@skaile/workspaces 5.18.0 → 5.19.0

package/CHANGELOG.md

@@ -1,5 +1,93 @@
 # Changelog
 
+## 5.19.0
+
+### Minor Changes
+
+- [#1098](https://github.com/skaile-ai/workspaces/pull/1098) [`2477eac`](https://github.com/skaile-ai/workspaces/commit/2477eacb22a659a5e69c301581b4dc0b576e5718) Thanks [@mortegro](https://github.com/mortegro)! - Composed agents run after `add`/`install`, a `../` compose ref works, and `run --instance` only warns about its own instance.
+
+  - `add`, `install`, `install --locked` and `update` compile an agent that declares an `inline-snapshot` item (a persona, or an item with `binding: inline-snapshot`), once per lock revision. A `compile_manifest.json` that `skaile rebuild` wrote is kept while the items still serve the same bytes; the next `install` no longer deletes it, so `run` stops failing with `composition_rebuild_required`. `skaile rebuild` only refreshes the pin (p413, p1310).
+  - `skaile check` and `skaile doctor` report an agent that `run` would refuse with `composition_rebuild_required`, in the words `run` prints, and exit 1 (p1310).
+  - A `composes:` ref that leaves the agent folder (`../shared-rules/extra`) is copied into the agent's cache folder (`.skaile/cache/agents/<name>/composes/<name>`) and the ref points there, so `run` serves it (p1312).
+  - `skaile run --instance <id>` no longer prints the connector-slot and sub-agent warnings of the project's other instances, the primary agent included (p1315).
+  - The omp start sweep also removes a unix socket in `$TMPDIR/skaile-omp-agent` that is older than a day and has no listener (p1316).
+  - The `role requires io` check for an instance that sets `lifecycle: role` on an asset without `io` runs in `skaile validate` (p1313).
+
+- [#1098](https://github.com/skaile-ai/workspaces/pull/1098) [`2477eac`](https://github.com/skaile-ai/workspaces/commit/2477eacb22a659a5e69c301581b4dc0b576e5718) Thanks [@mortegro](https://github.com/mortegro)! - Authoring: `validate`, `library index`, the publish plan and `add` give one verdict per problem.
+
+  - A `metadata.requires` ref that no registered library holds warns in `validate` and `library index`, like a `dependencies:` entry. The publish plan also asks the store: it refuses the plan (exit 1) when the store does not list the ref, warns when the store cannot be asked, and says nothing when the store lists it. The plan now applies the same check to manifest `dependencies:` refs, which it never refused before (p1200).
+  - `files:` entries are honoured in a library: `validate` and the plan no longer call them "on disk but not in the manifest", `library index` adds no `root:`, and `add` and the lock hash use the listed files only (p1201).
+  - `add` and `install` also withhold `.git-credentials`, `kubeconfig`, `.pgpass`, `.dockercfg`, `credentials.json`, `client_secret*.json`, `*.jks`, `*.keystore`, `.my.cnf`, `secret.txt`, `api_key.txt` and similar files, and name them. The scaffolded `.gitignore` covers them (p1202).
+  - A missing `description` says `description is required: say what the <kind> does and when to use it` instead of the zod text (p1203).
+  - `add` of an asset whose directory was deleted names `skaile library index <lib>` (p1204).
+  - A skill, agent, prompt or contract with an empty body is refused like the scaffold placeholder (p1205).
+  - A SKILL.md without front matter gets one message in `validate`, `library index` and the plan (p1206).
+  - `library create` refuses a name that already exists in another directory of the library (p48).
+  - `library create` prints `Indexed - add it` only for an asset that `library index` accepts; a scaffold that index rejects prints `not ready to add yet` (p1314, p1351).
+  - A 0.1 agent whose `requires:` holds objects validates; the deprecated field only warns (p1311).
+  - `reads_from:` / `writes_to:` are an unknown-key warning for agents, prompts, contracts and flows, as for skills (p486).
+
+- [#1098](https://github.com/skaile-ai/workspaces/pull/1098) [`2477eac`](https://github.com/skaile-ai/workspaces/commit/2477eacb22a659a5e69c301581b4dc0b576e5718) Thanks [@mortegro](https://github.com/mortegro)! - Flows belong to the project, and one verdict applies to a flow the engine cannot load.
+
+  - `skaile flow list`, `flow show <id>` and `skaile run <id>` see the flows the project declared and deployed (its `.skaile/flows/`, its `ai-assets/` tree and the built-in flows) only. Registered libraries, source clones and `~/.skaile/` no longer leak in, so a flow that runs for you also runs for a teammate with the same `skaile.yaml` (p1353).
+  - `flow list --all` and `flow show --all` add the flows of your libraries, cached sources and `~/.skaile/` under **Not in this project**, each with its `skaile add flow:@<publisher>/<name>` line. `run <id>` of a library flow the project has not added exits 1 with `Flow not found` and that `skaile add` line.
+  - `install` and `update` refuse a declared flow the flow engine cannot load, like `add`, and write nothing. `check` and `doctor` exit 1 and name a deployed flow the engine rejects (p1192).
+  - A library flow whose `id:` differs from its file name is no flow for `flow list --all`, `flow show --all` and `run`, the same rule `validate`, `library index`, the publish plan and `add` apply (p871).
+  - Sub-flow `run.flow` targets, `skaile resume` and `skaile serve` resolve a flow over the same project roots as `skaile run <id>`. A flow that only a library, a source clone or `~/.skaile/` holds is not found there either, and the error says to `skaile add flow:@<publisher>/<name>` first (p1353).
+
+- [#1098](https://github.com/skaile-ai/workspaces/pull/1098) [`2477eac`](https://github.com/skaile-ai/workspaces/commit/2477eacb22a659a5e69c301581b4dc0b576e5718) Thanks [@mortegro](https://github.com/mortegro)! - Harness drivers and config: one model rule per driver, a full `config unset`, quieter driver failures.
+
+  - The model prefix rule is per driver (p1111). `omp` and `claude-sdk` keep their leniency: while an enabled `llm` registry entry exists, a `<head>/<model>` with an unknown head is a vendor-scoped model id (`meta-llama/Llama-3.3-70B`). `codex` talks to OpenAI only, so it refuses a head that is neither a registered provider nor `openai`, also when other providers are registered: `run --dry-run`, a real run and `repl` exit 1 with `provider '<head>' is not configured: run skaile providers list`.
+  - `config unset` is the full inverse of `config set` (p1270): it also removes `catalog.url`, `catalog.cache_ttl` and `catalog.framing` (the default applies again) and `apiKey.<provider>` (removes the entry from the user registry, like `providers rm`).
+  - `integration uninstall` in a moved project removes the codex trust entry of the old path when that directory is gone, and names the old path in the line it prints. An old path that still exists, or an entry you edited, stays and the line says why (p1271).
+  - A plugin that cannot be installed with npm prints its error code and first detail (`npm E404: 404 Not Found - GET …`), not npm's pointer to its log file (p1272).
+  - A failed `omp` start is printed once, as the `✗` line; its stderr is no longer repeated as `[warn]` lines, and an unusable registry entry is one `! provider … is not used` line, not a raw JSON record (p598). `claude-sdk` warns about a registry entry its SDK cannot speak only when the run selects it, as one plain line (p773).
+  - `config set driver bogus` and `run --driver bogus --dry-run` exit 1 with `Unknown agent driver` (p1022).
+  - A legacy `agent-config.default.provider` key in `skaile.yaml` gives one line in `list` and `run` (no stack), and `validate` reports it and exits 1 (p1352).
+  - The `--full` Claude Code plugin copy of the project's skills is refreshed by `add`, `remove`, `install` and `update`, and `integration status` marks a copy that differs from the project (p1350).
+
+- [#1098](https://github.com/skaile-ai/workspaces/pull/1098) [`2477eac`](https://github.com/skaile-ai/workspaces/commit/2477eacb22a659a5e69c301581b4dc0b576e5718) Thanks [@mortegro](https://github.com/mortegro)! - Sources, libraries and the lock: `install` restores, only `update` moves the lock.
+
+  - A git library deploys, locks and compares what git would publish: tracked files plus untracked files that are not ignored. A file the library `.gitignore` excludes (`example.html`, `.scratch/`) is no longer copied, hashed or locked, so a clone of the library satisfies the lock (p1255).
+  - A locked asset is judged against the library its lock entry names, so `check` and `install --locked` stay green when the default library holds the same ref with other files (p1256).
+  - A library that is older than the lock leaves the lock and the deployed copy alone on `install` and `install --locked`; only `update` moves it (`replaced 0.3.0 -> 0.1.0`). `outdated` and `check` say `library is at 0.1.0, locked 0.3.0` (p1257).
+  - `install`, `install --locked` and `update` fail with the `register it again` sentence of `check` for an asset whose source was removed from `skaile.yaml`, and never clone it again. The cached clone of a removed source is not offered as a `did you mean` publisher (p1062).
+  - `source remove` points to `--purge` or `skaile cache clean --global`; `cache clean` without `--global` does not remove source clones, and the docs explain the project and global cache (p1220).
+  - `library rename` back to a former name renames the lock entries written under the interim name, so the advice names the library the user knows (p893).
+  - A fresh clone of a project with an agent instance: `check`, `doctor`, `outdated` and `diff` advise `skaile install --locked`, which makes them green (p1240).
+  - `migrate assets --write` refuses two bundles that become one preset: exit 1, both files named, nothing written (p1241).
+  - `install` stops before it prunes an undeclared lock entry whose deployed folder holds your edits, names the files and needs `--force` (OQ6).
+
+- [#1098](https://github.com/skaile-ai/workspaces/pull/1098) [`2477eac`](https://github.com/skaile-ai/workspaces/commit/2477eacb22a659a5e69c301581b4dc0b576e5718) Thanks [@mortegro](https://github.com/mortegro)! - Store assets and `mcp-server`: a portable committed `.mcp.json`, a pending render, locked versions.
+
+  - `add` of a store skill reads the `requires` of its own manifest, deploys the assets it names (any kind) and locks them, so `check`, `doctor` and `install --locked` stay green (p1221).
+  - A changed `mcp_servers` entry is a pending render, not drift: `check` and `doctor` print `.mcp.json is out of date for skaile.yaml - run skaile install` and exit 1; `install` writes it. The `add` warning ends with `then run skaile install`. A hand edit of the entry is still drift (p1290).
+  - `info` of a locked asset shows `locked X (latest Y)`; `outdated` lists a ref pinned in `skaile.yaml` below the newest version as `pinned` and does not fail on it (p1291).
+  - `.mcp.json` is portable: `${workspace}` renders as `.` (the project root), never as the absolute path of one checkout; an entry an older release wrote with an absolute path is a pending render. `init` does not ignore `.mcp.json` or `.skaile/assets/` (p1294).
+  - `add` of an `mcp-server` refuses a secret field set to a literal value; only `env:NAME` is accepted. `install` stops rendering such a server and removes its `.mcp.json` entry until the field is `env:KEY`, and prints the skip reason (p1292, p1294).
+  - `diff mcp-server:` exits 1 when a payload file is missing or extra (p1293).
+  - A lock whose `commit` or `sha256` is all digits reads as text; a value that is not hex fails with one line naming the entry (p1295).
+  - The `add` line for an `mcp-server` names the `.mcp.json` entry and the payload folder it wrote, instead of saying it is not deployed (p1296).
+
+- [#1098](https://github.com/skaile-ai/workspaces/pull/1098) [`2477eac`](https://github.com/skaile-ai/workspaces/commit/2477eacb22a659a5e69c301581b4dc0b576e5718) Thanks [@mortegro](https://github.com/mortegro)! - Protocol and serve: busy ports are refused, every turn ends with `finished`.
+
+  - The websocket port and the model endpoint port share one bind helper. Before it listens, it connects to the port on `127.0.0.1`, `::1` and the chosen host; a holder on `::`, `0.0.0.0` or `127.0.0.1` makes `serve` exit 1 with one line (p842, p1006).
+  - Every turn of every driver ends with `finished`, then `status idle`. A failed turn sends one fatal `error`, then `finished`, then `status idle`. omp sends `finished` now, and a failed claude-sdk turn no longer sends a second fatal `error` (p459, p460). `events.md` states the rule.
+  - `runner.set_state` on a store of adapter `xstate` finds `xstate` in the project first, then next to skaile, and a miss names the package and both places (p1171).
+  - `serve --managed-codex-config <bad path>` exits 1 with one line (p1330).
+  - `serve --model <bad>` is checked against the driver (omp registry entries) before the ready line (p1334). Only a `--model` given on the command line is checked, against the local `providers.yml` narrowed by `--providers`; a model from `skaile.yaml` or the settings, and a project with `secrets.provider: provisioned`, are not (the platform supplies its registry at `session_init`).
+  - `validate` of a project does not refuse a directory symlink outside an asset folder; only libraries and asset folders are refused, and the connector real-path check judges the rest (p1332).
+
+### Patch Changes
+
+- [#1098](https://github.com/skaile-ai/workspaces/pull/1098) [`2477eac`](https://github.com/skaile-ai/workspaces/commit/2477eacb22a659a5e69c301581b4dc0b576e5718) Thanks [@mortegro](https://github.com/mortegro)! - Docs: fix the defects of the v10 critique. The protocol sample prints 4.19.0, the `sources[]` shape reads `{url, pin?, publisher?}` (also in the legacy-key text), the version waterfall starts with the version of the asset file, the factory skill `skaile-manage-workspace` no longer lists `provider` as a personal setting, tutorial 01 describes the one-line "referenced files outside the asset filter" note, and the pages for `cache`, `config unset`, `source remove --force`, `integration uninstall --driver codex`, `repl`, `run`, `serve`, `diff`, the `mcp-server` deploy, the `--full` plugin copy, composed agents and the older-library lock case match the behaviour.
+
+## 5.18.1
+
+### Patch Changes
+
+- [#1095](https://github.com/skaile-ai/workspaces/pull/1095) [`f73d02a`](https://github.com/skaile-ai/workspaces/commit/f73d02af44d2e2e9fbbbf8605b1dca8a87b7fbfc) Thanks [@Frozen666](https://github.com/Frozen666)! - The echo driver's `test question` keyword now asks a real question. It emits an `AskUserQuestion` tool call, which the normalizer turns into a `question` event with the options PostgreSQL, MySQL and SQLite, instead of a plain text reply. Hosts that open a "waiting on you" state only on a `question` event (the Skaile platform's needs-you marker) can now test that path on the echo driver. No text or turn summary follows the question, so it stays open; the turn still ends, and the answer arrives as a fresh prompt.
+
 ## 5.18.0
 
 ### Minor Changes

package/dist/{asset-feeds-WAKBHGEV.js → asset-feeds-QGLI3AXI.js}

@@ -1,25 +1,25 @@
 import { storeNotInstallableReason } from './chunk-PUK7TQT4.js';
-import { getKnownKinds } from './chunk-WJLYL6RY.js';
-import './chunk-D6UBEYQH.js';
+import { getKnownKinds } from './chunk-F6AA42GW.js';
+import './chunk-IF6IA3PZ.js';
 import './chunk-7RGTAEG6.js';
-import './chunk-VKPBUPH7.js';
-import './chunk-HPVMTX6M.js';
-import './chunk-U2FI547Z.js';
+import './chunk-XM6T2AZ2.js';
+import './chunk-I37INEWE.js';
+import './chunk-7XSAW5OC.js';
 import './chunk-BFMYYNDT.js';
 import './chunk-3TXEJN4W.js';
 import './chunk-X3RMRJNR.js';
 import './chunk-NUELZWCF.js';
-import './chunk-CKNIYIV2.js';
-import './chunk-T2TQAH2X.js';
+import './chunk-335ENCCS.js';
+import './chunk-N46LQR46.js';
 import './chunk-4GY63JU6.js';
-import { factoryAssetRoots } from './chunk-KC6HGWXN.js';
+import { factoryAssetRoots } from './chunk-TIIXG3PN.js';
 import './chunk-5TBFN46Z.js';
 import './chunk-5BEFNLOR.js';
-import './chunk-A2ULN3KX.js';
-import { scanRepo } from './chunk-2NOLF7B2.js';
+import './chunk-MWXYN6NY.js';
+import { scanRepo } from './chunk-V257LUBM.js';
 import './chunk-L5VSIPQD.js';
 import './chunk-IG5LZ3WU.js';
-import './chunk-CKICWXMU.js';
+import './chunk-UQ33Y4DM.js';
 import './chunk-RVRB27AN.js';
 import { parseRequires } from './chunk-GOCWM7FN.js';
 import './chunk-WDXZA7QW.js';
@@ -52,8 +52,8 @@ function libraryEntryOf(asset) {
 async function libraryAssets() {
   const notes = [];
   try {
-    const { openLibraryManager } = await import('./open-library-JP5TC5UX.js');
-    const { getKindRegistry } = await import('./open-registry-RBELV5YH.js');
+    const { openLibraryManager } = await import('./open-library-PVTIUQUF.js');
+    const { getKindRegistry } = await import('./open-registry-SOIS3TA2.js');
     const { scanAuthoringLibraries } = await import('./library/index.js');
     const { library: index, close } = await openLibraryManager();
     try {
@@ -86,7 +86,7 @@ async function libraryAssets() {
 async function storeAssets(projectDir) {
   const notes = [];
   try {
-    const { resolveCatalogSource } = await import('./open-library-JP5TC5UX.js');
+    const { resolveCatalogSource } = await import('./open-library-PVTIUQUF.js');
     const { source, close } = await resolveCatalogSource({ projectDir });
     try {
       const assets = (await source.listAssets()).filter(
@@ -167,5 +167,5 @@ async function gatherAssetFeeds(am, projectDir) {
 }
 
 export { gatherAssetFeeds };
-//# sourceMappingURL=asset-feeds-WAKBHGEV.js.map
-//# sourceMappingURL=asset-feeds-WAKBHGEV.js.map
+//# sourceMappingURL=asset-feeds-QGLI3AXI.js.map
+//# sourceMappingURL=asset-feeds-QGLI3AXI.js.map

package/dist/{asset-feeds-WAKBHGEV.js.map → asset-feeds-QGLI3AXI.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../cli/src/asset-feeds.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwEA,SAAS,eAAe,KAAA,EAAsC;AAC5D,EAAA,MAAM,EAAE,UAAS,GAAI,KAAA;AACrB,EAAA,MAAM,MAAA,GAAU,SAAS,QAAA,EAAkD,QAAA;AAC3E,EAAA,MAAM,WAAA,GAAc,SAAS,QAAA,IAAY,MAAA;AACzC,EAAA,MAAM,cACJ,OAAO,WAAA,KAAgB,QAAA,GACnB,WAAA,GACA,MAAM,OAAA,CAAQ,WAAW,CAAA,GACvB,WAAA,CAAY,OAAO,CAAC,CAAA,KAAmB,OAAO,CAAA,KAAM,QAAQ,CAAA,GAC5D,MAAA;AACR,EAAA,MAAM,OAAO,QAAA,CAAS,YAAA;AACtB,EAAA,OAAO;AAAA,IACL,MAAM,KAAA,CAAM,IAAA;AAAA,IACZ,MAAM,KAAA,CAAM,IAAA;AAAA,IACZ,aAAa,OAAO,QAAA,CAAS,WAAA,KAAgB,QAAA,GAAW,SAAS,WAAA,GAAc,EAAA;AAAA,IAC/E,QAAQ,KAAA,CAAM,YAAA;AAAA,IACd,WAAW,KAAA,CAAM,SAAA;AAAA,IACjB,GAAI,MAAM,MAAA,GAAS,EAAE,QAAQ,KAAA,CAAM,MAAA,KAAW,EAAC;AAAA,IAC/C,SAAS,KAAA,CAAM,OAAA;AAAA,IACf,QAAA,EAAU,gBAAgB,MAAA,GAAY,KAAK,aAAA,CAAc,EAAE,QAAA,EAAU,WAAA,EAAa,CAAA;AAAA,IAClF,cACE,KAAA,CAAM,IAAA,KAAS,YAAY,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,GACzC,IAAA,CAAK,OAAO,CAAC,CAAA,KAAmB,OAAO,CAAA,KAAM,QAAA,IAAY,EAAE,MAAA,GAAS,CAAC,IACrE;AAAC,GACT;AACF;AAWA,eAAe,aAAA,GAGZ;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AAEF,IAAA,MAAM,EAAE,kBAAA,EAAmB,GAAI,MAAM,OAAO,4BAAmB,CAAA;AAC/D,IAAA,MAAM,EAAE,eAAA,EAAgB,GAAI,MAAM,OAAO,6BAAoB,CAAA;AAC7D,IAAA,MAAM,EAAE,sBAAA,EAAuB,GAAI,MAAM,OAAO,oBAA4B,CAAA;AAC5E,IAAA,MAAM,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAM,GAAI,MAAM,kBAAA,EAAmB;AAC3D,IAAA,IAAI;AACF,MAAA,MAAM,UAAyB,EAAC;AAChC,MAAA,KAAA,MAAW,QAAQ,MAAM,sBAAA,CAAuB,KAAA,EAAO,eAAA,EAAiB,CAAA,EAAG;AACzE,QAAA,IAAI,IAAA,CAAK,UAAU,KAAA,CAAA,EAAW;AAC5B,UAAA,KAAA,CAAM,IAAA,CAAK,EAAE,IAAA,EAAM,WAAA,EAAa,OAAA,EAAS,CAAA,EAAG,IAAA,CAAK,OAAA,CAAQ,IAAI,CAAA,EAAA,EAAK,IAAA,CAAK,KAAK,IAAI,CAAA;AAChF,UAAA;AAAA,QACF;AACA,QAAA,KAAA,MAAW,KAAA,IAAS,KAAK,MAAA,EAAQ;AAC/B,UAAA,OAAA,CAAQ,IAAA,CAAK;AAAA,YACX,MAAA,EAAQ,SAAA;AAAA,YACR,KAAA,EAAO,eAAe,KAAK,CAAA;AAAA,YAC3B,KAAA,EAAO,KAAK,OAAA,CAAQ;AAAA,WACrB,CAAA;AAAA,QACH;AAAA,MACF;AACA,MAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,IAC1B,CAAA,SAAE;AACA,MAAA,KAAA,EAAM;AAAA,IACR;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,IAAA,EAAM,WAAA;AAAA,MACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACzD,CAAA;AACD,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAYA,eAAe,YAAY,UAAA,EAGxB;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AACF,IAAA,MAAM,EAAE,oBAAA,EAAqB,GAAI,MAAM,OAAO,4BAAmB,CAAA;AACjE,IAAA,MAAM,EAAE,QAAQ,KAAA,EAAM,GAAI,MAAM,oBAAA,CAAqB,EAAE,YAAY,CAAA;AACnE,IAAA,IAAI;AAEF,MAAA,MAAM,MAAA,GAAA,CAAU,MAAM,MAAA,CAAO,UAAA,EAAW,EAAG,MAAA;AAAA,QACzC,CAAC,CAAA,KAAM,yBAAA,CAA0B,CAAC,CAAA,KAAM,KAAA;AAAA,OAC1C;AACA,MAAA,MAAM,OAAA,GAA0B,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,QACjD,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,IAAA,EAAO,EAAE,IAAA,IAAsB,OAAA;AAAA,QAC/B,WAAA,EAAa,EAAE,WAAA,IAAe,EAAA;AAAA,QAC9B,MAAA,EAAQ,CAAA,QAAA,EAAW,CAAA,CAAE,EAAE,CAAA,CAAA;AAAA,QACvB,WAAW,CAAA,CAAE,SAAA;AAAA,QACb,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,QAAQ,CAAA,CAAE,MAAA;AAAA,QACV,UAAU,CAAA,CAAE,QAAA;AAAA,QACZ,SAAS,CAAA,CAAE,OAAA;AAAA,QACX,UAAU,EAAC;AAAA,QACX,cAAc;AAAC,OACjB,CAAE,CAAA;AACF,MAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,IAC1B,CAAA,SAAE;AACA,MAAA,KAAA,EAAM;AAAA,IACR;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,MAAM,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAG3D,IAAA,IAAI,CAAC,QAAA,CAAS,IAAA,CAAK,GAAG,CAAA,EAAG;AACvB,MAAA,KAAA,CAAM,KAAK,EAAE,IAAA,EAAM,OAAA,EAAS,OAAA,EAAS,KAAK,CAAA;AAAA,IAC5C;AACA,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAaA,eAAe,aAAa,EAAA,EAA8C;AAIxE,EAAA,MAAM,eAAA,GAAkB,iBAAA,EAAkB,CAAE,GAAA,CAAI,CAAC,CAAA,KAAO,CAAA,CAAE,QAAA,CAAc,IAAA,CAAA,GAAG,CAAA,GAAI,CAAA,GAAI,CAAA,GAAS,IAAA,CAAA,GAAI,CAAA;AAChG,EAAA,MAAM,gBAAgB,CAAC,CAAA,KACrB,eAAA,CAAgB,IAAA,CAAK,CAAC,EAAA,KAAO,CAAA,KAAM,EAAA,CAAG,KAAA,CAAM,GAAG,EAAE,CAAA,IAAK,CAAA,CAAE,UAAA,CAAW,EAAE,CAAC,CAAA;AAExE,EAAA,MAAM,GAAA,GAAA,CAAO,MAAM,EAAA,CAAG,MAAA,EAAO,EAAG,MAAA,CAAO,CAAC,CAAA,KAAM,CAAC,aAAA,CAAc,CAAA,CAAE,MAAM,CAAC,CAAA;AACtE,EAAA,MAAM,UAAyB,EAAC;AAMhC,EAAA,KAAA,MAAW,EAAE,QAAA,EAAU,IAAA,EAAK,IAAK,EAAA,CAAG,iBAAgB,EAAG;AACrD,IAAA,IAAI,aAAA,CAAc,IAAI,CAAA,EAAG;AACzB,IAAA,MAAM,SAAS,IAAA,CAAK,QAAA,CAAc,IAAA,CAAA,GAAG,CAAA,GAAI,OAAO,IAAA,GAAY,IAAA,CAAA,GAAA;AAC5D,IAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,MAAA,KAAW,IAAA,IAAQ,CAAA,CAAE,MAAA,CAAO,UAAA,CAAW,MAAM,CAAC,CAAA;AAChF,IAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG;AACxB,IAAA,MAAM,aAAa,QAAA,CAAS,KAAA,CAAM,GAAG,CAAA,CAAE,KAAI,IAAK,QAAA;AAChD,IAAA,KAAA,MAAW,KAAA,IAAS,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,EAAE,QAAQ,QAAA,EAAU,KAAA,EAAO,KAAA,EAAO,UAAA,EAAY,CAAA;AAAA,EACxF;AACA,EAAA,OAAO,OAAA;AACT;AAUA,eAAe,aAAA,GAGZ;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AACF,IAAA,MAAM,UAA0B,EAAC;AACjC,IAAA,KAAA,MAAW,IAAA,IAAQ,mBAAkB,EAAG;AACtC,MAAA,OAAA,CAAQ,IAAA,CAAK,GAAI,MAAM,QAAA,CAAS,IAAA,EAAM,gBAAA,EAAkB,EAAE,UAAA,EAAY,aAAA,EAAc,EAAG,CAAE,CAAA;AAAA,IAC3F;AACA,IAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,EAC1B,SAAS,GAAA,EAAK;AACZ,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,IAAA,EAAM,SAAA;AAAA,MACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACzD,CAAA;AACD,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAGA,SAAS,GAAA,CAAI,QAAqB,OAAA,EAAwC;AACxE,EAAA,OAAO,QAAQ,GAAA,CAAI,CAAC,WAAW,EAAE,MAAA,EAAQ,OAAM,CAAE,CAAA;AACnD;AASA,eAAsB,gBAAA,CACpB,IACA,UAAA,EAC0B;AAC1B,EAAA,MAAM,CAAC,IAAA,EAAM,KAAK,CAAA,GAAI,MAAM,OAAA,CAAQ,GAAA,CAAI,CAAC,aAAA,EAAc,EAAG,WAAA,CAAY,UAAU,CAAC,CAAC,CAAA;AAClF,EAAA,MAAM,OAAA,GAAU,MAAM,aAAA,EAAc;AACpC,EAAA,MAAM,GAAA,GAAM,MAAM,YAAA,CAAa,EAAE,CAAA;AACjC,EAAA,OAAO;AAAA,IACL,OAAA,EAAS;AAAA,MACP,GAAG,GAAA;AAAA,MACH,GAAG,IAAA,CAAK,OAAA;AAAA,MACR,GAAG,GAAA,CAAI,SAAA,EAAW,OAAA,CAAQ,OAAO,CAAA;AAAA,MACjC,GAAG,GAAA,CAAI,OAAA,EAAS,KAAA,CAAM,OAAO;AAAA,KAC/B;AAAA,IACA,KAAA,EAAO,CAAC,GAAG,IAAA,CAAK,KAAA,EAAO,GAAG,KAAA,CAAM,KAAA,EAAO,GAAG,OAAA,CAAQ,KAAK;AAAA,GACzD;AACF","file":"asset-feeds-WAKBHGEV.js","sourcesContent":["/**\n * asset-feeds.ts — gather installable assets from every feed the manage TUI\n * surfaces.\n *\n * Four feeds, normalized into `CatalogEntry`:\n * - **Project sources** — `skaile.yaml` `sources:` entries (scanned via\n *   `AssetManager.search()`; the new `sources:` field is merged into the\n *   legacy repositories map in `AssetManager.loadConfig`).\n * - **Local libraries** — user authoring places from `LocalIndex`, read through\n *   `scanAuthoringLibraries` (`@skaile/workspaces/library`): the same scan\n *   `library index` / `search --local` use, so publishers and refs match them\n *   (per-asset `publisher_overrides` honoured), `dev_paths` assets are left out,\n *   and a library that fails to scan becomes one note while the rest stay listed.\n * - **Factory assets** — the bundled first-party `factory-assets` tree\n *   (`factoryAssetRoots()`), scanned from disk. Always present; no network.\n * - **Remote store** — the configured catalog source when `catalog.url` is\n *   not `local`. Failures are non-fatal — they surface as notes.\n */\n\nimport * as path from \"node:path\";\nimport {\n  type AssetKind,\n  type CatalogEntry,\n  factoryAssetRoots,\n  parseRequires,\n  scanRepo,\n} from \"@skaile/workspaces/core\";\nimport { getKnownKinds } from \"./open-registry.ts\";\nimport { storeNotInstallableReason } from \"./store-addable.ts\";\nimport type { DiscoveredAsset } from \"@skaile/workspaces/discovery\";\n\n/** One non-fatal note returned to the caller for surfacing in the UI. */\nexport interface FeedNote {\n  feed: \"sources\" | \"libraries\" | \"store\" | \"factory\";\n  message: string;\n}\n\n/**\n * Which feed an asset came from. This is the top-level grouping axis in the\n * manage TUI (\"where is this skill coming from?\") and is intentionally distinct\n * from `publisher` (asset-intrinsic identity): the same publisher can legitimately\n * appear under more than one origin (e.g. a github repo you added as a `source`\n * that is also listed in the remote `store`).\n */\nexport type AssetOrigin = \"source\" | \"library\" | \"factory\" | \"store\";\n\n/** A catalog entry tagged with the feed it was gathered from. */\nexport interface OriginEntry {\n  origin: AssetOrigin;\n  entry: CatalogEntry;\n  /**\n   * Second-level grouping label for the manage tree. Defaults (when unset) to the\n   * entry's `publisher`; the source feed sets it to the source's short repo name\n   * so the Sources band groups by source — \"which repo did this come from\" — not\n   * by the asset-intrinsic publisher.\n   */\n  group?: string;\n}\n\nexport interface AssetFeedResult {\n  entries: OriginEntry[];\n  notes: FeedNote[];\n}\n\n/**\n * Map one discovered library asset to the `CatalogEntry` the manage rows read.\n * `publisher` is the bare per-asset publisher (what `search --local` prints),\n * `source` the manifest path. `repo` is left unset: it only feeds the Sources-tree\n * org grouping. `requires` / `dependencies` come from the manifest the way the\n * scanner fills them — string `requires:` refs parsed to `{kind, name}`, a bundle's\n * string `dependencies:` list verbatim.\n */\nfunction libraryEntryOf(asset: DiscoveredAsset): CatalogEntry {\n  const { manifest } = asset;\n  const nested = (manifest.metadata as Record<string, unknown> | undefined)?.requires;\n  const rawRequires = manifest.requires ?? nested;\n  const requireRefs =\n    typeof rawRequires === \"string\"\n      ? rawRequires\n      : Array.isArray(rawRequires)\n        ? rawRequires.filter((r): r is string => typeof r === \"string\")\n        : undefined;\n  const deps = manifest.dependencies;\n  return {\n    name: asset.name,\n    kind: asset.kind as AssetKind,\n    description: typeof manifest.description === \"string\" ? manifest.description : \"\",\n    source: asset.manifestPath,\n    publisher: asset.publisher,\n    ...(asset.plugin ? { plugin: asset.plugin } : {}),\n    version: asset.version,\n    requires: requireRefs === undefined ? [] : parseRequires({ requires: requireRefs }),\n    dependencies:\n      asset.kind === \"bundle\" && Array.isArray(deps)\n        ? deps.filter((d): d is string => typeof d === \"string\" && d.length > 0)\n        : [],\n  };\n}\n\n/**\n * Pull assets from local libraries (the authoring places under\n * `~/.skaile/libraries/<name>/`, not the `~/.skaile/cache/sources/` cache) through\n * `scanAuthoringLibraries`, grouped under the bare library name\n * (`group: <name>`) so the manage TUI shows a clean `<name>` band — no\n * `library:` prefix (mirrors the source feed). Plugin grouping (`entry.plugin`)\n * comes from `DiscoveredAsset.plugin`. A library whose scan fails becomes one\n * `FeedNote`; the outer `catch` covers only opening the index.\n */\nasync function libraryAssets(): Promise<{\n  entries: OriginEntry[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    // Lazy: the library subpath pulls in SQLite, which the other feeds never need.\n    const { openLibraryManager } = await import(\"./open-library.ts\");\n    const { getKindRegistry } = await import(\"./open-registry.ts\");\n    const { scanAuthoringLibraries } = await import(\"@skaile/workspaces/library\");\n    const { library: index, close } = await openLibraryManager();\n    try {\n      const entries: OriginEntry[] = [];\n      for (const scan of await scanAuthoringLibraries(index, getKindRegistry())) {\n        if (scan.error !== undefined) {\n          notes.push({ feed: \"libraries\", message: `${scan.library.name}: ${scan.error}` });\n          continue;\n        }\n        for (const asset of scan.assets) {\n          entries.push({\n            origin: \"library\",\n            entry: libraryEntryOf(asset),\n            group: scan.library.name,\n          });\n        }\n      }\n      return { entries, notes };\n    } finally {\n      close();\n    }\n  } catch (err) {\n    notes.push({\n      feed: \"libraries\",\n      message: err instanceof Error ? err.message : String(err),\n    });\n    return { entries: [], notes };\n  }\n}\n\n/**\n * Pull a (best-effort) snapshot of the connected remote store catalog.\n *\n * - Returns no entries when the resolved catalog is local-only or the host\n *   is unreachable (the failure becomes a note, not an exception).\n * - Maps `CatalogAsset` → `CatalogEntry`, carrying `publisher`, `repo`, and\n *   `category` straight through and using `source = \"store://<id>\"`; per-file\n *   `source` paths are not available for remote assets so the canonical ref is\n *   a stable placeholder.\n */\nasync function storeAssets(projectDir: string): Promise<{\n  entries: CatalogEntry[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    const { resolveCatalogSource } = await import(\"./open-library.ts\");\n    const { source, close } = await resolveCatalogSource({ projectDir });\n    try {\n      // The store lists only what `skaile add` can install (see store-addable.ts).\n      const assets = (await source.listAssets()).filter(\n        (a) => storeNotInstallableReason(a) === undefined,\n      );\n      const entries: CatalogEntry[] = assets.map((a) => ({\n        name: a.name,\n        kind: (a.kind as AssetKind) ?? \"skill\",\n        description: a.description ?? \"\",\n        source: `store://${a.id}`,\n        publisher: a.publisher,\n        repo: a.repo,\n        plugin: a.plugin,\n        category: a.category,\n        version: a.version,\n        requires: [],\n        dependencies: [],\n      }));\n      return { entries, notes };\n    } finally {\n      close();\n    }\n  } catch (err) {\n    const msg = err instanceof Error ? err.message : String(err);\n    // Local-only catalog throws a recognizable message — silence it; absence\n    // is the user's choice, not an error.\n    if (!/local/i.test(msg)) {\n      notes.push({ feed: \"store\", message: msg });\n    }\n    return { entries: [], notes };\n  }\n}\n\n/** The slice of `AssetManager` the source feed needs (kept narrow for tests). */\ninterface AssetManagerLike {\n  search: () => Promise<CatalogEntry[]>;\n  searchRepoRoots: () => { repoName: string; root: string }[];\n}\n\n/**\n * Project-source feed: leans on `AssetManager.search()`, which merges\n * `skaile.yaml`'s `sources:` field into the repositories map. Plugin grouping\n * (`entry.plugin`) is stamped by the scanner, so entries pass through as-is.\n */\nasync function sourceAssets(am: AssetManagerLike): Promise<OriginEntry[]> {\n  // The bundled factory tree is injected into the repositories map as an implicit\n  // source, so `am.search()` returns it too. It has its own `factory` origin band,\n  // so drop it here — otherwise the same first-party skills list twice under Sources.\n  const factoryPrefixes = factoryAssetRoots().map((r) => (r.endsWith(path.sep) ? r : r + path.sep));\n  const isFactoryPath = (p: string) =>\n    factoryPrefixes.some((fp) => p === fp.slice(0, -1) || p.startsWith(fp));\n\n  const all = (await am.search()).filter((e) => !isFactoryPath(e.source));\n  const entries: OriginEntry[] = [];\n  // Group each source's entries under the source node (its short repo name), not\n  // the publisher: under Sources the navigational question is \"which repo did\n  // this come from\". Each entry's `source` (absolute manifest path) lives under\n  // exactly one declared root, so group by prefix. The cache slug is\n  // URL-keyed `github.com/<org>/<repo>` — take the trailing segment.\n  for (const { repoName, root } of am.searchRepoRoots()) {\n    if (isFactoryPath(root)) continue;\n    const prefix = root.endsWith(path.sep) ? root : root + path.sep;\n    const owned = all.filter((e) => e.source === root || e.source.startsWith(prefix));\n    if (owned.length === 0) continue;\n    const sourceName = repoName.split(\"/\").pop() || repoName;\n    for (const entry of owned) entries.push({ origin: \"source\", entry, group: sourceName });\n  }\n  return entries;\n}\n\n/**\n * Factory-asset feed: scan the bundled first-party `factory-assets` tree(s)\n * resolved by `factoryAssetRoots()` (the `SKAILE_FACTORY_ASSETS_DIR` override\n * layer ahead of the bundled tree). Local disk only, no network — the entries are\n * the built-in skills / connectors / bundles that ship with `@skaile/workspaces`.\n * `factoryAssetRoots()` already dedupes, so the env override pointing at the\n * bundled dir collapses to one root.\n */\nasync function factoryAssets(): Promise<{\n  entries: CatalogEntry[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    const entries: CatalogEntry[] = [];\n    for (const root of factoryAssetRoots()) {\n      entries.push(...(await scanRepo(root, \"skaile-factory\", { knownKinds: getKnownKinds() })));\n    }\n    return { entries, notes };\n  } catch (err) {\n    notes.push({\n      feed: \"factory\",\n      message: err instanceof Error ? err.message : String(err),\n    });\n    return { entries: [], notes };\n  }\n}\n\n/** Tag a flat entry list with a single origin. */\nfunction tag(origin: AssetOrigin, entries: CatalogEntry[]): OriginEntry[] {\n  return entries.map((entry) => ({ origin, entry }));\n}\n\n/**\n * Run all feeds and return a single normalized result.\n *\n * Feeds run in parallel where possible — the store fetch is the slow one\n * (one HTTP call) and is fired alongside the local library walk. The factory\n * scan is local disk only, so it runs inline.\n */\nexport async function gatherAssetFeeds(\n  am: AssetManagerLike,\n  projectDir: string,\n): Promise<AssetFeedResult> {\n  const [libs, store] = await Promise.all([libraryAssets(), storeAssets(projectDir)]);\n  const factory = await factoryAssets();\n  const src = await sourceAssets(am);\n  return {\n    entries: [\n      ...src,\n      ...libs.entries,\n      ...tag(\"factory\", factory.entries),\n      ...tag(\"store\", store.entries),\n    ],\n    notes: [...libs.notes, ...store.notes, ...factory.notes],\n  };\n}\n"]}
+{"version":3,"sources":["../cli/src/asset-feeds.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwEA,SAAS,eAAe,KAAA,EAAsC;AAC5D,EAAA,MAAM,EAAE,UAAS,GAAI,KAAA;AACrB,EAAA,MAAM,MAAA,GAAU,SAAS,QAAA,EAAkD,QAAA;AAC3E,EAAA,MAAM,WAAA,GAAc,SAAS,QAAA,IAAY,MAAA;AACzC,EAAA,MAAM,cACJ,OAAO,WAAA,KAAgB,QAAA,GACnB,WAAA,GACA,MAAM,OAAA,CAAQ,WAAW,CAAA,GACvB,WAAA,CAAY,OAAO,CAAC,CAAA,KAAmB,OAAO,CAAA,KAAM,QAAQ,CAAA,GAC5D,MAAA;AACR,EAAA,MAAM,OAAO,QAAA,CAAS,YAAA;AACtB,EAAA,OAAO;AAAA,IACL,MAAM,KAAA,CAAM,IAAA;AAAA,IACZ,MAAM,KAAA,CAAM,IAAA;AAAA,IACZ,aAAa,OAAO,QAAA,CAAS,WAAA,KAAgB,QAAA,GAAW,SAAS,WAAA,GAAc,EAAA;AAAA,IAC/E,QAAQ,KAAA,CAAM,YAAA;AAAA,IACd,WAAW,KAAA,CAAM,SAAA;AAAA,IACjB,GAAI,MAAM,MAAA,GAAS,EAAE,QAAQ,KAAA,CAAM,MAAA,KAAW,EAAC;AAAA,IAC/C,SAAS,KAAA,CAAM,OAAA;AAAA,IACf,QAAA,EAAU,gBAAgB,MAAA,GAAY,KAAK,aAAA,CAAc,EAAE,QAAA,EAAU,WAAA,EAAa,CAAA;AAAA,IAClF,cACE,KAAA,CAAM,IAAA,KAAS,YAAY,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,GACzC,IAAA,CAAK,OAAO,CAAC,CAAA,KAAmB,OAAO,CAAA,KAAM,QAAA,IAAY,EAAE,MAAA,GAAS,CAAC,IACrE;AAAC,GACT;AACF;AAWA,eAAe,aAAA,GAGZ;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AAEF,IAAA,MAAM,EAAE,kBAAA,EAAmB,GAAI,MAAM,OAAO,4BAAmB,CAAA;AAC/D,IAAA,MAAM,EAAE,eAAA,EAAgB,GAAI,MAAM,OAAO,6BAAoB,CAAA;AAC7D,IAAA,MAAM,EAAE,sBAAA,EAAuB,GAAI,MAAM,OAAO,oBAA4B,CAAA;AAC5E,IAAA,MAAM,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAM,GAAI,MAAM,kBAAA,EAAmB;AAC3D,IAAA,IAAI;AACF,MAAA,MAAM,UAAyB,EAAC;AAChC,MAAA,KAAA,MAAW,QAAQ,MAAM,sBAAA,CAAuB,KAAA,EAAO,eAAA,EAAiB,CAAA,EAAG;AACzE,QAAA,IAAI,IAAA,CAAK,UAAU,KAAA,CAAA,EAAW;AAC5B,UAAA,KAAA,CAAM,IAAA,CAAK,EAAE,IAAA,EAAM,WAAA,EAAa,OAAA,EAAS,CAAA,EAAG,IAAA,CAAK,OAAA,CAAQ,IAAI,CAAA,EAAA,EAAK,IAAA,CAAK,KAAK,IAAI,CAAA;AAChF,UAAA;AAAA,QACF;AACA,QAAA,KAAA,MAAW,KAAA,IAAS,KAAK,MAAA,EAAQ;AAC/B,UAAA,OAAA,CAAQ,IAAA,CAAK;AAAA,YACX,MAAA,EAAQ,SAAA;AAAA,YACR,KAAA,EAAO,eAAe,KAAK,CAAA;AAAA,YAC3B,KAAA,EAAO,KAAK,OAAA,CAAQ;AAAA,WACrB,CAAA;AAAA,QACH;AAAA,MACF;AACA,MAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,IAC1B,CAAA,SAAE;AACA,MAAA,KAAA,EAAM;AAAA,IACR;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,IAAA,EAAM,WAAA;AAAA,MACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACzD,CAAA;AACD,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAYA,eAAe,YAAY,UAAA,EAGxB;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AACF,IAAA,MAAM,EAAE,oBAAA,EAAqB,GAAI,MAAM,OAAO,4BAAmB,CAAA;AACjE,IAAA,MAAM,EAAE,QAAQ,KAAA,EAAM,GAAI,MAAM,oBAAA,CAAqB,EAAE,YAAY,CAAA;AACnE,IAAA,IAAI;AAEF,MAAA,MAAM,MAAA,GAAA,CAAU,MAAM,MAAA,CAAO,UAAA,EAAW,EAAG,MAAA;AAAA,QACzC,CAAC,CAAA,KAAM,yBAAA,CAA0B,CAAC,CAAA,KAAM,KAAA;AAAA,OAC1C;AACA,MAAA,MAAM,OAAA,GAA0B,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,QACjD,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,IAAA,EAAO,EAAE,IAAA,IAAsB,OAAA;AAAA,QAC/B,WAAA,EAAa,EAAE,WAAA,IAAe,EAAA;AAAA,QAC9B,MAAA,EAAQ,CAAA,QAAA,EAAW,CAAA,CAAE,EAAE,CAAA,CAAA;AAAA,QACvB,WAAW,CAAA,CAAE,SAAA;AAAA,QACb,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,QAAQ,CAAA,CAAE,MAAA;AAAA,QACV,UAAU,CAAA,CAAE,QAAA;AAAA,QACZ,SAAS,CAAA,CAAE,OAAA;AAAA,QACX,UAAU,EAAC;AAAA,QACX,cAAc;AAAC,OACjB,CAAE,CAAA;AACF,MAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,IAC1B,CAAA,SAAE;AACA,MAAA,KAAA,EAAM;AAAA,IACR;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,MAAM,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAG3D,IAAA,IAAI,CAAC,QAAA,CAAS,IAAA,CAAK,GAAG,CAAA,EAAG;AACvB,MAAA,KAAA,CAAM,KAAK,EAAE,IAAA,EAAM,OAAA,EAAS,OAAA,EAAS,KAAK,CAAA;AAAA,IAC5C;AACA,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAaA,eAAe,aAAa,EAAA,EAA8C;AAIxE,EAAA,MAAM,eAAA,GAAkB,iBAAA,EAAkB,CAAE,GAAA,CAAI,CAAC,CAAA,KAAO,CAAA,CAAE,QAAA,CAAc,IAAA,CAAA,GAAG,CAAA,GAAI,CAAA,GAAI,CAAA,GAAS,IAAA,CAAA,GAAI,CAAA;AAChG,EAAA,MAAM,gBAAgB,CAAC,CAAA,KACrB,eAAA,CAAgB,IAAA,CAAK,CAAC,EAAA,KAAO,CAAA,KAAM,EAAA,CAAG,KAAA,CAAM,GAAG,EAAE,CAAA,IAAK,CAAA,CAAE,UAAA,CAAW,EAAE,CAAC,CAAA;AAExE,EAAA,MAAM,GAAA,GAAA,CAAO,MAAM,EAAA,CAAG,MAAA,EAAO,EAAG,MAAA,CAAO,CAAC,CAAA,KAAM,CAAC,aAAA,CAAc,CAAA,CAAE,MAAM,CAAC,CAAA;AACtE,EAAA,MAAM,UAAyB,EAAC;AAMhC,EAAA,KAAA,MAAW,EAAE,QAAA,EAAU,IAAA,EAAK,IAAK,EAAA,CAAG,iBAAgB,EAAG;AACrD,IAAA,IAAI,aAAA,CAAc,IAAI,CAAA,EAAG;AACzB,IAAA,MAAM,SAAS,IAAA,CAAK,QAAA,CAAc,IAAA,CAAA,GAAG,CAAA,GAAI,OAAO,IAAA,GAAY,IAAA,CAAA,GAAA;AAC5D,IAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,MAAA,KAAW,IAAA,IAAQ,CAAA,CAAE,MAAA,CAAO,UAAA,CAAW,MAAM,CAAC,CAAA;AAChF,IAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG;AACxB,IAAA,MAAM,aAAa,QAAA,CAAS,KAAA,CAAM,GAAG,CAAA,CAAE,KAAI,IAAK,QAAA;AAChD,IAAA,KAAA,MAAW,KAAA,IAAS,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,EAAE,QAAQ,QAAA,EAAU,KAAA,EAAO,KAAA,EAAO,UAAA,EAAY,CAAA;AAAA,EACxF;AACA,EAAA,OAAO,OAAA;AACT;AAUA,eAAe,aAAA,GAGZ;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AACF,IAAA,MAAM,UAA0B,EAAC;AACjC,IAAA,KAAA,MAAW,IAAA,IAAQ,mBAAkB,EAAG;AACtC,MAAA,OAAA,CAAQ,IAAA,CAAK,GAAI,MAAM,QAAA,CAAS,IAAA,EAAM,gBAAA,EAAkB,EAAE,UAAA,EAAY,aAAA,EAAc,EAAG,CAAE,CAAA;AAAA,IAC3F;AACA,IAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,EAC1B,SAAS,GAAA,EAAK;AACZ,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,IAAA,EAAM,SAAA;AAAA,MACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACzD,CAAA;AACD,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAGA,SAAS,GAAA,CAAI,QAAqB,OAAA,EAAwC;AACxE,EAAA,OAAO,QAAQ,GAAA,CAAI,CAAC,WAAW,EAAE,MAAA,EAAQ,OAAM,CAAE,CAAA;AACnD;AASA,eAAsB,gBAAA,CACpB,IACA,UAAA,EAC0B;AAC1B,EAAA,MAAM,CAAC,IAAA,EAAM,KAAK,CAAA,GAAI,MAAM,OAAA,CAAQ,GAAA,CAAI,CAAC,aAAA,EAAc,EAAG,WAAA,CAAY,UAAU,CAAC,CAAC,CAAA;AAClF,EAAA,MAAM,OAAA,GAAU,MAAM,aAAA,EAAc;AACpC,EAAA,MAAM,GAAA,GAAM,MAAM,YAAA,CAAa,EAAE,CAAA;AACjC,EAAA,OAAO;AAAA,IACL,OAAA,EAAS;AAAA,MACP,GAAG,GAAA;AAAA,MACH,GAAG,IAAA,CAAK,OAAA;AAAA,MACR,GAAG,GAAA,CAAI,SAAA,EAAW,OAAA,CAAQ,OAAO,CAAA;AAAA,MACjC,GAAG,GAAA,CAAI,OAAA,EAAS,KAAA,CAAM,OAAO;AAAA,KAC/B;AAAA,IACA,KAAA,EAAO,CAAC,GAAG,IAAA,CAAK,KAAA,EAAO,GAAG,KAAA,CAAM,KAAA,EAAO,GAAG,OAAA,CAAQ,KAAK;AAAA,GACzD;AACF","file":"asset-feeds-QGLI3AXI.js","sourcesContent":["/**\n * asset-feeds.ts — gather installable assets from every feed the manage TUI\n * surfaces.\n *\n * Four feeds, normalized into `CatalogEntry`:\n * - **Project sources** — `skaile.yaml` `sources:` entries (scanned via\n *   `AssetManager.search()`; the new `sources:` field is merged into the\n *   legacy repositories map in `AssetManager.loadConfig`).\n * - **Local libraries** — user authoring places from `LocalIndex`, read through\n *   `scanAuthoringLibraries` (`@skaile/workspaces/library`): the same scan\n *   `library index` / `search --local` use, so publishers and refs match them\n *   (per-asset `publisher_overrides` honoured), `dev_paths` assets are left out,\n *   and a library that fails to scan becomes one note while the rest stay listed.\n * - **Factory assets** — the bundled first-party `factory-assets` tree\n *   (`factoryAssetRoots()`), scanned from disk. Always present; no network.\n * - **Remote store** — the configured catalog source when `catalog.url` is\n *   not `local`. Failures are non-fatal — they surface as notes.\n */\n\nimport * as path from \"node:path\";\nimport {\n  type AssetKind,\n  type CatalogEntry,\n  factoryAssetRoots,\n  parseRequires,\n  scanRepo,\n} from \"@skaile/workspaces/core\";\nimport { getKnownKinds } from \"./open-registry.ts\";\nimport { storeNotInstallableReason } from \"./store-addable.ts\";\nimport type { DiscoveredAsset } from \"@skaile/workspaces/discovery\";\n\n/** One non-fatal note returned to the caller for surfacing in the UI. */\nexport interface FeedNote {\n  feed: \"sources\" | \"libraries\" | \"store\" | \"factory\";\n  message: string;\n}\n\n/**\n * Which feed an asset came from. This is the top-level grouping axis in the\n * manage TUI (\"where is this skill coming from?\") and is intentionally distinct\n * from `publisher` (asset-intrinsic identity): the same publisher can legitimately\n * appear under more than one origin (e.g. a github repo you added as a `source`\n * that is also listed in the remote `store`).\n */\nexport type AssetOrigin = \"source\" | \"library\" | \"factory\" | \"store\";\n\n/** A catalog entry tagged with the feed it was gathered from. */\nexport interface OriginEntry {\n  origin: AssetOrigin;\n  entry: CatalogEntry;\n  /**\n   * Second-level grouping label for the manage tree. Defaults (when unset) to the\n   * entry's `publisher`; the source feed sets it to the source's short repo name\n   * so the Sources band groups by source — \"which repo did this come from\" — not\n   * by the asset-intrinsic publisher.\n   */\n  group?: string;\n}\n\nexport interface AssetFeedResult {\n  entries: OriginEntry[];\n  notes: FeedNote[];\n}\n\n/**\n * Map one discovered library asset to the `CatalogEntry` the manage rows read.\n * `publisher` is the bare per-asset publisher (what `search --local` prints),\n * `source` the manifest path. `repo` is left unset: it only feeds the Sources-tree\n * org grouping. `requires` / `dependencies` come from the manifest the way the\n * scanner fills them — string `requires:` refs parsed to `{kind, name}`, a bundle's\n * string `dependencies:` list verbatim.\n */\nfunction libraryEntryOf(asset: DiscoveredAsset): CatalogEntry {\n  const { manifest } = asset;\n  const nested = (manifest.metadata as Record<string, unknown> | undefined)?.requires;\n  const rawRequires = manifest.requires ?? nested;\n  const requireRefs =\n    typeof rawRequires === \"string\"\n      ? rawRequires\n      : Array.isArray(rawRequires)\n        ? rawRequires.filter((r): r is string => typeof r === \"string\")\n        : undefined;\n  const deps = manifest.dependencies;\n  return {\n    name: asset.name,\n    kind: asset.kind as AssetKind,\n    description: typeof manifest.description === \"string\" ? manifest.description : \"\",\n    source: asset.manifestPath,\n    publisher: asset.publisher,\n    ...(asset.plugin ? { plugin: asset.plugin } : {}),\n    version: asset.version,\n    requires: requireRefs === undefined ? [] : parseRequires({ requires: requireRefs }),\n    dependencies:\n      asset.kind === \"bundle\" && Array.isArray(deps)\n        ? deps.filter((d): d is string => typeof d === \"string\" && d.length > 0)\n        : [],\n  };\n}\n\n/**\n * Pull assets from local libraries (the authoring places under\n * `~/.skaile/libraries/<name>/`, not the `~/.skaile/cache/sources/` cache) through\n * `scanAuthoringLibraries`, grouped under the bare library name\n * (`group: <name>`) so the manage TUI shows a clean `<name>` band — no\n * `library:` prefix (mirrors the source feed). Plugin grouping (`entry.plugin`)\n * comes from `DiscoveredAsset.plugin`. A library whose scan fails becomes one\n * `FeedNote`; the outer `catch` covers only opening the index.\n */\nasync function libraryAssets(): Promise<{\n  entries: OriginEntry[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    // Lazy: the library subpath pulls in SQLite, which the other feeds never need.\n    const { openLibraryManager } = await import(\"./open-library.ts\");\n    const { getKindRegistry } = await import(\"./open-registry.ts\");\n    const { scanAuthoringLibraries } = await import(\"@skaile/workspaces/library\");\n    const { library: index, close } = await openLibraryManager();\n    try {\n      const entries: OriginEntry[] = [];\n      for (const scan of await scanAuthoringLibraries(index, getKindRegistry())) {\n        if (scan.error !== undefined) {\n          notes.push({ feed: \"libraries\", message: `${scan.library.name}: ${scan.error}` });\n          continue;\n        }\n        for (const asset of scan.assets) {\n          entries.push({\n            origin: \"library\",\n            entry: libraryEntryOf(asset),\n            group: scan.library.name,\n          });\n        }\n      }\n      return { entries, notes };\n    } finally {\n      close();\n    }\n  } catch (err) {\n    notes.push({\n      feed: \"libraries\",\n      message: err instanceof Error ? err.message : String(err),\n    });\n    return { entries: [], notes };\n  }\n}\n\n/**\n * Pull a (best-effort) snapshot of the connected remote store catalog.\n *\n * - Returns no entries when the resolved catalog is local-only or the host\n *   is unreachable (the failure becomes a note, not an exception).\n * - Maps `CatalogAsset` → `CatalogEntry`, carrying `publisher`, `repo`, and\n *   `category` straight through and using `source = \"store://<id>\"`; per-file\n *   `source` paths are not available for remote assets so the canonical ref is\n *   a stable placeholder.\n */\nasync function storeAssets(projectDir: string): Promise<{\n  entries: CatalogEntry[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    const { resolveCatalogSource } = await import(\"./open-library.ts\");\n    const { source, close } = await resolveCatalogSource({ projectDir });\n    try {\n      // The store lists only what `skaile add` can install (see store-addable.ts).\n      const assets = (await source.listAssets()).filter(\n        (a) => storeNotInstallableReason(a) === undefined,\n      );\n      const entries: CatalogEntry[] = assets.map((a) => ({\n        name: a.name,\n        kind: (a.kind as AssetKind) ?? \"skill\",\n        description: a.description ?? \"\",\n        source: `store://${a.id}`,\n        publisher: a.publisher,\n        repo: a.repo,\n        plugin: a.plugin,\n        category: a.category,\n        version: a.version,\n        requires: [],\n        dependencies: [],\n      }));\n      return { entries, notes };\n    } finally {\n      close();\n    }\n  } catch (err) {\n    const msg = err instanceof Error ? err.message : String(err);\n    // Local-only catalog throws a recognizable message — silence it; absence\n    // is the user's choice, not an error.\n    if (!/local/i.test(msg)) {\n      notes.push({ feed: \"store\", message: msg });\n    }\n    return { entries: [], notes };\n  }\n}\n\n/** The slice of `AssetManager` the source feed needs (kept narrow for tests). */\ninterface AssetManagerLike {\n  search: () => Promise<CatalogEntry[]>;\n  searchRepoRoots: () => { repoName: string; root: string }[];\n}\n\n/**\n * Project-source feed: leans on `AssetManager.search()`, which merges\n * `skaile.yaml`'s `sources:` field into the repositories map. Plugin grouping\n * (`entry.plugin`) is stamped by the scanner, so entries pass through as-is.\n */\nasync function sourceAssets(am: AssetManagerLike): Promise<OriginEntry[]> {\n  // The bundled factory tree is injected into the repositories map as an implicit\n  // source, so `am.search()` returns it too. It has its own `factory` origin band,\n  // so drop it here — otherwise the same first-party skills list twice under Sources.\n  const factoryPrefixes = factoryAssetRoots().map((r) => (r.endsWith(path.sep) ? r : r + path.sep));\n  const isFactoryPath = (p: string) =>\n    factoryPrefixes.some((fp) => p === fp.slice(0, -1) || p.startsWith(fp));\n\n  const all = (await am.search()).filter((e) => !isFactoryPath(e.source));\n  const entries: OriginEntry[] = [];\n  // Group each source's entries under the source node (its short repo name), not\n  // the publisher: under Sources the navigational question is \"which repo did\n  // this come from\". Each entry's `source` (absolute manifest path) lives under\n  // exactly one declared root, so group by prefix. The cache slug is\n  // URL-keyed `github.com/<org>/<repo>` — take the trailing segment.\n  for (const { repoName, root } of am.searchRepoRoots()) {\n    if (isFactoryPath(root)) continue;\n    const prefix = root.endsWith(path.sep) ? root : root + path.sep;\n    const owned = all.filter((e) => e.source === root || e.source.startsWith(prefix));\n    if (owned.length === 0) continue;\n    const sourceName = repoName.split(\"/\").pop() || repoName;\n    for (const entry of owned) entries.push({ origin: \"source\", entry, group: sourceName });\n  }\n  return entries;\n}\n\n/**\n * Factory-asset feed: scan the bundled first-party `factory-assets` tree(s)\n * resolved by `factoryAssetRoots()` (the `SKAILE_FACTORY_ASSETS_DIR` override\n * layer ahead of the bundled tree). Local disk only, no network — the entries are\n * the built-in skills / connectors / bundles that ship with `@skaile/workspaces`.\n * `factoryAssetRoots()` already dedupes, so the env override pointing at the\n * bundled dir collapses to one root.\n */\nasync function factoryAssets(): Promise<{\n  entries: CatalogEntry[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    const entries: CatalogEntry[] = [];\n    for (const root of factoryAssetRoots()) {\n      entries.push(...(await scanRepo(root, \"skaile-factory\", { knownKinds: getKnownKinds() })));\n    }\n    return { entries, notes };\n  } catch (err) {\n    notes.push({\n      feed: \"factory\",\n      message: err instanceof Error ? err.message : String(err),\n    });\n    return { entries: [], notes };\n  }\n}\n\n/** Tag a flat entry list with a single origin. */\nfunction tag(origin: AssetOrigin, entries: CatalogEntry[]): OriginEntry[] {\n  return entries.map((entry) => ({ origin, entry }));\n}\n\n/**\n * Run all feeds and return a single normalized result.\n *\n * Feeds run in parallel where possible — the store fetch is the slow one\n * (one HTTP call) and is fired alongside the local library walk. The factory\n * scan is local disk only, so it runs inline.\n */\nexport async function gatherAssetFeeds(\n  am: AssetManagerLike,\n  projectDir: string,\n): Promise<AssetFeedResult> {\n  const [libs, store] = await Promise.all([libraryAssets(), storeAssets(projectDir)]);\n  const factory = await factoryAssets();\n  const src = await sourceAssets(am);\n  return {\n    entries: [\n      ...src,\n      ...libs.entries,\n      ...tag(\"factory\", factory.entries),\n      ...tag(\"store\", store.entries),\n    ],\n    notes: [...libs.notes, ...store.notes, ...factory.notes],\n  };\n}\n"]}

package/dist/asset-manager/catalog-deployer.js

@@ -1,14 +1,14 @@
 export { WORKSPACE_MOUNT_ENV_VAR, deployAll, deployCatalogEntry, findAiAssetsRoot, isUnderWorkspaceMount, resolveFlowSkills, undeployCatalogEntry, workspaceMountDirs } from '../chunk-H6UVIKQ2.js';
-import '../chunk-T2TQAH2X.js';
+import '../chunk-N46LQR46.js';
 import '../chunk-4GY63JU6.js';
-import '../chunk-KC6HGWXN.js';
+import '../chunk-TIIXG3PN.js';
 import '../chunk-5TBFN46Z.js';
 import '../chunk-5BEFNLOR.js';
-import '../chunk-A2ULN3KX.js';
-import '../chunk-2NOLF7B2.js';
+import '../chunk-MWXYN6NY.js';
+import '../chunk-V257LUBM.js';
 import '../chunk-L5VSIPQD.js';
 import '../chunk-IG5LZ3WU.js';
-import '../chunk-CKICWXMU.js';
+import '../chunk-UQ33Y4DM.js';
 import '../chunk-RVRB27AN.js';
 import '../chunk-GOCWM7FN.js';
 import '../chunk-WDXZA7QW.js';

package/dist/asset-manager/index.js

@@ -1,29 +1,29 @@
-export { AssetManager, FACTORY_SOURCE_URL, LibraryEntryError, MissingManifestError, installAgentInstances, normalizeRepoUrl, parseCanonicalLockKey, parseRefTolerant, renderMcpServerConfig, softDepName } from '../chunk-TDQ2ERCM.js';
-import '../chunk-VKPBUPH7.js';
-import '../chunk-HPVMTX6M.js';
-import '../chunk-U2FI547Z.js';
+export { AssetManager, FACTORY_SOURCE_URL, LibraryEntryError, MissingManifestError, installAgentInstances, normalizeRepoUrl, parseCanonicalLockKey, parseRefTolerant, renderMcpServerConfig, softDepName } from '../chunk-MRHVPQNO.js';
+import '../chunk-XM6T2AZ2.js';
+import '../chunk-I37INEWE.js';
+import '../chunk-7XSAW5OC.js';
 import '../chunk-BFMYYNDT.js';
 import '../chunk-3TXEJN4W.js';
 import '../chunk-ISHJITXJ.js';
 import '../chunk-LNFKL23K.js';
 import '../chunk-X3RMRJNR.js';
 import '../chunk-NUELZWCF.js';
-export { SCAFFOLD_KINDS, createScaffold, deployAll, installAgent, installTargetOf, removeAsset } from '../chunk-YZ3N7IUU.js';
+export { SCAFFOLD_KINDS, createScaffold, deployAll, installAgent, installTargetOf, removeAsset } from '../chunk-JTOWA6RS.js';
 export { BUILT_IN_FRAGMENTS, loadPromptExtensions, resolveFragments } from '../chunk-NOA6EJXE.js';
 export { appendHistory, clearHistory, getRecentHistory, loadHistory } from '../chunk-KTBKW2FI.js';
 import '../chunk-UQ6LFBPZ.js';
-export { AGENT_RENDERERS, claudeCodeRenderer, codexRenderer, driverTargetSupportsAgents, ompRenderer, renderAgentToFramework } from '../chunk-SRNCN4X2.js';
-import '../chunk-CKNIYIV2.js';
-import '../chunk-T2TQAH2X.js';
+export { AGENT_RENDERERS, claudeCodeRenderer, codexRenderer, driverTargetSupportsAgents, ompRenderer, renderAgentToFramework } from '../chunk-C7WBGSBV.js';
+import '../chunk-335ENCCS.js';
+import '../chunk-N46LQR46.js';
 import '../chunk-4GY63JU6.js';
-import '../chunk-KC6HGWXN.js';
+import '../chunk-TIIXG3PN.js';
 import '../chunk-5TBFN46Z.js';
 import '../chunk-5BEFNLOR.js';
-import '../chunk-A2ULN3KX.js';
-import '../chunk-2NOLF7B2.js';
+import '../chunk-MWXYN6NY.js';
+import '../chunk-V257LUBM.js';
 import '../chunk-L5VSIPQD.js';
 import '../chunk-IG5LZ3WU.js';
-import '../chunk-CKICWXMU.js';
+import '../chunk-UQ33Y4DM.js';
 import '../chunk-RVRB27AN.js';
 import '../chunk-GOCWM7FN.js';
 import '../chunk-WDXZA7QW.js';

package/dist/asset-manager/installer.js

@@ -1,17 +1,17 @@
-export { SCAFFOLD_KINDS, assertNoLibrarySymlinks, canonicalEntryRef, createScaffold, deployAll, deployAsset, deployedAssetDrift, diffDeployedAgent, installTargetOf, readKeptLegacyCopies, removeAsset, writeKeptLegacyCopies } from '../chunk-YZ3N7IUU.js';
+export { SCAFFOLD_KINDS, assertNoLibrarySymlinks, canonicalEntryRef, createScaffold, deployAll, deployAsset, deployedAssetDrift, diffDeployedAgent, installTargetOf, readKeptLegacyCopies, removeAsset, writeKeptLegacyCopies } from '../chunk-JTOWA6RS.js';
 import '../chunk-NOA6EJXE.js';
-import '../chunk-SRNCN4X2.js';
-import '../chunk-CKNIYIV2.js';
-import '../chunk-T2TQAH2X.js';
+import '../chunk-C7WBGSBV.js';
+import '../chunk-335ENCCS.js';
+import '../chunk-N46LQR46.js';
 import '../chunk-4GY63JU6.js';
-import '../chunk-KC6HGWXN.js';
+import '../chunk-TIIXG3PN.js';
 import '../chunk-5TBFN46Z.js';
 import '../chunk-5BEFNLOR.js';
-import '../chunk-A2ULN3KX.js';
-import '../chunk-2NOLF7B2.js';
+import '../chunk-MWXYN6NY.js';
+import '../chunk-V257LUBM.js';
 import '../chunk-L5VSIPQD.js';
 import '../chunk-IG5LZ3WU.js';
-import '../chunk-CKICWXMU.js';
+import '../chunk-UQ33Y4DM.js';
 import '../chunk-RVRB27AN.js';
 import '../chunk-GOCWM7FN.js';
 import '../chunk-WDXZA7QW.js';

package/dist/asset-manager/renderers.js

@@ -1,15 +1,15 @@
-export { AGENT_RENDERERS, CODEX_IDENTITY_DIR, claudeCodeRenderer, codexRenderer, driverTargetSupportsAgents, ompRenderer, renderAgentToFramework } from '../chunk-SRNCN4X2.js';
-import '../chunk-CKNIYIV2.js';
-import '../chunk-T2TQAH2X.js';
+export { AGENT_RENDERERS, CODEX_IDENTITY_DIR, claudeCodeRenderer, codexRenderer, driverTargetSupportsAgents, ompRenderer, renderAgentToFramework } from '../chunk-C7WBGSBV.js';
+import '../chunk-335ENCCS.js';
+import '../chunk-N46LQR46.js';
 import '../chunk-4GY63JU6.js';
-import '../chunk-KC6HGWXN.js';
+import '../chunk-TIIXG3PN.js';
 import '../chunk-5TBFN46Z.js';
 import '../chunk-5BEFNLOR.js';
-import '../chunk-A2ULN3KX.js';
-import '../chunk-2NOLF7B2.js';
+import '../chunk-MWXYN6NY.js';
+import '../chunk-V257LUBM.js';
 import '../chunk-L5VSIPQD.js';
 import '../chunk-IG5LZ3WU.js';
-import '../chunk-CKICWXMU.js';
+import '../chunk-UQ33Y4DM.js';
 import '../chunk-RVRB27AN.js';
 import '../chunk-GOCWM7FN.js';
 import '../chunk-WDXZA7QW.js';

package/dist/asset-manager/src/index.d.ts

@@ -415,6 +415,11 @@ export interface OutdatedEntry {
      * `skaile update` (or `skaile install`) re-locks and re-deploys them.
      */
     contentChanged?: boolean;
+    /**
+     * Library-origin asset only: the library now holds this OLDER version than the lock. `install`
+     * keeps the lock and the deployed copy; only `update` moves it back (`replaced X → Y`).
+     */
+    libraryOlder?: string;
     /**
      * Library-origin asset only: the library `update` would re-lock the asset from, when it is
      * not the one the lock names (`library`), e.g. after `skaile library default <other>`.
@@ -426,6 +431,12 @@ export interface OutdatedEntry {
      * re-keyed (`0.0.0-sha.7de3555 → 0.2.0`, p914).
      */
     rekeyTo?: string;
+    /**
+     * Set when the row only reports a newer version than the `#version` pin of the asset's ref
+     * in `skaile.yaml` (`latestVersion`). The pin is deliberate: `update` leaves it and `outdated`
+     * does not fail on it.
+     */
+    pinned?: boolean;
     /**
      * Set on a `problem` row whose cause `skaile install` cannot fix: the asset's library is
      * gone or its publisher changed, so the ref resolves nowhere. `problem` names what to
@@ -440,7 +451,9 @@ export interface OutdatedEntry {
  * - `not-found` — the ref resolves to no asset (source, store or library).
  * - `not-deployed` — the asset resolves, but there is no deployed copy to compare.
  * - `identical` — the deployed copy matches the source.
- * - `differs` — the deployed copy differs; `diff` carries the unified diff.
+ * - `differs` — the deployed copy differs; `diff` carries the unified diff. `fileSetDiffers` is
+ *   set when a file is missing from the deployed copy or one is not part of the asset (an
+ *   `mcp-server` payload): that is a state problem as for a skill, so `diff` lists it and exits 1.
  * - `no-files` — the asset kind has no files of its own (a preset: its items are the assets to
  *   compare) and the lock records it.
  *
@@ -457,6 +470,7 @@ export type DiffResult = {
 } | {
     status: "differs";
     diff: string;
+    fileSetDiffers?: true;
 };
 /**
  * A node in the resolved dependency tree (returned by `AssetManager.tree()`).
@@ -532,7 +546,7 @@ export interface DepIssue {
  * @docLink packages/asset-manager/concepts#asset-manager
  */
 export interface LockGap {
-    type: "declared" | "invalid" | "drift" | "pin" | "requires" | "unresolved" | "library" | "incomplete" | "content" | "modified" | "agent" | "source";
+    type: "declared" | "invalid" | "drift" | "pin" | "requires" | "unresolved" | "library" | "incomplete" | "content" | "modified" | "agent" | "flow" | "render" | "source";
     /** The ref to act on: the declared ref, the unmet dependency `kind:name`, or the asset itself. */
     ref: string;
     /** Set on a `requires` gap: the requiring asset, `kind:@publisher/name` (`kind:name` when the lock knows no publisher). */
@@ -831,6 +845,26 @@ export declare class AssetManager {
      * row. Empty for a global manager and for a project that locks no `mcp-server`.
      */
     private mcpDriftRows;
+    /**
+     * What the render wrote for the `mcp-server` asset `name` into the coding agent's MCP
+     * config: the config file and, for a server with a payload, the payload directory
+     * (project-relative). `written` is false when the render left the server out (see
+     * {@link AssetManager.mcpNotices}). `undefined` when the harness has no MCP config skaile
+     * writes (`codex`, `omp`) or for a global manager: the asset is composed at run time only.
+     */
+    mcpRenderFootprint(name: string): Promise<{
+        file: string;
+        payloadDir?: string;
+        written: boolean;
+    } | undefined>;
+    /**
+     * The declared MCP servers whose `.mcp.json` entry skaile wrote and nothing edited, but that
+     * `skaile.yaml` (or a newer asset) now renders differently: the config waits for
+     * `skaile install`. Covers a locked `mcp-server` and an `mcp_servers:` entry alike; the
+     * server is named by its lock identity when it has one, else `mcp-server:<id>`. Empty for a
+     * global manager.
+     */
+    private mcpPendingRender;
     /**
      * Render the project's declared MCP servers into the driver target's own
      * native MCP config (`<project>/.mcp.json` for `claude-code`), so the coding
@@ -1156,6 +1190,15 @@ export declare class AssetManager {
     private libraryHoldingLockedBytes;
     /** On-disk root of the library `origin` names; `null` unless {@link lockedLibrary} says `ok`. */
     private libraryPath;
+    /**
+     * Rename the library every library-origin lock entry names: `library rename <interim> <old>`
+     * puts a library back under its old name, and an entry locked in between would keep the
+     * interim name, so a later "register library again" advice would name a library nobody knows
+     * any more (p893). Nothing is written when no entry names `from`.
+     *
+     * @returns the number of lock entries renamed.
+     */
+    renameLockedLibrary(from: string, to: string): number;
     /**
      * The `kind:@publisher/name` identities the lock holds for one `kind` and `name`, whatever
      * their publisher. `diff` uses it to accept a ref without a publisher only when it names
@@ -1248,6 +1291,16 @@ export declare class AssetManager {
      * @returns Map of candidate key → staged primary-manifest path.
      */
     private stageStoreAssets;
+    /**
+     * The requirements a store candidate's own manifest declares (`metadata.requires`, a manifest
+     * `dependencies:`) that its catalog row did not list, read from the staged bytes. The catalog
+     * row is the store's own summary and may hold only same-kind ones; the deployed copy is what
+     * `check` reads, so a requirement only the manifest names would be missing right after `add`
+     * (p1221). Each one is added to the candidate's `deps` and `storeRequires` (the lock records
+     * them) and returned so the caller resolves, deploys and locks it like any other dependency.
+     * A candidate whose bytes come from a source clone, or that has none, adds nothing.
+     */
+    private readStoreCandidateRequires;
     /** Repo-relative path of a candidate's primary manifest (un-stripped). */
     private primaryManifestRel;
     /**
@@ -1340,6 +1393,12 @@ export declare class AssetManager {
     private ensureSourceClonesQuiet;
     /** Lock entries `skaile asset install` wrote (copied/linked straight into the project). */
     private directInstallLockEntries;
+    /**
+     * Refuse to prune a stale lock entry (in the old lock, not in the new resolved set, with no
+     * other version taking its place) whose deployed folder holds hand edits: the files that differ
+     * from the lock are named, nothing is removed, and `--force` prunes anyway (OQ6).
+     */
+    private assertNoHandEditsPruned;
     /**
      * Remove stale assets — those recorded in the old lock but absent from the
      * newly resolved set (`resolved` source candidates plus `keep`, the canonical
@@ -1736,6 +1795,13 @@ export declare class AssetManager {
      * @throws {Error} with a `migrate-skaile-manifest` hint on legacy `repositories:` / `ai_resources:` keys.
      */
     listDeclared(kind?: string): Promise<DeclaredAsset[]>;
+    /**
+     * One note per locked library asset whose library went back to an older version than the lock
+     * (`library is at 0.1.0, locked 0.3.0`). Not drift: `install` keeps the lock and only `update`
+     * moves it, so `check` and `doctor` print the note as a `!` line and still exit 0 (p1257).
+     * Empty for a global manager or when the libraries cannot be read.
+     */
+    libraryOlderNotices(): Promise<string[]>;
     /**
      * Notes about the project's `mcp-server`s that are not drift and fail nothing: a declared
      * server skaile does not write to the coding agent's MCP config (`reason` from the last
@@ -1861,6 +1927,13 @@ export declare class AssetManager {
      * @returns Array of {@link OutdatedEntry} objects.
      */
     outdated(): Promise<OutdatedEntry[]>;
+    /**
+     * List a locked asset whose `skaile.yaml` ref carries a `#version` pin while a source, a
+     * library or a store holds a newer one: `locked 0.7.0 -> 0.9.0 (pinned)`. The pin is the
+     * user's choice, so the row only informs (`pinned`): `update` leaves it, `outdated` does not
+     * fail on it (OQ13, p1291). An asset already listed keeps its own row.
+     */
+    private addPinnedRows;
     /**
      * List a source asset locked under a `0.0.0-sha.<commit>` key whose file now declares a
      * version: the next `install` or `update` re-keys it (`replaced 0.0.0-sha.7de3555 → 0.2.0`),
@@ -2029,6 +2102,12 @@ export declare class AssetManager {
      * that holds it, writes the publisher, or drops the binding.
      */
     private unboundAgentAdvice;
+    /**
+     * Whether the library a locked agent names is here and holds the agent, or the agent comes
+     * from a source or store: `install --locked` restores it, so its missing cache is no fault of
+     * the library.
+     */
+    private lockedAgentLibraryHolds;
     /** @deprecated Use `(await projectState()).gaps`; removed in the next major. */
     lockGaps(): Promise<LockGap[]>;
     /**
@@ -2058,6 +2137,16 @@ export declare class AssetManager {
      * @param named - `kind:name` identities already reported; they are skipped.
      */
     private libraryOriginGaps;
+    /**
+     * The locked source assets whose source is no longer in `skaile.yaml` `sources:` (`source
+     * remove`, a hand edit), keyed by lock key. ONE sentence for it: `check`, `doctor`, `outdated`,
+     * `install`, `install --locked` and `update` all say it (p1062), and none re-clones the source.
+     * A source of a store-resolved lock entry is not told apart from one, so no GitHub source is
+     * called missing while a `stores:` entry exists.
+     *
+     * @param inScope - Only these lock keys count (`install` prunes an undeclared entry as usual).
+     */
+    private orphanedSourceGaps;
     /**
      * Locked source assets whose source cannot supply them any more: the source is no longer in
      * `skaile.yaml` `sources:` (`source remove`, a hand edit), or it is there but now publishes