith(prefix));\n    if (owned.length === 0) continue;\n    const sourceName = repoName.split(\"/\").pop() || repoName;\n    // No synthetic fallback domain — the source node already groups these, so a\n    // same-named fallback would just nest the source under itself.\n    domains.push(...(await stampDomains(root, sourceName, owned, false)));\n    for (const entry of owned) entries.push({ origin: \"source\", entry, group: sourceName });\n  }\n  return { entries, domains };\n}\n\n/**\n * Factory-asset feed: scan the bundled first-party `factory-assets` tree(s)\n * resolved by `factoryAssetRoots()` (the `SKAILE_FACTORY_ASSETS_DIR` override\n * layer ahead of the bundled tree). Local disk only, no network — the entries are\n * the built-in skills / connectors / bundles that ship with `@skaile/workspaces`.\n * `factoryAssetRoots()` already dedupes, so the env override pointing at the\n * bundled dir collapses to one root.\n */\nasync function factoryAssets(): Promise<{\n  entries: CatalogEntry[];\n  domains: CatalogDomain[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  const domains: CatalogDomain[] = [];\n  try {\n    const entries: CatalogEntry[] = [];\n    for (const root of factoryAssetRoots()) {\n      const rootEntries = [...(await scanRepo(root, \"skaile-factory\"))];\n      domains.push(...(await stampDomains(root, \"skaile-factory\", rootEntries)));\n      entries.push(...rootEntries);\n    }\n    return { entries, domains, notes };\n  } catch (err) {\n    notes.push({\n      feed: \"factory\",\n      message: err instanceof Error ? err.message : String(err),\n    });\n    return { entries: [], domains, notes };\n  }\n}\n\n/** Tag a flat entry list with a single origin. */\nfunction tag(origin: AssetOrigin, entries: CatalogEntry[]): OriginEntry[] {\n  return entries.map((entry) => ({ origin, entry }));\n}\n\n/**\n * Run all feeds and return a single normalized result.\n *\n * Feeds run in parallel where possible — the store fetch is the slow one\n * (one HTTP call) and is fired alongside the local library walk. The factory\n * scan is local disk only, so it runs inline.\n */\nexport async function gatherAssetFeeds(\n  am: AssetManagerLike,\n  projectDir: string,\n): Promise<AssetFeedResult> {\n  const [libs, store] = await Promise.all([libraryAssets(), storeAssets(projectDir)]);\n  const factory = await factoryAssets();\n  const src = await sourceAssets(am);\n  return {\n    entries: [\n      ...src.entries,\n      ...libs.entries,\n      ...tag(\"factory\", factory.entries),\n      ...tag(\"store\", store.entries),\n    ],\n    // Store domains first (server-curated), then the on-disk feeds; dedupe by\n    // slug, first-wins, so a store-served domain shadows a same-slug local one.\n    domains: dedupeBySlug([...store.domains, ...src.domains, ...libs.domains, ...factory.domains]),\n    notes: [...libs.notes, ...store.notes, ...factory.notes],\n  };\n}\n\n/** First-wins dedupe of a domain list by `slug`. */\nfunction dedupeBySlug(domains: CatalogDomain[]): CatalogDomain[] {\n  const seen = new Set<string>();\n  const out: CatalogDomain[] = [];\n  for (const d of domains) {\n    if (seen.has(d.slug)) continue;\n    seen.add(d.slug);\n    out.push(d);\n  }\n  return out;\n}\n"]}

package/dist/asset-manager/catalog-deployer.js

@@ -1,15 +1,17 @@
 export { WORKSPACE_MOUNT_ENV_VAR, deployAll, deployCatalogEntry, findAiAssetsRoot, isUnderWorkspaceMount, resolveFlowSkills, undeployCatalogEntry, workspaceMountDirs } from '../chunk-7BUZQVRR.js';
-import '../chunk-HSRHO7SK.js';
+import '../chunk-3VSRJE3M.js';
+import '../chunk-REILIKVM.js';
 import '../chunk-F3HNW354.js';
 import '../chunk-K5GBV4SA.js';
 import '../chunk-QVZA2MDT.js';
-import '../chunk-IB4XKQMQ.js';
-import '../chunk-MBARHWMZ.js';
+import '../chunk-K27T47OO.js';
 import '../chunk-MENCWIHW.js';
 import '../chunk-P4VHQA4N.js';
 import '../chunk-MKZOK4JU.js';
 import '../chunk-GEEW6SY2.js';
 import '../chunk-FTG7CRFD.js';
+import '../chunk-KSIRR5PL.js';
+import '../chunk-ILG4BXYE.js';
 import '../chunk-W4IPN3DD.js';
 import '../chunk-NSBPE2FW.js';
 //# sourceMappingURL=catalog-deployer.js.map