@skaile/workspaces 5.9.0 → 5.11.0

package/CHANGELOG.md

@@ -1,5 +1,150 @@
 # Changelog
 
+## 5.11.0
+
+### Minor Changes
+
+- [#1055](https://github.com/skaile-ai/workspaces/pull/1055) [`3c15671`](https://github.com/skaile-ai/workspaces/commit/3c1567160077b7e0e0ca888c02c2e7bf0bf02358) Thanks [@mortegro](https://github.com/mortegro)! - `validate`, `library index` and `library publish --dry-run` now give one verdict for every asset kind.
+
+  - `library create flow` and `library create preset` write the `TODO: describe this <kind>.` description when `--description` is missing, as the other kinds do. An unedited flow or preset (the `TODO:` description, `nodes: []`, the example preset item) fails all three commands with exit 1. It was a warning before.
+  - A manifest `dependencies:` entry with an invalid publisher fails `publish --dry-run` with the same message as `validate` and `index`.
+  - A missing `version` reads as `0.1.0` for all six kinds, and an empty `metadata:` as no metadata. A version that is present but not a string says `set version: 0.1.0` (`set metadata.version: 0.1.0` for skill, prompt and contract) instead of raw schema text.
+  - An asset name over 64 characters fails `library create`, `validate`, `index` and `publish --dry-run` with the asset-name rule. `library create skill <300-char name>` no longer ends in `ENAMETOOLONG` with a stack trace. `isValidAssetName` applies the 64-character limit.
+  - `library publish --ref` and `library register --ref` exit 1 before the plan when the ref is not a valid git ref name, or is not a branch, tag or commit of the library repo.
+  - `references/dependency-standard.md` of the `authoring-skaile-manifests` skill says the asset file's own version wins.
+
+- [#1055](https://github.com/skaile-ai/workspaces/pull/1055) [`3c15671`](https://github.com/skaile-ai/workspaces/commit/3c1567160077b7e0e0ca888c02c2e7bf0bf02358) Thanks [@mortegro](https://github.com/mortegro)! - A locked asset is now identified by kind, publisher, name and the library its lock entry names.
+
+  - `skaile remove skill:@acme/x` no longer deletes the deployed copy of `skill:@mortegro/x` when only the mortegro one was added. It prints `Not deployed or declared` and exits 1. The deployed copy, the lock and `skaile.yaml` stay as they are.
+  - `skaile install` keeps a locked library asset on the library its lock entry names, also after `library default <other>` or when another library holds the same ref. `skaile update` and `skaile add` still pick the library by the default rules, and a pin moves an asset to the library that holds it. A move prints `! <ref> moved from <a> to <b>`. `AssetManager.install` takes `moveLibraries` (set by `update`), `InstallResult` has `moved`, and `AssetManager.add` takes `onLibraryMoved`.
+  - A `#0.1.0` pin resolves for an `AGENT.md` agent that has no version in its frontmatter, in `skaile add agent:@acme/x#0.1.0` and in a `skaile.yaml` dependency. The pin matches the version in the library manifest, as the lock key does.
+
+- [#1055](https://github.com/skaile-ai/workspaces/pull/1055) [`3c15671`](https://github.com/skaile-ai/workspaces/commit/3c1567160077b7e0e0ca888c02c2e7bf0bf02358) Thanks [@mortegro](https://github.com/mortegro)! - The lock changes only when an entry changes, and a hand-edited deployed copy is no longer invisible.
+
+  - `skaile.lock.yaml` is written in one canonical order (`schema_version` and `locked_at` first, then every key sorted). `add`, `install` and `update` write nothing when only the order or `locked_at` differs, so the first `install` after `add`, and a `library rename` matched by URL, leave a committed lock byte-identical and print no `Lock file written`.
+  - `skaile check`, `doctor` and `outdated` exit 1 when a deployed file was edited by hand or an asset folder holds a file the asset does not ship, including a file a harness or agent wrote there after deploy. `skaile install --locked`, `install` and `update` overwrite or remove it and print `Restored <file>` (or `Removed <file> (not part of <ref>)`). `diff` shows the edit and keeps exit 0.
+  - `.venv/`, `venv/`, `.pytest_cache/`, `.mypy_cache/`, `.ruff_cache/`, `.idea/`, `.vscode/`, `*.pyo`, `Thumbs.db`, `.env` and `.env.*` in an asset folder are neither deployed nor hashed, so running `pytest` in a library no longer makes the lock drift. The templates `.env.example`, `.env.sample`, `.env.template` and `.env.dist` stay part of the asset. `skaile add` warns once per other `.env` file it finds in an asset folder.
+
+- [#1055](https://github.com/skaile-ai/workspaces/pull/1055) [`3c15671`](https://github.com/skaile-ai/workspaces/commit/3c1567160077b7e0e0ca888c02c2e7bf0bf02358) Thanks [@mortegro](https://github.com/mortegro)! - A `skaile.yaml` that does not parse (a duplicate key, bad YAML, a root that is not a mapping) now stops `install`, `update`, `check`, `doctor`, `outdated`, `diff`, `add` and `remove` with `skaile.yaml — parse error: <reason>` and exit 1, before anything is deployed, undeployed or locked. Before, `install` read the broken file as "nothing declared", deleted every deployed asset and emptied the lock. `resolveSkWorkspaceConfig` and `resolveGlobalSkWorkspaceConfig` throw that error instead of returning `{}`. Outside a project, `check`, `doctor`, `outdated`, `install`, `update` and `diff` exit 1 with `No skaile.yaml found. Run skaile init to create one.` and write nothing, as `add` does.
+
+- [#1055](https://github.com/skaile-ai/workspaces/pull/1055) [`3c15671`](https://github.com/skaile-ai/workspaces/commit/3c1567160077b7e0e0ca888c02c2e7bf0bf02358) Thanks [@mortegro](https://github.com/mortegro)! - `skaile run` and `skaile repl` end with the driver's error and exit 1 when the omp bridge does not start. Before, they ended on an unsettled top-level await with exit code 13 and no message (p137). `OmpDriver.start()` now rejects when omp exits before it is ready, and the CLI ends any command that has nothing left to wait for with one line and exit 1.
+
+  `skaile repl` no longer prints log records as raw JSON on stdout. They go to the project's log database; only warnings and errors print, on stderr (p47).
+
+  The README quick start and tutorial 01 name the optional SDK to install per driver: `@anthropic-ai/claude-agent-sdk` for `claude-sdk`, `@openai/codex-sdk` for `codex` (p138).
+
+- [#1055](https://github.com/skaile-ai/workspaces/pull/1055) [`3c15671`](https://github.com/skaile-ai/workspaces/commit/3c1567160077b7e0e0ca888c02c2e7bf0bf02358) Thanks [@mortegro](https://github.com/mortegro)! - A command now ends with the verdict it printed.
+
+  - `skaile diff <ref>` of a locked asset whose library is not registered, or that has an unresolvable requirement, prints the state problem only and exits 1. It no longer prints `No differences.` first. A plain difference (edited copy, changed library files) still shows the diff and exits 0.
+  - `skaile update` ends with `Failed` and exit 1 (never `Done`) when a declared asset is missing, a source pull failed, an agent instance cannot be rendered or a library is not registered. `Nothing to update.` is no longer printed after a failure.
+  - `skaile add <ref>` of an asset whose requirement no registered library or source holds exits 1 with `<ref> requires <dep> (not found — register the library that holds it with skaile library init <name> --path <dir>, or remove the requirement from the asset's manifest) — nothing was added`. It was exit 0 with `was added without unresolved dependencies`, which left a project that `check`, `install` and `diff` all fail. `skaile.yaml`, the lock and the deployed files stay as they were. `AssetManager.add` throws instead of warning, so `skaile update <name>`, `skaile manage` and `skaile npx` fail the same way.
+
+### Patch Changes
+
+- [#1054](https://github.com/skaile-ai/workspaces/pull/1054) [`87945dd`](https://github.com/skaile-ai/workspaces/commit/87945ddc111f3cdd5c2e354d387170ce2f6ca6a5) Thanks [@Frozen666](https://github.com/Frozen666)! - A flow turn refused by a Claude usage limit that no seat switch could clear no longer triggers an immediate re-prompt into the same limit. The runner holds the flow's automatic turns until something outside it asks for one (a chat message, the platform's continuation prompt, a wake, an approval or input) or the session moves to another seat.
+
+- [#1055](https://github.com/skaile-ai/workspaces/pull/1055) [`3c15671`](https://github.com/skaile-ai/workspaces/commit/3c1567160077b7e0e0ca888c02c2e7bf0bf02358) Thanks [@mortegro](https://github.com/mortegro)! - `skaile manage` ticks a library group only when the group's own rows are installed: with the same ref in two libraries, only the group that holds the installed copy gets the tick. `skaile diff preset:<ref>` of an installed preset says `preset has no files of its own` and exits 0, and `skaile why preset:<ref>` finds the preset in the lock instead of printing `not found in lock file`. `AssetManager.diff()` can return the new status `no-files`.
+
+- [#1055](https://github.com/skaile-ai/workspaces/pull/1055) [`3c15671`](https://github.com/skaile-ai/workspaces/commit/3c1567160077b7e0e0ca888c02c2e7bf0bf02358) Thanks [@mortegro](https://github.com/mortegro)! - `library rename` of a local library no longer breaks projects that lock it: the rename is recorded, and `install --locked`, `check` and `install` find the library under its new name. `library rename` and `library show` of a library whose folder is gone print the missing-directory line and exit 1, with no raw `ENOENT`. `library pull`, `sync` and `push` print `merge in progress; resolve the conflicts, then git commit` and exit 1 while a merge is unfinished, like they do for a rebase.
+
+- [#1055](https://github.com/skaile-ai/workspaces/pull/1055) [`3c15671`](https://github.com/skaile-ai/workspaces/commit/3c1567160077b7e0e0ca888c02c2e7bf0bf02358) Thanks [@mortegro](https://github.com/mortegro)! - Every command now gives the fix text of the shared project state. For a declared ref that no library or source holds, `install`, `install --locked`, `update` and `why` print the `check` fix (`register the library ... or drop it with skaile remove`). They no longer say `run skaile install first` for a ref that `install` cannot resolve. `outdated` no longer advises `skaile install` for a requirement whose locked library is not registered; it names `library init` or `remove`. `run skaile add agent:... first` is printed only when a registered library holds the agent; otherwise the advice names `library init` or the binding to drop. `check`, `doctor` and `outdated` print the requiring asset as `kind:@publisher/name`. `LockGap.asset` of a `requires` gap now carries the publisher.
+
+## 5.10.0
+
+### Minor Changes
+
+- [#1052](https://github.com/skaile-ai/workspaces/pull/1052) [`b591c9c`](https://github.com/skaile-ai/workspaces/commit/b591c9c8531f61de64eb864adfe376de01e6ddda) Thanks [@mortegro](https://github.com/mortegro)! - The shared per-asset checks now cover every kind, the manifest and the publish selection.
+
+  - A `SKILL.md` with only `name:` fails `validate`, `library index` and `library publish --dry-run` with the same message. `index` no longer adds a new, versionless asset that fails the checks to the manifest (p07).
+  - A `TODO:` description is an error for every kind, not only for skills. Before, an agent, prompt, contract, flow or preset with it only warned (p103).
+  - `validate versions` reads preset and contract versions (p109).
+  - `library publish --asset <ref>` exits 1 with `No asset matches "<ref>"` when the ref selects nothing. A `#version` pin that the asset file does not hold exits 1 (p106).
+  - The publish plan names a directory that repeats a kind and name the manifest already holds, and exits 1, as `index` does (p107).
+  - `library index` and `validate` warn about a manifest `dependencies:` entry that no registered library holds. The check is offline. The exit code stays 0 (p119).
+  - `skaile add` of a library asset that the manifest does not list exits 1 and names `skaile library index <lib>`, where it deployed `SKILL.md` without its helper files. After `library index`, `add` deploys every file (p127).
+  - Library API: `syncManifestWithDisk` reports `FailedAsset.inManifest`. New `scanUnlistedAssets` and `UnlistedAsset`.
+
+- [#1052](https://github.com/skaile-ai/workspaces/pull/1052) [`b591c9c`](https://github.com/skaile-ai/workspaces/commit/b591c9c8531f61de64eb864adfe376de01e6ddda) Thanks [@mortegro](https://github.com/mortegro)! - `skaile check` and `skaile doctor` fail wherever `install --locked` fails (5.8.0 critique, second recheck). `AssetManager.projectState()` carries the new cases, so no command has its own copy.
+
+  - A library asset whose files changed since the lock fails `check` and `doctor` with `content changed since lock`, like `outdated` and `install --locked` (p125). A lock written by 4.x holds a hash from before the shared asset hash; it reads the same way and the line names `skaile install` to re-lock it (p118). A newer version in the library stays `outdated` news.
+  - A locked asset whose library and deployed copy are both gone names only the library fix. `install` and `update` say `its lock entry is kept; no deployed copy exists` instead of claiming a kept deployed copy (p64).
+  - `skaile doctor` exits 1 for every problem that makes `check` exit 1, including files missing from a deployed asset (p117).
+  - An `agents.<id>.ref` that binds to no agent is a project-state problem: `check` and `doctor` exit 1 (p124). `skaile remove agent:<ref>` also removes the `agents.<id>` bindings that point at it and the rendered agent file, so `validate` passes afterwards. `LockGap.type` gains `content` and `agent`.
+
+- [#1052](https://github.com/skaile-ai/workspaces/pull/1052) [`b591c9c`](https://github.com/skaile-ai/workspaces/commit/b591c9c8531f61de64eb864adfe376de01e6ddda) Thanks [@mortegro](https://github.com/mortegro)! - Small fixes for the CLI library flow:
+
+  - `skaile run "<prompt>"` no longer prints internal log records (`building workspace MCP server`, `spawning omp`, capability-registry events) as raw JSON on stdout. They go to the project's log database (`.skaile/logs.db`); warnings and errors still print on stderr (p47).
+  - `library init` no longer tells you to pass `--publisher`, an option it does not have. It names `skaile library set <name> publisher=<name>`. `library create` and `asset import`, which have the flag, still advise it (p104).
+  - The `library create prompt` and `library create contract` scaffolds say `Prompt goes here.` and `Contract goes here.` instead of the skill wording. `validate` flags the new text and the old skill text as an untouched scaffold. New exports: `PROMPT_BODY_PLACEHOLDER`, `CONTRACT_BODY_PLACEHOLDER` (`@skaile/workspaces/types/manifests`) (p105).
+  - A library name longer than 64 characters is refused with one line before any directory is created (`✗ Invalid library name (300 characters): at most 64 characters.`). Before, it ended in a raw `ENAMETOOLONG` error (p113).
+  - `skaile add` in a directory with no `skaile.yaml` exits 1 and names `skaile init`. It writes nothing. Before, it deployed the asset and wrote a lock file that `list` ignored (p123).
+  - `skaile add` prints one `! skipped symlink <path>` line for each symlink inside an asset directory that it does not deploy (p132). Symlinks are still not deployed. `AssetManager.add()` gains an `onSkippedSymlink` option and `DeployOptions` gains `onSkippedSymlink`.
+
+- [#1052](https://github.com/skaile-ai/workspaces/pull/1052) [`b591c9c`](https://github.com/skaile-ai/workspaces/commit/b591c9c8531f61de64eb864adfe376de01e6ddda) Thanks [@mortegro](https://github.com/mortegro)! - A registered library without its directory has one state everywhere (5.8.0 critique, second recheck).
+
+  - `library list`, `library show`, `library status`, `check`, `outdated`, `install`, `add` and the git verbs describe it with one line: `library "<name>" is registered but its directory <path> is missing - run skaile library init <name> --path <dir> or skaile library remove <name>`. New exports from `@skaile/workspaces/library`: `libraryDirMissing`, `missingLibraryDirMessage`, `LibraryManager.requireLibraryDir` (p115).
+  - `library push`, `pull`, `sync`, `commit`, `git`, `link` and `publish` exit 1 with that line instead of a JS `TypeError` or `spawnSync git ENOENT` (p114).
+  - `library index <name>` and `library create --library <name>` refuse the missing directory and create nothing. `search --local` no longer lists the assets of that library (p116).
+  - A library removed with `library remove` (without `--purge`) keeps its directory but no longer resolves for `add`, `install --locked` or flow discovery. `library remove` records its name in `.unregistered-libraries` in the libraries dir. A directory nobody registered still resolves as a hand-made library (p121).
+  - Plain `skaile install` fails like `install --locked` when the lock pins a library that is not registered here, or whose directory is gone: the same `Missing: ... library "<name>" is not registered` lines, exit 1, no clone, no lock write, deployed files kept. It no longer re-resolves the asset from a `sources:` repository or from another library that holds the same asset. The lookup lives in one place, `AssetManager.unavailableLockedLibraries`, so a later lock-recorded URL fallback extends it there (p128).
+
+- [#1052](https://github.com/skaile-ai/workspaces/pull/1052) [`b591c9c`](https://github.com/skaile-ai/workspaces/commit/b591c9c8531f61de64eb864adfe376de01e6ddda) Thanks [@mortegro](https://github.com/mortegro)! - A `library:` lock entry of a git-backed library now records the library's remote as an optional `url:` field (credentials of an `https://user:token@…` URL are left out; a local library without a remote writes none). The library name in the lock is local to a machine, so a teammate who cloned the same remote under another name could not `install --locked`. When the locked name is not registered (or its directory is gone), `install --locked`, `install` and `check` now use the registered library whose remote is the same repository (`.git` suffix, trailing `/` and `git@host:o/r` against `https://host/o/r` do not matter), exit 0, deploy the locked files and leave the lock unchanged. With neither the name nor the remote registered, the `Missing:` line names the library and the remote and says `skaile library init <name> --git <url>`. The lock schema version is not bumped, a lock without `url:` resolves by name as before, and an older CLI ignores the key. `LockLibraryOrigin` gains `url?: string` (p122).
+
+- [#1052](https://github.com/skaile-ai/workspaces/pull/1052) [`b591c9c`](https://github.com/skaile-ai/workspaces/commit/b591c9c8531f61de64eb864adfe376de01e6ddda) Thanks [@mortegro](https://github.com/mortegro)! - Store and factory assets deploy their `requires`, and `add`, `info` and `search` agree on one version (second 5.8.0 recheck).
+
+  - `skaile add skill:@skaile-ai/skailify` deploys `skailify` and every asset it requires. `check` and `install --locked` exit 0 afterwards, and `install` deploys a requirement that is missing instead of printing `Nothing to install` (p131).
+  - `add`, `info` and `search` show the same version for one ref. When the factory, a project source or a library hold it at different versions, all three name the origin they chose (p126).
+  - The "did you mean" hint of `add` with a ref that has no publisher lists only refs that resolve (p129).
+  - `search --local` lists one row per publisher for the same name, so `skill:@mortegro/speak-like-a-pirate` no longer hides behind `skill:@acme/speak-like-a-pirate` (p130).
+  - Library API: `LocalIndex.pruneAssetDefs` returns the ids of the removed rows (`string[]`), not the count. Use `.length` for the count. `LocalCatalogSource.sync()` also returns `pruned` and takes an optional `only` set. When a library re-publishes a ref under another publisher, `library index` restores the index row that another library still holds.
+
+- [#1052](https://github.com/skaile-ai/workspaces/pull/1052) [`b591c9c`](https://github.com/skaile-ai/workspaces/commit/b591c9c8531f61de64eb864adfe376de01e6ddda) Thanks [@mortegro](https://github.com/mortegro)! - `update` and sources respect local state and report git and cache errors cleanly (p108, p110, p111, p112, p120).
+
+  - `skaile update <name>` updates only the declared asset the name matches (`kind:@publisher/name`, `kind:name` or `name`). A name that matches none exits 1 with `No declared asset matches "<name>".`, before any network work. Before, the name was ignored and an unknown one exited 0 (p110).
+  - `skaile update` never resets a source clone that holds commits the remote lacks. `pullRepoResult` refuses with `Not possible to fast-forward, aborting.`, the message `skaile source sync` gives, and the clone stays as it is. Before, the force-sync dropped the local commits (p111).
+  - A `sources:` item in `skaile.yaml` without a `url:` fails with one line that names it (`sources[0] has no url: "skill:@x/y" (write it as "- url: <git url>")`) in every command that reads sources. `source list` no longer ends in a `TypeError`. The new `parseSourceEntries()` and `SourceEntryError` are exported from `@skaile/workspaces/core`; `normalizeConfig()` and `WorkspaceYamlEditor.getSources()` throw it instead of skipping the item (p112).
+  - `skaile library pull` and `sync` print `uncommitted changes in <lib>; commit or stash them first` and exit 1 when local edits block the pull, not git's multi-line error (p108).
+  - The catalog cache is keyed by `catalog.url`: listings and cached misses ("not found") are stored under a hash of the URL. After the URL changes, results come only from the new URL, a ref the old catalog lacked is asked of the new one at once, and an unreachable URL prints `store unavailable` instead of the old catalog's results. Found assets and tarballs stay shared, so an air-gapped run still resolves what an online run cached. `CatalogCacheOptions` has a new optional `scope` (p120).
+
+- [#1047](https://github.com/skaile-ai/workspaces/pull/1047) [`62ccbae`](https://github.com/skaile-ai/workspaces/commit/62ccbae130408b1db4361762bac87a5eaa58a5a3) Thanks [@mortegro](https://github.com/mortegro)! - Library authoring refuses the inputs it let through before (p13, p14, p74, p76, p85).
+
+  - One publisher slug decides everywhere: 1–39 lowercase letters, digits and single hyphens inside (the lowercase form of the ref parser's publisher grammar). `library create --publisher`, `library set <lib> publisher=`, `asset import --publisher`, `validate`, `library index` and the `library publish` plan now all refuse `a.b`, `Bad!`, `-x`, `x-`, `a--b`, `a_b` and a 40-character name with the same `Invalid publisher "…"` line, so a ref that `create` or `import` prints can always be added (p13). A store login is lowercased before it is used as the publisher.
+  - `library create --dir <d>` checks the real path of `<d>`: a symlink that leaves the library is refused and the message names the path it resolves to (p14). A file at `<d>` exits 1 with `… is not a directory`, no stack trace (p74).
+  - `library init <name> --path <dir>` refuses a directory inside a registered library, a directory that contains one, and the libraries folder (p85).
+  - Adopting a directory whose `skaile.manifest.yaml` lists only some of its assets prints `! <n> asset(s) on disk are not in the manifest; run library index` (p76).
+
+- [#1047](https://github.com/skaile-ai/workspaces/pull/1047) [`62ccbae`](https://github.com/skaile-ai/workspaces/commit/62ccbae130408b1db4361762bac87a5eaa58a5a3) Thanks [@mortegro](https://github.com/mortegro)! - One requirement identity from the 5.8.0 critique. A requirement is `publisher/kind:name` wherever it is declared: a bare `report-table` in a SKILL.md `requires` and `skill:@acme/report-table` in the manifest `dependencies` are one requirement, so `info`, `check`, `doctor` and `install --locked` list it once, publisher-qualified (p90, p99). A `dependencies:` entry whose publisher is not a valid slug (`skill:@Bad/x`) now fails `skaile validate` and `skaile library index` (p95). `skaile remove` with the library gone reads the deployed asset's `requires` and prunes the dependencies only it required (p95). An asset added from a project `sources:` clone deploys its `requires` like a library asset, so `check` and `install --locked` exit 0 afterwards and `install` no longer says "Nothing to install" while `check` calls a requirement fixable (p83).
+
+- [#1047](https://github.com/skaile-ai/workspaces/pull/1047) [`62ccbae`](https://github.com/skaile-ai/workspaces/commit/62ccbae130408b1db4361762bac87a5eaa58a5a3) Thanks [@mortegro](https://github.com/mortegro)! - `remove` guards dependencies, the lock stays quiet, `update` says "replaced", build leftovers leave the deploy and the hash (p88, p93, p92, p98).
+
+  - `skaile remove <ref>` of an asset another installed asset requires prints `! <ref> is required by <ref2>`, keeps files, declaration and lock entry, and exits 1. `--force` removes it anyway (p88).
+  - `skaile install` and `skaile update` rewrite `skaile.lock.yaml` only when its content changes, so a no-op run keeps the file byte-identical (`locked_at` included) and prints no `Lock file written` line (p93).
+  - When an asset moves to another locked version, `install` and `update` print `<ref> replaced 0.1.1 → 0.1.2` instead of the `! Removed: …#0.1.1` warning (p92).
+  - `__pycache__/`, `*.pyc`, `.DS_Store`, `node_modules/` and symlinks in an asset folder are neither deployed nor hashed. A `.pyc` that a helper script writes into a library no longer makes the lock report `content changed since lock` (p98).
+
+- [#1047](https://github.com/skaile-ai/workspaces/pull/1047) [`62ccbae`](https://github.com/skaile-ai/workspaces/commit/62ccbae130408b1db4361762bac87a5eaa58a5a3) Thanks [@mortegro](https://github.com/mortegro)! - Hints and `diff` of a project whose assets live in more than one library (5.8.0 critique). A "did you mean" hint after a publisher change names the asset of the library the lock recorded for the old ref, never a same-named asset of another library, and the `skaile library set <lib> publisher=<old>` advice names that library (p78). With the same ref in two libraries, `skaile diff` compares the deployed copy with the library the lock records, at the locked version, instead of the highest version of another library (p87). The "`<ref>` exists in N libraries" warning is printed by `skaile add` (and `npx skills add`) only; `diff`, `check`, `outdated`, `install` and `update` no longer repeat a choice the lock or a pin already made (p87).
+
+  One project state for `check`, `doctor`, `outdated`, `diff` and `install --locked` (5.8.0 critique). `AssetManager.projectState()` (replaces `lockGaps()`) computes every way the project differs from what it declares and locks, and all five commands take their verdict and exit code from it. A hand-declared preset that nothing holds, or one with an item that does not resolve, now fails `doctor`, `outdated` and `install --locked` as it fails `check`, also in a project that already has a lock (p46); the lock gains an optional `presets:` list that records every preset `install` and `add` expanded, so this holds offline. After `library rename` or removal, `check` and `doctor` fail like `install --locked` and `outdated` (p89); `outdated` and `diff <ref>` exit 1 on a project-state problem. `install --locked` ends with `Failed`, never `Done`, when a locked asset is missing (p100). A declared ref that no library or source holds is no longer advised `skaile install`; the line names `skaile library init` / `skaile remove <ref>` (p91).
+
+- [#1047](https://github.com/skaile-ai/workspaces/pull/1047) [`62ccbae`](https://github.com/skaile-ai/workspaces/commit/62ccbae130408b1db4361762bac87a5eaa58a5a3) Thanks [@mortegro](https://github.com/mortegro)! - `skaile validate`, `skaile library index` and `skaile library publish --dry-run` now run one shared per-asset check list: a flow file the flow engine cannot parse (p72) and a skill whose description is still the scaffold `TODO:` placeholder (p73) fail all three with the same message, and `index` now reports it (exit 1, closing line `✗ <n> asset(s) fail the checks of skaile validate`) while keeping the asset in the manifest and the search index. The factory skill `authoring-skaile-manifests` now says the asset file's version wins over `assets[].version` (p45). `skaile migrate assets --write` keeps a bundle's `version` in the preset it writes, and prints `version <old> → 1.0.0` when it has to reset an unusable one (p94).
+
+### Patch Changes
+
+- [#1052](https://github.com/skaile-ai/workspaces/pull/1052) [`b591c9c`](https://github.com/skaile-ai/workspaces/commit/b591c9c8531f61de64eb864adfe376de01e6ddda) Thanks [@mortegro](https://github.com/mortegro)! - `skaile library init <name> --path <dir>` on a directory with no manifest (or one that lists no assets) now writes one manifest entry per asset it indexes. It runs the same sync and index as `library index`, so `Indexed N asset(s)` matches the manifest, a second `library index` changes nothing, and an asset that fails the checks is reported with the same lines and exit code as `index`. A manifest that already lists assets keeps its entries, and the `! <n> asset(s) on disk are not in the manifest` line still fires for the rest (p133).
+
+- [#1053](https://github.com/skaile-ai/workspaces/pull/1053) [`1d24047`](https://github.com/skaile-ai/workspaces/commit/1d240475becac3df0eec5c93cb7a51dd7840f55e) Thanks [@mortegro](https://github.com/mortegro)! - `skaile manage` now ticks the right library row when the lock's library is registered here under another name. It finds the library the way `check` and `install --locked` do: by the locked name, else by the git remote the lock records. Before, only a row with the locked name was ticked, so an installed asset showed as not installed (p134). A lock entry whose library is not registered here ticks no library row. A copy placed by `skaile asset install` still ticks only the row of its library, by the name the lock records, even when that library is no longer registered. `AssetManager` has a new method, `lockedLibraryNames()`, that returns this lookup for every library entry of the project lock.
+
+- [#1047](https://github.com/skaile-ai/workspaces/pull/1047) [`62ccbae`](https://github.com/skaile-ai/workspaces/commit/62ccbae130408b1db4361762bac87a5eaa58a5a3) Thanks [@mortegro](https://github.com/mortegro)! - Library agents behave like skills through the consume chain. A deployed agent is left alone on a repeat `skaile install`, `install --locked` and `update` (no `Updated` line, file untouched) (p84). `skaile diff agent:…` finds the deployed `<name>.md` / `<name>.toml` and compares it with the rendered source (p96). `skaile install` exits 1 for an `agents:` instance whose agent was never added and says `run skaile add agent:… first` (p97). The `add`/`install` line of an `AGENT.md` agent prints `#<version>` from the lock (p101). The `library create agent` `SOUL.md` scaffold says `Agent prompt goes here.`; `validate` still flags it, and the older skill wording (p102).
+
+- [#1047](https://github.com/skaile-ai/workspaces/pull/1047) [`62ccbae`](https://github.com/skaile-ai/workspaces/commit/62ccbae130408b1db4361762bac87a5eaa58a5a3) Thanks [@mortegro](https://github.com/mortegro)! - CLI polish from the 5.8.0 critique: `skaile why <ref>` now exits 1 when the ref is not a dependency of the project (p77); `skaile run` no longer prints Node's `ExperimentalWarning: SQLite is an experimental feature` on stderr, other warnings are kept (p75); `skaile manage` ticks an asset as installed only when kind, name and publisher all match, so an unrelated same-named asset of another publisher or library is no longer shown as installed (p86).
+
+- [#1047](https://github.com/skaile-ai/workspaces/pull/1047) [`62ccbae`](https://github.com/skaile-ai/workspaces/commit/62ccbae130408b1db4361762bac87a5eaa58a5a3) Thanks [@mortegro](https://github.com/mortegro)! - Library git verbs and sources report what git did (p79–p82).
+
+  - `skaile library push` counts the commits the remote it pushes to lacks. After `skaile library set <name> backendConfig.url=<url>` the first push no longer reports every commit as pushed (p79).
+  - `library pull`, `sync` and `push` print one line, `rebase in progress; finish it with git rebase --continue`, and exit 1 while a rebase is unfinished. Before, `pull` and `sync` printed git's raw text and `push` advised the rebase that was already running (p80).
+  - `skaile source list`, `show` and `remove` tell two sources with the same repo name apart. `list` shows the second under its clone-cache key; `show` and `remove` of a shared name exit 1 and list both URLs, and a URL or the listed key picks one. `remove` no longer drops the first match silently (p81).
+  - A failed source pull prints git's whole error on one line, for example `fatal: '<path>' does not appear to be a git repository Could not read from remote repository. …`, not only its last line (p82).
+
 ## 5.9.0
 
 ### Minor Changes

package/README.md

@@ -76,6 +76,18 @@ cli  (top-level CLI — orchestrates everything below)
 
 ## Quick Start
 
+`skaile run` and `skaile repl` start a driver (a harness), and two of the drivers need an
+optional SDK that `skaile-cli` does not install. Install the one for your driver before the
+first `run` or `repl`:
+
+| Driver | Install |
+|---|---|
+| `claude-sdk` (default) | `npm i -D @anthropic-ai/claude-agent-sdk` (with Bun: `bun add @anthropic-ai/claude-agent-sdk`) |
+| `codex` | `npm i -D @openai/codex-sdk` (with Bun: `bun add @openai/codex-sdk`) |
+| `omp` | none; needs the `omp` binary on your `PATH` and a configured model |
+
+Without the SDK, `skaile run` exits 1 with `Claude Agent SDK not installed` (or `Codex SDK not installed`).
+
 ```bash
 # Installed from npm (npm i -D skaile-cli)
 npx skaile --help          # run the skaile CLI

package/dist/{asset-feeds-XMKKUUK6.js → asset-feeds-CXGQIDFR.js}

@@ -1,29 +1,29 @@
-import { getKnownKinds } from './chunk-2FRUUDZY.js';
-import './chunk-FZNG4V4J.js';
-import './chunk-MGGFBZWA.js';
+import { getKnownKinds } from './chunk-CAHB6MHA.js';
+import './chunk-TCHRMVTO.js';
+import './chunk-D3B36CYC.js';
 import './chunk-7RGTAEG6.js';
 import './chunk-NUELZWCF.js';
-import './chunk-4MQS7CAF.js';
-import './chunk-Y7QA2OLD.js';
-import './chunk-CKQEIY43.js';
+import './chunk-2F5AWQX5.js';
+import './chunk-J4RBUFGM.js';
+import './chunk-COH6FQAG.js';
 import './chunk-R7FOF242.js';
 import './chunk-3TXEJN4W.js';
-import './chunk-B6GIW55K.js';
-import './chunk-36AFURKZ.js';
+import './chunk-ZCAJZ4B2.js';
+import './chunk-PBBPZYVG.js';
 import './chunk-4GY63JU6.js';
-import { factoryAssetRoots } from './chunk-GB7WDMH2.js';
+import { factoryAssetRoots } from './chunk-EDYHEMJA.js';
 import './chunk-PMECEZK3.js';
 import './chunk-5BEFNLOR.js';
 import './chunk-A2ULN3KX.js';
-import { scanRepo } from './chunk-JAKOMFC6.js';
+import { scanRepo } from './chunk-ALEYHUC5.js';
 import './chunk-L5VSIPQD.js';
 import './chunk-CPSIPIX7.js';
-import './chunk-BTE2V4IW.js';
+import './chunk-ZPWTOUTK.js';
 import './chunk-RVRB27AN.js';
-import { parseRequires } from './chunk-GTILM2CI.js';
-import './chunk-QVNRCDTV.js';
+import { parseRequires } from './chunk-SBSA3IQA.js';
+import './chunk-BNMZVPYA.js';
 import './chunk-ICSCSM5D.js';
-import './chunk-UMVKJM4Q.js';
+import './chunk-DALV4HHP.js';
 import './chunk-MJHSLODD.js';
 import './chunk-C3CAXQMA.js';
 import './chunk-BOFL7GIF.js';
@@ -51,8 +51,8 @@ function libraryEntryOf(asset) {
 async function libraryAssets() {
   const notes = [];
   try {
-    const { openLibraryManager } = await import('./open-library-DB2PNL2X.js');
-    const { getKindRegistry } = await import('./open-registry-ZUZJ7MS7.js');
+    const { openLibraryManager } = await import('./open-library-BOSPJVID.js');
+    const { getKindRegistry } = await import('./open-registry-4FI7HKET.js');
     const { scanAuthoringLibraries } = await import('./library/index.js');
     const { library: index, close } = await openLibraryManager();
     try {
@@ -85,7 +85,7 @@ async function libraryAssets() {
 async function storeAssets(projectDir) {
   const notes = [];
   try {
-    const { resolveCatalogSource } = await import('./open-library-DB2PNL2X.js');
+    const { resolveCatalogSource } = await import('./open-library-BOSPJVID.js');
     const { source, close } = await resolveCatalogSource({ projectDir });
     try {
       const assets = await source.listAssets();
@@ -164,5 +164,5 @@ async function gatherAssetFeeds(am, projectDir) {
 }
 
 export { gatherAssetFeeds };
-//# sourceMappingURL=asset-feeds-XMKKUUK6.js.map
-//# sourceMappingURL=asset-feeds-XMKKUUK6.js.map
+//# sourceMappingURL=asset-feeds-CXGQIDFR.js.map
+//# sourceMappingURL=asset-feeds-CXGQIDFR.js.map

package/dist/{asset-feeds-XMKKUUK6.js.map → asset-feeds-CXGQIDFR.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../cli/src/asset-feeds.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuEA,SAAS,eAAe,KAAA,EAAsC;AAC5D,EAAA,MAAM,EAAE,UAAS,GAAI,KAAA;AACrB,EAAA,MAAM,MAAA,GAAU,SAAS,QAAA,EAAkD,QAAA;AAC3E,EAAA,MAAM,WAAA,GAAc,SAAS,QAAA,IAAY,MAAA;AACzC,EAAA,MAAM,cACJ,OAAO,WAAA,KAAgB,QAAA,GACnB,WAAA,GACA,MAAM,OAAA,CAAQ,WAAW,CAAA,GACvB,WAAA,CAAY,OAAO,CAAC,CAAA,KAAmB,OAAO,CAAA,KAAM,QAAQ,CAAA,GAC5D,MAAA;AACR,EAAA,MAAM,OAAO,QAAA,CAAS,YAAA;AACtB,EAAA,OAAO;AAAA,IACL,MAAM,KAAA,CAAM,IAAA;AAAA,IACZ,MAAM,KAAA,CAAM,IAAA;AAAA,IACZ,aAAa,OAAO,QAAA,CAAS,WAAA,KAAgB,QAAA,GAAW,SAAS,WAAA,GAAc,EAAA;AAAA,IAC/E,QAAQ,KAAA,CAAM,YAAA;AAAA,IACd,WAAW,KAAA,CAAM,SAAA;AAAA,IACjB,GAAI,MAAM,MAAA,GAAS,EAAE,QAAQ,KAAA,CAAM,MAAA,KAAW,EAAC;AAAA,IAC/C,SAAS,KAAA,CAAM,OAAA;AAAA,IACf,QAAA,EAAU,gBAAgB,MAAA,GAAY,KAAK,aAAA,CAAc,EAAE,QAAA,EAAU,WAAA,EAAa,CAAA;AAAA,IAClF,cACE,KAAA,CAAM,IAAA,KAAS,YAAY,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,GACzC,IAAA,CAAK,OAAO,CAAC,CAAA,KAAmB,OAAO,CAAA,KAAM,QAAA,IAAY,EAAE,MAAA,GAAS,CAAC,IACrE;AAAC,GACT;AACF;AAWA,eAAe,aAAA,GAGZ;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AAEF,IAAA,MAAM,EAAE,kBAAA,EAAmB,GAAI,MAAM,OAAO,4BAAmB,CAAA;AAC/D,IAAA,MAAM,EAAE,eAAA,EAAgB,GAAI,MAAM,OAAO,6BAAoB,CAAA;AAC7D,IAAA,MAAM,EAAE,sBAAA,EAAuB,GAAI,MAAM,OAAO,oBAA4B,CAAA;AAC5E,IAAA,MAAM,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAM,GAAI,MAAM,kBAAA,EAAmB;AAC3D,IAAA,IAAI;AACF,MAAA,MAAM,UAAyB,EAAC;AAChC,MAAA,KAAA,MAAW,QAAQ,MAAM,sBAAA,CAAuB,KAAA,EAAO,eAAA,EAAiB,CAAA,EAAG;AACzE,QAAA,IAAI,IAAA,CAAK,UAAU,KAAA,CAAA,EAAW;AAC5B,UAAA,KAAA,CAAM,IAAA,CAAK,EAAE,IAAA,EAAM,WAAA,EAAa,OAAA,EAAS,CAAA,EAAG,IAAA,CAAK,OAAA,CAAQ,IAAI,CAAA,EAAA,EAAK,IAAA,CAAK,KAAK,IAAI,CAAA;AAChF,UAAA;AAAA,QACF;AACA,QAAA,KAAA,MAAW,KAAA,IAAS,KAAK,MAAA,EAAQ;AAC/B,UAAA,OAAA,CAAQ,IAAA,CAAK;AAAA,YACX,MAAA,EAAQ,SAAA;AAAA,YACR,KAAA,EAAO,eAAe,KAAK,CAAA;AAAA,YAC3B,KAAA,EAAO,KAAK,OAAA,CAAQ;AAAA,WACrB,CAAA;AAAA,QACH;AAAA,MACF;AACA,MAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,IAC1B,CAAA,SAAE;AACA,MAAA,KAAA,EAAM;AAAA,IACR;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,IAAA,EAAM,WAAA;AAAA,MACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACzD,CAAA;AACD,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAYA,eAAe,YAAY,UAAA,EAGxB;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AACF,IAAA,MAAM,EAAE,oBAAA,EAAqB,GAAI,MAAM,OAAO,4BAAmB,CAAA;AACjE,IAAA,MAAM,EAAE,QAAQ,KAAA,EAAM,GAAI,MAAM,oBAAA,CAAqB,EAAE,YAAY,CAAA;AACnE,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,UAAA,EAAW;AACvC,MAAA,MAAM,OAAA,GAA0B,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,QACjD,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,IAAA,EAAO,EAAE,IAAA,IAAsB,OAAA;AAAA,QAC/B,WAAA,EAAa,EAAE,WAAA,IAAe,EAAA;AAAA,QAC9B,MAAA,EAAQ,CAAA,QAAA,EAAW,CAAA,CAAE,EAAE,CAAA,CAAA;AAAA,QACvB,WAAW,CAAA,CAAE,SAAA;AAAA,QACb,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,QAAQ,CAAA,CAAE,MAAA;AAAA,QACV,UAAU,CAAA,CAAE,QAAA;AAAA,QACZ,SAAS,CAAA,CAAE,OAAA;AAAA,QACX,UAAU,EAAC;AAAA,QACX,cAAc;AAAC,OACjB,CAAE,CAAA;AACF,MAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,IAC1B,CAAA,SAAE;AACA,MAAA,KAAA,EAAM;AAAA,IACR;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,MAAM,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAG3D,IAAA,IAAI,CAAC,QAAA,CAAS,IAAA,CAAK,GAAG,CAAA,EAAG;AACvB,MAAA,KAAA,CAAM,KAAK,EAAE,IAAA,EAAM,OAAA,EAAS,OAAA,EAAS,KAAK,CAAA;AAAA,IAC5C;AACA,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAaA,eAAe,aAAa,EAAA,EAA8C;AAIxE,EAAA,MAAM,eAAA,GAAkB,iBAAA,EAAkB,CAAE,GAAA,CAAI,CAAC,CAAA,KAAO,CAAA,CAAE,QAAA,CAAc,IAAA,CAAA,GAAG,CAAA,GAAI,CAAA,GAAI,CAAA,GAAS,IAAA,CAAA,GAAI,CAAA;AAChG,EAAA,MAAM,gBAAgB,CAAC,CAAA,KACrB,eAAA,CAAgB,IAAA,CAAK,CAAC,EAAA,KAAO,CAAA,KAAM,EAAA,CAAG,KAAA,CAAM,GAAG,EAAE,CAAA,IAAK,CAAA,CAAE,UAAA,CAAW,EAAE,CAAC,CAAA;AAExE,EAAA,MAAM,GAAA,GAAA,CAAO,MAAM,EAAA,CAAG,MAAA,EAAO,EAAG,MAAA,CAAO,CAAC,CAAA,KAAM,CAAC,aAAA,CAAc,CAAA,CAAE,MAAM,CAAC,CAAA;AACtE,EAAA,MAAM,UAAyB,EAAC;AAMhC,EAAA,KAAA,MAAW,EAAE,QAAA,EAAU,IAAA,EAAK,IAAK,EAAA,CAAG,iBAAgB,EAAG;AACrD,IAAA,IAAI,aAAA,CAAc,IAAI,CAAA,EAAG;AACzB,IAAA,MAAM,SAAS,IAAA,CAAK,QAAA,CAAc,IAAA,CAAA,GAAG,CAAA,GAAI,OAAO,IAAA,GAAY,IAAA,CAAA,GAAA;AAC5D,IAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,MAAA,KAAW,IAAA,IAAQ,CAAA,CAAE,MAAA,CAAO,UAAA,CAAW,MAAM,CAAC,CAAA;AAChF,IAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG;AACxB,IAAA,MAAM,aAAa,QAAA,CAAS,KAAA,CAAM,GAAG,CAAA,CAAE,KAAI,IAAK,QAAA;AAChD,IAAA,KAAA,MAAW,KAAA,IAAS,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,EAAE,QAAQ,QAAA,EAAU,KAAA,EAAO,KAAA,EAAO,UAAA,EAAY,CAAA;AAAA,EACxF;AACA,EAAA,OAAO,OAAA;AACT;AAUA,eAAe,aAAA,GAGZ;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AACF,IAAA,MAAM,UAA0B,EAAC;AACjC,IAAA,KAAA,MAAW,IAAA,IAAQ,mBAAkB,EAAG;AACtC,MAAA,OAAA,CAAQ,IAAA,CAAK,GAAI,MAAM,QAAA,CAAS,IAAA,EAAM,gBAAA,EAAkB,EAAE,UAAA,EAAY,aAAA,EAAc,EAAG,CAAE,CAAA;AAAA,IAC3F;AACA,IAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,EAC1B,SAAS,GAAA,EAAK;AACZ,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,IAAA,EAAM,SAAA;AAAA,MACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACzD,CAAA;AACD,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAGA,SAAS,GAAA,CAAI,QAAqB,OAAA,EAAwC;AACxE,EAAA,OAAO,QAAQ,GAAA,CAAI,CAAC,WAAW,EAAE,MAAA,EAAQ,OAAM,CAAE,CAAA;AACnD;AASA,eAAsB,gBAAA,CACpB,IACA,UAAA,EAC0B;AAC1B,EAAA,MAAM,CAAC,IAAA,EAAM,KAAK,CAAA,GAAI,MAAM,OAAA,CAAQ,GAAA,CAAI,CAAC,aAAA,EAAc,EAAG,WAAA,CAAY,UAAU,CAAC,CAAC,CAAA;AAClF,EAAA,MAAM,OAAA,GAAU,MAAM,aAAA,EAAc;AACpC,EAAA,MAAM,GAAA,GAAM,MAAM,YAAA,CAAa,EAAE,CAAA;AACjC,EAAA,OAAO;AAAA,IACL,OAAA,EAAS;AAAA,MACP,GAAG,GAAA;AAAA,MACH,GAAG,IAAA,CAAK,OAAA;AAAA,MACR,GAAG,GAAA,CAAI,SAAA,EAAW,OAAA,CAAQ,OAAO,CAAA;AAAA,MACjC,GAAG,GAAA,CAAI,OAAA,EAAS,KAAA,CAAM,OAAO;AAAA,KAC/B;AAAA,IACA,KAAA,EAAO,CAAC,GAAG,IAAA,CAAK,KAAA,EAAO,GAAG,KAAA,CAAM,KAAA,EAAO,GAAG,OAAA,CAAQ,KAAK;AAAA,GACzD;AACF","file":"asset-feeds-XMKKUUK6.js","sourcesContent":["/**\n * asset-feeds.ts — gather installable assets from every feed the manage TUI\n * surfaces.\n *\n * Four feeds, normalized into `CatalogEntry`:\n * - **Project sources** — `skaile.yaml` `sources:` entries (scanned via\n *   `AssetManager.search()`; the new `sources:` field is merged into the\n *   legacy repositories map in `AssetManager.loadConfig`).\n * - **Local libraries** — user authoring places from `LocalIndex`, read through\n *   `scanAuthoringLibraries` (`@skaile/workspaces/library`): the same scan\n *   `library index` / `search --local` use, so publishers and refs match them\n *   (per-asset `publisher_overrides` honoured), `dev_paths` assets are left out,\n *   and a library that fails to scan becomes one note while the rest stay listed.\n * - **Factory assets** — the bundled first-party `factory-assets` tree\n *   (`factoryAssetRoots()`), scanned from disk. Always present; no network.\n * - **Remote store** — the configured catalog source when `catalog.url` is\n *   not `local`. Failures are non-fatal — they surface as notes.\n */\n\nimport * as path from \"node:path\";\nimport {\n  type AssetKind,\n  type CatalogEntry,\n  factoryAssetRoots,\n  parseRequires,\n  scanRepo,\n} from \"@skaile/workspaces/core\";\nimport { getKnownKinds } from \"./open-registry.ts\";\nimport type { DiscoveredAsset } from \"@skaile/workspaces/discovery\";\n\n/** One non-fatal note returned to the caller for surfacing in the UI. */\nexport interface FeedNote {\n  feed: \"sources\" | \"libraries\" | \"store\" | \"factory\";\n  message: string;\n}\n\n/**\n * Which feed an asset came from. This is the top-level grouping axis in the\n * manage TUI (\"where is this skill coming from?\") and is intentionally distinct\n * from `publisher` (asset-intrinsic identity): the same publisher can legitimately\n * appear under more than one origin (e.g. a github repo you added as a `source`\n * that is also listed in the remote `store`).\n */\nexport type AssetOrigin = \"source\" | \"library\" | \"factory\" | \"store\";\n\n/** A catalog entry tagged with the feed it was gathered from. */\nexport interface OriginEntry {\n  origin: AssetOrigin;\n  entry: CatalogEntry;\n  /**\n   * Second-level grouping label for the manage tree. Defaults (when unset) to the\n   * entry's `publisher`; the source feed sets it to the source's short repo name\n   * so the Sources band groups by source — \"which repo did this come from\" — not\n   * by the asset-intrinsic publisher.\n   */\n  group?: string;\n}\n\nexport interface AssetFeedResult {\n  entries: OriginEntry[];\n  notes: FeedNote[];\n}\n\n/**\n * Map one discovered library asset to the `CatalogEntry` the manage rows read.\n * `publisher` is the bare per-asset publisher (what `search --local` prints),\n * `source` the manifest path. `repo` is left unset: it only feeds the Sources-tree\n * org grouping. `requires` / `dependencies` come from the manifest the way the\n * scanner fills them — string `requires:` refs parsed to `{kind, name}`, a bundle's\n * string `dependencies:` list verbatim.\n */\nfunction libraryEntryOf(asset: DiscoveredAsset): CatalogEntry {\n  const { manifest } = asset;\n  const nested = (manifest.metadata as Record<string, unknown> | undefined)?.requires;\n  const rawRequires = manifest.requires ?? nested;\n  const requireRefs =\n    typeof rawRequires === \"string\"\n      ? rawRequires\n      : Array.isArray(rawRequires)\n        ? rawRequires.filter((r): r is string => typeof r === \"string\")\n        : undefined;\n  const deps = manifest.dependencies;\n  return {\n    name: asset.name,\n    kind: asset.kind as AssetKind,\n    description: typeof manifest.description === \"string\" ? manifest.description : \"\",\n    source: asset.manifestPath,\n    publisher: asset.publisher,\n    ...(asset.plugin ? { plugin: asset.plugin } : {}),\n    version: asset.version,\n    requires: requireRefs === undefined ? [] : parseRequires({ requires: requireRefs }),\n    dependencies:\n      asset.kind === \"bundle\" && Array.isArray(deps)\n        ? deps.filter((d): d is string => typeof d === \"string\" && d.length > 0)\n        : [],\n  };\n}\n\n/**\n * Pull assets from local libraries (the authoring places under\n * `~/.skaile/libraries/<name>/`, not the `~/.skaile/cache/sources/` cache) through\n * `scanAuthoringLibraries`, grouped under the bare library name\n * (`group: <name>`) so the manage TUI shows a clean `<name>` band — no\n * `library:` prefix (mirrors the source feed). Plugin grouping (`entry.plugin`)\n * comes from `DiscoveredAsset.plugin`. A library whose scan fails becomes one\n * `FeedNote`; the outer `catch` covers only opening the index.\n */\nasync function libraryAssets(): Promise<{\n  entries: OriginEntry[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    // Lazy: the library subpath pulls in SQLite, which the other feeds never need.\n    const { openLibraryManager } = await import(\"./open-library.ts\");\n    const { getKindRegistry } = await import(\"./open-registry.ts\");\n    const { scanAuthoringLibraries } = await import(\"@skaile/workspaces/library\");\n    const { library: index, close } = await openLibraryManager();\n    try {\n      const entries: OriginEntry[] = [];\n      for (const scan of await scanAuthoringLibraries(index, getKindRegistry())) {\n        if (scan.error !== undefined) {\n          notes.push({ feed: \"libraries\", message: `${scan.library.name}: ${scan.error}` });\n          continue;\n        }\n        for (const asset of scan.assets) {\n          entries.push({\n            origin: \"library\",\n            entry: libraryEntryOf(asset),\n            group: scan.library.name,\n          });\n        }\n      }\n      return { entries, notes };\n    } finally {\n      close();\n    }\n  } catch (err) {\n    notes.push({\n      feed: \"libraries\",\n      message: err instanceof Error ? err.message : String(err),\n    });\n    return { entries: [], notes };\n  }\n}\n\n/**\n * Pull a (best-effort) snapshot of the connected remote store catalog.\n *\n * - Returns no entries when the resolved catalog is local-only or the host\n *   is unreachable (the failure becomes a note, not an exception).\n * - Maps `CatalogAsset` → `CatalogEntry`, carrying `publisher`, `repo`, and\n *   `category` straight through and using `source = \"store://<id>\"`; per-file\n *   `source` paths are not available for remote assets so the canonical ref is\n *   a stable placeholder.\n */\nasync function storeAssets(projectDir: string): Promise<{\n  entries: CatalogEntry[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    const { resolveCatalogSource } = await import(\"./open-library.ts\");\n    const { source, close } = await resolveCatalogSource({ projectDir });\n    try {\n      const assets = await source.listAssets();\n      const entries: CatalogEntry[] = assets.map((a) => ({\n        name: a.name,\n        kind: (a.kind as AssetKind) ?? \"skill\",\n        description: a.description ?? \"\",\n        source: `store://${a.id}`,\n        publisher: a.publisher,\n        repo: a.repo,\n        plugin: a.plugin,\n        category: a.category,\n        version: a.version,\n        requires: [],\n        dependencies: [],\n      }));\n      return { entries, notes };\n    } finally {\n      close();\n    }\n  } catch (err) {\n    const msg = err instanceof Error ? err.message : String(err);\n    // Local-only catalog throws a recognizable message — silence it; absence\n    // is the user's choice, not an error.\n    if (!/local/i.test(msg)) {\n      notes.push({ feed: \"store\", message: msg });\n    }\n    return { entries: [], notes };\n  }\n}\n\n/** The slice of `AssetManager` the source feed needs (kept narrow for tests). */\ninterface AssetManagerLike {\n  search: () => Promise<CatalogEntry[]>;\n  searchRepoRoots: () => { repoName: string; root: string }[];\n}\n\n/**\n * Project-source feed: leans on `AssetManager.search()`, which merges\n * `skaile.yaml`'s `sources:` field into the repositories map. Plugin grouping\n * (`entry.plugin`) is stamped by the scanner, so entries pass through as-is.\n */\nasync function sourceAssets(am: AssetManagerLike): Promise<OriginEntry[]> {\n  // The bundled factory tree is injected into the repositories map as an implicit\n  // source, so `am.search()` returns it too. It has its own `factory` origin band,\n  // so drop it here — otherwise the same first-party skills list twice under Sources.\n  const factoryPrefixes = factoryAssetRoots().map((r) => (r.endsWith(path.sep) ? r : r + path.sep));\n  const isFactoryPath = (p: string) =>\n    factoryPrefixes.some((fp) => p === fp.slice(0, -1) || p.startsWith(fp));\n\n  const all = (await am.search()).filter((e) => !isFactoryPath(e.source));\n  const entries: OriginEntry[] = [];\n  // Group each source's entries under the source node (its short repo name), not\n  // the publisher: under Sources the navigational question is \"which repo did\n  // this come from\". Each entry's `source` (absolute manifest path) lives under\n  // exactly one declared root, so group by prefix. The cache slug is\n  // URL-keyed `github.com/<org>/<repo>` — take the trailing segment.\n  for (const { repoName, root } of am.searchRepoRoots()) {\n    if (isFactoryPath(root)) continue;\n    const prefix = root.endsWith(path.sep) ? root : root + path.sep;\n    const owned = all.filter((e) => e.source === root || e.source.startsWith(prefix));\n    if (owned.length === 0) continue;\n    const sourceName = repoName.split(\"/\").pop() || repoName;\n    for (const entry of owned) entries.push({ origin: \"source\", entry, group: sourceName });\n  }\n  return entries;\n}\n\n/**\n * Factory-asset feed: scan the bundled first-party `factory-assets` tree(s)\n * resolved by `factoryAssetRoots()` (the `SKAILE_FACTORY_ASSETS_DIR` override\n * layer ahead of the bundled tree). Local disk only, no network — the entries are\n * the built-in skills / connectors / bundles that ship with `@skaile/workspaces`.\n * `factoryAssetRoots()` already dedupes, so the env override pointing at the\n * bundled dir collapses to one root.\n */\nasync function factoryAssets(): Promise<{\n  entries: CatalogEntry[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    const entries: CatalogEntry[] = [];\n    for (const root of factoryAssetRoots()) {\n      entries.push(...(await scanRepo(root, \"skaile-factory\", { knownKinds: getKnownKinds() })));\n    }\n    return { entries, notes };\n  } catch (err) {\n    notes.push({\n      feed: \"factory\",\n      message: err instanceof Error ? err.message : String(err),\n    });\n    return { entries: [], notes };\n  }\n}\n\n/** Tag a flat entry list with a single origin. */\nfunction tag(origin: AssetOrigin, entries: CatalogEntry[]): OriginEntry[] {\n  return entries.map((entry) => ({ origin, entry }));\n}\n\n/**\n * Run all feeds and return a single normalized result.\n *\n * Feeds run in parallel where possible — the store fetch is the slow one\n * (one HTTP call) and is fired alongside the local library walk. The factory\n * scan is local disk only, so it runs inline.\n */\nexport async function gatherAssetFeeds(\n  am: AssetManagerLike,\n  projectDir: string,\n): Promise<AssetFeedResult> {\n  const [libs, store] = await Promise.all([libraryAssets(), storeAssets(projectDir)]);\n  const factory = await factoryAssets();\n  const src = await sourceAssets(am);\n  return {\n    entries: [\n      ...src,\n      ...libs.entries,\n      ...tag(\"factory\", factory.entries),\n      ...tag(\"store\", store.entries),\n    ],\n    notes: [...libs.notes, ...store.notes, ...factory.notes],\n  };\n}\n"]}
+{"version":3,"sources":["../cli/src/asset-feeds.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuEA,SAAS,eAAe,KAAA,EAAsC;AAC5D,EAAA,MAAM,EAAE,UAAS,GAAI,KAAA;AACrB,EAAA,MAAM,MAAA,GAAU,SAAS,QAAA,EAAkD,QAAA;AAC3E,EAAA,MAAM,WAAA,GAAc,SAAS,QAAA,IAAY,MAAA;AACzC,EAAA,MAAM,cACJ,OAAO,WAAA,KAAgB,QAAA,GACnB,WAAA,GACA,MAAM,OAAA,CAAQ,WAAW,CAAA,GACvB,WAAA,CAAY,OAAO,CAAC,CAAA,KAAmB,OAAO,CAAA,KAAM,QAAQ,CAAA,GAC5D,MAAA;AACR,EAAA,MAAM,OAAO,QAAA,CAAS,YAAA;AACtB,EAAA,OAAO;AAAA,IACL,MAAM,KAAA,CAAM,IAAA;AAAA,IACZ,MAAM,KAAA,CAAM,IAAA;AAAA,IACZ,aAAa,OAAO,QAAA,CAAS,WAAA,KAAgB,QAAA,GAAW,SAAS,WAAA,GAAc,EAAA;AAAA,IAC/E,QAAQ,KAAA,CAAM,YAAA;AAAA,IACd,WAAW,KAAA,CAAM,SAAA;AAAA,IACjB,GAAI,MAAM,MAAA,GAAS,EAAE,QAAQ,KAAA,CAAM,MAAA,KAAW,EAAC;AAAA,IAC/C,SAAS,KAAA,CAAM,OAAA;AAAA,IACf,QAAA,EAAU,gBAAgB,MAAA,GAAY,KAAK,aAAA,CAAc,EAAE,QAAA,EAAU,WAAA,EAAa,CAAA;AAAA,IAClF,cACE,KAAA,CAAM,IAAA,KAAS,YAAY,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,GACzC,IAAA,CAAK,OAAO,CAAC,CAAA,KAAmB,OAAO,CAAA,KAAM,QAAA,IAAY,EAAE,MAAA,GAAS,CAAC,IACrE;AAAC,GACT;AACF;AAWA,eAAe,aAAA,GAGZ;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AAEF,IAAA,MAAM,EAAE,kBAAA,EAAmB,GAAI,MAAM,OAAO,4BAAmB,CAAA;AAC/D,IAAA,MAAM,EAAE,eAAA,EAAgB,GAAI,MAAM,OAAO,6BAAoB,CAAA;AAC7D,IAAA,MAAM,EAAE,sBAAA,EAAuB,GAAI,MAAM,OAAO,oBAA4B,CAAA;AAC5E,IAAA,MAAM,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAM,GAAI,MAAM,kBAAA,EAAmB;AAC3D,IAAA,IAAI;AACF,MAAA,MAAM,UAAyB,EAAC;AAChC,MAAA,KAAA,MAAW,QAAQ,MAAM,sBAAA,CAAuB,KAAA,EAAO,eAAA,EAAiB,CAAA,EAAG;AACzE,QAAA,IAAI,IAAA,CAAK,UAAU,KAAA,CAAA,EAAW;AAC5B,UAAA,KAAA,CAAM,IAAA,CAAK,EAAE,IAAA,EAAM,WAAA,EAAa,OAAA,EAAS,CAAA,EAAG,IAAA,CAAK,OAAA,CAAQ,IAAI,CAAA,EAAA,EAAK,IAAA,CAAK,KAAK,IAAI,CAAA;AAChF,UAAA;AAAA,QACF;AACA,QAAA,KAAA,MAAW,KAAA,IAAS,KAAK,MAAA,EAAQ;AAC/B,UAAA,OAAA,CAAQ,IAAA,CAAK;AAAA,YACX,MAAA,EAAQ,SAAA;AAAA,YACR,KAAA,EAAO,eAAe,KAAK,CAAA;AAAA,YAC3B,KAAA,EAAO,KAAK,OAAA,CAAQ;AAAA,WACrB,CAAA;AAAA,QACH;AAAA,MACF;AACA,MAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,IAC1B,CAAA,SAAE;AACA,MAAA,KAAA,EAAM;AAAA,IACR;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,IAAA,EAAM,WAAA;AAAA,MACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACzD,CAAA;AACD,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAYA,eAAe,YAAY,UAAA,EAGxB;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AACF,IAAA,MAAM,EAAE,oBAAA,EAAqB,GAAI,MAAM,OAAO,4BAAmB,CAAA;AACjE,IAAA,MAAM,EAAE,QAAQ,KAAA,EAAM,GAAI,MAAM,oBAAA,CAAqB,EAAE,YAAY,CAAA;AACnE,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,UAAA,EAAW;AACvC,MAAA,MAAM,OAAA,GAA0B,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,QACjD,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,IAAA,EAAO,EAAE,IAAA,IAAsB,OAAA;AAAA,QAC/B,WAAA,EAAa,EAAE,WAAA,IAAe,EAAA;AAAA,QAC9B,MAAA,EAAQ,CAAA,QAAA,EAAW,CAAA,CAAE,EAAE,CAAA,CAAA;AAAA,QACvB,WAAW,CAAA,CAAE,SAAA;AAAA,QACb,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,QAAQ,CAAA,CAAE,MAAA;AAAA,QACV,UAAU,CAAA,CAAE,QAAA;AAAA,QACZ,SAAS,CAAA,CAAE,OAAA;AAAA,QACX,UAAU,EAAC;AAAA,QACX,cAAc;AAAC,OACjB,CAAE,CAAA;AACF,MAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,IAC1B,CAAA,SAAE;AACA,MAAA,KAAA,EAAM;AAAA,IACR;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,MAAM,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAG3D,IAAA,IAAI,CAAC,QAAA,CAAS,IAAA,CAAK,GAAG,CAAA,EAAG;AACvB,MAAA,KAAA,CAAM,KAAK,EAAE,IAAA,EAAM,OAAA,EAAS,OAAA,EAAS,KAAK,CAAA;AAAA,IAC5C;AACA,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAaA,eAAe,aAAa,EAAA,EAA8C;AAIxE,EAAA,MAAM,eAAA,GAAkB,iBAAA,EAAkB,CAAE,GAAA,CAAI,CAAC,CAAA,KAAO,CAAA,CAAE,QAAA,CAAc,IAAA,CAAA,GAAG,CAAA,GAAI,CAAA,GAAI,CAAA,GAAS,IAAA,CAAA,GAAI,CAAA;AAChG,EAAA,MAAM,gBAAgB,CAAC,CAAA,KACrB,eAAA,CAAgB,IAAA,CAAK,CAAC,EAAA,KAAO,CAAA,KAAM,EAAA,CAAG,KAAA,CAAM,GAAG,EAAE,CAAA,IAAK,CAAA,CAAE,UAAA,CAAW,EAAE,CAAC,CAAA;AAExE,EAAA,MAAM,GAAA,GAAA,CAAO,MAAM,EAAA,CAAG,MAAA,EAAO,EAAG,MAAA,CAAO,CAAC,CAAA,KAAM,CAAC,aAAA,CAAc,CAAA,CAAE,MAAM,CAAC,CAAA;AACtE,EAAA,MAAM,UAAyB,EAAC;AAMhC,EAAA,KAAA,MAAW,EAAE,QAAA,EAAU,IAAA,EAAK,IAAK,EAAA,CAAG,iBAAgB,EAAG;AACrD,IAAA,IAAI,aAAA,CAAc,IAAI,CAAA,EAAG;AACzB,IAAA,MAAM,SAAS,IAAA,CAAK,QAAA,CAAc,IAAA,CAAA,GAAG,CAAA,GAAI,OAAO,IAAA,GAAY,IAAA,CAAA,GAAA;AAC5D,IAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,MAAA,KAAW,IAAA,IAAQ,CAAA,CAAE,MAAA,CAAO,UAAA,CAAW,MAAM,CAAC,CAAA;AAChF,IAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG;AACxB,IAAA,MAAM,aAAa,QAAA,CAAS,KAAA,CAAM,GAAG,CAAA,CAAE,KAAI,IAAK,QAAA;AAChD,IAAA,KAAA,MAAW,KAAA,IAAS,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,EAAE,QAAQ,QAAA,EAAU,KAAA,EAAO,KAAA,EAAO,UAAA,EAAY,CAAA;AAAA,EACxF;AACA,EAAA,OAAO,OAAA;AACT;AAUA,eAAe,aAAA,GAGZ;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AACF,IAAA,MAAM,UAA0B,EAAC;AACjC,IAAA,KAAA,MAAW,IAAA,IAAQ,mBAAkB,EAAG;AACtC,MAAA,OAAA,CAAQ,IAAA,CAAK,GAAI,MAAM,QAAA,CAAS,IAAA,EAAM,gBAAA,EAAkB,EAAE,UAAA,EAAY,aAAA,EAAc,EAAG,CAAE,CAAA;AAAA,IAC3F;AACA,IAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,EAC1B,SAAS,GAAA,EAAK;AACZ,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,IAAA,EAAM,SAAA;AAAA,MACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACzD,CAAA;AACD,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAGA,SAAS,GAAA,CAAI,QAAqB,OAAA,EAAwC;AACxE,EAAA,OAAO,QAAQ,GAAA,CAAI,CAAC,WAAW,EAAE,MAAA,EAAQ,OAAM,CAAE,CAAA;AACnD;AASA,eAAsB,gBAAA,CACpB,IACA,UAAA,EAC0B;AAC1B,EAAA,MAAM,CAAC,IAAA,EAAM,KAAK,CAAA,GAAI,MAAM,OAAA,CAAQ,GAAA,CAAI,CAAC,aAAA,EAAc,EAAG,WAAA,CAAY,UAAU,CAAC,CAAC,CAAA;AAClF,EAAA,MAAM,OAAA,GAAU,MAAM,aAAA,EAAc;AACpC,EAAA,MAAM,GAAA,GAAM,MAAM,YAAA,CAAa,EAAE,CAAA;AACjC,EAAA,OAAO;AAAA,IACL,OAAA,EAAS;AAAA,MACP,GAAG,GAAA;AAAA,MACH,GAAG,IAAA,CAAK,OAAA;AAAA,MACR,GAAG,GAAA,CAAI,SAAA,EAAW,OAAA,CAAQ,OAAO,CAAA;AAAA,MACjC,GAAG,GAAA,CAAI,OAAA,EAAS,KAAA,CAAM,OAAO;AAAA,KAC/B;AAAA,IACA,KAAA,EAAO,CAAC,GAAG,IAAA,CAAK,KAAA,EAAO,GAAG,KAAA,CAAM,KAAA,EAAO,GAAG,OAAA,CAAQ,KAAK;AAAA,GACzD;AACF","file":"asset-feeds-CXGQIDFR.js","sourcesContent":["/**\n * asset-feeds.ts — gather installable assets from every feed the manage TUI\n * surfaces.\n *\n * Four feeds, normalized into `CatalogEntry`:\n * - **Project sources** — `skaile.yaml` `sources:` entries (scanned via\n *   `AssetManager.search()`; the new `sources:` field is merged into the\n *   legacy repositories map in `AssetManager.loadConfig`).\n * - **Local libraries** — user authoring places from `LocalIndex`, read through\n *   `scanAuthoringLibraries` (`@skaile/workspaces/library`): the same scan\n *   `library index` / `search --local` use, so publishers and refs match them\n *   (per-asset `publisher_overrides` honoured), `dev_paths` assets are left out,\n *   and a library that fails to scan becomes one note while the rest stay listed.\n * - **Factory assets** — the bundled first-party `factory-assets` tree\n *   (`factoryAssetRoots()`), scanned from disk. Always present; no network.\n * - **Remote store** — the configured catalog source when `catalog.url` is\n *   not `local`. Failures are non-fatal — they surface as notes.\n */\n\nimport * as path from \"node:path\";\nimport {\n  type AssetKind,\n  type CatalogEntry,\n  factoryAssetRoots,\n  parseRequires,\n  scanRepo,\n} from \"@skaile/workspaces/core\";\nimport { getKnownKinds } from \"./open-registry.ts\";\nimport type { DiscoveredAsset } from \"@skaile/workspaces/discovery\";\n\n/** One non-fatal note returned to the caller for surfacing in the UI. */\nexport interface FeedNote {\n  feed: \"sources\" | \"libraries\" | \"store\" | \"factory\";\n  message: string;\n}\n\n/**\n * Which feed an asset came from. This is the top-level grouping axis in the\n * manage TUI (\"where is this skill coming from?\") and is intentionally distinct\n * from `publisher` (asset-intrinsic identity): the same publisher can legitimately\n * appear under more than one origin (e.g. a github repo you added as a `source`\n * that is also listed in the remote `store`).\n */\nexport type AssetOrigin = \"source\" | \"library\" | \"factory\" | \"store\";\n\n/** A catalog entry tagged with the feed it was gathered from. */\nexport interface OriginEntry {\n  origin: AssetOrigin;\n  entry: CatalogEntry;\n  /**\n   * Second-level grouping label for the manage tree. Defaults (when unset) to the\n   * entry's `publisher`; the source feed sets it to the source's short repo name\n   * so the Sources band groups by source — \"which repo did this come from\" — not\n   * by the asset-intrinsic publisher.\n   */\n  group?: string;\n}\n\nexport interface AssetFeedResult {\n  entries: OriginEntry[];\n  notes: FeedNote[];\n}\n\n/**\n * Map one discovered library asset to the `CatalogEntry` the manage rows read.\n * `publisher` is the bare per-asset publisher (what `search --local` prints),\n * `source` the manifest path. `repo` is left unset: it only feeds the Sources-tree\n * org grouping. `requires` / `dependencies` come from the manifest the way the\n * scanner fills them — string `requires:` refs parsed to `{kind, name}`, a bundle's\n * string `dependencies:` list verbatim.\n */\nfunction libraryEntryOf(asset: DiscoveredAsset): CatalogEntry {\n  const { manifest } = asset;\n  const nested = (manifest.metadata as Record<string, unknown> | undefined)?.requires;\n  const rawRequires = manifest.requires ?? nested;\n  const requireRefs =\n    typeof rawRequires === \"string\"\n      ? rawRequires\n      : Array.isArray(rawRequires)\n        ? rawRequires.filter((r): r is string => typeof r === \"string\")\n        : undefined;\n  const deps = manifest.dependencies;\n  return {\n    name: asset.name,\n    kind: asset.kind as AssetKind,\n    description: typeof manifest.description === \"string\" ? manifest.description : \"\",\n    source: asset.manifestPath,\n    publisher: asset.publisher,\n    ...(asset.plugin ? { plugin: asset.plugin } : {}),\n    version: asset.version,\n    requires: requireRefs === undefined ? [] : parseRequires({ requires: requireRefs }),\n    dependencies:\n      asset.kind === \"bundle\" && Array.isArray(deps)\n        ? deps.filter((d): d is string => typeof d === \"string\" && d.length > 0)\n        : [],\n  };\n}\n\n/**\n * Pull assets from local libraries (the authoring places under\n * `~/.skaile/libraries/<name>/`, not the `~/.skaile/cache/sources/` cache) through\n * `scanAuthoringLibraries`, grouped under the bare library name\n * (`group: <name>`) so the manage TUI shows a clean `<name>` band — no\n * `library:` prefix (mirrors the source feed). Plugin grouping (`entry.plugin`)\n * comes from `DiscoveredAsset.plugin`. A library whose scan fails becomes one\n * `FeedNote`; the outer `catch` covers only opening the index.\n */\nasync function libraryAssets(): Promise<{\n  entries: OriginEntry[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    // Lazy: the library subpath pulls in SQLite, which the other feeds never need.\n    const { openLibraryManager } = await import(\"./open-library.ts\");\n    const { getKindRegistry } = await import(\"./open-registry.ts\");\n    const { scanAuthoringLibraries } = await import(\"@skaile/workspaces/library\");\n    const { library: index, close } = await openLibraryManager();\n    try {\n      const entries: OriginEntry[] = [];\n      for (const scan of await scanAuthoringLibraries(index, getKindRegistry())) {\n        if (scan.error !== undefined) {\n          notes.push({ feed: \"libraries\", message: `${scan.library.name}: ${scan.error}` });\n          continue;\n        }\n        for (const asset of scan.assets) {\n          entries.push({\n            origin: \"library\",\n            entry: libraryEntryOf(asset),\n            group: scan.library.name,\n          });\n        }\n      }\n      return { entries, notes };\n    } finally {\n      close();\n    }\n  } catch (err) {\n    notes.push({\n      feed: \"libraries\",\n      message: err instanceof Error ? err.message : String(err),\n    });\n    return { entries: [], notes };\n  }\n}\n\n/**\n * Pull a (best-effort) snapshot of the connected remote store catalog.\n *\n * - Returns no entries when the resolved catalog is local-only or the host\n *   is unreachable (the failure becomes a note, not an exception).\n * - Maps `CatalogAsset` → `CatalogEntry`, carrying `publisher`, `repo`, and\n *   `category` straight through and using `source = \"store://<id>\"`; per-file\n *   `source` paths are not available for remote assets so the canonical ref is\n *   a stable placeholder.\n */\nasync function storeAssets(projectDir: string): Promise<{\n  entries: CatalogEntry[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    const { resolveCatalogSource } = await import(\"./open-library.ts\");\n    const { source, close } = await resolveCatalogSource({ projectDir });\n    try {\n      const assets = await source.listAssets();\n      const entries: CatalogEntry[] = assets.map((a) => ({\n        name: a.name,\n        kind: (a.kind as AssetKind) ?? \"skill\",\n        description: a.description ?? \"\",\n        source: `store://${a.id}`,\n        publisher: a.publisher,\n        repo: a.repo,\n        plugin: a.plugin,\n        category: a.category,\n        version: a.version,\n        requires: [],\n        dependencies: [],\n      }));\n      return { entries, notes };\n    } finally {\n      close();\n    }\n  } catch (err) {\n    const msg = err instanceof Error ? err.message : String(err);\n    // Local-only catalog throws a recognizable message — silence it; absence\n    // is the user's choice, not an error.\n    if (!/local/i.test(msg)) {\n      notes.push({ feed: \"store\", message: msg });\n    }\n    return { entries: [], notes };\n  }\n}\n\n/** The slice of `AssetManager` the source feed needs (kept narrow for tests). */\ninterface AssetManagerLike {\n  search: () => Promise<CatalogEntry[]>;\n  searchRepoRoots: () => { repoName: string; root: string }[];\n}\n\n/**\n * Project-source feed: leans on `AssetManager.search()`, which merges\n * `skaile.yaml`'s `sources:` field into the repositories map. Plugin grouping\n * (`entry.plugin`) is stamped by the scanner, so entries pass through as-is.\n */\nasync function sourceAssets(am: AssetManagerLike): Promise<OriginEntry[]> {\n  // The bundled factory tree is injected into the repositories map as an implicit\n  // source, so `am.search()` returns it too. It has its own `factory` origin band,\n  // so drop it here — otherwise the same first-party skills list twice under Sources.\n  const factoryPrefixes = factoryAssetRoots().map((r) => (r.endsWith(path.sep) ? r : r + path.sep));\n  const isFactoryPath = (p: string) =>\n    factoryPrefixes.some((fp) => p === fp.slice(0, -1) || p.startsWith(fp));\n\n  const all = (await am.search()).filter((e) => !isFactoryPath(e.source));\n  const entries: OriginEntry[] = [];\n  // Group each source's entries under the source node (its short repo name), not\n  // the publisher: under Sources the navigational question is \"which repo did\n  // this come from\". Each entry's `source` (absolute manifest path) lives under\n  // exactly one declared root, so group by prefix. The cache slug is\n  // URL-keyed `github.com/<org>/<repo>` — take the trailing segment.\n  for (const { repoName, root } of am.searchRepoRoots()) {\n    if (isFactoryPath(root)) continue;\n    const prefix = root.endsWith(path.sep) ? root : root + path.sep;\n    const owned = all.filter((e) => e.source === root || e.source.startsWith(prefix));\n    if (owned.length === 0) continue;\n    const sourceName = repoName.split(\"/\").pop() || repoName;\n    for (const entry of owned) entries.push({ origin: \"source\", entry, group: sourceName });\n  }\n  return entries;\n}\n\n/**\n * Factory-asset feed: scan the bundled first-party `factory-assets` tree(s)\n * resolved by `factoryAssetRoots()` (the `SKAILE_FACTORY_ASSETS_DIR` override\n * layer ahead of the bundled tree). Local disk only, no network — the entries are\n * the built-in skills / connectors / bundles that ship with `@skaile/workspaces`.\n * `factoryAssetRoots()` already dedupes, so the env override pointing at the\n * bundled dir collapses to one root.\n */\nasync function factoryAssets(): Promise<{\n  entries: CatalogEntry[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    const entries: CatalogEntry[] = [];\n    for (const root of factoryAssetRoots()) {\n      entries.push(...(await scanRepo(root, \"skaile-factory\", { knownKinds: getKnownKinds() })));\n    }\n    return { entries, notes };\n  } catch (err) {\n    notes.push({\n      feed: \"factory\",\n      message: err instanceof Error ? err.message : String(err),\n    });\n    return { entries: [], notes };\n  }\n}\n\n/** Tag a flat entry list with a single origin. */\nfunction tag(origin: AssetOrigin, entries: CatalogEntry[]): OriginEntry[] {\n  return entries.map((entry) => ({ origin, entry }));\n}\n\n/**\n * Run all feeds and return a single normalized result.\n *\n * Feeds run in parallel where possible — the store fetch is the slow one\n * (one HTTP call) and is fired alongside the local library walk. The factory\n * scan is local disk only, so it runs inline.\n */\nexport async function gatherAssetFeeds(\n  am: AssetManagerLike,\n  projectDir: string,\n): Promise<AssetFeedResult> {\n  const [libs, store] = await Promise.all([libraryAssets(), storeAssets(projectDir)]);\n  const factory = await factoryAssets();\n  const src = await sourceAssets(am);\n  return {\n    entries: [\n      ...src,\n      ...libs.entries,\n      ...tag(\"factory\", factory.entries),\n      ...tag(\"store\", store.entries),\n    ],\n    notes: [...libs.notes, ...store.notes, ...factory.notes],\n  };\n}\n"]}

package/dist/asset-manager/catalog-deployer.js

@@ -1,19 +1,19 @@
-export { WORKSPACE_MOUNT_ENV_VAR, deployAll, deployCatalogEntry, findAiAssetsRoot, isUnderWorkspaceMount, resolveFlowSkills, undeployCatalogEntry, workspaceMountDirs } from '../chunk-2LWYNQK7.js';
-import '../chunk-36AFURKZ.js';
+export { WORKSPACE_MOUNT_ENV_VAR, deployAll, deployCatalogEntry, findAiAssetsRoot, isUnderWorkspaceMount, resolveFlowSkills, undeployCatalogEntry, workspaceMountDirs } from '../chunk-GCHPUTA3.js';
+import '../chunk-PBBPZYVG.js';
 import '../chunk-4GY63JU6.js';
-import '../chunk-GB7WDMH2.js';
+import '../chunk-EDYHEMJA.js';
 import '../chunk-PMECEZK3.js';
 import '../chunk-5BEFNLOR.js';
 import '../chunk-A2ULN3KX.js';
-import '../chunk-JAKOMFC6.js';
+import '../chunk-ALEYHUC5.js';
 import '../chunk-L5VSIPQD.js';
 import '../chunk-CPSIPIX7.js';
-import '../chunk-BTE2V4IW.js';
+import '../chunk-ZPWTOUTK.js';
 import '../chunk-RVRB27AN.js';
-import '../chunk-GTILM2CI.js';
-import '../chunk-QVNRCDTV.js';
+import '../chunk-SBSA3IQA.js';
+import '../chunk-BNMZVPYA.js';
 import '../chunk-ICSCSM5D.js';
-import '../chunk-UMVKJM4Q.js';
+import '../chunk-DALV4HHP.js';
 import '../chunk-MJHSLODD.js';
 import '../chunk-C3CAXQMA.js';
 import '../chunk-BOFL7GIF.js';

package/dist/asset-manager/index.js

@@ -1,30 +1,30 @@
-export { AssetManager, FACTORY_SOURCE_URL, MissingManifestError, installAgentInstances, normalizeRepoUrl, parseCanonicalLockKey, parseRefTolerant, renderMcpServerConfig, softDepName } from '../chunk-IMKSM5NL.js';
-import '../chunk-4MQS7CAF.js';
-import '../chunk-Y7QA2OLD.js';
-import '../chunk-CKQEIY43.js';
+export { AssetManager, FACTORY_SOURCE_URL, MissingManifestError, installAgentInstances, normalizeRepoUrl, parseCanonicalLockKey, parseRefTolerant, renderMcpServerConfig, softDepName } from '../chunk-DZMNFCWB.js';
+import '../chunk-2F5AWQX5.js';
+import '../chunk-J4RBUFGM.js';
+import '../chunk-COH6FQAG.js';
 import '../chunk-R7FOF242.js';
 import '../chunk-3TXEJN4W.js';
-export { SCAFFOLD_KINDS, createScaffold, deployAll, installAgent, installTargetOf, removeAsset } from '../chunk-YSHVQGUS.js';
+export { SCAFFOLD_KINDS, createScaffold, deployAll, installAgent, installTargetOf, removeAsset } from '../chunk-FH7W6TJ4.js';
 export { BUILT_IN_FRAGMENTS, loadPromptExtensions, resolveFragments } from '../chunk-CGYEHQOX.js';
 export { appendHistory, clearHistory, getRecentHistory, loadHistory } from '../chunk-KTBKW2FI.js';
 import '../chunk-UQ6LFBPZ.js';
-export { AGENT_RENDERERS, claudeCodeRenderer, codexRenderer, driverTargetSupportsAgents, ompRenderer, renderAgentToFramework } from '../chunk-EF7NPDDU.js';
-import '../chunk-B6GIW55K.js';
-import '../chunk-36AFURKZ.js';
+export { AGENT_RENDERERS, claudeCodeRenderer, codexRenderer, driverTargetSupportsAgents, ompRenderer, renderAgentToFramework } from '../chunk-HZXUXHIV.js';
+import '../chunk-ZCAJZ4B2.js';
+import '../chunk-PBBPZYVG.js';
 import '../chunk-4GY63JU6.js';
-import '../chunk-GB7WDMH2.js';
+import '../chunk-EDYHEMJA.js';
 import '../chunk-PMECEZK3.js';
 import '../chunk-5BEFNLOR.js';
 import '../chunk-A2ULN3KX.js';
-import '../chunk-JAKOMFC6.js';
+import '../chunk-ALEYHUC5.js';
 import '../chunk-L5VSIPQD.js';
 import '../chunk-CPSIPIX7.js';
-import '../chunk-BTE2V4IW.js';
+import '../chunk-ZPWTOUTK.js';
 import '../chunk-RVRB27AN.js';
-import '../chunk-GTILM2CI.js';
-import '../chunk-QVNRCDTV.js';
+import '../chunk-SBSA3IQA.js';
+import '../chunk-BNMZVPYA.js';
 import '../chunk-ICSCSM5D.js';
-import '../chunk-UMVKJM4Q.js';
+import '../chunk-DALV4HHP.js';
 import '../chunk-MJHSLODD.js';
 import '../chunk-C3CAXQMA.js';
 import '../chunk-BOFL7GIF.js';

package/dist/asset-manager/installer.js

@@ -1,22 +1,22 @@
-export { SCAFFOLD_KINDS, canonicalEntryRef, createScaffold, deployAll, deployAsset, installTargetOf, removeAsset } from '../chunk-YSHVQGUS.js';
+export { SCAFFOLD_KINDS, canonicalEntryRef, createScaffold, deployAll, deployAsset, deployedAssetDrift, diffDeployedAgent, installTargetOf, removeAsset } from '../chunk-FH7W6TJ4.js';
 import '../chunk-CGYEHQOX.js';
-import '../chunk-EF7NPDDU.js';
-import '../chunk-B6GIW55K.js';
-import '../chunk-36AFURKZ.js';
+import '../chunk-HZXUXHIV.js';
+import '../chunk-ZCAJZ4B2.js';
+import '../chunk-PBBPZYVG.js';
 import '../chunk-4GY63JU6.js';
-import '../chunk-GB7WDMH2.js';
+import '../chunk-EDYHEMJA.js';
 import '../chunk-PMECEZK3.js';
 import '../chunk-5BEFNLOR.js';
 import '../chunk-A2ULN3KX.js';
-import '../chunk-JAKOMFC6.js';
+import '../chunk-ALEYHUC5.js';
 import '../chunk-L5VSIPQD.js';
 import '../chunk-CPSIPIX7.js';
-import '../chunk-BTE2V4IW.js';
+import '../chunk-ZPWTOUTK.js';
 import '../chunk-RVRB27AN.js';
-import '../chunk-GTILM2CI.js';
-import '../chunk-QVNRCDTV.js';
+import '../chunk-SBSA3IQA.js';
+import '../chunk-BNMZVPYA.js';
 import '../chunk-ICSCSM5D.js';
-import '../chunk-UMVKJM4Q.js';
+import '../chunk-DALV4HHP.js';
 import '../chunk-MJHSLODD.js';
 import '../chunk-C3CAXQMA.js';
 import '../chunk-BOFL7GIF.js';

package/dist/asset-manager/renderers.js

@@ -1,20 +1,20 @@
-export { AGENT_RENDERERS, CODEX_IDENTITY_DIR, claudeCodeRenderer, codexRenderer, driverTargetSupportsAgents, ompRenderer, renderAgentToFramework } from '../chunk-EF7NPDDU.js';
-import '../chunk-B6GIW55K.js';
-import '../chunk-36AFURKZ.js';
+export { AGENT_RENDERERS, CODEX_IDENTITY_DIR, claudeCodeRenderer, codexRenderer, driverTargetSupportsAgents, ompRenderer, renderAgentToFramework } from '../chunk-HZXUXHIV.js';
+import '../chunk-ZCAJZ4B2.js';
+import '../chunk-PBBPZYVG.js';
 import '../chunk-4GY63JU6.js';
-import '../chunk-GB7WDMH2.js';
+import '../chunk-EDYHEMJA.js';
 import '../chunk-PMECEZK3.js';
 import '../chunk-5BEFNLOR.js';
 import '../chunk-A2ULN3KX.js';
-import '../chunk-JAKOMFC6.js';
+import '../chunk-ALEYHUC5.js';
 import '../chunk-L5VSIPQD.js';
 import '../chunk-CPSIPIX7.js';
-import '../chunk-BTE2V4IW.js';
+import '../chunk-ZPWTOUTK.js';
 import '../chunk-RVRB27AN.js';
-import '../chunk-GTILM2CI.js';
-import '../chunk-QVNRCDTV.js';
+import '../chunk-SBSA3IQA.js';
+import '../chunk-BNMZVPYA.js';
 import '../chunk-ICSCSM5D.js';
-import '../chunk-UMVKJM4Q.js';
+import '../chunk-DALV4HHP.js';
 import '../chunk-MJHSLODD.js';
 import '../chunk-C3CAXQMA.js';
 import '../chunk-BOFL7GIF.js';