@skaile/workspaces 5.17.0 → 5.18.1

package/CHANGELOG.md

@@ -1,5 +1,42 @@
 # Changelog
 
+## 5.18.1
+
+### Patch Changes
+
+- [#1095](https://github.com/skaile-ai/workspaces/pull/1095) [`f73d02a`](https://github.com/skaile-ai/workspaces/commit/f73d02af44d2e2e9fbbbf8605b1dca8a87b7fbfc) Thanks [@Frozen666](https://github.com/Frozen666)! - The echo driver's `test question` keyword now asks a real question. It emits an `AskUserQuestion` tool call, which the normalizer turns into a `question` event with the options PostgreSQL, MySQL and SQLite, instead of a plain text reply. Hosts that open a "waiting on you" state only on a `question` event (the Skaile platform's needs-you marker) can now test that path on the echo driver. No text or turn summary follows the question, so it stays open; the turn still ends, and the answer arrives as a fresh prompt.
+
+## 5.18.0
+
+### Minor Changes
+
+- [#1092](https://github.com/skaile-ai/workspaces/pull/1092) [`611bf2b`](https://github.com/skaile-ai/workspaces/commit/611bf2bb36f146f9959053bdbccc73fce61b5dba) Thanks [@mortegro](https://github.com/mortegro)! - Authoring: one verdict for secrets, symlinks, flows and kinds (5.16.0 critique, p1040, p1041, p411, p1042, p135, p871, p873, p1193, p1194, p926, p915, p486, p743, p875).
+
+  - `add` and `install` withhold every file the publish plan calls a secret (`.npmrc`, `.netrc`, `.envrc`, `credentials`, `token.json`, private keys, certificates, `.pypirc`, `.htpasswd`, `secrets.yaml`, `service-account.json`, `terraform.tfstate`, not only `.env*`) and warn once per file. The list is `isSecretFileName`, shared with the publish plan and the `.gitignore` scaffold. `onEnvFile` / `listEnvFiles` are now `onSecretFile` / `listSecretFiles`.
+  - A symlink in an asset folder refuses the deploy (`add`, `install`, `update`: exit 1, `Nothing was added`), as `library index`, `validate` and the publish plan refuse the library. The `! skipped symlink` line and `DeployOptions.onSkippedSymlink` are gone.
+  - A hand-written `RULESET.md` or `PERSONA.md` is a supported library asset: `library index` writes it to the manifest, `validate` checks it, `show`, `asset show`, `add` and an agent's `composes:` resolve it.
+  - `metadata.requires` of a SKILL.md and the `items[].ref` of a preset are checked with the one ref rule `dependencies:` uses, in `validate`, `library index` and the publish plan; `add` says `invalid publisher "Bad!"` instead of `publisher required`.
+  - `asset show` prints the same not-semver cause as `show` and `info` for an asset `library index` skipped; the 15-digit hint covers a numeric pre-release identifier too.
+  - `library index` drops the old entry of a flow whose `id:` was renamed but whose file was not; the message names the real rule (a deployed flow is loaded as `<id>/<id>.flow.yaml`).
+  - `validate` and the publish plan fail an asset directory the manifest does not list; `validate versions` in a directory with no asset exits 1; `validate` warns on `reads_from:` / `writes_to:` (no release reads them; they left the skill schema).
+  - `add`, `install` and `update` name a placeholder `description:` next to a placeholder body (`description and body are still the scaffold placeholder`).
+  - `library init --path` refuses a folder with deployed copies (`.claude/`, `.skaile/`, `.codex/`, `.omp/`) also without a `skaile.yaml` unless `--force`, and refuses a tree with an asset file that does not parse before anything is registered.
+  - A symlink in an asset folder is refused before the first copy is written and before `install` removes a stale asset, for every kind including `agent` (an agent with a symlink used to deploy with its source cache dropped). A credential file that an older release deployed is listed as extra by `check`, `doctor` and `diff` and deleted by the next `install` or `update` (`.env*` stays). `validate` and the publish plan skip deployed copies under `.claude/`, `.codex/`, `.omp/`, `.skaile/` and `dist/`; `library init --path` refuses only the deploy folders, not `settings.local.json` or `.omp/plans`; `validate versions` says `no versioned asset` for a library without versioned kinds.
+
+- [#1092](https://github.com/skaile-ai/workspaces/pull/1092) [`611bf2b`](https://github.com/skaile-ai/workspaces/commit/611bf2bb36f146f9959053bdbccc73fce61b5dba) Thanks [@mortegro](https://github.com/mortegro)! - Harnesses: the omp extension file that `integration install --driver omp` writes holds no host path and is committed, not gitignored (omp skips an ignored extension; install removes the old ignore line and says when another rule still ignores it); `integration uninstall --driver codex|all` removes the trust entry install added to the user's codex config; a `--model <provider>/<model>` whose provider is not in the registry is refused by `run` and `repl` (also with `--dry-run`); a driver failure points at a real session id or at nothing, never at a literal `<session-id>`; a plugin that fails to install prints one `!` line with the installer's last error; the codex delegate warning is printed when files are written, not on every install; `config unset <driver|model> [--global]` exists and the `config set driver` warning in a project that names another harness names it; the omp home sweep removes the `standalone-*` homes of older releases; `integration install --driver claude-code --full` copies the installed skills into the plugin; a REPL failed turn is printed once, not again as the driver's own record (p345, p598, p1110, p1111, p1112, p1113, p1114, p1115, p1151, p1190).
+
+- [#1092](https://github.com/skaile-ai/workspaces/pull/1092) [`611bf2b`](https://github.com/skaile-ai/workspaces/commit/611bf2bb36f146f9959053bdbccc73fce61b5dba) Thanks [@mortegro](https://github.com/mortegro)! - `add`, `remove` and `source` no longer touch what the project does not own, and the status commands say more. `add --force` replaces a symlink at an agent file (claude-code, codex, omp) instead of writing through it into the file it points at (p1060). A dangling symlink where a locked asset should be is drift for `check`, `doctor`, `outdated` and `diff` (p1061). `source remove` refuses while a locked asset comes from the source (`--force` overrides), and `check`, `doctor` and `outdated` report an asset whose source is gone or now publishes it under another publisher (p1062). `source add --publisher` on a source registered without one is guarded like a declared publisher (p722). `remove` with the library gone prunes the dependencies the lock recorded, `#range` forms included (p95). `add` refuses a flow the flow engine cannot parse (p1192). `install` keeps an agent that an `agents.<id>.ref` or `agent.definition` binds (p982). The `check` line for an agent binding whose library is gone reads as one sentence (p1152).
+
+- [#1092](https://github.com/skaile-ai/workspaces/pull/1092) [`611bf2b`](https://github.com/skaile-ai/workspaces/commit/611bf2bb36f146f9959053bdbccc73fce61b5dba) Thanks [@mortegro](https://github.com/mortegro)! - `mcp-server` assets of the store are project state. The payload under `.skaile/assets/mcp-server/<name>/` and the entry skaile wrote to `.mcp.json` count as files of the locked asset: a deleted, edited or extra file, or a missing or changed entry, is drift for `check`, `doctor`, `outdated`, `diff` and `verify`, and `install --locked` writes them back and prints `Restored …` (p1130). `skaile diff mcp-server:<ref>` shows the payload and entry differences instead of `not deployed` (p1132). `verify` of a source asset compares the store's hash with the lock's hash and ignores the commit: the same bytes at another commit are `verified` (p1131). A server skaile does not write to `.mcp.json` shows as `skipped: <reason>` in `list` and `info` and as a `!` line in `check` and `doctor` (p1133). `add` names every required `MCP.md` field nothing sets (`SQL_MCP_DSN`) and says to set it with an `mcp_servers` entry in `skaile.yaml`; `doctor` and `check` keep listing it (p1134). A hand-written `mcp_servers` entry of `skaile.yaml` is configuration, not a locked asset, and is never drift.
+
+- [#1092](https://github.com/skaile-ai/workspaces/pull/1092) [`611bf2b`](https://github.com/skaile-ai/workspaces/commit/611bf2bb36f146f9959053bdbccc73fce61b5dba) Thanks [@mortegro](https://github.com/mortegro)! - Serve and mounts: the model endpoint port uses the same bind check as the websocket port (a port held on every interface is refused), a mount watcher does not follow a symlink out of its mount, `@xstate/store` is looked up in the project first and its miss names the add command, a registry no longer replaces the user's own omp default model that only their `models.yml` serves, `serve` refuses an empty `--host` and a padded `--port`, and a `mountPath` that is a symlink leaving the project fails `validate` and is not mounted (p833, p1006, p1170, p1171, p1172, p1173).
+
+- [#1092](https://github.com/skaile-ai/workspaces/pull/1092) [`611bf2b`](https://github.com/skaile-ai/workspaces/commit/611bf2bb36f146f9959053bdbccc73fce61b5dba) Thanks [@mortegro](https://github.com/mortegro)! - `install` and `install --locked` keep a locked library asset at its locked version when the library holds a newer one and the deployed copy is intact; only `update` moves a lock. A library re-registered under another name is found by publisher and content hash, and `update`/`install` re-lock the new name for git libraries too. `check`, `doctor`, `outdated` and `diff` print one line for an invalid library asset version. `validate .` checks publisher slugs in `skaile.yaml`. A never-held `#pin` names the pin in `skaile.yaml`. `add` prints one collision summary (`--verbose` lists each). `install --locked` fails on an unresolvable agent instance ref without a lock. `remove` of the last asset of a repo drops its `sources:` row.
+
+### Patch Changes
+
+- [#1092](https://github.com/skaile-ai/workspaces/pull/1092) [`611bf2b`](https://github.com/skaile-ai/workspaces/commit/611bf2bb36f146f9959053bdbccc73fce61b5dba) Thanks [@mortegro](https://github.com/mortegro)! - Docs match 5.16 behaviour: `sources[]` is `{url, pin?, publisher?}` (also in the `repositories:` migration error text), `run` refuses a one-word prompt that matches no flow (quote more words), `skaile session logs` is named for the log database, the `skaile-ai` publisher in `asset` examples, and the other doc defects of the 5.16.0 critique. `WORKSPACE_IDEAS.md` moved to `docs/superpowers/` so the docs site no longer builds it.
+
 ## 5.17.0
 
 ### Minor Changes

package/dist/{asset-feeds-MALYFZUM.js → asset-feeds-MKB5JUML.js}

@@ -1,28 +1,28 @@
-import { storeNotInstallableReason } from './chunk-WXWQNJCT.js';
-import { getKnownKinds } from './chunk-2SKPPIV7.js';
-import './chunk-SPV2CXJ3.js';
-import './chunk-X3RMRJNR.js';
+import { storeNotInstallableReason } from './chunk-PUK7TQT4.js';
+import { getKnownKinds } from './chunk-WJLYL6RY.js';
+import './chunk-D6UBEYQH.js';
 import './chunk-7RGTAEG6.js';
-import './chunk-NUELZWCF.js';
-import './chunk-D3PU3C6F.js';
-import './chunk-ES6ARJPQ.js';
-import './chunk-SXWGLW23.js';
+import './chunk-VKPBUPH7.js';
+import './chunk-HPVMTX6M.js';
+import './chunk-U2FI547Z.js';
 import './chunk-BFMYYNDT.js';
 import './chunk-3TXEJN4W.js';
-import './chunk-YK3XLEQJ.js';
-import './chunk-PIC23DDE.js';
+import './chunk-X3RMRJNR.js';
+import './chunk-NUELZWCF.js';
+import './chunk-CKNIYIV2.js';
+import './chunk-T2TQAH2X.js';
 import './chunk-4GY63JU6.js';
-import { factoryAssetRoots } from './chunk-5RDZ5JHH.js';
-import './chunk-D54T2F54.js';
+import { factoryAssetRoots } from './chunk-KC6HGWXN.js';
+import './chunk-5TBFN46Z.js';
 import './chunk-5BEFNLOR.js';
 import './chunk-A2ULN3KX.js';
-import { scanRepo } from './chunk-ZVZTCDUN.js';
+import { scanRepo } from './chunk-2NOLF7B2.js';
 import './chunk-L5VSIPQD.js';
 import './chunk-IG5LZ3WU.js';
-import './chunk-H7R7R5BN.js';
+import './chunk-CKICWXMU.js';
 import './chunk-RVRB27AN.js';
-import { parseRequires } from './chunk-YW2BNDSE.js';
-import './chunk-FT4ZHLYR.js';
+import { parseRequires } from './chunk-GOCWM7FN.js';
+import './chunk-WDXZA7QW.js';
 import './chunk-ICSCSM5D.js';
 import './chunk-DKXNKFKP.js';
 import './chunk-MJHSLODD.js';
@@ -52,8 +52,8 @@ function libraryEntryOf(asset) {
 async function libraryAssets() {
   const notes = [];
   try {
-    const { openLibraryManager } = await import('./open-library-NZUI4XGF.js');
-    const { getKindRegistry } = await import('./open-registry-YPRQDUMK.js');
+    const { openLibraryManager } = await import('./open-library-7ZG2FFAX.js');
+    const { getKindRegistry } = await import('./open-registry-RBELV5YH.js');
     const { scanAuthoringLibraries } = await import('./library/index.js');
     const { library: index, close } = await openLibraryManager();
     try {
@@ -86,7 +86,7 @@ async function libraryAssets() {
 async function storeAssets(projectDir) {
   const notes = [];
   try {
-    const { resolveCatalogSource } = await import('./open-library-NZUI4XGF.js');
+    const { resolveCatalogSource } = await import('./open-library-7ZG2FFAX.js');
     const { source, close } = await resolveCatalogSource({ projectDir });
     try {
       const assets = (await source.listAssets()).filter(
@@ -167,5 +167,5 @@ async function gatherAssetFeeds(am, projectDir) {
 }
 
 export { gatherAssetFeeds };
-//# sourceMappingURL=asset-feeds-MALYFZUM.js.map
-//# sourceMappingURL=asset-feeds-MALYFZUM.js.map
+//# sourceMappingURL=asset-feeds-MKB5JUML.js.map
+//# sourceMappingURL=asset-feeds-MKB5JUML.js.map

package/dist/{asset-feeds-MALYFZUM.js.map → asset-feeds-MKB5JUML.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../cli/src/asset-feeds.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwEA,SAAS,eAAe,KAAA,EAAsC;AAC5D,EAAA,MAAM,EAAE,UAAS,GAAI,KAAA;AACrB,EAAA,MAAM,MAAA,GAAU,SAAS,QAAA,EAAkD,QAAA;AAC3E,EAAA,MAAM,WAAA,GAAc,SAAS,QAAA,IAAY,MAAA;AACzC,EAAA,MAAM,cACJ,OAAO,WAAA,KAAgB,QAAA,GACnB,WAAA,GACA,MAAM,OAAA,CAAQ,WAAW,CAAA,GACvB,WAAA,CAAY,OAAO,CAAC,CAAA,KAAmB,OAAO,CAAA,KAAM,QAAQ,CAAA,GAC5D,MAAA;AACR,EAAA,MAAM,OAAO,QAAA,CAAS,YAAA;AACtB,EAAA,OAAO;AAAA,IACL,MAAM,KAAA,CAAM,IAAA;AAAA,IACZ,MAAM,KAAA,CAAM,IAAA;AAAA,IACZ,aAAa,OAAO,QAAA,CAAS,WAAA,KAAgB,QAAA,GAAW,SAAS,WAAA,GAAc,EAAA;AAAA,IAC/E,QAAQ,KAAA,CAAM,YAAA;AAAA,IACd,WAAW,KAAA,CAAM,SAAA;AAAA,IACjB,GAAI,MAAM,MAAA,GAAS,EAAE,QAAQ,KAAA,CAAM,MAAA,KAAW,EAAC;AAAA,IAC/C,SAAS,KAAA,CAAM,OAAA;AAAA,IACf,QAAA,EAAU,gBAAgB,MAAA,GAAY,KAAK,aAAA,CAAc,EAAE,QAAA,EAAU,WAAA,EAAa,CAAA;AAAA,IAClF,cACE,KAAA,CAAM,IAAA,KAAS,YAAY,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,GACzC,IAAA,CAAK,OAAO,CAAC,CAAA,KAAmB,OAAO,CAAA,KAAM,QAAA,IAAY,EAAE,MAAA,GAAS,CAAC,IACrE;AAAC,GACT;AACF;AAWA,eAAe,aAAA,GAGZ;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AAEF,IAAA,MAAM,EAAE,kBAAA,EAAmB,GAAI,MAAM,OAAO,4BAAmB,CAAA;AAC/D,IAAA,MAAM,EAAE,eAAA,EAAgB,GAAI,MAAM,OAAO,6BAAoB,CAAA;AAC7D,IAAA,MAAM,EAAE,sBAAA,EAAuB,GAAI,MAAM,OAAO,oBAA4B,CAAA;AAC5E,IAAA,MAAM,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAM,GAAI,MAAM,kBAAA,EAAmB;AAC3D,IAAA,IAAI;AACF,MAAA,MAAM,UAAyB,EAAC;AAChC,MAAA,KAAA,MAAW,QAAQ,MAAM,sBAAA,CAAuB,KAAA,EAAO,eAAA,EAAiB,CAAA,EAAG;AACzE,QAAA,IAAI,IAAA,CAAK,UAAU,KAAA,CAAA,EAAW;AAC5B,UAAA,KAAA,CAAM,IAAA,CAAK,EAAE,IAAA,EAAM,WAAA,EAAa,OAAA,EAAS,CAAA,EAAG,IAAA,CAAK,OAAA,CAAQ,IAAI,CAAA,EAAA,EAAK,IAAA,CAAK,KAAK,IAAI,CAAA;AAChF,UAAA;AAAA,QACF;AACA,QAAA,KAAA,MAAW,KAAA,IAAS,KAAK,MAAA,EAAQ;AAC/B,UAAA,OAAA,CAAQ,IAAA,CAAK;AAAA,YACX,MAAA,EAAQ,SAAA;AAAA,YACR,KAAA,EAAO,eAAe,KAAK,CAAA;AAAA,YAC3B,KAAA,EAAO,KAAK,OAAA,CAAQ;AAAA,WACrB,CAAA;AAAA,QACH;AAAA,MACF;AACA,MAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,IAC1B,CAAA,SAAE;AACA,MAAA,KAAA,EAAM;AAAA,IACR;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,IAAA,EAAM,WAAA;AAAA,MACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACzD,CAAA;AACD,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAYA,eAAe,YAAY,UAAA,EAGxB;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AACF,IAAA,MAAM,EAAE,oBAAA,EAAqB,GAAI,MAAM,OAAO,4BAAmB,CAAA;AACjE,IAAA,MAAM,EAAE,QAAQ,KAAA,EAAM,GAAI,MAAM,oBAAA,CAAqB,EAAE,YAAY,CAAA;AACnE,IAAA,IAAI;AAEF,MAAA,MAAM,MAAA,GAAA,CAAU,MAAM,MAAA,CAAO,UAAA,EAAW,EAAG,MAAA;AAAA,QACzC,CAAC,CAAA,KAAM,yBAAA,CAA0B,CAAC,CAAA,KAAM,KAAA;AAAA,OAC1C;AACA,MAAA,MAAM,OAAA,GAA0B,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,QACjD,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,IAAA,EAAO,EAAE,IAAA,IAAsB,OAAA;AAAA,QAC/B,WAAA,EAAa,EAAE,WAAA,IAAe,EAAA;AAAA,QAC9B,MAAA,EAAQ,CAAA,QAAA,EAAW,CAAA,CAAE,EAAE,CAAA,CAAA;AAAA,QACvB,WAAW,CAAA,CAAE,SAAA;AAAA,QACb,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,QAAQ,CAAA,CAAE,MAAA;AAAA,QACV,UAAU,CAAA,CAAE,QAAA;AAAA,QACZ,SAAS,CAAA,CAAE,OAAA;AAAA,QACX,UAAU,EAAC;AAAA,QACX,cAAc;AAAC,OACjB,CAAE,CAAA;AACF,MAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,IAC1B,CAAA,SAAE;AACA,MAAA,KAAA,EAAM;AAAA,IACR;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,MAAM,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAG3D,IAAA,IAAI,CAAC,QAAA,CAAS,IAAA,CAAK,GAAG,CAAA,EAAG;AACvB,MAAA,KAAA,CAAM,KAAK,EAAE,IAAA,EAAM,OAAA,EAAS,OAAA,EAAS,KAAK,CAAA;AAAA,IAC5C;AACA,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAaA,eAAe,aAAa,EAAA,EAA8C;AAIxE,EAAA,MAAM,eAAA,GAAkB,iBAAA,EAAkB,CAAE,GAAA,CAAI,CAAC,CAAA,KAAO,CAAA,CAAE,QAAA,CAAc,IAAA,CAAA,GAAG,CAAA,GAAI,CAAA,GAAI,CAAA,GAAS,IAAA,CAAA,GAAI,CAAA;AAChG,EAAA,MAAM,gBAAgB,CAAC,CAAA,KACrB,eAAA,CAAgB,IAAA,CAAK,CAAC,EAAA,KAAO,CAAA,KAAM,EAAA,CAAG,KAAA,CAAM,GAAG,EAAE,CAAA,IAAK,CAAA,CAAE,UAAA,CAAW,EAAE,CAAC,CAAA;AAExE,EAAA,MAAM,GAAA,GAAA,CAAO,MAAM,EAAA,CAAG,MAAA,EAAO,EAAG,MAAA,CAAO,CAAC,CAAA,KAAM,CAAC,aAAA,CAAc,CAAA,CAAE,MAAM,CAAC,CAAA;AACtE,EAAA,MAAM,UAAyB,EAAC;AAMhC,EAAA,KAAA,MAAW,EAAE,QAAA,EAAU,IAAA,EAAK,IAAK,EAAA,CAAG,iBAAgB,EAAG;AACrD,IAAA,IAAI,aAAA,CAAc,IAAI,CAAA,EAAG;AACzB,IAAA,MAAM,SAAS,IAAA,CAAK,QAAA,CAAc,IAAA,CAAA,GAAG,CAAA,GAAI,OAAO,IAAA,GAAY,IAAA,CAAA,GAAA;AAC5D,IAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,MAAA,KAAW,IAAA,IAAQ,CAAA,CAAE,MAAA,CAAO,UAAA,CAAW,MAAM,CAAC,CAAA;AAChF,IAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG;AACxB,IAAA,MAAM,aAAa,QAAA,CAAS,KAAA,CAAM,GAAG,CAAA,CAAE,KAAI,IAAK,QAAA;AAChD,IAAA,KAAA,MAAW,KAAA,IAAS,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,EAAE,QAAQ,QAAA,EAAU,KAAA,EAAO,KAAA,EAAO,UAAA,EAAY,CAAA;AAAA,EACxF;AACA,EAAA,OAAO,OAAA;AACT;AAUA,eAAe,aAAA,GAGZ;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AACF,IAAA,MAAM,UAA0B,EAAC;AACjC,IAAA,KAAA,MAAW,IAAA,IAAQ,mBAAkB,EAAG;AACtC,MAAA,OAAA,CAAQ,IAAA,CAAK,GAAI,MAAM,QAAA,CAAS,IAAA,EAAM,gBAAA,EAAkB,EAAE,UAAA,EAAY,aAAA,EAAc,EAAG,CAAE,CAAA;AAAA,IAC3F;AACA,IAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,EAC1B,SAAS,GAAA,EAAK;AACZ,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,IAAA,EAAM,SAAA;AAAA,MACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACzD,CAAA;AACD,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAGA,SAAS,GAAA,CAAI,QAAqB,OAAA,EAAwC;AACxE,EAAA,OAAO,QAAQ,GAAA,CAAI,CAAC,WAAW,EAAE,MAAA,EAAQ,OAAM,CAAE,CAAA;AACnD;AASA,eAAsB,gBAAA,CACpB,IACA,UAAA,EAC0B;AAC1B,EAAA,MAAM,CAAC,IAAA,EAAM,KAAK,CAAA,GAAI,MAAM,OAAA,CAAQ,GAAA,CAAI,CAAC,aAAA,EAAc,EAAG,WAAA,CAAY,UAAU,CAAC,CAAC,CAAA;AAClF,EAAA,MAAM,OAAA,GAAU,MAAM,aAAA,EAAc;AACpC,EAAA,MAAM,GAAA,GAAM,MAAM,YAAA,CAAa,EAAE,CAAA;AACjC,EAAA,OAAO;AAAA,IACL,OAAA,EAAS;AAAA,MACP,GAAG,GAAA;AAAA,MACH,GAAG,IAAA,CAAK,OAAA;AAAA,MACR,GAAG,GAAA,CAAI,SAAA,EAAW,OAAA,CAAQ,OAAO,CAAA;AAAA,MACjC,GAAG,GAAA,CAAI,OAAA,EAAS,KAAA,CAAM,OAAO;AAAA,KAC/B;AAAA,IACA,KAAA,EAAO,CAAC,GAAG,IAAA,CAAK,KAAA,EAAO,GAAG,KAAA,CAAM,KAAA,EAAO,GAAG,OAAA,CAAQ,KAAK;AAAA,GACzD;AACF","file":"asset-feeds-MALYFZUM.js","sourcesContent":["/**\n * asset-feeds.ts — gather installable assets from every feed the manage TUI\n * surfaces.\n *\n * Four feeds, normalized into `CatalogEntry`:\n * - **Project sources** — `skaile.yaml` `sources:` entries (scanned via\n *   `AssetManager.search()`; the new `sources:` field is merged into the\n *   legacy repositories map in `AssetManager.loadConfig`).\n * - **Local libraries** — user authoring places from `LocalIndex`, read through\n *   `scanAuthoringLibraries` (`@skaile/workspaces/library`): the same scan\n *   `library index` / `search --local` use, so publishers and refs match them\n *   (per-asset `publisher_overrides` honoured), `dev_paths` assets are left out,\n *   and a library that fails to scan becomes one note while the rest stay listed.\n * - **Factory assets** — the bundled first-party `factory-assets` tree\n *   (`factoryAssetRoots()`), scanned from disk. Always present; no network.\n * - **Remote store** — the configured catalog source when `catalog.url` is\n *   not `local`. Failures are non-fatal — they surface as notes.\n */\n\nimport * as path from \"node:path\";\nimport {\n  type AssetKind,\n  type CatalogEntry,\n  factoryAssetRoots,\n  parseRequires,\n  scanRepo,\n} from \"@skaile/workspaces/core\";\nimport { getKnownKinds } from \"./open-registry.ts\";\nimport { storeNotInstallableReason } from \"./store-addable.ts\";\nimport type { DiscoveredAsset } from \"@skaile/workspaces/discovery\";\n\n/** One non-fatal note returned to the caller for surfacing in the UI. */\nexport interface FeedNote {\n  feed: \"sources\" | \"libraries\" | \"store\" | \"factory\";\n  message: string;\n}\n\n/**\n * Which feed an asset came from. This is the top-level grouping axis in the\n * manage TUI (\"where is this skill coming from?\") and is intentionally distinct\n * from `publisher` (asset-intrinsic identity): the same publisher can legitimately\n * appear under more than one origin (e.g. a github repo you added as a `source`\n * that is also listed in the remote `store`).\n */\nexport type AssetOrigin = \"source\" | \"library\" | \"factory\" | \"store\";\n\n/** A catalog entry tagged with the feed it was gathered from. */\nexport interface OriginEntry {\n  origin: AssetOrigin;\n  entry: CatalogEntry;\n  /**\n   * Second-level grouping label for the manage tree. Defaults (when unset) to the\n   * entry's `publisher`; the source feed sets it to the source's short repo name\n   * so the Sources band groups by source — \"which repo did this come from\" — not\n   * by the asset-intrinsic publisher.\n   */\n  group?: string;\n}\n\nexport interface AssetFeedResult {\n  entries: OriginEntry[];\n  notes: FeedNote[];\n}\n\n/**\n * Map one discovered library asset to the `CatalogEntry` the manage rows read.\n * `publisher` is the bare per-asset publisher (what `search --local` prints),\n * `source` the manifest path. `repo` is left unset: it only feeds the Sources-tree\n * org grouping. `requires` / `dependencies` come from the manifest the way the\n * scanner fills them — string `requires:` refs parsed to `{kind, name}`, a bundle's\n * string `dependencies:` list verbatim.\n */\nfunction libraryEntryOf(asset: DiscoveredAsset): CatalogEntry {\n  const { manifest } = asset;\n  const nested = (manifest.metadata as Record<string, unknown> | undefined)?.requires;\n  const rawRequires = manifest.requires ?? nested;\n  const requireRefs =\n    typeof rawRequires === \"string\"\n      ? rawRequires\n      : Array.isArray(rawRequires)\n        ? rawRequires.filter((r): r is string => typeof r === \"string\")\n        : undefined;\n  const deps = manifest.dependencies;\n  return {\n    name: asset.name,\n    kind: asset.kind as AssetKind,\n    description: typeof manifest.description === \"string\" ? manifest.description : \"\",\n    source: asset.manifestPath,\n    publisher: asset.publisher,\n    ...(asset.plugin ? { plugin: asset.plugin } : {}),\n    version: asset.version,\n    requires: requireRefs === undefined ? [] : parseRequires({ requires: requireRefs }),\n    dependencies:\n      asset.kind === \"bundle\" && Array.isArray(deps)\n        ? deps.filter((d): d is string => typeof d === \"string\" && d.length > 0)\n        : [],\n  };\n}\n\n/**\n * Pull assets from local libraries (the authoring places under\n * `~/.skaile/libraries/<name>/`, not the `~/.skaile/cache/sources/` cache) through\n * `scanAuthoringLibraries`, grouped under the bare library name\n * (`group: <name>`) so the manage TUI shows a clean `<name>` band — no\n * `library:` prefix (mirrors the source feed). Plugin grouping (`entry.plugin`)\n * comes from `DiscoveredAsset.plugin`. A library whose scan fails becomes one\n * `FeedNote`; the outer `catch` covers only opening the index.\n */\nasync function libraryAssets(): Promise<{\n  entries: OriginEntry[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    // Lazy: the library subpath pulls in SQLite, which the other feeds never need.\n    const { openLibraryManager } = await import(\"./open-library.ts\");\n    const { getKindRegistry } = await import(\"./open-registry.ts\");\n    const { scanAuthoringLibraries } = await import(\"@skaile/workspaces/library\");\n    const { library: index, close } = await openLibraryManager();\n    try {\n      const entries: OriginEntry[] = [];\n      for (const scan of await scanAuthoringLibraries(index, getKindRegistry())) {\n        if (scan.error !== undefined) {\n          notes.push({ feed: \"libraries\", message: `${scan.library.name}: ${scan.error}` });\n          continue;\n        }\n        for (const asset of scan.assets) {\n          entries.push({\n            origin: \"library\",\n            entry: libraryEntryOf(asset),\n            group: scan.library.name,\n          });\n        }\n      }\n      return { entries, notes };\n    } finally {\n      close();\n    }\n  } catch (err) {\n    notes.push({\n      feed: \"libraries\",\n      message: err instanceof Error ? err.message : String(err),\n    });\n    return { entries: [], notes };\n  }\n}\n\n/**\n * Pull a (best-effort) snapshot of the connected remote store catalog.\n *\n * - Returns no entries when the resolved catalog is local-only or the host\n *   is unreachable (the failure becomes a note, not an exception).\n * - Maps `CatalogAsset` → `CatalogEntry`, carrying `publisher`, `repo`, and\n *   `category` straight through and using `source = \"store://<id>\"`; per-file\n *   `source` paths are not available for remote assets so the canonical ref is\n *   a stable placeholder.\n */\nasync function storeAssets(projectDir: string): Promise<{\n  entries: CatalogEntry[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    const { resolveCatalogSource } = await import(\"./open-library.ts\");\n    const { source, close } = await resolveCatalogSource({ projectDir });\n    try {\n      // The store lists only what `skaile add` can install (see store-addable.ts).\n      const assets = (await source.listAssets()).filter(\n        (a) => storeNotInstallableReason(a) === undefined,\n      );\n      const entries: CatalogEntry[] = assets.map((a) => ({\n        name: a.name,\n        kind: (a.kind as AssetKind) ?? \"skill\",\n        description: a.description ?? \"\",\n        source: `store://${a.id}`,\n        publisher: a.publisher,\n        repo: a.repo,\n        plugin: a.plugin,\n        category: a.category,\n        version: a.version,\n        requires: [],\n        dependencies: [],\n      }));\n      return { entries, notes };\n    } finally {\n      close();\n    }\n  } catch (err) {\n    const msg = err instanceof Error ? err.message : String(err);\n    // Local-only catalog throws a recognizable message — silence it; absence\n    // is the user's choice, not an error.\n    if (!/local/i.test(msg)) {\n      notes.push({ feed: \"store\", message: msg });\n    }\n    return { entries: [], notes };\n  }\n}\n\n/** The slice of `AssetManager` the source feed needs (kept narrow for tests). */\ninterface AssetManagerLike {\n  search: () => Promise<CatalogEntry[]>;\n  searchRepoRoots: () => { repoName: string; root: string }[];\n}\n\n/**\n * Project-source feed: leans on `AssetManager.search()`, which merges\n * `skaile.yaml`'s `sources:` field into the repositories map. Plugin grouping\n * (`entry.plugin`) is stamped by the scanner, so entries pass through as-is.\n */\nasync function sourceAssets(am: AssetManagerLike): Promise<OriginEntry[]> {\n  // The bundled factory tree is injected into the repositories map as an implicit\n  // source, so `am.search()` returns it too. It has its own `factory` origin band,\n  // so drop it here — otherwise the same first-party skills list twice under Sources.\n  const factoryPrefixes = factoryAssetRoots().map((r) => (r.endsWith(path.sep) ? r : r + path.sep));\n  const isFactoryPath = (p: string) =>\n    factoryPrefixes.some((fp) => p === fp.slice(0, -1) || p.startsWith(fp));\n\n  const all = (await am.search()).filter((e) => !isFactoryPath(e.source));\n  const entries: OriginEntry[] = [];\n  // Group each source's entries under the source node (its short repo name), not\n  // the publisher: under Sources the navigational question is \"which repo did\n  // this come from\". Each entry's `source` (absolute manifest path) lives under\n  // exactly one declared root, so group by prefix. The cache slug is\n  // URL-keyed `github.com/<org>/<repo>` — take the trailing segment.\n  for (const { repoName, root } of am.searchRepoRoots()) {\n    if (isFactoryPath(root)) continue;\n    const prefix = root.endsWith(path.sep) ? root : root + path.sep;\n    const owned = all.filter((e) => e.source === root || e.source.startsWith(prefix));\n    if (owned.length === 0) continue;\n    const sourceName = repoName.split(\"/\").pop() || repoName;\n    for (const entry of owned) entries.push({ origin: \"source\", entry, group: sourceName });\n  }\n  return entries;\n}\n\n/**\n * Factory-asset feed: scan the bundled first-party `factory-assets` tree(s)\n * resolved by `factoryAssetRoots()` (the `SKAILE_FACTORY_ASSETS_DIR` override\n * layer ahead of the bundled tree). Local disk only, no network — the entries are\n * the built-in skills / connectors / bundles that ship with `@skaile/workspaces`.\n * `factoryAssetRoots()` already dedupes, so the env override pointing at the\n * bundled dir collapses to one root.\n */\nasync function factoryAssets(): Promise<{\n  entries: CatalogEntry[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    const entries: CatalogEntry[] = [];\n    for (const root of factoryAssetRoots()) {\n      entries.push(...(await scanRepo(root, \"skaile-factory\", { knownKinds: getKnownKinds() })));\n    }\n    return { entries, notes };\n  } catch (err) {\n    notes.push({\n      feed: \"factory\",\n      message: err instanceof Error ? err.message : String(err),\n    });\n    return { entries: [], notes };\n  }\n}\n\n/** Tag a flat entry list with a single origin. */\nfunction tag(origin: AssetOrigin, entries: CatalogEntry[]): OriginEntry[] {\n  return entries.map((entry) => ({ origin, entry }));\n}\n\n/**\n * Run all feeds and return a single normalized result.\n *\n * Feeds run in parallel where possible — the store fetch is the slow one\n * (one HTTP call) and is fired alongside the local library walk. The factory\n * scan is local disk only, so it runs inline.\n */\nexport async function gatherAssetFeeds(\n  am: AssetManagerLike,\n  projectDir: string,\n): Promise<AssetFeedResult> {\n  const [libs, store] = await Promise.all([libraryAssets(), storeAssets(projectDir)]);\n  const factory = await factoryAssets();\n  const src = await sourceAssets(am);\n  return {\n    entries: [\n      ...src,\n      ...libs.entries,\n      ...tag(\"factory\", factory.entries),\n      ...tag(\"store\", store.entries),\n    ],\n    notes: [...libs.notes, ...store.notes, ...factory.notes],\n  };\n}\n"]}
+{"version":3,"sources":["../cli/src/asset-feeds.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwEA,SAAS,eAAe,KAAA,EAAsC;AAC5D,EAAA,MAAM,EAAE,UAAS,GAAI,KAAA;AACrB,EAAA,MAAM,MAAA,GAAU,SAAS,QAAA,EAAkD,QAAA;AAC3E,EAAA,MAAM,WAAA,GAAc,SAAS,QAAA,IAAY,MAAA;AACzC,EAAA,MAAM,cACJ,OAAO,WAAA,KAAgB,QAAA,GACnB,WAAA,GACA,MAAM,OAAA,CAAQ,WAAW,CAAA,GACvB,WAAA,CAAY,OAAO,CAAC,CAAA,KAAmB,OAAO,CAAA,KAAM,QAAQ,CAAA,GAC5D,MAAA;AACR,EAAA,MAAM,OAAO,QAAA,CAAS,YAAA;AACtB,EAAA,OAAO;AAAA,IACL,MAAM,KAAA,CAAM,IAAA;AAAA,IACZ,MAAM,KAAA,CAAM,IAAA;AAAA,IACZ,aAAa,OAAO,QAAA,CAAS,WAAA,KAAgB,QAAA,GAAW,SAAS,WAAA,GAAc,EAAA;AAAA,IAC/E,QAAQ,KAAA,CAAM,YAAA;AAAA,IACd,WAAW,KAAA,CAAM,SAAA;AAAA,IACjB,GAAI,MAAM,MAAA,GAAS,EAAE,QAAQ,KAAA,CAAM,MAAA,KAAW,EAAC;AAAA,IAC/C,SAAS,KAAA,CAAM,OAAA;AAAA,IACf,QAAA,EAAU,gBAAgB,MAAA,GAAY,KAAK,aAAA,CAAc,EAAE,QAAA,EAAU,WAAA,EAAa,CAAA;AAAA,IAClF,cACE,KAAA,CAAM,IAAA,KAAS,YAAY,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,GACzC,IAAA,CAAK,OAAO,CAAC,CAAA,KAAmB,OAAO,CAAA,KAAM,QAAA,IAAY,EAAE,MAAA,GAAS,CAAC,IACrE;AAAC,GACT;AACF;AAWA,eAAe,aAAA,GAGZ;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AAEF,IAAA,MAAM,EAAE,kBAAA,EAAmB,GAAI,MAAM,OAAO,4BAAmB,CAAA;AAC/D,IAAA,MAAM,EAAE,eAAA,EAAgB,GAAI,MAAM,OAAO,6BAAoB,CAAA;AAC7D,IAAA,MAAM,EAAE,sBAAA,EAAuB,GAAI,MAAM,OAAO,oBAA4B,CAAA;AAC5E,IAAA,MAAM,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAM,GAAI,MAAM,kBAAA,EAAmB;AAC3D,IAAA,IAAI;AACF,MAAA,MAAM,UAAyB,EAAC;AAChC,MAAA,KAAA,MAAW,QAAQ,MAAM,sBAAA,CAAuB,KAAA,EAAO,eAAA,EAAiB,CAAA,EAAG;AACzE,QAAA,IAAI,IAAA,CAAK,UAAU,KAAA,CAAA,EAAW;AAC5B,UAAA,KAAA,CAAM,IAAA,CAAK,EAAE,IAAA,EAAM,WAAA,EAAa,OAAA,EAAS,CAAA,EAAG,IAAA,CAAK,OAAA,CAAQ,IAAI,CAAA,EAAA,EAAK,IAAA,CAAK,KAAK,IAAI,CAAA;AAChF,UAAA;AAAA,QACF;AACA,QAAA,KAAA,MAAW,KAAA,IAAS,KAAK,MAAA,EAAQ;AAC/B,UAAA,OAAA,CAAQ,IAAA,CAAK;AAAA,YACX,MAAA,EAAQ,SAAA;AAAA,YACR,KAAA,EAAO,eAAe,KAAK,CAAA;AAAA,YAC3B,KAAA,EAAO,KAAK,OAAA,CAAQ;AAAA,WACrB,CAAA;AAAA,QACH;AAAA,MACF;AACA,MAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,IAC1B,CAAA,SAAE;AACA,MAAA,KAAA,EAAM;AAAA,IACR;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,IAAA,EAAM,WAAA;AAAA,MACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACzD,CAAA;AACD,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAYA,eAAe,YAAY,UAAA,EAGxB;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AACF,IAAA,MAAM,EAAE,oBAAA,EAAqB,GAAI,MAAM,OAAO,4BAAmB,CAAA;AACjE,IAAA,MAAM,EAAE,QAAQ,KAAA,EAAM,GAAI,MAAM,oBAAA,CAAqB,EAAE,YAAY,CAAA;AACnE,IAAA,IAAI;AAEF,MAAA,MAAM,MAAA,GAAA,CAAU,MAAM,MAAA,CAAO,UAAA,EAAW,EAAG,MAAA;AAAA,QACzC,CAAC,CAAA,KAAM,yBAAA,CAA0B,CAAC,CAAA,KAAM,KAAA;AAAA,OAC1C;AACA,MAAA,MAAM,OAAA,GAA0B,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,QACjD,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,IAAA,EAAO,EAAE,IAAA,IAAsB,OAAA;AAAA,QAC/B,WAAA,EAAa,EAAE,WAAA,IAAe,EAAA;AAAA,QAC9B,MAAA,EAAQ,CAAA,QAAA,EAAW,CAAA,CAAE,EAAE,CAAA,CAAA;AAAA,QACvB,WAAW,CAAA,CAAE,SAAA;AAAA,QACb,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,QAAQ,CAAA,CAAE,MAAA;AAAA,QACV,UAAU,CAAA,CAAE,QAAA;AAAA,QACZ,SAAS,CAAA,CAAE,OAAA;AAAA,QACX,UAAU,EAAC;AAAA,QACX,cAAc;AAAC,OACjB,CAAE,CAAA;AACF,MAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,IAC1B,CAAA,SAAE;AACA,MAAA,KAAA,EAAM;AAAA,IACR;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,MAAM,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAG3D,IAAA,IAAI,CAAC,QAAA,CAAS,IAAA,CAAK,GAAG,CAAA,EAAG;AACvB,MAAA,KAAA,CAAM,KAAK,EAAE,IAAA,EAAM,OAAA,EAAS,OAAA,EAAS,KAAK,CAAA;AAAA,IAC5C;AACA,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAaA,eAAe,aAAa,EAAA,EAA8C;AAIxE,EAAA,MAAM,eAAA,GAAkB,iBAAA,EAAkB,CAAE,GAAA,CAAI,CAAC,CAAA,KAAO,CAAA,CAAE,QAAA,CAAc,IAAA,CAAA,GAAG,CAAA,GAAI,CAAA,GAAI,CAAA,GAAS,IAAA,CAAA,GAAI,CAAA;AAChG,EAAA,MAAM,gBAAgB,CAAC,CAAA,KACrB,eAAA,CAAgB,IAAA,CAAK,CAAC,EAAA,KAAO,CAAA,KAAM,EAAA,CAAG,KAAA,CAAM,GAAG,EAAE,CAAA,IAAK,CAAA,CAAE,UAAA,CAAW,EAAE,CAAC,CAAA;AAExE,EAAA,MAAM,GAAA,GAAA,CAAO,MAAM,EAAA,CAAG,MAAA,EAAO,EAAG,MAAA,CAAO,CAAC,CAAA,KAAM,CAAC,aAAA,CAAc,CAAA,CAAE,MAAM,CAAC,CAAA;AACtE,EAAA,MAAM,UAAyB,EAAC;AAMhC,EAAA,KAAA,MAAW,EAAE,QAAA,EAAU,IAAA,EAAK,IAAK,EAAA,CAAG,iBAAgB,EAAG;AACrD,IAAA,IAAI,aAAA,CAAc,IAAI,CAAA,EAAG;AACzB,IAAA,MAAM,SAAS,IAAA,CAAK,QAAA,CAAc,IAAA,CAAA,GAAG,CAAA,GAAI,OAAO,IAAA,GAAY,IAAA,CAAA,GAAA;AAC5D,IAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,MAAA,KAAW,IAAA,IAAQ,CAAA,CAAE,MAAA,CAAO,UAAA,CAAW,MAAM,CAAC,CAAA;AAChF,IAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG;AACxB,IAAA,MAAM,aAAa,QAAA,CAAS,KAAA,CAAM,GAAG,CAAA,CAAE,KAAI,IAAK,QAAA;AAChD,IAAA,KAAA,MAAW,KAAA,IAAS,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,EAAE,QAAQ,QAAA,EAAU,KAAA,EAAO,KAAA,EAAO,UAAA,EAAY,CAAA;AAAA,EACxF;AACA,EAAA,OAAO,OAAA;AACT;AAUA,eAAe,aAAA,GAGZ;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AACF,IAAA,MAAM,UAA0B,EAAC;AACjC,IAAA,KAAA,MAAW,IAAA,IAAQ,mBAAkB,EAAG;AACtC,MAAA,OAAA,CAAQ,IAAA,CAAK,GAAI,MAAM,QAAA,CAAS,IAAA,EAAM,gBAAA,EAAkB,EAAE,UAAA,EAAY,aAAA,EAAc,EAAG,CAAE,CAAA;AAAA,IAC3F;AACA,IAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,EAC1B,SAAS,GAAA,EAAK;AACZ,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,IAAA,EAAM,SAAA;AAAA,MACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACzD,CAAA;AACD,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAGA,SAAS,GAAA,CAAI,QAAqB,OAAA,EAAwC;AACxE,EAAA,OAAO,QAAQ,GAAA,CAAI,CAAC,WAAW,EAAE,MAAA,EAAQ,OAAM,CAAE,CAAA;AACnD;AASA,eAAsB,gBAAA,CACpB,IACA,UAAA,EAC0B;AAC1B,EAAA,MAAM,CAAC,IAAA,EAAM,KAAK,CAAA,GAAI,MAAM,OAAA,CAAQ,GAAA,CAAI,CAAC,aAAA,EAAc,EAAG,WAAA,CAAY,UAAU,CAAC,CAAC,CAAA;AAClF,EAAA,MAAM,OAAA,GAAU,MAAM,aAAA,EAAc;AACpC,EAAA,MAAM,GAAA,GAAM,MAAM,YAAA,CAAa,EAAE,CAAA;AACjC,EAAA,OAAO;AAAA,IACL,OAAA,EAAS;AAAA,MACP,GAAG,GAAA;AAAA,MACH,GAAG,IAAA,CAAK,OAAA;AAAA,MACR,GAAG,GAAA,CAAI,SAAA,EAAW,OAAA,CAAQ,OAAO,CAAA;AAAA,MACjC,GAAG,GAAA,CAAI,OAAA,EAAS,KAAA,CAAM,OAAO;AAAA,KAC/B;AAAA,IACA,KAAA,EAAO,CAAC,GAAG,IAAA,CAAK,KAAA,EAAO,GAAG,KAAA,CAAM,KAAA,EAAO,GAAG,OAAA,CAAQ,KAAK;AAAA,GACzD;AACF","file":"asset-feeds-MKB5JUML.js","sourcesContent":["/**\n * asset-feeds.ts — gather installable assets from every feed the manage TUI\n * surfaces.\n *\n * Four feeds, normalized into `CatalogEntry`:\n * - **Project sources** — `skaile.yaml` `sources:` entries (scanned via\n *   `AssetManager.search()`; the new `sources:` field is merged into the\n *   legacy repositories map in `AssetManager.loadConfig`).\n * - **Local libraries** — user authoring places from `LocalIndex`, read through\n *   `scanAuthoringLibraries` (`@skaile/workspaces/library`): the same scan\n *   `library index` / `search --local` use, so publishers and refs match them\n *   (per-asset `publisher_overrides` honoured), `dev_paths` assets are left out,\n *   and a library that fails to scan becomes one note while the rest stay listed.\n * - **Factory assets** — the bundled first-party `factory-assets` tree\n *   (`factoryAssetRoots()`), scanned from disk. Always present; no network.\n * - **Remote store** — the configured catalog source when `catalog.url` is\n *   not `local`. Failures are non-fatal — they surface as notes.\n */\n\nimport * as path from \"node:path\";\nimport {\n  type AssetKind,\n  type CatalogEntry,\n  factoryAssetRoots,\n  parseRequires,\n  scanRepo,\n} from \"@skaile/workspaces/core\";\nimport { getKnownKinds } from \"./open-registry.ts\";\nimport { storeNotInstallableReason } from \"./store-addable.ts\";\nimport type { DiscoveredAsset } from \"@skaile/workspaces/discovery\";\n\n/** One non-fatal note returned to the caller for surfacing in the UI. */\nexport interface FeedNote {\n  feed: \"sources\" | \"libraries\" | \"store\" | \"factory\";\n  message: string;\n}\n\n/**\n * Which feed an asset came from. This is the top-level grouping axis in the\n * manage TUI (\"where is this skill coming from?\") and is intentionally distinct\n * from `publisher` (asset-intrinsic identity): the same publisher can legitimately\n * appear under more than one origin (e.g. a github repo you added as a `source`\n * that is also listed in the remote `store`).\n */\nexport type AssetOrigin = \"source\" | \"library\" | \"factory\" | \"store\";\n\n/** A catalog entry tagged with the feed it was gathered from. */\nexport interface OriginEntry {\n  origin: AssetOrigin;\n  entry: CatalogEntry;\n  /**\n   * Second-level grouping label for the manage tree. Defaults (when unset) to the\n   * entry's `publisher`; the source feed sets it to the source's short repo name\n   * so the Sources band groups by source — \"which repo did this come from\" — not\n   * by the asset-intrinsic publisher.\n   */\n  group?: string;\n}\n\nexport interface AssetFeedResult {\n  entries: OriginEntry[];\n  notes: FeedNote[];\n}\n\n/**\n * Map one discovered library asset to the `CatalogEntry` the manage rows read.\n * `publisher` is the bare per-asset publisher (what `search --local` prints),\n * `source` the manifest path. `repo` is left unset: it only feeds the Sources-tree\n * org grouping. `requires` / `dependencies` come from the manifest the way the\n * scanner fills them — string `requires:` refs parsed to `{kind, name}`, a bundle's\n * string `dependencies:` list verbatim.\n */\nfunction libraryEntryOf(asset: DiscoveredAsset): CatalogEntry {\n  const { manifest } = asset;\n  const nested = (manifest.metadata as Record<string, unknown> | undefined)?.requires;\n  const rawRequires = manifest.requires ?? nested;\n  const requireRefs =\n    typeof rawRequires === \"string\"\n      ? rawRequires\n      : Array.isArray(rawRequires)\n        ? rawRequires.filter((r): r is string => typeof r === \"string\")\n        : undefined;\n  const deps = manifest.dependencies;\n  return {\n    name: asset.name,\n    kind: asset.kind as AssetKind,\n    description: typeof manifest.description === \"string\" ? manifest.description : \"\",\n    source: asset.manifestPath,\n    publisher: asset.publisher,\n    ...(asset.plugin ? { plugin: asset.plugin } : {}),\n    version: asset.version,\n    requires: requireRefs === undefined ? [] : parseRequires({ requires: requireRefs }),\n    dependencies:\n      asset.kind === \"bundle\" && Array.isArray(deps)\n        ? deps.filter((d): d is string => typeof d === \"string\" && d.length > 0)\n        : [],\n  };\n}\n\n/**\n * Pull assets from local libraries (the authoring places under\n * `~/.skaile/libraries/<name>/`, not the `~/.skaile/cache/sources/` cache) through\n * `scanAuthoringLibraries`, grouped under the bare library name\n * (`group: <name>`) so the manage TUI shows a clean `<name>` band — no\n * `library:` prefix (mirrors the source feed). Plugin grouping (`entry.plugin`)\n * comes from `DiscoveredAsset.plugin`. A library whose scan fails becomes one\n * `FeedNote`; the outer `catch` covers only opening the index.\n */\nasync function libraryAssets(): Promise<{\n  entries: OriginEntry[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    // Lazy: the library subpath pulls in SQLite, which the other feeds never need.\n    const { openLibraryManager } = await import(\"./open-library.ts\");\n    const { getKindRegistry } = await import(\"./open-registry.ts\");\n    const { scanAuthoringLibraries } = await import(\"@skaile/workspaces/library\");\n    const { library: index, close } = await openLibraryManager();\n    try {\n      const entries: OriginEntry[] = [];\n      for (const scan of await scanAuthoringLibraries(index, getKindRegistry())) {\n        if (scan.error !== undefined) {\n          notes.push({ feed: \"libraries\", message: `${scan.library.name}: ${scan.error}` });\n          continue;\n        }\n        for (const asset of scan.assets) {\n          entries.push({\n            origin: \"library\",\n            entry: libraryEntryOf(asset),\n            group: scan.library.name,\n          });\n        }\n      }\n      return { entries, notes };\n    } finally {\n      close();\n    }\n  } catch (err) {\n    notes.push({\n      feed: \"libraries\",\n      message: err instanceof Error ? err.message : String(err),\n    });\n    return { entries: [], notes };\n  }\n}\n\n/**\n * Pull a (best-effort) snapshot of the connected remote store catalog.\n *\n * - Returns no entries when the resolved catalog is local-only or the host\n *   is unreachable (the failure becomes a note, not an exception).\n * - Maps `CatalogAsset` → `CatalogEntry`, carrying `publisher`, `repo`, and\n *   `category` straight through and using `source = \"store://<id>\"`; per-file\n *   `source` paths are not available for remote assets so the canonical ref is\n *   a stable placeholder.\n */\nasync function storeAssets(projectDir: string): Promise<{\n  entries: CatalogEntry[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    const { resolveCatalogSource } = await import(\"./open-library.ts\");\n    const { source, close } = await resolveCatalogSource({ projectDir });\n    try {\n      // The store lists only what `skaile add` can install (see store-addable.ts).\n      const assets = (await source.listAssets()).filter(\n        (a) => storeNotInstallableReason(a) === undefined,\n      );\n      const entries: CatalogEntry[] = assets.map((a) => ({\n        name: a.name,\n        kind: (a.kind as AssetKind) ?? \"skill\",\n        description: a.description ?? \"\",\n        source: `store://${a.id}`,\n        publisher: a.publisher,\n        repo: a.repo,\n        plugin: a.plugin,\n        category: a.category,\n        version: a.version,\n        requires: [],\n        dependencies: [],\n      }));\n      return { entries, notes };\n    } finally {\n      close();\n    }\n  } catch (err) {\n    const msg = err instanceof Error ? err.message : String(err);\n    // Local-only catalog throws a recognizable message — silence it; absence\n    // is the user's choice, not an error.\n    if (!/local/i.test(msg)) {\n      notes.push({ feed: \"store\", message: msg });\n    }\n    return { entries: [], notes };\n  }\n}\n\n/** The slice of `AssetManager` the source feed needs (kept narrow for tests). */\ninterface AssetManagerLike {\n  search: () => Promise<CatalogEntry[]>;\n  searchRepoRoots: () => { repoName: string; root: string }[];\n}\n\n/**\n * Project-source feed: leans on `AssetManager.search()`, which merges\n * `skaile.yaml`'s `sources:` field into the repositories map. Plugin grouping\n * (`entry.plugin`) is stamped by the scanner, so entries pass through as-is.\n */\nasync function sourceAssets(am: AssetManagerLike): Promise<OriginEntry[]> {\n  // The bundled factory tree is injected into the repositories map as an implicit\n  // source, so `am.search()` returns it too. It has its own `factory` origin band,\n  // so drop it here — otherwise the same first-party skills list twice under Sources.\n  const factoryPrefixes = factoryAssetRoots().map((r) => (r.endsWith(path.sep) ? r : r + path.sep));\n  const isFactoryPath = (p: string) =>\n    factoryPrefixes.some((fp) => p === fp.slice(0, -1) || p.startsWith(fp));\n\n  const all = (await am.search()).filter((e) => !isFactoryPath(e.source));\n  const entries: OriginEntry[] = [];\n  // Group each source's entries under the source node (its short repo name), not\n  // the publisher: under Sources the navigational question is \"which repo did\n  // this come from\". Each entry's `source` (absolute manifest path) lives under\n  // exactly one declared root, so group by prefix. The cache slug is\n  // URL-keyed `github.com/<org>/<repo>` — take the trailing segment.\n  for (const { repoName, root } of am.searchRepoRoots()) {\n    if (isFactoryPath(root)) continue;\n    const prefix = root.endsWith(path.sep) ? root : root + path.sep;\n    const owned = all.filter((e) => e.source === root || e.source.startsWith(prefix));\n    if (owned.length === 0) continue;\n    const sourceName = repoName.split(\"/\").pop() || repoName;\n    for (const entry of owned) entries.push({ origin: \"source\", entry, group: sourceName });\n  }\n  return entries;\n}\n\n/**\n * Factory-asset feed: scan the bundled first-party `factory-assets` tree(s)\n * resolved by `factoryAssetRoots()` (the `SKAILE_FACTORY_ASSETS_DIR` override\n * layer ahead of the bundled tree). Local disk only, no network — the entries are\n * the built-in skills / connectors / bundles that ship with `@skaile/workspaces`.\n * `factoryAssetRoots()` already dedupes, so the env override pointing at the\n * bundled dir collapses to one root.\n */\nasync function factoryAssets(): Promise<{\n  entries: CatalogEntry[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    const entries: CatalogEntry[] = [];\n    for (const root of factoryAssetRoots()) {\n      entries.push(...(await scanRepo(root, \"skaile-factory\", { knownKinds: getKnownKinds() })));\n    }\n    return { entries, notes };\n  } catch (err) {\n    notes.push({\n      feed: \"factory\",\n      message: err instanceof Error ? err.message : String(err),\n    });\n    return { entries: [], notes };\n  }\n}\n\n/** Tag a flat entry list with a single origin. */\nfunction tag(origin: AssetOrigin, entries: CatalogEntry[]): OriginEntry[] {\n  return entries.map((entry) => ({ origin, entry }));\n}\n\n/**\n * Run all feeds and return a single normalized result.\n *\n * Feeds run in parallel where possible — the store fetch is the slow one\n * (one HTTP call) and is fired alongside the local library walk. The factory\n * scan is local disk only, so it runs inline.\n */\nexport async function gatherAssetFeeds(\n  am: AssetManagerLike,\n  projectDir: string,\n): Promise<AssetFeedResult> {\n  const [libs, store] = await Promise.all([libraryAssets(), storeAssets(projectDir)]);\n  const factory = await factoryAssets();\n  const src = await sourceAssets(am);\n  return {\n    entries: [\n      ...src,\n      ...libs.entries,\n      ...tag(\"factory\", factory.entries),\n      ...tag(\"store\", store.entries),\n    ],\n    notes: [...libs.notes, ...store.notes, ...factory.notes],\n  };\n}\n"]}

package/dist/asset-manager/catalog-deployer.js

@@ -1,17 +1,17 @@
-export { WORKSPACE_MOUNT_ENV_VAR, deployAll, deployCatalogEntry, findAiAssetsRoot, isUnderWorkspaceMount, resolveFlowSkills, undeployCatalogEntry, workspaceMountDirs } from '../chunk-AP24HESN.js';
-import '../chunk-PIC23DDE.js';
+export { WORKSPACE_MOUNT_ENV_VAR, deployAll, deployCatalogEntry, findAiAssetsRoot, isUnderWorkspaceMount, resolveFlowSkills, undeployCatalogEntry, workspaceMountDirs } from '../chunk-H6UVIKQ2.js';
+import '../chunk-T2TQAH2X.js';
 import '../chunk-4GY63JU6.js';
-import '../chunk-5RDZ5JHH.js';
-import '../chunk-D54T2F54.js';
+import '../chunk-KC6HGWXN.js';
+import '../chunk-5TBFN46Z.js';
 import '../chunk-5BEFNLOR.js';
 import '../chunk-A2ULN3KX.js';
-import '../chunk-ZVZTCDUN.js';
+import '../chunk-2NOLF7B2.js';
 import '../chunk-L5VSIPQD.js';
 import '../chunk-IG5LZ3WU.js';
-import '../chunk-H7R7R5BN.js';
+import '../chunk-CKICWXMU.js';
 import '../chunk-RVRB27AN.js';
-import '../chunk-YW2BNDSE.js';
-import '../chunk-FT4ZHLYR.js';
+import '../chunk-GOCWM7FN.js';
+import '../chunk-WDXZA7QW.js';
 import '../chunk-ICSCSM5D.js';
 import '../chunk-DKXNKFKP.js';
 import '../chunk-MJHSLODD.js';

package/dist/asset-manager/index.js

@@ -1,28 +1,32 @@
-export { AssetManager, FACTORY_SOURCE_URL, MissingManifestError, installAgentInstances, normalizeRepoUrl, parseCanonicalLockKey, parseRefTolerant, renderMcpServerConfig, softDepName } from '../chunk-W44KA24A.js';
-import '../chunk-D3PU3C6F.js';
-import '../chunk-ES6ARJPQ.js';
-import '../chunk-SXWGLW23.js';
+export { AssetManager, FACTORY_SOURCE_URL, LibraryEntryError, MissingManifestError, installAgentInstances, normalizeRepoUrl, parseCanonicalLockKey, parseRefTolerant, renderMcpServerConfig, softDepName } from '../chunk-VM3PH7BB.js';
+import '../chunk-VKPBUPH7.js';
+import '../chunk-HPVMTX6M.js';
+import '../chunk-U2FI547Z.js';
 import '../chunk-BFMYYNDT.js';
 import '../chunk-3TXEJN4W.js';
-export { SCAFFOLD_KINDS, createScaffold, deployAll, installAgent, installTargetOf, removeAsset } from '../chunk-FSLVMZXR.js';
+import '../chunk-ISHJITXJ.js';
+import '../chunk-LNFKL23K.js';
+import '../chunk-X3RMRJNR.js';
+import '../chunk-NUELZWCF.js';
+export { SCAFFOLD_KINDS, createScaffold, deployAll, installAgent, installTargetOf, removeAsset } from '../chunk-YZ3N7IUU.js';
 export { BUILT_IN_FRAGMENTS, loadPromptExtensions, resolveFragments } from '../chunk-NOA6EJXE.js';
 export { appendHistory, clearHistory, getRecentHistory, loadHistory } from '../chunk-KTBKW2FI.js';
 import '../chunk-UQ6LFBPZ.js';
-export { AGENT_RENDERERS, claudeCodeRenderer, codexRenderer, driverTargetSupportsAgents, ompRenderer, renderAgentToFramework } from '../chunk-6GSE63K2.js';
-import '../chunk-YK3XLEQJ.js';
-import '../chunk-PIC23DDE.js';
+export { AGENT_RENDERERS, claudeCodeRenderer, codexRenderer, driverTargetSupportsAgents, ompRenderer, renderAgentToFramework } from '../chunk-SRNCN4X2.js';
+import '../chunk-CKNIYIV2.js';
+import '../chunk-T2TQAH2X.js';
 import '../chunk-4GY63JU6.js';
-import '../chunk-5RDZ5JHH.js';
-import '../chunk-D54T2F54.js';
+import '../chunk-KC6HGWXN.js';
+import '../chunk-5TBFN46Z.js';
 import '../chunk-5BEFNLOR.js';
 import '../chunk-A2ULN3KX.js';
-import '../chunk-ZVZTCDUN.js';
+import '../chunk-2NOLF7B2.js';
 import '../chunk-L5VSIPQD.js';
 import '../chunk-IG5LZ3WU.js';
-import '../chunk-H7R7R5BN.js';
+import '../chunk-CKICWXMU.js';
 import '../chunk-RVRB27AN.js';
-import '../chunk-YW2BNDSE.js';
-import '../chunk-FT4ZHLYR.js';
+import '../chunk-GOCWM7FN.js';
+import '../chunk-WDXZA7QW.js';
 import '../chunk-ICSCSM5D.js';
 import '../chunk-DKXNKFKP.js';
 import '../chunk-MJHSLODD.js';

package/dist/asset-manager/installer.js

@@ -1,20 +1,20 @@
-export { SCAFFOLD_KINDS, canonicalEntryRef, createScaffold, deployAll, deployAsset, deployedAssetDrift, diffDeployedAgent, installTargetOf, readKeptLegacyCopies, removeAsset, writeKeptLegacyCopies } from '../chunk-FSLVMZXR.js';
+export { SCAFFOLD_KINDS, assertNoLibrarySymlinks, canonicalEntryRef, createScaffold, deployAll, deployAsset, deployedAssetDrift, diffDeployedAgent, installTargetOf, readKeptLegacyCopies, removeAsset, writeKeptLegacyCopies } from '../chunk-YZ3N7IUU.js';
 import '../chunk-NOA6EJXE.js';
-import '../chunk-6GSE63K2.js';
-import '../chunk-YK3XLEQJ.js';
-import '../chunk-PIC23DDE.js';
+import '../chunk-SRNCN4X2.js';
+import '../chunk-CKNIYIV2.js';
+import '../chunk-T2TQAH2X.js';
 import '../chunk-4GY63JU6.js';
-import '../chunk-5RDZ5JHH.js';
-import '../chunk-D54T2F54.js';
+import '../chunk-KC6HGWXN.js';
+import '../chunk-5TBFN46Z.js';
 import '../chunk-5BEFNLOR.js';
 import '../chunk-A2ULN3KX.js';
-import '../chunk-ZVZTCDUN.js';
+import '../chunk-2NOLF7B2.js';
 import '../chunk-L5VSIPQD.js';
 import '../chunk-IG5LZ3WU.js';
-import '../chunk-H7R7R5BN.js';
+import '../chunk-CKICWXMU.js';
 import '../chunk-RVRB27AN.js';
-import '../chunk-YW2BNDSE.js';
-import '../chunk-FT4ZHLYR.js';
+import '../chunk-GOCWM7FN.js';
+import '../chunk-WDXZA7QW.js';
 import '../chunk-ICSCSM5D.js';
 import '../chunk-DKXNKFKP.js';
 import '../chunk-MJHSLODD.js';

package/dist/asset-manager/renderers.js

@@ -1,18 +1,18 @@
-export { AGENT_RENDERERS, CODEX_IDENTITY_DIR, claudeCodeRenderer, codexRenderer, driverTargetSupportsAgents, ompRenderer, renderAgentToFramework } from '../chunk-6GSE63K2.js';
-import '../chunk-YK3XLEQJ.js';
-import '../chunk-PIC23DDE.js';
+export { AGENT_RENDERERS, CODEX_IDENTITY_DIR, claudeCodeRenderer, codexRenderer, driverTargetSupportsAgents, ompRenderer, renderAgentToFramework } from '../chunk-SRNCN4X2.js';
+import '../chunk-CKNIYIV2.js';
+import '../chunk-T2TQAH2X.js';
 import '../chunk-4GY63JU6.js';
-import '../chunk-5RDZ5JHH.js';
-import '../chunk-D54T2F54.js';
+import '../chunk-KC6HGWXN.js';
+import '../chunk-5TBFN46Z.js';
 import '../chunk-5BEFNLOR.js';
 import '../chunk-A2ULN3KX.js';
-import '../chunk-ZVZTCDUN.js';
+import '../chunk-2NOLF7B2.js';
 import '../chunk-L5VSIPQD.js';
 import '../chunk-IG5LZ3WU.js';
-import '../chunk-H7R7R5BN.js';
+import '../chunk-CKICWXMU.js';
 import '../chunk-RVRB27AN.js';
-import '../chunk-YW2BNDSE.js';
-import '../chunk-FT4ZHLYR.js';
+import '../chunk-GOCWM7FN.js';
+import '../chunk-WDXZA7QW.js';
 import '../chunk-ICSCSM5D.js';
 import '../chunk-DKXNKFKP.js';
 import '../chunk-MJHSLODD.js';

package/dist/asset-manager/src/index.d.ts

@@ -79,6 +79,14 @@ export declare function softDepName(ref: string): string;
  * @internal Exported for unit tests; not part of the stable public surface.
  */
 export declare function parseRefTolerant(ref: string): AssetRef | null;
+/**
+ * A library asset that `add`, `install` and the status commands cannot use as it is (a version
+ * that is not semver, a flow file the engine does not load). The CLI prints its message as one
+ * `✗` line, never a stack trace (p874, p1082).
+ */
+export declare class LibraryEntryError extends Error {
+    constructor(message: string);
+}
 /** A locked asset that now resolves from another library than its lock entry named. */
 export interface LibraryMove {
     /** `kind:@publisher/name` (no version). */
@@ -93,7 +101,7 @@ export interface LibraryMove {
  * `invalid` flags a `dependencies:` entry that isn't a parseable canonical ref —
  * surfaced (not silently dropped) so a `skaile.yaml` typo is visible.
  */
-export type DeclaredState = "declared" | "installed" | "drift" | "invalid";
+export type DeclaredState = "declared" | "installed" | "drift" | "invalid" | "skipped";
 /**
  * A top-level dependency declared in `skaile.yaml`, annotated with its
  * reconciliation {@link DeclaredState}. Transitive (lock-only) deps are never
@@ -105,6 +113,18 @@ export interface DeclaredAsset {
     kind: string;
     name: string;
     state: DeclaredState;
+    /** Set with `skipped`: why skaile does not write the `mcp-server` to the coding agent's MCP config. */
+    reason?: string;
+}
+/** A note about an `mcp-server` that fails nothing. See {@link AssetManager.mcpNotices}. */
+export interface McpNotice {
+    /** The declaration id (`sql`, `@admin/sql`). */
+    id: string;
+    kind: "skipped" | "unset-field";
+    /** With `skipped`: why the server is not written to the MCP config. */
+    reason?: string;
+    /** The `!` line `check` and `doctor` print. */
+    text: string;
 }
 /** A deployed library asset that lacks files of its library entry. See {@link AssetManager.incompleteDeploys}. */
 export interface IncompleteDeploy {
@@ -257,6 +277,11 @@ export interface InstallResult {
      * fail `validate` and the publish plan, so `install` names them (p926). Absent when none is.
      */
     placeholderBodies?: string[];
+    /**
+     * Deployed library assets whose `description:` is still the `library create` placeholder
+     * (`TODO: …`): `validate` and the publish plan fail it as well. Absent when none is.
+     */
+    placeholderDescriptions?: string[];
     /** Asset refs (`kind:name`) removed because they are no longer in the resolved set. */
     removed: string[];
     /**
@@ -352,6 +377,11 @@ export interface InstallResult {
      * one message each. Their earlier rendering is kept. `skaile install` fails on a non-empty list.
      */
     agentInstanceErrors?: string[];
+    /**
+     * The resolver's own text (with the directories it searched) for each entry of
+     * {@link agentInstanceErrors} whose message was shortened to one line of advice; for `--verbose`.
+     */
+    agentInstanceDetails?: string[];
 }
 /**
  * An installed asset whose source repository is behind the remote.
@@ -632,7 +662,13 @@ export interface AssetManagerOptions {
      * with a `skaile:` prefix. A CLI with a live spinner passes a collector and
      * prints the lines after the spinner stops, so frames can't overwrite them.
      */
-    onLibraryCollision?: (message: string) => void;
+    onLibraryCollision?: (message: string, keys?: readonly string[]) => void;
+    /**
+     * An `add` that meets several colliding assets prints one summary line by default; `true`
+     * prints each asset's full message (`skaile add --verbose`). A single collision always
+     * prints in full.
+     */
+    verboseCollisions?: boolean;
 }
 /** Canonical git URL identity for the bundled factory source. Never fetched —
  * the bytes live inside the package (`factory-assets/`); the URL is only the
@@ -689,6 +725,8 @@ export declare class AssetManager {
     private readonly indexPathOverride?;
     /** Sink for cross-library collision warnings; else `console.warn`. */
     private readonly onLibraryCollision?;
+    /** Print every colliding asset's full message instead of one summary ({@link AssetManagerOptions.verboseCollisions}). */
+    private readonly verboseCollisions;
     /** Store URLs whose failed version lookup was already reported (one warning per URL). */
     private readonly warnedStoreVersionLookups;
     /** Stores a lookup could not reach (store URL -> one line why); `add` reports them instead of "not found". */
@@ -780,6 +818,19 @@ export declare class AssetManager {
     /** Deploy options for one harness. In global mode, `driverTarget` is the
      * fan-out target (not the constructor's `driverTarget`, which is project-only). */
     private deployOptsFor;
+    /**
+     * Names of the `mcp-server` assets the lock holds (the declaration ids, unscoped); a missing
+     * `.mcp.json` entry of one counts as drift even before skaile owned it.
+     */
+    private lockedMcpNames;
+    /**
+     * The payloads and managed `.mcp.json` entries of the project's **locked** `mcp-server`
+     * assets that differ from what the declarations render (see {@link mcpServerDrift}), one row
+     * per server, named by the lock identity `mcp-server:@publisher/name`; `key` is the lock key.
+     * An `mcp_servers:` entry of `skaile.yaml` is configuration, not a locked asset: it has no
+     * row. Empty for a global manager and for a project that locks no `mcp-server`.
+     */
+    private mcpDriftRows;
     /**
      * Render the project's declared MCP servers into the driver target's own
      * native MCP config (`<project>/.mcp.json` for `claude-code`), so the coding
@@ -789,6 +840,10 @@ export declare class AssetManager {
      * write, and the coding agent's user scope is a large user-state file this
      * must not touch. Never fails an install — a render error is warned and
      * swallowed.
+     *
+     * @returns The payload files and config entries the render wrote back (and the files it
+     *   removed) because they had drifted from the declaration: `install` names them, as it does
+     *   a restored skill file.
      */
     private renderDriverMcpConfig;
     /**
@@ -938,6 +993,11 @@ export declare class AssetManager {
      * @returns a phrase per ref that follows the ref name, without parentheses.
      */
     private unresolvedFixes;
+    /**
+     * A ref pinned to a version its library never held (`#9.9.9`): the thing to change is the pin
+     * in `skaile.yaml`, not the library (p1096). Sets the fix and returns `true` when it applies.
+     */
+    private pinNeverHeld;
     /**
      * The ref a library now holds a flow under when a project still locks it by the slug of the
      * flow's `name:` (5.12.0 named a flow by `name:`; later releases name it by `id:`), or
@@ -946,11 +1006,25 @@ export declare class AssetManager {
     private renamedFlowRef;
     /** Collision messages already printed by this instance (one warning per ref + library set). */
     private readonly warnedLibraryCollisions;
+    /**
+     * Collisions of one `add`, held back until {@link flushLibraryCollisions} so a dependency
+     * tree that touches several colliding assets prints one summary, not one line per asset
+     * (p1097). `null` outside an `add`: a collision then warns at once.
+     */
+    private collisionBatch;
     /**
      * Warn once when `key` is held by more than one library: names every library
      * with its version and the one chosen, so a silent pick can't surprise.
      */
     private warnLibraryCollision;
+    /** Print each distinct collision message once; the sink also gets the keys it names. */
+    private emitLibraryCollision;
+    /**
+     * End the batch of {@link collisionBatch}: one collision prints its full message; several
+     * print one summary (how many libraries and assets, the library each asset came from, the
+     * assets whose bytes differ). `verboseCollisions` prints every asset's full message instead.
+     */
+    private flushLibraryCollisions;
     /** Kind, name and bare publisher of a deploy entry; the publisher comes from its canonical ref. */
     private entryIdentity;
     /**
@@ -1052,6 +1126,16 @@ export declare class AssetManager {
      * `ref`. A kind with no install target has no deployed copy.
      */
     private keptCopyDeployed;
+    /** Whether the deployed copy of a library asset is on disk; a kind with no install target has none to check. */
+    private lockedCopyDeployed;
+    /**
+     * The library-origin lock entries `install` keeps when the library holds a newer version:
+     * only `update` moves a locked asset, so `install` restores the locked one (p1095).
+     * Keyed by `<publisher>/<kind>:<name>`. `requires` is what the locked version needs: the
+     * lock's own list, or for a lock that predates the field the deployed copy's requirements,
+     * never the newer library entry's.
+     */
+    private keepLockedLibraryEntries;
     /**
      * How the library `origin` names stands on this machine. THE one lookup of a locked library
      * ("is it registered here?"): `check`, `outdated`, `install` and `install --locked` all ask it.
@@ -1068,6 +1152,8 @@ export declare class AssetManager {
      *   machine-local; the remote is what a clone shares.
      */
     private lockedLibrary;
+    /** The registered library whose files for `asset` hash to `sha256` (the locked bytes), if any. */
+    private libraryHoldingLockedBytes;
     /** On-disk root of the library `origin` names; `null` unless {@link lockedLibrary} says `ok`. */
     private libraryPath;
     /**
@@ -1343,6 +1429,8 @@ export declare class AssetManager {
         onLibraryOrigin?: (deployedRef: string, library: string) => void;
         /** Called per deployed library asset whose body is still the untouched `library create` scaffold. */
         onPlaceholderBody?: (deployedRef: string) => void;
+        /** Called per deployed library asset whose `description:` is still the `library create` placeholder. */
+        onPlaceholderDescription?: (deployedRef: string) => void;
         /** Called per already-locked asset this add moved to another library than its lock entry named. */
         onLibraryMoved?: (move: LibraryMove) => void;
         /** `update <name>`: an equal-version tie between libraries goes to the default library, then the locked one (see {@link install}'s `moveLibraries`). */
@@ -1350,10 +1438,8 @@ export declare class AssetManager {
         onPresets?: (presets: PresetExpansion[]) => void;
         /** Deploy over a folder no lock entry owns (a hand-made skill of the same name) instead of refusing. */
         force?: boolean;
-        /** Called per symlink an asset's copy deploy leaves out (`ref`, path under the asset dir). */
-        onSkippedSymlink?: (ref: string, path: string) => void;
         /** Called per `.env` file in an asset's directory that a copy deploy leaves out. */
-        onEnvFile?: (ref: string, path: string) => void;
+        onSecretFile?: (ref: string, path: string) => void;
     }): Promise<string[]>;
     /**
      * Report the body-link **soft dependencies** of the given assets that are not
@@ -1650,6 +1736,15 @@ export declare class AssetManager {
      * @throws {Error} with a `migrate-skaile-manifest` hint on legacy `repositories:` / `ai_resources:` keys.
      */
     listDeclared(kind?: string): Promise<DeclaredAsset[]>;
+    /**
+     * Notes about the project's `mcp-server`s that are not drift and fail nothing: a declared
+     * server skaile does not write to the coding agent's MCP config (`reason` from the last
+     * render), and a required `MCP.md` field nothing sets. `check` and `doctor` print them as
+     * `!` lines; `list` shows the first kind as `skipped`.
+     *
+     * @returns One {@link McpNotice} per note; empty for a global manager.
+     */
+    mcpNotices(): Promise<McpNotice[]>;
     /**
      * Locked assets whose deployed directory lacks files the deploy writes — a deleted
      * `build.py` / `scripts/` helper next to an intact `SKILL.md`. The expected set is the file
@@ -1963,6 +2058,22 @@ export declare class AssetManager {
      * @param named - `kind:name` identities already reported; they are skipped.
      */
     private libraryOriginGaps;
+    /**
+     * Locked source assets whose source cannot supply them any more: the source is no longer in
+     * `skaile.yaml` `sources:` (`source remove`, a hand edit), or it is there but now publishes
+     * the asset under another publisher (`source add <url> --publisher`). `skaile install` has
+     * nothing to restore them from, so the fix is manual. A source of a store-resolved lock entry
+     * is not told apart from one, so no source is called missing while a `stores:` entry exists.
+     *
+     * @param named - `kind:name` identities already reported; they are skipped.
+     * @param index - What the registered sources publish today.
+     */
+    private sourceOriginGaps;
+    /**
+     * The locked assets that come from the source `url` (a `sources:` entry): canonical refs,
+     * `kind:@publisher/name`. `skaile source remove` refuses while this list is not empty.
+     */
+    lockedFromSource(url: string): string[];
     /**
      * Record, on every agent entry of `lock` that has none, the files the agent's harness
      * rendering occupies and their sha256. Call it after the deploy, so the bytes hashed are the
@@ -2159,6 +2270,12 @@ export declare class AssetManager {
      * @returns `true` when a declaration was removed.
      */
     private removeDependencyFromConfig;
+    /**
+     * The locked agents an agent instance binds (`agents.<id>.ref`, `agent.definition`) that
+     * `declared` does not name, as version-less `agent:@publisher/name`. An agent no lock entry
+     * holds is left out: `install` does not add what the user never added (`skaile add` does).
+     */
+    private lockedAgentBindings;
     /** The refs `skaile.yaml` binds agent instances to: every `agents.<id>.ref` and `agent.definition`. Project mode only. */
     private declaredAgentInstanceRefs;
     /**