@skaile/workspaces 5.11.0 → 5.13.0

package/dist/plugin-store-AGQDMING.js

@@ -1,149 +0,0 @@
-import { pluginRegistry } from './chunk-6E6PKKAD.js';
-import { readPluginsLockSlice } from './chunk-PBBPZYVG.js';
-import './chunk-4GY63JU6.js';
-import './chunk-EDYHEMJA.js';
-import './chunk-PMECEZK3.js';
-import './chunk-5BEFNLOR.js';
-import './chunk-A2ULN3KX.js';
-import './chunk-ALEYHUC5.js';
-import './chunk-L5VSIPQD.js';
-import './chunk-CPSIPIX7.js';
-import './chunk-ZPWTOUTK.js';
-import './chunk-RVRB27AN.js';
-import './chunk-SBSA3IQA.js';
-import './chunk-BNMZVPYA.js';
-import './chunk-ICSCSM5D.js';
-import './chunk-DALV4HHP.js';
-import './chunk-MJHSLODD.js';
-import './chunk-C3CAXQMA.js';
-import './chunk-BOFL7GIF.js';
-import './chunk-NSBPE2FW.js';
-import { pathToFileURL } from 'url';
-import { join } from 'path';
-import { createHash } from 'crypto';
-import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'fs';
-
-function pluginsDir(projectDir) {
-  return join(projectDir, ".skaile", "plugins");
-}
-function pluginsPkgJson(projectDir) {
-  return join(pluginsDir(projectDir), "package.json");
-}
-function nodeModulesDir(projectDir) {
-  return join(pluginsDir(projectDir), "node_modules");
-}
-function reconcileHashFile(projectDir) {
-  return join(pluginsDir(projectDir), ".reconcile-hash");
-}
-function resolvePluginEntry(projectDir, pkgName) {
-  return join(nodeModulesDir(projectDir), pkgName);
-}
-
-// cli/src/plugin-store/spec.ts
-function parseSpec(spec) {
-  const trimmed = spec.trim();
-  if (!trimmed) throw new Error("parseSpec: empty specifier");
-  const at = trimmed.lastIndexOf("@");
-  if (at <= 0) {
-    return { name: trimmed, range: "*" };
-  }
-  const name = trimmed.slice(0, at);
-  const range = trimmed.slice(at + 1);
-  return { name, range: range.length > 0 ? range : "*" };
-}
-function specName(spec) {
-  return parseSpec(spec).name;
-}
-
-// cli/src/plugin-store/load.ts
-async function loadPlugins(projectDir, plugins, registry = pluginRegistry, opts = {}) {
-  const loaded = [];
-  const failed = [];
-  for (const spec of plugins) {
-    try {
-      const { name } = parseSpec(spec);
-      const entry = resolvePluginEntry(projectDir, name);
-      const mod = await import(pathToFileURL(entry).href);
-      if (typeof mod.register !== "function") {
-        throw new Error(`plugin "${name}" does not export a register() function`);
-      }
-      mod.register(registry);
-      loaded.push(spec);
-    } catch (err) {
-      const message = err instanceof Error ? err.message : String(err);
-      failed.push({ spec, error: `failed to load plugin "${spec}": ${message}` });
-      opts.log?.warn(`plugin load failed: ${spec}`, { error: message });
-    }
-  }
-  return { loaded, failed };
-}
-var defaultInstall = async (dir) => {
-  const { portableSpawn } = await import('./core/index.js');
-  const hasLock = existsSync(`${dir}/bun.lock`) || existsSync(`${dir}/bun.lockb`) || existsSync(`${dir}/package-lock.json`);
-  const args = hasLock ? ["bun", "install", "--frozen-lockfile"] : ["bun", "install"];
-  const proc = portableSpawn(args, { cwd: dir });
-  const chunks = [];
-  const decoder = new TextDecoder();
-  const pump = async (stream) => {
-    const reader = stream.getReader();
-    for (; ; ) {
-      const { done, value } = await reader.read();
-      if (done) break;
-      if (value) chunks.push(decoder.decode(value, { stream: true }));
-    }
-  };
-  await Promise.all([pump(proc.stdout), pump(proc.stderr)]);
-  const code = await proc.exited;
-  return { ok: code === 0, output: chunks.join("") };
-};
-function writePackageJson(projectDir, plugins) {
-  const dependencies = {};
-  for (const spec of plugins) {
-    const { name, range } = parseSpec(spec);
-    dependencies[name] = range;
-  }
-  const pkg = {
-    name: "skaile-project-plugins",
-    private: true,
-    dependencies
-  };
-  mkdirSync(pluginsDir(projectDir), { recursive: true });
-  writeFileSync(pluginsPkgJson(projectDir), `${JSON.stringify(pkg, null, 2)}
-`);
-}
-async function reconcilePlugins(projectDir, plugins, opts = {}) {
-  if (plugins.length === 0) {
-    return { changed: false, reason: "no-plugins" };
-  }
-  const lockSlice = opts.lockSlice ?? readPluginsLockSlice(projectDir);
-  const wantHash = createHash("sha256").update(JSON.stringify({ plugins: [...plugins].sort(), lock: lockSlice })).digest("hex");
-  const hashFile = reconcileHashFile(projectDir);
-  if (existsSync(hashFile)) {
-    const have = readFileSync(hashFile, "utf8").trim();
-    if (have === wantHash) {
-      return { changed: false, reason: "up-to-date" };
-    }
-  }
-  writePackageJson(projectDir, plugins);
-  const install = opts.runInstall ?? defaultInstall;
-  const result = await install(pluginsDir(projectDir));
-  if (!result.ok) {
-    throw new Error(`plugin install failed:
-${result.output}`);
-  }
-  writeFileSync(hashFile, wantHash);
-  return { changed: true, reason: "reconciled" };
-}
-
-// cli/src/plugin-store/index.ts
-async function ensurePluginsLoaded(projectDir, plugins, registry = pluginRegistry, opts = {}) {
-  if (!plugins || plugins.length === 0) {
-    return { loaded: [], failed: [] };
-  }
-  await reconcilePlugins(projectDir, plugins, opts);
-  return loadPlugins(projectDir, plugins, registry, { log: opts.log });
-}
-
-export { ensurePluginsLoaded, loadPlugins, reconcilePlugins, specName };
-//# sourceMappingURL=plugin-store-AGQDMING.js.map
-//# sourceMappingURL=plugin-store-AGQDMING.js.map

package/dist/plugin-store-AGQDMING.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../cli/src/plugin-store/paths.ts","../cli/src/plugin-store/spec.ts","../cli/src/plugin-store/load.ts","../cli/src/plugin-store/reconcile.ts","../cli/src/plugin-store/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAUO,SAAS,WAAW,UAAA,EAA4B;AACrD,EAAA,OAAO,IAAA,CAAK,UAAA,EAAY,SAAA,EAAW,SAAS,CAAA;AAC9C;AAGO,SAAS,eAAe,UAAA,EAA4B;AACzD,EAAA,OAAO,IAAA,CAAK,UAAA,CAAW,UAAU,CAAA,EAAG,cAAc,CAAA;AACpD;AAGO,SAAS,eAAe,UAAA,EAA4B;AACzD,EAAA,OAAO,IAAA,CAAK,UAAA,CAAW,UAAU,CAAA,EAAG,cAAc,CAAA;AACpD;AAGO,SAAS,kBAAkB,UAAA,EAA4B;AAC5D,EAAA,OAAO,IAAA,CAAK,UAAA,CAAW,UAAU,CAAA,EAAG,iBAAiB,CAAA;AACvD;AAOO,SAAS,kBAAA,CAAmB,YAAoB,OAAA,EAAyB;AAC9E,EAAA,OAAO,IAAA,CAAK,cAAA,CAAe,UAAU,CAAA,EAAG,OAAO,CAAA;AACjD;;;ACbO,SAAS,UAAU,IAAA,EAA0B;AAClD,EAAA,MAAM,OAAA,GAAU,KAAK,IAAA,EAAK;AAC1B,EAAA,IAAI,CAAC,OAAA,EAAS,MAAM,IAAI,MAAM,4BAA4B,CAAA;AAI1D,EAAA,MAAM,EAAA,GAAK,OAAA,CAAQ,WAAA,CAAY,GAAG,CAAA;AAClC,EAAA,IAAI,MAAM,CAAA,EAAG;AACX,IAAA,OAAO,EAAE,IAAA,EAAM,OAAA,EAAS,KAAA,EAAO,GAAA,EAAI;AAAA,EACrC;AACA,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA;AAChC,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,KAAA,CAAM,EAAA,GAAK,CAAC,CAAA;AAClC,EAAA,OAAO,EAAE,IAAA,EAAM,KAAA,EAAO,MAAM,MAAA,GAAS,CAAA,GAAI,QAAQ,GAAA,EAAI;AACvD;AAGO,SAAS,SAAS,IAAA,EAAsB;AAC7C,EAAA,OAAO,SAAA,CAAU,IAAI,CAAA,CAAE,IAAA;AACzB;;;ACDA,eAAsB,YACpB,UAAA,EACA,OAAA,EACA,WAA2B,cAAA,EAC3B,IAAA,GAAoB,EAAC,EACA;AACrB,EAAA,MAAM,SAAmB,EAAC;AAC1B,EAAA,MAAM,SAA4C,EAAC;AAEnD,EAAA,KAAA,MAAW,QAAQ,OAAA,EAAS;AAC1B,IAAA,IAAI;AACF,MAAA,MAAM,EAAE,IAAA,EAAK,GAAI,SAAA,CAAU,IAAI,CAAA;AAC/B,MAAA,MAAM,KAAA,GAAQ,kBAAA,CAAmB,UAAA,EAAY,IAAI,CAAA;AACjD,MAAA,MAAM,GAAA,GAAO,MAAM,OAAO,aAAA,CAAc,KAAK,CAAA,CAAE,IAAA,CAAA;AAC/C,MAAA,IAAI,OAAO,GAAA,CAAI,QAAA,KAAa,UAAA,EAAY;AACtC,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,QAAA,EAAW,IAAI,CAAA,uCAAA,CAAyC,CAAA;AAAA,MAC1E;AACA,MAAA,GAAA,CAAI,SAAS,QAAQ,CAAA;AACrB,MAAA,MAAA,CAAO,KAAK,IAAI,CAAA;AAAA,IAClB,SAAS,GAAA,EAAK;AACZ,MAAA,MAAM,UAAU,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAC/D,MAAA,MAAA,CAAO,IAAA,CAAK,EAAE,IAAA,EAAM,KAAA,EAAO,0BAA0B,IAAI,CAAA,GAAA,EAAM,OAAO,CAAA,CAAA,EAAI,CAAA;AAC1E,MAAA,IAAA,CAAK,GAAA,EAAK,KAAK,CAAA,oBAAA,EAAuB,IAAI,IAAI,EAAE,KAAA,EAAO,SAAS,CAAA;AAAA,IAClE;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,QAAQ,MAAA,EAAO;AAC1B;ACrBO,IAAM,cAAA,GAA4B,OAAO,GAAA,KAAQ;AACtD,EAAA,MAAM,EAAE,aAAA,EAAc,GAAI,MAAM,OAAO,iBAAyB,CAAA;AAChE,EAAA,MAAM,OAAA,GACJ,UAAA,CAAW,CAAA,EAAG,GAAG,WAAW,CAAA,IAC5B,UAAA,CAAW,CAAA,EAAG,GAAG,CAAA,UAAA,CAAY,CAAA,IAC7B,UAAA,CAAW,CAAA,EAAG,GAAG,CAAA,kBAAA,CAAoB,CAAA;AACvC,EAAA,MAAM,IAAA,GAAO,UAAU,CAAC,KAAA,EAAO,WAAW,mBAAmB,CAAA,GAAI,CAAC,KAAA,EAAO,SAAS,CAAA;AAClF,EAAA,MAAM,OAAO,aAAA,CAAc,IAAA,EAAM,EAAE,GAAA,EAAK,KAAK,CAAA;AAC7C,EAAA,MAAM,SAAmB,EAAC;AAC1B,EAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAChC,EAAA,MAAM,IAAA,GAAO,OAAO,MAAA,KAAuC;AACzD,IAAA,MAAM,MAAA,GAAS,OAAO,SAAA,EAAU;AAChC,IAAA,WAAS;AACP,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,MAAM,OAAO,IAAA,EAAK;AAC1C,MAAA,IAAI,IAAA,EAAM;AACV,MAAA,IAAI,KAAA,EAAO,MAAA,CAAO,IAAA,CAAK,OAAA,CAAQ,MAAA,CAAO,OAAO,EAAE,MAAA,EAAQ,IAAA,EAAM,CAAC,CAAA;AAAA,IAChE;AAAA,EACF,CAAA;AACA,EAAA,MAAM,OAAA,CAAQ,GAAA,CAAI,CAAC,IAAA,CAAK,IAAA,CAAK,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,CAAK,MAAM,CAAC,CAAC,CAAA;AACxD,EAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,MAAA;AACxB,EAAA,OAAO,EAAE,IAAI,IAAA,KAAS,CAAA,EAAG,QAAQ,MAAA,CAAO,IAAA,CAAK,EAAE,CAAA,EAAE;AACnD,CAAA;AAGA,SAAS,gBAAA,CAAiB,YAAoB,OAAA,EAAyB;AACrE,EAAA,MAAM,eAAuC,EAAC;AAC9C,EAAA,KAAA,MAAW,QAAQ,OAAA,EAAS;AAC1B,IAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,UAAU,IAAI,CAAA;AACtC,IAAA,YAAA,CAAa,IAAI,CAAA,GAAI,KAAA;AAAA,EACvB;AACA,EAAA,MAAM,GAAA,GAAM;AAAA,IACV,IAAA,EAAM,wBAAA;AAAA,IACN,OAAA,EAAS,IAAA;AAAA,IACT;AAAA,GACF;AACA,EAAA,SAAA,CAAU,WAAW,UAAU,CAAA,EAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AACrD,EAAA,aAAA,CAAc,cAAA,CAAe,UAAU,CAAA,EAAG,CAAA,EAAG,KAAK,SAAA,CAAU,GAAA,EAAK,IAAA,EAAM,CAAC,CAAC;AAAA,CAAI,CAAA;AAC/E;AAUA,eAAsB,gBAAA,CACpB,UAAA,EACA,OAAA,EACA,IAAA,GAAyB,EAAC,EACA;AAC1B,EAAA,IAAI,OAAA,CAAQ,WAAW,CAAA,EAAG;AACxB,IAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,MAAA,EAAQ,YAAA,EAAa;AAAA,EAChD;AAEA,EAAA,MAAM,SAAA,GAAY,IAAA,CAAK,SAAA,IAAa,oBAAA,CAAqB,UAAU,CAAA;AACnE,EAAA,MAAM,QAAA,GAAW,WAAW,QAAQ,CAAA,CACjC,OAAO,IAAA,CAAK,SAAA,CAAU,EAAE,OAAA,EAAS,CAAC,GAAG,OAAO,CAAA,CAAE,MAAK,EAAG,IAAA,EAAM,WAAW,CAAC,CAAA,CACxE,MAAA,CAAO,KAAK,CAAA;AAEf,EAAA,MAAM,QAAA,GAAW,kBAAkB,UAAU,CAAA;AAC7C,EAAA,IAAI,UAAA,CAAW,QAAQ,CAAA,EAAG;AACxB,IAAA,MAAM,IAAA,GAAO,YAAA,CAAa,QAAA,EAAU,MAAM,EAAE,IAAA,EAAK;AACjD,IAAA,IAAI,SAAS,QAAA,EAAU;AACrB,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,MAAA,EAAQ,YAAA,EAAa;AAAA,IAChD;AAAA,EACF;AAEA,EAAA,gBAAA,CAAiB,YAAY,OAAO,CAAA;AAEpC,EAAA,MAAM,OAAA,GAAU,KAAK,UAAA,IAAc,cAAA;AACnC,EAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,UAAA,CAAW,UAAU,CAAC,CAAA;AACnD,EAAA,IAAI,CAAC,OAAO,EAAA,EAAI;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA;AAAA,EAA2B,MAAA,CAAO,MAAM,CAAA,CAAE,CAAA;AAAA,EAC5D;AAEA,EAAA,aAAA,CAAc,UAAU,QAAQ,CAAA;AAChC,EAAA,OAAO,EAAE,OAAA,EAAS,IAAA,EAAM,MAAA,EAAQ,YAAA,EAAa;AAC/C;;;ACxFA,eAAsB,oBACpB,UAAA,EACA,OAAA,EACA,WAA2B,cAAA,EAC3B,IAAA,GAA6B,EAAC,EACT;AACrB,EAAA,IAAI,CAAC,OAAA,IAAW,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG;AACpC,IAAA,OAAO,EAAE,MAAA,EAAQ,EAAC,EAAG,MAAA,EAAQ,EAAC,EAAE;AAAA,EAClC;AACA,EAAA,MAAM,gBAAA,CAAiB,UAAA,EAAY,OAAA,EAAS,IAAI,CAAA;AAChD,EAAA,OAAO,WAAA,CAAY,YAAY,OAAA,EAAS,QAAA,EAAU,EAAE,GAAA,EAAK,IAAA,CAAK,KAAK,CAAA;AACrE","file":"plugin-store-AGQDMING.js","sourcesContent":["/**\n * Pure path helpers for the project-local plugin store.\n *\n * The store is a self-contained npm workspace owned by the CLI under\n * `<projectDir>/.skaile/plugins/`. Nothing here touches the filesystem.\n */\n\nimport { join } from \"node:path\";\n\n/** `<projectDir>/.skaile/plugins` — the store root. */\nexport function pluginsDir(projectDir: string): string {\n  return join(projectDir, \".skaile\", \"plugins\");\n}\n\n/** `<store>/package.json` — generated, never user-edited. */\nexport function pluginsPkgJson(projectDir: string): string {\n  return join(pluginsDir(projectDir), \"package.json\");\n}\n\n/** `<store>/node_modules` — where reconciled plugin packages land. */\nexport function nodeModulesDir(projectDir: string): string {\n  return join(pluginsDir(projectDir), \"node_modules\");\n}\n\n/** `<store>/.reconcile-hash` — SHA of plugins-list + lock slice; skip reinstall when unchanged. */\nexport function reconcileHashFile(projectDir: string): string {\n  return join(pluginsDir(projectDir), \".reconcile-hash\");\n}\n\n/**\n * Absolute path to a plugin package's entry directory under the store's\n * `node_modules`. Dynamic `import()` against this absolute path works inside\n * compiled binaries via `pathToFileURL`.\n */\nexport function resolvePluginEntry(projectDir: string, pkgName: string): string {\n  return join(nodeModulesDir(projectDir), pkgName);\n}\n","/**\n * Parse npm package specifiers from the `plugins:` list into name + range.\n *\n * The leading `@` of a scope is NOT a separator: only the last `@` at a\n * non-zero index splits the package name from its semver range.\n *   \"@skaile/provider-fly@^0.1.0\" → { name: \"@skaile/provider-fly\", range: \"^0.1.0\" }\n *   \"@skaile/connector-redis\"     → { name: \"@skaile/connector-redis\", range: \"*\" }\n *   \"lodash@^4\"                   → { name: \"lodash\", range: \"^4\" }\n */\n\n/** A parsed plugin specifier: package name plus a semver range (`\"*\"` when omitted). */\nexport interface PluginSpec {\n  name: string;\n  range: string;\n}\n\n/**\n * Parse a single plugin specifier into `{ name, range }`.\n *\n * @param spec - An npm specifier, e.g. `\"@skaile/provider-fly@^0.1.0\"` or `\"lodash\"`.\n * @returns The package name and semver range (range defaults to `\"*\"`).\n * @throws Error when the specifier is empty.\n */\nexport function parseSpec(spec: string): PluginSpec {\n  const trimmed = spec.trim();\n  if (!trimmed) throw new Error(\"parseSpec: empty specifier\");\n\n  // Find the version-separating `@` — the last one that is not the scope `@`\n  // at index 0. A bare `@scope/name` has its only `@` at index 0 (no range).\n  const at = trimmed.lastIndexOf(\"@\");\n  if (at <= 0) {\n    return { name: trimmed, range: \"*\" };\n  }\n  const name = trimmed.slice(0, at);\n  const range = trimmed.slice(at + 1);\n  return { name, range: range.length > 0 ? range : \"*\" };\n}\n\n/** Convenience: just the package name of a specifier. */\nexport function specName(spec: string): string {\n  return parseSpec(spec).name;\n}\n","/**\n * Runtime plugin loader: dynamic-import each reconciled plugin and let it\n * self-register into the `pluginRegistry`.\n *\n * Each plugin specifier resolves to an absolute path under the store's\n * `node_modules`; we import it via a `file://` URL so the import works inside\n * `bun --compile` binaries (which bundle only the literal-string switches, but\n * can still execute a `file://` import against the unpacked store on disk).\n * Failures are caught per-plugin so one broken plugin never aborts the rest.\n */\n\nimport { pathToFileURL } from \"node:url\";\nimport { type PluginRegistry, pluginRegistry } from \"@skaile/workspaces/plugin-registry\";\nimport type { Logger } from \"@skaile/workspaces/types\";\nimport { resolvePluginEntry } from \"./paths.js\";\nimport { parseSpec } from \"./spec.js\";\n\n/** Options for {@link loadPlugins}. */\nexport interface LoadOptions {\n  log?: Logger;\n}\n\n/** Result of a load pass: which specs registered and which failed. */\nexport interface LoadResult {\n  loaded: string[];\n  failed: { spec: string; error: string }[];\n}\n\n/** The self-registration entrypoint a plugin module is expected to export. */\ntype PluginModule = { register?: (registry: PluginRegistry) => void };\n\n/**\n * Load and register each plugin in `plugins` into `registry`.\n *\n * @param projectDir - Project root holding `.skaile/plugins/node_modules`.\n * @param plugins - The `skaile.yaml` `plugins:` list (npm specifiers).\n * @param registry - Registry to register into. Defaults to the process-wide `pluginRegistry`.\n * @param opts - Optional logger.\n * @returns Loaded specs + per-plugin failures (never throws).\n */\nexport async function loadPlugins(\n  projectDir: string,\n  plugins: string[],\n  registry: PluginRegistry = pluginRegistry,\n  opts: LoadOptions = {},\n): Promise<LoadResult> {\n  const loaded: string[] = [];\n  const failed: { spec: string; error: string }[] = [];\n\n  for (const spec of plugins) {\n    try {\n      const { name } = parseSpec(spec);\n      const entry = resolvePluginEntry(projectDir, name);\n      const mod = (await import(pathToFileURL(entry).href)) as PluginModule;\n      if (typeof mod.register !== \"function\") {\n        throw new Error(`plugin \"${name}\" does not export a register() function`);\n      }\n      mod.register(registry);\n      loaded.push(spec);\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      failed.push({ spec, error: `failed to load plugin \"${spec}\": ${message}` });\n      opts.log?.warn(`plugin load failed: ${spec}`, { error: message });\n    }\n  }\n\n  return { loaded, failed };\n}\n","/**\n * Reconcile the project-local plugin store (`<projectDir>/.skaile/plugins/`).\n *\n * The reconciler is hash-skipped: it computes a SHA-256 over the sorted plugin\n * list plus the lock file's `plugins` slice and compares it to the stored\n * `.reconcile-hash`. On a match it returns with zero further I/O; otherwise it\n * regenerates the store's `package.json` and runs `bun install` against it.\n *\n * The install step is injectable (`InstallFn`) so tests stay hermetic — they\n * pass a fake installer that records calls and writes a stub `node_modules`.\n */\n\nimport { createHash } from \"node:crypto\";\nimport { existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { readPluginsLockSlice } from \"@skaile/workspaces/core\";\nimport { pluginsDir, pluginsPkgJson, reconcileHashFile } from \"./paths.js\";\nimport { parseSpec } from \"./spec.js\";\n\n/**\n * Installs the store's dependencies. Returns `ok: false` (never throws) on a\n * failed install so the reconciler can surface the captured `output`.\n */\nexport type InstallFn = (pluginsDir: string) => Promise<{ ok: boolean; output: string }>;\n\n/** Options for {@link reconcilePlugins}. */\nexport interface ReconcileOptions {\n  /** Injectable installer. Defaults to a real `bun install` of the store. */\n  runInstall?: InstallFn;\n  /**\n   * Lock slice to fold into the reconcile-hash. Defaults to\n   * `readPluginsLockSlice(projectDir)` so a lock edit invalidates the hash.\n   */\n  lockSlice?: unknown;\n}\n\n/** Result of a reconcile pass. */\nexport interface ReconcileResult {\n  changed: boolean;\n  reason: \"no-plugins\" | \"up-to-date\" | \"reconciled\";\n}\n\n/**\n * The default real installer: `bun install` inside the store directory.\n * Frozen on subsequent runs (a `bun.lock`/`bun.lockb` already exists), and\n * non-frozen on the first run so a lock can be generated.\n */\nexport const defaultInstall: InstallFn = async (dir) => {\n  const { portableSpawn } = await import(\"@skaile/workspaces/core\");\n  const hasLock =\n    existsSync(`${dir}/bun.lock`) ||\n    existsSync(`${dir}/bun.lockb`) ||\n    existsSync(`${dir}/package-lock.json`);\n  const args = hasLock ? [\"bun\", \"install\", \"--frozen-lockfile\"] : [\"bun\", \"install\"];\n  const proc = portableSpawn(args, { cwd: dir });\n  const chunks: string[] = [];\n  const decoder = new TextDecoder();\n  const pump = async (stream: ReadableStream<Uint8Array>) => {\n    const reader = stream.getReader();\n    for (;;) {\n      const { done, value } = await reader.read();\n      if (done) break;\n      if (value) chunks.push(decoder.decode(value, { stream: true }));\n    }\n  };\n  await Promise.all([pump(proc.stdout), pump(proc.stderr)]);\n  const code = await proc.exited;\n  return { ok: code === 0, output: chunks.join(\"\") };\n};\n\n/** Generate the store's `package.json` from the plugin specs. */\nfunction writePackageJson(projectDir: string, plugins: string[]): void {\n  const dependencies: Record<string, string> = {};\n  for (const spec of plugins) {\n    const { name, range } = parseSpec(spec);\n    dependencies[name] = range;\n  }\n  const pkg = {\n    name: \"skaile-project-plugins\",\n    private: true,\n    dependencies,\n  };\n  mkdirSync(pluginsDir(projectDir), { recursive: true });\n  writeFileSync(pluginsPkgJson(projectDir), `${JSON.stringify(pkg, null, 2)}\\n`);\n}\n\n/**\n * Reconcile the plugin store for a project.\n *\n * @param projectDir - Project root containing `skaile.yaml` / `skaile.lock.yaml`.\n * @param plugins - The `skaile.yaml` `plugins:` list (npm specifiers).\n * @param opts - Optional injectable installer + lock slice override.\n * @returns Whether the store changed and why.\n */\nexport async function reconcilePlugins(\n  projectDir: string,\n  plugins: string[],\n  opts: ReconcileOptions = {},\n): Promise<ReconcileResult> {\n  if (plugins.length === 0) {\n    return { changed: false, reason: \"no-plugins\" };\n  }\n\n  const lockSlice = opts.lockSlice ?? readPluginsLockSlice(projectDir);\n  const wantHash = createHash(\"sha256\")\n    .update(JSON.stringify({ plugins: [...plugins].sort(), lock: lockSlice }))\n    .digest(\"hex\");\n\n  const hashFile = reconcileHashFile(projectDir);\n  if (existsSync(hashFile)) {\n    const have = readFileSync(hashFile, \"utf8\").trim();\n    if (have === wantHash) {\n      return { changed: false, reason: \"up-to-date\" };\n    }\n  }\n\n  writePackageJson(projectDir, plugins);\n\n  const install = opts.runInstall ?? defaultInstall;\n  const result = await install(pluginsDir(projectDir));\n  if (!result.ok) {\n    throw new Error(`plugin install failed:\\n${result.output}`);\n  }\n\n  writeFileSync(hashFile, wantHash);\n  return { changed: true, reason: \"reconciled\" };\n}\n","/**\n * The project-local plugin store: reconcile (`<projectDir>/.skaile/plugins/`)\n * then load the reconciled plugins into the `pluginRegistry`.\n *\n * `ensurePluginsLoaded` is the single entrypoint commands wire in. It is a\n * guarded no-op when `plugins` is empty/undefined — zero overhead for the\n * common case where no project declares `plugins:` in `skaile.yaml`.\n */\n\nimport { type PluginRegistry, pluginRegistry } from \"@skaile/workspaces/plugin-registry\";\nimport type { Logger } from \"@skaile/workspaces/types\";\nimport { type LoadResult, loadPlugins } from \"./load.js\";\nimport { type ReconcileOptions, reconcilePlugins } from \"./reconcile.js\";\n\nexport type { LoadResult } from \"./load.js\";\nexport { loadPlugins } from \"./load.js\";\nexport type { ReconcileOptions } from \"./reconcile.js\";\nexport { reconcilePlugins } from \"./reconcile.js\";\nexport { specName } from \"./spec.js\";\n\n/** Options for {@link ensurePluginsLoaded}. */\nexport interface EnsurePluginsOptions extends ReconcileOptions {\n  log?: Logger;\n}\n\n/**\n * Reconcile the plugin store then load each plugin into `registry`.\n *\n * No-op (returns immediately) when `plugins` is empty/undefined, so the common\n * no-plugins path costs nothing.\n *\n * @param projectDir - Project root.\n * @param plugins - The `skaile.yaml` `plugins:` list (may be undefined).\n * @param registry - Registry to register into. Defaults to `pluginRegistry`.\n * @param opts - Injectable installer / lock slice + optional logger.\n * @returns The load result, or an empty result when there are no plugins.\n */\nexport async function ensurePluginsLoaded(\n  projectDir: string,\n  plugins: string[] | undefined,\n  registry: PluginRegistry = pluginRegistry,\n  opts: EnsurePluginsOptions = {},\n): Promise<LoadResult> {\n  if (!plugins || plugins.length === 0) {\n    return { loaded: [], failed: [] };\n  }\n  await reconcilePlugins(projectDir, plugins, opts);\n  return loadPlugins(projectDir, plugins, registry, { log: opts.log });\n}\n"]}

package/dist/project-I55A4O2T.js

@@ -1,41 +0,0 @@
-export { REF_HINT, makeCheckCommand, makeCleanCommand, makeInstallCommand, reportAgentInstances, reportInstalledSoftDeps, reportMoved, reportPresetExpansions, reportRelocked, reportReplaced, runPointerOnlyInstall, supportsInstallManifest } from './chunk-CJERAGFY.js';
-import './chunk-NESV47MF.js';
-import './chunk-GV4DZ6MT.js';
-import './chunk-CAHB6MHA.js';
-import './chunk-TCHRMVTO.js';
-import './chunk-D3B36CYC.js';
-import './chunk-7RGTAEG6.js';
-import './chunk-NUELZWCF.js';
-import './chunk-DZMNFCWB.js';
-import './chunk-2F5AWQX5.js';
-import './chunk-J4RBUFGM.js';
-import './chunk-COH6FQAG.js';
-import './chunk-R7FOF242.js';
-import './chunk-3TXEJN4W.js';
-import './chunk-FH7W6TJ4.js';
-import './chunk-CGYEHQOX.js';
-import './chunk-KTBKW2FI.js';
-import './chunk-UQ6LFBPZ.js';
-import './chunk-HZXUXHIV.js';
-import './chunk-ZCAJZ4B2.js';
-import './chunk-PBBPZYVG.js';
-import './chunk-4GY63JU6.js';
-import './chunk-EDYHEMJA.js';
-import './chunk-PMECEZK3.js';
-import './chunk-5BEFNLOR.js';
-import './chunk-A2ULN3KX.js';
-import './chunk-ALEYHUC5.js';
-import './chunk-L5VSIPQD.js';
-import './chunk-CPSIPIX7.js';
-import './chunk-ZPWTOUTK.js';
-import './chunk-RVRB27AN.js';
-import './chunk-SBSA3IQA.js';
-import './chunk-BNMZVPYA.js';
-import './chunk-ICSCSM5D.js';
-import './chunk-DALV4HHP.js';
-import './chunk-MJHSLODD.js';
-import './chunk-C3CAXQMA.js';
-import './chunk-BOFL7GIF.js';
-import './chunk-NSBPE2FW.js';
-//# sourceMappingURL=project-I55A4O2T.js.map
-//# sourceMappingURL=project-I55A4O2T.js.map

package/dist/skills-NUEN5NDX.js

@@ -1,26 +0,0 @@
-export { skillCheckRequirements, skillGetPreamble, skillList, skillSearch, skillShow } from './chunk-G4FFOV3N.js';
-import './chunk-T42WRQ4O.js';
-import './chunk-X5YPJV4N.js';
-import './chunk-X77SUM4P.js';
-import './chunk-GCHPUTA3.js';
-import './chunk-PBBPZYVG.js';
-import './chunk-4GY63JU6.js';
-import './chunk-EDYHEMJA.js';
-import './chunk-PMECEZK3.js';
-import './chunk-5BEFNLOR.js';
-import './chunk-A2ULN3KX.js';
-import './chunk-ALEYHUC5.js';
-import './chunk-L5VSIPQD.js';
-import './chunk-CPSIPIX7.js';
-import './chunk-ZPWTOUTK.js';
-import './chunk-RVRB27AN.js';
-import './chunk-SBSA3IQA.js';
-import './chunk-BNMZVPYA.js';
-import './chunk-ICSCSM5D.js';
-import './chunk-DALV4HHP.js';
-import './chunk-MJHSLODD.js';
-import './chunk-C3CAXQMA.js';
-import './chunk-BOFL7GIF.js';
-import './chunk-NSBPE2FW.js';
-//# sourceMappingURL=skills-NUEN5NDX.js.map
-//# sourceMappingURL=skills-NUEN5NDX.js.map

package/dist/source-G2LV5LVD.js

@@ -1,41 +0,0 @@
-export { autoSyncForSearch, divergedSourceClones, ensureClone, findCacheKeyCollision, indexingHadFailures, legacySourceConfigHint, makeSourceCommand, normalizeSourceUrl, pullSourceClone, readProjectSources, resolveSource, sourceClonePath, sourceLabel, sourceMatchesKey, syncProjectSources } from './chunk-WSBKB4CJ.js';
-import './chunk-PQFHMQHQ.js';
-import './chunk-GV4DZ6MT.js';
-import './chunk-CAHB6MHA.js';
-import './chunk-TCHRMVTO.js';
-import './chunk-D3B36CYC.js';
-import './chunk-7RGTAEG6.js';
-import './chunk-NUELZWCF.js';
-import './chunk-DZMNFCWB.js';
-import './chunk-2F5AWQX5.js';
-import './chunk-J4RBUFGM.js';
-import './chunk-COH6FQAG.js';
-import './chunk-R7FOF242.js';
-import './chunk-3TXEJN4W.js';
-import './chunk-FH7W6TJ4.js';
-import './chunk-CGYEHQOX.js';
-import './chunk-KTBKW2FI.js';
-import './chunk-UQ6LFBPZ.js';
-import './chunk-HZXUXHIV.js';
-import './chunk-ZCAJZ4B2.js';
-import './chunk-PBBPZYVG.js';
-import './chunk-4GY63JU6.js';
-import './chunk-EDYHEMJA.js';
-import './chunk-PMECEZK3.js';
-import './chunk-5BEFNLOR.js';
-import './chunk-A2ULN3KX.js';
-import './chunk-ALEYHUC5.js';
-import './chunk-L5VSIPQD.js';
-import './chunk-CPSIPIX7.js';
-import './chunk-ZPWTOUTK.js';
-import './chunk-RVRB27AN.js';
-import './chunk-SBSA3IQA.js';
-import './chunk-BNMZVPYA.js';
-import './chunk-ICSCSM5D.js';
-import './chunk-DALV4HHP.js';
-import './chunk-MJHSLODD.js';
-import './chunk-C3CAXQMA.js';
-import './chunk-BOFL7GIF.js';
-import './chunk-NSBPE2FW.js';
-//# sourceMappingURL=source-G2LV5LVD.js.map
-//# sourceMappingURL=source-G2LV5LVD.js.map

package/dist/source-fetch-github-QN4LLTL5.js

@@ -1,4 +0,0 @@
-export { GITHUB_PAT_ENV, fetchAssetFilesFromGitHub } from './chunk-R7FOF242.js';
-import './chunk-NSBPE2FW.js';
-//# sourceMappingURL=source-fetch-github-QN4LLTL5.js.map
-//# sourceMappingURL=source-fetch-github-QN4LLTL5.js.map

package/dist/source-manifest-publish-6RM7SWLZ.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../cli/src/commands/source-manifest-publish.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsCA,IAAM,yBAAA,GAA4B,sBAAA;AAW3B,SAAS,0BAAA,CACd,UACA,SAAA,EACmB;AACnB,EAAA,MAAM,UAAU,QAAA,CAAS,MAAA,IAAU,EAAC,EAAG,GAAA,CAAI,CAAC,CAAA,KAAM;AAChD,IAAA,MAAM,EAAE,SAAA,EAAW,KAAA,EAAO,GAAG,MAAK,GAAI,CAAA;AACtC,IAAA,OAAO,IAAA;AAAA,EACT,CAAC,CAAA;AACD,EAAA,OAAO,EAAE,GAAG,QAAA,EAAU,SAAA,EAAW,WAAW,MAAA,EAAO;AACrD;AAUA,SAAS,YAAA,GAAuB;AAC9B,EAAA,OAAO,kBAAA,EAAmB;AAC5B;AAEA,SAAS,YAAA,GAAoC;AAC3C,EAAA,MAAM,OAAO,YAAA,EAAa;AAC1B,EAAA,IAAI,CAAC,UAAA,CAAW,IAAI,CAAA,SAAU,EAAC;AAC/B,EAAA,IAAI;AACF,IAAA,OAAO,IAAA,CAAK,KAAA,CAAM,YAAA,CAAa,IAAA,EAAM,OAAO,CAAC,CAAA;AAAA,EAC/C,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAC;AAAA,EACV;AACF;AAMO,SAAS,eAAe,IAAA,EAAkC;AAC/D,EAAA,MAAM,WAAW,YAAA,EAAa;AAC9B,EAAA,OAAO,QAAA,CAAS,YAAA,GAAe,IAAI,CAAA,EAAG,IAAA;AACxC;AAOO,SAAS,eAAA,CAAgB,MAAc,IAAA,EAAoB;AAChE,EAAA,MAAM,OAAO,YAAA,EAAa;AAC1B,EAAA,SAAA,CAAU,QAAQ,IAAI,CAAA,EAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAC5C,EAAA,MAAM,WAAW,YAAA,EAAa;AAC9B,EAAA,MAAM,eAAe,EAAE,GAAI,QAAA,CAAS,YAAA,IAAgB,EAAC,EAAG;AACxD,EAAA,YAAA,CAAa,IAAI,IAAI,EAAE,GAAI,aAAa,IAAI,CAAA,IAAK,EAAC,EAAI,IAAA,EAAK;AAC3D,EAAA,QAAA,CAAS,YAAA,GAAe,YAAA;AACxB,EAAA,aAAA,CAAc,MAAM,IAAA,CAAK,SAAA,CAAU,UAAU,IAAA,EAAM,CAAC,GAAG,OAAO,CAAA;AAChE;AAQA,SAAS,GAAA,CAAI,KAAA,EAAkB,GAAA,EAAa,IAAA,EAAwB;AAClE,EAAA,MAAM,GAAA,GAAM,KAAA,CAAM,KAAA,EAAO,CAAC,IAAA,EAAM,GAAA,EAAK,GAAG,IAAI,CAAA,EAAG,EAAE,QAAA,EAAU,OAAA,EAAS,CAAA;AACpE,EAAA,IAAI,GAAA,CAAI,WAAW,CAAA,EAAG;AACpB,IAAA,MAAM,UAAU,GAAA,CAAI,MAAA,IAAU,EAAA,EAAI,QAAA,GAAW,IAAA,EAAK;AAClD,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,IAAA,EAAO,IAAA,CAAK,IAAA,CAAK,GAAG,CAAC,CAAA,SAAA,EAAY,MAAA,IAAU,CAAA,KAAA,EAAQ,GAAA,CAAI,MAAM,EAAE,CAAA,CAAE,CAAA;AAAA,EACnF;AACA,EAAA,OAAA,CAAQ,GAAA,CAAI,MAAA,IAAU,EAAA,EAAI,QAAA,GAAW,IAAA,EAAK;AAC5C;AAWO,SAAS,oBAAoB,IAAA,EAIV;AACxB,EAAA,MAAM,KAAA,GAAQ,KAAK,KAAA,IAAS,SAAA;AAG5B,EAAA,MAAM,WAAW,CAAA,EAAG,eAAA,CAAgB,eAAe,IAAA,CAAK,cAAc,CAAC,CAAC,CAAA,aAAA,CAAA;AACxE,EAAA,MAAA,CAAO,UAAU,EAAE,SAAA,EAAW,IAAA,EAAM,KAAA,EAAO,MAAM,CAAA;AACjD,EAAA,SAAA,CAAU,QAAQ,QAAQ,CAAA,EAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAIhD,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAW,KAAA,CAAM,KAAA,EAAO,CAAC,OAAA,EAAS,WAAW,GAAA,EAAK,IAAA,CAAK,cAAA,EAAgB,QAAQ,CAAA,EAAG;AAAA,MACtF,QAAA,EAAU;AAAA,KACX,CAAA;AACD,IAAA,IAAI,QAAA,CAAS,WAAW,CAAA,EAAG;AACzB,MAAA,MAAM,UAAU,QAAA,CAAS,MAAA,IAAU,EAAA,EAAI,QAAA,GAAW,IAAA,EAAK;AACvD,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,UAAA,EAAa,KAAK,cAAc,CAAA,SAAA,EAAY,UAAU,CAAA,KAAA,EAAQ,QAAA,CAAS,MAAM,CAAA,CAAE,CAAA;AAAA,OACjF;AAAA,IACF;AAEA,IAAA,aAAA,CAAc,KAAK,QAAA,EAAU,yBAAyB,CAAA,EAAG,IAAA,CAAK,cAAc,OAAO,CAAA;AACnF,IAAA,GAAA,CAAI,KAAA,EAAO,QAAA,EAAU,CAAC,KAAA,EAAO,yBAAyB,CAAC,CAAA;AAIvD,IAAA,MAAM,SAAA,GAAY,KAAA;AAAA,MAChB,KAAA;AAAA,MACA;AAAA,QACE,IAAA;AAAA,QACA,QAAA;AAAA,QACA,IAAA;AAAA,QACA,iCAAA;AAAA,QACA,IAAA;AAAA,QACA,kBAAA;AAAA,QACA,QAAA;AAAA,QACA,IAAA;AAAA,QACA;AAAA,OACF;AAAA,MACA,EAAE,UAAU,OAAA;AAAQ,KACtB;AACA,IAAA,IAAI,SAAA,CAAU,WAAW,CAAA,EAAG;AAC1B,MAAA,MAAM,GAAA,GAAM,GAAG,SAAA,CAAU,MAAA,IAAU,EAAE,CAAA,EAAG,SAAA,CAAU,UAAU,EAAE,CAAA,CAAA;AAE9D,MAAA,IAAI,CAAC,oBAAA,CAAqB,IAAA,CAAK,GAAG,CAAA,EAAG;AACnC,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,mBAAA,EAAsB,GAAA,CAAI,IAAA,MAAU,CAAA,KAAA,EAAQ,SAAA,CAAU,MAAM,CAAA,CAAE,CAAA,CAAE,CAAA;AAAA,MAClF;AAAA,IACF,CAAA,MAAO;AAGL,MAAA,GAAA,CAAI,OAAO,QAAA,EAAU,CAAC,MAAA,EAAQ,QAAA,EAAU,MAAM,CAAC,CAAA;AAAA,IACjD;AAEA,IAAA,OAAO,EAAE,WAAW,GAAA,CAAI,KAAA,EAAO,UAAU,CAAC,WAAA,EAAa,MAAM,CAAC,CAAA,EAAE;AAAA,EAClE,CAAA,SAAE;AACA,IAAA,MAAA,CAAO,UAAU,EAAE,SAAA,EAAW,IAAA,EAAM,KAAA,EAAO,MAAM,CAAA;AAAA,EACnD;AACF;AAWA,eAAsB,UAAA,CACpB,GAAA,EACA,IAAA,EAOA,MAAA,EACA,QAAmB,SAAA,EACJ;AACf,EAAA,MAAM,WAAW,MAAA,KAAW,MAAA;AAC5B,EAAA,MAAM,GAAA,GAAM,UAAU,uBAAA,EAAwB;AAE9C,EAAA,MAAM,EAAE,KAAK,IAAA,EAAM,YAAA,KAAiB,gBAAA,CAAiB,GAAA,EAAK,KAAK,UAAU,CAAA;AAEzE,EAAA,IAAI,CAAC,UAAA,CAAW,YAAY,CAAA,EAAG;AAC7B,IAAA,MAAA;AAAA,MACE,4BAA4B,IAAI,CAAA,KAAA,EAAQ,CAAA,CAAE,GAAA,CAAI,YAAY,CAAC,CAAA,kDAAA;AAAA,KAE7D;AACA,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AAEA,EAAA,MAAM,EAAE,UAAU,WAAA,EAAY,GAAI,qBAAqB,YAAA,CAAa,YAAA,EAAc,OAAO,CAAC,CAAA;AAC1F,EAAA,IAAI,YAAY,IAAA,CAAK,CAAC,MAAM,CAAA,CAAE,QAAA,KAAa,OAAO,CAAA,EAAG;AACnD,IAAA,KAAA,MAAW,CAAA,IAAK,YAAY,MAAA,CAAO,CAAC,MAAM,CAAA,CAAE,QAAA,KAAa,OAAO,CAAA,EAAG;AACjE,MAAA,MAAA,CAAO,GAAG,CAAA,CAAE,IAAI,CAAA,EAAA,EAAK,CAAA,CAAE,OAAO,CAAA,CAAE,CAAA;AAAA,IAClC;AACA,IAAA,MAAA;AAAA,MACE;AAAA,KAEF;AACA,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AAIA,EAAA,MAAM,MAAA,GAAS,YAAY,oBAAA,EAAqB;AAChD,EAAA,IAAI,CAAC,IAAA,CAAK,MAAA,IAAU,CAAC,MAAA,EAAQ;AAC3B,IAAA,MAAA,CAAO,sDAAiD,CAAA;AACxD,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AAOA,EAAA,IAAI,SAAA;AACJ,EAAA,IAAI,IAAA,CAAK,EAAA,EAAI,SAAA,GAAY,IAAA,CAAK,EAAA;AAAA,OAAA,IACrB,MAAA,EAAQ;AACf,IAAA,MAAM,EAAA,GAAK,MAAM,GAAA,CAAI,EAAA,EAAG;AAGxB,IAAA,SAAA,GAAY,EAAA,CAAG,eAAe,EAAA,CAAG,QAAA;AAAA,EACnC,OAAO,SAAA,GAAY,uBAAA;AAEnB,EAAA,MAAM,UAAA,GAAa,0BAAA,CAA2B,QAAA,EAAU,SAAS,CAAA;AACjE,EAAA,MAAM,aAAA,GAAgB,qBAAqB,UAAU,CAAA;AAErD,EAAA,MAAM,WAAA,GAAA,CAAe,UAAA,CAAW,MAAA,IAAU,EAAC,EAAG,GAAA;AAAA,IAAI,CAAC,CAAA,KACjD,MAAA,CAAO,CAAA,CAAE,IAAA,EAAM,SAAA,EAAW,CAAA,CAAE,IAAA,EAAM,CAAA,CAAE,OAAA,IAAW,UAAA,CAAW,OAAO;AAAA,GACnE;AAEA,EAAA,IAAI,KAAK,MAAA,EAAQ;AACf,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,WAAA,IAAe,cAAA,CAAe,IAAI,CAAA,IAAK,mCAAA;AAC5D,IAAA,OAAA,CAAQ,CAAA,iBAAA,EAAoB,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,CAAG,CAAA;AAC3C,IAAA,OAAA,CAAQ,CAAA,gBAAA,EAAmB,SAAS,CAAA,CAAE,CAAA;AACtC,IAAA,OAAA,CAAQ,CAAA,gBAAA,EAAmB,OAAO,CAAA,CAAE,CAAA;AACpC,IAAA,OAAA,CAAQ,CAAA,gBAAA,EAAmB,IAAA,CAAK,GAAA,IAAO,MAAM,CAAA,CAAE,CAAA;AAC/C,IAAA,OAAA,CAAQ,CAAA,gBAAA,EAAmB,WAAA,CAAY,MAAM,CAAA,UAAA,CAAY,CAAA;AACzD,IAAA,KAAA,MAAW,CAAA,IAAK,WAAA,EAAa,OAAA,CAAQ,CAAA,IAAA,EAAO,CAAC,CAAA,CAAE,CAAA;AAC/C,IAAA;AAAA,EACF;AAEA,EAAA,MAAM,cAAA,GAAiB,IAAA,CAAK,WAAA,IAAe,cAAA,CAAe,IAAI,CAAA;AAC9D,EAAA,IAAI,CAAC,cAAA,EAAgB;AACnB,IAAA,MAAA;AAAA,MACE,CAAA,kDAAA,EACK,CAAA,CAAE,GAAA,CAAI,gDAAgD,CAAC,CAAA,2HAAA;AAAA,KAG9D;AACA,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AACA,EAAA,IAAI,IAAA,CAAK,WAAA,EAAa,eAAA,CAAgB,IAAA,EAAM,cAAc,CAAA;AAE1D,EAAA,MAAM,EAAE,WAAU,GAAI,mBAAA,CAAoB,EAAE,cAAA,EAAgB,YAAA,EAAc,aAAA,EAAe,KAAA,EAAO,CAAA;AAChG,EAAA,KAAA,CAAM,CAAA,2BAAA,EAA8B,CAAA,CAAE,GAAA,CAAI,cAAc,CAAC,CAAA,GAAA,EAAM,SAAA,CAAU,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA,CAAA,CAAG,CAAA;AAGxF,EAAA,MAAM,SAAA,GAAY,KAAK,GAAA,IAAO,MAAA;AAE9B,EAAA,MAAM,EAAE,SAAA,EAAU,GAAI,MAAM,cAAA,CAAe;AAAA,IACzC,SAAA,EAAW,GAAA;AAAA,IACX,GAAA,EAAK,SAAA;AAAA,IACL,OAAA,EAAS,EAAE,GAAA,EAAK,cAAA,EAAgB,KAAK,SAAA,EAAU;AAAA,IAC/C,QAAA,EAAU,UAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACT,CAAA;AAED,EAAA,IAAI,SAAA,CAAU,SAAS,CAAA,EAAG;AACxB,IAAA,OAAA,CAAQ,CAAA,iDAAA,EAAoD,SAAA,CAAU,CAAC,CAAC,CAAA,GAAA,CAAK,CAAA;AAAA,EAC/E;AACF;AAMA,eAAsB,OAAA,CACpB,GAAA,EACA,IAAA,EACA,MAAA,EACe;AACf,EAAA,MAAM,WAAW,MAAA,KAAW,MAAA;AAC5B,EAAA,MAAM,GAAA,GAAM,UAAU,uBAAA,EAAwB;AAE9C,EAAA,MAAM,EAAE,GAAA,EAAK,IAAA,KAAS,gBAAA,CAAiB,GAAA,EAAK,KAAK,UAAU,CAAA;AAE3D,EAAA,IAAI,CAAC,QAAA,IAAY,CAAC,oBAAA,EAAqB,EAAG;AACxC,IAAA,MAAA,CAAO,sDAAiD,CAAA;AACxD,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AAEA,EAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,WAAA,EAAY;AACnC,EAAA,MAAM,SAAS,IAAA,CAAK,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,QAAQ,GAAG,CAAA;AAC7C,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,MAAA,CAAO,CAAA,QAAA,EAAW,IAAI,CAAA,wDAAA,CAAqD,CAAA;AAC3E,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AAGA,EAAA,MAAM,aAAa,IAAA,CAAK,KAAA,GAAQ,QAAA,CAAS,IAAA,CAAK,KAAK,CAAA,GAAI,MAAA;AACvD,EAAA,MAAM,cAAc,MAAM,GAAA,CAAI,gBAAA,CAAiB,MAAA,CAAO,EAAE,CAAA,EAAG,MAAA;AAAA,IACzD,CAAC,CAAA,KAAM,CAAA,CAAE,cAAc,CAAC,UAAA,IAAc,EAAE,IAAA,KAAS,UAAA;AAAA,GACnD;AACA,EAAA,IAAI,UAAA,CAAW,WAAW,CAAA,EAAG;AAC3B,IAAA,OAAA,CAAQ,qDAAgD,CAAA;AACxD,IAAA;AAAA,EACF;AAEA,EAAA,MAAM,SAAmB,EAAC;AAC1B,EAAA,KAAA,MAAW,KAAK,UAAA,EAAY;AAC1B,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,CAAI,cAAA,CAAe,CAAA,CAAE,EAAE,CAAA;AAC7B,MAAA,MAAA,CAAO,KAAK,CAAA,EAAG,CAAA,CAAE,IAAI,CAAA,CAAA,EAAI,CAAA,CAAE,IAAI,CAAA,CAAE,CAAA;AAAA,IACnC,SAAS,GAAA,EAAK;AACZ,MAAA,OAAA;AAAA,QACE,CAAA,eAAA,EAAkB,CAAA,CAAE,IAAI,CAAA,CAAA,EAAI,CAAA,CAAE,IAAI,CAAA,EAAA,EAAK,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA,OACzF;AAAA,IACF;AAAA,EACF;AAEA,EAAA,KAAA,CAAM,CAAA,OAAA,EAAU,MAAA,CAAO,MAAM,CAAA,UAAA,CAAY,CAAA;AACzC,EAAA,KAAA,MAAW,CAAA,IAAK,MAAA,EAAQ,OAAA,CAAQ,CAAA,EAAA,EAAK,CAAC,CAAA,CAAE,CAAA;AAC1C","file":"source-manifest-publish-6RM7SWLZ.js","sourcesContent":["/**\n * `skaile source manifest publish` / `yank` — the curator-publish flow. Takes a\n * locally-curated sidecar manifest (over a foreign public GitHub repo) and:\n *\n *   1. Pushes the curated `skaile.manifest.yaml` to the curator's OWN public\n *      \"sidecar\" repo (bytes stay in the foreign source; the sidecar holds only\n *      the manifest pointing at it).\n *   2. Registers the foreign source + the sidecar (url + pinned commit) with the\n *      store, syncs it, and publishes each curated asset.\n *\n * `yank` is the inverse: unpublish each currently-published asset of the source.\n *\n * The store REST surface is reached through the injectable {@link PublisherClient}\n * (default HTTP client); git side-effects go through an injectable `spawn`. Both\n * seams keep the pure helpers + orchestration unit/integration-testable without a\n * live store or a real remote.\n *\n * @docLink cli/commands/source#manifest-publish\n */\n\nimport { spawnSync } from \"node:child_process\";\nimport { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport {\n  decodeSkaileManifest,\n  encodeSkaileManifest,\n  globalSettingsPath,\n  type SkPublishManifest,\n  sourceCacheKey,\n} from \"@skaile/workspaces/core\";\nimport { logErr, logInfo, logOk, logWarn, S } from \"../helpers.ts\";\nimport { makeHttpPublisherClient, type PublisherClient } from \"../store-publisher.ts\";\nimport { isStoreAuthenticated } from \"../store-client.ts\";\nimport { bareName, publishToStore, refFor } from \"./publish-core.ts\";\nimport { sourceClonePath } from \"./source.ts\";\nimport { resolveSourceArg } from \"./source-manifest.ts\";\n\n/** The fixed filename a sidecar repo carries at its root. */\nconst SIDECAR_MANIFEST_FILENAME = \"skaile.manifest.yaml\";\n\n/** Injectable spawn contract — the subset of `spawnSync` these helpers use. */\ntype SpawnLike = typeof spawnSync;\n\n/**\n * Return a copy of `manifest` normalized for publication under `namespace`:\n * the top-level `publisher` is set to `namespace` and every per-asset\n * `publisher` override is removed so all assets inherit the top-level one.\n * Pure — the input is not mutated.\n */\nexport function normalizePublishedManifest(\n  manifest: SkPublishManifest,\n  namespace: string,\n): SkPublishManifest {\n  const assets = (manifest.assets ?? []).map((a) => {\n    const { publisher: _drop, ...rest } = a;\n    return rest;\n  });\n  return { ...manifest, publisher: namespace, assets };\n}\n\n// ── Sidecar-repo association (~/.skaile/settings.json) ────────────────────────\n\n/**\n * Path to the user settings file — the same `$SKAILE_HOME/settings.json`\n * (`~/.skaile/settings.json`) the store client reads tokens from, so the sidecar\n * association lives beside the store manifests and tests isolate through the\n * same `SKAILE_HOME` seam.\n */\nfunction settingsFile(): string {\n  return globalSettingsPath();\n}\n\nfunction readSettings(): Record<string, any> {\n  const file = settingsFile();\n  if (!existsSync(file)) return {};\n  try {\n    return JSON.parse(readFileSync(file, \"utf-8\"));\n  } catch {\n    return {};\n  }\n}\n\n/**\n * The sidecar repo URL previously associated with a source `slug`, if any.\n * Reads `settings.sidecarRepos?.[slug]?.repo`.\n */\nexport function getSidecarRepo(slug: string): string | undefined {\n  const settings = readSettings();\n  return settings.sidecarRepos?.[slug]?.repo;\n}\n\n/**\n * Persist the sidecar repo URL for a source `slug`, preserving every other\n * settings key. Stored as an object (`{ repo }`) so a `path` (or other fields)\n * can be added later without a schema migration.\n */\nexport function saveSidecarRepo(slug: string, repo: string): void {\n  const file = settingsFile();\n  mkdirSync(dirname(file), { recursive: true });\n  const settings = readSettings();\n  const sidecarRepos = { ...(settings.sidecarRepos ?? {}) };\n  sidecarRepos[slug] = { ...(sidecarRepos[slug] ?? {}), repo };\n  settings.sidecarRepos = sidecarRepos;\n  writeFileSync(file, JSON.stringify(settings, null, 2), \"utf-8\");\n}\n\n// ── Sidecar push ──────────────────────────────────────────────────────────────\n\n/**\n * Run a git command in `cwd` via the injected spawn, throwing with the captured\n * stderr on failure. Returns trimmed stdout.\n */\nfunction git(spawn: SpawnLike, cwd: string, args: string[]): string {\n  const res = spawn(\"git\", [\"-C\", cwd, ...args], { encoding: \"utf-8\" });\n  if (res.status !== 0) {\n    const stderr = (res.stderr ?? \"\").toString().trim();\n    throw new Error(`git ${args.join(\" \")} failed: ${stderr || `exit ${res.status}`}`);\n  }\n  return (res.stdout ?? \"\").toString().trim();\n}\n\n/**\n * Clone the curator's sidecar repo, write the curated manifest at its root, and\n * commit + push. Returns the pushed commit sha (used to pin the store source).\n *\n * Idempotent re-publish: when the manifest is unchanged `git commit` fails with\n * \"nothing to commit\" — we swallow that and return the current HEAD so a no-op\n * re-run still yields a valid pin. Any push/auth failure surfaces as a thrown\n * Error carrying git's stderr.\n */\nexport function pushSidecarManifest(opts: {\n  sidecarRepoUrl: string;\n  manifestText: string;\n  spawn?: SpawnLike;\n}): { commitSha: string } {\n  const spawn = opts.spawn ?? spawnSync;\n  // Dedicated dir next to the source clone cache; wipe any stale clone first so\n  // a re-publish always starts from a clean shallow checkout of the remote.\n  const cloneDir = `${sourceClonePath(sourceCacheKey(opts.sidecarRepoUrl))}-sidecar-push`;\n  rmSync(cloneDir, { recursive: true, force: true });\n  mkdirSync(dirname(cloneDir), { recursive: true });\n\n  // The clone is scratch — always remove it afterwards (success or failure) so a\n  // failed push never leaves a stale checkout in the cache dir.\n  try {\n    const cloneRes = spawn(\"git\", [\"clone\", \"--depth\", \"1\", opts.sidecarRepoUrl, cloneDir], {\n      encoding: \"utf-8\",\n    });\n    if (cloneRes.status !== 0) {\n      const stderr = (cloneRes.stderr ?? \"\").toString().trim();\n      throw new Error(\n        `git clone ${opts.sidecarRepoUrl} failed: ${stderr || `exit ${cloneRes.status}`}`,\n      );\n    }\n\n    writeFileSync(join(cloneDir, SIDECAR_MANIFEST_FILENAME), opts.manifestText, \"utf-8\");\n    git(spawn, cloneDir, [\"add\", SIDECAR_MANIFEST_FILENAME]);\n\n    // Fixed bot identity via -c so the commit succeeds regardless of the curator's\n    // git config (the sidecar push is a machine action, not authored work).\n    const commitRes = spawn(\n      \"git\",\n      [\n        \"-C\",\n        cloneDir,\n        \"-c\",\n        \"user.email=publish@skaile.store\",\n        \"-c\",\n        \"user.name=skaile\",\n        \"commit\",\n        \"-m\",\n        \"chore(sidecar): publish curated manifest\",\n      ],\n      { encoding: \"utf-8\" },\n    );\n    if (commitRes.status !== 0) {\n      const out = `${commitRes.stdout ?? \"\"}${commitRes.stderr ?? \"\"}`;\n      // Nothing changed → idempotent re-publish; keep the existing HEAD.\n      if (!/nothing to commit/i.test(out)) {\n        throw new Error(`git commit failed: ${out.trim() || `exit ${commitRes.status}`}`);\n      }\n    } else {\n      // `push origin HEAD` (not a bare `push`) so a fresh sidecar repo with an\n      // unborn/renamed default branch still gets its branch created on the remote.\n      git(spawn, cloneDir, [\"push\", \"origin\", \"HEAD\"]);\n    }\n\n    return { commitSha: git(spawn, cloneDir, [\"rev-parse\", \"HEAD\"]) };\n  } finally {\n    rmSync(cloneDir, { recursive: true, force: true });\n  }\n}\n\n// ── Orchestration ───────────────────────────────────────────────────────────\n\n/**\n * `source manifest publish <src>` — publish a curated sidecar manifest to the\n * store. See the module header for the full flow. Store calls go through\n * `client` (default HTTP); git side-effects through `spawn` (default\n * `spawnSync`). The auth gate is enforced only for the default HTTP client so\n * injected fakes bypass it.\n */\nexport async function runPublish(\n  arg: string,\n  opts: {\n    projectDir: string;\n    as?: string;\n    sidecarRepo?: string;\n    ref?: string;\n    dryRun?: boolean;\n  },\n  client?: PublisherClient,\n  spawn: SpawnLike = spawnSync,\n): Promise<void> {\n  const injected = client !== undefined;\n  const pub = client ?? makeHttpPublisherClient();\n\n  const { url, slug, manifestFile } = resolveSourceArg(arg, opts.projectDir);\n\n  if (!existsSync(manifestFile)) {\n    logErr(\n      `No curated manifest for \"${slug}\" at ${S.dim(manifestFile)} — ` +\n        \"run `skaile source manifest init` first.\",\n    );\n    process.exit(1);\n  }\n\n  const { manifest, diagnostics } = decodeSkaileManifest(readFileSync(manifestFile, \"utf-8\"));\n  if (diagnostics.some((d) => d.severity === \"error\")) {\n    for (const d of diagnostics.filter((x) => x.severity === \"error\")) {\n      logErr(`${d.code}: ${d.message}`);\n    }\n    logErr(\n      \"The curated manifest has errors — fix them with `skaile source manifest edit` / \" +\n        \"`verify` before publishing.\",\n    );\n    process.exit(1);\n  }\n\n  // A real publish makes store calls (+ `me()` when `--as` is omitted), so it\n  // needs a token. `--dry-run` is an offline preview: never gate it on auth.\n  const authed = injected || isStoreAuthenticated();\n  if (!opts.dryRun && !authed) {\n    logErr(\"Not signed in — run `skaile store login` first.\");\n    process.exit(1);\n  }\n\n  // Namespace: `--as` wins; else the caller's verified identity. Prefer the\n  // GitHub handle (`githubLogin`) over the store login (`username`) — for a user\n  // whose login differs from their GitHub handle the login namespace may be\n  // reserved (matches the CLI's `resolveLibraryPublisher` precedence). In an\n  // unauthenticated dry-run we cannot call `me()`, so show a placeholder.\n  let namespace: string;\n  if (opts.as) namespace = opts.as;\n  else if (authed) {\n    const me = await pub.me();\n    // `||` not `??`: an empty-string githubLogin (partially-connected account) is\n    // not a usable namespace — fall back to the login rather than publish under \"\".\n    namespace = me.githubLogin || me.username;\n  } else namespace = \"<your store username>\";\n\n  const normalized = normalizePublishedManifest(manifest, namespace);\n  const publishedText = encodeSkaileManifest(normalized);\n\n  const wouldBeRefs = (normalized.assets ?? []).map((a) =>\n    refFor(a.kind, namespace, a.name, a.version ?? normalized.version),\n  );\n\n  if (opts.dryRun) {\n    const sidecar = opts.sidecarRepo ?? getSidecarRepo(slug) ?? \"<none — pass --sidecar-repo>\";\n    logInfo(`Publish plan for ${S.bold(slug)}:`);\n    logInfo(`  namespace:    ${namespace}`);\n    logInfo(`  sidecar repo: ${sidecar}`);\n    logInfo(`  source ref:   ${opts.ref ?? \"main\"}`);\n    logInfo(`  would publish ${wouldBeRefs.length} asset(s):`);\n    for (const r of wouldBeRefs) logInfo(`    ${r}`);\n    return;\n  }\n\n  const sidecarRepoUrl = opts.sidecarRepo ?? getSidecarRepo(slug);\n  if (!sidecarRepoUrl) {\n    logErr(\n      \"No sidecar repo associated with this source. Pass \" +\n        `${S.cmd(\"--sidecar-repo https://github.com/<you>/<repo>\")} — it must be a ` +\n        \"PUBLIC GitHub repo you own; the curated manifest is committed there and the \" +\n        \"store pins to that commit.\",\n    );\n    process.exit(1);\n  }\n  if (opts.sidecarRepo) saveSidecarRepo(slug, sidecarRepoUrl);\n\n  const { commitSha } = pushSidecarManifest({ sidecarRepoUrl, manifestText: publishedText, spawn });\n  logOk(`Pushed curated manifest to ${S.dim(sidecarRepoUrl)} @ ${commitSha.slice(0, 10)}.`);\n\n  // The FOREIGN repo's ref to ingest (branch/sha). Defaults to `main`.\n  const sourceRef = opts.ref ?? \"main\";\n\n  const { published } = await publishToStore({\n    sourceUrl: url,\n    ref: sourceRef,\n    sidecar: { url: sidecarRepoUrl, ref: commitSha },\n    manifest: normalized,\n    client: pub,\n  });\n\n  if (published.length > 0) {\n    logInfo(`Consumers can now install them with \\`skaile add ${published[0]}\\`.`);\n  }\n}\n\n/**\n * `source manifest yank <src>` — unpublish the source's published assets (all,\n * or the single asset matching `opts.asset`'s name). Auth-gated like publish.\n */\nexport async function runYank(\n  arg: string,\n  opts: { projectDir: string; asset?: string },\n  client?: PublisherClient,\n): Promise<void> {\n  const injected = client !== undefined;\n  const pub = client ?? makeHttpPublisherClient();\n\n  const { url, slug } = resolveSourceArg(arg, opts.projectDir);\n\n  if (!injected && !isStoreAuthenticated()) {\n    logErr(\"Not signed in — run `skaile store login` first.\");\n    process.exit(1);\n  }\n\n  const rows = await pub.sourcesList();\n  const source = rows.find((r) => r.url === url);\n  if (!source) {\n    logErr(`Source \"${slug}\" is not registered in the store — nothing to yank.`);\n    process.exit(1);\n  }\n\n  // Optionally narrow to a single asset by name (accept a bare name or a ref).\n  const targetName = opts.asset ? bareName(opts.asset) : undefined;\n  const candidates = (await pub.sourceCandidates(source.id)).filter(\n    (c) => c.published && (!targetName || c.name === targetName),\n  );\n  if (candidates.length === 0) {\n    logWarn(\"No published assets matched — nothing to yank.\");\n    return;\n  }\n\n  const yanked: string[] = [];\n  for (const c of candidates) {\n    try {\n      await pub.assetUnpublish(c.id);\n      yanked.push(`${c.kind}:${c.name}`);\n    } catch (err) {\n      logWarn(\n        `Failed to yank ${c.kind}:${c.name}: ${err instanceof Error ? err.message : String(err)}`,\n      );\n    }\n  }\n\n  logOk(`Yanked ${yanked.length} asset(s):`);\n  for (const r of yanked) logInfo(`  ${r}`);\n}\n"]}