@skaile/workspaces 5.1.3 → 5.2.0

package/dist/{chunk-SP47UJKE.js → chunk-B4J4RGNY.js}

@@ -1,15 +1,17 @@
-import { readManifestSourceConfig, discoverAssetsInTree } from './chunk-UVOJSWD2.js';
-import { installFromManifest } from './chunk-H4EGUQ7M.js';
-import { defaultLibraryDir, resolveLibraryDir } from './chunk-IWCCZL7C.js';
-import { getGlobalCacheDir, resolveSourcePublisher } from './chunk-MXXKTQXJ.js';
+import { barePublisher, createDefaultRegistry, sharesItsFolder, readManifestSourceConfig, discoverAssetsInTree } from './chunk-LZ5RH6LD.js';
+import { installFromManifest, assertSafeManifestPath } from './chunk-4YE7OYTB.js';
+import { defaultLibraryDir, resolveLibraryDir, readLock, buildLibraryLockEntries, writeLock, mergeLockFile, buildLockFile, ManifestYamlEditor } from './chunk-BIMEKYOE.js';
+import { getGlobalCacheDir, storeManifestSlug, resolveSourcePublisher } from './chunk-P2EM6FNQ.js';
 import { globalSkaileDir, mergeLegacyEntriesInto, migrateLegacyDir, globalCacheRoot } from './chunk-TLKM4M47.js';
-import { encodeSkaileManifest } from './chunk-AG44ZJ7W.js';
-import { parseAssetRef } from './chunk-43ZBF3WH.js';
+import { encodeSkaileManifest, loadSkPublishManifest, SKAILE_MANIFEST_FILENAME } from './chunk-YRF5CYHR.js';
+import { scanDirectory } from './chunk-YANDJSMN.js';
+import { parseAssetRef, assetRefToStr } from './chunk-OABIGSUY.js';
 import { PresetManifestSchema } from './chunk-5CYEWBPB.js';
 import { __export } from './chunk-NSBPE2FW.js';
 import * as fs10 from 'fs';
-import { existsSync, mkdirSync } from 'fs';
-import * as path5 from 'path';
+import { existsSync, mkdirSync, symlinkSync, copyFileSync, cpSync } from 'fs';
+import * as path4 from 'path';
+import { resolve, relative, sep, join, dirname } from 'path';
 import { stringify, parse, parseDocument } from 'yaml';
 import * as z3 from 'zod';
 import * as crypto from 'crypto';
@@ -18,6 +20,7 @@ import { createClient } from '@libsql/client';
 import { drizzle } from 'drizzle-orm/libsql';
 import { sqliteTable, text, integer } from 'drizzle-orm/sqlite-core';
 import { spawnSync } from 'child_process';
+import { isDeepStrictEqual } from 'util';
 
 // library/src/library.ts
 var KNOWN_ASSET_KINDS = [
@@ -113,7 +116,7 @@ var SkaileConfigSchema = z3.object({
   library: LibraryConfigSchema.optional()
 });
 function defaultIndexPath() {
-  return path5.join(globalSkaileDir(), "index.db");
+  return path4.join(globalSkaileDir(), "index.db");
 }
 function resolveIndexPath() {
   if (process.env.SKAILE_INDEX_PATH) return process.env.SKAILE_INDEX_PATH;
@@ -127,10 +130,10 @@ function getConfigDefaults() {
 }
 var CONFIG_FILENAME = "config.yaml";
 function userConfigPath() {
-  return path5.join(globalSkaileDir(), CONFIG_FILENAME);
+  return path4.join(globalSkaileDir(), CONFIG_FILENAME);
 }
 function projectConfigPath(projectDir) {
-  return path5.join(projectDir, ".skaile", CONFIG_FILENAME);
+  return path4.join(projectDir, ".skaile", CONFIG_FILENAME);
 }
 function loadConfigFile(filePath) {
   if (!fs10.existsSync(filePath)) return null;
@@ -183,7 +186,7 @@ function resolveConfig(opts) {
   return resolved;
 }
 function saveConfig(filePath, config) {
-  const dir = path5.dirname(filePath);
+  const dir = path4.dirname(filePath);
   if (!fs10.existsSync(dir)) {
     fs10.mkdirSync(dir, { recursive: true });
   }
@@ -213,11 +216,11 @@ function validateKnowledge(data) {
 
 // library/src/knowledge/knowledge-kind-provider.ts
 function collectDirRecursive(baseDir, relativeDir) {
-  const full = path5.join(baseDir, relativeDir);
+  const full = path4.join(baseDir, relativeDir);
   if (!fs10.existsSync(full) || !fs10.statSync(full).isDirectory()) return [];
   const results = [];
   for (const entry of fs10.readdirSync(full, { withFileTypes: true })) {
-    const rel = path5.posix.join(relativeDir, entry.name);
+    const rel = path4.posix.join(relativeDir, entry.name);
     if (entry.isDirectory()) {
       results.push(...collectDirRecursive(baseDir, rel));
     } else if (entry.isFile()) {
@@ -244,8 +247,8 @@ var knowledgeKindProvider = {
     return validateKnowledge(data);
   },
   defaultFileFilter(manifestPath) {
-    const dir = path5.dirname(manifestPath);
-    const manifestName = path5.basename(manifestPath);
+    const dir = path4.dirname(manifestPath);
+    const manifestName = path4.basename(manifestPath);
     const files = [manifestName];
     files.push(...collectDirRecursive(dir, "documents"));
     files.sort();
@@ -324,30 +327,30 @@ var assignments = sqliteTable("assignments", {
   assignedAt: text("assigned_at").notNull()
 });
 function isClone(dir) {
-  return fs10.existsSync(path5.join(dir, ".git"));
+  return fs10.existsSync(path4.join(dir, ".git"));
 }
 function getSidecarRoot() {
   const home = globalSkaileDir();
-  const sidecars = path5.join(home, "sidecars");
-  const legacy = path5.join(home, "sources");
+  const sidecars = path4.join(home, "sidecars");
+  const legacy = path4.join(home, "sources");
   mergeLegacyEntriesInto(getGlobalCacheDir(), legacy, isClone);
   mergeLegacyEntriesInto(sidecars, legacy, (p) => !isClone(p));
   return sidecars;
 }
 function resolveSidecarPaths(slug) {
   const rootDir = getSidecarRoot();
-  const sidecarDir = path5.join(rootDir, slug);
+  const sidecarDir = path4.join(rootDir, slug);
   return {
     rootDir,
     sidecarDir,
-    manifestFile: path5.join(sidecarDir, "skaile.manifest.yaml"),
-    readmeFile: path5.join(sidecarDir, "README.md"),
-    lockFile: path5.join(sidecarDir, "skaile.manifest.lock.json")
+    manifestFile: path4.join(sidecarDir, "skaile.manifest.yaml"),
+    readmeFile: path4.join(sidecarDir, "README.md"),
+    lockFile: path4.join(sidecarDir, "skaile.manifest.lock.json")
   };
 }
 function deriveSlug(sourceConfig, sourcePath, existingSlugs) {
   const fromConfig = sourceConfig && typeof sourceConfig.name === "string" ? sourceConfig.name : void 0;
-  const base = fromConfig && fromConfig.length > 0 ? slugify(fromConfig) : slugify(path5.basename(sourcePath || "")) || "unnamed-source";
+  const base = fromConfig && fromConfig.length > 0 ? slugify(fromConfig) : slugify(path4.basename(sourcePath || "")) || "unnamed-source";
   const taken = new Set(existingSlugs);
   if (!taken.has(base)) return base;
   for (let i = 2; i < 1e3; i++) {
@@ -373,13 +376,17 @@ function slugify(input) {
 
 // library/src/local/store-paths.ts
 function getStoreRoot() {
-  return path5.join(globalSkaileDir(), "store");
+  return path4.join(globalSkaileDir(), "store");
 }
 function getStoreManifestsDir() {
-  return path5.join(getStoreRoot(), "manifests");
+  return path4.join(getStoreRoot(), "manifests");
+}
+function curatedManifestOverlay(sourceUrl) {
+  const file = path4.join(getStoreManifestsDir(), `${storeManifestSlug(sourceUrl)}.yaml`);
+  return fs10.existsSync(file) ? file : void 0;
 }
 function migratedMarkerPath() {
-  return path5.join(getStoreRoot(), ".migrated");
+  return path4.join(getStoreRoot(), ".migrated");
 }
 function collectSidecarMigrationCandidates(sidecarRoot) {
   const candidates = [];
@@ -387,9 +394,9 @@ function collectSidecarMigrationCandidates(sidecarRoot) {
     for (const entry of fs10.readdirSync(sidecarRoot, { withFileTypes: true })) {
       if (!entry.isDirectory()) continue;
       if (entry.name.startsWith(".")) continue;
-      const sidecarDir = path5.join(sidecarRoot, entry.name);
-      const current = path5.join(sidecarDir, "skaile.manifest.yaml");
-      const legacy = path5.join(sidecarDir, ".skaile-source.yaml");
+      const sidecarDir = path4.join(sidecarRoot, entry.name);
+      const current = path4.join(sidecarDir, "skaile.manifest.yaml");
+      const legacy = path4.join(sidecarDir, ".skaile-source.yaml");
       const src = fs10.existsSync(current) ? current : fs10.existsSync(legacy) ? legacy : void 0;
       if (src) candidates.push({ src, slug: entry.name });
     }
@@ -399,7 +406,7 @@ function collectSidecarMigrationCandidates(sidecarRoot) {
 function moveSidecarManifests(candidates, manifestsDir) {
   let migrated = 0;
   for (const { src, slug } of candidates) {
-    const dest = path5.join(manifestsDir, `${slug}.yaml`);
+    const dest = path4.join(manifestsDir, `${slug}.yaml`);
     if (fs10.existsSync(dest)) continue;
     try {
       fs10.renameSync(src, dest);
@@ -414,11 +421,11 @@ function moveSidecarManifests(candidates, manifestsDir) {
   return migrated;
 }
 function initStoreGitRepo(storeRoot) {
-  if (fs10.existsSync(path5.join(storeRoot, ".git"))) return;
+  if (fs10.existsSync(path4.join(storeRoot, ".git"))) return;
   try {
     spawnSync("git", ["init", "--quiet"], { cwd: storeRoot, stdio: "ignore" });
     fs10.writeFileSync(
-      path5.join(storeRoot, ".gitignore"),
+      path4.join(storeRoot, ".gitignore"),
       "# Remote-store cache \u2014 local to this machine.\nremote-cache/\n",
       "utf8"
     );
@@ -516,7 +523,7 @@ async function librariesPresent(client) {
   return rs.rows.length > 0;
 }
 function slugify2(p) {
-  const base = path5.basename(p) || "lib";
+  const base = path4.basename(p) || "lib";
   return base.toLowerCase().replace(/[^a-z0-9-]+/g, "-").replace(/^-|-$/g, "") || "lib";
 }
 async function runLibrariesMigration(client) {
@@ -681,19 +688,19 @@ async function purgeOrphanedAssetDefinitions(client) {
 }
 function assertNoLegacyLibDb(newDbPath) {
   if (fs10.existsSync(newDbPath)) return;
-  const parent = path5.dirname(newDbPath);
+  const parent = path4.dirname(newDbPath);
   const skaileHome = globalSkaileDir();
-  const defaultIndexPath2 = path5.join(skaileHome, "index.db");
+  const defaultIndexPath2 = path4.join(skaileHome, "index.db");
   const candidates = [];
-  if (path5.basename(newDbPath) === "index.db") {
-    candidates.push(path5.join(parent, "lib.db"));
+  if (path4.basename(newDbPath) === "index.db") {
+    candidates.push(path4.join(parent, "lib.db"));
   }
   if (newDbPath === defaultIndexPath2) {
-    candidates.push(path5.join(skaileHome, "libraries", "lib.db"));
-    candidates.push(path5.join(skaileHome, "library", "lib.db"));
+    candidates.push(path4.join(skaileHome, "libraries", "lib.db"));
+    candidates.push(path4.join(skaileHome, "library", "lib.db"));
   }
-  if (path5.basename(parent) === "libraries") {
-    candidates.push(path5.join(path5.dirname(parent), "library", "lib.db"));
+  if (path4.basename(parent) === "libraries") {
+    candidates.push(path4.join(path4.dirname(parent), "library", "lib.db"));
   }
   for (const legacy of candidates) {
     if (!fs10.existsSync(legacy)) continue;
@@ -855,14 +862,14 @@ var LocalIndex = class {
     let dbPath;
     if (typeof optionsOrDir === "string") {
       dir = optionsOrDir;
-      dbPath = path5.join(dir, "index.db");
+      dbPath = path4.join(dir, "index.db");
     } else if (optionsOrDir?.indexPath) {
       dbPath = optionsOrDir.indexPath;
       dir = optionsOrDir.libraryDir ?? resolveLibraryDir();
       this._kindRegistry = optionsOrDir.kindRegistry;
     } else if (optionsOrDir?.libraryDir) {
       dir = optionsOrDir.libraryDir;
-      dbPath = path5.join(dir, "index.db");
+      dbPath = path4.join(dir, "index.db");
       this._kindRegistry = optionsOrDir.kindRegistry;
     } else {
       dir = resolveLibraryDir();
@@ -872,7 +879,7 @@ var LocalIndex = class {
     if (!fs10.existsSync(dir)) {
       fs10.mkdirSync(dir, { recursive: true });
     }
-    const dbParent = path5.dirname(dbPath);
+    const dbParent = path4.dirname(dbPath);
     if (!fs10.existsSync(dbParent)) {
       fs10.mkdirSync(dbParent, { recursive: true });
     }
@@ -1094,7 +1101,7 @@ var LocalIndex = class {
    * @returns The created Instance plus its on-disk install path.
    */
   async install(manifest, opts) {
-    const libraryRoot = opts?.libraryRoot ?? path5.join(this.libraryDir, "installed");
+    const libraryRoot = opts?.libraryRoot ?? path4.join(this.libraryDir, "installed");
     const { installPath } = await installFromManifest({
       manifest,
       libraryRoot,
@@ -1251,7 +1258,7 @@ function git(cwd, args) {
   return spawnSync("git", args, { cwd, encoding: "utf-8" });
 }
 function isGitRepo(libPath) {
-  return existsSync(path5.join(libPath, ".git"));
+  return existsSync(path4.join(libPath, ".git"));
 }
 function spawnGit(cwd, args, action) {
   const r = git(cwd, args);
@@ -1606,7 +1613,7 @@ var LibraryManager = class {
       (l) => l.isDefault && (l.ownership === "owner" || l.ownership === "contributor")
     );
     if (writableDefault) return { library: writableDefault, created: false };
-    const personalPath = path5.join(librariesDir, "personal");
+    const personalPath = path4.join(librariesDir, "personal");
     fs10.mkdirSync(personalPath, { recursive: true });
     const lib = await this.addLibrary({
       name: "personal",
@@ -1637,6 +1644,24 @@ function describeSyncError(err) {
   }
   return parts.join(": ");
 }
+function scanLibraryRoot(rootPath, registry, scanOpts) {
+  const fallbackPublisher = resolveSourcePublisher(rootPath) ?? (path4.basename(rootPath) || "unknown");
+  const opts = {
+    registry,
+    sidecarManifestFile: scanOpts?.sidecarManifestFile,
+    sidecarPath: scanOpts?.sidecarPath,
+    includeDev: scanOpts?.includeDev ?? false,
+    publisher: fallbackPublisher
+  };
+  if (!scanOpts?.sidecarPath && !scanOpts?.sidecarManifestFile) {
+    opts.sourceConfig = readManifestSourceConfig(rootPath, fallbackPublisher);
+  }
+  return discoverAssetsInTree(rootPath, opts);
+}
+function libraryScanOptions(library) {
+  const url = library.ownership === "reader" && library.backendConfig && "url" in library.backendConfig ? library.backendConfig.url : void 0;
+  return { includeDev: true, sidecarManifestFile: url ? curatedManifestOverlay(url) : void 0 };
+}
 var LocalCatalogSource = class {
   constructor(library, sourceId, rootPath, registry, options) {
     this.library = library;
@@ -1673,9 +1698,9 @@ var LocalCatalogSource = class {
       libraryId: this.sourceId,
       kind: parsed.kind
     });
-    const wantPublisher = parsed.publisher?.replace(/^@/, "");
+    const wantPublisher = parsed.publisher === void 0 ? void 0 : barePublisher(parsed.publisher);
     return defs.filter(
-      (d) => d.name === parsed.name && (wantPublisher === void 0 || d.publisher.replace(/^@/, "") === wantPublisher)
+      (d) => d.name === parsed.name && (wantPublisher === void 0 || barePublisher(d.publisher) === wantPublisher)
     ).map((d) => d.version);
   }
   async fetchTarball(_ref, _sha256) {
@@ -1696,18 +1721,11 @@ var LocalCatalogSource = class {
    *   config's `dev_paths` (e.g. `ai-assets-dev/`) are discovered too.
    */
   scan(scanOpts) {
-    const fallbackPublisher = resolveSourcePublisher(this.rootPath) ?? (path5.basename(this.rootPath) || "unknown");
-    const opts = {
-      registry: this.registry,
-      sidecarManifestFile: this.sidecarManifestFile,
+    return scanLibraryRoot(this.rootPath, this.registry, {
       sidecarPath: this.sidecarPath,
-      includeDev: scanOpts?.includeDev ?? false,
-      publisher: fallbackPublisher
-    };
-    if (!this.sidecarPath && !this.sidecarManifestFile) {
-      opts.sourceConfig = readManifestSourceConfig(this.rootPath, fallbackPublisher);
-    }
-    return discoverAssetsInTree(this.rootPath, opts);
+      sidecarManifestFile: this.sidecarManifestFile,
+      includeDev: scanOpts?.includeDev
+    });
   }
   /**
    * Sync: discover assets in the source directory and cache them in the library.
@@ -1793,6 +1811,61 @@ function defToCatalogAsset(def) {
     manifest: def.manifest
   };
 }
+
+// library/src/local/install-library-asset.ts
+function installLibraryAsset(opts) {
+  const { def, library, mode } = opts;
+  const publisher = barePublisher(def.publisher);
+  const ref = assetRefToStr({ kind: def.kind, name: def.name, publisher, pin: def.version });
+  const registry = opts.registry ?? createDefaultRegistry();
+  const found = scanLibraryRoot(library.path, registry, libraryScanOptions(library)).assets.find(
+    (a) => a.kind === def.kind && a.name === def.name && barePublisher(a.publisher) === publisher && a.version === def.version
+  );
+  if (!found) {
+    const reindex = library.ownership === "reader" ? "skaile source sync" : `skaile library index ${library.name}`;
+    throw new Error(
+      `${ref} not found in library "${library.name}" at version ${def.version} \u2014 run \`${reindex}\``
+    );
+  }
+  if (def.sha256 && found.sha256 !== def.sha256) {
+    throw new Error(
+      `hash mismatch for ${ref}: indexed ${def.sha256}, library has ${found.sha256} \u2014 run \`skaile library index ${library.name}\``
+    );
+  }
+  const libRoot = resolve(library.path);
+  const srcRoot = resolve(found.fileFilter.assetRoot);
+  const target = resolve(opts.targetDir);
+  const fileScoped = sharesItsFolder(def.kind, registry);
+  const manifestAbs = resolve(found.manifestPath);
+  const src = fileScoped ? manifestAbs : srcRoot;
+  const rel = relative(libRoot, src).split(sep).join("/");
+  if (!rel) {
+    throw new Error(`${ref} sits at the root of library "${library.name}"; move it into a folder`);
+  }
+  assertSafeManifestPath(target, rel);
+  const installPath = resolve(target, rel);
+  const lockPath = join(target, "skaile.lock.yaml");
+  const prevLock = readLock(lockPath);
+  mkdirSync(dirname(installPath), { recursive: true });
+  if (mode === "link") symlinkSync(src, installPath);
+  else if (fileScoped) copyFileSync(src, installPath);
+  else cpSync(src, installPath, { recursive: true });
+  const lockEntries = buildLibraryLockEntries([
+    {
+      kind: def.kind,
+      publisher,
+      name: def.name,
+      library: {
+        name: library.name,
+        version: def.version,
+        sha256: found.sha256,
+        installed: mode
+      }
+    }
+  ]);
+  writeLock(lockPath, mergeLockFile(prevLock, buildLockFile([], /* @__PURE__ */ new Set(), lockEntries)));
+  return { installPath, lockKey: Object.keys(lockEntries)[0] ?? ref, sha256: found.sha256 };
+}
 var FALLBACK_USER_NAME = "Skaile CLI";
 var FALLBACK_USER_EMAIL = "skaile-cli@local";
 var ROOT_README = `# Skaile Sidecar Manifests
@@ -1840,7 +1913,7 @@ var SidecarGit = class {
     if (!fs10.existsSync(this.rootDir)) {
       fs10.mkdirSync(this.rootDir, { recursive: true });
     }
-    const gitDir = path5.join(this.rootDir, ".git");
+    const gitDir = path4.join(this.rootDir, ".git");
     const freshRepo = !fs10.existsSync(gitDir);
     if (freshRepo) {
       const init = this.spawn(["init", "-b", "main"]);
@@ -1848,9 +1921,9 @@ var SidecarGit = class {
         throw new Error(`git init failed: ${init.stderr || init.stdout}`);
       }
     }
-    const attrsPath = path5.join(this.rootDir, ".gitattributes");
+    const attrsPath = path4.join(this.rootDir, ".gitattributes");
     if (!fs10.existsSync(attrsPath)) fs10.writeFileSync(attrsPath, GITATTRIBUTES, "utf-8");
-    const readmePath = path5.join(this.rootDir, "README.md");
+    const readmePath = path4.join(this.rootDir, "README.md");
     if (!fs10.existsSync(readmePath)) fs10.writeFileSync(readmePath, ROOT_README, "utf-8");
     if (!this.hasGlobalGitConfig("user.name")) {
       this.spawn(["config", "user.name", FALLBACK_USER_NAME]);
@@ -1876,7 +1949,7 @@ var SidecarGit = class {
    */
   async commit(slug, message, opts) {
     if (opts?.skip) return;
-    const slugDir = path5.join(this.rootDir, slug);
+    const slugDir = path4.join(this.rootDir, slug);
     if (fs10.existsSync(slugDir)) {
       this.spawn(["add", "--", slug]);
     } else {
@@ -1937,7 +2010,7 @@ ${result.stderr}`;
 };
 function migrateWorkspaceConfig(dir, opts) {
   const filename = opts?.filename ?? "skaile.yaml";
-  const filePath = path5.join(dir, filename);
+  const filePath = path4.join(dir, filename);
   if (!fs10.existsSync(filePath)) {
     return { migrated: false, version: 1, warnings: ["No skaile.yaml found"] };
   }
@@ -2162,8 +2235,8 @@ function resolveTemplate(template, context) {
   });
   return { value: result, hasSecret: false };
 }
-function setNestedValue(obj, path15, value) {
-  const parts = path15.split(".");
+function setNestedValue(obj, path16, value) {
+  const parts = path16.split(".");
   let current = obj;
   for (let i = 0; i < parts.length - 1; i++) {
     const key = parts[i];
@@ -2768,8 +2841,8 @@ function deepEqual(a, b) {
 function defaultCatalogCacheDir() {
   const home = globalSkaileDir();
   return migrateLegacyDir(
-    path5.join(globalCacheRoot(), "catalog"),
-    path5.join(home, "catalog-cache")
+    path4.join(globalCacheRoot(), "catalog"),
+    path4.join(home, "catalog-cache")
   );
 }
 var INDEX_FILE = "index.json";
@@ -2842,7 +2915,7 @@ var CatalogCache = class {
   // ── public: tarball cache ───────────────────────────────────────────────
   /** Absolute path where a tarball with `sha256` would be cached. */
   tarballPath(sha256) {
-    return path5.join(this.dir, TARBALL_DIR, `${sha256}.tgz`);
+    return path4.join(this.dir, TARBALL_DIR, `${sha256}.tgz`);
   }
   /** Read a cached tarball from disk if present, otherwise `null`. */
   readTarball(sha256) {
@@ -2852,7 +2925,7 @@ var CatalogCache = class {
   }
   /** Persist a tarball blob to disk (atomic write). */
   writeTarball(sha256, bytes) {
-    const dir = path5.join(this.dir, TARBALL_DIR);
+    const dir = path4.join(this.dir, TARBALL_DIR);
     if (!fs10.existsSync(dir)) fs10.mkdirSync(dir, { recursive: true });
     const finalPath = this.tarballPath(sha256);
     const tmpPath = `${finalPath}.${process.pid}.${Math.random().toString(36).slice(2)}.tmp`;
@@ -2876,7 +2949,7 @@ var CatalogCache = class {
    */
   invalidateEverything() {
     this.invalidateAll();
-    const tarballDir = path5.join(this.dir, TARBALL_DIR);
+    const tarballDir = path4.join(this.dir, TARBALL_DIR);
     if (fs10.existsSync(tarballDir)) {
       fs10.rmSync(tarballDir, { recursive: true, force: true });
     }
@@ -2888,11 +2961,11 @@ var CatalogCache = class {
   // ── private ─────────────────────────────────────────────────────────────
   ensureDir() {
     if (!fs10.existsSync(this.dir)) fs10.mkdirSync(this.dir, { recursive: true });
-    const tarballDir = path5.join(this.dir, TARBALL_DIR);
+    const tarballDir = path4.join(this.dir, TARBALL_DIR);
     if (!fs10.existsSync(tarballDir)) fs10.mkdirSync(tarballDir, { recursive: true });
   }
   indexPath() {
-    return path5.join(this.dir, INDEX_FILE);
+    return path4.join(this.dir, INDEX_FILE);
   }
   loadIndex() {
     if (this.index) return this.index;
@@ -3726,37 +3799,8 @@ var defaultFetch2 = async (url, init) => {
     signal: requestInit.signal ?? AbortSignal.timeout(CATALOG_REQUEST_TIMEOUT_MS2)
   });
 };
-var MANIFEST_FILENAME = "skaile.manifest.yaml";
-async function writeManifestIfMissing(input) {
-  const manifestPath = path5.join(input.libraryPath, MANIFEST_FILENAME);
-  if (fs10.existsSync(manifestPath)) return { wrote: false, manifestPath };
-  const now = (/* @__PURE__ */ new Date()).toISOString();
-  const yaml = `# Generated by skaile library add on ${now}
-# Edit by hand to inline discovered assets; or run \`skaile library refresh-manifest\`.
-publisher: ""
-assets: []
-`;
-  fs10.writeFileSync(manifestPath, yaml, "utf-8");
-  if (input.ownership !== "owner") {
-    const excludePath = path5.join(input.libraryPath, ".git", "info", "exclude");
-    if (fs10.existsSync(path5.dirname(excludePath))) {
-      const current = fs10.existsSync(excludePath) ? fs10.readFileSync(excludePath, "utf-8") : "";
-      if (!current.includes(MANIFEST_FILENAME)) {
-        fs10.writeFileSync(
-          excludePath,
-          (current.endsWith("\n") || current === "" ? current : `${current}
-`) + `# skaile-managed local-overlay manifest
-${MANIFEST_FILENAME}
-`,
-          "utf-8"
-        );
-      }
-    }
-  }
-  return { wrote: true, manifestPath };
-}
 function discoveredToAssetEntry(asset, repoPublisher, inheritPublisher) {
-  const root = path5.posix.dirname(asset.relativePath.replace(/\\/g, "/"));
+  const root = path4.posix.dirname(asset.relativePath.replace(/\\/g, "/"));
   const entry = {
     kind: asset.kind,
     name: asset.name,
@@ -3780,10 +3824,83 @@ function writeCuratedManifest(input) {
   const inheritPublisher = input.inheritPublisher ?? false;
   const assets = input.assets.filter((a) => a.kind !== "preset").map((a) => discoveredToAssetEntry(a, publisher, inheritPublisher)).sort((a, b) => `${a.kind}:${a.name}`.localeCompare(`${b.kind}:${b.name}`));
   const manifest = { publisher, assets };
-  fs10.mkdirSync(path5.dirname(manifestPath), { recursive: true });
+  fs10.mkdirSync(path4.dirname(manifestPath), { recursive: true });
   fs10.writeFileSync(manifestPath, encodeSkaileManifest(manifest), "utf-8");
   return { wrote: true, manifestPath, assetCount: assets.length };
 }
+function openManifest(libraryPath) {
+  const dir = path4.resolve(libraryPath);
+  const file = path4.join(dir, SKAILE_MANIFEST_FILENAME);
+  if (!fs10.existsSync(file)) {
+    fs10.mkdirSync(dir, { recursive: true });
+    return { editor: ManifestYamlEditor.create(file), created: true };
+  }
+  const editor = ManifestYamlEditor.load(file);
+  const problem = editor.problem();
+  if (problem) throw new Error(`${file} is not a valid manifest: ${problem}`);
+  return { editor, created: false };
+}
+function assertManifestEditable(libraryPath) {
+  openManifest(libraryPath);
+}
+function upsertManifestAsset(libraryPath, input) {
+  const { editor } = openManifest(libraryPath);
+  const declared = editor.getPublisher();
+  const topLevel = declared === void 0 ? void 0 : barePublisher(declared);
+  const overridesTopLevel = !!input.publisher && input.publisher !== topLevel;
+  const entry = { kind: input.kind, name: input.name, root: input.root };
+  if (input.version) entry.version = input.version;
+  if (overridesTopLevel) entry.publisher = input.publisher;
+  if (input.description) entry.description = input.description;
+  if (input.keywords && input.keywords.length > 0) entry.keywords = input.keywords;
+  const existing = editor.getAssets().find((a) => a.kind === input.kind && a.name === input.name);
+  const next = existing ? { ...existing, ...entry } : entry;
+  if (existing && input.publisher && !overridesTopLevel) delete next.publisher;
+  if (!existing || !isDeepStrictEqual(existing, next)) {
+    editor.setAsset(next);
+    editor.save();
+  }
+  return { manifestPath: editor.path, added: !existing };
+}
+function missingRootAssets(libraryPath, manifest) {
+  return (manifest.assets ?? []).filter((a) => {
+    if (a.source || manifest.source || !a.root) return false;
+    const dir = path4.resolve(libraryPath, a.root);
+    return !(fs10.existsSync(dir) && fs10.statSync(dir).isDirectory());
+  });
+}
+function pruneMissingRootAssets(libraryPath) {
+  const manifest = loadSkPublishManifest(libraryPath);
+  if (!manifest) return [];
+  const missing = missingRootAssets(libraryPath, manifest);
+  if (missing.length === 0) return [];
+  const { editor } = openManifest(libraryPath);
+  const removed = missing.filter((a) => editor.removeAsset(a.kind, a.name));
+  if (removed.length > 0) editor.save();
+  return removed;
+}
+function stampManifestPublisher(libraryPath, publisher) {
+  const { editor, created } = openManifest(libraryPath);
+  if (editor.getPublisher()) return false;
+  editor.setPublisher(publisher);
+  if (created) editor.ensureAssets();
+  editor.save();
+  return true;
+}
+async function syncManifestWithDisk(libraryPath, defaultPublisher) {
+  stampManifestPublisher(libraryPath, defaultPublisher);
+  const removed = pruneMissingRootAssets(libraryPath);
+  const publisher = loadSkPublishManifest(libraryPath)?.publisher ?? defaultPublisher;
+  for (const e of await scanDirectory(libraryPath, publisher)) {
+    upsertManifestAsset(libraryPath, {
+      kind: e.kind,
+      name: e.name,
+      root: path4.relative(libraryPath, path4.dirname(e.source)) || e.name,
+      version: e.version
+    });
+  }
+  return removed;
+}
 var PinPolicySchema = z3.enum(PIN_POLICIES);
 var LibraryInstanceRefSchema = z3.object({
   id: z3.string().uuid(),
@@ -3836,7 +3953,7 @@ function parseWorkspaceV2(raw) {
   return WorkspaceConfigV2Schema.parse(raw);
 }
 function loadWorkspaceV2(dir, filename = "skaile.yaml") {
-  const filePath = path5.join(dir, filename);
+  const filePath = path4.join(dir, filename);
   if (!fs10.existsSync(filePath)) return null;
   const content = fs10.readFileSync(filePath, "utf-8");
   const raw = parse(content);
@@ -3844,7 +3961,7 @@ function loadWorkspaceV2(dir, filename = "skaile.yaml") {
   return parseWorkspaceV2(raw);
 }
 function saveWorkspaceV2(dir, v2, filename = "skaile.yaml") {
-  const filePath = path5.join(dir, filename);
+  const filePath = path4.join(dir, filename);
   let existing = {};
   if (fs10.existsSync(filePath)) {
     const content = fs10.readFileSync(filePath, "utf-8");
@@ -3860,7 +3977,7 @@ function saveWorkspaceV2(dir, v2, filename = "skaile.yaml") {
 }
 var LOCK_FILENAME = "skaile.lock.yaml";
 function loadLockFile(dir) {
-  const filePath = path5.join(dir, LOCK_FILENAME);
+  const filePath = path4.join(dir, LOCK_FILENAME);
   if (!fs10.existsSync(filePath)) return null;
   const content = fs10.readFileSync(filePath, "utf-8");
   const raw = parse(content);
@@ -3878,7 +3995,7 @@ function loadLockFile(dir) {
   return LockFileSchema.parse(raw);
 }
 function saveLockFile(dir, lock) {
-  const filePath = path5.join(dir, LOCK_FILENAME);
+  const filePath = path4.join(dir, LOCK_FILENAME);
   if (!fs10.existsSync(dir)) {
     fs10.mkdirSync(dir, { recursive: true });
   }
@@ -3899,7 +4016,7 @@ function createEmptyLockFile() {
   };
 }
 function detectWorkspaceVersion(dir, filename = "skaile.yaml") {
-  const filePath = path5.join(dir, filename);
+  const filePath = path4.join(dir, filename);
   if (!fs10.existsSync(filePath)) return null;
   const content = fs10.readFileSync(filePath, "utf-8");
   const raw = parse(content);
@@ -3907,6 +4024,6 @@ function detectWorkspaceVersion(dir, filename = "skaile.yaml") {
   return raw.version === 2 ? 2 : 1;
 }
 
-export { AssignmentNotFoundError, CatalogCache, CatalogConfigSchema, CatalogHttpError, DuplicateAssignmentError, DuplicateLibraryNameError, GitSyncDriver, InstanceHasConsumersError, InstanceNotFoundError, InterpolationError, KNOWN_ASSET_KINDS, KnowledgeManifestSchema, LIBRARY_BACKENDS, LIBRARY_OWNERSHIPS, LOCAL_CATALOG_URL, LibraryConfigSchema, LibraryError, LibraryInstanceRefSchema, LibraryManager, LibrarySectionSchema, LibrarySyncError, LocalCatalogSource, LocalIndex, LocalSyncDriver, LockAssignmentSchema, LockFileSchema, OfflineError, OperationNotPermittedError, PIN_POLICIES, PinPolicySchema, PresetAppliedSchema, PresetExpandedSchema, RemoteCatalogSource, RequiresEdgeSchema, RestCatalogSource, SidecarGit, SkaileConfigSchema, SourceNotFoundError, TarballHashMismatchError, UserLibraryNotFoundError, WorkspaceConfigV2Schema, applyNonStructuralUpgrade, applyPreset, applyPresetFromData, classifyRef, cloneOrInitGitRepo, createEmptyLockFile, deriveSlug, detectChanges, detectNestedPresetRefs, detectWorkspaceVersion, ensureGitRepo, evaluateUpgrade, extractLibraryInstanceId, extractReferencedKeys, filterKey, getConfigDefaults, getDefaultValue, getSidecarRoot, getStoreManifestsDir, getStoreRoot, hasInterpolationTokens, interpolate, isGitRepo, isLocalCatalogUrl, isSecretPlaceholder, knowledgeKindProvider, listSidecarSlugsOnDisk, loadLockFile, loadWorkspaceV2, migrateSidecarsToStoreIfNeeded, migrateWorkspaceConfig, parsePreset, parsePresetYaml, parseWorkspaceV2, projectConfigPath, queryInstancePickerChoices, resolveAllItems, resolveConfig, resolveIndexPath, resolveItem, resolvePin, resolveSidecarPaths, saveConfig, saveLockFile, saveWorkspaceV2, setOriginUrl, sha256Hex, storeSecrets, trpcGetUrl, userConfigPath, validateAllPlaceholders, validateKnowledge, validateNestingDepth, validatePlaceholder, writeCuratedManifest, writeManifestIfMissing };
-//# sourceMappingURL=chunk-SP47UJKE.js.map
-//# sourceMappingURL=chunk-SP47UJKE.js.map
+export { AssignmentNotFoundError, CatalogCache, CatalogConfigSchema, CatalogHttpError, DuplicateAssignmentError, DuplicateLibraryNameError, GitSyncDriver, InstanceHasConsumersError, InstanceNotFoundError, InterpolationError, KNOWN_ASSET_KINDS, KnowledgeManifestSchema, LIBRARY_BACKENDS, LIBRARY_OWNERSHIPS, LOCAL_CATALOG_URL, LibraryConfigSchema, LibraryError, LibraryInstanceRefSchema, LibraryManager, LibrarySectionSchema, LibrarySyncError, LocalCatalogSource, LocalIndex, LocalSyncDriver, LockAssignmentSchema, LockFileSchema, OfflineError, OperationNotPermittedError, PIN_POLICIES, PinPolicySchema, PresetAppliedSchema, PresetExpandedSchema, RemoteCatalogSource, RequiresEdgeSchema, RestCatalogSource, SidecarGit, SkaileConfigSchema, SourceNotFoundError, TarballHashMismatchError, UserLibraryNotFoundError, WorkspaceConfigV2Schema, applyNonStructuralUpgrade, applyPreset, applyPresetFromData, assertManifestEditable, classifyRef, cloneOrInitGitRepo, createEmptyLockFile, curatedManifestOverlay, deriveSlug, detectChanges, detectNestedPresetRefs, detectWorkspaceVersion, ensureGitRepo, evaluateUpgrade, extractLibraryInstanceId, extractReferencedKeys, filterKey, getConfigDefaults, getDefaultValue, getSidecarRoot, getStoreManifestsDir, getStoreRoot, hasInterpolationTokens, installLibraryAsset, interpolate, isGitRepo, isLocalCatalogUrl, isSecretPlaceholder, knowledgeKindProvider, listSidecarSlugsOnDisk, loadLockFile, loadWorkspaceV2, migrateSidecarsToStoreIfNeeded, migrateWorkspaceConfig, missingRootAssets, parsePreset, parsePresetYaml, parseWorkspaceV2, projectConfigPath, pruneMissingRootAssets, queryInstancePickerChoices, resolveAllItems, resolveConfig, resolveIndexPath, resolveItem, resolvePin, resolveSidecarPaths, saveConfig, saveLockFile, saveWorkspaceV2, setOriginUrl, sha256Hex, stampManifestPublisher, storeSecrets, syncManifestWithDisk, trpcGetUrl, upsertManifestAsset, userConfigPath, validateAllPlaceholders, validateKnowledge, validateNestingDepth, validatePlaceholder, writeCuratedManifest };
+//# sourceMappingURL=chunk-B4J4RGNY.js.map
+//# sourceMappingURL=chunk-B4J4RGNY.js.map