@tanstack/intent 0.0.43 → 0.1.0

package/dist/{install-BW__b6st.mjs → install-DXQsQQIL.mjs}

@@ -1,11 +1,11 @@
 import "./utils-9fhWAVua.mjs";
 import "./workspace-patterns-BffPlZ1D.mjs";
 import { t as detectPackageManager } from "./package-manager-BUgTjW9Q.mjs";
-import { i as parseSkillUse, n as formatSkillUse } from "./skill-use-umYvZl94.mjs";
-import "./project-context-BRIMzhi4.mjs";
+import { i as parseSkillUse, n as formatSkillUse } from "./skill-use-CUrNHf-u.mjs";
+import "./project-context-DBSibDPb.mjs";
 import { t as fail } from "./cli-error-BrMXlbtx.mjs";
-import { c as scanOptionsFromGlobalFlags, l as printWarnings } from "./cli-support-DzDBzS3-.mjs";
-import { t as formatIntentCommand } from "./command-runner-C0yCOHLi.mjs";
+import { a as noticeOptionsFromGlobalFlags, l as printNotices, n as coreOptionsFromGlobalFlags, u as printWarnings } from "./cli-support-BevVu4gw.mjs";
+import { t as formatIntentCommand } from "./command-runner-fstUIUhe.mjs";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname, join, relative } from "node:path";
 import { parse } from "yaml";
@@ -343,9 +343,10 @@ function formatTargetPath(targetPath) {
 function formatMappingCount(mappingCount) {
 	return `${mappingCount} ${mappingCount === 1 ? "mapping" : "mappings"}`;
 }
-function printNoActionableSkills(warnings) {
+function printNoActionableSkills(warnings, notices, noticeOptions) {
 	console.log("No intent-enabled skills found.");
 	printWarnings(warnings);
+	printNotices(notices, noticeOptions);
 }
 function printPlacementTip(targetPath) {
 	console.log(`Tip: Keep the intent-skills block near the top of ${formatTargetPath(targetPath)} so agents read it before task-specific instructions.`);
@@ -383,7 +384,8 @@ async function runInstallCommand(options, scanIntentsOrFail) {
 		console.log(INSTALL_PROMPT);
 		return;
 	}
-	const scanOptions = scanOptionsFromGlobalFlags(options);
+	const coreOptions = coreOptionsFromGlobalFlags(options);
+	const noticeOptions = noticeOptionsFromGlobalFlags(options);
 	if (!options.map) {
 		const generated$1 = buildIntentSkillGuidanceBlock(detectPackageManager());
 		if (options.dryRun) {
@@ -408,17 +410,18 @@ async function runInstallCommand(options, scanIntentsOrFail) {
 		printPlacementTip(result$1.targetPath);
 		return;
 	}
-	const scanResult = await scanIntentsOrFail(scanOptions);
+	const scanResult = await scanIntentsOrFail(coreOptions);
 	const generated = buildIntentSkillsBlock(scanResult);
 	if (options.dryRun) {
 		const targetPath = resolveIntentSkillsBlockTargetPath(process.cwd(), generated.mappingCount);
 		if (!targetPath) {
-			printNoActionableSkills(scanResult.warnings);
+			printNoActionableSkills(scanResult.warnings, scanResult.notices, noticeOptions);
 			return;
 		}
 		console.log(`Generated ${formatMappingCount(generated.mappingCount)} for ${formatTargetPath(targetPath)}.`);
 		console.log(generated.block);
 		printWarnings(scanResult.warnings);
+		printNotices(scanResult.notices, noticeOptions);
 		return;
 	}
 	const result = writeIntentSkillsBlock({
@@ -426,7 +429,7 @@ async function runInstallCommand(options, scanIntentsOrFail) {
 		root: process.cwd()
 	});
 	if (!result.targetPath) {
-		printNoActionableSkills(scanResult.warnings);
+		printNoActionableSkills(scanResult.warnings, scanResult.notices, noticeOptions);
 		return;
 	}
 	const target = formatTargetPath(result.targetPath);
@@ -439,6 +442,7 @@ async function runInstallCommand(options, scanIntentsOrFail) {
 	printWriteResult(result);
 	printPlacementTip(result.targetPath);
 	printWarnings(scanResult.warnings);
+	printNotices(scanResult.notices, noticeOptions);
 }
 
 //#endregion

package/dist/{list-DQvWxgPM.mjs → list-CxB37mvm.mjs}

@@ -1,12 +1,14 @@
 import "./utils-9fhWAVua.mjs";
 import "./skill-paths-B-j0dWDA.mjs";
-import "./scanner-D3tAqvbj.mjs";
+import "./scanner-CRCZwhKS.mjs";
 import "./workspace-patterns-BffPlZ1D.mjs";
-import "./project-context-BRIMzhi4.mjs";
-import "./resolver-D9cjsz11.mjs";
-import { n as listIntentSkills } from "./core-C7hpf0Tt.mjs";
-import { a as printDebugInfo, l as printWarnings, n as coreOptionsFromGlobalFlags } from "./cli-support-DzDBzS3-.mjs";
-import { t as formatIntentCommand } from "./command-runner-C0yCOHLi.mjs";
+import "./project-context-DBSibDPb.mjs";
+import "./excludes-DG83YEzb.mjs";
+import "./resolver-CDbVXv4g.mjs";
+import { n as listIntentSkills } from "./core-6UP6jyL8.mjs";
+import "./source-policy-DaImacFt.mjs";
+import { a as noticeOptionsFromGlobalFlags, l as printNotices, n as coreOptionsFromGlobalFlags, o as printDebugInfo, u as printWarnings } from "./cli-support-BevVu4gw.mjs";
+import { t as formatIntentCommand } from "./command-runner-fstUIUhe.mjs";
 
 //#region src/commands/list.ts
 function printListDebug(result) {
@@ -18,6 +20,7 @@ function printListDebug(result) {
 		["packages", result.debug.packageCount],
 		["skills", result.debug.skillCount],
 		["warnings", result.debug.warningCount],
+		["notices", result.debug.noticeCount],
 		["conflicts", result.debug.conflictCount],
 		["packageJsonReadCount", result.debug.scan.packageJsonReadCount],
 		["packageJsonCacheHits", result.debug.scan.packageJsonCacheHits]
@@ -51,21 +54,23 @@ function getPackageSkills(pkg, skillsByPackageRoot) {
 function formatLoadCommand(skill, packageManager, scopeFlag) {
 	return formatIntentCommand(packageManager, `load ${skill.use}${scopeFlag}`);
 }
-async function runListCommand(options, _scanIntentsOrFail) {
+async function runListCommand(options) {
 	const result = listIntentSkills(coreOptionsFromGlobalFlags(options));
+	const noticeOptions = noticeOptionsFromGlobalFlags(options);
 	printListDebug(result);
 	if (options.json) {
 		const { debug: _debug, packageManager: _packageManager, ...jsonResult } = result;
 		console.log(JSON.stringify(jsonResult, null, 2));
 		return;
 	}
-	const { computeSkillNameWidth, printSkillTree, printTable } = await import("./display-0FnzlKRq.mjs");
+	const { computeSkillNameWidth, printSkillTree, printTable } = await import("./display-CVMGtcHz.mjs");
 	if (result.packages.length === 0) {
 		console.log("No intent-enabled packages found.");
 		if (result.warnings.length > 0) {
 			console.log();
 			printWarnings(result.warnings);
 		}
+		printNotices(result.notices, noticeOptions);
 		return;
 	}
 	console.log(`\n${result.packages.length} intent-enabled packages, ${result.skills.length} skills\n`);
@@ -109,6 +114,7 @@ async function runListCommand(options, _scanIntentsOrFail) {
 	console.log("  Load: node_modules/@tanstack/intent/meta/feedback-collection/SKILL.md");
 	console.log();
 	printWarnings(result.warnings);
+	printNotices(result.notices, noticeOptions);
 }
 
 //#endregion

package/dist/{load-D5MM8OW9.mjs → load-Ch4UjIza.mjs}

@@ -1,12 +1,14 @@
 import "./utils-9fhWAVua.mjs";
 import "./skill-paths-B-j0dWDA.mjs";
-import "./scanner-D3tAqvbj.mjs";
+import "./scanner-CRCZwhKS.mjs";
 import "./workspace-patterns-BffPlZ1D.mjs";
-import "./project-context-BRIMzhi4.mjs";
-import "./resolver-D9cjsz11.mjs";
+import "./project-context-DBSibDPb.mjs";
+import "./excludes-DG83YEzb.mjs";
+import "./resolver-CDbVXv4g.mjs";
 import { t as fail } from "./cli-error-BrMXlbtx.mjs";
-import { i as resolveIntentSkill, r as loadIntentSkill, t as IntentCoreError } from "./core-C7hpf0Tt.mjs";
-import { a as printDebugInfo, n as coreOptionsFromGlobalFlags } from "./cli-support-DzDBzS3-.mjs";
+import { i as resolveIntentSkill, r as loadIntentSkill, t as IntentCoreError } from "./core-6UP6jyL8.mjs";
+import "./source-policy-DaImacFt.mjs";
+import { n as coreOptionsFromGlobalFlags, o as printDebugInfo } from "./cli-support-BevVu4gw.mjs";
 
 //#region src/commands/load.ts
 function printLoadDebug(loaded) {
@@ -26,7 +28,7 @@ function printLoadDebug(loaded) {
 		["packageJsonCacheHits", loaded.debug.scan.packageJsonCacheHits]
 	]);
 }
-async function runLoadCommand(use, options, _scanIntentsOrFail) {
+async function runLoadCommand(use, options) {
 	if (!use) fail("Missing skill use. Expected: intent load <package>#<skill>");
 	if (options.json && options.path) fail("Use either --json or --path, not both.");
 	const coreOptions = coreOptionsFromGlobalFlags(options);

package/dist/{resolver-D9cjsz11.mjs → resolver-CDbVXv4g.mjs}

@@ -1,89 +1,6 @@
-import { i as parseSkillUse } from "./skill-use-umYvZl94.mjs";
-import { t as resolveProjectContext } from "./project-context-BRIMzhi4.mjs";
-import { readFileSync } from "node:fs";
-import { dirname, isAbsolute, join, relative, resolve } from "node:path";
+import { i as parseSkillUse } from "./skill-use-CUrNHf-u.mjs";
+import { o as warningMentionsPackage } from "./excludes-DG83YEzb.mjs";
 
-//#region src/core/package-json.ts
-function readPackageJson(dir) {
-	try {
-		return JSON.parse(readFileSync(join(dir, "package.json"), "utf8"));
-	} catch {
-		return null;
-	}
-}
-
-//#endregion
-//#region src/core/excludes.ts
-const MAX_EXCLUDE_PATTERN_LENGTH = 200;
-const PACKAGE_NAME_BOUNDARY = /[^a-zA-Z0-9_.-]/;
-function normalizeExcludePatterns(value) {
-	if (!Array.isArray(value)) return [];
-	return value.filter((pattern) => typeof pattern === "string").map((pattern) => pattern.trim()).filter(Boolean);
-}
-function isWithinOrEqual(path, parentDir) {
-	const rel = relative(parentDir, path);
-	return rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
-}
-function readPackageExcludes(dir) {
-	const intent = readPackageJson(dir)?.intent;
-	if (!intent || typeof intent !== "object") return [];
-	return normalizeExcludePatterns(intent.exclude);
-}
-function getConfigExcludePatterns(cwd, context = resolveProjectContext({ cwd })) {
-	const root = context.workspaceRoot ?? context.packageRoot ?? cwd;
-	const dirs = [];
-	let dir = cwd;
-	while (isWithinOrEqual(dir, root)) {
-		dirs.push(dir);
-		if (dir === root) break;
-		const next = dirname(dir);
-		if (next === dir) break;
-		dir = next;
-	}
-	return dirs.reverse().flatMap(readPackageExcludes);
-}
-function getEffectiveExcludePatterns(options = {}, context) {
-	return [...getConfigExcludePatterns(context?.cwd ?? resolve(process.cwd(), options.cwd ?? process.cwd()), context), ...normalizeExcludePatterns(options.exclude)];
-}
-function normalizeGlobPattern(pattern) {
-	if (pattern.length > MAX_EXCLUDE_PATTERN_LENGTH) throw new Error(`Intent exclude pattern is too long: ${pattern.length} characters. Maximum is ${MAX_EXCLUDE_PATTERN_LENGTH}.`);
-	return pattern.replace(/\*+/g, "*");
-}
-function globToRegExp(pattern) {
-	const source = normalizeGlobPattern(pattern).split("*").map((part) => part.replace(/[\\^$+?.()|[\]{}]/g, "\\$&")).join(".*");
-	return /* @__PURE__ */ new RegExp(`^${source}$`);
-}
-function compileExcludePatterns(patterns) {
-	return patterns.map((pattern) => {
-		if (!pattern.includes("*")) {
-			normalizeGlobPattern(pattern);
-			return {
-				pattern,
-				matches: (packageName) => packageName === pattern
-			};
-		}
-		const regex = globToRegExp(pattern);
-		return {
-			pattern,
-			matches: (packageName) => regex.test(packageName)
-		};
-	});
-}
-function isPackageExcluded(packageName, matchers) {
-	return matchers.some((matcher) => matcher.matches(packageName));
-}
-function warningMentionsPackage(warning, packageName) {
-	let idx = warning.indexOf(packageName);
-	while (idx !== -1) {
-		const before = warning[idx - 1];
-		const after = warning[idx + packageName.length];
-		if ((before === void 0 || PACKAGE_NAME_BOUNDARY.test(before)) && (after === void 0 || PACKAGE_NAME_BOUNDARY.test(after))) return true;
-		idx = warning.indexOf(packageName, idx + packageName.length);
-	}
-	return false;
-}
-
-//#endregion
 //#region src/resolver.ts
 var ResolveSkillUseError = class extends Error {
 	constructor({ availablePackages = [], availableSkills = [], code, packageName, skillName, suggestedSkills = [], use }) {
@@ -192,4 +109,4 @@ function formatSkillSuggestions(packageName, skillNames) {
 }
 
 //#endregion
-export { compileExcludePatterns as a, warningMentionsPackage as c, resolveSkillUse as i, isResolveSkillUseError as n, getEffectiveExcludePatterns as o, resolveSkillEntry as r, isPackageExcluded as s, ResolveSkillUseError as t };
+export { resolveSkillUse as i, isResolveSkillUseError as n, resolveSkillEntry as r, ResolveSkillUseError as t };

package/dist/{scanner-D3tAqvbj.mjs → scanner-CRCZwhKS.mjs}

@@ -117,7 +117,7 @@ function createDependencyWalker(opts) {
 			opts.warnings.push(`Could not read package.json for ${pkgName} (skipping dependency walk)`);
 			return;
 		}
-		walkDepsOf(pkgJson, pkgDir);
+		walkDepsOf(pkgJson, pkgKey);
 	}
 	function walkKnownPackages() {
 		for (const pkg of [...opts.packages]) walkDeps(pkg.packageRoot, pkg.name);
@@ -587,6 +587,7 @@ function scanForIntents(root, options = {}) {
 		packageManager,
 		packages,
 		warnings,
+		notices: [],
 		conflicts,
 		nodeModules,
 		stats: getStats()
@@ -603,6 +604,7 @@ function scanForIntents(root, options = {}) {
 		packageManager,
 		packages: topoSort(packages),
 		warnings,
+		notices: [],
 		conflicts,
 		nodeModules,
 		stats: getStats()

package/dist/{setup-BklJkH_6.mjs → setup-DpCYUVSf.mjs}

@@ -1,5 +1,5 @@
 import { a as readWorkspacePatterns, r as findWorkspaceRoot, t as findPackagesWithSkills } from "./workspace-patterns-BffPlZ1D.mjs";
-import { t as resolveProjectContext } from "./project-context-BRIMzhi4.mjs";
+import { t as resolveProjectContext } from "./project-context-DBSibDPb.mjs";
 import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
 import { basename, join, relative } from "node:path";
 

package/dist/setup.d.mts

@@ -1,2 +1,2 @@
-import { a as runEditPackageJsonAll, c as findWorkspaceRoot, i as runEditPackageJson, l as readWorkspacePatterns, n as MonorepoResult, o as runSetupGithubActions, r as SetupGithubActionsResult, s as findPackagesWithSkills, t as EditPackageJsonResult, u as resolveWorkspacePackages } from "./setup-DhMqESd3.mjs";
+import { a as runEditPackageJsonAll, c as findWorkspaceRoot, i as runEditPackageJson, l as readWorkspacePatterns, n as MonorepoResult, o as runSetupGithubActions, r as SetupGithubActionsResult, s as findPackagesWithSkills, t as EditPackageJsonResult, u as resolveWorkspacePackages } from "./setup-DW3pn0QW.mjs";
 export { EditPackageJsonResult, MonorepoResult, SetupGithubActionsResult, findPackagesWithSkills, findWorkspaceRoot, readWorkspacePatterns, resolveWorkspacePackages, runEditPackageJson, runEditPackageJsonAll, runSetupGithubActions };

package/dist/setup.mjs

@@ -1,6 +1,6 @@
 import "./utils-9fhWAVua.mjs";
 import { a as readWorkspacePatterns, o as resolveWorkspacePackages, r as findWorkspaceRoot, t as findPackagesWithSkills } from "./workspace-patterns-BffPlZ1D.mjs";
-import "./project-context-BRIMzhi4.mjs";
-import { n as runEditPackageJsonAll, r as runSetupGithubActions, t as runEditPackageJson } from "./setup-BklJkH_6.mjs";
+import "./project-context-DBSibDPb.mjs";
+import { n as runEditPackageJsonAll, r as runSetupGithubActions, t as runEditPackageJson } from "./setup-DpCYUVSf.mjs";
 
 export { findPackagesWithSkills, findWorkspaceRoot, readWorkspacePatterns, resolveWorkspacePackages, runEditPackageJson, runEditPackageJsonAll, runSetupGithubActions };

package/dist/source-policy-DaImacFt.mjs

@@ -0,0 +1,247 @@
+import { t as scanForIntents } from "./scanner-CRCZwhKS.mjs";
+import { t as resolveProjectContext } from "./project-context-DBSibDPb.mjs";
+import { a as isSkillExcluded, i as isPackageExcluded, n as getConfigDirs, o as warningMentionsPackage, r as getEffectiveExcludePatterns, s as readPackageJson, t as compileExcludePatterns } from "./excludes-DG83YEzb.mjs";
+
+//#region src/core/skill-sources.ts
+var SkillSourcesParseError = class extends Error {
+	constructor(issues) {
+		super(formatIssues(issues));
+		this.name = "SkillSourcesParseError";
+		this.issues = issues;
+	}
+};
+/**
+* Strictness is fail-whole-list: every malformed entry is collected and
+* reported together, and a single bad entry rejects the entire list rather
+* than silently applying a partial allowlist.
+*/
+function parseSkillSources(value) {
+	if (value === void 0 || value === null) return { mode: "absent" };
+	if (!Array.isArray(value)) throw new SkillSourcesParseError([{
+		raw: null,
+		message: `intent.skills must be an array of source strings, received ${describeType(value)}.`
+	}]);
+	if (value.length === 0) return { mode: "empty" };
+	const issues = [];
+	const sources = [];
+	const seenRaw = /* @__PURE__ */ new Set();
+	const seenIdentity = /* @__PURE__ */ new Set();
+	let allowAll = false;
+	for (const entry of value) {
+		if (typeof entry !== "string") {
+			issues.push({
+				raw: null,
+				message: `Entry must be a string, received ${describeType(entry)}.`
+			});
+			continue;
+		}
+		if (seenRaw.has(entry)) {
+			issues.push({
+				raw: entry,
+				message: "Duplicate entry."
+			});
+			continue;
+		}
+		seenRaw.add(entry);
+		const trimmed = entry.trim();
+		if (trimmed === "") {
+			issues.push({
+				raw: entry,
+				message: "Entry is empty."
+			});
+			continue;
+		}
+		if (entry.includes("*")) {
+			if (entry === "*") {
+				allowAll = true;
+				continue;
+			}
+			issues.push({
+				raw: entry,
+				message: "The \"*\" wildcard must be the exact entry \"*\"; globs are not supported in intent.skills."
+			});
+			continue;
+		}
+		const parsed = parseEntry(entry, trimmed);
+		if ("message" in parsed) {
+			issues.push(parsed);
+			continue;
+		}
+		const identity = `${parsed.kind}\u0000${parsed.id}`;
+		if (seenIdentity.has(identity)) continue;
+		seenIdentity.add(identity);
+		sources.push(parsed);
+	}
+	if (issues.length > 0) throw new SkillSourcesParseError(issues);
+	if (allowAll) return { mode: "allow-all" };
+	return {
+		mode: "explicit",
+		sources
+	};
+}
+function parseEntry(raw, trimmed) {
+	const colon = trimmed.indexOf(":");
+	if (colon === -1) {
+		const invalid = validateId(trimmed);
+		if (invalid) return {
+			raw,
+			message: `Invalid npm source "${trimmed}": ${invalid}`
+		};
+		return {
+			raw,
+			id: trimmed,
+			kind: "npm"
+		};
+	}
+	const prefix = trimmed.slice(0, colon);
+	const rest = trimmed.slice(colon + 1).trim();
+	switch (prefix) {
+		case "workspace": {
+			if (rest === "") return {
+				raw,
+				message: `Workspace source "${trimmed}" is missing a package name.`
+			};
+			const invalid = validateId(rest);
+			if (invalid) return {
+				raw,
+				message: `Invalid workspace source "${trimmed}": ${invalid}`
+			};
+			return {
+				raw,
+				id: rest,
+				kind: "workspace"
+			};
+		}
+		case "git": return {
+			raw,
+			message: `Git source "${trimmed}" is not supported until the lockfile lands (M2).`
+		};
+		default: return {
+			raw,
+			message: `Unknown source prefix "${prefix}" in "${trimmed}".`
+		};
+	}
+}
+function validateId(id) {
+	if (id.includes("#")) return "skill-level granularity (#) is not supported in intent.skills (it is package-level); use intent.exclude for skill-level control.";
+	if (/\s/.test(id)) return "package names cannot contain whitespace.";
+	if (id.includes(":")) return "package names cannot contain \":\".";
+	return null;
+}
+function describeType(value) {
+	if (value === null) return "null";
+	return Array.isArray(value) ? "array" : typeof value;
+}
+function formatIssues(issues) {
+	return ["Invalid intent.skills configuration:", ...issues.map((issue) => issue.raw === null ? `  - ${issue.message}` : `  - "${issue.raw}": ${issue.message}`)].join("\n");
+}
+
+//#endregion
+//#region src/core/source-policy.ts
+const ALLOW_ALL_NOTICE = "All skill sources allowed (intent.skills: [\"*\"]) — unvetted skills may be surfaced into agent guidance.";
+const MIGRATION_NOTICE = "intent.skills is not set — all discovered skill sources are surfaced. A future version will require an explicit intent.skills allowlist; add one to opt in to specific sources.";
+const EMPTY_NOTE = "intent.skills is empty — no skill sources are permitted.";
+function isSourcePermitted(config, packageName) {
+	switch (config.mode) {
+		case "absent":
+		case "allow-all": return true;
+		case "empty": return false;
+		case "explicit": return config.sources.some((source) => source.id === packageName);
+	}
+}
+function checkLoadAllowed(use, parsed, params) {
+	const { config, excludeMatchers } = params;
+	const { packageName, skillName } = parsed;
+	if (isPackageExcluded(packageName, excludeMatchers)) return {
+		code: "package-excluded",
+		message: `Cannot load skill use "${use}": package "${packageName}" is excluded by Intent configuration.`
+	};
+	if (!isSourcePermitted(config, packageName)) return {
+		code: "package-not-listed",
+		message: `Cannot load skill use "${use}": package "${packageName}" is not listed in intent.skills.`
+	};
+	if (isSkillExcluded(packageName, skillName, excludeMatchers)) return {
+		code: "skill-excluded",
+		message: `Cannot load skill use "${use}": skill "${packageName}#${skillName}" is excluded by Intent configuration.`
+	};
+	return null;
+}
+function formatUnlistedNotice(names) {
+	const sorted = [...names].sort();
+	const noun = sorted.length === 1 ? "package ships" : "packages ship";
+	return `${sorted.length} discovered ${noun} skills but ${sorted.length === 1 ? "is" : "are"} not listed in intent.skills: ${sorted.join(", ")}. Add to opt in.`;
+}
+function applySourcePolicy(scanResult, options) {
+	const { config, excludeMatchers } = options;
+	const seen = /* @__PURE__ */ new Set();
+	const notices = [];
+	const emit = (notice) => {
+		if (seen.has(notice)) return;
+		seen.add(notice);
+		notices.push(notice);
+	};
+	const packages = [];
+	const unlistedNames = [];
+	for (const pkg of scanResult.packages) {
+		if (isPackageExcluded(pkg.name, excludeMatchers)) continue;
+		if (!isSourcePermitted(config, pkg.name)) {
+			if (config.mode === "explicit") unlistedNames.push(pkg.name);
+			continue;
+		}
+		const skills = pkg.skills.filter((skill) => !isSkillExcluded(pkg.name, skill.name, excludeMatchers));
+		packages.push(skills.length === pkg.skills.length ? pkg : {
+			...pkg,
+			skills
+		});
+	}
+	if (unlistedNames.length > 0) emit(formatUnlistedNotice(unlistedNames));
+	if (config.mode === "explicit") {
+		const discoveredNames = new Set(scanResult.packages.map((pkg) => pkg.name));
+		for (const source of config.sources) if (!discoveredNames.has(source.id)) emit(`"${source.raw}" is declared in intent.skills but was not discovered.`);
+	}
+	if (config.mode === "absent") emit(MIGRATION_NOTICE);
+	else if (config.mode === "allow-all") emit(ALLOW_ALL_NOTICE);
+	else if (config.mode === "empty") emit(EMPTY_NOTE);
+	return {
+		packages,
+		notices
+	};
+}
+function readSkillSourcesConfig(cwd, context = resolveProjectContext({ cwd })) {
+	for (const dir of getConfigDirs(cwd, context)) {
+		const intent = readPackageJson(dir)?.intent;
+		if (!intent || typeof intent !== "object") continue;
+		if ("skills" in intent) {
+			const skills = intent.skills;
+			if (skills === null || skills === void 0) continue;
+			return parseSkillSources(skills);
+		}
+	}
+	return { mode: "absent" };
+}
+function scanForPolicedIntents(params) {
+	const { cwd, scanOptions, coreOptions } = params;
+	const context = params.context ?? resolveProjectContext({ cwd });
+	const scanResult = scanForIntents(cwd, scanOptions);
+	const config = readSkillSourcesConfig(cwd, context);
+	const excludePatterns = getEffectiveExcludePatterns(coreOptions, context);
+	const policy = applySourcePolicy(scanResult, {
+		config,
+		excludeMatchers: compileExcludePatterns(excludePatterns)
+	});
+	const survivingNames = new Set(policy.packages.map((pkg) => pkg.name));
+	const droppedNames = scanResult.packages.map((pkg) => pkg.name).filter((name) => !survivingNames.has(name));
+	return {
+		scan: {
+			...scanResult,
+			packages: policy.packages,
+			warnings: scanResult.warnings.filter((warning) => !droppedNames.some((name) => warningMentionsPackage(warning, name))),
+			notices: policy.notices,
+			conflicts: scanResult.conflicts.filter((conflict) => survivingNames.has(conflict.packageName))
+		},
+		excludePatterns
+	};
+}
+
+//#endregion
+export { checkLoadAllowed as a, applySourcePolicy as i, EMPTY_NOTE as n, readSkillSourcesConfig as o, MIGRATION_NOTICE as r, scanForPolicedIntents as s, ALLOW_ALL_NOTICE as t };

package/dist/source-policy-y3sktvzu.mjs

@@ -0,0 +1,9 @@
+import "./utils-9fhWAVua.mjs";
+import "./skill-paths-B-j0dWDA.mjs";
+import "./scanner-CRCZwhKS.mjs";
+import "./workspace-patterns-BffPlZ1D.mjs";
+import "./project-context-DBSibDPb.mjs";
+import "./excludes-DG83YEzb.mjs";
+import { a as checkLoadAllowed, i as applySourcePolicy, n as EMPTY_NOTE, o as readSkillSourcesConfig, r as MIGRATION_NOTICE, s as scanForPolicedIntents, t as ALLOW_ALL_NOTICE } from "./source-policy-DaImacFt.mjs";
+
+export { scanForPolicedIntents };

package/dist/{stale-C6dPKQ98.mjs → stale-DxZyYibt.mjs}

@@ -1,3 +1,5 @@
+import { n as isCliFailure } from "./cli-error-BrMXlbtx.mjs";
+
 //#region src/commands/stale.ts
 async function runStaleCommand(targetDir, options, resolveStaleTargets) {
 	if (options.githubReview) {
@@ -33,7 +35,7 @@ async function runStaleCommand(targetDir, options, resolveStaleTargets) {
 	}
 }
 async function runGithubReview(targetDir, options, resolveStaleTargets) {
-	const { collectStaleReviewItems, createFailedStaleReviewItem, createWorkflowAdvisoryReviewItems, writeStaleReviewWorkflowFiles } = await import("./workflow-review-CrWkP7Hc.mjs");
+	const { collectStaleReviewItems, createFailedStaleReviewItem, createWorkflowAdvisoryReviewItems, writeStaleReviewWorkflowFiles } = await import("./workflow-review-CtOR1bgh.mjs");
 	const packageLabel = options.packageLabel ?? "workspace";
 	try {
 		const { reports, workflowAdvisories = [] } = await resolveStaleTargets(targetDir);
@@ -43,7 +45,7 @@ async function runGithubReview(targetDir, options, resolveStaleTargets) {
 		else console.log(`Wrote ${items.length} intent skill review item(s).`);
 	} catch (err) {
 		writeStaleReviewWorkflowFiles([createFailedStaleReviewItem(packageLabel)]);
-		const message = err instanceof Error ? err.message : String(err);
+		const message = isCliFailure(err) ? err.message : err instanceof Error ? err.message : String(err);
 		console.log(`Intent stale check failed: ${message}`);
 		console.log("Wrote a review PR body so maintainers can inspect the logs.");
 	}

package/dist/{staleness-CB3qpVCq.mjs → staleness-BoFc6DMh.mjs}

@@ -1,5 +1,5 @@
 import "./utils-9fhWAVua.mjs";
-import "./artifact-coverage-DgWuVqUp.mjs";
-import { n as checkStaleness, r as readPackageName, t as buildWorkspaceCoverageSignals } from "./staleness-BGFfic-Y.mjs";
+import "./artifact-coverage-nGwun1tt.mjs";
+import { n as checkStaleness, r as readPackageName, t as buildWorkspaceCoverageSignals } from "./staleness-DVFARTES.mjs";
 
 export { buildWorkspaceCoverageSignals, checkStaleness, readPackageName };

package/dist/{staleness-BGFfic-Y.mjs → staleness-DVFARTES.mjs}

@@ -1,5 +1,5 @@
 import { c as parseFrontmatter, r as findSkillFiles, u as toPosixPath } from "./utils-9fhWAVua.mjs";
-import { t as readIntentArtifacts } from "./artifact-coverage-DgWuVqUp.mjs";
+import { t as readIntentArtifacts } from "./artifact-coverage-nGwun1tt.mjs";
 import { existsSync, readFileSync } from "node:fs";
 import { isAbsolute, join, relative, resolve } from "node:path";
 import semver from "semver";

package/dist/{types-CIha6LtJ.d.mts → types-DhITOzhi.d.mts}

@@ -9,6 +9,7 @@ interface ScanResult {
   packageManager: PackageManager;
   packages: Array<IntentPackage>;
   warnings: Array<string>;
+  notices: Array<string>;
   conflicts: Array<VersionConflict>;
   nodeModules: {
     local: NodeModulesScanTarget;

package/dist/{validate-CZ65_6Li.mjs → validate-CnQBn6v9.mjs}

@@ -1,8 +1,8 @@
 import "./utils-9fhWAVua.mjs";
 import { n as findWorkspacePackages } from "./workspace-patterns-BffPlZ1D.mjs";
-import { t as resolveProjectContext } from "./project-context-BRIMzhi4.mjs";
+import { t as resolveProjectContext } from "./project-context-DBSibDPb.mjs";
 import { n as isCliFailure, t as fail } from "./cli-error-BrMXlbtx.mjs";
-import { l as printWarnings } from "./cli-support-DzDBzS3-.mjs";
+import { u as printWarnings } from "./cli-support-BevVu4gw.mjs";
 import { appendFileSync, existsSync, readFileSync } from "node:fs";
 import { basename, dirname, join, relative, resolve, sep } from "node:path";
 

package/dist/{workflow-review-CrWkP7Hc.mjs → workflow-review-CtOR1bgh.mjs}

@@ -1,3 +1,3 @@
-import { a as writeStaleReviewWorkflowFiles, i as createWorkflowAdvisoryReviewItems, n as collectStaleReviewItems, r as createFailedStaleReviewItem, t as buildStaleReviewBody } from "./workflow-review-D9Fg1G0P.mjs";
+import { a as writeStaleReviewWorkflowFiles, i as createWorkflowAdvisoryReviewItems, n as collectStaleReviewItems, r as createFailedStaleReviewItem, t as buildStaleReviewBody } from "./workflow-review-wL1Iu2Sf.mjs";
 
 export { collectStaleReviewItems, createFailedStaleReviewItem, createWorkflowAdvisoryReviewItems, writeStaleReviewWorkflowFiles };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tanstack/intent",
-  "version": "0.0.43",
+  "version": "0.1.0",
   "description": "Ship compositional knowledge for AI coding agents alongside your npm packages",
   "license": "MIT",
   "type": "module",

package/dist/artifact-coverage-DA26utB1.mjs

@@ -1,3 +0,0 @@
-import { t as readIntentArtifacts } from "./artifact-coverage-DgWuVqUp.mjs";
-
-export { readIntentArtifacts };

package/dist/cli-support-DV41R1Re.mjs

@@ -1,6 +0,0 @@
-import "./utils-9fhWAVua.mjs";
-import "./workspace-patterns-BffPlZ1D.mjs";
-import "./project-context-BRIMzhi4.mjs";
-import { a as printDebugInfo, c as scanOptionsFromGlobalFlags, i as getMetaDir, l as printWarnings, n as coreOptionsFromGlobalFlags, o as resolveStaleTargets, r as getCheckSkillsWorkflowAdvisories, s as scanIntentsOrFail, t as INTENT_CHECK_SKILLS_WORKFLOW_VERSION } from "./cli-support-DzDBzS3-.mjs";
-
-export { INTENT_CHECK_SKILLS_WORKFLOW_VERSION, coreOptionsFromGlobalFlags, getCheckSkillsWorkflowAdvisories, getMetaDir, printDebugInfo, printWarnings, resolveStaleTargets, scanIntentsOrFail, scanOptionsFromGlobalFlags };