@skaile/workspaces 4.11.0 → 4.13.0

package/CHANGELOG.md

@@ -1,5 +1,35 @@
 # Changelog
 
+## 4.13.0
+
+### Minor Changes
+
+- [#821](https://github.com/skaile-ai/workspaces/pull/821) [`8fa1926`](https://github.com/skaile-ai/workspaces/commit/8fa1926a427dd7c5a129f5ad408eb495ce3fbdf2) Thanks [@Frozen666](https://github.com/Frozen666)! - claude-sdk driver: drop MCP tools whose input schema the Claude API would reject (a top-level property key outside `^[a-zA-Z0-9_.-]{1,64}$`, or a schema that is not valid JSON Schema draft 2020-12) before they reach the CLI. The CLI does this itself only after fetching its remote feature flags, so with `DISABLE_TELEMETRY=1` one bad tool failed every turn with a 400. In-process servers get both checks on their `tools/list` output; capability tools (runner-managed external MCP) get the key check on their declared schema, since the loose Zod conversion keeps keys but always yields a valid 2020-12 shape otherwise. A draft-07-only construct such as a `z.tuple()` on an in-process tool is dropped on purpose. Dropped tools are logged (`kind: mcp`) and named to the agent in one system-prompt line; valid tools on the same server stay. The driver also passes `strictMcpConfig: true`, so a workspace repo's `.mcp.json` is no longer loaded into SDK sessions behind the runner's back. Adds `ajv` as a direct dependency.
+
+- [#807](https://github.com/skaile-ai/workspaces/pull/807) [`59e5778`](https://github.com/skaile-ai/workspaces/commit/59e5778898fcbe5b975e5a7cdd9387d173f276c7) Thanks [@Frozen666](https://github.com/Frozen666)! - Tier the managed-compaction threshold by the resolved context window: 40% on a window of 1 000 000 tokens or more, 80% below and for an unknown window. Before, a flat 80% became an 800k-token trigger once the drivers started to report a 1M window for plain `claude-opus-5` and `claude-fable-5-1`, and turns above 400k context cost most of the spend. New `compaction:` keys `largeWindowThresholdPercent` (default 40), `smallWindowThresholdPercent` (default 80) and `largeWindowMinTokens` (default 1000000) set the tiers; `thresholdPercent` no longer has a default and, when set, overrides both tiers. `COMPACTION_DEFAULTS.thresholdPercent` is now `undefined`. New export `resolveCompactionThresholdPercent(contextWindow, config?)` from `@skaile/workspaces/core` holds the rule. `mergeSkWorkspaceConfigs` no longer drops the `compaction:` and `patches:` blocks when config files are layered; it merges each per key, the overlay winning.
+
+### Patch Changes
+
+- [#811](https://github.com/skaile-ai/workspaces/pull/811) [`ff8eac0`](https://github.com/skaile-ai/workspaces/commit/ff8eac0b09a5c557a99f465d18f69be5d0c0f9ed) Thanks [@Frozen666](https://github.com/Frozen666)! - The runner now honours the `skaile.yaml` `logging:` block at session start. The config decoder dropped the key, so the `LogStore` always booted with the defaults and a saved log level or retention had no effect until it was pushed live. `SkWorkspaceConfig` gains a typed `logging` key (new type export `LoggingConfig` from `@skaile/workspaces/core`: `mode`, `level`, `retention.{maxEntries, maxAgeDays}`); `decodeSkaileYaml` keeps it and drops an unknown `mode` or `level`, or a retention limit that is not a number of 0 or more, with a warning diagnostic (the runner then uses the default), and `mergeSkWorkspaceConfigs` merges it per key.
+
+## 4.12.0
+
+### Minor Changes
+
+- [#793](https://github.com/skaile-ai/workspaces/pull/793) [`b4da777`](https://github.com/skaile-ai/workspaces/commit/b4da7772314b6ccc3bb80f76c1a7fa4f23ea6c09) Thanks [@Frozen666](https://github.com/Frozen666)! - The strict Flow v2 parser now refuses `control.optional: true` on a `router` node that can run, with an error at `nodes.<i>.control.optional` naming the router. A skipped router satisfies every outgoing edge at once, turning a branch point into a fan-out, so an optional router was a latent trap that validated clean and misbehaved only once its retries ran out. The inert placeholder the v1 normalizer emits for every non-executable legacy node (`contract.requires: [{ expr: "false" }]` plus `control.optional: true`) is exempt: it never becomes available, so it can neither fail nor branch, and `optional` is what lets such a run reach `done`. The runtime's refusal to degrade a router to `skipped` stays in place as defence in depth.
+
+  Breaking-change scope: minor rather than patch because a stored v2 document carrying an optional runnable router would now fail at every ingress (session flow start, run-group route and handler, scheduler re-parse). A census of all 21 shipped flows found none: every one of the 30 optional routers they normalize to is an inert placeholder, and all flows that passed the strict JSON round trip before this change still pass it. No host action is needed.
+
+### Patch Changes
+
+- [#806](https://github.com/skaile-ai/workspaces/pull/806) [`1f5c7bd`](https://github.com/skaile-ai/workspaces/commit/1f5c7bdebba88af6b75ee13bc56c3db84b32bab7) Thanks [@Frozen666](https://github.com/Frozen666)! - Treat an Anthropic base URL ending in `/v1` (or `/`) as the same endpoint in every driver. `https://api.anthropic.com/v1` on the `anthropic` preset is now the stock endpoint for OpenCode, Goose and Continue, so they name it `anthropic` and write no provider file for it. omp and Goose get an `anthropic-messages` endpoint as its host root, because their clients append `/v1/messages`; OpenCode and Continue get `<host root>/v1`, because theirs append `/messages`. OpenAI-style base URLs are unchanged. New exports from `@skaile/workspaces/core/provider-registry`: `normalizeAnthropicBaseUrl` and `normalizeEntryBaseUrl`.
+
+- [#792](https://github.com/skaile-ai/workspaces/pull/792) [`510e920`](https://github.com/skaile-ai/workspaces/commit/510e9204d72e5899718578b80ded7a1985ea8f0a) Thanks [@Frozen666](https://github.com/Frozen666)! - Make the `install` and `connectors/config` subpaths loadable by CommonJS-transpiling consumers (e.g. ts-jest). Their static import graphs no longer reach the `core` / `core/logging` barrels, whose shared chunks carry `import.meta`; they import the narrow core modules instead. `install`, `connectors/config` and `discovery` join `bridge/codex-app-server` in the `check:import-meta` CI gate, which now documents that list as the package's committed CJS-safe entries. `factory-assets/connectors/flow/engine` stays out of that list: its `locate` module resolves the packaged factory assets through `import.meta.url`.
+
+- [#804](https://github.com/skaile-ai/workspaces/pull/804) [`e421be1`](https://github.com/skaile-ai/workspaces/commit/e421be1ec5755de92763069c91915d8a94d6ca4b) Thanks [@Frozen666](https://github.com/Frozen666)! - Stop credentials embedded in a mount source from reaching the log store. Every string a logger records — the message, each `data` value, the error message and stack — now passes through `redactCredentials`, which blanks URL userinfo (`https://user:token@host`, `s3://key:secret@bucket`, a password containing `@`), a scheme-less `user:secret@host`, secret-named query parameters (`?access_token=`, `X-Amz-Signature=`), rclone connection-string parameters (`pass=`, `secret_access_key=`) and rclone `--…-pass=` flags, and keeps host and path. A `data` field named like a secret (`token`, `password`, `apiKey`, `client_secret`, …; not bare `key`, `auth` or `sig`) is blanked whole, also under `SKAILE_LOG_CONTENT=1`. Before, the git driver logged `mount.source` verbatim at `mount start`, so a token in the declared URL went to SQLite, stdout and the gateway forward. A failed connect's `error` and `source` — returned by `listFailedConnectors()` and the agent's `connector_list` tool, and sent as `connector_status.error` — are redacted the same way. `redactCredentials` is exported from `@skaile/workspaces/core/logging`; the git driver and the runner lifecycle handler now use it in place of their own copies.
+
+- [#797](https://github.com/skaile-ai/workspaces/pull/797) [`03d9da1`](https://github.com/skaile-ai/workspaces/commit/03d9da10957e4baa888569cd0b1a8e9f6e12313f) Thanks [@Frozen666](https://github.com/Frozen666)! - Stop logging session content from the runner. Capability calls now log metadata only — call id, duration, outcome, error name and code, input and output size in bytes — instead of the full input, output and error; a failed fire-and-forget call logs only the capability name and call id. The full system prompt is no longer logged at debug; only its length is. Both come back with `SKAILE_LOG_CONTENT=1`, a local-development opt-in that is off by default. `SKAILE_LOG_SYSTEM_PROMPT` is gone: the prompt text used to be logged unless it was set to `0`. `BridgeCapabilityHooks.invoke` takes an optional fourth `callId` argument.
+
 ## 4.11.0
 
 ### Minor Changes

package/dist/{asset-feeds-3TOP4ZKE.js → asset-feeds-AAQOGRLM.js}

@@ -1,20 +1,21 @@
-import { assignDomain, buildDomainIndex, DOMAIN_MD_FILENAME, parseDomainMd } from './chunk-M5H4DWIA.js';
+import { assignDomain, buildDomainIndex, DOMAIN_MD_FILENAME, parseDomainMd } from './chunk-HGPSZXZP.js';
 import './chunk-JXT46QFC.js';
-import './chunk-JECDED7B.js';
+import './chunk-7NRF7BQB.js';
 import './chunk-4GY63JU6.js';
-import { factoryAssetRoots } from './chunk-WILO77HE.js';
+import { factoryAssetRoots } from './chunk-NXTLDFLA.js';
 import './chunk-F3HNW354.js';
 import './chunk-K5GBV4SA.js';
 import './chunk-QVZA2MDT.js';
-import { scanRepo } from './chunk-HO4UO25I.js';
+import { scanRepo } from './chunk-QWGSKDD7.js';
 import './chunk-MENCWIHW.js';
 import './chunk-P4VHQA4N.js';
-import { walkDir, parseFrontmatter } from './chunk-MKZOK4JU.js';
+import { walkDir, parseFrontmatter } from './chunk-2FBPAR2V.js';
 import './chunk-GEEW6SY2.js';
-import './chunk-3HKYCT2M.js';
-import './chunk-KSIRR5PL.js';
-import './chunk-ILG4BXYE.js';
-import './chunk-W4IPN3DD.js';
+import './chunk-JMKB7IB4.js';
+import './chunk-DPLIN2RA.js';
+import './chunk-GZZPKAV5.js';
+import './chunk-C3CAXQMA.js';
+import './chunk-BOFL7GIF.js';
 import './chunk-N7B3LZ7V.js';
 import './chunk-NSBPE2FW.js';
 import { existsSync, readFileSync } from 'fs';
@@ -68,7 +69,7 @@ async function libraryAssets() {
   const domains = [];
   try {
     const [{ openLibraryManager }, { skaileHomeDir }, { getGlobalCacheDir }] = await Promise.all([
-      import('./open-library-HDOM4MLS.js'),
+      import('./open-library-SF2F7NDS.js'),
       import('./library/index.js'),
       import('./core/index.js')
     ]);
@@ -101,7 +102,7 @@ async function libraryAssets() {
 async function storeAssets(projectDir) {
   const notes = [];
   try {
-    const { resolveCatalogSource } = await import('./open-library-HDOM4MLS.js');
+    const { resolveCatalogSource } = await import('./open-library-SF2F7NDS.js');
     const { source, close } = await resolveCatalogSource({ projectDir });
     try {
       const assets = await source.listAssets();
@@ -205,5 +206,5 @@ function dedupeBySlug(domains) {
 }
 
 export { gatherAssetFeeds };
-//# sourceMappingURL=asset-feeds-3TOP4ZKE.js.map
-//# sourceMappingURL=asset-feeds-3TOP4ZKE.js.map
+//# sourceMappingURL=asset-feeds-AAQOGRLM.js.map
+//# sourceMappingURL=asset-feeds-AAQOGRLM.js.map

package/dist/asset-feeds-AAQOGRLM.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../cli/src/asset-feeds.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAqFA,SAAS,QAAQ,CAAA,EAAmB;AAClC,EAAA,OAAO,CAAA,CAAE,KAAA,CAAW,IAAA,CAAA,GAAG,CAAA,CAAE,KAAK,GAAG,CAAA;AACnC;AAGA,eAAe,cAAc,IAAA,EAAmC;AAC9D,EAAA,MAAM,MAAkB,EAAC;AACzB,EAAA,WAAA,MAAiB,EAAE,IAAA,EAAM,QAAA,EAAU,MAAK,IAAK,OAAA,CAAQ,IAAI,CAAA,EAAG;AAC1D,IAAA,IAAI,SAAS,kBAAA,EAAoB;AACjC,IAAA,IAAI;AACF,MAAA,MAAM,EAAE,IAAA,EAAK,GAAI,iBAAiB,YAAA,CAAa,QAAA,EAAU,MAAM,CAAC,CAAA;AAChE,MAAA,GAAA,CAAI,IAAA,CAAK,cAAc,OAAA,CAAa,IAAA,CAAA,QAAA,CAAS,MAAM,QAAQ,CAAC,CAAA,EAAG,IAAI,CAAC,CAAA;AAAA,IACtE,CAAA,CAAA,MAAQ;AAAA,IAAC;AAAA,EACX;AACA,EAAA,OAAO,GAAA;AACT;AAcA,eAAe,YAAA,CACb,IAAA,EACA,YAAA,EACA,OAAA,EACA,qBAAqB,IAAA,EACK;AAC1B,EAAA,MAAM,SAAA,GAAY,MAAM,aAAA,CAAc,IAAI,CAAA;AAC1C,EAAA,MAAM,WAAA,GAAc,OAAA,CAAQ,GAAA,CAAI,CAAC,KAAA,MAAW;AAAA,IAC1C,KAAA;AAAA,IACA,KAAK,CAAA,EAAG,KAAA,CAAM,IAAI,CAAA,CAAA,EAAI,MAAM,IAAI,CAAA,CAAA;AAAA,IAChC,cAAc,OAAA,CAAa,IAAA,CAAA,QAAA,CAAS,IAAA,EAAM,KAAA,CAAM,MAAM,CAAC;AAAA,GACzD,CAAE,CAAA;AAEF,EAAA,IAAI,YAAA,GAAe,KAAA;AACnB,EAAA,KAAA,MAAW,KAAK,WAAA,EAAa;AAC3B,IAAA,MAAM,IAAA,GAAO,YAAA,CAAa,CAAA,CAAE,YAAA,EAAc,SAAS,CAAA;AACnD,IAAA,IAAI,IAAA,EAAM,CAAA,CAAE,KAAA,CAAM,UAAA,GAAa,IAAA;AAAA,SAAA,IACtB,kBAAA,EAAoB;AAC3B,MAAA,CAAA,CAAE,MAAM,UAAA,GAAa,YAAA;AACrB,MAAA,YAAA,GAAe,IAAA;AAAA,IACjB,CAAA,MAAO,CAAA,CAAE,KAAA,CAAM,UAAA,GAAa,EAAA;AAAA,EAC9B;AAEA,EAAA,MAAM,EAAE,KAAA,EAAM,GAAI,gBAAA,CAAiB,aAAa,SAAS,CAAA;AACzD,EAAA,MAAM,UAA2B,MAAA,CAAO,MAAA,CAAO,KAAK,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,IAChE,MAAM,CAAA,CAAE,IAAA;AAAA,IACR,OAAO,CAAA,CAAE,KAAA;AAAA,IACT,GAAI,EAAE,WAAA,GAAc,EAAE,aAAa,CAAA,CAAE,WAAA,KAAgB,EAAC;AAAA,IACtD,GAAI,EAAE,QAAA,GAAW,EAAE,UAAU,CAAA,CAAE,QAAA,KAAa,EAAC;AAAA,IAC7C,GAAI,EAAE,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,CAAA,CAAE,KAAA,EAAM,GAAI,EAAC;AAAA,IAClD,GAAI,CAAA,CAAE,WAAA,CAAY,CAAC,CAAA,GAAI,EAAE,cAAA,EAAgB,CAAA,CAAE,WAAA,CAAY,CAAC,CAAA,EAAE,GAAI;AAAC,GACjE,CAAE,CAAA;AACF,EAAA,IAAI,YAAA,UAAsB,IAAA,CAAK,EAAE,MAAM,YAAA,EAAc,KAAA,EAAO,cAAc,CAAA;AAC1E,EAAA,OAAO,OAAA;AACT;AAUA,eAAe,aAAA,GAIZ;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,MAAM,UAA2B,EAAC;AAClC,EAAA,IAAI;AACF,IAAA,MAAM,CAAC,EAAE,kBAAA,EAAmB,EAAG,EAAE,aAAA,EAAc,EAAG,EAAE,iBAAA,EAAmB,CAAA,GAAI,MAAM,QAAQ,GAAA,CAAI;AAAA,MAC3F,OAAO,4BAAmB,CAAA;AAAA,MAC1B,OAAO,oBAA4B,CAAA;AAAA,MACnC,OAAO,iBAAyB;AAAA,KACjC,CAAA;AACD,IAAA,MAAM,EAAE,OAAA,EAAS,KAAA,EAAM,GAAI,MAAM,kBAAA,EAAmB;AACpD,IAAA,IAAI;AAIF,MAAA,MAAM,UAAU,iBAAA,EAAkB;AAClC,MAAA,MAAM,UAAA,GAAkB,IAAA,CAAA,IAAA,CAAK,aAAA,EAAc,EAAG,SAAS,CAAA;AACvD,MAAA,MAAM,IAAA,GAAA,CAAQ,MAAM,OAAA,CAAQ,aAAA,EAAc,EAAG,MAAA;AAAA,QAC3C,CAAC,CAAA,KAAM,CAAC,CAAA,CAAE,IAAA,CAAK,UAAA,CAAW,OAAO,CAAA,IAAK,CAAC,CAAA,CAAE,IAAA,CAAK,UAAA,CAAW,UAAU;AAAA,OACrE;AACA,MAAA,MAAM,UAAyB,EAAC;AAChC,MAAA,KAAA,MAAW,OAAO,IAAA,EAAM;AACtB,QAAA,IAAI,CAAC,UAAA,CAAW,GAAA,CAAI,IAAI,CAAA,EAAG;AAI3B,QAAA,MAAM,UAAA,GAAa,CAAC,GAAI,MAAM,SAAS,GAAA,CAAI,IAAA,EAAM,GAAA,CAAI,IAAI,CAAE,CAAA;AAC3D,QAAA,OAAA,CAAQ,IAAA,CAAK,GAAI,MAAM,YAAA,CAAa,GAAA,CAAI,MAAM,GAAA,CAAI,IAAA,EAAM,UAAA,EAAY,KAAK,CAAE,CAAA;AAC3E,QAAA,KAAA,MAAW,KAAA,IAAS,UAAA,EAAY,OAAA,CAAQ,IAAA,CAAK,EAAE,MAAA,EAAQ,SAAA,EAAW,KAAA,EAAO,KAAA,EAAO,GAAA,CAAI,IAAA,EAAM,CAAA;AAAA,MAC5F;AACA,MAAA,OAAO,EAAE,OAAA,EAAS,OAAA,EAAS,KAAA,EAAM;AAAA,IACnC,CAAA,SAAE;AACA,MAAA,KAAA,EAAM;AAAA,IACR;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,IAAA,EAAM,WAAA;AAAA,MACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACzD,CAAA;AACD,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,SAAS,KAAA,EAAM;AAAA,EACvC;AACF;AAYA,eAAe,YAAY,UAAA,EAIxB;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AACF,IAAA,MAAM,EAAE,oBAAA,EAAqB,GAAI,MAAM,OAAO,4BAAmB,CAAA;AACjE,IAAA,MAAM,EAAE,QAAQ,KAAA,EAAM,GAAI,MAAM,oBAAA,CAAqB,EAAE,YAAY,CAAA;AACnE,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,UAAA,EAAW;AACvC,MAAA,MAAM,OAAA,GAA0B,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,QACjD,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,IAAA,EAAO,EAAE,IAAA,IAAsB,OAAA;AAAA,QAC/B,WAAA,EAAa,EAAE,WAAA,IAAe,EAAA;AAAA,QAC9B,MAAA,EAAQ,CAAA,QAAA,EAAW,CAAA,CAAE,EAAE,CAAA,CAAA;AAAA,QACvB,WAAW,CAAA,CAAE,SAAA;AAAA,QACb,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,YAAY,CAAA,CAAE,UAAA;AAAA,QACd,UAAU,CAAA,CAAE,QAAA;AAAA,QACZ,SAAS,CAAA,CAAE,OAAA;AAAA,QACX,UAAU,EAAC;AAAA,QACX,cAAc;AAAC,OACjB,CAAE,CAAA;AAIF,MAAA,MAAM,OAAA,GAAU,MAAM,WAAA,CAAY,MAAM,CAAA;AACxC,MAAA,OAAO,EAAE,OAAA,EAAS,OAAA,EAAS,KAAA,EAAM;AAAA,IACnC,CAAA,SAAE;AACA,MAAA,KAAA,EAAM;AAAA,IACR;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,MAAM,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAG3D,IAAA,IAAI,CAAC,QAAA,CAAS,IAAA,CAAK,GAAG,CAAA,EAAG;AACvB,MAAA,KAAA,CAAM,KAAK,EAAE,IAAA,EAAM,OAAA,EAAS,OAAA,EAAS,KAAK,CAAA;AAAA,IAC5C;AACA,IAAA,OAAO,EAAE,OAAA,EAAS,IAAI,OAAA,EAAS,IAAI,KAAA,EAAM;AAAA,EAC3C;AACF;AAGA,eAAe,YAAY,MAAA,EAA2C;AACpE,EAAA,MAAM,KAAM,MAAA,CAA4D,WAAA;AACxE,EAAA,IAAI,OAAO,EAAA,KAAO,UAAA,EAAY,OAAO,EAAC;AACtC,EAAA,MAAM,OAAA,GAAU,MAAM,EAAA,CAAG,IAAA,CAAK,MAAM,CAAA;AACpC,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,OAAO,CAAA,GAAI,UAAU,EAAC;AAC7C;AAcA,eAAe,aACb,EAAA,EAC+D;AAI/D,EAAA,MAAM,eAAA,GAAkB,iBAAA,EAAkB,CAAE,GAAA,CAAI,CAAC,CAAA,KAAO,CAAA,CAAE,QAAA,CAAc,IAAA,CAAA,GAAG,CAAA,GAAI,CAAA,GAAI,CAAA,GAAS,IAAA,CAAA,GAAI,CAAA;AAChG,EAAA,MAAM,gBAAgB,CAAC,CAAA,KACrB,eAAA,CAAgB,IAAA,CAAK,CAAC,EAAA,KAAO,CAAA,KAAM,EAAA,CAAG,KAAA,CAAM,GAAG,EAAE,CAAA,IAAK,CAAA,CAAE,UAAA,CAAW,EAAE,CAAC,CAAA;AAExE,EAAA,MAAM,GAAA,GAAA,CAAO,MAAM,EAAA,CAAG,MAAA,EAAO,EAAG,MAAA,CAAO,CAAC,CAAA,KAAM,CAAC,aAAA,CAAc,CAAA,CAAE,MAAM,CAAC,CAAA;AACtE,EAAA,MAAM,UAAyB,EAAC;AAChC,EAAA,MAAM,UAA2B,EAAC;AAMlC,EAAA,KAAA,MAAW,EAAE,QAAA,EAAU,IAAA,EAAK,IAAK,EAAA,CAAG,iBAAgB,EAAG;AACrD,IAAA,IAAI,aAAA,CAAc,IAAI,CAAA,EAAG;AACzB,IAAA,MAAM,SAAS,IAAA,CAAK,QAAA,CAAc,IAAA,CAAA,GAAG,CAAA,GAAI,OAAO,IAAA,GAAY,IAAA,CAAA,GAAA;AAC5D,IAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,MAAA,KAAW,IAAA,IAAQ,CAAA,CAAE,MAAA,CAAO,UAAA,CAAW,MAAM,CAAC,CAAA;AAChF,IAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG;AACxB,IAAA,MAAM,aAAa,QAAA,CAAS,KAAA,CAAM,GAAG,CAAA,CAAE,KAAI,IAAK,QAAA;AAGhD,IAAA,OAAA,CAAQ,IAAA,CAAK,GAAI,MAAM,YAAA,CAAa,MAAM,UAAA,EAAY,KAAA,EAAO,KAAK,CAAE,CAAA;AACpE,IAAA,KAAA,MAAW,KAAA,IAAS,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,EAAE,QAAQ,QAAA,EAAU,KAAA,EAAO,KAAA,EAAO,UAAA,EAAY,CAAA;AAAA,EACxF;AACA,EAAA,OAAO,EAAE,SAAS,OAAA,EAAQ;AAC5B;AAUA,eAAe,aAAA,GAIZ;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,MAAM,UAA2B,EAAC;AAClC,EAAA,IAAI;AACF,IAAA,MAAM,UAA0B,EAAC;AACjC,IAAA,KAAA,MAAW,IAAA,IAAQ,mBAAkB,EAAG;AACtC,MAAA,MAAM,cAAc,CAAC,GAAI,MAAM,QAAA,CAAS,IAAA,EAAM,gBAAgB,CAAE,CAAA;AAChE,MAAA,OAAA,CAAQ,KAAK,GAAI,MAAM,aAAa,IAAA,EAAM,gBAAA,EAAkB,WAAW,CAAE,CAAA;AACzE,MAAA,OAAA,CAAQ,IAAA,CAAK,GAAG,WAAW,CAAA;AAAA,IAC7B;AACA,IAAA,OAAO,EAAE,OAAA,EAAS,OAAA,EAAS,KAAA,EAAM;AAAA,EACnC,SAAS,GAAA,EAAK;AACZ,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,IAAA,EAAM,SAAA;AAAA,MACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACzD,CAAA;AACD,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,SAAS,KAAA,EAAM;AAAA,EACvC;AACF;AAGA,SAAS,GAAA,CAAI,QAAqB,OAAA,EAAwC;AACxE,EAAA,OAAO,QAAQ,GAAA,CAAI,CAAC,WAAW,EAAE,MAAA,EAAQ,OAAM,CAAE,CAAA;AACnD;AASA,eAAsB,gBAAA,CACpB,IACA,UAAA,EAC0B;AAC1B,EAAA,MAAM,CAAC,IAAA,EAAM,KAAK,CAAA,GAAI,MAAM,OAAA,CAAQ,GAAA,CAAI,CAAC,aAAA,EAAc,EAAG,WAAA,CAAY,UAAU,CAAC,CAAC,CAAA;AAClF,EAAA,MAAM,OAAA,GAAU,MAAM,aAAA,EAAc;AACpC,EAAA,MAAM,GAAA,GAAM,MAAM,YAAA,CAAa,EAAE,CAAA;AACjC,EAAA,OAAO;AAAA,IACL,OAAA,EAAS;AAAA,MACP,GAAG,GAAA,CAAI,OAAA;AAAA,MACP,GAAG,IAAA,CAAK,OAAA;AAAA,MACR,GAAG,GAAA,CAAI,SAAA,EAAW,OAAA,CAAQ,OAAO,CAAA;AAAA,MACjC,GAAG,GAAA,CAAI,OAAA,EAAS,KAAA,CAAM,OAAO;AAAA,KAC/B;AAAA;AAAA;AAAA,IAGA,OAAA,EAAS,YAAA,CAAa,CAAC,GAAG,MAAM,OAAA,EAAS,GAAG,GAAA,CAAI,OAAA,EAAS,GAAG,IAAA,CAAK,OAAA,EAAS,GAAG,OAAA,CAAQ,OAAO,CAAC,CAAA;AAAA,IAC7F,KAAA,EAAO,CAAC,GAAG,IAAA,CAAK,KAAA,EAAO,GAAG,KAAA,CAAM,KAAA,EAAO,GAAG,OAAA,CAAQ,KAAK;AAAA,GACzD;AACF;AAGA,SAAS,aAAa,OAAA,EAA2C;AAC/D,EAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAC7B,EAAA,MAAM,MAAuB,EAAC;AAC9B,EAAA,KAAA,MAAW,KAAK,OAAA,EAAS;AACvB,IAAA,IAAI,IAAA,CAAK,GAAA,CAAI,CAAA,CAAE,IAAI,CAAA,EAAG;AACtB,IAAA,IAAA,CAAK,GAAA,CAAI,EAAE,IAAI,CAAA;AACf,IAAA,GAAA,CAAI,KAAK,CAAC,CAAA;AAAA,EACZ;AACA,EAAA,OAAO,GAAA;AACT","file":"asset-feeds-AAQOGRLM.js","sourcesContent":["/**\n * asset-feeds.ts — gather installable assets from every feed the manage TUI\n * surfaces.\n *\n * Four feeds, normalized into `CatalogEntry`:\n * - **Project sources** — `skaile.yaml` `sources:` entries (scanned via\n *   `AssetManager.search()`; the new `sources:` field is merged into the\n *   legacy repositories map in `AssetManager.loadConfig`).\n * - **Local libraries** — user authoring places from `LocalIndex` (filesystem\n *   scan of each library's `path`).\n * - **Factory assets** — the bundled first-party `factory-assets` tree\n *   (`factoryAssetRoots()`), scanned from disk. Always present; no network.\n * - **Remote store** — the configured catalog source when `catalog.url` is\n *   not `local`. Failures are non-fatal — they surface as notes.\n */\n\nimport { existsSync, readFileSync } from \"node:fs\";\nimport * as path from \"node:path\";\nimport {\n  type AssetKind,\n  type CatalogDomain,\n  type CatalogEntry,\n  factoryAssetRoots,\n  parseFrontmatter,\n  scanRepo,\n  walkDir,\n} from \"@skaile/workspaces/core\";\nimport {\n  assignDomain,\n  buildDomainIndex,\n  DOMAIN_MD_FILENAME,\n  type DomainMd,\n  parseDomainMd,\n} from \"@skaile/workspaces/discovery\";\n\n/** One non-fatal note returned to the caller for surfacing in the UI. */\nexport interface FeedNote {\n  feed: \"sources\" | \"libraries\" | \"store\" | \"factory\";\n  message: string;\n}\n\n/**\n * Which feed an asset came from. This is the top-level grouping axis in the\n * manage TUI (\"where is this skill coming from?\") and is intentionally distinct\n * from `publisher` (asset-intrinsic identity): the same publisher can legitimately\n * appear under more than one origin (e.g. a github repo you added as a `source`\n * that is also listed in the remote `store`).\n */\nexport type AssetOrigin = \"source\" | \"library\" | \"factory\" | \"store\";\n\n/** A catalog entry tagged with the feed it was gathered from. */\nexport interface OriginEntry {\n  origin: AssetOrigin;\n  entry: CatalogEntry;\n  /**\n   * Second-level grouping label for the manage tree. Defaults (when unset) to the\n   * entry's `publisher`; the source feed sets it to the source's short repo name\n   * so the Sources band groups by source — \"which repo did this come from\" — not\n   * by the asset-intrinsic publisher.\n   */\n  group?: string;\n}\n\nexport interface AssetFeedResult {\n  entries: OriginEntry[];\n  /**\n   * Display-only domain metadata, keyed (by the consumer) on `slug`. Populated\n   * from the store's `catalog.listDomains` when the connected catalog source\n   * exposes it; empty otherwise. The manage TUI joins `entry.domainSlug` → a\n   * domain for grouping headers, descriptions, and relation badges.\n   */\n  domains: CatalogDomain[];\n  notes: FeedNote[];\n}\n\n// ── Domain stamping (on-disk feeds) ──────────────────────────────────────────\n//\n// `scanRepo` (the source / library / factory scan path) does not read the\n// `DOMAIN.md` sidecars, so its entries arrive with no `domainSlug` and render\n// flat under their publisher band. We re-derive the grouping here from the\n// root's `DOMAIN.md` files (the same sidecars the remote store computes\n// server-side), and fall back to the repo/source name for any entry no domain\n// claims so it still groups instead of landing in the synthetic \"no domain\" pile.\n\n/** Repo-relative POSIX path (DOMAIN.md slugs are matched whole-segment, `/`-joined). */\nfunction toPosix(p: string): string {\n  return p.split(path.sep).join(\"/\");\n}\n\n/** Parse every `DOMAIN.md` sidecar under `root` into a {@link DomainMd}. */\nasync function loadDomainMds(root: string): Promise<DomainMd[]> {\n  const out: DomainMd[] = [];\n  for await (const { path: filePath, name } of walkDir(root)) {\n    if (name !== DOMAIN_MD_FILENAME) continue;\n    try {\n      const { data } = parseFrontmatter(readFileSync(filePath, \"utf8\"));\n      out.push(parseDomainMd(toPosix(path.relative(root, filePath)), data));\n    } catch {}\n  }\n  return out;\n}\n\n/**\n * Stamp `domainSlug` onto every entry scanned from `root` using the root's\n * `DOMAIN.md` sidecars. Returns the `CatalogDomain` registry for the real\n * domains, plus a synthetic fallback domain when any entry used the fallback.\n * Mutates `entries` in place (sets `entry.domainSlug`).\n *\n * `synthesizeFallback` (default true): entries no domain claims fall back to\n * `fallbackSlug` (the repo/source name). Pass `false` when the caller already\n * groups these entries one level up (e.g. the source feed groups by source\n * node) — unmatched entries then get no domain (`\"\"`) and hang directly under\n * that parent, instead of nesting under a same-named fallback domain.\n */\nasync function stampDomains(\n  root: string,\n  fallbackSlug: string,\n  entries: CatalogEntry[],\n  synthesizeFallback = true,\n): Promise<CatalogDomain[]> {\n  const domainMds = await loadDomainMds(root);\n  const assignables = entries.map((entry) => ({\n    entry,\n    ref: `${entry.kind}:${entry.name}`,\n    relativePath: toPosix(path.relative(root, entry.source)),\n  }));\n\n  let usedFallback = false;\n  for (const a of assignables) {\n    const slug = assignDomain(a.relativePath, domainMds);\n    if (slug) a.entry.domainSlug = slug;\n    else if (synthesizeFallback) {\n      a.entry.domainSlug = fallbackSlug;\n      usedFallback = true;\n    } else a.entry.domainSlug = \"\";\n  }\n\n  const { index } = buildDomainIndex(assignables, domainMds);\n  const catalog: CatalogDomain[] = Object.values(index).map((d) => ({\n    slug: d.slug,\n    title: d.title,\n    ...(d.description ? { description: d.description } : {}),\n    ...(d.relation ? { relation: d.relation } : {}),\n    ...(d.order !== undefined ? { order: d.order } : {}),\n    ...(d.recommended[0] ? { recommendedRef: d.recommended[0] } : {}),\n  }));\n  if (usedFallback) catalog.push({ slug: fallbackSlug, title: fallbackSlug });\n  return catalog;\n}\n\n/**\n * Pull assets from local libraries (the authoring places under\n * `~/.skaile/libraries/<name>/`, not the `~/.skaile/cache/sources/` cache). Each\n * library's `path` is scanned with `scanRepo` and grouped under the bare library\n * name (`group: <name>`) so the manage TUI shows a clean `<name>` band — no\n * `library:` prefix and no redundant same-named fallback domain (mirrors the\n * source feed).\n */\nasync function libraryAssets(): Promise<{\n  entries: OriginEntry[];\n  domains: CatalogDomain[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  const domains: CatalogDomain[] = [];\n  try {\n    const [{ openLibraryManager }, { skaileHomeDir }, { getGlobalCacheDir }] = await Promise.all([\n      import(\"./open-library.ts\"),\n      import(\"@skaile/workspaces/library\"),\n      import(\"@skaile/workspaces/core\"),\n    ]);\n    const { manager, close } = await openLibraryManager();\n    try {\n      // Authoring libraries are the rows that are NOT source clones. index.db\n      // rows predating the cache migration still carry the legacy\n      // ~/.skaile/sources path, so exclude both roots.\n      const newRoot = getGlobalCacheDir();\n      const legacyRoot = path.join(skaileHomeDir(), \"sources\");\n      const libs = (await manager.listLibraries()).filter(\n        (l) => !l.path.startsWith(newRoot) && !l.path.startsWith(legacyRoot),\n      );\n      const entries: OriginEntry[] = [];\n      for (const lib of libs) {\n        if (!existsSync(lib.path)) continue;\n        // Scan + group under the bare library name. `synthesizeFallback: false`\n        // (as the source feed does) keeps domainless assets directly under the\n        // library band instead of a redundant same-named fallback domain.\n        const libEntries = [...(await scanRepo(lib.path, lib.name))];\n        domains.push(...(await stampDomains(lib.path, lib.name, libEntries, false)));\n        for (const entry of libEntries) entries.push({ origin: \"library\", entry, group: lib.name });\n      }\n      return { entries, domains, notes };\n    } finally {\n      close();\n    }\n  } catch (err) {\n    notes.push({\n      feed: \"libraries\",\n      message: err instanceof Error ? err.message : String(err),\n    });\n    return { entries: [], domains, notes };\n  }\n}\n\n/**\n * Pull a (best-effort) snapshot of the connected remote store catalog.\n *\n * - Returns no entries when the resolved catalog is local-only or the host\n *   is unreachable (the failure becomes a note, not an exception).\n * - Maps `CatalogAsset` → `CatalogEntry`, carrying `publisher`, `repo`, and\n *   `category` straight through and using `source = \"store://<id>\"`; per-file\n *   `source` paths are not available for remote assets so the canonical ref is\n *   a stable placeholder.\n */\nasync function storeAssets(projectDir: string): Promise<{\n  entries: CatalogEntry[];\n  domains: CatalogDomain[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    const { resolveCatalogSource } = await import(\"./open-library.ts\");\n    const { source, close } = await resolveCatalogSource({ projectDir });\n    try {\n      const assets = await source.listAssets();\n      const entries: CatalogEntry[] = assets.map((a) => ({\n        name: a.name,\n        kind: (a.kind as AssetKind) ?? \"skill\",\n        description: a.description ?? \"\",\n        source: `store://${a.id}`,\n        publisher: a.publisher,\n        repo: a.repo,\n        domainSlug: a.domainSlug,\n        category: a.category,\n        version: a.version,\n        requires: [],\n        dependencies: [],\n      }));\n      // Domains are optional on the catalog source — only the store backend\n      // (post Part 4 `catalog.listDomains`) exposes them. Duck-type the call so\n      // older sources and the local catalog degrade to no domains, not an error.\n      const domains = await loadDomains(source);\n      return { entries, domains, notes };\n    } finally {\n      close();\n    }\n  } catch (err) {\n    const msg = err instanceof Error ? err.message : String(err);\n    // Local-only catalog throws a recognizable message — silence it; absence\n    // is the user's choice, not an error.\n    if (!/local/i.test(msg)) {\n      notes.push({ feed: \"store\", message: msg });\n    }\n    return { entries: [], domains: [], notes };\n  }\n}\n\n/** Optional `listDomains` capability — returns `[]` when the source lacks it. */\nasync function loadDomains(source: unknown): Promise<CatalogDomain[]> {\n  const fn = (source as { listDomains?: () => Promise<CatalogDomain[]> }).listDomains;\n  if (typeof fn !== \"function\") return [];\n  const domains = await fn.call(source);\n  return Array.isArray(domains) ? domains : [];\n}\n\n/** The slice of `AssetManager` the source feed needs (kept narrow for tests). */\ninterface AssetManagerLike {\n  search: () => Promise<CatalogEntry[]>;\n  searchRepoRoots: () => { repoName: string; root: string }[];\n}\n\n/**\n * Project-source feed: leans on `AssetManager.search()`, which now merges\n * `skaile.yaml`'s `sources:` field into the repositories map, then stamps\n * `DOMAIN.md`-derived domain grouping onto the scanned entries via\n * `searchRepoRoots()`.\n */\nasync function sourceAssets(\n  am: AssetManagerLike,\n): Promise<{ entries: OriginEntry[]; domains: CatalogDomain[] }> {\n  // The bundled factory tree is injected into the repositories map as an implicit\n  // source, so `am.search()` returns it too. It has its own `factory` origin band,\n  // so drop it here — otherwise the same first-party skills list twice under Sources.\n  const factoryPrefixes = factoryAssetRoots().map((r) => (r.endsWith(path.sep) ? r : r + path.sep));\n  const isFactoryPath = (p: string) =>\n    factoryPrefixes.some((fp) => p === fp.slice(0, -1) || p.startsWith(fp));\n\n  const all = (await am.search()).filter((e) => !isFactoryPath(e.source));\n  const entries: OriginEntry[] = [];\n  const domains: CatalogDomain[] = [];\n  // Group each source's entries under the source node (its short repo name), not\n  // the publisher: under Sources the navigational question is \"which repo did\n  // this come from\". Each entry's `source` (absolute manifest path) lives under\n  // exactly one declared root, so group + stamp by prefix. The cache slug is\n  // URL-keyed `github.com/<org>/<repo>` — take the trailing segment.\n  for (const { repoName, root } of am.searchRepoRoots()) {\n    if (isFactoryPath(root)) continue;\n    const prefix = root.endsWith(path.sep) ? root : root + path.sep;\n    const owned = all.filter((e) => e.source === root || e.source.startsWith(prefix));\n    if (owned.length === 0) continue;\n    const sourceName = repoName.split(\"/\").pop() || repoName;\n    // No synthetic fallback domain — the source node already groups these, so a\n    // same-named fallback would just nest the source under itself.\n    domains.push(...(await stampDomains(root, sourceName, owned, false)));\n    for (const entry of owned) entries.push({ origin: \"source\", entry, group: sourceName });\n  }\n  return { entries, domains };\n}\n\n/**\n * Factory-asset feed: scan the bundled first-party `factory-assets` tree(s)\n * resolved by `factoryAssetRoots()` (the `SKAILE_FACTORY_ASSETS_DIR` override\n * layer ahead of the bundled tree). Local disk only, no network — the entries are\n * the built-in skills / connectors / bundles that ship with `@skaile/workspaces`.\n * `factoryAssetRoots()` already dedupes, so the env override pointing at the\n * bundled dir collapses to one root.\n */\nasync function factoryAssets(): Promise<{\n  entries: CatalogEntry[];\n  domains: CatalogDomain[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  const domains: CatalogDomain[] = [];\n  try {\n    const entries: CatalogEntry[] = [];\n    for (const root of factoryAssetRoots()) {\n      const rootEntries = [...(await scanRepo(root, \"skaile-factory\"))];\n      domains.push(...(await stampDomains(root, \"skaile-factory\", rootEntries)));\n      entries.push(...rootEntries);\n    }\n    return { entries, domains, notes };\n  } catch (err) {\n    notes.push({\n      feed: \"factory\",\n      message: err instanceof Error ? err.message : String(err),\n    });\n    return { entries: [], domains, notes };\n  }\n}\n\n/** Tag a flat entry list with a single origin. */\nfunction tag(origin: AssetOrigin, entries: CatalogEntry[]): OriginEntry[] {\n  return entries.map((entry) => ({ origin, entry }));\n}\n\n/**\n * Run all feeds and return a single normalized result.\n *\n * Feeds run in parallel where possible — the store fetch is the slow one\n * (one HTTP call) and is fired alongside the local library walk. The factory\n * scan is local disk only, so it runs inline.\n */\nexport async function gatherAssetFeeds(\n  am: AssetManagerLike,\n  projectDir: string,\n): Promise<AssetFeedResult> {\n  const [libs, store] = await Promise.all([libraryAssets(), storeAssets(projectDir)]);\n  const factory = await factoryAssets();\n  const src = await sourceAssets(am);\n  return {\n    entries: [\n      ...src.entries,\n      ...libs.entries,\n      ...tag(\"factory\", factory.entries),\n      ...tag(\"store\", store.entries),\n    ],\n    // Store domains first (server-curated), then the on-disk feeds; dedupe by\n    // slug, first-wins, so a store-served domain shadows a same-slug local one.\n    domains: dedupeBySlug([...store.domains, ...src.domains, ...libs.domains, ...factory.domains]),\n    notes: [...libs.notes, ...store.notes, ...factory.notes],\n  };\n}\n\n/** First-wins dedupe of a domain list by `slug`. */\nfunction dedupeBySlug(domains: CatalogDomain[]): CatalogDomain[] {\n  const seen = new Set<string>();\n  const out: CatalogDomain[] = [];\n  for (const d of domains) {\n    if (seen.has(d.slug)) continue;\n    seen.add(d.slug);\n    out.push(d);\n  }\n  return out;\n}\n"]}

package/dist/asset-manager/catalog-deployer.js

@@ -1,19 +1,20 @@
-export { WORKSPACE_MOUNT_ENV_VAR, deployAll, deployCatalogEntry, findAiAssetsRoot, isUnderWorkspaceMount, resolveFlowSkills, undeployCatalogEntry, workspaceMountDirs } from '../chunk-7BUZQVRR.js';
-import '../chunk-JECDED7B.js';
+export { WORKSPACE_MOUNT_ENV_VAR, deployAll, deployCatalogEntry, findAiAssetsRoot, isUnderWorkspaceMount, resolveFlowSkills, undeployCatalogEntry, workspaceMountDirs } from '../chunk-Q6NDQ6BH.js';
+import '../chunk-7NRF7BQB.js';
 import '../chunk-4GY63JU6.js';
-import '../chunk-WILO77HE.js';
+import '../chunk-NXTLDFLA.js';
 import '../chunk-F3HNW354.js';
 import '../chunk-K5GBV4SA.js';
 import '../chunk-QVZA2MDT.js';
-import '../chunk-HO4UO25I.js';
+import '../chunk-QWGSKDD7.js';
 import '../chunk-MENCWIHW.js';
 import '../chunk-P4VHQA4N.js';
-import '../chunk-MKZOK4JU.js';
+import '../chunk-2FBPAR2V.js';
 import '../chunk-GEEW6SY2.js';
-import '../chunk-3HKYCT2M.js';
-import '../chunk-KSIRR5PL.js';
-import '../chunk-ILG4BXYE.js';
-import '../chunk-W4IPN3DD.js';
+import '../chunk-JMKB7IB4.js';
+import '../chunk-DPLIN2RA.js';
+import '../chunk-GZZPKAV5.js';
+import '../chunk-C3CAXQMA.js';
+import '../chunk-BOFL7GIF.js';
 import '../chunk-NSBPE2FW.js';
 //# sourceMappingURL=catalog-deployer.js.map
 //# sourceMappingURL=catalog-deployer.js.map

package/dist/asset-manager/index.js

@@ -1,26 +1,27 @@
-export { AssetManager, FACTORY_SOURCE_URL, MissingManifestError, NON_DEPLOYABLE_KINDS, normalizeRepoUrl, parseCanonicalLockKey, parseRefTolerant, renderMcpServerConfig, softDepName } from '../chunk-L3PZINDD.js';
-import '../chunk-A3X4LDOD.js';
-import '../chunk-M5H4DWIA.js';
-import '../chunk-UKJMQZV6.js';
+export { AssetManager, FACTORY_SOURCE_URL, MissingManifestError, NON_DEPLOYABLE_KINDS, normalizeRepoUrl, parseCanonicalLockKey, parseRefTolerant, renderMcpServerConfig, softDepName } from '../chunk-HXTBOZL6.js';
+import '../chunk-WQPLZUXU.js';
+import '../chunk-HGPSZXZP.js';
+import '../chunk-VOEBLPXO.js';
 import '../chunk-R7FOF242.js';
 import '../chunk-JXT46QFC.js';
-export { createScaffold, deployAll, installAgent, removeAsset } from '../chunk-CJXSTOGW.js';
+export { createScaffold, deployAll, installAgent, removeAsset } from '../chunk-4JGTXBQB.js';
 export { BUILT_IN_FRAGMENTS, loadPromptExtensions, resolveFragments } from '../chunk-CGYEHQOX.js';
-import '../chunk-JECDED7B.js';
+import '../chunk-7NRF7BQB.js';
 import '../chunk-4GY63JU6.js';
-import '../chunk-WILO77HE.js';
+import '../chunk-NXTLDFLA.js';
 import '../chunk-F3HNW354.js';
 import '../chunk-K5GBV4SA.js';
 import '../chunk-QVZA2MDT.js';
-import '../chunk-HO4UO25I.js';
+import '../chunk-QWGSKDD7.js';
 import '../chunk-MENCWIHW.js';
 import '../chunk-P4VHQA4N.js';
-import '../chunk-MKZOK4JU.js';
+import '../chunk-2FBPAR2V.js';
 import '../chunk-GEEW6SY2.js';
-import '../chunk-3HKYCT2M.js';
-import '../chunk-KSIRR5PL.js';
-import '../chunk-ILG4BXYE.js';
-import '../chunk-W4IPN3DD.js';
+import '../chunk-JMKB7IB4.js';
+import '../chunk-DPLIN2RA.js';
+import '../chunk-GZZPKAV5.js';
+import '../chunk-C3CAXQMA.js';
+import '../chunk-BOFL7GIF.js';
 export { appendHistory, clearHistory, getRecentHistory, loadHistory } from '../chunk-KTBKW2FI.js';
 import '../chunk-UQ6LFBPZ.js';
 export { AGENT_RENDERERS, claudeCodeRenderer, codexRenderer, driverTargetSupportsAgents, ompRenderer, renderAgentToFramework } from '../chunk-DKCFWSVW.js';

package/dist/asset-manager/installer.js

@@ -1,20 +1,21 @@
-export { createScaffold, deployAll, deployAsset, removeAsset } from '../chunk-CJXSTOGW.js';
+export { createScaffold, deployAll, deployAsset, removeAsset } from '../chunk-4JGTXBQB.js';
 import '../chunk-CGYEHQOX.js';
-import '../chunk-JECDED7B.js';
+import '../chunk-7NRF7BQB.js';
 import '../chunk-4GY63JU6.js';
-import '../chunk-WILO77HE.js';
+import '../chunk-NXTLDFLA.js';
 import '../chunk-F3HNW354.js';
 import '../chunk-K5GBV4SA.js';
 import '../chunk-QVZA2MDT.js';
-import '../chunk-HO4UO25I.js';
+import '../chunk-QWGSKDD7.js';
 import '../chunk-MENCWIHW.js';
 import '../chunk-P4VHQA4N.js';
-import '../chunk-MKZOK4JU.js';
+import '../chunk-2FBPAR2V.js';
 import '../chunk-GEEW6SY2.js';
-import '../chunk-3HKYCT2M.js';
-import '../chunk-KSIRR5PL.js';
-import '../chunk-ILG4BXYE.js';
-import '../chunk-W4IPN3DD.js';
+import '../chunk-JMKB7IB4.js';
+import '../chunk-DPLIN2RA.js';
+import '../chunk-GZZPKAV5.js';
+import '../chunk-C3CAXQMA.js';
+import '../chunk-BOFL7GIF.js';
 import '../chunk-DKCFWSVW.js';
 import '../chunk-N7B3LZ7V.js';
 import '../chunk-NSBPE2FW.js';

package/dist/bridge/drivers/claude-sdk.js

@@ -1,31 +1,178 @@
-import { scrubPoisonedTranscript, resolveClaudeConfigDir, claudeEndpointMode, buildClaudeEndpointEnv } from '../../chunk-OUJVFZWJ.js';
-import { dispatchCapability } from '../../chunk-35PMOWAD.js';
-import { fetchProviderModels } from '../../chunk-BXV6RLF4.js';
+import { scrubPoisonedTranscript, resolveClaudeConfigDir, claudeEndpointMode, buildClaudeEndpointEnv } from '../../chunk-4SIMGJIU.js';
+import { dispatchCapability } from '../../chunk-CPIAQTYM.js';
+import { fetchProviderModels } from '../../chunk-XKPFQ3JT.js';
 import { AuthError, classifyClaudeSdkError, reclassifyAuthAsAccountUnavailable, AccountUnavailableError } from '../../chunk-GAH4YRCI.js';
-import { BUILTIN_DRIVER_CATALOG, AgentDriver, getBridgeLogger, entryCredentialValue, registryDriverConfig } from '../../chunk-3T5DRUNZ.js';
+import { BUILTIN_DRIVER_CATALOG, AgentDriver, getBridgeLogger, entryCredentialValue, registryDriverConfig } from '../../chunk-PQF3NDQH.js';
 import '../../chunk-6E6PKKAD.js';
 import { withActivityLabelShape } from '../../chunk-O64WU6WS.js';
-import '../../chunk-JECDED7B.js';
+import '../../chunk-7NRF7BQB.js';
 import '../../chunk-4GY63JU6.js';
-import '../../chunk-WILO77HE.js';
+import '../../chunk-NXTLDFLA.js';
 import '../../chunk-F3HNW354.js';
 import '../../chunk-K5GBV4SA.js';
 import '../../chunk-QVZA2MDT.js';
-import '../../chunk-HO4UO25I.js';
+import '../../chunk-QWGSKDD7.js';
 import '../../chunk-MENCWIHW.js';
 import '../../chunk-P4VHQA4N.js';
-import '../../chunk-MKZOK4JU.js';
+import '../../chunk-2FBPAR2V.js';
 import '../../chunk-GEEW6SY2.js';
-import '../../chunk-3HKYCT2M.js';
-import '../../chunk-KSIRR5PL.js';
-import { mergeRegistries, parseModelRef, isEntryEnabled, resolveEntryBaseUrl } from '../../chunk-ILG4BXYE.js';
-import '../../chunk-W4IPN3DD.js';
+import '../../chunk-JMKB7IB4.js';
+import '../../chunk-DPLIN2RA.js';
+import { mergeRegistries, parseModelRef, isEntryEnabled, resolveEntryBaseUrl } from '../../chunk-GZZPKAV5.js';
+import '../../chunk-C3CAXQMA.js';
+import { createLogger } from '../../chunk-BOFL7GIF.js';
 import '../../chunk-N7B3LZ7V.js';
 import '../../chunk-NSBPE2FW.js';
 import { spawnSync, spawn } from 'child_process';
 import { readFileSync, existsSync } from 'fs';
 import { createRequire } from 'module';
 import * as zNS from 'zod';
+import { InMemoryTransport } from '@modelcontextprotocol/sdk/inMemory.js';
+import { Ajv2020 } from 'ajv/dist/2020.js';
+
+var TOOL_PROPERTY_KEY_PATTERN = /^[a-zA-Z0-9_.-]{1,64}$/;
+var DRAFT_2020_12_META = "https://json-schema.org/draft/2020-12/schema";
+var PROBE_TIMEOUT_MS = 5e3;
+var metaValidator = null;
+function draft202012MetaValidator() {
+  if (metaValidator) return metaValidator;
+  const ajv = new Ajv2020({ strict: false, validateFormats: false, logger: false });
+  const validate = ajv.getSchema(DRAFT_2020_12_META);
+  if (!validate) throw new Error("ajv draft 2020-12 meta-schema is unavailable");
+  metaValidator = validate;
+  return validate;
+}
+function checkToolPropertyKeys(schema) {
+  if (!schema || typeof schema !== "object" || Array.isArray(schema)) return null;
+  const props = schema.properties;
+  if (!props || typeof props !== "object" || Array.isArray(props)) return null;
+  for (const key of Object.keys(props)) {
+    if (!TOOL_PROPERTY_KEY_PATTERN.test(key)) {
+      return `property key ${JSON.stringify(key)} does not match ${TOOL_PROPERTY_KEY_PATTERN.source}`;
+    }
+  }
+  return null;
+}
+function checkToolInputSchema(schema) {
+  if (!schema || typeof schema !== "object" || Array.isArray(schema)) {
+    return "input schema is not a JSON object";
+  }
+  const keyReason = checkToolPropertyKeys(schema);
+  if (keyReason) return keyReason;
+  const validate = draft202012MetaValidator();
+  if (!validate(schema)) {
+    const first = validate.errors?.[0];
+    const where = first?.instancePath || "/";
+    return `not valid JSON Schema draft 2020-12: ${where} ${first?.message ?? "is invalid"}`;
+  }
+  return null;
+}
+var filteredInstances = /* @__PURE__ */ new WeakMap();
+function sdkInstanceOf(config) {
+  if (!config || typeof config !== "object") return null;
+  const c = config;
+  if (c.type !== "sdk" || !c.instance || typeof c.instance !== "object") return null;
+  const inst = c.instance;
+  return typeof inst.connect === "function" && typeof inst.close === "function" ? inst : null;
+}
+function withTimeout(p, what) {
+  let timer;
+  const timeout = new Promise((_, reject) => {
+    timer = setTimeout(() => reject(new Error(`${what} timed out`)), PROBE_TIMEOUT_MS);
+  });
+  return Promise.race([p, timeout]).finally(() => clearTimeout(timer));
+}
+async function listInProcessTools(instance) {
+  const [clientSide, serverSide] = InMemoryTransport.createLinkedPair();
+  const pending = /* @__PURE__ */ new Map();
+  clientSide.onmessage = (msg) => {
+    const m = msg;
+    const id = typeof m.id === "number" ? m.id : void 0;
+    if (id === void 0) return;
+    pending.get(id)?.(m);
+    pending.delete(id);
+  };
+  let nextId = 1;
+  const call = (method, params) => withTimeout(
+    new Promise((resolve, reject) => {
+      const id = nextId++;
+      pending.set(id, resolve);
+      clientSide.send({ jsonrpc: "2.0", id, method, params }).catch(reject);
+    }),
+    method
+  ).then((res) => {
+    if (res.error) throw new Error(`${method} failed: ${JSON.stringify(res.error)}`);
+    return res.result ?? {};
+  });
+  await clientSide.start();
+  await instance.connect(serverSide);
+  try {
+    await call("initialize", {
+      protocolVersion: "2025-06-18",
+      capabilities: {},
+      clientInfo: { name: "skaile-tool-schema-filter", version: "1.0.0" }
+    });
+    await clientSide.send({ jsonrpc: "2.0", method: "notifications/initialized" });
+    const tools = [];
+    let cursor;
+    do {
+      const page = await call("tools/list", cursor ? { cursor } : {});
+      tools.push(...page.tools ?? []);
+      cursor = typeof page.nextCursor === "string" ? page.nextCursor : void 0;
+    } while (cursor);
+    return tools;
+  } finally {
+    await instance.close().catch(() => {
+    });
+  }
+}
+var defaultLog = createLogger({ kind: "mcp", subkind: "tool-schema-filter" });
+async function filterInProcessMcpServerTools(server, config, log = defaultLog) {
+  const instance = sdkInstanceOf(config);
+  if (!instance) return [];
+  const cached = filteredInstances.get(instance);
+  if (cached) return cached;
+  const registered = instance._registeredTools;
+  if (!registered || Object.keys(registered).length === 0) return [];
+  if (instance.isConnected?.()) {
+    log.debug("in-process MCP server already connected; schema check skipped", { server });
+    return [];
+  }
+  let wireTools;
+  try {
+    wireTools = await listInProcessTools(instance);
+  } catch (err) {
+    log.warn("could not inspect in-process MCP server tools; passing it unchanged", {
+      server,
+      error: err instanceof Error ? err.message : String(err)
+    });
+    return [];
+  }
+  const dropped = [];
+  for (const tool of wireTools) {
+    const reason = checkToolInputSchema(tool.inputSchema);
+    if (!reason) continue;
+    const handle = registered[tool.name];
+    if (typeof handle?.disable !== "function") {
+      log.warn("MCP tool has an invalid input schema but cannot be disabled", {
+        server,
+        tool: tool.name,
+        reason
+      });
+      continue;
+    }
+    handle.disable();
+    dropped.push({ server, tool: tool.name, reason });
+    log.warn("MCP tool dropped: invalid input schema", { server, tool: tool.name, reason });
+  }
+  filteredInstances.set(instance, dropped);
+  return dropped;
+}
+function formatDroppedToolsNotice(dropped) {
+  if (dropped.length === 0) return null;
+  const items = dropped.map((d) => `${d.tool} (server ${d.server}: ${d.reason})`).join("; ");
+  return `Some MCP tools were not loaded because the Claude API would reject their input schema: ${items}. Do not try to call them.`;
+}
 
 // bridge/src/drivers/sanitize-assistant-text.ts
 var NS = "(?:[a-z][a-z0-9]*:)?";
@@ -306,6 +453,8 @@ var ClaudeSdkDriver = class extends AgentDriver {
     supportsInBandAbort: true
   };
   log = getBridgeLogger("claude-sdk");
+  /** `kind: mcp` logger for tool-schema drops, alongside the runner's MCP rows. */
+  mcpLog = createLogger({ kind: "mcp", subkind: "tool-schema-filter" });
   config;
   abortController = null;
   running = false;
@@ -522,6 +671,8 @@ var ClaudeSdkDriver = class extends AgentDriver {
    * upstream auth-shaped failures get a quota-aware hint when warranted.
    */
   usingOauthCredential = false;
+  /** Capability tools already warned about, so a per-turn rebuild logs each once. */
+  warnedDroppedCapabilityTools = /* @__PURE__ */ new Set();
   /**
    * @param config - Driver configuration. Claude SDK-relevant fields:
    *   - `cwd` — working directory; SDK session files and agent definitions are read from here.
@@ -1264,10 +1415,16 @@ var ClaudeSdkDriver = class extends AgentDriver {
     this.usingOauthCredential = endpoint.mode === "anthropic" && !endpoint.credential;
     const claudePath = this.findClaudeBinary();
     const onStderr = (data) => this.log.warn("claude stderr", { line: data.trim() });
+    const { patch: mcpServersPatch, dropped: droppedMcpTools } = await this.buildEffectiveMcpServers();
+    const systemPromptAppend = [this.config.systemPrompt, formatDroppedToolsNotice(droppedMcpTools)].filter((part) => !!part).join("\n\n");
     const options = {
       cwd: this.config.cwd,
       // Load project + user settings so .claude/skills/ are discovered
       settingSources: ["user", "project"],
+      // MCP servers come only from the runner (`mcpServers` below). Without
+      // this the CLI also loads the workspace repo's `.mcp.json` unprompted,
+      // which bypasses the runner's approval flow and the schema filter.
+      strictMcpConfig: true,
       // Use full Claude Code tool preset so skills, agents, etc. work
       tools: { type: "preset", preset: "claude_code" },
       permissionMode: "bypassPermissions",
@@ -1319,7 +1476,7 @@ var ClaudeSdkDriver = class extends AgentDriver {
       systemPrompt: {
         type: "preset",
         preset: "claude_code",
-        ...this.config.systemPrompt ? { append: this.config.systemPrompt } : {}
+        ...systemPromptAppend ? { append: systemPromptAppend } : {}
       },
       // ── Session continuity ────────────────────────────────────────────────
       // Three-level fallback ensures the right session is always resumed:
@@ -1340,7 +1497,7 @@ var ClaudeSdkDriver = class extends AgentDriver {
       // calls into that server route back through `hooks.invoke()` so the
       // registry's per-handler logger fires and fire-and-forget / render
       // semantics apply uniformly.
-      ...await this.buildEffectiveMcpServers(),
+      ...mcpServersPatch,
       // ── Main-agent handoff ────────────────────────────────────────────────
       // agentName (from AgentConfig) is the equivalent of `claude --agent <name>`.
       // The SDK reads .claude/agents/<agentName>.md from the cwd; that file was
@@ -1468,40 +1625,81 @@ var ClaudeSdkDriver = class extends AgentDriver {
    *
    * Returns an empty options patch when neither source is configured, so legacy
    * v1 sessions remain unaffected.
+   *
+   * Tools the Claude API would reject are removed on the way out and
+   * reported in `dropped`, so one bad tool cannot fail every turn when the
+   * CLI's own flag-gated filter is off: `config.mcpServers` entries get the
+   * wire probe, and `skaile-capabilities` gets the key rule while it is built
+   * (see {@link buildCapabilityMcpServer}).
    */
   async buildEffectiveMcpServers() {
     const out = {};
+    const dropped = [];
     if (this.config.mcpServers) {
       Object.assign(out, this.config.mcpServers);
     }
     const hooks = this.config.capabilities;
     if (hooks) {
-      const capServer = await this.buildCapabilityMcpServer();
-      if (capServer) {
-        out["skaile-capabilities"] = capServer;
+      const cap = await this.buildCapabilityMcpServer();
+      dropped.push(...cap.dropped);
+      if (cap.server) {
+        out["skaile-capabilities"] = cap.server;
       }
     }
-    return Object.keys(out).length > 0 ? { mcpServers: out } : {};
+    if (this.config.mcpServers) {
+      const results = await Promise.all(
+        Object.entries(this.config.mcpServers).map(
+          ([name, config]) => filterInProcessMcpServerTools(name, config, this.mcpLog)
+        )
+      );
+      for (const r of results) dropped.push(...r);
+    }
+    return {
+      patch: Object.keys(out).length > 0 ? { mcpServers: out } : {},
+      dropped
+    };
   }
   /**
    * Build the synthetic MCP server that exposes registered capabilities to the
    * Claude Agent SDK. Lazy-imports `createSdkMcpServer` from the SDK and `zod`
    * (an SDK peer) since both are optional peers of this bridge.
    *
-   * Returns null when the SDK or zod is unavailable, or when the registry
+   * `server` is null when the SDK or zod is unavailable, or when the registry
    * exposes no tools — leaving the legacy `mcpServers` untouched.
+   *
+   * A tool whose declared schema has a property key the API rejects
+   * ({@link checkToolPropertyKeys}) is left out and reported in `dropped`.
+   * Only the key rule applies here: `jsonSchemaToZodLoose` copies keys
+   * verbatim but flattens every other construct to string/number/boolean/
+   * array/record/any, so the wire schema is always valid draft 2020-12 and
+   * a declared-schema meta check would drop tools that work.
    */
   async buildCapabilityMcpServer() {
+    const dropped = [];
     const hooks = this.config.capabilities;
-    if (!hooks) return null;
-    const tools = hooks.composeTools();
-    if (tools.length === 0) return null;
+    if (!hooks) return { server: null, dropped };
+    const tools = hooks.composeTools().filter((tool) => {
+      const reason = checkToolPropertyKeys(tool.parameters);
+      if (!reason) return true;
+      dropped.push({ server: "skaile-capabilities", tool: tool.name, reason });
+      const key = `${tool.name}\0${reason}`;
+      if (!this.warnedDroppedCapabilityTools.has(key)) {
+        this.warnedDroppedCapabilityTools.add(key);
+        this.mcpLog.warn("MCP tool dropped: invalid input schema", {
+          server: "skaile-capabilities",
+          tool: tool.name,
+          reason
+        });
+      }
+      return false;
+    });
+    if (tools.length === 0) return { server: null, dropped };
     let sdk;
     try {
       sdk = await import('@anthropic-ai/claude-agent-sdk');
     } catch {
       this.log.warn("claude-agent-sdk unavailable; cannot build capability MCP server");
-      return null;
+      return { server: null, dropped };
     }
     const z2 = zStatic;
     const sdkTools = tools.map((tool) => ({
@@ -1524,9 +1722,11 @@ var ClaudeSdkDriver = class extends AgentDriver {
             callId,
             tool.name,
             input,
-            (err) => this.log.warn("background capability handler failed", {
+            () => this.log.warn("background capability handler failed", {
               name: tool.name,
-              error: String(err)
+              callId
+              // Nothing from the error: its message or name can quote the call's
+              // content. The registry's `failed` row for the same call has the metadata.
             })
           );
           const text = typeof dispatch.result === "string" ? dispatch.result : JSON.stringify(dispatch.result ?? {});
@@ -1539,7 +1739,10 @@ var ClaudeSdkDriver = class extends AgentDriver {
         }
       }
     }));
-    return sdk.createSdkMcpServer({ name: "skaile-capabilities", tools: sdkTools });
+    return {
+      server: sdk.createSdkMcpServer({ name: "skaile-capabilities", tools: sdkTools }),
+      dropped
+    };
   }
   /** Fetch and cache slash commands from the SDK query. */
   async fetchSlashCommands() {