@skaile/workspaces 5.3.0 → 5.4.0

package/dist/factory-assets/skills/skaile-author-asset/SKILL.md

@@ -1,8 +1,8 @@
 ---
 name: "skaile-author-asset"
-description: "Use when an asset author needs to build a skill in a local library and publish it. Covers the source/library/store model, laying out a repo (any depth, optional plugin grouping), the SKILL.md format, and the .skaile-source.yaml manifest (v1 glob vs v2 author-shipped inventory) and publish flow via the skaile CLI."
+description: "Use when an asset author needs to build a skill in a local library and publish it. Covers the source/library/store model, laying out a repo (any depth, optional plugin grouping), the SKILL.md format, and the skaile.manifest.yaml publication manifest and publish flow (library publish/register/yank) via the skaile CLI."
 metadata:
-  version: "0.1.1"
+  version: "0.1.2"
   tags:
     - "authoring"
     - "skill"
@@ -19,7 +19,7 @@ metadata:
 # Author an AI-Asset
 
 How to author a **skill** (or any asset kind) in a local library, lay out the
-repository, write the `.skaile-source.yaml` **manifest**, and
+repository, keep its `skaile.manifest.yaml` **manifest** current, and
 **publish** it through the store.
 
 For the canonical skill folder layout and frontmatter spec, read the companion
@@ -78,7 +78,7 @@ names carry no meaning, so lay the repo out however suits you:
 
 ```
 my-assets/                       # repo root (a "source")
-├── .skaile-source.yaml          # manifest (see §4)
+├── skaile.manifest.yaml         # publication manifest (see §4)
 ├── .claude-plugin/
 │   └── plugin.json              # optional grouping (see below)
 ├── skills/
@@ -92,13 +92,13 @@ my-assets/                       # repo root (a "source")
 
 **Publisher** is never read from a path segment. Resolution order:
 
-1. A per-asset `publisher` in a v2 inventory (§4).
-2. `publisher_overrides` — a per-path entry in the manifest.
-3. `publisher_default` — a literal such as `'@acme'`.
-4. Otherwise the repo name.
+1. A per-asset `publisher` on the `assets[]` entry (§4).
+2. The manifest's top-level `publisher`.
+3. Otherwise your store identity or the library name (`library create` warns when it falls back).
 
-With `publisher_default: '@acme'`, every asset is published as `@acme/<name>`;
-use `publisher_overrides` for the exceptions.
+With `publisher: acme` at the top of `skaile.manifest.yaml`, every asset is
+published as `@acme/<name>`; set `publisher` on an entry for the exceptions.
+Change the default later with `skaile library set <library> publisher=<slug>`.
 
 **Grouping in `skaile manage`** is optional and comes from Claude plugin
 manifests, not from folders: list the asset directories in
@@ -126,7 +126,7 @@ metadata:
   tags: [research, brief]
   stage: alpha          # alpha | beta | stable | deprecated
   requires:             # cross-asset dependencies (optional)
-    - "@research/brief-format@^2"
+    - "skill:brief-format"
 ---
 
 # Brief
@@ -140,86 +140,98 @@ metadata:
 
 Keep the body tight — it ships as a prompt.
 
-## 4. The manifest — `.skaile-source.yaml`
+## 4. The manifest — `skaile.manifest.yaml`
 
-One file at the **repo root** declares how the repo maps to publisher
-namespaces. Two modes:
+One file at the **library/repo root** declares what the repo **publishes**:
+the default `publisher`, a default `version`, and the `assets[]` inventory.
+`skaile library init` / `library create` write and maintain it; the publish
+commands read it as the **allowlist** — only assets listed in `assets[]` are
+published.
 
-### v1 — glob mode (default)
+```yaml
+# skaile.manifest.yaml
+publisher: acme                  # GitHub-shaped, no "@"; inherited by every asset
+version: 1.0.0                   # repo-level default version
+dev_paths:                       # optional: dev-only prefixes, excluded unless --dev
+  - ai-assets-dev
+assets:
+  - kind: skill
+    name: brief
+    root: research/skills/brief  # a directory, walked recursively
+    description: Generates a project brief
+    keywords: [research, brief]
+    dependencies:                # canonical refs only: kind:@<publisher>/<name>[#version]
+      - skill:@acme/brief-format#^2
+  - kind: agent
+    name: analyst
+    files:                       # or an explicit file list (repo-relative)
+      - agents/analyst/agent.yaml
+    publisher: research          # per-asset publisher override
+    version: 2.0.0               # per-asset version override
+```
 
-Discovery walks the tree, matches kind globs, and resolves each asset's
-publisher from the manifest. Use this while a repo is evolving fast.
+Keep it in sync with the tree instead of hand-editing the inventory:
 
-```yaml
-version: 1
-publisher_default: '@acme'       # literal publisher; never derived from a folder name
-default_ref: main
-publisher_overrides:
-  - path: research-contracts/
-    publisher: '@research-contracts'
+```bash
+skaile library create skill my-skill --library personal   # scaffolds the asset AND adds its assets[] entry
+skaile library index personal                              # after hand edits: add new assets, drop deleted ones
+skaile validate <library-path>                             # schema + canonical names, run before publishing
 ```
 
-### v2 — author-shipped inventory (pinned)
+An asset on disk but missing from `assets[]` is **not published**; an entry
+whose `root:` directory is gone makes `library publish` fail until
+`library index` drops it. `sha256` per entry is optional — if you pin one, a
+mismatch is a hard error.
 
-Add an `assets:` block and bump to `version: 2`. Discovery then treats the
-block as authoritative: it **skips the glob walk**, uses your curated `files[]`
-filter, your per-entry publisher, your `requires[]` graph, and verifies your
-`sha256`. Use this for reproducible, signed, audit-friendly releases.
+> `.skaile-source.yaml` is the **legacy** source config of third-party repos
+> (`publisher_default`, `publisher_overrides`, `dev_paths`). It is not what a
+> library writes and no longer sets a publisher; `skaile.manifest.yaml`
+> replaces it.
 
-```yaml
-version: 2
-publisher_default: '@acme'
-default_ref: main
-assets:
-  - path: research/skills/brief    # relative to repo root
-    kind: skill
-    publisher: '@research'         # required per entry
-    name: brief
-    version: 1.0.0
-    sha256: "<64-hex>"             # optional locally, REQUIRED to publish
-    files:                         # explicit; no wildcards; ≥1
-      - SKILL.md
-      - validator.py
-      - references/template.md
-    requires:
-      - "@research/brief-format@^2"
-    metadata:
-      description: Generates a project brief
-      keywords: [research, brief]
-```
+### Curating a repo you don't own
 
-**Never hand-edit the `assets:` block.** Generate it from the asset files (this
-is what `source-manifest-builder` automates):
+For a third-party source added with `skaile source add`, the manifest is a
+**curator** manifest (it carries `source:` and `provenance:`) kept under
+`~/.skaile/store/manifests/`:
 
 ```bash
-skaile source build-manifest --path ./my-assets            # preview
-skaile source build-manifest --path ./my-assets --diff     # show drift (CI-friendly, non-zero on drift)
-skaile source build-manifest --path ./my-assets --write    # write the manifest
-skaile source verify-manifest --path ./my-assets --strict  # verify before commit/publish
+skaile source manifest init <src>              # create it from a discovery walk
+skaile source manifest rebuild <src>           # re-derive after upstream changes (keeps your curation; --overwrite discards it)
+skaile source manifest verify <src> --strict   # verify hashes + manifest parse before publishing
+skaile source manifest publish <src>           # register it in the store
 ```
 
-Hash = sort `files[]` lexicographically, then SHA256 over
-`<relpath>\0<content>\0` per file. Author-computed hashes are wire-compatible
-with server-computed ones. Missing files are a hard error in manifest mode.
-
 ## 5. Publish
 
+`<library>` below is the **library name** (as shown by `skaile library list`),
+never an asset ref.
+
 ```bash
 # Attach a GitHub remote so the library is store-publishable
 skaile library link personal https://github.com/you/my-assets
 
-# Push bytes to GitHub + register the manifest in the store, atomically
-skaile library publish @research/brief@1.0.0
+skaile store login
 
-# Or register a manifest for bytes already on GitHub (no push)
-skaile library register @research/brief@1.0.0
+# Preview the plan: remote, publisher namespace(s), ref, refs to publish
+skaile library publish personal --dry-run
 
-# Retract a catalog entry
-skaile library yank @research/brief@1.0.0
+# Commit + push to the PUBLIC remote, register it as a store source, publish its assets
+skaile library publish personal
+# → skill:@acme/brief#1.0.0
+
+# Or register bytes that are already on GitHub (no commit/push)
+skaile library register personal
+
+# Retract published assets (all, or one with --asset)
+skaile library yank personal --asset skill:@acme/brief#1.0.0
 ```
 
-Consumers then install pointer-only: `skaile install @research/brief@1.0.0`
-fetches from your repo at the pinned commit and verifies SHA256 per file.
+`--asset <ref>` limits `publish` / `register` / `yank` to one asset. A local
+library with no remote needs `--create-repo` (or `library link`) first.
+
+Consumers then install pointer-only with the canonical ref:
+`skaile install skill:@acme/brief#1.0.0` fetches from your repo at the pinned
+commit and verifies SHA256 per file.
 
 ## Dev-only assets — `dev_paths` + `--dev`
 
@@ -232,11 +244,10 @@ pulled in only when a contributor opts in.
 - **Folder name:** keep dev assets under one top-level folder named
   **`ai-assets-dev/`** (intention-revealing; treat the `-dev` suffix as
   reserved).
-- **Mechanism:** declare it in `.skaile-source.yaml` under `dev_paths`:
+- **Mechanism:** declare it in `skaile.manifest.yaml` under `dev_paths`:
 
   ```yaml
-  version: 1
-  publisher_default: '@acme'
+  publisher: acme
   dev_paths:               # excluded from a normal discovery run
     - ai-assets-dev
   ```

package/dist/factory-assets/skills/skaile-manage-workspace/SKILL.md

@@ -2,7 +2,7 @@
 name: "skaile-manage-workspace"
 description: "Use when managing a skaile workspace from the command line: init/install a project, add/remove/list/search assets, work with sources and libraries, the interactive manage TUI, patches, sessions, and catalog config. Wraps the `skaile` CLI workspace surface."
 metadata:
-  version: "0.1.1"
+  version: "0.1.2"
   tags:
     - "cli"
     - "workspace"
@@ -45,8 +45,8 @@ paths, resources) live in `skaile.yaml` and are hand-edited.
 
 ## Assets in a workspace
 
-`skaile <noun>` works across kinds (`skill`, `agent`, `prompt`, `flow`,
-`bundle`, `contract`); the unified verbs:
+The asset verbs work across kinds (`skill`, `agent`, `prompt`, `flow`,
+`bundle`, `contract`):
 
 ```bash
 skaile add <ref> [--global]      # add to skaile.yaml + deploy
@@ -57,7 +57,7 @@ skaile search [kind] [query]     # search across all sources
 skaile info <ref>                # metadata, deps, deploy status
 skaile why <ref>                 # why is this installed (dep chain)
 skaile tree                      # dependency tree
-skaile outdated [name]           # assets behind their source
+skaile outdated [ref]            # assets behind their source
 skaile update [name]             # refresh catalog cache + re-deploy outdated
 skaile diff <ref>                # deployed vs source diff
 skaile doctor [name]             # scan for broken deps
@@ -65,12 +65,14 @@ skaile create <name> [--kind k]  # scaffold a new asset
 skaile history [limit]           # recent actions
 ```
 
-`<ref>` is `@publisher/name` optionally pinned with `@version`.
+`<ref>` is the canonical `kind:@<publisher>/<name>`, optionally pinned with
+`#<version>` — e.g. `skill:@research/brief#1.0.0`. The `kind:` prefix is
+required and the version follows `#`, never `@`.
 
 ### Pointer-only install from the catalog
 
 ```bash
-skaile install @research/brief@1.0.0
+skaile install skill:@research/brief#1.0.0
 ```
 
 Resolves the install manifest from the configured catalog, fetches file bytes
@@ -92,15 +94,19 @@ grouped by publisher/source and Claude plugin, unlisted assets under `Other`), *
 ## Sources (third-party / team repos)
 
 ```bash
-skaile source add <git-url>      # clone + register a github source (~/.skaile/sources/<name>)
+skaile source add <git-url>      # clone + register a github source (~/.skaile/cache/sources/<host>/<owner>/<repo>/)
 skaile source list               # registered sources
 skaile source show <name>
 skaile source remove <name>
 skaile source sync [name]        # re-fetch upstream changes
-skaile source build-manifest --path <p> [--diff|--write]   # author-shipped inventory
-skaile source verify-manifest --path <p> --strict
+skaile source manifest init <src>      # curate a manifest over a source you don't own
+skaile source manifest verify <src> --strict   # verify hashes + manifest parse
 ```
 
+`source manifest *` curates a catalog entry over a source you **don't** own. For
+a library you author yourself, the manifest is its `skaile.manifest.yaml` (kept
+current by `skaile library index <library>`) — see `skaile-author-asset`.
+
 ## Libraries (your authoring places)
 
 ```bash
@@ -110,7 +116,7 @@ skaile library create <kind> <name>    # scaffold a new asset
 skaile library list|status|show <name>
 skaile library default <name>          # set default
 skaile library commit|pull|push|sync <name>   # git ops
-skaile library publish <ref>           # push + register manifest atomically
+skaile library publish <library>       # push + register in the store (<library> is a NAME, not a ref)
 ```
 
 See the `skaile-author-asset` skill for the full authoring + publish flow.
@@ -154,7 +160,7 @@ catalog settings per-workspace.
 ## Dev-only assets
 
 A source can mark assets meant only for developing the project itself (those
-under `ai-assets-dev/`) as dev-only via `dev_paths` in its `.skaile-source.yaml`.
+under `ai-assets-dev/`) as dev-only via `dev_paths` in its `skaile.manifest.yaml`.
 A normal sync excludes them; `--dev` on the sync re-includes them:
 
 ```bash

package/dist/factory-assets/skills/skailify/SKILL.md

@@ -2,7 +2,7 @@
 name: skailify
 description: "Use when a user wants to move an existing coding-agent skill (a Claude Code skill under ~/.claude/skills/, or any SKILL.md directory) into a skaile library so it can be versioned and published. Trigger phrases: 'skailify my skill', 'import this Claude skill into my library', 'move my ~/.claude skill into skaile', 'turn my CC skill into a skaile asset', 'add my local skill to the library'. Drives `skaile asset import` and verifies with `skaile validate`."
 metadata:
-  version: "0.1.0"
+  version: "0.1.1"
   source: AUTHORED
   stage: alpha
   tags:
@@ -52,7 +52,7 @@ wires the entry into `skaile.manifest.yaml`. The low-level `skaile asset migrate
 
 | Flag | Use |
 |---|---|
-| `--to <library>` | Target a non-default library. |
+| `--library <library>` | Target a non-default library. |
 | `--version <semver>` | Stamp when the skill ships none (default `0.1.0`). |
 | `--stage <stage>` | `alpha` (default) \| `beta` \| `stable`. |
 | `--no-normalize` | Copy frontmatter verbatim (rare — only if already skaile-shaped). |
@@ -61,8 +61,12 @@ wires the entry into `skaile.manifest.yaml`. The low-level `skaile asset migrate
 ## After import
 
 - Edit the stamped `metadata.tags` if `import` left them empty.
-- To publish: `skaile library publish <kind>:@<publisher>/<name>@<version>`
-  (needs a git-linked library — see [skaile-author-asset]).
+- To publish: link the library to a GitHub remote once
+  (`skaile library link <library> <git-url>`), sign in (`skaile store login`),
+  then `skaile library publish <library>` — `<library>` is the library **name**,
+  not an asset ref; add `--asset <ref>` for one asset and `--dry-run` to preview
+  (see [skaile-author-asset]). The imported skill publishes as
+  `skill:@<publisher>/<name>#<version>`.
 - Re-running `import` for the same `(kind, name)` updates its manifest entry in
   place rather than duplicating it.
 

package/dist/{flows-64OAOYLP.js → flows-DTADYIXH.js}

@@ -1,15 +1,15 @@
-export { flowFindFlowForSession, flowGetSession, flowList, flowListSessions, flowShow } from './chunk-BUZ3K2PT.js';
+export { flowFindFlowForSession, flowGetSession, flowList, flowListSessions, flowShow } from './chunk-XMQAV6T3.js';
 import './chunk-R6O6YWU7.js';
 import './chunk-JELTQ4H7.js';
 import './chunk-X5YPJV4N.js';
 import './chunk-JKWU6ULI.js';
-import './chunk-6GBQND2F.js';
+import './chunk-QEXEHXX5.js';
 import './chunk-4GY63JU6.js';
-import './chunk-4SSKKFDF.js';
+import './chunk-JCATNLY3.js';
 import './chunk-XGIS325V.js';
 import './chunk-5BEFNLOR.js';
 import './chunk-A2ULN3KX.js';
-import './chunk-KBAE7PU7.js';
+import './chunk-6IGFSUTE.js';
 import './chunk-MFHKHXDE.js';
 import './chunk-TOSHZX4C.js';
 import './chunk-SR4RFKHM.js';
@@ -22,5 +22,5 @@ import './chunk-MJHSLODD.js';
 import './chunk-C3CAXQMA.js';
 import './chunk-BOFL7GIF.js';
 import './chunk-NSBPE2FW.js';
-//# sourceMappingURL=flows-64OAOYLP.js.map
-//# sourceMappingURL=flows-64OAOYLP.js.map
+//# sourceMappingURL=flows-DTADYIXH.js.map
+//# sourceMappingURL=flows-DTADYIXH.js.map

package/dist/{flows-64OAOYLP.js.map → flows-DTADYIXH.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"flows-64OAOYLP.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"flows-DTADYIXH.js"}

package/dist/{helpers-HV5Y57CY.js → helpers-F2RFRT5D.js}

@@ -1,19 +1,19 @@
-export { KIND_COL_WIDTH, S, TARGET_DEFAULT_HINT, bareSoftDepName, colorRef, fitWidth, formatRelativeTime, formatSoftDepAddPreview, formatSoftDepHint, formatSoftDepRemovePreview, formatSoftDepSection, kindColor, kindColorPad, logErr, logInfo, logOk, logWarn, warnLegacyClaudeCopies } from './chunk-WGN7Z36G.js';
-import './chunk-WGNFDLHT.js';
-import './chunk-3ZVSINEV.js';
+export { KIND_COL_WIDTH, S, TARGET_DEFAULT_HINT, bareSoftDepName, colorRef, fitWidth, formatRelativeTime, formatSoftDepAddPreview, formatSoftDepHint, formatSoftDepRemovePreview, formatSoftDepSection, kindColor, kindColorPad, logErr, logInfo, logOk, logWarn, warnLegacyClaudeCopies } from './chunk-JEA32KB6.js';
+import './chunk-BATL2CWI.js';
+import './chunk-Y5OCUOXF.js';
 import './chunk-Y7UBRRKG.js';
 import './chunk-VKSA2CDJ.js';
 import './chunk-R7FOF242.js';
 import './chunk-ZDKJHQY2.js';
-import './chunk-K2JVODQD.js';
+import './chunk-37DN45RR.js';
 import './chunk-CGYEHQOX.js';
-import './chunk-6GBQND2F.js';
+import './chunk-QEXEHXX5.js';
 import './chunk-4GY63JU6.js';
-import './chunk-4SSKKFDF.js';
+import './chunk-JCATNLY3.js';
 import './chunk-XGIS325V.js';
 import './chunk-5BEFNLOR.js';
 import './chunk-A2ULN3KX.js';
-import './chunk-KBAE7PU7.js';
+import './chunk-6IGFSUTE.js';
 import './chunk-MFHKHXDE.js';
 import './chunk-TOSHZX4C.js';
 import './chunk-SR4RFKHM.js';
@@ -30,5 +30,5 @@ import './chunk-UQ6LFBPZ.js';
 import './chunk-TNWXGHLD.js';
 import './chunk-5CYEWBPB.js';
 import './chunk-NSBPE2FW.js';
-//# sourceMappingURL=helpers-HV5Y57CY.js.map
-//# sourceMappingURL=helpers-HV5Y57CY.js.map
+//# sourceMappingURL=helpers-F2RFRT5D.js.map
+//# sourceMappingURL=helpers-F2RFRT5D.js.map

package/dist/{helpers-HV5Y57CY.js.map → helpers-F2RFRT5D.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"helpers-HV5Y57CY.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"helpers-F2RFRT5D.js"}

package/dist/library/index.js

@@ -1,15 +1,15 @@
-export { AssignmentNotFoundError, CatalogCache, CatalogConfigSchema, CatalogHttpError, DuplicateAssignmentError, DuplicateLibraryNameError, GitSyncDriver, InstanceHasConsumersError, InstanceNotFoundError, InterpolationError, KNOWN_ASSET_KINDS, KnowledgeManifestSchema, LIBRARY_BACKENDS, LIBRARY_OWNERSHIPS, LOCAL_CATALOG_URL, LibraryConfigSchema, LibraryError, LibraryInstanceRefSchema, LibraryManager, LibrarySectionSchema, LibrarySyncError, LocalCatalogSource, LocalIndex, LocalSyncDriver, LockAssignmentSchema, LockFileSchema, OfflineError, OperationNotPermittedError, PIN_POLICIES, PinPolicySchema, PresetAppliedSchema, PresetExpandedSchema, RemoteCatalogSource, RequiresEdgeSchema, RestCatalogSource, SidecarGit, SkaileConfigSchema, SourceNotFoundError, TarballHashMismatchError, UserLibraryNotFoundError, WorkspaceConfigV2Schema, applyNonStructuralUpgrade, applyPreset, applyPresetFromData, assertManifestEditable, classifyRef, cloneOrInitGitRepo, createEmptyLockFile, curatedManifestOverlay, deriveSlug, detectChanges, detectNestedPresetRefs, detectWorkspaceVersion, ensureGitRepo, evaluateUpgrade, extractLibraryInstanceId, extractReferencedKeys, filterKey, getConfigDefaults, getDefaultValue, getSidecarRoot, getStoreManifestsDir, getStoreRoot, hasInterpolationTokens, installLibraryAsset, interpolate, isGitRepo, isLocalCatalogUrl, isSecretPlaceholder, knowledgeKindProvider, listSidecarSlugsOnDisk, loadLockFile, loadWorkspaceV2, migrateSidecarsToStoreIfNeeded, migrateWorkspaceConfig, missingRootAssets, parsePreset, parsePresetYaml, parseWorkspaceV2, projectConfigPath, pruneMissingRootAssets, queryInstancePickerChoices, resolveAllItems, resolveConfig, resolveIndexPath, resolveItem, resolvePin, resolveSidecarPaths, saveConfig, saveLockFile, saveWorkspaceV2, setManifestPublisher, setOriginUrl, sha256Hex, stampManifestPublisher, storeSecrets, syncManifestWithDisk, trpcGetUrl, upsertManifestAsset, validateAllPlaceholders, validateKnowledge, validateNestingDepth, validatePlaceholder, writeCuratedManifest } from '../chunk-3ZVSINEV.js';
+export { AssignmentNotFoundError, CatalogCache, CatalogConfigSchema, CatalogHttpError, DuplicateAssignmentError, DuplicateLibraryNameError, GitSyncDriver, InstanceHasConsumersError, InstanceNotFoundError, InterpolationError, KNOWN_ASSET_KINDS, KnowledgeManifestSchema, LIBRARY_BACKENDS, LIBRARY_OWNERSHIPS, LOCAL_CATALOG_URL, LibraryConfigSchema, LibraryError, LibraryInstanceRefSchema, LibraryManager, LibrarySectionSchema, LibrarySyncError, LocalCatalogSource, LocalIndex, LocalSyncDriver, LockAssignmentSchema, LockFileSchema, OfflineError, OperationNotPermittedError, PIN_POLICIES, PinPolicySchema, PresetAppliedSchema, PresetExpandedSchema, RemoteCatalogSource, RequiresEdgeSchema, RestCatalogSource, SidecarGit, SkaileConfigSchema, SourceNotFoundError, TarballHashMismatchError, UserLibraryNotFoundError, WorkspaceConfigV2Schema, applyNonStructuralUpgrade, applyPreset, applyPresetFromData, assertManifestEditable, classifyRef, cloneOrInitGitRepo, createEmptyLockFile, curatedManifestOverlay, deriveSlug, detectChanges, detectNestedPresetRefs, detectWorkspaceVersion, ensureGitRepo, evaluateUpgrade, extractLibraryInstanceId, extractReferencedKeys, filterKey, getConfigDefaults, getDefaultValue, getSidecarRoot, getStoreManifestsDir, getStoreRoot, hasInterpolationTokens, installLibraryAsset, interpolate, isGitRepo, isLocalCatalogUrl, isSecretPlaceholder, knowledgeKindProvider, listSidecarSlugsOnDisk, loadLockFile, loadWorkspaceV2, migrateSidecarsToStoreIfNeeded, migrateWorkspaceConfig, missingRootAssets, parsePreset, parsePresetYaml, parseWorkspaceV2, projectConfigPath, pruneMissingRootAssets, queryInstancePickerChoices, resolveAllItems, resolveConfig, resolveIndexPath, resolveItem, resolvePin, resolveSidecarPaths, saveConfig, saveLockFile, saveWorkspaceV2, setManifestPublisher, setOriginUrl, sha256Hex, stampManifestPublisher, storeSecrets, syncManifestWithDisk, trpcGetUrl, upsertManifestAsset, validateAllPlaceholders, validateKnowledge, validateNestingDepth, validatePlaceholder, writeCuratedManifest } from '../chunk-Y5OCUOXF.js';
 import '../chunk-Y7UBRRKG.js';
 export { installFromManifest } from '../chunk-VKSA2CDJ.js';
 export { GITHUB_PAT_ENV, fetchAssetFilesFromGitHub } from '../chunk-R7FOF242.js';
 import '../chunk-ZDKJHQY2.js';
-export { resolveLibraryDir } from '../chunk-6GBQND2F.js';
+export { resolveLibraryDir } from '../chunk-QEXEHXX5.js';
 import '../chunk-4GY63JU6.js';
-import '../chunk-4SSKKFDF.js';
+import '../chunk-JCATNLY3.js';
 import '../chunk-XGIS325V.js';
 import '../chunk-5BEFNLOR.js';
 import '../chunk-A2ULN3KX.js';
-import '../chunk-KBAE7PU7.js';
+import '../chunk-6IGFSUTE.js';
 export { userConfigPath } from '../chunk-MFHKHXDE.js';
 import '../chunk-TOSHZX4C.js';
 import '../chunk-SR4RFKHM.js';

package/dist/library/src/local/install-library-asset.d.ts

@@ -54,8 +54,9 @@ export interface InstalledLibraryAsset {
  * The hash check covers the files discovery hashed, siblings included when the
  * manifest declares the folder as the asset's `root`.
  *
- * @throws When the asset is no longer in the library at the indexed version, when its
- *   on-disk hash differs from the indexed one (`hash mismatch`), when a directory-kind
+ * @throws When the asset is no longer in the library at the indexed version, when the
+ *   index holds no hash for it, when its on-disk hash differs from the indexed one
+ *   (`hash mismatch`), when a directory-kind
  *   asset sits at the library root or its path would escape the target, or when the
  *   existing lock cannot be read. A link install over an existing path fails with the
  *   filesystem's `EEXIST`.

package/dist/library/src/local/install-library-asset.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"install-library-asset.d.ts","sourceRoot":"","sources":["../../../../library/src/local/install-library-asset.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAiBH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAErE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAGlD,+CAA+C;AAC/C,MAAM,WAAW,uBAAuB;IACtC,2FAA2F;IAC3F,GAAG,EAAE,eAAe,CAAC;IACrB;;;;OAIG;IACH,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,eAAe,CAAC,CAAC,CAAC;IAChG,wEAAwE;IACxE,SAAS,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IACtB,mFAAmF;IACnF,QAAQ,CAAC,EAAE,kBAAkB,CAAC;CAC/B;AAED,0DAA0D;AAC1D,MAAM,WAAW,qBAAqB;IACpC;;;OAGG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,wFAAwF;IACxF,OAAO,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,uBAAuB,GAAG,qBAAqB,CAsExF"}
+{"version":3,"file":"install-library-asset.d.ts","sourceRoot":"","sources":["../../../../library/src/local/install-library-asset.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAiBH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAErE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAGlD,+CAA+C;AAC/C,MAAM,WAAW,uBAAuB;IACtC,2FAA2F;IAC3F,GAAG,EAAE,eAAe,CAAC;IACrB;;;;OAIG;IACH,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,eAAe,CAAC,CAAC,CAAC;IAChG,wEAAwE;IACxE,SAAS,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IACtB,mFAAmF;IACnF,QAAQ,CAAC,EAAE,kBAAkB,CAAC;CAC/B;AAED,0DAA0D;AAC1D,MAAM,WAAW,qBAAqB;IACpC;;;OAGG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,wFAAwF;IACxF,OAAO,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,uBAAuB,GAAG,qBAAqB,CAyExF"}

package/dist/{library-publish-TVS3WQ4C.js → library-publish-62RFU74A.js}

@@ -1,32 +1,33 @@
-import { makeHttpPublisherClient } from './chunk-AWGQVAC5.js';
-import { isStoreAuthenticated, bareName, assetNamespace, refFor, assetEntryRef, manifestNamespaces, plannedRefs, formatNamespaceAvailability, preflightNamespace, publishToStore } from './chunk-YXNYBUQY.js';
-import { openLibraryManager } from './chunk-TR7KFBIO.js';
-import { logErr, logInfo, logOk, logWarn, S } from './chunk-WGN7Z36G.js';
-import './chunk-ZCSFGGLG.js';
-import './chunk-LM5XEFNS.js';
+import { makeHttpPublisherClient } from './chunk-U6ORGQHZ.js';
+import { checkSkillManifest } from './chunk-UKDFOOEG.js';
+import { isStoreAuthenticated, bareName, assetNamespace, refFor, assetEntryRef, manifestNamespaces, plannedRefs, formatNamespaceAvailability, preflightNamespace, publishToStore } from './chunk-A67BHJCH.js';
+import { openLibraryManager } from './chunk-JF26V3BC.js';
+import { logErr, logInfo, logOk, logWarn, S } from './chunk-JEA32KB6.js';
+import './chunk-5NH3U6N5.js';
+import './chunk-UAAAERXI.js';
 import './chunk-QZLWJETK.js';
 import './chunk-NFGRW3L7.js';
 import './chunk-QCI6D7E4.js';
-import './chunk-WGNFDLHT.js';
-import { missingRootAssets } from './chunk-3ZVSINEV.js';
+import './chunk-BATL2CWI.js';
+import { missingRootAssets } from './chunk-Y5OCUOXF.js';
 import './chunk-Y7UBRRKG.js';
 import './chunk-VKSA2CDJ.js';
 import './chunk-R7FOF242.js';
 import './chunk-ZDKJHQY2.js';
-import './chunk-K2JVODQD.js';
+import './chunk-37DN45RR.js';
 import './chunk-CGYEHQOX.js';
-import './chunk-6GBQND2F.js';
+import './chunk-QEXEHXX5.js';
 import './chunk-4GY63JU6.js';
-import './chunk-4SSKKFDF.js';
+import './chunk-JCATNLY3.js';
 import './chunk-XGIS325V.js';
 import './chunk-5BEFNLOR.js';
 import './chunk-A2ULN3KX.js';
-import './chunk-KBAE7PU7.js';
+import './chunk-6IGFSUTE.js';
 import './chunk-MFHKHXDE.js';
 import './chunk-TOSHZX4C.js';
 import { loadSkPublishManifest, decodeSkaileManifest } from './chunk-SR4RFKHM.js';
 import './chunk-RVRB27AN.js';
-import './chunk-LFMX2UEF.js';
+import { parseFrontmatter } from './chunk-LFMX2UEF.js';
 import './chunk-WX74MVNA.js';
 import './chunk-ICSCSM5D.js';
 import './chunk-JMKB7IB4.js';
@@ -40,7 +41,7 @@ import './chunk-5CYEWBPB.js';
 import './chunk-NSBPE2FW.js';
 import { spawnSync } from 'child_process';
 import { readFileSync, existsSync } from 'fs';
-import { join } from 'path';
+import { join, relative, basename } from 'path';
 
 var MANIFEST_FILENAME = "skaile.manifest.yaml";
 function remoteUrlOf(lib) {
@@ -132,13 +133,30 @@ function isGithubRemote(url) {
   );
 }
 var MAX_LISTED_UNTRACKED = 10;
-function publishWarnings(libPath, spawn, skipPush) {
+function assetWarnings(libPath, manifest, targetName) {
+  const warnings = [];
+  for (const a of manifest.assets ?? []) {
+    if (targetName && a.name !== targetName) continue;
+    if (a.kind !== "skill" || !a.root || a.source || manifest.source) continue;
+    const file = join(libPath, a.root, "SKILL.md");
+    if (!existsSync(file)) continue;
+    const { data, body } = parseFrontmatter(readFileSync(file, "utf-8"));
+    if (!data || Object.keys(data).length === 0) continue;
+    const rel = relative(libPath, file);
+    for (const f of checkSkillManifest(data, body, basename(join(libPath, a.root)))) {
+      warnings.push(`${assetEntryRef(a, manifest)} (${rel}) [${f.tag}] \u2014 ${f.text}`);
+    }
+  }
+  return warnings;
+}
+function publishWarnings(libPath, spawn, skipPush, manifest, targetName) {
   const warnings = [];
   if (!existsSync(join(libPath, "LICENSE")) && !existsSync(join(libPath, "LICENSE.md"))) {
     warnings.push(
       "No LICENSE or LICENSE.md in the library root \u2014 a public repo without a license grants consumers no rights to use it."
     );
   }
+  warnings.push(...assetWarnings(libPath, manifest, targetName));
   if (!skipPush) {
     const status = runGit(spawn, libPath, ["status", "--porcelain", "--untracked-files=all"]);
     if (status.status === 0) {
@@ -227,7 +245,7 @@ async function publishLibrary(name, opts, client, spawn = spawnSync) {
     const namespaces = manifestNamespaces(manifest, targetName);
     const wouldBeRefs = plannedRefs(manifest, targetName);
     const sourceRef = opts.ref ?? branchOf(lib);
-    const warnings = publishWarnings(lib.path, spawn, opts.skipPush);
+    const warnings = publishWarnings(lib.path, spawn, opts.skipPush, manifest, targetName);
     if (opts.dryRun) {
       logInfo(`Publish plan for ${S.bold(name)}:`);
       logInfo(
@@ -346,5 +364,5 @@ async function runLibraryYank(name, opts, client) {
 }
 
 export { runLibraryPublish, runLibraryRegister, runLibraryYank };
-//# sourceMappingURL=library-publish-TVS3WQ4C.js.map
-//# sourceMappingURL=library-publish-TVS3WQ4C.js.map
+//# sourceMappingURL=library-publish-62RFU74A.js.map
+//# sourceMappingURL=library-publish-62RFU74A.js.map