@skaile/workspaces 6.1.0 → 6.3.0

package/dist/{chunk-VYVTEMAW.js.map → chunk-PNUM7GUY.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../asset-manager/src/catalog-deployer.ts"],"names":[],"mappings":";;;;;AAyGA,IAAM,uBAAA,GAA0B,CAAA;AAGhC,IAAM,qBAAA,GAAwB,CAAA;AAE9B,IAAI,cAAA;AAEJ,SAAS,GAAA,GAAuC;AAC9C,EAAA,cAAA,KAAmB,aAAa,EAAE,IAAA,EAAM,QAAA,EAAU,OAAA,EAAS,oBAAoB,CAAA;AAC/E,EAAA,OAAO,cAAA;AACT;AAOA,IAAM,2BAAA,GAA8B,mBAAA;AAS7B,IAAM,uBAAA,GAA0B;AAYhC,SAAS,kBAAA,GAA+B;AAC7C,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,GAAA,CAAI,uBAAuB,CAAA;AAC/C,EAAA,IAAI,GAAA,KAAQ,MAAA,EAAW,OAAO,CAAC,2BAA2B,CAAA;AAC1D,EAAA,OAAO,GAAA,CACJ,MAAM,GAAG,CAAA,CACT,IAAI,CAAC,OAAA,KAAY,OAAA,CAAQ,IAAA,EAAM,CAAA,CAC/B,OAAO,CAAC,OAAA,KAAY,OAAA,CAAQ,MAAA,GAAS,CAAC,CAAA,CACtC,IAAI,CAAC,OAAA,KAAY,OAAA,CAAQ,OAAO,CAAC,CAAA;AACtC;AAYO,SAAS,qBAAA,CACd,SAAA,EACA,SAAA,GAAsB,kBAAA,EAAmB,EAChC;AACT,EAAA,MAAM,MAAA,GAAS,QAAQ,SAAS,CAAA;AAChC,EAAA,OAAO,SAAA,CAAU,IAAA,CAAK,CAAC,GAAA,KAAQ;AAC7B,IAAA,MAAM,IAAA,GAAO,QAAQ,GAAG,CAAA;AACxB,IAAA,OAAO,MAAA,KAAW,IAAA,IAAQ,MAAA,CAAO,UAAA,CAAW,OAAO,GAAG,CAAA;AAAA,EACxD,CAAC,CAAA;AACH;AA0BA,eAAsB,gBAAA,CACpB,UACA,IAAA,EACwB;AACxB,EAAA,MAAM,SAAA,GAAY,IAAA,EAAM,SAAA,IAAa,kBAAA,EAAmB;AACxD,EAAA,MAAM,MAAA,GAAS,MAAM,MAAA,IAAU,qBAAA;AAC/B,EAAA,IAAI,GAAA,GAAM,QAAQ,QAAQ,CAAA;AAI1B,EAAA,MAAM,UAAoB,EAAC;AAE3B,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,MAAA,EAAQ,CAAA,EAAA,EAAK;AAC/B,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,GAAA,EAAK,WAAW,CAAA;AACvC,IAAA,IAAI,qBAAA,CAAsB,SAAA,EAAW,SAAS,CAAA,EAAG;AAC/C,MAAA,OAAA,CAAQ,KAAK,SAAS,CAAA;AAAA,IACxB,CAAA,MAAO;AACL,MAAA,MAAM,QAAQ,MAAM,iBAAA;AAAA,QAClB,QAAQ,SAAS,CAAA,CAAA;AAAA,QACjB,YAAA,CAAa,MAAM,IAAA,CAAK,SAAS,GAAG,WAAA,EAAY;AAAA,QAChD;AAAA,OACF;AACA,MAAA,IAAI,KAAA,EAAO;AACT,QAAA,IAAI,OAAA,CAAQ,MAAA,GAAS,CAAA,EAAG,WAAA,CAAY,SAAS,SAAS,CAAA;AACtD,QAAA,OAAO,SAAA;AAAA,MACT;AAAA,IACF;AACA,IAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,GAAA,EAAK,IAAI,CAAA;AAChC,IAAA,IAAI,WAAW,GAAA,EAAK;AACpB,IAAA,GAAA,GAAM,MAAA;AAAA,EACR;AACA,EAAA,IAAI,OAAA,CAAQ,MAAA,GAAS,CAAA,EAAG,WAAA,CAAY,SAAS,SAAS,CAAA;AACtD,EAAA,OAAO,IAAA;AACT;AAGA,SAAS,WAAA,CAAY,SAAmB,SAAA,EAA2B;AACjE,EAAA,GAAA,EAAI,CAAE,IAAA;AAAA,IACJ,gIAAA;AAAA,IACA,EAAE,SAAS,SAAA;AAAU,GACvB;AACF;AAsBA,eAAsB,kBAAA,CACpB,OACA,OAAA,EAC+C;AAC/C,EAAA,MAAM,EAAE,UAAA,EAAY,SAAA,EAAW,OAAA,EAAQ,GAAI,OAAA;AAE3C,EAAA,IAAI,KAAA,CAAM,SAAS,OAAA,EAAS;AAC1B,IAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,OAAO,CAAA,cAAA,EAAiB,KAAA,CAAM,IAAI,CAAA,4BAAA,CAAA,EAA0B;AAAA,EACvF;AAEA,EAAA,MAAM,UAAA,GAAa,IAAA,CAAK,UAAA,EAAY,KAAA,CAAM,WAAW,CAAA;AACrD,EAAA,MAAM,WAAA,GAAc,IAAA,CAAK,UAAA,EAAY,UAAU,CAAA;AAE/C,EAAA,MAAM,aAAa,MAAM,iBAAA;AAAA,IACvB,QAAQ,WAAW,CAAA,CAAA;AAAA,IACnB,YAAY;AACV,MAAA,MAAM,KAAK,WAAW,CAAA;AACtB,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA,IACA;AAAA,GACF;AACA,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,CAAA,sBAAA,EAAyB,WAAW,CAAA,CAAA,EAAG;AAAA,EACzE;AAEA,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,SAAA,EAAW,KAAA,CAAM,IAAI,CAAA;AAE1C,EAAA,IAAI;AACF,IAAA,MAAM,cAAA,CAAe,CAAA,MAAA,EAAS,OAAO,CAAA,CAAA,EAAI,MAAM,KAAA,CAAM,OAAA,EAAS,EAAE,SAAA,EAAW,IAAA,EAAM,CAAC,CAAA;AAGlF,IAAA,MAAM,cAAA;AAAA,MACJ,CAAA,GAAA,EAAM,UAAU,CAAA,IAAA,EAAO,OAAO,CAAA,CAAA;AAAA,MAC9B,MAAM,EAAA,CAAG,UAAA,EAAY,SAAS,EAAE,SAAA,EAAW,MAAM,CAAA;AAAA,MACjD,cAAa,GAAI;AAAA,KACnB;AAIA,IAAA,MAAM,WAAA,GAAc,IAAA,CAAK,OAAA,EAAS,YAAY,CAAA;AAC9C,IAAA,IAAI,OAAA,EAAS;AACX,MAAA,MAAM,cAAA;AAAA,QAAe,SAAS,WAAW,CAAA,CAAA;AAAA,QAAI,MAC3C,UAAU,WAAA,EAAa,CAAA;;AAAA,EAA2B,OAAO;AAAA,CAAA,EAAM,MAAM;AAAA,OACvE;AAAA,IACF,CAAA,MAAO;AAIL,MAAA,MAAM,cAAA,CAAe,CAAA,GAAA,EAAM,WAAW,CAAA,CAAA,EAAI,MAAM,EAAA,CAAG,WAAA,EAAa,EAAE,KAAA,EAAO,IAAA,EAAM,CAAC,CAAA;AAAA,IAClF;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,GAAA,YAAe,QAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAA,EAAE;AAAA,EACnF;AAEA,EAAA,OAAO,EAAE,SAAS,IAAA,EAAK;AACzB;AAWA,eAAsB,oBAAA,CAAqB,MAAc,SAAA,EAAqC;AAC5F,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,SAAA,EAAW,IAAI,CAAA;AACpC,EAAA,MAAM,SAAS,MAAM,iBAAA;AAAA,IACnB,QAAQ,OAAO,CAAA,CAAA;AAAA,IACf,YAAY;AACV,MAAA,MAAM,KAAK,OAAO,CAAA;AAClB,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA,IACA;AAAA,GACF;AACA,EAAA,IAAI,CAAC,QAAQ,OAAO,KAAA;AACpB,EAAA,MAAM,cAAA;AAAA,IACJ,SAAS,OAAO,CAAA,CAAA;AAAA,IAChB,MAAM,GAAG,OAAA,EAAS,EAAE,WAAW,IAAA,EAAM,KAAA,EAAO,MAAM,CAAA;AAAA,IAClD,cAAa,GAAI;AAAA,GACnB;AACA,EAAA,OAAO,IAAA;AACT;AAcA,eAAsB,SAAA,CACpB,SACA,OAAA,EACuB;AACvB,EAAA,MAAM,MAAA,GAAuB,EAAE,QAAA,EAAU,EAAC,EAAG,SAAS,EAAC,EAAG,MAAA,EAAQ,EAAC,EAAE;AAErE,EAAA,KAAA,MAAW,SAAS,OAAA,EAAS;AAC3B,IAAA,IAAI,KAAA,CAAM,SAAS,OAAA,EAAS;AAC1B,MAAA,MAAA,CAAO,OAAA,CAAQ,IAAA,CAAK,KAAA,CAAM,EAAE,CAAA;AAC5B,MAAA;AAAA,IACF;AAIA,IAAA,MAAM,CAAA,GAAI,MAAM,kBAAA,CAAmB,KAAA,EAAO,OAAO,CAAA;AACjD,IAAA,IAAI,EAAE,OAAA,EAAS;AACb,MAAA,MAAA,CAAO,QAAA,CAAS,IAAA,CAAK,KAAA,CAAM,EAAE,CAAA;AAAA,IAC/B,CAAA,MAAO;AACL,MAAA,MAAA,CAAO,MAAA,CAAO,KAAK,CAAA,EAAG,KAAA,CAAM,EAAE,CAAA,EAAA,EAAK,CAAA,CAAE,KAAK,CAAA,CAAE,CAAA;AAAA,IAC9C;AAAA,EACF;AAEA,EAAA,OAAO,MAAA;AACT;AAeO,SAAS,iBAAA,CACd,MACA,UAAA,EAC2F;AAC3F,EAAA,MAAM,YAAA,uBAAmB,GAAA,EAAkC;AAC3D,EAAA,KAAA,MAAW,KAAK,UAAA,EAAY;AAC1B,IAAA,IAAI,EAAE,IAAA,KAAS,OAAA,eAAsB,GAAA,CAAI,CAAA,CAAE,MAAM,CAAC,CAAA;AAAA,EACpD;AAEA,EAAA,MAAM,WAAmC,EAAC;AAC1C,EAAA,MAAM,WAAmC,EAAC;AAC1C,EAAA,MAAM,UAAoB,EAAC;AAE3B,EAAA,KAAA,MAAW,IAAA,IAAQ,IAAA,CAAK,eAAA,IAAmB,EAAC,EAAG;AAC7C,IAAA,MAAM,KAAA,GAAQ,YAAA,CAAa,GAAA,CAAI,IAAI,CAAA;AACnC,IAAA,IAAI,KAAA,EAAO,QAAA,CAAS,IAAA,CAAK,KAAK,CAAA;AAAA,SACzB,OAAA,CAAQ,KAAK,IAAI,CAAA;AAAA,EACxB;AAEA,EAAA,KAAA,MAAW,IAAA,IAAQ,IAAA,CAAK,eAAA,IAAmB,EAAC,EAAG;AAC7C,IAAA,MAAM,KAAA,GAAQ,YAAA,CAAa,GAAA,CAAI,IAAI,CAAA;AACnC,IAAA,IAAI,KAAA,EAAO,QAAA,CAAS,IAAA,CAAK,KAAK,CAAA;AAAA,EAEhC;AAEA,EAAA,OAAO,EAAE,QAAA,EAAU,QAAA,EAAU,OAAA,EAAQ;AACvC","file":"chunk-VYVTEMAW.js","sourcesContent":["/**\n * Platform-triggered asset deployment.\n *\n * Takes catalog entries (with source_path relative to ai-assets/) and deploys\n * them to a session's .claude/skills/ directory. Handles skill context injection\n * and catalog priority-based name resolution.\n */\n\nimport { cp, mkdir, rm, stat, writeFile } from \"node:fs/promises\";\nimport { join, resolve, sep } from \"node:path\";\nimport { fsDeadlineMs, tryWithFsDeadline, withFsDeadline } from \"@skaile/workspaces/core\";\nimport { createLogger } from \"@skaile/workspaces/core/logging\";\n\n// ---------------------------------------------------------------------------\n// Types (formerly in catalog-compiler.ts, inlined after tear-out in Task 1.5)\n// ---------------------------------------------------------------------------\n\n/**\n * A single user-facing input parameter declared in a SKILL.md.\n *\n * @docLink packages/asset-manager/concepts#catalog-deployer\n */\nexport interface InputSpec {\n  /** Input parameter key used in skill invocation. */\n  key: string;\n  /** Whether the input must be provided before running the skill. */\n  required?: boolean;\n  /** Question string shown to the user when collecting this input. */\n  prompt?: string;\n  /** Short display label for UI forms. */\n  label?: string;\n  /** Input data type hint (e.g. `\"string\"`, `\"number\"`, `\"file\"`). */\n  type?: string;\n  /** Additional guidance text shown alongside the input field. */\n  hint?: string;\n}\n\n/**\n * A compiled catalog entry (skill or flow).\n *\n * @docLink packages/asset-manager/concepts#catalog-deployer\n */\nexport interface CatalogEntryCompiled {\n  /** Unique ID in `publisher/name` form (e.g. `skaileup/cf_overview`). */\n  id: string;\n  /** Asset kind. */\n  kind: \"skill\" | \"flow\";\n  /** Human-readable asset name. */\n  name: string;\n  /** One-line description. */\n  description: string;\n  /** Semantic version string. */\n  version: string;\n  /** Maturity stage. */\n  stage: \"alpha\" | \"beta\" | \"stable\";\n  /** Searchable keywords. */\n  keywords: string[];\n  /** User-facing input specifications. */\n  inputs: InputSpec[];\n  /** Asset path relative to assetsRoot. */\n  source_path: string;\n  /** Optional icon identifier. */\n  icon?: string;\n  /** Flow-only: required skill names. */\n  required_skills?: string[];\n  /** Flow-only: optional skill names. */\n  optional_skills?: string[];\n}\n\n/**\n * Options controlling how platform-triggered skill deployment is performed.\n *\n * @docLink packages/asset-manager/concepts#catalog-deployer\n */\nexport interface DeployFromCatalogOptions {\n  /** Root directory of ai-assets (where `source_path` in catalog entries is relative to). */\n  assetsRoot: string;\n  /** Target directory for deployed skills (e.g. `/workspace/.claude/skills/`). */\n  skillsDir: string;\n  /** Optional context markdown appended to the deployed skill directory as `CONTEXT.md`. */\n  context?: string;\n}\n\n/**\n * Result of a platform-triggered batch skill deployment.\n *\n * @docLink packages/asset-manager/concepts#catalog-deployer\n */\nexport interface DeployResult {\n  /** IDs of catalog entries successfully deployed. */\n  deployed: string[];\n  /** IDs of catalog entries skipped (non-skill kinds). */\n  skipped: string[];\n  /** Error messages for entries that could not be deployed. */\n  errors: string[];\n}\n\n// ---------------------------------------------------------------------------\n// Workspace-mount awareness\n// ---------------------------------------------------------------------------\n\n/**\n * Multiplier applied to the base filesystem deadline for whole-tree operations\n * (recursive copy / remove), which legitimately outlast a single `stat`.\n */\nconst TREE_OP_DEADLINE_FACTOR = 4;\n\n/** Default number of parent levels {@link findAiAssetsRoot} inspects. */\nconst AI_ASSETS_WALK_LEVELS = 6;\n\nlet deployerLogger: ReturnType<typeof createLogger> | undefined;\n\nfunction log(): ReturnType<typeof createLogger> {\n  deployerLogger ??= createLogger({ kind: \"runner\", subkind: \"catalog-deployer\" });\n  return deployerLogger;\n}\n\n/**\n * Where the agent container binds its rclone FUSE mount. Nothing under this\n * path is a safe place to read an asset tree from: the mount is remote\n * (SharePoint / OneDrive / WebDAV) and can wedge indefinitely.\n */\nconst DEFAULT_WORKSPACE_MOUNT_DIR = \"/skaile/workspace\";\n\n/**\n * Env override for the workspace-mount path(s), comma-separated.\n *\n * Set it when the runner binds the mount somewhere other than\n * {@link DEFAULT_WORKSPACE_MOUNT_DIR}; set it to the empty string to disable\n * the guard entirely (single-machine dev, where nothing is a network mount).\n */\nexport const WORKSPACE_MOUNT_ENV_VAR = \"SKAILE_WORKSPACE_MOUNT_DIR\";\n\n/**\n * Resolve the directories treated as network mounts.\n *\n * Read per call rather than cached: the runner mutates `process.env` while\n * wiring a session, so a module-load snapshot would pin a pre-configuration\n * value.\n *\n * @returns Absolute mount paths; empty when the guard is disabled.\n * @docLink packages/asset-manager/concepts#catalog-deployer\n */\nexport function workspaceMountDirs(): string[] {\n  const raw = process.env[WORKSPACE_MOUNT_ENV_VAR];\n  if (raw === undefined) return [DEFAULT_WORKSPACE_MOUNT_DIR];\n  return raw\n    .split(\",\")\n    .map((segment) => segment.trim())\n    .filter((segment) => segment.length > 0)\n    .map((segment) => resolve(segment));\n}\n\n/**\n * Is `candidate` at, or inside, one of the known workspace mount paths?\n *\n * Pure path arithmetic — deliberately no filesystem access, because the whole\n * point is to decide *before* touching a path that might be unresponsive.\n *\n * @param candidate - Path to test.\n * @param mountDirs - Mount roots; defaults to {@link workspaceMountDirs}.\n * @docLink packages/asset-manager/concepts#catalog-deployer\n */\nexport function isUnderWorkspaceMount(\n  candidate: string,\n  mountDirs: string[] = workspaceMountDirs(),\n): boolean {\n  const target = resolve(candidate);\n  return mountDirs.some((dir) => {\n    const root = resolve(dir);\n    return target === root || target.startsWith(root + sep);\n  });\n}\n\n/**\n * Walk upward from `startDir` looking for an `ai-assets/` directory.\n *\n * Two properties matter beyond \"find the folder\":\n *\n * 1. **Never synchronous.** The walk probes up to six directories; any one of\n *    them can be on a FUSE mount, and the former `existsSync` chain blocked the\n *    event loop on the first unresponsive probe. Each probe is now awaited and\n *    deadline-bounded, so a wedged mount costs one skipped candidate.\n * 2. **Never resolves onto a mount.** A hit under the workspace mount is\n *    skipped with a warning rather than returned: accepting it would wire every\n *    later skill deploy — a recursive copy — to a remote filesystem. The walk\n *    continues upward, so a legitimate `ai-assets/` in a parent still wins.\n *\n * Only a **directory** counts. An `ai-assets` file would otherwise be returned\n * as a root and every later `join(root, source_path)` would fail with ENOTDIR.\n *\n * @param startDir - Directory to start from (typically the project dir).\n * @param opts - `levels` caps the upward walk; `mountDirs` overrides the mount\n *   roots (defaults to {@link workspaceMountDirs}).\n * @returns Absolute path to the `ai-assets/` directory, or `null` if none is\n *   reachable within `levels`.\n * @docLink packages/asset-manager/concepts#catalog-deployer\n */\nexport async function findAiAssetsRoot(\n  startDir: string,\n  opts?: { levels?: number; mountDirs?: string[] },\n): Promise<string | null> {\n  const mountDirs = opts?.mountDirs ?? workspaceMountDirs();\n  const levels = opts?.levels ?? AI_ASSETS_WALK_LEVELS;\n  let dir = resolve(startDir);\n  // Every level of a `/skaile/workspace/...` start dir is under the mount, so\n  // an unconditional warn would fire once per level for one lookup. Collect and\n  // report once — the operator needs the fact, not six copies of it.\n  const refused: string[] = [];\n\n  for (let i = 0; i < levels; i++) {\n    const candidate = join(dir, \"ai-assets\");\n    if (isUnderWorkspaceMount(candidate, mountDirs)) {\n      refused.push(candidate);\n    } else {\n      const isDir = await tryWithFsDeadline(\n        `stat ${candidate}`,\n        async () => (await stat(candidate)).isDirectory(),\n        false,\n      );\n      if (isDir) {\n        if (refused.length > 0) warnRefused(refused, mountDirs);\n        return candidate;\n      }\n    }\n    const parent = resolve(dir, \"..\");\n    if (parent === dir) break; // filesystem root — nothing further up\n    dir = parent;\n  }\n  if (refused.length > 0) warnRefused(refused, mountDirs);\n  return null;\n}\n\n/** Single warning for every `ai-assets` candidate skipped for sitting on a mount. */\nfunction warnRefused(refused: string[], mountDirs: string[]): void {\n  log().warn(\n    \"findAiAssetsRoot refused candidates under a workspace mount — deploying skills from a network mount can stall the session\",\n    { refused, mountDirs },\n  );\n}\n\n/**\n * Deploy a single catalog entry to the session skills directory.\n *\n * Copies the entire skill source directory into `skillsDir/<entry.name>/`.\n * If `context` is provided, a separate `CONTEXT.md` is written alongside\n * `SKILL.md` so the source file is never modified.\n *\n * Only `skill` entries are deployable; other kinds return an error.\n *\n * **Async by necessity.** This runs from the `session_init` command handler\n * with the WebSocket live, and both `assetsRoot` and `skillsDir` can sit on a\n * network mount. The former `cpSync`/`rmSync` pair parked the event loop for\n * the whole copy; every call is now awaited and deadline-bounded, so an\n * unresponsive mount fails one deployment instead of the session.\n *\n * @param entry - Compiled catalog entry to deploy.\n * @param options - Deployment target and optional context.\n * @returns `{ success: true }` on success, `{ success: false, error }` on failure.\n * @docLink packages/asset-manager/concepts#catalog-deployer\n */\nexport async function deployCatalogEntry(\n  entry: CatalogEntryCompiled,\n  options: DeployFromCatalogOptions,\n): Promise<{ success: boolean; error?: string }> {\n  const { assetsRoot, skillsDir, context } = options;\n\n  if (entry.kind !== \"skill\") {\n    return { success: false, error: `Cannot deploy ${entry.kind} directly — only skills` };\n  }\n\n  const sourcePath = join(assetsRoot, entry.source_path);\n  const skillMdPath = join(sourcePath, \"SKILL.md\");\n\n  const hasSkillMd = await tryWithFsDeadline(\n    `stat ${skillMdPath}`,\n    async () => {\n      await stat(skillMdPath);\n      return true;\n    },\n    false,\n  );\n  if (!hasSkillMd) {\n    return { success: false, error: `SKILL.md not found at ${skillMdPath}` };\n  }\n\n  const destDir = join(skillsDir, entry.name);\n\n  try {\n    await withFsDeadline(`mkdir ${destDir}`, () => mkdir(destDir, { recursive: true }));\n\n    // Copy the entire skill directory\n    await withFsDeadline(\n      `cp ${sourcePath} -> ${destDir}`,\n      () => cp(sourcePath, destDir, { recursive: true }),\n      fsDeadlineMs() * TREE_OP_DEADLINE_FACTOR,\n    );\n\n    // Write context to a separate CONTEXT.md — never modify the original SKILL.md.\n    // The agent discovers both files in the skill directory.\n    const contextPath = join(destDir, \"CONTEXT.md\");\n    if (context) {\n      await withFsDeadline(`write ${contextPath}`, () =>\n        writeFile(contextPath, `# Additional Context\\n\\n${context}\\n`, \"utf8\"),\n      );\n    } else {\n      // `force: true` makes this a single call: a stale CONTEXT.md is removed,\n      // an absent one is a no-op. The former existsSync probe only added a\n      // second trip to the same possibly-wedged mount.\n      await withFsDeadline(`rm ${contextPath}`, () => rm(contextPath, { force: true }));\n    }\n  } catch (err) {\n    return { success: false, error: err instanceof Error ? err.message : String(err) };\n  }\n\n  return { success: true };\n}\n\n/**\n * Remove a deployed skill directory from the session skills directory.\n *\n * @param name - Skill name (directory basename under `skillsDir`).\n * @param skillsDir - Absolute path to the session skills directory.\n * @returns `true` if the skill was found and removed; `false` if it was not\n *   deployed, or if the directory could not be reached within the deadline.\n * @docLink packages/asset-manager/concepts#catalog-deployer\n */\nexport async function undeployCatalogEntry(name: string, skillsDir: string): Promise<boolean> {\n  const destDir = join(skillsDir, name);\n  const exists = await tryWithFsDeadline(\n    `stat ${destDir}`,\n    async () => {\n      await stat(destDir);\n      return true;\n    },\n    false,\n  );\n  if (!exists) return false;\n  await withFsDeadline(\n    `rm -r ${destDir}`,\n    () => rm(destDir, { recursive: true, force: true }),\n    fsDeadlineMs() * TREE_OP_DEADLINE_FACTOR,\n  );\n  return true;\n}\n\n/**\n * Deploy multiple catalog entries in a single batch operation.\n *\n * Non-skill entries (flows, agents, etc.) are automatically skipped and\n * recorded in `result.skipped`. Deployment failures are collected in\n * `result.errors` without aborting the rest of the batch.\n *\n * @param entries - Compiled catalog entries to deploy.\n * @param options - Deployment target and optional context.\n * @returns Aggregated {@link DeployResult} with deployed, skipped, and error lists.\n * @docLink packages/asset-manager/concepts#catalog-deployer\n */\nexport async function deployAll(\n  entries: CatalogEntryCompiled[],\n  options: DeployFromCatalogOptions,\n): Promise<DeployResult> {\n  const result: DeployResult = { deployed: [], skipped: [], errors: [] };\n\n  for (const entry of entries) {\n    if (entry.kind !== \"skill\") {\n      result.skipped.push(entry.id);\n      continue;\n    }\n\n    // Serial on purpose: concurrent recursive copies onto one mount multiply\n    // the queue depth on the exact resource that is already the bottleneck.\n    const r = await deployCatalogEntry(entry, options);\n    if (r.success) {\n      result.deployed.push(entry.id);\n    } else {\n      result.errors.push(`${entry.id}: ${r.error}`);\n    }\n  }\n\n  return result;\n}\n\n/**\n * Resolve a flow's skill dependencies from the full catalog entry list.\n *\n * Partitions `flow.required_skills` and `flow.optional_skills` into resolved\n * entries and a list of names that could not be found. Missing optional skills\n * are silently ignored (they do not appear in `missing`).\n *\n * @param flow - Compiled flow entry whose skill dependencies should be resolved.\n * @param allEntries - Full set of compiled catalog entries to search.\n * @returns Object containing resolved `required` entries, resolved `optional` entries,\n *   and `missing` skill names that were listed as required but not found.\n * @docLink packages/asset-manager/concepts#catalog-deployer\n */\nexport function resolveFlowSkills(\n  flow: CatalogEntryCompiled,\n  allEntries: CatalogEntryCompiled[],\n): { required: CatalogEntryCompiled[]; optional: CatalogEntryCompiled[]; missing: string[] } {\n  const skillsByName = new Map<string, CatalogEntryCompiled>();\n  for (const e of allEntries) {\n    if (e.kind === \"skill\") skillsByName.set(e.name, e);\n  }\n\n  const required: CatalogEntryCompiled[] = [];\n  const optional: CatalogEntryCompiled[] = [];\n  const missing: string[] = [];\n\n  for (const name of flow.required_skills ?? []) {\n    const entry = skillsByName.get(name);\n    if (entry) required.push(entry);\n    else missing.push(name);\n  }\n\n  for (const name of flow.optional_skills ?? []) {\n    const entry = skillsByName.get(name);\n    if (entry) optional.push(entry);\n    // Optional skills don't count as missing\n  }\n\n  return { required, optional, missing };\n}\n"]}
+{"version":3,"sources":["../asset-manager/src/catalog-deployer.ts"],"names":[],"mappings":";;;;;AAyGA,IAAM,uBAAA,GAA0B,CAAA;AAGhC,IAAM,qBAAA,GAAwB,CAAA;AAE9B,IAAI,cAAA;AAEJ,SAAS,GAAA,GAAuC;AAC9C,EAAA,cAAA,KAAmB,aAAa,EAAE,IAAA,EAAM,QAAA,EAAU,OAAA,EAAS,oBAAoB,CAAA;AAC/E,EAAA,OAAO,cAAA;AACT;AAOA,IAAM,2BAAA,GAA8B,mBAAA;AAS7B,IAAM,uBAAA,GAA0B;AAYhC,SAAS,kBAAA,GAA+B;AAC7C,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,GAAA,CAAI,uBAAuB,CAAA;AAC/C,EAAA,IAAI,GAAA,KAAQ,MAAA,EAAW,OAAO,CAAC,2BAA2B,CAAA;AAC1D,EAAA,OAAO,GAAA,CACJ,MAAM,GAAG,CAAA,CACT,IAAI,CAAC,OAAA,KAAY,OAAA,CAAQ,IAAA,EAAM,CAAA,CAC/B,OAAO,CAAC,OAAA,KAAY,OAAA,CAAQ,MAAA,GAAS,CAAC,CAAA,CACtC,IAAI,CAAC,OAAA,KAAY,OAAA,CAAQ,OAAO,CAAC,CAAA;AACtC;AAYO,SAAS,qBAAA,CACd,SAAA,EACA,SAAA,GAAsB,kBAAA,EAAmB,EAChC;AACT,EAAA,MAAM,MAAA,GAAS,QAAQ,SAAS,CAAA;AAChC,EAAA,OAAO,SAAA,CAAU,IAAA,CAAK,CAAC,GAAA,KAAQ;AAC7B,IAAA,MAAM,IAAA,GAAO,QAAQ,GAAG,CAAA;AACxB,IAAA,OAAO,MAAA,KAAW,IAAA,IAAQ,MAAA,CAAO,UAAA,CAAW,OAAO,GAAG,CAAA;AAAA,EACxD,CAAC,CAAA;AACH;AA0BA,eAAsB,gBAAA,CACpB,UACA,IAAA,EACwB;AACxB,EAAA,MAAM,SAAA,GAAY,IAAA,EAAM,SAAA,IAAa,kBAAA,EAAmB;AACxD,EAAA,MAAM,MAAA,GAAS,MAAM,MAAA,IAAU,qBAAA;AAC/B,EAAA,IAAI,GAAA,GAAM,QAAQ,QAAQ,CAAA;AAI1B,EAAA,MAAM,UAAoB,EAAC;AAE3B,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,MAAA,EAAQ,CAAA,EAAA,EAAK;AAC/B,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,GAAA,EAAK,WAAW,CAAA;AACvC,IAAA,IAAI,qBAAA,CAAsB,SAAA,EAAW,SAAS,CAAA,EAAG;AAC/C,MAAA,OAAA,CAAQ,KAAK,SAAS,CAAA;AAAA,IACxB,CAAA,MAAO;AACL,MAAA,MAAM,QAAQ,MAAM,iBAAA;AAAA,QAClB,QAAQ,SAAS,CAAA,CAAA;AAAA,QACjB,YAAA,CAAa,MAAM,IAAA,CAAK,SAAS,GAAG,WAAA,EAAY;AAAA,QAChD;AAAA,OACF;AACA,MAAA,IAAI,KAAA,EAAO;AACT,QAAA,IAAI,OAAA,CAAQ,MAAA,GAAS,CAAA,EAAG,WAAA,CAAY,SAAS,SAAS,CAAA;AACtD,QAAA,OAAO,SAAA;AAAA,MACT;AAAA,IACF;AACA,IAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,GAAA,EAAK,IAAI,CAAA;AAChC,IAAA,IAAI,WAAW,GAAA,EAAK;AACpB,IAAA,GAAA,GAAM,MAAA;AAAA,EACR;AACA,EAAA,IAAI,OAAA,CAAQ,MAAA,GAAS,CAAA,EAAG,WAAA,CAAY,SAAS,SAAS,CAAA;AACtD,EAAA,OAAO,IAAA;AACT;AAGA,SAAS,WAAA,CAAY,SAAmB,SAAA,EAA2B;AACjE,EAAA,GAAA,EAAI,CAAE,IAAA;AAAA,IACJ,gIAAA;AAAA,IACA,EAAE,SAAS,SAAA;AAAU,GACvB;AACF;AAsBA,eAAsB,kBAAA,CACpB,OACA,OAAA,EAC+C;AAC/C,EAAA,MAAM,EAAE,UAAA,EAAY,SAAA,EAAW,OAAA,EAAQ,GAAI,OAAA;AAE3C,EAAA,IAAI,KAAA,CAAM,SAAS,OAAA,EAAS;AAC1B,IAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,OAAO,CAAA,cAAA,EAAiB,KAAA,CAAM,IAAI,CAAA,4BAAA,CAAA,EAA0B;AAAA,EACvF;AAEA,EAAA,MAAM,UAAA,GAAa,IAAA,CAAK,UAAA,EAAY,KAAA,CAAM,WAAW,CAAA;AACrD,EAAA,MAAM,WAAA,GAAc,IAAA,CAAK,UAAA,EAAY,UAAU,CAAA;AAE/C,EAAA,MAAM,aAAa,MAAM,iBAAA;AAAA,IACvB,QAAQ,WAAW,CAAA,CAAA;AAAA,IACnB,YAAY;AACV,MAAA,MAAM,KAAK,WAAW,CAAA;AACtB,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA,IACA;AAAA,GACF;AACA,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,CAAA,sBAAA,EAAyB,WAAW,CAAA,CAAA,EAAG;AAAA,EACzE;AAEA,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,SAAA,EAAW,KAAA,CAAM,IAAI,CAAA;AAE1C,EAAA,IAAI;AACF,IAAA,MAAM,cAAA,CAAe,CAAA,MAAA,EAAS,OAAO,CAAA,CAAA,EAAI,MAAM,KAAA,CAAM,OAAA,EAAS,EAAE,SAAA,EAAW,IAAA,EAAM,CAAC,CAAA;AAGlF,IAAA,MAAM,cAAA;AAAA,MACJ,CAAA,GAAA,EAAM,UAAU,CAAA,IAAA,EAAO,OAAO,CAAA,CAAA;AAAA,MAC9B,MAAM,EAAA,CAAG,UAAA,EAAY,SAAS,EAAE,SAAA,EAAW,MAAM,CAAA;AAAA,MACjD,cAAa,GAAI;AAAA,KACnB;AAIA,IAAA,MAAM,WAAA,GAAc,IAAA,CAAK,OAAA,EAAS,YAAY,CAAA;AAC9C,IAAA,IAAI,OAAA,EAAS;AACX,MAAA,MAAM,cAAA;AAAA,QAAe,SAAS,WAAW,CAAA,CAAA;AAAA,QAAI,MAC3C,UAAU,WAAA,EAAa,CAAA;;AAAA,EAA2B,OAAO;AAAA,CAAA,EAAM,MAAM;AAAA,OACvE;AAAA,IACF,CAAA,MAAO;AAIL,MAAA,MAAM,cAAA,CAAe,CAAA,GAAA,EAAM,WAAW,CAAA,CAAA,EAAI,MAAM,EAAA,CAAG,WAAA,EAAa,EAAE,KAAA,EAAO,IAAA,EAAM,CAAC,CAAA;AAAA,IAClF;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,GAAA,YAAe,QAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAA,EAAE;AAAA,EACnF;AAEA,EAAA,OAAO,EAAE,SAAS,IAAA,EAAK;AACzB;AAWA,eAAsB,oBAAA,CAAqB,MAAc,SAAA,EAAqC;AAC5F,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,SAAA,EAAW,IAAI,CAAA;AACpC,EAAA,MAAM,SAAS,MAAM,iBAAA;AAAA,IACnB,QAAQ,OAAO,CAAA,CAAA;AAAA,IACf,YAAY;AACV,MAAA,MAAM,KAAK,OAAO,CAAA;AAClB,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA,IACA;AAAA,GACF;AACA,EAAA,IAAI,CAAC,QAAQ,OAAO,KAAA;AACpB,EAAA,MAAM,cAAA;AAAA,IACJ,SAAS,OAAO,CAAA,CAAA;AAAA,IAChB,MAAM,GAAG,OAAA,EAAS,EAAE,WAAW,IAAA,EAAM,KAAA,EAAO,MAAM,CAAA;AAAA,IAClD,cAAa,GAAI;AAAA,GACnB;AACA,EAAA,OAAO,IAAA;AACT;AAcA,eAAsB,SAAA,CACpB,SACA,OAAA,EACuB;AACvB,EAAA,MAAM,MAAA,GAAuB,EAAE,QAAA,EAAU,EAAC,EAAG,SAAS,EAAC,EAAG,MAAA,EAAQ,EAAC,EAAE;AAErE,EAAA,KAAA,MAAW,SAAS,OAAA,EAAS;AAC3B,IAAA,IAAI,KAAA,CAAM,SAAS,OAAA,EAAS;AAC1B,MAAA,MAAA,CAAO,OAAA,CAAQ,IAAA,CAAK,KAAA,CAAM,EAAE,CAAA;AAC5B,MAAA;AAAA,IACF;AAIA,IAAA,MAAM,CAAA,GAAI,MAAM,kBAAA,CAAmB,KAAA,EAAO,OAAO,CAAA;AACjD,IAAA,IAAI,EAAE,OAAA,EAAS;AACb,MAAA,MAAA,CAAO,QAAA,CAAS,IAAA,CAAK,KAAA,CAAM,EAAE,CAAA;AAAA,IAC/B,CAAA,MAAO;AACL,MAAA,MAAA,CAAO,MAAA,CAAO,KAAK,CAAA,EAAG,KAAA,CAAM,EAAE,CAAA,EAAA,EAAK,CAAA,CAAE,KAAK,CAAA,CAAE,CAAA;AAAA,IAC9C;AAAA,EACF;AAEA,EAAA,OAAO,MAAA;AACT;AAeO,SAAS,iBAAA,CACd,MACA,UAAA,EAC2F;AAC3F,EAAA,MAAM,YAAA,uBAAmB,GAAA,EAAkC;AAC3D,EAAA,KAAA,MAAW,KAAK,UAAA,EAAY;AAC1B,IAAA,IAAI,EAAE,IAAA,KAAS,OAAA,eAAsB,GAAA,CAAI,CAAA,CAAE,MAAM,CAAC,CAAA;AAAA,EACpD;AAEA,EAAA,MAAM,WAAmC,EAAC;AAC1C,EAAA,MAAM,WAAmC,EAAC;AAC1C,EAAA,MAAM,UAAoB,EAAC;AAE3B,EAAA,KAAA,MAAW,IAAA,IAAQ,IAAA,CAAK,eAAA,IAAmB,EAAC,EAAG;AAC7C,IAAA,MAAM,KAAA,GAAQ,YAAA,CAAa,GAAA,CAAI,IAAI,CAAA;AACnC,IAAA,IAAI,KAAA,EAAO,QAAA,CAAS,IAAA,CAAK,KAAK,CAAA;AAAA,SACzB,OAAA,CAAQ,KAAK,IAAI,CAAA;AAAA,EACxB;AAEA,EAAA,KAAA,MAAW,IAAA,IAAQ,IAAA,CAAK,eAAA,IAAmB,EAAC,EAAG;AAC7C,IAAA,MAAM,KAAA,GAAQ,YAAA,CAAa,GAAA,CAAI,IAAI,CAAA;AACnC,IAAA,IAAI,KAAA,EAAO,QAAA,CAAS,IAAA,CAAK,KAAK,CAAA;AAAA,EAEhC;AAEA,EAAA,OAAO,EAAE,QAAA,EAAU,QAAA,EAAU,OAAA,EAAQ;AACvC","file":"chunk-PNUM7GUY.js","sourcesContent":["/**\n * Platform-triggered asset deployment.\n *\n * Takes catalog entries (with source_path relative to ai-assets/) and deploys\n * them to a session's .claude/skills/ directory. Handles skill context injection\n * and catalog priority-based name resolution.\n */\n\nimport { cp, mkdir, rm, stat, writeFile } from \"node:fs/promises\";\nimport { join, resolve, sep } from \"node:path\";\nimport { fsDeadlineMs, tryWithFsDeadline, withFsDeadline } from \"@skaile/workspaces/core\";\nimport { createLogger } from \"@skaile/workspaces/core/logging\";\n\n// ---------------------------------------------------------------------------\n// Types (formerly in catalog-compiler.ts, inlined after tear-out in Task 1.5)\n// ---------------------------------------------------------------------------\n\n/**\n * A single user-facing input parameter declared in a SKILL.md.\n *\n * @docLink packages/asset-manager/concepts#catalog-deployer\n */\nexport interface InputSpec {\n  /** Input parameter key used in skill invocation. */\n  key: string;\n  /** Whether the input must be provided before running the skill. */\n  required?: boolean;\n  /** Question string shown to the user when collecting this input. */\n  prompt?: string;\n  /** Short display label for UI forms. */\n  label?: string;\n  /** Input data type hint (e.g. `\"string\"`, `\"number\"`, `\"file\"`). */\n  type?: string;\n  /** Additional guidance text shown alongside the input field. */\n  hint?: string;\n}\n\n/**\n * A compiled catalog entry (skill or flow).\n *\n * @docLink packages/asset-manager/concepts#catalog-deployer\n */\nexport interface CatalogEntryCompiled {\n  /** Unique ID in `publisher/name` form (e.g. `skaileup/cf_overview`). */\n  id: string;\n  /** Asset kind. */\n  kind: \"skill\" | \"flow\";\n  /** Human-readable asset name. */\n  name: string;\n  /** One-line description. */\n  description: string;\n  /** Semantic version string. */\n  version: string;\n  /** Maturity stage. */\n  stage: \"alpha\" | \"beta\" | \"stable\";\n  /** Searchable keywords. */\n  keywords: string[];\n  /** User-facing input specifications. */\n  inputs: InputSpec[];\n  /** Asset path relative to assetsRoot. */\n  source_path: string;\n  /** Optional icon identifier. */\n  icon?: string;\n  /** Flow-only: required skill names. */\n  required_skills?: string[];\n  /** Flow-only: optional skill names. */\n  optional_skills?: string[];\n}\n\n/**\n * Options controlling how platform-triggered skill deployment is performed.\n *\n * @docLink packages/asset-manager/concepts#catalog-deployer\n */\nexport interface DeployFromCatalogOptions {\n  /** Root directory of ai-assets (where `source_path` in catalog entries is relative to). */\n  assetsRoot: string;\n  /** Target directory for deployed skills (e.g. `/workspace/.claude/skills/`). */\n  skillsDir: string;\n  /** Optional context markdown appended to the deployed skill directory as `CONTEXT.md`. */\n  context?: string;\n}\n\n/**\n * Result of a platform-triggered batch skill deployment.\n *\n * @docLink packages/asset-manager/concepts#catalog-deployer\n */\nexport interface DeployResult {\n  /** IDs of catalog entries successfully deployed. */\n  deployed: string[];\n  /** IDs of catalog entries skipped (non-skill kinds). */\n  skipped: string[];\n  /** Error messages for entries that could not be deployed. */\n  errors: string[];\n}\n\n// ---------------------------------------------------------------------------\n// Workspace-mount awareness\n// ---------------------------------------------------------------------------\n\n/**\n * Multiplier applied to the base filesystem deadline for whole-tree operations\n * (recursive copy / remove), which legitimately outlast a single `stat`.\n */\nconst TREE_OP_DEADLINE_FACTOR = 4;\n\n/** Default number of parent levels {@link findAiAssetsRoot} inspects. */\nconst AI_ASSETS_WALK_LEVELS = 6;\n\nlet deployerLogger: ReturnType<typeof createLogger> | undefined;\n\nfunction log(): ReturnType<typeof createLogger> {\n  deployerLogger ??= createLogger({ kind: \"runner\", subkind: \"catalog-deployer\" });\n  return deployerLogger;\n}\n\n/**\n * Where the agent container binds its rclone FUSE mount. Nothing under this\n * path is a safe place to read an asset tree from: the mount is remote\n * (SharePoint / OneDrive / WebDAV) and can wedge indefinitely.\n */\nconst DEFAULT_WORKSPACE_MOUNT_DIR = \"/skaile/workspace\";\n\n/**\n * Env override for the workspace-mount path(s), comma-separated.\n *\n * Set it when the runner binds the mount somewhere other than\n * {@link DEFAULT_WORKSPACE_MOUNT_DIR}; set it to the empty string to disable\n * the guard entirely (single-machine dev, where nothing is a network mount).\n */\nexport const WORKSPACE_MOUNT_ENV_VAR = \"SKAILE_WORKSPACE_MOUNT_DIR\";\n\n/**\n * Resolve the directories treated as network mounts.\n *\n * Read per call rather than cached: the runner mutates `process.env` while\n * wiring a session, so a module-load snapshot would pin a pre-configuration\n * value.\n *\n * @returns Absolute mount paths; empty when the guard is disabled.\n * @docLink packages/asset-manager/concepts#catalog-deployer\n */\nexport function workspaceMountDirs(): string[] {\n  const raw = process.env[WORKSPACE_MOUNT_ENV_VAR];\n  if (raw === undefined) return [DEFAULT_WORKSPACE_MOUNT_DIR];\n  return raw\n    .split(\",\")\n    .map((segment) => segment.trim())\n    .filter((segment) => segment.length > 0)\n    .map((segment) => resolve(segment));\n}\n\n/**\n * Is `candidate` at, or inside, one of the known workspace mount paths?\n *\n * Pure path arithmetic — deliberately no filesystem access, because the whole\n * point is to decide *before* touching a path that might be unresponsive.\n *\n * @param candidate - Path to test.\n * @param mountDirs - Mount roots; defaults to {@link workspaceMountDirs}.\n * @docLink packages/asset-manager/concepts#catalog-deployer\n */\nexport function isUnderWorkspaceMount(\n  candidate: string,\n  mountDirs: string[] = workspaceMountDirs(),\n): boolean {\n  const target = resolve(candidate);\n  return mountDirs.some((dir) => {\n    const root = resolve(dir);\n    return target === root || target.startsWith(root + sep);\n  });\n}\n\n/**\n * Walk upward from `startDir` looking for an `ai-assets/` directory.\n *\n * Two properties matter beyond \"find the folder\":\n *\n * 1. **Never synchronous.** The walk probes up to six directories; any one of\n *    them can be on a FUSE mount, and the former `existsSync` chain blocked the\n *    event loop on the first unresponsive probe. Each probe is now awaited and\n *    deadline-bounded, so a wedged mount costs one skipped candidate.\n * 2. **Never resolves onto a mount.** A hit under the workspace mount is\n *    skipped with a warning rather than returned: accepting it would wire every\n *    later skill deploy — a recursive copy — to a remote filesystem. The walk\n *    continues upward, so a legitimate `ai-assets/` in a parent still wins.\n *\n * Only a **directory** counts. An `ai-assets` file would otherwise be returned\n * as a root and every later `join(root, source_path)` would fail with ENOTDIR.\n *\n * @param startDir - Directory to start from (typically the project dir).\n * @param opts - `levels` caps the upward walk; `mountDirs` overrides the mount\n *   roots (defaults to {@link workspaceMountDirs}).\n * @returns Absolute path to the `ai-assets/` directory, or `null` if none is\n *   reachable within `levels`.\n * @docLink packages/asset-manager/concepts#catalog-deployer\n */\nexport async function findAiAssetsRoot(\n  startDir: string,\n  opts?: { levels?: number; mountDirs?: string[] },\n): Promise<string | null> {\n  const mountDirs = opts?.mountDirs ?? workspaceMountDirs();\n  const levels = opts?.levels ?? AI_ASSETS_WALK_LEVELS;\n  let dir = resolve(startDir);\n  // Every level of a `/skaile/workspace/...` start dir is under the mount, so\n  // an unconditional warn would fire once per level for one lookup. Collect and\n  // report once — the operator needs the fact, not six copies of it.\n  const refused: string[] = [];\n\n  for (let i = 0; i < levels; i++) {\n    const candidate = join(dir, \"ai-assets\");\n    if (isUnderWorkspaceMount(candidate, mountDirs)) {\n      refused.push(candidate);\n    } else {\n      const isDir = await tryWithFsDeadline(\n        `stat ${candidate}`,\n        async () => (await stat(candidate)).isDirectory(),\n        false,\n      );\n      if (isDir) {\n        if (refused.length > 0) warnRefused(refused, mountDirs);\n        return candidate;\n      }\n    }\n    const parent = resolve(dir, \"..\");\n    if (parent === dir) break; // filesystem root — nothing further up\n    dir = parent;\n  }\n  if (refused.length > 0) warnRefused(refused, mountDirs);\n  return null;\n}\n\n/** Single warning for every `ai-assets` candidate skipped for sitting on a mount. */\nfunction warnRefused(refused: string[], mountDirs: string[]): void {\n  log().warn(\n    \"findAiAssetsRoot refused candidates under a workspace mount — deploying skills from a network mount can stall the session\",\n    { refused, mountDirs },\n  );\n}\n\n/**\n * Deploy a single catalog entry to the session skills directory.\n *\n * Copies the entire skill source directory into `skillsDir/<entry.name>/`.\n * If `context` is provided, a separate `CONTEXT.md` is written alongside\n * `SKILL.md` so the source file is never modified.\n *\n * Only `skill` entries are deployable; other kinds return an error.\n *\n * **Async by necessity.** This runs from the `session_init` command handler\n * with the WebSocket live, and both `assetsRoot` and `skillsDir` can sit on a\n * network mount. The former `cpSync`/`rmSync` pair parked the event loop for\n * the whole copy; every call is now awaited and deadline-bounded, so an\n * unresponsive mount fails one deployment instead of the session.\n *\n * @param entry - Compiled catalog entry to deploy.\n * @param options - Deployment target and optional context.\n * @returns `{ success: true }` on success, `{ success: false, error }` on failure.\n * @docLink packages/asset-manager/concepts#catalog-deployer\n */\nexport async function deployCatalogEntry(\n  entry: CatalogEntryCompiled,\n  options: DeployFromCatalogOptions,\n): Promise<{ success: boolean; error?: string }> {\n  const { assetsRoot, skillsDir, context } = options;\n\n  if (entry.kind !== \"skill\") {\n    return { success: false, error: `Cannot deploy ${entry.kind} directly — only skills` };\n  }\n\n  const sourcePath = join(assetsRoot, entry.source_path);\n  const skillMdPath = join(sourcePath, \"SKILL.md\");\n\n  const hasSkillMd = await tryWithFsDeadline(\n    `stat ${skillMdPath}`,\n    async () => {\n      await stat(skillMdPath);\n      return true;\n    },\n    false,\n  );\n  if (!hasSkillMd) {\n    return { success: false, error: `SKILL.md not found at ${skillMdPath}` };\n  }\n\n  const destDir = join(skillsDir, entry.name);\n\n  try {\n    await withFsDeadline(`mkdir ${destDir}`, () => mkdir(destDir, { recursive: true }));\n\n    // Copy the entire skill directory\n    await withFsDeadline(\n      `cp ${sourcePath} -> ${destDir}`,\n      () => cp(sourcePath, destDir, { recursive: true }),\n      fsDeadlineMs() * TREE_OP_DEADLINE_FACTOR,\n    );\n\n    // Write context to a separate CONTEXT.md — never modify the original SKILL.md.\n    // The agent discovers both files in the skill directory.\n    const contextPath = join(destDir, \"CONTEXT.md\");\n    if (context) {\n      await withFsDeadline(`write ${contextPath}`, () =>\n        writeFile(contextPath, `# Additional Context\\n\\n${context}\\n`, \"utf8\"),\n      );\n    } else {\n      // `force: true` makes this a single call: a stale CONTEXT.md is removed,\n      // an absent one is a no-op. The former existsSync probe only added a\n      // second trip to the same possibly-wedged mount.\n      await withFsDeadline(`rm ${contextPath}`, () => rm(contextPath, { force: true }));\n    }\n  } catch (err) {\n    return { success: false, error: err instanceof Error ? err.message : String(err) };\n  }\n\n  return { success: true };\n}\n\n/**\n * Remove a deployed skill directory from the session skills directory.\n *\n * @param name - Skill name (directory basename under `skillsDir`).\n * @param skillsDir - Absolute path to the session skills directory.\n * @returns `true` if the skill was found and removed; `false` if it was not\n *   deployed, or if the directory could not be reached within the deadline.\n * @docLink packages/asset-manager/concepts#catalog-deployer\n */\nexport async function undeployCatalogEntry(name: string, skillsDir: string): Promise<boolean> {\n  const destDir = join(skillsDir, name);\n  const exists = await tryWithFsDeadline(\n    `stat ${destDir}`,\n    async () => {\n      await stat(destDir);\n      return true;\n    },\n    false,\n  );\n  if (!exists) return false;\n  await withFsDeadline(\n    `rm -r ${destDir}`,\n    () => rm(destDir, { recursive: true, force: true }),\n    fsDeadlineMs() * TREE_OP_DEADLINE_FACTOR,\n  );\n  return true;\n}\n\n/**\n * Deploy multiple catalog entries in a single batch operation.\n *\n * Non-skill entries (flows, agents, etc.) are automatically skipped and\n * recorded in `result.skipped`. Deployment failures are collected in\n * `result.errors` without aborting the rest of the batch.\n *\n * @param entries - Compiled catalog entries to deploy.\n * @param options - Deployment target and optional context.\n * @returns Aggregated {@link DeployResult} with deployed, skipped, and error lists.\n * @docLink packages/asset-manager/concepts#catalog-deployer\n */\nexport async function deployAll(\n  entries: CatalogEntryCompiled[],\n  options: DeployFromCatalogOptions,\n): Promise<DeployResult> {\n  const result: DeployResult = { deployed: [], skipped: [], errors: [] };\n\n  for (const entry of entries) {\n    if (entry.kind !== \"skill\") {\n      result.skipped.push(entry.id);\n      continue;\n    }\n\n    // Serial on purpose: concurrent recursive copies onto one mount multiply\n    // the queue depth on the exact resource that is already the bottleneck.\n    const r = await deployCatalogEntry(entry, options);\n    if (r.success) {\n      result.deployed.push(entry.id);\n    } else {\n      result.errors.push(`${entry.id}: ${r.error}`);\n    }\n  }\n\n  return result;\n}\n\n/**\n * Resolve a flow's skill dependencies from the full catalog entry list.\n *\n * Partitions `flow.required_skills` and `flow.optional_skills` into resolved\n * entries and a list of names that could not be found. Missing optional skills\n * are silently ignored (they do not appear in `missing`).\n *\n * @param flow - Compiled flow entry whose skill dependencies should be resolved.\n * @param allEntries - Full set of compiled catalog entries to search.\n * @returns Object containing resolved `required` entries, resolved `optional` entries,\n *   and `missing` skill names that were listed as required but not found.\n * @docLink packages/asset-manager/concepts#catalog-deployer\n */\nexport function resolveFlowSkills(\n  flow: CatalogEntryCompiled,\n  allEntries: CatalogEntryCompiled[],\n): { required: CatalogEntryCompiled[]; optional: CatalogEntryCompiled[]; missing: string[] } {\n  const skillsByName = new Map<string, CatalogEntryCompiled>();\n  for (const e of allEntries) {\n    if (e.kind === \"skill\") skillsByName.set(e.name, e);\n  }\n\n  const required: CatalogEntryCompiled[] = [];\n  const optional: CatalogEntryCompiled[] = [];\n  const missing: string[] = [];\n\n  for (const name of flow.required_skills ?? []) {\n    const entry = skillsByName.get(name);\n    if (entry) required.push(entry);\n    else missing.push(name);\n  }\n\n  for (const name of flow.optional_skills ?? []) {\n    const entry = skillsByName.get(name);\n    if (entry) optional.push(entry);\n    // Optional skills don't count as missing\n  }\n\n  return { required, optional, missing };\n}\n"]}

package/dist/{chunk-DIGFA7Z5.js → chunk-Q7CU5GQO.js}

@@ -1,6 +1,6 @@
-import { ReconfigureLedger, classifyGenericErrorMessage, stripRunnerPrivateEnv } from './chunk-XFIEVEU7.js';
+import { ReconfigureLedger, classifyGenericErrorMessage, RUNNER_AGENT_ENV_KEYS, stripRunnerPrivateEnv } from './chunk-6OHZUUR7.js';
 import { wrapAgentCommand, resolveAgentExec } from './chunk-7DN6JKP2.js';
-import { AgentHarness } from './chunk-FKQNBCDW.js';
+import { AgentHarness } from './chunk-HDVLBEEX.js';
 import { spawn } from 'child_process';
 import { createInterface } from 'readline';
 
@@ -294,7 +294,15 @@ ${message}` : message;
    */
   baseEnv(extraKeys = []) {
     const out = {};
-    const explicit = ["PATH", "HOME", "USER", "HOSTNAME", "SKAILE_SESSION_ID", ...extraKeys];
+    const explicit = [
+      "PATH",
+      "HOME",
+      "USER",
+      "HOSTNAME",
+      "SKAILE_SESSION_ID",
+      ...RUNNER_AGENT_ENV_KEYS,
+      ...extraKeys
+    ];
     for (const key of explicit) {
       const v = process.env[key];
       if (v !== void 0) out[key] = v;
@@ -442,5 +450,5 @@ function extractCost(json) {
 }
 
 export { SubprocessCliHarness, extractCost, extractText, extractTokens };
-//# sourceMappingURL=chunk-DIGFA7Z5.js.map
-//# sourceMappingURL=chunk-DIGFA7Z5.js.map
+//# sourceMappingURL=chunk-Q7CU5GQO.js.map
+//# sourceMappingURL=chunk-Q7CU5GQO.js.map

package/dist/chunk-Q7CU5GQO.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../bridge/src/harnesses/_subprocess-cli.ts"],"names":[],"mappings":";;;;;;AA2CO,IAAe,oBAAA,GAAf,cAA4C,YAAA,CAAa;AAAA;AAAA,EAe3C,IAAA,GAA6B,OAAA;AAAA,EAEtC,MAAA;AAAA,EACO,QAAA;AAAA,EAET,IAAA,GAA4B,IAAA;AAAA,EAC5B,EAAA,GAAuB,IAAA;AAAA,EACvB,eAAyB,EAAC;AAAA,EAC1B,YAAA,GAAe,EAAA;AAAA,EACf,OAAA,GAAU,KAAA;AAAA;AAAA,EAGV,QAAA,GAAW,EAAA;AAAA,EACX,eAAA,GAAkB,KAAA;AAAA,EAClB,qBAAqC,EAAC;AAAA,EACtC,SAAA,GAAY,KAAA;AAAA,EACZ,QAAA,GAAW,KAAA;AAAA,EACX,WAAA,GAAmC,IAAA;AAAA,EACnC,UAAA,GAA4C,IAAA;AAAA,EAE1C,UAAA;AAAA,EACA,WAAA,GAAiC,IAAA;AAAA,EAE3C,YAAY,MAAA,EAAqB;AAC/B,IAAA,KAAA,EAAM;AACN,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,QAAA,GAAW,IAAI,iBAAA,CAAkB;AAAA,MACpC,MAAA,EAAQ,MAAM,IAAA,CAAK,MAAA;AAAA,MACnB,SAAA,EAAW,CAAC,OAAA,KAAY,IAAA,CAAK,eAAe,OAAO;AAAA,KACpD,CAAA;AAAA,EACH;AAAA,EAEA,IAAa,gBAAA,GAAuC;AAClD,IAAA,OAAO,IAAA,CAAK,UAAA;AAAA,EACd;AAAA,EAES,QAAA,GAA+B;AACtC,IAAA,OAAO,KAAK,MAAA,CAAO,KAAA;AAAA,EACrB;AAAA,EAES,aAAA,GAAmC;AAC1C,IAAA,OAAO,IAAA,CAAK,WAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA,EAMS,YAAY,KAAA,EAAsD;AACzE,IAAA,OAAO,IAAA,CAAK,QAAA,CAAS,WAAA,CAAY,KAAK,CAAA;AAAA,EACxC;AAAA;AAAA;AAAA;AAAA;AAAA,EAMU,eAAe,OAAA,EAAmC;AACrD,EACP;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,KAAA,GAAuB;AAC3B,IAAA,IAAA,CAAK,OAAA,GAAU,IAAA;AAAA,EACjB;AAAA,EAEA,IAAI,SAAA,GAAqB;AACvB,IAAA,OAAO,IAAA,CAAK,IAAA,KAAS,IAAA,IAAQ,CAAC,KAAK,IAAA,CAAK,MAAA;AAAA,EAC1C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,OAAO,OAAA,EAAgC;AAC3C,IAAA,IAAI,IAAA,CAAK,MAAM,MAAM,IAAI,MAAM,CAAA,EAAG,IAAA,CAAK,WAAW,CAAA,yBAAA,CAA2B,CAAA;AAC7E,IAAA,IAAI,CAAC,IAAA,CAAK,OAAA,EAAS,MAAM,KAAK,KAAA,EAAM;AAEpC,IAAA,IAAA,CAAK,QAAA,GAAW,EAAA;AAChB,IAAA,IAAA,CAAK,eAAA,GAAkB,KAAA;AACvB,IAAA,IAAA,CAAK,qBAAqB,EAAC;AAC3B,IAAA,IAAA,CAAK,SAAA,GAAY,KAAA;AACjB,IAAA,IAAA,CAAK,QAAA,GAAW,KAAA;AAChB,IAAA,IAAA,CAAK,eAAe,EAAC;AACrB,IAAA,IAAA,CAAK,YAAA,GAAe,EAAA;AACpB,IAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AAEnB,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,aAAA,CAAc,OAAO,CAAA;AAC3C,IAAA,MAAM,cAAc,OAAA,CAAQ,GAAA,CAAI,CAAA,EAAG,IAAA,CAAK,SAAS,CAAA,WAAA,CAAa,CAAA;AAC9D,IAAA,MAAM,OAAA,GAAU,QAAQ,GAAA,CAAI,CAAA,EAAG,KAAK,SAAS,CAAA,eAAA,CAAiB,IACzD,OAAA,CAAQ,GAAA,CAAI,GAAG,IAAA,CAAK,SAAS,iBAAiB,CAAA,CAAa,KAAA,CAAM,KAAK,CAAA,CAAE,MAAA,CAAO,OAAO,CAAA,GACvF,EAAC;AACL,IAAA,MAAM,GAAA,GAAM,eAAe,IAAA,CAAK,UAAA;AAChC,IAAA,MAAM,IAAA,GAAO,CAAC,GAAG,OAAA,EAAS,GAAG,KAAK,SAAA,CAAU,QAAA,EAAU,IAAA,CAAK,UAAU,CAAC,CAAA;AACtE,IAAA,MAAM,GAAA,GAAM,KAAK,QAAA,EAAS;AAE1B,IAAA,OAAO,IAAI,OAAA,CAAc,CAAC,OAAA,EAAS,MAAA,KAAW;AAC5C,MAAA,IAAA,CAAK,WAAA,GAAc,OAAA;AACnB,MAAA,IAAA,CAAK,UAAA,GAAa,MAAA;AAClB,MAAA,IAAA,CAAK,GAAA,CAAI,KAAK,cAAA,EAAgB;AAAA,QAC5B,GAAA;AAAA,QACA,GAAA,EAAK,KAAK,MAAA,CAAO,GAAA;AAAA,QACjB,MAAA,EAAQ,OAAA,CAAQ,IAAA,CAAK,UAAU;AAAA,OAChC,CAAA;AAGD,MAAA,MAAM,MAAA,GAAS,gBAAA,CAAiB,GAAA,EAAK,IAAA,EAAM,kBAAkB,CAAA;AAC7D,MAAA,MAAM,IAAA,GAAO,KAAA,CAAM,MAAA,CAAO,OAAA,EAAS,OAAO,IAAA,EAAM;AAAA,QAC9C,GAAA,EAAK,KAAK,MAAA,CAAO,GAAA;AAAA,QACjB,GAAA;AAAA,QACA,KAAA,EAAO,CAAC,QAAA,EAAU,MAAA,EAAQ,MAAM;AAAA,OACjC,CAAA;AACD,MAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,MAAA,MAAM,WAAA,GAAc,IAAA;AAEpB,MAAA,WAAA,CAAY,EAAA,CAAG,OAAA,EAAS,CAAC,GAAA,KAAe;AACtC,QAAA,MAAM,MAAA,GAAS,IAAA,CAAK,oBAAA,CAAqB,GAA4B,CAAA;AACrE,QAAA,IAAA,CAAK,IAAI,KAAA,CAAM,aAAA,EAAe,GAAA,EAAK,EAAE,QAAQ,CAAA;AAE7C,QAAA,IAAA,CAAK,SAAA,CAAU,QAAQ,IAAI,CAAA;AAC3B,QAAA,IAAA,CAAK,IAAA,CAAK,aAAA,EAAe,EAAE,IAAA,EAAM,aAAkC,CAAA;AACnE,QAAA,IAAA,CAAK,YAAA,CAAa,MAAA,CAAO,MAAA,CAAO,IAAI,KAAA,CAAM,MAAA,CAAO,OAAO,CAAA,EAAG,EAAE,MAAA,EAAQ,CAAC,CAAA;AAAA,MACxE,CAAC,CAAA;AAED,MAAA,IAAI,KAAK,MAAA,EAAQ;AACf,QAAA,IAAI,IAAA,CAAK,SAAS,OAAA,EAAS;AACzB,UAAA,MAAM,KAAK,eAAA,CAAgB,EAAE,KAAA,EAAO,IAAA,CAAK,QAAQ,CAAA;AACjD,UAAA,IAAA,CAAK,EAAA,GAAK,EAAA;AACV,UAAC,EAAA,CAA+B,GAAG,MAAA,EAAQ,CAAC,SAAiB,IAAA,CAAK,YAAA,CAAa,IAAI,CAAC,CAAA;AAAA,QACtF,CAAA,MAAO;AACL,UAAA,IAAA,CAAK,MAAA,CAAO,YAAY,MAAM,CAAA;AAC9B,UAAA,IAAA,CAAK,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AACxC,YAAA,IAAA,CAAK,YAAA,IAAgB,KAAA;AAAA,UACvB,CAAC,CAAA;AAAA,QACH;AAAA,MACF;AAEA,MAAA,IAAI,KAAK,MAAA,EAAQ;AACf,QAAA,MAAM,WAAW,eAAA,CAAgB,EAAE,KAAA,EAAO,IAAA,CAAK,QAAQ,CAAA;AACvD,QAAC,QAAA,CAAqC,EAAA,CAAG,MAAA,EAAQ,CAAC,IAAA,KAAiB;AACjE,UAAA,IAAA,CAAK,GAAA,CAAI,KAAA,CAAM,QAAA,EAAU,EAAE,MAAM,CAAA;AACjC,UAAA,IAAA,CAAK,YAAA,CAAa,KAAK,IAAI,CAAA;AAC3B,UAAA,IAAI,KAAK,YAAA,CAAa,MAAA,GAAS,EAAA,EAAI,IAAA,CAAK,aAAa,KAAA,EAAM;AAAA,QAC7D,CAAC,CAAA;AAAA,MACH;AAEA,MAAA,WAAA,CAAY,EAAA,CAAG,MAAA,EAAQ,CAAC,IAAA,EAAqB,MAAA,KAAkC;AAC7E,QAAA,IAAA,CAAK,IAAI,IAAA,CAAK,YAAA,EAAc,EAAE,IAAA,EAAM,QAAQ,CAAA;AAC5C,QAAA,IAAA,CAAK,MAAA,CAAO,MAAM,MAAM,CAAA;AAAA,MAC1B,CAAC,CAAA;AAAA,IACH,CAAC,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,KAAA,GAAuB;AAC3B,IAAA,IAAA,CAAK,QAAA,GAAW,IAAA;AAChB,IAAA,IAAA,CAAK,IAAA,EAAM,KAAK,SAAS,CAAA;AAAA,EAC3B;AAAA,EAEA,IAAA,GAAa;AACX,IAAA,IAAA,CAAK,QAAA,GAAW,IAAA;AAChB,IAAA,IAAA,CAAK,IAAA,EAAM,KAAK,SAAS,CAAA;AACzB,IAAA,IAAA,CAAK,OAAA,EAAQ;AAAA,EACf;AAAA,EAEA,MAAM,YAAA,GAA8B;AAClC,IAAA,IAAA,CAAK,IAAA,EAAK;AACV,IAAA,IAAA,CAAK,UAAA,GAAa,MAAA;AAClB,IAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AAAA,EACrB;AAAA;AAAA,EAWU,WAAW,KAAA,EAAsB;AAAA,EAAC;AAAA;AAAA,EAGlC,eAAe,IAAA,EAAoB;AAAA,EAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUpC,YAAA,CAAa,MAAqB,MAAA,EAAkD;AAC5F,IAAA,IAAI,SAAS,CAAA,IAAM,IAAA,KAAS,IAAA,IAAQ,MAAA,KAAW,MAAO,OAAO,IAAA;AAC7D,IAAA,MAAM,OAAO,IAAA,CAAK,YAAA,CAAa,MAAM,GAAG,CAAA,CAAE,KAAK,IAAI,CAAA;AACnD,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,CAAA,EAAG,IAAA,CAAK,WAAW,CAAA,kBAAA,EAAqB,IAAA,IAAQ,MAAM,CAAA,EAAG,IAAA,GAAO,CAAA,EAAA,EAAK,IAAI,CAAA,CAAA,GAAK,EAAE,CAAA,CAAA;AAAA,MACzF,QAAA,EAAU,SAAA;AAAA,MACV,SAAA,EAAW,IAAA;AAAA,MACX,IAAA,EAAM,IAAA,IAAQ,CAAA,IAAA,EAAO,IAAA,CAAK,WAAW,CAAA,mDAAA;AAAA,KACvC;AAAA,EACF;AAAA;AAAA;AAAA,EAKU,cAAc,OAAA,EAAyB;AAC/C,IAAA,OAAO,KAAK,MAAA,CAAO,YAAA,GAAe,CAAA,EAAG,IAAA,CAAK,OAAO,YAAY;;AAAA;;AAAA,EAAc,OAAO,CAAA,CAAA,GAAK,OAAA;AAAA,EACzF;AAAA,EAEU,mBAAmB,QAAA,EAAwB;AACnD,IAAA,IAAI,CAAC,KAAK,eAAA,EAAiB;AACzB,MAAA,IAAA,CAAK,eAAA,GAAkB,IAAA;AACvB,MAAA,IAAA,CAAK,QAAA,GAAW,EAAA;AAChB,MAAA,IAAA,CAAK,KAAK,aAAA,EAAe;AAAA,QACvB,IAAA,EAAM,eAAA;AAAA,QACN,OAAA,EAAS,YAAY,EAAE;AAAA,OACH,CAAA;AAAA,IACxB;AACA,IAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,UAAA,CAAW,IAAA,CAAK,QAAQ,CAAA,GAC3C,QAAA,CAAS,KAAA,CAAM,IAAA,CAAK,QAAA,CAAS,MAAM,CAAA,GACnC,QAAA;AACJ,IAAA,IAAA,CAAK,QAAA,GAAW,QAAA;AAChB,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,IAAA,CAAK,KAAK,aAAA,EAAe;AAAA,QACvB,IAAA,EAAM,gBAAA;AAAA,QACN,OAAA,EAAS,YAAY,QAAQ,CAAA;AAAA,QAC7B,UAAA,EAAY;AAAA,OACQ,CAAA;AAAA,IACxB;AAAA,EACF;AAAA,EAEU,iBAAiB,QAAA,EAAyB;AAClD,IAAA,IAAI,CAAC,KAAK,eAAA,EAAiB;AAC3B,IAAA,MAAM,IAAA,GAAO,YAAY,IAAA,CAAK,QAAA;AAC9B,IAAA,IAAA,CAAK,KAAK,aAAA,EAAe;AAAA,MACvB,IAAA,EAAM,aAAA;AAAA,MACN,OAAA,EAAS,YAAY,IAAI;AAAA,KACL,CAAA;AACtB,IAAA,IAAA,CAAK,eAAA,GAAkB,KAAA;AACvB,IAAA,IAAA,CAAK,QAAA,GAAW,EAAA;AAAA,EAClB;AAAA,EAEU,YAAA,CAAa,MAAc,KAAA,EAAsB;AACzD,IAAA,IAAA,CAAK,KAAK,aAAA,EAAe;AAAA,MACvB,IAAA,EAAM,WAAA;AAAA,MACN,IAAA;AAAA,MACA,IAAA,EAAM,EAAE,IAAA,EAAK;AAAA,MACb;AAAA,KACoB,CAAA;AAAA,EACxB;AAAA,EAEU,cAAA,CAAe,IAAA,EAAc,IAAA,EAAe,OAAA,GAAU,KAAA,EAAa;AAC3E,IAAA,IAAA,CAAK,kBAAA,CAAmB,IAAA,CAAK,EAAE,IAAA,EAAM,MAAA,EAAQ,QAAA,EAAU,IAAA,EAAM,OAAA,EAAS,EAAA,EAAI,IAAA,EAAM,OAAA,EAAS,CAAA;AACzF,IAAA,IAAA,CAAK,KAAK,aAAA,EAAe;AAAA,MACvB,IAAA,EAAM,oBAAA;AAAA,MACN,QAAA,EAAU;AAAA,KACU,CAAA;AAAA,EACxB;AAAA,EAEQ,gBAAA,GAAyB;AAC/B,IAAA,IAAI,IAAA,CAAK,kBAAA,CAAmB,MAAA,KAAW,CAAA,EAAG;AAC1C,IAAA,IAAA,CAAK,KAAK,aAAA,EAAe;AAAA,MACvB,IAAA,EAAM,UAAA;AAAA,MACN,WAAA,EAAa,CAAC,GAAG,IAAA,CAAK,kBAAkB;AAAA,KACpB,CAAA;AACtB,IAAA,IAAA,CAAK,qBAAqB,EAAC;AAAA,EAC7B;AAAA,EAEU,WAAW,IAAA,EAKZ;AACP,IAAA,IAAA,CAAK,gBAAA,EAAiB;AACtB,IAAA,IAAA,CAAK,gBAAA,EAAiB;AACtB,IAAA,IAAI,IAAA,CAAK,MAAA,EAAQ,IAAA,CAAK,WAAA,GAAc,IAAA,CAAK,MAAA;AACzC,IAAA,IAAA,CAAK,SAAA,GAAY,IAAA;AACjB,IAAA,IAAA,CAAK,KAAK,aAAA,EAAe;AAAA,MACvB,IAAA,EAAM,QAAA;AAAA,MACN,OAAA,EAAS,KAAK,OAAA,IAAW,SAAA;AAAA,MACzB,SAAS,IAAA,CAAK,OAAA;AAAA,MACd,OAAA,EAAS,KAAK,OAAA,IAAW,CAAA;AAAA,MACzB,GAAI,KAAK,MAAA,GAAS,EAAE,QAAQ,IAAA,CAAK,MAAA,KAAW;AAAC,KACzB,CAAA;AAAA,EACxB;AAAA,EAEU,SAAA,CAAU,MAAA,EAAoB,KAAA,GAAQ,KAAA,EAAa;AAC3D,IAAA,IAAA,CAAK,KAAK,aAAA,EAAe;AAAA,MACvB,IAAA,EAAM,OAAA;AAAA,MACN,OAAO,MAAA,CAAO,OAAA;AAAA,MACd,MAAA;AAAA,MACA;AAAA,KACoB,CAAA;AAAA,EACxB;AAAA,EAEU,cAAA,CAAe,IAAa,IAAA,EAAqB;AACzD,IAAA,IAAI,CAAC,EAAA,IAAM,EAAA,KAAO,IAAA,CAAK,UAAA,EAAY;AACnC,IAAA,IAAA,CAAK,UAAA,GAAa,EAAA;AAClB,IAAA,IAAA,CAAK,KAAK,aAAA,EAAe;AAAA,MACvB,IAAA,EAAM,cAAA;AAAA,MACN,gBAAA,EAAkB,EAAA;AAAA,MAClB,GAAI,IAAA,GAAO,EAAE,WAAA,EAAa,IAAA,KAAS;AAAC,KAChB,CAAA;AAAA,EACxB;AAAA;AAAA,EAGU,gBAAgB,OAAA,EAA6B;AACrD,IAAA,MAAM,OAAA,GAAU,4BAA4B,OAAO,CAAA;AACnD,IAAA,IAAI,CAAC,OAAA,EAAS;AACZ,MAAA,OAAO;AAAA,QACL,OAAA;AAAA,QACA,QAAA,EAAU,SAAA;AAAA,QACV,SAAA,EAAW,IAAA;AAAA,QACX,IAAA,EAAM,CAAA,cAAA,EAAiB,IAAA,CAAK,WAAW,CAAA,sCAAA;AAAA,OACzC;AAAA,IACF;AACA,IAAA,MAAM,IAAA,GACJ,QAAQ,QAAA,KAAa,MAAA,GACjB,4CAA4C,IAAA,CAAK,WAAW,MAC5D,OAAA,CAAQ,QAAA,KAAa,eACnB,CAAA,EAAG,IAAA,CAAK,WAAW,CAAA,wDAAA,CAAA,GACnB,OAAA,CAAQ,aAAa,OAAA,GACnB,wGAAA,GACA,CAAA,0CAAA,EAA6C,IAAA,CAAK,WAAW,CAAA,CAAA,CAAA;AACvE,IAAA,OAAO,EAAE,SAAS,QAAA,EAAU,OAAA,CAAQ,UAAU,SAAA,EAAW,OAAA,CAAQ,WAAW,IAAA,EAAK;AAAA,EACnF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiBU,OAAA,CAAQ,SAAA,GAAsB,EAAC,EAA2B;AAClE,IAAA,MAAM,MAA8B,EAAC;AACrC,IAAA,MAAM,QAAA,GAAW;AAAA,MACf,MAAA;AAAA,MACA,MAAA;AAAA,MACA,MAAA;AAAA,MACA,UAAA;AAAA,MACA,mBAAA;AAAA,MACA,GAAG,qBAAA;AAAA,MACH,GAAG;AAAA,KACL;AACA,IAAA,KAAA,MAAW,OAAO,QAAA,EAAU;AAC1B,MAAA,MAAM,CAAA,GAAI,OAAA,CAAQ,GAAA,CAAI,GAAG,CAAA;AACzB,MAAA,IAAI,CAAA,KAAM,MAAA,EAAW,GAAA,CAAI,GAAG,CAAA,GAAI,CAAA;AAAA,IAClC;AACA,IAAA,KAAA,MAAW,CAAC,KAAK,KAAK,CAAA,IAAK,OAAO,OAAA,CAAQ,OAAA,CAAQ,GAAG,CAAA,EAAG;AACtD,MAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC/B,MAAA,IAAI,GAAA,CAAI,UAAA,CAAW,CAAA,EAAG,IAAA,CAAK,SAAS,UAAU,CAAA,IAAK,GAAA,CAAI,UAAA,CAAW,WAAW,CAAA,EAAG;AAC9E,QAAA,GAAA,CAAI,GAAG,CAAA,GAAI,KAAA;AAAA,MACb;AAAA,IACF;AACA,IAAA,IAAI,IAAA,CAAK,OAAO,UAAA,EAAY;AAC1B,MAAA,GAAA,CAAI,eAAA,GAAkB,CAAA,QAAA,EAAW,IAAA,CAAK,MAAA,CAAO,UAAU,CAAA,qCAAA,CAAA;AAAA,IACzD;AACA,IAAA,IAAI,IAAA,CAAK,OAAO,GAAA,EAAK,MAAA,CAAO,OAAO,GAAA,EAAK,IAAA,CAAK,OAAO,GAAG,CAAA;AACvD,IAAA,OAAO,sBAAsB,GAAG,CAAA;AAAA,EAClC;AAAA;AAAA,EAIQ,aAAa,IAAA,EAAoB;AACvC,IAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAK,EAAG;AAClB,IAAA,IAAI,IAAA;AACJ,IAAA,IAAI;AACF,MAAA,IAAA,GAAO,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,IACxB,CAAA,CAAA,MAAQ;AACN,MAAA,IAAA,CAAK,GAAA,CAAI,KAAA,CAAM,sBAAA,EAAwB,EAAE,MAAM,CAAA;AAC/C,MAAA;AAAA,IACF;AACA,IAAA,IAAI;AACF,MAAA,IAAA,CAAK,WAAW,IAAI,CAAA;AAAA,IACtB,SAAS,GAAA,EAAK;AACZ,MAAA,IAAA,CAAK,GAAA,CAAI,KAAK,kBAAA,EAAoB,EAAE,OAAO,MAAA,CAAO,GAAG,GAAG,CAAA;AAAA,IAC1D;AAAA,EACF;AAAA,EAEQ,MAAA,CAAO,MAAqB,MAAA,EAAqC;AACvE,IAAA,IAAA,CAAK,OAAA,EAAQ;AAEb,IAAA,IAAI,KAAK,QAAA,EAAU;AACjB,MAAA,IAAA,CAAK,gBAAA,EAAiB;AACtB,MAAA,IAAA,CAAK,gBAAA,EAAiB;AACtB,MAAA,IAAA,CAAK,IAAA,CAAK,aAAA,EAAe,EAAE,IAAA,EAAM,aAAkC,CAAA;AACnE,MAAA,IAAA,CAAK,aAAA,EAAc;AACnB,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,KAAK,IAAA,KAAS,UAAA,KAAe,IAAA,KAAS,CAAA,IAAK,SAAS,IAAA,CAAA,EAAO;AAC7D,MAAA,IAAI;AACF,QAAA,IAAA,CAAK,cAAA,CAAe,KAAK,YAAY,CAAA;AAAA,MACvC,SAAS,GAAA,EAAK;AACZ,QAAA,IAAA,CAAK,GAAA,CAAI,KAAK,sBAAA,EAAwB,EAAE,OAAO,MAAA,CAAO,GAAG,GAAG,CAAA;AAAA,MAC9D;AAAA,IACF;AAEA,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,YAAA,CAAa,IAAA,EAAM,MAAM,CAAA;AAC9C,IAAA,IAAI,OAAA,IAAW,CAAC,IAAA,CAAK,SAAA,EAAW;AAC9B,MAAA,IAAA,CAAK,gBAAA,EAAiB;AACtB,MAAA,IAAA,CAAK,gBAAA,EAAiB;AACtB,MAAA,IAAA,CAAK,SAAA,CAAU,SAAS,IAAI,CAAA;AAC5B,MAAA,IAAA,CAAK,IAAA,CAAK,aAAA,EAAe,EAAE,IAAA,EAAM,aAAkC,CAAA;AACnE,MAAA,IAAA,CAAK,YAAA,CAAa,MAAA,CAAO,MAAA,CAAO,IAAI,KAAA,CAAM,OAAA,CAAQ,OAAO,CAAA,EAAG,EAAE,MAAA,EAAQ,OAAA,EAAS,CAAC,CAAA;AAChF,MAAA;AAAA,IACF;AAIA,IAAA,IAAI,CAAC,KAAK,SAAA,EAAW,IAAA,CAAK,WAAW,EAAE,OAAA,EAAS,kBAAkB,CAAA;AAAA,SAC7D;AACH,MAAA,IAAA,CAAK,gBAAA,EAAiB;AACtB,MAAA,IAAA,CAAK,gBAAA,EAAiB;AAAA,IACxB;AACA,IAAA,IAAA,CAAK,IAAA,CAAK,aAAA,EAAe,EAAE,IAAA,EAAM,aAAkC,CAAA;AACnE,IAAA,IAAA,CAAK,aAAA,EAAc;AAAA,EACrB;AAAA,EAEQ,aAAA,GAAsB;AAC5B,IAAA,MAAM,UAAU,IAAA,CAAK,WAAA;AACrB,IAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AACnB,IAAA,IAAA,CAAK,UAAA,GAAa,IAAA;AAClB,IAAA,OAAA,IAAU;AAAA,EACZ;AAAA,EAEQ,aAAa,GAAA,EAAkB;AACrC,IAAA,MAAM,SAAS,IAAA,CAAK,UAAA;AACpB,IAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AACnB,IAAA,IAAA,CAAK,UAAA,GAAa,IAAA;AAClB,IAAA,MAAA,GAAS,GAAG,CAAA;AAAA,EACd;AAAA,EAEQ,OAAA,GAAgB;AACtB,IAAA,IAAA,CAAK,IAAI,KAAA,EAAM;AACf,IAAA,IAAA,CAAK,EAAA,GAAK,IAAA;AACV,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,EACd;AAAA,EAEQ,qBAAqB,GAAA,EAAwC;AACnE,IAAA,IAAI,GAAA,CAAI,SAAS,QAAA,EAAU;AACzB,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,CAAA,EAAG,IAAA,CAAK,UAAU,CAAA,kBAAA,CAAA;AAAA,QAC3B,QAAA,EAAU,QAAA;AAAA,QACV,SAAA,EAAW,KAAA;AAAA,QACX,IAAA,EAAM,KAAK,WAAA;AAAY,OACzB;AAAA,IACF;AACA,IAAA,IAAI,GAAA,CAAI,SAAS,QAAA,EAAU;AACzB,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,CAAA,0BAAA,EAA6B,IAAA,CAAK,UAAU,CAAA,CAAA;AAAA,QACrD,QAAA,EAAU,QAAA;AAAA,QACV,SAAA,EAAW,KAAA;AAAA,QACX,IAAA,EAAM,CAAA,+BAAA,EAAkC,IAAA,CAAK,UAAU,CAAA,QAAA;AAAA,OACzD;AAAA,IACF;AACA,IAAA,OAAO;AAAA,MACL,SAAS,GAAA,CAAI,OAAA;AAAA,MACb,QAAA,EAAU,SAAA;AAAA,MACV,SAAA,EAAW,IAAA;AAAA,MACX,IAAA,EAAM,CAAA,6CAAA,EAAgD,IAAA,CAAK,WAAW,CAAA,YAAA;AAAA,KACxE;AAAA,EACF;AACF;AAOA,SAAS,YAAY,IAAA,EAA4B;AAC/C,EAAA,OAAO,EAAE,IAAA,EAAM,WAAA,EAAa,OAAA,EAAS,CAAC,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,CAAA,EAAE;AAChE;AAGO,SAAS,YAAY,IAAA,EAAmB;AAC7C,EAAA,IAAI,OAAO,IAAA,EAAM,IAAA,KAAS,QAAA,SAAiB,IAAA,CAAK,IAAA;AAChD,EAAA,IAAI,OAAO,IAAA,EAAM,KAAA,KAAU,QAAA,SAAiB,IAAA,CAAK,KAAA;AACjD,EAAA,IAAI,OAAO,IAAA,EAAM,OAAA,KAAY,QAAA,SAAiB,IAAA,CAAK,OAAA;AACnD,EAAA,IAAI,OAAO,IAAA,EAAM,QAAA,KAAa,QAAA,SAAiB,IAAA,CAAK,QAAA;AACpD,EAAA,MAAM,MAAM,IAAA,EAAM,OAAA;AAClB,EAAA,IAAI,OAAO,GAAA,EAAK,OAAA,KAAY,QAAA,SAAiB,GAAA,CAAI,OAAA;AACjD,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,GAAA,EAAK,OAAO,CAAA,EAAG;AAC/B,IAAA,OAAO,IAAI,OAAA,CACR,MAAA;AAAA,MACC,CAAC,CAAA,KAAA,CAAY,CAAA,EAAG,IAAA,KAAS,MAAA,IAAU,GAAG,IAAA,KAAS,MAAA,KAAc,OAAO,CAAA,EAAG,IAAA,KAAS;AAAA,KAClF,CACC,IAAI,CAAC,CAAA,KAAW,EAAE,IAAI,CAAA,CACtB,KAAK,EAAE,CAAA;AAAA,EACZ;AACA,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,IAAA,EAAM,KAAK,CAAA,EAAG;AAC9B,IAAA,OAAO,KAAK,KAAA,CACT,MAAA,CAAO,CAAC,CAAA,KAAW,OAAO,CAAA,EAAG,IAAA,KAAS,QAAQ,CAAA,CAC9C,IAAI,CAAC,CAAA,KAAW,EAAE,IAAI,CAAA,CACtB,KAAK,EAAE,CAAA;AAAA,EACZ;AAEA,EAAA,IAAI,OAAO,IAAA,EAAM,IAAA,EAAM,SAAS,QAAA,EAAU,OAAO,KAAK,IAAA,CAAK,IAAA;AAC3D,EAAA,OAAO,EAAA;AACT;AAGO,SAAS,cAAc,IAAA,EAA8B;AAC1D,EAAA,MAAM,CAAA,GAAI,MAAM,KAAA,IAAS,IAAA,EAAM,OAAO,KAAA,IAAS,IAAA,EAAM,KAAA,IAAS,IAAA,EAAM,MAAA,IAAU,IAAA;AAC9E,EAAA,IAAI,CAAC,CAAA,IAAK,OAAO,CAAA,KAAM,UAAU,OAAO,IAAA;AACxC,EAAA,MAAM,KAAA,GAAQ,EAAE,YAAA,IAAgB,CAAA,CAAE,eAAe,CAAA,CAAE,aAAA,IAAiB,CAAA,CAAE,gBAAA,IAAoB,CAAA,CAAE,KAAA;AAC5F,EAAA,MAAM,MAAA,GACJ,EAAE,aAAA,IAAiB,CAAA,CAAE,gBAAgB,CAAA,CAAE,iBAAA,IAAqB,CAAA,CAAE,oBAAA,IAAwB,CAAA,CAAE,MAAA;AAC1F,EAAA,MAAM,SAAA,GAAY,CAAA,CAAE,mBAAA,IAAuB,CAAA,CAAE,mBAAmB,CAAA,CAAE,uBAAA;AAClE,EAAA,IAAI,KAAA,KAAU,MAAA,IAAa,MAAA,KAAW,MAAA,EAAW,OAAO,IAAA;AACxD,EAAA,MAAM,SAAqB,EAAC;AAC5B,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,EAAU,MAAA,CAAO,WAAA,GAAc,KAAA;AACpD,EAAA,IAAI,OAAO,MAAA,KAAW,QAAA,EAAU,MAAA,CAAO,YAAA,GAAe,MAAA;AACtD,EAAA,IAAI,OAAO,SAAA,KAAc,QAAA,EAAU,MAAA,CAAO,eAAA,GAAkB,SAAA;AAC5D,EAAA,OAAO,MAAA;AACT;AAGO,SAAS,YAAY,IAAA,EAA+B;AACzD,EAAA,MAAM,CAAA,GACJ,IAAA,EAAM,IAAA,IAAQ,IAAA,EAAM,OAAA,IAAW,IAAA,EAAM,cAAA,IAAkB,IAAA,EAAM,KAAA,EAAO,IAAA,IAAQ,IAAA,EAAM,KAAA,EAAO,IAAA;AAC3F,EAAA,OAAO,OAAO,CAAA,KAAM,QAAA,GAAW,CAAA,GAAI,MAAA;AACrC","file":"chunk-Q7CU5GQO.js","sourcesContent":["import { type ChildProcess, spawn } from \"node:child_process\";\nimport type { EventEmitter } from \"node:events\";\nimport { createInterface, type Interface } from \"node:readline\";\nimport type { Logger, TokenUsage } from \"@skaile/workspaces/types\";\nimport { resolveAgentExec, wrapAgentCommand } from \"../agent-exec.js\";\nimport { classifyGenericErrorMessage } from \"../error-classifier.js\";\nimport { ReconfigureLedger } from \"../reconfigure-ledger.js\";\nimport { RUNNER_AGENT_ENV_KEYS, stripRunnerPrivateEnv } from \"../runner-private-env.js\";\nimport {\n  type AgentConfig,\n  AgentHarness,\n  type AgentError,\n  type AgentEvent,\n  type AgentMessage,\n  type ReconfigureApplied,\n  type ReconfigureOutcome,\n  type ReconfigurePatch,\n} from \"../types.js\";\n\n/**\n * Shared base for one-shot **subprocess CLI** agent harnesses (Gemini, Qwen,\n * OpenCode, Goose, Continue).\n *\n * These harnesses are neither persistent JSON-RPC subprocesses (`omp`) nor\n * in-process SDKs (`claude-sdk`, `codex`). In headless mode each is invoked\n * **once per turn** — `prompt()` spawns the CLI fresh, a `readline` loop maps\n * newline-delimited JSON on stdout to the unified {@link AgentEvent} stream, and\n * **process exit marks the end of the turn**. Multi-turn continuity comes from\n * capturing a harness session id (emitted as `session_info`) and replaying it\n * via a resume flag on the next spawn.\n *\n * Subclasses implement {@link buildArgs}, {@link buildEnv}, and either\n * {@link handleJson} (streaming JSONL, the default) or {@link handleBuffered}\n * (`mode = \"buffered\"`, for CLIs that print a single JSON blob at the end).\n *\n * **Terminal-sequence invariant.** Subclasses MUST NOT emit `agent_end`. The\n * base emits exactly one `result` (synthesizing a success result when the\n * stream produced none) followed by a single `agent_end` on clean exit, or an\n * `error` + `agent_end` on crash. This keeps the turn-completion contract\n * (`prompt()` resolves after `agent_end`) identical across every CLI harness.\n *\n * @docLink packages/bridge/harnesses#subprocess-cli\n */\nexport abstract class SubprocessCliHarness extends AgentHarness {\n  /** Per-harness logger, constructed once by the subclass. */\n  protected abstract readonly log: Logger;\n  /** Default binary name spawned in production (e.g. `\"gemini\"`). */\n  protected abstract readonly defaultBin: string;\n  /** Human product name used in error messages / hints (e.g. `\"Gemini CLI\"`). */\n  protected abstract readonly productName: string;\n  /**\n   * Test-seam env prefix. `<PREFIX>_BRIDGE_BIN` overrides the spawn binary and\n   * `<PREFIX>_BRIDGE_PREARGS` (space-delimited) supplies leading argv — used by\n   * the fake-CLI harness to redirect spawn without monkey-patching\n   * `child_process`. Both are ignored in production.\n   */\n  protected abstract readonly envPrefix: string;\n  /** `\"jsonl\"` streams events line-by-line; `\"buffered\"` parses all stdout once on exit. */\n  protected readonly mode: \"jsonl\" | \"buffered\" = \"jsonl\";\n\n  protected config: AgentConfig;\n  private readonly reconfig: ReconfigureLedger;\n\n  private proc: ChildProcess | null = null;\n  private rl: Interface | null = null;\n  private stderrBuffer: string[] = [];\n  private stdoutBuffer = \"\";\n  private started = false;\n\n  // ── Per-turn state ──────────────────────────────────────────────────────\n  private prevText = \"\";\n  private activeAssistant = false;\n  private pendingToolResults: AgentMessage[] = [];\n  private sawResult = false;\n  private aborting = false;\n  private turnResolve: (() => void) | null = null;\n  private turnReject: ((err: Error) => void) | null = null;\n\n  protected _sessionId?: string;\n  protected _lastTokens: TokenUsage | null = null;\n\n  constructor(config: AgentConfig) {\n    super();\n    this.config = config;\n    this.reconfig = new ReconfigureLedger({\n      config: () => this.config,\n      onDesired: (applied) => this.onReconfigured(applied),\n    });\n  }\n\n  override get runtimeSessionId(): string | undefined {\n    return this._sessionId;\n  }\n\n  override getModel(): string | undefined {\n    return this.config.model;\n  }\n\n  override getTokenUsage(): TokenUsage | null {\n    return this._lastTokens;\n  }\n\n  /**\n   * A one-shot CLI has no resident process: a patch is stored and the next\n   * spawn reads it. The ledger scopes the model and writes the config.\n   */\n  override reconfigure(patch: ReconfigurePatch): Promise<ReconfigureOutcome> {\n    return this.reconfig.reconfigure(patch);\n  }\n\n  /**\n   * A patch was stored in {@link config}. Subclasses that cache something derived\n   * from the model (rendered provider files, bindings) invalidate it here.\n   */\n  protected onReconfigured(applied: ReconfigureApplied): void {\n    void applied;\n  }\n\n  /**\n   * No-op for one-shot CLIs — there is no long-lived process to spawn until the\n   * first prompt. Kept so the runner's `start()` → `prompt()` ordering works\n   * uniformly; binary-presence failures surface as a `config` error on the\n   * first spawn (see {@link classifyProcessError}).\n   */\n  async start(): Promise<void> {\n    this.started = true;\n  }\n\n  get isRunning(): boolean {\n    return this.proc !== null && !this.proc.killed;\n  }\n\n  /**\n   * Sends a user message to the CLI and resolves after the turn completes\n   * (`agent_end`). Spawns a fresh child per call; rejects if the child exits\n   * non-zero before emitting a result, so the caller never hangs.\n   */\n  async prompt(message: string): Promise<void> {\n    if (this.proc) throw new Error(`${this.productName} turn already in progress`);\n    if (!this.started) await this.start();\n\n    this.prevText = \"\";\n    this.activeAssistant = false;\n    this.pendingToolResults = [];\n    this.sawResult = false;\n    this.aborting = false;\n    this.stderrBuffer = [];\n    this.stdoutBuffer = \"\";\n    this._lastTokens = null;\n\n    const composed = this.composePrompt(message);\n    const overrideBin = process.env[`${this.envPrefix}_BRIDGE_BIN`];\n    const preArgs = process.env[`${this.envPrefix}_BRIDGE_PREARGS`]\n      ? (process.env[`${this.envPrefix}_BRIDGE_PREARGS`] as string).split(/\\s+/).filter(Boolean)\n      : [];\n    const bin = overrideBin || this.defaultBin;\n    const args = [...preArgs, ...this.buildArgs(composed, this._sessionId)];\n    const env = this.buildEnv();\n\n    return new Promise<void>((resolve, reject) => {\n      this.turnResolve = resolve;\n      this.turnReject = reject;\n      this.log.info(\"spawning CLI\", {\n        bin,\n        cwd: this.config.cwd,\n        resume: Boolean(this._sessionId),\n      });\n\n      // With the uid split on, the CLI runs as the agent uid through the launch shim.\n      const target = wrapAgentCommand(bin, args, resolveAgentExec());\n      const proc = spawn(target.command, target.args, {\n        cwd: this.config.cwd,\n        env,\n        stdio: [\"ignore\", \"pipe\", \"pipe\"],\n      }) as ChildProcess;\n      this.proc = proc;\n      const procEmitter = proc as unknown as EventEmitter;\n\n      procEmitter.on(\"error\", (err: Error) => {\n        const detail = this.classifyProcessError(err as NodeJS.ErrnoException);\n        this.log.error(\"spawn error\", err, { detail });\n        // Fatal: the turn did not run, so the host gets one fatal error, then finished, then idle.\n        this.pushError(detail, true);\n        this.emit(\"agent-event\", { type: \"agent_end\" } satisfies AgentEvent);\n        this.settleReject(Object.assign(new Error(detail.message), { detail }));\n      });\n\n      if (proc.stdout) {\n        if (this.mode === \"jsonl\") {\n          const rl = createInterface({ input: proc.stdout });\n          this.rl = rl;\n          (rl as unknown as EventEmitter).on(\"line\", (line: string) => this.onStdoutLine(line));\n        } else {\n          proc.stdout.setEncoding(\"utf8\");\n          proc.stdout.on(\"data\", (chunk: string) => {\n            this.stdoutBuffer += chunk;\n          });\n        }\n      }\n\n      if (proc.stderr) {\n        const stderrRl = createInterface({ input: proc.stderr });\n        (stderrRl as unknown as EventEmitter).on(\"line\", (line: string) => {\n          this.log.debug(\"stderr\", { line });\n          this.stderrBuffer.push(line);\n          if (this.stderrBuffer.length > 20) this.stderrBuffer.shift();\n        });\n      }\n\n      procEmitter.on(\"exit\", (code: number | null, signal: NodeJS.Signals | null) => {\n        this.log.info(\"CLI exited\", { code, signal });\n        this.onExit(code, signal);\n      });\n    });\n  }\n\n  /** Out-of-band abort: terminates the current child. Harness stays usable for the next prompt. */\n  async abort(): Promise<void> {\n    this.aborting = true;\n    this.proc?.kill(\"SIGTERM\");\n  }\n\n  kill(): void {\n    this.aborting = true;\n    this.proc?.kill(\"SIGTERM\");\n    this.cleanup();\n  }\n\n  async resetSession(): Promise<void> {\n    this.kill();\n    this._sessionId = undefined;\n    this._lastTokens = null;\n  }\n\n  // ── Subclass hooks ────────────────────────────────────────────────────────\n\n  /** Build the CLI argv (binary excluded) for one turn. `resumeId` is the captured session id, if any. */\n  protected abstract buildArgs(message: string, resumeId: string | undefined): string[];\n\n  /** Build the child-process env (explicit allowlist — see {@link baseEnv}). */\n  protected abstract buildEnv(): Record<string, string>;\n\n  /** Map one parsed stdout JSON object to events via the `push*` helpers. Streaming (`jsonl`) mode only. */\n  protected handleJson(_json: unknown): void {}\n\n  /** Parse the full stdout blob once on clean exit. `buffered` mode only. */\n  protected handleBuffered(_raw: string): void {}\n\n  /** Install-failure hint surfaced when the binary is missing. */\n  protected abstract installHint(): string;\n\n  /**\n   * Classify a non-zero exit into an {@link AgentError}, or `null` to treat the\n   * exit as success (e.g. a turn-limit code where a result was already\n   * emitted). Default: code `0` / clean signal → success; otherwise `process`.\n   */\n  protected classifyExit(code: number | null, signal: NodeJS.Signals | null): AgentError | null {\n    if (code === 0 || (code === null && signal === null)) return null;\n    const tail = this.stderrBuffer.slice(-10).join(\"\\n\");\n    return {\n      message: `${this.productName} exited with code ${code ?? \"null\"}${tail ? `: ${tail}` : \"\"}`,\n      category: \"process\",\n      retryable: true,\n      hint: tail || `The ${this.productName} process exited unexpectedly. Try the prompt again.`,\n    };\n  }\n\n  // ── Protected emit helpers (used by handleJson / handleBuffered) ────────────\n\n  /** Prepend `systemPrompt` to the user message — uniform across CLIs lacking a reliable system flag. */\n  protected composePrompt(message: string): string {\n    return this.config.systemPrompt ? `${this.config.systemPrompt}\\n\\n---\\n\\n${message}` : message;\n  }\n\n  protected pushAssistantDelta(fullText: string): void {\n    if (!this.activeAssistant) {\n      this.activeAssistant = true;\n      this.prevText = \"\";\n      this.emit(\"agent-event\", {\n        type: \"message_start\",\n        message: asstMessage(\"\"),\n      } satisfies AgentEvent);\n    }\n    const delta = fullText.startsWith(this.prevText)\n      ? fullText.slice(this.prevText.length)\n      : fullText;\n    this.prevText = fullText;\n    if (delta) {\n      this.emit(\"agent-event\", {\n        type: \"message_update\",\n        message: asstMessage(fullText),\n        _textDelta: delta,\n      } satisfies AgentEvent);\n    }\n  }\n\n  protected pushAssistantEnd(fullText?: string): void {\n    if (!this.activeAssistant) return;\n    const text = fullText ?? this.prevText;\n    this.emit(\"agent-event\", {\n      type: \"message_end\",\n      message: asstMessage(text),\n    } satisfies AgentEvent);\n    this.activeAssistant = false;\n    this.prevText = \"\";\n  }\n\n  protected pushToolCall(name: string, input: unknown): void {\n    this.emit(\"agent-event\", {\n      type: \"tool_call\",\n      name,\n      tool: { name },\n      input,\n    } satisfies AgentEvent);\n  }\n\n  protected pushToolResult(name: string, data: unknown, isError = false): void {\n    this.pendingToolResults.push({ role: \"tool\", toolName: name, content: \"\", data, isError });\n    this.emit(\"agent-event\", {\n      type: \"tool_execution_end\",\n      toolName: name,\n    } satisfies AgentEvent);\n  }\n\n  private flushToolResults(): void {\n    if (this.pendingToolResults.length === 0) return;\n    this.emit(\"agent-event\", {\n      type: \"turn_end\",\n      toolResults: [...this.pendingToolResults],\n    } satisfies AgentEvent);\n    this.pendingToolResults = [];\n  }\n\n  protected pushResult(opts: {\n    tokens?: TokenUsage | null;\n    costUsd?: number;\n    summary?: string;\n    subtype?: string;\n  }): void {\n    this.pushAssistantEnd();\n    this.flushToolResults();\n    if (opts.tokens) this._lastTokens = opts.tokens;\n    this.sawResult = true;\n    this.emit(\"agent-event\", {\n      type: \"result\",\n      subtype: opts.subtype ?? \"success\",\n      summary: opts.summary,\n      costUsd: opts.costUsd ?? 0,\n      ...(opts.tokens ? { tokens: opts.tokens } : {}),\n    } satisfies AgentEvent);\n  }\n\n  protected pushError(detail: AgentError, fatal = false): void {\n    this.emit(\"agent-event\", {\n      type: \"error\",\n      error: detail.message,\n      detail,\n      fatal,\n    } satisfies AgentEvent);\n  }\n\n  protected captureSession(id?: string, file?: string): void {\n    if (!id || id === this._sessionId) return;\n    this._sessionId = id;\n    this.emit(\"agent-event\", {\n      type: \"session_info\",\n      harnessSessionId: id,\n      ...(file ? { sessionFile: file } : {}),\n    } satisfies AgentEvent);\n  }\n\n  /** Shared keyword classification + per-harness hint copy (mirrors omp/codex). */\n  protected classifyMessage(message: string): AgentError {\n    const generic = classifyGenericErrorMessage(message);\n    if (!generic) {\n      return {\n        message,\n        category: \"unknown\",\n        retryable: true,\n        hint: `An unexpected ${this.productName} error occurred. Try the prompt again.`,\n      };\n    }\n    const hint =\n      generic.category === \"auth\"\n        ? `Check the API key / login configured for ${this.productName}.`\n        : generic.category === \"rate_limit\"\n          ? `${this.productName} hit a provider rate limit. Wait a moment and try again.`\n          : generic.category === \"model\"\n            ? \"The selected model is unavailable or the context is too long. Change the model or start a new session.\"\n            : `A network error occurred while talking to ${this.productName}.`;\n    return { message, category: generic.category, retryable: generic.retryable, hint };\n  }\n\n  // ── Env allowlist ──────────────────────────────────────────────────────────\n\n  /**\n   * Explicit env whitelist forwarded to the child. Omits anything provisioned\n   * by `provision_secrets` so user credentials stay out of the subprocess\n   * environment. Always passes through the harness's test-seam vars and\n   * `FAKE_CLI_*`.\n   *\n   * `config.env` is merged **over** the whitelist, not in place of it. It used\n   * to replace it wholesale, which meant any caller that set a single variable\n   * silently dropped `PATH` and `HOME` and the spawn failed with ENOENT —\n   * unusable as the delivery channel for registry-derived endpoint variables\n   * (plan §2.3, \"Delivery rule\"). Widening keeps both: the caller's variables\n   * win per key, the process still has a `PATH`.\n   */\n  protected baseEnv(extraKeys: string[] = []): Record<string, string> {\n    const out: Record<string, string> = {};\n    const explicit = [\n      \"PATH\",\n      \"HOME\",\n      \"USER\",\n      \"HOSTNAME\",\n      \"SKAILE_SESSION_ID\",\n      ...RUNNER_AGENT_ENV_KEYS,\n      ...extraKeys,\n    ];\n    for (const key of explicit) {\n      const v = process.env[key];\n      if (v !== undefined) out[key] = v;\n    }\n    for (const [key, value] of Object.entries(process.env)) {\n      if (typeof value !== \"string\") continue;\n      if (key.startsWith(`${this.envPrefix}_BRIDGE_`) || key.startsWith(\"FAKE_CLI_\")) {\n        out[key] = value;\n      }\n    }\n    if (this.config.sshKeyPath) {\n      out.GIT_SSH_COMMAND = `ssh -i \"${this.config.sshKeyPath}\" -o StrictHostKeyChecking=accept-new`;\n    }\n    if (this.config.env) Object.assign(out, this.config.env);\n    return stripRunnerPrivateEnv(out);\n  }\n\n  // ── Internals ────────────────────────────────────────────────────────────\n\n  private onStdoutLine(line: string): void {\n    if (!line.trim()) return;\n    let json: unknown;\n    try {\n      json = JSON.parse(line);\n    } catch {\n      this.log.debug(\"non-JSON stdout line\", { line });\n      return;\n    }\n    try {\n      this.handleJson(json);\n    } catch (err) {\n      this.log.warn(\"handleJson threw\", { error: String(err) });\n    }\n  }\n\n  private onExit(code: number | null, signal: NodeJS.Signals | null): void {\n    this.cleanup();\n\n    if (this.aborting) {\n      this.pushAssistantEnd();\n      this.flushToolResults();\n      this.emit(\"agent-event\", { type: \"agent_end\" } satisfies AgentEvent);\n      this.settleResolve();\n      return;\n    }\n\n    if (this.mode === \"buffered\" && (code === 0 || code === null)) {\n      try {\n        this.handleBuffered(this.stdoutBuffer);\n      } catch (err) {\n        this.log.warn(\"handleBuffered threw\", { error: String(err) });\n      }\n    }\n\n    const exitErr = this.classifyExit(code, signal);\n    if (exitErr && !this.sawResult) {\n      this.pushAssistantEnd();\n      this.flushToolResults();\n      this.pushError(exitErr, true);\n      this.emit(\"agent-event\", { type: \"agent_end\" } satisfies AgentEvent);\n      this.settleReject(Object.assign(new Error(exitErr.message), { detail: exitErr }));\n      return;\n    }\n\n    // Clean exit (or non-zero exit after a result already streamed): close any\n    // open assistant message, synthesize a success result if none arrived, end.\n    if (!this.sawResult) this.pushResult({ summary: \"Task completed\" });\n    else {\n      this.pushAssistantEnd();\n      this.flushToolResults();\n    }\n    this.emit(\"agent-event\", { type: \"agent_end\" } satisfies AgentEvent);\n    this.settleResolve();\n  }\n\n  private settleResolve(): void {\n    const resolve = this.turnResolve;\n    this.turnResolve = null;\n    this.turnReject = null;\n    resolve?.();\n  }\n\n  private settleReject(err: Error): void {\n    const reject = this.turnReject;\n    this.turnResolve = null;\n    this.turnReject = null;\n    reject?.(err);\n  }\n\n  private cleanup(): void {\n    this.rl?.close();\n    this.rl = null;\n    this.proc = null;\n  }\n\n  private classifyProcessError(err: NodeJS.ErrnoException): AgentError {\n    if (err.code === \"ENOENT\") {\n      return {\n        message: `${this.defaultBin} command not found`,\n        category: \"config\",\n        retryable: false,\n        hint: this.installHint(),\n      };\n    }\n    if (err.code === \"EACCES\") {\n      return {\n        message: `Permission denied running ${this.defaultBin}`,\n        category: \"config\",\n        retryable: false,\n        hint: `Check file permissions for the ${this.defaultBin} binary.`,\n      };\n    }\n    return {\n      message: err.message,\n      category: \"process\",\n      retryable: true,\n      hint: `An unexpected process error occurred running ${this.productName}. Try again.`,\n    };\n  }\n}\n\n// ───────────────────────────────────────────────────────────────────────────\n// Tolerant JSON extractors — shared because the upstream stream-json schemas\n// are not fully pinned; read the common field-name variants defensively.\n// ───────────────────────────────────────────────────────────────────────────\n\nfunction asstMessage(text: string): AgentMessage {\n  return { role: \"assistant\", content: [{ type: \"text\", text }] };\n}\n\n/** Pull assistant text out of a CLI event, trying the common field names. */\nexport function extractText(json: any): string {\n  if (typeof json?.text === \"string\") return json.text;\n  if (typeof json?.delta === \"string\") return json.delta;\n  if (typeof json?.content === \"string\") return json.content;\n  if (typeof json?.response === \"string\") return json.response;\n  const msg = json?.message;\n  if (typeof msg?.content === \"string\") return msg.content;\n  if (Array.isArray(msg?.content)) {\n    return msg.content\n      .filter(\n        (b: any) => (b?.type === \"text\" || b?.type === undefined) && typeof b?.text === \"string\",\n      )\n      .map((b: any) => b.text)\n      .join(\"\");\n  }\n  if (Array.isArray(json?.parts)) {\n    return json.parts\n      .filter((p: any) => typeof p?.text === \"string\")\n      .map((p: any) => p.text)\n      .join(\"\");\n  }\n  // OpenCode (`run --format json`) nests the payload under `part`.\n  if (typeof json?.part?.text === \"string\") return json.part.text;\n  return \"\";\n}\n\n/** Map a CLI usage/stats object onto {@link TokenUsage}, trying common field names. */\nexport function extractTokens(json: any): TokenUsage | null {\n  const u = json?.usage ?? json?.stats?.usage ?? json?.stats ?? json?.tokens ?? json;\n  if (!u || typeof u !== \"object\") return null;\n  const input = u.input_tokens ?? u.inputTokens ?? u.prompt_tokens ?? u.promptTokenCount ?? u.input;\n  const output =\n    u.output_tokens ?? u.outputTokens ?? u.completion_tokens ?? u.candidatesTokenCount ?? u.output;\n  const cacheRead = u.cached_input_tokens ?? u.cacheReadTokens ?? u.cachedContentTokenCount;\n  if (input === undefined && output === undefined) return null;\n  const tokens: TokenUsage = {};\n  if (typeof input === \"number\") tokens.inputTokens = input;\n  if (typeof output === \"number\") tokens.outputTokens = output;\n  if (typeof cacheRead === \"number\") tokens.cacheReadTokens = cacheRead;\n  return tokens;\n}\n\n/** Pull a per-turn USD cost from a CLI result object, or `undefined`. */\nexport function extractCost(json: any): number | undefined {\n  const c =\n    json?.cost ?? json?.costUsd ?? json?.total_cost_usd ?? json?.stats?.cost ?? json?.usage?.cost;\n  return typeof c === \"number\" ? c : undefined;\n}\n"]}

package/dist/chunk-QFFMFZIR.js

@@ -0,0 +1,32 @@
+import { catalogLayer } from './chunk-6UP2EDFN.js';
+import { loadProviderRegistry } from './chunk-J5JRGBKK.js';
+import { validateMergedRegistry, mergeRegistries } from './chunk-RXGPFAMN.js';
+
+// bridge/src/provider-registry-load.ts
+function loadMergedProviderRegistry(options) {
+  const loaded = loadProviderRegistry({ projectDir: options.projectDir });
+  const fileLayers = loaded.files.map((file) => ({
+    layer: file.layer,
+    providers: file.document.providers
+  }));
+  const catalog = catalogLayer(loaded.patches);
+  const { registry, diagnostics } = validateMergedRegistry(
+    mergeRegistries([...fileLayers, catalog]),
+    {
+      sources: [
+        ...loaded.files.map((file) => ({ label: file.path, providers: file.document.providers }))
+      ]
+    }
+  );
+  return {
+    merged: registry,
+    files: loaded.files,
+    // `loaded.diagnostics` already carries the merge notes for the file layers
+    // alone; this second merge adds the catalog, so its notes replace them.
+    diagnostics: [...loaded.files.flatMap((file) => file.diagnostics), ...diagnostics]
+  };
+}
+
+export { loadMergedProviderRegistry };
+//# sourceMappingURL=chunk-QFFMFZIR.js.map
+//# sourceMappingURL=chunk-QFFMFZIR.js.map

package/dist/chunk-QFFMFZIR.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../bridge/src/provider-registry-load.ts"],"names":[],"mappings":";;;;;AAoCO,SAAS,2BAA2B,OAAA,EAIzC;AACA,EAAA,MAAM,SAAS,oBAAA,CAAqB,EAAE,UAAA,EAAY,OAAA,CAAQ,YAAY,CAAA;AACtE,EAAA,MAAM,UAAA,GAAa,MAAA,CAAO,KAAA,CAAM,GAAA,CAAI,CAAC,IAAA,MAAU;AAAA,IAC7C,OAAO,IAAA,CAAK,KAAA;AAAA,IACZ,SAAA,EAAW,KAAK,QAAA,CAAS;AAAA,GAC3B,CAAE,CAAA;AACF,EAAA,MAAM,OAAA,GAAU,YAAA,CAAa,MAAA,CAAO,OAAO,CAAA;AAC3C,EAAA,MAAM,EAAE,QAAA,EAAU,WAAA,EAAY,GAAI,sBAAA;AAAA,IAChC,eAAA,CAAgB,CAAC,GAAG,UAAA,EAAY,OAAO,CAAC,CAAA;AAAA,IACxC;AAAA,MACE,OAAA,EAAS;AAAA,QACP,GAAG,MAAA,CAAO,KAAA,CAAM,GAAA,CAAI,CAAC,IAAA,MAAU,EAAE,KAAA,EAAO,IAAA,CAAK,IAAA,EAAM,SAAA,EAAW,IAAA,CAAK,QAAA,CAAS,WAAU,CAAE;AAAA;AAC1F;AACF,GACF;AACA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,QAAA;AAAA,IACR,OAAO,MAAA,CAAO,KAAA;AAAA;AAAA;AAAA,IAGd,WAAA,EAAa,CAAC,GAAG,MAAA,CAAO,KAAA,CAAM,OAAA,CAAQ,CAAC,IAAA,KAAS,IAAA,CAAK,WAAW,CAAA,EAAG,GAAG,WAAW;AAAA,GACnF;AACF","file":"chunk-QFFMFZIR.js","sourcesContent":["/**\n * The merged provider-registry load every reader shares: the user and workspace\n * `providers.yml` layers plus the catalog layer their `preset:` keys pull in.\n * `skaile providers …` and `@skaile/workspaces/ai-sdk` both call it, so a host\n * sees exactly the registry the CLI prints.\n *\n * @see PROVIDER-CONFIG-PLAN.md §1.5\n */\n\nimport {\n  type AIProviderDiagnostic,\n  type AIProviderLayerId,\n  type LoadedProviderRegistry,\n  loadProviderRegistry,\n  type MergedAIProviderRegistry,\n  mergeRegistries,\n  validateMergedRegistry,\n} from \"@skaile/workspaces/core\";\nimport { catalogLayer } from \"./provider-catalog.js\";\n\nexport interface LoadMergedProviderRegistryOptions {\n  /** Project directory whose `.skaile/providers.yml` is the workspace layer. */\n  projectDir: string;\n}\n\n/**\n * Load both file layers and merge them with the catalog layer the configured\n * `preset:` keys pull in, then gate the result. Read once, merged twice — the\n * catalog layer can only be built after the configured entries are known,\n * and it is built from the **pre-gate** merge: an entry that leaves `kind` or\n * its transport `params` to the preset fails the first gate by design.\n *\n * The gate is on the merged view, not per file: a workspace entry that sets\n * one field of an entry the user file defines is an override (§1.5), so it is\n * only here that an entry can be judged complete.\n */\nexport function loadMergedProviderRegistry(options: LoadMergedProviderRegistryOptions): {\n  merged: MergedAIProviderRegistry;\n  files: LoadedProviderRegistry[\"files\"];\n  diagnostics: AIProviderDiagnostic[];\n} {\n  const loaded = loadProviderRegistry({ projectDir: options.projectDir });\n  const fileLayers = loaded.files.map((file) => ({\n    layer: file.layer as AIProviderLayerId,\n    providers: file.document.providers,\n  }));\n  const catalog = catalogLayer(loaded.patches);\n  const { registry, diagnostics } = validateMergedRegistry(\n    mergeRegistries([...fileLayers, catalog]),\n    {\n      sources: [\n        ...loaded.files.map((file) => ({ label: file.path, providers: file.document.providers })),\n      ],\n    },\n  );\n  return {\n    merged: registry,\n    files: loaded.files,\n    // `loaded.diagnostics` already carries the merge notes for the file layers\n    // alone; this second merge adds the catalog, so its notes replace them.\n    diagnostics: [...loaded.files.flatMap((file) => file.diagnostics), ...diagnostics],\n  };\n}\n"]}

package/dist/{chunk-HMISULVD.js → chunk-QK7AG5AV.js}

@@ -1,6 +1,6 @@
-import { findAiAssetsRoot } from './chunk-Z3VKUWAX.js';
+import { findAiAssetsRoot } from './chunk-TSTRH4SM.js';
 import { okJson, err, ok } from './chunk-3MWQKQUB.js';
-import { parseSkillRequirements, validateRequirements, buildRequiresPreamble, parseSkillFrontmatter } from './chunk-IRYKRKVQ.js';
+import { parseSkillRequirements, validateRequirements, buildRequiresPreamble, parseSkillFrontmatter } from './chunk-URCJIV7T.js';
 import { findKindDirs } from './chunk-MWXYN6NY.js';
 import fs from 'fs/promises';
 import path from 'path';
@@ -136,5 +136,5 @@ async function skillGetPreamble(projectDir, skillId) {
 }
 
 export { skillCheckRequirements, skillGetPreamble, skillList, skillSearch, skillShow };
-//# sourceMappingURL=chunk-HMISULVD.js.map
-//# sourceMappingURL=chunk-HMISULVD.js.map
+//# sourceMappingURL=chunk-QK7AG5AV.js.map
+//# sourceMappingURL=chunk-QK7AG5AV.js.map

package/dist/{chunk-HMISULVD.js.map → chunk-QK7AG5AV.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../workspace-plugin/src/tools/skills.ts"],"names":[],"mappings":";;;;;;;AA0BA,eAAe,cAAA,CAAe,KAAa,GAAA,EAAkC;AAC3E,EAAA,IAAI,OAAA;AACJ,EAAA,IAAI;AACF,IAAA,OAAA,GAAU,MAAM,EAAA,CAAG,OAAA,CAAQ,KAAK,EAAE,aAAA,EAAe,MAAM,CAAA;AAAA,EACzD,CAAA,CAAA,MAAQ;AACN,IAAA;AAAA,EACF;AAGA,EAAA,MAAM,UAAA,GAAa,OAAA,CAAQ,IAAA,CAAK,CAAC,CAAA,KAAM,EAAE,MAAA,EAAO,IAAK,CAAA,CAAE,IAAA,KAAS,UAAU,CAAA;AAC1E,EAAA,IAAI,UAAA,EAAY;AACd,IAAA,MAAM,WAAA,GAAc,IAAA,CAAK,IAAA,CAAK,GAAA,EAAK,UAAU,CAAA;AAC7C,IAAA,IAAI;AACF,MAAA,MAAM,OAAA,GAAU,MAAM,EAAA,CAAG,QAAA,CAAS,aAAa,OAAO,CAAA;AACtD,MAAA,MAAM,EAAA,GAAK,sBAAsB,OAAO,CAAA;AACxC,MAAA,MAAM,IAAA,GAAO,OAAO,EAAA,CAAG,IAAA,KAAS,WAAW,EAAA,CAAG,IAAA,GAAO,IAAA,CAAK,QAAA,CAAS,GAAG,CAAA;AACtE,MAAA,MAAM,cAAc,OAAO,EAAA,CAAG,WAAA,KAAgB,QAAA,GAAW,GAAG,WAAA,GAAc,EAAA;AAC1E,MAAA,MAAM,SAAS,OAAO,EAAA,CAAG,MAAA,KAAW,QAAA,GAAW,GAAG,MAAA,GAAS,KAAA,CAAA;AAC3D,MAAA,MAAM,UAAU,OAAO,EAAA,CAAG,OAAA,KAAY,QAAA,GAAW,GAAG,OAAA,GAAU,KAAA,CAAA;AAC9D,MAAA,MAAM,WAAW,KAAA,CAAM,OAAA,CAAQ,GAAG,QAAQ,CAAA,GAAK,GAAG,QAAA,GAAwB,KAAA,CAAA;AAC1E,MAAA,GAAA,CAAI,IAAA,CAAK;AAAA,QACP,EAAA,EAAI,IAAA,CAAK,QAAA,CAAS,GAAG,CAAA;AAAA,QACrB,IAAA;AAAA,QACA,WAAA;AAAA,QACA,MAAA;AAAA,QACA,OAAA;AAAA,QACA,QAAA;AAAA,QACA,IAAA,EAAM;AAAA,OACP,CAAA;AAAA,IACH,CAAA,CAAA,MAAQ;AAAA,IAER;AACA,IAAA;AAAA,EACF;AAGA,EAAA,KAAA,MAAW,SAAS,OAAA,EAAS;AAC3B,IAAA,IAAI,KAAA,CAAM,aAAY,EAAG;AACvB,MAAA,MAAM,eAAe,IAAA,CAAK,IAAA,CAAK,KAAK,KAAA,CAAM,IAAI,GAAG,GAAG,CAAA;AAAA,IACtD;AAAA,EACF;AACF;AAEA,eAAe,WAAW,YAAA,EAA6C;AACrE,EAAA,MAAM,MAAoB,EAAC;AAC3B,EAAA,KAAA,MAAW,SAAA,IAAa,YAAA,CAAa,YAAA,EAAc,QAAQ,CAAA,EAAG;AAC5D,IAAA,MAAM,cAAA,CAAe,WAAW,GAAG,CAAA;AAAA,EACrC;AAEA,EAAA,OAAO,CAAC,GAAG,IAAI,GAAA,CAAI,GAAA,CAAI,IAAI,CAAC,CAAA,KAAM,CAAC,CAAA,CAAE,MAAM,CAAC,CAAC,CAAC,CAAA,CAAE,QAAQ,CAAA;AAC1D;AAeA,eAAsB,UAAU,UAAA,EAAyC;AACvE,EAAA,IAAI;AACF,IAAA,MAAM,YAAA,GAAe,MAAM,gBAAA,CAAiB,UAAU,CAAA;AACtD,IAAA,IAAI,CAAC,YAAA,EAAc,OAAO,MAAA,CAAO,EAAE,CAAA;AACnC,IAAA,MAAM,MAAA,GAAS,MAAM,UAAA,CAAW,YAAY,CAAA;AAC5C,IAAA,OAAO,MAAA;AAAA,MACL,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,QACjB,IAAI,CAAA,CAAE,EAAA;AAAA,QACN,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,aAAa,CAAA,CAAE,WAAA;AAAA,QACf,QAAQ,CAAA,CAAE,MAAA;AAAA,QACV,SAAS,CAAA,CAAE,OAAA;AAAA,QACX,UAAU,CAAA,CAAE;AAAA,OACd,CAAE;AAAA,KACJ;AAAA,EACF,SAAS,CAAA,EAAY;AACnB,IAAA,OAAO,IAAI,CAAA,YAAa,KAAA,GAAQ,EAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,EACvD;AACF;AAUA,eAAsB,SAAA,CAAU,YAAoB,OAAA,EAAsC;AACxF,EAAA,IAAI;AACF,IAAA,MAAM,YAAA,GAAe,MAAM,gBAAA,CAAiB,UAAU,CAAA;AACtD,IAAA,IAAI,CAAC,YAAA,EAAc,OAAO,GAAA,CAAI,CAAA,iBAAA,EAAoB,OAAO,CAAA,CAAE,CAAA;AAC3D,IAAA,MAAM,MAAA,GAAS,MAAM,UAAA,CAAW,YAAY,CAAA;AAC5C,IAAA,MAAM,QAAQ,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,OAAO,OAAO,CAAA;AACjD,IAAA,IAAI,CAAC,KAAA,EAAO,OAAO,GAAA,CAAI,CAAA,iBAAA,EAAoB,OAAO,CAAA,CAAE,CAAA;AACpD,IAAA,MAAM,UAAU,MAAM,EAAA,CAAG,QAAA,CAAS,KAAA,CAAM,MAAM,OAAO,CAAA;AACrD,IAAA,OAAO,GAAG,OAAO,CAAA;AAAA,EACnB,SAAS,CAAA,EAAY;AACnB,IAAA,OAAO,IAAI,CAAA,YAAa,KAAA,GAAQ,EAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,EACvD;AACF;AAaA,eAAsB,WAAA,CAAY,YAAoB,KAAA,EAAoC;AACxF,EAAA,IAAI;AACF,IAAA,MAAM,YAAA,GAAe,MAAM,gBAAA,CAAiB,UAAU,CAAA;AACtD,IAAA,IAAI,CAAC,YAAA,EAAc,OAAO,MAAA,CAAO,EAAE,CAAA;AACnC,IAAA,MAAM,MAAA,GAAS,MAAM,UAAA,CAAW,YAAY,CAAA;AAC5C,IAAA,MAAM,CAAA,GAAI,MAAM,WAAA,EAAY;AAC5B,IAAA,MAAM,UAAU,MAAA,CAAO,MAAA;AAAA,MACrB,CAAC,CAAA,KACC,CAAA,CAAE,IAAA,CAAK,aAAY,CAAE,QAAA,CAAS,CAAC,CAAA,IAC/B,EAAE,WAAA,CAAY,WAAA,EAAY,CAAE,QAAA,CAAS,CAAC,CAAA,IACtC,CAAA,CAAE,EAAA,CAAG,WAAA,GAAc,QAAA,CAAS,CAAC,CAAA,IAAA,CAC5B,CAAA,CAAE,YAAY,EAAC,EAAG,IAAA,CAAK,CAAC,MAAM,CAAA,CAAE,WAAA,EAAY,CAAE,QAAA,CAAS,CAAC,CAAC;AAAA,KAC9D;AACA,IAAA,OAAO,MAAA;AAAA,MACL,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,QAClB,IAAI,CAAA,CAAE,EAAA;AAAA,QACN,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,aAAa,CAAA,CAAE,WAAA;AAAA,QACf,QAAQ,CAAA,CAAE,MAAA;AAAA,QACV,SAAS,CAAA,CAAE,OAAA;AAAA,QACX,UAAU,CAAA,CAAE;AAAA,OACd,CAAE;AAAA,KACJ;AAAA,EACF,SAAS,CAAA,EAAY;AACnB,IAAA,OAAO,IAAI,CAAA,YAAa,KAAA,GAAQ,EAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,EACvD;AACF;AAgBA,eAAsB,sBAAA,CACpB,UAAA,EACA,OAAA,EACA,SAAA,EACqB;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,YAAA,GAAe,MAAM,gBAAA,CAAiB,UAAU,CAAA;AACtD,IAAA,IAAI,CAAC,YAAA,EAAc,OAAO,GAAA,CAAI,CAAA,iBAAA,EAAoB,OAAO,CAAA,CAAE,CAAA;AAC3D,IAAA,MAAM,MAAA,GAAS,MAAM,UAAA,CAAW,YAAY,CAAA;AAC5C,IAAA,MAAM,QAAQ,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,OAAO,OAAO,CAAA;AACjD,IAAA,IAAI,CAAC,KAAA,EAAO,OAAO,GAAA,CAAI,CAAA,iBAAA,EAAoB,OAAO,CAAA,CAAE,CAAA;AACpD,IAAA,MAAM,UAAU,MAAM,EAAA,CAAG,QAAA,CAAS,KAAA,CAAM,MAAM,OAAO,CAAA;AAErD,IAAA,MAAM,YAAA,GAAe,uBAAuB,OAAO,CAAA;AACnD,IAAA,MAAM,MAAA,GAAS,MAAM,oBAAA,CAAqB,OAAA,EAAS,cAAc,SAAS,CAAA;AAC1E,IAAA,OAAO,OAAO,MAAM,CAAA;AAAA,EACtB,SAAS,CAAA,EAAY;AACnB,IAAA,OAAO,IAAI,CAAA,YAAa,KAAA,GAAQ,EAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,EACvD;AACF;AAcA,eAAsB,gBAAA,CAAiB,YAAoB,OAAA,EAAsC;AAC/F,EAAA,IAAI;AACF,IAAA,MAAM,YAAA,GAAe,MAAM,gBAAA,CAAiB,UAAU,CAAA;AACtD,IAAA,IAAI,CAAC,YAAA,EAAc,OAAO,GAAA,CAAI,CAAA,iBAAA,EAAoB,OAAO,CAAA,CAAE,CAAA;AAC3D,IAAA,MAAM,MAAA,GAAS,MAAM,UAAA,CAAW,YAAY,CAAA;AAC5C,IAAA,MAAM,QAAQ,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,OAAO,OAAO,CAAA;AACjD,IAAA,IAAI,CAAC,KAAA,EAAO,OAAO,GAAA,CAAI,CAAA,iBAAA,EAAoB,OAAO,CAAA,CAAE,CAAA;AACpD,IAAA,MAAM,UAAU,MAAM,EAAA,CAAG,QAAA,CAAS,KAAA,CAAM,MAAM,OAAO,CAAA;AAErD,IAAA,MAAM,YAAA,GAAe,uBAAuB,OAAO,CAAA;AACnD,IAAA,MAAM,QAAA,GAAW,qBAAA,CAAsB,YAAA,EAAc,OAAO,CAAA;AAC5D,IAAA,OAAO,EAAA,CAAG,YAAY,4BAA4B,CAAA;AAAA,EACpD,SAAS,CAAA,EAAY;AACnB,IAAA,OAAO,IAAI,CAAA,YAAa,KAAA,GAAQ,EAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,EACvD;AACF","file":"chunk-HMISULVD.js","sourcesContent":["// src/tools/skills.ts\n\nimport type { Dirent } from \"node:fs\";\nimport fs from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { findKindDirs } from \"@skaile/workspaces/core/discovery\";\nimport {\n  buildRequiresPreamble,\n  parseSkillFrontmatter,\n  parseSkillRequirements,\n  validateRequirements,\n} from \"@skaile/workspaces/resolver\";\nimport type { ToolResult } from \"../types.js\";\nimport { err, ok, okJson } from \"../types.js\";\nimport { findAiAssetsRoot } from \"../utils/ai-assets.js\";\n\ninterface SkillEntry {\n  id: string;\n  name: string;\n  description: string;\n  source?: string;\n  version?: string;\n  keywords?: string[];\n  path: string;\n}\n\nasync function walkForSkillMd(dir: string, acc: SkillEntry[]): Promise<void> {\n  let entries: Dirent<string>[];\n  try {\n    entries = await fs.readdir(dir, { withFileTypes: true });\n  } catch {\n    return;\n  }\n\n  // Check if this directory contains a SKILL.md\n  const hasSkillMd = entries.some((e) => e.isFile() && e.name === \"SKILL.md\");\n  if (hasSkillMd) {\n    const skillMdPath = path.join(dir, \"SKILL.md\");\n    try {\n      const content = await fs.readFile(skillMdPath, \"utf-8\");\n      const fm = parseSkillFrontmatter(content);\n      const name = typeof fm.name === \"string\" ? fm.name : path.basename(dir);\n      const description = typeof fm.description === \"string\" ? fm.description : \"\";\n      const source = typeof fm.source === \"string\" ? fm.source : undefined;\n      const version = typeof fm.version === \"string\" ? fm.version : undefined;\n      const keywords = Array.isArray(fm.keywords) ? (fm.keywords as string[]) : undefined;\n      acc.push({\n        id: path.basename(dir),\n        name,\n        description,\n        source,\n        version,\n        keywords,\n        path: skillMdPath,\n      });\n    } catch {\n      // skip unreadable files\n    }\n    return; // don't recurse inside a skill directory\n  }\n\n  // Recurse into subdirectories\n  for (const entry of entries) {\n    if (entry.isDirectory()) {\n      await walkForSkillMd(path.join(dir, entry.name), acc);\n    }\n  }\n}\n\nasync function scanSkills(aiAssetsRoot: string): Promise<SkillEntry[]> {\n  const acc: SkillEntry[] = [];\n  for (const skillsDir of findKindDirs(aiAssetsRoot, \"skills\")) {\n    await walkForSkillMd(skillsDir, acc);\n  }\n  // A `skills/` dir nested inside another is walked twice; keep each SKILL.md once.\n  return [...new Map(acc.map((s) => [s.path, s])).values()];\n}\n\n// ── Exported tool functions ────────────────────────────────────────────────────\n\n/**\n * List all skills in the `ai-assets` catalog.\n *\n * Walks every `skills/` directory at any depth under the `ai-assets` root\n * looking for `SKILL.md` files.  Returns a JSON array of skill summaries\n * `{ id, name, description, source, version, keywords }`.\n *\n * @param projectDir - Absolute path to the skaile project root.\n *\n * @docLink packages/workspace-plugin/concepts#tool-delivery\n */\nexport async function skillList(projectDir: string): Promise<ToolResult> {\n  try {\n    const aiAssetsRoot = await findAiAssetsRoot(projectDir);\n    if (!aiAssetsRoot) return okJson([]);\n    const skills = await scanSkills(aiAssetsRoot);\n    return okJson(\n      skills.map((s) => ({\n        id: s.id,\n        name: s.name,\n        description: s.description,\n        source: s.source,\n        version: s.version,\n        keywords: s.keywords,\n      })),\n    );\n  } catch (e: unknown) {\n    return err(e instanceof Error ? e.message : String(e));\n  }\n}\n\n/**\n * Show the full `SKILL.md` content for a skill.\n *\n * @param projectDir - Absolute path to the skaile project root.\n * @param skillId    - Skill ID (directory name) as returned by {@link skillList}.\n *\n * @docLink packages/workspace-plugin/concepts#tool-delivery\n */\nexport async function skillShow(projectDir: string, skillId: string): Promise<ToolResult> {\n  try {\n    const aiAssetsRoot = await findAiAssetsRoot(projectDir);\n    if (!aiAssetsRoot) return err(`Skill not found: ${skillId}`);\n    const skills = await scanSkills(aiAssetsRoot);\n    const skill = skills.find((s) => s.id === skillId);\n    if (!skill) return err(`Skill not found: ${skillId}`);\n    const content = await fs.readFile(skill.path, \"utf-8\");\n    return ok(content);\n  } catch (e: unknown) {\n    return err(e instanceof Error ? e.message : String(e));\n  }\n}\n\n/**\n * Search skills by name, description, ID, or keywords.\n *\n * Case-insensitive substring match against all text fields in every skill\n * entry.  Returns the same summary shape as {@link skillList}.\n *\n * @param projectDir - Absolute path to the skaile project root.\n * @param query      - Search string.\n *\n * @docLink packages/workspace-plugin/concepts#tool-delivery\n */\nexport async function skillSearch(projectDir: string, query: string): Promise<ToolResult> {\n  try {\n    const aiAssetsRoot = await findAiAssetsRoot(projectDir);\n    if (!aiAssetsRoot) return okJson([]);\n    const skills = await scanSkills(aiAssetsRoot);\n    const q = query.toLowerCase();\n    const matched = skills.filter(\n      (s) =>\n        s.name.toLowerCase().includes(q) ||\n        s.description.toLowerCase().includes(q) ||\n        s.id.toLowerCase().includes(q) ||\n        (s.keywords ?? []).some((k) => k.toLowerCase().includes(q)),\n    );\n    return okJson(\n      matched.map((s) => ({\n        id: s.id,\n        name: s.name,\n        description: s.description,\n        source: s.source,\n        version: s.version,\n        keywords: s.keywords,\n      })),\n    );\n  } catch (e: unknown) {\n    return err(e instanceof Error ? e.message : String(e));\n  }\n}\n\n/**\n * Validate that all prerequisites declared in a skill's `SKILL.md` are\n * satisfied in `targetDir`.\n *\n * Uses `@skaile/workspaces/resolver` to parse the `REQUIRES` / `READS` / `WRITES`\n * DSL and run the requirement checks against the filesystem.  Returns a\n * validation report as JSON.\n *\n * @param projectDir - Absolute path to the skaile project root (for skill lookup).\n * @param skillId    - Skill ID as returned by {@link skillList}.\n * @param targetDir  - Directory to validate against (typically the user's project).\n *\n * @docLink packages/workspace-plugin/concepts#tool-delivery\n */\nexport async function skillCheckRequirements(\n  projectDir: string,\n  skillId: string,\n  targetDir: string,\n): Promise<ToolResult> {\n  try {\n    const aiAssetsRoot = await findAiAssetsRoot(projectDir);\n    if (!aiAssetsRoot) return err(`Skill not found: ${skillId}`);\n    const skills = await scanSkills(aiAssetsRoot);\n    const skill = skills.find((s) => s.id === skillId);\n    if (!skill) return err(`Skill not found: ${skillId}`);\n    const content = await fs.readFile(skill.path, \"utf-8\");\n\n    const requirements = parseSkillRequirements(content);\n    const report = await validateRequirements(skillId, requirements, targetDir);\n    return okJson(report);\n  } catch (e: unknown) {\n    return err(e instanceof Error ? e.message : String(e));\n  }\n}\n\n/**\n * Get the formatted `REQUIRES`/`INPUT`/`READS`/`WRITES` DSL preamble for a skill.\n *\n * Uses `@skaile/workspaces/resolver` to build the requirements preamble that can be\n * prepended to the skill prompt for injection into the agent's context.\n * Returns `\"(no requirements declared)\"` when the skill has no requirements.\n *\n * @param projectDir - Absolute path to the skaile project root.\n * @param skillId    - Skill ID as returned by {@link skillList}.\n *\n * @docLink packages/workspace-plugin/concepts#tool-delivery\n */\nexport async function skillGetPreamble(projectDir: string, skillId: string): Promise<ToolResult> {\n  try {\n    const aiAssetsRoot = await findAiAssetsRoot(projectDir);\n    if (!aiAssetsRoot) return err(`Skill not found: ${skillId}`);\n    const skills = await scanSkills(aiAssetsRoot);\n    const skill = skills.find((s) => s.id === skillId);\n    if (!skill) return err(`Skill not found: ${skillId}`);\n    const content = await fs.readFile(skill.path, \"utf-8\");\n\n    const requirements = parseSkillRequirements(content);\n    const preamble = buildRequiresPreamble(requirements, skillId);\n    return ok(preamble || \"(no requirements declared)\");\n  } catch (e: unknown) {\n    return err(e instanceof Error ? e.message : String(e));\n  }\n}\n"]}
+{"version":3,"sources":["../workspace-plugin/src/tools/skills.ts"],"names":[],"mappings":";;;;;;;AA0BA,eAAe,cAAA,CAAe,KAAa,GAAA,EAAkC;AAC3E,EAAA,IAAI,OAAA;AACJ,EAAA,IAAI;AACF,IAAA,OAAA,GAAU,MAAM,EAAA,CAAG,OAAA,CAAQ,KAAK,EAAE,aAAA,EAAe,MAAM,CAAA;AAAA,EACzD,CAAA,CAAA,MAAQ;AACN,IAAA;AAAA,EACF;AAGA,EAAA,MAAM,UAAA,GAAa,OAAA,CAAQ,IAAA,CAAK,CAAC,CAAA,KAAM,EAAE,MAAA,EAAO,IAAK,CAAA,CAAE,IAAA,KAAS,UAAU,CAAA;AAC1E,EAAA,IAAI,UAAA,EAAY;AACd,IAAA,MAAM,WAAA,GAAc,IAAA,CAAK,IAAA,CAAK,GAAA,EAAK,UAAU,CAAA;AAC7C,IAAA,IAAI;AACF,MAAA,MAAM,OAAA,GAAU,MAAM,EAAA,CAAG,QAAA,CAAS,aAAa,OAAO,CAAA;AACtD,MAAA,MAAM,EAAA,GAAK,sBAAsB,OAAO,CAAA;AACxC,MAAA,MAAM,IAAA,GAAO,OAAO,EAAA,CAAG,IAAA,KAAS,WAAW,EAAA,CAAG,IAAA,GAAO,IAAA,CAAK,QAAA,CAAS,GAAG,CAAA;AACtE,MAAA,MAAM,cAAc,OAAO,EAAA,CAAG,WAAA,KAAgB,QAAA,GAAW,GAAG,WAAA,GAAc,EAAA;AAC1E,MAAA,MAAM,SAAS,OAAO,EAAA,CAAG,MAAA,KAAW,QAAA,GAAW,GAAG,MAAA,GAAS,KAAA,CAAA;AAC3D,MAAA,MAAM,UAAU,OAAO,EAAA,CAAG,OAAA,KAAY,QAAA,GAAW,GAAG,OAAA,GAAU,KAAA,CAAA;AAC9D,MAAA,MAAM,WAAW,KAAA,CAAM,OAAA,CAAQ,GAAG,QAAQ,CAAA,GAAK,GAAG,QAAA,GAAwB,KAAA,CAAA;AAC1E,MAAA,GAAA,CAAI,IAAA,CAAK;AAAA,QACP,EAAA,EAAI,IAAA,CAAK,QAAA,CAAS,GAAG,CAAA;AAAA,QACrB,IAAA;AAAA,QACA,WAAA;AAAA,QACA,MAAA;AAAA,QACA,OAAA;AAAA,QACA,QAAA;AAAA,QACA,IAAA,EAAM;AAAA,OACP,CAAA;AAAA,IACH,CAAA,CAAA,MAAQ;AAAA,IAER;AACA,IAAA;AAAA,EACF;AAGA,EAAA,KAAA,MAAW,SAAS,OAAA,EAAS;AAC3B,IAAA,IAAI,KAAA,CAAM,aAAY,EAAG;AACvB,MAAA,MAAM,eAAe,IAAA,CAAK,IAAA,CAAK,KAAK,KAAA,CAAM,IAAI,GAAG,GAAG,CAAA;AAAA,IACtD;AAAA,EACF;AACF;AAEA,eAAe,WAAW,YAAA,EAA6C;AACrE,EAAA,MAAM,MAAoB,EAAC;AAC3B,EAAA,KAAA,MAAW,SAAA,IAAa,YAAA,CAAa,YAAA,EAAc,QAAQ,CAAA,EAAG;AAC5D,IAAA,MAAM,cAAA,CAAe,WAAW,GAAG,CAAA;AAAA,EACrC;AAEA,EAAA,OAAO,CAAC,GAAG,IAAI,GAAA,CAAI,GAAA,CAAI,IAAI,CAAC,CAAA,KAAM,CAAC,CAAA,CAAE,MAAM,CAAC,CAAC,CAAC,CAAA,CAAE,QAAQ,CAAA;AAC1D;AAeA,eAAsB,UAAU,UAAA,EAAyC;AACvE,EAAA,IAAI;AACF,IAAA,MAAM,YAAA,GAAe,MAAM,gBAAA,CAAiB,UAAU,CAAA;AACtD,IAAA,IAAI,CAAC,YAAA,EAAc,OAAO,MAAA,CAAO,EAAE,CAAA;AACnC,IAAA,MAAM,MAAA,GAAS,MAAM,UAAA,CAAW,YAAY,CAAA;AAC5C,IAAA,OAAO,MAAA;AAAA,MACL,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,QACjB,IAAI,CAAA,CAAE,EAAA;AAAA,QACN,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,aAAa,CAAA,CAAE,WAAA;AAAA,QACf,QAAQ,CAAA,CAAE,MAAA;AAAA,QACV,SAAS,CAAA,CAAE,OAAA;AAAA,QACX,UAAU,CAAA,CAAE;AAAA,OACd,CAAE;AAAA,KACJ;AAAA,EACF,SAAS,CAAA,EAAY;AACnB,IAAA,OAAO,IAAI,CAAA,YAAa,KAAA,GAAQ,EAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,EACvD;AACF;AAUA,eAAsB,SAAA,CAAU,YAAoB,OAAA,EAAsC;AACxF,EAAA,IAAI;AACF,IAAA,MAAM,YAAA,GAAe,MAAM,gBAAA,CAAiB,UAAU,CAAA;AACtD,IAAA,IAAI,CAAC,YAAA,EAAc,OAAO,GAAA,CAAI,CAAA,iBAAA,EAAoB,OAAO,CAAA,CAAE,CAAA;AAC3D,IAAA,MAAM,MAAA,GAAS,MAAM,UAAA,CAAW,YAAY,CAAA;AAC5C,IAAA,MAAM,QAAQ,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,OAAO,OAAO,CAAA;AACjD,IAAA,IAAI,CAAC,KAAA,EAAO,OAAO,GAAA,CAAI,CAAA,iBAAA,EAAoB,OAAO,CAAA,CAAE,CAAA;AACpD,IAAA,MAAM,UAAU,MAAM,EAAA,CAAG,QAAA,CAAS,KAAA,CAAM,MAAM,OAAO,CAAA;AACrD,IAAA,OAAO,GAAG,OAAO,CAAA;AAAA,EACnB,SAAS,CAAA,EAAY;AACnB,IAAA,OAAO,IAAI,CAAA,YAAa,KAAA,GAAQ,EAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,EACvD;AACF;AAaA,eAAsB,WAAA,CAAY,YAAoB,KAAA,EAAoC;AACxF,EAAA,IAAI;AACF,IAAA,MAAM,YAAA,GAAe,MAAM,gBAAA,CAAiB,UAAU,CAAA;AACtD,IAAA,IAAI,CAAC,YAAA,EAAc,OAAO,MAAA,CAAO,EAAE,CAAA;AACnC,IAAA,MAAM,MAAA,GAAS,MAAM,UAAA,CAAW,YAAY,CAAA;AAC5C,IAAA,MAAM,CAAA,GAAI,MAAM,WAAA,EAAY;AAC5B,IAAA,MAAM,UAAU,MAAA,CAAO,MAAA;AAAA,MACrB,CAAC,CAAA,KACC,CAAA,CAAE,IAAA,CAAK,aAAY,CAAE,QAAA,CAAS,CAAC,CAAA,IAC/B,EAAE,WAAA,CAAY,WAAA,EAAY,CAAE,QAAA,CAAS,CAAC,CAAA,IACtC,CAAA,CAAE,EAAA,CAAG,WAAA,GAAc,QAAA,CAAS,CAAC,CAAA,IAAA,CAC5B,CAAA,CAAE,YAAY,EAAC,EAAG,IAAA,CAAK,CAAC,MAAM,CAAA,CAAE,WAAA,EAAY,CAAE,QAAA,CAAS,CAAC,CAAC;AAAA,KAC9D;AACA,IAAA,OAAO,MAAA;AAAA,MACL,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,QAClB,IAAI,CAAA,CAAE,EAAA;AAAA,QACN,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,aAAa,CAAA,CAAE,WAAA;AAAA,QACf,QAAQ,CAAA,CAAE,MAAA;AAAA,QACV,SAAS,CAAA,CAAE,OAAA;AAAA,QACX,UAAU,CAAA,CAAE;AAAA,OACd,CAAE;AAAA,KACJ;AAAA,EACF,SAAS,CAAA,EAAY;AACnB,IAAA,OAAO,IAAI,CAAA,YAAa,KAAA,GAAQ,EAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,EACvD;AACF;AAgBA,eAAsB,sBAAA,CACpB,UAAA,EACA,OAAA,EACA,SAAA,EACqB;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,YAAA,GAAe,MAAM,gBAAA,CAAiB,UAAU,CAAA;AACtD,IAAA,IAAI,CAAC,YAAA,EAAc,OAAO,GAAA,CAAI,CAAA,iBAAA,EAAoB,OAAO,CAAA,CAAE,CAAA;AAC3D,IAAA,MAAM,MAAA,GAAS,MAAM,UAAA,CAAW,YAAY,CAAA;AAC5C,IAAA,MAAM,QAAQ,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,OAAO,OAAO,CAAA;AACjD,IAAA,IAAI,CAAC,KAAA,EAAO,OAAO,GAAA,CAAI,CAAA,iBAAA,EAAoB,OAAO,CAAA,CAAE,CAAA;AACpD,IAAA,MAAM,UAAU,MAAM,EAAA,CAAG,QAAA,CAAS,KAAA,CAAM,MAAM,OAAO,CAAA;AAErD,IAAA,MAAM,YAAA,GAAe,uBAAuB,OAAO,CAAA;AACnD,IAAA,MAAM,MAAA,GAAS,MAAM,oBAAA,CAAqB,OAAA,EAAS,cAAc,SAAS,CAAA;AAC1E,IAAA,OAAO,OAAO,MAAM,CAAA;AAAA,EACtB,SAAS,CAAA,EAAY;AACnB,IAAA,OAAO,IAAI,CAAA,YAAa,KAAA,GAAQ,EAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,EACvD;AACF;AAcA,eAAsB,gBAAA,CAAiB,YAAoB,OAAA,EAAsC;AAC/F,EAAA,IAAI;AACF,IAAA,MAAM,YAAA,GAAe,MAAM,gBAAA,CAAiB,UAAU,CAAA;AACtD,IAAA,IAAI,CAAC,YAAA,EAAc,OAAO,GAAA,CAAI,CAAA,iBAAA,EAAoB,OAAO,CAAA,CAAE,CAAA;AAC3D,IAAA,MAAM,MAAA,GAAS,MAAM,UAAA,CAAW,YAAY,CAAA;AAC5C,IAAA,MAAM,QAAQ,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,OAAO,OAAO,CAAA;AACjD,IAAA,IAAI,CAAC,KAAA,EAAO,OAAO,GAAA,CAAI,CAAA,iBAAA,EAAoB,OAAO,CAAA,CAAE,CAAA;AACpD,IAAA,MAAM,UAAU,MAAM,EAAA,CAAG,QAAA,CAAS,KAAA,CAAM,MAAM,OAAO,CAAA;AAErD,IAAA,MAAM,YAAA,GAAe,uBAAuB,OAAO,CAAA;AACnD,IAAA,MAAM,QAAA,GAAW,qBAAA,CAAsB,YAAA,EAAc,OAAO,CAAA;AAC5D,IAAA,OAAO,EAAA,CAAG,YAAY,4BAA4B,CAAA;AAAA,EACpD,SAAS,CAAA,EAAY;AACnB,IAAA,OAAO,IAAI,CAAA,YAAa,KAAA,GAAQ,EAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,EACvD;AACF","file":"chunk-QK7AG5AV.js","sourcesContent":["// src/tools/skills.ts\n\nimport type { Dirent } from \"node:fs\";\nimport fs from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { findKindDirs } from \"@skaile/workspaces/core/discovery\";\nimport {\n  buildRequiresPreamble,\n  parseSkillFrontmatter,\n  parseSkillRequirements,\n  validateRequirements,\n} from \"@skaile/workspaces/resolver\";\nimport type { ToolResult } from \"../types.js\";\nimport { err, ok, okJson } from \"../types.js\";\nimport { findAiAssetsRoot } from \"../utils/ai-assets.js\";\n\ninterface SkillEntry {\n  id: string;\n  name: string;\n  description: string;\n  source?: string;\n  version?: string;\n  keywords?: string[];\n  path: string;\n}\n\nasync function walkForSkillMd(dir: string, acc: SkillEntry[]): Promise<void> {\n  let entries: Dirent<string>[];\n  try {\n    entries = await fs.readdir(dir, { withFileTypes: true });\n  } catch {\n    return;\n  }\n\n  // Check if this directory contains a SKILL.md\n  const hasSkillMd = entries.some((e) => e.isFile() && e.name === \"SKILL.md\");\n  if (hasSkillMd) {\n    const skillMdPath = path.join(dir, \"SKILL.md\");\n    try {\n      const content = await fs.readFile(skillMdPath, \"utf-8\");\n      const fm = parseSkillFrontmatter(content);\n      const name = typeof fm.name === \"string\" ? fm.name : path.basename(dir);\n      const description = typeof fm.description === \"string\" ? fm.description : \"\";\n      const source = typeof fm.source === \"string\" ? fm.source : undefined;\n      const version = typeof fm.version === \"string\" ? fm.version : undefined;\n      const keywords = Array.isArray(fm.keywords) ? (fm.keywords as string[]) : undefined;\n      acc.push({\n        id: path.basename(dir),\n        name,\n        description,\n        source,\n        version,\n        keywords,\n        path: skillMdPath,\n      });\n    } catch {\n      // skip unreadable files\n    }\n    return; // don't recurse inside a skill directory\n  }\n\n  // Recurse into subdirectories\n  for (const entry of entries) {\n    if (entry.isDirectory()) {\n      await walkForSkillMd(path.join(dir, entry.name), acc);\n    }\n  }\n}\n\nasync function scanSkills(aiAssetsRoot: string): Promise<SkillEntry[]> {\n  const acc: SkillEntry[] = [];\n  for (const skillsDir of findKindDirs(aiAssetsRoot, \"skills\")) {\n    await walkForSkillMd(skillsDir, acc);\n  }\n  // A `skills/` dir nested inside another is walked twice; keep each SKILL.md once.\n  return [...new Map(acc.map((s) => [s.path, s])).values()];\n}\n\n// ── Exported tool functions ────────────────────────────────────────────────────\n\n/**\n * List all skills in the `ai-assets` catalog.\n *\n * Walks every `skills/` directory at any depth under the `ai-assets` root\n * looking for `SKILL.md` files.  Returns a JSON array of skill summaries\n * `{ id, name, description, source, version, keywords }`.\n *\n * @param projectDir - Absolute path to the skaile project root.\n *\n * @docLink packages/workspace-plugin/concepts#tool-delivery\n */\nexport async function skillList(projectDir: string): Promise<ToolResult> {\n  try {\n    const aiAssetsRoot = await findAiAssetsRoot(projectDir);\n    if (!aiAssetsRoot) return okJson([]);\n    const skills = await scanSkills(aiAssetsRoot);\n    return okJson(\n      skills.map((s) => ({\n        id: s.id,\n        name: s.name,\n        description: s.description,\n        source: s.source,\n        version: s.version,\n        keywords: s.keywords,\n      })),\n    );\n  } catch (e: unknown) {\n    return err(e instanceof Error ? e.message : String(e));\n  }\n}\n\n/**\n * Show the full `SKILL.md` content for a skill.\n *\n * @param projectDir - Absolute path to the skaile project root.\n * @param skillId    - Skill ID (directory name) as returned by {@link skillList}.\n *\n * @docLink packages/workspace-plugin/concepts#tool-delivery\n */\nexport async function skillShow(projectDir: string, skillId: string): Promise<ToolResult> {\n  try {\n    const aiAssetsRoot = await findAiAssetsRoot(projectDir);\n    if (!aiAssetsRoot) return err(`Skill not found: ${skillId}`);\n    const skills = await scanSkills(aiAssetsRoot);\n    const skill = skills.find((s) => s.id === skillId);\n    if (!skill) return err(`Skill not found: ${skillId}`);\n    const content = await fs.readFile(skill.path, \"utf-8\");\n    return ok(content);\n  } catch (e: unknown) {\n    return err(e instanceof Error ? e.message : String(e));\n  }\n}\n\n/**\n * Search skills by name, description, ID, or keywords.\n *\n * Case-insensitive substring match against all text fields in every skill\n * entry.  Returns the same summary shape as {@link skillList}.\n *\n * @param projectDir - Absolute path to the skaile project root.\n * @param query      - Search string.\n *\n * @docLink packages/workspace-plugin/concepts#tool-delivery\n */\nexport async function skillSearch(projectDir: string, query: string): Promise<ToolResult> {\n  try {\n    const aiAssetsRoot = await findAiAssetsRoot(projectDir);\n    if (!aiAssetsRoot) return okJson([]);\n    const skills = await scanSkills(aiAssetsRoot);\n    const q = query.toLowerCase();\n    const matched = skills.filter(\n      (s) =>\n        s.name.toLowerCase().includes(q) ||\n        s.description.toLowerCase().includes(q) ||\n        s.id.toLowerCase().includes(q) ||\n        (s.keywords ?? []).some((k) => k.toLowerCase().includes(q)),\n    );\n    return okJson(\n      matched.map((s) => ({\n        id: s.id,\n        name: s.name,\n        description: s.description,\n        source: s.source,\n        version: s.version,\n        keywords: s.keywords,\n      })),\n    );\n  } catch (e: unknown) {\n    return err(e instanceof Error ? e.message : String(e));\n  }\n}\n\n/**\n * Validate that all prerequisites declared in a skill's `SKILL.md` are\n * satisfied in `targetDir`.\n *\n * Uses `@skaile/workspaces/resolver` to parse the `REQUIRES` / `READS` / `WRITES`\n * DSL and run the requirement checks against the filesystem.  Returns a\n * validation report as JSON.\n *\n * @param projectDir - Absolute path to the skaile project root (for skill lookup).\n * @param skillId    - Skill ID as returned by {@link skillList}.\n * @param targetDir  - Directory to validate against (typically the user's project).\n *\n * @docLink packages/workspace-plugin/concepts#tool-delivery\n */\nexport async function skillCheckRequirements(\n  projectDir: string,\n  skillId: string,\n  targetDir: string,\n): Promise<ToolResult> {\n  try {\n    const aiAssetsRoot = await findAiAssetsRoot(projectDir);\n    if (!aiAssetsRoot) return err(`Skill not found: ${skillId}`);\n    const skills = await scanSkills(aiAssetsRoot);\n    const skill = skills.find((s) => s.id === skillId);\n    if (!skill) return err(`Skill not found: ${skillId}`);\n    const content = await fs.readFile(skill.path, \"utf-8\");\n\n    const requirements = parseSkillRequirements(content);\n    const report = await validateRequirements(skillId, requirements, targetDir);\n    return okJson(report);\n  } catch (e: unknown) {\n    return err(e instanceof Error ? e.message : String(e));\n  }\n}\n\n/**\n * Get the formatted `REQUIRES`/`INPUT`/`READS`/`WRITES` DSL preamble for a skill.\n *\n * Uses `@skaile/workspaces/resolver` to build the requirements preamble that can be\n * prepended to the skill prompt for injection into the agent's context.\n * Returns `\"(no requirements declared)\"` when the skill has no requirements.\n *\n * @param projectDir - Absolute path to the skaile project root.\n * @param skillId    - Skill ID as returned by {@link skillList}.\n *\n * @docLink packages/workspace-plugin/concepts#tool-delivery\n */\nexport async function skillGetPreamble(projectDir: string, skillId: string): Promise<ToolResult> {\n  try {\n    const aiAssetsRoot = await findAiAssetsRoot(projectDir);\n    if (!aiAssetsRoot) return err(`Skill not found: ${skillId}`);\n    const skills = await scanSkills(aiAssetsRoot);\n    const skill = skills.find((s) => s.id === skillId);\n    if (!skill) return err(`Skill not found: ${skillId}`);\n    const content = await fs.readFile(skill.path, \"utf-8\");\n\n    const requirements = parseSkillRequirements(content);\n    const preamble = buildRequiresPreamble(requirements, skillId);\n    return ok(preamble || \"(no requirements declared)\");\n  } catch (e: unknown) {\n    return err(e instanceof Error ? e.message : String(e));\n  }\n}\n"]}

package/dist/{chunk-2LAPHLDH.js → chunk-QTLUZUF2.js}

@@ -1,39 +1,40 @@
-import { WorkspacePlugin } from './chunk-QAKUD6QN.js';
-import { buildWorkspaceToolDefs } from './chunk-6YR4ALVX.js';
-import { findAiAssetsRoot } from './chunk-Z3VKUWAX.js';
-import { startModelEndpoint } from './chunk-KUQAJVYT.js';
-import { WebSocketServerTransport } from './chunk-EJPMNDTP.js';
+import { WorkspacePlugin } from './chunk-4QRJBY2P.js';
+import { buildWorkspaceToolDefs } from './chunk-7RH6E332.js';
+import { findAiAssetsRoot } from './chunk-TSTRH4SM.js';
+import { startModelEndpoint } from './chunk-PHAMYCZH.js';
+import { WebSocketServerTransport } from './chunk-COUJOTAJ.js';
 import { assembleSystemPrompt, buildCapabilitiesPromptSection } from './chunk-W3UDISS2.js';
-import { prepareNativePolicy, codexInstanceEnvironment, parseCodexCredential, parseCodexRefreshInput, parseCodexRefreshResult } from './chunk-ZFUZ5AKM.js';
-import { resolveFlowPath } from './chunk-J72MO2WA.js';
-import { findAiAssetsRoot as findAiAssetsRoot$1, deployCatalogEntry, undeployCatalogEntry } from './chunk-VYVTEMAW.js';
-import { ConnectFailureCarryOver, registerBuiltinConnectors, buildConnectorPromptSection, findMissingPackages, installNpmPackages, ConnectorManager, buildSdkConnectorTools, buildLazySdkFlowTools, describeFlowOperations, buildConnectorToolDefs, buildFlowToolDefs, SessionNodeExecutor, SessionSubpromptRunner, ClassifierSubpromptRunner, SessionInlineSubFlowRunner, driveOrchestratorTurn, buildSdkFlowTools } from './chunk-DGTI65OC.js';
-import { loadYamlConnectorDeclarations, withMaterializedConnectorDeclarations, SecretProviderChain, ConnectorStartupError, isKnownSecretRef, EnvSecretProvider, PreMintedSecretProvider, InMemorySecretProvider, resolvedConfigToDeclarations, deriveSingleMaterializedConnectorDeclaration } from './chunk-BBBCJSSU.js';
-import { EventNormalizer } from './chunk-5Y2KGB4H.js';
-import { sessionSurfaceNotice, approvalCardOf, APPROVE_ONCE, DENY, probeResumeTranscript, transcriptStoreForRuntime } from './chunk-SVTMNSPI.js';
+import { prepareNativePolicy, codexInstanceEnvironment, parseCodexCredential, parseCodexRefreshInput, parseCodexRefreshResult } from './chunk-HTGTNN2B.js';
+import { resolveFlowPath } from './chunk-DU26AVK2.js';
+import { findAiAssetsRoot as findAiAssetsRoot$1, deployCatalogEntry, undeployCatalogEntry } from './chunk-PNUM7GUY.js';
+import { ConnectFailureCarryOver, registerBuiltinConnectors, buildConnectorPromptSection, findMissingPackages, installNpmPackages, ConnectorManager, buildSdkConnectorTools, buildLazySdkFlowTools, describeFlowOperations, buildConnectorToolDefs, buildFlowToolDefs, SessionNodeExecutor, SessionSubpromptRunner, ClassifierSubpromptRunner, SessionInlineSubFlowRunner, driveOrchestratorTurn, buildSdkFlowTools } from './chunk-ZEH4WFEG.js';
+import { loadYamlConnectorDeclarations, withMaterializedConnectorDeclarations, SecretProviderChain, ConnectorStartupError, isKnownSecretRef, EnvSecretProvider, PreMintedSecretProvider, InMemorySecretProvider, resolvedConfigToDeclarations, deriveSingleMaterializedConnectorDeclaration } from './chunk-7TSNR5H5.js';
+import { EventNormalizer } from './chunk-7MV3NHPT.js';
+import { sessionSurfaceNotice, approvalCardOf, APPROVE_ONCE, DENY, probeResumeTranscript, transcriptStoreForRuntime } from './chunk-2TFKXSB5.js';
 import { CodexNativeStateUnavailable } from './chunk-LOO5CB5M.js';
 import { dispatchCapability } from './chunk-BIRW3HOG.js';
-import { classifyClaudeSdkError } from './chunk-XFIEVEU7.js';
+import { classifyClaudeSdkError } from './chunk-6OHZUUR7.js';
 import { agentExecRequested } from './chunk-7DN6JKP2.js';
-import { toAgentEffort, toMergedRegistry } from './chunk-FKQNBCDW.js';
-import { unresolvedProviderCredentials, harnessCapabilities, createHarness, catalogLayer, providerCredentialEnvName, registryCredentialEnv, AI_PROVIDER_PRESETS, supportsLiveToolUpdates } from './chunk-ILLTBKDJ.js';
-import { loadFlow } from './chunk-4MUDQCBP.js';
+import { toAgentEffort, toMergedRegistry } from './chunk-HDVLBEEX.js';
+import { unresolvedProviderCredentials, harnessCapabilities, createHarness, providerCredentialEnvName, registryCredentialEnv, supportsLiveToolUpdates } from './chunk-S6KZHPR4.js';
+import { catalogLayer, AI_PROVIDER_PRESETS } from './chunk-6UP2EDFN.js';
+import { loadFlow } from './chunk-RFQONXET.js';
 import { renderStimulusPrompt } from './chunk-WD3L5QSU.js';
 import { TERMINAL_AGENT_RUN_STATUSES, withActivityLabelJsonSchema, TOOL_ACTIVITY_PROMPT_SECTION, SESSION_ROOT_CONNECTOR_ID, PLATFORM_BLOCKS_RUNTIME_FEATURE, PROTOCOL_VERSION, deliveryClassOf } from './chunk-JCPD4QRM.js';
-import { knowledgeKindProvider, scanLibraryRoot, LocalIndex } from './chunk-S2XHGWQC.js';
-import { createDefaultKindRegistry } from './chunk-UI745XC3.js';
+import { knowledgeKindProvider, scanLibraryRoot, LocalIndex } from './chunk-Y3I4KGLX.js';
+import { createDefaultKindRegistry } from './chunk-XEVFSDIF.js';
 import { parseFlowDefinition } from './chunk-JRN5QF4C.js';
-import { BindingSchema, effectiveComposes, AgentManifestSchema, AgentTriggerSchema, ANTHROPIC_MODEL_ALIASES } from './chunk-E572OHGY.js';
-import { readLock, buildAgentPromptSections, resolveSettings, loadProviderRegistry, resolveLibraryDir } from './chunk-VMVDAZLA.js';
-import { resolveRuntimeAssets } from './chunk-ZDLUQLI6.js';
-import { DEFAULT_HARNESS_ID, resolveHarnessPaths } from './chunk-Z7ZEZZB6.js';
-import { matchPin, DEFAULT_AGENT_INSTANCE_ID, effectiveAgentInstances, resolveAgentDefinitionDir, AgentRefResolutionError, resolveSkWorkspaceConfig, resolveAgentDir, loadMcpServerDeclarations, COMPACTION_DEFAULTS, resolveCompactionThresholdPercent, getGlobalCacheDir, sourceCacheKey, validateAssetRecipeAttr, deriveSingleMaterializedMcpDeclaration, stageMaterializedSkills, readSkillAllowList, isStagedSkillMarkerFor, unstageSkill, STAGED_SKILL_MARKER } from './chunk-ZHGKAZJ7.js';
+import { BindingSchema, effectiveComposes, AgentManifestSchema, AgentTriggerSchema, ANTHROPIC_MODEL_ALIASES } from './chunk-76FLBODK.js';
+import { readLock, buildAgentPromptSections, resolveSettings, loadProviderRegistry, resolveLibraryDir } from './chunk-J5JRGBKK.js';
+import { resolveRuntimeAssets } from './chunk-6WH2WE4B.js';
+import { DEFAULT_HARNESS_ID, resolveHarnessPaths } from './chunk-C5HFK34M.js';
+import { matchPin, DEFAULT_AGENT_INSTANCE_ID, effectiveAgentInstances, resolveAgentDefinitionDir, AgentRefResolutionError, resolveSkWorkspaceConfig, resolveAgentDir, loadMcpServerDeclarations, COMPACTION_DEFAULTS, resolveCompactionThresholdPercent, getGlobalCacheDir, sourceCacheKey, validateAssetRecipeAttr, deriveSingleMaterializedMcpDeclaration, stageMaterializedSkills, readSkillAllowList, isStagedSkillMarkerFor, unstageSkill, STAGED_SKILL_MARKER } from './chunk-XBQTXGY4.js';
 import { globalSkaileDir } from './chunk-L5VSIPQD.js';
 import { harnessNameForHarnessId, SUPPORTED_HARNESSES, HARNESS_TARGETS } from './chunk-VTETQCR6.js';
-import { withFsDeadline, FsDeadlineError, fsDeadlineMs, parseFrontmatter, tryWithFsDeadline } from './chunk-RHN5MRQO.js';
-import { parseAssetRef } from './chunk-LSSYC5IC.js';
+import { withFsDeadline, FsDeadlineError, fsDeadlineMs, parseFrontmatter, tryWithFsDeadline } from './chunk-JMIKGAUA.js';
+import { parseAssetRef } from './chunk-IZQOO6MN.js';
+import { pickRegistryEntries, registryEntries, resolveEntryBaseUrl, parseModelRef, isEntryEnabled, parseCredentialRef } from './chunk-RXGPFAMN.js';
 import { resolveLogStoreConfig, createLogStoreFromConfig, OnLogBridgeSink, WsLogSink, resolveLogsRetention, enforceLogsRetention } from './chunk-DKXNKFKP.js';
-import { pickRegistryEntries, registryEntries, resolveEntryBaseUrl, parseModelRef, isEntryEnabled, parseCredentialRef } from './chunk-LSI2IVFT.js';
 import { getLogStore, registerLogStore, createLogger, resetLogStore, isUnwritableStreamError, markStreamBroken, isBrokenPipeError, redactCredentials } from './chunk-BOFL7GIF.js';
 import { __require } from './chunk-NSBPE2FW.js';
 import { createInterface } from 'readline';
@@ -6955,19 +6956,28 @@ async function dispatchRunnerCapabilityInvocation(cmd, deps) {
     deps.emit({
       type: "capability_result",
       callId: cmd.callId,
-      result: { error: capabilityErrorText(cmd.name, err) }
+      result: capabilityFailure(cmd.name, err)
     });
   }
 }
-function capabilityErrorText(name, err) {
+function capabilityFailure(name, err) {
   if (err instanceof Error && err.name === "ZodError" && "issues" in err) {
     const issues = err.issues;
     const parts = issues.map(
       (i) => `${i.path.length > 0 ? `${i.path.map(String).join(".")}: ` : ""}${i.message}`
     );
-    return `invalid input for ${name}: ${parts.join("; ")}`;
+    return {
+      ok: false,
+      code: "invalid_input",
+      message: `invalid input for ${name}: ${parts.join("; ")}`
+    };
   }
-  return err instanceof Error ? err.message : String(err);
+  const message = err instanceof Error ? err.message : String(err);
+  return {
+    ok: false,
+    code: message.startsWith("Unknown capability:") ? "unknown_capability" : "capability_failed",
+    message
+  };
 }
 function resolveCapabilityResult(pending, cmd) {
   const entry = pending.get(cmd.callId);
@@ -13873,7 +13883,7 @@ async function startAgentServer(opts) {
     log(`[serve] model endpoint listening on ${modelEndpoint.url}`);
   }
   if (secretsMode === "provisioned") {
-    log("[serve] secrets mode: provisioned \u2014 waiting for provision_secrets command");
+    log("[serve] secrets mode: provisioned \u2014 waiting for session_init with a `secrets` map");
   } else {
     try {
       sessionConfig = buildSessionConfig(new EnvSecretProvider());
@@ -15377,7 +15387,7 @@ async function startAgentServer(opts) {
           log("[serve] prompt received before secrets provisioned \u2014 rejecting");
           sendEvent({
             type: "error",
-            message: "Secrets not yet provisioned \u2014 send provision_secrets first",
+            message: "Secrets not yet provisioned: send session_init with a `secrets` map",
             fatal: false
           });
           return false;
@@ -15970,7 +15980,7 @@ async function startAgentServer(opts) {
       `[serve] harness=${agentSession.harnessType} model=${agentSession.model ?? "(default)"} maxTurns=${maxTurns ?? "(default)"}`
     );
   } else {
-    log(`[serve] secrets=provisioned \u2014 session will initialize after provision_secrets`);
+    log(`[serve] secrets=provisioned \u2014 session will initialize after session_init`);
   }
   log(`[serve] project=${opts.projectDir}`);
   installProcessHandlers();
@@ -16160,5 +16170,5 @@ function touchSession(state) {
 }
 
 export { AgentRunError, CLAUDE_CODE_CREDENTIALS_KEY, COMPILE_MANIFEST_FILENAME, CONNECTOR_MUTATE_NOT_READY, CapabilityRegistry, CompileManifestEntrySchema, CompositionError, DEFAULT_CAPABILITY_CALL_TIMEOUT_MS, DEFAULT_COALESCE_MS, DEFAULT_FLOW_MUTATE_CONNECTOR_WAIT_MS, DEFAULT_MAX_FINISHED_TREES, DEFAULT_RUN_LIMITS, MOUNT_LIST_MAX_DEPTH, MOUNT_LIST_MAX_ENTRIES, MOUNT_READ_DEADLINE_FACTOR, MOUNT_READ_MAX_CHUNK_BYTES, MOUNT_STAT_BUDGET_MS, MOUNT_STAT_MAX_ENTRIES, MOUNT_TREE_OP_DEADLINE_FACTOR, MOUNT_WRITE_MAX_CHUNK_BYTES, MarkdownStreamer, PreInitRingSink, ResourceOperationError, SESSION_ROOT_WRITABLE_DIRS, SESSION_ROOT_WRITABLE_FILES, UnknownCompositionKindError, WRITE_RANGE_PARTIAL_TTL_MS, WS_AUTH_TOKEN_ENV, WS_AUTH_TOKEN_FILE_ENV, agentDefinitionExists, bootstrapCapabilityRegistry, bootstrapRunnerLogStore, buildAgentResources, buildClientCapabilityHandler, buildCompositionRunSnapshot, buildConnectorTokenMediator, buildContextSection, buildEnvironmentSection, buildResourcesAvailablePayload, buildRunnerAgentSections, buildStoreSnapshotReplay, builtinCapabilities, canonicalJson, capabilityLogInstance, capabilitySignatureInputs, clearPreInitRingSink, clearSession, compileComposition, compositionRunSnapshotPath, computeCapabilitySignature, computeDirectoryTotals, computeRevisionHash, connectorRefreshKind, createAgentSession, createCompositionContentSource, createFinalTextFallback, createFlowConnectorReadiness, createInMemoryRunStore, createManagedCodexSubpromptHarness, createRunController, createSessionStimulusBus, defineCapability, deleteSession, describeComposition, dispatchResourceRequest, dispatchRunnerCapabilityInvocation, emitSystemPromptComposed, ensureClaudeSettingsDisablesConnectors, ensureGitConfigInclude, executeConnectorMutate, extractClaudeAiOauthExpiresAt, flowStartNeedsHarnessRestart, getPreInitRingSink, handleMountResourceRequest, handleResourceRequest, handleSessionRootResourceRequest, harnessActiveAfterTurnEnd, hasNonTerminalFlow, hashAgentFiles, hashContent, hostOpResumeStimulus, installPreInitRingSink, instanceForSession, instanceSessionOverrides, isCompilePinCurrent, isCompositionError, isEmptyKnowledgeIndex, isSessionRootPathAllowed, listSessions, loadAgentManifest, loadCompileManifest, loadCompileManifestFromDir, loadCompositionRunSnapshot, loadKnowledgeDir, loadManagedCodexHostConfig, loadSession, loadSessionById, manifestModelForHarness, mcpAuthSecretKey, newSession, nulTailPaddingLength, pickChatFlowTarget, pickFlowToolTarget, pickRepointedManager, planFlowMutate, prepareCodexTools, reconcilePendingDecisions, reconnectedRunNeedsAgentTurn, recreateKeepingLiveFlows, registerActiveFlow, registerCompositionCapabilities, rejectCapabilityOnApprovalDeny, rejectPendingCapabilityCallsOnDisconnect, resetRunnerLogStore, resolveAgentInstance, resolveBinding, resolveCapabilityCallTimeoutMs, resolveCapabilityResult, resolveComposition, resolveFlowMutateConnectorWaitMs, resolveInstanceAgentDir, resolveMixin, resolveSessionId, restoredRunHasWorkToResume, runAgentChat, saveCompositionRunSnapshot, saveSession, setCurrentSession, setUpFlowConnector, startAgentServer, stimulusFromMetas, stripFrontmatter, takeRunnerWsAuthToken, toActiveFlowTarget, touchSession, unresolvedCredentialNotices, validateInputResponse, verifyConventionItems, writeClaudeCodeCredentialsFile, writeRangeChunk, writeRangePartialPath };
-//# sourceMappingURL=chunk-2LAPHLDH.js.map
-//# sourceMappingURL=chunk-2LAPHLDH.js.map
+//# sourceMappingURL=chunk-QTLUZUF2.js.map
+//# sourceMappingURL=chunk-QTLUZUF2.js.map