@skaile/workspaces 5.1.3 → 5.3.0

package/dist/{chunk-43ZBF3WH.js → chunk-WX74MVNA.js}

@@ -133,6 +133,19 @@ function parseAssetRef(s) {
     `publisher required in asset ref "${s}" \u2014 use \`kind:@<publisher>/name\`. Run the \`migrate-skaile-manifest\` skill on legacy manifests.`
   );
 }
+function parseAssetRefLoose(ref) {
+  try {
+    return parseAssetRef(ref);
+  } catch {
+    const hash = ref.indexOf("#");
+    if (hash < 0) return null;
+    try {
+      return parseAssetRef(ref.slice(0, hash));
+    } catch {
+      return null;
+    }
+  }
+}
 function assetRefToStr(ref) {
   const scope = ref.publisher ? `@${ref.publisher}/${ref.name}` : ref.name;
   return `${ref.kind}:${scope}${ref.pin ? `#${ref.pin}` : ""}`;
@@ -160,6 +173,6 @@ function repositoryToRaw(r) {
   return d;
 }
 
-export { ASSET_KINDS, ASSET_NAME_HINT, INDIVIDUAL_KINDS, assetRefToDep, assetRefToStr, depToStr, entryFromRaw, entryToRaw, isValidAssetName, parseAssetRef, parseDep, repositoryFromRaw, repositoryToRaw, slugifyAssetName };
-//# sourceMappingURL=chunk-43ZBF3WH.js.map
-//# sourceMappingURL=chunk-43ZBF3WH.js.map
+export { ASSET_KINDS, ASSET_NAME_HINT, INDIVIDUAL_KINDS, assetRefToDep, assetRefToStr, depToStr, entryFromRaw, entryToRaw, isValidAssetName, parseAssetRef, parseAssetRefLoose, parseDep, repositoryFromRaw, repositoryToRaw, slugifyAssetName };
+//# sourceMappingURL=chunk-WX74MVNA.js.map
+//# sourceMappingURL=chunk-WX74MVNA.js.map

package/dist/chunk-WX74MVNA.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../core/src/models.ts"],"names":[],"mappings":";;;AA4BO,IAAM,WAAA,GAAoC;AAAA,EAC/C,OAAA;AAAA,EACA,OAAA;AAAA,EACA,QAAA;AAAA,EACA,QAAA;AAAA,EACA,MAAA;AAAA,EACA,UAAA;AAAA,EACA,YAAA;AAAA,EACA,SAAA;AAAA,EACA,SAAA;AAAA,EACA,WAAA;AAAA,EACA;AACF;AAQO,IAAM,gBAAA,GAAmB;AAAA,EAC9B,OAAA;AAAA,EACA,OAAA;AAAA,EACA,QAAA;AAAA,EACA,MAAA;AAAA,EACA,UAAA;AAAA,EACA;AACF;AAwBO,SAAS,SAAS,CAAA,EAAuB;AAC9C,EAAA,MAAM,CAAA,GAAI,CAAA,CAAE,OAAA,CAAQ,GAAG,CAAA;AACvB,EAAA,IAAI,MAAM,EAAA,EAAI;AACZ,IAAA,MAAM,OAAO,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,CAAC,EAAE,IAAA,EAAK;AAChC,IAAA,MAAM,OAAO,CAAA,CAAE,KAAA,CAAM,CAAA,GAAI,CAAC,EAAE,IAAA,EAAK;AACjC,IAAA,OAAO,EAAE,MAAM,IAAA,EAAK;AAAA,EACtB;AACA,EAAA,OAAO,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,CAAA,CAAE,MAAK,EAAE;AACzC;AASO,SAAS,SAAS,CAAA,EAAuB;AAC9C,EAAA,OAAO,CAAA,EAAG,CAAA,CAAE,IAAI,CAAA,CAAA,EAAI,EAAE,IAAI,CAAA,CAAA;AAC5B;AAsEO,SAAS,aAAa,CAAA,EAA0C;AACrE,EAAA,MAAM,UAAU,CAAA,CAAE,YAAA;AAClB,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAQ,OAAO,IAAK,OAAA,CAAqB,MAAA,CAAO,OAAO,CAAA,GAAI,EAAC;AAC/E,EAAA,MAAM,KAAA,GAAsB;AAAA,IAC1B,IAAA,EAAM,MAAA,CAAO,CAAA,CAAE,IAAA,IAAQ,EAAE,CAAA;AAAA,IACzB,IAAA,EAAM,MAAA,CAAO,CAAA,CAAE,IAAA,IAAQ,OAAO,CAAA;AAAA,IAC9B,WAAA,EAAa,MAAA,CAAO,CAAA,CAAE,WAAA,IAAe,EAAE,CAAA;AAAA,IACvC,MAAA,EAAQ,MAAA,CAAO,CAAA,CAAE,MAAA,IAAU,EAAE,CAAA;AAAA,IAC7B,WAAW,CAAA,CAAE,SAAA,IAAa,OAAO,MAAA,CAAO,CAAA,CAAE,SAAS,CAAA,GAAI,MAAA;AAAA,IACvD,MAAM,CAAA,CAAE,IAAA,IAAQ,OAAO,MAAA,CAAO,CAAA,CAAE,IAAI,CAAA,GAAI,MAAA;AAAA,IACxC,QAAQ,CAAA,CAAE,MAAA,IAAU,OAAO,MAAA,CAAO,CAAA,CAAE,MAAM,CAAA,GAAI,MAAA;AAAA,IAC9C,OAAA,EAAS,MAAA,CAAO,CAAA,CAAE,OAAA,IAAW,EAAE,CAAA;AAAA,IAC/B,QAAA,EAAU,KAAA,CAAM,OAAA,CAAQ,CAAA,CAAE,QAAQ,CAAA,GAC7B,CAAA,CAAE,QAAA,CAAsB,MAAA,CAAO,OAAO,CAAA,CAAE,GAAA,CAAI,QAAQ,IACrD,EAAC;AAAA,IACL,YAAA,EAAc;AAAA,GAChB;AACA,EAAA,IAAI,CAAA,CAAE,QAAA,IAAY,IAAA,IAAQ,OAAO,CAAA,CAAE,QAAA,KAAa,QAAA,IAAY,CAAC,KAAA,CAAM,OAAA,CAAQ,CAAA,CAAE,QAAQ,CAAA,EAAG;AACtF,IAAA,KAAA,CAAM,WAAW,CAAA,CAAE,QAAA;AAAA,EACrB;AACA,EAAA,IAAI,EAAE,QAAA,IAAY,IAAA,QAAY,QAAA,GAAW,MAAA,CAAO,EAAE,QAAQ,CAAA;AAC1D,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,CAAA,CAAE,QAAQ,CAAA,EAAG;AAC7B,IAAA,KAAA,CAAM,QAAA,GAAY,EAAE,QAAA,CAAuB,MAAA,CAAO,CAAC,CAAA,KAAmB,OAAO,MAAM,QAAQ,CAAA;AAAA,EAC7F;AACA,EAAA,IAAI,EAAE,OAAA,IAAW,IAAA,QAAY,OAAA,GAAU,MAAA,CAAO,EAAE,OAAO,CAAA;AACvD,EAAA,IAAI,EAAE,QAAA,IAAY,IAAA,QAAY,QAAA,GAAW,MAAA,CAAO,EAAE,QAAQ,CAAA;AAC1D,EAAA,OAAO,KAAA;AACT;AASO,SAAS,WAAW,CAAA,EAA0C;AACnE,EAAA,MAAM,GAAA,GAA+B;AAAA,IACnC,MAAM,CAAA,CAAE,IAAA;AAAA,IACR,MAAM,CAAA,CAAE,IAAA;AAAA,IACR,aAAa,CAAA,CAAE,WAAA;AAAA,IACf,QAAQ,CAAA,CAAE,MAAA;AAAA,IACV,WAAW,CAAA,CAAE,SAAA;AAAA,IACb,MAAM,CAAA,CAAE,IAAA;AAAA,IACR,SAAS,CAAA,CAAE,OAAA;AAAA,IACX,GAAI,EAAE,MAAA,IAAU,IAAA,GAAO,EAAE,MAAA,EAAQ,CAAA,CAAE,MAAA,EAAO,GAAI,EAAC;AAAA,IAC/C,QAAA,EAAU,CAAA,CAAE,QAAA,CAAS,GAAA,CAAI,QAAQ,CAAA;AAAA,IACjC,cAAc,CAAA,CAAE;AAAA,GAClB;AACA,EAAA,IAAI,CAAA,CAAE,QAAA,EAAU,GAAA,CAAI,QAAA,GAAW,CAAA,CAAE,QAAA;AACjC,EAAA,IAAI,CAAA,CAAE,QAAA,IAAY,IAAA,EAAM,GAAA,CAAI,WAAW,CAAA,CAAE,QAAA;AACzC,EAAA,IAAI,CAAA,CAAE,YAAY,CAAA,CAAE,QAAA,CAAS,SAAS,CAAA,EAAG,GAAA,CAAI,WAAW,CAAA,CAAE,QAAA;AAC1D,EAAA,IAAI,CAAA,CAAE,OAAA,IAAW,IAAA,EAAM,GAAA,CAAI,UAAU,CAAA,CAAE,OAAA;AACvC,EAAA,IAAI,CAAA,CAAE,QAAA,IAAY,IAAA,EAAM,GAAA,CAAI,WAAW,CAAA,CAAE,QAAA;AACzC,EAAA,OAAO,GAAA;AACT;AAwBA,IAAM,MAAA,GAAS,iBAAA;AAQf,IAAM,aAAA,GACJ,kHAAA;AAMF,IAAM,aAAA,GAAgB,4BAAA;AAMtB,IAAM,eAAA,GAAkB,mDAAA;AAGjB,IAAM,eAAA,GACX;AASK,SAAS,iBAAiB,IAAA,EAAuB;AACtD,EAAA,OAAO,aAAA,CAAc,KAAK,IAAI,CAAA;AAChC;AAqBO,SAAS,iBAAiB,GAAA,EAAqB;AACpD,EAAA,MAAM,OAAO,GAAA,CACV,SAAA,CAAU,MAAM,CAAA,CAChB,QAAQ,kBAAA,EAAoB,EAAE,CAAA,CAC9B,WAAA,GACA,OAAA,CAAQ,aAAA,EAAe,GAAG,CAAA,CAC1B,OAAA,CAAQ,YAAY,EAAE,CAAA;AACzB,EAAA,IAAI,CAAC,IAAA,EAAM;AACT,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,2CAAA,EAA8C,GAAG,CAAA,SAAA,EAAO,eAAe,CAAA,CAAA,CAAG,CAAA;AAAA,EAC5F;AACA,EAAA,OAAO,IAAA;AACT;AAGA,SAAS,WAAW,GAAA,EAAsB;AACxC,EAAA,IAAI,MAAA,CAAO,IAAA,CAAK,GAAG,CAAA,EAAG,OAAO,IAAA;AAC7B,EAAA,IAAI,MAAA,CAAO,KAAA,CAAM,GAAG,CAAA,EAAG,OAAO,IAAA;AAC9B,EAAA,IAAI,MAAA,CAAO,UAAA,CAAW,GAAG,CAAA,EAAG,OAAO,IAAA;AACnC,EAAA,OAAO,KAAA;AACT;AAGA,SAAS,iBAAA,CAAkB,GAAW,GAAA,EAAoB;AACxD,EAAA,MAAM,IAAI,KAAA;AAAA,IACR,CAAA,mBAAA,EAAsB,GAAG,CAAA,MAAA,EAAS,CAAC,CAAA,8IAAA;AAAA,GAGrC;AACF;AAGA,SAAS,iBAAA,CAAkB,GAAW,IAAA,EAAqB;AACzD,EAAA,MAAM,IAAI,KAAA;AAAA,IACR,CAAA,oBAAA,EAAuB,IAAI,CAAA,UAAA,EAAa,CAAC,YAAO,eAAe,CAAA,gEAAA;AAAA,GAEjE;AACF;AAuBO,SAAS,cAAc,CAAA,EAAqB;AACjD,EAAA,MAAM,OAAA,GAAU,EAAE,IAAA,EAAK;AACvB,EAAA,MAAM,CAAA,GAAI,aAAA,CAAc,IAAA,CAAK,OAAO,CAAA;AACpC,EAAA,IAAI,CAAA,EAAG;AACL,IAAA,MAAM,OAAA,GAAU,CAAA,CAAE,CAAC,CAAA,IAAK,OAAA;AACxB,IAAA,MAAM,IAAA,GAAO,OAAA,KAAY,KAAA,GAAQ,YAAA,GAAe,OAAA;AAChD,IAAA,MAAM,SAAA,GAAY,EAAE,CAAC,CAAA;AACrB,IAAA,MAAM,IAAA,GAAO,EAAE,CAAC,CAAA;AAChB,IAAA,MAAM,GAAA,GAAM,CAAA,CAAE,CAAC,CAAA,EAAG,MAAK,IAAK,MAAA;AAC5B,IAAA,IAAI,CAAC,gBAAA,CAAiB,IAAI,CAAA,EAAG,iBAAA,CAAkB,GAAG,IAAI,CAAA;AACtD,IAAA,IAAI,GAAA,KAAQ,UAAa,CAAC,UAAA,CAAW,GAAG,CAAA,EAAG,iBAAA,CAAkB,GAAG,GAAG,CAAA;AACnE,IAAA,OAAO,EAAE,IAAA,EAAM,IAAA,EAAM,SAAA,EAAW,GAAA,EAAI;AAAA,EACtC;AAOA,EAAA,MAAM,MAAA,GAAS,eAAA,CAAgB,IAAA,CAAK,OAAO,CAAA;AAC3C,EAAA,IAAI,MAAA,EAAQ;AACV,IAAA,MAAM,SAAA,GAAY,MAAA,CAAO,CAAC,CAAA,CAAE,IAAA,EAAK;AACjC,IAAA,IAAI,CAAC,gBAAA,CAAiB,SAAS,CAAA,EAAG,iBAAA,CAAkB,GAAG,SAAS,CAAA;AAAA,EAClE;AAEA,EAAA,MAAM,IAAI,KAAA;AAAA,IACR,oCAAoC,CAAC,CAAA,uGAAA;AAAA,GAEvC;AACF;AAUO,SAAS,mBAAmB,GAAA,EAA8B;AAC/D,EAAA,IAAI;AACF,IAAA,OAAO,cAAc,GAAG,CAAA;AAAA,EAC1B,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAA,GAAO,GAAA,CAAI,OAAA,CAAQ,GAAG,CAAA;AAC5B,IAAA,IAAI,IAAA,GAAO,GAAG,OAAO,IAAA;AACrB,IAAA,IAAI;AACF,MAAA,OAAO,aAAA,CAAc,GAAA,CAAI,KAAA,CAAM,CAAA,EAAG,IAAI,CAAC,CAAA;AAAA,IACzC,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AACF;AAYO,SAAS,cAAc,GAAA,EAAuB;AACnD,EAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,SAAA,GAAY,CAAA,CAAA,EAAI,GAAA,CAAI,SAAS,CAAA,CAAA,EAAI,GAAA,CAAI,IAAI,CAAA,CAAA,GAAK,GAAA,CAAI,IAAA;AACpE,EAAA,OAAO,CAAA,EAAG,GAAA,CAAI,IAAI,CAAA,CAAA,EAAI,KAAK,CAAA,EAAG,GAAA,CAAI,GAAA,GAAM,CAAA,CAAA,EAAI,GAAA,CAAI,GAAG,CAAA,CAAA,GAAK,EAAE,CAAA,CAAA;AAC5D;AASO,SAAS,cAAc,GAAA,EAA2B;AAEvD,EAAA,OAAO,EAAE,IAAA,EAAM,GAAA,CAAI,IAAA,EAAM,IAAA,EAAM,IAAI,IAAA,EAAK;AAC1C;AA2LO,SAAS,kBAAkB,CAAA,EAAwC;AACxE,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,MAAA,CAAO,CAAA,CAAE,IAAA,IAAQ,EAAE,CAAA;AAAA,IACzB,IAAA,EAAM,MAAA,CAAO,CAAA,CAAE,IAAA,IAAQ,OAAO,CAAA;AAAA,IAC9B,IAAA,EAAM,MAAA,CAAO,CAAA,CAAE,IAAA,IAAQ,EAAE,CAAA;AAAA,IACzB,MAAA,EAAQ,MAAA,CAAO,CAAA,CAAE,MAAA,IAAU,MAAM,CAAA;AAAA,IACjC,UAAU,CAAA,CAAE,QAAA,IAAY,OAAO,MAAA,CAAO,CAAA,CAAE,QAAQ,CAAA,GAAI;AAAA,GACtD;AACF;AAUO,SAAS,gBAAgB,CAAA,EAAwC;AACtE,EAAA,MAAM,CAAA,GAA6B;AAAA,IACjC,MAAM,CAAA,CAAE,IAAA;AAAA,IACR,MAAM,CAAA,CAAE,IAAA;AAAA,IACR,MAAM,CAAA,CAAE;AAAA,GACV;AACA,EAAA,IAAI,CAAA,CAAE,MAAA,KAAW,MAAA,EAAQ,CAAA,CAAE,SAAS,CAAA,CAAE,MAAA;AACtC,EAAA,IAAI,CAAA,CAAE,QAAA,IAAY,IAAA,EAAM,CAAA,CAAE,WAAW,CAAA,CAAE,QAAA;AACvC,EAAA,OAAO,CAAA;AACT","file":"chunk-WX74MVNA.js","sourcesContent":["/**\n * Pure data models — no I/O, no side effects.\n */\n\nimport semver from \"semver\";\n\n/**\n * Discriminator for catalog entries and asset references.\n * Used in asset ref strings (e.g. `'skill:my-skill'`, `'agent:my-agent'`).\n * @docLink packages/core/concepts#asset-kind\n */\nexport type AssetKind =\n  | \"skill\"\n  | \"agent\"\n  | \"prompt\"\n  | \"bundle\"\n  | \"flow\"\n  | \"contract\"\n  | \"mcp-server\"\n  | \"persona\" // identity fragment — replaces SOUL.md in composition\n  | \"ruleset\" // behavioral constraints — replaces RULES.md in composition\n  | \"knowledge\" // knowledge bundle directory\n  | \"connector\"; // connector descriptor (CONNECTOR.md)\n\n/**\n * All valid AssetKind values as a readonly array.\n * @docLink packages/core/concepts#asset-kinds\n */\nexport const ASSET_KINDS: readonly AssetKind[] = [\n  \"skill\",\n  \"agent\",\n  \"prompt\",\n  \"bundle\",\n  \"flow\",\n  \"contract\",\n  \"mcp-server\",\n  \"persona\",\n  \"ruleset\",\n  \"knowledge\",\n  \"connector\",\n];\n/**\n * Asset kinds that represent individually installable assets (excludes \"bundle\").\n * Note: persona, ruleset, and knowledge are valid AssetKind values but are not\n * individually installable — they are resolved at session creation time via the\n * mixin-resolver, not through the install/deploy pipeline.\n * @docLink packages/core/concepts#individual-kinds\n */\nexport const INDIVIDUAL_KINDS = [\n  \"skill\",\n  \"agent\",\n  \"prompt\",\n  \"flow\",\n  \"contract\",\n  \"mcp-server\",\n] as const satisfies AssetKind[];\n\n// ── Dependency ────────────────────────────────────────────────────────────────\n\n/**\n * Declared dependency on another catalog asset.\n * @docLink packages/core/concepts#dependency\n */\nexport interface Dependency {\n  /** Asset kind (e.g. \"skill\", \"agent\", \"contract\"). */\n  kind: string;\n  /** Asset name within that kind. */\n  name: string;\n  /** Canonical publisher namespace (when known). */\n  publisher?: string;\n}\n\n/**\n * Parse a `\"kind:name\"` dependency string, or a bare `\"name\"` (defaults kind to `\"skill\"`).\n *\n * @param s - Dependency string, e.g. `\"skill:use-exa\"` or `\"use-exa\"`\n * @returns Parsed `{ kind, name }` dependency object\n * @docLink packages/core/concepts#parse-dep\n */\nexport function parseDep(s: string): Dependency {\n  const i = s.indexOf(\":\");\n  if (i !== -1) {\n    const kind = s.slice(0, i).trim();\n    const name = s.slice(i + 1).trim();\n    return { kind, name };\n  }\n  return { kind: \"skill\", name: s.trim() };\n}\n\n/**\n * Serialize a Dependency back to its `\"kind:name\"` string form.\n *\n * @param d - Dependency to serialize\n * @returns String in `\"kind:name\"` format\n * @docLink packages/core/concepts#dep-to-str\n */\nexport function depToStr(d: Dependency): string {\n  return `${d.kind}:${d.name}`;\n}\n\n// ── CatalogEntry ──────────────────────────────────────────────────────────────\n\n/**\n * A resolved catalog entry describing an installable asset.\n * Produced by manifest parsers and stored in the catalog YAML.\n * @docLink packages/core/concepts#catalog-entry\n */\nexport interface CatalogEntry {\n  /** Unique asset name within its kind. */\n  name: string;\n  /** Asset kind discriminator. */\n  kind: AssetKind;\n  /** Short description of what this asset does. */\n  description: string;\n  /** Absolute path to manifest file */\n  source: string;\n  /** Canonical publisher namespace this asset belongs to (formerly `repository`). */\n  publisher?: string;\n  /**\n   * Canonical ref (`kind:@publisher/name#version`) the CLI prints for this entry.\n   * Set by the asset manager where `publisher` is not the real publisher (a\n   * clone-sourced entry carries its clone key there); absent → derived from\n   * `publisher` + `version`.\n   */\n  canonicalRef?: string;\n  /**\n   * `\"<org>/<repo>\"` coordinate the asset came from. Absent → the asset groups\n   * directly under its publisher (local library with no git remote, or a\n   * non-GitHub source).\n   */\n  repo?: string;\n  /**\n   * Claude plugin (from `.claude-plugin/marketplace.json` / `plugin.json`\n   * membership) this asset belongs to, or absent when no plugin lists it.\n   * Display-only — groups assets in the manage TUI; never part of identity or\n   * the install layout.\n   */\n  plugin?: string;\n  /** Semantic version string (may be empty if not declared in the manifest). */\n  version: string;\n  /** Skills, agents, or other assets this entry depends on. */\n  requires: Dependency[];\n  /** Bundle dependencies — asset refs to install (bundles only). */\n  dependencies: string[];\n  /**\n   * Kind-specific metadata extracted from the manifest frontmatter.\n   * Used by MCP servers to carry default config (transport, command, args, env, url, headers)\n   * so that `mcp:name` dependency refs resolve to a runnable declaration without\n   * requiring verbose inline config in `skaile.yaml`.\n   */\n  metadata?: Record<string, unknown>;\n  /** Curated facet, surfaced as a badge in the manage TUI (not a tree axis). */\n  category?: string;\n  /** Store-listing keywords (manifest `assets[].keywords`, else frontmatter). */\n  keywords?: string[];\n  /** Store-listing license (manifest `assets[].license`, else repo-level default). */\n  license?: string;\n  /** Store-listing homepage (manifest `assets[].homepage`, else repo-level default). */\n  homepage?: string;\n}\n\n/**\n * Construct a CatalogEntry from a raw deserialized record (e.g. from catalog.yaml).\n *\n * @param d - Raw object with loosely typed fields\n * @returns Normalized CatalogEntry\n * @docLink packages/core/concepts#entry-from-raw\n */\nexport function entryFromRaw(d: Record<string, unknown>): CatalogEntry {\n  const rawDeps = d.dependencies;\n  const deps = Array.isArray(rawDeps) ? (rawDeps as string[]).filter(Boolean) : [];\n  const entry: CatalogEntry = {\n    name: String(d.name ?? \"\"),\n    kind: String(d.kind ?? \"skill\") as AssetKind,\n    description: String(d.description ?? \"\"),\n    source: String(d.source ?? \"\"),\n    publisher: d.publisher != null ? String(d.publisher) : undefined,\n    repo: d.repo != null ? String(d.repo) : undefined,\n    plugin: d.plugin != null ? String(d.plugin) : undefined,\n    version: String(d.version ?? \"\"),\n    requires: Array.isArray(d.requires)\n      ? (d.requires as string[]).filter(Boolean).map(parseDep)\n      : [],\n    dependencies: deps,\n  };\n  if (d.metadata != null && typeof d.metadata === \"object\" && !Array.isArray(d.metadata)) {\n    entry.metadata = d.metadata as Record<string, unknown>;\n  }\n  if (d.category != null) entry.category = String(d.category);\n  if (Array.isArray(d.keywords)) {\n    entry.keywords = (d.keywords as unknown[]).filter((k): k is string => typeof k === \"string\");\n  }\n  if (d.license != null) entry.license = String(d.license);\n  if (d.homepage != null) entry.homepage = String(d.homepage);\n  return entry;\n}\n\n/**\n * Serialize a CatalogEntry to a plain record suitable for YAML/JSON persistence.\n *\n * @param e - CatalogEntry to serialize\n * @returns Plain object with string-serialized requires and dependencies\n * @docLink packages/core/concepts#entry-to-raw\n */\nexport function entryToRaw(e: CatalogEntry): Record<string, unknown> {\n  const raw: Record<string, unknown> = {\n    name: e.name,\n    kind: e.kind,\n    description: e.description,\n    source: e.source,\n    publisher: e.publisher,\n    repo: e.repo,\n    version: e.version,\n    ...(e.plugin != null ? { plugin: e.plugin } : {}),\n    requires: e.requires.map(depToStr),\n    dependencies: e.dependencies,\n  };\n  if (e.metadata) raw.metadata = e.metadata;\n  if (e.category != null) raw.category = e.category;\n  if (e.keywords && e.keywords.length > 0) raw.keywords = e.keywords;\n  if (e.license != null) raw.license = e.license;\n  if (e.homepage != null) raw.homepage = e.homepage;\n  return raw;\n}\n\n// ── AssetRef ─────────────────────────────────────────────────────────────────\n\n/**\n * A parsed asset reference: `kind:@<publisher>/name[#pin]`.\n *\n * `publisher` is the canonical, GitHub-shaped publisher namespace (≤39 chars,\n * alphanumeric+hyphen). `pin` is a SemVer constraint, exact SHA, or absent.\n * Floating refs (`main`, `latest`, `HEAD`) are rejected at parse time.\n *\n * Produced by `parseAssetRef`; consumed by `resolveAsset` and `resolveAll`.\n * @docLink packages/core/concepts#asset-ref\n */\nexport interface AssetRef {\n  kind: string;\n  name: string;\n  /** Canonical publisher namespace. Optional only for ambiguity-resolution\n   *  during migration; new manifests require it. */\n  publisher?: string;\n  /** SemVer constraint (^1.4.0, ~1.4, 1.x, exact 1.4.0), 40-char SHA, or undefined. */\n  pin?: string;\n}\n\nconst SHA_RE = /^[0-9a-f]{40}$/i;\n\n// Scoped grammar: `kind:@publisher/name[#version]`. The publisher sub-pattern is\n// GitHub-shaped (1-39 chars, alphanumeric + single hyphens, no leading/trailing or\n// double hyphen); `@` is the scope sigil and `#` the version sigil. `name` is\n// intentionally permissive (`[^/#\\s]+` — only the structural separators are\n// forbidden); floating-ref rejection stays in `isValidPin`, so `#main`/`#latest`\n// match here and fail there with a clear message.\nconst SCOPED_REF_RE =\n  /^(?:([a-z][a-z0-9-]*):)?@([A-Za-z0-9](?:[A-Za-z0-9]|-(?!-)){0,37}[A-Za-z0-9]|[A-Za-z0-9])\\/([^/#\\s]+)(?:#(.+))?$/;\n\n// Canonical asset-name grammar: lowercase kebab-case (npm-style, scope-free) —\n// `a-z` / `0-9` segments joined by single hyphens, no leading/trailing hyphen,\n// no uppercase, spaces, dots, or underscores. Names become directory names,\n// lock keys, and CLI args, so the constraint is intentionally narrow.\nconst ASSET_NAME_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;\n\n// Diagnostic-only matcher: a ref carrying a `kind:@publisher/` scope prefix,\n// capturing whatever follows (sans `#pin`) as the candidate name. Used solely\n// to tell \"missing publisher\" apart from \"malformed name\" when the strict\n// grammar above fails (e.g. a space in the name).\nconst SCOPE_PREFIX_RE = /^(?:[a-z][a-z0-9-]*:)?@[^/\\s]+\\/([^#]+?)(?:#.*)?$/;\n\n/** Human-readable statement of the canonical asset-name rule. */\nexport const ASSET_NAME_HINT =\n  'names must be lowercase kebab-case (a-z, 0-9, single hyphens; e.g. \"cli-concept\")';\n\n/**\n * True when `name` is a canonical asset name: lowercase kebab-case, scope-free.\n *\n * This is the single source of truth for asset-name validity — `parseAssetRef`\n * enforces it, and `skaile validate` reports violations across a repo tree.\n * @docLink packages/core/concepts#is-valid-asset-name\n */\nexport function isValidAssetName(name: string): boolean {\n  return ASSET_NAME_RE.test(name);\n}\n\n/**\n * Coerce an arbitrary string into a canonical asset name (lowercase kebab-case).\n *\n * For **third-party sources we don't control**, an upstream asset may carry a\n * human-styled identity (`\"Complex App\"`, `\"CLI_Concept\"`). The canonical grammar\n * (`isValidAssetName`) rejects those, so the ingestion boundary slugifies them to\n * a valid identity rather than crashing: Unicode is folded to ASCII, the result is\n * lowercased, every run of non-`[a-z0-9]` becomes a single hyphen, and\n * leading/trailing hyphens are trimmed. The transform is idempotent and a no-op on\n * already-canonical names.\n *\n * This is intentionally **lossy** — the pretty original is not part of identity.\n * Callers that want to preserve it for display must stash it themselves (e.g. on\n * `CatalogEntry.metadata.displayName`). Authoring-time validation (`skaile validate`)\n * still uses `isValidAssetName` on raw frontmatter, so first-party typos surface there.\n *\n * @throws When `raw` contains no `[a-z0-9]` character (nothing to slugify).\n * @docLink packages/core/concepts#slugify-asset-name\n */\nexport function slugifyAssetName(raw: string): string {\n  const slug = raw\n    .normalize(\"NFKD\")\n    .replace(/[\\u0300-\\u036f]/g, \"\") // strip combining accents\n    .toLowerCase()\n    .replace(/[^a-z0-9]+/g, \"-\")\n    .replace(/^-+|-+$/g, \"\");\n  if (!slug) {\n    throw new Error(`cannot derive a canonical asset name from \"${raw}\" — ${ASSET_NAME_HINT}.`);\n  }\n  return slug;\n}\n\n/** True when `pin` is a SemVer constraint, exact SemVer, or 40-char SHA. */\nfunction isValidPin(pin: string): boolean {\n  if (SHA_RE.test(pin)) return true;\n  if (semver.valid(pin)) return true;\n  if (semver.validRange(pin)) return true;\n  return false;\n}\n\n/** Throw the canonical non-canonical-pin error for a ref `s` carrying `pin`. */\nfunction rejectFloatingPin(s: string, pin: string): never {\n  throw new Error(\n    `non-canonical pin \"${pin}\" in \"${s}\" — pin must be a SemVer ` +\n      \"constraint (1.4.0, ^1.4, ~1.4, 1.x), a 40-char SHA, or absent. \" +\n      \"Floating refs (main/latest/HEAD) are not allowed.\",\n  );\n}\n\n/** Throw the canonical malformed-name error for a ref `s` carrying `name`. */\nfunction rejectInvalidName(s: string, name: string): never {\n  throw new Error(\n    `invalid asset name \"${name}\" in ref \"${s}\" — ${ASSET_NAME_HINT}. ` +\n      \"Run the `migrate-skaile-manifest` skill on legacy manifests.\",\n  );\n}\n\n/**\n * Parse a canonical asset reference string into an `AssetRef` object.\n *\n * Grammar: `kind:@<publisher>/name[#version]`\n *   \"skill:@skaile-ai/audit\"          → { kind: \"skill\", name: \"audit\", publisher: \"skaile-ai\" }\n *   \"skill:@skaile-ai/audit#^1.4.0\"   → { …, pin: \"^1.4.0\" }\n *   \"skill:@skaile-ai/audit#<40-sha>\" → { …, pin: \"<40-sha>\" }\n *\n * `@` is the scope sigil and `#` the version sigil. `<publisher>` is GitHub-shaped\n * (≤39 chars, alphanumeric+hyphen, no leading/trailing or double hyphen). `pin`\n * accepts a SemVer constraint (`^`, `~`, `x`, exact), a 40-char SHA, or is absent.\n * Floating refs (`main`/`latest`/`HEAD`/anything non-canonical) are parse-time errors.\n *\n * The shorthand `mcp:` is normalized to `mcp-server:`. `kind` defaults to `\"skill\"`.\n *\n * @param s - Asset reference string\n * @returns Parsed `AssetRef`\n * @throws When the ref matches no grammar, the publisher is malformed, or the pin\n *   is a floating ref.\n * @docLink packages/core/concepts#parse-asset-ref\n */\nexport function parseAssetRef(s: string): AssetRef {\n  const trimmed = s.trim();\n  const m = SCOPED_REF_RE.exec(trimmed);\n  if (m) {\n    const kindRaw = m[1] ?? \"skill\";\n    const kind = kindRaw === \"mcp\" ? \"mcp-server\" : kindRaw;\n    const publisher = m[2];\n    const name = m[3];\n    const pin = m[4]?.trim() || undefined;\n    if (!isValidAssetName(name)) rejectInvalidName(s, name);\n    if (pin !== undefined && !isValidPin(pin)) rejectFloatingPin(s, pin);\n    return { kind, name, publisher, pin };\n  }\n\n  // The strict grammar failed. If the ref nonetheless carries a `@publisher/`\n  // scope and the fault is the name (e.g. an embedded space), surface a\n  // name-specific error rather than the misleading \"publisher required\" — the\n  // publisher is plainly present. A *valid* captured name means the publisher\n  // itself is malformed, so fall through to the publisher error below.\n  const scoped = SCOPE_PREFIX_RE.exec(trimmed);\n  if (scoped) {\n    const candidate = scoped[1].trim();\n    if (!isValidAssetName(candidate)) rejectInvalidName(s, candidate);\n  }\n\n  throw new Error(\n    `publisher required in asset ref \"${s}\" — use \\`kind:@<publisher>/name\\`. ` +\n      \"Run the `migrate-skaile-manifest` skill on legacy manifests.\",\n  );\n}\n\n/**\n * Parse a ref for identity matching, tolerating a non-canonical pin. A lock key\n * can pin a content-sha pseudo-version (`#0.0.0-sha.<hash>`) that\n * {@link parseAssetRef} rejects; matchers only need the version-agnostic\n * `kind/publisher/name`, so drop the pin and retry before giving up.\n *\n * @returns The parsed ref (its `pin` empty when the pin was dropped), or `null`.\n */\nexport function parseAssetRefLoose(ref: string): AssetRef | null {\n  try {\n    return parseAssetRef(ref);\n  } catch {\n    const hash = ref.indexOf(\"#\");\n    if (hash < 0) return null;\n    try {\n      return parseAssetRef(ref.slice(0, hash));\n    } catch {\n      return null;\n    }\n  }\n}\n\n/**\n * Serialize an AssetRef back to its canonical string form.\n *\n * Emits the scope form `kind:@publisher/name[#pin]` when `publisher` is present,\n * and the bare `kind:name[#pin]` form for transitive refs that inherit it.\n *\n * @param ref - AssetRef to serialize\n * @returns String in `\"kind:@publisher/name[#pin]\"` (or bare `\"kind:name[#pin]\"`) format\n * @docLink packages/core/concepts#asset-ref-to-str\n */\nexport function assetRefToStr(ref: AssetRef): string {\n  const scope = ref.publisher ? `@${ref.publisher}/${ref.name}` : ref.name;\n  return `${ref.kind}:${scope}${ref.pin ? `#${ref.pin}` : \"\"}`;\n}\n\n/**\n * Convert an AssetRef to a simple Dependency, dropping the repository and pin qualifiers.\n *\n * @param ref - Full asset reference (may include repository and pin)\n * @returns Dependency with only kind and name\n * @docLink packages/core/concepts#asset-ref-to-dep\n */\nexport function assetRefToDep(ref: AssetRef): Dependency {\n  // Grammar-agnostic — drops publisher/pin, so the scope-sigil change doesn't touch it.\n  return { kind: ref.kind, name: ref.name };\n}\n\n// ── Lock File ────────────────────────────────────────────────────────────────\n\n/** A path/sha256 pair recorded for one file inside a locked asset. */\nexport interface LockFileEntry {\n  path: string;\n  sha256: string;\n}\n\n/**\n * Library-origin marker on a {@link LockEntry}: the asset was resolved from a\n * registered library (a local authoring place) rather than a git source/store.\n */\nexport interface LockLibraryOrigin {\n  /** Name of the library the asset was resolved from. */\n  name: string;\n  /** Library version of the asset at lock time. */\n  version: string;\n  /** Content hash recorded in the library index at lock time; absent when the library was never indexed. */\n  sha256?: string;\n  /**\n   * Set by `skaile asset install`: the files were copied or linked straight into\n   * the project, not deployed from a `skaile.yaml` dependency. `skaile install`\n   * leaves such an entry and its files alone instead of reconciling them away.\n   */\n  installed?: \"copy\" | \"link\";\n}\n\n/**\n * Per-asset entry in the lock file (v3 schema).\n * Keyed in `LockFile.assets` by canonical ref (`<kind>:@<publisher>/<name>#<version>`).\n * Source-origin entries carry `source` + `files`; library-origin entries carry\n * `library` instead (no `source`, empty `files`). Both fields are additive, so\n * lock files written before library origin existed still load unchanged.\n * @docLink packages/core/api-reference#lock-entry\n */\nexport interface LockEntry {\n  /** Composite sha256 over sorted `<path>:<sha256>\\n` rows (library-origin: the library's hash, `\"\"` when unknown). */\n  sha256: string;\n  /** Resolved upstream source + commit. Absent for library-origin entries. */\n  source?: { url: string; commit: string };\n  /** Files that constitute the asset. Empty for library-origin entries. */\n  files: LockFileEntry[];\n  /** True when an `overrides[]` entry pinned this resolution. */\n  override_applied: boolean;\n  /** Set when the asset was resolved from a registered library. */\n  library?: LockLibraryOrigin;\n}\n\n/** Per-source-URL entry in `LockFile.sources`. */\nexport interface LockSourceEntry {\n  url: string;\n  commit: string;\n}\n\n/**\n * Full skaile.lock.yaml structure (v3 schema).\n * @docLink packages/core/api-reference#lock-file\n */\nexport interface LockFile {\n  /**\n   * Lock file schema version: 3, or 4 when the lock holds a library-origin\n   * entry (no `source`), so CLIs that predate library origin reject it cleanly.\n   */\n  schema_version: 3 | 4;\n  /** ISO timestamp of when the lock was generated. */\n  locked_at: string;\n  /** Resolved assets keyed by canonical ref `<kind>:@<publisher>/<name>#<version>`. */\n  assets: Record<string, LockEntry>;\n  /** Every source URL that contributed at least one resolved asset. */\n  sources: LockSourceEntry[];\n  /**\n   * Resolved plugin packages (from `skaile.yaml` `plugins:`), keyed by package\n   * name. The plugin-store reconciler reads this slice into its reconcile-hash\n   * so a lock change reinstalls even when the manifest list is unchanged.\n   */\n  plugins?: Record<string, LockPluginEntry>;\n}\n\n/** One pinned plugin package in the lock file's `plugins` slice. */\nexport interface LockPluginEntry {\n  /** Resolved exact version (e.g. \"0.1.3\"). */\n  version: string;\n  /** Package integrity hash (e.g. \"sha512-...\"); may be empty until populated from bun's output. */\n  integrity: string;\n}\n\n// ── AgentManifest ────────────────────────────────────────────────────────────\n\n/**\n * Agent package manifest — parsed from `agent.yaml` in an agent directory.\n * Defines the agent's identity, model preferences, capability requirements, and composition mixins.\n * @docLink packages/core/concepts#agent-manifest\n */\nexport interface AgentManifest {\n  spec_version?: string;\n  name?: string;\n  version?: string;\n  description?: string;\n  model?: {\n    preferred?: string;\n    fallback?: string[];\n    constraints?: { temperature?: number; max_tokens?: number };\n  };\n  tools?: {\n    allowed?: string[];\n    denied?: string[];\n  };\n  delegation?: { mode?: string };\n  requires?: Array<{ name: string; source: string; version?: string; mount: string }>;\n  tags?: string[];\n  author?: string;\n  metadata?: Record<string, unknown>;\n  /**\n   * @deprecated Use `persona`, `rules`, and `knowledge` mixin arrays instead.\n   * This field is declared but was never resolved at runtime.\n   */\n  extends?: string;\n  abilities?: string[];\n  /**\n   * Identity fragments to compose into the agent persona.\n   * Each entry is a catalog ref (`persona:name@repo#pin`), a bare name\n   * (defaults to kind \"persona\"), or a local path (`./my.persona.md`).\n   * Resolved in order — concatenated with \\n\\n---\\n\\n separator.\n   */\n  persona?: string[];\n  /**\n   * Behavioral rule sets to compose into the agent's constraints.\n   * Each entry is a catalog ref (`ruleset:name@repo#pin`), bare name,\n   * or local path. All rules apply (union).\n   */\n  rules?: string[];\n  /**\n   * Knowledge bundles to compose into the agent's domain knowledge.\n   * Each entry is a catalog ref (`knowledge:name@repo#pin`), bare name,\n   * or local path to a knowledge directory. Loaded in declaration order.\n   */\n  knowledge?: string[];\n  contracts?: string[];\n  /**\n   * v2 composition items. Each entry references an asset (skill, connector,\n   * soul, ruleset, etc.) with binding semantics (discoverable, inline-live,\n   * inline-snapshot). Resolved at session start via the composition module.\n   */\n  composes?: Array<{\n    kind: string;\n    ref: string;\n    instance?: string;\n    binding?: \"discoverable\" | \"inline-live\" | \"inline-snapshot\";\n  }>;\n  runtime?: {\n    max_turns?: number;\n    timeout?: number;\n    [key: string]: unknown;\n  };\n}\n\n// ── Repository ───────────────────────────────────────────────────────────────\n\ntype RepositoryKind = \"local\" | \"github\";\n\n/**\n * A registered asset repository (local path or cloned GitHub repo).\n * Stored in the catalog; consumed by `repo-manager` for cloning and scanning.\n * @docLink packages/core/concepts#repository\n */\nexport interface Repository {\n  /** Logical repository name. */\n  name: string;\n  /** Storage kind: \"local\" for paths, \"github\" for remote URLs. */\n  kind: RepositoryKind;\n  /** Absolute path (local) or remote URL (github). */\n  path: string;\n  /** Active branch. */\n  branch: string;\n  /** Upstream fork URL (for fork-based workflows). */\n  upstream?: string;\n}\n\n/**\n * Construct a `Repository` from a raw deserialized record.\n *\n * @param d - Raw object from YAML/JSON\n * @returns Normalized `Repository`\n * @docLink packages/core/concepts#repository-from-raw\n */\nexport function repositoryFromRaw(d: Record<string, unknown>): Repository {\n  return {\n    name: String(d.name ?? \"\"),\n    kind: String(d.kind ?? \"local\") as RepositoryKind,\n    path: String(d.path ?? \"\"),\n    branch: String(d.branch ?? \"main\"),\n    upstream: d.upstream != null ? String(d.upstream) : undefined,\n  };\n}\n\n/**\n * Serialize a `Repository` to a plain record for YAML/JSON persistence.\n * Omits the `branch` field when it equals `\"main\"` to keep serialized output clean.\n *\n * @param r - Repository to serialize\n * @returns Plain object suitable for YAML/JSON\n * @docLink packages/core/concepts#repository-to-raw\n */\nexport function repositoryToRaw(r: Repository): Record<string, unknown> {\n  const d: Record<string, unknown> = {\n    name: r.name,\n    kind: r.kind,\n    path: r.path,\n  };\n  if (r.branch !== \"main\") d.branch = r.branch;\n  if (r.upstream != null) d.upstream = r.upstream;\n  return d;\n}\n"]}

package/dist/{chunk-U6K3I3AX.js → chunk-XGIS325V.js}

@@ -1,4 +1,4 @@
-import { globalSkaileDir } from './chunk-TLKM4M47.js';
+import { globalSkaileDir } from './chunk-MFHKHXDE.js';
 import { DRIVER_TARGETS } from './chunk-TOSHZX4C.js';
 import { lstatSync } from 'fs';
 import { homedir } from 'os';
@@ -31,5 +31,5 @@ function isDeployed(kind, name, target, globalInstall, cwd) {
 }
 
 export { deployedBase, deployedDir, isDeployed };
-//# sourceMappingURL=chunk-U6K3I3AX.js.map
-//# sourceMappingURL=chunk-U6K3I3AX.js.map
+//# sourceMappingURL=chunk-XGIS325V.js.map
+//# sourceMappingURL=chunk-XGIS325V.js.map

package/dist/{chunk-U6K3I3AX.js.map → chunk-XGIS325V.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../core/src/store.ts"],"names":[],"mappings":";;;;;;AA6BO,SAAS,YAAA,CACd,IAAA,EACA,MAAA,EACA,aAAA,EACA,GAAA,EACQ;AACR,EAAA,MAAM,SAAA,GAAY,eAAe,MAAM,CAAA;AACvC,EAAA,IAAI,CAAC,SAAA,EAAW,MAAM,IAAI,KAAA,CAAM,CAAA,wBAAA,EAA2B,MAAM,CAAA,CAAA,CAAG,CAAA;AACpE,EAAA,MAAM,KAAA,GAAQ,gBAAgB,QAAA,GAAW,OAAA;AACzC,EAAA,MAAM,KAAA,GAAQ,UAAU,KAAK,CAAA;AAC7B,EAAA,MAAM,OAAA,GAAU,KAAA,CAAM,IAAI,CAAA,IAAK,MAAM,KAAA,IAAS,EAAA;AAC9C,EAAA,IAAI,aAAA,EAAe;AAGjB,IAAA,IAAI,OAAA,KAAY,WAAA,IAAe,OAAA,CAAQ,UAAA,CAAW,YAAY,CAAA,EAAG;AAC/D,MAAA,OAAO,KAAK,eAAA,EAAgB,EAAG,QAAQ,KAAA,CAAM,WAAA,CAAY,MAAM,CAAC,CAAA;AAAA,IAClE;AACA,IAAA,OAAO,OAAA,CAAQ,OAAA,CAAQ,IAAA,EAAM,OAAA,EAAS,CAAA;AAAA,EACxC;AACA,EAAA,OAAO,OAAA,CAAQ,GAAA,IAAO,OAAA,CAAQ,GAAA,IAAO,OAAO,CAAA;AAC9C;AAaO,SAAS,WAAA,CACd,IAAA,EACA,IAAA,EACA,MAAA,EACA,eACA,GAAA,EACQ;AACR,EAAA,OAAO,KAAK,YAAA,CAAa,IAAA,EAAM,QAAQ,aAAA,EAAe,GAAG,GAAG,IAAI,CAAA;AAClE;AAcO,SAAS,UAAA,CACd,IAAA,EACA,IAAA,EACA,MAAA,EACA,eACA,GAAA,EACS;AACT,EAAA,IAAI;AACF,IAAA,SAAA,CAAU,YAAY,IAAA,EAAM,IAAA,EAAM,MAAA,EAAQ,aAAA,EAAe,GAAG,CAAC,CAAA;AAC7D,IAAA,OAAO,IAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF","file":"chunk-U6K3I3AX.js","sourcesContent":["/**\n * Deploy-target helpers — resolve framework-specific install paths.\n *\n * This module contains only deploy path resolution. All catalog, repository,\n * and history I/O has moved to @skaile/asset-manager (project-local).\n */\n\nimport { lstatSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { join, resolve } from \"node:path\";\nimport { globalSkaileDir } from \"./cache-paths.js\";\nimport type { DriverTarget } from \"./driver-targets.js\";\nimport { type AiComponent, DRIVER_TARGETS } from \"./driver-targets.js\";\n\n// ── Deploy-target helpers ─────────────────────────────────────────────────────\n\n/**\n * Resolve the base deploy directory for an asset kind in a given driver target + scope.\n * For local scope, the path is relative to `cwd` (defaults to `process.cwd()`).\n * For global scope, `~` is expanded to the home directory.\n *\n * @param kind - Asset component type (e.g. `\"skill\"`, `\"agent\"`)\n * @param target - Driver target identifier (e.g. `\"claude-code\"`, `\"omp\"`)\n * @param globalInstall - `true` for user-global install, `false` for project-local\n * @param cwd - Working directory for project-local installs (default: `process.cwd()`)\n * @returns Absolute path to the base deploy directory\n * @throws When `target` is not found in `DRIVER_TARGETS`\n * @docLink packages/core/concepts#deployed-base\n */\nexport function deployedBase(\n  kind: AiComponent,\n  target: DriverTarget,\n  globalInstall: boolean,\n  cwd?: string,\n): string {\n  const targetMap = DRIVER_TARGETS[target];\n  if (!targetMap) throw new Error(`Unknown deploy target: '${target}'`);\n  const scope = globalInstall ? \"global\" : \"local\";\n  const paths = targetMap[scope];\n  const destStr = paths[kind] ?? paths.skill ?? \"\";\n  if (globalInstall) {\n    // `~/.skaile/...` is skaile's own per-user root, so it follows `$SKAILE_HOME`;\n    // every other `~/...` is a driver's home dir (`~/.claude`, `~/.omp`, ...).\n    if (destStr === \"~/.skaile\" || destStr.startsWith(\"~/.skaile/\")) {\n      return join(globalSkaileDir(), destStr.slice(\"~/.skaile\".length));\n    }\n    return destStr.replace(/^~/, homedir());\n  }\n  return resolve(cwd ?? process.cwd(), destStr);\n}\n\n/**\n * Return the full deploy path for a named asset: `<deployedBase>/<name>`.\n *\n * @param kind - Asset component type\n * @param name - Asset name (becomes the directory/file name under the base)\n * @param target - Driver target identifier\n * @param globalInstall - `true` for user-global, `false` for project-local\n * @param cwd - Working directory for local installs\n * @returns Absolute path to the asset's deploy directory\n * @docLink packages/core/concepts#deployed-dir\n */\nexport function deployedDir(\n  kind: AiComponent,\n  name: string,\n  target: DriverTarget,\n  globalInstall: boolean,\n  cwd?: string,\n): string {\n  return join(deployedBase(kind, target, globalInstall, cwd), name);\n}\n\n/**\n * Check whether an asset is already deployed at its expected location.\n * Uses `lstatSync` so symlinks are treated as deployed.\n *\n * @param kind - Asset component type\n * @param name - Asset name\n * @param target - Driver target identifier\n * @param globalInstall - `true` for user-global, `false` for project-local\n * @param cwd - Working directory for local installs\n * @returns `true` if the deploy path exists, `false` otherwise\n * @docLink packages/core/concepts#is-deployed\n */\nexport function isDeployed(\n  kind: AiComponent,\n  name: string,\n  target: DriverTarget,\n  globalInstall: boolean,\n  cwd?: string,\n): boolean {\n  try {\n    lstatSync(deployedDir(kind, name, target, globalInstall, cwd));\n    return true;\n  } catch {\n    return false;\n  }\n}\n"]}
+{"version":3,"sources":["../core/src/store.ts"],"names":[],"mappings":";;;;;;AA6BO,SAAS,YAAA,CACd,IAAA,EACA,MAAA,EACA,aAAA,EACA,GAAA,EACQ;AACR,EAAA,MAAM,SAAA,GAAY,eAAe,MAAM,CAAA;AACvC,EAAA,IAAI,CAAC,SAAA,EAAW,MAAM,IAAI,KAAA,CAAM,CAAA,wBAAA,EAA2B,MAAM,CAAA,CAAA,CAAG,CAAA;AACpE,EAAA,MAAM,KAAA,GAAQ,gBAAgB,QAAA,GAAW,OAAA;AACzC,EAAA,MAAM,KAAA,GAAQ,UAAU,KAAK,CAAA;AAC7B,EAAA,MAAM,OAAA,GAAU,KAAA,CAAM,IAAI,CAAA,IAAK,MAAM,KAAA,IAAS,EAAA;AAC9C,EAAA,IAAI,aAAA,EAAe;AAGjB,IAAA,IAAI,OAAA,KAAY,WAAA,IAAe,OAAA,CAAQ,UAAA,CAAW,YAAY,CAAA,EAAG;AAC/D,MAAA,OAAO,KAAK,eAAA,EAAgB,EAAG,QAAQ,KAAA,CAAM,WAAA,CAAY,MAAM,CAAC,CAAA;AAAA,IAClE;AACA,IAAA,OAAO,OAAA,CAAQ,OAAA,CAAQ,IAAA,EAAM,OAAA,EAAS,CAAA;AAAA,EACxC;AACA,EAAA,OAAO,OAAA,CAAQ,GAAA,IAAO,OAAA,CAAQ,GAAA,IAAO,OAAO,CAAA;AAC9C;AAaO,SAAS,WAAA,CACd,IAAA,EACA,IAAA,EACA,MAAA,EACA,eACA,GAAA,EACQ;AACR,EAAA,OAAO,KAAK,YAAA,CAAa,IAAA,EAAM,QAAQ,aAAA,EAAe,GAAG,GAAG,IAAI,CAAA;AAClE;AAcO,SAAS,UAAA,CACd,IAAA,EACA,IAAA,EACA,MAAA,EACA,eACA,GAAA,EACS;AACT,EAAA,IAAI;AACF,IAAA,SAAA,CAAU,YAAY,IAAA,EAAM,IAAA,EAAM,MAAA,EAAQ,aAAA,EAAe,GAAG,CAAC,CAAA;AAC7D,IAAA,OAAO,IAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF","file":"chunk-XGIS325V.js","sourcesContent":["/**\n * Deploy-target helpers — resolve framework-specific install paths.\n *\n * This module contains only deploy path resolution. All catalog, repository,\n * and history I/O has moved to @skaile/asset-manager (project-local).\n */\n\nimport { lstatSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { join, resolve } from \"node:path\";\nimport { globalSkaileDir } from \"./cache-paths.js\";\nimport type { DriverTarget } from \"./driver-targets.js\";\nimport { type AiComponent, DRIVER_TARGETS } from \"./driver-targets.js\";\n\n// ── Deploy-target helpers ─────────────────────────────────────────────────────\n\n/**\n * Resolve the base deploy directory for an asset kind in a given driver target + scope.\n * For local scope, the path is relative to `cwd` (defaults to `process.cwd()`).\n * For global scope, `~` is expanded to the home directory.\n *\n * @param kind - Asset component type (e.g. `\"skill\"`, `\"agent\"`)\n * @param target - Driver target identifier (e.g. `\"claude-code\"`, `\"omp\"`)\n * @param globalInstall - `true` for user-global install, `false` for project-local\n * @param cwd - Working directory for project-local installs (default: `process.cwd()`)\n * @returns Absolute path to the base deploy directory\n * @throws When `target` is not found in `DRIVER_TARGETS`\n * @docLink packages/core/concepts#deployed-base\n */\nexport function deployedBase(\n  kind: AiComponent,\n  target: DriverTarget,\n  globalInstall: boolean,\n  cwd?: string,\n): string {\n  const targetMap = DRIVER_TARGETS[target];\n  if (!targetMap) throw new Error(`Unknown deploy target: '${target}'`);\n  const scope = globalInstall ? \"global\" : \"local\";\n  const paths = targetMap[scope];\n  const destStr = paths[kind] ?? paths.skill ?? \"\";\n  if (globalInstall) {\n    // `~/.skaile/...` is skaile's own per-user root, so it follows `$SKAILE_HOME`;\n    // every other `~/...` is a driver's home dir (`~/.claude`, `~/.omp`, ...).\n    if (destStr === \"~/.skaile\" || destStr.startsWith(\"~/.skaile/\")) {\n      return join(globalSkaileDir(), destStr.slice(\"~/.skaile\".length));\n    }\n    return destStr.replace(/^~/, homedir());\n  }\n  return resolve(cwd ?? process.cwd(), destStr);\n}\n\n/**\n * Return the full deploy path for a named asset: `<deployedBase>/<name>`.\n *\n * @param kind - Asset component type\n * @param name - Asset name (becomes the directory/file name under the base)\n * @param target - Driver target identifier\n * @param globalInstall - `true` for user-global, `false` for project-local\n * @param cwd - Working directory for local installs\n * @returns Absolute path to the asset's deploy directory\n * @docLink packages/core/concepts#deployed-dir\n */\nexport function deployedDir(\n  kind: AiComponent,\n  name: string,\n  target: DriverTarget,\n  globalInstall: boolean,\n  cwd?: string,\n): string {\n  return join(deployedBase(kind, target, globalInstall, cwd), name);\n}\n\n/**\n * Check whether an asset is already deployed at its expected location.\n * Uses `lstatSync` so symlinks are treated as deployed.\n *\n * @param kind - Asset component type\n * @param name - Asset name\n * @param target - Driver target identifier\n * @param globalInstall - `true` for user-global, `false` for project-local\n * @param cwd - Working directory for local installs\n * @returns `true` if the deploy path exists, `false` otherwise\n * @docLink packages/core/concepts#is-deployed\n */\nexport function isDeployed(\n  kind: AiComponent,\n  name: string,\n  target: DriverTarget,\n  globalInstall: boolean,\n  cwd?: string,\n): boolean {\n  try {\n    lstatSync(deployedDir(kind, name, target, globalInstall, cwd));\n    return true;\n  } catch {\n    return false;\n  }\n}\n"]}

package/dist/{chunk-UVOJSWD2.js → chunk-Y7UBRRKG.js}

@@ -1,13 +1,12 @@
 import { AssetKindRegistryFrozenError, AssetKindConflictError, AssetKindPatternConflictError, AssetKindPathAmbiguityError } from './chunk-ZDKJHQY2.js';
-import { decodeSkaileManifest, SKAILE_MANIFEST_FILENAME } from './chunk-AG44ZJ7W.js';
+import { sha256Hex, decodeSkaileManifest, SKAILE_MANIFEST_FILENAME, compositeSha256 } from './chunk-SR4RFKHM.js';
 import { readPluginGroupings } from './chunk-RVRB27AN.js';
-import { parseFrontmatter } from './chunk-DXUQCMVT.js';
-import { isValidAssetName } from './chunk-43ZBF3WH.js';
+import { parseFrontmatter } from './chunk-LFMX2UEF.js';
+import { isValidAssetName } from './chunk-WX74MVNA.js';
 import { validatePersona, validateRuleset, validateSkill, validateAgent, validateConnector, validateMcpServer, validateContract, validatePrompt, validatePreset } from './chunk-5CYEWBPB.js';
 import * as fs from 'fs';
 import * as path from 'path';
 import * as yaml from 'js-yaml';
-import * as crypto from 'crypto';
 import * as z from 'zod';
 
 // discovery/src/asset-kind-registry.ts
@@ -509,43 +508,66 @@ var BUILTIN_PROVIDERS = [
   // Composition entity (discoverable, not in AssetKind enum)
   presetProvider
 ];
-function computeDeterministicHash(assetRoot, files) {
-  const hash = crypto.createHash("sha256");
-  const sorted = [...files].sort();
-  for (const file of sorted) {
-    const fullPath = path.join(assetRoot, file);
-    try {
-      hash.update(file);
-      hash.update("\0");
-      const content = fs.readFileSync(fullPath);
-      hash.update(content);
-      hash.update("\0");
-    } catch {
-    }
-  }
-  return hash.digest("hex");
+function repoRelativePath(assetRootRelative, file) {
+  return path.posix.join(assetRootRelative.replace(/\\/g, "/"), file.replace(/\\/g, "/"));
+}
+function hashRows(rows) {
+  return compositeSha256(rows);
 }
-function computeDeterministicHashDetailed(assetRoot, files) {
-  const hash = crypto.createHash("sha256");
-  const sorted = [...files].sort();
+function computeDeterministicHashDetailed(assetRoot, files, assetRootRelative = "") {
+  const rows = [];
   const present = [];
   const missing = [];
-  for (const file of sorted) {
-    const fullPath = path.join(assetRoot, file);
-    let content = null;
+  for (const file of [...files].sort()) {
+    let content;
     try {
-      content = fs.readFileSync(fullPath);
+      content = fs.readFileSync(path.join(assetRoot, file));
     } catch {
       missing.push(file);
       continue;
     }
-    hash.update(file);
-    hash.update("\0");
-    hash.update(content);
-    hash.update("\0");
+    rows.push({ path: repoRelativePath(assetRootRelative, file), sha256: sha256Hex(content) });
     present.push(file);
   }
-  return { sha256: hash.digest("hex"), present, missing };
+  return { sha256: hashRows(rows), present, missing };
+}
+function computeDeterministicHash(assetRoot, files, assetRootRelative = "") {
+  return computeDeterministicHashDetailed(assetRoot, files, assetRootRelative).sha256;
+}
+function parseManifestFile(relativePath, text) {
+  try {
+    if (relativePath.endsWith(".md")) {
+      const { data } = parseFrontmatter(text);
+      if (!data || Object.keys(data).length === 0) {
+        return {
+          ok: false,
+          reason: "no parsable YAML frontmatter (expected a `---` block with at least one key)"
+        };
+      }
+      return { ok: true, data };
+    }
+    if (relativePath.endsWith(".yaml") || relativePath.endsWith(".yml")) {
+      const parsed = yaml.load(text);
+      if (typeof parsed === "object" && parsed !== null) {
+        return { ok: true, data: parsed };
+      }
+      return { ok: false, reason: "not a YAML mapping" };
+    }
+    if (relativePath.endsWith(".json")) {
+      const parsed = JSON.parse(text);
+      if (typeof parsed === "object" && parsed !== null) {
+        return { ok: true, data: parsed };
+      }
+      return { ok: false, reason: "not a JSON object" };
+    }
+    return { ok: false, reason: "unsupported manifest file type" };
+  } catch (e) {
+    return { ok: false, reason: e instanceof Error ? e.message : String(e) };
+  }
+}
+function parseManifestText(relativePath, text) {
+  const res = parseManifestFile(relativePath, text);
+  return res.ok ? res.data : null;
 }
 var SEMVER_RE = /^\d+\.\d+\.\d+(?:-[a-zA-Z0-9.-]+)?(?:\+[a-zA-Z0-9.-]+)?$/;
 var PublisherOverrideSchema = z.object({
@@ -890,7 +912,7 @@ function processEntry(rootPath, entry, registry) {
     });
     return { asset: null, errors, warnings };
   }
-  const manifestFileRel = pickManifestFile(entry.path, files, entry.kind, registry);
+  const manifestFileRel = pickManifestFile(assetRoot, entry.path, files, entry, registry);
   const manifestAbsPath = path.join(assetRoot, manifestFileRel);
   const missing = [];
   for (const file of files) {
@@ -929,7 +951,8 @@ function processEntry(rootPath, entry, registry) {
   }
   const { sha256: computedHash, missing: hashMissing } = computeDeterministicHashDetailed(
     assetRoot,
-    files
+    files,
+    assetRootRelative
   );
   if (hashMissing.length > 0) {
     errors.push({
@@ -992,14 +1015,21 @@ var MANIFEST_FILENAMES = /* @__PURE__ */ new Set([
   "RULESET.md"
 ]);
 var MANIFEST_SUFFIXES = [".flow.yaml", ".flow.json", ".prompt.md", ".preset.yaml"];
-function pickManifestFile(assetPath, files, kind, registry) {
-  const provider = registry.getProvider(kind);
+function pickManifestFile(assetRoot, assetPath, files, entry, registry) {
+  const provider = registry.getProvider(entry.kind);
   if (provider) {
-    for (const file of files) {
-      if (provider.matchesPath(path.join(assetPath, file).replace(/\\/g, "/"))) {
-        return file;
-      }
+    const matches = files.filter(
+      (file) => provider.matchesPath(path.join(assetPath, file).replace(/\\/g, "/"))
+    );
+    if (matches.length > 1 && sharesItsFolder(entry.kind, registry)) {
+      const named = matches.find((file) => path.basename(file).startsWith(`${entry.name}.`));
+      if (named) return named;
+      const declared = matches.find(
+        (file) => parseManifest(path.join(assetRoot, file))?.name === entry.name
+      );
+      if (declared) return declared;
     }
+    if (matches[0]) return matches[0];
   }
   for (const file of files) {
     if (MANIFEST_FILENAMES.has(path.basename(file))) return file;
@@ -1007,6 +1037,10 @@ function pickManifestFile(assetPath, files, kind, registry) {
   }
   return files[0];
 }
+function sharesItsFolder(kind, registry) {
+  const patterns = registry.getProvider(kind)?.discoveryPatterns ?? [];
+  return patterns.some((p) => (p.split("/").pop() ?? "").includes("*"));
+}
 function expandRootFiles(assetRoot) {
   const out = [];
   const walk = (absDir, relDir) => {
@@ -1031,23 +1065,7 @@ function expandRootFiles(assetRoot) {
 }
 function parseManifest(absPath) {
   try {
-    const content = fs.readFileSync(absPath, "utf-8");
-    if (absPath.endsWith(".md")) {
-      const { data } = parseFrontmatter(content);
-      if (!data || Object.keys(data).length === 0) return null;
-      return data;
-    }
-    if (absPath.endsWith(".yaml") || absPath.endsWith(".yml")) {
-      const parsed = yaml.load(content);
-      if (typeof parsed === "object" && parsed !== null) {
-        return parsed;
-      }
-      return null;
-    }
-    if (absPath.endsWith(".json")) {
-      return JSON.parse(content);
-    }
-    return null;
+    return parseManifestText(absPath, fs.readFileSync(absPath, "utf-8"));
   } catch {
     return null;
   }
@@ -1292,7 +1310,7 @@ function discoverAssetsInTree(rootPath, optionsOrSourceConfig) {
     seen.add(dedupKey);
     processDiscoveredEntry(
       { absPath, relativePath, kind },
-      { registry, sourceConfig, atomization, fallbackPublisher },
+      { registry, sourceConfig, atomization, fallbackPublisher, rootPath },
       { assets, errors, warnings, allEdges }
     );
   }
@@ -1354,7 +1372,10 @@ function processDiscoveredEntry(entry, ctx, acc) {
   try {
     const manifest = parseManifest2(absPath);
     if (!manifest) {
-      acc.errors.push({ path: relativePath, error: "Failed to parse manifest" });
+      acc.errors.push({
+        path: relativePath,
+        error: `ManifestSchemaError: failed to parse manifest file ${relativePath}`
+      });
       return;
     }
     const publisher = resolvePublisher(relativePath, sourceConfig, ctx.fallbackPublisher);
@@ -1366,7 +1387,11 @@ function processDiscoveredEntry(entry, ctx, acc) {
       files: [path.basename(absPath)]
     };
     applyAtomizationPolicy(atomization, relativePath, fileFilter, registry, acc.warnings);
-    const sha256 = computeDeterministicHash(fileFilter.assetRoot, fileFilter.files);
+    const sha256 = computeDeterministicHash(
+      fileFilter.assetRoot,
+      fileFilter.files,
+      path.relative(ctx.rootPath, fileFilter.assetRoot)
+    );
     const requires = registry.extractRequires(kind, ref, manifest);
     acc.allEdges.push(...requires);
     acc.assets.push({
@@ -1469,23 +1494,7 @@ function* walkTree(rootDir) {
 }
 function parseManifest2(absPath) {
   try {
-    const content = fs.readFileSync(absPath, "utf-8");
-    if (absPath.endsWith(".md")) {
-      const { data } = parseFrontmatter(content);
-      if (!data || Object.keys(data).length === 0) return null;
-      return data;
-    }
-    if (absPath.endsWith(".yaml") || absPath.endsWith(".yml")) {
-      const parsed = yaml.load(content);
-      if (typeof parsed === "object" && parsed !== null) {
-        return parsed;
-      }
-      return null;
-    }
-    if (absPath.endsWith(".json")) {
-      return JSON.parse(content);
-    }
-    return null;
+    return parseManifestText(absPath, fs.readFileSync(absPath, "utf-8"));
   } catch {
     return null;
   }
@@ -1638,7 +1647,10 @@ async function buildAssetFromBlob(relativePath, kind, blobByPath, fetchBlob, res
   const manifestText = manifestBytes.toString("utf-8");
   const manifest = parseManifestText(relativePath, manifestText);
   if (!manifest) {
-    errors.push({ path: relativePath, error: "Failed to parse manifest" });
+    errors.push({
+      path: relativePath,
+      error: `ManifestSchemaError: failed to parse manifest file ${relativePath}`
+    });
     return null;
   }
   const publisher = resolvePublisher2(relativePath, resolvedSourceConfig, fallbackPublisher);
@@ -1658,7 +1670,12 @@ async function buildAssetFromBlob(relativePath, kind, blobByPath, fetchBlob, res
   );
   let sha256;
   try {
-    sha256 = await computeDeterministicHashFromTree(fileFilter, blobByPath, fetchBlob);
+    sha256 = await computeDeterministicHashFromTree(
+      fileFilter.assetRoot,
+      fileFilter.files,
+      blobByPath,
+      fetchBlob
+    );
   } catch (err) {
     errors.push({
       path: relativePath,
@@ -1684,28 +1701,6 @@ async function buildAssetFromBlob(relativePath, kind, blobByPath, fetchBlob, res
     requires
   };
 }
-function parseManifestText(relativePath, text) {
-  try {
-    if (relativePath.endsWith(".md")) {
-      const { data } = parseFrontmatter(text);
-      if (!data || Object.keys(data).length === 0) return null;
-      return data;
-    }
-    if (relativePath.endsWith(".yaml") || relativePath.endsWith(".yml")) {
-      const parsed = yaml.load(text);
-      if (typeof parsed === "object" && parsed !== null) {
-        return parsed;
-      }
-      return null;
-    }
-    if (relativePath.endsWith(".json")) {
-      return JSON.parse(text);
-    }
-    return null;
-  } catch {
-    return null;
-  }
-}
 function resolvePublisher2(relativePath, sourceConfig, fallbackPublisher) {
   if (sourceConfig) {
     for (const override of sourceConfig.publisher_overrides) {
@@ -1818,25 +1813,17 @@ function connectorFilterVirtual(dir, manifestName, blobByPath) {
   if (blobByPath.has(joinPosix(dir, "adapter.ts"))) files.add("adapter.ts");
   return { assetRoot: dir, files: [...files].sort() };
 }
-async function computeDeterministicHashFromTree(fileFilter, blobByPath, fetchBlob) {
-  const hash = crypto.createHash("sha256");
-  const sorted = [...fileFilter.files].sort();
-  for (const file of sorted) {
-    const fullPath = joinPosix(fileFilter.assetRoot, file);
+async function computeDeterministicHashFromTree(assetRoot, files, blobByPath, fetchBlob) {
+  const rows = [];
+  for (const file of [...files].sort()) {
+    const fullPath = joinPosix(assetRoot, file);
     const entry = blobByPath.get(fullPath);
     if (!entry) continue;
-    hash.update(file);
-    hash.update("\0");
-    let bytes;
-    try {
-      bytes = await fetchAsBuffer(fetchBlob, entry.sha);
-    } catch {
-      bytes = null;
-    }
-    if (bytes) hash.update(bytes);
-    hash.update("\0");
+    const bytes = await fetchAsBuffer(fetchBlob, entry.sha);
+    if (!bytes) throw new Error(`blob for ${fullPath} could not be fetched`);
+    rows.push({ path: path.posix.normalize(fullPath), sha256: sha256Hex(bytes) });
   }
-  return hash.digest("hex");
+  return hashRows(rows);
 }
 var TREE_SCANNABLE_EXT = /* @__PURE__ */ new Set([".md", ".mdx", ".markdown", ".txt"]);
 async function prefetchAssetText(assetRoot, blobByPath, fetchBlob) {
@@ -2127,7 +2114,7 @@ async function fetchAndParseManifestTree(manifestFull, manifestFileRel, assetRoo
 async function computeAndVerifyHashTree(entry, files, assetRootRelative, blobByPath, fetchBlob, errors, warnings) {
   let computedHash;
   try {
-    computedHash = await computeManifestHashTree(entry.path, files, blobByPath, fetchBlob);
+    computedHash = await computeDeterministicHashFromTree(entry.path, files, blobByPath, fetchBlob);
   } catch (err) {
     errors.push({
       path: assetRootRelative,
@@ -2189,21 +2176,6 @@ function expandRootFilesTree(assetPath, blobByPath) {
   }
   return out.sort();
 }
-async function computeManifestHashTree(assetPath, files, blobByPath, fetchBlob) {
-  const hash = crypto.createHash("sha256");
-  const sorted = [...files].sort();
-  for (const file of sorted) {
-    const full = joinPosix(assetPath, file);
-    const blob = blobByPath.get(full);
-    if (!blob) continue;
-    hash.update(file);
-    hash.update("\0");
-    const bytes = await fetchAsBuffer(fetchBlob, blob.sha);
-    if (bytes) hash.update(bytes);
-    hash.update("\0");
-  }
-  return hash.digest("hex");
-}
 function validateRequiresSyntax2(requires) {
   const errors = [];
   const RE = /^@[\w-]+\/[\w.-]+(?:@.+)?$/;
@@ -2216,6 +2188,6 @@ function validateRequiresSyntax2(requires) {
 // discovery/src/index.ts
 var VERSION = "0.0.0";
 
-export { AGENT_COMPANION_DIRS, AssetKindRegistry, BUILTIN_PROVIDERS, DEFAULT_ATOMIZATION_POLICY, SEMVER_RE, SKILL_COMPANION_DIRS, SourceConfigSchema, VERSION, agentProvider, barePublisher, buildRequiresGraph, closeOverReferences, computeDeterministicHash, computeDeterministicHashDetailed, connectorProvider, contractProvider, createDefaultRegistry, createNodeAssetFs, decodeManifestSourceConfig, detectCycles, discoverAssetsInTree, discoverAssetsInTreeEntries, discoverFromManifest, extractPathCandidates, extractRequires, extractSlashCommands, isExcludedDevPath, isManifestMode, lintUncoveredReferences, loadMergedSourceConfig, loadMergedSourceConfigFromFile, loadSourceConfig, manifestToSourceConfig, mcpServerProvider, mergeSourceConfigs, parseSourceConfig, personaProvider, presetProvider, promptProvider, readManifestSourceConfig, rulesetProvider, scanAssetReferences, scanSlashCommandNames, skillProvider, validateSourceConfig };
-//# sourceMappingURL=chunk-UVOJSWD2.js.map
-//# sourceMappingURL=chunk-UVOJSWD2.js.map
+export { AGENT_COMPANION_DIRS, AssetKindRegistry, BUILTIN_PROVIDERS, DEFAULT_ATOMIZATION_POLICY, SEMVER_RE, SKILL_COMPANION_DIRS, SourceConfigSchema, VERSION, agentProvider, barePublisher, buildRequiresGraph, closeOverReferences, computeDeterministicHash, computeDeterministicHashDetailed, connectorProvider, contractProvider, createDefaultRegistry, createNodeAssetFs, decodeManifestSourceConfig, detectCycles, discoverAssetsInTree, discoverAssetsInTreeEntries, discoverFromManifest, extractPathCandidates, extractRequires, extractSlashCommands, isExcludedDevPath, isManifestMode, lintUncoveredReferences, loadMergedSourceConfig, loadMergedSourceConfigFromFile, loadSourceConfig, manifestToSourceConfig, mcpServerProvider, mergeSourceConfigs, parseManifestFile, parseSourceConfig, personaProvider, presetProvider, promptProvider, readManifestSourceConfig, rulesetProvider, scanAssetReferences, scanSlashCommandNames, sharesItsFolder, skillProvider, validateSourceConfig };
+//# sourceMappingURL=chunk-Y7UBRRKG.js.map
+//# sourceMappingURL=chunk-Y7UBRRKG.js.map