@skaile/workspaces 5.19.0 → 6.1.0

package/dist/{chunk-C7WBGSBV.js → chunk-ABFPSVIS.js}

@@ -1,5 +1,5 @@
-import { normalizeAnthropicModel, ANTHROPIC_MODEL_ALIASES } from './chunk-335ENCCS.js';
-import { buildAgentPromptSections } from './chunk-N46LQR46.js';
+import { normalizeAnthropicModel, ANTHROPIC_MODEL_ALIASES } from './chunk-E572OHGY.js';
+import { buildAgentPromptSections } from './chunk-VMVDAZLA.js';
 import { existsSync, readFileSync, mkdirSync, writeFileSync, lstatSync, unlinkSync, readdirSync } from 'fs';
 import { join, dirname, relative, resolve, normalize, basename } from 'path';
 import { stringify } from 'yaml';
@@ -292,13 +292,13 @@ ${enrichedSoul}`,
 };
 var noop = () => {
 };
-function renderAgentToFramework(input, driverTarget, log = noop) {
-  const renderer = AGENT_RENDERERS[driverTarget];
+function renderAgentToFramework(input, harnessTarget, log = noop) {
+  const renderer = AGENT_RENDERERS[harnessTarget];
   if (!renderer) {
     return {
       created: [],
       changed: [],
-      warnings: [`No renderer for framework "${driverTarget}"`]
+      warnings: [`No renderer for framework "${harnessTarget}"`]
     };
   }
   const result = renderer(input);
@@ -311,10 +311,10 @@ var AGENT_RENDERERS = {
   omp: ompRenderer,
   codex: codexRenderer
 };
-function driverTargetSupportsAgents(driverTarget) {
-  return driverTarget in AGENT_RENDERERS;
+function harnessTargetSupportsAgents(harnessTarget) {
+  return harnessTarget in AGENT_RENDERERS;
 }
 
-export { AGENT_RENDERERS, CODEX_IDENTITY_DIR, claudeCodeRenderer, codexRenderer, driverTargetSupportsAgents, ompRenderer, renderAgentToFramework };
-//# sourceMappingURL=chunk-C7WBGSBV.js.map
-//# sourceMappingURL=chunk-C7WBGSBV.js.map
+export { AGENT_RENDERERS, CODEX_IDENTITY_DIR, claudeCodeRenderer, codexRenderer, harnessTargetSupportsAgents, ompRenderer, renderAgentToFramework };
+//# sourceMappingURL=chunk-ABFPSVIS.js.map
+//# sourceMappingURL=chunk-ABFPSVIS.js.map

package/dist/chunk-ABFPSVIS.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../asset-manager/src/renderers.ts"],"names":["stringifyYaml"],"mappings":";;;;;;AA4GA,SAAS,YAAY,IAAA,EAAoB;AACvC,EAAA,IAAI;AACF,IAAA,IAAI,UAAU,IAAI,CAAA,CAAE,cAAA,EAAe,aAAc,IAAI,CAAA;AAAA,EACvD,CAAA,CAAA,MAAQ;AAAA,EAER;AACF;AAQA,SAAS,UAAA,CACP,QAAA,EACA,OAAA,EACA,aAAA,EACA,SACA,OAAA,EACM;AACN,EAAA,MAAM,GAAA,GAAM,QAAA,CAAS,aAAA,EAAe,QAAQ,CAAA;AAC5C,EAAA,OAAA,CAAQ,KAAK,GAAG,CAAA;AAChB,EAAA,WAAA,CAAY,QAAQ,CAAA;AACpB,EAAA,IAAI,UAAA,CAAW,QAAQ,CAAA,EAAG;AACxB,IAAA,IAAI;AACF,MAAA,IAAI,YAAA,CAAa,QAAA,EAAU,OAAO,CAAA,KAAM,OAAA,EAAS;AAAA,IACnD,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AACA,EAAA,SAAA,CAAU,QAAQ,QAAQ,CAAA,EAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAChD,EAAA,aAAA,CAAc,QAAA,EAAU,SAAS,OAAO,CAAA;AACxC,EAAA,OAAA,CAAQ,KAAK,GAAG,CAAA;AAClB;AAeA,SAAS,kBACP,IAAA,EACA,KAAA,EACA,QACA,WAAA,EACA,YAAA,EACA,oBACA,gBAAA,EACQ;AACR,EAAA,MAAM,WAAW,wBAAA,CAAyB;AAAA,IACxC,IAAA;AAAA,IACA,WAAA,EAAa,KAAA;AAAA,IACb,MAAA;AAAA,IACA,SAAA,EAAW,WAAA;AAAA,IACX,SAAA,EAAW,YAAA;AAAA,IACX,kBAAA;AAAA,IACA;AAAA,GACD,CAAA;AACD,EAAA,OAAO,CAAA,EAAG,QAAA,CAAS,GAAA,CAAI,CAAC,CAAA,KAAM,EAAE,IAAI,CAAA,CAAE,IAAA,CAAK,MAAM,CAAC;AAAA,CAAA;AACpD;AAGA,SAAS,sBAAsB,CAAA,EAAmB;AAEhD,EAAA,OAAO,CAAA,CAAE,OAAA,CAAQ,MAAA,EAAQ,WAAW,CAAA;AACtC;AASA,SAAS,aAAa,KAAA,EAAmE;AACvF,EAAA,IAAI,CAAC,OAAO,OAAO,MAAA;AACnB,EAAA,MAAM,UAAA,GAAa,CAAC,CAAA,KACjB,uBAAA,CAA8C,SAAS,CAAC,CAAA;AAC3D,EAAA,MAAM,EAAE,SAAA,EAAW,QAAA,EAAU,GAAG,MAAK,GAAI,KAAA;AACzC,EAAA,MAAM,IAAA,GAA4C,EAAE,GAAG,IAAA,EAAK;AAC5D,EAAA,IAAI,aAAa,CAAC,UAAA,CAAW,SAAS,CAAA,OAAQ,SAAA,GAAY,SAAA;AAC1D,EAAA,MAAM,SAAA,GAAA,CAAa,QAAA,IAAY,EAAC,EAAG,MAAA,CAAO,CAAC,CAAA,KAAM,CAAC,UAAA,CAAW,CAAC,CAAC,CAAA;AAC/D,EAAA,IAAI,SAAA,CAAU,MAAA,GAAS,CAAA,EAAG,IAAA,CAAK,QAAA,GAAW,SAAA;AAC1C,EAAA,OAAO,OAAO,IAAA,CAAK,IAAI,CAAA,CAAE,MAAA,GAAS,IAAI,IAAA,GAAO,MAAA;AAC/C;AAGA,IAAM,SAAA,uBAAgB,GAAA,CAAI,CAAC,QAAQ,WAAA,EAAa,cAAA,EAAgB,aAAa,CAAC,CAAA;AAG9E,SAAS,QAAA,CAAS,IAAA,EAAc,EAAA,EAAY,aAAA,EAAuB,OAAA,EAAyB;AAC1F,EAAA,MAAM,IAAA,GAAO,UAAU,IAAI,CAAA;AAC3B,EAAA,IAAI,IAAA,CAAK,gBAAe,EAAG;AAC3B,EAAA,IAAI,IAAA,CAAK,aAAY,EAAG;AACtB,IAAA,KAAA,MAAW,IAAA,IAAQ,WAAA,CAAY,IAAI,CAAA,EAAG;AACpC,MAAA,IAAI,UAAU,GAAA,CAAI,IAAI,KAAK,IAAA,CAAK,QAAA,CAAS,MAAM,CAAA,EAAG;AAClD,MAAA,QAAA,CAAS,IAAA,CAAK,MAAM,IAAI,CAAA,EAAG,KAAK,EAAA,EAAI,IAAI,CAAA,EAAG,aAAA,EAAe,OAAO,CAAA;AAAA,IACnE;AACA,IAAA;AAAA,EACF;AACA,EAAA,IAAI,CAAC,IAAA,CAAK,MAAA,EAAO,EAAG;AACpB,EAAA,MAAM,KAAA,GAAQ,aAAa,IAAI,CAAA;AAC/B,EAAA,WAAA,CAAY,EAAE,CAAA;AACd,EAAA,IAAI,UAAA,CAAW,EAAE,CAAA,EAAG;AAClB,IAAA,IAAI;AACF,MAAA,IAAI,KAAA,CAAM,MAAA,CAAO,YAAA,CAAa,EAAE,CAAC,CAAA,EAAG;AAAA,IACtC,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AACA,EAAA,SAAA,CAAU,QAAQ,EAAE,CAAA,EAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAC1C,EAAA,aAAA,CAAc,IAAI,KAAK,CAAA;AACvB,EAAA,OAAA,CAAQ,IAAA,CAAK,QAAA,CAAS,aAAA,EAAe,EAAE,CAAC,CAAA;AAC1C;AAQA,SAAS,oBACP,QAAA,EACA,MAAA,EACA,OAAA,EACA,aAAA,EACA,SACA,QAAA,EACwC;AACxC,EAAA,IAAI,CAAC,QAAQ,OAAO,QAAA;AACpB,EAAA,OAAO,QAAA,CAAS,GAAA,CAAI,CAAC,IAAA,KAAS;AAC5B,IAAA,IAAI,CAAC,IAAA,CAAK,GAAA,CAAI,UAAA,CAAW,IAAI,CAAA,IAAK,CAAC,IAAA,CAAK,GAAA,CAAI,UAAA,CAAW,KAAK,CAAA,EAAG,OAAO,IAAA;AACtE,IAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,MAAA,EAAQ,IAAA,CAAK,GAAG,CAAA;AACrC,IAAA,IAAI,CAAC,UAAA,CAAW,IAAI,CAAA,EAAG;AACrB,MAAA,QAAA,CAAS,IAAA,CAAK,eAAe,IAAA,CAAK,GAAG,iBAAiB,IAAI,CAAA,kBAAA,EAAqB,OAAO,CAAA,CAAE,CAAA;AACxF,MAAA,OAAO,IAAA;AAAA,IACT;AACA,IAAA,MAAM,GAAA,GAAM,SAAA,CAAU,IAAA,CAAK,GAAG,CAAA;AAC9B,IAAA,MAAM,MAAA,GAAS,CAAC,GAAA,CAAI,UAAA,CAAW,IAAI,CAAA;AACnC,IAAA,MAAM,SAAS,MAAA,GAAS,GAAA,GAAM,KAAK,UAAA,EAAY,QAAA,CAAS,IAAI,CAAC,CAAA;AAC7D,IAAA,QAAA,CAAS,MAAM,IAAA,CAAK,OAAA,EAAS,MAAM,CAAA,EAAG,eAAe,OAAO,CAAA;AAC5D,IAAA,OAAO,MAAA,GAAS,OAAO,EAAE,GAAG,MAAM,GAAA,EAAK,CAAA,EAAA,EAAK,MAAM,CAAA,CAAA,EAAG;AAAA,EACvD,CAAC,CAAA;AACH;AAyBO,IAAM,qBAAoC,CAAC;AAAA,EAChD,QAAA;AAAA,EACA,IAAA;AAAA,EACA,KAAA;AAAA,EACA,MAAA;AAAA,EACA,SAAA;AAAA,EACA,cAAA;AAAA,EACA,aAAA;AAAA,EACA,WAAA;AAAA,EACA,YAAA;AAAA,EACA,kBAAA;AAAA,EACA,gBAAA;AAAA,EACA,SAAA;AAAA,EACA,MAAA;AAAA,EACA;AACF,CAAA,KAAM;AACJ,EAAA,MAAM,UAAoB,EAAC;AAC3B,EAAA,MAAM,UAAoB,EAAC;AAC3B,EAAA,MAAM,WAAqB,EAAC;AAE5B,EAAA,MAAM,WAAA,GAAuC;AAAA,IAC3C,IAAA,EAAM,SAAA;AAAA,IACN,WAAA,EAAa,QAAA,CAAS,WAAA,IAAe,CAAA,EAAG,SAAS,CAAA,MAAA;AAAA,GACnD;AAKA,EAAA,IAAI,QAAA,CAAS,OAAO,SAAA,EAAW;AAC7B,IAAA,MAAM,GAAA,GAAM,SAAS,KAAA,CAAM,SAAA;AAC3B,IAAA,MAAM,UAAA,GAAa,wBAAwB,GAAG,CAAA;AAC9C,IAAA,IAAI,eAAe,GAAA,EAAK;AACtB,MAAA,QAAA,CAAS,IAAA;AAAA,QACP,CAAA,MAAA,EAAS,SAAS,CAAA,SAAA,EAAY,GAAG,0DAA0D,UAAU,CAAA,qBAAA;AAAA,OACvG;AAAA,IACF;AACA,IAAA,WAAA,CAAY,KAAA,GAAQ,UAAA;AAAA,EACtB;AAGA,EAAA,IAAI,QAAA,CAAS,KAAA,EAAO,OAAA,EAAS,MAAA,EAAQ;AACnC,IAAA,WAAA,CAAY,KAAA,GAAQ,QAAA,CAAS,KAAA,CAAM,OAAA,CAAQ,KAAK,IAAI,CAAA;AAAA,EACtD;AACA,EAAA,IAAI,QAAA,CAAS,KAAA,EAAO,MAAA,EAAQ,MAAA,EAAQ;AAClC,IAAA,WAAA,CAAY,eAAA,GAAkB,QAAA,CAAS,KAAA,CAAM,MAAA,CAAO,KAAK,IAAI,CAAA;AAAA,EAC/D;AAEA,EAAA,IAAI,MAAA,CAAO,MAAA,GAAS,CAAA,EAAG,WAAA,CAAY,MAAA,GAAS,MAAA;AAC5C,EAAA,IAAI,UAAA,CAAW,MAAA,GAAS,CAAA,EAAG,WAAA,CAAY,UAAA,GAAa,UAAA;AAGpD,EAAA,IAAI,QAAA,CAAS,SAAS,SAAA,EAAW;AAC/B,IAAA,WAAA,CAAY,QAAA,GAAW,SAAS,OAAA,CAAQ,SAAA;AAAA,EAC1C;AACA,EAAA,IAAI,SAAA,KAAc,MAAA,IAAU,QAAA,CAAS,OAAA,EAAS,eAAe,IAAA,EAAM;AACjE,IAAA,WAAA,CAAY,UAAA,GAAa,IAAA;AAAA,EAC3B;AAGA,EAAA,IAAI,SAAS,QAAA,EAAU,KAAA,EAAO,WAAA,CAAY,KAAA,GAAQ,SAAS,QAAA,CAAS,KAAA;AACpE,EAAA,IAAI,SAAS,QAAA,EAAU,MAAA,EAAQ,WAAA,CAAY,MAAA,GAAS,SAAS,QAAA,CAAS,MAAA;AACtE,EAAA,IAAI,SAAS,QAAA,EAAU,SAAA,EAAW,WAAA,CAAY,SAAA,GAAY,SAAS,QAAA,CAAS,SAAA;AAE5E,EAAA,MAAM,IAAA,GAAO,iBAAA;AAAA,IACX,IAAA;AAAA,IACA,KAAA;AAAA,IACA,MAAA;AAAA,IACA,WAAA;AAAA,IACA,YAAA;AAAA,IACA,kBAAA;AAAA,IACA;AAAA,GACF;AACA,EAAA,MAAM,OAAA,GAAU,CAAA;AAAA,EAAQA,SAAA,CAAc,WAAW,CAAA,CAAE,IAAA,EAAM;AAAA;;AAAA,EAAY,IAAI,CAAA,CAAA;AACzE,EAAA,MAAM,QAAA,GAAW,IAAA,CAAK,cAAA,EAAgB,CAAA,EAAG,SAAS,CAAA,GAAA,CAAK,CAAA;AACvD,EAAA,UAAA,CAAW,QAAA,EAAU,OAAA,EAAS,aAAA,EAAe,OAAA,EAAS,OAAO,CAAA;AAE7D,EAAA,OAAO,EAAE,OAAA,EAAS,OAAA,EAAS,QAAA,EAAS;AACtC;AAYA,IAAM,iBAAiB,CAAC,OAAA,EAAS,MAAA,EAAQ,WAAA,EAAa,gBAAgB,MAAM,CAAA;AAG5E,SAAS,iBAAiB,KAAA,EAAwD;AAChF,EAAA,MAAM,OAAA,GAAU,KAAA,EAAO,OAAA,IAAW,EAAC;AACnC,EAAA,MAAM,SAAS,IAAI,GAAA,CAAI,KAAA,EAAO,MAAA,IAAU,EAAE,CAAA;AAC1C,EAAA,IAAI,OAAA,CAAQ,SAAS,CAAA,EAAG;AACtB,IAAA,OAAO,OAAA,CAAQ,IAAA,CAAK,CAAC,CAAA,KAAM,CAAC,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,IAAM,cAAA,CAAqC,QAAA,CAAS,CAAC,CAAC,IAC1F,MAAA,GACA,WAAA;AAAA,EACN;AAEA,EAAA,OAAO,cAAA,CAAe,MAAM,CAAC,CAAA,KAAM,OAAO,GAAA,CAAI,CAAC,CAAC,CAAA,GAAI,WAAA,GAAc,MAAA;AACpE;AAGO,IAAM,kBAAA,GAAqB;AAiB3B,IAAM,gBAA+B,CAAC;AAAA,EAC3C,QAAA;AAAA,EACA,IAAA;AAAA,EACA,KAAA;AAAA,EACA,MAAA;AAAA,EACA,SAAA;AAAA,EACA,cAAA;AAAA,EACA,aAAA;AAAA,EACA,WAAA;AAAA,EACA,YAAA;AAAA,EACA,kBAAA;AAAA,EACA;AACF,CAAA,KAAM;AACJ,EAAA,MAAM,UAAoB,EAAC;AAC3B,EAAA,MAAM,UAAoB,EAAC;AAC3B,EAAA,MAAM,WAAqB,EAAC;AAE5B,EAAA,MAAM,YAAA,GAAe,iBAAA;AAAA,IACnB,IAAA;AAAA,IACA,KAAA;AAAA,IACA,MAAA;AAAA,IACA,WAAA;AAAA,IACA,YAAA;AAAA,IACA,kBAAA;AAAA,IACA;AAAA,GACF;AACA,EAAA,MAAM,OAAA,GAAU,sBAAsB,YAAY,CAAA;AAElD,EAAA,MAAM,KAAA,GAAkB;AAAA,IACtB,CAAA,OAAA,EAAU,IAAA,CAAK,SAAA,CAAU,SAAS,CAAC,CAAA,CAAA;AAAA,IACnC,CAAA,cAAA,EAAiB,KAAK,SAAA,CAAU,QAAA,CAAS,eAAe,CAAA,EAAG,SAAS,QAAQ,CAAC,CAAA;AAAA,GAC/E;AAEA,EAAA,MAAM,KAAA,GAAQ,YAAA,CAAa,QAAA,CAAS,KAAK,CAAA,EAAG,SAAA;AAC5C,EAAA,IAAI,KAAA,QAAa,IAAA,CAAK,CAAA,QAAA,EAAW,KAAK,SAAA,CAAU,KAAK,CAAC,CAAA,CAAE,CAAA;AACxD,EAAA,MAAM,WAAA,GAAc,gBAAA,CAAiB,QAAA,CAAS,KAAK,CAAA;AACnD,EAAA,IAAI,WAAA,QAAmB,IAAA,CAAK,CAAA,eAAA,EAAkB,KAAK,SAAA,CAAU,WAAW,CAAC,CAAA,CAAE,CAAA;AAC3E,EAAA,KAAA,CAAM,IAAA,CAAK,CAAA,4BAAA,CAAA,EAAgC,OAAA,CAAQ,IAAA,IAAQ,CAAA,GAAA,CAAK,CAAA;AAEhE,EAAA,MAAM,OAAA,GAAU,CAAA,EAAG,KAAA,CAAM,IAAA,CAAK,IAAI,CAAC;AAAA,CAAA;AACnC,EAAA,MAAM,QAAA,GAAW,IAAA,CAAK,cAAA,EAAgB,CAAA,EAAG,SAAS,CAAA,KAAA,CAAO,CAAA;AACzD,EAAA,UAAA,CAAW,QAAA,EAAU,OAAA,EAAS,aAAA,EAAe,OAAA,EAAS,OAAO,CAAA;AAK7D,EAAA,MAAM,WAAA,GAAc,KAAK,OAAA,CAAQ,cAAc,GAAG,kBAAA,EAAoB,CAAA,EAAG,SAAS,CAAA,GAAA,CAAK,CAAA;AACvF,EAAA,UAAA,CAAW,WAAA,EAAa,YAAA,EAAc,aAAA,EAAe,OAAA,EAAS,OAAO,CAAA;AAErE,EAAA,OAAO,EAAE,OAAA,EAAS,OAAA,EAAS,QAAA,EAAS;AACtC;AA4BO,IAAM,cAA6B,CAAC;AAAA,EACzC,QAAA;AAAA,EACA,IAAA;AAAA,EACA,KAAA;AAAA,EACA,MAAA;AAAA,EACA,SAAA;AAAA,EACA,cAAA;AAAA,EACA,aAAA;AAAA,EACA,WAAA;AAAA,EACA,YAAA;AAAA,EACA,kBAAA;AAAA,EACA,gBAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF,CAAA,KAAM;AACJ,EAAA,MAAM,UAAoB,EAAC;AAC3B,EAAA,MAAM,UAAoB,EAAC;AAC3B,EAAA,MAAM,WAAqB,EAAC;AAE5B,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,cAAA,EAAgB,SAAS,CAAA;AAG9C,EAAA,MAAM,SAAA,GAAqC;AAAA,IACzC,YAAA,EAAc,SAAS,YAAA,IAAgB,KAAA;AAAA,IACvC,IAAA,EAAM,SAAA;AAAA,IACN,OAAA,EAAS,SAAS,OAAA,IAAW,OAAA;AAAA,IAC7B,WAAA,EAAa,QAAA,CAAS,WAAA,IAAe,CAAA,EAAG,SAAS,CAAA,MAAA,CAAA;AAAA,IACjD;AAAA,GACF;AAUA,EAAA,MAAM,KAAA,GAAQ,YAAA,CAAa,QAAA,CAAS,KAAK,CAAA;AACzC,EAAA,IAAI,KAAA,YAAiB,KAAA,GAAQ,KAAA;AAC7B,EAAA,IAAI,QAAA,CAAS,KAAA,EAAO,SAAA,CAAU,KAAA,GAAQ,QAAA,CAAS,KAAA;AAC/C,EAAA,IAAI,QAAA,CAAS,UAAA,EAAY,SAAA,CAAU,UAAA,GAAa,QAAA,CAAS,UAAA;AACzD,EAAA,IAAI,QAAA,CAAS,OAAA,EAAS,SAAA,CAAU,OAAA,GAAU,QAAA,CAAS,OAAA;AACnD,EAAA,IAAI,QAAA,CAAS,EAAA,EAAI,SAAA,CAAU,EAAA,GAAK,QAAA,CAAS,EAAA;AACzC,EAAA,IAAI,QAAA,CAAS,MAAA,EAAQ,SAAA,CAAU,MAAA,GAAS,QAAA,CAAS,MAAA;AACjD,EAAA,IAAI,QAAA,CAAS,QAAA,EAAU,MAAA,EAAQ,SAAA,CAAU,WAAW,QAAA,CAAS,QAAA;AAC7D,EAAA,IAAI,QAAA,CAAS,YAAA,EAAc,MAAA,EAAQ,SAAA,CAAU,eAAe,QAAA,CAAS,YAAA;AACrE,EAAA,IAAI,QAAA,CAAS,UAAU,MAAA,EAAQ;AAC7B,IAAA,SAAA,CAAU,QAAA,GAAW,mBAAA;AAAA,MACnB,QAAA,CAAS,QAAA;AAAA,MACT,MAAA;AAAA,MACA,OAAA;AAAA,MACA,aAAA;AAAA,MACA,OAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACA,EAAA,IAAI,QAAA,CAAS,IAAA,EAAM,MAAA,EAAQ,SAAA,CAAU,OAAO,QAAA,CAAS,IAAA;AACrD,EAAA,IAAI,QAAA,CAAS,QAAA,EAAU,SAAA,CAAU,QAAA,GAAW,QAAA,CAAS,QAAA;AAErD,EAAA,UAAA,CAAW,IAAA,CAAK,OAAA,EAAS,YAAY,CAAA,EAAGA,SAAA,CAAc,SAAS,CAAA,EAAG,aAAA,EAAe,EAAC,EAAG,OAAO,CAAA;AAG5F,EAAA,MAAM,YAAA,GAAe,iBAAA;AAAA,IACnB,IAAA;AAAA,IACA,KAAA;AAAA,IACA,MAAA;AAAA,IACA,WAAA;AAAA,IACA,YAAA;AAAA,IACA,kBAAA;AAAA,IACA;AAAA,GACF;AACA,EAAA,UAAA,CAAW,IAAA,CAAK,SAAS,SAAS,CAAA,EAAG,cAAc,aAAA,EAAe,IAAI,OAAO,CAAA;AAK7E,EAAA,MAAM,WAAA,GAAuC;AAAA,IAC3C,IAAA,EAAM,SAAA;AAAA,IACN,WAAA,EAAa,QAAA,CAAS,WAAA,IAAe,CAAA,EAAG,SAAS,CAAA,MAAA;AAAA,GACnD;AACA,EAAA,IAAI,QAAA,CAAS,KAAA,EAAO,OAAA,EAAS,MAAA,EAAQ,WAAA,CAAY,QAAQ,QAAA,CAAS,KAAA,CAAM,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAA;AACzF,EAAA,MAAM,WAAW,KAAA,EAAO,SAAA;AACxB,EAAA,IAAI,QAAA,cAAsB,KAAA,GAAQ,QAAA;AAClC,EAAA,UAAA;AAAA,IACE,IAAA,CAAK,cAAA,EAAgB,CAAA,EAAG,SAAS,CAAA,GAAA,CAAK,CAAA;AAAA,IACtC,CAAA;AAAA,EAAQA,SAAA,CAAc,WAAW,CAAA,CAAE,IAAA,EAAM;AAAA;;AAAA,EAAY,YAAY,CAAA,CAAA;AAAA,IACjE,aAAA;AAAA,IACA,OAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,OAAA,CAAQ,IAAA,CAAK,QAAA,CAAS,aAAA,EAAe,OAAO,CAAC,CAAA;AAC7C,EAAA,OAAO,EAAE,OAAA,EAAS,OAAA,EAAS,QAAA,EAAS;AACtC;AAKA,IAAM,OAAY,MAAM;AAAC,CAAA;AAalB,SAAS,sBAAA,CACd,KAAA,EACA,aAAA,EACA,GAAA,GAAW,IAAA,EACQ;AACnB,EAAA,MAAM,QAAA,GAAW,gBAAgB,aAAa,CAAA;AAC9C,EAAA,IAAI,CAAC,QAAA,EAAU;AACb,IAAA,OAAO;AAAA,MACL,SAAS,EAAC;AAAA,MACV,SAAS,EAAC;AAAA,MACV,QAAA,EAAU,CAAC,CAAA,2BAAA,EAA8B,aAAa,CAAA,CAAA,CAAG;AAAA,KAC3D;AAAA,EACF;AACA,EAAA,MAAM,MAAA,GAAS,SAAS,KAAK,CAAA;AAC7B,EAAA,KAAA,MAAW,KAAK,MAAA,CAAO,OAAA,EAAS,GAAA,CAAI,CAAA,kBAAA,EAAqB,CAAC,CAAA,CAAE,CAAA;AAC5D,EAAA,KAAA,MAAW,KAAK,MAAA,CAAO,QAAA,EAAU,GAAA,CAAI,CAAA,QAAA,EAAW,CAAC,CAAA,CAAE,CAAA;AACnD,EAAA,OAAO,MAAA;AACT;AAUO,IAAM,eAAA,GAAiD;AAAA,EAC5D,aAAA,EAAe,kBAAA;AAAA,EACf,GAAA,EAAK,WAAA;AAAA,EACL,KAAA,EAAO;AACT;AASO,SAAS,4BAA4B,aAAA,EAAgC;AAC1E,EAAA,OAAO,aAAA,IAAiB,eAAA;AAC1B","file":"chunk-ABFPSVIS.js","sourcesContent":["/**\n * Framework-specific renderers for GitAgent packages.\n *\n * Each renderer transforms a parsed GitAgent package (agent.yaml + SOUL.md + RULES.md)\n * into the native file format that the target agent framework natively reads.\n *\n * Only harnesses with a full bridge harness (runtime execution) are included:\n *   claude-code → .claude/agents/<name>.md     (YAML frontmatter + markdown body)\n *   omp         → .omp/agents/<name>/          (directory with agent.yaml + SOUL.md)\n *   codex       → .codex/agents/<name>.toml    (TOML)\n *\n * Removed (no bridge harness): cursor, roo, github-copilot, gemini, amp.\n * Add them back when a bridge harness is implemented.\n */\n\nimport {\n  existsSync,\n  lstatSync,\n  mkdirSync,\n  readdirSync,\n  readFileSync,\n  unlinkSync,\n  writeFileSync,\n} from \"node:fs\";\nimport { basename, dirname, join, normalize, relative, resolve } from \"node:path\";\nimport { buildAgentPromptSections } from \"@skaile/workspaces/core\";\nimport {\n  ANTHROPIC_MODEL_ALIASES,\n  type AgentLifecycle,\n  type AgentManifest,\n  normalizeAnthropicModel,\n} from \"@skaile/workspaces/types/manifests\";\nimport { stringify as stringifyYaml } from \"yaml\";\nimport type { AbilityRef, ContractRef } from \"./fragments.js\";\n\n// ── Types ─────────────────────────────────��───────────────────────────────────\n\nexport type { AgentManifest };\n\n/**\n * All data an {@link AgentRenderer} needs to produce a native agent definition file.\n *\n * @docLink packages/asset-manager/api-reference#renderers\n */\nexport interface AgentRenderInput {\n  /** Parsed `agent.yaml` manifest for the GitAgent being rendered. */\n  manifest: AgentManifest;\n  /** Raw content of `SOUL.md`, or `null` if absent. */\n  soul: string | null;\n  /** Raw content of `RULES.md`, or `null` if absent. */\n  rules: string | null;\n  /** Raw content of `DUTIES.md`, or `null` if absent. */\n  duties: string | null;\n  /** Agent name used as the output filename and frontmatter `name` field. */\n  agentName: string;\n  /** Resolved absolute path to the framework's agent deploy directory (e.g. `.claude/agents/`). */\n  agentDeployDir: string;\n  /** Absolute path to the workspace root. */\n  workspaceRoot: string;\n  /** Resolved ability refs — installed skills referenced in the `## Installed Abilities` section. */\n  abilityRefs: AbilityRef[];\n  /** Resolved contract refs — installed in the skills dir, listed in the `## Contracts` section. */\n  contractRefs: ContractRef[];\n  /** Resolved framework fragment markdown blocks (agent-mode, handoff, skill-discovery, etc.). */\n  frameworkFragments: string[];\n  /** Per-project prompt extension markdown blocks loaded from `skaile.yaml` `agent.prompt-extensions`. */\n  promptExtensions: string[];\n  /** `standing` (long-running identity) or `role` (short-lived, callable). */\n  lifecycle: AgentLifecycle;\n  /** Names of the skills the agent composes (`composes[{kind: skill}]`), as installed. */\n  skills: string[];\n  /** Names of the MCP servers the agent's `mcp-server` slots are bound to. */\n  mcpServers: string[];\n  /**\n   * Absolute path of the agent's source directory (where `agent.yaml` lives). The omp renderer\n   * copies the local `composes` directories out of it.\n   */\n  srcDir?: string;\n}\n\n/**\n * Result returned by every {@link AgentRenderer}.\n *\n * @docLink packages/asset-manager/api-reference#renderers\n */\nexport interface AgentRenderResult {\n  /** Paths to files/dirs rendered, relative to `workspaceRoot`. */\n  created: string[];\n  /** The subset of `created` whose bytes differ from what was on disk before (new or edited); an identical rewrite is skipped. */\n  changed: string[];\n  /** Non-fatal warnings (e.g. experimental feature notices). */\n  warnings: string[];\n}\n\n/**\n * A function that transforms an {@link AgentRenderInput} into framework-native agent definition files.\n *\n * @docLink packages/asset-manager/api-reference#renderers\n */\nexport type AgentRenderer = (input: AgentRenderInput) => AgentRenderResult;\n\n// ── Helpers ───────────────────────────────────────────────────────────────────\n\n/**\n * Unlink a symlink (dangling or not) at a path skaile is about to write. `writeFileSync` follows\n * a link, so the write would land in the file the link points at: the user's own file, outside\n * the project (p1060). The link is replaced by the rendered file instead.\n */\nfunction dropSymlink(path: string): void {\n  try {\n    if (lstatSync(path).isSymbolicLink()) unlinkSync(path);\n  } catch {\n    // nothing at the path: the write creates it\n  }\n}\n\n/**\n * Write an agent definition file. Agents are compiled artifacts — they must\n * reflect the current canonical source — but a file that already holds exactly\n * these bytes is left untouched (mtime included), so a repeat install is a no-op.\n * `created` lists every rendered path; `changed` only those that were (re)written.\n */\nfunction writeAgent(\n  filePath: string,\n  content: string,\n  workspaceRoot: string,\n  created: string[],\n  changed: string[],\n): void {\n  const rel = relative(workspaceRoot, filePath);\n  created.push(rel);\n  dropSymlink(filePath);\n  if (existsSync(filePath)) {\n    try {\n      if (readFileSync(filePath, \"utf-8\") === content) return;\n    } catch {\n      // unreadable (e.g. a directory in the way): fall through to the write\n    }\n  }\n  mkdirSync(dirname(filePath), { recursive: true });\n  writeFileSync(filePath, content, \"utf-8\");\n  changed.push(rel);\n}\n\n/**\n * Build the full agent system prompt body baked into the framework-native agent file.\n *\n * This is the sole source of the agent's system prompt body. Agent identity is rendered at install time; the harness reads it natively at runtime.\n * The rendered output ends up in .claude/agents/<name>.md, .omp/agents/<name>/SOUL.md,\n * .codex/agents/<name>.toml and is read natively by the framework on every agent invocation.\n *\n * Section order is owned by the shared builder (`buildAgentPromptSections` in\n * core, the same one the runner assembles its system prompt with):\n * soul → `<MEMORY>` → framework fragments → `## Constraints` (RULES) →\n * `## Duties` → `## Installed Abilities` → `## Contracts` → composed inline\n * blocks → prompt extensions.\n */\nfunction buildMarkdownBody(\n  soul: string | null,\n  rules: string | null,\n  duties: string | null,\n  abilityRefs: AbilityRef[],\n  contractRefs: ContractRef[],\n  frameworkFragments: string[],\n  promptExtensions: string[],\n): string {\n  const sections = buildAgentPromptSections({\n    soul,\n    constraints: rules,\n    duties,\n    abilities: abilityRefs,\n    contracts: contractRefs,\n    frameworkFragments,\n    promptExtensions,\n  });\n  return `${sections.map((s) => s.text).join(\"\\n\\n\")}\\n`;\n}\n\n/** Escape a string for use as a TOML multi-line basic string (triple-quote). */\nfunction toTomlMultilineString(s: string): string {\n  // Replace \"\"\" with \\\\\"\"\" to avoid breaking the TOML literal\n  return s.replace(/\"\"\"/g, '\\\\\"\\\\\"\\\\\"');\n}\n\n/**\n * The manifest's `model` as a harness other than Claude Code can take it: the Claude Code\n * aliases (`inherit`, `opus`, `sonnet`, `haiku`) name no model of another harness' provider, so a\n * `preferred` that is one of them is dropped (the harness starts the agent on its own default) and\n * so is a `fallback` entry that is. Any other selector (`provider/model`, a full id, `@role`) is\n * the author's choice and is passed through. `undefined` when nothing is left.\n */\nfunction harnessModel(model: AgentManifest[\"model\"]): AgentManifest[\"model\"] | undefined {\n  if (!model) return undefined;\n  const claudeOnly = (m: string): boolean =>\n    (ANTHROPIC_MODEL_ALIASES as readonly string[]).includes(m);\n  const { preferred, fallback, ...rest } = model;\n  const kept: NonNullable<AgentManifest[\"model\"]> = { ...rest };\n  if (preferred && !claudeOnly(preferred)) kept.preferred = preferred;\n  const fallbacks = (fallback ?? []).filter((m) => !claudeOnly(m));\n  if (fallbacks.length > 0) kept.fallback = fallbacks;\n  return Object.keys(kept).length > 0 ? kept : undefined;\n}\n\n/** Directory entries that are never part of an asset (build and OS leftovers). */\nconst COPY_SKIP = new Set([\".git\", \".DS_Store\", \"node_modules\", \"__pycache__\"]);\n\n/** Copy a file or directory tree byte for byte; a file that already holds these bytes is left alone. */\nfunction copyTree(from: string, to: string, workspaceRoot: string, changed: string[]): void {\n  const stat = lstatSync(from);\n  if (stat.isSymbolicLink()) return;\n  if (stat.isDirectory()) {\n    for (const name of readdirSync(from)) {\n      if (COPY_SKIP.has(name) || name.endsWith(\".pyc\")) continue;\n      copyTree(join(from, name), join(to, name), workspaceRoot, changed);\n    }\n    return;\n  }\n  if (!stat.isFile()) return;\n  const bytes = readFileSync(from);\n  dropSymlink(to);\n  if (existsSync(to)) {\n    try {\n      if (bytes.equals(readFileSync(to))) return;\n    } catch {\n      // unreadable (e.g. a directory in the way): fall through to the write\n    }\n  }\n  mkdirSync(dirname(to), { recursive: true });\n  writeFileSync(to, bytes);\n  changed.push(relative(workspaceRoot, to));\n}\n\n/**\n * Make the `composes` of an omp `agent.yaml` resolvable from where it is written: every local ref\n * (`./rules-local/house-rules`) is copied next to the `agent.yaml`, at the path the ref names, and a\n * local ref that climbs out of the agent directory (`../shared/rules`) is copied to\n * `composes/<name>` and rewritten to that path. Catalog refs (`skill:@pub/name`) are kept as written.\n */\nfunction bundleLocalComposes(\n  composes: NonNullable<AgentManifest[\"composes\"]>,\n  srcDir: string | undefined,\n  destDir: string,\n  workspaceRoot: string,\n  changed: string[],\n  warnings: string[],\n): NonNullable<AgentManifest[\"composes\"]> {\n  if (!srcDir) return composes;\n  return composes.map((item) => {\n    if (!item.ref.startsWith(\"./\") && !item.ref.startsWith(\"../\")) return item;\n    const from = resolve(srcDir, item.ref);\n    if (!existsSync(from)) {\n      warnings.push(`compose ref ${item.ref} not found at ${from}: not copied into ${destDir}`);\n      return item;\n    }\n    const rel = normalize(item.ref);\n    const inside = !rel.startsWith(\"..\");\n    const target = inside ? rel : join(\"composes\", basename(from));\n    copyTree(from, join(destDir, target), workspaceRoot, changed);\n    return inside ? item : { ...item, ref: `./${target}` };\n  });\n}\n\n// ── Claude Code ────────────��──────────────────────────────────────────────────\n// Format: .claude/agents/<name>.md\n// Sub-agent support: automatic (description-based) + @-mention\n// Required frontmatter: name, description\n//\n// Installation → runtime handoff:\n//   skaile install (claudeCodeRenderer) creates the .md file from GitAgent source\n//   ClaudeSdkHarness.startQuery() passes options.agent = agentName to the SDK query\n//   The SDK reads .claude/agents/<agentName>.md to get model, tools, and system prompt\n//   This is equivalent to running: claude --agent <agentName>\n\n/**\n * Render a GitAgent to Claude Code's `.claude/agents/<name>.md` format.\n *\n * Writes YAML frontmatter (name, description, model, tools, skills, mcpServers,\n * maxTurns, background) followed by the enriched system prompt body. `skills`\n * lists the composed skills, `mcpServers` the MCP servers the agent's\n * `mcp-server` slots are bound to, and `background: true` marks a `role`\n * instance whose `runtime.background` is set. Always overwrites to reflect\n * current source.\n *\n * @docLink packages/asset-manager/api-reference#renderers\n */\nexport const claudeCodeRenderer: AgentRenderer = ({\n  manifest,\n  soul,\n  rules,\n  duties,\n  agentName,\n  agentDeployDir,\n  workspaceRoot,\n  abilityRefs,\n  contractRefs,\n  frameworkFragments,\n  promptExtensions,\n  lifecycle,\n  skills,\n  mcpServers,\n}) => {\n  const created: string[] = [];\n  const changed: string[] = [];\n  const warnings: string[] = [];\n\n  const frontmatter: Record<string, unknown> = {\n    name: agentName,\n    description: manifest.description ?? `${agentName} agent`,\n  };\n\n  // Model: map to Claude Code's model field. Accepts aliases (sonnet/opus/haiku/inherit)\n  // or a full Anthropic ID. Unrecognized values (e.g. legacy `claude-opus-4`) are\n  // coerced to the matching family alias so the agent still loads.\n  if (manifest.model?.preferred) {\n    const raw = manifest.model.preferred;\n    const normalized = normalizeAnthropicModel(raw);\n    if (normalized !== raw) {\n      warnings.push(\n        `agent ${agentName}: model \"${raw}\" is not a valid Claude model ID; normalized to alias \"${normalized}\". Update agent.yaml.`,\n      );\n    }\n    frontmatter.model = normalized;\n  }\n\n  // Tool restrictions\n  if (manifest.tools?.allowed?.length) {\n    frontmatter.tools = manifest.tools.allowed.join(\", \");\n  }\n  if (manifest.tools?.denied?.length) {\n    frontmatter.disallowedTools = manifest.tools.denied.join(\", \");\n  }\n\n  if (skills.length > 0) frontmatter.skills = skills;\n  if (mcpServers.length > 0) frontmatter.mcpServers = mcpServers;\n\n  // Runtime\n  if (manifest.runtime?.max_turns) {\n    frontmatter.maxTurns = manifest.runtime.max_turns;\n  }\n  if (lifecycle === \"role\" && manifest.runtime?.background === true) {\n    frontmatter.background = true;\n  }\n\n  // Metadata pass-through for Claude Code-specific fields\n  if (manifest.metadata?.color) frontmatter.color = manifest.metadata.color;\n  if (manifest.metadata?.effort) frontmatter.effort = manifest.metadata.effort;\n  if (manifest.metadata?.isolation) frontmatter.isolation = manifest.metadata.isolation;\n\n  const body = buildMarkdownBody(\n    soul,\n    rules,\n    duties,\n    abilityRefs,\n    contractRefs,\n    frameworkFragments,\n    promptExtensions,\n  );\n  const content = `---\\n${stringifyYaml(frontmatter).trim()}\\n---\\n\\n${body}`;\n  const filePath = join(agentDeployDir, `${agentName}.md`);\n  writeAgent(filePath, content, workspaceRoot, created, changed);\n\n  return { created, changed, warnings };\n};\n\n// ── OpenAI Codex ──────────────────────────────────────────────────────────────\n// Format: .codex/agents/<name>.toml\n// Sub-agent support: explicit user request only (not automatic)\n// Required fields: name, description, developer_instructions\n\n/**\n * Tools that change the workspace or run commands. Codex has no per-agent tool\n * allowlist; the closest per-agent control is `sandbox_mode`, so an agent whose\n * declared tool surface contains none of these is rendered `read-only`.\n */\nconst MUTATING_TOOLS = [\"Write\", \"Edit\", \"MultiEdit\", \"NotebookEdit\", \"Bash\"] as const;\n\n/** `read-only` when the manifest's tool surface cannot mutate anything, else `undefined` (inherit). */\nfunction codexSandboxMode(tools: AgentManifest[\"tools\"]): \"read-only\" | undefined {\n  const allowed = tools?.allowed ?? [];\n  const denied = new Set(tools?.denied ?? []);\n  if (allowed.length > 0) {\n    return allowed.some((t) => !denied.has(t) && (MUTATING_TOOLS as readonly string[]).includes(t))\n      ? undefined\n      : \"read-only\";\n  }\n  // No allowlist: everything not denied is available.\n  return MUTATING_TOOLS.every((t) => denied.has(t)) ? \"read-only\" : undefined;\n}\n\n/** Directory (next to `agents/`) holding each Codex agent's markdown identity, one file per agent. */\nexport const CODEX_IDENTITY_DIR = \"skaile-agents\";\n\n/**\n * Render a GitAgent to OpenAI Codex's `.codex/agents/<name>.toml` format.\n *\n * Produces a TOML file with `name`, `description`, `model`, `sandbox_mode` and\n * `developer_instructions`. `sandbox_mode = \"read-only\"` is the per-agent tool\n * restriction: it is emitted when the manifest's `tools` leave the agent no way\n * to write or run commands (Codex has no per-tool allowlist). Triple-quoted\n * TOML multi-line strings are escaped to avoid syntax errors.\n *\n * Also writes the agent's identity as `.codex/skaile-agents/<name>.md`, which\n * the Codex harness combines with the session's runtime prompt (one file per\n * agent, so several instances never overwrite each other).\n *\n * @docLink packages/asset-manager/api-reference#renderers\n */\nexport const codexRenderer: AgentRenderer = ({\n  manifest,\n  soul,\n  rules,\n  duties,\n  agentName,\n  agentDeployDir,\n  workspaceRoot,\n  abilityRefs,\n  contractRefs,\n  frameworkFragments,\n  promptExtensions,\n}) => {\n  const created: string[] = [];\n  const changed: string[] = [];\n  const warnings: string[] = [];\n\n  const instructions = buildMarkdownBody(\n    soul,\n    rules,\n    duties,\n    abilityRefs,\n    contractRefs,\n    frameworkFragments,\n    promptExtensions,\n  );\n  const escaped = toTomlMultilineString(instructions);\n\n  const lines: string[] = [\n    `name = ${JSON.stringify(agentName)}`,\n    `description = ${JSON.stringify(manifest.description ?? `${agentName} agent`)}`,\n  ];\n  // A Claude Code alias (`sonnet`) names no Codex model: leave `model` out and Codex uses its own.\n  const model = harnessModel(manifest.model)?.preferred;\n  if (model) lines.push(`model = ${JSON.stringify(model)}`);\n  const sandboxMode = codexSandboxMode(manifest.tools);\n  if (sandboxMode) lines.push(`sandbox_mode = ${JSON.stringify(sandboxMode)}`);\n  lines.push(`developer_instructions = \"\"\"`, escaped.trim(), `\"\"\"`);\n\n  const content = `${lines.join(\"\\n\")}\\n`;\n  const filePath = join(agentDeployDir, `${agentName}.toml`);\n  writeAgent(filePath, content, workspaceRoot, created, changed);\n\n  // Write the full agent identity as markdown for the Codex harness to read at runtime.\n  // The harness combines this with the session's dynamic content (resources, context)\n  // and passes the result via model_instructions_file.\n  const agentMdPath = join(dirname(agentDeployDir), CODEX_IDENTITY_DIR, `${agentName}.md`);\n  writeAgent(agentMdPath, instructions, workspaceRoot, created, changed);\n\n  return { created, changed, warnings };\n};\n\n// ── oh-my-pi ─��────────────��────────────────────────────────��─────────────────\n// Format: .omp/agents/<name>/ (directory with agent.yaml + SOUL.md + RULES.md)\n// oh-my-pi reads GitAgent directories natively via PI_CODING_AGENT_DIR.\n// The renderer copies/enriches the source directory rather than flattening to .md.\n//\n// Installation → runtime handoff:\n//   skaile install (ompRenderer) creates .omp/agents/<name>/ from GitAgent source\n//   OmpHarness._start() sets env.PI_CODING_AGENT_DIR = agentDir in the child process\n//   omp reads SOUL.md/RULES.md/knowledge/ from that directory natively on startup\n//\n// Note: REPL mode can bypass the install step — agentDir can point directly to the\n// GitAgent source directory, and omp will read it natively via PI_CODING_AGENT_DIR.\n// The rendered .omp/agents/ copy is only needed when the source is not accessible\n// from the project cwd (e.g. different repo, remote workspace).\n\n/**\n * Render a GitAgent to oh-my-pi's `.omp/agents/<name>/` directory format.\n *\n * Writes `agent.yaml` (resolved model/tools/delegation plus the 0.2\n * declaration — `composes` verbatim, `lifecycle`, `io`, `memory`, `triggers`,\n * `capabilities`) and an enriched `SOUL.md` that includes fragments and\n * extensions. omp reads this directory natively via the `PI_CODING_AGENT_DIR`\n * environment variable.\n *\n * @docLink packages/asset-manager/api-reference#renderers\n */\nexport const ompRenderer: AgentRenderer = ({\n  manifest,\n  soul,\n  rules,\n  duties,\n  agentName,\n  agentDeployDir,\n  workspaceRoot,\n  abilityRefs,\n  contractRefs,\n  frameworkFragments,\n  promptExtensions,\n  lifecycle,\n  srcDir,\n}) => {\n  const created: string[] = [];\n  const changed: string[] = [];\n  const warnings: string[] = [];\n\n  const destDir = join(agentDeployDir, agentName);\n\n  // Write agent.yaml with tools resolved\n  const agentYaml: Record<string, unknown> = {\n    spec_version: manifest.spec_version ?? \"0.2\",\n    name: agentName,\n    version: manifest.version ?? \"1.0.0\",\n    description: manifest.description ?? `${agentName} agent`,\n    lifecycle,\n  };\n  // The model: omp takes provider-prefixed full IDs and `@role` selectors, and resolves the\n  // family aliases it knows (verified live 2026-09-20 against omp v18.1.10 through\n  // teamclaude.postxl.com: `--model anthropic/opus` produced\n  // `model_change {\"model\":\"anthropic/claude-opus-5\",\"resolvedModelIsFallback\":false}`).\n  // The Claude Code aliases the manifest writes (`sonnet`, `haiku`, `opus`, `inherit`) name no\n  // model of an omp deployment on another provider, so they are left out and omp starts the agent\n  // on its own default. Any other selector is passed through verbatim: it is not checked here, and\n  // not coerced by `normalizeAnthropicModel`, which would substitute a different model on any\n  // provider but Anthropic (see `resolveManifestModel` in `@skaile/workspaces/bridge`).\n  const model = harnessModel(manifest.model);\n  if (model) agentYaml.model = model;\n  if (manifest.tools) agentYaml.tools = manifest.tools;\n  if (manifest.delegation) agentYaml.delegation = manifest.delegation;\n  if (manifest.runtime) agentYaml.runtime = manifest.runtime;\n  if (manifest.io) agentYaml.io = manifest.io;\n  if (manifest.memory) agentYaml.memory = manifest.memory;\n  if (manifest.triggers?.length) agentYaml.triggers = manifest.triggers;\n  if (manifest.capabilities?.length) agentYaml.capabilities = manifest.capabilities;\n  if (manifest.composes?.length) {\n    agentYaml.composes = bundleLocalComposes(\n      manifest.composes,\n      srcDir,\n      destDir,\n      workspaceRoot,\n      changed,\n      warnings,\n    );\n  }\n  if (manifest.tags?.length) agentYaml.tags = manifest.tags;\n  if (manifest.metadata) agentYaml.metadata = manifest.metadata;\n\n  writeAgent(join(destDir, \"agent.yaml\"), stringifyYaml(agentYaml), workspaceRoot, [], changed);\n\n  // Write SOUL.md (enriched with fragments and extensions, like other renderers)\n  const enrichedSoul = buildMarkdownBody(\n    soul,\n    rules,\n    duties,\n    abilityRefs,\n    contractRefs,\n    frameworkFragments,\n    promptExtensions,\n  );\n  writeAgent(join(destDir, \"SOUL.md\"), enrichedSoul, workspaceRoot, [], changed);\n\n  // omp lists the agents it can spawn from flat `.omp/agents/<name>.md` files only (verified live\n  // against omp 18.12.5: a `<name>/agent.yaml` directory is not listed, a flat file is), so the\n  // directory above carries the full GitAgent package and this file is what omp loads.\n  const frontmatter: Record<string, unknown> = {\n    name: agentName,\n    description: manifest.description ?? `${agentName} agent`,\n  };\n  if (manifest.tools?.allowed?.length) frontmatter.tools = manifest.tools.allowed.join(\", \");\n  const selector = model?.preferred;\n  if (selector) frontmatter.model = selector;\n  writeAgent(\n    join(agentDeployDir, `${agentName}.md`),\n    `---\\n${stringifyYaml(frontmatter).trim()}\\n---\\n\\n${enrichedSoul}`,\n    workspaceRoot,\n    created,\n    changed,\n  );\n\n  created.push(relative(workspaceRoot, destDir));\n  return { created, changed, warnings };\n};\n\n// ── Renderer registry ──────────────────────────────���──────────────────────────\n\nexport type Log = (msg: string) => void;\nconst noop: Log = () => {};\n\n/**\n * Render an agent to framework-native format via the renderer registry.\n *\n * Shared by both the simple deploy path (`deployAsset`) and the enriched scaffold path (agents layer).\n *\n * @param input - Full render input including manifest, SOUL/RULES text, and resolved refs.\n * @param harnessTarget - Agent framework ID to look up in {@link AGENT_RENDERERS}.\n * @param log - Optional logger callback for progress messages.\n * @returns Object with `created` file paths and `warnings` list.\n * @docLink packages/asset-manager/api-reference#renderers\n */\nexport function renderAgentToFramework(\n  input: AgentRenderInput,\n  harnessTarget: string,\n  log: Log = noop,\n): AgentRenderResult {\n  const renderer = AGENT_RENDERERS[harnessTarget];\n  if (!renderer) {\n    return {\n      created: [],\n      changed: [],\n      warnings: [`No renderer for framework \"${harnessTarget}\"`],\n    };\n  }\n  const result = renderer(input);\n  for (const c of result.created) log(`  rendered agent: ${c}`);\n  for (const w of result.warnings) log(`  warn: ${w}`);\n  return result;\n}\n\n/**\n * Registry mapping framework IDs to their {@link AgentRenderer} functions.\n *\n * Only harnesses with a full bridge harness are registered. Add new entries\n * when a bridge harness is implemented in `workspaces/bridge/src/harnesses/`.\n *\n * @docLink packages/asset-manager/api-reference#renderers\n */\nexport const AGENT_RENDERERS: Record<string, AgentRenderer> = {\n  \"claude-code\": claudeCodeRenderer,\n  omp: ompRenderer,\n  codex: codexRenderer,\n};\n\n/**\n * Returns `true` if the given harness target supports file-based sub-agent installation.\n *\n * @param harnessTarget - Agent framework ID to check.\n * @returns `true` when `harnessTarget` has a registered entry in {@link AGENT_RENDERERS}.\n * @docLink packages/asset-manager/api-reference#renderers\n */\nexport function harnessTargetSupportsAgents(harnessTarget: string): boolean {\n  return harnessTarget in AGENT_RENDERERS;\n}\n"]}

package/dist/{chunk-ICSCSM5D.js → chunk-ADPM6AYF.js}

@@ -1,4 +1,4 @@
-import { parseCredentialRef } from './chunk-MJHSLODD.js';
+import { parseCredentialRef } from './chunk-LSI2IVFT.js';
 import { spawn, spawnSync } from 'child_process';
 import { constants } from 'os';
 import { Readable } from 'stream';
@@ -138,5 +138,5 @@ function resolveCredential(entry, options = {}) {
 }
 
 export { __resetCredentialCommandCache, portableSpawn, portableSpawnSync, resolveCredential };
-//# sourceMappingURL=chunk-ICSCSM5D.js.map
-//# sourceMappingURL=chunk-ICSCSM5D.js.map
+//# sourceMappingURL=chunk-ADPM6AYF.js.map
+//# sourceMappingURL=chunk-ADPM6AYF.js.map

package/dist/{chunk-ICSCSM5D.js.map → chunk-ADPM6AYF.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../core/src/subprocess.ts","../core/src/provider-registry-credentials.ts"],"names":[],"mappings":";;;;;AAsEO,SAAS,aAAA,CAAc,GAAA,EAAe,IAAA,GAA6B,EAAC,EAAuB;AAChG,EAAA,MAAM,CAAC,GAAA,EAAK,GAAG,IAAI,CAAA,GAAI,GAAA;AACvB,EAAA,IAAI,CAAC,GAAA,EAAK,MAAM,IAAI,MAAM,8BAA8B,CAAA;AACxD,EAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,GAAA,EAAK,IAAA,EAAM;AAAA,IAC7B,KAAK,IAAA,CAAK,GAAA;AAAA,IACV,GAAA,EAAK,IAAA,CAAK,GAAA,IAAO,OAAA,CAAQ,GAAA;AAAA,IACzB,KAAA,EAAO,CAAC,QAAA,EAAU,MAAA,EAAQ,MAAM,CAAA;AAAA,IAChC,UAAU,IAAA,CAAK;AAAA,GAChB,CAAA;AACD,EAAA,MAAM,MAAA,GAAS,IAAI,OAAA,CAAgB,CAAC,OAAA,KAAY;AAC9C,IAAA,KAAA,CAAM,EAAA,CAAG,OAAA,EAAS,CAAC,IAAA,EAAM,MAAA,KAAW;AAClC,MAAA,IAAI,SAAS,IAAA,EAAM;AACjB,QAAA,OAAA,CAAQ,IAAI,CAAA;AACZ,QAAA;AAAA,MACF;AACA,MAAA,MAAM,YAAA,GAAe,MAAA,GAAS,SAAA,CAAU,OAAA,CAAQ,MAAM,CAAA,GAAI,MAAA;AAC1D,MAAA,OAAA,CAAQ,YAAA,KAAiB,MAAA,GAAY,EAAA,GAAK,GAAA,GAAM,YAAY,CAAA;AAAA,IAC9D,CAAC,CAAA;AACD,IAAA,KAAA,CAAM,EAAA,CAAG,OAAA,EAAS,MAAM,OAAA,CAAQ,EAAE,CAAC,CAAA;AAAA,EACrC,CAAC,CAAA;AACD,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,MAAM,GAAA,IAAO,EAAA;AAAA,IAClB,MAAA,EAAQ,QAAA,CAAS,KAAA,CAAM,KAAA,CAAM,MAAkB,CAAA;AAAA,IAC/C,MAAA,EAAQ,QAAA,CAAS,KAAA,CAAM,KAAA,CAAM,MAAkB,CAAA;AAAA,IAC/C,MAAA;AAAA,IACA,IAAA,EAAM,CAAC,MAAA,KAAW;AAChB,MAAA,IAAI,IAAA,CAAK,QAAA,IAAY,KAAA,CAAM,GAAA,EAAK;AAC9B,QAAA,IAAI;AACF,UAAA,OAAA,CAAQ,IAAA,CAAK,CAAC,KAAA,CAAM,GAAA,EAAK,MAAM,CAAA;AAC/B,UAAA;AAAA,QACF,CAAA,CAAA,MAAQ;AAAA,QAER;AAAA,MACF;AACA,MAAA,KAAA,CAAM,KAAK,MAAM,CAAA;AAAA,IACnB;AAAA,GACF;AACF;AAmBO,SAAS,iBAAA,CACd,KACA,IAAA,EACyB;AACzB,EAAA,MAAM,CAAC,GAAA,EAAK,GAAG,IAAI,CAAA,GAAI,GAAA;AACvB,EAAA,IAAI,CAAC,GAAA,EAAK,MAAM,IAAI,MAAM,kCAAkC,CAAA;AAC5D,EAAA,IAAI,EAAE,IAAA,CAAK,SAAA,GAAY,CAAA,CAAA,EAAI;AACzB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,8CAAA,EAAiD,IAAA,CAAK,SAAS,CAAA,CAAA,CAAG,CAAA;AAAA,EACpF;AACA,EAAA,MAAM,MAAA,GAAS,SAAA,CAAU,GAAA,EAAK,IAAA,EAAM;AAAA,IAClC,KAAK,IAAA,CAAK,GAAA;AAAA,IACV,GAAA,EAAK,IAAA,CAAK,GAAA,IAAO,OAAA,CAAQ,GAAA;AAAA,IACzB,QAAA,EAAU,MAAA;AAAA,IACV,SAAS,IAAA,CAAK,SAAA;AAAA,IACd,UAAA,EAAY;AAAA,GACb,CAAA;AAGD,EAAA,MAAM,QAAA,GACH,OAAO,KAAA,EAA6C,IAAA,KAAS,eAC7D,MAAA,CAAO,MAAA,KAAW,IAAA,IAAQ,MAAA,CAAO,MAAA,KAAW,SAAA;AAC/C,EAAA,IAAI,MAAA,GAAS,OAAO,MAAA,IAAU,EAAA;AAC9B,EAAA,IAAI,QAAA,EAAU;AAGZ,IAAA,MAAA,IAAU,CAAA,EAAG,MAAA,CAAO,QAAA,CAAS,IAAI,CAAA,IAAK,MAAA,KAAW,EAAA,GAAK,EAAA,GAAK,IAAI,CAAA,EAAG,GAAG,CAAA,kBAAA,EAAqB,KAAK,SAAS,CAAA;AAAA,CAAA;AAAA,EAC1G;AACA,EAAA,OAAO;AAAA,IACL,QAAA,EAAU,OAAO,MAAA,IAAU,EAAA;AAAA,IAC3B,MAAA,EAAQ,OAAO,MAAA,IAAU,EAAA;AAAA,IACzB,MAAA;AAAA,IACA;AAAA,GACF;AACF;;;ACrHA,IAAM,YAAA,uBAAmB,GAAA,EAAoB;AAGtC,SAAS,6BAAA,GAAsC;AACpD,EAAA,YAAA,CAAa,KAAA,EAAM;AACrB;AAEA,IAAM,kBAAA,GAAqB,GAAA;AAapB,SAAS,iBAAA,CACd,KAAA,EACA,OAAA,GAAoC,EAAC,EACP;AAC9B,EAAA,MAAM,aAAa,KAAA,CAAM,UAAA;AACzB,EAAA,IAAI,CAAC,UAAA,IAAc,UAAA,CAAW,IAAA,KAAS,MAAA,EAAQ;AAC7C,IAAA,OAAO,EAAE,IAAA,EAAM,UAAA,EAAY,IAAA,IAAQ,MAAA,EAAQ,QAAQ,MAAA,EAAO;AAAA,EAC5D;AACA,EAAA,MAAM,OAAO,UAAA,CAAW,IAAA;AACxB,EAAA,IAAI,CAAC,WAAW,GAAA,EAAK;AACnB,IAAA,IAAI,IAAA,KAAS,OAAA,IAAW,IAAA,KAAS,YAAA,IAAgB,SAAS,aAAA,EAAe;AACvE,MAAA,OAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,SAAA,EAAU;AAAA,IACnC;AACA,IAAA,OAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,QAAQ,KAAA,EAAO,CAAA,oCAAA,EAAuC,IAAI,CAAA,CAAA,CAAA,EAAI;AAAA,EACvF;AAEA,EAAA,MAAM,MAAA,GAAS,kBAAA,CAAmB,UAAA,CAAW,GAAG,CAAA;AAChD,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,OAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,MAAA,EAAQ,OAAO,yCAAA,EAA0C;AAAA,EAClF;AAEA,EAAA,QAAQ,OAAO,IAAA;AAAM,IACnB,KAAK,KAAA,EAAO;AACV,MAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,GAAA,IAAO,OAAA,CAAQ,GAAA;AACnC,MAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,IAAI,CAAA;AAC7B,MAAA,IAAI,CAAC,KAAA,EAAO;AACV,QAAA,OAAO,EAAE,MAAM,MAAA,EAAQ,KAAA,EAAO,OAAO,CAAA,qBAAA,EAAwB,MAAA,CAAO,IAAI,CAAA,WAAA,CAAA,EAAc;AAAA,MACxF;AACA,MAAA,OAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,KAAA,EAAO,KAAA,EAAM;AAAA,IACtC;AAAA,IACA,KAAK,UAAA,EAAY;AACf,MAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,OAAA,GAAU,MAAA,CAAO,QAAQ,CAAA;AAC/C,MAAA,IAAI,CAAC,KAAA,EAAO;AACV,QAAA,OAAO;AAAA,UACL,IAAA;AAAA,UACA,MAAA,EAAQ,UAAA;AAAA,UACR,KAAA,EAAO,CAAA,0CAAA,EAA6C,MAAA,CAAO,QAAQ,CAAA,CAAA;AAAA,SACrE;AAAA,MACF;AACA,MAAA,OAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,UAAA,EAAY,KAAA,EAAM;AAAA,IAC3C;AAAA,IACA,KAAK,KAAA,EAAO;AACV,MAAA,IAAI,OAAA,CAAQ,iBAAiB,KAAA,EAAO;AAClC,QAAA,OAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,KAAA,EAAO,OAAO,mDAAA,EAAoD;AAAA,MAC3F;AACA,MAAA,MAAM,MAAA,GAAS,YAAA,CAAa,GAAA,CAAI,MAAA,CAAO,OAAO,CAAA;AAC9C,MAAA,IAAI,MAAA,KAAW,QAAW,OAAO,EAAE,MAAM,MAAA,EAAQ,KAAA,EAAO,OAAO,MAAA,EAAO;AACtE,MAAA,MAAM,IAAA,GACJ,OAAA,CAAQ,QAAA,KAAa,OAAA,GACjB,CAAC,KAAA,EAAO,IAAA,EAAM,MAAA,CAAO,OAAO,CAAA,GAC5B,CAAC,SAAA,EAAW,IAAA,EAAM,OAAO,OAAO,CAAA;AACtC,MAAA,MAAM,SAAS,iBAAA,CAAkB,IAAA,EAAM,EAAE,SAAA,EAAW,oBAAoB,CAAA;AACxE,MAAA,IAAI,OAAO,QAAA,EAAU;AACnB,QAAA,OAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,KAAA,EAAO,OAAO,CAAA,sCAAA,CAAA,EAAyC;AAAA,MAChF;AACA,MAAA,IAAI,MAAA,CAAO,aAAa,CAAA,EAAG;AACzB,QAAA,OAAO,EAAE,MAAM,MAAA,EAAQ,KAAA,EAAO,OAAO,CAAA,0BAAA,EAA6B,MAAA,CAAO,QAAQ,CAAA,CAAA,EAAG;AAAA,MACtF;AACA,MAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,MAAA,CAAO,IAAA,EAAK;AACjC,MAAA,IAAI,CAAC,OAAO,OAAO,EAAE,MAAM,MAAA,EAAQ,KAAA,EAAO,OAAO,uCAAA,EAAwC;AACzF,MAAA,YAAA,CAAa,GAAA,CAAI,MAAA,CAAO,OAAA,EAAS,KAAK,CAAA;AACtC,MAAA,OAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,KAAA,EAAO,KAAA,EAAM;AAAA,IACtC;AAAA,IACA,KAAK,SAAA;AACH,MAAA,OAAO;AAAA,QACL,IAAA;AAAA,QACA,MAAA,EAAQ,SAAA;AAAA,QACR,KAAA,EACE,CAAA,yGAAA;AAAA,OAEJ;AAAA;AAEN","file":"chunk-ICSCSM5D.js","sourcesContent":["/**\n * Runtime-portable subprocess spawning.\n *\n * `node:child_process` is implemented by both Node and Bun, so it is the\n * portable choice — no runtime detection needed (unlike embedded SQLite,\n * which has no shared API; see `logging/sinks/sqlite-runtime.ts`).\n *\n * These helpers wrap `node:child_process` to present a `Bun.Subprocess`-shaped\n * result — web `ReadableStream` stdio plus an `exited` promise — so call sites\n * migrated off `Bun.spawn` keep their stream-reading code unchanged.\n */\nimport { spawn, spawnSync } from \"node:child_process\";\nimport { constants } from \"node:os\";\nimport { Readable } from \"node:stream\";\n\nexport interface PortableSpawnOptions {\n  cwd?: string;\n  env?: Record<string, string | undefined>;\n  detached?: boolean;\n}\n\n/**\n * Options for {@link portableSpawnSync}.\n *\n * `timeoutMs` is **required**, and deliberately so. A synchronous spawn blocks\n * the single-threaded event loop until the child exits; if the child stalls —\n * classically on a wedged network/FUSE mount reachable from `cwd` — the whole\n * process stops serving. An unbounded `spawnSync` is therefore not a call that\n * should be expressible, so the deadline is part of the type rather than an\n * optional extra a caller can forget.\n */\nexport interface PortableSpawnSyncOptions extends PortableSpawnOptions {\n  /** Wall-clock limit for the child, in milliseconds. Must be > 0. */\n  timeoutMs: number;\n}\n\n/** A spawned process with stdout/stderr piped. Mirrors the shape of `Bun.Subprocess`. */\nexport interface PortableSubprocess {\n  /** OS process id, or -1 if the process failed to spawn. */\n  readonly pid: number;\n  readonly stdout: ReadableStream<Uint8Array>;\n  readonly stderr: ReadableStream<Uint8Array>;\n  /**\n   * Resolves with the exit code once the process closes. Signal termination\n   * uses the conventional `128 + signal number`; spawn errors or unknown\n   * signals use `-1`.\n   */\n  readonly exited: Promise<number>;\n  kill(signal?: number | NodeJS.Signals): void;\n}\n\nexport interface PortableSpawnSyncResult {\n  /** Exit code; -1 when the process did not exit cleanly. */\n  exitCode: number;\n  stdout: string;\n  stderr: string;\n  /**\n   * `true` when the child was killed for exceeding\n   * {@link PortableSpawnSyncOptions.timeoutMs}. Lets a caller tell \"the command\n   * failed\" apart from \"the command never finished\", which are different\n   * operational events.\n   */\n  timedOut: boolean;\n}\n\n/**\n * Spawn a subprocess with stdout/stderr piped. Works under Node and Bun.\n *\n * @param cmd - Command and arguments, e.g. `[\"docker\", \"ps\"]`.\n */\nexport function portableSpawn(cmd: string[], opts: PortableSpawnOptions = {}): PortableSubprocess {\n  const [bin, ...args] = cmd;\n  if (!bin) throw new Error(\"portableSpawn: empty command\");\n  const child = spawn(bin, args, {\n    cwd: opts.cwd,\n    env: opts.env ?? process.env,\n    stdio: [\"ignore\", \"pipe\", \"pipe\"],\n    detached: opts.detached,\n  });\n  const exited = new Promise<number>((resolve) => {\n    child.on(\"close\", (code, signal) => {\n      if (code !== null) {\n        resolve(code);\n        return;\n      }\n      const signalNumber = signal ? constants.signals[signal] : undefined;\n      resolve(signalNumber === undefined ? -1 : 128 + signalNumber);\n    });\n    child.on(\"error\", () => resolve(-1));\n  });\n  return {\n    pid: child.pid ?? -1,\n    stdout: Readable.toWeb(child.stdout as Readable) as unknown as ReadableStream<Uint8Array>,\n    stderr: Readable.toWeb(child.stderr as Readable) as unknown as ReadableStream<Uint8Array>,\n    exited,\n    kill: (signal) => {\n      if (opts.detached && child.pid) {\n        try {\n          process.kill(-child.pid, signal);\n          return;\n        } catch {\n          /* fall back to killing the direct child */\n        }\n      }\n      child.kill(signal);\n    },\n  };\n}\n\n/**\n * Run a subprocess to completion synchronously, capturing stdout/stderr as\n * UTF-8 strings. Works under Node and Bun.\n *\n * Blocks the event loop for the child's whole lifetime, so `opts.timeoutMs`\n * is required — see {@link PortableSpawnSyncOptions}. Prefer\n * {@link portableSpawn} wherever an async call is possible; only reach for this\n * when the caller genuinely cannot await (process teardown, CLI entry points).\n *\n * The child is killed with `SIGKILL` rather than `SIGTERM` on expiry: a process\n * blocked in an uninterruptible kernel wait (`D` state, e.g. a dead FUSE\n * connection) never runs a `SIGTERM` handler, so a graceful signal would leave\n * the deadline unenforced.\n *\n * @param cmd - Command and arguments, e.g. `[\"docker\", \"info\"]`.\n * @param opts - Spawn options; `timeoutMs` is mandatory.\n */\nexport function portableSpawnSync(\n  cmd: string[],\n  opts: PortableSpawnSyncOptions,\n): PortableSpawnSyncResult {\n  const [bin, ...args] = cmd;\n  if (!bin) throw new Error(\"portableSpawnSync: empty command\");\n  if (!(opts.timeoutMs > 0)) {\n    throw new Error(`portableSpawnSync: timeoutMs must be > 0 (got ${opts.timeoutMs})`);\n  }\n  const result = spawnSync(bin, args, {\n    cwd: opts.cwd,\n    env: opts.env ?? process.env,\n    encoding: \"utf8\",\n    timeout: opts.timeoutMs,\n    killSignal: \"SIGKILL\",\n  });\n  // Node reports the expiry as `error.code === \"ETIMEDOUT\"`; Bun surfaces the\n  // same case as a SIGKILL with no status, so accept either signal.\n  const timedOut =\n    (result.error as NodeJS.ErrnoException | undefined)?.code === \"ETIMEDOUT\" ||\n    (result.status === null && result.signal === \"SIGKILL\");\n  let stderr = result.stderr ?? \"\";\n  if (timedOut) {\n    // Surface the reason on the channel every caller already inspects — an\n    // exitCode of -1 alone reads as \"command failed\" and hides the stall.\n    stderr += `${stderr.endsWith(\"\\n\") || stderr === \"\" ? \"\" : \"\\n\"}${bin}: timed out after ${opts.timeoutMs}ms\\n`;\n  }\n  return {\n    exitCode: result.status ?? -1,\n    stdout: result.stdout ?? \"\",\n    stderr,\n    timedOut,\n  };\n}\n","/**\n * Credential resolution for registry entries (§1.4).\n *\n * Split from `provider-registry.ts` deliberately: resolving a `cmd:` reference\n * spawns a process and `env:` reads `process.env`, so this module depends on\n * Node. The schema module must stay dependency-free because browser bundles\n * (`@skaile/workspace-bridge-react`) reach the registry *types* through\n * `@skaile/workspaces/types`, and a `node:child_process` import in that graph\n * breaks their typecheck.\n *\n * @see PROVIDER-CONFIG-PLAN.md §1.4\n */\n\nimport type { AIProviderCredentialKind, AIProviderEntry } from \"./provider-registry.js\";\nimport { parseCredentialRef } from \"./provider-registry.js\";\nimport { portableSpawnSync } from \"./subprocess.js\";\n\n/** Options for {@link resolveCredential}. */\nexport interface ResolveCredentialOptions {\n  /** Environment `env:` refs read from; defaults to `process.env`. */\n  env?: Record<string, string | undefined>;\n  /**\n   * Control-plane secrets, keyed by config id (a `platform:<configId>` ref) —\n   * the `secrets` map that rides alongside `session_init`.\n   */\n  secrets?: Record<string, string>;\n  /** Run `cmd:` references. Default `true`; the platform sets it `false`. */\n  allowCommand?: boolean;\n}\n\n/** Outcome of {@link resolveCredential}. Never carries the secret in `error`. */\nexport interface ResolvedAIProviderCredential {\n  kind: AIProviderCredentialKind;\n  /** The secret, when one was produced. */\n  value?: string;\n  /** Where the value came from; `ambient` means the transport's own chain signs. */\n  source: \"env\" | \"cmd\" | \"platform\" | \"keyring\" | \"ambient\" | \"none\";\n  /** Why there is no value. Secret-free. */\n  error?: string;\n}\n\n/** `cmd:` results are cached per process, matching omp's `!cmd` semantics. */\nconst commandCache = new Map<string, string>();\n\n/** Test seam — drops the memoized `cmd:` results. */\nexport function __resetCredentialCommandCache(): void {\n  commandCache.clear();\n}\n\nconst COMMAND_TIMEOUT_MS = 10_000;\n\n/**\n * Resolve an entry's credential to a value (§1.4).\n *\n * `env:` reads the environment, `cmd:` runs a shell (10 s, trimmed stdout,\n * cached per process), `platform:` reads the injected secrets map. `keyring:`\n * is a reserved grammar slot: it validates but does not resolve, and says so.\n *\n * `sigv4`, `google_adc` and `azure_entra` entries without a ref resolve to\n * `source: \"ambient\"` with no value — the AWS/Google/Azure SDK chain signs the\n * request, there is nothing for this function to hand over.\n */\nexport function resolveCredential(\n  entry: AIProviderEntry,\n  options: ResolveCredentialOptions = {},\n): ResolvedAIProviderCredential {\n  const credential = entry.credential;\n  if (!credential || credential.kind === \"none\") {\n    return { kind: credential?.kind ?? \"none\", source: \"none\" };\n  }\n  const kind = credential.kind;\n  if (!credential.ref) {\n    if (kind === \"sigv4\" || kind === \"google_adc\" || kind === \"azure_entra\") {\n      return { kind, source: \"ambient\" };\n    }\n    return { kind, source: \"none\", error: `credential.ref is missing for kind '${kind}'` };\n  }\n\n  const parsed = parseCredentialRef(credential.ref);\n  if (!parsed) {\n    return { kind, source: \"none\", error: \"credential.ref is not a valid reference\" };\n  }\n\n  switch (parsed.form) {\n    case \"env\": {\n      const env = options.env ?? process.env;\n      const value = env[parsed.name];\n      if (!value) {\n        return { kind, source: \"env\", error: `environment variable ${parsed.name} is not set` };\n      }\n      return { kind, source: \"env\", value };\n    }\n    case \"platform\": {\n      const value = options.secrets?.[parsed.configId];\n      if (!value) {\n        return {\n          kind,\n          source: \"platform\",\n          error: `no control-plane secret was injected for '${parsed.configId}'`,\n        };\n      }\n      return { kind, source: \"platform\", value };\n    }\n    case \"cmd\": {\n      if (options.allowCommand === false) {\n        return { kind, source: \"cmd\", error: \"cmd: references are not permitted in this context\" };\n      }\n      const cached = commandCache.get(parsed.command);\n      if (cached !== undefined) return { kind, source: \"cmd\", value: cached };\n      const argv =\n        process.platform === \"win32\"\n          ? [\"cmd\", \"/c\", parsed.command]\n          : [\"/bin/sh\", \"-c\", parsed.command];\n      const result = portableSpawnSync(argv, { timeoutMs: COMMAND_TIMEOUT_MS });\n      if (result.timedOut) {\n        return { kind, source: \"cmd\", error: `credential command timed out after 10s` };\n      }\n      if (result.exitCode !== 0) {\n        return { kind, source: \"cmd\", error: `credential command exited ${result.exitCode}` };\n      }\n      const value = result.stdout.trim();\n      if (!value) return { kind, source: \"cmd\", error: \"credential command produced no output\" };\n      commandCache.set(parsed.command, value);\n      return { kind, source: \"cmd\", value };\n    }\n    case \"keyring\":\n      return {\n        kind,\n        source: \"keyring\",\n        error:\n          `keyring references are a reserved grammar slot — ` +\n          `no OS keychain backend ships yet (use env: or cmd:)`,\n      };\n  }\n}\n"]}
+{"version":3,"sources":["../core/src/subprocess.ts","../core/src/provider-registry-credentials.ts"],"names":[],"mappings":";;;;;AAsEO,SAAS,aAAA,CAAc,GAAA,EAAe,IAAA,GAA6B,EAAC,EAAuB;AAChG,EAAA,MAAM,CAAC,GAAA,EAAK,GAAG,IAAI,CAAA,GAAI,GAAA;AACvB,EAAA,IAAI,CAAC,GAAA,EAAK,MAAM,IAAI,MAAM,8BAA8B,CAAA;AACxD,EAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,GAAA,EAAK,IAAA,EAAM;AAAA,IAC7B,KAAK,IAAA,CAAK,GAAA;AAAA,IACV,GAAA,EAAK,IAAA,CAAK,GAAA,IAAO,OAAA,CAAQ,GAAA;AAAA,IACzB,KAAA,EAAO,CAAC,QAAA,EAAU,MAAA,EAAQ,MAAM,CAAA;AAAA,IAChC,UAAU,IAAA,CAAK;AAAA,GAChB,CAAA;AACD,EAAA,MAAM,MAAA,GAAS,IAAI,OAAA,CAAgB,CAAC,OAAA,KAAY;AAC9C,IAAA,KAAA,CAAM,EAAA,CAAG,OAAA,EAAS,CAAC,IAAA,EAAM,MAAA,KAAW;AAClC,MAAA,IAAI,SAAS,IAAA,EAAM;AACjB,QAAA,OAAA,CAAQ,IAAI,CAAA;AACZ,QAAA;AAAA,MACF;AACA,MAAA,MAAM,YAAA,GAAe,MAAA,GAAS,SAAA,CAAU,OAAA,CAAQ,MAAM,CAAA,GAAI,MAAA;AAC1D,MAAA,OAAA,CAAQ,YAAA,KAAiB,MAAA,GAAY,EAAA,GAAK,GAAA,GAAM,YAAY,CAAA;AAAA,IAC9D,CAAC,CAAA;AACD,IAAA,KAAA,CAAM,EAAA,CAAG,OAAA,EAAS,MAAM,OAAA,CAAQ,EAAE,CAAC,CAAA;AAAA,EACrC,CAAC,CAAA;AACD,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,MAAM,GAAA,IAAO,EAAA;AAAA,IAClB,MAAA,EAAQ,QAAA,CAAS,KAAA,CAAM,KAAA,CAAM,MAAkB,CAAA;AAAA,IAC/C,MAAA,EAAQ,QAAA,CAAS,KAAA,CAAM,KAAA,CAAM,MAAkB,CAAA;AAAA,IAC/C,MAAA;AAAA,IACA,IAAA,EAAM,CAAC,MAAA,KAAW;AAChB,MAAA,IAAI,IAAA,CAAK,QAAA,IAAY,KAAA,CAAM,GAAA,EAAK;AAC9B,QAAA,IAAI;AACF,UAAA,OAAA,CAAQ,IAAA,CAAK,CAAC,KAAA,CAAM,GAAA,EAAK,MAAM,CAAA;AAC/B,UAAA;AAAA,QACF,CAAA,CAAA,MAAQ;AAAA,QAER;AAAA,MACF;AACA,MAAA,KAAA,CAAM,KAAK,MAAM,CAAA;AAAA,IACnB;AAAA,GACF;AACF;AAmBO,SAAS,iBAAA,CACd,KACA,IAAA,EACyB;AACzB,EAAA,MAAM,CAAC,GAAA,EAAK,GAAG,IAAI,CAAA,GAAI,GAAA;AACvB,EAAA,IAAI,CAAC,GAAA,EAAK,MAAM,IAAI,MAAM,kCAAkC,CAAA;AAC5D,EAAA,IAAI,EAAE,IAAA,CAAK,SAAA,GAAY,CAAA,CAAA,EAAI;AACzB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,8CAAA,EAAiD,IAAA,CAAK,SAAS,CAAA,CAAA,CAAG,CAAA;AAAA,EACpF;AACA,EAAA,MAAM,MAAA,GAAS,SAAA,CAAU,GAAA,EAAK,IAAA,EAAM;AAAA,IAClC,KAAK,IAAA,CAAK,GAAA;AAAA,IACV,GAAA,EAAK,IAAA,CAAK,GAAA,IAAO,OAAA,CAAQ,GAAA;AAAA,IACzB,QAAA,EAAU,MAAA;AAAA,IACV,SAAS,IAAA,CAAK,SAAA;AAAA,IACd,UAAA,EAAY;AAAA,GACb,CAAA;AAGD,EAAA,MAAM,QAAA,GACH,OAAO,KAAA,EAA6C,IAAA,KAAS,eAC7D,MAAA,CAAO,MAAA,KAAW,IAAA,IAAQ,MAAA,CAAO,MAAA,KAAW,SAAA;AAC/C,EAAA,IAAI,MAAA,GAAS,OAAO,MAAA,IAAU,EAAA;AAC9B,EAAA,IAAI,QAAA,EAAU;AAGZ,IAAA,MAAA,IAAU,CAAA,EAAG,MAAA,CAAO,QAAA,CAAS,IAAI,CAAA,IAAK,MAAA,KAAW,EAAA,GAAK,EAAA,GAAK,IAAI,CAAA,EAAG,GAAG,CAAA,kBAAA,EAAqB,KAAK,SAAS,CAAA;AAAA,CAAA;AAAA,EAC1G;AACA,EAAA,OAAO;AAAA,IACL,QAAA,EAAU,OAAO,MAAA,IAAU,EAAA;AAAA,IAC3B,MAAA,EAAQ,OAAO,MAAA,IAAU,EAAA;AAAA,IACzB,MAAA;AAAA,IACA;AAAA,GACF;AACF;;;ACrHA,IAAM,YAAA,uBAAmB,GAAA,EAAoB;AAGtC,SAAS,6BAAA,GAAsC;AACpD,EAAA,YAAA,CAAa,KAAA,EAAM;AACrB;AAEA,IAAM,kBAAA,GAAqB,GAAA;AAapB,SAAS,iBAAA,CACd,KAAA,EACA,OAAA,GAAoC,EAAC,EACP;AAC9B,EAAA,MAAM,aAAa,KAAA,CAAM,UAAA;AACzB,EAAA,IAAI,CAAC,UAAA,IAAc,UAAA,CAAW,IAAA,KAAS,MAAA,EAAQ;AAC7C,IAAA,OAAO,EAAE,IAAA,EAAM,UAAA,EAAY,IAAA,IAAQ,MAAA,EAAQ,QAAQ,MAAA,EAAO;AAAA,EAC5D;AACA,EAAA,MAAM,OAAO,UAAA,CAAW,IAAA;AACxB,EAAA,IAAI,CAAC,WAAW,GAAA,EAAK;AACnB,IAAA,IAAI,IAAA,KAAS,OAAA,IAAW,IAAA,KAAS,YAAA,IAAgB,SAAS,aAAA,EAAe;AACvE,MAAA,OAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,SAAA,EAAU;AAAA,IACnC;AACA,IAAA,OAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,QAAQ,KAAA,EAAO,CAAA,oCAAA,EAAuC,IAAI,CAAA,CAAA,CAAA,EAAI;AAAA,EACvF;AAEA,EAAA,MAAM,MAAA,GAAS,kBAAA,CAAmB,UAAA,CAAW,GAAG,CAAA;AAChD,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,OAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,MAAA,EAAQ,OAAO,yCAAA,EAA0C;AAAA,EAClF;AAEA,EAAA,QAAQ,OAAO,IAAA;AAAM,IACnB,KAAK,KAAA,EAAO;AACV,MAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,GAAA,IAAO,OAAA,CAAQ,GAAA;AACnC,MAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,IAAI,CAAA;AAC7B,MAAA,IAAI,CAAC,KAAA,EAAO;AACV,QAAA,OAAO,EAAE,MAAM,MAAA,EAAQ,KAAA,EAAO,OAAO,CAAA,qBAAA,EAAwB,MAAA,CAAO,IAAI,CAAA,WAAA,CAAA,EAAc;AAAA,MACxF;AACA,MAAA,OAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,KAAA,EAAO,KAAA,EAAM;AAAA,IACtC;AAAA,IACA,KAAK,UAAA,EAAY;AACf,MAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,OAAA,GAAU,MAAA,CAAO,QAAQ,CAAA;AAC/C,MAAA,IAAI,CAAC,KAAA,EAAO;AACV,QAAA,OAAO;AAAA,UACL,IAAA;AAAA,UACA,MAAA,EAAQ,UAAA;AAAA,UACR,KAAA,EAAO,CAAA,0CAAA,EAA6C,MAAA,CAAO,QAAQ,CAAA,CAAA;AAAA,SACrE;AAAA,MACF;AACA,MAAA,OAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,UAAA,EAAY,KAAA,EAAM;AAAA,IAC3C;AAAA,IACA,KAAK,KAAA,EAAO;AACV,MAAA,IAAI,OAAA,CAAQ,iBAAiB,KAAA,EAAO;AAClC,QAAA,OAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,KAAA,EAAO,OAAO,mDAAA,EAAoD;AAAA,MAC3F;AACA,MAAA,MAAM,MAAA,GAAS,YAAA,CAAa,GAAA,CAAI,MAAA,CAAO,OAAO,CAAA;AAC9C,MAAA,IAAI,MAAA,KAAW,QAAW,OAAO,EAAE,MAAM,MAAA,EAAQ,KAAA,EAAO,OAAO,MAAA,EAAO;AACtE,MAAA,MAAM,IAAA,GACJ,OAAA,CAAQ,QAAA,KAAa,OAAA,GACjB,CAAC,KAAA,EAAO,IAAA,EAAM,MAAA,CAAO,OAAO,CAAA,GAC5B,CAAC,SAAA,EAAW,IAAA,EAAM,OAAO,OAAO,CAAA;AACtC,MAAA,MAAM,SAAS,iBAAA,CAAkB,IAAA,EAAM,EAAE,SAAA,EAAW,oBAAoB,CAAA;AACxE,MAAA,IAAI,OAAO,QAAA,EAAU;AACnB,QAAA,OAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,KAAA,EAAO,OAAO,CAAA,sCAAA,CAAA,EAAyC;AAAA,MAChF;AACA,MAAA,IAAI,MAAA,CAAO,aAAa,CAAA,EAAG;AACzB,QAAA,OAAO,EAAE,MAAM,MAAA,EAAQ,KAAA,EAAO,OAAO,CAAA,0BAAA,EAA6B,MAAA,CAAO,QAAQ,CAAA,CAAA,EAAG;AAAA,MACtF;AACA,MAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,MAAA,CAAO,IAAA,EAAK;AACjC,MAAA,IAAI,CAAC,OAAO,OAAO,EAAE,MAAM,MAAA,EAAQ,KAAA,EAAO,OAAO,uCAAA,EAAwC;AACzF,MAAA,YAAA,CAAa,GAAA,CAAI,MAAA,CAAO,OAAA,EAAS,KAAK,CAAA;AACtC,MAAA,OAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,KAAA,EAAO,KAAA,EAAM;AAAA,IACtC;AAAA,IACA,KAAK,SAAA;AACH,MAAA,OAAO;AAAA,QACL,IAAA;AAAA,QACA,MAAA,EAAQ,SAAA;AAAA,QACR,KAAA,EACE,CAAA,yGAAA;AAAA,OAEJ;AAAA;AAEN","file":"chunk-ADPM6AYF.js","sourcesContent":["/**\n * Runtime-portable subprocess spawning.\n *\n * `node:child_process` is implemented by both Node and Bun, so it is the\n * portable choice — no runtime detection needed (unlike embedded SQLite,\n * which has no shared API; see `logging/sinks/sqlite-runtime.ts`).\n *\n * These helpers wrap `node:child_process` to present a `Bun.Subprocess`-shaped\n * result — web `ReadableStream` stdio plus an `exited` promise — so call sites\n * migrated off `Bun.spawn` keep their stream-reading code unchanged.\n */\nimport { spawn, spawnSync } from \"node:child_process\";\nimport { constants } from \"node:os\";\nimport { Readable } from \"node:stream\";\n\nexport interface PortableSpawnOptions {\n  cwd?: string;\n  env?: Record<string, string | undefined>;\n  detached?: boolean;\n}\n\n/**\n * Options for {@link portableSpawnSync}.\n *\n * `timeoutMs` is **required**, and deliberately so. A synchronous spawn blocks\n * the single-threaded event loop until the child exits; if the child stalls —\n * classically on a wedged network/FUSE mount reachable from `cwd` — the whole\n * process stops serving. An unbounded `spawnSync` is therefore not a call that\n * should be expressible, so the deadline is part of the type rather than an\n * optional extra a caller can forget.\n */\nexport interface PortableSpawnSyncOptions extends PortableSpawnOptions {\n  /** Wall-clock limit for the child, in milliseconds. Must be > 0. */\n  timeoutMs: number;\n}\n\n/** A spawned process with stdout/stderr piped. Mirrors the shape of `Bun.Subprocess`. */\nexport interface PortableSubprocess {\n  /** OS process id, or -1 if the process failed to spawn. */\n  readonly pid: number;\n  readonly stdout: ReadableStream<Uint8Array>;\n  readonly stderr: ReadableStream<Uint8Array>;\n  /**\n   * Resolves with the exit code once the process closes. Signal termination\n   * uses the conventional `128 + signal number`; spawn errors or unknown\n   * signals use `-1`.\n   */\n  readonly exited: Promise<number>;\n  kill(signal?: number | NodeJS.Signals): void;\n}\n\nexport interface PortableSpawnSyncResult {\n  /** Exit code; -1 when the process did not exit cleanly. */\n  exitCode: number;\n  stdout: string;\n  stderr: string;\n  /**\n   * `true` when the child was killed for exceeding\n   * {@link PortableSpawnSyncOptions.timeoutMs}. Lets a caller tell \"the command\n   * failed\" apart from \"the command never finished\", which are different\n   * operational events.\n   */\n  timedOut: boolean;\n}\n\n/**\n * Spawn a subprocess with stdout/stderr piped. Works under Node and Bun.\n *\n * @param cmd - Command and arguments, e.g. `[\"docker\", \"ps\"]`.\n */\nexport function portableSpawn(cmd: string[], opts: PortableSpawnOptions = {}): PortableSubprocess {\n  const [bin, ...args] = cmd;\n  if (!bin) throw new Error(\"portableSpawn: empty command\");\n  const child = spawn(bin, args, {\n    cwd: opts.cwd,\n    env: opts.env ?? process.env,\n    stdio: [\"ignore\", \"pipe\", \"pipe\"],\n    detached: opts.detached,\n  });\n  const exited = new Promise<number>((resolve) => {\n    child.on(\"close\", (code, signal) => {\n      if (code !== null) {\n        resolve(code);\n        return;\n      }\n      const signalNumber = signal ? constants.signals[signal] : undefined;\n      resolve(signalNumber === undefined ? -1 : 128 + signalNumber);\n    });\n    child.on(\"error\", () => resolve(-1));\n  });\n  return {\n    pid: child.pid ?? -1,\n    stdout: Readable.toWeb(child.stdout as Readable) as unknown as ReadableStream<Uint8Array>,\n    stderr: Readable.toWeb(child.stderr as Readable) as unknown as ReadableStream<Uint8Array>,\n    exited,\n    kill: (signal) => {\n      if (opts.detached && child.pid) {\n        try {\n          process.kill(-child.pid, signal);\n          return;\n        } catch {\n          /* fall back to killing the direct child */\n        }\n      }\n      child.kill(signal);\n    },\n  };\n}\n\n/**\n * Run a subprocess to completion synchronously, capturing stdout/stderr as\n * UTF-8 strings. Works under Node and Bun.\n *\n * Blocks the event loop for the child's whole lifetime, so `opts.timeoutMs`\n * is required — see {@link PortableSpawnSyncOptions}. Prefer\n * {@link portableSpawn} wherever an async call is possible; only reach for this\n * when the caller genuinely cannot await (process teardown, CLI entry points).\n *\n * The child is killed with `SIGKILL` rather than `SIGTERM` on expiry: a process\n * blocked in an uninterruptible kernel wait (`D` state, e.g. a dead FUSE\n * connection) never runs a `SIGTERM` handler, so a graceful signal would leave\n * the deadline unenforced.\n *\n * @param cmd - Command and arguments, e.g. `[\"docker\", \"info\"]`.\n * @param opts - Spawn options; `timeoutMs` is mandatory.\n */\nexport function portableSpawnSync(\n  cmd: string[],\n  opts: PortableSpawnSyncOptions,\n): PortableSpawnSyncResult {\n  const [bin, ...args] = cmd;\n  if (!bin) throw new Error(\"portableSpawnSync: empty command\");\n  if (!(opts.timeoutMs > 0)) {\n    throw new Error(`portableSpawnSync: timeoutMs must be > 0 (got ${opts.timeoutMs})`);\n  }\n  const result = spawnSync(bin, args, {\n    cwd: opts.cwd,\n    env: opts.env ?? process.env,\n    encoding: \"utf8\",\n    timeout: opts.timeoutMs,\n    killSignal: \"SIGKILL\",\n  });\n  // Node reports the expiry as `error.code === \"ETIMEDOUT\"`; Bun surfaces the\n  // same case as a SIGKILL with no status, so accept either signal.\n  const timedOut =\n    (result.error as NodeJS.ErrnoException | undefined)?.code === \"ETIMEDOUT\" ||\n    (result.status === null && result.signal === \"SIGKILL\");\n  let stderr = result.stderr ?? \"\";\n  if (timedOut) {\n    // Surface the reason on the channel every caller already inspects — an\n    // exitCode of -1 alone reads as \"command failed\" and hides the stall.\n    stderr += `${stderr.endsWith(\"\\n\") || stderr === \"\" ? \"\" : \"\\n\"}${bin}: timed out after ${opts.timeoutMs}ms\\n`;\n  }\n  return {\n    exitCode: result.status ?? -1,\n    stdout: result.stdout ?? \"\",\n    stderr,\n    timedOut,\n  };\n}\n","/**\n * Credential resolution for registry entries (§1.4).\n *\n * Split from `provider-registry.ts` deliberately: resolving a `cmd:` reference\n * spawns a process and `env:` reads `process.env`, so this module depends on\n * Node. The schema module must stay dependency-free because browser bundles\n * (`@skaile/workspace-bridge-react`) reach the registry *types* through\n * `@skaile/workspaces/types`, and a `node:child_process` import in that graph\n * breaks their typecheck.\n *\n * @see PROVIDER-CONFIG-PLAN.md §1.4\n */\n\nimport type { AIProviderCredentialKind, AIProviderEntry } from \"./provider-registry.js\";\nimport { parseCredentialRef } from \"./provider-registry.js\";\nimport { portableSpawnSync } from \"./subprocess.js\";\n\n/** Options for {@link resolveCredential}. */\nexport interface ResolveCredentialOptions {\n  /** Environment `env:` refs read from; defaults to `process.env`. */\n  env?: Record<string, string | undefined>;\n  /**\n   * Control-plane secrets, keyed by config id (a `platform:<configId>` ref) —\n   * the `secrets` map that rides alongside `session_init`.\n   */\n  secrets?: Record<string, string>;\n  /** Run `cmd:` references. Default `true`; the platform sets it `false`. */\n  allowCommand?: boolean;\n}\n\n/** Outcome of {@link resolveCredential}. Never carries the secret in `error`. */\nexport interface ResolvedAIProviderCredential {\n  kind: AIProviderCredentialKind;\n  /** The secret, when one was produced. */\n  value?: string;\n  /** Where the value came from; `ambient` means the transport's own chain signs. */\n  source: \"env\" | \"cmd\" | \"platform\" | \"keyring\" | \"ambient\" | \"none\";\n  /** Why there is no value. Secret-free. */\n  error?: string;\n}\n\n/** `cmd:` results are cached per process, matching omp's `!cmd` semantics. */\nconst commandCache = new Map<string, string>();\n\n/** Test seam — drops the memoized `cmd:` results. */\nexport function __resetCredentialCommandCache(): void {\n  commandCache.clear();\n}\n\nconst COMMAND_TIMEOUT_MS = 10_000;\n\n/**\n * Resolve an entry's credential to a value (§1.4).\n *\n * `env:` reads the environment, `cmd:` runs a shell (10 s, trimmed stdout,\n * cached per process), `platform:` reads the injected secrets map. `keyring:`\n * is a reserved grammar slot: it validates but does not resolve, and says so.\n *\n * `sigv4`, `google_adc` and `azure_entra` entries without a ref resolve to\n * `source: \"ambient\"` with no value — the AWS/Google/Azure SDK chain signs the\n * request, there is nothing for this function to hand over.\n */\nexport function resolveCredential(\n  entry: AIProviderEntry,\n  options: ResolveCredentialOptions = {},\n): ResolvedAIProviderCredential {\n  const credential = entry.credential;\n  if (!credential || credential.kind === \"none\") {\n    return { kind: credential?.kind ?? \"none\", source: \"none\" };\n  }\n  const kind = credential.kind;\n  if (!credential.ref) {\n    if (kind === \"sigv4\" || kind === \"google_adc\" || kind === \"azure_entra\") {\n      return { kind, source: \"ambient\" };\n    }\n    return { kind, source: \"none\", error: `credential.ref is missing for kind '${kind}'` };\n  }\n\n  const parsed = parseCredentialRef(credential.ref);\n  if (!parsed) {\n    return { kind, source: \"none\", error: \"credential.ref is not a valid reference\" };\n  }\n\n  switch (parsed.form) {\n    case \"env\": {\n      const env = options.env ?? process.env;\n      const value = env[parsed.name];\n      if (!value) {\n        return { kind, source: \"env\", error: `environment variable ${parsed.name} is not set` };\n      }\n      return { kind, source: \"env\", value };\n    }\n    case \"platform\": {\n      const value = options.secrets?.[parsed.configId];\n      if (!value) {\n        return {\n          kind,\n          source: \"platform\",\n          error: `no control-plane secret was injected for '${parsed.configId}'`,\n        };\n      }\n      return { kind, source: \"platform\", value };\n    }\n    case \"cmd\": {\n      if (options.allowCommand === false) {\n        return { kind, source: \"cmd\", error: \"cmd: references are not permitted in this context\" };\n      }\n      const cached = commandCache.get(parsed.command);\n      if (cached !== undefined) return { kind, source: \"cmd\", value: cached };\n      const argv =\n        process.platform === \"win32\"\n          ? [\"cmd\", \"/c\", parsed.command]\n          : [\"/bin/sh\", \"-c\", parsed.command];\n      const result = portableSpawnSync(argv, { timeoutMs: COMMAND_TIMEOUT_MS });\n      if (result.timedOut) {\n        return { kind, source: \"cmd\", error: `credential command timed out after 10s` };\n      }\n      if (result.exitCode !== 0) {\n        return { kind, source: \"cmd\", error: `credential command exited ${result.exitCode}` };\n      }\n      const value = result.stdout.trim();\n      if (!value) return { kind, source: \"cmd\", error: \"credential command produced no output\" };\n      commandCache.set(parsed.command, value);\n      return { kind, source: \"cmd\", value };\n    }\n    case \"keyring\":\n      return {\n        kind,\n        source: \"keyring\",\n        error:\n          `keyring references are a reserved grammar slot — ` +\n          `no OS keychain backend ships yet (use env: or cmd:)`,\n      };\n  }\n}\n"]}

package/dist/{chunk-WOIRYY5L.js → chunk-AITJ7ELM.js}

@@ -1,17 +1,17 @@
-import { openLibrary } from './chunk-X4ZZTHU3.js';
-import { S, logErr, logWarn, logOk, logInfo } from './chunk-QG6GHTRM.js';
-import { getKindRegistry } from './chunk-F6AA42GW.js';
-import { resolveBinding, UnknownCompositionKindError } from './chunk-7NT4F6SR.js';
-import { filesEntryPaths, assetRootProblem, stampManifestPublisher, upsertManifestAsset, resolveIndexPath, LocalIndex } from './chunk-XM6T2AZ2.js';
-import { SEMVER_RE, invalidSemverMessage, flowFileNameError, parseManifestFile, requiresSyntaxErrors } from './chunk-I37INEWE.js';
-import { parseFlowDefinition } from './chunk-X3RMRJNR.js';
-import { SKILL_DESCRIPTION_PLACEHOLDER_PREFIX, FLOW_DESCRIPTION_PLACEHOLDER, PRESET_DESCRIPTION_PLACEHOLDER, PRESET_ITEM_PLACEHOLDER_REF, isScaffoldBody, composeSlotDiagnostics, agentDeprecationDiagnostics, composeRefTarget } from './chunk-335ENCCS.js';
-import { checkAgentSkillConformance } from './chunk-N46LQR46.js';
-import { matchPin } from './chunk-V257LUBM.js';
+import { openLibrary } from './chunk-RDTLPOPD.js';
+import { S, logErr, logWarn, logOk, logInfo } from './chunk-QEULL4Q3.js';
+import { getKindRegistry } from './chunk-COYF6IG2.js';
+import { resolveBinding, UnknownCompositionKindError } from './chunk-2LAPHLDH.js';
+import { filesEntryPaths, assetRootProblem, stampManifestPublisher, upsertManifestAsset, resolveIndexPath, LocalIndex } from './chunk-S2XHGWQC.js';
+import { SEMVER_RE, invalidSemverMessage, flowFileNameError, parseManifestFile, requiresSyntaxErrors } from './chunk-UI745XC3.js';
+import { parseFlowDefinition } from './chunk-JRN5QF4C.js';
+import { SKILL_DESCRIPTION_PLACEHOLDER_PREFIX, FLOW_DESCRIPTION_PLACEHOLDER, PRESET_DESCRIPTION_PLACEHOLDER, PRESET_ITEM_PLACEHOLDER_REF, isScaffoldBody, composeSlotDiagnostics, agentDeprecationDiagnostics, composeRefTarget } from './chunk-E572OHGY.js';
+import { checkAgentSkillConformance } from './chunk-VMVDAZLA.js';
+import { matchPin } from './chunk-ZHGKAZJ7.js';
 import { globalSkaileDir } from './chunk-L5VSIPQD.js';
-import { SKAILE_MANIFEST_FILENAME, loadSkPublishManifest, listLibrarySymlinks, librarySymlinkMessage } from './chunk-UQ33Y4DM.js';
-import { readAssetBody, parseFrontmatter } from './chunk-GOCWM7FN.js';
-import { parseDep, PUBLISHER_HINT, isValidPublisher, slugifyAssetName, parseAssetRef, isValidAssetName, ASSET_NAME_HINT, assetRefProblem } from './chunk-WDXZA7QW.js';
+import { SKAILE_MANIFEST_FILENAME, loadSkPublishManifest, expandManifestFiles, listLibrarySymlinks, librarySymlinkMessage } from './chunk-ZBHZLWV3.js';
+import { readAssetBody, parseFrontmatter } from './chunk-RHN5MRQO.js';
+import { parseDep, PUBLISHER_HINT, isValidPublisher, slugifyAssetName, parseAssetRef, isValidAssetName, ASSET_NAME_HINT, assetRefProblem } from './chunk-LSSYC5IC.js';
 import * as fs3 from 'fs';
 import { rmSync, readFileSync, mkdirSync, writeFileSync, chmodSync } from 'fs';
 import * as path3 from 'path';
@@ -174,6 +174,30 @@ function agentComposeRefProblems(parsed, context) {
   });
   return out;
 }
+var MANIFEST_GLOBS = [
+  { pattern: /\/SKILL\.md$/, kind: "skill" },
+  { pattern: /\/agent\.yaml$/, kind: "agent" },
+  { pattern: /\/AGENT\.md$/, kind: "agent" },
+  { pattern: /\/CONTRACT\.md$/, kind: "contract" },
+  { pattern: /\/PERSONA\.md$/, kind: "persona" },
+  { pattern: /\/RULESET\.md$/, kind: "ruleset" },
+  { pattern: /\.flow\.yaml$/, kind: "flow" },
+  { pattern: /\.flow\.json$/, kind: "flow" },
+  { pattern: /\/CONNECTOR\.md$/, kind: "connector" },
+  { pattern: /\.prompt\.md$/, kind: "prompt" },
+  { pattern: /\/MCP\.md$/, kind: "mcp-server" },
+  { pattern: /\/knowledge\.yaml$/, kind: "knowledge" },
+  { pattern: /\/knowledge\/index\.yaml$/, kind: "knowledge" },
+  { pattern: /\.preset\.yaml$/, kind: "preset" }
+];
+function manifestKindOfFile(file) {
+  const posix = file.split(path3.sep).join("/");
+  const hay = posix.startsWith("/") ? posix : `/${posix}`;
+  return MANIFEST_GLOBS.find((g) => g.pattern.test(hay))?.kind;
+}
+function manifestParseErrorText(reason) {
+  return `parse error: ${reason}`;
+}
 var UNUSED_KEYS = ["reads_from", "writes_to"];
 function checkAssetManifest(kind, parsed, body, dirName) {
   const out = [];
@@ -341,6 +365,31 @@ function referenceErrors(kind, parsed, registry, fileName) {
   }
   return out;
 }
+function nameDescriptionProblem(kind, parsed, dirName, e) {
+  if (e.path === "name") {
+    const name = parsed.name;
+    if ((name ?? null) === null) {
+      return `name is required: add \`name: ${dirName}\` (lowercase kebab-case, the name of the ${kind})`;
+    }
+    if (typeof name !== "string") {
+      return `name must be text: write \`name: ${dirName}\` (lowercase kebab-case, the name of the ${kind})`;
+    }
+    return void 0;
+  }
+  if (e.path === "description") {
+    const description = parsed.description;
+    if ((description ?? null) === null) {
+      return `description is required: say what the ${kind} does and when to use it`;
+    }
+    if (typeof description !== "string") {
+      return `description must be text: say what the ${kind} does and when to use it`;
+    }
+    if (description.trim() === "" && !e.message.startsWith("description is empty")) {
+      return `description: description is empty \u2014 say what the ${kind} does and when to use it`;
+    }
+  }
+  return void 0;
+}
 function checkAsset(kind, parsed, body, dirName, registry, rawText, fileName, agentFiles) {
   const errors = [];
   const error2 = (text) => {
@@ -355,6 +404,7 @@ function checkAsset(kind, parsed, body, dirName, registry, rawText, fileName, ag
   const effective = withManifestDefaults(kind, parsed);
   const versionKey = ["skill", "prompt", "contract"].includes(kind) ? "metadata.version" : "version";
   const provider = registry.getProvider(kind);
+  const reported = /* @__PURE__ */ new Set();
   if (!provider) {
     error2(`unknown_asset_kind: kind "${kind}" is not registered`);
   } else {
@@ -367,8 +417,10 @@ function checkAsset(kind, parsed, body, dirName, registry, rawText, fileName, ag
           }
           continue;
         }
-        if (e.path === "description" && (parsed.description ?? null) === null) {
-          error2(`description is required: say what the ${kind} does and when to use it`);
+        reported.add(e.path);
+        const plain = nameDescriptionProblem(kind, parsed, dirName, e);
+        if (plain) {
+          error2(plain);
           continue;
         }
         error2(`${e.path ? `${e.path}: ` : ""}${e.message}`);
@@ -384,9 +436,20 @@ function checkAsset(kind, parsed, body, dirName, registry, rawText, fileName, ag
   for (const text of scaffoldDefinitionErrors(kind, parsed)) error2(text);
   for (const text of referenceErrors(kind, parsed, registry, fileName)) error2(text);
   if (kind === "flow") {
+    if (!reported.has("description")) {
+      const plain = nameDescriptionProblem(kind, parsed, dirName, {
+        path: "description",
+        message: ""
+      });
+      if (plain) {
+        error2(plain);
+        reported.add("description");
+      }
+    }
     const flow = parseFlowDefinition(effective);
     if (!flow.ok) {
       for (const e of flow.errors) {
+        if (reported.has(e.path)) continue;
         error2(`invalid flow definition: ${e.path || "<root>"}: ${e.message}`);
       }
     }
@@ -462,6 +525,23 @@ function checkAssetFile(file, kind, registry, libraryRoot, composeRefs) {
   );
   return [...checked.errors, ...checked.advisories.filter((f) => f.scaffoldBody)];
 }
+function libraryAssetRefusals(asset, libraryPath, registry) {
+  let file = asset.source;
+  try {
+    if (fs3.statSync(file).isDirectory()) file = findAssetManifestFile(file, asset.kind, asset.name);
+  } catch {
+    return [];
+  }
+  if (!file || manifestKindOfFile(file) !== asset.kind) return [];
+  const rel = path3.relative(libraryPath, file).split(path3.sep).join("/");
+  try {
+    const parsed = parseManifestFile(file, fs3.readFileSync(file, "utf8"));
+    if (!parsed.ok) return [`${rel} [${asset.kind}] \u2014 ${manifestParseErrorText(parsed.reason)}`];
+  } catch {
+    return [];
+  }
+  return checkAssetFile(file, asset.kind, registry, libraryPath).filter((f) => !f.scaffoldBody && !/scaffold placeholder|placeholder \(/i.test(f.text)).map((f) => `${rel} [${f.tag}] \u2014 ${f.text}`);
+}
 function unheldRequiresOfFile(file, kind, context) {
   try {
     const res = parseManifestFile(file, fs3.readFileSync(file, "utf8"));
@@ -1004,8 +1084,35 @@ function manifestRootProblems(dir) {
   }
   return problems;
 }
-function exitOnManifestRootProblems(dir, verb) {
-  const problems = manifestRootProblems(dir);
+function manifestFilesProblems(dir) {
+  const manifest = loadSkPublishManifest(dir);
+  if (!manifest || manifest.source) return [];
+  const problems = [];
+  for (const a of manifest.assets ?? []) {
+    if (a.source || !Array.isArray(a.files) || a.files.length === 0) continue;
+    const ref = assetEntryRef(a, manifest);
+    const patterns = a.files.map((f) => typeof f === "string" ? f : f.path).filter(Boolean);
+    const outside = patterns.filter(
+      (p) => path3.isAbsolute(p) || p.split(/[\\/]+/).includes("..") || /^[a-zA-Z]:/.test(p)
+    );
+    if (outside.length > 0) {
+      problems.push(
+        `${SKAILE_MANIFEST_FILENAME} [assets] ${ref} \u2014 files: ${outside.join(", ")} leaves the library: \`add\` ignores it and a published repo has no file for it. Remove the entry from the \`files:\` list or move the file into the library.`
+      );
+      continue;
+    }
+    if (a.root) continue;
+    const { unmatched } = expandManifestFiles(dir, patterns);
+    if (unmatched.length > 0) {
+      problems.push(
+        `${SKAILE_MANIFEST_FILENAME} [assets] ${ref} \u2014 files: ${unmatched.join(", ")} not found. Fix the \`files:\` list or drop the entry.`
+      );
+    }
+  }
+  return problems;
+}
+function exitOnManifestPathProblems(dir, verb) {
+  const problems = [...manifestRootProblems(dir), ...manifestFilesProblems(dir)];
   if (problems.length === 0) return;
   for (const message of problems) logErr(message);
   logErr(`Fix or remove the entry in ${SKAILE_MANIFEST_FILENAME}, then re-run \`${verb}\`.`);
@@ -1022,17 +1129,24 @@ function exitOnLibrarySymlinks(dir, verb) {
   logErr(`${count} symlink(s) in ${dir}: remove them, then re-run \`${verb}\`.`);
   process.exit(1);
 }
+function manifestParseFailureLine(libPath, rel) {
+  const file = path3.join(libPath, rel);
+  try {
+    if (!fs3.statSync(file).isFile()) return void 0;
+    const res = parseManifestFile(file, fs3.readFileSync(file, "utf-8"));
+    if (res.ok) return void 0;
+    const kind = manifestKindOfFile(file) ?? "asset";
+    return `${rel.split(path3.sep).join("/")} [${kind}] \u2014 ${manifestParseErrorText(res.reason)}`;
+  } catch {
+    return void 0;
+  }
+}
 function parseFailureText(libPath, error2) {
   const m = /^(.*): ManifestSchemaError: failed to parse manifest file (.+)$/.exec(error2);
   if (!m) return error2;
   for (const rel of [m[1], path3.join(m[1], m[2]), m[2]]) {
-    const file = path3.join(libPath, rel);
-    try {
-      if (!fs3.statSync(file).isFile()) continue;
-      const res = parseManifestFile(file, fs3.readFileSync(file, "utf-8"));
-      if (!res.ok) return `${rel.split(path3.sep).join("/")}: ${res.reason}`;
-    } catch {
-    }
+    const line = manifestParseFailureLine(libPath, rel);
+    if (line) return line;
   }
   return error2;
 }
@@ -1184,6 +1298,6 @@ function warnLegacyBundleFiles(root) {
   return files.length;
 }
 
-export { DOMAIN_REMOVED_HINT, assetEntryRef, assetNamespace, bareName, checkAsset, checkAssetFile, checkComposeKinds, composeRefContext, declaredVersion, deviceLogin, duplicateAssetMessage, exitOnEmptyAsset, exitOnLibrarySymlinks, exitOnManifestPublisherProblems, exitOnManifestRootProblems, findAssetManifestFile, findEntryManifestFile, formatNamespaceAvailability, getAccessToken, getStoreIdentity, hasStoredAuth, indexLibrary, invalidPublisherMessage, invalidSemverText, loadStoreAuthConfig, logout, manifestDependencyProblems, manifestEntryNameProblems, manifestNamespaces, manifestPublisherProblems, manifestRequiresProblems, manifestRootProblems, manifestVersionMismatchMessage, plannedRefs, preflightNamespace, publishToStore, refFor, registerLibraryAsset, registeredAssetKeys, rejectRemovedDomainOption, removedDomainOption, reportLibrarySymlinks, requireValidPublisherOrExit, resolveLibraryPublisherDetailed, unheldRequiresOfFile, unresolvedManifestDependencies, warnIgnoredDomainFiles, warnLegacyBundleFiles, warnLibraryNameFallback };
-//# sourceMappingURL=chunk-WOIRYY5L.js.map
-//# sourceMappingURL=chunk-WOIRYY5L.js.map
+export { DOMAIN_REMOVED_HINT, MANIFEST_GLOBS, assetEntryRef, assetNamespace, bareName, checkAsset, checkAssetFile, checkComposeKinds, composeRefContext, declaredVersion, deviceLogin, duplicateAssetMessage, exitOnEmptyAsset, exitOnLibrarySymlinks, exitOnManifestPathProblems, exitOnManifestPublisherProblems, findAssetManifestFile, findEntryManifestFile, formatNamespaceAvailability, getAccessToken, getStoreIdentity, hasStoredAuth, indexLibrary, invalidPublisherMessage, invalidSemverText, libraryAssetRefusals, loadStoreAuthConfig, logout, manifestDependencyProblems, manifestEntryNameProblems, manifestFilesProblems, manifestNamespaces, manifestParseErrorText, manifestParseFailureLine, manifestPublisherProblems, manifestRequiresProblems, manifestRootProblems, manifestVersionMismatchMessage, plannedRefs, preflightNamespace, publishToStore, refFor, registerLibraryAsset, registeredAssetKeys, rejectRemovedDomainOption, removedDomainOption, reportLibrarySymlinks, requireValidPublisherOrExit, resolveLibraryPublisherDetailed, unheldRequiresOfFile, unresolvedManifestDependencies, warnIgnoredDomainFiles, warnLegacyBundleFiles, warnLibraryNameFallback };
+//# sourceMappingURL=chunk-AITJ7ELM.js.map
+//# sourceMappingURL=chunk-AITJ7ELM.js.map