@skaile/workspaces 6.10.0 → 6.11.0

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## 6.11.0
+
+### Minor Changes
+
+- [#1147](https://github.com/skaile-ai/workspaces/pull/1147) [`b3b23e4`](https://github.com/skaile-ai/workspaces/commit/b3b23e4acc5ca3a9cb6466331a18c9d1a0599ab1) Thanks [@mortegro](https://github.com/mortegro)! - Agent `tools.host_allowed`: an optional list of capability names (anchored match, `*` is the only wildcard) that limits which host tools the omp harness registers. It is separate from `tools.allowed`/`denied`, so an agent can run with omp's native tools off (`--no-tools`) and still expose only `mcp__app__*`. `undefined` changes nothing, `[]` registers no host tool. The filter runs before every `set_host_tools`, and a `host_tool_call` for a name outside the current registration now gets an error result without reaching the capability registry. `AgentToolsSchema` and `AgentConfig.tools` gain the field.
+
+  omp host tools whose capability name starts with `mcp__` are now advertised to omp as `host__…` (`mcp__app__query` → `host__app__query`). omp owns the `mcp__` prefix for its MCP manager, and a host tool carrying it could be missing from the model's tool list depending on whether `set_host_tools` reached omp before its startup MCP refresh. Capability names, `host_allowed` matching and dispatch are unchanged; only the name the model sees differs for such tools.
+
+- [#1144](https://github.com/skaile-ai/workspaces/pull/1144) [`8578d47`](https://github.com/skaile-ai/workspaces/commit/8578d476c83a4f7a743cd6889f33e4923b32ae37) Thanks [@peteralbert](https://github.com/peteralbert)! - The runner echoes the host's turn ids (protocol 5.2.0), so a host can tell which of its turns a capability call or a turn end belongs to without pairing events by queue order. `prompt` and `reply` take an optional opaque `turnId`. `capability_invoked` carries `turnIds`: the turn holding the harness (plus any reply it took while paused), the turns that launched the tasks a self-started turn reads, and the launching turns of every background task still running, since a capability call carries no parent id. The `finished` that ends a host turn carries `turnId` when that turn alone holds the harness; a self-started turn's does not. The runner leaves either field out whenever it cannot name every turn involved (a flow turn, a compaction until it settles, a turn sent without an id, a task or wake of unknown origin), so a host keeps its old pairing for that event. `SessionDispatcher.sendCommand` sends a command's `turnId` to the runner and does not store it; `SessionDispatcher.deliverPrompt` and `AgentClient.prompt` take a `turnId` option. The runner lists `turnIds.v1` in `protocol_info.runtimeFeatures`. This lets the Skaile platform keep a turn's starter across a backend restart (skaile-ai/platform#8353).
+
 ## 6.10.0
 
 ### Minor Changes

package/dist/app-sdk/index.js

@@ -1,4 +1,4 @@
-import { PROTOCOL_VERSION_STRING } from '../chunk-7NN3P6VF.js';
+import { PROTOCOL_VERSION_STRING } from '../chunk-342UX2MG.js';
 import '../chunk-NSBPE2FW.js';
 import * as z from 'zod';
 

package/dist/{asset-feeds-UG3PG423.js → asset-feeds-PO2WC75V.js}

@@ -1,10 +1,10 @@
-import { storeNotInstallableReason } from './chunk-XWCV2A2F.js';
-import { getKnownKinds } from './chunk-DOMRBOJZ.js';
+import { storeNotInstallableReason } from './chunk-SZ3XCZHC.js';
+import { getKnownKinds } from './chunk-HPQ2WDYC.js';
 import './chunk-WDG5IVEA.js';
 import './chunk-7RGTAEG6.js';
-import './chunk-4I4SBOCS.js';
-import './chunk-FXBKBOI5.js';
-import './chunk-RZ5R6GDJ.js';
+import './chunk-IIELRGIZ.js';
+import './chunk-7FXOOUOC.js';
+import './chunk-DRUAQ7IY.js';
 import './chunk-CVUMZTNO.js';
 import './chunk-F3D25RGM.js';
 import './chunk-3TXEJN4W.js';
@@ -12,12 +12,12 @@ import './chunk-ISHJITXJ.js';
 import './chunk-LNFKL23K.js';
 import './chunk-JRN5QF4C.js';
 import './chunk-NUELZWCF.js';
-import './chunk-KRL53RZB.js';
+import './chunk-7LJUK5JK.js';
 import './chunk-PKE3PXOK.js';
 import './chunk-LKBRBVVS.js';
 import './chunk-UQ6LFBPZ.js';
-import './chunk-R3ZNAPBV.js';
-import './chunk-WS3BOCAT.js';
+import './chunk-7VBD5XUM.js';
+import './chunk-LCXQ4LVP.js';
 import './chunk-MEU2HHGV.js';
 import './chunk-4GY63JU6.js';
 import { factoryAssetRoots } from './chunk-CJO3XKO7.js';
@@ -60,8 +60,8 @@ function libraryEntryOf(asset) {
 async function libraryAssets() {
   const notes = [];
   try {
-    const { openLibraryManager } = await import('./open-library-OJREQ22B.js');
-    const { getKindRegistry } = await import('./open-registry-OEU6QUK2.js');
+    const { openLibraryManager } = await import('./open-library-K6O6OVW5.js');
+    const { getKindRegistry } = await import('./open-registry-4HNCWOCN.js');
     const { scanAuthoringLibraries } = await import('./library/index.js');
     const { library: index, close } = await openLibraryManager();
     try {
@@ -94,7 +94,7 @@ async function libraryAssets() {
 async function storeAssets(projectDir) {
   const notes = [];
   try {
-    const { resolveCatalogSource } = await import('./open-library-OJREQ22B.js');
+    const { resolveCatalogSource } = await import('./open-library-K6O6OVW5.js');
     const { source, close } = await resolveCatalogSource({ projectDir });
     try {
       const assets = (await source.listAssets()).filter(
@@ -175,5 +175,5 @@ async function gatherAssetFeeds(am, projectDir) {
 }
 
 export { gatherAssetFeeds };
-//# sourceMappingURL=asset-feeds-UG3PG423.js.map
-//# sourceMappingURL=asset-feeds-UG3PG423.js.map
+//# sourceMappingURL=asset-feeds-PO2WC75V.js.map
+//# sourceMappingURL=asset-feeds-PO2WC75V.js.map

package/dist/{asset-feeds-UG3PG423.js.map → asset-feeds-PO2WC75V.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../cli/src/asset-feeds.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwEA,SAAS,eAAe,KAAA,EAAsC;AAC5D,EAAA,MAAM,EAAE,UAAS,GAAI,KAAA;AACrB,EAAA,MAAM,MAAA,GAAU,SAAS,QAAA,EAAkD,QAAA;AAC3E,EAAA,MAAM,WAAA,GAAc,SAAS,QAAA,IAAY,MAAA;AACzC,EAAA,MAAM,cACJ,OAAO,WAAA,KAAgB,QAAA,GACnB,WAAA,GACA,MAAM,OAAA,CAAQ,WAAW,CAAA,GACvB,WAAA,CAAY,OAAO,CAAC,CAAA,KAAmB,OAAO,CAAA,KAAM,QAAQ,CAAA,GAC5D,MAAA;AACR,EAAA,MAAM,OAAO,QAAA,CAAS,YAAA;AACtB,EAAA,OAAO;AAAA,IACL,MAAM,KAAA,CAAM,IAAA;AAAA,IACZ,MAAM,KAAA,CAAM,IAAA;AAAA,IACZ,aAAa,OAAO,QAAA,CAAS,WAAA,KAAgB,QAAA,GAAW,SAAS,WAAA,GAAc,EAAA;AAAA,IAC/E,QAAQ,KAAA,CAAM,YAAA;AAAA,IACd,WAAW,KAAA,CAAM,SAAA;AAAA,IACjB,GAAI,MAAM,MAAA,GAAS,EAAE,QAAQ,KAAA,CAAM,MAAA,KAAW,EAAC;AAAA,IAC/C,SAAS,KAAA,CAAM,OAAA;AAAA,IACf,QAAA,EAAU,gBAAgB,MAAA,GAAY,KAAK,aAAA,CAAc,EAAE,QAAA,EAAU,WAAA,EAAa,CAAA;AAAA,IAClF,cACE,KAAA,CAAM,IAAA,KAAS,YAAY,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,GACzC,IAAA,CAAK,OAAO,CAAC,CAAA,KAAmB,OAAO,CAAA,KAAM,QAAA,IAAY,EAAE,MAAA,GAAS,CAAC,IACrE;AAAC,GACT;AACF;AAWA,eAAe,aAAA,GAGZ;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AAEF,IAAA,MAAM,EAAE,kBAAA,EAAmB,GAAI,MAAM,OAAO,4BAAmB,CAAA;AAC/D,IAAA,MAAM,EAAE,eAAA,EAAgB,GAAI,MAAM,OAAO,6BAAoB,CAAA;AAC7D,IAAA,MAAM,EAAE,sBAAA,EAAuB,GAAI,MAAM,OAAO,oBAA4B,CAAA;AAC5E,IAAA,MAAM,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAM,GAAI,MAAM,kBAAA,EAAmB;AAC3D,IAAA,IAAI;AACF,MAAA,MAAM,UAAyB,EAAC;AAChC,MAAA,KAAA,MAAW,QAAQ,MAAM,sBAAA,CAAuB,KAAA,EAAO,eAAA,EAAiB,CAAA,EAAG;AACzE,QAAA,IAAI,IAAA,CAAK,UAAU,KAAA,CAAA,EAAW;AAC5B,UAAA,KAAA,CAAM,IAAA,CAAK,EAAE,IAAA,EAAM,WAAA,EAAa,OAAA,EAAS,CAAA,EAAG,IAAA,CAAK,OAAA,CAAQ,IAAI,CAAA,EAAA,EAAK,IAAA,CAAK,KAAK,IAAI,CAAA;AAChF,UAAA;AAAA,QACF;AACA,QAAA,KAAA,MAAW,KAAA,IAAS,KAAK,MAAA,EAAQ;AAC/B,UAAA,OAAA,CAAQ,IAAA,CAAK;AAAA,YACX,MAAA,EAAQ,SAAA;AAAA,YACR,KAAA,EAAO,eAAe,KAAK,CAAA;AAAA,YAC3B,KAAA,EAAO,KAAK,OAAA,CAAQ;AAAA,WACrB,CAAA;AAAA,QACH;AAAA,MACF;AACA,MAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,IAC1B,CAAA,SAAE;AACA,MAAA,KAAA,EAAM;AAAA,IACR;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,IAAA,EAAM,WAAA;AAAA,MACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACzD,CAAA;AACD,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAYA,eAAe,YAAY,UAAA,EAGxB;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AACF,IAAA,MAAM,EAAE,oBAAA,EAAqB,GAAI,MAAM,OAAO,4BAAmB,CAAA;AACjE,IAAA,MAAM,EAAE,QAAQ,KAAA,EAAM,GAAI,MAAM,oBAAA,CAAqB,EAAE,YAAY,CAAA;AACnE,IAAA,IAAI;AAEF,MAAA,MAAM,MAAA,GAAA,CAAU,MAAM,MAAA,CAAO,UAAA,EAAW,EAAG,MAAA;AAAA,QACzC,CAAC,CAAA,KAAM,yBAAA,CAA0B,CAAC,CAAA,KAAM,KAAA;AAAA,OAC1C;AACA,MAAA,MAAM,OAAA,GAA0B,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,QACjD,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,IAAA,EAAO,EAAE,IAAA,IAAsB,OAAA;AAAA,QAC/B,WAAA,EAAa,EAAE,WAAA,IAAe,EAAA;AAAA,QAC9B,MAAA,EAAQ,CAAA,QAAA,EAAW,CAAA,CAAE,EAAE,CAAA,CAAA;AAAA,QACvB,WAAW,CAAA,CAAE,SAAA;AAAA,QACb,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,QAAQ,CAAA,CAAE,MAAA;AAAA,QACV,UAAU,CAAA,CAAE,QAAA;AAAA,QACZ,SAAS,CAAA,CAAE,OAAA;AAAA,QACX,UAAU,EAAC;AAAA,QACX,cAAc;AAAC,OACjB,CAAE,CAAA;AACF,MAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,IAC1B,CAAA,SAAE;AACA,MAAA,KAAA,EAAM;AAAA,IACR;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,MAAM,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAG3D,IAAA,IAAI,CAAC,QAAA,CAAS,IAAA,CAAK,GAAG,CAAA,EAAG;AACvB,MAAA,KAAA,CAAM,KAAK,EAAE,IAAA,EAAM,OAAA,EAAS,OAAA,EAAS,KAAK,CAAA;AAAA,IAC5C;AACA,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAaA,eAAe,aAAa,EAAA,EAA8C;AAIxE,EAAA,MAAM,eAAA,GAAkB,iBAAA,EAAkB,CAAE,GAAA,CAAI,CAAC,CAAA,KAAO,CAAA,CAAE,QAAA,CAAc,IAAA,CAAA,GAAG,CAAA,GAAI,CAAA,GAAI,CAAA,GAAS,IAAA,CAAA,GAAI,CAAA;AAChG,EAAA,MAAM,gBAAgB,CAAC,CAAA,KACrB,eAAA,CAAgB,IAAA,CAAK,CAAC,EAAA,KAAO,CAAA,KAAM,EAAA,CAAG,KAAA,CAAM,GAAG,EAAE,CAAA,IAAK,CAAA,CAAE,UAAA,CAAW,EAAE,CAAC,CAAA;AAExE,EAAA,MAAM,GAAA,GAAA,CAAO,MAAM,EAAA,CAAG,MAAA,EAAO,EAAG,MAAA,CAAO,CAAC,CAAA,KAAM,CAAC,aAAA,CAAc,CAAA,CAAE,MAAM,CAAC,CAAA;AACtE,EAAA,MAAM,UAAyB,EAAC;AAMhC,EAAA,KAAA,MAAW,EAAE,QAAA,EAAU,IAAA,EAAK,IAAK,EAAA,CAAG,iBAAgB,EAAG;AACrD,IAAA,IAAI,aAAA,CAAc,IAAI,CAAA,EAAG;AACzB,IAAA,MAAM,SAAS,IAAA,CAAK,QAAA,CAAc,IAAA,CAAA,GAAG,CAAA,GAAI,OAAO,IAAA,GAAY,IAAA,CAAA,GAAA;AAC5D,IAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,MAAA,KAAW,IAAA,IAAQ,CAAA,CAAE,MAAA,CAAO,UAAA,CAAW,MAAM,CAAC,CAAA;AAChF,IAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG;AACxB,IAAA,MAAM,aAAa,QAAA,CAAS,KAAA,CAAM,GAAG,CAAA,CAAE,KAAI,IAAK,QAAA;AAChD,IAAA,KAAA,MAAW,KAAA,IAAS,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,EAAE,QAAQ,QAAA,EAAU,KAAA,EAAO,KAAA,EAAO,UAAA,EAAY,CAAA;AAAA,EACxF;AACA,EAAA,OAAO,OAAA;AACT;AAUA,eAAe,aAAA,GAGZ;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AACF,IAAA,MAAM,UAA0B,EAAC;AACjC,IAAA,KAAA,MAAW,IAAA,IAAQ,mBAAkB,EAAG;AACtC,MAAA,OAAA,CAAQ,IAAA,CAAK,GAAI,MAAM,QAAA,CAAS,IAAA,EAAM,gBAAA,EAAkB,EAAE,UAAA,EAAY,aAAA,EAAc,EAAG,CAAE,CAAA;AAAA,IAC3F;AACA,IAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,EAC1B,SAAS,GAAA,EAAK;AACZ,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,IAAA,EAAM,SAAA;AAAA,MACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACzD,CAAA;AACD,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAGA,SAAS,GAAA,CAAI,QAAqB,OAAA,EAAwC;AACxE,EAAA,OAAO,QAAQ,GAAA,CAAI,CAAC,WAAW,EAAE,MAAA,EAAQ,OAAM,CAAE,CAAA;AACnD;AASA,eAAsB,gBAAA,CACpB,IACA,UAAA,EAC0B;AAC1B,EAAA,MAAM,CAAC,IAAA,EAAM,KAAK,CAAA,GAAI,MAAM,OAAA,CAAQ,GAAA,CAAI,CAAC,aAAA,EAAc,EAAG,WAAA,CAAY,UAAU,CAAC,CAAC,CAAA;AAClF,EAAA,MAAM,OAAA,GAAU,MAAM,aAAA,EAAc;AACpC,EAAA,MAAM,GAAA,GAAM,MAAM,YAAA,CAAa,EAAE,CAAA;AACjC,EAAA,OAAO;AAAA,IACL,OAAA,EAAS;AAAA,MACP,GAAG,GAAA;AAAA,MACH,GAAG,IAAA,CAAK,OAAA;AAAA,MACR,GAAG,GAAA,CAAI,SAAA,EAAW,OAAA,CAAQ,OAAO,CAAA;AAAA,MACjC,GAAG,GAAA,CAAI,OAAA,EAAS,KAAA,CAAM,OAAO;AAAA,KAC/B;AAAA,IACA,KAAA,EAAO,CAAC,GAAG,IAAA,CAAK,KAAA,EAAO,GAAG,KAAA,CAAM,KAAA,EAAO,GAAG,OAAA,CAAQ,KAAK;AAAA,GACzD;AACF","file":"asset-feeds-UG3PG423.js","sourcesContent":["/**\n * asset-feeds.ts — gather installable assets from every feed the manage TUI\n * surfaces.\n *\n * Four feeds, normalized into `CatalogEntry`:\n * - **Project sources** — `skaile.yaml` `sources:` entries (scanned via\n *   `AssetManager.search()`; the new `sources:` field is merged into the\n *   legacy repositories map in `AssetManager.loadConfig`).\n * - **Local libraries** — user authoring places from `LocalIndex`, read through\n *   `scanAuthoringLibraries` (`@skaile/workspaces/library`): the same scan\n *   `library index` / `search --local` use, so publishers and refs match them\n *   (per-asset `publisher_overrides` honoured), `dev_paths` assets are left out,\n *   and a library that fails to scan becomes one note while the rest stay listed.\n * - **Factory assets** — the bundled first-party `factory-assets` tree\n *   (`factoryAssetRoots()`), scanned from disk. Always present; no network.\n * - **Remote store** — the configured catalog source when `catalog.url` is\n *   not `local`. Failures are non-fatal — they surface as notes.\n */\n\nimport * as path from \"node:path\";\nimport {\n  type AssetKind,\n  type CatalogEntry,\n  factoryAssetRoots,\n  parseRequires,\n  scanRepo,\n} from \"@skaile/workspaces/core\";\nimport { getKnownKinds } from \"./open-registry.ts\";\nimport { storeNotInstallableReason } from \"./store-addable.ts\";\nimport type { DiscoveredAsset } from \"@skaile/workspaces/discovery\";\n\n/** One non-fatal note returned to the caller for surfacing in the UI. */\nexport interface FeedNote {\n  feed: \"sources\" | \"libraries\" | \"store\" | \"factory\";\n  message: string;\n}\n\n/**\n * Which feed an asset came from. This is the top-level grouping axis in the\n * manage TUI (\"where is this skill coming from?\") and is intentionally distinct\n * from `publisher` (asset-intrinsic identity): the same publisher can legitimately\n * appear under more than one origin (e.g. a github repo you added as a `source`\n * that is also listed in the remote `store`).\n */\nexport type AssetOrigin = \"source\" | \"library\" | \"factory\" | \"store\";\n\n/** A catalog entry tagged with the feed it was gathered from. */\nexport interface OriginEntry {\n  origin: AssetOrigin;\n  entry: CatalogEntry;\n  /**\n   * Second-level grouping label for the manage tree. Defaults (when unset) to the\n   * entry's `publisher`; the source feed sets it to the source's short repo name\n   * so the Sources band groups by source — \"which repo did this come from\" — not\n   * by the asset-intrinsic publisher.\n   */\n  group?: string;\n}\n\nexport interface AssetFeedResult {\n  entries: OriginEntry[];\n  notes: FeedNote[];\n}\n\n/**\n * Map one discovered library asset to the `CatalogEntry` the manage rows read.\n * `publisher` is the bare per-asset publisher (what `search --local` prints),\n * `source` the manifest path. `repo` is left unset: it only feeds the Sources-tree\n * org grouping. `requires` / `dependencies` come from the manifest the way the\n * scanner fills them — string `requires:` refs parsed to `{kind, name}`, a bundle's\n * string `dependencies:` list verbatim.\n */\nfunction libraryEntryOf(asset: DiscoveredAsset): CatalogEntry {\n  const { manifest } = asset;\n  const nested = (manifest.metadata as Record<string, unknown> | undefined)?.requires;\n  const rawRequires = manifest.requires ?? nested;\n  const requireRefs =\n    typeof rawRequires === \"string\"\n      ? rawRequires\n      : Array.isArray(rawRequires)\n        ? rawRequires.filter((r): r is string => typeof r === \"string\")\n        : undefined;\n  const deps = manifest.dependencies;\n  return {\n    name: asset.name,\n    kind: asset.kind as AssetKind,\n    description: typeof manifest.description === \"string\" ? manifest.description : \"\",\n    source: asset.manifestPath,\n    publisher: asset.publisher,\n    ...(asset.plugin ? { plugin: asset.plugin } : {}),\n    version: asset.version,\n    requires: requireRefs === undefined ? [] : parseRequires({ requires: requireRefs }),\n    dependencies:\n      asset.kind === \"bundle\" && Array.isArray(deps)\n        ? deps.filter((d): d is string => typeof d === \"string\" && d.length > 0)\n        : [],\n  };\n}\n\n/**\n * Pull assets from local libraries (the authoring places under\n * `~/.skaile/libraries/<name>/`, not the `~/.skaile/cache/sources/` cache) through\n * `scanAuthoringLibraries`, grouped under the bare library name\n * (`group: <name>`) so the manage TUI shows a clean `<name>` band — no\n * `library:` prefix (mirrors the source feed). Plugin grouping (`entry.plugin`)\n * comes from `DiscoveredAsset.plugin`. A library whose scan fails becomes one\n * `FeedNote`; the outer `catch` covers only opening the index.\n */\nasync function libraryAssets(): Promise<{\n  entries: OriginEntry[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    // Lazy: the library subpath pulls in SQLite, which the other feeds never need.\n    const { openLibraryManager } = await import(\"./open-library.ts\");\n    const { getKindRegistry } = await import(\"./open-registry.ts\");\n    const { scanAuthoringLibraries } = await import(\"@skaile/workspaces/library\");\n    const { library: index, close } = await openLibraryManager();\n    try {\n      const entries: OriginEntry[] = [];\n      for (const scan of await scanAuthoringLibraries(index, getKindRegistry())) {\n        if (scan.error !== undefined) {\n          notes.push({ feed: \"libraries\", message: `${scan.library.name}: ${scan.error}` });\n          continue;\n        }\n        for (const asset of scan.assets) {\n          entries.push({\n            origin: \"library\",\n            entry: libraryEntryOf(asset),\n            group: scan.library.name,\n          });\n        }\n      }\n      return { entries, notes };\n    } finally {\n      close();\n    }\n  } catch (err) {\n    notes.push({\n      feed: \"libraries\",\n      message: err instanceof Error ? err.message : String(err),\n    });\n    return { entries: [], notes };\n  }\n}\n\n/**\n * Pull a (best-effort) snapshot of the connected remote store catalog.\n *\n * - Returns no entries when the resolved catalog is local-only or the host\n *   is unreachable (the failure becomes a note, not an exception).\n * - Maps `CatalogAsset` → `CatalogEntry`, carrying `publisher`, `repo`, and\n *   `category` straight through and using `source = \"store://<id>\"`; per-file\n *   `source` paths are not available for remote assets so the canonical ref is\n *   a stable placeholder.\n */\nasync function storeAssets(projectDir: string): Promise<{\n  entries: CatalogEntry[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    const { resolveCatalogSource } = await import(\"./open-library.ts\");\n    const { source, close } = await resolveCatalogSource({ projectDir });\n    try {\n      // The store lists only what `skaile add` can install (see store-addable.ts).\n      const assets = (await source.listAssets()).filter(\n        (a) => storeNotInstallableReason(a) === undefined,\n      );\n      const entries: CatalogEntry[] = assets.map((a) => ({\n        name: a.name,\n        kind: (a.kind as AssetKind) ?? \"skill\",\n        description: a.description ?? \"\",\n        source: `store://${a.id}`,\n        publisher: a.publisher,\n        repo: a.repo,\n        plugin: a.plugin,\n        category: a.category,\n        version: a.version,\n        requires: [],\n        dependencies: [],\n      }));\n      return { entries, notes };\n    } finally {\n      close();\n    }\n  } catch (err) {\n    const msg = err instanceof Error ? err.message : String(err);\n    // Local-only catalog throws a recognizable message — silence it; absence\n    // is the user's choice, not an error.\n    if (!/local/i.test(msg)) {\n      notes.push({ feed: \"store\", message: msg });\n    }\n    return { entries: [], notes };\n  }\n}\n\n/** The slice of `AssetManager` the source feed needs (kept narrow for tests). */\ninterface AssetManagerLike {\n  search: () => Promise<CatalogEntry[]>;\n  searchRepoRoots: () => { repoName: string; root: string }[];\n}\n\n/**\n * Project-source feed: leans on `AssetManager.search()`, which merges\n * `skaile.yaml`'s `sources:` field into the repositories map. Plugin grouping\n * (`entry.plugin`) is stamped by the scanner, so entries pass through as-is.\n */\nasync function sourceAssets(am: AssetManagerLike): Promise<OriginEntry[]> {\n  // The bundled factory tree is injected into the repositories map as an implicit\n  // source, so `am.search()` returns it too. It has its own `factory` origin band,\n  // so drop it here — otherwise the same first-party skills list twice under Sources.\n  const factoryPrefixes = factoryAssetRoots().map((r) => (r.endsWith(path.sep) ? r : r + path.sep));\n  const isFactoryPath = (p: string) =>\n    factoryPrefixes.some((fp) => p === fp.slice(0, -1) || p.startsWith(fp));\n\n  const all = (await am.search()).filter((e) => !isFactoryPath(e.source));\n  const entries: OriginEntry[] = [];\n  // Group each source's entries under the source node (its short repo name), not\n  // the publisher: under Sources the navigational question is \"which repo did\n  // this come from\". Each entry's `source` (absolute manifest path) lives under\n  // exactly one declared root, so group by prefix. The cache slug is\n  // URL-keyed `github.com/<org>/<repo>` — take the trailing segment.\n  for (const { repoName, root } of am.searchRepoRoots()) {\n    if (isFactoryPath(root)) continue;\n    const prefix = root.endsWith(path.sep) ? root : root + path.sep;\n    const owned = all.filter((e) => e.source === root || e.source.startsWith(prefix));\n    if (owned.length === 0) continue;\n    const sourceName = repoName.split(\"/\").pop() || repoName;\n    for (const entry of owned) entries.push({ origin: \"source\", entry, group: sourceName });\n  }\n  return entries;\n}\n\n/**\n * Factory-asset feed: scan the bundled first-party `factory-assets` tree(s)\n * resolved by `factoryAssetRoots()` (the `SKAILE_FACTORY_ASSETS_DIR` override\n * layer ahead of the bundled tree). Local disk only, no network — the entries are\n * the built-in skills / connectors / bundles that ship with `@skaile/workspaces`.\n * `factoryAssetRoots()` already dedupes, so the env override pointing at the\n * bundled dir collapses to one root.\n */\nasync function factoryAssets(): Promise<{\n  entries: CatalogEntry[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    const entries: CatalogEntry[] = [];\n    for (const root of factoryAssetRoots()) {\n      entries.push(...(await scanRepo(root, \"skaile-factory\", { knownKinds: getKnownKinds() })));\n    }\n    return { entries, notes };\n  } catch (err) {\n    notes.push({\n      feed: \"factory\",\n      message: err instanceof Error ? err.message : String(err),\n    });\n    return { entries: [], notes };\n  }\n}\n\n/** Tag a flat entry list with a single origin. */\nfunction tag(origin: AssetOrigin, entries: CatalogEntry[]): OriginEntry[] {\n  return entries.map((entry) => ({ origin, entry }));\n}\n\n/**\n * Run all feeds and return a single normalized result.\n *\n * Feeds run in parallel where possible — the store fetch is the slow one\n * (one HTTP call) and is fired alongside the local library walk. The factory\n * scan is local disk only, so it runs inline.\n */\nexport async function gatherAssetFeeds(\n  am: AssetManagerLike,\n  projectDir: string,\n): Promise<AssetFeedResult> {\n  const [libs, store] = await Promise.all([libraryAssets(), storeAssets(projectDir)]);\n  const factory = await factoryAssets();\n  const src = await sourceAssets(am);\n  return {\n    entries: [\n      ...src,\n      ...libs.entries,\n      ...tag(\"factory\", factory.entries),\n      ...tag(\"store\", store.entries),\n    ],\n    notes: [...libs.notes, ...store.notes, ...factory.notes],\n  };\n}\n"]}
+{"version":3,"sources":["../cli/src/asset-feeds.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwEA,SAAS,eAAe,KAAA,EAAsC;AAC5D,EAAA,MAAM,EAAE,UAAS,GAAI,KAAA;AACrB,EAAA,MAAM,MAAA,GAAU,SAAS,QAAA,EAAkD,QAAA;AAC3E,EAAA,MAAM,WAAA,GAAc,SAAS,QAAA,IAAY,MAAA;AACzC,EAAA,MAAM,cACJ,OAAO,WAAA,KAAgB,QAAA,GACnB,WAAA,GACA,MAAM,OAAA,CAAQ,WAAW,CAAA,GACvB,WAAA,CAAY,OAAO,CAAC,CAAA,KAAmB,OAAO,CAAA,KAAM,QAAQ,CAAA,GAC5D,MAAA;AACR,EAAA,MAAM,OAAO,QAAA,CAAS,YAAA;AACtB,EAAA,OAAO;AAAA,IACL,MAAM,KAAA,CAAM,IAAA;AAAA,IACZ,MAAM,KAAA,CAAM,IAAA;AAAA,IACZ,aAAa,OAAO,QAAA,CAAS,WAAA,KAAgB,QAAA,GAAW,SAAS,WAAA,GAAc,EAAA;AAAA,IAC/E,QAAQ,KAAA,CAAM,YAAA;AAAA,IACd,WAAW,KAAA,CAAM,SAAA;AAAA,IACjB,GAAI,MAAM,MAAA,GAAS,EAAE,QAAQ,KAAA,CAAM,MAAA,KAAW,EAAC;AAAA,IAC/C,SAAS,KAAA,CAAM,OAAA;AAAA,IACf,QAAA,EAAU,gBAAgB,MAAA,GAAY,KAAK,aAAA,CAAc,EAAE,QAAA,EAAU,WAAA,EAAa,CAAA;AAAA,IAClF,cACE,KAAA,CAAM,IAAA,KAAS,YAAY,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,GACzC,IAAA,CAAK,OAAO,CAAC,CAAA,KAAmB,OAAO,CAAA,KAAM,QAAA,IAAY,EAAE,MAAA,GAAS,CAAC,IACrE;AAAC,GACT;AACF;AAWA,eAAe,aAAA,GAGZ;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AAEF,IAAA,MAAM,EAAE,kBAAA,EAAmB,GAAI,MAAM,OAAO,4BAAmB,CAAA;AAC/D,IAAA,MAAM,EAAE,eAAA,EAAgB,GAAI,MAAM,OAAO,6BAAoB,CAAA;AAC7D,IAAA,MAAM,EAAE,sBAAA,EAAuB,GAAI,MAAM,OAAO,oBAA4B,CAAA;AAC5E,IAAA,MAAM,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAM,GAAI,MAAM,kBAAA,EAAmB;AAC3D,IAAA,IAAI;AACF,MAAA,MAAM,UAAyB,EAAC;AAChC,MAAA,KAAA,MAAW,QAAQ,MAAM,sBAAA,CAAuB,KAAA,EAAO,eAAA,EAAiB,CAAA,EAAG;AACzE,QAAA,IAAI,IAAA,CAAK,UAAU,KAAA,CAAA,EAAW;AAC5B,UAAA,KAAA,CAAM,IAAA,CAAK,EAAE,IAAA,EAAM,WAAA,EAAa,OAAA,EAAS,CAAA,EAAG,IAAA,CAAK,OAAA,CAAQ,IAAI,CAAA,EAAA,EAAK,IAAA,CAAK,KAAK,IAAI,CAAA;AAChF,UAAA;AAAA,QACF;AACA,QAAA,KAAA,MAAW,KAAA,IAAS,KAAK,MAAA,EAAQ;AAC/B,UAAA,OAAA,CAAQ,IAAA,CAAK;AAAA,YACX,MAAA,EAAQ,SAAA;AAAA,YACR,KAAA,EAAO,eAAe,KAAK,CAAA;AAAA,YAC3B,KAAA,EAAO,KAAK,OAAA,CAAQ;AAAA,WACrB,CAAA;AAAA,QACH;AAAA,MACF;AACA,MAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,IAC1B,CAAA,SAAE;AACA,MAAA,KAAA,EAAM;AAAA,IACR;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,IAAA,EAAM,WAAA;AAAA,MACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACzD,CAAA;AACD,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAYA,eAAe,YAAY,UAAA,EAGxB;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AACF,IAAA,MAAM,EAAE,oBAAA,EAAqB,GAAI,MAAM,OAAO,4BAAmB,CAAA;AACjE,IAAA,MAAM,EAAE,QAAQ,KAAA,EAAM,GAAI,MAAM,oBAAA,CAAqB,EAAE,YAAY,CAAA;AACnE,IAAA,IAAI;AAEF,MAAA,MAAM,MAAA,GAAA,CAAU,MAAM,MAAA,CAAO,UAAA,EAAW,EAAG,MAAA;AAAA,QACzC,CAAC,CAAA,KAAM,yBAAA,CAA0B,CAAC,CAAA,KAAM,KAAA;AAAA,OAC1C;AACA,MAAA,MAAM,OAAA,GAA0B,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,QACjD,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,IAAA,EAAO,EAAE,IAAA,IAAsB,OAAA;AAAA,QAC/B,WAAA,EAAa,EAAE,WAAA,IAAe,EAAA;AAAA,QAC9B,MAAA,EAAQ,CAAA,QAAA,EAAW,CAAA,CAAE,EAAE,CAAA,CAAA;AAAA,QACvB,WAAW,CAAA,CAAE,SAAA;AAAA,QACb,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,QAAQ,CAAA,CAAE,MAAA;AAAA,QACV,UAAU,CAAA,CAAE,QAAA;AAAA,QACZ,SAAS,CAAA,CAAE,OAAA;AAAA,QACX,UAAU,EAAC;AAAA,QACX,cAAc;AAAC,OACjB,CAAE,CAAA;AACF,MAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,IAC1B,CAAA,SAAE;AACA,MAAA,KAAA,EAAM;AAAA,IACR;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,MAAM,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAG3D,IAAA,IAAI,CAAC,QAAA,CAAS,IAAA,CAAK,GAAG,CAAA,EAAG;AACvB,MAAA,KAAA,CAAM,KAAK,EAAE,IAAA,EAAM,OAAA,EAAS,OAAA,EAAS,KAAK,CAAA;AAAA,IAC5C;AACA,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAaA,eAAe,aAAa,EAAA,EAA8C;AAIxE,EAAA,MAAM,eAAA,GAAkB,iBAAA,EAAkB,CAAE,GAAA,CAAI,CAAC,CAAA,KAAO,CAAA,CAAE,QAAA,CAAc,IAAA,CAAA,GAAG,CAAA,GAAI,CAAA,GAAI,CAAA,GAAS,IAAA,CAAA,GAAI,CAAA;AAChG,EAAA,MAAM,gBAAgB,CAAC,CAAA,KACrB,eAAA,CAAgB,IAAA,CAAK,CAAC,EAAA,KAAO,CAAA,KAAM,EAAA,CAAG,KAAA,CAAM,GAAG,EAAE,CAAA,IAAK,CAAA,CAAE,UAAA,CAAW,EAAE,CAAC,CAAA;AAExE,EAAA,MAAM,GAAA,GAAA,CAAO,MAAM,EAAA,CAAG,MAAA,EAAO,EAAG,MAAA,CAAO,CAAC,CAAA,KAAM,CAAC,aAAA,CAAc,CAAA,CAAE,MAAM,CAAC,CAAA;AACtE,EAAA,MAAM,UAAyB,EAAC;AAMhC,EAAA,KAAA,MAAW,EAAE,QAAA,EAAU,IAAA,EAAK,IAAK,EAAA,CAAG,iBAAgB,EAAG;AACrD,IAAA,IAAI,aAAA,CAAc,IAAI,CAAA,EAAG;AACzB,IAAA,MAAM,SAAS,IAAA,CAAK,QAAA,CAAc,IAAA,CAAA,GAAG,CAAA,GAAI,OAAO,IAAA,GAAY,IAAA,CAAA,GAAA;AAC5D,IAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,MAAA,KAAW,IAAA,IAAQ,CAAA,CAAE,MAAA,CAAO,UAAA,CAAW,MAAM,CAAC,CAAA;AAChF,IAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG;AACxB,IAAA,MAAM,aAAa,QAAA,CAAS,KAAA,CAAM,GAAG,CAAA,CAAE,KAAI,IAAK,QAAA;AAChD,IAAA,KAAA,MAAW,KAAA,IAAS,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,EAAE,QAAQ,QAAA,EAAU,KAAA,EAAO,KAAA,EAAO,UAAA,EAAY,CAAA;AAAA,EACxF;AACA,EAAA,OAAO,OAAA;AACT;AAUA,eAAe,aAAA,GAGZ;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AACF,IAAA,MAAM,UAA0B,EAAC;AACjC,IAAA,KAAA,MAAW,IAAA,IAAQ,mBAAkB,EAAG;AACtC,MAAA,OAAA,CAAQ,IAAA,CAAK,GAAI,MAAM,QAAA,CAAS,IAAA,EAAM,gBAAA,EAAkB,EAAE,UAAA,EAAY,aAAA,EAAc,EAAG,CAAE,CAAA;AAAA,IAC3F;AACA,IAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,EAC1B,SAAS,GAAA,EAAK;AACZ,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,IAAA,EAAM,SAAA;AAAA,MACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACzD,CAAA;AACD,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAGA,SAAS,GAAA,CAAI,QAAqB,OAAA,EAAwC;AACxE,EAAA,OAAO,QAAQ,GAAA,CAAI,CAAC,WAAW,EAAE,MAAA,EAAQ,OAAM,CAAE,CAAA;AACnD;AASA,eAAsB,gBAAA,CACpB,IACA,UAAA,EAC0B;AAC1B,EAAA,MAAM,CAAC,IAAA,EAAM,KAAK,CAAA,GAAI,MAAM,OAAA,CAAQ,GAAA,CAAI,CAAC,aAAA,EAAc,EAAG,WAAA,CAAY,UAAU,CAAC,CAAC,CAAA;AAClF,EAAA,MAAM,OAAA,GAAU,MAAM,aAAA,EAAc;AACpC,EAAA,MAAM,GAAA,GAAM,MAAM,YAAA,CAAa,EAAE,CAAA;AACjC,EAAA,OAAO;AAAA,IACL,OAAA,EAAS;AAAA,MACP,GAAG,GAAA;AAAA,MACH,GAAG,IAAA,CAAK,OAAA;AAAA,MACR,GAAG,GAAA,CAAI,SAAA,EAAW,OAAA,CAAQ,OAAO,CAAA;AAAA,MACjC,GAAG,GAAA,CAAI,OAAA,EAAS,KAAA,CAAM,OAAO;AAAA,KAC/B;AAAA,IACA,KAAA,EAAO,CAAC,GAAG,IAAA,CAAK,KAAA,EAAO,GAAG,KAAA,CAAM,KAAA,EAAO,GAAG,OAAA,CAAQ,KAAK;AAAA,GACzD;AACF","file":"asset-feeds-PO2WC75V.js","sourcesContent":["/**\n * asset-feeds.ts — gather installable assets from every feed the manage TUI\n * surfaces.\n *\n * Four feeds, normalized into `CatalogEntry`:\n * - **Project sources** — `skaile.yaml` `sources:` entries (scanned via\n *   `AssetManager.search()`; the new `sources:` field is merged into the\n *   legacy repositories map in `AssetManager.loadConfig`).\n * - **Local libraries** — user authoring places from `LocalIndex`, read through\n *   `scanAuthoringLibraries` (`@skaile/workspaces/library`): the same scan\n *   `library index` / `search --local` use, so publishers and refs match them\n *   (per-asset `publisher_overrides` honoured), `dev_paths` assets are left out,\n *   and a library that fails to scan becomes one note while the rest stay listed.\n * - **Factory assets** — the bundled first-party `factory-assets` tree\n *   (`factoryAssetRoots()`), scanned from disk. Always present; no network.\n * - **Remote store** — the configured catalog source when `catalog.url` is\n *   not `local`. Failures are non-fatal — they surface as notes.\n */\n\nimport * as path from \"node:path\";\nimport {\n  type AssetKind,\n  type CatalogEntry,\n  factoryAssetRoots,\n  parseRequires,\n  scanRepo,\n} from \"@skaile/workspaces/core\";\nimport { getKnownKinds } from \"./open-registry.ts\";\nimport { storeNotInstallableReason } from \"./store-addable.ts\";\nimport type { DiscoveredAsset } from \"@skaile/workspaces/discovery\";\n\n/** One non-fatal note returned to the caller for surfacing in the UI. */\nexport interface FeedNote {\n  feed: \"sources\" | \"libraries\" | \"store\" | \"factory\";\n  message: string;\n}\n\n/**\n * Which feed an asset came from. This is the top-level grouping axis in the\n * manage TUI (\"where is this skill coming from?\") and is intentionally distinct\n * from `publisher` (asset-intrinsic identity): the same publisher can legitimately\n * appear under more than one origin (e.g. a github repo you added as a `source`\n * that is also listed in the remote `store`).\n */\nexport type AssetOrigin = \"source\" | \"library\" | \"factory\" | \"store\";\n\n/** A catalog entry tagged with the feed it was gathered from. */\nexport interface OriginEntry {\n  origin: AssetOrigin;\n  entry: CatalogEntry;\n  /**\n   * Second-level grouping label for the manage tree. Defaults (when unset) to the\n   * entry's `publisher`; the source feed sets it to the source's short repo name\n   * so the Sources band groups by source — \"which repo did this come from\" — not\n   * by the asset-intrinsic publisher.\n   */\n  group?: string;\n}\n\nexport interface AssetFeedResult {\n  entries: OriginEntry[];\n  notes: FeedNote[];\n}\n\n/**\n * Map one discovered library asset to the `CatalogEntry` the manage rows read.\n * `publisher` is the bare per-asset publisher (what `search --local` prints),\n * `source` the manifest path. `repo` is left unset: it only feeds the Sources-tree\n * org grouping. `requires` / `dependencies` come from the manifest the way the\n * scanner fills them — string `requires:` refs parsed to `{kind, name}`, a bundle's\n * string `dependencies:` list verbatim.\n */\nfunction libraryEntryOf(asset: DiscoveredAsset): CatalogEntry {\n  const { manifest } = asset;\n  const nested = (manifest.metadata as Record<string, unknown> | undefined)?.requires;\n  const rawRequires = manifest.requires ?? nested;\n  const requireRefs =\n    typeof rawRequires === \"string\"\n      ? rawRequires\n      : Array.isArray(rawRequires)\n        ? rawRequires.filter((r): r is string => typeof r === \"string\")\n        : undefined;\n  const deps = manifest.dependencies;\n  return {\n    name: asset.name,\n    kind: asset.kind as AssetKind,\n    description: typeof manifest.description === \"string\" ? manifest.description : \"\",\n    source: asset.manifestPath,\n    publisher: asset.publisher,\n    ...(asset.plugin ? { plugin: asset.plugin } : {}),\n    version: asset.version,\n    requires: requireRefs === undefined ? [] : parseRequires({ requires: requireRefs }),\n    dependencies:\n      asset.kind === \"bundle\" && Array.isArray(deps)\n        ? deps.filter((d): d is string => typeof d === \"string\" && d.length > 0)\n        : [],\n  };\n}\n\n/**\n * Pull assets from local libraries (the authoring places under\n * `~/.skaile/libraries/<name>/`, not the `~/.skaile/cache/sources/` cache) through\n * `scanAuthoringLibraries`, grouped under the bare library name\n * (`group: <name>`) so the manage TUI shows a clean `<name>` band — no\n * `library:` prefix (mirrors the source feed). Plugin grouping (`entry.plugin`)\n * comes from `DiscoveredAsset.plugin`. A library whose scan fails becomes one\n * `FeedNote`; the outer `catch` covers only opening the index.\n */\nasync function libraryAssets(): Promise<{\n  entries: OriginEntry[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    // Lazy: the library subpath pulls in SQLite, which the other feeds never need.\n    const { openLibraryManager } = await import(\"./open-library.ts\");\n    const { getKindRegistry } = await import(\"./open-registry.ts\");\n    const { scanAuthoringLibraries } = await import(\"@skaile/workspaces/library\");\n    const { library: index, close } = await openLibraryManager();\n    try {\n      const entries: OriginEntry[] = [];\n      for (const scan of await scanAuthoringLibraries(index, getKindRegistry())) {\n        if (scan.error !== undefined) {\n          notes.push({ feed: \"libraries\", message: `${scan.library.name}: ${scan.error}` });\n          continue;\n        }\n        for (const asset of scan.assets) {\n          entries.push({\n            origin: \"library\",\n            entry: libraryEntryOf(asset),\n            group: scan.library.name,\n          });\n        }\n      }\n      return { entries, notes };\n    } finally {\n      close();\n    }\n  } catch (err) {\n    notes.push({\n      feed: \"libraries\",\n      message: err instanceof Error ? err.message : String(err),\n    });\n    return { entries: [], notes };\n  }\n}\n\n/**\n * Pull a (best-effort) snapshot of the connected remote store catalog.\n *\n * - Returns no entries when the resolved catalog is local-only or the host\n *   is unreachable (the failure becomes a note, not an exception).\n * - Maps `CatalogAsset` → `CatalogEntry`, carrying `publisher`, `repo`, and\n *   `category` straight through and using `source = \"store://<id>\"`; per-file\n *   `source` paths are not available for remote assets so the canonical ref is\n *   a stable placeholder.\n */\nasync function storeAssets(projectDir: string): Promise<{\n  entries: CatalogEntry[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    const { resolveCatalogSource } = await import(\"./open-library.ts\");\n    const { source, close } = await resolveCatalogSource({ projectDir });\n    try {\n      // The store lists only what `skaile add` can install (see store-addable.ts).\n      const assets = (await source.listAssets()).filter(\n        (a) => storeNotInstallableReason(a) === undefined,\n      );\n      const entries: CatalogEntry[] = assets.map((a) => ({\n        name: a.name,\n        kind: (a.kind as AssetKind) ?? \"skill\",\n        description: a.description ?? \"\",\n        source: `store://${a.id}`,\n        publisher: a.publisher,\n        repo: a.repo,\n        plugin: a.plugin,\n        category: a.category,\n        version: a.version,\n        requires: [],\n        dependencies: [],\n      }));\n      return { entries, notes };\n    } finally {\n      close();\n    }\n  } catch (err) {\n    const msg = err instanceof Error ? err.message : String(err);\n    // Local-only catalog throws a recognizable message — silence it; absence\n    // is the user's choice, not an error.\n    if (!/local/i.test(msg)) {\n      notes.push({ feed: \"store\", message: msg });\n    }\n    return { entries: [], notes };\n  }\n}\n\n/** The slice of `AssetManager` the source feed needs (kept narrow for tests). */\ninterface AssetManagerLike {\n  search: () => Promise<CatalogEntry[]>;\n  searchRepoRoots: () => { repoName: string; root: string }[];\n}\n\n/**\n * Project-source feed: leans on `AssetManager.search()`, which merges\n * `skaile.yaml`'s `sources:` field into the repositories map. Plugin grouping\n * (`entry.plugin`) is stamped by the scanner, so entries pass through as-is.\n */\nasync function sourceAssets(am: AssetManagerLike): Promise<OriginEntry[]> {\n  // The bundled factory tree is injected into the repositories map as an implicit\n  // source, so `am.search()` returns it too. It has its own `factory` origin band,\n  // so drop it here — otherwise the same first-party skills list twice under Sources.\n  const factoryPrefixes = factoryAssetRoots().map((r) => (r.endsWith(path.sep) ? r : r + path.sep));\n  const isFactoryPath = (p: string) =>\n    factoryPrefixes.some((fp) => p === fp.slice(0, -1) || p.startsWith(fp));\n\n  const all = (await am.search()).filter((e) => !isFactoryPath(e.source));\n  const entries: OriginEntry[] = [];\n  // Group each source's entries under the source node (its short repo name), not\n  // the publisher: under Sources the navigational question is \"which repo did\n  // this come from\". Each entry's `source` (absolute manifest path) lives under\n  // exactly one declared root, so group by prefix. The cache slug is\n  // URL-keyed `github.com/<org>/<repo>` — take the trailing segment.\n  for (const { repoName, root } of am.searchRepoRoots()) {\n    if (isFactoryPath(root)) continue;\n    const prefix = root.endsWith(path.sep) ? root : root + path.sep;\n    const owned = all.filter((e) => e.source === root || e.source.startsWith(prefix));\n    if (owned.length === 0) continue;\n    const sourceName = repoName.split(\"/\").pop() || repoName;\n    for (const entry of owned) entries.push({ origin: \"source\", entry, group: sourceName });\n  }\n  return entries;\n}\n\n/**\n * Factory-asset feed: scan the bundled first-party `factory-assets` tree(s)\n * resolved by `factoryAssetRoots()` (the `SKAILE_FACTORY_ASSETS_DIR` override\n * layer ahead of the bundled tree). Local disk only, no network — the entries are\n * the built-in skills / connectors / bundles that ship with `@skaile/workspaces`.\n * `factoryAssetRoots()` already dedupes, so the env override pointing at the\n * bundled dir collapses to one root.\n */\nasync function factoryAssets(): Promise<{\n  entries: CatalogEntry[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    const entries: CatalogEntry[] = [];\n    for (const root of factoryAssetRoots()) {\n      entries.push(...(await scanRepo(root, \"skaile-factory\", { knownKinds: getKnownKinds() })));\n    }\n    return { entries, notes };\n  } catch (err) {\n    notes.push({\n      feed: \"factory\",\n      message: err instanceof Error ? err.message : String(err),\n    });\n    return { entries: [], notes };\n  }\n}\n\n/** Tag a flat entry list with a single origin. */\nfunction tag(origin: AssetOrigin, entries: CatalogEntry[]): OriginEntry[] {\n  return entries.map((entry) => ({ origin, entry }));\n}\n\n/**\n * Run all feeds and return a single normalized result.\n *\n * Feeds run in parallel where possible — the store fetch is the slow one\n * (one HTTP call) and is fired alongside the local library walk. The factory\n * scan is local disk only, so it runs inline.\n */\nexport async function gatherAssetFeeds(\n  am: AssetManagerLike,\n  projectDir: string,\n): Promise<AssetFeedResult> {\n  const [libs, store] = await Promise.all([libraryAssets(), storeAssets(projectDir)]);\n  const factory = await factoryAssets();\n  const src = await sourceAssets(am);\n  return {\n    entries: [\n      ...src,\n      ...libs.entries,\n      ...tag(\"factory\", factory.entries),\n      ...tag(\"store\", store.entries),\n    ],\n    notes: [...libs.notes, ...store.notes, ...factory.notes],\n  };\n}\n"]}

package/dist/asset-manager/index.js

@@ -1,6 +1,6 @@
-export { AssetManager, LibraryEntryError, MissingManifestError, harnessSwitchKeptKey, harnessSwitchStateFile, installAgentInstances, labelDiffHeaders, mcpNotRunnableReason, normalizeRepoUrl, parseCanonicalLockKey, parseRefTolerant, readHarnessSwitchState, renderMcpServerConfig, setLibraryAssetCheck, setRenamedEntryLookup, softDepName, writeHarnessSwitchState } from '../chunk-4I4SBOCS.js';
-import '../chunk-FXBKBOI5.js';
-import '../chunk-RZ5R6GDJ.js';
+export { AssetManager, LibraryEntryError, MissingManifestError, harnessSwitchKeptKey, harnessSwitchStateFile, installAgentInstances, labelDiffHeaders, mcpNotRunnableReason, normalizeRepoUrl, parseCanonicalLockKey, parseRefTolerant, readHarnessSwitchState, renderMcpServerConfig, setLibraryAssetCheck, setRenamedEntryLookup, softDepName, writeHarnessSwitchState } from '../chunk-IIELRGIZ.js';
+import '../chunk-7FXOOUOC.js';
+import '../chunk-DRUAQ7IY.js';
 import '../chunk-CVUMZTNO.js';
 import '../chunk-F3D25RGM.js';
 import '../chunk-3TXEJN4W.js';
@@ -8,12 +8,12 @@ import '../chunk-ISHJITXJ.js';
 import '../chunk-LNFKL23K.js';
 import '../chunk-JRN5QF4C.js';
 import '../chunk-NUELZWCF.js';
-export { SCAFFOLD_KINDS, createScaffold, deployAll, installAgent, installTargetOf, removeAsset } from '../chunk-KRL53RZB.js';
+export { SCAFFOLD_KINDS, createScaffold, deployAll, installAgent, installTargetOf, removeAsset } from '../chunk-7LJUK5JK.js';
 export { BUILT_IN_FRAGMENTS, loadPromptExtensions, resolveFragments } from '../chunk-PKE3PXOK.js';
 export { appendHistory, clearHistory, getRecentHistory, loadHistory } from '../chunk-LKBRBVVS.js';
 import '../chunk-UQ6LFBPZ.js';
-export { AGENT_RENDERERS, claudeCodeRenderer, codexRenderer, harnessTargetSupportsAgents, ompRenderer, renderAgentToFramework } from '../chunk-R3ZNAPBV.js';
-import '../chunk-WS3BOCAT.js';
+export { AGENT_RENDERERS, claudeCodeRenderer, codexRenderer, harnessTargetSupportsAgents, ompRenderer, renderAgentToFramework } from '../chunk-7VBD5XUM.js';
+import '../chunk-LCXQ4LVP.js';
 export { FACTORY_SOURCE_URL } from '../chunk-MEU2HHGV.js';
 import '../chunk-4GY63JU6.js';
 import '../chunk-CJO3XKO7.js';

package/dist/asset-manager/installer.js

@@ -1,7 +1,7 @@
-export { SCAFFOLD_KINDS, assertNoLibrarySymlinks, cachedComposedFiles, canonicalEntryRef, composedDriftRefs, createScaffold, deployAll, deployAsset, deployedAssetDrift, diffDeployedAgent, entriesNeedingDeploy, installTargetOf, readKeptLegacyCopies, removeAsset, sourceComposedFiles, writeKeptLegacyCopies } from '../chunk-KRL53RZB.js';
+export { SCAFFOLD_KINDS, assertNoLibrarySymlinks, cachedComposedFiles, canonicalEntryRef, composedDriftRefs, createScaffold, deployAll, deployAsset, deployedAssetDrift, diffDeployedAgent, entriesNeedingDeploy, installTargetOf, readKeptLegacyCopies, removeAsset, sourceComposedFiles, writeKeptLegacyCopies } from '../chunk-7LJUK5JK.js';
 import '../chunk-PKE3PXOK.js';
-import '../chunk-R3ZNAPBV.js';
-import '../chunk-WS3BOCAT.js';
+import '../chunk-7VBD5XUM.js';
+import '../chunk-LCXQ4LVP.js';
 import '../chunk-MEU2HHGV.js';
 import '../chunk-4GY63JU6.js';
 import '../chunk-CJO3XKO7.js';

package/dist/asset-manager/renderers.js

@@ -1,5 +1,5 @@
-export { AGENT_RENDERERS, CODEX_IDENTITY_DIR, agentRenderFiles, claudeCodeRenderer, codexRenderer, harnessTargetSupportsAgents, ompRenderer, renderAgentToFramework } from '../chunk-R3ZNAPBV.js';
-import '../chunk-WS3BOCAT.js';
+export { AGENT_RENDERERS, CODEX_IDENTITY_DIR, agentRenderFiles, claudeCodeRenderer, codexRenderer, harnessTargetSupportsAgents, ompRenderer, renderAgentToFramework } from '../chunk-7VBD5XUM.js';
+import '../chunk-LCXQ4LVP.js';
 import '../chunk-MEU2HHGV.js';
 import '../chunk-4GY63JU6.js';
 import '../chunk-CJO3XKO7.js';

package/dist/bridge/harnesses/claude-sdk.js

@@ -1,17 +1,17 @@
 import { formatDroppedToolsNotice, filterInProcessMcpServerTools, checkToolPropertyKeys, TOOL_PROPERTY_KEY_PATTERN } from '../../chunk-3X7VTCPG.js';
 import { AskSlots } from '../../chunk-3TG2NV2F.js';
-import { scrubPoisonedTranscript, transcriptStoreForRuntime, resolveClaudeConfigDir, unsupportedSurfaceNotice, claudeEndpointMode, buildClaudeEndpointEnv, APPROVE_ONCE, DENY } from '../../chunk-PSPFWTJI.js';
+import { scrubPoisonedTranscript, transcriptStoreForRuntime, resolveClaudeConfigDir, unsupportedSurfaceNotice, claudeEndpointMode, buildClaudeEndpointEnv, APPROVE_ONCE, DENY } from '../../chunk-MRTOKIEJ.js';
 import { freshBudget, isFirstAttempt, spend, isSpent, decide, isAvailable } from '../../chunk-7EKQDY2T.js';
-import { dispatchCapability } from '../../chunk-YEOG7CWQ.js';
-import { fetchProviderModels } from '../../chunk-3AIEJSQR.js';
+import { dispatchCapability } from '../../chunk-7ZL23M3X.js';
+import { fetchProviderModels } from '../../chunk-ESUF2ZYT.js';
 import { ReconfigureLedger, AuthError, stripRunnerPrivateEnv, classifyClaudeSdkError, reclassifyAuthAsAccountUnavailable, AccountUnavailableError, isLongContextEntitlementRejection, LONG_CONTEXT_CREDITS_API_ERROR } from '../../chunk-5DE3DGVR.js';
 import { agentExecRequested, wrapAgentCommand, resolveAgentExec } from '../../chunk-7DN6JKP2.js';
-import { AgentHarness, getBridgeLogger, registryHarnessConfig } from '../../chunk-NFFBYG2W.js';
-import { BUILTIN_HARNESS_CATALOG, entryCredentialValue } from '../../chunk-KE5HDORU.js';
+import { AgentHarness, getBridgeLogger, registryHarnessConfig } from '../../chunk-PZS55HOX.js';
+import { BUILTIN_HARNESS_CATALOG, entryCredentialValue } from '../../chunk-S6NS3I3P.js';
 import '../../chunk-G5SUWZEU.js';
 import '../../chunk-6UP2EDFN.js';
-import { withActivityLabelShape } from '../../chunk-7NN3P6VF.js';
-import '../../chunk-WS3BOCAT.js';
+import { withActivityLabelShape } from '../../chunk-342UX2MG.js';
+import '../../chunk-LCXQ4LVP.js';
 import { loadHarnessSdk } from '../../chunk-MEU2HHGV.js';
 import '../../chunk-4GY63JU6.js';
 import '../../chunk-CJO3XKO7.js';

package/dist/bridge/harnesses/codex.js

@@ -1,14 +1,14 @@
-export { CodexHarness, checkCodexCredential, codexHarnessTarget, isManagedCodexConfig } from '../../chunk-HLFLET7S.js';
+export { CodexHarness, checkCodexCredential, codexHarnessTarget, isManagedCodexConfig } from '../../chunk-WCHGUS7X.js';
 import '../../chunk-5KSGZP3E.js';
 import '../../chunk-7EKQDY2T.js';
-import '../../chunk-3AIEJSQR.js';
+import '../../chunk-ESUF2ZYT.js';
 import '../../chunk-5DE3DGVR.js';
 import '../../chunk-7DN6JKP2.js';
-import '../../chunk-NFFBYG2W.js';
-import '../../chunk-KE5HDORU.js';
+import '../../chunk-PZS55HOX.js';
+import '../../chunk-S6NS3I3P.js';
 import '../../chunk-G5SUWZEU.js';
 import '../../chunk-6UP2EDFN.js';
-import '../../chunk-WS3BOCAT.js';
+import '../../chunk-LCXQ4LVP.js';
 import '../../chunk-MEU2HHGV.js';
 import '../../chunk-4GY63JU6.js';
 import '../../chunk-CJO3XKO7.js';

package/dist/bridge/harnesses/continue.js

@@ -1,11 +1,11 @@
 import { harnessSessionConfigHome, removeSessionConfigFile, writeSessionConfigFile } from '../../chunk-NBAGV6L2.js';
-import { SubprocessCliHarness, extractText, extractCost, extractTokens } from '../../chunk-5JBMYZNA.js';
+import { SubprocessCliHarness, extractText, extractCost, extractTokens } from '../../chunk-GODUKPGD.js';
 import { HARNESS_BINARIES } from '../../chunk-WWSRIT3J.js';
-import { resolveEnvHarnessSession, continueRoleBinding, credentialsForEveryProvider, registryModelEntries, selectableEntries, entrySurface, harnessProviderName, entryBaseUrl, versionedAnthropicBaseUrl } from '../../chunk-RTFH2QR2.js';
+import { resolveEnvHarnessSession, continueRoleBinding, credentialsForEveryProvider, registryModelEntries, selectableEntries, entrySurface, harnessProviderName, entryBaseUrl, versionedAnthropicBaseUrl } from '../../chunk-CLMIZ4N6.js';
 import '../../chunk-5DE3DGVR.js';
 import '../../chunk-7DN6JKP2.js';
-import { getBridgeLogger, registryHarnessConfig } from '../../chunk-NFFBYG2W.js';
-import { BUILTIN_HARNESS_CATALOG, entryCredentialValue, providerCredentialEnvName } from '../../chunk-KE5HDORU.js';
+import { getBridgeLogger, registryHarnessConfig } from '../../chunk-PZS55HOX.js';
+import { BUILTIN_HARNESS_CATALOG, entryCredentialValue, providerCredentialEnvName } from '../../chunk-S6NS3I3P.js';
 import '../../chunk-G5SUWZEU.js';
 import '../../chunk-6UP2EDFN.js';
 import '../../chunk-MEU2HHGV.js';

package/dist/bridge/harnesses/echo.js

@@ -1,9 +1,9 @@
-import { dispatchCapability } from '../../chunk-YEOG7CWQ.js';
-import { AgentHarness, getBridgeLogger, registryHarnessConfig } from '../../chunk-NFFBYG2W.js';
-import { BUILTIN_HARNESS_CATALOG } from '../../chunk-KE5HDORU.js';
+import { dispatchCapability } from '../../chunk-7ZL23M3X.js';
+import { AgentHarness, getBridgeLogger, registryHarnessConfig } from '../../chunk-PZS55HOX.js';
+import { BUILTIN_HARNESS_CATALOG } from '../../chunk-S6NS3I3P.js';
 import '../../chunk-G5SUWZEU.js';
 import '../../chunk-6UP2EDFN.js';
-import '../../chunk-7NN3P6VF.js';
+import '../../chunk-342UX2MG.js';
 import '../../chunk-VSX2G7LA.js';
 import '../../chunk-RXGPFAMN.js';
 import '../../chunk-RZL4TOK3.js';

package/dist/bridge/harnesses/gemini.js

@@ -1,15 +1,15 @@
-export { GeminiFamilyHarness, GeminiHarness, geminiHarnessTarget } from '../../chunk-BCID52M5.js';
-import '../../chunk-5JBMYZNA.js';
-import '../../chunk-3AIEJSQR.js';
+export { GeminiFamilyHarness, GeminiHarness, geminiHarnessTarget } from '../../chunk-YPX7LQSW.js';
+import '../../chunk-GODUKPGD.js';
+import '../../chunk-ESUF2ZYT.js';
 import '../../chunk-WWSRIT3J.js';
-import '../../chunk-RTFH2QR2.js';
+import '../../chunk-CLMIZ4N6.js';
 import '../../chunk-5DE3DGVR.js';
 import '../../chunk-7DN6JKP2.js';
-import '../../chunk-NFFBYG2W.js';
-import '../../chunk-KE5HDORU.js';
+import '../../chunk-PZS55HOX.js';
+import '../../chunk-S6NS3I3P.js';
 import '../../chunk-G5SUWZEU.js';
 import '../../chunk-6UP2EDFN.js';
-import '../../chunk-WS3BOCAT.js';
+import '../../chunk-LCXQ4LVP.js';
 import '../../chunk-VSX2G7LA.js';
 import '../../chunk-RXGPFAMN.js';
 import '../../chunk-RZL4TOK3.js';

package/dist/bridge/harnesses/goose.js

@@ -1,11 +1,11 @@
 import { harnessSessionConfigHome, pruneSessionConfigDir, writeSessionConfigFile } from '../../chunk-NBAGV6L2.js';
-import { SubprocessCliHarness, extractText, extractCost, extractTokens } from '../../chunk-5JBMYZNA.js';
+import { SubprocessCliHarness, extractText, extractCost, extractTokens } from '../../chunk-GODUKPGD.js';
 import { HARNESS_BINARIES } from '../../chunk-WWSRIT3J.js';
-import { resolveEnvHarnessSession, resolveRegistryBinding, credentialsForEveryProvider, registryModelEntries, selectableEntries, isStockCatalogEndpoint, entrySurface, entryBaseUrl, entryModelIds } from '../../chunk-RTFH2QR2.js';
+import { resolveEnvHarnessSession, resolveRegistryBinding, credentialsForEveryProvider, registryModelEntries, selectableEntries, isStockCatalogEndpoint, entrySurface, entryBaseUrl, entryModelIds } from '../../chunk-CLMIZ4N6.js';
 import '../../chunk-5DE3DGVR.js';
 import '../../chunk-7DN6JKP2.js';
-import { getBridgeLogger, registryHarnessConfig } from '../../chunk-NFFBYG2W.js';
-import { BUILTIN_HARNESS_CATALOG, providerCredentialEnvName } from '../../chunk-KE5HDORU.js';
+import { getBridgeLogger, registryHarnessConfig } from '../../chunk-PZS55HOX.js';
+import { BUILTIN_HARNESS_CATALOG, providerCredentialEnvName } from '../../chunk-S6NS3I3P.js';
 import '../../chunk-G5SUWZEU.js';
 import '../../chunk-6UP2EDFN.js';
 import '../../chunk-MEU2HHGV.js';

package/dist/bridge/harnesses/omp.js

@@ -1,15 +1,15 @@
 import { checkToolInputSchema } from '../../chunk-3X7VTCPG.js';
-import { materializeOmpProviders, isCredentialOmissionWarning, materializeOmpIdentityDir, registryModelEntries } from '../../chunk-JDZUQFN7.js';
-import { dispatchCapability } from '../../chunk-YEOG7CWQ.js';
+import { materializeOmpProviders, isCredentialOmissionWarning, materializeOmpIdentityDir, registryModelEntries } from '../../chunk-4NJVF3DV.js';
+import { dispatchCapability } from '../../chunk-7ZL23M3X.js';
 import { HARNESS_BINARIES } from '../../chunk-WWSRIT3J.js';
-import '../../chunk-RTFH2QR2.js';
+import '../../chunk-CLMIZ4N6.js';
 import { RUNNER_AGENT_ENV_KEYS, ReconfigureLedger, stripRunnerPrivateEnv, classifyGenericErrorMessage } from '../../chunk-5DE3DGVR.js';
 import { wrapAgentCommand, resolveAgentExec } from '../../chunk-7DN6JKP2.js';
-import { AgentHarness, getBridgeLogger, TOOL_ALLOWLIST_UNSUPPORTED, registryHarnessConfig } from '../../chunk-NFFBYG2W.js';
-import { BUILTIN_HARNESS_CATALOG } from '../../chunk-KE5HDORU.js';
+import { AgentHarness, getBridgeLogger, TOOL_ALLOWLIST_UNSUPPORTED, registryHarnessConfig } from '../../chunk-PZS55HOX.js';
+import { BUILTIN_HARNESS_CATALOG } from '../../chunk-S6NS3I3P.js';
 import '../../chunk-G5SUWZEU.js';
 import '../../chunk-6UP2EDFN.js';
-import { withActivityLabelJsonSchema } from '../../chunk-7NN3P6VF.js';
+import { withActivityLabelJsonSchema } from '../../chunk-342UX2MG.js';
 import '../../chunk-VSX2G7LA.js';
 import '../../chunk-RXGPFAMN.js';
 import '../../chunk-RZL4TOK3.js';
@@ -118,6 +118,15 @@ function buildOmpToolArgs(tools) {
   return ["--tools", effective.join(",")];
 }
 var OMP_HOST_TOOL_NAME_MAX = 64;
+function hostAllowedPatternToRegExp(pattern) {
+  const body = pattern.split("*").map((part) => part.replace(/[.+?^${}()|[\]\\/-]/g, "\\$&")).join(".*");
+  return new RegExp(`^${body}$`, "s");
+}
+function filterHostTools(tools, hostAllowed) {
+  if (hostAllowed === void 0) return [...tools];
+  const patterns = hostAllowed.map(hostAllowedPatternToRegExp);
+  return tools.filter((tool) => patterns.some((re) => re.test(tool.name)));
+}
 function buildOmpHostTools(tools) {
   const taken = new Set(OMP_BUILTIN_TOOLS);
   const out = { definitions: [], capabilityNames: /* @__PURE__ */ new Map(), dropped: [] };
@@ -128,7 +137,7 @@ function buildOmpHostTools(tools) {
       out.dropped.push({ tool: tool.name, reason });
       continue;
     }
-    const base = tool.name.replace(/[^a-zA-Z0-9_-]/g, "_").slice(0, OMP_HOST_TOOL_NAME_MAX) || "capability";
+    const base = tool.name.replace(/[^a-zA-Z0-9_-]/g, "_").replace(/^mcp__/, "host__").slice(0, OMP_HOST_TOOL_NAME_MAX) || "capability";
     let name = base;
     for (let n = 2; taken.has(name); n++) {
       const suffix = `_${n}`;
@@ -715,7 +724,9 @@ var OmpHarness = class extends AgentHarness {
   async syncHostTools() {
     const hooks = this.config.capabilities;
     if (!hooks || !this.proc) return;
-    const set = buildOmpHostTools(hooks.composeTools());
+    const set = buildOmpHostTools(
+      filterHostTools(hooks.composeTools(), this.config.tools?.host_allowed)
+    );
     for (const { tool, reason } of set.dropped) {
       const key = `${tool}\0${reason}`;
       if (this.warnedDroppedHostTools.has(key)) continue;
@@ -753,8 +764,28 @@ var OmpHarness = class extends AgentHarness {
     const id = event.id;
     if (typeof id !== "string") return;
     const hostName = typeof event.toolName === "string" ? event.toolName : "";
-    const name = this.hostToolCapabilities.get(hostName) ?? hostName;
     const callId = typeof event.toolCallId === "string" ? event.toolCallId : id;
+    const name = this.hostToolCapabilities.get(hostName);
+    if (name === void 0) {
+      this.log.warn("host tool call rejected: not registered", { tool: hostName });
+      try {
+        this.send({
+          type: "host_tool_result",
+          id,
+          result: {
+            content: [{ type: "text", text: `Error: host tool "${hostName}" is not available` }]
+          },
+          isError: true
+        });
+      } catch (err) {
+        this.log.warn("host tool result undeliverable", {
+          tool: hostName,
+          callId,
+          error: String(err)
+        });
+      }
+      return;
+    }
     const input = event.arguments ?? {};
     const hooks = this.config.capabilities;
     const controller = new AbortController();
@@ -1622,6 +1653,6 @@ var ompHarnessTarget = {
   }).listModels()
 };
 
-export { OMP_BUILTIN_TOOLS, OMP_DEFAULT_TOOLS, OMP_THINKING_LEVELS, OmpHarness, buildOmpChildEnv, buildOmpHostTools, buildOmpToolArgs, describeOmpEvent, ompCredentialMessage, ompHarnessTarget, ompStartFailureCause, ompThinkingLevel, splitOmpModel };
+export { OMP_BUILTIN_TOOLS, OMP_DEFAULT_TOOLS, OMP_THINKING_LEVELS, OmpHarness, buildOmpChildEnv, buildOmpHostTools, buildOmpToolArgs, describeOmpEvent, filterHostTools, ompCredentialMessage, ompHarnessTarget, ompStartFailureCause, ompThinkingLevel, splitOmpModel };
 //# sourceMappingURL=omp.js.map
 //# sourceMappingURL=omp.js.map