@skaile/workspaces 6.0.0 → 6.2.0

package/CHANGELOG.md

@@ -1,5 +1,103 @@
 # Changelog
 
+## 6.2.0
+
+### Minor Changes
+
+- [#1106](https://github.com/skaile-ai/workspaces/pull/1106) [`7af33f2`](https://github.com/skaile-ai/workspaces/commit/7af33f2cf748dab42e4a5114e872ff97f55036ca) Thanks [@mortegro](https://github.com/mortegro)! - model-endpoint: `POST /v1/chat/completions` forwards `response_format`, `usage` and `provider` to OpenAI-compatible upstreams and reports upstream `usage.cost`
+
+- [#1104](https://github.com/skaile-ai/workspaces/pull/1104) [`c32d60f`](https://github.com/skaile-ai/workspaces/commit/c32d60f74f22d40d63058129f6c6b35aa3fc858d) Thanks [@mortegro](https://github.com/mortegro)! - Agents: `run`, `repl` and `rebuild` refuse an `agents:` block that `validate`, `install` and `check` reject, with the same line and exit 1 before the session starts (p1512). The `Connected Resources` block in rendered agent files names `skaile connector ops <id>` and `skaile connector run <id> <operation>` instead of the removed `skaile res` (p1710). Unknown keys in `agent:` and `agents:` (`agents.<id>.colour`, `agent.modle`, `model.preffered`) warn in `check`, `doctor`, `install`, `run` and `repl`, not only in `validate` (p1712).
+
+- [#1104](https://github.com/skaile-ai/workspaces/pull/1104) [`c32d60f`](https://github.com/skaile-ai/workspaces/commit/c32d60f74f22d40d63058129f6c6b35aa3fc858d) Thanks [@mortegro](https://github.com/mortegro)! - Authoring: one verdict in every command. `library init --path <clone> --reader` and `--contributor` write nothing into the clone, so `library pull` and `sync` keep working; an owner is told that `skaile.manifest.yaml` changed and needs a commit (p1600). A scaffold placeholder body is a hard error in `asset import` and `add` too, with the `validate` line (p223). A `files:` entry that names a missing file fails the publish plan also when the entry has a `root:` (p1404). `library index` leaves a manifest entry alone when the asset's name is invalid and prints only the invalid-name line (p1601). A requires/dependencies error prints one line without `ManifestRequiresError:` (p1602). Path-less `validate versions` and `validate changelog` check the cwd like plain `validate`, and exit 1 outside a library instead of falling back to the factory assets (p1194). An unquoted `@publisher/name` in `agent.yaml`, `skaile.yaml` or any YAML manifest gets the double-quote hint (p1750). `library create flow` writes a strict v2 flow (`schemaVersion: 2`, one example `agent` node, no `globals:`), and a flow with `run:` nodes but no `schemaVersion: 2` is refused instead of read as an inert legacy flow (p489).
+
+- [#1104](https://github.com/skaile-ai/workspaces/pull/1104) [`c32d60f`](https://github.com/skaile-ai/workspaces/commit/c32d60f74f22d40d63058129f6c6b35aa3fc858d) Thanks [@mortegro](https://github.com/mortegro)! - Consume fixes from the 6.1.0 critique:
+
+  - `check`, `doctor`, `validate` and every command that reads `skaile.yaml` refuse a `dependencies:` that is no list, a `dependencies:` item that is no string and a `sources:` that is no list with one `skaile.yaml — parse error: …` line and exit 1. `add` and `source add` write nothing (p1620).
+  - `diff`, `update`, `info`, `remove` and `why` give the `Did you mean agent:@pub/name` hint that `add` gives for a kindless ref (p1425).
+  - `source list|add|remove|show|sync` on a `skaile.yaml` whose root is not a map print the one parse-error line, no stack, and `validate` flags the file (p1421).
+  - `add --dry-run` prints the version once, and for an agent the files each harness writes (`.claude/agents/<name>.md`, ...), not a folder it never writes (p1621).
+  - A symlink cycle inside a library prints one `! <library>: asset scan truncated (cycle) - the symlink … points back into the tree …` line on stderr, not a raw timestamped `[runner:asset-scan]` record (p1622). New core export: `setWalkTruncationSink`.
+  - `add` of a manifest entry whose asset file now names another asset prints the `validate` line (`… now names "<name>" … run skaile library index <library>`) (p1603).
+  - `outdated` names `skaile install`, as `check` does, for a library asset that changed since the lock; a newer version still says `skaile update` (p1604).
+  - `run <flow> --dry-run` names every node skill that is not deployed, and the `skaile add` that fixes it (p1757). New `AssetManager.undeployedSkills()`.
+
+- [#1104](https://github.com/skaile-ai/workspaces/pull/1104) [`c32d60f`](https://github.com/skaile-ai/workspaces/commit/c32d60f74f22d40d63058129f6c6b35aa3fc858d) Thanks [@mortegro](https://github.com/mortegro)! - Harness: a `skaile.yaml` without `agent-config` uses one default, claude-sdk, which deploys to `.claude/`: `config show`, `run`, `repl` and `serve` now agree with `add` and `install` (p1670). After `harness set`, `install`, `list` and `add` name the copies of every other harness folder (`.claude/`, `.omp/`, `.codex/`) as stale, one line per folder (p1671). The repl banner names the agent the session runs; deployed agents are listed apart as not selected (p1672). The codex delegate warning is printed when an agent file was written, not when only a skill was added or restored (p1673). `config set model` prints `passed on as the model id <id> (no provider selected)` when no registry entry names or lists the model, and `config show` prints `passed on as:` (p1674). One message names the harness names of every command (`config set harness`, `harness set`, `init --harness`, `add --harness`, `integration --harness`, `run`, `repl`) (p1753). `install`, `list` and `config show` refuse an unknown `harness:` in `skaile.yaml` as `validate` does (p1754). A failed plugin install names its own reason for each plugin (p1272). `plugin install ./dir` and `file:../dir` exit 1 with one line that names the `name@file:/path/to/dir` form (p1737).
+
+- [#1104](https://github.com/skaile-ai/workspaces/pull/1104) [`c32d60f`](https://github.com/skaile-ai/workspaces/commit/c32d60f74f22d40d63058129f6c6b35aa3fc858d) Thanks [@mortegro](https://github.com/mortegro)! - Protocol: the omp harness forwards `GIT_CONFIG_GLOBAL` to the agent's shell like every other harness (p1738). `serve` prints one `x` line for an unknown harness (p1731), a `--project-dir` that is no directory (p1732) and an `agent.definition` that does not resolve, which `validate` now refuses too (p1733). A `serve` option that takes a value and is followed by a flag names the missing value (p1730). The provisioned-mode error names `session_init` and its `secrets` map (p1734). `capability_result` failures always have the shape `{ok:false, code, message}` (p1736). A connector with `adapter:` gets the `validate` text, not a warning about the driver "undefined" (p1739). `serve --harness omp --model <x>` asks omp for its models and refuses a model it does not list before the ready line (p1334).
+
+- [#1104](https://github.com/skaile-ai/workspaces/pull/1104) [`c32d60f`](https://github.com/skaile-ai/workspaces/commit/c32d60f74f22d40d63058129f6c6b35aa3fc858d) Thanks [@mortegro](https://github.com/mortegro)! - Restore fixes from the 6.1.0 critique:
+
+  - `install --locked` on a machine where the lock's library is not registered restores the files from the lock `url:` when every file has the locked hash, prints one notice line per library, exits 0, and `check` and `doctor` stay green (p1655). It never takes other bytes from a `sources:` repository instead (p128).
+  - Script files keep their exec bit in a store `add`, in `install --locked` from the lock url, in a store cache an older CLI filled, and in `../` compose folders copied next to an agent (p1657). New library exports: `isScriptBytes`, `restoreScriptModes`.
+  - `No skaile.yaml found` shows `--project-dir` after the command name, where it works (p1656).
+  - A factory asset is locked as `source: {url: factory, commit: <@skaile/workspaces version>}` instead of the ai-assets GitHub url at the all-zero commit (p1755). An older lock is still read and is rewritten by the next `add`, `install` or `update`. New core exports: `FACTORY_SOURCE_URL`, `LOCK_FACTORY_URL`.
+
+- [#1104](https://github.com/skaile-ai/workspaces/pull/1104) [`c32d60f`](https://github.com/skaile-ai/workspaces/commit/c32d60f74f22d40d63058129f6c6b35aa3fc858d) Thanks [@mortegro](https://github.com/mortegro)! - Store fixes from the 6.1.0 critique:
+
+  - `check`, `doctor`, `outdated` and `diff` no longer call the source of a freshly added store asset missing: the lock lookup uses the locked version, so assets of any store repo (not only ai-assets) pass (p380).
+  - A failed `skaile update` keeps the warm catalog cache on a REST-framed catalog too (p960).
+  - `source add` after `source remove` of the last source writes a block `sources:` list (p1690).
+  - `source manifest verify|rebuild|edit|publish <name>` finds the manifest `init` wrote for a non-GitHub URL by its bare repo name or slug (p1691).
+  - A rejected `SKAILE_GITHUB_PAT` prints one warning and the public repo is still read (p1692).
+  - `diff` labels its sides `(deployed)` and `(library)`/`(source)`/`(rendered)` instead of printing timestamps (p1693).
+  - `skaile search <word>` without a hit prints `No results for "<word>" (local and store).` (p1694).
+
+- [#1104](https://github.com/skaile-ai/workspaces/pull/1104) [`c32d60f`](https://github.com/skaile-ai/workspaces/commit/c32d60f74f22d40d63058129f6c6b35aa3fc858d) Thanks [@mortegro](https://github.com/mortegro)! - Upgrade: `add --global --harness X` on an asset that is already global adds X to its harness set and deploys there; the new `--only` flag replaces the set (a copy left in a harness that drops out is named, not deleted). `add --global` prints the paths it wrote, harness by harness (p1640). `check` keeps reporting a hand-edited deployed file after a library version bump, and `update` and `install` stop before they replace it, name the file and need `--force` (`update` and `install` both take it). The lock records the bytes of a copied library asset (`copied:` in `skaile.lock.yaml`) for this (p1641). A failing `install --locked` writes nothing: a library that changed since the lock or a `../` compose folder that moved leaves every restorable file as it is (p1642). `migrate assets --write` refuses a bundle or old persona/ruleset file whose final kind and name is that of a preset, ruleset or persona file the repo already holds (p1241). `check` names `skaile update` for a `../` compose folder the library changed, as `install --locked` does (p1711).
+
+### Patch Changes
+
+- [#1104](https://github.com/skaile-ai/workspaces/pull/1104) [`c32d60f`](https://github.com/skaile-ai/workspaces/commit/c32d60f74f22d40d63058129f6c6b35aa3fc858d) Thanks [@mortegro](https://github.com/mortegro)! - Docs: the command and protocol pages now describe what the 6.1.0 critique found wrong. `runner/api-reference.md` lists `session_init` and no longer the removed `provision_secrets` and `configure` (p1735); the flow example creates its skill in the `personal` library of tutorial 01 (p1756). Other fixes cover `files:` paths and `--description` limits in the library pages, `--project-dir` after the subcommand, library-less `install --locked`, hand-edited deployed files and `--force`, the global harness set, the default harness of a `skaile.yaml` without `agent-config`, the repl banner, stale harness copies, `validate versions` outside a library, source manifest slugs, search with no hit, the unused `secrets.timeoutMs`, local plugin specs, and the planned-only commands of the curriculum page.
+
+## 6.1.0
+
+### Minor Changes
+
+- [#1102](https://github.com/skaile-ai/workspaces/pull/1102) [`196d16e`](https://github.com/skaile-ai/workspaces/commit/196d16e8e09c7ec1e8811a6d65b36ff0b3eb117f) Thanks [@mortegro](https://github.com/mortegro)! - Agents: `install` names `skaile update` for a composed persona or ruleset the library moved past the lock (p1510). A `../` compose folder of an agent is part of the lock: only `update` moves its bytes, `outdated` lists it (p1511). `install`, `install --locked`, `check` and `doctor` refuse what `validate` rejects for `agents:` instances (p1512). `validate` warns on an unknown key inside `agent.permissions` and the `model`, `memory`, `budget` and `permissions` blocks of an instance (p634).
+
+- [#1102](https://github.com/skaile-ai/workspaces/pull/1102) [`196d16e`](https://github.com/skaile-ai/workspaces/commit/196d16e8e09c7ec1e8811a6d65b36ff0b3eb117f) Thanks [@mortegro](https://github.com/mortegro)! - Authoring: `validate`, `library index`, the publish plan and `add` give one verdict and one plain message per problem. A SKILL.md without front matter, or with front matter that is not valid YAML, prints the same `parse error` sentence everywhere, and an unquoted `@publisher/name` in `requires:` names the quoting fix (p1206, p1551). A missing `name` prints a plain fix line, once (p1401). A flow without a description is refused like every other kind (p1402). A `files:` entry outside the library is refused like `root:`, and a `files:` entry that names a missing file makes `validate`, `library index` and the plan exit 1 (p1403, p1404). `library index` drops the search rows of a library that holds no valid asset any more (p1400) and no longer tells the author to run `library index` for an asset that already fails its check (p871). `validate changelog` on a library without a commit prints a plain line (p1405). `library init --path` refuses every deploy folder below a project, including `<project>/.claude` itself (p875). `add` refuses an asset that fails its kind schema with the `validate` line, and `run --skill --dry-run` prints that line instead of a Node error (p1550). `reads_from` and `writes_to` in a flow warn like every other kind instead of failing the flow (p1552).
+
+- [#1102](https://github.com/skaile-ai/workspaces/pull/1102) [`196d16e`](https://github.com/skaile-ai/workspaces/commit/196d16e8e09c7ec1e8811a6d65b36ff0b3eb117f) Thanks [@mortegro](https://github.com/mortegro)! - Consume commands (5.19.0 critique). `outdated` lists only what `update` would change: a library registered under another name with the same remote is no `origin changes` row, and a `#pin`ned ref is shown as `pinned`, never as moving (p1420, p1455). A pin the library never held gets `change the pin in skaile.yaml` in `check`, `doctor`, `outdated` and `install --locked` (p1456). The lock's origin wins: `update` and `add` keep a store- or source-origin asset where the lock has it, and `install --locked` restores a library-origin entry from the store when the lock's library is not registered and the store serves the same hash (p1490). `update --no-catalog` keeps a locked store mcp-server like a skill (p792). `info <ref>` of a locked asset resolves against the lock's library and prints `library:` (p1445). `diff <ref>` prints a missing requirement once (p1443). `add --dry-run` prints the planned library, version, dependencies, folders and files and changes nothing (p1422). A kindless `@pub/name` works in `why` (p1424), and a kindless `add` that misses says `Did you mean agent:@pub/name?` when another kind exists (p1425).
+
+- [#1102](https://github.com/skaile-ai/workspaces/pull/1102) [`196d16e`](https://github.com/skaile-ai/workspaces/commit/196d16e8e09c7ec1e8811a6d65b36ff0b3eb117f) Thanks [@mortegro](https://github.com/mortegro)! - Harnesses: a new verb `skaile harness set <name>` switches a project to `claude-code`, `omp` or `codex` (it rewrites `agent:` and `harness:` and installs for it). `skaile init --harness` in a project that exists now refuses and names that verb. `omp` counts as logged in only when `agent.db` holds a credential, so `run --dry-run` and the real run give the same verdict. The omp ignore warning of `integration install` fires only for a rule that matches `.omp/extensions/skaile.ts` itself and names the ignore file. An unknown key of `skaile.yaml` (top level or in an `agent-config` profile) warns in `validate`, `check`, `run` and `repl`. `validate`, `check` and `doctor` reject a `harness:` or `driver:` no harness registers, after the declared plugins load. The claude-sdk surface warning is one `!` line and the SDK's stderr goes to the log database. `session logs <unknown id>` exits 1 with one line. `config set model` is judged against the project's harness and refuses a model it would refuse. `serve --harness omp --model <x>` refuses, before the ready line, a model omp would refuse: the check judges the `<entry>/<model>` the runner really sends to omp, and names it.
+
+- [#1102](https://github.com/skaile-ai/workspaces/pull/1102) [`196d16e`](https://github.com/skaile-ai/workspaces/commit/196d16e8e09c7ec1e8811a6d65b36ff0b3eb117f) Thanks [@mortegro](https://github.com/mortegro)! - MCP servers from the store:
+
+  - A fresh `git clone` checks clean without `install`: `check` and `doctor` take the committed `.mcp.json` entry, `.skaile/assets/` payload and `.skaile/mcp-managed.json` as the render of the locked server, although `.skaile/cache/store/` is empty (p1294).
+  - `skaile remove mcp-server:<ref>` also removes an `mcp_servers:` entry of the same id that only sets values for the server, its payload and its staged store bytes (p963).
+  - `skaile diff mcp-server:<ref>` exits 1 for a missing `.mcp.json` entry, like `check` and `doctor` (p1494).
+  - `skaile store show` of an `mcp-server` this CLI writes no `.mcp.json` entry for (Nix recipe runtime, placeholder url) prints `Not runnable here: <reason>` instead of the `Install:` line (p1491). `store search` rows carry no such hint: the catalog row has no field for it.
+
+- [#1102](https://github.com/skaile-ai/workspaces/pull/1102) [`196d16e`](https://github.com/skaile-ai/workspaces/commit/196d16e8e09c7ec1e8811a6d65b36ff0b3eb117f) Thanks [@mortegro](https://github.com/mortegro)! - `skaile serve` no longer writes into `~/.gitconfig` by default. The `[include]` of the project's managed-gitconfig is written only when `SKAILE_GIT_CONFIG_INCLUDE=1` is set (the agent image) or `startAgentServer({ gitConfigInclude: true })` is used. The write is atomic, goes through a symlinked `~/.gitconfig` and keeps its mode, and the include path is absolute. The protocol docs now agree that a default (`env` mode) runner accepts prompts without `session_init`; only a `provisioned` runner waits for `session_init_ack`.
+
+- [#1102](https://github.com/skaile-ai/workspaces/pull/1102) [`196d16e`](https://github.com/skaile-ai/workspaces/commit/196d16e8e09c7ec1e8811a6d65b36ff0b3eb117f) Thanks [@mortegro](https://github.com/mortegro)! - Sources: a GitHub-URL lock entry counts as store-supplied only when a store lists the ref; otherwise `check`, `doctor`, `outdated` and `install` print the `register it again` sentence and fail (p1062). Re-adding a ref of a source after an upstream bump re-locks every entry of that source at one commit, so `install --locked` stays clean (p21). `source add --publisher B` is refused for a source registered as A also when the clone's `origin` differs from the registered URL (p722). A library renamed and renamed back leaves no interim name in the lock or the advice (p893). `source add|list|show|sync|remove` print one parse-error line on a `skaile.yaml` that does not parse (p1421). `library list` points at `skaile source sync` for a source clone whose directory is gone (p1423). A relative, absolute, symlinked or `file://` spelling of one local repository is one source (p618). A dead `sources:` entry no longer turns a fully restored `install --locked` into `Failed`, and the warning names the cause once (p1492). `search` shows the version `add` deploys for a source skill without a version, also outside a project (p855). A `sources:` clone is project-scoped: a project that does not declare it neither searches nor resolves it (p321). The publisher-less ref error of `store show` and `add` says how to find the publisher, not the dead `migrate-skaile-manifest` advice (p1493).
+
+- [#1102](https://github.com/skaile-ai/workspaces/pull/1102) [`196d16e`](https://github.com/skaile-ai/workspaces/commit/196d16e8e09c7ec1e8811a6d65b36ff0b3eb117f) Thanks [@mortegro](https://github.com/mortegro)! - Upgrade safety (5.19.0 critique). `migrate assets --write` refuses two bundles or personas with the same final kind and normalised name (`a/q` and `b/q`, `my_b` and `my-b`) and writes nothing. `install` and `update` stop before they delete files a re-lock no longer ships (git-ignored files a CLI before 5.19.0 deployed) or overwrite a hand-edited rendered agent file no lock entry records; they name the files and need `--force` (`update` gains `--force`). `install --force` prints `Removed <file> (not part of <ref>)` for each deleted file. A 5.12.0 global record without `global_asset_harnesses:` and exactly one existing copy is limited to that harness on the first `install --global`. `library show` and `library default` refuse a registered library whose directory is gone; `library list` marks it `(directory missing)`.
+
+### Patch Changes
+
+- [#1097](https://github.com/skaile-ai/workspaces/pull/1097) [`2b6b691`](https://github.com/skaile-ai/workspaces/commit/2b6b691149300bb17360ae60e30b77b99e70cce4) Thanks [@mortegro](https://github.com/mortegro)! - A contract asset now ships its whole directory, subfolders included. The contract file filter
+  (`contractProvider.defaultFileFilter` and its virtual-tree twin) took only the files next to
+  `CONTRACT.md`, while the lock walker recorded and hashed every file under that directory: a
+  contract such as `tree/CONTRACT.md` with its nodes in `tree/01_meta/…` was locked with those files
+  but, wherever the deploy fell back to the kind's filter, installed without them, and its discovery
+  hash (library index, store, GitHub trees) differed from the lock's. Filter, deploy, lock and hash now
+  use one file set: the manifest's directory recursively, minus the non-asset names (`.DS_Store`,
+  `node_modules/`, …). A contract without subfolders keeps its files and hash.
+  A contract installed before this release with only its top-level files now reports drift until it
+  is reinstalled (`skaile install` again ships the subfolders).
+
+- [#1097](https://github.com/skaile-ai/workspaces/pull/1097) [`2b6b691`](https://github.com/skaile-ai/workspaces/commit/2b6b691149300bb17360ae60e30b77b99e70cce4) Thanks [@mortegro](https://github.com/mortegro)! - The bridge's `dev_server` ready detection reads more dev servers. The `Local:` line now matches
+  on every loopback host (`localhost`, `127.0.0.1`, `[::1]`, `0.0.0.0`), with or without a trailing
+  `/`, after ANSI colour codes are stripped (also when a non-string tool result spells them out as
+  `\u001b[`), and is announced as `http(s)://localhost:<port>`. Storybook 10 (`Local: http://127.0.0.1:6006/`
+  inside its coloured ready box) and coloured Vite output now produce the event; a `Network:` LAN
+  address never does. The ready latch is now per URL, not per session: a second dev server (the app
+  first, Storybook later) gets its own `dev_server` event, and a repeat of an announced URL stays
+  silent. One tool output can announce several servers (`concurrently "vite" "storybook dev"`, a
+  combined log): every `DEVSERVER_READY:` URL and every `Local:` URL in it gets its own event.
+
+- [#1102](https://github.com/skaile-ai/workspaces/pull/1102) [`196d16e`](https://github.com/skaile-ai/workspaces/commit/196d16e8e09c7ec1e8811a6d65b36ff0b3eb117f) Thanks [@mortegro](https://github.com/mortegro)! - Docs for 5.19.0 findings: CURRICULUM.md teaches `skaile store search`, `store show` and `add`; `agent-config:` in every example; the `outdated` pin rule, kindless refs, the omp ignore rule, the `serve` probe routes and the instance checks are written down. The malformed-ref error of `add` and `install` now gives `skill:@skaile-ai/use-exa#1.0.0` as its example.
+
 ## 6.0.0
 
 ### Major Changes

package/dist/{asset-feeds-PXUWCXVI.js → asset-feeds-KPKCE64E.js}

@@ -1,31 +1,39 @@
-import { storeNotInstallableReason } from './chunk-PUK7TQT4.js';
-import { getKnownKinds } from './chunk-ARWKK325.js';
-import './chunk-SZXGRHQQ.js';
+import { storeNotInstallableReason } from './chunk-7H6XRCPG.js';
+import { getKnownKinds } from './chunk-JJJ2G4K2.js';
+import './chunk-PJJSBZZP.js';
 import './chunk-7RGTAEG6.js';
-import './chunk-UL22SDGR.js';
-import './chunk-QOM5Z62G.js';
-import './chunk-7XSAW5OC.js';
-import './chunk-BFMYYNDT.js';
+import './chunk-PKBLJI23.js';
+import './chunk-6CYKTHNT.js';
+import './chunk-MAZ3UXJK.js';
+import './chunk-E5NQRHEB.js';
+import './chunk-F3D25RGM.js';
 import './chunk-3TXEJN4W.js';
-import './chunk-X3RMRJNR.js';
+import './chunk-ISHJITXJ.js';
+import './chunk-LNFKL23K.js';
+import './chunk-JRN5QF4C.js';
 import './chunk-NUELZWCF.js';
-import './chunk-E572OHGY.js';
-import './chunk-L4YKW5AY.js';
+import './chunk-S2H3RBK7.js';
+import './chunk-PKE3PXOK.js';
+import './chunk-KTBKW2FI.js';
+import './chunk-UQ6LFBPZ.js';
+import './chunk-COAFAYBS.js';
+import './chunk-76FLBODK.js';
+import './chunk-BRK5QZKI.js';
 import './chunk-4GY63JU6.js';
-import { factoryAssetRoots } from './chunk-OTIB4D2K.js';
+import { factoryAssetRoots } from './chunk-QPWR3YMY.js';
 import './chunk-5KRMNUL4.js';
-import './chunk-Z7ZEZZB6.js';
+import './chunk-C5HFK34M.js';
 import './chunk-MWXYN6NY.js';
-import { scanRepo } from './chunk-OHNKYHRR.js';
+import { scanRepo } from './chunk-KJSC2ZD6.js';
 import './chunk-L5VSIPQD.js';
 import './chunk-VTETQCR6.js';
-import './chunk-UQ33Y4DM.js';
+import './chunk-KPKGWXUJ.js';
 import './chunk-RVRB27AN.js';
-import { parseRequires } from './chunk-GOCWM7FN.js';
-import './chunk-WDXZA7QW.js';
-import './chunk-ADPM6AYF.js';
+import { parseRequires } from './chunk-JMIKGAUA.js';
+import './chunk-IZQOO6MN.js';
+import './chunk-VSX2G7LA.js';
 import './chunk-DKXNKFKP.js';
-import './chunk-LSI2IVFT.js';
+import './chunk-RXGPFAMN.js';
 import './chunk-C3CAXQMA.js';
 import './chunk-BOFL7GIF.js';
 import './chunk-NSBPE2FW.js';
@@ -52,8 +60,8 @@ function libraryEntryOf(asset) {
 async function libraryAssets() {
   const notes = [];
   try {
-    const { openLibraryManager } = await import('./open-library-RJGJIW5H.js');
-    const { getKindRegistry } = await import('./open-registry-3QS3J7KO.js');
+    const { openLibraryManager } = await import('./open-library-XBR46DJL.js');
+    const { getKindRegistry } = await import('./open-registry-W562DCDL.js');
     const { scanAuthoringLibraries } = await import('./library/index.js');
     const { library: index, close } = await openLibraryManager();
     try {
@@ -86,7 +94,7 @@ async function libraryAssets() {
 async function storeAssets(projectDir) {
   const notes = [];
   try {
-    const { resolveCatalogSource } = await import('./open-library-RJGJIW5H.js');
+    const { resolveCatalogSource } = await import('./open-library-XBR46DJL.js');
     const { source, close } = await resolveCatalogSource({ projectDir });
     try {
       const assets = (await source.listAssets()).filter(
@@ -167,5 +175,5 @@ async function gatherAssetFeeds(am, projectDir) {
 }
 
 export { gatherAssetFeeds };
-//# sourceMappingURL=asset-feeds-PXUWCXVI.js.map
-//# sourceMappingURL=asset-feeds-PXUWCXVI.js.map
+//# sourceMappingURL=asset-feeds-KPKCE64E.js.map
+//# sourceMappingURL=asset-feeds-KPKCE64E.js.map

package/dist/asset-feeds-KPKCE64E.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../cli/src/asset-feeds.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwEA,SAAS,eAAe,KAAA,EAAsC;AAC5D,EAAA,MAAM,EAAE,UAAS,GAAI,KAAA;AACrB,EAAA,MAAM,MAAA,GAAU,SAAS,QAAA,EAAkD,QAAA;AAC3E,EAAA,MAAM,WAAA,GAAc,SAAS,QAAA,IAAY,MAAA;AACzC,EAAA,MAAM,cACJ,OAAO,WAAA,KAAgB,QAAA,GACnB,WAAA,GACA,MAAM,OAAA,CAAQ,WAAW,CAAA,GACvB,WAAA,CAAY,OAAO,CAAC,CAAA,KAAmB,OAAO,CAAA,KAAM,QAAQ,CAAA,GAC5D,MAAA;AACR,EAAA,MAAM,OAAO,QAAA,CAAS,YAAA;AACtB,EAAA,OAAO;AAAA,IACL,MAAM,KAAA,CAAM,IAAA;AAAA,IACZ,MAAM,KAAA,CAAM,IAAA;AAAA,IACZ,aAAa,OAAO,QAAA,CAAS,WAAA,KAAgB,QAAA,GAAW,SAAS,WAAA,GAAc,EAAA;AAAA,IAC/E,QAAQ,KAAA,CAAM,YAAA;AAAA,IACd,WAAW,KAAA,CAAM,SAAA;AAAA,IACjB,GAAI,MAAM,MAAA,GAAS,EAAE,QAAQ,KAAA,CAAM,MAAA,KAAW,EAAC;AAAA,IAC/C,SAAS,KAAA,CAAM,OAAA;AAAA,IACf,QAAA,EAAU,gBAAgB,MAAA,GAAY,KAAK,aAAA,CAAc,EAAE,QAAA,EAAU,WAAA,EAAa,CAAA;AAAA,IAClF,cACE,KAAA,CAAM,IAAA,KAAS,YAAY,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,GACzC,IAAA,CAAK,OAAO,CAAC,CAAA,KAAmB,OAAO,CAAA,KAAM,QAAA,IAAY,EAAE,MAAA,GAAS,CAAC,IACrE;AAAC,GACT;AACF;AAWA,eAAe,aAAA,GAGZ;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AAEF,IAAA,MAAM,EAAE,kBAAA,EAAmB,GAAI,MAAM,OAAO,4BAAmB,CAAA;AAC/D,IAAA,MAAM,EAAE,eAAA,EAAgB,GAAI,MAAM,OAAO,6BAAoB,CAAA;AAC7D,IAAA,MAAM,EAAE,sBAAA,EAAuB,GAAI,MAAM,OAAO,oBAA4B,CAAA;AAC5E,IAAA,MAAM,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAM,GAAI,MAAM,kBAAA,EAAmB;AAC3D,IAAA,IAAI;AACF,MAAA,MAAM,UAAyB,EAAC;AAChC,MAAA,KAAA,MAAW,QAAQ,MAAM,sBAAA,CAAuB,KAAA,EAAO,eAAA,EAAiB,CAAA,EAAG;AACzE,QAAA,IAAI,IAAA,CAAK,UAAU,KAAA,CAAA,EAAW;AAC5B,UAAA,KAAA,CAAM,IAAA,CAAK,EAAE,IAAA,EAAM,WAAA,EAAa,OAAA,EAAS,CAAA,EAAG,IAAA,CAAK,OAAA,CAAQ,IAAI,CAAA,EAAA,EAAK,IAAA,CAAK,KAAK,IAAI,CAAA;AAChF,UAAA;AAAA,QACF;AACA,QAAA,KAAA,MAAW,KAAA,IAAS,KAAK,MAAA,EAAQ;AAC/B,UAAA,OAAA,CAAQ,IAAA,CAAK;AAAA,YACX,MAAA,EAAQ,SAAA;AAAA,YACR,KAAA,EAAO,eAAe,KAAK,CAAA;AAAA,YAC3B,KAAA,EAAO,KAAK,OAAA,CAAQ;AAAA,WACrB,CAAA;AAAA,QACH;AAAA,MACF;AACA,MAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,IAC1B,CAAA,SAAE;AACA,MAAA,KAAA,EAAM;AAAA,IACR;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,IAAA,EAAM,WAAA;AAAA,MACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACzD,CAAA;AACD,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAYA,eAAe,YAAY,UAAA,EAGxB;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AACF,IAAA,MAAM,EAAE,oBAAA,EAAqB,GAAI,MAAM,OAAO,4BAAmB,CAAA;AACjE,IAAA,MAAM,EAAE,QAAQ,KAAA,EAAM,GAAI,MAAM,oBAAA,CAAqB,EAAE,YAAY,CAAA;AACnE,IAAA,IAAI;AAEF,MAAA,MAAM,MAAA,GAAA,CAAU,MAAM,MAAA,CAAO,UAAA,EAAW,EAAG,MAAA;AAAA,QACzC,CAAC,CAAA,KAAM,yBAAA,CAA0B,CAAC,CAAA,KAAM,KAAA;AAAA,OAC1C;AACA,MAAA,MAAM,OAAA,GAA0B,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,QACjD,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,IAAA,EAAO,EAAE,IAAA,IAAsB,OAAA;AAAA,QAC/B,WAAA,EAAa,EAAE,WAAA,IAAe,EAAA;AAAA,QAC9B,MAAA,EAAQ,CAAA,QAAA,EAAW,CAAA,CAAE,EAAE,CAAA,CAAA;AAAA,QACvB,WAAW,CAAA,CAAE,SAAA;AAAA,QACb,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,QAAQ,CAAA,CAAE,MAAA;AAAA,QACV,UAAU,CAAA,CAAE,QAAA;AAAA,QACZ,SAAS,CAAA,CAAE,OAAA;AAAA,QACX,UAAU,EAAC;AAAA,QACX,cAAc;AAAC,OACjB,CAAE,CAAA;AACF,MAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,IAC1B,CAAA,SAAE;AACA,MAAA,KAAA,EAAM;AAAA,IACR;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,MAAM,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAG3D,IAAA,IAAI,CAAC,QAAA,CAAS,IAAA,CAAK,GAAG,CAAA,EAAG;AACvB,MAAA,KAAA,CAAM,KAAK,EAAE,IAAA,EAAM,OAAA,EAAS,OAAA,EAAS,KAAK,CAAA;AAAA,IAC5C;AACA,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAaA,eAAe,aAAa,EAAA,EAA8C;AAIxE,EAAA,MAAM,eAAA,GAAkB,iBAAA,EAAkB,CAAE,GAAA,CAAI,CAAC,CAAA,KAAO,CAAA,CAAE,QAAA,CAAc,IAAA,CAAA,GAAG,CAAA,GAAI,CAAA,GAAI,CAAA,GAAS,IAAA,CAAA,GAAI,CAAA;AAChG,EAAA,MAAM,gBAAgB,CAAC,CAAA,KACrB,eAAA,CAAgB,IAAA,CAAK,CAAC,EAAA,KAAO,CAAA,KAAM,EAAA,CAAG,KAAA,CAAM,GAAG,EAAE,CAAA,IAAK,CAAA,CAAE,UAAA,CAAW,EAAE,CAAC,CAAA;AAExE,EAAA,MAAM,GAAA,GAAA,CAAO,MAAM,EAAA,CAAG,MAAA,EAAO,EAAG,MAAA,CAAO,CAAC,CAAA,KAAM,CAAC,aAAA,CAAc,CAAA,CAAE,MAAM,CAAC,CAAA;AACtE,EAAA,MAAM,UAAyB,EAAC;AAMhC,EAAA,KAAA,MAAW,EAAE,QAAA,EAAU,IAAA,EAAK,IAAK,EAAA,CAAG,iBAAgB,EAAG;AACrD,IAAA,IAAI,aAAA,CAAc,IAAI,CAAA,EAAG;AACzB,IAAA,MAAM,SAAS,IAAA,CAAK,QAAA,CAAc,IAAA,CAAA,GAAG,CAAA,GAAI,OAAO,IAAA,GAAY,IAAA,CAAA,GAAA;AAC5D,IAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,MAAA,KAAW,IAAA,IAAQ,CAAA,CAAE,MAAA,CAAO,UAAA,CAAW,MAAM,CAAC,CAAA;AAChF,IAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG;AACxB,IAAA,MAAM,aAAa,QAAA,CAAS,KAAA,CAAM,GAAG,CAAA,CAAE,KAAI,IAAK,QAAA;AAChD,IAAA,KAAA,MAAW,KAAA,IAAS,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,EAAE,QAAQ,QAAA,EAAU,KAAA,EAAO,KAAA,EAAO,UAAA,EAAY,CAAA;AAAA,EACxF;AACA,EAAA,OAAO,OAAA;AACT;AAUA,eAAe,aAAA,GAGZ;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AACF,IAAA,MAAM,UAA0B,EAAC;AACjC,IAAA,KAAA,MAAW,IAAA,IAAQ,mBAAkB,EAAG;AACtC,MAAA,OAAA,CAAQ,IAAA,CAAK,GAAI,MAAM,QAAA,CAAS,IAAA,EAAM,gBAAA,EAAkB,EAAE,UAAA,EAAY,aAAA,EAAc,EAAG,CAAE,CAAA;AAAA,IAC3F;AACA,IAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,EAC1B,SAAS,GAAA,EAAK;AACZ,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,IAAA,EAAM,SAAA;AAAA,MACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACzD,CAAA;AACD,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAGA,SAAS,GAAA,CAAI,QAAqB,OAAA,EAAwC;AACxE,EAAA,OAAO,QAAQ,GAAA,CAAI,CAAC,WAAW,EAAE,MAAA,EAAQ,OAAM,CAAE,CAAA;AACnD;AASA,eAAsB,gBAAA,CACpB,IACA,UAAA,EAC0B;AAC1B,EAAA,MAAM,CAAC,IAAA,EAAM,KAAK,CAAA,GAAI,MAAM,OAAA,CAAQ,GAAA,CAAI,CAAC,aAAA,EAAc,EAAG,WAAA,CAAY,UAAU,CAAC,CAAC,CAAA;AAClF,EAAA,MAAM,OAAA,GAAU,MAAM,aAAA,EAAc;AACpC,EAAA,MAAM,GAAA,GAAM,MAAM,YAAA,CAAa,EAAE,CAAA;AACjC,EAAA,OAAO;AAAA,IACL,OAAA,EAAS;AAAA,MACP,GAAG,GAAA;AAAA,MACH,GAAG,IAAA,CAAK,OAAA;AAAA,MACR,GAAG,GAAA,CAAI,SAAA,EAAW,OAAA,CAAQ,OAAO,CAAA;AAAA,MACjC,GAAG,GAAA,CAAI,OAAA,EAAS,KAAA,CAAM,OAAO;AAAA,KAC/B;AAAA,IACA,KAAA,EAAO,CAAC,GAAG,IAAA,CAAK,KAAA,EAAO,GAAG,KAAA,CAAM,KAAA,EAAO,GAAG,OAAA,CAAQ,KAAK;AAAA,GACzD;AACF","file":"asset-feeds-KPKCE64E.js","sourcesContent":["/**\n * asset-feeds.ts — gather installable assets from every feed the manage TUI\n * surfaces.\n *\n * Four feeds, normalized into `CatalogEntry`:\n * - **Project sources** — `skaile.yaml` `sources:` entries (scanned via\n *   `AssetManager.search()`; the new `sources:` field is merged into the\n *   legacy repositories map in `AssetManager.loadConfig`).\n * - **Local libraries** — user authoring places from `LocalIndex`, read through\n *   `scanAuthoringLibraries` (`@skaile/workspaces/library`): the same scan\n *   `library index` / `search --local` use, so publishers and refs match them\n *   (per-asset `publisher_overrides` honoured), `dev_paths` assets are left out,\n *   and a library that fails to scan becomes one note while the rest stay listed.\n * - **Factory assets** — the bundled first-party `factory-assets` tree\n *   (`factoryAssetRoots()`), scanned from disk. Always present; no network.\n * - **Remote store** — the configured catalog source when `catalog.url` is\n *   not `local`. Failures are non-fatal — they surface as notes.\n */\n\nimport * as path from \"node:path\";\nimport {\n  type AssetKind,\n  type CatalogEntry,\n  factoryAssetRoots,\n  parseRequires,\n  scanRepo,\n} from \"@skaile/workspaces/core\";\nimport { getKnownKinds } from \"./open-registry.ts\";\nimport { storeNotInstallableReason } from \"./store-addable.ts\";\nimport type { DiscoveredAsset } from \"@skaile/workspaces/discovery\";\n\n/** One non-fatal note returned to the caller for surfacing in the UI. */\nexport interface FeedNote {\n  feed: \"sources\" | \"libraries\" | \"store\" | \"factory\";\n  message: string;\n}\n\n/**\n * Which feed an asset came from. This is the top-level grouping axis in the\n * manage TUI (\"where is this skill coming from?\") and is intentionally distinct\n * from `publisher` (asset-intrinsic identity): the same publisher can legitimately\n * appear under more than one origin (e.g. a github repo you added as a `source`\n * that is also listed in the remote `store`).\n */\nexport type AssetOrigin = \"source\" | \"library\" | \"factory\" | \"store\";\n\n/** A catalog entry tagged with the feed it was gathered from. */\nexport interface OriginEntry {\n  origin: AssetOrigin;\n  entry: CatalogEntry;\n  /**\n   * Second-level grouping label for the manage tree. Defaults (when unset) to the\n   * entry's `publisher`; the source feed sets it to the source's short repo name\n   * so the Sources band groups by source — \"which repo did this come from\" — not\n   * by the asset-intrinsic publisher.\n   */\n  group?: string;\n}\n\nexport interface AssetFeedResult {\n  entries: OriginEntry[];\n  notes: FeedNote[];\n}\n\n/**\n * Map one discovered library asset to the `CatalogEntry` the manage rows read.\n * `publisher` is the bare per-asset publisher (what `search --local` prints),\n * `source` the manifest path. `repo` is left unset: it only feeds the Sources-tree\n * org grouping. `requires` / `dependencies` come from the manifest the way the\n * scanner fills them — string `requires:` refs parsed to `{kind, name}`, a bundle's\n * string `dependencies:` list verbatim.\n */\nfunction libraryEntryOf(asset: DiscoveredAsset): CatalogEntry {\n  const { manifest } = asset;\n  const nested = (manifest.metadata as Record<string, unknown> | undefined)?.requires;\n  const rawRequires = manifest.requires ?? nested;\n  const requireRefs =\n    typeof rawRequires === \"string\"\n      ? rawRequires\n      : Array.isArray(rawRequires)\n        ? rawRequires.filter((r): r is string => typeof r === \"string\")\n        : undefined;\n  const deps = manifest.dependencies;\n  return {\n    name: asset.name,\n    kind: asset.kind as AssetKind,\n    description: typeof manifest.description === \"string\" ? manifest.description : \"\",\n    source: asset.manifestPath,\n    publisher: asset.publisher,\n    ...(asset.plugin ? { plugin: asset.plugin } : {}),\n    version: asset.version,\n    requires: requireRefs === undefined ? [] : parseRequires({ requires: requireRefs }),\n    dependencies:\n      asset.kind === \"bundle\" && Array.isArray(deps)\n        ? deps.filter((d): d is string => typeof d === \"string\" && d.length > 0)\n        : [],\n  };\n}\n\n/**\n * Pull assets from local libraries (the authoring places under\n * `~/.skaile/libraries/<name>/`, not the `~/.skaile/cache/sources/` cache) through\n * `scanAuthoringLibraries`, grouped under the bare library name\n * (`group: <name>`) so the manage TUI shows a clean `<name>` band — no\n * `library:` prefix (mirrors the source feed). Plugin grouping (`entry.plugin`)\n * comes from `DiscoveredAsset.plugin`. A library whose scan fails becomes one\n * `FeedNote`; the outer `catch` covers only opening the index.\n */\nasync function libraryAssets(): Promise<{\n  entries: OriginEntry[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    // Lazy: the library subpath pulls in SQLite, which the other feeds never need.\n    const { openLibraryManager } = await import(\"./open-library.ts\");\n    const { getKindRegistry } = await import(\"./open-registry.ts\");\n    const { scanAuthoringLibraries } = await import(\"@skaile/workspaces/library\");\n    const { library: index, close } = await openLibraryManager();\n    try {\n      const entries: OriginEntry[] = [];\n      for (const scan of await scanAuthoringLibraries(index, getKindRegistry())) {\n        if (scan.error !== undefined) {\n          notes.push({ feed: \"libraries\", message: `${scan.library.name}: ${scan.error}` });\n          continue;\n        }\n        for (const asset of scan.assets) {\n          entries.push({\n            origin: \"library\",\n            entry: libraryEntryOf(asset),\n            group: scan.library.name,\n          });\n        }\n      }\n      return { entries, notes };\n    } finally {\n      close();\n    }\n  } catch (err) {\n    notes.push({\n      feed: \"libraries\",\n      message: err instanceof Error ? err.message : String(err),\n    });\n    return { entries: [], notes };\n  }\n}\n\n/**\n * Pull a (best-effort) snapshot of the connected remote store catalog.\n *\n * - Returns no entries when the resolved catalog is local-only or the host\n *   is unreachable (the failure becomes a note, not an exception).\n * - Maps `CatalogAsset` → `CatalogEntry`, carrying `publisher`, `repo`, and\n *   `category` straight through and using `source = \"store://<id>\"`; per-file\n *   `source` paths are not available for remote assets so the canonical ref is\n *   a stable placeholder.\n */\nasync function storeAssets(projectDir: string): Promise<{\n  entries: CatalogEntry[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    const { resolveCatalogSource } = await import(\"./open-library.ts\");\n    const { source, close } = await resolveCatalogSource({ projectDir });\n    try {\n      // The store lists only what `skaile add` can install (see store-addable.ts).\n      const assets = (await source.listAssets()).filter(\n        (a) => storeNotInstallableReason(a) === undefined,\n      );\n      const entries: CatalogEntry[] = assets.map((a) => ({\n        name: a.name,\n        kind: (a.kind as AssetKind) ?? \"skill\",\n        description: a.description ?? \"\",\n        source: `store://${a.id}`,\n        publisher: a.publisher,\n        repo: a.repo,\n        plugin: a.plugin,\n        category: a.category,\n        version: a.version,\n        requires: [],\n        dependencies: [],\n      }));\n      return { entries, notes };\n    } finally {\n      close();\n    }\n  } catch (err) {\n    const msg = err instanceof Error ? err.message : String(err);\n    // Local-only catalog throws a recognizable message — silence it; absence\n    // is the user's choice, not an error.\n    if (!/local/i.test(msg)) {\n      notes.push({ feed: \"store\", message: msg });\n    }\n    return { entries: [], notes };\n  }\n}\n\n/** The slice of `AssetManager` the source feed needs (kept narrow for tests). */\ninterface AssetManagerLike {\n  search: () => Promise<CatalogEntry[]>;\n  searchRepoRoots: () => { repoName: string; root: string }[];\n}\n\n/**\n * Project-source feed: leans on `AssetManager.search()`, which merges\n * `skaile.yaml`'s `sources:` field into the repositories map. Plugin grouping\n * (`entry.plugin`) is stamped by the scanner, so entries pass through as-is.\n */\nasync function sourceAssets(am: AssetManagerLike): Promise<OriginEntry[]> {\n  // The bundled factory tree is injected into the repositories map as an implicit\n  // source, so `am.search()` returns it too. It has its own `factory` origin band,\n  // so drop it here — otherwise the same first-party skills list twice under Sources.\n  const factoryPrefixes = factoryAssetRoots().map((r) => (r.endsWith(path.sep) ? r : r + path.sep));\n  const isFactoryPath = (p: string) =>\n    factoryPrefixes.some((fp) => p === fp.slice(0, -1) || p.startsWith(fp));\n\n  const all = (await am.search()).filter((e) => !isFactoryPath(e.source));\n  const entries: OriginEntry[] = [];\n  // Group each source's entries under the source node (its short repo name), not\n  // the publisher: under Sources the navigational question is \"which repo did\n  // this come from\". Each entry's `source` (absolute manifest path) lives under\n  // exactly one declared root, so group by prefix. The cache slug is\n  // URL-keyed `github.com/<org>/<repo>` — take the trailing segment.\n  for (const { repoName, root } of am.searchRepoRoots()) {\n    if (isFactoryPath(root)) continue;\n    const prefix = root.endsWith(path.sep) ? root : root + path.sep;\n    const owned = all.filter((e) => e.source === root || e.source.startsWith(prefix));\n    if (owned.length === 0) continue;\n    const sourceName = repoName.split(\"/\").pop() || repoName;\n    for (const entry of owned) entries.push({ origin: \"source\", entry, group: sourceName });\n  }\n  return entries;\n}\n\n/**\n * Factory-asset feed: scan the bundled first-party `factory-assets` tree(s)\n * resolved by `factoryAssetRoots()` (the `SKAILE_FACTORY_ASSETS_DIR` override\n * layer ahead of the bundled tree). Local disk only, no network — the entries are\n * the built-in skills / connectors / bundles that ship with `@skaile/workspaces`.\n * `factoryAssetRoots()` already dedupes, so the env override pointing at the\n * bundled dir collapses to one root.\n */\nasync function factoryAssets(): Promise<{\n  entries: CatalogEntry[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    const entries: CatalogEntry[] = [];\n    for (const root of factoryAssetRoots()) {\n      entries.push(...(await scanRepo(root, \"skaile-factory\", { knownKinds: getKnownKinds() })));\n    }\n    return { entries, notes };\n  } catch (err) {\n    notes.push({\n      feed: \"factory\",\n      message: err instanceof Error ? err.message : String(err),\n    });\n    return { entries: [], notes };\n  }\n}\n\n/** Tag a flat entry list with a single origin. */\nfunction tag(origin: AssetOrigin, entries: CatalogEntry[]): OriginEntry[] {\n  return entries.map((entry) => ({ origin, entry }));\n}\n\n/**\n * Run all feeds and return a single normalized result.\n *\n * Feeds run in parallel where possible — the store fetch is the slow one\n * (one HTTP call) and is fired alongside the local library walk. The factory\n * scan is local disk only, so it runs inline.\n */\nexport async function gatherAssetFeeds(\n  am: AssetManagerLike,\n  projectDir: string,\n): Promise<AssetFeedResult> {\n  const [libs, store] = await Promise.all([libraryAssets(), storeAssets(projectDir)]);\n  const factory = await factoryAssets();\n  const src = await sourceAssets(am);\n  return {\n    entries: [\n      ...src,\n      ...libs.entries,\n      ...tag(\"factory\", factory.entries),\n      ...tag(\"store\", store.entries),\n    ],\n    notes: [...libs.notes, ...store.notes, ...factory.notes],\n  };\n}\n"]}

package/dist/asset-manager/catalog-deployer.js

@@ -1,20 +1,20 @@
-export { WORKSPACE_MOUNT_ENV_VAR, deployAll, deployCatalogEntry, findAiAssetsRoot, isUnderWorkspaceMount, resolveFlowSkills, undeployCatalogEntry, workspaceMountDirs } from '../chunk-H6UVIKQ2.js';
-import '../chunk-L4YKW5AY.js';
+export { WORKSPACE_MOUNT_ENV_VAR, deployAll, deployCatalogEntry, findAiAssetsRoot, isUnderWorkspaceMount, resolveFlowSkills, undeployCatalogEntry, workspaceMountDirs } from '../chunk-PNUM7GUY.js';
+import '../chunk-BRK5QZKI.js';
 import '../chunk-4GY63JU6.js';
-import '../chunk-OTIB4D2K.js';
+import '../chunk-QPWR3YMY.js';
 import '../chunk-5KRMNUL4.js';
-import '../chunk-Z7ZEZZB6.js';
+import '../chunk-C5HFK34M.js';
 import '../chunk-MWXYN6NY.js';
-import '../chunk-OHNKYHRR.js';
+import '../chunk-KJSC2ZD6.js';
 import '../chunk-L5VSIPQD.js';
 import '../chunk-VTETQCR6.js';
-import '../chunk-UQ33Y4DM.js';
+import '../chunk-KPKGWXUJ.js';
 import '../chunk-RVRB27AN.js';
-import '../chunk-GOCWM7FN.js';
-import '../chunk-WDXZA7QW.js';
-import '../chunk-ADPM6AYF.js';
+import '../chunk-JMIKGAUA.js';
+import '../chunk-IZQOO6MN.js';
+import '../chunk-VSX2G7LA.js';
 import '../chunk-DKXNKFKP.js';
-import '../chunk-LSI2IVFT.js';
+import '../chunk-RXGPFAMN.js';
 import '../chunk-C3CAXQMA.js';
 import '../chunk-BOFL7GIF.js';
 import '../chunk-NSBPE2FW.js';

package/dist/asset-manager/fragments.js

@@ -1,4 +1,4 @@
-export { BUILT_IN_FRAGMENTS, loadPromptExtensions, resolveFragments } from '../chunk-NOA6EJXE.js';
+export { BUILT_IN_FRAGMENTS, loadPromptExtensions, resolveFragments } from '../chunk-PKE3PXOK.js';
 import '../chunk-NSBPE2FW.js';
 //# sourceMappingURL=fragments.js.map
 //# sourceMappingURL=fragments.js.map

package/dist/asset-manager/index.js

@@ -1,35 +1,35 @@
-export { AssetManager, FACTORY_SOURCE_URL, LibraryEntryError, MissingManifestError, installAgentInstances, normalizeRepoUrl, parseCanonicalLockKey, parseRefTolerant, renderMcpServerConfig, softDepName } from '../chunk-OAHVKSQJ.js';
-import '../chunk-UL22SDGR.js';
-import '../chunk-QOM5Z62G.js';
-import '../chunk-7XSAW5OC.js';
-import '../chunk-BFMYYNDT.js';
+export { AssetManager, LibraryEntryError, MissingManifestError, installAgentInstances, labelDiffHeaders, mcpNotRunnableReason, normalizeRepoUrl, parseCanonicalLockKey, parseRefTolerant, renderMcpServerConfig, setLibraryAssetCheck, setRenamedEntryLookup, softDepName } from '../chunk-PKBLJI23.js';
+import '../chunk-6CYKTHNT.js';
+import '../chunk-MAZ3UXJK.js';
+import '../chunk-E5NQRHEB.js';
+import '../chunk-F3D25RGM.js';
 import '../chunk-3TXEJN4W.js';
 import '../chunk-ISHJITXJ.js';
 import '../chunk-LNFKL23K.js';
-import '../chunk-X3RMRJNR.js';
+import '../chunk-JRN5QF4C.js';
 import '../chunk-NUELZWCF.js';
-export { SCAFFOLD_KINDS, createScaffold, deployAll, installAgent, installTargetOf, removeAsset } from '../chunk-3JKGY2YC.js';
-export { BUILT_IN_FRAGMENTS, loadPromptExtensions, resolveFragments } from '../chunk-NOA6EJXE.js';
+export { SCAFFOLD_KINDS, createScaffold, deployAll, installAgent, installTargetOf, removeAsset } from '../chunk-S2H3RBK7.js';
+export { BUILT_IN_FRAGMENTS, loadPromptExtensions, resolveFragments } from '../chunk-PKE3PXOK.js';
 export { appendHistory, clearHistory, getRecentHistory, loadHistory } from '../chunk-KTBKW2FI.js';
 import '../chunk-UQ6LFBPZ.js';
-export { AGENT_RENDERERS, claudeCodeRenderer, codexRenderer, harnessTargetSupportsAgents, ompRenderer, renderAgentToFramework } from '../chunk-DUMTLYSO.js';
-import '../chunk-E572OHGY.js';
-import '../chunk-L4YKW5AY.js';
+export { AGENT_RENDERERS, claudeCodeRenderer, codexRenderer, harnessTargetSupportsAgents, ompRenderer, renderAgentToFramework } from '../chunk-COAFAYBS.js';
+import '../chunk-76FLBODK.js';
+export { FACTORY_SOURCE_URL } from '../chunk-BRK5QZKI.js';
 import '../chunk-4GY63JU6.js';
-import '../chunk-OTIB4D2K.js';
+import '../chunk-QPWR3YMY.js';
 import '../chunk-5KRMNUL4.js';
-import '../chunk-Z7ZEZZB6.js';
+import '../chunk-C5HFK34M.js';
 import '../chunk-MWXYN6NY.js';
-import '../chunk-OHNKYHRR.js';
+import '../chunk-KJSC2ZD6.js';
 import '../chunk-L5VSIPQD.js';
 import '../chunk-VTETQCR6.js';
-import '../chunk-UQ33Y4DM.js';
+import '../chunk-KPKGWXUJ.js';
 import '../chunk-RVRB27AN.js';
-import '../chunk-GOCWM7FN.js';
-import '../chunk-WDXZA7QW.js';
-import '../chunk-ADPM6AYF.js';
+import '../chunk-JMIKGAUA.js';
+import '../chunk-IZQOO6MN.js';
+import '../chunk-VSX2G7LA.js';
 import '../chunk-DKXNKFKP.js';
-import '../chunk-LSI2IVFT.js';
+import '../chunk-RXGPFAMN.js';
 import '../chunk-C3CAXQMA.js';
 import '../chunk-BOFL7GIF.js';
 import '../chunk-NSBPE2FW.js';

package/dist/asset-manager/installer.js

@@ -1,23 +1,23 @@
-export { SCAFFOLD_KINDS, assertNoLibrarySymlinks, canonicalEntryRef, createScaffold, deployAll, deployAsset, deployedAssetDrift, diffDeployedAgent, installTargetOf, readKeptLegacyCopies, removeAsset, writeKeptLegacyCopies } from '../chunk-3JKGY2YC.js';
-import '../chunk-NOA6EJXE.js';
-import '../chunk-DUMTLYSO.js';
-import '../chunk-E572OHGY.js';
-import '../chunk-L4YKW5AY.js';
+export { SCAFFOLD_KINDS, assertNoLibrarySymlinks, cachedComposedFiles, canonicalEntryRef, composedDriftRefs, createScaffold, deployAll, deployAsset, deployedAssetDrift, diffDeployedAgent, installTargetOf, readKeptLegacyCopies, removeAsset, sourceComposedFiles, writeKeptLegacyCopies } from '../chunk-S2H3RBK7.js';
+import '../chunk-PKE3PXOK.js';
+import '../chunk-COAFAYBS.js';
+import '../chunk-76FLBODK.js';
+import '../chunk-BRK5QZKI.js';
 import '../chunk-4GY63JU6.js';
-import '../chunk-OTIB4D2K.js';
+import '../chunk-QPWR3YMY.js';
 import '../chunk-5KRMNUL4.js';
-import '../chunk-Z7ZEZZB6.js';
+import '../chunk-C5HFK34M.js';
 import '../chunk-MWXYN6NY.js';
-import '../chunk-OHNKYHRR.js';
+import '../chunk-KJSC2ZD6.js';
 import '../chunk-L5VSIPQD.js';
 import '../chunk-VTETQCR6.js';
-import '../chunk-UQ33Y4DM.js';
+import '../chunk-KPKGWXUJ.js';
 import '../chunk-RVRB27AN.js';
-import '../chunk-GOCWM7FN.js';
-import '../chunk-WDXZA7QW.js';
-import '../chunk-ADPM6AYF.js';
+import '../chunk-JMIKGAUA.js';
+import '../chunk-IZQOO6MN.js';
+import '../chunk-VSX2G7LA.js';
 import '../chunk-DKXNKFKP.js';
-import '../chunk-LSI2IVFT.js';
+import '../chunk-RXGPFAMN.js';
 import '../chunk-C3CAXQMA.js';
 import '../chunk-BOFL7GIF.js';
 import '../chunk-NSBPE2FW.js';

package/dist/asset-manager/renderers.js

@@ -1,21 +1,21 @@
-export { AGENT_RENDERERS, CODEX_IDENTITY_DIR, claudeCodeRenderer, codexRenderer, harnessTargetSupportsAgents, ompRenderer, renderAgentToFramework } from '../chunk-DUMTLYSO.js';
-import '../chunk-E572OHGY.js';
-import '../chunk-L4YKW5AY.js';
+export { AGENT_RENDERERS, CODEX_IDENTITY_DIR, agentRenderFiles, claudeCodeRenderer, codexRenderer, harnessTargetSupportsAgents, ompRenderer, renderAgentToFramework } from '../chunk-COAFAYBS.js';
+import '../chunk-76FLBODK.js';
+import '../chunk-BRK5QZKI.js';
 import '../chunk-4GY63JU6.js';
-import '../chunk-OTIB4D2K.js';
+import '../chunk-QPWR3YMY.js';
 import '../chunk-5KRMNUL4.js';
-import '../chunk-Z7ZEZZB6.js';
+import '../chunk-C5HFK34M.js';
 import '../chunk-MWXYN6NY.js';
-import '../chunk-OHNKYHRR.js';
+import '../chunk-KJSC2ZD6.js';
 import '../chunk-L5VSIPQD.js';
 import '../chunk-VTETQCR6.js';
-import '../chunk-UQ33Y4DM.js';
+import '../chunk-KPKGWXUJ.js';
 import '../chunk-RVRB27AN.js';
-import '../chunk-GOCWM7FN.js';
-import '../chunk-WDXZA7QW.js';
-import '../chunk-ADPM6AYF.js';
+import '../chunk-JMIKGAUA.js';
+import '../chunk-IZQOO6MN.js';
+import '../chunk-VSX2G7LA.js';
 import '../chunk-DKXNKFKP.js';
-import '../chunk-LSI2IVFT.js';
+import '../chunk-RXGPFAMN.js';
 import '../chunk-C3CAXQMA.js';
 import '../chunk-BOFL7GIF.js';
 import '../chunk-NSBPE2FW.js';