@synap-core/cli 1.7.0 → 1.10.0

package/dist/lib/project-ref.js

@@ -0,0 +1,144 @@
+/**
+ * Project-ref resolution — the ONE door (P4-lite W3).
+ *
+ * A project ref can name a project on ANY pod the user can see, resolved via
+ * the Control Plane directory (`GET /projects/resolve?ref=`). Every command
+ * that accepts a project ref parses + resolves it HERE — no second ref parser
+ * anywhere.
+ *
+ * Ref forms (ratified):
+ *   - uuid                      → local: today's behavior, pinned against the active pod
+ *   - `<pod-subdomain>/<slug>`  → canonical cross-pod form (e.g. perso/synap)
+ *   - bare `<slug>`             → resolved when unique across visible pods; 300-ambiguous otherwise
+ *
+ * The directory is an ACCELERATOR, not a dependency: CP unreachable, not
+ * logged in, or 404 all degrade to a graceful message — the uuid path never
+ * touches the CP and keeps working.
+ */
+import { getStoredToken, getCpUrl } from "./auth.js";
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+/** Pod subdomains and project slugs: alphanum with internal `-`/`_`/`.`. */
+const PART_RE = /^[a-z0-9](?:[a-z0-9._-]*[a-z0-9])?$/i;
+export function parseProjectRef(raw) {
+    const ref = raw.trim();
+    if (!ref)
+        return { kind: "invalid", reason: "empty project ref" };
+    if (UUID_RE.test(ref))
+        return { kind: "uuid", id: ref.toLowerCase() };
+    const parts = ref.split("/");
+    if (parts.length === 2) {
+        const [pod, slug] = parts;
+        if (!PART_RE.test(pod) || !PART_RE.test(slug)) {
+            return {
+                kind: "invalid",
+                reason: `"${ref}" is not a valid <pod>/<slug> ref (letters, digits, - _ . only)`,
+            };
+        }
+        return { kind: "fq", pod: pod.toLowerCase(), slug: slug.toLowerCase() };
+    }
+    if (parts.length > 2) {
+        return { kind: "invalid", reason: `"${ref}" has too many '/' — use <pod-subdomain>/<slug>` };
+    }
+    if (!PART_RE.test(ref)) {
+        return {
+            kind: "invalid",
+            reason: `"${ref}" is not a project uuid, slug, or <pod>/<slug> ref`,
+        };
+    }
+    return { kind: "slug", slug: ref.toLowerCase() };
+}
+/**
+ * Resolve a project ref. uuid short-circuits to `local` (today's behavior);
+ * everything else goes through the CP directory with the CLI's CP credentials.
+ */
+export async function resolveProjectRef(raw, deps = {}) {
+    const parsed = parseProjectRef(raw);
+    if (parsed.kind === "invalid")
+        return { kind: "invalid", reason: parsed.reason };
+    if (parsed.kind === "uuid")
+        return { kind: "local", projectId: parsed.id };
+    const creds = (deps.getToken ?? getStoredToken)();
+    if (!creds?.token)
+        return { kind: "not-logged-in" };
+    const cpUrl = deps.cpUrl ?? getCpUrl();
+    const fetchImpl = deps.fetchImpl ?? fetch;
+    const ref = parsed.kind === "fq" ? `${parsed.pod}/${parsed.slug}` : parsed.slug;
+    let res;
+    try {
+        res = await fetchImpl(`${cpUrl}/projects/resolve?ref=${encodeURIComponent(ref)}`, {
+            headers: { Authorization: `Bearer ${creds.token}` },
+            signal: AbortSignal.timeout(10_000),
+        });
+    }
+    catch (err) {
+        const detail = err instanceof Error ? err.message : String(err);
+        return {
+            kind: "cp-error",
+            message: `could not reach the project directory at ${cpUrl} (${detail})`,
+        };
+    }
+    if (res.status === 300) {
+        const body = (await res.json().catch(() => null));
+        return { kind: "ambiguous", candidates: body?.candidates ?? [] };
+    }
+    if (res.status === 404) {
+        // The CP distinguishes "exists but archived/completed" from truly absent.
+        const body = (await res.json().catch(() => null));
+        if (body?.status)
+            return { kind: "not-active", ref, status: body.status };
+        return { kind: "not-found", ref };
+    }
+    if (res.status === 401 || res.status === 403)
+        return { kind: "not-logged-in" };
+    if (!res.ok) {
+        return { kind: "cp-error", message: `the project directory returned HTTP ${res.status}` };
+    }
+    const body = (await res.json().catch(() => null));
+    if (!body?.projectId || !body?.podUrl) {
+        return { kind: "cp-error", message: "the project directory returned an incomplete resolution" };
+    }
+    return {
+        kind: "resolved",
+        project: body,
+        refPod: parsed.kind === "fq" ? parsed.pod : undefined,
+    };
+}
+// ─── Helpers shared by callers ────────────────────────────────────────────────
+/** True when two pod URLs name the same origin (scheme+host+port). */
+export function samePodOrigin(a, b) {
+    if (!a || !b)
+        return false;
+    try {
+        return new URL(a).origin === new URL(b).origin;
+    }
+    catch {
+        return a === b;
+    }
+}
+/**
+ * Session-lens guard: the per-Claude-session lens has NO pod field, so a
+ * `--session` pin can only target a project on the ACTIVE pod. Returns the
+ * refusal message for a cross-pod ref, or null when the pin is allowed.
+ */
+export function sessionScopeRefusal(project, activePodUrl) {
+    if (samePodOrigin(activePodUrl, project.podUrl))
+        return null;
+    return (`--session scopes only this Claude session, and the session lens has no pod field — ` +
+        `it cannot bind a project on another pod (${project.podUrl}). ` +
+        `Re-run without --session to switch the active pod, or pick a project on the active pod.`);
+}
+/** `pod/slug` label for a candidate row, degrading to whatever fields exist. */
+export function candidateLabel(c) {
+    // The CP emits podUrl (never a subdomain field); derive the label from it.
+    let pod;
+    if (c.podUrl) {
+        try {
+            pod = new URL(c.podUrl).hostname;
+        }
+        catch {
+            pod = c.podUrl;
+        }
+    }
+    return `${pod ?? "?"}/${c.slug ?? c.projectId ?? "?"}`;
+}
+//# sourceMappingURL=project-ref.js.map

package/dist/lib/project-ref.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-ref.js","sourceRoot":"","sources":["../../src/lib/project-ref.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAUrD,MAAM,OAAO,GACX,iEAAiE,CAAC;AAEpE,4EAA4E;AAC5E,MAAM,OAAO,GAAG,sCAAsC,CAAC;AAEvD,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACvB,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAClE,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;IACtE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC;QAC1B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9C,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,IAAI,GAAG,iEAAiE;aACjF,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,GAAG,iDAAiD,EAAE,CAAC;IAC/F,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,IAAI,GAAG,oDAAoD;SACpE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;AACnD,CAAC;AAoCD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAW,EACX,OAAoB,EAAE;IAEtB,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IACjF,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;IAE3E,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,cAAc,CAAC,EAAE,CAAC;IAClD,IAAI,CAAC,KAAK,EAAE,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IAEpD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,QAAQ,EAAE,CAAC;IACvC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;IAEhF,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,SAAS,CACnB,GAAG,KAAK,yBAAyB,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAC1D;YACE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,CAAC,KAAK,EAAE,EAAE;YACnD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,4CAA4C,KAAK,KAAK,MAAM,GAAG;SACzE,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAExC,CAAC;QACT,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,IAAI,EAAE,EAAE,CAAC;IACnE,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,0EAA0E;QAC1E,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAExC,CAAC;QACT,IAAI,IAAI,EAAE,MAAM;YAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1E,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;IACpC,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IAC/E,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,uCAAuC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;IAC5F,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAA+B,CAAC;IAChF,IAAI,CAAC,IAAI,EAAE,SAAS,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QACtC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,yDAAyD,EAAE,CAAC;IAClG,CAAC;IACD,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;KACtD,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF,sEAAsE;AACtE,MAAM,UAAU,aAAa,CAAC,CAAqB,EAAE,CAAqB;IACxE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3B,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAA4B,EAC5B,YAAgC;IAEhC,IAAI,aAAa,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7D,OAAO,CACL,qFAAqF;QACrF,4CAA4C,OAAO,CAAC,MAAM,KAAK;QAC/D,yFAAyF,CAC1F,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,cAAc,CAAC,CAAqB;IAClD,2EAA2E;IAC3E,IAAI,GAAuB,CAAC;IAC5B,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACb,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC;QACjB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;AACzD,CAAC"}

package/dist/lib/project.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Project doors shared by `synap launch` and `synap market install`.
+ *
+ * The project is the cross-cutting lens both commands link installs to: launch
+ * stands up a NEW company under a project, market install ADDS a package into an
+ * existing (or the active) project. Both need the same two primitives — list the
+ * pod's projects, and create one — so they live here instead of being duplicated.
+ * The INTERACTIVE picking differs per command (launch weaves it into its guided
+ * flow; market offers a standalone "Add to which project?" with a pod-wide
+ * escape), so that stays in each command; only the data doors are shared.
+ */
+import { type HubConfig } from "./hub-client.js";
+export interface ProjectRef {
+    id: string;
+    name: string;
+}
+/**
+ * The pod's existing projects (`GET /projects`), normalized to `{id, name}`.
+ * Best-effort: an unreachable/erroring pod yields `[]` rather than throwing, so
+ * callers degrade to create-new / pod-wide instead of failing.
+ */
+export declare function fetchProjects(cfg: HubConfig): Promise<ProjectRef[]>;
+/**
+ * Create a project (`POST /projects`). Governance may answer with a proposal
+ * instead of creating directly — the caller distinguishes `id` (live) from
+ * `proposalId` (queued for review) and messages accordingly.
+ */
+export declare function createProject(cfg: HubConfig, input: {
+    name: string;
+    description?: string;
+}): Promise<{
+    id?: string;
+    proposalId?: string;
+    status?: string;
+}>;

package/dist/lib/project.js

@@ -0,0 +1,39 @@
+/**
+ * Project doors shared by `synap launch` and `synap market install`.
+ *
+ * The project is the cross-cutting lens both commands link installs to: launch
+ * stands up a NEW company under a project, market install ADDS a package into an
+ * existing (or the active) project. Both need the same two primitives — list the
+ * pod's projects, and create one — so they live here instead of being duplicated.
+ * The INTERACTIVE picking differs per command (launch weaves it into its guided
+ * flow; market offers a standalone "Add to which project?" with a pod-wide
+ * escape), so that stays in each command; only the data doors are shared.
+ */
+import { hubGet, hubPost } from "./hub-client.js";
+import { unwrapList } from "./unwrapList.js";
+/**
+ * The pod's existing projects (`GET /projects`), normalized to `{id, name}`.
+ * Best-effort: an unreachable/erroring pod yields `[]` rather than throwing, so
+ * callers degrade to create-new / pod-wide instead of failing.
+ */
+export async function fetchProjects(cfg) {
+    try {
+        const res = (await hubGet("/projects", {}, cfg));
+        const list = unwrapList(res, ["projects"]);
+        return list
+            .filter((p) => p.id)
+            .map((p) => ({ id: String(p.id), name: String(p.name ?? p.id) }));
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Create a project (`POST /projects`). Governance may answer with a proposal
+ * instead of creating directly — the caller distinguishes `id` (live) from
+ * `proposalId` (queued for review) and messages accordingly.
+ */
+export async function createProject(cfg, input) {
+    return (await hubPost("/projects", { name: input.name, description: input.description || undefined, status: "active" }, cfg));
+}
+//# sourceMappingURL=project.js.map

package/dist/lib/project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.js","sourceRoot":"","sources":["../../src/lib/project.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAkB,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAO7C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAc;IAChD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,WAAW,EAAE,EAAE,EAAE,GAAG,CAAC,CAAY,CAAC;QAC5D,MAAM,IAAI,GAAG,UAAU,CAA0B,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;QACpE,OAAO,IAAI;aACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAc,EACd,KAA6C;IAE7C,OAAO,CAAC,MAAM,OAAO,CACnB,WAAW,EACX,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,EACnF,GAAG,CACJ,CAA0D,CAAC;AAC9D,CAAC"}

package/dist/lib/session-lens.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Per-Claude-session lens registry.
+ *
+ * Claude Code assigns each session (each tab / instance) a stable
+ * `CLAUDE_CODE_SESSION_ID` — present BOTH in the bash env of the agent's
+ * commands AND in the JSON the statusline receives on stdin. That shared id
+ * lets us bind a per-session "lens" (which workspace / project / focus session
+ * this session is working through) without any backend change: the pod stays
+ * agnostic, the CLI layers session-scoped state on top.
+ *
+ * This is what makes concurrent Claude Code sessions independent — tab A on
+ * workspace Builder + session X, tab B on workspace Marketing + session Y —
+ * instead of all sharing one global `~/.synap/config.json` workspace.
+ *
+ * Registry: ~/.synap/lenses/<session_id>.json
+ * Resolution precedence (highest first): explicit flag > session lens >
+ *   env SYNAP_WORKSPACE_ID > global config activeWorkspaceId.
+ */
+export interface SessionLens {
+    workspaceId?: string;
+    projectId?: string;
+    focusSessionId?: string;
+    updatedAt?: number;
+}
+/** The current Claude Code session id, if we're running inside one. */
+export declare function getClaudeSessionId(): string | undefined;
+export declare function readLens(sessionId: string): SessionLens | null;
+/** Merge-write the lens for a session (creates the registry dir on demand). */
+export declare function writeLens(sessionId: string, patch: Partial<SessionLens>): SessionLens;
+/** Clear one field (or the whole lens) for a session. */
+export declare function clearLensField(sessionId: string, field?: keyof SessionLens): void;
+/** The active session's lens, or null if not in a Claude session / none set. */
+export declare function resolveActiveLens(): SessionLens | null;

package/dist/lib/session-lens.js

@@ -0,0 +1,76 @@
+/**
+ * Per-Claude-session lens registry.
+ *
+ * Claude Code assigns each session (each tab / instance) a stable
+ * `CLAUDE_CODE_SESSION_ID` — present BOTH in the bash env of the agent's
+ * commands AND in the JSON the statusline receives on stdin. That shared id
+ * lets us bind a per-session "lens" (which workspace / project / focus session
+ * this session is working through) without any backend change: the pod stays
+ * agnostic, the CLI layers session-scoped state on top.
+ *
+ * This is what makes concurrent Claude Code sessions independent — tab A on
+ * workspace Builder + session X, tab B on workspace Marketing + session Y —
+ * instead of all sharing one global `~/.synap/config.json` workspace.
+ *
+ * Registry: ~/.synap/lenses/<session_id>.json
+ * Resolution precedence (highest first): explicit flag > session lens >
+ *   env SYNAP_WORKSPACE_ID > global config activeWorkspaceId.
+ */
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+const LENS_DIR = path.join(os.homedir(), ".synap", "lenses");
+/** The current Claude Code session id, if we're running inside one. */
+export function getClaudeSessionId() {
+    // Set in the bash env of the agent's commands. The statusline gets the same
+    // id from stdin and forwards it via SYNAP_LENS_SESSION when it spawns the
+    // detached refresh (which has no Claude env of its own).
+    return process.env.SYNAP_LENS_SESSION || process.env.CLAUDE_CODE_SESSION_ID || undefined;
+}
+function lensPath(sessionId) {
+    // session ids are UUIDs — safe as filenames, but sanitize defensively.
+    const safe = sessionId.replace(/[^a-zA-Z0-9_-]/g, "_");
+    return path.join(LENS_DIR, `${safe}.json`);
+}
+export function readLens(sessionId) {
+    try {
+        return JSON.parse(fs.readFileSync(lensPath(sessionId), "utf-8"));
+    }
+    catch {
+        return null;
+    }
+}
+/** Merge-write the lens for a session (creates the registry dir on demand). */
+export function writeLens(sessionId, patch) {
+    const prev = readLens(sessionId) ?? {};
+    const next = { ...prev, ...patch, updatedAt: Date.now() };
+    try {
+        fs.mkdirSync(LENS_DIR, { recursive: true, mode: 0o700 });
+        fs.writeFileSync(lensPath(sessionId), JSON.stringify(next, null, 2), { mode: 0o600 });
+    }
+    catch {
+        /* best-effort */
+    }
+    return next;
+}
+/** Clear one field (or the whole lens) for a session. */
+export function clearLensField(sessionId, field) {
+    const prev = readLens(sessionId);
+    if (!prev)
+        return;
+    if (!field) {
+        try {
+            fs.unlinkSync(lensPath(sessionId));
+        }
+        catch { }
+        return;
+    }
+    delete prev[field];
+    writeLens(sessionId, prev);
+}
+/** The active session's lens, or null if not in a Claude session / none set. */
+export function resolveActiveLens() {
+    const id = getClaudeSessionId();
+    return id ? readLens(id) : null;
+}
+//# sourceMappingURL=session-lens.js.map

package/dist/lib/session-lens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-lens.js","sourceRoot":"","sources":["../../src/lib/session-lens.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAS7D,uEAAuE;AACvE,MAAM,UAAU,kBAAkB;IAChC,4EAA4E;IAC5E,0EAA0E;IAC1E,yDAAyD;IACzD,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,SAAS,CAAC;AAC3F,CAAC;AAED,SAAS,QAAQ,CAAC,SAAiB;IACjC,uEAAuE;IACvE,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;IACvD,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,SAAiB;IACxC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAgB,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,SAAS,CAAC,SAAiB,EAAE,KAA2B;IACtE,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IACvC,MAAM,IAAI,GAAgB,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IACvE,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxF,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,KAAyB;IACzE,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;IACjC,IAAI,CAAC,IAAI;QAAE,OAAO;IAClB,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,CAAC;YAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACpD,OAAO;IACT,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;IACnB,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,iBAAiB;IAC/B,MAAM,EAAE,GAAG,kBAAkB,EAAE,CAAC;IAChC,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAClC,CAAC"}

package/dist/lib/skill-import.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Skill import — read standard SKILL.md skill directories and push them to the pod.
+ *
+ * Follows the Agent Skills open standard (agentskills.io): a skill is a DIRECTORY
+ * with a `SKILL.md` at its root (YAML frontmatter + markdown body) and optional
+ * nested files/subdirs for reference docs, examples, templates, and code. Every
+ * non-SKILL.md file becomes a linked document (the agent reads them on demand via
+ * get_document). This is the same format Claude Code, Codex, Gemini CLI, Copilot
+ * and others use.
+ *
+ * The pod stores them via POST /agent-skills/import: the SKILL.md body becomes
+ * the instruction skill, every other file becomes a linked document.
+ */
+import { type HubConfig } from "./hub-client.js";
+export interface ParsedSkill {
+    slug: string;
+    name: string;
+    description: string;
+    body: string;
+    /** auto_load=true → always-loaded core DNA; false → on-demand (catalog + load_skill). */
+    autoLoad: boolean;
+    documents: Array<{
+        title: string;
+        content: string;
+        type: string;
+        language?: string;
+    }>;
+}
+/** Parse a single SKILL.md skill directory into an import payload. */
+export declare function parseSkillDir(dir: string): ParsedSkill | null;
+/** Find every skill directory (one containing SKILL.md) under a root, one level deep. */
+export declare function discoverSkillDirs(root: string): string[];
+export interface ImportResult {
+    slug: string;
+    status: "imported" | "exists" | "error";
+    docs: number;
+    error?: string;
+}
+/** Import a parsed skill into the pod via POST /agent-skills/import. */
+export declare function importSkill(parsed: ParsedSkill, userId: string, cfg: HubConfig): Promise<ImportResult>;

package/dist/lib/skill-import.js

@@ -0,0 +1,203 @@
+/**
+ * Skill import — read standard SKILL.md skill directories and push them to the pod.
+ *
+ * Follows the Agent Skills open standard (agentskills.io): a skill is a DIRECTORY
+ * with a `SKILL.md` at its root (YAML frontmatter + markdown body) and optional
+ * nested files/subdirs for reference docs, examples, templates, and code. Every
+ * non-SKILL.md file becomes a linked document (the agent reads them on demand via
+ * get_document). This is the same format Claude Code, Codex, Gemini CLI, Copilot
+ * and others use.
+ *
+ * The pod stores them via POST /agent-skills/import: the SKILL.md body becomes
+ * the instruction skill, every other file becomes a linked document.
+ */
+import fs from "node:fs";
+import path from "node:path";
+import { hubPost } from "./hub-client.js";
+/**
+ * Minimal YAML frontmatter parser for SKILL.md. The frontmatter is intentionally
+ * simple (name, description, a flat `metadata:` block) so we avoid a YAML dep.
+ */
+function parseFrontmatter(raw) {
+    if (!raw.startsWith("---"))
+        return { fm: {}, body: raw };
+    const end = raw.indexOf("\n---", 3);
+    if (end === -1)
+        return { fm: {}, body: raw };
+    const fmBlock = raw.slice(3, end).trim();
+    const body = raw.slice(end + 4).replace(/^\s*\n/, "");
+    const fm = {};
+    for (const line of fmBlock.split("\n")) {
+        const m = line.match(/^\s*([a-zA-Z0-9_-]+):\s*(.*)$/);
+        if (m && m[2] !== "")
+            fm[m[1].trim()] = m[2].trim().replace(/^["']|["']$/g, "");
+    }
+    return { fm, body };
+}
+/**
+ * Recursively walk a directory, collecting every file (except SKILL.md) as a
+ * document. Preserves the relative path from `root` as the document title so the
+ * agent can reference files exactly as they appear in the skill (e.g.
+ * "reference/02-scoring-framework.md", "examples/q2-description-rewrites.md",
+ * "templates/abstract-review-builder.py").
+ *
+ * Binary files are skipped. Files over 512KB are skipped (anti-bloat guard).
+ */
+function collectAllDocuments(root, skillMdPath) {
+    const docs = [];
+    const MAX_BYTES = 512 * 1024;
+    function walk(dir, prefix) {
+        let entries;
+        try {
+            entries = fs.readdirSync(dir, { withFileTypes: true });
+        }
+        catch {
+            return;
+        }
+        for (const entry of entries) {
+            const full = path.join(dir, entry.name);
+            const relPath = prefix ? `${prefix}/${entry.name}` : entry.name;
+            if (entry.isDirectory() || entry.isSymbolicLink()) {
+                // Follow symlink dirs; skip node_modules + .git
+                try {
+                    const stat = entry.isSymbolicLink() ? fs.statSync(full) : null;
+                    const isDir = entry.isDirectory() || (stat?.isDirectory() ?? false);
+                    if (isDir && !["node_modules", ".git"].includes(entry.name)) {
+                        walk(full, relPath);
+                    }
+                }
+                catch { /* broken symlink — skip */ }
+                continue;
+            }
+            if (!entry.isFile())
+                continue;
+            if (full === skillMdPath)
+                continue; // body, not a document
+            if (entry.name.startsWith("."))
+                continue; // hidden files
+            try {
+                const stat = fs.statSync(full);
+                if (stat.size > MAX_BYTES)
+                    continue;
+            }
+            catch {
+                continue;
+            }
+            // Map extension → document type
+            const ext = path.extname(entry.name).toLowerCase();
+            let type = "markdown";
+            let language;
+            if (ext === ".md") {
+                type = "markdown";
+            }
+            else if (ext === ".py") {
+                type = "code";
+                language = "python";
+            }
+            else if (ext === ".js" || ext === ".ts") {
+                type = "code";
+                language = ext === ".ts" ? "typescript" : "javascript";
+            }
+            else if (ext === ".json") {
+                type = "code";
+                language = "json";
+            }
+            else if (ext === ".txt") {
+                type = "text";
+            }
+            else {
+                continue;
+            } // skip binary/unrecognized
+            let content;
+            try {
+                content = fs.readFileSync(full, "utf-8");
+            }
+            catch {
+                continue;
+            } // binary file detected at read time — skip
+            docs.push({ title: relPath, content, type, language });
+        }
+    }
+    walk(root, "");
+    return docs;
+}
+/** Parse a single SKILL.md skill directory into an import payload. */
+export function parseSkillDir(dir) {
+    const skillMd = path.join(dir, "SKILL.md");
+    if (!fs.existsSync(skillMd))
+        return null;
+    const raw = fs.readFileSync(skillMd, "utf-8");
+    const { fm, body } = parseFrontmatter(raw);
+    return {
+        slug: fm.name || path.basename(dir),
+        name: fm.name || path.basename(dir),
+        description: fm.description || "",
+        body: body.trim(),
+        autoLoad: fm.auto_load === "true",
+        documents: collectAllDocuments(dir, skillMd),
+    };
+}
+/** Find every skill directory (one containing SKILL.md) under a root, one level deep. */
+export function discoverSkillDirs(root) {
+    if (!fs.existsSync(root))
+        return [];
+    if (fs.existsSync(path.join(root, "SKILL.md")))
+        return [root];
+    const out = [];
+    for (const entry of fs.readdirSync(root, { withFileTypes: true })) {
+        const full = path.join(root, entry.name);
+        const isDir = entry.isDirectory() ||
+            (entry.isSymbolicLink() && fs.statSync(full).isDirectory());
+        if (isDir && fs.existsSync(path.join(full, "SKILL.md")))
+            out.push(full);
+    }
+    return out;
+}
+/** Import a parsed skill into the pod via POST /agent-skills/import. */
+export async function importSkill(parsed, userId, cfg) {
+    try {
+        const res = (await hubPost("/agent-skills/import", {
+            userId,
+            skill: {
+                slug: parsed.slug,
+                name: parsed.name,
+                description: parsed.description,
+                body: parsed.body,
+                autoLoad: parsed.autoLoad,
+            },
+            documents: parsed.documents,
+        }, cfg));
+        if (res.error && /already exists/i.test(res.error)) {
+            return { slug: parsed.slug, status: "exists", docs: 0 };
+        }
+        if (res.skill) {
+            return {
+                slug: parsed.slug,
+                status: "imported",
+                docs: res.documents?.length ?? 0,
+            };
+        }
+        return {
+            slug: parsed.slug,
+            status: "error",
+            docs: 0,
+            error: res.error ?? "unknown",
+        };
+    }
+    catch (err) {
+        // Idempotent re-seed: the hub returns HTTP 409 ("already exists") when the
+        // skill slug is present. hubPost throws on non-2xx, so the 409 lands here —
+        // treat it as a no-op success, not an error.
+        const msg = err instanceof Error ? err.message : String(err);
+        if (/already exists/i.test(msg) || /\b409\b/.test(msg)) {
+            return { slug: parsed.slug, status: "exists", docs: 0 };
+        }
+        return {
+            slug: parsed.slug,
+            status: "error",
+            docs: 0,
+            error: msg,
+        };
+    }
+}
+//# sourceMappingURL=skill-import.js.map

package/dist/lib/skill-import.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-import.js","sourceRoot":"","sources":["../../src/lib/skill-import.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAkB,MAAM,iBAAiB,CAAC;AAY1D;;;GAGG;AACH,SAAS,gBAAgB,CAAC,GAAW;IAInC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACzD,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACpC,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IAC7C,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAEtD,MAAM,EAAE,GAA2B,EAAE,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACtD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE;YAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,mBAAmB,CAC1B,IAAY,EACZ,WAAmB;IAEnB,MAAM,IAAI,GAA6B,EAAE,CAAC;IAC1C,MAAM,SAAS,GAAG,GAAG,GAAG,IAAI,CAAC;IAE7B,SAAS,IAAI,CAAC,GAAW,EAAE,MAAc;QACvC,IAAI,OAAoB,CAAC;QACzB,IAAI,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAC/D,MAAM,CAAC;YAAC,OAAO;QAAC,CAAC;QAEjB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;YAEhE,IAAI,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;gBAClD,gDAAgD;gBAChD,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;oBAC/D,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,KAAK,CAAC,CAAC;oBACpE,IAAI,KAAK,IAAI,CAAC,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;wBAC5D,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;oBACtB,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC,CAAC,2BAA2B,CAAC,CAAC;gBACvC,SAAS;YACX,CAAC;YAED,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;gBAAE,SAAS;YAC9B,IAAI,IAAI,KAAK,WAAW;gBAAE,SAAS,CAAC,uBAAuB;YAC3D,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS,CAAC,eAAe;YAEzD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAC/B,IAAI,IAAI,CAAC,IAAI,GAAG,SAAS;oBAAE,SAAS;YACtC,CAAC;YAAC,MAAM,CAAC;gBAAC,SAAS;YAAC,CAAC;YAErB,gCAAgC;YAChC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YACnD,IAAI,IAAI,GAAG,UAAU,CAAC;YACtB,IAAI,QAA4B,CAAC;YACjC,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;gBAAC,IAAI,GAAG,UAAU,CAAC;YAAC,CAAC;iBACpC,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;gBAAC,IAAI,GAAG,MAAM,CAAC;gBAAC,QAAQ,GAAG,QAAQ,CAAC;YAAC,CAAC;iBAC1D,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;gBAAC,IAAI,GAAG,MAAM,CAAC;gBAAC,QAAQ,GAAG,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC;YAAC,CAAC;iBAC9G,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;gBAAC,IAAI,GAAG,MAAM,CAAC;gBAAC,QAAQ,GAAG,MAAM,CAAC;YAAC,CAAC;iBAC1D,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;gBAAC,IAAI,GAAG,MAAM,CAAC;YAAC,CAAC;iBACtC,CAAC;gBAAC,SAAS;YAAC,CAAC,CAAC,2BAA2B;YAE9C,IAAI,OAAe,CAAC;YACpB,IAAI,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAAC,CAAC;YACjD,MAAM,CAAC;gBAAC,SAAS;YAAC,CAAC,CAAC,2CAA2C;YAE/D,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACf,OAAO,IAAI,CAAC;AACd,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC3C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAEzC,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9C,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAE3C,OAAO;QACL,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QACnC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QACnC,WAAW,EAAE,EAAE,CAAC,WAAW,IAAI,EAAE;QACjC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;QACjB,QAAQ,EAAE,EAAE,CAAC,SAAS,KAAK,MAAM;QACjC,SAAS,EAAE,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,KAAK,GACT,KAAK,CAAC,WAAW,EAAE;YACnB,CAAC,KAAK,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAC9D,IAAI,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AASD,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAmB,EACnB,MAAc,EACd,GAAc;IAEd,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,MAAM,OAAO,CACxB,sBAAsB,EACtB;YACE,MAAM;YACN,KAAK,EAAE;gBACL,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B;YACD,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,EACD,GAAG,CACJ,CAAsE,CAAC;QAExE,IAAI,GAAG,CAAC,KAAK,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACnD,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1D,CAAC;QACD,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YACd,OAAO;gBACL,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,MAAM,EAAE,UAAU;gBAClB,IAAI,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC;aACjC,CAAC;QACJ,CAAC;QACD,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,CAAC;YACP,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,SAAS;SAC9B,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,2EAA2E;QAC3E,4EAA4E;QAC5E,6CAA6C;QAC7C,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACvD,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1D,CAAC;QACD,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,CAAC;YACP,KAAK,EAAE,GAAG;SACX,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/lib/skills-installer.d.ts

@@ -2,17 +2,28 @@
  * Skill installer — copies the synap skill tree into a target's skills directory.
  *
  * Source resolution order:
- *   1. $SYNAP_SKILLS_DIR (explicit override)
- *   2. adjacent ../synap-backend/skills/ (monorepo dev mode)
- *   3. bundled skills/ inside this package (production / published npm)
- *   4. fetch from a published tarball (fallback — not yet implemented)
+ *   1. $SYNAP_SKILLS_DIR (explicit override) or an adjacent ../synap-backend/skills/
+ *      checkout (monorepo dev mode) — both are local disk, dev escape hatches.
+ *   2. the connected pod — GET /api/hub/skills/system (pod-first: production
+ *      users get whatever skill packages their pod actually serves, not a
+ *      snapshot baked into this CLI's npm release).
+ *   3. bundled skills/ inside this package (production / published npm,
+ *      offline, or pod unreachable).
  *
  * If none resolve, prints a manual install command and returns false.
  */
+/** Last-resort constant — only used when no manifest.json can be found on
+ *  disk (dev or bundled) AND the pod is unreachable/unconfigured. */
 export declare const SKILL_NAMES: readonly ["synap", "synap-schema", "synap-ui"];
 export type SkillName = (typeof SKILL_NAMES)[number];
+/**
+ * Baseline skills are safe to install into every agent context. Workflow
+ * packages are intentionally loaded only when the target/user asks for them;
+ * installing them by default turns progressive teaching back into prompt bulk.
+ */
+export declare function getDeliverableSkills(): string[];
 export interface InstallOpts {
     destDir: string;
-    skills: readonly string[];
+    skills?: readonly string[];
 }
 export declare function installSkills(opts: InstallOpts): Promise<boolean>;