@skaile/workspaces 5.12.0 → 5.13.0

package/dist/{chunk-PNOGX36L.js → chunk-L3ZGYSWY.js}

@@ -1,9 +1,9 @@
 import { globalCacheRoot, globalSkaileDir, mergeLegacyEntriesInto, mergeLegacyEntriesKeyed } from './chunk-L5VSIPQD.js';
-import { SUPPORTED_DRIVER_TARGETS, globalHarnessRoot } from './chunk-CPSIPIX7.js';
-import { decodeSkaileManifest, compositeSha256, listAssetFiles, SKAILE_MANIFEST_FILENAME, sha256Hex } from './chunk-CTP3XBMF.js';
+import { SUPPORTED_DRIVER_TARGETS, globalHarnessRoot } from './chunk-IG5LZ3WU.js';
+import { decodeSkaileManifest, compositeSha256, listAssetFiles, SKAILE_MANIFEST_FILENAME, sha256Hex } from './chunk-IY5E7Y5W.js';
 import { readPluginGroupings } from './chunk-RVRB27AN.js';
-import { scanDirectory, parseFrontmatter, parseRequires, dedupeRequirementRefs, fromMcpServerMdContent, withFsDeadline, tryWithFsDeadline, fsDeadlineMs, assetDepRefs, agentYamlRequires } from './chunk-XTVSNWLL.js';
-import { isValidAssetName, slugifyAssetName, depToStr, parseAssetRef, assetRefToStr } from './chunk-PNTXHTBC.js';
+import { scanDirectory, parseFrontmatter, parseRequires, dedupeRequirementRefs, fromMcpServerMdContent, withFsDeadline, tryWithFsDeadline, fsDeadlineMs, assetDepRefs, agentYamlRequires } from './chunk-M3P4BYRK.js';
+import { isValidAssetName, slugifyAssetName, depToStr, parseAssetRef, assetRefToStr } from './chunk-J4OYIYFQ.js';
 import { isRetentionValue } from './chunk-C3CAXQMA.js';
 import { existsSync, readFileSync, mkdirSync, writeFileSync, lstatSync, symlinkSync, rmSync, readdirSync, constants, statSync } from 'fs';
 import { readdir, stat, cp, rm, open, readFile } from 'fs/promises';
@@ -255,6 +255,27 @@ function agentInstanceDiagnostics(config) {
   }
   return [];
 }
+var AGENT_BLOCK_KEYS = /* @__PURE__ */ new Set([
+  "definition",
+  "context",
+  "permissions",
+  "hooks",
+  "fragments",
+  "prompt-extensions",
+  "home",
+  "prompt",
+  "instances",
+  "subagents"
+]);
+function agentBlockKeyDiagnostics(agent) {
+  if (!isRecord(agent)) return [];
+  return Object.keys(agent).filter((key) => !AGENT_BLOCK_KEYS.has(key)).map((key) => ({
+    code: "unknown_agent_key",
+    severity: "warning",
+    message: `Unknown key "${key}" under \`agent:\` is ignored \u2014 expected one of: ${[...AGENT_BLOCK_KEYS].filter((k) => k !== "subagents").join(", ")}. Per-instance overrides (lifecycle, model, memory, triggers, connectors, budget) belong under \`agents.<id>\`.`,
+    path: `agent.${key}`
+  }));
+}
 function fileSha256(p) {
   return sha256Hex(readFileSync(p));
 }
@@ -345,7 +366,7 @@ function findManifestFiles(root) {
 async function walkWithManifest(clone, manifestPath, index) {
   const { manifest } = decodeSkaileManifest(readFileSync(manifestPath, "utf8"));
   const repoRoot = clone.localPath;
-  const manifestPublisher = manifest.publisher ?? publisherFromGithubUrl(clone.sourceUrl);
+  const manifestPublisher = manifest.publisher ?? clone.publisher ?? publisherFromGithubUrl(clone.sourceUrl);
   const manifestVersion = manifest.version ?? (clone.tag ? clone.tag.replace(/^v/, "") : void 0) ?? syntheticVersion(clone.commit);
   const assets = manifest.assets ?? [];
   if (assets.length === 0) return false;
@@ -353,7 +374,7 @@ async function walkWithManifest(clone, manifestPath, index) {
     const assetPublisher = a.publisher ?? manifestPublisher;
     if (!assetPublisher) {
       throw new Error(
-        `${clone.sourceUrl}: publisher must be declared in skaile.manifest.yaml (non-GitHub source URL \u2014 auto-derivation not available).`
+        `${clone.sourceUrl}: publisher must be declared in skaile.manifest.yaml (non-GitHub source URL \u2014 auto-derivation not available) or recorded with \`skaile source add --publisher\`.`
       );
     }
     const curatedSource = a.source ?? manifest.source;
@@ -470,10 +491,10 @@ var DIR_SCOPED_KINDS = /* @__PURE__ */ new Set([
   "knowledge"
 ]);
 async function walkFilenameConvention(clone, index, knownKinds, repoLevel = {}) {
-  const publisher = repoLevel.publisher ?? publisherFromGithubUrl(clone.sourceUrl);
+  const publisher = repoLevel.publisher ?? clone.publisher ?? publisherFromGithubUrl(clone.sourceUrl);
   if (!publisher) {
     throw new Error(
-      `${clone.sourceUrl}: publisher must be declared in skaile.manifest.yaml (non-GitHub source URL).`
+      `${clone.sourceUrl}: publisher must be declared in skaile.manifest.yaml (non-GitHub source URL) or recorded with \`skaile source add --publisher\`.`
     );
   }
   const version = repoLevel.version ?? (clone.tag ? clone.tag.replace(/^v/, "") : void 0) ?? syntheticVersion(clone.commit);
@@ -669,6 +690,27 @@ function getRepoCommit(repoDir) {
   });
   return r.status === 0 ? r.stdout.trim() : null;
 }
+function isShallowBoundary(repoDir, commit) {
+  const full = spawnSync("git", ["-C", repoDir, "rev-parse", "--verify", `${commit}^{commit}`], {
+    encoding: "utf8",
+    stdio: "pipe",
+    env: GIT_ENV
+  });
+  const sha = full.stdout.trim();
+  if (full.status !== 0 || !sha) return false;
+  const file = spawnSync("git", ["-C", repoDir, "rev-parse", "--git-path", "shallow"], {
+    encoding: "utf8",
+    stdio: "pipe",
+    env: GIT_ENV
+  });
+  if (file.status !== 0) return false;
+  const shallowPath = resolve(repoDir, file.stdout.trim());
+  try {
+    return readFileSync(shallowPath, "utf8").split("\n").includes(sha);
+  } catch {
+    return false;
+  }
+}
 function isCommitOnRemote(repoDir, commit) {
   if (!/^[0-9a-f]{7,64}$/i.test(commit) || !hasOwnGit(repoDir)) return true;
   if (!getRepoRemoteUrl(repoDir)) return true;
@@ -677,6 +719,7 @@ function isCommitOnRemote(repoDir, commit) {
     env: GIT_ENV
   });
   if (known.status !== 0) return true;
+  if (isShallowBoundary(repoDir, commit)) return true;
   const r = spawnSync("git", ["-C", repoDir, "branch", "-r", "--contains", commit], {
     encoding: "utf8",
     stdio: "pipe",
@@ -801,6 +844,15 @@ function isManagedCacheDir(dir) {
   const target = resolve(dir);
   return target === root || target.startsWith(root + sep);
 }
+var warnedSourceClones = /* @__PURE__ */ new Set();
+function warnSourceClone(url, dest, what) {
+  const line = redactCredentials(`! source clone ${sourceShortName(url)} ${what}`);
+  if (warnedSourceClones.has(`${dest}
+${line}`)) return;
+  warnedSourceClones.add(`${dest}
+${line}`);
+  console.warn(line);
+}
 function syncManagedClone(dest, url, branch, pin, strictPin = false) {
   const cached = existsSync(join(dest, ".git"));
   if (cached && remoteUrlMatches(dest, url)) {
@@ -811,10 +863,10 @@ function syncManagedClone(dest, url, branch, pin, strictPin = false) {
     if (!pin) {
       const { ok, error } = pullRepoResult(dest, branch);
       if (!ok) {
-        console.warn(
-          redactCredentials(
-            `[repo-manager] could not refresh source clone ${dest} (branch: ${branch}): ${error}. Using the cached commit.`
-          )
+        warnSourceClone(
+          url,
+          dest,
+          `not refreshed: ${(error ?? "").replace(/\.+$/, "")}; using the cached commit`
         );
       }
     }
@@ -834,11 +886,7 @@ function syncManagedClone(dest, url, branch, pin, strictPin = false) {
         )
       );
     }
-    console.warn(
-      redactCredentials(
-        `[repo-manager] could not check out pin ${pin} in source clone ${dest}. Using the cached commit.`
-      )
-    );
+    warnSourceClone(url, dest, `not on its pin ${pin}; using the cached commit`);
   }
 }
 function ensureLocalPathRepo(decl, reposDir, opts) {
@@ -897,7 +945,7 @@ function repoSlugFromGitRemote(rootDir) {
   const m = /github\.com[/:]([^/]+)\/([^/]+?)(?:\.git)?\/?$/.exec(r.stdout.trim());
   return m ? `${m[1]}/${m[2]}` : void 0;
 }
-function resolveSourcePublisher(repoDir) {
+function resolveSourcePublisher(repoDir, declared) {
   const manifestPath = join(repoDir, SKAILE_MANIFEST_FILENAME);
   if (existsSync(manifestPath)) {
     try {
@@ -907,12 +955,13 @@ function resolveSourcePublisher(repoDir) {
     } catch {
     }
   }
+  if (declared) return declared.startsWith("@") ? declared.slice(1) : declared;
   const org = repoSlugFromGitRemote(repoDir)?.split("/")[0];
   return org ? normalizeGithubOrg(org) : void 0;
 }
 async function scanRepo(repoDir, repoName, options) {
   const repo = repoSlugFromGitRemote(repoDir);
-  const publisher = resolveSourcePublisher(repoDir) ?? repoName;
+  const publisher = resolveSourcePublisher(repoDir, options.declaredPublisher) ?? repoName;
   const groupings = readPluginGroupings(repoDir);
   return (await scanDirectory(repoDir, repoName, options)).map((e) => {
     const plugin = groupings.get(relative(repoDir, dirname(e.source)).split(sep).join("/"));
@@ -939,7 +988,10 @@ async function resolveAsset(ref, repositories, reposDir, opts) {
     if (!decl) continue;
     const repoDir = resolveRepoDir(decl, repoName, reposDir, opts.projectDir);
     if (!repoDir || !existsSync(repoDir)) continue;
-    const entries = await scanRepo(repoDir, repoName, { knownKinds: opts.knownKinds });
+    const entries = await scanRepo(repoDir, repoName, {
+      knownKinds: opts.knownKinds,
+      declaredPublisher: decl.publisher
+    });
     const match = entries.find((e) => e.kind === ref.kind && e.name === ref.name);
     if (match) return match;
   }
@@ -1305,6 +1357,8 @@ function parseSourceEntries(raw) {
     const entry = { url };
     const pin = s.pin;
     if (typeof pin === "string" && pin.length > 0) entry.pin = pin;
+    const publisher = s.publisher;
+    if (typeof publisher === "string" && publisher.length > 0) entry.publisher = publisher;
     return entry;
   });
 }
@@ -1783,6 +1837,7 @@ function normalizeAgentSection(raw, config, diagnostics) {
   if (raw.agent) {
     config.agent = isRecord(raw.agent) ? { ...raw.agent } : raw.agent;
   }
+  diagnostics.push(...agentBlockKeyDiagnostics(raw.agent));
   if (config.agent?.instances !== void 0) {
     diagnostics.push({
       code: "misplaced_agent_instances",
@@ -2475,7 +2530,13 @@ function buildSourceClones(sources) {
     const localPath = join(sourcesDir, sourceCacheKey(s.url));
     if (!existsSync(localPath)) continue;
     const commit = getRepoCommit(localPath) ?? "0".repeat(40);
-    clones.push({ localPath, sourceUrl: s.url, commit, tag: s.pin });
+    clones.push({
+      localPath,
+      sourceUrl: s.url,
+      commit,
+      tag: s.pin,
+      ...s.publisher ? { publisher: s.publisher } : {}
+    });
   }
   return clones;
 }
@@ -2739,6 +2800,6 @@ function resolveAgentDefinitionDir(projectDir, definition) {
   return resolve(projectDir, definition);
 }
 
-export { AGENT_INSTANCE_ID_PATTERN, AGENT_INSTANCE_LIFECYCLES, AGENT_INSTANCE_MEMORY_SCOPES, AGENT_INSTANCE_TRIGGER_KINDS, AgentRefResolutionError, COMPACTION_DEFAULTS, CanonicalRefConflictError, DEFAULT_AGENT_INSTANCE_ID, DEFAULT_RECIPE_ATTR, MAX_PRESET_DEPTH, PresetDepthError, SKAILE_YAML_DEFAULT, SKAILE_YAML_SUFFIX, SKILL_ALLOWLIST_FILE, SKILL_ALLOWLIST_VERSION, SK_WORKSPACE_DEFAULT_NAME, SK_WORKSPACE_SUFFIX, STAGED_SKILL_MARKER, SourceEntryError, UnknownAssetKindError, agentInstanceDiagnostics, agentSourceCacheDir, attachToBranch, buildProvenanceIndex, checkRepoStatus, checkoutPin, cloneRepo, coerceVersion, decodeSkaileYaml, deriveSingleMaterializedMcpDeclaration, effectiveAgentInstances, encodeSkaileYaml, ensureRepo, findWorkspaceRoot, getGlobalCacheDir, getRepoCommit, isCommitOnRemote, isStagedSkillMarkerFor, isWorkspaceConfigFilename, legacySourceCacheKey, linkRepo, listSkWorkspaceConfigs, loadMcpServerDeclarations, loadSkWorkspaceConfig, matchPin, mergeAgentInstances, mergeAgentPermissions, mergeSkWorkspaceConfigs, normalizeAgentInstances, normalizeConfig, parseSourceEntries, pullRepo, pullRepoResult, readLinks, readSkillAllowList, resolveAgentDefinitionDir, resolveAgentDir, resolveAll, resolveAsset, resolveCompactionThresholdPercent, resolveGlobalHarnesses, resolveGlobalSkWorkspaceConfig, resolveSkWorkspaceConfig, resolveSourcePublisher, saveSkWorkspaceConfig, scanRepo, sourceCacheKey, sourceShortName, stageMaterializedSkills, stagedSkillMarkerState, storeManifestSlug, unlinkRepo, unstageSkill, validateAssetRecipeAttr, validateAssetRecipeFlake, workspaceConfigFilename, workspaceNameFromFilename, writeLinks };
-//# sourceMappingURL=chunk-PNOGX36L.js.map
-//# sourceMappingURL=chunk-PNOGX36L.js.map
+export { AGENT_INSTANCE_ID_PATTERN, AGENT_INSTANCE_LIFECYCLES, AGENT_INSTANCE_MEMORY_SCOPES, AGENT_INSTANCE_TRIGGER_KINDS, AgentRefResolutionError, COMPACTION_DEFAULTS, CanonicalRefConflictError, DEFAULT_AGENT_INSTANCE_ID, DEFAULT_RECIPE_ATTR, MAX_PRESET_DEPTH, PresetDepthError, SKAILE_YAML_DEFAULT, SKAILE_YAML_SUFFIX, SKILL_ALLOWLIST_FILE, SKILL_ALLOWLIST_VERSION, SK_WORKSPACE_DEFAULT_NAME, SK_WORKSPACE_SUFFIX, STAGED_SKILL_MARKER, SourceEntryError, UnknownAssetKindError, agentBlockKeyDiagnostics, agentInstanceDiagnostics, agentSourceCacheDir, attachToBranch, buildProvenanceIndex, checkRepoStatus, checkoutPin, cloneRepo, coerceVersion, decodeSkaileYaml, deriveSingleMaterializedMcpDeclaration, effectiveAgentInstances, encodeSkaileYaml, ensureRepo, findWorkspaceRoot, getGlobalCacheDir, getRepoCommit, isCommitOnRemote, isStagedSkillMarkerFor, isWorkspaceConfigFilename, legacySourceCacheKey, linkRepo, listSkWorkspaceConfigs, loadMcpServerDeclarations, loadSkWorkspaceConfig, matchPin, mergeAgentInstances, mergeAgentPermissions, mergeSkWorkspaceConfigs, normalizeAgentInstances, normalizeConfig, parseSourceEntries, pullRepo, pullRepoResult, readLinks, readSkillAllowList, resolveAgentDefinitionDir, resolveAgentDir, resolveAll, resolveAsset, resolveCompactionThresholdPercent, resolveGlobalHarnesses, resolveGlobalSkWorkspaceConfig, resolveSkWorkspaceConfig, resolveSourcePublisher, saveSkWorkspaceConfig, scanRepo, sourceCacheKey, sourceShortName, stageMaterializedSkills, stagedSkillMarkerState, storeManifestSlug, unlinkRepo, unstageSkill, validateAssetRecipeAttr, validateAssetRecipeFlake, workspaceConfigFilename, workspaceNameFromFilename, writeLinks };
+//# sourceMappingURL=chunk-L3ZGYSWY.js.map
+//# sourceMappingURL=chunk-L3ZGYSWY.js.map