@skaile/workspaces 5.1.3 → 5.2.0

package/dist/chunk-F7JHP7JV.js

@@ -1,122 +0,0 @@
-import { loadSkPublishManifest, saveSkPublishManifest } from './chunk-AG44ZJ7W.js';
-import { parseFrontmatter } from './chunk-DXUQCMVT.js';
-import { isValidAssetName, slugifyAssetName } from './chunk-43ZBF3WH.js';
-import * as fs from 'fs';
-import * as os from 'os';
-import * as path from 'path';
-import { stringify } from 'yaml';
-
-var DEFAULT_IMPORT_VERSION = "0.1.0";
-var DEFAULT_IMPORT_STAGE = "alpha";
-function claudeSkillRoots() {
-  const roots = [];
-  const override = process.env.SKAILE_CLAUDE_SKILLS_DIR;
-  if (override) roots.push(override);
-  roots.push(path.join(os.homedir(), ".claude", "skills"));
-  return roots;
-}
-function resolveImportSource(nameOrPath) {
-  const asPath = path.resolve(nameOrPath);
-  if (fs.existsSync(asPath)) {
-    const dir = fs.statSync(asPath).isDirectory() ? asPath : path.dirname(asPath);
-    const skillFile = path.join(dir, "SKILL.md");
-    if (fs.existsSync(skillFile)) return { dir, skillFile, via: "path" };
-  }
-  if (!nameOrPath.includes(path.sep) && !nameOrPath.startsWith(".")) {
-    for (const root of claudeSkillRoots()) {
-      const dir = path.join(root, nameOrPath);
-      const skillFile = path.join(dir, "SKILL.md");
-      if (fs.existsSync(skillFile)) return { dir, skillFile, via: "claude-skills" };
-    }
-  }
-  return null;
-}
-function normalizeSkillContent(raw, opts = {}) {
-  const notes = [];
-  const { data, body } = parseFrontmatter(raw);
-  const rawName = typeof data.name === "string" && data.name.trim() ? data.name.trim() : void 0;
-  const sourceName = rawName ?? opts.fallbackName ?? "";
-  let name = sourceName;
-  let originalName;
-  if (!sourceName) {
-    throw new Error("skill has no `name` in frontmatter and no fallback was provided");
-  }
-  if (!isValidAssetName(sourceName)) {
-    name = slugifyAssetName(sourceName);
-    originalName = sourceName;
-    notes.push(`renamed "${sourceName}" \u2192 "${name}" (canonical kebab-case)`);
-  }
-  const existingMeta = data.metadata && typeof data.metadata === "object" && !Array.isArray(data.metadata) ? { ...data.metadata } : {};
-  if (existingMeta.version == null) {
-    existingMeta.version = opts.version ?? DEFAULT_IMPORT_VERSION;
-    notes.push(`stamped metadata.version: ${existingMeta.version}`);
-  }
-  if (existingMeta.stage == null) {
-    existingMeta.stage = opts.stage ?? DEFAULT_IMPORT_STAGE;
-    notes.push(`stamped metadata.stage: ${existingMeta.stage}`);
-  }
-  if (existingMeta.tags == null) {
-    const keywords = Array.isArray(data.keywords) ? data.keywords : [];
-    existingMeta.tags = keywords.filter((k) => typeof k === "string");
-    if (existingMeta.tags.length > 0) {
-      notes.push("promoted top-level keywords \u2192 metadata.tags");
-    }
-  }
-  const ordered = { name };
-  if (data.description != null) ordered.description = data.description;
-  ordered.metadata = existingMeta;
-  for (const [k, v] of Object.entries(data)) {
-    if (k === "name" || k === "description" || k === "metadata" || k === "keywords") continue;
-    ordered[k] = v;
-  }
-  const fm = stringify(ordered).trimEnd();
-  const content = `---
-${fm}
----
-
-${body}
-`;
-  const changed = notes.length > 0;
-  return { content, name, originalName, changed, notes };
-}
-function upsertManifestAsset(libraryPath, input) {
-  const manifest = loadSkPublishManifest(libraryPath) ?? { assets: [] };
-  const assets = Array.isArray(manifest.assets) ? [...manifest.assets] : [];
-  const overridesTopLevel = !!input.publisher && input.publisher !== manifest.publisher;
-  const entry = { kind: input.kind, name: input.name, root: input.root };
-  if (input.version) entry.version = input.version;
-  if (overridesTopLevel) entry.publisher = input.publisher;
-  if (input.description) entry.description = input.description;
-  if (input.keywords && input.keywords.length > 0) entry.keywords = input.keywords;
-  const idx = assets.findIndex((a) => a.kind === input.kind && a.name === input.name);
-  const added = idx < 0;
-  if (added) {
-    assets.push(entry);
-  } else {
-    const merged = { ...assets[idx], ...entry };
-    if (input.publisher && !overridesTopLevel) delete merged.publisher;
-    assets[idx] = merged;
-  }
-  const manifestPath = saveSkPublishManifest(libraryPath, { ...manifest, assets });
-  return { manifestPath, added };
-}
-function missingRootAssets(libraryPath, manifest) {
-  return (manifest.assets ?? []).filter((a) => {
-    if (a.source || !a.root) return false;
-    const dir = path.resolve(libraryPath, a.root);
-    return !(fs.existsSync(dir) && fs.statSync(dir).isDirectory());
-  });
-}
-function pruneMissingRootAssets(libraryPath) {
-  const manifest = loadSkPublishManifest(libraryPath);
-  if (!manifest) return [];
-  const removed = missingRootAssets(libraryPath, manifest);
-  if (removed.length === 0) return [];
-  const assets = (manifest.assets ?? []).filter((a) => !removed.includes(a));
-  saveSkPublishManifest(libraryPath, { ...manifest, assets });
-  return removed;
-}
-
-export { missingRootAssets, normalizeSkillContent, pruneMissingRootAssets, resolveImportSource, upsertManifestAsset };
-//# sourceMappingURL=chunk-F7JHP7JV.js.map
-//# sourceMappingURL=chunk-F7JHP7JV.js.map

package/dist/chunk-F7JHP7JV.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../cli/src/commands/skailify-lib.ts"],"names":["stringifyYaml"],"mappings":";;;;;;;;AAuBO,IAAM,sBAAA,GAAyB,OAAA;AAE/B,IAAM,oBAAA,GAAuB,OAAA;AAO7B,SAAS,gBAAA,GAA6B;AAC3C,EAAA,MAAM,QAAkB,EAAC;AACzB,EAAA,MAAM,QAAA,GAAW,QAAQ,GAAA,CAAI,wBAAA;AAC7B,EAAA,IAAI,QAAA,EAAU,KAAA,CAAM,IAAA,CAAK,QAAQ,CAAA;AACjC,EAAA,KAAA,CAAM,KAAU,IAAA,CAAA,IAAA,CAAQ,EAAA,CAAA,OAAA,EAAQ,EAAG,SAAA,EAAW,QAAQ,CAAC,CAAA;AACvD,EAAA,OAAO,KAAA;AACT;AAkBO,SAAS,oBAAoB,UAAA,EAAiD;AAEnF,EAAA,MAAM,MAAA,GAAc,aAAQ,UAAU,CAAA;AACtC,EAAA,IAAO,EAAA,CAAA,UAAA,CAAW,MAAM,CAAA,EAAG;AACzB,IAAA,MAAM,GAAA,GAAS,YAAS,MAAM,CAAA,CAAE,aAAY,GAAI,MAAA,GAAc,aAAQ,MAAM,CAAA;AAC5E,IAAA,MAAM,SAAA,GAAiB,IAAA,CAAA,IAAA,CAAK,GAAA,EAAK,UAAU,CAAA;AAC3C,IAAA,IAAO,EAAA,CAAA,UAAA,CAAW,SAAS,CAAA,EAAG,OAAO,EAAE,GAAA,EAAK,SAAA,EAAW,KAAK,MAAA,EAAO;AAAA,EACrE;AAEA,EAAA,IAAI,CAAC,WAAW,QAAA,CAAc,IAAA,CAAA,GAAG,KAAK,CAAC,UAAA,CAAW,UAAA,CAAW,GAAG,CAAA,EAAG;AACjE,IAAA,KAAA,MAAW,IAAA,IAAQ,kBAAiB,EAAG;AACrC,MAAA,MAAM,GAAA,GAAW,IAAA,CAAA,IAAA,CAAK,IAAA,EAAM,UAAU,CAAA;AACtC,MAAA,MAAM,SAAA,GAAiB,IAAA,CAAA,IAAA,CAAK,GAAA,EAAK,UAAU,CAAA;AAC3C,MAAA,IAAO,EAAA,CAAA,UAAA,CAAW,SAAS,CAAA,EAAG,OAAO,EAAE,GAAA,EAAK,SAAA,EAAW,KAAK,eAAA,EAAgB;AAAA,IAC9E;AAAA,EACF;AACA,EAAA,OAAO,IAAA;AACT;AAkCO,SAAS,qBAAA,CAAsB,GAAA,EAAa,IAAA,GAAyB,EAAC,EAAoB;AAC/F,EAAA,MAAM,QAAkB,EAAC;AACzB,EAAA,MAAM,EAAE,IAAA,EAAM,IAAA,EAAK,GAAI,iBAAiB,GAAG,CAAA;AAG3C,EAAA,MAAM,OAAA,GAAU,OAAO,IAAA,CAAK,IAAA,KAAS,QAAA,IAAY,IAAA,CAAK,IAAA,CAAK,IAAA,EAAK,GAAI,IAAA,CAAK,IAAA,CAAK,IAAA,EAAK,GAAI,MAAA;AACvF,EAAA,MAAM,UAAA,GAAa,OAAA,IAAW,IAAA,CAAK,YAAA,IAAgB,EAAA;AACnD,EAAA,IAAI,IAAA,GAAO,UAAA;AACX,EAAA,IAAI,YAAA;AACJ,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,MAAM,IAAI,MAAM,iEAAiE,CAAA;AAAA,EACnF;AACA,EAAA,IAAI,CAAC,gBAAA,CAAiB,UAAU,CAAA,EAAG;AACjC,IAAA,IAAA,GAAO,iBAAiB,UAAU,CAAA;AAClC,IAAA,YAAA,GAAe,UAAA;AACf,IAAA,KAAA,CAAM,IAAA,CAAK,CAAA,SAAA,EAAY,UAAU,CAAA,UAAA,EAAQ,IAAI,CAAA,wBAAA,CAA0B,CAAA;AAAA,EACzE;AAGA,EAAA,MAAM,eACJ,IAAA,CAAK,QAAA,IAAY,OAAO,IAAA,CAAK,QAAA,KAAa,YAAY,CAAC,KAAA,CAAM,OAAA,CAAQ,IAAA,CAAK,QAAQ,CAAA,GAC9E,EAAE,GAAI,IAAA,CAAK,QAAA,KACX,EAAC;AAEP,EAAA,IAAI,YAAA,CAAa,WAAW,IAAA,EAAM;AAChC,IAAA,YAAA,CAAa,OAAA,GAAU,KAAK,OAAA,IAAW,sBAAA;AACvC,IAAA,KAAA,CAAM,IAAA,CAAK,CAAA,0BAAA,EAA6B,YAAA,CAAa,OAAO,CAAA,CAAE,CAAA;AAAA,EAChE;AACA,EAAA,IAAI,YAAA,CAAa,SAAS,IAAA,EAAM;AAC9B,IAAA,YAAA,CAAa,KAAA,GAAQ,KAAK,KAAA,IAAS,oBAAA;AACnC,IAAA,KAAA,CAAM,IAAA,CAAK,CAAA,wBAAA,EAA2B,YAAA,CAAa,KAAK,CAAA,CAAE,CAAA;AAAA,EAC5D;AACA,EAAA,IAAI,YAAA,CAAa,QAAQ,IAAA,EAAM;AAE7B,IAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAQ,IAAA,CAAK,QAAQ,CAAA,GAAK,IAAA,CAAK,WAAyB,EAAC;AAChF,IAAA,YAAA,CAAa,OAAO,QAAA,CAAS,MAAA,CAAO,CAAC,CAAA,KAAmB,OAAO,MAAM,QAAQ,CAAA;AAC7E,IAAA,IAAK,YAAA,CAAa,IAAA,CAAkB,MAAA,GAAS,CAAA,EAAG;AAC9C,MAAA,KAAA,CAAM,KAAK,kDAA6C,CAAA;AAAA,IAC1D;AAAA,EACF;AAGA,EAAA,MAAM,OAAA,GAAmC,EAAE,IAAA,EAAK;AAChD,EAAA,IAAI,IAAA,CAAK,WAAA,IAAe,IAAA,EAAM,OAAA,CAAQ,cAAc,IAAA,CAAK,WAAA;AACzD,EAAA,OAAA,CAAQ,QAAA,GAAW,YAAA;AACnB,EAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,KAAK,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAA,EAAG;AACzC,IAAA,IAAI,MAAM,MAAA,IAAU,CAAA,KAAM,iBAAiB,CAAA,KAAM,UAAA,IAAc,MAAM,UAAA,EAAY;AACjF,IAAA,OAAA,CAAQ,CAAC,CAAA,GAAI,CAAA;AAAA,EACf;AAEA,EAAA,MAAM,EAAA,GAAKA,SAAA,CAAc,OAAO,CAAA,CAAE,OAAA,EAAQ;AAC1C,EAAA,MAAM,OAAA,GAAU,CAAA;AAAA,EAAQ,EAAE;AAAA;;AAAA,EAAY,IAAI;AAAA,CAAA;AAG1C,EAAA,MAAM,OAAA,GAAU,MAAM,MAAA,GAAS,CAAA;AAC/B,EAAA,OAAO,EAAE,OAAA,EAAS,IAAA,EAAM,YAAA,EAAc,SAAS,KAAA,EAAM;AACvD;AA+BO,SAAS,mBAAA,CACd,aACA,KAAA,EACmB;AACnB,EAAA,MAAM,WAA8B,qBAAA,CAAsB,WAAW,KAAK,EAAE,MAAA,EAAQ,EAAC,EAAE;AACvF,EAAA,MAAM,MAAA,GAAuB,KAAA,CAAM,OAAA,CAAQ,QAAA,CAAS,MAAM,CAAA,GAAI,CAAC,GAAG,QAAA,CAAS,MAAM,CAAA,GAAI,EAAC;AAEtF,EAAA,MAAM,oBAAoB,CAAC,CAAC,MAAM,SAAA,IAAa,KAAA,CAAM,cAAc,QAAA,CAAS,SAAA;AAC5E,EAAA,MAAM,KAAA,GAAoB,EAAE,IAAA,EAAM,KAAA,CAAM,IAAA,EAAM,MAAM,KAAA,CAAM,IAAA,EAAM,IAAA,EAAM,KAAA,CAAM,IAAA,EAAK;AACjF,EAAA,IAAI,KAAA,CAAM,OAAA,EAAS,KAAA,CAAM,OAAA,GAAU,KAAA,CAAM,OAAA;AACzC,EAAA,IAAI,iBAAA,EAAmB,KAAA,CAAM,SAAA,GAAY,KAAA,CAAM,SAAA;AAC/C,EAAA,IAAI,KAAA,CAAM,WAAA,EAAa,KAAA,CAAM,WAAA,GAAc,KAAA,CAAM,WAAA;AACjD,EAAA,IAAI,KAAA,CAAM,YAAY,KAAA,CAAM,QAAA,CAAS,SAAS,CAAA,EAAG,KAAA,CAAM,WAAW,KAAA,CAAM,QAAA;AAExE,EAAA,MAAM,GAAA,GAAM,MAAA,CAAO,SAAA,CAAU,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,KAAS,KAAA,CAAM,IAAA,IAAQ,CAAA,CAAE,IAAA,KAAS,KAAA,CAAM,IAAI,CAAA;AAClF,EAAA,MAAM,QAAQ,GAAA,GAAM,CAAA;AACpB,EAAA,IAAI,KAAA,EAAO;AACT,IAAA,MAAA,CAAO,KAAK,KAAK,CAAA;AAAA,EACnB,CAAA,MAAO;AACL,IAAA,MAAM,SAAS,EAAE,GAAG,OAAO,GAAG,CAAA,EAAG,GAAG,KAAA,EAAM;AAC1C,IAAA,IAAI,KAAA,CAAM,SAAA,IAAa,CAAC,iBAAA,SAA0B,MAAA,CAAO,SAAA;AACzD,IAAA,MAAA,CAAO,GAAG,CAAA,GAAI,MAAA;AAAA,EAChB;AAEA,EAAA,MAAM,eAAe,qBAAA,CAAsB,WAAA,EAAa,EAAE,GAAG,QAAA,EAAU,QAAQ,CAAA;AAC/E,EAAA,OAAO,EAAE,cAAc,KAAA,EAAM;AAC/B;AAUO,SAAS,iBAAA,CAAkB,aAAqB,QAAA,EAA2C;AAChG,EAAA,OAAA,CAAQ,SAAS,MAAA,IAAU,EAAC,EAAG,MAAA,CAAO,CAAC,CAAA,KAAM;AAC3C,IAAA,IAAI,CAAA,CAAE,MAAA,IAAU,CAAC,CAAA,CAAE,MAAM,OAAO,KAAA;AAChC,IAAA,MAAM,GAAA,GAAW,IAAA,CAAA,OAAA,CAAQ,WAAA,EAAa,CAAA,CAAE,IAAI,CAAA;AAC5C,IAAA,OAAO,EAAK,EAAA,CAAA,UAAA,CAAW,GAAG,KAAQ,EAAA,CAAA,QAAA,CAAS,GAAG,EAAE,WAAA,EAAY,CAAA;AAAA,EAC9D,CAAC,CAAA;AACH;AAQO,SAAS,uBAAuB,WAAA,EAAmC;AACxE,EAAA,MAAM,QAAA,GAAW,sBAAsB,WAAW,CAAA;AAClD,EAAA,IAAI,CAAC,QAAA,EAAU,OAAO,EAAC;AACvB,EAAA,MAAM,OAAA,GAAU,iBAAA,CAAkB,WAAA,EAAa,QAAQ,CAAA;AACvD,EAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG,OAAO,EAAC;AAClC,EAAA,MAAM,MAAA,GAAA,CAAU,QAAA,CAAS,MAAA,IAAU,EAAC,EAAG,MAAA,CAAO,CAAC,CAAA,KAAM,CAAC,OAAA,CAAQ,QAAA,CAAS,CAAC,CAAC,CAAA;AACzE,EAAA,qBAAA,CAAsB,WAAA,EAAa,EAAE,GAAG,QAAA,EAAU,QAAQ,CAAA;AAC1D,EAAA,OAAO,OAAA;AACT","file":"chunk-F7JHP7JV.js","sourcesContent":["/**\n * skailify — pure, individually-testable helpers for importing an existing\n * coding-agent skill (e.g. a Claude Code skill from `~/.claude/skills/`) into a\n * skaile library. Composed by the `asset import` command and the `skailify`\n * factory skill. See each export's TSDoc for specifics.\n *\n * @docLink cli/commands/asset#import\n */\n\nimport * as fs from \"node:fs\";\nimport * as os from \"node:os\";\nimport * as path from \"node:path\";\nimport {\n  isValidAssetName,\n  loadSkPublishManifest,\n  parseFrontmatter,\n  saveSkPublishManifest,\n  slugifyAssetName,\n} from \"@skaile/workspaces/core\";\nimport type { AssetEntry, SkPublishManifest } from \"@skaile/workspaces/core\";\nimport { stringify as stringifyYaml } from \"yaml\";\n\n/** Default authoring version stamped on a skill that ships none. */\nexport const DEFAULT_IMPORT_VERSION = \"0.1.0\";\n/** Default lifecycle stage stamped on an imported skill. */\nexport const DEFAULT_IMPORT_STAGE = \"alpha\";\n\n/**\n * Where coding-agent skills live on disk, highest precedence first. The\n * `SKAILE_CLAUDE_SKILLS_DIR` override exists so tests (and non-default setups)\n * can point the resolver at a fixture tree without touching `$HOME`.\n */\nexport function claudeSkillRoots(): string[] {\n  const roots: string[] = [];\n  const override = process.env.SKAILE_CLAUDE_SKILLS_DIR;\n  if (override) roots.push(override);\n  roots.push(path.join(os.homedir(), \".claude\", \"skills\"));\n  return roots;\n}\n\nexport interface ResolvedImportSource {\n  /** Absolute path to the skill directory. */\n  dir: string;\n  /** Absolute path to the skill's SKILL.md. */\n  skillFile: string;\n  /** How the source was located — for human-facing messages. */\n  via: \"path\" | \"claude-skills\";\n}\n\n/**\n * Resolve an `import` argument to a concrete skill directory. A value that\n * exists on disk (file or dir) is used verbatim; otherwise it is treated as a\n * bare skill name and looked up under {@link claudeSkillRoots}.\n *\n * Returns `null` when nothing matches so the caller can print a tailored error.\n */\nexport function resolveImportSource(nameOrPath: string): ResolvedImportSource | null {\n  // Explicit path (relative or absolute) wins.\n  const asPath = path.resolve(nameOrPath);\n  if (fs.existsSync(asPath)) {\n    const dir = fs.statSync(asPath).isDirectory() ? asPath : path.dirname(asPath);\n    const skillFile = path.join(dir, \"SKILL.md\");\n    if (fs.existsSync(skillFile)) return { dir, skillFile, via: \"path\" };\n  }\n  // Bare name → coding-agent skill roots.\n  if (!nameOrPath.includes(path.sep) && !nameOrPath.startsWith(\".\")) {\n    for (const root of claudeSkillRoots()) {\n      const dir = path.join(root, nameOrPath);\n      const skillFile = path.join(dir, \"SKILL.md\");\n      if (fs.existsSync(skillFile)) return { dir, skillFile, via: \"claude-skills\" };\n    }\n  }\n  return null;\n}\n\nexport interface NormalizeOptions {\n  /** Fallback name when frontmatter has none (usually the source dir name). */\n  fallbackName?: string;\n  /** Version to stamp when the skill ships none. */\n  version?: string;\n  /** Stage to stamp when the skill ships none. */\n  stage?: string;\n}\n\nexport interface NormalizeResult {\n  /** Rewritten SKILL.md content (frontmatter + body). */\n  content: string;\n  /** Canonical asset name (slugified if the source was non-compliant). */\n  name: string;\n  /** The name as it appeared in the source, when it differed from `name`. */\n  originalName?: string;\n  /** True when `content` differs from the input (metadata added, name slugified, …). */\n  changed: boolean;\n  /** Human-facing notes about what was normalized. */\n  notes: string[];\n}\n\n/**\n * Bring a coding-agent `SKILL.md` into the skaile schema without touching the\n * body: ensure a canonical lowercase-kebab `name`, and a `metadata:` block\n * carrying at least `version`, `stage`, and `tags`. Idempotent — a SKILL.md\n * that already conforms comes back unchanged (`changed: false`).\n *\n * A Claude Code skill only requires `name` + `description`; skaile additionally\n * expects the `metadata:` block, so this is the transform `asset migrate`'s raw\n * byte-copy skips.\n */\nexport function normalizeSkillContent(raw: string, opts: NormalizeOptions = {}): NormalizeResult {\n  const notes: string[] = [];\n  const { data, body } = parseFrontmatter(raw);\n\n  // ── name ─────────────────────────────────────────────────────────────────\n  const rawName = typeof data.name === \"string\" && data.name.trim() ? data.name.trim() : undefined;\n  const sourceName = rawName ?? opts.fallbackName ?? \"\";\n  let name = sourceName;\n  let originalName: string | undefined;\n  if (!sourceName) {\n    throw new Error(\"skill has no `name` in frontmatter and no fallback was provided\");\n  }\n  if (!isValidAssetName(sourceName)) {\n    name = slugifyAssetName(sourceName);\n    originalName = sourceName;\n    notes.push(`renamed \"${sourceName}\" → \"${name}\" (canonical kebab-case)`);\n  }\n\n  // ── metadata block ─────────────────────────────────────────────────────────\n  const existingMeta =\n    data.metadata && typeof data.metadata === \"object\" && !Array.isArray(data.metadata)\n      ? { ...(data.metadata as Record<string, unknown>) }\n      : {};\n\n  if (existingMeta.version == null) {\n    existingMeta.version = opts.version ?? DEFAULT_IMPORT_VERSION;\n    notes.push(`stamped metadata.version: ${existingMeta.version}`);\n  }\n  if (existingMeta.stage == null) {\n    existingMeta.stage = opts.stage ?? DEFAULT_IMPORT_STAGE;\n    notes.push(`stamped metadata.stage: ${existingMeta.stage}`);\n  }\n  if (existingMeta.tags == null) {\n    // Promote top-level `keywords` (the agentskills.io convention) into tags.\n    const keywords = Array.isArray(data.keywords) ? (data.keywords as unknown[]) : [];\n    existingMeta.tags = keywords.filter((k): k is string => typeof k === \"string\");\n    if ((existingMeta.tags as string[]).length > 0) {\n      notes.push(\"promoted top-level keywords → metadata.tags\");\n    }\n  }\n\n  // ── re-serialize, key order: name, description, metadata, then the rest ────\n  const ordered: Record<string, unknown> = { name };\n  if (data.description != null) ordered.description = data.description;\n  ordered.metadata = existingMeta;\n  for (const [k, v] of Object.entries(data)) {\n    if (k === \"name\" || k === \"description\" || k === \"metadata\" || k === \"keywords\") continue;\n    ordered[k] = v;\n  }\n\n  const fm = stringifyYaml(ordered).trimEnd();\n  const content = `---\\n${fm}\\n---\\n\\n${body}\\n`;\n  // `changed` tracks semantic mutation, not formatting — every real change adds\n  // a note, so a conformant skill stays `false` despite YAML re-quoting.\n  const changed = notes.length > 0;\n  return { content, name, originalName, changed, notes };\n}\n\nexport interface UpsertAssetInput {\n  kind: string;\n  name: string;\n  /** Repo-relative path to the asset directory (the AssetEntry `root`). */\n  root: string;\n  version?: string;\n  /**\n   * The asset's resolved publisher. Written to the entry's `publisher` only when\n   * it differs from the manifest's top-level `publisher` (the entry otherwise\n   * inherits it); when it equals the top-level one, any stale per-asset override\n   * on an existing entry is dropped. Omit to leave an existing override untouched.\n   */\n  publisher?: string;\n  description?: string;\n  keywords?: string[];\n}\n\nexport interface UpsertAssetResult {\n  manifestPath: string;\n  /** True when a new entry was appended, false when an existing one was updated. */\n  added: boolean;\n}\n\n/**\n * Auto-wire an asset into a library's `skaile.manifest.yaml` (creating the\n * manifest when absent). Matches an existing entry by `(kind, name)` and\n * updates it in place; otherwise appends. This is the manifest half of import\n * that a plain byte-copy (`asset migrate`) leaves stale.\n */\nexport function upsertManifestAsset(\n  libraryPath: string,\n  input: UpsertAssetInput,\n): UpsertAssetResult {\n  const manifest: SkPublishManifest = loadSkPublishManifest(libraryPath) ?? { assets: [] };\n  const assets: AssetEntry[] = Array.isArray(manifest.assets) ? [...manifest.assets] : [];\n\n  const overridesTopLevel = !!input.publisher && input.publisher !== manifest.publisher;\n  const entry: AssetEntry = { kind: input.kind, name: input.name, root: input.root };\n  if (input.version) entry.version = input.version;\n  if (overridesTopLevel) entry.publisher = input.publisher;\n  if (input.description) entry.description = input.description;\n  if (input.keywords && input.keywords.length > 0) entry.keywords = input.keywords;\n\n  const idx = assets.findIndex((a) => a.kind === input.kind && a.name === input.name);\n  const added = idx < 0;\n  if (added) {\n    assets.push(entry);\n  } else {\n    const merged = { ...assets[idx], ...entry };\n    if (input.publisher && !overridesTopLevel) delete merged.publisher;\n    assets[idx] = merged;\n  }\n\n  const manifestPath = saveSkPublishManifest(libraryPath, { ...manifest, assets });\n  return { manifestPath, added };\n}\n\n/**\n * The manifest entries that point at a directory which no longer exists in the\n * library — an asset whose directory was deleted (or renamed) without the\n * manifest following. Only first-party `root:` entries are checked: curated\n * entries (`source:`) and `files:`-only entries carry no library directory.\n * A root that exists but is malformed is NOT reported — that is the indexer's\n * `ManifestFileMissing` warning, not a removed asset.\n */\nexport function missingRootAssets(libraryPath: string, manifest: SkPublishManifest): AssetEntry[] {\n  return (manifest.assets ?? []).filter((a) => {\n    if (a.source || !a.root) return false;\n    const dir = path.resolve(libraryPath, a.root);\n    return !(fs.existsSync(dir) && fs.statSync(dir).isDirectory());\n  });\n}\n\n/**\n * Drop every entry {@link missingRootAssets} reports from the library's\n * `skaile.manifest.yaml` and write it back (same writer as\n * {@link upsertManifestAsset}). Returns the removed entries; the manifest is\n * left untouched when nothing is stale.\n */\nexport function pruneMissingRootAssets(libraryPath: string): AssetEntry[] {\n  const manifest = loadSkPublishManifest(libraryPath);\n  if (!manifest) return [];\n  const removed = missingRootAssets(libraryPath, manifest);\n  if (removed.length === 0) return [];\n  const assets = (manifest.assets ?? []).filter((a) => !removed.includes(a));\n  saveSkPublishManifest(libraryPath, { ...manifest, assets });\n  return removed;\n}\n"]}

package/dist/chunk-H4EGUQ7M.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../library/src/install/install-from-manifest.ts"],"names":[],"mappings":";;;;;AA+CA,SAAS,sBAAA,CAAuB,aAAqB,CAAA,EAAiB;AACpE,EAAA,MAAM,MAAM,MAAa;AACvB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,yBAAA,EAA4B,CAAC,CAAA,CAAE,CAAA;AAAA,EACjD,CAAA;AACA,EAAA,IAAI,CAAC,CAAA,IAAK,CAAA,CAAE,MAAA,KAAW,GAAG,GAAA,EAAI;AAC9B,EAAA,IAAI,UAAA,CAAW,CAAC,CAAA,IAAK,CAAA,CAAE,UAAA,CAAW,GAAG,CAAA,IAAK,CAAA,CAAE,UAAA,CAAW,IAAI,CAAA,EAAG,GAAA,EAAI;AAClE,EAAA,MAAM,QAAA,GAAW,CAAA,CAAE,KAAA,CAAM,OAAO,CAAA;AAChC,EAAA,IAAI,SAAS,IAAA,CAAK,CAAC,MAAM,CAAA,KAAM,IAAI,GAAG,GAAA,EAAI;AAC1C,EAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,WAAA,EAAa,CAAC,CAAA;AACvC,EAAA,IAAI,QAAA,KAAa,eAAe,CAAC,QAAA,CAAS,WAAW,WAAA,GAAc,GAAG,GAAG,GAAA,EAAI;AAC/E;AAgBA,SAAS,sBAAA,CAAuB,MAAc,KAAA,EAAqB;AAIjE,EAAA,MAAM,cAAA,GAAiB,CAAC,GAAG,KAAK,CAAA,CAAE,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,UAAA,CAAW,CAAC,CAAA,GAAI,EAAI,CAAA;AACpE,EAAA,IAAI,CAAC,KAAA,IAAS,KAAA,CAAM,UAAA,CAAW,GAAG,KAAK,OAAA,CAAQ,IAAA,CAAK,KAAK,CAAA,IAAK,cAAA,EAAgB;AAC5E,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,WAAA,EAAc,IAAI,CAAA,yBAAA,EAA4B,KAAK,CAAA,CAAA,CAAG,CAAA;AAAA,EACxE;AACF;AAcO,SAAS,uBAAuB,KAAA,EAAkC;AACvE,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,CAAA,EAAG,OAAO,EAAA;AAC/B,EAAA,MAAM,WAAA,GAAc,KAAA,CAAM,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,KAAA,CAAM,GAAG,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA;AAC9D,EAAA,IAAI,MAAA,GAAS,YAAY,CAAC,CAAA;AAC1B,EAAA,KAAA,IAAS,CAAA,GAAI,GAAG,CAAA,GAAI,WAAA,CAAY,UAAU,MAAA,CAAO,MAAA,GAAS,GAAG,CAAA,EAAA,EAAK;AAChE,IAAA,MAAM,IAAA,GAAO,YAAY,CAAC,CAAA;AAC1B,IAAA,IAAI,CAAA,GAAI,CAAA;AACR,IAAA,OAAO,CAAA,GAAI,MAAA,CAAO,MAAA,IAAU,CAAA,GAAI,IAAA,CAAK,MAAA,IAAU,MAAA,CAAO,CAAC,CAAA,KAAM,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,EAAA;AACtE,IAAA,MAAA,GAAS,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,CAAC,CAAA;AAAA,EAC5B;AACA,EAAA,OAAO,MAAA,CAAO,KAAK,GAAG,CAAA;AACxB;AAsDA,eAAsB,oBAAoB,IAAA,EAA2C;AACnF,EAAA,MAAM,EAAE,QAAA,EAAU,WAAA,EAAY,GAAI,IAAA;AAClC,EAAA,MAAM,UACJ,IAAA,CAAK,OAAA,IAAA,CAAY,MAAM,OAAO,mCAA0B,CAAA,EAAG,yBAAA;AAK7D,EAAA,IAAI,IAAA,CAAK,cAAc,MAAA,EAAW;AAChC,IAAA,OAAO,WAAA,CAAY,QAAA,EAAU,IAAA,CAAK,SAAA,EAAW,OAAO,CAAA;AAAA,EACtD;AAQA,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,aAAA,CAAc,SAAS,GAAG,CAAA;AAAA,EACrC,SAAS,CAAA,EAAG;AACV,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,aAAA,EAAgB,QAAA,CAAS,GAAG,CAAA,EAAA,EAAK,CAAA,YAAa,KAAA,GAAQ,CAAA,CAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA,CAAE,CAAA;AAAA,EAC/F;AACA,EAAA,MAAM,YAAY,MAAA,CAAO,SAAA;AACzB,EAAA,MAAM,OAAO,MAAA,CAAO,IAAA;AACpB,EAAA,MAAM,UAAU,MAAA,CAAO,GAAA;AACvB,EAAA,IAAI,CAAC,WAAW,MAAM,IAAI,MAAM,CAAA,aAAA,EAAgB,QAAA,CAAS,GAAG,CAAA,oBAAA,CAAsB,CAAA;AAClF,EAAA,IAAI,CAAC,SAAS,MAAM,IAAI,MAAM,CAAA,aAAA,EAAgB,QAAA,CAAS,GAAG,CAAA,sBAAA,CAAwB,CAAA;AAClF,EAAA,sBAAA,CAAuB,aAAa,SAAS,CAAA;AAC7C,EAAA,sBAAA,CAAuB,QAAQ,IAAI,CAAA;AACnC,EAAA,sBAAA,CAAuB,WAAW,OAAO,CAAA;AACzC,EAAA,MAAM,IAAA,GAAO,QAAQ,WAAW,CAAA;AAChC,EAAA,MAAM,WAAA,GAAc,QAAQ,IAAA,CAAK,IAAA,EAAM,IAAI,SAAS,CAAA,CAAA,EAAI,IAAA,EAAM,OAAO,CAAC,CAAA;AAGtE,EAAA,IAAI,gBAAgB,IAAA,IAAQ,CAAC,YAAY,UAAA,CAAW,IAAA,GAAO,GAAG,CAAA,EAAG;AAC/D,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,0BAAA,EAA6B,QAAA,CAAS,GAAG,CAAA,mCAAA,CAAqC,CAAA;AAAA,EAChG;AAKA,EAAA,KAAA,MAAW,CAAA,IAAK,SAAS,KAAA,EAAO;AAC9B,IAAA,sBAAA,CAAuB,WAAA,EAAa,EAAE,IAAI,CAAA;AAAA,EAC5C;AAGA,EAAA,MAAM,QAAQ,QAAA,CAAS,KAAA,CAAM,IAAI,CAAC,CAAA,KAAM,EAAE,IAAI,CAAA;AAC9C,EAAA,MAAM,KAAA,GAAQ,MAAM,OAAA,CAAQ;AAAA,IAC1B,GAAA,EAAK,SAAS,MAAA,CAAO,GAAA;AAAA,IACrB,SAAA,EAAW,SAAS,MAAA,CAAO,SAAA;AAAA,IAC3B;AAAA,GACD,CAAA;AAID,EAAA,KAAA,MAAW,CAAA,IAAK,SAAS,KAAA,EAAO;AAC9B,IAAA,sBAAA,CAAuB,WAAA,EAAa,EAAE,IAAI,CAAA;AAC1C,IAAA,MAAM,GAAA,GAAM,KAAA,CAAM,CAAA,CAAE,IAAI,CAAA;AACxB,IAAA,IAAI,CAAC,KAAK,MAAM,IAAI,MAAM,CAAA,8BAAA,EAAiC,CAAA,CAAE,IAAI,CAAA,CAAE,CAAA;AACnE,IAAA,MAAM,MAAA,GAAS,WAAW,QAAQ,CAAA,CAAE,OAAO,GAAG,CAAA,CAAE,OAAO,KAAK,CAAA;AAC5D,IAAA,IAAI,MAAA,KAAW,EAAE,MAAA,EAAQ;AACvB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,kBAAA,EAAqB,CAAA,CAAE,IAAI,cAAc,CAAA,CAAE,MAAM,CAAA,MAAA,EAAS,MAAM,CAAA,CAAE,CAAA;AAAA,IACpF;AAAA,EACF;AAGA,EAAA,MAAM,WAAA,GAAc,QAAA,CAAS,KAAA,CAC1B,KAAA,EAAM,CACN,KAAK,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,CAAE,IAAA,CAAK,aAAA,CAAc,EAAE,IAAI,CAAC,CAAA,CAC3C,GAAA,CAAI,CAAC,CAAA,KAAM,GAAG,CAAA,CAAE,IAAI,CAAA,CAAA,EAAI,CAAA,CAAE,MAAM;AAAA,CAAI,CAAA,CACpC,KAAK,EAAE,CAAA;AACV,EAAA,MAAM,eAAA,GAAkB,WAAW,QAAQ,CAAA,CAAE,OAAO,WAAA,EAAa,OAAO,CAAA,CAAE,MAAA,CAAO,KAAK,CAAA;AACtF,EAAA,IAAI,eAAA,KAAoB,SAAS,MAAA,EAAQ;AACvC,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,kCAAA,EAAqC,SAAS,MAAM,CAAA,MAAA,EAAS,eAAe,CAAA,CAAE,CAAA;AAAA,EAChG;AAMA,EAAA,MAAM,GAAG,WAAA,EAAa,EAAE,WAAW,IAAA,EAAM,KAAA,EAAO,MAAM,CAAA;AACtD,EAAA,IAAI;AACF,IAAA,KAAA,MAAW,CAAA,IAAK,SAAS,KAAA,EAAO;AAC9B,MAAA,MAAM,MAAA,GAAS,IAAA,CAAK,WAAA,EAAa,CAAA,CAAE,IAAI,CAAA;AACvC,MAAA,MAAM,MAAM,OAAA,CAAQ,MAAM,GAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAChD,MAAA,MAAM,SAAA,CAAU,MAAA,EAAQ,KAAA,CAAM,CAAA,CAAE,IAAI,CAAE,CAAA;AAAA,IACxC;AAAA,EACF,SAAS,CAAA,EAAG;AACV,IAAA,MAAM,EAAA,CAAG,WAAA,EAAa,EAAE,SAAA,EAAW,IAAA,EAAM,OAAO,IAAA,EAAM,CAAA,CAAE,KAAA,CAAM,MAAM;AAAA,IAAC,CAAC,CAAA;AACtE,IAAA,MAAM,CAAA;AAAA,EACR;AAEA,EAAA,OAAO,EAAE,WAAA,EAAY;AACvB;AASA,eAAe,WAAA,CACb,QAAA,EACA,SAAA,EACA,OAAA,EACwB;AACxB,EAAA,MAAM,MAAA,GAAS,QAAQ,SAAS,CAAA;AAGhC,EAAA,KAAA,MAAW,CAAA,IAAK,SAAS,KAAA,EAAO;AAC9B,IAAA,sBAAA,CAAuB,MAAA,EAAQ,EAAE,IAAI,CAAA;AAAA,EACvC;AAGA,EAAA,MAAM,QAAQ,QAAA,CAAS,KAAA,CAAM,IAAI,CAAC,CAAA,KAAM,EAAE,IAAI,CAAA;AAC9C,EAAA,MAAM,KAAA,GAAQ,MAAM,OAAA,CAAQ;AAAA,IAC1B,GAAA,EAAK,SAAS,MAAA,CAAO,GAAA;AAAA,IACrB,SAAA,EAAW,SAAS,MAAA,CAAO,SAAA;AAAA,IAC3B;AAAA,GACD,CAAA;AAKD,EAAA,MAAM,SAAA,GAAY,uBAAuB,KAAK,CAAA;AAE9C,EAAA,KAAA,MAAW,CAAA,IAAK,SAAS,KAAA,EAAO;AAC9B,IAAA,MAAM,GAAA,GAAM,KAAA,CAAM,CAAA,CAAE,IAAI,CAAA;AACxB,IAAA,IAAI,CAAC,KAAK,MAAM,IAAI,MAAM,CAAA,8BAAA,EAAiC,CAAA,CAAE,IAAI,CAAA,CAAE,CAAA;AACnE,IAAA,MAAM,MAAA,GAAS,WAAW,QAAQ,CAAA,CAAE,OAAO,GAAG,CAAA,CAAE,OAAO,KAAK,CAAA;AAC5D,IAAA,IAAI,MAAA,KAAW,EAAE,MAAA,EAAQ;AACvB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,kBAAA,EAAqB,CAAA,CAAE,IAAI,cAAc,CAAA,CAAE,MAAM,CAAA,MAAA,EAAS,MAAM,CAAA,CAAE,CAAA;AAAA,IACpF;AACA,IAAA,MAAM,OAAA,GAAU,YAAY,CAAA,CAAE,IAAA,CAAK,MAAM,SAAA,CAAU,MAAA,GAAS,CAAC,CAAA,GAAI,CAAA,CAAE,IAAA;AAEnE,IAAA,sBAAA,CAAuB,QAAQ,OAAO,CAAA;AACtC,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,MAAA,EAAQ,OAAO,CAAA;AACjC,IAAA,MAAM,MAAM,OAAA,CAAQ,IAAI,GAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAC9C,IAAA,MAAM,SAAA,CAAU,MAAM,GAAG,CAAA;AAAA,EAC3B;AAEA,EAAA,OAAO,EAAE,aAAa,MAAA,EAAO;AAC/B","file":"chunk-H4EGUQ7M.js","sourcesContent":["/**\n * Pointer-only install path.\n *\n * Given an {@link InstallManifest} (the Pointer Triple the Catalog hands\n * clients), this:\n *\n *   1. fetches the asset bytes directly from the upstream repo at the pinned\n *      commit (via an injectable fetcher, default {@link fetchAssetFilesFromGitHub});\n *   2. verifies EVERY per-file SHA256 against `manifest.files[].sha256`;\n *   3. verifies the composite SHA256 rollup over the sorted\n *      `<path>:<sha256>\\n` lines against `manifest.sha256`;\n *   4. writes the verified bytes under `<libraryRoot>/@<publisher>/<name>/<version>`.\n *\n * Any hash mismatch is a hard failure — bytes are not written if per-file\n * verification fails, and the composite check is the second gate.\n *\n * @docLink packages/library/concepts#install\n */\n\nimport { createHash } from \"node:crypto\";\nimport { mkdir, rm, writeFile } from \"node:fs/promises\";\nimport { dirname, isAbsolute, join, resolve, sep } from \"node:path\";\nimport type { InstallManifest } from \"@skaile/workspaces/types\";\n// Narrow module, not the `core` barrel: the barrel's chunks carry `import.meta`,\n// which breaks consumers that transpile this entry to CommonJS.\nimport { parseAssetRef } from \"../../../core/src/models.js\";\n\n/**\n * Validate a single manifest-supplied file path against path traversal.\n *\n * `manifest.files[].path` comes off the network — the attacker controls the\n * entire manifest (and therefore every hash in it), so hash verification can\n * NEVER mitigate a malicious *destination*. A path like\n * `../../../../home/user/.bashrc` or an absolute path would escape\n * `installPath` and yield an arbitrary file write. Every path is checked\n * BEFORE any fetch or write happens; the first bad path aborts the entire\n * install with a hard throw.\n *\n * A path is rejected if ANY of:\n *   - it is empty;\n *   - it is absolute (`path.isAbsolute`) or has a leading slash;\n *   - it contains a `..` segment;\n *   - `path.resolve(installPath, p)` is not `installPath` itself and does not\n *     start with `installPath + path.sep` (escapes the install dir).\n *\n * @throws An error matching `/unsafe path in manifest/` on the first bad path.\n */\nfunction assertSafeManifestPath(installPath: string, p: string): void {\n  const bad = (): never => {\n    throw new Error(`unsafe path in manifest: ${p}`);\n  };\n  if (!p || p.length === 0) bad();\n  if (isAbsolute(p) || p.startsWith(\"/\") || p.startsWith(\"\\\\\")) bad();\n  const segments = p.split(/[/\\\\]/);\n  if (segments.some((s) => s === \"..\")) bad();\n  const resolved = resolve(installPath, p);\n  if (resolved !== installPath && !resolved.startsWith(installPath + sep)) bad();\n}\n\n/**\n * Validate one component (publisher / name / version) of the attacker-controlled\n * `manifest.ref`.\n *\n * `installPath` is built by joining these components onto `libraryRoot`. A\n * component containing a path separator or a `..` / leading-dot segment would\n * let `installPath` itself escape `libraryRoot` — yielding an arbitrary file\n * write AND, via the pre-write `rm(installPath, { recursive })`, an arbitrary\n * recursive delete. The per-file `assertSafeManifestPath` guard cannot catch\n * this: it only validates each `f.path` *relative to* `installPath`, never\n * `installPath` itself. Components must be plain identifier-like strings.\n *\n * @throws An error matching `/unsafe ref/` on a bad component.\n */\nfunction assertSafeRefComponent(kind: string, value: string): void {\n  // Reject empty, leading-dot (covers `.` and `..`), path separators, and\n  // ASCII control characters (NUL et al.) — fails a malformed segment fast\n  // with a domain-specific error rather than a raw EINVAL deeper in.\n  const hasControlChar = [...value].some((c) => c.charCodeAt(0) < 0x20);\n  if (!value || value.startsWith(\".\") || /[/\\\\]/.test(value) || hasControlChar) {\n    throw new Error(`unsafe ref ${kind} component in manifest: '${value}'`);\n  }\n}\n\n/**\n * Longest common **directory** prefix across manifest paths, compared by whole\n * slash-delimited segments (never raw-string — so `app/` and `app-data/` never\n * collide). Each path's basename is excluded, so the result is always a\n * directory prefix and every path keeps a non-empty remainder after stripping.\n *\n * Used by flat mode to reproduce the platform pointer-installer's asset-rooting:\n * the store persists repo-root-relative paths (e.g. `skaile-platform/mcpo/xls/MCP.md`)\n * but the runner scans `.skaile/assets/<kind>/<name>/` for immediate-child files,\n * so this prefix is stripped from the WRITE path while the fetch keeps the full\n * repo path. Returns `''` when there is no common directory (a no-op strip).\n */\nexport function longestCommonDirPrefix(paths: readonly string[]): string {\n  if (paths.length === 0) return \"\";\n  const dirSegments = paths.map((p) => p.split(\"/\").slice(0, -1));\n  let common = dirSegments[0]!;\n  for (let i = 1; i < dirSegments.length && common.length > 0; i++) {\n    const segs = dirSegments[i]!;\n    let n = 0;\n    while (n < common.length && n < segs.length && common[n] === segs[n]) n++;\n    common = common.slice(0, n);\n  }\n  return common.join(\"/\");\n}\n\n/**\n * Fetcher signature — fetches `{ path → Buffer }` for the requested paths at\n * a pinned upstream commit. {@link fetchAssetFilesFromGitHub} is the default\n * production implementation; tests inject a mock.\n */\nexport type AssetFetcher = (opts: {\n  url: string;\n  commitSha: string;\n  paths: string[];\n}) => Promise<Record<string, Buffer>>;\n\n/**\n * Options for {@link installFromManifest}.\n */\nexport interface InstallOpts {\n  /** The pointer-only install manifest from the Catalog. */\n  manifest: InstallManifest;\n  /** Filesystem root the asset is installed under (ref-derived mode). */\n  libraryRoot: string;\n  /**\n   * Pluggable fetcher so tests can inject mock data. Defaults to\n   * {@link fetchAssetFilesFromGitHub} in production.\n   */\n  fetcher?: AssetFetcher;\n  /**\n   * Flat-layout mode. When set, install-core reproduces the platform\n   * pointer-installer's behavior: it ignores `libraryRoot`/ref-derivation, does\n   * NOT parse `manifest.ref` and does NOT verify the composite sha256, strips\n   * the longest-common-dir prefix from each path, per-file sha256-verifies, and\n   * writes the stripped paths as immediate children of `targetDir` (what the\n   * runner's `.skaile/assets/<kind>/<name>/` scan requires). `installPath` is\n   * `targetDir`. Absent → unchanged ref-derived `@<pub>/name/version/<path>`\n   * layout with composite verify.\n   */\n  targetDir?: string;\n}\n\n/**\n * Result of a successful {@link installFromManifest} call.\n */\nexport interface InstallResult {\n  /** Absolute path the asset files were written to. */\n  installPath: string;\n}\n\n/**\n * Fetch, verify, and write an asset's files per its {@link InstallManifest}.\n *\n * @throws An error matching `/hash mismatch/i` if any per-file SHA256 differs.\n * @throws An error matching `/composite hash mismatch/i` if the rollup differs.\n * @throws An error if the ref is malformed or the fetcher omits a file.\n */\nexport async function installFromManifest(opts: InstallOpts): Promise<InstallResult> {\n  const { manifest, libraryRoot } = opts;\n  const fetcher =\n    opts.fetcher ?? (await import(\"./source-fetch-github.js\")).fetchAssetFilesFromGitHub;\n\n  // Flat mode: reproduce the platform pointer-installer's asset-rooted layout.\n  // No ref parse, no composite verify — the platform store may not satisfy a\n  // ref-grammar or composite, and the runner only needs immediate-child files.\n  if (opts.targetDir !== undefined) {\n    return installFlat(manifest, opts.targetDir, fetcher);\n  }\n\n  // 1. Parse ref into install path: `skill:@x/git#1.0.0` → `<root>/@x/git/1.0.0`.\n  // Done first so the C1 path-traversal guard can resolve against installPath\n  // BEFORE any network fetch happens. The ref is attacker-controlled, so each\n  // segment is further validated as a safe path component (H1) after parsing.\n  // `parseAssetRef` is the single canonical grammar (`kind:@publisher/name#version`);\n  // the legacy trailing-`@version` shape was removed in core and is rejected here.\n  let parsed: ReturnType<typeof parseAssetRef>;\n  try {\n    parsed = parseAssetRef(manifest.ref);\n  } catch (e) {\n    throw new Error(`invalid ref: ${manifest.ref}: ${e instanceof Error ? e.message : String(e)}`);\n  }\n  const publisher = parsed.publisher;\n  const name = parsed.name;\n  const version = parsed.pin;\n  if (!publisher) throw new Error(`invalid ref: ${manifest.ref} (missing publisher)`);\n  if (!version) throw new Error(`invalid ref: ${manifest.ref} (missing version pin)`);\n  assertSafeRefComponent(\"publisher\", publisher);\n  assertSafeRefComponent(\"name\", name);\n  assertSafeRefComponent(\"version\", version);\n  const root = resolve(libraryRoot);\n  const installPath = resolve(join(root, `@${publisher}`, name, version));\n  // Defense in depth: even with the segment guards above, assert the built\n  // installPath stays strictly inside libraryRoot before any write or `rm`.\n  if (installPath !== root && !installPath.startsWith(root + sep)) {\n    throw new Error(`unsafe install path: ref '${manifest.ref}' resolves outside the library root`);\n  }\n\n  // 2. [C1] Validate EVERY manifest path against traversal BEFORE fetching.\n  // The attacker controls the manifest (and thus all hashes) — hashes verify\n  // content, never destination. Reject the whole install on the first bad path.\n  for (const f of manifest.files) {\n    assertSafeManifestPath(installPath, f.path);\n  }\n\n  // 3. Fetch all files at the pinned commit.\n  const paths = manifest.files.map((f) => f.path);\n  const bytes = await fetcher({\n    url: manifest.source.url,\n    commitSha: manifest.source.commitSha,\n    paths,\n  });\n\n  // 4. Verify per-file SHA256 — hard fail before writing anything. The path\n  // key used to read from the fetcher result is re-guarded as defense in depth.\n  for (const f of manifest.files) {\n    assertSafeManifestPath(installPath, f.path);\n    const buf = bytes[f.path];\n    if (!buf) throw new Error(`fetcher returned no bytes for ${f.path}`);\n    const actual = createHash(\"sha256\").update(buf).digest(\"hex\");\n    if (actual !== f.sha256) {\n      throw new Error(`hash mismatch for ${f.path}: expected ${f.sha256}, got ${actual}`);\n    }\n  }\n\n  // 5. Verify composite SHA256 over the sorted `<path>:<sha256>\\n` lines.\n  const sortedLines = manifest.files\n    .slice()\n    .sort((a, b) => a.path.localeCompare(b.path))\n    .map((e) => `${e.path}:${e.sha256}\\n`)\n    .join(\"\");\n  const actualComposite = createHash(\"sha256\").update(sortedLines, \"utf-8\").digest(\"hex\");\n  if (actualComposite !== manifest.sha256) {\n    throw new Error(`composite hash mismatch: expected ${manifest.sha256}, got ${actualComposite}`);\n  }\n\n  // 6. [M1] Write all verified files. A failed install must leave NO partial\n  // directory: any prior `installPath` is removed first (clean overwrite), and\n  // a mid-loop write failure removes the partially-written tree before\n  // rethrowing.\n  await rm(installPath, { recursive: true, force: true });\n  try {\n    for (const f of manifest.files) {\n      const target = join(installPath, f.path);\n      await mkdir(dirname(target), { recursive: true });\n      await writeFile(target, bytes[f.path]!);\n    }\n  } catch (e) {\n    await rm(installPath, { recursive: true, force: true }).catch(() => {});\n    throw e;\n  }\n\n  return { installPath };\n}\n\n/**\n * Flat-layout install — the platform pointer-installer's behavior, made canonical\n * in install-core. Validates every path, fetches with the FULL repo paths, per-file\n * sha256-verifies, then strips the longest-common-dir prefix and writes each file\n * as `join(targetDir, path.slice(assetRoot.length + 1))` — immediate children of\n * `targetDir`. No ref parse, no composite check.\n */\nasync function installFlat(\n  manifest: InstallManifest,\n  targetDir: string,\n  fetcher: AssetFetcher,\n): Promise<InstallResult> {\n  const target = resolve(targetDir);\n\n  // Gate every path before any fetch — the attacker controls the whole manifest.\n  for (const f of manifest.files) {\n    assertSafeManifestPath(target, f.path);\n  }\n\n  // Fetch keys off the FULL repo path (matches the upstream tree).\n  const paths = manifest.files.map((f) => f.path);\n  const bytes = await fetcher({\n    url: manifest.source.url,\n    commitSha: manifest.source.commitSha,\n    paths,\n  });\n\n  // Strip the asset-root dir prefix from the WRITE path only — the fetch above\n  // still keyed off the full repo path. Stripping removes leading whole segments\n  // (never the basename), so a non-empty remainder always survives.\n  const assetRoot = longestCommonDirPrefix(paths);\n\n  for (const f of manifest.files) {\n    const buf = bytes[f.path];\n    if (!buf) throw new Error(`fetcher returned no bytes for ${f.path}`);\n    const actual = createHash(\"sha256\").update(buf).digest(\"hex\");\n    if (actual !== f.sha256) {\n      throw new Error(`hash mismatch for ${f.path}: expected ${f.sha256}, got ${actual}`);\n    }\n    const relPath = assetRoot ? f.path.slice(assetRoot.length + 1) : f.path;\n    // Re-guard the post-strip destination — it is what we actually write.\n    assertSafeManifestPath(target, relPath);\n    const dest = join(target, relPath);\n    await mkdir(dirname(dest), { recursive: true });\n    await writeFile(dest, buf);\n  }\n\n  return { installPath: target };\n}\n"]}

package/dist/chunk-I75CM2QF.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../cli/src/commands/source-manifest.ts","../cli/src/commands/source.ts"],"names":["path2","existsSync","spawnSync"],"mappings":";;;;;;;;;;;;;;;AA+CA,IAAM,aAAA,GACJ,2IAAA;AAGF,SAAS,SAAS,IAAA,EAAqB;AACrC,EAAA,MAAA,CAAO,CAAA,EAAG,aAAa,CAAA,wBAAA,EAA2B,IAAI,CAAA,CAAA,CAAG,CAAA;AACzD,EAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAChB;AAkBO,SAAS,gBAAA,CACd,KACA,UAAA,EACmE;AACnE,EAAA,MAAM,IAAA,GAAO,kBAAkB,UAAU,CAAA;AACzC,EAAA,MAAM,UAAA,GAA4B,OAC9B,kBAAA,CAAwB,IAAA,CAAA,IAAA,CAAK,MAAM,uBAAA,EAAyB,CAAC,CAAA,GAC7D,EAAC;AACL,EAAA,MAAM,KAAA,GAAQ,WAAW,IAAA,CAAK,CAAC,MAAM,gBAAA,CAAiB,CAAA,EAAG,GAAG,CAAC,CAAA;AAC7D,EAAA,MAAM,MAAA,GAAS,CAAC,KAAA,GAAQ,kBAAA,CAAmB,GAAG,CAAA,GAAI,MAAA;AAClD,EAAA,MAAM,MAAM,KAAA,GAAQ,KAAA,CAAM,MAAO,MAAA,EAAQ,GAAA,IAAO,mBAAmB,GAAG,CAAA;AACtE,EAAA,MAAM,IAAA,GAAO,gBAAgB,GAAG,CAAA;AAChC,EAAA,MAAM,IAAA,GAAO,eAAA,CAAgB,cAAA,CAAe,GAAG,CAAC,CAAA;AAChD,EAAA,OAAO,EAAE,KAAK,IAAA,EAAM,IAAA,EAAM,cAAc,MAAA,EAAQ,YAAA,IAAgB,iBAAA,CAAkB,GAAG,CAAA,EAAE;AACzF;AAQA,SAAS,mBAAmB,GAAA,EAAgE;AAG1F,EAAA,IAAI,CAAC,oBAAoB,IAAA,CAAK,GAAG,KAAK,QAAA,CAAS,IAAA,CAAK,GAAG,CAAA,EAAG,OAAO,MAAA;AACjE,EAAA,MAAM,eAAoB,IAAA,CAAA,IAAA,CAAK,oBAAA,EAAqB,EAAG,CAAA,EAAG,GAAG,CAAA,KAAA,CAAO,CAAA;AACpE,EAAA,IAAI,CAAC,UAAA,CAAW,YAAY,CAAA,EAAG,OAAO,MAAA;AAItC,EAAA,MAAM,CAAC,IAAA,EAAM,KAAA,EAAO,IAAI,CAAA,GAAI,GAAA,CAAI,MAAM,IAAI,CAAA;AAC1C,EAAA,MAAM,GAAA,GAAM,IAAA,IAAQ,KAAA,IAAS,IAAA,GAAO,CAAA,QAAA,EAAW,IAAI,CAAA,CAAA,EAAI,KAAK,CAAA,CAAA,EAAI,IAAI,CAAA,CAAA,GAAK,GAAA;AACzE,EAAA,OAAO,EAAE,KAAK,YAAA,EAAa;AAC7B;AAOA,SAAS,kBAAkB,GAAA,EAAqB;AAC9C,EAAA,OAAY,UAAK,oBAAA,EAAqB,EAAG,GAAG,iBAAA,CAAkB,GAAG,CAAC,CAAA,KAAA,CAAO,CAAA;AAC3E;AASA,IAAM,qBAAA,uBAA4B,GAAA,CAAI;AAAA,EACpC,OAAA;AAAA,EACA,MAAA;AAAA,EACA,WAAA;AAAA,EACA,UAAA;AAAA,EACA,UAAA;AAAA,EACA;AACF,CAAC,CAAA;AASD,SAAS,mBAAmB,YAAA,EAA+B;AACzD,EAAA,MAAM,WAAW,YAAA,CAAa,OAAA,CAAQ,OAAO,GAAG,CAAA,CAAE,MAAM,GAAG,CAAA;AAC3D,EAAA,OAAO,SAAS,IAAA,CAAK,CAAC,MAAM,qBAAA,CAAsB,GAAA,CAAI,CAAC,CAAC,CAAA;AAC1D;AAMA,eAAe,OAAA,CACb,KACA,IAAA,EACe;AACf,EAAA,MAAM,UAAA,GAAkB,IAAA,CAAA,OAAA,CAAQ,IAAA,CAAK,UAAU,CAAA;AAC/C,EAAA,MAAM,EAAE,KAAK,IAAA,EAAM,YAAA,EAAc,QAAO,GAAI,gBAAA,CAAiB,KAAK,UAAU,CAAA;AAE5E,EAAA,IAAI,UAAA,CAAW,MAAM,CAAA,IAAK,CAAC,KAAK,KAAA,EAAO;AACrC,IAAA,OAAA;AAAA,MACE,CAAA,qCAAA,EAAwC,CAAA,CAAE,GAAA,CAAI,MAAM,CAAC,CAAA,2JAAA;AAAA,KAGvD;AACA,IAAA;AAAA,EACF;AAEA,EAAA,MAAM,KAAA,GAAqB,EAAE,GAAA,EAAI;AACjC,EAAA,WAAA,CAAY,KAAK,CAAA;AAEjB,EAAA,MAAM,EAAE,QAAQ,MAAA,EAAO,GAAI,wBAAwB,IAAA,EAAM,IAAA,CAAK,OAAO,KAAK,CAAA;AAE1E,EAAA,MAAM,YAAY,IAAA,CAAK,SAAA,IAAa,uBAAuB,IAAI,CAAA,IAAK,gBAAgB,GAAG,CAAA;AAEvF,EAAA,MAAM,UAAU,oBAAA,CAAqB;AAAA,IACnC,YAAA,EAAc,MAAA;AAAA,IACd,SAAA;AAAA,IACA,MAAA;AAAA,IACA,OAAO,IAAA,CAAK,KAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMZ,gBAAA,EAAkB;AAAA,GACnB,CAAA;AAED,EAAA,IAAI,CAAC,QAAQ,KAAA,EAAO;AAClB,IAAA,OAAA;AAAA,MACE,CAAA,mCAAA,EAAsC,CAAA,CAAE,GAAA,CAAI,MAAM,CAAC,CAAA,oDAAA;AAAA,KAErD;AACA,IAAA;AAAA,EACF;AAEA,EAAA,KAAA,CAAM,CAAA,4BAAA,EAA+B,QAAQ,UAAU,CAAA,WAAA,EAAc,EAAE,GAAA,CAAI,MAAM,CAAC,CAAA,CAAA,CAAG,CAAA;AAKrF,EAAA,OAAA;AAAA,IACE,CAAA,2CAAA,EAA8C,GAAG,CAAA,6BAAA,EACxB,GAAG,CAAA,iBAAA;AAAA,GAC9B;AACA,EAAA,IAAI,MAAA,CAAO,SAAS,CAAA,EAAG;AACrB,IAAA,OAAA,CAAQ,CAAA,EAAG,MAAA,CAAO,MAAM,CAAA,iEAAA,CAA8D,CAAA;AAAA,EACxF;AACF;AAOA,SAAS,uBAAA,CACP,MACA,UAAA,EACiF;AACjF,EAAA,MAAM,MAAA,GAAS,qBAAqB,IAAA,EAAM;AAAA,IACxC,UAAU,kBAAA,EAAmB;AAAA,IAC7B;AAAA,GACD,CAAA;AACD,EAAA,MAAM,MAAA,GAAS,MAAA,CAAO,MAAA,CAAO,MAAA,CAAO,CAAC,MAAM,CAAC,kBAAA,CAAmB,CAAA,CAAE,YAAY,CAAC,CAAA;AAC9E,EAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,MAAA,CAAO,OAAO,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,EAAG,EAAE,IAAI,CAAA,EAAA,EAAK,CAAA,CAAE,KAAK,EAAE,CAAA,EAAE;AAC7E;AAOA,SAAS,gBAAgB,IAAA,EAAoB;AAC3C,EAAA,MAAM,GAAA,GAAM,SAAA,CAAU,KAAA,EAAO,CAAC,IAAA,EAAM,IAAA,EAAM,MAAA,EAAQ,WAAW,CAAA,EAAG,EAAE,KAAA,EAAO,MAAA,EAAQ,CAAA;AACjF,EAAA,IAAI,GAAA,CAAI,WAAW,CAAA,EAAG;AACpB,IAAA,OAAA;AAAA,MACE;AAAA,KAEF;AAAA,EACF;AACF;AAQA,SAAS,aAAa,KAAA,EAA2B;AAC/C,EAAA,IAAI,KAAA,CAAM,IAAA,EAAM,OAAO,KAAA,CAAM,IAAA,CAAK,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AACxE,EAAA,MAAM,QAAQ,KAAA,CAAM,KAAA;AACpB,EAAA,IAAI,KAAA,IAAS,KAAA,CAAM,MAAA,GAAS,CAAA,EAAG;AAC7B,IAAA,MAAM,KAAA,GAAQ,OAAO,KAAA,CAAM,CAAC,CAAA,KAAM,QAAA,GAAW,KAAA,CAAM,CAAC,CAAA,GAAI,KAAA,CAAM,CAAC,CAAA,CAAE,IAAA;AACjE,IAAA,MAAM,MAAW,IAAA,CAAA,KAAA,CAAM,OAAA,CAAQ,MAAM,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAC,CAAA;AACxD,IAAA,OAAO,GAAA,KAAQ,GAAA,GAAM,KAAA,CAAM,IAAA,GAAO,GAAA;AAAA,EACpC;AACA,EAAA,OAAO,KAAA,CAAM,IAAA;AACf;AAGA,SAAS,kBAAkB,YAAA,EAA8B;AACvD,EAAA,MAAM,MAAW,IAAA,CAAA,KAAA,CAAM,OAAA,CAAQ,aAAa,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAC,CAAA;AAC/D,EAAA,OAAO,GAAA,KAAQ,MAAW,IAAA,CAAA,KAAA,CAAM,QAAA,CAAS,aAAa,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAC,CAAA,GAAI,GAAA;AAC/E;AAGA,SAAS,SAAS,KAAA,EAA2B;AAC3C,EAAA,OAAO,CAAA,EAAG,KAAA,CAAM,IAAI,CAAA,CAAA,EAAI,MAAM,IAAI,CAAA,CAAA;AACpC;AAgBA,eAAe,UAAA,CACb,KACA,IAAA,EACe;AACf,EAAA,MAAM,UAAA,GAAkB,IAAA,CAAA,OAAA,CAAQ,IAAA,CAAK,UAAU,CAAA;AAC/C,EAAA,MAAM,EAAE,KAAK,IAAA,EAAM,IAAA,EAAM,cAAc,MAAA,EAAO,GAAI,gBAAA,CAAiB,GAAA,EAAK,UAAU,CAAA;AAElF,EAAA,IAAI,CAAC,UAAA,CAAW,MAAM,CAAA,EAAG;AACvB,IAAA,MAAA;AAAA,MACE,4BAA4B,IAAI,CAAA,KAAA,EAAQ,CAAA,CAAE,GAAA,CAAI,MAAM,CAAC,CAAA,kDAAA;AAAA,KAEvD;AACA,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AAGA,EAAA,MAAM,KAAA,GAAqB,EAAE,GAAA,EAAI;AACjC,EAAA,MAAM,MAAA,GAAS,YAAY,KAAK,CAAA;AAChC,EAAA,IAAI,CAAC,MAAA,EAAQ,eAAA,CAAgB,IAAI,CAAA;AAEjC,EAAA,MAAM,EAAE,QAAQ,WAAA,EAAa,MAAA,KAAW,uBAAA,CAAwB,IAAA,EAAM,IAAA,CAAK,GAAA,IAAO,KAAK,CAAA;AAEvF,EAAA,IAAI,KAAK,SAAA,EAAW;AAClB,IAAA,OAAA;AAAA,MACE;AAAA,KAEF;AACA,IAAA,MAAM,YAAY,IAAA,CAAK,SAAA,IAAa,uBAAuB,IAAI,CAAA,IAAK,gBAAgB,GAAG,CAAA;AACvF,IAAA,MAAM,UAAU,oBAAA,CAAqB;AAAA,MACnC,YAAA,EAAc,MAAA;AAAA,MACd,SAAA;AAAA,MACA,MAAA,EAAQ,WAAA;AAAA,MACR,KAAA,EAAO,IAAA;AAAA,MACP,gBAAA,EAAkB;AAAA,KACnB,CAAA;AACD,IAAA,KAAA;AAAA,MACE,iCAAiC,OAAA,CAAQ,UAAU,cAAc,CAAA,CAAE,GAAA,CAAI,MAAM,CAAC,CAAA,aAAA;AAAA,KAChF;AACA,IAAA,IAAI,MAAA,CAAO,SAAS,CAAA,EAAG;AACrB,MAAA,OAAA,CAAQ,CAAA,EAAG,MAAA,CAAO,MAAM,CAAA,iEAAA,CAA8D,CAAA;AAAA,IACxF;AACA,IAAA;AAAA,EACF;AAGA,EAAA,IAAI,KAAK,SAAA,EAAW;AAClB,IAAA,OAAA;AAAA,MACE;AAAA,KAEF;AAAA,EACF;AAGA,EAAA,MAAM,EAAE,UAAU,QAAA,EAAS,GAAI,qBAAqB,YAAA,CAAa,MAAA,EAAQ,OAAO,CAAC,CAAA;AACjF,EAAA,MAAM,eAAA,GAAkB,QAAA,CAAS,MAAA,IAAU,EAAC;AAG5C,EAAA,MAAM,WAAA,uBAAkB,GAAA,EAA0C;AAClE,EAAA,KAAA,MAAW,CAAA,IAAK,aAAa,WAAA,CAAY,GAAA,CAAI,kBAAkB,CAAA,CAAE,YAAY,GAAG,CAAC,CAAA;AAEjF,EAAA,MAAM,OAAqB,EAAC;AAC5B,EAAA,MAAM,UAAoB,EAAC;AAC3B,EAAA,KAAA,MAAW,KAAK,eAAA,EAAiB;AAC/B,IAAA,IAAI,WAAA,CAAY,IAAI,YAAA,CAAa,CAAC,CAAC,CAAA,EAAG,IAAA,CAAK,KAAK,CAAC,CAAA;AAAA,SAC5C,OAAA,CAAQ,IAAA,CAAK,QAAA,CAAS,CAAC,CAAC,CAAA;AAAA,EAC/B;AAGA,EAAA,MAAM,gBAAgB,IAAI,GAAA,CAAI,eAAA,CAAgB,GAAA,CAAI,YAAY,CAAC,CAAA;AAC/D,EAAA,MAAM,iBAA2B,EAAC;AAClC,EAAA,KAAA,MAAW,KAAK,WAAA,EAAa;AAC3B,IAAA,IAAI,CAAC,aAAA,CAAc,GAAA,CAAI,kBAAkB,CAAA,CAAE,YAAY,CAAC,CAAA,EAAG;AACzD,MAAA,cAAA,CAAe,KAAK,CAAA,EAAG,CAAA,CAAE,IAAI,CAAA,CAAA,EAAI,CAAA,CAAE,IAAI,CAAA,CAAE,CAAA;AAAA,IAC3C;AAAA,EACF;AAEA,EAAA,MAAM,OAAA,GAAU,QAAQ,MAAA,GAAS,CAAA;AACjC,EAAA,IAAI,OAAA,CAAQ,SAAS,CAAA,EAAG;AACtB,IAAA,OAAA,CAAQ,4BAA4B,OAAA,CAAQ,IAAA,GAAO,IAAA,CAAK,IAAI,CAAC,CAAA,CAAE,CAAA;AAAA,EACjE;AACA,EAAA,IAAI,cAAA,CAAe,SAAS,CAAA,EAAG;AAC7B,IAAA,OAAA;AAAA,MACE,CAAA,EAAG,cAAA,CAAe,MAAM,CAAA,8CAAA,EACnB,cAAA,CAAe,IAAA,EAAK,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA,+CAAA,EAA6C,GAAG,CAAA,YAAA;AAAA,KACvF;AAAA,EACF;AAEA,EAAA,IAAI,CAAC,OAAA,EAAS;AACZ,IAAA,KAAA,CAAM,oBAAoB,CAAA;AAC1B,IAAA,IAAI,MAAA,CAAO,SAAS,CAAA,EAAG;AACrB,MAAA,OAAA,CAAQ,CAAA,EAAG,MAAA,CAAO,MAAM,CAAA,kEAAA,CAA+D,CAAA;AAAA,IACzF;AACA,IAAA;AAAA,EACF;AAEA,EAAA,MAAM,MAAA,GAA4B,EAAE,GAAG,QAAA,EAAU,QAAQ,IAAA,EAAK;AAC9D,EAAA,aAAA,CAAc,MAAA,EAAQ,oBAAA,CAAqB,MAAM,CAAA,EAAG,OAAO,CAAA;AAC3D,EAAA,KAAA;AAAA,IACE,CAAA,+BAAA,EAAkC,IAAA,CAAK,MAAM,CAAA,UAAA,EAAa,OAAA,CAAQ,MAAM,CAAA,QAAA,EAAM,CAAA,CAAE,GAAA,CAAI,MAAM,CAAC,CAAA,CAAA;AAAA,GAC7F;AACA,EAAA,IAAI,MAAA,CAAO,SAAS,CAAA,EAAG;AACrB,IAAA,OAAA,CAAQ,CAAA,EAAG,MAAA,CAAO,MAAM,CAAA,kEAAA,CAA+D,CAAA;AAAA,EACzF;AACF;AAaA,eAAe,SAAA,CACb,KACA,IAAA,EACe;AACf,EAAA,MAAM,UAAA,GAAkB,IAAA,CAAA,OAAA,CAAQ,IAAA,CAAK,UAAU,CAAA;AAC/C,EAAA,MAAM,EAAE,KAAK,IAAA,EAAM,IAAA,EAAM,cAAc,MAAA,EAAO,GAAI,gBAAA,CAAiB,GAAA,EAAK,UAAU,CAAA;AAElF,EAAA,IAAI,CAAC,UAAA,CAAW,MAAM,CAAA,EAAG;AACvB,IAAA,MAAA;AAAA,MACE,4BAA4B,IAAI,CAAA,KAAA,EAAQ,CAAA,CAAE,GAAA,CAAI,MAAM,CAAC,CAAA,kDAAA;AAAA,KAEvD;AACA,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AAGA,EAAA,WAAA,CAAY,EAAE,KAAK,CAAA;AAEnB,EAAA,MAAM,IAAA,GAAO,YAAA,CAAa,MAAA,EAAQ,OAAO,CAAA;AACzC,EAAA,MAAM,EAAE,QAAA,EAAU,WAAA,EAAY,GAAI,qBAAqB,IAAI,CAAA;AAE3D,EAAA,MAAM,SAAmB,EAAC;AAC1B,EAAA,MAAM,WAAqB,EAAC;AAG5B,EAAA,KAAA,MAAW,KAAK,WAAA,EAAa;AAC3B,IAAA,MAAM,OAAO,CAAA,EAAG,CAAA,CAAE,IAAI,CAAA,EAAA,EAAK,EAAE,OAAO,CAAA,CAAA;AACpC,IAAA,IAAI,CAAA,CAAE,QAAA,KAAa,OAAA,EAAS,MAAA,CAAO,KAAK,IAAI,CAAA;AAAA,SACvC,QAAA,CAAS,KAAK,IAAI,CAAA;AAAA,EACzB;AAEA,EAAA,MAAM,MAAA,GAAS,QAAA,CAAS,MAAA,IAAU,EAAC;AACnC,EAAA,KAAA,MAAW,SAAS,MAAA,EAAQ;AAC1B,IAAA,MAAM,GAAA,GAAM,SAAS,KAAK,CAAA;AAG1B,IAAA,MAAM,WAAqB,EAAC;AAC5B,IAAA,IAAI,KAAA,CAAM,IAAA,EAAM,QAAA,CAAS,IAAA,CAAK,MAAM,IAAI,CAAA;AACxC,IAAA,IAAI,MAAM,KAAA,EAAO;AACf,MAAA,KAAA,MAAW,CAAA,IAAK,KAAA,CAAM,KAAA,EAAO,QAAA,CAAS,IAAA,CAAK,OAAO,CAAA,KAAM,QAAA,GAAW,CAAA,GAAI,CAAA,CAAE,IAAI,CAAA;AAAA,IAC/E;AACA,IAAA,IAAI,SAAS,MAAA,KAAW,CAAA,EAAG,QAAA,CAAS,IAAA,CAAK,MAAM,IAAI,CAAA;AACnD,IAAA,KAAA,MAAW,OAAO,QAAA,EAAU;AAC1B,MAAA,IAAI,CAAC,UAAA,CAAgB,IAAA,CAAA,IAAA,CAAK,IAAA,EAAM,GAAG,CAAC,CAAA,EAAG;AACrC,QAAA,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,GAAG,CAAA,2BAAA,EAA8B,GAAG,CAAA,CAAE,CAAA;AAAA,MACvD;AAAA,IACF;AAUA,IAAA,IAAI,MAAM,MAAA,EAAQ;AAChB,MAAA,IAAI,KAAA,CAAM,KAAA,IAAS,KAAA,CAAM,KAAA,CAAM,SAAS,CAAA,EAAG;AACzC,QAAA,MAAM,SAAA,GAAY,MAAM,KAAA,CAAM,GAAA;AAAA,UAAI,CAAC,CAAA,KAAA,CAChC,OAAO,CAAA,KAAM,QAAA,GAAW,IAAI,CAAA,CAAE,IAAA,EAAM,OAAA,CAAQ,KAAA,EAAO,GAAG;AAAA,SACzD;AACA,QAAA,MAAM,MAAA,GAAS,wBAAA,CAAyB,IAAA,EAAM,SAAS,CAAA;AACvD,QAAA,IAAI,MAAA,KAAW,MAAM,MAAA,EAAQ;AAC3B,UAAA,MAAA,CAAO,IAAA;AAAA,YACL,CAAA,EAAG,GAAG,CAAA,4BAAA,EAA+B,KAAA,CAAM,OAAO,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA,YAAA,EAAU,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA,OAAA;AAAA,WAC7F;AAAA,QACF;AAAA,MACF,CAAA,MAAO;AACL,QAAA,QAAA,CAAS,IAAA;AAAA,UACP,GAAG,GAAG,CAAA,0HAAA;AAAA,SACR;AAAA,MACF;AAAA,IACF;AAGA,IAAA,KAAA,MAAW,GAAA,IAAO,KAAA,CAAM,YAAA,IAAgB,EAAC,EAAG;AAC1C,MAAA,IAAI;AACF,QAAA,aAAA,CAAc,GAAG,CAAA;AAAA,MACnB,SAAS,GAAA,EAAK;AACZ,QAAA,QAAA,CAAS,IAAA;AAAA,UACP,CAAA,EAAG,GAAG,CAAA,wBAAA,EAA2B,GAAG,CAAA,GAAA,EAAM,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA,SAC5F;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,EAAA,KAAA,MAAW,CAAA,IAAK,QAAA,EAAU,OAAA,CAAQ,CAAC,CAAA;AACnC,EAAA,KAAA,MAAW,CAAA,IAAK,MAAA,EAAQ,MAAA,CAAO,CAAC,CAAA;AAEhC,EAAA,IAAI,MAAA,CAAO,WAAW,CAAA,EAAG;AACvB,IAAA,KAAA,CAAM,CAAA,SAAA,EAAY,MAAA,CAAO,MAAM,CAAA,UAAA,CAAY,CAAA;AAAA,EAC7C,CAAA,MAAO;AACL,IAAA,MAAA,CAAO,CAAA,EAAG,MAAA,CAAO,MAAM,CAAA,UAAA,CAAY,CAAA;AAAA,EACrC;AAEA,EAAA,MAAM,UAAA,GAAa,IAAA,CAAK,MAAA,IAAU,QAAA,CAAS,MAAA,GAAS,CAAA;AACpD,EAAA,IAAI,OAAO,MAAA,GAAS,CAAA,IAAK,UAAA,EAAY,OAAA,CAAQ,KAAK,CAAC,CAAA;AACrD;AAaO,SAAS,oBAAA,CACd,WACA,MAAA,EACqC;AACrC,EAAA,MAAM,KAAA,GAAA,CAAS,aAAa,EAAA,EAAI,IAAA,GAAO,KAAA,CAAM,KAAK,CAAA,CAAE,MAAA,CAAO,OAAO,CAAA;AAClE,EAAA,MAAM,CAAC,OAAA,EAAS,GAAG,IAAI,CAAA,GAAI,MAAM,MAAA,GAAS,CAAA,GAAI,KAAA,GAAQ,CAAC,IAAI,CAAA;AAC3D,EAAA,OAAO,EAAE,OAAA,EAA4B,IAAA,EAAM,CAAC,GAAG,IAAA,EAAM,MAAM,CAAA,EAAE;AAC/D;AAgBO,SAAS,OAAA,CACd,GAAA,EACA,IAAA,EACA,KAAA,GAAmB,SAAA,EACb;AACN,EAAA,MAAM,UAAA,GAAkB,IAAA,CAAA,OAAA,CAAQ,IAAA,CAAK,UAAU,CAAA;AAC/C,EAAA,MAAM,EAAE,IAAA,EAAM,YAAA,EAAc,QAAO,GAAI,gBAAA,CAAiB,KAAK,UAAU,CAAA;AAEvE,EAAA,IAAI,CAAC,UAAA,CAAW,MAAM,CAAA,EAAG;AACvB,IAAA,MAAA;AAAA,MACE,CAAA,yBAAA,EAA4B,IAAI,CAAA,KAAA,EAAQ,MAAM,CAAA,4CAAA;AAAA,KAEhD;AACA,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AAEA,EAAA,MAAM,EAAE,OAAA,EAAS,IAAA,EAAK,GAAI,oBAAA,CAAqB,OAAA,CAAQ,GAAA,CAAI,MAAA,IAAU,OAAA,CAAQ,GAAA,CAAI,MAAA,EAAQ,MAAM,CAAA;AAC/F,EAAA,MAAM,MAAM,KAAA,CAAM,OAAA,EAAS,MAAM,EAAE,KAAA,EAAO,WAAW,CAAA;AACrD,EAAA,IAAI,GAAA,CAAI,MAAA,KAAW,CAAA,IAAK,GAAA,CAAI,WAAW,IAAA,EAAM;AAC3C,IAAA,MAAA,CAAO,CAAA,0BAAA,EAA6B,GAAA,CAAI,MAAM,CAAA,CAAA,CAAG,CAAA;AACjD,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AAGA,EAAA,MAAM,EAAE,WAAA,EAAY,GAAI,qBAAqB,YAAA,CAAa,MAAA,EAAQ,OAAO,CAAC,CAAA;AAC1E,EAAA,MAAM,SAAS,WAAA,CAAY,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,aAAa,OAAO,CAAA;AAC/D,EAAA,MAAM,WAAW,WAAA,CAAY,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,aAAa,OAAO,CAAA;AACjE,EAAA,IAAI,MAAA,CAAO,SAAS,CAAA,EAAG;AACrB,IAAA,KAAA,MAAW,CAAA,IAAK,QAAQ,MAAA,CAAO,CAAA,EAAG,EAAE,IAAI,CAAA,EAAA,EAAK,CAAA,CAAE,OAAO,CAAA,CAAE,CAAA;AACxD,IAAA,OAAA,CAAQ,iFAA4E,CAAA;AAAA,EACtF,CAAA,MAAA,IAAW,QAAA,CAAS,MAAA,GAAS,CAAA,EAAG;AAC9B,IAAA,KAAA,MAAW,CAAA,IAAK,UAAU,OAAA,CAAQ,CAAA,EAAG,EAAE,IAAI,CAAA,EAAA,EAAK,CAAA,CAAE,OAAO,CAAA,CAAE,CAAA;AAC3D,IAAA,KAAA,CAAM,wBAAwB,CAAA;AAAA,EAChC,CAAA,MAAO;AACL,IAAA,KAAA,CAAM,QAAQ,CAAA;AAAA,EAChB;AACF;AAOO,SAAS,0BAA0B,GAAA,EAAoB;AAG5D,EAAA,MAAM,QAAA,GAAW,IACd,OAAA,CAAQ,UAAU,EAClB,WAAA,CAAY,yCAAyC,EACrD,uBAAA,EAAwB;AAE3B,EAAA,QAAA,CACG,OAAA,CAAQ,YAAY,CAAA,CACpB,WAAA,CAAY,8EAA8E,CAAA,CAC1F,MAAA,CAAO,yBAAA,EAA2B,mBAAA,EAAqB,QAAQ,GAAA,EAAK,CAAA,CACpE,MAAA,CAAO,sBAAsB,uDAAuD,CAAA,CACpF,MAAA,CAAO,OAAA,EAAS,6CAAA,EAA+C,KAAK,CAAA,CACpE,MAAA,CAAO,WAAW,wCAAA,EAA0C,KAAK,CAAA,CACjE,MAAA,CAAO,CAAC,GAAA,EAAK,IAAA,KAAS,OAAA,CAAQ,GAAA,EAAK,IAAI,CAAC,CAAA;AAE3C,EAAA,QAAA,CACG,OAAA,CAAQ,YAAY,CAAA,CACpB,WAAA,CAAY,8DAA8D,CAAA,CAC1E,MAAA,CAAO,2BAA2B,mBAAA,EAAqB,OAAA,CAAQ,KAAK,CAAA,CACpE,OAAO,CAAC,GAAA,EAAK,SAAS,OAAA,CAAQ,GAAA,EAAK,IAAI,CAAC,CAAA;AAE3C,EAAA,QAAA,CACG,OAAA,CAAQ,eAAe,CAAA,CACvB,WAAA;AAAA,IACC;AAAA,GAEF,CACC,MAAA,CAAO,yBAAA,EAA2B,mBAAA,EAAqB,OAAA,CAAQ,GAAA,EAAK,CAAA,CACpE,MAAA,CAAO,oBAAA,EAAsB,2CAA2C,CAAA,CACxE,MAAA,CAAO,OAAA,EAAS,6CAAA,EAA+C,KAAK,CAAA,CACpE,MAAA,CAAO,aAAA,EAAe,iDAAA,EAAmD,KAAK,CAAA,CAC9E,MAAA,CAAO,CAAC,GAAA,EAAK,IAAA,KAAS,UAAA,CAAW,GAAA,EAAK,IAAI,CAAC,CAAA;AAE9C,EAAA,QAAA,CACG,OAAA,CAAQ,cAAc,CAAA,CACtB,WAAA,CAAY,6CAA6C,EACzD,MAAA,CAAO,yBAAA,EAA2B,mBAAA,EAAqB,OAAA,CAAQ,GAAA,EAAK,EACpE,MAAA,CAAO,UAAA,EAAY,yDAAA,EAA2D,KAAK,CAAA,CACnF,MAAA,CAAO,CAAC,GAAA,EAAK,IAAA,KAAS,SAAA,CAAU,GAAA,EAAK,IAAI,CAAC,CAAA;AAE7C,EAAA,QAAA,CACG,OAAA,CAAQ,eAAe,CAAA,CACvB,WAAA,CAAY,+DAA+D,CAAA,CAC3E,MAAA,CAAO,yBAAA,EAA2B,mBAAA,EAAqB,OAAA,CAAQ,GAAA,EAAK,CAAA,CACpE,OAAO,kBAAA,EAAoB,oDAAoD,CAAA,CAC/E,MAAA,CAAO,sBAAA,EAAwB,yDAAyD,CAAA,CACxF,MAAA,CAAO,kBAAkB,0DAA0D,CAAA,CACnF,MAAA,CAAO,WAAA,EAAa,+DAA+D,KAAK,CAAA,CACxF,MAAA,CAAO,OAAO,KAAK,IAAA,KAAS;AAC3B,IAAA,MAAM,EAAE,UAAA,EAAW,GAAI,MAAM,OAAO,uCAA8B,CAAA;AAClE,IAAA,MAAM,UAAA,CAAW,KAAK,IAAI,CAAA;AAAA,EAC5B,CAAC,CAAA;AAEH,EAAA,QAAA,CACG,OAAA,CAAQ,eAAe,CAAA,CACvB,WAAA,CAAY,iDAAiD,EAC7D,MAAA,CAAO,MAAM,QAAA,CAAS,SAAS,CAAC,CAAA;AAEnC,EAAA,QAAA,CACG,OAAA,CAAQ,YAAY,CAAA,CACpB,WAAA,CAAY,sDAAsD,CAAA,CAClE,MAAA,CAAO,2BAA2B,mBAAA,EAAqB,OAAA,CAAQ,KAAK,CAAA,CACpE,OAAO,eAAA,EAAiB,4CAA4C,EACpE,MAAA,CAAO,OAAO,KAAK,IAAA,KAAS;AAC3B,IAAA,MAAM,EAAE,OAAA,EAAQ,GAAI,MAAM,OAAO,uCAA8B,CAAA;AAC/D,IAAA,MAAM,OAAA,CAAQ,KAAK,IAAI,CAAA;AAAA,EACzB,CAAC,CAAA;AACL;;;AC5lBO,SAAS,gBAAgB,GAAA,EAAqB;AACnD,EAAA,OAAYA,IAAA,CAAA,IAAA,CAAK,iBAAA,EAAkB,EAAG,GAAG,CAAA;AAC3C;AAEA,IAAM,wBAAA,GAA2B,sBAAA;AACjC,IAAM,6BAAA,GAAgC,qBAAA;AAU/B,SAAS,oBAAoB,MAAA,EAAuC;AACzE,EAAA,OAAO,MAAA,CAAO,OAAO,MAAA,GAAS,CAAA;AAChC;AAQO,SAAS,uBAAuB,IAAA,EAAkC;AACvE,EAAA,MAAM,SAAA,GAAYC,UAAAA,CAAgBD,IAAA,CAAA,IAAA,CAAK,IAAA,EAAM,6BAA6B,CAAC,CAAA;AAC3E,EAAA,MAAM,WAAA,GAAcC,UAAAA,CAAgBD,IAAA,CAAA,IAAA,CAAK,IAAA,EAAM,wBAAwB,CAAC,CAAA;AACxE,EAAA,IAAI,SAAA,IAAa,CAAC,WAAA,EAAa;AAC7B,IAAA,OACE,CAAA,2BAAA,EAA8B,6BAA6B,CAAA,QAAA,EACxD,wBAAwB,sGAC4B,wBAAwB,CAAA,4EAAA,CAAA;AAAA,EAGnF;AACA,EAAA,OAAO,MAAA;AACT;AAQO,SAAS,mBAAmB,KAAA,EAAuB;AACxD,EAAA,MAAM,CAAA,GAAI,MAAM,IAAA,EAAK;AACrB,EAAA,IAAI,+BAAA,CAAgC,KAAK,CAAC,CAAA,IAAK,QAAQ,IAAA,CAAK,CAAC,GAAG,OAAO,CAAA;AACvE,EAAA,MAAM,IAAA,GAAO,CAAA,CAAE,OAAA,CAAQ,QAAA,EAAU,EAAE,CAAA;AACnC,EAAA,IAAI,qBAAqB,IAAA,CAAK,IAAI,CAAA,EAAG,OAAO,kBAAkB,IAAI,CAAA,IAAA,CAAA;AAClE,EAAA,IAAI,YAAY,IAAA,CAAK,IAAI,CAAA,EAAG,OAAO,4BAA4B,IAAI,CAAA,IAAA,CAAA;AACnE,EAAA,OAAO,CAAA;AACT;AAQO,SAAS,gBAAA,CAAiB,OAAoB,GAAA,EAAsB;AACzE,EAAA,IAAI,KAAA,CAAM,GAAA,KAAQ,GAAA,EAAK,OAAO,IAAA;AAC9B,EAAA,IAAI,cAAA,CAAe,KAAA,CAAM,GAAG,CAAA,KAAM,GAAA,IAAO,gBAAgB,KAAA,CAAM,GAAG,CAAA,KAAM,GAAA,EAAK,OAAO,IAAA;AACpF,EAAA,OAAO,KAAA,CAAM,GAAA,KAAQ,kBAAA,CAAmB,GAAG,CAAA;AAC7C;AAUO,SAAS,qBAAA,CACd,SACA,GAAA,EACyB;AACzB,EAAA,MAAM,GAAA,GAAM,eAAe,GAAG,CAAA;AAC9B,EAAA,OAAO,OAAA,CAAQ,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,GAAA,KAAQ,GAAA,IAAO,cAAA,CAAe,CAAA,CAAE,GAAG,CAAA,KAAM,GAAG,CAAA;AAC3E;AAEA,SAAS,sBAAA,GAAiC;AACxC,EAAA,MAAM,IAAA,GAAO,iBAAA,CAAkB,OAAA,CAAQ,GAAA,EAAK,CAAA;AAC5C,EAAA,IAAI,CAAC,IAAA,EAAM;AACT,IAAA,MAAA;AAAA,MACE;AAAA,KACF;AACA,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AACA,EAAA,OAAYA,IAAA,CAAA,IAAA,CAAK,IAAA,EAAM,uBAAA,EAAyB,CAAA;AAClD;AAEO,SAAS,mBAAmB,QAAA,EAAiC;AAClE,EAAA,IAAI,CAACC,UAAAA,CAAW,QAAQ,CAAA,SAAU,EAAC;AACnC,EAAA,IAAI;AACF,IAAA,OAAO,mBAAA,CAAoB,IAAA,CAAK,QAAQ,CAAA,CAAE,UAAA,EAAW;AAAA,EACvD,SAAS,GAAA,EAAK;AACZ,IAAA,MAAA,CAAO,CAAA,eAAA,EAAkB,QAAQ,CAAA,EAAA,EAAK,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA,CAAE,CAAA;AACxF,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AACF;AAWO,SAAS,WAAA,CAAY,KAAA,EAAoB,IAAA,GAA4B,EAAC,EAAY;AACvF,EAAA,MAAM,IAAA,GAAO,eAAA,CAAgB,cAAA,CAAe,KAAA,CAAM,GAAG,CAAC,CAAA;AACtD,EAAA,IAAI,MAAA;AACJ,EAAA,IAAIA,UAAAA,CAAW,IAAI,CAAA,EAAG;AACpB,IAAA,IAAI,CAAC,IAAA,CAAK,KAAA,EAAO,OAAO,KAAA;AACxB,IAAA,MAAA,GAAS,GAAG,IAAI,CAAA,IAAA,CAAA;AAChB,IAAA,MAAA,CAAO,QAAQ,EAAE,SAAA,EAAW,IAAA,EAAM,KAAA,EAAO,MAAM,CAAA;AAC/C,IAAA,UAAA,CAAW,MAAM,MAAM,CAAA;AAAA,EACzB;AACA,EAAA,SAAA,CAAeD,aAAQ,IAAI,CAAA,EAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AACjD,EAAA,MAAM,IAAA,GAAO,CAAC,OAAA,EAAS,KAAA,CAAM,KAAK,IAAI,CAAA;AAEtC,EAAA,IAAI,KAAA,CAAM,KAAK,IAAA,CAAK,MAAA,CAAO,GAAG,CAAA,EAAG,UAAA,EAAY,MAAM,GAAG,CAAA;AACtD,EAAA,MAAM,QAAQE,SAAAA,CAAU,KAAA,EAAO,MAAM,EAAE,KAAA,EAAO,WAAW,CAAA;AACzD,EAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG;AACtB,IAAA,IAAI,MAAA,EAAQ;AACV,MAAA,MAAA,CAAO,MAAM,EAAE,SAAA,EAAW,IAAA,EAAM,KAAA,EAAO,MAAM,CAAA;AAC7C,MAAA,UAAA,CAAW,QAAQ,IAAI,CAAA;AAAA,IACzB;AACA,IAAA,MAAA,CAAO,CAAA,qBAAA,EAAwB,KAAA,CAAM,GAAG,CAAA,CAAE,CAAA;AAC1C,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AACA,EAAA,IAAI,MAAA,SAAe,MAAA,EAAQ,EAAE,WAAW,IAAA,EAAM,KAAA,EAAO,MAAM,CAAA;AAC3D,EAAA,OAAO,IAAA;AACT;AAOA,eAAe,oBAAA,CACb,KAAA,EACA,UAAA,GAAa,KAAA,EAMZ;AACD,EAAA,MAAM,EAAE,OAAA,EAAS,OAAA,EAAS,KAAA,EAAM,GAAI,MAAM,kBAAA,EAAmB;AAC7D,EAAA,IAAI;AACF,IAAA,MAAM,IAAA,GAAO,eAAA,CAAgB,KAAA,CAAM,GAAG,CAAA;AACtC,IAAA,MAAM,IAAA,GAAO,eAAA,CAAgB,cAAA,CAAe,KAAA,CAAM,GAAG,CAAC,CAAA;AACtD,IAAA,MAAM,QAAA,GAAA,CAAY,MAAM,OAAA,CAAQ,aAAA,EAAc,EAAG,KAAK,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,KAAS,IAAI,CAAA;AAC5E,IAAA,MAAM,GAAA,GACJ,QAAA,IACC,MAAM,OAAA,CAAQ,UAAA,CAAW;AAAA,MACxB,IAAA;AAAA,MACA,IAAA,EAAM,IAAA;AAAA,MACN,OAAA,EAAS,KAAA;AAAA,MACT,aAAA,EAAe,EAAE,GAAA,EAAK,KAAA,CAAM,GAAA,EAAK,QAAQ,KAAA,CAAM,GAAA,IAAO,MAAA,EAAQ,QAAA,EAAU,KAAA,EAAM;AAAA,MAC9E,SAAA,EAAW;AAAA,KACZ,CAAA;AAMH,IAAA,MAAM,WAAA,GAAmBF,UAAK,oBAAA,EAAqB,EAAG,GAAG,iBAAA,CAAkB,KAAA,CAAM,GAAG,CAAC,CAAA,KAAA,CAAO,CAAA;AAC5F,IAAA,MAAM,OAAA,GAAU,IAAI,kBAAA,CAAmB,OAAA,EAAS,IAAI,EAAA,EAAI,IAAA,EAAM,oBAAmB,EAAG;AAAA,MAClF,mBAAA,EAAqBC,UAAAA,CAAW,WAAW,CAAA,GAAI,WAAA,GAAc,KAAA;AAAA,KAC9D,CAAA;AACD,IAAA,MAAM,SAAS,MAAM,OAAA,CAAQ,IAAA,CAAK,EAAE,YAAY,CAAA;AAChD,IAAA,MAAM,OAAA,CAAQ,UAAA,CAAW,GAAA,CAAI,EAAE,CAAA;AAC/B,IAAA,OAAO,MAAA;AAAA,EACT,CAAA,SAAE;AACA,IAAA,KAAA,EAAM;AAAA,EACR;AACF;AAaA,eAAsB,kBAAkB,UAAA,EAAsC;AAC5E,EAAA,MAAM,IAAA,GAAO,kBAAkB,UAAU,CAAA;AACzC,EAAA,IAAI,CAAC,MAAM,OAAO,KAAA;AAClB,EAAA,IAAI,kBAAA,CAAwBD,UAAK,IAAA,EAAM,uBAAA,EAAyB,CAAC,CAAA,CAAE,MAAA,KAAW,CAAA,EAAG,OAAO,KAAA;AAExF,EAAA,OAAA,CAAQ,6CAAmC,CAAA;AAC3C,EAAA,MAAM,EAAE,MAAA,EAAO,GAAI,MAAM,mBAAmB,UAAU,CAAA;AACtD,EAAA,OAAO,MAAA,GAAS,CAAA;AAClB;AAeA,eAAsB,kBAAA,CACpB,UAAA,EACA,IAAA,GAA0B,EAAC,EACiC;AAC5D,EAAA,MAAM,IAAA,GAAO,iBAAA,CAAkB,UAAU,CAAA,IAAK,UAAA;AAC9C,EAAA,MAAM,UAAU,kBAAA,CAAwBA,IAAA,CAAA,IAAA,CAAK,IAAA,EAAM,uBAAA,EAAyB,CAAC,CAAA;AAC7E,EAAA,IAAI,MAAA,GAAS,CAAA;AACb,EAAA,IAAI,MAAA,GAAS,CAAA;AACb,EAAA,KAAA,MAAW,SAAS,OAAA,EAAS;AAC3B,IAAA,MAAM,IAAA,GAAO,eAAA,CAAgB,KAAA,CAAM,GAAG,CAAA;AACtC,IAAA,MAAM,IAAA,GAAO,eAAA,CAAgB,cAAA,CAAe,KAAA,CAAM,GAAG,CAAC,CAAA;AACtD,IAAA,IAAI;AAGF,MAAA,IAAI,CAACC,UAAAA,CAAW,IAAI,CAAA,EAAG;AACrB,QAAA,SAAA,CAAeD,aAAQ,IAAI,CAAA,EAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AACjD,QAAA,MAAM,IAAA,GAAO,CAAC,OAAA,EAAS,KAAA,CAAM,KAAK,IAAI,CAAA;AACtC,QAAA,IAAI,KAAA,CAAM,KAAK,IAAA,CAAK,MAAA,CAAO,GAAG,CAAA,EAAG,UAAA,EAAY,MAAM,GAAG,CAAA;AACtD,QAAA,MAAM,QAAQE,SAAAA,CAAU,KAAA,EAAO,MAAM,EAAE,KAAA,EAAO,UAAU,CAAA;AACxD,QAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG;AACtB,UAAA,OAAA,CAAQ,CAAA,EAAG,IAAI,CAAA,6BAAA,CAA+B,CAAA;AAC9C,UAAA,MAAA,EAAA;AACA,UAAA;AAAA,QACF;AAAA,MACF,CAAA,MAAO;AACL,QAAA,MAAM,IAAA,GAAOA,SAAAA,CAAU,KAAA,EAAO,CAAC,MAAA,EAAQ,WAAW,CAAA,EAAG,EAAE,GAAA,EAAK,IAAA,EAAM,KAAA,EAAO,QAAA,EAAU,CAAA;AACnF,QAAA,IAAI,IAAA,CAAK,WAAW,CAAA,EAAG;AACrB,UAAA,OAAA,CAAQ,CAAA,EAAG,IAAI,CAAA,6CAAA,CAA+C,CAAA;AAC9D,UAAA,MAAA,EAAA;AACA,UAAA;AAAA,QACF;AAAA,MACF;AACA,MAAA,MAAM,MAAA,GAAS,MAAM,oBAAA,CAAqB,KAAA,EAAO,KAAK,GAAG,CAAA;AACzD,MAAA,KAAA,MAAW,GAAA,IAAO,OAAO,MAAA,EAAQ,OAAA,CAAQ,GAAG,IAAI,CAAA,EAAA,EAAK,GAAG,CAAA,CAAE,CAAA;AAC1D,MAAA,KAAA,MAAW,QAAA,IAAY,OAAO,UAAA,EAAY,OAAA,CAAQ,GAAG,IAAI,CAAA,EAAA,EAAK,QAAQ,CAAA,CAAE,CAAA;AACxE,MAAA,MAAA,EAAA;AAAA,IACF,SAAS,GAAA,EAAK;AACZ,MAAA,OAAA,CAAQ,CAAA,EAAG,IAAI,CAAA,qBAAA,EAAmB,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA,CAAE,CAAA;AACpF,MAAA,MAAA,EAAA;AAAA,IACF;AAAA,EACF;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,OAAA,CAAQ,MAAA,EAAQ,QAAQ,MAAA,EAAO;AACjD;AAGA,eAAe,iBAAA,CAAkB,KAAa,UAAA,EAAoC;AAChF,EAAA,MAAM,IAAA,GAAO,gBAAgB,GAAG,CAAA;AAChC,EAAA,MAAM,EAAE,OAAA,EAAS,KAAA,EAAM,GAAI,MAAM,kBAAA,EAAmB;AACpD,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAA,CAAY,MAAM,OAAA,CAAQ,aAAA,EAAc,EAAG,KAAK,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,KAAS,IAAI,CAAA;AAC5E,IAAA,IAAI,QAAA,EAAU;AACZ,MAAA,MAAM,QAAQ,aAAA,CAAc,IAAA,EAAM,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,IACpD;AAAA,EACF,CAAA,SAAE;AACA,IAAA,KAAA,EAAM;AAAA,EACR;AACA,EAAA,IAAI,UAAA,EAAY;AACd,IAAA,MAAM,IAAA,GAAO,eAAA,CAAgB,cAAA,CAAe,GAAG,CAAC,CAAA;AAChD,IAAA,IAAID,UAAAA,CAAW,IAAI,CAAA,EAAG,MAAA,CAAO,IAAA,EAAM,EAAE,SAAA,EAAW,IAAA,EAAM,KAAA,EAAO,IAAA,EAAM,CAAA;AAAA,EACrE;AACF;AAEO,SAAS,iBAAA,GAA6B;AAC3C,EAAA,MAAM,GAAA,GAAM,IAAI,OAAA,CAAQ,QAAQ,CAAA,CAAE,WAAA;AAAA,IAChC;AAAA,GACF;AAGA,EAAA,GAAA,CACG,OAAA,CAAQ,cAAc,CAAA,CACtB,WAAA;AAAA,IACC;AAAA,GAGF,CACC,OAAO,eAAA,EAAiB,gEAA2D,EACnF,MAAA,CAAO,aAAA,EAAe,mCAAmC,CAAA,CACzD,MAAA,CAAO,mBAAA,EAAqB,8BAA8B,CAAA,CAC1D,MAAA,CAAO,WAAW,uCAAA,EAAyC,KAAK,EAChE,MAAA,CAAO,OAAA,EAAS,yDAAA,EAA2D,KAAK,CAAA,CAChF,MAAA;AAAA,IACC,OACE,QACA,IAAA,KAOG;AACH,MAAA,MAAM,GAAA,GAAM,mBAAmB,MAAM,CAAA;AACrC,MAAA,MAAM,WAAW,sBAAA,EAAuB;AAMxC,MAAA,MAAM,SAAA,GAAY,qBAAA,CAAsB,kBAAA,CAAmB,QAAQ,GAAG,GAAG,CAAA;AACzE,MAAA,IAAI,SAAA,EAAW;AACb,QAAA,MAAA;AAAA,UACE,CAAA,CAAA,EAAI,GAAG,CAAA,8BAAA,EAAiC,cAAA,CAAe,GAAG,CAAC,CAAA,yBAAA,EAClC,UAAU,GAAG,CAAA,wFAAA;AAAA,SAExC;AACA,QAAA,OAAA,CAAQ,QAAA,GAAW,CAAA;AACnB,QAAA;AAAA,MACF;AAEA,MAAA,IAAI,KAAK,IAAA,EAAM;AACb,QAAA,OAAA;AAAA,UACE;AAAA,SAEF;AAAA,MACF;AACA,MAAA,MAAM,GAAA,GAAM,IAAA,CAAK,GAAA,IAAO,IAAA,CAAK,MAAA;AAC7B,MAAA,MAAM,IAAA,GAAO,gBAAgB,GAAG,CAAA;AAChC,MAAA,MAAM,KAAA,GAAqB,EAAE,GAAA,EAAI;AACjC,MAAA,IAAI,GAAA,QAAW,GAAA,GAAM,GAAA;AAErB,MAAA,MAAM,IAAA,GAAO,eAAA,CAAgB,cAAA,CAAe,GAAG,CAAC,CAAA;AAChD,MAAA,MAAM,WAAA,GAAcA,WAAW,IAAI,CAAA;AAInC,MAAA,MAAM,SAAS,WAAA,CAAY,KAAA,EAAO,EAAE,KAAA,EAAO,IAAA,CAAK,OAAO,CAAA;AACvD,MAAA,IAAI,CAAC,MAAA,EAAQ;AACX,QAAA,KAAA,CAAM,CAAA,wBAAA,EAA2B,IAAI,CAAA,CAAE,CAAA;AAAA,MACzC,WAAW,WAAA,EAAa;AACtB,QAAA,KAAA,CAAM,CAAA,UAAA,EAAa,GAAG,CAAA,QAAA,EAAM,IAAI,CAAA,CAAE,CAAA;AAAA,MACpC,CAAA,MAAO;AACL,QAAA,KAAA,CAAM,CAAA,OAAA,EAAU,GAAG,CAAA,QAAA,EAAM,IAAI,CAAA,CAAE,CAAA;AAAA,MACjC;AAEA,MAAA,MAAM,MAAA,GAAS,mBAAA,CAAoB,IAAA,CAAK,QAAQ,CAAA;AAChD,MAAA,MAAA,CAAO,UAAU,KAAK,CAAA;AACtB,MAAA,MAAA,CAAO,IAAA,EAAK;AAEZ,MAAA,MAAM,MAAA,GAAS,MAAM,oBAAA,CAAqB,KAAA,EAAO,KAAK,GAAG,CAAA;AACzD,MAAA,MAAM,MAAA,GAAS,oBAAoB,MAAM,CAAA;AACzC,MAAA,MAAM,UAAA,GAAa,WAAW,MAAA,CAAO,aAAa,OAAO,MAAA,CAAO,WAAW,mBAAmB,IAAI,CAAA,EAAA,CAAA;AAClG,MAAA,IAAI,MAAA,EAAQ;AACV,QAAA,OAAA,CAAQ,UAAU,CAAA;AAAA,MACpB,CAAA,MAAO;AACL,QAAA,KAAA,CAAM,UAAU,CAAA;AAAA,MAClB;AACA,MAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,MAAA,EAAQ,OAAA,CAAQ,GAAG,CAAA;AAC5C,MAAA,KAAA,MAAW,QAAA,IAAY,MAAA,CAAO,UAAA,EAAY,OAAA,CAAQ,QAAQ,CAAA;AAE1D,MAAA,MAAM,UAAA,GAAa,uBAAuB,IAAI,CAAA;AAC9C,MAAA,IAAI,UAAA,UAAoB,UAAU,CAAA;AAElC,MAAA,MAAM,KAAA,GAAaD,IAAA,CAAA,QAAA,CAAS,OAAA,CAAQ,GAAA,IAAO,QAAQ,CAAA;AACnD,MAAA,IAAI,MAAA,EAAQ;AAGV,QAAA,OAAA;AAAA,UACE,CAAA,QAAA,EAAW,IAAI,CAAA,gBAAA,EAAmB,KAAK,SAAS,MAAA,CAAO,MAAA,CAAO,MAAM,CAAA,uFAAA,EAE1C,IAAI,CAAA,GAAA;AAAA,SAChC;AACA,QAAA,OAAA,CAAQ,QAAA,GAAW,CAAA;AAAA,MACrB,CAAA,MAAO;AACL,QAAA,KAAA,CAAM,CAAA,QAAA,EAAW,IAAI,CAAA,gBAAA,EAAmB,KAAK,CAAA,CAAA,CAAG,CAAA;AAAA,MAClD;AAAA,IACF;AAAA,GACF;AAGF,EAAA,GAAA,CACG,OAAA,CAAQ,MAAM,CAAA,CACd,WAAA,CAAY,uDAAuD,CAAA,CACnE,MAAA,CAAO,QAAA,EAAU,gBAAgB,CAAA,CACjC,MAAA,CAAO,OAAO,IAAA,KAA6B;AAC1C,IAAA,MAAM,WAAW,sBAAA,EAAuB;AACxC,IAAA,MAAM,OAAA,GAAU,mBAAmB,QAAQ,CAAA;AAC3C,IAAA,IAAI,IAAA,CAAK,IAAA,EAAM,OAAO,OAAA,CAAQ,GAAA,CAAI,KAAK,SAAA,CAAU,OAAA,EAAS,IAAA,EAAM,CAAC,CAAC,CAAA;AAClE,IAAA,IAAI,OAAA,CAAQ,WAAW,CAAA,EAAG;AACxB,MAAA,OAAA,CAAQ,+EAA+E,CAAA;AACvF,MAAA;AAAA,IACF;AACA,IAAA,OAAA,CAAQ,GAAA,EAAI;AACZ,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,CAAE,OAAA,CAAQ,WAAW,CAAC,CAAA;AAClC,IAAA,KAAA,MAAW,KAAK,OAAA,EAAS;AACvB,MAAA,MAAM,IAAA,GAAO,eAAA,CAAgB,CAAA,CAAE,GAAG,CAAA;AAClC,MAAA,MAAM,MAAA,GAASC,UAAAA,CAAW,eAAA,CAAgB,cAAA,CAAe,CAAA,CAAE,GAAG,CAAC,CAAC,CAAA,GAC5D,EAAA,GACA,CAAA,CAAE,IAAA,CAAK,eAAe,CAAA;AAC1B,MAAA,OAAA,CAAQ,IAAI,CAAA,EAAA,EAAK,CAAA,CAAE,GAAA,CAAI,IAAA,CAAK,OAAO,EAAE,CAAC,CAAC,CAAA,EAAA,EAAK,EAAE,GAAA,CAAI,CAAA,CAAE,GAAG,CAAC,CAAA,EAAG,MAAM,CAAA,CAAE,CAAA;AAAA,IACrE;AACA,IAAA,OAAA,CAAQ,GAAA,CAAI;AAAA,EAAA,EAAO,EAAE,GAAA,CAAI,CAAA,EAAG,OAAA,CAAQ,MAAM,YAAY,CAAC;AAAA,CAAI,CAAA;AAAA,EAC7D,CAAC,CAAA;AAGH,EAAA,GAAA,CACG,OAAA,CAAQ,oBAAoB,CAAA,CAC5B,WAAA,CAAY,4DAA4D,CAAA,CACxE,MAAA,CAAO,OAAO,GAAA,KAAgB;AAC7B,IAAA,MAAM,WAAW,sBAAA,EAAuB;AACxC,IAAA,MAAM,KAAA,GAAQ,kBAAA,CAAmB,QAAQ,CAAA,CAAE,IAAA,CAAK,CAAC,CAAA,KAAM,gBAAA,CAAiB,CAAA,EAAG,GAAG,CAAC,CAAA;AAC/E,IAAA,IAAI,CAAC,KAAA,EAAO;AACV,MAAA,MAAA,CAAO,CAAA,oBAAA,EAAuB,GAAG,CAAA,KAAA,EAAQ,QAAQ,CAAA,CAAA,CAAG,CAAA;AACpD,MAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,IAChB;AACA,IAAA,MAAM,IAAA,GAAO,eAAA,CAAgB,KAAA,CAAM,GAAG,CAAA;AACtC,IAAA,MAAM,SAAA,GAAY,eAAA,CAAgB,cAAA,CAAe,KAAA,CAAM,GAAG,CAAC,CAAA;AAC3D,IAAA,OAAA,CAAQ,GAAA;AAAA,MACN,IAAA,CAAK,SAAA;AAAA,QACH;AAAA,UACE,GAAG,KAAA;AAAA,UACH,IAAA;AAAA,UACA,SAAA;AAAA,UACA,MAAA,EAAQA,WAAW,SAAS;AAAA,SAC9B;AAAA,QACA,IAAA;AAAA,QACA;AAAA;AACF,KACF;AAAA,EACF,CAAC,CAAA;AAGH,EAAA,GAAA,CACG,OAAA,CAAQ,sBAAsB,CAAA,CAC9B,WAAA,CAAY,0EAA0E,CAAA,CACtF,MAAA,CAAO,SAAA,EAAW,4DAAA,EAA8D,KAAK,CAAA,CACrF,MAAA,CAAO,OAAO,KAAa,IAAA,KAA6B;AACvD,IAAA,MAAM,WAAW,sBAAA,EAAuB;AACxC,IAAA,MAAM,MAAA,GAAS,mBAAA,CAAoB,IAAA,CAAK,QAAQ,CAAA;AAEhD,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,UAAA,EAAW,CAAE,IAAA,CAAK,CAAC,CAAA,KAAM,gBAAA,CAAiB,CAAA,EAAG,GAAG,CAAC,CAAA;AACtE,IAAA,IAAI,CAAC,KAAA,EAAO;AACV,MAAA,MAAA,CAAO,CAAA,oBAAA,EAAuB,GAAG,CAAA,KAAA,EAAQ,QAAQ,CAAA,CAAA,CAAG,CAAA;AACpD,MAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,IAChB;AACA,IAAA,MAAM,IAAA,GAAO,eAAA,CAAgB,KAAA,CAAM,GAAG,CAAA;AACtC,IAAA,MAAA,CAAO,YAAA,CAAa,MAAM,GAAG,CAAA;AAC7B,IAAA,MAAA,CAAO,IAAA,EAAK;AACZ,IAAA,MAAM,iBAAA,CAAkB,KAAA,CAAM,GAAA,EAAK,IAAA,CAAK,KAAK,CAAA;AAC7C,IAAA,KAAA;AAAA,MACE,KAAK,KAAA,GACD,CAAA,gBAAA,EAAmB,IAAI,CAAA,uBAAA,CAAA,GACvB,mBAAmB,IAAI,CAAA,4HAAA;AAAA,KAC7B;AAAA,EACF,CAAC,CAAA;AAGH,EAAA,GAAA,CACG,QAAQ,aAAa,CAAA,CACrB,YAAY,sDAAsD,CAAA,CAClE,OAAO,OAAA,EAAS,0DAAA,EAA4D,KAAK,CAAA,CACjF,MAAA,CAAO,SAAS,qCAAA,EAAuC,KAAK,EAC5D,MAAA,CAAO,OAAO,KAAyB,IAAA,KAA2C;AACjF,IAAA,MAAM,WAAW,sBAAA,EAAuB;AACxC,IAAA,MAAM,OAAA,GAAU,mBAAmB,QAAQ,CAAA;AAC3C,IAAA,IAAI,OAAA,CAAQ,WAAW,CAAA,EAAG;AACxB,MAAA,OAAA,CAAQ,4BAA4B,CAAA;AACpC,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,OAAA;AACJ,IAAA,IAAI,GAAA,EAAK;AACP,MAAA,OAAA,GAAU,QAAQ,MAAA,CAAO,CAAC,MAAM,gBAAA,CAAiB,CAAA,EAAG,GAAG,CAAC,CAAA;AACxD,MAAA,IAAI,OAAA,CAAQ,WAAW,CAAA,EAAG;AACxB,QAAA,OAAA,CAAQ,CAAA,oBAAA,EAAuB,GAAG,CAAA,EAAA,CAAI,CAAA;AACtC,QAAA;AAAA,MACF;AAAA,IACF,CAAA,MAAA,IAAW,KAAK,GAAA,IAAO,OAAA,CAAQ,WAAW,CAAA,IAAK,CAAC,OAAA,CAAQ,KAAA,CAAM,KAAA,EAAO;AAEnE,MAAA,OAAA,GAAU,OAAA;AAAA,IACZ,CAAA,MAAO;AACL,MAAA,MAAM,QAAA,GAAW,MAAQ,CAAA,CAAA,WAAA,CAAY;AAAA,QACnC,OAAA,EAAS,wBAAA;AAAA,QACT,OAAA,EAAS,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,UAC3B,OAAO,CAAA,CAAE,GAAA;AAAA,UACT,KAAA,EAAO,eAAA,CAAgB,CAAA,CAAE,GAAG,CAAA;AAAA,UAC5B,MAAM,CAAA,CAAE;AAAA,SACV,CAAE,CAAA;AAAA,QACF,QAAA,EAAU;AAAA,OACX,CAAA;AACD,MAAA,IAAM,CAAA,CAAA,QAAA,CAAS,QAAQ,CAAA,EAAG;AACxB,QAAE,SAAO,YAAY,CAAA;AACrB,QAAA;AAAA,MACF;AACA,MAAA,MAAM,MAAA,GAAS,IAAI,GAAA,CAAI,QAAoB,CAAA;AAC3C,MAAA,OAAA,GAAU,OAAA,CAAQ,OAAO,CAAC,CAAA,KAAM,OAAO,GAAA,CAAI,CAAA,CAAE,GAAG,CAAC,CAAA;AAAA,IACnD;AACA,IAAA,KAAA,MAAW,SAAS,OAAA,EAAS;AAC3B,MAAA,MAAM,IAAA,GAAO,eAAA,CAAgB,KAAA,CAAM,GAAG,CAAA;AACtC,MAAA,MAAM,IAAA,GAAO,eAAA,CAAgB,cAAA,CAAe,KAAA,CAAM,GAAG,CAAC,CAAA;AACtD,MAAA,IAAI,CAACA,UAAAA,CAAW,IAAI,CAAA,EAAG;AACrB,QAAA,WAAA,CAAY,KAAK,CAAA;AACjB,QAAA,KAAA,CAAM,CAAA,EAAG,IAAI,CAAA,YAAA,EAAe,IAAI,CAAA,CAAA,CAAG,CAAA;AAAA,MACrC,CAAA,MAAO;AACL,QAAA,MAAM,IAAA,GAAOC,SAAAA,CAAU,KAAA,EAAO,CAAC,MAAA,EAAQ,WAAW,CAAA,EAAG,EAAE,GAAA,EAAK,IAAA,EAAM,KAAA,EAAO,SAAA,EAAW,CAAA;AACpF,QAAA,IAAI,IAAA,CAAK,WAAW,CAAA,EAAG;AACrB,UAAA,OAAA,CAAQ,CAAA,EAAG,IAAI,CAAA,6CAAA,CAA+C,CAAA;AAC9D,UAAA;AAAA,QACF;AAAA,MACF;AACA,MAAA,MAAM,MAAA,GAAS,MAAM,oBAAA,CAAqB,KAAA,EAAO,KAAK,GAAG,CAAA;AACzD,MAAA,MAAM,MAAA,GAAS,oBAAoB,MAAM,CAAA;AACzC,MAAA,MAAM,UAAA,GAAa,GAAG,IAAI,CAAA,UAAA,EAAa,OAAO,aAAa,CAAA,IAAA,EAAO,OAAO,WAAW,CAAA,UAAA,CAAA;AACpF,MAAA,IAAI,MAAA,EAAQ;AACV,QAAA,OAAA,CAAQ,UAAU,CAAA;AAClB,QAAA,OAAA,CAAQ,QAAA,GAAW,CAAA;AAAA,MACrB,CAAA,MAAO;AACL,QAAA,KAAA,CAAM,UAAU,CAAA;AAAA,MAClB;AACA,MAAA,KAAA,MAAW,GAAA,IAAO,OAAO,MAAA,EAAQ,OAAA,CAAQ,GAAG,IAAI,CAAA,EAAA,EAAK,GAAG,CAAA,CAAE,CAAA;AAC1D,MAAA,KAAA,MAAW,QAAA,IAAY,OAAO,UAAA,EAAY,OAAA,CAAQ,GAAG,IAAI,CAAA,EAAA,EAAK,QAAQ,CAAA,CAAE,CAAA;AACxE,MAAA,MAAM,UAAA,GAAa,uBAAuB,IAAI,CAAA;AAC9C,MAAA,IAAI,YAAY,OAAA,CAAQ,CAAA,EAAG,IAAI,CAAA,EAAA,EAAK,UAAU,CAAA,CAAE,CAAA;AAAA,IAClD;AAAA,EACF,CAAC,CAAA;AAGH,EAAA,GAAA,CACG,OAAA,CAAQ,aAAa,CAAA,CACrB,WAAA,CAAY,iDAAiD,CAAA,CAC7D,MAAA,CAAO,CAAC,IAAA,KAAiB;AACxB,IAAA,MAAA;AAAA,MACE;AAAA,KAEF;AACA,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB,CAAC,CAAA;AAEH,EAAA,GAAA,CACG,OAAA,CAAQ,eAAe,CAAA,CACvB,WAAA,CAAY,sDAAsD,CAAA,CAClE,MAAA,CAAO,CAAC,IAAA,KAAiB;AACxB,IAAA,MAAA;AAAA,MACE;AAAA,KAEF;AACA,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB,CAAC,CAAA;AAGH,EAAA,yBAAA,CAA0B,GAAG,CAAA;AAE7B,EAAA,OAAO,GAAA;AACT","file":"chunk-I75CM2QF.js","sourcesContent":["/**\n * `skaile source manifest …` — curated `skaile.manifest.yaml` lifecycle for a\n * source you do NOT own. `init` generates a curated manifest from a discovery\n * run and stores it OUTSIDE the source, under the local store catalog\n * (`~/.skaile/store/manifests/<slug>.yaml`); `edit` opens it in `$EDITOR` and\n * re-validates on save. `source add`/`sync` then apply it as a read overlay\n * (see `source.ts` `refreshManifestCache`).\n *\n * `rebuild` refreshes a curated manifest after an upstream change (merge by\n * default — curation is sacred; `--overwrite` re-scans). `verify` is a\n * read-only integrity check (paths, declared hashes, schema, dep refs).\n * `publish`/`propose`/`yank` remain stubs — they need the store publish\n * endpoint (`POST /sources/<id>/manifest`), which lands in a follow-up.\n *\n * @docLink cli/commands/source#manifest\n */\n\nimport { spawnSync } from \"node:child_process\";\nimport { existsSync, readFileSync, writeFileSync } from \"node:fs\";\nimport * as path from \"node:path\";\nimport {\n  type AssetEntry,\n  decodeSkaileManifest,\n  encodeSkaileManifest,\n  findWorkspaceRoot,\n  parseAssetRef,\n  resolveSourcePublisher,\n  type SkPublishManifest,\n  type SourceEntry,\n  sourceCacheKey,\n  sourceShortName,\n  storeManifestSlug,\n  workspaceConfigFilename,\n} from \"@skaile/workspaces/core\";\nimport { computeDeterministicHash, discoverAssetsInTree } from \"@skaile/workspaces/discovery\";\nimport { getStoreManifestsDir, writeCuratedManifest } from \"@skaile/workspaces/library\";\nimport type { Command } from \"commander\";\nimport { logErr, logInfo, logOk, logWarn, S } from \"../helpers.ts\";\nimport { createFullRegistry } from \"../open-registry.ts\";\nimport {\n  ensureClone,\n  normalizeSourceUrl,\n  readProjectSources,\n  sourceClonePath,\n  sourceMatchesKey,\n} from \"./source.ts\";\n\nconst NOT_WIRED_MSG =\n  \"`skaile source manifest *` is scaffolded but not yet wired. \" +\n  \"Server-side endpoint (`POST /sources/<id>/manifest`) lands in a follow-up PR.\";\n\nfunction notWired(verb: string): never {\n  logErr(`${NOT_WIRED_MSG} (verb: source manifest ${verb})`);\n  process.exit(2);\n}\n\n/**\n * Resolve a `source manifest` argument into a `{ url, slug, dest }` triple.\n *\n * Resolution order:\n *   1. A key matching an already-registered project source (stored URL, cache\n *      key, or short slug).\n *   2. A collision-free **store slug** (`<host>__<owner>__<repo>`) whose\n *      manifest already exists at `~/.skaile/store/manifests/<arg>.yaml`. This\n *      MUST be tried before bare-name expansion: a bare name like `cli` would\n *      otherwise expand (via `normalizeSourceUrl`) to the skaile-ai org and a\n *      DIFFERENT slug than the one `init` wrote (e.g. `larksuite`). The slug is\n *      the exact identifier `init`'s next-step hint prints back.\n *   3. Otherwise a git URL / `owner/repo` / bare name via `normalizeSourceUrl`.\n *\n * The clone dir is the same URL-keyed cache `source add` uses.\n */\nexport function resolveSourceArg(\n  arg: string,\n  projectDir: string,\n): { url: string; slug: string; dest: string; manifestFile: string } {\n  const root = findWorkspaceRoot(projectDir);\n  const registered: SourceEntry[] = root\n    ? readProjectSources(path.join(root, workspaceConfigFilename()))\n    : [];\n  const match = registered.find((e) => sourceMatchesKey(e, arg));\n  const bySlug = !match ? resolveByStoreSlug(arg) : undefined;\n  const url = match ? match.url : (bySlug?.url ?? normalizeSourceUrl(arg));\n  const slug = sourceShortName(url); // human-facing label\n  const dest = sourceClonePath(sourceCacheKey(url));\n  return { url, slug, dest, manifestFile: bySlug?.manifestFile ?? storeManifestPath(url) };\n}\n\n/**\n * When `arg` is a bare store slug (`<host>__<owner>__<repo>`) whose curated\n * manifest already exists on disk, recover the source URL from the slug and\n * point at that manifest file directly. Returns `undefined` when the arg isn't\n * a slug or has no manifest yet (fall back to URL normalization).\n */\nfunction resolveByStoreSlug(arg: string): { url: string; manifestFile: string } | undefined {\n  // A slug is our own encoding — no path/URL sigils, at least the `<host>__…`\n  // separator. Anything URL/owner-repo shaped is not a slug.\n  if (!/^[\\w.-]+__[\\w.-]+/.test(arg) || /[/:\\\\]/.test(arg)) return undefined;\n  const manifestFile = path.join(getStoreManifestsDir(), `${arg}.yaml`);\n  if (!existsSync(manifestFile)) return undefined;\n  // `<host>__<owner>__<repo>` → `https://<host>/<owner>/<repo>` — good enough to\n  // key the clone dir + re-derive the same slug; the manifest file is what edit\n  // actually opens.\n  const [host, owner, repo] = arg.split(\"__\");\n  const url = host && owner && repo ? `https://${host}/${owner}/${repo}` : arg;\n  return { url, manifestFile };\n}\n\n/**\n * Absolute path to a source's curated store manifest. Keyed by the\n * collision-free {@link storeManifestSlug} (`<host>__<owner>__<repo>`) so\n * `orgA/cli` and `orgB/cli` don't share `cli.yaml`.\n */\nfunction storeManifestPath(url: string): string {\n  return path.join(getStoreManifestsDir(), `${storeManifestSlug(url)}.yaml`);\n}\n\n/**\n * Directory-name segments that mark a test-fixture tree. `init`/`rebuild` drop\n * any asset whose repo-relative root contains one of these as an exact path\n * SEGMENT. Repos routinely ship fixture \"skills\" under such dirs (e.g.\n * `scripts/skill-format-check/tests`, `internal/qualitygate/skillscan/testdata/skills/lark-demo`)\n * that are not real, publishable assets.\n */\nconst TEST_FIXTURE_SEGMENTS = new Set([\n  \"tests\",\n  \"test\",\n  \"__tests__\",\n  \"testdata\",\n  \"fixtures\",\n  \"__fixtures__\",\n]);\n\n/**\n * True when an asset's repo-relative `root` sits under a test-fixture directory\n * (see {@link TEST_FIXTURE_SEGMENTS}). Conservative, not repo-specific — finer\n * curation (keeping a genuine fixture asset) stays the user's job via `edit`.\n * `init`/`rebuild`-path only; the general discovery walk (`source add`) is\n * untouched.\n */\nfunction isTestFixtureAsset(relativePath: string): boolean {\n  const segments = relativePath.replace(/\\\\/g, \"/\").split(\"/\");\n  return segments.some((s) => TEST_FIXTURE_SEGMENTS.has(s));\n}\n\n/**\n * `source manifest init <src>` — clone (if needed), run discovery, and write a\n * curated `skaile.manifest.yaml` to `~/.skaile/store/manifests/<slug>.yaml`.\n */\nasync function runInit(\n  arg: string,\n  opts: { projectDir: string; publisher?: string; dev?: boolean; force?: boolean },\n): Promise<void> {\n  const projectDir = path.resolve(opts.projectDir);\n  const { url, dest, manifestFile: target } = resolveSourceArg(arg, projectDir);\n\n  if (existsSync(target) && !opts.force) {\n    logWarn(\n      `A curated manifest already exists at ${S.dim(target)}. ` +\n        \"Edit it with `skaile source manifest edit`, refresh it after an upstream \" +\n        \"change with `skaile source manifest rebuild`, or pass --force to regenerate.\",\n    );\n    return;\n  }\n\n  const entry: SourceEntry = { url };\n  ensureClone(entry);\n\n  const { assets, errors } = discoverCuratableAssets(dest, opts.dev ?? false);\n\n  const publisher = opts.publisher ?? resolveSourcePublisher(dest) ?? sourceShortName(url);\n\n  const written = writeCuratedManifest({\n    manifestFile: target,\n    publisher,\n    assets,\n    force: opts.force,\n    // Init: every asset inherits the top-level repo `publisher`. Do NOT stamp a\n    // per-asset publisher — glob discovery here runs without the resolved\n    // publisher, so each DiscoveredAsset.publisher is only the clone directory\n    // name, which would clobber the intended org/`--publisher` default with\n    // junk per-asset overrides.\n    inheritPublisher: true,\n  });\n\n  if (!written.wrote) {\n    logWarn(\n      `Curated manifest already exists at ${S.dim(target)} — not overwritten. ` +\n        \"Pass --force to regenerate.\",\n    );\n    return;\n  }\n\n  logOk(`Wrote curated manifest with ${written.assetCount} assets to ${S.dim(target)}.`);\n  // Echo the EXACT <src> the user passed so the printed commands actually run.\n  // A bare short name would mis-resolve through `normalizeSourceUrl` (→ the\n  // skaile-ai org, wrong slug); the original arg is what `resolveSourceArg`\n  // maps back to this same manifest.\n  logInfo(\n    `Edit it with \\`skaile source manifest edit ${arg}\\`, then ` +\n      `\\`skaile source add ${arg}\\` to consume it.`,\n  );\n  if (errors.length > 0) {\n    logWarn(`${errors.length} discovery error(s) — inspect the manifest before consuming.`);\n  }\n}\n\n/**\n * Run discovery over a clone and drop the test-fixture assets (see\n * {@link isTestFixtureAsset}). Shared by `init` and `rebuild` so both paths\n * produce an identical inventory from the same tree.\n */\nfunction discoverCuratableAssets(\n  dest: string,\n  includeDev: boolean,\n): { assets: ReturnType<typeof discoverAssetsInTree>[\"assets\"]; errors: string[] } {\n  const result = discoverAssetsInTree(dest, {\n    registry: createFullRegistry(),\n    includeDev,\n  });\n  const assets = result.assets.filter((a) => !isTestFixtureAsset(a.relativePath));\n  return { assets, errors: result.errors.map((e) => `${e.path}: ${e.error}`) };\n}\n\n/**\n * Best-effort `git pull --ff-only` on an existing clone. Never throws: a pull\n * failure (offline, diverged, detached) is warned and the caller continues with\n * the clone as-is.\n */\nfunction pullCloneFfOnly(dest: string): void {\n  const res = spawnSync(\"git\", [\"-C\", dest, \"pull\", \"--ff-only\"], { stdio: \"pipe\" });\n  if (res.status !== 0) {\n    logWarn(\n      \"git pull --ff-only failed — continuing with the existing clone \" +\n        \"(it may be behind upstream).\",\n    );\n  }\n}\n\n/**\n * Repo-relative `root` path for a manifest asset entry — the merge match key\n * between an existing curated entry and a freshly-discovered asset. `root:`\n * entries use their declared path; a `files:`-only entry (rare for a curated\n * sidecar) falls back to the entry's dirname of the first file, else the name.\n */\nfunction entryRootKey(entry: AssetEntry): string {\n  if (entry.root) return entry.root.replace(/\\\\/g, \"/\").replace(/\\/+$/, \"\");\n  const files = entry.files;\n  if (files && files.length > 0) {\n    const first = typeof files[0] === \"string\" ? files[0] : files[0].path;\n    const dir = path.posix.dirname(first.replace(/\\\\/g, \"/\"));\n    return dir === \".\" ? entry.name : dir;\n  }\n  return entry.name;\n}\n\n/** Repo-relative `root` path a discovered asset maps to (matches init's writer). */\nfunction discoveredRootKey(relativePath: string): string {\n  const dir = path.posix.dirname(relativePath.replace(/\\\\/g, \"/\"));\n  return dir === \".\" ? path.posix.basename(relativePath.replace(/\\\\/g, \"/\")) : dir;\n}\n\n/** Human ref for reporting: `kind:name`. */\nfunction entryRef(entry: AssetEntry): string {\n  return `${entry.kind}:${entry.name}`;\n}\n\n/**\n * `source manifest rebuild <src>` — refresh a curated manifest after the\n * upstream repo changed. MERGE is the default (curation is sacred); `--overwrite`\n * re-scans from scratch with `init --force` semantics.\n *\n * Merge algorithm (match by repo-relative `root` path):\n *   - Existing entries whose root is STILL discovered → KEPT verbatim (all\n *     hand-edits preserved).\n *   - Existing entries whose root is GONE upstream → DROPPED (reported).\n *   - Freshly-discovered assets not already in the manifest → NOT auto-added,\n *     only REPORTED (a curated foreign sidecar must not silently absorb new\n *     upstream skills). An asset the curator deliberately dropped stays dropped\n *     because it is neither in the existing manifest nor re-added here.\n */\nasync function runRebuild(\n  arg: string,\n  opts: { projectDir: string; publisher?: string; dev?: boolean; overwrite?: boolean },\n): Promise<void> {\n  const projectDir = path.resolve(opts.projectDir);\n  const { url, dest, slug, manifestFile: target } = resolveSourceArg(arg, projectDir);\n\n  if (!existsSync(target)) {\n    logErr(\n      `No curated manifest for \"${slug}\" at ${S.dim(target)} — ` +\n        \"run `skaile source manifest init` first.\",\n    );\n    process.exit(1);\n  }\n\n  // Update the clone: clone if absent, else pull --ff-only (best-effort).\n  const entry: SourceEntry = { url };\n  const cloned = ensureClone(entry);\n  if (!cloned) pullCloneFfOnly(dest);\n\n  const { assets: freshAssets, errors } = discoverCuratableAssets(dest, opts.dev ?? false);\n\n  if (opts.overwrite) {\n    logWarn(\n      \"--overwrite: replacing the curated manifest with a full fresh inventory. \" +\n        \"All hand-curation (dropped assets, per-asset edits) is discarded.\",\n    );\n    const publisher = opts.publisher ?? resolveSourcePublisher(dest) ?? sourceShortName(url);\n    const written = writeCuratedManifest({\n      manifestFile: target,\n      publisher,\n      assets: freshAssets,\n      force: true,\n      inheritPublisher: true,\n    });\n    logOk(\n      `Rebuilt curated manifest with ${written.assetCount} assets to ${S.dim(target)} (overwrite).`,\n    );\n    if (errors.length > 0) {\n      logWarn(`${errors.length} discovery error(s) — inspect the manifest before consuming.`);\n    }\n    return;\n  }\n\n  // MERGE (default). `--publisher` only applies to the full re-derive path.\n  if (opts.publisher) {\n    logWarn(\n      \"--publisher is ignored in merge mode (the curated publisher is preserved). \" +\n        \"Use --overwrite to re-derive the publisher from a full re-scan.\",\n    );\n  }\n\n  // Read the existing curated manifest and keep it as the base.\n  const { manifest: existing } = decodeSkaileManifest(readFileSync(target, \"utf-8\"));\n  const existingEntries = existing.assets ?? [];\n\n  // Index fresh discovery by repo-relative root path.\n  const freshByRoot = new Map<string, (typeof freshAssets)[number]>();\n  for (const a of freshAssets) freshByRoot.set(discoveredRootKey(a.relativePath), a);\n\n  const kept: AssetEntry[] = [];\n  const dropped: string[] = [];\n  for (const e of existingEntries) {\n    if (freshByRoot.has(entryRootKey(e))) kept.push(e);\n    else dropped.push(entryRef(e));\n  }\n\n  // Fresh assets not already curated → report as available, do NOT add.\n  const existingRoots = new Set(existingEntries.map(entryRootKey));\n  const newlyAvailable: string[] = [];\n  for (const a of freshAssets) {\n    if (!existingRoots.has(discoveredRootKey(a.relativePath))) {\n      newlyAvailable.push(`${a.kind}:${a.name}`);\n    }\n  }\n\n  const changed = dropped.length > 0;\n  if (dropped.length > 0) {\n    logWarn(`removed (gone upstream): ${dropped.sort().join(\", \")}`);\n  }\n  if (newlyAvailable.length > 0) {\n    logInfo(\n      `${newlyAvailable.length} new upstream asset(s) available (not added): ` +\n        `${newlyAvailable.sort().join(\", \")} — add with \\`skaile source manifest edit ${arg}\\` if wanted`,\n    );\n  }\n\n  if (!changed) {\n    logOk(\"already up to date\");\n    if (errors.length > 0) {\n      logWarn(`${errors.length} discovery error(s) — inspect the source before re-consuming.`);\n    }\n    return;\n  }\n\n  const merged: SkPublishManifest = { ...existing, assets: kept };\n  writeFileSync(target, encodeSkaileManifest(merged), \"utf-8\");\n  logOk(\n    `Rebuilt curated manifest: kept ${kept.length}, dropped ${dropped.length} → ${S.dim(target)}.`,\n  );\n  if (errors.length > 0) {\n    logWarn(`${errors.length} discovery error(s) — inspect the source before re-consuming.`);\n  }\n}\n\n/**\n * `source manifest verify <src>` — READ-ONLY integrity check of a curated\n * manifest against its clone. Writes nothing. Exit 0 when no errors; with\n * `--strict`, any warning also forces a nonzero exit.\n *\n * Per-asset checks:\n *   - `root`/`files` paths still exist upstream (missing → error).\n *   - A declared `sha256` recomputes to the same deterministic hash (mismatch → error).\n *   - Schema decode diagnostics map to errors/warnings.\n *   - Dependency refs parse via `parseAssetRef` (malformed → warning).\n */\nasync function runVerify(\n  arg: string,\n  opts: { projectDir: string; strict?: boolean },\n): Promise<void> {\n  const projectDir = path.resolve(opts.projectDir);\n  const { url, dest, slug, manifestFile: target } = resolveSourceArg(arg, projectDir);\n\n  if (!existsSync(target)) {\n    logErr(\n      `No curated manifest for \"${slug}\" at ${S.dim(target)} — ` +\n        \"run `skaile source manifest init` first.\",\n    );\n    process.exit(1);\n  }\n\n  // Ensure a clone exists to verify paths/hashes against (best-effort; no pull).\n  ensureClone({ url });\n\n  const text = readFileSync(target, \"utf-8\");\n  const { manifest, diagnostics } = decodeSkaileManifest(text);\n\n  const errors: string[] = [];\n  const warnings: string[] = [];\n\n  // Schema diagnostics from the decoder.\n  for (const d of diagnostics) {\n    const line = `${d.code}: ${d.message}`;\n    if (d.severity === \"error\") errors.push(line);\n    else warnings.push(line);\n  }\n\n  const assets = manifest.assets ?? [];\n  for (const entry of assets) {\n    const ref = entryRef(entry);\n\n    // Path existence: `root` dir and/or each `files[]` path.\n    const relPaths: string[] = [];\n    if (entry.root) relPaths.push(entry.root);\n    if (entry.files) {\n      for (const f of entry.files) relPaths.push(typeof f === \"string\" ? f : f.path);\n    }\n    if (relPaths.length === 0) relPaths.push(entry.name);\n    for (const rel of relPaths) {\n      if (!existsSync(path.join(dest, rel))) {\n        errors.push(`${ref}: path not found upstream: ${rel}`);\n      }\n    }\n\n    // Declared sha256 → recompute + compare, but ONLY for granular `files:`\n    // entries. Discovery (`discover-manifest.ts`) anchors a `files:`-only entry\n    // at the REPO ROOT and hashes the files VERBATIM as repo-relative strings\n    // (the path is folded into the digest), so verify must hash the same way:\n    // `assetRoot = dest`, files kept repo-relative — NOT rebased onto the root.\n    // A `root:` entry cannot be verified this way (discovery hashes only the\n    // per-kind filtered set, not the whole-dir walk), and the writer never emits\n    // sha256 for `root:` entries, so skip the hash check for them.\n    if (entry.sha256) {\n      if (entry.files && entry.files.length > 0) {\n        const hashFiles = entry.files.map((f) =>\n          (typeof f === \"string\" ? f : f.path).replace(/\\\\/g, \"/\"),\n        );\n        const actual = computeDeterministicHash(dest, hashFiles);\n        if (actual !== entry.sha256) {\n          errors.push(\n            `${ref}: sha256 mismatch (declared ${entry.sha256.slice(0, 12)}…, got ${actual.slice(0, 12)}…)`,\n          );\n        }\n      } else {\n        warnings.push(\n          `${ref}: declared sha256 on a root:-mode entry is not verifiable (discovery hashes only the per-kind filtered set) — skipped`,\n        );\n      }\n    }\n\n    // Dependency refs parse.\n    for (const dep of entry.dependencies ?? []) {\n      try {\n        parseAssetRef(dep);\n      } catch (err) {\n        warnings.push(\n          `${ref}: malformed dependency \"${dep}\": ${err instanceof Error ? err.message : String(err)}`,\n        );\n      }\n    }\n  }\n\n  for (const w of warnings) logWarn(w);\n  for (const e of errors) logErr(e);\n\n  if (errors.length === 0) {\n    logOk(`verified ${assets.length} asset(s).`);\n  } else {\n    logErr(`${errors.length} issue(s).`);\n  }\n\n  const failStrict = opts.strict && warnings.length > 0;\n  if (errors.length > 0 || failStrict) process.exit(1);\n}\n\n/**\n * Split a `$VISUAL`/`$EDITOR` value into `{ command, args }` and append the file\n * as the final arg. The env value is a full command line, not a bare binary —\n * `EDITOR=\"code --wait\"` must spawn `code` with `[\"--wait\", <file>]`, and\n * `EDITOR=code` (which returns before save) is the user's problem, not ours.\n * A whitespace split covers the common editors (`code --wait`, `code -w`,\n * `subl -w`, `vi`); paths with embedded spaces are not supported (rare for an\n * editor binary and out of scope). Falls back to `vi` when unset/empty.\n *\n * @docLink cli/commands/source#manifest-edit\n */\nexport function resolveEditorCommand(\n  editorEnv: string | undefined,\n  target: string,\n): { command: string; args: string[] } {\n  const parts = (editorEnv ?? \"\").trim().split(/\\s+/).filter(Boolean);\n  const [command, ...rest] = parts.length > 0 ? parts : [\"vi\"];\n  return { command: command as string, args: [...rest, target] };\n}\n\n/** Minimal spawn contract runEdit needs — lets tests inject a fake. */\ntype SpawnLike = (\n  command: string,\n  args: string[],\n  opts: { stdio: \"inherit\" },\n) => { status: number | null };\n\n/**\n * `source manifest edit <src>` — open the curated store manifest in `$EDITOR`\n * and re-validate on save. Warnings are surfaced but never hard-fail.\n *\n * `spawn` is injectable so tests can assert the argv without launching a real\n * editor; production passes the default `spawnSync`.\n */\nexport function runEdit(\n  arg: string,\n  opts: { projectDir: string },\n  spawn: SpawnLike = spawnSync as unknown as SpawnLike,\n): void {\n  const projectDir = path.resolve(opts.projectDir);\n  const { slug, manifestFile: target } = resolveSourceArg(arg, projectDir);\n\n  if (!existsSync(target)) {\n    logErr(\n      `No curated manifest for \"${slug}\" at ${target}. ` +\n        \"Run `skaile source manifest init` first.\",\n    );\n    process.exit(1);\n  }\n\n  const { command, args } = resolveEditorCommand(process.env.VISUAL || process.env.EDITOR, target);\n  const res = spawn(command, args, { stdio: \"inherit\" });\n  if (res.status !== 0 && res.status !== null) {\n    logErr(`Editor exited with status ${res.status}.`);\n    process.exit(1);\n  }\n\n  // Re-validate the saved file; surface diagnostics as warnings, don't hard-fail.\n  const { diagnostics } = decodeSkaileManifest(readFileSync(target, \"utf-8\"));\n  const errors = diagnostics.filter((d) => d.severity === \"error\");\n  const warnings = diagnostics.filter((d) => d.severity !== \"error\");\n  if (errors.length > 0) {\n    for (const d of errors) logErr(`${d.code}: ${d.message}`);\n    logWarn(\"Manifest has errors — fix them before `skaile source add` will consume it.\");\n  } else if (warnings.length > 0) {\n    for (const d of warnings) logWarn(`${d.code}: ${d.message}`);\n    logOk(\"Saved (with warnings).\");\n  } else {\n    logOk(\"Saved.\");\n  }\n}\n\n/**\n * Append the `manifest` sub-tree to a `source` command.\n *\n * Called from `makeSourceCommand()` in `source.ts`.\n */\nexport function addSourceManifestCommands(src: Command): void {\n  // enablePositionalOptions so options on the leaf verb (`source manifest init\n  // --publisher …`) route to that verb instead of being rejected by `manifest`.\n  const manifest = src\n    .command(\"manifest\")\n    .description(\"Curated manifest lifecycle for a source\")\n    .enablePositionalOptions();\n\n  manifest\n    .command(\"init <src>\")\n    .description(\"Generate a curated manifest for a source (stored in the local store catalog)\")\n    .option(\"-C, --project-dir <dir>\", \"Project directory\", process.cwd())\n    .option(\"--publisher <name>\", \"Override the publisher (default: source's GitHub org)\")\n    .option(\"--dev\", \"Include assets under the source's dev_paths\", false)\n    .option(\"--force\", \"Overwrite an existing curated manifest\", false)\n    .action((arg, opts) => runInit(arg, opts));\n\n  manifest\n    .command(\"edit <src>\")\n    .description(\"Open the curated manifest in $EDITOR and re-validate on save\")\n    .option(\"-C, --project-dir <dir>\", \"Project directory\", process.cwd())\n    .action((arg, opts) => runEdit(arg, opts));\n\n  manifest\n    .command(\"rebuild <src>\")\n    .description(\n      \"Refresh a curated manifest after an upstream change (merge by default: \" +\n        \"keeps curation, drops assets gone upstream, reports new ones without adding)\",\n    )\n    .option(\"-C, --project-dir <dir>\", \"Project directory\", process.cwd())\n    .option(\"--publisher <name>\", \"Override the publisher (--overwrite only)\")\n    .option(\"--dev\", \"Include assets under the source's dev_paths\", false)\n    .option(\"--overwrite\", \"Discard curation and re-scan the full inventory\", false)\n    .action((arg, opts) => runRebuild(arg, opts));\n\n  manifest\n    .command(\"verify <src>\")\n    .description(\"Verify hashes, deps, and schema (read-only)\")\n    .option(\"-C, --project-dir <dir>\", \"Project directory\", process.cwd())\n    .option(\"--strict\", \"Fail on advisory checks (warnings force a nonzero exit)\", false)\n    .action((arg, opts) => runVerify(arg, opts));\n\n  manifest\n    .command(\"publish <src>\")\n    .description(\"Push the curated sidecar manifest and publish it to the store\")\n    .option(\"-C, --project-dir <dir>\", \"Project directory\", process.cwd())\n    .option(\"--as <namespace>\", \"Publisher namespace (default: your store username)\")\n    .option(\"--sidecar-repo <url>\", \"Public GitHub repo you own to hold the curated manifest\")\n    .option(\"--ref <gitref>\", \"Foreign source ref to ingest (branch/sha; default: main)\")\n    .option(\"--dry-run\", \"Print the publish plan without pushing or calling the store\", false)\n    .action(async (arg, opts) => {\n      const { runPublish } = await import(\"./source-manifest-publish.ts\");\n      await runPublish(arg, opts);\n    });\n\n  manifest\n    .command(\"propose <src>\")\n    .description(\"Open a PR to upstream with the sidecar manifest\")\n    .action(() => notWired(\"propose\"));\n\n  manifest\n    .command(\"yank <src>\")\n    .description(\"Retract the source's published assets from the store\")\n    .option(\"-C, --project-dir <dir>\", \"Project directory\", process.cwd())\n    .option(\"--asset <ref>\", \"Yank only the asset matching this ref/name\")\n    .action(async (arg, opts) => {\n      const { runYank } = await import(\"./source-manifest-publish.ts\");\n      await runYank(arg, opts);\n    });\n}\n","/**\n * `skaile source …` — manage github sources for the current project.\n *\n * A *source* is a third-party github repo of AI assets. The project's\n * `skaile.yaml` `sources:` array is the source of truth for which sources\n * this project uses. The clone itself lives at\n * `~/.skaile/cache/sources/<host>/<owner>/<repo>/` (machine-global cache, shared\n * across projects, URL-keyed so cross-org repos never collide), and the manifest is\n * mirrored into `~/.skaile/index.db` (machine-global manifest cache).\n *\n * @docLink cli/commands/source\n */\n\nimport { spawnSync } from \"node:child_process\";\nimport { existsSync, mkdirSync, renameSync, rmSync } from \"node:fs\";\nimport * as path from \"node:path\";\nimport {\n  findWorkspaceRoot,\n  getGlobalCacheDir,\n  type SourceEntry,\n  sourceCacheKey,\n  sourceShortName,\n  storeManifestSlug,\n  WorkspaceYamlEditor,\n  workspaceConfigFilename,\n} from \"@skaile/workspaces/core\";\nimport { getStoreManifestsDir, LocalCatalogSource } from \"@skaile/workspaces/library\";\nimport * as p from \"@clack/prompts\";\nimport { Command } from \"commander\";\nimport { logErr, logInfo, logOk, logWarn, S } from \"../helpers.ts\";\nimport { openLibraryManager } from \"../open-library.ts\";\nimport { createFullRegistry } from \"../open-registry.ts\";\nimport { addSourceManifestCommands } from \"./source-manifest.ts\";\n\n/**\n * Clone dir for one source cache key (`<host>/<owner>/<repo>`). Exported for the\n * cache-path regression test. Callers pass `sourceCacheKey(url)`.\n */\nexport function sourceClonePath(key: string): string {\n  return path.join(getGlobalCacheDir(), key);\n}\n\nconst SKAILE_MANIFEST_FILENAME = \"skaile.manifest.yaml\";\nconst LEGACY_SOURCE_CONFIG_FILENAME = \".skaile-source.yaml\";\n\n/**\n * Whether a manifest-cache refresh actually failed to index something. Keyed on\n * `errors`, NOT on `assetsUpdated < assetsFound`: the discovery walk counts\n * presets (and other intentionally-not-cataloged kinds) toward `assetsFound` but\n * never upserts them, so a source shipping a `.preset.yaml` would otherwise read\n * as a partial failure — false `! N asset(s) failed to index` + exit 1 — with\n * zero real errors.\n */\nexport function indexingHadFailures(result: { errors: string[] }): boolean {\n  return result.errors.length > 0;\n}\n\n/**\n * A clone that ships only the legacy `.skaile-source.yaml` (no\n * `skaile.manifest.yaml`) has its declared `publisher_default` silently ignored\n * — discovery only reads `skaile.manifest.yaml`, so publisher resolution falls\n * back to the first path segment. Surface a hint so the author can fix it.\n */\nexport function legacySourceConfigHint(dest: string): string | undefined {\n  const hasLegacy = existsSync(path.join(dest, LEGACY_SOURCE_CONFIG_FILENAME));\n  const hasManifest = existsSync(path.join(dest, SKAILE_MANIFEST_FILENAME));\n  if (hasLegacy && !hasManifest) {\n    return (\n      `This source ships a legacy ${LEGACY_SOURCE_CONFIG_FILENAME} but no ` +\n      `${SKAILE_MANIFEST_FILENAME}; its declared publisher is ignored and assets ` +\n      `are published under their first path segment. Add a ${SKAILE_MANIFEST_FILENAME} ` +\n      `(\\`skaile source manifest init\\`) to set the publisher and asset inventory.`\n    );\n  }\n  return undefined;\n}\n\n/**\n * Normalize a `source add` argument into a clonable git URL. Full URLs and\n * scp-style (`git@host:…`) specs pass through unchanged; an `owner/repo`\n * shorthand and a bare repo name expand to GitHub over SSH — a bare name\n * defaults to the `skaile-ai` org (`git@github.com:skaile-ai/<name>.git`).\n */\nexport function normalizeSourceUrl(input: string): string {\n  const s = input.trim();\n  if (/^(?:https?|git|ssh|file):\\/\\//.test(s) || /^git@/.test(s)) return s;\n  const repo = s.replace(/\\.git$/, \"\");\n  if (/^[\\w.-]+\\/[\\w.-]+$/.test(repo)) return `git@github.com:${repo}.git`;\n  if (/^[\\w.-]+$/.test(repo)) return `git@github.com:skaile-ai/${repo}.git`;\n  return s;\n}\n\n/**\n * Match a stored source against a user-supplied key. Mirrors the shortcut\n * expansion `source add` applies (`normalizeSourceUrl`) so any form that `add`\n * accepted — bare name, `owner/repo`, `.git`-suffixed, full URL — also resolves\n * at `sync`/`show`/`remove` time, not just the raw stored URL or derived slug.\n */\nexport function sourceMatchesKey(entry: SourceEntry, key: string): boolean {\n  if (entry.url === key) return true;\n  if (sourceCacheKey(entry.url) === key || sourceShortName(entry.url) === key) return true;\n  return entry.url === normalizeSourceUrl(key);\n}\n\n/**\n * Find an already-registered source that maps to the same cache key as `url`\n * but is stored under a *different* URL string (e.g. the `.git`-suffixed or\n * scp form of the same remote). Two such entries would fight over one clone\n * dir, so `source add` rejects the ambiguity. Returns the colliding entry, or\n * `undefined` when the URL is unique or only matches an exact-string duplicate\n * (which `setSource` updates in place).\n */\nexport function findCacheKeyCollision(\n  sources: SourceEntry[],\n  url: string,\n): SourceEntry | undefined {\n  const key = sourceCacheKey(url);\n  return sources.find((s) => s.url !== url && sourceCacheKey(s.url) === key);\n}\n\nfunction requireProjectYamlPath(): string {\n  const root = findWorkspaceRoot(process.cwd());\n  if (!root) {\n    logErr(\n      \"No skaile.yaml found in the current directory or any parent. \" + \"Run `skaile init` first.\",\n    );\n    process.exit(1);\n  }\n  return path.join(root, workspaceConfigFilename());\n}\n\nexport function readProjectSources(yamlPath: string): SourceEntry[] {\n  if (!existsSync(yamlPath)) return [];\n  try {\n    return WorkspaceYamlEditor.load(yamlPath).getSources();\n  } catch (err) {\n    logErr(`Could not read ${yamlPath}: ${err instanceof Error ? err.message : String(err)}`);\n    process.exit(1);\n  }\n}\n\n/**\n * Clone the source if its clone directory does not yet exist. When `force` is\n * set, the existing clone is replaced by a fresh checkout. Returns true when a\n * clone happened. The cache slug is derived from the URL.\n *\n * A `--force` re-clone moves the old clone aside first and only deletes it once\n * the fresh clone succeeds — so a failed re-clone restores the previous clone\n * rather than leaving the source registered with no cache behind it.\n */\nexport function ensureClone(entry: SourceEntry, opts: { force?: boolean } = {}): boolean {\n  const dest = sourceClonePath(sourceCacheKey(entry.url));\n  let backup: string | undefined;\n  if (existsSync(dest)) {\n    if (!opts.force) return false;\n    backup = `${dest}.bak`;\n    rmSync(backup, { recursive: true, force: true });\n    renameSync(dest, backup);\n  }\n  mkdirSync(path.dirname(dest), { recursive: true });\n  const args = [\"clone\", entry.url, dest];\n  // `pin` may be a branch/tag; pass it as the clone branch when present.\n  if (entry.pin) args.splice(1, 0, \"--branch\", entry.pin);\n  const clone = spawnSync(\"git\", args, { stdio: \"inherit\" });\n  if (clone.status !== 0) {\n    if (backup) {\n      rmSync(dest, { recursive: true, force: true });\n      renameSync(backup, dest);\n    }\n    logErr(`git clone failed for ${entry.url}`);\n    process.exit(1);\n  }\n  if (backup) rmSync(backup, { recursive: true, force: true });\n  return true;\n}\n\n/**\n * Refresh the machine-global manifest cache for `entry` by running discovery\n * and upserting AssetDefinitions into `~/.skaile/index.db`. Creates the\n * libraries-table cache row if missing (ownership: reader = cache state).\n */\nasync function refreshManifestCache(\n  entry: SourceEntry,\n  includeDev = false,\n): Promise<{\n  assetsFound: number;\n  assetsUpdated: number;\n  errors: string[];\n  advisories: string[];\n}> {\n  const { manager, library, close } = await openLibraryManager();\n  try {\n    const name = sourceShortName(entry.url);\n    const dest = sourceClonePath(sourceCacheKey(entry.url));\n    const existing = (await manager.listLibraries()).find((l) => l.name === name);\n    const lib =\n      existing ??\n      (await manager.addLibrary({\n        name,\n        path: dest,\n        backend: \"git\",\n        backendConfig: { url: entry.url, branch: entry.pin ?? \"main\", authHint: \"ssh\" },\n        ownership: \"reader\",\n      }));\n    // Curated overlay: a `skaile source manifest init` writes a curated\n    // manifest to the local store at `~/.skaile/store/manifests/<slug>.yaml`.\n    // When present, route discovery through it so the curated publisher +\n    // asset inventory win over the upstream repo's raw glob discovery. Keyed by\n    // the collision-free `storeManifestSlug` (matches the init writer + resolver).\n    const overlayFile = path.join(getStoreManifestsDir(), `${storeManifestSlug(entry.url)}.yaml`);\n    const catalog = new LocalCatalogSource(library, lib.id, dest, createFullRegistry(), {\n      sidecarManifestFile: existsSync(overlayFile) ? overlayFile : undefined,\n    });\n    const result = await catalog.sync({ includeDev });\n    await library.syncSource(lib.id);\n    return result;\n  } finally {\n    close();\n  }\n}\n\n/**\n * Auto-sync hook for `skaile search` on an unsynced workspace. Clones/pulls and\n * re-indexes every source declared in the project's `skaile.yaml`, then returns\n * whether the manifest cache may have changed (caller re-queries on `true`).\n *\n * Unlike `source sync`, this degrades gracefully — a clone/pull/index failure is\n * logged and skipped (never `process.exit`) so a failed auto-sync falls back to\n * the \"run sync first\" hint rather than killing the search. Returns `false`\n * (silently, no announce) when no sources are declared. Callers must guard\n * air-gapped mode themselves — this always touches the network.\n */\nexport async function autoSyncForSearch(projectDir: string): Promise<boolean> {\n  const root = findWorkspaceRoot(projectDir);\n  if (!root) return false;\n  if (readProjectSources(path.join(root, workspaceConfigFilename())).length === 0) return false;\n\n  logInfo(\"sources not synced — syncing now…\");\n  const { synced } = await syncProjectSources(projectDir);\n  return synced > 0;\n}\n\n/**\n * Clone-or-pull every source declared in the project's `skaile.yaml`, then\n * refresh its manifest cache. Shared by `autoSyncForSearch` and `skaile update`\n * (the latter offers it behind a confirm) so a re-deploy can see upstream\n * commits — `update` re-deploys against the local source cache, which is\n * otherwise frozen at the commit captured when the source was first cloned.\n *\n * Graceful by design: a clone/pull/index failure for one source is logged and\n * skipped (never `process.exit`), so a single bad remote can't abort the run.\n * Existing clones are advanced with `git pull --ff-only` (no `--depth=1`, unlike\n * the installer's `pullRepo`, so it fast-forwards instead of tripping the\n * shallow-divergence path). Returns a count summary for the caller to report.\n */\nexport async function syncProjectSources(\n  projectDir: string,\n  opts: { dev?: boolean } = {},\n): Promise<{ total: number; synced: number; failed: number }> {\n  const root = findWorkspaceRoot(projectDir) ?? projectDir;\n  const sources = readProjectSources(path.join(root, workspaceConfigFilename()));\n  let synced = 0;\n  let failed = 0;\n  for (const entry of sources) {\n    const slug = sourceShortName(entry.url);\n    const dest = sourceClonePath(sourceCacheKey(entry.url));\n    try {\n      // Quiet git — the sync is a preparatory step; keep progress bars out of\n      // the foreground output (spinner / install result).\n      if (!existsSync(dest)) {\n        mkdirSync(path.dirname(dest), { recursive: true });\n        const args = [\"clone\", entry.url, dest];\n        if (entry.pin) args.splice(1, 0, \"--branch\", entry.pin);\n        const clone = spawnSync(\"git\", args, { stdio: \"ignore\" });\n        if (clone.status !== 0) {\n          logWarn(`${slug}: git clone failed, skipping.`);\n          failed++;\n          continue;\n        }\n      } else {\n        const pull = spawnSync(\"git\", [\"pull\", \"--ff-only\"], { cwd: dest, stdio: \"ignore\" });\n        if (pull.status !== 0) {\n          logWarn(`${slug}: git pull failed, skipping manifest refresh.`);\n          failed++;\n          continue;\n        }\n      }\n      const result = await refreshManifestCache(entry, opts.dev);\n      for (const err of result.errors) logWarn(`${slug}: ${err}`);\n      for (const advisory of result.advisories) logInfo(`${slug}: ${advisory}`);\n      synced++;\n    } catch (err) {\n      logWarn(`${slug}: sync failed — ${err instanceof Error ? err.message : String(err)}`);\n      failed++;\n    }\n  }\n  return { total: sources.length, synced, failed };\n}\n\n/** Remove the libraries-table cache row and (optionally) the clone bytes. */\nasync function dropManifestCache(url: string, purgeClone: boolean): Promise<void> {\n  const name = sourceShortName(url);\n  const { manager, close } = await openLibraryManager();\n  try {\n    const existing = (await manager.listLibraries()).find((l) => l.name === name);\n    if (existing) {\n      await manager.removeLibrary(name, { purge: false });\n    }\n  } finally {\n    close();\n  }\n  if (purgeClone) {\n    const dest = sourceClonePath(sourceCacheKey(url));\n    if (existsSync(dest)) rmSync(dest, { recursive: true, force: true });\n  }\n}\n\nexport function makeSourceCommand(): Command {\n  const cmd = new Command(\"source\").description(\n    \"Manage github sources for the current project (recorded in skaile.yaml)\",\n  );\n\n  // ── source add ──────────────────────────────────────────────────────────\n  cmd\n    .command(\"add <source>\")\n    .description(\n      \"Clone a github repo and register it in this project's skaile.yaml. \" +\n        \"<source> may be a full git URL, an owner/repo shorthand, or a bare \" +\n        \"name (→ git@github.com:skaile-ai/<name>.git).\",\n    )\n    .option(\"--name <slug>\", \"[deprecated] no-op — the source entry stores only the URL\")\n    .option(\"--pin <ref>\", \"Pin a branch, tag, or 40-char SHA\")\n    .option(\"--branch <branch>\", \"[deprecated] alias for --pin\")\n    .option(\"--force\", \"Remove an existing clone and re-clone\", false)\n    .option(\"--dev\", \"Also index dev-only assets under the source's dev_paths\", false)\n    .action(\n      async (\n        source: string,\n        opts: {\n          name?: string;\n          pin?: string;\n          branch?: string;\n          force?: boolean;\n          dev?: boolean;\n        },\n      ) => {\n        const url = normalizeSourceUrl(source);\n        const yamlPath = requireProjectYamlPath();\n\n        // A different URL string that maps to the same cache key (e.g. the\n        // `.git`-suffixed or scp form of an already-registered remote) would\n        // fight over one clone dir. setSource only dedupes exact strings, so\n        // reject the ambiguous collision here instead of silently shadowing.\n        const collision = findCacheKeyCollision(readProjectSources(yamlPath), url);\n        if (collision) {\n          logErr(\n            `\"${url}\" maps to the same cache key (${sourceCacheKey(url)}) as ` +\n              `already-registered \"${collision.url}\". Remove that source first ` +\n              `(skaile source remove) or re-use its exact URL to update it.`,\n          );\n          process.exitCode = 1;\n          return;\n        }\n\n        if (opts.name) {\n          logWarn(\n            \"the --name flag is deprecated; the source entry now stores only the URL \" +\n              \"(the cache slug is derived from it).\",\n          );\n        }\n        const pin = opts.pin ?? opts.branch;\n        const slug = sourceShortName(url);\n        const entry: SourceEntry = { url };\n        if (pin) entry.pin = pin;\n\n        const dest = sourceClonePath(sourceCacheKey(url));\n        const preexisting = existsSync(dest);\n        // Clone/validate the repo BEFORE touching skaile.yaml — a failed clone\n        // (repo not found, bad URL, network error) hard-exits in ensureClone, so\n        // the entry is only ever recorded once the source is known-good.\n        const cloned = ensureClone(entry, { force: opts.force });\n        if (!cloned) {\n          logOk(`Reusing cached clone at ${dest}`);\n        } else if (preexisting) {\n          logOk(`Re-cloned ${url} → ${dest}`);\n        } else {\n          logOk(`Cloned ${url} → ${dest}`);\n        }\n\n        const editor = WorkspaceYamlEditor.load(yamlPath);\n        editor.setSource(entry);\n        editor.save();\n\n        const result = await refreshManifestCache(entry, opts.dev);\n        const failed = indexingHadFailures(result);\n        const indexedMsg = `Indexed ${result.assetsUpdated} of ${result.assetsFound} asset(s) from \"${slug}\".`;\n        if (failed) {\n          logWarn(indexedMsg);\n        } else {\n          logOk(indexedMsg);\n        }\n        for (const err of result.errors) logWarn(err);\n        for (const advisory of result.advisories) logInfo(advisory);\n\n        const legacyHint = legacySourceConfigHint(dest);\n        if (legacyHint) logWarn(legacyHint);\n\n        const where = path.relative(process.cwd(), yamlPath);\n        if (failed) {\n          // The entry IS recorded in skaile.yaml, but indexing did not fully\n          // succeed — don't present it as a clean success.\n          logWarn(\n            `Source \"${slug}\" registered in ${where}, but ${result.errors.length} ` +\n              `asset(s) failed to index (see above). Fix the cause, then re-run ` +\n              `\\`skaile source sync ${slug}\\`.`,\n          );\n          process.exitCode = 1;\n        } else {\n          logOk(`Source \"${slug}\" registered in ${where}.`);\n        }\n      },\n    );\n\n  // ── source list ─────────────────────────────────────────────────────────\n  cmd\n    .command(\"list\")\n    .description(\"List sources registered in this project's skaile.yaml\")\n    .option(\"--json\", \"Output as JSON\")\n    .action(async (opts: { json?: boolean }) => {\n      const yamlPath = requireProjectYamlPath();\n      const sources = readProjectSources(yamlPath);\n      if (opts.json) return console.log(JSON.stringify(sources, null, 2));\n      if (sources.length === 0) {\n        logInfo(\"No sources in skaile.yaml. Run `skaile source add <git-url>` to register one.\");\n        return;\n      }\n      console.log();\n      console.log(S.heading(\"  Sources\"));\n      for (const s of sources) {\n        const slug = sourceShortName(s.url);\n        const cached = existsSync(sourceClonePath(sourceCacheKey(s.url)))\n          ? \"\"\n          : S.warn(\" (not cached)\");\n        console.log(`  ${S.cmd(slug.padEnd(24))}  ${S.dim(s.url)}${cached}`);\n      }\n      console.log(`\\n  ${S.dim(`${sources.length} source(s)`)}\\n`);\n    });\n\n  // ── source show ─────────────────────────────────────────────────────────\n  cmd\n    .command(\"show <name-or-url>\")\n    .description(\"Show details for a source (matched by URL or derived slug)\")\n    .action(async (key: string) => {\n      const yamlPath = requireProjectYamlPath();\n      const entry = readProjectSources(yamlPath).find((s) => sourceMatchesKey(s, key));\n      if (!entry) {\n        logErr(`No source matching \"${key}\" in ${yamlPath}.`);\n        process.exit(1);\n      }\n      const slug = sourceShortName(entry.url);\n      const clonePath = sourceClonePath(sourceCacheKey(entry.url));\n      console.log(\n        JSON.stringify(\n          {\n            ...entry,\n            slug,\n            clonePath,\n            cached: existsSync(clonePath),\n          },\n          null,\n          2,\n        ),\n      );\n    });\n\n  // ── source remove ───────────────────────────────────────────────────────\n  cmd\n    .command(\"remove <name-or-url>\")\n    .description(\"Remove a source from this project's skaile.yaml (matched by URL or slug)\")\n    .option(\"--purge\", \"Also delete the cached clone from ~/.skaile/cache/sources/\", false)\n    .action(async (key: string, opts: { purge: boolean }) => {\n      const yamlPath = requireProjectYamlPath();\n      const editor = WorkspaceYamlEditor.load(yamlPath);\n      // Resolve to the stored URL (entries are keyed by url in the editor).\n      const match = editor.getSources().find((s) => sourceMatchesKey(s, key));\n      if (!match) {\n        logErr(`No source matching \"${key}\" in ${yamlPath}.`);\n        process.exit(1);\n      }\n      const slug = sourceShortName(match.url);\n      editor.removeSource(match.url);\n      editor.save();\n      await dropManifestCache(match.url, opts.purge);\n      logOk(\n        opts.purge\n          ? `Removed source \"${slug}\" and purged its clone.`\n          : `Removed source \"${slug}\" from skaile.yaml (clone left in ~/.skaile/cache/sources/ — pass --purge to remove it, or run \\`skaile cache clean\\`).`,\n      );\n    });\n\n  // ── source sync ─────────────────────────────────────────────────────────\n  cmd\n    .command(\"sync [name]\")\n    .description(\"Pull upstream changes and refresh the manifest cache\")\n    .option(\"--dev\", \"Also index dev-only assets under each source's dev_paths\", false)\n    .option(\"--all\", \"Sync every source without prompting\", false)\n    .action(async (key: string | undefined, opts: { dev?: boolean; all?: boolean }) => {\n      const yamlPath = requireProjectYamlPath();\n      const sources = readProjectSources(yamlPath);\n      if (sources.length === 0) {\n        logInfo(\"No sources in skaile.yaml.\");\n        return;\n      }\n\n      let targets: SourceEntry[];\n      if (key) {\n        targets = sources.filter((s) => sourceMatchesKey(s, key));\n        if (targets.length === 0) {\n          logInfo(`No source matching \"${key}\".`);\n          return;\n        }\n      } else if (opts.all || sources.length === 1 || !process.stdin.isTTY) {\n        // --all, a single source, or a non-interactive shell: sync everything.\n        targets = sources;\n      } else {\n        const selected = await p.multiselect({\n          message: \"Select sources to sync\",\n          options: sources.map((s) => ({\n            value: s.url,\n            label: sourceShortName(s.url),\n            hint: s.url,\n          })),\n          required: true,\n        });\n        if (p.isCancel(selected)) {\n          p.cancel(\"Cancelled.\");\n          return;\n        }\n        const picked = new Set(selected as string[]);\n        targets = sources.filter((s) => picked.has(s.url));\n      }\n      for (const entry of targets) {\n        const slug = sourceShortName(entry.url);\n        const dest = sourceClonePath(sourceCacheKey(entry.url));\n        if (!existsSync(dest)) {\n          ensureClone(entry);\n          logOk(`${slug}: cloned to ${dest}.`);\n        } else {\n          const pull = spawnSync(\"git\", [\"pull\", \"--ff-only\"], { cwd: dest, stdio: \"inherit\" });\n          if (pull.status !== 0) {\n            logWarn(`${slug}: git pull failed, skipping manifest refresh.`);\n            continue;\n          }\n        }\n        const result = await refreshManifestCache(entry, opts.dev);\n        const failed = indexingHadFailures(result);\n        const indexedMsg = `${slug}: indexed ${result.assetsUpdated} of ${result.assetsFound} asset(s).`;\n        if (failed) {\n          logWarn(indexedMsg);\n          process.exitCode = 1;\n        } else {\n          logOk(indexedMsg);\n        }\n        for (const err of result.errors) logWarn(`${slug}: ${err}`);\n        for (const advisory of result.advisories) logInfo(`${slug}: ${advisory}`);\n        const legacyHint = legacySourceConfigHint(dest);\n        if (legacyHint) logWarn(`${slug}: ${legacyHint}`);\n      }\n    });\n\n  // ── source patch / propose (stubs) ──────────────────────────────────────\n  cmd\n    .command(\"patch <ref>\")\n    .description(\"Extract an asset for editing against the source\")\n    .action((_ref: string) => {\n      logErr(\n        \"`skaile source patch` is scaffolded but not yet wired. \" +\n          \"The patch flow lands in a follow-up PR.\",\n      );\n      process.exit(2);\n    });\n\n  cmd\n    .command(\"propose <ref>\")\n    .description(\"Open a PR with the patch against the source upstream\")\n    .action((_ref: string) => {\n      logErr(\n        \"`skaile source propose` is scaffolded but not yet wired. \" +\n          \"The propose flow lands in a follow-up PR.\",\n      );\n      process.exit(2);\n    });\n\n  // ── source manifest * ───────────────────────────────────────────────────\n  addSourceManifestCommands(cmd);\n\n  return cmd;\n}\n"]}