@skaile/workspaces 5.12.0 → 5.13.0

package/CHANGELOG.md

@@ -1,5 +1,101 @@
 # Changelog
 
+## 5.13.0
+
+### Minor Changes
+
+- [#1064](https://github.com/skaile-ai/workspaces/pull/1064) [`c0c483e`](https://github.com/skaile-ai/workspaces/commit/c0c483e068aeb5f5f1979565a251b5a29e0d72c9) Thanks [@mortegro](https://github.com/mortegro)! - Agents: the open findings of the 5.12.0 critique.
+
+  - A rendered agent file is part of the drift model. `install`, `add` and `update` record the sha256 of every file an agent renders (`.claude/agents/<name>.md`, the codex and omp files) in the lock entry's new `rendered:` list. `check`, `doctor` and `outdated` exit 1 for a hand-edited agent file (`<file> was edited`), and `install`, `install --locked` and `update` restore it and print `Restored <file>`, as for a skill file (p549, p576).
+  - `install` keeps a source at the commit the lock records: it no longer pulls a pinned clone to the branch tip. Only `update` moves a lock entry (p632).
+  - `check` names every instance bound to an agent whose pinned `SOUL.md` / `knowledge/` was edited after `rebuild`, and `doctor` prints the same lines and exits 1 (p635). `RULES.md`, `DUTIES.md` and local rulesets are `inline-live`: they are read at every run start, so the docs no longer say an edit is a conflict (p414).
+  - `validate` fails a `composes` item of a kind with no default binding (`preset`) that sets no `binding:` (p415), resolves `composes` refs against the enclosing library when it gets one asset directory (p633), and warns on an unknown key under the primary `agent:` block, as it does under `agents.<id>` (p634).
+  - `skaile run` prints the typed `result` a finished `agent.run` role returned, and no `output=` for a failed run (p636).
+  - omp: the system prompt goes to a per-spawn file under `.skaile/cache/omp-system/` that the process deletes, so a nested `agent.run` child never reads its parent's prompt (p630); the agent's soul reaches the live prompt once whether or not a memory block seeds from `SOUL.md` (p631); omp's home is a private directory that links the agent's files, so omp's databases never land in the pinned agent directory, and a missing credential names `/login` instead of a path in the cache (p637).
+
+- [#1064](https://github.com/skaile-ai/workspaces/pull/1064) [`c0c483e`](https://github.com/skaile-ai/workspaces/commit/c0c483e068aeb5f5f1979565a251b5a29e0d72c9) Thanks [@mortegro](https://github.com/mortegro)! - Library authoring: the open findings of the 5.12.0 critique.
+
+  - A library holds plain files: `validate`, `library index`, `library publish` and `asset import` (and `asset migrate --mode copy`) refuse a symlink with one line, `<path> is a symlink to <target>`, and exit 1. This covers an alias of an asset directory (`s1alias -> s1`), a link to `.` and a link to a file inside an asset. `validate` no longer passes a library that `index` and the publish plan refuse (p520, p224).
+  - Editor leftovers (`*.swp`, `*.swo`, `*~`) join the names no asset ships: `asset import`, the deploy and the content hash leave them out (p224).
+  - The asset-scan cycle warning is printed once per directory and run, names the library and says `remove the symlink` (p524).
+  - Versions follow strict semver (no leading zero, no empty identifier, numbers up to 15 digits): `01.0.0`, `1.0.0-alpha..1` and `99999999999999999999.0.0` are refused by `validate`, `index` and the publish plan (p521).
+  - A SKILL.md with a UTF-8 BOM or CRLF line endings parses like any other; a file that still fails says `BOM` or `CRLF` in the message (p522).
+  - `library pull` and `library sync` print `! <n> asset(s) on disk are not in the manifest; run skaile library index <name>` after bringing assets the manifest does not list (p523).
+  - `library create --help` offers the scaffoldable kinds only (p567).
+  - An untouched scaffold body (`Skill prompt goes here.`) is an error in `validate` (exit 1), so a passing `validate` means the asset can be published; the publish plan keeps refusing it, and `library index` keeps indexing but warns `publish refuses it until you write the <kind> prompt` (p675).
+
+- [#1064](https://github.com/skaile-ai/workspaces/pull/1064) [`c0c483e`](https://github.com/skaile-ai/workspaces/commit/c0c483e068aeb5f5f1979565a251b5a29e0d72c9) Thanks [@mortegro](https://github.com/mortegro)! - Consume commands: the open findings of the 5.12.0 critique.
+
+  - `source add` of a source with no publisher (a `file://` URL, a local path, GitLab, a manifest without `publisher:`) exits 1 with `publisher must be declared in skaile.manifest.yaml … or recorded with skaile source add --publisher` and records nothing, instead of printing `Indexed` and `registered` for a source every later command skips. New option `source add --publisher <name>` records the publisher on the `sources:` entry (`SourceEntry.publisher`, also in preset `sources:`); `publisher:` in the source manifest still wins (p540, p613).
+  - A local path given to `source add` is resolved to an absolute, real path before it is stored: `../remotes/srcA.git` and its absolute path are one source, cloned under `cache/sources/`. The local-catalog errors name `skaile library init <name> --path <dir>` (p618).
+  - `add` refuses to deploy over a folder (or agent file) no lock entry owns, such as a hand-made skill of the same name: exit 1, the folder is named, `--force` replaces it. A folder the deploy would rewrite with the same content (the one `asset import` copied the skill from: same bytes, or same body with frontmatter the asset only extends) is adopted without a word (p542).
+  - `update` re-locks and reports only the source assets whose files changed. A source asset without a declared version keeps its `0.0.0-sha.<commit>` lock key while its files hash the same, so `update` and `outdated` list the same assets (p543).
+  - `update` skips the catalog refresh when every locked asset comes from a library, and prints a failed refresh as `! Catalog refresh failed` (not `✗`) when it goes on with exit 0 (p544).
+  - A source clone that cannot be refreshed is reported once as `! source clone <name> not refreshed: <cause>; using the cached commit`, without the `[repo-manager]` tag, the double period or the second path (p545).
+  - `library link` to a remote that already has branches but not the library's branch exits 1 with `pass --branch <name>` instead of pushing a second, unrelated history (p546).
+  - `add` names a ref held by two libraries once (the `! … exists in 2 libraries` warning), not a second time as `is held at different versions` (p547).
+  - `source sync <name>` with a name two sources share exits 1 and lists both, as `show` and `remove` do (p548).
+  - `update <ref>` of a locked asset that another asset requires answers `<ref> is required by <ref2>; run skaile update <declared ref>` (exit 1), not `No declared asset matches` (p550).
+  - Docs: `diff` with a publisher-less ref that names one locked asset still diffs it (p541).
+
+- [#1064](https://github.com/skaile-ai/workspaces/pull/1064) [`c0c483e`](https://github.com/skaile-ai/workspaces/commit/c0c483e068aeb5f5f1979565a251b5a29e0d72c9) Thanks [@mortegro](https://github.com/mortegro)! - Flows by id, local sources, flow dependencies and the docs site: the open findings of the 5.12.0 critique (docs-flows).
+
+  - A flow asset is named by its `id:`, not by the slug of `name:` (`name:` stays a display label): a flow with `id: flow-a` and `name: Something Else Entirely` is `flow:@acme/flow-a`, `add` finds it and deploys `.skaile/flows/flow-a/flow-a.flow.yaml`, which the flow engine loads. `validate`, `library index` and `publish --dry-run` fail a flow whose file stem differs from its `id:` (`flow id "x" does not match the file name "y.flow.yaml"`) (p670).
+  - `source add <local path>` exits 1 with one line, before anything is cloned, when the path is a registered library (`library list` already shows it) or not a git repository (p671).
+  - The skills a flow's nodes name in `run.assets` (and the sub-flows they call) are the flow's dependencies: `info` lists them, `add flow:…` deploys them, `check` and `install --locked` report one that is missing (p676).
+  - A flow run whose driver cannot start (SDK missing, no model, `omp` exits at once) ends the session as `failed` with the cause in `error`; `status` prints `Error:`. It used to stay `paused` although no node ran (p677).
+  - The docs site resolves every relative link (`../commands/library`, `./03-run-a-flow`, links to repo files become GitHub links), and CI builds the site and fails on a dead internal link: `docs/site/scripts/check-links.mjs` (`bun run check:links`) (p672).
+  - Docs: driver targets are `claude-code`, `omp` and `codex` only (p673); `skaile migrate assets` is the CLI for the publication half of the v2→v3 migration (p674); `WORKSPACE_IDEAS` is marked ideas-only (p678); tutorial 03 shows the real `Driver:` line, the failed-run output and the flow dependencies; the stale wording of the v6 docs list is fixed.
+
+- [#1064](https://github.com/skaile-ai/workspaces/pull/1064) [`c0c483e`](https://github.com/skaile-ai/workspaces/commit/c0c483e068aeb5f5f1979565a251b5a29e0d72c9) Thanks [@mortegro](https://github.com/mortegro)! - Harnesses and drivers: the open findings of the 5.12.0 critique.
+
+  - `--driver omp` with an unusable provider entry (credential variable unset) starts omp on the user's own agent directory when no entry is usable or the selected model's entry was left out, so omp's own login and default model apply and the notice `omp falls back to its own login` is true (p362).
+  - `check`, `doctor` and `install --locked` treat an omp agent as deployed only when the flat `.omp/agents/<name>.md` exists; a deleted file is `locked but its deployed copy is missing` (p590).
+  - `integration install` adds `.codex/config.toml`, `.omp/extensions/skaile.ts` and `.skaile/plugin-state.json` to the project `.gitignore`, as `init` does; the docs say they are per machine (p591).
+  - `add --global` for omp deploys to `~/.omp/agent/skills`, `~/.omp/agent/agents/<name>.md`, `~/.omp/agent/prompts` and `~/.omp/agent/contracts`, where omp reads user assets (p592).
+  - `run --driver codex --model <provider>/<model>` for a provider codex cannot address exits 1 naming the provider, before any request (p593).
+  - A Claude login that expired ends the turn with the SDK's own text and `run claude /login` instead of `The model reported an error but sent no details` (p594).
+  - `skaile run "<prompt>"` with stdout piped writes the bare answer and one newline, with no `agent ▶` prefix and no blank lines; a failed turn writes nothing to stdout (p595).
+  - Docs: `repl` lists every registered driver and the banner counts the deployed skills (p596).
+  - `integration uninstall` names the file the entry came from (`.mcp.json`) and deletes an empty `.claude/settings.json` and `.skaile/plugin-state.json` (p597).
+  - A failed turn is printed once: one `✗` line with the provider's message, `check your API key or login` for a credential error, and a pointer to `skaile logs`; the `[error]` records stay in the log database (p598).
+  - The `serve` preflight says the optional SDK must be installed next to the `skaile` install, not in the project (p656).
+  - `validate` reports a `connectors:` entry whose `driver` no catalog entry provides, with the text `serve` logs (p657).
+  - The codex driver accepts the codex CLI's ChatGPT login (`$CODEX_HOME/auth.json`, default `~/.codex/auth.json`) as well as an API key: the file is linked into the session's private `CODEX_HOME`, an exported `OPENAI_API_KEY` / `CODEX_API_KEY` still wins, and with neither the start fails with `codex driver needs OPENAI_API_KEY, or the codex CLI's ChatGPT login …` (p348b).
+
+- [#1064](https://github.com/skaile-ai/workspaces/pull/1064) [`c0c483e`](https://github.com/skaile-ai/workspaces/commit/c0c483e068aeb5f5f1979565a251b5a29e0d72c9) Thanks [@mortegro](https://github.com/mortegro)! - Protocol, serve and plugins: the open findings of the 5.12.0 critique.
+
+  - `skaile serve` on a busy port exits 1 right after the one-line message instead of staying alive (p468).
+  - A `local` connector honours `mountPath:` (on the connector or under `params:`, `${project}` allowed): reads and writes go to that directory, not to a copy under `.mounts/<id>` (p650).
+  - A second `plugin install` works: the store install is frozen to its lock file only when the plugin list did not change. A failed install also puts the store's `package.json` back (p651).
+  - `plugin install` falls back to `npm` when `bun` is not on `PATH`, and names the missing tools when neither is found (p652).
+  - The replayed `session_init_ack` carries the same `capabilitySignature` as the handshake ack of the same runner: the `runner.*` capabilities are registered before the handshake ack is built, not after (p653).
+  - The no-token warning of a loopback bind (`--host 127.0.0.1`) says local processes can drive the agent and no longer advises `--host` (p654).
+  - A project without `agent.definition` (a fresh `skaile init`) no longer logs `no agent definition found` as a warning; a set but unresolvable `agent.definition` still warns (p655).
+
+- [#1064](https://github.com/skaile-ai/workspaces/pull/1064) [`c0c483e`](https://github.com/skaile-ai/workspaces/commit/c0c483e068aeb5f5f1979565a251b5a29e0d72c9) Thanks [@mortegro](https://github.com/mortegro)! - State and upgrade: the open findings of the 5.12.0 critique.
+
+  - `skaile validate <path>` creates nothing: a missing path, or the gone directory of a registered library, stays missing and exits 1. `assertManifestEditable` no longer creates the library directory (p560).
+  - The 5.12.0 MIGRATION entry says a project that added an agent with 5.11.0 sees one rewrite of `.claude/agents/<name>.md` (p561).
+  - An equal-version tie between libraries goes to the default library on `update` and `add`, then to the library the lock names; the docs and the MIGRATION entry now say so (p562).
+  - `install`, `install --locked` and `update` keep `.env`, `.venv/`, `__pycache__/` and `*.pyc` in a deployed asset folder and print nothing about them; they remove only the files they print (p563).
+  - A declared asset with a requirement nothing holds reads `requires <dep> but no library or source holds it — register the library …` in `check`, `doctor`, `outdated`, `why`, `diff` and `install --locked`, not `run skaile install` (p564).
+  - `add` and `install` say `Store unreachable` for a requirement the store could not be asked about, not `not found` (p565).
+  - `diff <ref>` prints the diff of `<ref>` first and lists a problem of an asset it requires after it (p575).
+  - `outdated` says `locked and not deployed` and advises `skaile install --locked` for a required asset whose folder is gone; `check` and `doctor` advise it too (p577).
+  - From a subdirectory of a project, `No skaile.yaml found` is followed by the nearest parent that holds one and `--project-dir` (p578).
+
+- [#1064](https://github.com/skaile-ai/workspaces/pull/1064) [`c0c483e`](https://github.com/skaile-ai/workspaces/commit/c0c483e068aeb5f5f1979565a251b5a29e0d72c9) Thanks [@mortegro](https://github.com/mortegro)! - Store: the open findings of the 5.12.0 critique.
+
+  - `install --locked` restores a store asset whose upstream repo is `github.com/skaile-ai/ai-assets` (the URL the bundled factory source shares): it is fetched and SHA-verified file by file instead of being checked against the bundled factory tree, which does not hold its path. A second machine (lock + yaml only) restores it, and `check`, `doctor`, `outdated` and `install --locked` agree (p380).
+  - Every store kind is installable: `store search`, `store show` and the `manage` feed list `mcp-server`, `agent` and `contract` rows with an `Install:` line, and `add` takes them and `install --locked` restores them; the `Not installable` branch is gone (p610).
+  - A store row's requirements are canonical `kind:@publisher/name[#pin]` refs; a kind-less `@publisher/name` gets the kind `skill`, and a path-style entry the indexer left behind (`../../../ai-asset-management/agents/skaile/agent.yaml`) is dropped. `add` of such an agent no longer fails with `Asset not found` (p611, p615).
+  - `store show <ref>` with a ref that is not a ref prints `Invalid asset ref "<ref>": ...` instead of blaming the network; `store show`/`store search --kind <unknown>` exit 1 and list the valid kinds (p612).
+  - A store row flagged `demo` or `internal` is hidden from `search`/`store search` by default; `--all` lists it (p616).
+  - A 404 or 405 from a REST-framed catalog host says `framing is rest; set catalog.framing trpc`; `catalog test` probes the route the store verbs use for the configured framing and names the mismatch instead of printing `reachable` (p617).
+  - With `cache_ttl: 0`, `search --store` answers from the cached catalog like `store search`; plain `search` keeps the store leg off with a one-line notice (p619).
+  - `source manifest init <bare name>` that is neither a registered source nor a store slug exits 1 with `not a git URL or an owner/repo shorthand`, as `source add` does, and clones nothing (p614).
+
 ## 5.12.0
 
 ### Minor Changes

package/README.md

@@ -82,8 +82,8 @@ first `run` or `repl`:
 
 | Driver | Install |
 |---|---|
-| `claude-sdk` (default) | `npm i -D @anthropic-ai/claude-agent-sdk` (with Bun: `bun add @anthropic-ai/claude-agent-sdk`) |
-| `codex` | `npm i -D @openai/codex-sdk` (with Bun: `bun add @openai/codex-sdk`) |
+| `claude-sdk` (default) | `npm i @anthropic-ai/claude-agent-sdk` (with Bun: `bun add @anthropic-ai/claude-agent-sdk`) |
+| `codex` | `npm i @openai/codex-sdk` (with Bun: `bun add @openai/codex-sdk`) |
 | `omp` | none; needs the `omp` binary on your `PATH` and a configured model |
 
 Without the SDK, `skaile run` exits 1 with `Claude Agent SDK not installed` (or `Codex SDK not installed`).

package/dist/{asset-feeds-AM6PSSGM.js → asset-feeds-ALMTHLPV.js}

@@ -1,28 +1,28 @@
-import { storeNotInstallableReason } from './chunk-K4VOEYOR.js';
-import { getKnownKinds } from './chunk-GWD3QNVS.js';
-import './chunk-7XWUJC3A.js';
+import { storeNotInstallableReason } from './chunk-U27JRO5L.js';
+import { getKnownKinds } from './chunk-4NJ3QQHZ.js';
+import './chunk-XBYSURMK.js';
 import './chunk-X3RMRJNR.js';
 import './chunk-7RGTAEG6.js';
 import './chunk-NUELZWCF.js';
-import './chunk-C3BMXXTN.js';
-import './chunk-7CR2OZPA.js';
-import './chunk-UTKENBB6.js';
+import './chunk-DKGEV6SQ.js';
+import './chunk-NVO6WECE.js';
+import './chunk-PXDWTJ3P.js';
 import './chunk-H5U7LNTJ.js';
 import './chunk-3TXEJN4W.js';
-import './chunk-6VLHITAM.js';
-import './chunk-T5TSLSRO.js';
+import './chunk-57SF6W6E.js';
+import './chunk-BF422IDP.js';
 import './chunk-4GY63JU6.js';
-import { factoryAssetRoots } from './chunk-SHQMPGOL.js';
-import './chunk-PMECEZK3.js';
+import { factoryAssetRoots } from './chunk-QO7CR3KB.js';
+import './chunk-D54T2F54.js';
 import './chunk-5BEFNLOR.js';
 import './chunk-A2ULN3KX.js';
-import { scanRepo } from './chunk-PNOGX36L.js';
+import { scanRepo } from './chunk-L3ZGYSWY.js';
 import './chunk-L5VSIPQD.js';
-import './chunk-CPSIPIX7.js';
-import './chunk-CTP3XBMF.js';
+import './chunk-IG5LZ3WU.js';
+import './chunk-IY5E7Y5W.js';
 import './chunk-RVRB27AN.js';
-import { parseRequires } from './chunk-XTVSNWLL.js';
-import './chunk-PNTXHTBC.js';
+import { parseRequires } from './chunk-M3P4BYRK.js';
+import './chunk-J4OYIYFQ.js';
 import './chunk-ICSCSM5D.js';
 import './chunk-DKXNKFKP.js';
 import './chunk-MJHSLODD.js';
@@ -52,8 +52,8 @@ function libraryEntryOf(asset) {
 async function libraryAssets() {
   const notes = [];
   try {
-    const { openLibraryManager } = await import('./open-library-N6ESO6IK.js');
-    const { getKindRegistry } = await import('./open-registry-CBZ5MWTT.js');
+    const { openLibraryManager } = await import('./open-library-PZAT3TJA.js');
+    const { getKindRegistry } = await import('./open-registry-W46UXZ3I.js');
     const { scanAuthoringLibraries } = await import('./library/index.js');
     const { library: index, close } = await openLibraryManager();
     try {
@@ -86,7 +86,7 @@ async function libraryAssets() {
 async function storeAssets(projectDir) {
   const notes = [];
   try {
-    const { resolveCatalogSource } = await import('./open-library-N6ESO6IK.js');
+    const { resolveCatalogSource } = await import('./open-library-PZAT3TJA.js');
     const { source, close } = await resolveCatalogSource({ projectDir });
     try {
       const assets = (await source.listAssets()).filter(
@@ -167,5 +167,5 @@ async function gatherAssetFeeds(am, projectDir) {
 }
 
 export { gatherAssetFeeds };
-//# sourceMappingURL=asset-feeds-AM6PSSGM.js.map
-//# sourceMappingURL=asset-feeds-AM6PSSGM.js.map
+//# sourceMappingURL=asset-feeds-ALMTHLPV.js.map
+//# sourceMappingURL=asset-feeds-ALMTHLPV.js.map

package/dist/{asset-feeds-AM6PSSGM.js.map → asset-feeds-ALMTHLPV.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../cli/src/asset-feeds.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwEA,SAAS,eAAe,KAAA,EAAsC;AAC5D,EAAA,MAAM,EAAE,UAAS,GAAI,KAAA;AACrB,EAAA,MAAM,MAAA,GAAU,SAAS,QAAA,EAAkD,QAAA;AAC3E,EAAA,MAAM,WAAA,GAAc,SAAS,QAAA,IAAY,MAAA;AACzC,EAAA,MAAM,cACJ,OAAO,WAAA,KAAgB,QAAA,GACnB,WAAA,GACA,MAAM,OAAA,CAAQ,WAAW,CAAA,GACvB,WAAA,CAAY,OAAO,CAAC,CAAA,KAAmB,OAAO,CAAA,KAAM,QAAQ,CAAA,GAC5D,MAAA;AACR,EAAA,MAAM,OAAO,QAAA,CAAS,YAAA;AACtB,EAAA,OAAO;AAAA,IACL,MAAM,KAAA,CAAM,IAAA;AAAA,IACZ,MAAM,KAAA,CAAM,IAAA;AAAA,IACZ,aAAa,OAAO,QAAA,CAAS,WAAA,KAAgB,QAAA,GAAW,SAAS,WAAA,GAAc,EAAA;AAAA,IAC/E,QAAQ,KAAA,CAAM,YAAA;AAAA,IACd,WAAW,KAAA,CAAM,SAAA;AAAA,IACjB,GAAI,MAAM,MAAA,GAAS,EAAE,QAAQ,KAAA,CAAM,MAAA,KAAW,EAAC;AAAA,IAC/C,SAAS,KAAA,CAAM,OAAA;AAAA,IACf,QAAA,EAAU,gBAAgB,MAAA,GAAY,KAAK,aAAA,CAAc,EAAE,QAAA,EAAU,WAAA,EAAa,CAAA;AAAA,IAClF,cACE,KAAA,CAAM,IAAA,KAAS,YAAY,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,GACzC,IAAA,CAAK,OAAO,CAAC,CAAA,KAAmB,OAAO,CAAA,KAAM,QAAA,IAAY,EAAE,MAAA,GAAS,CAAC,IACrE;AAAC,GACT;AACF;AAWA,eAAe,aAAA,GAGZ;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AAEF,IAAA,MAAM,EAAE,kBAAA,EAAmB,GAAI,MAAM,OAAO,4BAAmB,CAAA;AAC/D,IAAA,MAAM,EAAE,eAAA,EAAgB,GAAI,MAAM,OAAO,6BAAoB,CAAA;AAC7D,IAAA,MAAM,EAAE,sBAAA,EAAuB,GAAI,MAAM,OAAO,oBAA4B,CAAA;AAC5E,IAAA,MAAM,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAM,GAAI,MAAM,kBAAA,EAAmB;AAC3D,IAAA,IAAI;AACF,MAAA,MAAM,UAAyB,EAAC;AAChC,MAAA,KAAA,MAAW,QAAQ,MAAM,sBAAA,CAAuB,KAAA,EAAO,eAAA,EAAiB,CAAA,EAAG;AACzE,QAAA,IAAI,IAAA,CAAK,UAAU,KAAA,CAAA,EAAW;AAC5B,UAAA,KAAA,CAAM,IAAA,CAAK,EAAE,IAAA,EAAM,WAAA,EAAa,OAAA,EAAS,CAAA,EAAG,IAAA,CAAK,OAAA,CAAQ,IAAI,CAAA,EAAA,EAAK,IAAA,CAAK,KAAK,IAAI,CAAA;AAChF,UAAA;AAAA,QACF;AACA,QAAA,KAAA,MAAW,KAAA,IAAS,KAAK,MAAA,EAAQ;AAC/B,UAAA,OAAA,CAAQ,IAAA,CAAK;AAAA,YACX,MAAA,EAAQ,SAAA;AAAA,YACR,KAAA,EAAO,eAAe,KAAK,CAAA;AAAA,YAC3B,KAAA,EAAO,KAAK,OAAA,CAAQ;AAAA,WACrB,CAAA;AAAA,QACH;AAAA,MACF;AACA,MAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,IAC1B,CAAA,SAAE;AACA,MAAA,KAAA,EAAM;AAAA,IACR;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,IAAA,EAAM,WAAA;AAAA,MACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACzD,CAAA;AACD,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAYA,eAAe,YAAY,UAAA,EAGxB;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AACF,IAAA,MAAM,EAAE,oBAAA,EAAqB,GAAI,MAAM,OAAO,4BAAmB,CAAA;AACjE,IAAA,MAAM,EAAE,QAAQ,KAAA,EAAM,GAAI,MAAM,oBAAA,CAAqB,EAAE,YAAY,CAAA;AACnE,IAAA,IAAI;AAEF,MAAA,MAAM,MAAA,GAAA,CAAU,MAAM,MAAA,CAAO,UAAA,EAAW,EAAG,MAAA;AAAA,QACzC,CAAC,CAAA,KAAM,yBAAA,CAA0B,CAAC,CAAA,KAAM,KAAA;AAAA,OAC1C;AACA,MAAA,MAAM,OAAA,GAA0B,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,QACjD,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,IAAA,EAAO,EAAE,IAAA,IAAsB,OAAA;AAAA,QAC/B,WAAA,EAAa,EAAE,WAAA,IAAe,EAAA;AAAA,QAC9B,MAAA,EAAQ,CAAA,QAAA,EAAW,CAAA,CAAE,EAAE,CAAA,CAAA;AAAA,QACvB,WAAW,CAAA,CAAE,SAAA;AAAA,QACb,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,QAAQ,CAAA,CAAE,MAAA;AAAA,QACV,UAAU,CAAA,CAAE,QAAA;AAAA,QACZ,SAAS,CAAA,CAAE,OAAA;AAAA,QACX,UAAU,EAAC;AAAA,QACX,cAAc;AAAC,OACjB,CAAE,CAAA;AACF,MAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,IAC1B,CAAA,SAAE;AACA,MAAA,KAAA,EAAM;AAAA,IACR;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,MAAM,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAG3D,IAAA,IAAI,CAAC,QAAA,CAAS,IAAA,CAAK,GAAG,CAAA,EAAG;AACvB,MAAA,KAAA,CAAM,KAAK,EAAE,IAAA,EAAM,OAAA,EAAS,OAAA,EAAS,KAAK,CAAA;AAAA,IAC5C;AACA,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAaA,eAAe,aAAa,EAAA,EAA8C;AAIxE,EAAA,MAAM,eAAA,GAAkB,iBAAA,EAAkB,CAAE,GAAA,CAAI,CAAC,CAAA,KAAO,CAAA,CAAE,QAAA,CAAc,IAAA,CAAA,GAAG,CAAA,GAAI,CAAA,GAAI,CAAA,GAAS,IAAA,CAAA,GAAI,CAAA;AAChG,EAAA,MAAM,gBAAgB,CAAC,CAAA,KACrB,eAAA,CAAgB,IAAA,CAAK,CAAC,EAAA,KAAO,CAAA,KAAM,EAAA,CAAG,KAAA,CAAM,GAAG,EAAE,CAAA,IAAK,CAAA,CAAE,UAAA,CAAW,EAAE,CAAC,CAAA;AAExE,EAAA,MAAM,GAAA,GAAA,CAAO,MAAM,EAAA,CAAG,MAAA,EAAO,EAAG,MAAA,CAAO,CAAC,CAAA,KAAM,CAAC,aAAA,CAAc,CAAA,CAAE,MAAM,CAAC,CAAA;AACtE,EAAA,MAAM,UAAyB,EAAC;AAMhC,EAAA,KAAA,MAAW,EAAE,QAAA,EAAU,IAAA,EAAK,IAAK,EAAA,CAAG,iBAAgB,EAAG;AACrD,IAAA,IAAI,aAAA,CAAc,IAAI,CAAA,EAAG;AACzB,IAAA,MAAM,SAAS,IAAA,CAAK,QAAA,CAAc,IAAA,CAAA,GAAG,CAAA,GAAI,OAAO,IAAA,GAAY,IAAA,CAAA,GAAA;AAC5D,IAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,MAAA,KAAW,IAAA,IAAQ,CAAA,CAAE,MAAA,CAAO,UAAA,CAAW,MAAM,CAAC,CAAA;AAChF,IAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG;AACxB,IAAA,MAAM,aAAa,QAAA,CAAS,KAAA,CAAM,GAAG,CAAA,CAAE,KAAI,IAAK,QAAA;AAChD,IAAA,KAAA,MAAW,KAAA,IAAS,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,EAAE,QAAQ,QAAA,EAAU,KAAA,EAAO,KAAA,EAAO,UAAA,EAAY,CAAA;AAAA,EACxF;AACA,EAAA,OAAO,OAAA;AACT;AAUA,eAAe,aAAA,GAGZ;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AACF,IAAA,MAAM,UAA0B,EAAC;AACjC,IAAA,KAAA,MAAW,IAAA,IAAQ,mBAAkB,EAAG;AACtC,MAAA,OAAA,CAAQ,IAAA,CAAK,GAAI,MAAM,QAAA,CAAS,IAAA,EAAM,gBAAA,EAAkB,EAAE,UAAA,EAAY,aAAA,EAAc,EAAG,CAAE,CAAA;AAAA,IAC3F;AACA,IAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,EAC1B,SAAS,GAAA,EAAK;AACZ,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,IAAA,EAAM,SAAA;AAAA,MACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACzD,CAAA;AACD,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAGA,SAAS,GAAA,CAAI,QAAqB,OAAA,EAAwC;AACxE,EAAA,OAAO,QAAQ,GAAA,CAAI,CAAC,WAAW,EAAE,MAAA,EAAQ,OAAM,CAAE,CAAA;AACnD;AASA,eAAsB,gBAAA,CACpB,IACA,UAAA,EAC0B;AAC1B,EAAA,MAAM,CAAC,IAAA,EAAM,KAAK,CAAA,GAAI,MAAM,OAAA,CAAQ,GAAA,CAAI,CAAC,aAAA,EAAc,EAAG,WAAA,CAAY,UAAU,CAAC,CAAC,CAAA;AAClF,EAAA,MAAM,OAAA,GAAU,MAAM,aAAA,EAAc;AACpC,EAAA,MAAM,GAAA,GAAM,MAAM,YAAA,CAAa,EAAE,CAAA;AACjC,EAAA,OAAO;AAAA,IACL,OAAA,EAAS;AAAA,MACP,GAAG,GAAA;AAAA,MACH,GAAG,IAAA,CAAK,OAAA;AAAA,MACR,GAAG,GAAA,CAAI,SAAA,EAAW,OAAA,CAAQ,OAAO,CAAA;AAAA,MACjC,GAAG,GAAA,CAAI,OAAA,EAAS,KAAA,CAAM,OAAO;AAAA,KAC/B;AAAA,IACA,KAAA,EAAO,CAAC,GAAG,IAAA,CAAK,KAAA,EAAO,GAAG,KAAA,CAAM,KAAA,EAAO,GAAG,OAAA,CAAQ,KAAK;AAAA,GACzD;AACF","file":"asset-feeds-AM6PSSGM.js","sourcesContent":["/**\n * asset-feeds.ts — gather installable assets from every feed the manage TUI\n * surfaces.\n *\n * Four feeds, normalized into `CatalogEntry`:\n * - **Project sources** — `skaile.yaml` `sources:` entries (scanned via\n *   `AssetManager.search()`; the new `sources:` field is merged into the\n *   legacy repositories map in `AssetManager.loadConfig`).\n * - **Local libraries** — user authoring places from `LocalIndex`, read through\n *   `scanAuthoringLibraries` (`@skaile/workspaces/library`): the same scan\n *   `library index` / `search --local` use, so publishers and refs match them\n *   (per-asset `publisher_overrides` honoured), `dev_paths` assets are left out,\n *   and a library that fails to scan becomes one note while the rest stay listed.\n * - **Factory assets** — the bundled first-party `factory-assets` tree\n *   (`factoryAssetRoots()`), scanned from disk. Always present; no network.\n * - **Remote store** — the configured catalog source when `catalog.url` is\n *   not `local`. Failures are non-fatal — they surface as notes.\n */\n\nimport * as path from \"node:path\";\nimport {\n  type AssetKind,\n  type CatalogEntry,\n  factoryAssetRoots,\n  parseRequires,\n  scanRepo,\n} from \"@skaile/workspaces/core\";\nimport { getKnownKinds } from \"./open-registry.ts\";\nimport { storeNotInstallableReason } from \"./store-addable.ts\";\nimport type { DiscoveredAsset } from \"@skaile/workspaces/discovery\";\n\n/** One non-fatal note returned to the caller for surfacing in the UI. */\nexport interface FeedNote {\n  feed: \"sources\" | \"libraries\" | \"store\" | \"factory\";\n  message: string;\n}\n\n/**\n * Which feed an asset came from. This is the top-level grouping axis in the\n * manage TUI (\"where is this skill coming from?\") and is intentionally distinct\n * from `publisher` (asset-intrinsic identity): the same publisher can legitimately\n * appear under more than one origin (e.g. a github repo you added as a `source`\n * that is also listed in the remote `store`).\n */\nexport type AssetOrigin = \"source\" | \"library\" | \"factory\" | \"store\";\n\n/** A catalog entry tagged with the feed it was gathered from. */\nexport interface OriginEntry {\n  origin: AssetOrigin;\n  entry: CatalogEntry;\n  /**\n   * Second-level grouping label for the manage tree. Defaults (when unset) to the\n   * entry's `publisher`; the source feed sets it to the source's short repo name\n   * so the Sources band groups by source — \"which repo did this come from\" — not\n   * by the asset-intrinsic publisher.\n   */\n  group?: string;\n}\n\nexport interface AssetFeedResult {\n  entries: OriginEntry[];\n  notes: FeedNote[];\n}\n\n/**\n * Map one discovered library asset to the `CatalogEntry` the manage rows read.\n * `publisher` is the bare per-asset publisher (what `search --local` prints),\n * `source` the manifest path. `repo` is left unset: it only feeds the Sources-tree\n * org grouping. `requires` / `dependencies` come from the manifest the way the\n * scanner fills them — string `requires:` refs parsed to `{kind, name}`, a bundle's\n * string `dependencies:` list verbatim.\n */\nfunction libraryEntryOf(asset: DiscoveredAsset): CatalogEntry {\n  const { manifest } = asset;\n  const nested = (manifest.metadata as Record<string, unknown> | undefined)?.requires;\n  const rawRequires = manifest.requires ?? nested;\n  const requireRefs =\n    typeof rawRequires === \"string\"\n      ? rawRequires\n      : Array.isArray(rawRequires)\n        ? rawRequires.filter((r): r is string => typeof r === \"string\")\n        : undefined;\n  const deps = manifest.dependencies;\n  return {\n    name: asset.name,\n    kind: asset.kind as AssetKind,\n    description: typeof manifest.description === \"string\" ? manifest.description : \"\",\n    source: asset.manifestPath,\n    publisher: asset.publisher,\n    ...(asset.plugin ? { plugin: asset.plugin } : {}),\n    version: asset.version,\n    requires: requireRefs === undefined ? [] : parseRequires({ requires: requireRefs }),\n    dependencies:\n      asset.kind === \"bundle\" && Array.isArray(deps)\n        ? deps.filter((d): d is string => typeof d === \"string\" && d.length > 0)\n        : [],\n  };\n}\n\n/**\n * Pull assets from local libraries (the authoring places under\n * `~/.skaile/libraries/<name>/`, not the `~/.skaile/cache/sources/` cache) through\n * `scanAuthoringLibraries`, grouped under the bare library name\n * (`group: <name>`) so the manage TUI shows a clean `<name>` band — no\n * `library:` prefix (mirrors the source feed). Plugin grouping (`entry.plugin`)\n * comes from `DiscoveredAsset.plugin`. A library whose scan fails becomes one\n * `FeedNote`; the outer `catch` covers only opening the index.\n */\nasync function libraryAssets(): Promise<{\n  entries: OriginEntry[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    // Lazy: the library subpath pulls in SQLite, which the other feeds never need.\n    const { openLibraryManager } = await import(\"./open-library.ts\");\n    const { getKindRegistry } = await import(\"./open-registry.ts\");\n    const { scanAuthoringLibraries } = await import(\"@skaile/workspaces/library\");\n    const { library: index, close } = await openLibraryManager();\n    try {\n      const entries: OriginEntry[] = [];\n      for (const scan of await scanAuthoringLibraries(index, getKindRegistry())) {\n        if (scan.error !== undefined) {\n          notes.push({ feed: \"libraries\", message: `${scan.library.name}: ${scan.error}` });\n          continue;\n        }\n        for (const asset of scan.assets) {\n          entries.push({\n            origin: \"library\",\n            entry: libraryEntryOf(asset),\n            group: scan.library.name,\n          });\n        }\n      }\n      return { entries, notes };\n    } finally {\n      close();\n    }\n  } catch (err) {\n    notes.push({\n      feed: \"libraries\",\n      message: err instanceof Error ? err.message : String(err),\n    });\n    return { entries: [], notes };\n  }\n}\n\n/**\n * Pull a (best-effort) snapshot of the connected remote store catalog.\n *\n * - Returns no entries when the resolved catalog is local-only or the host\n *   is unreachable (the failure becomes a note, not an exception).\n * - Maps `CatalogAsset` → `CatalogEntry`, carrying `publisher`, `repo`, and\n *   `category` straight through and using `source = \"store://<id>\"`; per-file\n *   `source` paths are not available for remote assets so the canonical ref is\n *   a stable placeholder.\n */\nasync function storeAssets(projectDir: string): Promise<{\n  entries: CatalogEntry[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    const { resolveCatalogSource } = await import(\"./open-library.ts\");\n    const { source, close } = await resolveCatalogSource({ projectDir });\n    try {\n      // The store lists only what `skaile add` can install (see store-addable.ts).\n      const assets = (await source.listAssets()).filter(\n        (a) => storeNotInstallableReason(a) === undefined,\n      );\n      const entries: CatalogEntry[] = assets.map((a) => ({\n        name: a.name,\n        kind: (a.kind as AssetKind) ?? \"skill\",\n        description: a.description ?? \"\",\n        source: `store://${a.id}`,\n        publisher: a.publisher,\n        repo: a.repo,\n        plugin: a.plugin,\n        category: a.category,\n        version: a.version,\n        requires: [],\n        dependencies: [],\n      }));\n      return { entries, notes };\n    } finally {\n      close();\n    }\n  } catch (err) {\n    const msg = err instanceof Error ? err.message : String(err);\n    // Local-only catalog throws a recognizable message — silence it; absence\n    // is the user's choice, not an error.\n    if (!/local/i.test(msg)) {\n      notes.push({ feed: \"store\", message: msg });\n    }\n    return { entries: [], notes };\n  }\n}\n\n/** The slice of `AssetManager` the source feed needs (kept narrow for tests). */\ninterface AssetManagerLike {\n  search: () => Promise<CatalogEntry[]>;\n  searchRepoRoots: () => { repoName: string; root: string }[];\n}\n\n/**\n * Project-source feed: leans on `AssetManager.search()`, which merges\n * `skaile.yaml`'s `sources:` field into the repositories map. Plugin grouping\n * (`entry.plugin`) is stamped by the scanner, so entries pass through as-is.\n */\nasync function sourceAssets(am: AssetManagerLike): Promise<OriginEntry[]> {\n  // The bundled factory tree is injected into the repositories map as an implicit\n  // source, so `am.search()` returns it too. It has its own `factory` origin band,\n  // so drop it here — otherwise the same first-party skills list twice under Sources.\n  const factoryPrefixes = factoryAssetRoots().map((r) => (r.endsWith(path.sep) ? r : r + path.sep));\n  const isFactoryPath = (p: string) =>\n    factoryPrefixes.some((fp) => p === fp.slice(0, -1) || p.startsWith(fp));\n\n  const all = (await am.search()).filter((e) => !isFactoryPath(e.source));\n  const entries: OriginEntry[] = [];\n  // Group each source's entries under the source node (its short repo name), not\n  // the publisher: under Sources the navigational question is \"which repo did\n  // this come from\". Each entry's `source` (absolute manifest path) lives under\n  // exactly one declared root, so group by prefix. The cache slug is\n  // URL-keyed `github.com/<org>/<repo>` — take the trailing segment.\n  for (const { repoName, root } of am.searchRepoRoots()) {\n    if (isFactoryPath(root)) continue;\n    const prefix = root.endsWith(path.sep) ? root : root + path.sep;\n    const owned = all.filter((e) => e.source === root || e.source.startsWith(prefix));\n    if (owned.length === 0) continue;\n    const sourceName = repoName.split(\"/\").pop() || repoName;\n    for (const entry of owned) entries.push({ origin: \"source\", entry, group: sourceName });\n  }\n  return entries;\n}\n\n/**\n * Factory-asset feed: scan the bundled first-party `factory-assets` tree(s)\n * resolved by `factoryAssetRoots()` (the `SKAILE_FACTORY_ASSETS_DIR` override\n * layer ahead of the bundled tree). Local disk only, no network — the entries are\n * the built-in skills / connectors / bundles that ship with `@skaile/workspaces`.\n * `factoryAssetRoots()` already dedupes, so the env override pointing at the\n * bundled dir collapses to one root.\n */\nasync function factoryAssets(): Promise<{\n  entries: CatalogEntry[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    const entries: CatalogEntry[] = [];\n    for (const root of factoryAssetRoots()) {\n      entries.push(...(await scanRepo(root, \"skaile-factory\", { knownKinds: getKnownKinds() })));\n    }\n    return { entries, notes };\n  } catch (err) {\n    notes.push({\n      feed: \"factory\",\n      message: err instanceof Error ? err.message : String(err),\n    });\n    return { entries: [], notes };\n  }\n}\n\n/** Tag a flat entry list with a single origin. */\nfunction tag(origin: AssetOrigin, entries: CatalogEntry[]): OriginEntry[] {\n  return entries.map((entry) => ({ origin, entry }));\n}\n\n/**\n * Run all feeds and return a single normalized result.\n *\n * Feeds run in parallel where possible — the store fetch is the slow one\n * (one HTTP call) and is fired alongside the local library walk. The factory\n * scan is local disk only, so it runs inline.\n */\nexport async function gatherAssetFeeds(\n  am: AssetManagerLike,\n  projectDir: string,\n): Promise<AssetFeedResult> {\n  const [libs, store] = await Promise.all([libraryAssets(), storeAssets(projectDir)]);\n  const factory = await factoryAssets();\n  const src = await sourceAssets(am);\n  return {\n    entries: [\n      ...src,\n      ...libs.entries,\n      ...tag(\"factory\", factory.entries),\n      ...tag(\"store\", store.entries),\n    ],\n    notes: [...libs.notes, ...store.notes, ...factory.notes],\n  };\n}\n"]}
+{"version":3,"sources":["../cli/src/asset-feeds.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwEA,SAAS,eAAe,KAAA,EAAsC;AAC5D,EAAA,MAAM,EAAE,UAAS,GAAI,KAAA;AACrB,EAAA,MAAM,MAAA,GAAU,SAAS,QAAA,EAAkD,QAAA;AAC3E,EAAA,MAAM,WAAA,GAAc,SAAS,QAAA,IAAY,MAAA;AACzC,EAAA,MAAM,cACJ,OAAO,WAAA,KAAgB,QAAA,GACnB,WAAA,GACA,MAAM,OAAA,CAAQ,WAAW,CAAA,GACvB,WAAA,CAAY,OAAO,CAAC,CAAA,KAAmB,OAAO,CAAA,KAAM,QAAQ,CAAA,GAC5D,MAAA;AACR,EAAA,MAAM,OAAO,QAAA,CAAS,YAAA;AACtB,EAAA,OAAO;AAAA,IACL,MAAM,KAAA,CAAM,IAAA;AAAA,IACZ,MAAM,KAAA,CAAM,IAAA;AAAA,IACZ,aAAa,OAAO,QAAA,CAAS,WAAA,KAAgB,QAAA,GAAW,SAAS,WAAA,GAAc,EAAA;AAAA,IAC/E,QAAQ,KAAA,CAAM,YAAA;AAAA,IACd,WAAW,KAAA,CAAM,SAAA;AAAA,IACjB,GAAI,MAAM,MAAA,GAAS,EAAE,QAAQ,KAAA,CAAM,MAAA,KAAW,EAAC;AAAA,IAC/C,SAAS,KAAA,CAAM,OAAA;AAAA,IACf,QAAA,EAAU,gBAAgB,MAAA,GAAY,KAAK,aAAA,CAAc,EAAE,QAAA,EAAU,WAAA,EAAa,CAAA;AAAA,IAClF,cACE,KAAA,CAAM,IAAA,KAAS,YAAY,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,GACzC,IAAA,CAAK,OAAO,CAAC,CAAA,KAAmB,OAAO,CAAA,KAAM,QAAA,IAAY,EAAE,MAAA,GAAS,CAAC,IACrE;AAAC,GACT;AACF;AAWA,eAAe,aAAA,GAGZ;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AAEF,IAAA,MAAM,EAAE,kBAAA,EAAmB,GAAI,MAAM,OAAO,4BAAmB,CAAA;AAC/D,IAAA,MAAM,EAAE,eAAA,EAAgB,GAAI,MAAM,OAAO,6BAAoB,CAAA;AAC7D,IAAA,MAAM,EAAE,sBAAA,EAAuB,GAAI,MAAM,OAAO,oBAA4B,CAAA;AAC5E,IAAA,MAAM,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAM,GAAI,MAAM,kBAAA,EAAmB;AAC3D,IAAA,IAAI;AACF,MAAA,MAAM,UAAyB,EAAC;AAChC,MAAA,KAAA,MAAW,QAAQ,MAAM,sBAAA,CAAuB,KAAA,EAAO,eAAA,EAAiB,CAAA,EAAG;AACzE,QAAA,IAAI,IAAA,CAAK,UAAU,KAAA,CAAA,EAAW;AAC5B,UAAA,KAAA,CAAM,IAAA,CAAK,EAAE,IAAA,EAAM,WAAA,EAAa,OAAA,EAAS,CAAA,EAAG,IAAA,CAAK,OAAA,CAAQ,IAAI,CAAA,EAAA,EAAK,IAAA,CAAK,KAAK,IAAI,CAAA;AAChF,UAAA;AAAA,QACF;AACA,QAAA,KAAA,MAAW,KAAA,IAAS,KAAK,MAAA,EAAQ;AAC/B,UAAA,OAAA,CAAQ,IAAA,CAAK;AAAA,YACX,MAAA,EAAQ,SAAA;AAAA,YACR,KAAA,EAAO,eAAe,KAAK,CAAA;AAAA,YAC3B,KAAA,EAAO,KAAK,OAAA,CAAQ;AAAA,WACrB,CAAA;AAAA,QACH;AAAA,MACF;AACA,MAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,IAC1B,CAAA,SAAE;AACA,MAAA,KAAA,EAAM;AAAA,IACR;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,IAAA,EAAM,WAAA;AAAA,MACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACzD,CAAA;AACD,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAYA,eAAe,YAAY,UAAA,EAGxB;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AACF,IAAA,MAAM,EAAE,oBAAA,EAAqB,GAAI,MAAM,OAAO,4BAAmB,CAAA;AACjE,IAAA,MAAM,EAAE,QAAQ,KAAA,EAAM,GAAI,MAAM,oBAAA,CAAqB,EAAE,YAAY,CAAA;AACnE,IAAA,IAAI;AAEF,MAAA,MAAM,MAAA,GAAA,CAAU,MAAM,MAAA,CAAO,UAAA,EAAW,EAAG,MAAA;AAAA,QACzC,CAAC,CAAA,KAAM,yBAAA,CAA0B,CAAC,CAAA,KAAM,KAAA;AAAA,OAC1C;AACA,MAAA,MAAM,OAAA,GAA0B,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,QACjD,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,IAAA,EAAO,EAAE,IAAA,IAAsB,OAAA;AAAA,QAC/B,WAAA,EAAa,EAAE,WAAA,IAAe,EAAA;AAAA,QAC9B,MAAA,EAAQ,CAAA,QAAA,EAAW,CAAA,CAAE,EAAE,CAAA,CAAA;AAAA,QACvB,WAAW,CAAA,CAAE,SAAA;AAAA,QACb,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,QAAQ,CAAA,CAAE,MAAA;AAAA,QACV,UAAU,CAAA,CAAE,QAAA;AAAA,QACZ,SAAS,CAAA,CAAE,OAAA;AAAA,QACX,UAAU,EAAC;AAAA,QACX,cAAc;AAAC,OACjB,CAAE,CAAA;AACF,MAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,IAC1B,CAAA,SAAE;AACA,MAAA,KAAA,EAAM;AAAA,IACR;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,MAAM,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAG3D,IAAA,IAAI,CAAC,QAAA,CAAS,IAAA,CAAK,GAAG,CAAA,EAAG;AACvB,MAAA,KAAA,CAAM,KAAK,EAAE,IAAA,EAAM,OAAA,EAAS,OAAA,EAAS,KAAK,CAAA;AAAA,IAC5C;AACA,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAaA,eAAe,aAAa,EAAA,EAA8C;AAIxE,EAAA,MAAM,eAAA,GAAkB,iBAAA,EAAkB,CAAE,GAAA,CAAI,CAAC,CAAA,KAAO,CAAA,CAAE,QAAA,CAAc,IAAA,CAAA,GAAG,CAAA,GAAI,CAAA,GAAI,CAAA,GAAS,IAAA,CAAA,GAAI,CAAA;AAChG,EAAA,MAAM,gBAAgB,CAAC,CAAA,KACrB,eAAA,CAAgB,IAAA,CAAK,CAAC,EAAA,KAAO,CAAA,KAAM,EAAA,CAAG,KAAA,CAAM,GAAG,EAAE,CAAA,IAAK,CAAA,CAAE,UAAA,CAAW,EAAE,CAAC,CAAA;AAExE,EAAA,MAAM,GAAA,GAAA,CAAO,MAAM,EAAA,CAAG,MAAA,EAAO,EAAG,MAAA,CAAO,CAAC,CAAA,KAAM,CAAC,aAAA,CAAc,CAAA,CAAE,MAAM,CAAC,CAAA;AACtE,EAAA,MAAM,UAAyB,EAAC;AAMhC,EAAA,KAAA,MAAW,EAAE,QAAA,EAAU,IAAA,EAAK,IAAK,EAAA,CAAG,iBAAgB,EAAG;AACrD,IAAA,IAAI,aAAA,CAAc,IAAI,CAAA,EAAG;AACzB,IAAA,MAAM,SAAS,IAAA,CAAK,QAAA,CAAc,IAAA,CAAA,GAAG,CAAA,GAAI,OAAO,IAAA,GAAY,IAAA,CAAA,GAAA;AAC5D,IAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,MAAA,KAAW,IAAA,IAAQ,CAAA,CAAE,MAAA,CAAO,UAAA,CAAW,MAAM,CAAC,CAAA;AAChF,IAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG;AACxB,IAAA,MAAM,aAAa,QAAA,CAAS,KAAA,CAAM,GAAG,CAAA,CAAE,KAAI,IAAK,QAAA;AAChD,IAAA,KAAA,MAAW,KAAA,IAAS,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,EAAE,QAAQ,QAAA,EAAU,KAAA,EAAO,KAAA,EAAO,UAAA,EAAY,CAAA;AAAA,EACxF;AACA,EAAA,OAAO,OAAA;AACT;AAUA,eAAe,aAAA,GAGZ;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AACF,IAAA,MAAM,UAA0B,EAAC;AACjC,IAAA,KAAA,MAAW,IAAA,IAAQ,mBAAkB,EAAG;AACtC,MAAA,OAAA,CAAQ,IAAA,CAAK,GAAI,MAAM,QAAA,CAAS,IAAA,EAAM,gBAAA,EAAkB,EAAE,UAAA,EAAY,aAAA,EAAc,EAAG,CAAE,CAAA;AAAA,IAC3F;AACA,IAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,EAC1B,SAAS,GAAA,EAAK;AACZ,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,IAAA,EAAM,SAAA;AAAA,MACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACzD,CAAA;AACD,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAGA,SAAS,GAAA,CAAI,QAAqB,OAAA,EAAwC;AACxE,EAAA,OAAO,QAAQ,GAAA,CAAI,CAAC,WAAW,EAAE,MAAA,EAAQ,OAAM,CAAE,CAAA;AACnD;AASA,eAAsB,gBAAA,CACpB,IACA,UAAA,EAC0B;AAC1B,EAAA,MAAM,CAAC,IAAA,EAAM,KAAK,CAAA,GAAI,MAAM,OAAA,CAAQ,GAAA,CAAI,CAAC,aAAA,EAAc,EAAG,WAAA,CAAY,UAAU,CAAC,CAAC,CAAA;AAClF,EAAA,MAAM,OAAA,GAAU,MAAM,aAAA,EAAc;AACpC,EAAA,MAAM,GAAA,GAAM,MAAM,YAAA,CAAa,EAAE,CAAA;AACjC,EAAA,OAAO;AAAA,IACL,OAAA,EAAS;AAAA,MACP,GAAG,GAAA;AAAA,MACH,GAAG,IAAA,CAAK,OAAA;AAAA,MACR,GAAG,GAAA,CAAI,SAAA,EAAW,OAAA,CAAQ,OAAO,CAAA;AAAA,MACjC,GAAG,GAAA,CAAI,OAAA,EAAS,KAAA,CAAM,OAAO;AAAA,KAC/B;AAAA,IACA,KAAA,EAAO,CAAC,GAAG,IAAA,CAAK,KAAA,EAAO,GAAG,KAAA,CAAM,KAAA,EAAO,GAAG,OAAA,CAAQ,KAAK;AAAA,GACzD;AACF","file":"asset-feeds-ALMTHLPV.js","sourcesContent":["/**\n * asset-feeds.ts — gather installable assets from every feed the manage TUI\n * surfaces.\n *\n * Four feeds, normalized into `CatalogEntry`:\n * - **Project sources** — `skaile.yaml` `sources:` entries (scanned via\n *   `AssetManager.search()`; the new `sources:` field is merged into the\n *   legacy repositories map in `AssetManager.loadConfig`).\n * - **Local libraries** — user authoring places from `LocalIndex`, read through\n *   `scanAuthoringLibraries` (`@skaile/workspaces/library`): the same scan\n *   `library index` / `search --local` use, so publishers and refs match them\n *   (per-asset `publisher_overrides` honoured), `dev_paths` assets are left out,\n *   and a library that fails to scan becomes one note while the rest stay listed.\n * - **Factory assets** — the bundled first-party `factory-assets` tree\n *   (`factoryAssetRoots()`), scanned from disk. Always present; no network.\n * - **Remote store** — the configured catalog source when `catalog.url` is\n *   not `local`. Failures are non-fatal — they surface as notes.\n */\n\nimport * as path from \"node:path\";\nimport {\n  type AssetKind,\n  type CatalogEntry,\n  factoryAssetRoots,\n  parseRequires,\n  scanRepo,\n} from \"@skaile/workspaces/core\";\nimport { getKnownKinds } from \"./open-registry.ts\";\nimport { storeNotInstallableReason } from \"./store-addable.ts\";\nimport type { DiscoveredAsset } from \"@skaile/workspaces/discovery\";\n\n/** One non-fatal note returned to the caller for surfacing in the UI. */\nexport interface FeedNote {\n  feed: \"sources\" | \"libraries\" | \"store\" | \"factory\";\n  message: string;\n}\n\n/**\n * Which feed an asset came from. This is the top-level grouping axis in the\n * manage TUI (\"where is this skill coming from?\") and is intentionally distinct\n * from `publisher` (asset-intrinsic identity): the same publisher can legitimately\n * appear under more than one origin (e.g. a github repo you added as a `source`\n * that is also listed in the remote `store`).\n */\nexport type AssetOrigin = \"source\" | \"library\" | \"factory\" | \"store\";\n\n/** A catalog entry tagged with the feed it was gathered from. */\nexport interface OriginEntry {\n  origin: AssetOrigin;\n  entry: CatalogEntry;\n  /**\n   * Second-level grouping label for the manage tree. Defaults (when unset) to the\n   * entry's `publisher`; the source feed sets it to the source's short repo name\n   * so the Sources band groups by source — \"which repo did this come from\" — not\n   * by the asset-intrinsic publisher.\n   */\n  group?: string;\n}\n\nexport interface AssetFeedResult {\n  entries: OriginEntry[];\n  notes: FeedNote[];\n}\n\n/**\n * Map one discovered library asset to the `CatalogEntry` the manage rows read.\n * `publisher` is the bare per-asset publisher (what `search --local` prints),\n * `source` the manifest path. `repo` is left unset: it only feeds the Sources-tree\n * org grouping. `requires` / `dependencies` come from the manifest the way the\n * scanner fills them — string `requires:` refs parsed to `{kind, name}`, a bundle's\n * string `dependencies:` list verbatim.\n */\nfunction libraryEntryOf(asset: DiscoveredAsset): CatalogEntry {\n  const { manifest } = asset;\n  const nested = (manifest.metadata as Record<string, unknown> | undefined)?.requires;\n  const rawRequires = manifest.requires ?? nested;\n  const requireRefs =\n    typeof rawRequires === \"string\"\n      ? rawRequires\n      : Array.isArray(rawRequires)\n        ? rawRequires.filter((r): r is string => typeof r === \"string\")\n        : undefined;\n  const deps = manifest.dependencies;\n  return {\n    name: asset.name,\n    kind: asset.kind as AssetKind,\n    description: typeof manifest.description === \"string\" ? manifest.description : \"\",\n    source: asset.manifestPath,\n    publisher: asset.publisher,\n    ...(asset.plugin ? { plugin: asset.plugin } : {}),\n    version: asset.version,\n    requires: requireRefs === undefined ? [] : parseRequires({ requires: requireRefs }),\n    dependencies:\n      asset.kind === \"bundle\" && Array.isArray(deps)\n        ? deps.filter((d): d is string => typeof d === \"string\" && d.length > 0)\n        : [],\n  };\n}\n\n/**\n * Pull assets from local libraries (the authoring places under\n * `~/.skaile/libraries/<name>/`, not the `~/.skaile/cache/sources/` cache) through\n * `scanAuthoringLibraries`, grouped under the bare library name\n * (`group: <name>`) so the manage TUI shows a clean `<name>` band — no\n * `library:` prefix (mirrors the source feed). Plugin grouping (`entry.plugin`)\n * comes from `DiscoveredAsset.plugin`. A library whose scan fails becomes one\n * `FeedNote`; the outer `catch` covers only opening the index.\n */\nasync function libraryAssets(): Promise<{\n  entries: OriginEntry[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    // Lazy: the library subpath pulls in SQLite, which the other feeds never need.\n    const { openLibraryManager } = await import(\"./open-library.ts\");\n    const { getKindRegistry } = await import(\"./open-registry.ts\");\n    const { scanAuthoringLibraries } = await import(\"@skaile/workspaces/library\");\n    const { library: index, close } = await openLibraryManager();\n    try {\n      const entries: OriginEntry[] = [];\n      for (const scan of await scanAuthoringLibraries(index, getKindRegistry())) {\n        if (scan.error !== undefined) {\n          notes.push({ feed: \"libraries\", message: `${scan.library.name}: ${scan.error}` });\n          continue;\n        }\n        for (const asset of scan.assets) {\n          entries.push({\n            origin: \"library\",\n            entry: libraryEntryOf(asset),\n            group: scan.library.name,\n          });\n        }\n      }\n      return { entries, notes };\n    } finally {\n      close();\n    }\n  } catch (err) {\n    notes.push({\n      feed: \"libraries\",\n      message: err instanceof Error ? err.message : String(err),\n    });\n    return { entries: [], notes };\n  }\n}\n\n/**\n * Pull a (best-effort) snapshot of the connected remote store catalog.\n *\n * - Returns no entries when the resolved catalog is local-only or the host\n *   is unreachable (the failure becomes a note, not an exception).\n * - Maps `CatalogAsset` → `CatalogEntry`, carrying `publisher`, `repo`, and\n *   `category` straight through and using `source = \"store://<id>\"`; per-file\n *   `source` paths are not available for remote assets so the canonical ref is\n *   a stable placeholder.\n */\nasync function storeAssets(projectDir: string): Promise<{\n  entries: CatalogEntry[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    const { resolveCatalogSource } = await import(\"./open-library.ts\");\n    const { source, close } = await resolveCatalogSource({ projectDir });\n    try {\n      // The store lists only what `skaile add` can install (see store-addable.ts).\n      const assets = (await source.listAssets()).filter(\n        (a) => storeNotInstallableReason(a) === undefined,\n      );\n      const entries: CatalogEntry[] = assets.map((a) => ({\n        name: a.name,\n        kind: (a.kind as AssetKind) ?? \"skill\",\n        description: a.description ?? \"\",\n        source: `store://${a.id}`,\n        publisher: a.publisher,\n        repo: a.repo,\n        plugin: a.plugin,\n        category: a.category,\n        version: a.version,\n        requires: [],\n        dependencies: [],\n      }));\n      return { entries, notes };\n    } finally {\n      close();\n    }\n  } catch (err) {\n    const msg = err instanceof Error ? err.message : String(err);\n    // Local-only catalog throws a recognizable message — silence it; absence\n    // is the user's choice, not an error.\n    if (!/local/i.test(msg)) {\n      notes.push({ feed: \"store\", message: msg });\n    }\n    return { entries: [], notes };\n  }\n}\n\n/** The slice of `AssetManager` the source feed needs (kept narrow for tests). */\ninterface AssetManagerLike {\n  search: () => Promise<CatalogEntry[]>;\n  searchRepoRoots: () => { repoName: string; root: string }[];\n}\n\n/**\n * Project-source feed: leans on `AssetManager.search()`, which merges\n * `skaile.yaml`'s `sources:` field into the repositories map. Plugin grouping\n * (`entry.plugin`) is stamped by the scanner, so entries pass through as-is.\n */\nasync function sourceAssets(am: AssetManagerLike): Promise<OriginEntry[]> {\n  // The bundled factory tree is injected into the repositories map as an implicit\n  // source, so `am.search()` returns it too. It has its own `factory` origin band,\n  // so drop it here — otherwise the same first-party skills list twice under Sources.\n  const factoryPrefixes = factoryAssetRoots().map((r) => (r.endsWith(path.sep) ? r : r + path.sep));\n  const isFactoryPath = (p: string) =>\n    factoryPrefixes.some((fp) => p === fp.slice(0, -1) || p.startsWith(fp));\n\n  const all = (await am.search()).filter((e) => !isFactoryPath(e.source));\n  const entries: OriginEntry[] = [];\n  // Group each source's entries under the source node (its short repo name), not\n  // the publisher: under Sources the navigational question is \"which repo did\n  // this come from\". Each entry's `source` (absolute manifest path) lives under\n  // exactly one declared root, so group by prefix. The cache slug is\n  // URL-keyed `github.com/<org>/<repo>` — take the trailing segment.\n  for (const { repoName, root } of am.searchRepoRoots()) {\n    if (isFactoryPath(root)) continue;\n    const prefix = root.endsWith(path.sep) ? root : root + path.sep;\n    const owned = all.filter((e) => e.source === root || e.source.startsWith(prefix));\n    if (owned.length === 0) continue;\n    const sourceName = repoName.split(\"/\").pop() || repoName;\n    for (const entry of owned) entries.push({ origin: \"source\", entry, group: sourceName });\n  }\n  return entries;\n}\n\n/**\n * Factory-asset feed: scan the bundled first-party `factory-assets` tree(s)\n * resolved by `factoryAssetRoots()` (the `SKAILE_FACTORY_ASSETS_DIR` override\n * layer ahead of the bundled tree). Local disk only, no network — the entries are\n * the built-in skills / connectors / bundles that ship with `@skaile/workspaces`.\n * `factoryAssetRoots()` already dedupes, so the env override pointing at the\n * bundled dir collapses to one root.\n */\nasync function factoryAssets(): Promise<{\n  entries: CatalogEntry[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    const entries: CatalogEntry[] = [];\n    for (const root of factoryAssetRoots()) {\n      entries.push(...(await scanRepo(root, \"skaile-factory\", { knownKinds: getKnownKinds() })));\n    }\n    return { entries, notes };\n  } catch (err) {\n    notes.push({\n      feed: \"factory\",\n      message: err instanceof Error ? err.message : String(err),\n    });\n    return { entries: [], notes };\n  }\n}\n\n/** Tag a flat entry list with a single origin. */\nfunction tag(origin: AssetOrigin, entries: CatalogEntry[]): OriginEntry[] {\n  return entries.map((entry) => ({ origin, entry }));\n}\n\n/**\n * Run all feeds and return a single normalized result.\n *\n * Feeds run in parallel where possible — the store fetch is the slow one\n * (one HTTP call) and is fired alongside the local library walk. The factory\n * scan is local disk only, so it runs inline.\n */\nexport async function gatherAssetFeeds(\n  am: AssetManagerLike,\n  projectDir: string,\n): Promise<AssetFeedResult> {\n  const [libs, store] = await Promise.all([libraryAssets(), storeAssets(projectDir)]);\n  const factory = await factoryAssets();\n  const src = await sourceAssets(am);\n  return {\n    entries: [\n      ...src,\n      ...libs.entries,\n      ...tag(\"factory\", factory.entries),\n      ...tag(\"store\", store.entries),\n    ],\n    notes: [...libs.notes, ...store.notes, ...factory.notes],\n  };\n}\n"]}

package/dist/asset-manager/catalog-deployer.js

@@ -1,17 +1,17 @@
-export { WORKSPACE_MOUNT_ENV_VAR, deployAll, deployCatalogEntry, findAiAssetsRoot, isUnderWorkspaceMount, resolveFlowSkills, undeployCatalogEntry, workspaceMountDirs } from '../chunk-DCHQ6BAZ.js';
-import '../chunk-T5TSLSRO.js';
+export { WORKSPACE_MOUNT_ENV_VAR, deployAll, deployCatalogEntry, findAiAssetsRoot, isUnderWorkspaceMount, resolveFlowSkills, undeployCatalogEntry, workspaceMountDirs } from '../chunk-ZU24LWBI.js';
+import '../chunk-BF422IDP.js';
 import '../chunk-4GY63JU6.js';
-import '../chunk-SHQMPGOL.js';
-import '../chunk-PMECEZK3.js';
+import '../chunk-QO7CR3KB.js';
+import '../chunk-D54T2F54.js';
 import '../chunk-5BEFNLOR.js';
 import '../chunk-A2ULN3KX.js';
-import '../chunk-PNOGX36L.js';
+import '../chunk-L3ZGYSWY.js';
 import '../chunk-L5VSIPQD.js';
-import '../chunk-CPSIPIX7.js';
-import '../chunk-CTP3XBMF.js';
+import '../chunk-IG5LZ3WU.js';
+import '../chunk-IY5E7Y5W.js';
 import '../chunk-RVRB27AN.js';
-import '../chunk-XTVSNWLL.js';
-import '../chunk-PNTXHTBC.js';
+import '../chunk-M3P4BYRK.js';
+import '../chunk-J4OYIYFQ.js';
 import '../chunk-ICSCSM5D.js';
 import '../chunk-DKXNKFKP.js';
 import '../chunk-MJHSLODD.js';

package/dist/asset-manager/index.js

@@ -1,28 +1,28 @@
-export { AssetManager, FACTORY_SOURCE_URL, MissingManifestError, installAgentInstances, normalizeRepoUrl, parseCanonicalLockKey, parseRefTolerant, renderMcpServerConfig, softDepName } from '../chunk-TVAR4JHA.js';
-import '../chunk-C3BMXXTN.js';
-import '../chunk-7CR2OZPA.js';
-import '../chunk-UTKENBB6.js';
+export { AssetManager, FACTORY_SOURCE_URL, MissingManifestError, installAgentInstances, normalizeRepoUrl, parseCanonicalLockKey, parseRefTolerant, renderMcpServerConfig, softDepName } from '../chunk-Y7WKXPWS.js';
+import '../chunk-DKGEV6SQ.js';
+import '../chunk-NVO6WECE.js';
+import '../chunk-PXDWTJ3P.js';
 import '../chunk-H5U7LNTJ.js';
 import '../chunk-3TXEJN4W.js';
-export { SCAFFOLD_KINDS, createScaffold, deployAll, installAgent, installTargetOf, removeAsset } from '../chunk-NJV5SLEK.js';
+export { SCAFFOLD_KINDS, createScaffold, deployAll, installAgent, installTargetOf, removeAsset } from '../chunk-5FYOM4RF.js';
 export { BUILT_IN_FRAGMENTS, loadPromptExtensions, resolveFragments } from '../chunk-NOA6EJXE.js';
 export { appendHistory, clearHistory, getRecentHistory, loadHistory } from '../chunk-KTBKW2FI.js';
 import '../chunk-UQ6LFBPZ.js';
-export { AGENT_RENDERERS, claudeCodeRenderer, codexRenderer, driverTargetSupportsAgents, ompRenderer, renderAgentToFramework } from '../chunk-7QWQTA5S.js';
-import '../chunk-6VLHITAM.js';
-import '../chunk-T5TSLSRO.js';
+export { AGENT_RENDERERS, claudeCodeRenderer, codexRenderer, driverTargetSupportsAgents, ompRenderer, renderAgentToFramework } from '../chunk-4L4R5LV3.js';
+import '../chunk-57SF6W6E.js';
+import '../chunk-BF422IDP.js';
 import '../chunk-4GY63JU6.js';
-import '../chunk-SHQMPGOL.js';
-import '../chunk-PMECEZK3.js';
+import '../chunk-QO7CR3KB.js';
+import '../chunk-D54T2F54.js';
 import '../chunk-5BEFNLOR.js';
 import '../chunk-A2ULN3KX.js';
-import '../chunk-PNOGX36L.js';
+import '../chunk-L3ZGYSWY.js';
 import '../chunk-L5VSIPQD.js';
-import '../chunk-CPSIPIX7.js';
-import '../chunk-CTP3XBMF.js';
+import '../chunk-IG5LZ3WU.js';
+import '../chunk-IY5E7Y5W.js';
 import '../chunk-RVRB27AN.js';
-import '../chunk-XTVSNWLL.js';
-import '../chunk-PNTXHTBC.js';
+import '../chunk-M3P4BYRK.js';
+import '../chunk-J4OYIYFQ.js';
 import '../chunk-ICSCSM5D.js';
 import '../chunk-DKXNKFKP.js';
 import '../chunk-MJHSLODD.js';

package/dist/asset-manager/installer.js

@@ -1,20 +1,20 @@
-export { SCAFFOLD_KINDS, canonicalEntryRef, createScaffold, deployAll, deployAsset, deployedAssetDrift, diffDeployedAgent, installTargetOf, removeAsset, removeExcludedLeftovers } from '../chunk-NJV5SLEK.js';
+export { SCAFFOLD_KINDS, canonicalEntryRef, createScaffold, deployAll, deployAsset, deployedAssetDrift, diffDeployedAgent, installTargetOf, removeAsset } from '../chunk-5FYOM4RF.js';
 import '../chunk-NOA6EJXE.js';
-import '../chunk-7QWQTA5S.js';
-import '../chunk-6VLHITAM.js';
-import '../chunk-T5TSLSRO.js';
+import '../chunk-4L4R5LV3.js';
+import '../chunk-57SF6W6E.js';
+import '../chunk-BF422IDP.js';
 import '../chunk-4GY63JU6.js';
-import '../chunk-SHQMPGOL.js';
-import '../chunk-PMECEZK3.js';
+import '../chunk-QO7CR3KB.js';
+import '../chunk-D54T2F54.js';
 import '../chunk-5BEFNLOR.js';
 import '../chunk-A2ULN3KX.js';
-import '../chunk-PNOGX36L.js';
+import '../chunk-L3ZGYSWY.js';
 import '../chunk-L5VSIPQD.js';
-import '../chunk-CPSIPIX7.js';
-import '../chunk-CTP3XBMF.js';
+import '../chunk-IG5LZ3WU.js';
+import '../chunk-IY5E7Y5W.js';
 import '../chunk-RVRB27AN.js';
-import '../chunk-XTVSNWLL.js';
-import '../chunk-PNTXHTBC.js';
+import '../chunk-M3P4BYRK.js';
+import '../chunk-J4OYIYFQ.js';
 import '../chunk-ICSCSM5D.js';
 import '../chunk-DKXNKFKP.js';
 import '../chunk-MJHSLODD.js';

package/dist/asset-manager/renderers.js

@@ -1,18 +1,18 @@
-export { AGENT_RENDERERS, CODEX_IDENTITY_DIR, claudeCodeRenderer, codexRenderer, driverTargetSupportsAgents, ompRenderer, renderAgentToFramework } from '../chunk-7QWQTA5S.js';
-import '../chunk-6VLHITAM.js';
-import '../chunk-T5TSLSRO.js';
+export { AGENT_RENDERERS, CODEX_IDENTITY_DIR, claudeCodeRenderer, codexRenderer, driverTargetSupportsAgents, ompRenderer, renderAgentToFramework } from '../chunk-4L4R5LV3.js';
+import '../chunk-57SF6W6E.js';
+import '../chunk-BF422IDP.js';
 import '../chunk-4GY63JU6.js';
-import '../chunk-SHQMPGOL.js';
-import '../chunk-PMECEZK3.js';
+import '../chunk-QO7CR3KB.js';
+import '../chunk-D54T2F54.js';
 import '../chunk-5BEFNLOR.js';
 import '../chunk-A2ULN3KX.js';
-import '../chunk-PNOGX36L.js';
+import '../chunk-L3ZGYSWY.js';
 import '../chunk-L5VSIPQD.js';
-import '../chunk-CPSIPIX7.js';
-import '../chunk-CTP3XBMF.js';
+import '../chunk-IG5LZ3WU.js';
+import '../chunk-IY5E7Y5W.js';
 import '../chunk-RVRB27AN.js';
-import '../chunk-XTVSNWLL.js';
-import '../chunk-PNTXHTBC.js';
+import '../chunk-M3P4BYRK.js';
+import '../chunk-J4OYIYFQ.js';
 import '../chunk-ICSCSM5D.js';
 import '../chunk-DKXNKFKP.js';
 import '../chunk-MJHSLODD.js';

package/dist/asset-manager/src/index.d.ts

@@ -863,6 +863,28 @@ export declare class AssetManager {
      *   clashing with an incoming asset is refused when its folder is on disk.
      */
     private assertNoFolderCollision;
+    /**
+     * Refuse to deploy over a folder (or agent file) the project did not put there: it is on disk,
+     * but no lock entry of the same kind and name owns it, so it is the user's own work and the
+     * deploy would replace it and `remove` would delete it. Throws one line naming the folder.
+     *
+     * A folder the deploy would rewrite with the same content is adopted silently (the way back
+     * from `asset import`: the project's own copy is what the library now holds): every file in
+     * it is shipped by the asset with the same bytes, or the same body and an asset frontmatter
+     * that only adds to the folder's (import normalizes it). Nothing is lost then.
+     *
+     * @param incoming - Assets about to be deployed, with the entry whose bytes would be written
+     *   when there is one.
+     * @param owned - Assets the lock holds; one of the same kind and name, from any publisher,
+     *   owns the folder (a publisher clash is {@link assertNoFolderCollision}'s refusal).
+     */
+    private assertNoUnownedFolder;
+    /**
+     * Whether deploying `entry` over the folder already in `target` loses nothing: the folder
+     * holds no file the asset does not ship, and each of its files equals the asset's, or is a
+     * markdown file with the same body whose frontmatter the asset's only extends.
+     */
+    private deployWouldOnlyRewriteSame;
     /**
      * Open the local index and snapshot its libraries + asset definitions.
      * Best-effort: no index file (never indexed), or any open/guard failure,
@@ -990,6 +1012,15 @@ export declare class AssetManager {
      *   expanded presets, and the library leg (entries + originating library per entry).
      */
     private resolveLibraryFirst;
+    /**
+     * A source asset without a declared version is keyed `0.0.0-sha.<repo commit>`, so every
+     * commit of its repo would re-key (and re-lock, and report as updated) every asset of
+     * that repo, changed or not. Keep the locked key and version of an asset whose files hash
+     * to what the lock holds: `update` then re-locks only what changed, as `outdated` lists.
+     * The commit stays the clone's, so the lock's `sources:` row still names the bytes' commit.
+     * A ref the user pinned (`#<version>`) keeps the version it names.
+     */
+    private keepUnchangedSourceVersions;
     /** The catalog fetcher to use: an injected one, else built from `stores`. */
     private storeFetcherFor;
     /**
@@ -1170,9 +1201,11 @@ export declare class AssetManager {
         onLibraryOrigin?: (deployedRef: string, library: string) => void;
         /** Called per already-locked asset this add moved to another library than its lock entry named. */
         onLibraryMoved?: (move: LibraryMove) => void;
-        /** `update <name>`: an equal-version tie between libraries keeps the locked library (see {@link install}'s `moveLibraries`). */
+        /** `update <name>`: an equal-version tie between libraries goes to the default library, then the locked one (see {@link install}'s `moveLibraries`). */
         preferLockedLibrary?: boolean;
         onPresets?: (presets: PresetExpansion[]) => void;
+        /** Deploy over a folder no lock entry owns (a hand-made skill of the same name) instead of refusing. */
+        force?: boolean;
         /** Called per symlink an asset's copy deploy leaves out (`ref`, path under the asset dir). */
         onSkippedSymlink?: (ref: string, path: string) => void;
         /** Called per `.env` file in an asset's directory that a copy deploy leaves out. */
@@ -1745,14 +1778,14 @@ export declare class AssetManager {
      */
     private libraryOriginGaps;
     /**
-     * Remove the files a deploy never writes (`.env`, `.venv/`, `.pytest_cache/`, ...) from the
-     * deployed folders of re-locked assets, as {@link RestoredAsset} rows. The lock covers what
-     * the exclusion list leaves; the extras an older release copied are the owner's to drop, and
-     * this is the one point where they are: the lock was just rewritten.
-     *
-     * @param refs - Lock keys the install re-locked (hash or commit changed).
+     * Record, on every agent entry of `lock` that has none, the files the agent's harness
+     * rendering occupies and their sha256. Call it after the deploy, so the bytes hashed are the
+     * ones `install` just wrote; {@link lockedCopyDrift} compares later edits with them.
+     * Entries that carry a record (kept from an earlier lock) are left as they are.
      */
-    private removeExcludedLeftovers;
+    private withRenderedAgents;
+    /** The files of one agent's rendering for the active harness, project-relative, with sha256. */
+    private renderedAgentFiles;
     /**
      * The {@link RestoredAsset} rows for the drifted copies (see {@link lockedCopyDrift}) a
      * deploy just wrote again: those whose ref is among the `deployed` canonical refs.
@@ -1770,8 +1803,10 @@ export declare class AssetManager {
      * - A source asset is compared with the per-file hashes the lock records (modified files only:
      *   the lock lists what the source covers, not what the deploy copies).
      *
-     * An agent (rendered, not copied), a `--link` deploy, an asset with a configured patch, and a
-     * copy that is missing are not compared: other gaps cover them. Project mode only.
+     * A `--link` deploy, an asset with a configured patch, and a copy that is missing are not
+     * compared: other gaps cover them. An agent (rendered, not copied) is compared with the
+     * hashes of its rendered files the lock records (`LockEntry.rendered`); its `modified` paths
+     * are project-relative. Project mode only.
      */
     private lockedCopyDrift;
     /**
@@ -1794,6 +1829,14 @@ export declare class AssetManager {
     private declaredGaps;
     /** Whether the lock's `presets` slice records `want` (kind, name and, when both carry one, publisher). */
     private presetRecorded;
+    /**
+     * The first requirement, direct or transitive, of the declared `ref` that no local source or
+     * library holds and that nothing in the project already provides — the case `install` ends
+     * with `Missing: … nothing was installed`. `undefined` when every requirement is held, when a
+     * store is declared (it may hold the requirement and a check never goes to the network), or
+     * when `ref` itself resolves to nothing.
+     */
+    private unmetRequirementOf;
     /**
      * Whether `skaile install` can resolve a declared ref: a source or library holds it, or the
      * project declares a store that may. The global catalog is not asked: a check never goes