@skaile/workspaces 5.1.3 → 5.2.0

package/dist/factory-assets/connectors/webdav.js

@@ -1,37 +1,37 @@
-export { WebDAVConnector, createConnector18 as createConnector } from '../../chunk-M4ISBWXR.js';
-import '../../chunk-KC3OF6B2.js';
-import '../../chunk-WKIOWDLQ.js';
-import '../../chunk-QU4J5YSJ.js';
-import '../../chunk-TVOODIZE.js';
+export { WebDAVConnector, createConnector18 as createConnector } from '../../chunk-MGHUSFYQ.js';
+import '../../chunk-QMWMSZQ4.js';
+import '../../chunk-UDBN3LZU.js';
+import '../../chunk-OFNXRI4L.js';
+import '../../chunk-2QZG5VJQ.js';
 import '../../chunk-EINLFFP6.js';
 import '../../chunk-LOO5CB5M.js';
-import '../../chunk-RDYI4MML.js';
-import '../../chunk-KVAI5DGL.js';
+import '../../chunk-BNUZEYC3.js';
+import '../../chunk-BUNBKRJZ.js';
 import '../../chunk-XBSQ4KMC.js';
 import '../../chunk-YROR332M.js';
-import '../../chunk-ZD7CX25M.js';
+import '../../chunk-3E2TIPBZ.js';
 import '../../chunk-6E6PKKAD.js';
 import '../../chunk-IFGTRL2I.js';
-import '../../chunk-UMSWQKCY.js';
+import '../../chunk-RXPC4KBW.js';
 import '../../chunk-37FTLYFP.js';
 import '../../chunk-QZLWJETK.js';
 import '../../chunk-XUUYAS3Z.js';
 import '../../chunk-NFGRW3L7.js';
 import '../../chunk-QCI6D7E4.js';
-import '../../chunk-IDEA6CYI.js';
-import '../../chunk-IWCCZL7C.js';
+import '../../chunk-K2K7OF4P.js';
+import '../../chunk-BIMEKYOE.js';
 import '../../chunk-4GY63JU6.js';
-import '../../chunk-YDJZRLGN.js';
+import '../../chunk-PU5VY7KF.js';
 import '../../chunk-U6K3I3AX.js';
-import '../../chunk-K5GBV4SA.js';
+import '../../chunk-5BEFNLOR.js';
 import '../../chunk-A2ULN3KX.js';
-import '../../chunk-MXXKTQXJ.js';
+import '../../chunk-P2EM6FNQ.js';
 import '../../chunk-TLKM4M47.js';
 import '../../chunk-TOSHZX4C.js';
-import '../../chunk-AG44ZJ7W.js';
+import '../../chunk-YRF5CYHR.js';
 import '../../chunk-RVRB27AN.js';
-import '../../chunk-DXUQCMVT.js';
-import '../../chunk-43ZBF3WH.js';
+import '../../chunk-YANDJSMN.js';
+import '../../chunk-OABIGSUY.js';
 import '../../chunk-ICSCSM5D.js';
 import '../../chunk-JMKB7IB4.js';
 import '../../chunk-MJHSLODD.js';

package/dist/factory-assets/connectors/xstate-store.js

@@ -1,37 +1,37 @@
-export { XStateStoreConnector, createConnector20 as createConnector } from '../../chunk-M4ISBWXR.js';
-import '../../chunk-KC3OF6B2.js';
-import '../../chunk-WKIOWDLQ.js';
-import '../../chunk-QU4J5YSJ.js';
-import '../../chunk-TVOODIZE.js';
+export { XStateStoreConnector, createConnector20 as createConnector } from '../../chunk-MGHUSFYQ.js';
+import '../../chunk-QMWMSZQ4.js';
+import '../../chunk-UDBN3LZU.js';
+import '../../chunk-OFNXRI4L.js';
+import '../../chunk-2QZG5VJQ.js';
 import '../../chunk-EINLFFP6.js';
 import '../../chunk-LOO5CB5M.js';
-import '../../chunk-RDYI4MML.js';
-import '../../chunk-KVAI5DGL.js';
+import '../../chunk-BNUZEYC3.js';
+import '../../chunk-BUNBKRJZ.js';
 import '../../chunk-XBSQ4KMC.js';
 import '../../chunk-YROR332M.js';
-import '../../chunk-ZD7CX25M.js';
+import '../../chunk-3E2TIPBZ.js';
 import '../../chunk-6E6PKKAD.js';
 import '../../chunk-IFGTRL2I.js';
-import '../../chunk-UMSWQKCY.js';
+import '../../chunk-RXPC4KBW.js';
 import '../../chunk-37FTLYFP.js';
 import '../../chunk-QZLWJETK.js';
 import '../../chunk-XUUYAS3Z.js';
 import '../../chunk-NFGRW3L7.js';
 import '../../chunk-QCI6D7E4.js';
-import '../../chunk-IDEA6CYI.js';
-import '../../chunk-IWCCZL7C.js';
+import '../../chunk-K2K7OF4P.js';
+import '../../chunk-BIMEKYOE.js';
 import '../../chunk-4GY63JU6.js';
-import '../../chunk-YDJZRLGN.js';
+import '../../chunk-PU5VY7KF.js';
 import '../../chunk-U6K3I3AX.js';
-import '../../chunk-K5GBV4SA.js';
+import '../../chunk-5BEFNLOR.js';
 import '../../chunk-A2ULN3KX.js';
-import '../../chunk-MXXKTQXJ.js';
+import '../../chunk-P2EM6FNQ.js';
 import '../../chunk-TLKM4M47.js';
 import '../../chunk-TOSHZX4C.js';
-import '../../chunk-AG44ZJ7W.js';
+import '../../chunk-YRF5CYHR.js';
 import '../../chunk-RVRB27AN.js';
-import '../../chunk-DXUQCMVT.js';
-import '../../chunk-43ZBF3WH.js';
+import '../../chunk-YANDJSMN.js';
+import '../../chunk-OABIGSUY.js';
 import '../../chunk-ICSCSM5D.js';
 import '../../chunk-JMKB7IB4.js';
 import '../../chunk-MJHSLODD.js';

package/dist/factory-assets/connectors/xstate.js

@@ -1,37 +1,37 @@
-export { XStateConnector, createConnector19 as createConnector } from '../../chunk-M4ISBWXR.js';
-import '../../chunk-KC3OF6B2.js';
-import '../../chunk-WKIOWDLQ.js';
-import '../../chunk-QU4J5YSJ.js';
-import '../../chunk-TVOODIZE.js';
+export { XStateConnector, createConnector19 as createConnector } from '../../chunk-MGHUSFYQ.js';
+import '../../chunk-QMWMSZQ4.js';
+import '../../chunk-UDBN3LZU.js';
+import '../../chunk-OFNXRI4L.js';
+import '../../chunk-2QZG5VJQ.js';
 import '../../chunk-EINLFFP6.js';
 import '../../chunk-LOO5CB5M.js';
-import '../../chunk-RDYI4MML.js';
-import '../../chunk-KVAI5DGL.js';
+import '../../chunk-BNUZEYC3.js';
+import '../../chunk-BUNBKRJZ.js';
 import '../../chunk-XBSQ4KMC.js';
 import '../../chunk-YROR332M.js';
-import '../../chunk-ZD7CX25M.js';
+import '../../chunk-3E2TIPBZ.js';
 import '../../chunk-6E6PKKAD.js';
 import '../../chunk-IFGTRL2I.js';
-import '../../chunk-UMSWQKCY.js';
+import '../../chunk-RXPC4KBW.js';
 import '../../chunk-37FTLYFP.js';
 import '../../chunk-QZLWJETK.js';
 import '../../chunk-XUUYAS3Z.js';
 import '../../chunk-NFGRW3L7.js';
 import '../../chunk-QCI6D7E4.js';
-import '../../chunk-IDEA6CYI.js';
-import '../../chunk-IWCCZL7C.js';
+import '../../chunk-K2K7OF4P.js';
+import '../../chunk-BIMEKYOE.js';
 import '../../chunk-4GY63JU6.js';
-import '../../chunk-YDJZRLGN.js';
+import '../../chunk-PU5VY7KF.js';
 import '../../chunk-U6K3I3AX.js';
-import '../../chunk-K5GBV4SA.js';
+import '../../chunk-5BEFNLOR.js';
 import '../../chunk-A2ULN3KX.js';
-import '../../chunk-MXXKTQXJ.js';
+import '../../chunk-P2EM6FNQ.js';
 import '../../chunk-TLKM4M47.js';
 import '../../chunk-TOSHZX4C.js';
-import '../../chunk-AG44ZJ7W.js';
+import '../../chunk-YRF5CYHR.js';
 import '../../chunk-RVRB27AN.js';
-import '../../chunk-DXUQCMVT.js';
-import '../../chunk-43ZBF3WH.js';
+import '../../chunk-YANDJSMN.js';
+import '../../chunk-OABIGSUY.js';
 import '../../chunk-ICSCSM5D.js';
 import '../../chunk-JMKB7IB4.js';
 import '../../chunk-MJHSLODD.js';

package/dist/{flows-SVCCADGE.js → flows-BOB5YA5R.js}

@@ -1,26 +1,26 @@
-export { flowFindFlowForSession, flowGetSession, flowList, flowListSessions, flowShow } from './chunk-RNNUYFFD.js';
+export { flowFindFlowForSession, flowGetSession, flowList, flowListSessions, flowShow } from './chunk-FJTC5YFO.js';
 import './chunk-R6O6YWU7.js';
-import './chunk-TYUJB336.js';
+import './chunk-7Y43UXKA.js';
 import './chunk-X5YPJV4N.js';
-import './chunk-VDJKWKH2.js';
-import './chunk-IWCCZL7C.js';
+import './chunk-XOTJVCJB.js';
+import './chunk-BIMEKYOE.js';
 import './chunk-4GY63JU6.js';
-import './chunk-YDJZRLGN.js';
+import './chunk-PU5VY7KF.js';
 import './chunk-U6K3I3AX.js';
-import './chunk-K5GBV4SA.js';
+import './chunk-5BEFNLOR.js';
 import './chunk-A2ULN3KX.js';
-import './chunk-MXXKTQXJ.js';
+import './chunk-P2EM6FNQ.js';
 import './chunk-TLKM4M47.js';
 import './chunk-TOSHZX4C.js';
-import './chunk-AG44ZJ7W.js';
+import './chunk-YRF5CYHR.js';
 import './chunk-RVRB27AN.js';
-import './chunk-DXUQCMVT.js';
-import './chunk-43ZBF3WH.js';
+import './chunk-YANDJSMN.js';
+import './chunk-OABIGSUY.js';
 import './chunk-ICSCSM5D.js';
 import './chunk-JMKB7IB4.js';
 import './chunk-MJHSLODD.js';
 import './chunk-C3CAXQMA.js';
 import './chunk-BOFL7GIF.js';
 import './chunk-NSBPE2FW.js';
-//# sourceMappingURL=flows-SVCCADGE.js.map
-//# sourceMappingURL=flows-SVCCADGE.js.map
+//# sourceMappingURL=flows-BOB5YA5R.js.map
+//# sourceMappingURL=flows-BOB5YA5R.js.map

package/dist/{flows-SVCCADGE.js.map → flows-BOB5YA5R.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"flows-SVCCADGE.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"flows-BOB5YA5R.js"}

package/dist/{helpers-R3GLTAER.js → helpers-ZGK4R5MZ.js}

@@ -1,25 +1,25 @@
-export { KIND_COL_WIDTH, S, TARGET_DEFAULT_HINT, bareSoftDepName, colorRef, fitWidth, formatRelativeTime, formatSoftDepAddPreview, formatSoftDepHint, formatSoftDepRemovePreview, formatSoftDepSection, kindColor, kindColorPad, logErr, logInfo, logOk, logWarn } from './chunk-RO4Z2CBP.js';
-import './chunk-BEOKEK3B.js';
-import './chunk-SP47UJKE.js';
-import './chunk-UVOJSWD2.js';
-import './chunk-H4EGUQ7M.js';
+export { KIND_COL_WIDTH, S, TARGET_DEFAULT_HINT, bareSoftDepName, colorRef, fitWidth, formatRelativeTime, formatSoftDepAddPreview, formatSoftDepHint, formatSoftDepRemovePreview, formatSoftDepSection, kindColor, kindColorPad, logErr, logInfo, logOk, logWarn, warnLegacyClaudeCopies } from './chunk-77GKEZ2R.js';
+import './chunk-L257BENF.js';
+import './chunk-B4J4RGNY.js';
+import './chunk-LZ5RH6LD.js';
+import './chunk-4YE7OYTB.js';
 import './chunk-R7FOF242.js';
 import './chunk-ZDKJHQY2.js';
-import './chunk-AGWYBS2E.js';
+import './chunk-KGGT6MUM.js';
 import './chunk-CGYEHQOX.js';
-import './chunk-IWCCZL7C.js';
+import './chunk-BIMEKYOE.js';
 import './chunk-4GY63JU6.js';
-import './chunk-YDJZRLGN.js';
+import './chunk-PU5VY7KF.js';
 import './chunk-U6K3I3AX.js';
-import './chunk-K5GBV4SA.js';
+import './chunk-5BEFNLOR.js';
 import './chunk-A2ULN3KX.js';
-import './chunk-MXXKTQXJ.js';
+import './chunk-P2EM6FNQ.js';
 import './chunk-TLKM4M47.js';
 import './chunk-TOSHZX4C.js';
-import './chunk-AG44ZJ7W.js';
+import './chunk-YRF5CYHR.js';
 import './chunk-RVRB27AN.js';
-import './chunk-DXUQCMVT.js';
-import './chunk-43ZBF3WH.js';
+import './chunk-YANDJSMN.js';
+import './chunk-OABIGSUY.js';
 import './chunk-ICSCSM5D.js';
 import './chunk-JMKB7IB4.js';
 import './chunk-MJHSLODD.js';
@@ -30,5 +30,5 @@ import './chunk-UQ6LFBPZ.js';
 import './chunk-TNWXGHLD.js';
 import './chunk-5CYEWBPB.js';
 import './chunk-NSBPE2FW.js';
-//# sourceMappingURL=helpers-R3GLTAER.js.map
-//# sourceMappingURL=helpers-R3GLTAER.js.map
+//# sourceMappingURL=helpers-ZGK4R5MZ.js.map
+//# sourceMappingURL=helpers-ZGK4R5MZ.js.map

package/dist/{helpers-R3GLTAER.js.map → helpers-ZGK4R5MZ.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"helpers-R3GLTAER.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"helpers-ZGK4R5MZ.js"}

package/dist/library/index.js

@@ -1,21 +1,21 @@
-export { AssignmentNotFoundError, CatalogCache, CatalogConfigSchema, CatalogHttpError, DuplicateAssignmentError, DuplicateLibraryNameError, GitSyncDriver, InstanceHasConsumersError, InstanceNotFoundError, InterpolationError, KNOWN_ASSET_KINDS, KnowledgeManifestSchema, LIBRARY_BACKENDS, LIBRARY_OWNERSHIPS, LOCAL_CATALOG_URL, LibraryConfigSchema, LibraryError, LibraryInstanceRefSchema, LibraryManager, LibrarySectionSchema, LibrarySyncError, LocalCatalogSource, LocalIndex, LocalSyncDriver, LockAssignmentSchema, LockFileSchema, OfflineError, OperationNotPermittedError, PIN_POLICIES, PinPolicySchema, PresetAppliedSchema, PresetExpandedSchema, RemoteCatalogSource, RequiresEdgeSchema, RestCatalogSource, SidecarGit, SkaileConfigSchema, SourceNotFoundError, TarballHashMismatchError, UserLibraryNotFoundError, WorkspaceConfigV2Schema, applyNonStructuralUpgrade, applyPreset, applyPresetFromData, classifyRef, cloneOrInitGitRepo, createEmptyLockFile, deriveSlug, detectChanges, detectNestedPresetRefs, detectWorkspaceVersion, ensureGitRepo, evaluateUpgrade, extractLibraryInstanceId, extractReferencedKeys, filterKey, getConfigDefaults, getDefaultValue, getSidecarRoot, getStoreManifestsDir, getStoreRoot, hasInterpolationTokens, interpolate, isGitRepo, isLocalCatalogUrl, isSecretPlaceholder, knowledgeKindProvider, listSidecarSlugsOnDisk, loadLockFile, loadWorkspaceV2, migrateSidecarsToStoreIfNeeded, migrateWorkspaceConfig, parsePreset, parsePresetYaml, parseWorkspaceV2, projectConfigPath, queryInstancePickerChoices, resolveAllItems, resolveConfig, resolveIndexPath, resolveItem, resolvePin, resolveSidecarPaths, saveConfig, saveLockFile, saveWorkspaceV2, setOriginUrl, sha256Hex, storeSecrets, trpcGetUrl, userConfigPath, validateAllPlaceholders, validateKnowledge, validateNestingDepth, validatePlaceholder, writeCuratedManifest, writeManifestIfMissing } from '../chunk-SP47UJKE.js';
-import '../chunk-UVOJSWD2.js';
-export { installFromManifest } from '../chunk-H4EGUQ7M.js';
+export { AssignmentNotFoundError, CatalogCache, CatalogConfigSchema, CatalogHttpError, DuplicateAssignmentError, DuplicateLibraryNameError, GitSyncDriver, InstanceHasConsumersError, InstanceNotFoundError, InterpolationError, KNOWN_ASSET_KINDS, KnowledgeManifestSchema, LIBRARY_BACKENDS, LIBRARY_OWNERSHIPS, LOCAL_CATALOG_URL, LibraryConfigSchema, LibraryError, LibraryInstanceRefSchema, LibraryManager, LibrarySectionSchema, LibrarySyncError, LocalCatalogSource, LocalIndex, LocalSyncDriver, LockAssignmentSchema, LockFileSchema, OfflineError, OperationNotPermittedError, PIN_POLICIES, PinPolicySchema, PresetAppliedSchema, PresetExpandedSchema, RemoteCatalogSource, RequiresEdgeSchema, RestCatalogSource, SidecarGit, SkaileConfigSchema, SourceNotFoundError, TarballHashMismatchError, UserLibraryNotFoundError, WorkspaceConfigV2Schema, applyNonStructuralUpgrade, applyPreset, applyPresetFromData, assertManifestEditable, classifyRef, cloneOrInitGitRepo, createEmptyLockFile, curatedManifestOverlay, deriveSlug, detectChanges, detectNestedPresetRefs, detectWorkspaceVersion, ensureGitRepo, evaluateUpgrade, extractLibraryInstanceId, extractReferencedKeys, filterKey, getConfigDefaults, getDefaultValue, getSidecarRoot, getStoreManifestsDir, getStoreRoot, hasInterpolationTokens, installLibraryAsset, interpolate, isGitRepo, isLocalCatalogUrl, isSecretPlaceholder, knowledgeKindProvider, listSidecarSlugsOnDisk, loadLockFile, loadWorkspaceV2, migrateSidecarsToStoreIfNeeded, migrateWorkspaceConfig, missingRootAssets, parsePreset, parsePresetYaml, parseWorkspaceV2, projectConfigPath, pruneMissingRootAssets, queryInstancePickerChoices, resolveAllItems, resolveConfig, resolveIndexPath, resolveItem, resolvePin, resolveSidecarPaths, saveConfig, saveLockFile, saveWorkspaceV2, setOriginUrl, sha256Hex, stampManifestPublisher, storeSecrets, syncManifestWithDisk, trpcGetUrl, upsertManifestAsset, userConfigPath, validateAllPlaceholders, validateKnowledge, validateNestingDepth, validatePlaceholder, writeCuratedManifest } from '../chunk-B4J4RGNY.js';
+import '../chunk-LZ5RH6LD.js';
+export { installFromManifest } from '../chunk-4YE7OYTB.js';
 export { GITHUB_PAT_ENV, fetchAssetFilesFromGitHub } from '../chunk-R7FOF242.js';
 import '../chunk-ZDKJHQY2.js';
-export { resolveLibraryDir } from '../chunk-IWCCZL7C.js';
+export { resolveLibraryDir } from '../chunk-BIMEKYOE.js';
 import '../chunk-4GY63JU6.js';
-import '../chunk-YDJZRLGN.js';
+import '../chunk-PU5VY7KF.js';
 import '../chunk-U6K3I3AX.js';
-import '../chunk-K5GBV4SA.js';
+import '../chunk-5BEFNLOR.js';
 import '../chunk-A2ULN3KX.js';
-import '../chunk-MXXKTQXJ.js';
+import '../chunk-P2EM6FNQ.js';
 import '../chunk-TLKM4M47.js';
 import '../chunk-TOSHZX4C.js';
-import '../chunk-AG44ZJ7W.js';
+import '../chunk-YRF5CYHR.js';
 import '../chunk-RVRB27AN.js';
-import '../chunk-DXUQCMVT.js';
-import '../chunk-43ZBF3WH.js';
+import '../chunk-YANDJSMN.js';
+import '../chunk-OABIGSUY.js';
 import '../chunk-ICSCSM5D.js';
 import '../chunk-JMKB7IB4.js';
 import '../chunk-MJHSLODD.js';

package/dist/library/install.js

@@ -1,6 +1,6 @@
-export { installFromManifest, longestCommonDirPrefix } from '../chunk-H4EGUQ7M.js';
+export { installFromManifest, longestCommonDirPrefix } from '../chunk-4YE7OYTB.js';
 export { GITHUB_PAT_ENV, fetchAssetFilesFromGitHub } from '../chunk-R7FOF242.js';
-import '../chunk-43ZBF3WH.js';
+import '../chunk-OABIGSUY.js';
 import '../chunk-NSBPE2FW.js';
 //# sourceMappingURL=install.js.map
 //# sourceMappingURL=install.js.map

package/dist/library/src/index.d.ts

@@ -8,12 +8,14 @@ export { type AssetDefinition, type AssetFilter, type AssetKind, type Assignment
 export type { LocalIndexOptions } from "./local/library.js";
 export { LocalIndex } from "./local/library.js";
 export { LibraryManager } from "./local/library-manager.js";
+export type { InstalledLibraryAsset, InstallLibraryAssetOpts, } from "./local/install-library-asset.js";
+export { installLibraryAsset } from "./local/install-library-asset.js";
 export { LocalCatalogSource } from "./local/local-catalog-source.js";
 export type { GitInvocationResult, SidecarCommitOptions } from "./local/sidecar-git.js";
 export { SidecarGit } from "./local/sidecar-git.js";
 export type { SidecarPaths } from "./local/sidecar-paths.js";
 export { deriveSlug, getSidecarRoot, listSidecarSlugsOnDisk, resolveSidecarPaths, } from "./local/sidecar-paths.js";
-export { getStoreManifestsDir, getStoreRoot, migrateSidecarsToStoreIfNeeded, } from "./local/store-paths.js";
+export { curatedManifestOverlay, getStoreManifestsDir, getStoreRoot, migrateSidecarsToStoreIfNeeded, } from "./local/store-paths.js";
 export { type MigrationResult, migrateWorkspaceConfig } from "./migration.js";
 export type { PinExpression, ResolveResult } from "./pin-resolver.js";
 export { resolvePin } from "./pin-resolver.js";
@@ -26,8 +28,9 @@ export { RestCatalogSource } from "./remote/rest-catalog-source.js";
 export type { LibrarySyncDriver } from "./sync/driver.js";
 export { type CloneOrInitResult, cloneOrInitGitRepo, ensureGitRepo, GitSyncDriver, isGitRepo, setOriginUrl, } from "./sync/git-driver.js";
 export { LocalSyncDriver } from "./sync/local-driver.js";
-export type { WriteCuratedManifestInput, WriteCuratedManifestResult, WriteManifestInput, WriteManifestResult, } from "./sync/manifest-writeback.js";
-export { writeCuratedManifest, writeManifestIfMissing } from "./sync/manifest-writeback.js";
+export type { WriteCuratedManifestInput, WriteCuratedManifestResult, } from "./sync/manifest-writeback.js";
+export { writeCuratedManifest } from "./sync/manifest-writeback.js";
+export { assertManifestEditable, missingRootAssets, pruneMissingRootAssets, stampManifestPublisher, syncManifestWithDisk, type UpsertAssetInput, type UpsertAssetResult, upsertManifestAsset, } from "./manifest-writer.js";
 export { type AddLibraryInput, type AssetRef, type BackendConfig, type ConflictDescriptor, DuplicateLibraryNameError, type GitBackendConfig, LIBRARY_BACKENDS, LIBRARY_OWNERSHIPS, type Library, type LibraryBackend, type LibraryOwnership, LibrarySyncError, type LocalBackendConfig, type LocalChanges, OperationNotPermittedError, type ProposeOpts, type ProposeResult, type PublishOpts, type PublishResult, type PullOpts, type PullResult, type PushOpts, type PushResult, type RemoteChanges, type SyncStatus, type UpdateLibraryInput, UserLibraryNotFoundError, } from "./user-library.js";
 export { createEmptyLockFile, detectWorkspaceVersion, type LibraryInstanceRef, LibraryInstanceRefSchema, type LibrarySection, LibrarySectionSchema, type LockAssignment, LockAssignmentSchema, type LockFile, LockFileSchema, loadLockFile, loadWorkspaceV2, PinPolicySchema, type PresetApplied, PresetAppliedSchema, PresetExpandedSchema, parseWorkspaceV2, RequiresEdgeSchema, saveLockFile, saveWorkspaceV2, type WorkspaceConfigV2, WorkspaceConfigV2Schema, } from "./workspace-config.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/library/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../library/src/index.ts"],"names":[],"mappings":"AAIA,YAAY,EACV,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,GACf,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EACL,KAAK,aAAa,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,EACjB,KAAK,aAAa,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,EACjB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,KAAK,YAAY,EACjB,kBAAkB,EAClB,UAAU,EACV,cAAc,GACf,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,mBAAmB,GACpB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,KAAK,SAAS,EACd,yBAAyB,EACzB,cAAc,GACf,MAAM,kCAAkC,CAAC;AAC1C,YAAY,EACV,iBAAiB,EACjB,iCAAiC,GAClC,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,UAAU,EACf,uBAAuB,EACvB,KAAK,mBAAmB,EACxB,wBAAwB,EACxB,KAAK,WAAW,EAChB,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,yBAAyB,EACzB,qBAAqB,EACrB,iBAAiB,EACjB,KAAK,cAAc,EACnB,YAAY,EACZ,YAAY,EACZ,KAAK,SAAS,EACd,mBAAmB,EACnB,KAAK,UAAU,EACf,KAAK,mBAAmB,GACzB,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAE5D,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAE5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,YAAY,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AACxF,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,YAAY,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAE7D,OAAO,EACL,UAAU,EACV,cAAc,EACd,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,oBAAoB,EACpB,YAAY,EACZ,8BAA8B,GAC/B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,KAAK,eAAe,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAC9E,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGtE,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,YAAY,EACV,eAAe,EACf,SAAS,EACT,WAAW,EACX,UAAU,EACV,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,WAAW,EACX,WAAW,EACX,2BAA2B,EAC3B,UAAU,EACV,iBAAiB,EACjB,oBAAoB,EACpB,YAAY,EACZ,mBAAmB,EACnB,wBAAwB,EACxB,aAAa,GACd,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,yBAAyB,EAEzB,WAAW,EACX,mBAAmB,EAEnB,WAAW,EAEX,aAAa,EACb,sBAAsB,EACtB,eAAe,EACf,wBAAwB,EACxB,qBAAqB,EACrB,eAAe,EACf,sBAAsB,EACtB,kBAAkB,EAElB,WAAW,EACX,mBAAmB,EAEnB,WAAW,EACX,eAAe,EACf,0BAA0B,EAC1B,eAAe,EACf,WAAW,EACX,YAAY,EACZ,uBAAuB,EACvB,oBAAoB,EAEpB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,iBAAiB,EACjB,mBAAmB,EACnB,UAAU,EACV,cAAc,EACd,0BAA0B,EAC1B,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,SAAS,EACT,YAAY,EACZ,mBAAmB,EACnB,SAAS,EACT,wBAAwB,EACxB,UAAU,GACX,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAEhF,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,YAAY,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EACL,KAAK,iBAAiB,EACtB,kBAAkB,EAClB,aAAa,EACb,aAAa,EACb,SAAS,EACT,YAAY,GACb,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,YAAY,EACV,yBAAyB,EACzB,0BAA0B,EAC1B,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAE5F,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,QAAQ,EACb,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,yBAAyB,EACzB,KAAK,gBAAgB,EACrB,gBAAgB,EAChB,kBAAkB,EAClB,KAAK,OAAO,EACZ,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,gBAAgB,EAChB,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,0BAA0B,EAC1B,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,QAAQ,EACb,KAAK,UAAU,EACf,KAAK,QAAQ,EACb,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,kBAAkB,EACvB,wBAAwB,GACzB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,KAAK,kBAAkB,EACvB,wBAAwB,EACxB,KAAK,cAAc,EACnB,oBAAoB,EACpB,KAAK,cAAc,EACnB,oBAAoB,EACpB,KAAK,QAAQ,EACb,cAAc,EACd,YAAY,EACZ,eAAe,EACf,eAAe,EACf,KAAK,aAAa,EAClB,mBAAmB,EACnB,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,EAClB,YAAY,EACZ,eAAe,EACf,KAAK,iBAAiB,EACtB,uBAAuB,GACxB,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../library/src/index.ts"],"names":[],"mappings":"AAIA,YAAY,EACV,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,GACf,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EACL,KAAK,aAAa,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,EACjB,KAAK,aAAa,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,EACjB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,KAAK,YAAY,EACjB,kBAAkB,EAClB,UAAU,EACV,cAAc,GACf,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,mBAAmB,GACpB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,KAAK,SAAS,EACd,yBAAyB,EACzB,cAAc,GACf,MAAM,kCAAkC,CAAC;AAC1C,YAAY,EACV,iBAAiB,EACjB,iCAAiC,GAClC,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,UAAU,EACf,uBAAuB,EACvB,KAAK,mBAAmB,EACxB,wBAAwB,EACxB,KAAK,WAAW,EAChB,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,yBAAyB,EACzB,qBAAqB,EACrB,iBAAiB,EACjB,KAAK,cAAc,EACnB,YAAY,EACZ,YAAY,EACZ,KAAK,SAAS,EACd,mBAAmB,EACnB,KAAK,UAAU,EACf,KAAK,mBAAmB,GACzB,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAE5D,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAE5D,YAAY,EACV,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAEvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,YAAY,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AACxF,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,YAAY,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAE7D,OAAO,EACL,UAAU,EACV,cAAc,EACd,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,YAAY,EACZ,8BAA8B,GAC/B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,KAAK,eAAe,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAC9E,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGtE,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,YAAY,EACV,eAAe,EACf,SAAS,EACT,WAAW,EACX,UAAU,EACV,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,WAAW,EACX,WAAW,EACX,2BAA2B,EAC3B,UAAU,EACV,iBAAiB,EACjB,oBAAoB,EACpB,YAAY,EACZ,mBAAmB,EACnB,wBAAwB,EACxB,aAAa,GACd,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,yBAAyB,EAEzB,WAAW,EACX,mBAAmB,EAEnB,WAAW,EAEX,aAAa,EACb,sBAAsB,EACtB,eAAe,EACf,wBAAwB,EACxB,qBAAqB,EACrB,eAAe,EACf,sBAAsB,EACtB,kBAAkB,EAElB,WAAW,EACX,mBAAmB,EAEnB,WAAW,EACX,eAAe,EACf,0BAA0B,EAC1B,eAAe,EACf,WAAW,EACX,YAAY,EACZ,uBAAuB,EACvB,oBAAoB,EAEpB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,iBAAiB,EACjB,mBAAmB,EACnB,UAAU,EACV,cAAc,EACd,0BAA0B,EAC1B,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,SAAS,EACT,YAAY,EACZ,mBAAmB,EACnB,SAAS,EACT,wBAAwB,EACxB,UAAU,GACX,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAEhF,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,YAAY,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EACL,KAAK,iBAAiB,EACtB,kBAAkB,EAClB,aAAa,EACb,aAAa,EACb,SAAS,EACT,YAAY,GACb,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,YAAY,EACV,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEpE,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,EACpB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,mBAAmB,GACpB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,QAAQ,EACb,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,yBAAyB,EACzB,KAAK,gBAAgB,EACrB,gBAAgB,EAChB,kBAAkB,EAClB,KAAK,OAAO,EACZ,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,gBAAgB,EAChB,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,0BAA0B,EAC1B,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,QAAQ,EACb,KAAK,UAAU,EACf,KAAK,QAAQ,EACb,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,kBAAkB,EACvB,wBAAwB,GACzB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,KAAK,kBAAkB,EACvB,wBAAwB,EACxB,KAAK,cAAc,EACnB,oBAAoB,EACpB,KAAK,cAAc,EACnB,oBAAoB,EACpB,KAAK,QAAQ,EACb,cAAc,EACd,YAAY,EACZ,eAAe,EACf,eAAe,EACf,KAAK,aAAa,EAClB,mBAAmB,EACnB,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,EAClB,YAAY,EACZ,eAAe,EACf,KAAK,iBAAiB,EACtB,uBAAuB,GACxB,MAAM,uBAAuB,CAAC"}

package/dist/library/src/install/install-from-manifest.d.ts

@@ -17,6 +17,27 @@
  * @docLink packages/library/concepts#install
  */
 import type { InstallManifest } from "@skaile/workspaces/types";
+/**
+ * Validate a single manifest-supplied file path against path traversal.
+ *
+ * `manifest.files[].path` comes off the network — the attacker controls the
+ * entire manifest (and therefore every hash in it), so hash verification can
+ * NEVER mitigate a malicious *destination*. A path like
+ * `../../../../home/user/.bashrc` or an absolute path would escape
+ * `installPath` and yield an arbitrary file write. Every path is checked
+ * BEFORE any fetch or write happens; the first bad path aborts the entire
+ * install with a hard throw.
+ *
+ * A path is rejected if ANY of:
+ *   - it is empty;
+ *   - it is absolute (`path.isAbsolute`) or has a leading slash;
+ *   - it contains a `..` segment;
+ *   - `path.resolve(installPath, p)` is not `installPath` itself and does not
+ *     start with `installPath + path.sep` (escapes the install dir).
+ *
+ * @throws An error matching `/unsafe path in manifest/` on the first bad path.
+ */
+export declare function assertSafeManifestPath(installPath: string, p: string): void;
 /**
  * Longest common **directory** prefix across manifest paths, compared by whole
  * slash-delimited segments (never raw-string — so `app/` and `app-data/` never

package/dist/library/src/install/install-from-manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"install-from-manifest.d.ts","sourceRoot":"","sources":["../../../../library/src/install/install-from-manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAKH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AA6DhE;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAWvE;AAED;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,IAAI,EAAE;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAEtC;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,0DAA0D;IAC1D,QAAQ,EAAE,eAAe,CAAC;IAC1B,uEAAuE;IACvE,WAAW,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB;;;;;;;;;OASG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,qDAAqD;IACrD,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,CA+FnF"}
+{"version":3,"file":"install-from-manifest.d.ts","sourceRoot":"","sources":["../../../../library/src/install/install-from-manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAKH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAKhE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAU3E;AA0BD;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAWvE;AAED;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,IAAI,EAAE;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAEtC;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,0DAA0D;IAC1D,QAAQ,EAAE,eAAe,CAAC;IAC1B,uEAAuE;IACvE,WAAW,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB;;;;;;;;;OASG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,qDAAqD;IACrD,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,CA+FnF"}

package/dist/library/src/local/install-library-asset.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Verified install of a library asset into a project directory.
+ *
+ * The library-side counterpart to {@link installFromManifest}: that one verifies
+ * bytes fetched from a remote pointer, this one verifies bytes already on disk
+ * in a registered library. Both refuse to install content whose hash disagrees
+ * with the recorded one and both guard the destination path.
+ *
+ * One call resolves the asset on disk, checks its content hash against the index,
+ * copies or symlinks the asset and records a library-origin entry in the
+ * project's `skaile.lock.yaml`.
+ *
+ * @docLink packages/library/concepts#install
+ */
+import type { IAssetKindRegistry } from "@skaile/workspaces/plugins";
+import type { AssetDefinition } from "../library.js";
+import type { Library } from "../user-library.js";
+/** Options for {@link installLibraryAsset}. */
+export interface InstallLibraryAssetOpts {
+    /** The asset as the index resolved it; its `sha256` is the hash the install must match. */
+    def: AssetDefinition;
+    /**
+     * The registered library that holds the asset's bytes. `ownership` and
+     * `backendConfig` let the install rescan a source clone through the curated
+     * overlay the indexer used.
+     */
+    library: Pick<Library, "name" | "path"> & Partial<Pick<Library, "ownership" | "backendConfig">>;
+    /** Project directory that receives the asset and `skaile.lock.yaml`. */
+    targetDir: string;
+    /** `copy` copies the asset; `link` symlinks it back into the library. */
+    mode: "copy" | "link";
+    /** Kind registry the library was indexed with (defaults to the built-in kinds). */
+    registry?: IAssetKindRegistry;
+}
+/** Result of a successful {@link installLibraryAsset}. */
+export interface InstalledLibraryAsset {
+    /**
+     * Absolute path of the installed asset: its directory (the symlink itself in
+     * link mode), or its manifest file for a kind that is one file in a shared folder.
+     */
+    installPath: string;
+    /** Canonical lock key (`<kind>:@<publisher>/<name>#<version>`) recorded in the lock. */
+    lockKey: string;
+    /** Content hash the library copy was verified against. */
+    sha256: string;
+}
+/**
+ * Install one indexed library asset into `targetDir`.
+ *
+ * The asset lands at the same path relative to the library root. A directory
+ * kind is copied whole (merged over an existing directory) or symlinked so later
+ * library edits show up without reinstalling. A kind that shares its folder
+ * (prompt, preset) installs only its own manifest file, so siblings stay behind.
+ * The hash check covers the files discovery hashed, siblings included when the
+ * manifest declares the folder as the asset's `root`.
+ *
+ * @throws When the asset is no longer in the library at the indexed version, when its
+ *   on-disk hash differs from the indexed one (`hash mismatch`), when a directory-kind
+ *   asset sits at the library root or its path would escape the target, or when the
+ *   existing lock cannot be read. A link install over an existing path fails with the
+ *   filesystem's `EEXIST`.
+ */
+export declare function installLibraryAsset(opts: InstallLibraryAssetOpts): InstalledLibraryAsset;
+//# sourceMappingURL=install-library-asset.d.ts.map

package/dist/library/src/local/install-library-asset.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-library-asset.d.ts","sourceRoot":"","sources":["../../../../library/src/local/install-library-asset.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAiBH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAErE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAGlD,+CAA+C;AAC/C,MAAM,WAAW,uBAAuB;IACtC,2FAA2F;IAC3F,GAAG,EAAE,eAAe,CAAC;IACrB;;;;OAIG;IACH,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,eAAe,CAAC,CAAC,CAAC;IAChG,wEAAwE;IACxE,SAAS,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IACtB,mFAAmF;IACnF,QAAQ,CAAC,EAAE,kBAAkB,CAAC;CAC/B;AAED,0DAA0D;AAC1D,MAAM,WAAW,qBAAqB;IACpC;;;OAGG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,wFAAwF;IACxF,OAAO,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,uBAAuB,GAAG,qBAAqB,CAsExF"}

package/dist/library/src/local/local-catalog-source.d.ts

@@ -12,6 +12,7 @@
  */
 import { type DiscoveryResult } from "@skaile/workspaces/discovery";
 import type { CatalogAsset, CatalogAssetFilter, CatalogSourceInfo, IAssetKindRegistry, ICatalogSource } from "@skaile/workspaces/plugins";
+import type { BackendConfig, LibraryOwnership } from "../user-library.js";
 import type { LocalIndex } from "./library.js";
 /**
  * Render an error plus its `cause` chain into one human-readable line.
@@ -49,6 +50,35 @@ export interface LocalCatalogSourceOptions {
      */
     sidecarManifestFile?: string;
 }
+/**
+ * Discovery over a library root — the one scan both the indexer
+ * ({@link LocalCatalogSource.sync}) and the installer run, so an asset's
+ * publisher, location and hash agree between the index and what gets installed.
+ *
+ * `discoverAssetsInTree` merges the in-repo base manifest with either a curated
+ * store manifest FILE (`sidecarManifestFile`, the flat
+ * `~/.skaile/store/manifests/<slug>.yaml`) or a sidecar DIR (`sidecarPath`,
+ * legacy `<dir>/skaile.manifest.yaml`); the file overlay wins when both are set.
+ * The publisher falls back to manifest publisher ?? GitHub org of a git checkout
+ * ?? directory name (never a path segment inside the tree), so the index keys
+ * assets identically to `resolveAll`.
+ */
+export declare function scanLibraryRoot(rootPath: string, registry: IAssetKindRegistry | undefined, scanOpts?: LocalCatalogSourceOptions & {
+    includeDev?: boolean;
+}): DiscoveryResult;
+/**
+ * Scan options a registered library is indexed with, so the installer rescans
+ * it the way the indexer did. A source clone (a `reader` git library) is
+ * indexed through its curated store manifest when one exists; every other
+ * library has no overlay. `includeDev` is on: dev assets are indexed only under
+ * `--dev`, and an asset the index holds must stay findable either way.
+ */
+export declare function libraryScanOptions(library: {
+    ownership?: LibraryOwnership;
+    backendConfig?: BackendConfig;
+}): LocalCatalogSourceOptions & {
+    includeDev: true;
+};
 /**
  * Local-filesystem implementation of `ICatalogSource` (from `@skaile/plugins`).
  *

package/dist/library/src/local/local-catalog-source.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"local-catalog-source.d.ts","sourceRoot":"","sources":["../../../../library/src/local/local-catalog-source.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,EACL,KAAK,eAAe,EAGrB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EACV,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACf,MAAM,4BAA4B,CAAC;AAEpC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAM/C;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAYtD;AAMD;;;;GAIG;AACH,MAAM,WAAW,yBAAyB;IACxC;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAMD;;;;;;;;GAQG;AACH,qBAAa,kBAAmB,YAAW,cAAc;IAMrD,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;IAR5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAS;gBAG3B,OAAO,EAAE,UAAU,EACnB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,CAAC,EAAE,kBAAkB,YAAA,EAC9C,OAAO,CAAC,EAAE,yBAAyB;IAO/B,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IAMlD,UAAU,CAAC,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAUhE,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAkB5C,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAMhE,WAAW,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAIjD;;;;;;;;OAQG;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,eAAe;IAyB1D;;;;;;;;;;;OAWG;IACG,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC;QACvD,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,EAAE,MAAM,CAAC;QACtB,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,UAAU,EAAE,MAAM,EAAE,CAAC;KACtB,CAAC;CAoFH"}
+{"version":3,"file":"local-catalog-source.d.ts","sourceRoot":"","sources":["../../../../library/src/local/local-catalog-source.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,EAEL,KAAK,eAAe,EAGrB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EACV,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACf,MAAM,4BAA4B,CAAC;AAEpC,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC1E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAO/C;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAYtD;AAMD;;;;GAIG;AACH,MAAM,WAAW,yBAAyB;IACxC;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,kBAAkB,GAAG,SAAS,EACxC,QAAQ,CAAC,EAAE,yBAAyB,GAAG;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,GAC9D,eAAe,CAejB;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE;IAC1C,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B,GAAG,yBAAyB,GAAG;IAAE,UAAU,EAAE,IAAI,CAAA;CAAE,CAMnD;AAMD;;;;;;;;GAQG;AACH,qBAAa,kBAAmB,YAAW,cAAc;IAMrD,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;IAR5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAS;gBAG3B,OAAO,EAAE,UAAU,EACnB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,CAAC,EAAE,kBAAkB,YAAA,EAC9C,OAAO,CAAC,EAAE,yBAAyB;IAO/B,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IAMlD,UAAU,CAAC,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAUhE,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAmB5C,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAMhE,WAAW,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAIjD;;;;;;;;OAQG;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,eAAe;IAQ1D;;;;;;;;;;;OAWG;IACG,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC;QACvD,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,EAAE,MAAM,CAAC;QACtB,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,UAAU,EAAE,MAAM,EAAE,CAAC;KACtB,CAAC;CAoFH"}

package/dist/library/src/local/store-paths.d.ts

@@ -26,6 +26,12 @@
 export declare function getStoreRoot(): string;
 /** Manifests subdir: `<store>/manifests/`. */
 export declare function getStoreManifestsDir(): string;
+/**
+ * The curated store manifest that overlays the source at `sourceUrl` — the file
+ * `skaile source manifest init` writes — or `undefined` when none was authored.
+ * Keyed by the collision-free `storeManifestSlug`, as the writer and resolver are.
+ */
+export declare function curatedManifestOverlay(sourceUrl: string): string | undefined;
 /**
  * Move every `~/.skaile/sidecars/<slug>/skaile.manifest.yaml` (or the legacy
  * `.skaile-source.yaml` for sidecars minted before the file-split rename) into

package/dist/library/src/local/store-paths.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"store-paths.d.ts","sourceRoot":"","sources":["../../../../library/src/local/store-paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAcH;;;;GAIG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED,8CAA8C;AAC9C,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AA4ED;;;;;;;;;GASG;AACH,wBAAgB,8BAA8B,IAAI;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAkBxF"}
+{"version":3,"file":"store-paths.d.ts","sourceRoot":"","sources":["../../../../library/src/local/store-paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAcH;;;;GAIG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED,8CAA8C;AAC9C,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAG5E;AA4ED;;;;;;;;;GASG;AACH,wBAAgB,8BAA8B,IAAI;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAkBxF"}

package/dist/library/src/manifest-writer.d.ts

@@ -0,0 +1,73 @@
+/**
+ * The one writer of a library's `skaile.manifest.yaml`: upsert an asset entry,
+ * prune entries whose root directory is gone, stamp the top-level publisher.
+ * Core reads the manifest; every write goes through here so the publisher rules
+ * live in one place. Edits go through `ManifestYamlEditor`, so comments, key
+ * order and entry formatting survive, and a no-op edit never touches the file.
+ */
+import { type AssetEntry, type SkPublishManifest } from "@skaile/workspaces/core";
+export interface UpsertAssetInput {
+    kind: string;
+    name: string;
+    /** Repo-relative path to the asset directory (the AssetEntry `root`). */
+    root: string;
+    version?: string;
+    /**
+     * The asset's resolved publisher. Written to the entry's `publisher` only when
+     * it differs from the manifest's top-level `publisher` (the entry otherwise
+     * inherits it); when it equals the top-level one, any stale per-asset override
+     * on an existing entry is dropped. Omit to leave an existing override untouched.
+     */
+    publisher?: string;
+    description?: string;
+    keywords?: string[];
+}
+export interface UpsertAssetResult {
+    manifestPath: string;
+    /** True when a new entry was appended, false when an existing one was updated. */
+    added: boolean;
+}
+/**
+ * Throw when the library's `skaile.manifest.yaml` exists but cannot be edited.
+ * Lets a caller fail before it puts files on disk that a later manifest write
+ * would then have to be paired with.
+ */
+export declare function assertManifestEditable(libraryPath: string): void;
+/**
+ * Add the asset to the library's manifest (creating the file when absent), or
+ * update the existing `(kind, name)` entry in place. Fields the input does not
+ * mention stay as the author wrote them.
+ */
+export declare function upsertManifestAsset(libraryPath: string, input: UpsertAssetInput): UpsertAssetResult;
+/**
+ * The manifest entries that point at a directory which no longer exists in the
+ * library — an asset whose directory was deleted (or renamed) without the
+ * manifest following. Only first-party `root:` entries are checked: curated
+ * entries and `files:`-only entries carry no library directory. An entry is
+ * curated when `a.source ?? manifest.source` is set (the same rule as the
+ * walker), so every entry of a mirror library with a top-level `source:` is
+ * skipped — its `root:` points into the upstream repo, not the library.
+ * A root that exists but is malformed is NOT reported — that is the indexer's
+ * `ManifestFileMissing` warning, not a removed asset.
+ */
+export declare function missingRootAssets(libraryPath: string, manifest: SkPublishManifest): AssetEntry[];
+/**
+ * Drop every entry {@link missingRootAssets} reports and return them. The file
+ * is left untouched when nothing is stale.
+ */
+export declare function pruneMissingRootAssets(libraryPath: string): AssetEntry[];
+/**
+ * Declare the top-level `publisher` — the one discovery falls back on for any
+ * asset without its own. First writer wins: an author-set publisher is never
+ * overwritten. Returns whether the manifest changed.
+ */
+export declare function stampManifestPublisher(libraryPath: string, publisher: string): boolean;
+/**
+ * Reconcile the manifest `assets[]` inventory with what is on disk: stamp
+ * `defaultPublisher` when the manifest declares none, prune entries whose root
+ * is gone (returned), and upsert every scanned asset missing from the
+ * inventory — `library publish` ships only what the inventory lists. Per-asset
+ * publishers an author set are kept; scanned assets inherit the top-level one.
+ */
+export declare function syncManifestWithDisk(libraryPath: string, defaultPublisher: string): Promise<AssetEntry[]>;
+//# sourceMappingURL=manifest-writer.d.ts.map