@skaile/workspaces 5.19.0 → 6.1.0

package/dist/{chunk-25ZVWL2R.js → chunk-3GMOPFWH.js}

@@ -1,5 +1,5 @@
-import { getAccessToken, loadStoreAuthConfig, hasStoredAuth } from './chunk-WOIRYY5L.js';
-import { globalSettingsPath, mapLegacyFields } from './chunk-N46LQR46.js';
+import { getAccessToken, loadStoreAuthConfig, hasStoredAuth } from './chunk-AITJ7ELM.js';
+import { globalSettingsPath, mapLegacyFields } from './chunk-VMVDAZLA.js';
 import { existsSync, readFileSync } from 'fs';
 
 function getStoreConfig() {
@@ -60,5 +60,5 @@ function isStoreAuthenticated() {
 }
 
 export { getStoreConfig, getStoreToken, isStoreAuthenticated, storeFetch };
-//# sourceMappingURL=chunk-25ZVWL2R.js.map
-//# sourceMappingURL=chunk-25ZVWL2R.js.map
+//# sourceMappingURL=chunk-3GMOPFWH.js.map
+//# sourceMappingURL=chunk-3GMOPFWH.js.map

package/dist/{chunk-25ZVWL2R.js.map → chunk-3GMOPFWH.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../cli/src/store-client.ts"],"names":[],"mappings":";;;;AAuBO,SAAS,cAAA,GAA8B;AAC5C,EAAA,MAAM,eAAe,kBAAA,EAAmB;AACxC,EAAA,IAAI,WAAgC,EAAC;AACrC,EAAA,IAAI,UAAA,CAAW,YAAY,CAAA,EAAG;AAC5B,IAAA,IAAI;AACF,MAAA,QAAA,GAAW,gBAAgB,IAAA,CAAK,KAAA,CAAM,aAAa,YAAA,EAAc,OAAO,CAAC,CAAC,CAAA;AAAA,IAC5E,CAAA,CAAA,MAAQ;AACN,MAAA,QAAA,GAAW,EAAC;AAAA,IACd;AAAA,EACF;AACA,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,QAAA,CAAS,QAAA,IAAY,OAAA,CAAQ,IAAI,gBAAA,IAAoB,0BAAA;AAAA,IAC1D,GAAA,EAAK;AAAA,GACP;AACF;AAOO,SAAS,cAAc,IAAA,EAAkC;AAC9D,EAAA,OAAO,cAAA,CAAe,mBAAA,EAAoB,EAAG,IAAI,CAAA;AACnD;AAaA,eAAsB,UAAA,CACpB,MAAA,EACA,IAAA,EACA,IAAA,EAOY;AACZ,EAAA,IAAI,GAAA,GAAM,CAAA,EAAG,MAAA,CAAO,GAAG,GAAG,IAAI,CAAA,CAAA;AAC9B,EAAA,IAAI,MAAM,MAAA,EAAQ;AAChB,IAAA,MAAM,EAAA,GAAK,IAAI,eAAA,CAAgB,IAAA,CAAK,MAAM,CAAA;AAC1C,IAAA,GAAA,IAAO,IAAI,EAAE,CAAA,CAAA;AAAA,EACf;AAEA,EAAA,MAAM,OAAA,GAAkC;AAAA,IACtC,cAAA,EAAgB,kBAAA;AAAA,IAChB,MAAA,EAAQ,kBAAA;AAAA,IACR,GAAI,IAAA,EAAM,OAAA,IAAW;AAAC,GACxB;AACA,EAAA,IAAI,OAAO,GAAA,EAAK;AACd,IAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,MAAA,CAAO,GAAG,CAAA,CAAA;AAAA,EAC9C;AAEA,EAAA,MAAM,SAAA,GAAyB;AAAA,IAC7B,MAAA,EAAQ,MAAM,MAAA,IAAU,KAAA;AAAA,IACxB;AAAA,GACF;AACA,EAAA,IAAI,MAAM,IAAA,EAAM;AACd,IAAA,SAAA,CAAU,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,IAAI,CAAA;AAAA,EAC3C;AAEA,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,OAAA,GAAU,WAAW,MAAM,UAAA,CAAW,OAAM,EAAG,IAAA,EAAM,aAAa,IAAK,CAAA;AAC7E,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,GAAA,EAAK,EAAE,GAAG,SAAA,EAAW,MAAA,EAAQ,UAAA,CAAW,MAAA,EAAQ,CAAA;AACxE,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK,CAAE,KAAA,CAAM,OAAO,EAAE,KAAA,EAAO,CAAA,KAAA,EAAQ,GAAA,CAAI,MAAM,IAAG,CAAE,CAAA;AAI3E,MAAA,MAAM,CAAA,GAAI,IAAA;AACV,MAAA,MAAM,IAAI,MAAM,CAAA,CAAE,OAAA,IAAW,EAAE,KAAA,IAAS,CAAA,iBAAA,EAAoB,GAAA,CAAI,MAAM,CAAA,CAAE,CAAA;AAAA,IAC1E;AACA,IAAA,OAAO,IAAI,IAAA,EAAK;AAAA,EAClB,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,OAAO,CAAA;AAAA,EACtB;AACF;AASO,SAAS,oBAAA,GAAgC;AAC9C,EAAA,OAAO,aAAA,CAAc,qBAAqB,CAAA;AAC5C","file":"chunk-25ZVWL2R.js","sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\nimport { globalSettingsPath, mapLegacyFields } from \"@skaile/workspaces/core\";\nimport { type AuthDeps, getAccessToken, hasStoredAuth, loadStoreAuthConfig } from \"./store-auth.ts\";\n\n/**\n * Connection configuration for the AI Asset Store API. `jwt` is normally left\n * null here and filled per-call by the caller from {@link getStoreToken} (the\n * device-flow session); it stays on the type for the `{ ...config, jwt }` spread.\n *\n * @docLink cli/dev-guide#store-client\n */\nexport interface StoreConfig {\n  url: string;\n  jwt: string | null;\n}\n\n/**\n * Read the store API base URL (settings `storeUrl` → `SKAILE_STORE_URL` →\n * default). Auth is not read here — it lives in the device-flow session; see\n * {@link getStoreToken}.\n *\n * @docLink cli/dev-guide#store-client\n */\nexport function getStoreConfig(): StoreConfig {\n  const settingsPath = globalSettingsPath();\n  let settings: Record<string, any> = {};\n  if (existsSync(settingsPath)) {\n    try {\n      settings = mapLegacyFields(JSON.parse(readFileSync(settingsPath, \"utf-8\")));\n    } catch {\n      settings = {};\n    }\n  }\n  return {\n    url: settings.storeUrl ?? process.env.SKAILE_STORE_URL ?? \"https://api.skaile.store\",\n    jwt: null,\n  };\n}\n\n/**\n * Return a valid store access token (Keycloak device-flow session, refreshed if\n * needed). Throws a \"run `skaile store login`\" error when there is no session.\n * This is the auth source for every `/api/v1/*` publisher call.\n */\nexport function getStoreToken(deps?: AuthDeps): Promise<string> {\n  return getAccessToken(loadStoreAuthConfig(), deps);\n}\n\n/**\n * Make an authenticated HTTP request to the store REST API.\n *\n * @param config - Store connection config (URL + auth token).\n * @param path - API path (e.g. `/api/assets`).\n * @param opts - Optional method, body, query params, extra headers, and\n *   `timeoutMs` (default 1500). Publisher calls pass a longer timeout because\n *   they trigger server-side clone/sync work.\n * @returns Parsed JSON response body.\n * @docLink cli/dev-guide#store-client\n */\nexport async function storeFetch<T = any>(\n  config: StoreConfig,\n  path: string,\n  opts?: {\n    method?: string;\n    body?: unknown;\n    params?: Record<string, string>;\n    headers?: Record<string, string>;\n    timeoutMs?: number;\n  },\n): Promise<T> {\n  let url = `${config.url}${path}`;\n  if (opts?.params) {\n    const sp = new URLSearchParams(opts.params);\n    url += `?${sp}`;\n  }\n\n  const headers: Record<string, string> = {\n    \"Content-Type\": \"application/json\",\n    Accept: \"application/json\",\n    ...(opts?.headers ?? {}),\n  };\n  if (config.jwt) {\n    headers.Authorization = `Bearer ${config.jwt}`;\n  }\n\n  const fetchOpts: RequestInit = {\n    method: opts?.method ?? \"GET\",\n    headers,\n  };\n  if (opts?.body) {\n    fetchOpts.body = JSON.stringify(opts.body);\n  }\n\n  const controller = new AbortController();\n  const timeout = setTimeout(() => controller.abort(), opts?.timeoutMs ?? 1_500);\n  try {\n    const res = await fetch(url, { ...fetchOpts, signal: controller.signal });\n    if (!res.ok) {\n      const body = await res.json().catch(() => ({ error: `HTTP ${res.status}` }));\n      // Prefer the store's human-readable `message` (e.g. \"Namespace '@x' is\n      // reserved … Sign in with GitHub to claim it\") over the bare `error` code\n      // (`UNPROCESSABLE_CONTENT`) — the message is the actionable part.\n      const b = body as { message?: string; error?: string };\n      throw new Error(b.message ?? b.error ?? `Store API error: ${res.status}`);\n    }\n    return res.json() as Promise<T>;\n  } finally {\n    clearTimeout(timeout);\n  }\n}\n\n/**\n * Return `true` when a store session exists (a Keycloak device-flow token cached\n * at `~/.skaile/auth.json`). Validity/refresh is resolved on use via\n * {@link getStoreToken}.\n *\n * @docLink cli/dev-guide#store-client\n */\nexport function isStoreAuthenticated(): boolean {\n  return hasStoredAuth(loadStoreAuthConfig());\n}\n"]}
+{"version":3,"sources":["../cli/src/store-client.ts"],"names":[],"mappings":";;;;AAuBO,SAAS,cAAA,GAA8B;AAC5C,EAAA,MAAM,eAAe,kBAAA,EAAmB;AACxC,EAAA,IAAI,WAAgC,EAAC;AACrC,EAAA,IAAI,UAAA,CAAW,YAAY,CAAA,EAAG;AAC5B,IAAA,IAAI;AACF,MAAA,QAAA,GAAW,gBAAgB,IAAA,CAAK,KAAA,CAAM,aAAa,YAAA,EAAc,OAAO,CAAC,CAAC,CAAA;AAAA,IAC5E,CAAA,CAAA,MAAQ;AACN,MAAA,QAAA,GAAW,EAAC;AAAA,IACd;AAAA,EACF;AACA,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,QAAA,CAAS,QAAA,IAAY,OAAA,CAAQ,IAAI,gBAAA,IAAoB,0BAAA;AAAA,IAC1D,GAAA,EAAK;AAAA,GACP;AACF;AAOO,SAAS,cAAc,IAAA,EAAkC;AAC9D,EAAA,OAAO,cAAA,CAAe,mBAAA,EAAoB,EAAG,IAAI,CAAA;AACnD;AAaA,eAAsB,UAAA,CACpB,MAAA,EACA,IAAA,EACA,IAAA,EAOY;AACZ,EAAA,IAAI,GAAA,GAAM,CAAA,EAAG,MAAA,CAAO,GAAG,GAAG,IAAI,CAAA,CAAA;AAC9B,EAAA,IAAI,MAAM,MAAA,EAAQ;AAChB,IAAA,MAAM,EAAA,GAAK,IAAI,eAAA,CAAgB,IAAA,CAAK,MAAM,CAAA;AAC1C,IAAA,GAAA,IAAO,IAAI,EAAE,CAAA,CAAA;AAAA,EACf;AAEA,EAAA,MAAM,OAAA,GAAkC;AAAA,IACtC,cAAA,EAAgB,kBAAA;AAAA,IAChB,MAAA,EAAQ,kBAAA;AAAA,IACR,GAAI,IAAA,EAAM,OAAA,IAAW;AAAC,GACxB;AACA,EAAA,IAAI,OAAO,GAAA,EAAK;AACd,IAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,MAAA,CAAO,GAAG,CAAA,CAAA;AAAA,EAC9C;AAEA,EAAA,MAAM,SAAA,GAAyB;AAAA,IAC7B,MAAA,EAAQ,MAAM,MAAA,IAAU,KAAA;AAAA,IACxB;AAAA,GACF;AACA,EAAA,IAAI,MAAM,IAAA,EAAM;AACd,IAAA,SAAA,CAAU,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,IAAI,CAAA;AAAA,EAC3C;AAEA,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,OAAA,GAAU,WAAW,MAAM,UAAA,CAAW,OAAM,EAAG,IAAA,EAAM,aAAa,IAAK,CAAA;AAC7E,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,GAAA,EAAK,EAAE,GAAG,SAAA,EAAW,MAAA,EAAQ,UAAA,CAAW,MAAA,EAAQ,CAAA;AACxE,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK,CAAE,KAAA,CAAM,OAAO,EAAE,KAAA,EAAO,CAAA,KAAA,EAAQ,GAAA,CAAI,MAAM,IAAG,CAAE,CAAA;AAI3E,MAAA,MAAM,CAAA,GAAI,IAAA;AACV,MAAA,MAAM,IAAI,MAAM,CAAA,CAAE,OAAA,IAAW,EAAE,KAAA,IAAS,CAAA,iBAAA,EAAoB,GAAA,CAAI,MAAM,CAAA,CAAE,CAAA;AAAA,IAC1E;AACA,IAAA,OAAO,IAAI,IAAA,EAAK;AAAA,EAClB,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,OAAO,CAAA;AAAA,EACtB;AACF;AASO,SAAS,oBAAA,GAAgC;AAC9C,EAAA,OAAO,aAAA,CAAc,qBAAqB,CAAA;AAC5C","file":"chunk-3GMOPFWH.js","sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\nimport { globalSettingsPath, mapLegacyFields } from \"@skaile/workspaces/core\";\nimport { type AuthDeps, getAccessToken, hasStoredAuth, loadStoreAuthConfig } from \"./store-auth.ts\";\n\n/**\n * Connection configuration for the AI Asset Store API. `jwt` is normally left\n * null here and filled per-call by the caller from {@link getStoreToken} (the\n * device-flow session); it stays on the type for the `{ ...config, jwt }` spread.\n *\n * @docLink cli/dev-guide#store-client\n */\nexport interface StoreConfig {\n  url: string;\n  jwt: string | null;\n}\n\n/**\n * Read the store API base URL (settings `storeUrl` → `SKAILE_STORE_URL` →\n * default). Auth is not read here — it lives in the device-flow session; see\n * {@link getStoreToken}.\n *\n * @docLink cli/dev-guide#store-client\n */\nexport function getStoreConfig(): StoreConfig {\n  const settingsPath = globalSettingsPath();\n  let settings: Record<string, any> = {};\n  if (existsSync(settingsPath)) {\n    try {\n      settings = mapLegacyFields(JSON.parse(readFileSync(settingsPath, \"utf-8\")));\n    } catch {\n      settings = {};\n    }\n  }\n  return {\n    url: settings.storeUrl ?? process.env.SKAILE_STORE_URL ?? \"https://api.skaile.store\",\n    jwt: null,\n  };\n}\n\n/**\n * Return a valid store access token (Keycloak device-flow session, refreshed if\n * needed). Throws a \"run `skaile store login`\" error when there is no session.\n * This is the auth source for every `/api/v1/*` publisher call.\n */\nexport function getStoreToken(deps?: AuthDeps): Promise<string> {\n  return getAccessToken(loadStoreAuthConfig(), deps);\n}\n\n/**\n * Make an authenticated HTTP request to the store REST API.\n *\n * @param config - Store connection config (URL + auth token).\n * @param path - API path (e.g. `/api/assets`).\n * @param opts - Optional method, body, query params, extra headers, and\n *   `timeoutMs` (default 1500). Publisher calls pass a longer timeout because\n *   they trigger server-side clone/sync work.\n * @returns Parsed JSON response body.\n * @docLink cli/dev-guide#store-client\n */\nexport async function storeFetch<T = any>(\n  config: StoreConfig,\n  path: string,\n  opts?: {\n    method?: string;\n    body?: unknown;\n    params?: Record<string, string>;\n    headers?: Record<string, string>;\n    timeoutMs?: number;\n  },\n): Promise<T> {\n  let url = `${config.url}${path}`;\n  if (opts?.params) {\n    const sp = new URLSearchParams(opts.params);\n    url += `?${sp}`;\n  }\n\n  const headers: Record<string, string> = {\n    \"Content-Type\": \"application/json\",\n    Accept: \"application/json\",\n    ...(opts?.headers ?? {}),\n  };\n  if (config.jwt) {\n    headers.Authorization = `Bearer ${config.jwt}`;\n  }\n\n  const fetchOpts: RequestInit = {\n    method: opts?.method ?? \"GET\",\n    headers,\n  };\n  if (opts?.body) {\n    fetchOpts.body = JSON.stringify(opts.body);\n  }\n\n  const controller = new AbortController();\n  const timeout = setTimeout(() => controller.abort(), opts?.timeoutMs ?? 1_500);\n  try {\n    const res = await fetch(url, { ...fetchOpts, signal: controller.signal });\n    if (!res.ok) {\n      const body = await res.json().catch(() => ({ error: `HTTP ${res.status}` }));\n      // Prefer the store's human-readable `message` (e.g. \"Namespace '@x' is\n      // reserved … Sign in with GitHub to claim it\") over the bare `error` code\n      // (`UNPROCESSABLE_CONTENT`) — the message is the actionable part.\n      const b = body as { message?: string; error?: string };\n      throw new Error(b.message ?? b.error ?? `Store API error: ${res.status}`);\n    }\n    return res.json() as Promise<T>;\n  } finally {\n    clearTimeout(timeout);\n  }\n}\n\n/**\n * Return `true` when a store session exists (a Keycloak device-flow token cached\n * at `~/.skaile/auth.json`). Validity/refresh is resolved on use via\n * {@link getStoreToken}.\n *\n * @docLink cli/dev-guide#store-client\n */\nexport function isStoreAuthenticated(): boolean {\n  return hasStoredAuth(loadStoreAuthConfig());\n}\n"]}

package/dist/{chunk-X5YPJV4N.js → chunk-3MWQKQUB.js}

@@ -10,5 +10,5 @@ function err(message) {
 }
 
 export { err, ok, okJson };
-//# sourceMappingURL=chunk-X5YPJV4N.js.map
-//# sourceMappingURL=chunk-X5YPJV4N.js.map
+//# sourceMappingURL=chunk-3MWQKQUB.js.map
+//# sourceMappingURL=chunk-3MWQKQUB.js.map

package/dist/{chunk-X5YPJV4N.js.map → chunk-3MWQKQUB.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../workspace-plugin/src/types.ts"],"names":[],"mappings":";AAuBO,SAAS,GAAG,IAAA,EAA0B;AAC3C,EAAA,OAAO,EAAE,SAAS,CAAC,EAAE,MAAM,MAAA,EAAQ,IAAA,EAAM,CAAA,EAAE;AAC7C;AAaO,SAAS,OAAO,IAAA,EAA2B;AAChD,EAAA,OAAO,EAAE,OAAA,EAAS,CAAC,EAAE,MAAM,MAAA,EAAQ,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAA,EAAM,IAAA,EAAM,CAAC,CAAA,EAAG,CAAA,EAAE;AAC5E;AAaO,SAAS,IAAI,OAAA,EAA6B;AAC/C,EAAA,OAAO,EAAE,OAAA,EAAS,CAAC,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,CAAA,OAAA,EAAU,OAAO,CAAA,CAAA,EAAI,CAAA,EAAG,SAAS,IAAA,EAAK;AACjF","file":"chunk-X5YPJV4N.js","sourcesContent":["/**\n * Standard tool result shape used by all plugin tool functions.\n *\n * Mirrors the MCP `CallToolResult` content structure so results can be\n * forwarded directly to either adapter without transformation.\n *\n * Construct via {@link ok}, {@link okJson}, or {@link err} — never manually.\n *\n * @docLink packages/workspace-plugin/concepts#plugin-types\n */\nexport interface ToolResult {\n  content: Array<{ type: \"text\"; text: string }>;\n  isError?: boolean;\n}\n\n/**\n * Return a successful plain-text {@link ToolResult}.\n *\n * @param text - Human-readable result string delivered to the agent.\n * @returns A `ToolResult` with `isError` unset.\n *\n * @docLink packages/workspace-plugin/concepts#plugin-types\n */\nexport function ok(text: string): ToolResult {\n  return { content: [{ type: \"text\", text }] };\n}\n\n/**\n * Return a successful JSON {@link ToolResult}.\n *\n * Serializes `data` with two-space indentation.  The agent receives the\n * pretty-printed JSON string as a text block.\n *\n * @param data - Any JSON-serialisable value.\n * @returns A `ToolResult` with `isError` unset.\n *\n * @docLink packages/workspace-plugin/concepts#plugin-types\n */\nexport function okJson(data: unknown): ToolResult {\n  return { content: [{ type: \"text\", text: JSON.stringify(data, null, 2) }] };\n}\n\n/**\n * Return an error {@link ToolResult}.\n *\n * The message is prefixed with `\"Error: \"` so agents can identify failures\n * without inspecting `isError`.\n *\n * @param message - Short description of what went wrong.\n * @returns A `ToolResult` with `isError: true`.\n *\n * @docLink packages/workspace-plugin/concepts#plugin-types\n */\nexport function err(message: string): ToolResult {\n  return { content: [{ type: \"text\", text: `Error: ${message}` }], isError: true };\n}\n\n/**\n * Minimal session state shape persisted to `.skaile/sessions/<runId>.json`.\n *\n * Intentionally a subset of `runner/src/session.ts` — this package must not\n * depend on `@skaile/workspaces/runner` to avoid a circular dependency.\n *\n * @docLink packages/workspace-plugin/concepts#plugin-types\n */\nexport interface SessionState {\n  runId: string;\n  flowId: string;\n  projectDir: string;\n  agentDir?: string;\n  driver: string;\n  provider?: string;\n  model?: string;\n  driverSessionId?: string;\n  startedAt: string;\n  updatedAt: string;\n  label?: string;\n  status?: \"running\" | \"complete\" | \"failed\" | \"paused\";\n}\n"]}
+{"version":3,"sources":["../workspace-plugin/src/types.ts"],"names":[],"mappings":";AAuBO,SAAS,GAAG,IAAA,EAA0B;AAC3C,EAAA,OAAO,EAAE,SAAS,CAAC,EAAE,MAAM,MAAA,EAAQ,IAAA,EAAM,CAAA,EAAE;AAC7C;AAaO,SAAS,OAAO,IAAA,EAA2B;AAChD,EAAA,OAAO,EAAE,OAAA,EAAS,CAAC,EAAE,MAAM,MAAA,EAAQ,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAA,EAAM,IAAA,EAAM,CAAC,CAAA,EAAG,CAAA,EAAE;AAC5E;AAaO,SAAS,IAAI,OAAA,EAA6B;AAC/C,EAAA,OAAO,EAAE,OAAA,EAAS,CAAC,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,CAAA,OAAA,EAAU,OAAO,CAAA,CAAA,EAAI,CAAA,EAAG,SAAS,IAAA,EAAK;AACjF","file":"chunk-3MWQKQUB.js","sourcesContent":["/**\n * Standard tool result shape used by all plugin tool functions.\n *\n * Mirrors the MCP `CallToolResult` content structure so results can be\n * forwarded directly to either adapter without transformation.\n *\n * Construct via {@link ok}, {@link okJson}, or {@link err} — never manually.\n *\n * @docLink packages/workspace-plugin/concepts#plugin-types\n */\nexport interface ToolResult {\n  content: Array<{ type: \"text\"; text: string }>;\n  isError?: boolean;\n}\n\n/**\n * Return a successful plain-text {@link ToolResult}.\n *\n * @param text - Human-readable result string delivered to the agent.\n * @returns A `ToolResult` with `isError` unset.\n *\n * @docLink packages/workspace-plugin/concepts#plugin-types\n */\nexport function ok(text: string): ToolResult {\n  return { content: [{ type: \"text\", text }] };\n}\n\n/**\n * Return a successful JSON {@link ToolResult}.\n *\n * Serializes `data` with two-space indentation.  The agent receives the\n * pretty-printed JSON string as a text block.\n *\n * @param data - Any JSON-serialisable value.\n * @returns A `ToolResult` with `isError` unset.\n *\n * @docLink packages/workspace-plugin/concepts#plugin-types\n */\nexport function okJson(data: unknown): ToolResult {\n  return { content: [{ type: \"text\", text: JSON.stringify(data, null, 2) }] };\n}\n\n/**\n * Return an error {@link ToolResult}.\n *\n * The message is prefixed with `\"Error: \"` so agents can identify failures\n * without inspecting `isError`.\n *\n * @param message - Short description of what went wrong.\n * @returns A `ToolResult` with `isError: true`.\n *\n * @docLink packages/workspace-plugin/concepts#plugin-types\n */\nexport function err(message: string): ToolResult {\n  return { content: [{ type: \"text\", text: `Error: ${message}` }], isError: true };\n}\n\n/**\n * Minimal session state shape persisted to `.skaile/sessions/<runId>.json`.\n *\n * Intentionally a subset of `runner/src/session.ts` — this package must not\n * depend on `@skaile/workspaces/runner` to avoid a circular dependency.\n *\n * @docLink packages/workspace-plugin/concepts#plugin-types\n */\nexport interface SessionState {\n  runId: string;\n  flowId: string;\n  projectDir: string;\n  agentDir?: string;\n  harness: string;\n  provider?: string;\n  model?: string;\n  harnessSessionId?: string;\n  startedAt: string;\n  updatedAt: string;\n  label?: string;\n  status?: \"running\" | \"complete\" | \"failed\" | \"paused\";\n}\n"]}

package/dist/{chunk-EPBKISS5.js → chunk-3TG2NV2F.js}

@@ -80,5 +80,5 @@ var AskSlots = class {
 };
 
 export { AskSlots };
-//# sourceMappingURL=chunk-EPBKISS5.js.map
-//# sourceMappingURL=chunk-EPBKISS5.js.map
+//# sourceMappingURL=chunk-3TG2NV2F.js.map
+//# sourceMappingURL=chunk-3TG2NV2F.js.map

package/dist/chunk-3TG2NV2F.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../types/src/ask-slots.ts"],"names":[],"mappings":";AA6BO,IAAM,WAAN,MAAe;AAAA;AAAA,EAEZ,KAAA,uBAAY,GAAA,EAAY;AAAA;AAAA,EAExB,WAAqB,EAAC;AAAA,EACtB,gBAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMR,WAAA,CAAY,SAAA,GAA+B,EAAC,EAAG,SAAA,EAAoB;AACjE,IAAA,IAAA,CAAK,gBAAA,GAAmB,SAAA;AACxB,IAAA,KAAA,MAAW,QAAA,IAAY,SAAA,EAAW,IAAA,CAAK,MAAA,CAAO,QAAQ,CAAA;AAAA,EACxD;AAAA;AAAA,EAGA,IAAI,SAAA,GAAgC;AAClC,IAAA,OAAO,IAAA,CAAK,gBAAA;AAAA,EACd;AAAA;AAAA,EAGA,IAAI,IAAA,GAA0B;AAC5B,IAAA,OAAO,IAAA,CAAK,QAAA;AAAA,EACd;AAAA;AAAA,EAGA,IAAI,OAAA,GAAmB;AACrB,IAAA,OAAO,IAAA,CAAK,MAAM,IAAA,KAAS,CAAA;AAAA,EAC7B;AAAA;AAAA,EAGA,IAAI,QAAA,GAAoB;AACtB,IAAA,OAAO,KAAK,KAAA,CAAM,IAAA,GAAO,CAAA,IAAK,IAAA,CAAK,SAAS,MAAA,KAAW,CAAA;AAAA,EACzD;AAAA;AAAA,EAGA,IAAI,QAAA,EAA2B;AAC7B,IAAA,OAAO,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,QAAQ,CAAA;AAAA,EAChC;AAAA;AAAA,EAGA,OAAO,QAAA,EAA2B;AAChC,IAAA,OAAO,IAAA,CAAK,QAAA,CAAS,QAAA,CAAS,QAAQ,CAAA;AAAA,EACxC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,GAAA,CAAI,UAAkB,SAAA,EAA6B;AACjD,IAAA,MAAM,YAAY,CAAC,IAAA,CAAK,YAAY,SAAA,KAAc,IAAA,CAAK,oBAAoB,IAAA,CAAK,QAAA,CAAA;AAChF,IAAA,IAAI,SAAA,OAAgB,KAAA,EAAM;AAC1B,IAAA,IAAA,CAAK,gBAAA,GAAmB,SAAA;AACxB,IAAA,IAAA,CAAK,OAAO,QAAQ,CAAA;AACpB,IAAA,OAAO,SAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,OAAO,IAAA,EAA+B;AACpC,IAAA,IAAI,SAAS,MAAA,IAAa,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,IAAI,CAAA,EAAG;AAC9C,MAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,QAAA,CAAS,OAAA,CAAQ,IAAI,CAAA;AACxC,MAAA,IAAI,KAAA,KAAU,EAAA,EAAI,OAAO,EAAE,IAAA,EAAM,MAAM,UAAA,EAAY,IAAA,EAAM,QAAA,EAAU,IAAA,CAAK,QAAA,EAAS;AACjF,MAAA,IAAA,CAAK,QAAA,CAAS,MAAA,CAAO,KAAA,EAAO,CAAC,CAAA;AAC7B,MAAA,OAAO,EAAE,IAAA,EAAM,IAAA,EAAM,YAAY,KAAA,EAAO,QAAA,EAAU,KAAK,QAAA,EAAS;AAAA,IAClE;AACA,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,QAAA,CAAS,KAAA,EAAM;AACjC,IAAA,OAAO,EAAE,IAAA,EAAM,UAAA,EAAY,KAAA,EAAO,QAAA,EAAU,KAAK,QAAA,EAAS;AAAA,EAC5D;AAAA;AAAA,EAGA,KAAA,GAAc;AACZ,IAAA,IAAA,CAAK,KAAA,uBAAY,GAAA,EAAI;AACrB,IAAA,IAAA,CAAK,WAAW,EAAC;AACjB,IAAA,IAAA,CAAK,gBAAA,GAAmB,MAAA;AAAA,EAC1B;AAAA,EAEQ,OAAO,QAAA,EAAwB;AACrC,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,QAAA,CAAS,OAAA,CAAQ,QAAQ,CAAA;AAC5C,IAAA,IAAI,UAAU,EAAA,EAAI,IAAA,CAAK,QAAA,CAAS,MAAA,CAAO,OAAO,CAAC,CAAA;AAC/C,IAAA,IAAA,CAAK,KAAA,CAAM,IAAI,QAAQ,CAAA;AACvB,IAAA,IAAA,CAAK,QAAA,CAAS,KAAK,QAAQ,CAAA;AAAA,EAC7B;AACF","file":"chunk-3TG2NV2F.js","sourcesContent":["/**\n * The slot rule of a parked multi-question ask.\n *\n * One ask carries several sub-questions, each keyed by its question text. The\n * harness resumes the paused turn only once every one has an answer, and an\n * answer is filed under a sub-question by this rule: a name that belongs to\n * this ask binds to its own sub-question, anything else (no name, or a name\n * from elsewhere) fills the oldest open one. The claude-sdk harness, the\n * AgentStore and the SDK AgentSession all follow it through this one class.\n *\n * Pure: no I/O, no events. Internal to the package, deliberately not exported\n * from the `types` index; sibling folders import it by relative path, like\n * other internal modules.\n */\n\n/** What one {@link AskSlots.answer} call did. */\nexport interface AskSlotsAnswer {\n  /**\n   * The sub-question the answer binds to, or `undefined` when none is left to\n   * bind to (every sub-question was closed already and the name was not one of\n   * them).\n   */\n  slot: string | undefined;\n  /** The bound sub-question was closed before this call; no other one closed. */\n  reanswered: boolean;\n  /** Every sub-question of the ask is closed after this call. */\n  complete: boolean;\n}\n\nexport class AskSlots {\n  /** Every sub-question text of this ask, answered or not. A Set: no prototype keys. */\n  private known = new Set<string>();\n  /** Sub-questions still waiting for an answer, oldest first. */\n  private openList: string[] = [];\n  private currentRequestId: string | undefined;\n\n  /**\n   * @param questions - Sub-question texts of one ask. Duplicate texts are one sub-question.\n   * @param requestId - Identity shared by every sub-question of the ask, when the harness gives one.\n   */\n  constructor(questions: readonly string[] = [], requestId?: string) {\n    this.currentRequestId = requestId;\n    for (const question of questions) this.extend(question);\n  }\n\n  /** Identity of the current ask; `undefined` when sub-questions carry none. */\n  get requestId(): string | undefined {\n    return this.currentRequestId;\n  }\n\n  /** Sub-questions still open, oldest first. */\n  get open(): readonly string[] {\n    return this.openList;\n  }\n\n  /** The ask holds no sub-question at all. */\n  get isEmpty(): boolean {\n    return this.known.size === 0;\n  }\n\n  /** The ask holds sub-questions and every one is closed. */\n  get complete(): boolean {\n    return this.known.size > 0 && this.openList.length === 0;\n  }\n\n  /** `question` is a sub-question of this ask, open or closed. */\n  has(question: string): boolean {\n    return this.known.has(question);\n  }\n\n  /** `question` is a sub-question of this ask that still waits for an answer. */\n  isOpen(question: string): boolean {\n    return this.openList.includes(question);\n  }\n\n  /**\n   * Add one sub-question as its event arrives. The same `requestId` (or none on\n   * both sides) extends the ask; a different one, or a finished ask, starts a\n   * new one. Adding a text the ask already holds opens it again, as the newest.\n   *\n   * @returns `true` when a previous ask was dropped to start a new one.\n   */\n  add(question: string, requestId?: string): boolean {\n    const startsNew = !this.isEmpty && (requestId !== this.currentRequestId || this.complete);\n    if (startsNew) this.clear();\n    this.currentRequestId = requestId;\n    this.extend(question);\n    return startsNew;\n  }\n\n  /**\n   * File an answer. A name from this ask binds to its own sub-question (answering\n   * a closed one closes nothing else); anything else fills the oldest open one.\n   */\n  answer(name?: string): AskSlotsAnswer {\n    if (name !== undefined && this.known.has(name)) {\n      const index = this.openList.indexOf(name);\n      if (index === -1) return { slot: name, reanswered: true, complete: this.complete };\n      this.openList.splice(index, 1);\n      return { slot: name, reanswered: false, complete: this.complete };\n    }\n    const slot = this.openList.shift();\n    return { slot, reanswered: false, complete: this.complete };\n  }\n\n  /** Drop the ask. */\n  clear(): void {\n    this.known = new Set();\n    this.openList = [];\n    this.currentRequestId = undefined;\n  }\n\n  private extend(question: string): void {\n    const index = this.openList.indexOf(question);\n    if (index !== -1) this.openList.splice(index, 1);\n    this.known.add(question);\n    this.openList.push(question);\n  }\n}\n"]}

package/dist/{chunk-L2AMXONH.js → chunk-3X7VTCPG.js}

@@ -147,5 +147,5 @@ function formatDroppedToolsNotice(dropped) {
 }
 
 export { TOOL_PROPERTY_KEY_PATTERN, checkToolInputSchema, checkToolPropertyKeys, filterInProcessMcpServerTools, formatDroppedToolsNotice };
-//# sourceMappingURL=chunk-L2AMXONH.js.map
-//# sourceMappingURL=chunk-L2AMXONH.js.map
+//# sourceMappingURL=chunk-3X7VTCPG.js.map
+//# sourceMappingURL=chunk-3X7VTCPG.js.map

package/dist/chunk-3X7VTCPG.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../bridge/src/mcp-tool-schema-filter.ts"],"names":[],"mappings":";;;;AAuBO,IAAM,yBAAA,GAA4B;AAEzC,IAAM,kBAAA,GAAqB,8CAAA;AAC3B,IAAM,gBAAA,GAAmB,GAAA;AAYzB,IAAI,aAAA,GAAyC,IAAA;AAE7C,SAAS,wBAAA,GAA6C;AACpD,EAAA,IAAI,eAAe,OAAO,aAAA;AAG1B,EAAA,MAAM,GAAA,GAAM,IAAI,OAAA,CAAQ,EAAE,MAAA,EAAQ,OAAO,eAAA,EAAiB,KAAA,EAAO,MAAA,EAAQ,KAAA,EAAO,CAAA;AAChF,EAAA,MAAM,QAAA,GAAW,GAAA,CAAI,SAAA,CAAU,kBAAkB,CAAA;AACjD,EAAA,IAAI,CAAC,QAAA,EAAU,MAAM,IAAI,MAAM,8CAA8C,CAAA;AAC7E,EAAA,aAAA,GAAgB,QAAA;AAChB,EAAA,OAAO,QAAA;AACT;AAOO,SAAS,sBAAsB,MAAA,EAAgC;AACpE,EAAA,IAAI,CAAC,UAAU,OAAO,MAAA,KAAW,YAAY,KAAA,CAAM,OAAA,CAAQ,MAAM,CAAA,EAAG,OAAO,IAAA;AAC3E,EAAA,MAAM,QAAS,MAAA,CAAoC,UAAA;AACnD,EAAA,IAAI,CAAC,SAAS,OAAO,KAAA,KAAU,YAAY,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG,OAAO,IAAA;AACxE,EAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA,EAAG;AACpC,IAAA,IAAI,CAAC,yBAAA,CAA0B,IAAA,CAAK,GAAG,CAAA,EAAG;AACxC,MAAA,OAAO,gBAAgB,IAAA,CAAK,SAAA,CAAU,GAAG,CAAC,CAAA,gBAAA,EAAmB,0BAA0B,MAAM,CAAA,CAAA;AAAA,IAC/F;AAAA,EACF;AACA,EAAA,OAAO,IAAA;AACT;AAOO,SAAS,qBAAqB,MAAA,EAAgC;AACnE,EAAA,IAAI,CAAC,UAAU,OAAO,MAAA,KAAW,YAAY,KAAA,CAAM,OAAA,CAAQ,MAAM,CAAA,EAAG;AAClE,IAAA,OAAO,mCAAA;AAAA,EACT;AACA,EAAA,MAAM,SAAA,GAAY,sBAAsB,MAAM,CAAA;AAC9C,EAAA,IAAI,WAAW,OAAO,SAAA;AAKtB,EAAA,MAAM,WAAW,wBAAA,EAAyB;AAC1C,EAAA,IAAI,CAAC,QAAA,CAAS,MAAM,CAAA,EAAG;AACrB,IAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,MAAA,GAAS,CAAC,CAAA;AACjC,IAAA,MAAM,KAAA,GAAQ,OAAO,YAAA,IAAgB,GAAA;AACrC,IAAA,OAAO,CAAA,qCAAA,EAAwC,KAAK,CAAA,CAAA,EAAI,KAAA,EAAO,WAAW,YAAY,CAAA,CAAA;AAAA,EACxF;AACA,EAAA,OAAO,IAAA;AACT;AAsBA,IAAM,iBAAA,uBAAwB,OAAA,EAAkC;AAEhE,SAAS,cAAc,MAAA,EAA+C;AACpE,EAAA,IAAI,CAAC,MAAA,IAAU,OAAO,MAAA,KAAW,UAAU,OAAO,IAAA;AAClD,EAAA,MAAM,CAAA,GAAI,MAAA;AACV,EAAA,IAAI,CAAA,CAAE,IAAA,KAAS,KAAA,IAAS,CAAC,CAAA,CAAE,YAAY,OAAO,CAAA,CAAE,QAAA,KAAa,QAAA,EAAU,OAAO,IAAA;AAC9E,EAAA,MAAM,OAAO,CAAA,CAAE,QAAA;AACf,EAAA,OAAO,OAAO,KAAK,OAAA,KAAY,UAAA,IAAc,OAAO,IAAA,CAAK,KAAA,KAAU,aAAa,IAAA,GAAO,IAAA;AACzF;AAEA,SAAS,WAAA,CAAe,GAAe,IAAA,EAA0B;AAC/D,EAAA,IAAI,KAAA;AACJ,EAAA,MAAM,OAAA,GAAU,IAAI,OAAA,CAAe,CAAC,GAAG,MAAA,KAAW;AAChD,IAAA,KAAA,GAAQ,UAAA,CAAW,MAAM,MAAA,CAAO,IAAI,KAAA,CAAM,GAAG,IAAI,CAAA,UAAA,CAAY,CAAC,CAAA,EAAG,gBAAgB,CAAA;AAAA,EACnF,CAAC,CAAA;AACD,EAAA,OAAO,OAAA,CAAQ,IAAA,CAAK,CAAC,CAAA,EAAG,OAAO,CAAC,CAAA,CAAE,OAAA,CAAQ,MAAM,YAAA,CAAa,KAAK,CAAC,CAAA;AACrE;AAOA,eAAe,mBAAmB,QAAA,EAAsD;AACtF,EAAA,MAAM,CAAC,UAAA,EAAY,UAAU,CAAA,GAAI,kBAAkB,gBAAA,EAAiB;AACpE,EAAA,MAAM,OAAA,uBAAc,GAAA,EAAoD;AACxE,EAAA,UAAA,CAAW,SAAA,GAAY,CAAC,GAAA,KAAQ;AAC9B,IAAA,MAAM,CAAA,GAAI,GAAA;AACV,IAAA,MAAM,KAAK,OAAO,CAAA,CAAE,EAAA,KAAO,QAAA,GAAW,EAAE,EAAA,GAAK,MAAA;AAC7C,IAAA,IAAI,OAAO,MAAA,EAAW;AACtB,IAAA,OAAA,CAAQ,GAAA,CAAI,EAAE,CAAA,GAAI,CAAC,CAAA;AACnB,IAAA,OAAA,CAAQ,OAAO,EAAE,CAAA;AAAA,EACnB,CAAA;AACA,EAAA,IAAI,MAAA,GAAS,CAAA;AACb,EAAA,MAAM,IAAA,GAAO,CAAC,MAAA,EAAgB,MAAA,KAC5B,WAAA;AAAA,IACE,IAAI,OAAA,CAAiC,CAAC,OAAA,EAAS,MAAA,KAAW;AACxD,MAAA,MAAM,EAAA,GAAK,MAAA,EAAA;AACX,MAAA,OAAA,CAAQ,GAAA,CAAI,IAAI,OAAO,CAAA;AACvB,MAAA,UAAA,CAAW,IAAA,CAAK,EAAE,OAAA,EAAS,KAAA,EAAO,EAAA,EAAI,QAAQ,MAAA,EAAQ,CAAA,CAAE,KAAA,CAAM,MAAM,CAAA;AAAA,IACtE,CAAC,CAAA;AAAA,IACD;AAAA,GACF,CAAE,IAAA,CAAK,CAAC,GAAA,KAAQ;AACd,IAAA,IAAI,GAAA,CAAI,KAAA,EAAO,MAAM,IAAI,KAAA,CAAM,CAAA,EAAG,MAAM,CAAA,SAAA,EAAY,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,KAAK,CAAC,CAAA,CAAE,CAAA;AAC/E,IAAA,OAAQ,GAAA,CAAI,UAAU,EAAC;AAAA,EACzB,CAAC,CAAA;AAEH,EAAA,MAAM,WAAW,KAAA,EAAM;AACvB,EAAA,MAAM,QAAA,CAAS,QAAQ,UAAU,CAAA;AACjC,EAAA,IAAI;AACF,IAAA,MAAM,KAAK,YAAA,EAAc;AAAA,MACvB,eAAA,EAAiB,YAAA;AAAA,MACjB,cAAc,EAAC;AAAA,MACf,UAAA,EAAY,EAAE,IAAA,EAAM,2BAAA,EAA6B,SAAS,OAAA;AAAQ,KACnE,CAAA;AACD,IAAA,MAAM,WAAW,IAAA,CAAK,EAAE,SAAS,KAAA,EAAO,MAAA,EAAQ,6BAA6B,CAAA;AAC7E,IAAA,MAAM,QAAoB,EAAC;AAC3B,IAAA,IAAI,MAAA;AACJ,IAAA,GAAG;AACD,MAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,YAAA,EAAc,SAAS,EAAE,MAAA,EAAO,GAAI,EAAE,CAAA;AAC9D,MAAA,KAAA,CAAM,IAAA,CAAK,GAAK,IAAA,CAAK,KAAA,IAAoC,EAAG,CAAA;AAC5D,MAAA,MAAA,GAAS,OAAO,IAAA,CAAK,UAAA,KAAe,QAAA,GAAW,KAAK,UAAA,GAAa,KAAA,CAAA;AAAA,IACnE,CAAA,QAAS,MAAA;AACT,IAAA,OAAO,KAAA;AAAA,EACT,CAAA,SAAE;AAEA,IAAA,MAAM,QAAA,CAAS,KAAA,EAAM,CAAE,KAAA,CAAM,MAAM;AAAA,IAAC,CAAC,CAAA;AAAA,EACvC;AACF;AAEA,IAAM,aAAa,YAAA,CAAa,EAAE,MAAM,KAAA,EAAO,OAAA,EAAS,sBAAsB,CAAA;AAe9E,eAAsB,6BAAA,CACpB,MAAA,EACA,MAAA,EACA,GAAA,GAAc,UAAA,EACa;AAC3B,EAAA,MAAM,QAAA,GAAW,cAAc,MAAM,CAAA;AACrC,EAAA,IAAI,CAAC,QAAA,EAAU,OAAO,EAAC;AACvB,EAAA,MAAM,MAAA,GAAS,iBAAA,CAAkB,GAAA,CAAI,QAAQ,CAAA;AAC7C,EAAA,IAAI,QAAQ,OAAO,MAAA;AACnB,EAAA,MAAM,aAAa,QAAA,CAAS,gBAAA;AAC5B,EAAA,IAAI,CAAC,cAAc,MAAA,CAAO,IAAA,CAAK,UAAU,CAAA,CAAE,MAAA,KAAW,CAAA,EAAG,OAAO,EAAC;AACjE,EAAA,IAAI,QAAA,CAAS,eAAc,EAAG;AAG5B,IAAA,GAAA,CAAI,KAAA,CAAM,+DAAA,EAAiE,EAAE,MAAA,EAAQ,CAAA;AACrF,IAAA,OAAO,EAAC;AAAA,EACV;AAEA,EAAA,IAAI,SAAA;AACJ,EAAA,IAAI;AACF,IAAA,SAAA,GAAY,MAAM,mBAAmB,QAAQ,CAAA;AAAA,EAC/C,SAAS,GAAA,EAAK;AACZ,IAAA,GAAA,CAAI,KAAK,qEAAA,EAAuE;AAAA,MAC9E,MAAA;AAAA,MACA,OAAO,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACvD,CAAA;AACD,IAAA,OAAO,EAAC;AAAA,EACV;AAEA,EAAA,MAAM,UAA4B,EAAC;AACnC,EAAA,KAAA,MAAW,QAAQ,SAAA,EAAW;AAC5B,IAAA,MAAM,MAAA,GAAS,oBAAA,CAAqB,IAAA,CAAK,WAAW,CAAA;AACpD,IAAA,IAAI,CAAC,MAAA,EAAQ;AACb,IAAA,MAAM,MAAA,GAAS,UAAA,CAAW,IAAA,CAAK,IAAI,CAAA;AACnC,IAAA,IAAI,OAAO,MAAA,EAAQ,OAAA,KAAY,UAAA,EAAY;AACzC,MAAA,GAAA,CAAI,KAAK,6DAAA,EAA+D;AAAA,QACtE,MAAA;AAAA,QACA,MAAM,IAAA,CAAK,IAAA;AAAA,QACX;AAAA,OACD,CAAA;AACD,MAAA;AAAA,IACF;AACA,IAAA,MAAA,CAAO,OAAA,EAAQ;AACf,IAAA,OAAA,CAAQ,KAAK,EAAE,MAAA,EAAQ,MAAM,IAAA,CAAK,IAAA,EAAM,QAAQ,CAAA;AAChD,IAAA,GAAA,CAAI,IAAA,CAAK,0CAA0C,EAAE,MAAA,EAAQ,MAAM,IAAA,CAAK,IAAA,EAAM,QAAQ,CAAA;AAAA,EACxF;AACA,EAAA,iBAAA,CAAkB,GAAA,CAAI,UAAU,OAAO,CAAA;AACvC,EAAA,OAAO,OAAA;AACT;AAMO,SAAS,yBAAyB,OAAA,EAAmD;AAC1F,EAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG,OAAO,IAAA;AACjC,EAAA,MAAM,QAAQ,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,KAAM,GAAG,CAAA,CAAE,IAAI,CAAA,SAAA,EAAY,CAAA,CAAE,MAAM,CAAA,EAAA,EAAK,CAAA,CAAE,MAAM,CAAA,CAAA,CAAG,CAAA,CAAE,KAAK,IAAI,CAAA;AACzF,EAAA,OAAO,0FAA0F,KAAK,CAAA,0BAAA,CAAA;AACxG","file":"chunk-3X7VTCPG.js","sourcesContent":["/**\n * Drop MCP tools whose input schema the Claude API would reject.\n *\n * The API refuses a whole request when any one tool fails either check below,\n * so a single bad tool turns every turn of the session into a 400. The Claude\n * CLI drops such tools itself, but only after it has fetched its remote\n * feature flags; with flag fetching off (`DISABLE_TELEMETRY=1` and friends)\n * it sends them as they are. The harness therefore runs both checks itself\n * before any tool reaches the CLI:\n *\n *   1. every top-level property key matches {@link TOOL_PROPERTY_KEY_PATTERN};\n *   2. the schema is valid JSON Schema draft 2020-12 (ajv's meta-schema).\n *\n * In-process servers are inspected through their own `tools/list`, over an\n * in-memory transport, so the checked schema is byte-for-byte what the CLI\n * would receive (zod shape → JSON Schema exactly as the server converts it).\n */\nimport { InMemoryTransport } from \"@modelcontextprotocol/sdk/inMemory.js\";\nimport { createLogger } from \"@skaile/workspaces/core/logging\";\nimport type { Logger } from \"@skaile/workspaces/types\";\nimport { Ajv2020, type ValidateFunction } from \"ajv/dist/2020.js\";\n\n/** The Claude API's rule for top-level `input_schema.properties` keys. */\nexport const TOOL_PROPERTY_KEY_PATTERN = /^[a-zA-Z0-9_.-]{1,64}$/;\n\nconst DRAFT_2020_12_META = \"https://json-schema.org/draft/2020-12/schema\";\nconst PROBE_TIMEOUT_MS = 5_000;\n\n/** One tool removed before it reached the CLI. */\nexport interface DroppedMcpTool {\n  /** MCP server name as passed to the SDK (`skaile-capabilities`, `skaile-connectors`, ...). */\n  server: string;\n  /** Tool name on that server. */\n  tool: string;\n  /** Human-readable reason; safe to show to the agent. */\n  reason: string;\n}\n\nlet metaValidator: ValidateFunction | null = null;\n\nfunction draft202012MetaValidator(): ValidateFunction {\n  if (metaValidator) return metaValidator;\n  // Only the bundled meta-schema is compiled; tool schemas are validated as\n  // data. validateFormats:false — the API checks structure, not `format` strings.\n  const ajv = new Ajv2020({ strict: false, validateFormats: false, logger: false });\n  const validate = ajv.getSchema(DRAFT_2020_12_META);\n  if (!validate) throw new Error(\"ajv draft 2020-12 meta-schema is unavailable\");\n  metaValidator = validate;\n  return validate;\n}\n\n/**\n * Check only the property-key rule (rule 1).\n *\n * @returns `null` when every top-level property key is acceptable, otherwise the reason.\n */\nexport function checkToolPropertyKeys(schema: unknown): string | null {\n  if (!schema || typeof schema !== \"object\" || Array.isArray(schema)) return null;\n  const props = (schema as { properties?: unknown }).properties;\n  if (!props || typeof props !== \"object\" || Array.isArray(props)) return null;\n  for (const key of Object.keys(props)) {\n    if (!TOOL_PROPERTY_KEY_PATTERN.test(key)) {\n      return `property key ${JSON.stringify(key)} does not match ${TOOL_PROPERTY_KEY_PATTERN.source}`;\n    }\n  }\n  return null;\n}\n\n/**\n * Check one tool input schema, as it goes on the wire, against both API rules.\n *\n * @returns `null` when the schema is acceptable, otherwise the reason it is not.\n */\nexport function checkToolInputSchema(schema: unknown): string | null {\n  if (!schema || typeof schema !== \"object\" || Array.isArray(schema)) {\n    return \"input schema is not a JSON object\";\n  }\n  const keyReason = checkToolPropertyKeys(schema);\n  if (keyReason) return keyReason;\n  // Validated against the 2020-12 meta-schema regardless of the schema's own\n  // `$schema` (the MCP SDK stamps draft-07 on every in-process tool), because\n  // the API names 2020-12 in its 400. Deliberate consequence: a draft-07-only\n  // construct such as a tuple's `items: [...]` (`z.tuple()`) is dropped too.\n  const validate = draft202012MetaValidator();\n  if (!validate(schema)) {\n    const first = validate.errors?.[0];\n    const where = first?.instancePath || \"/\";\n    return `not valid JSON Schema draft 2020-12: ${where} ${first?.message ?? \"is invalid\"}`;\n  }\n  return null;\n}\n\n// ── In-process (type: \"sdk\") servers ─────────────────────────────────────────\n\ninterface RegisteredToolLike {\n  enabled?: boolean;\n  disable?: () => void;\n}\n\ninterface McpServerInstanceLike {\n  connect(transport: unknown): Promise<void>;\n  close(): Promise<void>;\n  isConnected?: () => boolean;\n  _registeredTools?: Record<string, RegisteredToolLike>;\n}\n\ninterface WireTool {\n  name: string;\n  inputSchema?: unknown;\n}\n\n/** Instances already filtered; their bad tools stay disabled for good. */\nconst filteredInstances = new WeakMap<object, DroppedMcpTool[]>();\n\nfunction sdkInstanceOf(config: unknown): McpServerInstanceLike | null {\n  if (!config || typeof config !== \"object\") return null;\n  const c = config as { type?: unknown; instance?: unknown };\n  if (c.type !== \"sdk\" || !c.instance || typeof c.instance !== \"object\") return null;\n  const inst = c.instance as McpServerInstanceLike;\n  return typeof inst.connect === \"function\" && typeof inst.close === \"function\" ? inst : null;\n}\n\nfunction withTimeout<T>(p: Promise<T>, what: string): Promise<T> {\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  const timeout = new Promise<never>((_, reject) => {\n    timer = setTimeout(() => reject(new Error(`${what} timed out`)), PROBE_TIMEOUT_MS);\n  });\n  return Promise.race([p, timeout]).finally(() => clearTimeout(timer));\n}\n\n/**\n * Speak just enough JSON-RPC to read the server's `tools/list`. A hand-rolled\n * exchange rather than the SDK `Client`, whose result validation would reject\n * the whole list over the one malformed tool this exists to find.\n */\nasync function listInProcessTools(instance: McpServerInstanceLike): Promise<WireTool[]> {\n  const [clientSide, serverSide] = InMemoryTransport.createLinkedPair();\n  const pending = new Map<number, (msg: Record<string, unknown>) => void>();\n  clientSide.onmessage = (msg) => {\n    const m = msg as Record<string, unknown>;\n    const id = typeof m.id === \"number\" ? m.id : undefined;\n    if (id === undefined) return;\n    pending.get(id)?.(m);\n    pending.delete(id);\n  };\n  let nextId = 1;\n  const call = (method: string, params: Record<string, unknown>) =>\n    withTimeout(\n      new Promise<Record<string, unknown>>((resolve, reject) => {\n        const id = nextId++;\n        pending.set(id, resolve);\n        clientSide.send({ jsonrpc: \"2.0\", id, method, params }).catch(reject);\n      }),\n      method,\n    ).then((res) => {\n      if (res.error) throw new Error(`${method} failed: ${JSON.stringify(res.error)}`);\n      return (res.result ?? {}) as Record<string, unknown>;\n    });\n\n  await clientSide.start();\n  await instance.connect(serverSide);\n  try {\n    await call(\"initialize\", {\n      protocolVersion: \"2025-06-18\",\n      capabilities: {},\n      clientInfo: { name: \"skaile-tool-schema-filter\", version: \"1.0.0\" },\n    });\n    await clientSide.send({ jsonrpc: \"2.0\", method: \"notifications/initialized\" });\n    const tools: WireTool[] = [];\n    let cursor: string | undefined;\n    do {\n      const page = await call(\"tools/list\", cursor ? { cursor } : {});\n      tools.push(...((page.tools as WireTool[] | undefined) ?? []));\n      cursor = typeof page.nextCursor === \"string\" ? page.nextCursor : undefined;\n    } while (cursor);\n    return tools;\n  } finally {\n    // Leaves the instance unconnected so the SDK can attach its own transport.\n    await instance.close().catch(() => {});\n  }\n}\n\nconst defaultLog = createLogger({ kind: \"mcp\", subkind: \"tool-schema-filter\" });\n\n/**\n * Disable every tool on an in-process MCP server whose wire input schema\n * fails {@link checkToolInputSchema}. Valid tools on the same server stay.\n *\n * Mutates the server in place (`RegisteredTool.disable()` hides a tool from\n * `tools/list` and refuses calls to it). Non-`sdk` configs (stdio/sse/http)\n * are returned untouched: the CLI spawns those, so the bridge cannot see\n * their tools. Fails open — a server that cannot be inspected is passed\n * through and a warning is logged, because blocking it would cost the\n * session every one of its valid tools.\n *\n * @returns the tools dropped from this server (empty when none or not inspectable).\n */\nexport async function filterInProcessMcpServerTools(\n  server: string,\n  config: unknown,\n  log: Logger = defaultLog,\n): Promise<DroppedMcpTool[]> {\n  const instance = sdkInstanceOf(config);\n  if (!instance) return [];\n  const cached = filteredInstances.get(instance);\n  if (cached) return cached;\n  const registered = instance._registeredTools;\n  if (!registered || Object.keys(registered).length === 0) return [];\n  if (instance.isConnected?.()) {\n    // Already attached to a live query; it was either filtered when first\n    // passed or belongs to someone else's transport. Do not steal it.\n    log.debug(\"in-process MCP server already connected; schema check skipped\", { server });\n    return [];\n  }\n\n  let wireTools: WireTool[];\n  try {\n    wireTools = await listInProcessTools(instance);\n  } catch (err) {\n    log.warn(\"could not inspect in-process MCP server tools; passing it unchanged\", {\n      server,\n      error: err instanceof Error ? err.message : String(err),\n    });\n    return [];\n  }\n\n  const dropped: DroppedMcpTool[] = [];\n  for (const tool of wireTools) {\n    const reason = checkToolInputSchema(tool.inputSchema);\n    if (!reason) continue;\n    const handle = registered[tool.name];\n    if (typeof handle?.disable !== \"function\") {\n      log.warn(\"MCP tool has an invalid input schema but cannot be disabled\", {\n        server,\n        tool: tool.name,\n        reason,\n      });\n      continue;\n    }\n    handle.disable();\n    dropped.push({ server, tool: tool.name, reason });\n    log.warn(\"MCP tool dropped: invalid input schema\", { server, tool: tool.name, reason });\n  }\n  filteredInstances.set(instance, dropped);\n  return dropped;\n}\n\n/**\n * The line the agent reads about dropped tools, mirroring what the CLI\n * reports when it drops them itself. `null` when nothing was dropped.\n */\nexport function formatDroppedToolsNotice(dropped: readonly DroppedMcpTool[]): string | null {\n  if (dropped.length === 0) return null;\n  const items = dropped.map((d) => `${d.tool} (server ${d.server}: ${d.reason})`).join(\"; \");\n  return `Some MCP tools were not loaded because the Claude API would reject their input schema: ${items}. Do not try to call them.`;\n}\n"]}

package/dist/{chunk-VIM3PWZM.js → chunk-4FVIT5DI.js}

@@ -1,4 +1,4 @@
-import { getStoreConfig, getStoreToken, storeFetch } from './chunk-25ZVWL2R.js';
+import { getStoreConfig, getStoreToken, storeFetch } from './chunk-3GMOPFWH.js';
 
 // cli/src/store-publisher.ts
 function makeHttpPublisherClient(config = getStoreConfig(), timeoutMs = 2e4) {
@@ -25,5 +25,5 @@ function makeHttpPublisherClient(config = getStoreConfig(), timeoutMs = 2e4) {
 }
 
 export { makeHttpPublisherClient };
-//# sourceMappingURL=chunk-VIM3PWZM.js.map
-//# sourceMappingURL=chunk-VIM3PWZM.js.map
+//# sourceMappingURL=chunk-4FVIT5DI.js.map
+//# sourceMappingURL=chunk-4FVIT5DI.js.map

package/dist/{chunk-VIM3PWZM.js.map → chunk-4FVIT5DI.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../cli/src/store-publisher.ts"],"names":[],"mappings":";;;AA+FO,SAAS,uBAAA,CACd,MAAA,GAAsB,cAAA,EAAe,EACrC,YAAY,GAAA,EACK;AAGjB,EAAA,MAAM,IAAA,GAAO,OACX,IAAA,EACA,IAAA,KACe;AACf,IAAA,MAAM,GAAA,GAAM,MAAM,aAAA,EAAc;AAChC,IAAA,OAAO,UAAA,CAAc,EAAE,GAAG,MAAA,EAAQ,GAAA,EAAI,EAAG,IAAA,EAAM,EAAE,SAAA,EAAW,GAAG,IAAA,EAAM,CAAA;AAAA,EACvE,CAAA;AACA,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,MAAM,IAAA,CAAK,YAAY,CAAA;AAAA,IAC3B,UAAA,EAAY,CAAC,IAAA,KAAS,IAAA,CAAK,mBAAmB,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,CAAA;AAAA,IACtE,WAAA,EAAa,MAAM,IAAA,CAAK,iBAAiB,CAAA;AAAA,IACzC,UAAA,EAAY,CAAC,EAAA,KAAO,IAAA,CAAK,CAAA,gBAAA,EAAmB,EAAE,CAAA,KAAA,CAAA,EAAS,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,IAAI,CAAA;AAAA,IACnF,QAAQ,CAAC,KAAA,KAAU,IAAA,CAAK,CAAA,aAAA,EAAgB,KAAK,CAAA,CAAE,CAAA;AAAA,IAC/C,kBAAkB,CAAC,EAAA,KAAO,IAAA,CAAK,CAAA,gBAAA,EAAmB,EAAE,CAAA,WAAA,CAAa,CAAA;AAAA,IACjE,cAAc,CAAC,EAAA,KAAO,IAAA,CAAK,CAAA,eAAA,EAAkB,EAAE,CAAA,QAAA,CAAU,CAAA;AAAA,IACzD,YAAA,EAAc,CAAC,EAAA,EAAI,IAAA,EAAM,WACvB,IAAA,CAAK,CAAA,eAAA,EAAkB,EAAE,CAAA,QAAA,CAAA,EAAY;AAAA,MACnC,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA;AAAA,MACA,GAAI,SAAS,EAAE,MAAA,EAAQ,EAAE,MAAA,EAAQ,GAAA,EAAI,EAAE,GAAI;AAAC,KAC7C,CAAA;AAAA,IACH,cAAA,EAAgB,CAAC,EAAA,KAAO,IAAA,CAAK,CAAA,eAAA,EAAkB,EAAE,CAAA,UAAA,CAAA,EAAc,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,IAAI,CAAA;AAAA,IAC3F,qBAAA,EAAuB,CAAC,EAAA,KACtB,IAAA,CAAK,sBAAsB,kBAAA,CAAmB,EAAE,CAAC,CAAA,aAAA,CAAe;AAAA,GACpE;AACF","file":"chunk-VIM3PWZM.js","sourcesContent":["/**\n * Typed REST client for the AI Asset Store **publisher** surface — the\n * curator-publish flow (`skaile source manifest publish` / `yank`). Thin\n * wrappers over {@link storeFetch}; every method maps 1:1 to an `/api/v1/…`\n * endpoint. The {@link PublisherClient} interface is injectable so the\n * orchestration in `commands/source-manifest-publish.ts` can be unit-tested\n * against a fake without a live store.\n *\n * @docLink cli/dev-guide#store-publisher\n */\n\nimport { getStoreConfig, getStoreToken, type StoreConfig, storeFetch } from \"./store-client.ts\";\n\n/**\n * The publisher REST surface used by the curator-publish flow. Kept minimal —\n * only the endpoints `runPublish` / `runYank` actually call. Response shapes\n * are narrowed to the fields the orchestration reads (the server returns more).\n */\nexport interface PublisherClient {\n  /**\n   * Identity of the caller. `username` is the Keycloak login (personal-tier\n   * namespace); `githubLogin` is the verified GitHub handle when connected —\n   * the namespace to publish under when it differs from the login.\n   */\n  me(): Promise<{ username: string; githubLogin?: string | null }>;\n  /** Register (or re-register) a source; returns the created/existing row id. */\n  sourcesAdd(body: {\n    url: string;\n    ref: string;\n    sidecarUrl?: string;\n    sidecarRef?: string;\n    /**\n     * Target publisher namespace (the manifest's `publisher`). When it differs\n     * from the caller's login username, the store resolves the CLAIMED Publisher\n     * for it (the store must already have the claim). Omitted → the store\n     * defaults to `@<username>` (personal).\n     */\n    namespace?: string;\n  }): Promise<{ id: string }>;\n  /** List sources — used to recover an id when `sourcesAdd` rejects a dup url. */\n  sourcesList(): Promise<Array<{ id: string; url: string }>>;\n  /** Kick off a source sync; returns the async job id to poll. */\n  sourceSync(id: string): Promise<{ jobId: string }>;\n  /** Poll a job's terminal status + per-item results. */\n  jobGet(\n    jobId: string,\n  ): Promise<{ status: string; items?: Array<{ label: string; status: string; error?: string }> }>;\n  /** Discovered publishable candidates for a synced source. */\n  sourceCandidates(id: string): Promise<\n    Array<{\n      id: string;\n      name: string;\n      version: string;\n      kind: string;\n      published: boolean;\n      assetRoot: string;\n    }>\n  >;\n  /** Per-asset preview — the discovered file set + resolved candidate metadata. */\n  assetPreview(id: string): Promise<{\n    discoveredFiles: string[];\n    candidate: { name: string; version: string; kind: string; publisherNamespace: string };\n  }>;\n  /**\n   * Publish one asset. `dryRun` returns the would-be `{ manifest }` without\n   * launching a job; the normal path returns `{ jobId }`.\n   */\n  assetPublish(\n    id: string,\n    body: { ref: string; files: string[] },\n    dryRun?: boolean,\n  ): Promise<{ jobId?: string; manifest?: unknown }>;\n  /** Retract a published asset. Response body is ignored. */\n  assetUnpublish(id: string): Promise<unknown>;\n  /**\n   * Read-only \"can I publish under `@<ns>` right now, and if not, what's the\n   * path?\" probe. Backs the `publish --dry-run` namespace status line; its\n   * `message` is store-authored and meant to be surfaced verbatim.\n   */\n  namespaceAvailability(ns: string): Promise<{\n    namespace: string;\n    status: \"owned-by-you\" | \"claimable-by-you\" | \"reserved\" | \"available\";\n    claimMethod?: string;\n    message: string;\n  }>;\n}\n\n/**\n * Construct the real HTTP-backed {@link PublisherClient}. Every call carries a\n * longer timeout than the default store client because publish/sync trigger\n * server-side clone work.\n *\n * @param config - Store connection config; defaults to {@link getStoreConfig}.\n * @param timeoutMs - Per-request abort timeout (default 20s).\n */\nexport function makeHttpPublisherClient(\n  config: StoreConfig = getStoreConfig(),\n  timeoutMs = 20_000,\n): PublisherClient {\n  // Acquire a fresh Keycloak token per call (device-flow session in\n  // ~/.skaile/auth.json, refreshed on demand) rather than a static config.jwt.\n  const call = async <T>(\n    path: string,\n    opts?: { method?: string; body?: unknown; params?: Record<string, string> },\n  ): Promise<T> => {\n    const jwt = await getStoreToken();\n    return storeFetch<T>({ ...config, jwt }, path, { timeoutMs, ...opts });\n  };\n  return {\n    me: () => call(\"/api/v1/me\"),\n    sourcesAdd: (body) => call(\"/api/v1/sources\", { method: \"POST\", body }),\n    sourcesList: () => call(\"/api/v1/sources\"),\n    sourceSync: (id) => call(`/api/v1/sources/${id}/sync`, { method: \"POST\", body: {} }),\n    jobGet: (jobId) => call(`/api/v1/jobs/${jobId}`),\n    sourceCandidates: (id) => call(`/api/v1/sources/${id}/candidates`),\n    assetPreview: (id) => call(`/api/v1/assets/${id}/preview`),\n    assetPublish: (id, body, dryRun) =>\n      call(`/api/v1/assets/${id}/publish`, {\n        method: \"POST\",\n        body,\n        ...(dryRun ? { params: { dryRun: \"1\" } } : {}),\n      }),\n    assetUnpublish: (id) => call(`/api/v1/assets/${id}/unpublish`, { method: \"POST\", body: {} }),\n    namespaceAvailability: (ns) =>\n      call(`/api/v1/namespaces/${encodeURIComponent(ns)}/availability`),\n  };\n}\n"]}
+{"version":3,"sources":["../cli/src/store-publisher.ts"],"names":[],"mappings":";;;AA+FO,SAAS,uBAAA,CACd,MAAA,GAAsB,cAAA,EAAe,EACrC,YAAY,GAAA,EACK;AAGjB,EAAA,MAAM,IAAA,GAAO,OACX,IAAA,EACA,IAAA,KACe;AACf,IAAA,MAAM,GAAA,GAAM,MAAM,aAAA,EAAc;AAChC,IAAA,OAAO,UAAA,CAAc,EAAE,GAAG,MAAA,EAAQ,GAAA,EAAI,EAAG,IAAA,EAAM,EAAE,SAAA,EAAW,GAAG,IAAA,EAAM,CAAA;AAAA,EACvE,CAAA;AACA,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,MAAM,IAAA,CAAK,YAAY,CAAA;AAAA,IAC3B,UAAA,EAAY,CAAC,IAAA,KAAS,IAAA,CAAK,mBAAmB,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,CAAA;AAAA,IACtE,WAAA,EAAa,MAAM,IAAA,CAAK,iBAAiB,CAAA;AAAA,IACzC,UAAA,EAAY,CAAC,EAAA,KAAO,IAAA,CAAK,CAAA,gBAAA,EAAmB,EAAE,CAAA,KAAA,CAAA,EAAS,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,IAAI,CAAA;AAAA,IACnF,QAAQ,CAAC,KAAA,KAAU,IAAA,CAAK,CAAA,aAAA,EAAgB,KAAK,CAAA,CAAE,CAAA;AAAA,IAC/C,kBAAkB,CAAC,EAAA,KAAO,IAAA,CAAK,CAAA,gBAAA,EAAmB,EAAE,CAAA,WAAA,CAAa,CAAA;AAAA,IACjE,cAAc,CAAC,EAAA,KAAO,IAAA,CAAK,CAAA,eAAA,EAAkB,EAAE,CAAA,QAAA,CAAU,CAAA;AAAA,IACzD,YAAA,EAAc,CAAC,EAAA,EAAI,IAAA,EAAM,WACvB,IAAA,CAAK,CAAA,eAAA,EAAkB,EAAE,CAAA,QAAA,CAAA,EAAY;AAAA,MACnC,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA;AAAA,MACA,GAAI,SAAS,EAAE,MAAA,EAAQ,EAAE,MAAA,EAAQ,GAAA,EAAI,EAAE,GAAI;AAAC,KAC7C,CAAA;AAAA,IACH,cAAA,EAAgB,CAAC,EAAA,KAAO,IAAA,CAAK,CAAA,eAAA,EAAkB,EAAE,CAAA,UAAA,CAAA,EAAc,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,IAAI,CAAA;AAAA,IAC3F,qBAAA,EAAuB,CAAC,EAAA,KACtB,IAAA,CAAK,sBAAsB,kBAAA,CAAmB,EAAE,CAAC,CAAA,aAAA,CAAe;AAAA,GACpE;AACF","file":"chunk-4FVIT5DI.js","sourcesContent":["/**\n * Typed REST client for the AI Asset Store **publisher** surface — the\n * curator-publish flow (`skaile source manifest publish` / `yank`). Thin\n * wrappers over {@link storeFetch}; every method maps 1:1 to an `/api/v1/…`\n * endpoint. The {@link PublisherClient} interface is injectable so the\n * orchestration in `commands/source-manifest-publish.ts` can be unit-tested\n * against a fake without a live store.\n *\n * @docLink cli/dev-guide#store-publisher\n */\n\nimport { getStoreConfig, getStoreToken, type StoreConfig, storeFetch } from \"./store-client.ts\";\n\n/**\n * The publisher REST surface used by the curator-publish flow. Kept minimal —\n * only the endpoints `runPublish` / `runYank` actually call. Response shapes\n * are narrowed to the fields the orchestration reads (the server returns more).\n */\nexport interface PublisherClient {\n  /**\n   * Identity of the caller. `username` is the Keycloak login (personal-tier\n   * namespace); `githubLogin` is the verified GitHub handle when connected —\n   * the namespace to publish under when it differs from the login.\n   */\n  me(): Promise<{ username: string; githubLogin?: string | null }>;\n  /** Register (or re-register) a source; returns the created/existing row id. */\n  sourcesAdd(body: {\n    url: string;\n    ref: string;\n    sidecarUrl?: string;\n    sidecarRef?: string;\n    /**\n     * Target publisher namespace (the manifest's `publisher`). When it differs\n     * from the caller's login username, the store resolves the CLAIMED Publisher\n     * for it (the store must already have the claim). Omitted → the store\n     * defaults to `@<username>` (personal).\n     */\n    namespace?: string;\n  }): Promise<{ id: string }>;\n  /** List sources — used to recover an id when `sourcesAdd` rejects a dup url. */\n  sourcesList(): Promise<Array<{ id: string; url: string }>>;\n  /** Kick off a source sync; returns the async job id to poll. */\n  sourceSync(id: string): Promise<{ jobId: string }>;\n  /** Poll a job's terminal status + per-item results. */\n  jobGet(\n    jobId: string,\n  ): Promise<{ status: string; items?: Array<{ label: string; status: string; error?: string }> }>;\n  /** Discovered publishable candidates for a synced source. */\n  sourceCandidates(id: string): Promise<\n    Array<{\n      id: string;\n      name: string;\n      version: string;\n      kind: string;\n      published: boolean;\n      assetRoot: string;\n    }>\n  >;\n  /** Per-asset preview — the discovered file set + resolved candidate metadata. */\n  assetPreview(id: string): Promise<{\n    discoveredFiles: string[];\n    candidate: { name: string; version: string; kind: string; publisherNamespace: string };\n  }>;\n  /**\n   * Publish one asset. `dryRun` returns the would-be `{ manifest }` without\n   * launching a job; the normal path returns `{ jobId }`.\n   */\n  assetPublish(\n    id: string,\n    body: { ref: string; files: string[] },\n    dryRun?: boolean,\n  ): Promise<{ jobId?: string; manifest?: unknown }>;\n  /** Retract a published asset. Response body is ignored. */\n  assetUnpublish(id: string): Promise<unknown>;\n  /**\n   * Read-only \"can I publish under `@<ns>` right now, and if not, what's the\n   * path?\" probe. Backs the `publish --dry-run` namespace status line; its\n   * `message` is store-authored and meant to be surfaced verbatim.\n   */\n  namespaceAvailability(ns: string): Promise<{\n    namespace: string;\n    status: \"owned-by-you\" | \"claimable-by-you\" | \"reserved\" | \"available\";\n    claimMethod?: string;\n    message: string;\n  }>;\n}\n\n/**\n * Construct the real HTTP-backed {@link PublisherClient}. Every call carries a\n * longer timeout than the default store client because publish/sync trigger\n * server-side clone work.\n *\n * @param config - Store connection config; defaults to {@link getStoreConfig}.\n * @param timeoutMs - Per-request abort timeout (default 20s).\n */\nexport function makeHttpPublisherClient(\n  config: StoreConfig = getStoreConfig(),\n  timeoutMs = 20_000,\n): PublisherClient {\n  // Acquire a fresh Keycloak token per call (device-flow session in\n  // ~/.skaile/auth.json, refreshed on demand) rather than a static config.jwt.\n  const call = async <T>(\n    path: string,\n    opts?: { method?: string; body?: unknown; params?: Record<string, string> },\n  ): Promise<T> => {\n    const jwt = await getStoreToken();\n    return storeFetch<T>({ ...config, jwt }, path, { timeoutMs, ...opts });\n  };\n  return {\n    me: () => call(\"/api/v1/me\"),\n    sourcesAdd: (body) => call(\"/api/v1/sources\", { method: \"POST\", body }),\n    sourcesList: () => call(\"/api/v1/sources\"),\n    sourceSync: (id) => call(`/api/v1/sources/${id}/sync`, { method: \"POST\", body: {} }),\n    jobGet: (jobId) => call(`/api/v1/jobs/${jobId}`),\n    sourceCandidates: (id) => call(`/api/v1/sources/${id}/candidates`),\n    assetPreview: (id) => call(`/api/v1/assets/${id}/preview`),\n    assetPublish: (id, body, dryRun) =>\n      call(`/api/v1/assets/${id}/publish`, {\n        method: \"POST\",\n        body,\n        ...(dryRun ? { params: { dryRun: \"1\" } } : {}),\n      }),\n    assetUnpublish: (id) => call(`/api/v1/assets/${id}/unpublish`, { method: \"POST\", body: {} }),\n    namespaceAvailability: (ns) =>\n      call(`/api/v1/namespaces/${encodeURIComponent(ns)}/availability`),\n  };\n}\n"]}

package/dist/{chunk-IF6IA3PZ.js → chunk-4MUDQCBP.js}

@@ -1,7 +1,7 @@
 import { isAgentNode, isSubpromptNode, isSubFlowNode, nodeBindings, isRouterNode, nodeIsOptional, nodeSkillId, nodeLabel, isActiveRuntimeNode } from './chunk-7RGTAEG6.js';
-import { parseFlowDefinition } from './chunk-X3RMRJNR.js';
+import { parseFlowDefinition } from './chunk-JRN5QF4C.js';
 import { resolveFlowBindings, stableFlowJson, evaluateFlowExpression, FlowExpressionError, getConsumedOutputSchema, compileOutputFieldsSchema } from './chunk-NUELZWCF.js';
-import { projectAssetRoots } from './chunk-N46LQR46.js';
+import { projectAssetRoots } from './chunk-VMVDAZLA.js';
 import { findKindDirs } from './chunk-MWXYN6NY.js';
 import * as path2 from 'path';
 import path2__default from 'path';
@@ -979,5 +979,5 @@ function findFlowFileInRoots(flowId, roots, opts = {}) {
 }
 
 export { FLOW_FILE_EXTENSIONS, FlowManifestSchema, appendAttempt, availableRouterFrontier, buildFlowExpressionContext, computeFlowState, computeFlowStateFromSnapshots, computeSkippable, countFailedAttempts, deriveCheckEvidence, evaluateRouterSelection, findFlowFileInRoots, flowFileCandidates, flowKindProvider, flowLookupRoots, hasAutomaticRetryBudget, interpolateNodeInstruction, isActiveExecutionExpired, isBlocking, loadAllFlowEntries, loadAllFlows, loadFlow, loadFlowEntriesFromDir, loadFlowsFromDir, nextAttemptNumber, persistedRouterSelection, planRouterSkips, producerOutputObtainedBy, projectAiAssetsRoots, remainingActiveExecutionMs, resolveAvailableRouter, resolveFlowOutputFields, resolveNextNodes, resolveNodeBindings, resolveTerminalFailureStatus, routerSelectionOutput, unsettledRouterBranchIds, validateConsumedNodeOutput, validateFlow };
-//# sourceMappingURL=chunk-IF6IA3PZ.js.map
-//# sourceMappingURL=chunk-IF6IA3PZ.js.map
+//# sourceMappingURL=chunk-4MUDQCBP.js.map
+//# sourceMappingURL=chunk-4MUDQCBP.js.map